effect-agent 0.1.0-beta.11 → 0.1.0-beta.111

package/dist/capabilities/Approval.mjs

@@ -0,0 +1,226 @@
+import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.mjs";
+import { RunId, ThreadId, ToolCallId } from "../core/Identifiers.mjs";
+import { n as utf8ByteLength } from "../utf8-DchGZRBd.mjs";
+import { RedactedPreview, Redactor } from "./Redaction.mjs";
+import { Clock, Context, DateTime, Duration, Effect, Layer, Ref, Schema } from "effect";
+//#region src/capabilities/Approval.ts
+var Approval_exports = /* @__PURE__ */ __exportAll({
+	ApprovalApproved: () => ApprovalApproved,
+	ApprovalAudit: () => ApprovalAudit,
+	ApprovalAuditEvent: () => ApprovalAuditEvent,
+	ApprovalAuditEvents: () => ApprovalAuditEvents,
+	ApprovalAuditLimitExceeded: () => ApprovalAuditLimitExceeded,
+	ApprovalAuditMemoryLive: () => ApprovalAuditMemoryLive,
+	ApprovalDecision: () => ApprovalDecision,
+	ApprovalDecisionMismatch: () => ApprovalDecisionMismatch,
+	ApprovalDecisionRecorded: () => ApprovalDecisionRecorded,
+	ApprovalDenied: () => ApprovalDenied,
+	ApprovalDenyAll: () => ApprovalDenyAll,
+	ApprovalRequest: () => ApprovalRequest,
+	ApprovalRequestDraft: () => ApprovalRequestDraft,
+	ApprovalRequestRecorded: () => ApprovalRequestRecorded,
+	ApprovalResolver: () => ApprovalResolver,
+	ApprovalResolverError: () => ApprovalResolverError,
+	ApprovalTimedOut: () => ApprovalTimedOut,
+	makeApprovalRequest: () => makeApprovalRequest,
+	requestApproval: () => requestApproval
+});
+const MAX_APPROVAL_TARGETS = 32;
+const MAX_APPROVAL_TARGET_BYTES = 65536;
+const MAX_APPROVAL_AUDIT_EVENTS = 2048;
+const ApprovalTargets = Schema.Array(Schema.String.check(Schema.isMaxLength(2048))).check(Schema.isMaxLength(MAX_APPROVAL_TARGETS)).pipe(Schema.refine((targets) => targets.reduce((total, target) => total + utf8ByteLength(target), 0) <= MAX_APPROVAL_TARGET_BYTES, { expected: `approval targets totaling at most ${MAX_APPROVAL_TARGET_BYTES} UTF-8 bytes` }));
+const ApprovalRequestFields = {
+	requestId: Schema.NonEmptyString,
+	runId: RunId,
+	threadId: ThreadId,
+	toolCallId: ToolCallId,
+	toolName: Schema.NonEmptyString,
+	actionSummary: Schema.String.check(Schema.isMaxLength(2048)),
+	resourceTargets: ApprovalTargets,
+	risk: Schema.Literals([
+		"low",
+		"medium",
+		"high",
+		"critical"
+	]),
+	expiresAt: Schema.DateTimeUtcFromString,
+	denial: Schema.Literals(["terminal", "recoverable"])
+};
+/** Decoded approval metadata before the Redactor owns Tool input preview creation. */
+var ApprovalRequestDraft = class extends Schema.Class("@effect-agent/capabilities/ApprovalRequestDraft")(ApprovalRequestFields) {};
+/** Fully decoded, structurally redacted approval input. */
+var ApprovalRequest = class extends Schema.Class("@effect-agent/capabilities/ApprovalRequest")({
+	...ApprovalRequestFields,
+	redactedInputPreview: RedactedPreview
+}) {};
+var ApprovalApproved = class extends Schema.TaggedClass()("ApprovalApproved", {
+	requestId: Schema.NonEmptyString,
+	decidedAt: Schema.DateTimeUtcFromString,
+	resolver: Schema.NonEmptyString
+}) {};
+var ApprovalDenied = class extends Schema.TaggedClass()("ApprovalDenied", {
+	requestId: Schema.NonEmptyString,
+	decidedAt: Schema.DateTimeUtcFromString,
+	resolver: Schema.NonEmptyString,
+	reason: Schema.String.check(Schema.isMaxLength(2048)),
+	timedOut: Schema.Boolean
+}) {};
+const ApprovalDecision = Schema.Union([ApprovalApproved, ApprovalDenied]);
+/** Resolver infrastructure failed before it could make a policy decision. */
+var ApprovalResolverError = class extends Schema.TaggedError()("ApprovalResolverError", { message: Schema.String }) {};
+/** The resolver explicitly observed its request deadline; callers turn this into a denial. */
+var ApprovalTimedOut = class extends Schema.TaggedError()("ApprovalTimedOut", { requestId: Schema.NonEmptyString }) {};
+/** First-class approval authority. Interactive, policy, and remote adapters implement this service. */
+var ApprovalResolver = class extends Context.Service()("@effect-agent/capabilities/ApprovalResolver") {};
+var ApprovalRequestRecorded = class extends Schema.TaggedClass()("ApprovalRequestRecorded", {
+	sequence: Schema.Natural,
+	recordedAt: Schema.DateTimeUtcFromString,
+	request: ApprovalRequest
+}) {};
+var ApprovalDecisionRecorded = class extends Schema.TaggedClass()("ApprovalDecisionRecorded", {
+	sequence: Schema.Natural,
+	recordedAt: Schema.DateTimeUtcFromString,
+	decision: ApprovalDecision
+}) {};
+const ApprovalAuditEvent = Schema.Union([ApprovalRequestRecorded, ApprovalDecisionRecorded]);
+const ApprovalAuditEvents = Schema.Array(ApprovalAuditEvent).check(Schema.isMaxLength(MAX_APPROVAL_AUDIT_EVENTS));
+var ApprovalAuditLimitExceeded = class extends Schema.TaggedError()("ApprovalAuditLimitExceeded", {
+	limitValue: Schema.Natural,
+	observedValue: Schema.Natural
+}) {};
+/** A resolver or audit sink tried to associate a decision with another request. */
+var ApprovalDecisionMismatch = class extends Schema.TaggedError()("ApprovalDecisionMismatch", {
+	expectedRequestId: Schema.NonEmptyString,
+	observedRequestId: Schema.NonEmptyString
+}) {};
+/** P2 semantic audit sink; durable runtimes replace this with canonical records. */
+var ApprovalAudit = class extends Context.Service()("@effect-agent/capabilities/ApprovalAudit") {};
+/** Scoped in-memory audit projection with monotonic event order. */
+const ApprovalAuditMemoryLive = Layer.effect(ApprovalAudit, Effect.gen(function* () {
+	const state = yield* Ref.make({
+		events: [],
+		pending: /* @__PURE__ */ new Set()
+	});
+	return ApprovalAudit.of({
+		recordRequest: (request) => Effect.gen(function* () {
+			const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));
+			const error = yield* Ref.modify(state, (current) => {
+				const reservedSize = current.events.length + current.pending.size + 2;
+				if (reservedSize > MAX_APPROVAL_AUDIT_EVENTS) return [ApprovalAuditLimitExceeded.make({
+					limitValue: MAX_APPROVAL_AUDIT_EVENTS,
+					observedValue: reservedSize
+				}), current];
+				const event = ApprovalRequestRecorded.make({
+					sequence: current.events.length,
+					recordedAt,
+					request
+				});
+				return [void 0, {
+					events: [...current.events, event],
+					pending: new Set(current.pending).add(request.requestId)
+				}];
+			});
+			if (error !== void 0) return yield* error;
+		}),
+		recordDecision: (decision) => Effect.gen(function* () {
+			const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));
+			const error = yield* Ref.modify(state, (current) => {
+				if (!current.pending.has(decision.requestId)) return [ApprovalDecisionMismatch.make({
+					expectedRequestId: [...current.pending][0] ?? "no-pending-request",
+					observedRequestId: decision.requestId
+				}), current];
+				const pending = new Set(current.pending);
+				pending.delete(decision.requestId);
+				const event = ApprovalDecisionRecorded.make({
+					sequence: current.events.length,
+					recordedAt,
+					decision
+				});
+				return [void 0, {
+					events: [...current.events, event],
+					pending
+				}];
+			});
+			if (error !== void 0) return yield* error;
+		}),
+		events: Ref.get(state).pipe(Effect.map((current) => current.events))
+	});
+}));
+/** Construct an ApprovalRequest only after decoded input passes the configured Redactor. */
+const makeApprovalRequest = Effect.fn("makeApprovalRequest")(function* (draft, decodedToolInput) {
+	const redactedInputPreview = yield* (yield* Redactor).redact(decodedToolInput);
+	return ApprovalRequest.make({
+		requestId: draft.requestId,
+		runId: draft.runId,
+		threadId: draft.threadId,
+		toolCallId: draft.toolCallId,
+		toolName: draft.toolName,
+		actionSummary: draft.actionSummary,
+		resourceTargets: draft.resourceTargets,
+		risk: draft.risk,
+		expiresAt: draft.expiresAt,
+		denial: draft.denial,
+		redactedInputPreview
+	});
+});
+const timeoutDenial = (request, decidedAt) => ApprovalDenied.make({
+	requestId: request.requestId,
+	decidedAt,
+	resolver: "effect-agent.timeout-deny",
+	reason: "Approval request expired before a decision was available",
+	timedOut: true
+});
+/**
+* Resolve with fail-closed deadline semantics and record request/decision audit
+* events around every successful, denied, timed-out, or resolver-failed
+* resolution. A resolver infrastructure failure records a synthetic denial so
+* the audit reservation is released before the typed error propagates.
+*/
+const requestApproval = Effect.fn("requestApproval")(function* (request) {
+	const audit = yield* ApprovalAudit;
+	yield* audit.recordRequest(request);
+	const nowMillis = yield* Clock.currentTimeMillis;
+	const now = DateTime.toUtc(DateTime.makeUnsafe(nowMillis));
+	const remainingMillis = DateTime.toEpochMillis(request.expiresAt) - nowMillis;
+	let decision;
+	if (remainingMillis <= 0) decision = timeoutDenial(request, now);
+	else decision = yield* (yield* ApprovalResolver).request(request).pipe(Effect.timeoutOrElse({
+		duration: Duration.millis(remainingMillis),
+		orElse: () => Clock.currentTimeMillis.pipe(Effect.map((millis) => timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis)))))
+	}), Effect.catchTag("ApprovalTimedOut", () => Clock.currentTimeMillis.pipe(Effect.map((millis) => timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis)))))), Effect.tapError(() => Clock.currentTimeMillis.pipe(Effect.flatMap((millis) => audit.recordDecision(ApprovalDenied.make({
+		requestId: request.requestId,
+		decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),
+		resolver: "effect-agent.resolver-error",
+		reason: "Approval resolver failed before making a policy decision",
+		timedOut: false
+	}))))));
+	if (decision.requestId !== request.requestId) {
+		const mismatch = ApprovalDecisionMismatch.make({
+			expectedRequestId: request.requestId,
+			observedRequestId: decision.requestId
+		});
+		const denied = ApprovalDenied.make({
+			requestId: request.requestId,
+			decidedAt: DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis)),
+			resolver: "effect-agent.correlation-check",
+			reason: "Approval resolver returned a decision for another request",
+			timedOut: false
+		});
+		yield* audit.recordDecision(denied);
+		return yield* mismatch;
+	}
+	yield* audit.recordDecision(decision);
+	return decision;
+});
+/** Deterministic policy layer for tests and deny-by-default deployments. */
+const ApprovalDenyAll = Layer.succeed(ApprovalResolver)({ request: (request) => Clock.currentTimeMillis.pipe(Effect.map((millis) => ApprovalDenied.make({
+	requestId: request.requestId,
+	decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),
+	resolver: "effect-agent.deny-all",
+	reason: "No approving policy is configured",
+	timedOut: false
+}))) });
+//#endregion
+export { ApprovalApproved, ApprovalAudit, ApprovalAuditEvent, ApprovalAuditEvents, ApprovalAuditLimitExceeded, ApprovalAuditMemoryLive, ApprovalDecision, ApprovalDecisionMismatch, ApprovalDecisionRecorded, ApprovalDenied, ApprovalDenyAll, ApprovalRequest, ApprovalRequestDraft, ApprovalRequestRecorded, ApprovalResolver, ApprovalResolverError, ApprovalTimedOut, makeApprovalRequest, requestApproval, Approval_exports as t };
+
+//# sourceMappingURL=Approval.mjs.map

package/dist/capabilities/Approval.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Approval.mjs","names":[],"sources":["../../src/capabilities/Approval.ts"],"sourcesContent":["import { Clock, Context, DateTime, Duration, Effect, Layer, Ref, Schema } from \"effect\";\n\nimport { ThreadId, RunId, ToolCallId } from \"../core/Identifiers.ts\";\nimport { utf8ByteLength } from \"../core/internal/utf8.ts\";\nimport { RedactedPreview, Redactor, type RedactionError } from \"./Redaction.ts\";\n\nconst MAX_APPROVAL_TARGETS = 32;\nconst MAX_APPROVAL_TARGET_BYTES = 64 * 1024;\nconst MAX_APPROVAL_AUDIT_EVENTS = 2_048;\n\nconst ApprovalTargets = Schema.Array(Schema.String.check(Schema.isMaxLength(2 * 1024)))\n  .check(Schema.isMaxLength(MAX_APPROVAL_TARGETS))\n  .pipe(\n    Schema.refine(\n      (targets): targets is ReadonlyArray<string> =>\n        targets.reduce((total, target) => total + utf8ByteLength(target), 0) <=\n        MAX_APPROVAL_TARGET_BYTES,\n      { expected: `approval targets totaling at most ${MAX_APPROVAL_TARGET_BYTES} UTF-8 bytes` },\n    ),\n  );\n\nconst ApprovalRequestFields = {\n  requestId: Schema.NonEmptyString,\n  runId: RunId,\n  threadId: ThreadId,\n  toolCallId: ToolCallId,\n  toolName: Schema.NonEmptyString,\n  actionSummary: Schema.String.check(Schema.isMaxLength(2 * 1024)),\n  resourceTargets: ApprovalTargets,\n  risk: Schema.Literals([\"low\", \"medium\", \"high\", \"critical\"]),\n  expiresAt: Schema.DateTimeUtcFromString,\n  denial: Schema.Literals([\"terminal\", \"recoverable\"]),\n} as const;\n\n/** Decoded approval metadata before the Redactor owns Tool input preview creation. */\nexport class ApprovalRequestDraft extends Schema.Class<ApprovalRequestDraft>(\n  \"@effect-agent/capabilities/ApprovalRequestDraft\",\n)(ApprovalRequestFields) {}\n\n/** Fully decoded, structurally redacted approval input. */\nexport class ApprovalRequest extends Schema.Class<ApprovalRequest>(\n  \"@effect-agent/capabilities/ApprovalRequest\",\n)({\n  ...ApprovalRequestFields,\n  redactedInputPreview: RedactedPreview,\n}) {}\n\nexport class ApprovalApproved extends Schema.TaggedClass<ApprovalApproved>()(\"ApprovalApproved\", {\n  requestId: Schema.NonEmptyString,\n  decidedAt: Schema.DateTimeUtcFromString,\n  resolver: Schema.NonEmptyString,\n}) {}\n\nexport class ApprovalDenied extends Schema.TaggedClass<ApprovalDenied>()(\"ApprovalDenied\", {\n  requestId: Schema.NonEmptyString,\n  decidedAt: Schema.DateTimeUtcFromString,\n  resolver: Schema.NonEmptyString,\n  reason: Schema.String.check(Schema.isMaxLength(2 * 1024)),\n  timedOut: Schema.Boolean,\n}) {}\n\nexport const ApprovalDecision = Schema.Union([ApprovalApproved, ApprovalDenied]);\nexport type ApprovalDecision = typeof ApprovalDecision.Type;\n\n/** Resolver infrastructure failed before it could make a policy decision. */\nexport class ApprovalResolverError extends Schema.TaggedError<ApprovalResolverError>()(\n  \"ApprovalResolverError\",\n  { message: Schema.String },\n) {}\n\n/** The resolver explicitly observed its request deadline; callers turn this into a denial. */\nexport class ApprovalTimedOut extends Schema.TaggedError<ApprovalTimedOut>()(\"ApprovalTimedOut\", {\n  requestId: Schema.NonEmptyString,\n}) {}\n\n/** First-class approval authority. Interactive, policy, and remote adapters implement this service. */\nexport class ApprovalResolver extends Context.Service<\n  ApprovalResolver,\n  {\n    readonly request: (\n      request: ApprovalRequest,\n    ) => Effect.Effect<ApprovalDecision, ApprovalResolverError | ApprovalTimedOut>;\n  }\n>()(\"@effect-agent/capabilities/ApprovalResolver\") {}\n\nexport class ApprovalRequestRecorded extends Schema.TaggedClass<ApprovalRequestRecorded>()(\n  \"ApprovalRequestRecorded\",\n  {\n    sequence: Schema.Natural,\n    recordedAt: Schema.DateTimeUtcFromString,\n    request: ApprovalRequest,\n  },\n) {}\n\nexport class ApprovalDecisionRecorded extends Schema.TaggedClass<ApprovalDecisionRecorded>()(\n  \"ApprovalDecisionRecorded\",\n  {\n    sequence: Schema.Natural,\n    recordedAt: Schema.DateTimeUtcFromString,\n    decision: ApprovalDecision,\n  },\n) {}\n\nexport const ApprovalAuditEvent = Schema.Union([ApprovalRequestRecorded, ApprovalDecisionRecorded]);\nexport type ApprovalAuditEvent = typeof ApprovalAuditEvent.Type;\n\nexport const ApprovalAuditEvents = Schema.Array(ApprovalAuditEvent).check(\n  Schema.isMaxLength(MAX_APPROVAL_AUDIT_EVENTS),\n);\n\nexport class ApprovalAuditLimitExceeded extends Schema.TaggedError<ApprovalAuditLimitExceeded>()(\n  \"ApprovalAuditLimitExceeded\",\n  {\n    limitValue: Schema.Natural,\n    observedValue: Schema.Natural,\n  },\n) {}\n\n/** A resolver or audit sink tried to associate a decision with another request. */\nexport class ApprovalDecisionMismatch extends Schema.TaggedError<ApprovalDecisionMismatch>()(\n  \"ApprovalDecisionMismatch\",\n  {\n    expectedRequestId: Schema.NonEmptyString,\n    observedRequestId: Schema.NonEmptyString,\n  },\n) {}\n\n/** P2 semantic audit sink; durable runtimes replace this with canonical records. */\nexport class ApprovalAudit extends Context.Service<\n  ApprovalAudit,\n  {\n    readonly recordRequest: (\n      request: ApprovalRequest,\n    ) => Effect.Effect<void, ApprovalAuditLimitExceeded>;\n    readonly recordDecision: (\n      decision: ApprovalDecision,\n    ) => Effect.Effect<void, ApprovalAuditLimitExceeded | ApprovalDecisionMismatch>;\n    readonly events: Effect.Effect<ReadonlyArray<ApprovalAuditEvent>>;\n  }\n>()(\"@effect-agent/capabilities/ApprovalAudit\") {}\n\n/** Scoped in-memory audit projection with monotonic event order. */\nexport const ApprovalAuditMemoryLive = Layer.effect(\n  ApprovalAudit,\n  Effect.gen(function* () {\n    interface AuditState {\n      readonly events: ReadonlyArray<ApprovalAuditEvent>;\n      readonly pending: ReadonlySet<string>;\n    }\n    const state = yield* Ref.make<AuditState>({ events: [], pending: new Set() });\n\n    return ApprovalAudit.of({\n      recordRequest: (request) =>\n        Effect.gen(function* () {\n          const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));\n\n          const error = yield* Ref.modify(state, (current) => {\n            // Each accepted request atomically reserves room for its decision.\n            const reservedSize = current.events.length + current.pending.size + 2;\n\n            if (reservedSize > MAX_APPROVAL_AUDIT_EVENTS) {\n              return [\n                ApprovalAuditLimitExceeded.make({\n                  limitValue: MAX_APPROVAL_AUDIT_EVENTS,\n                  observedValue: reservedSize,\n                }),\n                current,\n              ] as const;\n            }\n\n            const event = ApprovalRequestRecorded.make({\n              sequence: current.events.length,\n              recordedAt,\n              request,\n            });\n\n            return [\n              undefined,\n              {\n                events: [...current.events, event],\n                pending: new Set(current.pending).add(request.requestId),\n              },\n            ] as const;\n          });\n\n          if (error !== undefined) return yield* error;\n        }),\n      recordDecision: (decision) =>\n        Effect.gen(function* () {\n          const recordedAt = DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis));\n\n          const error = yield* Ref.modify(state, (current) => {\n            if (!current.pending.has(decision.requestId)) {\n              return [\n                ApprovalDecisionMismatch.make({\n                  expectedRequestId: [...current.pending][0] ?? \"no-pending-request\",\n                  observedRequestId: decision.requestId,\n                }),\n                current,\n              ] as const;\n            }\n            const pending = new Set(current.pending);\n\n            pending.delete(decision.requestId);\n\n            const event = ApprovalDecisionRecorded.make({\n              sequence: current.events.length,\n              recordedAt,\n              decision,\n            });\n\n            return [\n              undefined,\n              {\n                events: [...current.events, event],\n                pending,\n              },\n            ] as const;\n          });\n\n          if (error !== undefined) return yield* error;\n        }),\n      events: Ref.get(state).pipe(Effect.map((current) => current.events)),\n    });\n  }),\n);\n\n/** Construct an ApprovalRequest only after decoded input passes the configured Redactor. */\nexport const makeApprovalRequest = Effect.fn(\"makeApprovalRequest\")(function* (\n  draft: ApprovalRequestDraft,\n  decodedToolInput: unknown,\n): Effect.fn.Return<ApprovalRequest, RedactionError, Redactor> {\n  const redactor = yield* Redactor;\n  const redactedInputPreview = yield* redactor.redact(decodedToolInput);\n\n  return ApprovalRequest.make({\n    requestId: draft.requestId,\n    runId: draft.runId,\n    threadId: draft.threadId,\n    toolCallId: draft.toolCallId,\n    toolName: draft.toolName,\n    actionSummary: draft.actionSummary,\n    resourceTargets: draft.resourceTargets,\n    risk: draft.risk,\n    expiresAt: draft.expiresAt,\n    denial: draft.denial,\n    redactedInputPreview,\n  });\n});\n\nconst timeoutDenial = (request: ApprovalRequest, decidedAt: DateTime.Utc): ApprovalDenied =>\n  ApprovalDenied.make({\n    requestId: request.requestId,\n    decidedAt,\n    resolver: \"effect-agent.timeout-deny\",\n    reason: \"Approval request expired before a decision was available\",\n    timedOut: true,\n  });\n\n/**\n * Resolve with fail-closed deadline semantics and record request/decision audit\n * events around every successful, denied, timed-out, or resolver-failed\n * resolution. A resolver infrastructure failure records a synthetic denial so\n * the audit reservation is released before the typed error propagates.\n */\nexport const requestApproval = Effect.fn(\"requestApproval\")(function* (request: ApprovalRequest) {\n  const audit = yield* ApprovalAudit;\n\n  yield* audit.recordRequest(request);\n  const nowMillis = yield* Clock.currentTimeMillis;\n  const now = DateTime.toUtc(DateTime.makeUnsafe(nowMillis));\n  const remainingMillis = DateTime.toEpochMillis(request.expiresAt) - nowMillis;\n\n  let decision: ApprovalDecision;\n\n  if (remainingMillis <= 0) {\n    decision = timeoutDenial(request, now);\n  } else {\n    const resolver = yield* ApprovalResolver;\n\n    decision = yield* resolver.request(request).pipe(\n      Effect.timeoutOrElse({\n        duration: Duration.millis(remainingMillis),\n        orElse: () =>\n          Clock.currentTimeMillis.pipe(\n            Effect.map((millis) =>\n              timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis))),\n            ),\n          ),\n      }),\n      Effect.catchTag(\"ApprovalTimedOut\", () =>\n        Clock.currentTimeMillis.pipe(\n          Effect.map((millis) =>\n            timeoutDenial(request, DateTime.toUtc(DateTime.makeUnsafe(millis))),\n          ),\n        ),\n      ),\n      Effect.tapError(() =>\n        Clock.currentTimeMillis.pipe(\n          Effect.flatMap((millis) =>\n            audit.recordDecision(\n              ApprovalDenied.make({\n                requestId: request.requestId,\n                decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),\n                resolver: \"effect-agent.resolver-error\",\n                reason: \"Approval resolver failed before making a policy decision\",\n                timedOut: false,\n              }),\n            ),\n          ),\n        ),\n      ),\n    );\n  }\n  if (decision.requestId !== request.requestId) {\n    const mismatch = ApprovalDecisionMismatch.make({\n      expectedRequestId: request.requestId,\n      observedRequestId: decision.requestId,\n    });\n\n    const denied = ApprovalDenied.make({\n      requestId: request.requestId,\n      decidedAt: DateTime.toUtc(DateTime.makeUnsafe(yield* Clock.currentTimeMillis)),\n      resolver: \"effect-agent.correlation-check\",\n      reason: \"Approval resolver returned a decision for another request\",\n      timedOut: false,\n    });\n\n    yield* audit.recordDecision(denied);\n\n    return yield* mismatch;\n  }\n  yield* audit.recordDecision(decision);\n\n  return decision;\n});\n\n/** Deterministic policy layer for tests and deny-by-default deployments. */\nexport const ApprovalDenyAll = Layer.succeed(ApprovalResolver)({\n  request: (request) =>\n    Clock.currentTimeMillis.pipe(\n      Effect.map((millis) =>\n        ApprovalDenied.make({\n          requestId: request.requestId,\n          decidedAt: DateTime.toUtc(DateTime.makeUnsafe(millis)),\n          resolver: \"effect-agent.deny-all\",\n          reason: \"No approving policy is configured\",\n          timedOut: false,\n        }),\n      ),\n    ),\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA,MAAM,uBAAuB;AAC7B,MAAM,4BAA4B;AAClC,MAAM,4BAA4B;AAElC,MAAM,kBAAkB,OAAO,MAAM,OAAO,OAAO,MAAM,OAAO,YAAY,IAAQ,CAAC,CAAC,CAAC,CACpF,MAAM,OAAO,YAAY,oBAAoB,CAAC,CAAC,CAC/C,KACC,OAAO,QACJ,YACC,QAAQ,QAAQ,OAAO,WAAW,QAAQ,eAAe,MAAM,GAAG,CAAC,KACnE,2BACF,EAAE,UAAU,qCAAqC,0BAA0B,cAAc,CAC3F,CACF;AAEF,MAAM,wBAAwB;CAC5B,WAAW,OAAO;CAClB,OAAO;CACP,UAAU;CACV,YAAY;CACZ,UAAU,OAAO;CACjB,eAAe,OAAO,OAAO,MAAM,OAAO,YAAY,IAAQ,CAAC;CAC/D,iBAAiB;CACjB,MAAM,OAAO,SAAS;EAAC;EAAO;EAAU;EAAQ;CAAU,CAAC;CAC3D,WAAW,OAAO;CAClB,QAAQ,OAAO,SAAS,CAAC,YAAY,aAAa,CAAC;AACrD;;AAGA,IAAa,uBAAb,cAA0C,OAAO,MAC/C,iDACF,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;;AAG1B,IAAa,kBAAb,cAAqC,OAAO,MAC1C,4CACF,CAAC,CAAC;CACA,GAAG;CACH,sBAAsB;AACxB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB;CAC/F,WAAW,OAAO;CAClB,WAAW,OAAO;CAClB,UAAU,OAAO;AACnB,CAAC,CAAC,CAAC,CAAC;AAEJ,IAAa,iBAAb,cAAoC,OAAO,YAA4B,CAAC,CAAC,kBAAkB;CACzF,WAAW,OAAO;CAClB,WAAW,OAAO;CAClB,UAAU,OAAO;CACjB,QAAQ,OAAO,OAAO,MAAM,OAAO,YAAY,IAAQ,CAAC;CACxD,UAAU,OAAO;AACnB,CAAC,CAAC,CAAC,CAAC;AAEJ,MAAa,mBAAmB,OAAO,MAAM,CAAC,kBAAkB,cAAc,CAAC;;AAI/E,IAAa,wBAAb,cAA2C,OAAO,YAAmC,CAAC,CACpF,yBACA,EAAE,SAAS,OAAO,OAAO,CAC3B,CAAC,CAAC,CAAC;;AAGH,IAAa,mBAAb,cAAsC,OAAO,YAA8B,CAAC,CAAC,oBAAoB,EAC/F,WAAW,OAAO,eACpB,CAAC,CAAC,CAAC,CAAC;;AAGJ,IAAa,mBAAb,cAAsC,QAAQ,QAO5C,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC;AAEpD,IAAa,0BAAb,cAA6C,OAAO,YAAqC,CAAC,CACxF,2BACA;CACE,UAAU,OAAO;CACjB,YAAY,OAAO;CACnB,SAAS;AACX,CACF,CAAC,CAAC,CAAC;AAEH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,UAAU,OAAO;CACjB,YAAY,OAAO;CACnB,UAAU;AACZ,CACF,CAAC,CAAC,CAAC;AAEH,MAAa,qBAAqB,OAAO,MAAM,CAAC,yBAAyB,wBAAwB,CAAC;AAGlG,MAAa,sBAAsB,OAAO,MAAM,kBAAkB,CAAC,CAAC,MAClE,OAAO,YAAY,yBAAyB,CAC9C;AAEA,IAAa,6BAAb,cAAgD,OAAO,YAAwC,CAAC,CAC9F,8BACA;CACE,YAAY,OAAO;CACnB,eAAe,OAAO;AACxB,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,2BAAb,cAA8C,OAAO,YAAsC,CAAC,CAC1F,4BACA;CACE,mBAAmB,OAAO;CAC1B,mBAAmB,OAAO;AAC5B,CACF,CAAC,CAAC,CAAC;;AAGH,IAAa,gBAAb,cAAmC,QAAQ,QAWzC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC;;AAGjD,MAAa,0BAA0B,MAAM,OAC3C,eACA,OAAO,IAAI,aAAa;CAKtB,MAAM,QAAQ,OAAO,IAAI,KAAiB;EAAE,QAAQ,CAAC;EAAG,yBAAS,IAAI,IAAI;CAAE,CAAC;CAE5E,OAAO,cAAc,GAAG;EACtB,gBAAgB,YACd,OAAO,IAAI,aAAa;GACtB,MAAM,aAAa,SAAS,MAAM,SAAS,WAAW,OAAO,MAAM,iBAAiB,CAAC;GAErF,MAAM,QAAQ,OAAO,IAAI,OAAO,QAAQ,YAAY;IAElD,MAAM,eAAe,QAAQ,OAAO,SAAS,QAAQ,QAAQ,OAAO;IAEpE,IAAI,eAAe,2BACjB,OAAO,CACL,2BAA2B,KAAK;KAC9B,YAAY;KACZ,eAAe;IACjB,CAAC,GACD,OACF;IAGF,MAAM,QAAQ,wBAAwB,KAAK;KACzC,UAAU,QAAQ,OAAO;KACzB;KACA;IACF,CAAC;IAED,OAAO,CACL,KAAA,GACA;KACE,QAAQ,CAAC,GAAG,QAAQ,QAAQ,KAAK;KACjC,SAAS,IAAI,IAAI,QAAQ,OAAO,CAAC,CAAC,IAAI,QAAQ,SAAS;IACzD,CACF;GACF,CAAC;GAED,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO;EACzC,CAAC;EACH,iBAAiB,aACf,OAAO,IAAI,aAAa;GACtB,MAAM,aAAa,SAAS,MAAM,SAAS,WAAW,OAAO,MAAM,iBAAiB,CAAC;GAErF,MAAM,QAAQ,OAAO,IAAI,OAAO,QAAQ,YAAY;IAClD,IAAI,CAAC,QAAQ,QAAQ,IAAI,SAAS,SAAS,GACzC,OAAO,CACL,yBAAyB,KAAK;KAC5B,mBAAmB,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC,MAAM;KAC9C,mBAAmB,SAAS;IAC9B,CAAC,GACD,OACF;IAEF,MAAM,UAAU,IAAI,IAAI,QAAQ,OAAO;IAEvC,QAAQ,OAAO,SAAS,SAAS;IAEjC,MAAM,QAAQ,yBAAyB,KAAK;KAC1C,UAAU,QAAQ,OAAO;KACzB;KACA;IACF,CAAC;IAED,OAAO,CACL,KAAA,GACA;KACE,QAAQ,CAAC,GAAG,QAAQ,QAAQ,KAAK;KACjC;IACF,CACF;GACF,CAAC;GAED,IAAI,UAAU,KAAA,GAAW,OAAO,OAAO;EACzC,CAAC;EACH,QAAQ,IAAI,IAAI,KAAK,CAAC,CAAC,KAAK,OAAO,KAAK,YAAY,QAAQ,MAAM,CAAC;CACrE,CAAC;AACH,CAAC,CACH;;AAGA,MAAa,sBAAsB,OAAO,GAAG,qBAAqB,CAAC,CAAC,WAClE,OACA,kBAC6D;CAE7D,MAAM,uBAAuB,QAAO,OADZ,SAAA,CACqB,OAAO,gBAAgB;CAEpE,OAAO,gBAAgB,KAAK;EAC1B,WAAW,MAAM;EACjB,OAAO,MAAM;EACb,UAAU,MAAM;EAChB,YAAY,MAAM;EAClB,UAAU,MAAM;EAChB,eAAe,MAAM;EACrB,iBAAiB,MAAM;EACvB,MAAM,MAAM;EACZ,WAAW,MAAM;EACjB,QAAQ,MAAM;EACd;CACF,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,SAA0B,cAC/C,eAAe,KAAK;CAClB,WAAW,QAAQ;CACnB;CACA,UAAU;CACV,QAAQ;CACR,UAAU;AACZ,CAAC;;;;;;;AAQH,MAAa,kBAAkB,OAAO,GAAG,iBAAiB,CAAC,CAAC,WAAW,SAA0B;CAC/F,MAAM,QAAQ,OAAO;CAErB,OAAO,MAAM,cAAc,OAAO;CAClC,MAAM,YAAY,OAAO,MAAM;CAC/B,MAAM,MAAM,SAAS,MAAM,SAAS,WAAW,SAAS,CAAC;CACzD,MAAM,kBAAkB,SAAS,cAAc,QAAQ,SAAS,IAAI;CAEpE,IAAI;CAEJ,IAAI,mBAAmB,GACrB,WAAW,cAAc,SAAS,GAAG;MAIrC,WAAW,QAAO,OAFM,iBAAA,CAEG,QAAQ,OAAO,CAAC,CAAC,KAC1C,OAAO,cAAc;EACnB,UAAU,SAAS,OAAO,eAAe;EACzC,cACE,MAAM,kBAAkB,KACtB,OAAO,KAAK,WACV,cAAc,SAAS,SAAS,MAAM,SAAS,WAAW,MAAM,CAAC,CAAC,CACpE,CACF;CACJ,CAAC,GACD,OAAO,SAAS,0BACd,MAAM,kBAAkB,KACtB,OAAO,KAAK,WACV,cAAc,SAAS,SAAS,MAAM,SAAS,WAAW,MAAM,CAAC,CAAC,CACpE,CACF,CACF,GACA,OAAO,eACL,MAAM,kBAAkB,KACtB,OAAO,SAAS,WACd,MAAM,eACJ,eAAe,KAAK;EAClB,WAAW,QAAQ;EACnB,WAAW,SAAS,MAAM,SAAS,WAAW,MAAM,CAAC;EACrD,UAAU;EACV,QAAQ;EACR,UAAU;CACZ,CAAC,CACH,CACF,CACF,CACF,CACF;CAEF,IAAI,SAAS,cAAc,QAAQ,WAAW;EAC5C,MAAM,WAAW,yBAAyB,KAAK;GAC7C,mBAAmB,QAAQ;GAC3B,mBAAmB,SAAS;EAC9B,CAAC;EAED,MAAM,SAAS,eAAe,KAAK;GACjC,WAAW,QAAQ;GACnB,WAAW,SAAS,MAAM,SAAS,WAAW,OAAO,MAAM,iBAAiB,CAAC;GAC7E,UAAU;GACV,QAAQ;GACR,UAAU;EACZ,CAAC;EAED,OAAO,MAAM,eAAe,MAAM;EAElC,OAAO,OAAO;CAChB;CACA,OAAO,MAAM,eAAe,QAAQ;CAEpC,OAAO;AACT,CAAC;;AAGD,MAAa,kBAAkB,MAAM,QAAQ,gBAAgB,CAAC,CAAC,EAC7D,UAAU,YACR,MAAM,kBAAkB,KACtB,OAAO,KAAK,WACV,eAAe,KAAK;CAClB,WAAW,QAAQ;CACnB,WAAW,SAAS,MAAM,SAAS,WAAW,MAAM,CAAC;CACrD,UAAU;CACV,QAAQ;CACR,UAAU;AACZ,CAAC,CACH,CACF,EACJ,CAAC"}

package/dist/capabilities/Budget.d.mts

@@ -0,0 +1,112 @@
+import { Effect, Schema, Scope } from "effect";
+declare namespace Budget_d_exports {
+  export { BudgetExceeded, BudgetLevel, BudgetNodeConflict, InvalidBudgetHierarchy, UsageBudgetLimits, UsageBudgetNode, UsageBudgetNodeConfig, UsageDelta, UsageTotals, makeUsageBudget, makeUsageBudgetRoot };
+}
+declare const BudgetLevel: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+type BudgetLevel = typeof BudgetLevel.Type;
+declare const UsageTotals_base: Schema.Class<UsageTotals, Schema.Struct<{
+  /** Total input tokens across every model call, INCLUDING cache reads and writes at par. */
+  readonly inputTokens: Schema.Natural;
+  readonly outputTokens: Schema.Natural;
+  /** Informational split of `inputTokens` served from the provider prompt cache; never separately limited. */
+  readonly cacheReadInputTokens: Schema.Natural;
+  /** Informational split of `inputTokens` written to the provider prompt cache; never separately limited. */
+  readonly cacheWriteInputTokens: Schema.Natural;
+  /** The most recent model call's input tokens — the live model-context estimate (CAP-017). */
+  readonly lastInputTokens: Schema.Natural;
+  /** The most recent model call's output tokens. */
+  readonly lastOutputTokens: Schema.Natural;
+  readonly toolCalls: Schema.Natural;
+  readonly costMicrousd: Schema.Natural;
+  readonly elapsedMillis: Schema.Natural;
+}>, {}>;
+/** Fixed units avoid floating-point currency accounting: costs are micro-USD. */
+export declare class UsageTotals extends UsageTotals_base {}
+declare const UsageDelta_base: Schema.Class<UsageDelta, Schema.Struct<{
+  /** `1` for a model-response boundary, `0` for a mid-pass tool charge; gates last-call tracking. */
+  readonly modelCalls: Schema.Natural;
+  /** Total input tokens of this boundary, INCLUDING cache reads and writes at par. */
+  readonly inputTokens: Schema.Natural;
+  readonly outputTokens: Schema.Natural;
+  /** Informational split of `inputTokens` served from the provider prompt cache; never separately limited. */
+  readonly cacheReadInputTokens: Schema.Natural;
+  /** Informational split of `inputTokens` written to the provider prompt cache; never separately limited. */
+  readonly cacheWriteInputTokens: Schema.Natural;
+  readonly toolCalls: Schema.Natural;
+  readonly costMicrousd: Schema.Natural;
+}>, {}>;
+/** Increment recorded at one model/tool accounting boundary. */
+export declare class UsageDelta extends UsageDelta_base {}
+declare const UsageBudgetLimits_base: Schema.Class<UsageBudgetLimits, Schema.Struct<{
+  readonly maxInputTokens: Schema.optionalKey<Schema.Natural>;
+  readonly maxOutputTokens: Schema.optionalKey<Schema.Natural>;
+  readonly maxToolCalls: Schema.optionalKey<Schema.Natural>;
+  readonly maxCostMicrousd: Schema.optionalKey<Schema.Natural>;
+  readonly maxDurationMillis: Schema.optionalKey<Schema.Natural>;
+}>, {}>;
+/** All optional limits are finite when present; absent means not configured. */
+export declare class UsageBudgetLimits extends UsageBudgetLimits_base {}
+declare const UsageBudgetNodeConfig_base: Schema.Class<UsageBudgetNodeConfig, Schema.Struct<{
+  readonly level: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+  readonly id: Schema.NonEmptyString;
+  readonly limits: typeof UsageBudgetLimits;
+}>, {}>;
+/** Identity and local limits for one node in a global-to-Run budget hierarchy. */
+export declare class UsageBudgetNodeConfig extends UsageBudgetNodeConfig_base {}
+declare const BudgetExceeded_base: Schema.Class<BudgetExceeded, Schema.TaggedStruct<"BudgetExceeded", {
+  readonly scopeLevel: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+  readonly scopeId: Schema.NonEmptyString;
+  readonly limit: Schema.Literals<readonly ["input-tokens", "output-tokens", "tool-calls", "cost", "duration"]>;
+  readonly limitValue: Schema.Natural;
+  readonly observedValue: Schema.Natural;
+}>, import("effect/Cause").YieldableError>;
+/** Typed finite-budget rejection. A rejected increment is not committed at any hierarchy level. */
+export declare class BudgetExceeded extends BudgetExceeded_base {}
+/** Hierarchical accounting authority. All ancestors share one atomic Ref-backed transaction. */
+export interface UsageBudgetNode {
+  readonly level: BudgetLevel;
+  readonly id: string;
+  /**
+   * Register or re-attach one child node. Re-attaching an already-registered
+   * `level:id` with identical limits returns a handle to the shared
+   * registration; different limits fail with BudgetNodeConflict rather than
+   * being silently ignored. Every returned handle owns one registration and
+   * must be retired when its lifetime ends; prefer `childScoped` when the
+   * lifetime already belongs to an Effect Scope.
+   */
+  readonly child: (config: UsageBudgetNodeConfig) => Effect.Effect<UsageBudgetNode, InvalidBudgetHierarchy | BudgetNodeConflict>;
+  /** Register a child whose registration is retired when the current Scope closes. */
+  readonly childScoped: (config: UsageBudgetNodeConfig) => Effect.Effect<UsageBudgetNode, InvalidBudgetHierarchy | BudgetNodeConflict, Scope.Scope>;
+  /**
+   * Release this handle's registration exactly once. Accumulated usage stays
+   * charged to every live ancestor; a node is reclaimed only after its last
+   * handle and every descendant have retired.
+   */
+  readonly retire: Effect.Effect<void>;
+  readonly consume: (delta: UsageDelta) => Effect.Effect<UsageTotals, BudgetExceeded>;
+  readonly snapshot: Effect.Effect<UsageTotals>;
+  /**
+   * Guard stalled model/tool work with the earliest configured ancestor deadline.
+   * The timeout is driven by Effect Clock and interrupts the guarded child effect.
+   */
+  readonly guard: <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E | BudgetExceeded, R>;
+}
+declare const InvalidBudgetHierarchy_base: Schema.Class<InvalidBudgetHierarchy, Schema.TaggedStruct<"InvalidBudgetHierarchy", {
+  readonly parentLevel: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+  readonly childLevel: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+}>, import("effect/Cause").YieldableError>;
+/** A child budget must move strictly inward through the declared hierarchy. */
+export declare class InvalidBudgetHierarchy extends InvalidBudgetHierarchy_base {}
+declare const BudgetNodeConflict_base: Schema.Class<BudgetNodeConflict, Schema.TaggedStruct<"BudgetNodeConflict", {
+  readonly scopeLevel: Schema.Literals<readonly ["global", "tenant", "agent", "thread", "run"]>;
+  readonly scopeId: Schema.NonEmptyString;
+}>, import("effect/Cause").YieldableError>;
+/** A child `level:id` is already registered with different limits; neither set may win silently. */
+export declare class BudgetNodeConflict extends BudgetNodeConflict_base {}
+/** Create the outermost node of a hierarchy. Child nodes share its atomic ledger. */
+export declare const makeUsageBudgetRoot: (config: UsageBudgetNodeConfig) => Effect.Effect<UsageBudgetNode, never, never>;
+/** Compatibility constructor for a standalone Run budget. */
+export declare const makeUsageBudget: (limits: UsageBudgetLimits) => Effect.Effect<UsageBudgetNode>;
+//#endregion
+export { BudgetLevel, Budget_d_exports as t };
+//# sourceMappingURL=Budget.d.mts.map