glirastes 0.4.0 → 0.5.0

package/dist/react/utils/tool-presentation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-presentation.js","sourceRoot":"","sources":["../../../src/react/utils/tool-presentation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAS/C,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAoC,EAAE,CACpE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAmC;IAChE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,QAAQ,CAAC,QAAmC;IAC1D,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAgB,IAAI,CAAC,CAAC;IAC9D,SAAS,CAAC,GAAG,EAAE;QACb,WAAW,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;IACrD,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/react/utils/tool-result-config.d.ts

@@ -0,0 +1,10 @@
+import type { ToolResultDisplayConfig, ToolResultDisplayMode } from '../types.js';
+/**
+ * The tool result display of a chat. Raw JSON under every answer is noise for
+ * the people using an app, so without the app's own choice results are hidden
+ * (the work log names what ran) unless the app registered renderers for them.
+ */
+export declare function resolveToolResultConfig(config: ToolResultDisplayConfig | undefined, hasRenderers: boolean): {
+    mode: ToolResultDisplayMode;
+    allowlist: string[];
+};

package/dist/react/utils/tool-result-config.js

@@ -0,0 +1,12 @@
+/**
+ * The tool result display of a chat. Raw JSON under every answer is noise for
+ * the people using an app, so without the app's own choice results are hidden
+ * (the work log names what ran) unless the app registered renderers for them.
+ */
+export function resolveToolResultConfig(config, hasRenderers) {
+    return {
+        mode: config?.mode ?? (hasRenderers ? 'default' : 'hidden'),
+        allowlist: config?.allowlist ?? [],
+    };
+}
+//# sourceMappingURL=tool-result-config.js.map

package/dist/react/utils/tool-result-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-config.js","sourceRoot":"","sources":["../../../src/react/utils/tool-result-config.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA2C,EAC3C,YAAqB;IAErB,OAAO;QACL,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3D,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,EAAE;KACnC,CAAC;AACJ,CAAC"}

package/dist/runtime/ai-sdk/engine.d.ts

@@ -0,0 +1,66 @@
+export interface AiSdkSourceTool {
+    description: string;
+    parameters: unknown;
+    needsApproval?: unknown;
+    execute: (input: unknown, options?: unknown) => unknown | Promise<unknown>;
+}
+export interface AiSdkToolCall {
+    toolName: string;
+    input: unknown;
+}
+export interface AiSdkToolSuccess extends AiSdkToolCall {
+    result: unknown;
+    durationMs: number;
+}
+export interface AiSdkToolFailure extends AiSdkToolCall {
+    error: unknown;
+    durationMs: number;
+}
+export interface AiSdkToolHooks {
+    beforeToolCall?: (call: AiSdkToolCall) => void | Promise<void>;
+    afterToolCall?: (call: AiSdkToolSuccess) => void | Promise<void>;
+    onToolError?: (call: AiSdkToolFailure) => void | Promise<void>;
+    resolveApproval?: (call: AiSdkToolCall) => boolean | Promise<boolean>;
+    toolTimeoutMs?: number;
+}
+/**
+ * Decides, at the moment a tool executes, whether this execution is allowed.
+ * A tool carries its gate under `AI_SDK_APPROVAL_GATE`; `createAiSdkTools`
+ * reports every `needsApproval` answer of a live call to it and asks it
+ * before every execution, with the input exactly as the AI SDK passes it
+ * (before validation). `authorize` throws to refuse.
+ *
+ * The gate travels with the tool object, so a stream handler that wraps the
+ * tools it was given (or calls their `execute` itself) cannot leave it out.
+ */
+export interface AiSdkApprovalGate {
+    recordDecision: (call: {
+        toolName: string;
+        toolCallId: string | undefined;
+        needed: boolean;
+    }) => void;
+    authorize: (call: {
+        toolName: string;
+        toolCallId: string | undefined;
+        input: unknown;
+    }) => void;
+}
+export declare const AI_SDK_APPROVAL_GATE: unique symbol;
+/**
+ * Set in the execution options that `createAiSdkTools` passes to the source
+ * tool once its gate authorized the call, so a source tool that checks the
+ * gate itself does not check the same execution twice (with the validated
+ * input, which differs for a schema that transforms).
+ */
+export declare const AI_SDK_APPROVAL_GATE_PASSED: unique symbol;
+export declare function approvalGateOf(tool: unknown): AiSdkApprovalGate | undefined;
+export interface AiSdkWrappedTool {
+    description?: string;
+    needsApproval?: unknown;
+    execute?: (input: unknown, options?: unknown) => Promise<unknown>;
+    [key: string]: unknown;
+}
+export declare function createAiSdkTools(options: {
+    tools: Record<string, AiSdkSourceTool | unknown>;
+    now?: () => number;
+} & AiSdkToolHooks): Record<string, AiSdkWrappedTool>;

package/dist/runtime/ai-sdk/engine.js

@@ -0,0 +1,188 @@
+import { jsonSchema, tool, zodSchema } from 'ai';
+export const AI_SDK_APPROVAL_GATE = Symbol('glirastes.approvalGate');
+/**
+ * Set in the execution options that `createAiSdkTools` passes to the source
+ * tool once its gate authorized the call, so a source tool that checks the
+ * gate itself does not check the same execution twice (with the validated
+ * input, which differs for a schema that transforms).
+ */
+export const AI_SDK_APPROVAL_GATE_PASSED = Symbol('glirastes.approvalGatePassed');
+export function approvalGateOf(tool) {
+    if (typeof tool !== 'object' || tool === null)
+        return undefined;
+    return tool[AI_SDK_APPROVAL_GATE];
+}
+function isJsonSchemaLike(value) {
+    return (typeof value === 'object'
+        && value !== null
+        && 'jsonSchema' in value
+        && 'safeParse' in value
+        && typeof value.safeParse === 'function');
+}
+function toAiSdkInputSchema(parameters) {
+    if (!isJsonSchemaLike(parameters)) {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        return zodSchema(parameters);
+    }
+    return jsonSchema(parameters.jsonSchema, {
+        validate: (value) => {
+            const parsed = parameters.safeParse(value);
+            if (parsed.success)
+                return { success: true, value: parsed.data };
+            const detail = parsed.error.issues
+                .map((issue) => {
+                const path = issue.path?.join('.') ?? '';
+                return `${path}${path ? ': ' : ''}${issue.message ?? 'invalid value'}`;
+            })
+                .join('; ');
+            return {
+                success: false,
+                error: new Error(detail || 'Input does not match local JSON schema'),
+            };
+        },
+    });
+}
+export function createAiSdkTools(options) {
+    const wrapped = {};
+    const now = options.now ?? (() => performance.now());
+    for (const [toolName, rawTool] of Object.entries(options.tools)) {
+        const source = rawTool;
+        const gate = approvalGateOf(rawTool);
+        const baseNeedsApproval = options.resolveApproval
+            ? (input) => options.resolveApproval({ toolName, input })
+            : source.needsApproval;
+        const decide = typeof baseNeedsApproval === 'function'
+            ? async (rawInput, approvalOptions) => {
+                let input;
+                try {
+                    input = await parseInput(rawInput);
+                }
+                catch {
+                    // The AI SDK validated the call just before; ask rather than guess.
+                    return true;
+                }
+                return Boolean(await baseNeedsApproval(input, approvalOptions));
+            }
+            : undefined;
+        const needsApproval = gate
+            ? async (rawInput, approvalOptions) => {
+                const needed = decide ? await decide(rawInput, approvalOptions) : baseNeedsApproval === true;
+                gate.recordDecision({ toolName, toolCallId: approvalOptions?.toolCallId, needed });
+                return needed;
+            }
+            : decide ?? baseNeedsApproval;
+        const inputSchema = toAiSdkInputSchema(source.parameters);
+        const validateInput = inputSchema.validate;
+        // One schema run per tool call. The AI SDK hands the object `validate`
+        // checked on to `needsApproval` and `execute` unchanged, so its schema
+        // output is kept here and reused, as long as the object still serializes
+        // the same: `needsApproval` decides on exactly the value that executes,
+        // even for a schema whose output differs from run to run.
+        const parsedInputs = new WeakMap();
+        const remember = (rawInput, value) => {
+            const snapshot = typeof rawInput === 'object' && rawInput !== null ? snapshotOf(rawInput) : undefined;
+            if (snapshot !== undefined)
+                parsedInputs.set(rawInput, { snapshot, value });
+        };
+        if (validateInput) {
+            inputSchema.validate = async (value) => {
+                const result = await validateInput(value);
+                if (!result.success)
+                    return result;
+                remember(value, result.value);
+                return { success: true, value };
+            };
+        }
+        const parseInput = async (rawInput) => {
+            if (!validateInput)
+                return rawInput;
+            if (typeof rawInput === 'object' && rawInput !== null) {
+                const known = parsedInputs.get(rawInput);
+                if (known && known.snapshot === snapshotOf(rawInput))
+                    return known.value;
+            }
+            const checked = await validateInput(rawInput);
+            if (!checked.success) {
+                throw new Error(`Invalid input for tool "${toolName}": ${checked.error.message}`);
+            }
+            remember(rawInput, checked.value);
+            return checked.value;
+        };
+        wrapped[toolName] = tool({
+            description: source.description,
+            inputSchema,
+            needsApproval: needsApproval,
+            execute: async (rawInput, executionOptions) => {
+                if (gate) {
+                    gate.authorize({
+                        toolName,
+                        toolCallId: executionOptions?.toolCallId,
+                        input: rawInput,
+                    });
+                }
+                await options.beforeToolCall?.({ toolName, input: rawInput });
+                const startedAt = now();
+                let input = rawInput;
+                try {
+                    input = await parseInput(rawInput);
+                    const sourceOptions = gate
+                        ? { ...executionOptions, [AI_SDK_APPROVAL_GATE_PASSED]: gate }
+                        : executionOptions;
+                    const execution = Promise.resolve(source.execute(input, sourceOptions));
+                    const result = options.toolTimeoutMs === undefined
+                        ? await execution
+                        : await withTimeout(execution, options.toolTimeoutMs, toolName);
+                    await options.afterToolCall?.({
+                        toolName,
+                        input,
+                        result,
+                        durationMs: Math.max(0, now() - startedAt),
+                    });
+                    return result;
+                }
+                catch (error) {
+                    await options.onToolError?.({
+                        toolName,
+                        input,
+                        error,
+                        durationMs: Math.max(0, now() - startedAt),
+                    });
+                    throw error;
+                }
+            },
+            // AI SDK's generic tool return type is wider than the stable surface
+            // Glirastes exposes here.
+        });
+    }
+    return wrapped;
+}
+function snapshotOf(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        // Not JSON (a cycle, a BigInt): not remembered, parsed at every use.
+        return undefined;
+    }
+}
+async function withTimeout(execution, timeoutMs, toolName) {
+    if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+        throw new RangeError('toolTimeoutMs must be a positive finite number');
+    }
+    let timeout;
+    try {
+        return await Promise.race([
+            execution,
+            new Promise((_resolve, reject) => {
+                timeout = setTimeout(() => {
+                    reject(new Error(`Tool "${toolName}" timed out after ${timeoutMs}ms`));
+                }, timeoutMs);
+            }),
+        ]);
+    }
+    finally {
+        if (timeout)
+            clearTimeout(timeout);
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/runtime/ai-sdk/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/runtime/ai-sdk/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AA+CjD,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,wBAAwB,CAAC,CAAC;AACpF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAkB,MAAM,CAAC,8BAA8B,CAAC,CAAC;AAEjG,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,OAAQ,IAAuD,CAAC,oBAAoB,CAAC,CAAC;AACxF,CAAC;AASD,SAAS,gBAAgB,CAAC,KAAc;IAStC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;WACtB,KAAK,KAAK,IAAI;WACd,YAAY,IAAI,KAAK;WACrB,WAAW,IAAI,KAAK;WACpB,OAAO,KAAK,CAAC,SAAS,KAAK,UAAU,CACzC,CAAC;AACJ,CAAC;AAqBD,SAAS,kBAAkB,CAAC,UAAmB;IAC7C,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,8DAA8D;QAC9D,OAAO,SAAS,CAAC,UAAiB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,UAAU,CACf,UAAU,CAAC,UAA8C,EACzD;QACE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;iBAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACb,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACzC,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC;YACzE,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,wCAAwC,CAAC;aACrE,CAAC;QACJ,CAAC;KACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAGkB;IAElB,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAErD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,OAA0B,CAAC;QAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC,eAAe;YAC/C,CAAC,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,eAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;YACnE,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,iBAAiB,KAAK,UAAU;YACpD,CAAC,CAAC,KAAK,EAAE,QAAiB,EAAE,eAAyB,EAAoB,EAAE;gBACzE,IAAI,KAAc,CAAC;gBACnB,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,oEAAoE;oBACpE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,OAAO,CAAC,MAAO,iBAAkE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;YACpH,CAAC;YACD,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,aAAa,GAAG,IAAI;YACxB,CAAC,CAAC,KAAK,EAAE,QAAiB,EAAE,eAAyC,EAAE,EAAE;gBACvE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAK,IAAI,CAAC;gBAC7F,IAAI,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;gBACnF,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,CAAC,CAAC,MAAM,IAAI,iBAAiB,CAAC;QAChC,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,WAAW,CAAC,QAA8F,CAAC;QACjI,uEAAuE;QACvE,uEAAuE;QACvE,yEAAyE;QACzE,wEAAwE;QACxE,0DAA0D;QAC1D,MAAM,YAAY,GAAG,IAAI,OAAO,EAAgD,CAAC;QACjF,MAAM,QAAQ,GAAG,CAAC,QAAiB,EAAE,KAAc,EAAE,EAAE;YACrD,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,IAAI,QAAQ,KAAK,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,QAAkB,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC;QACF,IAAI,aAAa,EAAE,CAAC;YACjB,WAAkD,CAAC,QAAQ,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC7E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO,MAAM,CAAC;gBACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YAClC,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,EAAE,QAAiB,EAAoB,EAAE;YAC/D,IAAI,CAAC,aAAa;gBAAE,OAAO,QAAQ,CAAC;YACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzC,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ,CAAC;oBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;YAC3E,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC,KAAK,CAAC;QACvB,CAAC,CAAC;QACF,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW;YACX,aAAa,EAAE,aAA4D;YAC3E,OAAO,EAAE,KAAK,EAAE,QAAiB,EAAE,gBAAyB,EAAE,EAAE;gBAC9D,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,SAAS,CAAC;wBACb,QAAQ;wBACR,UAAU,EAAG,gBAAwD,EAAE,UAAU;wBACjF,KAAK,EAAE,QAAQ;qBAChB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC9D,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC;gBACxB,IAAI,KAAK,GAAG,QAAQ,CAAC;gBACrB,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACnC,MAAM,aAAa,GAAG,IAAI;wBACxB,CAAC,CAAC,EAAE,GAAI,gBAAuC,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE;wBACtF,CAAC,CAAC,gBAAgB,CAAC;oBACrB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;oBACxE,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,KAAK,SAAS;wBAChD,CAAC,CAAC,MAAM,SAAS;wBACjB,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;oBAClE,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;wBAC5B,QAAQ;wBACR,KAAK;wBACL,MAAM;wBACN,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;qBAC3C,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;wBAC1B,QAAQ;wBACR,KAAK;wBACL,KAAK;wBACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,CAAC;qBAC3C,CAAC,CAAC;oBACH,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,qEAAqE;YACrE,0BAA0B;SACc,CAAqB,CAAC;IAClE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,SAAqB,EACrB,SAAiB,EACjB,QAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAkD,CAAC;IACvD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,SAAS;YACT,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,QAAQ,qBAAqB,SAAS,IAAI,CAAC,CAAC,CAAC;gBACzE,CAAC,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/runtime/ai-sdk/index.d.ts

@@ -0,0 +1 @@
+export { createAiSdkTools, type AiSdkSourceTool, type AiSdkToolCall, type AiSdkToolFailure, type AiSdkToolHooks, type AiSdkToolSuccess, type AiSdkWrappedTool, } from './engine.js';

package/dist/runtime/ai-sdk/index.js

@@ -0,0 +1,2 @@
+export { createAiSdkTools, } from './engine.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/ai-sdk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/ai-sdk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,GAOjB,MAAM,aAAa,CAAC"}

package/dist/runtime/authorization.d.ts

@@ -0,0 +1,16 @@
+import type { AgentRevision, ManifestRevision, Principal, RuntimePolicyRevision, ToolRiskClass } from '../contracts/index.js';
+export type ToolAuthorizationResult = {
+    allowed: true;
+    requiresApproval: boolean;
+    riskClass: ToolRiskClass;
+} | {
+    allowed: false;
+    reason: 'missing_principal' | 'tenant_mismatch' | 'agent_tool_denied' | 'manifest_tool_unavailable' | 'policy_tool_denied' | 'principal_role_denied';
+};
+export declare function authorizeToolCall(options: {
+    principal: Principal | undefined;
+    agentRevision: AgentRevision;
+    manifestRevision: ManifestRevision;
+    policyRevision: RuntimePolicyRevision;
+    toolId: string;
+}): ToolAuthorizationResult;

package/dist/runtime/authorization.js

@@ -0,0 +1,33 @@
+import { confirmationFloor } from '../contracts/tool-policy.js';
+export function authorizeToolCall(options) {
+    const { principal, agentRevision, manifestRevision, policyRevision, toolId, } = options;
+    if (!principal)
+        return { allowed: false, reason: 'missing_principal' };
+    if (principal.tenantId !== agentRevision.tenantId
+        || principal.tenantId !== manifestRevision.tenantId
+        || principal.tenantId !== policyRevision.tenantId) {
+        return { allowed: false, reason: 'tenant_mismatch' };
+    }
+    if (!agentRevision.toolAllowlist.includes(toolId)) {
+        return { allowed: false, reason: 'agent_tool_denied' };
+    }
+    const manifestTool = manifestRevision.tools.find((tool) => tool.toolId === toolId);
+    if (!manifestTool || !manifestTool.enabled || manifestTool.tombstone) {
+        return { allowed: false, reason: 'manifest_tool_unavailable' };
+    }
+    const policy = policyRevision.toolPolicies.find((tool) => tool.toolId === toolId);
+    if (!policy || !policy.enabled) {
+        return { allowed: false, reason: 'policy_tool_denied' };
+    }
+    if (policy.allowedRoles.length > 0
+        && !policy.allowedRoles.some((role) => principal.roles.includes(role))) {
+        return { allowed: false, reason: 'principal_role_denied' };
+    }
+    return {
+        allowed: true,
+        // Tier 3 always confirms, whatever the pinned policy says.
+        requiresApproval: confirmationFloor(policy.riskClass, policy.requiresApproval),
+        riskClass: policy.riskClass,
+    };
+}
+//# sourceMappingURL=authorization.js.map

package/dist/runtime/authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/runtime/authorization.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAmBhE,MAAM,UAAU,iBAAiB,CAAC,OAMjC;IACC,MAAM,EACJ,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,MAAM,GACP,GAAG,OAAO,CAAC;IAEZ,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACvE,IACE,SAAS,CAAC,QAAQ,KAAK,aAAa,CAAC,QAAQ;WAC1C,SAAS,CAAC,QAAQ,KAAK,gBAAgB,CAAC,QAAQ;WAChD,SAAS,CAAC,QAAQ,KAAK,cAAc,CAAC,QAAQ,EACjD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnF,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QACrE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC1D,CAAC;IACD,IACE,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;WAC3B,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EACtE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7D,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,2DAA2D;QAC3D,gBAAgB,EAAE,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAC9E,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/runtime/budget.d.ts

@@ -0,0 +1,39 @@
+import type { ExecutionBudget } from '../contracts/index.js';
+export interface ExecutionUsage {
+    modelSteps: number;
+    toolCalls: number;
+    inputTokens: number;
+    outputTokens: number;
+    estimatedCostUsd: number;
+    consecutiveErrors: number;
+    maxFingerprintRepeats: number;
+    elapsedMs: number;
+}
+export type BudgetReason = 'maxModelSteps' | 'maxToolCalls' | 'totalTimeoutMs' | 'maxInputTokens' | 'maxOutputTokens' | 'maxEstimatedCostUsd' | 'maxRepeatedFingerprint' | 'maxConsecutiveErrors';
+export interface BudgetEvaluation {
+    state: 'within-budget' | 'soft-limit' | 'hard-limit';
+    reasons: BudgetReason[];
+}
+export declare class ExecutionBudgetTracker {
+    readonly budget: ExecutionBudget;
+    private readonly startedAtMs;
+    private readonly now;
+    private readonly fingerprints;
+    private finalSummaryClaimed;
+    private counters;
+    constructor(budget: ExecutionBudget, clock?: {
+        now?: () => number;
+        startedAtMs?: number;
+    });
+    get usage(): ExecutionUsage;
+    recordModelStep(): void;
+    recordToolCall(): void;
+    recordTokens(inputTokens: number, outputTokens: number): void;
+    recordEstimatedCost(costUsd: number): void;
+    recordError(): void;
+    recordSuccess(): void;
+    recordFingerprint(fingerprint: string): void;
+    evaluate(): BudgetEvaluation;
+    claimFinalSummary(): boolean;
+    private requireFiniteNonnegative;
+}

package/dist/runtime/budget.js

@@ -0,0 +1,97 @@
+export class ExecutionBudgetTracker {
+    budget;
+    startedAtMs;
+    now;
+    fingerprints = new Map();
+    finalSummaryClaimed = false;
+    counters = {
+        modelSteps: 0,
+        toolCalls: 0,
+        inputTokens: 0,
+        outputTokens: 0,
+        estimatedCostUsd: 0,
+        consecutiveErrors: 0,
+        maxFingerprintRepeats: 0,
+    };
+    constructor(budget, clock = {}) {
+        this.budget = budget;
+        this.now = clock.now ?? Date.now;
+        this.startedAtMs = clock.startedAtMs ?? this.now();
+    }
+    get usage() {
+        return {
+            ...this.counters,
+            elapsedMs: Math.max(0, this.now() - this.startedAtMs),
+        };
+    }
+    recordModelStep() {
+        this.counters.modelSteps += 1;
+    }
+    recordToolCall() {
+        this.counters.toolCalls += 1;
+    }
+    recordTokens(inputTokens, outputTokens) {
+        this.counters.inputTokens += this.requireFiniteNonnegative(inputTokens, 'inputTokens');
+        this.counters.outputTokens += this.requireFiniteNonnegative(outputTokens, 'outputTokens');
+    }
+    recordEstimatedCost(costUsd) {
+        this.counters.estimatedCostUsd += this.requireFiniteNonnegative(costUsd, 'estimatedCostUsd');
+    }
+    recordError() {
+        this.counters.consecutiveErrors += 1;
+    }
+    recordSuccess() {
+        this.counters.consecutiveErrors = 0;
+    }
+    recordFingerprint(fingerprint) {
+        const count = (this.fingerprints.get(fingerprint) ?? 0) + 1;
+        this.fingerprints.set(fingerprint, count);
+        this.counters.maxFingerprintRepeats = Math.max(this.counters.maxFingerprintRepeats, count);
+    }
+    evaluate() {
+        const usage = this.usage;
+        const dimensions = [
+            ['maxModelSteps', usage.modelSteps, this.budget.maxModelSteps],
+            ['maxToolCalls', usage.toolCalls, this.budget.maxToolCalls],
+            ['totalTimeoutMs', usage.elapsedMs, this.budget.totalTimeoutMs],
+            ['maxInputTokens', usage.inputTokens, this.budget.maxInputTokens],
+            ['maxOutputTokens', usage.outputTokens, this.budget.maxOutputTokens],
+            ['maxEstimatedCostUsd', usage.estimatedCostUsd, this.budget.maxEstimatedCostUsd],
+            [
+                'maxRepeatedFingerprint',
+                usage.maxFingerprintRepeats,
+                this.budget.maxRepeatedFingerprint,
+            ],
+            [
+                'maxConsecutiveErrors',
+                usage.consecutiveErrors,
+                this.budget.maxConsecutiveErrors,
+            ],
+        ];
+        const hard = dimensions
+            .filter(([, value, limit]) => limit === 0 ? value > 0 : value >= limit)
+            .map(([reason]) => reason);
+        if (hard.length > 0)
+            return { state: 'hard-limit', reasons: hard };
+        const soft = dimensions
+            .filter(([, value, limit]) => limit > 0 && value / limit >= 0.8)
+            .map(([reason]) => reason);
+        if (soft.length > 0)
+            return { state: 'soft-limit', reasons: soft };
+        return { state: 'within-budget', reasons: [] };
+    }
+    claimFinalSummary() {
+        if (this.evaluate().state !== 'hard-limit' || this.finalSummaryClaimed) {
+            return false;
+        }
+        this.finalSummaryClaimed = true;
+        return true;
+    }
+    requireFiniteNonnegative(value, field) {
+        if (!Number.isFinite(value) || value < 0) {
+            throw new RangeError(`${field} must be a finite nonnegative number`);
+        }
+        return value;
+    }
+}
+//# sourceMappingURL=budget.js.map

package/dist/runtime/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../../src/runtime/budget.ts"],"names":[],"mappings":"AA4BA,MAAM,OAAO,sBAAsB;IAgBtB;IAfM,WAAW,CAAS;IACpB,GAAG,CAAe;IAClB,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,mBAAmB,GAAG,KAAK,CAAC;IAC5B,QAAQ,GAAG;QACjB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,CAAC;QACZ,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,CAAC;QACpB,qBAAqB,EAAE,CAAC;KACzB,CAAC;IAEF,YACW,MAAuB,EAChC,QAAsD,EAAE;QAD/C,WAAM,GAAN,MAAM,CAAiB;QAGhC,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,KAAK;QACP,OAAO;YACL,GAAG,IAAI,CAAC,QAAQ;YAChB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,eAAe;QACb,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,cAAc;QACZ,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,YAAY,CAAC,WAAmB,EAAE,YAAoB;QACpD,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,wBAAwB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACvF,IAAI,CAAC,QAAQ,CAAC,YAAY,IAAI,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC5F,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAC,wBAAwB,CAC7D,OAAO,EACP,kBAAkB,CACnB,CAAC;IACJ,CAAC;IAED,WAAW;QACT,IAAI,CAAC,QAAQ,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,aAAa;QACX,IAAI,CAAC,QAAQ,CAAC,iBAAiB,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,iBAAiB,CAAC,WAAmB;QACnC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,GAAG,IAAI,CAAC,GAAG,CAC5C,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EACnC,KAAK,CACN,CAAC;IACJ,CAAC;IAED,QAAQ;QACN,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,UAAU,GAA0C;YACxD,CAAC,eAAe,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YAC9D,CAAC,cAAc,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAC3D,CAAC,gBAAgB,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YAC/D,CAAC,gBAAgB,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACjE,CAAC,iBAAiB,EAAE,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YACpE,CAAC,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAChF;gBACE,wBAAwB;gBACxB,KAAK,CAAC,qBAAqB;gBAC3B,IAAI,CAAC,MAAM,CAAC,sBAAsB;aACnC;YACD;gBACE,sBAAsB;gBACtB,KAAK,CAAC,iBAAiB;gBACvB,IAAI,CAAC,MAAM,CAAC,oBAAoB;aACjC;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,UAAU;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;aACtE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAEnE,MAAM,IAAI,GAAG,UAAU;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,IAAI,GAAG,CAAC;aAC/D,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAEnE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACjD,CAAC;IAED,iBAAiB;QACf,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,KAAK,YAAY,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,wBAAwB,CAAC,KAAa,EAAE,KAAa;QAC3D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/runtime/contract-bindings.d.ts

@@ -0,0 +1,52 @@
+import { type AppSetupArtifact } from '../contracts/index.js';
+import type { EndpointMethod, SchemaLike, Tool } from '../types.js';
+import { type LocalRuntimeSource, type LocalRuntimeSourceOptions } from './local-runtime-source.js';
+import { type LocalToolBinding } from './local-tool-bindings.js';
+interface GeneratedToolBindingBase {
+    readonly toolId: string;
+    readonly definitionId: string;
+    readonly sourceFingerprint: string;
+    readonly inputSchemaDigest: string;
+    readonly outputSchemaDigest: string;
+    readonly inputSchema: SchemaLike;
+    readonly outputSchema: SchemaLike;
+    readonly tool: Tool;
+}
+export interface GeneratedEndpointToolBinding extends GeneratedToolBindingBase {
+    readonly executionKind: 'endpoint';
+    readonly method: EndpointMethod;
+    readonly path: string;
+}
+/** Navigation, filter and client action tools; they run in the browser. */
+export interface GeneratedUiToolBinding extends GeneratedToolBindingBase {
+    readonly executionKind: 'ui';
+    readonly actionBindingRef: string;
+}
+/** One entry of `createToolBindings()` in the generated module. */
+export type GeneratedToolBinding = GeneratedEndpointToolBinding | GeneratedUiToolBinding;
+/** The shape of `src/generated/glirastes/tools.generated.ts`. */
+export interface GeneratedToolModule {
+    readonly setupArtifact: unknown;
+    createToolBindings(): ReadonlyArray<GeneratedToolBinding>;
+}
+export type ContractBindingDisabledReason = 'binding-missing' | 'binding-duplicated' | 'binding-mismatch' | 'input-schema-digest-mismatch' | 'output-schema-digest-mismatch';
+export interface ContractBindingsResult {
+    setupArtifact: AppSetupArtifact;
+    bindings: LocalToolBinding[];
+    disabled: Array<{
+        toolId: string;
+        reason: ContractBindingDisabledReason;
+    }>;
+}
+/**
+ * Recomputes every schema digest from the live schema objects at boot and
+ * disables only tools whose binding is missing or differs from the artifact.
+ */
+export declare function createContractBindings(generated: GeneratedToolModule): ContractBindingsResult;
+export interface GeneratedRuntimeSource {
+    source: LocalRuntimeSource;
+    bindings: LocalToolBinding[];
+    disabled: ContractBindingsResult['disabled'];
+}
+export declare function createGeneratedRuntimeSource(generated: GeneratedToolModule, options: Omit<LocalRuntimeSourceOptions, 'setupArtifact' | 'bindings'>): GeneratedRuntimeSource;
+export {};

package/dist/runtime/contract-bindings.js

@@ -0,0 +1,92 @@
+import { AppSetupArtifactSchema } from '../contracts/index.js';
+import { createLocalRuntimeSource, } from './local-runtime-source.js';
+import { createLocalSchemaDigest } from './local-tool-bindings.js';
+function byToolId(left, right) {
+    return left.toolId < right.toolId ? -1 : left.toolId > right.toolId ? 1 : 0;
+}
+/** Same kind, same route or action binding, same fingerprint and digests. */
+function sameBinding(candidate, binding) {
+    if (candidate.sourceFingerprint !== binding.sourceFingerprint
+        || candidate.inputSchemaDigest !== binding.inputSchemaDigest
+        || candidate.outputSchemaDigest !== binding.outputSchemaDigest) {
+        return false;
+    }
+    if (binding.executionKind === 'endpoint') {
+        return candidate.executionKind === 'endpoint'
+            && candidate.method === binding.method
+            && candidate.path === binding.path;
+    }
+    return candidate.executionKind === 'ui'
+        && candidate.actionBindingRef === binding.actionBindingRef;
+}
+function toLocalBinding(binding) {
+    const common = {
+        toolId: binding.toolId,
+        sourceFingerprint: binding.sourceFingerprint,
+        inputSchemaDigest: binding.inputSchemaDigest,
+        outputSchemaDigest: binding.outputSchemaDigest,
+        tool: binding.tool,
+    };
+    return binding.executionKind === 'endpoint'
+        ? { ...common, executionKind: 'endpoint', method: binding.method, path: binding.path }
+        : { ...common, executionKind: 'ui', actionBindingRef: binding.actionBindingRef };
+}
+/**
+ * Recomputes every schema digest from the live schema objects at boot and
+ * disables only tools whose binding is missing or differs from the artifact.
+ */
+export function createContractBindings(generated) {
+    const artifact = AppSetupArtifactSchema.parse(generated.setupArtifact);
+    const candidates = new Map(artifact.tools.map((tool) => [tool.toolId, tool]));
+    const grouped = new Map();
+    for (const binding of generated.createToolBindings()) {
+        grouped.set(binding.toolId, [...grouped.get(binding.toolId) ?? [], binding]);
+    }
+    const disabled = new Map();
+    const bindings = [];
+    for (const [toolId, entries] of grouped) {
+        const candidate = candidates.get(toolId);
+        if (!candidate?.enabled)
+            continue;
+        if (entries.length !== 1) {
+            disabled.set(toolId, 'binding-duplicated');
+            continue;
+        }
+        const binding = entries[0];
+        if (!sameBinding(candidate, binding)) {
+            disabled.set(toolId, 'binding-mismatch');
+            continue;
+        }
+        if (createLocalSchemaDigest(binding.inputSchema) !== candidate.inputSchemaDigest) {
+            disabled.set(toolId, 'input-schema-digest-mismatch');
+            continue;
+        }
+        if (createLocalSchemaDigest(binding.outputSchema) !== candidate.outputSchemaDigest) {
+            disabled.set(toolId, 'output-schema-digest-mismatch');
+            continue;
+        }
+        bindings.push(toLocalBinding(binding));
+    }
+    for (const tool of artifact.tools) {
+        if (tool.enabled && !grouped.has(tool.toolId))
+            disabled.set(tool.toolId, 'binding-missing');
+    }
+    const setupArtifact = AppSetupArtifactSchema.parse({
+        ...artifact,
+        tools: artifact.tools.map((tool) => (disabled.has(tool.toolId) ? { ...tool, enabled: false } : tool)),
+    });
+    return {
+        setupArtifact,
+        bindings: bindings.sort(byToolId),
+        disabled: [...disabled].map(([toolId, reason]) => ({ toolId, reason })).sort(byToolId),
+    };
+}
+export function createGeneratedRuntimeSource(generated, options) {
+    const result = createContractBindings(generated);
+    return {
+        source: createLocalRuntimeSource({ ...options, setupArtifact: result.setupArtifact, bindings: result.bindings }),
+        bindings: result.bindings,
+        disabled: result.disabled,
+    };
+}
+//# sourceMappingURL=contract-bindings.js.map