@xopcai/xopc 0.0.140 → 0.0.142

package/dist/src/agent/embedded/xopc-auth-storage.js

@@ -1,6 +1,6 @@
 import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
 import { getApiKeySync, init_providers } from "../../providers/index.js";
-import { AuthStorage } from "@earendil-works/pi-coding-agent";
+import { InMemoryCredentialStore } from "@earendil-works/pi-ai";
 //#region src/agent/embedded/xopc-auth-storage.ts
 init_sync_provider_auth();
 init_providers();
@@ -15,18 +15,18 @@ function resolveXopcProviderApiKey(providerId) {
 * pi-coding-agent {@link createAgentSession} defaults to `~/.pi/agent/auth.json` and env.
 * Gateway / webchat turns inject xopc credentials through {@link applyXopcProviderApiKey}.
 */
-function createEmbeddedAuthStorage() {
-	return AuthStorage.create();
+function createEmbeddedCredentialStore() {
+	return new InMemoryCredentialStore();
 }
 /**
 * Inject the resolved key as a runtime override (highest-priority, in-memory only) before
 * the session starts so request-time auth resolution finds it.
 */
-function applyXopcProviderApiKey(auth, providerId) {
+async function applyXopcProviderApiKey(modelRuntime, providerId) {
 	const key = resolveXopcProviderApiKey(providerId);
-	if (key && key !== "extension-managed") auth.setRuntimeApiKey(providerId, key);
+	if (key && key !== "extension-managed") await modelRuntime.setRuntimeApiKey(providerId, key);
 }
 //#endregion
-export { applyXopcProviderApiKey, createEmbeddedAuthStorage, resolveXopcProviderApiKey };
+export { applyXopcProviderApiKey, createEmbeddedCredentialStore, resolveXopcProviderApiKey };
 
 //# sourceMappingURL=xopc-auth-storage.js.map

package/dist/src/agent/embedded/xopc-auth-storage.js.map

@@ -1 +1 @@
-{"version":3,"file":"xopc-auth-storage.js","names":[],"sources":["../../../../src/agent/embedded/xopc-auth-storage.ts"],"sourcesContent":["import { AuthStorage } from '@earendil-works/pi-coding-agent';\n\nimport { resolveProviderApiKeySync } from '../../auth/sync-provider-auth.js';\nimport { getApiKeySync } from '../../providers/index.js';\n\n/**\n * Resolve API keys the same way as {@link AgentManager} / gateway settings:\n * auth-profiles (agent + global), OAuth files, models.json, then env.\n */\nexport function resolveXopcProviderApiKey(providerId: string): string | undefined {\n  return resolveProviderApiKeySync(providerId) ?? getApiKeySync(providerId);\n}\n\n/**\n * pi-coding-agent {@link createAgentSession} defaults to `~/.pi/agent/auth.json` and env.\n * Gateway / webchat turns inject xopc credentials through {@link applyXopcProviderApiKey}.\n */\nexport function createEmbeddedAuthStorage(): AuthStorage {\n  return AuthStorage.create();\n}\n\n/**\n * Inject the resolved key as a runtime override (highest-priority, in-memory only) before\n * the session starts so request-time auth resolution finds it.\n */\nexport function applyXopcProviderApiKey(auth: AuthStorage, providerId: string): void {\n  const key = resolveXopcProviderApiKey(providerId);\n  if (key && key !== 'extension-managed') {\n    auth.setRuntimeApiKey(providerId, key);\n  }\n}\n"],"mappings":";;;;yBAE6E;gBACpB;;;;;AAMzD,SAAgB,0BAA0B,YAAwC;AAChF,QAAO,0BAA0B,WAAW,IAAI,cAAc,WAAW;;;;;;AAO3E,SAAgB,4BAAyC;AACvD,QAAO,YAAY,QAAQ;;;;;;AAO7B,SAAgB,wBAAwB,MAAmB,YAA0B;CACnF,MAAM,MAAM,0BAA0B,WAAW;AACjD,KAAI,OAAO,QAAQ,oBACjB,MAAK,iBAAiB,YAAY,IAAI"}
+{"version":3,"file":"xopc-auth-storage.js","names":[],"sources":["../../../../src/agent/embedded/xopc-auth-storage.ts"],"sourcesContent":["import { InMemoryCredentialStore } from '@earendil-works/pi-ai';\nimport type { ModelRuntime } from '@earendil-works/pi-coding-agent';\n\nimport { resolveProviderApiKeySync } from '../../auth/sync-provider-auth.js';\nimport { getApiKeySync } from '../../providers/index.js';\n\n/**\n * Resolve API keys the same way as {@link AgentManager} / gateway settings:\n * auth-profiles (agent + global), OAuth files, models.json, then env.\n */\nexport function resolveXopcProviderApiKey(providerId: string): string | undefined {\n  return resolveProviderApiKeySync(providerId) ?? getApiKeySync(providerId);\n}\n\n/**\n * pi-coding-agent {@link createAgentSession} defaults to `~/.pi/agent/auth.json` and env.\n * Gateway / webchat turns inject xopc credentials through {@link applyXopcProviderApiKey}.\n */\nexport function createEmbeddedCredentialStore(): InMemoryCredentialStore {\n  return new InMemoryCredentialStore();\n}\n\n/**\n * Inject the resolved key as a runtime override (highest-priority, in-memory only) before\n * the session starts so request-time auth resolution finds it.\n */\nexport async function applyXopcProviderApiKey(\n  modelRuntime: Pick<ModelRuntime, 'setRuntimeApiKey'>,\n  providerId: string,\n): Promise<void> {\n  const key = resolveXopcProviderApiKey(providerId);\n  if (key && key !== 'extension-managed') {\n    await modelRuntime.setRuntimeApiKey(providerId, key);\n  }\n}\n"],"mappings":";;;;yBAG6E;gBACpB;;;;;AAMzD,SAAgB,0BAA0B,YAAwC;AAChF,QAAO,0BAA0B,WAAW,IAAI,cAAc,WAAW;;;;;;AAO3E,SAAgB,gCAAyD;AACvE,QAAO,IAAI,yBAAyB;;;;;;AAOtC,eAAsB,wBACpB,cACA,YACe;CACf,MAAM,MAAM,0BAA0B,WAAW;AACjD,KAAI,OAAO,QAAQ,oBACjB,OAAM,aAAa,iBAAiB,YAAY,IAAI"}

package/dist/src/agent/embedded/xopc-stream-bridge.js

@@ -1,3 +1,4 @@
+import "../../providers/constants.js";
 import { init_providers } from "../../providers/index.js";
 import { createExtensionAwareStreamFn } from "../../providers/extension-stream-bridge.js";
 //#region src/agent/embedded/xopc-stream-bridge.ts

package/dist/src/agent/embedded/xopc-stream-bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"xopc-stream-bridge.js","names":[],"sources":["../../../../src/agent/embedded/xopc-stream-bridge.ts"],"sourcesContent":["import type { Model, Api, Context, SimpleStreamOptions } from '@earendil-works/pi-ai';\nimport type { StreamFn } from '@earendil-works/pi-agent-core';\n\nimport { EXTENSION_PROVIDER_BASE_URL } from '../../providers/index.js';\nimport { createExtensionAwareStreamFn } from '../../providers/extension-stream-bridge.js';\n\n/**\n * pi-coding-agent's default {@link createAgentSession} streamFn always routes through\n * pi-ai's HTTP `streamSimple`, so xopc plugin providers (whose models carry the sentinel\n * `EXTENSION_PROVIDER_BASE_URL`) never reach their {@link ProviderPluginRegistry}\n * implementation. Wrap the original streamFn so plugin models go through xopc's bridge\n * and everything else falls through to the original auth-aware streamFn.\n *\n * Use this by reassigning {@link Agent.streamFn} after `createAgentSession` returns.\n */\nexport function wrapStreamFnForXopcExtensions(originalStreamFn: StreamFn): StreamFn {\n  const extensionStreamFn = createExtensionAwareStreamFn();\n\n  return ((model: Model<Api>, context: Context, options?: SimpleStreamOptions) => {\n    if (model.baseUrl === EXTENSION_PROVIDER_BASE_URL) {\n      return extensionStreamFn(model, context, options);\n    }\n    return originalStreamFn(model, context, options);\n  }) as StreamFn;\n}\n"],"mappings":";;;gBAGuE;;;;;;;;;;AAYvE,SAAgB,8BAA8B,kBAAsC;CAClF,MAAM,oBAAoB,8BAA8B;AAExD,UAAS,OAAmB,SAAkB,YAAkC;AAC9E,MAAI,MAAM,YAAA,8BACR,QAAO,kBAAkB,OAAO,SAAS,QAAQ;AAEnD,SAAO,iBAAiB,OAAO,SAAS,QAAQ"}
+{"version":3,"file":"xopc-stream-bridge.js","names":[],"sources":["../../../../src/agent/embedded/xopc-stream-bridge.ts"],"sourcesContent":["import type { Model, Api, Context, SimpleStreamOptions } from '@earendil-works/pi-ai';\nimport type { StreamFn } from '@earendil-works/pi-agent-core';\n\nimport { EXTENSION_PROVIDER_BASE_URL } from '../../providers/index.js';\nimport { createExtensionAwareStreamFn } from '../../providers/extension-stream-bridge.js';\n\n/**\n * pi-coding-agent's default {@link createAgentSession} streamFn always routes through\n * pi-ai's HTTP `streamSimple`, so xopc plugin providers (whose models carry the sentinel\n * `EXTENSION_PROVIDER_BASE_URL`) never reach their {@link ProviderPluginRegistry}\n * implementation. Wrap the original streamFn so plugin models go through xopc's bridge\n * and everything else falls through to the original auth-aware streamFn.\n *\n * Use this by reassigning {@link Agent.streamFn} after `createAgentSession` returns.\n */\nexport function wrapStreamFnForXopcExtensions(originalStreamFn: StreamFn): StreamFn {\n  const extensionStreamFn = createExtensionAwareStreamFn();\n\n  return ((model: Model<Api>, context: Context, options?: SimpleStreamOptions) => {\n    if (model.baseUrl === EXTENSION_PROVIDER_BASE_URL) {\n      return extensionStreamFn(model, context, options);\n    }\n    return originalStreamFn(model, context, options);\n  }) as StreamFn;\n}\n"],"mappings":";;;;gBAGuE;;;;;;;;;;AAYvE,SAAgB,8BAA8B,kBAAsC;CAClF,MAAM,oBAAoB,8BAA8B;AAExD,UAAS,OAAmB,SAAkB,YAAkC;AAC9E,MAAI,MAAM,YAAA,8BACR,QAAO,kBAAkB,OAAO,SAAS,QAAQ;AAEnD,SAAO,iBAAiB,OAAO,SAAS,QAAQ"}

package/dist/src/agent/goals/checklist-judge.js

@@ -1,8 +1,8 @@
 import { init_providers, resolveModel } from "../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../providers/model-call.js";
 import { JUDGE_REASON_EN } from "../../i18n/goals-bundle.js";
 import { goalUiLocaleOrFallback, judgeReasonText, judgeResponseLanguageNote, localizeJudgeReasonText } from "./goal-locale.js";
 import { DEFAULT_JUDGE_TIMEOUT_MS, extractAssistantText, getAssistantMessageErrorReason, resolveGoalJudgeApiKey, stripCodeFences, truncateGoalText } from "./judge.js";
-import { complete } from "@earendil-works/pi-ai/compat";
 //#region src/agent/goals/checklist-judge.ts
 init_providers();
 const GOAL_TRUNC = 4e3;
@@ -59,7 +59,7 @@ async function decomposeGoalChecklist(opts) {
 			timestamp: Date.now()
 		};
 		const apiKey = await resolveGoalJudgeApiKey(model);
-		const result = await complete(model, { messages: [user] }, {
+		const result = await completeWithResolvedCredentials(model, { messages: [user] }, {
 			apiKey,
 			maxTokens: 2e3,
 			temperature: 0,
@@ -138,7 +138,7 @@ async function evaluateGoalChecklistJudge(opts) {
 			timestamp: Date.now()
 		};
 		const apiKey = await resolveGoalJudgeApiKey(model);
-		const result = await complete(model, { messages: [user] }, {
+		const result = await completeWithResolvedCredentials(model, { messages: [user] }, {
 			apiKey,
 			maxTokens: 1500,
 			temperature: 0,

package/dist/src/agent/goals/checklist-judge.js.map

@@ -1 +1 @@
-{"version":3,"file":"checklist-judge.js","names":[],"sources":["../../../../src/agent/goals/checklist-judge.ts"],"sourcesContent":["import type { UserMessage } from '@earendil-works/pi-ai';\nimport { complete } from '@earendil-works/pi-ai/compat';\n\nimport { resolveModel } from '../../providers/index.js';\n\nimport {\n  DEFAULT_JUDGE_TIMEOUT_MS,\n  extractAssistantText,\n  getAssistantMessageErrorReason,\n  resolveGoalJudgeApiKey,\n  stripCodeFences,\n  truncateGoalText,\n} from './judge.js';\nimport type { GoalUiLocale } from './goal-locale.js';\nimport {\n  goalUiLocaleOrFallback,\n  judgeReasonText,\n  judgeResponseLanguageNote,\n  JUDGE_REASON_EN,\n  localizeJudgeReasonText,\n} from './goal-locale.js';\n\nconst GOAL_TRUNC = 4000;\nconst RESPONSE_SNIPPET = 4000;\nconst HISTORY_TRUNC = 24_000;\n\nconst DECOMPOSE_SYSTEM = (\n  'You break a user goal into an EXTREMELY detailed checklist of concrete, verifiable completion criteria. ' +\n  'Bias toward more items. Each item is one factual statement about finished work.\\n\\n' +\n  'If existing acceptance criteria are provided, return only missing supplemental criteria. ' +\n  'Do not repeat, rewrite, or replace existing criteria.\\n\\n' +\n  'Reply ONLY with a single JSON object on one line:\\n' +\n  '{\"items\":[{\"text\":\"...\"},...]}\\n' +\n  'Use at least 3 items when the goal warrants it.'\n);\n\nconst DECOMPOSE_USER = 'Goal:\\n{goal}\\n\\nReturn JSON only.';\n\nconst EVALUATE_CHECKLIST_SYSTEM = (\n  'You evaluate an autonomous agent\\'s progress on a goal with a numbered checklist.\\n' +\n  'For each pending item, decide if evidence in the agent snippet and/or history excerpt shows it is satisfied.\\n' +\n  'Flip pending→completed only with clear evidence; pending→impossible only if truly unachievable here.\\n' +\n  'Do not regress completed/impossible items — omit them from updates.\\n\\n' +\n  'Reply ONLY with one JSON object on one line:\\n' +\n  '{\"verdict\":\"continue|done|blocked|needs_input\",\"confidence\":0.0,\"reason\":\"...\",' +\n  '\"nextAction\":\"...\",\"missingEvidence\":[\"...\"],\"userQuestion\":\"...\",' +\n  '\"updates\":[{\"index\":1,\"status\":\"completed|impossible\",\"evidence\":\"short citation\"}],' +\n  '\"new_items\":[{\"text\":\"...\"}]}\\n' +\n  'Use verdict=done only when all checklist criteria are complete/impossible. ' +\n  'Use needs_input when the next step requires user input. Use blocked when external progress is impossible.'\n);\n\nfunction extractJsonObject(raw: string): Record<string, unknown> | null {\n  if (!raw?.trim()) return null;\n  const text = stripCodeFences(raw);\n  try {\n    const data = JSON.parse(text) as unknown;\n    return data && typeof data === 'object' && !Array.isArray(data) ? (data as Record<string, unknown>) : null;\n  } catch {\n    const start = text.indexOf('{');\n    const end = text.lastIndexOf('}');\n    if (start === -1 || end <= start) return null;\n    try {\n      const data = JSON.parse(text.slice(start, end + 1)) as unknown;\n      return data && typeof data === 'object' && !Array.isArray(data) ? (data as Record<string, unknown>) : null;\n    } catch {\n      return null;\n    }\n  }\n}\n\nexport type DecomposeChecklistResult = {\n  items: { text: string }[];\n  parseFailed: boolean;\n  errorReason?: string;\n};\n\nexport async function decomposeGoalChecklist(opts: {\n  goal: string;\n  existingChecklist?: string;\n  judgeModelRef: string;\n  signal?: AbortSignal;\n  judgeTimeoutMs?: number;\n  uiLocale?: GoalUiLocale;\n}): Promise<DecomposeChecklistResult> {\n  const locale = goalUiLocaleOrFallback(opts.uiLocale);\n  const goal = opts.goal.trim();\n  if (!goal)\n    return { items: [], parseFailed: false, errorReason: judgeReasonText('empty_goal', locale) };\n\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(opts.judgeModelRef);\n  } catch {\n    return {\n      items: [],\n      parseFailed: false,\n      errorReason: judgeReasonText('judge_model_not_configured', locale),\n    };\n  }\n\n  const timeoutMs =\n    typeof opts.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = opts.signal ? AbortSignal.any([opts.signal, controller.signal]) : controller.signal;\n\n  try {\n    const existingChecklist = opts.existingChecklist?.trim();\n    const decomposeUser = DECOMPOSE_USER.replace('{goal}', truncateGoalText(goal, GOAL_TRUNC)) +\n      (existingChecklist\n        ? `\\n\\nExisting acceptance criteria:\\n${truncateGoalText(existingChecklist, GOAL_TRUNC)}\\n\\nReturn only missing supplemental criteria as JSON.`\n        : '');\n    const user: UserMessage = {\n      role: 'user',\n      content:\n        `${DECOMPOSE_SYSTEM}\\n\\n${decomposeUser}` +\n        judgeResponseLanguageNote(locale),\n      timestamp: Date.now(),\n    };\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await complete(\n      model,\n      { messages: [user] },\n      { apiKey, maxTokens: 2000, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return {\n        items: [],\n        parseFailed: false,\n        errorReason: judgeReasonText('decompose_call_failed', locale),\n      };\n    }\n\n    const text = extractAssistantText(result.content);\n    const data = extractJsonObject(text);\n    if (!data)\n      return {\n        items: [],\n        parseFailed: true,\n        errorReason: judgeReasonText('decompose_reply_not_json', locale),\n      };\n    const rawItems = data.items ?? data.checklist;\n    if (!Array.isArray(rawItems))\n      return {\n        items: [],\n        parseFailed: true,\n        errorReason: judgeReasonText('missing_items_array', locale),\n      };\n    const items: { text: string }[] = [];\n    for (const row of rawItems) {\n      if (typeof row === 'string') {\n        const t = row.trim();\n        if (t) items.push({ text: t });\n      } else if (row && typeof row === 'object' && !Array.isArray(row)) {\n        const t = String((row as { text?: string }).text ?? '').trim();\n        if (t) items.push({ text: t });\n      }\n    }\n    if (!items.length)\n      return { items: [], parseFailed: true, errorReason: judgeReasonText('empty_checklist', locale) };\n    return { items, parseFailed: false };\n  } catch {\n    return {\n      items: [],\n      parseFailed: false,\n      errorReason: judgeReasonText('decompose_call_failed', locale),\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport type ChecklistJudgeUpdate = {\n  index: number;\n  status: 'completed' | 'impossible';\n  evidence?: string | null;\n};\n\nexport type ChecklistEvaluateParsed = {\n  verdict: 'continue' | 'done' | 'blocked' | 'needs_input';\n  confidence: number;\n  updates: ChecklistJudgeUpdate[];\n  newItems: { text: string }[];\n  reason: string;\n  nextAction?: string;\n  missingEvidence?: string[];\n  userQuestion?: string;\n};\n\nexport type EvaluateChecklistResult = {\n  parsed: ChecklistEvaluateParsed;\n  parseFailed: boolean;\n};\n\nexport async function evaluateGoalChecklistJudge(opts: {\n  goal: string;\n  numberedChecklist: string;\n  lastResponse: string;\n  historyExcerpt: string;\n  goalContextExcerpt?: string;\n  judgeModelRef: string;\n  signal?: AbortSignal;\n  judgeTimeoutMs?: number;\n  uiLocale?: GoalUiLocale;\n}): Promise<EvaluateChecklistResult> {\n  const locale = goalUiLocaleOrFallback(opts.uiLocale);\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(opts.judgeModelRef);\n  } catch {\n    return {\n      parsed: {\n        verdict: 'continue',\n        confidence: 0,\n        updates: [],\n        newItems: [],\n        reason: judgeReasonText('judge_model_not_configured', locale),\n      },\n      parseFailed: false,\n    };\n  }\n\n  const userBody =\n    `Goal:\\n${truncateGoalText(opts.goal, 2000)}\\n\\n` +\n    `Current checklist (1-based indices):\\n${opts.numberedChecklist}\\n\\n` +\n    `Original goal context and attachments:\\n${truncateGoalText(opts.goalContextExcerpt ?? '', 4000) || '(none)'}\\n\\n` +\n    `Agent's most recent response (snippet):\\n${truncateGoalText(opts.lastResponse, RESPONSE_SNIPPET)}\\n\\n` +\n    `Recent conversation excerpt (JSON or text, may be truncated):\\n` +\n    `${truncateGoalText(opts.historyExcerpt, HISTORY_TRUNC) || '(none)'}`;\n\n  const timeoutMs =\n    typeof opts.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = opts.signal ? AbortSignal.any([opts.signal, controller.signal]) : controller.signal;\n\n  try {\n    const user: UserMessage = {\n      role: 'user',\n      content: `${EVALUATE_CHECKLIST_SYSTEM}\\n\\n${userBody}` + judgeResponseLanguageNote(locale),\n      timestamp: Date.now(),\n    };\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await complete(\n      model,\n      { messages: [user] },\n      { apiKey, maxTokens: 1500, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return {\n        parsed: {\n          verdict: 'continue',\n          confidence: 0,\n          updates: [],\n          newItems: [],\n          reason: judgeReasonText('judge_call_failed', locale),\n        },\n        parseFailed: false,\n      };\n    }\n\n    const text = extractAssistantText(result.content);\n    const data = extractJsonObject(text);\n    if (!data) {\n      return {\n        parsed: {\n          verdict: 'continue',\n          confidence: 0,\n          updates: [],\n          newItems: [],\n          reason: judgeReasonText('judge_reply_not_json', locale),\n        },\n        parseFailed: true,\n      };\n    }\n    const updatesRaw = data.updates;\n    const newRaw = data.new_items ?? data.newItems;\n    const verdictRaw = String(data.verdict ?? '').trim().toLowerCase();\n    const verdict =\n      verdictRaw === 'done' || verdictRaw === 'blocked' || verdictRaw === 'needs_input'\n        ? verdictRaw\n        : 'continue';\n    const confidenceRaw = Number(data.confidence);\n    const confidence = Number.isFinite(confidenceRaw) ? Math.max(0, Math.min(1, confidenceRaw)) : 0;\n    const nextAction = typeof data.nextAction === 'string' ? data.nextAction.trim() : undefined;\n    const userQuestion = typeof data.userQuestion === 'string' ? data.userQuestion.trim() : undefined;\n    const missingEvidenceRaw = data.missingEvidence ?? data.missing_evidence;\n    const trimmed = typeof data.reason === 'string' ? data.reason.trim() : '';\n    const inner = trimmed || JUDGE_REASON_EN.no_reason_provided;\n    const reason = localizeJudgeReasonText(inner, locale);\n    const updates: ChecklistJudgeUpdate[] = [];\n    if (Array.isArray(updatesRaw)) {\n      for (const u of updatesRaw) {\n        if (!u || typeof u !== 'object' || Array.isArray(u)) continue;\n        const rec = u as Record<string, unknown>;\n        const idx1 = Number(rec.index);\n        if (!Number.isFinite(idx1)) continue;\n        const idx0 = Math.floor(idx1) - 1;\n        const st = String(rec.status ?? '').trim().toLowerCase();\n        if (st !== 'completed' && st !== 'impossible') continue;\n        const evidence = typeof rec.evidence === 'string' ? rec.evidence : null;\n        updates.push({ index: idx0, status: st, evidence });\n      }\n    }\n    const newItems: { text: string }[] = [];\n    if (Array.isArray(newRaw)) {\n      for (const row of newRaw) {\n        if (typeof row === 'string') {\n          const t = row.trim();\n          if (t) newItems.push({ text: t });\n        } else if (row && typeof row === 'object' && !Array.isArray(row)) {\n          const t = String((row as { text?: string }).text ?? '').trim();\n          if (t) newItems.push({ text: t });\n        }\n      }\n    }\n    const missingEvidence: string[] = [];\n    if (Array.isArray(missingEvidenceRaw)) {\n      for (const item of missingEvidenceRaw) {\n        if (typeof item === 'string' && item.trim()) missingEvidence.push(item.trim());\n      }\n    }\n    return {\n      parsed: {\n        verdict,\n        confidence,\n        updates,\n        newItems,\n        reason: reason || judgeReasonText('no_reason_provided', locale),\n        ...(nextAction ? { nextAction } : {}),\n        ...(missingEvidence.length ? { missingEvidence } : {}),\n        ...(userQuestion ? { userQuestion } : {}),\n      },\n      parseFailed: false,\n    };\n  } catch {\n    return {\n      parsed: {\n        verdict: 'continue',\n        confidence: 0,\n        updates: [],\n        newItems: [],\n        reason: judgeReasonText('judge_call_failed', locale),\n      },\n      parseFailed: false,\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;;gBAGwD;AAmBxD,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AAEtB,MAAM,mBACJ;AASF,MAAM,iBAAiB;AAEvB,MAAM,4BACJ;AAaF,SAAS,kBAAkB,KAA6C;AACtE,KAAI,CAAC,KAAK,MAAM,CAAE,QAAO;CACzB,MAAM,OAAO,gBAAgB,IAAI;AACjC,KAAI;EACF,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,SAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAI,OAAmC;SAChG;EACN,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,MAAI,UAAU,MAAM,OAAO,MAAO,QAAO;AACzC,MAAI;GACF,MAAM,OAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;AACnD,UAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAI,OAAmC;UAChG;AACN,UAAO;;;;AAWb,eAAsB,uBAAuB,MAOP;CACpC,MAAM,SAAS,uBAAuB,KAAK,SAAS;CACpD,MAAM,OAAO,KAAK,KAAK,MAAM;AAC7B,KAAI,CAAC,KACH,QAAO;EAAE,OAAO,EAAE;EAAE,aAAa;EAAO,aAAa,gBAAgB,cAAc,OAAO;EAAE;CAE9F,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,KAAK,cAAc;SAClC;AACN,SAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,8BAA8B,OAAO;GACnE;;CAGH,MAAM,YACJ,OAAO,KAAK,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC3E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,CAAC,KAAK,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAE5F,KAAI;EACF,MAAM,oBAAoB,KAAK,mBAAmB,MAAM;EAKxD,MAAM,OAAoB;GACxB,MAAM;GACN,SACE,GAAG,iBAAiB,MAPF,eAAe,QAAQ,UAAU,iBAAiB,MAAM,WAAW,CAAC,IACvF,oBACG,sCAAsC,iBAAiB,mBAAmB,WAAW,CAAC,0DACtF,QAKF,0BAA0B,OAAO;GACnC,WAAW,KAAK,KAAK;GACtB;EACD,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,SACnB,OACA,EAAE,UAAU,CAAC,KAAK,EAAE,EACpB;GAAE;GAAQ,WAAW;GAAM,aAAa;GAAG,QAAQ;GAAQ,CAC5D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,yBAAyB,OAAO;GAC9D;EAIH,MAAM,OAAO,kBADA,qBAAqB,OAAO,QACN,CAAC;AACpC,MAAI,CAAC,KACH,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,4BAA4B,OAAO;GACjE;EACH,MAAM,WAAW,KAAK,SAAS,KAAK;AACpC,MAAI,CAAC,MAAM,QAAQ,SAAS,CAC1B,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,uBAAuB,OAAO;GAC5D;EACH,MAAM,QAA4B,EAAE;AACpC,OAAK,MAAM,OAAO,SAChB,KAAI,OAAO,QAAQ,UAAU;GAC3B,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,EAAG,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC;aACrB,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GAChE,MAAM,IAAI,OAAQ,IAA0B,QAAQ,GAAG,CAAC,MAAM;AAC9D,OAAI,EAAG,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC;;AAGlC,MAAI,CAAC,MAAM,OACT,QAAO;GAAE,OAAO,EAAE;GAAE,aAAa;GAAM,aAAa,gBAAgB,mBAAmB,OAAO;GAAE;AAClG,SAAO;GAAE;GAAO,aAAa;GAAO;SAC9B;AACN,SAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,yBAAyB,OAAO;GAC9D;WACO;AACR,eAAa,MAAM;;;AA0BvB,eAAsB,2BAA2B,MAUZ;CACnC,MAAM,SAAS,uBAAuB,KAAK,SAAS;CACpD,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,KAAK,cAAc;SAClC;AACN,SAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,8BAA8B,OAAO;IAC9D;GACD,aAAa;GACd;;CAGH,MAAM,WACJ,UAAU,iBAAiB,KAAK,MAAM,IAAK,CAAC,4CACH,KAAK,kBAAkB,8CACrB,iBAAiB,KAAK,sBAAsB,IAAI,IAAK,IAAI,SAAS,+CACjE,iBAAiB,KAAK,cAAc,iBAAiB,CAAC,qEAE/F,iBAAiB,KAAK,gBAAgB,cAAc,IAAI;CAE7D,MAAM,YACJ,OAAO,KAAK,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC3E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,CAAC,KAAK,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAE5F,KAAI;EACF,MAAM,OAAoB;GACxB,MAAM;GACN,SAAS,GAAG,0BAA0B,MAAM,aAAa,0BAA0B,OAAO;GAC1F,WAAW,KAAK,KAAK;GACtB;EACD,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,SACnB,OACA,EAAE,UAAU,CAAC,KAAK,EAAE,EACpB;GAAE;GAAQ,WAAW;GAAM,aAAa;GAAG,QAAQ;GAAQ,CAC5D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,qBAAqB,OAAO;IACrD;GACD,aAAa;GACd;EAIH,MAAM,OAAO,kBADA,qBAAqB,OAAO,QACN,CAAC;AACpC,MAAI,CAAC,KACH,QAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,wBAAwB,OAAO;IACxD;GACD,aAAa;GACd;EAEH,MAAM,aAAa,KAAK;EACxB,MAAM,SAAS,KAAK,aAAa,KAAK;EACtC,MAAM,aAAa,OAAO,KAAK,WAAW,GAAG,CAAC,MAAM,CAAC,aAAa;EAClE,MAAM,UACJ,eAAe,UAAU,eAAe,aAAa,eAAe,gBAChE,aACA;EACN,MAAM,gBAAgB,OAAO,KAAK,WAAW;EAC7C,MAAM,aAAa,OAAO,SAAS,cAAc,GAAG,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,cAAc,CAAC,GAAG;EAC9F,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,MAAM,GAAG,KAAA;EACxF,MAAM,qBAAqB,KAAK,mBAAmB,KAAK;EAGxD,MAAM,SAAS,yBAFC,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,GAAG,OAC9C,gBAAgB,oBACK,OAAO;EACrD,MAAM,UAAkC,EAAE;AAC1C,MAAI,MAAM,QAAQ,WAAW,CAC3B,MAAK,MAAM,KAAK,YAAY;AAC1B,OAAI,CAAC,KAAK,OAAO,MAAM,YAAY,MAAM,QAAQ,EAAE,CAAE;GACrD,MAAM,MAAM;GACZ,MAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,OAAI,CAAC,OAAO,SAAS,KAAK,CAAE;GAC5B,MAAM,OAAO,KAAK,MAAM,KAAK,GAAG;GAChC,MAAM,KAAK,OAAO,IAAI,UAAU,GAAG,CAAC,MAAM,CAAC,aAAa;AACxD,OAAI,OAAO,eAAe,OAAO,aAAc;GAC/C,MAAM,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AACnE,WAAQ,KAAK;IAAE,OAAO;IAAM,QAAQ;IAAI;IAAU,CAAC;;EAGvD,MAAM,WAA+B,EAAE;AACvC,MAAI,MAAM,QAAQ,OAAO;QAClB,MAAM,OAAO,OAChB,KAAI,OAAO,QAAQ,UAAU;IAC3B,MAAM,IAAI,IAAI,MAAM;AACpB,QAAI,EAAG,UAAS,KAAK,EAAE,MAAM,GAAG,CAAC;cACxB,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;IAChE,MAAM,IAAI,OAAQ,IAA0B,QAAQ,GAAG,CAAC,MAAM;AAC9D,QAAI,EAAG,UAAS,KAAK,EAAE,MAAM,GAAG,CAAC;;;EAIvC,MAAM,kBAA4B,EAAE;AACpC,MAAI,MAAM,QAAQ,mBAAmB;QAC9B,MAAM,QAAQ,mBACjB,KAAI,OAAO,SAAS,YAAY,KAAK,MAAM,CAAE,iBAAgB,KAAK,KAAK,MAAM,CAAC;;AAGlF,SAAO;GACL,QAAQ;IACN;IACA;IACA;IACA;IACA,QAAQ,UAAU,gBAAgB,sBAAsB,OAAO;IAC/D,GAAI,aAAa,EAAE,YAAY,GAAG,EAAE;IACpC,GAAI,gBAAgB,SAAS,EAAE,iBAAiB,GAAG,EAAE;IACrD,GAAI,eAAe,EAAE,cAAc,GAAG,EAAE;IACzC;GACD,aAAa;GACd;SACK;AACN,SAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,qBAAqB,OAAO;IACrD;GACD,aAAa;GACd;WACO;AACR,eAAa,MAAM"}
+{"version":3,"file":"checklist-judge.js","names":[],"sources":["../../../../src/agent/goals/checklist-judge.ts"],"sourcesContent":["import type { UserMessage } from '@earendil-works/pi-ai';\n\nimport { resolveModel } from '../../providers/index.js';\nimport { completeWithResolvedCredentials } from '../../providers/model-call.js';\n\nimport {\n  DEFAULT_JUDGE_TIMEOUT_MS,\n  extractAssistantText,\n  getAssistantMessageErrorReason,\n  resolveGoalJudgeApiKey,\n  stripCodeFences,\n  truncateGoalText,\n} from './judge.js';\nimport type { GoalUiLocale } from './goal-locale.js';\nimport {\n  goalUiLocaleOrFallback,\n  judgeReasonText,\n  judgeResponseLanguageNote,\n  JUDGE_REASON_EN,\n  localizeJudgeReasonText,\n} from './goal-locale.js';\n\nconst GOAL_TRUNC = 4000;\nconst RESPONSE_SNIPPET = 4000;\nconst HISTORY_TRUNC = 24_000;\n\nconst DECOMPOSE_SYSTEM = (\n  'You break a user goal into an EXTREMELY detailed checklist of concrete, verifiable completion criteria. ' +\n  'Bias toward more items. Each item is one factual statement about finished work.\\n\\n' +\n  'If existing acceptance criteria are provided, return only missing supplemental criteria. ' +\n  'Do not repeat, rewrite, or replace existing criteria.\\n\\n' +\n  'Reply ONLY with a single JSON object on one line:\\n' +\n  '{\"items\":[{\"text\":\"...\"},...]}\\n' +\n  'Use at least 3 items when the goal warrants it.'\n);\n\nconst DECOMPOSE_USER = 'Goal:\\n{goal}\\n\\nReturn JSON only.';\n\nconst EVALUATE_CHECKLIST_SYSTEM = (\n  'You evaluate an autonomous agent\\'s progress on a goal with a numbered checklist.\\n' +\n  'For each pending item, decide if evidence in the agent snippet and/or history excerpt shows it is satisfied.\\n' +\n  'Flip pending→completed only with clear evidence; pending→impossible only if truly unachievable here.\\n' +\n  'Do not regress completed/impossible items — omit them from updates.\\n\\n' +\n  'Reply ONLY with one JSON object on one line:\\n' +\n  '{\"verdict\":\"continue|done|blocked|needs_input\",\"confidence\":0.0,\"reason\":\"...\",' +\n  '\"nextAction\":\"...\",\"missingEvidence\":[\"...\"],\"userQuestion\":\"...\",' +\n  '\"updates\":[{\"index\":1,\"status\":\"completed|impossible\",\"evidence\":\"short citation\"}],' +\n  '\"new_items\":[{\"text\":\"...\"}]}\\n' +\n  'Use verdict=done only when all checklist criteria are complete/impossible. ' +\n  'Use needs_input when the next step requires user input. Use blocked when external progress is impossible.'\n);\n\nfunction extractJsonObject(raw: string): Record<string, unknown> | null {\n  if (!raw?.trim()) return null;\n  const text = stripCodeFences(raw);\n  try {\n    const data = JSON.parse(text) as unknown;\n    return data && typeof data === 'object' && !Array.isArray(data) ? (data as Record<string, unknown>) : null;\n  } catch {\n    const start = text.indexOf('{');\n    const end = text.lastIndexOf('}');\n    if (start === -1 || end <= start) return null;\n    try {\n      const data = JSON.parse(text.slice(start, end + 1)) as unknown;\n      return data && typeof data === 'object' && !Array.isArray(data) ? (data as Record<string, unknown>) : null;\n    } catch {\n      return null;\n    }\n  }\n}\n\nexport type DecomposeChecklistResult = {\n  items: { text: string }[];\n  parseFailed: boolean;\n  errorReason?: string;\n};\n\nexport async function decomposeGoalChecklist(opts: {\n  goal: string;\n  existingChecklist?: string;\n  judgeModelRef: string;\n  signal?: AbortSignal;\n  judgeTimeoutMs?: number;\n  uiLocale?: GoalUiLocale;\n}): Promise<DecomposeChecklistResult> {\n  const locale = goalUiLocaleOrFallback(opts.uiLocale);\n  const goal = opts.goal.trim();\n  if (!goal)\n    return { items: [], parseFailed: false, errorReason: judgeReasonText('empty_goal', locale) };\n\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(opts.judgeModelRef);\n  } catch {\n    return {\n      items: [],\n      parseFailed: false,\n      errorReason: judgeReasonText('judge_model_not_configured', locale),\n    };\n  }\n\n  const timeoutMs =\n    typeof opts.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = opts.signal ? AbortSignal.any([opts.signal, controller.signal]) : controller.signal;\n\n  try {\n    const existingChecklist = opts.existingChecklist?.trim();\n    const decomposeUser = DECOMPOSE_USER.replace('{goal}', truncateGoalText(goal, GOAL_TRUNC)) +\n      (existingChecklist\n        ? `\\n\\nExisting acceptance criteria:\\n${truncateGoalText(existingChecklist, GOAL_TRUNC)}\\n\\nReturn only missing supplemental criteria as JSON.`\n        : '');\n    const user: UserMessage = {\n      role: 'user',\n      content:\n        `${DECOMPOSE_SYSTEM}\\n\\n${decomposeUser}` +\n        judgeResponseLanguageNote(locale),\n      timestamp: Date.now(),\n    };\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await completeWithResolvedCredentials(\n      model,\n      { messages: [user] },\n      { apiKey, maxTokens: 2000, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return {\n        items: [],\n        parseFailed: false,\n        errorReason: judgeReasonText('decompose_call_failed', locale),\n      };\n    }\n\n    const text = extractAssistantText(result.content);\n    const data = extractJsonObject(text);\n    if (!data)\n      return {\n        items: [],\n        parseFailed: true,\n        errorReason: judgeReasonText('decompose_reply_not_json', locale),\n      };\n    const rawItems = data.items ?? data.checklist;\n    if (!Array.isArray(rawItems))\n      return {\n        items: [],\n        parseFailed: true,\n        errorReason: judgeReasonText('missing_items_array', locale),\n      };\n    const items: { text: string }[] = [];\n    for (const row of rawItems) {\n      if (typeof row === 'string') {\n        const t = row.trim();\n        if (t) items.push({ text: t });\n      } else if (row && typeof row === 'object' && !Array.isArray(row)) {\n        const t = String((row as { text?: string }).text ?? '').trim();\n        if (t) items.push({ text: t });\n      }\n    }\n    if (!items.length)\n      return { items: [], parseFailed: true, errorReason: judgeReasonText('empty_checklist', locale) };\n    return { items, parseFailed: false };\n  } catch {\n    return {\n      items: [],\n      parseFailed: false,\n      errorReason: judgeReasonText('decompose_call_failed', locale),\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nexport type ChecklistJudgeUpdate = {\n  index: number;\n  status: 'completed' | 'impossible';\n  evidence?: string | null;\n};\n\nexport type ChecklistEvaluateParsed = {\n  verdict: 'continue' | 'done' | 'blocked' | 'needs_input';\n  confidence: number;\n  updates: ChecklistJudgeUpdate[];\n  newItems: { text: string }[];\n  reason: string;\n  nextAction?: string;\n  missingEvidence?: string[];\n  userQuestion?: string;\n};\n\nexport type EvaluateChecklistResult = {\n  parsed: ChecklistEvaluateParsed;\n  parseFailed: boolean;\n};\n\nexport async function evaluateGoalChecklistJudge(opts: {\n  goal: string;\n  numberedChecklist: string;\n  lastResponse: string;\n  historyExcerpt: string;\n  goalContextExcerpt?: string;\n  judgeModelRef: string;\n  signal?: AbortSignal;\n  judgeTimeoutMs?: number;\n  uiLocale?: GoalUiLocale;\n}): Promise<EvaluateChecklistResult> {\n  const locale = goalUiLocaleOrFallback(opts.uiLocale);\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(opts.judgeModelRef);\n  } catch {\n    return {\n      parsed: {\n        verdict: 'continue',\n        confidence: 0,\n        updates: [],\n        newItems: [],\n        reason: judgeReasonText('judge_model_not_configured', locale),\n      },\n      parseFailed: false,\n    };\n  }\n\n  const userBody =\n    `Goal:\\n${truncateGoalText(opts.goal, 2000)}\\n\\n` +\n    `Current checklist (1-based indices):\\n${opts.numberedChecklist}\\n\\n` +\n    `Original goal context and attachments:\\n${truncateGoalText(opts.goalContextExcerpt ?? '', 4000) || '(none)'}\\n\\n` +\n    `Agent's most recent response (snippet):\\n${truncateGoalText(opts.lastResponse, RESPONSE_SNIPPET)}\\n\\n` +\n    `Recent conversation excerpt (JSON or text, may be truncated):\\n` +\n    `${truncateGoalText(opts.historyExcerpt, HISTORY_TRUNC) || '(none)'}`;\n\n  const timeoutMs =\n    typeof opts.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = opts.signal ? AbortSignal.any([opts.signal, controller.signal]) : controller.signal;\n\n  try {\n    const user: UserMessage = {\n      role: 'user',\n      content: `${EVALUATE_CHECKLIST_SYSTEM}\\n\\n${userBody}` + judgeResponseLanguageNote(locale),\n      timestamp: Date.now(),\n    };\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await completeWithResolvedCredentials(\n      model,\n      { messages: [user] },\n      { apiKey, maxTokens: 1500, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return {\n        parsed: {\n          verdict: 'continue',\n          confidence: 0,\n          updates: [],\n          newItems: [],\n          reason: judgeReasonText('judge_call_failed', locale),\n        },\n        parseFailed: false,\n      };\n    }\n\n    const text = extractAssistantText(result.content);\n    const data = extractJsonObject(text);\n    if (!data) {\n      return {\n        parsed: {\n          verdict: 'continue',\n          confidence: 0,\n          updates: [],\n          newItems: [],\n          reason: judgeReasonText('judge_reply_not_json', locale),\n        },\n        parseFailed: true,\n      };\n    }\n    const updatesRaw = data.updates;\n    const newRaw = data.new_items ?? data.newItems;\n    const verdictRaw = String(data.verdict ?? '').trim().toLowerCase();\n    const verdict =\n      verdictRaw === 'done' || verdictRaw === 'blocked' || verdictRaw === 'needs_input'\n        ? verdictRaw\n        : 'continue';\n    const confidenceRaw = Number(data.confidence);\n    const confidence = Number.isFinite(confidenceRaw) ? Math.max(0, Math.min(1, confidenceRaw)) : 0;\n    const nextAction = typeof data.nextAction === 'string' ? data.nextAction.trim() : undefined;\n    const userQuestion = typeof data.userQuestion === 'string' ? data.userQuestion.trim() : undefined;\n    const missingEvidenceRaw = data.missingEvidence ?? data.missing_evidence;\n    const trimmed = typeof data.reason === 'string' ? data.reason.trim() : '';\n    const inner = trimmed || JUDGE_REASON_EN.no_reason_provided;\n    const reason = localizeJudgeReasonText(inner, locale);\n    const updates: ChecklistJudgeUpdate[] = [];\n    if (Array.isArray(updatesRaw)) {\n      for (const u of updatesRaw) {\n        if (!u || typeof u !== 'object' || Array.isArray(u)) continue;\n        const rec = u as Record<string, unknown>;\n        const idx1 = Number(rec.index);\n        if (!Number.isFinite(idx1)) continue;\n        const idx0 = Math.floor(idx1) - 1;\n        const st = String(rec.status ?? '').trim().toLowerCase();\n        if (st !== 'completed' && st !== 'impossible') continue;\n        const evidence = typeof rec.evidence === 'string' ? rec.evidence : null;\n        updates.push({ index: idx0, status: st, evidence });\n      }\n    }\n    const newItems: { text: string }[] = [];\n    if (Array.isArray(newRaw)) {\n      for (const row of newRaw) {\n        if (typeof row === 'string') {\n          const t = row.trim();\n          if (t) newItems.push({ text: t });\n        } else if (row && typeof row === 'object' && !Array.isArray(row)) {\n          const t = String((row as { text?: string }).text ?? '').trim();\n          if (t) newItems.push({ text: t });\n        }\n      }\n    }\n    const missingEvidence: string[] = [];\n    if (Array.isArray(missingEvidenceRaw)) {\n      for (const item of missingEvidenceRaw) {\n        if (typeof item === 'string' && item.trim()) missingEvidence.push(item.trim());\n      }\n    }\n    return {\n      parsed: {\n        verdict,\n        confidence,\n        updates,\n        newItems,\n        reason: reason || judgeReasonText('no_reason_provided', locale),\n        ...(nextAction ? { nextAction } : {}),\n        ...(missingEvidence.length ? { missingEvidence } : {}),\n        ...(userQuestion ? { userQuestion } : {}),\n      },\n      parseFailed: false,\n    };\n  } catch {\n    return {\n      parsed: {\n        verdict: 'continue',\n        confidence: 0,\n        updates: [],\n        newItems: [],\n        reason: judgeReasonText('judge_call_failed', locale),\n      },\n      parseFailed: false,\n    };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;;gBAEwD;AAoBxD,MAAM,aAAa;AACnB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AAEtB,MAAM,mBACJ;AASF,MAAM,iBAAiB;AAEvB,MAAM,4BACJ;AAaF,SAAS,kBAAkB,KAA6C;AACtE,KAAI,CAAC,KAAK,MAAM,CAAE,QAAO;CACzB,MAAM,OAAO,gBAAgB,IAAI;AACjC,KAAI;EACF,MAAM,OAAO,KAAK,MAAM,KAAK;AAC7B,SAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAI,OAAmC;SAChG;EACN,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,MAAI,UAAU,MAAM,OAAO,MAAO,QAAO;AACzC,MAAI;GACF,MAAM,OAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;AACnD,UAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAI,OAAmC;UAChG;AACN,UAAO;;;;AAWb,eAAsB,uBAAuB,MAOP;CACpC,MAAM,SAAS,uBAAuB,KAAK,SAAS;CACpD,MAAM,OAAO,KAAK,KAAK,MAAM;AAC7B,KAAI,CAAC,KACH,QAAO;EAAE,OAAO,EAAE;EAAE,aAAa;EAAO,aAAa,gBAAgB,cAAc,OAAO;EAAE;CAE9F,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,KAAK,cAAc;SAClC;AACN,SAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,8BAA8B,OAAO;GACnE;;CAGH,MAAM,YACJ,OAAO,KAAK,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC3E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,CAAC,KAAK,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAE5F,KAAI;EACF,MAAM,oBAAoB,KAAK,mBAAmB,MAAM;EAKxD,MAAM,OAAoB;GACxB,MAAM;GACN,SACE,GAAG,iBAAiB,MAPF,eAAe,QAAQ,UAAU,iBAAiB,MAAM,WAAW,CAAC,IACvF,oBACG,sCAAsC,iBAAiB,mBAAmB,WAAW,CAAC,0DACtF,QAKF,0BAA0B,OAAO;GACnC,WAAW,KAAK,KAAK;GACtB;EACD,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,gCACnB,OACA,EAAE,UAAU,CAAC,KAAK,EAAE,EACpB;GAAE;GAAQ,WAAW;GAAM,aAAa;GAAG,QAAQ;GAAQ,CAC5D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,yBAAyB,OAAO;GAC9D;EAIH,MAAM,OAAO,kBADA,qBAAqB,OAAO,QACN,CAAC;AACpC,MAAI,CAAC,KACH,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,4BAA4B,OAAO;GACjE;EACH,MAAM,WAAW,KAAK,SAAS,KAAK;AACpC,MAAI,CAAC,MAAM,QAAQ,SAAS,CAC1B,QAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,uBAAuB,OAAO;GAC5D;EACH,MAAM,QAA4B,EAAE;AACpC,OAAK,MAAM,OAAO,SAChB,KAAI,OAAO,QAAQ,UAAU;GAC3B,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,EAAG,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC;aACrB,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;GAChE,MAAM,IAAI,OAAQ,IAA0B,QAAQ,GAAG,CAAC,MAAM;AAC9D,OAAI,EAAG,OAAM,KAAK,EAAE,MAAM,GAAG,CAAC;;AAGlC,MAAI,CAAC,MAAM,OACT,QAAO;GAAE,OAAO,EAAE;GAAE,aAAa;GAAM,aAAa,gBAAgB,mBAAmB,OAAO;GAAE;AAClG,SAAO;GAAE;GAAO,aAAa;GAAO;SAC9B;AACN,SAAO;GACL,OAAO,EAAE;GACT,aAAa;GACb,aAAa,gBAAgB,yBAAyB,OAAO;GAC9D;WACO;AACR,eAAa,MAAM;;;AA0BvB,eAAsB,2BAA2B,MAUZ;CACnC,MAAM,SAAS,uBAAuB,KAAK,SAAS;CACpD,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,KAAK,cAAc;SAClC;AACN,SAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,8BAA8B,OAAO;IAC9D;GACD,aAAa;GACd;;CAGH,MAAM,WACJ,UAAU,iBAAiB,KAAK,MAAM,IAAK,CAAC,4CACH,KAAK,kBAAkB,8CACrB,iBAAiB,KAAK,sBAAsB,IAAI,IAAK,IAAI,SAAS,+CACjE,iBAAiB,KAAK,cAAc,iBAAiB,CAAC,qEAE/F,iBAAiB,KAAK,gBAAgB,cAAc,IAAI;CAE7D,MAAM,YACJ,OAAO,KAAK,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC3E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,KAAK,SAAS,YAAY,IAAI,CAAC,KAAK,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAE5F,KAAI;EACF,MAAM,OAAoB;GACxB,MAAM;GACN,SAAS,GAAG,0BAA0B,MAAM,aAAa,0BAA0B,OAAO;GAC1F,WAAW,KAAK,KAAK;GACtB;EACD,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,gCACnB,OACA,EAAE,UAAU,CAAC,KAAK,EAAE,EACpB;GAAE;GAAQ,WAAW;GAAM,aAAa;GAAG,QAAQ;GAAQ,CAC5D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,qBAAqB,OAAO;IACrD;GACD,aAAa;GACd;EAIH,MAAM,OAAO,kBADA,qBAAqB,OAAO,QACN,CAAC;AACpC,MAAI,CAAC,KACH,QAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,wBAAwB,OAAO;IACxD;GACD,aAAa;GACd;EAEH,MAAM,aAAa,KAAK;EACxB,MAAM,SAAS,KAAK,aAAa,KAAK;EACtC,MAAM,aAAa,OAAO,KAAK,WAAW,GAAG,CAAC,MAAM,CAAC,aAAa;EAClE,MAAM,UACJ,eAAe,UAAU,eAAe,aAAa,eAAe,gBAChE,aACA;EACN,MAAM,gBAAgB,OAAO,KAAK,WAAW;EAC7C,MAAM,aAAa,OAAO,SAAS,cAAc,GAAG,KAAK,IAAI,GAAG,KAAK,IAAI,GAAG,cAAc,CAAC,GAAG;EAC9F,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,MAAM,GAAG,KAAA;EACxF,MAAM,qBAAqB,KAAK,mBAAmB,KAAK;EAGxD,MAAM,SAAS,yBAFC,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,GAAG,OAC9C,gBAAgB,oBACK,OAAO;EACrD,MAAM,UAAkC,EAAE;AAC1C,MAAI,MAAM,QAAQ,WAAW,CAC3B,MAAK,MAAM,KAAK,YAAY;AAC1B,OAAI,CAAC,KAAK,OAAO,MAAM,YAAY,MAAM,QAAQ,EAAE,CAAE;GACrD,MAAM,MAAM;GACZ,MAAM,OAAO,OAAO,IAAI,MAAM;AAC9B,OAAI,CAAC,OAAO,SAAS,KAAK,CAAE;GAC5B,MAAM,OAAO,KAAK,MAAM,KAAK,GAAG;GAChC,MAAM,KAAK,OAAO,IAAI,UAAU,GAAG,CAAC,MAAM,CAAC,aAAa;AACxD,OAAI,OAAO,eAAe,OAAO,aAAc;GAC/C,MAAM,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,WAAW;AACnE,WAAQ,KAAK;IAAE,OAAO;IAAM,QAAQ;IAAI;IAAU,CAAC;;EAGvD,MAAM,WAA+B,EAAE;AACvC,MAAI,MAAM,QAAQ,OAAO;QAClB,MAAM,OAAO,OAChB,KAAI,OAAO,QAAQ,UAAU;IAC3B,MAAM,IAAI,IAAI,MAAM;AACpB,QAAI,EAAG,UAAS,KAAK,EAAE,MAAM,GAAG,CAAC;cACxB,OAAO,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI,EAAE;IAChE,MAAM,IAAI,OAAQ,IAA0B,QAAQ,GAAG,CAAC,MAAM;AAC9D,QAAI,EAAG,UAAS,KAAK,EAAE,MAAM,GAAG,CAAC;;;EAIvC,MAAM,kBAA4B,EAAE;AACpC,MAAI,MAAM,QAAQ,mBAAmB;QAC9B,MAAM,QAAQ,mBACjB,KAAI,OAAO,SAAS,YAAY,KAAK,MAAM,CAAE,iBAAgB,KAAK,KAAK,MAAM,CAAC;;AAGlF,SAAO;GACL,QAAQ;IACN;IACA;IACA;IACA;IACA,QAAQ,UAAU,gBAAgB,sBAAsB,OAAO;IAC/D,GAAI,aAAa,EAAE,YAAY,GAAG,EAAE;IACpC,GAAI,gBAAgB,SAAS,EAAE,iBAAiB,GAAG,EAAE;IACrD,GAAI,eAAe,EAAE,cAAc,GAAG,EAAE;IACzC;GACD,aAAa;GACd;SACK;AACN,SAAO;GACL,QAAQ;IACN,SAAS;IACT,YAAY;IACZ,SAAS,EAAE;IACX,UAAU,EAAE;IACZ,QAAQ,gBAAgB,qBAAqB,OAAO;IACrD;GACD,aAAa;GACd;WACO;AACR,eAAa,MAAM"}

package/dist/src/agent/goals/judge.js

@@ -1,7 +1,7 @@
 import { getApiKey, init_providers, resolveModel } from "../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../providers/model-call.js";
 import { JUDGE_REASON_EN } from "../../i18n/goals-bundle.js";
 import { goalUiLocaleOrFallback, judgeFreeformBuiltinMessages, judgeResponseLanguageNote, localizeJudgeReasonText } from "./goal-locale.js";
-import { complete } from "@earendil-works/pi-ai/compat";
 //#region src/agent/goals/judge.ts
 init_providers();
 const JUDGE_RESPONSE_SNIPPET_CHARS = 4e3;
@@ -144,7 +144,7 @@ async function judgeGoalHermesStyle(goal, lastResponse, judgeModelRef, signal, o
 			timestamp: Date.now()
 		};
 		const apiKey = await resolveGoalJudgeApiKey(model);
-		const result = await complete(model, { messages: [combinedUser] }, {
+		const result = await completeWithResolvedCredentials(model, { messages: [combinedUser] }, {
 			apiKey,
 			maxTokens: 200,
 			temperature: 0,

package/dist/src/agent/goals/judge.js.map

@@ -1 +1 @@
-{"version":3,"file":"judge.js","names":[],"sources":["../../../../src/agent/goals/judge.ts"],"sourcesContent":["import type { UserMessage } from '@earendil-works/pi-ai';\nimport { complete } from '@earendil-works/pi-ai/compat';\n\nimport { getApiKey, resolveModel } from '../../providers/index.js';\n\nimport type { GoalUiLocale } from './goal-locale.js';\nimport {\n  goalUiLocaleOrFallback,\n  judgeFreeformBuiltinMessages,\n  JUDGE_REASON_EN,\n  judgeResponseLanguageNote,\n  localizeJudgeReasonText,\n} from './goal-locale.js';\n\nconst JUDGE_RESPONSE_SNIPPET_CHARS = 4000;\n\n/**\n * Extract visible text from a pi-ai `AssistantMessage.content` array.\n * Handles `TextContent` (`type: 'text'`) and falls back to `ThinkingContent`\n * (`type: 'thinking'`) when the text blocks are empty — reasoning models\n * (DeepSeek-R1, Qwen-thinking, etc.) may place the entire response inside\n * thinking blocks, leaving the text portion blank.\n */\nexport function extractAssistantText(content: unknown): string {\n  if (!Array.isArray(content)) return '';\n\n  let textParts = '';\n  let thinkingParts = '';\n\n  for (const block of content) {\n    if (!block || typeof block !== 'object') continue;\n    const typed = block as Record<string, unknown>;\n    const blockType = typed.type;\n    if (blockType === 'text' && typeof typed.text === 'string') {\n      textParts += typed.text;\n    } else if (blockType === 'thinking') {\n      const thinking =\n        typeof typed.thinking === 'string'\n          ? typed.thinking\n          : typeof typed.text === 'string'\n            ? typed.text\n            : '';\n      thinkingParts += thinking;\n    }\n  }\n\n  // Prefer text blocks; fall back to thinking blocks when text is empty.\n  return textParts.trim() ? textParts : thinkingParts;\n}\n\n/**\n * Strip markdown code fences (opening AND closing) from raw model output.\n * Handles `` ```json ``, `` ``` ``, and trailing `` ``` `` with optional whitespace.\n */\nexport function stripCodeFences(raw: string): string {\n  let text = raw.trim();\n\n  // Remove opening code fence: ```<optional-lang>\\n\n  const openMatch = text.match(/^`{3,}[^\\n]*\\n?/);\n  if (openMatch) {\n    text = text.slice(openMatch[0].length);\n  }\n\n  // Remove closing code fence: \\n```<optional-whitespace>\n  const closeMatch = text.match(/\\n?`{3,}\\s*$/);\n  if (closeMatch) {\n    text = text.slice(0, -closeMatch[0].length);\n  }\n\n  return text.trim();\n}\n\n/** Mirrors `hermes_cli/goals.py` — strict judge, JSON-only reply. */\nexport const JUDGE_SYSTEM_PROMPT =\n  'You are a strict judge evaluating whether an autonomous agent has ' +\n  \"achieved a user's stated goal. You receive the goal text and the \" +\n  \"agent's most recent response. Your only job is to decide whether \" +\n  'the goal is fully satisfied based on that response.\\n\\n' +\n  'A goal is DONE only when:\\n' +\n  '- The response explicitly confirms the goal was completed, OR\\n' +\n  '- The response clearly shows the final deliverable was produced, OR\\n' +\n  '- The response explains the goal is unachievable / blocked / needs ' +\n  'user input (treat this as DONE with reason describing the block).\\n\\n' +\n  'Otherwise the goal is NOT done — CONTINUE.\\n\\n' +\n  'Reply ONLY with a single JSON object on one line:\\n' +\n  '{\"done\": <true|false>, \"reason\": \"<one-sentence rationale>\"}';\n\nexport const JUDGE_USER_PROMPT_TEMPLATE =\n  'Goal:\\n{goal}\\n\\n' + \"Agent's most recent response:\\n{response}\\n\\n\" + 'Is the goal satisfied?';\n\nexport const DEFAULT_JUDGE_TIMEOUT_MS = 60_000;\n\nexport function truncateGoalText(text: string, limit: number): string {\n  if (!text) return '';\n  if (text.length <= limit) return text;\n  return text.slice(0, limit) + '… [truncated]';\n}\n\nexport async function resolveGoalJudgeApiKey(\n  model: ReturnType<typeof resolveModel>,\n): Promise<string | undefined> {\n  try {\n    return await getApiKey(model.provider);\n  } catch {\n    return undefined;\n  }\n}\n\nexport function getAssistantMessageErrorReason(message: unknown): string | null {\n  if (!message || typeof message !== 'object') return null;\n\n  const record = message as Record<string, unknown>;\n  const stopReason = record.stopReason;\n  const errorMessage = typeof record.errorMessage === 'string' ? record.errorMessage.trim() : '';\n\n  if (stopReason === 'error') {\n    return errorMessage || 'Judge model call failed.';\n  }\n\n  return null;\n}\n\n/** Parse judge JSON — fail-open to **continue** (Hermes semantics). */\nexport function parseJudgeResponseFailOpen(raw: string): {\n  done: boolean;\n  reason: string;\n  parseFailed: boolean;\n} {\n  if (!raw?.trim()) {\n    return { done: false, reason: JUDGE_REASON_EN.judge_returned_empty, parseFailed: true };\n  }\n\n  const text = stripCodeFences(raw);\n\n  let data: Record<string, unknown> | null = null;\n  try {\n    data = JSON.parse(text) as Record<string, unknown>;\n  } catch {\n    const start = text.indexOf('{');\n    const end = text.lastIndexOf('}');\n    if (start !== -1 && end > start) {\n      try {\n        data = JSON.parse(text.slice(start, end + 1)) as Record<string, unknown>;\n      } catch {\n        data = null;\n      }\n    }\n  }\n\n  if (!data || typeof data !== 'object') {\n    return { done: false, reason: JUDGE_REASON_EN.judge_reply_not_json, parseFailed: true };\n  }\n\n  const doneVal = data.done;\n  let done: boolean;\n  if (typeof doneVal === 'string') {\n    done = ['true', 'yes', '1', 'done'].includes(doneVal.trim().toLowerCase());\n  } else {\n    done = Boolean(doneVal);\n  }\n  const reason = typeof data.reason === 'string' ? data.reason.trim() : '';\n  return { done, reason: reason || JUDGE_REASON_EN.no_reason_provided, parseFailed: false };\n}\n\nexport type GoalJudgeVerdict = 'done' | 'continue' | 'skipped';\n\n/**\n * Ask the configured model whether the goal is satisfied.\n * Fail-open: any error → `continue` (Hermes — turn budget is the backstop).\n */\nexport async function judgeGoalHermesStyle(\n  goal: string,\n  lastResponse: string,\n  judgeModelRef: string,\n  signal?: AbortSignal,\n  opts?: { judgeTimeoutMs?: number; uiLocale?: GoalUiLocale },\n): Promise<{ verdict: GoalJudgeVerdict; reason: string; parseFailed: boolean }> {\n  const locale = goalUiLocaleOrFallback(opts?.uiLocale);\n  const b = judgeFreeformBuiltinMessages(locale);\n\n  if (!goal.trim()) {\n    return { verdict: 'skipped', reason: b.emptyGoal, parseFailed: false };\n  }\n  if (!lastResponse.trim()) {\n    return { verdict: 'continue', reason: b.emptyResponse, parseFailed: false };\n  }\n\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(judgeModelRef);\n  } catch {\n    return { verdict: 'continue', reason: b.noModel, parseFailed: false };\n  }\n\n  const userContent =\n    JUDGE_USER_PROMPT_TEMPLATE.replace('{goal}', truncateGoalText(goal, 2000)).replace(\n      '{response}',\n      truncateGoalText(lastResponse, JUDGE_RESPONSE_SNIPPET_CHARS),\n    ) + judgeResponseLanguageNote(locale);\n\n  const timeoutMs =\n    typeof opts?.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = signal ? AbortSignal.any([signal, controller.signal]) : controller.signal;\n\n  try {\n    const combinedUser: UserMessage = {\n      role: 'user',\n      content: `${JUDGE_SYSTEM_PROMPT}\\n\\n${userContent}`,\n      timestamp: Date.now(),\n    };\n\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await complete(\n      model,\n      {\n        messages: [combinedUser],\n      },\n      { apiKey, maxTokens: 200, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return { verdict: 'continue', reason: b.callFailed, parseFailed: false };\n    }\n\n    const text = extractAssistantText(result.content);\n    const { done, reason, parseFailed } = parseJudgeResponseFailOpen(text);\n    const reasonOut = localizeJudgeReasonText(reason, locale);\n    return { verdict: done ? 'done' : 'continue', reason: reasonOut, parseFailed };\n  } catch {\n    return { verdict: 'continue', reason: b.callFailed, parseFailed: false };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;gBAGmE;AAWnE,MAAM,+BAA+B;;;;;;;;AASrC,SAAgB,qBAAqB,SAA0B;AAC7D,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;CAEpC,IAAI,YAAY;CAChB,IAAI,gBAAgB;AAEpB,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU;EACzC,MAAM,QAAQ;EACd,MAAM,YAAY,MAAM;AACxB,MAAI,cAAc,UAAU,OAAO,MAAM,SAAS,SAChD,cAAa,MAAM;WACV,cAAc,YAAY;GACnC,MAAM,WACJ,OAAO,MAAM,aAAa,WACtB,MAAM,WACN,OAAO,MAAM,SAAS,WACpB,MAAM,OACN;AACR,oBAAiB;;;AAKrB,QAAO,UAAU,MAAM,GAAG,YAAY;;;;;;AAOxC,SAAgB,gBAAgB,KAAqB;CACnD,IAAI,OAAO,IAAI,MAAM;CAGrB,MAAM,YAAY,KAAK,MAAM,kBAAkB;AAC/C,KAAI,UACF,QAAO,KAAK,MAAM,UAAU,GAAG,OAAO;CAIxC,MAAM,aAAa,KAAK,MAAM,eAAe;AAC7C,KAAI,WACF,QAAO,KAAK,MAAM,GAAG,CAAC,WAAW,GAAG,OAAO;AAG7C,QAAO,KAAK,MAAM;;;AAIpB,MAAa,sBACX;AAaF,MAAa,6BACX;AAEF,MAAa,2BAA2B;AAExC,SAAgB,iBAAiB,MAAc,OAAuB;AACpE,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,KAAK,UAAU,MAAO,QAAO;AACjC,QAAO,KAAK,MAAM,GAAG,MAAM,GAAG;;AAGhC,eAAsB,uBACpB,OAC6B;AAC7B,KAAI;AACF,SAAO,MAAM,UAAU,MAAM,SAAS;SAChC;AACN;;;AAIJ,SAAgB,+BAA+B,SAAiC;AAC9E,KAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;CAEpD,MAAM,SAAS;CACf,MAAM,aAAa,OAAO;CAC1B,MAAM,eAAe,OAAO,OAAO,iBAAiB,WAAW,OAAO,aAAa,MAAM,GAAG;AAE5F,KAAI,eAAe,QACjB,QAAO,gBAAgB;AAGzB,QAAO;;;AAIT,SAAgB,2BAA2B,KAIzC;AACA,KAAI,CAAC,KAAK,MAAM,CACd,QAAO;EAAE,MAAM;EAAO,QAAQ,gBAAgB;EAAsB,aAAa;EAAM;CAGzF,MAAM,OAAO,gBAAgB,IAAI;CAEjC,IAAI,OAAuC;AAC3C,KAAI;AACF,SAAO,KAAK,MAAM,KAAK;SACjB;EACN,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,MAAI,UAAU,MAAM,MAAM,MACxB,KAAI;AACF,UAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;UACvC;AACN,UAAO;;;AAKb,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;EAAE,MAAM;EAAO,QAAQ,gBAAgB;EAAsB,aAAa;EAAM;CAGzF,MAAM,UAAU,KAAK;CACrB,IAAI;AACJ,KAAI,OAAO,YAAY,SACrB,QAAO;EAAC;EAAQ;EAAO;EAAK;EAAO,CAAC,SAAS,QAAQ,MAAM,CAAC,aAAa,CAAC;KAE1E,QAAO,QAAQ,QAAQ;CAEzB,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,GAAG;AACtE,QAAO;EAAE;EAAM,QAAQ,UAAU,gBAAgB;EAAoB,aAAa;EAAO;;;;;;AAS3F,eAAsB,qBACpB,MACA,cACA,eACA,QACA,MAC8E;CAC9E,MAAM,SAAS,uBAAuB,MAAM,SAAS;CACrD,MAAM,IAAI,6BAA6B,OAAO;AAE9C,KAAI,CAAC,KAAK,MAAM,CACd,QAAO;EAAE,SAAS;EAAW,QAAQ,EAAE;EAAW,aAAa;EAAO;AAExE,KAAI,CAAC,aAAa,MAAM,CACtB,QAAO;EAAE,SAAS;EAAY,QAAQ,EAAE;EAAe,aAAa;EAAO;CAG7E,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,cAAc;SAC7B;AACN,SAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAS,aAAa;GAAO;;CAGvE,MAAM,cACJ,2BAA2B,QAAQ,UAAU,iBAAiB,MAAM,IAAK,CAAC,CAAC,QACzE,cACA,iBAAiB,cAAc,6BAA6B,CAC7D,GAAG,0BAA0B,OAAO;CAEvC,MAAM,YACJ,OAAO,MAAM,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC5E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,SAAS,YAAY,IAAI,CAAC,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAElF,KAAI;EACF,MAAM,eAA4B;GAChC,MAAM;GACN,SAAS,GAAG,oBAAoB,MAAM;GACtC,WAAW,KAAK,KAAK;GACtB;EAED,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,SACnB,OACA,EACE,UAAU,CAAC,aAAa,EACzB,EACD;GAAE;GAAQ,WAAW;GAAK,aAAa;GAAG,QAAQ;GAAQ,CAC3D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAY,aAAa;GAAO;EAI1E,MAAM,EAAE,MAAM,QAAQ,gBAAgB,2BADzB,qBAAqB,OAAO,QAC4B,CAAC;EACtE,MAAM,YAAY,wBAAwB,QAAQ,OAAO;AACzD,SAAO;GAAE,SAAS,OAAO,SAAS;GAAY,QAAQ;GAAW;GAAa;SACxE;AACN,SAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAY,aAAa;GAAO;WAChE;AACR,eAAa,MAAM"}
+{"version":3,"file":"judge.js","names":[],"sources":["../../../../src/agent/goals/judge.ts"],"sourcesContent":["import type { UserMessage } from '@earendil-works/pi-ai';\n\nimport { getApiKey, resolveModel } from '../../providers/index.js';\nimport { completeWithResolvedCredentials } from '../../providers/model-call.js';\n\nimport type { GoalUiLocale } from './goal-locale.js';\nimport {\n  goalUiLocaleOrFallback,\n  judgeFreeformBuiltinMessages,\n  JUDGE_REASON_EN,\n  judgeResponseLanguageNote,\n  localizeJudgeReasonText,\n} from './goal-locale.js';\n\nconst JUDGE_RESPONSE_SNIPPET_CHARS = 4000;\n\n/**\n * Extract visible text from a pi-ai `AssistantMessage.content` array.\n * Handles `TextContent` (`type: 'text'`) and falls back to `ThinkingContent`\n * (`type: 'thinking'`) when the text blocks are empty — reasoning models\n * (DeepSeek-R1, Qwen-thinking, etc.) may place the entire response inside\n * thinking blocks, leaving the text portion blank.\n */\nexport function extractAssistantText(content: unknown): string {\n  if (!Array.isArray(content)) return '';\n\n  let textParts = '';\n  let thinkingParts = '';\n\n  for (const block of content) {\n    if (!block || typeof block !== 'object') continue;\n    const typed = block as Record<string, unknown>;\n    const blockType = typed.type;\n    if (blockType === 'text' && typeof typed.text === 'string') {\n      textParts += typed.text;\n    } else if (blockType === 'thinking') {\n      const thinking =\n        typeof typed.thinking === 'string'\n          ? typed.thinking\n          : typeof typed.text === 'string'\n            ? typed.text\n            : '';\n      thinkingParts += thinking;\n    }\n  }\n\n  // Prefer text blocks; fall back to thinking blocks when text is empty.\n  return textParts.trim() ? textParts : thinkingParts;\n}\n\n/**\n * Strip markdown code fences (opening AND closing) from raw model output.\n * Handles `` ```json ``, `` ``` ``, and trailing `` ``` `` with optional whitespace.\n */\nexport function stripCodeFences(raw: string): string {\n  let text = raw.trim();\n\n  // Remove opening code fence: ```<optional-lang>\\n\n  const openMatch = text.match(/^`{3,}[^\\n]*\\n?/);\n  if (openMatch) {\n    text = text.slice(openMatch[0].length);\n  }\n\n  // Remove closing code fence: \\n```<optional-whitespace>\n  const closeMatch = text.match(/\\n?`{3,}\\s*$/);\n  if (closeMatch) {\n    text = text.slice(0, -closeMatch[0].length);\n  }\n\n  return text.trim();\n}\n\n/** Mirrors `hermes_cli/goals.py` — strict judge, JSON-only reply. */\nexport const JUDGE_SYSTEM_PROMPT =\n  'You are a strict judge evaluating whether an autonomous agent has ' +\n  \"achieved a user's stated goal. You receive the goal text and the \" +\n  \"agent's most recent response. Your only job is to decide whether \" +\n  'the goal is fully satisfied based on that response.\\n\\n' +\n  'A goal is DONE only when:\\n' +\n  '- The response explicitly confirms the goal was completed, OR\\n' +\n  '- The response clearly shows the final deliverable was produced, OR\\n' +\n  '- The response explains the goal is unachievable / blocked / needs ' +\n  'user input (treat this as DONE with reason describing the block).\\n\\n' +\n  'Otherwise the goal is NOT done — CONTINUE.\\n\\n' +\n  'Reply ONLY with a single JSON object on one line:\\n' +\n  '{\"done\": <true|false>, \"reason\": \"<one-sentence rationale>\"}';\n\nexport const JUDGE_USER_PROMPT_TEMPLATE =\n  'Goal:\\n{goal}\\n\\n' + \"Agent's most recent response:\\n{response}\\n\\n\" + 'Is the goal satisfied?';\n\nexport const DEFAULT_JUDGE_TIMEOUT_MS = 60_000;\n\nexport function truncateGoalText(text: string, limit: number): string {\n  if (!text) return '';\n  if (text.length <= limit) return text;\n  return text.slice(0, limit) + '… [truncated]';\n}\n\nexport async function resolveGoalJudgeApiKey(\n  model: ReturnType<typeof resolveModel>,\n): Promise<string | undefined> {\n  try {\n    return await getApiKey(model.provider);\n  } catch {\n    return undefined;\n  }\n}\n\nexport function getAssistantMessageErrorReason(message: unknown): string | null {\n  if (!message || typeof message !== 'object') return null;\n\n  const record = message as Record<string, unknown>;\n  const stopReason = record.stopReason;\n  const errorMessage = typeof record.errorMessage === 'string' ? record.errorMessage.trim() : '';\n\n  if (stopReason === 'error') {\n    return errorMessage || 'Judge model call failed.';\n  }\n\n  return null;\n}\n\n/** Parse judge JSON — fail-open to **continue** (Hermes semantics). */\nexport function parseJudgeResponseFailOpen(raw: string): {\n  done: boolean;\n  reason: string;\n  parseFailed: boolean;\n} {\n  if (!raw?.trim()) {\n    return { done: false, reason: JUDGE_REASON_EN.judge_returned_empty, parseFailed: true };\n  }\n\n  const text = stripCodeFences(raw);\n\n  let data: Record<string, unknown> | null = null;\n  try {\n    data = JSON.parse(text) as Record<string, unknown>;\n  } catch {\n    const start = text.indexOf('{');\n    const end = text.lastIndexOf('}');\n    if (start !== -1 && end > start) {\n      try {\n        data = JSON.parse(text.slice(start, end + 1)) as Record<string, unknown>;\n      } catch {\n        data = null;\n      }\n    }\n  }\n\n  if (!data || typeof data !== 'object') {\n    return { done: false, reason: JUDGE_REASON_EN.judge_reply_not_json, parseFailed: true };\n  }\n\n  const doneVal = data.done;\n  let done: boolean;\n  if (typeof doneVal === 'string') {\n    done = ['true', 'yes', '1', 'done'].includes(doneVal.trim().toLowerCase());\n  } else {\n    done = Boolean(doneVal);\n  }\n  const reason = typeof data.reason === 'string' ? data.reason.trim() : '';\n  return { done, reason: reason || JUDGE_REASON_EN.no_reason_provided, parseFailed: false };\n}\n\nexport type GoalJudgeVerdict = 'done' | 'continue' | 'skipped';\n\n/**\n * Ask the configured model whether the goal is satisfied.\n * Fail-open: any error → `continue` (Hermes — turn budget is the backstop).\n */\nexport async function judgeGoalHermesStyle(\n  goal: string,\n  lastResponse: string,\n  judgeModelRef: string,\n  signal?: AbortSignal,\n  opts?: { judgeTimeoutMs?: number; uiLocale?: GoalUiLocale },\n): Promise<{ verdict: GoalJudgeVerdict; reason: string; parseFailed: boolean }> {\n  const locale = goalUiLocaleOrFallback(opts?.uiLocale);\n  const b = judgeFreeformBuiltinMessages(locale);\n\n  if (!goal.trim()) {\n    return { verdict: 'skipped', reason: b.emptyGoal, parseFailed: false };\n  }\n  if (!lastResponse.trim()) {\n    return { verdict: 'continue', reason: b.emptyResponse, parseFailed: false };\n  }\n\n  let model: ReturnType<typeof resolveModel>;\n  try {\n    model = resolveModel(judgeModelRef);\n  } catch {\n    return { verdict: 'continue', reason: b.noModel, parseFailed: false };\n  }\n\n  const userContent =\n    JUDGE_USER_PROMPT_TEMPLATE.replace('{goal}', truncateGoalText(goal, 2000)).replace(\n      '{response}',\n      truncateGoalText(lastResponse, JUDGE_RESPONSE_SNIPPET_CHARS),\n    ) + judgeResponseLanguageNote(locale);\n\n  const timeoutMs =\n    typeof opts?.judgeTimeoutMs === 'number' && Number.isFinite(opts.judgeTimeoutMs)\n      ? Math.max(5_000, Math.min(120_000, Math.floor(opts.judgeTimeoutMs)))\n      : DEFAULT_JUDGE_TIMEOUT_MS;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  const merged = signal ? AbortSignal.any([signal, controller.signal]) : controller.signal;\n\n  try {\n    const combinedUser: UserMessage = {\n      role: 'user',\n      content: `${JUDGE_SYSTEM_PROMPT}\\n\\n${userContent}`,\n      timestamp: Date.now(),\n    };\n\n    const apiKey = await resolveGoalJudgeApiKey(model);\n    const result = await completeWithResolvedCredentials(\n      model,\n      {\n        messages: [combinedUser],\n      },\n      { apiKey, maxTokens: 200, temperature: 0, signal: merged },\n    );\n    const errorReason = getAssistantMessageErrorReason(result);\n    if (errorReason) {\n      return { verdict: 'continue', reason: b.callFailed, parseFailed: false };\n    }\n\n    const text = extractAssistantText(result.content);\n    const { done, reason, parseFailed } = parseJudgeResponseFailOpen(text);\n    const reasonOut = localizeJudgeReasonText(reason, locale);\n    return { verdict: done ? 'done' : 'continue', reason: reasonOut, parseFailed };\n  } catch {\n    return { verdict: 'continue', reason: b.callFailed, parseFailed: false };\n  } finally {\n    clearTimeout(timer);\n  }\n}\n"],"mappings":";;;;;gBAEmE;AAYnE,MAAM,+BAA+B;;;;;;;;AASrC,SAAgB,qBAAqB,SAA0B;AAC7D,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;CAEpC,IAAI,YAAY;CAChB,IAAI,gBAAgB;AAEpB,MAAK,MAAM,SAAS,SAAS;AAC3B,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU;EACzC,MAAM,QAAQ;EACd,MAAM,YAAY,MAAM;AACxB,MAAI,cAAc,UAAU,OAAO,MAAM,SAAS,SAChD,cAAa,MAAM;WACV,cAAc,YAAY;GACnC,MAAM,WACJ,OAAO,MAAM,aAAa,WACtB,MAAM,WACN,OAAO,MAAM,SAAS,WACpB,MAAM,OACN;AACR,oBAAiB;;;AAKrB,QAAO,UAAU,MAAM,GAAG,YAAY;;;;;;AAOxC,SAAgB,gBAAgB,KAAqB;CACnD,IAAI,OAAO,IAAI,MAAM;CAGrB,MAAM,YAAY,KAAK,MAAM,kBAAkB;AAC/C,KAAI,UACF,QAAO,KAAK,MAAM,UAAU,GAAG,OAAO;CAIxC,MAAM,aAAa,KAAK,MAAM,eAAe;AAC7C,KAAI,WACF,QAAO,KAAK,MAAM,GAAG,CAAC,WAAW,GAAG,OAAO;AAG7C,QAAO,KAAK,MAAM;;;AAIpB,MAAa,sBACX;AAaF,MAAa,6BACX;AAEF,MAAa,2BAA2B;AAExC,SAAgB,iBAAiB,MAAc,OAAuB;AACpE,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,KAAK,UAAU,MAAO,QAAO;AACjC,QAAO,KAAK,MAAM,GAAG,MAAM,GAAG;;AAGhC,eAAsB,uBACpB,OAC6B;AAC7B,KAAI;AACF,SAAO,MAAM,UAAU,MAAM,SAAS;SAChC;AACN;;;AAIJ,SAAgB,+BAA+B,SAAiC;AAC9E,KAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;CAEpD,MAAM,SAAS;CACf,MAAM,aAAa,OAAO;CAC1B,MAAM,eAAe,OAAO,OAAO,iBAAiB,WAAW,OAAO,aAAa,MAAM,GAAG;AAE5F,KAAI,eAAe,QACjB,QAAO,gBAAgB;AAGzB,QAAO;;;AAIT,SAAgB,2BAA2B,KAIzC;AACA,KAAI,CAAC,KAAK,MAAM,CACd,QAAO;EAAE,MAAM;EAAO,QAAQ,gBAAgB;EAAsB,aAAa;EAAM;CAGzF,MAAM,OAAO,gBAAgB,IAAI;CAEjC,IAAI,OAAuC;AAC3C,KAAI;AACF,SAAO,KAAK,MAAM,KAAK;SACjB;EACN,MAAM,QAAQ,KAAK,QAAQ,IAAI;EAC/B,MAAM,MAAM,KAAK,YAAY,IAAI;AACjC,MAAI,UAAU,MAAM,MAAM,MACxB,KAAI;AACF,UAAO,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,EAAE,CAAC;UACvC;AACN,UAAO;;;AAKb,KAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO;EAAE,MAAM;EAAO,QAAQ,gBAAgB;EAAsB,aAAa;EAAM;CAGzF,MAAM,UAAU,KAAK;CACrB,IAAI;AACJ,KAAI,OAAO,YAAY,SACrB,QAAO;EAAC;EAAQ;EAAO;EAAK;EAAO,CAAC,SAAS,QAAQ,MAAM,CAAC,aAAa,CAAC;KAE1E,QAAO,QAAQ,QAAQ;CAEzB,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,GAAG;AACtE,QAAO;EAAE;EAAM,QAAQ,UAAU,gBAAgB;EAAoB,aAAa;EAAO;;;;;;AAS3F,eAAsB,qBACpB,MACA,cACA,eACA,QACA,MAC8E;CAC9E,MAAM,SAAS,uBAAuB,MAAM,SAAS;CACrD,MAAM,IAAI,6BAA6B,OAAO;AAE9C,KAAI,CAAC,KAAK,MAAM,CACd,QAAO;EAAE,SAAS;EAAW,QAAQ,EAAE;EAAW,aAAa;EAAO;AAExE,KAAI,CAAC,aAAa,MAAM,CACtB,QAAO;EAAE,SAAS;EAAY,QAAQ,EAAE;EAAe,aAAa;EAAO;CAG7E,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,cAAc;SAC7B;AACN,SAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAS,aAAa;GAAO;;CAGvE,MAAM,cACJ,2BAA2B,QAAQ,UAAU,iBAAiB,MAAM,IAAK,CAAC,CAAC,QACzE,cACA,iBAAiB,cAAc,6BAA6B,CAC7D,GAAG,0BAA0B,OAAO;CAEvC,MAAM,YACJ,OAAO,MAAM,mBAAmB,YAAY,OAAO,SAAS,KAAK,eAAe,GAC5E,KAAK,IAAI,KAAO,KAAK,IAAI,MAAS,KAAK,MAAM,KAAK,eAAe,CAAC,CAAC,GACnE;CACN,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,QAAQ,iBAAiB,WAAW,OAAO,EAAE,UAAU;CAC7D,MAAM,SAAS,SAAS,YAAY,IAAI,CAAC,QAAQ,WAAW,OAAO,CAAC,GAAG,WAAW;AAElF,KAAI;EACF,MAAM,eAA4B;GAChC,MAAM;GACN,SAAS,GAAG,oBAAoB,MAAM;GACtC,WAAW,KAAK,KAAK;GACtB;EAED,MAAM,SAAS,MAAM,uBAAuB,MAAM;EAClD,MAAM,SAAS,MAAM,gCACnB,OACA,EACE,UAAU,CAAC,aAAa,EACzB,EACD;GAAE;GAAQ,WAAW;GAAK,aAAa;GAAG,QAAQ;GAAQ,CAC3D;AAED,MADoB,+BAA+B,OACpC,CACb,QAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAY,aAAa;GAAO;EAI1E,MAAM,EAAE,MAAM,QAAQ,gBAAgB,2BADzB,qBAAqB,OAAO,QAC4B,CAAC;EACtE,MAAM,YAAY,wBAAwB,QAAQ,OAAO;AACzD,SAAO;GAAE,SAAS,OAAO,SAAS;GAAY,QAAQ;GAAW;GAAa;SACxE;AACN,SAAO;GAAE,SAAS;GAAY,QAAQ,EAAE;GAAY,aAAa;GAAO;WAChE;AACR,eAAa,MAAM"}

package/dist/src/agent/image/understanding/pi-ai-provider.js

@@ -1,7 +1,7 @@
 import { getApiKey, getModelsByProvider, init_providers, resolveModel } from "../../../providers/index.js";
+import { completeWithResolvedCredentials } from "../../../providers/model-call.js";
 import { registerImageUnderstandingProvider, registerImageUnderstandingProviderFactory } from "./provider-registry.js";
 import { coerceImageAssistantText } from "../image-helpers.js";
-import { complete } from "@earendil-works/pi-ai/compat";
 //#region src/agent/image/understanding/pi-ai-provider.ts
 init_providers();
 function resolveMaxTokens(modelMaxTokens, requestedMaxTokens = 4096) {
@@ -39,7 +39,7 @@ function buildPiAiImageUnderstandingProvider(providerId) {
 			const timeoutSignal = typeof AbortSignal !== "undefined" && typeof AbortSignal.timeout === "function" ? AbortSignal.timeout(timeoutMs) : void 0;
 			return {
 				text: coerceImageAssistantText({
-					message: await complete(model, context, {
+					message: await completeWithResolvedCredentials(model, context, {
 						apiKey,
 						maxTokens,
 						signal: (() => {

package/dist/src/agent/image/understanding/pi-ai-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"pi-ai-provider.js","names":[],"sources":["../../../../../src/agent/image/understanding/pi-ai-provider.ts"],"sourcesContent":["import { complete, type Api, type Context, type Model } from '@earendil-works/pi-ai/compat';\nimport { resolveModel, getApiKey, getModelsByProvider } from '../../../providers/index.js';\nimport { coerceImageAssistantText } from '../image-helpers.js';\nimport {\n  registerImageUnderstandingProvider,\n  registerImageUnderstandingProviderFactory,\n} from './provider-registry.js';\nimport type { ImageUnderstandingProvider } from './types.js';\n\nfunction resolveMaxTokens(modelMaxTokens: number | undefined, requestedMaxTokens = 4096): number {\n  if (\n    typeof modelMaxTokens !== 'number' ||\n    !Number.isFinite(modelMaxTokens) ||\n    modelMaxTokens <= 0\n  ) {\n    return requestedMaxTokens;\n  }\n  return Math.min(requestedMaxTokens, modelMaxTokens);\n}\n\nexport function buildPiAiImageUnderstandingProvider(providerId: string): ImageUnderstandingProvider {\n  return {\n    id: providerId,\n    label: `pi-ai (${providerId})`,\n    async isConfigured() {\n      const apiKey = await getApiKey(providerId);\n      return Boolean(apiKey);\n    },\n    async describeImages(modelId, request) {\n      const modelRef = `${providerId}/${modelId}`;\n      const model = resolveModel(modelRef) as Model<Api>;\n      if (!model.input?.includes('image')) {\n        throw new Error(`Model does not support images: ${modelRef}`);\n      }\n      const apiKey = await getApiKey(providerId);\n      if (!apiKey) {\n        throw new Error(`No API key configured for provider: ${providerId}`);\n      }\n\n      const context: Context = {\n        messages: [\n          {\n            role: 'user',\n            content: [\n              { type: 'text', text: request.prompt },\n              ...request.images.map((img) => ({\n                type: 'image' as const,\n                data: img.buffer.toString('base64'),\n                mimeType: img.mimeType || 'image/jpeg',\n              })),\n            ],\n            timestamp: Date.now(),\n          },\n        ],\n      };\n\n      const maxTokens = resolveMaxTokens(model.maxTokens, request.maxTokens ?? 512);\n      const timeoutMs = request.timeoutMs ?? 60_000;\n      const timeoutSignal =\n        typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n          ? AbortSignal.timeout(timeoutMs)\n          : undefined;\n      const signal = (() => {\n        if (timeoutSignal && request.signal && typeof AbortSignal.any === 'function') {\n          return AbortSignal.any([request.signal, timeoutSignal]);\n        }\n        if (request.signal) {\n          return request.signal;\n        }\n        if (timeoutSignal) {\n          return timeoutSignal;\n        }\n        const controller = new AbortController();\n        setTimeout(() => controller.abort(), timeoutMs);\n        return controller.signal;\n      })();\n\n      const message = await complete(model, context, {\n        apiKey,\n        maxTokens,\n        signal,\n      });\n\n      const text = coerceImageAssistantText({\n        message,\n        provider: providerId,\n        model: modelId,\n      });\n      return { text, provider: providerId, model: modelId };\n    },\n  };\n}\n\nfor (const providerId of ['openai', 'anthropic', 'google']) {\n  registerImageUnderstandingProvider(buildPiAiImageUnderstandingProvider(providerId));\n}\n\nregisterImageUnderstandingProviderFactory((providerId) => {\n  const hasVisionModel = getModelsByProvider(providerId).some((model) =>\n    model.input?.includes('image'),\n  );\n  return hasVisionModel ? buildPiAiImageUnderstandingProvider(providerId) : undefined;\n});\n"],"mappings":";;;;;gBAC2F;AAQ3F,SAAS,iBAAiB,gBAAoC,qBAAqB,MAAc;AAC/F,KACE,OAAO,mBAAmB,YAC1B,CAAC,OAAO,SAAS,eAAe,IAChC,kBAAkB,EAElB,QAAO;AAET,QAAO,KAAK,IAAI,oBAAoB,eAAe;;AAGrD,SAAgB,oCAAoC,YAAgD;AAClG,QAAO;EACL,IAAI;EACJ,OAAO,UAAU,WAAW;EAC5B,MAAM,eAAe;GACnB,MAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,UAAO,QAAQ,OAAO;;EAExB,MAAM,eAAe,SAAS,SAAS;GACrC,MAAM,WAAW,GAAG,WAAW,GAAG;GAClC,MAAM,QAAQ,aAAa,SAAS;AACpC,OAAI,CAAC,MAAM,OAAO,SAAS,QAAQ,CACjC,OAAM,IAAI,MAAM,kCAAkC,WAAW;GAE/D,MAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,OAAI,CAAC,OACH,OAAM,IAAI,MAAM,uCAAuC,aAAa;GAGtE,MAAM,UAAmB,EACvB,UAAU,CACR;IACE,MAAM;IACN,SAAS,CACP;KAAE,MAAM;KAAQ,MAAM,QAAQ;KAAQ,EACtC,GAAG,QAAQ,OAAO,KAAK,SAAS;KAC9B,MAAM;KACN,MAAM,IAAI,OAAO,SAAS,SAAS;KACnC,UAAU,IAAI,YAAY;KAC3B,EAAE,CACJ;IACD,WAAW,KAAK,KAAK;IACtB,CACF,EACF;GAED,MAAM,YAAY,iBAAiB,MAAM,WAAW,QAAQ,aAAa,IAAI;GAC7E,MAAM,YAAY,QAAQ,aAAa;GACvC,MAAM,gBACJ,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,aACjE,YAAY,QAAQ,UAAU,GAC9B,KAAA;AA2BN,UAAO;IAAE,MALI,yBAAyB;KACpC,SAAA,MAPoB,SAAS,OAAO,SAAS;MAC7C;MACA;MACA,eAlBoB;AACpB,WAAI,iBAAiB,QAAQ,UAAU,OAAO,YAAY,QAAQ,WAChE,QAAO,YAAY,IAAI,CAAC,QAAQ,QAAQ,cAAc,CAAC;AAEzD,WAAI,QAAQ,OACV,QAAO,QAAQ;AAEjB,WAAI,cACF,QAAO;OAET,MAAM,aAAa,IAAI,iBAAiB;AACxC,wBAAiB,WAAW,OAAO,EAAE,UAAU;AAC/C,cAAO,WAAW;UAMZ;MACP,CAAC;KAIA,UAAU;KACV,OAAO;KACR,CACY;IAAE,UAAU;IAAY,OAAO;IAAS;;EAExD;;AAGH,KAAK,MAAM,cAAc;CAAC;CAAU;CAAa;CAAS,CACxD,oCAAmC,oCAAoC,WAAW,CAAC;AAGrF,2CAA2C,eAAe;AAIxD,QAHuB,oBAAoB,WAAW,CAAC,MAAM,UAC3D,MAAM,OAAO,SAAS,QAAQ,CAEX,GAAG,oCAAoC,WAAW,GAAG,KAAA;EAC1E"}
+{"version":3,"file":"pi-ai-provider.js","names":[],"sources":["../../../../../src/agent/image/understanding/pi-ai-provider.ts"],"sourcesContent":["import { type Api, type Context, type Model } from '@earendil-works/pi-ai/compat';\nimport { resolveModel, getApiKey, getModelsByProvider } from '../../../providers/index.js';\nimport { completeWithResolvedCredentials } from '../../../providers/model-call.js';\nimport { coerceImageAssistantText } from '../image-helpers.js';\nimport {\n  registerImageUnderstandingProvider,\n  registerImageUnderstandingProviderFactory,\n} from './provider-registry.js';\nimport type { ImageUnderstandingProvider } from './types.js';\n\nfunction resolveMaxTokens(modelMaxTokens: number | undefined, requestedMaxTokens = 4096): number {\n  if (\n    typeof modelMaxTokens !== 'number' ||\n    !Number.isFinite(modelMaxTokens) ||\n    modelMaxTokens <= 0\n  ) {\n    return requestedMaxTokens;\n  }\n  return Math.min(requestedMaxTokens, modelMaxTokens);\n}\n\nexport function buildPiAiImageUnderstandingProvider(providerId: string): ImageUnderstandingProvider {\n  return {\n    id: providerId,\n    label: `pi-ai (${providerId})`,\n    async isConfigured() {\n      const apiKey = await getApiKey(providerId);\n      return Boolean(apiKey);\n    },\n    async describeImages(modelId, request) {\n      const modelRef = `${providerId}/${modelId}`;\n      const model = resolveModel(modelRef) as Model<Api>;\n      if (!model.input?.includes('image')) {\n        throw new Error(`Model does not support images: ${modelRef}`);\n      }\n      const apiKey = await getApiKey(providerId);\n      if (!apiKey) {\n        throw new Error(`No API key configured for provider: ${providerId}`);\n      }\n\n      const context: Context = {\n        messages: [\n          {\n            role: 'user',\n            content: [\n              { type: 'text', text: request.prompt },\n              ...request.images.map((img) => ({\n                type: 'image' as const,\n                data: img.buffer.toString('base64'),\n                mimeType: img.mimeType || 'image/jpeg',\n              })),\n            ],\n            timestamp: Date.now(),\n          },\n        ],\n      };\n\n      const maxTokens = resolveMaxTokens(model.maxTokens, request.maxTokens ?? 512);\n      const timeoutMs = request.timeoutMs ?? 60_000;\n      const timeoutSignal =\n        typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n          ? AbortSignal.timeout(timeoutMs)\n          : undefined;\n      const signal = (() => {\n        if (timeoutSignal && request.signal && typeof AbortSignal.any === 'function') {\n          return AbortSignal.any([request.signal, timeoutSignal]);\n        }\n        if (request.signal) {\n          return request.signal;\n        }\n        if (timeoutSignal) {\n          return timeoutSignal;\n        }\n        const controller = new AbortController();\n        setTimeout(() => controller.abort(), timeoutMs);\n        return controller.signal;\n      })();\n\n      const message = await completeWithResolvedCredentials(model, context, {\n        apiKey,\n        maxTokens,\n        signal,\n      });\n\n      const text = coerceImageAssistantText({\n        message,\n        provider: providerId,\n        model: modelId,\n      });\n      return { text, provider: providerId, model: modelId };\n    },\n  };\n}\n\nfor (const providerId of ['openai', 'anthropic', 'google']) {\n  registerImageUnderstandingProvider(buildPiAiImageUnderstandingProvider(providerId));\n}\n\nregisterImageUnderstandingProviderFactory((providerId) => {\n  const hasVisionModel = getModelsByProvider(providerId).some((model) =>\n    model.input?.includes('image'),\n  );\n  return hasVisionModel ? buildPiAiImageUnderstandingProvider(providerId) : undefined;\n});\n"],"mappings":";;;;;gBAC2F;AAS3F,SAAS,iBAAiB,gBAAoC,qBAAqB,MAAc;AAC/F,KACE,OAAO,mBAAmB,YAC1B,CAAC,OAAO,SAAS,eAAe,IAChC,kBAAkB,EAElB,QAAO;AAET,QAAO,KAAK,IAAI,oBAAoB,eAAe;;AAGrD,SAAgB,oCAAoC,YAAgD;AAClG,QAAO;EACL,IAAI;EACJ,OAAO,UAAU,WAAW;EAC5B,MAAM,eAAe;GACnB,MAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,UAAO,QAAQ,OAAO;;EAExB,MAAM,eAAe,SAAS,SAAS;GACrC,MAAM,WAAW,GAAG,WAAW,GAAG;GAClC,MAAM,QAAQ,aAAa,SAAS;AACpC,OAAI,CAAC,MAAM,OAAO,SAAS,QAAQ,CACjC,OAAM,IAAI,MAAM,kCAAkC,WAAW;GAE/D,MAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,OAAI,CAAC,OACH,OAAM,IAAI,MAAM,uCAAuC,aAAa;GAGtE,MAAM,UAAmB,EACvB,UAAU,CACR;IACE,MAAM;IACN,SAAS,CACP;KAAE,MAAM;KAAQ,MAAM,QAAQ;KAAQ,EACtC,GAAG,QAAQ,OAAO,KAAK,SAAS;KAC9B,MAAM;KACN,MAAM,IAAI,OAAO,SAAS,SAAS;KACnC,UAAU,IAAI,YAAY;KAC3B,EAAE,CACJ;IACD,WAAW,KAAK,KAAK;IACtB,CACF,EACF;GAED,MAAM,YAAY,iBAAiB,MAAM,WAAW,QAAQ,aAAa,IAAI;GAC7E,MAAM,YAAY,QAAQ,aAAa;GACvC,MAAM,gBACJ,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,aACjE,YAAY,QAAQ,UAAU,GAC9B,KAAA;AA2BN,UAAO;IAAE,MALI,yBAAyB;KACpC,SAAA,MAPoB,gCAAgC,OAAO,SAAS;MACpE;MACA;MACA,eAlBoB;AACpB,WAAI,iBAAiB,QAAQ,UAAU,OAAO,YAAY,QAAQ,WAChE,QAAO,YAAY,IAAI,CAAC,QAAQ,QAAQ,cAAc,CAAC;AAEzD,WAAI,QAAQ,OACV,QAAO,QAAQ;AAEjB,WAAI,cACF,QAAO;OAET,MAAM,aAAa,IAAI,iBAAiB;AACxC,wBAAiB,WAAW,OAAO,EAAE,UAAU;AAC/C,cAAO,WAAW;UAMZ;MACP,CAAC;KAIA,UAAU;KACV,OAAO;KACR,CACY;IAAE,UAAU;IAAY,OAAO;IAAS;;EAExD;;AAGH,KAAK,MAAM,cAAc;CAAC;CAAU;CAAa;CAAS,CACxD,oCAAmC,oCAAoC,WAAW,CAAC;AAGrF,2CAA2C,eAAe;AAIxD,QAHuB,oBAAoB,WAAW,CAAC,MAAM,UAC3D,MAAM,OAAO,SAAS,QAAQ,CAEX,GAAG,oCAAoC,WAAW,GAAG,KAAA;EAC1E"}

package/dist/src/agent/memory/access-policy.d.ts

@@ -0,0 +1,12 @@
+import type { Config } from '../../config/schema.js';
+import type { MemoryRecord, MemoryScope } from './types.js';
+export type CrossAgentSharingMode = 'deny' | 'readOnly' | 'allow';
+export interface MemoryAccessPolicy {
+    requesterAgentId: string;
+    readableAgentIds: readonly string[];
+    canReadAgent(ownerAgentId: string): boolean;
+    canReadRecord(record: MemoryRecord, scope?: Partial<MemoryScope>): boolean;
+    canSubmitCandidate(ownerAgentId: string): boolean;
+}
+/** Resolve bilateral cross-agent memory grants for one requesting agent. */
+export declare function resolveMemoryAccessPolicy(config: Config, requestedAgentId: string): MemoryAccessPolicy;

package/dist/src/agent/memory/access-policy.js

@@ -0,0 +1,44 @@
+import { init_agent_session_key, normalizeAgentId } from "../../routing/agent-session-key.js";
+import { resolveEffectiveAgentManifestForAgent } from "../../config/agent-profile.js";
+//#region src/agent/memory/access-policy.ts
+init_agent_session_key();
+function sharingMode(config, agentId) {
+	return resolveEffectiveAgentManifestForAgent(config, agentId).memory.privacy?.crossAgentSharing ?? "deny";
+}
+/** Resolve bilateral cross-agent memory grants for one requesting agent. */
+function resolveMemoryAccessPolicy(config, requestedAgentId) {
+	const requesterAgentId = normalizeAgentId(requestedAgentId);
+	const requesterManifest = resolveEffectiveAgentManifestForAgent(config, requesterAgentId);
+	const requesterMode = requesterManifest.memory.privacy?.crossAgentSharing ?? "deny";
+	const enabledAgentIds = config.agents.list.filter((entry) => entry.enabled !== false).map((entry) => normalizeAgentId(entry.id));
+	const canReadAgent = (ownerAgentId) => {
+		const owner = normalizeAgentId(ownerAgentId);
+		if (owner === requesterAgentId) return true;
+		if (requesterManifest.memory.mode === "off" || requesterMode === "deny" || !enabledAgentIds.includes(owner)) return false;
+		return resolveEffectiveAgentManifestForAgent(config, owner).memory.mode !== "off" && sharingMode(config, owner) !== "deny";
+	};
+	const canReadRecord = (record, scope) => {
+		if (!canReadAgent(record.scope.agentId)) return false;
+		if (normalizeAgentId(record.scope.agentId) !== requesterAgentId && record.sensitivity && record.sensitivity !== "normal") return false;
+		if (record.scope.sessionKey && record.scope.sessionKey !== scope?.sessionKey) return false;
+		if (record.scope.projectId && record.scope.projectId !== scope?.projectId) return false;
+		return true;
+	};
+	const canSubmitCandidate = (ownerAgentId) => {
+		const owner = normalizeAgentId(ownerAgentId);
+		if (owner === requesterAgentId) return true;
+		if (requesterManifest.memory.mode === "off" || requesterMode !== "allow" || !enabledAgentIds.includes(owner)) return false;
+		return resolveEffectiveAgentManifestForAgent(config, owner).memory.mode !== "off" && sharingMode(config, owner) === "allow";
+	};
+	return {
+		requesterAgentId,
+		readableAgentIds: [requesterAgentId, ...enabledAgentIds.filter((agentId) => agentId !== requesterAgentId && canReadAgent(agentId))],
+		canReadAgent,
+		canReadRecord,
+		canSubmitCandidate
+	};
+}
+//#endregion
+export { resolveMemoryAccessPolicy };
+
+//# sourceMappingURL=access-policy.js.map

package/dist/src/agent/memory/access-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-policy.js","names":[],"sources":["../../../../src/agent/memory/access-policy.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { resolveEffectiveAgentManifestForAgent } from '../../config/agent-profile.js';\nimport { normalizeAgentId } from '../../routing/agent-session-key.js';\nimport type { MemoryRecord, MemoryScope } from './types.js';\n\nexport type CrossAgentSharingMode = 'deny' | 'readOnly' | 'allow';\n\nexport interface MemoryAccessPolicy {\n  requesterAgentId: string;\n  readableAgentIds: readonly string[];\n  canReadAgent(ownerAgentId: string): boolean;\n  canReadRecord(record: MemoryRecord, scope?: Partial<MemoryScope>): boolean;\n  canSubmitCandidate(ownerAgentId: string): boolean;\n}\n\nfunction sharingMode(config: Config, agentId: string): CrossAgentSharingMode {\n  return resolveEffectiveAgentManifestForAgent(config, agentId)\n    .memory.privacy?.crossAgentSharing ?? 'deny';\n}\n\n/** Resolve bilateral cross-agent memory grants for one requesting agent. */\nexport function resolveMemoryAccessPolicy(\n  config: Config,\n  requestedAgentId: string,\n): MemoryAccessPolicy {\n  const requesterAgentId = normalizeAgentId(requestedAgentId);\n  const requesterManifest = resolveEffectiveAgentManifestForAgent(config, requesterAgentId);\n  const requesterMode = requesterManifest.memory.privacy?.crossAgentSharing ?? 'deny';\n  const enabledAgentIds = config.agents.list\n    .filter((entry) => entry.enabled !== false)\n    .map((entry) => normalizeAgentId(entry.id));\n\n  const canReadAgent = (ownerAgentId: string): boolean => {\n    const owner = normalizeAgentId(ownerAgentId);\n    if (owner === requesterAgentId) return true;\n    if (\n      requesterManifest.memory.mode === 'off'\n      || requesterMode === 'deny'\n      || !enabledAgentIds.includes(owner)\n    ) return false;\n    const ownerManifest = resolveEffectiveAgentManifestForAgent(config, owner);\n    return ownerManifest.memory.mode !== 'off' && sharingMode(config, owner) !== 'deny';\n  };\n\n  const canReadRecord = (record: MemoryRecord, scope?: Partial<MemoryScope>): boolean => {\n    if (!canReadAgent(record.scope.agentId)) return false;\n    const crossAgent = normalizeAgentId(record.scope.agentId) !== requesterAgentId;\n    if (crossAgent && record.sensitivity && record.sensitivity !== 'normal') {\n      return false;\n    }\n    if (record.scope.sessionKey && record.scope.sessionKey !== scope?.sessionKey) return false;\n    if (record.scope.projectId && record.scope.projectId !== scope?.projectId) return false;\n    return true;\n  };\n\n  const canSubmitCandidate = (ownerAgentId: string): boolean => {\n    const owner = normalizeAgentId(ownerAgentId);\n    if (owner === requesterAgentId) return true;\n    if (\n      requesterManifest.memory.mode === 'off'\n      || requesterMode !== 'allow'\n      || !enabledAgentIds.includes(owner)\n    ) return false;\n    const ownerManifest = resolveEffectiveAgentManifestForAgent(config, owner);\n    return ownerManifest.memory.mode !== 'off' && sharingMode(config, owner) === 'allow';\n  };\n\n  return {\n    requesterAgentId,\n    readableAgentIds: [requesterAgentId, ...enabledAgentIds.filter(\n      (agentId) => agentId !== requesterAgentId && canReadAgent(agentId),\n    )],\n    canReadAgent,\n    canReadRecord,\n    canSubmitCandidate,\n  };\n}\n"],"mappings":";;;wBAEsE;AAatE,SAAS,YAAY,QAAgB,SAAwC;AAC3E,QAAO,sCAAsC,QAAQ,QAAQ,CAC1D,OAAO,SAAS,qBAAqB;;;AAI1C,SAAgB,0BACd,QACA,kBACoB;CACpB,MAAM,mBAAmB,iBAAiB,iBAAiB;CAC3D,MAAM,oBAAoB,sCAAsC,QAAQ,iBAAiB;CACzF,MAAM,gBAAgB,kBAAkB,OAAO,SAAS,qBAAqB;CAC7E,MAAM,kBAAkB,OAAO,OAAO,KACnC,QAAQ,UAAU,MAAM,YAAY,MAAM,CAC1C,KAAK,UAAU,iBAAiB,MAAM,GAAG,CAAC;CAE7C,MAAM,gBAAgB,iBAAkC;EACtD,MAAM,QAAQ,iBAAiB,aAAa;AAC5C,MAAI,UAAU,iBAAkB,QAAO;AACvC,MACE,kBAAkB,OAAO,SAAS,SAC/B,kBAAkB,UAClB,CAAC,gBAAgB,SAAS,MAAM,CACnC,QAAO;AAET,SADsB,sCAAsC,QAAQ,MAChD,CAAC,OAAO,SAAS,SAAS,YAAY,QAAQ,MAAM,KAAK;;CAG/E,MAAM,iBAAiB,QAAsB,UAA0C;AACrF,MAAI,CAAC,aAAa,OAAO,MAAM,QAAQ,CAAE,QAAO;AAEhD,MADmB,iBAAiB,OAAO,MAAM,QAAQ,KAAK,oBAC5C,OAAO,eAAe,OAAO,gBAAgB,SAC7D,QAAO;AAET,MAAI,OAAO,MAAM,cAAc,OAAO,MAAM,eAAe,OAAO,WAAY,QAAO;AACrF,MAAI,OAAO,MAAM,aAAa,OAAO,MAAM,cAAc,OAAO,UAAW,QAAO;AAClF,SAAO;;CAGT,MAAM,sBAAsB,iBAAkC;EAC5D,MAAM,QAAQ,iBAAiB,aAAa;AAC5C,MAAI,UAAU,iBAAkB,QAAO;AACvC,MACE,kBAAkB,OAAO,SAAS,SAC/B,kBAAkB,WAClB,CAAC,gBAAgB,SAAS,MAAM,CACnC,QAAO;AAET,SADsB,sCAAsC,QAAQ,MAChD,CAAC,OAAO,SAAS,SAAS,YAAY,QAAQ,MAAM,KAAK;;AAG/E,QAAO;EACL;EACA,kBAAkB,CAAC,kBAAkB,GAAG,gBAAgB,QACrD,YAAY,YAAY,oBAAoB,aAAa,QAAQ,CACnE,CAAC;EACF;EACA;EACA;EACD"}

package/dist/src/agent/memory/builtin-provider.d.ts

@@ -1,4 +1,5 @@
 import type { BuiltinMemoryStore } from './builtin-memory-store.js';
+import type { MemoryAccessPolicy } from './access-policy.js';
 import type { MemoryProvider, MemoryProviderInitOptions } from './provider.js';
 import type { MemoryDeleteRequest, MemoryListRequest, MemoryReadRequest, MemoryReadResult, MemoryRecord, MemorySearchRequest, MemorySearchResult, MemoryUpdateRequest, MemoryWriteRequest, MemoryWriteResult, MemorySyncEvent } from './types.js';
 /**
@@ -7,6 +8,7 @@ import type { MemoryDeleteRequest, MemoryListRequest, MemoryReadRequest, MemoryR
  */
 export declare class BuiltinMemoryProvider implements MemoryProvider {
     private readonly store;
+    private readonly accessPolicy?;
     readonly id = "local";
     readonly displayName = "Local Knowledge Store";
     readonly capabilities: {
@@ -24,7 +26,7 @@ export declare class BuiltinMemoryProvider implements MemoryProvider {
     };
     private workspaceDir;
     private agentId;
-    constructor(store: BuiltinMemoryStore);
+    constructor(store: BuiltinMemoryStore, accessPolicy?: MemoryAccessPolicy);
     isAvailable(): boolean;
     initialize(_sessionId: string, options?: MemoryProviderInitOptions): Promise<void>;
     systemPromptBlock(): string;
@@ -39,4 +41,5 @@ export declare class BuiltinMemoryProvider implements MemoryProvider {
     delete(request: MemoryDeleteRequest): Promise<MemoryWriteResult>;
     sync(event: MemorySyncEvent): void;
     shutdown(): Promise<void>;
+    private canReadRecord;
 }

package/dist/src/agent/memory/builtin-provider.js

@@ -1,7 +1,9 @@
+import { init_agent_session_key, normalizeAgentId } from "../../routing/agent-session-key.js";
 import { appendMemorySignal, deleteMemoryRecord, getMemoryRecord, listMemoryRecords, searchMemoryRecords, upsertMemoryRecord } from "../../storage/sqlite/memory-records-repository.js";
 import "../../storage/sqlite/index.js";
 import { memoryGet, memorySearch } from "../prompt/memory/index.js";
 //#region src/agent/memory/builtin-provider.ts
+init_agent_session_key();
 /**
 * Builtin local memory provider backed by profile memory, agent-home curated files,
 * and the local SQLite FTS index.
@@ -24,15 +26,16 @@ var BuiltinMemoryProvider = class {
 	};
 	workspaceDir = "";
 	agentId = "main";
-	constructor(store) {
+	constructor(store, accessPolicy) {
 		this.store = store;
+		this.accessPolicy = accessPolicy;
 	}
 	isAvailable() {
 		return true;
 	}
 	async initialize(_sessionId, options) {
 		this.workspaceDir = options?.workspace ?? options?.agentWorkspace ?? this.store.workspaceDir;
-		this.agentId = String(options?.agentId ?? this.agentId);
+		this.agentId = normalizeAgentId(String(options?.agentId ?? this.agentId));
 	}
 	systemPromptBlock() {
 		return "";
@@ -42,24 +45,27 @@ var BuiltinMemoryProvider = class {
 		return [];
 	}
 	async search(request) {
-		const agentId = request.scope?.agentId ?? this.agentId;
 		const workspaceId = request.scope?.workspaceId ?? this.workspaceDir;
-		const recordHits = searchMemoryRecords({
+		const recordHits = (this.accessPolicy?.readableAgentIds ?? [this.agentId]).flatMap((ownerAgentId) => searchMemoryRecords({
 			query: request.query,
-			agentId,
-			workspaceId,
+			agentId: ownerAgentId,
+			workspaceId: ownerAgentId === this.agentId ? workspaceId : void 0,
+			visibleToSessionKey: request.scope?.sessionKey,
+			unscopedSessionOnly: request.scope?.sessionKey == null,
+			visibleToProjectId: request.scope?.projectId,
+			unscopedProjectOnly: request.scope?.projectId == null,
 			providerId: this.id,
 			kinds: request.kinds,
 			maxResults: request.maxResults,
 			minScore: request.minScore
-		});
+		})).filter((result) => this.canReadRecord(result.record, request.scope)).sort((left, right) => right.score - left.score).slice(0, request.maxResults ?? 5);
 		if (recordHits.length > 0) return recordHits;
 		return (await memorySearch(this.workspaceDir, request.query, {
 			maxResults: request.maxResults,
 			minScore: request.minScore,
 			memoriesDir: this.store.memoriesDir,
 			userMemoryPath: this.store.userMemoryPath,
-			agentId
+			agentId: this.agentId
 		})).map((entry) => {
 			const start = entry.lineNumbers[0] ?? 1;
 			const end = entry.lineNumbers[entry.lineNumbers.length - 1] ?? start;
@@ -70,7 +76,7 @@ var BuiltinMemoryProvider = class {
 					id,
 					providerId: this.id,
 					kind,
-					agentId,
+					agentId: this.agentId,
 					workspaceId,
 					content: entry.lines,
 					source: {
@@ -96,7 +102,8 @@ var BuiltinMemoryProvider = class {
 	async read(request) {
 		if (request.id && !request.path) {
 			const existing = getMemoryRecord(request.id);
-			if (existing) return { record: existing };
+			if (existing && this.canReadRecord(existing, request.scope)) return { record: existing };
+			if (existing) return null;
 		}
 		const result = memoryGet(this.workspaceDir, request.path ?? request.id ?? "", request.from, request.lines, this.store.memoriesDir, this.store.userMemoryPath);
 		if (!result) return null;
@@ -106,7 +113,7 @@ var BuiltinMemoryProvider = class {
 				id: `${path}#L${result.lineNumbers.start}-L${result.lineNumbers.end}`,
 				providerId: this.id,
 				kind: inferKindFromPath(path),
-				agentId: request.scope?.agentId ?? this.agentId,
+				agentId: this.agentId,
 				workspaceId: request.scope?.workspaceId ?? this.workspaceDir,
 				content: result.content,
 				source: {
@@ -132,6 +139,8 @@ var BuiltinMemoryProvider = class {
 			providerId: this.id,
 			agentId: request.scope?.agentId ?? this.agentId,
 			workspaceId: request.scope?.workspaceId ?? this.workspaceDir,
+			visibleToSessionKey: request.scope?.sessionKey,
+			visibleToProjectId: request.scope?.projectId,
 			kind: request.kind,
 			status: request.status,
 			canonicalKey: request.canonicalKey,
@@ -154,22 +163,33 @@ var BuiltinMemoryProvider = class {
 	}
 	async write(request) {
 		const target = request.target ?? (request.kind === "user_profile" ? "user" : "memory");
+		const ownerAgentId = normalizeAgentId(request.scope?.agentId ?? this.agentId);
+		const isCrossAgentWrite = ownerAgentId !== this.agentId;
+		if (isCrossAgentWrite && request.status !== "candidate") return {
+			success: false,
+			error: "Cross-agent writes must be submitted as candidates"
+		};
+		if (isCrossAgentWrite && !this.accessPolicy?.canSubmitCandidate(ownerAgentId)) return {
+			success: false,
+			error: "Cross-agent candidate submission is not allowed"
+		};
 		if (request.status === "candidate") return {
 			success: true,
 			message: "Memory candidate added to inbox",
 			record: upsertMemoryRecord({
 				providerId: this.id,
 				kind: request.kind,
-				agentId: request.scope?.agentId ?? this.agentId,
-				workspaceId: request.scope?.workspaceId ?? this.workspaceDir,
-				sessionKey: request.scope?.sessionKey,
+				agentId: ownerAgentId,
+				workspaceId: isCrossAgentWrite ? request.scope?.workspaceId : request.scope?.workspaceId ?? this.workspaceDir,
+				sessionKey: isCrossAgentWrite ? void 0 : request.scope?.sessionKey,
+				projectId: isCrossAgentWrite ? void 0 : request.scope?.projectId,
 				content: request.content,
 				source: {
 					...request.source ?? {},
 					provider: this.id
 				},
 				confidence: request.confidence,
-				tags: request.tags,
+				tags: isCrossAgentWrite ? [...request.tags ?? [], `shared-from:${this.agentId}`] : request.tags,
 				status: "candidate",
 				sensitivity: request.sensitivity,
 				canonicalKey: request.canonicalKey,
@@ -198,7 +218,7 @@ var BuiltinMemoryProvider = class {
 				id: `curated:${target}:${Date.now()}`,
 				providerId: this.id,
 				kind: request.kind,
-				agentId: request.scope?.agentId ?? this.agentId,
+				agentId: this.agentId,
 				workspaceId: request.scope?.workspaceId ?? this.workspaceDir,
 				sessionKey: request.scope?.sessionKey,
 				content: request.content,
@@ -225,6 +245,10 @@ var BuiltinMemoryProvider = class {
 	}
 	async update(request) {
 		const target = request.target ?? "memory";
+		if (((request.id ? getMemoryRecord(request.id) : null)?.scope.agentId ?? request.scope?.agentId ?? this.agentId) !== this.agentId) return {
+			success: false,
+			error: "Cross-agent memory updates are not allowed"
+		};
 		const result = await this.store.replace(target, request.matchText ?? request.id ?? "", request.content);
 		if (!result.success) return {
 			success: false,
@@ -273,6 +297,10 @@ var BuiltinMemoryProvider = class {
 	}
 	async delete(request) {
 		const target = request.target ?? "memory";
+		if (((request.id ? getMemoryRecord(request.id) : null)?.scope.agentId ?? request.scope?.agentId ?? this.agentId) !== this.agentId) return {
+			success: false,
+			error: "Cross-agent memory deletion is not allowed"
+		};
 		const result = await this.store.remove(target, request.matchText ?? request.id ?? "");
 		if (!result.success) return {
 			success: false,
@@ -304,6 +332,13 @@ var BuiltinMemoryProvider = class {
 		});
 	}
 	async shutdown() {}
+	canReadRecord(record, scope) {
+		if (this.accessPolicy) return this.accessPolicy.canReadRecord(record, scope);
+		if (record.scope.agentId !== this.agentId) return false;
+		if (record.scope.sessionKey && record.scope.sessionKey !== scope?.sessionKey) return false;
+		if (record.scope.projectId && record.scope.projectId !== scope?.projectId) return false;
+		return true;
+	}
 };
 function inferKindFromPath(path) {
 	const normalized = path.replace(/\\/g, "/");