agentfootprint 9.9.0 → 9.11.0

package/dist/esm/core/agent/types.d.ts

@@ -139,6 +139,47 @@ export interface AgentOptions {
      * are ignored, never false-rejecting.
      */
     readonly toolArgValidation?: ToolArgValidationMode;
+    /**
+     * The ceiling on ONE tool result, in characters (9.11.0). **Opt-in — there
+     * is no default, and there will not be one.**
+     *
+     * Over the cap, the result is REPLACED by a marker that names the tool, the
+     * size, the cap, and the one action that helps — and carries the first
+     * characters of the real answer verbatim:
+     *
+     * ```json
+     * { "truncated": true,
+     *   "reason": "orders_export returned 812431 chars, over the 20000-char cap. Narrow the request and call again.",
+     *   "head": "id,customer,total\n1001,…" }
+     * ```
+     *
+     * The marker IS the result. It is what the model reads on the `role: 'tool'`
+     * message AND what `agentfootprint.stream.tool_end` carries — so a run that
+     * capped a 800KB result does not then ship that same 800KB to an event sink,
+     * and a trace shows the truncation instead of hiding it. `head` gets whatever
+     * the cap has left after the sentence explaining it, so a bigger cap buys a
+     * proportionally bigger head.
+     *
+     * **Why no default.** A default would silently modify tool results: a tool
+     * that returns 200KB of rows is doing what somebody wrote it to do, and a
+     * framework that quietly replaced that the first time it ran would be lying
+     * to the app about its own tool. Omitted, results are never measured and
+     * never replaced — byte-identical to every earlier release.
+     *
+     * It composes with, and never replaces, what a tool already does: a tool with
+     * its own paging keeps it, `CodeResult.truncated` still means what it means,
+     * and an `onToolResult` middleware that summarizes runs FIRST — the cap
+     * measures what the chain produced. It is the last-resort net, not the plan.
+     * When big tool DATA is the norm rather than the accident, the answer is the
+     * `CodeRunner` port ("summarize prose, compute data"), not a bigger cap.
+     *
+     * Refused at construction for a non-positive or non-integer value: `0` is not
+     * "off" — omitting the option is.
+     *
+     * @example a support agent whose search tool can return a whole knowledge base
+     *   Agent.create({ provider, model, maxToolResultChars: 20_000 })
+     */
+    readonly maxToolResultChars?: number;
     /**
      * How long ONE tool teardown may take before the runner stops waiting
      * (default 5000ms). See `ctx.onTeardown`.
@@ -401,10 +442,26 @@ export interface AgentInput {
      * Since 9.7.0 it also reaches `tool.execute` as `ctx.identity` — but only
      * when you PASSED one. The default `{ conversationId: '<runId>' }` below is
      * synthesized, and a tool told about a conversation nobody named would key a
-     * session on a fiction, so `ctx.identity` is absent in that case.
-     *
-     * Defaults to `{ conversationId: '<runId>' }` when omitted, so agents
-     * without memory work unchanged.
+     * session on a fiction, so `ctx.identity` is absent in that case. A DERIVED
+     * identity (the session rule below) is synthesized too, and is absent there
+     * for the same reason.
+     *
+     * **When omitted, one of two defaults applies (9.10.0):**
+     *
+     *  - the run carries a `sessionId` (`agent.run(input, { sessionId })`, which
+     *    is what `standingAgent` passes from every served request) →
+     *    `{ conversationId: sessionId }`. A hosting session IS a conversation, so
+     *    a served session gets durable per-user memory with no configuration at
+     *    all. Before 9.10.0 it got the per-run default below and a fresh runId
+     *    every turn, which meant a registered `.memory()` recalled nothing across
+     *    the turns of one session.
+     *  - no session either → `{ conversationId: '<runId>' }`, unchanged, so
+     *    agents without memory and scripts that name nobody work exactly as they
+     *    did.
+     *
+     * An identity you pass ALWAYS wins over the derivation — including the one a
+     * continued conversation carries, so a turn cannot silently re-namespace the
+     * conversation it is continuing.
      *
      * **`conversationId` is a namespace key, not a conversation.** Passing the
      * same `conversationId` to two `run()` calls does NOT continue the first
@@ -472,6 +529,21 @@ export interface AgentState {
     totalOutputTokens: number;
     turnStartMs: number;
     runIdentity: MemoryIdentity;
+    /**
+     * Where `runIdentity` came from, when it came from somewhere other than the
+     * caller (9.10.0).
+     *
+     * Present ONLY as `'session'`, and only when the run carried a
+     * `sessionId` and no identity at all — the one derivation this library
+     * makes. Absent means the identity is either the caller's own or the
+     * per-run default, which is what every release before 9.10.0 committed, so
+     * a run that is not session-bound writes exactly the keys it always did.
+     *
+     * It is a fact about the RECORD, not a dial: nothing reads it to decide
+     * anything. It exists so a trace can be asked "did anyone actually name this
+     * namespace?" and answer honestly.
+     */
+    runIdentitySource?: 'session';
     newMessages: readonly LLMMessage[];
     turnNumber: number;
     contextTokensRemaining: number;

package/dist/esm/core/slots/buildToolsSlot.d.ts

@@ -57,7 +57,26 @@ export interface ToolsSlotConfig {
      * Substituted by NAME in Compose, so dispatch is untouched: the tool-calls handler
      * resolves executables from `registryByName`, never from the schema list.
      */
-    readonly readSkillFor?: (currentSkillId?: string) => LLMToolSchema;
+    readonly readSkillFor?: (args: {
+        readonly currentSkillId?: string;
+        readonly hiddenSkillIds?: readonly string[];
+    }) => LLMToolSchema;
+    /**
+     * Which skills the caller's role may NOT see this run (9.11.0).
+     *
+     * Resolved in the async Discover stage and read by the sync Compose stage —
+     * the same shape `providerToolCache` uses, and for the same reason: a
+     * `PermissionChecker` may be async (a Redis lookup, a hub call) and Compose
+     * is pure. Set only when a checker declares it governs `'skill_read'`; then
+     * every hidden skill's row disappears from the `read_skill` menu, and the
+     * dispatch loop refuses the activation with the policy's own message.
+     *
+     * Its errors are NOT swallowed: a visibility resolver that throws leaves the
+     * iteration to the same reliability rules a failed `ToolProvider.list` does,
+     * because composing a menu from a policy that did not answer is exactly the
+     * fail-open this feature exists to prevent.
+     */
+    readonly hiddenSkillIds?: () => Promise<readonly string[]> | readonly string[];
     /** Budget cap (chars). Default: 2000. Set from the public door as
      *  `contextBudget.tools` on `AgentOptions`. */
     readonly budgetCap?: number;

package/dist/esm/core/slots/buildToolsSlot.js

@@ -30,6 +30,16 @@ export function buildToolsSlot(config) {
     const readSkillFor = config.readSkillFor;
     const toolProvider = config.toolProvider;
     const providerToolCache = config.providerToolCache;
+    const hiddenSkillIdsFor = config.hiddenSkillIds;
+    // Written by Discover (async), read by Compose (sync) — see the config note.
+    //
+    // Chart-scoped, and the chart is built ONCE at Agent construction — so this
+    // outlives a run. It is never stale at READ time because Discover always runs
+    // before Compose in the same slot and overwrites it every iteration; and it
+    // cannot cross callers because one Agent runs one turn at a time (and
+    // `standingAgent({ agentFactory })` gives each session its own instance, and
+    // therefore its own chart and its own closure).
+    let hiddenSkillIds = [];
     // Dedup latch for the human-facing warning, scoped to THIS built chart:
     // a 20-iteration ReAct loop must not print 20 identical warnings. The
     // typed `context.budget_pressure` event still fires every iteration and
@@ -55,6 +65,13 @@ export function buildToolsSlot(config) {
     // Sync providers still pay zero microtask overhead — the dynamic
     // `instanceof Promise` check skips await for non-Promise returns.
     const discoverStage = async (scope) => {
+        // Per-role skill visibility (9.11.0), resolved on the ONE stage in this
+        // slot that is allowed to await. Before the provider block so an agent
+        // with skills but no `toolProvider` still gets its filter.
+        if (hiddenSkillIdsFor) {
+            const asked = hiddenSkillIdsFor();
+            hiddenSkillIds = asked instanceof Promise ? await asked : asked;
+        }
         if (!toolProvider)
             return; // No-op fast path: keeps trace shape consistent.
         const args = scope.$getArgs();
@@ -131,7 +148,12 @@ export function buildToolsSlot(config) {
         // parent before this slot mounts — the same value the read_skill gate will read
         // when the model answers. Substituted by name so nothing else in the list moves.
         const tools = readSkillFor
-            ? staticTools.map((t) => (t.name === 'read_skill' ? readSkillFor(args.currentSkillId) : t))
+            ? staticTools.map((t) => t.name === 'read_skill'
+                ? readSkillFor({
+                    ...(args.currentSkillId !== undefined && { currentSkillId: args.currentSkillId }),
+                    ...(hiddenSkillIds.length > 0 && { hiddenSkillIds }),
+                })
+                : t)
             : staticTools;
         const injections = tools.map((t, i) => {
             const summary = `${t.name}: ${t.description}`;

package/dist/esm/core/slots/buildToolsSlot.js.map

@@ -1 +1 @@
-{"version":3,"file":"buildToolsSlot.js","sourceRoot":"","sources":["../../../../src/core/slots/buildToolsSlot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAwDjG;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnD,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,mCAAmC;IACnC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,4DAA4D;IAC5D,EAAE;IACF,qEAAqE;IACrE,iEAAiE;IACjE,mDAAmD;IACnD,sEAAsE;IACtE,gBAAgB;IAChB,uEAAuE;IACvE,0DAA0D;IAC1D,EAAE;IACF,iEAAiE;IACjE,kEAAkE;IAClE,MAAM,aAAa,GAAG,KAAK,EAAE,KAAoC,EAAiB,EAAE;QAClF,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,iDAAiD;QAE5E,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAA0B,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GACf,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAmC,IAAI,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,CAEjC,CAAC;QACd,8EAA8E;QAC9E,6EAA6E;QAC7E,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,cAAc,GAAG,CACpB,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAA4C,IAAI,EAAE,CACtF;aACE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC;aACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,GAAG,GAAwB;YAC/B,SAAS;YACT,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SAC1C,CAAC;QAEF,SAAS,CAAC,KAAK,EAAE,wCAAwC,EAAE;YACzD,UAAU,EAAE,YAAY,CAAC,EAAE;YAC3B,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,YAA6B,CAAC;QAClC,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,YAAY,GAAG,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,0DAA0D;YAC1D,8DAA8D;YAC9D,4DAA4D;YAC5D,4DAA4D;YAC5D,gCAAgC;YAChC,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,SAAS,CAAC,KAAK,EAAE,uCAAuC,EAAE;gBACxD,UAAU,EAAE,YAAY,CAAC,EAAE;gBAC3B,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,OAAO;gBAClB,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACjC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,SAAS,CAAC,KAAK,EAAE,0CAA0C,EAAE;YAC3D,UAAU,EAAE,YAAY,CAAC,EAAE;YAC3B,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,SAAS,EAAE,YAAY,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,+DAA+D;QAC/D,+DAA+D;QAC/D,0DAA0D;QAC1D,IAAI,iBAAiB;YAAE,iBAAiB,CAAC,OAAO,GAAG,YAAY,CAAC;IAClE,CAAC,CAAC;IAEF,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,YAAY,GAAG,CAAC,KAAoC,EAAQ,EAAE;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAmD,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QAEtC,kFAAkF;QAClF,gFAAgF;QAChF,gFAAgF;QAChF,iFAAiF;QACjF,MAAM,KAAK,GAAG,YAAY;YACxB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3F,CAAC,CAAC,WAAW,CAAC;QAEhB,MAAM,UAAU,GAAsB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,gEAAgE;YAChE,8DAA8D;YAC9D,8DAA8D;YAC9D,gBAAgB;YAChB,OAAO;gBACL,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE,OAAO;gBACnB,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,IAAI,YAAY,IAAI,iBAAiB,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxD,UAAU,CAAC,IAAI,CAAC;oBACd,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,WAAW,EAAE,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC;oBAClD,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,MAAM,EAAE,gBAAgB,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxE,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,6CAA6C;QAC7C,MAAM,gBAAgB,GACnB,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAA4C,IAAI,EAAE,CAAC;QACxF,MAAM,cAAc,GAAoB,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxD,UAAU,CAAC,IAAI,CAAC;oBACd,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,WAAW,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ,EAAE,GAAG,CAAC,EAAE;oBAChB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,oBAAoB,MAAM,CAAC,IAAI,GAAG;oBAClE,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAClD,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,qEAAqE;QACrE,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,+DAA+D;QAC/D,sCAAsC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;QAC3B,mBAAmB,CAAC,KAAK,EAAE;YACzB,SAAS;YACT,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;YACxD,eAAe;YACf,gBAAgB;YAChB,YAAY;SACb,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAC7B,OAAO,EACP,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB,CACtE,CAAC;QACF,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE7D,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,cAAc;QACd,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,cAAc,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,IAAI,CACV,qBAAqB,CAAC;oBACpB,QAAQ;oBACR,SAAS,EAAE,UAAU,CAAC,MAAM;oBAC5B,QAAQ,EAAE,iBAAiB;oBAC3B,WAAW,EAAE,aAAa;oBAC1B,MAAM,EAAE,oEAAoE;iBAC7E,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,SAAS,CAAoB,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE;QACzE,WAAW,EAAE,yBAAyB;KACvC,CAAC;SACC,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,CAAC;SACrE,KAAK,EAAE,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,mBAAmB,CAC1B,KAAoC,EACpC,KAOC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3C,+EAA+E;YAC/E,8EAA8E;YAC9E,+EAA+E;YAC/E,6EAA6E;YAC7E,SAAS,CAAC,KAAK,EAAE,+BAA+B,EAAE;gBAChD,QAAQ;gBACR,SAAS;gBACT,UAAU,EAAE,UAAU;gBACtB,GAAG,CAAC,UAAU,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC/C,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,GAAG,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACzD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC3B,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,0BAA0B,QAAQ,yCAAyC;gBACzE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,0BAA0B,GAAG,CAAC,EAAE,eAAe;gBACtF,gFAAgF;gBAChF,sFAAsF;gBACtF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"buildToolsSlot.js","sourceRoot":"","sources":["../../../../src/core/slots/buildToolsSlot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAG9D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,qBAAqB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AA2EjG;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;IAC3C,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IACjC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;IACnD,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC;IAChD,6EAA6E;IAC7E,EAAE;IACF,4EAA4E;IAC5E,8EAA8E;IAC9E,4EAA4E;IAC5E,sEAAsE;IACtE,6EAA6E;IAC7E,gDAAgD;IAChD,IAAI,cAAc,GAAsB,EAAE,CAAC;IAC3C,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,mCAAmC;IACnC,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,iFAAiF;IACjF,qFAAqF;IACrF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,qEAAqE;IACrE,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,4DAA4D;IAC5D,EAAE;IACF,qEAAqE;IACrE,iEAAiE;IACjE,mDAAmD;IACnD,sEAAsE;IACtE,gBAAgB;IAChB,uEAAuE;IACvE,0DAA0D;IAC1D,EAAE;IACF,iEAAiE;IACjE,kEAAkE;IAClE,MAAM,aAAa,GAAG,KAAK,EAAE,KAAoC,EAAiB,EAAE;QAClF,wEAAwE;QACxE,uEAAuE;QACvE,2DAA2D;QAC3D,IAAI,iBAAiB,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAClC,cAAc,GAAG,KAAK,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,iDAAiD;QAE5E,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAA0B,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,YAAY,GACf,KAAK,CAAC,SAAS,CAAC,uBAAuB,CAAmC,IAAI,EAAE,CAAC;QACpF,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,aAAa,CAEjC,CAAC;QACd,8EAA8E;QAC9E,6EAA6E;QAC7E,4EAA4E;QAC5E,+EAA+E;QAC/E,MAAM,cAAc,GAAG,CACpB,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAA4C,IAAI,EAAE,CACtF;aACE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC;aACvC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxB,MAAM,GAAG,GAAwB;YAC/B,SAAS;YACT,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,aAAa,EAAE,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,CAAC;YAC7B,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SAC1C,CAAC;QAEF,SAAS,CAAC,KAAK,EAAE,wCAAwC,EAAE;YACzD,UAAU,EAAE,YAAY,CAAC,EAAE;YAC3B,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,YAA6B,CAAC;QAClC,IAAI,CAAC;YACH,2DAA2D;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtC,YAAY,GAAG,MAAM,YAAY,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACnE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,0DAA0D;YAC1D,8DAA8D;YAC9D,4DAA4D;YAC5D,4DAA4D;YAC5D,gCAAgC;YAChC,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1D,SAAS,CAAC,KAAK,EAAE,uCAAuC,EAAE;gBACxD,UAAU,EAAE,YAAY,CAAC,EAAE;gBAC3B,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,OAAO;gBAClB,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;aACjC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,SAAS,CAAC,KAAK,EAAE,0CAA0C,EAAE;YAC3D,UAAU,EAAE,YAAY,CAAC,EAAE;YAC3B,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,SAAS,EAAE,YAAY,CAAC,MAAM;SAC/B,CAAC,CAAC;QAEH,qEAAqE;QACrE,mEAAmE;QACnE,oEAAoE;QACpE,+DAA+D;QAC/D,+DAA+D;QAC/D,0DAA0D;QAC1D,IAAI,iBAAiB;YAAE,iBAAiB,CAAC,OAAO,GAAG,YAAY,CAAC;IAClE,CAAC,CAAC;IAEF,kEAAkE;IAClE,qEAAqE;IACrE,oEAAoE;IACpE,MAAM,YAAY,GAAG,CAAC,KAAoC,EAAQ,EAAE;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAmD,CAAC;QAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC;QAEtC,kFAAkF;QAClF,gFAAgF;QAChF,gFAAgF;QAChF,iFAAiF;QACjF,MAAM,KAAK,GAAG,YAAY;YACxB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,IAAI,KAAK,YAAY;gBACrB,CAAC,CAAC,YAAY,CAAC;oBACX,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;oBACjF,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC;iBACrD,CAAC;gBACJ,CAAC,CAAC,CAAC,CACN;YACH,CAAC,CAAC,WAAW,CAAC;QAEhB,MAAM,UAAU,GAAsB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACvD,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,4DAA4D;YAC5D,gEAAgE;YAChE,8DAA8D;YAC9D,8DAA8D;YAC9D,gBAAgB;YAChB,OAAO;gBACL,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACrD,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,CAAC,CAAC,IAAI;gBAChB,MAAM,EAAE,eAAe;gBACvB,UAAU,EAAE,OAAO;gBACnB,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAoB,EAAE,CAAC;QAC5C,IAAI,YAAY,IAAI,iBAAiB,EAAE,CAAC;YACtC,KAAK,MAAM,CAAC,IAAI,iBAAiB,CAAC,OAAO,EAAE,CAAC;gBAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxD,UAAU,CAAC,IAAI,CAAC;oBACd,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,WAAW,EAAE,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC;oBAClD,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,UAAU;oBAClB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,MAAM,EAAE,gBAAgB,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;oBACxE,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,6CAA6C;QAC7C,MAAM,gBAAgB,GACnB,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAA4C,IAAI,EAAE,CAAC;QACxF,MAAM,cAAc,GAAoB,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAClC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC3B,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC5B,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxD,UAAU,CAAC,IAAI,CAAC;oBACd,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;oBACrC,WAAW,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBACjE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ,EAAE,GAAG,CAAC,EAAE;oBAChB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE,oBAAoB,MAAM,CAAC,IAAI,GAAG;oBAClE,UAAU,EAAE,OAAO;oBACnB,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC;iBAC5E,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAClD,+DAA+D;QAC/D,mEAAmE;QACnE,iEAAiE;QACjE,kEAAkE;QAClE,yBAAyB;QACzB,EAAE;QACF,qEAAqE;QACrE,kEAAkE;QAClE,kEAAkE;QAClE,mEAAmE;QACnE,+DAA+D;QAC/D,sCAAsC;QACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,eAAe,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,WAAW,GAAG,MAAM,CAAC;QAC3B,mBAAmB,CAAC,KAAK,EAAE;YACzB,SAAS;YACT,GAAG,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;YACxD,eAAe;YACf,gBAAgB;YAChB,YAAY;SACb,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,WAAW,CAC7B,OAAO,EACP,SAAS,EACT,UAAU,EACV,SAAS,EACT,YAAY,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qBAAqB,CACtE,CAAC;QACF,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAE7D,uEAAuE;QACvE,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,qEAAqE;QACrE,cAAc;QACd,MAAM,QAAQ,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,cAAc,GAAG,IAAI,CAAC;gBACtB,OAAO,CAAC,IAAI,CACV,qBAAqB,CAAC;oBACpB,QAAQ;oBACR,SAAS,EAAE,UAAU,CAAC,MAAM;oBAC5B,QAAQ,EAAE,iBAAiB;oBAC3B,WAAW,EAAE,aAAa;oBAC1B,MAAM,EAAE,oEAAoE;iBAC7E,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,SAAS,CAAoB,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE;QACzE,WAAW,EAAE,yBAAyB;KACvC,CAAC;SACC,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,oBAAoB,CAAC;SACrE,KAAK,EAAE,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,SAAS,mBAAmB,CAC1B,KAAoC,EACpC,KAOC;IAED,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3C,+EAA+E;YAC/E,8EAA8E;YAC9E,+EAA+E;YAC/E,6EAA6E;YAC7E,SAAS,CAAC,KAAK,EAAE,+BAA+B,EAAE;gBAChD,QAAQ;gBACR,SAAS;gBACT,UAAU,EAAE,UAAU;gBACtB,GAAG,CAAC,UAAU,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC/C,UAAU,EAAE,OAAO;gBACnB,YAAY,EAAE,GAAG,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACzD,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC3B,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,0BAA0B,QAAQ,yCAAyC;gBACzE,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,0BAA0B,GAAG,CAAC,EAAE,eAAe;gBACtF,gFAAgF;gBAChF,sFAAsF;gBACtF,uFAAuF,CAC1F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/esm/core/tools.d.ts

@@ -6,7 +6,7 @@
  * Role:    Consumer-facing shape. Agent.tool(...) accepts these.
  * Emits:   N/A (types only).
  */
-import type { LLMToolSchema } from '../adapters/types.js';
+import type { LLMToolSchema, ToolCapability } from '../adapters/types.js';
 import type { Credential, CredentialNeed, CredentialProvider } from '../identity/types.js';
 import type { MemoryIdentity } from '../memory/identity/types.js';
 import type { CheckInDemand } from './checkin.js';
@@ -58,6 +58,32 @@ export interface Tool<TArgs = Record<string, unknown>, TResult = unknown> {
      * when it is genuinely relaying another source's tool.
      */
     readonly source?: string;
+    /**
+     * What this tool touches, DECLARED by whoever wrote it (9.11.0).
+     *
+     * The framework never infers this. A tool's capabilities are not knowable
+     * from its name, its schema or its description, and classifying them by guess
+     * would rest a policy decision on a heuristic — so a tool that says nothing
+     * gets nothing asked about it, exactly as before.
+     *
+     * **Enforced when both sides speak.** When a tool declares a capability AND
+     * the configured `PermissionChecker` declares it `governs` that capability,
+     * the dispatch loop asks once per declared capability, right after the
+     * `'tool_call'` check allows — `check({ capability: 'external_net', target:
+     * '<tool name>' })`. Either side silent → not asked, not refused. A denial
+     * lands like every other refusal in the loop: the tool does not run and the
+     * model reads a result it can adapt to.
+     *
+     * @example a tool the operator wants governed as a network egress
+     *   defineTool({
+     *     name: 'fetch_invoice',
+     *     description: 'Fetch an invoice PDF from the billing service',
+     *     capabilities: ['external_net', 'user_data'],
+     *     inputSchema: { … },
+     *     execute: async ({ id }) => …,
+     *   });
+     */
+    readonly capabilities?: readonly ToolCapability[];
     execute(args: TArgs, ctx: ToolExecutionContext): Promise<TResult> | TResult;
 }
 /** Runtime context passed to tool.execute(). */
@@ -106,8 +132,11 @@ export interface ToolExecutionContext {
      *
      * **Absent when the caller passed none.** Deliberately NOT the run's internal
      * `runIdentity`, which is always populated (it defaults to
-     * `{ conversationId: '<runId>' }`): handing that to a tool would publish a
-     * synthesized conversation as if somebody had named one.
+     * `{ conversationId: '<runId>' }`, or to `{ conversationId: sessionId }` on a
+     * session-bound run since 9.10.0): handing either of those to a tool would
+     * publish a SYNTHESIZED conversation as if somebody had named one. A tool
+     * that wants the session has `ctx.sessionId` for it, which is the fact the
+     * transport actually delivered.
      */
     readonly identity?: MemoryIdentity;
     /**
@@ -166,6 +195,9 @@ export interface DefineToolOptions<TArgs, TResult> {
     /** Demand a human check-in before this tool runs (see {@link Tool.checkIn}).
      *  `'always'` or a `(args, ctx) => boolean` predicate. */
     readonly checkIn?: CheckInDemand<TArgs>;
+    /** Declare what this tool touches (see {@link Tool.capabilities}). Consulted
+     *  only when the configured checker declares it governs them. */
+    readonly capabilities?: readonly ToolCapability[];
     execute(args: TArgs, ctx: ToolExecutionContext): Promise<TResult> | TResult;
 }
 /**

package/dist/esm/core/tools.js

@@ -86,6 +86,9 @@ export function defineTool(options) {
         // The call-site predicate is typed to TArgs; the stored Tool keeps the
         // non-generic shape so it widens into `Tool[]` registries.
         ...(options.checkIn !== undefined && { checkIn: options.checkIn }),
+        // Copied verbatim, never inferred — an empty array is a tool that declared
+        // it touches nothing, which is a different statement from saying nothing.
+        ...(options.capabilities !== undefined && { capabilities: options.capabilities }),
         execute: options.execute,
     };
 }

package/dist/esm/core/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/core/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAoLxC;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yDAAyD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,GAAG,EAAE;YACd,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,iBAAiB;YACvC,CAAC,CAAC,mFAAmF,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI;YAC/C,sFAAsF;YACtF,wEAAwE;YACxE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,OAA0C;IAE1C,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SACvE;QACD,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,uEAAuE;QACvE,2DAA2D;QAC3D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAwB,EAAE,CAAC;QACnF,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/core/tools.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAoNxC;;;;;;;;;;;;;;;;;;GAkBG;AACH;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,yDAAyD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,GAAG,EAAE;YACd,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,iBAAiB;YACvC,CAAC,CAAC,mFAAmF,CAAC;QAC1F,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,MAAM,IAAI;YAC/C,sFAAsF;YACtF,wEAAwE;YACxE,0DAA0D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,CAAC,SAAS,EAAE;QAAE,OAAO;IACzB,IAAI,CAAC;QACH,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,OAA0C;IAE1C,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;SACvE;QACD,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,uEAAuE;QACvE,2DAA2D;QAC3D,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAwB,EAAE,CAAC;QACnF,2EAA2E;QAC3E,0EAA0E;QAC1E,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QACjF,OAAO,EAAE,OAAO,CAAC,OAAO;KACzB,CAAC;AACJ,CAAC"}

package/dist/esm/events/payloads.d.ts

@@ -6,6 +6,7 @@
  * Emits:   (types only).
  */
 import type { CompositionKind, ContextLifetime, ContextRecency, ContextRole, ContextSlot, ContextSource, LLMProviderName, ToolProtocol } from './types.js';
+import type { PermissionCapability } from '../adapters/types.js';
 import type { ThinkingBlock } from '../thinking/types.js';
 import type { LoopMoment } from '../core/agent/moments.js';
 export interface CompositionEnterPayload {
@@ -739,7 +740,10 @@ export interface SkillRejectedPayload {
     readonly iteration: number;
 }
 export interface PermissionCheckPayload {
-    readonly capability: 'tool_call' | 'memory_read' | 'memory_write' | 'external_net' | 'user_data';
+    /** 9.11.0 — the shared vocabulary, so the event cannot drift from the
+     *  request. `'skill_read'` joined it when skill activation became something
+     *  a policy can refuse. */
+    readonly capability: PermissionCapability;
     readonly actor: string;
     readonly target?: string;
     readonly result: 'allow' | 'deny' | 'halt' | 'gate_open';

package/dist/esm/events/types.d.ts

@@ -78,6 +78,33 @@ export interface EventMeta {
      * through; anyone else sets it with `run({ ... }, { sessionId })`.
      */
     readonly sessionId?: string;
+    /**
+     * WHO this run is for — the principal the caller NAMED (9.11.0).
+     *
+     * This is the actor half of an audit record. The event stream has always
+     * carried *what* happened and *when*; `principal` and {@link tenant} are what
+     * make it a who→what→when wire, and they ride on the meta for the same reason
+     * `sessionId` does: nothing downstream can reconstruct them from the payloads.
+     *
+     * **Stamped ONLY from an explicit identity** — `agent.run(input, { identity })`
+     * or `run({ message, identity })`, the same tuple memory and the permission
+     * gate scope on. Never from the run's internal `runIdentity`, which is always
+     * populated and defaults to `{ conversationId: '<runId>' }` (or, on a
+     * session-bound run since 9.10.0, to `{ conversationId: sessionId }`).
+     *
+     * **A conversation id is not an actor.** Deriving a principal from a session
+     * would put a caller-supplied string — anyone who can reach the host can send
+     * any one — into the field an auditor reads as "who did this". Absent is the
+     * honest answer for an anonymous run, and absent is what it says.
+     */
+    readonly principal?: string;
+    /**
+     * The organization / workspace / account boundary this run is for (9.11.0).
+     *
+     * Same rule as {@link principal} in every respect: explicit identity only,
+     * never synthesized, absent for a single-tenant or anonymous run.
+     */
+    readonly tenant?: string;
 }
 /** Discriminated-union envelope every event implements. */
 export interface AgentfootprintEventEnvelope<TType extends string, TPayload> {

package/dist/esm/hosting/browserSession.d.ts

@@ -0,0 +1,97 @@
+/**
+ * hosting/browserSession — the client half of a session, for a page.
+ *
+ * A standing agent remembers a conversation per `sessionId`. Something has to
+ * decide what that id IS, and in a browser that is one line:
+ *
+ *   const sessionId = browserSessionId();
+ *   await fetch('/invoke', {
+ *     method: 'POST',
+ *     headers: { 'content-type': 'application/json', 'x-session-id': sessionId },
+ *     body: JSON.stringify({ input: 'hello' }),
+ *   });
+ *
+ * The server half is `nodeHost({ sessionHeader })` (default `'x-session-id'`,
+ * so the line above needs no server option at all) or
+ * `nodeHost({ sessionCookie })`, which does the same job without any client
+ * code — see those options for the trade.
+ *
+ * ── Why this file imports NOTHING ────────────────────────────────────────────
+ * It is the one piece of `hosting/` a browser bundle is meant to contain, and
+ * the rest of that folder is Node: `httpHost` dynamically imports `node:http`,
+ * `sqliteSessions` reaches `node:sqlite` through `createRequire`. So this file
+ * has no imports at all and is exported from the MAIN barrel
+ * (`import { browserSessionId } from 'agentfootprint'`) rather than from
+ * `agentfootprint/hosting`, which no browser bundle should have to pull in. It
+ * lives here, beside the server half it pairs with, so the two cannot drift
+ * about which header carries what.
+ *
+ * Pattern: a plain function. There is no state to own beyond the storage key.
+ */
+/** Options for {@link browserSessionId}. */
+export interface BrowserSessionIdOptions {
+    /**
+     * Where the id is kept. Default `'agentfootprint.sessionId'`.
+     *
+     * Change it when one origin serves two different agents that must not share a
+     * conversation — two keys, two sessions, one browser.
+     */
+    readonly storageKey?: string;
+}
+/** The default `localStorage` key. Named, so a page can clear it deliberately. */
+export declare const DEFAULT_SESSION_STORAGE_KEY = "agentfootprint.sessionId";
+/**
+ * The conversation this browser is having with your agent: minted once, kept,
+ * and handed back on every later call.
+ *
+ * Pass it as `x-session-id` (or in the JSON body as `sessionId`) and a
+ * `standingAgent` will hydrate the same conversation on every turn — and, since
+ * 9.10.0, scope the agent's memory to it too, with no configuration.
+ *
+ * ── What it is, and the thing it is NOT ──────────────────────────────────────
+ * **A session id is not authentication.** It is a handle the browser carries,
+ * and anyone who can reach your host can send any string in its place. Nothing
+ * here signs it, and nothing on the server side checks it: authenticate the
+ * caller by your own means, then check that the authenticated principal is
+ * allowed the session they claimed. Storing anything sensitive under a session
+ * id alone is storing it under a value the client controls.
+ *
+ * ── Where it is kept, and what that costs ────────────────────────────────────
+ * `localStorage`, under {@link BrowserSessionIdOptions.storageKey}. That means
+ * it survives a reload and a closed tab, is scoped to the ORIGIN, and is
+ * readable by any script running on that origin — including one you did not
+ * write. It is per browser profile, so the same person on a phone and a laptop
+ * is two conversations, and a shared machine is one.
+ *
+ * When `localStorage` cannot be reached — private mode in some browsers throws
+ * on access, and there is no `window` at all during SSR — the id is kept in a
+ * module-level `Map` instead. Same id for the life of the page, gone on reload.
+ * This is a fallback and it is stated rather than hidden: a page that must
+ * survive a reload in private mode needs its own storage.
+ *
+ * ── How it is minted ─────────────────────────────────────────────────────────
+ * `crypto.randomUUID()` where it exists (every current browser, in a secure
+ * context), then `crypto.getRandomValues`. Both are unguessable. On a runtime
+ * that has NEITHER — an insecure-context page in an older browser — it falls
+ * back to `Math.random`, which is **not** unguessable, and that is survivable
+ * only because of the paragraph above: this id is a handle, never a credential.
+ *
+ * @example  A chat page that remembers across reloads
+ * ```ts
+ * import { browserSessionId } from 'agentfootprint';
+ *
+ * const sessionId = browserSessionId();
+ * const reply = await fetch('/invoke', {
+ *   method: 'POST',
+ *   headers: { 'content-type': 'application/json', 'x-session-id': sessionId },
+ *   body: JSON.stringify({ input: message }),
+ * }).then((r) => r.json());
+ * ```
+ *
+ * @example  Two agents on one origin, two conversations
+ * ```ts
+ * const support = browserSessionId({ storageKey: 'support.sessionId' });
+ * const billing = browserSessionId({ storageKey: 'billing.sessionId' });
+ * ```
+ */
+export declare function browserSessionId(options?: BrowserSessionIdOptions): string;

package/dist/esm/hosting/browserSession.js

@@ -0,0 +1,171 @@
+/**
+ * hosting/browserSession — the client half of a session, for a page.
+ *
+ * A standing agent remembers a conversation per `sessionId`. Something has to
+ * decide what that id IS, and in a browser that is one line:
+ *
+ *   const sessionId = browserSessionId();
+ *   await fetch('/invoke', {
+ *     method: 'POST',
+ *     headers: { 'content-type': 'application/json', 'x-session-id': sessionId },
+ *     body: JSON.stringify({ input: 'hello' }),
+ *   });
+ *
+ * The server half is `nodeHost({ sessionHeader })` (default `'x-session-id'`,
+ * so the line above needs no server option at all) or
+ * `nodeHost({ sessionCookie })`, which does the same job without any client
+ * code — see those options for the trade.
+ *
+ * ── Why this file imports NOTHING ────────────────────────────────────────────
+ * It is the one piece of `hosting/` a browser bundle is meant to contain, and
+ * the rest of that folder is Node: `httpHost` dynamically imports `node:http`,
+ * `sqliteSessions` reaches `node:sqlite` through `createRequire`. So this file
+ * has no imports at all and is exported from the MAIN barrel
+ * (`import { browserSessionId } from 'agentfootprint'`) rather than from
+ * `agentfootprint/hosting`, which no browser bundle should have to pull in. It
+ * lives here, beside the server half it pairs with, so the two cannot drift
+ * about which header carries what.
+ *
+ * Pattern: a plain function. There is no state to own beyond the storage key.
+ */
+/** The default `localStorage` key. Named, so a page can clear it deliberately. */
+export const DEFAULT_SESSION_STORAGE_KEY = 'agentfootprint.sessionId';
+/**
+ * Storage for the runs where `localStorage` is not there — a private-mode
+ * browser that throws on access, an SSR pass, a test. One `Map` for the module,
+ * so a second call in the same page still gets the same id back.
+ */
+const fallbackStore = new Map();
+/**
+ * The conversation this browser is having with your agent: minted once, kept,
+ * and handed back on every later call.
+ *
+ * Pass it as `x-session-id` (or in the JSON body as `sessionId`) and a
+ * `standingAgent` will hydrate the same conversation on every turn — and, since
+ * 9.10.0, scope the agent's memory to it too, with no configuration.
+ *
+ * ── What it is, and the thing it is NOT ──────────────────────────────────────
+ * **A session id is not authentication.** It is a handle the browser carries,
+ * and anyone who can reach your host can send any string in its place. Nothing
+ * here signs it, and nothing on the server side checks it: authenticate the
+ * caller by your own means, then check that the authenticated principal is
+ * allowed the session they claimed. Storing anything sensitive under a session
+ * id alone is storing it under a value the client controls.
+ *
+ * ── Where it is kept, and what that costs ────────────────────────────────────
+ * `localStorage`, under {@link BrowserSessionIdOptions.storageKey}. That means
+ * it survives a reload and a closed tab, is scoped to the ORIGIN, and is
+ * readable by any script running on that origin — including one you did not
+ * write. It is per browser profile, so the same person on a phone and a laptop
+ * is two conversations, and a shared machine is one.
+ *
+ * When `localStorage` cannot be reached — private mode in some browsers throws
+ * on access, and there is no `window` at all during SSR — the id is kept in a
+ * module-level `Map` instead. Same id for the life of the page, gone on reload.
+ * This is a fallback and it is stated rather than hidden: a page that must
+ * survive a reload in private mode needs its own storage.
+ *
+ * ── How it is minted ─────────────────────────────────────────────────────────
+ * `crypto.randomUUID()` where it exists (every current browser, in a secure
+ * context), then `crypto.getRandomValues`. Both are unguessable. On a runtime
+ * that has NEITHER — an insecure-context page in an older browser — it falls
+ * back to `Math.random`, which is **not** unguessable, and that is survivable
+ * only because of the paragraph above: this id is a handle, never a credential.
+ *
+ * @example  A chat page that remembers across reloads
+ * ```ts
+ * import { browserSessionId } from 'agentfootprint';
+ *
+ * const sessionId = browserSessionId();
+ * const reply = await fetch('/invoke', {
+ *   method: 'POST',
+ *   headers: { 'content-type': 'application/json', 'x-session-id': sessionId },
+ *   body: JSON.stringify({ input: message }),
+ * }).then((r) => r.json());
+ * ```
+ *
+ * @example  Two agents on one origin, two conversations
+ * ```ts
+ * const support = browserSessionId({ storageKey: 'support.sessionId' });
+ * const billing = browserSessionId({ storageKey: 'billing.sessionId' });
+ * ```
+ */
+export function browserSessionId(options = {}) {
+    const key = options.storageKey ?? DEFAULT_SESSION_STORAGE_KEY;
+    const existing = readStored(key);
+    if (existing !== undefined && existing.length > 0)
+        return existing;
+    const minted = mintId();
+    writeStored(key, minted);
+    return minted;
+}
+/**
+ * `localStorage` if it is both present and usable, otherwise `undefined`.
+ *
+ * Presence is not usability: Safari's private mode has historically THROWN on
+ * `localStorage` access rather than being absent, so the only honest test is to
+ * touch it inside a try.
+ */
+function storage() {
+    try {
+        const candidate = globalThis.localStorage;
+        if (candidate === undefined || candidate === null)
+            return undefined;
+        // A round trip, because a quota-exhausted or disabled store can be present
+        // and still refuse every write.
+        const probe = '__agentfootprint_probe__';
+        candidate.setItem(probe, '1');
+        candidate.removeItem(probe);
+        return candidate;
+    }
+    catch {
+        return undefined;
+    }
+}
+function readStored(key) {
+    const store = storage();
+    if (store === undefined)
+        return fallbackStore.get(key);
+    try {
+        return store.getItem(key) ?? undefined;
+    }
+    catch {
+        return fallbackStore.get(key);
+    }
+}
+function writeStored(key, value) {
+    // The in-memory copy is kept EITHER WAY. A `localStorage` that accepted the
+    // probe and then refused this write (quota, a policy change mid-page) would
+    // otherwise mint a new id on every call, and a conversation that starts over
+    // on every message is worse than one that ends at the reload.
+    fallbackStore.set(key, value);
+    const store = storage();
+    if (store === undefined)
+        return;
+    try {
+        store.setItem(key, value);
+    }
+    catch {
+        // Already kept above. Nothing here is worth failing a page over.
+    }
+}
+/** An unguessable id where the platform offers one; see the caveat on the door. */
+function mintId() {
+    const webcrypto = globalThis.crypto;
+    if (typeof webcrypto?.randomUUID === 'function')
+        return webcrypto.randomUUID();
+    if (typeof webcrypto?.getRandomValues === 'function') {
+        const bytes = webcrypto.getRandomValues(new Uint8Array(16));
+        // RFC 4122 version 4, laid out by hand because `randomUUID` is what is
+        // missing here, not the randomness.
+        bytes[6] = ((bytes[6] ?? 0) & 0x0f) | 0x40;
+        bytes[8] = ((bytes[8] ?? 0) & 0x3f) | 0x80;
+        const hex = [...bytes].map((b) => b.toString(16).padStart(2, '0')).join('');
+        return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+    }
+    // No crypto at all. Not unguessable, and labelled so in the returned value
+    // itself rather than only in a doc nobody reads at three in the morning.
+    const random = () => Math.random().toString(36).slice(2, 10);
+    return `weak-${Date.now().toString(36)}-${random()}${random()}`;
+}
+//# sourceMappingURL=browserSession.js.map

package/dist/esm/hosting/browserSession.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browserSession.js","sourceRoot":"","sources":["../../../src/hosting/browserSession.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAaH,kFAAkF;AAClF,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAmC,EAAE;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,2BAA2B,CAAC;IAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO;IACd,IAAI,CAAC;QACH,MAAM,SAAS,GAAI,UAAyC,CAAC,YAAY,CAAC;QAC1E,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,2EAA2E;QAC3E,gCAAgC;QAChC,MAAM,KAAK,GAAG,0BAA0B,CAAC;QACzC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9B,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,KAAa;IAC7C,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,8DAA8D;IAC9D,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC;QACH,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,MAAM;IACb,MAAM,SAAS,GAAI,UAAkC,CAAC,MAAM,CAAC;IAC7D,IAAI,OAAO,SAAS,EAAE,UAAU,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC,UAAU,EAAE,CAAC;IAC/E,IAAI,OAAO,SAAS,EAAE,eAAe,KAAK,UAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,uEAAuE;QACvE,oCAAoC;QACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC3C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAC7E,EAAE,EACF,EAAE,CACH,IAAI,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;IACvB,CAAC;IACD,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,MAAM,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAClE,CAAC"}