@vinhnt-sdk/core 0.1.0

package/dist/kernel/model-caller.js

@@ -0,0 +1,196 @@
+function emitTC(runId, traceId, data) {
+    return { id: crypto.randomUUID(), runId, type: "token.counted", occurredAt: new Date().toISOString(), traceId, data };
+}
+function emitMC(runId, traceId, data) {
+    return { id: crypto.randomUUID(), runId, type: "model.cost", occurredAt: new Date().toISOString(), traceId, data };
+}
+export class ModelCaller {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** Swap the default model at runtime (config hot-reload). */
+    setDefaultModel(model) {
+        this.deps.defaultModel = model;
+    }
+    /** Swap runtime-tunable generation settings at runtime (config hot-reload). */
+    setRuntimeOptions(options) {
+        if (options.maxTokens !== undefined)
+            this.deps.maxTokens = options.maxTokens;
+        if (options.thinkingBudget !== undefined)
+            this.deps.thinkingBudget = options.thinkingBudget;
+        if (options.thinkingPrompt !== undefined)
+            this.deps.thinkingPrompt = options.thinkingPrompt;
+    }
+    getDefaultModel() {
+        return this.deps.defaultModel;
+    }
+    resolveAgentModel(agent, runId) {
+        const preferred = agent?.profile?.model;
+        if (preferred && this.deps.modelRegistry) {
+            const provider = this.deps.modelRegistry.get(preferred);
+            if (provider) {
+                if (runId)
+                    this.deps.setModelForRun(runId, provider);
+                return provider;
+            }
+        }
+        if (runId)
+            this.deps.setModelForRun(runId, this.deps.defaultModel);
+        return this.deps.defaultModel;
+    }
+    getActiveModel(runId) {
+        return this.deps.modelForRun(runId) ?? this.deps.defaultModel;
+    }
+    async callModelStream(messages, step, runId, ctx, signal, agentMaxTokens, disableTools) {
+        const availableTools = disableTools ? [] : this.deps.getAvailableTools();
+        const thinkingBudget = this.deps.thinkingBudget > 0 ? this.deps.thinkingBudget : undefined;
+        let request = {
+            messages, tools: availableTools, maxTokens: agentMaxTokens ?? this.deps.maxTokens,
+            ...(thinkingBudget !== undefined ? { thinkingBudget } : {}),
+            ...(this.deps.thinkingPrompt ? { thinkingPrompt: this.deps.thinkingPrompt } : {}),
+        };
+        const chatParamsResult = await this.deps.pluginManager?.fireHook("onChatParams", {
+            request: request,
+        });
+        if (chatParamsResult?.modified?.request) {
+            request = chatParamsResult.modified.request;
+        }
+        const model = this.getActiveModel(runId);
+        const modelName = model.model ?? "unknown";
+        const startTime = performance.now();
+        let inputTokens = 0;
+        let outputTokens = 0;
+        const modelHasTokens = !!model.countTokens;
+        if (modelHasTokens) {
+            inputTokens = messages.reduce((sum, m) => sum + model.countTokens(m.content), 0);
+            await this.deps.emitEvent(emitTC(runId, ctx.traceId, { inputTokens, step, source: "local" }));
+        }
+        let content = "";
+        const toolCalls = [];
+        if (!model.stream) {
+            const res = await model.generate(request, signal);
+            let source = "api";
+            if (res.usage && res.usage.inputTokens > 0 && res.usage.outputTokens > 0) {
+                inputTokens = res.usage.inputTokens;
+                outputTokens = res.usage.outputTokens;
+            }
+            else if (modelHasTokens && res.content) {
+                const localOut = model.countTokens(res.content);
+                if (res.usage?.inputTokens)
+                    inputTokens = res.usage.inputTokens;
+                outputTokens = localOut;
+                source = localOut === (res.usage?.outputTokens ?? -1) ? "api" : "local";
+            }
+            await this.deps.emitEvent(emitTC(runId, ctx.traceId, { inputTokens, outputTokens, step, source }));
+            const durationMs = Math.round(performance.now() - startTime);
+            const cost = this.calculateCost(inputTokens, outputTokens, model) ?? 0;
+            await this.deps.emitEvent(emitMC(runId, ctx.traceId, { inputTokens, outputTokens, cost, model: modelName, durationMs, step }));
+            if (typeof console !== "undefined") {
+                const p = model?.pricing;
+                console.log(`[llm] ${modelName}: ${inputTokens} in, ${outputTokens} out, $${cost.toFixed(6)}, ${durationMs}ms${p ? ` ($${p.input}/${p.output} per 1M)` : ""}`);
+            }
+            return res;
+        }
+        for await (const event of model.stream(request, signal)) {
+            switch (event.type) {
+                case "text":
+                    content += event.content;
+                    await this.deps.emitEvent({
+                        id: crypto.randomUUID(), runId, type: "token.streamed",
+                        occurredAt: new Date().toISOString(), traceId: ctx.traceId,
+                        data: { content: event.content, step },
+                    }, false);
+                    await this.deps.pluginManager?.fireHook("onTokenStreamed", { content: event.content, step });
+                    break;
+                case "tool_call":
+                    toolCalls.push({ id: event.id, name: event.name, args: event.args });
+                    break;
+                case "usage":
+                    inputTokens = event.inputTokens;
+                    outputTokens = event.outputTokens;
+                    break;
+                case "done":
+                    break;
+                case "error":
+                    throw new Error(event.error);
+            }
+        }
+        let source = "api";
+        if (outputTokens === 0 && modelHasTokens && content) {
+            outputTokens = model.countTokens(content);
+            source = "local";
+        }
+        if (inputTokens > 0 || outputTokens > 0) {
+            await this.deps.emitEvent(emitTC(runId, ctx.traceId, { inputTokens, outputTokens, step, source }));
+        }
+        const durationMs = Math.round(performance.now() - startTime);
+        const cost = this.calculateCost(inputTokens, outputTokens, model) ?? 0;
+        await this.deps.emitEvent(emitMC(runId, ctx.traceId, { inputTokens, outputTokens, cost, model: modelName, durationMs, step }));
+        if (typeof console !== "undefined") {
+            const p = model?.pricing;
+            console.log(`[llm] ${modelName}: ${inputTokens} in, ${outputTokens} out, $${cost.toFixed(6)}, ${durationMs}ms${p ? ` ($${p.input}/${p.output} per 1M)` : ""}`);
+        }
+        return toolCalls.length > 0 ? { content, toolCalls } : { content };
+    }
+    async doThinkingStep(messages, step, runId, ctx, signal) {
+        await this.deps.emitEvent({
+            id: crypto.randomUUID(), runId, type: "thinking.started",
+            occurredAt: new Date().toISOString(), traceId: ctx.traceId,
+            data: { step },
+        });
+        let thinking = "";
+        const thinkModel = this.getActiveModel(runId);
+        if (thinkModel.stream) {
+            for await (const event of thinkModel.stream({ messages: [...messages, { role: "system", content: this.deps.thinkingPrompt }], tools: [] }, signal)) {
+                if (event.type === "text") {
+                    thinking += event.content;
+                    await this.deps.emitEvent({
+                        id: crypto.randomUUID(), runId, type: "thinking.content",
+                        occurredAt: new Date().toISOString(), traceId: ctx.traceId,
+                        data: { content: event.content, step },
+                    }, false);
+                }
+                else if (event.type === "error") {
+                    return;
+                }
+            }
+        }
+        else {
+            try {
+                const res = await thinkModel.generate({ messages: [...messages, { role: "system", content: this.deps.thinkingPrompt }], tools: [], maxTokens: this.deps.thinkingBudget }, signal);
+                thinking = res.content;
+                if (thinking) {
+                    await this.deps.emitEvent({
+                        id: crypto.randomUUID(), runId, type: "thinking.content",
+                        occurredAt: new Date().toISOString(), traceId: ctx.traceId,
+                        data: { content: thinking, step },
+                    }, false);
+                }
+            }
+            catch {
+                return;
+            }
+        }
+        if (thinking.trim()) {
+            messages.push({
+                role: "system",
+                content: `[Thinking from previous pass]\n${thinking.trim()}`,
+            });
+        }
+        await this.deps.emitEvent({
+            id: crypto.randomUUID(), runId, type: "thinking.completed",
+            occurredAt: new Date().toISOString(), traceId: ctx.traceId,
+            data: { content: thinking, step },
+        });
+    }
+    calculateCost(inputTokens, outputTokens, model) {
+        const p = model?.pricing;
+        if (!p)
+            return undefined;
+        const inputCost = (inputTokens * p.input) / 1_000_000;
+        const outputCost = (outputTokens * p.output) / 1_000_000;
+        return Number((inputCost + outputCost).toFixed(6));
+    }
+}
+//# sourceMappingURL=model-caller.js.map

package/dist/kernel/model-caller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-caller.js","sourceRoot":"","sources":["../../src/kernel/model-caller.ts"],"names":[],"mappings":"AAsBA,SAAS,MAAM,CAAC,KAAY,EAAE,OAAe,EAAE,IAE9C;IACC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxH,CAAC;AAED,SAAS,MAAM,CAAC,KAAY,EAAE,OAAe,EAAE,IAE9C;IACC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrH,CAAC;AAED,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,6DAA6D;IAC7D,eAAe,CAAC,KAAoB;QAClC,IAAI,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IACjC,CAAC;IAED,+EAA+E;IAC/E,iBAAiB,CAAC,OAA0F;QAC1G,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QAC7E,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC5F,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9F,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAChC,CAAC;IAED,iBAAiB,CAAC,KAAsC,EAAE,KAAa;QACrE,MAAM,SAAS,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC;QACxC,IAAI,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,KAAK;oBAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACrD,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QACD,IAAI,KAAK;YAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAChC,CAAC;IAED,cAAc,CAAC,KAAY;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,QAAuB,EACvB,IAAY,EACZ,KAAY,EACZ,GAAmB,EACnB,MAAmB,EACnB,cAAuB,EACvB,YAAsB;QAEtB,MAAM,cAAc,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzE,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3F,IAAI,OAAO,GAAiB;YAC1B,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YACjF,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;QAEF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,cAAc,EAAE;YAC/E,OAAO,EAAE,OAA6C;SACvD,CAAC,CAAC;QACH,IAAI,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACxC,OAAO,GAAG,gBAAgB,CAAC,QAAQ,CAAC,OAAkC,CAAC;QACzE,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,IAAI,SAAS,CAAC;QAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,IAAI,cAAc,EAAE,CAAC;YACnB,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,WAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YAClF,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAA+C,CAAC,CAAC;QAC9I,CAAC;QAED,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,SAAS,GAAkD,EAAE,CAAC;QAEpE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,GAAoB,KAAK,CAAC;YACpC,IAAI,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;gBACzE,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBACpC,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC;YACxC,CAAC;iBAAM,IAAI,cAAc,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjD,IAAI,GAAG,CAAC,KAAK,EAAE,WAAW;oBAAE,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;gBAChE,YAAY,GAAG,QAAQ,CAAC;gBACxB,MAAM,GAAG,QAAQ,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAA+C,CAAC,CAAC;YACjJ,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAA+C,CAAC,CAAC;YAC7K,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;gBACzB,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,KAAK,WAAW,QAAQ,YAAY,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACjK,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YACxD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,MAAM;oBACT,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC;oBACzB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACxB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB;wBACtD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;wBAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;qBAC9B,EAAE,KAAK,CAAC,CAAC;oBACnB,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC7F,MAAM;gBACR,KAAK,WAAW;oBACd,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;oBACrE,MAAM;gBACR,KAAK,OAAO;oBACV,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;oBAChC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;oBAClC,MAAM;gBACR,KAAK,MAAM;oBACT,MAAM;gBACR,KAAK,OAAO;oBACV,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,IAAI,MAAM,GAAoB,KAAK,CAAC;QACpC,IAAI,YAAY,KAAK,CAAC,IAAI,cAAc,IAAI,OAAO,EAAE,CAAC;YACpD,YAAY,GAAG,KAAK,CAAC,WAAY,CAAC,OAAO,CAAC,CAAC;YAC3C,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;QACD,IAAI,WAAW,GAAG,CAAC,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,CAA+C,CAAC,CAAC;QACnJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,CAA+C,CAAC,CAAC;QAC7K,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,KAAK,WAAW,QAAQ,YAAY,UAAU,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjK,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,IAAY,EACZ,KAAY,EACZ,GAAmB,EACnB,MAAmB;QAEnB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACxB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB;YACxD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;YAC1D,IAAI,EAAE,EAAE,IAAI,EAAE;SACN,CAAC,CAAC;QAEZ,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAE9C,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,UAAU,CAAC,MAAM,CACzC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EACtG,MAAM,CACP,EAAE,CAAC;gBACF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC1B,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC;oBAC1B,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACxB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB;wBACxD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;wBAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;qBAC9B,EAAE,KAAK,CAAC,CAAC;gBACrB,CAAC;qBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAClC,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,QAAQ,CACnC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAClI,MAAM,CACP,CAAC;gBACF,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC;gBACvB,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;wBACxB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB;wBACxD,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;wBAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;qBACzB,EAAE,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,kCAAkC,QAAQ,CAAC,IAAI,EAAE,EAAE;aAC7D,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACxB,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB;YAC1D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO;YAC1D,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;SACzB,CAAC,CAAC;IACd,CAAC;IAED,aAAa,CAAC,WAAmB,EAAE,YAAoB,EAAE,KAAqB;QAC5E,MAAM,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACzB,MAAM,SAAS,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QACtD,MAAM,UAAU,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;QACzD,OAAO,MAAM,CAAC,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,CAAC;CACF"}

package/dist/kernel/permission-gate.d.ts

@@ -0,0 +1,74 @@
+import type { RunId, AgentConfig } from "@vinhnt-sdk/schema";
+import type { ToolRisk } from "../tool/definitions.js";
+import type { PermissionReply } from "../tool/context.js";
+import type { PluginManager } from "../plugin.js";
+import type { ApprovalStore } from "../permission/saved.js";
+import type { RunEventStore } from "../session/store.js";
+import type { EventBus } from "../event-bus/types.js";
+export type ApprovalDecision = "allow" | "deny" | "approval_required";
+export interface DynamicRule {
+    toolName: string;
+    pattern: string;
+    decision: "allow" | "deny";
+}
+export interface PermissionCheckResult {
+    allowed: boolean;
+    reason?: string;
+    needsApproval?: boolean;
+}
+export interface PermissionGateDeps {
+    readonly store: RunEventStore;
+    readonly eventBus?: EventBus;
+    readonly pluginManager: PluginManager | undefined;
+    readonly approvalStore: ApprovalStore | undefined;
+    readonly autoApprovalEnabled?: boolean | undefined;
+}
+export declare class PermissionGate {
+    private readonly deps;
+    private globalPermissionRules?;
+    private dynamicRules;
+    private riskOverrides?;
+    private topLevelRules;
+    private autoApproval;
+    constructor(deps: PermissionGateDeps);
+    /** Toggle auto-approval at runtime (mirrors config.autoApprovalEnabled). */
+    setAutoApprovalEnabled(enabled: boolean): void;
+    /** Parse and apply config-level permission rules (OpenCode-style nested `{ tool: "allow|deny|ask" }`). */
+    setGlobalRules(configRules: Record<string, string | Record<string, string>>): void;
+    /**
+     * Apply top-level `allow`/`deny`/`ask` pattern lists (OpenCode-style
+     * `"ToolName(glob)"` strings). These take precedence over risk defaults and
+     * agent-level allowed/denied tool lists.
+     */
+    setTopLevelRules(rules: Record<"allow" | "deny" | "ask", string[]>): void;
+    /** Register a user-approved dynamic rule (last-match-wins over risk defaults). */
+    addDynamicRule(rule: DynamicRule): void;
+    /** Override risk-level defaults (read→allow, write→approval, destructive→deny). */
+    setRiskOverrides(overrides?: Partial<Record<ToolRisk, ApprovalDecision>>): void;
+    /**
+     * Evaluate whether a tool call is allowed.
+     * 4-phase gate: global rules → agent permissions → dynamic rules → risk defaults.
+     * Returns { allowed, reason, needsApproval }.
+     */
+    checkTool(name: string, risk: ToolRisk, args?: Record<string, unknown>, agent?: AgentConfig): PermissionCheckResult;
+    /** Check whether combined token count stays within agent's maxTokens limit. */
+    checkMaxTokens(inputTokens: number, outputTokens: number, agent?: AgentConfig): boolean;
+    /** Check whether step count is within agent's maxSteps limit. */
+    checkMaxSteps(step: number, agent?: AgentConfig): boolean;
+    /**
+     * Ask the user to approve a tool call.
+     * Routes through ApprovalStore and plugin hooks.
+     * Returns "once", "always", or "reject".
+     */
+    askForTool(toolName: string, _toolId: string, runId: RunId, _sessionId: string, reason: string, _agentId: string, traceId: string, pluginManager?: PluginManager): Promise<PermissionReply>;
+    private askViaApprovalStore;
+    /** Check whether a previously saved approval exists for this tool+agent. Returns false if a rejection exists. */
+    checkSavedApproval(toolName: string, agentId?: string): boolean;
+    /** Return all registered dynamic rules (saved allow/deny policies). */
+    getDynamicRules(): readonly DynamicRule[];
+    /** Persist a saved approval so future calls skip the ask dialog. */
+    saveApproval(toolName: string, agentId?: string): void;
+    /** Persist a saved rejection so future calls are auto-denied. */
+    saveRejection(toolName: string, agentId?: string): void;
+}
+//# sourceMappingURL=permission-gate.d.ts.map

package/dist/kernel/permission-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.d.ts","sourceRoot":"","sources":["../../src/kernel/permission-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAa,WAAW,EAA0C,MAAM,oBAAoB,CAAC;AAChH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAOtD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,GAAG,mBAAmB,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACpD;AA+BD,qBAAa,cAAc;IAOb,OAAO,CAAC,QAAQ,CAAC,IAAI;IANjC,OAAO,CAAC,qBAAqB,CAAC,CAAc;IAC5C,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,aAAa,CAAC,CAA8C;IACpE,OAAO,CAAC,aAAa,CAAmF;IACxG,OAAO,CAAC,YAAY,CAAU;gBAED,IAAI,EAAE,kBAAkB;IAIrD,4EAA4E;IAC5E,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI9C,0GAA0G;IAC1G,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI;IASlF;;;;OAIG;IACH,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI;IAYzE,kFAAkF;IAClF,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAIvC,mFAAmF;IACnF,gBAAgB,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,GAAG,IAAI;IAI/E;;;;OAIG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,qBAAqB;IAmEnH,+EAA+E;IAC/E,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO;IAMvF,iEAAiE;IACjE,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,WAAW,GAAG,OAAO;IAMzD;;;;OAIG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,EACZ,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAC5B,OAAO,CAAC,eAAe,CAAC;YAMb,mBAAmB;IA0DjC,iHAAiH;IACjH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO;IAO/D,uEAAuE;IACvE,eAAe,IAAI,SAAS,WAAW,EAAE;IAIzC,oEAAoE;IACpE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;IAQtD,iEAAiE;IACjE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI;CAKxD"}

package/dist/kernel/permission-gate.js

@@ -0,0 +1,258 @@
+import { evaluatePermission, checkRiskAllowed } from "../permission/checker.js";
+import { wildcardMatch } from "@vinhnt-sdk/schema";
+import { buildPermissionRules } from "../permission/evaluator.js";
+import { commandPattern } from "../tool/arity.js";
+import { PermissionRequested, PermissionReplied } from "@vinhnt-sdk/schema";
+const RISK_DECISIONS = {
+    read: "allow",
+    write: "approval_required",
+    destructive: "deny",
+    external: "approval_required",
+};
+function extractContextPattern(toolName, args) {
+    if (!args || typeof args !== "object")
+        return "*";
+    if (toolName === "execute_command" || toolName === "bash") {
+        const cmd = args.command;
+        if (typeof cmd === "string" && cmd.trim())
+            return commandPattern(cmd);
+    }
+    const path = args.filePath ?? args.path;
+    if (typeof path === "string" && path.trim())
+        return path;
+    return "*";
+}
+/** Split a `Tool(glob)` permission-pattern string into its parts. Returns null if malformed. */
+function parseToolPattern(expr) {
+    const m = /^\s*([A-Za-z0-9_.\-]+)\s*\(\s*(.*?)\s*\)\s*$/.exec(expr);
+    if (!m) {
+        const bare = expr.trim();
+        if (!bare)
+            return null;
+        return { toolName: bare, pattern: "*" };
+    }
+    return { toolName: m[1], pattern: m[2] || "*" };
+}
+export class PermissionGate {
+    deps;
+    globalPermissionRules;
+    dynamicRules = [];
+    riskOverrides;
+    topLevelRules = [];
+    autoApproval;
+    constructor(deps) {
+        this.deps = deps;
+        this.autoApproval = deps.autoApprovalEnabled ?? false;
+    }
+    /** Toggle auto-approval at runtime (mirrors config.autoApprovalEnabled). */
+    setAutoApprovalEnabled(enabled) {
+        this.autoApproval = enabled;
+    }
+    /** Parse and apply config-level permission rules (OpenCode-style nested `{ tool: "allow|deny|ask" }`). */
+    setGlobalRules(configRules) {
+        const raw = buildPermissionRules(configRules);
+        this.globalPermissionRules = raw.map((r) => ({
+            effect: r.effect,
+            target: r.action,
+            ...(r.resource !== "*" ? { paramPattern: r.resource } : {}),
+        }));
+    }
+    /**
+     * Apply top-level `allow`/`deny`/`ask` pattern lists (OpenCode-style
+     * `"ToolName(glob)"` strings). These take precedence over risk defaults and
+     * agent-level allowed/denied tool lists.
+     */
+    setTopLevelRules(rules) {
+        const parsed = [];
+        for (const decision of ["allow", "deny", "ask"]) {
+            for (const expr of rules[decision] ?? []) {
+                if (typeof expr !== "string")
+                    continue;
+                const parts = parseToolPattern(expr);
+                if (parts)
+                    parsed.push({ ...parts, decision });
+            }
+        }
+        this.topLevelRules = parsed;
+    }
+    /** Register a user-approved dynamic rule (last-match-wins over risk defaults). */
+    addDynamicRule(rule) {
+        this.dynamicRules.push(rule);
+    }
+    /** Override risk-level defaults (read→allow, write→approval, destructive→deny). */
+    setRiskOverrides(overrides) {
+        this.riskOverrides = overrides;
+    }
+    /**
+     * Evaluate whether a tool call is allowed.
+     * 4-phase gate: global rules → agent permissions → dynamic rules → risk defaults.
+     * Returns { allowed, reason, needsApproval }.
+     */
+    checkTool(name, risk, args, agent) {
+        // Phase 1: Global config-level rules (OpenCode-style nested patterns)
+        if (this.globalPermissionRules && this.globalPermissionRules.length > 0) {
+            const globalResult = evaluatePermission({ rules: this.globalPermissionRules }, `tool.${name}`, args);
+            if (globalResult.decision === "deny")
+                return { allowed: false, reason: globalResult.reason };
+            if (globalResult.decision === "ask")
+                return { allowed: false, reason: globalResult.reason, needsApproval: true };
+        }
+        // Phase 1.5: Top-level allow/deny/ask pattern lists ("Tool(glob)")
+        if (this.topLevelRules.length > 0) {
+            const pattern = extractContextPattern(name, args);
+            let matched;
+            for (const rule of this.topLevelRules) {
+                if (rule.toolName === name && wildcardMatch(rule.pattern, pattern)) {
+                    matched = rule; // last-match-wins
+                }
+            }
+            if (matched) {
+                if (matched.decision === "deny")
+                    return { allowed: false, reason: `Tool "${name}" is denied` };
+                if (matched.decision === "ask")
+                    return { allowed: false, reason: `Tool "${name}" requires approval`, needsApproval: true };
+                return { allowed: true, reason: "Allowed by configured rule" };
+            }
+        }
+        // Phase 2: Agent-specific permissions
+        const perms = agent?.permissions;
+        if (perms) {
+            if (perms.ruleset) {
+                const result = evaluatePermission(perms.ruleset, `tool.${name}`, args);
+                if (result.decision === "deny")
+                    return { allowed: false, reason: result.reason };
+                if (result.decision === "ask")
+                    return { allowed: false, reason: result.reason, needsApproval: true };
+                if (perms.ruleset.allowedRisks && !checkRiskAllowed(perms.ruleset, risk)) {
+                    return { allowed: false, reason: `Tool "${name}" has risk "${risk}" which exceeds agent's allowed risks` };
+                }
+                return { allowed: true };
+            }
+            if (perms.deniedTools?.some((p) => wildcardMatch(p, name))) {
+                return { allowed: false, reason: `Tool "${name}" is denied for this agent` };
+            }
+            if (perms.allowedTools && !perms.allowedTools.some((p) => wildcardMatch(p, name))) {
+                return { allowed: false, reason: `Tool "${name}" is not in the allowed tools list` };
+            }
+            if (perms.allowedRisks && !perms.allowedRisks.includes(risk)) {
+                return { allowed: false, reason: `Tool "${name}" has risk "${risk}" which exceeds agent's allowed risks` };
+            }
+        }
+        // Phase 3: Dynamic rules (last-match-wins, same as ToolPolicy)
+        if (this.dynamicRules.length > 0) {
+            const pattern = extractContextPattern(name, args);
+            for (let i = this.dynamicRules.length - 1; i >= 0; i--) {
+                const rule = this.dynamicRules[i];
+                if (rule.toolName === name && wildcardMatch(rule.pattern, pattern)) {
+                    if (rule.decision === "deny")
+                        return { allowed: false, reason: `Tool "${name}" denied by dynamic rule` };
+                    return { allowed: true };
+                }
+            }
+        }
+        // Phase 4: Risk-based default fallback (merged from ToolPolicy)
+        const decision = this.riskOverrides?.[risk] ?? RISK_DECISIONS[risk];
+        if (decision === "deny")
+            return { allowed: false, reason: `Tool "${name}" (risk: ${risk}) is denied` };
+        if (decision === "approval_required")
+            return { allowed: false, needsApproval: true, reason: `Tool "${name}" (risk: ${risk}) requires approval` };
+        return { allowed: true };
+    }
+    /** Check whether combined token count stays within agent's maxTokens limit. */
+    checkMaxTokens(inputTokens, outputTokens, agent) {
+        const perms = agent?.permissions;
+        if (!perms?.maxTokens)
+            return true;
+        return (inputTokens + outputTokens) <= perms.maxTokens;
+    }
+    /** Check whether step count is within agent's maxSteps limit. */
+    checkMaxSteps(step, agent) {
+        const perms = agent?.permissions;
+        if (!perms?.maxSteps)
+            return true;
+        return step < perms.maxSteps;
+    }
+    /**
+     * Ask the user to approve a tool call.
+     * Routes through ApprovalStore and plugin hooks.
+     * Returns "once", "always", or "reject".
+     */
+    async askForTool(toolName, _toolId, runId, _sessionId, reason, _agentId, traceId, pluginManager) {
+        if (this.autoApproval)
+            return "once";
+        return this.askViaApprovalStore(toolName, runId, reason, traceId, pluginManager);
+    }
+    async askViaApprovalStore(toolName, runId, reason, traceId, pluginManager) {
+        const requestId = crypto.randomUUID();
+        const req = {
+            id: requestId,
+            runId,
+            toolName,
+            resource: toolName,
+            reason,
+            prompt: reason,
+            occurredAt: new Date().toISOString(),
+        };
+        // Persist permission.requested to store (sync for tests) AND publish to bus
+        await this.deps.store.append({
+            id: crypto.randomUUID(), runId, type: "permission.requested",
+            occurredAt: new Date().toISOString(), traceId,
+            data: { requestId, toolName, resource: toolName, reason, prompt: reason },
+        });
+        if (this.deps.eventBus) {
+            this.deps.eventBus.publish(PermissionRequested, {
+                requestId, toolName, resource: toolName, reason, prompt: reason
+            }, { traceId, aggregateId: runId });
+        }
+        let reply = "reject";
+        const hookResult = await pluginManager?.fireHook("onPermissionAsk", {
+            permission: `tool.${toolName}`,
+            resource: toolName,
+            reason,
+        });
+        if (hookResult?.modified?.reply) {
+            reply = hookResult.modified.reply;
+        }
+        else if (this.deps.approvalStore) {
+            reply = await this.deps.approvalStore.awaitReply(req);
+        }
+        // Persist permission.replied to store (sync for tests) AND publish to bus
+        await this.deps.store.append({
+            id: crypto.randomUUID(), runId, type: "permission.replied",
+            occurredAt: new Date().toISOString(), traceId,
+            data: { requestId, reply },
+        });
+        if (this.deps.eventBus) {
+            this.deps.eventBus.publish(PermissionReplied, {
+                requestId, reply
+            }, { traceId, aggregateId: runId });
+        }
+        return reply;
+    }
+    /** Check whether a previously saved approval exists for this tool+agent. Returns false if a rejection exists. */
+    checkSavedApproval(toolName, agentId) {
+        const store = this.deps.approvalStore;
+        if (!store)
+            return false;
+        if (store.checkRejection(`tool.${toolName}`, toolName, agentId))
+            return false;
+        return store.checkApproval(`tool.${toolName}`, toolName, agentId);
+    }
+    /** Return all registered dynamic rules (saved allow/deny policies). */
+    getDynamicRules() {
+        return [...this.dynamicRules];
+    }
+    /** Persist a saved approval so future calls skip the ask dialog. */
+    saveApproval(toolName, agentId) {
+        this.deps.approvalStore?.saveApproval({
+            resource: `tool.${toolName}`,
+            action: toolName,
+            ...(agentId ? { agentId } : {}),
+        });
+    }
+    /** Persist a saved rejection so future calls are auto-denied. */
+    saveRejection(toolName, agentId) {
+        this.deps.approvalStore?.saveRejection(`tool.${toolName}`, toolName, agentId);
+    }
+}
+//# sourceMappingURL=permission-gate.js.map

package/dist/kernel/permission-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permission-gate.js","sourceRoot":"","sources":["../../src/kernel/permission-gate.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAwB5E,MAAM,cAAc,GAAuC;IACzD,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,mBAAmB;IAC1B,WAAW,EAAE,MAAM;IACnB,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AAEF,SAAS,qBAAqB,CAAC,QAAgB,EAAE,IAA8B;IAC7E,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAClD,IAAI,QAAQ,KAAK,iBAAiB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,CAAC,GAAG,8CAA8C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,OAAO,cAAc;IAOI;IANrB,qBAAqB,CAAe;IACpC,YAAY,GAAkB,EAAE,CAAC;IACjC,aAAa,CAA+C;IAC5D,aAAa,GAAgF,EAAE,CAAC;IAChG,YAAY,CAAU;IAE9B,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACnD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,mBAAmB,IAAI,KAAK,CAAC;IACxD,CAAC;IAED,4EAA4E;IAC5E,sBAAsB,CAAC,OAAgB;QACrC,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;IAC9B,CAAC;IAED,0GAA0G;IAC1G,cAAc,CAAC,WAA4D;QACzE,MAAM,GAAG,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,qBAAqB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC;YAC3D,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAgB,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,gBAAgB,CAAC,KAAiD;QAChE,MAAM,MAAM,GAAgF,EAAE,CAAC;QAC/F,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAU,EAAE,CAAC;YACzD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,KAAK;oBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IAED,kFAAkF;IAClF,cAAc,CAAC,IAAiB;QAC9B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,mFAAmF;IACnF,gBAAgB,CAAC,SAAuD;QACtE,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,IAAY,EAAE,IAAc,EAAE,IAA8B,EAAE,KAAmB;QACzF,sEAAsE;QACtE,IAAI,IAAI,CAAC,qBAAqB,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,EAAE,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YACrG,IAAI,YAAY,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7F,IAAI,YAAY,CAAC,QAAQ,KAAK,KAAK;gBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACnH,CAAC;QAED,mEAAmE;QACnE,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,IAAI,OAA8F,CAAC;YACnG,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACnE,OAAO,GAAG,IAAI,CAAC,CAAC,kBAAkB;gBACpC,CAAC;YACH,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,aAAa,EAAE,CAAC;gBAC/F,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,qBAAqB,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBAC3H,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;YACjE,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;gBACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjF,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK;oBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;gBACrG,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,eAAe,IAAI,uCAAuC,EAAE,CAAC;gBAC7G,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,4BAA4B,EAAE,CAAC;YAC/E,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,oCAAoC,EAAE,CAAC;YACvF,CAAC;YACD,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,eAAe,IAAI,uCAAuC,EAAE,CAAC;YAC7G,CAAC;QACH,CAAC;QAED,+DAA+D;QAC/D,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvD,MAAM,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;oBACnE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;wBAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,0BAA0B,EAAE,CAAC;oBACzG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC;QACpE,IAAI,QAAQ,KAAK,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,IAAI,YAAY,IAAI,aAAa,EAAE,CAAC;QACvG,IAAI,QAAQ,KAAK,mBAAmB;YAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,IAAI,YAAY,IAAI,qBAAqB,EAAE,CAAC;QACjJ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,+EAA+E;IAC/E,cAAc,CAAC,WAAmB,EAAE,YAAoB,EAAE,KAAmB;QAC3E,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,CAAC,WAAW,GAAG,YAAY,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC;IACzD,CAAC;IAED,iEAAiE;IACjE,aAAa,CAAC,IAAY,EAAE,KAAmB;QAC7C,MAAM,KAAK,GAAG,KAAK,EAAE,WAAW,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,OAAe,EACf,KAAY,EACZ,UAAkB,EAClB,MAAc,EACd,QAAgB,EAChB,OAAe,EACf,aAA6B;QAE7B,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC;QAErC,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,QAAgB,EAChB,KAAY,EACZ,MAAc,EACd,OAAe,EACf,aAA6B;QAE7B,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAe,CAAC;QACnD,MAAM,GAAG,GAAsB;YAC7B,EAAE,EAAE,SAAS;YACb,KAAK;YACL,QAAQ;YACR,QAAQ,EAAE,QAAQ;YAClB,MAAM;YACN,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC;QAEF,4EAA4E;QAC5E,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB;YAC5D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO;YAC7C,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SAC9D,CAAC,CAAC;QAEf,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE;gBAC9C,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;aAChE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,KAAK,GAAoB,QAAQ,CAAC;QACtC,MAAM,UAAU,GAAG,MAAM,aAAa,EAAE,QAAQ,CAAC,iBAAiB,EAAE;YAClE,UAAU,EAAE,QAAQ,QAAQ,EAAE;YAC9B,QAAQ,EAAE,QAAQ;YAClB,MAAM;SACP,CAAC,CAAC;QACH,IAAI,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YAChC,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,KAAwB,CAAC;QACvD,CAAC;aAAM,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnC,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;QAED,0EAA0E;QAC1E,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB;YAC1D,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,OAAO;YAC7C,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SACf,CAAC,CAAC;QAEf,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE;gBAC5C,SAAS,EAAE,KAAK;aACjB,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iHAAiH;IACjH,kBAAkB,CAAC,QAAgB,EAAE,OAAgB;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,KAAK,CAAC,cAAc,CAAC,QAAQ,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9E,OAAO,KAAK,CAAC,aAAa,CAAC,QAAQ,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,uEAAuE;IACvE,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;IAED,oEAAoE;IACpE,YAAY,CAAC,QAAgB,EAAE,OAAgB;QAC7C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC;YACpC,QAAQ,EAAE,QAAQ,QAAQ,EAAE;YAC5B,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,aAAa,CAAC,QAAgB,EAAE,OAAgB;QAC9C,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CACpC,QAAQ,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,CACtC,CAAC;IACJ,CAAC;CACF"}

package/dist/kernel/run-loop.d.ts

@@ -0,0 +1,69 @@
+import type { RequestContext, RunId, AgentConfig } from "@vinhnt-sdk/schema";
+import type { ModelProvider } from "../model.js";
+import type { ContextRegistry } from "../system-context/types.js";
+import type { ConversationCompactor } from "../session/compaction.js";
+import type { RunEventStore, SessionStore } from "../session/store.js";
+import type { PluginManager } from "../plugin.js";
+import type { SessionRuntimeState } from "../session/session-state.js";
+import type { ModelCaller } from "./model-caller.js";
+import type { PermissionGate } from "./permission-gate.js";
+import type { StepExecutor } from "./step-executor.js";
+import type { ToolSaga } from "./tool-saga.js";
+import type { CircuitBreaker } from "./circuit-breaker.js";
+import type { RunStateMachine } from "./run-state.js";
+import type { TerminationPolicy } from "./termination.js";
+export interface RunLoopDeps {
+    readonly modelCaller: ModelCaller;
+    readonly permissionGate: PermissionGate;
+    readonly stepExecutor: StepExecutor;
+    readonly saga: ToolSaga;
+    readonly store: RunEventStore;
+    readonly circuitBreaker: CircuitBreaker;
+    readonly stateMachine: RunStateMachine;
+    readonly pluginManager?: PluginManager;
+    readonly systemContext?: ContextRegistry;
+    readonly compactor?: ConversationCompactor;
+    readonly sessionStore?: SessionStore;
+    readonly sessionTitleGenerator?: (prompt: string) => Promise<string>;
+    readonly addSessionMessage: (sid: string | undefined, role: string, content: string, extra?: Record<string, unknown>) => Promise<void>;
+    readonly maxSteps: number;
+    readonly maxTokens: number;
+    readonly thinkingBudget: number;
+    readonly stepTimeout: number;
+    readonly compactionThreshold?: number;
+    readonly currentAgent?: AgentConfig;
+    readonly termination?: TerminationPolicy;
+    /** Optional judge model for `llm-judge` stop conditions (defaults to the active run model). */
+    readonly judgeModel?: ModelProvider;
+}
+export interface RunLoopInput {
+    prompt: string;
+    runId: RunId;
+    ctx: RequestContext;
+    runAbort: AbortController;
+    sessionId?: string;
+    userContentParts?: readonly {
+        type: string;
+        text?: string;
+        image?: string;
+        mimeType?: string;
+    }[];
+    runModel: ModelProvider;
+    runSessionState?: SessionRuntimeState;
+    addSessionMessage: (sid: string | undefined, role: string, content: string, extra?: Record<string, unknown>) => Promise<void>;
+    emitEvent: (event: {
+        id: string;
+        runId: RunId;
+        type: string;
+        occurredAt: string;
+        traceId: string;
+        data: Record<string, unknown>;
+    }, persist?: boolean) => Promise<void>;
+    setState: (runId: RunId, state: string) => void;
+    updateSessionOnComplete: (sessionId: string | undefined, runId: RunId, totalInputTokens: number, totalOutputTokens: number, totalSteps: number, status: string) => Promise<void>;
+    emitFail: (runId: RunId, ctx: RequestContext, reason: string, steps: number, sessionId?: string, totalInputTokens?: number, totalOutputTokens?: number, durationMs?: number) => Promise<void>;
+    /** If true, resuming from durable storage — skip run.started event and user prompt injection. */
+    resume?: boolean;
+}
+export declare function runLoop(deps: RunLoopDeps, input: RunLoopInput): Promise<void>;
+//# sourceMappingURL=run-loop.d.ts.map

package/dist/kernel/run-loop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-loop.d.ts","sourceRoot":"","sources":["../../src/kernel/run-loop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAmC,aAAa,EAAiB,MAAM,aAAa,CAAC;AACjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAEvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,cAAc,EAA2B,MAAM,sBAAsB,CAAC;AACpF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAGtD,OAAO,KAAK,EAA0C,iBAAiB,EAAmB,MAAM,kBAAkB,CAAC;AAEnH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,eAAe,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACrE,QAAQ,CAAC,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvI,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC,+FAA+F;IAC/F,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;CACrC;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,CAAC;IACb,GAAG,EAAE,cAAc,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjG,QAAQ,EAAE,aAAa,CAAC;IACxB,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,iBAAiB,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9H,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvK,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAChD,uBAAuB,EAAE,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjL,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9L,iGAAiG;IACjG,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAmSD,wBAAsB,OAAO,CAC3B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,IAAI,CAAC,CA+Rf"}