octoflow-core 1.0.0

package/dist/actions/define.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/actions/define.ts"],
+  "sourcesContent": ["import type { BridgeMcpSchemaBudget } from '../capabilities/types.js';\nimport type {\n  ActionContext,\n  ActionDefinition,\n  ActionExample,\n} from './types.js';\n\nexport interface DefineActionOptions {\n  readonly name: string;\n  readonly description: string;\n  readonly parameters?: Record<string, unknown>;\n\n  /** Function executor \u2014 the most common form. Pass `'cli'` for shell commands. */\n  readonly execute?:\n    | ((args: Record<string, unknown>, ctx: ActionContext) => Promise<unknown>)\n    | 'cli';\n\n  /** CLI executor fields (used when `execute` is `'cli'`). */\n  readonly command?: string | ((args: Record<string, unknown>) => string);\n  readonly cwd?: string;\n  readonly env?: Record<string, string>;\n  readonly shell?: boolean;\n\n  /** MCP executor. */\n  readonly source?: {\n    readonly type: 'mcp';\n    readonly server: string;\n    readonly tool: string;\n    readonly invoke: (\n      args: Record<string, unknown>,\n      ctx: ActionContext\n    ) => Promise<unknown>;\n    readonly timeoutMs?: number;\n    readonly schemaBudget?: BridgeMcpSchemaBudget;\n  };\n\n  readonly requireApproval?: boolean;\n  readonly permission?: 'allow' | 'deny' | 'ask';\n  readonly tags?: readonly string[];\n  readonly timeout?: number;\n  readonly metadata?: Record<string, unknown>;\n\n  /** Opt-in strict JSON-schema validation on the wire (Anthropic / OpenAI). */\n  readonly strict?: boolean;\n  /** JSON-schema for the value returned by `execute`. */\n  readonly outputSchema?: Record<string, unknown>;\n  /** Worked input examples \u2014 Anthropic-style `input_examples`. */\n  readonly inputExamples?: readonly ActionExample[];\n  /** Long-form usage notes. Not size-limited. */\n  readonly usageNotes?: string;\n  /** Richer narrative description for tool catalog surfaces. */\n  readonly longDescription?: string;\n}\n\nexport function defineAction(opts: DefineActionOptions): ActionDefinition {\n  const {\n    name,\n    description,\n    parameters = {},\n    tags,\n    timeout,\n    metadata,\n    requireApproval,\n    permission,\n  } = opts;\n\n  if (!name) throw new Error('[octoflow] defineAction: name is required');\n  if (!description) {\n    throw new Error('[octoflow] defineAction: description is required');\n  }\n\n  const shared = {\n    name,\n    description,\n    parameters,\n    tags,\n    timeout,\n    metadata,\n    requireApproval,\n    permission,\n    strict: opts.strict,\n    outputSchema: opts.outputSchema,\n    inputExamples: opts.inputExamples,\n    usageNotes: opts.usageNotes,\n    longDescription: opts.longDescription,\n  } as const;\n\n  if (opts.source) {\n    if (opts.execute) {\n      throw new Error(\n        `[octoflow] defineAction('${name}'): cannot set both 'execute' and 'source'`\n      );\n    }\n    return {\n      ...shared,\n      executor: {\n        type: 'mcp',\n        server: opts.source.server,\n        tool: opts.source.tool,\n        invoke: opts.source.invoke,\n        timeoutMs: opts.source.timeoutMs,\n        schemaBudget: opts.source.schemaBudget,\n      },\n    };\n  }\n\n  if (opts.execute === 'cli') {\n    if (!opts.command) {\n      throw new Error(\n        `[octoflow] defineAction('${name}'): 'command' is required when execute is 'cli'`\n      );\n    }\n    return {\n      ...shared,\n      executor: {\n        type: 'cli',\n        command: opts.command,\n        cwd: opts.cwd,\n        timeout: opts.timeout,\n        env: opts.env,\n        shell: opts.shell,\n      },\n    };\n  }\n\n  if (typeof opts.execute === 'function') {\n    return { ...shared, executor: { type: 'function', fn: opts.execute } };\n  }\n\n  throw new Error(\n    `[octoflow] defineAction('${name}'): must provide 'execute' (function or 'cli') or 'source' (mcp)`\n  );\n}\n"],
+  "mappings": "AAsDO,SAAS,aAAa,MAA6C;AACxE,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,aAAa,CAAC;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI;AAEJ,MAAI,CAAC,KAAM,OAAM,IAAI,MAAM,2CAA2C;AACtE,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,QAAM,SAAS;AAAA,IACb;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,eAAe,KAAK;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,iBAAiB,KAAK;AAAA,EACxB;AAEA,MAAI,KAAK,QAAQ;AACf,QAAI,KAAK,SAAS;AAChB,YAAM,IAAI;AAAA,QACR,4BAA4B,IAAI;AAAA,MAClC;AAAA,IACF;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,UAAU;AAAA,QACR,MAAM;AAAA,QACN,QAAQ,KAAK,OAAO;AAAA,QACpB,MAAM,KAAK,OAAO;AAAA,QAClB,QAAQ,KAAK,OAAO;AAAA,QACpB,WAAW,KAAK,OAAO;AAAA,QACvB,cAAc,KAAK,OAAO;AAAA,MAC5B;AAAA,IACF;AAAA,EACF;AAEA,MAAI,KAAK,YAAY,OAAO;AAC1B,QAAI,CAAC,KAAK,SAAS;AACjB,YAAM,IAAI;AAAA,QACR,4BAA4B,IAAI;AAAA,MAClC;AAAA,IACF;AACA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,UAAU;AAAA,QACR,MAAM;AAAA,QACN,SAAS,KAAK;AAAA,QACd,KAAK,KAAK;AAAA,QACV,SAAS,KAAK;AAAA,QACd,KAAK,KAAK;AAAA,QACV,OAAO,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAEA,MAAI,OAAO,KAAK,YAAY,YAAY;AACtC,WAAO,EAAE,GAAG,QAAQ,UAAU,EAAE,MAAM,YAAY,IAAI,KAAK,QAAQ,EAAE;AAAA,EACvE;AAEA,QAAM,IAAI;AAAA,IACR,4BAA4B,IAAI;AAAA,EAClC;AACF;",
+  "names": []
+}

package/dist/actions/executor.d.ts

@@ -0,0 +1,7 @@
+import type { ActionContext, ActionDefinition, ActionResult } from './types.js';
+/**
+ * Execute an action by dispatching to the appropriate executor.
+ * Returns a structured ActionResult regardless of success or failure.
+ */
+export declare function executeAction(action: ActionDefinition, args: Record<string, unknown>, ctx: ActionContext): Promise<ActionResult>;
+//# sourceMappingURL=executor.d.ts.map

package/dist/actions/executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.d.ts","sourceRoot":"","sources":["../../src/actions/executor.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhF;;;GAGG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,YAAY,CAAC,CA0DvB"}

package/dist/actions/executor.js

@@ -0,0 +1,101 @@
+import { exec, execFile } from "node:child_process";
+import { assertNever } from "../utils/assert-never.js";
+import { executeMcpAction } from "./executors/mcp.js";
+async function executeAction(action, args, ctx) {
+  const start = Date.now();
+  const actionName = action.name;
+  try {
+    const requiredParams = action.parameters.required;
+    if (requiredParams) {
+      const missing = requiredParams.filter((p) => args[p] == null);
+      if (missing.length > 0) {
+        return {
+          actionName,
+          output: {
+            error: `Missing required parameter(s): ${missing.join(", ")}`
+          },
+          durationMs: Date.now() - start,
+          error: {
+            name: "ValidationError",
+            message: `Missing required parameter(s): ${missing.join(", ")}`
+          }
+        };
+      }
+    }
+    let output;
+    switch (action.executor.type) {
+      case "function":
+        output = await executeFunctionAction(
+          action.executor.fn,
+          args,
+          ctx,
+          action.timeout
+        );
+        break;
+      case "cli":
+        output = await executeCliAction(action.executor, args);
+        break;
+      case "mcp":
+        output = await executeMcpAction(action.executor, args, ctx);
+        break;
+      default:
+        assertNever(action.executor, "executeAction");
+    }
+    return { actionName, output, durationMs: Date.now() - start };
+  } catch (err) {
+    const error = err instanceof Error ? { name: err.name, message: err.message } : { name: "ActionError", message: String(err) };
+    return {
+      actionName,
+      output: void 0,
+      durationMs: Date.now() - start,
+      error
+    };
+  }
+}
+async function executeFunctionAction(fn, args, ctx, timeout) {
+  if (!timeout) return fn(args, ctx);
+  let timeoutHandle;
+  try {
+    return await Promise.race([
+      fn(args, ctx),
+      new Promise((_, reject) => {
+        timeoutHandle = setTimeout(
+          () => reject(new Error(`Action timed out after ${timeout}ms`)),
+          timeout
+        );
+      })
+    ]);
+  } finally {
+    if (timeoutHandle) {
+      clearTimeout(timeoutHandle);
+    }
+  }
+}
+function executeCliAction(config, args) {
+  const cmd = typeof config.command === "function" ? config.command(args) : config.command;
+  const timeout = config.timeout ?? 3e4;
+  const cwd = config.cwd;
+  const env = config.env ? { ...process.env, ...config.env } : void 0;
+  return new Promise((resolve, reject) => {
+    const cb = (error, stdout, stderr) => {
+      if (error && "killed" in error && error.killed) {
+        reject(new Error(`CLI action timed out after ${timeout}ms: ${cmd}`));
+        return;
+      }
+      const exitCode = error && "code" in error ? typeof error.code === "number" ? error.code : 1 : 0;
+      resolve({ stdout, stderr, exitCode });
+    };
+    if (config.shell) {
+      exec(cmd, { cwd, env, timeout }, cb);
+      return;
+    }
+    const parts = cmd.split(/\s+/);
+    const file = parts[0];
+    const fileArgs = parts.slice(1);
+    execFile(file, fileArgs, { cwd, env, timeout }, cb);
+  });
+}
+export {
+  executeAction
+};
+//# sourceMappingURL=executor.js.map

package/dist/actions/executor.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/actions/executor.ts"],
+  "sourcesContent": ["import { exec, execFile } from 'node:child_process';\n\nimport { assertNever } from '../utils/assert-never.js';\nimport { executeMcpAction } from './executors/mcp.js';\nimport type { ActionContext, ActionDefinition, ActionResult } from './types.js';\n\n/**\n * Execute an action by dispatching to the appropriate executor.\n * Returns a structured ActionResult regardless of success or failure.\n */\nexport async function executeAction(\n  action: ActionDefinition,\n  args: Record<string, unknown>,\n  ctx: ActionContext\n): Promise<ActionResult> {\n  const start = Date.now();\n  const actionName = action.name;\n\n  try {\n    const requiredParams = (action.parameters as { required?: string[] })\n      .required;\n    if (requiredParams) {\n      const missing = requiredParams.filter((p) => args[p] == null);\n      if (missing.length > 0) {\n        return {\n          actionName,\n          output: {\n            error: `Missing required parameter(s): ${missing.join(', ')}`,\n          },\n          durationMs: Date.now() - start,\n          error: {\n            name: 'ValidationError',\n            message: `Missing required parameter(s): ${missing.join(', ')}`,\n          },\n        };\n      }\n    }\n\n    let output: unknown;\n\n    switch (action.executor.type) {\n      case 'function':\n        output = await executeFunctionAction(\n          action.executor.fn,\n          args,\n          ctx,\n          action.timeout\n        );\n        break;\n      case 'cli':\n        output = await executeCliAction(action.executor, args);\n        break;\n      case 'mcp':\n        output = await executeMcpAction(action.executor, args, ctx);\n        break;\n      default:\n        assertNever(action.executor, 'executeAction');\n    }\n\n    return { actionName, output, durationMs: Date.now() - start };\n  } catch (err: unknown) {\n    const error =\n      err instanceof Error\n        ? { name: err.name, message: err.message }\n        : { name: 'ActionError', message: String(err) };\n    return {\n      actionName,\n      output: undefined,\n      durationMs: Date.now() - start,\n      error,\n    };\n  }\n}\n\nasync function executeFunctionAction(\n  fn: (args: Record<string, unknown>, ctx: ActionContext) => Promise<unknown>,\n  args: Record<string, unknown>,\n  ctx: ActionContext,\n  timeout?: number\n): Promise<unknown> {\n  if (!timeout) return fn(args, ctx);\n\n  let timeoutHandle: ReturnType<typeof setTimeout> | undefined;\n  try {\n    return await Promise.race([\n      fn(args, ctx),\n      new Promise<never>((_, reject) => {\n        timeoutHandle = setTimeout(\n          () => reject(new Error(`Action timed out after ${timeout}ms`)),\n          timeout\n        );\n      }),\n    ]);\n  } finally {\n    if (timeoutHandle) {\n      clearTimeout(timeoutHandle);\n    }\n  }\n}\n\ninterface CliExecutorConfig {\n  readonly command: string | ((args: Record<string, unknown>) => string);\n  readonly cwd?: string;\n  readonly timeout?: number;\n  readonly env?: Record<string, string>;\n  readonly shell?: boolean;\n}\n\nfunction executeCliAction(\n  config: CliExecutorConfig,\n  args: Record<string, unknown>\n): Promise<{ stdout: string; stderr: string; exitCode: number }> {\n  const cmd =\n    typeof config.command === 'function'\n      ? config.command(args)\n      : config.command;\n  const timeout = config.timeout ?? 30_000;\n  const cwd = config.cwd;\n  const env = config.env ? { ...process.env, ...config.env } : undefined;\n\n  return new Promise((resolve, reject) => {\n    const cb = (error: Error | null, stdout: string, stderr: string): void => {\n      if (\n        error &&\n        'killed' in error &&\n        (error as { killed?: boolean }).killed\n      ) {\n        reject(new Error(`CLI action timed out after ${timeout}ms: ${cmd}`));\n        return;\n      }\n      const exitCode =\n        error && 'code' in error\n          ? typeof error.code === 'number'\n            ? error.code\n            : 1\n          : 0;\n      resolve({ stdout, stderr, exitCode });\n    };\n\n    if (config.shell) {\n      exec(cmd, { cwd, env, timeout }, cb);\n      return;\n    }\n\n    const parts = cmd.split(/\\s+/);\n    const file = parts[0]!;\n    const fileArgs = parts.slice(1);\n    execFile(file, fileArgs, { cwd, env, timeout }, cb);\n  });\n}\n"],
+  "mappings": "AAAA,SAAS,MAAM,gBAAgB;AAE/B,SAAS,mBAAmB;AAC5B,SAAS,wBAAwB;AAOjC,eAAsB,cACpB,QACA,MACA,KACuB;AACvB,QAAM,QAAQ,KAAK,IAAI;AACvB,QAAM,aAAa,OAAO;AAE1B,MAAI;AACF,UAAM,iBAAkB,OAAO,WAC5B;AACH,QAAI,gBAAgB;AAClB,YAAM,UAAU,eAAe,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,IAAI;AAC5D,UAAI,QAAQ,SAAS,GAAG;AACtB,eAAO;AAAA,UACL;AAAA,UACA,QAAQ;AAAA,YACN,OAAO,kCAAkC,QAAQ,KAAK,IAAI,CAAC;AAAA,UAC7D;AAAA,UACA,YAAY,KAAK,IAAI,IAAI;AAAA,UACzB,OAAO;AAAA,YACL,MAAM;AAAA,YACN,SAAS,kCAAkC,QAAQ,KAAK,IAAI,CAAC;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AAEJ,YAAQ,OAAO,SAAS,MAAM;AAAA,MAC5B,KAAK;AACH,iBAAS,MAAM;AAAA,UACb,OAAO,SAAS;AAAA,UAChB;AAAA,UACA;AAAA,UACA,OAAO;AAAA,QACT;AACA;AAAA,MACF,KAAK;AACH,iBAAS,MAAM,iBAAiB,OAAO,UAAU,IAAI;AACrD;AAAA,MACF,KAAK;AACH,iBAAS,MAAM,iBAAiB,OAAO,UAAU,MAAM,GAAG;AAC1D;AAAA,MACF;AACE,oBAAY,OAAO,UAAU,eAAe;AAAA,IAChD;AAEA,WAAO,EAAE,YAAY,QAAQ,YAAY,KAAK,IAAI,IAAI,MAAM;AAAA,EAC9D,SAAS,KAAc;AACrB,UAAM,QACJ,eAAe,QACX,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,QAAQ,IACvC,EAAE,MAAM,eAAe,SAAS,OAAO,GAAG,EAAE;AAClD,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,YAAY,KAAK,IAAI,IAAI;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AACF;AAEA,eAAe,sBACb,IACA,MACA,KACA,SACkB;AAClB,MAAI,CAAC,QAAS,QAAO,GAAG,MAAM,GAAG;AAEjC,MAAI;AACJ,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,MACxB,GAAG,MAAM,GAAG;AAAA,MACZ,IAAI,QAAe,CAAC,GAAG,WAAW;AAChC,wBAAgB;AAAA,UACd,MAAM,OAAO,IAAI,MAAM,0BAA0B,OAAO,IAAI,CAAC;AAAA,UAC7D;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH,UAAE;AACA,QAAI,eAAe;AACjB,mBAAa,aAAa;AAAA,IAC5B;AAAA,EACF;AACF;AAUA,SAAS,iBACP,QACA,MAC+D;AAC/D,QAAM,MACJ,OAAO,OAAO,YAAY,aACtB,OAAO,QAAQ,IAAI,IACnB,OAAO;AACb,QAAM,UAAU,OAAO,WAAW;AAClC,QAAM,MAAM,OAAO;AACnB,QAAM,MAAM,OAAO,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG,OAAO,IAAI,IAAI;AAE7D,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,CAAC,OAAqB,QAAgB,WAAyB;AACxE,UACE,SACA,YAAY,SACX,MAA+B,QAChC;AACA,eAAO,IAAI,MAAM,8BAA8B,OAAO,OAAO,GAAG,EAAE,CAAC;AACnE;AAAA,MACF;AACA,YAAM,WACJ,SAAS,UAAU,QACf,OAAO,MAAM,SAAS,WACpB,MAAM,OACN,IACF;AACN,cAAQ,EAAE,QAAQ,QAAQ,SAAS,CAAC;AAAA,IACtC;AAEA,QAAI,OAAO,OAAO;AAChB,WAAK,KAAK,EAAE,KAAK,KAAK,QAAQ,GAAG,EAAE;AACnC;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,MAAM,KAAK;AAC7B,UAAM,OAAO,MAAM,CAAC;AACpB,UAAM,WAAW,MAAM,MAAM,CAAC;AAC9B,aAAS,MAAM,UAAU,EAAE,KAAK,KAAK,QAAQ,GAAG,EAAE;AAAA,EACpD,CAAC;AACH;",
+  "names": []
+}

package/dist/actions/executors/mcp.d.ts

@@ -0,0 +1,28 @@
+import type { BridgeMcpSchemaBudget } from '../../capabilities/types.js';
+import { OctoFlowError } from '../../domain/errors/base.js';
+import type { ActionContext, ActionMcpExecutor } from '../types.js';
+export declare class McpCallTimeoutError extends OctoFlowError {
+    readonly server: string;
+    readonly tool: string;
+    readonly timeoutMs: number;
+    constructor(params: {
+        server: string;
+        tool: string;
+        timeoutMs: number;
+    });
+}
+export interface McpExecutorOptions {
+    readonly server: string;
+    readonly tool: string;
+    readonly invoke: (args: Record<string, unknown>, ctx: ActionContext) => Promise<unknown>;
+    readonly timeoutMs?: number;
+    readonly schemaBudget?: BridgeMcpSchemaBudget;
+}
+/**
+ * Factory for MCP action executors. Returned object is an `ActionMcpExecutor`
+ * whose `{server, tool}` fields become the authoritative audit record used by
+ * observability and approval gates.
+ */
+export declare function mcpExecutor(opts: McpExecutorOptions): ActionMcpExecutor;
+export declare function executeMcpAction(executor: ActionMcpExecutor, args: Record<string, unknown>, ctx: ActionContext): Promise<unknown>;
+//# sourceMappingURL=mcp.d.ts.map

package/dist/actions/executors/mcp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../../../src/actions/executors/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEpE,qBAAa,mBAAoB,SAAQ,aAAa;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE;CAWxE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,CACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,iBAAiB,CASvE;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,iBAAiB,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,OAAO,CAAC,CAgClB"}

package/dist/actions/executors/mcp.js

@@ -0,0 +1,62 @@
+import { OctoFlowError } from "../../domain/errors/base.js";
+class McpCallTimeoutError extends OctoFlowError {
+  server;
+  tool;
+  timeoutMs;
+  constructor(params) {
+    super(
+      "MCP_CALL_TIMEOUT",
+      `MCP tool ${params.server}:${params.tool} timed out after ${params.timeoutMs}ms`,
+      { server: params.server, tool: params.tool, timeoutMs: params.timeoutMs }
+    );
+    this.name = "McpCallTimeoutError";
+    this.server = params.server;
+    this.tool = params.tool;
+    this.timeoutMs = params.timeoutMs;
+  }
+}
+function mcpExecutor(opts) {
+  return {
+    type: "mcp",
+    server: opts.server,
+    tool: opts.tool,
+    invoke: opts.invoke,
+    timeoutMs: opts.timeoutMs,
+    schemaBudget: opts.schemaBudget
+  };
+}
+async function executeMcpAction(executor, args, ctx) {
+  const timeoutMs = executor.timeoutMs;
+  if (!timeoutMs || timeoutMs <= 0) {
+    return executor.invoke(args, ctx);
+  }
+  const controller = new AbortController();
+  let timer = null;
+  const timeoutPromise = new Promise((_, reject) => {
+    timer = setTimeout(() => {
+      controller.abort();
+      reject(
+        new McpCallTimeoutError({
+          server: executor.server,
+          tool: executor.tool,
+          timeoutMs
+        })
+      );
+    }, timeoutMs);
+  });
+  const ctxWithSignal = { ...ctx, signal: controller.signal };
+  try {
+    return await Promise.race([
+      executor.invoke(args, ctxWithSignal),
+      timeoutPromise
+    ]);
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+export {
+  McpCallTimeoutError,
+  executeMcpAction,
+  mcpExecutor
+};
+//# sourceMappingURL=mcp.js.map

package/dist/actions/executors/mcp.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/actions/executors/mcp.ts"],
+  "sourcesContent": ["import type { BridgeMcpSchemaBudget } from '../../capabilities/types.js';\nimport { OctoFlowError } from '../../domain/errors/base.js';\nimport type { ActionContext, ActionMcpExecutor } from '../types.js';\n\nexport class McpCallTimeoutError extends OctoFlowError {\n  readonly server: string;\n  readonly tool: string;\n  readonly timeoutMs: number;\n\n  constructor(params: { server: string; tool: string; timeoutMs: number }) {\n    super(\n      'MCP_CALL_TIMEOUT',\n      `MCP tool ${params.server}:${params.tool} timed out after ${params.timeoutMs}ms`,\n      { server: params.server, tool: params.tool, timeoutMs: params.timeoutMs }\n    );\n    this.name = 'McpCallTimeoutError';\n    this.server = params.server;\n    this.tool = params.tool;\n    this.timeoutMs = params.timeoutMs;\n  }\n}\n\nexport interface McpExecutorOptions {\n  readonly server: string;\n  readonly tool: string;\n  readonly invoke: (\n    args: Record<string, unknown>,\n    ctx: ActionContext\n  ) => Promise<unknown>;\n  readonly timeoutMs?: number;\n  readonly schemaBudget?: BridgeMcpSchemaBudget;\n}\n\n/**\n * Factory for MCP action executors. Returned object is an `ActionMcpExecutor`\n * whose `{server, tool}` fields become the authoritative audit record used by\n * observability and approval gates.\n */\nexport function mcpExecutor(opts: McpExecutorOptions): ActionMcpExecutor {\n  return {\n    type: 'mcp',\n    server: opts.server,\n    tool: opts.tool,\n    invoke: opts.invoke,\n    timeoutMs: opts.timeoutMs,\n    schemaBudget: opts.schemaBudget,\n  };\n}\n\nexport async function executeMcpAction(\n  executor: ActionMcpExecutor,\n  args: Record<string, unknown>,\n  ctx: ActionContext\n): Promise<unknown> {\n  const timeoutMs = executor.timeoutMs;\n  if (!timeoutMs || timeoutMs <= 0) {\n    return executor.invoke(args, ctx);\n  }\n\n  const controller = new AbortController();\n  let timer: ReturnType<typeof setTimeout> | null = null;\n\n  const timeoutPromise = new Promise<never>((_, reject) => {\n    timer = setTimeout(() => {\n      controller.abort();\n      reject(\n        new McpCallTimeoutError({\n          server: executor.server,\n          tool: executor.tool,\n          timeoutMs,\n        })\n      );\n    }, timeoutMs);\n  });\n\n  const ctxWithSignal: ActionContext = { ...ctx, signal: controller.signal };\n\n  try {\n    return await Promise.race([\n      executor.invoke(args, ctxWithSignal),\n      timeoutPromise,\n    ]);\n  } finally {\n    if (timer) clearTimeout(timer);\n  }\n}\n"],
+  "mappings": "AACA,SAAS,qBAAqB;AAGvB,MAAM,4BAA4B,cAAc;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,QAA6D;AACvE;AAAA,MACE;AAAA,MACA,YAAY,OAAO,MAAM,IAAI,OAAO,IAAI,oBAAoB,OAAO,SAAS;AAAA,MAC5E,EAAE,QAAQ,OAAO,QAAQ,MAAM,OAAO,MAAM,WAAW,OAAO,UAAU;AAAA,IAC1E;AACA,SAAK,OAAO;AACZ,SAAK,SAAS,OAAO;AACrB,SAAK,OAAO,OAAO;AACnB,SAAK,YAAY,OAAO;AAAA,EAC1B;AACF;AAkBO,SAAS,YAAY,MAA6C;AACvE,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,WAAW,KAAK;AAAA,IAChB,cAAc,KAAK;AAAA,EACrB;AACF;AAEA,eAAsB,iBACpB,UACA,MACA,KACkB;AAClB,QAAM,YAAY,SAAS;AAC3B,MAAI,CAAC,aAAa,aAAa,GAAG;AAChC,WAAO,SAAS,OAAO,MAAM,GAAG;AAAA,EAClC;AAEA,QAAM,aAAa,IAAI,gBAAgB;AACvC,MAAI,QAA8C;AAElD,QAAM,iBAAiB,IAAI,QAAe,CAAC,GAAG,WAAW;AACvD,YAAQ,WAAW,MAAM;AACvB,iBAAW,MAAM;AACjB;AAAA,QACE,IAAI,oBAAoB;AAAA,UACtB,QAAQ,SAAS;AAAA,UACjB,MAAM,SAAS;AAAA,UACf;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,GAAG,SAAS;AAAA,EACd,CAAC;AAED,QAAM,gBAA+B,EAAE,GAAG,KAAK,QAAQ,WAAW,OAAO;AAEzE,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,MACxB,SAAS,OAAO,MAAM,aAAa;AAAA,MACnC;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AACA,QAAI,MAAO,cAAa,KAAK;AAAA,EAC/B;AACF;",
+  "names": []
+}

package/dist/actions/handoff.d.ts

@@ -0,0 +1,3 @@
+import type { ActionDefinition } from './types.js';
+export declare function createHandoffAction(source?: string): ActionDefinition;
+//# sourceMappingURL=handoff.d.ts.map

package/dist/actions/handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.d.ts","sourceRoot":"","sources":["../../src/actions/handoff.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,MAAM,SAAU,GAAG,gBAAgB,CAiCtE"}

package/dist/actions/handoff.js

@@ -0,0 +1,49 @@
+import { OctoFlowError } from "../domain/errors/index.js";
+import { defineAction } from "./define.js";
+function createHandoffAction(source = "swarm") {
+  return defineAction({
+    name: "handoff",
+    description: "Send a task handoff to another swarm peer.",
+    parameters: {
+      type: "object",
+      properties: {
+        target: {
+          type: "string",
+          description: "Peer name to receive the handoff."
+        },
+        message: {
+          type: "string",
+          description: "Complete handoff message for the target peer."
+        }
+      },
+      required: ["target", "message"]
+    },
+    tags: ["swarm", "handoff"],
+    execute: async (args, ctx) => {
+      const target = readString(args, "target");
+      const message = readString(args, "message");
+      const mesh = ctx.bridge.packMesh;
+      if (!mesh) {
+        throw new OctoFlowError(
+          "HANDOFF_REQUIRES_MESH",
+          "The handoff action requires a PackMesh and is only auto-registered for swarm agents.",
+          { target }
+        );
+      }
+      return mesh.request(source, target, message);
+    }
+  });
+}
+function readString(args, key) {
+  const value = args[key];
+  if (typeof value !== "string" || value.length === 0) {
+    throw new Error(
+      `[octoflow] handoff: \`${key}\` must be a non-empty string`
+    );
+  }
+  return value;
+}
+export {
+  createHandoffAction
+};
+//# sourceMappingURL=handoff.js.map

package/dist/actions/handoff.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/actions/handoff.ts"],
+  "sourcesContent": ["import { OctoFlowError } from '../domain/errors/index.js';\nimport { defineAction } from './define.js';\nimport type { ActionDefinition } from './types.js';\n\nexport function createHandoffAction(source = 'swarm'): ActionDefinition {\n  return defineAction({\n    name: 'handoff',\n    description: 'Send a task handoff to another swarm peer.',\n    parameters: {\n      type: 'object',\n      properties: {\n        target: {\n          type: 'string',\n          description: 'Peer name to receive the handoff.',\n        },\n        message: {\n          type: 'string',\n          description: 'Complete handoff message for the target peer.',\n        },\n      },\n      required: ['target', 'message'],\n    },\n    tags: ['swarm', 'handoff'],\n    execute: async (args, ctx) => {\n      const target = readString(args, 'target');\n      const message = readString(args, 'message');\n      const mesh = ctx.bridge.packMesh;\n      if (!mesh) {\n        throw new OctoFlowError(\n          'HANDOFF_REQUIRES_MESH',\n          'The handoff action requires a PackMesh and is only auto-registered for swarm agents.',\n          { target }\n        );\n      }\n      return mesh.request(source, target, message);\n    },\n  });\n}\n\nfunction readString(args: Record<string, unknown>, key: string): string {\n  const value = args[key];\n  if (typeof value !== 'string' || value.length === 0) {\n    throw new Error(\n      `[octoflow] handoff: \\`${key}\\` must be a non-empty string`\n    );\n  }\n  return value;\n}\n"],
+  "mappings": "AAAA,SAAS,qBAAqB;AAC9B,SAAS,oBAAoB;AAGtB,SAAS,oBAAoB,SAAS,SAA2B;AACtE,SAAO,aAAa;AAAA,IAClB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,YAAY;AAAA,MACV,MAAM;AAAA,MACN,YAAY;AAAA,QACV,QAAQ;AAAA,UACN,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,QACA,SAAS;AAAA,UACP,MAAM;AAAA,UACN,aAAa;AAAA,QACf;AAAA,MACF;AAAA,MACA,UAAU,CAAC,UAAU,SAAS;AAAA,IAChC;AAAA,IACA,MAAM,CAAC,SAAS,SAAS;AAAA,IACzB,SAAS,OAAO,MAAM,QAAQ;AAC5B,YAAM,SAAS,WAAW,MAAM,QAAQ;AACxC,YAAM,UAAU,WAAW,MAAM,SAAS;AAC1C,YAAM,OAAO,IAAI,OAAO;AACxB,UAAI,CAAC,MAAM;AACT,cAAM,IAAI;AAAA,UACR;AAAA,UACA;AAAA,UACA,EAAE,OAAO;AAAA,QACX;AAAA,MACF;AACA,aAAO,KAAK,QAAQ,QAAQ,QAAQ,OAAO;AAAA,IAC7C;AAAA,EACF,CAAC;AACH;AAEA,SAAS,WAAW,MAA+B,KAAqB;AACtE,QAAM,QAAQ,KAAK,GAAG;AACtB,MAAI,OAAO,UAAU,YAAY,MAAM,WAAW,GAAG;AACnD,UAAM,IAAI;AAAA,MACR,yBAAyB,GAAG;AAAA,IAC9B;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": []
+}

package/dist/actions/index.d.ts

@@ -0,0 +1,9 @@
+export type { BridgeActionPort } from './bridge-action-port.js';
+export type { DefineActionOptions } from './define.js';
+export { defineAction } from './define.js';
+export { executeAction } from './executor.js';
+export { createHandoffAction } from './handoff.js';
+export type { ActionRegistryOptions } from './registry.js';
+export { ActionRegistry } from './registry.js';
+export type { ActionCliExecutor, ActionContext, ActionDefinition, ActionExample, ActionExecutor, ActionFunctionExecutor, ActionMcpExecutor, ActionPolicy, ActionPolicyRule, ActionResult, BuiltinActionsConfig, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,YAAY,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,GACrB,MAAM,YAAY,CAAC"}

package/dist/actions/index.js

@@ -0,0 +1,11 @@
+import { defineAction } from "./define.js";
+import { executeAction } from "./executor.js";
+import { createHandoffAction } from "./handoff.js";
+import { ActionRegistry } from "./registry.js";
+export {
+  ActionRegistry,
+  createHandoffAction,
+  defineAction,
+  executeAction
+};
+//# sourceMappingURL=index.js.map

package/dist/actions/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/actions/index.ts"],
+  "sourcesContent": ["export type { BridgeActionPort } from './bridge-action-port.js';\nexport type { DefineActionOptions } from './define.js';\nexport { defineAction } from './define.js';\nexport { executeAction } from './executor.js';\nexport { createHandoffAction } from './handoff.js';\nexport type { ActionRegistryOptions } from './registry.js';\nexport { ActionRegistry } from './registry.js';\nexport type {\n  ActionCliExecutor,\n  ActionContext,\n  ActionDefinition,\n  ActionExample,\n  ActionExecutor,\n  ActionFunctionExecutor,\n  ActionMcpExecutor,\n  ActionPolicy,\n  ActionPolicyRule,\n  ActionResult,\n  BuiltinActionsConfig,\n} from './types.js';\n"],
+  "mappings": "AAEA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,2BAA2B;AAEpC,SAAS,sBAAsB;",
+  "names": []
+}

package/dist/actions/registry.d.ts

@@ -0,0 +1,28 @@
+import type { BackendToolDef } from '../domain/contracts/backends.js';
+import type { ActionDefinition } from './types.js';
+export interface ActionRegistryOptions {
+    /**
+     * Duplicate action names default to warn-and-overwrite for compatibility.
+     * Use 'throw' when assembling a registry from multiple plugin/tool sources
+     * where duplicate ownership should fail fast.
+     */
+    duplicateNames?: 'warn-overwrite' | 'throw';
+}
+/**
+ * Name-indexed action store with conversion helpers for the tool delivery pipeline.
+ */
+export declare class ActionRegistry {
+    private readonly actions;
+    private readonly duplicateNames;
+    constructor(options?: ActionRegistryOptions);
+    register(action: ActionDefinition): void;
+    unregister(name: string): boolean;
+    get(name: string): ActionDefinition | undefined;
+    has(name: string): boolean;
+    all(): ActionDefinition[];
+    names(): string[];
+    size(): number;
+    /** Convert registered actions to BackendToolDef[] for API backend tool delivery. */
+    toBackendToolDefs(): BackendToolDef[];
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/actions/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/actions/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,cAAc,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC;CAC7C;AAED;;GAEG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,QAAQ,CAAC,cAAc,CAE7B;gBAEU,OAAO,GAAE,qBAA0B;IAI/C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAiBxC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS;IAI/C,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B,GAAG,IAAI,gBAAgB,EAAE;IAIzB,KAAK,IAAI,MAAM,EAAE;IAIjB,IAAI,IAAI,MAAM;IAId,oFAAoF;IACpF,iBAAiB,IAAI,cAAc,EAAE;CAOtC"}

package/dist/actions/registry.js

@@ -0,0 +1,51 @@
+class ActionRegistry {
+  actions = /* @__PURE__ */ new Map();
+  duplicateNames;
+  constructor(options = {}) {
+    this.duplicateNames = options.duplicateNames ?? "warn-overwrite";
+  }
+  register(action) {
+    if (!action.name) {
+      throw new Error("[octoflow] ActionRegistry: action name is required");
+    }
+    if (this.actions.has(action.name)) {
+      const message = `[octoflow] ActionRegistry: action "${action.name}" is being overwritten. Two packages define an action with the same name \u2014 the latest wins. Canonical ownership rules require unique action names.`;
+      if (this.duplicateNames === "throw") {
+        throw new Error(message);
+      }
+      process.stderr.write(`${message}
+`);
+    }
+    this.actions.set(action.name, action);
+  }
+  unregister(name) {
+    return this.actions.delete(name);
+  }
+  get(name) {
+    return this.actions.get(name);
+  }
+  has(name) {
+    return this.actions.has(name);
+  }
+  all() {
+    return [...this.actions.values()];
+  }
+  names() {
+    return [...this.actions.keys()];
+  }
+  size() {
+    return this.actions.size;
+  }
+  /** Convert registered actions to BackendToolDef[] for API backend tool delivery. */
+  toBackendToolDefs() {
+    return this.all().map((a) => ({
+      name: a.name,
+      description: a.description,
+      schema: a.parameters
+    }));
+  }
+}
+export {
+  ActionRegistry
+};
+//# sourceMappingURL=registry.js.map

package/dist/actions/registry.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/actions/registry.ts"],
+  "sourcesContent": ["import type { BackendToolDef } from '../domain/contracts/backends.js';\nimport type { ActionDefinition } from './types.js';\n\nexport interface ActionRegistryOptions {\n  /**\n   * Duplicate action names default to warn-and-overwrite for compatibility.\n   * Use 'throw' when assembling a registry from multiple plugin/tool sources\n   * where duplicate ownership should fail fast.\n   */\n  duplicateNames?: 'warn-overwrite' | 'throw';\n}\n\n/**\n * Name-indexed action store with conversion helpers for the tool delivery pipeline.\n */\nexport class ActionRegistry {\n  private readonly actions = new Map<string, ActionDefinition>();\n  private readonly duplicateNames: NonNullable<\n    ActionRegistryOptions['duplicateNames']\n  >;\n\n  constructor(options: ActionRegistryOptions = {}) {\n    this.duplicateNames = options.duplicateNames ?? 'warn-overwrite';\n  }\n\n  register(action: ActionDefinition): void {\n    if (!action.name) {\n      throw new Error('[octoflow] ActionRegistry: action name is required');\n    }\n    if (this.actions.has(action.name)) {\n      const message =\n        `[octoflow] ActionRegistry: action \"${action.name}\" is being overwritten. ` +\n        'Two packages define an action with the same name \u2014 the latest wins. ' +\n        'Canonical ownership rules require unique action names.';\n      if (this.duplicateNames === 'throw') {\n        throw new Error(message);\n      }\n      process.stderr.write(`${message}\\n`);\n    }\n    this.actions.set(action.name, action);\n  }\n\n  unregister(name: string): boolean {\n    return this.actions.delete(name);\n  }\n\n  get(name: string): ActionDefinition | undefined {\n    return this.actions.get(name);\n  }\n\n  has(name: string): boolean {\n    return this.actions.has(name);\n  }\n\n  all(): ActionDefinition[] {\n    return [...this.actions.values()];\n  }\n\n  names(): string[] {\n    return [...this.actions.keys()];\n  }\n\n  size(): number {\n    return this.actions.size;\n  }\n\n  /** Convert registered actions to BackendToolDef[] for API backend tool delivery. */\n  toBackendToolDefs(): BackendToolDef[] {\n    return this.all().map((a) => ({\n      name: a.name,\n      description: a.description,\n      schema: a.parameters,\n    }));\n  }\n}\n"],
+  "mappings": "AAeO,MAAM,eAAe;AAAA,EACT,UAAU,oBAAI,IAA8B;AAAA,EAC5C;AAAA,EAIjB,YAAY,UAAiC,CAAC,GAAG;AAC/C,SAAK,iBAAiB,QAAQ,kBAAkB;AAAA,EAClD;AAAA,EAEA,SAAS,QAAgC;AACvC,QAAI,CAAC,OAAO,MAAM;AAChB,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACtE;AACA,QAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,GAAG;AACjC,YAAM,UACJ,sCAAsC,OAAO,IAAI;AAGnD,UAAI,KAAK,mBAAmB,SAAS;AACnC,cAAM,IAAI,MAAM,OAAO;AAAA,MACzB;AACA,cAAQ,OAAO,MAAM,GAAG,OAAO;AAAA,CAAI;AAAA,IACrC;AACA,SAAK,QAAQ,IAAI,OAAO,MAAM,MAAM;AAAA,EACtC;AAAA,EAEA,WAAW,MAAuB;AAChC,WAAO,KAAK,QAAQ,OAAO,IAAI;AAAA,EACjC;AAAA,EAEA,IAAI,MAA4C;AAC9C,WAAO,KAAK,QAAQ,IAAI,IAAI;AAAA,EAC9B;AAAA,EAEA,IAAI,MAAuB;AACzB,WAAO,KAAK,QAAQ,IAAI,IAAI;AAAA,EAC9B;AAAA,EAEA,MAA0B;AACxB,WAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC;AAAA,EAClC;AAAA,EAEA,QAAkB;AAChB,WAAO,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC;AAAA,EAChC;AAAA,EAEA,OAAe;AACb,WAAO,KAAK,QAAQ;AAAA,EACtB;AAAA;AAAA,EAGA,oBAAsC;AACpC,WAAO,KAAK,IAAI,EAAE,IAAI,CAAC,OAAO;AAAA,MAC5B,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,QAAQ,EAAE;AAAA,IACZ,EAAE;AAAA,EACJ;AACF;",
+  "names": []
+}

package/dist/actions/types.d.ts

@@ -0,0 +1,139 @@
+import type { BridgeMcpSchemaBudget } from '../capabilities/types.js';
+import type { BackendName } from '../domain/core-client.js';
+import type { BridgeActionPort } from './bridge-action-port.js';
+export interface ActionFunctionExecutor {
+    readonly type: 'function';
+    readonly fn: (args: Record<string, unknown>, ctx: ActionContext) => Promise<unknown>;
+}
+export interface ActionCliExecutor {
+    readonly type: 'cli';
+    readonly command: string | ((args: Record<string, unknown>) => string);
+    readonly cwd?: string;
+    readonly timeout?: number;
+    readonly env?: Record<string, string>;
+    readonly shell?: boolean;
+}
+export interface ActionMcpExecutor {
+    readonly type: 'mcp';
+    readonly server: string;
+    readonly tool: string;
+    readonly invoke: (args: Record<string, unknown>, ctx: ActionContext) => Promise<unknown>;
+    readonly timeoutMs?: number;
+    /** Schema-trim budget carried from the per-server config for prompt-injected delivery. */
+    readonly schemaBudget?: BridgeMcpSchemaBudget;
+}
+export type ActionExecutor = ActionFunctionExecutor | ActionCliExecutor | ActionMcpExecutor;
+/**
+ * A worked example of a single tool invocation. Used both as documentation
+ * and, when serialized into the tool definition, as additional context the
+ * model can pattern-match against (see Anthropic's `input_examples`).
+ */
+export interface ActionExample {
+    /** Short label describing the scenario. */
+    readonly title?: string;
+    /** Free-form prose explaining when and why this example applies. */
+    readonly description?: string;
+    /** Concrete input arguments that satisfy `parameters`. */
+    readonly input: Record<string, unknown>;
+    /** Optional sample output for documentation only. */
+    readonly output?: unknown;
+}
+export interface ActionDefinition {
+    readonly name: string;
+    readonly description: string;
+    readonly parameters: Record<string, unknown>;
+    readonly executor: ActionExecutor;
+    readonly requireApproval?: boolean;
+    readonly permission?: 'allow' | 'deny' | 'ask';
+    readonly tags?: readonly string[];
+    readonly timeout?: number;
+    readonly metadata?: Record<string, unknown>;
+    /**
+     * Opt-in: ask the backend to enforce strict JSON-schema conformance on tool
+     * arguments (Anthropic `strict: true`, OpenAI strict tools). Backends that
+     * do not support strict mode SHOULD ignore this flag.
+     */
+    readonly strict?: boolean;
+    /**
+     * Optional JSON-schema description of the value returned by `execute`.
+     * Surfaced through MCP, AI SDK, and bridge transports for clients that
+     * can parse structured tool output.
+     */
+    readonly outputSchema?: Record<string, unknown>;
+    /**
+     * Worked input examples passed alongside the schema to teach the model
+     * about format-sensitive arguments. Mirrors Anthropic's `input_examples`.
+     */
+    readonly inputExamples?: readonly ActionExample[];
+    /**
+     * Long-form usage notes — anything that would not fit cleanly in the
+     * one-line `description` (when/when-not, performance traits, side
+     * effects, error modes). Free-form prose, not part of the prompt
+     * surface by default; transports may opt into including it.
+     */
+    readonly usageNotes?: string;
+    /**
+     * Optional richer narrative description. When provided, transports MAY
+     * substitute this for `description` when the model has room (e.g. a
+     * dedicated catalog page or tool-discovery channel).
+     */
+    readonly longDescription?: string;
+}
+export interface ActionContext {
+    readonly taskId: string;
+    readonly contextId: string;
+    readonly backend: BackendName;
+    readonly signal?: AbortSignal;
+    readonly tenant?: string;
+    readonly bridge: BridgeActionPort;
+}
+export interface ActionResult {
+    readonly actionName: string;
+    readonly output: unknown;
+    readonly durationMs: number;
+    readonly error?: {
+        readonly name: string;
+        readonly message: string;
+    };
+    /**
+     * Optional hint carried from the action handler to the transport wrapper
+     * (tool-executor / LangGraph ToolNode) — consumed to tag downstream
+     * HistoryEntry / ToolMessage with compaction-protection metadata.
+     */
+    readonly meta?: ActionResultMeta;
+}
+export interface ActionResultMeta {
+    readonly skillProtected?: boolean;
+    readonly skillName?: string;
+    readonly source?: 'skill' | 'action' | 'user';
+}
+export interface ActionPolicyRule {
+    readonly match: {
+        readonly name?: string | RegExp;
+        readonly tags?: readonly string[];
+    };
+    readonly permission: 'allow' | 'deny' | 'ask';
+}
+export interface ActionPolicy {
+    readonly defaultPermission?: 'allow' | 'deny' | 'ask';
+    readonly rules?: readonly ActionPolicyRule[];
+}
+export interface BuiltinActionsConfig {
+    /** Enable OAuth auth actions (default: false — opt-in). */
+    readonly auth?: boolean;
+    /** Enable backend/budget observability actions (default: false — opt-in). */
+    readonly observability?: boolean;
+    /** Enable task lookup actions: get_task, list_tasks (default: true). */
+    readonly tasks?: boolean;
+    /** Reserved for future approval tools. */
+    readonly approval?: boolean;
+    /** Enable the cross-platform `bash` action (default: true; approval-gated unless bash security is explicitly disabled). */
+    readonly bash?: boolean;
+    /** Enable the `tmux_exec` action for tmux-isolated runs (default: false — opt-in). */
+    readonly tmux?: boolean;
+    /** Enable the smart `filesystem` action (default: true). */
+    readonly files?: boolean;
+    /** Enable the default `web_fetch` action (default: true). */
+    readonly web?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/actions/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/actions/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,CACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,OAAO,CAAC,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,CACf,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,aAAa,KACf,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,YAAY,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,iBAAiB,GACjB,iBAAiB,CAAC;AAEtB;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,oEAAoE;IACpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrE;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;CAC/C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,oBAAoB;IACnC,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,0CAA0C;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,2HAA2H;IAC3H,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,sFAAsF;IACtF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;CACxB"}

package/dist/actions/types.js

@@ -0,0 +1 @@
+//# sourceMappingURL=types.js.map

package/dist/actions/types.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [],
+  "mappings": "",
+  "names": []
+}

package/dist/adapters/agents/agent-client-helpers.d.ts

@@ -0,0 +1,5 @@
+import type { Backend, BackendRunRequest } from '../../domain/contracts/backends.js';
+import type { AgentClientOptions } from '../../domain/core-client.js';
+import type { BackendRunOptions } from './internal-run-options.js';
+export declare function buildAgentBackendRunRequest(opts: AgentClientOptions, backend: Backend, prompt: string, callOpts?: BackendRunOptions, sessionId?: string | null, isResume?: boolean, runtimePolicy?: BackendRunRequest['runtimePolicy']): BackendRunRequest;
+//# sourceMappingURL=agent-client-helpers.d.ts.map