eve 0.83.3 → 0.84.1

package/dist/src/reactions/reaction.d.ts

@@ -0,0 +1,83 @@
+import type { ModelMessage } from "ai";
+import type { SessionEvent } from "#protocol/session-event.js";
+import type { ContextContainer } from "#context/container.js";
+import type { DynamicContext } from "#dynamic/definition.js";
+import type { WrittenEvent } from "#execution/publish-session-events.js";
+import type { DynamicEvaluateFn } from "#runtime/types.js";
+import type { JsonValue } from "#shared/json.js";
+/** The kinds of contribution, by the code that reads them. */
+export type ReactionKind = "hook" | "memory" | "model" | "connection" | "subagent" | "tool" | "skill" | "instructions";
+/**
+ * The order reactions run in. Hooks run after each commit, before dynamic values; the model is
+ * chosen first among values, so every later kind can read it.
+ */
+export declare const REACTION_ORDER: readonly ReactionKind[];
+/** What a dynamic value contributes: its JSON form, and the code that form can't carry. */
+export interface Contribution {
+    readonly value: JsonValue;
+    readonly live?: unknown;
+}
+/**
+ * What eve's own definitions receive: the public context, and the step's state. Authored
+ * definitions receive only the public part.
+ */
+export interface InternalContext extends DynamicContext {
+    readonly abortSignal: AbortSignal;
+    readonly ctx: ContextContainer;
+    /** The conversation, where the step holds it. */
+    readonly history: readonly ModelMessage[] | undefined;
+}
+/** What eve's own commit-time effects receive: the step's state and the commit's facts. */
+export interface CommitContext {
+    /** Bound only while a managed turn step can still stop its input. */
+    readonly cancelBeforeTurn?: (cancel: {
+        readonly hook: string;
+        readonly reason?: string;
+    }) => void;
+    readonly abortSignal: AbortSignal;
+    readonly ctx: ContextContainer;
+    /** The commit's records with their positions. */
+    readonly written: readonly WrittenEvent[];
+    /** The commit's events. */
+    readonly facts: readonly SessionEvent[];
+    /** The conversation, where the step holds it. */
+    readonly history: readonly ModelMessage[] | undefined;
+}
+/** One reaction as the runner sees it. Every surface desugars to this. */
+export type Reaction = ValueReaction | CommitReaction;
+interface ReactionBase {
+    readonly id: string;
+    readonly kind: ReactionKind;
+    /** Where it was authored, for errors and logs. */
+    readonly label: string;
+}
+/** A dynamic value: a function of the session, evaluated in each step that needs it. */
+export interface ValueReaction extends ReactionBase {
+    readonly timing?: never;
+    /** Runs the definition. Its memos keep what it learns from outside. */
+    readonly evaluate: (ctx: InternalContext) => unknown;
+    /** Validates and names the value. Throws on a value the kind can't read. */
+    readonly contribute: (result: unknown, ctx: InternalContext) => Contribution | Promise<Contribution>;
+}
+/** A hook, or one of eve's own effects: it runs after every commit. */
+export interface CommitReaction extends ReactionBase {
+    readonly timing: "commit";
+    readonly onCommit: (ctx: CommitContext) => Promise<void>;
+}
+/** The bundle's reactions in run order, and what each kind does once its slots change. */
+export interface BundleReactions {
+    readonly reactions: readonly Reaction[];
+    readonly effects: Partial<Record<ReactionKind, (ctx: ContextContainer) => Promise<void>>>;
+}
+/**
+ * An authored definition's function as a reaction's: it gets the public context. eve's own, which
+ * `asFrameworkDefinition` marks, get eve's.
+ */
+export declare function authoredEvaluate(evaluate: DynamicEvaluateFn, options?: {
+    readonly framework?: boolean;
+}): ValueReaction["evaluate"];
+/** The public part of an evaluation context. */
+export declare function publicContext(ctx: InternalContext): DynamicContext;
+/** The conversation, or an error saying where it's available. */
+export declare function requireHistory(ctx: Pick<InternalContext, "history"> | Pick<CommitContext, "history">, label: string): readonly ModelMessage[];
+export {};

package/dist/src/reactions/reaction.js

@@ -0,0 +1 @@
+const REACTION_ORDER=[`hook`,`memory`,`model`,`connection`,`subagent`,`tool`,`skill`,`instructions`];function authoredEvaluate(e,t={}){let n=e;return t.framework===!0?n:e=>n(publicContext(e))}function publicContext(e){let t=Object.getOwnPropertyDescriptors(e);return delete t.abortSignal,delete t.ctx,delete t.history,Object.defineProperties({},t)}function requireHistory(e,t){if(e.history!==void 0)return e.history;throw Error(`"${t}" read the conversation where the step doesn't hold it: steps that settle background work between turns don't carry it. Read it in a turn, or keep what a turn read in a memo.`)}export{REACTION_ORDER,authoredEvaluate,publicContext,requireHistory};

package/dist/src/reactions/records.d.ts

@@ -0,0 +1,40 @@
+import type { DynamicKey, Memo } from "#dynamic/definition.js";
+import type { JsonValue } from "#shared/json.js";
+/** A key's canonical JSON form and its digest. */
+export declare function keyOf(key: DynamicKey, label: string, method: string): {
+    readonly digest: string;
+};
+/** One scope's memos for one evaluation. */
+export interface MemoRun {
+    readonly memo: Memo;
+    /** The records this evaluation used, by key digest: what the scope keeps when it succeeds. */
+    used(): Readonly<Record<string, JsonValue>>;
+    /** The evaluation settled: a later call throws. */
+    close(): void;
+}
+export declare function openMemos(input: {
+    /** What the records belong to: a definition, or a hook's handler. */
+    readonly scope: string;
+    /** The file, for errors. */
+    readonly label: string;
+    readonly sessionId: string;
+    readonly abortSignal: AbortSignal;
+    /** The records the scope kept. */
+    readonly kept: Readonly<Record<string, JsonValue>> | undefined;
+    /**
+     * Set when eve restores rather than evaluates: a key without a kept record fails with this
+     * message, instead of running.
+     */
+    readonly restoring?: string;
+    /** A deployment change discarded the scope's memos, so a missing key runs for that reason. */
+    readonly afterDeployment?: boolean;
+}): MemoRun;
+/**
+ * Checks that `value` is JSON, naming the path and type of the first part that isn't, such as
+ * `Date at $.accounts[2].createdAt`. A result property whose value is `undefined` is left out, as
+ * `JSON.stringify` does; a key's is rejected, since `{ tenantId: undefined }` would otherwise
+ * share `{}`'s memo.
+ */
+export declare function toJson(value: unknown, subject: string, options?: {
+    readonly key?: boolean;
+}): JsonValue;

package/dist/src/reactions/records.js

@@ -0,0 +1 @@
+import{canonicalJson,digestOf,memoBytes}from"./state.js";import{createLogger}from"#internal/logging.js";import{contextScopeValue,withContextScopeValue}from"#context/container.js";const log=createLogger(`reactions.memos`),RUNNING_GLOBAL_KEY=Symbol.for(`eve.reactions.memo-running`);function keyOf(e,t,n){let r=toJson(e??null,`"${t}": ${n} key`,{key:!0}),i=Buffer.byteLength(canonicalJson(r));if(i>65536)throw Error(`"${t}": ${n} received a ${Math.ceil(i/1024)} KB key; a key is at most 64 KB. Key on an ID, such as a tenant or turn ID.`);return{digest:digestOf(r)}}function openMemos(e){let t={},n={},r=0,use=(t,i)=>{if(r+=memoBytes({[t]:i}),r>4194304)throw Error(`"${e.label}": ctx.memo (key ${t}) brought this evaluation's memos to ${Math.ceil(r/1024)} KB of JSON; one definition or hook keeps at most 4 MB, and every step of the session carries it. Memo once per collection rather than once per row or user-supplied value, and keep IDs rather than whole records.`);n[t]=i},i=new Set,a=!1;return{close:()=>{a=!0},memo:(async(n,r)=>{assertCallable(e.label,`ctx.memo`,a,t);let{digest:o}=keyOf(n,e.label,`ctx.memo`);if(i.has(o))throw Error(`"${e.label}" called ctx.memo twice with the same key (${o}) in one evaluation. Give each memo a distinct key, such as ["tables", ctx.session.id] and ["flags", ctx.turn?.id ?? null].`);i.add(o);let s=e.kept?.[o];if(s!==void 0)return use(o,s),cloneJson(s);if(e.restoring!==void 0)throw Error(`"${e.label}": ${e.restoring} (memo key ${o}).`);let c={abortSignal:e.abortSignal,idempotencyKey:`${e.sessionId}:${e.scope}:memo:${o}`},l=Date.now(),u=toJson(await withContextScopeValue(RUNNING_GLOBAL_KEY,t,()=>r(c))??null,`"${e.label}": ctx.memo (key ${o}) returned`);return assertResultSize(u,e.label,o),log.debug(`Ran a memo`,{durationMs:Date.now()-l,file:e.label,key:o,reason:e.afterDeployment===!0?`deployment change`:`new key`}),use(o,u),cloneJson(u)}),used:()=>n}}function assertCallable(e,t,n,r){if(contextScopeValue(RUNNING_GLOBAL_KEY)===r)throw Error(`"${e}" called ${t} inside a memo. Memos don't nest: call ${t} from the definition, and pass what the inner one needs from outside.`);if(n)throw Error(`"${e}" called ${t} after its evaluation settled. Await every ${t} before the function returns.`)}function assertResultSize(e,t,n){let r=memoBytes(e);if(r>1048576)throw Error(`"${t}": ctx.memo (key ${n}) returned ${Math.ceil(r/1024)} KB of JSON; a memo result is at most 1 MB, and every step of the session carries it. Keep an ID, and fetch the rest where it's used.`)}function cloneJson(e){return JSON.parse(JSON.stringify(e))}function toJson(e,t,n){let visit=(e,r)=>{if(e===null)return null;switch(typeof e){case`string`:case`boolean`:return e;case`number`:if(Number.isFinite(e))return e;throw notJson(t,String(e),r);case`object`:{if(Array.isArray(e))return e.map((e,n)=>{if(e===void 0)throw notJson(t,`undefined`,`${r}[${n}]`);return visit(e,`${r}[${n}]`)});let i=Object.getPrototypeOf(e);if(i!==Object.prototype&&i!==null)throw notJson(t,e.constructor?.name??`object`,r);let a={};for(let[i,o]of Object.entries(e)){let e=/^[A-Za-z_$][\w$]*$/.test(i)?`${r}.${i}`:`${r}[${JSON.stringify(i)}]`;if(o===void 0){if(n?.key!==!0)continue;throw Error(`${t} has undefined at ${e}, which would share a memo with a key that leaves it out. Pass null for a missing value, such as \`tenantId ?? null\`.`)}a[i]=visit(o,e)}return a}default:throw notJson(t,typeof e,r)}};return visit(e,`$`)}function notJson(e,t,n){return Error(`${e} ${t} at ${n}. Memo keys and results must be JSON: return plain data, and build tools, clients, or dates from it outside the memo.`)}export{keyOf,openMemos,toJson};

package/dist/src/reactions/remote.d.ts

@@ -0,0 +1,25 @@
+import type { SessionFrame } from "#dynamic/definition.js";
+import type { ContextReader } from "#context/key.js";
+import type { JsonValue } from "#shared/json.js";
+/**
+ * What eve keeps with a dynamic remote agent's child, privately, so it can build the agent's
+ * credentials again wherever it reaches the child: the session as it was when the child opened,
+ * and the memo results the remote agent was built from. The steps that message, reset, and
+ * cancel the child, and the route that follows its stream, all build them from it, never from
+ * whoever is calling now.
+ */
+export interface DynamicRemoteBinding {
+    readonly session: SessionFrame["session"];
+    readonly channel: SessionFrame["channel"];
+    readonly conversation?: SessionFrame["conversation"];
+    /** The model the parent had chosen, as `ctx.model.id`. */
+    readonly model?: string;
+    /** When the parent's latest commit was written, as `ctx.now`. */
+    readonly at: string;
+    /** The parent's stream position: `ctx.view` and `ctx.turn` fold up to it. */
+    readonly position: number;
+    /** The memo results the definition used, by key digest. */
+    readonly memos: Readonly<Record<string, JsonValue>>;
+}
+/** The binding a child opened now keeps: the session as of its latest commit. */
+export declare function bindingOf(ctx: ContextReader, nodeId: string): DynamicRemoteBinding;

package/dist/src/reactions/remote.js

@@ -0,0 +1 @@
+import{readReactionsState}from"./state.js";import{sessionFrameOf}from"./frame.js";import{effectiveModelId}from"./kinds/model.js";import{sessionTables}from"#protocol/session-projection/session-view.js";import{SessionIdKey}from"#context/keys.js";function bindingOf(e,t){let n=readReactionsState(e),r=sessionFrameOf(e),i=effectiveModelId(e);return{at:r.now.toISOString(),channel:structuredClone(r.channel),...r.conversation!==void 0&&{conversation:structuredClone(r.conversation)},memos:n.memos?.[`subagent:${t}`]??{},...i!==void 0&&{model:i},position:Math.max(0,sessionTables(r.view).position-1),session:{auth:structuredClone(r.session.auth),id:e.get(SessionIdKey)??r.session.id,...r.session.parent!==void 0&&{parent:structuredClone(r.session.parent)},...r.session.predecessor!==void 0&&{predecessor:structuredClone(r.session.predecessor)},...r.session.schedule!==void 0&&{schedule:structuredClone(r.session.schedule)}}}}export{bindingOf};

package/dist/src/reactions/runner.d.ts

@@ -0,0 +1,45 @@
+import type { ModelMessage } from "ai";
+import type { ContextContainer } from "#context/container.js";
+import type { WrittenEvent } from "#execution/publish-session-events.js";
+import type { BundleReactions, CommitContext } from "./reaction.js";
+export interface RunReactionsInput {
+    readonly written: readonly WrittenEvent[];
+    readonly abortSignal?: AbortSignal;
+    /** The conversation as of this commit, or `undefined` in a step that doesn't hold it. */
+    readonly conversation?: readonly ModelMessage[];
+    /** Stops the running turn; absent when this commit can't stop one. */
+    readonly cancelTurn?: CommitContext["cancelBeforeTurn"];
+    readonly cancelBeforeTurn?: CommitContext["cancelBeforeTurn"];
+}
+/** Runs after every commit: hooks' handlers for the commit's facts, then eve's own effects. */
+export declare function runReactions(ctx: ContextContainer, input: RunReactionsInput): Promise<void>;
+/** A dynamic value failed to evaluate before a model call: the turn fails. */
+export declare class ReactionFailedError extends Error {
+    readonly name = "ReactionFailedError";
+    readonly reaction: string;
+    constructor(reaction: string, error: unknown);
+}
+export declare function isReactionFailedError(error: unknown): error is ReactionFailedError;
+/**
+ * Evaluates the session's dynamic values before a model call, with the conversation it reads,
+ * and installs what they return. Throws {@link ReactionFailedError} for the first value that
+ * fails.
+ */
+export declare function evaluateValues(ctx: ContextContainer, input: {
+    readonly abortSignal?: AbortSignal;
+    readonly conversation: readonly ModelMessage[];
+}): Promise<void>;
+/**
+ * Prepares a step: on a move to another deployment, discards memos; drops the slots of
+ * definitions the bundle no longer has; and evaluates again each value whose code this process
+ * doesn't hold, so a step that runs a tool call or reaches a connection before its model call
+ * has them. Its memos return what they kept, so this asks nothing of the outside world again.
+ */
+export declare function restoreReactions(ctx: ContextContainer, input?: {
+    readonly abortSignal?: AbortSignal;
+    readonly conversation?: readonly ModelMessage[];
+    readonly revision?: string;
+}): Promise<void>;
+/** Applies every kind's slots to the step's process-local state, such as its connection registry. */
+export declare function applyReactionEffects(ctx: ContextContainer): Promise<void>;
+export type { BundleReactions };

package/dist/src/reactions/runner.js

@@ -0,0 +1 @@
+import{requireHistory}from"./reaction.js";import{clearLive,digestOf,discardedByDeployment,forgetSessionLive,keepMemos,mergeMemos,readLive,readReactionsState,readSlot,sessionIdOf,writeLive,writeReactionsState}from"./state.js";import{reportReactionFailure,takeIntents}from"./intents.js";import{sessionFrameOf}from"./frame.js";import{openMemos}from"./records.js";import{effectiveModelId}from"./kinds/model.js";import{bundleReactions}from"./bundle.js";import{createLogger}from"#internal/logging.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{SessionIdKey}from"#context/keys.js";import{toErrorMessage}from"#shared/errors.js";import{parseJsonValue}from"#shared/json.js";import{currentProjection}from"#harness/session-machine/current.js";import{activeTurnIdOf}from"#protocol/session-projection.js";const log=createLogger(`reactions`),neverAborted=new AbortController().signal;async function runReactions(e,t){let{reactions:n}=await bundleReactions(e);writeReactionsState(e,withLatest(readReactionsState(e),t.written));let r=n.filter(e=>e.timing===`commit`);if(r.length===0||t.written.length===0)return;let cancelBeforeTurn,i=t.cancelBeforeTurn,a={cancelBeforeTurn:i===void 0?void 0:e=>{cancelBeforeTurn??=()=>i(e)},abortSignal:t.abortSignal??neverAborted,ctx:e,facts:t.written.map(({event:e})=>e),history:t.conversation,written:t.written};for(let n of r)if(!(n.kind!==`hook`&&t.written.every(({progress:e})=>e)))try{await n.onCommit(a)}catch(t){reportReactionFailure(e,n,t)}actOnCancels(e,n,t.cancelTurn),cancelBeforeTurn?.()}var ReactionFailedError=class extends Error{name=`ReactionFailedError`;reaction;constructor(e,t){super(toErrorMessage(t),{cause:t}),this.reaction=e}};function isReactionFailedError(e){return e instanceof ReactionFailedError}async function evaluateValues(e,t){let{reactions:n,effects:r}=await bundleReactions(e),i=new Set;for(let r of values(n)){let n=Date.now(),a;try{a=await evaluate(e,r,{...t,mode:`evaluate`})}catch(e){throw failed(r,e)}a.changed&&i.add(r.kind),log.debug(`Evaluated a dynamic value`,{changed:a.changed,durationMs:Date.now()-n,reaction:r.label})}for(let t of i)await r[t]?.(e)}function failed(e,t){return log.error(`Dynamic value "${e.label}" failed; the turn fails.`,{error:toErrorMessage(t),kind:e.kind}),new ReactionFailedError(e.label,t)}async function restoreReactions(e,t={}){let n=readReactionsState(e);if(t.revision!==void 0&&t.revision!==n.revision){let r=n.revision!==void 0&&n.memos!==void 0;r&&log.info(`The session moved to another deployment; its memos run again.`);let{memos:i,...a}=n;writeReactionsState(e,{...r?{...a,discarded:Object.keys(i??{})}:n,revision:t.revision})}if(process.env.NODE_ENV!==`production`&&process.env.EVE_REACTIONS_COLD===`1`){let t=e.get(SessionIdKey);t!==void 0&&forgetSessionLive(t)}let{reactions:r}=await bundleReactions(e);dropRemovedSlots(e,r);for(let n of values(r)){let r=readSlot(e,n.id);if(r?.live===!0&&readLive(e,n.id,r)===void 0)try{await evaluate(e,n,{...t,mode:`restore`})}catch(e){log.warn(`Dynamic value "${n.label}" didn't evaluate for this step.`,{error:toErrorMessage(e)})}}}function dropRemovedSlots(e,t){let n=readReactionsState(e),r=new Set(t.map(({id:e})=>e)),i=Object.keys(n.slots).filter(e=>!r.has(e)),a=Object.keys(n.memos??{}).filter(e=>!r.has(e.split(`#`)[0]));if(i.length===0&&a.length===0)return;let o={...n.slots};for(let t of i)delete o[t],clearLive(e,t);let s={...n.memos};for(let e of a)delete s[e];writeReactionsState(e,{...n,memos:s,slots:o})}async function applyReactionEffects(e){let{effects:t}=await bundleReactions(e);for(let n of Object.values(t))await n(e)}function values(e){return e.filter(e=>e.timing!==`commit`)}function writeSlot(e,t,n){let r=readReactionsState(e);writeReactionsState(e,{...r,slots:{...r.slots,[t]:n}})}async function evaluate(e,t,n){let r=n.abortSignal??neverAborted,i=sessionIdOf(e),a=readReactionsState(e).memos?.[t.id],o=openMemos({abortSignal:r,kept:a,label:t.label,scope:t.id,sessionId:i,afterDeployment:discardedByDeployment(e,t.id)}),s;try{let i=internalContext(e,t,{...n,abortSignal:r,memo:o.memo});s=await t.contribute(await t.evaluate(i),i)}catch(n){throw mergeMemos(e,t.id,o.used()),n}finally{o.close()}let c=o.used();keepMemos(e,t.id,c);let l=parseJsonValue(s.value??null),u=digestOf(l);isEveDevEnvironment()&&n.mode===`evaluate`&&await checkStable(e,t,{...n,abortSignal:r,digest:u,used:c});let d=readSlot(e,t.id),f=d?.digest===u;!f&&d!==void 0&&n.mode===`restore`&&log.warn(`Dynamic value "${t.label}" offers something other than what the session was offered after a restart: code outside its memos answered differently. eve offers the new value from the next model call.`);let p=readReactionsState(e).latest[`*`]??0,m={digest:u,since:f?d.since:p,value:l,...s.live!==void 0&&{live:!0}};return writeSlot(e,t.id,m),s.live===void 0?clearLive(e,t.id):writeLive(e,t.id,m,s.live),{changed:!f||s.live!==void 0}}async function checkStable(e,t,n){let r=openMemos({abortSignal:n.abortSignal,kept:n.used,label:t.label,restoring:`a second evaluation used a memo key the first didn't`,scope:t.id,sessionId:sessionIdOf(e)});try{let i=internalContext(e,t,{...n,memo:r.memo}),a=await t.contribute(await t.evaluate(i),i);if(digestOf(parseJsonValue(a.value??null))===n.digest)return;log.warn(`Dynamic value "${t.label}" returned something different when evaluated again with the same memos. Code outside a memo, such as Math.random() or Date.now() in a name or description, makes eve rebuild it before every model call; move it into a memo, or use ctx.now.`)}catch(e){log.warn(`Dynamic value "${t.label}" failed when evaluated again with the same memos.`,{error:toErrorMessage(e)})}finally{r.close()}}function internalContext(e,t,n){let r=sessionFrameOf(e),i=n.conversation;return Object.defineProperties({...r,abortSignal:n.abortSignal,ctx:e,history:i,memo:n.memo,messages:async()=>requireHistory({history:i},t.label)},{model:{enumerable:!0,get(){if(t.kind===`model`)throw Error(`"${t.label}" read ctx.model while choosing the model. The model field's function runs before the model is chosen.`);let n=effectiveModelId(e);if(n===void 0)throw Error(`"${t.label}" read ctx.model before the session chose one.`);return{id:n}}}})}function actOnCancels(e,t,n){let r=activeTurnIdOf(currentProjection(e));takeIntents(e,e=>(e.type===`cancel`||e.type===`fail`)&&e.turnId!==r);let[i]=(readReactionsState(e).intents??[]).filter(e=>e.type===`cancel`);if(i===void 0||n===void 0)return;let a=t.find(({id:e})=>e===i.reactionId)?.label??i.reactionId;takeIntents(e,e=>e.type===`cancel`),writeReactionsState(e,{...readReactionsState(e),cancelledTurnId:i.turnId}),n({hook:a,...i.reason!==void 0&&{reason:i.reason}})}function withLatest(e,t){if(t.length===0)return e;let n={...e.latest},r=e.at;for(let{event:e,position:i,progress:a}of t)n[e.type]=i.line,!a&&(n[`*`]=i.line,r=e.meta?.at??r,(e.type===`context.started`||e.type===`context.settled`)&&(n[`${e.type}:${e.data.kind??``}`]=i.line));return{...e,latest:n,...r!==void 0&&{at:r}}}export{ReactionFailedError,applyReactionEffects,evaluateValues,isReactionFailedError,restoreReactions,runReactions};

package/dist/src/reactions/state.d.ts

@@ -0,0 +1,102 @@
+import type { ContextReader } from "#context/key.js";
+import { ContextKey } from "#context/key.js";
+import type { AlsContext } from "#context/container.js";
+import type { JsonValue } from "#shared/json.js";
+/** One dynamic value as installed. */
+export interface Slot {
+    /** The value's JSON form: what readers of data kinds read. */
+    readonly value: JsonValue;
+    /** The digest of `value`, which equality compares. */
+    readonly digest: string;
+    /** The line after which the slot last changed. */
+    readonly since: number;
+    /** The value carries code, which a process that didn't build it builds by evaluating again. */
+    readonly live?: true;
+}
+export interface ReactionsState {
+    readonly slots: Readonly<Record<string, Slot>>;
+    /**
+     * Memo results, by memo scope (a definition, or a hook's handler) and key digest: the keys the
+     * scope's latest evaluation used. Discarded when the session moves to another deployment.
+     */
+    readonly memos?: Readonly<Record<string, Readonly<Record<string, JsonValue>>>>;
+    /** Memo scopes a deployment change discarded, until each succeeds again: for diagnostics. */
+    readonly discarded?: readonly string[];
+    /** For user-role instructions: the digest of the content each definition last added. */
+    readonly appended?: Readonly<Record<string, string>>;
+    /** The latest line of each event type, plus `"*"` for the latest fact. */
+    readonly latest: Readonly<Record<string, number>>;
+    /** When the latest commit was written, as ISO 8601: `ctx.now`. */
+    readonly at?: string;
+    /** The runtime revision the latest step ran; memos made under another are discarded. */
+    readonly revision?: string;
+    /** Commands hooks queued that the session hasn't acted on yet. */
+    readonly intents?: readonly PendingIntent[];
+    /** The turn a hook's cancel stopped: a cancel acts once on its turn. */
+    readonly cancelledTurnId?: string;
+}
+/** A command a hook queued, waiting for the session to act on it. */
+export interface PendingIntent {
+    /** The hook that queued it. */
+    readonly reactionId: string;
+    /** The occurrence it acts for, for diagnostics. */
+    readonly occurrence: string;
+    /** `fail` is eve's own: a hook failed during the turn, which fails at its next boundary. */
+    readonly type: "cancel" | "fail";
+    readonly reason?: string;
+    /** For a cancel or failure, the turn running when the hook ran: never a later one. */
+    readonly turnId?: string;
+}
+export declare const ReactionsStateKey: ContextKey<ReactionsState>;
+export declare function readReactionsState(ctx: Pick<ContextReader, "get"> | undefined): ReactionsState;
+export declare function writeReactionsState(ctx: AlsContext, state: ReactionsState): void;
+/** Updates the state in place of the context's current one. */
+export declare function updateReactionsState(ctx: AlsContext, update: (state: ReactionsState) => ReactionsState): void;
+/**
+ * The most one scope's memos take, in UTF-8 bytes of the JSON map from key digest to result that
+ * every step of the session carries in its checkpoint: a few results at the 1 MB per-result cap.
+ */
+export declare const MEMOS_CAP: number;
+export declare function memoBytes(result: JsonValue): number;
+/** A scope's evaluation succeeded: it keeps the memos it used, and only those. */
+export declare function keepMemos(ctx: AlsContext, scope: string, used: Readonly<Record<string, JsonValue>>): void;
+/** Whether a deployment change discarded `scope`'s memos and it hasn't succeeded since. */
+export declare function discardedByDeployment(ctx: Pick<ContextReader, "get">, scope: string): boolean;
+/**
+ * A scope's evaluation failed: the memos that ran are still valid observations, so it keeps them
+ * beside what it had. Failures in a row can't grow it past `MEMOS_CAP`: once they would, it keeps
+ * only what it had, which what's installed was built from, and the new memos run again.
+ */
+export declare function mergeMemos(ctx: AlsContext, scope: string, used: Readonly<Record<string, JsonValue>>): void;
+/**
+ * A slot's value in the shape its kind wrote. The kind checked it when it contributed, so the
+ * session holds only values of that shape: each kind reads its own slots, never another's.
+ */
+export declare function slotValueOf<T>(value: JsonValue | null | undefined): T;
+/** A stable digest of a JSON value. */
+export declare function digestOf(value: JsonValue): string;
+export declare function canonicalJson(value: JsonValue): string;
+export declare function sessionIdOf(ctx: Pick<ContextReader, "get">): string;
+/** The slot's live value, when this process built it for the value the slot holds. */
+export declare function readLive(ctx: Pick<ContextReader, "get">, id: string, slot: Slot): {
+    readonly live: unknown;
+} | undefined;
+export declare function writeLive(ctx: Pick<ContextReader, "get">, id: string, slot: Slot, live: unknown): void;
+export declare function clearLive(ctx: Pick<ContextReader, "get">, id: string): void;
+/** Drops a session's live values, as a fresh process wouldn't have them. */
+export declare function forgetSessionLive(sessionId: string): void;
+/**
+ * The slots of one kind, in the order each was first written, with their live values where this
+ * process has them.
+ */
+export declare function slotsOf(ctx: Pick<ContextReader, "get"> | undefined, kind: string): readonly {
+    readonly id: string;
+    readonly slot: Slot;
+    readonly live?: unknown;
+}[];
+/**
+ * Versions for the entries one slot offers: each entry's JSON form with the memo results its
+ * definition was built from. A parked call compares its entry's version before it runs.
+ */
+export declare function entryVersions(ctx: Pick<ContextReader, "get">, id: string): (offered: JsonValue) => string;
+export declare function readSlot(ctx: Pick<ContextReader, "get"> | undefined, id: string): Slot | undefined;

package/dist/src/reactions/state.js

@@ -0,0 +1 @@
+import{createHash}from"node:crypto";import{isNonEmptyString}from"#shared/guards.js";import{SessionIdKey}from"#context/keys.js";import{ContextKey}from"#context/key.js";const ReactionsStateKey=new ContextKey(`eve.reactions`),EMPTY_STATE={latest:{},slots:{}};function readReactionsState(e){return e?.get(ReactionsStateKey)??EMPTY_STATE}function writeReactionsState(e,t){e.set(ReactionsStateKey,t)}function updateReactionsState(e,t){writeReactionsState(e,t(readReactionsState(e)))}const MEMOS_CAP=4194304;function memoBytes(e){return Buffer.byteLength(JSON.stringify(e))}function keepMemos(e,t,n){let r=readReactionsState(e),i=r.memos?.[t],a=r.discarded?.filter(e=>e!==t),o=withDiscarded(r,a);if(i===void 0&&Object.keys(n).length===0){a?.length!==r.discarded?.length&&writeReactionsState(e,o);return}let s={...r.memos};Object.keys(n).length===0?delete s[t]:s[t]=n,writeReactionsState(e,{...o,memos:s})}function withDiscarded(e,t){let{discarded:n,...r}=e;return t===void 0||t.length===0?r:{...r,discarded:t}}function discardedByDeployment(e,t){return readReactionsState(e).discarded?.includes(t)===!0}function mergeMemos(e,t,n){if(Object.keys(n).length===0)return;let r=readReactionsState(e),i={...r.memos?.[t],...n};memoBytes(i)>4194304||writeReactionsState(e,{...r,memos:{...r.memos,[t]:i}})}function slotValueOf(e){return e}function digestOf(e){return createHash(`sha256`).update(canonicalJson(e)).digest(`base64url`).slice(0,22)}function canonicalJson(e){if(typeof e!=`object`||!e)return JSON.stringify(e);if(Array.isArray(e))return`[${e.map(canonicalJson).join(`,`)}]`;let t=e;return`{${Object.keys(t).sort().map(e=>`${JSON.stringify(e)}:${canonicalJson(t[e])}`).join(`,`)}}`}const LIVE_GLOBAL_KEY=Symbol.for(`eve.reactions.live`),liveSessions=globalThis[LIVE_GLOBAL_KEY]??=new Map;function sessionIdOf(e){let t=e.get(SessionIdKey);if(!isNonEmptyString(t))throw Error(`Reaction state requires a session ID.`);return t}function sessionLive(e){let t=sessionIdOf(e),n=liveSessions.get(t);return n===void 0?(n=new Map,liveSessions.set(t,n),liveSessions.size>1024&&liveSessions.delete(liveSessions.keys().next().value)):(liveSessions.delete(t),liveSessions.set(t,n)),n}function readLive(e,t,n){let r=sessionLive(e).get(t);if(r!==void 0&&r.digest===n.digest)return{live:r.live}}function writeLive(e,t,n,r){sessionLive(e).set(t,{digest:n.digest,live:r})}function clearLive(e,t){sessionLive(e).delete(t)}function forgetSessionLive(e){liveSessions.delete(e)}function slotsOf(e,t){if(e===void 0)return[];let n=`${t}:`;return Object.entries(readReactionsState(e).slots).filter(([e])=>e.startsWith(n)).map(([t,n])=>{let r=n.live===!0?readLive(e,t,n):void 0;return r===void 0?{id:t,slot:n}:{id:t,live:r.live,slot:n}})}function entryVersions(e,t){let n=digestOf(readReactionsState(e).memos?.[t]??{});return e=>digestOf({memos:n,offered:e})}function readSlot(e,t){return readReactionsState(e).slots[t]}export{MEMOS_CAP,ReactionsStateKey,canonicalJson,clearLive,digestOf,discardedByDeployment,entryVersions,forgetSessionLive,keepMemos,memoBytes,mergeMemos,readLive,readReactionsState,readSlot,sessionIdOf,slotValueOf,slotsOf,updateReactionsState,writeLive,writeReactionsState};

package/dist/src/reactions/turn.d.ts

@@ -0,0 +1,12 @@
+import type { DynamicTurn } from "#dynamic/definition.js";
+import type { UserPart } from "#protocol/session-events/envelope.js";
+import type { SessionView, TurnRow } from "#protocol/session-projection/tables.js";
+/** The session's latest turn, from its tables alone, so it reads the same in every step. */
+export declare function latestTurn(view: SessionView): DynamicTurn | null;
+/**
+ * The parts a turn opened with: its cause, and the deliveries admitted before it started, which it
+ * consumed together. One admitted after it started steers it, and isn't its input.
+ */
+export declare function turnInput(view: SessionView, row: TurnRow): readonly UserPart[];
+/** The text of a turn's input. */
+export declare function turnInputText(turn: DynamicTurn): string;

package/dist/src/reactions/turn.js

@@ -0,0 +1,2 @@
+function latestTurn(e){let t=e.session.latestTurnId,n=t===void 0?void 0:e.turns[t];return n===void 0?null:{id:n.turnId,input:turnInput(e,n),status:n.status}}function turnInput(e,t){let n=`deliveryId`in t.cause?t.cause.deliveryId:void 0;return Object.values(e.deliveries).filter(e=>e.turnId===t.turnId&&e.parts!==void 0&&(e.deliveryId===n||e.introducedAt<t.introducedAt)).sort((e,t)=>e.introducedAt-t.introducedAt).flatMap(e=>e.parts??[])}function turnInputText(e){return e.input.flatMap(e=>e.kind===`text`?[e.text]:[]).join(`
+`)}export{latestTurn,turnInput,turnInputText};

package/dist/src/runtime/agent/bootstrap.d.ts

@@ -19,9 +19,7 @@ export type RuntimeModelReference = Readonly<InternalAgentModelDefinition & {
 /**
  * Runtime-owned reference to a dynamic model resolver authored in `agent.ts`.
  */
-export type RuntimeDynamicModelReference = Readonly<ModuleSourceRef & {
-    readonly eventNames: readonly string[];
-}>;
+export type RuntimeDynamicModelReference = Readonly<ModuleSourceRef>;
 /**
  * Minimal runtime-owned agent shape prepared for one harness turn.
  */

package/dist/src/runtime/agent/mock-model-adapter.js

@@ -1,4 +1,4 @@
-import{createHash}from"node:crypto";import{z}from"#compiled/zod/index.js";import{REPLY_TOOL_NAME}from"#protocol/reply-tool.js";import{SKILL_TOOL_NAME}from"#protocol/catalog-tools.js";import{MockLanguageModelV3}from"ai/test";import{readTaskResults}from"#execution/tasks/render.js";import{BOOTSTRAP_RUNTIME_MODEL_ID,BOOTSTRAP_RUNTIME_SYSTEM_PROMPT}from"#runtime/agent/bootstrap.js";import{createBootstrapGenerateResult,createBootstrapStreamResult,estimateTokenCount,getLastUserPromptText,getPromptContentText,getPromptText,isFrameworkAnnouncementText}from"#runtime/agent/bootstrap-model-utils.js";import{createMockAuthoredToolInput,formatToolOutput,resolveMockFixtureToken,resolveWeatherCity}from"#runtime/agent/mock-model-fixtures.js";import{findRelevantSkill,getActivatedSkillIds,getAvailableSkills,getSkillLoads}from"#runtime/agent/mock-model-skill-selection.js";import{createJsonSchemaSample}from"#runtime/agent/mock-structured-output.js";const authoredRuntimeModelMocks=new Map,bootstrapWeatherPayloadSchema=z.object({city:z.string(),condition:z.string(),summary:z.string(),temperatureF:z.number().finite()}).strict();function shouldMockAuthoredRuntimeModels(){return process.env.NODE_ENV===`test`||process.env.EVE_MOCK_AUTHORED_MODELS===`1`}function createMockAuthoredRuntimeModel(e){let t=authoredRuntimeModelMocks.get(e.id);if(t!==void 0)return t;let n=new MockLanguageModelV3({modelId:e.id,provider:`eve-runtime-mock`,doGenerate:async t=>createMockModelResult(t,e.id),doStream:async t=>createBootstrapStreamResult(createMockModelResult(t,e.id))});return authoredRuntimeModelMocks.set(e.id,n),n}function createMockModelResult(e,t){let n=getLastAuthoredToolResult(e.prompt);if(n!==null){let r=createFollowUpToolCallResult({modelId:t,options:e,result:n});if(r!==null)return r}else{let n=createParallelAuthoredToolCallsResult(e,t)??createSubagentDelegationResult(e,t)??createSkillLoadResult(e.prompt,t)??createAuthoredToolCallResult(e,t);if(n!==null)return n}let r=createFinalOutputResult(e,t);if(r!==null)return r;let i=n===null?createAssistantMessage(e.prompt):formatToolResultReply(n,e.prompt);return createBootstrapGenerateResult({inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(i),text:i})}function createFinalOutputResult(e,t){let n=getAvailableTools(e).find(e=>e.name===REPLY_TOOL_NAME);if(n===void 0)return null;let r=createJsonSchemaSample(n.inputSchema);return createToolCallGenerateResult({input:r,inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(JSON.stringify(r)),toolCallId:createToolCallId(REPLY_TOOL_NAME),toolName:REPLY_TOOL_NAME})}function resolveMockAuthoredRuntimeModel(e){return!shouldMockAuthoredRuntimeModels()||e.id===BOOTSTRAP_RUNTIME_MODEL_ID?null:createMockAuthoredRuntimeModel(e)}function createSkillLoadResult(e,t){let n=getLastUserPromptText(e);if(n===null||getActivatedSkillIds(e).length>0)return null;let r=findRelevantSkill(getAvailableSkills(e),n);return r===null?null:createToolCallGenerateResult({input:{name:r.name},inputTokens:estimateTokenCount(getPromptText(e)),modelId:t,outputTokens:estimateTokenCount(r.name),toolCallId:`call_execute_skill`,toolName:SKILL_TOOL_NAME})}const SUBAGENT_DELEGATION_DIRECTIVE=/\bdelegate\s+to\s+a\s+subagent\s*:\s*(.+)$/iu,PARALLEL_AUTHORED_TOOLS_DIRECTIVE=/^call tools in parallel:\s*(.+)$/imu;function createParallelAuthoredToolCallsResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=PARALLEL_AUTHORED_TOOLS_DIRECTIVE.exec(n)?.[1]?.split(`,`).map(e=>e.trim()).filter(Boolean);if(r===void 0||r.length<2||new Set(r).size!==r.length)return null;let i=new Map(getAvailableTools(e).map(e=>[e.name,e])),a=[];for(let e of r){let t=i.get(e);if(t===void 0)return null;a.push(t)}let o=resolveWeatherCity(n);return createToolCallsGenerateResult({calls:a.map(e=>({input:createMockAuthoredToolInput(e,n,o),toolCallId:createToolCallId(e.name),toolName:e.name})),inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(n)})}function createSubagentDelegationResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=SUBAGENT_DELEGATION_DIRECTIVE.exec(n);if(r?.[1]===void 0)return null;let i=`agent`;if(getAvailableTools(e).find(e=>e.name===i)===void 0)return null;let a=r[1].trim();return createToolCallGenerateResult({input:{message:a},inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(a),toolCallId:createToolCallId(i),toolName:i})}function createAuthoredToolCallResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=findRelevantTool(getAvailableTools(e),n);if(r===null)return null;let i=resolveWeatherCity(n),a=createMockAuthoredToolInput(r,n,i);return createToolCallGenerateResult({input:a,inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(Object.values(a).join(` `)),toolCallId:createToolCallId(r.name),toolName:r.name})}function createFollowUpToolCallResult(e){let t=findNextExplicitToolAfterResult({previousToolName:e.result.toolName,prompt:e.options.prompt,tools:getAvailableTools(e.options)});if(t===null)return null;let n=createFollowUpToolInput(e.result.output);return n===null?null:createToolCallGenerateResult({input:n,inputTokens:estimateTokenCount(getPromptText(e.options.prompt)),modelId:e.modelId,outputTokens:estimateTokenCount(Object.values(n).join(` `)),toolCallId:createToolCallId(t.name),toolName:t.name})}const LIST_ATTACHMENTS_DIRECTIVE=/\blist the attachments\b/iu;function createAssistantMessage(e){let t=getLastUserPromptText(e)??`Hello from eve`;if(LIST_ATTACHMENTS_DIRECTIVE.test(t))return`Attachments: ${JSON.stringify(listPromptAttachments(e))}`;let n=getSystemPromptLabels(e),r=resolveSystemProbe(e),i=resolveMockFixtureToken(e);return i===null?n.length>0?r===null?`Bootstrap reply [${n.join(`, `)}]: ${t}`:`Bootstrap reply [${n.join(`, `)}; probe=${r}]: ${t}`:r===null?`Bootstrap reply: ${t}`:`Bootstrap reply [probe=${r}]: ${t}`:i}function formatToolResultReply(e,t){if(e.isError)return`Local weather tool failed: ${formatToolOutput(e.output)}`;if(isWeatherPayload(e.output))return`Used local weather tool for ${e.output.city}: ${e.output.condition}, ${e.output.temperatureF}F. ${e.output.summary}`;let n=getLastUserPromptText(t)??`Hello from eve`;return`Used ${e.toolName} for "${n}": ${formatToolOutput(e.output)}`}function createToolCallGenerateResult(e){return createToolCallsGenerateResult({calls:[{input:e.input,toolCallId:e.toolCallId,toolName:e.toolName}],inputTokens:e.inputTokens,modelId:e.modelId,outputTokens:e.outputTokens})}function createToolCallsGenerateResult(e){return{content:e.calls.map(e=>({input:JSON.stringify(e.input),toolCallId:e.toolCallId,toolName:e.toolName,type:`tool-call`})),finishReason:{raw:void 0,unified:`tool-calls`},response:{id:`bootstrap-response`,modelId:e.modelId,timestamp:new Date(`2026-03-16T00:00:00.000Z`)},usage:{inputTokens:{cacheRead:0,cacheWrite:0,noCache:e.inputTokens,total:e.inputTokens},outputTokens:{reasoning:0,text:e.outputTokens,total:e.outputTokens}},warnings:[]}}function getAvailableTools(e){return(e.tools??[]).flatMap(e=>e.type===`function`?[{description:e.description,inputSchema:`inputSchema`in e?e.inputSchema:void 0,name:e.name,outputSchema:`outputSchema`in e?e.outputSchema:void 0}]:[])}function getLastAuthoredToolResult(e){let t=getSkillLoads(e);for(let n of[...e].reverse()){if(n.role===`user`){let e=getPromptContentText(n.content).trim(),t=readTaskResults(e).at(-1);if(t!==void 0){let{body:e,taskId:n,tool:r}=t;return{isError:t.status===`failed`,output:e,toolCallId:n,toolName:r}}if(isFrameworkAnnouncementText(e))continue;return null}if(n.role===`tool`||n.role===`assistant`){for(let e of[...n.content].reverse())if(typeof e!=`string`&&e.type===`tool-result`&&!t.has(e.toolCallId))return{isError:e.output.type===`error-json`||e.output.type===`error-text`||e.output.type===`execution-denied`,output:e.output.type===`execution-denied`?{reason:e.output.reason??null,type:e.output.type}:e.output.value,toolCallId:e.toolCallId,toolName:e.toolName}}}return null}function findNextExplicitToolAfterResult(e){let t=getLastUserPromptText(e.prompt);if(t===null)return null;let n=normalizeText(t),r=n.indexOf(normalizeText(e.previousToolName));return r<0?null:e.tools.filter(t=>t.name!==e.previousToolName).flatMap(e=>{let t=n.indexOf(normalizeText(e.name),r+1);return t<0?[]:[{index:t,tool:e}]}).sort((e,t)=>e.index-t.index)[0]?.tool??null}function createFollowUpToolInput(e){return isRecord(e)&&typeof e.stepKey==`string`?{stepKey:e.stepKey}:null}function getSystemPromptLabels(e){let t=e.filter(e=>e.role===`system`);if(t.length===0)return[];let n=t.flatMap(e=>{let t=getPromptContentText(e.content);if(t.startsWith(`Available skills
+import{createHash}from"node:crypto";import{z}from"#compiled/zod/index.js";import{REPLY_TOOL_NAME}from"#protocol/reply-tool.js";import{MockLanguageModelV3}from"ai/test";import{readTaskResults}from"#execution/tasks/render.js";import{SKILL_TOOL_NAME}from"#protocol/catalog-tools.js";import{BOOTSTRAP_RUNTIME_MODEL_ID,BOOTSTRAP_RUNTIME_SYSTEM_PROMPT}from"#runtime/agent/bootstrap.js";import{createBootstrapGenerateResult,createBootstrapStreamResult,estimateTokenCount,getLastUserPromptText,getPromptContentText,getPromptText,isFrameworkAnnouncementText}from"#runtime/agent/bootstrap-model-utils.js";import{createMockAuthoredToolInput,formatToolOutput,resolveMockFixtureToken,resolveWeatherCity}from"#runtime/agent/mock-model-fixtures.js";import{findRelevantSkill,getActivatedSkillIds,getAvailableSkills,getSkillLoads}from"#runtime/agent/mock-model-skill-selection.js";import{createJsonSchemaSample}from"#runtime/agent/mock-structured-output.js";const authoredRuntimeModelMocks=new Map,bootstrapWeatherPayloadSchema=z.object({city:z.string(),condition:z.string(),summary:z.string(),temperatureF:z.number().finite()}).strict();function shouldMockAuthoredRuntimeModels(){return process.env.NODE_ENV===`test`||process.env.EVE_MOCK_AUTHORED_MODELS===`1`}function createMockAuthoredRuntimeModel(e){let t=authoredRuntimeModelMocks.get(e.id);if(t!==void 0)return t;let n=new MockLanguageModelV3({modelId:e.id,provider:`eve-runtime-mock`,doGenerate:async t=>createMockModelResult(t,e.id),doStream:async t=>createBootstrapStreamResult(createMockModelResult(t,e.id))});return authoredRuntimeModelMocks.set(e.id,n),n}function createMockModelResult(e,t){let n=getLastAuthoredToolResult(e.prompt);if(n!==null){let r=createFollowUpToolCallResult({modelId:t,options:e,result:n});if(r!==null)return r}else{let n=createParallelAuthoredToolCallsResult(e,t)??createSubagentDelegationResult(e,t)??createSkillLoadResult(e.prompt,t)??createAuthoredToolCallResult(e,t);if(n!==null)return n}let r=createFinalOutputResult(e,t);if(r!==null)return r;let i=n===null?createAssistantMessage(e.prompt):formatToolResultReply(n,e.prompt);return createBootstrapGenerateResult({inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(i),text:i})}function createFinalOutputResult(e,t){let n=getAvailableTools(e).find(e=>e.name===REPLY_TOOL_NAME);if(n===void 0)return null;let r=createJsonSchemaSample(n.inputSchema);return createToolCallGenerateResult({input:r,inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(JSON.stringify(r)),toolCallId:createToolCallId(REPLY_TOOL_NAME),toolName:REPLY_TOOL_NAME})}function resolveMockAuthoredRuntimeModel(e){return!shouldMockAuthoredRuntimeModels()||e.id===BOOTSTRAP_RUNTIME_MODEL_ID?null:createMockAuthoredRuntimeModel(e)}function createSkillLoadResult(e,t){let n=getLastUserPromptText(e);if(n===null||getActivatedSkillIds(e).length>0)return null;let r=findRelevantSkill(getAvailableSkills(e),n);return r===null?null:createToolCallGenerateResult({input:{name:r.name},inputTokens:estimateTokenCount(getPromptText(e)),modelId:t,outputTokens:estimateTokenCount(r.name),toolCallId:`call_execute_skill`,toolName:SKILL_TOOL_NAME})}const SUBAGENT_DELEGATION_DIRECTIVE=/\bdelegate\s+to\s+a\s+subagent\s*:\s*(.+)$/iu,PARALLEL_AUTHORED_TOOLS_DIRECTIVE=/^call tools in parallel:\s*(.+)$/imu;function createParallelAuthoredToolCallsResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=PARALLEL_AUTHORED_TOOLS_DIRECTIVE.exec(n)?.[1]?.split(`,`).map(e=>e.trim()).filter(Boolean);if(r===void 0||r.length<2||new Set(r).size!==r.length)return null;let i=new Map(getAvailableTools(e).map(e=>[e.name,e])),a=[];for(let e of r){let t=i.get(e);if(t===void 0)return null;a.push(t)}let o=resolveWeatherCity(n);return createToolCallsGenerateResult({calls:a.map(e=>({input:createMockAuthoredToolInput(e,n,o),toolCallId:createToolCallId(e.name),toolName:e.name})),inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(n)})}function createSubagentDelegationResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=SUBAGENT_DELEGATION_DIRECTIVE.exec(n);if(r?.[1]===void 0)return null;let i=`agent`;if(getAvailableTools(e).find(e=>e.name===i)===void 0)return null;let a=r[1].trim();return createToolCallGenerateResult({input:{message:a},inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(a),toolCallId:createToolCallId(i),toolName:i})}function createAuthoredToolCallResult(e,t){let n=getLastUserPromptText(e.prompt);if(n===null)return null;let r=findRelevantTool(getAvailableTools(e),n);if(r===null)return null;let i=resolveWeatherCity(n),a=createMockAuthoredToolInput(r,n,i);return createToolCallGenerateResult({input:a,inputTokens:estimateTokenCount(getPromptText(e.prompt)),modelId:t,outputTokens:estimateTokenCount(Object.values(a).join(` `)),toolCallId:createToolCallId(r.name),toolName:r.name})}function createFollowUpToolCallResult(e){let t=findNextExplicitToolAfterResult({previousToolName:e.result.toolName,prompt:e.options.prompt,tools:getAvailableTools(e.options)});if(t===null)return null;let n=createFollowUpToolInput(e.result.output);return n===null?null:createToolCallGenerateResult({input:n,inputTokens:estimateTokenCount(getPromptText(e.options.prompt)),modelId:e.modelId,outputTokens:estimateTokenCount(Object.values(n).join(` `)),toolCallId:createToolCallId(t.name),toolName:t.name})}const LIST_ATTACHMENTS_DIRECTIVE=/\blist the attachments\b/iu;function createAssistantMessage(e){let t=getLastUserPromptText(e)??`Hello from eve`;if(LIST_ATTACHMENTS_DIRECTIVE.test(t))return`Attachments: ${JSON.stringify(listPromptAttachments(e))}`;let n=getSystemPromptLabels(e),r=resolveSystemProbe(e),i=resolveMockFixtureToken(e);return i===null?n.length>0?r===null?`Bootstrap reply [${n.join(`, `)}]: ${t}`:`Bootstrap reply [${n.join(`, `)}; probe=${r}]: ${t}`:r===null?`Bootstrap reply: ${t}`:`Bootstrap reply [probe=${r}]: ${t}`:i}function formatToolResultReply(e,t){if(e.isError)return`Local weather tool failed: ${formatToolOutput(e.output)}`;if(isWeatherPayload(e.output))return`Used local weather tool for ${e.output.city}: ${e.output.condition}, ${e.output.temperatureF}F. ${e.output.summary}`;let n=getLastUserPromptText(t)??`Hello from eve`;return`Used ${e.toolName} for "${n}": ${formatToolOutput(e.output)}`}function createToolCallGenerateResult(e){return createToolCallsGenerateResult({calls:[{input:e.input,toolCallId:e.toolCallId,toolName:e.toolName}],inputTokens:e.inputTokens,modelId:e.modelId,outputTokens:e.outputTokens})}function createToolCallsGenerateResult(e){return{content:e.calls.map(e=>({input:JSON.stringify(e.input),toolCallId:e.toolCallId,toolName:e.toolName,type:`tool-call`})),finishReason:{raw:void 0,unified:`tool-calls`},response:{id:`bootstrap-response`,modelId:e.modelId,timestamp:new Date(`2026-03-16T00:00:00.000Z`)},usage:{inputTokens:{cacheRead:0,cacheWrite:0,noCache:e.inputTokens,total:e.inputTokens},outputTokens:{reasoning:0,text:e.outputTokens,total:e.outputTokens}},warnings:[]}}function getAvailableTools(e){return(e.tools??[]).flatMap(e=>e.type===`function`?[{description:e.description,inputSchema:`inputSchema`in e?e.inputSchema:void 0,name:e.name,outputSchema:`outputSchema`in e?e.outputSchema:void 0}]:[])}function getLastAuthoredToolResult(e){let t=getSkillLoads(e);for(let n of[...e].reverse()){if(n.role===`user`){let e=getPromptContentText(n.content).trim(),t=readTaskResults(e).at(-1);if(t!==void 0){let{body:e,taskId:n,tool:r}=t;return{isError:t.status===`failed`,output:e,toolCallId:n,toolName:r}}if(isFrameworkAnnouncementText(e))continue;return null}if(n.role===`tool`||n.role===`assistant`){for(let e of[...n.content].reverse())if(typeof e!=`string`&&e.type===`tool-result`&&!t.has(e.toolCallId))return{isError:e.output.type===`error-json`||e.output.type===`error-text`||e.output.type===`execution-denied`,output:e.output.type===`execution-denied`?{reason:e.output.reason??null,type:e.output.type}:e.output.value,toolCallId:e.toolCallId,toolName:e.toolName}}}return null}function findNextExplicitToolAfterResult(e){let t=getLastUserPromptText(e.prompt);if(t===null)return null;let n=normalizeText(t),r=n.indexOf(normalizeText(e.previousToolName));return r<0?null:e.tools.filter(t=>t.name!==e.previousToolName).flatMap(e=>{let t=n.indexOf(normalizeText(e.name),r+1);return t<0?[]:[{index:t,tool:e}]}).sort((e,t)=>e.index-t.index)[0]?.tool??null}function createFollowUpToolInput(e){return isRecord(e)&&typeof e.stepKey==`string`?{stepKey:e.stepKey}:null}function getSystemPromptLabels(e){let t=e.filter(e=>e.role===`system`);if(t.length===0)return[];let n=t.flatMap(e=>{let t=getPromptContentText(e.content);if(t.startsWith(`Available skills
 `))return[];let n=t.split(`
 `).map(e=>e.trim()).filter(e=>e.length>0),r=[];for(let e of n){if(e===BOOTSTRAP_RUNTIME_SYSTEM_PROMPT||e===`Available skills`)continue;let t=/^System \((.+)\)$/.exec(e);if(t?.[1]){r.push(t[1]);continue}let n=/^Skill \((.+)\)$/.exec(e);n?.[1]&&r.push(n[1])}if(r.length>0)return r;let i=n.find(e=>e!==BOOTSTRAP_RUNTIME_SYSTEM_PROMPT&&e!==`Available skills`);return i===void 0?[]:[i]});return[...new Set(n)]}function findRelevantTool(e,t){let n=normalizeText(t),r=e.find(e=>e.name!==`agent`&&n.includes(normalizeText(e.name)));return r===void 0?/\b(forecast|temperature|weather|wind|rain|snow)\b/u.test(n)?e.find(e=>/\b(forecast|temperature|weather|wind|rain|snow)\b/u.test(normalizeText(`${e.name} ${e.description??``}`)))??null:null:r}function normalizeText(e){return e.toLowerCase().replace(/[^a-z0-9]+/gu,` `).trim()}function createToolCallId(e){return`call_${e.toLowerCase().replace(/[^a-z0-9]+/gu,`_`).replace(/^_+|_+$/gu,``)||`tool`}`}function resolveSystemProbe(e){let t=e.filter(e=>e.role===`system`).map(e=>getPromptContentText(e.content)).join(`
 `);return/hmr-probe:\s*([^\n]+)/iu.exec(t)?.[1]?.trim()||null}function isWeatherPayload(e){return z.validate(bootstrapWeatherPayloadSchema,e)}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}const ATTACHMENT_NOTE=/^Attachment\b/u;function listPromptAttachments(e){return e.flatMap(e=>e.role!==`user`||typeof e.content==`string`?[]:e.content.flatMap(e=>{if(typeof e==`string`)return[];if(e.type===`text`)return ATTACHMENT_NOTE.test(e.text)?[{note:e.text.replaceAll(`"`,`'`)}]:[];if(e.type!==`file`)return[];let t=e.filename?.split(`/`).at(-1)??null,n=fileData(e.data);if(n instanceof URL)return[{mediaType:e.mediaType,name:t,url:n.href}];if(n===void 0)return[{mediaType:e.mediaType,name:t}];let r=typeof n==`string`?Buffer.from(n,`base64`):Buffer.from(n);return[{bytes:r.length,mediaType:e.mediaType,name:t,sha256:createHash(`sha256`).update(r).digest(`hex`).slice(0,16)}]}))}function fileData(e){if(typeof e==`string`||e instanceof Uint8Array||e instanceof URL)return e;if(typeof e!=`object`||!e)return;let t=e;if(t.type===`url`&&t.url instanceof URL)return t.url;if(t.type===`data`)return fileData(t.data)}export{createMockAuthoredRuntimeModel,resolveMockAuthoredRuntimeModel,shouldMockAuthoredRuntimeModels};

package/dist/src/runtime/agent/resolve-model.d.ts

@@ -1,10 +1,9 @@
 import type { LanguageModel } from "ai";
 import type { CompiledModuleMap } from "#compiler/module-map.js";
-import type { ContextAccessor } from "#context/key.js";
 import type { RuntimeDynamicModelReference, RuntimeModelReference } from "#runtime/agent/bootstrap.js";
 import { shouldMockAuthoredRuntimeModels } from "#runtime/agent/mock-model-adapter.js";
 import { type PublicAgentDynamicModelDefinition, type PublicAgentDynamicModelResult } from "#shared/agent-definition.js";
-import { type RuntimeModelCatalog } from "#runtime/agent/model-catalog.js";
+import { type ModelMetadata } from "#internal/model-catalog.js";
 export { shouldMockAuthoredRuntimeModels };
 /** A deterministic authoring or selection error that retrying cannot repair. */
 export declare class InvalidRuntimeModelSelectionError extends Error {
@@ -29,8 +28,8 @@ export declare function loadDynamicRuntimeModelDefinition(input: {
     readonly scope: RuntimeModelResolutionScope;
 }): Promise<PublicAgentDynamicModelDefinition>;
 export declare function resolveRuntimeModelSelection(input: {
-    readonly catalog?: RuntimeModelCatalog;
     readonly durability: "durable" | "live";
+    /** The build's model metadata snapshot, read only when the selection omits its context window. */
+    readonly modelMetadata: () => Promise<ModelMetadata>;
     readonly selection: PublicAgentDynamicModelResult;
-    readonly state: ContextAccessor;
 }): Promise<ResolvedRuntimeModelSelection>;

package/dist/src/runtime/agent/resolve-model.js

@@ -1 +1 @@
-import{localGatewayModel}from"#internal/model-auth/transport.js";import{RuntimeModelMetadataCacheKey}from"#context/keys.js";import{parseJsonObject}from"#shared/json.js";import{isDynamicModelDefinition}from"#shared/agent-definition.js";import{normalizeAgentDefinition,normalizeAgentPromptCache}from"#internal/authored-definition/core.js";import{formatLanguageModelGatewayId,isAgentReasoningDefinition,isRuntimeLanguageModel}from"#internal/runtime-model.js";import{loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{resolveBootstrapRuntimeModel}from"#runtime/agent/bootstrap-model.js";import{resolveMockAuthoredRuntimeModel,shouldMockAuthoredRuntimeModels}from"#runtime/agent/mock-model-adapter.js";import{createRuntimeModelCatalog}from"#runtime/agent/model-catalog.js";var InvalidRuntimeModelSelectionError=class extends Error{constructor(e,t){super(e,t),this.name=`InvalidRuntimeModelSelectionError`}};async function resolveRuntimeModelReference(e,t){let n=resolveBootstrapRuntimeModel(e);if(n!==null)return n;let r=resolveMockAuthoredRuntimeModel(e);return r===null?isSourceBackedRuntimeModelReference(e)?await loadSourceBackedRuntimeModelReference(e,t):localGatewayModel(e.id)??e.id:r}async function loadSourceBackedRuntimeModelReference(e,t){if(t===void 0)throw Error(`Expected a compiled module-map scope to resolve the authored runtime model "${e.id}".`);let n=await loadResolvedModuleExport({definition:e.source,kindLabel:`runtime model "${e.id}"`,moduleMap:t.moduleMap,nodeId:t.nodeId}),r=normalizeAgentDefinition(n,`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to match the public eve shape.`),i=e.sourceField===`compaction.model`?r.compaction?.model:r.model;if(i===void 0)throw Error(`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to provide a runtime model at "${e.sourceField??`model`}".`);if(isDynamicModelDefinition(i))throw Error(`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to provide a static runtime model.`);return i}function isSourceBackedRuntimeModelReference(e){return e.source!==void 0}async function loadDynamicRuntimeModelDefinition(e){let t=await loadResolvedModuleExport({definition:e.dynamicModel,kindLabel:`dynamic runtime model`,moduleMap:e.scope.moduleMap,nodeId:e.scope.nodeId}),n=normalizeAgentDefinition(t,`Expected the authored agent config export "${e.dynamicModel.exportName??`default`}" from "${e.dynamicModel.logicalPath}" to match the public eve shape.`).model;if(!isDynamicModelDefinition(n))throw Error(`Expected the authored agent config export "${e.dynamicModel.exportName??`default`}" from "${e.dynamicModel.logicalPath}" to provide a dynamic model definition.`);return n}async function resolveRuntimeModelSelection(e){if(e.selection===null||e.selection===void 0)throw new InvalidRuntimeModelSelectionError(`Dynamic model resolver returned no model. Every matching dynamic model handler must return a concrete model selection.`);let t,n,r;try{t=normalizeDynamicModelSelection(e.selection),validateDynamicModelSelection(t),n=t.modelOptions?.providerOptions===void 0?void 0:parseProviderOptionsRecord(t.modelOptions.providerOptions),r=t.modelOptions?.promptCache===void 0?void 0:normalizeAgentPromptCache(t.modelOptions.promptCache,`Dynamic model resolver returned an invalid selection.`)}catch(e){throw invalidSelectionError(e)}let i=t.model,a=e.catalog??runtimeModelCatalogForState(e.state);if(typeof i==`string`){let o=formatLanguageModelGatewayId(i);if(r!==void 0)throw gatewayPromptCacheError(o);let s=await resolveSelectionMetadata({cacheKey:`gateway:${o}`,catalog:a,contextWindowTokens:t.modelContextWindowTokens,load:e=>e.getByGatewayId(o),modelLabel:o,state:e.state});return{reference:{id:s.resolvedModelId,contextWindowTokens:s.contextWindowTokens,maxOutputTokens:s.maxOutputTokens,providerOptions:n,reasoning:t.reasoning}}}if(validateRuntimeLanguageModel(i),e.durability===`durable`)throw new InvalidRuntimeModelSelectionError(`Dynamic model selection returned a provider object, but durable model selections must be serializable. Return a model id string, or use a "step.started" model resolver.`);let o=formatLanguageModelGatewayId(i),s=i.provider.split(`.`)[0];if(r!==void 0&&s===`gateway`)throw gatewayPromptCacheError(o);let c=await resolveSelectionMetadata({cacheKey:s===`gateway`?`gateway:${i.modelId}`:`provider:${i.provider}:${i.modelId}`,catalog:a,contextWindowTokens:t.modelContextWindowTokens,load:e=>s===`gateway`?e.getByGatewayId(i.modelId):e.getByProviderModelId(i.provider,i.modelId),modelLabel:o,state:e.state});return{model:i,reference:{id:c.resolvedModelId,contextWindowTokens:c.contextWindowTokens,maxOutputTokens:c.maxOutputTokens,promptCache:r,providerOptions:n,reasoning:t.reasoning}}}function invalidSelectionError(e){return e instanceof InvalidRuntimeModelSelectionError?e:new InvalidRuntimeModelSelectionError(e instanceof Error?e.message:String(e),{cause:e})}function gatewayPromptCacheError(e){return new InvalidRuntimeModelSelectionError(`Dynamic model resolver returned modelOptions.promptCache for "${e}", which routes through AI Gateway. promptCache applies only to models eve calls directly; Gateway manages its own prompt caching through providerOptions.gateway.caching.`)}const runtimeModelCatalogsByState=new WeakMap;function runtimeModelCatalogForState(e){let t=runtimeModelCatalogsByState.get(e);if(t!==void 0)return t;let n=createRuntimeModelCatalog();return runtimeModelCatalogsByState.set(e,n),n}async function resolveSelectionMetadata(e){if(e.contextWindowTokens!==void 0)return{contextWindowTokens:e.contextWindowTokens,resolvedModelId:e.modelLabel};let t=Date.now(),n=e.state.get(RuntimeModelMetadataCacheKey)?.[e.cacheKey];if(n!==void 0&&n.expiresAt>t)return n;let r=await e.load(e.catalog);if(r===null)throw new InvalidRuntimeModelSelectionError(`Cannot select model "${e.modelLabel}" because AI Gateway did not provide context window metadata. Return modelContextWindowTokens with this selection for an unlisted or custom model.`);let i={...r,expiresAt:t+864e5};return e.state.set(RuntimeModelMetadataCacheKey,n=>({...Object.fromEntries(Object.entries(n??{}).filter(([,e])=>e.expiresAt>t)),[e.cacheKey]:i})),i}const DYNAMIC_MODEL_SELECTION_KEYS=new Set([`model`,`modelContextWindowTokens`,`modelOptions`,`reasoning`]);function validateDynamicModelSelection(e){let t=Object.keys(e).filter(e=>!DYNAMIC_MODEL_SELECTION_KEYS.has(e));if(t.length>0)throw Error(`Dynamic model resolver returned a selection with unknown key(s): ${t.join(`, `)}. Expected { model, reasoning?, modelContextWindowTokens?, modelOptions? }.`);if(e.reasoning!==void 0&&!isAgentReasoningDefinition(e.reasoning))throw Error(`Dynamic model resolver returned an invalid reasoning effort. Expected provider-default, none, minimal, low, medium, high, or xhigh.`);let n=e.modelContextWindowTokens;if(n!==void 0&&(!Number.isInteger(n)||n<=0))throw Error(`Dynamic model resolver returned an invalid modelContextWindowTokens value. Expected a positive integer.`);if(typeof e.model==`string`&&e.model.trim()===``)throw Error(`Dynamic model resolver returned an empty model id.`)}function normalizeDynamicModelSelection(e){return isModelSelectionDefinition(e)?e:{model:e}}function isModelSelectionDefinition(e){return typeof e==`object`&&!!e&&`model`in e&&!isRuntimeLanguageModel(e)}function validateRuntimeLanguageModel(e){if(!isRuntimeLanguageModel(e))throw new InvalidRuntimeModelSelectionError(`Dynamic model resolver returned an invalid model. Return an AI Gateway model id string, an AI SDK language model, or { model, modelContextWindowTokens?, modelOptions? }.`)}function parseProviderOptionsRecord(e){if(e===void 0)return;let t={};for(let[n,r]of Object.entries(e))t[n]=parseJsonObject(r);return t}export{InvalidRuntimeModelSelectionError,loadDynamicRuntimeModelDefinition,resolveRuntimeModelReference,resolveRuntimeModelSelection,shouldMockAuthoredRuntimeModels};
+import{localGatewayModel}from"#internal/model-auth/transport.js";import{parseJsonObject}from"#shared/json.js";import{isDynamicModelDefinition}from"#shared/agent-definition.js";import{lookupCatalogModelByProviderModelId,lookupCatalogModelBySlug}from"#internal/model-catalog.js";import{normalizeAgentDefinition,normalizeAgentPromptCache}from"#internal/authored-definition/core.js";import{formatLanguageModelGatewayId,isAgentReasoningDefinition,isRuntimeLanguageModel}from"#internal/runtime-model.js";import{loadResolvedModuleExport}from"#runtime/resolve-helpers.js";import{resolveBootstrapRuntimeModel}from"#runtime/agent/bootstrap-model.js";import{resolveMockAuthoredRuntimeModel,shouldMockAuthoredRuntimeModels}from"#runtime/agent/mock-model-adapter.js";var InvalidRuntimeModelSelectionError=class extends Error{constructor(e,t){super(e,t),this.name=`InvalidRuntimeModelSelectionError`}};async function resolveRuntimeModelReference(e,t){let n=resolveBootstrapRuntimeModel(e);if(n!==null)return n;let r=resolveMockAuthoredRuntimeModel(e);return r===null?isSourceBackedRuntimeModelReference(e)?await loadSourceBackedRuntimeModelReference(e,t):localGatewayModel(e.id)??e.id:r}async function loadSourceBackedRuntimeModelReference(e,t){if(t===void 0)throw Error(`Expected a compiled module-map scope to resolve the authored runtime model "${e.id}".`);let n=await loadResolvedModuleExport({definition:e.source,kindLabel:`runtime model "${e.id}"`,moduleMap:t.moduleMap,nodeId:t.nodeId}),r=normalizeAgentDefinition(n,`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to match the public eve shape.`),i=e.sourceField===`compaction.model`?r.compaction?.model:r.model;if(i===void 0)throw Error(`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to provide a runtime model at "${e.sourceField??`model`}".`);if(isDynamicModelDefinition(i))throw Error(`Expected the authored agent config export "${e.source.exportName??`default`}" from "${e.source.logicalPath}" to provide a static runtime model.`);return i}function isSourceBackedRuntimeModelReference(e){return e.source!==void 0}async function loadDynamicRuntimeModelDefinition(e){let t=await loadResolvedModuleExport({definition:e.dynamicModel,kindLabel:`dynamic runtime model`,moduleMap:e.scope.moduleMap,nodeId:e.scope.nodeId}),n=normalizeAgentDefinition(t,`Expected the authored agent config export "${e.dynamicModel.exportName??`default`}" from "${e.dynamicModel.logicalPath}" to match the public eve shape.`).model;if(!isDynamicModelDefinition(n))throw Error(`Expected the authored agent config export "${e.dynamicModel.exportName??`default`}" from "${e.dynamicModel.logicalPath}" to provide a dynamic model definition.`);return n}async function resolveRuntimeModelSelection(e){if(e.selection===null||e.selection===void 0)throw new InvalidRuntimeModelSelectionError(`The dynamic model returned no model. Return a model ID, a provider model, or { model, reasoning?, modelContextWindowTokens?, modelOptions? }.`);let t,n,r;try{t=normalizeDynamicModelSelection(e.selection),validateDynamicModelSelection(t),n=t.modelOptions?.providerOptions===void 0?void 0:parseProviderOptionsRecord(t.modelOptions.providerOptions),r=t.modelOptions?.promptCache===void 0?void 0:normalizeAgentPromptCache(t.modelOptions.promptCache,`Dynamic model resolver returned an invalid selection.`)}catch(e){throw invalidSelectionError(e)}let i=t.model;if(typeof i==`string`){let a=formatLanguageModelGatewayId(i);if(r!==void 0)throw gatewayPromptCacheError(a);return{reference:{id:a,contextWindowTokens:t.modelContextWindowTokens??(await lookupModelMetadata(e.modelMetadata,a,e=>lookupCatalogModelBySlug(e,a))).contextWindowTokens,providerOptions:n,reasoning:t.reasoning}}}if(validateRuntimeLanguageModel(i),e.durability===`durable`)throw new InvalidRuntimeModelSelectionError(`Dynamic model selection returned a provider object, but durable model selections must be serializable. Return a model id string, or use a "beforeModel" model resolver.`);let a=formatLanguageModelGatewayId(i),o=i.provider.split(`.`)[0]===`gateway`;if(r!==void 0&&o)throw gatewayPromptCacheError(a);let s=o?i.modelId:a,c=t.modelContextWindowTokens;if(c===void 0){let t=await lookupModelMetadata(e.modelMetadata,s,e=>o?lookupCatalogModelBySlug(e,i.modelId):lookupCatalogModelByProviderModelId(e,i.provider,i.modelId));o||(s=t.slug),c=t.contextWindowTokens}return{model:i,reference:{id:s,contextWindowTokens:c,promptCache:r,providerOptions:n,reasoning:t.reasoning}}}function invalidSelectionError(e){return e instanceof InvalidRuntimeModelSelectionError?e:new InvalidRuntimeModelSelectionError(e instanceof Error?e.message:String(e),{cause:e})}function gatewayPromptCacheError(e){return new InvalidRuntimeModelSelectionError(`Dynamic model resolver returned modelOptions.promptCache for "${e}", which routes through AI Gateway. promptCache applies only to models eve calls directly; Gateway manages its own prompt caching through providerOptions.gateway.caching.`)}async function lookupModelMetadata(e,t,n){let r=await e(),i=n(r);if(i!==null)return i;throw new InvalidRuntimeModelSelectionError(r.fetchedAt===null?`Cannot select model "${t}" because this build couldn't read the AI Gateway model catalog, so it has no context window for the model. Return modelContextWindowTokens with this selection, or rebuild with network access to ai-gateway.vercel.sh.`:`Cannot select model "${t}" because the AI Gateway model catalog this build read at ${r.fetchedAt} has no context window for it. Return modelContextWindowTokens with this selection for an unlisted or custom model, or rebuild to pick up a newly published one.`)}const DYNAMIC_MODEL_SELECTION_KEYS=new Set([`model`,`modelContextWindowTokens`,`modelOptions`,`reasoning`]);function validateDynamicModelSelection(e){let t=Object.keys(e).filter(e=>!DYNAMIC_MODEL_SELECTION_KEYS.has(e));if(t.length>0)throw Error(`A dynamic model returns only runtime settings: model, reasoning, modelContextWindowTokens, and modelOptions. It returned ${t.map(e=>`"${e}"`).join(`, `)}, which can't vary per session; declare ${t.length===1?`it`:`them`} on defineAgent() instead.`);if(e.reasoning!==void 0&&!isAgentReasoningDefinition(e.reasoning))throw Error(`Dynamic model resolver returned an invalid reasoning effort. Expected provider-default, none, minimal, low, medium, high, or xhigh.`);let n=e.modelContextWindowTokens;if(n!==void 0&&(!Number.isInteger(n)||n<=0))throw Error(`Dynamic model resolver returned an invalid modelContextWindowTokens value. Expected a positive integer.`);if(typeof e.model==`string`&&e.model.trim()===``)throw Error(`Dynamic model resolver returned an empty model id.`)}function normalizeDynamicModelSelection(e){return isModelSelectionDefinition(e)?e:{model:e}}function isModelSelectionDefinition(e){return typeof e==`object`&&!!e&&`model`in e&&!isRuntimeLanguageModel(e)}function validateRuntimeLanguageModel(e){if(!isRuntimeLanguageModel(e))throw new InvalidRuntimeModelSelectionError(`Dynamic model resolver returned an invalid model. Return an AI Gateway model id string, an AI SDK language model, or { model, modelContextWindowTokens?, modelOptions? }.`)}function parseProviderOptionsRecord(e){if(e===void 0)return;let t={};for(let[n,r]of Object.entries(e))t[n]=parseJsonObject(r);return t}export{InvalidRuntimeModelSelectionError,loadDynamicRuntimeModelDefinition,resolveRuntimeModelReference,resolveRuntimeModelSelection,shouldMockAuthoredRuntimeModels};

package/dist/src/runtime/connections/principal.d.ts

@@ -69,3 +69,5 @@ export declare function principalKey(principal: ConnectionPrincipal): string;
 export declare function resolveConnectionPrincipal(connectionName: string, authorization: AuthorizationDefinition, ctx?: AlsContext | undefined): ConnectionPrincipal;
 /** Resolves a connection principal from an explicitly bound session identity. */
 export declare function resolveConnectionPrincipalFromAuth(connectionName: string, authorization: AuthorizationDefinition, current: SessionAuthContext | null | undefined, ctx?: AlsContext): ConnectionPrincipal;
+/** Whether `current` is a Vercel user authenticated by a development OIDC token for this project. */
+export declare function isVercelDevelopmentUser(current: SessionAuthContext): boolean;

package/dist/src/runtime/connections/principal.js

@@ -1 +1 @@
-import{isVercelOidcIssuer}from"#shared/vercel-project.js";import{contextStorage}from"#context/container.js";import{AuthKey}from"#context/keys.js";import{ConnectionAuthorizationFailedError}from"#connections/errors.js";function principalKey(e){return e.type===`app`?`app`:JSON.stringify([`user`,e.issuer??null,e.id])}function resolveConnectionPrincipal(e,t,n=contextStorage.getStore()){return resolveConnectionPrincipalFromAuth(e,t,n?.get(AuthKey),n)}function resolveConnectionPrincipalFromAuth(e,t,n,r){if(t.principalType===`app`)return{type:`app`};if(n==null||n.principalType!==`user`)throw new ConnectionAuthorizationFailedError(e,{message:buildUserPrincipalRequiredMessage(e,t,r,n),reason:`principal_required`,retryable:!1});return t.vercelConnect!==void 0&&isVercelDevelopmentUser(n)?{attributes:n.attributes,id:n.subject??n.principalId,type:`user`}:{attributes:n.attributes,id:n.principalId,issuer:n.issuer??n.authenticator,type:`user`}}function isVercelDevelopmentUser(e){return e.authenticator===`oidc`&&isVercelOidcIssuer(e.issuer)&&e.attributes.environment===`development`&&e.subject===e.attributes.user_id}function buildUserPrincipalRequiredMessage(e,t,n,r){let i;return i=n===void 0?`it was invoked outside an eve context, so no authenticated user can be resolved.`:r==null?`the active session has no authenticated user.`:t.vercelConnect!==void 0&&r.authenticator===`local-dev`?`the local request fell back to local development access instead of authenticating a Vercel user. Ensure this directory is linked and the Vercel CLI can mint a Vercel OIDC token, then retry.`:`the active session is scoped to "${r.principalType}", not an authenticated user.`,`Connection "${e}" is user-scoped, but ${i} User-scoped connections require route auth that resolves an authenticated user. If this connection should use credentials shared by the agent instead, configure it as an app-scoped connection.`}export{principalKey,resolveConnectionPrincipal,resolveConnectionPrincipalFromAuth};
+import{isVercelOidcIssuer}from"#shared/vercel-project.js";import{contextStorage}from"#context/container.js";import{AuthKey}from"#context/keys.js";import{ConnectionAuthorizationFailedError}from"#connections/errors.js";function principalKey(e){return e.type===`app`?`app`:JSON.stringify([`user`,e.issuer??null,e.id])}function resolveConnectionPrincipal(e,t,n=contextStorage.getStore()){return resolveConnectionPrincipalFromAuth(e,t,n?.get(AuthKey),n)}function resolveConnectionPrincipalFromAuth(e,t,n,r){if(t.principalType===`app`)return{type:`app`};if(n==null||n.principalType!==`user`)throw new ConnectionAuthorizationFailedError(e,{message:buildUserPrincipalRequiredMessage(e,t,r,n),reason:`principal_required`,retryable:!1});return t.vercelConnect!==void 0&&isVercelDevelopmentUser(n)?{attributes:n.attributes,id:n.subject??n.principalId,type:`user`}:{attributes:n.attributes,id:n.principalId,issuer:n.issuer??n.authenticator,type:`user`}}function isVercelDevelopmentUser(e){return e.authenticator===`oidc`&&isVercelOidcIssuer(e.issuer)&&e.attributes.environment===`development`&&e.subject===e.attributes.user_id}function buildUserPrincipalRequiredMessage(e,t,n,r){let i;return i=n===void 0?`it was invoked outside an eve context, so no authenticated user can be resolved.`:r==null?`the active session has no authenticated user.`:t.vercelConnect!==void 0&&r.authenticator===`local-dev`?`the local request fell back to local development access instead of authenticating a Vercel user. Ensure this directory is linked and the Vercel CLI can mint a Vercel OIDC token, then retry.`:`the active session is scoped to "${r.principalType}", not an authenticated user.`,`Connection "${e}" is user-scoped, but ${i} User-scoped connections require route auth that resolves an authenticated user. If this connection should use credentials shared by the agent instead, configure it as an app-scoped connection.`}export{isVercelDevelopmentUser,principalKey,resolveConnectionPrincipal,resolveConnectionPrincipalFromAuth};

package/dist/src/runtime/connections/registry.d.ts

@@ -13,8 +13,8 @@ import type { ConnectionRegistry } from "#runtime/connections/registry-types.js"
 export declare class ConnectionRegistryImpl implements ConnectionRegistry {
     #private;
     constructor(connections: readonly ResolvedConnectionDefinition[]);
-    /** Replaces one complete dynamic scope and closes clients whose definition changed. */
-    replaceDynamicConnections(scope: "session" | "turn", connectionsByResolver: ReadonlyMap<string, readonly ResolvedConnectionDefinition[]>): Promise<void>;
+    /** Replaces the dynamic connections, by reaction, and closes clients whose definition changed. */
+    replaceDynamicConnections(connectionsByResolver: ReadonlyMap<string, readonly ResolvedConnectionDefinition[]>): Promise<void>;
     /**
      * Returns the client for the named connection, creating it on first
      * access. The connection's `protocol` selects the client type.

package/dist/src/runtime/connections/registry.js

@@ -1 +1 @@
-import{assertNotConnectionOwned}from"#connections/ownership.js";import{McpConnectionClient}from"#runtime/connections/mcp-client.js";import{OpenApiConnectionClient}from"#runtime/connections/openapi-client.js";var ConnectionRegistryImpl=class{#e=new Map;#t;#n;#r=new Map;#i=new Map;constructor(e){this.#n=e,this.#t=e}async replaceDynamicConnections(e,t){let n=e===`session`?new Map(t):this.#r,r=e===`turn`?new Map(t):this.#i,i=this.#a(n,r),a=new Map(this.#t.map(e=>[e.connectionName,e])),o=new Map(i.map(e=>[e.connectionName,e])),s=[];for(let[e,t]of this.#e)a.get(e)!==o.get(e)&&(this.#e.delete(e),s.push(t));this.#r=n,this.#i=r,this.#t=i,await Promise.allSettled(s.map(e=>e.close()))}#a(e,t){let n=new Map(e);for(let[e,r]of t)n.set(e,r);let r=new Map,i=new Map(this.#n.map(e=>[e.connectionName,e]));for(let[e,t]of n)for(let n of t){let t=r.get(n.connectionName);if(t!==void 0&&t!==e)throw Error(`Dynamic connection "${n.connectionName}" from resolver "${e}" collides with dynamic resolver "${t}". Namespace the map key manually.`);r.set(n.connectionName,e),i.set(n.connectionName,n)}for(let e of r.keys())assertNoNestedConnection(e,i.keys());return[...i.values()]}getClient(e){let t=this.#e.get(e);if(t!==void 0)return t;let n=this.#t.find(t=>t.connectionName===e);if(n===void 0)throw Error(`Connection "${e}" is not registered.`);let r=n.protocol===`openapi`?new OpenApiConnectionClient(n):new McpConnectionClient(n);return this.#e.set(e,r),r}getConnectionApproval(e){return this.#t.find(t=>t.connectionName===e)?.approval}getConnectionNames(){return this.#t.map(e=>e.connectionName)}getConnections(){return this.#t}async dispose(){let e=[...this.#e.values()].map(e=>e.close());await Promise.allSettled(e),this.#e.clear()}};function assertNoNestedConnection(e,t){for(let n of t){if(n===e)continue;let[t,r]=n.length<e.length?[e,n]:[n,e];assertNotConnectionOwned({connectionNames:[r],name:t,remedy:`Rename the dynamic connection "${e}".`,subject:`Connection`})}}export{ConnectionRegistryImpl};
+import{assertNotConnectionOwned}from"#connections/ownership.js";import{McpConnectionClient}from"#runtime/connections/mcp-client.js";import{OpenApiConnectionClient}from"#runtime/connections/openapi-client.js";var ConnectionRegistryImpl=class{#e=new Map;#t;#n;constructor(e){this.#n=e,this.#t=e}async replaceDynamicConnections(e){let t=this.#r(e),n=new Map(this.#t.map(e=>[e.connectionName,e])),r=new Map(t.map(e=>[e.connectionName,e])),i=[];for(let[e,t]of this.#e)n.get(e)!==r.get(e)&&(this.#e.delete(e),i.push(t));this.#t=t,await Promise.allSettled(i.map(e=>e.close()))}#r(e){let t=new Map,n=new Map(this.#n.map(e=>[e.connectionName,e]));for(let[r,i]of e)for(let e of i){let i=t.get(e.connectionName);if(i!==void 0&&i!==r)throw Error(`Dynamic connection "${e.connectionName}" from resolver "${r}" collides with dynamic resolver "${i}". Namespace the map key manually.`);t.set(e.connectionName,r),n.set(e.connectionName,e)}for(let e of t.keys())assertNoNestedConnection(e,n.keys());return[...n.values()]}getClient(e){let t=this.#e.get(e);if(t!==void 0)return t;let n=this.#t.find(t=>t.connectionName===e);if(n===void 0)throw Error(`Connection "${e}" is not registered.`);let r=n.protocol===`openapi`?new OpenApiConnectionClient(n):new McpConnectionClient(n);return this.#e.set(e,r),r}getConnectionApproval(e){return this.#t.find(t=>t.connectionName===e)?.approval}getConnectionNames(){return this.#t.map(e=>e.connectionName)}getConnections(){return this.#t}async dispose(){let e=[...this.#e.values()].map(e=>e.close());await Promise.allSettled(e),this.#e.clear()}};function assertNoNestedConnection(e,t){for(let n of t){if(n===e)continue;let[t,r]=n.length<e.length?[e,n]:[n,e];assertNotConnectionOwned({connectionNames:[r],name:t,remedy:`Rename the dynamic connection "${e}".`,subject:`Connection`})}}export{ConnectionRegistryImpl};

package/dist/src/runtime/connections/scoped-authorization.d.ts

@@ -46,6 +46,13 @@ export declare function createAuthorizationExecution(options?: {
     handleError(error: unknown, scoped?: ScopedAuthorization): Promise<AuthorizationSignal>;
     run: typeof executeWithAuthorization;
 };
+declare class ScopedAuthorizationRequiredError extends Error {
+    readonly scoped: ScopedAuthorization;
+    readonly justAuthorized: boolean;
+    constructor(scoped: ScopedAuthorization, justAuthorized: boolean, cause?: unknown);
+}
+/** Whether `error` asks the enclosing boundary to start a sign-in. */
+export declare function isScopedAuthorizationRequiredError(error: unknown): error is ScopedAuthorizationRequiredError;
 /** Produces the shared challenge; the caller owns parking and resumption. */
 export declare function handleAuthorizationError(error: unknown, options?: {
     readonly evictToken: boolean;
@@ -105,7 +112,7 @@ export declare function resolveAuthorizationCallbackUrl(input: {
 }): string;
 /**
  * Resolves the user-facing `displayName` onto a challenge before it is
- * surfaced on `authorization.required`.
+ * surfaced on sign-in `interaction.opened`.
  *
  * The agent author's static definition-level value wins over the
  * strategy-stamped one: an author writing

package/dist/src/runtime/connections/scoped-authorization.js

@@ -1 +1 @@
-import{contextStorage,loadContext}from"#context/container.js";import{liveProjection}from"#harness/session-machine/current.js";import{AuthKey}from"#context/keys.js";import{ConnectionAuthorizationFailedError,ConnectionAuthorizationRequiredError,isConnectionAuthorizationRequiredError}from"#connections/errors.js";import{consumeAuthorizationResult,createAuthorizationAttempt,requestAuthorization}from"#harness/authorization.js";import{supportsInteractiveAuthorization}from"#shared/connection-types.js";import{isAsyncIterable}from"#shared/async-iterable.js";import{terminalSignInFailure}from"#harness/hitl/sign-ins.js";import{principalKey,resolveConnectionPrincipal,resolveConnectionPrincipalFromAuth}from"#runtime/connections/principal.js";import{evictCachedToken,readCachedToken,writeCachedToken}from"#runtime/connections/authorization-tokens.js";const LOCAL_HTTP_VERCEL_CONNECT_HOSTNAMES=new Set([`127.0.0.1`,`[::1]`]);function createAuthorizationExecution(e={}){let t=new Set;async function complete(n){let r=n.instanceId??n.scope;!t.has(r)&&await(e.completeAuthorization??completeScopedAuthorization)(n)&&t.add(r)}function requireAuth(e,n){throw new ScopedAuthorizationRequiredError(e,t.has(e.instanceId??e.scope),n)}return{complete,isJustAuthorized(e){return t.has(e.instanceId??e.scope)},async getToken(e){await complete(e);try{return await resolveScopedToken(e)}catch(t){if(!isConnectionAuthorizationRequiredError(t))throw t;return requireAuth(e,t)}},async getResponderToken(e){try{return await resolveScopedToken(e)}catch(t){throw isConnectionAuthorizationRequiredError(t)?new ConnectionAuthorizationFailedError(e.scope,{message:`The approver of "${e.scope}" has no token for this provider, and an approved call doesn't start a sign-in.`,reason:`approver_authorization_required`,retryable:!1}):t}},requireAuth,async handleError(e,n){return n!==void 0&&isConnectionAuthorizationRequiredError(e)?await handleAuthorizationError(new ScopedAuthorizationRequiredError(n,t.has(n.instanceId??n.scope),e),{evictToken:!1}):await handleAuthorizationError(e)},run:executeWithAuthorization}}var ScopedAuthorizationRequiredError=class extends Error{scoped;justAuthorized;constructor(e,t,n){super(`Authorization required.`,{cause:n}),this.name=`ScopedAuthorizationRequiredError`,this.scoped=e,this.justAuthorized=t}};function isScopedAuthorizationRequiredError(e){return e instanceof Error&&e.name===`ScopedAuthorizationRequiredError`}async function handleAuthorizationError(e,t={evictToken:!0}){if(!isScopedAuthorizationRequiredError(e))throw e;let{scoped:n}=e;if(e.justAuthorized)throw new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" failed: the service rejected the token immediately after authorization.`,reason:`token_rejected_after_authorization`,retryable:!1});let r=liveProjection(),i=r===void 0?void 0:terminalSignInFailure(r,{grant:n.authorization.vercelConnect?.connector,name:n.scope,principal:resolveScopedPrincipal(n)});if(i!==void 0)throw new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" already failed in this turn and can't be retried${i.reason===void 0?`.`:`: ${i.reason}`}`,...i.reason!==void 0&&{reason:i.reason},retryable:!1});t.evictToken&&await evictScopedToken(n);let a=await startScopedAuthorization(n);if(a!==void 0)return a;throw supportsInteractiveAuthorization(n.authorization)?new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" requires sign-in, but no authorization callback URL could be minted for this run (missing session context).`,reason:`authorization_callback_unavailable`,retryable:!1}):e.cause??new ConnectionAuthorizationRequiredError(n.scope)}function executeWithAuthorization(e){try{let t=e();return isAsyncIterable(t)?handleIterable(t):Promise.resolve(t).catch(handleAuthorizationError)}catch(e){return handleAuthorizationError(e)}}async function*handleIterable(e){try{for await(let t of e)yield t}catch(e){yield await handleAuthorizationError(e)}}async function resolveScopedToken(e){let{scope:t,authorization:n,connection:r}=e,i=e.instanceId??t,a=contextStorage.getStore(),o=resolveScopedPrincipal(e,a);if(a===void 0)return await n.getToken({connection:r,principal:o});let s=principalKey(o),c=readCachedToken(a,i,s);if(c!==void 0)return c;let l=await n.getToken({connection:r,principal:o});return writeCachedToken(a,i,s,l),l}async function evictScopedToken(e){let{scope:t,authorization:n,connection:r}=e,i=e.instanceId??t,a=contextStorage.getStore();if(a===void 0)return;let o;try{o=resolveScopedPrincipal(e,a),evictCachedToken(a,i,principalKey(o))}catch{return}try{await n.evict?.({connection:r,principal:o})}catch{}}async function completeScopedAuthorization(e){let{scope:t,authorization:n,connection:r}=e;if(!supportsInteractiveAuthorization(n))return!1;let i=consumeAuthorizationResult(t,e.instanceId);if(i===void 0)return!1;let a=n,o=loadContext(),s=i.principal??resolveScopedPrincipal(e,o),c=await a.completeAuthorization({callbackUrl:i.hookUrl,connection:r,principal:s,resume:i.resume,callback:i.callback});return writeCachedToken(o,e.instanceId??t,principalKey(s),c),!0}async function startScopedAuthorization(e){let{scope:t,authorization:n,connection:r}=e;if(!supportsInteractiveAuthorization(n))return;let i=createAuthorizationAttempt(t);if(i===void 0)return;let a=n,o=resolveScopedPrincipal(e),s=e.boundResponder??contextStorage.getStore()?.get(AuthKey)??void 0,c=resolveAuthorizationCallbackUrl({authorization:n,callbackUrl:i.hookUrl}),{challenge:l,resume:u}=await a.startAuthorization({callbackUrl:c,connection:r,principal:o});return requestAuthorization([{attemptId:i.attemptId,challenge:stampChallengeDisplayName(l,n),grant:n.vercelConnect?.connector,hookUrl:c,instanceId:e.instanceId,name:t,principal:o,principalId:s?.principalId,requester:s,resume:u}])}function resolveScopedPrincipal(e,t){return e.boundResponder===void 0?resolveConnectionPrincipal(e.scope,e.authorization,t):resolveConnectionPrincipalFromAuth(e.scope,e.authorization,e.boundResponder,t)}function resolveAuthorizationCallbackUrl(e){if(e.authorization.vercelConnect===void 0)return e.callbackUrl;let t;try{t=new URL(e.callbackUrl)}catch{return e.callbackUrl}return t.protocol!==`http:`||!LOCAL_HTTP_VERCEL_CONNECT_HOSTNAMES.has(t.hostname)?e.callbackUrl:(t.hostname=`localhost`,t.toString())}function stampChallengeDisplayName(e,t){let n=t.displayName??e.displayName;return n===e.displayName?e:{...e,displayName:n}}export{completeScopedAuthorization,createAuthorizationExecution,evictScopedToken,handleAuthorizationError,resolveAuthorizationCallbackUrl,resolveScopedToken,stampChallengeDisplayName};
+import{contextStorage,loadContext}from"#context/container.js";import{AuthKey}from"#context/keys.js";import{liveProjection}from"#harness/session-machine/current.js";import{ConnectionAuthorizationFailedError,ConnectionAuthorizationRequiredError,isConnectionAuthorizationRequiredError}from"#connections/errors.js";import{consumeAuthorizationResult,createAuthorizationAttempt,requestAuthorization}from"#harness/authorization.js";import{supportsInteractiveAuthorization}from"#shared/connection-types.js";import{isAsyncIterable}from"#shared/async-iterable.js";import{terminalSignInFailure}from"#harness/hitl/sign-ins.js";import{principalKey,resolveConnectionPrincipal,resolveConnectionPrincipalFromAuth}from"#runtime/connections/principal.js";import{evictCachedToken,readCachedToken,writeCachedToken}from"#runtime/connections/authorization-tokens.js";const LOCAL_HTTP_VERCEL_CONNECT_HOSTNAMES=new Set([`127.0.0.1`,`[::1]`]);function createAuthorizationExecution(e={}){let t=new Set;async function complete(n){let r=n.instanceId??n.scope;!t.has(r)&&await(e.completeAuthorization??completeScopedAuthorization)(n)&&t.add(r)}function requireAuth(e,n){throw new ScopedAuthorizationRequiredError(e,t.has(e.instanceId??e.scope),n)}return{complete,isJustAuthorized(e){return t.has(e.instanceId??e.scope)},async getToken(e){await complete(e);try{return await resolveScopedToken(e)}catch(t){if(!isConnectionAuthorizationRequiredError(t))throw t;return requireAuth(e,t)}},async getResponderToken(e){try{return await resolveScopedToken(e)}catch(t){throw isConnectionAuthorizationRequiredError(t)?new ConnectionAuthorizationFailedError(e.scope,{message:`The approver of "${e.scope}" has no token for this provider, and an approved call doesn't start a sign-in.`,reason:`approver_authorization_required`,retryable:!1}):t}},requireAuth,async handleError(e,n){return n!==void 0&&isConnectionAuthorizationRequiredError(e)?await handleAuthorizationError(new ScopedAuthorizationRequiredError(n,t.has(n.instanceId??n.scope),e),{evictToken:!1}):await handleAuthorizationError(e)},run:executeWithAuthorization}}var ScopedAuthorizationRequiredError=class extends Error{scoped;justAuthorized;constructor(e,t,n){super(`Authorization required.`,{cause:n}),this.name=`ScopedAuthorizationRequiredError`,this.scoped=e,this.justAuthorized=t}};function isScopedAuthorizationRequiredError(e){return e instanceof Error&&e.name===`ScopedAuthorizationRequiredError`}async function handleAuthorizationError(e,t={evictToken:!0}){if(!isScopedAuthorizationRequiredError(e))throw e;let{scoped:n}=e;if(e.justAuthorized)throw new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" failed: the service rejected the token immediately after authorization.`,reason:`token_rejected_after_authorization`,retryable:!1});let r=liveProjection(),i=r===void 0?void 0:terminalSignInFailure(r,{grant:n.authorization.vercelConnect?.connector,name:n.scope,principal:resolveScopedPrincipal(n)});if(i!==void 0)throw new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" already failed in this turn and can't be retried${i.reason===void 0?`.`:`: ${i.reason}`}`,...i.reason!==void 0&&{reason:i.reason},retryable:!1});t.evictToken&&await evictScopedToken(n);let a=await startScopedAuthorization(n);if(a!==void 0)return a;throw supportsInteractiveAuthorization(n.authorization)?new ConnectionAuthorizationFailedError(n.scope,{message:`Authorization for "${n.scope}" requires sign-in, but no authorization callback URL could be minted for this run (missing session context).`,reason:`authorization_callback_unavailable`,retryable:!1}):e.cause??new ConnectionAuthorizationRequiredError(n.scope)}function executeWithAuthorization(e){try{let t=e();return isAsyncIterable(t)?handleIterable(t):Promise.resolve(t).catch(handleAuthorizationError)}catch(e){return handleAuthorizationError(e)}}async function*handleIterable(e){try{for await(let t of e)yield t}catch(e){yield await handleAuthorizationError(e)}}async function resolveScopedToken(e){let{scope:t,authorization:n,connection:r}=e,i=e.instanceId??t,a=contextStorage.getStore(),o=resolveScopedPrincipal(e,a);if(a===void 0)return await n.getToken({connection:r,principal:o});let s=principalKey(o),c=readCachedToken(a,i,s);if(c!==void 0)return c;let l=await n.getToken({connection:r,principal:o});return writeCachedToken(a,i,s,l),l}async function evictScopedToken(e){let{scope:t,authorization:n,connection:r}=e,i=e.instanceId??t,a=contextStorage.getStore();if(a===void 0)return;let o;try{o=resolveScopedPrincipal(e,a),evictCachedToken(a,i,principalKey(o))}catch{return}try{await n.evict?.({connection:r,principal:o})}catch{}}async function completeScopedAuthorization(e){let{scope:t,authorization:n,connection:r}=e;if(!supportsInteractiveAuthorization(n))return!1;let i=consumeAuthorizationResult(t,e.instanceId);if(i===void 0)return!1;let a=n,o=loadContext(),s=i.principal??resolveScopedPrincipal(e,o),c=await a.completeAuthorization({callbackUrl:i.hookUrl,connection:r,principal:s,resume:i.resume,callback:i.callback});return writeCachedToken(o,e.instanceId??t,principalKey(s),c),!0}async function startScopedAuthorization(e){let{scope:t,authorization:n,connection:r}=e;if(!supportsInteractiveAuthorization(n))return;let i=createAuthorizationAttempt(t);if(i===void 0)return;let a=n,o=resolveScopedPrincipal(e),s=e.boundResponder??contextStorage.getStore()?.get(AuthKey)??void 0,c=resolveAuthorizationCallbackUrl({authorization:n,callbackUrl:i.hookUrl}),{challenge:l,resume:u}=await a.startAuthorization({callbackUrl:c,connection:r,principal:o});return requestAuthorization([{attemptId:i.attemptId,challenge:stampChallengeDisplayName(l,n),grant:n.vercelConnect?.connector,hookUrl:c,instanceId:e.instanceId,name:t,principal:o,principalId:s?.principalId,requester:s,resume:u}])}function resolveScopedPrincipal(e,t){return e.boundResponder===void 0?resolveConnectionPrincipal(e.scope,e.authorization,t):resolveConnectionPrincipalFromAuth(e.scope,e.authorization,e.boundResponder,t)}function resolveAuthorizationCallbackUrl(e){if(e.authorization.vercelConnect===void 0)return e.callbackUrl;let t;try{t=new URL(e.callbackUrl)}catch{return e.callbackUrl}return t.protocol!==`http:`||!LOCAL_HTTP_VERCEL_CONNECT_HOSTNAMES.has(t.hostname)?e.callbackUrl:(t.hostname=`localhost`,t.toString())}function stampChallengeDisplayName(e,t){let n=t.displayName??e.displayName;return n===e.displayName?e:{...e,displayName:n}}export{completeScopedAuthorization,createAuthorizationExecution,evictScopedToken,handleAuthorizationError,isScopedAuthorizationRequiredError,resolveAuthorizationCallbackUrl,resolveScopedToken,stampChallengeDisplayName};