@polpo-ai/core 0.15.43 → 0.15.45

package/dist/runtime-context/types.d.ts

@@ -1,4 +1,5 @@
 import type { RuntimeInvocationSource, RuntimeSurface } from "../runtime-plan/index.js";
+import type { RuntimeGuardrailDecision } from "../runtime-plan/types.js";
 export declare const RUNTIME_CONTEXT_SEGMENT_KINDS: readonly ["memory", "brain"];
 export type RuntimeContextSegmentKind = (typeof RUNTIME_CONTEXT_SEGMENT_KINDS)[number];
 export declare const RUNTIME_CONTEXT_TRUST_LEVELS: readonly ["trusted", "user_provided", "external", "untrusted"];
@@ -72,4 +73,33 @@ export interface RuntimeContextProvider {
 export interface ResolveRuntimeContextOptions {
     readonly now?: () => Date | string;
 }
+/**
+ * Trust assigned to prompt-bound context. This is intentionally separate from
+ * retrieval-entry trust because it also covers system and developer content.
+ */
+export type RuntimePromptContextTrust = "system" | "developer" | "user" | "external" | "untrusted";
+/**
+ * Prompt-context protection is opt-in until a host explicitly enables it.
+ * The serializable value survives process and deployment boundaries.
+ */
+export type RuntimeContextTrustMode = "off" | "enforce";
+export interface RuntimePromptContextSegment {
+    readonly kind: string;
+    readonly sourceId?: string;
+    readonly trust: RuntimePromptContextTrust;
+    readonly content: string;
+    readonly truncated?: boolean;
+    readonly findings?: readonly RuntimeGuardrailDecision[];
+}
+export interface CreateRuntimePromptContextSegmentInput {
+    readonly kind: string;
+    readonly sourceId?: string;
+    readonly trust: RuntimePromptContextTrust;
+    readonly content: string;
+    readonly truncated?: boolean;
+    readonly findings?: readonly RuntimeGuardrailDecision[];
+}
+export interface RuntimePromptContextSegmentOptions {
+    readonly maxCharacters?: number;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/runtime-context/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime-context/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,cAAc,EACf,MAAM,0BAA0B,CAAC;AAElC,eAAO,MAAM,6BAA6B,8BAA+B,CAAC;AAC1E,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,eAAO,MAAM,4BAA4B,gEAK/B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;IACpE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,4BAA4B,EAC5B,aAAa,CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CACpC,KAAK,EAAE,4BAA4B,KAChC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC;CACpC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime-context/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,cAAc,EACf,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEzE,eAAO,MAAM,6BAA6B,8BAA+B,CAAC;AAC1E,MAAM,MAAM,yBAAyB,GACnC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjD,eAAO,MAAM,4BAA4B,gEAK/B,CAAC;AACX,MAAM,MAAM,mBAAmB,GAC7B,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;CAClD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,qBAAqB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,wBAAyB,SAAQ,oBAAoB;IACpE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,8BAA8B,GAAG,IAAI,CAC/C,4BAA4B,EAC5B,aAAa,CACd,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,CACpC,KAAK,EAAE,4BAA4B,KAChC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;CAC5C;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GACjC,QAAQ,GACR,WAAW,GACX,MAAM,GACN,UAAU,GACV,WAAW,CAAC;AAEhB;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,KAAK,GAAG,SAAS,CAAC;AAExD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC"}

package/dist/runtime-context/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime-context/types.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAI1E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS;IACT,eAAe;IACf,UAAU;IACV,WAAW;CACH,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime-context/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAI1E,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,SAAS;IACT,eAAe;IACf,UAAU;IACV,WAAW;CACH,CAAC"}

package/dist/runtime-inspection/accounting.d.ts

@@ -0,0 +1,4 @@
+import { type RuntimeContextAccounting, type RuntimeContextAccountingSegment, type RuntimeContextAccountingSegmentCategory } from "./types.js";
+export declare function normalizeRuntimeContextAccountingSegmentCategory(value: unknown): RuntimeContextAccountingSegmentCategory;
+export declare function createRuntimeContextAccounting(input: readonly RuntimeContextAccountingSegment[]): RuntimeContextAccounting;
+//# sourceMappingURL=accounting.d.ts.map

package/dist/runtime-inspection/accounting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.d.ts","sourceRoot":"","sources":["../../src/runtime-inspection/accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,wBAAwB,EAC7B,KAAK,+BAA+B,EACpC,KAAK,uCAAuC,EAG7C,MAAM,YAAY,CAAC;AAQpB,wBAAgB,gDAAgD,CAC9D,KAAK,EAAE,OAAO,GACb,uCAAuC,CAIzC;AAgED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,+BAA+B,EAAE,GAChD,wBAAwB,CAgH1B"}

package/dist/runtime-inspection/accounting.js

@@ -0,0 +1,145 @@
+import { RUNTIME_CONTEXT_ACCOUNTING_VERSION, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS, } from "./types.js";
+const MAX_ACCOUNTING_SEGMENTS = 10_000;
+const categorySet = new Set(RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES);
+const kindSet = new Set(RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS);
+export function normalizeRuntimeContextAccountingSegmentCategory(value) {
+    return typeof value === "string" && categorySet.has(value)
+        ? value
+        : "other";
+}
+function assertText(value, field) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        throw new TypeError(`${field} must be a non-empty string`);
+    }
+    return value;
+}
+function assertCount(value, field) {
+    if (typeof value !== "number"
+        || !Number.isSafeInteger(value)
+        || value < 0) {
+        throw new TypeError(`${field} must be a non-negative safe integer`);
+    }
+    return value;
+}
+function assertKind(value) {
+    if (typeof value !== "string" || !kindSet.has(value)) {
+        throw new TypeError(`Unknown runtime context segment kind: ${String(value)}`);
+    }
+    return value;
+}
+function assertBoolean(value, field) {
+    if (typeof value !== "boolean") {
+        throw new TypeError(`${field} must be a boolean`);
+    }
+    return value;
+}
+function addCount(current, value, field) {
+    const total = current + value;
+    if (!Number.isSafeInteger(total)) {
+        throw new RangeError(`${field} exceeds the maximum safe integer`);
+    }
+    return total;
+}
+function copySegment(input) {
+    const segment = {
+        id: assertText(input.id, "segment.id"),
+        label: assertText(input.label, "segment.label"),
+        category: normalizeRuntimeContextAccountingSegmentCategory(input.category),
+        kind: assertKind(input.kind),
+        tokens: assertCount(input.tokens, "segment.tokens"),
+        ...(input.characters === undefined
+            ? {}
+            : { characters: assertCount(input.characters, "segment.characters") }),
+        ...(input.items === undefined
+            ? {}
+            : { items: assertCount(input.items, "segment.items") }),
+        ...(input.deferred === undefined
+            ? {}
+            : { deferred: assertBoolean(input.deferred, "segment.deferred") }),
+    };
+    return Object.freeze(segment);
+}
+export function createRuntimeContextAccounting(input) {
+    if (!Array.isArray(input)) {
+        throw new TypeError("Runtime context segments must be an array");
+    }
+    if (input.length > MAX_ACCOUNTING_SEGMENTS) {
+        throw new RangeError(`Runtime context accounting supports at most ${MAX_ACCOUNTING_SEGMENTS} segments`);
+    }
+    const ids = new Set();
+    const segments = input.map((candidate) => {
+        if (!candidate || typeof candidate !== "object") {
+            throw new TypeError("Each runtime context segment must be an object");
+        }
+        const segment = copySegment(candidate);
+        if (ids.has(segment.id)) {
+            throw new TypeError(`Duplicate runtime context segment id: ${segment.id}`);
+        }
+        ids.add(segment.id);
+        return segment;
+    });
+    const categoryTotals = new Map();
+    let promptTokens = 0;
+    let toolSchemaTokens = 0;
+    let messageTokens = 0;
+    let attachmentTokens = 0;
+    let retrievalTokens = 0;
+    for (const segment of segments) {
+        const existing = categoryTotals.get(segment.category) ?? {
+            tokens: 0,
+            segments: 0,
+        };
+        existing.tokens = addCount(existing.tokens, segment.tokens, `category.${segment.category}.tokens`);
+        existing.segments += 1;
+        categoryTotals.set(segment.category, existing);
+        switch (segment.kind) {
+            case "prompt":
+                promptTokens = addCount(promptTokens, segment.tokens, "promptTokens");
+                break;
+            case "tool-schema":
+                toolSchemaTokens = addCount(toolSchemaTokens, segment.tokens, "toolSchemaTokens");
+                break;
+            case "message":
+                messageTokens = addCount(messageTokens, segment.tokens, "messageTokens");
+                break;
+            case "attachment":
+                attachmentTokens = addCount(attachmentTokens, segment.tokens, "attachmentTokens");
+                break;
+            case "retrieval":
+                retrievalTokens = addCount(retrievalTokens, segment.tokens, "retrievalTokens");
+                break;
+        }
+    }
+    const categories = [];
+    for (const category of RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES) {
+        const totals = categoryTotals.get(category);
+        if (!totals)
+            continue;
+        categories.push(Object.freeze({
+            category,
+            tokens: totals.tokens,
+            segments: totals.segments,
+        }));
+    }
+    const totalTokens = [
+        promptTokens,
+        toolSchemaTokens,
+        messageTokens,
+        attachmentTokens,
+        retrievalTokens,
+    ].reduce((total, value) => addCount(total, value, "totalTokens"), 0);
+    return Object.freeze({
+        version: RUNTIME_CONTEXT_ACCOUNTING_VERSION,
+        segments: Object.freeze(segments),
+        categories: Object.freeze(categories),
+        totals: Object.freeze({
+            promptTokens,
+            toolSchemaTokens,
+            messageTokens,
+            attachmentTokens,
+            retrievalTokens,
+            totalTokens,
+        }),
+    });
+}
+//# sourceMappingURL=accounting.js.map

package/dist/runtime-inspection/accounting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounting.js","sourceRoot":"","sources":["../../src/runtime-inspection/accounting.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,6CAA6C,EAC7C,wCAAwC,GAMzC,MAAM,YAAY,CAAC;AAEpB,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,6CAA6C,CAC9C,CAAC;AACF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS,wCAAwC,CAAC,CAAC;AAE1E,MAAM,UAAU,gDAAgD,CAC9D,KAAc;IAEd,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QACxD,CAAC,CAAC,KAAgD;QAClD,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IACE,OAAO,KAAK,KAAK,QAAQ;WACtB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;WAC5B,KAAK,GAAG,CAAC,EACZ,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,yCAAyC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAA4C,CAAC;AACtD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe,EAAE,KAAa,EAAE,KAAa;IAC7D,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAClB,KAAsC;IAEtC,MAAM,OAAO,GAAoC;QAC/C,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC;QACtC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC;QAC/C,QAAQ,EAAE,gDAAgD,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1E,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;QACnD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;YAChC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS;YAC3B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAAE,CAAC;KACrE,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC5C,KAAiD;IAEjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QAC3C,MAAM,IAAI,UAAU,CAClB,+CAA+C,uBAAuB,WAAW,CAClF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACvC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChD,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,SAAS,CAAC,yCAAyC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACpB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,GAAG,EAG3B,CAAC;IACJ,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI;YACvD,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;SACZ,CAAC;QACF,QAAQ,CAAC,MAAM,GAAG,QAAQ,CACxB,QAAQ,CAAC,MAAM,EACf,OAAO,CAAC,MAAM,EACd,YAAY,OAAO,CAAC,QAAQ,SAAS,CACtC,CAAC;QACF,QAAQ,CAAC,QAAQ,IAAI,CAAC,CAAC;QACvB,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAE/C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,QAAQ;gBACX,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;gBACtE,MAAM;YACR,KAAK,aAAa;gBAChB,gBAAgB,GAAG,QAAQ,CACzB,gBAAgB,EAChB,OAAO,CAAC,MAAM,EACd,kBAAkB,CACnB,CAAC;gBACF,MAAM;YACR,KAAK,SAAS;gBACZ,aAAa,GAAG,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;gBACzE,MAAM;YACR,KAAK,YAAY;gBACf,gBAAgB,GAAG,QAAQ,CACzB,gBAAgB,EAChB,OAAO,CAAC,MAAM,EACd,kBAAkB,CACnB,CAAC;gBACF,MAAM;YACR,KAAK,WAAW;gBACd,eAAe,GAAG,QAAQ,CACxB,eAAe,EACf,OAAO,CAAC,MAAM,EACd,iBAAiB,CAClB,CAAC;gBACF,MAAM;QACV,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,QAAQ,IAAI,6CAA6C,EAAE,CAAC;QACrE,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC,CAAC;IACN,CAAC;IAED,MAAM,WAAW,GAAG;QAClB,YAAY;QACZ,gBAAgB;QAChB,aAAa;QACb,gBAAgB;QAChB,eAAe;KAChB,CAAC,MAAM,CACN,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,EACvD,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,YAAY;YACZ,gBAAgB;YAChB,aAAa;YACb,gBAAgB;YAChB,eAAe;YACf,WAAW;SACZ,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime-inspection/index.d.ts

@@ -0,0 +1,4 @@
+export { RUNTIME_CONTEXT_ACCOUNTING_VERSION, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS, } from "./types.js";
+export { createRuntimeContextAccounting, normalizeRuntimeContextAccountingSegmentCategory, } from "./accounting.js";
+export type { RuntimeContextAccounting, RuntimeContextAccountingSegment, RuntimeContextAccountingSegmentCategory, RuntimeContextAccountingSegmentKind, RuntimeContextAccountingTotals, RuntimeContextCategoryAccounting, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime-inspection/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runtime-inspection/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,6CAA6C,EAC7C,wCAAwC,GACzC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,8BAA8B,EAC9B,gDAAgD,GACjD,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,wBAAwB,EACxB,+BAA+B,EAC/B,uCAAuC,EACvC,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,YAAY,CAAC"}

package/dist/runtime-inspection/index.js

@@ -0,0 +1,3 @@
+export { RUNTIME_CONTEXT_ACCOUNTING_VERSION, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES, RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS, } from "./types.js";
+export { createRuntimeContextAccounting, normalizeRuntimeContextAccountingSegmentCategory, } from "./accounting.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime-inspection/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime-inspection/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,6CAA6C,EAC7C,wCAAwC,GACzC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,8BAA8B,EAC9B,gDAAgD,GACjD,MAAM,iBAAiB,CAAC"}

package/dist/runtime-inspection/types.d.ts

@@ -0,0 +1,40 @@
+export declare const RUNTIME_CONTEXT_ACCOUNTING_VERSION: 1;
+export declare const RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES: readonly ["instructions", "memory", "brain", "skills", "tools", "workspace", "runtime", "conversation", "attachments", "retrieval", "other"];
+export type RuntimeContextAccountingSegmentCategory = (typeof RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES)[number];
+export declare const RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS: readonly ["prompt", "tool-schema", "message", "attachment", "retrieval"];
+export type RuntimeContextAccountingSegmentKind = (typeof RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS)[number];
+/**
+ * Secret-free accounting metadata for one model-context contribution.
+ * Content is deliberately absent: inspectors receive size and provenance,
+ * never prompt text, credentials, messages, or retrieved documents.
+ */
+export interface RuntimeContextAccountingSegment {
+    readonly id: string;
+    readonly label: string;
+    readonly category: RuntimeContextAccountingSegmentCategory;
+    readonly kind: RuntimeContextAccountingSegmentKind;
+    readonly tokens: number;
+    readonly characters?: number;
+    readonly items?: number;
+    readonly deferred?: boolean;
+}
+export interface RuntimeContextCategoryAccounting {
+    readonly category: RuntimeContextAccountingSegmentCategory;
+    readonly tokens: number;
+    readonly segments: number;
+}
+export interface RuntimeContextAccountingTotals {
+    readonly promptTokens: number;
+    readonly toolSchemaTokens: number;
+    readonly messageTokens: number;
+    readonly attachmentTokens: number;
+    readonly retrievalTokens: number;
+    readonly totalTokens: number;
+}
+export interface RuntimeContextAccounting {
+    readonly version: typeof RUNTIME_CONTEXT_ACCOUNTING_VERSION;
+    readonly segments: readonly RuntimeContextAccountingSegment[];
+    readonly categories: readonly RuntimeContextCategoryAccounting[];
+    readonly totals: RuntimeContextAccountingTotals;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime-inspection/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/runtime-inspection/types.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAE7D,eAAO,MAAM,6CAA6C,8IAYhD,CAAC;AAEX,MAAM,MAAM,uCAAuC,GACjD,CAAC,OAAO,6CAA6C,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,eAAO,MAAM,wCAAwC,0EAM3C,CAAC;AAEX,MAAM,MAAM,mCAAmC,GAC7C,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,uCAAuC,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,mCAAmC,CAAC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,uCAAuC,CAAC;IAC3D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,kCAAkC,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,SAAS,gCAAgC,EAAE,CAAC;IACjE,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;CACjD"}

package/dist/runtime-inspection/types.js

@@ -0,0 +1,22 @@
+export const RUNTIME_CONTEXT_ACCOUNTING_VERSION = 1;
+export const RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_CATEGORIES = [
+    "instructions",
+    "memory",
+    "brain",
+    "skills",
+    "tools",
+    "workspace",
+    "runtime",
+    "conversation",
+    "attachments",
+    "retrieval",
+    "other",
+];
+export const RUNTIME_CONTEXT_ACCOUNTING_SEGMENT_KINDS = [
+    "prompt",
+    "tool-schema",
+    "message",
+    "attachment",
+    "retrieval",
+];
+//# sourceMappingURL=types.js.map

package/dist/runtime-inspection/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runtime-inspection/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAU,CAAC;AAE7D,MAAM,CAAC,MAAM,6CAA6C,GAAG;IAC3D,cAAc;IACd,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,WAAW;IACX,SAAS;IACT,cAAc;IACd,aAAa;IACb,WAAW;IACX,OAAO;CACC,CAAC;AAKX,MAAM,CAAC,MAAM,wCAAwC,GAAG;IACtD,QAAQ;IACR,aAAa;IACb,SAAS;IACT,YAAY;IACZ,WAAW;CACH,CAAC"}

package/dist/task-runner.d.ts

@@ -32,6 +32,7 @@ export declare class TaskRunner {
      * The callback is typically the assessment pipeline (handleResult).
      */
     collectResults(onResult: (taskId: string, result: TaskResult) => Promise<void> | void): Promise<void>;
+    private emitGuardrailEvents;
     /**
      * Read the JSONL activity log for a killed run and produce a human-readable
      * diagnosis of what the agent was doing when it timed out.

package/dist/task-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-runner.d.ts","sourceRoot":"","sources":["../src/task-runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAkBjE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAiB,CAAC;AAsC3D;;GAEG;AACH,qBAAa,UAAU;IAeT,OAAO,CAAC,GAAG;IAdvB,OAAO,CAAC,WAAW,CAAqB;IACxC,gFAAgF;IAChF,OAAO,CAAC,YAAY,CAA6B;IACjD,iFAAiF;IACjF,OAAO,CAAC,UAAU,CAAkC;IACpD;;;;;;OAMG;IACH,OAAO,CAAC,aAAa,CAAsC;gBAEvC,GAAG,EAAE,mBAAmB;YAE9B,yBAAyB;IAgBvC;;;OAGG;IACG,cAAc,CAClB,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GACrE,OAAO,CAAC,IAAI,CAAC;IAmDhB;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAyF7B;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsD1C;qFACiF;IAC3E,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAyDhD;;;OAGG;IACG,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;IA8E7C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIpC,4EAA4E;YAC9D,eAAe;IA+BvB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAmP7C,OAAO,CAAC,iBAAiB;CAK1B"}
+{"version":3,"file":"task-runner.d.ts","sourceRoot":"","sources":["../src/task-runner.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAErE,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAgB,MAAM,YAAY,CAAC;AAqBjE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,QAAiB,CAAC;AAsC3D;;GAEG;AACH,qBAAa,UAAU;IAeT,OAAO,CAAC,GAAG;IAdvB,OAAO,CAAC,WAAW,CAAqB;IACxC,gFAAgF;IAChF,OAAO,CAAC,YAAY,CAA6B;IACjD,iFAAiF;IACjF,OAAO,CAAC,UAAU,CAAkC;IACpD;;;;;;OAMG;IACH,OAAO,CAAC,aAAa,CAAsC;gBAEvC,GAAG,EAAE,mBAAmB;YAE9B,yBAAyB;IAgBvC;;;OAGG;IACG,cAAc,CAClB,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GACrE,OAAO,CAAC,IAAI,CAAC;YAoDF,mBAAmB;IAqCjC;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAyF7B;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,IAAI,CAAC;IAsD1C;qFACiF;IAC3E,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC;IAyDhD;;;OAGG;IACG,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC;IA8E7C,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAIpC,4EAA4E;YAC9D,eAAe;IA+BvB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IA4R7C,OAAO,CAAC,iBAAiB;CAK1B"}

package/dist/task-runner.js

@@ -4,7 +4,7 @@ import { agentMemoryScope } from "./memory-store.js";
 import { resolveExecutionMode } from "./execution-mode.js";
 import { resolveRuntimeSandboxOptions } from "./runtime-sandbox.js";
 import { resolveConfiguredModelSelection } from "./model-profiles.js";
-import { resolveRuntimeContext, } from "./runtime-context/index.js";
+import { createRuntimePromptContextSegment, resolveRuntimeContext, } from "./runtime-context/index.js";
 import { createExecutionRouteResolvedEvent, resolveTaskExecutionRoute, } from "./execution-router.js";
 /**
  * Durable turns: max age of a resume checkpoint before orphan recovery
@@ -86,6 +86,7 @@ export class TaskRunner {
     async collectResults(onResult) {
         const terminalRuns = await this.ctx.runStore.getTerminalRuns();
         for (const run of terminalRuns) {
+            await this.emitGuardrailEvents(run);
             // Persist sessionId on the task before acknowledging the run.
             const sid = run.sessionId ?? run.activity.sessionId;
             if (sid) {
@@ -138,6 +139,43 @@ export class TaskRunner {
             this.staleWarned.delete(run.taskId);
         }
     }
+    async emitGuardrailEvents(run) {
+        const byId = new Map();
+        const sid = run.sessionId ?? run.activity.sessionId;
+        if (sid) {
+            try {
+                const entries = await this.ctx.logStore.getSessionEntries(sid);
+                for (const entry of entries) {
+                    if (entry.event !== "transcript:guardrail_decision")
+                        continue;
+                    const data = entry.data;
+                    const event = data?.event;
+                    if (!event)
+                        continue;
+                    const id = event?.decision?.id;
+                    if (data?.type === "guardrail_decision" && typeof id === "string") {
+                        byId.set(id, event);
+                    }
+                }
+            }
+            catch {
+                // Activity is the bounded fallback when transcript storage is down.
+            }
+        }
+        for (const event of run.activity.guardrailDecisions ?? []) {
+            const id = event?.decision?.id;
+            if (typeof id === "string" && !byId.has(id))
+                byId.set(id, event);
+        }
+        for (const event of byId.values()) {
+            this.ctx.emitter.emit("runtime:guardrail", {
+                runId: run.id,
+                taskId: run.taskId,
+                agentName: run.agentName,
+                event,
+            });
+        }
+    }
     /**
      * Read the JSONL activity log for a killed run and produce a human-readable
      * diagnosis of what the agent was doing when it timed out.
@@ -526,25 +564,45 @@ export class TaskRunner {
                 throw new Error("Runtime context retrieval failed");
             }
             const executionRoute = await this.resolveTaskExecutionRoute(task, agent);
-            // Inject context into task description for agent awareness.
-            // Context is prepended using XML-like tags that the agent prompt can reference.
+            const contextTrust = this.ctx.config.settings.contextTrust === "enforce"
+                ? "enforce"
+                : "off";
+            // Build both representations during the opt-in window. Enforced runs keep
+            // metadata structural; disabled runs preserve the historical task prompt.
+            const promptContextSegments = [];
+            const legacyContextParts = [];
             const taskWithContext = {
                 ...task,
                 ...(executionRoute?.mode === "loop"
                     ? { loop: executionRoute.loop }
                     : {}),
             };
-            const contextParts = [];
             // 1. Shared memory (persistent cross-session knowledge, visible to all agents)
             const sharedMemory = (await this.ctx.memoryStore?.get()) ?? "";
             if (sharedMemory) {
-                contextParts.push(`<shared-memory>\n${sharedMemory}\n</shared-memory>`);
+                legacyContextParts.push(`<shared-memory>\n${sharedMemory}\n</shared-memory>`);
+                if (contextTrust === "enforce") {
+                    promptContextSegments.push(createRuntimePromptContextSegment({
+                        kind: "memory.shared",
+                        sourceId: "project",
+                        trust: "untrusted",
+                        content: sharedMemory,
+                    }));
+                }
             }
             // 1b. Agent-specific memory (private knowledge for the assigned agent)
             if (task.assignTo) {
                 const agentMem = (await this.ctx.memoryStore?.get(agentMemoryScope(task.assignTo))) ?? "";
                 if (agentMem) {
-                    contextParts.push(`<agent-memory agent="${task.assignTo}">\n${agentMem}\n</agent-memory>`);
+                    legacyContextParts.push(`<agent-memory agent="${task.assignTo}">\n${agentMem}\n</agent-memory>`);
+                    if (contextTrust === "enforce") {
+                        promptContextSegments.push(createRuntimePromptContextSegment({
+                            kind: "memory.agent",
+                            sourceId: task.assignTo,
+                            trust: "untrusted",
+                            content: agentMem,
+                        }));
+                    }
                 }
             }
             // 2. Mission context — if this task belongs to a mission, include the mission goal and sibling tasks
@@ -552,16 +610,24 @@ export class TaskRunner {
                 try {
                     // Resolve mission via direct ID (preferred) or group name (legacy fallback)
                     const mission = await resolveMissionForTask(resolveMissionStore(this.ctx), task);
-                    const missionParts = [];
+                    const legacyMissionParts = [];
                     // Original user prompt that generated this mission (the "why")
                     if (mission?.prompt) {
-                        missionParts.push(`Mission goal: ${mission.prompt}`);
+                        legacyMissionParts.push(`Mission goal: ${mission.prompt}`);
+                        if (contextTrust === "enforce") {
+                            promptContextSegments.push(createRuntimePromptContextSegment({
+                                kind: "mission.goal",
+                                sourceId: mission.id,
+                                trust: "user",
+                                content: mission.prompt,
+                            }));
+                        }
                     }
                     // Sibling tasks — just titles and statuses for awareness, not full descriptions
                     const allTasks = await this.ctx.taskStore.listTasks();
                     const siblings = allTasks.filter(t => t.group === task.group && t.id !== task.id);
                     if (siblings.length > 0) {
-                        missionParts.push(`Other tasks in this mission:`);
+                        const missionParts = [`Other tasks in this mission:`];
                         for (const s of siblings) {
                             const marker = s.status === "done" ? "[done]"
                                 : s.status === "in_progress" ? "[in progress]"
@@ -569,16 +635,28 @@ export class TaskRunner {
                                         : "[pending]";
                             missionParts.push(`  ${marker} "${s.title}" → ${s.assignTo}`);
                         }
+                        legacyMissionParts.push(...missionParts);
+                        if (contextTrust === "enforce") {
+                            promptContextSegments.push(createRuntimePromptContextSegment({
+                                kind: "mission.status",
+                                sourceId: mission?.id ?? task.group,
+                                trust: "untrusted",
+                                content: missionParts.join("\n"),
+                            }));
+                        }
                     }
-                    if (missionParts.length > 0) {
-                        contextParts.push(`<mission-context>\n${missionParts.join("\n")}\n</mission-context>`);
+                    if (legacyMissionParts.length > 0) {
+                        legacyContextParts.push(`<mission-context>\n${legacyMissionParts.join("\n")}\n</mission-context>`);
                     }
                 }
                 catch { /* best effort — mission may have been deleted */ }
             }
-            if (contextParts.length > 0) {
-                taskWithContext.description = contextParts.join("\n\n") + "\n\n" + task.description;
-            }
+            const taskForRun = contextTrust === "enforce" || legacyContextParts.length === 0
+                ? taskWithContext
+                : {
+                    ...taskWithContext,
+                    description: `${legacyContextParts.join("\n\n")}\n\n${task.description}`,
+                };
             // Durable turns: consume (one-shot) a checkpoint harvested by orphan
             // recovery — the runner resumes the conversation at turn + 1 instead
             // of redoing completed work. Absent checkpoint = spawn from zero.
@@ -601,10 +679,14 @@ export class TaskRunner {
                 taskId: task.id,
                 executionMode,
                 sandbox,
+                ...(contextTrust === "enforce"
+                    ? { contextTrust, promptContextSegments }
+                    : {}),
+                guardrails: this.ctx.config.settings.guardrails,
                 runtimeContext,
                 executionRoute,
                 agent,
-                task: taskWithContext,
+                task: taskForRun,
                 polpoDir: this.ctx.polpoDir,
                 cwd: this.ctx.agentWorkDir,
                 outputDir,