@theoremjs/studio 0.3.4-next.508.geda6db0 → 0.3.4-next.524.g5000023

package/page/assets/{_virtual_studio-type-sources-CTIGQ210.js → _virtual_studio-type-sources-oXv11QXQ.js}

@@ -4416,9 +4416,6 @@ interface HostMatcher {
 }
 /** Bumped whenever the compiled table's layout or meaning changes. */
 declare const PATTERN_COMPILER_VERSION = 3;
-/** The most patterns one detector takes, and the longest each may be once written as a regular expression. */
-declare const MAX_PATTERNS = 64;
-declare const MAX_PATTERN_LENGTH = 1024;
 /** The patterns as a compiled table records them. */
 declare function patternSources(patterns: readonly HostPattern[]): PatternSource[];
 /** What is wrong with one pattern, or \`undefined\` when it runs. */
@@ -4439,7 +4436,7 @@ declare function listsPatterns(detect: unknown): boolean;
 /** \`patterns\`, valid, ready to run. */
 declare function matchersOf(patterns: readonly HostPattern[]): readonly HostMatcher[];
 export type { AutomatonData, CompiledPatterns, HostMatcher, HostPattern, PatternSource };
-export { listsPatterns, MAX_PATTERN_LENGTH, MAX_PATTERNS, matchersOf, PATTERN_COMPILER_VERSION, patternListProblem, patternProblem, patternSources, patternsProblem, };
+export { listsPatterns, matchersOf, PATTERN_COMPILER_VERSION, patternListProblem, patternProblem, patternSources, patternsProblem, };
 `,"file:///node_modules/@theoremjs/agents/src/guardrails/detectors.d.ts":`/** labels-exempt-file: authoring labels, descriptions and profile-registration diagnostics for detectors — not runtime user or model copy (P2) */
 import { type Boundary } from './boundaries.js';
 import { type CompiledPatterns, type HostMatcher, type HostPattern } from './host-patterns.js';
@@ -6858,6 +6855,8 @@ export interface CompactionFailure {
     stop?: TurnStopKind;
     /** The error it reported, when it reported one. */
     error?: ErrorKind;
+    /** Why it failed, for the builder only: \`forClient\` strips it for a visitor. */
+    errorInternal?: string;
     /** It completed without a summary. */
     empty?: true;
     /** Nothing in \`toCompact\` was left for it to read, so it did not run. */
@@ -8033,6 +8032,11 @@ export interface GuardrailEvent {
     provenance?: Provenance;
     /** The block verdict's \`errorInternal\`: builder-only, stripped by \`forClient\`. */
     errorInternal?: string;
+    /**
+     * A failed host detector's \`errorInternal\` in the kernel's words only, with the same error id:
+     * what the trace stores. Builder-only, stripped by \`forClient\`.
+     */
+    errorSummary?: string;
 }
 /** The schema a guardrail event parses against. */
 export declare const guardrailEventSchema: z.ZodType<GuardrailEvent>;
@@ -8945,12 +8949,25 @@ export interface ToolOutputHooks<TOut = unknown> {
 /** For a tool whose result names pictures by address; function tools return the bytes themselves as \`parts\`. */
 export interface ToolImageHooks<TOut = unknown> {
     /**
-     * The https addresses of pictures in \`output\` the model should see, at most \`MAX_TOOL_IMAGES\`
-     * of them. After the result passes the output guard, the kernel fetches each one through the
-     * profile's network policy, without the tool's credentials, and hands the model the image as a
-     * part; one it cannot fetch is an \`images_unfetched\` warning, never a failed call.
+     * The https addresses of pictures in \`output\` the model should see. After the result passes the
+     * output guard, the kernel fetches each one through the profile's network policy, without the
+     * tool's credentials, and hands the model the image as a part; one it cannot fetch is an
+     * \`images_unfetched\` warning, never a failed call.
      */
     images?: (output: TOut) => string[];
+    /** How many of those pictures the kernel fetches, how large, and how slowly. Left out, there is no limit. */
+    imageLimits?: ToolImageLimits;
+}
+/** Each limit left out is no limit. A picture past one is left out, not cut. */
+export interface ToolImageLimits {
+    /** The most pictures one call hands the model; the first ones named are kept. */
+    count?: number;
+    /** The largest picture fetched. */
+    bytes?: number;
+    /** The most one call hands the model in all. */
+    totalBytes?: number;
+    /** How long each picture may take. */
+    timeoutMs?: number;
 }
 export interface FunctionToolDef<TIn = unknown, TOut = unknown> extends ToolBase, ToolHostHooks<TIn>, ToolOutputHooks<TOut> {
     type: 'function';
@@ -9008,6 +9025,8 @@ export interface HttpToolDef<TIn = unknown, TOut = unknown> extends ToolBase, To
     };
     /** The service's own limit for one key; the kernel keeps this tool's requests within it. */
     limit?: HttpToolLimit;
+    /** The most of a response body the kernel reads; past it the call fails \`response_too_large\`. Left out, there is no limit. */
+    maxResponseBytes?: number;
     /**
      * How long the service may take to answer, its body read included. Past it the call
      * fails \`timeout\` and frees its place in the limit. Left out, a call waits as long as
@@ -9028,6 +9047,17 @@ export interface McpToolDef<TIn = unknown, TOut = unknown> extends ToolBase, Too
     mcpToolName: string;
     headers?: Record<string, string>;
     auth?: ToolAuthConfig;
+    /** The most of a response body the kernel reads; past it the call fails \`response_too_large\`. Left out, there is no limit. */
+    maxResponseBytes?: number;
+    /** How long and how many of this tool's server sessions the kernel keeps. Left out, there is no limit. */
+    session?: McpSessionLimits;
+}
+/** The sessions an MCP tool keeps: each field left out is no limit. */
+export interface McpSessionLimits {
+    /** How long a session may sit unused before the next call opens a new one, in milliseconds. */
+    idleMs?: number;
+    /** The most sessions the tool keeps open; past it the least recently used is dropped. */
+    max?: number;
 }
 /**
  * What an agent tool call carries: the text, and whatever else the called
@@ -9656,7 +9686,7 @@ declare function kindOfHttpStatus(status: number): ErrorKind;
 declare function errorCopyText(copy: ErrorCopies, labels?: LabelOverrides): string;
 /** Pass the profile's \`labels\`, or the profile's wording is skipped. */
 declare function publicError(err: unknown, labels?: LabelOverrides): string;
-/** Raw diagnostic for hosts, traces, and logs; never shown to end users. */
+/** Raw diagnostic for hosts, traces, and logs; never shown to end users. Each cause that says something new follows on its own line. */
 declare function describeError(err: unknown): string;
 type ProducedError = TurnEventOf<'error'> & {
     errorInternal: string;
@@ -10643,14 +10673,19 @@ export { createToolRegistry };
  * Sessions for MCP servers that refuse a call without one. A session is a cache, not state: it
  * lives in memory on one tool registry, is never persisted, and losing it costs one reopen.
  */
+import type { McpSessionLimits } from './types.js';
 export type McpSession = {
     id: string;
     protocolVersion: string;
 };
+/** The tool a session is used for, and that tool's own \`session\` limits. */
+export interface McpSessionUse extends McpSessionLimits {
+    tool: string;
+}
 export interface McpSessionCache {
-    get(key: string): McpSession | undefined;
+    get(key: string, use: McpSessionUse): McpSession | undefined;
     /** Parallel callers for one key share a single \`open\`. */
-    open(key: string, open: () => Promise<McpSession>): Promise<McpSession>;
+    open(key: string, use: McpSessionUse, open: () => Promise<McpSession>): Promise<McpSession>;
     /** Only drops the session if it's still \`id\`, so a late expiry can't evict a newer one. */
     drop(key: string, id: string): void;
     clear(): void;
@@ -10801,8 +10836,6 @@ export declare function refusedCredentialOutcome(tool: {
     name: string;
     auth?: ToolAuthConfig;
 }, refusal: CredentialRefusal | undefined, carried: boolean, ctx: ToolContext, base: ToolCallBase): Generator<TurnEvent, ToolBodyOutcome | undefined>;
-/** The most of a tool's response body the kernel reads; past it the call fails instead of exhausting the host's memory. */
-export declare const MAX_TOOL_RESPONSE_BYTES: number;
 /** Every string in \`value\` with the credential replaced. */
 export declare function omitSecret(value: unknown, secret: string): unknown;
 /** A failure's message and details with the credential replaced. */
@@ -11553,6 +11586,10 @@ interface Detection {
     text?: string;
     /** Every match, each named for its detector. */
     hits: GuardrailHit[];
+    /** Why a host's \`find\` failed, for the builder only: it reaches \`guardrail.errorInternal\`. */
+    errorInternal?: string;
+    /** The same failure in the kernel's words only, with no text from the host: what the trace stores. */
+    errorSummary?: string;
 }
 declare function stronger(left: DetectOutcome, right: DetectOutcome | 'ignore'): DetectOutcome;
 /**
@@ -11632,7 +11669,7 @@ declare function storedHostSpans(text: string, detect?: ResolvedDetect): RedactS
 interface BoundaryReader {
     /** The text to let through, or \`''\` once a match blocks: the caller reads \`found().action\`. */
     read(text: string): string;
-    found(): Pick<Detection, 'action' | 'hits'>;
+    found(): Pick<Detection, 'action' | 'hits' | 'errorInternal' | 'errorSummary'>;
 }
 /** A reader for everything crossing \`boundary\` in one request. */
 declare function boundaryReader(boundary: Boundary, detect: ResolvedDetect): BoundaryReader;
@@ -11640,7 +11677,7 @@ declare function boundaryReader(boundary: Boundary, detect: ResolvedDetect): Bou
  * The guardrail event for what was found at a boundary, or \`undefined\` when nothing matched.
  * \`stage\` is the boundary's own unless the text was read as it streamed.
  */
-declare function detectEvent(boundary: Boundary, found: Pick<Detection, 'action' | 'hits'>, provenance?: Provenance, stage?: GuardrailStage): GuardrailEvent | undefined;
+declare function detectEvent(boundary: Boundary, found: Pick<Detection, 'action' | 'hits' | 'errorInternal' | 'errorSummary'>, provenance?: Provenance, stage?: GuardrailStage): GuardrailEvent | undefined;
 export type { BoundaryReader, Detection, DetectOutcome, DetectScope, Release, StoredSides, StreamRead, Stretch, };
 export { boundaryReader, detectAt, detectEvent, detectorsAt, detectReads, detectRelease, hostAt, isScoped, leakScopeOf, redactDetectors, scopeOf, storedHostSpans, storedSpans, stronger, };
 `,"file:///node_modules/@theoremjs/agents/src/guardrails/egress.d.ts":`import type { ModelEvent } from '../kernel/types.js';
@@ -12165,7 +12202,7 @@ declare function sanitizeProjectId(id: string | undefined): string | undefined;
  */
 declare function sanitizeHistory(history: TurnHistoryMessage[], reader: BoundaryReader): TurnHistoryMessage[];
 /** The error a turn ends on when a detector set to \`block\` matched at \`boundary\`. */
-declare function requestRefused(boundary: Boundary): TheoremError;
+declare function requestRefused(boundary: Boundary, reason?: string): TheoremError;
 /** A turn request read at each boundary it crosses. */
 interface SanitizedTurnRequest {
     request: NormalizedTurnRequest;
@@ -12233,7 +12270,7 @@ export { errorCopiesSchema, errorKindSchema, guardrailEventSchema } from './even
 export { guardrailFromHits, guardrailFromVerdict, guardrailTurnEvent, projectGuardrailTurnEvent, } from './events.js';
 export { hitFromSpan, projectGuardrailEvent, } from './hits.js';
 export type { CompiledPatterns, HostPattern } from './host-patterns.js';
-export { listsPatterns, MAX_PATTERN_LENGTH, MAX_PATTERNS, patternListProblem, } from './host-patterns.js';
+export { listsPatterns, patternListProblem, } from './host-patterns.js';
 export { injectionSpans } from './injection.js';
 export type { ClientLabelKey, LabelKey, LabelOverrides, LabelParams } from './labels.js';
 export { CLIENT_LABEL_KEYS, LABEL_KEYS, labelCatalogRows, labelDefault, labelText, overrideLabels, resetLabels, validateLabelOverrides, } from './labels.js';