@loopingai/core 0.4.0 → 0.5.1

package/dist/a2a/agent-stub.d.ts

@@ -58,4 +58,3 @@ export interface TaskListPage {
  * what makes a task unreachable from any other caller by construction.
  */
 export type AgentResolver = (identity: GatewayIdentity) => TaskAgent;
-//# sourceMappingURL=agent-stub.d.ts.map

package/dist/a2a/agent-stub.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=agent-stub.js.map

package/dist/a2a/caller.d.ts

@@ -21,4 +21,3 @@ import type { GatewayIdentity } from "./verify.js";
  * wants to name it.
  */
 export declare function callerContext(identity: GatewayIdentity): string;
-//# sourceMappingURL=caller.d.ts.map

package/dist/a2a/caller.js

@@ -31,4 +31,3 @@ export function callerContext(identity) {
     }
     return lines.join("\n");
 }
-//# sourceMappingURL=caller.js.map

package/dist/a2a/card.d.ts

@@ -156,4 +156,3 @@ export declare function publicCardJwks(privateJwk: JWK & {
 }): {
     keys: JWK[];
 };
-//# sourceMappingURL=card.d.ts.map

package/dist/a2a/card.js

@@ -159,4 +159,3 @@ export function publicCardJwks(privateJwk) {
     void _d;
     return { keys: [{ ...pub, use: "sig", alg: A2A_JWS_ALG }] };
 }
-//# sourceMappingURL=card.js.map

package/dist/a2a/context.d.ts

@@ -17,4 +17,3 @@ import type { GatewayIdentity } from "./verify.js";
 export declare function buildCallContext(request: Request, identity: GatewayIdentity, tenant: string): ServerCallContext;
 /** Echo back the extensions the handler actually activated (spec §14.2.2). */
 export declare function extensionHeaders(context: ServerCallContext): HeadersInit;
-//# sourceMappingURL=context.d.ts.map

package/dist/a2a/context.js

@@ -59,4 +59,3 @@ export function extensionHeaders(context) {
         return {};
     return { [HTTP_EXTENSION_HEADER]: Extensions.toServiceParameter(activated) };
 }
-//# sourceMappingURL=context.js.map

package/dist/a2a/executor.d.ts

@@ -82,4 +82,3 @@ export declare class A2AExecutor implements AgentExecutor {
      */
     cancelTask: (taskId: string, eventBus: ExecutionEventBus) => Promise<void>;
 }
-//# sourceMappingURL=executor.d.ts.map

package/dist/a2a/executor.js

@@ -104,4 +104,3 @@ export class A2AExecutor {
         eventBus.finished();
     };
 }
-//# sourceMappingURL=executor.js.map

package/dist/a2a/index.d.ts

@@ -30,4 +30,3 @@ export { buildCallContext, extensionHeaders } from "./context.js";
 export { DurableTaskStore } from "./task-store.js";
 export { A2AExecutor, workflowIdForMessage, ignoreAlreadyExists, type AcceptedTurn, type ExecutorConfig, type TurnStarter } from "./executor.js";
 export type { AgentResolver, TaskAgent, TaskListPage, TaskListQuery } from "./agent-stub.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/a2a/index.js

@@ -29,4 +29,3 @@ export { textPart, partsText, textOf, agentTextMessage, inboundText, InboundPart
 export { buildCallContext, extensionHeaders } from "./context.js";
 export { DurableTaskStore } from "./task-store.js";
 export { A2AExecutor, workflowIdForMessage, ignoreAlreadyExists } from "./executor.js";
-//# sourceMappingURL=index.js.map

package/dist/a2a/notify.d.ts

@@ -103,4 +103,3 @@ export declare function signCallbackJwt(privateJwk: JWK & {
  * workflow's `notify` step) can decide whether a non-2xx warrants a retry.
  */
 export declare function postNotification(url: string, token: string, jwt: string, task: Task): Promise<Response>;
-//# sourceMappingURL=notify.d.ts.map

package/dist/a2a/notify.js

@@ -177,4 +177,3 @@ export async function postNotification(url, token, jwt, task) {
         body
     });
 }
-//# sourceMappingURL=notify.js.map

package/dist/a2a/parts.d.ts

@@ -43,4 +43,3 @@ export declare function agentTextMessage(input: {
     contextId: string;
     taskId: string;
 }): PlainMessage;
-//# sourceMappingURL=parts.d.ts.map

package/dist/a2a/parts.js

@@ -92,4 +92,3 @@ export function agentTextMessage(input) {
         referenceTaskIds: []
     };
 }
-//# sourceMappingURL=parts.js.map

package/dist/a2a/push.d.ts

@@ -68,4 +68,3 @@ export interface PushChannel {
  * one card and the gateway pins one key for every agent on it.
  */
 export declare function createPushChannel(signingKey: string, push: TurnPushContext): PushChannel;
-//# sourceMappingURL=push.d.ts.map

package/dist/a2a/push.js

@@ -51,4 +51,3 @@ export function createPushChannel(signingKey, push) {
         }
     };
 }
-//# sourceMappingURL=push.js.map

package/dist/a2a/task-store.d.ts

@@ -42,4 +42,3 @@ export declare class DurableTaskStore implements TaskStore {
      */
     list(params: ListTasksRequest): Promise<ListTasksResponse>;
 }
-//# sourceMappingURL=task-store.d.ts.map

package/dist/a2a/task-store.js

@@ -97,4 +97,3 @@ function parseTimestamp(iso) {
     const ms = Date.parse(iso);
     return Number.isNaN(ms) ? undefined : ms;
 }
-//# sourceMappingURL=task-store.js.map

package/dist/a2a/task.d.ts

@@ -83,4 +83,3 @@ export interface PlainTask {
  */
 export declare function taskStateLabel(state: TaskState): string;
 export {};
-//# sourceMappingURL=task.d.ts.map

package/dist/a2a/task.js

@@ -13,4 +13,3 @@ export function taskStateLabel(state) {
         .toLowerCase()
         .replace(/_/g, "-");
 }
-//# sourceMappingURL=task.js.map

package/dist/a2a/verify.d.ts

@@ -74,4 +74,3 @@ export declare function verifyGatewayToken(token: string, opts: VerifyOptions):
     identity: GatewayIdentity;
     tenant: string;
 }>;
-//# sourceMappingURL=verify.d.ts.map

package/dist/a2a/verify.js

@@ -137,4 +137,3 @@ export async function verifyGatewayToken(token, opts) {
         throw new GatewayAuthError(err.message);
     }
 }
-//# sourceMappingURL=verify.js.map

package/dist/agent/budget.d.ts

@@ -44,4 +44,3 @@ export declare const newTurnBudget: (allowance: number) => TurnBudget;
  * attempt as the only one that can ever begin overdrawn.
  */
 export declare const stepAllowance: (maxTurns: number, spent: number) => number;
-//# sourceMappingURL=budget.d.ts.map

package/dist/agent/budget.js

@@ -40,4 +40,3 @@ export const newTurnBudget = (allowance) => ({
  * attempt as the only one that can ever begin overdrawn.
  */
 export const stepAllowance = (maxTurns, spent) => Math.max(1, maxTurns - spent);
-//# sourceMappingURL=budget.js.map

package/dist/agent/control.d.ts

@@ -107,4 +107,3 @@ export declare function controlTools(opts: {
 }): ControlTool[];
 /** The tools as the SDK takes them, in declaration order. */
 export declare function controlToolSet(tools: ControlTool[]): ToolSet;
-//# sourceMappingURL=control.d.ts.map

package/dist/agent/control.js

@@ -112,4 +112,3 @@ function issues(error) {
 export function controlToolSet(tools) {
     return Object.fromEntries(tools.map((c) => [c.name, c.tool]));
 }
-//# sourceMappingURL=control.js.map

package/dist/agent/final-reply.d.ts

@@ -46,4 +46,3 @@ export declare const finalReplyInputSchema: z.ZodObject<{
 export declare const finalReplyTool: import("ai").Tool<{
     text: string;
 }, never, import("@ai-sdk/provider-utils").Context>;
-//# sourceMappingURL=final-reply.d.ts.map

package/dist/agent/final-reply.js

@@ -49,4 +49,3 @@ export const finalReplyTool = tool({
     description: "Answer the user and end this round. Use this whenever the request is yours to answer — anything about this conversation, your own history, memory, or tools, and anything you can settle with the tools available to you here, including work that has already come back to you.",
     inputSchema: finalReplyInputSchema
 });
-//# sourceMappingURL=final-reply.js.map

package/dist/agent/history.d.ts

@@ -95,4 +95,3 @@ export declare function sessionMessage(role: "user" | "assistant", text: string)
 export declare function sessionText(m: SessionMessage): string;
 /** Convert stored history to AI-SDK model messages (user/assistant text only). */
 export declare function toModelMessages(history: SessionMessage[]): ModelMessage[];
-//# sourceMappingURL=history.d.ts.map

package/dist/agent/history.js

@@ -131,4 +131,3 @@ export function toModelMessages(history) {
         content: sessionText(m)
     }));
 }
-//# sourceMappingURL=history.js.map

package/dist/agent/index.d.ts

@@ -25,4 +25,3 @@ export { deterministicSessionMessage, finalReplyMessageId, parseRoundAckMessageI
 export { buildIntermediateContentHandler, isTransientAiError, type OnContent } from "./inference.js";
 export { ControlCallError, controlTools, controlToolSet, type ControlTool, type TurnDecision } from "./control.js";
 export { FINAL_REPLY_TOOL_NAME, finalReplyInputSchema, finalReplyTool } from "./final-reply.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/agent/index.js

@@ -25,4 +25,3 @@ export { deterministicSessionMessage, finalReplyMessageId, parseRoundAckMessageI
 export { buildIntermediateContentHandler, isTransientAiError } from "./inference.js";
 export { ControlCallError, controlTools, controlToolSet } from "./control.js";
 export { FINAL_REPLY_TOOL_NAME, finalReplyInputSchema, finalReplyTool } from "./final-reply.js";
-//# sourceMappingURL=index.js.map

package/dist/agent/inference.d.ts

@@ -49,4 +49,3 @@ export declare function isTransientAiError(err: unknown): boolean;
  * steps are skipped. Default `[]` (the subagent loop has no control tools).
  */
 export declare function buildIntermediateContentHandler(onContent: OnContent, terminalToolNames?: string[]): (step: StepResult<ToolSet>) => Promise<void>;
-//# sourceMappingURL=inference.d.ts.map

package/dist/agent/inference.js

@@ -76,4 +76,3 @@ export function buildIntermediateContentHandler(onContent, terminalToolNames = [
             await onContent(content, i);
     };
 }
-//# sourceMappingURL=inference.js.map

package/dist/agent/model.d.ts

@@ -65,4 +65,3 @@ export interface ModelRuntimeDeps {
  * protects a consumer who builds their runtime early.
  */
 export declare function createModelRuntime(deps: ModelRuntimeDeps): ModelRuntime;
-//# sourceMappingURL=model.d.ts.map

package/dist/agent/model.js

@@ -46,4 +46,3 @@ export function createModelRuntime(deps) {
         }
     };
 }
-//# sourceMappingURL=model.js.map

package/dist/agent/session.d.ts

@@ -99,4 +99,3 @@ export declare function notifyingCompaction(base: CompactFn, onMessagesDisplaced
  */
 export declare function buildAgentSession(agent: SessionHost, model: LanguageModel, opts: AgentSessionOptions): Session;
 export {};
-//# sourceMappingURL=session.d.ts.map

package/dist/agent/session.js

@@ -80,4 +80,3 @@ export function buildAgentSession(agent, model, opts) {
         .onCompaction(compact)
         .compactAfter(opts.compactAfterTokens);
 }
-//# sourceMappingURL=session.js.map

package/dist/config.d.ts

@@ -181,4 +181,3 @@ export declare class ConfigError extends Error {
  * reads the same object.
  */
 export declare function resolveConfig(overrides: CoreConfigOverrides): CoreConfig;
-//# sourceMappingURL=config.d.ts.map

package/dist/config.js

@@ -108,4 +108,3 @@ export function resolveConfig(overrides) {
     }
     return config;
 }
-//# sourceMappingURL=config.js.map

package/dist/contract/index.d.ts

@@ -7,4 +7,3 @@
 export { PLUGIN_CONTRACT_VERSION, definePlugin, type AgentPlugin, type EmitProgress, type EnrichResultContext, type MainAgentToolContext, type PluginRequirements, type RecipeToolSet, type ResolveRuntimeContext, type ToolFamilyBuilder, type ToolFamilyContext, type TurnGateContext } from "./plugin.js";
 export type { DelegationNames, RecipeLimits, ResolvedRecipe, SubtaskParams, SubtaskParamsSchema, SubtaskParamsShape, SubtaskTypeSpec, ValidatedRecipe } from "./recipe.js";
 export { RecipeValidationError, resolveLimits, validateRecipe, type RecipePolicy } from "./validation.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/contract/index.js

@@ -6,4 +6,3 @@
  */
 export { PLUGIN_CONTRACT_VERSION, definePlugin } from "./plugin.js";
 export { RecipeValidationError, resolveLimits, validateRecipe } from "./validation.js";
-//# sourceMappingURL=index.js.map

package/dist/contract/plugin.d.ts

@@ -262,4 +262,3 @@ export interface AgentPlugin<TRuntime = SubtaskRuntime> {
 export declare function definePlugin<TRuntime = SubtaskRuntime>(plugin: Omit<AgentPlugin<TRuntime>, "contractVersion"> & {
     contractVersion?: number;
 }): AgentPlugin<TRuntime>;
-//# sourceMappingURL=plugin.d.ts.map

package/dist/contract/plugin.js

@@ -36,4 +36,3 @@ export function definePlugin(plugin) {
         contractVersion: plugin.contractVersion ?? PLUGIN_CONTRACT_VERSION
     };
 }
-//# sourceMappingURL=plugin.js.map

package/dist/contract/recipe.d.ts

@@ -76,8 +76,6 @@ export type RecipeLimits = AgentLimits;
 export interface ResolvedRecipe {
     key: string;
     version: number;
-    primaryModelId: string;
-    fallbackModelId: string;
     /** Required, never defaulted — see `validateRecipe`. */
     soul: string;
     toolFamilies: string[];
@@ -104,6 +102,20 @@ export interface ResolvedRecipe {
  */
 export interface ValidatedRecipe extends ResolvedRecipe {
     limits: RecipeLimits;
+    /**
+     * The pair this recipe will actually run on — **the host's, always**.
+     *
+     * These exist only here, never on {@link ResolvedRecipe}, and that asymmetry
+     * is the design: a recipe cannot state a model, so the only way to hold one is
+     * to have been through {@link validateRecipe}, which copies the host's. Recipe
+     * data has no path to influence them.
+     *
+     * Guaranteed non-empty and guaranteed distinct, because `resolveConfig`
+     * refuses a config that is either — so the fallback is always a genuinely
+     * different model from the primary, which is the entire point of having one.
+     */
+    primaryModelId: string;
+    fallbackModelId: string;
 }
 /**
  * One entry in the closed set of Subtask types the main agent may delegate,
@@ -167,4 +179,3 @@ export interface SubtaskTypeSpec {
     /** The execution configuration this type runs under. */
     recipe: ResolvedRecipe;
 }
-//# sourceMappingURL=recipe.d.ts.map

package/dist/contract/recipe.js

@@ -1,2 +1 @@
 export {};
-//# sourceMappingURL=recipe.js.map

package/dist/contract/validation.d.ts

@@ -4,12 +4,12 @@ import type { ResolvedRecipe, ValidatedRecipe } from "./recipe.js";
  * The capability boundary every recipe passes through, whatever declared it.
  *
  * This module imports no domain. It owns only what code must be able to say
- * about *any* recipe: which models and tool families it may select, and how a
- * malformed one is made safe or refused. A domain cannot widen its
- * *capabilities* by declaring them, because the allowlists do not come from the
- * declaration — they come from {@link RecipePolicy}, which the host builds from
- * its resolved config and its installed plugins. Its budget is the deliberate
- * exception; see {@link resolveLimits}.
+ * about *any* recipe: which tool families it may select, which models it runs
+ * on, and how a malformed one is made safe or refused. A domain cannot widen
+ * its *capabilities* by declaring them — the legal tool families come from
+ * {@link RecipePolicy}, which the host builds from its installed plugins, and
+ * the model pair comes from the host's config with no declaration involved at
+ * all. Its budget is the deliberate exception; see {@link resolveLimits}.
  *
  * In the predecessor repo the two allowlists were module constants, and one of
  * them hardcoded a domain key (`"arc-game"`) inside otherwise generic code. That
@@ -18,15 +18,19 @@ import type { ResolvedRecipe, ValidatedRecipe } from "./recipe.js";
  */
 export interface RecipePolicy {
     /**
-     * Model ids a recipe may select — normally the two configured chat models, the
-     * only ones proven with this tool-loop pipeline. Extend deliberately, one
-     * validated model at a time.
+     * The pair every recipe runs on: the host agent's own, copied verbatim onto
+     * each {@link ValidatedRecipe}.
+     *
+     * There is no allowlist any more, because there is nothing to check against
+     * it — a recipe cannot state a model. `modelAllowlist` existed to police
+     * recipe-stated preferences, and it could only ever contain these same two
+     * ids, so the "preference" it policed could never reach a third model. It
+     * could only swap the primary for the fallback, which is not a capability
+     * anyone wants and which broke the pair's distinctness.
      */
-    modelAllowlist: ReadonlySet<string>;
-    /** Substituted when a recipe names a primary model outside the allowlist. */
-    defaultPrimaryModelId: string;
-    /** Substituted when a recipe names a fallback model outside the allowlist. */
-    defaultFallbackModelId: string;
+    primaryModelId: string;
+    /** See {@link primaryModelId}. Guaranteed distinct from it by `resolveConfig`. */
+    fallbackModelId: string;
     /**
      * Tool-family keys the runtime recognizes — derived from the installed
      * plugins, never hardcoded.
@@ -69,12 +73,12 @@ export declare class RecipeValidationError extends Error {
 }
 /**
  * Code-owned defensive validation of an already-resolved recipe. Returns a
- * normalized copy (never mutates the input): a model id outside the policy's
- * allowlist is substituted with the default for its slot — independently per
- * slot — and unknown tool families are dropped (deduped, order-preserving).
+ * normalized copy (never mutates the input): the host's model pair is stamped
+ * on, and unknown tool families are dropped (deduped, order-preserving).
  * Applied by the parent when it resolves a recipe and re-applied by the subagent
  * on its inbound request, so recipe data can never select arbitrary models or
- * tools.
+ * tools — models because there is no field to select one with, tools because
+ * the legal set comes from the installed plugins rather than the declaration.
  *
  * The split between what is normalized and what is refused follows one rule:
  * **the host declares a baseline ⇒ merge; it does not ⇒ require.** `limits`
@@ -85,4 +89,3 @@ export declare class RecipeValidationError extends Error {
  * house default can guess. Both fail the recipe outright.
  */
 export declare function validateRecipe(recipe: ResolvedRecipe, policy: RecipePolicy): ValidatedRecipe;
-//# sourceMappingURL=validation.d.ts.map

package/dist/contract/validation.js

@@ -34,12 +34,12 @@ export class RecipeValidationError extends Error {
 }
 /**
  * Code-owned defensive validation of an already-resolved recipe. Returns a
- * normalized copy (never mutates the input): a model id outside the policy's
- * allowlist is substituted with the default for its slot — independently per
- * slot — and unknown tool families are dropped (deduped, order-preserving).
+ * normalized copy (never mutates the input): the host's model pair is stamped
+ * on, and unknown tool families are dropped (deduped, order-preserving).
  * Applied by the parent when it resolves a recipe and re-applied by the subagent
  * on its inbound request, so recipe data can never select arbitrary models or
- * tools.
+ * tools — models because there is no field to select one with, tools because
+ * the legal set comes from the installed plugins rather than the declaration.
  *
  * The split between what is normalized and what is refused follows one rule:
  * **the host declares a baseline ⇒ merge; it does not ⇒ require.** `limits`
@@ -63,14 +63,22 @@ export function validateRecipe(recipe, policy) {
     const toolFamilies = [...new Set(recipe.toolFamilies)].filter((family) => policy.knownToolFamilies.has(family));
     return {
         ...recipe,
-        primaryModelId: policy.modelAllowlist.has(recipe.primaryModelId)
-            ? recipe.primaryModelId
-            : policy.defaultPrimaryModelId,
-        fallbackModelId: policy.modelAllowlist.has(recipe.fallbackModelId)
-            ? recipe.fallbackModelId
-            : policy.defaultFallbackModelId,
+        // The host's pair, copied. Not selected, not substituted, not merged —
+        // there is nothing on a `ResolvedRecipe` to select *from*.
+        //
+        // This used to substitute a recipe's stated preference against
+        // an allowlist, per slot and independently. That produced a real defect:
+        // a recipe preferring the host's *fallback* as its primary, and stating no
+        // fallback of its own, resolved to the same id in both slots — so the
+        // fallback retried the model that had just failed, defeating the distinct-
+        // pair invariant `resolveConfig` enforces one layer up.
+        //
+        // Copying wholesale makes that unrepresentable: the pair here is exactly the
+        // pair the agent configured, which `resolveConfig` has already guaranteed is
+        // non-empty and distinct.
+        primaryModelId: policy.primaryModelId,
+        fallbackModelId: policy.fallbackModelId,
         toolFamilies,
         limits: resolveLimits(recipe.limits, policy.baselineLimits)
     };
 }
-//# sourceMappingURL=validation.js.map

package/dist/db/db.d.ts

@@ -146,4 +146,3 @@ export declare class AgentDB {
      */
     private applyStores;
 }
-//# sourceMappingURL=db.d.ts.map

package/dist/db/db.js

@@ -88,4 +88,3 @@ export class AgentDB {
         }
     }
 }
-//# sourceMappingURL=db.js.map

package/dist/db/index.d.ts

@@ -6,4 +6,3 @@ export { AgentDB, PLUGIN_MIGRATIONS_TABLE, type AgentDBOptions, type DB, type Pl
 export { notifyTasks, subtasks } from "./schema.js";
 export { makeTasks, stateOf, type TaskListQuery } from "./models/tasks.js";
 export { makeSubtasks, type SubtaskModelOptions } from "./models/subtasks.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/db/index.js

@@ -6,4 +6,3 @@ export { AgentDB, PLUGIN_MIGRATIONS_TABLE } from "./db.js";
 export { notifyTasks, subtasks } from "./schema.js";
 export { makeTasks, stateOf } from "./models/tasks.js";
 export { makeSubtasks } from "./models/subtasks.js";
-//# sourceMappingURL=index.js.map

package/dist/db/migrations/index.d.ts

@@ -18,4 +18,3 @@ import type { migrate } from "drizzle-orm/durable-sqlite/migrator";
 type MigrationConfig = Parameters<typeof migrate>[1];
 declare const dbMigrations: MigrationConfig;
 export default dbMigrations;
-//# sourceMappingURL=index.d.ts.map

package/dist/db/migrations/index.js

@@ -51,4 +51,3 @@ CREATE INDEX \`idx_subtasks_created_at\` ON \`subtasks\` (\`created_at\`);`
     }
 };
 export default dbMigrations;
-//# sourceMappingURL=index.js.map

package/dist/db/models/subtasks.d.ts

@@ -99,4 +99,3 @@ export declare function makeSubtasks(db: DB, opts: SubtaskModelOptions): {
     /** Delete Subtasks older than 30 days (called by the weekly maintenance cron). */
     cleanup(): void;
 };
-//# sourceMappingURL=subtasks.d.ts.map

package/dist/db/models/subtasks.js

@@ -282,4 +282,3 @@ export function makeSubtasks(db, opts) {
         }
     };
 }
-//# sourceMappingURL=subtasks.js.map

package/dist/db/models/tasks.d.ts

@@ -103,4 +103,3 @@ export declare function makeTasks(db: DB): {
     /** Delete all tasks older than 30 days (called by the maintenance cron). */
     cleanup(): void;
 };
-//# sourceMappingURL=tasks.d.ts.map

package/dist/db/models/tasks.js

@@ -239,4 +239,3 @@ function project(task, query) {
             : history.slice(Math.max(0, history.length - query.historyLength))
     };
 }
-//# sourceMappingURL=tasks.js.map

package/dist/db/schema.d.ts

@@ -485,4 +485,3 @@ export declare const subtasks: import("drizzle-orm/sqlite-core").SQLiteTableWith
     };
     dialect: "sqlite";
 }>;
-//# sourceMappingURL=schema.d.ts.map

package/dist/db/schema.js

@@ -88,4 +88,3 @@ export const subtasks = sqliteTable("subtasks", {
     index("idx_subtasks_status").on(table.status),
     index("idx_subtasks_created_at").on(table.createdAt)
 ]);
-//# sourceMappingURL=schema.js.map

package/dist/env.d.ts

@@ -51,4 +51,3 @@ export type CoreEnv = AiEnv & A2ASecretsEnv;
  * rather than as an empty allowlist that rejects every caller identically.
  */
 export declare function parseGatewayOrigins(raw: string): string[];
-//# sourceMappingURL=env.d.ts.map

package/dist/env.js

@@ -45,4 +45,3 @@ export function parseGatewayOrigins(raw) {
         throw new Error("GATEWAY_ORIGINS is empty");
     return parsed;
 }
-//# sourceMappingURL=env.js.map

package/dist/host/agent.d.ts

@@ -108,9 +108,9 @@ export declare abstract class LoopingAgent<TEnv extends Cloudflare.Env & AiEnv &
      * runtime exists.
      *
      * Deliberately not `this.config` — that would be a cycle. `resolveConfig` is
-     * cheap and pure and fills in core's defaults, so this is the same result the
-     * runtime lands on; that matters because a recipe's models are checked against
-     * `policy.modelAllowlist`, which is built from these very values.
+     * cheap and pure and fills in core's baseline, so this is the same result the
+     * runtime lands on; that matters because every recipe runs on exactly this
+     * pair — `RecipePolicy` carries it and `validateRecipe` stamps it on.
      */
     private resolvedModelIds;
     onStart(): Promise<void>;
@@ -214,4 +214,3 @@ export declare abstract class LoopingAgent<TEnv extends Cloudflare.Env & AiEnv &
      */
     protected onTaskCanceled(_taskId: string): Promise<void>;
 }
-//# sourceMappingURL=agent.d.ts.map

package/dist/host/agent.js

@@ -120,8 +120,6 @@ export class LoopingAgent extends Agent {
             storage: this.ctx.storage,
             // A thunk, not a value — see `identityKey`.
             callerKey: () => this.requireIdentityKey(),
-            primaryModelId: model.chatModelId,
-            fallbackModelId: model.fallbackChatModelId,
             aiGatewayId: model.aiGatewayId
         };
     }
@@ -130,9 +128,9 @@ export class LoopingAgent extends Agent {
      * runtime exists.
      *
      * Deliberately not `this.config` — that would be a cycle. `resolveConfig` is
-     * cheap and pure and fills in core's defaults, so this is the same result the
-     * runtime lands on; that matters because a recipe's models are checked against
-     * `policy.modelAllowlist`, which is built from these very values.
+     * cheap and pure and fills in core's baseline, so this is the same result the
+     * runtime lands on; that matters because every recipe runs on exactly this
+     * pair — `RecipePolicy` carries it and `validateRecipe` stamps it on.
      */
     resolvedModelIds() {
         return resolveConfig(this.agentConfig()).model;
@@ -303,4 +301,3 @@ export class LoopingAgent extends Agent {
      */
     async onTaskCanceled(_taskId) { }
 }
-//# sourceMappingURL=agent.js.map

package/dist/host/index.d.ts

@@ -18,4 +18,3 @@
  */
 export { LoopingAgent } from "./agent.js";
 export type { PluginHost } from "./plugin-host.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/host/index.js

@@ -17,4 +17,3 @@
  * round loop, which is opt-in and takes its prompt copy from the agent.
  */
 export { LoopingAgent } from "./agent.js";
-//# sourceMappingURL=index.js.map