@orion-agents/orion-code 0.1.8 → 0.2.0

package/dist/runtime/first-party-tool-services.js

@@ -0,0 +1,200 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirstPartySandboxServiceV1 = exports.FirstPartyToolApprovalServiceV1 = exports.FirstPartyToolPolicyServiceV1 = exports.FirstPartyToolServiceError = void 0;
+const path_1 = require("path");
+const tool_allowlist_1 = require("../services/tool-allowlist");
+const sandbox_1 = require("../tools/sandbox");
+const canonical_1 = require("./protocol/canonical");
+class FirstPartyToolServiceError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = 'ORION_FIRST_PARTY_TOOL_SERVICE_INVALID';
+        this.name = 'FirstPartyToolServiceError';
+    }
+}
+exports.FirstPartyToolServiceError = FirstPartyToolServiceError;
+/**
+ * Adapts existing first-party permission evaluators to the frozen v0.2.0
+ * policy boundary. Agent display mode is deliberately absent from decisions.
+ */
+class FirstPartyToolPolicyServiceV1 {
+    constructor(catalog, context) {
+        this.context = context;
+        this.serviceId = 'first-party-tool-policy';
+        this.toolsByName = new Map(catalog.entries.map(entry => [entry.candidate.descriptor.name, entry]));
+    }
+    decide(input) {
+        const entry = this.toolsByName.get(input.descriptor.name);
+        if (entry) {
+            const expected = entry.candidate.descriptor;
+            if (expected.executorId !== input.descriptor.executorId ||
+                expected.schemaDigest !== input.descriptor.schemaDigest ||
+                (0, canonical_1.digestRuntimeValue)(expected.risk) !== (0, canonical_1.digestRuntimeValue)(input.descriptor.risk)) {
+                return decision('deny', 'snapshot', 'Tool descriptor drifted after capability capture.');
+            }
+            const inputError = entry.tool.validateInput?.({ ...input.args });
+            if (inputError)
+                return decision('deny', 'input', inputError);
+        }
+        else if (!input.descriptor.executorId.startsWith('mcp:')) {
+            return decision('deny', 'catalog', 'Tool is not in an approved runtime catalog.');
+        }
+        const authorityFailure = checkAuthority(input);
+        if (authorityFailure)
+            return decision('deny', 'authority', authorityFailure);
+        const configured = (0, tool_allowlist_1.resolveToolAllowlist)(input.snapshot.authority.projectRoot).evaluator?.(input.descriptor.name, { ...input.args });
+        if (configured?.effect === 'deny' || configured?.effect === 'ask') {
+            return decision(configured.effect, `allowlist:${configured.scope ?? 'resolved'}`, `Matched ${configured.rule}.`);
+        }
+        if (!entry) {
+            if (configured?.effect === 'allow') {
+                return decision('allow', `allowlist:${configured.scope ?? 'resolved'}`, `Matched durable grant ${configured.rule}.`);
+            }
+            return decision('ask', 'mcp-default', 'Selected MCP tools require explicit approval unless durably granted.');
+        }
+        let legacy;
+        try {
+            legacy = entry.tool.checkPermissions?.({ ...input.args }, this.context) ?? {
+                behavior: 'allow',
+            };
+        }
+        catch (error) {
+            return decision('deny', 'tool-policy', `Tool permission evaluator failed closed: ${errorMessage(error)}`);
+        }
+        if (!['allow', 'ask', 'deny'].includes(legacy.behavior)) {
+            return decision('deny', 'tool-policy', 'Tool returned an invalid permission decision.');
+        }
+        if (legacy.behavior !== 'deny' && configured?.effect === 'allow') {
+            return decision('allow', `allowlist:${configured.scope ?? 'resolved'}`, `Matched durable grant ${configured.rule}.`);
+        }
+        return decision(legacy.behavior, 'tool-policy', legacy.reason);
+    }
+}
+exports.FirstPartyToolPolicyServiceV1 = FirstPartyToolPolicyServiceV1;
+/** Confirmation is independent from containment and from BUILD/PLAN/AUTO. */
+class FirstPartyToolApprovalServiceV1 {
+    constructor(confirm) {
+        this.confirm = confirm;
+        this.serviceId = 'first-party-tool-approval';
+    }
+    async decide(input) {
+        if (input.abortSignal?.aborted) {
+            return approval(false, 'abort', 'Approval was aborted.');
+        }
+        switch (input.snapshot.authority.confirmation) {
+            case 'allow':
+                return approval(true, 'authority', 'Project authority pre-authorized this operation.');
+            case 'deny':
+                return approval(false, 'authority', 'Project authority denies confirmation.');
+            case 'ask': {
+                if (!this.confirm) {
+                    return approval(false, 'unavailable', 'No approval channel is attached.');
+                }
+                try {
+                    const approved = await this.confirm({
+                        name: input.descriptor.name,
+                        args: { ...input.args },
+                        reason: input.policy.reason,
+                        abortSignal: input.abortSignal,
+                    });
+                    return approval(approved, 'user', approved ? 'User approved the operation.' : 'User denied the operation.');
+                }
+                catch (error) {
+                    return approval(false, 'approval-error', `Approval failed closed: ${errorMessage(error)}`);
+                }
+            }
+        }
+    }
+}
+exports.FirstPartyToolApprovalServiceV1 = FirstPartyToolApprovalServiceV1;
+/**
+ * Produces an auditable enforcement result before ExecutionService runs. Shell
+ * tools use the existing OS sandbox planner; in-process file tools rely on the
+ * same project-root path guards as their bound executor.
+ */
+class FirstPartySandboxServiceV1 {
+    constructor() {
+        this.serviceId = 'first-party-sandbox';
+    }
+    prepare(input) {
+        if (!input.snapshot.executionPolicy.sandboxRequired) {
+            return sandbox('none', 'none', 'Sandbox is not required by the frozen policy.');
+        }
+        const descriptor = input.descriptor;
+        if (descriptor.name === 'exec_command')
+            return this.prepareCommand(input);
+        if (descriptor.risk.network === 'none' &&
+            (descriptor.risk.effect === 'none' ||
+                descriptor.risk.effect === 'workspace_read' ||
+                descriptor.risk.fileEdit)) {
+            return sandbox('orion-path-containment', 'full', 'The bound in-process executor enforces the frozen project root.');
+        }
+        return sandbox('unsupported', 'partial', `No full sandbox backend is bound for ${descriptor.name}.`);
+    }
+    prepareCommand(input) {
+        const command = typeof input.args.command === 'string' ? input.args.command : '';
+        if (!command.trim())
+            return sandbox('invalid-command', 'partial', 'Command is empty.');
+        const projectRoot = (0, path_1.resolve)(input.snapshot.authority.projectRoot);
+        const requestedCwd = typeof input.args.cwd === 'string' && input.args.cwd.trim()
+            ? (0, path_1.resolve)(projectRoot, input.args.cwd)
+            : (0, path_1.resolve)(input.snapshot.environment.cwd);
+        if (!contains(projectRoot, requestedCwd)) {
+            return sandbox('path-containment', 'partial', 'Command cwd is outside project authority.');
+        }
+        const plan = (0, sandbox_1.planSandboxedCommand)(command, {
+            cwd: requestedCwd,
+            projectRoot,
+            settings: (0, sandbox_1.resolveSandboxSettings)(projectRoot),
+        });
+        if (!plan.ok)
+            return sandbox('unavailable', 'partial', plan.reason);
+        if (plan.backend === 'none') {
+            return sandbox('none', 'none', 'Configured shell execution has no sandbox backend.');
+        }
+        return sandbox(plan.backend, 'full', `${plan.profile}; network ${plan.network}; ${plan.writableRoots.length} writable roots.`);
+    }
+}
+exports.FirstPartySandboxServiceV1 = FirstPartySandboxServiceV1;
+function checkAuthority(input) {
+    const { authority } = input.snapshot;
+    const { risk } = input.descriptor;
+    if (input.descriptor.name === 'exec_command' && typeof input.args.cwd === 'string') {
+        const requestedCwd = (0, path_1.resolve)(authority.projectRoot, input.args.cwd);
+        if (!contains((0, path_1.resolve)(authority.projectRoot), requestedCwd)) {
+            return 'Command cwd is outside project authority.';
+        }
+    }
+    if (risk.network === 'write' && authority.network !== 'write') {
+        return 'Tool requires network write authority.';
+    }
+    if (risk.network === 'read' && authority.network === 'deny') {
+        return 'Tool requires network read authority.';
+    }
+    if (risk.effect === 'external_write' && authority.confirmation === 'deny') {
+        return 'External writes are denied by the frozen authority.';
+    }
+    return undefined;
+}
+function decision(behavior, source, reason) {
+    const content = { behavior, source, ...(reason ? { reason } : {}) };
+    return Object.freeze({ ...content, digest: (0, canonical_1.digestRuntimeValue)(content) });
+}
+function approval(approved, source, reason) {
+    const content = { approved, source, ...(reason ? { reason } : {}) };
+    return Object.freeze({ ...content, digest: (0, canonical_1.digestRuntimeValue)(content) });
+}
+function sandbox(backend, enforcement, reason) {
+    const content = { backend, enforcement, ...(reason ? { reason } : {}) };
+    return Object.freeze({ ...content, digest: (0, canonical_1.digestRuntimeValue)(content) });
+}
+function contains(root, target) {
+    if (!(0, path_1.isAbsolute)(root) || !(0, path_1.isAbsolute)(target))
+        return false;
+    const rel = (0, path_1.relative)(root, target);
+    return rel === '' || (!rel.startsWith('..') && !(0, path_1.isAbsolute)(rel));
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=first-party-tool-services.js.map

package/dist/runtime/first-party-tool-services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-tool-services.js","sourceRoot":"","sources":["../../src/runtime/first-party-tool-services.ts"],"names":[],"mappings":";;;AAAA,+BAAqD;AAGrD,+DAAkE;AAClE,8CAAgF;AAEhF,oDAA0D;AAqB1D,MAAa,0BAA2B,SAAQ,KAAK;IAGnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAG,wCAAwC,CAAC;QAIvD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAPD,gEAOC;AAED;;;GAGG;AACH,MAAa,6BAA6B;IAIxC,YACE,OAA6B,EACZ,OAAoB;QAApB,YAAO,GAAP,OAAO,CAAa;QAL9B,cAAS,GAAG,yBAAyB,CAAC;QAO7C,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAU,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,KAAmD;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC;YAC5C,IACE,QAAQ,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,UAAU;gBACnD,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,UAAU,CAAC,YAAY;gBACvD,IAAA,8BAAkB,EAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAA,8BAAkB,EAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAC/E,CAAC;gBACD,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,mDAAmD,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,UAAU;gBAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,OAAO,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,6CAA6C,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,gBAAgB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,gBAAgB;YAAE,OAAO,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAA,qCAAoB,EAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,CACvF,KAAK,CAAC,UAAU,CAAC,IAAI,EACrB,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAClB,CAAC;QACF,IAAI,UAAU,EAAE,MAAM,KAAK,MAAM,IAAI,UAAU,EAAE,MAAM,KAAK,KAAK,EAAE,CAAC;YAClE,OAAO,QAAQ,CACb,UAAU,CAAC,MAAM,EACjB,aAAa,UAAU,CAAC,KAAK,IAAI,UAAU,EAAE,EAC7C,WAAW,UAAU,CAAC,IAAI,GAAG,CAC9B,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,UAAU,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;gBACnC,OAAO,QAAQ,CACb,OAAO,EACP,aAAa,UAAU,CAAC,KAAK,IAAI,UAAU,EAAE,EAC7C,yBAAyB,UAAU,CAAC,IAAI,GAAG,CAC5C,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CACb,KAAK,EACL,aAAa,EACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACzE,QAAQ,EAAE,OAAO;aAClB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,QAAQ,CACb,MAAM,EACN,aAAa,EACb,4CAA4C,YAAY,CAAC,KAAK,CAAC,EAAE,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,OAAO,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,+CAA+C,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,UAAU,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YACjE,OAAO,QAAQ,CACb,OAAO,EACP,aAAa,UAAU,CAAC,KAAK,IAAI,UAAU,EAAE,EAC7C,yBAAyB,UAAU,CAAC,IAAI,GAAG,CAC5C,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;CACF;AAlFD,sEAkFC;AAED,6EAA6E;AAC7E,MAAa,+BAA+B;IAG1C,YAA6B,OAAqC;QAArC,YAAO,GAAP,OAAO,CAA8B;QAFzD,cAAS,GAAG,2BAA2B,CAAC;IAEoB,CAAC;IAEtE,KAAK,CAAC,MAAM,CACV,KAAqD;QAErD,IAAI,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;YAC/B,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,uBAAuB,CAAC,CAAC;QAC3D,CAAC;QACD,QAAQ,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC9C,KAAK,OAAO;gBACV,OAAO,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,kDAAkD,CAAC,CAAC;YACzF,KAAK,MAAM;gBACT,OAAO,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,wCAAwC,CAAC,CAAC;YAChF,KAAK,KAAK,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,OAAO,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,kCAAkC,CAAC,CAAC;gBAC5E,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;wBAClC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;wBAC3B,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE;wBACvB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;wBAC3B,WAAW,EAAE,KAAK,CAAC,WAAW;qBAC/B,CAAC,CAAC;oBACH,OAAO,QAAQ,CACb,QAAQ,EACR,MAAM,EACN,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,4BAA4B,CACzE,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,QAAQ,CACb,KAAK,EACL,gBAAgB,EAChB,2BAA2B,YAAY,CAAC,KAAK,CAAC,EAAE,CACjD,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA1CD,0EA0CC;AAED;;;;GAIG;AACH,MAAa,0BAA0B;IAAvC;QACW,cAAS,GAAG,qBAAqB,CAAC;IAqD7C,CAAC;IAnDC,OAAO,CAAC,KAAiD;QACvD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,+CAA+C,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACpC,IAAI,UAAU,CAAC,IAAI,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC1E,IACE,UAAU,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM;YAClC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM;gBAChC,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,gBAAgB;gBAC3C,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAC3B,CAAC;YACD,OAAO,OAAO,CACZ,wBAAwB,EACxB,MAAM,EACN,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CACZ,aAAa,EACb,SAAS,EACT,wCAAwC,UAAU,CAAC,IAAI,GAAG,CAC3D,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,KAAiD;QACtE,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,iBAAiB,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACvF,MAAM,WAAW,GAAG,IAAA,cAAO,EAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,YAAY,GAChB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YACzD,CAAC,CAAC,IAAA,cAAO,EAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YACtC,CAAC,CAAC,IAAA,cAAO,EAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;YACzC,OAAO,OAAO,CAAC,kBAAkB,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,8BAAoB,EAAC,OAAO,EAAE;YACzC,GAAG,EAAE,YAAY;YACjB,WAAW;YACX,QAAQ,EAAE,IAAA,gCAAsB,EAAC,WAAW,CAAC;SAC9C,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,oDAAoD,CAAC,CAAC;QACvF,CAAC;QACD,OAAO,OAAO,CACZ,IAAI,CAAC,OAAO,EACZ,MAAM,EACN,GAAG,IAAI,CAAC,OAAO,aAAa,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,aAAa,CAAC,MAAM,kBAAkB,CACzF,CAAC;IACJ,CAAC;CACF;AAtDD,gEAsDC;AAED,SAAS,cAAc,CAAC,KAAmD;IACzE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;IACrC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;IAClC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnF,MAAM,YAAY,GAAG,IAAA,cAAO,EAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,CAAC,IAAA,cAAO,EAAC,SAAS,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC;YAC5D,OAAO,2CAA2C,CAAC;QACrD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,IAAI,SAAS,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC9D,OAAO,wCAAwC,CAAC;IAClD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,SAAS,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC5D,OAAO,uCAAuC,CAAC;IACjD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,gBAAgB,IAAI,SAAS,CAAC,YAAY,KAAK,MAAM,EAAE,CAAC;QAC1E,OAAO,qDAAqD,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CACf,QAA0C,EAC1C,MAAc,EACd,MAAe;IAEf,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,QAAiB,EAAE,MAAc,EAAE,MAAe;IAClE,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,OAAO,CACd,OAAe,EACf,WAAgD,EAChD,MAAe;IAEf,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,IAAI,CAAC,IAAA,iBAAU,EAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,iBAAU,EAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/runtime/first-party-tool-universe.d.ts

@@ -0,0 +1,14 @@
+import type { ToolContext } from '../framework/tool';
+import { type BuiltinToolCatalogV1 } from './builtin-tool-provider';
+import { type FirstPartyCoreToolProviderV1 } from './first-party-core-provider';
+import { type FirstPartyLongTailToolProviderV1 } from './first-party-long-tail-provider';
+export interface ProductionFirstPartyToolUniverseV1 {
+    readonly core: FirstPartyCoreToolProviderV1;
+    readonly longTail: FirstPartyLongTailToolProviderV1;
+    readonly catalog: BuiltinToolCatalogV1;
+}
+/** Static product composition: lightweight descriptors now, exact executors on demand. */
+export declare function createProductionFirstPartyToolUniverseV1(options: {
+    readonly context: ToolContext;
+}): ProductionFirstPartyToolUniverseV1;
+//# sourceMappingURL=first-party-tool-universe.d.ts.map

package/dist/runtime/first-party-tool-universe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-tool-universe.d.ts","sourceRoot":"","sources":["../../src/runtime/first-party-tool-universe.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAA8B,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAChG,OAAO,EAEL,KAAK,4BAA4B,EAClC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gCAAgC,EACtC,MAAM,kCAAkC,CAAC;AAE1C,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAC;CACxC;AAED,0FAA0F;AAC1F,wBAAgB,wCAAwC,CAAC,OAAO,EAAE;IAChE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B,GAAG,kCAAkC,CAarC"}

package/dist/runtime/first-party-tool-universe.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProductionFirstPartyToolUniverseV1 = createProductionFirstPartyToolUniverseV1;
+const batch_read_service_1 = require("./batch-read-service");
+const builtin_tool_provider_1 = require("./builtin-tool-provider");
+const first_party_core_provider_1 = require("./first-party-core-provider");
+const first_party_long_tail_provider_1 = require("./first-party-long-tail-provider");
+/** Static product composition: lightweight descriptors now, exact executors on demand. */
+function createProductionFirstPartyToolUniverseV1(options) {
+    const core = (0, first_party_core_provider_1.createFirstPartyCoreToolProviderV1)(options);
+    const longTail = (0, first_party_long_tail_provider_1.createFirstPartyLongTailToolProviderV1)(options);
+    const batchRead = (0, batch_read_service_1.createBatchReadToolV1)();
+    const catalog = (0, builtin_tool_provider_1.createBuiltinToolCatalogV1)([
+        ...core.catalog.entries.map(entry => entry.tool),
+        ...longTail.catalog.entries.map(entry => entry.tool),
+        batchRead,
+    ], { context: options.context });
+    return Object.freeze({ core, longTail, catalog });
+}
+//# sourceMappingURL=first-party-tool-universe.js.map

package/dist/runtime/first-party-tool-universe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-tool-universe.js","sourceRoot":"","sources":["../../src/runtime/first-party-tool-universe.ts"],"names":[],"mappings":";;AAmBA,4FAeC;AAjCD,6DAA6D;AAC7D,mEAAgG;AAChG,2EAGqC;AACrC,qFAG0C;AAQ1C,0FAA0F;AAC1F,SAAgB,wCAAwC,CAAC,OAExD;IACC,MAAM,IAAI,GAAG,IAAA,8DAAkC,EAAC,OAAO,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAA,uEAAsC,EAAC,OAAO,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,IAAA,0CAAqB,GAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAA,kDAA0B,EACxC;QACE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QAChD,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;QACpD,SAAS;KACV,EACD,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAC7B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;AACpD,CAAC"}

package/dist/runtime/goal-lifecycle-v2.d.ts

@@ -0,0 +1,63 @@
+import { type StopDecision } from '../framework/stop-decision';
+import type { TaskContextCompletionDecisionV1 } from './task-context-service';
+export type GoalLifecycleStatusV2 = 'active' | 'paused' | 'completed' | 'failed';
+export interface GoalLifecycleBudgetV2 {
+    readonly maxTokens: number;
+    readonly maxElapsedMs: number;
+}
+export interface GoalLifecycleStateV2 {
+    readonly version: 2;
+    readonly goalId: string;
+    readonly objective: string;
+    readonly status: GoalLifecycleStatusV2;
+    readonly generation: number;
+    readonly continuationCount: number;
+    readonly noProgressCount: number;
+    readonly blockedCount: number;
+    readonly tokensUsed: number;
+    readonly elapsedMs: number;
+    readonly budget: GoalLifecycleBudgetV2;
+    readonly lastStopDecision?: StopDecision;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly digest: string;
+}
+export interface GoalTurnObservationV2 {
+    readonly requestDecision?: StopDecision;
+    readonly taskContextCompletion?: TaskContextCompletionDecisionV1;
+    readonly madeProgress: boolean;
+    readonly blocked?: string;
+    readonly tokenDelta: number;
+    readonly elapsedMs: number;
+    readonly persistenceFailure?: string;
+    readonly aborted?: boolean;
+}
+export interface GoalTurnResolutionV2 {
+    readonly state: GoalLifecycleStateV2;
+    readonly scheduleContinuation: boolean;
+    readonly decision?: StopDecision;
+}
+export interface GoalLifecycleOptionsV2 {
+    readonly goalId?: string;
+    readonly objective: string;
+    readonly budget: GoalLifecycleBudgetV2;
+    readonly clock?: () => number;
+    readonly state?: GoalLifecycleStateV2;
+}
+/**
+ * Long-lived Goal owner for lifecycle, budget and continuation only.
+ * Task criteria, evidence and completion remain exclusively in TaskContext.
+ */
+export declare class GoalLifecycleServiceV2 {
+    readonly serviceId: "goal-lifecycle";
+    private stateValue;
+    private readonly clock;
+    constructor(options: GoalLifecycleOptionsV2);
+    get state(): GoalLifecycleStateV2;
+    finalizeTurn(observation: GoalTurnObservationV2): GoalTurnResolutionV2;
+    pause(message?: string): GoalLifecycleStateV2;
+    resume(): GoalLifecycleStateV2;
+    private transition;
+}
+export declare function assertGoalLifecycleStateV2(state: GoalLifecycleStateV2): void;
+//# sourceMappingURL=goal-lifecycle-v2.d.ts.map

package/dist/runtime/goal-lifecycle-v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-lifecycle-v2.d.ts","sourceRoot":"","sources":["../../src/runtime/goal-lifecycle-v2.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,wBAAwB,CAAC;AAI9E,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEjF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,YAAY,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,YAAY,CAAC;IACxC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,+BAA+B,CAAC;IACjE,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAKD;;;GAGG;AACH,qBAAa,sBAAsB;IACjC,QAAQ,CAAC,SAAS,EAAG,gBAAgB,CAAU;IAC/C,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;gBAEzB,OAAO,EAAE,sBAAsB;IA6B3C,IAAI,KAAK,IAAI,oBAAoB,CAEhC;IAED,YAAY,CAAC,WAAW,EAAE,qBAAqB,GAAG,oBAAoB;IA+HtE,KAAK,CAAC,OAAO,SAAyB,GAAG,oBAAoB;IAK7D,MAAM,IAAI,oBAAoB;IAe9B,OAAO,CAAC,UAAU;CAwBnB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAuB5E"}

package/dist/runtime/goal-lifecycle-v2.js

@@ -0,0 +1,253 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GoalLifecycleServiceV2 = void 0;
+exports.assertGoalLifecycleStateV2 = assertGoalLifecycleStateV2;
+const crypto_1 = require("crypto");
+const stop_decision_1 = require("../framework/stop-decision");
+const canonical_1 = require("./protocol/canonical");
+const runtime_protocol_v1_1 = require("./protocol/runtime-protocol-v1");
+const MAX_NO_PROGRESS_TURNS = 3;
+const MAX_BLOCKED_CONTINUATIONS = 2;
+/**
+ * Long-lived Goal owner for lifecycle, budget and continuation only.
+ * Task criteria, evidence and completion remain exclusively in TaskContext.
+ */
+class GoalLifecycleServiceV2 {
+    constructor(options) {
+        this.serviceId = 'goal-lifecycle';
+        this.clock = options.clock ?? Date.now;
+        if (options.state) {
+            assertGoalLifecycleStateV2(options.state);
+            this.stateValue = deepFreeze(structuredClone(options.state));
+            return;
+        }
+        const objective = options.objective.trim();
+        validateBudget(options.budget);
+        if (!objective)
+            throw new Error('Goal objective must not be empty');
+        const now = this.clock();
+        this.stateValue = withDigest({
+            version: 2,
+            goalId: options.goalId ?? (0, crypto_1.randomUUID)(),
+            objective,
+            status: 'active',
+            generation: 1,
+            continuationCount: 0,
+            noProgressCount: 0,
+            blockedCount: 0,
+            tokensUsed: 0,
+            elapsedMs: 0,
+            budget: structuredClone(options.budget),
+            createdAt: now,
+            updatedAt: now,
+        });
+        assertGoalLifecycleStateV2(this.stateValue);
+    }
+    get state() {
+        return deepFreeze(structuredClone(this.stateValue));
+    }
+    finalizeTurn(observation) {
+        if (this.stateValue.status !== 'active') {
+            return {
+                state: this.state,
+                scheduleContinuation: false,
+                decision: this.stateValue.lastStopDecision,
+            };
+        }
+        validateObservation(observation);
+        const tokensUsed = this.stateValue.tokensUsed + observation.tokenDelta;
+        const elapsedMs = this.stateValue.elapsedMs + observation.elapsedMs;
+        const continuationCount = this.stateValue.continuationCount + 1;
+        const noProgressCount = observation.madeProgress ? 0 : this.stateValue.noProgressCount + 1;
+        const blockedCount = observation.blocked ? this.stateValue.blockedCount + 1 : 0;
+        const resourceSnapshot = {
+            turns: { used: continuationCount },
+            tokens: { used: tokensUsed, limit: this.stateValue.budget.maxTokens },
+            elapsedMs: { used: elapsedMs, limit: this.stateValue.budget.maxElapsedMs },
+        };
+        let status = 'active';
+        let decision;
+        if (observation.persistenceFailure) {
+            status = 'failed';
+            decision = goalDecision('failed', 'pause_scope', 'persistence_error', observation.persistenceFailure, resourceSnapshot);
+        }
+        else if (observation.aborted || observation.requestDecision?.status === 'cancelled') {
+            status = 'paused';
+            decision = goalDecision('cancelled', 'pause_scope', 'user_abort', 'Goal paused after an interrupt.', resourceSnapshot);
+        }
+        else if (observation.requestDecision?.status === 'failed' &&
+            isProviderFailure(observation.requestDecision)) {
+            status = 'paused';
+            decision = goalDecision('failed', 'pause_scope', 'provider_failure', observation.requestDecision.reason.message, resourceSnapshot);
+        }
+        else if (tokensUsed >= this.stateValue.budget.maxTokens ||
+            elapsedMs >= this.stateValue.budget.maxElapsedMs) {
+            status = 'paused';
+            decision = goalDecision('stopped', 'pause_scope', 'goal_budget', 'Goal budget reached. Raise the explicit budget before resuming.', resourceSnapshot);
+        }
+        else if (observation.taskContextCompletion?.canComplete === true) {
+            status = 'completed';
+            decision = (0, stop_decision_1.createStopDecision)({
+                scope: 'goal',
+                status: 'completed',
+                disposition: 'finish_scope',
+                reason: { code: 'verified_completion', message: 'TaskContext verified every criterion.' },
+                evidence: observation.taskContextCompletion.evidence.map(ref => ({
+                    kind: 'verification',
+                    source: 'task-context',
+                    detail: ref,
+                })),
+                evidenceRefs: [...observation.taskContextCompletion.evidence],
+                criterionStates: observation.taskContextCompletion.criterionResults?.map(result => ({
+                    id: result.criterionId,
+                    status: result.status,
+                })),
+                nextActions: [{ kind: 'inspect', label: 'Inspect the durable completion receipt.' }],
+                resources: resourceSnapshot,
+            });
+        }
+        else if (blockedCount >= MAX_BLOCKED_CONTINUATIONS) {
+            status = 'paused';
+            decision = goalDecision('blocked', 'pause_scope', 'blocked', observation.blocked ?? 'Goal remained blocked.', resourceSnapshot);
+        }
+        else if (noProgressCount >= MAX_NO_PROGRESS_TURNS) {
+            status = 'paused';
+            decision = goalDecision('stopped', 'pause_scope', 'no_progress', `Goal made no observable progress for ${MAX_NO_PROGRESS_TURNS} turns.`, resourceSnapshot);
+        }
+        this.stateValue = withDigest({
+            version: 2,
+            goalId: this.stateValue.goalId,
+            objective: this.stateValue.objective,
+            status,
+            generation: this.stateValue.generation,
+            continuationCount,
+            noProgressCount,
+            blockedCount,
+            tokensUsed,
+            elapsedMs,
+            budget: structuredClone(this.stateValue.budget),
+            ...(decision ? { lastStopDecision: decision } : {}),
+            createdAt: this.stateValue.createdAt,
+            updatedAt: Math.max(this.stateValue.updatedAt + 1, this.clock()),
+        });
+        return {
+            state: this.state,
+            scheduleContinuation: status === 'active',
+            ...(decision ? { decision } : {}),
+        };
+    }
+    pause(message = 'Goal paused by user.') {
+        if (this.stateValue.status !== 'active')
+            return this.state;
+        return this.transition('paused', 'user_pause', message);
+    }
+    resume() {
+        if (this.stateValue.status !== 'paused')
+            return this.state;
+        const content = {
+            ...withoutDigest(this.stateValue),
+            status: 'active',
+            generation: this.stateValue.generation + 1,
+            noProgressCount: 0,
+            blockedCount: 0,
+            updatedAt: Math.max(this.stateValue.updatedAt + 1, this.clock()),
+        };
+        delete content.lastStopDecision;
+        this.stateValue = withDigest(content);
+        return this.state;
+    }
+    transition(status, code, message) {
+        const decision = goalDecision(status === 'failed' ? 'failed' : 'stopped', 'pause_scope', code, message, {
+            turns: { used: this.stateValue.continuationCount },
+            tokens: { used: this.stateValue.tokensUsed, limit: this.stateValue.budget.maxTokens },
+            elapsedMs: { used: this.stateValue.elapsedMs, limit: this.stateValue.budget.maxElapsedMs },
+        });
+        this.stateValue = withDigest({
+            ...withoutDigest(this.stateValue),
+            status,
+            lastStopDecision: decision,
+            updatedAt: Math.max(this.stateValue.updatedAt + 1, this.clock()),
+        });
+        return this.state;
+    }
+}
+exports.GoalLifecycleServiceV2 = GoalLifecycleServiceV2;
+function assertGoalLifecycleStateV2(state) {
+    const { digest, ...content } = state;
+    if (state.version !== 2 ||
+        !(0, runtime_protocol_v1_1.isRuntimeId)(state.goalId) ||
+        !state.objective.trim() ||
+        (0, canonical_1.digestRuntimeValue)(content) !== digest) {
+        throw new Error('GoalLifecycleStateV2 failed integrity validation');
+    }
+    validateBudget(state.budget);
+    for (const value of [
+        state.generation,
+        state.continuationCount,
+        state.noProgressCount,
+        state.blockedCount,
+        state.tokensUsed,
+        state.elapsedMs,
+    ]) {
+        if (!Number.isSafeInteger(value) || value < 0) {
+            throw new Error('Goal lifecycle counters must be non-negative safe integers');
+        }
+    }
+}
+function goalDecision(status, disposition, code, message, resources) {
+    return (0, stop_decision_1.createStopDecision)({
+        scope: 'goal',
+        status,
+        disposition,
+        reason: { code, message },
+        evidence: [{ kind: 'runtime', source: 'goal-lifecycle-v2', detail: message }],
+        nextActions: [
+            { kind: 'inspect', label: 'Inspect the durable Goal state.' },
+            {
+                kind: 'resume',
+                label: 'Resume after resolving the stop condition.',
+                command: '/goal resume',
+            },
+        ],
+        resources,
+    });
+}
+function isProviderFailure(decision) {
+    return (decision.evidence.some(item => item.kind === 'provider') ||
+        /provider|network|auth|rate.?limit/iu.test(decision.reason.code));
+}
+function validateBudget(budget) {
+    if (!Number.isSafeInteger(budget.maxTokens) ||
+        budget.maxTokens <= 0 ||
+        !Number.isSafeInteger(budget.maxElapsedMs) ||
+        budget.maxElapsedMs <= 0) {
+        throw new Error('Goal budget values must be positive safe integers');
+    }
+}
+function validateObservation(observation) {
+    for (const [name, value] of [
+        ['tokenDelta', observation.tokenDelta],
+        ['elapsedMs', observation.elapsedMs],
+    ]) {
+        if (!Number.isSafeInteger(value) || value < 0) {
+            throw new Error(`${name} must be a non-negative safe integer`);
+        }
+    }
+}
+function withDigest(content) {
+    return deepFreeze({ ...content, digest: (0, canonical_1.digestRuntimeValue)(content) });
+}
+function withoutDigest(state) {
+    const { digest: _digest, ...content } = state;
+    void _digest;
+    return structuredClone(content);
+}
+function deepFreeze(value) {
+    if (typeof value !== 'object' || value === null || Object.isFrozen(value))
+        return value;
+    Object.freeze(value);
+    for (const entry of Object.values(value))
+        deepFreeze(entry);
+    return value;
+}
+//# sourceMappingURL=goal-lifecycle-v2.js.map

package/dist/runtime/goal-lifecycle-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-lifecycle-v2.js","sourceRoot":"","sources":["../../src/runtime/goal-lifecycle-v2.ts"],"names":[],"mappings":";;;AAmRA,gEAuBC;AA1SD,mCAAoC;AAEpC,8DAAmF;AAEnF,oDAA0D;AAC1D,wEAA6D;AAoD7D,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC;;;GAGG;AACH,MAAa,sBAAsB;IAKjC,YAAY,OAA+B;QAJlC,cAAS,GAAG,gBAAyB,CAAC;QAK7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;QACvC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC3C,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC3B,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAA,mBAAU,GAAE;YACtC,SAAS;YACT,MAAM,EAAE,QAAiB;YACzB,UAAU,EAAE,CAAC;YACb,iBAAiB,EAAE,CAAC;YACpB,eAAe,EAAE,CAAC;YAClB,YAAY,EAAE,CAAC;YACf,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;YACvC,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QACH,0BAA0B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,KAAK;QACP,OAAO,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,YAAY,CAAC,WAAkC;QAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,oBAAoB,EAAE,KAAK;gBAC3B,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,gBAAgB;aAC3C,CAAC;QACJ,CAAC;QACD,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QACvE,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;QACpE,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,GAAG,CAAC,CAAC;QAC3F,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,gBAAgB,GAAG;YACvB,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;YAClC,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE;YACrE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;SAC3E,CAAC;QAEF,IAAI,MAAM,GAA0B,QAAQ,CAAC;QAC7C,IAAI,QAAkC,CAAC;QACvC,IAAI,WAAW,CAAC,kBAAkB,EAAE,CAAC;YACnC,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,WAAW,CAAC,kBAAkB,EAC9B,gBAAgB,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,eAAe,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YACtF,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,iCAAiC,EACjC,gBAAgB,CACjB,CAAC;QACJ,CAAC;aAAM,IACL,WAAW,CAAC,eAAe,EAAE,MAAM,KAAK,QAAQ;YAChD,iBAAiB,CAAC,WAAW,CAAC,eAAe,CAAC,EAC9C,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,EAC1C,gBAAgB,CACjB,CAAC;QACJ,CAAC;aAAM,IACL,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS;YAC9C,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAChD,CAAC;YACD,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,SAAS,EACT,aAAa,EACb,aAAa,EACb,iEAAiE,EACjE,gBAAgB,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,WAAW,KAAK,IAAI,EAAE,CAAC;YACnE,MAAM,GAAG,WAAW,CAAC;YACrB,QAAQ,GAAG,IAAA,kCAAkB,EAAC;gBAC5B,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,cAAc;gBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,uCAAuC,EAAE;gBACzF,QAAQ,EAAE,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC/D,IAAI,EAAE,cAAuB;oBAC7B,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC,GAAG,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC;gBAC7D,eAAe,EAAE,WAAW,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAClF,EAAE,EAAE,MAAM,CAAC,WAAW;oBACtB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;gBACH,WAAW,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;gBACpF,SAAS,EAAE,gBAAgB;aAC5B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,YAAY,IAAI,yBAAyB,EAAE,CAAC;YACrD,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,SAAS,EACT,aAAa,EACb,SAAS,EACT,WAAW,CAAC,OAAO,IAAI,wBAAwB,EAC/C,gBAAgB,CACjB,CAAC;QACJ,CAAC;aAAM,IAAI,eAAe,IAAI,qBAAqB,EAAE,CAAC;YACpD,MAAM,GAAG,QAAQ,CAAC;YAClB,QAAQ,GAAG,YAAY,CACrB,SAAS,EACT,aAAa,EACb,aAAa,EACb,wCAAwC,qBAAqB,SAAS,EACtE,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC3B,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM;YAC9B,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACpC,MAAM;YACN,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;YACtC,iBAAiB;YACjB,eAAe;YACf,YAAY;YACZ,UAAU;YACV,SAAS;YACT,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAC/C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;YACpC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,MAAM,KAAK,QAAQ;YACzC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,GAAG,sBAAsB;QACpC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAC3D,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAC3D,MAAM,OAAO,GAAG;YACd,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YACjC,MAAM,EAAE,QAAiB;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,GAAG,CAAC;YAC1C,eAAe,EAAE,CAAC;YAClB,YAAY,EAAE,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC;QACF,OAAQ,OAA+C,CAAC,gBAAgB,CAAC;QACzE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEO,UAAU,CAChB,MAA6B,EAC7B,IAAY,EACZ,OAAe;QAEf,MAAM,QAAQ,GAAG,YAAY,CAC3B,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAC1C,aAAa,EACb,IAAI,EACJ,OAAO,EACP;YACE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,iBAAiB,EAAE;YAClD,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE;YACrF,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE;SAC3F,CACF,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC3B,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;YACjC,MAAM;YACN,gBAAgB,EAAE,QAAQ;YAC1B,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF;AAjND,wDAiNC;AAED,SAAgB,0BAA0B,CAAC,KAA2B;IACpE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IACrC,IACE,KAAK,CAAC,OAAO,KAAK,CAAC;QACnB,CAAC,IAAA,iCAAW,EAAC,KAAK,CAAC,MAAM,CAAC;QAC1B,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE;QACvB,IAAA,8BAAkB,EAAC,OAAO,CAAC,KAAK,MAAM,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI;QAClB,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,iBAAiB;QACvB,KAAK,CAAC,eAAe;QACrB,KAAK,CAAC,YAAY;QAClB,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,SAAS;KAChB,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,MAA8B,EAC9B,WAAwC,EACxC,IAAY,EACZ,OAAe,EACf,SAAoC;IAEpC,OAAO,IAAA,kCAAkB,EAAC;QACxB,KAAK,EAAE,MAAM;QACb,MAAM;QACN,WAAW;QACX,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;QACzB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7E,WAAW,EAAE;YACX,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,iCAAiC,EAAE;YAC7D;gBACE,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,4CAA4C;gBACnD,OAAO,EAAE,cAAc;aACxB;SACF;QACD,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAsB;IAC/C,OAAO,CACL,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;QACxD,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAA6B;IACnD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;QACvC,MAAM,CAAC,SAAS,IAAI,CAAC;QACrB,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC;QAC1C,MAAM,CAAC,YAAY,IAAI,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAkC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;QACtC,CAAC,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC;KAC5B,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,OAAU;IAEV,OAAO,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,IAAA,8BAAkB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,KAA2B;IAChD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;IAC9C,KAAK,OAAO,CAAC;IACb,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC"}