glirastes 0.4.0 → 0.5.1

package/dist/runtime/tool-discovery.d.ts

@@ -0,0 +1,51 @@
+import type { ToolPresentation } from '../contracts/index.js';
+import type { ToolRegistry } from '../types.js';
+import type { TurnSnapshot } from './turn-snapshot.js';
+export interface ToolDiscoveryResult {
+    readonly name: string;
+    readonly description: string;
+    readonly module?: string;
+    readonly usageHints?: ReadonlyArray<string>;
+    readonly presentation?: Readonly<ToolPresentation>;
+}
+export interface TurnToolDiscovery {
+    readonly turnId: string;
+    readonly eligibleNames: ReadonlyArray<string>;
+    search(query: string, limit?: number): ReadonlyArray<ToolDiscoveryResult>;
+}
+export interface TurnToolDiscoveryOptions {
+    maxQueryLength?: number;
+    maxResults?: number;
+    maxDescriptionLength?: number;
+    maxHintLength?: number;
+}
+/**
+ * Search-only enrichment keyed by the model-facing tool name. Synonyms are
+ * indexed but never returned and never make a tool eligible.
+ */
+export interface ToolSearchSemantics {
+    readonly synonyms?: ReadonlyArray<string>;
+}
+export type ToolSearchSemanticsMap = Readonly<Record<string, ToolSearchSemantics>>;
+/**
+ * Builds a content-bounded search index from the immutable turn snapshot and
+ * the already materialized local registry. Discovery neither grants access
+ * nor holds an executor or schema reference.
+ */
+export declare function createTurnToolDiscovery(input: {
+    snapshot: TurnSnapshot;
+    registry: ToolRegistry;
+    revokedToolIds?: ReadonlyArray<string>;
+    semantics?: ToolSearchSemanticsMap;
+}, options?: TurnToolDiscoveryOptions): TurnToolDiscovery;
+/**
+ * Discovery for apps without a managed or standalone runtime source. The
+ * per-request registry is the deployed, app-authorized tool set; names in
+ * `excludeNames` (SDK built-ins) are never indexed.
+ */
+export declare function createRegistryToolDiscovery(input: {
+    turnId: string;
+    registry: ToolRegistry;
+    excludeNames?: ReadonlyArray<string>;
+    semantics?: ToolSearchSemanticsMap;
+}, options?: TurnToolDiscoveryOptions): TurnToolDiscovery;

package/dist/runtime/tool-discovery.js

@@ -0,0 +1,138 @@
+import { riskTier } from '../contracts/tool-policy.js';
+import { authorizeToolCall } from './authorization.js';
+import { modelFacingToolName } from './local-tool-bindings.js';
+import { createToolSearchIndex } from './tool-search.js';
+const DEFAULT_MAX_QUERY_LENGTH = 200;
+const DEFAULT_MAX_RESULTS = 8;
+const HARD_MAX_RESULTS = 20;
+const DEFAULT_MAX_DESCRIPTION_LENGTH = 500;
+const DEFAULT_MAX_HINT_LENGTH = 300;
+const MAX_SYNONYMS = 20;
+const MAX_SYNONYM_LENGTH = 100;
+function bounded(value, maxLength) {
+    return value.slice(0, maxLength);
+}
+function freezeResult(result) {
+    if (result.usageHints)
+        Object.freeze(result.usageHints);
+    if (result.presentation)
+        Object.freeze(result.presentation);
+    return Object.freeze(result);
+}
+function boundedSynonyms(semantics, name) {
+    const entry = semantics && Object.hasOwn(semantics, name)
+        ? semantics[name]
+        : undefined;
+    return (entry?.synonyms ?? [])
+        .filter((synonym) => typeof synonym === 'string')
+        .slice(0, MAX_SYNONYMS)
+        .map((synonym) => bounded(synonym, MAX_SYNONYM_LENGTH));
+}
+function resolveLimits(options) {
+    return {
+        maxQueryLength: Math.min(Math.max(options.maxQueryLength ?? DEFAULT_MAX_QUERY_LENGTH, 1), DEFAULT_MAX_QUERY_LENGTH),
+        maxResults: Math.min(Math.max(options.maxResults ?? DEFAULT_MAX_RESULTS, 1), HARD_MAX_RESULTS),
+        maxDescriptionLength: Math.min(Math.max(options.maxDescriptionLength ?? DEFAULT_MAX_DESCRIPTION_LENGTH, 1), DEFAULT_MAX_DESCRIPTION_LENGTH),
+        maxHintLength: Math.min(Math.max(options.maxHintLength ?? DEFAULT_MAX_HINT_LENGTH, 1), DEFAULT_MAX_HINT_LENGTH),
+    };
+}
+function createDiscovery(turnId, unsortedEntries, limits) {
+    const entries = [...unsortedEntries].sort((left, right) => left.result.name.localeCompare(right.result.name));
+    Object.freeze(entries);
+    const byName = new Map(entries.map((entry) => [entry.result.name, entry.result]));
+    const eligibleNames = Object.freeze(entries.map((entry) => entry.result.name));
+    const index = createToolSearchIndex(entries.map((entry) => ({
+        name: entry.result.name,
+        description: entry.result.description,
+        ...(entry.result.module ? { module: entry.result.module } : {}),
+        sharedWith: entry.sharedWith,
+        ...(entry.result.usageHints ? { usageHints: entry.result.usageHints } : {}),
+        synonyms: entry.synonyms,
+    })));
+    return Object.freeze({
+        turnId,
+        eligibleNames,
+        search(query, limit = limits.maxResults) {
+            if (query.length > limits.maxQueryLength) {
+                throw new Error('Tool discovery query exceeds the configured limit.');
+            }
+            const boundedLimit = Math.min(Math.max(Math.trunc(limit), 1), limits.maxResults);
+            return Object.freeze(index.search(query, boundedLimit)
+                .map((name) => byName.get(name))
+                .filter((result) => result !== undefined));
+        },
+    });
+}
+/**
+ * Builds a content-bounded search index from the immutable turn snapshot and
+ * the already materialized local registry. Discovery neither grants access
+ * nor holds an executor or schema reference.
+ */
+export function createTurnToolDiscovery(input, options = {}) {
+    const limits = resolveLimits(options);
+    const { maxDescriptionLength, maxHintLength } = limits;
+    const revoked = new Set(input.revokedToolIds ?? []);
+    const policies = new Map(input.snapshot.policyRevision.toolPolicies.map((policy) => [policy.toolId, policy]));
+    const entries = [];
+    for (const manifestTool of input.snapshot.manifestRevision.tools) {
+        const name = modelFacingToolName(manifestTool.name);
+        const binding = input.registry[name];
+        const policy = policies.get(manifestTool.toolId);
+        const authorization = authorizeToolCall({
+            principal: input.snapshot.principal,
+            agentRevision: input.snapshot.agentRevision,
+            manifestRevision: input.snapshot.manifestRevision,
+            policyRevision: input.snapshot.policyRevision,
+            toolId: manifestTool.toolId,
+        });
+        if (revoked.has(manifestTool.toolId)
+            || !binding
+            || binding.id !== manifestTool.toolId
+            || !policy
+            || riskTier(policy.riskClass) < riskTier(manifestTool.riskClass)
+            || !authorization.allowed) {
+            continue;
+        }
+        const description = bounded(manifestTool.description, maxDescriptionLength);
+        const usageHints = manifestTool.usageHints?.map((hint) => bounded(hint, maxHintLength));
+        const result = freezeResult({
+            name,
+            description,
+            ...(manifestTool.module ? { module: manifestTool.module } : {}),
+            ...(usageHints ? { usageHints } : {}),
+            ...(manifestTool.presentation
+                ? { presentation: { ...manifestTool.presentation } }
+                : {}),
+        });
+        entries.push({
+            result,
+            synonyms: boundedSynonyms(input.semantics, name),
+            sharedWith: manifestTool.sharedWith ?? [],
+        });
+    }
+    return createDiscovery(input.snapshot.turnId, entries, limits);
+}
+/**
+ * Discovery for apps without a managed or standalone runtime source. The
+ * per-request registry is the deployed, app-authorized tool set; names in
+ * `excludeNames` (SDK built-ins) are never indexed.
+ */
+export function createRegistryToolDiscovery(input, options = {}) {
+    const limits = resolveLimits(options);
+    const excluded = new Set(input.excludeNames ?? []);
+    const entries = [];
+    for (const [name, tool] of Object.entries(input.registry)) {
+        if (excluded.has(name) || typeof tool?.description !== 'string')
+            continue;
+        entries.push({
+            result: freezeResult({
+                name,
+                description: bounded(tool.description, limits.maxDescriptionLength),
+            }),
+            synonyms: boundedSynonyms(input.semantics, name),
+            sharedWith: [],
+        });
+    }
+    return createDiscovery(input.turnId, entries, limits);
+}
+//# sourceMappingURL=tool-discovery.js.map

package/dist/runtime/tool-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-discovery.js","sourceRoot":"","sources":["../../src/runtime/tool-discovery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAwCzD,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC;AACpC,MAAM,YAAY,GAAG,EAAE,CAAC;AACxB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,SAAS,OAAO,CAAC,KAAa,EAAE,SAAiB;IAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,YAAY,CAAC,MAA2B;IAC/C,IAAI,MAAM,CAAC,UAAU;QAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,YAAY;QAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CACtB,SAA6C,EAC7C,IAAY;IAEZ,MAAM,KAAK,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;QACvD,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QACjB,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC;SACtB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,OAAiC;IACtD,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,GAAG,CACtB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,wBAAwB,EAAE,CAAC,CAAC,EAC/D,wBAAwB,CACzB;QACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,EAAE,CAAC,CAAC,EACtD,gBAAgB,CACjB;QACD,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,IAAI,8BAA8B,EAAE,CAAC,CAAC,EAC3E,8BAA8B,CAC/B;QACD,aAAa,EAAE,IAAI,CAAC,GAAG,CACrB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,uBAAuB,EAAE,CAAC,CAAC,EAC7D,uBAAuB,CACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,eAAiC,EACjC,MAAwC;IAExC,MAAM,OAAO,GAAG,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAU,CAAC,CAAC,CAAC;IAC3F,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;QACvB,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW;QACrC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC,CAAC,CAAC;IAEL,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,aAAa;QACb,MAAM,CAAC,KAAa,EAAE,KAAK,GAAG,MAAM,CAAC,UAAU;YAC7C,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACxE,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACjF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;iBACnD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;iBAC/B,MAAM,CAAC,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC;QAC9E,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAKC,EACD,UAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,EAAE,oBAAoB,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,YAAY,CAAC,GAAG,CACrE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAU,CAC7C,CAAC,CAAC;IACH,MAAM,OAAO,GAAqB,EAAE,CAAC;IAErC,KAAK,MAAM,YAAY,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,iBAAiB,CAAC;YACtC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS;YACnC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,aAAa;YAC3C,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc;YAC7C,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,IACE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC;eAC7B,CAAC,OAAO;eACR,OAAO,CAAC,EAAE,KAAK,YAAY,CAAC,MAAM;eAClC,CAAC,MAAM;eACP,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC;eAC7D,CAAC,aAAa,CAAC,OAAO,EACzB,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC;QAC5E,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvD,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,IAAI;YACJ,WAAW;YACX,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,YAAY;gBAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE;gBACpD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;YAChD,UAAU,EAAE,YAAY,CAAC,UAAU,IAAI,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,KAKC,EACD,UAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ;YAAE,SAAS;QAC1E,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,YAAY,CAAC;gBACnB,IAAI;gBACJ,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,oBAAoB,CAAC;aACpE,CAAC;YACF,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;YAChD,UAAU,EAAE,EAAE;SACf,CAAC,CAAC;IACL,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACxD,CAAC"}

package/dist/runtime/tool-search.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Searchable, content-bounded tool facts. Discovery builds these from the
+ * pinned manifest or the deployed registry; nothing here grants access.
+ */
+export interface ToolSearchDocument {
+    readonly name: string;
+    readonly description: string;
+    readonly module?: string;
+    readonly sharedWith?: ReadonlyArray<string>;
+    readonly usageHints?: ReadonlyArray<string>;
+    readonly synonyms?: ReadonlyArray<string>;
+}
+export interface ToolSearchIndex {
+    /** Document names ordered by relevance; empty when no query term matches. */
+    search(query: string, limit: number): ReadonlyArray<string>;
+}
+/**
+ * Unicode-aware tokens: camelCase and snake/dot names split, letters and
+ * digits of every script kept, German/English diacritics folded, function
+ * words dropped.
+ */
+export declare function searchTokens(text: string): string[];
+/** Each query token with its German and English Snowball stems. */
+export declare function searchTermVariants(text: string): ReadonlyArray<ReadonlyArray<string>>;
+/**
+ * Builds a deterministic relevance index. Ranking: exact name, then the sum
+ * over query terms of the best field hit (name > synonyms > description >
+ * module > hints) weighted by inverse document frequency, then name.
+ * No embeddings, network or model call.
+ */
+export declare function createToolSearchIndex(documents: ReadonlyArray<ToolSearchDocument>): ToolSearchIndex;

package/dist/runtime/tool-search.js

@@ -0,0 +1,145 @@
+import { newStemmer } from 'snowball-stemmers';
+const STEMMERS = [
+    newStemmer('german'),
+    newStemmer('english'),
+];
+/** Folded (lower-case, no diacritics, ß → ss) German and English function words. */
+const STOP_WORDS = new Set([
+    'a', 'all', 'an', 'and', 'any', 'are', 'as', 'at', 'be', 'by', 'can',
+    'could', 'do', 'does', 'for', 'from', 'get', 'give', 'how', 'in', 'into',
+    'is', 'it', 'me', 'my', 'of', 'on', 'or', 'our', 'please', 'show', 'some',
+    'that', 'the', 'these', 'this', 'those', 'to', 'we', 'what', 'which',
+    'who', 'with', 'would', 'you', 'your',
+    'alle', 'allen', 'als', 'am', 'auch', 'auf', 'aus', 'bei', 'bitte', 'das',
+    'dass', 'dem', 'den', 'der', 'des', 'die', 'dies', 'diese', 'diesem',
+    'diesen', 'dieser', 'dieses', 'du', 'ein', 'eine', 'einem', 'einen',
+    'einer', 'eines', 'es', 'fur', 'gib', 'habe', 'haben', 'hat', 'ich',
+    'ihr', 'im', 'ist', 'kann', 'kannst', 'mal', 'man', 'mein', 'meine',
+    'meinem', 'meinen', 'meiner', 'meines', 'mich', 'mir', 'mit', 'nach',
+    'noch', 'oder', 'sind', 'uber', 'und', 'uns', 'unser', 'unsere', 'vom',
+    'von', 'was', 'welche', 'welcher', 'welches', 'wer', 'wie', 'wir', 'wo',
+    'zu', 'zum', 'zur',
+]);
+const MIN_TOKEN_LENGTH = 2;
+const MIN_PREFIX_LENGTH = 5;
+const FIELD_WEIGHTS = {
+    name: 8,
+    synonyms: 6,
+    description: 4,
+    module: 3,
+    hints: 2,
+};
+const SEARCH_FIELDS = Object.keys(FIELD_WEIGHTS);
+/**
+ * Unicode-aware tokens: camelCase and snake/dot names split, letters and
+ * digits of every script kept, German/English diacritics folded, function
+ * words dropped.
+ */
+export function searchTokens(text) {
+    return text
+        .normalize('NFKC')
+        .replace(/(\p{Ll}|\p{N})(\p{Lu})/gu, '$1 $2')
+        .toLowerCase()
+        .replace(/ß/g, 'ss')
+        .normalize('NFKD')
+        .replace(/\p{M}+/gu, '')
+        .split(/[^\p{L}\p{N}]+/u)
+        .filter((token) => token.length >= MIN_TOKEN_LENGTH && !STOP_WORDS.has(token));
+}
+function termVariants(token) {
+    const variants = new Set([token]);
+    for (const stemmer of STEMMERS) {
+        const stem = stemmer.stem(token);
+        if (stem.length >= MIN_TOKEN_LENGTH)
+            variants.add(stem);
+    }
+    return [...variants];
+}
+/** Each query token with its German and English Snowball stems. */
+export function searchTermVariants(text) {
+    return searchTokens(text).map(termVariants);
+}
+function fieldVariants(text) {
+    const variants = new Set();
+    for (const term of searchTermVariants(text)) {
+        for (const variant of term)
+            variants.add(variant);
+    }
+    return variants;
+}
+/** 1 for an exact token/stem hit, 0.5 for a compound prefix, else 0. */
+function matchStrength(term, field) {
+    for (const variant of term)
+        if (field.has(variant))
+            return 1;
+    for (const variant of term) {
+        if (variant.length < MIN_PREFIX_LENGTH)
+            continue;
+        for (const candidate of field) {
+            if (candidate.length < MIN_PREFIX_LENGTH)
+                continue;
+            if (candidate.startsWith(variant) || variant.startsWith(candidate)) {
+                return 0.5;
+            }
+        }
+    }
+    return 0;
+}
+function indexDocument(document) {
+    return {
+        name: document.name,
+        normalizedName: searchTokens(document.name).join(' '),
+        fields: {
+            name: fieldVariants(document.name),
+            synonyms: fieldVariants((document.synonyms ?? []).join(' ')),
+            description: fieldVariants(document.description),
+            module: fieldVariants([document.module, ...(document.sharedWith ?? [])]
+                .filter((value) => Boolean(value))
+                .join(' ')),
+            hints: fieldVariants((document.usageHints ?? []).join(' ')),
+        },
+    };
+}
+/**
+ * Builds a deterministic relevance index. Ranking: exact name, then the sum
+ * over query terms of the best field hit (name > synonyms > description >
+ * module > hints) weighted by inverse document frequency, then name.
+ * No embeddings, network or model call.
+ */
+export function createToolSearchIndex(documents) {
+    const indexed = documents.map(indexDocument);
+    const documentFrequency = (term) => indexed.filter((document) => SEARCH_FIELDS.some((field) => matchStrength(term, document.fields[field]) > 0)).length;
+    return Object.freeze({
+        search(query, limit) {
+            const terms = searchTermVariants(query);
+            if (terms.length === 0 || indexed.length === 0)
+                return Object.freeze([]);
+            const inverseFrequency = terms.map((term) => Math.log(1 + indexed.length / Math.max(1, documentFrequency(term))));
+            const normalizedQuery = searchTokens(query).join(' ');
+            const ranked = indexed
+                .map((document) => {
+                let score = 0;
+                terms.forEach((term, index) => {
+                    let best = 0;
+                    for (const field of SEARCH_FIELDS) {
+                        best = Math.max(best, matchStrength(term, document.fields[field]) * FIELD_WEIGHTS[field]);
+                    }
+                    score += best * inverseFrequency[index];
+                });
+                return {
+                    name: document.name,
+                    exact: normalizedQuery === document.normalizedName ? 1 : 0,
+                    score,
+                };
+            })
+                .filter((candidate) => candidate.score > 0)
+                .sort((left, right) => right.exact - left.exact
+                || right.score - left.score
+                || left.name.localeCompare(right.name))
+                .slice(0, Math.max(0, Math.trunc(limit)))
+                .map((candidate) => candidate.name);
+            return Object.freeze(ranked);
+        },
+    });
+}
+//# sourceMappingURL=tool-search.js.map

package/dist/runtime/tool-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-search.js","sourceRoot":"","sources":["../../src/runtime/tool-search.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AAoB7D,MAAM,QAAQ,GAA2B;IACvC,UAAU,CAAC,QAAQ,CAAC;IACpB,UAAU,CAAC,SAAS,CAAC;CACtB,CAAC;AAEF,oFAAoF;AACpF,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC;IAC9C,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK;IACpE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM;IACxE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM;IACzE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO;IACpE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM;IACrC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;IACzE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ;IACpE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO;IACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK;IACnE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO;IACnE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM;IACpE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK;IACtE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI;IACvE,IAAI,EAAE,KAAK,EAAE,KAAK;CACnB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;IACd,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;CACA,CAAC;AAEX,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAkB,CAAC;AAElE;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,IAAI;SACR,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,0BAA0B,EAAE,OAAO,CAAC;SAC5C,WAAW,EAAE;SACb,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;SACnB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,iBAAiB,CAAC;SACxB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChB,KAAK,CAAC,MAAM,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,IAAI,gBAAgB;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,kBAAkB,CAChC,IAAY;IAEZ,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,KAAK,MAAM,OAAO,IAAI,IAAI;YAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CACpB,IAA2B,EAC3B,KAA0B;IAE1B,KAAK,MAAM,OAAO,IAAI,IAAI;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB;YAAE,SAAS;QACjD,KAAK,MAAM,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,MAAM,GAAG,iBAAiB;gBAAE,SAAS;YACnD,IAAI,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnE,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAQD,SAAS,aAAa,CAAC,QAA4B;IACjD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QACrD,MAAM,EAAE;YACN,IAAI,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClC,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5D,WAAW,EAAE,aAAa,CAAC,QAAQ,CAAC,WAAW,CAAC;YAChD,MAAM,EAAE,aAAa,CACnB,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;iBAC9C,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;iBAClD,IAAI,CAAC,GAAG,CAAC,CACb;YACD,KAAK,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAA4C;IAE5C,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,iBAAiB,GAAG,CAAC,IAA2B,EAAE,EAAE,CACxD,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE/D,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,KAAa,EAAE,KAAa;YACjC,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACzE,MAAM,gBAAgB,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1C,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEtD,MAAM,MAAM,GAAG,OAAO;iBACnB,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAChB,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;oBAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;oBACb,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;wBAClC,IAAI,GAAG,IAAI,CAAC,GAAG,CACb,IAAI,EACJ,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CACnE,CAAC;oBACJ,CAAC;oBACD,KAAK,IAAI,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAE,CAAC;gBAC3C,CAAC,CAAC,CAAC;gBACH,OAAO;oBACL,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,KAAK,EAAE,eAAe,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1D,KAAK;iBACN,CAAC;YACJ,CAAC,CAAC;iBACD,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC;iBAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACpB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;mBACrB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;mBACxB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;iBACxC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;iBACxC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACtC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/turn-snapshot.d.ts

@@ -0,0 +1,44 @@
+import type { AgentRevision, ExecutionBudget, ManifestRevision, Principal, PromptPin, RuntimePolicyRevision, SecurityRevocation } from '../contracts/index.js';
+export interface TurnSnapshot {
+    readonly turnId: string;
+    readonly startedAt: string;
+    readonly principal: Principal;
+    readonly agentRevision: AgentRevision;
+    readonly manifestRevision: ManifestRevision;
+    /**
+     * The pinned policy revision. Its `toolPolicies` are the effective ones:
+     * the signed values composed with the revision's own signed `toolOverrides`
+     * deltas (restrictions, plus the D16 relaxations the local code report
+     * allows), so every consumer of the snapshot obeys Platform decisions,
+     * whichever path built it.
+     */
+    readonly policyRevision: RuntimePolicyRevision;
+    readonly budget: ExecutionBudget;
+    /**
+     * Prompt revision the turn started with. Prompt bundles hot-swap
+     * independently of the runtime bundle, so a running turn stays on this pin.
+     */
+    readonly promptPin?: PromptPin;
+}
+export declare function createTurnSnapshot(options: {
+    turnId: string;
+    agentRevision: AgentRevision;
+    manifestRevision: ManifestRevision;
+    policyRevision: RuntimePolicyRevision;
+    principal: Principal;
+    localLimits: ExecutionBudget;
+    promptPin?: PromptPin;
+    startedAt?: string;
+    /**
+     * D16: the tools whose confirmation a signed Platform decision may switch
+     * off, `relaxableToolIds(setupArtifact)` of the running code. Without it a
+     * snapshot built straight from a Platform deployment relaxes nothing.
+     */
+    relaxableToolIds?: ReadonlySet<string>;
+}): TurnSnapshot;
+/**
+ * Resuming a turn must never silently change its prompt revision. A turn that
+ * pinned a prompt bundle can only resume on the identical revision and digest.
+ */
+export declare function assertPromptPinForResume(snapshot: TurnSnapshot, pin: PromptPin | undefined): void;
+export declare function isToolRevoked(snapshot: TurnSnapshot, toolId: string, revocations: ReadonlyArray<SecurityRevocation>, at?: Date): boolean;

package/dist/runtime/turn-snapshot.js

@@ -0,0 +1,108 @@
+import { applyPolicyOverlay } from './policy-overlay.js';
+function deepFreeze(value) {
+    if (value && typeof value === 'object' && !Object.isFrozen(value)) {
+        Object.freeze(value);
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+    }
+    return value;
+}
+function clone(value) {
+    return structuredClone(value);
+}
+function minBudget(local, agent, policy) {
+    return {
+        maxModelSteps: Math.min(local.maxModelSteps, agent.maxModelSteps, policy.maxModelSteps),
+        maxToolCalls: Math.min(local.maxToolCalls, agent.maxToolCalls, policy.maxToolCalls),
+        totalTimeoutMs: Math.min(local.totalTimeoutMs, agent.totalTimeoutMs, policy.totalTimeoutMs),
+        toolTimeoutMs: Math.min(local.toolTimeoutMs, agent.toolTimeoutMs, policy.toolTimeoutMs),
+        maxInputTokens: Math.min(local.maxInputTokens, agent.maxInputTokens, policy.maxInputTokens),
+        maxOutputTokens: Math.min(local.maxOutputTokens, agent.maxOutputTokens, policy.maxOutputTokens),
+        maxEstimatedCostUsd: Math.min(local.maxEstimatedCostUsd, agent.maxEstimatedCostUsd, policy.maxEstimatedCostUsd),
+        maxRepeatedFingerprint: Math.min(local.maxRepeatedFingerprint, agent.maxRepeatedFingerprint, policy.maxRepeatedFingerprint),
+        maxConsecutiveErrors: Math.min(local.maxConsecutiveErrors, agent.maxConsecutiveErrors, policy.maxConsecutiveErrors),
+        delegation: {
+            maxDepth: Math.min(local.delegation.maxDepth, agent.delegation.maxDepth, policy.delegation.maxDepth),
+            maxBreadth: Math.min(local.delegation.maxBreadth, agent.delegation.maxBreadth, policy.delegation.maxBreadth),
+            sharedBudget: local.delegation.sharedBudget
+                || agent.delegation.sharedBudget
+                || policy.delegation.sharedBudget,
+        },
+    };
+}
+/**
+ * Applies the signed `toolOverrides` deltas of a Platform policy revision to
+ * its reported `toolPolicies` (`applyPolicyOverlay`). A revision composed by
+ * the local runtime source carries no deltas and stays as it is; one a
+ * consumer takes straight from a Platform deployment no longer runs a tool
+ * the Platform disabled, and switches a confirmation off only for tools the
+ * local code report names in `relaxableToolIds` (D16). Applying the same
+ * deltas twice changes nothing.
+ */
+function withPlatformDecisions(policyRevision, relaxableToolIds) {
+    const deltas = policyRevision.toolOverrides ?? [];
+    if (deltas.length === 0)
+        return policyRevision;
+    return {
+        ...policyRevision,
+        toolPolicies: applyPolicyOverlay(policyRevision.toolPolicies, deltas, relaxableToolIds ? { relaxableToolIds } : {}).policies,
+    };
+}
+export function createTurnSnapshot(options) {
+    const { agentRevision, manifestRevision, policyRevision, principal, } = options;
+    const tenantIds = new Set([
+        agentRevision.tenantId,
+        manifestRevision.tenantId,
+        policyRevision.tenantId,
+        principal.tenantId,
+    ]);
+    if (tenantIds.size !== 1) {
+        throw new Error('Cannot create turn snapshot across tenant boundaries');
+    }
+    if (manifestRevision.environmentId !== policyRevision.environmentId) {
+        throw new Error('Cannot create turn snapshot with mismatched environments');
+    }
+    const snapshot = {
+        turnId: options.turnId,
+        startedAt: options.startedAt ?? new Date().toISOString(),
+        principal: clone(principal),
+        agentRevision: clone(agentRevision),
+        manifestRevision: clone(manifestRevision),
+        policyRevision: clone(withPlatformDecisions(policyRevision, options.relaxableToolIds)),
+        budget: minBudget(options.localLimits, agentRevision.budget, policyRevision.budget),
+        ...(options.promptPin ? { promptPin: clone(options.promptPin) } : {}),
+    };
+    return deepFreeze(snapshot);
+}
+/**
+ * Resuming a turn must never silently change its prompt revision. A turn that
+ * pinned a prompt bundle can only resume on the identical revision and digest.
+ */
+export function assertPromptPinForResume(snapshot, pin) {
+    const pinned = snapshot.promptPin;
+    if (!pinned)
+        return;
+    if (!pin) {
+        throw new Error('Cannot resume a turn without its pinned prompt revision');
+    }
+    if (pin.revisionId !== pinned.revisionId || pin.revision !== pinned.revision) {
+        throw new Error('Resumed prompt revision does not match the pinned prompt revision');
+    }
+    if (pin.bundleDigest !== pinned.bundleDigest) {
+        throw new Error('Resumed prompt bundle digest does not match the pinned digest');
+    }
+}
+export function isToolRevoked(snapshot, toolId, revocations, at = new Date()) {
+    const timestamp = at.getTime();
+    return revocations.some((revocation) => {
+        if (revocation.environmentId !== snapshot.manifestRevision.environmentId)
+            return false;
+        if (Date.parse(revocation.effectiveAt) > timestamp)
+            return false;
+        return revocation.toolIds.includes(toolId)
+            || revocation.agentRevisionIds.includes(snapshot.agentRevision.revisionId)
+            || revocation.policyRevisionIds.includes(snapshot.policyRevision.revisionId);
+    });
+}
+//# sourceMappingURL=turn-snapshot.js.map

package/dist/runtime/turn-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-snapshot.js","sourceRoot":"","sources":["../../src/runtime/turn-snapshot.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAwBzD,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAI,KAAQ;IACxB,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,SAAS,CAChB,KAAsB,EACtB,KAAsB,EACtB,MAAuB;IAEvB,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;QACvF,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC;QACnF,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;QAC3F,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;QACvF,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC;QAC3F,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QAC/F,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAC3B,KAAK,CAAC,mBAAmB,EACzB,KAAK,CAAC,mBAAmB,EACzB,MAAM,CAAC,mBAAmB,CAC3B;QACD,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAC9B,KAAK,CAAC,sBAAsB,EAC5B,KAAK,CAAC,sBAAsB,EAC5B,MAAM,CAAC,sBAAsB,CAC9B;QACD,oBAAoB,EAAE,IAAI,CAAC,GAAG,CAC5B,KAAK,CAAC,oBAAoB,EAC1B,KAAK,CAAC,oBAAoB,EAC1B,MAAM,CAAC,oBAAoB,CAC5B;QACD,UAAU,EAAE;YACV,QAAQ,EAAE,IAAI,CAAC,GAAG,CAChB,KAAK,CAAC,UAAU,CAAC,QAAQ,EACzB,KAAK,CAAC,UAAU,CAAC,QAAQ,EACzB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAC3B;YACD,UAAU,EAAE,IAAI,CAAC,GAAG,CAClB,KAAK,CAAC,UAAU,CAAC,UAAU,EAC3B,KAAK,CAAC,UAAU,CAAC,UAAU,EAC3B,MAAM,CAAC,UAAU,CAAC,UAAU,CAC7B;YACD,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,YAAY;mBACtC,KAAK,CAAC,UAAU,CAAC,YAAY;mBAC7B,MAAM,CAAC,UAAU,CAAC,YAAY;SACpC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAC5B,cAAqC,EACrC,gBAAiD;IAEjD,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,IAAI,EAAE,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAC/C,OAAO;QACL,GAAG,cAAc;QACjB,YAAY,EAAE,kBAAkB,CAC9B,cAAc,CAAC,YAAY,EAC3B,MAAM,EACN,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAC7C,CAAC,QAAQ;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAelC;IACC,MAAM,EACJ,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,SAAS,GACV,GAAG,OAAO,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;QACxB,aAAa,CAAC,QAAQ;QACtB,gBAAgB,CAAC,QAAQ;QACzB,cAAc,CAAC,QAAQ;QACvB,SAAS,CAAC,QAAQ;KACnB,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,gBAAgB,CAAC,aAAa,KAAK,cAAc,CAAC,aAAa,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,QAAQ,GAAiB;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACxD,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;QAC3B,aAAa,EAAE,KAAK,CAAC,aAAa,CAAC;QACnC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QACzC,cAAc,EAAE,KAAK,CAAC,qBAAqB,CAAC,cAAc,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACtF,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;QACnF,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAC;IAEF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAsB,EACtB,GAA0B;IAE1B,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAsB,EACtB,MAAc,EACd,WAA8C,EAC9C,EAAE,GAAG,IAAI,IAAI,EAAE;IAEf,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;QACrC,IAAI,UAAU,CAAC,aAAa,KAAK,QAAQ,CAAC,gBAAgB,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACvF,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,SAAS;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;eACrC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC;eACvE,UAAU,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC"}