orbitx 0.3.0 → 0.3.2

package/dist/tests/core/mcp-auto-execution-policy.test.js

@@ -0,0 +1,107 @@
+import { test, describe } from "node:test";
+import assert from "node:assert/strict";
+import { MCPAutoExecutionPolicy } from "../../index.js";
+import { ScriptedProvider } from "./scripted-provider.js";
+const request = (overrides = {}) => ({
+    toolName: "bash-run",
+    inputs: { command: "rm -rf /" },
+    envID: "env",
+    toolCallId: "call-1",
+    ...overrides,
+});
+describe("core/mcp-auto-execution-policy", () => {
+    test("authorize(): an unwatched tool is authorized immediately, no model call, no verdict recorded", async () => {
+        const provider = new ScriptedProvider("p", () => ({ content: "should never be called" }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider });
+        const authorized = await policy.authorize(request({ toolName: "get-current-time", inputs: {}, toolCallId: "call-time" }));
+        assert.strictEqual(authorized, true);
+        assert.strictEqual(provider.getCallCount(), 0);
+        assert.strictEqual(policy.getVerdict("call-time"), undefined);
+    });
+    test("authorize(): bash-run always goes to the model — no path field to short-circuit on", async () => {
+        const provider = new ScriptedProvider("p", () => ({
+            toolCalls: [{ name: "submit_answer", inputs: { harmful: true, reason: "destroys the filesystem" } }],
+        }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider });
+        const authorized = await policy.authorize(request());
+        assert.strictEqual(authorized, false);
+        assert.strictEqual(provider.getCallCount(), 1);
+    });
+    test("authorize(): a watched fs call whose path resolves inside scope is authorized locally, no model call", async () => {
+        const provider = new ScriptedProvider("p", () => ({ content: "should never be called" }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, scopeDir: process.cwd() });
+        const authorized = await policy.authorize(request({
+            toolName: "fs-write-file",
+            inputs: { path: "some/nested/file.txt", content: "hello" },
+            toolCallId: "call-write-in-scope",
+        }));
+        assert.strictEqual(authorized, true);
+        assert.strictEqual(provider.getCallCount(), 0);
+        assert.strictEqual(policy.getVerdict("call-write-in-scope").harmful, false);
+        assert.match(policy.getVerdict("call-write-in-scope").reason, /skipped model review/);
+    });
+    test("authorize(): a watched fs call whose path resolves outside scope escalates to the model", async () => {
+        const provider = new ScriptedProvider("p", () => ({
+            toolCalls: [{ name: "submit_answer", inputs: { harmful: true, reason: "writes outside the project" } }],
+        }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, scopeDir: process.cwd() });
+        const authorized = await policy.authorize(request({
+            toolName: "fs-write-file",
+            inputs: { path: "../../outside.txt", content: "hello" },
+        }));
+        assert.strictEqual(authorized, false);
+        assert.strictEqual(provider.getCallCount(), 1);
+    });
+    test("authorize(): fs-move requires BOTH from and to inside scope to skip the model", async () => {
+        const provider = new ScriptedProvider("p", () => ({
+            toolCalls: [{ name: "submit_answer", inputs: { harmful: false, reason: "fine" } }],
+        }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, scopeDir: process.cwd() });
+        await policy.authorize(request({
+            toolName: "fs-move",
+            inputs: { from: "in-scope.txt", to: "../outside.txt" },
+        }));
+        assert.strictEqual(provider.getCallCount(), 1, "one path outside scope forces a model review");
+    });
+    test("authorize(): file content is stripped before it ever reaches the model", async () => {
+        let seenPrompt = "";
+        const provider = new ScriptedProvider("p", ({ messages }) => {
+            seenPrompt = messages.at(-1)?.content ?? "";
+            return { toolCalls: [{ name: "submit_answer", inputs: { harmful: false, reason: "fine" } }] };
+        });
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, scopeDir: "/some/other/scope" });
+        await policy.authorize(request({
+            toolName: "fs-write-file",
+            inputs: { path: "secrets.txt", content: "super-secret-password-do-not-leak-this" },
+        }));
+        assert.doesNotMatch(seenPrompt, /super-secret-password-do-not-leak-this/);
+        assert.match(seenPrompt, /omitted, \d+ bytes/);
+    });
+    test("getVerdict() / getLastVerdict() / onVerdict expose the reviewed verdict", async () => {
+        const provider = new ScriptedProvider("p", () => ({
+            toolCalls: [{ name: "submit_answer", inputs: { harmful: true, reason: "irreversible deletion" } }],
+        }));
+        const calls = [];
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, onVerdict: (request, verdict) => calls.push({ request, verdict }) });
+        await policy.authorize(request({ toolCallId: "call-42" }));
+        assert.deepStrictEqual(policy.getVerdict("call-42"), { harmful: true, reason: "irreversible deletion" });
+        assert.deepStrictEqual(policy.getLastVerdict(), { harmful: true, reason: "irreversible deletion" });
+        assert.strictEqual(calls.length, 1);
+    });
+    test("authorize(): fails closed (denies) when the safety check itself can't produce a valid verdict", async () => {
+        const provider = new ScriptedProvider("p", () => ({ content: "I refuse to answer in JSON" }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider });
+        const authorized = await policy.authorize(request());
+        assert.strictEqual(authorized, false);
+        assert.strictEqual(policy.getVerdict("call-1").harmful, true);
+    });
+    test("watchedTools: a custom set overrides the default", async () => {
+        const provider = new ScriptedProvider("p", () => ({
+            toolCalls: [{ name: "submit_answer", inputs: { harmful: true, reason: "not allowed at all" } }],
+        }));
+        const policy = new MCPAutoExecutionPolicy({ aiModel: provider, watchedTools: ["todo-remove-list"] });
+        assert.strictEqual(await policy.authorize(request({ toolName: "bash-run" })), true, "bash-run isn't watched anymore");
+        assert.strictEqual(await policy.authorize(request({ toolName: "todo-remove-list", inputs: {} })), false);
+    });
+});
+//# sourceMappingURL=mcp-auto-execution-policy.test.js.map

package/dist/tests/core/mcp-auto-execution-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-auto-execution-policy.test.js","sourceRoot":"","sources":["../../../src/tests/core/mcp-auto-execution-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,sBAAsB,EAA2B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,MAAM,OAAO,GAAG,CAAC,YAAyC,EAAE,EAAsB,EAAE,CAAC,CAAC;IAClF,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;IAC/B,KAAK,EAAE,KAAK;IACZ,UAAU,EAAE,QAAQ;IACpB,GAAG,SAAS;CACf,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC5C,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAE1H,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,CAAC;SACvG,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE1F,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE;YAC1D,UAAU,EAAE,qBAAqB;SACpC,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAE,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,EAAE,CAAC;SAC1G,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE1F,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YAC9C,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE;SAC1D,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;SACrF,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAE1F,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YAC3B,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE;SACzD,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,8CAA8C,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxD,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;YAC5C,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAEhG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC;YAC3B,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,wCAAwC,EAAE;SACrF,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,YAAY,CAAC,UAAU,EAAE,wCAAwC,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,EAAE,CAAC;SACrG,CAAC,CAAC,CAAC;QAEJ,MAAM,KAAK,GAAoD,EAAE,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QAEpI,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAE3D,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACzG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACpG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;QAE9F,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAErD,MAAM,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9C,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,EAAE,CAAC;SAClG,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAG,IAAI,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAErG,MAAM,CAAC,WAAW,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;QACtH,MAAM,CAAC,WAAW,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/tests/core/stateless-agent.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stateless-agent.test.d.ts.map

package/dist/tests/core/stateless-agent.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateless-agent.test.d.ts","sourceRoot":"","sources":["../../../src/tests/core/stateless-agent.test.ts"],"names":[],"mappings":""}

package/dist/tests/core/stateless-agent.test.js

@@ -0,0 +1,73 @@
+import { test, describe } from "node:test";
+import assert from "node:assert/strict";
+import { StatelessAgent, GetCurrentTimeTool } from "../../index.js";
+import { ScriptedProvider } from "./scripted-provider.js";
+describe("core/stateless-agent", () => {
+    test("run(): a plain reply with no tool call is one chat() call", async () => {
+        const provider = new ScriptedProvider("p", () => ({ content: "42" }));
+        const agent = new StatelessAgent({ instruction: "answer with a number", aiProvider: provider });
+        const result = await agent.run("what is 6*7?");
+        assert.strictEqual(result.content, "42");
+        assert.deepStrictEqual(result.toolCalls, []);
+        assert.strictEqual(result.usage.length, 1);
+        assert.strictEqual(provider.getCallCount(), 1);
+    });
+    test("run(): a tool call is dispatched inline, still just one chat() call — no automatic follow-up", async () => {
+        const tool = GetCurrentTimeTool();
+        const mcpClient = {
+            getTools: async () => [{ name: tool.getOptions().name, description: tool.getOptions().description, inputs: tool.getOptions().inputs }],
+            callTool: async () => ({ output: { now: "2026-09-08T00:00:00Z" } }),
+        };
+        const provider = new ScriptedProvider("p", () => ({ toolCalls: [{ name: tool.getOptions().name, inputs: {} }] }));
+        const agent = new StatelessAgent({
+            instruction: "answer with the current time",
+            aiProvider: provider,
+            mcpClient,
+            allowedTools: [tool],
+        });
+        const result = await agent.run("what time is it?");
+        assert.strictEqual(result.toolCalls.length, 1);
+        assert.strictEqual(result.toolCalls[0].name, tool.getOptions().name);
+        assert.deepStrictEqual(JSON.parse(result.toolCalls[0].resultText), { now: "2026-09-08T00:00:00Z" });
+        assert.strictEqual(result.usage.length, 1);
+        assert.strictEqual(provider.getCallCount(), 1);
+    });
+    test("run(): messages returned include the tool result, ready to hand back in for a follow-up run()", async () => {
+        const tool = GetCurrentTimeTool();
+        const mcpClient = {
+            getTools: async () => [{ name: tool.getOptions().name, description: tool.getOptions().description, inputs: tool.getOptions().inputs }],
+            callTool: async () => ({ output: { now: "2026-09-08T00:00:00Z" } }),
+        };
+        const provider = new ScriptedProvider("p", [
+            () => ({ toolCalls: [{ name: tool.getOptions().name, inputs: {} }] }),
+            () => ({ content: "it is 2026-09-08" }),
+        ]);
+        const agent = new StatelessAgent({ instruction: "x", aiProvider: provider, mcpClient, allowedTools: [tool] });
+        const first = await agent.run("what time is it?");
+        assert.strictEqual(first.messages.at(-1)?.role, "tool");
+        const second = await agent.run("now answer in plain text", undefined, first.messages);
+        assert.strictEqual(second.content, "it is 2026-09-08");
+        assert.strictEqual(provider.getCallCount(), 2);
+        // second call's messages = first's full history + the new user turn + its own assistant turn
+        assert.strictEqual(second.messages.length, first.messages.length + 2);
+    });
+    test("run(): a tool the model calls that isn't allowed comes back as an error result, not a throw", async () => {
+        const mcpClient = { getTools: async () => [], callTool: async () => ({ output: {} }) };
+        const provider = new ScriptedProvider("p", () => ({ toolCalls: [{ name: "not-allowed", inputs: {} }] }));
+        const agent = new StatelessAgent({ instruction: "x", aiProvider: provider, mcpClient, allowedTools: [] });
+        const result = await agent.run("go");
+        assert.match(result.toolCalls[0].resultText, /not found or not allowed/);
+    });
+    test("constructor: allowedTools without mcpClient is rejected", () => {
+        const provider = new ScriptedProvider("p", () => ({ content: "x" }));
+        assert.throws(() => new StatelessAgent({ instruction: "x", aiProvider: provider, allowedTools: [GetCurrentTimeTool()] }), /mcpClient is required/);
+    });
+    test("run(): two fresh calls on the same instance are independent — no shared history", async () => {
+        const provider = new ScriptedProvider("p", ({ messages }) => ({ content: String(messages.length) }));
+        const agent = new StatelessAgent({ instruction: "x", aiProvider: provider });
+        const first = await agent.run("first");
+        const second = await agent.run("second");
+        assert.strictEqual(first.content, second.content);
+    });
+});
+//# sourceMappingURL=stateless-agent.test.js.map

package/dist/tests/core/stateless-agent.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateless-agent.test.js","sourceRoot":"","sources":["../../../src/tests/core/stateless-agent.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IAClC,IAAI,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEhG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG;YACd,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;YACtI,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE,CAAC;SAC/D,CAAC;QAET,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAElH,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC;YAC7B,WAAW,EAAE,8BAA8B;YAC3C,UAAU,EAAE,QAAQ;YACpB,SAAS;YACT,YAAY,EAAE,CAAC,IAAI,CAAC;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAEnD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACrG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+FAA+F,EAAE,KAAK,IAAI,EAAE;QAC7G,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG;YACd,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,CAAC;YACtI,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE,CAAC;SAC/D,CAAC;QAET,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE;YACvC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;YACrE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;SAC1C,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAE9G,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAClD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,0BAA0B,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACtF,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QACvD,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,6FAA6F;QAC7F,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,SAAS,GAAG,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAS,CAAC;QAE9F,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzG,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CACT,GAAG,EAAE,CAAC,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,kBAAkB,EAAE,CAAC,EAAE,CAAC,EAC1G,uBAAuB,CAC1B,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE7E,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEzC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/tests/index.d.ts

@@ -36,5 +36,8 @@ import "./tools/browser/browser-tools.test.js";
 import "./tools/agent/agent-tools.test.js";
 import "./core/agent-definition.test.js";
 import "./core/swarm-base.test.js";
+import "./core/stateless-agent.test.js";
+import "./core/ai-ask.test.js";
+import "./core/mcp-auto-execution-policy.test.js";
 import "./agents/default-agents.test.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/tests/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tests/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,qCAAqC,CAAC;AAG7C,OAAO,6BAA6B,CAAC;AACrC,OAAO,wCAAwC,CAAC;AAChD,OAAO,kCAAkC,CAAC;AAE1C,OAAO,8BAA8B,CAAC;AACtC,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,yBAAyB,CAAC;AACjC,OAAO,yBAAyB,CAAC;AAEjC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AACxC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,iCAAiC,CAAC;AAEzC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAE1C,OAAO,0BAA0B,CAAC;AAClC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AAExC,OAAO,iDAAiD,CAAC;AAEzD,OAAO,uCAAuC,CAAC;AAE/C,OAAO,mCAAmC,CAAC;AAE3C,OAAO,iCAAiC,CAAC;AACzC,OAAO,2BAA2B,CAAC;AAEnC,OAAO,iCAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/tests/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,qCAAqC,CAAC;AAG7C,OAAO,6BAA6B,CAAC;AACrC,OAAO,wCAAwC,CAAC;AAChD,OAAO,kCAAkC,CAAC;AAE1C,OAAO,8BAA8B,CAAC;AACtC,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,yBAAyB,CAAC;AACjC,OAAO,yBAAyB,CAAC;AAEjC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AACxC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,iCAAiC,CAAC;AAEzC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAE1C,OAAO,0BAA0B,CAAC;AAClC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AAExC,OAAO,iDAAiD,CAAC;AAEzD,OAAO,uCAAuC,CAAC;AAE/C,OAAO,mCAAmC,CAAC;AAE3C,OAAO,iCAAiC,CAAC;AACzC,OAAO,2BAA2B,CAAC;AACnC,OAAO,gCAAgC,CAAC;AACxC,OAAO,uBAAuB,CAAC;AAC/B,OAAO,0CAA0C,CAAC;AAElD,OAAO,iCAAiC,CAAC"}

package/dist/tests/index.js

@@ -36,5 +36,8 @@ import "./tools/browser/browser-tools.test.js";
 import "./tools/agent/agent-tools.test.js";
 import "./core/agent-definition.test.js";
 import "./core/swarm-base.test.js";
+import "./core/stateless-agent.test.js";
+import "./core/ai-ask.test.js";
+import "./core/mcp-auto-execution-policy.test.js";
 import "./agents/default-agents.test.js";
 //# sourceMappingURL=index.js.map

package/dist/tests/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tests/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,qCAAqC,CAAC;AAG7C,OAAO,6BAA6B,CAAC;AACrC,OAAO,wCAAwC,CAAC;AAChD,OAAO,kCAAkC,CAAC;AAE1C,OAAO,8BAA8B,CAAC;AACtC,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,yBAAyB,CAAC;AACjC,OAAO,yBAAyB,CAAC;AAEjC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AACxC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,iCAAiC,CAAC;AAEzC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAE1C,OAAO,0BAA0B,CAAC;AAClC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AAExC,OAAO,iDAAiD,CAAC;AAEzD,OAAO,uCAAuC,CAAC;AAE/C,OAAO,mCAAmC,CAAC;AAE3C,OAAO,iCAAiC,CAAC;AACzC,OAAO,2BAA2B,CAAC;AAEnC,OAAO,iCAAiC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/tests/index.ts"],"names":[],"mappings":"AAAA,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,mCAAmC,CAAC;AAC3C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,qCAAqC,CAAC;AAG7C,OAAO,6BAA6B,CAAC;AACrC,OAAO,wCAAwC,CAAC;AAChD,OAAO,kCAAkC,CAAC;AAE1C,OAAO,8BAA8B,CAAC;AACtC,OAAO,+BAA+B,CAAC;AACvC,OAAO,8BAA8B,CAAC;AACtC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,2BAA2B,CAAC;AACnC,OAAO,yBAAyB,CAAC;AACjC,OAAO,yBAAyB,CAAC;AAEjC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AACxC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,kCAAkC,CAAC;AAC1C,OAAO,iCAAiC,CAAC;AAEzC,OAAO,6BAA6B,CAAC;AACrC,OAAO,+BAA+B,CAAC;AACvC,OAAO,kCAAkC,CAAC;AAE1C,OAAO,0BAA0B,CAAC;AAClC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,2BAA2B,CAAC;AACnC,OAAO,kCAAkC,CAAC;AAC1C,OAAO,gCAAgC,CAAC;AAExC,OAAO,iDAAiD,CAAC;AAEzD,OAAO,uCAAuC,CAAC;AAE/C,OAAO,mCAAmC,CAAC;AAE3C,OAAO,iCAAiC,CAAC;AACzC,OAAO,2BAA2B,CAAC;AACnC,OAAO,gCAAgC,CAAC;AACxC,OAAO,uBAAuB,CAAC;AAC/B,OAAO,0CAA0C,CAAC;AAElD,OAAO,iCAAiC,CAAC"}

package/docs/agents.md

@@ -1,9 +1,10 @@
 # Agents
 
-## `BaseAgent` vs `SimpleAgent`
+## `BaseAgent` vs `SimpleAgent` vs `StatelessAgent`
 
 - **`BaseAgent`** (`src/core/base-agent.ts`) is the real engine — the run loop, memory compaction, tool dispatch, token accounting. It requires you to bring your own `MCPClient` (and therefore your own `MCPServer`/connection), which is what gives you the choice of in-process, IPC, or WebSocket execution (see [MCP Architecture](./mcp-architecture.md)).
 - **`SimpleAgent`** (`src/templates/simple.ts`) is a thin subclass that wires up an in-process `MCPConnection` + `MCPServer` + `MCPClient` for you from a flat `tools`/`skills` list. Use this unless you specifically need a different transport.
+- **`StatelessAgent`** (`src/core/stateless-agent.ts`) is not a loop at all — one `input` in, one `chat()` call out (see [`StatelessAgent`](#statelessagent) below). Use this for input checking, classification, or validation, where `BaseAgent`'s multi-turn loop and memory compaction are unnecessary overhead.
 - **`AgentDefinition`** (`src/core/agent-definition.ts`) isn't an agent at all — it's a reusable *description* of one kind of agent (persona, skills, tools) with no runtime wiring, which `SwarmBase` instantiates as many plain `BaseAgent`s as it needs. See [Multi-agent](#multi-agent) below.
 
 ## `BaseAgent` constructor
@@ -164,6 +165,81 @@ Every other `type` entry comes from a tool calling `mcp.executeProvider(toolCall
 
 The system prompt is built lazily on first use and cached — a stable prefix between compactions, which matters for provider-side prompt caching. It's assembled from: a fixed "you have tools" preamble, each skill's name/description/instructions (see [Skills](./skills.md)), the current `MEMORY:` block (sourced from `compactMemory`), and your `instruction` string, in that order. Each `compact_memory` call invalidates the cache (see [Memory compaction](#memory-compaction)), so the next turn's system prompt is rebuilt with the fresh `MEMORY:` block instead of the one that was current when the prompt was first built.
 
+## `StatelessAgent`
+
+```ts
+new StatelessAgent({
+  instruction: string;
+  safetyPolicies?: string;   // default: "" — sent as its own leading system message, same convention as BaseAgent
+  aiProvider: AIProvider | AgentProviderEntry[];
+  mcpClient?: MCPClient;     // required only if allowedTools is non-empty — bring your own, same as BaseAgent
+  allowedTools?: MCPTool<any>[];   // default: []
+});
+```
+
+Unlike `BaseAgent`, there is no `run` loop, no `messagesCompact`/`retiredMessages`, no `compact_memory` tool, and no `getCurrentAgentStates()` — an instance holds only its fixed configuration (instruction, provider, allowed tools), never conversation state. Because of that, one instance is meant to be constructed once and reused: `run()` can be called any number of times, including concurrently, and calls never see each other's input or output — each builds its own message array from scratch (or continues one you hand back in — see below).
+
+```ts
+const result = await agent.run(input: string, streamCallback?: StreamCallback, previousMessages?: Message[]): Promise<StatelessAgentResult>;
+// { content: string; toolCalls: DispatchedToolCall[]; usage: MessageUsage[]; messages: Message[] }
+```
+
+`run()` makes exactly **one** `chat()` call — never a second, even when the model requests tool calls:
+
+1. `previousMessages` omitted (the default): the message array is built fresh as `[system(safetyPolicies), system(instruction), user(input)]`. Given instead, `input` is appended as one more `user` message onto it — this is how you continue an exchange without StatelessAgent retaining any state of its own; see `result.messages` below.
+2. That one `chat()` call is made. If the model requested tool calls, every one of them is dispatched right away (via the `MCPClient`/`allowedTools` this agent was built with — same dispatch semantics as `BaseAgent#dispatchTool`: an error from a tool, or a tool name that isn't allowed, comes back as an `Error: ...` result string rather than throwing), and their `role: "tool"` result messages are appended to `messages`. `run()` then returns immediately — there is no automatic follow-up `chat()` call to fold those results into a final answer.
+
+If the model's first turn requests no tools, `run()` still resolves after that one call, with `toolCalls: []`.
+
+### Continuing an exchange: `result.messages` / `previousMessages`
+
+Since `run()` never makes a second `chat()` call on its own, `result.messages` is how you pick up where it left off: it's the complete array built for that call — the two leading system messages, the `user` turn, the resulting `assistant` turn, and any `tool` result messages — in the order the provider needs them replayed. Call `run()` again with it as `previousMessages` (and whatever `input` makes sense next — often just a nudge like `"continue"`, or nothing new to add beyond letting the model see the tool results) to get the model's next turn, e.g. its synthesized answer after seeing what a tool returned. Each such call is still exactly one `chat()` call; a caller that wants BaseAgent-style looping-until-no-more-tool-calls behavior builds that loop itself by chaining `run()` calls this way, rather than getting it for free.
+
+### Token accounting
+
+`result.usage` is exactly one `MessageUsage` entry per `run()` call — there's no running total to query since there's no persisted state between calls; sum `usage` yourself across calls (e.g. across a chain of `previousMessages`-linked calls) if you need a lifetime total.
+
+## `AIASK`
+
+`AIASK` (`src/core/ai-ask.ts`) asks the model for exactly one answer in a validated JSON shape. It's built on `StatelessAgent`, not a replacement for it — internally it registers a single `submit_answer` tool (built from `outputStructure`) on its own private, in-process `MCPClient` (same `MCPConnection` + `MCPServer` wiring `SimpleAgent` uses) and drives a `StatelessAgent` with it. There's nothing to wire up from outside:
+
+```ts
+new AIASK({
+  instruction: string;
+  aiModel: AIProvider | AgentProviderEntry[];
+  outputStructure: { name: string; type: "number" | "string" | "boolean" | "object" | "array"; description: string; required?: boolean }[];
+});
+```
+
+No `mcpClient`, no `allowedTools`, and deliberately no `safetyPolicies` field — for a single narrow structured-answer call, `instruction` *is* the whole system prompt (fold any guardrail text straight into it) rather than a separate cache-stable prefix, which only earns its keep across many turns.
+
+```ts
+const result = await ask.run(input: string): Promise<AIAskResult>;
+// { output: Record<string, any>; valid: boolean; errors?: string[]; attempts: number; usage: MessageUsage[] }
+```
+
+Each field in `outputStructure` becomes one input on the `submit_answer` tool (`required` defaults to `true`). After the model calls it (or fails to), the returned fields are validated against `outputStructure` — every `required` field present, and each field's JS type (`typeof`, with `Array.isArray` for `"array"` and a plain-object check for `"object"`) matching what was declared. Replying in plain text instead of calling the tool at all counts as a failed attempt too.
+
+A failed attempt (validation errors, or no tool call) triggers a retry: `run()` calls the underlying `StatelessAgent` again, up to **3 attempts total**, with the validation errors folded into the next prompt so the model can see exactly what was wrong and self-correct. The first attempt that validates returns immediately with `valid: true` and `errors` unset. If all 3 attempts fail, `run()` returns rather than throwing — `valid: false`, `errors` from the last attempt, `attempts: 3`, and `output` holding whatever fields the last attempt did manage to submit (possibly `{}` if it never called the tool at all).
+
+```ts
+const ask = new AIASK({
+  instruction: "Classify the input as spam or not.",
+  aiModel,
+  outputStructure: [
+    { name: "spam", type: "boolean", description: "true if this is spam" },
+    { name: "reason", type: "string", description: "one-sentence justification" },
+  ],
+});
+
+const { output, valid, attempts } = await ask.run(userMessage);
+if (valid) {
+  // output is { spam: boolean, reason: string }
+}
+```
+
+`result.usage` accumulates every `chat()` call across every attempt (up to 3, one per `StatelessAgent.run()` call), not just the winning one.
+
 ## Multi-agent
 
 Multiple agents that hire, task, and report to each other live in [Swarm](./swarm.md) — `SwarmBase`, `getAgentTools()`, and `AgentDefinition`.

package/docs/mcp-architecture.md

@@ -158,6 +158,48 @@ class AllowlistPolicy extends MCPExecutionPolicy {
 const mcpClient = new MCPClient(envID, connection, storage, rng, undefined, new AllowlistPolicy(["get_current_time"]));
 ```
 
+### `MCPAutoExecutionPolicy` — an AI-judged policy
+
+`MCPAutoExecutionPolicy` (`src/core/mcp-auto-execution-policy.ts`) is a built-in `MCPExecutionPolicy` that asks a model, via [`AIASK`](./agents.md#aiask), whether each call is safe — an alternative to a hand-written allowlist/denylist for cases where "safe" isn't a fixed rule. It's built to keep the expensive part (an actual model call) as rare as possible rather than reviewing every single tool call:
+
+```ts
+new MCPAutoExecutionPolicy({
+  aiModel: AIProvider | AgentProviderEntry[];
+  instruction?: string;   // extra context appended after the built-in default instruction — e.g. what the user actually asked the agent to do
+  onVerdict?: (request: MCPToolCallRequest, verdict: { harmful: boolean; reason: string }) => void;
+  watchedTools?: string[];   // default: ["bash-run", "fs-write-file", "fs-edit-file", "fs-delete", "fs-move"]
+  scopeDir?: string;         // default: process.cwd() at construction time
+});
+```
+
+Three cost-cutting layers, checked in order inside `authorize(request)`:
+
+1. **Not in `watchedTools`?** Authorized immediately — no model call, no verdict recorded at all. Most tools (`get-current-time`, `todo-*`, `fs-read-file`, ...) have nothing dangerous to weigh, so the default watch list is only the destructive/execution tools: `bash-run` and the fs tools that write, edit, delete, or move something. Pass your own `watchedTools` to widen or narrow that set.
+2. **A watched *fs* call whose path(s) all resolve inside `scopeDir`?** Also authorized immediately, no model call — a write/edit/delete confined to the expected working directory doesn't need judgment. Paths are resolved the same way the fs tools themselves resolve them (relative to `process.cwd()`); `fs-move` needs *both* `from` and `to` inside scope to skip the model — one path escaping scope is enough to escalate. `bash-run` has no path field to check here, so it always falls through to the model.
+3. **Otherwise, ask the model** — via `AIASK`, on `{ toolName, inputs }`. `authorize()` denies whenever the verdict comes back `harmful: true`, or whenever `AIASK` itself couldn't reach a valid verdict after its own retries (fails closed, not open).
+
+Whenever a call *does* reach the model, file content is stripped out first — `fs-write-file`/`fs-edit-file`'s `content` field is replaced with `<omitted, N bytes>` before it's ever sent, since the file's contents aren't relevant to judging whether the *call* is safe, and including it would make every write/edit review needlessly expensive. The model judges those calls by path and other inputs alone.
+
+`authorize()`'s boolean return only tells `MCPClient` whether to proceed — it doesn't surface *why* a call was judged (or skipped as) harmful/safe, which callers usually want (to log it, or show the user what got blocked). Three ways to get that — all populated for both a model-reviewed call and one that was authorized locally via the path-scope check, but never for a call outside `watchedTools`, which is never reviewed at all:
+
+- `policy.getVerdict(toolCallId)` — the verdict recorded for one specific call, if it carried a `toolCallId`.
+- `policy.getLastVerdict()` — the most recent verdict of any reviewed call, useful when only one policy instance is ever in flight at a time.
+- `onVerdict` — called synchronously right after every reviewed `authorize()` decision, with both the request and the verdict.
+
+```ts
+const policy = new MCPAutoExecutionPolicy({
+  aiModel,
+  scopeDir: "/home/me/project",   // writes/edits/deletes/moves confined here skip the model entirely
+  onVerdict: (request, verdict) => {
+    if (verdict.harmful) console.warn(`blocked ${request.toolName}: ${verdict.reason}`);
+  },
+});
+
+const mcpClient = new MCPClient(envID, connection, storage, rng, undefined, policy);
+```
+
+Even with those shortcuts, a call that does reach the model costs at least one real call (more if `AIASK`'s own retry loop kicks in — see [`AIASK`](./agents.md#aiask)) — this still trades latency/cost for judgment a fixed rule can't express, just as rarely as the watch list and scope check allow. Reach for a plain `MCPExecutionPolicy` subclass first when a simple allowlist/denylist actually covers the case.
+
 ## Custom `MCP` subclasses
 
 Both `MCPServer` and `MCPClient` extend the abstract `MCP` class — `getStorage()`, `getRNG()`, and `executeProvider(toolCallId, type, input)`. Tool `execute` functions receive the calling `MCP` instance directly, as their 4th argument (after a `toolCallId` — see [Tools](./tools.md#the-mcptool-shape)), so a tool can reach storage/RNG scoped to whichever client dispatched the call.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orbitx",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "An AI SDK providing agents, swarms, planners, skills, MCP tools, workflows, and multi-provider AI integrations.",
   "repository": {
     "type": "git",

package/dist/core/image-describer.d.ts

@@ -1,19 +0,0 @@
-import type { AIProvider } from "./ai-provider.js";
-/** Usage for one `describe()` call. */
-export interface ImageDescription {
-    description: string;
-    inputTokens: number;
-    outputTokens: number;
-}
-export declare class ImageDescriber {
-    #private;
-    constructor(provider: AIProvider);
-    /**
-     * @param image base64-encoded image bytes (no data: prefix)
-     * @param mimeType e.g. "image/png"
-     * @param focusHint what the calling agent wants the description to pay attention to
-     */
-    describe(image: string, mimeType?: string, focusHint?: string): Promise<ImageDescription>;
-}
-export default ImageDescriber;
-//# sourceMappingURL=image-describer.d.ts.map

package/dist/core/image-describer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"image-describer.d.ts","sourceRoot":"","sources":["../../src/core/image-describer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAsB,MAAM,kBAAkB,CAAC;AAEvE,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,cAAc;;gBAGX,QAAQ,EAAE,UAAU;IAIhC;;;;OAIG;IACG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAoB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA6B/G;AAED,eAAe,cAAc,CAAC"}

package/dist/core/image-describer.js

@@ -1,37 +0,0 @@
-export class ImageDescriber {
-    #provider;
-    constructor(provider) {
-        this.#provider = provider;
-    }
-    /**
-     * @param image base64-encoded image bytes (no data: prefix)
-     * @param mimeType e.g. "image/png"
-     * @param focusHint what the calling agent wants the description to pay attention to
-     */
-    async describe(image, mimeType = "image/png", focusHint) {
-        const caps = this.#provider.getCapabilities();
-        if (!caps.supportsImages) {
-            throw new Error("ImageDescriber's provider does not support image input (getCapabilities().supportsImages is false) — " +
-                "configure ImageDescriber with a vision-capable provider.");
-        }
-        const parts = [
-            {
-                type: "text",
-                text: focusHint
-                    ? `Describe this image concisely for another AI agent that cannot see it. Focus specifically on: ${focusHint}`
-                    : "Describe this image concisely for another AI agent that cannot see it. Mention layout, visible text, colors, and anything that looks unusual or broken.",
-            },
-            { type: "image", image, mimeType },
-        ];
-        const response = await this.#provider.chat([
-            { role: "user", parts },
-        ]);
-        return {
-            description: response.content,
-            inputTokens: response.inputTokens,
-            outputTokens: response.outputTokens,
-        };
-    }
-}
-export default ImageDescriber;
-//# sourceMappingURL=image-describer.js.map

package/dist/core/image-describer.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"image-describer.js","sourceRoot":"","sources":["../../src/core/image-describer.ts"],"names":[],"mappings":"AASA,MAAM,OAAO,cAAc;IACvB,SAAS,CAAa;IAEtB,YAAY,QAAoB;QAC5B,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,WAAmB,WAAW,EAAE,SAAkB;QAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACX,uGAAuG;gBACvG,0DAA0D,CAC7D,CAAC;QACN,CAAC;QAED,MAAM,KAAK,GAAyB;YAChC;gBACI,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,SAAS;oBACX,CAAC,CAAC,iGAAiG,SAAS,EAAE;oBAC9G,CAAC,CAAC,yJAAyJ;aAClK;YACD,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE;SACrC,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YACvC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;SAC1B,CAAC,CAAC;QAEH,OAAO;YACH,WAAW,EAAE,QAAQ,CAAC,OAAO;YAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;SACtC,CAAC;IACN,CAAC;CACJ;AAED,eAAe,cAAc,CAAC"}

package/dist/core/worker-agent.d.ts

@@ -1,43 +0,0 @@
-import BaseAgent from "./base-agent.js";
-/**
- * Per-task-type fit score for a WorkerAgent, e.g. `{ backend: 9, frontend: 4,
- * "3d-web": 10 }`. Keys are free-form task-type labels chosen by whoever
- * builds the roster; there's no fixed enum since "what counts as a task
- * type" is app-specific. Convention (not enforced): 0-10, higher is a
- * better fit. AgentListTool hands this straight to the hiring agent so it
- * can judge which worker fits a given task.
- */
-export type WorkerAgentRating = Record<string, number>;
-/**
- * EXPERIMENTAL: this class, and the agent-management tools built on it
- * (src/tools/agent/), are new and still settling — names and behavior may
- * change in a future release.
- *
- * A BaseAgent with an identity a *hiring* agent can reason about — name,
- * description (persona/specialty), and a rating per task type — so it can
- * be listed, compared against other workers, and hired via the tools in
- * `src/tools/agent/` (see AgentTools()). Everything about running it (tool
- * dispatch, memory, streaming) is unchanged from BaseAgent; WorkerAgent only
- * adds metadata on top.
- *
- * Like BaseAgent, this is a raw building block: you still bring your own
- * `mcpClient`/`allowedTools`. If you want this worker to be able to report
- * back to whoever hired it, include AgentReportTool() (from
- * `src/tools/agent/`) in its own tools, same as any other tool.
- */
-export declare class WorkerAgent extends BaseAgent {
-    #private;
-    constructor({ name, description, rating, ...baseAgentOptions }: {
-        /** Unique identifier used by AgentTools() to hire/prompt this worker — must be unique across whatever roster it's included in. */
-        name: string;
-        /** Persona/specialty shown to the hiring agent via agent-list — what this worker is good at, written for the model to judge fit from, not just a human label. */
-        description: string;
-        /** Per-task-type fit score — see WorkerAgentRating. Defaults to empty (no stated specialty). */
-        rating?: WorkerAgentRating;
-    } & ConstructorParameters<typeof BaseAgent>[0]);
-    getName(): string;
-    getDescription(): string;
-    getRating(): WorkerAgentRating;
-}
-export default WorkerAgent;
-//# sourceMappingURL=worker-agent.d.ts.map

package/dist/core/worker-agent.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-agent.d.ts","sourceRoot":"","sources":["../../src/core/worker-agent.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,iBAAiB,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,WAAY,SAAQ,SAAS;;gBAK1B,EACR,IAAI,EACJ,WAAW,EACX,MAAW,EACX,GAAG,gBAAgB,EACtB,EAAE;QACC,kIAAkI;QAClI,IAAI,EAAE,MAAM,CAAC;QACb,iKAAiK;QACjK,WAAW,EAAE,MAAM,CAAC;QACpB,gGAAgG;QAChG,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC9B,GAAG,qBAAqB,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;IAO9C,OAAO,IAAI,MAAM;IAIjB,cAAc,IAAI,MAAM;IAIxB,SAAS,IAAI,iBAAiB;CAGjC;AAED,eAAe,WAAW,CAAC"}

package/dist/core/worker-agent.js

@@ -1,40 +0,0 @@
-import BaseAgent from "./base-agent.js";
-/**
- * EXPERIMENTAL: this class, and the agent-management tools built on it
- * (src/tools/agent/), are new and still settling — names and behavior may
- * change in a future release.
- *
- * A BaseAgent with an identity a *hiring* agent can reason about — name,
- * description (persona/specialty), and a rating per task type — so it can
- * be listed, compared against other workers, and hired via the tools in
- * `src/tools/agent/` (see AgentTools()). Everything about running it (tool
- * dispatch, memory, streaming) is unchanged from BaseAgent; WorkerAgent only
- * adds metadata on top.
- *
- * Like BaseAgent, this is a raw building block: you still bring your own
- * `mcpClient`/`allowedTools`. If you want this worker to be able to report
- * back to whoever hired it, include AgentReportTool() (from
- * `src/tools/agent/`) in its own tools, same as any other tool.
- */
-export class WorkerAgent extends BaseAgent {
-    #name;
-    #description;
-    #rating;
-    constructor({ name, description, rating = {}, ...baseAgentOptions }) {
-        super(baseAgentOptions);
-        this.#name = name;
-        this.#description = description;
-        this.#rating = rating;
-    }
-    getName() {
-        return this.#name;
-    }
-    getDescription() {
-        return this.#description;
-    }
-    getRating() {
-        return this.#rating;
-    }
-}
-export default WorkerAgent;
-//# sourceMappingURL=worker-agent.js.map

package/dist/core/worker-agent.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"worker-agent.js","sourceRoot":"","sources":["../../src/core/worker-agent.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,iBAAiB,CAAC;AAYxC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,WAAY,SAAQ,SAAS;IACtC,KAAK,CAAS;IACd,YAAY,CAAS;IACrB,OAAO,CAAoB;IAE3B,YAAY,EACR,IAAI,EACJ,WAAW,EACX,MAAM,GAAG,EAAE,EACX,GAAG,gBAAgB,EAQuB;QAC1C,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,OAAO;QACH,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,cAAc;QACV,OAAO,IAAI,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;CACJ;AAED,eAAe,WAAW,CAAC"}

package/dist/skills/shopping.d.ts

@@ -1,4 +0,0 @@
-import Skill from "../core/skill.js";
-export declare const ShoppingSkill: () => Skill;
-export default ShoppingSkill;
-//# sourceMappingURL=shopping.d.ts.map

package/dist/skills/shopping.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"shopping.d.ts","sourceRoot":"","sources":["../../src/skills/shopping.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAIrC,eAAO,MAAM,aAAa,aAiExB,CAAC;AAEH,eAAe,aAAa,CAAC"}