@nifrajs/agent-app 3.2.0

package/README.md

@@ -0,0 +1,70 @@
+# @nifrajs/agent-app
+
+A presentation-safe browser SDK for Nifra agent hosts.
+
+This package depends on **only** `@nifrajs/agent-protocol`. It pulls in no backend, model provider,
+storage, or UI framework, so it can be bundled into browser-facing code without dragging a private
+engine or payload content across the boundary. Everything it surfaces upward is a content-free view
+model: identifiers, lifecycle statuses, counters, and opaque references. A prompt becomes a character
+count; a tool result becomes an `ok` flag and an error *code*; a compaction becomes before/after token
+counts.
+
+## What it does
+
+- **Feature negotiation.** On session creation the client intersects the features it can drive with the
+  capabilities the host advertises, and gates the matching operations behind `requireFeature`.
+- **Caller auth.** An optional `authorize` hook mints a bearer token per request. The token is placed
+  on the outgoing `Authorization` header and never stored on the transport, copied into a result, or
+  written to a log.
+- **Ordered, deduplicated streaming.** A turn arrives as an ordered stream of `AgentEventView`s.
+  Out-of-order and redelivered frames are reordered and de-duplicated by sequence; a bounded buffer
+  skips an unfilled gap rather than stalling.
+- **Cursor resume.** A persisted log can be replayed from a cursor. A cursor whose next record was
+  evicted from the retained window asks the caller to resync.
+- **Approvals and handoffs.** Pending approvals list as identifiers; decisions and handoff outcomes go
+  back through negotiated commands.
+- **Run Studio views.** Run graphs, retry/recovery timelines, eval comparisons, and fault-injection
+  rows consume only protocol evidence and bounded replay references.
+- **Escape hatch.** `command()` reaches host-specific surfaces outside the negotiated contract and
+  still returns a bounded `CommandOutcome` - it never throws the credential.
+
+## Usage
+
+```ts
+import { AgentAppClient, HttpAgentTransport } from "@nifrajs/agent-app"
+
+const transport = new HttpAgentTransport({
+  endpoint: "http://127.0.0.1:8787",
+  authorize: () => currentToken(), // per-request; never stored
+})
+const client = new AgentAppClient(transport)
+
+const session = await client.createSession()
+if (client.supports("resume")) {
+  const replay = await client.resume({ cursor: lastCursor })
+  // replay.entries: { seq, at, type }[] - no payloads
+}
+
+for await (const view of client.send("summarize the diff")) {
+  // view is content-free: e.g. { kind: "assistant.delta", seq, chars }
+}
+```
+
+## Boundary
+
+The transport receives the host's full event stream in order to derive counts, but the client's public
+output is projected to content-free view models. That projection is the seam: an application built on
+this SDK can render progress and resolve interactions, and cannot reconstruct a prompt, tool payload,
+model completion, diagnostic report, or filesystem path. The `scripts/check-agent-boundary.ts` gate
+enforces that this package imports nothing but `@nifrajs/agent-protocol`.
+
+The SDK is transport-neutral and opt-in: it does not retain payloads, provide identity or tenancy,
+claim a remote security boundary, or imply durable delivery. Production hosts own authorization,
+retention, and adapter policy.
+
+## License
+
+MIT
+
+For AI agents, see [`LLM.md`](./LLM.md) and the full corpus
+[`../../llms-full.txt`](../../llms-full.txt).

package/dist/client.d.ts

@@ -0,0 +1,150 @@
+/**
+ * The Agent App client: a presentation-safe façade over an agent host.
+ *
+ * It negotiates the feature set with the host on session creation, drives turns as an ordered,
+ * deduplicated stream of content-free {@link AgentEventView}s, resumes a persisted log by cursor with
+ * gap detection, and resolves approvals and handoffs. Everything it returns upward is a view model -
+ * identifiers, statuses, counters, opaque references - so an untyped browser app built on this client
+ * can never touch prompt text, tool payloads, model output, or filesystem paths. Host-specific surfaces
+ * beyond the negotiated contract are reachable through the raw {@link AgentAppClient.command} escape
+ * hatch, which still returns a bounded {@link CommandOutcome} and never leaks the caller credential.
+ */
+import { type BoundaryCommand, type DecisionCoordinate } from "@nifrajs/agent-protocol";
+import type { AgentTransport, CommandOutcome } from "./transport.js";
+import { type AgentEventView, type HandoffView, type RunView, type SessionView } from "./view-models.js";
+/** Interaction features the client knows how to drive. A host grants the subset it supports. */
+export declare const AGENT_APP_FEATURES: readonly ["approvals", "checkpoint", "fork", "handoff", "inbox", "reload", "resume", "workflows"];
+export declare class AgentAppError extends Error {
+    constructor(message: string);
+}
+export interface AgentAppClientOptions {
+    /** Features the client will request at negotiation. Defaults to {@link AGENT_APP_FEATURES}. */
+    readonly features?: readonly string[];
+    /** Bound on out-of-order live events held before a gap is skipped. Forwarded to the event buffer. */
+    readonly maxPending?: number;
+}
+export interface CreateSessionInput {
+    readonly cwd?: string;
+    readonly backend?: string;
+    readonly capabilities?: readonly string[];
+    readonly sessionId?: string;
+}
+export interface ResumeInput {
+    /** Last delivered seq. Omit or pass `-1` to replay the whole retained window. */
+    readonly cursor?: number;
+    readonly limit?: number;
+}
+/** One persisted log record reduced to ordering and a type label - never its payload. */
+export interface ReplayEntryView {
+    readonly seq: number;
+    readonly at: number;
+    readonly type: string;
+}
+export type ReplayResult = {
+    readonly status: "ok";
+    readonly nextCursor: number;
+    readonly entries: readonly ReplayEntryView[];
+    readonly session?: SessionView;
+} | {
+    readonly status: "resync_required";
+    readonly reason: string;
+    readonly earliest: number;
+    readonly latest: number;
+};
+export interface PendingApprovalView {
+    readonly approvalId: string;
+    readonly action: string;
+    readonly capability: string;
+    readonly turnId?: string;
+}
+export interface ResolveHandoffInput {
+    readonly runId: string;
+    readonly nodeId: string;
+    readonly accept: boolean;
+    readonly reason?: string;
+}
+/**
+ * One pending decision boundary in the inbox, projected to structural coordinates and a state only.
+ * It never carries a prompt, a free-text reason, tool data, model output, a diagnostic, or an
+ * artifact - just enough identity for the UI to address the exact boundary a decision resolves.
+ */
+export interface BoundaryItemView {
+    readonly kind: "approval" | "handoff";
+    readonly requestId: string;
+    readonly runId: string;
+    readonly nodeId: string;
+    readonly capability: string;
+    readonly vector: number;
+    readonly expiresAt: number;
+    readonly state: string;
+    /** Opaque owner role once a handoff is assigned. */
+    readonly to?: string;
+}
+/** The bounded outcome of a boundary decision: the resulting item, or a content-free refusal code. */
+export type BoundaryDecisionResult = {
+    readonly ok: true;
+    readonly item: BoundaryItemView;
+} | {
+    readonly ok: false;
+    readonly code: string;
+};
+export declare class AgentAppClient {
+    private readonly transport;
+    private readonly requested;
+    private readonly maxPending;
+    private currentSession;
+    private granted;
+    constructor(transport: AgentTransport, options?: AgentAppClientOptions);
+    /** The current session view, or `undefined` before {@link createSession}/{@link resume}. */
+    get session(): SessionView | undefined;
+    /** Features the host granted at negotiation. */
+    get features(): readonly string[];
+    supports(feature: string): boolean;
+    requireFeature(feature: string): void;
+    /** Open a session and negotiate the feature set against the host's advertised capabilities. */
+    createSession(input?: CreateSessionInput): Promise<SessionView>;
+    /**
+     * Stream a turn as ordered, deduplicated view models. The underlying transport receives the host's
+     * full event stream, but every value yielded here is content-free.
+     */
+    send(message: string, options?: {
+        signal?: AbortSignal;
+    }): AsyncIterable<AgentEventView>;
+    /** Resume a persisted log by cursor. A cursor whose next record was evicted asks for a resync. */
+    resume(input?: ResumeInput): Promise<ReplayResult>;
+    /** List approvals awaiting a decision, projected to their identifiers only. */
+    listApprovals(): Promise<readonly PendingApprovalView[]>;
+    /** Approve or decline a pending approval. Returns the host's recorded decision. */
+    resolveApproval(approvalId: string, approved: boolean, reason?: string): Promise<boolean>;
+    /** Accept or decline a handoff. Returns the resulting handoff view when the host reports one. */
+    resolveHandoff(input: ResolveHandoffInput): Promise<HandoffView | undefined>;
+    /**
+     * List every pending decision boundary (approvals and handoffs) as content-free item views. Gated
+     * on the negotiated `inbox` feature.
+     */
+    listBoundaries(): Promise<readonly BoundaryItemView[]>;
+    /** Inspect one boundary by request id, projected to a content-free item view. */
+    inspectBoundary(requestId: string): Promise<BoundaryItemView | undefined>;
+    /**
+     * Drive one boundary command against its exact coordinate. Because the full {@link DecisionCoordinate}
+     * (run, node, capability, request id, vector, expiry) rides on every call, a decision can only ever
+     * resolve the boundary it names - never a different item - and the host fails a stale or mismatched
+     * coordinate closed. `assign` carries the owner role in `to`.
+     */
+    decideBoundary(command: BoundaryCommand, coordinate: DecisionCoordinate, options?: {
+        readonly to?: string;
+    }): Promise<BoundaryDecisionResult>;
+    /** Fetch a run snapshot by id, projected to a content-free {@link RunView}. */
+    runSnapshot(runId: string): Promise<RunView>;
+    /** Cancel the active turn / stop the session. */
+    cancel(reason?: string): Promise<void>;
+    /**
+     * Escape hatch for host-specific commands outside the negotiated contract. Returns a bounded
+     * {@link CommandOutcome}; the caller is responsible for keeping whatever it renders content-free.
+     */
+    command<T = unknown>(method: string, params?: unknown, signal?: AbortSignal): Promise<CommandOutcome<T>>;
+    private adoptSnapshot;
+    private expectSnapshot;
+    private decodeResume;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EAIxB,MAAM,yBAAyB,CAAA;AAChC,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACpE,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,OAAO,EACZ,KAAK,WAAW,EAKjB,MAAM,kBAAkB,CAAA;AAEzB,gGAAgG;AAChG,eAAO,MAAM,kBAAkB,mGASrB,CAAA;AAEV,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,qBAAqB;IACpC,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,qGAAqG;IACrG,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,MAAM,YAAY,GACpB;IACE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAA;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAC/B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,CAAA;AAEL,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,sGAAsG;AACtG,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAEjD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,cAAc,CAAyB;IAC/C,OAAO,CAAC,OAAO,CAAoB;gBAEvB,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,EAAE,qBAAqB;IAMtE,4FAA4F;IAC5F,IAAI,OAAO,IAAI,WAAW,GAAG,SAAS,CAErC;IAED,gDAAgD;IAChD,IAAI,QAAQ,IAAI,SAAS,MAAM,EAAE,CAEhC;IAED,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIlC,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKrC,+FAA+F;IACzF,aAAa,CAAC,KAAK,GAAE,kBAAuB,GAAG,OAAO,CAAC,WAAW,CAAC;IAUzE;;;OAGG;IACI,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,cAAc,CAAC;IAiB/F,kGAAkG;IAC5F,MAAM,CAAC,KAAK,GAAE,WAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;IAS5D,+EAA+E;IACzE,aAAa,IAAI,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC;IA4B9D,mFAAmF;IAC7E,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU/F,iGAAiG;IAC3F,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAgBlF;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC;IAc5D,iFAAiF;IAC3E,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAc/E;;;;;OAKG;IACG,cAAc,CAClB,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,GACjC,OAAO,CAAC,sBAAsB,CAAC;IAkBlC,+EAA+E;IACzE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAalD,iDAAiD;IAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ5C;;;OAGG;IACH,OAAO,CAAC,CAAC,GAAG,OAAO,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,OAAO,EAChB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;IAQ7B,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,YAAY;CA6CrB"}

package/dist/client.js

@@ -0,0 +1,340 @@
+/**
+ * The Agent App client: a presentation-safe façade over an agent host.
+ *
+ * It negotiates the feature set with the host on session creation, drives turns as an ordered,
+ * deduplicated stream of content-free {@link AgentEventView}s, resumes a persisted log by cursor with
+ * gap detection, and resolves approvals and handoffs. Everything it returns upward is a view model -
+ * identifiers, statuses, counters, opaque references - so an untyped browser app built on this client
+ * can never touch prompt text, tool payloads, model output, or filesystem paths. Host-specific surfaces
+ * beyond the negotiated contract are reachable through the raw {@link AgentAppClient.command} escape
+ * hatch, which still returns a bounded {@link CommandOutcome} and never leaks the caller credential.
+ */
+import { negotiateFeatures, parseHandoffSnapshot, parseRunSnapshot, } from "@nifrajs/agent-protocol";
+import { OrderedEventBuffer, toEventView, toHandoffView, toRunView, toSessionView, } from "./view-models.js";
+/** Interaction features the client knows how to drive. A host grants the subset it supports. */
+export const AGENT_APP_FEATURES = [
+    "approvals",
+    "checkpoint",
+    "fork",
+    "handoff",
+    "inbox",
+    "reload",
+    "resume",
+    "workflows",
+];
+export class AgentAppError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "AgentAppError";
+    }
+}
+export class AgentAppClient {
+    transport;
+    requested;
+    maxPending;
+    currentSession;
+    granted = new Set();
+    constructor(transport, options) {
+        this.transport = transport;
+        this.requested = options?.features ?? AGENT_APP_FEATURES;
+        this.maxPending = options?.maxPending;
+    }
+    /** The current session view, or `undefined` before {@link createSession}/{@link resume}. */
+    get session() {
+        return this.currentSession;
+    }
+    /** Features the host granted at negotiation. */
+    get features() {
+        return [...this.granted];
+    }
+    supports(feature) {
+        return this.granted.has(feature);
+    }
+    requireFeature(feature) {
+        if (!this.granted.has(feature))
+            throw new AgentAppError(`host did not grant the "${feature}" feature`);
+    }
+    /** Open a session and negotiate the feature set against the host's advertised capabilities. */
+    async createSession(input = {}) {
+        const outcome = await this.transport.command({
+            method: "session.create",
+            params: input,
+        });
+        const snapshot = this.expectSnapshot(outcome, "session.create");
+        this.adoptSnapshot(snapshot);
+        return this.currentSession;
+    }
+    /**
+     * Stream a turn as ordered, deduplicated view models. The underlying transport receives the host's
+     * full event stream, but every value yielded here is content-free.
+     */
+    async *send(message, options) {
+        if (this.currentSession === undefined)
+            throw new AgentAppError("createSession must be called before send");
+        const buffer = new OrderedEventBuffer({
+            from: this.currentSession.lastSeq,
+            ...(this.maxPending === undefined ? {} : { maxPending: this.maxPending }),
+        });
+        const stream = this.transport.stream({
+            method: "turn.send",
+            params: { message },
+            ...(options?.signal ? { signal: options.signal } : {}),
+        });
+        for await (const event of stream) {
+            for (const view of buffer.offer(toEventView(event)))
+                yield view;
+        }
+    }
+    /** Resume a persisted log by cursor. A cursor whose next record was evicted asks for a resync. */
+    async resume(input = {}) {
+        this.requireFeature("resume");
+        const params = { cursor: input.cursor ?? -1 };
+        if (input.limit !== undefined)
+            params.limit = input.limit;
+        const outcome = await this.transport.command({ method: "session.events", params });
+        if (!outcome.ok)
+            throw commandError("session.events", outcome);
+        return this.decodeResume(outcome.value);
+    }
+    /** List approvals awaiting a decision, projected to their identifiers only. */
+    async listApprovals() {
+        this.requireFeature("approvals");
+        const outcome = await this.transport.command({ method: "approval.list" });
+        if (!outcome.ok)
+            throw commandError("approval.list", outcome);
+        const pending = isRecord(outcome.value) ? outcome.value.pending : undefined;
+        if (!Array.isArray(pending))
+            return [];
+        const views = [];
+        for (const item of pending) {
+            if (!isRecord(item))
+                continue;
+            const { approvalId, action, capability, turnId } = item;
+            if (typeof approvalId !== "string" ||
+                typeof action !== "string" ||
+                typeof capability !== "string")
+                continue;
+            views.push(Object.freeze({
+                approvalId,
+                action,
+                capability,
+                ...(typeof turnId === "string" ? { turnId } : {}),
+            }));
+        }
+        return views;
+    }
+    /** Approve or decline a pending approval. Returns the host's recorded decision. */
+    async resolveApproval(approvalId, approved, reason) {
+        this.requireFeature("approvals");
+        const outcome = await this.transport.command({
+            method: "approval.resolve",
+            params: { approvalId, approved, ...(reason === undefined ? {} : { reason }) },
+        });
+        if (!outcome.ok)
+            throw commandError("approval.resolve", outcome);
+        return isRecord(outcome.value) && outcome.value.approved === true;
+    }
+    /** Accept or decline a handoff. Returns the resulting handoff view when the host reports one. */
+    async resolveHandoff(input) {
+        this.requireFeature("handoff");
+        const outcome = await this.transport.command({
+            method: "handoff.resolve",
+            params: {
+                runId: input.runId,
+                nodeId: input.nodeId,
+                accept: input.accept,
+                ...(input.reason === undefined ? {} : { reason: input.reason }),
+            },
+        });
+        if (!outcome.ok)
+            throw commandError("handoff.resolve", outcome);
+        if (!isRecord(outcome.value) || outcome.value.handoff === undefined)
+            return undefined;
+        return toHandoffView(parseHandoffSnapshot(outcome.value.handoff));
+    }
+    /**
+     * List every pending decision boundary (approvals and handoffs) as content-free item views. Gated
+     * on the negotiated `inbox` feature.
+     */
+    async listBoundaries() {
+        this.requireFeature("inbox");
+        const outcome = await this.transport.command({ method: "boundary.list" });
+        if (!outcome.ok)
+            throw commandError("boundary.list", outcome);
+        const items = isRecord(outcome.value) ? outcome.value.items : undefined;
+        if (!Array.isArray(items))
+            return [];
+        const views = [];
+        for (const item of items) {
+            const view = toBoundaryItemView(item);
+            if (view !== undefined)
+                views.push(view);
+        }
+        return Object.freeze(views);
+    }
+    /** Inspect one boundary by request id, projected to a content-free item view. */
+    async inspectBoundary(requestId) {
+        this.requireFeature("inbox");
+        const outcome = await this.transport.command({
+            method: "boundary.inspect",
+            params: { requestId },
+        });
+        if (!outcome.ok)
+            throw commandError("boundary.inspect", outcome);
+        const source = isRecord(outcome.value) && outcome.value.item !== undefined
+            ? outcome.value.item
+            : outcome.value;
+        return toBoundaryItemView(source);
+    }
+    /**
+     * Drive one boundary command against its exact coordinate. Because the full {@link DecisionCoordinate}
+     * (run, node, capability, request id, vector, expiry) rides on every call, a decision can only ever
+     * resolve the boundary it names - never a different item - and the host fails a stale or mismatched
+     * coordinate closed. `assign` carries the owner role in `to`.
+     */
+    async decideBoundary(command, coordinate, options) {
+        this.requireFeature("inbox");
+        const outcome = await this.transport.command({
+            method: `boundary.${command}`,
+            params: { coordinate, ...(options?.to === undefined ? {} : { to: options.to }) },
+        });
+        if (!outcome.ok)
+            throw commandError(`boundary.${command}`, outcome);
+        if (isRecord(outcome.value) && typeof outcome.value.rejected === "string")
+            return { ok: false, code: outcome.value.rejected };
+        const item = toBoundaryItemView(isRecord(outcome.value) && outcome.value.item !== undefined
+            ? outcome.value.item
+            : outcome.value);
+        if (item === undefined)
+            return { ok: false, code: "invalid_response" };
+        return { ok: true, item };
+    }
+    /** Fetch a run snapshot by id, projected to a content-free {@link RunView}. */
+    async runSnapshot(runId) {
+        const outcome = await this.transport.command({
+            method: "run.snapshot",
+            params: { runId },
+        });
+        if (!outcome.ok)
+            throw commandError("run.snapshot", outcome);
+        const value = isRecord(outcome.value) && outcome.value.snapshot !== undefined
+            ? outcome.value.snapshot
+            : outcome.value;
+        return toRunView(parseRunSnapshot(value));
+    }
+    /** Cancel the active turn / stop the session. */
+    async cancel(reason) {
+        const outcome = await this.transport.command({
+            method: "session.stop",
+            params: reason === undefined ? {} : { reason },
+        });
+        if (!outcome.ok)
+            throw commandError("session.stop", outcome);
+    }
+    /**
+     * Escape hatch for host-specific commands outside the negotiated contract. Returns a bounded
+     * {@link CommandOutcome}; the caller is responsible for keeping whatever it renders content-free.
+     */
+    command(method, params, signal) {
+        return this.transport.command({
+            method,
+            ...(params === undefined ? {} : { params }),
+            ...(signal ? { signal } : {}),
+        });
+    }
+    adoptSnapshot(snapshot) {
+        this.currentSession = toSessionView(snapshot);
+        this.granted = new Set(negotiateFeatures(snapshot.capabilities, this.requested).granted);
+    }
+    expectSnapshot(outcome, method) {
+        if (!outcome.ok)
+            throw commandError(method, outcome);
+        const value = outcome.value;
+        if (!isRecord(value) ||
+            typeof value.id !== "string" ||
+            typeof value.backend !== "string" ||
+            typeof value.status !== "string" ||
+            typeof value.createdAt !== "number" ||
+            typeof value.updatedAt !== "number" ||
+            typeof value.lastSeq !== "number" ||
+            !Array.isArray(value.capabilities))
+            throw new AgentAppError(`${method} did not return a session snapshot`);
+        return value;
+    }
+    decodeResume(value) {
+        if (!isRecord(value))
+            throw new AgentAppError("session.events returned a non-object");
+        const resume = isRecord(value.resume) ? value.resume : value;
+        const session = isRecord(value.snapshot) && typeof value.snapshot.id === "string"
+            ? toSessionView(value.snapshot)
+            : undefined;
+        if (resume.status === "resync_required") {
+            return Object.freeze({
+                status: "resync_required",
+                reason: typeof resume.reason === "string" ? resume.reason : "stale_cursor",
+                earliest: typeof resume.earliest === "number" ? resume.earliest : 0,
+                latest: typeof resume.latest === "number" ? resume.latest : 0,
+            });
+        }
+        const source = Array.isArray(resume.events)
+            ? resume.events
+            : Array.isArray(value.entries)
+                ? value.entries
+                : [];
+        const entries = [];
+        for (const item of source) {
+            if (!isRecord(item))
+                continue;
+            if (typeof item.seq !== "number" ||
+                typeof item.at !== "number" ||
+                typeof item.type !== "string")
+                continue;
+            entries.push(Object.freeze({ seq: item.seq, at: item.at, type: item.type }));
+        }
+        const tail = entries.at(-1);
+        const nextCursor = typeof resume.nextCursor === "number"
+            ? resume.nextCursor
+            : typeof resume.cursor === "number"
+                ? resume.cursor
+                : (tail?.seq ?? -1);
+        return Object.freeze({
+            status: "ok",
+            nextCursor,
+            entries,
+            ...(session === undefined ? {} : { session }),
+        });
+    }
+}
+function commandError(method, outcome) {
+    return new AgentAppError(`${method} failed (${outcome.status}): ${outcome.error}`);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Project a raw boundary record to a content-free {@link BoundaryItemView}, or drop it if malformed. */
+function toBoundaryItemView(value) {
+    if (!isRecord(value))
+        return undefined;
+    const { kind, requestId, runId, nodeId, capability, vector, expiresAt, state, to } = value;
+    if ((kind !== "approval" && kind !== "handoff") ||
+        typeof requestId !== "string" ||
+        typeof runId !== "string" ||
+        typeof nodeId !== "string" ||
+        typeof capability !== "string" ||
+        typeof vector !== "number" ||
+        typeof expiresAt !== "number" ||
+        typeof state !== "string")
+        return undefined;
+    return Object.freeze({
+        kind,
+        requestId,
+        runId,
+        nodeId,
+        capability,
+        vector,
+        expiresAt,
+        state,
+        ...(typeof to === "string" ? { to } : {}),
+    });
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAIL,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,yBAAyB,CAAA;AAEhC,OAAO,EAGL,kBAAkB,EAGlB,WAAW,EACX,aAAa,EACb,SAAS,EACT,aAAa,GACd,MAAM,kBAAkB,CAAA;AAEzB,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,WAAW;IACX,YAAY;IACZ,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,WAAW;CACH,CAAA;AAEV,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAgFD,MAAM,OAAO,cAAc;IACR,SAAS,CAAgB;IACzB,SAAS,CAAmB;IAC5B,UAAU,CAAoB;IACvC,cAAc,CAAyB;IACvC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAA;IAEnC,YAAY,SAAyB,EAAE,OAA+B;QACpE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,CAAA;QACxD,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAA;IACvC,CAAC;IAED,4FAA4F;IAC5F,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,gDAAgD;IAChD,IAAI,QAAQ;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC;IAED,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAC5B,MAAM,IAAI,aAAa,CAAC,2BAA2B,OAAO,WAAW,CAAC,CAAA;IAC1E,CAAC;IAED,+FAA+F;IAC/F,KAAK,CAAC,aAAa,CAAC,QAA4B,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,KAAK;SACd,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAC/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC5B,OAAO,IAAI,CAAC,cAA6B,CAAA;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,CAAC,IAAI,CAAC,OAAe,EAAE,OAAkC;QAC7D,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YACnC,MAAM,IAAI,aAAa,CAAC,0CAA0C,CAAC,CAAA;QACrE,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,OAAO;YACjC,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;SAC1E,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,EAAE,OAAO,EAAE;YACnB,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAA;QACF,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,IAAI,CAAA;QACjE,CAAC;IACH,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,MAAM,CAAC,QAAqB,EAAE;QAClC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAA;QAC7B,MAAM,MAAM,GAA2B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAA;QACrE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;QACzD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3F,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAA;QAC9D,OAAO,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACzC,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,aAAa;QACjB,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;QAClF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;QAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAA;QACtC,MAAM,KAAK,GAA0B,EAAE,CAAA;QACvC,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC7B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;YACvD,IACE,OAAO,UAAU,KAAK,QAAQ;gBAC9B,OAAO,MAAM,KAAK,QAAQ;gBAC1B,OAAO,UAAU,KAAK,QAAQ;gBAE9B,SAAQ;YACV,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU;gBACV,MAAM;gBACN,UAAU;gBACV,GAAG,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CACH,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,mFAAmF;IACnF,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,QAAiB,EAAE,MAAe;QAC1E,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE;SAC9E,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAA;QAChE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAA;IACnE,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,cAAc,CAAC,KAA0B;QAC7C,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE;gBACN,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aAChE;SACF,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAA;QAC/D,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACrF,OAAO,aAAa,CAAC,oBAAoB,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IACnE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;QAClF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;QACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,CAAA;QACpC,MAAM,KAAK,GAAuB,EAAE,CAAA;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;YACrC,IAAI,IAAI,KAAK,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,EAAE,SAAS,EAAE;SACtB,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAA;QAChE,MAAM,MAAM,GACV,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACzD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;YACpB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;QACnB,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACnC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAClB,OAAwB,EACxB,UAA8B,EAC9B,OAAkC;QAElC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,YAAY,OAAO,EAAE;YAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE;SACjF,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,YAAY,OAAO,EAAE,EAAE,OAAO,CAAC,CAAA;QACnE,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ;YACvE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAA;QACpD,MAAM,IAAI,GAAG,kBAAkB,CAC7B,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACzD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI;YACpB,CAAC,CAAC,OAAO,CAAC,KAAK,CAClB,CAAA;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAA;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;IAC3B,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,EAAE,KAAK,EAAE;SAClB,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;QAC5D,MAAM,KAAK,GACT,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC7D,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ;YACxB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;QACnB,OAAO,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3C,CAAC;IAED,iDAAiD;IACjD,KAAK,CAAC,MAAM,CAAC,MAAe;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAU;YACpD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE;SAC/C,CAAC,CAAA;QACF,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAA;IAC9D,CAAC;IAED;;;OAGG;IACH,OAAO,CACL,MAAc,EACd,MAAgB,EAChB,MAAoB;QAEpB,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAI;YAC/B,MAAM;YACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9B,CAAC,CAAA;IACJ,CAAC;IAEO,aAAa,CAAC,QAA8B;QAClD,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAA;IAC1F,CAAC;IAEO,cAAc,CAAC,OAAgC,EAAE,MAAc;QACrE,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IACE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChB,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;YAC5B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;YAElC,MAAM,IAAI,aAAa,CAAC,GAAG,MAAM,oCAAoC,CAAC,CAAA;QACxE,OAAO,KAAwC,CAAA;IACjD,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAA;QACrF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAA;QAC5D,MAAM,OAAO,GACX,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ;YAC/D,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,QAA2C,CAAC;YAClE,CAAC,CAAC,SAAS,CAAA;QACf,IAAI,MAAM,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,iBAAiB;gBACzB,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc;gBAC1E,QAAQ,EAAE,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;aAC9D,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACzC,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;gBAC5B,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,EAAE,CAAA;QACR,MAAM,OAAO,GAAsB,EAAE,CAAA;QACrC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAC7B,IACE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;gBAC5B,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;gBAC3B,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAE7B,SAAQ;YACV,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QAC9E,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3B,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,CAAC,UAAU;YACnB,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBACjC,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACzB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,IAAI;YACZ,UAAU;YACV,OAAO;YACP,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAA;IACJ,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,OAA0C;IAC9E,OAAO,IAAI,aAAa,CAAC,GAAG,MAAM,YAAY,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,yGAAyG;AACzG,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACtC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,KAAK,CAAA;IAC1F,IACE,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,SAAS,CAAC;QAC3C,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAO,MAAM,KAAK,QAAQ;QAC1B,OAAO,SAAS,KAAK,QAAQ;QAC7B,OAAO,KAAK,KAAK,QAAQ;QAEzB,OAAO,SAAS,CAAA;IAClB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,SAAS;QACT,KAAK;QACL,MAAM;QACN,UAAU;QACV,MAAM;QACN,SAAS;QACT,KAAK;QACL,GAAG,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC,CAAA;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * `@nifrajs/agent-app` - a presentation-safe browser SDK for Nifra agent hosts.
+ *
+ * This package depends only on `@nifrajs/agent-protocol`. It has no backend, provider, storage, model,
+ * or UI-framework dependency, so it can be bundled into browser-facing code without dragging a private
+ * engine or payload content across the boundary. Everything it surfaces upward is a content-free view
+ * model: identifiers, lifecycle statuses, counters, and opaque references.
+ */
+export { AGENT_APP_FEATURES, AgentAppClient, type AgentAppClientOptions, AgentAppError, type BoundaryDecisionResult, type BoundaryItemView, type CreateSessionInput, type PendingApprovalView, type ReplayEntryView, type ReplayResult, type ResolveHandoffInput, type ResumeInput, } from "./client.js";
+export { type AgentTransport, AgentTransportError, type AgentTransportRequest, type AuthProvider, type CommandOutcome, HttpAgentTransport, type HttpAgentTransportOptions, parseEventStream, } from "./transport.js";
+export { type AgentEventView, type ApprovalRequiredView, type ApprovalResolvedView, type AssistantChunkView, type BoundaryStateView, boundaryCommands, boundaryIsStale, type EvalComparisonView, type EvidenceTimelineView, type ExtensionReloadedView, type FaultInjectionView, type HandoffView, type MemoryCompactedView, OrderedEventBuffer, type RegistryCapabilityView, type RepairRequiredView, type RunStudioNodeState, type RunStudioNodeView, type RunStudioView, type RunView, type SessionFailedView, type SessionLifecycleView, type SessionStoppedView, type SessionView, type ToolCompletedView, type ToolDeltaView, type ToolStartedView, type TurnStartedView, toEvalComparisonView, toEventView, toEvidenceTimelineView, toFaultInjectionViews, toHandoffView, toRegistryCapabilityView, toRunStudioView, toRunView, toSessionView, type VerificationCompletedView, virtualizeEvidenceRows, } from "./view-models.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,KAAK,qBAAqB,EAC1B,aAAa,EACb,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAA;AACpB,OAAO,EACL,KAAK,cAAc,EACnB,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,kBAAkB,EAClB,KAAK,yBAAyB,EAC9B,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,gBAAgB,EAChB,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,kBAAkB,EAClB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,OAAO,EACZ,KAAK,iBAAiB,EACtB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAChB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,oBAAoB,EACpB,WAAW,EACX,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,eAAe,EACf,SAAS,EACT,aAAa,EACb,KAAK,yBAAyB,EAC9B,sBAAsB,GACvB,MAAM,kBAAkB,CAAA"}

package/dist/index.js

@@ -0,0 +1,12 @@
+/**
+ * `@nifrajs/agent-app` - a presentation-safe browser SDK for Nifra agent hosts.
+ *
+ * This package depends only on `@nifrajs/agent-protocol`. It has no backend, provider, storage, model,
+ * or UI-framework dependency, so it can be bundled into browser-facing code without dragging a private
+ * engine or payload content across the boundary. Everything it surfaces upward is a content-free view
+ * model: identifiers, lifecycle statuses, counters, and opaque references.
+ */
+export { AGENT_APP_FEATURES, AgentAppClient, AgentAppError, } from "./client.js";
+export { AgentTransportError, HttpAgentTransport, parseEventStream, } from "./transport.js";
+export { boundaryCommands, boundaryIsStale, OrderedEventBuffer, toEvalComparisonView, toEventView, toEvidenceTimelineView, toFaultInjectionViews, toHandoffView, toRegistryCapabilityView, toRunStudioView, toRunView, toSessionView, virtualizeEvidenceRows, } from "./view-models.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,kBAAkB,EAClB,cAAc,EAEd,aAAa,GASd,MAAM,aAAa,CAAA;AACpB,OAAO,EAEL,mBAAmB,EAInB,kBAAkB,EAElB,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAML,gBAAgB,EAChB,eAAe,EAOf,kBAAkB,EAelB,oBAAoB,EACpB,WAAW,EACX,sBAAsB,EACtB,qBAAqB,EACrB,aAAa,EACb,wBAAwB,EACxB,eAAe,EACf,SAAS,EACT,aAAa,EAEb,sBAAsB,GACvB,MAAM,kBAAkB,CAAA"}