@warlock.js/ai 4.8.2 → 4.9.1

package/esm/security/private-ip.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"private-ip.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/security/private-ip.ts"],"mappings":";;AAYA;;;;AAAgD;;;;;iBAAhC,qBAAA,CAAsB,EAAU"}
+{"version":3,"file":"private-ip.d.mts","names":[],"sources":["../../../../../../../ai/src/security/private-ip.ts"],"mappings":";;AAYA;;;;AAAgD;;;;;iBAAhC,qBAAA,CAAsB,EAAU"}

package/esm/security/private-ip.mjs

@@ -1,6 +1,6 @@
 import { isIP } from "node:net";
 
-//#region ../@warlock.js/ai/src/security/private-ip.ts
+//#region ../ai/src/security/private-ip.ts
 /**
 * True when `ip` is a private, loopback, link-local, unique-local,
 * carrier-grade-NAT, unspecified, or otherwise non-public address — the

package/esm/security/private-ip.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"private-ip.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/security/private-ip.ts"],"sourcesContent":["import { isIP } from \"node:net\";\n\n/**\n * True when `ip` is a private, loopback, link-local, unique-local,\n * carrier-grade-NAT, unspecified, or otherwise non-public address — the\n * set an SSRF guard must refuse. Accepts IPv4 and IPv6 literals (including\n * IPv4-mapped IPv6 like `::ffff:169.254.169.254`). A non-IP string returns\n * `false` (the caller resolves hostnames via DNS first).\n *\n * The cloud-metadata endpoint `169.254.169.254` is covered by the IPv4\n * link-local range `169.254.0.0/16`.\n */\nexport function isPrivateOrReservedIp(ip: string): boolean {\n  const family = isIP(ip);\n  if (family === 4) return isPrivateIpv4(ip);\n  if (family === 6) return isPrivateIpv6(ip);\n  return false;\n}\n\n/** Parse a dotted-quad into four octets, or `null` if malformed. */\nfunction parseIpv4(ip: string): [number, number, number, number] | null {\n  const parts = ip.split(\".\");\n  if (parts.length !== 4) return null;\n\n  const octets = parts.map(part => Number(part));\n  if (octets.some(n => !Number.isInteger(n) || n < 0 || n > 255)) return null;\n\n  return octets as [number, number, number, number];\n}\n\nfunction isPrivateIpv4(ip: string): boolean {\n  const octets = parseIpv4(ip);\n  if (!octets) return true; // unparseable → refuse, fail closed\n\n  const [a, b] = octets;\n\n  return (\n    a === 0 || // 0.0.0.0/8 \"this network\"\n    a === 10 || // 10.0.0.0/8 private\n    a === 127 || // 127.0.0.0/8 loopback\n    (a === 100 && b >= 64 && b <= 127) || // 100.64.0.0/10 CGNAT\n    (a === 169 && b === 254) || // 169.254.0.0/16 link-local + metadata\n    (a === 172 && b >= 16 && b <= 31) || // 172.16.0.0/12 private\n    (a === 192 && b === 168) || // 192.168.0.0/16 private\n    (a === 192 && b === 0) || // 192.0.0.0/24 + 192.0.2.0/24 (IETF/test)\n    (a === 198 && (b === 18 || b === 19)) || // 198.18.0.0/15 benchmarking\n    (a === 198 && b === 51) || // 198.51.100.0/24 test-net-2\n    (a === 203 && b === 0) || // 203.0.113.0/24 test-net-3\n    a >= 224 // 224.0.0.0/4 multicast + 240.0.0.0/4 reserved + 255.255.255.255\n  );\n}\n\nfunction isPrivateIpv6(ip: string): boolean {\n  const normalized = ip.toLowerCase().split(\"%\")[0]; // drop zone id\n\n  // IPv4-mapped / -embedded (::ffff:a.b.c.d, ::a.b.c.d) — defer to the v4\n  // check on the trailing dotted-quad so an inward-mapped address is caught.\n  const v4 = normalized.match(/(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/);\n  if (v4) {\n    return isPrivateIpv4(v4[1]);\n  }\n\n  if (normalized === \"::1\" || normalized === \"::\") {\n    return true; // loopback / unspecified\n  }\n\n  // Expand only the leading group enough to classify the reserved blocks.\n  const firstGroup = normalized.split(\":\")[0];\n  const head = firstGroup === \"\" ? 0 : Number.parseInt(firstGroup, 16);\n\n  // fc00::/7 unique-local (fc.. / fd..)\n  if ((head & 0xfe00) === 0xfc00) return true;\n  // fe80::/10 link-local\n  if ((head & 0xffc0) === 0xfe80) return true;\n\n  return false;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,sBAAsB,IAAqB;CACzD,MAAM,SAAS,KAAK,EAAE;CACtB,IAAI,WAAW,GAAG,OAAO,cAAc,EAAE;CACzC,IAAI,WAAW,GAAG,OAAO,cAAc,EAAE;CACzC,OAAO;AACT;;AAGA,SAAS,UAAU,IAAqD;CACtE,MAAM,QAAQ,GAAG,MAAM,GAAG;CAC1B,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,MAAM,SAAS,MAAM,KAAI,SAAQ,OAAO,IAAI,CAAC;CAC7C,IAAI,OAAO,MAAK,MAAK,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;CAEvE,OAAO;AACT;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,SAAS,UAAU,EAAE;CAC3B,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,CAAC,GAAG,KAAK;CAEf,OACE,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,OAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,MAAM,KACnB,MAAM,QAAQ,MAAM,MAAM,MAAM,OAChC,MAAM,OAAO,MAAM,MACnB,MAAM,OAAO,MAAM,KACpB,KAAK;AAET;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;CAI/C,MAAM,KAAK,WAAW,MAAM,uCAAuC;CACnE,IAAI,IACF,OAAO,cAAc,GAAG,EAAE;CAG5B,IAAI,eAAe,SAAS,eAAe,MACzC,OAAO;CAIT,MAAM,aAAa,WAAW,MAAM,GAAG,CAAC,CAAC;CACzC,MAAM,OAAO,eAAe,KAAK,IAAI,OAAO,SAAS,YAAY,EAAE;CAGnE,KAAK,OAAO,WAAY,OAAQ,OAAO;CAEvC,KAAK,OAAO,WAAY,OAAQ,OAAO;CAEvC,OAAO;AACT"}
+{"version":3,"file":"private-ip.mjs","names":[],"sources":["../../../../../../../ai/src/security/private-ip.ts"],"sourcesContent":["import { isIP } from \"node:net\";\n\n/**\n * True when `ip` is a private, loopback, link-local, unique-local,\n * carrier-grade-NAT, unspecified, or otherwise non-public address — the\n * set an SSRF guard must refuse. Accepts IPv4 and IPv6 literals (including\n * IPv4-mapped IPv6 like `::ffff:169.254.169.254`). A non-IP string returns\n * `false` (the caller resolves hostnames via DNS first).\n *\n * The cloud-metadata endpoint `169.254.169.254` is covered by the IPv4\n * link-local range `169.254.0.0/16`.\n */\nexport function isPrivateOrReservedIp(ip: string): boolean {\n  const family = isIP(ip);\n  if (family === 4) return isPrivateIpv4(ip);\n  if (family === 6) return isPrivateIpv6(ip);\n  return false;\n}\n\n/** Parse a dotted-quad into four octets, or `null` if malformed. */\nfunction parseIpv4(ip: string): [number, number, number, number] | null {\n  const parts = ip.split(\".\");\n  if (parts.length !== 4) return null;\n\n  const octets = parts.map(part => Number(part));\n  if (octets.some(n => !Number.isInteger(n) || n < 0 || n > 255)) return null;\n\n  return octets as [number, number, number, number];\n}\n\nfunction isPrivateIpv4(ip: string): boolean {\n  const octets = parseIpv4(ip);\n  if (!octets) return true; // unparseable → refuse, fail closed\n\n  const [a, b] = octets;\n\n  return (\n    a === 0 || // 0.0.0.0/8 \"this network\"\n    a === 10 || // 10.0.0.0/8 private\n    a === 127 || // 127.0.0.0/8 loopback\n    (a === 100 && b >= 64 && b <= 127) || // 100.64.0.0/10 CGNAT\n    (a === 169 && b === 254) || // 169.254.0.0/16 link-local + metadata\n    (a === 172 && b >= 16 && b <= 31) || // 172.16.0.0/12 private\n    (a === 192 && b === 168) || // 192.168.0.0/16 private\n    (a === 192 && b === 0) || // 192.0.0.0/24 + 192.0.2.0/24 (IETF/test)\n    (a === 198 && (b === 18 || b === 19)) || // 198.18.0.0/15 benchmarking\n    (a === 198 && b === 51) || // 198.51.100.0/24 test-net-2\n    (a === 203 && b === 0) || // 203.0.113.0/24 test-net-3\n    a >= 224 // 224.0.0.0/4 multicast + 240.0.0.0/4 reserved + 255.255.255.255\n  );\n}\n\nfunction isPrivateIpv6(ip: string): boolean {\n  const normalized = ip.toLowerCase().split(\"%\")[0]; // drop zone id\n\n  // IPv4-mapped / -embedded (::ffff:a.b.c.d, ::a.b.c.d) — defer to the v4\n  // check on the trailing dotted-quad so an inward-mapped address is caught.\n  const v4 = normalized.match(/(\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3})$/);\n  if (v4) {\n    return isPrivateIpv4(v4[1]);\n  }\n\n  if (normalized === \"::1\" || normalized === \"::\") {\n    return true; // loopback / unspecified\n  }\n\n  // Expand only the leading group enough to classify the reserved blocks.\n  const firstGroup = normalized.split(\":\")[0];\n  const head = firstGroup === \"\" ? 0 : Number.parseInt(firstGroup, 16);\n\n  // fc00::/7 unique-local (fc.. / fd..)\n  if ((head & 0xfe00) === 0xfc00) return true;\n  // fe80::/10 link-local\n  if ((head & 0xffc0) === 0xfe80) return true;\n\n  return false;\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,sBAAsB,IAAqB;CACzD,MAAM,SAAS,KAAK,EAAE;CACtB,IAAI,WAAW,GAAG,OAAO,cAAc,EAAE;CACzC,IAAI,WAAW,GAAG,OAAO,cAAc,EAAE;CACzC,OAAO;AACT;;AAGA,SAAS,UAAU,IAAqD;CACtE,MAAM,QAAQ,GAAG,MAAM,GAAG;CAC1B,IAAI,MAAM,WAAW,GAAG,OAAO;CAE/B,MAAM,SAAS,MAAM,KAAI,SAAQ,OAAO,IAAI,CAAC;CAC7C,IAAI,OAAO,MAAK,MAAK,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,KAAK,IAAI,GAAG,GAAG,OAAO;CAEvE,OAAO;AACT;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,SAAS,UAAU,EAAE;CAC3B,IAAI,CAAC,QAAQ,OAAO;CAEpB,MAAM,CAAC,GAAG,KAAK;CAEf,OACE,MAAM,KACN,MAAM,MACN,MAAM,OACL,MAAM,OAAO,KAAK,MAAM,KAAK,OAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,KAAK,MAAM,KAAK,MAC7B,MAAM,OAAO,MAAM,OACnB,MAAM,OAAO,MAAM,KACnB,MAAM,QAAQ,MAAM,MAAM,MAAM,OAChC,MAAM,OAAO,MAAM,MACnB,MAAM,OAAO,MAAM,KACpB,KAAK;AAET;AAEA,SAAS,cAAc,IAAqB;CAC1C,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;CAI/C,MAAM,KAAK,WAAW,MAAM,uCAAuC;CACnE,IAAI,IACF,OAAO,cAAc,GAAG,EAAE;CAG5B,IAAI,eAAe,SAAS,eAAe,MACzC,OAAO;CAIT,MAAM,aAAa,WAAW,MAAM,GAAG,CAAC,CAAC;CACzC,MAAM,OAAO,eAAe,KAAK,IAAI,OAAO,SAAS,YAAY,EAAE;CAGnE,KAAK,OAAO,WAAY,OAAQ,OAAO;CAEvC,KAAK,OAAO,WAAY,OAAQ,OAAO;CAEvC,OAAO;AACT"}

package/esm/security/redact.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/security/redact.d.ts
+//#region ../ai/src/security/redact.d.ts
 /**
  * Default set of sensitive key fragments (matched case-insensitively as
  * substrings of an object key). Covers the secrets that leak through

package/esm/security/redact.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/security/redact.ts"],"mappings":";;AAMA;;;;AAgBC;cAhBY,sBAAA;;cAmBA,iBAAA;AAAA,KASD,aAAA;EAFX,iFAIC,IAAA,aAFuB;EAIvB,WAAA,WAJuB;EAMvB,QAAA;AAAA;;;AAAQ;AAqBV;;;;;;;iBAAgB,MAAA,IAAU,KAAA,EAAO,CAAA,EAAG,OAAA,GAAS,aAAA,GAAqB,CAAA;;;;;;iBAkDlD,aAAA,CACd,OAAA,EAAS,OAAA,GAAU,MAAA,+BACnB,WAAA,YACC,MAAA;;AArDgE;AAkDnE;;;;iBAuCgB,YAAA,CAAa,IAAY;;;;;;;;KAe7B,aAAA;EACV,IAAA;EACA,OAAA;EACA,IAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,iBAGc,WAAA,CACd,KAAA,WACA,OAAA;EAAW,YAAA;AAAA,IAA2B,aAAA,GACrC,aAAa"}
+{"version":3,"file":"redact.d.mts","names":[],"sources":["../../../../../../../ai/src/security/redact.ts"],"mappings":";;AAMA;;;;AAgBC;cAhBY,sBAAA;;cAmBA,iBAAA;AAAA,KASD,aAAA;EAFX,iFAIC,IAAA,aAFuB;EAIvB,WAAA,WAJuB;EAMvB,QAAA;AAAA;;;AAAQ;AAqBV;;;;;;;iBAAgB,MAAA,IAAU,KAAA,EAAO,CAAA,EAAG,OAAA,GAAS,aAAA,GAAqB,CAAA;;;;;;iBAkDlD,aAAA,CACd,OAAA,EAAS,OAAA,GAAU,MAAA,+BACnB,WAAA,YACC,MAAA;;AArDgE;AAkDnE;;;;iBAuCgB,YAAA,CAAa,IAAY;;;;;;;;KAe7B,aAAA;EACV,IAAA;EACA,OAAA;EACA,IAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,iBAGc,WAAA,CACd,KAAA,WACA,OAAA;EAAW,YAAA;AAAA,IAA2B,aAAA,GACrC,aAAa"}

package/esm/security/redact.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/security/redact.ts
+//#region ../ai/src/security/redact.ts
 /**
 * Default set of sensitive key fragments (matched case-insensitively as
 * substrings of an object key). Covers the secrets that leak through

package/esm/security/redact.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"redact.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/security/redact.ts"],"sourcesContent":["/**\n * Default set of sensitive key fragments (matched case-insensitively as\n * substrings of an object key). Covers the secrets that leak through\n * recorded requests, error causes, and trace payloads: auth headers, API\n * keys, cookies, tokens, passwords, and private keys.\n */\nexport const DEFAULT_SENSITIVE_KEYS: readonly string[] = [\n  \"authorization\",\n  \"x-api-key\",\n  \"api-key\",\n  \"apikey\",\n  \"cookie\",\n  \"set-cookie\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n  \"access_token\",\n  \"refresh_token\",\n  \"client_secret\",\n  \"private_key\",\n  \"session\",\n];\n\n/** HTTP header names always stripped from a serialized error/cause. */\nexport const SENSITIVE_HEADERS: readonly string[] = [\n  \"authorization\",\n  \"x-api-key\",\n  \"api-key\",\n  \"cookie\",\n  \"set-cookie\",\n  \"proxy-authorization\",\n];\n\nexport type RedactOptions = {\n  /** Extra key fragments to redact, merged with {@link DEFAULT_SENSITIVE_KEYS}. */\n  keys?: string[];\n  /** Replacement for a redacted value. Default `\"[redacted]\"`. */\n  placeholder?: string;\n  /** Maximum recursion depth before bailing out. Default `8`. */\n  maxDepth?: number;\n};\n\nconst DEFAULT_PLACEHOLDER = \"[redacted]\";\nconst DEFAULT_MAX_DEPTH = 8;\n\nfunction keyIsSensitive(key: string, fragments: string[]): boolean {\n  const lower = key.toLowerCase();\n  return fragments.some(fragment => lower.includes(fragment));\n}\n\n/**\n * Deep-copy `value` with any property whose KEY matches a sensitive\n * fragment replaced by the placeholder. Arrays are walked element-wise;\n * circular references and over-deep trees collapse to the placeholder.\n * Primitives pass through untouched (redaction is key-driven, not\n * value-driven — it never guesses at a bare string being a secret).\n *\n * Shared by VCR cassettes (S2), Panoptic content capture, and the error /\n * cause serializer (S4) so there is ONE redaction policy, not three.\n */\nexport function redact<T>(value: T, options: RedactOptions = {}): T {\n  const fragments = [...DEFAULT_SENSITIVE_KEYS, ...(options.keys ?? [])].map(k =>\n    k.toLowerCase(),\n  );\n  const placeholder = options.placeholder ?? DEFAULT_PLACEHOLDER;\n  const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;\n  const seen = new WeakSet<object>();\n\n  const walk = (input: unknown, depth: number): unknown => {\n    if (input === null || typeof input !== \"object\") {\n      return input;\n    }\n    if (depth >= maxDepth || seen.has(input)) {\n      return placeholder;\n    }\n    seen.add(input as object);\n\n    if (Array.isArray(input)) {\n      return input.map(item => walk(item, depth + 1));\n    }\n\n    // `name` / `message` / `stack` sit on Error's prototype chain (or as\n    // non-enumerable own properties), so a plain `Object.entries()` walk\n    // sees none of them — a raw Error `cause` would otherwise collapse to\n    // `{}`. Project them explicitly; own enumerable extras (`code`,\n    // `cause`, custom AIError fields) still merge in below and recurse\n    // normally, so a chained `cause` that is itself an Error is unwrapped\n    // the same way.\n    const source: Record<string, unknown> =\n      input instanceof Error\n        ? { ...input, name: input.name, message: input.message, stack: input.stack }\n        : (input as Record<string, unknown>);\n\n    const out: Record<string, unknown> = {};\n    for (const [key, val] of Object.entries(source)) {\n      out[key] = keyIsSensitive(key, fragments)\n        ? placeholder\n        : walk(val, depth + 1);\n    }\n    return out;\n  };\n\n  return walk(value, 0) as T;\n}\n\n/**\n * Strip sensitive HTTP headers from a `Headers` instance or a plain\n * header record, returning a redacted plain object. Header names are\n * matched case-insensitively against {@link SENSITIVE_HEADERS}.\n */\nexport function redactHeaders(\n  headers: Headers | Record<string, unknown> | undefined,\n  placeholder: string = DEFAULT_PLACEHOLDER,\n): Record<string, unknown> {\n  if (!headers) return {};\n\n  const entries: Array<[string, unknown]> =\n    headers instanceof Headers\n      ? [...headers.entries()]\n      : Object.entries(headers);\n\n  const out: Record<string, unknown> = {};\n  for (const [key, val] of entries) {\n    out[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? placeholder : val;\n  }\n  return out;\n}\n\n/**\n * Patterns for secrets that hide in FREE TEXT (error messages, stack\n * traces, log lines) where the key-based {@link redact} can't reach them.\n * Each entry replaces the secret with `[redacted]` while keeping\n * surrounding context.\n */\nconst SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [\n  [/\\bBearer\\s+[A-Za-z0-9._~+/-]+=*/gi, \"Bearer [redacted]\"],\n  [/\\b(authorization|x-api-key|api[_-]?key|cookie)(\"?\\s*[:=]\\s*\"?)[^\\s\",}]+/gi, \"$1$2[redacted]\"],\n  [/\\bsk-[A-Za-z0-9]{16,}\\b/g, \"[redacted]\"], // OpenAI-style keys\n  [/\\bxox[baprs]-[A-Za-z0-9-]{8,}\\b/g, \"[redacted]\"], // Slack tokens\n  [/\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/g, \"[redacted]\"], // GitHub tokens\n  [/\\bAKIA[0-9A-Z]{16}\\b/g, \"[redacted]\"], // AWS access key ids\n];\n\n/**\n * Scrub secrets that appear in free-form text — error messages, stack\n * traces, exported log lines. Complements {@link redact} (which is key-\n * driven and can't see a token embedded in a string). Used by the trace /\n * error serializer (S4) before a message or stack is stored or exported.\n */\nexport function scrubSecrets(text: string): string {\n  let out = text;\n  for (const [pattern, replacement] of SECRET_PATTERNS) {\n    out = out.replace(pattern, replacement);\n  }\n  return out;\n}\n\n/**\n * Serialized, secret-free view of an error. `stack` is omitted by default\n * (it can embed local paths, endpoints, and tokens); pass\n * `includeStack: true` only for a trusted local sink. The retained\n * `cause` is deep-redacted via {@link redact}, so a raw provider SDK error\n * carrying `Authorization` / `x-api-key` on `cause.headers` is sanitized.\n */\nexport type RedactedError = {\n  name: string;\n  message: string;\n  code?: string;\n  cause?: unknown;\n  stack?: string;\n};\n\nexport function redactError(\n  error: unknown,\n  options: { includeStack?: boolean } & RedactOptions = {},\n): RedactedError {\n  const { includeStack, ...redactOptions } = options;\n\n  if (error === null || typeof error !== \"object\") {\n    return { name: \"Error\", message: String(error) };\n  }\n\n  const err = error as {\n    name?: unknown;\n    message?: unknown;\n    code?: unknown;\n    cause?: unknown;\n    stack?: unknown;\n  };\n\n  const result: RedactedError = {\n    name: typeof err.name === \"string\" ? err.name : \"Error\",\n    message: typeof err.message === \"string\" ? err.message : String(error),\n  };\n\n  if (typeof err.code === \"string\") {\n    result.code = err.code;\n  }\n  if (err.cause !== undefined) {\n    result.cause =\n      err.cause !== null && typeof err.cause === \"object\"\n        ? redact(err.cause, redactOptions)\n        : err.cause;\n  }\n  if (includeStack && typeof err.stack === \"string\") {\n    result.stack = err.stack;\n  }\n\n  return result;\n}\n"],"mappings":";;;;;;;AAMA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,oBAAuC;CAClD;CACA;CACA;CACA;CACA;CACA;AACF;AAWA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAE1B,SAAS,eAAe,KAAa,WAA8B;CACjE,MAAM,QAAQ,IAAI,YAAY;CAC9B,OAAO,UAAU,MAAK,aAAY,MAAM,SAAS,QAAQ,CAAC;AAC5D;;;;;;;;;;;AAYA,SAAgB,OAAU,OAAU,UAAyB,CAAC,GAAM;CAClE,MAAM,YAAY,CAAC,GAAG,wBAAwB,GAAI,QAAQ,QAAQ,CAAC,CAAE,CAAC,CAAC,KAAI,MACzE,EAAE,YAAY,CAChB;CACA,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,uBAAO,IAAI,QAAgB;CAEjC,MAAM,QAAQ,OAAgB,UAA2B;EACvD,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO;EAET,IAAI,SAAS,YAAY,KAAK,IAAI,KAAK,GACrC,OAAO;EAET,KAAK,IAAI,KAAe;EAExB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAI,SAAQ,KAAK,MAAM,QAAQ,CAAC,CAAC;EAUhD,MAAM,SACJ,iBAAiB,QACb;GAAE,GAAG;GAAO,MAAM,MAAM;GAAM,SAAS,MAAM;GAAS,OAAO,MAAM;EAAM,IACxE;EAEP,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,GAC5C,IAAI,OAAO,eAAe,KAAK,SAAS,IACpC,cACA,KAAK,KAAK,QAAQ,CAAC;EAEzB,OAAO;CACT;CAEA,OAAO,KAAK,OAAO,CAAC;AACtB;;;;;;AAOA,SAAgB,cACd,SACA,cAAsB,qBACG;CACzB,IAAI,CAAC,SAAS,OAAO,CAAC;CAEtB,MAAM,UACJ,mBAAmB,UACf,CAAC,GAAG,QAAQ,QAAQ,CAAC,IACrB,OAAO,QAAQ,OAAO;CAE5B,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,QAAQ,SACvB,IAAI,OAAO,kBAAkB,SAAS,IAAI,YAAY,CAAC,IAAI,cAAc;CAE3E,OAAO;AACT;;;;;;;AAQA,MAAM,kBAA4D;CAChE,CAAC,qCAAqC,mBAAmB;CACzD,CAAC,6EAA6E,gBAAgB;CAC9F,CAAC,4BAA4B,YAAY;CACzC,CAAC,oCAAoC,YAAY;CACjD,CAAC,mCAAmC,YAAY;CAChD,CAAC,yBAAyB,YAAY;AACxC;;;;;;;AAQA,SAAgB,aAAa,MAAsB;CACjD,IAAI,MAAM;CACV,KAAK,MAAM,CAAC,SAAS,gBAAgB,iBACnC,MAAM,IAAI,QAAQ,SAAS,WAAW;CAExC,OAAO;AACT;AAiBA,SAAgB,YACd,OACA,UAAsD,CAAC,GACxC;CACf,MAAM,EAAE,cAAc,GAAG,kBAAkB;CAE3C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO;EAAE,MAAM;EAAS,SAAS,OAAO,KAAK;CAAE;CAGjD,MAAM,MAAM;CAQZ,MAAM,SAAwB;EAC5B,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;EAChD,SAAS,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU,OAAO,KAAK;CACvE;CAEA,IAAI,OAAO,IAAI,SAAS,UACtB,OAAO,OAAO,IAAI;CAEpB,IAAI,IAAI,UAAU,QAChB,OAAO,QACL,IAAI,UAAU,QAAQ,OAAO,IAAI,UAAU,WACvC,OAAO,IAAI,OAAO,aAAa,IAC/B,IAAI;CAEZ,IAAI,gBAAgB,OAAO,IAAI,UAAU,UACvC,OAAO,QAAQ,IAAI;CAGrB,OAAO;AACT"}
+{"version":3,"file":"redact.mjs","names":[],"sources":["../../../../../../../ai/src/security/redact.ts"],"sourcesContent":["/**\n * Default set of sensitive key fragments (matched case-insensitively as\n * substrings of an object key). Covers the secrets that leak through\n * recorded requests, error causes, and trace payloads: auth headers, API\n * keys, cookies, tokens, passwords, and private keys.\n */\nexport const DEFAULT_SENSITIVE_KEYS: readonly string[] = [\n  \"authorization\",\n  \"x-api-key\",\n  \"api-key\",\n  \"apikey\",\n  \"cookie\",\n  \"set-cookie\",\n  \"password\",\n  \"passwd\",\n  \"secret\",\n  \"token\",\n  \"access_token\",\n  \"refresh_token\",\n  \"client_secret\",\n  \"private_key\",\n  \"session\",\n];\n\n/** HTTP header names always stripped from a serialized error/cause. */\nexport const SENSITIVE_HEADERS: readonly string[] = [\n  \"authorization\",\n  \"x-api-key\",\n  \"api-key\",\n  \"cookie\",\n  \"set-cookie\",\n  \"proxy-authorization\",\n];\n\nexport type RedactOptions = {\n  /** Extra key fragments to redact, merged with {@link DEFAULT_SENSITIVE_KEYS}. */\n  keys?: string[];\n  /** Replacement for a redacted value. Default `\"[redacted]\"`. */\n  placeholder?: string;\n  /** Maximum recursion depth before bailing out. Default `8`. */\n  maxDepth?: number;\n};\n\nconst DEFAULT_PLACEHOLDER = \"[redacted]\";\nconst DEFAULT_MAX_DEPTH = 8;\n\nfunction keyIsSensitive(key: string, fragments: string[]): boolean {\n  const lower = key.toLowerCase();\n  return fragments.some(fragment => lower.includes(fragment));\n}\n\n/**\n * Deep-copy `value` with any property whose KEY matches a sensitive\n * fragment replaced by the placeholder. Arrays are walked element-wise;\n * circular references and over-deep trees collapse to the placeholder.\n * Primitives pass through untouched (redaction is key-driven, not\n * value-driven — it never guesses at a bare string being a secret).\n *\n * Shared by VCR cassettes (S2), Panoptic content capture, and the error /\n * cause serializer (S4) so there is ONE redaction policy, not three.\n */\nexport function redact<T>(value: T, options: RedactOptions = {}): T {\n  const fragments = [...DEFAULT_SENSITIVE_KEYS, ...(options.keys ?? [])].map(k =>\n    k.toLowerCase(),\n  );\n  const placeholder = options.placeholder ?? DEFAULT_PLACEHOLDER;\n  const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;\n  const seen = new WeakSet<object>();\n\n  const walk = (input: unknown, depth: number): unknown => {\n    if (input === null || typeof input !== \"object\") {\n      return input;\n    }\n    if (depth >= maxDepth || seen.has(input)) {\n      return placeholder;\n    }\n    seen.add(input as object);\n\n    if (Array.isArray(input)) {\n      return input.map(item => walk(item, depth + 1));\n    }\n\n    // `name` / `message` / `stack` sit on Error's prototype chain (or as\n    // non-enumerable own properties), so a plain `Object.entries()` walk\n    // sees none of them — a raw Error `cause` would otherwise collapse to\n    // `{}`. Project them explicitly; own enumerable extras (`code`,\n    // `cause`, custom AIError fields) still merge in below and recurse\n    // normally, so a chained `cause` that is itself an Error is unwrapped\n    // the same way.\n    const source: Record<string, unknown> =\n      input instanceof Error\n        ? { ...input, name: input.name, message: input.message, stack: input.stack }\n        : (input as Record<string, unknown>);\n\n    const out: Record<string, unknown> = {};\n    for (const [key, val] of Object.entries(source)) {\n      out[key] = keyIsSensitive(key, fragments)\n        ? placeholder\n        : walk(val, depth + 1);\n    }\n    return out;\n  };\n\n  return walk(value, 0) as T;\n}\n\n/**\n * Strip sensitive HTTP headers from a `Headers` instance or a plain\n * header record, returning a redacted plain object. Header names are\n * matched case-insensitively against {@link SENSITIVE_HEADERS}.\n */\nexport function redactHeaders(\n  headers: Headers | Record<string, unknown> | undefined,\n  placeholder: string = DEFAULT_PLACEHOLDER,\n): Record<string, unknown> {\n  if (!headers) return {};\n\n  const entries: Array<[string, unknown]> =\n    headers instanceof Headers\n      ? [...headers.entries()]\n      : Object.entries(headers);\n\n  const out: Record<string, unknown> = {};\n  for (const [key, val] of entries) {\n    out[key] = SENSITIVE_HEADERS.includes(key.toLowerCase()) ? placeholder : val;\n  }\n  return out;\n}\n\n/**\n * Patterns for secrets that hide in FREE TEXT (error messages, stack\n * traces, log lines) where the key-based {@link redact} can't reach them.\n * Each entry replaces the secret with `[redacted]` while keeping\n * surrounding context.\n */\nconst SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [\n  [/\\bBearer\\s+[A-Za-z0-9._~+/-]+=*/gi, \"Bearer [redacted]\"],\n  [/\\b(authorization|x-api-key|api[_-]?key|cookie)(\"?\\s*[:=]\\s*\"?)[^\\s\",}]+/gi, \"$1$2[redacted]\"],\n  [/\\bsk-[A-Za-z0-9]{16,}\\b/g, \"[redacted]\"], // OpenAI-style keys\n  [/\\bxox[baprs]-[A-Za-z0-9-]{8,}\\b/g, \"[redacted]\"], // Slack tokens\n  [/\\bgh[pousr]_[A-Za-z0-9]{20,}\\b/g, \"[redacted]\"], // GitHub tokens\n  [/\\bAKIA[0-9A-Z]{16}\\b/g, \"[redacted]\"], // AWS access key ids\n];\n\n/**\n * Scrub secrets that appear in free-form text — error messages, stack\n * traces, exported log lines. Complements {@link redact} (which is key-\n * driven and can't see a token embedded in a string). Used by the trace /\n * error serializer (S4) before a message or stack is stored or exported.\n */\nexport function scrubSecrets(text: string): string {\n  let out = text;\n  for (const [pattern, replacement] of SECRET_PATTERNS) {\n    out = out.replace(pattern, replacement);\n  }\n  return out;\n}\n\n/**\n * Serialized, secret-free view of an error. `stack` is omitted by default\n * (it can embed local paths, endpoints, and tokens); pass\n * `includeStack: true` only for a trusted local sink. The retained\n * `cause` is deep-redacted via {@link redact}, so a raw provider SDK error\n * carrying `Authorization` / `x-api-key` on `cause.headers` is sanitized.\n */\nexport type RedactedError = {\n  name: string;\n  message: string;\n  code?: string;\n  cause?: unknown;\n  stack?: string;\n};\n\nexport function redactError(\n  error: unknown,\n  options: { includeStack?: boolean } & RedactOptions = {},\n): RedactedError {\n  const { includeStack, ...redactOptions } = options;\n\n  if (error === null || typeof error !== \"object\") {\n    return { name: \"Error\", message: String(error) };\n  }\n\n  const err = error as {\n    name?: unknown;\n    message?: unknown;\n    code?: unknown;\n    cause?: unknown;\n    stack?: unknown;\n  };\n\n  const result: RedactedError = {\n    name: typeof err.name === \"string\" ? err.name : \"Error\",\n    message: typeof err.message === \"string\" ? err.message : String(error),\n  };\n\n  if (typeof err.code === \"string\") {\n    result.code = err.code;\n  }\n  if (err.cause !== undefined) {\n    result.cause =\n      err.cause !== null && typeof err.cause === \"object\"\n        ? redact(err.cause, redactOptions)\n        : err.cause;\n  }\n  if (includeStack && typeof err.stack === \"string\") {\n    result.stack = err.stack;\n  }\n\n  return result;\n}\n"],"mappings":";;;;;;;AAMA,MAAa,yBAA4C;CACvD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;;AAGA,MAAa,oBAAuC;CAClD;CACA;CACA;CACA;CACA;CACA;AACF;AAWA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAE1B,SAAS,eAAe,KAAa,WAA8B;CACjE,MAAM,QAAQ,IAAI,YAAY;CAC9B,OAAO,UAAU,MAAK,aAAY,MAAM,SAAS,QAAQ,CAAC;AAC5D;;;;;;;;;;;AAYA,SAAgB,OAAU,OAAU,UAAyB,CAAC,GAAM;CAClE,MAAM,YAAY,CAAC,GAAG,wBAAwB,GAAI,QAAQ,QAAQ,CAAC,CAAE,CAAC,CAAC,KAAI,MACzE,EAAE,YAAY,CAChB;CACA,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,WAAW,QAAQ,YAAY;CACrC,MAAM,uBAAO,IAAI,QAAgB;CAEjC,MAAM,QAAQ,OAAgB,UAA2B;EACvD,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO;EAET,IAAI,SAAS,YAAY,KAAK,IAAI,KAAK,GACrC,OAAO;EAET,KAAK,IAAI,KAAe;EAExB,IAAI,MAAM,QAAQ,KAAK,GACrB,OAAO,MAAM,KAAI,SAAQ,KAAK,MAAM,QAAQ,CAAC,CAAC;EAUhD,MAAM,SACJ,iBAAiB,QACb;GAAE,GAAG;GAAO,MAAM,MAAM;GAAM,SAAS,MAAM;GAAS,OAAO,MAAM;EAAM,IACxE;EAEP,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,CAAC,KAAK,QAAQ,OAAO,QAAQ,MAAM,GAC5C,IAAI,OAAO,eAAe,KAAK,SAAS,IACpC,cACA,KAAK,KAAK,QAAQ,CAAC;EAEzB,OAAO;CACT;CAEA,OAAO,KAAK,OAAO,CAAC;AACtB;;;;;;AAOA,SAAgB,cACd,SACA,cAAsB,qBACG;CACzB,IAAI,CAAC,SAAS,OAAO,CAAC;CAEtB,MAAM,UACJ,mBAAmB,UACf,CAAC,GAAG,QAAQ,QAAQ,CAAC,IACrB,OAAO,QAAQ,OAAO;CAE5B,MAAM,MAA+B,CAAC;CACtC,KAAK,MAAM,CAAC,KAAK,QAAQ,SACvB,IAAI,OAAO,kBAAkB,SAAS,IAAI,YAAY,CAAC,IAAI,cAAc;CAE3E,OAAO;AACT;;;;;;;AAQA,MAAM,kBAA4D;CAChE,CAAC,qCAAqC,mBAAmB;CACzD,CAAC,6EAA6E,gBAAgB;CAC9F,CAAC,4BAA4B,YAAY;CACzC,CAAC,oCAAoC,YAAY;CACjD,CAAC,mCAAmC,YAAY;CAChD,CAAC,yBAAyB,YAAY;AACxC;;;;;;;AAQA,SAAgB,aAAa,MAAsB;CACjD,IAAI,MAAM;CACV,KAAK,MAAM,CAAC,SAAS,gBAAgB,iBACnC,MAAM,IAAI,QAAQ,SAAS,WAAW;CAExC,OAAO;AACT;AAiBA,SAAgB,YACd,OACA,UAAsD,CAAC,GACxC;CACf,MAAM,EAAE,cAAc,GAAG,kBAAkB;CAE3C,IAAI,UAAU,QAAQ,OAAO,UAAU,UACrC,OAAO;EAAE,MAAM;EAAS,SAAS,OAAO,KAAK;CAAE;CAGjD,MAAM,MAAM;CAQZ,MAAM,SAAwB;EAC5B,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;EAChD,SAAS,OAAO,IAAI,YAAY,WAAW,IAAI,UAAU,OAAO,KAAK;CACvE;CAEA,IAAI,OAAO,IAAI,SAAS,UACtB,OAAO,OAAO,IAAI;CAEpB,IAAI,IAAI,UAAU,QAChB,OAAO,QACL,IAAI,UAAU,QAAQ,OAAO,IAAI,UAAU,WACvC,OAAO,IAAI,OAAO,aAAa,IAC/B,IAAI;CAEZ,IAAI,gBAAgB,OAAO,IAAI,UAAU,UACvC,OAAO,QAAQ,IAAI;CAGrB,OAAO;AACT"}

package/esm/serve/serve.d.mts

@@ -1,7 +1,7 @@
 import { StreamLike } from "./stream-to-sse.mjs";
 import { IncomingMessage, ServerResponse } from "node:http";
 
-//#region ../@warlock.js/ai/src/serve/serve.d.ts
+//#region ../ai/src/serve/serve.d.ts
 /**
  * Anything `serve` can expose: a primitive whose `stream(input, options)`
  * returns a {@link StreamLike}. Agents, supervisors, and orchestrators all

package/esm/serve/serve.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/serve.ts"],"mappings":";;;;;;AAQA;;;KAAY,kBAAA;EACV,MAAA,CAAO,KAAA,EAAO,MAAA,EAAQ,OAAA,GAAU,MAAA,oBAA0B,UAAA;IAAa,IAAA;EAAA;AAAA;;KAI7D,YAAA;EAJI;;;;;EAUd,SAAA;EAV2E;AAAA;AAI7E;;EAWE,OAAA,IAAW,IAAA,EAAM,MAAA,sBAA4B,MAAA;EAA5B;;;;;EAMjB,SAAA,IAAa,IAAA,EAAM,MAAA,sBAA4B,MAAA;AAAA;;;;;;;;;;;AAAM;AAqBvD;iBAAgB,KAAA,mBACd,UAAA,EAAY,kBAAA,CAAmB,MAAA,GAC/B,OAAA,GAAS,YAAA,CAAa,MAAA,KACpB,GAAA,EAAK,eAAA,EAAiB,GAAA,EAAK,cAAA"}
+{"version":3,"file":"serve.d.mts","names":[],"sources":["../../../../../../../ai/src/serve/serve.ts"],"mappings":";;;;;;AAQA;;;KAAY,kBAAA;EACV,MAAA,CAAO,KAAA,EAAO,MAAA,EAAQ,OAAA,GAAU,MAAA,oBAA0B,UAAA;IAAa,IAAA;EAAA;AAAA;;KAI7D,YAAA;EAJI;;;;;EAUd,SAAA;EAV2E;AAAA;AAI7E;;EAWE,OAAA,IAAW,IAAA,EAAM,MAAA,sBAA4B,MAAA;EAA5B;;;;;EAMjB,SAAA,IAAa,IAAA,EAAM,MAAA,sBAA4B,MAAA;AAAA;;;;;;;;;;;AAAM;AAqBvD;iBAAgB,KAAA,mBACd,UAAA,EAAY,kBAAA,CAAmB,MAAA,GAC/B,OAAA,GAAS,YAAA,CAAa,MAAA,KACpB,GAAA,EAAK,eAAA,EAAiB,GAAA,EAAK,cAAA"}

package/esm/serve/serve.mjs

@@ -1,6 +1,6 @@
 import { streamToSSE } from "./stream-to-sse.mjs";
 
-//#region ../@warlock.js/ai/src/serve/serve.ts
+//#region ../ai/src/serve/serve.ts
 const SECURITY_HEADERS = {
 	"x-content-type-options": "nosniff",
 	"x-frame-options": "DENY",

package/esm/serve/serve.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"serve.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/serve.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { streamToSSE, type StreamLike } from \"./stream-to-sse\";\n\n/**\n * Anything `serve` can expose: a primitive whose `stream(input, options)`\n * returns a {@link StreamLike}. Agents, supervisors, and orchestrators all\n * satisfy it.\n */\nexport type ServableExecutable<TInput = unknown> = {\n  stream(input: TInput, options?: Record<string, unknown>): StreamLike<{ type: string }, unknown>;\n};\n\n/** Options for {@link serve}. */\nexport type ServeOptions<TInput = unknown> = {\n  /**\n   * Bearer token required on every request. When set, a request must send\n   * `Authorization: Bearer <token>`, else `401` (S4-style auth, the same\n   * control the dashboard uses — fold this in for a production deploy).\n   */\n  authToken?: string;\n  /**\n   * Map the parsed JSON request body to the executable's input. Default:\n   * `body.input`. Override to accept a different request shape.\n   */\n  toInput?: (body: Record<string, unknown>) => TInput;\n  /**\n   * Map the parsed body to per-call stream options (e.g. an orchestrator\n   * `{ sessionId, history }` so a turn resumes the right session — A3\n   * wiring). Default: pass `sessionId` / `history` straight through.\n   */\n  toOptions?: (body: Record<string, unknown>) => Record<string, unknown>;\n};\n\nconst SECURITY_HEADERS: Record<string, string> = {\n  \"x-content-type-options\": \"nosniff\",\n  \"x-frame-options\": \"DENY\",\n  \"referrer-policy\": \"no-referrer\",\n};\n\n/**\n * Turn an executable into a `node:http` request handler that streams its\n * run to the client as Server-Sent Events (A3) — the production-serving\n * primitive. POST a JSON body (`{ input, sessionId?, history? }`); the\n * response is an `text/event-stream` of the primitive's events, the final\n * `result`, then `[DONE]`. Absorbs the auth-token control; pair with a\n * `sessionLock` + an orchestrator for durable multi-turn serving.\n *\n * @example\n * import { createServer } from \"node:http\";\n * createServer(ai.serve(myAgent, { authToken: process.env.TOKEN })).listen(8787);\n */\nexport function serve<TInput = unknown>(\n  executable: ServableExecutable<TInput>,\n  options: ServeOptions<TInput> = {},\n): (req: IncomingMessage, res: ServerResponse) => void {\n  const toInput = options.toInput ?? ((body) => body.input as TInput);\n  const toOptions =\n    options.toOptions ??\n    ((body) => {\n      const opts: Record<string, unknown> = {};\n      if (body.sessionId !== undefined) opts.sessionId = body.sessionId;\n      if (body.history !== undefined) opts.history = body.history;\n      return opts;\n    });\n\n  return function handle(req: IncomingMessage, res: ServerResponse): void {\n    void (async () => {\n      if (req.method !== \"POST\") {\n        sendJson(res, 405, { error: \"method_not_allowed\" });\n        return;\n      }\n\n      if (options.authToken && req.headers.authorization !== `Bearer ${options.authToken}`) {\n        sendJson(res, 401, { error: \"unauthorized\" });\n        return;\n      }\n\n      let body: Record<string, unknown>;\n      try {\n        body = await readJsonBody(req);\n      } catch {\n        sendJson(res, 400, { error: \"invalid_json\" });\n        return;\n      }\n\n      res.writeHead(200, {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache\",\n        connection: \"keep-alive\",\n        ...SECURITY_HEADERS,\n      });\n\n      try {\n        const stream = executable.stream(toInput(body), toOptions(body));\n        for await (const frame of streamToSSE(stream)) {\n          res.write(frame);\n        }\n      } catch (error) {\n        res.write(\n          `event: error\\ndata: ${JSON.stringify({\n            message: error instanceof Error ? error.message : String(error),\n          })}\\n\\n`,\n        );\n      } finally {\n        res.end();\n      }\n    })();\n  };\n}\n\n/** Read and JSON-parse a request body. */\nfunction readJsonBody(req: IncomingMessage): Promise<Record<string, unknown>> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.on(\"data\", (chunk: Buffer | string) => {\n      raw += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? (JSON.parse(raw) as Record<string, unknown>) : {});\n      } catch (error) {\n        reject(error);\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nfunction sendJson(res: ServerResponse, status: number, body: unknown): void {\n  res.writeHead(status, { \"content-type\": \"application/json; charset=utf-8\", ...SECURITY_HEADERS });\n  res.end(JSON.stringify(body));\n}\n"],"mappings":";;;AAiCA,MAAM,mBAA2C;CAC/C,0BAA0B;CAC1B,mBAAmB;CACnB,mBAAmB;AACrB;;;;;;;;;;;;;AAcA,SAAgB,MACd,YACA,UAAgC,CAAC,GACoB;CACrD,MAAM,UAAU,QAAQ,aAAa,SAAS,KAAK;CACnD,MAAM,YACJ,QAAQ,eACN,SAAS;EACT,MAAM,OAAgC,CAAC;EACvC,IAAI,KAAK,cAAc,QAAW,KAAK,YAAY,KAAK;EACxD,IAAI,KAAK,YAAY,QAAW,KAAK,UAAU,KAAK;EACpD,OAAO;CACT;CAEF,OAAO,SAAS,OAAO,KAAsB,KAA2B;EACtE,CAAM,YAAY;GAChB,IAAI,IAAI,WAAW,QAAQ;IACzB,SAAS,KAAK,KAAK,EAAE,OAAO,qBAAqB,CAAC;IAClD;GACF;GAEA,IAAI,QAAQ,aAAa,IAAI,QAAQ,kBAAkB,UAAU,QAAQ,aAAa;IACpF,SAAS,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;IAC5C;GACF;GAEA,IAAI;GACJ,IAAI;IACF,OAAO,MAAM,aAAa,GAAG;GAC/B,QAAQ;IACN,SAAS,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;IAC5C;GACF;GAEA,IAAI,UAAU,KAAK;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACZ,GAAG;GACL,CAAC;GAED,IAAI;IACF,MAAM,SAAS,WAAW,OAAO,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;IAC/D,WAAW,MAAM,SAAS,YAAY,MAAM,GAC1C,IAAI,MAAM,KAAK;GAEnB,SAAS,OAAO;IACd,IAAI,MACF,uBAAuB,KAAK,UAAU,EACpC,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC,EAAE,KACL;GACF,UAAU;IACR,IAAI,IAAI;GACV;EACF,EAAC,CAAE;CACL;AACF;;AAGA,SAAS,aAAa,KAAwD;CAC5E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,MAAM;EACV,IAAI,GAAG,SAAS,UAA2B;GACzC,OAAO,MAAM,SAAS;EACxB,CAAC;EACD,IAAI,GAAG,aAAa;GAClB,IAAI;IACF,QAAQ,MAAO,KAAK,MAAM,GAAG,IAAgC,CAAC,CAAC;GACjE,SAAS,OAAO;IACd,OAAO,KAAK;GACd;EACF,CAAC;EACD,IAAI,GAAG,SAAS,MAAM;CACxB,CAAC;AACH;AAEA,SAAS,SAAS,KAAqB,QAAgB,MAAqB;CAC1E,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,GAAG;CAAiB,CAAC;CAChG,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC;AAC9B"}
+{"version":3,"file":"serve.mjs","names":[],"sources":["../../../../../../../ai/src/serve/serve.ts"],"sourcesContent":["import type { IncomingMessage, ServerResponse } from \"node:http\";\nimport { streamToSSE, type StreamLike } from \"./stream-to-sse\";\n\n/**\n * Anything `serve` can expose: a primitive whose `stream(input, options)`\n * returns a {@link StreamLike}. Agents, supervisors, and orchestrators all\n * satisfy it.\n */\nexport type ServableExecutable<TInput = unknown> = {\n  stream(input: TInput, options?: Record<string, unknown>): StreamLike<{ type: string }, unknown>;\n};\n\n/** Options for {@link serve}. */\nexport type ServeOptions<TInput = unknown> = {\n  /**\n   * Bearer token required on every request. When set, a request must send\n   * `Authorization: Bearer <token>`, else `401` (S4-style auth, the same\n   * control the dashboard uses — fold this in for a production deploy).\n   */\n  authToken?: string;\n  /**\n   * Map the parsed JSON request body to the executable's input. Default:\n   * `body.input`. Override to accept a different request shape.\n   */\n  toInput?: (body: Record<string, unknown>) => TInput;\n  /**\n   * Map the parsed body to per-call stream options (e.g. an orchestrator\n   * `{ sessionId, history }` so a turn resumes the right session — A3\n   * wiring). Default: pass `sessionId` / `history` straight through.\n   */\n  toOptions?: (body: Record<string, unknown>) => Record<string, unknown>;\n};\n\nconst SECURITY_HEADERS: Record<string, string> = {\n  \"x-content-type-options\": \"nosniff\",\n  \"x-frame-options\": \"DENY\",\n  \"referrer-policy\": \"no-referrer\",\n};\n\n/**\n * Turn an executable into a `node:http` request handler that streams its\n * run to the client as Server-Sent Events (A3) — the production-serving\n * primitive. POST a JSON body (`{ input, sessionId?, history? }`); the\n * response is an `text/event-stream` of the primitive's events, the final\n * `result`, then `[DONE]`. Absorbs the auth-token control; pair with a\n * `sessionLock` + an orchestrator for durable multi-turn serving.\n *\n * @example\n * import { createServer } from \"node:http\";\n * createServer(ai.serve(myAgent, { authToken: process.env.TOKEN })).listen(8787);\n */\nexport function serve<TInput = unknown>(\n  executable: ServableExecutable<TInput>,\n  options: ServeOptions<TInput> = {},\n): (req: IncomingMessage, res: ServerResponse) => void {\n  const toInput = options.toInput ?? ((body) => body.input as TInput);\n  const toOptions =\n    options.toOptions ??\n    ((body) => {\n      const opts: Record<string, unknown> = {};\n      if (body.sessionId !== undefined) opts.sessionId = body.sessionId;\n      if (body.history !== undefined) opts.history = body.history;\n      return opts;\n    });\n\n  return function handle(req: IncomingMessage, res: ServerResponse): void {\n    void (async () => {\n      if (req.method !== \"POST\") {\n        sendJson(res, 405, { error: \"method_not_allowed\" });\n        return;\n      }\n\n      if (options.authToken && req.headers.authorization !== `Bearer ${options.authToken}`) {\n        sendJson(res, 401, { error: \"unauthorized\" });\n        return;\n      }\n\n      let body: Record<string, unknown>;\n      try {\n        body = await readJsonBody(req);\n      } catch {\n        sendJson(res, 400, { error: \"invalid_json\" });\n        return;\n      }\n\n      res.writeHead(200, {\n        \"content-type\": \"text/event-stream; charset=utf-8\",\n        \"cache-control\": \"no-cache\",\n        connection: \"keep-alive\",\n        ...SECURITY_HEADERS,\n      });\n\n      try {\n        const stream = executable.stream(toInput(body), toOptions(body));\n        for await (const frame of streamToSSE(stream)) {\n          res.write(frame);\n        }\n      } catch (error) {\n        res.write(\n          `event: error\\ndata: ${JSON.stringify({\n            message: error instanceof Error ? error.message : String(error),\n          })}\\n\\n`,\n        );\n      } finally {\n        res.end();\n      }\n    })();\n  };\n}\n\n/** Read and JSON-parse a request body. */\nfunction readJsonBody(req: IncomingMessage): Promise<Record<string, unknown>> {\n  return new Promise((resolve, reject) => {\n    let raw = \"\";\n    req.on(\"data\", (chunk: Buffer | string) => {\n      raw += chunk.toString();\n    });\n    req.on(\"end\", () => {\n      try {\n        resolve(raw ? (JSON.parse(raw) as Record<string, unknown>) : {});\n      } catch (error) {\n        reject(error);\n      }\n    });\n    req.on(\"error\", reject);\n  });\n}\n\nfunction sendJson(res: ServerResponse, status: number, body: unknown): void {\n  res.writeHead(status, { \"content-type\": \"application/json; charset=utf-8\", ...SECURITY_HEADERS });\n  res.end(JSON.stringify(body));\n}\n"],"mappings":";;;AAiCA,MAAM,mBAA2C;CAC/C,0BAA0B;CAC1B,mBAAmB;CACnB,mBAAmB;AACrB;;;;;;;;;;;;;AAcA,SAAgB,MACd,YACA,UAAgC,CAAC,GACoB;CACrD,MAAM,UAAU,QAAQ,aAAa,SAAS,KAAK;CACnD,MAAM,YACJ,QAAQ,eACN,SAAS;EACT,MAAM,OAAgC,CAAC;EACvC,IAAI,KAAK,cAAc,QAAW,KAAK,YAAY,KAAK;EACxD,IAAI,KAAK,YAAY,QAAW,KAAK,UAAU,KAAK;EACpD,OAAO;CACT;CAEF,OAAO,SAAS,OAAO,KAAsB,KAA2B;EACtE,CAAM,YAAY;GAChB,IAAI,IAAI,WAAW,QAAQ;IACzB,SAAS,KAAK,KAAK,EAAE,OAAO,qBAAqB,CAAC;IAClD;GACF;GAEA,IAAI,QAAQ,aAAa,IAAI,QAAQ,kBAAkB,UAAU,QAAQ,aAAa;IACpF,SAAS,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;IAC5C;GACF;GAEA,IAAI;GACJ,IAAI;IACF,OAAO,MAAM,aAAa,GAAG;GAC/B,QAAQ;IACN,SAAS,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC;IAC5C;GACF;GAEA,IAAI,UAAU,KAAK;IACjB,gBAAgB;IAChB,iBAAiB;IACjB,YAAY;IACZ,GAAG;GACL,CAAC;GAED,IAAI;IACF,MAAM,SAAS,WAAW,OAAO,QAAQ,IAAI,GAAG,UAAU,IAAI,CAAC;IAC/D,WAAW,MAAM,SAAS,YAAY,MAAM,GAC1C,IAAI,MAAM,KAAK;GAEnB,SAAS,OAAO;IACd,IAAI,MACF,uBAAuB,KAAK,UAAU,EACpC,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAChE,CAAC,EAAE,KACL;GACF,UAAU;IACR,IAAI,IAAI;GACV;EACF,EAAC,CAAE;CACL;AACF;;AAGA,SAAS,aAAa,KAAwD;CAC5E,OAAO,IAAI,SAAS,SAAS,WAAW;EACtC,IAAI,MAAM;EACV,IAAI,GAAG,SAAS,UAA2B;GACzC,OAAO,MAAM,SAAS;EACxB,CAAC;EACD,IAAI,GAAG,aAAa;GAClB,IAAI;IACF,QAAQ,MAAO,KAAK,MAAM,GAAG,IAAgC,CAAC,CAAC;GACjE,SAAS,OAAO;IACd,OAAO,KAAK;GACd;EACF,CAAC;EACD,IAAI,GAAG,SAAS,MAAM;CACxB,CAAC;AACH;AAEA,SAAS,SAAS,KAAqB,QAAgB,MAAqB;CAC1E,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,GAAG;CAAiB,CAAC;CAChG,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC;AAC9B"}

package/esm/serve/sse.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/serve/sse.d.ts
+//#region ../ai/src/serve/sse.d.ts
 /**
  * Encode one Server-Sent-Events frame. Multi-line `data` is split into
  * multiple `data:` lines per the SSE spec, so JSON with embedded newlines

package/esm/serve/sse.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"sse.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/sse.ts"],"mappings":";;AASA;;;;;;;;iBAAgB,SAAA,CAAU,KAAA;EAAS,KAAA;EAAgB,IAAA;EAAe,EAAA;AAAA;;cAgBrD,QAAA"}
+{"version":3,"file":"sse.d.mts","names":[],"sources":["../../../../../../../ai/src/serve/sse.ts"],"mappings":";;AASA;;;;;;;;iBAAgB,SAAA,CAAU,KAAA;EAAS,KAAA;EAAgB,IAAA;EAAe,EAAA;AAAA;;cAgBrD,QAAA"}

package/esm/serve/sse.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/serve/sse.ts
+//#region ../ai/src/serve/sse.ts
 /**
 * Encode one Server-Sent-Events frame. Multi-line `data` is split into
 * multiple `data:` lines per the SSE spec, so JSON with embedded newlines

package/esm/serve/sse.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"sse.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/sse.ts"],"sourcesContent":["/**\n * Encode one Server-Sent-Events frame. Multi-line `data` is split into\n * multiple `data:` lines per the SSE spec, so JSON with embedded newlines\n * still parses on the client.\n *\n * @example\n * encodeSSE({ event: \"agent.trip.streaming\", data: { delta: \"Hi\" } });\n * // \"event: agent.trip.streaming\\ndata: {\\\"delta\\\":\\\"Hi\\\"}\\n\\n\"\n */\nexport function encodeSSE(frame: { event?: string; data: unknown; id?: string }): string {\n  let out = \"\";\n  if (frame.id) out += `id: ${frame.id}\\n`;\n  if (frame.event) out += `event: ${frame.event}\\n`;\n\n  const data =\n    typeof frame.data === \"string\" ? frame.data : JSON.stringify(frame.data);\n  for (const line of data.split(\"\\n\")) {\n    out += `data: ${line}\\n`;\n  }\n\n  out += \"\\n\";\n  return out;\n}\n\n/** The terminal SSE frame a client watches for to stop reading. */\nexport const SSE_DONE = \"data: [DONE]\\n\\n\";\n"],"mappings":";;;;;;;;;;AASA,SAAgB,UAAU,OAA+D;CACvF,IAAI,MAAM;CACV,IAAI,MAAM,IAAI,OAAO,OAAO,MAAM,GAAG;CACrC,IAAI,MAAM,OAAO,OAAO,UAAU,MAAM,MAAM;CAE9C,MAAM,OACJ,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAK,UAAU,MAAM,IAAI;CACzE,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,GAChC,OAAO,SAAS,KAAK;CAGvB,OAAO;CACP,OAAO;AACT;;AAGA,MAAa,WAAW"}
+{"version":3,"file":"sse.mjs","names":[],"sources":["../../../../../../../ai/src/serve/sse.ts"],"sourcesContent":["/**\n * Encode one Server-Sent-Events frame. Multi-line `data` is split into\n * multiple `data:` lines per the SSE spec, so JSON with embedded newlines\n * still parses on the client.\n *\n * @example\n * encodeSSE({ event: \"agent.trip.streaming\", data: { delta: \"Hi\" } });\n * // \"event: agent.trip.streaming\\ndata: {\\\"delta\\\":\\\"Hi\\\"}\\n\\n\"\n */\nexport function encodeSSE(frame: { event?: string; data: unknown; id?: string }): string {\n  let out = \"\";\n  if (frame.id) out += `id: ${frame.id}\\n`;\n  if (frame.event) out += `event: ${frame.event}\\n`;\n\n  const data =\n    typeof frame.data === \"string\" ? frame.data : JSON.stringify(frame.data);\n  for (const line of data.split(\"\\n\")) {\n    out += `data: ${line}\\n`;\n  }\n\n  out += \"\\n\";\n  return out;\n}\n\n/** The terminal SSE frame a client watches for to stop reading. */\nexport const SSE_DONE = \"data: [DONE]\\n\\n\";\n"],"mappings":";;;;;;;;;;AASA,SAAgB,UAAU,OAA+D;CACvF,IAAI,MAAM;CACV,IAAI,MAAM,IAAI,OAAO,OAAO,MAAM,GAAG;CACrC,IAAI,MAAM,OAAO,OAAO,UAAU,MAAM,MAAM;CAE9C,MAAM,OACJ,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO,KAAK,UAAU,MAAM,IAAI;CACzE,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,GAChC,OAAO,SAAS,KAAK;CAGvB,OAAO;CACP,OAAO;AACT;;AAGA,MAAa,WAAW"}

package/esm/serve/stream-to-sse.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/serve/stream-to-sse.d.ts
+//#region ../ai/src/serve/stream-to-sse.d.ts
 /**
  * A streamable execution: an async iterable of typed events that also
  * exposes the final `result` promise — exactly the shape every primitive's

package/esm/serve/stream-to-sse.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"stream-to-sse.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/stream-to-sse.ts"],"mappings":";;AAOA;;;;KAAY,UAAA;EAA4B,IAAA;AAAA,cACtC,aAAA,CAAc,MAAA;EAAY,MAAA,GAAS,OAAA,CAAQ,OAAA;AAAA;;;;;;;;;;AAAO;AAcpD;;iBAAuB,WAAA;EAA6B,IAAA;AAAA,YAClD,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,OAAA,IAC1B,aAAA"}
+{"version":3,"file":"stream-to-sse.d.mts","names":[],"sources":["../../../../../../../ai/src/serve/stream-to-sse.ts"],"mappings":";;AAOA;;;;KAAY,UAAA;EAA4B,IAAA;AAAA,cACtC,aAAA,CAAc,MAAA;EAAY,MAAA,GAAS,OAAA,CAAQ,OAAA;AAAA;;;;;;;;;;AAAO;AAcpD;;iBAAuB,WAAA;EAA6B,IAAA;AAAA,YAClD,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,OAAA,IAC1B,aAAA"}

package/esm/serve/stream-to-sse.mjs

@@ -1,6 +1,6 @@
 import { SSE_DONE, encodeSSE } from "./sse.mjs";
 
-//#region ../@warlock.js/ai/src/serve/stream-to-sse.ts
+//#region ../ai/src/serve/stream-to-sse.ts
 /**
 * Convert a primitive's event stream into an SSE byte stream (A3): each
 * event becomes an SSE frame named by its `type`, then the final `result`

package/esm/serve/stream-to-sse.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"stream-to-sse.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/serve/stream-to-sse.ts"],"sourcesContent":["import { encodeSSE, SSE_DONE } from \"./sse\";\n\n/**\n * A streamable execution: an async iterable of typed events that also\n * exposes the final `result` promise — exactly the shape every primitive's\n * `stream()` returns ({@link StreamContract}).\n */\nexport type StreamLike<TEvent extends { type: string }, TResult> =\n  AsyncIterable<TEvent> & { result?: Promise<TResult> };\n\n/**\n * Convert a primitive's event stream into an SSE byte stream (A3): each\n * event becomes an SSE frame named by its `type`, then the final `result`\n * (or an `error` frame if it rejects) is emitted, and finally the\n * `[DONE]` sentinel. Pure and transport-agnostic — {@link serve} pipes it\n * to an HTTP response, but it works against any sink.\n *\n * @example\n * for await (const frame of streamToSSE(agent.stream(\"hi\"))) {\n *   res.write(frame);\n * }\n */\nexport async function* streamToSSE<TEvent extends { type: string }, TResult>(\n  stream: StreamLike<TEvent, TResult>,\n): AsyncIterable<string> {\n  for await (const event of stream) {\n    yield encodeSSE({ event: event.type, data: event });\n  }\n\n  if (stream.result) {\n    try {\n      const result = await stream.result;\n      yield encodeSSE({ event: \"result\", data: result });\n    } catch (error) {\n      yield encodeSSE({\n        event: \"error\",\n        data: { message: error instanceof Error ? error.message : String(error) },\n      });\n    }\n  }\n\n  yield SSE_DONE;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAsBA,gBAAuB,YACrB,QACuB;CACvB,WAAW,MAAM,SAAS,QACxB,MAAM,UAAU;EAAE,OAAO,MAAM;EAAM,MAAM;CAAM,CAAC;CAGpD,IAAI,OAAO,QACT,IAAI;EAEF,MAAM,UAAU;GAAE,OAAO;GAAU,MAAM,MADpB,OAAO;EACoB,CAAC;CACnD,SAAS,OAAO;EACd,MAAM,UAAU;GACd,OAAO;GACP,MAAM,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;EAC1E,CAAC;CACH;CAGF,MAAM;AACR"}
+{"version":3,"file":"stream-to-sse.mjs","names":[],"sources":["../../../../../../../ai/src/serve/stream-to-sse.ts"],"sourcesContent":["import { encodeSSE, SSE_DONE } from \"./sse\";\n\n/**\n * A streamable execution: an async iterable of typed events that also\n * exposes the final `result` promise — exactly the shape every primitive's\n * `stream()` returns ({@link StreamContract}).\n */\nexport type StreamLike<TEvent extends { type: string }, TResult> =\n  AsyncIterable<TEvent> & { result?: Promise<TResult> };\n\n/**\n * Convert a primitive's event stream into an SSE byte stream (A3): each\n * event becomes an SSE frame named by its `type`, then the final `result`\n * (or an `error` frame if it rejects) is emitted, and finally the\n * `[DONE]` sentinel. Pure and transport-agnostic — {@link serve} pipes it\n * to an HTTP response, but it works against any sink.\n *\n * @example\n * for await (const frame of streamToSSE(agent.stream(\"hi\"))) {\n *   res.write(frame);\n * }\n */\nexport async function* streamToSSE<TEvent extends { type: string }, TResult>(\n  stream: StreamLike<TEvent, TResult>,\n): AsyncIterable<string> {\n  for await (const event of stream) {\n    yield encodeSSE({ event: event.type, data: event });\n  }\n\n  if (stream.result) {\n    try {\n      const result = await stream.result;\n      yield encodeSSE({ event: \"result\", data: result });\n    } catch (error) {\n      yield encodeSSE({\n        event: \"error\",\n        data: { message: error instanceof Error ? error.message : String(error) },\n      });\n    }\n  }\n\n  yield SSE_DONE;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAsBA,gBAAuB,YACrB,QACuB;CACvB,WAAW,MAAM,SAAS,QACxB,MAAM,UAAU;EAAE,OAAO,MAAM;EAAM,MAAM;CAAM,CAAC;CAGpD,IAAI,OAAO,QACT,IAAI;EAEF,MAAM,UAAU;GAAE,OAAO;GAAU,MAAM,MADpB,OAAO;EACoB,CAAC;CACnD,SAAS,OAAO;EACd,MAAM,UAAU;GACd,OAAO;GACP,MAAM,EAAE,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;EAC1E,CAAC;CACH;CAGF,MAAM;AACR"}

package/esm/skills/catalog.d.mts

@@ -2,7 +2,7 @@ import { EmbedderContract } from "../contracts/embedder.contract.mjs";
 import { SkillCatalogEntry, SkillRecord } from "./contracts/skill-record.type.mjs";
 import { SkillsStoreContract } from "./contracts/skills-store.contract.mjs";
 
-//#region ../@warlock.js/ai/src/skills/catalog.d.ts
+//#region ../ai/src/skills/catalog.d.ts
 /**
  * Merge every source's `list()` into one de-duplicated catalog. Sources
  * are merged in order; a LATER source wins on a name collision (explicit,

package/esm/skills/catalog.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/catalog.ts"],"mappings":";;;;;;;AA+FA;;;;iBAAsB,YAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,KAAA;EAAU,IAAA;AAAA,IACT,OAAA,CAAQ,iBAAA;;;;;;;;iBAqBK,mBAAA,CAAoB,IAAA,UAAc,OAAA,EAAS,iBAAiB;AArBhD;AAqB5B;;;;;AArB4B,iBA6CN,UAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,IAAA,UACA,OAAA,YACC,OAAA,CAAQ,WAAA;;;AA5BmE;AAwB9E;;;;;;;iBA0BsB,iBAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,KAAA,UACA,IAAA,UACA,OAAA;EAAW,QAAA,GAAW,gBAAA;EAAkB,SAAA;EAAoB,KAAA;IAAU,IAAA;EAAA;AAAA,IACrE,OAAA,CAAQ,WAAA"}
+{"version":3,"file":"catalog.d.mts","names":[],"sources":["../../../../../../../ai/src/skills/catalog.ts"],"mappings":";;;;;;;AA+FA;;;;iBAAsB,YAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,KAAA;EAAU,IAAA;AAAA,IACT,OAAA,CAAQ,iBAAA;;;;;;;;iBAqBK,mBAAA,CAAoB,IAAA,UAAc,OAAA,EAAS,iBAAiB;AArBhD;AAqB5B;;;;;AArB4B,iBA6CN,UAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,IAAA,UACA,OAAA,YACC,OAAA,CAAQ,WAAA;;;AA5BmE;AAwB9E;;;;;;;iBA0BsB,iBAAA,CACpB,MAAA,EAAQ,mBAAA,IACR,KAAA,UACA,IAAA,UACA,OAAA;EAAW,QAAA,GAAW,gBAAA;EAAkB,SAAA;EAAoB,KAAA;IAAU,IAAA;EAAA;AAAA,IACrE,OAAA,CAAQ,WAAA"}

package/esm/skills/catalog.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/skills/catalog.ts
+//#region ../ai/src/skills/catalog.ts
 let isEmbedderPeerInstalled = null;
 let loadingPromise;
 const EMBEDDER_INSTALL_INSTRUCTIONS = `

package/esm/skills/catalog.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"catalog.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/catalog.ts"],"sourcesContent":["import type { EmbedderContract } from \"../contracts/embedder.contract\";\nimport type {\n  SkillCatalogEntry,\n  SkillRecord,\n} from \"./contracts/skill-record.type\";\nimport type { SkillsStoreContract } from \"./contracts/skills-store.contract\";\n\n// ============================================================\n// Optional embedder (OPTIONAL peer)\n// ============================================================\n//\n// The embedder is needed ONLY for `inject.select === \"semantic\"`. It is\n// passed explicitly via `inject.embedder` in the common case (consumers\n// reuse the one they built for `ai.memory()`). When a consumer relies on\n// an auto-resolved embedder instead, the canonical lazy-peer probe below\n// surfaces a curated install string at USE TIME (first semantic preload)\n// rather than a raw module-resolution stack trace. Catalog-only /\n// loadSkill-only usage never touches this path.\n\nlet isEmbedderPeerInstalled: boolean | null = null;\nlet loadingPromise: Promise<void> | undefined;\n\nconst EMBEDDER_INSTALL_INSTRUCTIONS = `\nSemantic skill pre-injection ({ inject: { select: \"semantic\" } }) needs an\nembedder. Pass one explicitly (reuse the one you built for ai.memory()):\n\n  skills({ inject: { select: \"semantic\", topK: 2, embedder } })\n\nor install an embedder provider:\n\n  npm install @warlock.js/ai-openai\n\nOr with your preferred package manager:\n\n  pnpm add @warlock.js/ai-openai\n  yarn add @warlock.js/ai-openai\n\nThen build one with \\`new OpenAIEmbedder(client, { name: \"text-embedding-3-small\" })\\`\nand pass it via \\`inject.embedder\\`.\n`.trim();\n\n/**\n * Probe for an installed embedder provider once, concurrency-safe. A bare\n * `catch` flips the flag to `false`; the curated install string surfaces\n * at use time. The provider's embedder needs a constructed SDK client, so\n * we cannot auto-build one — the probe only decides whether the curated\n * message should mention installing the package vs. just passing one in.\n */\nfunction probeEmbedderPeer(): Promise<void> {\n  if (isEmbedderPeerInstalled !== null) {\n    return Promise.resolve();\n  }\n\n  if (loadingPromise) {\n    return loadingPromise;\n  }\n\n  loadingPromise = (async () => {\n    try {\n      await import(\"@warlock.js/ai-openai\");\n      isEmbedderPeerInstalled = true;\n    } catch {\n      isEmbedderPeerInstalled = false;\n    }\n  })();\n\n  return loadingPromise;\n}\n\n/**\n * Resolve the embedder for semantic selection. The explicit\n * `inject.embedder` always wins. With none supplied, the lazy probe runs\n * and the curated install string is thrown at use time — a provider's\n * embedder requires a constructed client, so there is no safe auto-build.\n */\nasync function resolveEmbedder(explicit?: EmbedderContract): Promise<EmbedderContract> {\n  if (explicit) {\n    return explicit;\n  }\n\n  // Warm the peer probe non-blockingly (so a future explicit call can hint\n  // whether to install vs. just pass one in) but do NOT await it — a\n  // provider's embedder needs a constructed client, so there is no safe\n  // auto-build either way and the throw is immediate.\n  void probeEmbedderPeer();\n\n  throw new Error(EMBEDDER_INSTALL_INSTRUCTIONS);\n}\n\n/**\n * Merge every source's `list()` into one de-duplicated catalog. Sources\n * are merged in order; a LATER source wins on a name collision (explicit,\n * documented precedence). Candidates are already filtered by each store's\n * `list()`, so the merged catalog never carries an inert candidate.\n */\nexport async function buildCatalog(\n  stores: SkillsStoreContract[],\n  scope?: { tags?: string[] },\n): Promise<SkillCatalogEntry[]> {\n  const merged = new Map<string, SkillCatalogEntry>();\n\n  for (const store of stores) {\n    const entries = await store.list(scope);\n\n    for (const entry of entries) {\n      merged.set(entry.name, entry);\n    }\n  }\n\n  return [...merged.values()];\n}\n\n/**\n * Render the catalog as one line per skill — `name`, `version`,\n * `description` — matching the projection `scripts/generate-llms.mjs`\n * emits for `llms.txt` so the runtime catalog and the docs index read\n * identically. Returns an empty string when no skills are in scope so the\n * agent prepends nothing.\n */\nexport function renderCatalogPrompt(name: string, entries: SkillCatalogEntry[]): string {\n  if (entries.length === 0) {\n    return \"\";\n  }\n\n  const lines = entries.map(\n    (entry) => `- ${entry.name} (v${entry.version}): ${entry.description}`,\n  );\n\n  return [\n    `# Available skills — \"${name}\"`,\n    \"\",\n    \"You can load any of the following skills on demand with the `loadSkill` tool to pull its full instructions into context:\",\n    \"\",\n    ...lines,\n  ].join(\"\\n\");\n}\n\n/**\n * Load the full record for `name` across the merged sources, honoring the\n * later-source-wins precedence: the FIRST store (iterating in reverse) to\n * return a hit owns the name. A pinned `version` narrows the lookup.\n * Returns `undefined` when no source has the skill.\n */\nexport async function loadRecord(\n  stores: SkillsStoreContract[],\n  name: string,\n  version?: number,\n): Promise<SkillRecord | undefined> {\n  for (let index = stores.length - 1; index >= 0; index--) {\n    const record = await stores[index].load(name, version);\n\n    if (record) {\n      return record;\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Rank the in-scope catalog by cosine similarity to `input` and return the\n * full `SkillRecord`s for the top `topK` clearing `threshold`.\n *\n * Embeds `input` and every catalog `description` via the resolved\n * embedder (explicit `inject.embedder`, else the lazy provider), scores by\n * cosine similarity, sorts descending, applies the optional floor, slices\n * to `topK`, then loads those bodies. The embedder is the only optional\n * dependency this whole feature carries.\n */\nexport async function semanticPreselect(\n  stores: SkillsStoreContract[],\n  input: string,\n  topK: number,\n  options: { embedder?: EmbedderContract; threshold?: number; scope?: { tags?: string[] } } = {},\n): Promise<SkillRecord[]> {\n  const catalog = await buildCatalog(stores, options.scope);\n\n  if (catalog.length === 0 || topK <= 0) {\n    return [];\n  }\n\n  const embedder = await resolveEmbedder(options.embedder);\n\n  const { vectors } = await embedder.embedMany([\n    input,\n    ...catalog.map((entry) => entry.description),\n  ]);\n\n  const inputVector = vectors[0];\n  const threshold = options.threshold ?? 0;\n\n  const scored = catalog\n    .map((entry, index) => ({\n      entry,\n      score: cosineSimilarity(inputVector, vectors[index + 1]),\n    }))\n    .filter((candidate) => candidate.score >= threshold)\n    .sort((first, second) => second.score - first.score)\n    .slice(0, topK);\n\n  const records: SkillRecord[] = [];\n\n  for (const candidate of scored) {\n    const record = await loadRecord(stores, candidate.entry.name, candidate.entry.version);\n\n    if (record) {\n      records.push(record);\n    }\n  }\n\n  return records;\n}\n\n/** Cosine similarity of two equal-length vectors; `0` when either is degenerate. */\nfunction cosineSimilarity(a: number[], b: number[]): number {\n  let dot = 0;\n  let normA = 0;\n  let normB = 0;\n\n  for (let index = 0; index < a.length; index++) {\n    dot += a[index] * b[index];\n    normA += a[index] * a[index];\n    normB += b[index] * b[index];\n  }\n\n  if (normA === 0 || normB === 0) {\n    return 0;\n  }\n\n  return dot / (Math.sqrt(normA) * Math.sqrt(normB));\n}\n"],"mappings":";AAmBA,IAAI,0BAA0C;AAC9C,IAAI;AAEJ,MAAM,gCAAgC;;;;;;;;;;;;;;;;;EAiBpC,KAAK;;;;;;;;AASP,SAAS,oBAAmC;CAC1C,IAAI,4BAA4B,MAC9B,OAAO,QAAQ,QAAQ;CAGzB,IAAI,gBACF,OAAO;CAGT,kBAAkB,YAAY;EAC5B,IAAI;GACF,MAAM,OAAO;GACb,0BAA0B;EAC5B,QAAQ;GACN,0BAA0B;EAC5B;CACF,EAAC,CAAE;CAEH,OAAO;AACT;;;;;;;AAQA,eAAe,gBAAgB,UAAwD;CACrF,IAAI,UACF,OAAO;CAOT,AAAK,kBAAkB;CAEvB,MAAM,IAAI,MAAM,6BAA6B;AAC/C;;;;;;;AAQA,eAAsB,aACpB,QACA,OAC8B;CAC9B,MAAM,yBAAS,IAAI,IAA+B;CAElD,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UAAU,MAAM,MAAM,KAAK,KAAK;EAEtC,KAAK,MAAM,SAAS,SAClB,OAAO,IAAI,MAAM,MAAM,KAAK;CAEhC;CAEA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;;;;;;;;AASA,SAAgB,oBAAoB,MAAc,SAAsC;CACtF,IAAI,QAAQ,WAAW,GACrB,OAAO;CAGT,MAAM,QAAQ,QAAQ,KACnB,UAAU,KAAK,MAAM,KAAK,KAAK,MAAM,QAAQ,KAAK,MAAM,aAC3D;CAEA,OAAO;EACL,yBAAyB,KAAK;EAC9B;EACA;EACA;EACA,GAAG;CACL,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;AAQA,eAAsB,WACpB,QACA,MACA,SACkC;CAClC,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;EACvD,MAAM,SAAS,MAAM,OAAO,MAAM,CAAC,KAAK,MAAM,OAAO;EAErD,IAAI,QACF,OAAO;CAEX;AAGF;;;;;;;;;;;AAYA,eAAsB,kBACpB,QACA,OACA,MACA,UAA4F,CAAC,GACrE;CACxB,MAAM,UAAU,MAAM,aAAa,QAAQ,QAAQ,KAAK;CAExD,IAAI,QAAQ,WAAW,KAAK,QAAQ,GAClC,OAAO,CAAC;CAKV,MAAM,EAAE,YAAY,OAAM,MAFH,gBAAgB,QAAQ,QAAQ,EAErB,CAAC,UAAU,CAC3C,OACA,GAAG,QAAQ,KAAK,UAAU,MAAM,WAAW,CAC7C,CAAC;CAED,MAAM,cAAc,QAAQ;CAC5B,MAAM,YAAY,QAAQ,aAAa;CAEvC,MAAM,SAAS,QACZ,KAAK,OAAO,WAAW;EACtB;EACA,OAAO,iBAAiB,aAAa,QAAQ,QAAQ,EAAE;CACzD,EAAE,CAAC,CACF,QAAQ,cAAc,UAAU,SAAS,SAAS,CAAC,CACnD,MAAM,OAAO,WAAW,OAAO,QAAQ,MAAM,KAAK,CAAC,CACnD,MAAM,GAAG,IAAI;CAEhB,MAAM,UAAyB,CAAC;CAEhC,KAAK,MAAM,aAAa,QAAQ;EAC9B,MAAM,SAAS,MAAM,WAAW,QAAQ,UAAU,MAAM,MAAM,UAAU,MAAM,OAAO;EAErF,IAAI,QACF,QAAQ,KAAK,MAAM;CAEvB;CAEA,OAAO;AACT;;AAGA,SAAS,iBAAiB,GAAa,GAAqB;CAC1D,IAAI,MAAM;CACV,IAAI,QAAQ;CACZ,IAAI,QAAQ;CAEZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,EAAE,QAAQ,SAAS;EAC7C,OAAO,EAAE,SAAS,EAAE;EACpB,SAAS,EAAE,SAAS,EAAE;EACtB,SAAS,EAAE,SAAS,EAAE;CACxB;CAEA,IAAI,UAAU,KAAK,UAAU,GAC3B,OAAO;CAGT,OAAO,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;AAClD"}
+{"version":3,"file":"catalog.mjs","names":[],"sources":["../../../../../../../ai/src/skills/catalog.ts"],"sourcesContent":["import type { EmbedderContract } from \"../contracts/embedder.contract\";\nimport type {\n  SkillCatalogEntry,\n  SkillRecord,\n} from \"./contracts/skill-record.type\";\nimport type { SkillsStoreContract } from \"./contracts/skills-store.contract\";\n\n// ============================================================\n// Optional embedder (OPTIONAL peer)\n// ============================================================\n//\n// The embedder is needed ONLY for `inject.select === \"semantic\"`. It is\n// passed explicitly via `inject.embedder` in the common case (consumers\n// reuse the one they built for `ai.memory()`). When a consumer relies on\n// an auto-resolved embedder instead, the canonical lazy-peer probe below\n// surfaces a curated install string at USE TIME (first semantic preload)\n// rather than a raw module-resolution stack trace. Catalog-only /\n// loadSkill-only usage never touches this path.\n\nlet isEmbedderPeerInstalled: boolean | null = null;\nlet loadingPromise: Promise<void> | undefined;\n\nconst EMBEDDER_INSTALL_INSTRUCTIONS = `\nSemantic skill pre-injection ({ inject: { select: \"semantic\" } }) needs an\nembedder. Pass one explicitly (reuse the one you built for ai.memory()):\n\n  skills({ inject: { select: \"semantic\", topK: 2, embedder } })\n\nor install an embedder provider:\n\n  npm install @warlock.js/ai-openai\n\nOr with your preferred package manager:\n\n  pnpm add @warlock.js/ai-openai\n  yarn add @warlock.js/ai-openai\n\nThen build one with \\`new OpenAIEmbedder(client, { name: \"text-embedding-3-small\" })\\`\nand pass it via \\`inject.embedder\\`.\n`.trim();\n\n/**\n * Probe for an installed embedder provider once, concurrency-safe. A bare\n * `catch` flips the flag to `false`; the curated install string surfaces\n * at use time. The provider's embedder needs a constructed SDK client, so\n * we cannot auto-build one — the probe only decides whether the curated\n * message should mention installing the package vs. just passing one in.\n */\nfunction probeEmbedderPeer(): Promise<void> {\n  if (isEmbedderPeerInstalled !== null) {\n    return Promise.resolve();\n  }\n\n  if (loadingPromise) {\n    return loadingPromise;\n  }\n\n  loadingPromise = (async () => {\n    try {\n      await import(\"@warlock.js/ai-openai\");\n      isEmbedderPeerInstalled = true;\n    } catch {\n      isEmbedderPeerInstalled = false;\n    }\n  })();\n\n  return loadingPromise;\n}\n\n/**\n * Resolve the embedder for semantic selection. The explicit\n * `inject.embedder` always wins. With none supplied, the lazy probe runs\n * and the curated install string is thrown at use time — a provider's\n * embedder requires a constructed client, so there is no safe auto-build.\n */\nasync function resolveEmbedder(explicit?: EmbedderContract): Promise<EmbedderContract> {\n  if (explicit) {\n    return explicit;\n  }\n\n  // Warm the peer probe non-blockingly (so a future explicit call can hint\n  // whether to install vs. just pass one in) but do NOT await it — a\n  // provider's embedder needs a constructed client, so there is no safe\n  // auto-build either way and the throw is immediate.\n  void probeEmbedderPeer();\n\n  throw new Error(EMBEDDER_INSTALL_INSTRUCTIONS);\n}\n\n/**\n * Merge every source's `list()` into one de-duplicated catalog. Sources\n * are merged in order; a LATER source wins on a name collision (explicit,\n * documented precedence). Candidates are already filtered by each store's\n * `list()`, so the merged catalog never carries an inert candidate.\n */\nexport async function buildCatalog(\n  stores: SkillsStoreContract[],\n  scope?: { tags?: string[] },\n): Promise<SkillCatalogEntry[]> {\n  const merged = new Map<string, SkillCatalogEntry>();\n\n  for (const store of stores) {\n    const entries = await store.list(scope);\n\n    for (const entry of entries) {\n      merged.set(entry.name, entry);\n    }\n  }\n\n  return [...merged.values()];\n}\n\n/**\n * Render the catalog as one line per skill — `name`, `version`,\n * `description` — matching the projection `scripts/generate-llms.mjs`\n * emits for `llms.txt` so the runtime catalog and the docs index read\n * identically. Returns an empty string when no skills are in scope so the\n * agent prepends nothing.\n */\nexport function renderCatalogPrompt(name: string, entries: SkillCatalogEntry[]): string {\n  if (entries.length === 0) {\n    return \"\";\n  }\n\n  const lines = entries.map(\n    (entry) => `- ${entry.name} (v${entry.version}): ${entry.description}`,\n  );\n\n  return [\n    `# Available skills — \"${name}\"`,\n    \"\",\n    \"You can load any of the following skills on demand with the `loadSkill` tool to pull its full instructions into context:\",\n    \"\",\n    ...lines,\n  ].join(\"\\n\");\n}\n\n/**\n * Load the full record for `name` across the merged sources, honoring the\n * later-source-wins precedence: the FIRST store (iterating in reverse) to\n * return a hit owns the name. A pinned `version` narrows the lookup.\n * Returns `undefined` when no source has the skill.\n */\nexport async function loadRecord(\n  stores: SkillsStoreContract[],\n  name: string,\n  version?: number,\n): Promise<SkillRecord | undefined> {\n  for (let index = stores.length - 1; index >= 0; index--) {\n    const record = await stores[index].load(name, version);\n\n    if (record) {\n      return record;\n    }\n  }\n\n  return undefined;\n}\n\n/**\n * Rank the in-scope catalog by cosine similarity to `input` and return the\n * full `SkillRecord`s for the top `topK` clearing `threshold`.\n *\n * Embeds `input` and every catalog `description` via the resolved\n * embedder (explicit `inject.embedder`, else the lazy provider), scores by\n * cosine similarity, sorts descending, applies the optional floor, slices\n * to `topK`, then loads those bodies. The embedder is the only optional\n * dependency this whole feature carries.\n */\nexport async function semanticPreselect(\n  stores: SkillsStoreContract[],\n  input: string,\n  topK: number,\n  options: { embedder?: EmbedderContract; threshold?: number; scope?: { tags?: string[] } } = {},\n): Promise<SkillRecord[]> {\n  const catalog = await buildCatalog(stores, options.scope);\n\n  if (catalog.length === 0 || topK <= 0) {\n    return [];\n  }\n\n  const embedder = await resolveEmbedder(options.embedder);\n\n  const { vectors } = await embedder.embedMany([\n    input,\n    ...catalog.map((entry) => entry.description),\n  ]);\n\n  const inputVector = vectors[0];\n  const threshold = options.threshold ?? 0;\n\n  const scored = catalog\n    .map((entry, index) => ({\n      entry,\n      score: cosineSimilarity(inputVector, vectors[index + 1]),\n    }))\n    .filter((candidate) => candidate.score >= threshold)\n    .sort((first, second) => second.score - first.score)\n    .slice(0, topK);\n\n  const records: SkillRecord[] = [];\n\n  for (const candidate of scored) {\n    const record = await loadRecord(stores, candidate.entry.name, candidate.entry.version);\n\n    if (record) {\n      records.push(record);\n    }\n  }\n\n  return records;\n}\n\n/** Cosine similarity of two equal-length vectors; `0` when either is degenerate. */\nfunction cosineSimilarity(a: number[], b: number[]): number {\n  let dot = 0;\n  let normA = 0;\n  let normB = 0;\n\n  for (let index = 0; index < a.length; index++) {\n    dot += a[index] * b[index];\n    normA += a[index] * a[index];\n    normB += b[index] * b[index];\n  }\n\n  if (normA === 0 || normB === 0) {\n    return 0;\n  }\n\n  return dot / (Math.sqrt(normA) * Math.sqrt(normB));\n}\n"],"mappings":";AAmBA,IAAI,0BAA0C;AAC9C,IAAI;AAEJ,MAAM,gCAAgC;;;;;;;;;;;;;;;;;EAiBpC,KAAK;;;;;;;;AASP,SAAS,oBAAmC;CAC1C,IAAI,4BAA4B,MAC9B,OAAO,QAAQ,QAAQ;CAGzB,IAAI,gBACF,OAAO;CAGT,kBAAkB,YAAY;EAC5B,IAAI;GACF,MAAM,OAAO;GACb,0BAA0B;EAC5B,QAAQ;GACN,0BAA0B;EAC5B;CACF,EAAC,CAAE;CAEH,OAAO;AACT;;;;;;;AAQA,eAAe,gBAAgB,UAAwD;CACrF,IAAI,UACF,OAAO;CAOT,AAAK,kBAAkB;CAEvB,MAAM,IAAI,MAAM,6BAA6B;AAC/C;;;;;;;AAQA,eAAsB,aACpB,QACA,OAC8B;CAC9B,MAAM,yBAAS,IAAI,IAA+B;CAElD,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UAAU,MAAM,MAAM,KAAK,KAAK;EAEtC,KAAK,MAAM,SAAS,SAClB,OAAO,IAAI,MAAM,MAAM,KAAK;CAEhC;CAEA,OAAO,CAAC,GAAG,OAAO,OAAO,CAAC;AAC5B;;;;;;;;AASA,SAAgB,oBAAoB,MAAc,SAAsC;CACtF,IAAI,QAAQ,WAAW,GACrB,OAAO;CAGT,MAAM,QAAQ,QAAQ,KACnB,UAAU,KAAK,MAAM,KAAK,KAAK,MAAM,QAAQ,KAAK,MAAM,aAC3D;CAEA,OAAO;EACL,yBAAyB,KAAK;EAC9B;EACA;EACA;EACA,GAAG;CACL,CAAC,CAAC,KAAK,IAAI;AACb;;;;;;;AAQA,eAAsB,WACpB,QACA,MACA,SACkC;CAClC,KAAK,IAAI,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;EACvD,MAAM,SAAS,MAAM,OAAO,MAAM,CAAC,KAAK,MAAM,OAAO;EAErD,IAAI,QACF,OAAO;CAEX;AAGF;;;;;;;;;;;AAYA,eAAsB,kBACpB,QACA,OACA,MACA,UAA4F,CAAC,GACrE;CACxB,MAAM,UAAU,MAAM,aAAa,QAAQ,QAAQ,KAAK;CAExD,IAAI,QAAQ,WAAW,KAAK,QAAQ,GAClC,OAAO,CAAC;CAKV,MAAM,EAAE,YAAY,OAAM,MAFH,gBAAgB,QAAQ,QAAQ,EAErB,CAAC,UAAU,CAC3C,OACA,GAAG,QAAQ,KAAK,UAAU,MAAM,WAAW,CAC7C,CAAC;CAED,MAAM,cAAc,QAAQ;CAC5B,MAAM,YAAY,QAAQ,aAAa;CAEvC,MAAM,SAAS,QACZ,KAAK,OAAO,WAAW;EACtB;EACA,OAAO,iBAAiB,aAAa,QAAQ,QAAQ,EAAE;CACzD,EAAE,CAAC,CACF,QAAQ,cAAc,UAAU,SAAS,SAAS,CAAC,CACnD,MAAM,OAAO,WAAW,OAAO,QAAQ,MAAM,KAAK,CAAC,CACnD,MAAM,GAAG,IAAI;CAEhB,MAAM,UAAyB,CAAC;CAEhC,KAAK,MAAM,aAAa,QAAQ;EAC9B,MAAM,SAAS,MAAM,WAAW,QAAQ,UAAU,MAAM,MAAM,UAAU,MAAM,OAAO;EAErF,IAAI,QACF,QAAQ,KAAK,MAAM;CAEvB;CAEA,OAAO;AACT;;AAGA,SAAS,iBAAiB,GAAa,GAAqB;CAC1D,IAAI,MAAM;CACV,IAAI,QAAQ;CACZ,IAAI,QAAQ;CAEZ,KAAK,IAAI,QAAQ,GAAG,QAAQ,EAAE,QAAQ,SAAS;EAC7C,OAAO,EAAE,SAAS,EAAE;EACpB,SAAS,EAAE,SAAS,EAAE;EACtB,SAAS,EAAE,SAAS,EAAE;CACxB;CAEA,IAAI,UAAU,KAAK,UAAU,GAC3B,OAAO;CAGT,OAAO,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,KAAK;AAClD"}

package/esm/skills/contracts/skill-record.type.d.mts

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/skills/contracts/skill-record.type.d.ts
+//#region ../ai/src/skills/contracts/skill-record.type.d.ts
 /**
  * The parsed front-matter + body of a single runtime skill, as loaded
  * from a {@link SkillSource}.

package/esm/skills/contracts/skill-record.type.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-record.type.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/ai/src/skills/contracts/skill-record.type.ts"],"mappings":";;AASA;;;;;;;;KAAY,WAAA;EAYV,+DAVA,IAAA,UAYW;EAVX,WAAA,UAUiB;EARjB,OAAA,UAgB2B;EAd3B,IAAA,UAc8B;EAZ9B,IAAA,aAsBU;EApBV,IAAA;EAEA,QAAA,GAAW,MAAM;AAAA;;;;;;KAQP,iBAAA,GAAoB,IAAI,CAClC,WAAA;;;;;;KASU,cAAA;EAAmB,IAAA;EAAc,OAAO;AAAA"}
+{"version":3,"file":"skill-record.type.d.mts","names":[],"sources":["../../../../../../../../ai/src/skills/contracts/skill-record.type.ts"],"mappings":";;AASA;;;;;;;;KAAY,WAAA;EAYV,+DAVA,IAAA,UAYW;EAVX,WAAA,UAUiB;EARjB,OAAA,UAgB2B;EAd3B,IAAA,UAc8B;EAZ9B,IAAA,aAsBU;EApBV,IAAA;EAEA,QAAA,GAAW,MAAM;AAAA;;;;;;KAQP,iBAAA,GAAoB,IAAI,CAClC,WAAA;;;;;;KASU,cAAA;EAAmB,IAAA;EAAc,OAAO;AAAA"}

package/esm/skills/contracts/skills-config.type.d.mts

@@ -3,7 +3,7 @@ import { EmbedderContract } from "../../contracts/embedder.contract.mjs";
 import { SkillRecord } from "./skill-record.type.mjs";
 import { SkillsStoreContract } from "./skills-store.contract.mjs";
 
-//#region ../@warlock.js/ai/src/skills/contracts/skills-config.type.d.ts
+//#region ../ai/src/skills/contracts/skills-config.type.d.ts
 /**
  * Where skills come from. Discriminated by `type` (never `kind`):
  *

package/esm/skills/contracts/skills-config.type.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"skills-config.type.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/ai/src/skills/contracts/skills-config.type.ts"],"mappings":";;;;;;;;AAiBA;;;;;;;;;;KAAY,WAAA;EACN,IAAA;EAAmB,IAAA;AAAA;EAEnB,IAAA;EACA,GAAA;EACA,OAAA,GAAU,MAAA;EAeV;;;;AAAyC;AAU/C;;EAjBM,MAAA,GAAS,cAAA;EAsBkB;;;;EAjB3B,UAAA;AAAA;EAEA,IAAA;EAAe,KAAA,EAAO,mBAAA;AAAA;;;;;;;;;KAUhB,eAAA;EAGN,MAAA;EACA,IAAA;EACA,QAAA,GAAW,gBAAgB;EAC3B,SAAA;AAAA;;;AAgBsB;AAO5B;;;;;;KAXY,eAAA;EAeV,uFAbA,OAAA,GAAU,SAAA,EAAW,WAAA,KAAgB,OAAA;IAAU,OAAA;IAAkB,MAAA;EAAA,IAwB3C;EAtBtB,KAAA,EAAO,mBAAA;AAAA;;;;;KAOG,mBAAA;EACV,IAAA;EACA,KAAA;EACA,OAAA;EACA,KAAA;EACA,OAAA;AAAA;;;;;;;;KAUU,YAAA;EAiByC,4EAfnD,IAAA,UAe0D;EAb1D,OAAA,EAAS,WAAA;;;;;EAKT,MAAA,GAAS,eAAA;EAET,cAAA;EAEA,KAAA;IAAU,IAAA;EAAA;EAEV,MAAA,GAAS,eAAA;EAET,SAAA,IAAa,KAAA,EAAO,mBAAA,YAA+B,OAAA;AAAA"}
+{"version":3,"file":"skills-config.type.d.mts","names":[],"sources":["../../../../../../../../ai/src/skills/contracts/skills-config.type.ts"],"mappings":";;;;;;;;AAiBA;;;;;;;;;;KAAY,WAAA;EACN,IAAA;EAAmB,IAAA;AAAA;EAEnB,IAAA;EACA,GAAA;EACA,OAAA,GAAU,MAAA;EAeV;;;;AAAyC;AAU/C;;EAjBM,MAAA,GAAS,cAAA;EAsBkB;;;;EAjB3B,UAAA;AAAA;EAEA,IAAA;EAAe,KAAA,EAAO,mBAAA;AAAA;;;;;;;;;KAUhB,eAAA;EAGN,MAAA;EACA,IAAA;EACA,QAAA,GAAW,gBAAgB;EAC3B,SAAA;AAAA;;;AAgBsB;AAO5B;;;;;;KAXY,eAAA;EAeV,uFAbA,OAAA,GAAU,SAAA,EAAW,WAAA,KAAgB,OAAA;IAAU,OAAA;IAAkB,MAAA;EAAA,IAwB3C;EAtBtB,KAAA,EAAO,mBAAA;AAAA;;;;;KAOG,mBAAA;EACV,IAAA;EACA,KAAA;EACA,OAAA;EACA,KAAA;EACA,OAAA;AAAA;;;;;;;;KAUU,YAAA;EAiByC,4EAfnD,IAAA,UAe0D;EAb1D,OAAA,EAAS,WAAA;;;;;EAKT,MAAA,GAAS,eAAA;EAET,cAAA;EAEA,KAAA;IAAU,IAAA;EAAA;EAEV,MAAA,GAAS,eAAA;EAET,SAAA,IAAa,KAAA,EAAO,mBAAA,YAA+B,OAAA;AAAA"}

package/esm/skills/contracts/skills-store.contract.d.mts

@@ -1,6 +1,6 @@
 import { SkillCatalogEntry, SkillRecord } from "./skill-record.type.mjs";
 
-//#region ../@warlock.js/ai/src/skills/contracts/skills-store.contract.d.ts
+//#region ../ai/src/skills/contracts/skills-store.contract.d.ts
 /**
  * Provider-neutral contract for a skills backing store.
  *

package/esm/skills/contracts/skills-store.contract.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"skills-store.contract.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/ai/src/skills/contracts/skills-store.contract.ts"],"mappings":";;;;;AAYA;;;;;;;;UAAiB,mBAAA;EAMuD;EAJtE,IAAA,CAAK,KAAA;IAAU,IAAA;EAAA,IAAoB,OAAA,CAAQ,iBAAA;EAMb;EAJ9B,IAAA,CAAK,IAAA,UAAc,OAAA,YAAmB,OAAA,CAAQ,WAAA;EAF9C;EAIA,aAAA,CAAc,MAAA,EAAQ,IAAA,CAAK,WAAA,wBAAmC,OAAA,CAAQ,WAAA;EAJjE;EAML,OAAA,CAAQ,IAAA,WAAe,OAAA,CAAQ,WAAA;AAAA"}
+{"version":3,"file":"skills-store.contract.d.mts","names":[],"sources":["../../../../../../../../ai/src/skills/contracts/skills-store.contract.ts"],"mappings":";;;;;AAYA;;;;;;;;UAAiB,mBAAA;EAMuD;EAJtE,IAAA,CAAK,KAAA;IAAU,IAAA;EAAA,IAAoB,OAAA,CAAQ,iBAAA;EAMb;EAJ9B,IAAA,CAAK,IAAA,UAAc,OAAA,YAAmB,OAAA,CAAQ,WAAA;EAF9C;EAIA,aAAA,CAAc,MAAA,EAAQ,IAAA,CAAK,WAAA,wBAAmC,OAAA,CAAQ,WAAA;EAJjE;EAML,OAAA,CAAQ,IAAA,WAAe,OAAA,CAAQ,WAAA;AAAA"}

package/esm/skills/contracts/skills.contract.d.mts

@@ -1,7 +1,7 @@
 import { AgentToolEntry } from "../../tool/executable-as-tool.mjs";
 import { SkillCatalogEntry, SkillRecord } from "./skill-record.type.mjs";
 
-//#region ../@warlock.js/ai/src/skills/contracts/skills.contract.d.ts
+//#region ../ai/src/skills/contracts/skills.contract.d.ts
 /**
  * The runtime produced by the `skills(config)` factory. Its only job is
  * to produce the **agent-facing wiring** — a system-prompt prefix (the

package/esm/skills/contracts/skills.contract.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.contract.d.mts","names":[],"sources":["../../../../../../../../@warlock.js/ai/src/skills/contracts/skills.contract.ts"],"mappings":";;;;;;AAgBA;;;;;;;;;;;UAAiB,cAAA;EAQf;EAAA,SANS,IAAA;EAMqB;;;;;EAA9B,OAAA,CAAQ,UAAA,YAAsB,OAAA,CAAQ,iBAAA;EAQhC;EANN,aAAA,CAAc,UAAA,YAAsB,OAAA;EAWpC;;;;;EALA,KAAA,CAAM,KAAA,YAAiB,cAAA;;;;;EAKvB,OAAA,CAAQ,KAAA,WAAgB,OAAA,CAAQ,WAAA;AAAA"}
+{"version":3,"file":"skills.contract.d.mts","names":[],"sources":["../../../../../../../../ai/src/skills/contracts/skills.contract.ts"],"mappings":";;;;;;AAgBA;;;;;;;;;;;UAAiB,cAAA;EAQf;EAAA,SANS,IAAA;EAMqB;;;;;EAA9B,OAAA,CAAQ,UAAA,YAAsB,OAAA,CAAQ,iBAAA;EAQhC;EANN,aAAA,CAAc,UAAA,YAAsB,OAAA;EAWpC;;;;;EALA,KAAA,CAAM,KAAA,YAAiB,cAAA;;;;;EAKvB,OAAA,CAAQ,KAAA,WAAgB,OAAA,CAAQ,WAAA;AAAA"}

package/esm/skills/load-skill-tool.d.mts

@@ -1,7 +1,7 @@
 import { ToolContract } from "../tool/tool.mjs";
 import { LoadSkillInput, SkillRecord } from "./contracts/skill-record.type.mjs";
 
-//#region ../@warlock.js/ai/src/skills/load-skill-tool.d.ts
+//#region ../ai/src/skills/load-skill-tool.d.ts
 /** Result the `loadSkill` tool feeds back to the model. */
 type LoadSkillResult = {
   body: string;

package/esm/skills/load-skill-tool.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"load-skill-tool.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/load-skill-tool.ts"],"mappings":";;;;;KASY,eAAA;EACN,IAAA;EAAc,IAAA;EAAc,OAAA;AAAA;EAC5B,KAAA;AAAA;;KAqCM,iBAAA;EArCD,+DAuCT,IAAA,GAAO,IAAA,UAAc,OAAA,cAAqB,OAAA,CAAQ,WAAA,eAFxC;EAIV,cAAA;EAEA,QAAA,IAAY,MAAA,EAAQ,WAAA;AAAA;;;;;;;;;;;;;;AAAW;AAmBjC;;iBAAgB,aAAA,CAAc,IAAA,EAAM,iBAAA,GAAoB,YAAA,CAAa,cAAA,EAAgB,eAAA"}
+{"version":3,"file":"load-skill-tool.d.mts","names":[],"sources":["../../../../../../../ai/src/skills/load-skill-tool.ts"],"mappings":";;;;;KASY,eAAA;EACN,IAAA;EAAc,IAAA;EAAc,OAAA;AAAA;EAC5B,KAAA;AAAA;;KAqCM,iBAAA;EArCD,+DAuCT,IAAA,GAAO,IAAA,UAAc,OAAA,cAAqB,OAAA,CAAQ,WAAA,eAFxC;EAIV,cAAA;EAEA,QAAA,IAAY,MAAA,EAAQ,WAAA;AAAA;;;;;;;;;;;;;;AAAW;AAmBjC;;iBAAgB,aAAA,CAAc,IAAA,EAAM,iBAAA,GAAoB,YAAA,CAAa,cAAA,EAAgB,eAAA"}

package/esm/skills/load-skill-tool.mjs

@@ -1,6 +1,6 @@
 import { tool } from "../tool/tool.mjs";
 
-//#region ../@warlock.js/ai/src/skills/load-skill-tool.ts
+//#region ../ai/src/skills/load-skill-tool.ts
 /**
 * Hand-built, schema-library-agnostic Standard Schema for
 * `{ name: string; version?: number }` — built without `seal` / `zod` so

package/esm/skills/load-skill-tool.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"load-skill-tool.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/load-skill-tool.ts"],"sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { ToolContract } from \"../tool/tool\";\nimport { tool } from \"../tool/tool\";\nimport type {\n  LoadSkillInput,\n  SkillRecord,\n} from \"./contracts/skill-record.type\";\n\n/** Result the `loadSkill` tool feeds back to the model. */\nexport type LoadSkillResult =\n  | { body: string; name: string; version: number }\n  | { error: string };\n\n/**\n * Hand-built, schema-library-agnostic Standard Schema for\n * `{ name: string; version?: number }` — built without `seal` / `zod` so\n * the skills feature stays dependency-free, matching the framework's own\n * `ragToolSchema` style. Bad shapes return `{ issues }` so the tool\n * runtime surfaces a `SchemaValidationError` like any other tool.\n */\nfunction loadSkillSchema(): StandardSchemaV1<LoadSkillInput> {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"warlock-ai-skills\",\n      validate: (value: unknown) => {\n        const candidate = value as { name?: unknown; version?: unknown } | null;\n\n        if (!candidate || typeof candidate.name !== \"string\") {\n          return { issues: [{ message: \"loadSkill input must be { name: string; version?: number }\" }] };\n        }\n\n        if (candidate.version !== undefined && typeof candidate.version !== \"number\") {\n          return { issues: [{ message: \"loadSkill `version` must be a number when provided\" }] };\n        }\n\n        return {\n          value: {\n            name: candidate.name,\n            ...(candidate.version !== undefined ? { version: candidate.version } : {}),\n          },\n        };\n      },\n    },\n  };\n}\n\n/** Dependencies the `loadSkill` tool closes over — kept narrow for testing. */\nexport type LoadSkillToolDeps = {\n  /** Resolve a skill's full record across the merged sources. */\n  load: (name: string, version?: number) => Promise<SkillRecord | undefined>;\n  /** Per-run budget cap on `loadSkill` calls (default 5, enforced by caller-supplied counter). */\n  maxLoadsPerRun: number;\n  /** Fired on each successful load (`type: \"loaded\"`); errors swallowed by the sink wrapper. */\n  onLoaded?: (record: SkillRecord) => void;\n};\n\n/**\n * Build the `loadSkill` tool for one run. Returns the skill **body** as\n * the tool result, which the agent loop feeds straight back to the model\n * (the standard `role:\"tool\"` message path) — making the loaded procedure\n * visible on the next trip.\n *\n * The per-run counter is closed over here (one tool instance per run), so\n * the budget is naturally scoped to this execution:\n * - Past `maxLoadsPerRun` ⇒ returns `{ error: \"skill load budget exhausted\" }`\n *   as a RESULT, never a throw — the model self-corrects, exactly how the\n *   agent loop treats any tool error.\n * - Unknown skill (`load` ⇒ undefined) ⇒ `{ error: \"unknown skill: <name>\" }`.\n *\n * `execute` itself never throws — both failure modes are error results, so\n * the run continues.\n */\nexport function loadSkillTool(deps: LoadSkillToolDeps): ToolContract<LoadSkillInput, LoadSkillResult> {\n  let loads = 0;\n\n  return tool<LoadSkillInput, LoadSkillResult>({\n    name: \"loadSkill\",\n    description:\n      \"Load the full instructions of a named skill from the catalog into context. Call it with the skill's `name` (and optional `version`) when you need its detailed procedure.\",\n    input: loadSkillSchema(),\n    execute: async ({ name, version }) => {\n      if (loads >= deps.maxLoadsPerRun) {\n        return { error: \"skill load budget exhausted\" };\n      }\n\n      loads += 1;\n\n      const record = await deps.load(name, version);\n\n      if (!record) {\n        return { error: `unknown skill: ${name}` };\n      }\n\n      deps.onLoaded?.(record);\n\n      return { body: record.body, name: record.name, version: record.version };\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;AAoBA,SAAS,kBAAoD;CAC3D,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,YAAY;GAElB,IAAI,CAAC,aAAa,OAAO,UAAU,SAAS,UAC1C,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,6DAA6D,CAAC,EAAE;GAG/F,IAAI,UAAU,YAAY,UAAa,OAAO,UAAU,YAAY,UAClE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,qDAAqD,CAAC,EAAE;GAGvF,OAAO,EACL,OAAO;IACL,MAAM,UAAU;IAChB,GAAI,UAAU,YAAY,SAAY,EAAE,SAAS,UAAU,QAAQ,IAAI,CAAC;GAC1E,EACF;EACF;CACF,EACF;AACF;;;;;;;;;;;;;;;;;AA4BA,SAAgB,cAAc,MAAwE;CACpG,IAAI,QAAQ;CAEZ,OAAO,KAAsC;EAC3C,MAAM;EACN,aACE;EACF,OAAO,gBAAgB;EACvB,SAAS,OAAO,EAAE,MAAM,cAAc;GACpC,IAAI,SAAS,KAAK,gBAChB,OAAO,EAAE,OAAO,8BAA8B;GAGhD,SAAS;GAET,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO;GAE5C,IAAI,CAAC,QACH,OAAO,EAAE,OAAO,kBAAkB,OAAO;GAG3C,KAAK,WAAW,MAAM;GAEtB,OAAO;IAAE,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,SAAS,OAAO;GAAQ;EACzE;CACF,CAAC;AACH"}
+{"version":3,"file":"load-skill-tool.mjs","names":[],"sources":["../../../../../../../ai/src/skills/load-skill-tool.ts"],"sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { ToolContract } from \"../tool/tool\";\nimport { tool } from \"../tool/tool\";\nimport type {\n  LoadSkillInput,\n  SkillRecord,\n} from \"./contracts/skill-record.type\";\n\n/** Result the `loadSkill` tool feeds back to the model. */\nexport type LoadSkillResult =\n  | { body: string; name: string; version: number }\n  | { error: string };\n\n/**\n * Hand-built, schema-library-agnostic Standard Schema for\n * `{ name: string; version?: number }` — built without `seal` / `zod` so\n * the skills feature stays dependency-free, matching the framework's own\n * `ragToolSchema` style. Bad shapes return `{ issues }` so the tool\n * runtime surfaces a `SchemaValidationError` like any other tool.\n */\nfunction loadSkillSchema(): StandardSchemaV1<LoadSkillInput> {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"warlock-ai-skills\",\n      validate: (value: unknown) => {\n        const candidate = value as { name?: unknown; version?: unknown } | null;\n\n        if (!candidate || typeof candidate.name !== \"string\") {\n          return { issues: [{ message: \"loadSkill input must be { name: string; version?: number }\" }] };\n        }\n\n        if (candidate.version !== undefined && typeof candidate.version !== \"number\") {\n          return { issues: [{ message: \"loadSkill `version` must be a number when provided\" }] };\n        }\n\n        return {\n          value: {\n            name: candidate.name,\n            ...(candidate.version !== undefined ? { version: candidate.version } : {}),\n          },\n        };\n      },\n    },\n  };\n}\n\n/** Dependencies the `loadSkill` tool closes over — kept narrow for testing. */\nexport type LoadSkillToolDeps = {\n  /** Resolve a skill's full record across the merged sources. */\n  load: (name: string, version?: number) => Promise<SkillRecord | undefined>;\n  /** Per-run budget cap on `loadSkill` calls (default 5, enforced by caller-supplied counter). */\n  maxLoadsPerRun: number;\n  /** Fired on each successful load (`type: \"loaded\"`); errors swallowed by the sink wrapper. */\n  onLoaded?: (record: SkillRecord) => void;\n};\n\n/**\n * Build the `loadSkill` tool for one run. Returns the skill **body** as\n * the tool result, which the agent loop feeds straight back to the model\n * (the standard `role:\"tool\"` message path) — making the loaded procedure\n * visible on the next trip.\n *\n * The per-run counter is closed over here (one tool instance per run), so\n * the budget is naturally scoped to this execution:\n * - Past `maxLoadsPerRun` ⇒ returns `{ error: \"skill load budget exhausted\" }`\n *   as a RESULT, never a throw — the model self-corrects, exactly how the\n *   agent loop treats any tool error.\n * - Unknown skill (`load` ⇒ undefined) ⇒ `{ error: \"unknown skill: <name>\" }`.\n *\n * `execute` itself never throws — both failure modes are error results, so\n * the run continues.\n */\nexport function loadSkillTool(deps: LoadSkillToolDeps): ToolContract<LoadSkillInput, LoadSkillResult> {\n  let loads = 0;\n\n  return tool<LoadSkillInput, LoadSkillResult>({\n    name: \"loadSkill\",\n    description:\n      \"Load the full instructions of a named skill from the catalog into context. Call it with the skill's `name` (and optional `version`) when you need its detailed procedure.\",\n    input: loadSkillSchema(),\n    execute: async ({ name, version }) => {\n      if (loads >= deps.maxLoadsPerRun) {\n        return { error: \"skill load budget exhausted\" };\n      }\n\n      loads += 1;\n\n      const record = await deps.load(name, version);\n\n      if (!record) {\n        return { error: `unknown skill: ${name}` };\n      }\n\n      deps.onLoaded?.(record);\n\n      return { body: record.body, name: record.name, version: record.version };\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;AAoBA,SAAS,kBAAoD;CAC3D,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,YAAY;GAElB,IAAI,CAAC,aAAa,OAAO,UAAU,SAAS,UAC1C,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,6DAA6D,CAAC,EAAE;GAG/F,IAAI,UAAU,YAAY,UAAa,OAAO,UAAU,YAAY,UAClE,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,qDAAqD,CAAC,EAAE;GAGvF,OAAO,EACL,OAAO;IACL,MAAM,UAAU;IAChB,GAAI,UAAU,YAAY,SAAY,EAAE,SAAS,UAAU,QAAQ,IAAI,CAAC;GAC1E,EACF;EACF;CACF,EACF;AACF;;;;;;;;;;;;;;;;;AA4BA,SAAgB,cAAc,MAAwE;CACpG,IAAI,QAAQ;CAEZ,OAAO,KAAsC;EAC3C,MAAM;EACN,aACE;EACF,OAAO,gBAAgB;EACvB,SAAS,OAAO,EAAE,MAAM,cAAc;GACpC,IAAI,SAAS,KAAK,gBAChB,OAAO,EAAE,OAAO,8BAA8B;GAGhD,SAAS;GAET,MAAM,SAAS,MAAM,KAAK,KAAK,MAAM,OAAO;GAE5C,IAAI,CAAC,QACH,OAAO,EAAE,OAAO,kBAAkB,OAAO;GAG3C,KAAK,WAAW,MAAM;GAEtB,OAAO;IAAE,MAAM,OAAO;IAAM,MAAM,OAAO;IAAM,SAAS,OAAO;GAAQ;EACzE;CACF,CAAC;AACH"}

package/esm/skills/review-gate.d.mts

@@ -1,7 +1,7 @@
 import { SkillRecord } from "./contracts/skill-record.type.mjs";
 import { SkillAnalyticsEvent, SkillReviewGate } from "./contracts/skills-config.type.mjs";
 
-//#region ../@warlock.js/ai/src/skills/review-gate.d.ts
+//#region ../ai/src/skills/review-gate.d.ts
 /** Outcome of running a candidate through the review gate. */
 type ReviewOutcome = {
   promoted: true;

package/esm/skills/review-gate.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"review-gate.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/review-gate.ts"],"mappings":";;;;;KAOY,aAAA;EACN,QAAA;EAAgB,MAAA,EAAQ,WAAW;EAAE,MAAA;AAAA;EACrC,QAAA;EAAiB,MAAA;AAAA;;;;;AAAM;AAkB7B;;;;;;;;;;;iBAAsB,aAAA,CACpB,SAAA,EAAW,WAAA,EACX,IAAA,EAAM,eAAA,EACN,IAAA,IAAQ,KAAA,EAAO,mBAAA,YACd,OAAA,CAAQ,aAAA"}
+{"version":3,"file":"review-gate.d.mts","names":[],"sources":["../../../../../../../ai/src/skills/review-gate.ts"],"mappings":";;;;;KAOY,aAAA;EACN,QAAA;EAAgB,MAAA,EAAQ,WAAW;EAAE,MAAA;AAAA;EACrC,QAAA;EAAiB,MAAA;AAAA;;;;;AAAM;AAkB7B;;;;;;;;;;;iBAAsB,aAAA,CACpB,SAAA,EAAW,WAAA,EACX,IAAA,EAAM,eAAA,EACN,IAAA,IAAQ,KAAA,EAAO,mBAAA,YACd,OAAA,CAAQ,aAAA"}

package/esm/skills/review-gate.mjs

@@ -1,4 +1,4 @@
-//#region ../@warlock.js/ai/src/skills/review-gate.ts
+//#region ../ai/src/skills/review-gate.ts
 /**
 * Run a candidate through the **default-DENY** review gate (Phase 2).
 *

package/esm/skills/review-gate.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"review-gate.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/review-gate.ts"],"sourcesContent":["import type {\n  SkillAnalyticsEvent,\n  SkillReviewGate,\n} from \"./contracts/skills-config.type\";\nimport type { SkillRecord } from \"./contracts/skill-record.type\";\n\n/** Outcome of running a candidate through the review gate. */\nexport type ReviewOutcome =\n  | { promoted: true; record: SkillRecord; reason?: string }\n  | { promoted: false; reason?: string };\n\n/**\n * Run a candidate through the **default-DENY** review gate (Phase 2).\n *\n * The gate's `approve(candidate)` decides: only `{ approve: true }`\n * promotes the candidate to a new audited version via `gate.store.promote`.\n * Everything else — `{ approve: false }`, a malformed result, or a THROW\n * (fail-closed) — leaves the candidate inert and emits a `denied` event.\n * On approval, a `promoted` event fires with the new version.\n *\n * Analytics errors are swallowed by the supplied sink wrapper; this runner\n * never throws — a gate that throws is simply treated as a denial.\n *\n * @example\n * const outcome = await runReviewGate(candidate, gate, emit);\n * if (outcome.promoted) console.log(\"now at v\" + outcome.record.version);\n */\nexport async function runReviewGate(\n  candidate: SkillRecord,\n  gate: SkillReviewGate,\n  emit?: (event: SkillAnalyticsEvent) => void,\n): Promise<ReviewOutcome> {\n  let verdict: { approve: boolean; reason?: string };\n\n  try {\n    verdict = await gate.approve(candidate);\n  } catch (error) {\n    // Fail-closed: a throwing gate is a denial, never an accidental promotion.\n    const reason = error instanceof Error ? error.message : String(error);\n\n    emit?.({ type: \"denied\", skill: candidate.name, version: candidate.version });\n\n    return { promoted: false, reason };\n  }\n\n  if (!verdict || verdict.approve !== true) {\n    emit?.({ type: \"denied\", skill: candidate.name, version: candidate.version });\n\n    return { promoted: false, reason: verdict?.reason };\n  }\n\n  const record = await gate.store.promote(candidate.name);\n\n  emit?.({ type: \"promoted\", skill: record.name, version: record.version });\n\n  return { promoted: true, record, reason: verdict.reason };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,eAAsB,cACpB,WACA,MACA,MACwB;CACxB,IAAI;CAEJ,IAAI;EACF,UAAU,MAAM,KAAK,QAAQ,SAAS;CACxC,SAAS,OAAO;EAEd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAEpE,OAAO;GAAE,MAAM;GAAU,OAAO,UAAU;GAAM,SAAS,UAAU;EAAQ,CAAC;EAE5E,OAAO;GAAE,UAAU;GAAO;EAAO;CACnC;CAEA,IAAI,CAAC,WAAW,QAAQ,YAAY,MAAM;EACxC,OAAO;GAAE,MAAM;GAAU,OAAO,UAAU;GAAM,SAAS,UAAU;EAAQ,CAAC;EAE5E,OAAO;GAAE,UAAU;GAAO,QAAQ,SAAS;EAAO;CACpD;CAEA,MAAM,SAAS,MAAM,KAAK,MAAM,QAAQ,UAAU,IAAI;CAEtD,OAAO;EAAE,MAAM;EAAY,OAAO,OAAO;EAAM,SAAS,OAAO;CAAQ,CAAC;CAExE,OAAO;EAAE,UAAU;EAAM;EAAQ,QAAQ,QAAQ;CAAO;AAC1D"}
+{"version":3,"file":"review-gate.mjs","names":[],"sources":["../../../../../../../ai/src/skills/review-gate.ts"],"sourcesContent":["import type {\n  SkillAnalyticsEvent,\n  SkillReviewGate,\n} from \"./contracts/skills-config.type\";\nimport type { SkillRecord } from \"./contracts/skill-record.type\";\n\n/** Outcome of running a candidate through the review gate. */\nexport type ReviewOutcome =\n  | { promoted: true; record: SkillRecord; reason?: string }\n  | { promoted: false; reason?: string };\n\n/**\n * Run a candidate through the **default-DENY** review gate (Phase 2).\n *\n * The gate's `approve(candidate)` decides: only `{ approve: true }`\n * promotes the candidate to a new audited version via `gate.store.promote`.\n * Everything else — `{ approve: false }`, a malformed result, or a THROW\n * (fail-closed) — leaves the candidate inert and emits a `denied` event.\n * On approval, a `promoted` event fires with the new version.\n *\n * Analytics errors are swallowed by the supplied sink wrapper; this runner\n * never throws — a gate that throws is simply treated as a denial.\n *\n * @example\n * const outcome = await runReviewGate(candidate, gate, emit);\n * if (outcome.promoted) console.log(\"now at v\" + outcome.record.version);\n */\nexport async function runReviewGate(\n  candidate: SkillRecord,\n  gate: SkillReviewGate,\n  emit?: (event: SkillAnalyticsEvent) => void,\n): Promise<ReviewOutcome> {\n  let verdict: { approve: boolean; reason?: string };\n\n  try {\n    verdict = await gate.approve(candidate);\n  } catch (error) {\n    // Fail-closed: a throwing gate is a denial, never an accidental promotion.\n    const reason = error instanceof Error ? error.message : String(error);\n\n    emit?.({ type: \"denied\", skill: candidate.name, version: candidate.version });\n\n    return { promoted: false, reason };\n  }\n\n  if (!verdict || verdict.approve !== true) {\n    emit?.({ type: \"denied\", skill: candidate.name, version: candidate.version });\n\n    return { promoted: false, reason: verdict?.reason };\n  }\n\n  const record = await gate.store.promote(candidate.name);\n\n  emit?.({ type: \"promoted\", skill: record.name, version: record.version });\n\n  return { promoted: true, record, reason: verdict.reason };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA2BA,eAAsB,cACpB,WACA,MACA,MACwB;CACxB,IAAI;CAEJ,IAAI;EACF,UAAU,MAAM,KAAK,QAAQ,SAAS;CACxC,SAAS,OAAO;EAEd,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EAEpE,OAAO;GAAE,MAAM;GAAU,OAAO,UAAU;GAAM,SAAS,UAAU;EAAQ,CAAC;EAE5E,OAAO;GAAE,UAAU;GAAO;EAAO;CACnC;CAEA,IAAI,CAAC,WAAW,QAAQ,YAAY,MAAM;EACxC,OAAO;GAAE,MAAM;GAAU,OAAO,UAAU;GAAM,SAAS,UAAU;EAAQ,CAAC;EAE5E,OAAO;GAAE,UAAU;GAAO,QAAQ,SAAS;EAAO;CACpD;CAEA,MAAM,SAAS,MAAM,KAAK,MAAM,QAAQ,UAAU,IAAI;CAEtD,OAAO;EAAE,MAAM;EAAY,OAAO,OAAO;EAAM,SAAS,OAAO;CAAQ,CAAC;CAExE,OAAO;EAAE,UAAU;EAAM;EAAQ,QAAQ,QAAQ;CAAO;AAC1D"}

package/esm/skills/save-skill-tool.d.mts

@@ -1,7 +1,7 @@
 import { ToolContract } from "../tool/tool.mjs";
 import { SkillRecord } from "./contracts/skill-record.type.mjs";
 
-//#region ../@warlock.js/ai/src/skills/save-skill-tool.d.ts
+//#region ../ai/src/skills/save-skill-tool.d.ts
 /** Validated input of the `saveSkill` tool. */
 type SaveSkillInput = {
   name: string;

package/esm/skills/save-skill-tool.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"save-skill-tool.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/save-skill-tool.ts"],"mappings":";;;;;KAMY,cAAA;EACV,IAAA;EACA,WAAA;EACA,IAAA;EACA,IAAA;AAAA;;KAIU,eAAA;EACN,KAAA;EAAa,IAAA;EAAc,MAAA;AAAA;EAC3B,KAAA;AAAA;;KAuDM,iBAAA;EAxDO,4EA0DjB,aAAA,GAAgB,MAAA,EAAQ,IAAA,CAAK,WAAA,0BAAqC,OAAA,CAAQ,WAAA,GAzDtE;EA2DJ,OAAA,IAAW,MAAA,EAAQ,WAAA;AAAA;AAJrB;;;;;;;;;;;AAAA,iBAkBgB,aAAA,CAAc,IAAA,EAAM,iBAAA,GAAoB,YAAA,CAAa,cAAA,EAAgB,eAAA"}
+{"version":3,"file":"save-skill-tool.d.mts","names":[],"sources":["../../../../../../../ai/src/skills/save-skill-tool.ts"],"mappings":";;;;;KAMY,cAAA;EACV,IAAA;EACA,WAAA;EACA,IAAA;EACA,IAAA;AAAA;;KAIU,eAAA;EACN,KAAA;EAAa,IAAA;EAAc,MAAA;AAAA;EAC3B,KAAA;AAAA;;KAuDM,iBAAA;EAxDO,4EA0DjB,aAAA,GAAgB,MAAA,EAAQ,IAAA,CAAK,WAAA,0BAAqC,OAAA,CAAQ,WAAA,GAzDtE;EA2DJ,OAAA,IAAW,MAAA,EAAQ,WAAA;AAAA;AAJrB;;;;;;;;;;;AAAA,iBAkBgB,aAAA,CAAc,IAAA,EAAM,iBAAA,GAAoB,YAAA,CAAa,cAAA,EAAgB,eAAA"}

package/esm/skills/save-skill-tool.mjs

@@ -1,6 +1,6 @@
 import { tool } from "../tool/tool.mjs";
 
-//#region ../@warlock.js/ai/src/skills/save-skill-tool.ts
+//#region ../ai/src/skills/save-skill-tool.ts
 /**
 * Hand-built Standard Schema for the `saveSkill` input — dependency-free,
 * mirroring `loadSkillSchema`. Requires `name` / `description` / `body`;

package/esm/skills/save-skill-tool.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"save-skill-tool.mjs","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/save-skill-tool.ts"],"sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { ToolContract } from \"../tool/tool\";\nimport { tool } from \"../tool/tool\";\nimport type { SkillRecord } from \"./contracts/skill-record.type\";\n\n/** Validated input of the `saveSkill` tool. */\nexport type SaveSkillInput = {\n  name: string;\n  description: string;\n  body: string;\n  tags?: string[];\n};\n\n/** Result the `saveSkill` tool feeds back to the model. */\nexport type SaveSkillResult =\n  | { saved: true; name: string; status: \"candidate\" }\n  | { error: string };\n\n/**\n * Hand-built Standard Schema for the `saveSkill` input — dependency-free,\n * mirroring `loadSkillSchema`. Requires `name` / `description` / `body`;\n * `tags` is an optional string array.\n */\nfunction saveSkillSchema(): StandardSchemaV1<SaveSkillInput> {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"warlock-ai-skills\",\n      validate: (value: unknown) => {\n        const candidate = value as\n          | { name?: unknown; description?: unknown; body?: unknown; tags?: unknown }\n          | null;\n\n        if (\n          !candidate ||\n          typeof candidate.name !== \"string\" ||\n          typeof candidate.description !== \"string\" ||\n          typeof candidate.body !== \"string\"\n        ) {\n          return {\n            issues: [\n              {\n                message:\n                  \"saveSkill input must be { name: string; description: string; body: string; tags?: string[] }\",\n              },\n            ],\n          };\n        }\n\n        if (\n          candidate.tags !== undefined &&\n          (!Array.isArray(candidate.tags) ||\n            !candidate.tags.every((tag) => typeof tag === \"string\"))\n        ) {\n          return { issues: [{ message: \"saveSkill `tags` must be a string[] when provided\" }] };\n        }\n\n        return {\n          value: {\n            name: candidate.name,\n            description: candidate.description,\n            body: candidate.body,\n            ...(candidate.tags !== undefined ? { tags: candidate.tags as string[] } : {}),\n          },\n        };\n      },\n    },\n  };\n}\n\n/** Dependencies the `saveSkill` tool closes over. */\nexport type SaveSkillToolDeps = {\n  /** Write an INERT candidate; the returned record is `type: \"candidate\"`. */\n  saveCandidate: (record: Omit<SkillRecord, \"version\" | \"type\">) => Promise<SkillRecord>;\n  /** Fired on a successful save (`type: \"saved\"`); errors swallowed by the sink wrapper. */\n  onSaved?: (record: SkillRecord) => void;\n};\n\n/**\n * Build the **Phase 2** `saveSkill` tool — exposed ONLY when a `review`\n * gate is configured. It writes an INERT `type: \"candidate\"` record via\n * `saveCandidate`. A candidate is filtered out of the catalog and from\n * preload — it can NEVER be injected until the default-DENY review gate\n * promotes it. So `saveSkill` alone can never turn the model's own output\n * into an injected instruction; promotion is a separate, gated step.\n *\n * `execute` never throws — a store write failure surfaces as an error\n * result so the run continues.\n */\nexport function saveSkillTool(deps: SaveSkillToolDeps): ToolContract<SaveSkillInput, SaveSkillResult> {\n  return tool<SaveSkillInput, SaveSkillResult>({\n    name: \"saveSkill\",\n    description:\n      \"Propose a new reusable skill. The skill is saved as an INERT candidate and is NOT used until a reviewer approves it — it will not affect the current run.\",\n    input: saveSkillSchema(),\n    execute: async (input) => {\n      try {\n        const record = await deps.saveCandidate({\n          name: input.name,\n          description: input.description,\n          body: input.body,\n          ...(input.tags !== undefined ? { tags: input.tags } : {}),\n        });\n\n        deps.onSaved?.(record);\n\n        return { saved: true, name: record.name, status: \"candidate\" };\n      } catch (error) {\n        return { error: error instanceof Error ? error.message : String(error) };\n      }\n    },\n  });\n}\n"],"mappings":";;;;;;;;AAuBA,SAAS,kBAAoD;CAC3D,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,YAAY;GAIlB,IACE,CAAC,aACD,OAAO,UAAU,SAAS,YAC1B,OAAO,UAAU,gBAAgB,YACjC,OAAO,UAAU,SAAS,UAE1B,OAAO,EACL,QAAQ,CACN,EACE,SACE,+FACJ,CACF,EACF;GAGF,IACE,UAAU,SAAS,WAClB,CAAC,MAAM,QAAQ,UAAU,IAAI,KAC5B,CAAC,UAAU,KAAK,OAAO,QAAQ,OAAO,QAAQ,QAAQ,IAExD,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,oDAAoD,CAAC,EAAE;GAGtF,OAAO,EACL,OAAO;IACL,MAAM,UAAU;IAChB,aAAa,UAAU;IACvB,MAAM,UAAU;IAChB,GAAI,UAAU,SAAS,SAAY,EAAE,MAAM,UAAU,KAAiB,IAAI,CAAC;GAC7E,EACF;EACF;CACF,EACF;AACF;;;;;;;;;;;;AAqBA,SAAgB,cAAc,MAAwE;CACpG,OAAO,KAAsC;EAC3C,MAAM;EACN,aACE;EACF,OAAO,gBAAgB;EACvB,SAAS,OAAO,UAAU;GACxB,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,cAAc;KACtC,MAAM,MAAM;KACZ,aAAa,MAAM;KACnB,MAAM,MAAM;KACZ,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,MAAM;IAErB,OAAO;KAAE,OAAO;KAAM,MAAM,OAAO;KAAM,QAAQ;IAAY;GAC/D,SAAS,OAAO;IACd,OAAO,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACzE;EACF;CACF,CAAC;AACH"}
+{"version":3,"file":"save-skill-tool.mjs","names":[],"sources":["../../../../../../../ai/src/skills/save-skill-tool.ts"],"sourcesContent":["import type { StandardSchemaV1 } from \"@standard-schema/spec\";\nimport type { ToolContract } from \"../tool/tool\";\nimport { tool } from \"../tool/tool\";\nimport type { SkillRecord } from \"./contracts/skill-record.type\";\n\n/** Validated input of the `saveSkill` tool. */\nexport type SaveSkillInput = {\n  name: string;\n  description: string;\n  body: string;\n  tags?: string[];\n};\n\n/** Result the `saveSkill` tool feeds back to the model. */\nexport type SaveSkillResult =\n  | { saved: true; name: string; status: \"candidate\" }\n  | { error: string };\n\n/**\n * Hand-built Standard Schema for the `saveSkill` input — dependency-free,\n * mirroring `loadSkillSchema`. Requires `name` / `description` / `body`;\n * `tags` is an optional string array.\n */\nfunction saveSkillSchema(): StandardSchemaV1<SaveSkillInput> {\n  return {\n    \"~standard\": {\n      version: 1,\n      vendor: \"warlock-ai-skills\",\n      validate: (value: unknown) => {\n        const candidate = value as\n          | { name?: unknown; description?: unknown; body?: unknown; tags?: unknown }\n          | null;\n\n        if (\n          !candidate ||\n          typeof candidate.name !== \"string\" ||\n          typeof candidate.description !== \"string\" ||\n          typeof candidate.body !== \"string\"\n        ) {\n          return {\n            issues: [\n              {\n                message:\n                  \"saveSkill input must be { name: string; description: string; body: string; tags?: string[] }\",\n              },\n            ],\n          };\n        }\n\n        if (\n          candidate.tags !== undefined &&\n          (!Array.isArray(candidate.tags) ||\n            !candidate.tags.every((tag) => typeof tag === \"string\"))\n        ) {\n          return { issues: [{ message: \"saveSkill `tags` must be a string[] when provided\" }] };\n        }\n\n        return {\n          value: {\n            name: candidate.name,\n            description: candidate.description,\n            body: candidate.body,\n            ...(candidate.tags !== undefined ? { tags: candidate.tags as string[] } : {}),\n          },\n        };\n      },\n    },\n  };\n}\n\n/** Dependencies the `saveSkill` tool closes over. */\nexport type SaveSkillToolDeps = {\n  /** Write an INERT candidate; the returned record is `type: \"candidate\"`. */\n  saveCandidate: (record: Omit<SkillRecord, \"version\" | \"type\">) => Promise<SkillRecord>;\n  /** Fired on a successful save (`type: \"saved\"`); errors swallowed by the sink wrapper. */\n  onSaved?: (record: SkillRecord) => void;\n};\n\n/**\n * Build the **Phase 2** `saveSkill` tool — exposed ONLY when a `review`\n * gate is configured. It writes an INERT `type: \"candidate\"` record via\n * `saveCandidate`. A candidate is filtered out of the catalog and from\n * preload — it can NEVER be injected until the default-DENY review gate\n * promotes it. So `saveSkill` alone can never turn the model's own output\n * into an injected instruction; promotion is a separate, gated step.\n *\n * `execute` never throws — a store write failure surfaces as an error\n * result so the run continues.\n */\nexport function saveSkillTool(deps: SaveSkillToolDeps): ToolContract<SaveSkillInput, SaveSkillResult> {\n  return tool<SaveSkillInput, SaveSkillResult>({\n    name: \"saveSkill\",\n    description:\n      \"Propose a new reusable skill. The skill is saved as an INERT candidate and is NOT used until a reviewer approves it — it will not affect the current run.\",\n    input: saveSkillSchema(),\n    execute: async (input) => {\n      try {\n        const record = await deps.saveCandidate({\n          name: input.name,\n          description: input.description,\n          body: input.body,\n          ...(input.tags !== undefined ? { tags: input.tags } : {}),\n        });\n\n        deps.onSaved?.(record);\n\n        return { saved: true, name: record.name, status: \"candidate\" };\n      } catch (error) {\n        return { error: error instanceof Error ? error.message : String(error) };\n      }\n    },\n  });\n}\n"],"mappings":";;;;;;;;AAuBA,SAAS,kBAAoD;CAC3D,OAAO,EACL,aAAa;EACX,SAAS;EACT,QAAQ;EACR,WAAW,UAAmB;GAC5B,MAAM,YAAY;GAIlB,IACE,CAAC,aACD,OAAO,UAAU,SAAS,YAC1B,OAAO,UAAU,gBAAgB,YACjC,OAAO,UAAU,SAAS,UAE1B,OAAO,EACL,QAAQ,CACN,EACE,SACE,+FACJ,CACF,EACF;GAGF,IACE,UAAU,SAAS,WAClB,CAAC,MAAM,QAAQ,UAAU,IAAI,KAC5B,CAAC,UAAU,KAAK,OAAO,QAAQ,OAAO,QAAQ,QAAQ,IAExD,OAAO,EAAE,QAAQ,CAAC,EAAE,SAAS,oDAAoD,CAAC,EAAE;GAGtF,OAAO,EACL,OAAO;IACL,MAAM,UAAU;IAChB,aAAa,UAAU;IACvB,MAAM,UAAU;IAChB,GAAI,UAAU,SAAS,SAAY,EAAE,MAAM,UAAU,KAAiB,IAAI,CAAC;GAC7E,EACF;EACF;CACF,EACF;AACF;;;;;;;;;;;;AAqBA,SAAgB,cAAc,MAAwE;CACpG,OAAO,KAAsC;EAC3C,MAAM;EACN,aACE;EACF,OAAO,gBAAgB;EACvB,SAAS,OAAO,UAAU;GACxB,IAAI;IACF,MAAM,SAAS,MAAM,KAAK,cAAc;KACtC,MAAM,MAAM;KACZ,aAAa,MAAM;KACnB,MAAM,MAAM;KACZ,GAAI,MAAM,SAAS,SAAY,EAAE,MAAM,MAAM,KAAK,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,UAAU,MAAM;IAErB,OAAO;KAAE,OAAO;KAAM,MAAM,OAAO;KAAM,QAAQ;IAAY;GAC/D,SAAS,OAAO;IACd,OAAO,EAAE,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;GACzE;EACF;CACF,CAAC;AACH"}

package/esm/skills/skills.d.mts

@@ -1,7 +1,7 @@
 import { SkillsConfig } from "./contracts/skills-config.type.mjs";
 import { SkillsContract } from "./contracts/skills.contract.mjs";
 
-//#region ../@warlock.js/ai/src/skills/skills.d.ts
+//#region ../ai/src/skills/skills.d.ts
 /**
  * Create a runtime skills library — the **mechanism** behind the
  * first-class `skills` agent option.

package/esm/skills/skills.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"skills.d.mts","names":[],"sources":["../../../../../../../@warlock.js/ai/src/skills/skills.ts"],"mappings":";;;;;;AAgDA;;;;;;;;AAA4D;;;;;;;;;;;;;;;iBAA5C,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,cAAc"}
+{"version":3,"file":"skills.d.mts","names":[],"sources":["../../../../../../../ai/src/skills/skills.ts"],"mappings":";;;;;;AAgDA;;;;;;;;AAA4D;;;;;;;;;;;;;;;iBAA5C,MAAA,CAAO,MAAA,EAAQ,YAAA,GAAe,cAAc"}

package/esm/skills/skills.mjs

@@ -3,7 +3,7 @@ import { loadSkillTool } from "./load-skill-tool.mjs";
 import { saveSkillTool } from "./save-skill-tool.mjs";
 import { resolveSource } from "./sources/index.mjs";
 
-//#region ../@warlock.js/ai/src/skills/skills.ts
+//#region ../ai/src/skills/skills.ts
 const DEFAULT_MAX_LOADS_PER_RUN = 5;
 /**
 * Create a runtime skills library — the **mechanism** behind the