@rarebit-one/harness-kernel 0.18.0 → 0.19.1

package/dist/tools/validate.js

@@ -0,0 +1,346 @@
+/**
+ * Check a tool call's arguments against a JSON Schema, returning every problem
+ * found (empty when the arguments fit).
+ *
+ * This is the subset of JSON Schema that tool schemas actually use: `type`
+ * (including `integer`, `null` and type arrays), `properties`, `required`,
+ * `additionalProperties`, `enum`, `const`, `items` / `prefixItems`, the
+ * length, size and range bounds, `pattern`, `allOf` / `anyOf` / `oneOf`,
+ * local `$ref`s (`#/$defs/...`, `#/definitions/...`) and OpenAPI's
+ * `nullable`. A `$ref`'s sibling keywords apply as in 2019-09 and later, and
+ * are ignored when the root `$schema` names draft 03 to 07, where a `$ref`
+ * replaced its whole schema object; `const` is ignored before draft 6 and
+ * `prefixItems` before 2020-12, the drafts that introduced them. Any other keyword (`format`, `not`,
+ * `if`/`then`/`else`, `multipleOf`, `uniqueItems`, the `dependent*` family, a
+ * remote or malformed `$ref`, a local `$ref` inside an embedded resource with
+ * its own `$id`, a `type` name outside the seven JSON types) is ignored, and
+ * `oneOf` is read as `anyOf`. A schema whose check would take more than a
+ * fixed amount of work is not judged at all: no problems are returned.
+ *
+ * Ignoring is the point: the validator may let a bad call through, but it
+ * never refuses a call the schema accepts. A refusal costs the model a turn,
+ * so a false one is worse than a missed one, and a schema written by someone
+ * else (an MCP server's) can use any keyword it likes without the run
+ * starting to refuse calls its server would have taken.
+ *
+ * `pattern` is compiled and run synchronously on the model's input, like any
+ * regular expression. A schema author's pattern with catastrophic
+ * backtracking (`^(a+)+$`) can stall the event loop, and the run's deadline
+ * cannot interrupt it; turn validation on only for tools whose schemas you
+ * would run that way.
+ */
+export function validateToolInput(schema, input) {
+    const problems = [];
+    try {
+        check(schema, input, "", { root: schema, scoped: false, work: { left: MAX_WORK } }, 0, problems);
+    }
+    catch (err) {
+        // A schema too costly to judge is one the validator cannot judge.
+        if (err instanceof WorkExhausted)
+            return [];
+        throw err;
+    }
+    return problems;
+}
+/** How many problems the model is told about; the rest are counted. */
+const MAX_REPORTED = 10;
+/**
+ * The tool result a call gets when its arguments fail the tool's schema, or
+ * `undefined` when they fit. The loop answers the call with this instead of
+ * running it, and the model corrects the call within its own budgets.
+ */
+export function invalidInputRefusal(tool, input) {
+    let problems;
+    try {
+        problems = validateToolInput(tool.spec.inputSchema, input);
+    }
+    catch {
+        // A schema the validator trips over is one it cannot judge: the call runs,
+        // as it would with validation off, rather than the run failing.
+        return undefined;
+    }
+    if (problems.length === 0)
+        return undefined;
+    const shown = problems
+        .slice(0, MAX_REPORTED)
+        .map((p) => `${p.path || "(arguments)"}: ${p.message}`);
+    const more = problems.length - shown.length;
+    return (`invalid arguments for ${tool.spec.name}; the call was not run. ` +
+        `Call it again with arguments that match its input schema: ${shown.join("; ")}` +
+        (more > 0 ? `; and ${more} more` : ""));
+}
+/** Deep enough for any real tool schema; a `$ref` cycle stops here instead of looping. */
+const MAX_DEPTH = 32;
+/**
+ * How many schema/value checks one validation may make. Shared definitions
+ * referenced from several composition branches can multiply the work
+ * exponentially without any cycle, and validation runs synchronously before
+ * the call, where no deadline can interrupt it; past this the validator gives
+ * up and the call runs unjudged.
+ */
+const MAX_WORK = 25_000;
+class WorkExhausted extends Error {
+}
+const isObject = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+/** The JSON type of a parsed value, as JSON Schema names it. */
+function jsonType(value) {
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "array";
+    if (typeof value === "number")
+        return Number.isInteger(value) ? "integer" : "number";
+    return typeof value;
+}
+const JSON_TYPES = new Set(["null", "boolean", "object", "array", "number", "integer", "string"]);
+/**
+ * The draft the root schema declares in `$schema`: 3 to 7 for draft-03 to
+ * draft-07, 2019 for 2019-09, 2020 for 2020-12, or `undefined` when it names
+ * none (then every keyword the validator knows applies).
+ */
+function declaredDraft(root) {
+    const declared = isObject(root) ? root.$schema : undefined;
+    if (typeof declared !== "string")
+        return undefined;
+    const old = /draft-0([3-7])\b/.exec(declared);
+    if (old)
+        return Number(old[1]);
+    if (declared.includes("2019-09"))
+        return 2019;
+    if (declared.includes("2020-12"))
+        return 2020;
+    return undefined;
+}
+/** Whether the root schema declares a draft (03 to 07) in which `$ref` siblings are ignored. */
+function refReplacesSiblings(root) {
+    const draft = declaredDraft(root);
+    return draft !== undefined && draft <= 7;
+}
+/** Whether a keyword introduced in `since` exists in the draft the root schema declares. */
+function inDraft(root, since) {
+    const draft = declaredDraft(root);
+    return draft === undefined || draft >= since;
+}
+function typeMatches(expected, actual) {
+    return expected === actual || (expected === "number" && actual === "integer");
+}
+function deepEqual(a, b) {
+    if (a === b)
+        return true;
+    if (Array.isArray(a) && Array.isArray(b)) {
+        return a.length === b.length && a.every((v, i) => deepEqual(v, b[i]));
+    }
+    if (isObject(a) && isObject(b)) {
+        const keys = Object.keys(a);
+        return (keys.length === Object.keys(b).length &&
+            keys.every((k) => Object.hasOwn(b, k) && deepEqual(a[k], b[k])));
+    }
+    return false;
+}
+/** A pattern the validator can compile, or `undefined` for one it cannot (then the keyword is ignored). */
+function compile(pattern) {
+    if (typeof pattern !== "string")
+        return undefined;
+    try {
+        return new RegExp(pattern, "u");
+    }
+    catch {
+        try {
+            return new RegExp(pattern);
+        }
+        catch {
+            return undefined;
+        }
+    }
+}
+/** Resolve a local `#/...` JSON Pointer against the root schema. */
+function resolveRef(root, ref) {
+    if (!ref.startsWith("#"))
+        return undefined;
+    // The fragment is percent-decoded as a whole before it is read as a JSON
+    // Pointer (RFC 6901 §6), so an encoded `/` (`%2F`) separates tokens.
+    let fragment;
+    try {
+        fragment = decodeURIComponent(ref.slice(1));
+    }
+    catch {
+        // A malformed escape (`%` not followed by two hex digits) names nothing.
+        return undefined;
+    }
+    if (fragment === "")
+        return root;
+    if (!fragment.startsWith("/"))
+        return undefined;
+    let node = root;
+    for (const raw of fragment.slice(1).split("/")) {
+        const key = raw.replaceAll("~1", "/").replaceAll("~0", "~");
+        if (!isObject(node) && !Array.isArray(node))
+            return undefined;
+        node = node[key];
+    }
+    return node;
+}
+const pointer = (path, key) => `${path}/${String(key).replaceAll("~", "~0").replaceAll("/", "~1")}`;
+const num = (v) => (typeof v === "number" ? v : undefined);
+const quoted = (values) => {
+    const shown = values.slice(0, MAX_REPORTED).map((v) => JSON.stringify(v));
+    return values.length > shown.length ? `${shown.join(", ")}, …` : shown.join(", ");
+};
+function check(schema, value, path, outer, depth, problems) {
+    if (--outer.work.left < 0)
+        throw new WorkExhausted();
+    if (schema === false) {
+        problems.push({ path, message: "is not allowed" });
+        return;
+    }
+    if (!isObject(schema) || depth > MAX_DEPTH)
+        return;
+    const s = schema;
+    const env = !outer.scoped &&
+        schema !== outer.root &&
+        (typeof s.$id === "string" || typeof s.id === "string")
+        ? { ...outer, scoped: true }
+        : outer;
+    const at = (message) => problems.push({ path, message });
+    // OpenAPI's `nullable` admits null whatever else the schema says, composition
+    // included (generators emit `{ allOf: [{ $ref }], nullable: true }`).
+    if (s.nullable === true && value === null)
+        return;
+    if (typeof s.$ref === "string") {
+        // Inside an embedded resource a local `$ref` means that resource, which
+        // this validator does not track, so it is ignored rather than misread.
+        const target = env.scoped ? undefined : resolveRef(env.root, s.$ref);
+        if (target !== undefined)
+            check(target, value, path, env, depth + 1, problems);
+        // Before 2019-09 a `$ref` replaced its whole schema object: the keywords
+        // beside it are ignored, so they are ignored here too.
+        if (refReplacesSiblings(env.root))
+            return;
+    }
+    if (Array.isArray(s.allOf)) {
+        for (const branch of s.allOf)
+            check(branch, value, path, env, depth + 1, problems);
+    }
+    for (const key of ["anyOf", "oneOf"]) {
+        const branches = s[key];
+        if (!Array.isArray(branches) || branches.length === 0)
+            continue;
+        const fits = branches.some((branch) => {
+            const inner = [];
+            check(branch, value, path, env, depth + 1, inner);
+            return inner.length === 0;
+        });
+        if (!fits)
+            at(`matches none of the ${branches.length} allowed shapes`);
+    }
+    const actual = jsonType(value);
+    const types = typeof s.type === "string" ? [s.type] : Array.isArray(s.type) ? s.type : undefined;
+    // A type name outside the seven JSON types (draft 3's `any`, a typo) is a
+    // keyword the validator does not know, so the whole `type` check is skipped.
+    const knownTypes = types !== undefined &&
+        types.length > 0 &&
+        types.every((t) => typeof t === "string" && JSON_TYPES.has(t));
+    if (types && knownTypes && !types.some((t) => typeMatches(t, actual))) {
+        // "integer" is the schema's word for a kind of number, not a type a model writes.
+        at(`expected ${types.join(" or ")}, got ${actual === "integer" ? "number" : actual}`);
+        // The keywords below would only restate a wrong type as several problems.
+        return;
+    }
+    if (Array.isArray(s.enum) && !s.enum.some((v) => deepEqual(v, value))) {
+        at(`must be one of ${quoted(s.enum)}`);
+    }
+    // `const` arrived in draft 6; an older schema's `const` is an unknown keyword.
+    if (Object.hasOwn(s, "const") && inDraft(env.root, 6) && !deepEqual(s.const, value)) {
+        at(`must be ${JSON.stringify(s.const)}`);
+    }
+    if (typeof value === "string") {
+        const length = [...value].length;
+        const min = num(s.minLength);
+        const max = num(s.maxLength);
+        if (min !== undefined && length < min)
+            at(`must be at least ${min} characters`);
+        if (max !== undefined && length > max)
+            at(`must be at most ${max} characters`);
+        const pattern = compile(s.pattern);
+        if (pattern && !pattern.test(value))
+            at(`must match the pattern ${String(s.pattern)}`);
+    }
+    if (typeof value === "number") {
+        const min = num(s.minimum);
+        const max = num(s.maximum);
+        // Draft 4 spelled the exclusive bounds as booleans beside minimum/maximum.
+        const exMin = num(s.exclusiveMinimum) ?? (s.exclusiveMinimum === true ? min : undefined);
+        const exMax = num(s.exclusiveMaximum) ?? (s.exclusiveMaximum === true ? max : undefined);
+        if (min !== undefined && s.exclusiveMinimum !== true && value < min)
+            at(`must be >= ${min}`);
+        if (max !== undefined && s.exclusiveMaximum !== true && value > max)
+            at(`must be <= ${max}`);
+        if (exMin !== undefined && value <= exMin)
+            at(`must be > ${exMin}`);
+        if (exMax !== undefined && value >= exMax)
+            at(`must be < ${exMax}`);
+    }
+    if (Array.isArray(value)) {
+        const min = num(s.minItems);
+        const max = num(s.maxItems);
+        if (min !== undefined && value.length < min)
+            at(`must have at least ${min} items`);
+        if (max !== undefined && value.length > max)
+            at(`must have at most ${max} items`);
+        // Positional schemas: `prefixItems` (2020-12) or an `items` array (draft 7).
+        // `prefixItems` arrived in 2020-12; under an older declared draft it is unknown.
+        const positional = Array.isArray(s.prefixItems) && inDraft(env.root, 2020)
+            ? s.prefixItems
+            : Array.isArray(s.items)
+                ? s.items
+                : [];
+        positional.forEach((item, i) => {
+            if (i < value.length)
+                check(item, value[i], pointer(path, i), env, depth + 1, problems);
+        });
+        if (!Array.isArray(s.items) && s.items !== undefined) {
+            for (let i = positional.length; i < value.length; i += 1) {
+                check(s.items, value[i], pointer(path, i), env, depth + 1, problems);
+            }
+        }
+    }
+    if (isObject(value)) {
+        const properties = isObject(s.properties) ? s.properties : {};
+        if (Array.isArray(s.required)) {
+            for (const key of s.required) {
+                if (typeof key === "string" && !Object.hasOwn(value, key)) {
+                    problems.push({ path: pointer(path, key), message: "is required" });
+                }
+            }
+        }
+        const min = num(s.minProperties);
+        const max = num(s.maxProperties);
+        const count = Object.keys(value).length;
+        if (min !== undefined && count < min)
+            at(`must have at least ${min} properties`);
+        if (max !== undefined && count > max)
+            at(`must have at most ${max} properties`);
+        // A key matched by `patternProperties` is not "additional". If any of its
+        // patterns cannot be compiled, nothing can be called additional with
+        // confidence, so that check is skipped rather than guessed.
+        const patternKeys = isObject(s.patternProperties) ? Object.keys(s.patternProperties) : [];
+        const patterns = patternKeys.map(compile);
+        const additionalKnown = patterns.every((p) => p !== undefined);
+        for (const [key, item] of Object.entries(value)) {
+            const where = pointer(path, key);
+            if (Object.hasOwn(properties, key)) {
+                check(properties[key], item, where, env, depth + 1, problems);
+                continue;
+            }
+            if (!additionalKnown || patterns.some((p) => p?.test(key)))
+                continue;
+            if (s.additionalProperties === false) {
+                problems.push({ path: where, message: "is not an allowed property" });
+            }
+            else if (isObject(s.additionalProperties)) {
+                check(s.additionalProperties, item, where, env, depth + 1, problems);
+            }
+        }
+    }
+}
+//# sourceMappingURL=validate.js.map

package/dist/tools/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/tools/validate.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAe,EAAE,KAAc;IAC/D,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,IAAI,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAA;IAClG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,kEAAkE;QAClE,IAAI,GAAG,YAAY,aAAa;YAAE,OAAO,EAAE,CAAA;QAC3C,MAAM,GAAG,CAAA;IACX,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,uEAAuE;AACvE,MAAM,YAAY,GAAG,EAAE,CAAA;AAEvB;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAU,EACV,KAA8B;IAE9B,IAAI,QAA4B,CAAA;IAChC,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,2EAA2E;QAC3E,gEAAgE;QAChE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,KAAK,GAAG,QAAQ;SACnB,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;SACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,aAAa,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3C,OAAO,CACL,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,0BAA0B;QACjE,6DAA6D,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC/E,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CACvC,CAAA;AACH,CAAC;AAED,0FAA0F;AAC1F,MAAM,SAAS,GAAG,EAAE,CAAA;AAEpB;;;;;;GAMG;AACH,MAAM,QAAQ,GAAG,MAAM,CAAA;AACvB,MAAM,aAAc,SAAQ,KAAK;CAAG;AAgBpC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAC5D,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AAE1D,gEAAgE;AAChE,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAA;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAA;IACpF,OAAO,OAAO,KAAK,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;AAEjG;;;;GAIG;AACH,SAAS,aAAa,CAAC,IAAa;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAA;IAC1D,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAClD,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC7C,IAAI,GAAG;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9B,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7C,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,gGAAgG;AAChG,SAAS,mBAAmB,CAAC,IAAa;IACxC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC,CAAA;AAC1C,CAAC;AAED,4FAA4F;AAC5F,SAAS,OAAO,CAAC,IAAa,EAAE,KAAa;IAC3C,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACjC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK,CAAA;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,MAAc;IACnD,OAAO,QAAQ,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC3B,OAAO,CACL,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YACrC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAChE,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,2GAA2G;AAC3G,SAAS,OAAO,CAAC,OAAgB;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjD,IAAI,CAAC;QACH,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,SAAS,UAAU,CAAC,IAAa,EAAE,GAAW;IAC5C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,yEAAyE;IACzE,qEAAqE;IACrE,IAAI,QAAgB,CAAA;IACpB,IAAI,CAAC;QACH,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,QAAQ,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC/C,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAA;QAC7D,IAAI,GAAI,IAAgC,CAAC,GAAG,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,GAAoB,EAAU,EAAE,CAC7D,GAAG,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAA;AAEtE,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;AAEvF,MAAM,MAAM,GAAG,CAAC,MAAiB,EAAU,EAAE;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,OAAO,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnF,CAAC,CAAA;AAED,SAAS,KAAK,CACZ,MAAe,EACf,KAAc,EACd,IAAY,EACZ,KAAU,EACV,KAAa,EACb,QAA4B;IAE5B,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,EAAE,CAAA;IACpD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAA;QAClD,OAAM;IACR,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG,SAAS;QAAE,OAAM;IAClD,MAAM,CAAC,GAAe,MAAM,CAAA;IAC5B,MAAM,GAAG,GACP,CAAC,KAAK,CAAC,MAAM;QACb,MAAM,KAAK,KAAK,CAAC,IAAI;QACrB,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;QACrD,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAC5B,CAAC,CAAC,KAAK,CAAA;IACX,MAAM,EAAE,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAChE,8EAA8E;IAC9E,sEAAsE;IACtE,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAM;IAEjD,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;QACpE,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;QAC9E,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;IAC3C,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,KAAK;YAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;IACpF,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;QACvB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACpC,MAAM,KAAK,GAAuB,EAAE,CAAA;YACpC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAA;YACjD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;QAC3B,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,IAAI;YAAE,EAAE,CAAC,uBAAuB,QAAQ,CAAC,MAAM,iBAAiB,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAChG,0EAA0E;IAC1E,6EAA6E;IAC7E,MAAM,UAAU,GACd,KAAK,KAAK,SAAS;QACnB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAChE,IAAI,KAAK,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAW,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAChF,kFAAkF;QAClF,EAAE,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,0EAA0E;QAC1E,OAAM;IACR,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;QACtE,EAAE,CAAC,kBAAkB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxC,CAAC;IACD,+EAA+E;IAC/E,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;QACpF,EAAE,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAA;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QAC5B,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,GAAG,GAAG;YAAE,EAAE,CAAC,oBAAoB,GAAG,aAAa,CAAC,CAAA;QAC/E,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,GAAG,GAAG;YAAE,EAAE,CAAC,mBAAmB,GAAG,aAAa,CAAC,CAAA;QAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAClC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,EAAE,CAAC,0BAA0B,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QAC1B,2EAA2E;QAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACxF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;QACxF,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,IAAI,KAAK,GAAG,GAAG;YAAE,EAAE,CAAC,cAAc,GAAG,EAAE,CAAC,CAAA;QAC5F,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,IAAI,KAAK,GAAG,GAAG;YAAE,EAAE,CAAC,cAAc,GAAG,EAAE,CAAC,CAAA;QAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK;YAAE,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,CAAA;QACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK;YAAE,EAAE,CAAC,aAAa,KAAK,EAAE,CAAC,CAAA;IACrE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;QAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,EAAE,CAAC,sBAAsB,GAAG,QAAQ,CAAC,CAAA;QAClF,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;YAAE,EAAE,CAAC,qBAAqB,GAAG,QAAQ,CAAC,CAAA;QACjF,6EAA6E;QAC7E,iFAAiF;QACjF,MAAM,UAAU,GACd,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC;YACrD,CAAC,CAAC,CAAC,CAAC,WAAW;YACf,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACtB,CAAC,CAAC,CAAC,CAAC,KAAK;gBACT,CAAC,CAAC,EAAE,CAAA;QACV,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;QACzF,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACrD,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAA;QAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC1D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAA;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;QAChC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAA;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAA;QACvC,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG;YAAE,EAAE,CAAC,sBAAsB,GAAG,aAAa,CAAC,CAAA;QAChF,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,GAAG;YAAE,EAAE,CAAC,qBAAqB,GAAG,aAAa,CAAC,CAAA;QAC/E,0EAA0E;QAC1E,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACzF,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACzC,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAA;QAC9D,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;YAChC,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;gBAC7D,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,eAAe,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAQ;YACpE,IAAI,CAAC,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;YACvE,CAAC;iBAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAA;YACtE,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/transcript.d.ts

@@ -0,0 +1,53 @@
+import type { AgentMessage, ToolCall, ToolResult } from "./providers/types.js";
+/** A user turn as the loop's history carries it. */
+export type UserTurn = Extract<AgentMessage, {
+    role: "user";
+}>;
+/** How {@link settleMessages} answers a tool call that has no result. */
+export interface SettleOptions {
+    /**
+     * The result for an unanswered call. The helper sets `toolCallId` itself.
+     * Absent, each call gets a neutral error result saying it was not run; pass
+     * one to say something else (`rejected: true` for a parked call the caller
+     * declined, say).
+     */
+    answer?: (call: ToolCall) => Omit<ToolResult, "toolCallId">;
+}
+/**
+ * A transcript in which every tool call has a result, ready to be continued.
+ *
+ * A stored transcript can end on calls nobody answered: a run that suspended
+ * on an external call the caller then abandoned, or a transcript an
+ * application built or cut itself. Every provider rejects a tool call with no
+ * result, wherever it sits in the history, so each assistant turn's missing
+ * results are added here: into the tool turn that follows it when there is
+ * one (one tool turn answers one assistant turn, as `withToolResults` keeps
+ * it), else as a new tool turn straight after it. Calls that already have a
+ * result are left alone, so settling twice changes nothing.
+ *
+ * What the loop never writes is thrown on rather than dropped, since it
+ * means the transcript was damaged and rewriting what the model was shown
+ * would hide that: a tool turn that answers no call (one that does not follow
+ * an assistant turn, or a result for a call id that turn never made), two
+ * results for one call, two calls with one id, and an assistant turn's
+ * results split across consecutive tool turns. Settle after answering, never
+ * before: `settleMessages(withToolResults(messages, results))`.
+ *
+ * The output ends with whatever the input ended with, now whole; it is a
+ * valid seed when that is a user message or a tool turn. Use
+ * {@link withUserTurn} to append the next user message. Neither array is
+ * mutated; untouched messages are shared with the input.
+ */
+export declare function settleMessages(messages: AgentMessage[], options?: SettleOptions): AgentMessage[];
+/**
+ * The seed for the next user turn: `messages` settled (see
+ * {@link settleMessages}), then `turn` appended. The result always passes the
+ * loop's seed check. A string is the turn's text; an object is the turn
+ * without its `role`.
+ *
+ * This prepares the transcript and nothing else. What the next run may spend
+ * is the caller's policy: pass fresh limits for a per-turn budget, or
+ * `remainingLimits(limits, consumed)` to carry one budget across turns.
+ */
+export declare function withUserTurn(messages: AgentMessage[], turn: string | Omit<UserTurn, "role">, options?: SettleOptions): AgentMessage[];
+//# sourceMappingURL=transcript.d.ts.map

package/dist/transcript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript.d.ts","sourceRoot":"","sources":["../src/transcript.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAE9E,oDAAoD;AACpD,MAAM,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAE9D,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;CAC5D;AAeD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,YAAY,EAAE,EACxB,OAAO,GAAE,aAAkB,GAC1B,YAAY,EAAE,CA2DhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,YAAY,EAAE,EACxB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EACrC,OAAO,GAAE,aAAkB,GAC1B,YAAY,EAAE,CAIhB"}

package/dist/transcript.js

@@ -0,0 +1,104 @@
+/** The result an unanswered call gets when the caller chose none. */
+function unanswered() {
+    return { content: "not run: the turn ended before this tool call was answered", isError: true };
+}
+/** The values that occur more than once, each named once. */
+function repeated(ids) {
+    const seen = new Set();
+    const twice = new Set();
+    for (const id of ids)
+        (seen.has(id) ? twice : seen).add(id);
+    return [...twice];
+}
+/**
+ * A transcript in which every tool call has a result, ready to be continued.
+ *
+ * A stored transcript can end on calls nobody answered: a run that suspended
+ * on an external call the caller then abandoned, or a transcript an
+ * application built or cut itself. Every provider rejects a tool call with no
+ * result, wherever it sits in the history, so each assistant turn's missing
+ * results are added here: into the tool turn that follows it when there is
+ * one (one tool turn answers one assistant turn, as `withToolResults` keeps
+ * it), else as a new tool turn straight after it. Calls that already have a
+ * result are left alone, so settling twice changes nothing.
+ *
+ * What the loop never writes is thrown on rather than dropped, since it
+ * means the transcript was damaged and rewriting what the model was shown
+ * would hide that: a tool turn that answers no call (one that does not follow
+ * an assistant turn, or a result for a call id that turn never made), two
+ * results for one call, two calls with one id, and an assistant turn's
+ * results split across consecutive tool turns. Settle after answering, never
+ * before: `settleMessages(withToolResults(messages, results))`.
+ *
+ * The output ends with whatever the input ended with, now whole; it is a
+ * valid seed when that is a user message or a tool turn. Use
+ * {@link withUserTurn} to append the next user message. Neither array is
+ * mutated; untouched messages are shared with the input.
+ */
+export function settleMessages(messages, options = {}) {
+    const answer = options.answer ?? unanswered;
+    const settled = [];
+    for (let i = 0; i < messages.length; i += 1) {
+        const message = messages[i];
+        if (!message)
+            continue;
+        if (message.role === "tool") {
+            // Every tool turn that follows an assistant turn is consumed below, so
+            // one reached here answers nothing.
+            throw new Error(`transcript message ${i} is a tool turn that does not follow an assistant turn, ` +
+                "so its results answer no call");
+        }
+        settled.push(message);
+        if (message.role !== "assistant" || message.toolCalls.length === 0)
+            continue;
+        const duplicateCalls = repeated(message.toolCalls.map((c) => c.id));
+        if (duplicateCalls.length > 0) {
+            throw new Error(`transcript message ${i} makes more than one tool call with the same id: ` +
+                duplicateCalls.join(", "));
+        }
+        const next = messages[i + 1];
+        const given = next?.role === "tool" ? next.results : [];
+        const asked = new Set(message.toolCalls.map((c) => c.id));
+        const stray = given.filter((r) => !asked.has(r.toolCallId)).map((r) => r.toolCallId);
+        if (stray.length > 0) {
+            throw new Error(`transcript message ${i + 1} answers call id(s) the assistant turn before it never made: ` +
+                stray.join(", "));
+        }
+        // Settling before answering (`withToolResults` after this helper) gives a
+        // call its placeholder and then its real result; every provider refuses
+        // two results for one call, so that is refused here instead.
+        const duplicateResults = repeated(given.map((r) => r.toolCallId));
+        if (duplicateResults.length > 0) {
+            throw new Error(`transcript message ${i + 1} answers call id(s) more than once: ` +
+                duplicateResults.join(", "));
+        }
+        const byId = new Map(given.map((r) => [r.toolCallId, r]));
+        if (next?.role === "tool")
+            i += 1;
+        if (next?.role === "tool" && byId.size === message.toolCalls.length) {
+            settled.push(next);
+            continue;
+        }
+        // In call order, so a stored tool turn reads in the order the calls were made.
+        settled.push({
+            role: "tool",
+            results: message.toolCalls.map((call) => byId.get(call.id) ?? { ...answer(call), toolCallId: call.id }),
+        });
+    }
+    return settled;
+}
+/**
+ * The seed for the next user turn: `messages` settled (see
+ * {@link settleMessages}), then `turn` appended. The result always passes the
+ * loop's seed check. A string is the turn's text; an object is the turn
+ * without its `role`.
+ *
+ * This prepares the transcript and nothing else. What the next run may spend
+ * is the caller's policy: pass fresh limits for a per-turn budget, or
+ * `remainingLimits(limits, consumed)` to carry one budget across turns.
+ */
+export function withUserTurn(messages, turn, options = {}) {
+    const user = typeof turn === "string" ? { role: "user", text: turn } : { ...turn, role: "user" };
+    return [...settleMessages(messages, options), user];
+}
+//# sourceMappingURL=transcript.js.map

package/dist/transcript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript.js","sourceRoot":"","sources":["../src/transcript.ts"],"names":[],"mappings":"AAgBA,qEAAqE;AACrE,SAAS,UAAU;IACjB,OAAO,EAAE,OAAO,EAAE,4DAA4D,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AACjG,CAAC;AAED,6DAA6D;AAC7D,SAAS,QAAQ,CAAC,GAAa;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,EAAE,IAAI,GAAG;QAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,cAAc,CAC5B,QAAwB,EACxB,UAAyB,EAAE;IAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAA;IAC3C,MAAM,OAAO,GAAmB,EAAE,CAAA;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,SAAQ;QACtB,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,uEAAuE;YACvE,oCAAoC;YACpC,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC,0DAA0D;gBAC/E,+BAA+B,CAClC,CAAA;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAE5E,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACnE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC,mDAAmD;gBACxE,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5B,MAAM,KAAK,GAAG,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QACvD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;QACpF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC,GAAG,CAAC,+DAA+D;gBACxF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACnB,CAAA;QACH,CAAC;QACD,0EAA0E;QAC1E,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;QACjE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC,GAAG,CAAC,sCAAsC;gBAC/D,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9B,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QACzD,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM;YAAE,CAAC,IAAI,CAAC,CAAA;QACjC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,SAAQ;QACV,CAAC;QACD,+EAA+E;QAC/E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,CACxE;SACF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAwB,EACxB,IAAqC,EACrC,UAAyB,EAAE;IAE3B,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACrF,OAAO,CAAC,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,CAAA;AACrD,CAAC"}

package/dist/types.d.ts

@@ -12,10 +12,23 @@ export interface ConnectorConfig {
     /** For the stdio transport. */
     command?: string;
     args?: string[];
-    /** Token is already resolved by the caller; the kernel treats it as opaque. */
+    /**
+     * Token is already resolved by the caller; the kernel treats it as opaque.
+     * For a credential that rotates, set `headers` instead of `token`: the
+     * kernel asks it for every request (HTTP-family transports only).
+     */
     auth?: {
         type: "bearer" | "none";
         token?: string;
+        headers?: ConnectorAuthHeaders;
+    };
+    /**
+     * The client identity announced to the server. Absent means the kernel's
+     * default name suffixed with the connector's own name, at version `0.1.0`.
+     */
+    clientInfo?: {
+        name: string;
+        version?: string;
     };
     /**
      * The server's own tool names (not namespaced) this run may see and call.
@@ -26,6 +39,28 @@ export interface ConnectorConfig {
      */
     tools?: string[];
 }
+/** What the kernel tells a {@link ConnectorAuthHeaders} function when it asks. */
+export interface ConnectorAuthRequest {
+    /** The connector's `name`. */
+    connector: string;
+    /**
+     * True when the server just answered 401 to headers this function gave: the
+     * kernel asks once more and retries the request once, so return a fresh
+     * credential rather than a cached one.
+     */
+    refresh: boolean;
+    /** Aborts when the connection is closed. */
+    signal?: AbortSignal;
+}
+/**
+ * Returns the headers that authenticate one request to an MCP server, e.g.
+ * `{ Authorization: "Bearer …" }`. Called before every request the transport
+ * makes, so cache inside it if minting is expensive. Every value is masked in
+ * what the run's tools hand back to the model, so return only credential
+ * headers. A throw fails that request with a message naming the connector,
+ * not the error.
+ */
+export type ConnectorAuthHeaders = (request: ConnectorAuthRequest) => Record<string, string> | Promise<Record<string, string>>;
 /**
  * What a run is allowed to touch. `tools` acts as an allowlist of tool names,
  * `hosts` as an egress allowlist for the http_fetch primitive; the open index
@@ -69,11 +104,15 @@ export interface WorkflowDefinition {
         preferred?: string;
     };
     prompt?: string;
-    /** Shell commands run in the sandbox BEFORE the agent, to install the run's own
-     *  dependencies (e.g. `npm ci`). Runs with the run's secrets in env; a failure
-     *  aborts the run (the agent must not run without its deps). */
+    /** Shell commands meant to run in the sandbox BEFORE the agent, to install the
+     *  run's own dependencies (e.g. `npm ci`). The kernel carries this and never
+     *  executes it: the caller runs it before `engine.run`, with the run's secrets
+     *  in env, and should abort the run on failure (the agent must not run without
+     *  its deps). */
     setup?: string[];
-    /** Shell commands run as a deterministic audit gate after output is produced. */
+    /** Shell commands meant to run as a deterministic audit gate after output is
+     *  produced. The kernel carries this and never executes it: the caller runs it
+     *  after `engine.run` and decides what a failure means. */
     verify?: string[];
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;IACpB,SAAS,EAAE,OAAO,GAAG,iBAAiB,GAAG,KAAK,CAAA;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,+EAA+E;IAC/E,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,QAAQ,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1C,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IAC7C,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;oEAEgE;IAChE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;IACpB,SAAS,EAAE,OAAO,GAAG,iBAAiB,GAAG,KAAK,CAAA;IAC9C,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE;QAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;KAAE,CAAA;IAClF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/C;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,kFAAkF;AAClF,MAAM,WAAW,oBAAoB;IACnC,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAA;IACjB;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAA;IAChB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,CACjC,OAAO,EAAE,oBAAoB,KAC1B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAE7D;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3B,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9C,WAAW,CAAC,EAAE,WAAW,CAAA;IACzB,QAAQ,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;IAC1C,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IAC7C,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,QAAQ,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;qBAIiB;IACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB;;+DAE2D;IAC3D,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB"}

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "@rarebit-one/harness-kernel",
-  "version": "0.18.0",
+  "version": "0.19.1",
   "description": "Provider-neutral AI-harness kernel — LLM adapters, tool-use loop, MCP connectors, and a pluggable agent-engine seam",
   "license": "MIT",
-  "author": "Jaryl Sim <code@jaryl.dev>",
+  "author": "Rarebit One <code@jaryl.dev>",
   "type": "module",
   "main": "./dist/index.js",
   "module": "./dist/index.js",
@@ -52,11 +52,11 @@
   },
   "dependencies": {
     "@anthropic-ai/sdk": "^1.0.0",
-    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@modelcontextprotocol/sdk": "^1.32.0",
     "@zed-industries/agent-client-protocol": "^0.4.5",
     "openai": "^7.4.0",
     "undici": "^8.10.0",
-    "zod": "^4.4.3"
+    "zod": "^4.6.6"
   },
   "peerDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.228"