@te-river/opencode-team-mode 1.6.0 → 1.6.2

package/dist/host/v2-session-client.js

@@ -0,0 +1,390 @@
+/**
+ * The v2 session read seam, shaped like the v1 client the collect path expects (#8).
+ *
+ * `tm_join` collects a child in two ways: it looks the child up in its own registry
+ * (children THIS plugin process created — and since `babfcb8` also the host's `subagent`
+ * children), and otherwise it asks the host. That ask was written against v1's SDK client
+ * (`client.session.get({path:{id}})`), and on a live host it never once resolved.
+ *
+ * Why it failed, read out of 2.0.18 rather than guessed (both quotes are from the embedded
+ * JS): the plugin-facing wrapper is a schema decode plus a single-object call —
+ *
+ *   te = (schema, fn) => (input) => decode(schema, input ?? {}) → fn(decoded)
+ *   get: te(N["session.get"], a.session.get)
+ *
+ * and the host's own call sites are flat:
+ *
+ *   await e.session.get({ sessionID: n })
+ *   await e.message.list({ sessionID: n, limit: 200, cursor: r })
+ *
+ * So our adapter had TWO bugs: the key (`path.id` / `id` instead of `sessionID`) and the
+ * arity (every shape was passed as a one-element ARRAY, which no `te`-wrapped method
+ * accepts). A decode failure looks exactly like "the host has no such method", which is
+ * how this stayed wrong for a whole release cycle.
+ *
+ * What this surface does NOT give, stated rather than discovered later:
+ *  · no `children` method, so adoption from the host's session tree is still impossible on
+ *    v2 — only an explicitly named id can be claimed, which is what the lead's prompt says.
+ *  · no `message`/`messages` domain on the plugin ctx (the host's internal `message.list`
+ *    is the SDK client, not this surface). `context` is the only candidate that could
+ *    carry a child's reply, so it is tried, and its outcome — including the NAMES of the
+ *    keys it returned — is recorded. Key names are safe; a message body is not written to
+ *    the trajectory by this file.
+ *  · the HTTP API does expose `GET /api/session/{id}/message` (136 distinct routes were
+ *    enumerated from a scanned window of the binary, and none of them is a todo list —
+ *    which settles the `tm_ledger` question: there is no host todo resource to read), but
+ *    reaching it needs the basic-auth password from
+ *    `~/.config/opencode/service.json`. A plugin reading the user's credential file to
+ *    call back into the host is a new trust boundary, so it is NOT done here; it is
+ *    recorded as the option with its cost attached. See
+ *    `docs/research/host-http-api.md`.
+ */
+/** Measured first, then the v1 spellings kept as fallbacks for an older 2.x build. Each
+ *  builder returns the ARGUMENT OBJECT — `te`-wrapped methods take one object, not an
+ *  array, and that alone is why every previous shape failed. */
+const SHAPES = [
+    ["sessionID", (id) => ({ sessionID: id })],
+    ["path", (id) => ({ path: { id } })],
+    ["flat", (id) => ({ id })],
+];
+function idOf(opts) {
+    const o = (opts ?? {});
+    return String(o.path?.id ?? o.query?.id ?? o.sessionID ?? o.id ?? "");
+}
+function unwrap(value) {
+    if (!value || typeof value !== "object")
+        return undefined;
+    const rec = value;
+    // `{data}` and `{result}` are both envelopes on this surface; reading a field off the
+    // wrapper yields undefined, which then reads as "not my child" and refuses a child that is.
+    for (const cand of [rec, rec.data, rec.result, rec.session]) {
+        if (cand && typeof cand === "object" && (("parentID" in cand) || ("parent_id" in cand) || ("id" in cand))) {
+            return cand;
+        }
+    }
+    return rec;
+}
+/** The message-kind values the host writes on its discriminator field — the members of the
+ *  published union `Session.Message.Info`. Anything else on `type` is a PART kind and must
+ *  never be read as a message kind. */
+const MESSAGE_KINDS = ["user", "assistant", "system", "synthetic", "skill", "shell", "compaction", "idle"];
+/** The PART kinds the host writes inside a message's `content` bag. A TOP-LEVEL item
+ *  carrying one of these on `type` with no `role` is a part, not a message (the shape
+ *  `{type:"tool", content:[{type:"text",…}]}` exists): renaming its bag to `parts` would
+ *  hand a tool output to the collect path as an unroled assistant candidate. */
+const PART_KINDS = ["text", "reasoning", "tool"];
+/** The discriminator field's own value, lower-cased — "" only when the field is ABSENT
+ *  (or not a string). "Present but unknown" and "absent" are two different facts, and
+ *  downstream can only tell them apart if the seam keeps them apart. */
+function rawKind(value) {
+    return typeof value === "string" ? value.trim().toLowerCase() : "";
+}
+function messageKind(value) {
+    const s = rawKind(value);
+    return MESSAGE_KINDS.includes(s) ? s : "";
+}
+/** Which kind of message an item is. The OpenAPI contract puts the discriminator on `type`;
+ *  the plugin ctx measured on 2.0.20 puts it on `role` — so BOTH are read, a recognised
+ *  kind first (`role` before `type`), exactly as before.
+ *
+ *  A value that is PRESENT but not a known message kind is carried through verbatim
+ *  (lower-cased) instead of dropped to "". This INVERTS the previous rule — "an
+ *  unrecognised value yields "" and the caller leaves the role OFF instead of guessing
+ *  one" — because that rule was false where it mattered: `lastAssistantMessage` skips on
+ *  `if (role && role !== "assistant")`, so an EMPTY role IS an assistant candidate,
+ *  exactly equivalent to guessing "assistant". A host that spelled the discriminator a
+ *  value outside MESSAGE_KINDS would have had its item delivered as the child's report
+ *  while the comment claimed the opposite (and while AGENTS.md's "keeps an EMPTY role …
+ *  rather than guessing" described downstream semantics under which leaving it empty was
+ *  the guess). Carrying the raw value makes the skip real: unknown kind ⇒ not delivered.
+ *  Only when BOTH fields are absent — a bare Part[] item — does the role stay unset,
+ *  which is the shape the collect path reads by the item's own `type:"text"`. */
+function roleOfMessage(rec) {
+    const roleRaw = rawKind(rec.role);
+    const typeRaw = rawKind(rec.type);
+    return messageKind(roleRaw) || messageKind(typeRaw) || roleRaw || typeRaw;
+}
+/** Copy the host's own timestamps, and ONLY those. `time.completed` IS the settle verdict
+ *  (AGENTS.md), so it is never invented: 2.0.20's plugin ctx carries no `time` field at all,
+ *  and tm_join then settles from `event` / `injection` / 推定 — which is what it prints. */
+function timeOfMessage(rec) {
+    const t = rec.time;
+    if (!t || typeof t !== "object")
+        return undefined;
+    const src = t;
+    const out = {};
+    const created = Number(src.created);
+    if (Number.isFinite(created))
+        out.created = created;
+    const completed = Number(src.completed);
+    if (Number.isFinite(completed))
+        out.completed = completed;
+    return Object.keys(out).length ? out : undefined;
+}
+/** The `{info,…}` envelope for a message item, carrying ONLY what the host actually wrote. */
+function infoOfMessage(rec, role) {
+    const time = timeOfMessage(rec);
+    return {
+        ...(role ? { role } : {}),
+        ...(time ? { time } : {}),
+        // an errored assistant turn carries its reason on the item itself in these shapes;
+        // without the copy, "no reply" reads as "the agent had nothing to say"
+        ...(rec.error == null ? {} : { error: rec.error }),
+    };
+}
+/** Turn the host's context items into the `{info,parts}` shape the collect path already
+ *  understands — HERE, at the seam that knows the shape, so nothing downstream has to guess.
+ *  Three shapes are in the wild and all three are measurements, not version numbers:
+ *   · 2.0.18 `[L]`: a FLAT item per message, `{id, time:{created}, text, type}`.
+ *   · 2.0.20 `[L][D]`: a MESSAGE whose body is `content: (Text|Reasoning|Tool)[]` and whose
+ *     kind is on `role` — the name-level probe recorded `{keys:["content","id","metadata",
+ *     "role"]}`. The previous version of this function passed that item through untouched
+ *     ("already message-shaped"), `lastAssistantMessage` found no `parts` and no `text` on
+ *     it, and the seam answered while the body was dropped AGAIN — which is why 正文来源=
+ *     never printed on 2.0.20 (A1).
+ *   · v1's `[{info,parts[]}]`: passed through untouched, so a host that changes back needs
+ *     no change here.
+ *  Only the bag is renamed and the envelope added: the elements are already v1 part shapes
+ *  (`{type:"text", text}`), and reasoning/tool parts stay exactly as the host wrote them.
+ *  An empty `content` normalises to empty parts — this function MOVES text, it never
+ *  manufactures any. */
+export function normaliseContextMessages(list) {
+    if (!Array.isArray(list))
+        return list;
+    return list.map((item) => {
+        if (!item || typeof item !== "object")
+            return item;
+        const rec = item;
+        if (rec.info || Array.isArray(rec.parts))
+            return item;
+        if (Array.isArray(rec.content)) {
+            // A PART item (no `role`, `type` a part kind) is not a message: renaming its bag to
+            // `parts` would make it an unroled assistant candidate downstream, i.e. a TOOL OUTPUT
+            // delivered as the child's report — while passing it through untouched was the SAFE
+            // case, because the collect path reads a part's own `type` and skips `tool`.
+            if (!rawKind(rec.role) && PART_KINDS.includes(rawKind(rec.type)))
+                return item;
+            return { info: infoOfMessage(rec, roleOfMessage(rec)), parts: rec.content };
+        }
+        const text = rec.text;
+        if (typeof text !== "string" || !text.trim())
+            return item;
+        // 2.0.18's flat item: a recognised role word is read from either field; anything else
+        // (the measured answer items carry `type:"text"`, a PART kind) falls to "assistant",
+        // which is the behaviour that shipped and that the 2.0.18 probe pinned. This branch
+        // deliberately keeps the fallback the content[] branch above no longer needs: a flat
+        // item's `type` is the PART kind of its own body, not a message discriminator, so
+        // carrying the raw value here would skip the real 2.0.18 replies.
+        return {
+            info: infoOfMessage(rec, messageKind(rec.role) || messageKind(rec.type) || "assistant"),
+            parts: [{ type: "text", text }],
+        };
+    });
+}
+/** WHY a body came back empty, in names and counts only — never a value, a path, or a
+ *  snippet of text (the R6 口径 binds a diagnostic). tm_join writes this onto the
+ *  `child_body_missing` trajectory line so the three conclusions stay distinguishable:
+ *  a real body (`child_body`), a seam that answered with nothing readable in it
+ *  (`items=2 keys=[content+id+metadata+role] content=1 kinds=[tool] text=0`), and a seam
+ *  that did not answer at all (`no-context-method`). Without it, "we read it" and "we could
+ *  not read it" print the same row — goal #6's failure shape. */
+export function contextShapeEvidence(list) {
+    if (list === undefined || list === null)
+        return "no-list";
+    if (!Array.isArray(list))
+        return `not-array(${typeof list})`;
+    if (list.length === 0)
+        return "items=0";
+    const last = list[list.length - 1];
+    if (!last || typeof last !== "object")
+        return `items=${list.length} last=${last === null ? "null" : typeof last}`;
+    const rec = last;
+    const keys = Object.keys(rec).slice(0, 12).join("+");
+    const bag = Array.isArray(rec.content) ? "content" : Array.isArray(rec.parts) ? "parts" : "";
+    if (bag) {
+        const arr = rec[bag];
+        const kinds = Array.from(new Set(arr.map((p) => (p && typeof p === "object" ? String(p.type ?? "?") : typeof p))))
+            .slice(0, 6)
+            .join("+");
+        let withText = 0;
+        for (const p of arr) {
+            const t = p?.text;
+            if (typeof t === "string" && t.trim())
+                withText++;
+        }
+        return `items=${list.length} keys=[${keys}] ${bag}=${arr.length} kinds=[${kinds}] text=${withText}`;
+    }
+    if (typeof rec.text === "string")
+        return `items=${list.length} keys=[${keys}] textlen=${rec.text.length}`;
+    return `items=${list.length} keys=[${keys}] nobag`;
+}
+/** The one name this bridge has for itself, so a reply credits the seam that answered and a
+ *  refusal names the seam that did not — never the v1 endpoint this host does not have. */
+const SEAM = "ctx.session.context";
+export function createV2SessionReader(ctx) {
+    const report = {
+        attempted: 0, resolved: 0, failedShapes: [], contextTried: 0, contextOk: 0, contextKeys: [],
+        interruptTried: 0, interruptConfirmed: 0, interruptRefused: 0, interruptUnknown: 0, interruptKeys: [],
+    };
+    const domain = ctx?.session;
+    const call = async (method, arg) => {
+        const fn = domain?.[method];
+        if (typeof fn !== "function")
+            return undefined;
+        // Property access on the domain, never a captured reference: a detached `get` loses
+        // its receiver and the host's client throws (the dispatch.ts §10 rule).
+        return await fn.call(domain, arg);
+    };
+    const client = {
+        session: {
+            get: async (opts) => {
+                const id = idOf(opts);
+                report.attempted++;
+                if (!id || !id.startsWith("ses"))
+                    return { data: undefined };
+                const tried = [];
+                for (const [shape, build] of SHAPES) {
+                    try {
+                        const raw = await call("get", build(id));
+                        const rec = unwrap(raw);
+                        if (rec) {
+                            report.resolved++;
+                            report.usedShape = shape;
+                            report.failedShapes = [];
+                            const parent = rec.parentID ?? rec.parent_id;
+                            return { data: { id, parentID: typeof parent === "string" ? parent : undefined, raw: rec } };
+                        }
+                        tried.push(shape);
+                    }
+                    catch (err) {
+                        tried.push(shape);
+                        report.lastError = String(err?.message ?? err).slice(0, 160);
+                    }
+                }
+                report.failedShapes = tried;
+                return { data: undefined };
+            },
+            /** The reply path: `ctx.session.context({sessionID})` is the in-process seam that
+             *  answers for a child's messages. Measured on 2.0.18 it returns an ARRAY of flat
+             *  `{id, time:{created}, text, type}` items; measured on 2.0.20 it returns items of
+             *  `{id, role, metadata, content:[…]}` — the shape the published
+             *  `Session.Message.Info` contract describes, with the kind on `role` instead of the
+             *  documented `type`. Neither is v1's `[{info:{role},parts:[…]}]`, and both were the
+             *  reason `tm_join` said it could not read a reply that was sitting right there:
+             *  `lastAssistantMessage` tolerates an unknown shape by returning NO text, so the call
+             *  succeeded and the body was silently dropped. Both shapes are therefore NORMALISED
+             *  here, at the seam that knows them, so the collect path stays single-shaped — and
+             *  every answer carries WHICH seam it came from plus the SHAPE it saw, because a reply
+             *  that credits "session.messages" (a v1 endpoint this host does not have) is a claim
+             *  about the host nobody measured, and a missing body with no shape on it is the same
+             *  claim in the other direction. */
+            messages: async (opts) => {
+                const id = idOf(opts);
+                if (!id)
+                    return { data: undefined, via: SEAM, shape: "no-id" };
+                if (typeof domain?.context !== "function") {
+                    // The seam is ABSENT, which is a different fact from "it answered with nothing".
+                    report.contextError = domain ? "ctx.session has no context method" : "ctx has no session domain";
+                    return { data: undefined, via: SEAM, shape: domain ? "no-context-method" : "no-session-domain" };
+                }
+                report.contextTried++;
+                try {
+                    const raw = await call("context", { sessionID: id });
+                    const rec = unwrap(raw);
+                    if (!rec)
+                        return { data: undefined, via: SEAM, shape: `seam-answered-${raw === null ? "null" : typeof raw}` };
+                    report.contextOk++;
+                    report.contextKeys = Array.isArray(rec) ? ["array"] : Object.keys(rec).slice(0, 24);
+                    const list = Array.isArray(rec) ? rec : (rec.messages ?? rec.data ?? rec);
+                    const seen = contextShapeEvidence(list);
+                    report.contextShape = seen;
+                    return { data: normaliseContextMessages(list), via: SEAM, shape: seen };
+                }
+                catch (err) {
+                    report.contextError = String(err?.message ?? err).slice(0, 160);
+                    return { data: undefined, via: SEAM, shape: "context-threw" };
+                }
+            },
+            /** #33 — the STOP path. `tm_join { cancel: true }` was written against v1's
+             *  `client.session.abort`, and this bridge never wrapped it, so on 2.x every
+             *  background child was un-stoppable by the lead (the host gives no dialog and
+             *  no card for a child the plugin observed rather than created).
+             *
+             *  What the host DOES give a plugin is `ctx.session.interrupt`, and its contract
+             *  is quoted from the v2 API page rather than inferred:
+             *
+             *    POST /api/session/{sessionID}/interrupt
+             *    "Returns interrupted=true when an active execution was interrupted and
+             *     false for the idle no-op."
+             *
+             *  That one sentence is why this seam must not collapse into a boolean: `false`
+             *  is a real answer meaning "nothing was running", not "the stop failed", and a
+             *  reply that called it 已停止 would be goal #6's overstated claim. Three
+             *  outcomes therefore survive to the caller, plus the two failure cases (no
+             *  seam, host threw):
+             *    stopped      — `interrupted === true`, the host stopped an active execution
+             *    idle         — `interrupted === false`, documented no-op
+             *    unknown      — the call answered but carried no `interrupted` boolean
+             *    no-seam      — this host's ctx has no `interrupt`
+             *    threw        — the host refused; its own message rides back
+             *
+             *  The shape is `session.interrupt({sessionID})` — the same flat object `get` and
+             *  `context` take (the rule AGENTS.md records for every `te`-wrapped method), and
+             *  the v1 `{path:{id}}` spellings are NOT retried here because a wrong key on THIS
+             *  method is not a decode failure but an interrupt of the wrong session.
+             *
+             *  `resume` is deliberately never sent: `resume=true` continues pending steering
+             *  input after the interrupt, which is the opposite of what a caller who asked to
+             *  cancel a runaway child wants.
+             *
+             *  Privacy: the key NAMES the host returned are recorded; the value text is not
+             *  (R6 binds a diagnostic). */
+            interrupt: async (opts) => {
+                const id = idOf(opts);
+                report.interruptTried++;
+                if (!id || typeof domain?.interrupt !== "function")
+                    return { data: { outcome: "no-seam" } };
+                // Property access on the domain, never a captured reference (see `call`).
+                const fn = domain.interrupt;
+                try {
+                    const raw = await fn.call(domain, { sessionID: id });
+                    const rec = unwrap(raw);
+                    report.interruptKeys = rec ? Object.keys(rec).slice(0, 16) : ["(non-object)"];
+                    // `interrupted` can ride the returned object or one of the envelopes `unwrap`
+                    // recognises (`{data}` / `{result}` / `{session}`) — reading only the outer one
+                    // turns a real stop into `unknown`, and `unknown` reads as "we could not tell".
+                    const carriers = [rec, raw?.data, raw?.result];
+                    let flag;
+                    for (const cand of carriers) {
+                        const v = cand?.interrupted;
+                        if (typeof v === "boolean") {
+                            flag = v;
+                            break;
+                        }
+                    }
+                    if (flag === true)
+                        report.interruptConfirmed++;
+                    else if (flag === false)
+                        report.interruptRefused++;
+                    else
+                        report.interruptUnknown++;
+                    const note = carriers
+                        .map((c) => c?.message)
+                        .find((m) => typeof m === "string");
+                    return {
+                        data: {
+                            outcome: flag === true ? "stopped" : flag === false ? "idle" : "unknown",
+                            ...(note ? { message: note } : {}),
+                        },
+                    };
+                }
+                catch (err) {
+                    report.interruptError = String(err?.message ?? err).slice(0, 160);
+                    return { data: { outcome: "threw", message: report.interruptError } };
+                }
+            },
+        },
+    };
+    return { client, report };
+}
+//# sourceMappingURL=v2-session-client.js.map

package/dist/host/v2-session-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session-client.js","sourceRoot":"","sources":["../../src/host/v2-session-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AA2CH;;gEAEgE;AAChE,MAAM,MAAM,GAA6C;IACvD,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACpC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;CAC3B,CAAA;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6F,CAAA;IAClH,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACzD,MAAM,GAAG,GAAG,KAAgC,CAAA;IAC5C,sFAAsF;IACtF,4FAA4F;IAC5F,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC;YAC1G,OAAO,IAA+B,CAAA;QACxC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;uCAEuC;AACvC,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;AAE1G;;;gFAGgF;AAChF,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAA;AAEhD;;wEAEwE;AACxE,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IACxB,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;iFAeiF;AACjF,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjC,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,OAAO,CAAA;AAC3E,CAAC;AAED;;0FAE0F;AAC1F,SAAS,aAAa,CAAC,GAA4B;IACjD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAA;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACjD,MAAM,GAAG,GAAG,CAA+C,CAAA;IAC3D,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IACnD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;AAClD,CAAC;AAED,8FAA8F;AAC9F,SAAS,aAAa,CAAC,GAA4B,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAA;IAC/B,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,mFAAmF;QACnF,uEAAuE;QACvE,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;KACnD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;wBAewB;AACxB,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAA;QAClD,MAAM,GAAG,GAAG,IAA+B,CAAA;QAC3C,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACrD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,oFAAoF;YACpF,sFAAsF;YACtF,oFAAoF;YACpF,6EAA6E;YAC7E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAA;YAC7E,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAA;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAA;QACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;QACzD,sFAAsF;QACtF,qFAAqF;QACrF,oFAAoF;QACpF,qFAAqF;QACrF,kFAAkF;QAClF,kEAAkE;QAClE,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC;YACvF,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAChC,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;iEAMiE;AACjE,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,aAAa,OAAO,IAAI,GAAG,CAAA;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,IAAI,CAAC,MAAM,SAAS,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAA;IACjH,MAAM,GAAG,GAAG,IAA+B,CAAA;IAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5F,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAc,CAAA;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,CAAwB,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CACjH;aACE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,IAAI,CAAC,GAAG,CAAC,CAAA;QACZ,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,CAAC,GAAI,CAA+B,EAAE,IAAI,CAAA;YAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,QAAQ,EAAE,CAAA;QACnD,CAAC;QACD,OAAO,SAAS,IAAI,CAAC,MAAM,UAAU,IAAI,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,WAAW,KAAK,UAAU,QAAQ,EAAE,CAAA;IACrG,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,IAAI,CAAC,MAAM,UAAU,IAAI,aAAa,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;IACzG,OAAO,SAAS,IAAI,CAAC,MAAM,UAAU,IAAI,SAAS,CAAA;AACpD,CAAC;AAED;2FAC2F;AAC3F,MAAM,IAAI,GAAG,qBAAqB,CAAA;AAElC,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,MAAM,MAAM,GAA0B;QACpC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE;QAC3F,cAAc,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE;KACtG,CAAA;IACD,MAAM,MAAM,GAAI,GAAsD,EAAE,OAAO,CAAA;IAE/E,MAAM,IAAI,GAAG,KAAK,EAAE,MAAyB,EAAE,GAAY,EAAoB,EAAE;QAC/E,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAA;QAC3B,IAAI,OAAO,EAAE,KAAK,UAAU;YAAE,OAAO,SAAS,CAAA;QAC9C,oFAAoF;QACpF,wEAAwE;QACxE,OAAO,MAAO,EAA+B,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IACjE,CAAC,CAAA;IAED,MAAM,MAAM,GAAG;QACb,OAAO,EAAE;YACP,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;gBAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,MAAM,CAAC,SAAS,EAAE,CAAA;gBAClB,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;gBAC5D,MAAM,KAAK,GAAa,EAAE,CAAA;gBAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;oBACpC,IAAI,CAAC;wBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;wBACxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;wBACvB,IAAI,GAAG,EAAE,CAAC;4BACR,MAAM,CAAC,QAAQ,EAAE,CAAA;4BACjB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAA;4BACxB,MAAM,CAAC,YAAY,GAAG,EAAE,CAAA;4BACxB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,SAAS,CAAA;4BAC5C,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAA;wBAC9F,CAAC;wBACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;oBACnB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;wBACjB,MAAM,CAAC,SAAS,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBACzF,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,YAAY,GAAG,KAAK,CAAA;gBAC3B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;YAC5B,CAAC;YAED;;;;;;;;;;;;;gDAaoC;YACpC,QAAQ,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;gBAChC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,IAAI,CAAC,EAAE;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAA;gBAC9D,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC1C,iFAAiF;oBACjF,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,2BAA2B,CAAA;oBAChG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAA;gBAClG,CAAC;gBACD,MAAM,CAAC,YAAY,EAAE,CAAA;gBACrB,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;oBACvB,IAAI,CAAC,GAAG;wBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,EAAE,CAAA;oBAC7G,MAAM,CAAC,SAAS,EAAE,CAAA;oBAClB,MAAM,CAAC,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;oBACnF,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,CAAA;oBACzE,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAA;oBACvC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAA;oBAC1B,OAAO,EAAE,IAAI,EAAE,wBAAwB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;gBACzE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,YAAY,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBAC1F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAA;gBAC/D,CAAC;YACH,CAAC;YAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CAiC+B;YAC/B,SAAS,EAAE,KAAK,EAAE,IAAa,EAAE,EAAE;gBACjC,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;gBACrB,MAAM,CAAC,cAAc,EAAE,CAAA;gBACvB,IAAI,CAAC,EAAE,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,UAAU;oBAAE,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAA;gBAC3F,0EAA0E;gBAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,SAAqC,CAAA;gBACvD,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;oBACpD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;oBACvB,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAA;oBAC7E,8EAA8E;oBAC9E,gFAAgF;oBAChF,gFAAgF;oBAChF,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAG,GAA0B,EAAE,IAAI,EAAG,GAA4B,EAAE,MAAM,CAAC,CAAA;oBAChG,IAAI,IAAyB,CAAA;oBAC7B,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;wBAC5B,MAAM,CAAC,GAAI,IAAqD,EAAE,WAAW,CAAA;wBAC7E,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;4BAAC,IAAI,GAAG,CAAC,CAAC;4BAAC,MAAK;wBAAC,CAAC;oBACjD,CAAC;oBACD,IAAI,IAAI,KAAK,IAAI;wBAAE,MAAM,CAAC,kBAAkB,EAAE,CAAA;yBACzC,IAAI,IAAI,KAAK,KAAK;wBAAE,MAAM,CAAC,gBAAgB,EAAE,CAAA;;wBAC7C,MAAM,CAAC,gBAAgB,EAAE,CAAA;oBAC9B,MAAM,IAAI,GAAG,QAAQ;yBAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA8C,EAAE,OAAO,CAAC;yBACpE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAuB,CAAA;oBAC3D,OAAO;wBACL,IAAI,EAAE;4BACJ,OAAO,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;4BACxE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;yBACnC;qBACF,CAAA;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,cAAc,GAAG,MAAM,CAAE,GAA6B,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;oBAC5F,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAA;gBACvE,CAAC;YACH,CAAC;SACF;KACF,CAAA;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC3B,CAAC"}

package/dist/host/v2-session.d.ts

@@ -0,0 +1,85 @@
+/**
+ * The v2 session-request layer (goal #4 and #6 of the product).
+ *
+ * Three things that v1 could only approximate, because 1.18.x gave a plugin one
+ * mutable slot before execution and no way to touch an assembled request:
+ *
+ *  1. the tool surface.  v1's whitelist was enforced by permission DENY, which
+ *     stops a call but leaves the tool's description and schema in EVERY request
+ *     — the model pays ~9.5K tokens for thirteen governed tools plus the native
+ *     catalog it is forbidden to use.  `session.hook("context")` can `delete
+ *     event.tools.<name>`, so the whitelist finally decides what the model sees.
+ *  2. `temperature`.  It is a documented legacy agent field on v2 (and the
+ *     runner "preserves these values but does not yet send them"), so the
+ *     all-agents-0.2 invariant has to be set on the outgoing request instead.
+ *  3. the blackboard root.  v1 appended the resolved path to the team prompt at
+ *     config time; a v2 agent is a config FILE, which cannot carry a
+ *     per-workspace path, so it goes on the request.
+ *
+ * Everything here is additive and reversible: each hook returns a disposable
+ * registration, and nothing is claimed that the host did not hand us.
+ */
+import type { V2Registration, V2Context } from "./v2-types.js";
+/** Sentinel for "this role may not browse at all" — it removes the host's whole
+ *  browser catalog (45 `browser_*` tools on 2.0.16), not just our own door.
+ *  Leaving them in would hand back, at the request layer, exactly the surface the
+ *  whitelist exists to withhold. */
+export declare const BROWSER_CATALOG = "browser_*";
+/**
+ * The tools one agent must never be offered.  Only a literal `deny` removes:
+ * the `{ "*": "ask" }` object form means "callable, gated", and deleting such a
+ * tool would silently drop a capability the matrix grants with a dialog.
+ *
+ * `read`/`grep`/`glob` are exempted by name (`V2_LADDER_ACTIONS`), which is the
+ * other half of the `tm_read`/`tm_grep`/`tm_bash` retirement: v1 denied the
+ * native file tools because the governed aliases existed, and on v2 those
+ * aliases are not registered, so honouring the deny here would leave a role with
+ * no way to open a file at all.  Nothing is lost by letting them ride — the path
+ * scope P2 enforced in code is the host's own `external_directory` action, which
+ * was observed live answering `effect:"ask"` with a real `permission.asked`
+ * behind it, i.e. a dialog instead of a hard throw.
+ */
+export declare function toolsToRemove(permission: Record<string, unknown> | undefined | null): string[];
+/** Built once per agent id so the hook body stays a set lookup on a hot path. */
+export declare function removalPlan(agents: Record<string, {
+    permission?: Record<string, unknown>;
+}>): Map<string, Set<string>>;
+export interface SessionLayerInput {
+    /** 0 disables the temperature write entirely (the host's model default wins). */
+    temperature: number | false;
+    /** The resolved blackboard addendum, or "" when there is nothing to say. */
+    note: string;
+    /** Which agent ids receive the note — v1 gave it to the lead only. */
+    noteAgents: string[];
+    plan: Map<string, Set<string>>;
+    /** Team-scope isolation (#22).  `session.context` fires for EVERY agent on the
+     *  host, so temperature, the board note and the compaction survival list are
+     *  writes to somebody else's request unless the agent is one of ours.  The tool
+     *  trim is already keyed by agent (a foreign role is not in the plan, so nothing
+     *  is deleted); this closes the other three. */
+    scope?: import("./v2-scope.js").TeamScope;
+}
+export interface SessionLayerReport {
+    temperature: number | false;
+    removed: Record<string, number>;
+    notePushed: boolean;
+    compactionLines: number;
+    /** Did a `tm_*` name ever appear in an assembled request's own tool surface?
+     *  This is the only evidence that direct delivery happened: `options.codemode:false`
+     *  is what WE send, and a live 2.0.16 session proved the host still put every
+     *  `tm_*` in the Code Mode catalog ("They cannot be called directly…") while the
+     *  model's own callable list was nine native tools. Reporting the sent flag as if it
+     *  were the outcome is the overstated claim this product exists to refuse. */
+    tmInRequestSurface: boolean;
+}
+/**
+ * Register the request-layer hooks.  Returns the registrations (so the caller
+ * can dispose them) and a live report object — the counts are read off what the
+ * hooks actually did, not off what the matrix intends, because "we trimmed the
+ * surface" is a claim the user can only check against the request.
+ */
+export declare function applyV2SessionLayer(ctx: V2Context, input: SessionLayerInput): Promise<{
+    registrations: V2Registration[];
+    report: SessionLayerReport;
+}>;
+//# sourceMappingURL=v2-session.d.ts.map

package/dist/host/v2-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v2-session.d.ts","sourceRoot":"","sources":["../../src/host/v2-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAoB,SAAS,EAAE,MAAM,eAAe,CAAA;AAUhF;;;oCAGoC;AACpC,eAAO,MAAM,eAAe,cAAc,CAAA;AAI1C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,EAAE,CAyB9F;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,GAC/D,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAI1B;AAKD,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,WAAW,EAAE,MAAM,GAAG,KAAK,CAAA;IAC3B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAA;IACZ,sEAAsE;IACtE,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;IAC9B;;;;oDAIgD;IAChD,KAAK,CAAC,EAAE,OAAO,eAAe,EAAE,SAAS,CAAA;CAC1C;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,GAAG,KAAK,CAAA;IAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,UAAU,EAAE,OAAO,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB;;;;;kFAK8E;IAC9E,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,SAAS,EACd,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC;IAAE,aAAa,EAAE,cAAc,EAAE,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,CAgF1E"}