@op0ai/sdk 0.3.1 → 0.4.0

package/dist/guards.d.ts

@@ -1,61 +1 @@
-export type GuardEvent = {
-    cord: string;
-    tool?: string;
-    scope?: string;
-    input: unknown;
-};
-export type WideEvent = {
-    ts: string;
-    runId: string;
-    tenantId: string;
-    cordId: string;
-    kind: "turn" | "step" | "model" | "tool" | "eval";
-    name: string;
-    durationMs: number;
-    ok: boolean;
-    scope?: string;
-    error?: {
-        code: string;
-        why: string;
-    };
-    attrs?: Record<string, unknown>;
-};
-export type AuditEntry = {
-    seq: number;
-    ts: string;
-    actor: string;
-    action: string;
-    scopeId: string;
-    payloadHash: string;
-    prevHash: string;
-    hash: string;
-};
-export type Guard = {
-    name: string;
-    /** Gate hook: deny by throwing (deepsec scope check), or instrument by side-effect. */
-    onCall?: (ev: GuardEvent) => void | Promise<void>;
-    /** Output transform applied before persist/export (deepsec redaction). */
-    redact?: <T>(value: T) => T;
-    /** Wide-event sink (deepeval instrumentation). */
-    onEvent?: (e: WideEvent) => void;
-};
-export type AuditChain = {
-    entries: AuditEntry[];
-    append(e: {
-        actor: string;
-        action: string;
-        scopeId: string;
-        payload: unknown;
-    }): AuditEntry;
-};
-export declare const makeAuditChain: () => AuditChain;
-/** Re-derive every hash; any insert/edit/delete breaks the chain → returns false. (The S7 red test.) */
-export declare const verifyChain: (entries: AuditEntry[]) => boolean;
-/** deepsec — scope gate + redaction (ADR-10). The runtime also drives an audit chain tagged actor="deepsec". */
-export declare const deepsec: (opts?: {
-    allow?: string[];
-    secrets?: RegExp[];
-}) => Guard;
-/** deepeval — instruments every run (ADR-24). Collects wide-events; prod forwards to evlog (OTLP + PostHog). */
-export declare const deepeval: (sink?: WideEvent[]) => Guard;
-//# sourceMappingURL=guards.d.ts.map
+export * from "./types/guards.js";

package/dist/guards.js

@@ -1,88 +1 @@
-// guards.ts — the system-cord guards, made REAL for H4 (no longer H0 no-op stubs).
-//
-//  • deepsec (ADR-10, the security harness): (1) scope check at the gate — deny a run whose scope is off the
-//    allow-list; (2) redaction — scrub secrets/PII from the output BEFORE it is persisted to the vault or
-//    exported; (3) a tamper-evident, hash-chained audit (evlog AuditEntry shape, ADR-12).
-//  • deepeval (ADR-24, the quality harness): instruments every run — emits evlog wide-events (one fat event
-//    per unit of work). In prod the worker forwards these to OTLP + PostHog (companion 23 evlog §3).
-//
-// Both are plain functions returning a Guard the runtime (index.ts) drives. Pure TS; no deps beyond hash.ts.
-import { hashHex } from "./hash.js";
-const entryHash = (e) => hashHex([e.seq, e.ts, e.actor, e.action, e.scopeId, e.payloadHash, e.prevHash].join("|"));
-export const makeAuditChain = () => {
-    const entries = [];
-    return {
-        entries,
-        append({ actor, action, scopeId, payload }) {
-            const seq = entries.length;
-            const ts = new Date().toISOString();
-            const prevHash = seq === 0 ? "GENESIS" : entries[seq - 1]?.hash ?? "GENESIS";
-            const payloadHash = hashHex(JSON.stringify(payload ?? null));
-            const base = { seq, ts, actor, action, scopeId, payloadHash, prevHash };
-            const entry = { ...base, hash: entryHash(base) };
-            entries.push(entry);
-            return entry;
-        },
-    };
-};
-/** Re-derive every hash; any insert/edit/delete breaks the chain → returns false. (The S7 red test.) */
-export const verifyChain = (entries) => {
-    for (let i = 0; i < entries.length; i++) {
-        const e = entries[i];
-        if (!e)
-            return false;
-        const prevHash = i === 0 ? "GENESIS" : entries[i - 1]?.hash ?? "GENESIS";
-        if (e.prevHash !== prevHash)
-            return false;
-        const { hash, ...base } = e;
-        if (hash !== entryHash(base))
-            return false;
-    }
-    return true;
-};
-// ---- redaction ----
-// Provider token shapes + key material. Loose-but-real; prod (deepsec lane) uses the full secret-scanner set.
-const DEFAULT_SECRET_RES = [
-    /gh[poursa]_[A-Za-z0-9]{20,}/g, // GitHub PAT / oauth / app tokens
-    /github_pat_[A-Za-z0-9_]{20,}/g, // fine-grained PAT
-    /xox[baprs]-[A-Za-z0-9-]{10,}/g, // Slack
-    /AKIA[0-9A-Z]{16}/g, // AWS access key id
-    /sk-[A-Za-z0-9]{20,}/g, // OpenAI-style secret keys
-    /-----BEGIN (?:[A-Z ]+ )?PRIVATE KEY-----/g, // PEM private keys
-];
-const redactValue = (v, res) => {
-    if (typeof v === "string") {
-        let s = v;
-        for (const re of res)
-            s = s.replace(re, "[redacted]");
-        return s;
-    }
-    if (Array.isArray(v))
-        return v.map((x) => redactValue(x, res));
-    if (v && typeof v === "object") {
-        const o = {};
-        for (const k of Object.keys(v))
-            o[k] = redactValue(v[k], res);
-        return o;
-    }
-    return v;
-};
-/** deepsec — scope gate + redaction (ADR-10). The runtime also drives an audit chain tagged actor="deepsec". */
-export const deepsec = (opts = {}) => {
-    const res = opts.secrets ?? DEFAULT_SECRET_RES;
-    return {
-        name: "deepsec",
-        onCall: ({ scope }) => {
-            if (opts.allow && scope !== undefined && !opts.allow.includes(scope)) {
-                throw new Error(`deepsec: scope "${scope}" not in allow-list [${opts.allow.join(", ")}]`);
-            }
-        },
-        redact: (value) => redactValue(value, res),
-    };
-};
-/** deepeval — instruments every run (ADR-24). Collects wide-events; prod forwards to evlog (OTLP + PostHog). */
-export const deepeval = (sink = []) => ({
-    name: "deepeval",
-    onEvent: (e) => { sink.push(e); },
-});
-//# sourceMappingURL=guards.js.map
+var a=t=>{let r=2166136261;for(let n=0;n<t.length;n++)r^=t.charCodeAt(n),r=Math.imul(r,16777619);return(r>>>0).toString(16).padStart(8,"0")};var g=t=>a([t.seq,t.ts,t.actor,t.action,t.scopeId,t.payloadHash,t.prevHash].join("|")),A=()=>{let t=[];return{entries:t,append({actor:r,action:n,scopeId:e,payload:o}){let s=t.length,p=new Date().toISOString(),u=s===0?"GENESIS":t[s-1]?.hash??"GENESIS",l=a(JSON.stringify(o??null)),c={seq:s,ts:p,actor:r,action:n,scopeId:e,payloadHash:l,prevHash:u},d={...c,hash:g(c)};return t.push(d),d}}},f=t=>{for(let r=0;r<t.length;r++){let n=t[r];if(!n)return!1;let e=r===0?"GENESIS":t[r-1]?.hash??"GENESIS";if(n.prevHash!==e)return!1;let{hash:o,...s}=n;if(o!==g(s))return!1}return!0},h=[/gh[poursa]_[A-Za-z0-9]{20,}/g,/github_pat_[A-Za-z0-9_]{20,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AKIA[0-9A-Z]{16}/g,/sk-[A-Za-z0-9]{20,}/g,/-----BEGIN (?:[A-Z ]+ )?PRIVATE KEY-----/g],i=(t,r)=>{if(typeof t=="string"){let n=t;for(let e of r)n=n.replace(e,"[redacted]");return n}if(Array.isArray(t))return t.map(n=>i(n,r));if(t&&typeof t=="object"){let n={};for(let e of Object.keys(t))n[e]=i(t[e],r);return n}return t},w=(t={})=>{let r=t.secrets??h;return{name:"deepsec",onCall:({scope:n})=>{if(t.allow&&n!==void 0&&!t.allow.includes(n))throw new Error(`deepsec: scope "${n}" not in allow-list [${t.allow.join(", ")}]`)},redact:n=>i(n,r)}},x=(t=[])=>({name:"deepeval",onEvent:r=>{t.push(r)}});export{x as deepeval,w as deepsec,A as makeAuditChain,f as verifyChain};

package/dist/hash.d.ts

@@ -1,6 +1 @@
-export declare const hashHex: (s: string) => string;
-/** A url-safe slug for vault keys (target → reports/<slug>/<runId>.json). */
-export declare const slug: (s: string) => string;
-/** A short, sortable-ish run id (timestamp + entropy). No node: deps. */
-export declare const newId: () => string;
-//# sourceMappingURL=hash.d.ts.map
+export * from "./types/hash.js";

package/dist/hash.js

@@ -1,18 +1 @@
-// hash.ts — a tiny, deterministic, dependency-free hash for the H-shim (content-addressing + the audit
-// chain). It is NOT cryptographic: production swaps in SHA-256 via Web Crypto (`crypto.subtle.digest`,
-// available in both Workers and Node ≥18) — that's async, so the chain/manifest become async there. For the
-// pure-Node verify path we want a sync, zero-dep hash so the whole runtime stays portable (Node AND a
-// Worker, no imports). FNV-1a (32-bit) is enough to make tamper-evidence + content-addressing demonstrable.
-export const hashHex = (s) => {
-    let h = 0x811c9dc5;
-    for (let i = 0; i < s.length; i++) {
-        h ^= s.charCodeAt(i);
-        h = Math.imul(h, 0x01000193);
-    }
-    return (h >>> 0).toString(16).padStart(8, "0");
-};
-/** A url-safe slug for vault keys (target → reports/<slug>/<runId>.json). */
-export const slug = (s) => s.trim().toLowerCase().replace(/^https?:\/\//, "").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "target";
-/** A short, sortable-ish run id (timestamp + entropy). No node: deps. */
-export const newId = () => Date.now().toString(36) + "-" + Math.random().toString(36).slice(2, 8);
-//# sourceMappingURL=hash.js.map
+var n=t=>{let r=2166136261;for(let e=0;e<t.length;e++)r^=t.charCodeAt(e),r=Math.imul(r,16777619);return(r>>>0).toString(16).padStart(8,"0")},o=t=>t.trim().toLowerCase().replace(/^https?:\/\//,"").replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,80)||"target",a=()=>Date.now().toString(36)+"-"+Math.random().toString(36).slice(2,8);export{n as hashHex,a as newId,o as slug};

package/dist/index.d.ts

@@ -1,121 +1 @@
-export * from "./hash.ts";
-export * from "./vault.ts";
-export * from "./guards.ts";
-export * from "./platform.ts";
-export * from "./agent.ts";
-export * from "./source.ts";
-export * from "./agui.ts";
-export * from "./tool.ts";
-export * from "./config.ts";
-export * from "./define.ts";
-export * from "./contract.ts";
-export * from "./evlog.ts";
-export * from "./events.ts";
-export * from "./usectx.ts";
-export * from "./distill.ts";
-export * from "./data.ts";
-import type { Vault } from "./vault.ts";
-import type { Resources, ResourceNeed } from "./platform.ts";
-import { type Guard, type WideEvent, type AuditEntry } from "./guards.ts";
-/** A sub-cord: an encapsulated unit composed into a parent. `any` generics (not `unknown`) so a typed
- *  `subcords` record — { scan: Subagent<string,Facts>, score: Subagent<Facts,EvalResult>, ... } — is assignable
- *  to Record<string, Subagent> (Subagent<X,Y> is NOT assignable to Subagent<unknown,unknown> — invariant `run`
- *  param — but IS assignable to Subagent<any,any>). Same heterogeneous-registry seam as data.ts's AnyFn. */
-export type Subagent<I = any, O = any> = {
-    id: string;
-    mount: "local" | "registry";
-    run: (input: I) => Promise<O>;
-};
-/** Mount an OWNED sub-cord in-process (deterministic trunk). */
-export declare function use<I, O>(sc: {
-    id: string;
-    run: (input: I) => Promise<O>;
-}): Subagent<I, O>;
-/** Mount a THIRD-PARTY/registry cord over MCP (the trust boundary; an executor toolkit). */
-export declare function useRemote<I, O>(sc: {
-    id: string;
-    call: (input: I) => Promise<O>;
-}): Subagent<I, O>;
-export type Expose = {
-    codemode?: boolean;
-    mcp?: string;
-    cli?: boolean;
-    openapi?: boolean;
-};
-export type AgentDef<Input, Output> = {
-    id: string;
-    kind?: "agent-ful" | "agent-less";
-    inference?: "managed" | "byo";
-    /** The scope this cord's run requests — checked by deepsec against its allow-list (H4). */
-    scope?: string;
-    expose?: Expose;
-    guards?: Guard[];
-    subcords?: Record<string, Subagent>;
-    /** Durable resources this cord requires; the host MUST bind them or the run fails fast (validated post-gate). */
-    needs?: ResourceNeed[];
-    /** The deterministic trunk: compose sub-cords (ctx) + use the host-bound resources (res). */
-    run: (input: Input, ctx: Record<string, (input: any) => Promise<any>>, res: Resources) => Promise<Output>;
-};
-export type RunBudget = {
-    cap: number;
-    used: number;
-    depth: number;
-    maxDepth: number;
-};
-export type RunOpts = {
-    tenantId?: string;
-    scope?: string;
-    vault?: Vault;
-    resources?: Resources;
-    budget?: Partial<Pick<RunBudget, "cap" | "maxDepth">>;
-    onEvent?: (e: WideEvent) => void;
-};
-export type RunResult<O> = {
-    output: O;
-    runId: string;
-    artifact?: {
-        key: string;
-        version: string;
-        hash: string;
-    };
-    audit: AuditEntry[];
-    events: WideEvent[];
-    budget: RunBudget;
-};
-export type AgentManifest = {
-    id: string;
-    version: string;
-    kind: "agent-ful" | "agent-less";
-    inference: "managed" | "byo";
-    scope?: string;
-    expose: Expose;
-    subcords: string[];
-    guards: string[];
-    needs: ResourceNeed[];
-};
-export type Agent<Input, Output> = {
-    id: string;
-    expose: Expose;
-    manifest: AgentManifest;
-    run: (input: Input, opts?: RunOpts) => Promise<Output>;
-    runFull: (input: Input, opts?: RunOpts) => Promise<RunResult<Output>>;
-};
-export declare function defineAgent<Input, Output>(def: AgentDef<Input, Output>): Agent<Input, Output>;
-/** /.well-known/op0.json (ADR-18) generated from the cord's `expose`. Host is filled at deploy. */
-export declare const wellKnown: (m: AgentManifest, host?: string) => {
-    auth?: {
-        type: string;
-        scopes: string[];
-    };
-    skills: string;
-    cli?: string;
-    openapi?: string;
-    mcp: string[];
-    docs: string;
-};
-/** Content-address the manifest for skillkit publish/fork lineage (signed → forkOf{atCommit} later, ADR-22). */
-export declare const signManifest: (m: AgentManifest) => {
-    manifest: AgentManifest;
-    hash: string;
-};
-//# sourceMappingURL=index.d.ts.map
+export * from "./types/index.js";

package/dist/index.js

@@ -1,171 +1,14 @@
-// @op0ai/sdk — the op0 SDK. An agent (a cord) is a governed function: a charter + a RunSpec
-// (goal, stop rules, verifier) + typed tools, behind typed ports. Pure TS, exactly one dep (zod);
-// runs in plain Node and inside a Worker; the core imports no vendor SDK (dep-lint enforced).
-//
-// THE CONCEPT MAP (one export group per concept — each has one page in /docs):
-//   the unit       config.ts + define.ts   defineAgentConfig / defineTool — an AGENT (fleets compose agents)
-//   the ports      platform.ts + vault.ts  Kv · Inference · Harness · Sandbox · Vault — swap any
-//   the contract   contract.ts             POST /ask: q | messages[] | stream | mode:"agui" — the
-//                                          pure laws every op0-hosted agent speaks
-//   events         agui.ts + evlog.ts      the typed AgentEvent timeline (UI) + wide events (ops),
-//                  + events.ts             joined on runId; the ask-ledger event defined once
-//   source         source.ts               the typed, versioned store your agent owns (write side)
-//   ctx            usectx.ts               context acquisition + connections (read side) — reach
-//                                          arrives via grants, never ambient
-//   guards         guards.ts + hash.ts     scope gate, redaction, the hash-chained audit
-//   composition    below                   use/useRemote sub-agents under one shared RunBudget
-//   sessions       session.ts + distill.ts runs → sessions → distilled skills (the flywheel)
-//   data           data.ts                 typed query/mutation over an agent-owned store
-export * from "./hash.js";
-export * from "./vault.js";
-export * from "./guards.js";
-export * from "./platform.js";
-export * from "./agent.js";
-export * from "./source.js";
-export * from "./agui.js";
-export * from "./tool.js";
-export * from "./config.js";
-export * from "./define.js";
-// the chat contract's pure laws (mirrored in the composed host — THE MIRROR LAW lives in contract.ts)
-export * from "./contract.js";
-// vendor adapters (gatewayModel, toAiTools, runCordChat) live in the cord-ai workspace lib — core stays vendor-free
-export * from "./evlog.js";
-export * from "./events.js";
-export * from "./usectx.js";
-export * from "./distill.js";
-export * from "./data.js";
-import { hashHex, slug, newId } from "./hash.js";
-import { makeAuditChain } from "./guards.js";
-/** Mount an OWNED sub-cord in-process (deterministic trunk). */
-export function use(sc) {
-    return { id: sc.id, mount: "local", run: sc.run };
-}
-/** Mount a THIRD-PARTY/registry cord over MCP (the trust boundary; an executor toolkit). */
-export function useRemote(sc) {
-    return { id: sc.id, mount: "registry", run: sc.call };
-}
-const now = () => (typeof performance !== "undefined" ? performance.now() : Date.now());
-const errOf = (e) => ({ code: "cord.run", why: e instanceof Error ? e.message : String(e) });
-export function defineAgent(def) {
-    const guards = def.guards ?? [];
-    const expose = def.expose ?? { codemode: true };
-    const manifest = {
-        id: def.id, version: "0.1.0",
-        kind: def.kind ?? "agent-ful", inference: def.inference ?? "managed",
-        ...(def.scope !== undefined ? { scope: def.scope } : {}), expose,
-        subcords: Object.values(def.subcords ?? {}).map((s) => s.id),
-        guards: guards.map((g) => g.name),
-        needs: def.needs ?? [],
-    };
-    const runFull = async (input, opts = {}) => {
-        const runId = newId();
-        const tenantId = opts.tenantId ?? "local";
-        const scope = opts.scope ?? def.scope;
-        const budget = { cap: opts.budget?.cap ?? 64, used: 0, depth: 0, maxDepth: opts.budget?.maxDepth ?? 8 };
-        const events = [];
-        const chain = makeAuditChain();
-        const emit = (e) => { events.push(e); opts.onEvent?.(e); for (const g of guards)
-            g.onEvent?.(e); };
-        const span = (kind, name, ms, ok, error, attrs) => ({
-            ts: new Date().toISOString(), runId, tenantId, cordId: def.id, kind, name, durationMs: Math.round(ms), ok,
-            ...(scope !== undefined ? { scope } : {}),
-            ...(error !== undefined ? { error } : {}),
-            ...(attrs !== undefined ? { attrs } : {}),
-        });
-        // H4 — gate: deepsec authorizes the run scope (throws if off-allow-list), then audit the authorization.
-        // Guards run in the author-declared order (def.guards) and any may throw to refuse the run — sequential
-        // by design (a later guard should see the run as already vetted by earlier ones, not race them).
-        const gev = { cord: def.id, ...(scope !== undefined ? { scope } : {}), input };
-        for (const g of guards) {
-            // oxlint-disable-next-line no-await-in-loop
-            await g.onCall?.(gev);
-        }
-        chain.append({ actor: "deepsec", action: "run.authorize", scopeId: scope ?? "", payload: { cord: def.id, tenantId } });
-        // Resolve host-bound resources (the adapter model). opts.vault is a shorthand for resources.vault. A cord
-        // that declares `needs` fails fast here if the host bound none — a missing binding is a deploy bug, not a
-        // silent no-op. (Trust boundary: validate, never simplify away — ponytail.)
-        const res = { ...opts.resources };
-        if (opts.vault && !res.vault)
-            res.vault = opts.vault;
-        for (const need of def.needs ?? []) {
-            if (!res[need])
-                throw new Error(`cord ${def.id}: required resource "${need}" not bound by the host`);
-        }
-        // H5 — wrap each sub-cord with the cycle-guard (budget + maxDepth) and a per-step wide-event.
-        const ctx = {};
-        for (const key of Object.keys(def.subcords ?? {})) {
-            const sc = def.subcords[key];
-            if (!sc)
-                continue;
-            ctx[key] = async (i) => {
-                if (budget.depth >= budget.maxDepth)
-                    throw new Error(`cord: cycle-guard tripped (maxDepth ${budget.maxDepth}) at ${sc.id}`);
-                if (budget.used + 1 > budget.cap)
-                    throw new Error(`cord: run budget exhausted (cap ${budget.cap}) at ${sc.id}`);
-                budget.used += 1;
-                budget.depth += 1;
-                const s0 = now();
-                try {
-                    const out = await sc.run(i);
-                    emit(span("step", sc.id, now() - s0, true));
-                    return out;
-                }
-                catch (e) {
-                    emit(span("step", sc.id, now() - s0, false, errOf(e)));
-                    throw e;
-                }
-                finally {
-                    budget.depth -= 1;
-                }
-            };
-        }
-        // the deterministic trunk
-        const t0 = now();
-        let output;
-        try {
-            output = await def.run(input, ctx, res);
-            emit(span("turn", def.id, now() - t0, true, undefined, { used: budget.used }));
-        }
-        catch (e) {
-            emit(span("turn", def.id, now() - t0, false, errOf(e)));
-            chain.append({ actor: "deepsec", action: "run.error", scopeId: scope ?? "", payload: errOf(e) });
-            throw e;
-        }
-        // H4 — redaction: scrub secrets/PII before the output is persisted or exported.
-        let safe = output;
-        for (const g of guards)
-            if (g.redact)
-                safe = g.redact(safe);
-        // H3 — vault write: every assess leaves a versioned deliverable.
-        let artifact;
-        if (res.vault) {
-            // ponytail: key by cord id + runId. Was keyed off input.target (deepeval-specific leaking into the
-            // generic core) — keying by the cord is correct for every cord.
-            const key = `reports/${slug(def.id)}/${runId}.json`;
-            artifact = await res.vault.put(key, JSON.stringify(safe, null, 2), { runId, tenantId, cord: def.id });
-            chain.append({ actor: "deepsec", action: "artifact.write", scopeId: scope ?? "", payload: { key: artifact.key, version: artifact.version, hash: artifact.hash } });
-        }
-        chain.append({ actor: "deepsec", action: "run.settle", scopeId: scope ?? "", payload: { runId, ok: true, used: budget.used } });
-        return { output: safe, runId, ...(artifact !== undefined ? { artifact } : {}), audit: chain.entries, events, budget };
-    };
-    return {
-        id: def.id,
-        expose,
-        manifest,
-        run: async (input, opts) => (await runFull(input, opts)).output,
-        runFull,
-    };
-}
-// ---- H5: publish/fork — the forkable manifest + the generated discovery endpoint ----
-/** /.well-known/op0.json (ADR-18) generated from the cord's `expose`. Host is filled at deploy. */
-export const wellKnown = (m, host = "https://host") => ({
-    mcp: m.expose.mcp ? [`${host}${m.expose.mcp}`] : [],
-    docs: `${host}/llms.txt`,
-    ...(m.expose.openapi ? { openapi: `${host}/openapi.json` } : {}),
-    ...(m.expose.cli ? { cli: `${host}/cli` } : {}),
-    skills: "/.well-known/agent-skills/",
-    ...(m.scope ? { auth: { type: "oauth2", scopes: [m.scope] } } : {}),
-});
-/** Content-address the manifest for skillkit publish/fork lineage (signed → forkOf{atCommit} later, ADR-22). */
-export const signManifest = (m) => ({ manifest: m, hash: hashHex(JSON.stringify(m)) });
-//# sourceMappingURL=index.js.map
+var h=e=>{let t=2166136261;for(let n=0;n<e.length;n++)t^=e.charCodeAt(n),t=Math.imul(t,16777619);return(t>>>0).toString(16).padStart(8,"0")},H=e=>e.trim().toLowerCase().replace(/^https?:\/\//,"").replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,80)||"target",E=()=>Date.now().toString(36)+"-"+Math.random().toString(36).slice(2,8);var fe=()=>{let e=new Map;return{store:e,async put(t,n,r){let o=(e.get(t)?.version??0)+1;return e.set(t,{body:n,version:o,meta:r}),{key:t,version:String(o),hash:h(n)}},async get(t){return e.get(t)?.body??null},async list(t=""){return[...e.keys()].filter(n=>n.startsWith(t))}}};var W=e=>h([e.seq,e.ts,e.actor,e.action,e.scopeId,e.payloadHash,e.prevHash].join("|")),I=()=>{let e=[];return{entries:e,append({actor:t,action:n,scopeId:r,payload:o}){let s=e.length,i=new Date().toISOString(),u=s===0?"GENESIS":e[s-1]?.hash??"GENESIS",a=h(JSON.stringify(o??null)),d={seq:s,ts:i,actor:t,action:n,scopeId:r,payloadHash:a,prevHash:u},c={...d,hash:W(d)};return e.push(c),c}}},V=e=>{for(let t=0;t<e.length;t++){let n=e[t];if(!n)return!1;let r=t===0?"GENESIS":e[t-1]?.hash??"GENESIS";if(n.prevHash!==r)return!1;let{hash:o,...s}=n;if(o!==W(s))return!1}return!0},X=[/gh[poursa]_[A-Za-z0-9]{20,}/g,/github_pat_[A-Za-z0-9_]{20,}/g,/xox[baprs]-[A-Za-z0-9-]{10,}/g,/AKIA[0-9A-Z]{16}/g,/sk-[A-Za-z0-9]{20,}/g,/-----BEGIN (?:[A-Z ]+ )?PRIVATE KEY-----/g],D=(e,t)=>{if(typeof e=="string"){let n=e;for(let r of t)n=n.replace(r,"[redacted]");return n}if(Array.isArray(e))return e.map(n=>D(n,t));if(e&&typeof e=="object"){let n={};for(let r of Object.keys(e))n[r]=D(e[r],t);return n}return e},we=(e={})=>{let t=e.secrets??X;return{name:"deepsec",onCall:({scope:n})=>{if(e.allow&&n!==void 0&&!e.allow.includes(n))throw new Error(`deepsec: scope "${n}" not in allow-list [${e.allow.join(", ")}]`)},redact:n=>D(n,t)}},be=(e=[])=>({name:"deepeval",onEvent:t=>{e.push(t)}});var ve=()=>{let e=new Map;return{async get(t){return e.get(t)??null},async put(t,n){e.set(t,n)},async incr(t,n=1){let r=Number(e.get(t)??0)+n;return e.set(t,String(r)),r}}};var Se=e=>({async run({instructions:t,input:n,tools:r,maxSteps:o=8}){let s=[{role:"system",content:t},{role:"user",content:n}],i=new Map(r.map(u=>[u.name,u]));for(let u=0;u<o;u++){let a=await e.generate({messages:s,tools:r});if(a.toolCalls&&a.toolCalls.length>0){s.push({role:"assistant",content:a.text??"",toolCalls:a.toolCalls});for(let d of a.toolCalls){let c=i.get(d.name),l=c?await c.run(d.args):{error:`unknown tool: ${d.name}`};s.push({role:"tool",content:JSON.stringify(l),toolCallId:d.id})}continue}return{output:a.text??"",steps:u+1}}throw new Error(`harness: maxSteps ${o} exhausted without a final answer`)}}),Ee=e=>{let t=0;return{async generate(){return e[t++]??{text:"(script exhausted)"}}}},Re=(e,t)=>{let n=[];return e.kv&&n.push({name:"kv_incr",description:"Increment a durable counter by key. args: { key: string, by?: number }",parameters:{type:"object",properties:{key:{type:"string"},by:{type:"number"}},required:["key"]},run:async r=>(t?.("kv_incr",r),{count:await e.kv.incr(String(r.key),typeof r.by=="number"?r.by:1)})}),e.vault&&n.push({name:"vault_put",description:"Persist a deliverable. args: { key: string, body: string }",parameters:{type:"object",properties:{key:{type:"string"},body:{type:"string"}},required:["key","body"]},run:async r=>(t?.("vault_put",r),await e.vault.put(String(r.key),String(r.body)))}),n};var G="pending/";function Te(e){let{store:t,committer:n}=e,r=s=>e.prefix?`${e.prefix}/${s}`:s,o=r(G);return{async read(s){let i=await t.get(r(s));return i?await i.text():null},async stage(s,i){await t.put(r(G+s),i)},async flush(){let s=await t.list({prefix:o}),u=(await Promise.all(s.objects.map(async d=>{let c=await t.get(d.key);if(!c)return null;let l=d.key.slice(o.length),p=await c.text();return await t.put(r(l),p),await t.delete(d.key),{path:l,text:p}}))).filter(d=>d!==null),a=n&&u.length>0?await n.commit(u):"skipped";return{committed:u.length,paths:u.map(d=>d.path),external:a}}}}function Y(e){let t=new TextEncoder().encode(e),n="";for(let r of t)n+=String.fromCharCode(r);return btoa(n)}function Ie(e){let t=e.branch??"main",n=e.base??"cord",r=e.fetch??fetch,o=`https://api.github.com/repos/${e.owner}/${e.repo}/contents`,s={authorization:`Bearer ${e.token}`,accept:"application/vnd.github+json","user-agent":"op0-cord","content-type":"application/json"};return{async commit(i){let u=0;for(let a of i){let d=`${o}/${n}/${a.path}`,c,l=await r(`${d}?ref=${encodeURIComponent(t)}`,{headers:s});l.ok&&(c=(await l.json()).sha),(await r(d,{method:"PUT",headers:s,body:JSON.stringify({message:`cord: commit ${a.path}`,content:Y(a.text),branch:t,...c?{sha:c}:{}})})).ok&&(u+=1)}return{committed:u,total:i.length,target:`${e.owner}/${e.repo}@${t}`}}}}var w=()=>Date.now();function Oe(e,t){let n=r=>t(r);return{runId:e,started:r=>n({type:"RUN_STARTED",runId:e,threadId:r,ts:w()}),text:r=>n({type:"TEXT_MESSAGE_CONTENT",runId:e,delta:r,ts:w()}),toolStart:(r,o,s)=>n({type:"TOOL_CALL_START",runId:e,toolCallId:r,name:o,args:s,ts:w()}),toolResult:r=>n({type:"TOOL_CALL_RESULT",runId:e,...r,ts:w()}),sourceStaged:r=>n({type:"SOURCE_STAGED",runId:e,path:r,ts:w()}),sourceCommitted:(r,o)=>n({type:"SOURCE_COMMITTED",runId:e,paths:r,external:o,ts:w()}),stateDelta:r=>n({type:"STATE_DELTA",runId:e,patch:r,ts:w()}),finished:()=>n({type:"RUN_FINISHED",runId:e,ts:w()}),errored:r=>n({type:"RUN_ERROR",runId:e,error:r,ts:w()})}}function De(e){return{name:e.name,description:e.description,inputSchema:e.input,execute:e.execute}}function Pe(e){return Object.values(e).map(t=>({name:t.name,description:t.description}))}function _e(e){return e}function Ne(e){return(Array.isArray(e)?e:Object.values(e)).map(n=>{let r=n.inputSchema;if(typeof r.toJSONSchema!="function")throw new Error(`tool "${n.name}": inputSchema has no toJSONSchema() \u2014 zod 4.4+ schemas required`);return{type:"function",function:{name:n.name,description:n.description,parameters:r.toJSONSchema()}}})}var P=(e,t)=>console.log(JSON.stringify({evlog:`cord_events.${e}`,error:t instanceof Error?t.message:String(t)})),$=(e,t=200)=>new Response(JSON.stringify(e),{status:t,headers:{"content-type":"application/json"}});function Fe(e){let t=!1;try{e.sql`CREATE TABLE IF NOT EXISTS cord_events (seq INTEGER PRIMARY KEY AUTOINCREMENT, run TEXT, json TEXT)`,t=!0}catch(n){P("init",n)}return{sink:n=>{if(t)try{e.sql`INSERT INTO cord_events (run, json) VALUES (${n.runId}, ${JSON.stringify(n)})`,e.broadcast(JSON.stringify({cordEvent:n}))}catch(r){P("sink",r)}},replay:()=>{if(!t)return[];try{return e.sql`SELECT json FROM cord_events ORDER BY seq`.map(n=>JSON.parse(n.json))}catch(n){return P("replay",n),[]}}}}async function je(e,t){let n;try{n=await e.json()}catch{return $({error:"invalid json"},400)}let r=n.fn??"",o=n.args??{},s={"source.read":async a=>({path:a.path,content:t.source?await t.source.read(String(a.path)):null}),"source.edit":async a=>{if(!t.source)throw new Error("no source bound");return await t.source.stage(String(a.path),String(a.content)),await t.source.flush(),{staged:String(a.path),commitsInSeconds:0}},"kv.get":async a=>({value:t.kv?await t.kv.get(String(a.key)):null}),"kv.put":async a=>{if(!t.kv)throw new Error("no kv bound");return await t.kv.put(String(a.key),String(a.value)),{ok:!0}}},i=t.functions?.[r],u=s[r]??(i?a=>i(a,t):void 0);if(!u)return $({error:`unknown fn: ${r}`},404);try{return $(await u(o))}catch(a){return $({error:a instanceof Error?a.message:String(a)},500)}}var O={maxMessages:40,maxChars:96e3};function He(e,t){if(e==null)return{ok:!0,messages:[{role:"user",content:String(t??"hello")}]};if(!Array.isArray(e)||e.length===0)return{ok:!1,error:"messages: a non-empty array is required"};if(e.length>O.maxMessages)return{ok:!1,error:`messages: ${e.length} exceeds the ${O.maxMessages}-message cap \u2014 trim or summarize the thread client-side`};let n=0,r=[];for(let o of e){let s=o?.role,i=o?.content;if(s!=="user"&&s!=="assistant")return{ok:!1,error:`messages: role '${String(s)}' refused \u2014 only user/assistant (the charter is this cord's system prompt)`};if(typeof i!="string"||i.length===0)return{ok:!1,error:"messages: every content must be a non-empty string"};n+=i.length,r.push({role:s,content:i})}return n>O.maxChars?{ok:!1,error:`messages: the thread is ${n} chars (cap ${O.maxChars}) \u2014 summarize or trim client-side`}:r[r.length-1]?.role!=="user"?{ok:!1,error:"messages: the last message must be from the user"}:{ok:!0,messages:r}}function We(e){for(let t of e.split(`
+`)){if(!t.startsWith("data:"))continue;let n=t.slice(5).trim();if(!(!n||n==="[DONE]"))try{let r=JSON.parse(n)?.choices?.[0]?.delta;if(r?.tool_calls?.length)return"tool";if(typeof r?.content=="string"&&r.content.length)return"content"}catch{}}return"open"}function Ge(e,t){for(let n of t??[]){let r=n.index??0;e[r]??={id:"",name:"",args:""},n.id&&(e[r].id=n.id),typeof n.function?.name=="string"&&(e[r].name+=n.function.name),typeof n.function?.arguments=="string"&&(e[r].args+=n.function.arguments)}return e}function ee(e){return{indexes:[e.cordId],blobs:[e.runId,e.kind,e.name,e.tenantId,e.cordId,e.scope??"",e.error?.code??"",e.error?.why??""],doubles:[e.durationMs,e.ok?1:0]}}function te(e){return t=>{if(e)try{e.writeDataPoint(ee(t))}catch(n){console.log(JSON.stringify({evlog:"evlog.write",error:n instanceof Error?n.message:String(n)}))}}}var z=e=>h([e.seq,e.ts,e.actor,e.action,e.scopeId,e.payloadHash,e.prevHash].join("|")),M=(e,t)=>console.log(JSON.stringify({evlog:`cord_audit.${e}`,error:t instanceof Error?t.message:String(t)}));function ne(e){let t=!1;try{e.sql`CREATE TABLE IF NOT EXISTS cord_audit (seq INTEGER PRIMARY KEY, ts TEXT, actor TEXT, action TEXT, scopeId TEXT, payloadHash TEXT, prevHash TEXT, hash TEXT)`,t=!0}catch(n){M("init",n)}return{append({actor:n,action:r,scopeId:o,payload:s}){if(!t)return null;try{let u=e.sql`SELECT seq, hash FROM cord_audit ORDER BY seq DESC LIMIT 1`[0],a=u?Number(u.seq)+1:0,d=u?u.hash:"GENESIS",c=new Date().toISOString(),l=h(JSON.stringify(s??null)),p={seq:a,ts:c,actor:n,action:r,scopeId:o,payloadHash:l,prevHash:d},m=z(p);return e.sql`INSERT INTO cord_audit (seq, ts, actor, action, scopeId, payloadHash, prevHash, hash) VALUES (${a}, ${c}, ${n}, ${r}, ${o}, ${l}, ${d}, ${m})`,{...p,hash:m}}catch(i){return M("append",i),null}},list(){if(!t)return[];try{return e.sql`SELECT seq, ts, actor, action, scopeId, payloadHash, prevHash, hash FROM cord_audit ORDER BY seq`.map(r=>Object.assign(r,{seq:Number(r.seq)}))}catch(n){return M("list",n),[]}}}}function Je(e){let t="GENESIS";for(let n=0;n<e.length;n++){let r=e[n];if(!r)return{ok:!1,brokenAt:n};let{hash:o,...s}=r;if(s.prevHash!==t||z(s)!==o)return{ok:!1,brokenAt:n};t=o}return{ok:!0}}function Ke(e){let t=te(e.analytics),n=ne(e.host);return{runId:e.runId,audit:n,wide:r=>{let o={...r,runId:e.runId,cordId:e.cordId,tenantId:e.tenantId,ts:new Date().toISOString()};t(o),n.append({actor:e.cordId,action:`${o.kind}:${o.name}`,scopeId:e.runId,payload:{ok:o.ok,durationMs:o.durationMs,scope:o.scope,error:o.error,attrs:o.attrs}})}}}function Be(e){return{kind:"ask",at:e.at??new Date().toISOString(),...e}}function Qe(e){let t=e;return!!t&&t.kind==="ask"&&typeof t.cord=="string"&&t.cord.length>0&&typeof t.run=="string"&&t.run.length>0&&typeof t.ok=="boolean"}var Ve=e=>e.includes("--")?e.split("--")[0]??null:null;var y=e=>e.replace(/^\.?\/+/,"").replace(/\/+$/,"");function re(e){let t=new Map(Object.entries(e).map(([n,r])=>[y(n),r]));return{async exists(n){let r=y(n);if(t.has(r))return!0;for(let o of t.keys())if(o.startsWith(r+"/"))return!0;return!1},async read(n){return t.get(y(n))??null},async paths(){return[...t.keys()]}}}function se(e){let t=e.trim();return t.startsWith("evlog:")?"evlog":t.startsWith("r2:")?"r2":/\.zip($|\?)/i.test(t)?"zip":/^git@github\.com:|github\.com[/:]/.test(t)||/^[\w.-]+\/[\w.-]+$/.test(t)?"repo":/^https?:\/\//.test(t)?"url":/^(\.\/|\/|[a-zA-Z]:\\)/.test(t)||t==="."?"fs":"unknown"}var J=e=>{let t=e.trim().replace(/\.git$/,"").match(/(?:github\.com[/:])?([^/\s]+)\/([^/\s]+)\/?$/),n=t?.[1],r=t?.[2];if(!n||!r)throw new Error(`not a github repo target: ${e}`);return{owner:n,repo:r}},U=async(e,t)=>{let n=await fetch(e,{headers:t});if(n.status===403||n.status===429){let r=n.headers.get("x-ratelimit-remaining");throw new Error(`github ${n.status} for ${e}`+(r==="0"?" \u2014 rate limit exhausted; set a token to lift 60\u21925000/hr (or use executor)":" (forbidden/auth)"))}return{status:n.status,json:n.ok?await n.json():null}},oe=e=>async t=>{let{owner:n,repo:r}=J(t),o={"user-agent":"op0-cord-usectx",accept:"application/vnd.github+json",...e?{authorization:`Bearer ${e}`}:{}},s=await U(`https://api.github.com/repos/${n}/${r}`,o);if(s.status===404)throw new Error(`github repo not found: ${n}/${r}`);let i=s.json?.default_branch??"main",u=await U(`https://api.github.com/repos/${n}/${r}/git/trees/${i}?recursive=1`,o);if(u.status===404)throw new Error(`github tree not found: ${n}/${r}@${i}`);let a=u.json??{tree:[]};if(a.truncated===!0)throw new Error(`github tree truncated for ${n}/${r}@${i} \u2014 needs paged acquisition / a token (use executor)`);let d=new Set,c=new Set;for(let p of a.tree??[])(p.type==="tree"?c:d).add(y(p.path));let l=new Map;return{async exists(p){let m=y(p);return d.has(m)||c.has(m)},async paths(){return[...d]},async read(p){let m=y(p);if(!d.has(m))return null;if(l.has(m))return l.get(m)??null;let b=await fetch(`https://raw.githubusercontent.com/${n}/${r}/${i}/${m}`,{headers:{"user-agent":"op0-cord-usectx"}}).then(R=>R.ok?R.text():null);return l.set(m,b),b}}},ie=e=>async t=>{let{owner:n,repo:r}=J(t),s=(await e.reposGet({owner:n,repo:r})).default_branch??"main",i=await e.gitGetTree({owner:n,repo:r,tree_sha:s,recursive:"1"});if(i.truncated===!0)throw new Error(`github tree truncated for ${n}/${r}@${s} via executor \u2014 needs paged acquisition`);let u=new Set,a=new Set;for(let c of i.tree??[])(c.type==="tree"?a:u).add(y(c.path));let d=new Map;return{async exists(c){let l=y(c);return u.has(l)||a.has(l)},async paths(){return[...u]},async read(c){let l=y(c);if(!u.has(l))return null;if(d.has(l))return d.get(l)??null;let p=await e.reposGetContent({owner:n,repo:r,path:l,ref:s}),m=p?.content?p.encoding==="base64"?atob(p.content.replace(/\n/g,"")):p.content:null;return d.set(l,m),m}}},ae=async e=>{let t=await fetch(e,{headers:{"user-agent":"op0-cord-usectx"}});if(!t.ok)throw new Error(`usectx http ${t.status} for ${e}`);let n=await t.text(),r=y(new URL(e).pathname.split("/").pop()||"index");return re({[r||"index"]:n})},ue=async e=>{let{existsSync:t,readFileSync:n,readdirSync:r}=await import("node:fs"),{join:o,relative:s,sep:i}=await import("node:path"),u=/(^|\/)(\.git|node_modules)(\/|$)/;return{async exists(a){return t(o(e,a))},async read(a){try{return n(o(e,a),"utf8")}catch{return null}},async paths(){try{return r(e,{recursive:!0,withFileTypes:!0}).filter(a=>a.isFile()).map(a=>s(e,o(a.parentPath??a.path,a.name)).split(i).join("/")).filter(a=>!u.test(a))}catch{return[]}}}};function Ye(e={}){let t=e.executor?ie(e.executor):oe(e.github?.token),n=(r,o)=>{let s=e.resolvers?.[r];if(s)return s(o);switch(r){case"repo":return t(o);case"url":if(e.http)return ae(o);break;case"fs":if(e.fs)return ue(o);break;default:break}throw new Error(`usectx: no resolver bound for target kind "${r}" (${o})`)};return async r=>{let o=se(r);e.audit?.({op:"acquire",target:r,kind:o});let s=await n(o,r);return!e.redact&&!e.audit?s:{exists:s.exists.bind(s),paths:s.paths.bind(s),read:async i=>{e.audit?.({op:"read",target:r,kind:o,path:i});let u=await s.read(i);return e.redact?e.redact(u,{target:r,path:i}):u}}}}var K=[{id:"force-push",match:e=>e.kind==="tool_call"&&/\bgit\s+push\b.*--force(?!-with-lease)/.test(e.name),decision:"deny",why:"force-push without --force-with-lease"},{id:"rm-rf",match:e=>e.kind==="tool_call"&&/\brm\s+-rf\b/.test(e.name),decision:"approve",why:"destructive delete \u2014 needs human approval"},{id:"secret-exfil",match:e=>e.kind==="tool_call"&&/(curl|wget)\b.*(\.env|secret|token|key)/i.test(e.name),decision:"approve",why:"possible secret exfiltration"}],ce=(e,t)=>e==="owned"||e==="attached"||e==="streamed"&&t==="proxy",de=(e,t=K)=>{let n=[];for(let r of e.events)for(let o of t)o.match(r)&&n.push({event:r,rule:o,decision:o.decision,enforceable:ce(e.mode,r.vector)});return n},Z=(e,t=K)=>{let n=I();n.append({actor:"deepsec",action:"session.capture",scopeId:e.mode,payload:{harness:e.harness,mode:e.mode}});let r=e.events.map(s=>({ts:s.ts,runId:e.runId,tenantId:"op0",cordId:"@op0/coding-ops",kind:s.kind==="tool_call"||s.kind==="tool_result"?"tool":s.kind==="model"?"model":"step",name:s.name,durationMs:0,ok:!0,attrs:{vector:s.vector,...s.attrs??{}}})),o=de(e,t);for(let s of o)n.append({actor:"deepsec",action:s.enforceable?`intercept.${s.decision}`:"intercept.flag",scopeId:e.mode,payload:{rule:s.rule.id,why:s.rule.why,event:s.event.name,enforceable:s.enforceable}});return n.append({actor:"deepsec",action:"session.settle",scopeId:e.mode,payload:{runId:e.runId,events:r.length,interceptions:o.length}}),{runId:e.runId,harness:e.harness,mode:e.mode,events:r,audit:n.entries,interceptions:o}};var _=e=>new Date(e).toISOString();function ot(e,t,n=[]){let r=[],o=new Map;for(let s of t)if(s.type==="TOOL_CALL_START")o.set(s.toolCallId,{name:s.name,ts:s.ts});else if(s.type==="TOOL_CALL_RESULT"){let i=o.get(s.toolCallId);o.delete(s.toolCallId),r.push({ts:_(s.ts),runId:e,tenantId:"cord",cordId:"cord",kind:"tool",name:s.name,durationMs:i?s.ts-i.ts:0,ok:s.ok,...s.ok?{}:{error:{code:"tool_error",why:s.error??""}}})}else s.type==="SOURCE_COMMITTED"?r.push({ts:_(s.ts),runId:e,tenantId:"cord",cordId:"cord",kind:"tool",name:"source.commit",durationMs:0,ok:!0,attrs:{paths:s.paths}}):s.type==="RUN_ERROR"&&r.push({ts:_(s.ts),runId:e,tenantId:"cord",cordId:"cord",kind:"turn",name:"run",durationMs:0,ok:!1,error:{code:"run_error",why:s.error}});return{runId:e,source:"cord",events:r,audit:n}}function it(e){let t=Z(e);return{runId:t.runId,source:"agent",harness:t.harness,mode:t.mode,events:t.events,audit:t.audit,interceptions:t.interceptions}}function le(e,t,n={}){let r=[],o=[];for(let c of e.events)c.kind==="tool"&&!r.includes(c.name)&&r.push(c.name),c.ok||o.push(`${c.name}: ${c.error?.why??"failed"}`);let s=(e.interceptions??[]).filter(c=>c.decision!=="allow").map(c=>`${c.rule.id} (${c.decision})`),i=o.length===0&&s.every(c=>!c.includes("(deny)")),u=n.name??`${e.source}-${r[0]??"session"}-pattern`,a=e.events.filter(c=>c.kind==="tool").map(c=>c.name),d=[`# ${u}`,"",t?`> ${t}`:`> Distilled from a ${e.source} session (run ${e.runId}).`,"","## Observed pattern",a.length?a.map((c,l)=>`${l+1}. ${c}`).join(`
+`):"_(no tool steps)_","","## Tools",r.length?r.map(c=>`- ${c}`).join(`
+`):"_(none)_",o.length?`
+## Failures observed
+${o.map(c=>`- ${c}`).join(`
+`)}`:"",s.length?`
+## Governance flags
+${s.map(c=>`- ${c}`).join(`
+`)}`:""].filter(Boolean).join(`
+`);return{name:u,description:`${e.source} session pattern over ${r.length} tool(s): ${r.slice(0,4).join(", ")||"\u2014"}.`,whenToUse:t??`When repeating the ${r[0]??"this"} workflow distilled from run ${e.runId}.`,documentation:d,tags:["distilled",e.source,...n.tags??[]],evidence:{sourceRunId:e.runId,source:e.source,tools:r,steps:e.events.length,ok:i,failures:o,flagged:s,...t!==void 0?{note:t}:{}}}}async function at(e,t,n,r={}){let o=le(e,t,r),s=`You distill agent sessions into reusable skills. Given this evidence, write a crisp, reusable skill.
+Evidence: ${JSON.stringify(o.evidence)}
+Note: ${t??"(none)"}
+Return ONLY JSON: {"name","description","whenToUse","documentation"}.`;try{let u=((await n.generate({messages:[{role:"user",content:s}]})).text??"").match(/\{[\s\S]*\}/);if(u){let a=JSON.parse(u[0]);return{...o,...a}}}catch{}return o}function ut(e){return async t=>(e.push(t),{ok:!0,id:t.name})}var pe=e=>e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,80)||"skill";function ct(e,t){return async n=>{let r=`${t?.prefix??"skills"}/${pe(n.name)}`;return await e.put(`${r}.md`,n.documentation),await e.put(`${r}.json`,JSON.stringify(n,null,2)),{ok:!0,id:`${r}.md`}}}function pt(e){let t={},n={schema:e,indexes:t,index(r,o){return t[r]=o,n}};return n}function gt(e){return e}function mt(e){return{kind:"query",args:e.args,handler:e.handler}}function ft(e){return{kind:"mutation",args:e.args,handler:e.handler}}function ht(e){return{kind:"action",args:e.args,handler:e.handler}}var B=(e,t)=>`${e}:${t}`,Q=class{constructor(t,n){this.schema=t;this.functions=n;for(let r of Object.keys(t))this.tables.set(r,new Map)}schema;functions;tables=new Map;subs=new Map;version=0;table(t){let n=this.tables.get(t);if(!n)throw new Error(`data: unknown table "${t}"`);return n}readDb(t){let n=this;return{get(r,o){return t?.rows.add(B(r,o)),n.table(r).get(o)??null},query(r){t?.tables.add(r);let o=[],s={withIndex(i,u){let a={eq(d,c){return o.push({col:d,val:c}),a}};return u(a),s},collect(){return[...n.table(r).values()].filter(u=>o.every(a=>u[a.col]===a.val))},first(){return[...n.table(r).values()].find(i=>o.every(u=>i[u.col]===u.val))??null}};return s}}}writeDb(t){let n=this,r=this.readDb(null);return{get:r.get,query:r.query,insert(o,s){n.table(o);let i=typeof s.id=="string"?s.id:E(),u=n.schema[o];if(!u)throw new Error(`data: unknown table "${o}"`);return u.schema.parse({...s,id:i}),n.table(o).set(i,{...s,id:i,_v:n.version}),t.push({table:o,id:i}),i},patch(o,s,i){let u=n.table(o).get(s);if(!u)throw new Error(`data: patch missing ${o}:${s}`);let a={...u,...i,id:s,_v:n.version},d=n.schema[o];if(!d)throw new Error(`data: unknown table "${o}"`);d.schema.parse(a),n.table(o).set(s,a),t.push({table:o,id:s})},delete(o,s){n.table(o).delete(s)&&t.push({table:o,id:s})}}}fn(t,n){let r=this.functions[t];if(!r)throw new Error(`data: unknown function "${t}"`);if(r.kind!==n)throw new Error(`data: "${t}" is a ${r.kind}, not a ${n}`);return r}runQuery(t,n){let r=this.fn(t,"query"),o={rows:new Set,tables:new Set};return{result:r.handler(this.readDb(o),r.args.parse(n)),readSet:o,version:this.version}}runMutation(t,n){let r=this.fn(t,"mutation"),o=[];this.version+=1;let s=r.handler(this.writeDb(o),r.args.parse(n)),i=new Set(o.map(d=>d.table)),u=new Set(o.map(d=>B(d.table,d.id))),a=[];for(let d of this.subs.values()){if(!([...d.readSet.tables].some(p=>i.has(p))||[...d.readSet.rows].some(p=>u.has(p))))continue;let l=this.runQuery(d.name,d.args);d.readSet=l.readSet,a.push({subId:d.subId,connId:d.connId,name:d.name,args:d.args,result:l.result,version:this.version})}return{result:s,version:this.version,transitions:a}}async runAction(t,n,r){let o=this.fn(t,"action"),s={runQuery:(i,u)=>this.runQuery(i,u).result,runMutation:(i,u)=>this.runMutation(i,u).result,...r?.runCordTool!==void 0?{runCordTool:r.runCordTool}:{}};return o.handler(s,o.args.parse(n))}subscribe(t,n,r,o){let{result:s,readSet:i,version:u}=this.runQuery(r,o);return this.subs.set(t,{subId:t,connId:n,name:r,args:o,readSet:i}),{result:s,version:u}}unsubscribe(t){this.subs.delete(t)}unsubscribeConn(t){for(let[n,r]of this.subs)r.connId===t&&this.subs.delete(n)}snapshot(){let t={};for(let[n,r]of this.tables)t[n]=[...r.values()];return{version:this.version,tables:t}}restore(t){this.version=t.version;for(let[n,r]of Object.entries(t.tables)){let o=this.tables.get(n)??new Map;o.clear();for(let s of r)o.set(s.id,s);this.tables.set(n,o)}}};async function yt(e,t,n="rpc"){try{switch(t.op){case"query":return{ok:!0,...e.runQuery(t.name,t.args)};case"subscribe":return{ok:!0,...e.subscribe(t.subId,n,t.name,t.args)};case"unsubscribe":return e.unsubscribe(t.subId),{ok:!0};case"mutation":return{ok:!0,...e.runMutation(t.name,t.args)};case"action":return{ok:!0,result:await e.runAction(t.name,t.args)};default:return{ok:!1,error:"unknown op"}}}catch(r){return{ok:!1,error:r instanceof Error?r.message:String(r)}}}function vt(e){return{id:e.id,mount:"local",run:e.run}}function xt(e){return{id:e.id,mount:"registry",run:e.call}}var S=()=>typeof performance<"u"?performance.now():Date.now(),N=e=>({code:"cord.run",why:e instanceof Error?e.message:String(e)});function St(e){let t=e.guards??[],n=e.expose??{codemode:!0},r={id:e.id,version:"0.1.0",kind:e.kind??"agent-ful",inference:e.inference??"managed",...e.scope!==void 0?{scope:e.scope}:{},expose:n,subcords:Object.values(e.subcords??{}).map(s=>s.id),guards:t.map(s=>s.name),needs:e.needs??[]},o=async(s,i={})=>{let u=E(),a=i.tenantId??"local",d=i.scope??e.scope,c={cap:i.budget?.cap??64,used:0,depth:0,maxDepth:i.budget?.maxDepth??8},l=[],p=I(),m=g=>{l.push(g),i.onEvent?.(g);for(let f of t)f.onEvent?.(g)},b=(g,f,C,T,k,L)=>({ts:new Date().toISOString(),runId:u,tenantId:a,cordId:e.id,kind:g,name:f,durationMs:Math.round(C),ok:T,...d!==void 0?{scope:d}:{},...k!==void 0?{error:k}:{},...L!==void 0?{attrs:L}:{}}),R={cord:e.id,...d!==void 0?{scope:d}:{},input:s};for(let g of t)await g.onCall?.(R);p.append({actor:"deepsec",action:"run.authorize",scopeId:d??"",payload:{cord:e.id,tenantId:a}});let v={...i.resources};i.vault&&!v.vault&&(v.vault=i.vault);for(let g of e.needs??[])if(!v[g])throw new Error(`cord ${e.id}: required resource "${g}" not bound by the host`);let q={};for(let g of Object.keys(e.subcords??{})){let f=e.subcords[g];f&&(q[g]=async C=>{if(c.depth>=c.maxDepth)throw new Error(`cord: cycle-guard tripped (maxDepth ${c.maxDepth}) at ${f.id}`);if(c.used+1>c.cap)throw new Error(`cord: run budget exhausted (cap ${c.cap}) at ${f.id}`);c.used+=1,c.depth+=1;let T=S();try{let k=await f.run(C);return m(b("step",f.id,S()-T,!0)),k}catch(k){throw m(b("step",f.id,S()-T,!1,N(k))),k}finally{c.depth-=1}})}let F=S(),j;try{j=await e.run(s,q,v),m(b("turn",e.id,S()-F,!0,void 0,{used:c.used}))}catch(g){throw m(b("turn",e.id,S()-F,!1,N(g))),p.append({actor:"deepsec",action:"run.error",scopeId:d??"",payload:N(g)}),g}let A=j;for(let g of t)g.redact&&(A=g.redact(A));let x;if(v.vault){let g=`reports/${H(e.id)}/${u}.json`;x=await v.vault.put(g,JSON.stringify(A,null,2),{runId:u,tenantId:a,cord:e.id}),p.append({actor:"deepsec",action:"artifact.write",scopeId:d??"",payload:{key:x.key,version:x.version,hash:x.hash}})}return p.append({actor:"deepsec",action:"run.settle",scopeId:d??"",payload:{runId:u,ok:!0,used:c.used}}),{output:A,runId:u,...x!==void 0?{artifact:x}:{},audit:p.entries,events:l,budget:c}};return{id:e.id,expose:n,manifest:r,run:async(s,i)=>(await o(s,i)).output,runFull:o}}var Et=(e,t="https://host")=>({mcp:e.expose.mcp?[`${t}${e.expose.mcp}`]:[],docs:`${t}/llms.txt`,...e.expose.openapi?{openapi:`${t}/openapi.json`}:{},...e.expose.cli?{cli:`${t}/cli`}:{},skills:"/.well-known/agent-skills/",...e.scope?{auth:{type:"oauth2",scopes:[e.scope]}}:{}}),Rt=e=>({manifest:e,hash:h(JSON.stringify(e))});export{O as CHAT_CAPS,Q as DataEngine,Ge as accumToolCalls,ie as acquireExecutor,ue as acquireFs,oe as acquireGitHub,ae as acquireHttp,ht as action,Fe as agentEventStore,Ke as agentObserver,it as agentSession,ot as agentSessionFromEvents,te as analyticsEvlog,Be as askLedgerEvent,ne as auditStore,Te as bidirectionalSource,se as classifyTarget,ut as collectSink,je as cordRpc,Oe as createEmitter,yt as dataPlaneRpc,be as deepeval,we as deepsec,St as defineAgent,_e as defineAgentConfig,gt as defineSchema,pt as defineTable,De as defineTool,le as distill,at as distillWithModel,Ee as fakeInference,re as fileSetOf,Ie as githubCommitter,h as hashHex,Qe as isAskLedgerEvent,I as makeAuditChain,ve as memKv,fe as memVault,Se as minimalHarness,ft as mutation,E as newId,Re as portsAsTools,mt as query,Rt as signManifest,H as slug,We as sniffTurn,ct as storeSkillSink,Ve as tenantOfAgent,Y as toBase64,Pe as toolManifest,Ne as toolsToOpenAI,vt as use,xt as useRemote,Ye as usectx,He as validateMessages,Je as verifyAuditChain,V as verifyChain,Et as wellKnown,ee as wideEventToDataPoint};

package/dist/session.d.ts

@@ -1,47 +1 @@
-import { verifyChain, type WideEvent, type AuditEntry } from "./guards.ts";
-export type SessionMode = "owned" | "attached" | "streamed";
-export type CaptureVector = "hook" | "proxy" | "watcher" | "backfill";
-/** A normalized coding-session event (mirrors lapdog/trajectory capture). */
-export type SessionEvent = {
-    ts: string;
-    kind: "lifecycle" | "prompt" | "model" | "tool_call" | "tool_result" | "permission";
-    name: string;
-    vector: CaptureVector;
-    attrs?: Record<string, unknown>;
-    tokensIn?: number;
-    tokensOut?: number;
-    costUsd?: number;
-};
-export type SessionStream = {
-    mode: SessionMode;
-    harness: string;
-    runId: string;
-    events: SessionEvent[];
-};
-export type Decision = "allow" | "deny" | "approve";
-export type Rule = {
-    id: string;
-    match: (e: SessionEvent) => boolean;
-    decision: Decision;
-    why: string;
-};
-export declare const DEFAULT_RULES: Rule[];
-export type Interception = {
-    event: SessionEvent;
-    rule: Rule;
-    decision: Decision;
-    enforceable: boolean;
-};
-export declare const intercept: (stream: SessionStream, rules?: Rule[]) => Interception[];
-export type SessionTrace = {
-    runId: string;
-    harness: string;
-    mode: SessionMode;
-    events: WideEvent[];
-    audit: AuditEntry[];
-    interceptions: Interception[];
-};
-export declare const ingestSession: (stream: SessionStream, rules?: Rule[]) => SessionTrace;
-export declare const fromTrajectoryJsonl: (jsonl: string, harness: string, mode?: SessionMode) => SessionStream;
-export { verifyChain };
-//# sourceMappingURL=session.d.ts.map
+export * from "./types/session.js";