@qduc/term2 0.11.1 → 0.12.0

package/dist/services/agent-runtime/structured-output.js

@@ -1,3 +1,4 @@
+import deepEqual from 'fast-deep-equal';
 /**
  * Supported JSON Schema keywords for the bounded inline validator.
  * Keywords outside this set are rejected before execution with a typed error.
@@ -152,27 +153,6 @@ function matchesType(value, t) {
             return false;
     }
 }
-/** Simple deep equality for enum value comparison. */
-function deepEqual(a, b) {
-    if (a === b)
-        return true;
-    if (typeof a !== typeof b)
-        return false;
-    if (typeof a !== 'object' || a === null || b === null)
-        return false;
-    if (Array.isArray(a) && Array.isArray(b)) {
-        if (a.length !== b.length)
-            return false;
-        return a.every((item, i) => deepEqual(item, b[i]));
-    }
-    if (Array.isArray(a) !== Array.isArray(b))
-        return false;
-    const keysA = Object.keys(a);
-    const keysB = Object.keys(b);
-    if (keysA.length !== keysB.length)
-        return false;
-    return keysA.every((key) => deepEqual(a[key], b[key]));
-}
 /**
  * Validate the schema itself (keywords check) and return a structured
  * error or null. The caller should reject execution if non-null.

package/dist/services/agent-runtime/structured-output.js.map

@@ -1 +1 @@
-{"version":3,"file":"structured-output.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/structured-output.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,MAAM;IACN,YAAY;IACZ,UAAU;IACV,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,aAAa;IACb,OAAO;IACP,oEAAoE;IACpE,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,uDAAuD;QACvD,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAqC,CAAC,CAAC;oBAC7E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;wBACxB,WAAW,CAAC,IAAI,CAAC,cAAc,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9G,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAA4B,CAAC,CAAC;YAC9E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,MAA+B,EAAE,IAAI,GAAG,GAAG;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,mDAAmD;IACpE,CAAC;IAED,aAAa;IACb,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,UAA+B,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,yCAAyC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAqC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAElD,iBAAiB;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,gCAAgC,MAAM,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,IAAI,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3G,MAAM,YAAY,GAAG,qBAAqB,CACxC,QAAQ,CAAC,GAAG,CAAC,EACb,UAAqC,EACrC,GAAG,IAAI,IAAI,GAAG,EAAE,CACjB,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;QAChC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAqC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7G,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,KAAc,EAAE,UAA6B,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEpE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,IAAI,cAAc,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,OAAO,KAAK,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,CAAS;IAC5C,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAE,CAAS,CAAC,GAAG,CAAC,EAAG,CAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,yCAAyC,WAAW,CAAC,IAAI,CAChE,IAAI,CACL,wGAAwG;SAC1G,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO;;;;;;EAMP,UAAU;;EAEV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,MAAuB;IAEvB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mCAAmC,GAAG,CAAC,OAAO,EAAE;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,+CAA+C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAW,EAAE,CAAC;AAChC,CAAC"}
+{"version":3,"file":"structured-output.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/structured-output.ts"],"names":[],"mappings":"AACA,OAAO,SAAS,MAAM,iBAAiB,CAAC;AAExC;;;GAGG;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,MAAM;IACN,YAAY;IACZ,UAAU;IACV,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,aAAa;IACb,OAAO;IACP,oEAAoE;IACpE,SAAS;CACV,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA+B;IACpE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,uDAAuD;QACvD,IAAI,GAAG,KAAK,YAAY,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAA4B,CAAC;YACrD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;oBACxF,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAqC,CAAC,CAAC;oBAC7E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;wBACxB,WAAW,CAAC,IAAI,CAAC,cAAc,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,IAAI,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9G,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAA4B,CAAC,CAAC;YAC9E,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;gBACxB,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,MAA+B,EAAE,IAAI,GAAG,GAAG;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,aAAa;IACb,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,mDAAmD;IACpE,CAAC;IAED,aAAa;IACb,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,EAAE,UAA+B,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClH,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC;QAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,EAAE,CAAC;gBAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,GAAG,yCAAyC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IACE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EACrB,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAqC,CAAC;QAC3D,MAAM,QAAQ,GAAG,KAAgC,CAAC;QAElD,iBAAiB;QACjB,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,gCAAgC,MAAM,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,IAAI,GAAG,IAAI,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3G,MAAM,YAAY,GAAG,qBAAqB,CACxC,QAAQ,CAAC,GAAG,CAAC,EACb,UAAqC,EACrC,GAAG,IAAI,IAAI,GAAG,EAAE,CACjB,CAAC;gBACF,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC;QAChC,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAqC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC7G,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,SAAS,SAAS,CAAC,KAAc,EAAE,UAA6B,EAAE,IAAY;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAEpE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IAED,OAAO,GAAG,IAAI,cAAc,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,OAAO,KAAK,EAAE,CAAC;AACnH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,CAAS;IAC5C,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E;YACE,OAAO,KAAK,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACzF,CAAC;IACD,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,yCAAyC,WAAW,CAAC,IAAI,CAChE,IAAI,CACL,wGAAwG;SAC1G,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAuB;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO;;;;;;EAMP,UAAU;;EAEV,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,SAAiB,EACjB,MAAuB;IAEvB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,mCAAmC,GAAG,CAAC,OAAO,EAAE;aAC1D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,+CAA+C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aACtF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAW,EAAE,CAAC;AAChC,CAAC"}

package/dist/services/agent-runtime/tool-invocation-context.d.ts

@@ -0,0 +1,73 @@
+import type { ApprovalRecord } from '../approval/approval-replay.js';
+/**
+ * A tool call identified for approval decisions. Typed replacement for the
+ * shape-probing (`item.toolName ?? item.rawItem?.name`) the SDK's RunContext
+ * accepted.
+ */
+export interface ApprovalItem {
+    toolName: string;
+    callId: string;
+}
+/**
+ * The approval half of the removed SDK's RunContext, as an application-owned
+ * typed ledger. Semantics are pinned by `approval-replay.test.ts` and the
+ * parent plan's *ApprovalRecord semantics* section — preserve them exactly:
+ *
+ * - the record is keyed by tool name, not call id;
+ * - `approved: true` / `rejected: true` are blanket decisions covering every
+ *   call of that tool;
+ * - `approved: string[]` / `rejected: string[]` are per-call decisions;
+ * - `false` (from `isToolApproved`) carries no decision at all — it is what a
+ *   blanket decision on the other side leaves behind;
+ * - a blanket approval outranks a blanket rejection (enforced by
+ *   `replayApprovals` ordering, which replays rejections first).
+ *
+ * It does NOT carry the run's user context — that lives on
+ * {@link ToolInvocationContext.context}. Splitting the two is the point: the
+ * old RunContext conflated a ledger with a context bag.
+ */
+export declare class ApprovalLedger {
+    #private;
+    approveTool(item: ApprovalItem, options?: {
+        alwaysApprove?: boolean;
+    }): void;
+    rejectTool(item: ApprovalItem, options?: {
+        alwaysReject?: boolean;
+        message?: string;
+    }): void;
+    isToolApproved(input: {
+        toolName: string;
+        callId: string;
+    }): boolean | undefined;
+    getRejectionMessage(toolName: string, callId: string): string | undefined;
+    /**
+     * Plain copy of the ledger for parent→child replay (replaces the old
+     * `toJSON()` structural probe in `readParentApprovals`). Same record shape
+     * `replayApprovals` consumes, so a snapshot replays into a fresh ledger.
+     */
+    snapshot(): Readonly<Record<string, ApprovalRecord>>;
+}
+/**
+ * Per-run tool invocation context handed to `execute` / `invoke` /
+ * `needsApproval` by the application run loop. Replaces the raw options object
+ * the loop used to pass (which is why subagent bookkeeping — F2 — and parent
+ * approval replay — F5 — were both dead).
+ */
+export interface ToolInvocationContext<T = unknown> {
+    /** The run's user context (e.g. SubagentRunContext), from run options. */
+    readonly context: T;
+    /** This run's approval ledger; decisions made in this run accumulate here. */
+    readonly approvals: ApprovalLedger;
+    readonly signal?: AbortSignal;
+    /**
+     * The run's turn budget, owned and counted by the loop. `count` is the turn
+     * currently executing (1-based); `max` is undefined for an unbounded run.
+     * Tools read this to warn the model as the budget runs out.
+     */
+    readonly turn?: TurnBudget;
+}
+export interface TurnBudget {
+    readonly count: number;
+    readonly max?: number;
+}
+//# sourceMappingURL=tool-invocation-context.d.ts.map

package/dist/services/agent-runtime/tool-invocation-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-invocation-context.d.ts","sourceRoot":"","sources":["../../../source/services/agent-runtime/tool-invocation-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,cAAc;;IAGzB,WAAW,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,GAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,IAAI,CAM/E;IAED,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,GAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,IAAI,CAQ/F;IAED,cAAc,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,GAAG,SAAS,CAQ/E;IAED,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGxE;IAED;;;;OAIG;IACH,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAEnD;CACF;AAED;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB,CAAC,CAAC,GAAG,OAAO;IAChD,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB"}

package/dist/services/agent-runtime/tool-invocation-context.js

@@ -0,0 +1,66 @@
+/**
+ * The approval half of the removed SDK's RunContext, as an application-owned
+ * typed ledger. Semantics are pinned by `approval-replay.test.ts` and the
+ * parent plan's *ApprovalRecord semantics* section — preserve them exactly:
+ *
+ * - the record is keyed by tool name, not call id;
+ * - `approved: true` / `rejected: true` are blanket decisions covering every
+ *   call of that tool;
+ * - `approved: string[]` / `rejected: string[]` are per-call decisions;
+ * - `false` (from `isToolApproved`) carries no decision at all — it is what a
+ *   blanket decision on the other side leaves behind;
+ * - a blanket approval outranks a blanket rejection (enforced by
+ *   `replayApprovals` ordering, which replays rejections first).
+ *
+ * It does NOT carry the run's user context — that lives on
+ * {@link ToolInvocationContext.context}. Splitting the two is the point: the
+ * old RunContext conflated a ledger with a context bag.
+ */
+export class ApprovalLedger {
+    #approvals = {};
+    approveTool(item, options = {}) {
+        const current = this.#approvals[item.toolName] ?? { approved: [], rejected: [] };
+        current.approved = options.alwaysApprove
+            ? true
+            : [...(Array.isArray(current.approved) ? current.approved : []), item.callId];
+        this.#approvals[item.toolName] = current;
+    }
+    rejectTool(item, options = {}) {
+        const current = this.#approvals[item.toolName] ?? { approved: [], rejected: [] };
+        current.rejected = options.alwaysReject
+            ? true
+            : [...(Array.isArray(current.rejected) ? current.rejected : []), item.callId];
+        if (options.message)
+            current.messages = { ...(current.messages ?? {}), [item.callId]: options.message };
+        if (options.alwaysReject && options.message)
+            current.stickyRejectMessage = options.message;
+        this.#approvals[item.toolName] = current;
+    }
+    isToolApproved(input) {
+        const record = this.#approvals[input.toolName];
+        if (!record)
+            return undefined;
+        if (record.approved === true)
+            return true;
+        if (record.rejected === true)
+            return false;
+        if (Array.isArray(record.approved) && record.approved.includes(input.callId))
+            return true;
+        if (Array.isArray(record.rejected) && record.rejected.includes(input.callId))
+            return false;
+        return undefined;
+    }
+    getRejectionMessage(toolName, callId) {
+        const record = this.#approvals[toolName];
+        return record?.messages?.[callId] ?? record?.stickyRejectMessage;
+    }
+    /**
+     * Plain copy of the ledger for parent→child replay (replaces the old
+     * `toJSON()` structural probe in `readParentApprovals`). Same record shape
+     * `replayApprovals` consumes, so a snapshot replays into a fresh ledger.
+     */
+    snapshot() {
+        return structuredClone(this.#approvals);
+    }
+}
+//# sourceMappingURL=tool-invocation-context.js.map

package/dist/services/agent-runtime/tool-invocation-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-invocation-context.js","sourceRoot":"","sources":["../../../source/services/agent-runtime/tool-invocation-context.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,cAAc;IACzB,UAAU,GAAmC,EAAE,CAAC;IAEhD,WAAW,CAAC,IAAkB,EAAE,OAAO,GAAgC,EAAE;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACjF,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,aAAa;YACtC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,IAAkB,EAAE,OAAO,GAAiD,EAAE;QACvF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QACjF,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,YAAY;YACrC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;QACxG,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;QAC3F,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;IAC3C,CAAC;IAED,cAAc,CAAC,KAA2C;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3F,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mBAAmB,CAAC,QAAgB,EAAE,MAAc;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,mBAAmB,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACH,QAAQ;QACN,OAAO,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/services/agent-stream.d.ts

@@ -1,3 +1,42 @@
-import { type StreamedRunResult } from '@openai/agents';
-export type AgentStream = StreamedRunResult<any, any>;
+/**
+ * Application-owned stream handle consumed by the conversation/session layer.
+ *
+ * Provider adapters may back this with any runtime implementation, but the
+ * session layer only relies on this small surface: events can be iterated,
+ * terminal state can be observed, and the accumulated turn snapshots remain
+ * available for replay/finalization.  Keeping continuation state opaque here
+ * prevents the session layer from depending on a provider runner's type.
+ */
+import type { ContinuationHandle } from '../contracts/continuation-handle.js';
+import type { ApplicationRunEvent } from '../contracts/application-stream.js';
+declare const APPLICATION_STREAM: unique symbol;
+type UnbrandedAgentStream = Omit<AgentStream, typeof APPLICATION_STREAM>;
+export interface AgentStream {
+    readonly [APPLICATION_STREAM]: true;
+    [Symbol.asyncIterator](): AsyncIterator<ApplicationRunEvent>;
+    completed: Promise<unknown>;
+    history: unknown[];
+    newItems: unknown[];
+    output: unknown[];
+    finalOutput?: string;
+    lastResponseId?: string | null;
+    interruptions?: unknown[];
+    /** Opaque for new callers; legacy approval persistence still carries it through. */
+    state?: ContinuationHandle;
+    cancelled?: boolean;
+    rawResponses?: unknown[];
+    /** Authoritative cumulative usage for the run, exposed separately from opaque continuation state. */
+    runUsage?: unknown;
+    /** Cumulative model-request cost records for the run, when the runner records them. */
+    runCostRecords?: unknown[];
+}
+/** Select provider items from the current run, falling back to full history. */
+export declare function selectAgentStreamItems(stream: Pick<AgentStream, 'output' | 'newItems' | 'history'>): unknown[];
+/** Return whether a value is the application-owned stream representation. */
+export declare function isAgentStream(value: unknown): value is AgentStream;
+/** Assert that a value is the application-owned stream representation. */
+export declare function assertAgentStream(value: unknown): asserts value is AgentStream;
+/** Construct the only branded application stream representation. */
+export declare function createAgentStream(stream: UnbrandedAgentStream): AgentStream;
+export {};
 //# sourceMappingURL=agent-stream.d.ts.map

package/dist/services/agent-stream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-stream.d.ts","sourceRoot":"","sources":["../../source/services/agent-stream.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC"}
+{"version":3,"file":"agent-stream.d.ts","sourceRoot":"","sources":["../../source/services/agent-stream.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,QAAA,MAAM,kBAAkB,eAA+B,CAAC;AAExD,KAAK,oBAAoB,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,kBAAkB,CAAC,CAAC;AAEzE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,kBAAkB,CAAC,EAAE,IAAI,CAAC;IACpC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,mBAAmB,CAAC,CAAC;IAE7D,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,MAAM,EAAE,OAAO,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,oFAAoF;IACpF,KAAK,CAAC,EAAE,kBAAkB,CAAC;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;IACzB,qGAAqG;IACrG,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uFAAuF;IACvF,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;CAC5B;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC,GAAG,OAAO,EAAE,CAK9G;AAsBD,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAMlE;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAE9E;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,oBAAoB,GAAG,WAAW,CAM3E"}

package/dist/services/agent-stream.js

@@ -1,2 +1,47 @@
-export {};
+const APPLICATION_STREAM = Symbol('application-stream');
+/** Select provider items from the current run, falling back to full history. */
+export function selectAgentStreamItems(stream) {
+    const output = projectProviderItems(Array.isArray(stream.output) ? stream.output : []);
+    const newItems = projectProviderItems(Array.isArray(stream.newItems) ? stream.newItems : []);
+    const history = Array.isArray(stream.history) ? stream.history : [];
+    return newItems.length > 0 ? newItems : output.length > 0 ? output : history;
+}
+function projectProviderItems(items) {
+    return items.flatMap((item) => {
+        if (!item || typeof item !== 'object' || Array.isArray(item))
+            return [];
+        const event = item;
+        if (event.type === 'item' && event.item && typeof event.item === 'object')
+            return [event.item];
+        if (event.type === 'text_delta' ||
+            event.type === 'reasoning_delta' ||
+            event.type === 'codex_rate_limits' ||
+            event.type === 'tool_call_streaming_delta' ||
+            event.type === 'context_compaction_started' ||
+            event.type === 'context_compaction_completed' ||
+            event.type === 'usage_update') {
+            return [];
+        }
+        return [item];
+    });
+}
+/** Return whether a value is the application-owned stream representation. */
+export function isAgentStream(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        value[APPLICATION_STREAM] === true);
+}
+/** Assert that a value is the application-owned stream representation. */
+export function assertAgentStream(value) {
+    if (!isAgentStream(value))
+        throw new TypeError('Expected a branded AgentStream');
+}
+/** Construct the only branded application stream representation. */
+export function createAgentStream(stream) {
+    return Object.defineProperty(stream, APPLICATION_STREAM, {
+        value: true,
+        enumerable: false,
+        writable: false,
+    });
+}
 //# sourceMappingURL=agent-stream.js.map

package/dist/services/agent-stream.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-stream.js","sourceRoot":"","sources":["../../source/services/agent-stream.ts"],"names":[],"mappings":""}
+{"version":3,"file":"agent-stream.js","sourceRoot":"","sources":["../../source/services/agent-stream.ts"],"names":[],"mappings":"AAYA,MAAM,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAyBxD,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,MAA4D;IACjG,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAyB;IACrD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,IAA+B,CAAC;QAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/F,IACE,KAAK,CAAC,IAAI,KAAK,YAAY;YAC3B,KAAK,CAAC,IAAI,KAAK,iBAAiB;YAChC,KAAK,CAAC,IAAI,KAAK,mBAAmB;YAClC,KAAK,CAAC,IAAI,KAAK,2BAA2B;YAC1C,KAAK,CAAC,IAAI,KAAK,4BAA4B;YAC3C,KAAK,CAAC,IAAI,KAAK,8BAA8B;YAC7C,KAAK,CAAC,IAAI,KAAK,cAAc,EAC7B,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACb,KAA6D,CAAC,kBAAkB,CAAC,KAAK,IAAI,CAC5F,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;AACnF,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,MAA4B;IAC5D,OAAO,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,kBAAkB,EAAE;QACvD,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;KAChB,CAAgB,CAAC;AACpB,CAAC"}

package/dist/services/approval/approval-decision-executor.d.ts

@@ -0,0 +1,42 @@
+import type { ConversationEvent } from '../conversation/conversation-events.js';
+import type { ILoggingService } from '../service-interfaces.js';
+import type { PendingApprovalContext } from './approval-state.js';
+import type { SessionAccessState } from '../session/session-access-state.js';
+import type { NestedToolCompatibilityState } from '../session/nested-tool-compatibility-state.js';
+import type { HookLifecyclePort } from '../hooks/hook-service.js';
+import type { HookEventFactory } from '../hooks/hook-event-factory.js';
+export type ApprovalDecisionSource = 'user' | 'policy' | 'system';
+export type ApprovalDecisionResolution = {
+    readonly pendingApprovalContext: PendingApprovalContext;
+    readonly isApproved: boolean;
+    readonly toolStartedEvent?: ConversationEvent;
+};
+export type ApprovalDecisionExecutorDeps = {
+    logger: ILoggingService;
+    sessionId: string;
+    /** Handle-owned root capability. Do not replace this with a fresh access state. */
+    sessionAccess?: SessionAccessState;
+    /** Explicit isolated compatibility state for a nested execution. */
+    nestedCompatibility?: NestedToolCompatibilityState;
+    hookLifecycle?: HookLifecyclePort;
+    hookEvents?: HookEventFactory;
+};
+export type ResolveApprovalDecisionInput = {
+    pendingApprovalContext: PendingApprovalContext;
+    answer: string;
+    rejectionReason?: string;
+    source?: ApprovalDecisionSource;
+};
+/**
+ * Applies one already-authorized approval decision to the continuation that
+ * owns it. This is deliberately independent of root `ApprovalState`, turn
+ * generations, and continuation planning so a transferred child lease can use
+ * the exact same capability policy without taking over the root interaction.
+ */
+export declare class ApprovalDecisionExecutor {
+    #private;
+    private readonly deps;
+    constructor(deps: ApprovalDecisionExecutorDeps);
+    resolve({ pendingApprovalContext, answer, rejectionReason, source, }: ResolveApprovalDecisionInput): ApprovalDecisionResolution;
+}
+//# sourceMappingURL=approval-decision-executor.d.ts.map

package/dist/services/approval/approval-decision-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-decision-executor.d.ts","sourceRoot":"","sources":["../../../source/services/approval/approval-decision-executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAChF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAchE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,+CAA+C,CAAC;AAClG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAEvE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAElE,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;IACxD,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,eAAe,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,4BAA4B,CAAC;IACnD,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAClC,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,sBAAsB,EAAE,sBAAsB,CAAC;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,EAAE,sBAAsB,CAAC;CACjC,CAAC;AAEF;;;;;GAKG;AACH,qBAAa,wBAAwB;;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAAjC,YAA6B,IAAI,EAAE,4BAA4B,EAAI;IAEnE,OAAO,CAAC,EACN,sBAAsB,EACtB,MAAM,EACN,eAAe,EACf,MAAe,GAChB,EAAE,4BAA4B,GAAG,0BAA0B,CAwI3D;CA+EF"}

package/dist/services/approval/approval-decision-executor.js

@@ -0,0 +1,207 @@
+import path from 'node:path';
+import { markToolCallAsApprovalRejection } from '../../utils/streaming/extract-command-messages.js';
+import { getCallIdFromObject, getToolInfoFromInterruption } from '../interruption-info.js';
+import { parseToolCallArguments } from '../tool-call-arguments.js';
+import { createInvalidToolCallDiagnostic } from '../logging/logging-contract.js';
+import { getProjectAllowReadStore } from '../../utils/shell/sandbox/denied-read-stores.js';
+import { isDeniedReadApproveAnswer, isDockerHostControlApproveAnswer, isReadFileSessionApproveAnswer, supportsFolderSessionRead, } from '../../contracts/conversation.js';
+import { isDockerHostControlShellApproval } from './shell-sandbox-approval.js';
+import { resolveSessionReadFolder } from './session-read-grant-target.js';
+/**
+ * Applies one already-authorized approval decision to the continuation that
+ * owns it. This is deliberately independent of root `ApprovalState`, turn
+ * generations, and continuation planning so a transferred child lease can use
+ * the exact same capability policy without taking over the root interaction.
+ */
+export class ApprovalDecisionExecutor {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    resolve({ pendingApprovalContext, answer, rejectionReason, source = 'user', }) {
+        const { state, interruption } = pendingApprovalContext;
+        const decisionCallId = getCallIdFromObject(interruption);
+        pendingApprovalContext.decisionsByCallId ??= new Map();
+        const { toolName: decisionToolName, rawArguments: decisionRawArguments } = getToolInfoFromInterruption(interruption);
+        const parsedDecisionArgs = parseToolCallArguments(decisionRawArguments, {
+            callId: decisionCallId ?? String(Date.now()),
+            toolName: decisionToolName,
+            sessionId: this.deps.sessionId,
+            traceId: this.deps.logger.getCorrelationId() ?? 'trace-unknown',
+        }).arguments;
+        const deniedReadDecision = isDeniedReadApproveAnswer(answer);
+        const dockerDecision = isDockerHostControlApproveAnswer(answer);
+        const isDockerRequest = isDockerHostControlShellApproval(decisionToolName, parsedDecisionArgs, this.deps.sessionId, this.deps.sessionAccess, this.deps.nestedCompatibility);
+        const allowReadFolderForSession = isReadFileSessionApproveAnswer(answer) && supportsFolderSessionRead(decisionToolName);
+        const editSessionGrant = this.#getEditSessionGrant(answer, decisionToolName, parsedDecisionArgs);
+        if (allowReadFolderForSession) {
+            const folder = resolveSessionReadFolder(decisionToolName, parsedDecisionArgs);
+            if (folder) {
+                if (this.deps.sessionAccess)
+                    this.deps.sessionAccess.allowReadFolder(folder);
+                else
+                    this.deps.nestedCompatibility?.readAccess.allowFolder(this.deps.sessionId, folder);
+            }
+        }
+        if (editSessionGrant) {
+            if (this.deps.sessionAccess) {
+                if (editSessionGrant.kind === 'file')
+                    this.deps.sessionAccess.allowEditFile(editSessionGrant.path);
+                else
+                    this.deps.sessionAccess.allowEditFolder(editSessionGrant.path);
+            }
+        }
+        // Docker host control is a distinct capability. Generic resume answers
+        // remain rejected even if the tool call otherwise looks approvable.
+        const isApproved = isDockerRequest
+            ? dockerDecision
+            : answer === 'y' || deniedReadDecision || allowReadFolderForSession || editSessionGrant !== null;
+        let toolStartedEvent;
+        if (isApproved) {
+            this.#applyDeniedReadDecision(answer, deniedReadDecision, interruption, decisionCallId);
+            this.#applyDockerDecision(answer, dockerDecision, isDockerRequest, parsedDecisionArgs);
+            this.deps.logger.debug('Tool approval granted', {
+                eventType: 'approval.granted',
+                category: 'approval',
+                phase: 'approval',
+                sessionId: this.deps.sessionId,
+                traceId: this.deps.logger.getCorrelationId(),
+                ...(deniedReadDecision ? { deniedReadDecision: answer } : {}),
+            });
+            const { toolName, rawArguments } = getToolInfoFromInterruption(interruption);
+            const parseResult = parseToolCallArguments(rawArguments, {
+                callId: decisionCallId ?? String(Date.now()),
+                toolName,
+                sessionId: this.deps.sessionId,
+                traceId: this.deps.logger.getCorrelationId() ?? 'trace-unknown',
+            });
+            if (parseResult.invalidJsonDiagnostic) {
+                const diagnostic = createInvalidToolCallDiagnostic(parseResult.invalidJsonDiagnostic);
+                this.deps.logger.error('Invalid tool call argument payload', {
+                    ...diagnostic,
+                    sessionId: this.deps.sessionId,
+                    messageId: decisionCallId ?? String(Date.now()),
+                });
+            }
+            const toolCallId = decisionCallId ?? String(Date.now());
+            toolStartedEvent =
+                pendingApprovalContext.owner.kind === 'subagent'
+                    ? {
+                        type: 'subagent_tool_started',
+                        agentId: pendingApprovalContext.owner.agentId,
+                        role: pendingApprovalContext.owner.role,
+                        toolCallId,
+                        toolName,
+                        arguments: parseResult.arguments,
+                    }
+                    : {
+                        type: 'tool_started',
+                        toolCallId,
+                        toolName,
+                        arguments: parseResult.arguments,
+                    };
+            state.approve?.(interruption);
+            if (decisionCallId)
+                pendingApprovalContext.decisionsByCallId.set(decisionCallId, 'approved');
+        }
+        else {
+            const message = rejectionReason
+                ? `Tool execution was not approved. User's reason: ${rejectionReason}`
+                : 'Tool execution was not approved.';
+            // Rejection settles an indirect Docker denial, otherwise the same
+            // command would require the abandoned prompt again forever.
+            if (isDockerRequest && typeof parsedDecisionArgs?.command === 'string') {
+                if (this.deps.sessionAccess)
+                    this.deps.sessionAccess.consumeDockerDenial(parsedDecisionArgs.command);
+                else
+                    this.deps.nestedCompatibility?.docker.consumeDenial(this.deps.sessionId, parsedDecisionArgs.command);
+            }
+            markToolCallAsApprovalRejection(decisionCallId);
+            state.reject?.(interruption, { message });
+            if (decisionCallId)
+                pendingApprovalContext.decisionsByCallId.set(decisionCallId, 'rejected');
+            this.deps.logger.debug('Tool approval rejected', {
+                eventType: 'approval.rejected',
+                category: 'approval',
+                phase: 'approval',
+                sessionId: this.deps.sessionId,
+                traceId: this.deps.logger.getCorrelationId(),
+            });
+        }
+        if (this.deps.hookLifecycle && this.deps.hookEvents) {
+            void this.deps.hookLifecycle.emit(this.deps.hookEvents.create('approval.resolved', {
+                resolution: isApproved ? (source === 'policy' ? 'auto_approved' : 'approved') : 'rejected',
+                source,
+                executionFollowed: isApproved,
+            }, { toolCallId: decisionCallId }));
+        }
+        return { pendingApprovalContext, isApproved, toolStartedEvent };
+    }
+    #getEditSessionGrant(answer, toolName, args) {
+        if (toolName !== 'apply_patch' && toolName !== 'create_file' && toolName !== 'search_replace')
+            return null;
+        const record = args && typeof args === 'object' ? args : null;
+        const operation = Array.isArray(record?.operations) ? record.operations[0] : record;
+        const rawPath = operation && typeof operation === 'object' && typeof operation.path === 'string'
+            ? operation.path
+            : undefined;
+        if (!rawPath)
+            return null;
+        const target = path.resolve(rawPath);
+        if (answer === 'allow-edit-file-session')
+            return { kind: 'file', path: target };
+        if (answer === 'allow-edit-folder-session')
+            return { kind: 'folder', path: path.dirname(target) };
+        return null;
+    }
+    #applyDeniedReadDecision(answer, deniedReadDecision, interruption, decisionCallId) {
+        if (!deniedReadDecision)
+            return;
+        const { rawArguments } = getToolInfoFromInterruption(interruption);
+        const parsedArgs = parseToolCallArguments(rawArguments, {
+            callId: decisionCallId ?? String(Date.now()),
+            toolName: 'shell',
+            sessionId: this.deps.sessionId,
+            traceId: this.deps.logger.getCorrelationId() ?? 'trace-unknown',
+        });
+        const shellCommand = parsedArgs.arguments?.command;
+        if (typeof shellCommand !== 'string')
+            return;
+        const stagedInfo = this.deps.nestedCompatibility?.deniedReads.consumeStaged(shellCommand);
+        if (!stagedInfo)
+            return;
+        if (answer === 'allow-once' || answer === 'allow-remember') {
+            this.deps.nestedCompatibility?.executionOverrides.set(shellCommand, {
+                extraAllowRead: [stagedInfo.suggestedParent],
+            });
+            if (answer === 'allow-remember') {
+                getProjectAllowReadStore(process.cwd()).append(stagedInfo.suggestedParent);
+                this.deps.logger.security('Sandbox allowed-read path remembered for project', {
+                    path: stagedInfo.suggestedParent,
+                    deniedPath: stagedInfo.path,
+                    sensitive: stagedInfo.sensitive,
+                    sessionId: this.deps.sessionId,
+                });
+            }
+        }
+        else if (answer === 'unsandboxed-once') {
+            this.deps.nestedCompatibility?.executionOverrides.set(shellCommand, { forceUnsandboxed: true });
+        }
+    }
+    #applyDockerDecision(answer, dockerDecision, isDockerRequest, parsedDecisionArgs) {
+        if (!dockerDecision || !isDockerRequest || typeof parsedDecisionArgs?.command !== 'string')
+            return;
+        const cwd = typeof parsedDecisionArgs.cwd === 'string' ? parsedDecisionArgs.cwd : process.cwd();
+        const scope = answer === 'docker-allow-once' ? 'once' : answer === 'docker-allow-session' ? 'session' : 'project';
+        if (this.deps.sessionAccess)
+            this.deps.sessionAccess.grantDocker(parsedDecisionArgs.command, cwd, scope);
+        else
+            this.deps.nestedCompatibility?.docker.grant({
+                command: parsedDecisionArgs.command,
+                cwd,
+                scope,
+                sessionId: this.deps.sessionId,
+            });
+    }
+}
+//# sourceMappingURL=approval-decision-executor.js.map

package/dist/services/approval/approval-decision-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-decision-executor.js","sourceRoot":"","sources":["../../../source/services/approval/approval-decision-executor.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,+BAA+B,EAAE,MAAM,gCAAgC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EACL,yBAAyB,EACzB,gCAAgC,EAChC,8BAA8B,EAC9B,yBAAyB,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAiC1E;;;;;GAKG;AACH,MAAM,OAAO,wBAAwB;IACN,IAAI;IAAjC,YAA6B,IAAkC;oBAAlC,IAAI;IAAiC,CAAC;IAEnE,OAAO,CAAC,EACN,sBAAsB,EACtB,MAAM,EACN,eAAe,EACf,MAAM,GAAG,MAAM,GACc;QAC7B,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,sBAAsB,CAAC;QACvD,MAAM,cAAc,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACzD,sBAAsB,CAAC,iBAAiB,KAAK,IAAI,GAAG,EAAE,CAAC;QAEvD,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,YAAY,EAAE,oBAAoB,EAAE,GACtE,2BAA2B,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,oBAAoB,EAAE;YACtE,MAAM,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5C,QAAQ,EAAE,gBAAgB;YAC1B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,eAAe;SAChE,CAAC,CAAC,SAAwD,CAAC;QAC5D,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,cAAc,GAAG,gCAAgC,CAAC,MAAM,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,gCAAgC,CACtD,gBAAgB,EAChB,kBAAkB,EAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EACnB,IAAI,CAAC,IAAI,CAAC,aAAa,EACvB,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAC9B,CAAC;QACF,MAAM,yBAAyB,GAC7B,8BAA8B,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;QACxF,MAAM,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;QAEjG,IAAI,yBAAyB,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,wBAAwB,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;YAC9E,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;oBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;;oBACxE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QACD,IAAI,gBAAgB,EAAE,CAAC;YACrB,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;gBAC5B,IAAI,gBAAgB,CAAC,IAAI,KAAK,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;;oBAC9F,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,MAAM,UAAU,GAAG,eAAe;YAChC,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,kBAAkB,IAAI,yBAAyB,IAAI,gBAAgB,KAAK,IAAI,CAAC;QACnG,IAAI,gBAA+C,CAAC;QAEpD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YACxF,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;YAEvF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;gBAC9C,SAAS,EAAE,kBAAkB;gBAC7B,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;gBAC5C,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YAEH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,sBAAsB,CAAC,YAAY,EAAE;gBACvD,MAAM,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5C,QAAQ;gBACR,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,eAAe;aAChE,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,qBAAqB,EAAE,CAAC;gBACtC,MAAM,UAAU,GAAG,+BAA+B,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;gBACtF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;oBAC3D,GAAG,UAAU;oBACb,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;oBAC9B,SAAS,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;iBAChD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxD,gBAAgB;gBACd,sBAAsB,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;oBAC9C,CAAC,CAAC;wBACE,IAAI,EAAE,uBAAuB;wBAC7B,OAAO,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO;wBAC7C,IAAI,EAAE,sBAAsB,CAAC,KAAK,CAAC,IAAI;wBACvC,UAAU;wBACV,QAAQ;wBACR,SAAS,EAAE,WAAW,CAAC,SAAS;qBACjC;oBACH,CAAC,CAAC;wBACE,IAAI,EAAE,cAAc;wBACpB,UAAU;wBACV,QAAQ;wBACR,SAAS,EAAE,WAAW,CAAC,SAAS;qBACjC,CAAC;YAER,KAAK,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;YAC9B,IAAI,cAAc;gBAAE,sBAAsB,CAAC,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC/F,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,eAAe;gBAC7B,CAAC,CAAC,mDAAmD,eAAe,EAAE;gBACtE,CAAC,CAAC,kCAAkC,CAAC;YAEvC,kEAAkE;YAClE,4DAA4D;YAC5D,IAAI,eAAe,IAAI,OAAO,kBAAkB,EAAE,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACvE,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;oBAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;;oBAChG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC5G,CAAC;YAED,+BAA+B,CAAC,cAAc,CAAC,CAAC;YAChD,KAAK,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1C,IAAI,cAAc;gBAAE,sBAAsB,CAAC,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YAE7F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBAC/C,SAAS,EAAE,mBAAmB;gBAC9B,QAAQ,EAAE,UAAU;gBACpB,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;gBAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;aAC7C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACpD,KAAK,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAC/B,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CACzB,mBAAmB,EACnB;gBACE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU;gBAC1F,MAAM;gBACN,iBAAiB,EAAE,UAAU;aAC9B,EACD,EAAE,UAAU,EAAE,cAAc,EAAE,CAC/B,CACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;IAClE,CAAC;IAED,oBAAoB,CAClB,MAAc,EACd,QAA4B,EAC5B,IAAa;QAEb,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAC3G,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAiD,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,MAAM,OAAO,GACX,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAQ,SAAgC,CAAC,IAAI,KAAK,QAAQ;YACtG,CAAC,CAAE,SAA8B,CAAC,IAAI;YACtC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,yBAAyB;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAChF,IAAI,MAAM,KAAK,2BAA2B;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClG,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wBAAwB,CACtB,MAAc,EACd,kBAA2B,EAC3B,YAAqB,EACrB,cAAkC;QAElC,IAAI,CAAC,kBAAkB;YAAE,OAAO;QAEhC,MAAM,EAAE,YAAY,EAAE,GAAG,2BAA2B,CAAC,YAAY,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,sBAAsB,CAAC,YAAY,EAAE;YACtD,MAAM,EAAE,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5C,QAAQ,EAAE,OAAO;YACjB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,eAAe;SAChE,CAAC,CAAC;QACH,MAAM,YAAY,GAAI,UAAU,CAAC,SAAyC,EAAE,OAAO,CAAC;QACpF,IAAI,OAAO,YAAY,KAAK,QAAQ;YAAE,OAAO;QAE7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAC1F,IAAI,CAAC,UAAU;YAAE,OAAO;QAExB,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE;gBAClE,cAAc,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;aAC7C,CAAC,CAAC;YACH,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;gBAChC,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBAC3E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kDAAkD,EAAE;oBAC5E,IAAI,EAAE,UAAU,CAAC,eAAe;oBAChC,UAAU,EAAE,UAAU,CAAC,IAAI;oBAC3B,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;iBAC/B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED,oBAAoB,CAClB,MAAc,EACd,cAAuB,EACvB,eAAwB,EACxB,kBAA+D;QAE/D,IAAI,CAAC,cAAc,IAAI,CAAC,eAAe,IAAI,OAAO,kBAAkB,EAAE,OAAO,KAAK,QAAQ;YAAE,OAAO;QAEnG,MAAM,GAAG,GAAG,OAAO,kBAAkB,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAChG,MAAM,KAAK,GAAG,MAAM,KAAK,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;;YAEvG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC;gBAC1C,OAAO,EAAE,kBAAkB,CAAC,OAAO;gBACnC,GAAG;gBACH,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;aAC/B,CAAC,CAAC;IACP,CAAC;CACF"}