apcore-js 0.16.0 → 0.17.0

package/README.md

@@ -19,7 +19,7 @@ apcore is an AI-Perceivable module standard that makes every interface naturally
 ## Features
 
 - **Schema-driven modules** — Define input/output schemas with TypeBox for runtime validation
-- **Executor pipeline** — Secured execution lifecycle: context → safety checks → lookup → ACL → approval gate → validation → middleware before → execute → output validation → middleware after → return
+- **Executor pipeline** — Secured execution lifecycle: context → call chain guard → lookup → ACL → approval gate → middleware before → validation → execute → output validation → middleware after → return
 - **Registry system** — File-based module discovery with metadata, dependencies, and topological ordering
 - **Binding loader** — YAML-based module registration for no-code integration
 - **Access control (ACL)** — Pattern-based rules with identity types, roles, and call-depth conditions

package/dist/builtin-steps.d.ts

@@ -14,20 +14,22 @@ import type { Step, StepResult, PipelineContext } from './pipeline.js';
 import { ExecutionStrategy } from './pipeline.js';
 /** Creates or inherits execution Context and sets the global deadline. */
 export declare class BuiltinContextCreation implements Step {
-    readonly name = "builtin.context_creation";
+    readonly name = "context_creation";
     readonly description = "Create or inherit execution context and set global deadline";
     readonly removable = false;
     readonly replaceable = false;
+    readonly pure = true;
     private _globalTimeout;
     constructor(config: Config | null);
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Validates call chain depth, repeat limits, and cancel token. */
-export declare class BuiltinSafetyCheck implements Step {
-    readonly name = "builtin.safety_check";
+export declare class BuiltinCallChainGuard implements Step {
+    readonly name = "call_chain_guard";
     readonly description = "Call chain guard: depth, repeat limits, cancel token";
     readonly removable = true;
     readonly replaceable = true;
+    readonly pure = true;
     private _maxCallDepth;
     private _maxModuleRepeat;
     constructor(config: Config | null);
@@ -35,86 +37,99 @@ export declare class BuiltinSafetyCheck implements Step {
 }
 /** Resolves the module from the registry and sets ctx.module. */
 export declare class BuiltinModuleLookup implements Step {
-    readonly name = "builtin.module_lookup";
+    readonly name = "module_lookup";
     readonly description = "Resolve module from registry";
     readonly removable = false;
     readonly replaceable = false;
+    readonly pure = true;
     private _registry;
     constructor(registry: Registry);
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Enforces access control via the ACL provider. */
 export declare class BuiltinACLCheck implements Step {
-    readonly name = "builtin.acl_check";
+    readonly name = "acl_check";
     readonly description = "Access control list enforcement";
     readonly removable = true;
     readonly replaceable = true;
+    readonly pure = true;
     private _acl;
     constructor(acl: ACL | null);
+    /** Update the ACL provider at runtime. */
+    setAcl(acl: ACL): void;
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Handles approval flow for modules that require explicit approval. */
 export declare class BuiltinApprovalGate implements Step {
-    readonly name = "builtin.approval_gate";
+    readonly name = "approval_gate";
     readonly description = "Approval handler flow";
     readonly removable = true;
     readonly replaceable = true;
+    readonly pure = false;
     private _handler;
     constructor(handler: ApprovalHandler | null);
+    /** Update the approval handler at runtime. */
+    setApprovalHandler(handler: ApprovalHandler): void;
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Validates inputs against module schema and redacts sensitive fields. */
 export declare class BuiltinInputValidation implements Step {
-    readonly name = "builtin.input_validation";
+    readonly name = "input_validation";
     readonly description = "Schema validation and redaction for inputs";
     readonly removable = true;
     readonly replaceable = true;
+    readonly pure = true;
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Executes before-middleware chain via MiddlewareManager. */
 export declare class BuiltinMiddlewareBefore implements Step {
-    readonly name = "builtin.middleware_before";
+    readonly name = "middleware_before";
     readonly description = "Execute before-middleware chain";
     readonly removable = true;
     readonly replaceable = false;
+    readonly pure = false;
     private _middlewareManager;
     constructor(middlewares: MiddlewareManager);
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Executes the module with timeout enforcement. Sets ctx.output. */
 export declare class BuiltinExecute implements Step {
-    readonly name = "builtin.execute";
+    readonly name = "execute";
     readonly description = "Execute module with timeout";
     readonly removable = false;
     readonly replaceable = true;
+    readonly pure = false;
     private _defaultTimeout;
     constructor(config: Config | null);
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Validates output against module schema and redacts sensitive fields. */
 export declare class BuiltinOutputValidation implements Step {
-    readonly name = "builtin.output_validation";
+    readonly name = "output_validation";
     readonly description = "Schema validation and redaction for output";
     readonly removable = true;
     readonly replaceable = true;
+    readonly pure = true;
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Executes after-middleware chain via MiddlewareManager. */
 export declare class BuiltinMiddlewareAfter implements Step {
-    readonly name = "builtin.middleware_after";
+    readonly name = "middleware_after";
     readonly description = "Execute after-middleware chain";
     readonly removable = true;
     readonly replaceable = false;
+    readonly pure = false;
     private _middlewareManager;
     constructor(middlewares: MiddlewareManager);
     execute(ctx: PipelineContext): Promise<StepResult>;
 }
 /** Finalizes the pipeline result. Output is already on ctx.output. */
 export declare class BuiltinReturnResult implements Step {
-    readonly name = "builtin.return_result";
+    readonly name = "return_result";
     readonly description = "Finalize pipeline result";
     readonly removable = false;
     readonly replaceable = false;
+    readonly pure = true;
     execute(_ctx: PipelineContext): Promise<StepResult>;
 }
 export interface StandardStrategyDeps {

package/dist/builtin-steps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"builtin-steps.d.ts","sourceRoot":"","sources":["../src/builtin-steps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAmC,MAAM,eAAe,CAAC;AAEtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAc1C,OAAO,EAAwB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIlF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAmElD,0EAA0E;AAC1E,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,iEAAiE;IACrF,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAE7B,OAAO,CAAC,cAAc,CAAS;gBAEnB,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAazD;AAMD,mEAAmE;AACnE,qBAAa,kBAAmB,YAAW,IAAI;IAC7C,QAAQ,CAAC,IAAI,0BAA0B;IACvC,QAAQ,CAAC,WAAW,0DAA0D;IAC9E,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAE5B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,gBAAgB,CAAS;gBAErB,MAAM,EAAE,MAAM,GAAG,IAAI;IAU3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAiCzD;AAMD,iEAAiE;AACjE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,kCAAkC;IACtD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAE7B,OAAO,CAAC,SAAS,CAAW;gBAEhB,QAAQ,EAAE,QAAQ;IAIxB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAWzD;AAMD,oDAAoD;AACpD,qBAAa,eAAgB,YAAW,IAAI;IAC1C,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,WAAW,qCAAqC;IACzD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAE5B,OAAO,CAAC,IAAI,CAAa;gBAEb,GAAG,EAAE,GAAG,GAAG,IAAI;IAIrB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAazD;AAMD,wEAAwE;AACxE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,2BAA2B;IAC/C,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAE5B,OAAO,CAAC,QAAQ,CAAyB;gBAE7B,OAAO,EAAE,eAAe,GAAG,IAAI;IAIrC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAgFzD;AAMD,2EAA2E;AAC3E,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,gDAAgD;IACpE,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAEtB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CA2BzD;AAMD,8DAA8D;AAC9D,qBAAa,uBAAwB,YAAW,IAAI;IAClD,QAAQ,CAAC,IAAI,+BAA+B;IAC5C,QAAQ,CAAC,WAAW,qCAAqC;IACzD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,SAAS;IAE7B,OAAO,CAAC,kBAAkB,CAAoB;gBAElC,WAAW,EAAE,iBAAiB;IAIpC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAmBzD;AAMD,qEAAqE;AACrE,qBAAa,cAAe,YAAW,IAAI;IACzC,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,WAAW,iCAAiC;IACrD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,QAAQ;IAE5B,OAAO,CAAC,eAAe,CAAS;gBAEpB,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAqFzD;AAMD,2EAA2E;AAC3E,qBAAa,uBAAwB,YAAW,IAAI;IAClD,QAAQ,CAAC,IAAI,+BAA+B;IAC5C,QAAQ,CAAC,WAAW,gDAAgD;IACpE,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAEtB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAyBzD;AAMD,6DAA6D;AAC7D,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,8BAA8B;IAC3C,QAAQ,CAAC,WAAW,oCAAoC;IACxD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,SAAS;IAE7B,OAAO,CAAC,kBAAkB,CAAoB;gBAElC,WAAW,EAAE,iBAAiB;IAIpC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAWzD;AAMD,sEAAsE;AACtE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,2BAA2B;IACxC,QAAQ,CAAC,WAAW,8BAA8B;IAClD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAEvB,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAI1D;AAMD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IAChB,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACxC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAcnF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAYnF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAOlF;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAYtF"}
+{"version":3,"file":"builtin-steps.d.ts","sourceRoot":"","sources":["../src/builtin-steps.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAmC,MAAM,eAAe,CAAC;AAEtF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAc1C,OAAO,EAAwB,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAIlF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAmElD,0EAA0E;AAC1E,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,WAAW,iEAAiE;IACrF,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAC7B,QAAQ,CAAC,IAAI,QAAQ;IAErB,OAAO,CAAC,cAAc,CAAS;gBAEnB,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAazD;AAMD,mEAAmE;AACnE,qBAAa,qBAAsB,YAAW,IAAI;IAChD,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,WAAW,0DAA0D;IAC9E,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,QAAQ;IAErB,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,gBAAgB,CAAS;gBAErB,MAAM,EAAE,MAAM,GAAG,IAAI;IAU3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBzD;AAMD,iEAAiE;AACjE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,WAAW,kCAAkC;IACtD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAC7B,QAAQ,CAAC,IAAI,QAAQ;IAErB,OAAO,CAAC,SAAS,CAAW;gBAEhB,QAAQ,EAAE,QAAQ;IAIxB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAQzD;AAMD,oDAAoD;AACpD,qBAAa,eAAgB,YAAW,IAAI;IAC1C,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,WAAW,qCAAqC;IACzD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,QAAQ;IAErB,OAAO,CAAC,IAAI,CAAa;gBAEb,GAAG,EAAE,GAAG,GAAG,IAAI;IAI3B,0CAA0C;IAC1C,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI;IAIhB,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAUzD;AAMD,wEAAwE;AACxE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,WAAW,2BAA2B;IAC/C,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,SAAS;IAEtB,OAAO,CAAC,QAAQ,CAAyB;gBAE7B,OAAO,EAAE,eAAe,GAAG,IAAI;IAI3C,8CAA8C;IAC9C,kBAAkB,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI;IAI5C,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAuEzD;AAMD,2EAA2E;AAC3E,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,WAAW,gDAAgD;IACpE,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,QAAQ;IAEf,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAkBzD;AAMD,8DAA8D;AAC9D,qBAAa,uBAAwB,YAAW,IAAI;IAClD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,WAAW,qCAAqC;IACzD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,SAAS;IAC7B,QAAQ,CAAC,IAAI,SAAS;IAEtB,OAAO,CAAC,kBAAkB,CAAoB;gBAElC,WAAW,EAAE,iBAAiB;IAIpC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CA0BzD;AAMD,qEAAqE;AACrE,qBAAa,cAAe,YAAW,IAAI;IACzC,QAAQ,CAAC,IAAI,aAAa;IAC1B,QAAQ,CAAC,WAAW,iCAAiC;IACrD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,SAAS;IAEtB,OAAO,CAAC,eAAe,CAAS;gBAEpB,MAAM,EAAE,MAAM,GAAG,IAAI;IAQ3B,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CA2DzD;AAMD,2EAA2E;AAC3E,qBAAa,uBAAwB,YAAW,IAAI;IAClD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,QAAQ,CAAC,WAAW,gDAAgD;IACpE,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,QAAQ;IAC5B,QAAQ,CAAC,IAAI,QAAQ;IAEf,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAsBzD;AAMD,6DAA6D;AAC7D,qBAAa,sBAAuB,YAAW,IAAI;IACjD,QAAQ,CAAC,IAAI,sBAAsB;IACnC,QAAQ,CAAC,WAAW,oCAAoC;IACxD,QAAQ,CAAC,SAAS,QAAQ;IAC1B,QAAQ,CAAC,WAAW,SAAS;IAC7B,QAAQ,CAAC,IAAI,SAAS;IAEtB,OAAO,CAAC,kBAAkB,CAAoB;gBAElC,WAAW,EAAE,iBAAiB;IAIpC,OAAO,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAgBzD;AAMD,sEAAsE;AACtE,qBAAa,mBAAoB,YAAW,IAAI;IAC9C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,QAAQ,CAAC,WAAW,8BAA8B;IAClD,QAAQ,CAAC,SAAS,SAAS;IAC3B,QAAQ,CAAC,WAAW,SAAS;IAC7B,QAAQ,CAAC,IAAI,QAAQ;IAEf,OAAO,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;CAI1D;AAMD,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,QAAQ,CAAC;IACnB,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC;IAChB,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACxC,iBAAiB,EAAE,iBAAiB,CAAC;CACtC;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAcnF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAYnF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAOlF;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,oBAAoB,GAAG,iBAAiB,CAYtF"}

package/dist/builtin-steps.js

@@ -10,8 +10,7 @@ import { Value } from '@sinclair/typebox/value';
 import { jsonSchemaToTypeBox } from './schema/loader.js';
 import { createApprovalRequest } from './approval.js';
 import { Context } from './context.js';
-import { ExecutionCancelledError } from './cancel.js';
-import { ModuleTimeoutError, SchemaValidationError, } from './errors.js';
+import { ACLDeniedError, ApprovalDeniedError, ApprovalPendingError, ApprovalTimeoutError, InvalidInputError, ModuleNotFoundError, ModuleTimeoutError, SchemaValidationError, } from './errors.js';
 import { MiddlewareChainError } from './middleware/manager.js';
 import { guardCallChain } from './utils/call-chain.js';
 import { DEFAULT_ANNOTATIONS } from './module.js';
@@ -78,10 +77,11 @@ function dictToAnnotations(dict) {
 // ---------------------------------------------------------------------------
 /** Creates or inherits execution Context and sets the global deadline. */
 export class BuiltinContextCreation {
-    name = 'builtin.context_creation';
+    name = 'context_creation';
     description = 'Create or inherit execution context and set global deadline';
     removable = false;
     replaceable = false;
+    pure = true;
     _globalTimeout;
     constructor(config) {
         if (config !== null) {
@@ -104,14 +104,15 @@ export class BuiltinContextCreation {
     }
 }
 // ---------------------------------------------------------------------------
-// 2. BuiltinSafetyCheck
+// 2. BuiltinCallChainGuard
 // ---------------------------------------------------------------------------
 /** Validates call chain depth, repeat limits, and cancel token. */
-export class BuiltinSafetyCheck {
-    name = 'builtin.safety_check';
+export class BuiltinCallChainGuard {
+    name = 'call_chain_guard';
     description = 'Call chain guard: depth, repeat limits, cancel token';
     removable = true;
     replaceable = true;
+    pure = true;
     _maxCallDepth;
     _maxModuleRepeat;
     constructor(config) {
@@ -125,31 +126,12 @@ export class BuiltinSafetyCheck {
         }
     }
     async execute(ctx) {
-        // Check cancel token first
+        // Check cancel token first — throw directly for error type preservation
         if (ctx.context.cancelToken !== null) {
-            try {
-                ctx.context.cancelToken.check();
-            }
-            catch (e) {
-                if (e instanceof ExecutionCancelledError) {
-                    return {
-                        action: 'abort',
-                        explanation: `Execution cancelled: ${e.message}`,
-                    };
-                }
-                throw e;
-            }
-        }
-        // Call chain safety guard
-        try {
-            guardCallChain(ctx.moduleId, ctx.context.callChain, this._maxCallDepth, this._maxModuleRepeat);
-        }
-        catch (e) {
-            return {
-                action: 'abort',
-                explanation: e instanceof Error ? e.message : String(e),
-            };
+            ctx.context.cancelToken.check();
         }
+        // Call chain safety guard — throws CallDepthExceededError, CircularCallError, etc.
+        guardCallChain(ctx.moduleId, ctx.context.callChain, this._maxCallDepth, this._maxModuleRepeat);
         return { action: 'continue' };
     }
 }
@@ -158,10 +140,11 @@ export class BuiltinSafetyCheck {
 // ---------------------------------------------------------------------------
 /** Resolves the module from the registry and sets ctx.module. */
 export class BuiltinModuleLookup {
-    name = 'builtin.module_lookup';
+    name = 'module_lookup';
     description = 'Resolve module from registry';
     removable = false;
     replaceable = false;
+    pure = true;
     _registry;
     constructor(registry) {
         this._registry = registry;
@@ -169,10 +152,7 @@ export class BuiltinModuleLookup {
     async execute(ctx) {
         const mod = this._registry.get(ctx.moduleId);
         if (mod === null) {
-            return {
-                action: 'abort',
-                explanation: `Module not found: ${ctx.moduleId}`,
-            };
+            throw new ModuleNotFoundError(ctx.moduleId);
         }
         ctx.module = mod;
         return { action: 'continue' };
@@ -183,24 +163,26 @@ export class BuiltinModuleLookup {
 // ---------------------------------------------------------------------------
 /** Enforces access control via the ACL provider. */
 export class BuiltinACLCheck {
-    name = 'builtin.acl_check';
+    name = 'acl_check';
     description = 'Access control list enforcement';
     removable = true;
     replaceable = true;
+    pure = true;
     _acl;
     constructor(acl) {
         this._acl = acl;
     }
+    /** Update the ACL provider at runtime. */
+    setAcl(acl) {
+        this._acl = acl;
+    }
     async execute(ctx) {
         if (this._acl === null) {
             return { action: 'continue' };
         }
         const allowed = this._acl.check(ctx.context.callerId, ctx.moduleId, ctx.context);
         if (!allowed) {
-            return {
-                action: 'abort',
-                explanation: `Access denied: ${ctx.context.callerId} -> ${ctx.moduleId}`,
-            };
+            throw new ACLDeniedError(ctx.context.callerId, ctx.moduleId);
         }
         return { action: 'continue' };
     }
@@ -210,14 +192,19 @@ export class BuiltinACLCheck {
 // ---------------------------------------------------------------------------
 /** Handles approval flow for modules that require explicit approval. */
 export class BuiltinApprovalGate {
-    name = 'builtin.approval_gate';
+    name = 'approval_gate';
     description = 'Approval handler flow';
     removable = true;
     replaceable = true;
+    pure = false;
     _handler;
     constructor(handler) {
         this._handler = handler;
     }
+    /** Update the approval handler at runtime. */
+    setApprovalHandler(handler) {
+        this._handler = handler;
+    }
     async execute(ctx) {
         if (this._handler === null) {
             return { action: 'continue' };
@@ -273,22 +260,13 @@ export class BuiltinApprovalGate {
             return { action: 'continue' };
         }
         if (result.status === 'timeout') {
-            return {
-                action: 'abort',
-                explanation: `Approval timed out for module ${ctx.moduleId}`,
-            };
+            throw new ApprovalTimeoutError(result, ctx.moduleId);
         }
         if (result.status === 'pending') {
-            return {
-                action: 'abort',
-                explanation: `Approval pending for module ${ctx.moduleId}: ${result.approvalId ?? 'unknown'}`,
-            };
+            throw new ApprovalPendingError(result, ctx.moduleId);
         }
         // rejected or unknown
-        return {
-            action: 'abort',
-            explanation: `Approval denied for module ${ctx.moduleId}: ${result.reason ?? 'no reason'}`,
-        };
+        throw new ApprovalDeniedError(result, ctx.moduleId);
     }
 }
 // ---------------------------------------------------------------------------
@@ -296,10 +274,11 @@ export class BuiltinApprovalGate {
 // ---------------------------------------------------------------------------
 /** Validates inputs against module schema and redacts sensitive fields. */
 export class BuiltinInputValidation {
-    name = 'builtin.input_validation';
+    name = 'input_validation';
     description = 'Schema validation and redaction for inputs';
     removable = true;
     replaceable = true;
+    pure = true;
     async execute(ctx) {
         const mod = ctx.module;
         const inputSchema = resolveSchema(mod, 'inputSchema');
@@ -307,18 +286,8 @@ export class BuiltinInputValidation {
             ctx.validatedInputs = ctx.inputs;
             return { action: 'continue' };
         }
-        try {
-            validateSchema(inputSchema, ctx.inputs, 'Input');
-        }
-        catch (e) {
-            if (e instanceof SchemaValidationError) {
-                return {
-                    action: 'abort',
-                    explanation: e.message,
-                };
-            }
-            throw e;
-        }
+        // Throws SchemaValidationError directly for error type preservation
+        validateSchema(inputSchema, ctx.inputs, 'Input');
         ctx.context.redactedInputs = redactSensitive(ctx.inputs, inputSchema);
         ctx.validatedInputs = ctx.inputs;
         return { action: 'continue' };
@@ -329,25 +298,31 @@ export class BuiltinInputValidation {
 // ---------------------------------------------------------------------------
 /** Executes before-middleware chain via MiddlewareManager. */
 export class BuiltinMiddlewareBefore {
-    name = 'builtin.middleware_before';
+    name = 'middleware_before';
     description = 'Execute before-middleware chain';
     removable = true;
     replaceable = false;
+    pure = false;
     _middlewareManager;
     constructor(middlewares) {
         this._middlewareManager = middlewares;
     }
     async execute(ctx) {
         try {
-            const [effectiveInputs] = this._middlewareManager.executeBefore(ctx.moduleId, ctx.inputs, ctx.context);
+            const [effectiveInputs, executedMiddlewares] = this._middlewareManager.executeBefore(ctx.moduleId, ctx.inputs, ctx.context);
             ctx.inputs = effectiveInputs;
+            ctx.executedMiddlewares = executedMiddlewares;
         }
         catch (e) {
             if (e instanceof MiddlewareChainError) {
-                return {
-                    action: 'abort',
-                    explanation: `Middleware before-chain error: ${e.original.message}`,
-                };
+                ctx.executedMiddlewares = e.executedMiddlewares;
+                // Try on_error recovery
+                const recovery = this._middlewareManager.executeOnError(ctx.moduleId, ctx.inputs, e.original, ctx.context, e.executedMiddlewares);
+                if (recovery !== null) {
+                    ctx.output = recovery;
+                    return { action: 'skip_to', skipTo: 'return_result' };
+                }
+                throw e.original;
             }
             throw e;
         }
@@ -359,10 +334,11 @@ export class BuiltinMiddlewareBefore {
 // ---------------------------------------------------------------------------
 /** Executes the module with timeout enforcement. Sets ctx.output. */
 export class BuiltinExecute {
-    name = 'builtin.execute';
+    name = 'execute';
     description = 'Execute module with timeout';
     removable = false;
     replaceable = true;
+    pure = false;
     _defaultTimeout;
     constructor(config) {
         if (config !== null) {
@@ -374,20 +350,9 @@ export class BuiltinExecute {
     }
     async execute(ctx) {
         const mod = ctx.module;
-        // Cancel check before execution
+        // Cancel check before execution — throw directly for error type preservation
         if (ctx.context.cancelToken !== null) {
-            try {
-                ctx.context.cancelToken.check();
-            }
-            catch (e) {
-                if (e instanceof ExecutionCancelledError) {
-                    return {
-                        action: 'abort',
-                        explanation: `Execution cancelled: ${e.message}`,
-                    };
-                }
-                throw e;
-            }
+            ctx.context.cancelToken.check();
         }
         // Streaming path: store the generator on ctx.outputStream
         if (ctx.stream) {
@@ -404,10 +369,7 @@ export class BuiltinExecute {
         if (globalDeadline !== undefined) {
             const remaining = globalDeadline - Date.now();
             if (remaining <= 0) {
-                return {
-                    action: 'abort',
-                    explanation: `Module timed out: ${ctx.moduleId} (global deadline exceeded)`,
-                };
+                throw new ModuleTimeoutError(ctx.moduleId, 0);
             }
             if (timeoutMs === 0 || remaining < timeoutMs) {
                 timeoutMs = remaining;
@@ -415,37 +377,23 @@ export class BuiltinExecute {
         }
         const executeFn = mod['execute'];
         if (typeof executeFn !== 'function') {
-            return {
-                action: 'abort',
-                explanation: `Module '${ctx.moduleId}' has no execute method`,
-            };
+            throw new InvalidInputError(`Module '${ctx.moduleId}' has no execute method`);
         }
         const executionPromise = Promise.resolve(executeFn
             .call(mod, ctx.inputs, ctx.context));
-        try {
-            if (timeoutMs === 0) {
-                ctx.output = await executionPromise;
-            }
-            else {
-                let timer;
-                const timeoutPromise = new Promise((_, reject) => {
-                    timer = setTimeout(() => {
-                        reject(new ModuleTimeoutError(ctx.moduleId, timeoutMs));
-                    }, timeoutMs);
-                });
-                ctx.output = await Promise.race([executionPromise, timeoutPromise]).finally(() => {
-                    clearTimeout(timer);
-                });
-            }
+        if (timeoutMs === 0) {
+            ctx.output = await executionPromise;
         }
-        catch (e) {
-            if (e instanceof ModuleTimeoutError) {
-                return {
-                    action: 'abort',
-                    explanation: `Module timed out: ${ctx.moduleId} (${timeoutMs}ms)`,
-                };
-            }
-            throw e;
+        else {
+            let timer;
+            const timeoutPromise = new Promise((_, reject) => {
+                timer = setTimeout(() => {
+                    reject(new ModuleTimeoutError(ctx.moduleId, timeoutMs));
+                }, timeoutMs);
+            });
+            ctx.output = await Promise.race([executionPromise, timeoutPromise]).finally(() => {
+                clearTimeout(timer);
+            });
         }
         return { action: 'continue' };
     }
@@ -455,30 +403,26 @@ export class BuiltinExecute {
 // ---------------------------------------------------------------------------
 /** Validates output against module schema and redacts sensitive fields. */
 export class BuiltinOutputValidation {
-    name = 'builtin.output_validation';
+    name = 'output_validation';
     description = 'Schema validation and redaction for output';
     removable = true;
     replaceable = true;
+    pure = true;
     async execute(ctx) {
+        // Skip when no output is available: streaming (Phase 3 handles it),
+        // dry_run (execute step was skipped), etc.
+        if (ctx.output == null) {
+            return { action: 'continue' };
+        }
         const mod = ctx.module;
-        const output = ctx.output ?? {};
+        const output = ctx.output;
         const outputSchema = resolveSchema(mod, 'outputSchema');
         if (outputSchema == null) {
             ctx.validatedOutput = output;
             return { action: 'continue' };
         }
-        try {
-            validateSchema(outputSchema, output, 'Output');
-        }
-        catch (e) {
-            if (e instanceof SchemaValidationError) {
-                return {
-                    action: 'abort',
-                    explanation: e.message,
-                };
-            }
-            throw e;
-        }
+        // Throws SchemaValidationError directly for error type preservation
+        validateSchema(outputSchema, output, 'Output');
         ctx.validatedOutput = output;
         return { action: 'continue' };
     }
@@ -488,16 +432,21 @@ export class BuiltinOutputValidation {
 // ---------------------------------------------------------------------------
 /** Executes after-middleware chain via MiddlewareManager. */
 export class BuiltinMiddlewareAfter {
-    name = 'builtin.middleware_after';
+    name = 'middleware_after';
     description = 'Execute after-middleware chain';
     removable = true;
     replaceable = false;
+    pure = false;
     _middlewareManager;
     constructor(middlewares) {
         this._middlewareManager = middlewares;
     }
     async execute(ctx) {
-        const output = ctx.output ?? {};
+        // Skip when no output is available (streaming Phase 1, dry_run, etc.)
+        if (ctx.output == null) {
+            return { action: 'continue' };
+        }
+        const output = ctx.output;
         const transformed = this._middlewareManager.executeAfter(ctx.moduleId, ctx.inputs, output, ctx.context);
         ctx.output = transformed;
         return { action: 'continue' };
@@ -508,10 +457,11 @@ export class BuiltinMiddlewareAfter {
 // ---------------------------------------------------------------------------
 /** Finalizes the pipeline result. Output is already on ctx.output. */
 export class BuiltinReturnResult {
-    name = 'builtin.return_result';
+    name = 'return_result';
     description = 'Finalize pipeline result';
     removable = false;
     replaceable = false;
+    pure = true;
     async execute(_ctx) {
         // No-op: output is already on ctx.output from previous steps
         return { action: 'continue' };
@@ -521,12 +471,12 @@ export class BuiltinReturnResult {
 export function buildStandardStrategy(deps) {
     return new ExecutionStrategy('standard', [
         new BuiltinContextCreation(deps.config),
-        new BuiltinSafetyCheck(deps.config),
+        new BuiltinCallChainGuard(deps.config),
         new BuiltinModuleLookup(deps.registry),
         new BuiltinACLCheck(deps.acl),
         new BuiltinApprovalGate(deps.approvalHandler),
-        new BuiltinInputValidation(),
         new BuiltinMiddlewareBefore(deps.middlewareManager),
+        new BuiltinInputValidation(),
         new BuiltinExecute(deps.config),
         new BuiltinOutputValidation(),
         new BuiltinMiddlewareAfter(deps.middlewareManager),
@@ -540,10 +490,10 @@ export function buildStandardStrategy(deps) {
 export function buildInternalStrategy(deps) {
     return new ExecutionStrategy('internal', [
         new BuiltinContextCreation(deps.config),
-        new BuiltinSafetyCheck(deps.config),
+        new BuiltinCallChainGuard(deps.config),
         new BuiltinModuleLookup(deps.registry),
-        new BuiltinInputValidation(),
         new BuiltinMiddlewareBefore(deps.middlewareManager),
+        new BuiltinInputValidation(),
         new BuiltinExecute(deps.config),
         new BuiltinOutputValidation(),
         new BuiltinMiddlewareAfter(deps.middlewareManager),
@@ -569,11 +519,11 @@ export function buildTestingStrategy(deps) {
 export function buildPerformanceStrategy(deps) {
     return new ExecutionStrategy('performance', [
         new BuiltinContextCreation(deps.config),
-        new BuiltinSafetyCheck(deps.config),
+        new BuiltinCallChainGuard(deps.config),
         new BuiltinModuleLookup(deps.registry),
         new BuiltinACLCheck(deps.acl),
-        new BuiltinInputValidation(),
         new BuiltinMiddlewareBefore(deps.middlewareManager),
+        new BuiltinInputValidation(),
         new BuiltinExecute(deps.config),
         new BuiltinMiddlewareAfter(deps.middlewareManager),
         new BuiltinReturnResult(),