mcard-js 2.1.49 → 2.1.50

package/dist/index.cjs

@@ -472,12 +472,12 @@ var init_app_config = __esm({
       },
       identity: {
         provider: "sqlite",
-        space_path: "./data/IDENTITY_SPACE.db",
+        space_path: "./data/agent_identities.db",
         api_endpoint: null,
         default_vapid_contact: "mailto:developer@example.com"
       },
       storage: {
-        default_db_path: "./data/DEFAULT_DB_FILE.db",
+        default_db_path: "./data/content_memory.db",
         test_db_path: "./tests/data/test_mcard.db",
         default_data_root_dirname: "data",
         default_data_user: "guest",
@@ -487,7 +487,7 @@ var init_app_config = __esm({
         default_mcard_db: "mcard.db",
         default_server_log_db: "server_log.db",
         default_push_subscriptions_file: "subscriptions.json",
-        default_vcard_db_path: "data/vcard.db"
+        default_execution_log_path: "./data/execution_log.db"
       },
       services: {
         default_ollama_base_url: "http://localhost:11434",
@@ -527,7 +527,58 @@ var init_app_config = __esm({
 });
 
 // src/config/constants.ts
-var network, identity, services, web, DEFAULT_PAGE_SIZE, MAX_FILE_SIZE, READ_TIMEOUT_MS, KNOWN_TYPE_SIZE_LIMIT, BINARY_CHECK_SAMPLE_SIZE, CONTENT_DETECTION_SAMPLE_SIZE, DEFAULT_MAX_PROBLEM_BYTES, INDEXEDDB_DEFAULT_DB_NAME, INDEXEDDB_DEFAULT_DB_VERSION, SQLITE_BUSY_TIMEOUT_MS, DEFAULT_IDENTITY_PROVIDER, DEFAULT_IDENTITY_SPACE_PATH, DEFAULT_API_PORT, DEFAULT_PYTHON_API_PORT, DEFAULT_JS_API_PORT, DEFAULT_VCARD_DB_PATH, DEFAULT_WS_PORT, DEFAULT_WS_HOST, DEFAULT_SERVER_HOST, CORS_ORIGINS, getEnvUrl, API_KEY_HEADER_NAME, DEFAULT_OLLAMA_BASE_URL, DEFAULT_OTLP_ENDPOINT, DEFAULT_VLLM_BASE_URL, DEFAULT_LMSTUDIO_BASE_URL, DEFAULT_SQLJS_WASM_URL, DEFAULT_SANDBOX_TIMEOUT_MS, DEFAULT_CLM_TIMEOUT_MS, DEFAULT_VM_EXECUTION_TIMEOUT_MS, LLM_DEFAULT_TIMEOUT_SECS, LLM_DEFAULT_RETRY_COUNT, LLM_DEFAULT_RETRY_DELAY_SECS;
+var constants_exports = {};
+__export(constants_exports, {
+  API_KEY_HEADER_NAME: () => API_KEY_HEADER_NAME,
+  BINARY_CHECK_SAMPLE_SIZE: () => BINARY_CHECK_SAMPLE_SIZE,
+  CONTENT_DETECTION_SAMPLE_SIZE: () => CONTENT_DETECTION_SAMPLE_SIZE,
+  CORS_ORIGINS: () => CORS_ORIGINS,
+  DEFAULT_API_PORT: () => DEFAULT_API_PORT,
+  DEFAULT_CLM_TIMEOUT_MS: () => DEFAULT_CLM_TIMEOUT_MS,
+  DEFAULT_EMBEDDING_MODEL: () => DEFAULT_EMBEDDING_MODEL,
+  DEFAULT_EXECUTION_LOG_PATH: () => DEFAULT_EXECUTION_LOG_PATH,
+  DEFAULT_IDENTITY_PROVIDER: () => DEFAULT_IDENTITY_PROVIDER,
+  DEFAULT_IDENTITY_SPACE_PATH: () => DEFAULT_IDENTITY_SPACE_PATH,
+  DEFAULT_JS_API_PORT: () => DEFAULT_JS_API_PORT,
+  DEFAULT_LMSTUDIO_BASE_URL: () => DEFAULT_LMSTUDIO_BASE_URL,
+  DEFAULT_MAX_ETA_STEPS: () => DEFAULT_MAX_ETA_STEPS,
+  DEFAULT_MAX_INTROSPECTION_DEPTH: () => DEFAULT_MAX_INTROSPECTION_DEPTH,
+  DEFAULT_MAX_PROBLEM_BYTES: () => DEFAULT_MAX_PROBLEM_BYTES,
+  DEFAULT_MAX_REDUCTION_STEPS: () => DEFAULT_MAX_REDUCTION_STEPS,
+  DEFAULT_OLLAMA_BASE_URL: () => DEFAULT_OLLAMA_BASE_URL,
+  DEFAULT_OTLP_ENDPOINT: () => DEFAULT_OTLP_ENDPOINT,
+  DEFAULT_PAGE_SIZE: () => DEFAULT_PAGE_SIZE,
+  DEFAULT_PYTHON_API_PORT: () => DEFAULT_PYTHON_API_PORT,
+  DEFAULT_SANDBOX_TIMEOUT_MS: () => DEFAULT_SANDBOX_TIMEOUT_MS,
+  DEFAULT_SERVER_HOST: () => DEFAULT_SERVER_HOST,
+  DEFAULT_SQLJS_WASM_URL: () => DEFAULT_SQLJS_WASM_URL,
+  DEFAULT_VISION_MODEL: () => DEFAULT_VISION_MODEL,
+  DEFAULT_VLLM_BASE_URL: () => DEFAULT_VLLM_BASE_URL,
+  DEFAULT_VM_EXECUTION_TIMEOUT_MS: () => DEFAULT_VM_EXECUTION_TIMEOUT_MS,
+  DEFAULT_WS_HOST: () => DEFAULT_WS_HOST,
+  DEFAULT_WS_PORT: () => DEFAULT_WS_PORT,
+  DEFAULT_WS_RECONNECT_MS: () => DEFAULT_WS_RECONNECT_MS,
+  DETECTION_SAMPLE_CAP: () => DETECTION_SAMPLE_CAP,
+  EMBEDDING_MODELS: () => EMBEDDING_MODELS,
+  ENV_API_PORT: () => ENV_API_PORT,
+  ENV_WS_PORT: () => ENV_WS_PORT,
+  INDEXEDDB_DEFAULT_DB_NAME: () => INDEXEDDB_DEFAULT_DB_NAME,
+  INDEXEDDB_DEFAULT_DB_VERSION: () => INDEXEDDB_DEFAULT_DB_VERSION,
+  KNOWN_TYPE_SIZE_LIMIT: () => KNOWN_TYPE_SIZE_LIMIT,
+  LLM_DEFAULT_RETRY_COUNT: () => LLM_DEFAULT_RETRY_COUNT,
+  LLM_DEFAULT_RETRY_DELAY_SECS: () => LLM_DEFAULT_RETRY_DELAY_SECS,
+  LLM_DEFAULT_TIMEOUT_SECS: () => LLM_DEFAULT_TIMEOUT_SECS,
+  MAX_FILE_SIZE: () => MAX_FILE_SIZE,
+  MAX_PAGE_SIZE: () => MAX_PAGE_SIZE,
+  MAX_VECTOR_CONTENT_CHARS: () => MAX_VECTOR_CONTENT_CHARS,
+  MIN_PAGE_SIZE: () => MIN_PAGE_SIZE,
+  READ_CHUNK_SIZE: () => READ_CHUNK_SIZE,
+  READ_TIMEOUT_MS: () => READ_TIMEOUT_MS,
+  SQLITE_BUSY_TIMEOUT_MS: () => SQLITE_BUSY_TIMEOUT_MS,
+  VISION_MODELS: () => VISION_MODELS,
+  WRAP_WIDTH_KNOWN: () => WRAP_WIDTH_KNOWN
+});
+var network, identity, services, web, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, MIN_PAGE_SIZE, DETECTION_SAMPLE_CAP, MAX_FILE_SIZE, READ_TIMEOUT_MS, READ_CHUNK_SIZE, KNOWN_TYPE_SIZE_LIMIT, BINARY_CHECK_SAMPLE_SIZE, CONTENT_DETECTION_SAMPLE_SIZE, MAX_VECTOR_CONTENT_CHARS, DEFAULT_MAX_PROBLEM_BYTES, WRAP_WIDTH_KNOWN, INDEXEDDB_DEFAULT_DB_NAME, INDEXEDDB_DEFAULT_DB_VERSION, SQLITE_BUSY_TIMEOUT_MS, DEFAULT_IDENTITY_PROVIDER, DEFAULT_IDENTITY_SPACE_PATH, DEFAULT_EXECUTION_LOG_PATH, DEFAULT_API_PORT, DEFAULT_PYTHON_API_PORT, DEFAULT_JS_API_PORT, ENV_API_PORT, DEFAULT_WS_PORT, DEFAULT_WS_HOST, DEFAULT_SERVER_HOST, CORS_ORIGINS, ENV_WS_PORT, getEnvUrl, API_KEY_HEADER_NAME, DEFAULT_OLLAMA_BASE_URL, DEFAULT_OTLP_ENDPOINT, DEFAULT_VLLM_BASE_URL, DEFAULT_LMSTUDIO_BASE_URL, DEFAULT_SQLJS_WASM_URL, EMBEDDING_MODELS, DEFAULT_EMBEDDING_MODEL, VISION_MODELS, DEFAULT_VISION_MODEL, DEFAULT_SANDBOX_TIMEOUT_MS, DEFAULT_CLM_TIMEOUT_MS, DEFAULT_VM_EXECUTION_TIMEOUT_MS, LLM_DEFAULT_TIMEOUT_SECS, LLM_DEFAULT_RETRY_COUNT, LLM_DEFAULT_RETRY_DELAY_SECS, DEFAULT_WS_RECONNECT_MS, DEFAULT_MAX_REDUCTION_STEPS, DEFAULT_MAX_ETA_STEPS, DEFAULT_MAX_INTROSPECTION_DEPTH;
 var init_constants = __esm({
   "src/config/constants.ts"() {
     "use strict";
@@ -537,25 +588,33 @@ var init_constants = __esm({
     services = app_config_default.services ?? {};
     web = app_config_default.web ?? {};
     DEFAULT_PAGE_SIZE = 10;
+    MAX_PAGE_SIZE = 1e3;
+    MIN_PAGE_SIZE = 1;
+    DETECTION_SAMPLE_CAP = 8192;
     MAX_FILE_SIZE = typeof process !== "undefined" && process.env.MCARD_MAX_SIZE_BYTES ? parseInt(process.env.MCARD_MAX_SIZE_BYTES, 10) : 150 * 1024 * 1024;
     READ_TIMEOUT_MS = 5e3;
+    READ_CHUNK_SIZE = 8192;
     KNOWN_TYPE_SIZE_LIMIT = 1024 * 1024;
     BINARY_CHECK_SAMPLE_SIZE = 32 * 1024;
     CONTENT_DETECTION_SAMPLE_SIZE = 1024 * 1024;
+    MAX_VECTOR_CONTENT_CHARS = 1e4;
     DEFAULT_MAX_PROBLEM_BYTES = 2 * 1024 * 1024;
+    WRAP_WIDTH_KNOWN = 1e3;
     INDEXEDDB_DEFAULT_DB_NAME = "mcard-db";
     INDEXEDDB_DEFAULT_DB_VERSION = 1;
     SQLITE_BUSY_TIMEOUT_MS = 5e3;
     DEFAULT_IDENTITY_PROVIDER = String(identity.provider ?? "sqlite");
-    DEFAULT_IDENTITY_SPACE_PATH = String(identity.space_path ?? "./data/IDENTITY_SPACE.db");
+    DEFAULT_IDENTITY_SPACE_PATH = String(identity.space_path ?? "./data/agent_identities.db");
+    DEFAULT_EXECUTION_LOG_PATH = String(app_config_default.storage?.default_execution_log_path ?? "./data/execution_log.db");
     DEFAULT_API_PORT = Number(network.default_api_port ?? 5320);
     DEFAULT_PYTHON_API_PORT = Number(network.default_python_api_port ?? 28302);
     DEFAULT_JS_API_PORT = Number(network.default_js_api_port ?? 28303);
-    DEFAULT_VCARD_DB_PATH = String(app_config_default.storage?.default_vcard_db_path ?? "./data/vcard.db");
+    ENV_API_PORT = "MCARD_API_PORT";
     DEFAULT_WS_PORT = Number(network.default_ws_port ?? 5321);
     DEFAULT_WS_HOST = String(network.default_ws_host ?? "127.0.0.1");
     DEFAULT_SERVER_HOST = String(network.default_server_host ?? "0.0.0.0");
     CORS_ORIGINS = Array.isArray(network.cors_origins) ? network.cors_origins : [];
+    ENV_WS_PORT = "MCARD_WS_PORT";
     getEnvUrl = (key, fallback) => {
       try {
         if (typeof process !== "undefined" && process.env && process.env[key]) {
@@ -583,12 +642,66 @@ var init_constants = __esm({
       String(services.default_lmstudio_base_url ?? "http://localhost:1234")
     );
     DEFAULT_SQLJS_WASM_URL = "https://sql.js.org/dist/";
+    EMBEDDING_MODELS = {
+      "nomic-embed-text": {
+        dimensions: 768,
+        provider: "ollama",
+        max_tokens: 8192,
+        description: "High quality, general purpose embeddings"
+      },
+      "bge-m3": {
+        dimensions: 1024,
+        provider: "ollama",
+        max_tokens: 8192,
+        description: "Multi-lingual, multi-granularity embeddings"
+      },
+      "mxbai-embed-large": {
+        dimensions: 1024,
+        provider: "ollama",
+        max_tokens: 512,
+        description: "High quality embeddings for retrieval"
+      },
+      "all-minilm": {
+        dimensions: 384,
+        provider: "ollama",
+        max_tokens: 256,
+        description: "Fast, lightweight embeddings"
+      }
+    };
+    DEFAULT_EMBEDDING_MODEL = "nomic-embed-text";
+    VISION_MODELS = {
+      "moondream": {
+        size: "1.7GB",
+        description: "Moondream - Tiny, high-performance vision language model",
+        capabilities: ["image_description", "visual_qa"]
+      },
+      "llama3.2-vision": {
+        size: "7.9GB",
+        description: "Llama 3.2 Vision - 11B multimodal model with strong OCR",
+        capabilities: ["image_description", "ocr", "visual_qa"]
+      },
+      "llava": {
+        size: "4.7GB",
+        description: "LLaVA - Large Language and Vision Assistant",
+        capabilities: ["image_description", "visual_qa"]
+      },
+      "minicpm-v": {
+        size: "5.6GB",
+        description: "MiniCPM-V - Efficient vision-language model",
+        capabilities: ["image_description", "ocr", "multi_image"]
+      }
+    };
+    DEFAULT_VISION_MODEL = "moondream";
     DEFAULT_SANDBOX_TIMEOUT_MS = 5e3;
     DEFAULT_CLM_TIMEOUT_MS = 5e3;
     DEFAULT_VM_EXECUTION_TIMEOUT_MS = 5e3;
     LLM_DEFAULT_TIMEOUT_SECS = 120;
     LLM_DEFAULT_RETRY_COUNT = 3;
     LLM_DEFAULT_RETRY_DELAY_SECS = 1;
+    DEFAULT_WS_RECONNECT_MS = 3e3;
+    DEFAULT_MAX_REDUCTION_STEPS = 1e3;
+    DEFAULT_MAX_ETA_STEPS = 100;
+    DEFAULT_MAX_INTROSPECTION_DEPTH = 100;
   }
 });
 
@@ -2100,6 +2213,87 @@ var init_SqliteNodeEngine2 = __esm({
   }
 });
 
+// src/storage/EngineRegistry.ts
+var EngineRegistry_exports = {};
+__export(EngineRegistry_exports, {
+  ENGINE_INFO: () => ENGINE_INFO,
+  EngineType: () => EngineType,
+  createEngine: () => createEngine,
+  getAvailableEngines: () => getAvailableEngines,
+  getEngineInfo: () => getEngineInfo,
+  getEnginesByEnvironment: () => getEnginesByEnvironment
+});
+async function createEngine(type, options = {}) {
+  switch (type) {
+    case "indexeddb" /* INDEXED_DB */: {
+      const { IndexedDBEngine: IndexedDBEngine2 } = await Promise.resolve().then(() => (init_IndexedDBEngine2(), IndexedDBEngine_exports));
+      const engine = new IndexedDBEngine2();
+      await engine.init();
+      return engine;
+    }
+    case "sqlite-node" /* SQLITE_NODE */: {
+      const { SqliteNodeEngine: SqliteNodeEngine2 } = await Promise.resolve().then(() => (init_SqliteNodeEngine2(), SqliteNodeEngine_exports));
+      return SqliteNodeEngine2.create(options.dbPath || ":memory:");
+    }
+    case "sqlite-wasm" /* SQLITE_WASM */: {
+      const { SqliteWasmEngine: SqliteWasmEngine2 } = await Promise.resolve().then(() => (init_SqliteWasmEngine2(), SqliteWasmEngine_exports));
+      const engine = new SqliteWasmEngine2();
+      await engine.init(options.wasmUrl, options.existingData);
+      return engine;
+    }
+    default: {
+      const validTypes = Object.values(EngineType).join(", ");
+      throw new Error(
+        `Unknown engine type: "${type}". Valid types: ${validTypes}`
+      );
+    }
+  }
+}
+function getAvailableEngines() {
+  return Object.values(EngineType);
+}
+function getEngineInfo(type) {
+  return ENGINE_INFO[type];
+}
+function getEnginesByEnvironment(env) {
+  return Object.values(ENGINE_INFO).filter((info) => info.environment === env);
+}
+var EngineType, ENGINE_INFO;
+var init_EngineRegistry = __esm({
+  "src/storage/EngineRegistry.ts"() {
+    "use strict";
+    EngineType = /* @__PURE__ */ ((EngineType2) => {
+      EngineType2["INDEXED_DB"] = "indexeddb";
+      EngineType2["SQLITE_NODE"] = "sqlite-node";
+      EngineType2["SQLITE_WASM"] = "sqlite-wasm";
+      return EngineType2;
+    })(EngineType || {});
+    ENGINE_INFO = {
+      ["indexeddb" /* INDEXED_DB */]: {
+        type: "indexeddb" /* INDEXED_DB */,
+        displayName: "IndexedDB",
+        environment: "browser",
+        package: null,
+        description: "Browser-native IndexedDB key-value store"
+      },
+      ["sqlite-node" /* SQLITE_NODE */]: {
+        type: "sqlite-node" /* SQLITE_NODE */,
+        displayName: "SQLite (Node.js)",
+        environment: "node",
+        package: "better-sqlite3",
+        description: "SQLite via native better-sqlite3 bindings"
+      },
+      ["sqlite-wasm" /* SQLITE_WASM */]: {
+        type: "sqlite-wasm" /* SQLITE_WASM */,
+        displayName: "SQLite (WASM)",
+        environment: "browser",
+        package: "sql.js",
+        description: "SQLite via sql.js WebAssembly"
+      }
+    };
+  }
+});
+
 // src/monads/Either.ts
 var Either;
 var init_Either = __esm({
@@ -2439,7 +2633,7 @@ async function processAndStoreFile(filePath, collection, options = {}) {
       }
       const extension = path2.extname(filePath).toLowerCase();
       const isKnownType = ContentTypeInterpreter.isKnownLongLineExtension(extension);
-      const wrapWidth = isKnownType ? WRAP_WIDTH_KNOWN : WRAP_WIDTH_DEFAULT;
+      const wrapWidth = isKnownType ? WRAP_WIDTH_KNOWN2 : WRAP_WIDTH_DEFAULT;
       Logger.warn(`Problematic file detected, processing as safe text: ${filePath}`);
       try {
         const streamed = await streamReadNormalizedText(filePath, {
@@ -2583,7 +2777,7 @@ async function loadFileToCollection(targetPath, collection, options = {}) {
   }
   return { metrics, results };
 }
-var fs2, path2, DEFAULT_MAX_PROBLEM_BYTES2, WRAP_WIDTH_KNOWN, WRAP_WIDTH_DEFAULT, Logger;
+var fs2, path2, DEFAULT_MAX_PROBLEM_BYTES2, WRAP_WIDTH_KNOWN2, WRAP_WIDTH_DEFAULT, Logger;
 var init_Loader = __esm({
   "src/Loader.ts"() {
     "use strict";
@@ -2593,7 +2787,7 @@ var init_Loader = __esm({
     init_FileIO();
     init_ContentTypeInterpreter();
     DEFAULT_MAX_PROBLEM_BYTES2 = 2 * 1024 * 1024;
-    WRAP_WIDTH_KNOWN = 1e3;
+    WRAP_WIDTH_KNOWN2 = 1e3;
     WRAP_WIDTH_DEFAULT = 80;
     Logger = {
       info: (...args) => console.log("[Loader]", ...args),
@@ -3354,7 +3548,8 @@ var init_LLMRuntime = __esm({
         }
         const concrete = config;
         const llmConfig = LLMConfig.from_concrete(concrete, configCtx);
-        if (llmConfig.provider !== this.provider_name) {
+        if (llmConfig.provider !== this.provider_name || llmConfig.endpoint_url) {
+          this.provider_name = llmConfig.provider;
           this._provider = get_provider(llmConfig.provider, llmConfig.endpoint_url, llmConfig.timeout);
         }
         let prompt = "";
@@ -7591,74 +7786,7 @@ init_constants2();
 init_IndexedDBEngine2();
 init_SqliteWasmEngine2();
 init_SqliteNodeEngine2();
-
-// src/storage/EngineRegistry.ts
-var EngineType = /* @__PURE__ */ ((EngineType2) => {
-  EngineType2["INDEXED_DB"] = "indexeddb";
-  EngineType2["SQLITE_NODE"] = "sqlite-node";
-  EngineType2["SQLITE_WASM"] = "sqlite-wasm";
-  return EngineType2;
-})(EngineType || {});
-var ENGINE_INFO = {
-  ["indexeddb" /* INDEXED_DB */]: {
-    type: "indexeddb" /* INDEXED_DB */,
-    displayName: "IndexedDB",
-    environment: "browser",
-    package: null,
-    description: "Browser-native IndexedDB key-value store"
-  },
-  ["sqlite-node" /* SQLITE_NODE */]: {
-    type: "sqlite-node" /* SQLITE_NODE */,
-    displayName: "SQLite (Node.js)",
-    environment: "node",
-    package: "better-sqlite3",
-    description: "SQLite via native better-sqlite3 bindings"
-  },
-  ["sqlite-wasm" /* SQLITE_WASM */]: {
-    type: "sqlite-wasm" /* SQLITE_WASM */,
-    displayName: "SQLite (WASM)",
-    environment: "browser",
-    package: "sql.js",
-    description: "SQLite via sql.js WebAssembly"
-  }
-};
-async function createEngine(type, options = {}) {
-  switch (type) {
-    case "indexeddb" /* INDEXED_DB */: {
-      const { IndexedDBEngine: IndexedDBEngine2 } = await Promise.resolve().then(() => (init_IndexedDBEngine2(), IndexedDBEngine_exports));
-      const engine = new IndexedDBEngine2();
-      await engine.init();
-      return engine;
-    }
-    case "sqlite-node" /* SQLITE_NODE */: {
-      const { SqliteNodeEngine: SqliteNodeEngine2 } = await Promise.resolve().then(() => (init_SqliteNodeEngine2(), SqliteNodeEngine_exports));
-      return SqliteNodeEngine2.create(options.dbPath || ":memory:");
-    }
-    case "sqlite-wasm" /* SQLITE_WASM */: {
-      const { SqliteWasmEngine: SqliteWasmEngine2 } = await Promise.resolve().then(() => (init_SqliteWasmEngine2(), SqliteWasmEngine_exports));
-      const engine = new SqliteWasmEngine2();
-      await engine.init(options.wasmUrl, options.existingData);
-      return engine;
-    }
-    default: {
-      const validTypes = Object.values(EngineType).join(", ");
-      throw new Error(
-        `Unknown engine type: "${type}". Valid types: ${validTypes}`
-      );
-    }
-  }
-}
-function getAvailableEngines() {
-  return Object.values(EngineType);
-}
-function getEngineInfo(type) {
-  return ENGINE_INFO[type];
-}
-function getEnginesByEnvironment(env) {
-  return Object.values(ENGINE_INFO).filter((info) => info.environment === env);
-}
-
-// src/index.ts
+init_EngineRegistry();
 init_HashValidator();
 init_Maybe();
 init_Either();
@@ -9740,6 +9868,9 @@ var VCardSimulation = class {
   }
 };
 
+// src/ptr/node/PTREngine.ts
+init_CardCollection();
+
 // src/ptr/node/clm/runner.ts
 var path14 = __toESM(require("path"), 1);
 var yaml2 = __toESM(require("yaml"), 1);
@@ -10915,7 +11046,8 @@ var CLMRunner = class _CLMRunner {
     const examples = clm.examples || [];
     const results = [];
     for (const example of examples) {
-      const result = await this.executeCLM(clm, chapterDir, example.input);
+      const executionInput = example.assumption ?? example.input;
+      const result = await this.executeCLM(clm, chapterDir, executionInput);
       results.push({ name: example.name, result });
     }
     return results;
@@ -10927,7 +11059,7 @@ var CLMRunner = class _CLMRunner {
     let passed = 0;
     const summaryResults = results.map((res, index) => {
       const example = clm.examples?.[index];
-      const expected = example?.expected_output;
+      const expected = example?.confirmation ?? example?.expected_output;
       const resultContains = example?.result_contains;
       let match = false;
       if (resultContains !== void 0) {
@@ -10948,7 +11080,7 @@ var CLMRunner = class _CLMRunner {
       return {
         case: index + 1,
         name: res.name,
-        input: example?.input,
+        input: example?.assumption ?? example?.input,
         result: res.result.result,
         error: res.result.error,
         expected: resultContains !== void 0 ? `contains: ${resultContains}` : expected,
@@ -11149,21 +11281,41 @@ var CLMRunner = class _CLMRunner {
 };
 
 // src/ptr/node/PTREngine.ts
-var PTREngine = class {
+var PTREngine = class _PTREngine {
   collection;
   executionLog;
+  identitySpace;
   runner;
   /**
-   * Initialize PTREngine.
+   * Async Factory for PTREngine to support automatic Tri-Database Isolation.
+   */
+  static async create(storageCollection, executionLogCollection, identitySpaceCollection, options) {
+    if (!executionLogCollection) {
+      const { createEngine: createEngine2, EngineType: EngineType2 } = await Promise.resolve().then(() => (init_EngineRegistry(), EngineRegistry_exports));
+      const { DEFAULT_EXECUTION_LOG_PATH: DEFAULT_EXECUTION_LOG_PATH2 } = await Promise.resolve().then(() => (init_constants(), constants_exports));
+      const engine = await createEngine2(EngineType2.SQLITE_NODE, { dbPath: DEFAULT_EXECUTION_LOG_PATH2 });
+      executionLogCollection = new CardCollection(engine);
+    }
+    if (!identitySpaceCollection) {
+      const { createEngine: createEngine2, EngineType: EngineType2 } = await Promise.resolve().then(() => (init_EngineRegistry(), EngineRegistry_exports));
+      const { DEFAULT_IDENTITY_SPACE_PATH: DEFAULT_IDENTITY_SPACE_PATH2 } = await Promise.resolve().then(() => (init_constants(), constants_exports));
+      const engine = await createEngine2(EngineType2.SQLITE_NODE, { dbPath: DEFAULT_IDENTITY_SPACE_PATH2 });
+      identitySpaceCollection = new CardCollection(engine);
+    }
+    return new _PTREngine(storageCollection, executionLogCollection, identitySpaceCollection, options);
+  }
+  /**
+   * Initialize PTREngine. (Consider using PTREngine.create() for automatic database isolation)
    *
    * @param storageCollection - MCard collection for long-term knowledge (mcard_collection.db)
    * @param executionLogCollection - MCard collection for execution traces (execution_log.db).
-   *   If not provided, traces are written to storageCollection.
+   * @param identitySpaceCollection - MCard collection for isolated Zero-Trust checks.
    * @param options - Additional configuration
    */
-  constructor(storageCollection, executionLogCollection, options) {
+  constructor(storageCollection, executionLogCollection, identitySpaceCollection, options) {
     this.collection = storageCollection;
     this.executionLog = executionLogCollection || this.collection;
+    this.identitySpace = identitySpaceCollection || this.collection;
     this.runner = new CLMRunner(
       options?.basePath || process.cwd(),
       options?.timeout,
@@ -11188,11 +11340,18 @@ var PTREngine = class {
    * @throws PreconditionViolation if preCheck returns false
    * @throws PostconditionViolation if postCheck returns false
    */
-  async runWithSandwich(pcardHash, inputHash, preCheck, postCheck) {
+  async runWithSandwich(pcardHash, inputHash, preCheck, postCheck, context = {}) {
     const pcard = await this.collection.get(pcardHash);
     if (!pcard) throw new Error(`PCard not found: ${pcardHash}`);
     const inputMCard = await this.collection.get(inputHash);
     if (!inputMCard) throw new Error(`Input MCard not found: ${inputHash}`);
+    const callerIdentity = context.caller_identity_hash;
+    if (callerIdentity) {
+      const identityRecord = await this.identitySpace.get(callerIdentity);
+      if (!identityRecord) {
+        throw new Error(`Zero-Trust AuthZ failed: Identity ${callerIdentity} invalid in agent_identities.db.`);
+      }
+    }
     if (preCheck && !preCheck(inputMCard)) {
       throw new PreconditionViolation(pcardHash, inputHash);
     }
@@ -11231,10 +11390,17 @@ var PTREngine = class {
    * @param context - Execution context (inputs)
    * @returns Execution report with VCard Sandwich proof hashes
    */
-  async runFile(filePath, context) {
+  async runFile(filePath, context = {}) {
     const loader = new CLMLoader(path15.dirname(filePath));
     const clm = loader.load(filePath);
     const chapterDir = path15.dirname(path15.resolve(filePath));
+    const callerIdentity = context.caller_identity_hash;
+    if (callerIdentity) {
+      const identityRecord = await this.identitySpace.get(callerIdentity);
+      if (!identityRecord) {
+        throw new Error(`Zero-Trust AuthZ failed: Identity ${callerIdentity} invalid in agent_identities.db.`);
+      }
+    }
     const clmContent = yaml3.stringify(clm);
     const pcard = await PCard.create(clmContent);
     if (this.collection) {

package/dist/index.d.cts

@@ -1544,16 +1544,24 @@ type PostCheck = (output: unknown) => boolean;
 declare class PTREngine {
     private collection;
     private executionLog;
+    private identitySpace;
     private runner;
     /**
-     * Initialize PTREngine.
+     * Async Factory for PTREngine to support automatic Tri-Database Isolation.
+     */
+    static create(storageCollection?: CardCollection, executionLogCollection?: CardCollection, identitySpaceCollection?: CardCollection, options?: {
+        basePath?: string;
+        timeout?: number;
+    }): Promise<PTREngine>;
+    /**
+     * Initialize PTREngine. (Consider using PTREngine.create() for automatic database isolation)
      *
      * @param storageCollection - MCard collection for long-term knowledge (mcard_collection.db)
      * @param executionLogCollection - MCard collection for execution traces (execution_log.db).
-     *   If not provided, traces are written to storageCollection.
+     * @param identitySpaceCollection - MCard collection for isolated Zero-Trust checks.
      * @param options - Additional configuration
      */
-    constructor(storageCollection?: CardCollection, executionLogCollection?: CardCollection, options?: {
+    constructor(storageCollection?: CardCollection, executionLogCollection?: CardCollection, identitySpaceCollection?: CardCollection, options?: {
         basePath?: string;
         timeout?: number;
     });
@@ -1571,7 +1579,7 @@ declare class PTREngine {
      * @throws PreconditionViolation if preCheck returns false
      * @throws PostconditionViolation if postCheck returns false
      */
-    runWithSandwich(pcardHash: string, inputHash: string, preCheck?: PreCheck, postCheck?: PostCheck): Promise<[unknown, VCard]>;
+    runWithSandwich(pcardHash: string, inputHash: string, preCheck?: PreCheck, postCheck?: PostCheck, context?: Record<string, any>): Promise<[unknown, VCard]>;
     /**
      * Execute a CLM specification from a YAML file.
      *
@@ -1582,7 +1590,7 @@ declare class PTREngine {
      * @param context - Execution context (inputs)
      * @returns Execution report with VCard Sandwich proof hashes
      */
-    runFile(filePath: string, context?: Record<string, unknown>): Promise<Record<string, unknown>>;
+    runFile(filePath: string, context?: Record<string, any>): Promise<Record<string, unknown>>;
     /**
      * Arrow `arr` — lift a pure function into a PCard.
      *
@@ -1686,7 +1694,9 @@ interface RuntimeConfig {
 interface CLMExample {
     name: string;
     input?: unknown;
+    assumption?: unknown;
     expected_output?: unknown;
+    confirmation?: unknown;
     result_contains?: string;
     [key: string]: unknown;
 }

package/dist/index.d.ts

@@ -1544,16 +1544,24 @@ type PostCheck = (output: unknown) => boolean;
 declare class PTREngine {
     private collection;
     private executionLog;
+    private identitySpace;
     private runner;
     /**
-     * Initialize PTREngine.
+     * Async Factory for PTREngine to support automatic Tri-Database Isolation.
+     */
+    static create(storageCollection?: CardCollection, executionLogCollection?: CardCollection, identitySpaceCollection?: CardCollection, options?: {
+        basePath?: string;
+        timeout?: number;
+    }): Promise<PTREngine>;
+    /**
+     * Initialize PTREngine. (Consider using PTREngine.create() for automatic database isolation)
      *
      * @param storageCollection - MCard collection for long-term knowledge (mcard_collection.db)
      * @param executionLogCollection - MCard collection for execution traces (execution_log.db).
-     *   If not provided, traces are written to storageCollection.
+     * @param identitySpaceCollection - MCard collection for isolated Zero-Trust checks.
      * @param options - Additional configuration
      */
-    constructor(storageCollection?: CardCollection, executionLogCollection?: CardCollection, options?: {
+    constructor(storageCollection?: CardCollection, executionLogCollection?: CardCollection, identitySpaceCollection?: CardCollection, options?: {
         basePath?: string;
         timeout?: number;
     });
@@ -1571,7 +1579,7 @@ declare class PTREngine {
      * @throws PreconditionViolation if preCheck returns false
      * @throws PostconditionViolation if postCheck returns false
      */
-    runWithSandwich(pcardHash: string, inputHash: string, preCheck?: PreCheck, postCheck?: PostCheck): Promise<[unknown, VCard]>;
+    runWithSandwich(pcardHash: string, inputHash: string, preCheck?: PreCheck, postCheck?: PostCheck, context?: Record<string, any>): Promise<[unknown, VCard]>;
     /**
      * Execute a CLM specification from a YAML file.
      *
@@ -1582,7 +1590,7 @@ declare class PTREngine {
      * @param context - Execution context (inputs)
      * @returns Execution report with VCard Sandwich proof hashes
      */
-    runFile(filePath: string, context?: Record<string, unknown>): Promise<Record<string, unknown>>;
+    runFile(filePath: string, context?: Record<string, any>): Promise<Record<string, unknown>>;
     /**
      * Arrow `arr` — lift a pure function into a PCard.
      *
@@ -1686,7 +1694,9 @@ interface RuntimeConfig {
 interface CLMExample {
     name: string;
     input?: unknown;
+    assumption?: unknown;
     expected_output?: unknown;
+    confirmation?: unknown;
     result_contains?: string;
     [key: string]: unknown;
 }