@orkestrel/agent 0.0.22 → 0.0.23

package/dist/src/core/index.cjs

@@ -368,8 +368,8 @@ function isProviderError(value) {
 *
 * @remarks
 * The wire is strictly narrower than the domain: non-JSON arguments are refused.
-* ToolCall.caller is not in this shape and never crosses a wire. The guard refuses
-* that extra member; the contract parser drops it.
+* Calls carry only id, name, and arguments; execution context stays local.
+* The guard refuses every extra member; the contract parser drops extra members.
 */
 var toolCallShape = (0, _orkestrel_contract.objectShape)({
 	id: (0, _orkestrel_contract.stringShape)(),
@@ -381,7 +381,7 @@ var toolCallShape = (0, _orkestrel_contract.objectShape)({
 *
 * @remarks
 * The wire is strictly narrower than Message: non-JSON call arguments are refused,
-* and caller context is refused by the guard or dropped by the parser.
+* and execution context stays local. The guard refuses extra members; the parser drops them.
 */
 var messageShape = (0, _orkestrel_contract.objectShape)({
 	id: (0, _orkestrel_contract.stringShape)(),
@@ -400,7 +400,8 @@ var messageShape = (0, _orkestrel_contract.objectShape)({
 *
 * @remarks
 * The wire is strictly narrower than ProviderRequest: non-JSON arguments, parameters,
-* or schema members are refused, and caller context is refused or dropped.
+* or schema members are refused. Execution context stays local; the guard refuses
+* extra members, and the parser drops them.
 */
 var providerRequestShape = (0, _orkestrel_contract.objectShape)({
 	messages: (0, _orkestrel_contract.arrayShape)(messageShape),
@@ -419,7 +420,7 @@ var providerRequestShape = (0, _orkestrel_contract.objectShape)({
 *
 * @remarks
 * The wire is strictly narrower than ProviderResult: non-JSON call arguments are
-* refused, and caller context is refused or dropped.
+* refused. Execution context stays local; the guard refuses extra members, and the parser drops them.
 */
 var providerResultShape = (0, _orkestrel_contract.objectShape)({
 	content: (0, _orkestrel_contract.stringShape)(),
@@ -436,7 +437,8 @@ var providerResultShape = (0, _orkestrel_contract.objectShape)({
 *
 * @remarks
 * The wire is strictly narrower than RelayFrame through its result and partial
-* fields: non-JSON arguments are refused, and caller context is refused or dropped.
+* fields: non-JSON arguments are refused. Execution context stays local; the guard
+* refuses extra members, and the parser drops them.
 */
 var relayFrameShape = (0, _orkestrel_contract.unionShape)((0, _orkestrel_contract.objectShape)({
 	channel: (0, _orkestrel_contract.literalShape)(["content", "thinking"]),
@@ -2163,13 +2165,19 @@ var Agent = class {
 				};
 			}
 			if (result.tools !== void 0 && result.tools.length > 0) {
+				const authorization = this.#authorize(result.tools);
+				if (abort.signal.aborted) {
+					partial = true;
+					broke = true;
+					break;
+				}
 				const assistant = this.#context.messages.add({
 					role: "assistant",
 					content: result.content,
 					calls: result.tools
 				});
 				messages.push(assistant);
-				const results = await this.#authorize(tools, result.tools);
+				const results = await this.#dispatch(tools, result.tools, abort.signal, authorization);
 				for (let index = 0; index < result.tools.length; index += 1) {
 					const call = result.tools[index];
 					const outcomeResult = results[index];
@@ -2229,8 +2237,8 @@ var Agent = class {
 		messages.splice(0, messages.length, ...this.#context.build(this.#provider.format));
 		return false;
 	}
-	async #authorize(tools, calls) {
-		if (this.#authority === void 0) return tools.execute(calls);
+	#authorize(calls) {
+		if (this.#authority === void 0) return void 0;
 		const authority = this.#authority;
 		const allowed = [];
 		const denials = /* @__PURE__ */ new Map();
@@ -2250,7 +2258,15 @@ var Agent = class {
 				this.#emitter.emit("deny", call, decision.reason);
 			}
 		}
-		const executed = allowed.length > 0 ? await tools.execute(allowed) : [];
+		return {
+			allowed,
+			denials
+		};
+	}
+	async #dispatch(tools, calls, signal, authorization) {
+		if (authorization === void 0) return tools.execute(calls, { signal });
+		const { allowed, denials } = authorization;
+		const executed = allowed.length > 0 ? await tools.execute(allowed, { signal }) : [];
 		const byId = new Map(denials);
 		for (const result of executed) byId.set(result.id, result);
 		return calls.map((call) => byId.get(call.id) ?? denyCall(call, void 0));
@@ -2934,7 +2950,8 @@ var AgentProvider = class {
 * Carries provider calls over an authenticated NDJSON relay endpoint.
 *
 * @remarks
-* The `ToolCall.caller` member never crosses the hop. The wire body is an owned snapshot of
+* Tool execution context stays local; calls carry only `id`, `name`, and `arguments`.
+* The wire body is an owned snapshot of
 * the projection read through property descriptors, so a serializer reachable only through a
 * `get` trap or a prototype is never consulted; an own function-valued property such as a
 * `toJSON` method is a value outside JSON and is refused before fetching, with the clone's
@@ -2993,7 +3010,7 @@ var RelayProvider = class extends AgentProvider {
 	* value carries is ignored rather than consulted and cannot reach the wire.
 	*
 	* @param request - The domain conversation and call configuration
-	* @returns The validated wire request with caller context omitted
+	* @returns The validated wire request
 	* @throws {ProviderError} Thrown when the snapshot cannot be taken — a hostile read or a
 	* value outside JSON — carrying that failure as its `cause`, and when the snapshot the
 	* projection produced is not a valid wire request