@namzu/sdk 0.4.3 → 0.4.5

package/dist/types/bus/index.d.ts

@@ -1,5 +1,6 @@
-import type { RunId } from '../ids/index.js';
-export type LockId = `lock_${string}`;
+import type { CredentialId, LockId, RunId, SandboxId, TenantId } from '../ids/index.js';
+export type { LockId } from '../ids/index.js';
+export type ProviderCallId = `pcall_${string}`;
 export type CircuitBreakerState = 'closed' | 'open' | 'half_open';
 export interface CircuitBreakerSnapshot {
     readonly state: CircuitBreakerState;
@@ -37,6 +38,13 @@ export type OwnershipClaimResult = {
     currentOwner: RunId;
     filePath: string;
 };
+export interface ProviderCallUsage {
+    readonly inputTokens?: number;
+    readonly outputTokens?: number;
+    readonly totalTokens?: number;
+    readonly costUsd?: number;
+}
+export type SandboxDecisionAction = 'allow' | 'deny';
 export type AgentBusEvent = {
     type: 'lock_acquired';
     lockId: LockId;
@@ -91,6 +99,42 @@ export type AgentBusEvent = {
 } | {
     type: 'breaker_probe_failure';
     agentRunId: RunId;
+} | {
+    type: 'provider_call_start';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+} | {
+    type: 'provider_call_completed';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+    durationMs: number;
+    usage?: ProviderCallUsage;
+} | {
+    type: 'provider_call_failed';
+    providerId: string;
+    model: string;
+    callId: ProviderCallId;
+    runId?: RunId;
+    durationMs: number;
+    error: string;
+} | {
+    type: 'vault_lookup';
+    vaultId: string;
+    credentialId?: CredentialId;
+    tenantId?: TenantId;
+    found: boolean;
+    runId?: RunId;
+} | {
+    type: 'sandbox_decision';
+    sandboxId: SandboxId;
+    action: SandboxDecisionAction;
+    resource: string;
+    ruleId?: string;
+    runId?: RunId;
 };
 export type AgentBusEventListener = (event: AgentBusEvent) => void;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/bus/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAE5C,MAAM,MAAM,MAAM,GAAG,QAAQ,MAAM,EAAE,CAAA;AAErC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAA;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,KAAK,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,CAAA;AAEvD,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/bus/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAEvF,YAAY,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAA;AAE7C,MAAM,MAAM,cAAc,GAAG,SAAS,MAAM,EAAE,CAAA;AAE9C,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAA;AAEjE,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAA;IACnC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAA;IAC1B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAA;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAC1B;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvD,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC7B;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5D,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAA;AAEpD,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACzE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,KAAK,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,KAAK,CAAA;CAAE,GACtE;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,KAAK,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,YAAY,EAAE,KAAK,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,KAAK,CAAA;CAAE,GACpD;IACA,IAAI,EAAE,qBAAqB,CAAA;IAC3B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,GACD;IACA,IAAI,EAAE,yBAAyB,CAAA;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,iBAAiB,CAAA;CACxB,GACD;IACA,IAAI,EAAE,sBAAsB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,CAAC,EAAE,KAAK,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACZ,GACD;IACA,IAAI,EAAE,cAAc,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,EAAE,QAAQ,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;IACd,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,GACD;IACA,IAAI,EAAE,kBAAkB,CAAA;IACxB,SAAS,EAAE,SAAS,CAAA;IACpB,MAAM,EAAE,qBAAqB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,KAAK,CAAA;CACZ,CAAA;AAEJ,MAAM,MAAM,qBAAqB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAA"}

package/dist/types/doctor/check.d.ts

@@ -0,0 +1,41 @@
+export type DoctorStatus = 'pass' | 'fail' | 'inconclusive' | 'warn';
+export type DoctorCategory = 'sandbox' | 'providers' | 'vault' | 'telemetry' | 'runtime' | 'plugins' | 'custom';
+export interface DoctorCheckContext {
+    readonly cwd: string;
+    readonly env: Readonly<Record<string, string | undefined>>;
+    readonly projectRoot: string | null;
+}
+export interface DoctorCheckResult {
+    readonly status: DoctorStatus;
+    readonly message?: string;
+    readonly remediation?: string;
+    readonly durationMs?: number;
+}
+export interface DoctorCheck {
+    readonly id: string;
+    readonly category: DoctorCategory;
+    readonly run: (ctx: DoctorCheckContext) => Promise<DoctorCheckResult>;
+    readonly fix?: (ctx: DoctorCheckContext) => Promise<DoctorCheckResult>;
+}
+export interface DoctorCheckRecord {
+    readonly id: string;
+    readonly category: DoctorCategory;
+    readonly status: DoctorStatus;
+    readonly message?: string;
+    readonly remediation?: string;
+    readonly durationMs: number;
+}
+export interface DoctorReport {
+    readonly version: string;
+    readonly timestamp: string;
+    readonly checks: readonly DoctorCheckRecord[];
+    readonly summary: {
+        readonly pass: number;
+        readonly fail: number;
+        readonly inconclusive: number;
+        readonly warn: number;
+        readonly total: number;
+    };
+    readonly exit: 0 | 1 | 2 | 70;
+}
+//# sourceMappingURL=check.d.ts.map

package/dist/types/doctor/check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../../src/types/doctor/check.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,cAAc,GAAG,MAAM,CAAA;AAEpE,MAAM,MAAM,cAAc,GACvB,SAAS,GACT,WAAW,GACX,OAAO,GACP,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAA;AAEX,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC1D,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAA;CACtE;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAA;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAC7C,QAAQ,CAAC,OAAO,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;QAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;QACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAA;CAC7B"}

package/dist/types/doctor/check.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=check.js.map

package/dist/types/doctor/check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"check.js","sourceRoot":"","sources":["../../../src/types/doctor/check.ts"],"names":[],"mappings":""}

package/dist/types/doctor/index.d.ts

@@ -0,0 +1,2 @@
+export type { DoctorCategory, DoctorCheck, DoctorCheckContext, DoctorCheckRecord, DoctorCheckResult, DoctorReport, DoctorStatus, } from './check.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/doctor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/doctor/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACX,cAAc,EACd,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,YAAY,GACZ,MAAM,YAAY,CAAA"}

package/dist/types/doctor/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/doctor/index.ts"],"names":[],"mappings":""}

package/dist/types/probe/event-kind.d.ts

@@ -0,0 +1,6 @@
+import type { AgentBusEvent } from '../bus/index.js';
+import type { RunEvent } from '../run/events.js';
+export type ProbeEventKind = RunEvent['type'] | AgentBusEvent['type'];
+export type VetoableEventKind = 'tool_executing';
+export type ProbeEvent = RunEvent | AgentBusEvent;
+//# sourceMappingURL=event-kind.d.ts.map

package/dist/types/probe/event-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-kind.d.ts","sourceRoot":"","sources":["../../../src/types/probe/event-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAEhD,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;AAErE,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAEhD,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,aAAa,CAAA"}

package/dist/types/probe/event-kind.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-kind.js.map

package/dist/types/probe/event-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-kind.js","sourceRoot":"","sources":["../../../src/types/probe/event-kind.ts"],"names":[],"mappings":""}

package/dist/types/probe/event-of.d.ts

@@ -0,0 +1,5 @@
+import type { ProbeEvent, ProbeEventKind } from './event-kind.js';
+export type ProbeEventOf<K extends ProbeEventKind> = Extract<ProbeEvent, {
+    type: K;
+}>;
+//# sourceMappingURL=event-of.d.ts.map

package/dist/types/probe/event-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-of.d.ts","sourceRoot":"","sources":["../../../src/types/probe/event-of.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAEjE,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,cAAc,IAAI,OAAO,CAAC,UAAU,EAAE;IAAE,IAAI,EAAE,CAAC,CAAA;CAAE,CAAC,CAAA"}

package/dist/types/probe/event-of.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=event-of.js.map

package/dist/types/probe/event-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-of.js","sourceRoot":"","sources":["../../../src/types/probe/event-of.ts"],"names":[],"mappings":""}

package/dist/types/probe/index.d.ts

@@ -0,0 +1,4 @@
+export type { ProbeEvent, ProbeEventKind, VetoableEventKind } from './event-kind.js';
+export type { ProbeEventOf } from './event-of.js';
+export type { ProbeContext, ProbeHandler, ProbeOptions, Unsubscribe, VetoDecision, VetoHandler, VetoOutcome, } from './registry.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/probe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/types/probe/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACpF,YAAY,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,YAAY,EACX,YAAY,EACZ,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,WAAW,GACX,MAAM,eAAe,CAAA"}

package/dist/types/probe/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/types/probe/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/probe/index.ts"],"names":[],"mappings":""}

package/dist/types/probe/registry.d.ts

@@ -0,0 +1,27 @@
+import type { RunId } from '../ids/index.js';
+import type { ProbeEventKind, VetoableEventKind } from './event-kind.js';
+import type { ProbeEventOf } from './event-of.js';
+export type Unsubscribe = () => void;
+export interface ProbeContext {
+    readonly runId?: RunId;
+    readonly isReplay: boolean;
+}
+export type ProbeHandler<K extends ProbeEventKind> = (event: ProbeEventOf<K>, ctx: ProbeContext) => void;
+export type VetoDecision = 'allow' | 'deny' | {
+    readonly action: 'deny';
+    readonly reason: string;
+};
+export type VetoHandler<K extends VetoableEventKind> = (event: ProbeEventOf<K>, ctx: ProbeContext) => VetoDecision;
+export interface VetoOutcome {
+    readonly action: 'allow' | 'deny';
+    readonly probeName?: string;
+    readonly reason?: string;
+}
+export interface ProbeOptions<K extends ProbeEventKind = ProbeEventKind> {
+    readonly where?: (event: ProbeEventOf<K>) => boolean;
+    readonly priority?: number;
+    readonly name?: string;
+    readonly otel?: boolean;
+    readonly override?: boolean;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/types/probe/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/types/probe/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEjD,MAAM,MAAM,WAAW,GAAG,MAAM,IAAI,CAAA;AAEpC,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;CAC1B;AAED,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,cAAc,IAAI,CACpD,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,YAAY,KACb,IAAI,CAAA;AAET,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAElG,MAAM,MAAM,WAAW,CAAC,CAAC,SAAS,iBAAiB,IAAI,CACtD,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,EACtB,GAAG,EAAE,YAAY,KACb,YAAY,CAAA;AAEjB,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,YAAY,CAAC,CAAC,SAAS,cAAc,GAAG,cAAc;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,OAAO,CAAA;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAC3B"}

package/dist/types/probe/registry.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registry.js.map

package/dist/types/probe/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/types/probe/registry.ts"],"names":[],"mappings":""}

package/dist/types/provider/interface.d.ts

@@ -1,3 +1,4 @@
+import type { DoctorCheckResult } from '../doctor/index.js';
 import type { ChatCompletionParams, ChatCompletionResponse } from './chat.js';
 import type { ModelInfo } from './model.js';
 import type { StreamChunk } from './stream.js';
@@ -8,5 +9,14 @@ export interface LLMProvider {
     chatStream(params: ChatCompletionParams): AsyncIterable<StreamChunk>;
     listModels?(): Promise<ModelInfo[]>;
     healthCheck?(): Promise<boolean>;
+    /**
+     * Optional structured health probe used by `runDoctor()`.
+     *
+     * Returns a `DoctorCheckResult` with provider-specific detail
+     * (latency, model availability, auth status, …). Providers that
+     * cannot be cheaply probed should return `{ status: 'inconclusive' }`
+     * so the doctor doesn't mark them as failing — see ses_007 Q6.4.
+     */
+    doctorCheck?(): Promise<DoctorCheckResult>;
 }
 //# sourceMappingURL=interface.d.ts.map

package/dist/types/provider/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/types/provider/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAEnE,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAEpE,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEnC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAChC"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../../src/types/provider/interface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAE3D,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAC3C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IAErB,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAEnE,UAAU,CAAC,MAAM,EAAE,oBAAoB,GAAG,aAAa,CAAC,WAAW,CAAC,CAAA;IAEpE,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAEnC,WAAW,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IAEhC;;;;;;;OAOG;IACH,WAAW,CAAC,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAA;CAC1C"}

package/dist/vault/instrumentation.d.ts

@@ -0,0 +1,11 @@
+import { type ProbeRegistry } from '../probe/registry.js';
+import type { CredentialVault } from '../types/connector/index.js';
+import type { RunId, TenantId } from '../types/ids/index.js';
+export interface VaultInstrumentationOptions {
+    readonly probes?: ProbeRegistry;
+    readonly runId?: RunId;
+    readonly vaultId?: string;
+    readonly tenantId?: TenantId;
+}
+export declare function wrapVaultWithProbes(vault: CredentialVault, opts?: VaultInstrumentationOptions): CredentialVault;
+//# sourceMappingURL=instrumentation.d.ts.map

package/dist/vault/instrumentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.d.ts","sourceRoot":"","sources":["../../src/vault/instrumentation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,aAAa,EAAiC,MAAM,sBAAsB,CAAA;AACxF,OAAO,KAAK,EAA6B,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7F,OAAO,KAAK,EAA6B,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AAEvF,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAA;CAC5B;AAED,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,eAAe,EACtB,IAAI,GAAE,2BAAgC,GACpC,eAAe,CAwCjB"}

package/dist/vault/instrumentation.js

@@ -0,0 +1,32 @@
+import { buildProbeContext } from '../probe/context.js';
+import { probe as defaultProbeRegistry } from '../probe/registry.js';
+export function wrapVaultWithProbes(vault, opts = {}) {
+    const probes = opts.probes ?? defaultProbeRegistry;
+    const runId = opts.runId;
+    const vaultId = opts.vaultId ?? vault.constructor.name;
+    const tenantIdHint = opts.tenantId;
+    return {
+        store(tenantId, connectorId, label, auth) {
+            return vault.store(tenantId, connectorId, label, auth);
+        },
+        async retrieve(credentialId) {
+            const result = await vault.retrieve(credentialId);
+            probes.dispatch({
+                type: 'vault_lookup',
+                vaultId,
+                credentialId,
+                tenantId: tenantIdHint,
+                found: result !== undefined,
+                runId,
+            }, buildProbeContext({ runId }));
+            return result;
+        },
+        revoke(credentialId) {
+            return vault.revoke(credentialId);
+        },
+        list(tenantId, connectorId) {
+            return vault.list(tenantId, connectorId);
+        },
+    };
+}
+//# sourceMappingURL=instrumentation.js.map

package/dist/vault/instrumentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.js","sourceRoot":"","sources":["../../src/vault/instrumentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EAAsB,KAAK,IAAI,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAWxF,MAAM,UAAU,mBAAmB,CAClC,KAAsB,EACtB,OAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,oBAAoB,CAAA;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;IACxB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAA;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAA;IAElC,OAAO;QACN,KAAK,CACJ,QAAkB,EAClB,WAAwB,EACxB,KAAa,EACb,IAAgB;YAEhB,OAAO,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,CAAA;QACvD,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,YAA0B;YACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,CACd;gBACC,IAAI,EAAE,cAAc;gBACpB,OAAO;gBACP,YAAY;gBACZ,QAAQ,EAAE,YAAY;gBACtB,KAAK,EAAE,MAAM,KAAK,SAAS;gBAC3B,KAAK;aACL,EACD,iBAAiB,CAAC,EAAE,KAAK,EAAE,CAAC,CAC5B,CAAA;YACD,OAAO,MAAM,CAAA;QACd,CAAC;QAED,MAAM,CAAC,YAA0B;YAChC,OAAO,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;QAClC,CAAC;QAED,IAAI,CAAC,QAAkB,EAAE,WAAyB;YACjD,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;QACzC,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/vault/instrumentation.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=instrumentation.test.d.ts.map

package/dist/vault/instrumentation.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.test.d.ts","sourceRoot":"","sources":["../../src/vault/instrumentation.test.ts"],"names":[],"mappings":""}

package/dist/vault/instrumentation.test.js

@@ -0,0 +1,80 @@
+import { describe, expect, it } from 'vitest';
+import { createProbeRegistry } from '../probe/registry.js';
+import { InMemoryCredentialVault } from './InMemoryCredentialVault.js';
+import { wrapVaultWithProbes } from './instrumentation.js';
+const tenant = 'tnt_acme';
+const connector = 'conn_x';
+describe('wrapVaultWithProbes', () => {
+    it('emits vault_lookup with found:true when retrieve hits', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', { type: 'apiKey', apiKey: 's' });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg, vaultId: 'in-memory' });
+        const result = await wrapped.retrieve(ref.id);
+        expect(result).toBeDefined();
+        expect(seen.length).toBe(1);
+        const event = seen[0];
+        expect(event.type).toBe('vault_lookup');
+        expect(event.found).toBe(true);
+        expect(event.vaultId).toBe('in-memory');
+        expect(event.credentialId).toBe(ref.id);
+    });
+    it('emits vault_lookup with found:false when retrieve misses', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const wrapped = wrapVaultWithProbes(new InMemoryCredentialVault(), {
+            probes: reg,
+            vaultId: 'in-memory',
+        });
+        const missing = 'cred_missing';
+        const result = await wrapped.retrieve(missing);
+        expect(result).toBeUndefined();
+        expect(seen.length).toBe(1);
+        const event = seen[0];
+        expect(event.found).toBe(false);
+        expect(event.credentialId).toBe(missing);
+    });
+    it('does not emit on store/revoke/list — retrieve is the audit point', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const wrapped = wrapVaultWithProbes(new InMemoryCredentialVault(), { probes: reg });
+        const ref = await wrapped.store(tenant, connector, 'k', {
+            type: 'apiKey',
+            apiKey: 's',
+        });
+        await wrapped.list(tenant);
+        await wrapped.revoke(ref.id);
+        expect(seen.length).toBe(0);
+    });
+    it('does not leak the secret value in the emitted event', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', {
+            type: 'apiKey',
+            apiKey: 'super-secret-value',
+        });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg });
+        await wrapped.retrieve(ref.id);
+        const event = seen[0];
+        const serialized = JSON.stringify(event);
+        expect(serialized).not.toContain('super-secret-value');
+    });
+    it('falls back to constructor.name as vaultId when not specified', async () => {
+        const reg = createProbeRegistry();
+        const seen = [];
+        reg.onAny((event) => seen.push(event));
+        const inner = new InMemoryCredentialVault();
+        const ref = await inner.store(tenant, connector, 'k', { type: 'apiKey', apiKey: 's' });
+        const wrapped = wrapVaultWithProbes(inner, { probes: reg });
+        await wrapped.retrieve(ref.id);
+        const event = seen[0];
+        expect(event.vaultId).toBe('InMemoryCredentialVault');
+    });
+});
+//# sourceMappingURL=instrumentation.test.js.map

package/dist/vault/instrumentation.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrumentation.test.js","sourceRoot":"","sources":["../../src/vault/instrumentation.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAI1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAA;AACtE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAE1D,MAAM,MAAM,GAAG,UAAsB,CAAA;AACrC,MAAM,SAAS,GAAG,QAAiB,CAAA;AAEnC,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAW,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QAEjF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,uBAAuB,EAAE,EAAE;YAClE,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,WAAW;SACpB,CAAC,CAAA;QACF,MAAM,OAAO,GAAG,cAA8B,CAAA;QAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;QAE9C,MAAM,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAA;QAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,uBAAuB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YACvD,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,GAAG;SACF,CAAC,CAAA;QACX,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE;YACrD,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,oBAAoB;SACnB,CAAC,CAAA;QACX,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAA;QACjC,MAAM,IAAI,GAAoB,EAAE,CAAA;QAChC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAsB,CAAC,CAAC,CAAA;QAEvD,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;QAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAW,CAAC,CAAA;QAC/F,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;QAC3D,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA6C,CAAA;QACjE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@namzu/sdk",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "Open-source AI agent SDK with a built-in runtime. Nothing between you and your agents.",
   "license": "FSL-1.1-MIT",
   "type": "module",

package/src/bus/index.ts

@@ -5,6 +5,8 @@ import {
 	DEFAULT_LOCK_TIMEOUT_MS,
 	DEFAULT_MAX_LOCKS_PER_AGENT,
 } from '../constants/bus/index.js'
+import { buildProbeContext } from '../probe/context.js'
+import { type ProbeRegistry, probe as defaultProbeRegistry } from '../probe/registry.js'
 import type { AgentBusEvent, AgentBusEventListener } from '../types/bus/index.js'
 import type { RunId } from '../types/ids/index.js'
 import type { Logger } from '../utils/logger.js'
@@ -39,10 +41,17 @@ export class AgentBus {
 	private readonly listeners: Set<AgentBusEventListener> = new Set()
 	private readonly log: Logger
 	private readonly config: AgentBusConfig
+	private readonly probes: ProbeRegistry
 
-	constructor(log: Logger, config: Partial<AgentBusConfig> = {}) {
+	constructor(
+		log: Logger,
+		config: Partial<AgentBusConfig> = {},
+		probeRegistry: ProbeRegistry = defaultProbeRegistry,
+	) {
 		this.config = { ...DEFAULT_AGENT_BUS_CONFIG, ...config }
 		this.log = log.child({ component: 'AgentBus' })
+		this.probes = probeRegistry
+		this.probes.setLogger(log)
 
 		const emitFn = (event: AgentBusEvent): void => this.emit(event)
 
@@ -70,16 +79,18 @@ export class AgentBus {
 	}
 
 	private emit(event: AgentBusEvent): void {
-		for (const listener of this.listeners) {
-			try {
-				listener(event)
-			} catch (error) {
-				this.log.error('event listener threw', {
-					eventType: event.type,
-					error: error instanceof Error ? error.message : String(error),
-				})
+		this.probes.dispatch(event, buildProbeContext(), () => {
+			for (const listener of this.listeners) {
+				try {
+					listener(event)
+				} catch (error) {
+					this.log.error('event listener threw', {
+						eventType: event.type,
+						error: error instanceof Error ? error.message : String(error),
+					})
+				}
 			}
-		}
+		})
 	}
 
 	cleanupAgent(runId: RunId): void {

package/src/probe/context.ts

@@ -0,0 +1,14 @@
+import type { RunId } from '../types/ids/index.js'
+import type { ProbeContext } from '../types/probe/index.js'
+
+export interface ProbeContextInput {
+	readonly runId?: RunId
+	readonly isReplay?: boolean
+}
+
+export function buildProbeContext(input: ProbeContextInput = {}): ProbeContext {
+	return Object.freeze({
+		runId: input.runId,
+		isReplay: input.isReplay ?? false,
+	})
+}

package/src/probe/errors.ts

@@ -0,0 +1,27 @@
+import type { VetoableEventKind } from '../types/probe/index.js'
+
+export class ProbeNameCollisionError extends Error {
+	readonly probeName: string
+
+	constructor(probeName: string) {
+		super(
+			`Probe name "${probeName}" is already registered. Pass { override: true } to replace, or pick a different name.`,
+		)
+		this.name = 'ProbeNameCollisionError'
+		this.probeName = probeName
+	}
+}
+
+export class ProbeVetoError extends Error {
+	readonly probeName: string
+	readonly reason: string
+	readonly eventKind: VetoableEventKind
+
+	constructor(probeName: string, reason: string, eventKind: VetoableEventKind) {
+		super(`Operation denied by probe "${probeName}" on ${eventKind}: ${reason}`)
+		this.name = 'ProbeVetoError'
+		this.probeName = probeName
+		this.reason = reason
+		this.eventKind = eventKind
+	}
+}

package/src/probe/index.ts

@@ -0,0 +1,4 @@
+export { ProbeNameCollisionError, ProbeVetoError } from './errors.js'
+export { buildProbeContext } from './context.js'
+export type { ProbeContextInput } from './context.js'
+export { ProbeRegistry, createProbeRegistry, probe } from './registry.js'