eve 0.83.2 → 0.84.0

package/dist/src/execution/sandbox/grep-tool.d.ts

@@ -1,26 +0,0 @@
-import type { SandboxSession } from "#shared/sandbox-session.js";
-/**
- * Typed input accepted by {@link executeGrepOnSandbox}.
- */
-export interface GrepInput {
-    readonly context?: number;
-    readonly glob?: string;
-    readonly ignoreCase?: boolean;
-    readonly limit?: number;
-    readonly literal?: boolean;
-    readonly path?: string;
-    readonly pattern: string;
-}
-/**
- * Structured result returned from {@link executeGrepOnSandbox}.
- */
-export interface GrepResult {
-    readonly content: string;
-    readonly matchCount: number;
-    readonly path: string;
-    readonly truncated: boolean;
-}
-/**
- * Searches file contents for a pattern inside the sandbox.
- */
-export declare function executeGrepOnSandbox(sandbox: SandboxSession, args: GrepInput): Promise<GrepResult>;

package/dist/src/execution/sandbox/grep-tool.js

@@ -1,3 +0,0 @@
-import{shellQuote}from"#execution/sandbox/shell-quote.js";import{MAX_OUTPUT_BYTES,capLineLength}from"#execution/sandbox/truncate-output.js";import{normalizeModelPath}from"#execution/tools/file-state.js";import{resolveAbsoluteFilePath}from"#execution/sandbox/require-sandbox.js";import{ripgrepIsAvailable}from"#execution/sandbox/ripgrep-probe.js";async function executeGrepOnSandbox(e,t){let n=await resolveAbsoluteFilePath(e,t.path??`.`),r=normalizeModelPath(n),i=Math.min(Math.max(1,t.limit??100),1e3),a=t.context!==void 0&&t.context>0?t.context:0,o=await ripgrepIsAvailable(e)?buildRipgrepCommand({contextLines:a,effectiveLimit:i,glob:t.glob,ignoreCase:t.ignoreCase??!1,literal:t.literal??!1,normalizedPath:r,pattern:t.pattern}):buildPosixGrepCommand({contextLines:a,effectiveLimit:i,glob:t.glob,ignoreCase:t.ignoreCase??!1,literal:t.literal??!1,normalizedPath:r,pattern:t.pattern}),s=await e.run({command:o});if(s.exitCode!==0&&s.exitCode!==1||s.exitCode===1&&s.stderr.trim().length>0)throw buildGrepExecutionError(o,s.exitCode,s.stderr);let c=s.stdout;return c.trim().length===0?{content:`No matches found`,matchCount:0,path:r,truncated:!1}:processOutput({effectiveLimit:i,normalizedPath:r,stdout:c})}function buildRipgrepCommand(e){let t=[`rg`,`--line-number`,`--color=never`,`--hidden`,`--glob '!.git/*'`];return e.ignoreCase&&t.push(`--ignore-case`),e.literal&&t.push(`--fixed-strings`),e.glob!==void 0&&t.push(`--glob ${shellQuote(e.glob)}`),e.contextLines>0&&t.push(`--context ${e.contextLines}`),t.push(`--max-count ${e.effectiveLimit}`),t.push(`--`),t.push(shellQuote(e.pattern)),t.push(shellQuote(e.normalizedPath)),t.join(` `)}function buildPosixGrepCommand(e){let t=[`grep`,`-r`,`-n`,`--exclude-dir=.git`];return e.ignoreCase&&t.push(`-i`),e.literal?t.push(`-F`):t.push(`-E`),e.glob!==void 0&&t.push(`--include=${shellQuote(e.glob)}`),e.contextLines>0&&t.push(`-C ${e.contextLines}`),t.push(`-m ${e.effectiveLimit}`),t.push(`-e ${shellQuote(e.pattern)}`),t.push(shellQuote(e.normalizedPath)),t.join(` `)}function processOutput(e){let t=e.stdout.split(`
-`),n=[],r=0,i=0,a=!1;for(let e=0;e<t.length;e+=1){let o=t[e]??``;if(o.length===0&&e===t.length-1)continue;o!==`--`&&o.length>0&&/^.+:\d+:/.test(o)&&i++;let s=capLineLength(o),c=Buffer.byteLength(s,`utf8`)+1;if(r+c>MAX_OUTPUT_BYTES&&n.length>0){a=!0;break}n.push(s),r+=c}let o=a||i>=e.effectiveLimit,s=n.join(`
-`);if(o){let t=[];i>=e.effectiveLimit&&t.push(`Match limit reached (${e.effectiveLimit}). Use a larger limit or more specific pattern.`),a&&t.push(`Output truncated due to size. Use a more specific path or pattern.`),s+=`\n\n[${t.join(` `)}]`}return{content:s,matchCount:i,path:e.normalizedPath,truncated:o}}function buildGrepExecutionError(e,t,n){let r=n.trim(),i=r.length>0?r:`no stderr output`;return Error(`grep failed (exit ${t}): ${i}\nCommand: ${e}`)}export{executeGrepOnSandbox};

package/dist/src/execution/session/turn-waiting-step.d.ts

@@ -1,4 +0,0 @@
-import { type SessionStepState } from "#execution/publish-session-events.js";
-import { type SessionStateTransition } from "#execution/session/state-delta.js";
-/** Publishes `turn.waiting` for the open turn the session workflow just parked. */
-export declare function publishTurnWaitingStep(target: SessionStepState): Promise<SessionStateTransition>;

package/dist/src/execution/session/turn-waiting-step.js

@@ -1 +0,0 @@
-import{storedProjection}from"#harness/session-machine/view.js";import{readDurableSession}from"#execution/durable-session-store.js";import{publishSessionEvents}from"#execution/publish-session-events.js";import{withSessionStateDelta}from"#execution/session/state-delta.js";import{hold}from"#harness/session-machine/transitions.js";import{sessionView}from"#harness/session-machine/commit.js";async function publishTurnWaitingStep(e){"use step";return await withSessionStateDelta(e,async e=>{let t=readDurableSession(e.sessionState),n=sessionView(storedProjection(t.state),t.state),{events:r}=hold(n,{on:`tasks`});return r.length===0?{serializedContext:e.serializedContext,sessionState:e.sessionState}:await publishSessionEvents(e,r)})}export{publishTurnWaitingStep};

package/dist/src/execution/tools/workflow/cancel.d.ts

@@ -1,13 +0,0 @@
-import type { WorkflowToolRunControlMessage } from "#execution/tools/workflow/messages.js";
-import type { WorkflowToolRunAddress } from "#execution/tools/workflow/types.js";
-/** How a run is told to stop: `end` also finishes a `serve` task's run, which a cancel keeps. */
-export type WorkflowToolRunStop = Extract<WorkflowToolRunControlMessage, {
-    readonly kind: "cancel" | "end";
-}>;
-/**
- * Asks the run to stop itself, then bounds cooperative cleanup. Failures are
- * logged: the caller has already committed cancellation of the calling turn.
- */
-export declare function cancelWorkflowToolRun(run: WorkflowToolRunAddress, stop: WorkflowToolRunStop): Promise<void>;
-/** Allows cooperative cleanup, then forcibly stops a still-live run. */
-export declare function settleWorkflowToolRunCancellation(runId: string, reason: string, cooperative?: boolean): Promise<void>;

package/dist/src/execution/tools/workflow/cancel.js

@@ -1 +0,0 @@
-import{createLogger,logError}from"#internal/logging.js";import{cancelRun,getRun,getWorld,resumeHook}from"#internal/workflow/runtime.js";import{isTaskWorkflowTargetGone}from"#execution/tasks/workflow-target.js";import{WORKFLOW_CANCELLATION_SETTLE_MS}from"#execution/tools/workflow/cancellation-policy.js";const log=createLogger(`execution.workflow-tool-run`);async function cancelWorkflowToolRun(e,t){let{reason:n}=t,r=!1;try{await resumeHook(e.hookToken,t),r=!0}catch(t){isTaskWorkflowTargetGone(t)||logError(log,`failed to signal a workflow tool run to cancel; cancelling it outright`,t,{runId:e.runId})}try{await settleWorkflowToolRunCancellation(e.runId,n,r)}catch(t){if(isTaskWorkflowTargetGone(t))return;logError(log,`failed to cancel workflow tool run; it may run to completion`,t,{runId:e.runId})}}async function settleWorkflowToolRunCancellation(e,t,n=!0){if(n){let t=Date.now()+WORKFLOW_CANCELLATION_SETTLE_MS;for(;Date.now()<t;){try{let t=await getRun(e).status;if(t!==`pending`&&t!==`running`)return}catch(e){if(isTaskWorkflowTargetGone(e))return;throw e}await new Promise(e=>setTimeout(e,250))}}try{await cancelRun(await getWorld(),e,{cancelReason:t})}catch(e){if(isTaskWorkflowTargetGone(e))return;throw e}}export{cancelWorkflowToolRun,settleWorkflowToolRunCancellation};

package/dist/src/execution/workflow-trace-context.d.ts

@@ -1,8 +0,0 @@
-import type { TurnPosition } from "#harness/session-machine/view.js";
-import type { ExecutionInstrumentation } from "#instrumentation/runtime.js";
-import type { RuntimeTraceContext } from "#protocol/message.js";
-/** Prepares native tracing for workflow-owned preambles emitted outside the tool loop. */
-export declare function prepareWorkflowPreambleTrace(input: {
-    readonly emissionState: TurnPosition;
-    readonly instrumentation: ExecutionInstrumentation | undefined;
-}): Promise<RuntimeTraceContext | undefined>;

package/dist/src/execution/workflow-trace-context.js

@@ -1 +0,0 @@
-async function prepareWorkflowPreambleTrace(e){return await e.instrumentation?.preparePreamble({sequence:e.emissionState.sequence,sessionStarted:e.emissionState.sessionStarted,turnId:`turn_${e.emissionState.sequence}`})}export{prepareWorkflowPreambleTrace};

package/dist/src/extensions/code/extension/instructions/github.d.ts

@@ -1,3 +0,0 @@
-/** @deprecated Mount `eve/extensions/git` with `github` config. */
-declare const _default: import("eve/instructions").DynamicSentinel<import("eve/instructions").DynamicInstructionsResult>;
-export default _default;

package/dist/src/extensions/code/extension/instructions/github.js

@@ -1 +0,0 @@
-import{deprecatedGitHubConfigured}from"../lib/github-compat.js";import{githubInstructions}from"eve/extensions/git/sandbox";import{defineDynamic,defineInstructions}from"eve/instructions";var github_default=defineDynamic({events:{"session.started":()=>deprecatedGitHubConfigured()?defineInstructions({content:githubInstructions(!0)}):null}});export{github_default as default};

package/dist/src/extensions/code/extension/lib/github-compat.d.ts

@@ -1,28 +0,0 @@
-export declare function deprecatedGitHubConfigured(): boolean;
-/** @deprecated Mount `eve/extensions/git` with `github` config, or import `gh` from `eve/extensions/git/tools`. */
-export declare const gh: import("../../../../tools/definition.ts").ToolDefinition<{
-    command: string;
-    permissions: {
-        provider: "github";
-        repositories: string[];
-        access: "write";
-    }[];
-    description: string;
-    workingDirectory?: string | undefined;
-}, {
-    exitCode: number;
-    stderr: string;
-    stdout: string;
-    truncated: boolean;
-}> & {
-    execute(input: {
-        command: string;
-        permissions: {
-            provider: "github";
-            repositories: string[];
-            access: "write";
-        }[];
-        description: string;
-        workingDirectory?: string | undefined;
-    }, ctx: import("../../../../tools/definition.ts").ToolContext): Promise<import("eve/extensions/git/sandbox").GitHubShellOutput>;
-};

package/dist/src/extensions/code/extension/lib/github-compat.js

@@ -1 +0,0 @@
-import extension_default from"../extension.js";import{defineGhTool}from"eve/extensions/git/sandbox";function deprecatedGitHubConfigured(){return extension_default.config.github!==void 0}const gh=defineGhTool(()=>extension_default.config.github);export{deprecatedGitHubConfigured,gh};

package/dist/src/extensions/code/extension/lib/grep-search.js

@@ -1,6 +0,0 @@
-import{shellQuote}from"./shell.js";import{resolveInWorkspace}from"./workspace-root.js";const MAX_GREP_LIMIT=200,MAX_GREP_COMMAND_BYTES=262144,MAX_GREP_LINE_BYTES=8192,MAX_GREP_RETURN_BYTES=65536,REGEX_META=/[\\^$.*+?()[\]{}|]/u,GREP_OUTPUT_MODES=[`files_with_matches`,`content`,`count`];function shouldUseFixedStrings(e,t){return t===!0||t!==!1&&!REGEX_META.test(e)}function effectiveOutputMode(e){return e??`files_with_matches`}function effectiveLimit(e){return Math.min(Math.max(1,e??50),200)}function assertNoParentSegments(e,t){if(t!==void 0&&t.split(/[\\/]/u).includes(`..`)||e.split(`/`).includes(`..`))throw Error(`grep path must not contain '..'`);return e}async function executeGrepSearch(e,t,n){let r=assertNoParentSegments(t.resolvePath(e.path??``),e.path),{path:i}=await resolveInWorkspace(t,r,`grep path`,n),a=effectiveOutputMode(e.outputMode),o=effectiveLimit(e.limit),s=buildSearchCommand({contextLines:e.context??0,glob:e.glob,ignoreCase:e.ignoreCase===!0,limit:o,literal:shouldUseFixedStrings(e.pattern,e.literal),outputMode:a,path:i,pattern:e.pattern}),c=await t.run({abortSignal:n,command:s}),l=truncateUtf8(c.stdout,MAX_GREP_COMMAND_BYTES),u=l.truncated;if(c.exitCode!==0&&c.exitCode!==1||c.exitCode===1&&c.stderr.trim().length>0){let e=c.stderr.trim()||l.value.trim()||`no command output`;throw Error(`grep failed (exit ${c.exitCode}): ${truncateUtf8(e,MAX_GREP_LINE_BYTES).value}`)}return processGrepOutput({commandTruncated:u,limit:o,outputMode:a,path:r,stdout:l.value})}function buildSearchCommand(e){return[`set -o pipefail`,`{`,`  if command -v rg >/dev/null 2>&1; then`,`    ${buildRipgrepCommand(e)}`,`  else`,`    ${buildPosixGrepCommand(e)}`,`  fi`,`} 2>&1 | head -c 262145`,"search_status=${PIPESTATUS[0]}",`if [ "$search_status" -eq 141 ]; then exit 0; fi`,`exit "$search_status"`].join(`
-`)}function buildRipgrepCommand(e){let t=[`rg`,`--color=never`,`--hidden`,`--glob`,shellQuote(`!.git/*`)];switch(e.ignoreCase&&t.push(`--ignore-case`),e.literal&&t.push(`--fixed-strings`),e.glob!==void 0&&t.push(`--glob`,shellQuote(e.glob)),e.outputMode){case`files_with_matches`:t.push(`--files-with-matches`,`--max-count`,`1`);break;case`count`:t.push(`--count`);break;case`content`:t.push(`--line-number`,`--with-filename`,`--null`),e.contextLines>0&&t.push(`--context`,String(e.contextLines)),t.push(`--max-count`,String(e.limit))}return t.push(`--`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function buildPosixGrepCommand(e){let t=[`grep`,`-r`,`--exclude-dir=.git`];switch(e.ignoreCase&&t.push(`-i`),e.literal?t.push(`-F`):t.push(`-E`),e.glob!==void 0&&t.push(`--include=${shellQuote(e.glob)}`),e.outputMode){case`files_with_matches`:t.push(`-l`);break;case`count`:t.push(`-c`);break;case`content`:t.push(`-n`,`-H`,`-Z`),e.contextLines>0&&t.push(`-C`,String(e.contextLines)),t.push(`-m`,String(e.limit))}return t.push(`-e`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function processGrepOutput(e){let t=e.stdout.split(`
-`),n=[],r=`
-
-[Output truncated. Narrow path or glob, or lower context.]`,i=MAX_GREP_RETURN_BYTES-Buffer.byteLength(r),a=0,o=0,s=0,c=e.commandTruncated===!0,appendLine=e=>{let t=Buffer.byteLength(e)+(n.length===0?0:1);return a+t>i?!1:(n.push(e),a+=t,!0)};for(let r=0;r<t.length;r+=1){let i=t[r]??``;if(i.length===0&&r===t.length-1)continue;if(i===`--`){if(n.length>0&&!appendLine(i)){c=!0;break}continue}let a=i,l=e.outputMode!==`content`;if(e.outputMode===`content`){let e=normalizeContentLine(i);a=e.line,l=e.isMatch}let u=0;if(e.outputMode===`count`&&(u=parseCountLine(a),u===0))continue;if(s>=e.limit){c=!0;break}let d=truncateUtf8(a,MAX_GREP_LINE_BYTES);if(d.truncated&&(c=!0),!appendLine(d.value)){c=!0;break}s+=1,e.outputMode===`count`?o+=u:l&&(o+=1)}if(n.length===0)return{content:c?`[Output truncated. Narrow path or glob, or lower context.]`:`No matches found`,matchCount:0,outputMode:e.outputMode,path:e.path,truncated:c};let l=n.join(`
-`);return c&&(l+=r),{content:l,matchCount:o,outputMode:e.outputMode,path:e.path,truncated:c}}function normalizeContentLine(e){let t=e.lastIndexOf(`\0`);if(t===-1)return{isMatch:!1,line:e};let n=e.slice(0,t),r=e.slice(t+1),i=/^(\d+)([:-])(.*)$/u.exec(r);if(i===null)return{isMatch:!1,line:`${n}:${r}`};let[,a,o,s]=i;return{isMatch:o===`:`,line:`${n}${o}${a}${o}${s}`}}function parseCountLine(e){let t=e.lastIndexOf(`:`);if(t===-1)return 0;let n=Number(e.slice(t+1));return Number.isFinite(n)&&n>0?n:0}function truncateUtf8(e,t){if(Buffer.byteLength(e)<=t)return{truncated:!1,value:e};let n=0,r=``;for(let i of e){let e=Buffer.byteLength(i);if(n+e>t)break;r+=i,n+=e}return{truncated:!0,value:r}}export{GREP_OUTPUT_MODES,MAX_GREP_COMMAND_BYTES,MAX_GREP_LIMIT,MAX_GREP_LINE_BYTES,MAX_GREP_RETURN_BYTES,assertNoParentSegments,buildPosixGrepCommand,buildRipgrepCommand,buildSearchCommand,effectiveLimit,effectiveOutputMode,executeGrepSearch,processGrepOutput,shouldUseFixedStrings};

package/dist/src/extensions/code/extension/skills/pr.d.ts

@@ -1,6 +0,0 @@
-/** @deprecated Mount `eve/extensions/git`, which contributes the same skill as `git__pr`. */
-declare const _default: import("eve/skills").DynamicSentinel<{
-    description: string;
-    markdown: string;
-} | null>;
-export default _default;

package/dist/src/extensions/code/extension/skills/pr.js

@@ -1 +0,0 @@
-import{deprecatedGitHubConfigured}from"../lib/github-compat.js";import{prSkillDescription,prSkillMarkdown}from"eve/extensions/git/sandbox";import{defineDynamic,defineSkill}from"eve/skills";var pr_default=defineDynamic({events:{"session.started":()=>deprecatedGitHubConfigured()?defineSkill({description:prSkillDescription(!0),markdown:prSkillMarkdown(!0)}):null}});export{pr_default as default};

package/dist/src/extensions/code/extension/tools/gh.d.ts

@@ -1,28 +0,0 @@
-/** @deprecated Mount `eve/extensions/git` with `github` config. */
-declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
-    command: string;
-    permissions: {
-        provider: "github";
-        repositories: string[];
-        access: "write";
-    }[];
-    description: string;
-    workingDirectory?: string | undefined;
-}, {
-    exitCode: number;
-    stderr: string;
-    stdout: string;
-    truncated: boolean;
-}> & {
-    execute(input: {
-        command: string;
-        permissions: {
-            provider: "github";
-            repositories: string[];
-            access: "write";
-        }[];
-        description: string;
-        workingDirectory?: string | undefined;
-    }, ctx: import("eve/tools").ToolContext): Promise<import("../lib/sandbox.ts").GitHubShellOutput>;
-}) | null>;
-export default _default;

package/dist/src/extensions/code/extension/tools/gh.js

@@ -1 +0,0 @@
-import{deprecatedGitHubConfigured,gh}from"../lib/github-compat.js";import{defineDynamic}from"eve/tools";var gh_default=defineDynamic({events:{"session.started":()=>deprecatedGitHubConfigured()?gh:null}});export{gh_default as default};

package/dist/src/harness/approval-recheck.d.ts

@@ -1,7 +0,0 @@
-import type { ModelMessage } from "ai";
-import type { ApprovalContext } from "#approval/definition.js";
-/** Whether `messages` hold a person's approval of `toolCallId`. */
-export declare function isApprovedToolCall(messages: readonly ModelMessage[], toolCallId: string): boolean;
-export declare function markApprovalRecheck<T extends ApprovalContext>(context: T): T;
-/** Whether `context` is the re-check of an approved call just before it runs. */
-export declare function isApprovalRecheck(context: ApprovalContext): boolean;

package/dist/src/harness/approval-recheck.js

@@ -1 +0,0 @@
-const rechecks=new WeakSet;function isApprovedToolCall(e,t){let n=new Set;for(let r of e)if(r.role===`assistant`&&typeof r.content!=`string`)for(let e of r.content)e.type===`tool-approval-request`&&e.toolCallId===t&&n.add(e.approvalId);return n.size!==0&&e.some(e=>e.role===`tool`&&e.content.some(e=>e.type===`tool-approval-response`&&e.approved&&n.has(e.approvalId)))}function markApprovalRecheck(e){return rechecks.add(e),e}function isApprovalRecheck(e){return rechecks.has(e)}export{isApprovalRecheck,isApprovedToolCall,markApprovalRecheck};

package/dist/src/harness/authorization-event-fields.d.ts

@@ -1,16 +0,0 @@
-import type { AuthorizationChallenge } from "#harness/authorization.js";
-import type { AuthorizationPrincipal } from "#protocol/message.js";
-/**
- * Fields every `authorization.*` event copies from its challenge. Emitters
- * spread this and add only event-local fields, so a new challenge-derived
- * field reaches every event at once.
- */
-export declare function authorizationEventFields(challenge: AuthorizationChallenge): {
-    attemptId: string | undefined;
-    authorization: import("../connections/errors.ts").ConnectionAuthorizationChallenge;
-    candidateId: string | undefined;
-    grant: string | undefined;
-    name: string;
-    principal: AuthorizationPrincipal | undefined;
-    principalId: string | undefined;
-};

package/dist/src/harness/authorization-event-fields.js

@@ -1 +0,0 @@
-function authorizationEventFields(e){return{attemptId:e.attemptId,authorization:e.challenge,candidateId:e.candidateId,grant:e.grant,name:e.name,principal:principalIdentity(e.principal),principalId:e.principalId}}function principalIdentity(e){if(e!==void 0)return e.type===`app`?{type:`app`}:e.issuer===void 0?{id:e.id,type:`user`}:{id:e.id,issuer:e.issuer,type:`user`}}export{authorizationEventFields};

package/dist/src/harness/hitl/candidates.d.ts

@@ -1,139 +0,0 @@
-import type { SessionAuthContext } from "#channel/types.js";
-import type { AuthorizationChallenge } from "#harness/authorization.js";
-import type { SessionStateMap } from "#harness/types.js";
-type ApprovalCandidateStatus = "pending" | "authorization-required" | "allowed" | "rejected" | "failed" | "timed-out" | "stale";
-/** What a responder submitted: a candidate settles its request this way once allowed. */
-export type ApprovalCandidateDecision = "approve" | "cancel";
-interface ApprovalCandidateAuditRecord {
-    readonly candidateId: string;
-    readonly decision: ApprovalCandidateDecision;
-    readonly requestId: string;
-    readonly responder: ApprovalResponderIdentity;
-    readonly status: ApprovalCandidateStatus;
-    readonly createdAt: number;
-    readonly completedAt?: number;
-    readonly expiresAt?: number;
-    readonly reason?: string;
-}
-export interface ApprovalResponderIdentity {
-    readonly authenticator: string;
-    readonly issuer?: string;
-    readonly principalId: string;
-    readonly principalType: string;
-}
-export interface ApprovalSettlementAuditRecord {
-    readonly actor: ApprovalResponderIdentity;
-    /**
-     * The full auth of the person who approved, present only when allowed. The approved call reads
-     * it as `ctx.approval.responder`; it never runs as it.
-     */
-    readonly responder?: SessionAuthContext;
-    /** `unavailable`: the request's entry was gone, so its call is reported unavailable, never run. */
-    readonly outcome: "allowed" | "cancelled" | "unavailable";
-    readonly requestId: string;
-    readonly settledAt: number;
-    readonly candidateId?: string;
-    /** What the settling responder wrote with their answer, such as why they cancelled. */
-    readonly text?: string;
-}
-export interface ActiveApprovalCandidate {
-    readonly candidateId: string;
-    readonly decision: ApprovalCandidateDecision;
-    readonly requestId: string;
-    readonly responder: SessionAuthContext;
-    readonly status: "pending" | "authorization-required";
-    readonly createdAt: number;
-    readonly expiresAt: number;
-    readonly authorizationChallenges?: readonly AuthorizationChallenge[];
-    /** What the responder wrote with their answer; the settlement keeps it once allowed. */
-    readonly text?: string;
-}
-export interface DurableApprovalState {
-    readonly activeCandidates: Readonly<Record<string, ActiveApprovalCandidate>>;
-    readonly nextCandidateSequence: number;
-    readonly candidateHistory: readonly ApprovalCandidateAuditRecord[];
-    readonly settlements: Readonly<Record<string, ApprovalSettlementAuditRecord>>;
-}
-interface ApprovalStateTransition {
-    readonly changed: boolean;
-    readonly state: SessionStateMap | undefined;
-}
-/** Creates or deduplicates one responder's candidate decision for a pending request. */
-export declare function createApprovalCandidate(input: {
-    readonly candidateIdPrefix: string;
-    readonly createdAt: number;
-    readonly decision: ApprovalCandidateDecision;
-    readonly expiresAt: number;
-    readonly requestId: string;
-    readonly responder: SessionAuthContext;
-    readonly state: SessionStateMap | undefined;
-    readonly text?: string;
-}): ApprovalStateTransition;
-/** Marks a candidate as waiting on a private authorization challenge. */
-export declare function markApprovalCandidateAuthorizationRequired(input: {
-    readonly authorizationChallenges: readonly AuthorizationChallenge[];
-    readonly candidateId: string;
-    readonly expiresAt?: number;
-    readonly state: SessionStateMap | undefined;
-}): SessionStateMap | undefined;
-/** Finishes one candidate without settling the shared request. */
-export declare function finishApprovalCandidate(input: {
-    readonly candidateId: string;
-    readonly completedAt: number;
-    readonly reason?: string;
-    readonly state: SessionStateMap | undefined;
-    readonly status: Exclude<ApprovalCandidateStatus, "pending" | "authorization-required">;
-}): SessionStateMap | undefined;
-/** Expires active candidates whose deterministic deadline has passed. */
-export declare function expireApprovalCandidates(input: {
-    readonly now: number;
-    readonly state: SessionStateMap | undefined;
-}): SessionStateMap | undefined;
-/**
- * Atomically settles a request with an allowed candidate's decision; every
- * losing candidate becomes stale.
- */
-export declare function settleAllowedCandidate(input: {
-    readonly candidateId: string;
-    readonly settledAt: number;
-    readonly state: SessionStateMap | undefined;
-}): ApprovalStateTransition;
-/**
- * Settles a request whose entry is gone, which no response can approve and no call can run: the
- * candidate fails with `reason`, its competitors go stale, and the call is reported unavailable.
- */
-export declare function settleUnavailableCandidate(input: {
-    readonly candidateId: string;
-    readonly reason: string;
-    readonly settledAt: number;
-    readonly state: SessionStateMap | undefined;
-}): ApprovalStateTransition;
-/** Atomically settles a direct approval response. */
-export declare function settleDirectApprovalResponse(input: {
-    readonly actor: SessionAuthContext;
-    readonly outcome: "allowed" | "cancelled";
-    readonly requestId: string;
-    readonly settledAt: number;
-    readonly state: SessionStateMap | undefined;
-    readonly text?: string;
-}): ApprovalStateTransition;
-/** Returns one active candidate by id. */
-export declare function getActiveApprovalCandidate(state: SessionStateMap | undefined, candidateId: string): ActiveApprovalCandidate | undefined;
-/** Returns a copy of the durable candidate/audit state for inspection and replay. */
-export declare function getApprovalAuditState(state: SessionStateMap | undefined): {
-    readonly activeCandidates: readonly ActiveApprovalCandidate[];
-    readonly candidateHistory: readonly ApprovalCandidateAuditRecord[];
-    readonly settlements: readonly ApprovalSettlementAuditRecord[];
-};
-export declare function sameResponder(a: Pick<SessionAuthContext, "authenticator" | "issuer" | "principalId" | "principalType">, b: Pick<SessionAuthContext, "authenticator" | "issuer" | "principalId" | "principalType">): boolean;
-/**
- * The held turn moved on, steered or cancelled: the responders still checking one of its
- * approvals stop, their candidates stale.
- */
-export declare function retireActiveCandidates(state: SessionStateMap | undefined, input: {
-    readonly completedAt: number;
-    readonly reason: string;
-}): SessionStateMap | undefined;
-/** The full auth of whoever approved `requestId`, when a person allowed it. */
-export declare function responderOfRequest(state: SessionStateMap | undefined, requestId: string): SessionAuthContext | undefined;
-export {};

package/dist/src/harness/hitl/candidates.js

@@ -1 +0,0 @@
-import{readApprovalState,writeApprovalState}from"./requests.js";function createApprovalCandidate(e){let t=expireApprovalCandidates({now:e.createdAt,state:e.state}),n=readApprovalState(t);if(n.settlements[e.requestId]!==void 0)return{changed:!1,state:t};let r=e.responder;if(Object.values(n.activeCandidates).find(t=>t.requestId===e.requestId&&t.decision===e.decision&&sameResponder(t.responder,r))!==void 0)return{changed:!1,state:t};let i=n.activeCandidates[e.candidateIdPrefix]!==void 0||n.candidateHistory.some(t=>t.candidateId===e.candidateIdPrefix)?`${e.candidateIdPrefix}.${n.nextCandidateSequence.toString(36)}`:e.candidateIdPrefix;if(n.activeCandidates[i]!==void 0||n.candidateHistory.some(e=>e.candidateId===i))throw Error(`Approval candidate id collision: "${i}".`);let a={candidateId:i,createdAt:e.createdAt,decision:e.decision,expiresAt:e.expiresAt,requestId:e.requestId,responder:r,status:`pending`,...e.text!==void 0&&{text:e.text}},o={...n,activeCandidates:{...n.activeCandidates,[a.candidateId]:a},nextCandidateSequence:n.nextCandidateSequence+1};return{changed:!0,state:writeApprovalState(t,o)}}function markApprovalCandidateAuthorizationRequired(e){let t=readApprovalState(e.state),n=t.activeCandidates[e.candidateId];if(n===void 0)return e.state;let r={...n,authorizationChallenges:e.authorizationChallenges,expiresAt:e.expiresAt??n.expiresAt,status:`authorization-required`};return writeApprovalState(e.state,{...t,activeCandidates:{...t.activeCandidates,[e.candidateId]:r}})}function finishApprovalCandidate(e){let t=readApprovalState(e.state),n=t.activeCandidates[e.candidateId];if(n===void 0)return e.state;let r={...t.activeCandidates};return delete r[e.candidateId],writeApprovalState(e.state,{...t,activeCandidates:r,candidateHistory:[...t.candidateHistory,toCandidateAuditRecord({candidate:n,completedAt:e.completedAt,reason:e.reason,status:e.status})]})}function expireApprovalCandidates(e){let t=e.state,n=Object.values(readApprovalState(t).activeCandidates);for(let r of n)r.expiresAt>e.now||(t=finishApprovalCandidate({candidateId:r.candidateId,completedAt:e.now,state:t,status:`timed-out`}));return t}function settleAllowedCandidate(e){let t=expireApprovalCandidates({now:e.settledAt,state:e.state}),n=readApprovalState(t),r=n.activeCandidates[e.candidateId];if(r===void 0){let r=n.candidateHistory.find(t=>t.candidateId===e.candidateId);if((r&&n.settlements[r.requestId])!==void 0)return{changed:!1,state:t};throw Error(`Unknown approval candidate "${e.candidateId}".`)}return settleRequest({candidateId:r.candidateId,outcome:r.decision===`cancel`?`cancelled`:`allowed`,requestId:r.requestId,responder:r.responder,settledAt:e.settledAt,state:t,text:r.text})}function settleUnavailableCandidate(e){let t=expireApprovalCandidates({now:e.settledAt,state:e.state}),n=readApprovalState(t).activeCandidates[e.candidateId];return n===void 0?{changed:!1,state:t}:settleRequest({candidateId:n.candidateId,outcome:`unavailable`,reason:e.reason,requestId:n.requestId,responder:n.responder,settledAt:e.settledAt,state:t})}function settleDirectApprovalResponse(e){let t=expireApprovalCandidates({now:e.settledAt,state:e.state});return settleRequest({outcome:e.outcome,requestId:e.requestId,responder:e.actor,settledAt:e.settledAt,state:t,text:e.text})}function getActiveApprovalCandidate(e,t){return readApprovalState(e).activeCandidates[t]}function getApprovalAuditState(e){let t=readApprovalState(e);return{activeCandidates:Object.values(t.activeCandidates),candidateHistory:t.candidateHistory,settlements:Object.values(t.settlements)}}function settleRequest(e){let t=readApprovalState(e.state);if(t.settlements[e.requestId]!==void 0)return{changed:!1,state:e.state};let n={actor:projectResponder(e.responder),...e.outcome===`allowed`&&{responder:e.responder},candidateId:e.candidateId,outcome:e.outcome,requestId:e.requestId,settledAt:e.settledAt,...e.text!==void 0&&{text:e.text}},r={},i=[...t.candidateHistory];for(let n of Object.values(t.activeCandidates)){if(n.requestId!==e.requestId){r[n.candidateId]=n;continue}let t=n.candidateId===e.candidateId;i.push(toCandidateAuditRecord({candidate:n,completedAt:e.settledAt,reason:t?e.reason:void 0,status:t?e.outcome===`unavailable`?`failed`:`allowed`:`stale`}))}let a={activeCandidates:r,candidateHistory:i,nextCandidateSequence:t.nextCandidateSequence,settlements:{...t.settlements,[e.requestId]:n}};return{changed:!0,state:writeApprovalState(e.state,a)}}function toCandidateAuditRecord(e){let{authorizationChallenges:t,responder:n,text:r,...i}=e.candidate;return{...i,completedAt:e.completedAt,responder:projectResponder(n),reason:e.reason,status:e.status}}function projectResponder(e){return{authenticator:e.authenticator,issuer:e.issuer,principalId:e.principalId,principalType:e.principalType}}function sameResponder(e,t){return e.authenticator===t.authenticator&&e.issuer===t.issuer&&e.principalId===t.principalId&&e.principalType===t.principalType}function retireActiveCandidates(e,t){let n=e;for(let e of getApprovalAuditState(n).activeCandidates)n=finishApprovalCandidate({candidateId:e.candidateId,completedAt:t.completedAt,reason:t.reason,state:n,status:`stale`});return n}function responderOfRequest(e,t){return readApprovalState(e).settlements[t]?.responder}export{createApprovalCandidate,expireApprovalCandidates,finishApprovalCandidate,getActiveApprovalCandidate,getApprovalAuditState,markApprovalCandidateAuthorizationRequired,responderOfRequest,retireActiveCandidates,sameResponder,settleAllowedCandidate,settleDirectApprovalResponse,settleUnavailableCandidate};

package/dist/src/harness/hitl/coordinator.d.ts

@@ -1,35 +0,0 @@
-import { type AuthorizationChallenge } from "#harness/authorization.js";
-import type { HarnessSession, HarnessToolLookup, StepInput } from "#harness/types.js";
-import type { InputRequest } from "#shared/input.js";
-interface ApprovalDeliveryResult {
-    readonly challenges: readonly AuthorizationChallenge[];
-    readonly feedback: readonly string[];
-    readonly kind: "continue" | "continue-coordination" | "authorization-required" | "responses-completed";
-    readonly session: HarnessSession;
-    readonly stepInput?: StepInput;
-}
-/**
- * Advances approval state by one durable phase.
- *
- * | State | Input | Transition |
- * | --- | --- | --- |
- * | pending request | Approve or Cancel | create responder-bound candidate |
- * | pending candidate | coordinator pass or repeated answer | run current authorizer |
- * | pending candidate | allowed | settle with its decision; competitors go stale |
- * | pending candidate | rejected/error/expiry | append terminal history |
- * | pending candidate | authorization required | persist private challenge |
- * | authorization required | matching callback | re-run current authorizer |
- * | settled request | any later response | no state change |
- *
- * Delivery ingestion returns before authorizer work so candidate creation
- * commits before long-running policy execution. Candidate results also
- * commit before lifecycle events are projected by the next stack layer.
- */
-export declare function coordinateApprovalDelivery(input: {
-    readonly now?: number;
-    readonly session: HarnessSession;
-    readonly stepInput?: StepInput;
-    readonly tools: HarnessToolLookup;
-    readonly prepareTools?: (request: InputRequest) => Promise<HarnessToolLookup>;
-}): Promise<ApprovalDeliveryResult>;
-export {};

package/dist/src/harness/hitl/coordinator.js

@@ -1 +0,0 @@
-import{signInAttemptKey}from"./sign-ins.js";import{readHitlState}from"./requests.js";import{createLogger,logError}from"#internal/logging.js";import{contextStorage}from"#context/container.js";import{AuthKey,SessionKey}from"#context/keys.js";import{buildCallbackContext}from"#context/build-callback-context.js";import{buildApprovalResponseAuth,handleApprovalResponsePolicyError}from"#execution/tool-auth.js";import{storedProjection,suspendedSteps}from"#harness/session-machine/view.js";import{getAuthorizationResult,isAuthorizationSignal}from"#harness/authorization.js";import{matchSignIns}from"#harness/session-machine/transitions.js";import{saveTransition,sessionView}from"#harness/session-machine/commit.js";import{ANONYMOUS_SESSION_AUTH_CONTEXT}from"#channel/principal-identity.js";import{isApprovalRequest}from"#harness/input-request-class.js";import{createApprovalCandidate,expireApprovalCandidates,finishApprovalCandidate,getActiveApprovalCandidate,getApprovalAuditState,markApprovalCandidateAuthorizationRequired,sameResponder,settleAllowedCandidate,settleDirectApprovalResponse,settleUnavailableCandidate}from"#harness/hitl/candidates.js";const UNAUTHENTICATED_APPROVAL_FEEDBACK=`Authentication is required to respond to this approval.`,TEMPORARILY_UNAVAILABLE_APPROVAL_REASON=`Approval authorization is temporarily unavailable. Please try again.`,log=createLogger(`harness.hitl`);async function coordinateApprovalDelivery(e){let t=e.now??Date.now(),n=getApprovalAuditState(e.session.state).activeCandidates.filter(e=>e.expiresAt<=t),r=new Set(n.flatMap(e=>e.authorizationChallenges?.map(signInAttemptKey)??[])),i=expireApprovalCandidates({now:t,state:e.session.state}),a={...e.session,state:i};if(r.size>0){let e=sessionView(storedProjection(a.state),a.state);a=saveTransition(a,matchSignIns(e,{attemptIds:[...r]}))}let o=new Set(getApprovalAuditState(a.state).settlements.map(e=>e.requestId)),s=suspendedSteps(a.state).filter(e=>e.requests.length>0),c=new Set(s.flatMap(e=>e.requests.map(e=>e.requestId)));if(s.length===0)return deliveryResult(a,e.stepInput);let l=e.stepInput,u=new Set(s.flatMap(e=>e.responseAuthRequiredRequestIds??[])),d=s.flatMap(e=>e.requests),f=new Map(d.map(e=>[e.requestId,e])),p=[],m=[],h=new Set,g=!1,_=getApprovalAuditState(a.state).activeCandidates,v=[...l?.attributedInputResponses??[],...(l?.inputResponses??[]).map(e=>({auth:void 0,response:e}))];for(let{auth:e,response:n}of v){let r=f.get(n.requestId);if(r===void 0||!isApprovalRequest(r)||(h.add(n.requestId),o.has(n.requestId)))continue;let i=toCandidateDecision(n.optionId);if(i===void 0){m.push(`Respond to this approval with Approve or Cancel.`);continue}if(!u.has(n.requestId)){let r=contextStorage.getStore(),o=e===void 0?r?.get(AuthKey)??r?.get(SessionKey)?.auth.current??null:e,s=suspendedSteps(a.state).find(e=>e.requests.some(e=>e.requestId===n.requestId))?.requester??null;if(s!==null&&o===null){m.push(UNAUTHENTICATED_APPROVAL_FEEDBACK);continue}if(s!==null&&o!==null&&!sameResponder(s,o)){m.push(`Only the person who requested this action can respond to this approval.`);continue}let c=settleDirectApprovalResponse({actor:o??ANONYMOUS_SESSION_AUTH_CONTEXT,outcome:i===`approve`?`allowed`:`cancelled`,requestId:n.requestId,settledAt:t,state:a.state,text:n.text});a={...a,state:c.state};continue}let s=e===void 0?buildCallbackContext().session.auth.current:e;if(s===null){m.push(UNAUTHENTICATED_APPROVAL_FEEDBACK);continue}let c=createApprovalCandidate({candidateIdPrefix:approvalCandidateIdPrefix(r.requestId,s,i),createdAt:t,decision:i,expiresAt:t+6e5,requestId:r.requestId,responder:s,state:a.state,text:n.text});a={...a,state:c.state},g||=c.changed}let y=removeConsumedResponses(l,h);if(g)return deliveryResult(a,y,`continue-coordination`,[],m);let b=new Set(readHitlState(a.state).signIns.map(e=>e.name));for(let n of _){if(n.status===`authorization-required`){let e=n.authorizationChallenges??[];if(!e.some(e=>getAuthorizationResult(e.name)!==void 0)){p.push(...e.filter(e=>!b.has(e.name)));continue}}let r=f.get(n.requestId);if(r===void 0||getActiveApprovalCandidate(a.state,n.candidateId)===void 0)continue;let i=await authorizeCandidate({candidateId:n.candidateId,decision:n.decision,now:t,request:r,responder:n.responder,restoreTools:async()=>await e.prepareTools?.(r)??e.tools,session:a});a=i.session,g||=i.didCommit,p.push(...i.challenges)}let x=getApprovalAuditState(a.state).settlements.filter(e=>c.has(e.requestId)),S=appendSettledResponses(y,x);return(g||n.length>0)&&getApprovalAuditState(a.state).activeCandidates.length===0?deliveryResult(a,S,`responses-completed`,[],m):x.length>0?deliveryResult(a,S,`continue`,[],m):g?deliveryResult(a,S,`continue-coordination`,[],m):deliveryResult(a,S,p.length>0?`authorization-required`:`continue`,p,m)}async function authorizeCandidate(e){let t={...e.session,state:expireApprovalCandidates({now:e.now,state:e.session.state})};if(getActiveApprovalCandidate(t.state,e.candidateId)===void 0)return{challenges:[],didCommit:!1,session:t};let n;try{n=await e.restoreTools()}catch(n){return logError(log,`approval tools could not be restored`,n,{requestId:e.request.requestId}),failCandidate({...e,reason:TEMPORARILY_UNAVAILABLE_APPROVAL_REASON,session:t})}let r=n.get(e.request.action.toolName);if(r===void 0){let n=settleUnavailableCandidate({candidateId:e.candidateId,reason:`The tool this approval was for is no longer available, so the call won't run.`,settledAt:e.now,state:t.state});return{challenges:[],didCommit:n.changed,session:{...t,state:n.state}}}let{approval:i}=r,a=i!==void 0&&typeof i!=`function`?i.response:void 0;if(a===void 0)return failCandidate({...e,reason:TEMPORARILY_UNAVAILABLE_APPROVAL_REASON,session:t});try{let n=buildCallbackContext(),r=await withAuthorizerTimeout(a({auth:buildApprovalResponseAuth({responder:e.responder,scope:e.candidateId}),request:{callId:e.request.action.callId,requestId:e.request.requestId,principal:suspendedSteps(t.state).find(t=>t.requests.some(t=>t.requestId===e.request.requestId))?.requester??null,toolInput:e.request.action.input,toolName:e.request.action.toolName},response:{decision:e.decision,principal:e.responder},session:{id:n.session.id,initiator:n.session.auth.initiator,parent:n.session.parent,turn:n.session.turn}}));if(r.status===`rejected`)return t={...t,state:finishApprovalCandidate({candidateId:e.candidateId,completedAt:e.now,reason:r.reason,state:t.state,status:`rejected`})},{challenges:[],didCommit:!0,session:t};if(r.status!==`allowed`)return failCandidate({...e,session:t});let i=settleAllowedCandidate({candidateId:e.candidateId,settledAt:e.now,state:t.state});return{challenges:[],didCommit:i.changed,session:{...t,state:i.state}}}catch(n){let r=await handleApprovalResponsePolicyError(n).catch(()=>void 0);if(isAuthorizationSignal(r)){let n=r.challenges.map(e=>Date.parse(e.challenge.expiresAt??``)).filter(Number.isFinite).sort((e,t)=>e-t)[0];return t={...t,state:markApprovalCandidateAuthorizationRequired({authorizationChallenges:r.challenges.map(t=>({...t,candidateId:e.candidateId})),candidateId:e.candidateId,expiresAt:n,state:t.state})},{challenges:r.challenges.map(t=>({...t,candidateId:e.candidateId})),didCommit:!0,session:t}}return failCandidate({...e,session:t})}}function failCandidate(e){let t=e.reason??`We couldn’t verify your response. Please try again.`;return{challenges:[],didCommit:!0,session:{...e.session,state:finishApprovalCandidate({candidateId:e.candidateId,completedAt:e.now,reason:t,state:e.session.state,status:`failed`})}}}function appendSettledResponses(e,t){return t.length===0?e:{...e,inputResponses:[...e?.inputResponses??[],...t.map(e=>({optionId:e.outcome===`allowed`?`approve`:`cancel`,requestId:e.requestId,...e.text!==void 0&&{text:e.text}}))]}}function removeConsumedResponses(e,t){if(e===void 0)return;let n=(e.attributedInputResponses??[]).filter(({response:e})=>!t.has(e.requestId)),r=[...(e.inputResponses??[]).filter(e=>!t.has(e.requestId)),...n.map(({response:e})=>e)];return{...e,attributedInputResponses:void 0,inputResponses:r}}function deliveryResult(e,t,n=`continue`,r=[],i=[]){return{challenges:r,feedback:i,kind:n,session:e,stepInput:t}}function toCandidateDecision(e){if(e===`approve`)return`approve`;if(e===`cancel`||e===`deny`)return`cancel`}function approvalCandidateIdPrefix(e,t,n){let r=[t.authenticator,t.issuer??``,t.principalType,t.principalId].join(`:`),i=`${encodeCandidateIdPart(e)}.${encodeCandidateIdPart(r)}`;return n===`approve`?i:`${i}.${encodeCandidateIdPart(n)}`}function encodeCandidateIdPart(e){return Array.from(e,e=>e.codePointAt(0).toString(36)).join(`-`)}async function withAuthorizerTimeout(e){let t;try{return await Promise.race([Promise.resolve(e),new Promise((e,n)=>{t=setTimeout(()=>n(Error(`Approval response authorizer timed out.`)),1e4)})])}finally{t!==void 0&&clearTimeout(t)}}export{coordinateApprovalDelivery};

package/dist/src/harness/input-extraction.d.ts

@@ -1,13 +0,0 @@
-import type { ContentPart, ToolSet } from "ai";
-import type { InputRequest } from "#shared/input.js";
-import type { HarnessToolLookup } from "#harness/types.js";
-/**
- * Extracts tool approval input requests from AI SDK content parts that
- * contain `tool-approval-request` entries. Each prompt names the call by the
- * label its entry in `tools` gives it.
- */
-export declare function extractToolApprovalInputRequests(input: {
-    readonly content: readonly ContentPart<ToolSet>[];
-    readonly excludedCallIds?: ReadonlySet<string>;
-    readonly tools: HarnessToolLookup;
-}): InputRequest[];

package/dist/src/harness/input-extraction.js

@@ -1 +0,0 @@
-import{z}from"#compiled/zod/index.js";import{displayTitle}from"#shared/display-name.js";import{projectToolStartLabel}from"#harness/action-presentation.js";import{createRuntimeToolCallActionFromToolCall}from"#harness/tool-call-action.js";const ToolCallDescriptorSchema=z.object({input:z.unknown(),toolCallId:z.string(),toolName:z.string()}),PersistedToolCallSchema=ToolCallDescriptorSchema.extend({type:z.literal(`tool-call`)}),ToolApprovalRequestSchema=z.object({approvalId:z.string(),isAutomatic:z.boolean().optional().catch(void 0),toolCall:ToolCallDescriptorSchema.optional().catch(void 0),toolCallId:z.string().optional().catch(void 0),type:z.literal(`tool-approval-request`)});function extractToolApprovalInputRequests(e){return extractApprovalRequests(e)}function extractApprovalRequests(e){let t=[],n=new Map;for(let t of e.content){let e=PersistedToolCallSchema.safeParse(t);e.success&&n.set(e.data.toolCallId,e.data)}for(let r of e.content){let i=ToolApprovalRequestSchema.safeParse(r);if(!i.success)continue;let a=i.data;if(a.isAutomatic===!0)continue;let o=a.toolCall??(a.toolCallId===void 0?void 0:n.get(a.toolCallId));if(o===void 0||e.excludedCallIds?.has(o.toolCallId))continue;let s=createRuntimeToolCallActionFromToolCall({toolCall:o}),c=e.tools.get(s.toolName),l=typeof o.input==`object`&&o.input!==null&&!Array.isArray(o.input)?o.input:{},u=c?.approval,d=u===void 0||typeof u==`function`?void 0:u.prompt?.({callId:o.toolCallId,input:l,toolName:o.toolName});if(d!==void 0&&typeof d!=`string`)throw Error(`Tool "${o.toolName}" approval prompt must return a string.`);let f=projectToolStartLabel(c,s.input)??displayTitle(s.toolName);t.push({action:s,allowFreeform:!1,display:`confirmation`,kind:`tool-approval`,options:[{id:`approve`,label:`Approve`},{id:`cancel`,label:`Cancel`}],prompt:d??`Approve ${f}?`,requestId:a.approvalId})}return t}export{extractToolApprovalInputRequests};

package/dist/src/harness/input-request-class.d.ts

@@ -1,3 +0,0 @@
-import type { InputRequest } from "#shared/input.js";
-/** Returns true when the request gates an AI SDK tool call. */
-export declare function isApprovalRequest(request: InputRequest): boolean;

package/dist/src/harness/input-request-class.js

@@ -1 +0,0 @@
-function isApprovalRequest(e){return e.kind===`tool-approval`}export{isApprovalRequest};

package/dist/src/harness/input-request-resolution.d.ts

@@ -1,39 +0,0 @@
-import type { SettledCall } from "#harness/session-machine/transitions.js";
-import type { StepCoordinates as PendingInputBatchEvent } from "#harness/session-machine/view.js";
-import type { InputRequest, InputResponse } from "#shared/input.js";
-export declare const TOOL_EXECUTION_DENIED_MESSAGE = "Tool execution was denied.";
-type ApprovalTerminalStatus = "approved" | "denied" | "ignored" | "invalid";
-export interface ResolvedInputBatch {
-    readonly event: PendingInputBatchEvent;
-    readonly inputs: readonly {
-        readonly outcome: "answered" | ApprovalTerminalStatus;
-        readonly request: InputRequest;
-        readonly response?: InputResponse;
-    }[];
-}
-/**
- * One request's terminal outcome once its batch resolves: an approval's
- * decision, or whether a question received a response.
- */
-export declare function resolveInputOutcome(kind: InputRequest["kind"], response: InputResponse | undefined): "answered" | ApprovalTerminalStatus;
-export declare function resolveApprovalOutcome(response: InputResponse | undefined): {
-    readonly approved: boolean;
-    readonly reason: string | undefined;
-    readonly status: ApprovalTerminalStatus;
-};
-/**
- * What the model reads when a call's tool went away before the call could run.
- * `searchable` says whether the agent has `eve__search` to find another.
- */
-export declare function unavailableToolMessage(toolName: string, searchable: boolean): string;
-/**
- * A call that ends without running: its failed runtime result, which the lifecycle reports at the
- * step's coordinates, and the `error-text` result the model reads.
- */
-export declare function failedCall(call: {
-    readonly callId: string;
-    /** Why the call failed: the error it threw, or a message when it never ran. */
-    readonly failure: Error | string;
-    readonly toolName: string;
-}): Required<SettledCall>;
-export {};

package/dist/src/harness/input-request-resolution.js

@@ -1 +0,0 @@
-import{toErrorMessage}from"#shared/errors.js";import{SEARCH_TOOL_NAME}from"#protocol/catalog-tools.js";import{createRuntimeToolResultFromValue}from"#harness/action-result-helpers.js";const TOOL_EXECUTION_DENIED_MESSAGE=`Tool execution was denied.`;function resolveInputOutcome(e,t){return e===`tool-approval`?resolveApprovalOutcome(t).status:t===void 0?`ignored`:`answered`}function resolveApprovalOutcome(e){if(e===void 0)return{approved:!1,reason:`Ignored because the user continued without responding.`,status:`ignored`};if(e.optionId===`approve`)return{approved:!0,reason:void 0,status:`approved`};if(e.optionId===`cancel`||e.optionId===`deny`){let t=e.text?.trim();return{approved:!1,reason:t?`${TOOL_EXECUTION_DENIED_MESSAGE} The person who denied it wrote: ${JSON.stringify(t)}`:TOOL_EXECUTION_DENIED_MESSAGE,status:`denied`}}return{approved:!1,reason:`Invalid approval response.`,status:`invalid`}}function unavailableToolMessage(e,t){return`The tool "${e}" is no longer available, so the call didn't run. If the task still needs it, ${t?`find an available tool with ${SEARCH_TOOL_NAME} and make a new call`:`make a new call with an available tool`}.`}function failedCall(e){let{callId:t,failure:n,toolName:r}=e;return{part:{output:{type:`error-text`,value:toErrorMessage(n)},toolCallId:t,toolName:r,type:`tool-result`},result:createRuntimeToolResultFromValue({callId:t,isError:!0,output:n,toolName:r})}}export{TOOL_EXECUTION_DENIED_MESSAGE,failedCall,resolveApprovalOutcome,resolveInputOutcome,unavailableToolMessage};

package/dist/src/harness/open-input-request.d.ts

@@ -1,8 +0,0 @@
-import { type SessionInput, type SessionProjection } from "#protocol/session-projection.js";
-/**
- * The request a typed reply answers: the first open request nobody has answered yet. A budget
- * prompt comes first, since the session settles it before anything else; the rest follow the
- * order of the session's `input.requested` events. Channels that can only show text show this
- * request alone, so a reply answers the request the person sees.
- */
-export declare function firstOpenInput(projection: SessionProjection, answered?: (requestId: string) => boolean): SessionInput | undefined;

package/dist/src/harness/open-input-request.js

@@ -1 +0,0 @@
-import{openInputs}from"#protocol/session-projection.js";function firstOpenInput(e,t=()=>!1){let n=openInputs(e).filter(e=>!t(e.request.requestId));return n.find(e=>e.request.kind===`session-limit`)??n[0]}export{firstOpenInput};

package/dist/src/harness/session-machine/events.d.ts

@@ -1,6 +0,0 @@
-import { type AuthorizationCompletedStreamEvent, type InputResolvedStreamEvent } from "#protocol/message.js";
-import type { SessionAuthorization, SessionInput } from "#protocol/session-projection.js";
-/** Reports an open request withdrawn: nobody may answer it anymore. */
-export declare function inputWithdrawn(input: SessionInput): InputResolvedStreamEvent;
-/** Reports an open sign-in withdrawn, as declined: its callback no longer resumes anything. */
-export declare function signInWithdrawn(attempt: SessionAuthorization, reason: string): AuthorizationCompletedStreamEvent;

package/dist/src/harness/session-machine/events.js

@@ -1 +0,0 @@
-import{createAuthorizationCompletedEvent,createInputResolvedEvent}from"#protocol/message.js";function inputWithdrawn(e){return createInputResolvedEvent({resolutions:[{kind:e.request.kind,outcome:`cancelled`,requestId:e.request.requestId}],sequence:e.sequence,stepIndex:e.stepIndex,turnId:e.turnId})}function signInWithdrawn(e,t){return createAuthorizationCompletedEvent({attemptId:e.attemptId,candidateId:e.candidateId,name:e.name,outcome:`declined`,principalId:e.principalId,reason:t,sequence:e.sequence,stepIndex:e.stepIndex,taskId:e.taskId,turnId:e.turnId})}export{inputWithdrawn,signInWithdrawn};

package/dist/src/harness/session-machine/resolver-events.d.ts

@@ -1,12 +0,0 @@
-import { type RuntimeIdentity } from "#protocol/message.js";
-export declare function sessionStartedForResolvers(runtime?: RuntimeIdentity): import("#protocol/message.js").SessionStartedStreamEvent;
-export declare function turnStartedForResolvers(turn: {
-    readonly sequence: number;
-    readonly turnId: string;
-}): import("#protocol/message.js").TurnStartedStreamEvent;
-export declare function stepStartedForResolvers(step: {
-    readonly modelId: string;
-    readonly sequence: number;
-    readonly stepIndex: number;
-    readonly turnId: string;
-}): import("#protocol/message.js").StepStartedStreamEvent;

package/dist/src/harness/session-machine/resolver-events.js

@@ -1 +0,0 @@
-import{createSessionStartedEvent,createStepStartedEvent,createTurnStartedEvent}from"#protocol/message.js";function sessionStartedForResolvers(e){return createSessionStartedEvent({runtime:e})}function turnStartedForResolvers(e){return createTurnStartedEvent(e)}function stepStartedForResolvers(e){return createStepStartedEvent(e)}export{sessionStartedForResolvers,stepStartedForResolvers,turnStartedForResolvers};

package/dist/src/harness/tool-call-action.d.ts

@@ -1,9 +0,0 @@
-import type { RuntimeToolCallActionRequest } from "#shared/action-types.js";
-/** Creates a runtime tool-call action shape from an AI SDK tool call. */
-export declare function createRuntimeToolCallActionFromToolCall(input: {
-    readonly toolCall: {
-        readonly input: unknown;
-        readonly toolCallId: string;
-        readonly toolName: string;
-    };
-}): RuntimeToolCallActionRequest;

package/dist/src/harness/tool-call-action.js

@@ -1 +0,0 @@
-import{resolveToolCallInputObject}from"#harness/coordination.js";function createRuntimeToolCallActionFromToolCall(e){return{callId:e.toolCall.toolCallId,input:resolveToolCallInputObject(e.toolCall.input,{callId:e.toolCall.toolCallId,toolName:e.toolCall.toolName}),kind:`tool-call`,toolName:e.toolCall.toolName}}export{createRuntimeToolCallActionFromToolCall};

package/dist/src/harness/tool-interrupts.d.ts

@@ -1,22 +0,0 @@
-/**
- * Per-step holding pen for the full interrupt signal a tool returns from
- * `execute`.
- *
- * A tool signals a park (e.g. connection OAuth) by *returning* an
- * {@link AuthorizationSignal}. The AI SDK records that return value as the
- * tool-result `output`, which `experimental_telemetry`'s `recordOutputs`
- * exports to OTel spans. So the {@link "#harness/tools.js"} wrapper hands the
- * AI SDK a `resume`-redacted copy of the signal and stashes the full signal
- * here; the park detector reads it back so the journaled challenges keep
- * their `resume` value.
- *
- * Virtual context: never serialized, wiped each step. Set during `execute`
- * and read post-step within the same `runStep` scope, so the slot always
- * outlives the read and never crosses a boundary.
- */
-import type { AlsContext } from "#context/container.js";
-import type { AuthorizationSignal } from "#harness/authorization.js";
-/** Stashes a tool's full interrupt signal under its `toolCallId` for the current step. */
-export declare function stashToolInterrupt(ctx: AlsContext, toolCallId: string, signal: AuthorizationSignal): void;
-/** Reads the full interrupt signal stashed for `toolCallId`, if any. */
-export declare function readToolInterrupt(ctx: AlsContext, toolCallId: string): AuthorizationSignal | undefined;

package/dist/src/harness/tool-interrupts.js

@@ -1 +0,0 @@
-import{ContextKey}from"#context/key.js";const PendingToolInterruptsKey=new ContextKey(`eve.pendingToolInterrupts`);function stashToolInterrupt(e,t,n){let r=e.get(PendingToolInterruptsKey)??{};asContainer(e).setVirtualContext(PendingToolInterruptsKey,{...r,[t]:n})}function readToolInterrupt(e,t){return e.get(PendingToolInterruptsKey)?.[t]}function asContainer(e){return e}export{readToolInterrupt,stashToolInterrupt};

package/dist/src/harness/tool-presentation.d.ts

@@ -1,5 +0,0 @@
-import type { ActionPresentationByCallId } from "#protocol/message.js";
-import type { HarnessToolDefinition } from "#harness/execute-tool.js";
-import { type JsonObject } from "#shared/json.js";
-export declare function projectResultPresentation(definition: HarnessToolDefinition | undefined, callId: string, input: JsonObject | undefined, output: unknown): ActionPresentationByCallId | undefined;
-export declare function projectDeltaPresentation(definition: HarnessToolDefinition | undefined, callId: string, input: JsonObject | undefined, output: unknown): ActionPresentationByCallId | undefined;

package/dist/src/harness/tool-presentation.js

@@ -1 +0,0 @@
-import{normalizePresentationText}from"#shared/presentation-text.js";import{parseJsonObject}from"#shared/json.js";function projectResultPresentation(e,t,n,r){return projectPresentationText(e?.label?.complete,t,n,r)}function projectDeltaPresentation(e,t,n,r){return projectPresentationText(e?.label?.delta,t,n,r)}function projectPresentationText(e,t,n,r){if(e!==void 0&&n!==void 0)try{let i=normalizePresentationText(e(parseJsonObject(n),r));return i===``?void 0:{[t]:{label:i}}}catch{return}}export{projectDeltaPresentation,projectResultPresentation};