@nervekit/orchestrator 0.1.0

package/dist/agent-suspension-service.js

@@ -0,0 +1,96 @@
+import { join } from "node:path";
+import { agentSuspensionRecordSchema, createId, } from "@nerve/shared";
+import { appendJsonLine, readJsonLines, rewriteJsonLines, } from "./infrastructure/storage/index.js";
+export class AgentSuspensionService {
+    storage;
+    events;
+    suspensions = new Map();
+    constructor(storage, events) {
+        this.storage = storage;
+        this.events = events;
+    }
+    async hydrate() {
+        for (const suspension of await this.readLatestSuspensions()) {
+            this.suspensions.set(suspension.id, suspension);
+        }
+    }
+    listSuspensions(status) {
+        return [...this.suspensions.values()]
+            .filter((suspension) => !status || suspension.status === status)
+            .sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+    }
+    pendingForToolCall(toolCallId) {
+        return this.listSuspensions("pending").find((suspension) => suspension.toolCallId === toolCallId);
+    }
+    pendingForAgent(agentId) {
+        return this.listSuspensions("pending").find((suspension) => suspension.agentId === agentId);
+    }
+    getSuspension(id) {
+        const suspension = this.suspensions.get(id);
+        if (!suspension)
+            throw new Error("Agent suspension not found.");
+        return suspension;
+    }
+    async removeSuspensionsForConversations(conversationIds) {
+        const conversations = new Set(conversationIds);
+        if (conversations.size === 0)
+            return;
+        for (const [id, suspension] of this.suspensions) {
+            if (conversations.has(suspension.conversationId)) {
+                this.suspensions.delete(id);
+            }
+        }
+        await rewriteJsonLines(this.suspensionsPath(), this.listSuspensions(), 0o600);
+    }
+    async createSuspension(input) {
+        const existing = this.pendingForToolCall(input.toolCallId);
+        if (existing)
+            return existing;
+        const now = new Date().toISOString();
+        const suspension = {
+            ...input,
+            id: createId("susp"),
+            status: "pending",
+            createdAt: now,
+            updatedAt: now,
+        };
+        await this.upsertSuspension(suspension);
+        await this.events.publish("agent.suspension.created", { suspension });
+        return suspension;
+    }
+    async updateSuspension(id, patch) {
+        const current = this.getSuspension(id);
+        const updated = {
+            ...current,
+            ...patch,
+            updatedAt: new Date().toISOString(),
+        };
+        await this.upsertSuspension(updated);
+        await this.events.publish("agent.suspension.updated", {
+            suspension: updated,
+        });
+        return updated;
+    }
+    async upsertSuspension(suspension) {
+        this.suspensions.set(suspension.id, suspension);
+        await appendJsonLine(this.suspensionsPath(), suspension, 0o600);
+    }
+    async readLatestSuspensions() {
+        const values = await readJsonLines(this.suspensionsPath()).catch(() => []);
+        const parsed = values
+            .map((value) => agentSuspensionRecordSchema.safeParse(value))
+            .filter((result) => result.success)
+            .map((result) => result.data);
+        return latestById(parsed);
+    }
+    suspensionsPath() {
+        return join(this.storage.paths.home, "suspensions", "suspensions.jsonl");
+    }
+}
+function latestById(values) {
+    const byId = new Map();
+    for (const value of values)
+        byId.set(value.id, value);
+    return [...byId.values()];
+}
+//# sourceMappingURL=agent-suspension-service.js.map

package/dist/agent-suspension-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-suspension-service.js","sourceRoot":"","sources":["../src/agent-suspension-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAEL,2BAA2B,EAC3B,QAAQ,GAET,MAAM,eAAe,CAAC;AAGvB,OAAO,EACL,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAE3C,MAAM,OAAO,sBAAsB;IAId;IACA;IAJV,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;IAEhE,YACmB,OAA2B,EAC3B,MAAgB;QADhB,YAAO,GAAP,OAAO,CAAoB;QAC3B,WAAM,GAAN,MAAM,CAAU;IAChC,CAAC;IAEJ,KAAK,CAAC,OAAO;QACX,KAAK,MAAM,UAAU,IAAI,MAAM,IAAI,CAAC,qBAAqB,EAAE,EAAE,CAAC;YAC5D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,eAAe,CAAC,MAAyB;QACvC,OAAO,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC;aAC/D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,kBAAkB,CAAC,UAAkB;QACnC,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CACzC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,CACrD,CAAC;IACJ,CAAC;IAED,eAAe,CAAC,OAAe;QAC7B,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CACzC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,KAAK,OAAO,CAC/C,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAChE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,iCAAiC,CACrC,eAAiC;QAEjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACrC,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAChD,IAAI,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBACjD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,gBAAgB,CACpB,IAAI,CAAC,eAAe,EAAE,EACtB,IAAI,CAAC,eAAe,EAAE,EACtB,KAAK,CACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,KAGC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,UAAU,GAA0B;YACxC,GAAG,KAAK;YACR,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;YACpB,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC;QACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,EAAU,EACV,KAA+D;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAA0B;YACrC,GAAG,OAAO;YACV,GAAG,KAAK;YACR,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE;YACpD,UAAU,EAAE,OAAO;SACpB,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,UAAiC;QAEjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAU,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,KAAK,CACvE,GAAG,EAAE,CAAC,EAAE,CACT,CAAC;QACF,MAAM,MAAM,GAAG,MAAM;aAClB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;aAC5D,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;aAClC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAEO,eAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;IAC3E,CAAC;CACF;AAED,SAAS,UAAU,CAA2B,MAAW;IACvD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAa,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC"}

package/dist/agent-tool-adapter.d.ts

@@ -0,0 +1,20 @@
+import type { ImageContent, TextContent } from "@earendil-works/pi-ai";
+import { type AgentTool, type AgentToolResult } from "@nerve/agent";
+import type { AgentRecord, ToolCallRecord, ToolName } from "@nerve/shared";
+import type { ToolAnchor } from "./domains/conversations/conversation-runtime.js";
+import type { ToolService } from "./tool-service.js";
+export type AgentToolPromptMetadata = {
+    activeToolNames: string[];
+    snippets: Record<string, string>;
+    guidelines: string[];
+};
+export declare function createAgentToolsForAgent(agent: AgentRecord, tools: ToolService, options?: {
+    runId?: string;
+    resolveToolAnchor?: (providerToolCallId: string) => ToolAnchor | undefined;
+}): AgentTool[];
+export declare function activeToolNamesForAgent(agent: AgentRecord): ToolName[];
+export declare function toolPromptMetadata(activeToolNames: string[]): AgentToolPromptMetadata;
+export declare function completedToolResult(toolCall: ToolCallRecord): AgentToolResult<unknown>;
+export declare function contentBlocksFromResult(result: unknown): Array<TextContent | ImageContent> | undefined;
+export declare function formatToolResultForModel(toolCall: ToolCallRecord): string;
+//# sourceMappingURL=agent-tool-adapter.d.ts.map

package/dist/agent-tool-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-adapter.d.ts","sourceRoot":"","sources":["../src/agent-tool-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EACL,KAAK,SAAS,EACd,KAAK,eAAe,EAErB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE3E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,MAAM,uBAAuB,GAAG;IACpC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,WAAW,EAClB,KAAK,EAAE,WAAW,EAClB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,CAAC,kBAAkB,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CACvE,GACL,SAAS,EAAE,CAIb;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,EAAE,CA8DtE;AAED,wBAAgB,kBAAkB,CAChC,eAAe,EAAE,MAAM,EAAE,GACxB,uBAAuB,CAmBzB;AAmDD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,GACvB,eAAe,CAAC,OAAO,CAAC,CAU1B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,GACd,KAAK,CAAC,WAAW,GAAG,YAAY,CAAC,GAAG,SAAS,CA8B/C;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAkDzE"}

package/dist/agent-tool-adapter.js

@@ -0,0 +1,215 @@
+import { AgentToolSuspension, } from "@nerve/agent";
+import { allToolDefinitions } from "@nerve/tools";
+export function createAgentToolsForAgent(agent, tools, options = {}) {
+    return allToolDefinitions.map((definition) => wrapCoreToolDefinition(definition, agent, tools, options));
+}
+export function activeToolNamesForAgent(agent) {
+    if (agent.permissionLevel === "read_only") {
+        const tools = [
+            "read",
+            "grep",
+            "find",
+            "ls",
+            "process_list",
+            "process_logs",
+            "ask_user",
+            "todos_set",
+            "todos_get",
+            "plan_mode_enter",
+        ];
+        if (agent.mode === "planning") {
+            tools.push("plan_mode_present", "plan_mode_force_exit");
+        }
+        return tools;
+    }
+    if (agent.mode === "planning") {
+        return [
+            "read",
+            "bash",
+            "edit",
+            "write",
+            "grep",
+            "find",
+            "ls",
+            "process_list",
+            "process_logs",
+            "subagent_run",
+            "ask_user",
+            "todos_set",
+            "todos_get",
+            "web_search",
+            "web_fetch",
+            "plan_mode_enter",
+            "plan_mode_present",
+            "plan_mode_force_exit",
+        ];
+    }
+    return [
+        "read",
+        "bash",
+        "edit",
+        "write",
+        "grep",
+        "find",
+        "ls",
+        "process_start",
+        "process_stop",
+        "process_restart",
+        "process_list",
+        "process_logs",
+        "subagent_run",
+        "ask_user",
+        "todos_set",
+        "todos_get",
+        "web_search",
+        "web_fetch",
+        "plan_mode_enter",
+    ];
+}
+export function toolPromptMetadata(activeToolNames) {
+    const active = new Set(activeToolNames);
+    const snippets = {};
+    const guidelines = [];
+    const seenGuidelines = new Set();
+    for (const definition of allToolDefinitions) {
+        if (!active.has(definition.name))
+            continue;
+        if (definition.promptSnippet)
+            snippets[definition.name] = definition.promptSnippet;
+        for (const guideline of definition.promptGuidelines ?? []) {
+            const normalized = guideline.trim();
+            if (!normalized || seenGuidelines.has(normalized))
+                continue;
+            seenGuidelines.add(normalized);
+            guidelines.push(normalized);
+        }
+    }
+    return { activeToolNames: [...active], snippets, guidelines };
+}
+function wrapCoreToolDefinition(definition, agent, tools, options) {
+    return {
+        name: definition.name,
+        label: definition.label,
+        description: definition.description,
+        parameters: definition.parameters,
+        prepareArguments: definition.prepareArguments,
+        executionMode: definition.executionMode,
+        execute: async (sourceToolCallId, params, signal) => {
+            const toolCall = await tools.requestToolAndWait(agent, definition.name, params, {
+                signal,
+                sourceToolCallId,
+                providerToolCallId: sourceToolCallId,
+                runId: options.runId,
+                anchor: options.resolveToolAnchor?.(sourceToolCallId),
+                durableSuspend: true,
+            });
+            if (toolCall.status === "completed")
+                return completedToolResult(toolCall);
+            if (toolCall.status === "waiting_for_user" &&
+                (definition.name === "ask_user" ||
+                    definition.name === "plan_mode_present")) {
+                throw new AgentToolSuspension({
+                    toolCallId: toolCall.id,
+                    toolName: definition.name,
+                    reason: `Tool ${definition.name} is awaiting user input.`,
+                });
+            }
+            const message = toolCall.error ?? `Tool ${definition.name} ${toolCall.status}.`;
+            throw new Error(message);
+        },
+    };
+}
+export function completedToolResult(toolCall) {
+    return {
+        content: contentBlocksFromResult(toolCall.result) ?? [
+            { type: "text", text: formatToolResultForModel(toolCall) },
+        ],
+        details: {
+            toolCall,
+            result: toolCall.result,
+        },
+    };
+}
+export function contentBlocksFromResult(result) {
+    if (!result || typeof result !== "object")
+        return undefined;
+    const contentBlocks = result.contentBlocks;
+    if (!Array.isArray(contentBlocks) || contentBlocks.length === 0) {
+        return undefined;
+    }
+    const blocks = [];
+    for (const block of contentBlocks) {
+        if (!block || typeof block !== "object")
+            return undefined;
+        const record = block;
+        if (record.type === "text" && typeof record.text === "string") {
+            blocks.push({ type: "text", text: record.text });
+            continue;
+        }
+        if (record.type === "image" &&
+            typeof record.data === "string" &&
+            typeof record.mimeType === "string") {
+            blocks.push({
+                type: "image",
+                data: record.data,
+                mimeType: record.mimeType,
+            });
+            continue;
+        }
+        return undefined;
+    }
+    return blocks;
+}
+export function formatToolResultForModel(toolCall) {
+    const result = toolCall.result;
+    if (result === undefined)
+        return "Tool completed.";
+    if (toolCall.toolName === "ask_user" &&
+        result &&
+        typeof result === "object") {
+        const record = result;
+        if (record.dismissed === true) {
+            return `User dismissed the question.${typeof record.dismissedReason === "string"
+                ? `\nReason: ${record.dismissedReason}`
+                : ""}`;
+        }
+        if (typeof record.response === "string") {
+            return `User replied:\n${record.response}`;
+        }
+    }
+    if (typeof result === "string")
+        return truncate(result, 24_000);
+    if (result && typeof result === "object") {
+        const record = result;
+        const parts = [];
+        if (typeof record.content === "string")
+            parts.push(record.content);
+        if (typeof record.stdout === "string" && record.stdout.length > 0) {
+            parts.push(`stdout:\n${record.stdout}`);
+        }
+        if (typeof record.stderr === "string" && record.stderr.length > 0) {
+            parts.push(`stderr:\n${record.stderr}`);
+        }
+        if (typeof record.exitCode === "number")
+            parts.push(`exitCode: ${record.exitCode}`);
+        if (Array.isArray(record.entries)) {
+            parts.push(`entries:\n${record.entries
+                .map((entry) => JSON.stringify(entry))
+                .join("\n")}`);
+        }
+        if (Array.isArray(record.matches)) {
+            parts.push(`matches:\n${record.matches
+                .map((entry) => JSON.stringify(entry))
+                .join("\n")}`);
+        }
+        if (parts.length > 0)
+            return truncate(parts.join("\n\n"), 24_000);
+    }
+    return truncate(JSON.stringify(result, null, 2), 24_000);
+}
+function truncate(text, maxChars) {
+    if (text.length <= maxChars)
+        return text;
+    return `${text.slice(0, maxChars)}\n\n[...${text.length - maxChars} more characters truncated]`;
+}
+//# sourceMappingURL=agent-tool-adapter.js.map

package/dist/agent-tool-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-adapter.js","sourceRoot":"","sources":["../src/agent-tool-adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,kBAAkB,EAA2B,MAAM,cAAc,CAAC;AAU3E,MAAM,UAAU,wBAAwB,CACtC,KAAkB,EAClB,KAAkB,EAClB,UAGI,EAAE;IAEN,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAC3C,sBAAsB,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAkB;IACxD,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAe;YACxB,MAAM;YACN,MAAM;YACN,MAAM;YACN,IAAI;YACJ,cAAc;YACd,cAAc;YACd,UAAU;YACV,WAAW;YACX,WAAW;YACX,iBAAiB;SAClB,CAAC;QACF,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO;YACL,MAAM;YACN,MAAM;YACN,MAAM;YACN,OAAO;YACP,MAAM;YACN,MAAM;YACN,IAAI;YACJ,cAAc;YACd,cAAc;YACd,cAAc;YACd,UAAU;YACV,WAAW;YACX,WAAW;YACX,YAAY;YACZ,WAAW;YACX,iBAAiB;YACjB,mBAAmB;YACnB,sBAAsB;SACvB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM;QACN,MAAM;QACN,MAAM;QACN,OAAO;QACP,MAAM;QACN,MAAM;QACN,IAAI;QACJ,eAAe;QACf,cAAc;QACd,iBAAiB;QACjB,cAAc;QACd,cAAc;QACd,cAAc;QACd,UAAU;QACV,WAAW;QACX,WAAW;QACX,YAAY;QACZ,WAAW;QACX,iBAAiB;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,eAAyB;IAEzB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IACxC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IAEzC,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3C,IAAI,UAAU,CAAC,aAAa;YAC1B,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,aAAa,CAAC;QACvD,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;YAC1D,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,UAAU,IAAI,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,SAAS;YAC5D,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAA8B,EAC9B,KAAkB,EAClB,KAAkB,EAClB,OAGC;IAED,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;QAC7C,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAC7C,KAAK,EACL,UAAU,CAAC,IAAI,EACf,MAAiC,EACjC;gBACE,MAAM;gBACN,gBAAgB;gBAChB,kBAAkB,EAAE,gBAAgB;gBACpC,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,gBAAgB,CAAC;gBACrD,cAAc,EAAE,IAAI;aACrB,CACF,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW;gBAAE,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAC1E,IACE,QAAQ,CAAC,MAAM,KAAK,kBAAkB;gBACtC,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU;oBAC7B,UAAU,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAC1C,CAAC;gBACD,MAAM,IAAI,mBAAmB,CAAC;oBAC5B,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,QAAQ,EAAE,UAAU,CAAC,IAAI;oBACzB,MAAM,EAAE,QAAQ,UAAU,CAAC,IAAI,0BAA0B;iBAC1D,CAAC,CAAC;YACL,CAAC;YACD,MAAM,OAAO,GACX,QAAQ,CAAC,KAAK,IAAI,QAAQ,UAAU,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAwB;IAExB,OAAO;QACL,OAAO,EAAE,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI;YACnD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,CAAC,QAAQ,CAAC,EAAE;SAC3D;QACD,OAAO,EAAE;YACP,QAAQ;YACR,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAe;IAEf,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,aAAa,GAAI,MAAkC,CAAC,aAAa,CAAC;IACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IACE,MAAM,CAAC,IAAI,KAAK,OAAO;YACvB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EACnC,CAAC;YACD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAwB;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,iBAAiB,CAAC;IACnD,IACE,QAAQ,CAAC,QAAQ,KAAK,UAAU;QAChC,MAAM;QACN,OAAO,MAAM,KAAK,QAAQ,EAC1B,CAAC;QACD,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,+BACL,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ;gBACxC,CAAC,CAAC,aAAa,MAAM,CAAC,eAAe,EAAE;gBACvC,CAAC,CAAC,EACN,EAAE,CAAC;QACL,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,kBAAkB,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACrC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,CAAC,OAAO;iBACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;iBACrC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,CAAC,OAAO;iBACxB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;iBACrC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,QAAgB;IAC9C,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,WAAW,IAAI,CAAC,MAAM,GAAG,QAAQ,6BAA6B,CAAC;AAClG,CAAC"}

package/dist/agents/agent-authority.d.ts

@@ -0,0 +1,5 @@
+import type { AgentRecord, Mode, PermissionLevel } from "@nerve/shared";
+export declare function assertChildAuthority(parent: AgentRecord, mode: Mode, permissionLevel: PermissionLevel, allowAuthorityExceed: boolean): void;
+export declare function modeRank(mode: Mode): number;
+export declare function permissionRank(permission: PermissionLevel): number;
+//# sourceMappingURL=agent-authority.d.ts.map

package/dist/agents/agent-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-authority.d.ts","sourceRoot":"","sources":["../../src/agents/agent-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAGxE,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,IAAI,EACV,eAAe,EAAE,eAAe,EAChC,oBAAoB,EAAE,OAAO,GAC5B,IAAI,CAyBN;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAE3C;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,GAAG,MAAM,CASlE"}

package/dist/agents/agent-authority.js

@@ -0,0 +1,28 @@
+import { HttpError } from "../http/errors.js";
+export function assertChildAuthority(parent, mode, permissionLevel, allowAuthorityExceed) {
+    if (parent.budget.depth >= parent.budget.maxDepth) {
+        throw new HttpError(403, "SUBAGENT_DEPTH_LIMIT", `Child-agent depth limit reached (${parent.budget.depth}/${parent.budget.maxDepth}).`);
+    }
+    if (parent.budget.usedRuns >= parent.budget.maxRuns) {
+        throw new HttpError(403, "SUBAGENT_BUDGET_EXHAUSTED", `Child-agent run budget exhausted (${parent.budget.usedRuns}/${parent.budget.maxRuns}).`);
+    }
+    const exceeds = modeRank(mode) > modeRank(parent.mode) ||
+        permissionRank(permissionLevel) > permissionRank(parent.permissionLevel);
+    if (exceeds && !allowAuthorityExceed) {
+        throw new HttpError(403, "SUBAGENT_AUTHORITY_EXCEEDED", "Child agent authority cannot exceed parent authority without an approved subagent_run tool call.");
+    }
+}
+export function modeRank(mode) {
+    return mode === "planning" ? 0 : 1;
+}
+export function permissionRank(permission) {
+    switch (permission) {
+        case "read_only":
+            return 0;
+        case "supervised":
+            return 1;
+        case "autonomous":
+            return 2;
+    }
+}
+//# sourceMappingURL=agent-authority.js.map

package/dist/agents/agent-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-authority.js","sourceRoot":"","sources":["../../src/agents/agent-authority.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,UAAU,oBAAoB,CAClC,MAAmB,EACnB,IAAU,EACV,eAAgC,EAChC,oBAA6B;IAE7B,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,sBAAsB,EACtB,oCAAoC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,CACtF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,2BAA2B,EAC3B,qCAAqC,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,cAAc,CAAC,eAAe,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3E,IAAI,OAAO,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,6BAA6B,EAC7B,kGAAkG,CACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAU;IACjC,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAA2B;IACxD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,CAAC,CAAC;QACX,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;QACX,KAAK,YAAY;YACf,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/agents/agent-budget.d.ts

@@ -0,0 +1,3 @@
+import type { AgentRecord, CreateAgentRequest } from "@nerve/shared";
+export declare function agentBudget(parent: AgentRecord | undefined, request: CreateAgentRequest["budget"]): AgentRecord["budget"];
+//# sourceMappingURL=agent-budget.d.ts.map

package/dist/agents/agent-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-budget.d.ts","sourceRoot":"","sources":["../../src/agents/agent-budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAErE,wBAAgB,WAAW,CACzB,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,kBAAkB,CAAC,QAAQ,CAAC,GACpC,WAAW,CAAC,QAAQ,CAAC,CAevB"}

package/dist/agents/agent-budget.js

@@ -0,0 +1,17 @@
+export function agentBudget(parent, request) {
+    if (!parent) {
+        return {
+            depth: request?.depth ?? 0,
+            maxDepth: request?.maxDepth ?? 3,
+            maxRuns: request?.maxRuns ?? 8,
+            usedRuns: request?.usedRuns ?? 0,
+        };
+    }
+    return {
+        depth: parent.budget.depth + 1,
+        maxDepth: request?.maxDepth ?? parent.budget.maxDepth,
+        maxRuns: request?.maxRuns ?? Math.max(1, parent.budget.maxRuns),
+        usedRuns: request?.usedRuns ?? 0,
+    };
+}
+//# sourceMappingURL=agent-budget.js.map

package/dist/agents/agent-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-budget.js","sourceRoot":"","sources":["../../src/agents/agent-budget.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,WAAW,CACzB,MAA+B,EAC/B,OAAqC;IAErC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;YAC1B,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC;YAC9B,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC;SACjC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC;QAC9B,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ;QACrD,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/D,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,CAAC;KACjC,CAAC;AACJ,CAAC"}

package/dist/agents/agent-status.d.ts

@@ -0,0 +1,4 @@
+import type { AgentRecord } from "@nerve/shared";
+import type { EventBus } from "../infrastructure/events/index.js";
+export declare function setAgentStatus(agent: AgentRecord, status: AgentRecord["status"], updateAgent: (agent: AgentRecord) => Promise<void>, events: EventBus): Promise<void>;
+//# sourceMappingURL=agent-status.d.ts.map

package/dist/agents/agent-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-status.d.ts","sourceRoot":"","sources":["../../src/agents/agent-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mCAAmC,CAAC;AAElE,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,EAC7B,WAAW,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,EAClD,MAAM,EAAE,QAAQ,GACf,OAAO,CAAC,IAAI,CAAC,CAQf"}

package/dist/agents/agent-status.js

@@ -0,0 +1,10 @@
+export async function setAgentStatus(agent, status, updateAgent, events) {
+    const updated = { ...agent, status, updatedAt: new Date().toISOString() };
+    await updateAgent(updated);
+    await events.publish("agent.status_changed", {
+        agent: updated,
+        agentId: updated.id,
+        status,
+    });
+}
+//# sourceMappingURL=agent-status.js.map

package/dist/agents/agent-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-status.js","sourceRoot":"","sources":["../../src/agents/agent-status.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAkB,EAClB,MAA6B,EAC7B,WAAkD,EAClD,MAAgB;IAEhB,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE;QAC3C,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,OAAO,CAAC,EAAE;QACnB,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,30 @@
+import type { OAuthCredentials } from "@earendil-works/pi-ai/oauth";
+import type { AgentRequestAuth, AuthProviderMetadata, ModelInfo, ModelSelection } from "@nervekit/shared";
+import type { SecretProvider } from "./secrets.js";
+export type ApiKeyCredential = {
+    type: "api_key";
+    key: string;
+};
+export type OAuthCredential = {
+    type: "oauth";
+} & OAuthCredentials;
+export type ProviderCredential = ApiKeyCredential | OAuthCredential;
+export declare function providerApiKeySecretName(provider: string): string;
+export declare function providerOAuthSecretName(provider: string): string;
+export declare function providerEnvVarName(provider: string): string;
+export declare function supportsStoredApiKey(provider: string): boolean;
+export declare class AuthManager {
+    private readonly secrets;
+    private readonly refreshLocks;
+    constructor(secrets: SecretProvider);
+    getCredential(provider: string): Promise<ProviderCredential | undefined>;
+    setApiKey(provider: string, apiKey: string): Promise<void>;
+    setOAuth(provider: string, credential: OAuthCredentials): Promise<void>;
+    deleteCredential(provider: string): Promise<void>;
+    credentialType(provider: string): Promise<ProviderCredential["type"] | undefined>;
+    getApiKey(provider: string): Promise<string | undefined>;
+    requestAuthForModel(model: ModelSelection | undefined): Promise<AgentRequestAuth | undefined>;
+    listProviderMetadata(models: ModelInfo[], customProviderNames?: ReadonlyMap<string, string>): Promise<AuthProviderMetadata[]>;
+    private refreshOAuth;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAEjB,MAAM,6BAA6B,CAAC;AAErC,OAAO,KAAK,EACV,gBAAgB,EAChB,oBAAoB,EACpB,SAAS,EACT,cAAc,EACf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;CACf,GAAG,gBAAgB,CAAC;AAErB,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAKpE,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEjE;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEhE;AASD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAc3D;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE9D;AAiBD,qBAAa,WAAW;IAMV,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAGzB;gBAEyB,OAAO,EAAE,cAAc;IAE9C,aAAa,CACjB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAUpC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1D,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,gBAAgB,GAC3B,OAAO,CAAC,IAAI,CAAC;IASV,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKjD,cAAc,CAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;IAI5C,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAoBxD,mBAAmB,CACvB,KAAK,EAAE,cAAc,GAAG,SAAS,GAChC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAMlC,oBAAoB,CACxB,MAAM,EAAE,SAAS,EAAE,EACnB,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAChD,OAAO,CAAC,oBAAoB,EAAE,CAAC;YAkDpB,YAAY;CAc3B"}

package/dist/auth.js

@@ -0,0 +1,158 @@
+import { getOAuthApiKey, getOAuthProviders } from "@earendil-works/pi-ai/oauth";
+const ANTHROPIC_OAUTH_WARNING = "Anthropic subscription auth may use paid extra usage outside normal Claude plan limits.";
+export function providerApiKeySecretName(provider) {
+    return `provider:${provider}:apiKey`;
+}
+export function providerOAuthSecretName(provider) {
+    return `provider:${provider}:oauth`;
+}
+function displayNameForProvider(provider) {
+    const known = {
+        tavily: "Tavily",
+    };
+    return known[provider] ?? provider;
+}
+export function providerEnvVarName(provider) {
+    const known = {
+        anthropic: "ANTHROPIC_API_KEY",
+        google: "GOOGLE_API_KEY",
+        groq: "GROQ_API_KEY",
+        openai: "OPENAI_API_KEY",
+        openrouter: "OPENROUTER_API_KEY",
+        tavily: "TAVILY_API_KEY",
+        xai: "XAI_API_KEY",
+    };
+    return (known[provider] ??
+        `${provider.replaceAll(/[^a-zA-Z0-9]/g, "_").toUpperCase()}_API_KEY`);
+}
+export function supportsStoredApiKey(provider) {
+    return provider !== "openai-codex" && provider !== "github-copilot";
+}
+function parseOAuthCredential(value) {
+    if (!value)
+        return undefined;
+    const parsed = JSON.parse(value);
+    if (parsed.type !== "oauth")
+        return undefined;
+    return parsed;
+}
+function oauthProvidersById() {
+    return new Map(getOAuthProviders().map((provider) => [provider.id, provider]));
+}
+export class AuthManager {
+    secrets;
+    refreshLocks = new Map();
+    constructor(secrets) {
+        this.secrets = secrets;
+    }
+    async getCredential(provider) {
+        const oauth = parseOAuthCredential(await this.secrets.get(providerOAuthSecretName(provider)));
+        if (oauth)
+            return oauth;
+        const key = await this.secrets.get(providerApiKeySecretName(provider));
+        return key ? { type: "api_key", key } : undefined;
+    }
+    async setApiKey(provider, apiKey) {
+        await this.secrets.set(providerApiKeySecretName(provider), apiKey);
+        await this.secrets.delete(providerOAuthSecretName(provider));
+    }
+    async setOAuth(provider, credential) {
+        const stored = { type: "oauth", ...credential };
+        await this.secrets.set(providerOAuthSecretName(provider), JSON.stringify(stored));
+        await this.secrets.delete(providerApiKeySecretName(provider));
+    }
+    async deleteCredential(provider) {
+        await this.secrets.delete(providerApiKeySecretName(provider));
+        await this.secrets.delete(providerOAuthSecretName(provider));
+    }
+    async credentialType(provider) {
+        return (await this.getCredential(provider))?.type;
+    }
+    async getApiKey(provider) {
+        const credential = await this.getCredential(provider);
+        if (!credential)
+            return undefined;
+        if (credential.type === "api_key")
+            return credential.key;
+        const oauthProvider = oauthProvidersById().get(provider);
+        if (!oauthProvider)
+            return undefined;
+        if (Date.now() < credential.expires)
+            return oauthProvider.getApiKey(credential);
+        const existing = this.refreshLocks.get(provider);
+        if (existing)
+            return existing;
+        const refresh = this.refreshOAuth(provider).finally(() => {
+            this.refreshLocks.delete(provider);
+        });
+        this.refreshLocks.set(provider, refresh);
+        return refresh;
+    }
+    async requestAuthForModel(model) {
+        if (!model || model.provider === "nerve-faux")
+            return undefined;
+        const apiKey = await this.getApiKey(model.provider);
+        return apiKey ? { apiKey } : undefined;
+    }
+    async listProviderMetadata(models, customProviderNames) {
+        const oauthProviders = oauthProvidersById();
+        const providers = new Set();
+        for (const model of models) {
+            if (model.provider !== "nerve-faux")
+                providers.add(model.provider);
+        }
+        providers.add("tavily");
+        for (const provider of oauthProviders.keys()) {
+            if (provider === "openai-codex" || provider === "anthropic") {
+                providers.add(provider);
+            }
+        }
+        for (const name of await this.secrets.list()) {
+            const apiKeyMatch = /^provider:(.+):apiKey$/.exec(name);
+            const oauthMatch = /^provider:(.+):oauth$/.exec(name);
+            if (apiKeyMatch)
+                providers.add(apiKeyMatch[1]);
+            if (oauthMatch)
+                providers.add(oauthMatch[1]);
+        }
+        const items = await Promise.all([...providers].sort().map(async (provider) => {
+            const oauthProvider = oauthProviders.get(provider);
+            const credential = await this.getCredential(provider);
+            return {
+                provider,
+                displayName: oauthProvider?.name ??
+                    customProviderNames?.get(provider) ??
+                    displayNameForProvider(provider),
+                supportsApiKey: supportsStoredApiKey(provider),
+                supportsOAuth: provider === "openai-codex" || provider === "anthropic",
+                oauthName: oauthProvider?.name,
+                configured: Boolean(credential),
+                credentialType: credential?.type,
+                envVar: supportsStoredApiKey(provider) && provider !== "tavily"
+                    ? providerEnvVarName(provider)
+                    : undefined,
+                warning: provider === "anthropic" && credential?.type === "oauth"
+                    ? ANTHROPIC_OAUTH_WARNING
+                    : undefined,
+            };
+        }));
+        return items.filter((item) => item.supportsApiKey || item.supportsOAuth);
+    }
+    async refreshOAuth(provider) {
+        const oauthCredentials = {};
+        for (const name of await this.secrets.list()) {
+            const match = /^provider:(.+):oauth$/.exec(name);
+            if (!match)
+                continue;
+            const credential = parseOAuthCredential(await this.secrets.get(name));
+            if (credential)
+                oauthCredentials[match[1]] = credential;
+        }
+        const result = await getOAuthApiKey(provider, oauthCredentials);
+        if (!result)
+            return undefined;
+        await this.setOAuth(provider, result.newCredentials);
+        return result.apiKey;
+    }
+}
+//# sourceMappingURL=auth.js.map