@stratusagent/gateway 0.14.8 → 0.14.10

package/dist/agent-source.d.ts

@@ -0,0 +1,10 @@
+import type { ParsedSoul } from '@stratusagent/agents';
+import type { AgentDefinition } from '@stratusagent/core';
+export interface AgentSource {
+    definition: AgentDefinition;
+    /** Soul file backing this agent; undefined for the built-in default. */
+    soulPath?: string;
+    /** The parsed soul, carried for its provider/model pins. */
+    soul?: ParsedSoul;
+}
+//# sourceMappingURL=agent-source.d.ts.map

package/dist/agent-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-source.d.ts","sourceRoot":"","sources":["../src/agent-source.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,eAAe,CAAC;IAC5B,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,UAAU,CAAC;CACnB"}

package/dist/agent-source.js

@@ -0,0 +1,7 @@
+/*
+ * One agent as the gateway holds it: its definition, the soul file behind
+ * it and the parsed soul. Moved out of index.ts as is so the modules split
+ * out of `createGateway` can name it; index.ts does not re-export it.
+ */
+export {};
+//# sourceMappingURL=agent-source.js.map

package/dist/agent-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-source.js","sourceRoot":"","sources":["../src/agent-source.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/approvals.d.ts

@@ -0,0 +1,38 @@
+import type { ApprovalAnswer, ApprovalResolutionReason, EventBus, Session } from '@stratusagent/core';
+import type { SchedulerRuntime } from './schedules.ts';
+import type { ShardedSessionStore } from './sessions.ts';
+import type { ApprovalRequester, PendingApproval, ResolveApprovalInput } from './types.ts';
+export type SettleApproval = (answer: ApprovalAnswer, reason: ApprovalResolutionReason, actor?: string) => void;
+/**
+ * One parked call: how to settle it, and what it is. The summary is kept
+ * alongside the settler because a listing needs the request itself, and
+ * the map is the only place that knows a request is still outstanding.
+ */
+export interface ParkedCall {
+    settle: SettleApproval;
+    pending: PendingApproval;
+}
+/** What the approval broker closes over in `createGateway`. */
+export interface ApprovalBrokerDeps {
+    warn: (line: string) => void;
+    bus: EventBus;
+    store: ShardedSessionStore;
+    scheduler: SchedulerRuntime;
+    effectiveApprovalTimeoutMs: number;
+    isStopping: () => boolean;
+}
+export declare const createApprovalBroker: ({ warn, bus, store, scheduler, effectiveApprovalTimeoutMs, isStopping, }: ApprovalBrokerDeps) => {
+    pendingApprovals: Map<string, ParkedCall>;
+    approvalEmissions: Set<Promise<void>>;
+    liveSubAgentIds: Set<string>;
+    idAtFirstCall: WeakMap<Session, string>;
+    hostIdOf: (session: Session) => string;
+    isHostSubAgent: (session: Session) => boolean;
+    requestApproval: ApprovalRequester;
+    resolveApproval: (input: ResolveApprovalInput) => boolean;
+    suspendWatchdog: Map<string, () => void>;
+    approvalWaits: Map<string, number>;
+    holdApprovalWait: (sessionId: string) => (() => void);
+};
+export type ApprovalBroker = ReturnType<typeof createApprovalBroker>;
+//# sourceMappingURL=approvals.d.ts.map

package/dist/approvals.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.d.ts","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,cAAc,EAGd,wBAAwB,EACxB,QAAQ,EACR,OAAO,EACR,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,KAAK,EACV,iBAAiB,EAEjB,eAAe,EACf,oBAAoB,EACrB,MAAM,YAAY,CAAC;AAGpB,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,wBAAwB,EAChC,KAAK,CAAC,EAAE,MAAM,KACX,IAAI,CAAC;AAEV;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,eAAe,CAAC;CAC1B;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,EAAE,QAAQ,CAAC;IACd,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,0BAA0B,EAAE,MAAM,CAAC;IACnC,UAAU,EAAE,MAAM,OAAO,CAAC;CAC3B;AAED,eAAO,MAAM,oBAAoB,GAAI,0EAOlC,kBAAkB;;;;;wBAiEQ,OAAO,KAAG,MAAM;8BAEV,OAAO,KAAG,OAAO;;6BA6MlB,oBAAoB,KAAG,OAAO;uCAkBhB,IAAI;;kCAmBb,MAAM,KAAG,CAAC,MAAM,IAAI,CAAC;CAiC3D,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/approvals.js

@@ -0,0 +1,330 @@
+/*
+ * The gateway's approval broker: parked tool calls waiting on a person, how
+ * a request is asked (and refused for a sub-agent or during shutdown), how an
+ * answer settles it, and the per-session approval waits the turn watchdog
+ * reads. Moved out of `createGateway` in index.ts as is: the statements are
+ * unchanged, inside a factory that takes what they closed over there, and
+ * `createGateway` calls it where they were and destructures what it returns.
+ * The one edit: `stopping` is a `let` declared later in `createGateway`, so
+ * the broker reads it through `isStopping()`.
+ */
+import { randomUUID } from 'node:crypto';
+import { isDelegatedSession, ROOT_SESSION_ID_METADATA_KEY } from '@stratusagent/agents';
+import { isSubAgentSession } from "./session-keys.js";
+export const createApprovalBroker = ({ warn, bus, store, scheduler, effectiveApprovalTimeoutMs, isStopping, }) => {
+    const pendingApprovals = new Map();
+    /**
+     * In-flight `tool.approval-resolved` emissions. `EventBus.emit` awaits its
+     * subscribers in order, so one async handler ahead of a channel adapter
+     * suspends the emission before the adapter ever sees it. Nothing today is
+     * async in front of one — which is exactly the problem: the shutdown
+     * guarantee below would rest on that staying true, and the first async
+     * subscriber anyone adds would silently leave live-looking buttons in a
+     * workspace the daemon has left.
+     */
+    const approvalEmissions = new Set();
+    /**
+     * Publishes one parked call and settles when somebody answers it, the
+     * request expires, or the turn is cancelled.
+     *
+     * All three endings run through the same `settle`, which removes the
+     * request from the registry BEFORE resolving. That ordering is the whole
+     * point: a request that is no longer pending cannot be resolved twice,
+     * so a click racing the timeout — or arriving after an abort — is refused
+     * rather than executing a tool for a turn that has already moved on.
+     */
+    /**
+     * The conversation a delegated sub-session's work was asked from, read
+     * from the store rather than from anything the caller wrote: the root
+     * session `agent.delegate` recorded, which is where the person waiting
+     * on the answer is. Undefined for an ordinary session, or a root that no
+     * longer exists — the request is then asked the way it always was.
+     */
+    const delegationOriginOf = async (session) => {
+        if (!isDelegatedSession(session)) {
+            return undefined;
+        }
+        const rootId = session.metadata?.[ROOT_SESSION_ID_METADATA_KEY];
+        if (typeof rootId !== 'string' || rootId === session.id) {
+            return undefined;
+        }
+        let root;
+        try {
+            root = await store.get(rootId);
+        }
+        catch (error) {
+            warn(`${session.id}: could not read the delegating session ${rootId} to route an approval (${error instanceof Error ? error.message : String(error)})`);
+            return undefined;
+        }
+        if (!root) {
+            return undefined;
+        }
+        return { agentId: root.agent.id, sessionId: root.id, ...(root.metadata ? { metadata: root.metadata } : {}) };
+    };
+    /**
+     * Which sessions are sub-agents, as the host knows it rather than as the
+     * session says (roadmap 24). Every tool in a slice is handed the same
+     * mutable Session, so the metadata marker and the id are claims a tool
+     * can rewrite. The ids are the ones `subAgents.run` minted, held while
+     * the sub-agent runs. A session object's id is read once, by the
+     * executor on its first tool call, before any tool has been handed it,
+     * so a session a tool renamed is still known by the id it ran under.
+     */
+    const liveSubAgentIds = new Set();
+    const idAtFirstCall = new WeakMap();
+    const hostIdOf = (session) => idAtFirstCall.get(session) ?? session.id;
+    const isHostSubAgent = (session) => liveSubAgentIds.has(hostIdOf(session)) || isSubAgentSession(session);
+    const requestApproval = async (request) => {
+        // A sub-agent asks no one (roadmap 24): its parent turn is the one a
+        // person is accountable for, and that turn gets the refusal back as a
+        // result and decides what to do. Denied as undeliverable, since nobody
+        // was asked, and announced only as a resolution, so no channel renders
+        // a question nobody may answer.
+        if (isHostSubAgent(request.session)) {
+            void bus.emit({
+                type: 'tool.approval-resolved',
+                sessionId: request.session.id,
+                requestId: randomUUID(),
+                answer: 'deny',
+                reason: 'undeliverable',
+            });
+            return { answer: 'deny' };
+        }
+        const delegatedFrom = await delegationOriginOf(request.session);
+        return requestApprovalFrom(request, delegatedFrom);
+    };
+    const requestApprovalFrom = (request, delegatedFrom) => new Promise((resolve) => {
+        // A shutdown denies what is parked once, at the top of stop(). Turns
+        // already running keep going through the drain, though, and one of them
+        // can reach a gated tool AFTER that snapshot — finishing a provider
+        // call, or moving to the next call in the same response. Parking it
+        // would deadlock the drain against a question nobody is left to answer:
+        // stop() waits for the turn, the turn waits for the approval, and the
+        // approval waits out its timeout — forever when there is none.
+        if (isStopping()) {
+            resolve({ answer: 'deny' });
+            void bus.emit({
+                type: 'tool.approval-resolved',
+                sessionId: request.session.id,
+                requestId: randomUUID(),
+                answer: 'deny',
+                reason: 'cancelled',
+            });
+            return;
+        }
+        const requestId = randomUUID();
+        let timer;
+        const onAbort = () => settle('deny', 'cancelled');
+        /**
+         * Settles once the request has finished being announced.
+         *
+         * Both emissions go through the same subscriber list, in order, and
+         * `EventBus.emit` awaits each one — so an async subscriber ahead of a
+         * channel can hold the announcement while a timeout or abort fires
+         * behind it, and the channel would hear that a request it has never
+         * heard of was resolved. It drops that, then renders the announcement
+         * when it finally arrives, leaving buttons for a settled request that
+         * nothing will ever retract.
+         *
+         * Chaining is the fix rather than remembering orphaned resolutions in
+         * the channel: a resolution that arrives before its request is not
+         * something a consumer can act on, so it should not be able to happen.
+         * Starts resolved, because a turn already aborted never announces at
+         * all and its denial should not wait on an emission that never runs.
+         */
+        let announced = Promise.resolve();
+        // Read when the request is made, from the scheduler's own records: a
+        // live firing of a schedule approved with a destination, nothing else.
+        // Delegated work is not included yet; its sub-session is not a firing.
+        const scheduleDestination = scheduler.approvalDestinationFor(request.session);
+        // Work one agent does for another is allowed one call at a time. The
+        // people asked are the delegating conversation's, and a standing grant
+        // would widen what the other agent may do on its own work for good —
+        // so nothing offers **Always allow** here, and an `always` that
+        // arrives anyway (the control API takes all three answers) runs the
+        // call once, recorded as exactly that.
+        const forAnotherAgent = delegatedFrom !== undefined && delegatedFrom.agentId !== request.session.agent.id;
+        const oneShot = request.oneShot === true || forAnotherAgent;
+        const always = forAnotherAgent ? undefined : request.always;
+        const settle = (given, reason, actor) => {
+            const answer = forAnotherAgent && given === 'always' ? 'once' : given;
+            // Identity, not presence: a request that already settled is gone from
+            // the registry, and comparing against this exact function is what
+            // makes every ending — click, timeout, abort, shutdown — idempotent.
+            if (pendingApprovals.get(requestId)?.settle !== settle) {
+                return;
+            }
+            pendingApprovals.delete(requestId);
+            if (timer) {
+                clearTimeout(timer);
+            }
+            request.signal?.removeEventListener('abort', onAbort);
+            resolve({ answer, ...(actor ? { actor } : {}) });
+            const emitted = announced.then(() => bus.emit({
+                type: 'tool.approval-resolved',
+                sessionId: request.session.id,
+                requestId,
+                answer,
+                reason,
+                ...(actor ? { actor } : {}),
+            }));
+            approvalEmissions.add(emitted);
+            void emitted.finally(() => approvalEmissions.delete(emitted));
+        };
+        // What is left of the window, not a fresh one: a re-asked request
+        // carries when it originally parked, and the elapsed time counts.
+        // Computed before registration because the summary below quotes the
+        // deadline, and a listing that disagreed with the announcing event about
+        // when a request expires would be worse than one that said nothing.
+        const alreadyWaitedMs = request.parkedAt ? Date.now() - Date.parse(request.parkedAt) : 0;
+        const remainingTimeoutMs = effectiveApprovalTimeoutMs > 0
+            ? effectiveApprovalTimeoutMs - (Number.isFinite(alreadyWaitedMs) ? Math.max(0, alreadyWaitedMs) : 0)
+            : 0;
+        const expiresAt = remainingTimeoutMs > 0
+            ? new Date(Date.now() + remainingTimeoutMs).toISOString()
+            : undefined;
+        pendingApprovals.set(requestId, {
+            settle,
+            pending: {
+                requestId,
+                sessionId: request.session.id,
+                agentId: request.session.agent.id,
+                call: request.call,
+                risk: request.risk,
+                ...(request.origin !== undefined ? { origin: request.origin } : {}),
+                ...(oneShot ? { oneShot: true } : {}),
+                ...(always !== undefined ? { always } : {}),
+                ...(request.reviewNote !== undefined ? { reviewNote: request.reviewNote } : {}),
+                parkedAt: request.parkedAt ?? new Date().toISOString(),
+                ...(expiresAt ? { expiresAt } : {}),
+                ...(request.session.metadata ? { metadata: request.session.metadata } : {}),
+                ...(delegatedFrom ? { delegatedFrom } : {}),
+                ...(scheduleDestination ? { scheduleDestination } : {}),
+            },
+        });
+        if (effectiveApprovalTimeoutMs > 0 && remainingTimeoutMs <= 0) {
+            // Nothing left to wait with. Settled here rather than armed with a
+            // zero timer, which `setTimeout` would still run a tick later — long
+            // enough to announce a request that is already over.
+            settle('deny', 'timeout');
+            return;
+        }
+        if (remainingTimeoutMs > 0) {
+            // Deliberately NOT unref'd. A parked turn is real outstanding work,
+            // and its timer is the only thing that will ever finish it — letting
+            // the process exit out from under one would abandon the turn instead
+            // of denying it. Shutdown is handled where it belongs, in stop(),
+            // which settles every outstanding request before draining.
+            timer = setTimeout(() => settle('deny', 'timeout'), remainingTimeoutMs);
+        }
+        // The abort listener is attached before the request is announced, so a
+        // turn cancelled while the event is still being delivered still ends
+        // the request rather than leaving it pending forever.
+        if (request.signal) {
+            if (request.signal.aborted) {
+                settle('deny', 'cancelled');
+                return;
+            }
+            request.signal.addEventListener('abort', onAbort, { once: true });
+        }
+        // `announced` is assigned BEFORE the emission starts, because emit runs
+        // its first subscribers synchronously — one of them settling the
+        // request inline would otherwise chain onto the already-resolved
+        // placeholder and race the very announcement it is answering.
+        let markAnnounced = () => { };
+        announced = new Promise((resolveAnnounced) => {
+            markAnnounced = resolveAnnounced;
+        });
+        const announcing = bus.emit({
+            type: 'tool.approval-requested',
+            sessionId: request.session.id,
+            agentId: request.session.agent.id,
+            requestId,
+            call: request.call,
+            risk: request.risk,
+            ...(request.origin !== undefined ? { origin: request.origin } : {}),
+            ...(oneShot ? { oneShot: true } : {}),
+            ...(always !== undefined ? { always } : {}),
+            ...(request.reviewNote !== undefined ? { reviewNote: request.reviewNote } : {}),
+            ...(request.session.metadata ? { metadata: request.session.metadata } : {}),
+            ...(delegatedFrom ? { delegatedFrom } : {}),
+            ...(scheduleDestination ? { scheduleDestination } : {}),
+            ...(expiresAt ? { expiresAt } : {}),
+        });
+        // Drained at shutdown alongside the resolutions: a channel that has not
+        // yet been told a request exists cannot be told it was denied either.
+        approvalEmissions.add(announcing);
+        void announcing.finally(() => {
+            approvalEmissions.delete(announcing);
+            markAnnounced();
+        });
+    });
+    const resolveApproval = (input) => {
+        const parked = pendingApprovals.get(input.requestId);
+        if (!parked) {
+            return false;
+        }
+        parked.settle(input.answer, input.reason ?? 'decided', input.actor);
+        return true;
+    };
+    /**
+     * How a turn's watchdog stops its own clock, registered while it runs.
+     *
+     * Recording that a tool phase is open is not enough on its own: the
+     * timer is only re-evaluated when an event arrives, so a phase opened by
+     * something that emits nothing — an approval policy handed straight to
+     * the gateway — would leave an already-armed timer running to fire
+     * mid-wait.
+     */
+    const suspendWatchdog = new Map();
+    /**
+     * Approval waits in progress, per session.
+     *
+     * Deliberately a balanced counter and not a set of call ids. An earlier
+     * shape had the approval wrapper *open* a phase that the watchdog's
+     * event observer was expected to close, and that handoff was wrong in
+     * every way it could be: the observer does not exist when no watchdog is
+     * armed, so nothing closed it; a policy that threw closed nothing; and a
+     * stale entry did not merely leak, it suppressed the watchdog for the
+     * next turn on that session. Four separate exits, each patched in turn.
+     *
+     * A counter incremented and decremented in one `finally` cannot have any
+     * of those bugs, because the thing that opens the phase is the thing
+     * that closes it, in the same scope, on every path out.
+     */
+    const approvalWaits = new Map();
+    const holdApprovalWait = (sessionId) => {
+        approvalWaits.set(sessionId, (approvalWaits.get(sessionId) ?? 0) + 1);
+        // Stop any clock already running: this wait produces no events, so
+        // nothing else would.
+        suspendWatchdog.get(sessionId)?.();
+        let released = false;
+        return () => {
+            if (released) {
+                return;
+            }
+            released = true;
+            const remaining = (approvalWaits.get(sessionId) ?? 1) - 1;
+            if (remaining > 0) {
+                approvalWaits.set(sessionId, remaining);
+            }
+            else {
+                approvalWaits.delete(sessionId);
+            }
+        };
+    };
+    return {
+        pendingApprovals,
+        approvalEmissions,
+        liveSubAgentIds,
+        idAtFirstCall,
+        hostIdOf,
+        isHostSubAgent,
+        requestApproval,
+        resolveApproval,
+        suspendWatchdog,
+        approvalWaits,
+        holdApprovalWait,
+    };
+};
+//# sourceMappingURL=approvals.js.map

package/dist/approvals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approvals.js","sourceRoot":"","sources":["../src/approvals.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AASxF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AA4BtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,EACnC,IAAI,EACJ,GAAG,EACH,KAAK,EACL,SAAS,EACT,0BAA0B,EAC1B,UAAU,GACS,EAAE,EAAE;IACvB,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEvD;;;;;;;;OAQG;IACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEnD;;;;;;;;;OASG;IACH;;;;;;OAMG;IACH,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAgB,EAAiD,EAAE;QACnG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,4BAA4B,CAAC,CAAC;QAChE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,CAAC,EAAE,EAAE,CAAC;YACxD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,OAAO,CAAC,EAAE,2CAA2C,MAAM,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxJ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/G,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,MAAM,aAAa,GAAG,IAAI,OAAO,EAAmB,CAAC;IAErD,MAAM,QAAQ,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;IAExF,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAW,EAAE,CACnD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAEvE,MAAM,eAAe,GAAsB,KAAK,EAAE,OAAO,EAAE,EAAE;QAC3D,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,uEAAuE;QACvE,gCAAgC;QAChC,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,KAAK,GAAG,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS,EAAE,UAAU,EAAE;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,CAC1B,OAA+B,EAC/B,aAAmD,EACzB,EAAE,CAAC,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,oEAAoE;QACpE,wEAAwE;QACxE,sEAAsE;QACtE,+DAA+D;QAC/D,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5B,KAAK,GAAG,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS,EAAE,UAAU,EAAE;gBACvB,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW;aACpB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAE/B,IAAI,KAAiC,CAAC;QACtC,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAExD;;;;;;;;;;;;;;;;WAgBG;QACH,IAAI,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAEjD,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,MAAM,mBAAmB,GAAG,SAAS,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAE9E,qEAAqE;QACrE,uEAAuE;QACvE,qEAAqE;QACrE,gEAAgE;QAChE,oEAAoE;QACpE,uCAAuC;QACvC,MAAM,eAAe,GAAG,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1G,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,eAAe,CAAC;QAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAE5D,MAAM,MAAM,GAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACtD,MAAM,MAAM,GAAmB,eAAe,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;YACtF,sEAAsE;YACtE,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC;YACD,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACtD,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;gBAC5C,IAAI,EAAE,wBAAwB;gBAC9B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,SAAS;gBACT,MAAM;gBACN,MAAM;gBACN,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,CAAC,CAAC,CAAC;YACJ,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/B,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAChE,CAAC,CAAC;QAEF,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,yEAAyE;QACzE,oEAAoE;QACpE,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzF,MAAM,kBAAkB,GAAG,0BAA0B,GAAG,CAAC;YACvD,CAAC,CAAC,0BAA0B,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpG,CAAC,CAAC,CAAC,CAAC;QACN,MAAM,SAAS,GAAG,kBAAkB,GAAG,CAAC;YACtC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE;YACzD,CAAC,CAAC,SAAS,CAAC;QAEd,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE;YAC9B,MAAM;YACN,OAAO,EAAE;gBACP,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;gBACjC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACtD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3E,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD;SACF,CAAC,CAAC;QAEH,IAAI,0BAA0B,GAAG,CAAC,IAAI,kBAAkB,IAAI,CAAC,EAAE,CAAC;YAC9D,mEAAmE;YACnE,qEAAqE;YACrE,qDAAqD;YACrD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,IAAI,kBAAkB,GAAG,CAAC,EAAE,CAAC;YAC3B,oEAAoE;YACpE,qEAAqE;YACrE,qEAAqE;YACrE,kEAAkE;YAClE,2DAA2D;YAC3D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,kBAAkB,CAAC,CAAC;QAC1E,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,sDAAsD;QACtD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,wEAAwE;QACxE,iEAAiE;QACjE,iEAAiE;QACjE,8DAA8D;QAC9D,IAAI,aAAa,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;QACnC,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,gBAAgB,EAAE,EAAE;YACjD,aAAa,GAAG,gBAAgB,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,GAAG,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC7B,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;YACjC,SAAS;YACT,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC,CAAC;QACH,wEAAwE;QACxE,sEAAsE;QACtE,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClC,KAAK,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3B,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACrC,aAAa,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,CAAC,KAA2B,EAAW,EAAE;QAC/D,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF;;;;;;;;OAQG;IACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEtD;;;;;;;;;;;;;;OAcG;IACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,MAAM,gBAAgB,GAAG,CAAC,SAAiB,EAAgB,EAAE;QAC3D,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtE,mEAAmE;QACnE,sBAAsB;QACtB,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,OAAO,GAAG,EAAE;YACV,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,SAAS,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC1D,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;gBAClB,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,gBAAgB;QAChB,iBAAiB;QACjB,eAAe;QACf,aAAa;QACb,QAAQ;QACR,cAAc;QACd,eAAe;QACf,eAAe;QACf,eAAe;QACf,aAAa;QACb,gBAAgB;KACjB,CAAC;AACJ,CAAC,CAAC"}

package/dist/credential-requests.d.ts

@@ -0,0 +1,24 @@
+import { type AgentRegistry, type EventBus, type ToolRegistry, type UnlistedTools } from '@stratusagent/core';
+import type { AgentSource } from './agent-source.ts';
+import type { GatewayChannelAdapter, ProvideCredentialInput, ProvideCredentialResult } from './types.ts';
+import { type StateEnvironment } from '@stratusagent/state';
+/** What credential requests close over in `createGateway`. */
+export interface CredentialRequestsDeps {
+    env: StateEnvironment;
+    warn: (line: string) => void;
+    bus: EventBus;
+    startedChannels: GatewayChannelAdapter[];
+    channelCarrying: (kind: string, agentId: string, capable: (candidate: GatewayChannelAdapter) => boolean) => {
+        adapter?: GatewayChannelAdapter;
+        carriesOthers: boolean;
+    };
+    registry: AgentRegistry;
+    sources: Map<string, AgentSource>;
+    unlistedTools: () => UnlistedTools;
+    tools: ToolRegistry;
+}
+export declare const createCredentialRequests: ({ env, warn, bus, startedChannels, channelCarrying, registry, sources, unlistedTools, tools, }: CredentialRequestsDeps) => {
+    provideCredential: (input: ProvideCredentialInput) => Promise<ProvideCredentialResult>;
+};
+export type CredentialRequests = ReturnType<typeof createCredentialRequests>;
+//# sourceMappingURL=credential-requests.d.ts.map

package/dist/credential-requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-requests.d.ts","sourceRoot":"","sources":["../src/credential-requests.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,aAAa,EAGlB,KAAK,QAAQ,EAEb,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACzG,OAAO,EAWL,KAAK,gBAAgB,EAEtB,MAAM,qBAAqB,CAAC;AAuB7B,8DAA8D;AAC9D,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,gBAAgB,CAAC;IACtB,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,EAAE,QAAQ,CAAC;IACd,eAAe,EAAE,qBAAqB,EAAE,CAAC;IACzC,eAAe,EAAE,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,CAAC,SAAS,EAAE,qBAAqB,KAAK,OAAO,KACnD;QAAE,OAAO,CAAC,EAAE,qBAAqB,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC;IACjE,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAClC,aAAa,EAAE,MAAM,aAAa,CAAC;IACnC,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,eAAO,MAAM,wBAAwB,GAAI,gGAUtC,sBAAsB;+BAmPiB,sBAAsB,KAAG,OAAO,CAAC,uBAAuB,CAAC;CAiNlG,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC"}