octoflow-core 1.0.0

package/dist/runtime/bridge/cache-telemetry.js

@@ -0,0 +1,40 @@
+function backendSupportsPromptCaching(backend) {
+  return backend === "anthropic-api" || backend === "gemini-api" || backend === "openai-api" || backend.startsWith("vercel-ai:");
+}
+async function emitCacheEvent(emit, ctx) {
+  if (!ctx.cacheEnabled || !ctx.usage) return;
+  const { cachedInputTokens = 0, cacheWriteTokens = 0 } = ctx.usage;
+  const hasCacheActivity = cachedInputTokens > 0 || cacheWriteTokens > 0;
+  const cache = ctx.usage.cache;
+  if (hasCacheActivity) {
+    await emit("bridge:cache:hit", {
+      backend: ctx.backend,
+      taskId: ctx.taskId,
+      contextId: ctx.contextId,
+      cachedInputTokens,
+      cacheWriteTokens,
+      partsCached: ctx.partsCached,
+      ...cache ? {
+        totalInputTokens: cache.totalInputTokens,
+        uncachedInputTokens: cache.uncachedInputTokens,
+        cacheHitRatio: cache.cacheHitRatio,
+        source: cache.source,
+        ...cache.cacheWriteTokensByTtl ? { cacheWriteTokensByTtl: cache.cacheWriteTokensByTtl } : {},
+        ...cache.promptCacheKey ? { promptCacheKey: cache.promptCacheKey } : {}
+      } : {}
+    });
+  } else {
+    const supportsCaching = ctx.backendSupportsCaching ?? backendSupportsPromptCaching(ctx.backend);
+    const reason = supportsCaching ? "first-call" : "backend-unsupported";
+    await emit("bridge:cache:miss", {
+      backend: ctx.backend,
+      taskId: ctx.taskId,
+      contextId: ctx.contextId,
+      reason
+    });
+  }
+}
+export {
+  emitCacheEvent
+};
+//# sourceMappingURL=cache-telemetry.js.map

package/dist/runtime/bridge/cache-telemetry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/cache-telemetry.ts"],
+  "sourcesContent": ["import type { UsageStats } from '../../domain/contracts/messages.js';\nimport type { BackendName } from '../../domain/core-client.js';\nimport type { BridgeEventMap } from './events.js';\n\nfunction backendSupportsPromptCaching(backend: BackendName): boolean {\n  return (\n    backend === 'anthropic-api' ||\n    backend === 'gemini-api' ||\n    backend === 'openai-api' ||\n    backend.startsWith('vercel-ai:')\n  );\n}\n\ninterface CacheEventContext {\n  backend: BackendName;\n  taskId: string;\n  contextId: string;\n  usage: UsageStats | undefined;\n  cacheEnabled: boolean;\n  partsCached: number;\n  backendSupportsCaching?: boolean;\n}\n\ntype Emitter = <K extends keyof BridgeEventMap>(\n  event: K,\n  data: BridgeEventMap[K]\n) => Promise<void>;\n\nexport async function emitCacheEvent(\n  emit: Emitter,\n  ctx: CacheEventContext\n): Promise<void> {\n  if (!ctx.cacheEnabled || !ctx.usage) return;\n\n  const { cachedInputTokens = 0, cacheWriteTokens = 0 } = ctx.usage;\n  const hasCacheActivity = cachedInputTokens > 0 || cacheWriteTokens > 0;\n  const cache = ctx.usage.cache;\n\n  if (hasCacheActivity) {\n    await emit('bridge:cache:hit', {\n      backend: ctx.backend,\n      taskId: ctx.taskId,\n      contextId: ctx.contextId,\n      cachedInputTokens,\n      cacheWriteTokens,\n      partsCached: ctx.partsCached,\n      ...(cache\n        ? {\n            totalInputTokens: cache.totalInputTokens,\n            uncachedInputTokens: cache.uncachedInputTokens,\n            cacheHitRatio: cache.cacheHitRatio,\n            source: cache.source,\n            ...(cache.cacheWriteTokensByTtl\n              ? { cacheWriteTokensByTtl: cache.cacheWriteTokensByTtl }\n              : {}),\n            ...(cache.promptCacheKey\n              ? { promptCacheKey: cache.promptCacheKey }\n              : {}),\n          }\n        : {}),\n    });\n  } else {\n    const supportsCaching =\n      ctx.backendSupportsCaching ?? backendSupportsPromptCaching(ctx.backend);\n    const reason: BridgeEventMap['bridge:cache:miss']['reason'] =\n      supportsCaching ? 'first-call' : 'backend-unsupported';\n    await emit('bridge:cache:miss', {\n      backend: ctx.backend,\n      taskId: ctx.taskId,\n      contextId: ctx.contextId,\n      reason,\n    });\n  }\n}\n"],
+  "mappings": "AAIA,SAAS,6BAA6B,SAA+B;AACnE,SACE,YAAY,mBACZ,YAAY,gBACZ,YAAY,gBACZ,QAAQ,WAAW,YAAY;AAEnC;AAiBA,eAAsB,eACpB,MACA,KACe;AACf,MAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,MAAO;AAErC,QAAM,EAAE,oBAAoB,GAAG,mBAAmB,EAAE,IAAI,IAAI;AAC5D,QAAM,mBAAmB,oBAAoB,KAAK,mBAAmB;AACrE,QAAM,QAAQ,IAAI,MAAM;AAExB,MAAI,kBAAkB;AACpB,UAAM,KAAK,oBAAoB;AAAA,MAC7B,SAAS,IAAI;AAAA,MACb,QAAQ,IAAI;AAAA,MACZ,WAAW,IAAI;AAAA,MACf;AAAA,MACA;AAAA,MACA,aAAa,IAAI;AAAA,MACjB,GAAI,QACA;AAAA,QACE,kBAAkB,MAAM;AAAA,QACxB,qBAAqB,MAAM;AAAA,QAC3B,eAAe,MAAM;AAAA,QACrB,QAAQ,MAAM;AAAA,QACd,GAAI,MAAM,wBACN,EAAE,uBAAuB,MAAM,sBAAsB,IACrD,CAAC;AAAA,QACL,GAAI,MAAM,iBACN,EAAE,gBAAgB,MAAM,eAAe,IACvC,CAAC;AAAA,MACP,IACA,CAAC;AAAA,IACP,CAAC;AAAA,EACH,OAAO;AACL,UAAM,kBACJ,IAAI,0BAA0B,6BAA6B,IAAI,OAAO;AACxE,UAAM,SACJ,kBAAkB,eAAe;AACnC,UAAM,KAAK,qBAAqB;AAAA,MAC9B,SAAS,IAAI;AAAA,MACb,QAAQ,IAAI;AAAA,MACZ,WAAW,IAAI;AAAA,MACf;AAAA,IACF,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/runtime/bridge/capability-action-call.d.ts

@@ -0,0 +1,33 @@
+import type { ActionDefinition, ActionPolicy, ActionResult } from '../../actions/types.js';
+import type { CapabilityMiddleware, CapabilityToolCall } from '../../capabilities/types.js';
+import type { BridgeSendMessageParams } from '../../domain/bridge-api.js';
+import type { BackendName } from '../../domain/core-client.js';
+import type { BridgePolicy, PolicySubject } from '../../policy/index.js';
+import type { BridgeEventMap } from './events.js';
+export interface ExecuteActionCallsOptions {
+    actionPolicy?: ActionPolicy;
+    actions: ActionDefinition[];
+    backend: BackendName;
+    bridge: unknown;
+    calls: CapabilityToolCall[];
+    contextId: string;
+    emitEvent?: <K extends keyof BridgeEventMap>(event: K, data: BridgeEventMap[K]) => Promise<void>;
+    middleware?: CapabilityMiddleware[];
+    params: BridgeSendMessageParams;
+    parallelActions?: boolean;
+    policy?: BridgePolicy;
+    policySubject?: PolicySubject;
+    requestApproval?: (call: CapabilityToolCall, action: ActionDefinition) => Promise<boolean>;
+    taskId: string;
+    tenant?: string;
+    /** When true, action outputs are scanned for secrets before reaching LLM history. */
+    redactActionOutput?: boolean;
+}
+export interface ExecutedActionOutput {
+    actionName: string;
+    content: string;
+    result: ActionResult;
+}
+export declare function stringifyActionResult(result: ActionResult, redact?: boolean): string;
+export declare function executeSingleActionCall(options: ExecuteActionCallsOptions, call: CapabilityToolCall): Promise<ExecutedActionOutput>;
+//# sourceMappingURL=capability-action-call.d.ts.map

package/dist/runtime/bridge/capability-action-call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-action-call.d.ts","sourceRoot":"","sources":["../../../src/runtime/bridge/capability-action-call.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACb,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EACV,oBAAoB,EAEpB,kBAAkB,EACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAMzE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,WAAW,yBAAyB;IACxC,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,CAAC,CAAC,SAAS,MAAM,cAAc,EACzC,KAAK,EAAE,CAAC,EACR,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,KACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,UAAU,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACpC,MAAM,EAAE,uBAAuB,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,eAAe,CAAC,EAAE,CAChB,IAAI,EAAE,kBAAkB,EACxB,MAAM,EAAE,gBAAgB,KACrB,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;CACtB;AA+BD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,YAAY,EACpB,MAAM,UAAQ,GACb,MAAM,CAUR;AAiDD,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,yBAAyB,EAClC,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,oBAAoB,CAAC,CAuM/B"}

package/dist/runtime/bridge/capability-action-call.js

@@ -0,0 +1,246 @@
+import { executeAction } from "../../actions/executor.js";
+import { buildCapabilityState } from "../../capabilities/context-composer.js";
+import {
+  assertPolicyAllowed,
+  resolvePolicySubject
+} from "../../policy/index.js";
+import { redactSecrets } from "../../utils/redact-secrets.js";
+import { emitPolicyDecision } from "./policy-events.js";
+function matchesRule(action, rule) {
+  const matchesName = rule.match.name == null ? true : typeof rule.match.name === "string" ? rule.match.name === action.name : rule.match.name.test(action.name);
+  const matchesTags = rule.match.tags == null ? true : rule.match.tags.every((tag) => action.tags?.includes(tag));
+  return matchesName && matchesTags;
+}
+function resolvePermission(action, policy) {
+  if (action.permission) return action.permission;
+  const matchingRule = policy?.rules?.find((rule) => matchesRule(action, rule));
+  if (matchingRule) return matchingRule.permission;
+  return policy?.defaultPermission ?? "allow";
+}
+function stringifyActionResult(result, redact = false) {
+  let output;
+  if (result.error) {
+    output = `Error executing action "${result.actionName}": ${result.error.message}`;
+  } else if (typeof result.output === "string") {
+    output = result.output;
+  } else {
+    output = JSON.stringify(result.output ?? null);
+  }
+  return redact ? redactSecrets(output) : output;
+}
+async function applyBeforeActionMiddleware(call, middleware, state) {
+  let current = call;
+  for (const entry of middleware) {
+    if (!current) return null;
+    if (entry.beforeAction) current = await entry.beforeAction(current, state);
+  }
+  return current;
+}
+async function applyAfterActionMiddleware(result, middleware, state) {
+  let current = result;
+  for (const entry of middleware) {
+    if (entry.afterAction) current = await entry.afterAction(current, state);
+  }
+  return current;
+}
+function rejectedOutput(actionName, errorName, message) {
+  const result = {
+    actionName,
+    output: void 0,
+    durationMs: 0,
+    error: { name: errorName, message }
+  };
+  return { actionName, content: stringifyActionResult(result), result };
+}
+function appendAdditionalContext(content, additionalContext) {
+  if (!additionalContext) return content;
+  return `${content}
+
+[Additional hook context]
+${additionalContext}`;
+}
+async function executeSingleActionCall(options, call) {
+  const {
+    actionPolicy,
+    actions,
+    backend,
+    bridge,
+    contextId,
+    emitEvent,
+    middleware = [],
+    params,
+    policy,
+    policySubject,
+    requestApproval,
+    taskId,
+    tenant,
+    redactActionOutput
+  } = options;
+  const state = buildCapabilityState(params, {
+    backend,
+    bridge,
+    contextId,
+    taskId
+  });
+  const wrappedCall = await applyBeforeActionMiddleware(
+    call,
+    middleware,
+    state
+  );
+  if (!wrappedCall) {
+    return rejectedOutput(
+      call.name,
+      "ActionRejectedError",
+      `Action "${call.name}" was rejected by capability middleware.`
+    );
+  }
+  const action = actions.find((entry) => entry.name === wrappedCall.name);
+  if (!action) {
+    return rejectedOutput(
+      wrappedCall.name,
+      "ActionNotFoundError",
+      `Action "${wrappedCall.name}" is not registered on this bridge.`
+    );
+  }
+  const permission = resolvePermission(action, actionPolicy);
+  if (permission === "deny") {
+    return rejectedOutput(
+      action.name,
+      "ActionPermissionError",
+      `Action "${action.name}" is denied by the bridge action policy.`
+    );
+  }
+  try {
+    await assertPolicyAllowed(
+      policy,
+      {
+        action: "tool.invoke",
+        subject: resolvePolicySubject(params.subject, policySubject),
+        resource: {
+          kind: "tool",
+          id: action.name,
+          name: action.name,
+          tags: action.tags,
+          tenant,
+          attributes: { executorType: action.executor.type }
+        },
+        context: { contextId, taskId, backend, requestedTenant: tenant }
+      },
+      emitPolicyDecision(emitEvent)
+    );
+  } catch (error) {
+    if (error instanceof Error) {
+      return rejectedOutput(action.name, error.name, error.message);
+    }
+    throw error;
+  }
+  const approvalRequired = permission === "ask" || action.requireApproval === true;
+  const permissionPresetActive = params.permission != null;
+  if (requestApproval && (params.onToolApproval != null || approvalRequired || permissionPresetActive)) {
+    const approved = await requestApproval?.(wrappedCall, action);
+    if (!approved) {
+      return rejectedOutput(
+        action.name,
+        "ActionApprovalError",
+        `Action "${action.name}" was not approved.`
+      );
+    }
+  }
+  await emitEvent?.("action:invoked", {
+    actionName: action.name,
+    args: wrappedCall.args,
+    taskId,
+    contextId,
+    backend
+  });
+  await emitEvent?.("agent:tool-call", {
+    actionName: action.name,
+    args: wrappedCall.args,
+    status: "started",
+    taskId,
+    contextId,
+    backend
+  });
+  const executed = await executeAction(action, wrappedCall.args, {
+    taskId,
+    contextId,
+    backend,
+    ...tenant !== void 0 ? { tenant } : {},
+    bridge
+  });
+  const result = await applyAfterActionMiddleware(executed, middleware, state);
+  if (result.error) {
+    await emitEvent?.("action:error", {
+      actionName: result.actionName,
+      error: result.error,
+      durationMs: result.durationMs,
+      taskId,
+      contextId,
+      backend
+    });
+    await emitEvent?.("agent:tool-call", {
+      actionName: result.actionName,
+      args: wrappedCall.args,
+      status: "failed",
+      error: result.error,
+      durationMs: result.durationMs,
+      taskId,
+      contextId,
+      backend
+    });
+  } else {
+    await emitEvent?.("action:result", {
+      actionName: result.actionName,
+      output: result.output,
+      durationMs: result.durationMs,
+      taskId,
+      contextId,
+      backend
+    });
+    await emitEvent?.("agent:tool-call", {
+      actionName: result.actionName,
+      args: wrappedCall.args,
+      status: "completed",
+      output: result.output,
+      durationMs: result.durationMs,
+      taskId,
+      contextId,
+      backend
+    });
+  }
+  if (action.executor.type === "mcp") {
+    const timedOut = result.error?.name === "McpCallTimeoutError";
+    await emitEvent?.("mcp:tool:invoke", {
+      server: action.executor.server,
+      tool: action.executor.tool,
+      durationMs: result.durationMs,
+      timedOut,
+      taskId,
+      contextId,
+      backend
+    });
+    await emitEvent?.("agent:mcp", {
+      server: action.executor.server,
+      tool: action.executor.tool,
+      status: result.error ? "failed" : "completed",
+      durationMs: result.durationMs,
+      timedOut,
+      taskId,
+      contextId,
+      backend
+    });
+  }
+  return {
+    actionName: action.name,
+    content: appendAdditionalContext(
+      stringifyActionResult(result, redactActionOutput),
+      wrappedCall.additionalContext
+    ),
+    result
+  };
+}
+export {
+  executeSingleActionCall,
+  stringifyActionResult
+};
+//# sourceMappingURL=capability-action-call.js.map

package/dist/runtime/bridge/capability-action-call.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/capability-action-call.ts"],
+  "sourcesContent": ["import type { BridgeActionPort } from '../../actions/bridge-action-port.js';\nimport { executeAction } from '../../actions/executor.js';\nimport type {\n  ActionDefinition,\n  ActionPolicy,\n  ActionResult,\n} from '../../actions/types.js';\nimport { buildCapabilityState } from '../../capabilities/context-composer.js';\nimport type {\n  CapabilityMiddleware,\n  CapabilityState,\n  CapabilityToolCall,\n} from '../../capabilities/types.js';\nimport type { BridgeSendMessageParams } from '../../domain/bridge-api.js';\nimport type { BackendName } from '../../domain/core-client.js';\nimport type { BridgePolicy, PolicySubject } from '../../policy/index.js';\nimport {\n  assertPolicyAllowed,\n  resolvePolicySubject,\n} from '../../policy/index.js';\nimport { redactSecrets } from '../../utils/redact-secrets.js';\nimport type { BridgeEventMap } from './events.js';\nimport { emitPolicyDecision } from './policy-events.js';\n\nexport interface ExecuteActionCallsOptions {\n  actionPolicy?: ActionPolicy;\n  actions: ActionDefinition[];\n  backend: BackendName;\n  bridge: unknown;\n  calls: CapabilityToolCall[];\n  contextId: string;\n  emitEvent?: <K extends keyof BridgeEventMap>(\n    event: K,\n    data: BridgeEventMap[K]\n  ) => Promise<void>;\n  middleware?: CapabilityMiddleware[];\n  params: BridgeSendMessageParams;\n  parallelActions?: boolean;\n  policy?: BridgePolicy;\n  policySubject?: PolicySubject;\n  requestApproval?: (\n    call: CapabilityToolCall,\n    action: ActionDefinition\n  ) => Promise<boolean>;\n  taskId: string;\n  tenant?: string;\n  /** When true, action outputs are scanned for secrets before reaching LLM history. */\n  redactActionOutput?: boolean;\n}\n\nexport interface ExecutedActionOutput {\n  actionName: string;\n  content: string;\n  result: ActionResult;\n}\n\nfunction matchesRule(\n  action: ActionDefinition,\n  rule: NonNullable<ActionPolicy['rules']>[number]\n): boolean {\n  const matchesName =\n    rule.match.name == null\n      ? true\n      : typeof rule.match.name === 'string'\n        ? rule.match.name === action.name\n        : rule.match.name.test(action.name);\n\n  const matchesTags =\n    rule.match.tags == null\n      ? true\n      : rule.match.tags.every((tag) => action.tags?.includes(tag));\n\n  return matchesName && matchesTags;\n}\n\nfunction resolvePermission(\n  action: ActionDefinition,\n  policy: ActionPolicy | undefined\n): 'allow' | 'deny' | 'ask' {\n  if (action.permission) return action.permission;\n  const matchingRule = policy?.rules?.find((rule) => matchesRule(action, rule));\n  if (matchingRule) return matchingRule.permission;\n  return policy?.defaultPermission ?? 'allow';\n}\n\nexport function stringifyActionResult(\n  result: ActionResult,\n  redact = false\n): string {\n  let output: string;\n  if (result.error) {\n    output = `Error executing action \"${result.actionName}\": ${result.error.message}`;\n  } else if (typeof result.output === 'string') {\n    output = result.output;\n  } else {\n    output = JSON.stringify(result.output ?? null);\n  }\n  return redact ? redactSecrets(output) : output;\n}\n\nasync function applyBeforeActionMiddleware(\n  call: CapabilityToolCall,\n  middleware: CapabilityMiddleware[],\n  state: CapabilityState\n): Promise<CapabilityToolCall | null> {\n  let current: CapabilityToolCall | null = call;\n  for (const entry of middleware) {\n    if (!current) return null;\n    if (entry.beforeAction) current = await entry.beforeAction(current, state);\n  }\n  return current;\n}\n\nasync function applyAfterActionMiddleware(\n  result: ActionResult,\n  middleware: CapabilityMiddleware[],\n  state: CapabilityState\n): Promise<ActionResult> {\n  let current = result;\n  for (const entry of middleware) {\n    if (entry.afterAction) current = await entry.afterAction(current, state);\n  }\n  return current;\n}\n\nfunction rejectedOutput(\n  actionName: string,\n  errorName: string,\n  message: string\n): ExecutedActionOutput {\n  const result: ActionResult = {\n    actionName,\n    output: undefined,\n    durationMs: 0,\n    error: { name: errorName, message },\n  };\n  return { actionName, content: stringifyActionResult(result), result };\n}\n\nfunction appendAdditionalContext(\n  content: string,\n  additionalContext: string | undefined\n): string {\n  if (!additionalContext) return content;\n  return `${content}\\n\\n[Additional hook context]\\n${additionalContext}`;\n}\n\nexport async function executeSingleActionCall(\n  options: ExecuteActionCallsOptions,\n  call: CapabilityToolCall\n): Promise<ExecutedActionOutput> {\n  const {\n    actionPolicy,\n    actions,\n    backend,\n    bridge,\n    contextId,\n    emitEvent,\n    middleware = [],\n    params,\n    policy,\n    policySubject,\n    requestApproval,\n    taskId,\n    tenant,\n    redactActionOutput,\n  } = options;\n\n  const state = buildCapabilityState(params, {\n    backend,\n    bridge,\n    contextId,\n    taskId,\n  });\n  const wrappedCall = await applyBeforeActionMiddleware(\n    call,\n    middleware,\n    state\n  );\n  if (!wrappedCall) {\n    return rejectedOutput(\n      call.name,\n      'ActionRejectedError',\n      `Action \"${call.name}\" was rejected by capability middleware.`\n    );\n  }\n\n  const action = actions.find((entry) => entry.name === wrappedCall.name);\n  if (!action) {\n    return rejectedOutput(\n      wrappedCall.name,\n      'ActionNotFoundError',\n      `Action \"${wrappedCall.name}\" is not registered on this bridge.`\n    );\n  }\n\n  const permission = resolvePermission(action, actionPolicy);\n  if (permission === 'deny') {\n    return rejectedOutput(\n      action.name,\n      'ActionPermissionError',\n      `Action \"${action.name}\" is denied by the bridge action policy.`\n    );\n  }\n\n  try {\n    await assertPolicyAllowed(\n      policy,\n      {\n        action: 'tool.invoke',\n        subject: resolvePolicySubject(params.subject, policySubject),\n        resource: {\n          kind: 'tool',\n          id: action.name,\n          name: action.name,\n          tags: action.tags,\n          tenant,\n          attributes: { executorType: action.executor.type },\n        },\n        context: { contextId, taskId, backend, requestedTenant: tenant },\n      },\n      emitPolicyDecision(emitEvent)\n    );\n  } catch (error) {\n    if (error instanceof Error) {\n      return rejectedOutput(action.name, error.name, error.message);\n    }\n    throw error;\n  }\n\n  const approvalRequired =\n    permission === 'ask' || action.requireApproval === true;\n  // `params.permission` (per-send) or the bridge-level default surfaced\n  // through `params` by task-runner-execution forces the gate so the\n  // `allow-all` / `deny-all` presets reach every action \u2014 not only those\n  // that already opted in via `requireApproval: true` or `permission: 'ask'`.\n  const permissionPresetActive = params.permission != null;\n  if (\n    requestApproval &&\n    (params.onToolApproval != null ||\n      approvalRequired ||\n      permissionPresetActive)\n  ) {\n    const approved = await requestApproval?.(wrappedCall, action);\n    if (!approved) {\n      return rejectedOutput(\n        action.name,\n        'ActionApprovalError',\n        `Action \"${action.name}\" was not approved.`\n      );\n    }\n  }\n\n  await emitEvent?.('action:invoked', {\n    actionName: action.name,\n    args: wrappedCall.args,\n    taskId,\n    contextId,\n    backend,\n  });\n  await emitEvent?.('agent:tool-call', {\n    actionName: action.name,\n    args: wrappedCall.args,\n    status: 'started',\n    taskId,\n    contextId,\n    backend,\n  });\n\n  const executed = await executeAction(action, wrappedCall.args, {\n    taskId,\n    contextId,\n    backend,\n    ...(tenant !== undefined ? { tenant } : {}),\n    bridge: bridge as BridgeActionPort,\n  });\n  const result = await applyAfterActionMiddleware(executed, middleware, state);\n\n  if (result.error) {\n    await emitEvent?.('action:error', {\n      actionName: result.actionName,\n      error: result.error,\n      durationMs: result.durationMs,\n      taskId,\n      contextId,\n      backend,\n    });\n    await emitEvent?.('agent:tool-call', {\n      actionName: result.actionName,\n      args: wrappedCall.args,\n      status: 'failed',\n      error: result.error,\n      durationMs: result.durationMs,\n      taskId,\n      contextId,\n      backend,\n    });\n  } else {\n    await emitEvent?.('action:result', {\n      actionName: result.actionName,\n      output: result.output,\n      durationMs: result.durationMs,\n      taskId,\n      contextId,\n      backend,\n    });\n    await emitEvent?.('agent:tool-call', {\n      actionName: result.actionName,\n      args: wrappedCall.args,\n      status: 'completed',\n      output: result.output,\n      durationMs: result.durationMs,\n      taskId,\n      contextId,\n      backend,\n    });\n  }\n\n  if (action.executor.type === 'mcp') {\n    const timedOut = result.error?.name === 'McpCallTimeoutError';\n    await emitEvent?.('mcp:tool:invoke', {\n      server: action.executor.server,\n      tool: action.executor.tool,\n      durationMs: result.durationMs,\n      timedOut,\n      taskId,\n      contextId,\n      backend,\n    });\n    await emitEvent?.('agent:mcp', {\n      server: action.executor.server,\n      tool: action.executor.tool,\n      status: result.error ? 'failed' : 'completed',\n      durationMs: result.durationMs,\n      timedOut,\n      taskId,\n      contextId,\n      backend,\n    });\n  }\n\n  return {\n    actionName: action.name,\n    content: appendAdditionalContext(\n      stringifyActionResult(result, redactActionOutput),\n      wrappedCall.additionalContext\n    ),\n    result,\n  };\n}\n"],
+  "mappings": "AACA,SAAS,qBAAqB;AAM9B,SAAS,4BAA4B;AASrC;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,qBAAqB;AAE9B,SAAS,0BAA0B;AAkCnC,SAAS,YACP,QACA,MACS;AACT,QAAM,cACJ,KAAK,MAAM,QAAQ,OACf,OACA,OAAO,KAAK,MAAM,SAAS,WACzB,KAAK,MAAM,SAAS,OAAO,OAC3B,KAAK,MAAM,KAAK,KAAK,OAAO,IAAI;AAExC,QAAM,cACJ,KAAK,MAAM,QAAQ,OACf,OACA,KAAK,MAAM,KAAK,MAAM,CAAC,QAAQ,OAAO,MAAM,SAAS,GAAG,CAAC;AAE/D,SAAO,eAAe;AACxB;AAEA,SAAS,kBACP,QACA,QAC0B;AAC1B,MAAI,OAAO,WAAY,QAAO,OAAO;AACrC,QAAM,eAAe,QAAQ,OAAO,KAAK,CAAC,SAAS,YAAY,QAAQ,IAAI,CAAC;AAC5E,MAAI,aAAc,QAAO,aAAa;AACtC,SAAO,QAAQ,qBAAqB;AACtC;AAEO,SAAS,sBACd,QACA,SAAS,OACD;AACR,MAAI;AACJ,MAAI,OAAO,OAAO;AAChB,aAAS,2BAA2B,OAAO,UAAU,MAAM,OAAO,MAAM,OAAO;AAAA,EACjF,WAAW,OAAO,OAAO,WAAW,UAAU;AAC5C,aAAS,OAAO;AAAA,EAClB,OAAO;AACL,aAAS,KAAK,UAAU,OAAO,UAAU,IAAI;AAAA,EAC/C;AACA,SAAO,SAAS,cAAc,MAAM,IAAI;AAC1C;AAEA,eAAe,4BACb,MACA,YACA,OACoC;AACpC,MAAI,UAAqC;AACzC,aAAW,SAAS,YAAY;AAC9B,QAAI,CAAC,QAAS,QAAO;AACrB,QAAI,MAAM,aAAc,WAAU,MAAM,MAAM,aAAa,SAAS,KAAK;AAAA,EAC3E;AACA,SAAO;AACT;AAEA,eAAe,2BACb,QACA,YACA,OACuB;AACvB,MAAI,UAAU;AACd,aAAW,SAAS,YAAY;AAC9B,QAAI,MAAM,YAAa,WAAU,MAAM,MAAM,YAAY,SAAS,KAAK;AAAA,EACzE;AACA,SAAO;AACT;AAEA,SAAS,eACP,YACA,WACA,SACsB;AACtB,QAAM,SAAuB;AAAA,IAC3B;AAAA,IACA,QAAQ;AAAA,IACR,YAAY;AAAA,IACZ,OAAO,EAAE,MAAM,WAAW,QAAQ;AAAA,EACpC;AACA,SAAO,EAAE,YAAY,SAAS,sBAAsB,MAAM,GAAG,OAAO;AACtE;AAEA,SAAS,wBACP,SACA,mBACQ;AACR,MAAI,CAAC,kBAAmB,QAAO;AAC/B,SAAO,GAAG,OAAO;AAAA;AAAA;AAAA,EAAkC,iBAAiB;AACtE;AAEA,eAAsB,wBACpB,SACA,MAC+B;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,aAAa,CAAC;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,QAAM,QAAQ,qBAAqB,QAAQ;AAAA,IACzC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,cAAc,MAAM;AAAA,IACxB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,WAAW,KAAK,IAAI;AAAA,IACtB;AAAA,EACF;AAEA,QAAM,SAAS,QAAQ,KAAK,CAAC,UAAU,MAAM,SAAS,YAAY,IAAI;AACtE,MAAI,CAAC,QAAQ;AACX,WAAO;AAAA,MACL,YAAY;AAAA,MACZ;AAAA,MACA,WAAW,YAAY,IAAI;AAAA,IAC7B;AAAA,EACF;AAEA,QAAM,aAAa,kBAAkB,QAAQ,YAAY;AACzD,MAAI,eAAe,QAAQ;AACzB,WAAO;AAAA,MACL,OAAO;AAAA,MACP;AAAA,MACA,WAAW,OAAO,IAAI;AAAA,IACxB;AAAA,EACF;AAEA,MAAI;AACF,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,qBAAqB,OAAO,SAAS,aAAa;AAAA,QAC3D,UAAU;AAAA,UACR,MAAM;AAAA,UACN,IAAI,OAAO;AAAA,UACX,MAAM,OAAO;AAAA,UACb,MAAM,OAAO;AAAA,UACb;AAAA,UACA,YAAY,EAAE,cAAc,OAAO,SAAS,KAAK;AAAA,QACnD;AAAA,QACA,SAAS,EAAE,WAAW,QAAQ,SAAS,iBAAiB,OAAO;AAAA,MACjE;AAAA,MACA,mBAAmB,SAAS;AAAA,IAC9B;AAAA,EACF,SAAS,OAAO;AACd,QAAI,iBAAiB,OAAO;AAC1B,aAAO,eAAe,OAAO,MAAM,MAAM,MAAM,MAAM,OAAO;AAAA,IAC9D;AACA,UAAM;AAAA,EACR;AAEA,QAAM,mBACJ,eAAe,SAAS,OAAO,oBAAoB;AAKrD,QAAM,yBAAyB,OAAO,cAAc;AACpD,MACE,oBACC,OAAO,kBAAkB,QACxB,oBACA,yBACF;AACA,UAAM,WAAW,MAAM,kBAAkB,aAAa,MAAM;AAC5D,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,QACL,OAAO;AAAA,QACP;AAAA,QACA,WAAW,OAAO,IAAI;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YAAY,kBAAkB;AAAA,IAClC,YAAY,OAAO;AAAA,IACnB,MAAM,YAAY;AAAA,IAClB;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACD,QAAM,YAAY,mBAAmB;AAAA,IACnC,YAAY,OAAO;AAAA,IACnB,MAAM,YAAY;AAAA,IAClB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,WAAW,MAAM,cAAc,QAAQ,YAAY,MAAM;AAAA,IAC7D;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,WAAW,SAAY,EAAE,OAAO,IAAI,CAAC;AAAA,IACzC;AAAA,EACF,CAAC;AACD,QAAM,SAAS,MAAM,2BAA2B,UAAU,YAAY,KAAK;AAE3E,MAAI,OAAO,OAAO;AAChB,UAAM,YAAY,gBAAgB;AAAA,MAChC,YAAY,OAAO;AAAA,MACnB,OAAO,OAAO;AAAA,MACd,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,YAAY,mBAAmB;AAAA,MACnC,YAAY,OAAO;AAAA,MACnB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,OAAO,OAAO;AAAA,MACd,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH,OAAO;AACL,UAAM,YAAY,iBAAiB;AAAA,MACjC,YAAY,OAAO;AAAA,MACnB,QAAQ,OAAO;AAAA,MACf,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,YAAY,mBAAmB;AAAA,MACnC,YAAY,OAAO;AAAA,MACnB,MAAM,YAAY;AAAA,MAClB,QAAQ;AAAA,MACR,QAAQ,OAAO;AAAA,MACf,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,MAAI,OAAO,SAAS,SAAS,OAAO;AAClC,UAAM,WAAW,OAAO,OAAO,SAAS;AACxC,UAAM,YAAY,mBAAmB;AAAA,MACnC,QAAQ,OAAO,SAAS;AAAA,MACxB,MAAM,OAAO,SAAS;AAAA,MACtB,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AACD,UAAM,YAAY,aAAa;AAAA,MAC7B,QAAQ,OAAO,SAAS;AAAA,MACxB,MAAM,OAAO,SAAS;AAAA,MACtB,QAAQ,OAAO,QAAQ,WAAW;AAAA,MAClC,YAAY,OAAO;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL,YAAY,OAAO;AAAA,IACnB,SAAS;AAAA,MACP,sBAAsB,QAAQ,kBAAkB;AAAA,MAChD,YAAY;AAAA,IACd;AAAA,IACA;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/runtime/bridge/capability-runner.d.ts

@@ -0,0 +1,35 @@
+import type { ActionDefinition } from '../../actions/types.js';
+import type { CapabilityState, CapabilityToolCall } from '../../capabilities/types.js';
+import type { BridgeSendMessageParams } from '../../domain/bridge-api.js';
+import type { BackendName, RunResult } from '../../domain/core-client.js';
+import type { Message } from '../../domain/core-task.js';
+import type { ContextState } from '../sessions/context-manager.js';
+import { type ExecuteActionCallsOptions, type ExecutedActionOutput } from './capability-action-call.js';
+export type { ExecuteActionCallsOptions, ExecutedActionOutput, } from './capability-action-call.js';
+interface PrepareTaskCapabilitiesOptions {
+    actionDefinitions: ActionDefinition[];
+    backend: BackendName;
+    bridge: unknown;
+    context: ContextState;
+    params: BridgeSendMessageParams;
+    taskId: string;
+    /**
+     * Passthrough mode (gateway): suppress all bridge-side skills (registry +
+     * `actionBundles`) so the outbound backend call carries only what the
+     * inbound caller supplied.
+     */
+    passthrough?: boolean;
+}
+interface PreparedTaskCapabilities {
+    actions: ActionDefinition[];
+    state: CapabilityState;
+}
+export declare function prepareTaskCapabilities(options: PrepareTaskCapabilitiesOptions): Promise<PreparedTaskCapabilities>;
+export declare function shouldRunBridgeActionLoop(actions: ActionDefinition[], agentLoop: boolean | {
+    enabled?: boolean;
+} | undefined): boolean;
+export declare function extractExecutableActionCalls(result: RunResult, actions: ActionDefinition[]): CapabilityToolCall[];
+export declare function executeBridgeActionCalls(options: ExecuteActionCallsOptions): Promise<ExecutedActionOutput[]>;
+export declare function buildLoopHistoryEntries(result: RunResult, outputs: ExecutedActionOutput[]): Message[];
+export declare function buildLoopContinuationPrompt(outputs: ExecutedActionOutput[]): string;
+//# sourceMappingURL=capability-runner.d.ts.map

package/dist/runtime/bridge/capability-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-runner.d.ts","sourceRoot":"","sources":["../../../src/runtime/bridge/capability-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI/D,OAAO,KAAK,EAEV,eAAe,EACf,kBAAkB,EACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AAEzD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AACnE,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EAE1B,MAAM,6BAA6B,CAAC;AAErC,YAAY,EACV,yBAAyB,EACzB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AA6BrC,UAAU,8BAA8B;IACtC,iBAAiB,EAAE,gBAAgB,EAAE,CAAC;IACtC,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,UAAU,wBAAwB;IAChC,OAAO,EAAE,gBAAgB,EAAE,CAAC;IAC5B,KAAK,EAAE,eAAe,CAAC;CACxB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,wBAAwB,CAAC,CAmBnC;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,gBAAgB,EAAE,EAC3B,SAAS,EAAE,OAAO,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,SAAS,GACrD,OAAO,CAMT;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,gBAAgB,EAAE,GAC1B,kBAAkB,EAAE,CAMtB;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAajC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,oBAAoB,EAAE,GAC9B,OAAO,EAAE,CA6BX;AAED,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,oBAAoB,EAAE,GAC9B,MAAM,CAOR"}

package/dist/runtime/bridge/capability-runner.js

@@ -0,0 +1,101 @@
+import { buildCapabilityState } from "../../capabilities/context-composer.js";
+import { resolveSkillActions } from "../../capabilities/skill-injector.js";
+import { extractCapabilityToolCalls } from "../../capabilities/tool-calls.js";
+import { createMessage, textPart } from "../../utils/messages.js";
+import {
+  executeSingleActionCall
+} from "./capability-action-call.js";
+function hasListSkills(bridge) {
+  return typeof bridge === "object" && bridge !== null && "registry" in bridge && typeof bridge.registry?.listSkills === "function";
+}
+function getRegisteredCapabilitySkills(bridge) {
+  if (!hasListSkills(bridge)) return [];
+  return bridge.registry.listSkills().map((skill) => ({
+    actions: skill.actions,
+    ...skill.condition ? { condition: skill.condition } : {}
+  }));
+}
+async function prepareTaskCapabilities(options) {
+  const state = buildCapabilityState(options.params, {
+    backend: options.backend,
+    bridge: options.bridge,
+    contextId: options.context.id,
+    taskId: options.taskId
+  });
+  const runtimeSkills = options.passthrough ? [] : [
+    ...options.context.options.actionBundles ?? [],
+    ...getRegisteredCapabilitySkills(options.bridge)
+  ];
+  const actions = await resolveSkillActions(
+    options.actionDefinitions,
+    runtimeSkills,
+    state
+  );
+  return { actions, state };
+}
+function shouldRunBridgeActionLoop(actions, agentLoop) {
+  if (agentLoop === false) return false;
+  if (typeof agentLoop === "object" && agentLoop.enabled === false) {
+    return false;
+  }
+  return actions.length > 0;
+}
+function extractExecutableActionCalls(result, actions) {
+  if (actions.length === 0) return [];
+  const names = new Set(actions.map((action) => action.name));
+  return extractCapabilityToolCalls(result).filter(
+    (call) => names.has(call.name)
+  );
+}
+async function executeBridgeActionCalls(options) {
+  const run = (call) => executeSingleActionCall(options, call);
+  if (options.parallelActions) {
+    return Promise.all(options.calls.map(run));
+  }
+  const outputs = [];
+  for (const call of options.calls) {
+    outputs.push(await run(call));
+  }
+  return outputs;
+}
+function buildLoopHistoryEntries(result, outputs) {
+  const assistantContent = result.text.trim() || [
+    "The assistant requested tool execution.",
+    ...extractCapabilityToolCalls(result).map(
+      (call) => `${call.name}: ${JSON.stringify(call.args)}`
+    )
+  ].join("\n");
+  return [
+    createMessage({
+      role: "agent",
+      parts: [textPart(assistantContent)]
+    }),
+    createMessage({
+      role: "user",
+      parts: [
+        textPart(
+          outputs.map(
+            (output) => `[Tool result for ${output.actionName}]: ${output.content}`
+          ).join("\n\n")
+        )
+      ]
+    })
+  ];
+}
+function buildLoopContinuationPrompt(outputs) {
+  return [
+    "Use the following tool results to continue the task and answer the user.",
+    ...outputs.map(
+      (output) => `[Tool result for ${output.actionName}]: ${output.content}`
+    )
+  ].join("\n\n");
+}
+export {
+  buildLoopContinuationPrompt,
+  buildLoopHistoryEntries,
+  executeBridgeActionCalls,
+  extractExecutableActionCalls,
+  prepareTaskCapabilities,
+  shouldRunBridgeActionLoop
+};
+//# sourceMappingURL=capability-runner.js.map

package/dist/runtime/bridge/capability-runner.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/capability-runner.ts"],
+  "sourcesContent": ["import type { ActionDefinition } from '../../actions/types.js';\nimport { buildCapabilityState } from '../../capabilities/context-composer.js';\nimport { resolveSkillActions } from '../../capabilities/skill-injector.js';\nimport { extractCapabilityToolCalls } from '../../capabilities/tool-calls.js';\nimport type {\n  CapabilitySkill,\n  CapabilityState,\n  CapabilityToolCall,\n} from '../../capabilities/types.js';\nimport type { BridgeSendMessageParams } from '../../domain/bridge-api.js';\nimport type { BackendName, RunResult } from '../../domain/core-client.js';\nimport type { Message } from '../../domain/core-task.js';\nimport { createMessage, textPart } from '../../utils/messages.js';\nimport type { ContextState } from '../sessions/context-manager.js';\nimport {\n  type ExecuteActionCallsOptions,\n  type ExecutedActionOutput,\n  executeSingleActionCall,\n} from './capability-action-call.js';\n\nexport type {\n  ExecuteActionCallsOptions,\n  ExecutedActionOutput,\n} from './capability-action-call.js';\n\ninterface BridgeSkillsAccessor {\n  registry: {\n    listSkills(): Array<{\n      actions: CapabilitySkill['actions'];\n      condition?: CapabilitySkill['condition'];\n    }>;\n  };\n}\n\nfunction hasListSkills(bridge: unknown): bridge is BridgeSkillsAccessor {\n  return (\n    typeof bridge === 'object' &&\n    bridge !== null &&\n    'registry' in bridge &&\n    typeof (bridge as { registry?: { listSkills?: unknown } }).registry\n      ?.listSkills === 'function'\n  );\n}\n\nfunction getRegisteredCapabilitySkills(bridge: unknown): CapabilitySkill[] {\n  if (!hasListSkills(bridge)) return [];\n  return bridge.registry.listSkills().map((skill) => ({\n    actions: skill.actions,\n    ...(skill.condition ? { condition: skill.condition } : {}),\n  }));\n}\n\ninterface PrepareTaskCapabilitiesOptions {\n  actionDefinitions: ActionDefinition[];\n  backend: BackendName;\n  bridge: unknown;\n  context: ContextState;\n  params: BridgeSendMessageParams;\n  taskId: string;\n  /**\n   * Passthrough mode (gateway): suppress all bridge-side skills (registry +\n   * `actionBundles`) so the outbound backend call carries only what the\n   * inbound caller supplied.\n   */\n  passthrough?: boolean;\n}\n\ninterface PreparedTaskCapabilities {\n  actions: ActionDefinition[];\n  state: CapabilityState;\n}\n\nexport async function prepareTaskCapabilities(\n  options: PrepareTaskCapabilitiesOptions\n): Promise<PreparedTaskCapabilities> {\n  const state = buildCapabilityState(options.params, {\n    backend: options.backend,\n    bridge: options.bridge,\n    contextId: options.context.id,\n    taskId: options.taskId,\n  });\n  const runtimeSkills = options.passthrough\n    ? []\n    : [\n        ...(options.context.options.actionBundles ?? []),\n        ...getRegisteredCapabilitySkills(options.bridge),\n      ];\n  const actions = await resolveSkillActions(\n    options.actionDefinitions,\n    runtimeSkills,\n    state\n  );\n  return { actions, state };\n}\n\nexport function shouldRunBridgeActionLoop(\n  actions: ActionDefinition[],\n  agentLoop: boolean | { enabled?: boolean } | undefined\n): boolean {\n  if (agentLoop === false) return false;\n  if (typeof agentLoop === 'object' && agentLoop.enabled === false) {\n    return false;\n  }\n  return actions.length > 0;\n}\n\nexport function extractExecutableActionCalls(\n  result: RunResult,\n  actions: ActionDefinition[]\n): CapabilityToolCall[] {\n  if (actions.length === 0) return [];\n  const names = new Set(actions.map((action) => action.name));\n  return extractCapabilityToolCalls(result).filter((call) =>\n    names.has(call.name)\n  );\n}\n\nexport async function executeBridgeActionCalls(\n  options: ExecuteActionCallsOptions\n): Promise<ExecutedActionOutput[]> {\n  const run = (call: CapabilityToolCall) =>\n    executeSingleActionCall(options, call);\n\n  if (options.parallelActions) {\n    return Promise.all(options.calls.map(run));\n  }\n\n  const outputs: ExecutedActionOutput[] = [];\n  for (const call of options.calls) {\n    outputs.push(await run(call));\n  }\n  return outputs;\n}\n\nexport function buildLoopHistoryEntries(\n  result: RunResult,\n  outputs: ExecutedActionOutput[]\n): Message[] {\n  const assistantContent =\n    result.text.trim() ||\n    [\n      'The assistant requested tool execution.',\n      ...extractCapabilityToolCalls(result).map(\n        (call) => `${call.name}: ${JSON.stringify(call.args)}`\n      ),\n    ].join('\\n');\n\n  return [\n    createMessage({\n      role: 'agent',\n      parts: [textPart(assistantContent)],\n    }),\n    createMessage({\n      role: 'user',\n      parts: [\n        textPart(\n          outputs\n            .map(\n              (output) =>\n                `[Tool result for ${output.actionName}]: ${output.content}`\n            )\n            .join('\\n\\n')\n        ),\n      ],\n    }),\n  ];\n}\n\nexport function buildLoopContinuationPrompt(\n  outputs: ExecutedActionOutput[]\n): string {\n  return [\n    'Use the following tool results to continue the task and answer the user.',\n    ...outputs.map(\n      (output) => `[Tool result for ${output.actionName}]: ${output.content}`\n    ),\n  ].join('\\n\\n');\n}\n"],
+  "mappings": "AACA,SAAS,4BAA4B;AACrC,SAAS,2BAA2B;AACpC,SAAS,kCAAkC;AAS3C,SAAS,eAAe,gBAAgB;AAExC;AAAA,EAGE;AAAA,OACK;AAgBP,SAAS,cAAc,QAAiD;AACtE,SACE,OAAO,WAAW,YAClB,WAAW,QACX,cAAc,UACd,OAAQ,OAAmD,UACvD,eAAe;AAEvB;AAEA,SAAS,8BAA8B,QAAoC;AACzE,MAAI,CAAC,cAAc,MAAM,EAAG,QAAO,CAAC;AACpC,SAAO,OAAO,SAAS,WAAW,EAAE,IAAI,CAAC,WAAW;AAAA,IAClD,SAAS,MAAM;AAAA,IACf,GAAI,MAAM,YAAY,EAAE,WAAW,MAAM,UAAU,IAAI,CAAC;AAAA,EAC1D,EAAE;AACJ;AAsBA,eAAsB,wBACpB,SACmC;AACnC,QAAM,QAAQ,qBAAqB,QAAQ,QAAQ;AAAA,IACjD,SAAS,QAAQ;AAAA,IACjB,QAAQ,QAAQ;AAAA,IAChB,WAAW,QAAQ,QAAQ;AAAA,IAC3B,QAAQ,QAAQ;AAAA,EAClB,CAAC;AACD,QAAM,gBAAgB,QAAQ,cAC1B,CAAC,IACD;AAAA,IACE,GAAI,QAAQ,QAAQ,QAAQ,iBAAiB,CAAC;AAAA,IAC9C,GAAG,8BAA8B,QAAQ,MAAM;AAAA,EACjD;AACJ,QAAM,UAAU,MAAM;AAAA,IACpB,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,EACF;AACA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAEO,SAAS,0BACd,SACA,WACS;AACT,MAAI,cAAc,MAAO,QAAO;AAChC,MAAI,OAAO,cAAc,YAAY,UAAU,YAAY,OAAO;AAChE,WAAO;AAAA,EACT;AACA,SAAO,QAAQ,SAAS;AAC1B;AAEO,SAAS,6BACd,QACA,SACsB;AACtB,MAAI,QAAQ,WAAW,EAAG,QAAO,CAAC;AAClC,QAAM,QAAQ,IAAI,IAAI,QAAQ,IAAI,CAAC,WAAW,OAAO,IAAI,CAAC;AAC1D,SAAO,2BAA2B,MAAM,EAAE;AAAA,IAAO,CAAC,SAChD,MAAM,IAAI,KAAK,IAAI;AAAA,EACrB;AACF;AAEA,eAAsB,yBACpB,SACiC;AACjC,QAAM,MAAM,CAAC,SACX,wBAAwB,SAAS,IAAI;AAEvC,MAAI,QAAQ,iBAAiB;AAC3B,WAAO,QAAQ,IAAI,QAAQ,MAAM,IAAI,GAAG,CAAC;AAAA,EAC3C;AAEA,QAAM,UAAkC,CAAC;AACzC,aAAW,QAAQ,QAAQ,OAAO;AAChC,YAAQ,KAAK,MAAM,IAAI,IAAI,CAAC;AAAA,EAC9B;AACA,SAAO;AACT;AAEO,SAAS,wBACd,QACA,SACW;AACX,QAAM,mBACJ,OAAO,KAAK,KAAK,KACjB;AAAA,IACE;AAAA,IACA,GAAG,2BAA2B,MAAM,EAAE;AAAA,MACpC,CAAC,SAAS,GAAG,KAAK,IAAI,KAAK,KAAK,UAAU,KAAK,IAAI,CAAC;AAAA,IACtD;AAAA,EACF,EAAE,KAAK,IAAI;AAEb,SAAO;AAAA,IACL,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,OAAO,CAAC,SAAS,gBAAgB,CAAC;AAAA,IACpC,CAAC;AAAA,IACD,cAAc;AAAA,MACZ,MAAM;AAAA,MACN,OAAO;AAAA,QACL;AAAA,UACE,QACG;AAAA,YACC,CAAC,WACC,oBAAoB,OAAO,UAAU,MAAM,OAAO,OAAO;AAAA,UAC7D,EACC,KAAK,MAAM;AAAA,QAChB;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEO,SAAS,4BACd,SACQ;AACR,SAAO;AAAA,IACL;AAAA,IACA,GAAG,QAAQ;AAAA,MACT,CAAC,WAAW,oBAAoB,OAAO,UAAU,MAAM,OAAO,OAAO;AAAA,IACvE;AAAA,EACF,EAAE,KAAK,MAAM;AACf;",
+  "names": []
+}

package/dist/runtime/bridge/config-bridge-helpers.d.ts

@@ -0,0 +1,25 @@
+import type { ActionDefinition } from '../../actions/types.js';
+import type { BridgeMcpServerConfig, CapabilitySkill } from '../../capabilities/types.js';
+import type { BackendOverrides, SerializedAgentSkillsConfig, SerializedMcpServerConfig, SerializedSkillConfig } from '../../config/config.js';
+import type { BackendName } from '../../domain/core-client.js';
+import type { AgentSkillsOptions } from '../sessions/agent-skills-types.js';
+/**
+ * Merge serializable config skill discovery with runtime-only skill options.
+ * Runtime options win for scalar fields; path and disabled lists are additive.
+ */
+export declare function mergeConfigAgentSkills(config: SerializedAgentSkillsConfig | undefined, runtime: AgentSkillsOptions | undefined): AgentSkillsOptions | undefined;
+/**
+ * Merge config-file MCP servers with runtime MCP servers.
+ * Runtime entries win on name collision.
+ */
+export declare function mergeConfigMcpServers(runtime: Record<string, BridgeMcpServerConfig> | undefined, config: Record<string, SerializedMcpServerConfig> | undefined): Record<string, BridgeMcpServerConfig> | undefined;
+/**
+ * Resolve serialized skill configs to runtime CapabilitySkill objects
+ * by matching actionNames against a list of available ActionDefinitions.
+ */
+export declare function resolveConfigSkills(skills: SerializedSkillConfig[] | undefined, availableActions: ActionDefinition[]): CapabilitySkill[];
+/**
+ * Look up per-backend overrides (model, mcpConfigPath) from the profile's backends map.
+ */
+export declare function resolveBackendOverrides(backend: BackendName, backends: Partial<Record<BackendName, BackendOverrides>> | undefined): BackendOverrides;
+//# sourceMappingURL=config-bridge-helpers.d.ts.map

package/dist/runtime/bridge/config-bridge-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-bridge-helpers.d.ts","sourceRoot":"","sources":["../../../src/runtime/bridge/config-bridge-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,KAAK,EACV,qBAAqB,EACrB,eAAe,EAChB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EACV,gBAAgB,EAChB,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAM5E;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,2BAA2B,GAAG,SAAS,EAC/C,OAAO,EAAE,kBAAkB,GAAG,SAAS,GACtC,kBAAkB,GAAG,SAAS,CAqBhC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,EAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,GAAG,SAAS,GAC5D,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,GAAG,SAAS,CAKnD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,qBAAqB,EAAE,GAAG,SAAS,EAC3C,gBAAgB,EAAE,gBAAgB,EAAE,GACnC,eAAe,EAAE,CAkBnB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,GAAG,SAAS,GACnE,gBAAgB,CAGlB"}

package/dist/runtime/bridge/config-bridge-helpers.js

@@ -0,0 +1,52 @@
+function unique(values) {
+  return [...new Set(values)];
+}
+function mergeConfigAgentSkills(config, runtime) {
+  if (!config && !runtime) return void 0;
+  if (!config) return runtime;
+  if (!runtime) return { ...config };
+  const additionalPaths = unique([
+    ...config.additionalPaths ?? [],
+    ...runtime.additionalPaths ?? []
+  ]);
+  const disabled = unique([
+    ...config.disabled ?? [],
+    ...runtime.disabled ?? []
+  ]);
+  return {
+    ...config,
+    ...runtime,
+    additionalPaths: additionalPaths.length > 0 ? additionalPaths : void 0,
+    disabled: disabled.length > 0 ? disabled : void 0,
+    bundles: runtime.bundles
+  };
+}
+function mergeConfigMcpServers(runtime, config) {
+  if (!runtime && !config) return void 0;
+  if (!config) return runtime;
+  if (!runtime) return config;
+  return { ...config, ...runtime };
+}
+function resolveConfigSkills(skills, availableActions) {
+  if (!skills || skills.length === 0) return [];
+  const actionsByName = new Map(availableActions.map((a) => [a.name, a]));
+  return skills.map((skill) => {
+    const matchedActions = skill.actionNames.map((name) => actionsByName.get(name)).filter((a) => a !== void 0);
+    const resolved = { actions: matchedActions };
+    if (skill.condition === "never") {
+      resolved.condition = () => false;
+    }
+    return resolved;
+  });
+}
+function resolveBackendOverrides(backend, backends) {
+  if (!backends) return {};
+  return backends[backend] ?? {};
+}
+export {
+  mergeConfigAgentSkills,
+  mergeConfigMcpServers,
+  resolveBackendOverrides,
+  resolveConfigSkills
+};
+//# sourceMappingURL=config-bridge-helpers.js.map

package/dist/runtime/bridge/config-bridge-helpers.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/runtime/bridge/config-bridge-helpers.ts"],
+  "sourcesContent": ["import type { ActionDefinition } from '../../actions/types.js';\nimport type {\n  BridgeMcpServerConfig,\n  CapabilitySkill,\n} from '../../capabilities/types.js';\nimport type {\n  BackendOverrides,\n  SerializedAgentSkillsConfig,\n  SerializedMcpServerConfig,\n  SerializedSkillConfig,\n} from '../../config/config.js';\nimport type { BackendName } from '../../domain/core-client.js';\nimport type { AgentSkillsOptions } from '../sessions/agent-skills-types.js';\n\nfunction unique(values: string[]): string[] {\n  return [...new Set(values)];\n}\n\n/**\n * Merge serializable config skill discovery with runtime-only skill options.\n * Runtime options win for scalar fields; path and disabled lists are additive.\n */\nexport function mergeConfigAgentSkills(\n  config: SerializedAgentSkillsConfig | undefined,\n  runtime: AgentSkillsOptions | undefined\n): AgentSkillsOptions | undefined {\n  if (!config && !runtime) return undefined;\n  if (!config) return runtime;\n  if (!runtime) return { ...config };\n\n  const additionalPaths = unique([\n    ...(config.additionalPaths ?? []),\n    ...(runtime.additionalPaths ?? []),\n  ]);\n  const disabled = unique([\n    ...(config.disabled ?? []),\n    ...(runtime.disabled ?? []),\n  ]);\n\n  return {\n    ...config,\n    ...runtime,\n    additionalPaths: additionalPaths.length > 0 ? additionalPaths : undefined,\n    disabled: disabled.length > 0 ? disabled : undefined,\n    bundles: runtime.bundles,\n  };\n}\n\n/**\n * Merge config-file MCP servers with runtime MCP servers.\n * Runtime entries win on name collision.\n */\nexport function mergeConfigMcpServers(\n  runtime: Record<string, BridgeMcpServerConfig> | undefined,\n  config: Record<string, SerializedMcpServerConfig> | undefined\n): Record<string, BridgeMcpServerConfig> | undefined {\n  if (!runtime && !config) return undefined;\n  if (!config) return runtime;\n  if (!runtime) return config;\n  return { ...config, ...runtime };\n}\n\n/**\n * Resolve serialized skill configs to runtime CapabilitySkill objects\n * by matching actionNames against a list of available ActionDefinitions.\n */\nexport function resolveConfigSkills(\n  skills: SerializedSkillConfig[] | undefined,\n  availableActions: ActionDefinition[]\n): CapabilitySkill[] {\n  if (!skills || skills.length === 0) return [];\n\n  const actionsByName = new Map(availableActions.map((a) => [a.name, a]));\n\n  return skills.map((skill) => {\n    const matchedActions = skill.actionNames\n      .map((name) => actionsByName.get(name))\n      .filter((a): a is ActionDefinition => a !== undefined);\n\n    const resolved: CapabilitySkill = { actions: matchedActions };\n\n    if (skill.condition === 'never') {\n      resolved.condition = () => false;\n    }\n\n    return resolved;\n  });\n}\n\n/**\n * Look up per-backend overrides (model, mcpConfigPath) from the profile's backends map.\n */\nexport function resolveBackendOverrides(\n  backend: BackendName,\n  backends: Partial<Record<BackendName, BackendOverrides>> | undefined\n): BackendOverrides {\n  if (!backends) return {};\n  return backends[backend] ?? {};\n}\n"],
+  "mappings": "AAcA,SAAS,OAAO,QAA4B;AAC1C,SAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAMO,SAAS,uBACd,QACA,SACgC;AAChC,MAAI,CAAC,UAAU,CAAC,QAAS,QAAO;AAChC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,CAAC,QAAS,QAAO,EAAE,GAAG,OAAO;AAEjC,QAAM,kBAAkB,OAAO;AAAA,IAC7B,GAAI,OAAO,mBAAmB,CAAC;AAAA,IAC/B,GAAI,QAAQ,mBAAmB,CAAC;AAAA,EAClC,CAAC;AACD,QAAM,WAAW,OAAO;AAAA,IACtB,GAAI,OAAO,YAAY,CAAC;AAAA,IACxB,GAAI,QAAQ,YAAY,CAAC;AAAA,EAC3B,CAAC;AAED,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG;AAAA,IACH,iBAAiB,gBAAgB,SAAS,IAAI,kBAAkB;AAAA,IAChE,UAAU,SAAS,SAAS,IAAI,WAAW;AAAA,IAC3C,SAAS,QAAQ;AAAA,EACnB;AACF;AAMO,SAAS,sBACd,SACA,QACmD;AACnD,MAAI,CAAC,WAAW,CAAC,OAAQ,QAAO;AAChC,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO,EAAE,GAAG,QAAQ,GAAG,QAAQ;AACjC;AAMO,SAAS,oBACd,QACA,kBACmB;AACnB,MAAI,CAAC,UAAU,OAAO,WAAW,EAAG,QAAO,CAAC;AAE5C,QAAM,gBAAgB,IAAI,IAAI,iBAAiB,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,SAAO,OAAO,IAAI,CAAC,UAAU;AAC3B,UAAM,iBAAiB,MAAM,YAC1B,IAAI,CAAC,SAAS,cAAc,IAAI,IAAI,CAAC,EACrC,OAAO,CAAC,MAA6B,MAAM,MAAS;AAEvD,UAAM,WAA4B,EAAE,SAAS,eAAe;AAE5D,QAAI,MAAM,cAAc,SAAS;AAC/B,eAAS,YAAY,MAAM;AAAA,IAC7B;AAEA,WAAO;AAAA,EACT,CAAC;AACH;AAKO,SAAS,wBACd,SACA,UACkB;AAClB,MAAI,CAAC,SAAU,QAAO,CAAC;AACvB,SAAO,SAAS,OAAO,KAAK,CAAC;AAC/B;",
+  "names": []
+}