forgebadger 0.1.1 → 0.1.3

package/dist/gateway/src/services/agent/recall-query.js

@@ -0,0 +1,29 @@
+import { AgentError } from './types.js';
+const segmenter = new Intl.Segmenter('zh', { granularity: 'word' });
+const MAX_QUERY_CHARACTERS = 512;
+const MAX_QUERY_TERMS = 24;
+// ICU changes can change dictionary boundaries; old indexes must then rebuild.
+export const MEMORY_TOKENIZER_VERSION = `nfkc-lower-segmenter-zh-v1:icu-${process.versions.icu}:unicode-${process.versions.unicode}`;
+/** Full document analysis: preserve order and repetitions for phrase/BM25 scoring. */
+export function memoryTokens(text) {
+    return [...segmenter.segment(text.normalize('NFKC').toLowerCase())]
+        .filter(part => part.isWordLike)
+        .map(part => part.segment);
+}
+/** Explicit searches retain every term or fail; only automatic recall is truncated. */
+export function recallTerms(query, mode = 'all') {
+    const automatic = mode === 'any';
+    if (!automatic && query.length > MAX_QUERY_CHARACTERS)
+        throw queryTooLong();
+    const terms = [...new Set(memoryTokens(automatic ? query.slice(0, MAX_QUERY_CHARACTERS) : query))];
+    if (!automatic && terms.length > MAX_QUERY_TERMS)
+        throw queryTooLong();
+    return automatic ? terms.slice(0, MAX_QUERY_TERMS) : terms;
+}
+function queryTooLong() {
+    return new AgentError('AGENT_MEMORY_QUERY_TOO_LONG', 'AGENT_MEMORY_QUERY_TOO_LONG: search supports at most 512 characters and 24 distinct terms; narrow the query.');
+}
+export function ftsExpression(terms, mode) {
+    return terms.map(term => `"${term.replaceAll('"', '""')}"`).join(mode === 'all' ? ' AND ' : ' OR ');
+}
+//# sourceMappingURL=recall-query.js.map

package/dist/gateway/src/services/agent/recall-query.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recall-query.js","sourceRoot":"","sources":["../../../../src/services/agent/recall-query.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;AACpE,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,kCAAkC,OAAO,CAAC,QAAQ,CAAC,GAAG,YAAY,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;AAErI,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;SAChE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;SAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,OAAsB,KAAK;IACpE,MAAM,SAAS,GAAG,IAAI,KAAK,KAAK,CAAC;IACjC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,oBAAoB;QAAE,MAAM,YAAY,EAAE,CAAC;IAC5E,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe;QAAE,MAAM,YAAY,EAAE,CAAC;IACvE,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7D,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,UAAU,CAAC,6BAA6B,EACjD,8GAA8G,CAAC,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAe,EAAE,IAAmB;IAChE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACtG,CAAC"}

package/dist/gateway/src/services/agent/redaction.d.ts

@@ -1,3 +1,10 @@
+/**
+ * Redaction helpers for the Copilot agent harness.
+ *
+ * We never surface provider secrets, credential material, or token-shaped
+ * strings into the model context, the conversation log, logs, or the public
+ * API. Covers provider credential assignments, token shapes, and JSON fields.
+ */
 /** Redact a provider error message before it reaches the public envelope. */
 export declare function redactAgentErrorMessage(message: string): string;
 /**
@@ -9,3 +16,6 @@ export declare function redactAgentErrorMessage(message: string): string;
 export declare function redactAgentValue(value: unknown): unknown;
 /** Redact a single text payload (model context, summaries). */
 export declare function redactAgentText(text: string): string;
+export declare function isCredentialField(key: string): boolean;
+/** Reject model-produced credentials before tool arguments become durable. */
+export declare function containsSensitiveAgentValue(value: unknown, depth?: number): boolean;

package/dist/gateway/src/services/agent/redaction.js

@@ -1,15 +1,14 @@
+import { redactPrivateKeyBlocks } from '../redaction.js';
 /**
  * Redaction helpers for the Copilot agent harness.
  *
  * We never surface provider secrets, credential material, or token-shaped
  * strings into the model context, the conversation log, logs, or the public
- * API. Reuses the shared secret-shape redactor from lib/redaction and extends
- * it with provider-specific credential coverage.
+ * API. Covers provider credential assignments, token shapes, and JSON fields.
  */
-import { redactSensitiveContent, redactSensitiveErrorMessage } from "../../lib/redaction.js";
 /** Redact a provider error message before it reaches the public envelope. */
 export function redactAgentErrorMessage(message) {
-    return redactSensitiveErrorMessage(message);
+    return redactAgentText(message);
 }
 /**
  * Redact an arbitrary value's stringified form before it is written to the
@@ -21,10 +20,80 @@ export function redactAgentValue(value) {
     const json = JSON.stringify(value);
     if (json === undefined)
         return value;
-    return JSON.parse(redactSensitiveContent(json));
+    return redactStructuredValue(JSON.parse(json));
 }
 /** Redact a single text payload (model context, summaries). */
 export function redactAgentText(text) {
-    return redactSensitiveContent(text);
+    return redactAgentTextInternal(text, false);
+}
+function redactAgentTextInternal(text, preserveCodeReferences) {
+    text = redactPrivateKeyBlocks(text);
+    const quotedKeys = text.replace(/(["'])([A-Za-z][A-Za-z0-9_-]*)\1(\s*:\s*)(["'])(?:\\.|(?!\4)[^\\\r\n])*\4/g, (match, keyQuote, key, separator, valueQuote) => isCredentialField(key) ? `${keyQuote}${key}${keyQuote}${separator}${valueQuote}[REDACTED]${valueQuote}` : match).replace(/\b([A-Za-z][A-Za-z0-9_-]*)(\s*[:=]\s*)(["'])(?:\\.|(?!\3)[^\\\r\n])*\3/g, (match, key, separator, quote) => isCredentialField(key) && (!preserveCodeReferences || key === key.toUpperCase() || separator.includes(":"))
+        ? `${key}${separator}${quote}[REDACTED]${quote}` : match);
+    const openQuote = /(["']?)(?<![A-Za-z0-9_-])([A-Za-z][A-Za-z0-9_-]*)\1(\s*[:=]\s*)(["'])([^\r\n"']*)$/gm;
+    let boundedText = quotedKeys;
+    for (const match of quotedKeys.matchAll(openQuote)) {
+        if (isCredentialField(match[2])) {
+            boundedText = `${quotedKeys.slice(0, match.index)}${match[1]}${match[2]}${match[1]}${match[3]}${match[4]}[REDACTED]`;
+            break;
+        }
+    }
+    const lineAssignments = boundedText.replace(/\b([A-Za-z][A-Za-z0-9_-]*)(\s*[:=]\s*)([^"'\r\n]+)$/gm, (match, key, separator, value) => isCredentialField(key) && /\S\s+\S/.test(value)
+        && (!preserveCodeReferences || !/[{},;()[\].]/.test(value))
+        ? `${key}${separator}[REDACTED]` : match);
+    const envAssignments = lineAssignments.replace(/\b([A-Z][A-Z0-9_]*)(\s*=\s*)([^\s"',}()]+)(?=$|[\s,;}\]])/g, (match, key, separator) => isCredentialField(key) ? `${key}${separator}[REDACTED]` : match);
+    const plainAssignments = envAssignments.replace(/\b([A-Za-z][A-Za-z0-9_-]*)(\s*[:=]\s*)([^\s"',}()]+)(?=$|[\s,;}\]])/g, (match, key, separator, value) => isCredentialField(key) && !(preserveCodeReferences && isCodeReference(value))
+        ? `${key}${separator}[REDACTED]` : match);
+    return plainAssignments
+        .replace(/sk-[A-Za-z0-9_-]{6,}/gi, "[REDACTED]")
+        .replace(/Bearer\s+[A-Za-z0-9._~+/=-]+/gi, "Bearer [REDACTED]")
+        .replace(/ChatGPT-Account-Id\s*[:=]\s*[^\s,;]+/gi, "ChatGPT-Account-Id=[REDACTED]");
+}
+const credentialAssignment = /["']([A-Za-z][A-Za-z0-9_-]*)["']\s*:\s*["'][^"']+["']/g;
+function isCodeReference(value) {
+    return /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)*$/.test(value);
+}
+export function isCredentialField(key) {
+    const normalized = key.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toLowerCase();
+    return /(?:^|[_-])(?:api[_-]?key|private[_-]?key|access[_-]?key|secret[_-]?key|client[_-]?secret|token|secret|credential|password|authorization)$/.test(normalized)
+        || /^(?:forgebadger|openforge|openai|anthropic|deepseek)_[a-z_]*(?:key|token|secret)$/.test(normalized);
+}
+function redactStructuredValue(value) {
+    if (typeof value === "string")
+        return redactAgentText(value);
+    if (Array.isArray(value))
+        return value.map(redactStructuredValue);
+    if (value === null || typeof value !== "object")
+        return value;
+    return Object.fromEntries(Object.entries(value).map(([key, child]) => [
+        key,
+        isCredentialField(key) && child !== null && child !== "" ? "[REDACTED]" : redactStructuredValue(child)
+    ]));
+}
+function hasCredentialAssignment(text) {
+    return [...text.matchAll(credentialAssignment)].some(match => isCredentialField(match[1]));
+}
+/** Reject model-produced credentials before tool arguments become durable. */
+export function containsSensitiveAgentValue(value, depth = 0) {
+    if (depth >= 16)
+        return true;
+    if (typeof value === "string") {
+        if (redactAgentTextInternal(value, true) !== value || hasCredentialAssignment(value))
+            return true;
+        try {
+            const parsed = JSON.parse(value);
+            return parsed === value ? false : containsSensitiveAgentValue(parsed, depth + 1);
+        }
+        catch {
+            return false;
+        }
+    }
+    if (Array.isArray(value))
+        return value.some(child => containsSensitiveAgentValue(child, depth + 1));
+    if (!value || typeof value !== "object")
+        return false;
+    return Object.entries(value).some(([key, child]) => redactAgentText(key) !== key
+        || (isCredentialField(key) && child !== null && child !== "")
+        || containsSensitiveAgentValue(child, depth + 1));
 }
 //# sourceMappingURL=redaction.js.map

package/dist/gateway/src/services/agent/redaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../../src/services/agent/redaction.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAE7F,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAY,CAAC;AAC7D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC"}
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../../src/services/agent/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD;;;;;;GAMG;AACH,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;AAC5D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY,EAAE,sBAA+B;IAC5E,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAC7B,4EAA4E,EAC5E,CAAC,KAAK,EAAE,QAAgB,EAAE,GAAW,EAAE,SAAiB,EAAE,UAAkB,EAAE,EAAE,CAC9E,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,GAAG,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,aAAa,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAClH,CAAC,OAAO,CACP,yEAAyE,EACzE,CAAC,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE,CACvD,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,sBAAsB,IAAI,GAAG,KAAK,GAAG,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzG,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,GAAG,KAAK,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAC7D,CAAC;IACF,MAAM,SAAS,GAAG,sFAAsF,CAAC;IACzG,IAAI,WAAW,GAAG,UAAU,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnD,IAAI,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;YACjC,WAAW,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;YACrH,MAAM;QACR,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,OAAO,CACzC,uDAAuD,EACvD,CAAC,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE,CACvD,iBAAiB,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;WAC1C,CAAC,CAAC,sBAAsB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,YAAY,CAAC,CAAC,CAAC,KAAK,CAC7C,CAAC;IACF,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAC5C,4DAA4D,EAC5D,CAAC,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,EAAE,CACxC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,YAAY,CAAC,CAAC,CAAC,KAAK,CAClE,CAAC;IACF,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAC7C,sEAAsE,EACtE,CAAC,KAAK,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAa,EAAE,EAAE,CACvD,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,sBAAsB,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;QAC3E,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,YAAY,CAAC,CAAC,CAAC,KAAK,CAC7C,CAAC;IACF,OAAO,gBAAgB;SACpB,OAAO,CAAC,wBAAwB,EAAE,YAAY,CAAC;SAC/C,OAAO,CAAC,gCAAgC,EAAE,mBAAmB,CAAC;SAC9D,OAAO,CAAC,wCAAwC,EAAE,+BAA+B,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,oBAAoB,GAAG,wDAAwD,CAAC;AAEtF,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,OAAO,2IAA2I,CAAC,IAAI,CAAC,UAAU,CAAC;WAC9J,mFAAmF,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACpE,GAAG;QACH,iBAAiB,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC;KACvG,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,uBAAuB,CAAC,IAAY;IAC3C,OAAO,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACnE,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,uBAAuB,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClG,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1C,OAAO,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACnF,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,2BAA2B,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CACjD,eAAe,CAAC,GAAG,CAAC,KAAK,GAAG;WACvB,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;WAC1D,2BAA2B,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC"}

package/dist/gateway/src/services/agent/restricted-runs.d.ts

@@ -0,0 +1,5 @@
+import type { AgentToolContext } from './tool-registry.js';
+import type { TurnInput } from './run-ledger.js';
+export declare function restrictedToolAllowed(input: TurnInput, name: string): boolean;
+/** Execution-time enforcement also covers forged calls and recovered steps. */
+export declare function assertRestrictedTool(context: AgentToolContext, name: string, raw: unknown): void;

package/dist/gateway/src/services/agent/restricted-runs.js

@@ -0,0 +1,22 @@
+import { assertRepairPlan, repairJob } from '../development/repair-scope.js';
+const PROJECT_READS = new Set(['get_project_git_status', 'read_project_diff', 'read_tool_result', 'get_project', 'list_project_files', 'read_project_file', 'search_project_files',
+    'project_graph_search', 'project_graph_symbol_detail', 'project_graph_impact', 'project_graph_affected_paths',
+    'get_development_task', 'list_development_tasks', 'pm_get_task_progress']);
+export function restrictedToolAllowed(input, name) {
+    return !input.executionMode || PROJECT_READS.has(name) || (input.executionMode === 'repair' && name === 'submit_development_task');
+}
+/** Execution-time enforcement also covers forged calls and recovered steps. */
+export function assertRestrictedTool(context, name, raw) {
+    if (!context.executionMode)
+        return;
+    if (context.executionMode === 'repair' && name === 'submit_development_task') {
+        if (typeof context.runId !== 'string' || typeof context.stepId !== 'string' || !repairJob(context.db, context.userId, context.runId))
+            throw new Error('COPILOT_REPAIR_ORIGIN_MISSING');
+        assertRepairPlan(context.db, context.userId, context.runId, context.stepId, raw);
+        return;
+    }
+    if (!PROJECT_READS.has(name) || !context.projectId || !raw || typeof raw !== 'object'
+        || !('projectId' in raw) || raw.projectId !== context.projectId)
+        throw new Error('COPILOT_RESTRICTED_TOOL: read-only project scope required');
+}
+//# sourceMappingURL=restricted-runs.js.map

package/dist/gateway/src/services/agent/restricted-runs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restricted-runs.js","sourceRoot":"","sources":["../../../../src/services/agent/restricted-runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAI7E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,wBAAwB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB;IAChL,sBAAsB,EAAE,6BAA6B,EAAE,sBAAsB,EAAE,8BAA8B;IAC7G,sBAAsB,EAAE,wBAAwB,EAAE,sBAAsB,CAAC,CAAC,CAAC;AAE7E,MAAM,UAAU,qBAAqB,CAAC,KAAgB,EAAE,IAAY;IAClE,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,CAAC,CAAC;AACrI,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,OAAyB,EAAE,IAAY,EAAE,GAAY;IACxF,IAAI,CAAC,OAAO,CAAC,aAAa;QAAE,OAAO;IACnC,IAAI,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC7E,IAAG,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACpL,gBAAgB,CAAC,OAAO,CAAC,EAAE,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,KAAK,EAAC,OAAO,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;QAAA,OAAO;IACtF,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;WAChF,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;QAC/D,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AACjF,CAAC"}

package/dist/gateway/src/services/agent/run-governance.d.ts

@@ -0,0 +1,44 @@
+import type { Database } from '../../db/types.js';
+import type { AgentLlmClient } from './orchestrator-types.js';
+import type { LlmUsage } from './llm-response.js';
+export type RunPhase = 'queued' | 'context' | 'summarizing' | 'model' | 'tool' | 'awaiting_approval' | 'finished';
+export interface RunUsage {
+    chargedTokens: number;
+    reportedTokens: number;
+    estimatedCalls: number;
+    calls: number;
+    costUsd: number | null;
+    knownCostUsd: number;
+    unpricedCalls: number;
+}
+/** Conservative reservations survive crashes; missing usage is never counted as zero. */
+export declare class RunGovernance {
+    private db;
+    private userId;
+    private runId;
+    constructor(db: Database, userId: string, runId: string);
+    usage(): RunUsage;
+    calls(): Array<{
+        id: string;
+        run_id: string;
+        kind: string;
+        status: string;
+        charged_tokens: number;
+        usage_json: string | null;
+        model_json: string | null;
+        pricing_json: string | null;
+        cost_nanousd: number | null;
+        created_at: number;
+        completed_at: number | null;
+    }>;
+    remainingDurationMs(now?: number): number;
+    check(additionalTokens?: number, includeParent?: boolean, includeTime?: boolean): void;
+    phase(phase: RunPhase): void;
+    measure<T>(kind: string, input: unknown, invoke: () => Promise<T>, resultUsage?: (result: T) => LlmUsage | undefined, model?: {
+        modelProfileId: string;
+        modelId: string;
+        apiFormat: string;
+    }): Promise<T>;
+}
+/** Includes auxiliary calls; estimates are explicitly distinguished from provider usage. */
+export declare function meteredLlm(llm: AgentLlmClient, meter: RunGovernance, onPhase: (phase: RunPhase) => void): AgentLlmClient;

package/dist/gateway/src/services/agent/run-governance.js

@@ -0,0 +1,92 @@
+import { CopilotTokenRates, modelCostNanoUsd, reportedTokens } from './model-metering.js';
+import { randomUUID } from 'node:crypto';
+import { AgentError } from './types.js';
+import { runDuration } from './approval-clock.js';
+/** Conservative reservations survive crashes; missing usage is never counted as zero. */
+export class RunGovernance {
+    db;
+    userId;
+    runId;
+    constructor(db, userId, runId) {
+        this.db = db;
+        this.userId = userId;
+        this.runId = runId;
+    }
+    usage() {
+        const rows = this.calls();
+        const unpricedCalls = rows.filter(row => row.cost_nanousd === null).length;
+        const known = rows.reduce((sum, row) => sum + BigInt(row.cost_nanousd ?? 0), 0n);
+        const knownCostUsd = Number(known) / 1_000_000_000;
+        return {
+            chargedTokens: rows.reduce((sum, row) => sum + row.charged_tokens, 0),
+            reportedTokens: rows.reduce((sum, row) => sum + (row.usage_json ? row.charged_tokens : 0), 0),
+            estimatedCalls: rows.filter(row => !row.usage_json).length, calls: rows.length,
+            costUsd: unpricedCalls ? null : knownCostUsd, knownCostUsd, unpricedCalls,
+        };
+    }
+    calls() {
+        return this.db.prepare('SELECT id,run_id,kind,status,charged_tokens,usage_json,model_json,pricing_json,cost_nanousd,created_at,completed_at FROM copilot_model_calls WHERE user_id=? AND (run_id=? OR run_id IN (SELECT child_run_id FROM copilot_research_jobs WHERE user_id=? AND origin_run_id=?)) ORDER BY created_at,id')
+            .all(this.userId, this.runId, this.userId, this.runId);
+    }
+    remainingDurationMs(now = Date.now()) {
+        return runDuration(this.db, this.userId, this.runId, now).remainingMs;
+    }
+    check(additionalTokens = 0, includeParent = true, includeTime = true) {
+        const run = this.db.prepare('SELECT token_budget FROM copilot_runs WHERE user_id=? AND id=?')
+            .get(this.userId, this.runId);
+        if (!run)
+            throw new AgentError('COPILOT_NOT_FOUND', 'Run not found');
+        if (includeTime && this.remainingDurationMs() <= 0)
+            throw new AgentError('COPILOT_TIME_BUDGET', 'Run elapsed-time budget exhausted');
+        const parent = includeParent ? this.db.prepare('SELECT origin_run_id FROM copilot_research_jobs WHERE user_id=? AND child_run_id=?').get(this.userId, this.runId) : undefined;
+        if (parent) {
+            const row = this.db.prepare('SELECT input_json FROM copilot_runs WHERE user_id=? AND id=?').get(this.userId, this.runId);
+            new RunGovernance(this.db, this.userId, parent.origin_run_id).check(additionalTokens, false, JSON.parse(row.input_json).executionMode === 'research');
+        }
+        if (this.usage().chargedTokens + additionalTokens > run.token_budget)
+            throw new AgentError('COPILOT_TOKEN_BUDGET', 'Run token budget exhausted');
+    }
+    phase(phase) {
+        this.db.prepare('UPDATE copilot_runs SET execution_phase=?,phase_started_at=?,revision=revision+1 WHERE user_id=? AND id=? AND status=\'running\'')
+            .run(phase, Date.now(), this.userId, this.runId);
+    }
+    async measure(kind, input, invoke, resultUsage, model) {
+        const id = randomUUID();
+        const rates = model ? new CopilotTokenRates(this.db, this.userId).get(model.modelProfileId) : null;
+        // UTF-8 bytes are a conservative estimate, plus output reserve (not a price quote).
+        const reservation = Buffer.byteLength(JSON.stringify(input), 'utf8') + 16_384;
+        this.db.transaction(() => {
+            this.check(reservation);
+            this.db.prepare('INSERT INTO copilot_model_calls(id,user_id,run_id,kind,charged_tokens,created_at,model_json,pricing_json) VALUES(?,?,?,?,?,?,?,?)')
+                .run(id, this.userId, this.runId, kind, reservation, Date.now(), model ? JSON.stringify(model) : null, rates ? JSON.stringify(rates) : null);
+        }).immediate();
+        try {
+            const result = await invoke();
+            const usage = resultUsage?.(result);
+            const tokens = reportedTokens(usage);
+            if (this.db.open)
+                this.db.prepare("UPDATE copilot_model_calls SET status='completed',charged_tokens=?,usage_json=?,cost_nanousd=?,completed_at=? WHERE user_id=? AND run_id=? AND id=?")
+                    .run(tokens ?? reservation + Buffer.byteLength(JSON.stringify(result) ?? '', 'utf8'), tokens === undefined ? null : JSON.stringify(usage), modelCostNanoUsd(usage, rates), Date.now(), this.userId, this.runId, id);
+            return result;
+        }
+        catch (error) {
+            if (this.db.open)
+                this.db.prepare('UPDATE copilot_model_calls SET status=\'unknown\',completed_at=? WHERE user_id=? AND run_id=? AND id=?')
+                    .run(Date.now(), this.userId, this.runId, id);
+            throw error;
+        }
+    }
+}
+/** Includes auxiliary calls; estimates are explicitly distinguished from provider usage. */
+export function meteredLlm(llm, meter, onPhase) {
+    const model = (modelId) => llm.modelInfo?.(modelId);
+    return {
+        ...(llm.modelInfo ? { modelInfo: llm.modelInfo } : {}),
+        ...(llm.contextBudget ? { contextBudget: (modelId) => llm.contextBudget(modelId) } : {}),
+        stream: input => { onPhase('model'); return meter.measure('model', { messages: input.messages, tools: input.tools, system: input.system }, () => llm.stream(input), result => result.usage, model(input.modelId)); },
+        summarize: input => { onPhase('summarizing'); let usage; return meter.measure('summary', input.messages, () => llm.summarize({ ...input, onUsage: value => { usage = value; input.onUsage?.(value); } }), () => usage, model(input.modelId)); },
+        generateTitle: input => { let usage; return meter.measure('title', input, () => llm.generateTitle({ ...input, onUsage: value => { usage = value; input.onUsage?.(value); } }), () => usage, model(input.modelId)); },
+        proposeMemory: input => { let usage; return meter.measure('memory', input, () => llm.proposeMemory({ ...input, onUsage: value => { usage = value; input.onUsage?.(value); } }), () => usage, model(input.modelId)); },
+    };
+}
+//# sourceMappingURL=run-governance.js.map

package/dist/gateway/src/services/agent/run-governance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-governance.js","sourceRoot":"","sources":["../../../../src/services/agent/run-governance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKlD,yFAAyF;AACzF,MAAM,OAAO,aAAa;IACJ;IAAsB;IAAwB;IAAlE,YAAoB,EAAY,EAAU,MAAc,EAAU,KAAa;QAA3D,OAAE,GAAF,EAAE,CAAU;QAAU,WAAM,GAAN,MAAM,CAAQ;QAAU,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAEnF,KAAK;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,YAAY,KAAG,IAAI,CAAC,CAAC,MAAM,CAAC;QACrE,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,EAAE,CAAA,GAAG,GAAC,MAAM,CAAC,GAAG,CAAC,YAAY,IAAE,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC;QACvE,MAAM,YAAY,GAAC,MAAM,CAAC,KAAK,CAAC,GAAC,aAAa,CAAC;QAC/C,OAAO;YACL,aAAa,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,EAAE,CAAA,GAAG,GAAC,GAAG,CAAC,cAAc,EAAC,CAAC,CAAC;YAC9D,cAAc,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAC,GAAG,EAAC,EAAE,CAAA,GAAG,GAAC,CAAC,GAAG,CAAC,UAAU,CAAA,CAAC,CAAA,GAAG,CAAC,cAAc,CAAA,CAAC,CAAA,CAAC,CAAC,EAAC,CAAC,CAAC;YAClF,cAAc,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA,EAAE,CAAA,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,EAAC,KAAK,EAAC,IAAI,CAAC,MAAM;YACzE,OAAO,EAAC,aAAa,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,YAAY,EAAC,YAAY,EAAC,aAAa;SACnE,CAAC;IACJ,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,sSAAsS,CAAC;aAC3T,GAAG,CAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,KAAK,EAAC,IAAI,CAAC,MAAM,EAAC,IAAI,CAAC,KAAK,CAAgO,CAAC;IACvR,CAAC;IAED,mBAAmB,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClC,OAAO,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,gBAAgB,GAAG,CAAC,EAAE,aAAa,GAAG,IAAI,EAAE,WAAW,GAAG,IAAI;QAClE,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gEAAgE,CAAC;aAC1F,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAyC,CAAC;QACxE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;QACrE,IAAI,WAAW,IAAI,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC;YAChD,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,mCAAmC,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,oFAAoF,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAA0C,CAAC,CAAC,CAAC,SAAS,CAAC;QACvN,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8DAA8D,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAA2B,CAAC;YACnJ,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC;QACxJ,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,aAAa,GAAG,gBAAgB,GAAG,GAAG,CAAC,YAAY;YAClE,MAAM,IAAI,UAAU,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,KAAe;QACnB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kIAAkI,CAAC;aAChJ,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,KAAc,EAAE,MAAwB,EAAE,WAAiD,EAAE,KAA+D;QACzL,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClG,oFAAoF;QACpF,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;QAC9E,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YACvB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,mIAAmI,CAAC;iBACjJ,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAC,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,EAAC,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC;QACvI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,qJAAqJ,CAAC;qBACrL,GAAG,CAAC,MAAM,IAAI,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,KAAK,EAAC,KAAK,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrN,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI;gBAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wGAAwG,CAAC;qBACxI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,GAAmB,EAAE,KAAoB,EAAE,OAAkC;IACtG,MAAM,KAAK,GAAC,CAAC,OAAe,EAAC,EAAE,CAAA,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAC,SAAS,EAAC,GAAG,CAAC,SAAS,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,OAAgB,EAAE,EAAE,CAAC,GAAG,CAAC,aAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,EAAE,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACjN,SAAS,EAAE,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,KAAwB,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAC,KAAK,CAAC,QAAQ,EAAC,GAAE,EAAE,CAAA,GAAG,CAAC,SAAS,CAAC,EAAC,GAAG,KAAK,EAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,KAAK,GAAC,KAAK,CAAC,CAAA,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,EAAC,GAAE,EAAE,CAAA,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/O,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAwB,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,GAAG,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,KAAK,GAAC,KAAK,CAAC,CAAA,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,EAAC,GAAE,EAAE,CAAA,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACpN,aAAa,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAwB,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,GAAG,CAAC,aAAa,CAAC,EAAC,GAAG,KAAK,EAAC,OAAO,EAAC,KAAK,CAAA,EAAE,GAAC,KAAK,GAAC,KAAK,CAAC,CAAA,KAAK,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA,CAAC,EAAC,CAAC,EAAC,GAAE,EAAE,CAAA,KAAK,EAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;KACtN,CAAC;AACJ,CAAC"}

package/dist/gateway/src/services/agent/run-ledger.d.ts

@@ -1,16 +1,27 @@
+import type { TaskReviewOrigin } from './task-review.js';
+import { type RepairOrigin } from './development-repair.js';
+import { type ChannelRunScope } from '../channels/channel-run-scope.js';
 import type { Database } from "../../db/types.js";
 import { CopilotConversationLog } from "./conversation-log.js";
 import { type AgentRunStatus } from "./types.js";
 export interface TurnInput {
+    /** Server-derived authority; never accepted from HTTP/model JSON. */
+    channelScope?: ChannelRunScope;
+    executionMode?: 'research' | 'review' | 'repair';
+    repairOrigin?: RepairOrigin;
+    repairFailedChecks?: boolean;
+    reviewOrigin?: TaskReviewOrigin;
+    parentRunId?: string;
+    reviewTaskResults?: boolean;
     userId: string;
     conversationId: string;
     userText: string;
     modelId?: string;
     projectId?: string;
-    grantId?: string;
     source?: "user" | "reactive" | "scheduled";
     skipUserMessage?: boolean;
     clientRequestId?: string;
+    editMessageId?: string;
     toolDiscovery?: boolean;
 }
 export interface RunRecord {
@@ -26,6 +37,8 @@ export interface RunRecord {
     revision: number;
     lease_owner: string | null;
     lease_expires_at: number | null;
+    stop_reason: string | null;
+    error: string | null;
     runtime_version: number;
 }
 export interface RunStep {
@@ -34,7 +47,7 @@ export interface RunStep {
     run_id: string;
     ordinal: number;
     kind: "model" | "tool";
-    status: "pending" | "running" | "awaiting_approval" | "completed" | "indeterminate";
+    status: "pending" | "running" | "awaiting_approval" | "completed" | "failed" | "indeterminate";
     tool_call_id: string | null;
     tool_name: string | null;
     input_json: string | null;
@@ -60,6 +73,7 @@ export declare class CopilotRunLedger {
     get(id: string): RunRecord | undefined;
     steps(id: string): RunStep[];
     validateScope(input: TurnInput): void;
+    findRequest(input: TurnInput): string | undefined;
     admit(input: TurnInput, maxSteps: number): string;
     claim(runId: string, owner: string, leaseMs: number): Claim | undefined;
     owns(c: Claim): boolean;
@@ -74,12 +88,15 @@ export declare class CopilotRunLedger {
         effect?: "read" | "write";
     }): RunStep;
     startStep(c: Claim, step: RunStep): boolean;
+    /** Any crash retry consumes this allowance too. Occupy before summarization
+     * or inference; an interrupted recovery is stopped, not replayed on restart. */
+    claimContextRecovery(c: Claim, stepId: string, modelId: string | undefined, budget: number): boolean;
     modelStep(c: Claim): RunStep | undefined;
     completeStep(stepId: string, content: string): void;
-    receipt(c: Claim, step: RunStep, content: string, unknownEffect?: boolean): void;
+    receipt(c: Claim, step: RunStep, content: string, unknownEffect?: boolean, publish?: (content: string) => string): void;
     waitApproval(c: Claim, step: RunStep): void;
     decide(runId: string, actionId: string, approved: boolean): boolean;
     finish(c: Claim, status: AgentRunStatus, reason?: string): boolean;
     private finishUnowned;
-    cancel(runId: string): boolean;
+    cancel(runId: string, reason?: string): boolean;
 }