@zhin.js/agent 1.1.3 → 1.1.6

package/lib/plugin-runtime/agent-runtime.js

@@ -1,20 +1,54 @@
+import { createToken } from '@zhin.js/plugin-runtime';
+import { PersistentTurnJournal } from '../journal/persistent-turn-journal.js';
+import { executeAgentTurn } from '../turn/execute-agent-turn.js';
+import { createTurnIngress, } from '../turn/turn-ingress.js';
 import { CapabilityIngress, } from './capability-ingress.js';
-export class AgentRuntime {
-    #ingress = new CapabilityIngress();
-    #snapshots;
+import { TurnToolRuntime } from '../tool/turn-tool-runtime.js';
+class SnapshotAttachedRuntime {
+    snapshots;
     attach(snapshots) {
-        if (this.#snapshots && this.#snapshots !== snapshots) {
-            throw new Error('AgentRuntime is already attached to another Root');
+        if (this.snapshots && this.snapshots !== snapshots) {
+            throw new Error(`${this.constructor.name} is already attached to another Root`);
         }
-        this.#snapshots = snapshots;
+        this.snapshots = snapshots;
+    }
+    requireSnapshots() {
+        if (!this.snapshots)
+            throw new Error(`${this.constructor.name} is not attached to a Root`);
+        return this.snapshots;
     }
-    async runTurn(owner, operation, options) {
-        if (!this.#snapshots)
-            throw new Error('AgentRuntime is not attached to a Root');
-        const lease = this.#snapshots.acquire();
+}
+export const turnJournalStoreToken = createToken('zhin.agent.turn-journal-store', 'Durable Agent turn event journal store');
+/** Canonical fixed-generation execution authority for external tool protocols. */
+export class ToolIngressRuntime extends SnapshotAttachedRuntime {
+    #ingress = new CapabilityIngress();
+    async withTools(owner, request, operation) {
+        const lease = this.requireSnapshots().acquire();
         let active = true;
         try {
-            return await operation(this.#ingress.read(lease.value, owner, () => active, options?.message));
+            const capabilities = await this.#ingress.read(lease.value, owner, () => active, request);
+            let invocationSequence = 0;
+            const tools = Object.freeze(capabilities.tools.map(({ execute: _execute, ...descriptor }) => Object.freeze({
+                ...descriptor,
+                execute: async (input, toolUseId) => {
+                    if (!active)
+                        throw new Error('External Tool capability scope has ended');
+                    invocationSequence += 1;
+                    const invocationRequest = {
+                        ...request,
+                        identity: {
+                            traceId: request.identity.traceId,
+                            turnId: `${request.identity.turnId}:${invocationSequence}`,
+                        },
+                    };
+                    const turn = createIngressTurn(lease.value, invocationRequest, capabilities);
+                    const runtime = new TurnToolRuntime(turn, capabilities.tools);
+                    const outcome = await runtime.execute(descriptor.name, input, toolUseId);
+                    await appendExternalToolTerminal(turn, outcome);
+                    return outcome;
+                },
+            })));
+            return await operation(tools);
         }
         finally {
             active = false;
@@ -22,4 +56,185 @@ export class AgentRuntime {
         }
     }
 }
+async function appendExternalToolTerminal(turn, outcome) {
+    if (outcome.status === 'completed') {
+        await turn.ports.journal.append({
+            type: 'turn_end',
+            output: [],
+            usage: { promptTokens: 0, completionTokens: 0, totalTokens: 0 },
+        });
+        return;
+    }
+    if (outcome.status === 'cancelled') {
+        await turn.ports.journal.append({
+            type: 'turn_cancelled',
+            code: 'cancelled',
+            reason: outcome.reason,
+        });
+        return;
+    }
+    const message = outcome.status === 'failed' ? outcome.error : outcome.reason;
+    await turn.ports.journal.append({
+        type: 'error',
+        error: new Error(message),
+        recoverable: false,
+    });
+}
+/** Root-owned serialization authority shared by every Agent generation. */
+export class AgentTurnCoordinator {
+    #tails = new Map();
+    async run(sessionKey, signal, operation) {
+        const previous = this.#tails.get(sessionKey) ?? Promise.resolve();
+        let release;
+        const current = new Promise((resolve) => { release = resolve; });
+        const tail = previous.catch(() => undefined).then(() => current);
+        this.#tails.set(sessionKey, tail);
+        try {
+            await waitForTurn(previous.catch(() => undefined), signal);
+            return await operation();
+        }
+        finally {
+            release();
+            if (this.#tails.get(sessionKey) === tail)
+                this.#tails.delete(sessionKey);
+        }
+    }
+}
+export const agentTurnEngineToken = createToken('zhin.agent.turn-engine', 'Complete Agent Turn engine owned by one Root generation');
+export class AgentRuntime extends SnapshotAttachedRuntime {
+    options;
+    #ingress = new CapabilityIngress();
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    async execute(owner, request, selection, observe) {
+        const lease = this.requireSnapshots().acquire();
+        try {
+            return await this.executeLeased(lease, owner, request, selection, observe);
+        }
+        finally {
+            lease.release();
+        }
+    }
+    /** Executes under the fixed-generation lease owned by the ingress operation. */
+    async executeLeased(lease, owner, request, selection, observe) {
+        const snapshots = this.requireSnapshots();
+        if (!snapshots.owns(lease))
+            throw new Error('AgentRuntime rejected a lease owned by another Root');
+        if (!lease.active)
+            throw new Error('AgentRuntime requires an active generation lease');
+        return this.options.coordinator.run(request.session.key, request.signal, () => this.#executeLeased(lease, owner, request, selection, observe));
+    }
+    async #executeLeased(lease, owner, request, selection, observe) {
+        let active = true;
+        try {
+            if (!active)
+                throw new Error('Agent generation operation is not active');
+            const discovered = await this.#ingress.read(lease.value, owner, () => active && lease.active, request);
+            const capabilities = Object.freeze({
+                ...discovered,
+                tools: Object.freeze([
+                    ...discovered.tools,
+                    ...await expandMcpTools(discovered, selection.mcpServers),
+                ]),
+            });
+            const turn = createIngressTurn(lease.value, request, capabilities);
+            const catalog = Object.freeze({
+                ...capabilities,
+                tools: Object.freeze(capabilities.tools.map(({ execute: _execute, ...tool }) => Object.freeze(tool))),
+            });
+            const tools = new TurnToolRuntime(turn, capabilities.tools);
+            const engine = resolveTurnEngine(lease.value);
+            return await executeAgentTurn(turn, () => engine.run({
+                turn,
+                capabilities: catalog,
+                tools,
+                toolCapabilities: capabilities.tools,
+                selection,
+            }), observe);
+        }
+        finally {
+            active = false;
+        }
+    }
+}
+function resolveTurnEngine(snapshot) {
+    const candidate = snapshot.resources.get(snapshot.root)?.get(agentTurnEngineToken.id);
+    if (!candidate || typeof candidate.run !== 'function') {
+        throw new Error('Active generation does not provide an Agent Turn Engine');
+    }
+    return candidate;
+}
+async function waitForTurn(previous, signal) {
+    if (signal.aborted)
+        throw signal.reason ?? new Error('Agent turn cancelled while queued');
+    let rejectAbort;
+    const aborted = new Promise((_resolve, reject) => { rejectAbort = reject; });
+    const onAbort = () => rejectAbort(signal.reason ?? new Error('Agent turn cancelled while queued'));
+    signal.addEventListener('abort', onAbort, { once: true });
+    try {
+        await Promise.race([previous, aborted]);
+    }
+    finally {
+        signal.removeEventListener('abort', onAbort);
+    }
+}
+export async function expandMcpTools(capabilities, allowedServers) {
+    const expanded = [];
+    const occupied = new Set(capabilities.tools.map((tool) => tool.name));
+    for (const connection of capabilities.mcp) {
+        if (!allowedServers.includes(connection.name))
+            continue;
+        for (const tool of await connection.listTools()) {
+            const name = `${connection.qualifiedName}__${tool.name}`;
+            if (occupied.has(name)) {
+                throw new Error(`Duplicate Agent Tool capability: ${name}`);
+            }
+            occupied.add(name);
+            expanded.push(Object.freeze({
+                owner: connection.owner,
+                name,
+                qualifiedName: name,
+                description: tool.description?.trim() || `${connection.name} MCP tool ${tool.name}`,
+                inputSchema: tool.inputSchema,
+                approval: 'on-risk',
+                source: connection.source,
+                execute: (input) => connection.callTool(tool.name, input),
+            }));
+        }
+    }
+    return expanded;
+}
+function createIngressTurn(snapshot, request, capabilities) {
+    return createTurnIngress({
+        ...request,
+        identity: {
+            rootId: String(snapshot.root),
+            generation: snapshot.generation,
+            traceId: request.identity.traceId,
+            turnId: request.identity.turnId,
+        },
+        capabilities: {
+            tools: capabilities.tools.map((tool) => tool.name),
+            skills: capabilities.skills.map((skill) => skill.name),
+        },
+        ports: {
+            ...request.ports,
+            journal: new PersistentTurnJournal({
+                sessionId: request.session.key,
+                turnId: request.identity.turnId,
+            }, resolveJournalStore(snapshot)),
+        },
+    });
+}
+function resolveJournalStore(snapshot) {
+    const store = snapshot.resources.get(snapshot.root)?.get(turnJournalStoreToken.id);
+    if (!store
+        || typeof store.append !== 'function'
+        || typeof store.replay !== 'function') {
+        throw new Error('Agent Turn JournalStore is not installed for this generation');
+    }
+    return store;
+}
 //# sourceMappingURL=agent-runtime.js.map

package/lib/plugin-runtime/agent-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-runtime.js","sourceRoot":"","sources":["../../src/plugin-runtime/agent-runtime.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,OAAO,YAAY;IACd,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC5C,UAAU,CAAiB;IAE3B,MAAM,CAAC,SAAwB;QAC7B,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAe,EACf,SAA0E,EAC1E,OAAwC;QAExC,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxC,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CACvC,KAAK,CAAC,KAAK,EACX,KAAK,EACL,GAAG,EAAE,CAAC,MAAM,EACZ,OAAO,EAAE,OAAO,CACjB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,KAAK,CAAC;YACf,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"agent-runtime.js","sourceRoot":"","sources":["../../src/plugin-runtime/agent-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAyD,MAAM,yBAAyB,CAAC;AAE7G,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAA0B,MAAM,+BAA+B,CAAC;AACzF,OAAO,EACL,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAwB,MAAM,8BAA8B,CAAC;AAGrF,MAAe,uBAAuB;IAC1B,SAAS,CAAiB;IAEpC,MAAM,CAAC,SAAwB;QAC7B,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,sCAAsC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAES,gBAAgB;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,4BAA4B,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,WAAW,CAC9C,+BAA+B,EAC/B,wCAAwC,CACzC,CAAC;AAMF,kFAAkF;AAClF,MAAM,OAAO,kBAAmB,SAAQ,uBAAuB;IACpD,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAE5C,KAAK,CAAC,SAAS,CACb,KAAe,EACf,OAAoB,EACpB,SAAmF;QAEnF,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzF,IAAI,kBAAkB,GAAG,CAAC,CAAC;YAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBACzG,GAAG,UAAU;gBACb,OAAO,EAAE,KAAK,EAAE,KAAwC,EAAE,SAAiB,EAAE,EAAE;oBAC7E,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;oBACzE,kBAAkB,IAAI,CAAC,CAAC;oBACxB,MAAM,iBAAiB,GAAgB;wBACrC,GAAG,OAAO;wBACV,QAAQ,EAAE;4BACR,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;4BACjC,MAAM,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,IAAI,kBAAkB,EAAE;yBAC3D;qBACF,CAAC;oBACF,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;oBAC7E,MAAM,OAAO,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;oBAC9D,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;oBACzE,MAAM,0BAA0B,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAChD,OAAO,OAAO,CAAC;gBACjB,CAAC;aACF,CAAC,CAAC,CAAC,CAAC;YACL,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,KAAK,CAAC;YACf,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;CACF;AAED,KAAK,UAAU,0BAA0B,CACvC,IAAmD,EACnD,OAAwB;IAExB,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;SAChE,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC;QACzB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAcD,2EAA2E;AAC3E,MAAM,OAAO,oBAAoB;IACtB,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,KAAK,CAAC,GAAG,CACP,UAAkB,EAClB,MAAmB,EACnB,SAAiC;QAEjC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClE,IAAI,OAAoB,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,OAAO,EAAE,CAAC;YACV,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;CACF;AAcD,MAAM,CAAC,MAAM,oBAAoB,GAAG,WAAW,CAC7C,wBAAwB,EACxB,yDAAyD,CAC1D,CAAC;AAcF,MAAM,OAAO,YAAa,SAAQ,uBAAuB;IAG1B;IAFpB,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAE5C,YAA6B,OAA4B;QACvD,KAAK,EAAE,CAAC;QADmB,YAAO,GAAP,OAAO,CAAqB;IAEzD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAe,EACf,OAAoB,EACpB,SAAmC,EACnC,OAA2B;QAE3B,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,aAAa,CACjB,KAAoB,EACpB,KAAe,EACf,OAAoB,EACpB,SAAmC,EACnC,OAA2B;QAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,CAC5E,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAoB,EACpB,KAAe,EACf,OAAoB,EACpB,SAAmC,EACnC,OAA2B;QAE3B,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACzE,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvG,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;gBACjC,GAAG,UAAU;gBACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,GAAG,UAAU,CAAC,KAAK;oBACnB,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC;iBAC1D,CAAC;aACH,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,YAAY;gBACf,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;aACtG,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,MAAM,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;gBACnD,IAAI;gBACJ,YAAY,EAAE,OAAO;gBACrB,KAAK;gBACL,gBAAgB,EAAE,YAAY,CAAC,KAAK;gBACpC,SAAS;aACV,CAAC,EAAE,OAAO,CAAC,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;CACF;AAED,SAAS,iBAAiB,CAAC,QAA2D;IACpF,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC,SAAS,IAAI,OAAQ,SAA6B,CAAC,GAAG,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,SAA4B,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAuB,EAAE,MAAmB;IACrE,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1F,IAAI,WAAuC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACnG,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,YAA+B,EAC/B,cAAiC;IAEjC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACxD,KAAK,MAAM,IAAI,IAAI,MAAM,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,GAAG,UAAU,CAAC,aAAa,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,IAAI;gBACJ,aAAa,EAAE,IAAI;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,GAAG,UAAU,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,EAAE;gBACnF,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,QAAQ,EAAE,SAAkB;gBAC5B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,CAAsC,KAAa,EAAE,EAAE,CAC9D,UAAU,CAAC,QAAQ,CAAU,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;aACjD,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CACxB,QAA2D,EAC3D,OAAoB,EACpB,YAA+B;IAE/B,OAAO,iBAAiB,CAAC;QACvB,GAAG,OAAO;QACV,QAAQ,EAAE;YACR,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;YACjC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;SAChC;QACD,YAAY,EAAE;YACZ,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAClD,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SACvD;QACD,KAAK,EAAE;YACL,GAAG,OAAO,CAAC,KAAK;YAChB,OAAO,EAAE,IAAI,qBAAqB,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG;gBAC9B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;aAChC,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;SAClC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAA2D;IACtF,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,KAAK;WACL,OAAQ,KAAsB,CAAC,MAAM,KAAK,UAAU;WACpD,OAAQ,KAAsB,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC"}

package/lib/plugin-runtime/capability-ingress.d.ts

@@ -1,11 +1,11 @@
 import type { PluginId, RuntimeSnapshot } from '@zhin.js/plugin-runtime';
-import { type Message } from '@zhin.js/core';
+import { type TurnAccessContext } from '../turn/turn-ingress.js';
 import { type AgentDescriptor } from '@zhin.js/agent-feature';
 import { type McpDescriptor, type McpToolDescriptor } from '@zhin.js/mcp-feature';
 import { type SkillDescriptor } from '@zhin.js/skill';
-import { type ToolDescriptor } from '@zhin.js/tool';
+import { type ToolDescriptor, type ToolInvocationContext } from '@zhin.js/tool';
 export interface ToolCapability extends ToolDescriptor {
-    execute<TInput = unknown, TResult = unknown>(input: TInput): Promise<TResult>;
+    execute<TInput = unknown, TResult = unknown>(input: TInput, invocation: ToolInvocationContext): Promise<TResult>;
 }
 export interface McpCapability extends McpDescriptor {
     listTools(): Promise<readonly McpToolDescriptor[]>;
@@ -20,6 +20,6 @@ export interface AgentCapabilities {
     readonly mcp: readonly McpCapability[];
 }
 export declare class CapabilityIngress {
-    read(snapshot: RuntimeSnapshot, owner: PluginId, isActive?: () => boolean, message?: Message): AgentCapabilities;
+    read(snapshot: RuntimeSnapshot, owner: PluginId, isActive?: () => boolean, turn?: TurnAccessContext): Promise<AgentCapabilities>;
 }
 //# sourceMappingURL=capability-ingress.d.ts.map

package/lib/plugin-runtime/capability-ingress.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-ingress.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/capability-ingress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAiB,KAAK,OAAO,EAAyB,MAAM,eAAe,CAAC;AACnF,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,OAAO,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,SAAS,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,SAAS,aAAa,EAAE,CAAC;CACxC;AAED,qBAAa,iBAAiB;IAC5B,IAAI,CACF,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,QAAQ,EACf,QAAQ,GAAE,MAAM,OAAoB,EACpC,OAAO,CAAC,EAAE,OAAO,GAChB,iBAAiB;CAiBrB"}
+{"version":3,"file":"capability-ingress.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/capability-ingress.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,QAAQ,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAyB,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,cAAe,SAAQ,cAAc;IACpD,OAAO,CAAC,MAAM,GAAG,OAAO,EAAE,OAAO,GAAG,OAAO,EACzC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,qBAAqB,GAChC,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,SAAS,IAAI,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,CAAC;IAC5C,QAAQ,CAAC,GAAG,EAAE,SAAS,aAAa,EAAE,CAAC;CACxC;AAED,qBAAa,iBAAiB;IACtB,IAAI,CACR,QAAQ,EAAE,eAAe,EACzB,KAAK,EAAE,QAAQ,EACf,QAAQ,GAAE,MAAM,OAAoB,EACpC,IAAI,CAAC,EAAE,iBAAiB,GACvB,OAAO,CAAC,iBAAiB,CAAC;CAiB9B"}

package/lib/plugin-runtime/capability-ingress.js

@@ -1,10 +1,11 @@
-import { canAccessTool } from '@zhin.js/core';
+import { permissionHostToken } from '@zhin.js/permission';
+import { turnPermissionSubject } from '../turn/turn-ingress.js';
 import { AgentIndex, agentFeatureId, } from '@zhin.js/agent-feature';
 import { McpIndex, mcpFeatureId, } from '@zhin.js/mcp-feature';
 import { SkillIndex, skillFeatureId, } from '@zhin.js/skill';
 import { ToolIndex, toolFeatureId, } from '@zhin.js/tool';
 export class CapabilityIngress {
-    read(snapshot, owner, isActive = () => true, message) {
+    async read(snapshot, owner, isActive = () => true, turn) {
         if (!snapshot.tree.has(owner))
             throw new Error(`Unknown Agent capability owner: ${owner}`);
         const tools = projection(snapshot, toolFeatureId, ToolIndex);
@@ -12,7 +13,7 @@ export class CapabilityIngress {
         return Object.freeze({
             generation: snapshot.generation,
             owner,
-            tools: bindTools(tools, owner, isActive, message),
+            tools: await bindTools(tools, owner, isActive, turn, resolvePermissionHost(snapshot)),
             skills: Object.freeze([
                 ...(projection(snapshot, skillFeatureId, SkillIndex)?.visible(owner) ?? []),
             ]),
@@ -23,29 +24,54 @@ export class CapabilityIngress {
         });
     }
 }
-function bindTools(index, owner, isActive, message) {
+async function bindTools(index, owner, isActive, turn, host) {
     if (!index)
         return Object.freeze([]);
-    return Object.freeze(index.visible(owner)
-        .filter((descriptor) => !descriptor.hidden && canAccessDescriptor(descriptor, message))
-        .map((descriptor) => Object.freeze({
-        ...descriptor,
-        execute: (input) => {
+    const visibleDescriptors = index.list();
+    const accessResults = await Promise.all(visibleDescriptors.map(async (descriptor) => ({
+        descriptor,
+        allowed: !descriptor.hidden && await canAccessDescriptor(descriptor, turn, host),
+    })));
+    return Object.freeze(accessResults
+        .filter((r) => r.allowed)
+        .map((r) => Object.freeze({
+        ...r.descriptor,
+        name: r.descriptor.qualifiedName,
+        execute: (input, invocation) => {
             assertActive(isActive);
-            return index.execute(owner, descriptor.name, input);
+            return index.execute(r.descriptor.owner, r.descriptor.name, input, invocation);
         },
     })));
 }
-function canAccessDescriptor(descriptor, message) {
-    return canAccessTool({
-        name: descriptor.name,
-        description: descriptor.description,
-        parameters: { type: 'object', properties: {} },
-        execute: () => undefined,
-        platforms: descriptor.platforms ? [...descriptor.platforms] : undefined,
-        scopes: descriptor.scopes ? [...descriptor.scopes] : undefined,
-        permissions: descriptor.permissions ? [...descriptor.permissions] : undefined,
-    }, message);
+async function canAccessDescriptor(descriptor, turn, host) {
+    if (descriptor.platforms?.length) {
+        if (turn?.origin.kind !== 'im' || !descriptor.platforms.includes(turn.origin.platform)) {
+            return false;
+        }
+    }
+    if (descriptor.scopes?.length) {
+        if (turn?.origin.kind !== 'im' || !descriptor.scopes.includes(turn.origin.scope)) {
+            return false;
+        }
+    }
+    if (!descriptor.permissions?.length)
+        return true;
+    if (!turn || !host)
+        return false;
+    return host.checkAll(descriptor.permissions, turnPermissionSubject(turn));
+}
+/** Root resources 上的 PermissionHost（command-index 同款解析；未安装时 fail-closed）。 */
+function resolvePermissionHost(snapshot) {
+    try {
+        const resources = snapshot.resources.get(snapshot.root);
+        const host = resources?.get(permissionHostToken.id);
+        return host && typeof host.check === 'function'
+            ? host
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 function bindMcp(index, owner, isActive) {
     if (!index)

package/lib/plugin-runtime/capability-ingress.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-ingress.js","sourceRoot":"","sources":["../../src/plugin-runtime/capability-ingress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAuC,MAAM,eAAe,CAAC;AACnF,OAAO,EACL,UAAU,EACV,cAAc,GAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,QAAQ,EACR,YAAY,GAGb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,GAEf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,aAAa,GAEd,MAAM,eAAe,CAAC;AAoBvB,MAAM,OAAO,iBAAiB;IAC5B,IAAI,CACF,QAAyB,EACzB,KAAe,EACf,WAA0B,GAAG,EAAE,CAAC,IAAI,EACpC,OAAiB;QAEjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK;YACL,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC;YACjD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5E,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5E,CAAC;YACF,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAChB,KAA4B,EAC5B,KAAe,EACf,QAAuB,EACvB,OAAiB;IAEjB,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;SACtC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,IAAI,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;SACtF,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,GAAG,UAAU;QACb,OAAO,EAAE,CAAkB,KAAa,EAAE,EAAE;YAC1C,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,OAAO,CAAkB,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;KACA,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAA0B,EAC1B,OAA4B;IAE5B,OAAO,aAAa,CAAC;QACnB,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;QAC9C,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,WAAW,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3D,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CACd,KAA2B,EAC3B,KAAe,EACf,QAAuB;IAEvB,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1E,GAAG,UAAU;QACb,SAAS,EAAE,GAAG,EAAE;YACd,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,QAAQ,EAAE,CAAU,IAAY,EAAE,KAAc,EAAE,EAAE;YAClD,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,QAAQ,CAAU,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB;IAC3C,IAAI,CAAC,QAAQ,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CACjB,QAAyB,EACzB,EAAa,EACb,WAAsC;IAEtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,KAAK;WACP,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACpE,CAAC,CAAC,KAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}
+{"version":3,"file":"capability-ingress.js","sourceRoot":"","sources":["../../src/plugin-runtime/capability-ingress.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAA0B,MAAM,yBAAyB,CAAC;AACxF,OAAO,EACL,UAAU,EACV,cAAc,GAEf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,QAAQ,EACR,YAAY,GAGb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,GAEf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,SAAS,EACT,aAAa,GAGd,MAAM,eAAe,CAAC;AAuBvB,MAAM,OAAO,iBAAiB;IAC5B,KAAK,CAAC,IAAI,CACR,QAAyB,EACzB,KAAe,EACf,WAA0B,GAAG,EAAE,CAAC,IAAI,EACpC,IAAwB;QAExB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,KAAK;YACL,KAAK,EAAE,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACrF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5E,CAAC;YACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;gBACpB,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5E,CAAC;YACF,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;CACF;AAED,KAAK,UAAU,SAAS,CACtB,KAA4B,EAC5B,KAAe,EACf,QAAuB,EACvB,IAAwB,EACxB,IAAqB;IAErB,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACxC,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CACrC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5C,UAAU;QACV,OAAO,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC;KACjF,CAAC,CAAC,CACJ,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa;SAC/B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QACxB,GAAG,CAAC,CAAC,UAAU;QACf,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,aAAa;QAChC,OAAO,EAAE,CAAkB,KAAa,EAAE,UAAiC,EAAE,EAAE;YAC7E,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,OAAO,CAAkB,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAClG,CAAC;KACF,CAAC,CAAC,CAAC,CAAC;AACT,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,UAA0B,EAC1B,IAAmC,EACnC,IAAqB;IAErB,IAAI,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QACjC,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9B,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,6EAA6E;AAC7E,SAAS,qBAAqB,CAAC,QAAyB;IACtD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,EAAE,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,IAAI,OAAQ,IAAuB,CAAC,KAAK,KAAK,UAAU;YACjE,CAAC,CAAC,IAAsB;YACxB,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,KAA2B,EAC3B,KAAe,EACf,QAAuB;IAEvB,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1E,GAAG,UAAU;QACb,SAAS,EAAE,GAAG,EAAE;YACd,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QACD,QAAQ,EAAE,CAAU,IAAY,EAAE,KAAc,EAAE,EAAE;YAClD,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvB,OAAO,KAAK,CAAC,QAAQ,CAAU,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;KACF,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,YAAY,CAAC,QAAuB;IAC3C,IAAI,CAAC,QAAQ,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,UAAU,CACjB,QAAyB,EACzB,EAAa,EACb,WAAsC;IAEtC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,OAAO,KAAK;WACP,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC;QACpE,CAAC,CAAC,KAAU;QACZ,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/lib/plugin-runtime/capability-tools.d.ts

@@ -0,0 +1,17 @@
+/**
+ * ToolCapability → turn tool 转换（Plugin Runtime runner 注入点）。
+ * 打上 snapshot generation 戳，ToolRuntime 在执行前校验戳与当前 turn 是否一致。
+ */
+import type { Tool } from '@zhin.js/core';
+import type { AgentCapabilities, ToolCapability } from './capability-ingress.js';
+import type { ToolInvocationContext } from '@zhin.js/tool';
+import type { TurnIngress, TurnRequest } from '../turn/turn-ingress.js';
+/** Core transport tool shape plus the generation stamp ToolRuntime validates. */
+export type GenerationStampedTool = Tool & {
+    generation?: number;
+};
+export declare function capabilityToTool(tool: ToolCapability, invocation: ToolInvocationContext): GenerationStampedTool;
+/** Owner-visible capabilities → generation-stamped tools for the turn runner. */
+export declare function toolsFromCapabilities(capabilities: AgentCapabilities, turn: TurnIngress | TurnRequest): GenerationStampedTool[];
+export declare function toolInvocationFromTurn(turn: TurnIngress | TurnRequest): ToolInvocationContext;
+//# sourceMappingURL=capability-tools.d.ts.map

package/lib/plugin-runtime/capability-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-tools.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/capability-tools.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAExE,iFAAiF;AACjF,MAAM,MAAM,qBAAqB,GAAG,IAAI,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,cAAc,EACpB,UAAU,EAAE,qBAAqB,GAChC,qBAAqB,CAoBvB;AAED,iFAAiF;AACjF,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,iBAAiB,EAC/B,IAAI,EAAE,WAAW,GAAG,WAAW,GAC9B,qBAAqB,EAAE,CAKzB;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG,WAAW,GAAG,qBAAqB,CA0B7F"}

package/lib/plugin-runtime/capability-tools.js

@@ -0,0 +1,55 @@
+import { toolInputSchemaToParameters } from '@zhin.js/core/tool-zod';
+import { stampToolGeneration } from '../tool/tool-system.js';
+export function capabilityToTool(tool, invocation) {
+    const parameters = toolInputSchemaToParameters(tool.inputSchema);
+    return {
+        name: tool.name,
+        description: tool.description,
+        parameters: {
+            type: 'object',
+            properties: (parameters.properties ?? {}),
+            required: parameters.required,
+        },
+        source: String(tool.owner),
+        platforms: tool.platforms ? [...tool.platforms] : undefined,
+        scopes: tool.scopes ? [...tool.scopes] : undefined,
+        permissions: tool.permissions ? [...tool.permissions] : undefined,
+        hidden: tool.hidden,
+        approval: tool.approval,
+        async execute(args) {
+            return await tool.execute(args, invocation);
+        },
+    };
+}
+/** Owner-visible capabilities → generation-stamped tools for the turn runner. */
+export function toolsFromCapabilities(capabilities, turn) {
+    return stampToolGeneration(capabilities.tools.map((tool) => capabilityToTool(tool, toolInvocationFromTurn(turn))), capabilities.generation);
+}
+export function toolInvocationFromTurn(turn) {
+    return Object.freeze({
+        signal: turn.signal,
+        traceId: turn.identity.traceId,
+        turnId: turn.identity.turnId,
+        sessionKey: turn.session.key,
+        origin: turn.origin,
+        principal: Object.freeze({
+            subjectId: turn.principal.subjectId,
+            displayName: turn.principal.displayName,
+            roles: Object.freeze([...turn.principal.roles]),
+        }),
+        policy: Object.freeze({
+            permissions: Object.freeze([...turn.policy.permissions]),
+            unattended: turn.policy.unattended,
+            network: Object.freeze({
+                enabled: turn.policy.network?.enabled === true,
+                httpsOnly: turn.policy.network?.httpsOnly,
+                allowedDomains: Object.freeze([...(turn.policy.network?.allowedDomains ?? [])]),
+            }),
+            ...(turn.policy.filesystem
+                ? { filesystem: Object.freeze({ workspaceRoot: turn.policy.filesystem.workspaceRoot }) }
+                : {}),
+        }),
+        ...(turn.ports.question ? { question: turn.ports.question } : {}),
+    });
+}
+//# sourceMappingURL=capability-tools.js.map

package/lib/plugin-runtime/capability-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-tools.js","sourceRoot":"","sources":["../../src/plugin-runtime/capability-tools.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQ7D,MAAM,UAAU,gBAAgB,CAC9B,IAAoB,EACpB,UAAiC;IAEjC,MAAM,UAAU,GAAG,2BAA2B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAqC;YAC7E,QAAQ,EAAE,UAAU,CAAC,QAAQ;SAC9B;QACD,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3D,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAClD,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS;QACjE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAyC,CAAC;QACtF,CAAC;KACF,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,qBAAqB,CACnC,YAA+B,EAC/B,IAA+B;IAE/B,OAAO,mBAAmB,CACxB,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,EACtF,YAAY,CAAC,UAAU,CACxB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAA+B;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO;QAC9B,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;QAC5B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;QAC5B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS;YACnC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW;YACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SAChD,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxD,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU;YAClC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;gBACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI;gBAC9C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS;gBACzC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;aAChF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU;gBACxB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,EAAE;gBACxF,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;AACL,CAAC"}

package/lib/plugin-runtime/deferred-capability-plan.d.ts

@@ -0,0 +1,30 @@
+import { type AgentTool, type DeferredToolSessionSnapshot } from '@zhin.js/ai';
+import { resolveDeferredToolsConfig } from '../tool-catalog/resolve-config.js';
+import { type ToolCatalogItem } from '../tool-catalog/types.js';
+import type { AgentCapabilities, ToolCapability } from './capability-ingress.js';
+export interface DeferredCapabilityController {
+    loadedToolNames(): string[];
+    loadedSkillInstructions(): string[];
+}
+export interface DeferredCapabilityPlan {
+    readonly capabilities: readonly ToolCapability[];
+    readonly allTools: readonly AgentTool[];
+    readonly resolvedTools: readonly AgentTool[];
+    readonly catalog: readonly ToolCatalogItem[];
+    readonly deferredStats: string;
+    readonly controller: DeferredCapabilityController;
+}
+export interface DeferredCapabilityPlanOptions {
+    readonly capabilities: AgentCapabilities;
+    readonly sessionSnapshot: DeferredToolSessionSnapshot;
+    readonly config: Parameters<typeof resolveDeferredToolsConfig>[0];
+    readonly platform?: string;
+    readonly persistSnapshot: (snapshot: DeferredToolSessionSnapshot) => Promise<void>;
+}
+/**
+ * Turn-owned deferred capability authority. It has no filesystem, registry,
+ * AsyncLocalStorage, or classic Tool dependency: everything comes from the
+ * immutable generation projection and the session snapshot.
+ */
+export declare function createDeferredCapabilityPlan(options: DeferredCapabilityPlanOptions): DeferredCapabilityPlan;
+//# sourceMappingURL=deferred-capability-plan.d.ts.map

package/lib/plugin-runtime/deferred-capability-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deferred-capability-plan.d.ts","sourceRoot":"","sources":["../../src/plugin-runtime/deferred-capability-plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,SAAS,EACd,KAAK,2BAA2B,EACjC,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAA4B,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC1F,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,WAAW,4BAA4B;IAC3C,eAAe,IAAI,MAAM,EAAE,CAAC;IAC5B,uBAAuB,IAAI,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,SAAS,cAAc,EAAE,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,SAAS,SAAS,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;CACnD;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,2BAA2B,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,OAAO,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,CAAC,QAAQ,EAAE,2BAA2B,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,6BAA6B,GACrC,sBAAsB,CA8CxB"}