@nebutra/agent-runtime 0.2.0 → 0.2.1

package/dist/hook-pipeline.js

@@ -4,6 +4,7 @@ import {
   onHookEvent,
   runHooks
 } from "./chunk-LO24VOA3.js";
+import "./chunk-424PT5DM.js";
 export {
   fromToolHooks,
   matchesMatcher,

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { BodyLoader, CommandRecord, CommandRegistry, ContentBlock, ExpandedCommand, expandCommand } from './commands.js';
 import { z } from 'zod';
+import { BaseTokenEstimator } from '@nebutra/ai-primitives';
 export { Definition, DefinitionResolver, Frontmatter, ResolveContext, SOURCE_TIERS, SourceTier, frontmatterSchema, parseFrontmatter, substituteArguments } from './definitions.js';
 export { JsonRpcResponse, MethodHandler, NotificationListener, ProtocolDispatcher } from './dispatcher.js';
 export { CreateDurableTurnDeps, DurableTurn, DurableTurnJob, DurableTurnQueuePort, DurableTurnRunner, TurnContext, createDurableTurn } from './durable-turn.js';
@@ -7,14 +8,17 @@ export { FunctionTransport, HookConfig, HookContext, HookEvent, HookExitResult,
 export { ApprovalGate, ModelEmission, ModelInvoker, ModelRoundRequest, ModelRoundResult, RuleEvaluator, RunTurnDeps, runTurn } from './loop.js';
 export { ActivateMcpToolsResult, McpServerCatalogPort, activateMcpTools } from './mcp-bridge.js';
 export { AgentMessageItem, CommandExecutionItem, ErrorItem, FileChangeItem, FileUpdateChange, McpToolCallItem, PatchApplyStatus, PatchChangeKind, ReasoningItem, RunStatus, ThreadError, ThreadEvent, ThreadEventType, ThreadItem, ThreadItemType, TodoEntry, TodoListItem, TurnConfig, TurnConfigOverrides, TurnUsage, WebSearchItem, isTurnTerminal, mergeTurnConfig } from './model.js';
+export { Brief, BudgetCap, DispatchPlan, DispatchPlanOptions, DispatchStrategy, SubagentCostReport, SubagentResult, costReport, fanOutSubagents, planSubagentDispatch } from './orchestration.js';
+export * from '@nebutra/execution-policy';
 export { ApprovalPolicy, CapabilityPolicy, DEFAULT_APPROVAL_POLICY, DEFAULT_CAPABILITY_POLICY, DENIED, GranularApprovalConfig, NetworkPolicyAmendment, ReviewDecision, RuleAmendment, RuleDecision, WritableRoot, approvalPolicySchema, capabilityPolicySchema, granularApprovalConfigSchema, isApproval, resolveRuleDecision, writableRootSchema } from './policy.js';
 export { METHOD_REGISTRY, MethodName, MethodSpec, NOTIFICATIONS, NotificationName, RequestEnvelope, ScopeRule, SerializationScope, ServerRequest, requestEnvelopeSchema, resolveScope, scopeKey } from './protocol.js';
+export { Pulsar, PulsarBranchRecord, PulsarBuilder, PulsarDeps, PulsarEventInput, PulsarEventLogPort, PulsarThread, StartThreadOptions } from './pulsar.js';
 export { EventPersistenceMode, InMemoryRolloutStore, PERSISTED_OUTPUT_MAX_BYTES, RolloutLine, RolloutStore, ThreadProjection, isPersisted, replay, sanitizeForPersist } from './rollout.js';
 export { PersistentRolloutStore, RolloutPersistencePort, RoundTripError } from './rollout-store-persistent.js';
 export { ExternalSandbox, NoExecutorConfiguredError, REFUSING_SANDBOX, SandboxDelegationError, SandboxExecRequest, SandboxExecResult, assertSafePosture, createHttpSandbox } from './sandbox.js';
 export { ExpandContext, ExpandedSkill, SkillListing, SkillListingEntry, SkillListingOptions, SkillMessage, SkillRecord, buildSkillListing, expandSkill } from './skills.js';
 export { DeferredEnvelope, DispatchCtx, DispatchEnvelope, DispatchMode, PrepareDispatchInput, PreparedDispatch, SettleDeferredTarget, SubagentRecord, SyncEnvelope, TASK_KINDS, TASK_STATUSES, TaskKind, TaskRecord, TaskRegistry, TaskStatus, assertNotPeeking, makeDeferred, prepareDispatch, resolveSubagentTools, settleDeferred } from './subagents.js';
-export { McpClientLike, RegisteredTool, ToolDefinition, ToolDispatchContext, ToolHandler, ToolHooks, ToolOrigin, ToolRegistry, adaptMcpTool } from './tools.js';
+export { McpClientLike, RegisteredTool, RuntimeToolRegistry, ToolDefinition, ToolDispatchContext, ToolHandler, ToolHooks, ToolOrigin, RuntimeToolRegistry as ToolRegistry, adaptMcpTool } from './tools.js';
 
 /**
  * Streaming artifact/action protocol.
@@ -711,6 +715,7 @@ declare function generateCommitMessage(args: {
  * transcript plus the injected `summarize` and `base` estimator. The transcript
  * is never mutated; every transformation builds new arrays/strings.
  */
+
 /** Tokenizers undercount real BPE by ~15-30%; scale the base estimate up. */
 declare const TOKEN_CORRECTION = 1.3;
 /** Fraction of the usable window the recap is allowed to occupy. */
@@ -753,7 +758,7 @@ type Transcript = readonly Message[];
  */
 type Summarize = (prompt: string) => Promise<string>;
 /** Caller-injected cheap token heuristic; defaults to chars/4. */
-type BaseEstimator = (text: string) => number;
+type BaseEstimator = BaseTokenEstimator;
 /** The eligibility signal this module keys on (also the failure sentinel). */
 declare const COMPACT_SENTINEL = "compact";
 /**
@@ -1312,88 +1317,6 @@ declare class MemoryManager {
     shutdown(): Promise<void>;
 }
 
-/**
- * Permission ruleset evaluator.
- *
- * A small, pure, stateless re-expression of a two-dimensional wildcard
- * permission model plus a bash-command-prefix extractor. No global state,
- * no I/O, no mutation of inputs — every function is referentially transparent.
- *
- * The model has two independent dimensions per rule:
- *   - `permission` — the capability namespace (e.g. "bash", "edit", "net")
- *   - `pattern`    — the concrete subject within that namespace
- * A rule applies only when BOTH dimensions match the query via {@link wildcardMatch}.
- */
-/** The decision a rule yields. Unknown queries fail safe to "ask". */
-type Action = "allow" | "deny" | "ask";
-/** A single permission rule. Both dimensions are matched as wildcard globs. */
-interface Rule {
-    permission: string;
-    pattern: string;
-    action: Action;
-}
-/** An ordered list of rules. Earlier rules take precedence. */
-type Ruleset = Rule[];
-/**
- * Anchored full-string glob matcher.
- *
- * Semantics:
- *   - `*` matches any run of characters, including the empty run.
- *   - `?` matches exactly one character.
- *   - Every other character is matched literally (regex metacharacters in
- *     `pattern` carry no special meaning).
- *   - The match is anchored: the entire `str` must be consumed.
- *
- * Special rule (ported faithfully): if `pattern` ends with `" *"` (a single
- * space immediately followed by `*`), that trailing ` *` is OPTIONAL. The
- * pattern then matches both `"<head> <rest>"` and exactly `"<head>"` with
- * nothing after it. For example `"git *"` matches `"git"` and `"git status"`.
- *
- * Implemented with a backtracking two-pointer scan whose `*` handling uses a
- * single saved restart position, giving O(|str| * |pattern|) worst case with
- * no catastrophic blow-up.
- */
-declare function wildcardMatch(str: string, pattern: string): boolean;
-/**
- * Resolve a permission query against one or more rulesets.
- *
- * Rulesets are concatenated in argument order (no mutation) and scanned
- * front-to-back. The FIRST rule whose `permission` and `pattern` both match
- * the query (via {@link wildcardMatch}) is returned. If no rule matches, a
- * fail-safe default is returned: the queried permission/pattern with action
- * `"ask"` (unknown → ask, never silently allow).
- */
-declare function evaluate(permission: string, pattern: string, ...rulesets: Ruleset[]): Rule;
-/**
- * Built-in command arity table. Maps a (possibly multi-word) command prefix
- * to the number of leading tokens that constitute its "human-understandable
- * command" for permission matching. Longest matching prefix wins.
- *
- * Frozen so the shared default cannot be mutated by callers.
- */
-declare const BUILTIN_ARITY: Readonly<Record<string, number>>;
-/**
- * Extract the human-understandable command from already-split, flag-free
- * shell tokens.
- *
- * Strategy: try the longest prefix first. For `len` from `tokens.length` down
- * to 1, if `tokens.slice(0, len).join(" ")` is a key in the (merged) arity
- * table, return `tokens.slice(0, arity[thatPrefix])`. If the tokens are empty,
- * return `[]`. Otherwise default to the first token only.
- *
- * `arity` is shallow-merged OVER the built-in table; neither the caller's
- * object nor the built-in table is mutated.
- */
-declare function commandPrefix(tokens: string[], arity?: Record<string, number> | undefined): string[];
-/**
- * Derive the `pattern` to feed {@link evaluate} for a bash permission.
- *
- * Splits `command` on arbitrary whitespace, drops tokens that begin with `-`
- * (flags are not conceptually part of the command identity), applies
- * {@link commandPrefix}, and joins the result with single spaces.
- */
-declare function commandPermissionKey(command: string): string;
-
 /**
  * Git-backed project repository model.
  *
@@ -1871,4 +1794,4 @@ declare class InMemoryProjectStore implements ProjectPersistencePort {
     get(tenant: string, project: string): Promise<Project | undefined>;
 }
 
-export { type Action, type ActionEvent, type ActionPorts, ActionRunner, type ActionState, type ActionStatus, type AdmissionDeps, type AdmissionPolicy, type AdmissionReason, type AdmissionResult, type AllowlistMatch, type ApplyEditResult, type ArtifactEvent, type ArtifactStreamCallbacks, ArtifactStreamParser, BUDGET_RATIO, BUILTIN_ARITY, type BaseEstimator, type BuildAction, CLIP_TEXT_CHARS, CLIP_TOOL_CHARS, COMPACT_SENTINEL, CONCURRENCY, CONVERSATIONS_DIR, type ChannelAdapter, type ChannelCapabilities, ChannelGateway, type ChannelId, type ChannelMeta, ChannelRegistry, type ChatType, type Clock, CommitMessageError, type CommitRef, type CompactTranscriptInput, type CompiledAllowlist, type CompletionModel, type ConversationSummary, DEFAULT_ABORT_MS, DEFAULT_TEMPERATURE, type DataAction, type DebounceResult, type DeployState, type DeploymentCommitRef, type DeploymentRecord, type DeploymentState, DeploymentStateError, type DeploymentSummary, type DeploymentTimelineEntry, type DeploymentUiStatus, type DesignContext, type DiffFile, type DiffResult, type DistillOptions, type DistilledSkill, type DistilledSkillFrontmatter, type DistilledSkillProvenance, DuplicateChannelError, type EditBlock, type EditIntent, type EditMerger, EditType, type EligibilityOptions, type FileAction, type FileContext, type FileEntry, type FileInfo, type FileKind, type FileManifest, type FileMap, type FileMutationInput, type FuzzyMatch, type FuzzyMatchFn, type GenerateOptions, type GitContext, type GitHostPort, type GroupBinding, type Hunk, type IdMint, InMemoryProjectStore, InMemoryShareStore, InMemorySuggestionHistoryStore, type InboundAttachment, InboundDebouncer, type InboundLike, type InboundMessage, LARGE_SET, type LatestStatusInput, MAX_RETRIES, MEMORY_CONTEXT_BANNER_CLOSE, MEMORY_CONTEXT_BANNER_OPEN, METADATA_PATH, MIN_BUDGET, type MatchClassification, type MatchType, type MemoryContext, MemoryManager, type MemoryProvider, type MentionContext, type Message, type NudgeOptions, OUTPUT_TOKEN_CAP, type OutboundMessage, type OwnsRepoPredicate, type Part, type PlanAction, type Project, type ProjectDiff, type ProjectMetadata, type ProjectPersistencePort, ProjectRepo, type ProjectRepoDeps, ProjectRepoError, type ProjectRepoErrorCode, type ProjectSnapshot, REDUCE_DEPTH, type RankOptions, type RankedFuzzyResult, type RankedSuggestion, type RawScrapeResult, type ReplyOptions, type ReviewFinding, type ReviewModel, ReviewParseError, type ReviewScope, type Rule, type Ruleset, type RunQueueOptions, type ScrapeFormat, type ScrapeProvider, type SessionKeyOptions, type SessionRef, SessionShare, type SessionShareOptions, ShareDisabledError, type ShareRecord, type ShareStore, type ShareSyncEvent, type ShellAction, SnapshotHistory, type StartAction, StreamingContextScrubber, type SuggestionHistoryStore, type SuggestionItem, type SuggestionResults, type SuggestionType, type Summarize, type SyncSink, type Synthesizer, TOKEN_CORRECTION, type TenantContext, TenantMismatchError, type TextPart, type TimelineOpts, type ToolPart, type Trajectory, type TrajectoryStep, type Transcript, UnknownChannelError, type UrlBuilder, type ViewerVerdict, WorkbenchError, admitInbound, advanceState, analyzeEditIntent, appendJsonlLine, applyEditBlock, applyFileMutation, asChannelId, assertTenantContext, buildCommitPrompt, buildDistillationPrompt, buildEditInstructions, buildImprovementPrompt, buildMemoryContextBlock, buildReviewPrompt, classifyMatch, commandPermissionKey, commandPrefix, compactTranscript, compileAllowlist, computeBudget, constantTimeEquals, dedupeByText, deriveLatestStatus, deriveTimelineFromCommits, diffProjects, distillSkill, domainForCommit, emptyFileMap, emptyProjectMetadata, estimateTokens, evaluate, fallbackMerger, generateCommitMessage, getDeploymentStatus, getDeploymentTimeline, getFile, hasMention, historyCandidates, improveSkill, ingestDesignContext, isDistillable, kebab, listFiles, makeProject, matchIndices, matchIndicesCaseInsensitive, matchIndicesCaseInsensitiveIgnoreSpaces, matchWildcardPattern, matchWildcardPatternCaseInsensitive, matchesAllowlist, nextMode, normalizeScrapeResult, parseDiff, parseEditBlocks, parseFindings, parseJsonl, planEdit, rankByFuzzy, rankSuggestions, recordHistory, removeFile, renderClipped, replyTo, requiresMention, resolveBranchBase, resolveSessionKey, restore, runReview, sanitizeContext, selectFilesForEdit, setFile, shouldCompact, shouldNudgePersist, snapshot, split, stripFencedWrapper, stripFormatting, toGenerationSeed, unescapeEntities, wildcardMatch };
+export { type ActionEvent, type ActionPorts, ActionRunner, type ActionState, type ActionStatus, type AdmissionDeps, type AdmissionPolicy, type AdmissionReason, type AdmissionResult, type AllowlistMatch, type ApplyEditResult, type ArtifactEvent, type ArtifactStreamCallbacks, ArtifactStreamParser, BUDGET_RATIO, type BaseEstimator, type BuildAction, CLIP_TEXT_CHARS, CLIP_TOOL_CHARS, COMPACT_SENTINEL, CONCURRENCY, CONVERSATIONS_DIR, type ChannelAdapter, type ChannelCapabilities, ChannelGateway, type ChannelId, type ChannelMeta, ChannelRegistry, type ChatType, type Clock, CommitMessageError, type CommitRef, type CompactTranscriptInput, type CompiledAllowlist, type CompletionModel, type ConversationSummary, DEFAULT_ABORT_MS, DEFAULT_TEMPERATURE, type DataAction, type DebounceResult, type DeployState, type DeploymentCommitRef, type DeploymentRecord, type DeploymentState, DeploymentStateError, type DeploymentSummary, type DeploymentTimelineEntry, type DeploymentUiStatus, type DesignContext, type DiffFile, type DiffResult, type DistillOptions, type DistilledSkill, type DistilledSkillFrontmatter, type DistilledSkillProvenance, DuplicateChannelError, type EditBlock, type EditIntent, type EditMerger, EditType, type EligibilityOptions, type FileAction, type FileContext, type FileEntry, type FileInfo, type FileKind, type FileManifest, type FileMap, type FileMutationInput, type FuzzyMatch, type FuzzyMatchFn, type GenerateOptions, type GitContext, type GitHostPort, type GroupBinding, type Hunk, type IdMint, InMemoryProjectStore, InMemoryShareStore, InMemorySuggestionHistoryStore, type InboundAttachment, InboundDebouncer, type InboundLike, type InboundMessage, LARGE_SET, type LatestStatusInput, MAX_RETRIES, MEMORY_CONTEXT_BANNER_CLOSE, MEMORY_CONTEXT_BANNER_OPEN, METADATA_PATH, MIN_BUDGET, type MatchClassification, type MatchType, type MemoryContext, MemoryManager, type MemoryProvider, type MentionContext, type Message, type NudgeOptions, OUTPUT_TOKEN_CAP, type OutboundMessage, type OwnsRepoPredicate, type Part, type PlanAction, type Project, type ProjectDiff, type ProjectMetadata, type ProjectPersistencePort, ProjectRepo, type ProjectRepoDeps, ProjectRepoError, type ProjectRepoErrorCode, type ProjectSnapshot, REDUCE_DEPTH, type RankOptions, type RankedFuzzyResult, type RankedSuggestion, type RawScrapeResult, type ReplyOptions, type ReviewFinding, type ReviewModel, ReviewParseError, type ReviewScope, type RunQueueOptions, type ScrapeFormat, type ScrapeProvider, type SessionKeyOptions, type SessionRef, SessionShare, type SessionShareOptions, ShareDisabledError, type ShareRecord, type ShareStore, type ShareSyncEvent, type ShellAction, SnapshotHistory, type StartAction, StreamingContextScrubber, type SuggestionHistoryStore, type SuggestionItem, type SuggestionResults, type SuggestionType, type Summarize, type SyncSink, type Synthesizer, TOKEN_CORRECTION, type TenantContext, TenantMismatchError, type TextPart, type TimelineOpts, type ToolPart, type Trajectory, type TrajectoryStep, type Transcript, UnknownChannelError, type UrlBuilder, type ViewerVerdict, WorkbenchError, admitInbound, advanceState, analyzeEditIntent, appendJsonlLine, applyEditBlock, applyFileMutation, asChannelId, assertTenantContext, buildCommitPrompt, buildDistillationPrompt, buildEditInstructions, buildImprovementPrompt, buildMemoryContextBlock, buildReviewPrompt, classifyMatch, compactTranscript, compileAllowlist, computeBudget, constantTimeEquals, dedupeByText, deriveLatestStatus, deriveTimelineFromCommits, diffProjects, distillSkill, domainForCommit, emptyFileMap, emptyProjectMetadata, estimateTokens, fallbackMerger, generateCommitMessage, getDeploymentStatus, getDeploymentTimeline, getFile, hasMention, historyCandidates, improveSkill, ingestDesignContext, isDistillable, kebab, listFiles, makeProject, matchIndices, matchIndicesCaseInsensitive, matchIndicesCaseInsensitiveIgnoreSpaces, matchWildcardPattern, matchWildcardPatternCaseInsensitive, matchesAllowlist, nextMode, normalizeScrapeResult, parseDiff, parseEditBlocks, parseFindings, parseJsonl, planEdit, rankByFuzzy, rankSuggestions, recordHistory, removeFile, renderClipped, replyTo, requiresMention, resolveBranchBase, resolveSessionKey, restore, runReview, sanitizeContext, selectFilesForEdit, setFile, shouldCompact, shouldNudgePersist, snapshot, split, stripFencedWrapper, stripFormatting, toGenerationSeed, unescapeEntities };

package/dist/index.js

@@ -1,3 +1,8 @@
+import {
+  Pulsar,
+  PulsarBuilder,
+  PulsarThread
+} from "./chunk-KCNN4QUQ.js";
 import {
   PersistentRolloutStore,
   RoundTripError
@@ -12,7 +17,7 @@ import {
 import {
   buildSkillListing,
   expandSkill
-} from "./chunk-ZMYX5VBU.js";
+} from "./chunk-GQZKYWFT.js";
 import {
   TASK_KINDS,
   TASK_STATUSES,
@@ -23,9 +28,19 @@ import {
   resolveSubagentTools,
   settleDeferred
 } from "./chunk-5YS7WAPS.js";
+import {
+  ProtocolDispatcher
+} from "./chunk-RDKYDMXT.js";
+import {
+  METHOD_REGISTRY,
+  NOTIFICATIONS,
+  requestEnvelopeSchema,
+  resolveScope,
+  scopeKey
+} from "./chunk-FUG5DT2C.js";
 import {
   createDurableTurn
-} from "./chunk-5N4644PB.js";
+} from "./chunk-SD2ZJ7XG.js";
 import {
   fromToolHooks,
   matchesMatcher,
@@ -34,18 +49,30 @@ import {
 } from "./chunk-LO24VOA3.js";
 import {
   runTurn
-} from "./chunk-BJBBR3QA.js";
+} from "./chunk-D4YAPLOW.js";
+import {
+  InMemoryRolloutStore,
+  PERSISTED_OUTPUT_MAX_BYTES,
+  isPersisted,
+  replay,
+  sanitizeForPersist
+} from "./chunk-37BBB2P2.js";
 import {
   activateMcpTools
-} from "./chunk-PGGWSUTM.js";
+} from "./chunk-NI4EDT4T.js";
 import {
-  ToolRegistry,
+  RuntimeToolRegistry,
   adaptMcpTool
-} from "./chunk-NN7DATXA.js";
+} from "./chunk-4Y25ZTKI.js";
 import {
   isTurnTerminal,
   mergeTurnConfig
 } from "./chunk-6EGG2OZC.js";
+import {
+  costReport,
+  fanOutSubagents,
+  planSubagentDispatch
+} from "./chunk-MX2WL43P.js";
 import {
   DEFAULT_APPROVAL_POLICY,
   DEFAULT_CAPABILITY_POLICY,
@@ -57,13 +84,6 @@ import {
   resolveRuleDecision,
   writableRootSchema
 } from "./chunk-CGRCUKGT.js";
-import {
-  InMemoryRolloutStore,
-  PERSISTED_OUTPUT_MAX_BYTES,
-  isPersisted,
-  replay,
-  sanitizeForPersist
-} from "./chunk-37BBB2P2.js";
 import {
   CommandRegistry,
   expandCommand
@@ -76,15 +96,192 @@ import {
   substituteArguments
 } from "./chunk-7BUOF367.js";
 import {
-  ProtocolDispatcher
-} from "./chunk-RDKYDMXT.js";
-import {
-  METHOD_REGISTRY,
-  NOTIFICATIONS,
-  requestEnvelopeSchema,
-  resolveScope,
-  scopeKey
-} from "./chunk-FUG5DT2C.js";
+  __export,
+  __reExport
+} from "./chunk-424PT5DM.js";
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  ActionRunner: () => ActionRunner,
+  ArtifactStreamParser: () => ArtifactStreamParser,
+  BUDGET_RATIO: () => BUDGET_RATIO,
+  CLIP_TEXT_CHARS: () => CLIP_TEXT_CHARS,
+  CLIP_TOOL_CHARS: () => CLIP_TOOL_CHARS,
+  COMPACT_SENTINEL: () => COMPACT_SENTINEL,
+  CONCURRENCY: () => CONCURRENCY,
+  CONVERSATIONS_DIR: () => CONVERSATIONS_DIR,
+  ChannelGateway: () => ChannelGateway,
+  ChannelRegistry: () => ChannelRegistry,
+  CommandRegistry: () => CommandRegistry,
+  CommitMessageError: () => CommitMessageError,
+  DEFAULT_ABORT_MS: () => DEFAULT_ABORT_MS,
+  DEFAULT_APPROVAL_POLICY: () => DEFAULT_APPROVAL_POLICY,
+  DEFAULT_CAPABILITY_POLICY: () => DEFAULT_CAPABILITY_POLICY,
+  DEFAULT_TEMPERATURE: () => DEFAULT_TEMPERATURE,
+  DENIED: () => DENIED,
+  DefinitionResolver: () => DefinitionResolver,
+  DeploymentStateError: () => DeploymentStateError,
+  DuplicateChannelError: () => DuplicateChannelError,
+  EditType: () => EditType,
+  InMemoryProjectStore: () => InMemoryProjectStore,
+  InMemoryRolloutStore: () => InMemoryRolloutStore,
+  InMemoryShareStore: () => InMemoryShareStore,
+  InMemorySuggestionHistoryStore: () => InMemorySuggestionHistoryStore,
+  InboundDebouncer: () => InboundDebouncer,
+  LARGE_SET: () => LARGE_SET,
+  MAX_RETRIES: () => MAX_RETRIES,
+  MEMORY_CONTEXT_BANNER_CLOSE: () => MEMORY_CONTEXT_BANNER_CLOSE,
+  MEMORY_CONTEXT_BANNER_OPEN: () => MEMORY_CONTEXT_BANNER_OPEN,
+  METADATA_PATH: () => METADATA_PATH,
+  METHOD_REGISTRY: () => METHOD_REGISTRY,
+  MIN_BUDGET: () => MIN_BUDGET,
+  MemoryManager: () => MemoryManager,
+  NOTIFICATIONS: () => NOTIFICATIONS,
+  NoExecutorConfiguredError: () => NoExecutorConfiguredError,
+  OUTPUT_TOKEN_CAP: () => OUTPUT_TOKEN_CAP,
+  PERSISTED_OUTPUT_MAX_BYTES: () => PERSISTED_OUTPUT_MAX_BYTES,
+  PersistentRolloutStore: () => PersistentRolloutStore,
+  ProjectRepo: () => ProjectRepo,
+  ProjectRepoError: () => ProjectRepoError,
+  ProtocolDispatcher: () => ProtocolDispatcher,
+  Pulsar: () => Pulsar,
+  PulsarBuilder: () => PulsarBuilder,
+  PulsarThread: () => PulsarThread,
+  REDUCE_DEPTH: () => REDUCE_DEPTH,
+  REFUSING_SANDBOX: () => REFUSING_SANDBOX,
+  ReviewParseError: () => ReviewParseError,
+  RoundTripError: () => RoundTripError,
+  RuntimeToolRegistry: () => RuntimeToolRegistry,
+  SOURCE_TIERS: () => SOURCE_TIERS,
+  SandboxDelegationError: () => SandboxDelegationError,
+  SessionShare: () => SessionShare,
+  ShareDisabledError: () => ShareDisabledError,
+  SnapshotHistory: () => SnapshotHistory,
+  StreamingContextScrubber: () => StreamingContextScrubber,
+  TASK_KINDS: () => TASK_KINDS,
+  TASK_STATUSES: () => TASK_STATUSES,
+  TOKEN_CORRECTION: () => TOKEN_CORRECTION,
+  TaskRegistry: () => TaskRegistry,
+  TenantMismatchError: () => TenantMismatchError,
+  ToolRegistry: () => RuntimeToolRegistry,
+  UnknownChannelError: () => UnknownChannelError,
+  WorkbenchError: () => WorkbenchError,
+  activateMcpTools: () => activateMcpTools,
+  adaptMcpTool: () => adaptMcpTool,
+  admitInbound: () => admitInbound,
+  advanceState: () => advanceState,
+  analyzeEditIntent: () => analyzeEditIntent,
+  appendJsonlLine: () => appendJsonlLine,
+  applyEditBlock: () => applyEditBlock,
+  applyFileMutation: () => applyFileMutation,
+  approvalPolicySchema: () => approvalPolicySchema,
+  asChannelId: () => asChannelId,
+  assertNotPeeking: () => assertNotPeeking,
+  assertSafePosture: () => assertSafePosture,
+  assertTenantContext: () => assertTenantContext,
+  buildCommitPrompt: () => buildCommitPrompt,
+  buildDistillationPrompt: () => buildDistillationPrompt,
+  buildEditInstructions: () => buildEditInstructions,
+  buildImprovementPrompt: () => buildImprovementPrompt,
+  buildMemoryContextBlock: () => buildMemoryContextBlock,
+  buildReviewPrompt: () => buildReviewPrompt,
+  buildSkillListing: () => buildSkillListing,
+  capabilityPolicySchema: () => capabilityPolicySchema,
+  classifyMatch: () => classifyMatch,
+  compactTranscript: () => compactTranscript,
+  compileAllowlist: () => compileAllowlist,
+  computeBudget: () => computeBudget,
+  constantTimeEquals: () => constantTimeEquals,
+  costReport: () => costReport,
+  createDurableTurn: () => createDurableTurn,
+  createHttpSandbox: () => createHttpSandbox,
+  dedupeByText: () => dedupeByText,
+  deriveLatestStatus: () => deriveLatestStatus,
+  deriveTimelineFromCommits: () => deriveTimelineFromCommits,
+  diffProjects: () => diffProjects,
+  distillSkill: () => distillSkill,
+  domainForCommit: () => domainForCommit,
+  emptyFileMap: () => emptyFileMap,
+  emptyProjectMetadata: () => emptyProjectMetadata,
+  estimateTokens: () => estimateTokens,
+  expandCommand: () => expandCommand,
+  expandSkill: () => expandSkill,
+  fallbackMerger: () => fallbackMerger,
+  fanOutSubagents: () => fanOutSubagents,
+  fromToolHooks: () => fromToolHooks,
+  frontmatterSchema: () => frontmatterSchema,
+  generateCommitMessage: () => generateCommitMessage,
+  getDeploymentStatus: () => getDeploymentStatus,
+  getDeploymentTimeline: () => getDeploymentTimeline,
+  getFile: () => getFile,
+  granularApprovalConfigSchema: () => granularApprovalConfigSchema,
+  hasMention: () => hasMention,
+  historyCandidates: () => historyCandidates,
+  improveSkill: () => improveSkill,
+  ingestDesignContext: () => ingestDesignContext,
+  isApproval: () => isApproval,
+  isDistillable: () => isDistillable,
+  isPersisted: () => isPersisted,
+  isTurnTerminal: () => isTurnTerminal,
+  kebab: () => kebab,
+  listFiles: () => listFiles,
+  makeDeferred: () => makeDeferred,
+  makeProject: () => makeProject,
+  matchIndices: () => matchIndices,
+  matchIndicesCaseInsensitive: () => matchIndicesCaseInsensitive,
+  matchIndicesCaseInsensitiveIgnoreSpaces: () => matchIndicesCaseInsensitiveIgnoreSpaces,
+  matchWildcardPattern: () => matchWildcardPattern,
+  matchWildcardPatternCaseInsensitive: () => matchWildcardPatternCaseInsensitive,
+  matchesAllowlist: () => matchesAllowlist,
+  matchesMatcher: () => matchesMatcher,
+  mergeTurnConfig: () => mergeTurnConfig,
+  nextMode: () => nextMode,
+  normalizeScrapeResult: () => normalizeScrapeResult,
+  onHookEvent: () => onHookEvent,
+  parseDiff: () => parseDiff,
+  parseEditBlocks: () => parseEditBlocks,
+  parseFindings: () => parseFindings,
+  parseFrontmatter: () => parseFrontmatter,
+  parseJsonl: () => parseJsonl,
+  planEdit: () => planEdit,
+  planSubagentDispatch: () => planSubagentDispatch,
+  prepareDispatch: () => prepareDispatch,
+  rankByFuzzy: () => rankByFuzzy,
+  rankSuggestions: () => rankSuggestions,
+  recordHistory: () => recordHistory,
+  removeFile: () => removeFile,
+  renderClipped: () => renderClipped,
+  replay: () => replay,
+  replyTo: () => replyTo,
+  requestEnvelopeSchema: () => requestEnvelopeSchema,
+  requiresMention: () => requiresMention,
+  resolveBranchBase: () => resolveBranchBase,
+  resolveRuleDecision: () => resolveRuleDecision,
+  resolveScope: () => resolveScope,
+  resolveSessionKey: () => resolveSessionKey,
+  resolveSubagentTools: () => resolveSubagentTools,
+  restore: () => restore,
+  runHooks: () => runHooks,
+  runReview: () => runReview,
+  runTurn: () => runTurn,
+  sanitizeContext: () => sanitizeContext,
+  sanitizeForPersist: () => sanitizeForPersist,
+  scopeKey: () => scopeKey,
+  selectFilesForEdit: () => selectFilesForEdit,
+  setFile: () => setFile,
+  settleDeferred: () => settleDeferred,
+  shouldCompact: () => shouldCompact,
+  shouldNudgePersist: () => shouldNudgePersist,
+  snapshot: () => snapshot,
+  split: () => split,
+  stripFencedWrapper: () => stripFencedWrapper,
+  stripFormatting: () => stripFormatting,
+  substituteArguments: () => substituteArguments,
+  toGenerationSeed: () => toGenerationSeed,
+  unescapeEntities: () => unescapeEntities,
+  writableRootSchema: () => writableRootSchema
+});
 
 // src/artifact-stream.ts
 import { z } from "zod";
@@ -1068,6 +1265,9 @@ async function generateCommitMessage(args) {
 }
 
 // src/context-compaction.ts
+import {
+  estimateTokens as estimatePrimitiveTokens
+} from "@nebutra/ai-primitives";
 import { z as z6 } from "zod";
 var TOKEN_CORRECTION = 1.3;
 var BUDGET_RATIO = 0.6;
@@ -1099,7 +1299,7 @@ var compactInputSchema = z6.object({
   usableTokens: z6.number().int().positive()
 });
 function estimateTokens(text, base = defaultBase) {
-  return Math.ceil(base(text) * TOKEN_CORRECTION);
+  return estimatePrimitiveTokens(text, { base, correction: TOKEN_CORRECTION });
 }
 function computeBudget(usableTokens) {
   return Math.max(MIN_BUDGET, Math.floor(usableTokens * BUDGET_RATIO));
@@ -2148,96 +2348,12 @@ var MemoryManager = class {
 };
 
 // src/permission-ruleset.ts
-function wildcardMatch(str, pattern) {
-  if (isOptionalTrailingStar(pattern)) {
-    const head = pattern.slice(0, -2);
-    if (globMatch2(str, head)) {
-      return true;
-    }
-    return globMatch2(str, pattern);
-  }
-  return globMatch2(str, pattern);
-}
-function isOptionalTrailingStar(pattern) {
-  return pattern.length >= 2 && pattern.endsWith(" *");
-}
-function globMatch2(str, pattern) {
-  let s = 0;
-  let p = 0;
-  let starP = -1;
-  let starS = 0;
-  while (s < str.length) {
-    const pc = p < pattern.length ? pattern[p] : void 0;
-    if (pc === "*") {
-      starP = p;
-      starS = s;
-      p += 1;
-    } else if (pc === "?" || pc === str[s]) {
-      p += 1;
-      s += 1;
-    } else if (starP !== -1) {
-      p = starP + 1;
-      starS += 1;
-      s = starS;
-    } else {
-      return false;
-    }
-  }
-  while (p < pattern.length && pattern[p] === "*") {
-    p += 1;
-  }
-  return p === pattern.length;
-}
-function evaluate(permission, pattern, ...rulesets) {
-  for (const ruleset of rulesets) {
-    for (const rule of ruleset) {
-      if (wildcardMatch(permission, rule.permission) && wildcardMatch(pattern, rule.pattern)) {
-        return rule;
-      }
-    }
-  }
-  return { permission, pattern: "*", action: "ask" };
-}
-var BUILTIN_ARITY = Object.freeze({
-  git: 2,
-  npm: 2,
-  "npm run": 3,
-  docker: 2,
-  kubectl: 2,
-  cargo: 2,
-  pnpm: 2,
-  yarn: 2,
-  go: 2,
-  ls: 1,
-  cat: 1,
-  cd: 1,
-  rm: 1,
-  cp: 1,
-  mv: 1,
-  mkdir: 1,
-  echo: 1,
-  grep: 1,
-  python: 1,
-  node: 1
-});
-function commandPrefix(tokens, arity) {
-  if (tokens.length === 0) {
-    return [];
-  }
-  const table = { ...BUILTIN_ARITY, ...arity ?? {} };
-  for (let len = tokens.length; len >= 1; len -= 1) {
-    const prefixKey = tokens.slice(0, len).join(" ");
-    const take = table[prefixKey];
-    if (take !== void 0) {
-      return tokens.slice(0, Math.min(take, tokens.length));
-    }
-  }
-  return tokens.slice(0, 1);
-}
-function commandPermissionKey(command) {
-  const tokens = command.split(/\s+/).filter((token) => token.length > 0 && !token.startsWith("-"));
-  return commandPrefix(tokens).join(" ");
-}
+var permission_ruleset_exports = {};
+__reExport(permission_ruleset_exports, execution_policy_star);
+import * as execution_policy_star from "@nebutra/execution-policy";
+
+// src/index.ts
+__reExport(src_exports, permission_ruleset_exports);
 
 // src/project-repo.ts
 import { z as z12 } from "zod";
@@ -2940,7 +3056,6 @@ export {
   ActionRunner,
   ArtifactStreamParser,
   BUDGET_RATIO,
-  BUILTIN_ARITY,
   CLIP_TEXT_CHARS,
   CLIP_TOOL_CHARS,
   COMPACT_SENTINEL,
@@ -2980,10 +3095,14 @@ export {
   ProjectRepo,
   ProjectRepoError,
   ProtocolDispatcher,
+  Pulsar,
+  PulsarBuilder,
+  PulsarThread,
   REDUCE_DEPTH,
   REFUSING_SANDBOX,
   ReviewParseError,
   RoundTripError,
+  RuntimeToolRegistry,
   SOURCE_TIERS,
   SandboxDelegationError,
   SessionShare,
@@ -2995,7 +3114,7 @@ export {
   TOKEN_CORRECTION,
   TaskRegistry,
   TenantMismatchError,
-  ToolRegistry,
+  RuntimeToolRegistry as ToolRegistry,
   UnknownChannelError,
   WorkbenchError,
   activateMcpTools,
@@ -3020,12 +3139,11 @@ export {
   buildSkillListing,
   capabilityPolicySchema,
   classifyMatch,
-  commandPermissionKey,
-  commandPrefix,
   compactTranscript,
   compileAllowlist,
   computeBudget,
   constantTimeEquals,
+  costReport,
   createDurableTurn,
   createHttpSandbox,
   dedupeByText,
@@ -3037,10 +3155,10 @@ export {
   emptyFileMap,
   emptyProjectMetadata,
   estimateTokens,
-  evaluate,
   expandCommand,
   expandSkill,
   fallbackMerger,
+  fanOutSubagents,
   fromToolHooks,
   frontmatterSchema,
   generateCommitMessage,
@@ -3077,6 +3195,7 @@ export {
   parseFrontmatter,
   parseJsonl,
   planEdit,
+  planSubagentDispatch,
   prepareDispatch,
   rankByFuzzy,
   rankSuggestions,
@@ -3111,7 +3230,6 @@ export {
   substituteArguments,
   toGenerationSeed,
   unescapeEntities,
-  wildcardMatch,
   writableRootSchema
 };
 //# sourceMappingURL=index.js.map