agentfootprint 7.16.0 → 7.18.0

package/dist/types/core/agent/middleware/types.d.ts

@@ -0,0 +1,192 @@
+/**
+ * middleware/types — PUBLIC. The shape of a governance chain.
+ *
+ * Pattern: Chain of Responsibility (GoF), with the one dangerous answer
+ *          removed at the type level.
+ * Role:    core/ layer. Two chains, one vocabulary:
+ *
+ *            `toolMiddleware`     wraps every tool dispatch
+ *            `messageMiddleware`  wraps the message boundary — the input
+ *                                 before the model sees it, the output
+ *                                 before the caller receives it
+ *
+ * Emits:   N/A. A middleware is a pure decision. It never touches scope,
+ *          never emits and never writes — the stage does all of that, so
+ *          "record everything that happened" lives in ONE place rather
+ *          than being re-implemented per middleware.
+ *
+ * ## The law that shapes these types
+ *
+ * **A middleware cannot answer for the tool.** The outcome union has three
+ * arms — allow, deny, ask — and no `result` arm. There is no spelling of
+ * "here is what the tool would have returned". Whatever the chain decides,
+ * the answer the model finally reads is the real tool's output or a
+ * refusal. That is not a convention a reviewer has to enforce; it is the
+ * absence of a field.
+ *
+ * **A transform declares itself.** `allow(value, why)` requires a reason
+ * whenever it changes something, and the stage commits BOTH the original
+ * and the transformed value into the run's ledger. A prompt scrubbed by a
+ * middleware that hid its own scrubbing would poison every slice taken
+ * afterwards: the trace would show text nobody ever sent.
+ *
+ * **`ask` exists only where a pause exists.** `ToolOutcome` has it because
+ * tool dispatch runs inside a footprintjs pausable stage — the same door
+ * `checkIn` and `askHuman` already go through. `MessageOutcome` does not,
+ * because the message boundary is a plain stage, and inventing a second
+ * pause to give it one would be a worse answer than not offering it.
+ */
+import type { LLMMessage } from '../../../adapters/types.js';
+import type { MemoryIdentity } from '../../../memory/identity/types.js';
+/**
+ * Let the call through — optionally with a replacement for what the chain
+ * carries forward.
+ *
+ * `allow()` passes the value along untouched. `allow(value, why)` replaces
+ * it and says why; the `why` is not decoration, it is the row the ledger
+ * shows a person asking "who changed this, and what did it look like
+ * before?".
+ */
+export interface AllowOutcome<T> {
+    readonly kind: 'allow';
+    /** The replacement value. Absent = pass through unchanged. */
+    readonly value?: T;
+    /** Why the value changed. Present whenever `value` is. */
+    readonly why?: string;
+}
+/**
+ * Refuse the call. For a tool, `reason` reaches the model verbatim as the
+ * tool result and the run continues — a denial is data the agent can adapt
+ * to, not a crash. For a message, `reason` surfaces as a
+ * `MessageDeniedError` at the API boundary.
+ */
+export interface DenyOutcome {
+    readonly kind: 'deny';
+    readonly reason: string;
+}
+/** Suspend the run and put the question to a person. Tool dispatch only. */
+export interface AskOutcome {
+    readonly kind: 'ask';
+    readonly payload: AskPayload;
+}
+/** What a person is being asked. Carried verbatim to the checkpoint. */
+export interface AskPayload {
+    /** The question, in your own words. Shown to whoever answers. */
+    readonly question: string;
+    /** Anything else the answering UI should render. Never interpreted here. */
+    readonly detail?: unknown;
+}
+/**
+ * Everything a tool middleware may answer. Closed, and every arm has a
+ * home in this codebase: allow rides the normal dispatch, deny rides the
+ * synthetic tool result every other gate already uses, ask rides the
+ * pausable-stage checkpoint that `checkIn` rides.
+ */
+export type ToolOutcome = AllowOutcome<Readonly<Record<string, unknown>>> | DenyOutcome | AskOutcome;
+/** Everything a message middleware may answer. No `ask` — see the header. */
+export type MessageOutcome = AllowOutcome<string> | DenyOutcome;
+/** The call a tool middleware is deciding about. */
+export interface ToolMiddlewareContext {
+    readonly toolName: string;
+    /** Matches `stream.tool_start.toolCallId` for this dispatch. */
+    readonly toolCallId: string;
+    /** ReAct iteration this call belongs to. */
+    readonly iteration: number;
+    /**
+     * The args as THIS middleware sees them — every earlier transform in the
+     * chain already applied. The first middleware sees what the model asked
+     * for; the last sees what the tool is about to receive.
+     */
+    readonly args: Readonly<Record<string, unknown>>;
+    /** Conversation so far, including the assistant turn that made this call. */
+    readonly history: readonly LLMMessage[];
+    /** Multi-tenant run identity, when the run carried one. */
+    readonly identity?: MemoryIdentity;
+    /** Abort signal from `run({ env: { signal } })`. */
+    readonly signal?: AbortSignal;
+}
+/** The message a message middleware is deciding about. */
+export interface MessageMiddlewareContext {
+    /**
+     * `'input'` runs at the very top of the run, BEFORE the user's message is
+     * committed — so the window strategies, the injections, the slots, the
+     * request bytes and every later slice all see the transformed text and
+     * agree with each other. `'output'` runs where the final answer is
+     * captured, so the record and the caller receive the same string.
+     */
+    readonly phase: 'input' | 'output';
+    /** The content as THIS middleware sees it — earlier transforms applied. */
+    readonly content: string;
+    /** Conversation so far. Empty at `'input'`. */
+    readonly history: readonly LLMMessage[];
+    readonly identity?: MemoryIdentity;
+    readonly signal?: AbortSignal;
+}
+/**
+ * One link in the tool-dispatch chain.
+ *
+ * @example
+ * ```ts
+ * const noProdWrites: ToolMiddleware = {
+ *   name: 'no-prod-writes',
+ *   onToolCall: (call) =>
+ *     call.args.env === 'prod' ? deny('writes to prod need a change ticket') : allow(),
+ * };
+ * ```
+ */
+export interface ToolMiddleware {
+    /** Identifies this middleware in every ledger row and event it produces. */
+    readonly name: string;
+    onToolCall(call: ToolMiddlewareContext): ToolOutcome | Promise<ToolOutcome>;
+}
+/**
+ * One link in the message chain. Runs at both phases unless it decides
+ * otherwise by reading `msg.phase`.
+ *
+ * @example
+ * ```ts
+ * const scrubSSNs: MessageMiddleware = {
+ *   name: 'scrub-ssns',
+ *   onMessage: (msg) => {
+ *     const clean = msg.content.replace(/\b\d{3}-\d{2}-\d{4}\b/g, '[ssn]');
+ *     return clean === msg.content ? allow() : allow(clean, 'masked a US SSN');
+ *   },
+ * };
+ * ```
+ */
+export interface MessageMiddleware {
+    readonly name: string;
+    onMessage(msg: MessageMiddlewareContext): MessageOutcome | Promise<MessageOutcome>;
+}
+/**
+ * One row per middleware decision, committed to `scope.middlewareDecisions`.
+ *
+ * Every decision files a row, including the pass-throughs. A chain that
+ * only recorded its refusals would leave you unable to tell "the middleware
+ * looked and was fine with it" apart from "the middleware never ran" — and
+ * those are different facts about a run.
+ */
+export interface MiddlewareDecision {
+    /** The middleware's `name`. */
+    readonly middleware: string;
+    /** Which chain this row came from. */
+    readonly at: 'tool' | 'message';
+    /** Message chain only. */
+    readonly phase?: 'input' | 'output';
+    /** Tool chain only. */
+    readonly toolName?: string;
+    /** Tool chain only. */
+    readonly toolCallId?: string;
+    /** ReAct iteration. `0` for the `'input'` phase, which runs before iter 1. */
+    readonly iteration: number;
+    readonly outcome: 'allow' | 'deny' | 'ask';
+    /** True when this row changed the value the chain carries forward. */
+    readonly changed: boolean;
+    /** The transform's `why`, the denial's `reason`, or the ask's `question`. */
+    readonly why?: string;
+    /** The value before this middleware. Present only when `changed`. */
+    readonly before?: unknown;
+    /** The value after this middleware. Present only when `changed`. */
+    readonly after?: unknown;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types/core/agent/middleware/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/middleware/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAIxE;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY,CAAC,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,4EAA4E;AAC5E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,wEAAwE;AACxE,MAAM,WAAW,UAAU;IACzB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GACnB,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAC/C,WAAW,GACX,UAAU,CAAC;AAEf,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC;AAIhE,oDAAoD;AACpD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4CAA4C;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,2DAA2D;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,oDAAoD;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,0DAA0D;AAC1D,MAAM,WAAW,wBAAwB;IACvC;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+CAA+C;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAID;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,cAAc;IAC7B,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,IAAI,EAAE,qBAAqB,GAAG,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CAC7E;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,GAAG,EAAE,wBAAwB,GAAG,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;CACpF;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,0BAA0B;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACpC,uBAAuB;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uBAAuB;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IAC3C,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,qEAAqE;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B"}

package/dist/types/core/agent/stages/prepareFinal.d.ts

@@ -13,6 +13,16 @@
  *
  * Pure function — no closure over Agent class state. Imported and
  * passed directly to `flowChart(...)` in buildAgentChart.
+ *
+ * NOT the seam for `messageMiddleware`'s `'output'` half, deliberately.
+ * This stage runs inside the Final BRANCH subflow, whose state does not
+ * merge back into the run (a branch mount hands its outputMapper the
+ * branch's RESULT, not its scope). Rows filed here would land in an
+ * isolated commit log and never reach `snapshot.sharedState`, splitting
+ * one ledger across two places. The chain runs one stage earlier instead
+ * — in the Route decider, in the main chart — and rewrites
+ * `llmLatestContent`, which is the value this stage copies. See
+ * `stages/route.ts`.
  */
 import type { TypedScope } from 'footprintjs';
 import type { AgentState } from '../types.js';

package/dist/types/core/agent/stages/prepareFinal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prepareFinal.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/prepareFinal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,eAAO,MAAM,iBAAiB,UAAW,WAAW,UAAU,CAAC,KAAG,IAkCjE,CAAC"}
+{"version":3,"file":"prepareFinal.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/prepareFinal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,eAAO,MAAM,iBAAiB,UAAW,WAAW,UAAU,CAAC,KAAG,IAkCjE,CAAC"}

package/dist/types/core/agent/stages/route.d.ts

@@ -14,6 +14,35 @@
  */
 import type { TypedScope } from 'footprintjs';
 import type { AgentState } from '../types.js';
+import type { MessageMiddleware } from '../middleware/types.js';
 export type RouteBranch = 'tool-calls' | 'final';
 export declare const routeDeciderStage: (scope: TypedScope<AgentState>) => RouteBranch;
+/**
+ * Build the Route decider, optionally carrying the `'output'` half of the
+ * message chain.
+ *
+ * ## Why the chain runs HERE and not in PrepareFinal
+ *
+ * PrepareFinal is where `finalContent` is set, which makes it look like the
+ * output seam. It is not, for one structural reason: it lives inside the Final
+ * BRANCH subflow, and a branch mount hands its `outputMapper` the branch's
+ * RESULT, not its scope — so nothing that stage writes reaches the run's
+ * shared state. Ledger rows filed there would sit in an isolated commit log,
+ * and one ledger would be split across two places a reader has to know about.
+ *
+ * The decider is one stage earlier, in the main chart, and it is the first
+ * moment the run KNOWS this turn is the final answer. Its writes commit before
+ * the branch resolves (footprintjs commits a decider stage ahead of matching
+ * the branch), and the value it rewrites — `llmLatestContent` — is exactly
+ * what PrepareFinal copies into `finalContent`. So the caller, the committed
+ * record, the `newMessages` the memory writes persist, and the ledger row all
+ * carry the same string. One seam, one answer.
+ *
+ * The `'tool-calls'` path is untouched: a turn that is still calling tools has
+ * not produced an answer, and running an output rule over a half-finished turn
+ * would be running it over something that is not the output.
+ *
+ * Empty chain → the exact synchronous decider this file has always exported.
+ */
+export declare function buildRouteDeciderStage(messageMiddleware?: readonly MessageMiddleware[]): (scope: TypedScope<AgentState>) => RouteBranch | Promise<RouteBranch>;
 //# sourceMappingURL=route.d.ts.map

package/dist/types/core/agent/stages/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AAEjD,eAAO,MAAM,iBAAiB,UAAW,WAAW,UAAU,CAAC,KAAG,WAmBjE,CAAC"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO,CAAC;AAEjD,eAAO,MAAM,iBAAiB,UAAW,WAAW,UAAU,CAAC,KAAG,WAmBjE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,sBAAsB,CACpC,iBAAiB,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAC/C,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CA6BvE"}

package/dist/types/core/agent/stages/seed.d.ts

@@ -19,6 +19,7 @@
 import type { TypedScope } from 'footprintjs';
 import type { LLMMessage, LLMToolSchema } from '../../../adapters/types.js';
 import type { AgentInput, AgentState, RunConfig } from '../types.js';
+import type { MessageMiddleware } from '../middleware/types.js';
 export interface SeedStageDeps {
     /** Resolved `clampIterations(opts.maxIterations ?? 10)`. Frozen at
      *  chart-build time. */
@@ -53,11 +54,25 @@ export interface SeedStageDeps {
      * written, so the commit log is byte-identical to earlier releases.
      */
     readonly resolveRunConfig?: (input: AgentInput) => RunConfig | undefined;
+    /**
+     * The message chain (`.messageMiddleware(...)`), walked here at the
+     * `'input'` phase — BEFORE `userMessage` and `history` are written.
+     *
+     * This is the only placement that keeps the run honest. Everything
+     * downstream reads `scope.history`: the window strategies, the injection
+     * engine, all three slots, the request that goes on the wire, and every
+     * slice taken afterwards. Transform later than this and those components
+     * disagree about what the user actually said — the trace would show one
+     * message and the model would have answered another.
+     *
+     * Empty / undefined → seed stays the synchronous stage it always was.
+     */
+    readonly messageMiddleware?: readonly MessageMiddleware[];
 }
 /**
  * Build the seed stage function for an Agent instance. Captures both
  * the chart-build-time constants and the per-run mutable accessors
  * via the deps object.
  */
-export declare function buildSeedStage(deps: SeedStageDeps): (scope: TypedScope<AgentState>) => void;
+export declare function buildSeedStage(deps: SeedStageDeps): (scope: TypedScope<AgentState>) => void | Promise<void>;
 //# sourceMappingURL=seed.d.ts.map

package/dist/types/core/agent/stages/seed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE5E,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B;4BACwB;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;iEAE6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,2BAA2B,EAAE,MAAM,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAC9E;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACnD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,SAAS,GAAG,SAAS,CAAC;CAC1E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,CA0F3F"}
+{"version":3,"file":"seed.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/seed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE5E,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAIhE,MAAM,WAAW,aAAa;IAC5B;4BACwB;IACxB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;iEAE6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,2BAA2B,EAAE,MAAM,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAC9E;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACnD;;;;;;;OAOG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,SAAS,GAAG,SAAS,CAAC;IACzE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC3D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,aAAa,GAClB,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCzD"}

package/dist/types/core/agent/stages/toolCalls.d.ts

@@ -20,6 +20,19 @@
  * `tool.execute`. Deny → tool not executed; result is a synthetic
  * denial string. Allow / gate_open → execution proceeds.
  *
+ * Gate order for one call, and why it is this order:
+ *
+ *   permission → MIDDLEWARE CHAIN → arg validation → check-in →
+ *   credentials → execute
+ *
+ * The chain sits after the permission gate so an existing checker still
+ * decides first (a denial there means no middleware runs), and before arg
+ * validation so validation judges the args that will actually be sent —
+ * a middleware that transformed args into something the tool's schema
+ * rejects must be caught, not forwarded. A middleware answering `ask`
+ * pauses on the SAME wire `checkIn` uses; the human's answer is a
+ * decision, not a result, so the chain resumes and the REAL tool runs.
+ *
  * `read_skill` is the auto-attached activation tool — when the LLM
  * calls it with a valid Skill id, the next InjectionEngine pass
  * activates that Skill (lifetime: turn).
@@ -31,6 +44,7 @@ import type { CredentialProvider } from '../../../identity/types.js';
 import { type ResolvedCheckInConfig } from '../../checkin.js';
 import type { ProviderToolCache } from '../../slots/buildToolsSlot.js';
 import type { Tool } from '../../tools.js';
+import type { ToolMiddleware } from '../middleware/types.js';
 import { type ToolArgValidationMode } from '../toolArgsValidation.js';
 import type { AgentState } from '../types.js';
 export interface ToolCallsHandlerDeps {
@@ -78,6 +92,15 @@ export interface ToolCallsHandlerDeps {
      * Agent (no check-in). The gate fires ONLY for tools that declared `checkIn`.
      */
     readonly checkIn?: ResolvedCheckInConfig;
+    /**
+     * The tool-dispatch governance chain (`.toolMiddleware(...)`), in
+     * declaration order. Walked AFTER the permission gate — so an existing
+     * `PermissionChecker` still decides first and a denial there means no
+     * middleware runs at all — and BEFORE arg validation, so validation judges
+     * the args that will actually be sent rather than the ones the model
+     * proposed. Empty / undefined → not walked, no ledger key, no events.
+     */
+    readonly toolMiddleware?: readonly ToolMiddleware[];
 }
 /**
  * Build the pausable tool-call handler for the agent's chart.

package/dist/types/core/agent/stages/toolCalls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolCalls.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/toolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAc,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAIhF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGjF,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC;;4DAEwD;IACxD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD;;qDAEiD;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;4DAEwD;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;kEAE8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;8EAG0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAC1E;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CA0pBzC"}
+{"version":3,"file":"toolCalls.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/toolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAc,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAIhF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGjF,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAG7D,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC;;4DAEwD;IACxD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD;;qDAEiD;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;4DAEwD;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;kEAE8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;8EAG0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAC1E;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;CACrD;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CA60BzC"}

package/dist/types/core/agent/stages/window.d.ts

@@ -0,0 +1,64 @@
+/**
+ * window — the loop-head stage that applies the agent's window strategy.
+ *
+ * Runs once per ReAct iteration boundary, as the loop target, so everything
+ * downstream in the turn — the injection engine's triggers, all three context
+ * slots, and the wire itself — sees ONE window. No component gets a different
+ * past than the model does.
+ *
+ * The law: **it edits the window, never the ledger.** The turns a strategy
+ * removes were committed by `seed#0` / `tool-calls#N` before this stage ran
+ * and stay in those bundles byte-identical; footprintjs's commit log is
+ * append-only, so a removal cannot erase history even in principle. What it
+ * can do is stop re-sending it — and say so, in its own commit, naming every
+ * runtimeStageId whose messages left. A compacted (or trimmed) run is still a
+ * provable run.
+ *
+ * This file is deliberately all WIRING. The decision — what the window should
+ * become — lives behind `WindowStrategy` (window/strategy.ts, public since
+ * 7.17), so the duty to record, emit and cost what happened stays in exactly
+ * one place instead of being re-implemented per strategy. The TRIGGER lives
+ * in the strategy too: `plan()` is called at every boundary and answers
+ * `undefined` when it did not engage, which is what lets `slidingWindow`
+ * trigger on turn count while the token-triggered strategies refuse by name
+ * on a provider that reports no usage.
+ *
+ * Emits (existing vocabulary only — no new event types):
+ *   agentfootprint.context.evicted          — one per message leaving the window
+ *   agentfootprint.context.budget_pressure  — one per visit that HAS a budget
+ *                                             (omitted by strategies that do
+ *                                             not, rather than reporting a cap
+ *                                             nobody configured)
+ *   agentfootprint.cost.tick                — when a pricingTable is set: a
+ *                                             summarizer call is a real billed
+ *                                             call and counts
+ *
+ * A summarizer call is deliberately NOT bracketed with `stream.llm_start` /
+ * `llm_end`: those carry an `iteration` and every consumer pairs them by it,
+ * so a second bracket inside one iteration would corrupt the pairing. Its
+ * cost rides the cost channel and its tokens are recorded in the commit.
+ */
+import type { TypedScope } from 'footprintjs';
+import type { PricingTable } from '../../../adapters/types.js';
+import type { CompactionMeterHandle } from '../../../recorders/core/CompactionMeter.js';
+import type { WindowStrategy } from '../window/strategy.js';
+import type { AgentState } from '../types.js';
+export interface WindowStageDeps {
+    /** The agent's one window strategy. */
+    readonly strategy: WindowStrategy;
+    /** The meter this stage reads. Attached inline by `Agent.createExecutor`. */
+    readonly meter: CompactionMeterHandle;
+    /** The agent's own model — a billing strategy's default. */
+    readonly agentModel: string;
+    /** The MAIN provider's name, for a refusal that names it. */
+    readonly providerName: string;
+    /** Optional pricing adapter, so a summarizer call is costed like any other. */
+    readonly pricingTable?: PricingTable;
+    /** Optional cumulative USD cap per run. */
+    readonly costBudget?: number;
+    /** Injectable clock (tests pin survivalMs). */
+    readonly now?: () => number;
+}
+/** Build the window stage. */
+export declare function buildWindowStage(deps: WindowStageDeps): (scope: TypedScope<AgentState>) => Promise<void>;
+//# sourceMappingURL=window.d.ts.map

package/dist/types/core/agent/stages/window.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/window.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAc,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC3E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAKxF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,2CAA2C;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,+CAA+C;IAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,8BAA8B;AAC9B,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,GACpB,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CA4GlD"}

package/dist/types/core/agent/types.d.ts

@@ -18,7 +18,8 @@ import type { CredentialProvider } from '../../identity/types.js';
 import type { ToolArgValidationMode } from './toolArgsValidation.js';
 import type { ThinkingBlock } from '../../thinking/types.js';
 import type { ReliabilityScope } from '../../reliability/types.js';
-import type { CompactionRecord } from './compaction/types.js';
+import type { WindowRecord } from './window/types.js';
+import type { MiddlewareDecision } from './middleware/types.js';
 /**
  * Dials for the deferred observer queue (RFC-001) — only meaningful with
  * `observerDelivery: 'deferred'` (passing them without it throws at
@@ -347,6 +348,23 @@ export interface AgentState {
     pausedToolStartMs: number;
     pausedCheckIn?: boolean;
     pausedCheckInArgs?: Readonly<Record<string, unknown>>;
+    pausedAsk?: boolean;
+    pausedAskArgs?: Readonly<Record<string, unknown>>;
+    pausedAskIndex?: number;
+    pausedAskMiddleware?: string;
+    /** One row per middleware decision, in the order they were decided —
+     *  including the pass-throughs, because "the rule looked and was fine with
+     *  it" and "the rule never ran" are different facts about a run. A transform
+     *  files both the value it received and the value it produced, so a slice
+     *  taken later can find the moment the text changed and who changed it.
+     *  Written only by an agent that configured a chain; absent otherwise. */
+    middlewareDecisions?: readonly MiddlewareDecision[];
+    /** Set by the seed / prepare-final stage when a `messageMiddleware` returned
+     *  `deny`. Read at the API boundary, where it becomes a `MessageDeniedError`.
+     *  Never carries the refused content — see MessageDeniedError. */
+    messageDeniedReason?: string;
+    messageDeniedPhase?: 'input' | 'output';
+    messageDeniedBy?: string;
     cumTokensInput: number;
     cumTokensOutput: number;
     cumEstimatedUsd: number;
@@ -408,16 +426,23 @@ export interface AgentState {
     /** The base system prompt `.configure()` resolved for THIS run, replacing
      *  `.system(...)`. Same rule: absent unless a resolver returned one. */
     resolvedInstructions?: string;
-    /** One record per OVER-BUDGET visit to the compaction stage — including the
-     *  visits that folded nothing, which are the interesting ones. Written only
-     *  by an agent built with `.compaction()`; absent otherwise, so an agent
-     *  without it commits exactly the keys it always did.
+    /** One record per visit to the window stage that ENGAGED — including the
+     *  visits that removed nothing, which are the interesting ones. Written
+     *  only by an agent built with `.window()` or `.compaction()`; absent
+     *  otherwise, so an agent without one commits exactly the keys it always
+     *  did.
      *
-     *  This array is the fold's half of the law: the window shrank, and the
+     *  This array is the strategy's half of the law: the window shrank, and the
      *  ledger says which stages' messages left it, how many, and what the last
      *  call actually measured. The messages themselves are untouched in the
-     *  commit bundles that wrote them. */
-    compactions?: readonly CompactionRecord[];
+     *  commit bundles that wrote them.
+     *
+     *  The key is `compactions` because that is what it shipped as in 7.16,
+     *  when compaction was the family's only member. It is committed state —
+     *  public surface for anyone reading a run — so it keeps its name rather
+     *  than break every reader for a better word. Narrow a record by its
+     *  `strategy` field, not by the key it lives under. */
+    compactions?: readonly WindowRecord[];
     /** Set when a `PermissionChecker` returns `{ result: 'halt', ... }`.
      *  `Agent.run()` reads these at the API boundary and throws a typed
      *  `PolicyHaltError` carrying the same context — the chart $break's

package/dist/types/core/agent/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/agent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAI9D;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE3F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CAC5D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAIjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IAKpB,WAAW,EAAE,cAAc,CAAC;IAG5B,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAGnC,UAAU,EAAE,MAAM,CAAC;IAGnB,sBAAsB,EAAE,MAAM,CAAC;IAE/B,sBAAsB,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,kBAAkB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IAE5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,SAAS;QAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAClD,EAAE,CAAC;IAEJ,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAM1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEtD,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IAEvB;yEACqE;IACrE,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C;sEACkE;IAClE,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,kEAAkE;IAClE,cAAc,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD;4DACwD;IACxD,kBAAkB,EAAE,SAAS,aAAa,EAAE,CAAC;IAE7C;;sEAEkE;IAClE,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IACrC,wEAAwE;IACxE,eAAe,EAAE,OAAO,CAAC;IACzB;uEACmE;IACnE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;2CAEuC;IACvC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAC9C;;;;;sDAKkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;2EAGuE;IACvE,WAAW,CAAC,EAAE,aAAa,CAAC;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH;mDAC+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB;;;;;;kDAM8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;4EACwE;IACxE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B;;;;;;;;0CAQsC;IACtC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAG1C;;;;0EAIsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;0BAEsB;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B;;;6EAGyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;0CAIsC;IACtC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAGzC;;;;;;iFAM6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACzD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;kEAC8D;IAC9D,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/agent/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EACV,UAAU,EACV,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAIhE;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,EAAE,UAAU,CAAC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE3F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;IACzC;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,mBAAmB,CAAC;IAC/C;;;;;;OAMG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C;;;;;;;;;OASG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC3D;;;;;;;;OAQG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;IAC/D;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CAC5D;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,gBAAgB,KAAK,SAAS,GAAG,SAAS,CAAC;AAE3E,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB;;;;;;;OAOG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;CACpC;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAIjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IAKpB,WAAW,EAAE,cAAc,CAAC;IAG5B,WAAW,EAAE,SAAS,UAAU,EAAE,CAAC;IAGnC,UAAU,EAAE,MAAM,CAAC;IAGnB,sBAAsB,EAAE,MAAM,CAAC;IAE/B,sBAAsB,EAAE,SAAS,eAAe,EAAE,CAAC;IACnD,kBAAkB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC/C,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IAE5C,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,SAAS;QAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;KAClD,EAAE,CAAC;IAEJ,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAM1B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAStD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B;;;;;8EAK0E;IAC1E,mBAAmB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD;;sEAEkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IAEzB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;IAEvB;yEACqE;IACrE,gBAAgB,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C;sEACkE;IAClE,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,kEAAkE;IAClE,cAAc,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD;4DACwD;IACxD,kBAAkB,EAAE,SAAS,aAAa,EAAE,CAAC;IAE7C;;sEAEkE;IAClE,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;IACrC,wEAAwE;IACxE,eAAe,EAAE,OAAO,CAAC;IACzB;uEACmE;IACnE,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC;;2CAEuC;IACvC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC;IAC9C;;;;;sDAKkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;2EAGuE;IACvE,WAAW,CAAC,EAAE,aAAa,CAAC;QAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH;mDAC+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IAGrB;;;;;;kDAM8C;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;4EACwE;IACxE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B;;;;;;;;;;;;;;;2DAeuD;IACvD,WAAW,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAGtC;;;;0EAIsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;0BAEsB;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAG7B;;;6EAGyE;IACzE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;0CAIsC;IACtC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAGzC;;;;;;iFAM6E;IAC7E,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sBAAsB,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACzD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;kEAC8D;IAC9D,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC"}

package/dist/types/core/agent/window/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/window/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;;;GAYG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAkB,IAAI,iCAAiC;IACvD,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,QAAQ,EAAE,MAAM;CAY7B"}

package/dist/types/core/agent/window/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * window — the window-strategy family: keep the live context window inside
+ * its budget without ever losing the record.
+ *
+ * The one sentence: **a window strategy edits the WINDOW, never the LEDGER.**
+ * Removed turns stay in the commit log verbatim; the strategy files its own
+ * recorded step naming every `runtimeStageId` whose messages left. A summary
+ * is a claim about the past, so this library files it as a claim — not as the
+ * past. A drop is an absence, and it is named the same way.
+ *
+ * Three strategies ship, all sharing one turn segmentation and one refusal
+ * engine:
+ *   `summarizeOldest`  fold the oldest span into a summary (`.compaction()`)
+ *   `slidingWindow`    keep the last N turns, drop older ones
+ *   `tokenBudget`      counted-token trigger, drop instead of summarize
+ *
+ * Public surface (re-exported from the package root).
+ */
+export { CompactionUnmeasurableError } from './errors.js';
+export type { CompactionOptions, CompactionRecord, FoldRefusal, FoldRefusalReason, ResolvedCompaction, SlidingWindowOptions, SlidingWindowRecord, TokenBudgetOptions, TokenBudgetRecord, WindowRecord, WindowRefusal, WindowRefusalReason, } from './types.js';
+export type { RemovalFacts, WindowEviction, WindowStrategy, WindowStrategyInput, WindowStrategyResult, } from './strategy.js';
+export type { RemovalPlan, Turn } from './turns.js';
+export { COMPACTED_FRAME_PREFIX, isCompactedSummary } from './summarize.js';
+export { DROP_NOTICE_PREFIX, isDropNotice } from './notice.js';
+export { summarizeOldest } from './strategies/summarizeOldest.js';
+export { slidingWindow } from './strategies/slidingWindow.js';
+export { tokenBudget } from './strategies/tokenBudget.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/core/agent/window/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/window/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,YAAY,EACV,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACb,mBAAmB,GACpB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/types/core/agent/window/notice.d.ts

@@ -0,0 +1,47 @@
+/**
+ * window/notice — the authored message a DROP leaves behind, and why it has
+ * to exist at all.
+ *
+ * Pattern: Authored envelope with no untrusted payload whatsoever.
+ * Role:    core/ layer. Shared by both drop strategies.
+ * Emits:   N/A.
+ *
+ * The first reason for this message is the WIRE, not the prose. An agent
+ * window looks like `user, assistant+tool, assistant+tool, …`, so dropping
+ * the oldest turns leaves an ASSISTANT message at the head — and the
+ * providers that care (Anthropic) require the window to open on a user turn.
+ * A silent drop of the window's head therefore produces a request the vendor
+ * rejects. Something must occupy that position.
+ *
+ * Given that we have to author a message there anyway, it should say what
+ * happened rather than be filler. So it does: how many messages left, at
+ * which iteration, by which strategy, and where they still are. Unlike the
+ * compaction frame there is no model output involved at ALL — every character
+ * below is written by this library, which is why a drop has no prompt-
+ * injection surface to speak of.
+ *
+ * It appears ONLY when the removal reaches the window's head. A removal in
+ * the middle leaves the original opening turn in place, so there is no wire
+ * problem to solve — and splicing a lone `user` message between two assistant
+ * turns is its own risk. The ledger names that removal either way.
+ *
+ * It does not accumulate: the notice is an ordinary oldest turn next time
+ * round, so the next drop absorbs it and files a fresh one.
+ */
+import type { LLMMessage } from '../../../adapters/types.js';
+/** Opening of the authored notice. Stable — tests and readers match on it. */
+export declare const DROP_NOTICE_PREFIX = "[dropped history";
+/**
+ * Build the message that takes the head position after a drop.
+ *
+ * `role: 'user'` for the same reason the compaction frame is: it is the head
+ * of the window, and the head of the window must be a user turn.
+ */
+export declare function buildDropNotice(facts: {
+    readonly droppedMessageCount: number;
+    readonly iteration: number;
+    readonly strategy: string;
+}): LLMMessage;
+/** True when this message is a notice a previous drop wrote. */
+export declare function isDropNotice(msg: LLMMessage | undefined): boolean;
+//# sourceMappingURL=notice.d.ts.map

package/dist/types/core/agent/window/notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/window/notice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,qBAAqB,CAAC;AAErD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GAAG,UAAU,CASb;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAEjE"}