@namzu/sdk 0.4.2 → 0.4.4

package/dist/test-setup.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Vitest `setupFiles` entry for `@namzu/sdk`.
+ *
+ * Silences the root logger for the entire test run. Tests that assert on
+ * log output use their own mocked Logger instances (constructed via the
+ * `makeLogger()` helpers colocated with each test) — those are not
+ * affected by the root-level silence.
+ *
+ * The only thing this suppresses is the stderr spam produced by
+ * production code paths that fall through to `getRootLogger()` — e.g.
+ * `ToolRegistry.execute`'s zod-validation and thrown-error branches,
+ * `ConnectorToolRouter.getTools`' per-instance error catch, the
+ * AgentBus listener-throw handler, and every connector's `connect()`
+ * info log. GitHub Actions annotates any `[ERROR]` stderr line as a
+ * workflow error; silencing the root logger during tests keeps the CI
+ * log clean.
+ *
+ * This is test-only configuration. It runs before every test file and
+ * does not affect consumers.
+ */
+export {};
+//# sourceMappingURL=test-setup.d.ts.map

package/dist/test-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-setup.d.ts","sourceRoot":"","sources":["../src/test-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}

package/dist/test-setup.js

@@ -0,0 +1,23 @@
+/**
+ * Vitest `setupFiles` entry for `@namzu/sdk`.
+ *
+ * Silences the root logger for the entire test run. Tests that assert on
+ * log output use their own mocked Logger instances (constructed via the
+ * `makeLogger()` helpers colocated with each test) — those are not
+ * affected by the root-level silence.
+ *
+ * The only thing this suppresses is the stderr spam produced by
+ * production code paths that fall through to `getRootLogger()` — e.g.
+ * `ToolRegistry.execute`'s zod-validation and thrown-error branches,
+ * `ConnectorToolRouter.getTools`' per-instance error catch, the
+ * AgentBus listener-throw handler, and every connector's `connect()`
+ * info log. GitHub Actions annotates any `[ERROR]` stderr line as a
+ * workflow error; silencing the root logger during tests keeps the CI
+ * log clean.
+ *
+ * This is test-only configuration. It runs before every test file and
+ * does not affect consumers.
+ */
+import { configureLogger } from './utils/logger.js';
+configureLogger({ level: 'silent' });
+//# sourceMappingURL=test-setup.js.map

package/dist/test-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-setup.js","sourceRoot":"","sources":["../src/test-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAEnD,eAAe,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA"}

package/dist/types/bus/index.d.ts

@@ -1,5 +1,6 @@
-import type { RunId } from '../ids/index.js';
-export type LockId = `lock_${string}`;
+import type { CredentialId, LockId, RunId, SandboxId, TenantId } from '../ids/index.js';
+export type { LockId } from '../ids/index.js';
+export type ProviderCallId = `pcall_${string}`;
 export type CircuitBreakerState = 'closed' | 'open' | 'half_open';
 export interface CircuitBreakerSnapshot {
     readonly state: CircuitBreakerState;
@@ -37,6 +38,13 @@ export type OwnershipClaimResult = {
     currentOwner: RunId;
     filePath: string;
 };
+export interface ProviderCallUsage {
+    readonly inputTokens?: number;
+    readonly outputTokens?: number;
+    readonly totalTokens?: number;
+    readonly costUsd?: number;
+}
+export type SandboxDecisionAction = 'allow' | 'deny';
 export type AgentBusEvent = {
     type: 'lock_acquired';
     lockId: LockId;
@@ -91,6 +99,42 @@ export type AgentBusEvent = {
 } | {
     type: 'breaker_probe_failure';
     agentRunId: RunId;
+} | {
+    type: 'provider_call_start';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+} | {
+    type: 'provider_call_completed';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+    durationMs: number;
+    usage?: ProviderCallUsage;
+} | {
+    type: 'provider_call_failed';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+    durationMs: number;
+    error: string;
+} | {
+    type: 'vault_lookup';
+    vaultId: string;
+    credentialId?: CredentialId;
+    tenantId?: TenantId;
+    found: boolean;
+    runId?: RunId;
+} | {
+    type: 'sandbox_decision';
+    sandboxId: SandboxId;
+    action: SandboxDecisionAction;
+    resource: string;
+    ruleId?: string;
+    runId?: RunId;
 };
 export type AgentBusEventListener = (event: AgentBusEvent) => void;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/bus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAE5C,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,CAAA;AAErC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAA;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,KAAK,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,CAAA;AAEvD,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAEvF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAE7C,MAAM,MAAM,cAAc,GAAG,SAAS,MAAM,EAAE,CAAA;AAE9C,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAA;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAA;AAEpD,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,KAAK,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,GACD;IACA,IAAI,EAAE,yBAAyB,CAAA;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,iBAAiB,CAAA;CACxB,GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,EAAE,qBAAqB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,CAAA;AAEJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA"}

package/dist/types/doctor/check.d.ts

@@ -0,0 +1,41 @@
+export type DoctorStatus = 'pass' | 'fail' | 'inconclusive' | 'warn';
+export type DoctorCategory = 'sandbox' | 'providers' | 'vault' | 'telemetry' | 'runtime' | 'plugins' | 'custom';
+export interface DoctorCheckContext {
+    readonly cwd: string;
+    readonly env: Readonly<Record<string, string | undefined>>;
+    readonly projectRoot: string | null;
+}
+export interface DoctorCheckResult {
+    readonly status: DoctorStatus;
+    readonly message?: string;
+    readonly remediation?: string;
+    readonly durationMs?: number;
+}
+export interface DoctorCheck {
+    readonly id: string;
+    readonly category: DoctorCategory;
+    readonly run: (ctx: DoctorCheckContext) => Promise<DoctorCheckResult>;
+    readonly fix?: (ctx: DoctorCheckContext) => Promise<DoctorCheckResult>;
+}
+export interface DoctorCheckRecord {
+    readonly id: string;
+    readonly category: DoctorCategory;
+    readonly status: DoctorStatus;
+    readonly message?: string;
+    readonly remediation?: string;
+    readonly durationMs: number;
+}
+export interface DoctorReport {
+    readonly version: string;
+    readonly timestamp: string;
+    readonly checks: readonly DoctorCheckRecord[];
+    readonly summary: {
+        readonly pass: number;
+        readonly fail: number;
+        readonly inconclusive: number;
+        readonly warn: number;
+        readonly total: number;
+    };
+    readonly exit: 0 | 1 | 2 | 70;
+}
+//# sourceMappingURL=check.d.ts.map

package/dist/types/doctor/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../src/types/doctor/check.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,MAAM,CAAA;AAEpE,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,WAAW,GACX,OAAO,GACP,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAA;AAEX,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC7C,QAAQ,CAAC,OAAO,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;CAC7B"}

package/dist/types/doctor/check.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check.js.map

package/dist/types/doctor/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/types/doctor/check.ts"],"names":[],"mappings":""}

package/dist/types/doctor/index.d.ts

@@ -0,0 +1,2 @@
+export type { DoctorCategory, DoctorCheck, DoctorCheckContext, DoctorCheckRecord, DoctorCheckResult, DoctorReport, DoctorStatus, } from './check.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/doctor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/doctor/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACZ,MAAM,YAAY,CAAA"}

package/dist/types/doctor/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/doctor/index.ts"],"names":[],"mappings":""}

package/dist/types/probe/event-kind.d.ts

@@ -0,0 +1,6 @@
+import type { AgentBusEvent } from '../bus/index.js';
+import type { RunEvent } from '../run/events.js';
+export type ProbeEventKind = RunEvent['type'] | AgentBusEvent['type'];
+export type VetoableEventKind = 'tool_executing';
+export type ProbeEvent = RunEvent | AgentBusEvent;
+//# sourceMappingURL=event-kind.d.ts.map

package/dist/types/probe/event-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-kind.d.ts","sourceRoot":"","sources":["../../../src/types/probe/event-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEhD,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;AAErE,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAEhD,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAA"}

package/dist/types/probe/event-kind.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-kind.js.map

package/dist/types/probe/event-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-kind.js","sourceRoot":"","sources":["../../../src/types/probe/event-kind.ts"],"names":[],"mappings":""}

package/dist/types/probe/event-of.d.ts

@@ -0,0 +1,5 @@
+import type { ProbeEvent, ProbeEventKind } from './event-kind.js';
+export type ProbeEventOf<K extends ProbeEventKind> = Extract<ProbeEvent, {
+    type: K;
+}>;
+//# sourceMappingURL=event-of.d.ts.map

package/dist/types/probe/event-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-of.d.ts","sourceRoot":"","sources":["../../../src/types/probe/event-of.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEjE,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,cAAc,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAAA"}

package/dist/types/probe/event-of.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-of.js.map

package/dist/types/probe/event-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-of.js","sourceRoot":"","sources":["../../../src/types/probe/event-of.ts"],"names":[],"mappings":""}

package/dist/types/probe/index.d.ts

@@ -0,0 +1,4 @@
+export type { ProbeEvent, ProbeEventKind, VetoableEventKind } from './event-kind.js';
+export type { ProbeEventOf } from './event-of.js';
+export type { ProbeContext, ProbeHandler, ProbeOptions, Unsubscribe, VetoDecision, VetoHandler, VetoOutcome, } from './registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/probe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/probe/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACpF,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,WAAW,GACX,MAAM,eAAe,CAAA"}

package/dist/types/probe/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/probe/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/probe/index.ts"],"names":[],"mappings":""}

package/dist/types/probe/registry.d.ts

@@ -0,0 +1,27 @@
+import type { RunId } from '../ids/index.js';
+import type { ProbeEventKind, VetoableEventKind } from './event-kind.js';
+import type { ProbeEventOf } from './event-of.js';
+export type Unsubscribe = () => void;
+export interface ProbeContext {
+    readonly runId?: RunId;
+    readonly isReplay: boolean;
+}
+export type ProbeHandler<K extends ProbeEventKind> = (event: ProbeEventOf<K>, ctx: ProbeContext) => void;
+export type VetoDecision = 'allow' | 'deny' | {
+    readonly action: 'deny';
+    readonly reason: string;
+};
+export type VetoHandler<K extends VetoableEventKind> = (event: ProbeEventOf<K>, ctx: ProbeContext) => VetoDecision;
+export interface VetoOutcome {
+    readonly action: 'allow' | 'deny';
+    readonly probeName?: string;
+    readonly reason?: string;
+}
+export interface ProbeOptions<K extends ProbeEventKind = ProbeEventKind> {
+    readonly where?: (event: ProbeEventOf<K>) => boolean;
+    readonly priority?: number;
+    readonly name?: string;
+    readonly otel?: boolean;
+    readonly override?: boolean;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/types/probe/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/types/probe/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAA;AAEpC,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,cAAc,IAAI,CACpD,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,YAAY,KACb,IAAI,CAAA;AAET,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAElG,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,iBAAiB,IAAI,CACtD,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,YAAY,KACb,YAAY,CAAA;AAEjB,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,YAAY,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,CAAA;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC3B"}

package/dist/types/probe/registry.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.js.map

package/dist/types/probe/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/types/probe/registry.ts"],"names":[],"mappings":""}

package/dist/utils/logger.d.ts

@@ -1,4 +1,4 @@
-export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'silent';
 export type LogContext = Record<string, unknown>;
 export interface Logger {
     debug(message: string, data?: LogContext): void;

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1D,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAShD,MAAM,WAAW,MAAM;IACtB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/C,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAAA;CAClC;AAsCD,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,IAAI,CAEnE"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAA;AAErE,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAchD,MAAM,WAAW,MAAM;IACtB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC9C,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,IAAI,CAAA;IAC/C,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAAA;CAClC;AAsCD,wBAAgB,aAAa,IAAI,MAAM,CAKtC;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE;IAAE,KAAK,CAAC,EAAE,QAAQ,CAAA;CAAE,GAAG,IAAI,CAEnE"}

package/dist/utils/logger.js

@@ -3,6 +3,11 @@ const LOG_LEVELS = {
     info: 1,
     warn: 2,
     error: 3,
+    // `silent` sits above every emit level so the `level < minLevelNum`
+    // guard in `log()` always short-circuits when configured. Used by
+    // test harnesses to suppress unmocked `getRootLogger()` stderr
+    // writes; see packages/sdk/src/test-setup.ts.
+    silent: 4,
 };
 function createLoggerImpl(name, minLevel, parentContext) {
     const minLevelNum = LOG_LEVELS[minLevel];

package/dist/utils/logger.js.map

@@ -1 +1 @@
-{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACR,CAAA;AAUD,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAkB,EAAE,aAAyB;IACpF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAExC,SAAS,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAiB;QAC/D,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,WAAW;YAAE,OAAM;QAE3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,SAAS,MAAM,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,GAAG,CAAA;QAClE,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,EAAE,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;QAEjD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,OAAO,IAAI,CAAC,CAAA;QAC/C,CAAC;IACF,CAAC;IAED,SAAS,KAAK,CAAC,OAAmB;QACjC,OAAO,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE;YACvF,GAAG,aAAa;YAChB,GAAG,OAAO;SACV,CAAC,CAAA;IACH,CAAC;IAED,OAAO;QACN,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC7C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC7C,KAAK;KACL,CAAA;AACF,CAAC;AAED,IAAI,WAAW,GAAkB,IAAI,CAAA;AAErC,MAAM,UAAU,aAAa;IAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,WAAW,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA6B;IAC5D,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC"}
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,8CAA8C;IAC9C,MAAM,EAAE,CAAC;CACT,CAAA;AAUD,SAAS,gBAAgB,CAAC,IAAY,EAAE,QAAkB,EAAE,aAAyB;IACpF,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAExC,SAAS,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAiB;QAC/D,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,WAAW;YAAE,OAAM;QAE3C,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;QAC1C,MAAM,MAAM,GAAG,IAAI,SAAS,MAAM,KAAK,CAAC,WAAW,EAAE,MAAM,IAAI,GAAG,CAAA;QAClE,MAAM,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,GAAG,IAAI,EAAE,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAA;QAEjD,IAAI,UAAU,EAAE,CAAC;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,OAAO,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACzE,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAI,OAAO,IAAI,CAAC,CAAA;QAC/C,CAAC;IACF,CAAC;IAED,SAAS,KAAK,CAAC,OAAmB;QACjC,OAAO,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE;YACvF,GAAG,aAAa;YAChB,GAAG,OAAO;SACV,CAAC,CAAA;IACH,CAAC;IAED,OAAO;QACN,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC7C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC3C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAC7C,KAAK;KACL,CAAA;AACF,CAAC;AAED,IAAI,WAAW,GAAkB,IAAI,CAAA;AAErC,MAAM,UAAU,aAAa;IAC5B,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,WAAW,CAAA;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAA6B;IAC5D,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,EAAE,EAAE,CAAC,CAAA;AACrE,CAAC"}

package/dist/vault/instrumentation.d.ts

@@ -0,0 +1,11 @@
+import { type ProbeRegistry } from '../probe/registry.js';
+import type { CredentialVault } from '../types/connector/index.js';
+import type { RunId, TenantId } from '../types/ids/index.js';
+export interface VaultInstrumentationOptions {
+    readonly probes?: ProbeRegistry;
+    readonly runId?: RunId;
+    readonly vaultId?: string;
+    readonly tenantId?: TenantId;
+}
+export declare function wrapVaultWithProbes(vault: CredentialVault, opts?: VaultInstrumentationOptions): CredentialVault;
+//# sourceMappingURL=instrumentation.d.ts.map

package/dist/vault/instrumentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.d.ts","sourceRoot":"","sources":["../../src/vault/instrumentation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,sBAAsB,CAAA;AACxF,OAAO,KAAK,EAA6B,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7F,OAAO,KAAK,EAA6B,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEvF,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAC5B;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,eAAe,EACtB,IAAI,GAAE,2BAAgC,GACpC,eAAe,CAwCjB"}

package/dist/vault/instrumentation.js

@@ -0,0 +1,32 @@
+import { buildProbeContext } from '../probe/context.js';
+import { probe as defaultProbeRegistry } from '../probe/registry.js';
+export function wrapVaultWithProbes(vault, opts = {}) {
+    const probes = opts.probes ?? defaultProbeRegistry;
+    const runId = opts.runId;
+    const vaultId = opts.vaultId ?? vault.constructor.name;
+    const tenantIdHint = opts.tenantId;
+    return {
+        store(tenantId, connectorId, label, auth) {
+            return vault.store(tenantId, connectorId, label, auth);
+        },
+        async retrieve(credentialId) {
+            const result = await vault.retrieve(credentialId);
+            probes.dispatch({
+                type: 'vault_lookup',
+                vaultId,
+                credentialId,
+                tenantId: tenantIdHint,
+                found: result !== undefined,
+                runId,
+            }, buildProbeContext({ runId }));
+            return result;
+        },
+        revoke(credentialId) {
+            return vault.revoke(credentialId);
+        },
+        list(tenantId, connectorId) {
+            return vault.list(tenantId, connectorId);
+        },
+    };
+}
+//# sourceMappingURL=instrumentation.js.map

package/dist/vault/instrumentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.js","sourceRoot":"","sources":["../../src/vault/instrumentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAsB,KAAK,IAAI,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAWxF,MAAM,UAAU,mBAAmB,CAClC,KAAsB,EACtB,OAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAA;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAA;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAA;IAElC,OAAO;QACN,KAAK,CACJ,QAAkB,EAClB,WAAwB,EACxB,KAAa,EACb,IAAgB;YAEhB,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACvD,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,YAA0B;YACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,CACd;gBACC,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,MAAM,KAAK,SAAS;gBAC3B,KAAK;aACL,EACD,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,CAC5B,CAAA;YACD,OAAO,MAAM,CAAA;QACd,CAAC;QAED,MAAM,CAAC,YAA0B;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAClC,CAAC;QAED,IAAI,CAAC,QAAkB,EAAE,WAAyB;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QACzC,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/vault/instrumentation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=instrumentation.test.d.ts.map

package/dist/vault/instrumentation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.test.d.ts","sourceRoot":"","sources":["../../src/vault/instrumentation.test.ts"],"names":[],"mappings":""}

package/dist/vault/instrumentation.test.js

@@ -0,0 +1,80 @@
+import { describe, expect, it } from 'vitest';
+import { createProbeRegistry } from '../probe/registry.js';
+import { InMemoryCredentialVault } from './InMemoryCredentialVault.js';
+import { wrapVaultWithProbes } from './instrumentation.js';
+const tenant = 'tnt_acme';
+const connector = 'conn_x';
+describe('wrapVaultWithProbes', () => {
+    it('emits vault_lookup with found:true when retrieve hits', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', { type: 'apiKey', apiKey: 's' });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg, vaultId: 'in-memory' });
+        const result = await wrapped.retrieve(ref.id);
+        expect(result).toBeDefined();
+        expect(seen.length).toBe(1);
+        const event = seen[0];
+        expect(event.type).toBe('vault_lookup');
+        expect(event.found).toBe(true);
+        expect(event.vaultId).toBe('in-memory');
+        expect(event.credentialId).toBe(ref.id);
+    });
+    it('emits vault_lookup with found:false when retrieve misses', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const wrapped = wrapVaultWithProbes(new InMemoryCredentialVault(), {
+            probes: reg,
+            vaultId: 'in-memory',
+        });
+        const missing = 'cred_missing';
+        const result = await wrapped.retrieve(missing);
+        expect(result).toBeUndefined();
+        expect(seen.length).toBe(1);
+        const event = seen[0];
+        expect(event.found).toBe(false);
+        expect(event.credentialId).toBe(missing);
+    });
+    it('does not emit on store/revoke/list — retrieve is the audit point', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const wrapped = wrapVaultWithProbes(new InMemoryCredentialVault(), { probes: reg });
+        const ref = await wrapped.store(tenant, connector, 'k', {
+            type: 'apiKey',
+            apiKey: 's',
+        });
+        await wrapped.list(tenant);
+        await wrapped.revoke(ref.id);
+        expect(seen.length).toBe(0);
+    });
+    it('does not leak the secret value in the emitted event', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', {
+            type: 'apiKey',
+            apiKey: 'super-secret-value',
+        });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg });
+        await wrapped.retrieve(ref.id);
+        const event = seen[0];
+        const serialized = JSON.stringify(event);
+        expect(serialized).not.toContain('super-secret-value');
+    });
+    it('falls back to constructor.name as vaultId when not specified', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', { type: 'apiKey', apiKey: 's' });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg });
+        await wrapped.retrieve(ref.id);
+        const event = seen[0];
+        expect(event.vaultId).toBe('InMemoryCredentialVault');
+    });
+});
+//# sourceMappingURL=instrumentation.test.js.map

package/dist/vault/instrumentation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.test.js","sourceRoot":"","sources":["../../src/vault/instrumentation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAI1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,MAAM,GAAG,UAAsB,CAAA;AACrC,MAAM,SAAS,GAAG,QAAiB,CAAA;AAEnC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAW,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAEjF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,uBAAuB,EAAE,EAAE;YAClE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,WAAW;SACpB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAA8B,CAAA;QAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;SACF,CAAC,CAAA;QACX,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YACrD,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,oBAAoB;SACnB,CAAC,CAAA;QACX,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAW,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sdk",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Open-source AI agent SDK with a built-in runtime. Nothing between you and your agents.",
   "license": "FSL-1.1-MIT",
   "type": "module",
@@ -43,6 +43,8 @@
     "@biomejs/biome": "^1.9.4",
     "@opentelemetry/api": "^1.9.0",
     "@types/node": "^22.19.17",
+    "@vitest/coverage-v8": "^2.1.9",
+    "fast-check": "^4.7.0",
     "knip": "^6.4.1",
     "typescript": "^5.5.0",
     "vitest": "^2.0.0",
@@ -56,6 +58,7 @@
     "lint:fix": "biome check --write src/",
     "format": "biome format --write src/",
     "test": "vitest run --passWithNoTests",
+    "test:coverage": "vitest run --passWithNoTests --coverage",
     "typecheck": "tsc --noEmit",
     "knip": "knip",
     "knip:production": "knip --production"

package/src/advisory/context.test.ts

@@ -0,0 +1,109 @@
+/**
+ * Current-code invariants asserted (2026-04-21, ses_006 Phase 6):
+ *
+ *   - `AdvisoryContext` composes a registry + executor + evaluator +
+ *     optional budget. It is a dumb container + a call-history log.
+ *   - `recordCall(record)` appends to `callHistory` in call order.
+ *   - `getBudgetStatus()`:
+ *     - `used` = `callHistory.length`.
+ *     - `total` = `budget?.maxCallsPerRun` (undefined when no budget).
+ *     - `remaining` = total − used when total defined; undefined else.
+ *   - `checkBudget()`:
+ *     - Allowed when no budget OR remaining > 0.
+ *     - Denied with reason when remaining ≤ 0.
+ */
+
+import { describe, expect, it } from 'vitest'
+
+import type { AdvisoryCallRecord } from '../types/advisory/index.js'
+
+import { AdvisoryContext } from './context.js'
+import type { TriggerEvaluator } from './evaluator.js'
+import type { AdvisoryExecutor } from './executor.js'
+import type { AdvisorRegistry } from './registry.js'
+
+function stubRegistry(): AdvisorRegistry {
+	return {} as unknown as AdvisorRegistry
+}
+
+function stubExecutor(): AdvisoryExecutor {
+	return {} as unknown as AdvisoryExecutor
+}
+
+function stubEvaluator(): TriggerEvaluator {
+	return {} as unknown as TriggerEvaluator
+}
+
+function callRecord(id: string): AdvisoryCallRecord {
+	return {
+		advisorId: id,
+		request: { question: 'q' },
+		result: { advice: 'a' },
+		usage: {
+			promptTokens: 0,
+			completionTokens: 0,
+			totalTokens: 0,
+			cachedTokens: 0,
+			cacheWriteTokens: 0,
+		},
+		cost: { inputCostPer1M: 0, outputCostPer1M: 0, totalCost: 0, cacheDiscount: 0 },
+		durationMs: 0,
+		iteration: 0,
+		timestamp: Date.now(),
+	}
+}
+
+describe('AdvisoryContext', () => {
+	it('starts with empty callHistory', () => {
+		const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator())
+		expect(ctx.callHistory).toEqual([])
+	})
+
+	it('recordCall appends in order', () => {
+		const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator())
+		ctx.recordCall(callRecord('a'))
+		ctx.recordCall(callRecord('b'))
+		expect(ctx.callHistory.map((r) => r.advisorId)).toEqual(['a', 'b'])
+	})
+
+	describe('getBudgetStatus', () => {
+		it('no budget → total + remaining undefined; used reflects history length', () => {
+			const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator())
+			ctx.recordCall(callRecord('a'))
+			expect(ctx.getBudgetStatus()).toEqual({ used: 1, total: undefined, remaining: undefined })
+		})
+
+		it('with budget → total + remaining computed', () => {
+			const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator(), {
+				maxCallsPerRun: 3,
+			})
+			ctx.recordCall(callRecord('a'))
+			expect(ctx.getBudgetStatus()).toEqual({ used: 1, total: 3, remaining: 2 })
+		})
+	})
+
+	describe('checkBudget', () => {
+		it('allowed when no budget', () => {
+			const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator())
+			expect(ctx.checkBudget()).toEqual({ allowed: true })
+		})
+
+		it('allowed when remaining > 0', () => {
+			const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator(), {
+				maxCallsPerRun: 2,
+			})
+			ctx.recordCall(callRecord('a'))
+			expect(ctx.checkBudget()).toEqual({ allowed: true })
+		})
+
+		it('denied when remaining <= 0', () => {
+			const ctx = new AdvisoryContext(stubRegistry(), stubExecutor(), stubEvaluator(), {
+				maxCallsPerRun: 1,
+			})
+			ctx.recordCall(callRecord('a'))
+			const result = ctx.checkBudget()
+			expect(result.allowed).toBe(false)
+			expect(result.reason).toMatch(/budget exhausted/)
+		})
+	})
+})