@sema-ai/core 1.275.1

package/dist/index.js

@@ -0,0 +1,374 @@
+/**
+ * sema-core — a stateless, task-oriented AI agent core distilled from openclaw.
+ *
+ * Bring your own brain (an OpenAI-compatible model gateway), define tools / MCP servers
+ * per task, and run single-agent tasks against in-memory sessions with zero-config
+ * auto-compaction.
+ */
+// Task entry
+export { Runner, runTask, DEFAULT_MAX_TURNS } from "./core/runner/runtask.js";
+// Building blocks
+export { defineTool, toSkill } from "./core/tools.js";
+export { SKILL_TOOL_NAME } from "./core/runner/synthetic-tools.js";
+export { formatToolError, formatZodValidationError, formatValidationPath, truncateError, errorClassOf } from "./core/tool-errors.js";
+export { createWebFetchTool, webFetchToolSpec, htmlToText, createWebSearchTool } from "./tools/web.js";
+// design/102 (K-8 CC full-body)
+export { createTodoWriteTool } from "./tools/todo.js";
+// design/119 (CC 2.1.198 parity): structured task-list tool family (TaskCreate/TaskGet/TaskUpdate/TaskList).
+export { createTaskListTools } from "./tools/task-list.js";
+export { assembleFullBodyTools, FULL_BODY_ROLE } from "./scenarios/full-body.js";
+export { capAggregateToolResults, AGGREGATE_TOOL_RESULT_BUDGET_CHARS, DEFAULT_BUDGET_EXEMPT_TOOLS, } from "./core/tool-result-budget.js";
+export { capAggregateMediaBytes, AGGREGATE_MEDIA_BUDGET_BYTES } from "./core/media-byte-cap.js";
+export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, } from "./core/ask-question.js";
+export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, } from "./core/lsp.js";
+// LSP protocol logic (deployment-neutral, core-single-sourced) + session — a transport author (TOC stdio /
+// TOB WS bridge) drives `TransportLspSession` over an `LspTransport`; op-map is the "copy-CC" protocol mapping.
+export { buildRequest, parseResult, callHierarchyMethod, pathToUri } from "./core/lsp-protocol.js";
+export { TransportLspSession } from "./core/lsp-session.js";
+export { LspDiagnosticsRegistry, formatDiagnosticsBlock, formatDiagnosticsSummary, } from "./core/lsp-diagnostics.js";
+// TOC (local, non-sandbox) LSP: spawn a real language server via child_process + JSON-RPC over stdio (copy-CC).
+export { NodeLspManager, DEFAULT_LSP_SERVERS, languageFor, defaultLspSpawn, } from "./engine/lsp/node-lsp-manager.js";
+export { StdioLspTransport } from "./engine/lsp/stdio-lsp-transport.js";
+export { encodeFrame, makeFrameDecoder } from "./engine/lsp/frame-decoder.js";
+export { resolveModel, resolveTaskModel, parseModelMention, 
+// 模型档位层(clay 拍 2026-07-11):sema 档位词 max/pro/flash/lite(ultra 预留)+ CC alias 兼容表 +
+// catalog 增广函数(Runner 构造自动调;导出供部署/center 校验与自建 catalog 复用)。
+expandTiers, DEFAULT_TIER_ORDER, CC_MODEL_TIER_ALIASES, ROLE_TIER_DEFAULTS, } from "./core/roles.js";
+export { selectModel, selectModelOrThrow } from "./core/select-model.js";
+export { BrainError, classifyHttp } from "./brain/errors.js";
+export { looksDegenerate, inspectDegenerate } from "./brain/repetition.js";
+// Cost (1.37): injected per-1M pricing → integer micro-USD; core never hardcodes provider prices.
+export { computeCostMicroUsd, modelCostToPricing, } from "./core/pricing.js";
+// Observability (1.37): metadata-only, fire-and-forget trace seam; a deployment bridges to OTel.
+export { emitTrace } from "./core/trace.js";
+export { InMemoryStrategyStore } from "./core/strategy-store.js";
+export { createSqlTool, validateReadOnlySql } from "./tools/sql.js";
+export { createGiteaIssueTool } from "./tools/gitea-issue.js";
+export { runWithTeacher, parseTeacherAdvice, TEACHER_PROMPT, } from "./agents/teacher.js";
+export { runWithVerification, resumeWithVerification, verifyCompleted, runDeveloperTask, VERIFICATION_PROMPT, STATIC_VERIFICATION_PROMPT, VerdictSchema, } from "./agents/verify.js";
+export { runRepairLoop, terminalForTier, repairBundleFromCheckpoint, isolationPermitsAutoAccept, } from "./agents/repair-loop.js";
+// design/77 §1 Gate-1 — oracleIsolation: the CORE SEAM + assertion for the out-of-process grader boundary (the
+// 4th auto-promote gate). The REAL isolated grader env is SERVICE-provided (RunnerDeps.graderEnvFactory); core
+// only defines the seam + the 3 fail-closed checks + the isolation-class tiering. Auto-promote stays mandate-OFF.
+export { assertOracleIsolation, } from "./core/oracle-isolation.js";
+// design/79 — auto-promote 决策 core 合成 (mandate-OFF inert). The pure fail-closed AND-chain over the four
+// gates' verdicts (`decideAutoPromote`) + the ESCALATE-ONLY tripwire scans (`deriveTripwire`). Ships INERT:
+// NOTHING in the Runner calls these — the profile-promotion caller does not exist yet (design/79 §6, enforced
+// by an architecture test). core checks gate-PRESENCE only, never a numeric threshold.
+export { decideAutoPromote, deriveTripwire, FROZEN_DENYLIST_FLOOR, } from "./core/auto-promote.js";
+export { runCascade, } from "./agents/cascade.js";
+export { pgQuery, mysqlQuery, sqliteQuery } from "./tools/sql-adapters.js";
+export { materializeMcpTools, MCP_PREFIX } from "./core/mcp.js";
+// design/99 §E6 — per-session permission rules (durable seam + InMemory default + the deny-narrowing policy).
+export { InMemorySessionPolicyStore, SessionPolicyError, loosenReasons, 
+// a DURABLE SessionPolicyStore (PG/TiDB) reuses these pure helpers so its tighten-only/normalize logic can
+// never drift from the InMemory reference (the cross-backend equivalence contract).
+normalizeRules, stripRev, } from "./core/session-policy-store.js";
+// design/99 (center control-plane seam): the PUBLISHED safety-merge conformance corpus — center imports it to
+// contract-test its ConfigBundle merger's delegation to `loosenReasons`; core regression-tests it for anti-drift.
+export { SAFETY_MERGE_CONFORMANCE_CORPUS } from "./core/safety-merge-corpus.js";
+// design/99 [281]: the PUBLISHED safety-axis vocabulary (pure data) — `@sema-ai/registry-core`'s per-field
+// classification table cites these axis values; it dev-imports this to conformance-test value legality (no runtime dep).
+export { SAFETY_AXIS_VOCABULARY } from "./core/safety-axis-vocab.js";
+export { createSessionRulePolicy } from "./core/runner/session-rule-policy.js";
+export { TtlSessionStore } from "./core/session-store.js";
+// Wake/resume side-effect reconciliation (close orphan tool calls on a resumed session)
+export { reconcileInterruptedSession, findOrphanToolCalls, } from "./core/session-reconcile.js";
+// Pluggable session backend (build a durable "Session center" — e.g. TiDB — from these)
+export { Session, InMemorySessionRepo, InMemorySessionStorage, BaseSessionStorage, leafIdAfterEntry, validateEntriesForImport, StreamingImportValidator, boundedTail, SessionError, isSessionConflict, hasSessionFork, uuidv7, } from "./core/session.js";
+// design/114 P0 — safe warm-resume convenience (fork-first + fail-loud) of a failed/timed-out run.
+export { warmResume } from "./core/warm-resume.js";
+// Execution env for the "hand" primitive (design/44): inject via `RunnerDeps.executionEnv`.
+export { StubExecutionEnv } from "./core/stub-env.js";
+export { NodeExecutionEnv, FileError, ExecutionError } from "./internal/harness.js";
+// ext-dogfood examples 批情报①: a third-party ExecutionEnv hand-writes `{ ok: true, value }` ~20
+// times without these — the Result constructors ship with the seam they encode.
+export { ok, err } from "./internal/harness.js";
+// Windows host-lane SDK surface (service [377] ask ①): platform-gated process-tree kill (taskkill /T
+// on win32, pgid on POSIX) + shell discovery (Git-Bash fail-loud on win32, WSL launcher filtered) —
+// exported so a host exec adapter reuses them instead of mirroring ~80 lines of platform code.
+export { killProcessTree, signalProcessTree } from "./engine/execution-env/kill-tree.js";
+export { getShellConfig, isWslBashLauncher } from "./engine/execution-env/node-execution-env.js";
+// Secret-env protection (D1) — first-party canonical (src/core/secret-env.ts, NOT a vendor path: survives the
+// planned de-vendoring) so a downstream host/exec adapter reuses the SAME pattern with zero drift (service [265]).
+export { isSecretEnvKey, scrubSecretEnv } from "./core/secret-env.js";
+// Exec output-tail bound (D2) — same first-party rationale: a downstream exec adapter reuses the rolling-tail +
+// the model-facing truncation marker instead of rewriting an unbounded buffer that OOMs (service [267]).
+export { MAX_EXEC_OUTPUT_BYTES, RollingTailBuffer, markTruncated } from "./core/exec-output-tail.js";
+// Remote execution seam (design/48 §5): the type-only contract a remote/containerised ExecutionEnv
+// (E2B/Firecracker, service-owned) implements, plus the trusted-control-plane per-task injection point.
+export { RemoteExecutionError, hasDestroy, isRemoteExecutionEnv, isSuspendable, isIsolated, } from "./core/remote-env.js";
+// Thin retry helper (design/61 §9): the consumer side of the typed-retryable error contract — retry an
+// IDEMPOTENT establishment op (connect/reconnect) on a whitelisted typed code, bounded, with backoff.
+export { withRetry } from "./core/with-retry.js";
+// design/97 CORE-6: the env-agnostic git-worktree isolation primitive a control-plane executionEnvFactory uses
+// to mint a worktree-rooted env for `ctx.agent({ isolation: "worktree" })`.
+export { addWorktree, pruneWorktrees, WORKTREE_PARENT } from "./core/git-worktree-env.js";
+// L2 mechanical verification gate (design/54): the exit-oracle half of "verifiable outputs" — run a trusted
+// command suite in an ExecutionEnv and gate on real exit codes (the L3 de-correlated judge is runWithVerification).
+export { runExecGate } from "./core/exec-gate.js";
+// Untrusted-text containment (design/53 §2.A): neutralize + opaque-delimit worker output before it enters a
+// model-facing prompt (the L3 judge, the leader, the next worker), so it can't pose as instructions.
+export { sanitizeUntrustedText, delimitUntrusted, inlineUntrusted } from "./core/untrusted-text.js";
+// Property-harness (design/57 §9 / design/58): from a TRUSTED contract (spec/leader, not the worker — BUG8),
+// derive oracle-free invariants that catch the structural-contract bug class deterministically at 0 FP. A thin
+// complement to runExecGate (MECH) — it provably cannot catch value-semantic bugs; those still need tests/judge.
+export { deriveInvariants, checkInvariants } from "./core/property-harness.js";
+// design/44 hand (file/shell) toolkit: the names+effects of the tools the Runner injects from an
+// `executionEnv`/`executionEnvFactory` — NOT in `TaskSpec.tools`. Re-exported from the root so a consumer
+// doing tool-policy / resume-satisfiability reasoning can determine the hand tool set authoritatively instead
+// of mirroring a copy that drifts (service [15] — a satisfiability precheck that only looked at `spec.tools`
+// false-rejected a resumed hand-tool approval).
+export { HAND_TOOL_EFFECTS, bashReversibilityProbe, BASH_READONLY_DEFAULT_ALLOW, parseLeadingCommandName } from "./tools/fs/index.js";
+export { InMemoryToolResultStore, OFFLOAD_TOOL_NAME, DEFAULT_TOOL_RESULT_THRESHOLD_CHARS, } from "./core/tool-result-store.js";
+export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpointVersionOf, CURRENT_CHECKPOINT_VERSION, MAX_SUPPORTED_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, debitLedger, remainingBudgetMicroUsd, winnerFromOutcome, validatePendingSteer, riskSeverity, buildRiskDescriptor, summarizeCheckpoint, } from "./core/checkpoint-store.js";
+// design/101 §E19 — working-tree snapshot seam for rewind-files (TaskSpec.rewindFiles + E18 resume-at).
+export { InMemoryFileSnapshotStore, DEFAULT_SNAPSHOT_BOUNDS } from "./core/file-snapshot-store.js";
+// design/101 §E19 — the env-operating + security-critical capture/converge halves a DURABLE backend (PG/TiDB/
+// object-store/VM) MUST reuse (NOT re-implement — duplication risks re-introducing the symlink-escape / fail-
+// closed bugs the dual-review fixed). The backend supplies only blob put/get + manifest persistence.
+export { captureManifest, applyManifest } from "./core/file-snapshot-store.js";
+// PostgreSQL reference adapters for the durable seams (session center + design/45 checkpoint).
+// Driver-neutral (pass any `(text, params) => {rows}`); see src/stores/pg.ts for the contracts.
+export { PgSessionRepo, PgCheckpointStore, PgMemoryStore, PgToolResultStore, ensurePgAgentSchema, PG_AGENT_TABLES, } from "./stores/pg.js";
+// File-backed reference adapters for the local (TOC) single-user binary (design/80): the 3rd store impl,
+// selected purely by injecting these four into RunnerDeps (no engine change). One coarse boot lock per data
+// dir; the once-only checkpoint CAS is in-process (single event loop + a per-token async mutex).
+export { FileStorageBackend, FileSessionRepo, FileCheckpointStore, FileMemoryStore, FileToolResultStore, 
+// design/99 §E6 + design/101 §E19 — file-backed durable backends for the two newer seams (local/TOC).
+FileSessionPolicyStore, FileFileSnapshotStore, 
+// SVC-2 / [381]⑥ (onboarded per [375]) — file-backed durable workflow resume journal (TOC restart survival).
+// The oversize skip-journal guard is exported so the SQL twins byte-match the same degrade (no drift).
+FileWorkflowJournalStore, MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult, resolveDataRoot, sanitizeScope, sanitizePathComponent, 
+// design/84 Seam B (TOC): per-scope consolidation lock factory for consolidateScope's `acquire` point.
+createFileConsolidationLock, 
+// Crash-safe fs persistence primitives (service [269]) — a downstream file-backed store reuses the same
+// fsync + torn-tail-drop discipline instead of hand-rolling corruption-prone writes.
+atomicWriteFile, writeThenLink, ensureDir, readJsonlRecords, AppendLog, } from "./stores/file/index.js";
+export { CacheBreakDetector } from "./core/cache-break-detector.js";
+export { maybeCompact } from "./core/auto-compaction.js";
+export { brainToRuntime } from "./core/runtime.js";
+// Tool policy (allow/deny/approval gate)
+export { createSensitivePathPolicy } from "./core/sensitive-path-policy.js";
+// Q6 (design/102 §3.6) cross-version tool-name canonicalizer. Exported so consumers that read a PERSISTED tool name
+// against the live (post-Q6) roster — e.g. a service-side durable-approval satisfiability pre-check (channel [333]) —
+// canonicalize via the SAME single source as core's own resume sites, instead of maintaining a drift-prone mirror.
+export { canonicalToolName, TOMBSTONED_TOOLS } from "./core/tool-name-aliases.js";
+// service [369]: the canonical delegation-tool name constant, so a consumer's name-compare uses the SAME
+// single source as core (a raw literal went stale across the Task→Agent rename — the fail-open class).
+export { DEFAULT_SUBAGENT_TOOL_NAME, LEGACY_SUBAGENT_TOOL_NAME, SESSION_BG_DEFAULT_TIMEOUT_SEC } from "./agents/subagent.js";
+export { renderTaskNotificationXml, taskNotificationDedupKey, SystemInjectionQueue, } from "./core/task-notification.js";
+// design/115 P1: unified background-task registry — exported so a deployment (service/飞轮) can construct its own
+// registry + TaskOutput/TaskStop tools (e.g. a `/tasks` listing projection, or wiring a non-default registry into
+// custom tool assembly) against the single-source core contract instead of deep-path imports.
+export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, } from "./core/task-registry.js";
+// design/135 G2 (审计 [485]①): the Monitor tool — background command whose stdout lines stream back as
+// batched task-notification events; exported so a deployment can mount it into custom tool assemblies.
+export { createMonitorTool } from "./tools/monitor.js";
+// 审计[485]③ G4: EnterWorktree/ExitWorktree — session-level git-worktree isolation (CC parity). Exported so
+// a deployment can mount the pair into custom tool assemblies (prepare-task mounts it with write hands).
+// codex 终审 1.255 F2: ActiveWorktreeSession/WorktreeSessionRef — the checkpointable session state a
+// custom mount can share with its own suspend plumbing (prepare-task serializes it into CheckpointState).
+export { createWorktreeTools } from "./tools/worktree.js";
+// design/103: background-shell seam — exported so the v1.163 TOB/service (E2B/kata) adapter implements
+// BackgroundShellCapability against the SINGLE-SOURCE core contract (the §3.1 D1 rationale), not a mirror.
+// design/116 CONFIRM-1: MCP image-resize seam — inject via RunnerDeps.mcpImageResizer, or rely on the
+// auto-detected sharp default. Exported so a deployment can compose/wrap the default explicitly.
+export { sharpImageResizer } from "./core/mcp.js";
+// 批③ Read image pipeline: the buffer-level downsampler behind BOTH consumers (MCP resizer above +
+// the Read tool's image branch) — exported so a deployment can inject its own or force-disable via
+// HandsToolkitOptions.readImageDownsampler (E follow-up: top-level re-export).
+export { makeImageDownsampler, sharpImageDownsampler, MCP_IMAGE_MAX_BASE64, IMAGE_TARGET_RAW_SIZE, } from "./core/mcp.js";
+export { hasBackgroundShell, BackgroundShellError } from "./core/background-shell.js";
+// design/105: scheduler seam (自唤醒/自调度) — exported single-source so the TOC shell daemon backend implements
+// SchedulerCapability against the core contract (NOT a mirror). NodeExecutionEnv delegates to an injected backend.
+export { hasScheduler, isValidCronExpr, SchedulerError } from "./core/scheduler.js";
+export { createSchedulerTools, 
+// CC ScheduleWakeup 对齐批 2026-07-11: tool name + the two autonomous-loop sentinels are a deployment's
+// loop-runtime contract surface (the daemon resolves the -dynamic sentinel back to loop instructions at fire time).
+SCHEDULE_WAKEUP_TOOL_NAME, AUTONOMOUS_LOOP_SENTINEL, AUTONOMOUS_LOOP_DYNAMIC_SENTINEL, } from "./tools/scheduler-tools.js";
+// Tighten-only TaskSpec merge (design/center §10): layer overrides without silently weakening safety fields.
+export { tightenTaskSpec, TaskSpecTightenError } from "./core/tighten-task-spec.js";
+export { createAllowDenyPolicy, createApprovalPolicy, createCoarseCommandNamePolicy, 
+// feat(parity-206): CC 2.1.205/206 auto-mode safety rules (always-on in the runner; exported for
+// direct composition/tests) — session-transcript tamper deny + unverifiable `rm -rf $VAR` deny.
+createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, findUnverifiableRecursiveDelete, combinePolicies, decisionText, resolveAsk, } from "./core/tool-policy.js";
+// design/127 — 参数级权限规则 DSL(CC 批 γ):声明式规则字符串 → ToolPolicy 编译器(gnn/Lh/ZMr parity;
+// 纯函数零 run-loop;Settings 层把各层合并成单一规则表后编译一个 policy 再 combinePolicies)。
+export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, } from "./core/permission-rules.js";
+// In-process hooks (design/37): PreToolUse / PostToolUse / UserPromptSubmit
+export { formatHookFeedback, runToolGate, } from "./core/hooks.js";
+// Long-term memory (L2/L3). design/138 S4 (BREAKING): the Runner-integrated legacy path
+// (RunnerDeps.memoryStore → remember/recall tools + <user_memory> injection + consolidation/
+// selective/dynamic recall) is RETIRED — RunnerDeps.memoryBackend (MemoryEngine, below) is the
+// only runner-driven memory. The store types/implementations stay exported for standalone use;
+// the legacy tool factories are @deprecated (see their JSDoc) and removed next major.
+export { InMemoryMemoryStore, composeMemoryBlock, 
+// design/84 Seam A: multi-scope (layered) memory normalization + inject-all layering.
+composeLayeredMemoryBlock, normalizeMemorySpec, createRememberTool, createRecallTool, supportsConsolidation, 
+// design/84 Seam B: periodic/incremental consolidation cursor gate.
+supportsPeriodicConsolidation, firstSentence, 
+// design/81 Slice 2b/3: zero-model lexical term expansion + the optional vector embedder seam.
+expandLexicalTerms, lexicalSearchMatch, 
+// design/77 §2 Gate-2: promotable-write utilityVerdict chokepoint.
+classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, 
+// CC-parity P0-2: secret-scan store-boundary write invariant.
+detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, } from "./core/memory.js";
+// design/138 S1 — MemoryEngine (injection-first file-based memory: materialize/harvest lifecycle,
+// FileBackend TOC 权威盘, CC-verbatim instruction injection). Opt-in via RunnerDeps.memoryBackend.
+export { MemoryEngine, FileMemoryEngineBackend, 
+// design/142 边界重切 ([622]): the Pg backend is retired from this surface — authoritative
+// implementation moved to @sema-ai/server (dialect notes: docs/MEMORY-BACKEND-DIALECT-NOTES.md).
+// The conformance suite STAYS public: it is the cross-repo acceptance contract every dialect
+// twin / third-party (a)-lane backend runs.
+memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, 
+// design/138 S2 — shared write scan (S2-C) + journaled announcement queue / write-scan fuse (S2-B).
+scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, 
+// design/142 §1 — scope identity contract (v2 opt-in) + project marker + S1.5 migration primitive.
+SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, 
+// design/142 §3③/[421] Q2(a) — remote-lane data plane + central-side inbound screen (S2a).
+materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, 
+// design/142 §1.5 — marker-first mount keys + the path→projectId recovery hint cache (S2a).
+deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, 
+// design/142 §3 sync-contract core + §6.1(b) RecallSource enhancement seat (S2.5).
+reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, 
+// design/142 S2.5 — the TOC-side File half of one sync round ([671]① central API's client twin).
+syncMemoryScope, } from "./core/memory-engine/index.js";
+// [625]③B — the vector-util quartet a dialect-twin MemoryBackend needs (service inlined them
+// byte-equal pending these exports; a third-party (a)-lane backend needs the SAME primitives to
+// keep search-equivalence with the File/Pg reference implementations).
+export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";
+export { isUniqueViolation } from "./stores/pg.js";
+// Selective recall (design/65 §2.2): manifest + side-query, opt-in via RunnerDeps.memoryRecall.
+export { createBrainMemorySelector, selectAndComposeMemory, 
+// design/84 Seam A: multi-scope (layered) selective recall + (scope,id) composite de-dup key.
+selectAndComposeLayeredMemory, encodeSurfacedKey, buildManifestText, validateSelectedIds, composeSelectiveMemoryBlock, composeSelectiveBody, formatMemoryAge, resolveLinkedIds, RECALL_CAVEAT, DEFAULT_MAX_SELECTED, DEFAULT_MAX_LINKED, } from "./core/memory-recall.js";
+// design/86 §3 缺口 A: dynamic memory re-recall seam (post-compaction reground), opt-in via RunnerDeps.dynamicRecall.
+export { buildRecallQuery, runDynamicRecall, DEFAULT_RECENT_MESSAGE_WINDOW, DEFAULT_MAX_QUERY_CHARS, } from "./core/dynamic-recall.js";
+// Memory write-side consolidation (design/41): opt-in Mem0-style ADD/UPDATE/DELETE/NONE at task end.
+export { runMemoryConsolidation, CONSOLIDATION_SYSTEM_PROMPT, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATION_SEARCH_LIMIT, DEFAULT_CONSOLIDATION_MAX_NOTES, DEFAULT_CONSOLIDATION_TIMEOUT_SEC, 
+// The shared conservative no-LLM dedup normalization (case+whitespace only; symbol/word preserving). Exported
+// so service's write-time dedup folds on the SAME rule as consolidation's `<lo` cheap path (service [364]/[365]).
+normalizeForExactMatch, } from "./core/runner/memory-consolidation.js";
+// design/84 Seam B: cursor-incremental scope consolidation (periodic path) + inline cursor advance.
+export { consolidateScope, advanceCursorAfterInline, } from "./core/consolidate-scope.js";
+export { DEFAULT_COMPACTION_INSTRUCTIONS } from "./core/auto-compaction.js";
+// Prompt / harness layer
+export { DEFAULT_SYSTEM_PROMPT, CODE_AGENT_PROMPT, 
+// G1+G2 (CC 198 parity) — lean delegated-sub-agent persona + return contract (锚 pretty.js:419977)
+SUBAGENT_PROMPT, 
+// design/102 (K-8 CC full-body) — full-body prompt deltas + composed prompt
+AUTONOMY_SELF_AUDIT, ANTI_VERBOSITY, TOOL_PARAM_JSON, FULL_BODY_SYSTEM_PROMPT, MEMORY_GUIDANCE, MEMORY_SAFETY, MEMORY_HYGIENE, OUTPUT_EFFICIENCY, CYBER_RISK, URL_SAFETY, SUMMARIZE_TOOL_RESULTS, EXECUTION_ENVIRONMENT, harnessContext, buildEnvironmentContext, buildGitSnapshot, buildScratchpadSection, GIT_STATUS_MAX_CHARS, formatLocalDate, defaultPromptProvider, composeSystemPrompt, 
+// 提示词主权批 — the structural constitution layer (role base + harness/safety/mode/memory blocks).
+// Exported so a deployment can preview/compose the same assembly core applies at prepareTask.
+composeConstitution, constitutionBlocks, analyzePromptCacheFriendliness, assertPromptCacheFriendly, } from "./prompts/default.js";
+export { SUPERVISOR_PROMPT, ORCHESTRATION_GUIDANCE, ORCHESTRATION_AWARENESS, GOAL_COMPLETION_GUIDANCE } from "./prompts/supervisor.js";
+// Reasoning-intensity abstraction (design/96 S3/S5) + effective-intensity surfacing (S6)
+export { DEFAULT_EFFORT_LEVELS, REASONING_BUDGET_SHARE, isThinkingLevel, rankOf, resolveEffort, resolveBinary, reasoningBudgetShare, resolveReasoning, 
+// design/96 §D (S4) — reasoning-tier → orchestration linkage
+resolveReasoningProfile, } from "./brain/reasoning.js";
+// Scenario profiles + orchestration env (design/96 S6/S7)
+export { DESIGN_REVIEW_PROMPTS, CODE_REVIEW_PROMPT, SCENARIO_REGISTRY, runScenario, } from "./scenarios/scenario-registry.js";
+export { teacherMode, TEACHER_PROFILE, } from "./scenarios/teacher-quickstart.js";
+export { loadOrchestrationEnv, DEFAULT_REASONING_INTENSITY, } from "./scenarios/env.js";
+// Workflow mode + /workflows observability (design/97 S1)
+export { runWorkflow, startWorkflow, workflowAgentCallKey, WorkflowBudgetExceededError, WorkflowNestingError, WorkflowAgentSchemaError, 
+// G5 (CC 198 parity, 锚 pretty.js:447248/:447333/:447257/:447290) — workflow-subagent hard
+// return-contract personas (two-state) + the composite appends for script-supplied custom personas
+WORKFLOW_SUBAGENT_PROMPT, WORKFLOW_SUBAGENT_PROMPT_SCHEMA, WORKFLOW_SUBAGENT_APPEND, WORKFLOW_SUBAGENT_APPEND_SCHEMA, MAX_WORKFLOW_ITEMS, } from "./orchestration/workflow.js";
+export { listWorkflowRuns, getWorkflowRun, subscribeWorkflow, deriveAgentDisplayStatus } from "./orchestration/workflow-observe.js";
+// design/96 §C (S2) — goal 模式(LLM 自报双闸 + core doneCheck 续跑 + G1 脱钩)
+export { runGoal, DECLARE_DONE_TOOL_NAME, } from "./orchestration/goal.js";
+// design/73 §1 v1 — TaskOutcome 反馈账本薄 seam:core 只发 mechanical 事实(runGoal 终态单点 + 显式
+// helper);聚合/策略在 service。🔴 红线:llm_assisted/self-report 绝不进 v1;必带 oracleHadRedRun。
+export { emitTaskOutcome } from "./core/task-outcome.js";
+// design/125 — SpecContract:spec→Verifier 闭环一等原语(机器可读契约 + 三值 oracle + frozen 快照恢复)
+// 🔴 CODE-tier 输入:contract 只能来自部署作者/可信代码路径(oracle cmd 会被亲跑)。
+export { runOracle, captureBaseline, resolveFrozenPaths, snapshotFrozenPaths, restoreFrozenPaths, specError, } from "./core/spec-contract.js";
+export { runSpec } from "./orchestration/run-spec.js";
+// design/98 S8 — LLM self-orchestration seam (the deployment implements WorkflowScriptRunner; core defines
+// the contract + the gate predicate).
+export { isSelfOrchestrationActive, workflowsCapability, selfOrchestrationFailClosedReason, } from "./orchestration/workflow-script-runner.js";
+// design/98 S8b — the dev vm runner (NOT a boundary), the static meta parser, the governance whitelist type,
+// and the conformance contract a HARD runner must pass.
+export { devWorkflowScriptRunner } from "./orchestration/dev-vm-script-runner.js";
+export { parseWorkflowMeta, splitWorkflowMeta, WorkflowScriptError, workflowScriptReadsClockOrRandom } from "./orchestration/workflow-meta.js";
+export { assertWorkflowSandboxConformance, assertWorkflowPrimitivesWiring } from "./orchestration/workflow-sandbox-conformance.js";
+export { WorkflowModelNotAllowedError } from "./orchestration/workflow-governance.js";
+export { WorkflowMaxAgentsError, WorkflowResultTooLargeError } from "./orchestration/workflow.js";
+// PARITY-SPOT-WORKFLOW B5/F2 — the scriptPath/name persistence seam + the TOC file-backed default.
+// design/140 §6 1a/1b — the named-registry defaultArgs layer + merge chain + listing projection types.
+export { createFileWorkflowScriptStore, mergeWorkflowArgs, } from "./orchestration/workflow-script-store.js";
+// design/140 §6 1c — built-in named workflows (team-discussion) + registry helpers (builtinAgents analog).
+export { TEAM_DISCUSSION_WORKFLOW_NAME, TEAM_DISCUSSION_SCRIPT, builtinWorkflowDefinitions, builtinWorkflowListings, resolveBuiltinWorkflow, } from "./orchestration/builtin-workflows.js";
+// PARITY-SPOT-WORKFLOW B4/F5 — workflow-layer per-agent resilience constants (CC F0m/Mxl/45s verbatim).
+export { WORKFLOW_AGENT_STALL_MS, WORKFLOW_AGENT_MAX_RETRIES, WORKFLOW_AGENT_THROTTLE_BACKOFF_MS } from "./orchestration/workflow.js";
+// design/98 S8c — the run_workflow tool + completion-notify seam + deployment limits.
+// design/136 §2.3 (BREAKING): createWorkflowStatusTool / WORKFLOW_STATUS_TOOL_NAME removed — poll capability
+// is TaskOutput ("WorkflowStatus" lives on as its alias + an OLD_TO_NEW entry).
+export { createRunWorkflowTool, RUN_WORKFLOW_TOOL_NAME, workflowWhenToUseText, renderNamedWorkflowListing, } from "./orchestration/run-workflow-tool.js";
+// design/80 D-B — the first-party present_plan tool name (CC ExitPlanMode parity; auto-mounted under
+// TaskSpec.enablePlanMode). Exported so a consumer can recognize it in tool_start/tool_end events.
+export { PRESENT_PLAN_TOOL_NAME, ENTER_PLAN_MODE_TOOL_NAME } from "./core/present-plan-tool.js";
+export { summarizeWorkflowRun, isTerminalWorkflowStatus, WorkflowRunStoreError, InMemoryWorkflowRunStore, } from "./core/workflow-run-store.js";
+export { FileWorkflowRunStore } from "./stores/file/workflow-run-store.js";
+export { workflowRunStoreContract } from "./core/workflow-run-store-contract.js";
+// design/97 CORE-7: the load-bearing resume journal — replay the unchanged prefix on a re-run (service ships PG).
+export { InMemoryWorkflowJournalStore, callKeyOrdinal, } from "./core/workflow-journal-store.js";
+// design/97 CORE-2: the untrusted-text → human/LLM egress transform (redact host leaks + size-bound + fence).
+// Top-level so a downstream (service SVC-5 steer-in redaction gate) reuses it without anchoring a vendor path.
+export { untrustedEgressForHuman, redactHostLeaks, boundedRedactedSummary } from "./core/untrusted-egress.js";
+// Multi-agent
+// design/136 §2.1 (BREAKING): createForkTool / FORK_TOOL_NAME / ForkToolOptions removed — fork lives in
+// Agent(subagent_type:"fork") incl. run_in_background; durable Fork calls resolve via OLD_TO_NEW Fork→Agent.
+export { createSubagentTool, createSendMessageTool, 
+// 黑板 [558] C — read a retained background child's recent tool steps on demand (pull face)
+createAgentTranscriptTool, AGENT_TRANSCRIPT_TOOL_NAME, FORK_SUBAGENT_TYPE, 
+// F8 (CC 198 parity, 锚 pretty.js:225062-225073 `U3.maxTurns`) — the fork arm's default turn cap
+FORK_DEFAULT_MAX_TURNS, 
+// F4 (CC 198 parity, 锚 pretty.js:453029 `tIl`) — whenToUseLean selection helper
+agentWhenToUseText, 
+// G4 (CC 198 parity, 锚 pretty.js:225024 `Z4t`) — the fork message-layer directive frame
+FORK_DIRECTIVE_FRAME, SEND_MESSAGE_TOOL_NAME, SUBAGENT_SYSTEM_NOTE, 
+// codex 终审 1.255 F1: session-scoped retain — read side (a custom SendMessage mount) + the explicit
+// release anchor (a deployment that releases sessions WITHOUT calling reapSessionBackground calls this
+// from its own session-terminal path so retained child sessions never dangle to the store TTL).
+getSessionRetainLedger, releaseSessionRetainLedger, } from "./agents/subagent.js";
+export { defineAgent } from "./agents/agent-definition.js";
+// F1 (design/135 批次3, CC 2.1.198 parity) — built-in Explore/Plan agent types (CC HCe registry,
+// pretty.js:487221-487240; GA default-on, opt out via SubagentToolOptions.builtinAgents:false).
+export { builtinAgentDefinitions, BUILTIN_READONLY_DENY_TOOLS, EXPLORE_WHEN_TO_USE, EXPLORE_WHEN_TO_USE_LEAN, PLAN_WHEN_TO_USE, EXPLORE_SYSTEM_PROMPT, PLAN_SYSTEM_PROMPT, } from "./agents/builtin-agents.js";
+export { runTeamDiscussion, } from "./agents/team.js";
+// Server (OA integration)
+export { createTaskServer, } from "./server/http.js";
+// Context management (request-only, non-destructive)
+export { clearStaleToolResults, 
+// checklist #54: CC microCompact.ts:41-50 whitelist — exported so embedders can extend via
+// ContextEditOptions.compactableTools without re-listing the CC base set.
+COMPACTABLE_TOOLS, editBudget, } from "./core/context-edit.js";
+// Brain adapters
+export { createOpenAIBrain } from "./brain/openai.js";
+export { createAnthropicBrain } from "./brain/anthropic.js";
+// design/119 (CC 2.1.198 rebaseline): Fable-5-class wire-contract presets (capability DATA, no catalog).
+export { FABLE_5_COMPAT, fable5Model } from "./brain/model-presets.js";
+export { createFailoverBrain } from "./brain/failover.js";
+export { createRoutingBrain } from "./brain/routing.js";
+export { repairTextToolCalls } from "./brain/tool-call-repair.js";
+// Resilience (1.38): circuit breaker + retry backoff helpers.
+export { createCircuitBreakerBrain, CIRCUIT_OPEN_MARKER, } from "./brain/circuit-breaker.js";
+// Degradation cascade (1.39 + design/126 chain): downgrade along an ordered fallback chain (≤3, CC 批 β)
+// on rate_limit / breaker-open — plus server_error / last_resort on the chain form — mark TaskResult.degraded.
+export { createDegradingBrain, readDegradation, DEGRADED_DIAGNOSTIC_TYPE, } from "./brain/degrading.js";
+export { retryBackoffMs, parseRetryAfter } from "./brain/retry.js";
+// Tiered timeouts (1.38.1): connect + first-token, shared by the OpenAI/Anthropic brains.
+export {} from "./brain/timeout.js";
+// design/141 examples 批缺口①: the vocabulary a custom Brain implementation SPEAKS — message/content/
+// event types plus the stream factory. `Brain`/`Model` were public but this layer wasn't, forcing
+// structural derivation (Parameters<Brain["stream"]>[1] …) — the seam was closed, the ergonomics weren't.
+// Routed via the internal facade (design/33 single coupling point), not a deep engine path.
+export { createAssistantMessageEventStream } from "./internal/llm.js";
+// ext-dogfood F2 (docs/EXT-DOGFOOD-2026-07-12.md): a third-party ToolSpec.parameters needs the SAME
+// typebox instance/version core validates against — re-export the schema builder so integrators never
+// reach a transitive dep through hoisting (pnpm-strict/isolated installs would break that import).
+export { Type } from "typebox";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,aAAa;AACb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG9E,kBAAkB;AAClB,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErI,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,UAAU,EAAuB,mBAAmB,EAAwB,MAAM,gBAAgB,CAAC;AAClJ,gCAAgC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,6GAA6G;AAC7G,OAAO,EAAE,mBAAmB,EAAqB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAA4B,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC3G,OAAO,EACL,uBAAuB,EACvB,kCAAkC,EAClC,2BAA2B,GAE5B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAuB,MAAM,0BAA0B,CAAC;AACrH,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,GAOvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,cAAc,GAWf,MAAM,eAAe,CAAC;AACvB,2GAA2G;AAC3G,gHAAgH;AAChH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAsB,MAAM,uBAAuB,CAAC;AAChF,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AACnC,gHAAgH;AAChH,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,eAAe,GAGhB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAwB,MAAM,qCAAqC,CAAC;AAC9F,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,iBAAiB;AACjB,iFAAiF;AACjF,4DAA4D;AAC5D,WAAW,EACX,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GAMnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAsC,MAAM,wBAAwB,CAAC;AAC7G,OAAO,EAAE,UAAU,EAAE,YAAY,EAAuB,MAAM,mBAAmB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE3E,kGAAkG;AAClG,OAAO,EACL,mBAAmB,EACnB,kBAAkB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,iGAAiG;AACjG,OAAO,EAAE,SAAS,EAAoC,MAAM,iBAAiB,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAA2C,MAAM,0BAA0B,CAAC;AAC1G,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAuB,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAA8B,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,GAMf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,aAAa,GAOd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,eAAe,EACf,0BAA0B,EAC1B,0BAA0B,GAQ3B,MAAM,yBAAyB,CAAC;AACjC,+GAA+G;AAC/G,+GAA+G;AAC/G,kHAAkH;AAClH,OAAO,EACL,qBAAqB,GAItB,MAAM,4BAA4B,CAAC;AACpC,wGAAwG;AACxG,4GAA4G;AAC5G,8GAA8G;AAC9G,uFAAuF;AACvF,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,qBAAqB,GAKtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,UAAU,GAMX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,UAAU,EAA8C,MAAM,eAAe,CAAC;AAC5G,8GAA8G;AAC9G,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,aAAa;AACb,2GAA2G;AAC3G,oFAAoF;AACpF,cAAc,EACd,QAAQ,GAMT,MAAM,gCAAgC,CAAC;AACxC,8GAA8G;AAC9G,kHAAkH;AAClH,OAAO,EAAE,+BAA+B,EAA0B,MAAM,+BAA+B,CAAC;AACxG,2GAA2G;AAC3G,yHAAyH;AACzH,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAiD,MAAM,yBAAyB,CAAC;AACzG,wFAAwF;AACxF,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,GAGpB,MAAM,6BAA6B,CAAC;AACrC,wFAAwF;AACxF,OAAO,EACL,OAAO,EACP,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,WAAW,EACX,YAAY,EACZ,iBAAiB,EACjB,cAAc,EACd,MAAM,GAUP,MAAM,mBAAmB,CAAC;AAC3B,mGAAmG;AACnG,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,4FAA4F;AAC5F,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACpF,8FAA8F;AAC9F,gFAAgF;AAChF,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAChD,qGAAqG;AACrG,oGAAoG;AACpG,+FAA+F;AAC/F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AACjG,8GAA8G;AAC9G,mHAAmH;AACnH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtE,gHAAgH;AAChH,yGAAyG;AACzG,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAErG,mGAAmG;AACnG,wGAAwG;AACxG,OAAO,EACL,oBAAoB,EACpB,UAAU,EACV,oBAAoB,EACpB,aAAa,EACb,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,uGAAuG;AACvG,sGAAsG;AACtG,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAiBjD,+GAA+G;AAC/G,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAA2B,MAAM,4BAA4B,CAAC;AACnH,4GAA4G;AAC5G,oHAAoH;AACpH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,4GAA4G;AAC5G,qGAAqG;AACrG,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AACpG,6GAA6G;AAC7G,+GAA+G;AAC/G,iHAAiH;AACjH,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAQ/E,iGAAiG;AACjG,0GAA0G;AAC1G,8GAA8G;AAC9G,6GAA6G;AAC7G,gDAAgD;AAChD,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AACtI,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,mCAAmC,GAGpC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,mBAAmB,EACnB,mBAAmB,EACnB,0BAA0B,EAC1B,gCAAgC,EAChC,2BAA2B,EAC3B,WAAW,EACX,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,mBAAmB,EACnB,mBAAmB,GAkBpB,MAAM,4BAA4B,CAAC;AACpC,wGAAwG;AACxG,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACnG,8GAA8G;AAC9G,8GAA8G;AAC9G,qGAAqG;AACrG,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE/E,+FAA+F;AAC/F,gGAAgG;AAChG,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,GAMhB,MAAM,gBAAgB,CAAC;AACxB,yGAAyG;AACzG,4GAA4G;AAC5G,iGAAiG;AACjG,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,mBAAmB;AACnB,sGAAsG;AACtG,sBAAsB,EACtB,qBAAqB;AACrB,6GAA6G;AAC7G,uGAAuG;AACvG,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,eAAe,EACf,aAAa,EACb,qBAAqB;AACrB,uGAAuG;AACvG,2BAA2B;AAC3B,wGAAwG;AACxG,qFAAqF;AACrF,eAAe,EACf,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,SAAS,GAGV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAqD,MAAM,gCAAgC,CAAC;AACvH,OAAO,EAAE,YAAY,EAA4B,MAAM,2BAA2B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,yCAAyC;AACzC,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,oHAAoH;AACpH,sHAAsH;AACtH,mHAAmH;AACnH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAClF,yGAAyG;AACzG,uGAAuG;AACvG,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAC7H,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,oBAAoB,GAKrB,MAAM,6BAA6B,CAAC;AACrC,gHAAgH;AAChH,kHAAkH;AAClH,8FAA8F;AAC9F,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAalB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,EACtB,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AACjC,qGAAqG;AACrG,uGAAuG;AACvG,OAAO,EAAE,iBAAiB,EAA2B,MAAM,oBAAoB,CAAC;AAChF,0GAA0G;AAC1G,yGAAyG;AACzG,mGAAmG;AACnG,0GAA0G;AAC1G,OAAO,EAAE,mBAAmB,EAAkF,MAAM,qBAAqB,CAAC;AAC1I,uGAAuG;AACvG,2GAA2G;AAC3G,sGAAsG;AACtG,iGAAiG;AACjG,OAAO,EAAE,iBAAiB,EAAwB,MAAM,eAAe,CAAC;AACxE,kGAAkG;AAClG,mGAAmG;AACnG,+EAA+E;AAC/E,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,GAGtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAStF,2GAA2G;AAC3G,mHAAmH;AACnH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AASpF,OAAO,EACL,oBAAoB;AAEpB,qGAAqG;AACrG,oHAAoH;AACpH,yBAAyB,EACzB,wBAAwB,EACxB,gCAAgC,GACjC,MAAM,4BAA4B,CAAC;AACpC,6GAA6G;AAC7G,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACpF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B;AAC7B,iGAAiG;AACjG,gGAAgG;AAChG,+BAA+B,EAC/B,8BAA8B,EAC9B,+BAA+B,EAC/B,eAAe,EACf,YAAY,EACZ,UAAU,GAQX,MAAM,uBAAuB,CAAC;AAC/B,gFAAgF;AAChF,sEAAsE;AACtE,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,GAMd,MAAM,4BAA4B,CAAC;AACpC,4EAA4E;AAC5E,OAAO,EACL,kBAAkB,EAClB,WAAW,GAoBZ,MAAM,iBAAiB,CAAC;AACzB,wFAAwF;AACxF,6FAA6F;AAC7F,+FAA+F;AAC/F,+FAA+F;AAC/F,sFAAsF;AACtF,OAAO,EACL,mBAAmB,EACnB,kBAAkB;AAClB,sFAAsF;AACtF,yBAAyB,EACzB,mBAAmB,EAGnB,kBAAkB,EAClB,gBAAgB,EAChB,qBAAqB;AACrB,oEAAoE;AACpE,6BAA6B,EAC7B,aAAa;AACb,+FAA+F;AAC/F,kBAAkB,EAClB,kBAAkB;AAElB,mEAAmE;AACnE,kBAAkB,EAClB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe;AACf,8DAA8D;AAC9D,YAAY,EACZ,sBAAsB,EACtB,+BAA+B,GAShC,MAAM,kBAAkB,CAAC;AAC1B,kGAAkG;AAClG,gGAAgG;AAChG,OAAO,EACL,YAAY,EACZ,uBAAuB;AACvB,uFAAuF;AACvF,iGAAiG;AACjG,6FAA6F;AAC7F,4CAA4C;AAC5C,qBAAqB,EACrB,oCAAoC,EAEpC,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,YAAY,EACZ,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,2BAA2B,EAC3B,wBAAwB;AACxB,oGAAoG;AACpG,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACd,mBAAmB;AAmBnB,mGAAmG;AACnG,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,4BAA4B,EAC5B,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAEhB,YAAY;AAEZ,2FAA2F;AAC3F,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B;AAM/B,4FAA4F;AAC5F,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB;AACrB,mFAAmF;AACnF,sBAAsB,EACtB,gBAAgB,EAChB,eAAe;AAKf,iGAAiG;AACjG,eAAe,GAOhB,MAAM,+BAA+B,CAAC;AACvC,6FAA6F;AAC7F,gGAAgG;AAChG,uEAAuE;AACvE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,gGAAgG;AAChG,OAAO,EACL,yBAAyB,EACzB,sBAAsB;AACtB,8FAA8F;AAC9F,6BAA6B,EAC7B,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,GASnB,MAAM,yBAAyB,CAAC;AACjC,oHAAoH;AACpH,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,6BAA6B,EAC7B,uBAAuB,GAIxB,MAAM,0BAA0B,CAAC;AAClC,qGAAqG;AACrG,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,0BAA0B,EAC1B,kCAAkC,EAClC,+BAA+B,EAC/B,iCAAiC;AACjC,8GAA8G;AAC9G,kHAAkH;AAClH,sBAAsB,GAKvB,MAAM,uCAAuC,CAAC;AAC/C,oGAAoG;AACpG,OAAO,EACL,gBAAgB,EAChB,wBAAwB,GAGzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,yBAAyB;AACzB,OAAO,EACL,qBAAqB,EACrB,iBAAiB;AACjB,kGAAkG;AAClG,eAAe;AACf,4EAA4E;AAC5E,mBAAmB,EACnB,cAAc,EACd,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,aAAa,EACb,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,sBAAsB,EACtB,qBAAqB,EACrB,cAAc,EACd,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EAEf,qBAAqB,EACrB,mBAAmB;AACnB,8FAA8F;AAC9F,8FAA8F;AAC9F,mBAAmB,EACnB,kBAAkB,EAElB,8BAA8B,EAC9B,yBAAyB,GAK1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEvI,yFAAyF;AACzF,OAAO,EAKL,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,MAAM,EACN,aAAa,EACb,aAAa,EACb,oBAAoB,EACpB,gBAAgB;AAChB,6DAA6D;AAC7D,uBAAuB,GAGxB,MAAM,sBAAsB,CAAC;AAE9B,0DAA0D;AAC1D,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,GAMZ,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,WAAW,EACX,eAAe,GAGhB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,2BAA2B,GAG5B,MAAM,oBAAoB,CAAC;AAE5B,0DAA0D;AAC1D,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,2BAA2B,EAC3B,oBAAoB,EACpB,wBAAwB;AACxB,0FAA0F;AAC1F,mGAAmG;AACnG,wBAAwB,EACxB,+BAA+B,EAC/B,wBAAwB,EACxB,+BAA+B,EAE/B,kBAAkB,GAiBnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,iBAAiB,EAAE,wBAAwB,EAA2B,MAAM,qCAAqC,CAAC;AAC7J,oEAAoE;AACpE,OAAO,EACL,OAAO,EACP,sBAAsB,GAOvB,MAAM,yBAAyB,CAAC;AACjC,mFAAmF;AACnF,mFAAmF;AACnF,OAAO,EAAE,eAAe,EAAoB,MAAM,wBAAwB,CAAC;AAC3E,mFAAmF;AACnF,6DAA6D;AAC7D,OAAO,EACL,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,SAAS,GAQV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,OAAO,EAAqE,MAAM,6BAA6B,CAAC;AACzH,2GAA2G;AAC3G,sCAAsC;AACtC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,iCAAiC,GAIlC,MAAM,2CAA2C,CAAC;AACnD,6GAA6G;AAC7G,wDAAwD;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yCAAyC,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,gCAAgC,EAAE,MAAM,kCAAkC,CAAC;AAC/I,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AACnI,OAAO,EAAE,4BAA4B,EAA0B,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAClG,mGAAmG;AACnG,uGAAuG;AACvG,OAAO,EACL,6BAA6B,EAC7B,iBAAiB,GAIlB,MAAM,0CAA0C,CAAC;AAClD,2GAA2G;AAC3G,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,GAEvB,MAAM,sCAAsC,CAAC;AAC9C,wGAAwG;AACxG,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,kCAAkC,EAAE,MAAM,6BAA6B,CAAC;AACtI,sFAAsF;AACtF,6GAA6G;AAC7G,gFAAgF;AAChF,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,GAI3B,MAAM,sCAAsC,CAAC;AAC9C,qGAAqG;AACrG,mGAAmG;AACnG,OAAO,EAAE,sBAAsB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AAChG,OAAO,EAGL,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAoC,MAAM,qCAAqC,CAAC;AAC7G,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,kHAAkH;AAClH,OAAO,EAGL,4BAA4B,EAC5B,cAAc,GACf,MAAM,kCAAkC,CAAC;AAC1C,8GAA8G;AAC9G,+GAA+G;AAC/G,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE9G,cAAc;AACd,wGAAwG;AACxG,6GAA6G;AAC7G,OAAO,EACL,kBAAkB,EAClB,qBAAqB;AACrB,0FAA0F;AAC1F,yBAAyB,EACzB,0BAA0B,EAC1B,kBAAkB;AAClB,gGAAgG;AAChG,sBAAsB;AACtB,gFAAgF;AAChF,kBAAkB;AAClB,wFAAwF;AACxF,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB;AAQpB,mGAAmG;AACnG,uGAAuG;AACvG,gGAAgG;AAChG,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,+FAA+F;AAC/F,gGAAgG;AAChG,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,GAMlB,MAAM,kBAAkB,CAAC;AAE1B,0BAA0B;AAC1B,OAAO,EACL,gBAAgB,GAGjB,MAAM,kBAAkB,CAAC;AAE1B,qDAAqD;AACrD,OAAO,EACL,qBAAqB;AACrB,2FAA2F;AAC3F,0EAA0E;AAC1E,iBAAiB,EACjB,UAAU,GAEX,MAAM,wBAAwB,CAAC;AAEhC,iBAAiB;AACjB,OAAO,EAAE,iBAAiB,EAA0B,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,oBAAoB,EAA6B,MAAM,sBAAsB,CAAC;AACvF,yGAAyG;AACzG,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAA4B,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,8DAA8D;AAC9D,OAAO,EACL,yBAAyB,EAKzB,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AACpC,wGAAwG;AACxG,+GAA+G;AAC/G,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,wBAAwB,GAIzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnE,0FAA0F;AAC1F,OAAO,EAA2B,MAAM,oBAAoB,CAAC;AAC7D,mGAAmG;AACnG,kGAAkG;AAClG,0GAA0G;AAC1G,4FAA4F;AAC5F,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AA4DtE,oGAAoG;AACpG,sGAAsG;AACtG,mGAAmG;AACnG,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC"}

package/dist/internal/harness.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Internal boundary to the engine's harness layer (design/33; de-vendored by design/118). Everything
+ * in `src/` (outside `src/internal/`) imports these symbols from HERE, never via a deep
+ * `../engine/...` path — one auditable coupling point (CI-guarded by test/vendor-insulation.test.ts).
+ * The vendored tree this facade used to front is fully retired (design/118 ⓪-⑤); the facade stays so
+ * consumers never notice which module a symbol lives in.
+ */
+export { AgentHarness } from "../engine/harness/agent-harness.js";
+export { ExecutionError, FileError, ok, err } from "../engine/harness/types.js";
+export { DEFAULT_CHARS_PER_TOKEN, DEFAULT_COMPACTION_SETTINGS, compact, computeFileLists, estimateContextTokens, estimateTokens, prepareCompaction, shouldCompact, } from "../engine/compaction/compaction.js";
+export type { CompactionPreparation } from "../engine/compaction/compaction.js";
+export type { AgentCoreRuntimeDeps } from "../engine/loop/runtime-deps.js";
+export type { AgentMessage, AgentTool, AgentToolResult, ThinkingLevel, } from "../engine/loop/types.js";
+export type { AgentHarnessEvent, CompactionSettings, ExecutionEnv, ExecutionErrorCode, FileErrorCode, FileInfo, Result, SessionApi, SessionMetadata, SessionRepo, SessionStorage, SessionTreeEntry, Skill, } from "../engine/harness/types.js";
+export { NodeExecutionEnv } from "../engine/execution-env/node-execution-env.js";
+export type { ExecutionEnvExecOptions } from "../engine/harness/types.js";
+export { Session, buildSessionContext } from "../engine/session/session.js";
+export { getEntriesToFork } from "../engine/session/repo-utils.js";
+export { validateEntriesForImport, StreamingImportValidator } from "../engine/session/import-validate.js";
+export { BaseSessionStorage, leafIdAfterEntry } from "../engine/session/storage-base.js";
+export { InMemorySessionStorage } from "../engine/session/memory-storage.js";
+export { InMemorySessionRepo } from "../engine/session/memory-repo.js";
+export { uuidv7 } from "../engine/session/uuid.js";
+export { SessionError } from "../engine/harness/types.js";
+export type { SessionWriteOptions, CompactionEntry } from "../engine/harness/types.js";
+//# sourceMappingURL=harness.d.ts.map

package/dist/internal/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../src/internal/harness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAEhF,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,OAAO,EACP,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,oCAAoC,CAAC;AAC5C,YAAY,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAChF,YAAY,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,YAAY,EACV,YAAY,EACZ,SAAS,EACT,eAAe,EACf,aAAa,GACd,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,kBAAkB,EAClB,aAAa,EACb,QAAQ,EACR,MAAM,EACN,UAAU,EACV,eAAe,EACf,WAAW,EACX,cAAc,EACd,gBAAgB,EAChB,KAAK,GACN,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAGjF,YAAY,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,YAAY,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/internal/harness.js

@@ -0,0 +1,24 @@
+/**
+ * Internal boundary to the engine's harness layer (design/33; de-vendored by design/118). Everything
+ * in `src/` (outside `src/internal/`) imports these symbols from HERE, never via a deep
+ * `../engine/...` path — one auditable coupling point (CI-guarded by test/vendor-insulation.test.ts).
+ * The vendored tree this facade used to front is fully retired (design/118 ⓪-⑤); the facade stays so
+ * consumers never notice which module a symbol lives in.
+ */
+export { AgentHarness } from "../engine/harness/agent-harness.js";
+export { ExecutionError, FileError, ok, err } from "../engine/harness/types.js";
+// Compaction is naturalized (design/71 P2 hot path → src/engine; first-party ownership, direct tests).
+export { DEFAULT_CHARS_PER_TOKEN, DEFAULT_COMPACTION_SETTINGS, compact, computeFileLists, estimateContextTokens, estimateTokens, prepareCompaction, shouldCompact, } from "../engine/compaction/compaction.js";
+// Execution env: NodeExecutionEnv is naturalized into src/engine (design/71 P2 + design/103 — first-party
+// ownership so the background-shell capability can import core types without a vendor→core reverse dependency).
+export { NodeExecutionEnv } from "../engine/execution-env/node-execution-env.js";
+// Session family is naturalized (design/71 P2-② hot path → src/engine; first-party ownership).
+export { Session, buildSessionContext } from "../engine/session/session.js";
+export { getEntriesToFork } from "../engine/session/repo-utils.js";
+export { validateEntriesForImport, StreamingImportValidator } from "../engine/session/import-validate.js";
+export { BaseSessionStorage, leafIdAfterEntry } from "../engine/session/storage-base.js";
+export { InMemorySessionStorage } from "../engine/session/memory-storage.js";
+export { InMemorySessionRepo } from "../engine/session/memory-repo.js";
+export { uuidv7 } from "../engine/session/uuid.js";
+export { SessionError } from "../engine/harness/types.js";
+//# sourceMappingURL=harness.js.map

package/dist/internal/harness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.js","sourceRoot":"","sources":["../../src/internal/harness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,4BAA4B,CAAC;AAChF,uGAAuG;AACvG,OAAO,EACL,uBAAuB,EACvB,2BAA2B,EAC3B,OAAO,EACP,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,oCAAoC,CAAC;AAwB5C,0GAA0G;AAC1G,gHAAgH;AAChH,OAAO,EAAE,gBAAgB,EAAE,MAAM,+CAA+C,CAAC;AAIjF,+FAA+F;AAC/F,OAAO,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/internal/llm.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Internal boundary to the llm layer (design/33). Everything in `src/` (outside `src/internal/`)
+ * imports these symbols from HERE, never via a deep path — one auditable coupling point (CI-guarded).
+ * design/118 ①②: the layer is now first-party (`src/engine/llm/`, naturalized out of the vendored
+ * llm-core); the facade stays so consumers never notice which side a symbol lives on.
+ */
+export { createAssistantMessageEventStream } from "../engine/llm/index.js";
+export type { AnthropicMessagesCompat, AssistantMessage, AssistantMessageDiagnostic, AssistantMessageEvent, Context, DocumentContent, ImageContent, Message, Model, ResilienceOptions, SimpleStreamOptions, StopReason, StreamFn, TextContent, ThinkingContent, ToolCall, ToolResultMessage, Usage, UserMessage, } from "../engine/llm/index.js";
+//# sourceMappingURL=llm.d.ts.map

package/dist/internal/llm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.d.ts","sourceRoot":"","sources":["../../src/internal/llm.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC;AAC3E,YAAY,EACV,uBAAuB,EACvB,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,OAAO,EACP,eAAe,EACf,YAAY,EACZ,OAAO,EACP,KAAK,EACL,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,EACV,QAAQ,EACR,WAAW,EACX,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,KAAK,EACL,WAAW,GACZ,MAAM,wBAAwB,CAAC"}

package/dist/internal/llm.js

@@ -0,0 +1,8 @@
+/**
+ * Internal boundary to the llm layer (design/33). Everything in `src/` (outside `src/internal/`)
+ * imports these symbols from HERE, never via a deep path — one auditable coupling point (CI-guarded).
+ * design/118 ①②: the layer is now first-party (`src/engine/llm/`, naturalized out of the vendored
+ * llm-core); the facade stays so consumers never notice which side a symbol lives on.
+ */
+export { createAssistantMessageEventStream } from "../engine/llm/index.js";
+//# sourceMappingURL=llm.js.map

package/dist/internal/llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.js","sourceRoot":"","sources":["../../src/internal/llm.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iCAAiC,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/orchestration/builtin-workflows.d.ts

@@ -0,0 +1,44 @@
+/**
+ * design/140 §6 1c — BUILT-IN named workflows offered by the `Workflow` tool's `{name}` calling surface,
+ * mirroring the built-in agents precedent (src/agents/builtin-agents.ts: GA default-on, opt out via a
+ * deployment config flag, same-name deployment registration SHADOWS the built-in):
+ *  - `RunWorkflowToolDeps.builtinWorkflows: false` (threaded from `RunnerDeps.builtinWorkflows`) removes
+ *    them wholesale;
+ *  - a deployment `WorkflowScriptStore.resolveName` hit for the SAME NAME wins (the built-in is consulted
+ *    only when the deployment registry does not resolve the name).
+ *
+ * The first built-in is `team-discussion` — the round-based collab profile design/140 §1 verified live
+ * (docs/DESIGN-140-VERIFICATION-2026-07-11.md B 面: 2 members × 2 rounds + finalizer, 8.2s/10.5K tokens,
+ * round 2 genuinely responding to round 1). It is pure SCRIPT CONTENT over the existing primitives — zero
+ * new runtime mechanism:
+ *  - args schema (ALL optional — zero-config must run): `{ topic, members?: [{ role, prompt?, model? }],
+ *    rounds?, finalizer?: { prompt?, model? } }`; a bare STRING args is accepted as the topic.
+ *  - budget: reuses the workflow `budget` hard ceiling + DETERMINISTIC in-script truncation (a rounds/member
+ *    cap and a `budget.remaining()` early-stop — never an evaluator agent; design/140 §1 "预算" row).
+ *  - `meta.whenToUse` carries the REQUIRED negative boundary (when-NOT-to-use: single factual question /
+ *    budget-sensitive runs — design/140 §4 "两投影").
+ */
+import type { NamedWorkflowListing } from "./workflow-script-store.js";
+/** The built-in round-based team-discussion workflow's registered name. */
+export declare const TEAM_DISCUSSION_WORKFLOW_NAME = "team-discussion";
+/**
+ * The `team-discussion` script source (design/140 §1 table row 1, live-verified shape: for-loop rounds +
+ * `agent()` members with transcript re-feed + a schema'd finalizer). Deterministic by construction — no
+ * clock/randomness reads (locked by test against `workflowScriptReadsClockOrRandom`).
+ */
+export declare const TEAM_DISCUSSION_SCRIPT = "export const meta = {\n  name: \"team-discussion\",\n  description: \"Round-based team discussion: configurable members debate a topic across rounds (each member sees the transcript so far), then a finalizer synthesizes a structured verdict.\",\n  whenToUse: \"Use for a genuinely contested question that benefits from several perspectives arguing across rounds - design trade-offs, plan or risk reviews, adversarial critique of a proposal. Do NOT use it for a single factual question, a task with one obvious answer, or a budget-sensitive run: every round costs one agent call per member, so a discussion is never cheaper than asking once. args (all optional): { topic, members?: [{ role, prompt?, model? }], rounds?, finalizer?: { prompt?, model? } }.\",\n  phases: [\n    { title: \"Discussion\" },\n    { title: \"Synthesis\" },\n  ],\n};\n// Zero-config runnable (design/140 \u00A76 1c): every arg has an opinionated fallback.\nconst raw = args;\nconst a = raw !== null && typeof raw === \"object\" && !Array.isArray(raw) ? raw : {};\nconst topic =\n  typeof a.topic === \"string\" && a.topic.trim() !== \"\"\n    ? a.topic\n    : typeof raw === \"string\" && raw.trim() !== \"\"\n      ? raw // ergonomic form: a bare string args IS the topic\n      : \"No topic was provided. Discuss: what information should a caller supply to make a team discussion like this productive, and when should they NOT convene one?\";\nconst defaultMembers = [\n  { role: \"advocate\", prompt: \"Make the strongest constructive case. Propose concrete options and argue their benefits with specifics.\" },\n  { role: \"skeptic\", prompt: \"Stress-test every claim made so far. Surface risks, hidden costs, failure modes, and cheaper alternatives.\" },\n];\nconst rawMembers = Array.isArray(a.members) && a.members.length > 0 ? a.members : defaultMembers;\nconst members = rawMembers.slice(0, 6).map((m, i) => {\n  const mm = m !== null && typeof m === \"object\" ? m : {};\n  const member = {\n    role: typeof mm.role === \"string\" && mm.role.trim() !== \"\" ? mm.role : \"member-\" + (i + 1),\n    prompt: typeof mm.prompt === \"string\" && mm.prompt.trim() !== \"\" ? mm.prompt : \"Contribute your own distinct perspective: be concrete, give reasons, and engage with what others said.\",\n  };\n  if (typeof mm.model === \"string\" && mm.model.trim() !== \"\") member.model = mm.model;\n  // Slot-tools carrier (design/140 \u2461-3 + F4): a member may BE a registered agent type ({agent:\"reviewer\"}) \u2014\n  // persona/tools/model then come from the deployment's AgentDefinition (role library), args stay thin.\n  if (typeof mm.agent === \"string\" && mm.agent.trim() !== \"\") member.agent = mm.agent;\n  return member;\n});\n// Deterministic budget truncation (design/140 \u00A71 \u9884\u7B97 row): a HARD rounds ceiling + member cap \u2014 never an\n// evaluator agent. The engine's budget/maxAgents hard stops remain the backstop.\nconst requestedRounds = Math.floor(Number(a.rounds));\nconst rounds = Math.min(Number.isFinite(requestedRounds) && requestedRounds >= 1 ? requestedRounds : 2, 5);\nconst fin = a.finalizer !== null && typeof a.finalizer === \"object\" && !Array.isArray(a.finalizer) ? a.finalizer : {};\nconst finalizerPrompt = typeof fin.prompt === \"string\" && fin.prompt.trim() !== \"\"\n  ? fin.prompt\n  : \"You are the synthesis lead. Read the full discussion transcript and produce the final verdict: the decision/answer, the key supporting points, and the strongest unresolved dissent (if any). Do not introduce new arguments of your own.\";\nconst clip = (s) => { const t = String(s); return t.length > 4000 ? t.slice(0, 4000) + \" ...[truncated]\" : t; };\nconst isBudgetStop = (e) => e !== null && typeof e === \"object\" && e.code === \"workflow.budget_exceeded\";\n\nphase(\"Discussion\");\nconst transcript = [];\nlet truncated = null;\nfor (let r = 1; r <= rounds && truncated === null; r++) {\n  // Deterministic early stop on an exhausted budget (a live read of the engine budget; the engine's\n  // hard WorkflowBudgetExceededError remains the backstop if a member call itself crosses the line).\n  if (budget.total !== null && budget.remaining() <= 0) { truncated = \"budget exhausted before round \" + r; break; }\n  for (const m of members) {\n    const history = transcript.length === 0 ? \"(none yet - you open the discussion)\" : transcript.join(\"\\n\\n\");\n    const spec = {\n      objective:\n        \"Team discussion on: \" + topic + \"\\n\\n\" +\n        'You are \"' + m.role + '\" in round ' + r + \" of \" + rounds + \".\\n\" +\n        \"Your brief: \" + m.prompt + \"\\n\\n\" +\n        \"Transcript so far:\\n\" + history + \"\\n\\n\" +\n        \"Respond to the strongest points others made (do not repeat yourself), then advance your own position. Be concise: a few tight paragraphs at most.\",\n    };\n    if (m.model !== undefined) spec.modelName = m.model;\n    let res;\n    try {\n      res = await agent(spec, m.agent !== undefined ? { label: m.role + \"-r\" + r, phase: \"Discussion\", agentType: m.agent } : { label: m.role + \"-r\" + r, phase: \"Discussion\" });\n    } catch (e) {\n      // The engine's budget hard stop: keep what the discussion already produced instead of failing the run.\n      if (isBudgetStop(e)) { truncated = \"budget exhausted at \" + m.role + \", round \" + r; break; }\n      throw e;\n    }\n    const text = res && res.status === \"completed\" ? clip(res.result) : \"(no contribution - agent ended \" + (res ? res.status : \"unknown\") + \")\";\n    transcript.push(m.role + \" (round \" + r + \"): \" + text);\n  }\n}\n\nphase(\"Synthesis\");\nconst finalSpec = {\n  objective:\n    finalizerPrompt + \"\\n\\nTopic: \" + topic + \"\\n\\nFull transcript:\\n\" +\n    (transcript.length === 0 ? \"(the discussion produced no contributions)\" : transcript.join(\"\\n\\n\")) +\n    (truncated ? \"\\n\\nNote: the discussion was cut short (\" + truncated + \").\" : \"\"),\n};\nif (typeof fin.model === \"string\" && fin.model.trim() !== \"\") finalSpec.modelName = fin.model;\nlet verdict = null;\ntry {\n  verdict = await agent(finalSpec, {\n    label: \"finalizer\",\n    phase: \"Synthesis\",\n    schema: {\n      type: \"object\",\n      properties: {\n        decision: { type: \"string\", description: \"The final answer/decision, one paragraph.\" },\n        keyPoints: { type: \"array\", items: { type: \"string\" }, description: \"The strongest supporting points from the discussion.\" },\n        dissent: { type: \"string\", description: \"The strongest unresolved counter-position, if any.\" },\n      },\n      required: [\"decision\", \"keyPoints\"],\n    },\n  });\n} catch (e) {\n  // Budget died before synthesis: return the transcript honestly rather than failing the whole run.\n  if (!isBudgetStop(e)) throw e;\n  truncated = truncated === null ? \"budget exhausted before synthesis\" : truncated;\n}\n\nreturn {\n  topic,\n  rounds,\n  members: members.map((m) => m.role),\n  ...(truncated ? { truncated } : {}),\n  transcript,\n  verdict: verdict && verdict.structuredOutput !== undefined ? verdict.structuredOutput : (verdict ? verdict.result : null),\n};\n";
+/** One built-in named workflow: the registered name + its self-contained script source. The name is the
+ *  routing key of the `{name}` calling surface; the script's `meta.name` matches it (locked by test). */
+export interface BuiltinWorkflowDefinition {
+    name: string;
+    script: string;
+}
+/** The built-in named-workflow registry (CC `HCe`-analog shape, workflows arm). Order = card listing order. */
+export declare function builtinWorkflowDefinitions(): BuiltinWorkflowDefinition[];
+/** Resolve a built-in workflow by name (the `{name}` surface's SECOND lookup — a deployment
+ *  `scriptStore.resolveName` hit for the same name shadows this, design/140 §6 1c). */
+export declare function resolveBuiltinWorkflow(name: string): BuiltinWorkflowDefinition | undefined;
+/** design/140 §6 1b — the built-ins' listing projection rows (name + description + whenToUse, parsed from
+ *  each script's static meta). Consumed by the Workflow tool card renderer. */
+export declare function builtinWorkflowListings(): NamedWorkflowListing[];
+//# sourceMappingURL=builtin-workflows.d.ts.map

package/dist/orchestration/builtin-workflows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtin-workflows.d.ts","sourceRoot":"","sources":["../../src/orchestration/builtin-workflows.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvE,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,oBAAoB,CAAC;AAE/D;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,wgOAkHlC,CAAC;AAEF;yGACyG;AACzG,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,+GAA+G;AAC/G,wBAAgB,0BAA0B,IAAI,yBAAyB,EAAE,CAExE;AAED;uFACuF;AACvF,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,yBAAyB,GAAG,SAAS,CAE1F;AAED;+EAC+E;AAC/E,wBAAgB,uBAAuB,IAAI,oBAAoB,EAAE,CAShE"}