stitchkit 0.87.1 → 0.89.0

package/CHANGELOG.md

@@ -15,6 +15,196 @@ additive**; the first breaking change landed in 0.10.0. Grep the file for
 
 ## [Unreleased]
 
+## [0.89.0] — 2026-09-12
+
+### ⚠️ Breaking changes
+
+**Who must act:** applications implementing `AgentRuntimeStore` or `AgentRuntimeStoreDriver`,
+and applications normalizing OpenRouter usage. Custom stores add ordered once-seeding;
+OpenRouter callers pass raw per-step usage. New durability users return lossless JSON.
+See the 0.89.0 migration in the upgrading guide.
+
+- **OpenRouter token provenance requires raw step usage.** `normalizeOpenRouterUsage` and the
+  runtime read original counters rather than SDK defaults. Pass `step.usage` from each
+  completed SDK step; normalized-only or aggregate records without `raw` yield unavailable
+  token counts. Missing cache/reasoning counts no longer become provider-reported zero.
+
+- **Durability results must be lossless JSON.** `step<T>` accepts JSON-compatible types and
+  rejects non-finite numbers, negative zero, Date/class instances, undefined, sparse arrays
+  and accessors at runtime. First execution and replay return detached JSON snapshots.
+  Effect-only bodies must return `null`: `step('send', async () => { await send(); return null; })`.
+  Convert dates explicitly with `toISOString()` before returning them. Rejected results do not
+  undo external effects; idempotency remains the host's responsibility.
+- **`AgentRuntimeStore` gains `seedConversationInput`.** A custom store adapter must implement it;
+  the memory and SQLite drivers already do. The SQLite schema moves to version 3 with an automatic
+  migration. The method writes user-role prompt instructions into a conversation's durable history
+  exactly once, ahead of the conversation, so they can be summarized by compaction and removed by a
+  history replacement instead of being re-injected on every call. → ADR 0178
+
+  ```ts
+  // before: an adapter implemented the existing store members only
+  // after:  add
+  async seedConversationInput({ conversationId, seedKey, inputs }) { /* … */ }
+  ```
+
+- **A custom store driver gains a required `seeds` member.** `AgentRuntimeStoreDriver` now needs
+  `seeds: { load, create }` in addition to its history mutation, so a driver that only implemented
+  the previous members must add it. Memory, SQLite and the Prisma example implement it;
+  the public conformance kit verifies ordered once-seeding and compaction survival.
+
+### Fixed
+
+- Parallel verification no longer reaps a live supervised build before its isolated
+  PM2 home has been created; abandonment requires the lane directory to be gone.
+- Provider silence deadlines exclude resource preparation, local tool execution and approval
+  waiting. Provider calls still time out before the first chunk and between chunks; caller
+  cancellation remains active during tools and child waits.
+- Connection calls isolate credentials, refuse redirects, bound SSE reads and retain typed
+  authorization causes through the standard mount. Lifecycle executes once.
+- Instruction seed budgets are counted once; partial imports fail explicitly. Coding reads
+  obey EOF byte limits, report invalid UTF-8, preserve literal replacement text and bound denied lists.
+
+### Added
+
+- `createSandboxCodingTools` connects the maintained coding profile to a sandbox workspace.
+  File authorization, UTF-8, shell deadlines/output/artifacts are shared with the host profile;
+  sandbox stop and command admission cover both session and coding launches.
+- **Optional Linux process sandbox.** `stitchkit/agent-runtime/sandbox` supplies a Bubblewrap
+  backend, reusable byte-file templates, durable workspace reconnect and bounded command execution.
+  Network namespaces deny direct egress; an explicit HTTP Unix-socket gateway brokers configured
+  origin headers on the host. Existing coding tools remain unchanged. See the sandbox guide for
+  platform requirements, trusted-upstream and resource-isolation limits. → ADR 0181
+- **Durable once-seeding of user-role instructions.** `composeAgentPrompt` reports user-role
+  sections separately and the runtime seeds them into durable history once; a retry or replay writes
+  one copy, and a history replacement does not resurrect them. → ADR 0178
+- **The parent owns a child's blocking events.** `AgentChildManager` presents a child's approval or
+  input request on the parent once (child-local ids rewritten to parent-scoped ids, unanswered
+  siblings retained) and routes approval decisions or JSON input values back. A child harness uses
+  `blockingPresentation: 'parent'` to keep requests out of its presentation stream. The
+  `subagent` tool result and `list_agents` are proven to read one source. → ADR 0179
+- **A local durability port for tool bodies.** `createLocalStepDurability` over the store: `step(name,
+  fn)` replays recorded JSON results. `createAgentRuntime({ durability: true })` exposes
+  `step/sleep/waitFor` in mounted handler context; a factory can replace the port. Timers and
+  event waits preserve ledger facts across host-driven recovery, with optional external-write
+  notifications. In-flight maps are store-scoped; undecodable records fail closed. → ADR 0182
+- **External MCP and OpenAPI servers are consumable as typed tools.** The new server-only entrypoint
+  `stitchkit/tools/connections` provides `defineMcpClientConnection`, `defineOpenApiConnection` and
+  `mountConnections`: MCP over Streamable HTTP with an SSE fallback only on `400/404/405`,
+  per-call credential resolution, a typed `401` reauthorization cause while `403` passes through, OpenAPI
+  operations with bounded local references and qualified names, redirect refusal and a host guard
+  that remote specs cannot expand. Unsupported OpenAPI semantics are refused at mount. No peer
+  dependency enters `stitchkit/tools`. → ADR 0180
+- **Prompt sections declare their authority.** `AgentPromptSection.role` (default `system`) splits
+  framework policy from caller-supplied context; `composeAgentPrompt` reports user-role sections
+  separately and the runtime carries them into provider history ahead of the durable conversation,
+  so retrieved or tenant context can no longer sit at system authority. → ADR 0178
+- **Approval responses are authorized separately from the request.**
+  `createHeadlessAgentHarness` accepts `authorizeApprovalResponse`, a response-time policy that
+  judges the responder rather than the signature; a refusal is recorded as a durable
+  `approval/response-rejected` event with its reason and leaves the request pending for another
+  responder. Absent the policy, behaviour is unchanged. → ADR 0177
+- **Tool compositions replace and disable built-ins by name.** `defineToolRegistry({ defaults })`
+  declares the runtime surface once and refuses a `replace`/`disable` name outside those defaults
+  instead of leaving a default silently in place; `mountAgent` accepts a `registry` in place of
+  `runtimeTools`. → ADR 0176
+- **Coding discovery names the paths the host refuses.** `list_directory`, `glob` and
+  `search_files` gained an optional `denied` list of `{ path, kind }` — with
+  `deniedTruncated` when the list is cut — present only when there is something to report.
+  A path rejected by `authorizePath` used to vanish exactly like an absent one, so a model
+  read "the host hid this" as "this is not here". Only the name and kind travel, never
+  content, and `search_files` keeps the host's refusals apart from the include pattern's own.
+
+### Fixed
+
+- **`read_file` resumes on a UTF-8 boundary.** A byte window whose end fell inside a
+  multi-byte character made the fatal decoder throw, surfacing as `INTERNAL_SERVER_ERROR`
+  on some offsets and succeeding on others for the same file. The window is now aligned to a
+  character boundary — extended to the whole character when the window is smaller than one —
+  and `nextOffset` names the start of the next character, so successive windows stitch back
+  to the original file. A caller-supplied `offset` inside a character now resumes at the next
+  character boundary instead of throwing the same unnamed refusal. A file that is genuinely
+  not UTF-8 is still refused. `run_command`'s retained output is aligned the same way, on the
+  artifact path and without artifacts, so a byte budget no longer leaves a replacement glyph.
+- **Connections enforce their declared network bounds.** `defineMcpClientConnection`'s
+  `allowHosts` is now honoured on every MCP request, and a legacy-SSE server's discovered
+  `endpoint` is host-fenced before the client POSTs a bearer token to it; requests carry a
+  default timeout and responses are size-bounded, with `ConnectionBudget.maxSchemaBytes`
+  enforced over the mounted foreign schemas. SSE framing also accepts CRLF, and a non-2xx SSE
+  POST no longer leaves an orphaned pending response.
+- **Coding discovery scopes what it reports.** `glob` now scopes its `denied` entries to the
+  requested path, and a re-seeded conversation whose compacted seed survived without a receipt
+  resolves idempotently instead of failing a `UNIQUE` constraint.
+- **Journal event search treats a multi-word query as all words, not one phrase.**
+  `createSqliteAgentEventSearch` quoted the whole query, so a query of two or more words
+  matched only the adjacent phrase and returned `[]` when the words merely occurred — a
+  silent zero read as "the journal never said this". Terms are now quoted individually and
+  joined with `AND`, still escaped as literal text, and a query that reduces to no terms is
+  an error rather than an empty result.
+
+## [0.88.0] — 2026-09-10
+
+### ⚠️ Breaking changes
+
+**Who must act:** applications that construct an `AgentStepFinishedEvent` themselves — a test
+double, a replay fixture, a pipeline that re-validates persisted operator events — and
+applications that implement or mock the `AgentRuntime` interface rather than only calling the
+one `createAgentRuntime` returns.
+
+- **A completed step event carries its provider response identity.**
+  `AgentStepFinishedEventSchema` gains a required `response`, so an event built or re-parsed
+  without one is now refused. A step the runtime emits always has it; a persisted event from an
+  earlier version does not.
+
+  ```ts
+  // before
+  { type: 'step-finished', step: 0, usage }
+
+  // after
+  { type: 'step-finished', step: 0, usage, response: { id: generationId } }
+  ```
+
+- **`AgentRuntime` gains `abandon`.** Anything typed as the whole interface must supply it.
+
+  ```ts
+  // before
+  const fake: AgentRuntime = { submit, interrupt, recover, close }
+
+  // after
+  const fake: AgentRuntime = { submit, interrupt, abandon, recover, close }
+  ```
+
+### Added
+
+- **Completed agent steps expose their provider response identity.** `step-finished.response`
+  carries the provider-assigned response ID and, when the model's adapter can name it, the selected
+  upstream provider — `AgentLanguageModelProvider.resolveResponseProvider`, which
+  `openRouterProvider` implements, so the neutral runtime never reads one gateway's metadata key.
+  The same object is retained in one `provider/response` ledger event with run, retry attempt and
+  step identity; run totals remain computed aggregates.
+- **A zero-coverage coding search explains its filter.** `search_files.include` now publishes its
+  anchored workspace-relative glob semantics, `scannedFiles` names the post-filter count, and a
+  filter that rejected every file the scan reached returns a recovery hint without turning a valid
+  empty result into an error. An empty tree and a host-refused path produce the same empty result
+  with no hint: the number that would have blamed the pattern has three causes, and only one of
+  them is the pattern.
+- **A known orphan run can be closed without editing its storage adapter.**
+  `runtime.abandon({ conversationId, runId, expectedRevision, staleOwner: true })`
+  applies the existing canonical abandonment transition, atomically fails the
+  assistant projection, removes the run from recovery scans and publishes its
+  state. The expected revision refuses stale operator evidence. Store
+  conformance now verifies that the canonical record and recovery index agree
+  after abandonment.
+
+### Fixed
+
+- **An absolute coding-tool path no longer suggests deleting one slash.** If it is inside the
+  configured workspace, the refusal carries the exact `recoveryPath`; an external absolute path
+  remains refused without a misleading replacement.
+- **A storage failure releases the provider stream before runtime recovery I/O.** Every model
+  attempt owns a private abort signal. Abrupt consumer exit aborts that attempt before bounded
+  iterator cleanup, so a retained AI SDK tee branch cannot keep generation or the next queue lane
+  alive; cleanup failure remains secondary to the original runtime/storage failure.
+
 ## [0.87.1] — 2026-09-08
 
 ### Fixed

package/dist/agent-runtime/child-blocking.d.ts

@@ -0,0 +1,17 @@
+import { type AgentChildBlockingDecision, type AgentChildBlockingEvent, type AgentChildHandle, type AgentChildRecord } from './children-contract.js';
+import type { AgentRuntimeStore } from './store.js';
+export declare function createChildBlockingRelay(input: {
+    store: AgentRuntimeStore;
+    now: () => Date;
+    handles: Map<string, AgentChildHandle>;
+    listChildren: (id: string) => readonly AgentChildRecord[];
+    activeChild: (parent: string, child: string) => {
+        handle: AgentChildHandle;
+    };
+    bounded: <V>(work: Promise<V> | V, fallback: V) => Promise<V>;
+}): {
+    retireChildBlocking: (childConversationId: string) => void;
+    listChildBlocking: (parentConversationId: string) => Promise<readonly AgentChildBlockingEvent[]>;
+    respondToChildBlocking: (parentConversationId: string, decision: AgentChildBlockingDecision) => Promise<void>;
+};
+//# sourceMappingURL=child-blocking.d.ts.map

package/dist/agent-runtime/child-blocking.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-blocking.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/child-blocking.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAG5B,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EAEtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,KAAK,EAAE,iBAAiB,CAAC;IACzB,GAAG,EAAE,MAAM,IAAI,CAAC;IAChB,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACvC,YAAY,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,SAAS,gBAAgB,EAAE,CAAC;IAC1D,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK;QAAE,MAAM,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAC7E,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;CAC/D;+CA6BmD,MAAM,KAAG,IAAI;8CA0EvC,MAAM,KAC3B,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC;mDAmCtB,MAAM,YAClB,0BAA0B,KACnC,OAAO,CAAC,IAAI,CAAC;EAIjB"}

package/dist/agent-runtime/child-budget-policy.d.ts

@@ -0,0 +1,23 @@
+import type { LanguageModelUsage } from 'ai';
+import type { AgentChildManager } from './children-contract.js';
+import type { AgentRuntimeStopPolicy } from './runtime.js';
+import type { AgentUsage } from './schemas.js';
+/**
+ * The child runtime's own budget policy.
+ *
+ * `recordStepUsage` measures and decides; something has to call it at every
+ * step boundary of the child's run, and that is the child's runtime. Given to
+ * `createAgentRuntime({ loop: { stopPolicies: [agentChildBudgetStopPolicy(…)] } })`
+ * in the host that runs the child, it records the last step's usage and stops
+ * the run as `policy_stop` (`child-budget`) when the budget is spent — the
+ * enforcement the guide promises, in the package rather than in every host.
+ */
+export declare function agentChildBudgetStopPolicy(input: {
+    manager: Pick<AgentChildManager, 'recordStepUsage'>;
+    childConversationId: string;
+    /** Cost of a step, when a USD budget is set; tokens come from the step itself. */
+    cost?: (step: {
+        usage: LanguageModelUsage;
+    }) => AgentUsage['cost'];
+}): AgentRuntimeStopPolicy;
+//# sourceMappingURL=child-budget-policy.d.ts.map

package/dist/agent-runtime/child-budget-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"child-budget-policy.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/child-budget-policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACpD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC;CACpE,GAAG,sBAAsB,CAqBzB"}

package/dist/agent-runtime/children-contract.d.ts

@@ -0,0 +1,155 @@
+import { z } from 'zod';
+import type { AgentUsage } from './schemas.js';
+export declare const AgentChildBudgetSchema: z.ZodObject<{
+    usd: z.ZodOptional<z.ZodNumber>;
+    tokens: z.ZodOptional<z.ZodInt>;
+    milliseconds: z.ZodOptional<z.ZodInt>;
+}, z.core.$strict>;
+export type AgentChildBudget = z.infer<typeof AgentChildBudgetSchema>;
+export declare const AgentChildStateSchema: z.ZodEnum<{
+    finished: "finished";
+    lost: "lost";
+    running: "running";
+    spawned: "spawned";
+    stopped: "stopped";
+}>;
+export type AgentChildState = z.infer<typeof AgentChildStateSchema>;
+export declare const AgentChildRecordSchema: z.ZodObject<{
+    parentConversationId: z.ZodString;
+    childConversationId: z.ZodString;
+    seedUptoSeq: z.ZodInt;
+    state: z.ZodEnum<{
+        finished: "finished";
+        lost: "lost";
+        running: "running";
+        spawned: "spawned";
+        stopped: "stopped";
+    }>;
+    budget: z.ZodObject<{
+        usd: z.ZodOptional<z.ZodNumber>;
+        tokens: z.ZodOptional<z.ZodInt>;
+        milliseconds: z.ZodOptional<z.ZodInt>;
+    }, z.core.$strict>;
+    usage: z.ZodObject<{
+        tokens: z.ZodInt;
+        usd: z.ZodNumber;
+        milliseconds: z.ZodInt;
+    }, z.core.$strict>;
+    resultReference: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, z.core.$strict>;
+export type AgentChildRecord = z.infer<typeof AgentChildRecordSchema>;
+/**
+ * A child is a separate conversation with its own harness, so an approval or
+ * input request is raised inside it. The parent owns presentation (ADR 0179):
+ * the manager relays the request to the parent once and routes the parent's
+ * answer back. This is the source shape an `AgentChildHandle` reports.
+ */
+export declare const AgentChildBlockingKindSchema: z.ZodEnum<{
+    approval: "approval";
+    input: "input";
+}>;
+export type AgentChildBlockingKind = z.infer<typeof AgentChildBlockingKindSchema>;
+export declare const AgentChildBlockingSourceSchema: z.ZodObject<{
+    approvalId: z.ZodString;
+    callId: z.ZodString;
+    toolName: z.ZodString;
+    input: z.ZodJSONSchema;
+    kind: z.ZodDefault<z.ZodEnum<{
+        approval: "approval";
+        input: "input";
+    }>>;
+    batchId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type AgentChildBlockingSource = z.infer<typeof AgentChildBlockingSourceSchema>;
+/** A blocking event as the parent presents it: the id is rewritten under the child. */
+export declare const AgentChildBlockingEventSchema: z.ZodObject<{
+    parentConversationId: z.ZodString;
+    childConversationId: z.ZodString;
+    kind: z.ZodEnum<{
+        approval: "approval";
+        input: "input";
+    }>;
+    approvalId: z.ZodString;
+    childApprovalId: z.ZodString;
+    callId: z.ZodString;
+    toolName: z.ZodString;
+    input: z.ZodJSONSchema;
+    batchId: z.ZodString;
+    presentedAt: z.ZodString;
+}, z.core.$strict>;
+export type AgentChildBlockingEvent = z.infer<typeof AgentChildBlockingEventSchema>;
+/** The parent's answer to a presented child blocking event. */
+export declare const ChildBlockingDecisionSchema: z.ZodUnion<readonly [z.ZodObject<{
+    approvalId: z.ZodString;
+    approved: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    approvalId: z.ZodString;
+    value: z.ZodJSONSchema;
+}, z.core.$strict>]>;
+export type AgentChildBlockingDecision = z.infer<typeof ChildBlockingDecisionSchema>;
+export declare function parseChild(raw: unknown): AgentChildRecord;
+export declare function usageNumbers(usage: AgentUsage): {
+    tokens?: number;
+    usd?: number;
+};
+export interface AgentChildHandle {
+    result: Promise<{
+        resultReference?: string;
+    }>;
+    stopPolicy(name: string): void | Promise<void>;
+    sendMessage?(input: unknown): void | Promise<void>;
+    reachable?(): boolean | Promise<boolean>;
+    /**
+     * Child-local blocking events the parent must own. The host wires this to
+     * its child harness (`pendingApprovals`); the manager presents them on the
+     * parent and never on the child. → ADR 0179
+     */
+    blockingEvents?(): readonly AgentChildBlockingSource[] | Promise<readonly AgentChildBlockingSource[]>;
+    /** Route the parent's answer to the child harness (`respondToApproval`). */
+    respondToBlocking?(decision: AgentChildBlockingDecision): void | Promise<void>;
+}
+export interface AgentChildManager {
+    spawnChild(request: {
+        parentConversationId: string;
+        childConversationId?: string;
+        seedUptoSeq?: number;
+        childInput: unknown;
+        budget: AgentChildBudget;
+    }): Promise<AgentChildRecord>;
+    listChildren(parentConversationId: string): readonly AgentChildRecord[];
+    recordStepUsage(request: {
+        childConversationId: string;
+        usage: AgentUsage;
+        elapsedMs: number;
+    }): Promise<{
+        stop: boolean;
+        /** Whether a stop was delivered to the child's host from this process. */
+        enforced: boolean;
+        policyName?: string;
+        overrun: {
+            tokens: number;
+            usd: number;
+            milliseconds: number;
+        };
+    }>;
+    stopChildren(parentConversationId: string): Promise<void>;
+    sendMessage(parentConversationId: string, childConversationId: string, input: unknown): Promise<void>;
+    interruptChild(parentConversationId: string, childConversationId: string): Promise<void>;
+    waitChild(childConversationId: string): Promise<void>;
+    /**
+     * Present each live child's blocking events on the parent exactly once and
+     * return the pending set. Never writes a presentation event to the child's
+     * own conversation. → ADR 0179
+     */
+    listChildBlocking(parentConversationId: string): Promise<readonly AgentChildBlockingEvent[]>;
+    /**
+     * Route the parent's answer to the child that raised the request. A missing,
+     * stale or already-answered id is refused. Answering one request preserves
+     * every unanswered sibling, including requests in the same presentation batch.
+     */
+    respondToChildBlocking(parentConversationId: string, decision: AgentChildBlockingDecision): Promise<void>;
+}
+//# sourceMappingURL=children-contract.d.ts.map

package/dist/agent-runtime/children-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"children-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,eAAO,MAAM,sBAAsB;;;;kBAMxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;kBAkBxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;EAAgC,CAAC;AAC1E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,eAAO,MAAM,8BAA8B;;;;;;;;;;kBAchC,CAAC;AACZ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,uFAAuF;AACvF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;kBAc/B,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF,+DAA+D;AAC/D,eAAO,MAAM,2BAA2B;;;;;;;oBAStC,CAAC;AACH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAcrF,wBAAgB,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAazD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAWjF;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC;;;;OAIG;IACH,cAAc,CAAC,IACX,SAAS,wBAAwB,EAAE,GACnC,OAAO,CAAC,SAAS,wBAAwB,EAAE,CAAC,CAAC;IACjD,4EAA4E;IAC5E,iBAAiB,CAAC,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,OAAO,EAAE;QAClB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,YAAY,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;IACxE,eAAe,CAAC,OAAO,EAAE;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,UAAU,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QACV,IAAI,EAAE,OAAO,CAAC;QACd,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KAChE,CAAC,CAAC;IACH,YAAY,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,WAAW,CACT,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,EAC3B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,SAAS,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;OAIG;IACH,iBAAiB,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,uBAAuB,EAAE,CAAC,CAAC;IAC7F;;;;OAIG;IACH,sBAAsB,CACpB,oBAAoB,EAAE,MAAM,EAC5B,QAAQ,EAAE,0BAA0B,GACnC,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB"}

package/dist/agent-runtime/children.d.ts

@@ -1,85 +1,7 @@
-import type { LanguageModelUsage } from 'ai';
-import { z } from 'zod';
-import type { AgentRuntimeStopPolicy } from './runtime.js';
-import type { AgentUsage } from './schemas.js';
+import { type AgentChildBudget, type AgentChildHandle, type AgentChildManager } from './children-contract.js';
 import type { SqliteAgentRuntimeStore } from './sqlite.js';
-export declare const AgentChildBudgetSchema: z.ZodObject<{
-    usd: z.ZodOptional<z.ZodNumber>;
-    tokens: z.ZodOptional<z.ZodInt>;
-    milliseconds: z.ZodOptional<z.ZodInt>;
-}, z.core.$strict>;
-export type AgentChildBudget = z.infer<typeof AgentChildBudgetSchema>;
-export declare const AgentChildStateSchema: z.ZodEnum<{
-    finished: "finished";
-    lost: "lost";
-    running: "running";
-    spawned: "spawned";
-    stopped: "stopped";
-}>;
-export type AgentChildState = z.infer<typeof AgentChildStateSchema>;
-export declare const AgentChildRecordSchema: z.ZodObject<{
-    parentConversationId: z.ZodString;
-    childConversationId: z.ZodString;
-    seedUptoSeq: z.ZodInt;
-    state: z.ZodEnum<{
-        finished: "finished";
-        lost: "lost";
-        running: "running";
-        spawned: "spawned";
-        stopped: "stopped";
-    }>;
-    budget: z.ZodObject<{
-        usd: z.ZodOptional<z.ZodNumber>;
-        tokens: z.ZodOptional<z.ZodInt>;
-        milliseconds: z.ZodOptional<z.ZodInt>;
-    }, z.core.$strict>;
-    usage: z.ZodObject<{
-        tokens: z.ZodInt;
-        usd: z.ZodNumber;
-        milliseconds: z.ZodInt;
-    }, z.core.$strict>;
-    resultReference: z.ZodOptional<z.ZodString>;
-    createdAt: z.ZodString;
-    updatedAt: z.ZodString;
-}, z.core.$strict>;
-export type AgentChildRecord = z.infer<typeof AgentChildRecordSchema>;
-export interface AgentChildHandle {
-    result: Promise<{
-        resultReference?: string;
-    }>;
-    stopPolicy(name: string): void | Promise<void>;
-    sendMessage?(input: unknown): void | Promise<void>;
-    reachable?(): boolean | Promise<boolean>;
-}
-export interface AgentChildManager {
-    spawnChild(request: {
-        parentConversationId: string;
-        childConversationId?: string;
-        seedUptoSeq?: number;
-        childInput: unknown;
-        budget: AgentChildBudget;
-    }): Promise<AgentChildRecord>;
-    listChildren(parentConversationId: string): readonly AgentChildRecord[];
-    recordStepUsage(request: {
-        childConversationId: string;
-        usage: AgentUsage;
-        elapsedMs: number;
-    }): Promise<{
-        stop: boolean;
-        /** Whether a stop was delivered to the child's host from this process. */
-        enforced: boolean;
-        policyName?: string;
-        overrun: {
-            tokens: number;
-            usd: number;
-            milliseconds: number;
-        };
-    }>;
-    stopChildren(parentConversationId: string): Promise<void>;
-    sendMessage(parentConversationId: string, childConversationId: string, input: unknown): Promise<void>;
-    interruptChild(parentConversationId: string, childConversationId: string): Promise<void>;
-    waitChild(childConversationId: string): Promise<void>;
-}
+export type { AgentChildBlockingDecision, AgentChildBlockingEvent, AgentChildBlockingKind, AgentChildBlockingSource, AgentChildBudget, AgentChildHandle, AgentChildManager, AgentChildRecord, AgentChildState, } from './children-contract.js';
+export { AgentChildBlockingEventSchema, AgentChildBlockingKindSchema, AgentChildBlockingSourceSchema, AgentChildBudgetSchema, AgentChildRecordSchema, AgentChildStateSchema, } from './children-contract.js';
 export declare function createSqliteAgentChildManager(input: {
     sqlite: SqliteAgentRuntimeStore;
     spawn(request: {
@@ -92,22 +14,5 @@ export declare function createSqliteAgentChildManager(input: {
     remainingBudget?(parentConversationId: string): AgentChildBudget | Promise<AgentChildBudget>;
     now?: () => Date;
 }): AgentChildManager;
-/**
- * The child runtime's own budget policy.
- *
- * `recordStepUsage` measures and decides; something has to call it at every
- * step boundary of the child's run, and that is the child's runtime. Given to
- * `createAgentRuntime({ loop: { stopPolicies: [agentChildBudgetStopPolicy(…)] } })`
- * in the host that runs the child, it records the last step's usage and stops
- * the run as `policy_stop` (`child-budget`) when the budget is spent — the
- * enforcement the guide promises, in the package rather than in every host.
- */
-export declare function agentChildBudgetStopPolicy(input: {
-    manager: Pick<AgentChildManager, 'recordStepUsage'>;
-    childConversationId: string;
-    /** Cost of a step, when a USD budget is set; tokens come from the step itself. */
-    cost?: (step: {
-        usage: LanguageModelUsage;
-    }) => AgentUsage['cost'];
-}): AgentRuntimeStopPolicy;
+export { agentChildBudgetStopPolicy } from './child-budget-policy.js';
 //# sourceMappingURL=children.d.ts.map

package/dist/agent-runtime/children.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAGxD,eAAO,MAAM,sBAAsB;;;;kBAMxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,qBAAqB;;;;;;EAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;kBAkBxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AA0CtE,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,CAAC;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,SAAS,CAAC,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,OAAO,EAAE;QAClB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,YAAY,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;IACxE,eAAe,CAAC,OAAO,EAAE;QACvB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,KAAK,EAAE,UAAU,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC;QACV,IAAI,EAAE,OAAO,CAAC;QACd,0EAA0E;QAC1E,QAAQ,EAAE,OAAO,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;KAChE,CAAC,CAAC;IACH,YAAY,CAAC,oBAAoB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,WAAW,CACT,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,EAC3B,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,CAAC,oBAAoB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF,SAAS,CAAC,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE;QACb,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,UAAU,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,oBAAoB,EAAE,MAAM,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,iBAAiB,CA+ZpB;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACpD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE,KAAK,UAAU,CAAC,MAAM,CAAC,CAAC;CACpE,GAAG,sBAAsB,CAqBzB"}
+{"version":3,"file":"children.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/children.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,gBAAgB,EAErB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EAOvB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AAGxD,YAAY,EACV,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,EAC5B,8BAA8B,EAC9B,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAE7B,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,MAAM,EAAE,uBAAuB,CAAC;IAChC,KAAK,CAAC,OAAO,EAAE;QACb,oBAAoB,EAAE,MAAM,CAAC;QAC7B,mBAAmB,EAAE,MAAM,CAAC;QAC5B,WAAW,EAAE,UAAU,CAAC;QACxB,UAAU,EAAE,OAAO,CAAC;QACpB,MAAM,EAAE,gBAAgB,CAAC;KAC1B,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjD,eAAe,CAAC,CAAC,oBAAoB,EAAE,MAAM,GAAG,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7F,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,GAAG,iBAAiB,CA4bpB;AAED,OAAO,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/agent-runtime/coding-shell-process.d.ts

@@ -0,0 +1,33 @@
+import { type AgentCodingToolConfig } from './coding-tool-contract.js';
+import type { AgentProcessSandbox } from './sandbox.js';
+export declare function runCodingShell(input: {
+    executableName: string;
+    executable: string;
+    args: readonly string[];
+    cwd: string;
+    environment: Readonly<Record<string, string>>;
+    signal?: AbortSignal;
+    timeoutMs: number;
+    terminationGraceMs: number;
+    maxOutputBytes: number;
+    maxArtifactBytes: number;
+    artifacts?: AgentCodingToolConfig['artifacts'];
+    authorization?: Parameters<NonNullable<AgentCodingToolConfig['authorize']>>[0];
+    spawn?: () => ReturnType<NonNullable<AgentProcessSandbox['spawn']>>;
+}): Promise<{
+    executable: string;
+    exitCode: number | null;
+    signal: string | null;
+    stdout: string;
+    stderr: string;
+    outcome: "cancelled" | "exited" | "output-limit" | "timeout";
+    artifact?: {
+        reference: string;
+        bytes: number;
+        truncated: boolean;
+        headBytes: number;
+        tailBytes: number;
+        omittedBytes: number;
+    } | undefined;
+}>;
+//# sourceMappingURL=coding-shell-process.d.ts.map

package/dist/agent-runtime/coding-shell-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coding-shell-process.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-shell-process.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,qBAAqB,EAAqB,MAAM,wBAAwB,CAAC;AAEvF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,qBAAqB,CAAC,WAAW,CAAC,CAAC;IAC/C,aAAa,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,CAAC,EAAE,MAAM,UAAU,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;CACrE;;;;;;;;;;;;;;;GAwMA"}

package/dist/agent-runtime/coding-tool-contract.d.ts

@@ -68,6 +68,24 @@ export declare const AgentCodingToolPathAuthorizationSchema: z.ZodObject<{
     path: z.ZodString;
 }, z.core.$strict>;
 export type AgentCodingToolPathAuthorization = z.infer<typeof AgentCodingToolPathAuthorizationSchema>;
+/**
+ * One entry the host's path policy refused while listing or searching.
+ *
+ * Only the workspace-relative path and kind travel — never content — so a
+ * caller can tell "the host will not let me see this" from "this is not here".
+ * The absence of this fact is what made a denied `.env` indistinguishable from
+ * a file that does not exist.
+ */
+export declare const CodingDeniedEntrySchema: z.ZodObject<{
+    path: z.ZodString;
+    kind: z.ZodEnum<{
+        directory: "directory";
+        file: "file";
+        other: "other";
+        symlink: "symlink";
+    }>;
+}, z.core.$strict>;
+export type CodingDeniedEntry = z.infer<typeof CodingDeniedEntrySchema>;
 export interface AgentCodingToolConfig {
     root: string;
     authorize(input: AgentCodingToolAuthorization): boolean | Promise<boolean>;

package/dist/agent-runtime/coding-tool-contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAE9E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;kBAgB7B,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA8D7C,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,sCAAsC;;kBAExC,CAAC;AAEZ,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,mBAAmB,CAAC;QAC7B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;KAC9C,CAAC;IACF,MAAM,CAAC,EAAE;QACP,wEAAwE;QACxE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,aAAa,CAAC,CACZ,SAAS,EAAE,MAAM,GAEf,4BAA4B,GAC5B,SAAS,GACT,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,UAAU,CAAC;QACjB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,4BAA4B,CAAA;KAAE,GACvF,OAAO,CAAC;QACN,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,CAAC,CAAC;IACP,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,GACG,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GACzC,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;kBAStB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;kBAcvB,CAAC;AAEZ,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE;;;;;;mBAWxE;AAED,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;kBAoBnB,CAAC;AAkBZ,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAChD,qBAAqB,CAEvB"}
+{"version":3,"file":"coding-tool-contract.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAE9E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;kBAgB7B,CAAC;AAEZ,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCA8D7C,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE9F,eAAO,MAAM,sCAAsC;;kBAExC,CAAC;AAEZ,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;kBAKzB,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,aAAa,CAAC,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,OAAO,CAAC,EAAE;QACR,OAAO,EAAE,mBAAmB,CAAC;QAC7B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,CAAC;KAC9C,CAAC;IACF,MAAM,CAAC,EAAE;QACP,wEAAwE;QACxE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACxC,CAAC;IACF,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,wBAAwB;IACvC,iEAAiE;IACjE,aAAa,CAAC,CACZ,SAAS,EAAE,MAAM,GAEf,4BAA4B,GAC5B,SAAS,GACT,OAAO,CAAC,4BAA4B,GAAG,SAAS,CAAC,CAAC;IACtD,KAAK,CAAC,KAAK,EAAE;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,UAAU,CAAC;QACjB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,GAAG;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAC/D;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,4BAA4B,CAAA;KAAE,GACvF,OAAO,CAAC;QACN,IAAI,EAAE,UAAU,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,4BAA4B,CAAC;KAC9C,CAAC,CAAC;IACP,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,GACG,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,GACzC,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE;QACR,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;KAC9D,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,SAAS,CAAC,KAAK,GAAG,OAAO,GAAG,KAAK,CAAC,EAAE,CAAC;IAClD,OAAO,CAAC,OAAO,EAAE;QACf,MAAM,EAAE,SAAS,CAAC;QAClB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChC;AAED,eAAO,MAAM,mBAAmB;;;;kBAMrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;kBAStB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;kBAMtB,CAAC;AAEZ,eAAO,MAAM,qBAAqB;;;;kBAcvB,CAAC;AAEZ,wBAAgB,sBAAsB,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE;;;;;;mBAWxE;AAED,eAAO,MAAM,gBAAgB;;;;kBAMlB,CAAC;AAEZ,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;kBAoBnB,CAAC;AAkBZ,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,SAAS,GAChD,qBAAqB,CAEvB"}

package/dist/agent-runtime/coding-tool-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-files.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAK3B,MAAM,wBAAwB,CAAC;AA+BhC,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAwJtC"}
+{"version":3,"file":"coding-tool-files.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-files.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,KAAK,qBAAqB,EAK3B,MAAM,wBAAwB,CAAC;AAgChC,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CA+LtC"}

package/dist/agent-runtime/coding-tool-listing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"coding-tool-listing.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-listing.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAchC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,UAQxC,CAAC;AAoCF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2B5D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAuGtC"}
+{"version":3,"file":"coding-tool-listing.d.ts","sourceRoot":"","sources":["../../src/agent-runtime/coding-tool-listing.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EACzB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAehC,iFAAiF;AACjF,eAAO,MAAM,4BAA4B,UAQxC,CAAC;AA6CF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CA2B5D;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,MAAM,EAAE,qBAAqB,GAC5B,SAAS,yBAAyB,EAAE,CAkItC"}

package/dist/agent-runtime/coding-tool-paths.d.ts

@@ -1,5 +1,5 @@
 import { type AgentCodingToolAuthorization, type AgentCodingToolConfig } from './coding-tool-contract.js';
-export declare function boundedCodingRelativePath(requested: string, maxPathBytes: number): string;
+export declare function boundedCodingRelativePath(root: string, requested: string, maxPathBytes: number): string;
 export declare function existingCodingPath(root: string, requested: string, maxPathBytes: number): Promise<{
     absolute: string;
     relative: string;