@looprun-ai/server 0.6.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,75 @@
+# @looprun-ai/server
+
+Expose governed [LoopRun](https://looprun.ai) agents behind an **OpenAI-compatible endpoint** —
+the "agent-as-model" pattern. Any harness that can point a custom provider at a `base_url`
+(personal-agent frameworks, Open WebUI, IDE assistants, plain OpenAI SDKs) calls a governed agent
+as if it were a model: the full governed turn (guards → tools → redrive) runs inside each
+`/v1/chat/completions` request and returns one final assistant message.
+
+```ts
+import { createModelServer } from '@looprun-ai/server';
+import { LoopRunAgent } from '@looprun-ai/mastra';
+
+const agent = new LoopRunAgent({ spec, world: worldFactory, toolDefs, model });
+const server = await createModelServer({ agents: { 'inbox-triage': agent }, port: 8099 });
+console.log(server.url); // http://127.0.0.1:8099/v1
+```
+
+Point the harness at it:
+
+```yaml
+# e.g. a harness config.yaml
+model:
+  provider: custom
+  base_url: "http://127.0.0.1:8099/v1"   # model field selects the agent: "inbox-triage"
+  context_length: 128000
+```
+
+## The mapping law (what the facade does with the incoming request)
+
+The server implements the protocol as a **facade** — the harness believes it is talking to a
+model, so parts of the request that would fight the spec are deliberately not honored:
+
+| Incoming | Treatment | Why |
+|---|---|---|
+| `model` | routes to the registered agent | one server, N agents as N "models" |
+| last `user` message | the governed turn's input | the agent's own session is the canonical memory |
+| earlier history | **ignored** (transport-only) | harnesses compress/rewrite it; replay would desync the governed state |
+| `system` message | **discarded** | the AgentSpec renders its own trunk (byte-stable, cache-friendly) |
+| `tools`, `tool_choice` | **ignored** | the spec owns the tool surface; guards govern every call |
+| `temperature` etc. | **ignored** | `spec.controls.sampling` governs |
+| `stream: true` | honored (see below) | |
+
+## Sessions
+
+The protocol is stateless; the agent is stateful. Session id resolution, first hit wins:
+
+1. `x-looprun-session` header (explicit — always safe; OpenAI SDKs support `default_headers`),
+2. the OpenAI-standard `user` field,
+3. fingerprint fallback: hash of `model` + the **first** user message — stable for a conversation
+   unless the harness compresses that message away (mitigated by the high `context_length`
+   reported by `/v1/models`). A changed fingerprint starts a fresh session: degraded, never unsafe.
+
+Concurrent requests on the same session serialize; different sessions run concurrently.
+Optional `sessionTtlMs` evicts idle sessions via `agent.endSession()`.
+
+## Streaming
+
+`stream: true` still runs the governed turn to completion (streaming cannot be governed at the
+reply level), then emits a valid SSE stream: an immediate role delta, `: keepalive` comments while
+the turn runs, one content delta with the full governed text, a finish chunk, `[DONE]`.
+
+## Observability
+
+Every response carries a non-standard `looprun` field (`sessionId`, `turnIndex`, `corrections`,
+`exhausted`, `violations`) — OpenAI SDKs ignore it; integration harnesses can assert on it.
+`onTurn` fires server-side after every governed turn with the same metadata.
+
+## API
+
+- `createModelServer(config) → { url, port, handler, close() }` — node:http server, ephemeral
+  port by default.
+- `createOpenAiHandler(config) → (req: Request) => Promise<Response>` — the bare fetch-style
+  handler (embed it in any web server).
+- `config`: `agents` (model id → `LoopRunAgent`), `port`, `hostname`, `contextLength`,
+  `apiKey` (optional bearer check), `resolveSession`, `sessionTtlMs`, `onTurn`.

package/dist/handler.d.ts

@@ -0,0 +1,9 @@
+import { SessionLocks, SessionTtl } from './session.js';
+import type { ModelServerConfig } from './types.js';
+export declare const DEFAULT_CONTEXT_LENGTH = 128000;
+export interface HandlerInternals {
+    locks: SessionLocks;
+    ttl: SessionTtl;
+}
+export declare function createOpenAiHandler(config: ModelServerConfig, internals?: HandlerInternals): (req: Request) => Promise<Response>;
+//# sourceMappingURL=handler.d.ts.map

package/dist/handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAkC,MAAM,cAAc,CAAC;AAExF,OAAO,KAAK,EAA8C,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEhG,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAmB9C,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,UAAU,CAAC;CACjB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,iBAAiB,EACzB,SAAS,GAAE,gBAAuE,GACjF,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA4FrC"}

package/dist/handler.js

@@ -0,0 +1,94 @@
+import { buildCompletion, buildModelList, buildUsage, completionId, errorBody, } from './openai.js';
+import { SessionLocks, SessionTtl, lastUserText, resolveSessionId } from './session.js';
+import { streamCompletion } from './sse.js';
+export const DEFAULT_CONTEXT_LENGTH = 128_000;
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json' },
+    });
+}
+function envelopeMeta(meta) {
+    return {
+        sessionId: meta.sessionId,
+        turnIndex: meta.turnIndex,
+        corrections: meta.corrections,
+        exhausted: meta.exhausted,
+        violations: meta.violations,
+    };
+}
+export function createOpenAiHandler(config, internals = { locks: new SessionLocks(), ttl: new SessionTtl() }) {
+    const contextLength = config.contextLength ?? DEFAULT_CONTEXT_LENGTH;
+    const { locks, ttl } = internals;
+    return async function handle(req) {
+        const url = new URL(req.url);
+        const path = url.pathname.replace(/\/+$/, '');
+        if (config.apiKey) {
+            const auth = req.headers.get('authorization') ?? '';
+            if (auth !== `Bearer ${config.apiKey}`) {
+                return json(401, errorBody('Incorrect API key provided.', 'invalid_request_error', 'invalid_api_key'));
+            }
+        }
+        if (req.method === 'GET' && path === '/v1/models') {
+            return json(200, buildModelList(Object.keys(config.agents), contextLength));
+        }
+        if (req.method === 'POST' && path === '/v1/chat/completions') {
+            let body;
+            try {
+                body = (await req.json());
+            }
+            catch {
+                return json(400, errorBody('Request body is not valid JSON.', 'invalid_request_error', null));
+            }
+            const agent = body.model ? config.agents[body.model] : undefined;
+            if (!agent) {
+                return json(404, errorBody(`The model '${String(body.model)}' does not exist.`, 'invalid_request_error', 'model_not_found', 'model'));
+            }
+            if (!Array.isArray(body.messages) || body.messages.length === 0) {
+                return json(400, errorBody("Missing required parameter: 'messages'.", 'invalid_request_error', null, 'messages'));
+            }
+            const userText = lastUserText(body.messages);
+            if (userText === null) {
+                return json(400, errorBody('No user message with text content found in `messages`.', 'invalid_request_error', null, 'messages'));
+            }
+            const sessionId = (config.resolveSession ?? resolveSessionId)(body, req.headers);
+            const id = completionId();
+            const runTurn = () => locks.run(`${body.model} ${sessionId}`, async () => {
+                const result = await agent.generate(userText, { loopRun: { sessionId } });
+                const meta = result.looprun;
+                ttl.touch(body.model, sessionId);
+                config.onTurn?.({ model: body.model, sessionId, meta });
+                return {
+                    text: String(result.text ?? ''),
+                    usage: buildUsage(userText, String(result.text ?? '')),
+                    looprun: envelopeMeta(meta),
+                };
+            });
+            if (body.stream === true) {
+                const stream = streamCompletion({
+                    id,
+                    model: body.model,
+                    turn: runTurn(),
+                    onError: (error) => errorBody(error instanceof Error ? error.message : 'The governed turn failed.', 'api_error', 'api_error'),
+                });
+                return new Response(stream, {
+                    status: 200,
+                    headers: {
+                        'content-type': 'text/event-stream; charset=utf-8',
+                        'cache-control': 'no-cache',
+                        connection: 'keep-alive',
+                    },
+                });
+            }
+            try {
+                const turn = await runTurn();
+                return json(200, buildCompletion({ id, model: body.model, text: turn.text, usage: turn.usage, looprun: turn.looprun }));
+            }
+            catch (error) {
+                return json(500, errorBody(error instanceof Error ? error.message : 'The governed turn failed.', 'api_error', 'api_error'));
+            }
+        }
+        return json(404, errorBody(`Unknown request URL: ${req.method} ${path}.`, 'invalid_request_error', null));
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AASA,OAAO,EACL,eAAe,EACf,cAAc,EACd,UAAU,EACV,YAAY,EACZ,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAG5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAE9C,SAAS,IAAI,CAAC,MAAc,EAAE,IAA6B;IACzD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,IAAuB;IAC3C,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAOD,MAAM,UAAU,mBAAmB,CACjC,MAAyB,EACzB,YAA8B,EAAE,KAAK,EAAE,IAAI,YAAY,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE;IAElF,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;IACrE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;IAEjC,OAAO,KAAK,UAAU,MAAM,CAAC,GAAY;QACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE9C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,IAAI,KAAK,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACvC,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,6BAA6B,EAAE,uBAAuB,EAAE,iBAAiB,CAAC,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAClD,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC7D,IAAI,IAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACrD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,iCAAiC,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC,CAAC;YAChG,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,IAAI,CACT,GAAG,EACH,SAAS,CAAC,cAAc,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,OAAO,CAAC,CACpH,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,yCAAyC,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;YACpH,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,OAAO,IAAI,CACT,GAAG,EACH,SAAS,CAAC,wDAAwD,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,CAAC,CAC/G,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACjF,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;YAE1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,EAAE,KAAK,IAAI,EAAE;gBACjD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,OAA4B,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACjC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBAC/B,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;oBACtD,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC;iBAC5B,CAAC;YACJ,CAAC,CAAC,CAAC;YAEL,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC;oBAC9B,EAAE;oBACF,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,OAAO,EAAE;oBACf,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,CAAC;iBAC5G,CAAC,CAAC;gBACH,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE;wBACP,cAAc,EAAE,kCAAkC;wBAClD,eAAe,EAAE,UAAU;wBAC3B,UAAU,EAAE,YAAY;qBACzB;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC1H,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CACT,GAAG,EACH,SAAS,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,EAAE,WAAW,EAAE,WAAW,CAAC,CAC1G,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,wBAAwB,GAAG,CAAC,MAAM,IAAI,IAAI,GAAG,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @looprun-ai/server — expose governed LoopRunAgents behind an OpenAI-compatible endpoint.
+ *
+ * `createModelServer({ agents: { 'my-agent': agent } })` serves `/v1/chat/completions` +
+ * `/v1/models`; any harness that speaks the OpenAI protocol (custom provider + base_url) then
+ * calls the governed agent as if it were a model. The full governed turn — guards, tools,
+ * redrive — runs inside each request and returns one final assistant message.
+ */
+export { createOpenAiHandler, DEFAULT_CONTEXT_LENGTH } from './handler.js';
+export { createModelServer } from './server.js';
+export { SESSION_HEADER, fingerprintSession, lastUserText, resolveSessionId } from './session.js';
+export type { CompletionRequestBody, LoopRunEnvelopeMeta, ModelServer, ModelServerConfig, TurnEvent, WireMessage, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClG,YAAY,EACV,qBAAqB,EACrB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,SAAS,EACT,WAAW,GACZ,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,12 @@
+/**
+ * @looprun-ai/server — expose governed LoopRunAgents behind an OpenAI-compatible endpoint.
+ *
+ * `createModelServer({ agents: { 'my-agent': agent } })` serves `/v1/chat/completions` +
+ * `/v1/models`; any harness that speaks the OpenAI protocol (custom provider + base_url) then
+ * calls the governed agent as if it were a model. The full governed turn — guards, tools,
+ * redrive — runs inside each request and returns one final assistant message.
+ */
+export { createOpenAiHandler, DEFAULT_CONTEXT_LENGTH } from './handler.js';
+export { createModelServer } from './server.js';
+export { SESSION_HEADER, fingerprintSession, lastUserText, resolveSessionId } from './session.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/openai.d.ts

@@ -0,0 +1,37 @@
+/** OpenAI chat-completion envelope builders (non-stream + stream chunks) and error shapes. */
+import type { LoopRunEnvelopeMeta } from './types.js';
+/** Rough token estimate (ceil(chars/4), never zero) — harnesses expect nonzero usage. */
+export declare function estimateTokens(text: string): number;
+export interface CompletionUsage {
+    prompt_tokens: number;
+    completion_tokens: number;
+    total_tokens: number;
+}
+export declare function buildUsage(promptText: string, completionText: string): CompletionUsage;
+export declare function completionId(): string;
+export declare function buildCompletion(args: {
+    id: string;
+    model: string;
+    text: string;
+    usage: CompletionUsage;
+    looprun: LoopRunEnvelopeMeta;
+}): Record<string, unknown>;
+export declare function buildChunk(args: {
+    id: string;
+    model: string;
+    delta: Record<string, unknown>;
+    finishReason?: string | null;
+    usage?: CompletionUsage;
+    looprun?: LoopRunEnvelopeMeta;
+}): Record<string, unknown>;
+export declare function buildModelList(ids: string[], contextLength: number): Record<string, unknown>;
+export type WireErrorCode = 'model_not_found' | 'invalid_request_error' | 'api_error' | 'invalid_api_key';
+export declare function errorBody(message: string, type: string, code: WireErrorCode | null, param?: string | null): {
+    error: {
+        message: string;
+        type: string;
+        param: string | null;
+        code: WireErrorCode | null;
+    };
+};
+//# sourceMappingURL=openai.d.ts.map

package/dist/openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.d.ts","sourceRoot":"","sources":["../src/openai.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,CAItF;AAGD,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,mBAAmB,CAAC;CAC9B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkB1B;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAW1B;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAa5F;AAED,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,uBAAuB,GAAG,WAAW,GAAG,iBAAiB,CAAC;AAE1G,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,EAAE,KAAK,GAAE,MAAM,GAAG,IAAW;;;;;;;EAE/G"}

package/dist/openai.js

@@ -0,0 +1,65 @@
+/** Rough token estimate (ceil(chars/4), never zero) — harnesses expect nonzero usage. */
+export function estimateTokens(text) {
+    return Math.max(1, Math.ceil(text.length / 4));
+}
+export function buildUsage(promptText, completionText) {
+    const prompt = estimateTokens(promptText);
+    const completion = estimateTokens(completionText);
+    return { prompt_tokens: prompt, completion_tokens: completion, total_tokens: prompt + completion };
+}
+let counter = 0;
+export function completionId() {
+    counter++;
+    return `chatcmpl-looprun-${Date.now().toString(36)}${counter.toString(36)}`;
+}
+export function buildCompletion(args) {
+    return {
+        id: args.id,
+        object: 'chat.completion',
+        created: Math.floor(Date.now() / 1000),
+        model: args.model,
+        choices: [
+            {
+                index: 0,
+                message: { role: 'assistant', content: args.text },
+                finish_reason: 'stop',
+                logprobs: null,
+            },
+        ],
+        usage: args.usage,
+        // Non-standard extension (OpenAI SDKs ignore unknown fields): the governed-turn metadata.
+        looprun: args.looprun,
+    };
+}
+export function buildChunk(args) {
+    const chunk = {
+        id: args.id,
+        object: 'chat.completion.chunk',
+        created: Math.floor(Date.now() / 1000),
+        model: args.model,
+        choices: [{ index: 0, delta: args.delta, finish_reason: args.finishReason ?? null, logprobs: null }],
+    };
+    if (args.usage)
+        chunk.usage = args.usage;
+    if (args.looprun)
+        chunk.looprun = args.looprun;
+    return chunk;
+}
+export function buildModelList(ids, contextLength) {
+    const created = Math.floor(Date.now() / 1000);
+    return {
+        object: 'list',
+        data: ids.map((id) => ({
+            id,
+            object: 'model',
+            created,
+            owned_by: 'looprun',
+            // De-facto extension many harnesses read to size their context handling.
+            context_length: contextLength,
+        })),
+    };
+}
+export function errorBody(message, type, code, param = null) {
+    return { error: { message, type, param, code } };
+}
+//# sourceMappingURL=openai.js.map

package/dist/openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../src/openai.ts"],"names":[],"mappings":"AAGA,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,UAAkB,EAAE,cAAsB;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,CAAC,CAAC;IAClD,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,EAAE,CAAC;AACrG,CAAC;AAED,IAAI,OAAO,GAAG,CAAC,CAAC;AAChB,MAAM,UAAU,YAAY;IAC1B,OAAO,EAAE,CAAC;IACV,OAAO,oBAAoB,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAM/B;IACC,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE;gBAClD,aAAa,EAAE,MAAM;gBACrB,QAAQ,EAAE,IAAI;aACf;SACF;QACD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,0FAA0F;QAC1F,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAO1B;IACC,MAAM,KAAK,GAA4B;QACrC,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,MAAM,EAAE,uBAAuB;QAC/B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;KACrG,CAAC;IACF,IAAI,IAAI,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAa,EAAE,aAAqB;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9C,OAAO;QACL,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACrB,EAAE;YACF,MAAM,EAAE,OAAO;YACf,OAAO;YACP,QAAQ,EAAE,SAAS;YACnB,yEAAyE;YACzE,cAAc,EAAE,aAAa;SAC9B,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAID,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,IAAY,EAAE,IAA0B,EAAE,QAAuB,IAAI;IAC9G,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;AACnD,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,3 @@
+import type { ModelServer, ModelServerConfig } from './types.js';
+export declare function createModelServer(config: ModelServerConfig): Promise<ModelServer>;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA8BjE,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8CvF"}

package/dist/server.js

@@ -0,0 +1,83 @@
+/**
+ * node:http adapter around the fetch-style handler — no framework (the surface is two routes;
+ * WHATWG Request/Response are native on Node >= 22).
+ */
+import { createServer } from 'node:http';
+import { Readable } from 'node:stream';
+import { createOpenAiHandler } from './handler.js';
+import { SessionLocks, SessionTtl } from './session.js';
+function toRequest(req, base) {
+    const headers = new Headers();
+    for (const [key, value] of Object.entries(req.headers)) {
+        if (typeof value === 'string')
+            headers.set(key, value);
+        else if (Array.isArray(value))
+            for (const v of value)
+                headers.append(key, v);
+    }
+    const method = req.method ?? 'GET';
+    const body = method === 'GET' || method === 'HEAD' ? undefined : Readable.toWeb(req);
+    return new Request(new URL(req.url ?? '/', base), {
+        method,
+        headers,
+        body,
+        // Node requires this flag for streamed request bodies.
+        ...(body ? { duplex: 'half' } : {}),
+    });
+}
+async function writeResponse(res, out) {
+    out.statusCode = res.status;
+    res.headers.forEach((value, key) => out.setHeader(key, value));
+    if (res.body) {
+        for await (const chunk of Readable.fromWeb(res.body)) {
+            out.write(chunk);
+        }
+    }
+    out.end();
+}
+export async function createModelServer(config) {
+    const locks = new SessionLocks();
+    const ttl = new SessionTtl();
+    const handler = createOpenAiHandler(config, { locks, ttl });
+    let sweeper;
+    if (config.sessionTtlMs && config.sessionTtlMs > 0) {
+        const ttlMs = config.sessionTtlMs;
+        sweeper = setInterval(() => {
+            for (const expired of ttl.sweep(ttlMs)) {
+                config.agents[expired.model]?.endSession(expired.sessionId);
+            }
+        }, Math.min(ttlMs, 60_000));
+        sweeper.unref();
+    }
+    const hostname = config.hostname ?? '127.0.0.1';
+    let port = config.port ?? 0;
+    const server = createServer((req, res) => {
+        const base = `http://${hostname}:${port}`;
+        void handler(toRequest(req, base))
+            .then((response) => writeResponse(response, res))
+            .catch((error) => {
+            res.statusCode = 500;
+            res.setHeader('content-type', 'application/json');
+            res.end(JSON.stringify({ error: { message: String(error), type: 'api_error', param: null, code: 'api_error' } }));
+        });
+    });
+    await new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(port, hostname, () => resolve());
+    });
+    const address = server.address();
+    if (address && typeof address === 'object')
+        port = address.port;
+    return {
+        url: `http://${hostname}:${port}/v1`,
+        port,
+        handler,
+        close: () => new Promise((resolve, reject) => {
+            if (sweeper)
+                clearInterval(sweeper);
+            server.close((error) => (error ? reject(error) : resolve()));
+            server.closeAllConnections();
+        }),
+    };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAGxD,SAAS,SAAS,CAAC,GAAoB,EAAE,IAAY;IACnD,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;aAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAgC,CAAC;IACrH,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,IAAI,CAAC,EAAE;QAChD,MAAM;QACN,OAAO;QACP,IAAI;QACJ,uDAAuD;QACvD,GAAG,CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtB,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAa,EAAE,GAAmB;IAC7D,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC;IAC5B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAA4D,CAAC,EAAE,CAAC;YAC7G,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAyB;IAC/D,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,UAAU,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAE5D,IAAI,OAAmC,CAAC;IACxC,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAClC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;YACzB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,WAAW,CAAC;IAChD,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAW,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,UAAU,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC1C,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;aAC/B,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;aAChD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YACrB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAEhE,OAAO;QACL,GAAG,EAAE,UAAU,QAAQ,IAAI,IAAI,KAAK;QACpC,IAAI;QACJ,OAAO;QACP,KAAK,EAAE,GAAG,EAAE,CACV,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACpC,IAAI,OAAO;gBAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7D,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC/B,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/session.d.ts

@@ -0,0 +1,29 @@
+import type { CompletionRequestBody, WireMessage } from './types.js';
+export declare const SESSION_HEADER = "x-looprun-session";
+/** The last `user` message's text — the governed turn's input. Null when absent/empty. */
+export declare function lastUserText(messages: WireMessage[]): string | null;
+export declare function fingerprintSession(model: string, messages: WireMessage[]): string;
+export declare function resolveSessionId(body: CompletionRequestBody, headers: Headers): string;
+/**
+ * Per-key promise-chain mutex: two concurrent requests on the SAME session run one governed
+ * turn at a time (different sessions stay fully concurrent — the agent's AsyncLocalStorage
+ * already isolates those).
+ */
+export declare class SessionLocks {
+    private readonly tails;
+    run<T>(key: string, task: () => Promise<T>): Promise<T>;
+}
+interface TouchRecord {
+    model: string;
+    sessionId: string;
+    lastSeen: number;
+}
+/** Idle-session tracker backing the optional TTL eviction sweep. */
+export declare class SessionTtl {
+    private readonly touched;
+    touch(model: string, sessionId: string, now?: number): void;
+    /** Sessions idle beyond `ttlMs`; each is removed from the tracker as it is returned. */
+    sweep(ttlMs: number, now?: number): TouchRecord[];
+}
+export {};
+//# sourceMappingURL=session.d.ts.map

package/dist/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAErE,eAAO,MAAM,cAAc,sBAAsB,CAAC;AAalD,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,GAAG,IAAI,CAQnE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,CAIjF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAKtF;AAED;;;;GAIG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAEvD,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAW9D;AAED,UAAU,WAAW;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkC;IAE1D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,IAAI;IAI/D,wFAAwF;IACxF,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,WAAW,EAAE;CAUtD"}

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAElD,SAAS,WAAW,CAAC,OAA+B;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aAC/D,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,QAAuB;IAClD,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,IAAI,QAAQ,CAAC,CAAC,CAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC;YAC/C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,QAAuB;IACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnE,OAAO,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAA2B,EAAE,OAAgB;IAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAC5E,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,YAAY;IACN,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D,KAAK,CAAC,GAAG,CAAI,GAAW,EAAE,IAAsB;QAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE;YAChB,2EAA2E;YAC3E,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,OAAO;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAQD,oEAAoE;AACpE,MAAM,OAAO,UAAU;IACJ,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE1D,KAAK,CAAC,KAAa,EAAE,SAAiB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACtD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,IAAI,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,wFAAwF;IACxF,KAAK,CAAC,KAAa,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACnC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,KAAK,EAAE,CAAC;gBACnC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/sse.d.ts

@@ -0,0 +1,26 @@
+/**
+ * SSE encoding for `stream: true`.
+ *
+ * The governed turn always runs to completion first (`agent.stream()` is the documented degraded
+ * mode — no reply finalization — so the server never uses it). The stream shape is:
+ *   role delta (immediately, so the socket is live) → `: keepalive` comments while the turn runs →
+ *   ONE content delta with the full governed text → finish chunk → [DONE].
+ * SSE comment lines are ignored by every OpenAI SDK parser, and a single big content delta is a
+ * fully valid stream.
+ */
+import type { CompletionUsage } from './openai.js';
+import type { LoopRunEnvelopeMeta } from './types.js';
+export declare function sseData(payload: Record<string, unknown>): Uint8Array;
+export interface StreamedTurn {
+    text: string;
+    usage: CompletionUsage;
+    looprun: LoopRunEnvelopeMeta;
+}
+export declare function streamCompletion(args: {
+    id: string;
+    model: string;
+    turn: Promise<StreamedTurn>;
+    keepaliveMs?: number;
+    onError: (error: unknown) => Record<string, unknown>;
+}): ReadableStream<Uint8Array>;
+//# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAItD,wBAAgB,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAEpE;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,eAAe,CAAC;IACvB,OAAO,EAAE,mBAAmB,CAAC;CAC9B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtD,GAAG,cAAc,CAAC,UAAU,CAAC,CAqC7B"}

package/dist/sse.js

@@ -0,0 +1,43 @@
+import { buildChunk } from './openai.js';
+const encoder = new TextEncoder();
+export function sseData(payload) {
+    return encoder.encode(`data: ${JSON.stringify(payload)}\n\n`);
+}
+export function streamCompletion(args) {
+    const keepaliveMs = args.keepaliveMs ?? 10_000;
+    return new ReadableStream({
+        async start(controller) {
+            controller.enqueue(sseData(buildChunk({ id: args.id, model: args.model, delta: { role: 'assistant', content: '' } })));
+            const keepalive = setInterval(() => {
+                try {
+                    controller.enqueue(encoder.encode(': keepalive\n\n'));
+                }
+                catch {
+                    clearInterval(keepalive);
+                }
+            }, keepaliveMs);
+            try {
+                const turn = await args.turn;
+                controller.enqueue(sseData(buildChunk({ id: args.id, model: args.model, delta: { content: turn.text } })));
+                controller.enqueue(sseData(buildChunk({
+                    id: args.id,
+                    model: args.model,
+                    delta: {},
+                    finishReason: 'stop',
+                    usage: turn.usage,
+                    looprun: turn.looprun,
+                })));
+                controller.enqueue(encoder.encode('data: [DONE]\n\n'));
+            }
+            catch (error) {
+                // Mid-stream failure: emit an OpenAI-style error event then terminate the stream.
+                controller.enqueue(sseData(args.onError(error)));
+            }
+            finally {
+                clearInterval(keepalive);
+                controller.close();
+            }
+        },
+    });
+}
+//# sourceMappingURL=sse.js.map

package/dist/sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.js","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,UAAU,OAAO,CAAC,OAAgC;IACtD,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAQD,MAAM,UAAU,gBAAgB,CAAC,IAMhC;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC;IAC/C,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,KAAK,CAAC,UAAU;YACpB,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YACvH,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;gBACjC,IAAI,CAAC;oBACH,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;gBACxD,CAAC;gBAAC,MAAM,CAAC;oBACP,aAAa,CAAC,SAAS,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC,EAAE,WAAW,CAAC,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;gBAC7B,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3G,UAAU,CAAC,OAAO,CAChB,OAAO,CACL,UAAU,CAAC;oBACT,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK,EAAE,EAAE;oBACT,YAAY,EAAE,MAAM;oBACpB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC,CACH,CACF,CAAC;gBACF,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,kFAAkF;gBAClF,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnD,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,SAAS,CAAC,CAAC;gBACzB,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,64 @@
+/**
+ * OpenAI chat-completions wire types (the subset the server speaks) + server config.
+ *
+ * The server deliberately implements the protocol as a FACADE: the harness believes it is talking
+ * to a model, while a full governed turn runs behind the endpoint. Incoming `system` messages,
+ * `tools`, `tool_choice` and sampling params are therefore ignored by design — the AgentSpec owns
+ * the trunk, the tool surface and the sampling (see README).
+ */
+import type { LoopRunAgent, LoopRunResultMeta } from '@looprun-ai/mastra';
+/** One incoming OpenAI message. Content may be a string or an array of typed parts. */
+export interface WireMessage {
+    role: 'system' | 'developer' | 'user' | 'assistant' | 'tool';
+    content: string | Array<{
+        type: string;
+        text?: string;
+    }> | null;
+}
+export interface CompletionRequestBody {
+    model: string;
+    messages: WireMessage[];
+    stream?: boolean;
+    /** OpenAI-standard end-user id — second precedence for the looprun session id. */
+    user?: string;
+    [ignored: string]: unknown;
+}
+/** Non-standard envelope extension carrying the governed-turn metadata (SDKs ignore it). */
+export interface LoopRunEnvelopeMeta {
+    sessionId: string;
+    turnIndex: number;
+    corrections: string[];
+    exhausted: boolean;
+    violations: string[];
+}
+export interface TurnEvent {
+    model: string;
+    sessionId: string;
+    meta: LoopRunResultMeta;
+}
+export interface ModelServerConfig {
+    /** Registry: OpenAI `model` field → governed agent. */
+    agents: Record<string, LoopRunAgent>;
+    /** Listen port; 0 (default) = ephemeral. */
+    port?: number;
+    /** Bind hostname; default 127.0.0.1. */
+    hostname?: string;
+    /** `context_length` reported by /v1/models. High default keeps harnesses from compressing
+     *  history, which would break the fingerprint session fallback. */
+    contextLength?: number;
+    /** When set, requests must carry `Authorization: Bearer <apiKey>`. */
+    apiKey?: string;
+    /** Override the session-id resolution chain (header → body.user → fingerprint). */
+    resolveSession?: (body: CompletionRequestBody, headers: Headers) => string;
+    /** Idle sessions older than this are disposed via agent.endSession(). Default: no eviction. */
+    sessionTtlMs?: number;
+    /** Observability: fires after every governed turn (the sim harness asserts through this). */
+    onTurn?: (event: TurnEvent) => void;
+}
+export interface ModelServer {
+    url: string;
+    port: number;
+    handler: (req: Request) => Promise<Response>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE1E,uFAAuF;AACvF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC7D,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,kFAAkF;IAClF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,4FAA4F;AAC5F,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,iBAAiB,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrC,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;uEACmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,sEAAsE;IACtE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3E,+FAA+F;IAC/F,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@looprun-ai/server",
+  "version": "0.6.1",
+  "type": "module",
+  "description": "looprun model server: expose governed LoopRunAgents behind an OpenAI-compatible /v1/chat/completions endpoint, so any harness that speaks the OpenAI protocol can call a governed agent as if it were a model. The full governed turn (guards, tools, redrive) runs inside each request and returns one final assistant message.",
+  "keywords": [
+    "ai",
+    "agents",
+    "llm",
+    "governance",
+    "guardrails",
+    "agentspec",
+    "openai-compatible",
+    "model-server"
+  ],
+  "license": "Apache-2.0",
+  "author": "LoopRun Team",
+  "homepage": "https://looprun.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/looprun-ai/looprun.git",
+    "directory": "packages/server"
+  },
+  "bugs": {
+    "url": "https://github.com/looprun-ai/looprun/issues"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "@looprun-ai/core": "^0.6.1",
+    "@looprun-ai/mastra": "^0.6.1"
+  },
+  "peerDependencies": {
+    "@mastra/core": "^1.42.0",
+    "ai": "^6.0.0",
+    "zod": "^3.24.0"
+  },
+  "devDependencies": {
+    "@mastra/core": "^1.42.0",
+    "@types/node": "^22.0.0",
+    "ai": "^6.0.184",
+    "typescript": "^5.7.0",
+    "vitest": "^2.0.0",
+    "zod": "^3.24.0"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}