@te-river/opencode-team-mode 1.7.1 → 1.7.3

package/dist/tm/ptc/tool.d.ts

@@ -1,66 +0,0 @@
-/**
- * tm_ptc_run — the bridge over the real governed pipelines + the tool
- * definition.  Governance is REUSED, never forked (D6 lock): every bridged
- * call runs the full tm_* pipeline (P2 path scope, P3 allowlist, R6,
- * threshold offload + handles, TTL).  PTC is NOT a bypass layer.
- * Split out of the former monolithic ptc.ts; behavior unchanged.
- */
-import type { ToolDefinition, ToolResult } from "../../types.js";
-import { type TmConfig } from "../config.js";
-import type { RunStore } from "../store.js";
-import { type TmAskRequest } from "../perm-ask.js";
-import type { TmPipelines } from "../pipelines.js";
-import type { BridgeTool, PtcBridge, PtcEngine } from "./contract.js";
-/**
- * Real bridge: delegate each call to the corresponding exported pipeline,
- * `ctx` passed through untouched, and normalize the pipeline's `unknown`
- * result into `PtcCallResult` (TmErrorBody -> ok:false; anything else -> the
- * already-governed data).  Governance is entirely the pipelines'.
- *
- * T6 web bridges: `web` carries the LIVE tm_search / tm_webfetch tool handles
- * (built over the SAME secondary pipeline instance, so their step ids share
- * the "ptc-" namespace).  A bridged `tm.search()` / `tm.webfetch()` runs that
- * tool's real execute under `ctx` — which means the host evaluates its
- * `permission.asked` (the out-of-allowlist dialog AND the caller's own
- * ruleset) against the CALLER'S session, so a non-web role is denied with a
- * permission error and the denial is recorded as a failed step.  When `web`
- * is absent (TM_PTC_WEB_BRIDGE=off, or the secondary tools were not wired)
- * the two web tools are rejected with an explicit args error.
- */
-export interface PtcWebHandles {
-    tm_search: {
-        execute: (rawArgs: Record<string, unknown>, ctx: unknown) => Promise<ToolResult>;
-    };
-    tm_webfetch: {
-        execute: (rawArgs: Record<string, unknown>, ctx: unknown) => Promise<ToolResult>;
-    };
-}
-/**
- * Build the OFFICIAL permission request the bridge raises for a bridged web
- * call.  The permission name is the tool itself (`tm_search` / `tm_webfetch`),
- * so the host evaluates the CALLER'S own ruleset — exactly as a direct tool
- * call would: `deny` for a non-web role, and for a web-granted role
- * (lead/researcher) the default ruleset is `ask`, so each bridged web call
- * pops a confirmation dialog (store an `allow` rule to skip it) — NOT a
- * silent pass.  The patterns carry the target host (webfetch) / engine
- * (search) so any dialog that DOES pop is informative and no-secret.
- */
-export declare function webBridgeAsk(tool: BridgeTool, args: Record<string, unknown>): TmAskRequest;
-export declare function pipelineBridge(pipelines: TmPipelines, ctx: unknown, web?: PtcWebHandles): PtcBridge;
-/** Build the tm_ptc_run ToolDefinition.  Registered in the tool segment
- *  when the agent's whitelist grants tm_ptc_run (M3).  `deps.args` is the
- *  ZodRawShape from tools.buildPtcArgsSchema() when zod is available — the
- *  descriptor fallback below keeps the tool usable without zod. */
-export declare function buildPtcRunTool(deps: {
-    cfg: TmConfig;
-    store: RunStore;
-    nextStepId: () => string;
-    ctx: unknown;
-    accessToken: string;
-    args?: Record<string, unknown>;
-    engine?: PtcEngine;
-    pipelines?: TmPipelines;
-    bridge?: PtcBridge;
-    webTools?: PtcWebHandles;
-}): ToolDefinition;
-//# sourceMappingURL=tool.d.ts.map

package/dist/tm/ptc/tool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../../src/tm/ptc/tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChE,OAAO,EAA0C,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAA;AAGpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAAoC,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAA;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAiB,SAAS,EAAgB,MAAM,eAAe,CAAA;AAUlG;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;KAAE,CAAA;IAC/F,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;KAAE,CAAA;CAClG;AAsBD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAqB1F;AAED,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,aAAa,GAAG,SAAS,CAoEnG;AAcD;;;mEAGmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,GAAG,EAAE,QAAQ,CAAA;IACb,KAAK,EAAE,QAAQ,CAAA;IACf,UAAU,EAAE,MAAM,MAAM,CAAA;IACxB,GAAG,EAAE,OAAO,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,QAAQ,CAAC,EAAE,aAAa,CAAA;CACzB,GAAG,cAAc,CAyFjB"}

package/dist/tm/ptc/tool.js

@@ -1,231 +0,0 @@
-/**
- * tm_ptc_run — the bridge over the real governed pipelines + the tool
- * definition.  Governance is REUSED, never forked (D6 lock): every bridged
- * call runs the full tm_* pipeline (P2 path scope, P3 allowlist, R6,
- * threshold offload + handles, TTL).  PTC is NOT a bypass layer.
- * Split out of the former monolithic ptc.ts; behavior unchanged.
- */
-import { estimateTokens, shouldOffload, shorten } from "../config.js";
-import { detectContentType } from "../preview.js";
-import { tmError } from "../result.js";
-import { askRefusalNote, askUserForTarget } from "../perm-ask.js";
-import { BRIDGE_ALLOW } from "./contract.js";
-import { parsePtcArgs } from "./budgets.js";
-import { staticPscan } from "./pscan.js";
-import { runPtc } from "./driver.js";
-import { renderPtcSummary } from "./summary.js";
-/**
- * Unwrap a web tool's ToolResult back into the PTC `{ok,data}`/`{ok:false,
- * error}` shape.  The governed tools return `{output}` strings; a structured
- * error renders with result.ts's pinned `[<tool> 失败 · phase=<phase>]`
- * (optionally ` · line=<n>`) header line — the only machine-readable marker
- * available at this boundary, so it is the split.  Anything else (inline
- * text, an offload handle block) is an ok result; a handle's ref is already
- * in the text for the program to feed back through tm.fetch.
- */
-function unwrapToolOutput(tool, output) {
-    const m = /^\[(\S+) 失败 · phase=([a-z]+)(?: · line=(-?\d+))?\]\n/.exec(output);
-    if (m && m[1] === tool) {
-        const phase = m[2];
-        const body = { tool, phase, message: output.slice(m[0].length) };
-        if (m[3] !== undefined)
-            Object.assign(body, { line: Number(m[3]) });
-        return { ok: false, error: body };
-    }
-    return { ok: true, data: output };
-}
-/**
- * Build the OFFICIAL permission request the bridge raises for a bridged web
- * call.  The permission name is the tool itself (`tm_search` / `tm_webfetch`),
- * so the host evaluates the CALLER'S own ruleset — exactly as a direct tool
- * call would: `deny` for a non-web role, and for a web-granted role
- * (lead/researcher) the default ruleset is `ask`, so each bridged web call
- * pops a confirmation dialog (store an `allow` rule to skip it) — NOT a
- * silent pass.  The patterns carry the target host (webfetch) / engine
- * (search) so any dialog that DOES pop is informative and no-secret.
- */
-export function webBridgeAsk(tool, args) {
-    if (tool === "tm_webfetch") {
-        const url = typeof args.url === "string" ? args.url : "";
-        let host = "";
-        try {
-            host = url ? new URL(url).hostname : "";
-        }
-        catch {
-            host = "";
-        }
-        return {
-            permission: "tm_webfetch",
-            patterns: host ? [host, url] : ["*"],
-            metadata: { tool, via: "tm_ptc_run", host },
-        };
-    }
-    const engine = typeof args.engine === "string" ? args.engine : "auto";
-    return {
-        permission: "tm_search",
-        patterns: [`engine:${engine}`],
-        metadata: { tool, via: "tm_ptc_run", engine },
-    };
-}
-export function pipelineBridge(pipelines, ctx, web) {
-    const pick = (tool) => tool === "tm_read"
-        ? pipelines.tmRead
-        : tool === "tm_grep"
-            ? pipelines.tmGrep
-            : tool === "tm_bash"
-                ? pipelines.tmBash
-                : tool === "tm_fetch"
-                    ? pipelines.tmFetch
-                    : tool === "tm_search"
-                        ? web?.tm_search
-                        : web?.tm_webfetch;
-    return {
-        async call(tool, args) {
-            if (!BRIDGE_ALLOW.includes(tool)) {
-                return { ok: false, error: tmError(tool, "args", "工具不在桥接白名单内").error };
-            }
-            const target = pick(tool);
-            if (!target) {
-                // a web bridge the caller's role / config never enabled
-                return {
-                    ok: false,
-                    error: tmError(tool, "args", "web 桥未启用（TM_PTC_WEB_BRIDGE=off 或未装配）").error,
-                };
-            }
-            // C2: an ACTIVE role gate for bridged web — BEFORE execute.  The bridge
-            // invokes the web tool's execute() directly, BYPASSING the host tool
-            // dispatch where agents.ts's `tm_search`/`tm_webfetch` = deny would
-            // otherwise block a non-web role, and the tools' own ctx.ask only pops
-            // for OUT-of-allowlist hosts (every default engine host is seeded).  So
-            // without this the web bridge was a privilege-escalation path.  Raise the
-            // SAME ruleset a direct call resolves: ctx.ask with the web permission
-            // name + target host/engine.  A web-granted role hits the default `ask`
-            // rule → a confirmation dialog per call (an `allow` rule skips it); a
-            // non-web role's deny rule throws → a permission error step; a
-            // rejection or a missing ask bridge is fail-CLOSED.
-            if (tool === "tm_search" || tool === "tm_webfetch") {
-                const outcome = await askUserForTarget(ctx, webBridgeAsk(tool, args ?? {}));
-                if (outcome !== "approved") {
-                    return {
-                        ok: false,
-                        error: tmError(tool, "permission", `桥接调用 ${tool} 未获批准（web 桥只授予 lead/researcher）—— ${askRefusalNote(outcome)}`).error,
-                    };
-                }
-            }
-            const res = typeof target === "function"
-                ? await target(args ?? {}, ctx)
-                : await target.execute(args ?? {}, ctx);
-            if (res && typeof res === "object" && "error" in res) {
-                return { ok: false, error: res.error };
-            }
-            if (tool === "tm_search" || tool === "tm_webfetch") {
-                return unwrapToolOutput(tool, String(res?.output ?? res ?? ""));
-            }
-            return { ok: true, data: res };
-        },
-    };
-}
-// ---------- the tool definition ----------------------------------------------
-const PTC_RUN_DESCRIPTION = `Batch orchestration: ONE async program makes N governed tm_* calls with ZERO LLM round-trips — use it INSTEAD of chaining ≥3 tm_read / tm_grep / tm_bash calls toward the same goal (multi-file recon, bulk grep+read aggregation, cross-referencing search results).  Best for READ-ONLY fan-out: reading many files, aggregating many searches, or any parallel read that would otherwise cost one LLM turn per call.  Only a char-pinned aggregation summary returns to context, so ALWAYS \`return\` the aggregated value at the end of the program: unreturned inline results are discarded (offload handles stay retrievable via tm.fetch).
-
-- Example: \`const out = []; for (const p of ["a.ts", "b.ts", "c.ts"]) { const f = await tm.read({ path: p }); if (f.ok) out.push({ p, head: String(f.data).slice(0, 400) }); } return out;\`
-- program: an async function body.  Available: \`tm.read(args)\`, \`tm.grep(args)\`, \`tm.bash(args)\`, \`tm.fetch(args)\` — same args as the tm_* four — plus the WEB bridges \`await tm.search({ query, engine? })\` and \`await tm.webfetch({ url, fields? })\` (identical args to tm_search / tm_webfetch).  Each returns \`{ok:true, data}\` (data is already governed: inline text, or an offload handle you can tm.fetch again) or \`{ok:false, error:{tool,phase,line?,message}}\`.  \`return\` a value; it is JSON-serialized into the summary (capped 2000 chars, oversized → handle).
-- Web bridge gating: tm.search / tm.webfetch run the REAL web tools under YOUR calling session's ctx, so the host evaluates them against YOUR agent's ruleset — a role without a web grant gets a \`permission\` error per call (bridged web is not a way around your tool whitelist), and \`TM_PTC_WEB_BRIDGE=off\` disables both.  GETs are idempotent, so a transient client/execute/store failure retries once; a permission/args error never does.
-- budgets (optional, tighten-only; clamped to TM_PTC_* ceilings): max_calls, max_errors, timeout_ms.  Hitting any budget stops the whole run (produced output is NOT lost).  Floors: max_calls 1 / max_errors 1 / timeout_ms 5000 ms; the summary echoes the EFFECTIVE budgets and flags every CLAMPED field (so a silently-narrowed budget is visible, not just the final number).  Errors are retried at most once and only on idempotent phases (client/execute/store).
-- Governance is NOT bypassed: every bridged call runs the full tm_* pipeline (P2 path scope, P3 allowlist, R6, threshold offload + handles, TTL).  Status is one of ok | stopped-error-budget | stopped-call-budget | timeout | engine-error | program-error (program-error = the program itself threw — no auto-degrade re-run; engine-error = engine fault — auto mode re-runs the WHOLE program on the inline engine).
-- Programs whose EXECUTABLE structure contains require/import/process/globalThis/Deno/Bun/fs/net/child_process are rejected before execution (static pre-scan, an auxiliary guard — NOT a security boundary).  The pre-scan STRIPS string / template-literal / comment bodies first, so a grep pattern or log message that merely MENTIONS one of those words is fine — you do NOT need to obfuscate them; only a real \`require(...)\` / \`process.x\` call site is caught.
-- Engine: TM_PTC_ENGINE=auto|worker|inline (auto tries worker first; on engine failure it re-runs the WHOLE program on inline with a degraded-engine mark — bridged calls are read-only, so a re-run is safe, and the fallback starts with fresh budgets under the same wall-clock deadline).`;
-/** Build the tm_ptc_run ToolDefinition.  Registered in the tool segment
- *  when the agent's whitelist grants tm_ptc_run (M3).  `deps.args` is the
- *  ZodRawShape from tools.buildPtcArgsSchema() when zod is available — the
- *  descriptor fallback below keeps the tool usable without zod. */
-export function buildPtcRunTool(deps) {
-    const { cfg, store, nextStepId, ctx, accessToken } = deps;
-    // Per-call bridge factory.  The bridge MUST bind the CALLER's execute ctx,
-    // not the assembly-time `{ directory }`: tm_search / tm_webfetch run their
-    // `ctx.ask` permission probe against the calling agent's session ruleset, so
-    // a non-web role's bridged web call is denied by the host exactly as if that
-    // agent had called the tool directly.  A test-provided `deps.bridge` still
-    // wins (the §9 suite injects its own mock).
-    const makeBridge = (callCtx) => deps.bridge ??
-        (deps.pipelines ? pipelineBridge(deps.pipelines, callCtx ?? ctx, deps.webTools) : undefined);
-    const expireAt = () => Date.now() + cfg.blackboardTtlDays * 24 * 60 * 60 * 1000;
-    return {
-        description: PTC_RUN_DESCRIPTION,
-        args: deps.args ?? {
-            program: { descriptor: "program: string (required, async fn body, ≤TM_PTC_MAX_PROGRAM_CHARS)" },
-            label: { descriptor: "label: string (optional, ≤80 chars)" },
-            budgets: { descriptor: "budgets: { max_calls?, max_errors?, timeout_ms? } (optional, tighten-only)" },
-        },
-        execute: async (rawArgs, callCtx) => {
-            const parsed = parsePtcArgs(rawArgs ?? {}, cfg);
-            if (!parsed.ok) {
-                return { output: `[${parsed.error.error.tool} 失败 · phase=${parsed.error.error.phase}]\n${parsed.error.error.message}` };
-            }
-            // static pre-scan — reject programs with banned tokens in EXECUTABLE
-            // structure before any engine runs (string/comment literals are stripped
-            // first, so a grep pattern that merely MENTIONS `require` is not caught).
-            const pscan = staticPscan(parsed.args.program);
-            if (pscan.rejected) {
-                return {
-                    output: `[tm_ptc_run 失败 · phase=args]\n程序包含禁止标识符（${pscan.tokens.join(", ")}），已拒绝执行。PTC 桥接仅暴露 tm.read/tm.grep/tm.bash/tm.fetch/tm.search/tm.webfetch（web 两项受 TM_PTC_WEB_BRIDGE 与角色权限门控）；require/import/process 等不在桥接白名单内。`,
-                };
-            }
-            // Re-bind the bridge to THIS call's ctx (role-gated web permission).
-            const bridge = makeBridge(callCtx);
-            if (!bridge) {
-                return {
-                    output: "[tm_ptc_run 失败 · phase=client]\n桥接管线未提供。",
-                };
-            }
-            // Generate a fresh parent step ID per call.
-            const parentStepId = nextStepId();
-            // Per-call offload helper: persist `text` under a PTC sub-step and
-            // render a handle block matching the four tools' visible shape.
-            const offloadBlock = (text, kind) => {
-                const tokens = estimateTokens(text);
-                try {
-                    const stored = store.writeResult(`${parentStepId}.${kind}`, {
-                        tool: "tm_ptc_run",
-                        content: text,
-                        tokens,
-                        contentType: detectContentType(text),
-                        preview: shorten(text, 120),
-                        expireAt: expireAt(),
-                    });
-                    return [
-                        `ref: ${stored.ref}`,
-                        `access_token: ${accessToken}`,
-                        `expire_at: ${stored.expireAt}`,
-                        `tokens: ${tokens}`,
-                        `（用 tm_fetch(ref, access_token) 取回；大载荷先试 mode:"structure"）`,
-                    ].join("\n");
-                }
-                catch {
-                    return text.slice(0, 2000);
-                }
-            };
-            const outcome = await runPtc({
-                program: parsed.args.program,
-                label: parsed.args.label,
-                budgets: parsed.args.budgets,
-                parentStepId,
-                cfg,
-                store,
-                bridge,
-                ...(deps.engine ? { engine: deps.engine } : {}),
-            });
-            const content = renderPtcSummary(outcome, offloadBlock);
-            // whole-summary offload if it still exceeds the threshold.
-            if (shouldOffload(estimateTokens(content), cfg.offloadThreshold)) {
-                return {
-                    output: `PTC 摘要过大（≈${estimateTokens(content)} tokens），已整体卸载为句柄，短摘要随后：\n` +
-                        offloadBlock(content, "rpt") +
-                        `\n--- 摘要前 1200 字符 ---\n${content.slice(0, 1200)}`,
-                };
-            }
-            return { output: content };
-        },
-    };
-}
-//# sourceMappingURL=tool.js.map

package/dist/tm/ptc/tool.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../../src/tm/ptc/tool.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,EAAiB,MAAM,cAAc,CAAA;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAGjD,OAAO,EAAE,OAAO,EAAgB,MAAM,cAAc,CAAA;AACpD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAqB,MAAM,gBAAgB,CAAA;AAGpF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAyB/C;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAgB,EAAE,MAAc;IACxD,MAAM,CAAC,GAAG,sDAAsD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC7E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAY,CAAA;QAC7B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAA;QAChE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;IACnC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,IAAgB,EAAE,IAA6B;IAC1E,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACxD,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,CAAC;YACH,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAA;QACX,CAAC;QACD,OAAO;YACL,UAAU,EAAE,aAAa;YACzB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACpC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE;SAC5C,CAAA;IACH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IACrE,OAAO;QACL,UAAU,EAAE,WAAW;QACvB,QAAQ,EAAE,CAAC,UAAU,MAAM,EAAE,CAAC;QAC9B,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE;KAC9C,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAsB,EAAE,GAAY,EAAE,GAAmB;IACtF,MAAM,IAAI,GAAG,CACX,IAAgB,EAIJ,EAAE,CACd,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,SAAS,CAAC,MAAM;QAClB,CAAC,CAAC,IAAI,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS,CAAC,MAAM;YAClB,CAAC,CAAC,IAAI,KAAK,SAAS;gBAClB,CAAC,CAAC,SAAS,CAAC,MAAM;gBAClB,CAAC,CAAC,IAAI,KAAK,UAAU;oBACnB,CAAC,CAAC,SAAS,CAAC,OAAO;oBACnB,CAAC,CAAC,IAAI,KAAK,WAAW;wBACpB,CAAC,CAAC,GAAG,EAAE,SAAS;wBAChB,CAAC,CAAC,GAAG,EAAE,WAAW,CAAA;IAC9B,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI;YACnB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,KAAK,EAAE,CAAA;YACxE,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,wDAAwD;gBACxD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,sCAAsC,CAAC,CAAC,KAAK;iBAC3E,CAAA;YACH,CAAC;YACD,wEAAwE;YACxE,qEAAqE;YACrE,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,+DAA+D;YAC/D,oDAAoD;YACpD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAA;gBAC3E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;oBAC3B,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,OAAO,CACZ,IAAI,EACJ,YAAY,EACZ,QAAQ,IAAI,qCAAqC,cAAc,CAAC,OAAO,CAAC,EAAE,CAC3E,CAAC,KAAK;qBACR,CAAA;gBACH,CAAC;YACH,CAAC;YACD,MAAM,GAAG,GACP,OAAO,MAAM,KAAK,UAAU;gBAC1B,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC;gBAC/B,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC3C,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,IAAK,GAA+B,EAAE,CAAC;gBAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,GAA+B,CAAC,KAAK,EAAE,CAAA;YACrE,CAAC;YACD,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBACnD,OAAO,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAE,GAA4B,EAAE,MAAM,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAA;YAC3F,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;QAChC,CAAC;KACF,CAAA;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,mBAAmB,GAAG;;;;;;;;8RAQkQ,CAAA;AAE9R;;;mEAGmE;AACnE,MAAM,UAAU,eAAe,CAAC,IAW/B;IACC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,IAAI,CAAA;IACzD,2EAA2E;IAC3E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,OAAgB,EAAyB,EAAE,CAC7D,IAAI,CAAC,MAAM;QACX,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,IAAI,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC9F,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;IAC/E,OAAO;QACL,WAAW,EAAE,mBAAmB;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI;YACjB,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,4EAA4E,EAAE;SACtG;QACD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAuB,EAAE;YACvD,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,EAAE,GAAG,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,eAAe,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAA;YACzH,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,0EAA0E;YAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC9C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;oBACL,MAAM,EAAE,2CAA2C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,+IAA+I;iBAC1N,CAAA;YACH,CAAC;YACD,qEAAqE;YACrE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;YAClC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,MAAM,EAAE,0CAA0C;iBACnD,CAAA;YACH,CAAC;YACD,4CAA4C;YAC5C,MAAM,YAAY,GAAG,UAAU,EAAE,CAAA;YACjC,mEAAmE;YACnE,gEAAgE;YAChE,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;gBAC1D,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;gBACnC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,YAAY,IAAI,IAAI,EAAE,EAAE;wBAC1D,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,IAAI;wBACb,MAAM;wBACN,WAAW,EAAE,iBAAiB,CAAC,IAAI,CAAC;wBACpC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;wBAC3B,QAAQ,EAAE,QAAQ,EAAE;qBACrB,CAAC,CAAA;oBACF,OAAO;wBACL,QAAQ,MAAM,CAAC,GAAG,EAAE;wBACpB,iBAAiB,WAAW,EAAE;wBAC9B,cAAc,MAAM,CAAC,QAAQ,EAAE;wBAC/B,WAAW,MAAM,EAAE;wBACnB,2DAA2D;qBAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC5B,CAAC;YACH,CAAC,CAAA;YACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;gBAC3B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;gBACxB,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;gBAC5B,YAAY;gBACZ,GAAG;gBACH,KAAK;gBACL,MAAM;gBACN,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAA;YACF,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACvD,2DAA2D;YAC3D,IAAI,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACjE,OAAO;oBACL,MAAM,EACJ,aAAa,cAAc,CAAC,OAAO,CAAC,4BAA4B;wBAChE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC;wBAC5B,0BAA0B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE;iBACrD,CAAA;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;QAC5B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/tm/ptc.d.ts

@@ -1,298 +0,0 @@
-/**
- * tm_ptc_run — programmatic batch orchestration (M1–M3 all shipped).
- *
- * Design: .git/opencode-team/.../ptc-run/02-architect-ptc-run-design.md §2/§3/§4/§6.
- * M1 contract: args schema, the frozen `PtcEngine` seam, the StepGate failure
- * governance (error / call / time budgets, ≤1 retry on idempotent phases,
- * produced-output preservation), the five-state status enum, the char-pinned
- * aggregation summary, composite step numbers (`sXXXX.kNN`) and the
- * trajectory event shapes.
- * M2 engines: WorkerEngine (worker_threads + MessagePort RPC, env:{},
- * resourceLimits, hard `terminate()` wall-clock kill; bootstrap as a
- * build-time string), InlineVmEngine (node:vm runInNewContext fallback —
- * the script timeout kills pre-await synchronous busy-loops; a post-await
- * busy loop blocks the host event loop irrecoverably, documented —
- * prefer worker/auto), InlineSequentialEngine (M1 legacy, test-only).
- * staticPscan is wired as
- * the FIRST gate — banned tokens reject before any engine runs (in both
- * runPtc and the tool execute path).
- * M3 registration: tm/index merges tm_ptc_run into the `tools` map; since
- * v1.5.4 ALL SIX agents carry the allow (team included — CHANGELOG 1.5.4).
- *
- * Engine selection: TM_PTC_ENGINE=auto (default) | worker | inline.  auto
- * runs worker-first; an engine-error re-runs the WHOLE program on
- * InlineVmEngine (bridged calls are read-only, so a re-run is safe; the
- * fallback starts with fresh call/error budgets under the SAME wall-clock
- * deadline) and marks `degraded-engine` in the summary.
- *
- * Governance is REUSED, never forked (D6 lock): the inline bridge calls the
- * exact four exported pipelines (`buildPipelines`), so threshold offload,
- * P2/P3, R6 and handle/TTL semantics apply to every bridged call verbatim.
- * PTC is NOT a bypass layer.
- */
-import type { ToolDefinition } from "../types.js";
-import { type TmConfig } from "./config.js";
-import type { RunStore } from "./store.js";
-import { tmError, type TmPipelines, type TmPhase } from "./tools.js";
-/** The five PTC run statuses (design §2). */
-export declare const PTC_STATUS_VALUES: readonly ["ok", "stopped-error-budget", "stopped-call-budget", "timeout", "engine-error"];
-export type PtcStatus = (typeof PTC_STATUS_VALUES)[number];
-export type BridgeTool = "tm_read" | "tm_grep" | "tm_bash" | "tm_fetch";
-/** Bridge allow set — read-only; tm_ptc_run itself is excluded (no nesting). */
-export declare const BRIDGE_ALLOW: readonly BridgeTool[];
-/** Phases safe to retry once (idempotent read-only bridges; design §4.2). */
-export declare const RETRYABLE_PHASES: readonly TmPhase[];
-/** Error body the bridge surfaces (T1.4 shape: tool/phase/message/line?). */
-export interface PtcErrorBody {
-    tool: string;
-    phase: TmPhase;
-    message: string;
-    line?: number;
-}
-/** A single bridged-call outcome (design §2 program protocol). */
-export type PtcCallResult = {
-    ok: true;
-    data: unknown;
-} | {
-    ok: false;
-    error: PtcErrorBody;
-};
-/** The bridge the engine drives — in M1 it wraps the four pipelines. */
-export interface PtcBridge {
-    call(tool: BridgeTool, args: Record<string, unknown>): Promise<PtcCallResult>;
-}
-/** Parent → engine: run the program. */
-export interface PtcRunRequest {
-    program: string;
-    /** monotonic token so a caller can correlate a call with its response. */
-    startDeadlineMs: number;
-}
-/** Engine → driver: a single bridged call to execute under the gate. */
-export interface PtcRpcRequest {
-    t: "call";
-    id: number;
-    tool: BridgeTool;
-    args: Record<string, unknown>;
-}
-/** Driver → engine: the gated result of a call. */
-export interface PtcRpcResponse {
-    t: "result";
-    id: number;
-    r: PtcCallResult;
-}
-/** Driver → engine: stop the run (budget / time hit); engine must unwind. */
-export interface PtcRpcAbort {
-    t: "abort";
-    id: number;
-    reason: "timeout" | "error-budget" | "call-budget";
-}
-export type PtcEngineMessage = PtcRpcRequest | PtcRpcResponse | PtcRpcAbort;
-export type PtcEngineName = "worker" | "inline";
-/** The engine seam. M1 ships `InlineSequentialEngine`; M2 adds `WorkerEngine`
- *  (over MessagePort) with the SAME shape, so neither the driver nor the
- *  contract changes across milestones. */
-export interface PtcEngine {
-    readonly name: PtcEngineName;
-    /**
-     * Run `program`, driving every bridge call through `bridge` (already
-     * gate-wrapped by the driver). Resolve with the program's return value;
-     * reject with a `PtcStopSignal` for a budget/time stop, or any other Error
-     * for an engine/program fault. `signal` lets the driver race a timeout.
-     */
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-export interface PtcBudgets {
-    maxCalls: number;
-    maxErrors: number;
-    timeoutMs: number;
-}
-export interface PtcCallerBudgets {
-    max_calls?: unknown;
-    max_errors?: unknown;
-    timeout_ms?: unknown;
-}
-export declare function resolvePtcBudgets(cfg: TmConfig, budgets: PtcCallerBudgets | undefined | null): PtcBudgets;
-export declare const PTC_LABEL_MAX = 80;
-export interface PtcValidArgs {
-    program: string;
-    label: string;
-    budgets: PtcBudgets;
-}
-export type PtcArgsResult = {
-    ok: true;
-    args: PtcValidArgs;
-} | {
-    ok: false;
-    error: ReturnType<typeof tmError>;
-};
-/**
- * Validate + normalize tm_ptc_run args.  `program` over the length cap is a
- * hard args error (a program cannot be meaningfully truncated); `label` over
- * 80 is truncated; `budgets` are clamped toward the env ceilings.
- */
-export declare function parsePtcArgs(raw: Record<string, unknown> | undefined, cfg: TmConfig): PtcArgsResult;
-/** Static scan of a program string — the FIRST gate: runPtc and
- *  buildPtcRunTool both reject a rejected program before any engine runs. */
-export declare function staticPscan(program: string): {
-    rejected: boolean;
-    tokens: string[];
-};
-export interface PtcStepRecord {
-    n: number;
-    tool: BridgeTool;
-    ok: boolean;
-    ms: number;
-    /** ok rows: estimated tokens (inline text) or the offload handle's tokens. */
-    tokens: number;
-    /** ok rows: "inline" or a short ref code for an offloaded payload. */
-    dest: string;
-    /** ok rows: the offload ref (when the data was a handle), else null. */
-    ref?: string | null;
-    /** err rows only. */
-    phase?: TmPhase;
-    line?: number;
-    retry?: boolean;
-    message?: string;
-    errorRef?: string;
-}
-export interface PtcRunOutcome {
-    label: string;
-    status: PtcStatus;
-    steps: PtcStepRecord[];
-    okCount: number;
-    errCount: number;
-    retries: number;
-    calls: number;
-    ms: number;
-    engine: PtcEngineName;
-    degraded: boolean;
-    returnValue: unknown;
-    returned: boolean;
-    /** set when the program threw (status=engine-error). */
-    engineError?: PtcErrorBody;
-    parentStepId: string;
-}
-export declare class InlineSequentialEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-/**
- * Worker engine — runs the program in a dedicated `worker_threads.Worker`
- * with `env:{}` (process.env emptied), `resourceLimits`, and `terminate()`
- * for hard timeout kills.  The bootstrap source is a build-time template
- * string constant (zero runtime file IO, zero new deps, passes tsc).
- *
- * Probe result (P1, %TEMP%): ALL-GREEN on Node 24 / win32 — eval bootstrap,
- * postMessage bidirectional, terminate (9 ms), resourceLimits, env:{} all
- * verified.  Auto chain = worker-first, inline fallback.
- */
-export declare class WorkerEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-/**
- * Inline-vm engine — runs the program inside `node:vm` via
- * `runInNewContext` with a script-level execution timeout.  Measured on
- * Node 24/win32: `compileFunction`'s `timeout` does NOT interrupt a busy
- * loop when the compiled function is invoked (the call blocks the main
- * thread forever), while the async-IIFE + `runInNewContext` shape DOES —
- * a synchronous busy loop before the first `await` is killed ("Script
- * execution timed out").
- *
- * KNOWN RESIDUAL RISK (design §3, declared): a busy loop AFTER the first
- * `await` runs in a microtask continuation that blocks the host event
- * loop — no timer can fire, so NOTHING reclaims the main thread.  This is
- * inherent to any main-thread execution (InlineSequentialEngine shares
- * it); the primary worker engine does not share it (`terminate()` runs on
- * a separate thread) — prefer worker/auto in production.
- */
-export declare class InlineVmEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    /** Script execution timeout in ms (kills pre-await synchronous
-     *  busy-loops).  Injectable so tests can pin the kill fast. */
-    private readonly compileTimeoutMs;
-    constructor(compileTimeoutMs?: number);
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-interface GateState {
-    calls: number;
-    errors: number;
-    retries: number;
-    steps: PtcStepRecord[];
-    stopReason?: "timeout" | "error-budget" | "call-budget";
-}
-/**
- * Wrap a raw bridge with the StepGate.  Every call: enforce time/call budget
- * (throw a stop that unwinds the program), assign a composite step id
- * `parent.kNN`, retry ≤1 on idempotent phases, record + persist errors, and
- * trip the error budget.  The gate lives ONLY here (outside the engine), per
- * design §3 ("决策进代码").
- */
-export declare function createGateBridge(raw: PtcBridge, parent: string, budgets: PtcBudgets, state: GateState, opts: {
-    now: () => number;
-    deadlineAt: number;
-    store?: RunStore;
-    trajectoryParent?: string;
-}): PtcBridge;
-export interface EngineSelection {
-    engine: PtcEngine;
-    /** true when the auto chain degraded from worker to inline. */
-    degraded: boolean;
-}
-/**
- * Select the PTC engine based on the TM_PTC_ENGINE mode.
- *  - "worker": WorkerEngine only (throws on failure → engine-error status).
- *  - "inline": InlineVmEngine only (vm timeout for sync busy-loops).
- *  - "auto" (default): try WorkerEngine first; on failure → InlineVmEngine
- *    with `degraded=true` (marked `degraded-engine` in the summary).
- *
- * Probe result (P1, %TEMP%): ALL-GREEN on Node 24/win32 — auto chain =
- * worker-first, inline fallback.  Design §3 table.
- */
-export declare function selectEngine(mode: "auto" | "worker" | "inline", bridge: PtcBridge): EngineSelection;
-export interface RunPtcOptions {
-    program: string;
-    label: string;
-    budgets: PtcBudgets;
-    parentStepId: string;
-    cfg: TmConfig;
-    store?: RunStore;
-    bridge: PtcBridge;
-    engine?: PtcEngine;
-    now?: () => number;
-}
-export declare function runPtc(o: RunPtcOptions): Promise<PtcRunOutcome>;
-export declare const PTC_SUMMARY_HEADER = "PTC \u6458\u8981";
-export declare const PTC_OK_SECTION = "-- \u6210\u529F\u5206\u90E8\uFF08\u22648 \u884C\uFF0C\u8D85\u51FA\u6574\u8868\u5378\u8F7D\uFF09";
-export declare const PTC_OK_HEADER = " #  tool      ms   tokens  \u843D\u70B9(inline|ref \u77ED\u7801)";
-export declare const PTC_ERR_SECTION = "-- \u9519\u8BEF\u5206\u90E8\uFF08\u5168\u91CF\u9519\u8BEF\u5DF2\u843D run store\uFF09";
-export declare const PTC_ERR_HEADER = " #  tool      phase      line  retry  message(\u622A\u65AD)";
-export declare const PTC_RETURN_PREFIX = "\u8FD4\u56DE\u503C: ";
-export declare const PTC_ERRORFULL_PREFIX = "\u9519\u8BEF\u5168\u6587: ";
-/** Render the fixed-shape aggregation summary.  `offload` is used to route an
- *  oversized success/error table (or return value) to a run-store handle. */
-export declare function renderPtcSummary(o: PtcRunOutcome, offload?: (content: string, kind: string) => string): string;
-/**
- * Real M1 bridge: delegate each call to the corresponding exported pipeline,
- * `ctx` passed through untouched, and normalize the pipeline's `unknown`
- * result into `PtcCallResult` (TmErrorBody -> ok:false; anything else -> the
- * already-governed data).  Governance is entirely the pipelines'.
- */
-export declare function pipelineBridge(pipelines: TmPipelines, ctx: unknown): PtcBridge;
-/** Build the tm_ptc_run ToolDefinition.  Registered in the tool segment
- *  when the agent's whitelist grants tm_ptc_run (M3).  `deps.args` is the
- *  ZodRawShape from tools.buildPtcArgsSchema() when zod is available — the
- *  descriptor fallback below keeps the tool usable without zod. */
-export declare function buildPtcRunTool(deps: {
-    cfg: TmConfig;
-    store: RunStore;
-    nextStepId: () => string;
-    ctx: unknown;
-    accessToken: string;
-    args?: Record<string, unknown>;
-    engine?: PtcEngine;
-    pipelines?: TmPipelines;
-    bridge?: PtcBridge;
-}): ToolDefinition;
-export {};
-//# sourceMappingURL=ptc.d.ts.map

package/dist/tm/ptc.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ptc.d.ts","sourceRoot":"","sources":["../../src/tm/ptc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAc,MAAM,aAAa,CAAA;AAC7D,OAAO,EAA0C,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEnF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAA;AAIpE,6CAA6C;AAC7C,eAAO,MAAM,iBAAiB,2FAMpB,CAAA;AACV,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAA;AAEvE,gFAAgF;AAChF,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAAkD,CAAA;AAEhG,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,EAAE,SAAS,OAAO,EAAmC,CAAA;AAElF,6EAA6E;AAC7E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,kEAAkE;AAClE,MAAM,MAAM,aAAa,GACrB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC3B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,CAAA;AAEtC,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;CAC9E;AAID,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,MAAM,CAAA;IACT,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,UAAU,CAAA;IAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC9B;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,QAAQ,CAAA;IACX,EAAE,EAAE,MAAM,CAAA;IACV,CAAC,EAAE,aAAa,CAAA;CACjB;AAED,6EAA6E;AAC7E,MAAM,WAAW,WAAW;IAC1B,CAAC,EAAE,OAAO,CAAA;IACV,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;CACnD;AAED,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,cAAc,GAAG,WAAW,CAAA;AAE3E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE/C;;0CAE0C;AAC1C,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B;;;;;OAKG;IACH,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC/E;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAgBD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAOzG;AAQD,eAAO,MAAM,aAAa,KAAK,CAAA;AAE/B,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,UAAU,CAAA;CACpB;AACD,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,CAAA;CAAE,CAAA;AAE/G;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,QAAQ,GAAG,aAAa,CAoBnG;AAkBD;6EAC6E;AAC7E,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CAMpF;AAID,MAAM,WAAW,aAAa;IAC5B,CAAC,EAAE,MAAM,CAAA;IACT,IAAI,EAAE,UAAU,CAAA;IAChB,EAAE,EAAE,OAAO,CAAA;IACX,EAAE,EAAE,MAAM,CAAA;IACV,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,qBAAqB;IACrB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,SAAS,CAAA;IACjB,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,EAAE,OAAO,CAAA;IACpB,QAAQ,EAAE,OAAO,CAAA;IACjB,wDAAwD;IACxD,WAAW,CAAC,EAAE,YAAY,CAAA;IAC1B,YAAY,EAAE,MAAM,CAAA;CACrB;AA+BD,qBAAa,sBAAuB,YAAW,SAAS;IACtD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IACjC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAyBrF;AAID;;;;;;;;;GASG;AACH,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IAEjC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CA8GrF;AAID;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,cAAe,YAAW,SAAS;IAC9C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IACvC;mEAC+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;gBAC7B,gBAAgB,SAAS;IAI/B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAuBrF;AAID,UAAU,SAAS;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,CAAA;CACxD;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,SAAS,EACd,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,SAAS,EAChB,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F,SAAS,CA+FX;AA2BD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAA;IACjB,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAG,eAAe,CAcnG;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,UAAU,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,GAAG,EAAE,QAAQ,CAAA;IACb,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,wBAAsB,MAAM,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAwIrE;AAUD,eAAO,MAAM,kBAAkB,qBAAW,CAAA;AAC1C,eAAO,MAAM,cAAc,oGAAyB,CAAA;AACpD,eAAO,MAAM,aAAa,qEAAiD,CAAA;AAC3E,eAAO,MAAM,eAAe,0FAA8B,CAAA;AAC1D,eAAO,MAAM,cAAc,gEAAsD,CAAA;AACjF,eAAO,MAAM,iBAAiB,yBAAU,CAAA;AACxC,eAAO,MAAM,oBAAoB,+BAAW,CAAA;AAU5C;6EAC6E;AAC7E,wBAAgB,gBAAgB,CAC9B,CAAC,EAAE,aAAa,EAChB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,MAAM,GAClD,MAAM,CA4DR;AAkCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,GAAG,SAAS,CAqB9E;AAYD;;;mEAGmE;AACnE,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,GAAG,EAAE,QAAQ,CAAA;IACb,KAAK,EAAE,QAAQ,CAAA;IACf,UAAU,EAAE,MAAM,MAAM,CAAA;IACxB,GAAG,EAAE,OAAO,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,SAAS,CAAC,EAAE,WAAW,CAAA;IACvB,MAAM,CAAC,EAAE,SAAS,CAAA;CACnB,GAAG,cAAc,CA8EjB"}