adonis-ai-kit 0.0.0-stage → 1.2.0

package/dist/src/acp/provider.js

@@ -0,0 +1,276 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import path from 'node:path';
+import { AiException, ProviderConfigError } from '../errors.js';
+import { buildAcpRuntimeConfig, buildProjectMcpServer, getAcpAgentConfig, normalizeMcpServer, } from './acp_agents.js';
+/** Variables a CLI needs to run at all. Everything else is withheld unless `inheritEnv` is set. */
+const SAFE_ENV_KEYS = new Set([
+    'PATH',
+    'PATHEXT',
+    'HOME',
+    'USER',
+    'USERNAME',
+    'LOGNAME',
+    'SHELL',
+    'LANG',
+    'LANGUAGE',
+    'TERM',
+    'COLORTERM',
+    'TZ',
+    'TMPDIR',
+    'TMP',
+    'TEMP',
+    'SYSTEMROOT',
+    'WINDIR',
+    'COMSPEC',
+    'USERPROFILE',
+    'APPDATA',
+    'LOCALAPPDATA',
+    'PROGRAMFILES',
+    'PROGRAMFILES(X86)',
+    'PROGRAMDATA',
+    'HOMEDRIVE',
+    'HOMEPATH',
+    'NUMBER_OF_PROCESSORS',
+    'PROCESSOR_ARCHITECTURE',
+    'OS',
+].map((k) => k.toUpperCase()));
+const SAFE_ENV_PREFIXES = ['LC_', 'XDG_'];
+/**
+ * Builds the environment for the agent process.
+ *
+ * `@mcpc-tech/acp-ai-provider` spawns the agent with `{ ...process.env, ...env }`, so the server's
+ * secrets cannot be left out by omission. Instead every variable that is not allowlisted is
+ * explicitly blanked, and only the allowlist plus `extra` (agent credentials, configured env)
+ * keep real values.
+ */
+export function buildAgentEnv(source, extra, inheritEnv = false) {
+    if (inheritEnv)
+        return { ...extra };
+    const env = {};
+    // The provider merges over `process.env`, so keys that only exist there must be blanked too.
+    const keys = new Set([...Object.keys(source), ...Object.keys(process.env)]);
+    for (const key of keys) {
+        const upper = key.toUpperCase();
+        const safe = SAFE_ENV_KEYS.has(upper) || SAFE_ENV_PREFIXES.some((p) => upper.startsWith(p));
+        env[key] = safe ? (source[key] ?? '') : '';
+    }
+    return { ...env, ...extra };
+}
+export class AcpDriver {
+    name;
+    defaultModel;
+    config;
+    logger;
+    confirmation;
+    env;
+    runtime;
+    cachedModels = new Map();
+    providers = new Set();
+    permissionPolicy;
+    constructor(name, config, deps = {}) {
+        this.name = name;
+        this.config = config;
+        this.logger = deps.logger;
+        this.confirmation = deps.confirmation;
+        this.env = deps.env ?? process.env;
+        this.runtime = deps.runtime;
+        this.defaultModel = config.agentId ?? config.defaultModel ?? 'claude-code';
+        this.permissionPolicy = config.permissionPolicy ?? 'ask';
+        if (this.permissionPolicy === 'allow') {
+            this.logger?.warn?.(`[AcpDriver] Provider "${name}" auto-approves every agent action (permissionPolicy: 'allow').`);
+        }
+    }
+    /**
+     * Lazily loads and instantiates an AI SDK language model backed by the ACP agent.
+     * `modelName` selects among the built-in agents; it is never executed as a command.
+     */
+    async getModel(modelName) {
+        const agentId = modelName ?? this.defaultModel;
+        const runtimeConfig = this.resolveRuntimeConfig(agentId);
+        const cacheKey = `${runtimeConfig.command}::${runtimeConfig.cwd}`;
+        let model = this.cachedModels.get(cacheKey);
+        if (!model) {
+            model = this.createModel(runtimeConfig);
+            this.cachedModels.set(cacheKey, model);
+            // Do not cache failures
+            model.catch(() => this.cachedModels.delete(cacheKey));
+        }
+        return model;
+    }
+    /**
+     * Tests whether the ACP agent can be resolved and its model instantiated.
+     */
+    async ping() {
+        const startTime = Date.now();
+        try {
+            const runtimeConfig = this.resolveRuntimeConfig(this.defaultModel);
+            this.logger?.debug?.(`[AcpDriver] Pinging ACP agent command: ${runtimeConfig.command}`);
+            await this.getModel(this.defaultModel);
+            return { ok: true, latencyMs: Date.now() - startTime };
+        }
+        catch (err) {
+            return {
+                ok: false,
+                latencyMs: Date.now() - startTime,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    /**
+     * Terminates every agent process started by this driver.
+     */
+    async shutdown() {
+        const providers = [...this.providers];
+        this.providers.clear();
+        this.cachedModels.clear();
+        for (const provider of providers) {
+            try {
+                provider.cleanup();
+            }
+            catch (err) {
+                this.logger?.warn?.(`[AcpDriver] Failed to clean up ACP provider: ${String(err)}`);
+            }
+        }
+    }
+    resolveRuntimeConfig(agentId) {
+        if (this.runtime) {
+            if (!path.isAbsolute(this.runtime.cwd)) {
+                throw new ProviderConfigError(this.name, `ACP "cwd" must be an absolute path, got "${this.runtime.cwd}"`);
+            }
+            return {
+                ...this.runtime,
+                env: buildAgentEnv(this.env, this.runtime.env, this.config.inheritEnv),
+            };
+        }
+        const predefined = getAcpAgentConfig(agentId);
+        const explicitCommand = this.config.command;
+        // A command is only ever taken from config or from the built-in agent table.
+        if (!explicitCommand && !predefined) {
+            throw new ProviderConfigError(this.name, `Unknown ACP agent "${agentId}". Use one of the built-in agents or set "command" explicitly in the provider config.`);
+        }
+        const builtFromEnv = predefined
+            ? buildAcpRuntimeConfig(agentId, (key) => this.env[key], this.env, this.logger)
+            : null;
+        const command = explicitCommand ?? builtFromEnv?.command ?? predefined.command;
+        const args = this.config.args ?? (explicitCommand ? [] : (builtFromEnv?.args ?? predefined.args));
+        const cwd = this.config.cwd ?? builtFromEnv?.cwd ?? process.cwd();
+        if (!path.isAbsolute(cwd)) {
+            throw new ProviderConfigError(this.name, `ACP "cwd" must be an absolute path, got "${cwd}"`);
+        }
+        const env = buildAgentEnv(this.env, { ...(builtFromEnv?.env ?? {}), ...(this.config.env ?? {}) }, this.config.inheritEnv);
+        const mcpServers = [...(builtFromEnv?.mcpServers ?? [])];
+        for (const server of this.config.mcpServers ?? []) {
+            const normalized = normalizeMcpServer(server);
+            if (normalized)
+                mcpServers.push(normalized);
+            else
+                this.logger?.warn?.(`[AcpDriver] Ignoring invalid MCP server in provider "${this.name}"`);
+        }
+        if (this.config.enableProjectMcp) {
+            if (this.config.projectMcp) {
+                const project = buildProjectMcpServer(this.config.projectMcp, this.logger);
+                if (project)
+                    mcpServers.push(project);
+            }
+            else {
+                this.logger?.warn?.(`[AcpDriver] enableProjectMcp is set on "${this.name}" but "projectMcp.path" is missing; skipping.`);
+            }
+        }
+        return {
+            command,
+            args,
+            cwd,
+            env,
+            mcpServers,
+            authMethodId: this.config.authMethodId ?? builtFromEnv?.authMethodId ?? predefined?.authMethodId,
+        };
+    }
+    async createModel(runtimeConfig) {
+        this.logger?.info?.(`[ACP] Starting ACP agent session: ${runtimeConfig.command} in ${runtimeConfig.cwd}`);
+        let acpModule;
+        try {
+            acpModule = await import(__rewriteRelativeImportExtension('@mcpc-tech/acp-ai-provider'));
+        }
+        catch (err) {
+            throw new AiException(`Package "@mcpc-tech/acp-ai-provider" is required to use ACP drivers: ${err instanceof Error ? err.message : String(err)}`, 'E_AI_MISSING_DEPENDENCY', err);
+        }
+        const provider = acpModule.createACPProvider({
+            command: runtimeConfig.command,
+            args: runtimeConfig.args,
+            env: runtimeConfig.env,
+            authMethodId: runtimeConfig.authMethodId,
+            session: {
+                cwd: runtimeConfig.cwd,
+                mcpServers: runtimeConfig.mcpServers,
+            },
+        });
+        this.providers.add(provider);
+        const model = provider.languageModel();
+        this.installPermissionHandler(model, runtimeConfig.command);
+        return model;
+    }
+    /**
+     * The ACP provider auto-selects the first permission option when no handler is set, and offers
+     * no public API to set one. The handler is installed on the model's client right after every
+     * connection is established. If it cannot be installed the model refuses to connect (fail-closed).
+     */
+    installPermissionHandler(model, agentLabel) {
+        const connect = model.connectClient.bind(model);
+        const handler = (params) => this.answerPermission(params, agentLabel);
+        model.connectClient = async () => {
+            await connect();
+            const client = model.client;
+            if (!client || typeof client.setPermissionRequestHandler !== 'function') {
+                throw new AiException('Unable to install the ACP permission handler (unsupported @mcpc-tech/acp-ai-provider version); refusing to run the agent without permission control.', 'E_AI_ACP_UNSAFE');
+            }
+            client.setPermissionRequestHandler(handler);
+        };
+    }
+    async answerPermission(params, agentLabel) {
+        const options = params.options ?? [];
+        const select = (kinds) => {
+            const option = options.find((o) => kinds.includes(o.kind));
+            return option ? { outcome: { outcome: 'selected', optionId: option.optionId } } : null;
+        };
+        const reject = () => select(['reject_once', 'reject_always']) ?? { outcome: { outcome: 'cancelled' } };
+        // Never answer with `allow_always`: a single approval must not become a standing grant.
+        const allow = () => select(['allow_once']) ?? reject();
+        const title = params.toolCall?.title ?? params.toolCall?.kind ?? 'agent action';
+        if (this.permissionPolicy === 'deny') {
+            this.logger?.warn?.(`[ACP] Denied "${title}" requested by ${agentLabel} (policy: deny)`);
+            return reject();
+        }
+        if (this.permissionPolicy === 'allow') {
+            return allow();
+        }
+        if (!this.confirmation) {
+            this.logger?.warn?.(`[ACP] Denied "${title}" requested by ${agentLabel}: no ConfirmationService to ask a human`);
+            return reject();
+        }
+        const response = await this.confirmation.waitForResponse({
+            sessionId: params.sessionId,
+            toolName: `acp:${agentLabel}`,
+            action: String(title),
+            params: {
+                kind: params.toolCall?.kind ?? null,
+                rawInput: params.toolCall?.rawInput ?? null,
+                locations: params.toolCall?.locations ?? null,
+            },
+        }, this.config.permissionTimeoutMs);
+        return response.status === 'approved' ? allow() : reject();
+    }
+}
+/**
+ * Factory for creating an AcpDriver instance.
+ */
+export function createAcpDriver(name, config, deps = {}) {
+    return new AcpDriver(name, config, deps);
+}
+//# sourceMappingURL=provider.js.map

package/dist/src/acp/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../src/acp/provider.ts"],"names":[],"mappings":";;;;;;;;AAAA,OAAO,IAAI,MAAM,WAAW,CAAA;AAI5B,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAQ/D,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAA;AAExB,mGAAmG;AACnG,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B;IACE,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,UAAU;IACV,MAAM;IACN,WAAW;IACX,IAAI;IACJ,QAAQ;IACR,KAAK;IACL,MAAM;IACN,YAAY;IACZ,QAAQ;IACR,SAAS;IACT,aAAa;IACb,SAAS;IACT,cAAc;IACd,cAAc;IACd,mBAAmB;IACnB,aAAa;IACb,WAAW;IACX,UAAU;IACV,sBAAsB;IACtB,wBAAwB;IACxB,IAAI;CACL,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9B,CAAA;AACD,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAA;AAuBzC;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,MAA0C,EAC1C,KAA6B,EAC7B,UAAU,GAAG,KAAK;IAElB,IAAI,UAAU;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,CAAA;IAEnC,MAAM,GAAG,GAA2B,EAAE,CAAA;IACtC,6FAA6F;IAC7F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;QAC3F,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5C,CAAC;IACD,OAAO,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAA;AAC7B,CAAC;AAmBD,MAAM,OAAO,SAAS;IACX,IAAI,CAAQ;IACZ,YAAY,CAAQ;IACrB,MAAM,CAAmB;IACzB,MAAM,CAAS;IACf,YAAY,CAAsB;IAClC,GAAG,CAAoC;IACvC,OAAO,CAAwB;IAC/B,YAAY,GAAwC,IAAI,GAAG,EAAE,CAAA;IAC7D,SAAS,GAAyB,IAAI,GAAG,EAAE,CAAA;IAC3C,gBAAgB,CAAqB;IAE7C,YAAY,IAAY,EAAE,MAAyB,EAAE,OAAsB,EAAE;QAC3E,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAA;QACrC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;QAClC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,YAAY,IAAI,aAAa,CAAA;QAC1E,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,KAAK,CAAA;QAExD,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,yBAAyB,IAAI,iEAAiE,CAC/F,CAAA;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAkB;QAC/B,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,YAAY,CAAA;QAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAG,GAAG,aAAa,CAAC,OAAO,KAAK,aAAa,CAAC,GAAG,EAAE,CAAA;QAEjE,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAA;YACvC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YACtC,wBAAwB;YACxB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC5B,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YAClE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,0CAA0C,aAAa,CAAC,OAAO,EAAE,CAAC,CAAA;YACvF,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACtC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAA;QACxD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACjC,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAA;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;QACrC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;QACtB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,CAAC,OAAO,EAAE,CAAA;YACpB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,gDAAgD,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACpF,CAAC;QACH,CAAC;IACH,CAAC;IAEO,oBAAoB,CAAC,OAAe;QAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,mBAAmB,CAC3B,IAAI,CAAC,IAAI,EACT,4CAA4C,IAAI,CAAC,OAAO,CAAC,GAAG,GAAG,CAChE,CAAA;YACH,CAAC;YACD,OAAO;gBACL,GAAG,IAAI,CAAC,OAAO;gBACf,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;aACvE,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC7C,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;QAE3C,6EAA6E;QAC7E,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,mBAAmB,CAC3B,IAAI,CAAC,IAAI,EACT,sBAAsB,OAAO,uFAAuF,CACrH,CAAA;QACH,CAAC;QAED,MAAM,YAAY,GAAG,UAAU;YAC7B,CAAC,CAAC,qBAAqB,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC;YAC/E,CAAC,CAAC,IAAI,CAAA;QAER,MAAM,OAAO,GAAG,eAAe,IAAI,YAAY,EAAE,OAAO,IAAI,UAAW,CAAC,OAAO,CAAA;QAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,IAAI,UAAW,CAAC,IAAI,CAAC,CAAC,CAAA;QAElG,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAA;QACjE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,4CAA4C,GAAG,GAAG,CAAC,CAAA;QAC9F,CAAC;QAED,MAAM,GAAG,GAAG,aAAa,CACvB,IAAI,CAAC,GAAG,EACR,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAC5D,IAAI,CAAC,MAAM,CAAC,UAAU,CACvB,CAAA;QAED,MAAM,UAAU,GAAyB,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,CAAA;QAC9E,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAClD,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAA;YAC7C,IAAI,UAAU;gBAAE,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;;gBACtC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,wDAAwD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAA;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;gBAC1E,IAAI,OAAO;oBAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACvC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,2CAA2C,IAAI,CAAC,IAAI,+CAA+C,CACpG,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,IAAI;YACJ,GAAG;YACH,GAAG;YACH,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,YAAY,EAAE,YAAY,IAAI,UAAU,EAAE,YAAY;SACjG,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,aAAoC;QAC5D,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,qCAAqC,aAAa,CAAC,OAAO,OAAO,aAAa,CAAC,GAAG,EAAE,CACrF,CAAA;QAED,IAAI,SAAwE,CAAA;QAC5E,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,MAAM,kCAAC,4BAAsC,EAAC,CAAA;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CACnB,wEAAwE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC1H,yBAAyB,EACzB,GAAG,CACJ,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,iBAAiB,CAAC;YAC3C,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,YAAY,EAAE,aAAa,CAAC,YAAY;YACxC,OAAO,EAAE;gBACP,GAAG,EAAE,aAAa,CAAC,GAAG;gBACtB,UAAU,EAAE,aAAa,CAAC,UAAU;aACrC;SACF,CAAC,CAAA;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;QAE5B,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAA;QACtC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAA;QAC3D,OAAO,KAAiC,CAAA;IAC1C,CAAC;IAED;;;;OAIG;IACK,wBAAwB,CAAC,KAA2B,EAAE,UAAkB;QAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,OAAO,GAAG,CAAC,MAAgC,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;QAE/F,KAAK,CAAC,aAAa,GAAG,KAAK,IAAI,EAAE;YAC/B,MAAM,OAAO,EAAE,CAAA;YACf,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;YAC3B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,2BAA2B,KAAK,UAAU,EAAE,CAAC;gBACxE,MAAM,IAAI,WAAW,CACnB,sJAAsJ,EACtJ,iBAAiB,CAClB,CAAA;YACH,CAAC;YACD,MAAM,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAA;QAC7C,CAAC,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,MAAgC,EAChC,UAAkB;QAElB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAA;QACpC,MAAM,MAAM,GAAG,CAAC,KAAe,EAAoC,EAAE;YACnE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;YAC1D,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;QACxF,CAAC,CAAA;QACD,MAAM,MAAM,GAAG,GAA8B,EAAE,CAC7C,MAAM,CAAC,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAA;QACnF,wFAAwF;QACxF,MAAM,KAAK,GAAG,GAA8B,EAAE,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,MAAM,EAAE,CAAA;QAEjF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,cAAc,CAAA;QAE/E,IAAI,IAAI,CAAC,gBAAgB,KAAK,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,iBAAiB,KAAK,kBAAkB,UAAU,iBAAiB,CAAC,CAAA;YACxF,OAAO,MAAM,EAAE,CAAA;QACjB,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,KAAK,OAAO,EAAE,CAAC;YACtC,OAAO,KAAK,EAAE,CAAA;QAChB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,iBAAiB,KAAK,kBAAkB,UAAU,yCAAyC,CAC5F,CAAA;YACD,OAAO,MAAM,EAAE,CAAA;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CACtD;YACE,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,OAAO,UAAU,EAAE;YAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YACrB,MAAM,EAAE;gBACN,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI;gBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI;gBAC3C,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,IAAI,IAAI;aAC9C;SACF,EACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAChC,CAAA;QACD,OAAO,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;IAC5D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,MAAyB,EACzB,OAAsB,EAAE;IAExB,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;AAC1C,CAAC"}

package/dist/src/acp/types.d.ts

@@ -0,0 +1,128 @@
+import type { BaseProviderConfig } from '../types.js';
+import type { Logger } from '../logger.js';
+/** `{ name, value }` pair as required by the ACP schema for `env` and `headers`. */
+export interface AcpNameValue {
+    name: string;
+    value: string;
+}
+/** Stdio MCP server, exactly as in the ACP schema (`McpServerStdio`: no `type`, `env` is an array). */
+export interface AcpStdioMcpServer {
+    type?: 'stdio';
+    name: string;
+    command: string;
+    args?: string[];
+    env?: AcpNameValue[];
+}
+/** Remote MCP server (`McpServerHttp` / `McpServerSse`), `headers` is an array of `{name,value}`. */
+export interface AcpRemoteMcpServer {
+    type: 'http' | 'sse';
+    name: string;
+    url: string;
+    headers?: AcpNameValue[];
+}
+export type AcpMcpServerConfig = AcpStdioMcpServer | AcpRemoteMcpServer;
+/**
+ * What to do when the ACP agent asks for permission (shell commands, file writes, ...).
+ * - `ask`   (default) require a human decision via the ConfirmationService; denied if none
+ * - `deny`  refuse everything
+ * - `allow` auto-approve (once). Only for fully trusted, sandboxed setups.
+ */
+export type AcpPermissionPolicy = 'ask' | 'deny' | 'allow';
+export interface AcpAgentConfig {
+    id: string;
+    name: string;
+    description: string;
+    command: string;
+    args: string[];
+    envVarPrefix: string;
+    supportsMcpServers: boolean;
+    authMethodId?: string;
+    /**
+     * Environment variables the agent needs: for each `target`, the first of `sources`
+     * that is set is passed to the agent process as `target`.
+     *
+     * When omitted (`undefined`), the `credentialEnv` of the built-in default agent with the
+     * same id is used, if any. An explicit value, including `[]`, is used as-is, so `[]` opts out.
+     */
+    credentialEnv?: Array<{
+        target: string;
+        sources: string[];
+    }>;
+}
+export interface AcpAgentRuntimeConfig {
+    command: string;
+    args: string[];
+    cwd: string;
+    env: Record<string, string>;
+    mcpServers: AcpMcpServerConfig[];
+    authMethodId?: string;
+}
+export interface AcpRuntimeOptions {
+    /** Environment lookup. Default: `process.env` */
+    getEnv?: (key: string) => string | undefined;
+    /** Source scanned for `ACP_<AGENT>_ENV_*` entries. Default: `process.env` */
+    envSource?: Record<string, string | undefined>;
+    logger?: Logger;
+    /** Project MCP server file, used when `<prefix>_PROJECT_MCP_PATH` is not set. */
+    projectMcpPath?: string;
+}
+export interface AcpProjectMcpConfig {
+    /** Absolute or cwd-relative path to the MCP server entry file. */
+    path: string;
+    /** Executable used to run it. Default: `node` */
+    command?: string;
+    /** Server name reported to the agent. Default: `project-tools` */
+    name?: string;
+}
+export interface AcpProviderConfig extends BaseProviderConfig {
+    driver: 'acp';
+    /**
+     * Predefined agent ID (e.g. 'claude-code', 'gemini', 'codex', 'opencode', 'qwen-code').
+     * Defaults to 'claude-code'. Must be a known agent unless `command` is set.
+     */
+    agentId?: string;
+    /**
+     * Explicit executable for a custom agent. Only values written in config are ever executed;
+     * a model name coming from a request is never treated as a command.
+     */
+    command?: string;
+    /**
+     * Override CLI command arguments
+     */
+    args?: string[];
+    /**
+     * Custom working directory for the agent process (must be an absolute path)
+     */
+    cwd?: string;
+    /**
+     * Extra environment variables passed to the agent CLI
+     */
+    env?: Record<string, string>;
+    /**
+     * Forward the complete server environment to the agent (secrets included).
+     * Default: false - only a safe allowlist plus the agent's own credentials is forwarded.
+     */
+    inheritEnv?: boolean;
+    /**
+     * MCP servers to attach to the ACP agent session
+     */
+    mcpServers?: AcpMcpServerConfig[];
+    /**
+     * Optional authentication method identifier
+     */
+    authMethodId?: string;
+    /**
+     * Attach the project's own MCP server (requires `projectMcp.path`).
+     */
+    enableProjectMcp?: boolean;
+    projectMcp?: AcpProjectMcpConfig;
+    /**
+     * How permission requests from the agent are answered. Default: 'ask'.
+     */
+    permissionPolicy?: AcpPermissionPolicy;
+    /**
+     * How long to wait for a human to answer a permission request, in ms. Default: 60000
+     */
+    permissionTimeoutMs?: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/src/acp/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/acp/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAA;AAE1C,oFAAoF;AACpF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED,uGAAuG;AACvG,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,GAAG,CAAC,EAAE,YAAY,EAAE,CAAA;CACrB;AAED,qGAAqG;AACrG,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,OAAO,CAAC,EAAE,YAAY,EAAE,CAAA;CACzB;AAED,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG,kBAAkB,CAAA;AAEvE;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;AAE1D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,kBAAkB,EAAE,OAAO,CAAA;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAC7D;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC3B,UAAU,EAAE,kBAAkB,EAAE,CAAA;IAChC,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,iDAAiD;IACjD,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC5C,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,IAAI,EAAE,MAAM,CAAA;IACZ,iDAAiD;IACjD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,MAAM,EAAE,KAAK,CAAA;IACb;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ;;OAEG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;OAEG;IACH,UAAU,CAAC,EAAE,kBAAkB,EAAE,CAAA;IACjC;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;OAEG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,UAAU,CAAC,EAAE,mBAAmB,CAAA;IAChC;;OAEG;IACH,gBAAgB,CAAC,EAAE,mBAAmB,CAAA;IACtC;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B"}

package/dist/src/acp/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/acp/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/acp/types.ts"],"names":[],"mappings":""}

package/dist/src/agents/agent_runner.d.ts

@@ -0,0 +1,60 @@
+import type { z } from 'zod';
+import type { ToolSet } from 'ai';
+import type { GenerateObjectOptions, GenerateObjectResult, GenerateTextOptions, GenerateTextResult, StreamTextOptions, StreamTextResult } from '../types.js';
+import type { AiManager } from '../ai_manager.js';
+import type { AgentPromptConfig } from './loader.js';
+import type { ToolPermission } from './manifest.js';
+export interface AgentRunnerOptions {
+    tools?: ToolSet;
+    system?: string;
+    model?: string;
+    provider?: string;
+    temperature?: number;
+    maxOutputTokens?: number;
+    /** @deprecated Use `maxOutputTokens`. */
+    maxTokens?: number;
+    sessionId?: string;
+    toolGuard?: GenerateTextOptions['toolGuard'];
+    /**
+     * Permission of tools the agent manifest does not mention. Default: 'allow' (the manifest then
+     * acts as a deny/ask list). Use 'deny' for strict allow-list mode.
+     */
+    defaultToolPermission?: ToolPermission;
+}
+export declare class AgentRunner {
+    private manager;
+    private config;
+    private defaultOptions;
+    constructor(manager: AiManager, config: AgentPromptConfig, options?: AgentRunnerOptions);
+    getId(): string;
+    getDescription(): string;
+    getSystemPrompt(): string;
+    getConfig(): AgentPromptConfig;
+    getPermissions(): Record<string, ToolPermission>;
+    private permissionFor;
+    /**
+     * Filters tools according to the agent manifest. `deny` tools are removed; the permissions map is
+     * returned so the manager enforces `ask` (human confirmation) and the tool guard at call time.
+     */
+    private prepareTools;
+    private mergedSystem;
+    /**
+     * Executes a text generation step with agent instructions, budget tracking, and tool permissions.
+     *
+     * Security: `tools`, `toolPermissions`, `system` and `toolGuard` are spread AFTER the caller's
+     * options so a caller can neither re-introduce a denied tool nor replace the agent's prompt.
+     */
+    run(promptOrOptions: string | GenerateTextOptions): Promise<GenerateTextResult>;
+    /**
+     * Streams responses with agent instructions, skills, and budget attribution.
+     */
+    runStream(promptOrOptions: string | StreamTextOptions): Promise<StreamTextResult>;
+    /** Alias of `runStream()`. */
+    stream(promptOrOptions: string | StreamTextOptions): Promise<StreamTextResult>;
+    /**
+     * Generates structured output conforming to a Zod schema or the agent's outputSchema.
+     */
+    runStructured<T>(schema?: z.ZodType<T>, promptOrOptions?: string | Partial<GenerateObjectOptions<T>>): Promise<GenerateObjectResult<T>>;
+    private maxOutputTokens;
+}
+//# sourceMappingURL=agent_runner.d.ts.map

package/dist/src/agents/agent_runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_runner.d.ts","sourceRoot":"","sources":["../../../src/agents/agent_runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,IAAI,CAAA;AACjC,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAA;IAC5C;;;OAGG;IACH,qBAAqB,CAAC,EAAE,cAAc,CAAA;CACvC;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,OAAO,CAAW;IAC1B,OAAO,CAAC,MAAM,CAAmB;IACjC,OAAO,CAAC,cAAc,CAAoB;gBAGxC,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,kBAAuB;IAOlC,KAAK,IAAI,MAAM;IAIf,cAAc,IAAI,MAAM;IAIxB,eAAe,IAAI,MAAM;IAIzB,SAAS,IAAI,iBAAiB;IAI9B,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC;IAIhD,OAAO,CAAC,aAAa;IAOrB;;;OAGG;IACH,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,YAAY;IAIpB;;;;;OAKG;IACG,GAAG,CAAC,eAAe,EAAE,MAAM,GAAG,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAqBrF;;OAEG;IACG,SAAS,CAAC,eAAe,EAAE,MAAM,GAAG,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqBvF,8BAA8B;IAC9B,MAAM,CAAC,eAAe,EAAE,MAAM,GAAG,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI9E;;OAEG;IACG,aAAa,CAAC,CAAC,EACnB,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EACrB,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,GAC3D,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAsBnC,OAAO,CAAC,eAAe;CAWxB"}

package/dist/src/agents/agent_runner.js

@@ -0,0 +1,134 @@
+export class AgentRunner {
+    manager;
+    config;
+    defaultOptions;
+    constructor(manager, config, options = {}) {
+        this.manager = manager;
+        this.config = config;
+        this.defaultOptions = options;
+    }
+    getId() {
+        return this.config.id;
+    }
+    getDescription() {
+        return this.config.description;
+    }
+    getSystemPrompt() {
+        return this.config.systemPrompt;
+    }
+    getConfig() {
+        return this.config;
+    }
+    getPermissions() {
+        return this.config.permissions;
+    }
+    permissionFor(toolName) {
+        const own = Object.hasOwn(this.config.permissions, toolName)
+            ? this.config.permissions[toolName]
+            : undefined;
+        return own ?? this.defaultOptions.defaultToolPermission ?? 'allow';
+    }
+    /**
+     * Filters tools according to the agent manifest. `deny` tools are removed; the permissions map is
+     * returned so the manager enforces `ask` (human confirmation) and the tool guard at call time.
+     */
+    prepareTools(runtimeTools) {
+        const rawTools = runtimeTools ?? this.defaultOptions.tools;
+        const toolPermissions = {};
+        if (!rawTools || Object.keys(rawTools).length === 0) {
+            return { tools: undefined, toolPermissions };
+        }
+        const filtered = {};
+        for (const [name, tool] of Object.entries(rawTools)) {
+            const permission = this.permissionFor(name);
+            if (permission === 'deny') {
+                continue;
+            }
+            filtered[name] = tool;
+            toolPermissions[name] = permission;
+        }
+        return {
+            tools: Object.keys(filtered).length > 0 ? filtered : undefined,
+            toolPermissions,
+        };
+    }
+    mergedSystem(extra) {
+        return [this.config.systemPrompt, this.defaultOptions.system, extra].filter(Boolean).join('\n\n');
+    }
+    /**
+     * Executes a text generation step with agent instructions, budget tracking, and tool permissions.
+     *
+     * Security: `tools`, `toolPermissions`, `system` and `toolGuard` are spread AFTER the caller's
+     * options so a caller can neither re-introduce a denied tool nor replace the agent's prompt.
+     */
+    async run(promptOrOptions) {
+        const baseOpts = typeof promptOrOptions === 'string' ? { prompt: promptOrOptions } : { ...promptOrOptions };
+        const { tools, toolPermissions } = this.prepareTools(baseOpts.tools);
+        return this.manager.generateText({
+            ...baseOpts,
+            agentName: this.config.id,
+            system: this.mergedSystem(baseOpts.system),
+            model: baseOpts.model ?? this.defaultOptions.model ?? this.config.model,
+            provider: baseOpts.provider ?? this.defaultOptions.provider ?? this.config.provider,
+            temperature: baseOpts.temperature ?? this.defaultOptions.temperature ?? this.config.temperature,
+            maxOutputTokens: this.maxOutputTokens(baseOpts),
+            maxSteps: baseOpts.maxSteps ?? this.config.stopSteps,
+            tools,
+            toolPermissions,
+            toolGuard: baseOpts.toolGuard ?? this.defaultOptions.toolGuard,
+        });
+    }
+    /**
+     * Streams responses with agent instructions, skills, and budget attribution.
+     */
+    async runStream(promptOrOptions) {
+        const baseOpts = typeof promptOrOptions === 'string' ? { prompt: promptOrOptions } : { ...promptOrOptions };
+        const { tools, toolPermissions } = this.prepareTools(baseOpts.tools);
+        return this.manager.streamText({
+            ...baseOpts,
+            agentName: this.config.id,
+            system: this.mergedSystem(baseOpts.system),
+            model: baseOpts.model ?? this.defaultOptions.model ?? this.config.model,
+            provider: baseOpts.provider ?? this.defaultOptions.provider ?? this.config.provider,
+            temperature: baseOpts.temperature ?? this.defaultOptions.temperature ?? this.config.temperature,
+            maxOutputTokens: this.maxOutputTokens(baseOpts),
+            maxSteps: baseOpts.maxSteps ?? this.config.stopSteps,
+            tools,
+            toolPermissions,
+            toolGuard: baseOpts.toolGuard ?? this.defaultOptions.toolGuard,
+        });
+    }
+    /** Alias of `runStream()`. */
+    stream(promptOrOptions) {
+        return this.runStream(promptOrOptions);
+    }
+    /**
+     * Generates structured output conforming to a Zod schema or the agent's outputSchema.
+     */
+    async runStructured(schema, promptOrOptions) {
+        const targetSchema = schema ?? this.config.outputSchema;
+        if (!targetSchema) {
+            throw new Error(`No schema provided for structured output in agent "${this.config.id}"`);
+        }
+        const baseOpts = typeof promptOrOptions === 'string' ? { prompt: promptOrOptions } : (promptOrOptions ?? {});
+        return this.manager.generateObject({
+            ...baseOpts,
+            schema: targetSchema,
+            schemaName: baseOpts.schemaName ?? this.config.outputSchemaName ?? this.config.id,
+            agentName: this.config.id,
+            system: this.mergedSystem(baseOpts.system),
+            model: baseOpts.model ?? this.defaultOptions.model ?? this.config.model,
+            provider: baseOpts.provider ?? this.defaultOptions.provider ?? this.config.provider,
+            temperature: baseOpts.temperature ?? this.defaultOptions.temperature ?? this.config.temperature,
+            maxOutputTokens: this.maxOutputTokens(baseOpts),
+        });
+    }
+    maxOutputTokens(opts) {
+        return (opts.maxOutputTokens ??
+            opts.maxTokens ??
+            this.defaultOptions.maxOutputTokens ??
+            this.defaultOptions.maxTokens ??
+            this.config.maxTokens);
+    }
+}
+//# sourceMappingURL=agent_runner.js.map

package/dist/src/agents/agent_runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_runner.js","sourceRoot":"","sources":["../../../src/agents/agent_runner.ts"],"names":[],"mappings":"AAgCA,MAAM,OAAO,WAAW;IACd,OAAO,CAAW;IAClB,MAAM,CAAmB;IACzB,cAAc,CAAoB;IAE1C,YACE,OAAkB,EAClB,MAAyB,EACzB,UAA8B,EAAE;QAEhC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;QACpB,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;IAC/B,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAA;IACvB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;IAChC,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAA;IACjC,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAA;IAChC,CAAC;IAEO,aAAa,CAAC,QAAgB;QACpC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC;YAC1D,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;YACnC,CAAC,CAAC,SAAS,CAAA;QACb,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,qBAAqB,IAAI,OAAO,CAAA;IACpE,CAAC;IAED;;;OAGG;IACK,YAAY,CAAC,YAAsB;QAIzC,MAAM,QAAQ,GAAG,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAA;QAC1D,MAAM,eAAe,GAAmC,EAAE,CAAA;QAC1D,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,CAAA;QAC9C,CAAC;QAED,MAAM,QAAQ,GAAY,EAAE,CAAA;QAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;YAC3C,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;gBAC1B,SAAQ;YACV,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;YACrB,eAAe,CAAC,IAAI,CAAC,GAAG,UAAU,CAAA;QACpC,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC9D,eAAe;SAChB,CAAA;IACH,CAAC;IAEO,YAAY,CAAC,KAAc;QACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACnG,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,GAAG,CAAC,eAA6C;QACrD,MAAM,QAAQ,GACZ,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,CAAA;QAE5F,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEpE,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAC/B,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK;YACvE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnF,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAC/F,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YACpD,KAAK;YACL,eAAe;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,eAA2C;QACzD,MAAM,QAAQ,GACZ,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,eAAe,EAAE,CAAA;QAE5F,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAEpE,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YAC7B,GAAG,QAAQ;YACX,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK;YACvE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnF,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAC/F,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;YAC/C,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS;YACpD,KAAK;YACL,eAAe;YACf,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS;SAC/D,CAAC,CAAA;IACJ,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,eAA2C;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IACxC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,MAAqB,EACrB,eAA4D;QAE5D,MAAM,YAAY,GAAG,MAAM,IAAK,IAAI,CAAC,MAAM,CAAC,YAAyC,CAAA;QACrF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sDAAsD,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAA;QAC1F,CAAC;QAED,MAAM,QAAQ,GACZ,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAA;QAE7F,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;YACjC,GAAG,QAAQ;YACX,MAAM,EAAE,YAAY;YACpB,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE;YACjF,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK;YACvE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ;YACnF,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW;YAC/F,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;SAChD,CAAC,CAAA;IACJ,CAAC;IAEO,eAAe,CACrB,IAAsD;QAEtD,OAAO,CACL,IAAI,CAAC,eAAe;YACpB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,cAAc,CAAC,eAAe;YACnC,IAAI,CAAC,cAAc,CAAC,SAAS;YAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CACtB,CAAA;IACH,CAAC;CACF"}

package/dist/src/agents/index.d.ts

@@ -0,0 +1,4 @@
+export * from './manifest.js';
+export * from './loader.js';
+export * from './agent_runner.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/agents/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAA;AAC7B,cAAc,aAAa,CAAA;AAC3B,cAAc,mBAAmB,CAAA"}

package/dist/src/agents/index.js

@@ -0,0 +1,4 @@
+export * from './manifest.js';
+export * from './loader.js';
+export * from './agent_runner.js';
+//# sourceMappingURL=index.js.map