@namzu/sdk 34.2.0 → 36.0.0

package/dist/test-support/ids.js

@@ -1,70 +1,62 @@
-/**
- * Unchecked id constructors, for fixtures only.
- *
- * A test that needs three hundred distinct ids is not testing prefix
- * validation, and paying a `startsWith` per literal to say `ses_1` buys it
- * nothing. These are the cheap landing zone for that: same call shape as the
- * `as*Id` constructors in `utils/id.ts`, no check.
- *
- * **Deliberately NOT exported from the package barrel.** The whole value of
- * the checked constructors is that a malformed id cannot reach a store key,
- * and an unchecked one on the public surface is a supported way around that.
- * `test-support/` is reachable from inside this repo and nowhere else, which
- * is exactly the reach this needs.
- *
- * Two shapes rather than forty functions, because a fixture wants brevity:
- * `fixtureId.run('a')` reads at the call site, and `unchecked<RunId>(s)`
- * covers anything the table misses.
- */
+/** Deterministic UUID fixtures. Deliberately absent from the package barrel. */
+import { createHash } from 'node:crypto';
 import { unsafeId } from '../types/ids/brand.js';
 /** Casts without checking. The name is the warning. */
 export function unchecked(value) {
     return unsafeId(value);
 }
+/** Maps a readable fixture label to a stable, valid UUID without global state. */
+export function fixtureUuid(label) {
+    const bytes = createHash('sha256').update(label).digest().subarray(0, 16);
+    bytes[6] = ((bytes[6] ?? 0) & 0x0f) | 0x40;
+    bytes[8] = ((bytes[8] ?? 0) & 0x3f) | 0x80;
+    const hex = bytes.toString('hex');
+    return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
 /**
- * One entry per prefixed id type, keyed by the bare concept rather than the
+ * One entry per entity type, keyed by the bare concept rather than the
  * type name — `fixtureId.run('a')`, not `fixtureId.RunId('a')`.
  */
 export const fixtureId = {
-    run: (suffix) => unsafeId(`run_${suffix}`),
-    message: (suffix) => unsafeId(`msg_${suffix}`),
-    session: (suffix) => unsafeId(`ses_${suffix}`),
-    toolCall: (suffix) => unsafeId(`call_${suffix}`),
-    activity: (suffix) => unsafeId(`act_${suffix}`),
-    task: (suffix) => unsafeId(`task_${suffix}`),
-    plan: (suffix) => unsafeId(`plan_${suffix}`),
-    knowledgeBase: (suffix) => unsafeId(`kb_${suffix}`),
-    document: (suffix) => unsafeId(`doc_${suffix}`),
-    chunk: (suffix) => unsafeId(`chk_${suffix}`),
-    connector: (suffix) => unsafeId(`conn_${suffix}`),
-    connectorInstance: (suffix) => unsafeId(`ci_${suffix}`),
-    tenant: (suffix) => unsafeId(`tnt_${suffix}`),
-    credential: (suffix) => unsafeId(`cred_${suffix}`),
-    executionContext: (suffix) => unsafeId(`ectx_${suffix}`),
-    mCPServer: (suffix) => unsafeId(`mcp_${suffix}`),
-    mCPClient: (suffix) => unsafeId(`mcpc_${suffix}`),
-    mCPSession: (suffix) => unsafeId(`mcps_${suffix}`),
-    environment: (suffix) => unsafeId(`env_${suffix}`),
-    checkpoint: (suffix) => unsafeId(`cp_${suffix}`),
-    lock: (suffix) => unsafeId(`lock_${suffix}`),
-    advisory: (suffix) => unsafeId(`adv_${suffix}`),
-    advisoryCall: (suffix) => unsafeId(`advc_${suffix}`),
-    emergencySave: (suffix) => unsafeId(`esave_${suffix}`),
-    memory: (suffix) => unsafeId(`mem_${suffix}`),
-    plugin: (suffix) => unsafeId(`plg_${suffix}`),
-    sandbox: (suffix) => unsafeId(`sbx_${suffix}`),
-    auditEvent: (suffix) => unsafeId(`aud_${suffix}`),
-    user: (suffix) => unsafeId(`usr_${suffix}`),
-    agent: (suffix) => unsafeId(`agt_${suffix}`),
-    memoryStoreRef: (suffix) => unsafeId(`mms_${suffix}`),
-    vaultRef: (suffix) => unsafeId(`vlt_${suffix}`),
-    knowledgeBaseRef: (suffix) => unsafeId(`kbs_${suffix}`),
-    project: (suffix) => unsafeId(`prj_${suffix}`),
-    topic: (suffix) => unsafeId(`top_${suffix}`),
-    subSession: (suffix) => unsafeId(`sub_${suffix}`),
-    handoff: (suffix) => unsafeId(`hof_${suffix}`),
-    workspace: (suffix) => unsafeId(`wsp_${suffix}`),
-    summary: (suffix) => unsafeId(`sum_${suffix}`),
-    deliverable: (suffix) => unsafeId(`del_${suffix}`),
+    run: (suffix) => unsafeId(fixtureUuid(`run_${suffix}`)),
+    message: (suffix) => unsafeId(fixtureUuid(`msg_${suffix}`)),
+    session: (suffix) => unsafeId(fixtureUuid(`ses_${suffix}`)),
+    toolCall: (suffix) => unsafeId(fixtureUuid(`call_${suffix}`)),
+    activity: (suffix) => unsafeId(fixtureUuid(`act_${suffix}`)),
+    task: (suffix) => unsafeId(fixtureUuid(`task_${suffix}`)),
+    plan: (suffix) => unsafeId(fixtureUuid(`plan_${suffix}`)),
+    knowledgeBase: (suffix) => unsafeId(fixtureUuid(`kb_${suffix}`)),
+    document: (suffix) => unsafeId(fixtureUuid(`doc_${suffix}`)),
+    chunk: (suffix) => unsafeId(fixtureUuid(`chk_${suffix}`)),
+    connector: (suffix) => unsafeId(fixtureUuid(`conn_${suffix}`)),
+    connectorInstance: (suffix) => unsafeId(fixtureUuid(`ci_${suffix}`)),
+    tenant: (suffix) => unsafeId(fixtureUuid(`tnt_${suffix}`)),
+    credential: (suffix) => unsafeId(fixtureUuid(`cred_${suffix}`)),
+    executionContext: (suffix) => unsafeId(fixtureUuid(`ectx_${suffix}`)),
+    mCPServer: (suffix) => unsafeId(fixtureUuid(`mcp_${suffix}`)),
+    mCPClient: (suffix) => unsafeId(fixtureUuid(`mcpc_${suffix}`)),
+    mCPSession: (suffix) => unsafeId(fixtureUuid(`mcps_${suffix}`)),
+    environment: (suffix) => unsafeId(fixtureUuid(`env_${suffix}`)),
+    checkpoint: (suffix) => unsafeId(fixtureUuid(`cp_${suffix}`)),
+    lock: (suffix) => unsafeId(fixtureUuid(`lock_${suffix}`)),
+    advisory: (suffix) => unsafeId(fixtureUuid(`adv_${suffix}`)),
+    advisoryCall: (suffix) => unsafeId(fixtureUuid(`advc_${suffix}`)),
+    emergencySave: (suffix) => unsafeId(fixtureUuid(`esave_${suffix}`)),
+    memory: (suffix) => unsafeId(fixtureUuid(`mem_${suffix}`)),
+    plugin: (suffix) => unsafeId(fixtureUuid(`plg_${suffix}`)),
+    sandbox: (suffix) => unsafeId(fixtureUuid(`sbx_${suffix}`)),
+    auditEvent: (suffix) => unsafeId(fixtureUuid(`aud_${suffix}`)),
+    user: (suffix) => unsafeId(fixtureUuid(`usr_${suffix}`)),
+    agent: (suffix) => unsafeId(fixtureUuid(`agt_${suffix}`)),
+    memoryStoreRef: (suffix) => unsafeId(fixtureUuid(`mms_${suffix}`)),
+    vaultRef: (suffix) => unsafeId(fixtureUuid(`vlt_${suffix}`)),
+    knowledgeBaseRef: (suffix) => unsafeId(fixtureUuid(`kbs_${suffix}`)),
+    project: (suffix) => unsafeId(fixtureUuid(`prj_${suffix}`)),
+    topic: (suffix) => unsafeId(fixtureUuid(`top_${suffix}`)),
+    subSession: (suffix) => unsafeId(fixtureUuid(`sub_${suffix}`)),
+    handoff: (suffix) => unsafeId(fixtureUuid(`hof_${suffix}`)),
+    workspace: (suffix) => unsafeId(fixtureUuid(`wsp_${suffix}`)),
+    summary: (suffix) => unsafeId(fixtureUuid(`sum_${suffix}`)),
+    deliverable: (suffix) => unsafeId(fixtureUuid(`del_${suffix}`)),
 };
 //# sourceMappingURL=ids.js.map

package/dist/test-support/ids.js.map

@@ -1 +1 @@
-{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/test-support/ids.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AA4ChD,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAmB,KAAa;IACxD,OAAO,QAAQ,CAAI,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,GAAG,EAAE,CAAC,MAAc,EAAS,EAAE,CAAC,QAAQ,CAAQ,OAAO,MAAM,EAAE,CAAC;IAChE,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,QAAQ,MAAM,EAAE,CAAC;IAChF,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,OAAO,MAAM,EAAE,CAAC;IAC/E,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,QAAQ,MAAM,EAAE,CAAC;IACpE,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,QAAQ,MAAM,EAAE,CAAC;IACpE,aAAa,EAAE,CAAC,MAAc,EAAmB,EAAE,CAAC,QAAQ,CAAkB,MAAM,MAAM,EAAE,CAAC;IAC7F,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,OAAO,MAAM,EAAE,CAAC;IAC/E,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,OAAO,MAAM,EAAE,CAAC;IACtE,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,QAAQ,MAAM,EAAE,CAAC;IACnF,iBAAiB,EAAE,CAAC,MAAc,EAAuB,EAAE,CAC1D,QAAQ,CAAsB,MAAM,MAAM,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,OAAO,MAAM,EAAE,CAAC;IACzE,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,QAAQ,MAAM,EAAE,CAAC;IACtF,gBAAgB,EAAE,CAAC,MAAc,EAAsB,EAAE,CACxD,QAAQ,CAAqB,QAAQ,MAAM,EAAE,CAAC;IAC/C,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,OAAO,MAAM,EAAE,CAAC;IAClF,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,QAAQ,MAAM,EAAE,CAAC;IACnF,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,QAAQ,MAAM,EAAE,CAAC;IACtF,WAAW,EAAE,CAAC,MAAc,EAAiB,EAAE,CAAC,QAAQ,CAAgB,OAAO,MAAM,EAAE,CAAC;IACxF,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,MAAM,MAAM,EAAE,CAAC;IACpF,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,QAAQ,MAAM,EAAE,CAAC;IACpE,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,OAAO,MAAM,EAAE,CAAC;IAC/E,YAAY,EAAE,CAAC,MAAc,EAAkB,EAAE,CAAC,QAAQ,CAAiB,QAAQ,MAAM,EAAE,CAAC;IAC5F,aAAa,EAAE,CAAC,MAAc,EAAmB,EAAE,CAAC,QAAQ,CAAkB,SAAS,MAAM,EAAE,CAAC;IAChG,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,OAAO,MAAM,EAAE,CAAC;IACzE,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,OAAO,MAAM,EAAE,CAAC;IACzE,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,OAAO,MAAM,EAAE,CAAC;IACrF,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,OAAO,MAAM,EAAE,CAAC;IACnE,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,OAAO,MAAM,EAAE,CAAC;IACtE,cAAc,EAAE,CAAC,MAAc,EAAkB,EAAE,CAAC,QAAQ,CAAiB,OAAO,MAAM,EAAE,CAAC;IAC7F,QAAQ,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,OAAO,MAAM,EAAE,CAAC;IAC3E,gBAAgB,EAAE,CAAC,MAAc,EAAoB,EAAE,CACtD,QAAQ,CAAmB,OAAO,MAAM,EAAE,CAAC;IAC5C,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,OAAO,MAAM,EAAE,CAAC;IACtE,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,OAAO,MAAM,EAAE,CAAC;IACrF,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,OAAO,MAAM,EAAE,CAAC;IAClF,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,OAAO,MAAM,EAAE,CAAC;IAC5E,WAAW,EAAE,CAAC,MAAc,EAAiB,EAAE,CAAC,QAAQ,CAAgB,OAAO,MAAM,EAAE,CAAC;CAC/E,CAAA"}
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../../src/test-support/ids.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AA4ChD,uDAAuD;AACvD,MAAM,UAAU,SAAS,CAAmB,KAAa;IACxD,OAAO,QAAQ,CAAI,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,WAAW,CAAC,KAAa;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACjC,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3G,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG;IACxB,GAAG,EAAE,CAAC,MAAc,EAAS,EAAE,CAAC,QAAQ,CAAQ,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAC7F,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC5F,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACjF,aAAa,EAAE,CAAC,MAAc,EAAmB,EAAE,CAClD,QAAQ,CAAkB,WAAW,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IACvD,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC5F,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACnF,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAChG,iBAAiB,EAAE,CAAC,MAAc,EAAuB,EAAE,CAC1D,QAAQ,CAAsB,WAAW,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACtF,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAC5C,QAAQ,CAAe,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACtD,gBAAgB,EAAE,CAAC,MAAc,EAAsB,EAAE,CACxD,QAAQ,CAAqB,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAC5D,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC/F,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IAChG,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAC5C,QAAQ,CAAe,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACtD,WAAW,EAAE,CAAC,MAAc,EAAiB,EAAE,CAC9C,QAAQ,CAAgB,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACtD,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAAC,QAAQ,CAAe,WAAW,CAAC,MAAM,MAAM,EAAE,CAAC,CAAC;IACjG,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACjF,QAAQ,EAAE,CAAC,MAAc,EAAc,EAAE,CAAC,QAAQ,CAAa,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC5F,YAAY,EAAE,CAAC,MAAc,EAAkB,EAAE,CAChD,QAAQ,CAAiB,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC;IACxD,aAAa,EAAE,CAAC,MAAc,EAAmB,EAAE,CAClD,QAAQ,CAAkB,WAAW,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC1D,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACtF,MAAM,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACtF,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAC5C,QAAQ,CAAe,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,MAAc,EAAU,EAAE,CAAC,QAAQ,CAAS,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAChF,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACnF,cAAc,EAAE,CAAC,MAAc,EAAkB,EAAE,CAClD,QAAQ,CAAiB,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACvD,QAAQ,EAAE,CAAC,MAAc,EAAY,EAAE,CAAC,QAAQ,CAAW,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACxF,gBAAgB,EAAE,CAAC,MAAc,EAAoB,EAAE,CACtD,QAAQ,CAAmB,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzD,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,KAAK,EAAE,CAAC,MAAc,EAAW,EAAE,CAAC,QAAQ,CAAU,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACnF,UAAU,EAAE,CAAC,MAAc,EAAgB,EAAE,CAC5C,QAAQ,CAAe,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,SAAS,EAAE,CAAC,MAAc,EAAe,EAAE,CAAC,QAAQ,CAAc,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IAC/F,OAAO,EAAE,CAAC,MAAc,EAAa,EAAE,CAAC,QAAQ,CAAY,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzF,WAAW,EAAE,CAAC,MAAc,EAAiB,EAAE,CAC9C,QAAQ,CAAgB,WAAW,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;CAC7C,CAAA"}

package/dist/tools/advisory/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/advisory/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAG/D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAA;CACrC;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,cAAc,EAAE,CAmJ/E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/tools/advisory/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAG/D,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAA;CACrC;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,oBAAoB,GAAG,cAAc,EAAE,CAqJ/E"}

package/dist/tools/advisory/index.js

@@ -61,7 +61,9 @@ export function buildAdvisoryTools(opts) {
         permissions: [],
         readOnly: true,
         destructive: false,
-        concurrencySafe: true,
+        // Consultations debit one run account and one per-run advisory quota.
+        // Serial execution makes the next admission see the preceding receipt.
+        concurrencySafe: false,
         async execute({ advisor_id, question, domain, urgency, include_context }) {
             const budgetCheck = advisoryCtx.checkBudget();
             if (!budgetCheck.allowed) {

package/dist/tools/advisory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/advisory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAM7C,MAAM,UAAU,kBAAkB,CAAC,IAA0B;IAC5D,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAE5B,MAAM,YAAY,GAAG,UAAU,CAAC;QAC/B,IAAI,EAAE,eAAe;QACrB,WAAW,EACV,wKAAwK;QACzK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,CAAC,OAAO;YACZ,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,CAAA;YAE5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpF,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,cAAc,OAAO,GAAG,CAAA;YACpD,CAAC,CAAC,CAAA;YAEF,MAAM,UAAU,GACf,MAAM,CAAC,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,SAAS,aAAa;gBACrF,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,yBAAyB,CAAA;YAEnD,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EACL,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACpB,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,UAAU,EAAE;gBACpF,IAAI,EAAE;oBACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;wBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;qBACd,CAAC,CAAC;oBACH,MAAM;iBACN;aACD,CAAA;QACF,CAAC;KACD,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,UAAU,CAAC;QACjC,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACV,gOAAgO;QACjO,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAC3E,MAAM,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;YAC1E,OAAO,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;iBAC/B,QAAQ,EAAE;iBACV,QAAQ,CAAC,iCAAiC,CAAC;YAC7C,eAAe,EAAE,CAAC;iBAChB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;SAC1E,CAAC;QACF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE;YACvE,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO;oBACN,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,2BAA2B;oBACzD,KAAK,EAAE,WAAW,CAAC,MAAM;iBACzB,CAAA;YACF,CAAC;YAED,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YAChE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,UAAU;wBACjB,CAAC,CAAC,sBAAsB,UAAU,EAAE;wBACpC,CAAC,CAAC,MAAM;4BACP,CAAC,CAAC,gCAAgC,MAAM,EAAE;4BAC1C,CAAC,CAAC,wBAAwB;oBAC5B,KAAK,EAAE,2BAA2B;iBAClC,CAAA;YACF,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CACzD,OAAO,EACP,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,EACrF,WAAW,CAAC,WAAW,EAAE,CACzB,CAAA;YAED,WAAW,CAAC,UAAU,CAAC;gBACtB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,OAAO,EAAE;oBACR,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ;oBACR,MAAM;oBACN,OAAO;oBACP,cAAc,EAAE,eAAe;iBAC/B;gBACD,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,KAAK,EAAE,eAAe,CAAC,KAAK;gBAC5B,IAAI,EAAE,eAAe,CAAC,IAAI;gBAC1B,UAAU,EAAE,eAAe,CAAC,UAAU;gBACtC,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAa,EAAE,CAAA;YAE7B,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,IAAI,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAEnF,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnF,QAAQ,CAAC,IAAI,CACZ,kBAAkB,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAA;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,QAAQ,CAAC,IAAI,CACZ,mBAAmB,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAA;YACF,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE;oBACL,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,KAAK,EAAE,eAAe,CAAC,KAAK;oBAC5B,UAAU,EAAE,eAAe,CAAC,UAAU;iBACtC;aACD,CAAA;QACF,CAAC;KACD,CAAC,CAAA;IAEF,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;AACtC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/tools/advisory/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAM7C,MAAM,UAAU,kBAAkB,CAAC,IAA0B;IAC5D,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IAE5B,MAAM,YAAY,GAAG,UAAU,CAAC;QAC/B,IAAI,EAAE,eAAe;QACrB,WAAW,EACV,wKAAwK;QACzK,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,IAAI;QACrB,KAAK,CAAC,OAAO;YACZ,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAA;YAC/C,MAAM,MAAM,GAAG,WAAW,CAAC,eAAe,EAAE,CAAA;YAE5C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAChC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACpF,OAAO,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,cAAc,OAAO,GAAG,CAAA;YACpD,CAAC,CAAC,CAAA;YAEF,MAAM,UAAU,GACf,MAAM,CAAC,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,gBAAgB,MAAM,CAAC,SAAS,aAAa;gBACrF,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,yBAAyB,CAAA;YAEnD,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EACL,QAAQ,CAAC,MAAM,KAAK,CAAC;oBACpB,CAAC,CAAC,yBAAyB;oBAC3B,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,2BAA2B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,UAAU,EAAE;gBACpF,IAAI,EAAE;oBACL,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC9B,EAAE,EAAE,CAAC,CAAC,EAAE;wBACR,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE;wBACxB,KAAK,EAAE,CAAC,CAAC,KAAK;qBACd,CAAC,CAAC;oBACH,MAAM;iBACN;aACD,CAAA;QACF,CAAC;KACD,CAAC,CAAA;IAEF,MAAM,cAAc,GAAG,UAAU,CAAC;QACjC,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACV,gOAAgO;QACjO,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;YAC5E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,4CAA4C,CAAC;YAC3E,MAAM,EAAE,CAAC;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;YAC1E,OAAO,EAAE,CAAC;iBACR,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;iBAC/B,QAAQ,EAAE;iBACV,QAAQ,CAAC,iCAAiC,CAAC;YAC7C,eAAe,EAAE,CAAC;iBAChB,OAAO,EAAE;iBACT,QAAQ,EAAE;iBACV,QAAQ,CAAC,8DAA8D,CAAC;SAC1E,CAAC;QACF,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,KAAK;QAClB,sEAAsE;QACtE,uEAAuE;QACvE,eAAe,EAAE,KAAK;QACtB,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE;YACvE,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,EAAE,CAAA;YAC7C,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO;oBACN,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,WAAW,CAAC,MAAM,IAAI,2BAA2B;oBACzD,KAAK,EAAE,WAAW,CAAC,MAAM;iBACzB,CAAA;YACF,CAAC;YAED,MAAM,OAAO,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YAChE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;oBACN,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,UAAU;wBACjB,CAAC,CAAC,sBAAsB,UAAU,EAAE;wBACpC,CAAC,CAAC,MAAM;4BACP,CAAC,CAAC,gCAAgC,MAAM,EAAE;4BAC1C,CAAC,CAAC,wBAAwB;oBAC5B,KAAK,EAAE,2BAA2B;iBAClC,CAAA;YACF,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CACzD,OAAO,EACP,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,EACrF,WAAW,CAAC,WAAW,EAAE,CACzB,CAAA;YAED,WAAW,CAAC,UAAU,CAAC;gBACtB,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,OAAO,EAAE;oBACR,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ;oBACR,MAAM;oBACN,OAAO;oBACP,cAAc,EAAE,eAAe;iBAC/B;gBACD,MAAM,EAAE,eAAe,CAAC,MAAM;gBAC9B,KAAK,EAAE,eAAe,CAAC,KAAK;gBAC5B,IAAI,EAAE,eAAe,CAAC,IAAI;gBAC1B,UAAU,EAAE,eAAe,CAAC,UAAU;gBACtC,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACrB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAa,EAAE,CAAA;YAE7B,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,CAAC,IAAI,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAEnF,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnF,QAAQ,CAAC,IAAI,CACZ,kBAAkB,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnF,CAAA;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrF,QAAQ,CAAC,IAAI,CACZ,mBAAmB,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrF,CAAA;YACF,CAAC;YAED,OAAO;gBACN,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;gBAC7B,IAAI,EAAE;oBACL,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,KAAK,EAAE,eAAe,CAAC,KAAK;oBAC5B,UAAU,EAAE,eAAe,CAAC,UAAU;iBACtC;aACD,CAAA;QACF,CAAC;KACD,CAAC,CAAA;IAEF,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAA;AACtC,CAAC"}

package/dist/tools/builtins/bash.d.ts

@@ -1,3 +1,5 @@
+/** The refusal when a sandbox cannot host a detached process; exported so the test states the same words. */
+export declare const SANDBOX_CANNOT_DETACH = "run_in_background is unavailable: this sandbox cannot start a detached process, and the job will not be run on the host to get around it. Run the command in the foreground, or raise `timeout` up to the tool maximum.";
 export declare const BashTool: import("../../public-types.js").ToolDefinition<{
     timeout: number;
     command: string;

package/dist/tools/builtins/bash.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/bash.ts"],"names":[],"mappings":"AA8FA,eAAO,MAAM,QAAQ;;;;EAoPnB,CAAA"}
+{"version":3,"file":"bash.d.ts","sourceRoot":"","sources":["../../../src/tools/builtins/bash.ts"],"names":[],"mappings":"AAoRA,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,4NACwL,CAAA;AAE1N,eAAO,MAAM,QAAQ;;;;EAqOnB,CAAA"}

package/dist/tools/builtins/bash.js

@@ -1,10 +1,12 @@
-import { exec } from 'node:child_process';
-import { promisify } from 'node:util';
+import { spawn } from 'node:child_process';
+import { StringDecoder } from 'node:string_decoder';
 import { z } from 'zod';
+import { SANDBOX_KILL_GRACE_MS } from '../../constants/sandbox/index.js';
 import { DANGEROUS_PATTERNS } from '../../constants/tools/index.js';
+import { killTree } from '../../process/kill-tree.js';
+import { subscribeToAbort } from '../../utils/abort.js';
 import { defineTool } from '../defineTool.js';
 import { scrubInheritedEnv } from '../env-scrub.js';
-const execAsync = promisify(exec);
 // Namzu owns its own bash timeout knob — `NAMZU_BASH_TIMEOUT_MS`.
 // The Vandal fallback (`VANDAL_NAMZU_TIMEOUT_MS`) lived here as a
 // historical bridge while Namzu was carved out of the Vandal repo,
@@ -49,30 +51,198 @@ const inputSchema = z.object({
         .optional()
         .describe('Start the command as a background job and return its id immediately, instead of waiting. The turn is not held open; read its output with the `job` tool. Use for watchers, dev servers and long builds. Do NOT write `cmd &` yourself — under the sandbox the shell that backgrounds it exits immediately and takes the job with it.'),
 });
+const MAX_SHELL_PROGRESS_CHARS = 160;
+/** Keep a bounded tail even when a process never writes a newline. */
+function appendProgressTail(previous, chunk, start, end) {
+    return (previous + chunk.slice(Math.max(start, end - MAX_SHELL_PROGRESS_CHARS), end)).slice(-MAX_SHELL_PROGRESS_CHARS);
+}
+/** Clipping a UTF-16 string must not display half of a surrogate pair. */
+function progressLine(value) {
+    let line = value.trim();
+    const first = line.charCodeAt(0);
+    if (first >= 0xdc00 && first <= 0xdfff)
+        line = line.slice(1);
+    const last = line.charCodeAt(line.length - 1);
+    if (last >= 0xd800 && last <= 0xdbff)
+        line = line.slice(0, -1);
+    return line;
+}
 /**
- * The last line worth showing from one chunk of streamed output.
- *
- * A progress line is a status, not a log: the host renders one line and
- * replaces it as the next arrives, so sending a whole chunk sends a wall
- * of text into a slot that shows one line of it. A chunk usually ends
- * mid-line and usually ends with a newline, so the last NON-EMPTY line is
- * the most recent complete thing the command actually said.
- *
- * Progress is capped rather than truncated with an ellipsis: this is
- * glanced at, and a marker in a line nobody reads to the end is noise.
+ * One latest line per stream, independent of transport chunk boundaries.
+ * Reports stay synchronous: the executor owns coalescing and backpressure.
+ * This projection adds neither an output log nor a queue of pending reports.
  */
-function lastNonEmptyLine(chunk) {
-    const lines = chunk.split('\n');
-    for (let i = lines.length - 1; i >= 0; i--) {
-        const line = lines[i]?.trim();
-        if (line)
-            return line.length > 160 ? line.slice(0, 160) : line;
-    }
-    return undefined;
+function shellProgress(report) {
+    if (!report)
+        return undefined;
+    const partial = { stdout: '', stderr: '' };
+    let lastMessage = '';
+    return ({ stream, data }) => {
+        let line = partial[stream];
+        let latest = '';
+        let start = 0;
+        // Scan delimiters without allocating an array for arbitrarily chatty output.
+        for (const match of data.matchAll(/[\r\n]/g)) {
+            line = appendProgressTail(line, data, start, match.index);
+            latest = progressLine(line) || latest;
+            line = '';
+            start = match.index + 1;
+        }
+        line = appendProgressTail(line, data, start, data.length);
+        partial[stream] = line;
+        const message = progressLine(line) || latest;
+        if (!message || message === lastMessage)
+            return;
+        lastMessage = message;
+        try {
+            report(message);
+        }
+        catch {
+            // A diagnostic observer cannot break the process output reader.
+        }
+    };
+}
+/**
+ * Keep the shell's process group until inherited pipes close. Node's exec
+ * timeout/AbortSignal kills only the wrapper and closes its pipes immediately,
+ * leaving the command and its descendants running after the promise settles.
+ */
+function execHostShell(command, options) {
+    options.signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, {
+            cwd: options.cwd,
+            env: options.env,
+            shell: true,
+            // killTree's negative PID must never target the caller's own group.
+            detached: process.platform !== 'win32',
+        });
+        const captures = {
+            stdout: {
+                chunks: [],
+                bytes: 0,
+                truncated: false,
+                decoder: new StringDecoder('utf8'),
+            },
+            stderr: {
+                chunks: [],
+                bytes: 0,
+                truncated: false,
+                decoder: new StringDecoder('utf8'),
+            },
+        };
+        let cause;
+        let failure;
+        let escalation;
+        let disposeAbort;
+        let closed = false;
+        const cancel = (origin) => {
+            if (closed || cause !== undefined)
+                return;
+            cause = origin;
+            escalation = setTimeout(() => {
+                escalation = undefined;
+                killTree(child, 'SIGKILL');
+                // A descendant can deliberately start a separate session. It is
+                // outside this group, but its inherited pipes must not hold the
+                // cancelled call forever. Keep what was captured during grace.
+                child.stdin?.destroy();
+                child.stdout?.destroy();
+                child.stderr?.destroy();
+            }, SANDBOX_KILL_GRACE_MS);
+            escalation.unref?.();
+            killTree(child, 'SIGTERM');
+        };
+        const capture = (stream, chunk) => {
+            const state = captures[stream];
+            const kept = Math.min(chunk.length, options.maxBuffer - state.bytes);
+            if (kept > 0) {
+                state.chunks.push(Buffer.from(chunk.subarray(0, kept)));
+                state.bytes += kept;
+            }
+            if (kept < chunk.length) {
+                state.truncated = true;
+                if (cause === undefined) {
+                    failure = Object.assign(new RangeError(`${stream} maxBuffer length exceeded`), {
+                        code: 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER',
+                    });
+                    cancel('maxBuffer');
+                }
+            }
+            if (options.onOutput) {
+                const data = state.decoder.write(chunk);
+                if (data)
+                    options.onOutput({ stream, data });
+            }
+        };
+        const onStdout = (chunk) => capture('stdout', chunk);
+        const onStderr = (chunk) => capture('stderr', chunk);
+        child.stdout?.on('data', onStdout);
+        child.stderr?.on('data', onStderr);
+        child.once('error', (error) => {
+            failure ??= error;
+        });
+        child.once('close', (code, signal) => {
+            closed = true;
+            disposeAbort?.();
+            clearTimeout(deadline);
+            if (escalation !== undefined) {
+                clearTimeout(escalation);
+                // Pipes closing can precede a descendant which closed its copies.
+                // Force the owned group now instead of retaining its PID in a timer.
+                killTree(child, 'SIGKILL');
+            }
+            child.stdout?.off('data', onStdout);
+            child.stderr?.off('data', onStderr);
+            for (const stream of ['stdout', 'stderr']) {
+                const data = captures[stream].decoder.end();
+                if (data)
+                    options.onOutput?.({ stream, data });
+            }
+            const decodeCapture = (stream) => {
+                const state = captures[stream];
+                const bytes = Buffer.concat(state.chunks, state.bytes);
+                // Do not flush an incomplete UTF-8 character cut by our byte cap.
+                return state.truncated ? new StringDecoder('utf8').write(bytes) : bytes.toString('utf8');
+            };
+            const stdout = decodeCapture('stdout');
+            const stderr = decodeCapture('stderr');
+            if (!failure && cause === undefined && code === 0 && signal === null) {
+                resolve({ stdout, stderr });
+                return;
+            }
+            const error = failure ??
+                (cause === 'caller'
+                    ? Object.assign(new Error('The operation was aborted', { cause: options.signal?.reason }), {
+                        name: 'AbortError',
+                        code: 'ABORT_ERR',
+                    })
+                    : new Error(`Command failed: ${command}\n${stderr}`));
+            reject(Object.assign(error, {
+                stdout,
+                stderr,
+                stdoutTruncated: captures.stdout.truncated,
+                stderrTruncated: captures.stderr.truncated,
+                code: failure?.code ?? (cause === 'caller' ? 'ABORT_ERR' : code),
+                killed: cause !== undefined,
+                signal,
+                timedOut: cause === 'timeout',
+            }));
+        });
+        const deadline = setTimeout(() => cancel('timeout'), options.timeout);
+        deadline.unref?.();
+        if (options.signal) {
+            disposeAbort = subscribeToAbort(options.signal, () => cancel('caller'));
+            if (options.signal.aborted)
+                cancel('caller');
+        }
+    });
 }
 function isDangerousCommand(command) {
     return DANGEROUS_PATTERNS.some((pattern) => pattern.test(command));
 }
+/** The refusal when a sandbox cannot host a detached process; exported so the test states the same words. */
+export const SANDBOX_CANNOT_DETACH = 'run_in_background is unavailable: this sandbox cannot start a detached process, and the job will not be run on the host to get around it. Run the command in the foreground, or raise `timeout` up to the tool maximum.';
 export const BashTool = defineTool({
     name: 'bash',
     description: 'Executes a bash command and returns stdout/stderr output. Command timeout is configurable. The `command` parameter is required — never call this tool with empty arguments. For very long content (e.g. building a large file), prefer `write` for the opening and `edit` with insertLine: "end" for follow-up chunks over a heredoc to avoid hitting the output token limit mid-stream.',
@@ -101,20 +271,16 @@ export const BashTool = defineTool({
             };
         }
         if (input.run_in_background) {
-            // The current registry owns a host process. Foreground execution,
-            // however, goes through `context.sandbox.exec()` below. Treating the
-            // same command as host work just because `run_in_background` changed
-            // would make that boolean an escape hatch from the configured boundary.
-            //
-            // Query-built contexts structurally withhold the registry in this
-            // composition. This explicit check also protects direct tool callers
-            // and says why the capability is absent instead of misdiagnosing the
-            // host as having configured no registry.
-            if (context.sandbox) {
+            // A sandboxed run gets a registry only when its sandbox can start a
+            // detached process inside the boundary (`Sandbox.spawnDetached`);
+            // the executor withholds it otherwise. This check is for direct
+            // tool callers, who could hand a host registry and a sandbox to the
+            // same context: the boolean is never an escape from the boundary.
+            if (context.sandbox && context.sandbox.spawnDetached === undefined) {
                 return {
                     success: false,
                     output: '',
-                    error: 'run_in_background is unavailable while a sandbox is active because the host background-job registry cannot preserve that sandbox boundary. Run the command in the foreground, or use a sandbox-aware persistent-process capability.',
+                    error: SANDBOX_CANNOT_DETACH,
                 };
             }
             // Refused, not degraded to `cmd &`. The fallback is not a lesser
@@ -169,6 +335,7 @@ export const BashTool = defineTool({
         // sandbox can be added later as an explicit
         // `SandboxExecOptions.workspaceRelativeCwd` field; the bash
         // builtin doesn't have that requirement today.
+        const onOutput = shellProgress(context.report);
         if (context.sandbox) {
             const result = await context.sandbox.exec('/bin/sh', ['-c', input.command], {
                 timeout: input.timeout,
@@ -183,21 +350,8 @@ export const BashTool = defineTool({
                 // durable transcript — so this is a progress signal, not a
                 // second copy of the output. `result.stdout` remains the
                 // answer the model is given.
-                onOutput: context.report
-                    ? ({ data }) => {
-                        const line = lastNonEmptyLine(data);
-                        if (line)
-                            context.report?.(line);
-                    }
-                    : undefined,
+                onOutput,
             });
-            if (result.timedOut) {
-                return {
-                    success: false,
-                    output: '',
-                    error: `Command timed out after ${input.timeout}ms`,
-                };
-            }
             // The sandbox reports when IT clipped a stream. Dropping those
             // flags meant the model saw a complete-looking result that had
             // silently lost its tail — and the kernel's own convention is
@@ -210,39 +364,30 @@ export const BashTool = defineTool({
                 result.stdout ? `STDOUT:\n${result.stdout}` : '',
                 result.stderr ? `STDERR:\n${result.stderr}` : '',
                 clipped.length > 0
-                    ? `[${clipped.join(' and ')} was truncated by the sandbox output cap — re-run with a filter (grep/head/tail) to see the rest]`
+                    ? `[${clipped.join(' and ')} was truncated by the sandbox output cap. The omitted output is unavailable in this result. Use a saved artifact or a read-only observation; do not repeat a state-changing action to recover its output.]`
                     : '',
             ]
                 .filter(Boolean)
                 .join('\n\n');
             return {
-                success: result.exitCode === 0,
+                success: !result.timedOut && result.exitCode === 0,
                 output: output || '(no output)',
                 data: {
                     exitCode: result.exitCode,
                     sandboxed: true,
+                    timedOut: result.timedOut,
                     stdoutTruncated: result.stdoutTruncated ?? false,
                     stderrTruncated: result.stderrTruncated ?? false,
                 },
-                error: result.exitCode !== 0 ? `Command exited with code ${result.exitCode}` : undefined,
+                error: result.timedOut
+                    ? `Command timed out after ${input.timeout}ms. Any captured output before the deadline is above.`
+                    : result.exitCode !== 0
+                        ? `Command exited with code ${result.exitCode}`
+                        : undefined,
             };
         }
-        // Thread the run/deadline signal into the child process. Without it
-        // a Stop tore down the model stream and left the command running,
-        // and the executor's deadline could only ever DETACH from the tool
-        // rather than end the work it started.
-        // `exec` REJECTS on a non-zero exit, on its own timeout, and on a
-        // kill — and the rejection carries `stdout`, `stderr`, `code` and
-        // `killed`. Letting it propagate threw all of that away: the registry
-        // turned the throw into a structured failure, so the model was told a
-        // command failed and not one word about how.
-        //
-        // That is the common case, not an edge one. A failing test run and a
-        // failing build are the two things an agent runs bash for most, and
-        // both exit non-zero WITH the output that explains why. The sandbox
-        // branch above already reports all of it; this branch did not, so the
-        // same command told the model two different amounts depending on where
-        // it happened to run.
+        // The owned runner retains stdout/stderr on non-zero exit and timeout,
+        // so a failed command still returns the evidence explaining its failure.
         // The inherited half is scrubbed; `context.env` is not. Inheritance is
         // implicit — nobody decided this command should see `process.env` — while
         // a `context.env` key is one a host wrote on purpose. See
@@ -250,12 +395,13 @@ export const BashTool = defineTool({
         // the sandbox, and for what it therefore does not catch.
         const inherited = scrubInheritedEnv();
         try {
-            const { stdout, stderr } = await execAsync(input.command, {
+            const { stdout, stderr } = await execHostShell(input.command, {
                 cwd: context.workingDirectory,
                 timeout: input.timeout,
                 env: { ...inherited.env, ...context.env },
                 maxBuffer: DEFAULT_BASH_MAX_BUFFER_BYTES,
                 signal: context.abortSignal,
+                onOutput,
             });
             return {
                 success: true,
@@ -268,17 +414,23 @@ export const BashTool = defineTool({
             // A caller-owned Stop is the caller's, not a command failure.
             if (context.abortSignal?.aborted)
                 throw err;
-            // `exec` reports its own timeout as a kill, and the distinction
-            // matters to the model: "ran out of time" is a different next move
-            // from "exited 1".
-            const timedOut = failure.killed === true && failure.signal === 'SIGTERM';
+            // A maxBuffer stop or an ordinary signal is not a deadline. The
+            // runner latches the first cancellation cause before signalling.
+            const timedOut = failure.timedOut === true;
             const exitCode = typeof failure.code === 'number' ? failure.code : undefined;
+            const clipped = [
+                failure.stdoutTruncated ? 'stdout' : '',
+                failure.stderrTruncated ? 'stderr' : '',
+            ].filter(Boolean);
             // Only on the failure path. A successful command did not need to know,
             // and appending this to every result would make the common case noisy
             // to buy nothing. A failing one is exactly where "authentication
             // failed" has to be distinguishable from "the variable was withheld".
             const output = [
                 formatShellOutput(failure.stdout, failure.stderr),
+                clipped.length > 0
+                    ? `[${clipped.join(' and ')} ${clipped.length === 1 ? 'was' : 'were'} truncated by the host output cap. The omitted output is unavailable in this result.]`
+                    : '',
                 describeWithheldEnv(inherited.dropped),
             ]
                 .filter(Boolean)
@@ -289,6 +441,8 @@ export const BashTool = defineTool({
                 data: {
                     ...(exitCode !== undefined ? { exitCode } : {}),
                     timedOut,
+                    stdoutTruncated: failure.stdoutTruncated ?? false,
+                    stderrTruncated: failure.stderrTruncated ?? false,
                     ...(failure.signal ? { signal: failure.signal } : {}),
                 },
                 error: timedOut