theokit 0.67.0 → 0.69.0

package/dist/chunk-BDPD5HEO.js

@@ -0,0 +1,554 @@
+import {
+  RUN_ID_HEADER,
+  SSE_BASE_HEADERS,
+  SSE_DONE_FRAME,
+  admitAgentRequest,
+  agentAccessDenied,
+  encodeSse,
+  formatSseFrame,
+  getApprovalRegistry,
+  getRunEventCache,
+  makeThreadStartRun,
+  mintRunId,
+  parseAgentRequestBody,
+  readAgentPolicy
+} from "./chunk-MOGTMGGA.js";
+import {
+  createServerContext
+} from "./chunk-3T5XLDOH.js";
+import {
+  validateCsrfRequest
+} from "./chunk-P6OS7652.js";
+import {
+  subjectFromContext
+} from "./chunk-IDWN2OSG.js";
+import {
+  extractAppResources,
+  handleMcpJsonRpc,
+  isMcpPath
+} from "./chunk-TQEE36VD.js";
+
+// src/server/agent/agent-card-handler.ts
+import { buildAgentCard, compileLoadedAgentModule } from "@theokit/agents";
+var WELL_KNOWN = /^\/\.well-known\/([^/]+)\/agent-card\.json$/;
+function isAgentCardPath(urlPath) {
+  const match = WELL_KNOWN.exec(urlPath);
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function toManifestEntry(name, route, mod) {
+  const compiled = compileLoadedAgentModule(mod, `agent card for "${name}"`);
+  return {
+    name,
+    route,
+    stream: compiled.stream,
+    mainLoop: { method: "", strategy: "" },
+    guards: [],
+    interceptors: [],
+    tools: compiled.tools.map((t) => ({
+      name: t.name,
+      description: t.description,
+      approval: false,
+      trace: false,
+      audit: false
+    })),
+    subAgents: []
+  };
+}
+function handleAgentCard(mod, name, route, baseUrl) {
+  try {
+    const card = buildAgentCard(toManifestEntry(name, route, mod), { baseUrl });
+    return new Response(JSON.stringify(card), {
+      status: 200,
+      headers: { "content-type": "application/json; charset=utf-8" }
+    });
+  } catch (err) {
+    return new Response(
+      JSON.stringify({
+        error: {
+          code: "AGENT_CARD_FAILED",
+          message: err instanceof Error ? err.message : "card build failed"
+        }
+      }),
+      { status: 500, headers: { "content-type": "application/json; charset=utf-8" } }
+    );
+  }
+}
+
+// src/server/agent/handle-agent-run-reconnect.ts
+var RUN_STREAM_PATH = /^\/api\/agents\/([^/]+)\/runs\/([^/]+)\/stream$/;
+function isAgentRunStreamPath(urlPath) {
+  const m = RUN_STREAM_PATH.exec(urlPath);
+  return m ? { name: decodeURIComponent(m[1]), runId: decodeURIComponent(m[2]) } : null;
+}
+function parseLastEventId(raw) {
+  if (raw === null) return -1;
+  const n = Number.parseInt(raw, 10);
+  return Number.isInteger(n) && n >= 0 ? n : -1;
+}
+function handleAgentRunReconnect(runId, request, cache) {
+  if (!cache.has(runId)) {
+    return new Response(
+      JSON.stringify({ error: { code: "RUN_NOT_FOUND", message: `Unknown run '${runId}'.` } }),
+      {
+        status: 404,
+        headers: { "content-type": "application/json" }
+      }
+    );
+  }
+  const afterSeq = parseLastEventId(request.headers.get("last-event-id"));
+  const stream = new ReadableStream({
+    start(controller) {
+      let closed = false;
+      const safeEnqueue = (text) => {
+        if (closed) return;
+        try {
+          controller.enqueue(encodeSse(text));
+        } catch {
+        }
+      };
+      const close = () => {
+        if (closed) return;
+        safeEnqueue(SSE_DONE_FRAME);
+        closed = true;
+        try {
+          controller.close();
+        } catch {
+        }
+      };
+      const res = cache.attach(
+        runId,
+        afterSeq,
+        (frame) => {
+          safeEnqueue(formatSseFrame(frame.seq, frame.data));
+        },
+        () => {
+          close();
+        }
+      );
+      if (!res.known) {
+        close();
+        return;
+      }
+      for (const frame of res.replay) {
+        safeEnqueue(formatSseFrame(frame.seq, frame.data));
+      }
+      if (res.ended) {
+        close();
+        return;
+      }
+      request.signal.addEventListener("abort", () => {
+        res.unsubscribe();
+        close();
+      });
+    }
+  });
+  return new Response(stream, { headers: { ...SSE_BASE_HEADERS, [RUN_ID_HEADER]: runId } });
+}
+
+// src/server/agent/thread-dispatcher.ts
+function postThreadFollowUp(deps, sessionId, message) {
+  if (deps.registry.getActive(sessionId) !== null) {
+    deps.registry.queue(sessionId, { message });
+    return { queued: true };
+  }
+  return { runId: startAndPump(deps, sessionId, message) };
+}
+function startAndPump(deps, sessionId, message) {
+  const runId = mintRunId();
+  deps.cache.begin(runId);
+  deps.registry.startRun(sessionId, runId);
+  pumpIntoCache(deps, sessionId, runId, deps.startRun(sessionId, message));
+  return runId;
+}
+function pumpIntoCache(deps, sessionId, runId, chunks) {
+  void (async () => {
+    try {
+      for await (const chunk of chunks) {
+        deps.cache.append(runId, JSON.stringify(chunk));
+      }
+    } catch {
+    } finally {
+      deps.cache.end(runId);
+      const next = deps.registry.endRun(sessionId, runId);
+      if (next !== void 0) startAndPump(deps, sessionId, next.message);
+    }
+  })();
+}
+
+// src/server/agent/thread-run-registry.ts
+function createInProcessThreadRunRegistry() {
+  const threads = /* @__PURE__ */ new Map();
+  const ensure = (sessionId) => {
+    let s = threads.get(sessionId);
+    if (s === void 0) {
+      s = { activeRunId: null, queue: [], waiters: /* @__PURE__ */ new Set() };
+      threads.set(sessionId, s);
+    }
+    return s;
+  };
+  return {
+    getActive(sessionId) {
+      return threads.get(sessionId)?.activeRunId ?? null;
+    },
+    startRun(sessionId, runId) {
+      const s = ensure(sessionId);
+      s.activeRunId = runId;
+      const waiters = [...s.waiters];
+      s.waiters.clear();
+      for (const cb of waiters) cb(runId);
+    },
+    endRun(sessionId, runId) {
+      const s = threads.get(sessionId);
+      if (s?.activeRunId !== runId) return void 0;
+      s.activeRunId = null;
+      return s.queue.shift();
+    },
+    queue(sessionId, followUp) {
+      ensure(sessionId).queue.push(followUp);
+    },
+    onNextRun(sessionId, cb) {
+      const s = ensure(sessionId);
+      s.waiters.add(cb);
+      return () => {
+        s.waiters.delete(cb);
+      };
+    }
+  };
+}
+var serverRegistry;
+function getThreadRunRegistry() {
+  serverRegistry ??= createInProcessThreadRunRegistry();
+  return serverRegistry;
+}
+
+// src/server/agent/handle-thread-routes.ts
+var THREAD_MESSAGE_PATH = /^\/api\/agents\/([^/]+)\/threads\/([^/]+)\/message$/;
+var THREAD_STREAM_PATH = /^\/api\/agents\/([^/]+)\/threads\/([^/]+)\/stream$/;
+var DEFAULT_IDLE_WAIT_MS = 3e4;
+function matchThread(re, urlPath) {
+  const m = re.exec(urlPath);
+  return m ? { name: decodeURIComponent(m[1]), sessionId: decodeURIComponent(m[2]) } : null;
+}
+var isThreadMessagePath = (urlPath) => matchThread(THREAD_MESSAGE_PATH, urlPath);
+var isThreadStreamPath = (urlPath) => matchThread(THREAD_STREAM_PATH, urlPath);
+function jsonError(status, code, message) {
+  return new Response(JSON.stringify({ error: { code, message } }), {
+    status,
+    headers: { "content-type": "application/json; charset=utf-8" }
+  });
+}
+async function handleThreadMessage(args) {
+  const { mod, apiKey, sessionId, request, source, agentName, csrfMode = "strict" } = args;
+  if (csrfMode === "strict") {
+    const csrf = validateCsrfRequest(request);
+    if (!csrf.valid) return jsonError(403, "CSRF_FAILED", `CSRF check failed: ${csrf.reason}`);
+  }
+  let body = null;
+  try {
+    body = await request.json();
+  } catch {
+  }
+  const input = parseAgentRequestBody(body);
+  if (input === null) {
+    return jsonError(400, "BAD_REQUEST", "Request must contain a non-empty message.");
+  }
+  const result = postThreadFollowUp(
+    {
+      registry: getThreadRunRegistry(),
+      cache: getRunEventCache(),
+      // usetheokit/theokit#381 — the request goes with it, so the run's spans join the trace of
+      // the caller that queued it instead of opening one of their own.
+      startRun: makeThreadStartRun(mod, apiKey, source, agentName, request)
+    },
+    sessionId,
+    input.message
+  );
+  const headers = { "content-type": "application/json; charset=utf-8" };
+  if ("runId" in result) headers[RUN_ID_HEADER] = result.runId;
+  return new Response(JSON.stringify(result), { status: 202, headers });
+}
+function handleThreadStream(sessionId, request, registry = getThreadRunRegistry(), cache = getRunEventCache(), idleWaitMs = DEFAULT_IDLE_WAIT_MS) {
+  const active = registry.getActive(sessionId);
+  if (active !== null && cache.has(active)) {
+    return handleAgentRunReconnect(active, request, cache);
+  }
+  return waitThenAttachStream(sessionId, request, registry, cache, idleWaitMs);
+}
+function waitThenAttachStream(sessionId, request, registry, cache, idleWaitMs) {
+  const stream = new ReadableStream({
+    start(controller) {
+      let closed = false;
+      const send = (text) => {
+        if (closed) return;
+        try {
+          controller.enqueue(encodeSse(text));
+        } catch {
+        }
+      };
+      let detachAttach;
+      const close = () => {
+        if (closed) return;
+        send(SSE_DONE_FRAME);
+        closed = true;
+        try {
+          controller.close();
+        } catch {
+        }
+      };
+      const offNext = registry.onNextRun(sessionId, (runId) => {
+        const res = cache.attach(
+          runId,
+          -1,
+          (frame) => {
+            send(formatSseFrame(frame.seq, frame.data));
+          },
+          () => {
+            close();
+          }
+        );
+        if (!res.known) {
+          close();
+          return;
+        }
+        for (const frame of res.replay) send(formatSseFrame(frame.seq, frame.data));
+        if (res.ended) {
+          close();
+          return;
+        }
+        detachAttach = res.unsubscribe;
+      });
+      const teardownWaiter = () => {
+        offNext();
+        detachAttach?.();
+      };
+      const timer = setTimeout(() => {
+        teardownWaiter();
+        close();
+      }, idleWaitMs);
+      timer.unref();
+      request.signal.addEventListener("abort", () => {
+        teardownWaiter();
+        clearTimeout(timer);
+        close();
+      });
+    }
+  });
+  return new Response(stream, { headers: { ...SSE_BASE_HEADERS } });
+}
+
+// src/server/agent/list-approvals-handler.ts
+var LIST_PATH = /^\/api\/agents\/([^/]+)\/approvals$/;
+function isListApprovalsPath(urlPath) {
+  const match = LIST_PATH.exec(urlPath);
+  return match ? decodeURIComponent(match[1]) : null;
+}
+function handleListApprovals(registry, subject) {
+  const visible = registry.list().filter((approval) => {
+    const owner = registry.ownerOf(approval.approvalId);
+    return owner === void 0 || owner === subject;
+  });
+  return new Response(JSON.stringify({ approvals: visible, scope: registry.scope ?? "instance" }), {
+    status: 200,
+    headers: { "content-type": "application/json; charset=utf-8" }
+  });
+}
+
+// src/server/agent/serve-aux-routes.ts
+function jsonError2(status, code, message) {
+  return new Response(JSON.stringify({ error: { code, message } }), {
+    status,
+    headers: { "content-type": "application/json; charset=utf-8" }
+  });
+}
+function routeFor(deps, name, build) {
+  if (name === null) return null;
+  const agent = deps.agents.find((a) => a.name === name);
+  return agent === void 0 ? null : build(agent);
+}
+function matchGetAuxRoute(verb, urlPath, deps) {
+  if (verb !== "GET") return null;
+  const card = routeFor(
+    deps,
+    isAgentCardPath(urlPath),
+    (agent) => ({ kind: "card", agent })
+  );
+  if (card !== null) return card;
+  const approvals = routeFor(
+    deps,
+    isListApprovalsPath(urlPath),
+    (agent) => ({ kind: "approvals", agent })
+  );
+  if (approvals !== null) return approvals;
+  const run = isAgentRunStreamPath(urlPath);
+  if (run !== null) {
+    return routeFor(
+      deps,
+      run.name,
+      (agent) => ({ kind: "run-stream", agent, runId: run.runId })
+    );
+  }
+  const stream = isThreadStreamPath(urlPath);
+  if (stream === null) return null;
+  return routeFor(
+    deps,
+    stream.name,
+    (agent) => ({ kind: "thread-stream", agent, sessionId: stream.sessionId })
+  );
+}
+async function matchPostAuxRoute(verb, urlPath, deps) {
+  if (verb !== "POST") return null;
+  const msg = isThreadMessagePath(urlPath);
+  if (msg !== null) {
+    return routeFor(
+      deps,
+      msg.name,
+      (agent2) => ({ kind: "thread-message", agent: agent2, sessionId: msg.sessionId })
+    );
+  }
+  const agent = routeFor(deps, isMcpPath(urlPath), (found) => found);
+  if (agent === null) return null;
+  const mod = await deps.loadModule(agent.filePath);
+  return isMcpExposed(mod) ? { kind: "mcp", agent, mod } : null;
+}
+async function matchAgentAuxRoute(method, urlPath, deps) {
+  const verb = method.toUpperCase();
+  return matchGetAuxRoute(verb, urlPath, deps) ?? await matchPostAuxRoute(verb, urlPath, deps);
+}
+async function admitAux(deps, agent, params, body) {
+  const mod = await deps.loadModule(agent.filePath);
+  const resolve2 = deps.resolveSubject;
+  const admitted = { subject: null };
+  const recording = resolve2 === void 0 ? void 0 : async () => {
+    admitted.subject = await resolve2();
+    return admitted.subject;
+  };
+  const decision = await admitAgentRequest(
+    readAgentPolicy(mod, agent.filePath),
+    recording,
+    params,
+    body
+  );
+  const refusal = decision.allowed ? null : agentAccessDenied(decision, params);
+  return { refusal, subject: admitted.subject?.id };
+}
+async function serveMatchedAuxRoute(route, request, deps) {
+  if (route.kind === "card") {
+    const mod = await deps.loadModule(route.agent.filePath);
+    return handleAgentCard(mod, route.agent.name, route.agent.agentPath, deps.baseUrl);
+  }
+  if (route.kind === "approvals") {
+    const admission = await admitAux(deps, route.agent, {
+      agent: route.agent.name,
+      endpoint: "approvals"
+    });
+    if (admission.refusal !== null) return admission.refusal;
+    return handleListApprovals(getApprovalRegistry(), admission.subject);
+  }
+  if (route.kind === "run-stream") {
+    return handleAgentRunReconnect(route.runId, request, getRunEventCache());
+  }
+  if (route.kind === "mcp") return serveMcpRoute(route, request, deps);
+  return serveThreadRoute(route, request, deps);
+}
+async function serveThreadRoute(route, request, deps) {
+  const { agent, sessionId } = route;
+  if (route.kind === "thread-stream") {
+    const { refusal: refusal2 } = await admitAux(deps, agent, {
+      agent: agent.name,
+      endpoint: "thread-stream",
+      sessionId
+    });
+    return refusal2 ?? handleThreadStream(sessionId, request);
+  }
+  const { refusal } = await admitAux(deps, agent, {
+    agent: agent.name,
+    endpoint: "thread-message",
+    sessionId
+  });
+  if (refusal !== null) return refusal;
+  if (deps.resolveApiKey === void 0) {
+    return jsonError2(
+      501,
+      "NOT_CONFIGURED",
+      "Thread follow-up requires a provider API key (resolveApiKey was not provided to serveMatchedAuxRoute)."
+    );
+  }
+  const mod = await deps.loadModule(agent.filePath);
+  return handleThreadMessage({
+    mod,
+    // Passed unresolved: `makeThreadStartRun` calls it once the module is compiled and the
+    // model is known (theokit#328).
+    apiKey: deps.resolveApiKey,
+    sessionId,
+    request,
+    source: `agent "${agent.name}"`,
+    // usetheokit/theokit#406 — the label above reads well in an `AgentDefinitionError` and is not
+    // a name; the spans get the name, so the same agent is one series whichever route started it.
+    agentName: agent.name,
+    csrfMode: deps.csrfMode ?? "strict"
+  });
+}
+async function serveMcpRoute(route, request, deps) {
+  const { agent, mod } = route;
+  const mcpParams = { agent: agent.name, endpoint: "mcp" };
+  const mcpDecision = await admitAgentRequest(
+    readAgentPolicy(mod, agent.filePath),
+    deps.resolveSubject,
+    mcpParams
+  );
+  if (!mcpDecision.allowed) return agentAccessDenied(mcpDecision, mcpParams);
+  const csrfMode = deps.csrfMode ?? "strict";
+  if (csrfMode === "strict") {
+    const csrf = validateCsrfRequest(request);
+    if (!csrf.valid) return jsonError2(403, "CSRF_FAILED", `CSRF check failed: ${csrf.reason}`);
+  }
+  let body = null;
+  try {
+    body = await request.json();
+  } catch {
+  }
+  return handleMcpJsonRpc(mod, agent.name, body, extractAppResources(mod));
+}
+function isMcpExposed(mod) {
+  return mod?.mcp === true;
+}
+
+// src/server/http/resolve-agent-subject.ts
+function createAgentSubjectResolver(sources) {
+  let pending;
+  return () => {
+    pending ??= resolve(sources);
+    return pending;
+  };
+}
+async function resolve(sources) {
+  const { req, res, loadModule, serverDir, pluginRunner } = sources;
+  const produced = serverDir === void 0 ? {} : await createServerContext(req, res, loadModule, serverDir);
+  return subjectFrom(produced, pluginRunner);
+}
+function createSubjectResolverFromFactory(createContext, request, response, pluginRunner) {
+  let pending;
+  return () => {
+    pending ??= (async () => subjectFrom(
+      // An app with no `context.ts` bakes no factory, and an anonymous caller is the honest
+      // answer — not an error, and not a subject invented to fill the slot.
+      createContext === void 0 ? {} : await createContext({ request, response }),
+      pluginRunner
+    ))();
+    return pending;
+  };
+}
+function subjectFrom(produced, pluginRunner) {
+  const ctx = produced ?? {};
+  pluginRunner?.applyDecorations(ctx);
+  return subjectFromContext(ctx);
+}
+
+export {
+  isAgentCardPath,
+  matchAgentAuxRoute,
+  serveMatchedAuxRoute,
+  createAgentSubjectResolver,
+  createSubjectResolverFromFactory
+};
+//# sourceMappingURL=chunk-BDPD5HEO.js.map

package/dist/chunk-BDPD5HEO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server/agent/agent-card-handler.ts","../src/server/agent/handle-agent-run-reconnect.ts","../src/server/agent/thread-dispatcher.ts","../src/server/agent/thread-run-registry.ts","../src/server/agent/handle-thread-routes.ts","../src/server/agent/list-approvals-handler.ts","../src/server/agent/serve-aux-routes.ts","../src/server/http/resolve-agent-subject.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA,SAAkC,gBAAgB,gCAAgC;AAElF,IAAM,aAAa;AAGZ,SAAS,gBAAgB,SAAgC;AAC9D,QAAM,QAAQ,WAAW,KAAK,OAAO;AACrC,SAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAChD;AAGA,SAAS,gBAAgB,MAAc,OAAe,KAAkC;AACtF,QAAM,WAAW,yBAAyB,KAAK,mBAAmB,IAAI,GAAG;AACzE,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,QAAQ,SAAS;AAAA,IACjB,UAAU,EAAE,QAAQ,IAAI,UAAU,GAAG;AAAA,IACrC,QAAQ,CAAC;AAAA,IACT,cAAc,CAAC;AAAA,IACf,OAAO,SAAS,MAAM,IAAI,CAAC,OAAO;AAAA,MAChC,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,UAAU;AAAA,MACV,OAAO;AAAA,MACP,OAAO;AAAA,IACT,EAAE;AAAA,IACF,WAAW,CAAC;AAAA,EACd;AACF;AAMO,SAAS,gBACd,KACA,MACA,OACA,SACU;AACV,MAAI;AACF,UAAM,OAAO,eAAe,gBAAgB,MAAM,OAAO,GAAG,GAAG,EAAE,QAAQ,CAAC;AAC1E,WAAO,IAAI,SAAS,KAAK,UAAU,IAAI,GAAG;AAAA,MACxC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,IAC/D,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO,IAAI;AAAA,MACT,KAAK,UAAU;AAAA,QACb,OAAO;AAAA,UACL,MAAM;AAAA,UACN,SAAS,eAAe,QAAQ,IAAI,UAAU;AAAA,QAChD;AAAA,MACF,CAAC;AAAA,MACD,EAAE,QAAQ,KAAK,SAAS,EAAE,gBAAgB,kCAAkC,EAAE;AAAA,IAChF;AAAA,EACF;AACF;;;AC9CA,IAAM,kBAAkB;AAMjB,SAAS,qBAAqB,SAAyD;AAC5F,QAAM,IAAI,gBAAgB,KAAK,OAAO;AACtC,SAAO,IAAI,EAAE,MAAM,mBAAmB,EAAE,CAAC,CAAC,GAAG,OAAO,mBAAmB,EAAE,CAAC,CAAC,EAAE,IAAI;AACnF;AAGA,SAAS,iBAAiB,KAA4B;AACpD,MAAI,QAAQ,KAAM,QAAO;AACzB,QAAM,IAAI,OAAO,SAAS,KAAK,EAAE;AACjC,SAAO,OAAO,UAAU,CAAC,KAAK,KAAK,IAAI,IAAI;AAC7C;AAEO,SAAS,wBACd,OACA,SACA,OACU;AAEV,MAAI,CAAC,MAAM,IAAI,KAAK,GAAG;AACrB,WAAO,IAAI;AAAA,MACT,KAAK,UAAU,EAAE,OAAO,EAAE,MAAM,iBAAiB,SAAS,gBAAgB,KAAK,KAAK,EAAE,CAAC;AAAA,MACvF;AAAA,QACE,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAW,iBAAiB,QAAQ,QAAQ,IAAI,eAAe,CAAC;AAEtE,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,UAAI,SAAS;AACb,YAAM,cAAc,CAAC,SAAuB;AAC1C,YAAI,OAAQ;AACZ,YAAI;AACF,qBAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,QACpC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,YAAM,QAAQ,MAAY;AACxB,YAAI,OAAQ;AACZ,oBAAY,cAAc;AAC1B,iBAAS;AACT,YAAI;AACF,qBAAW,MAAM;AAAA,QACnB,QAAQ;AAAA,QAER;AAAA,MACF;AAGA,YAAM,MAAM,MAAM;AAAA,QAChB;AAAA,QACA;AAAA,QACA,CAAC,UAAU;AACT,sBAAY,eAAe,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,QACnD;AAAA,QACA,MAAM;AACJ,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,UAAI,CAAC,IAAI,OAAO;AACd,cAAM;AACN;AAAA,MACF;AACA,iBAAW,SAAS,IAAI,QAAQ;AAC9B,oBAAY,eAAe,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,MACnD;AACA,UAAI,IAAI,OAAO;AACb,cAAM;AACN;AAAA,MACF;AAEA,cAAQ,OAAO,iBAAiB,SAAS,MAAM;AAC7C,YAAI,YAAY;AAChB,cAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AAED,SAAO,IAAI,SAAS,QAAQ,EAAE,SAAS,EAAE,GAAG,kBAAkB,CAAC,aAAa,GAAG,MAAM,EAAE,CAAC;AAC1F;;;ACxEO,SAAS,mBACd,MACA,WACA,SACoB;AACpB,MAAI,KAAK,SAAS,UAAU,SAAS,MAAM,MAAM;AAC/C,SAAK,SAAS,MAAM,WAAW,EAAE,QAAQ,CAAC;AAC1C,WAAO,EAAE,QAAQ,KAAK;AAAA,EACxB;AACA,SAAO,EAAE,OAAO,aAAa,MAAM,WAAW,OAAO,EAAE;AACzD;AAGA,SAAS,aAAa,MAA0B,WAAmB,SAAyB;AAC1F,QAAM,QAAQ,UAAU;AAGxB,OAAK,MAAM,MAAM,KAAK;AACtB,OAAK,SAAS,SAAS,WAAW,KAAK;AACvC,gBAAc,MAAM,WAAW,OAAO,KAAK,SAAS,WAAW,OAAO,CAAC;AACvE,SAAO;AACT;AAOA,SAAS,cACP,MACA,WACA,OACA,QACM;AACN,QAAM,YAAY;AAChB,QAAI;AACF,uBAAiB,SAAS,QAAQ;AAChC,aAAK,MAAM,OAAO,OAAO,KAAK,UAAU,KAAK,CAAC;AAAA,MAChD;AAAA,IACF,QAAQ;AAAA,IAGR,UAAE;AACA,WAAK,MAAM,IAAI,KAAK;AACpB,YAAM,OAAO,KAAK,SAAS,OAAO,WAAW,KAAK;AAClD,UAAI,SAAS,OAAW,cAAa,MAAM,WAAW,KAAK,OAAO;AAAA,IACpE;AAAA,EACF,GAAG;AACL;;;ACnCO,SAAS,mCAAsD;AACpE,QAAM,UAAU,oBAAI,IAAyB;AAC7C,QAAM,SAAS,CAAC,cAAmC;AACjD,QAAI,IAAI,QAAQ,IAAI,SAAS;AAC7B,QAAI,MAAM,QAAW;AACnB,UAAI,EAAE,aAAa,MAAM,OAAO,CAAC,GAAG,SAAS,oBAAI,IAAI,EAAE;AACvD,cAAQ,IAAI,WAAW,CAAC;AAAA,IAC1B;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AAAA,IACL,UAAU,WAAW;AACnB,aAAO,QAAQ,IAAI,SAAS,GAAG,eAAe;AAAA,IAChD;AAAA,IACA,SAAS,WAAW,OAAO;AACzB,YAAM,IAAI,OAAO,SAAS;AAC1B,QAAE,cAAc;AAEhB,YAAM,UAAU,CAAC,GAAG,EAAE,OAAO;AAC7B,QAAE,QAAQ,MAAM;AAChB,iBAAW,MAAM,QAAS,IAAG,KAAK;AAAA,IACpC;AAAA,IACA,OAAO,WAAW,OAAO;AACvB,YAAM,IAAI,QAAQ,IAAI,SAAS;AAC/B,UAAI,GAAG,gBAAgB,MAAO,QAAO;AACrC,QAAE,cAAc;AAChB,aAAO,EAAE,MAAM,MAAM;AAAA,IACvB;AAAA,IACA,MAAM,WAAW,UAAU;AACzB,aAAO,SAAS,EAAE,MAAM,KAAK,QAAQ;AAAA,IACvC;AAAA,IACA,UAAU,WAAW,IAAI;AACvB,YAAM,IAAI,OAAO,SAAS;AAC1B,QAAE,QAAQ,IAAI,EAAE;AAChB,aAAO,MAAM;AACX,UAAE,QAAQ,OAAO,EAAE;AAAA,MACrB;AAAA,IACF;AAAA,EACF;AACF;AAEA,IAAI;AAGG,SAAS,uBAA0C;AACxD,qBAAmB,iCAAiC;AACpD,SAAO;AACT;;;ACnEA,IAAM,sBAAsB;AAC5B,IAAM,qBAAqB;AAG3B,IAAM,uBAAuB;AAE7B,SAAS,YAAY,IAAY,SAA6D;AAC5F,QAAM,IAAI,GAAG,KAAK,OAAO;AACzB,SAAO,IAAI,EAAE,MAAM,mBAAmB,EAAE,CAAC,CAAC,GAAG,WAAW,mBAAmB,EAAE,CAAC,CAAC,EAAE,IAAI;AACvF;AAEO,IAAM,sBAAsB,CAAC,YAAoB,YAAY,qBAAqB,OAAO;AACzF,IAAM,qBAAqB,CAAC,YAAoB,YAAY,oBAAoB,OAAO;AAE9F,SAAS,UAAU,QAAgB,MAAc,SAA2B;AAC1E,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,EAAE,MAAM,QAAQ,EAAE,CAAC,GAAG;AAAA,IAChE;AAAA,IACA,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,EAC/D,CAAC;AACH;AAqBA,eAAsB,oBAAoB,MAA4C;AACpF,QAAM,EAAE,KAAK,QAAQ,WAAW,SAAS,QAAQ,WAAW,WAAW,SAAS,IAAI;AAEpF,MAAI,aAAa,UAAU;AACzB,UAAM,OAAO,oBAAoB,OAAO;AACxC,QAAI,CAAC,KAAK,MAAO,QAAO,UAAU,KAAK,eAAe,sBAAsB,KAAK,MAAM,EAAE;AAAA,EAC3F;AACA,MAAI,OAAgB;AACpB,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,EAC5B,QAAQ;AAAA,EAER;AACA,QAAM,QAAQ,sBAAsB,IAAI;AACxC,MAAI,UAAU,MAAM;AAClB,WAAO,UAAU,KAAK,eAAe,2CAA2C;AAAA,EAClF;AACA,QAAM,SAAS;AAAA,IACb;AAAA,MACE,UAAU,qBAAqB;AAAA,MAC/B,OAAO,iBAAiB;AAAA;AAAA;AAAA,MAGxB,UAAU,mBAAmB,KAAK,QAAQ,QAAQ,WAAW,OAAO;AAAA,IACtE;AAAA,IACA;AAAA,IACA,MAAM;AAAA,EACR;AACA,QAAM,UAAkC,EAAE,gBAAgB,kCAAkC;AAC5F,MAAI,WAAW,OAAQ,SAAQ,aAAa,IAAI,OAAO;AACvD,SAAO,IAAI,SAAS,KAAK,UAAU,MAAM,GAAG,EAAE,QAAQ,KAAK,QAAQ,CAAC;AACtE;AAGO,SAAS,mBACd,WACA,SACA,WAA8B,qBAAqB,GACnD,QAAuB,iBAAiB,GACxC,aAAa,sBACH;AACV,QAAM,SAAS,SAAS,UAAU,SAAS;AAC3C,MAAI,WAAW,QAAQ,MAAM,IAAI,MAAM,GAAG;AAExC,WAAO,wBAAwB,QAAQ,SAAS,KAAK;AAAA,EACvD;AACA,SAAO,qBAAqB,WAAW,SAAS,UAAU,OAAO,UAAU;AAC7E;AAGA,SAAS,qBACP,WACA,SACA,UACA,OACA,YACU;AACV,QAAM,SAAS,IAAI,eAA2B;AAAA,IAC5C,MAAM,YAAY;AAChB,UAAI,SAAS;AACb,YAAM,OAAO,CAAC,SAAuB;AACnC,YAAI,OAAQ;AACZ,YAAI;AACF,qBAAW,QAAQ,UAAU,IAAI,CAAC;AAAA,QACpC,QAAQ;AAAA,QAER;AAAA,MACF;AACA,UAAI;AACJ,YAAM,QAAQ,MAAY;AACxB,YAAI,OAAQ;AACZ,aAAK,cAAc;AACnB,iBAAS;AACT,YAAI;AACF,qBAAW,MAAM;AAAA,QACnB,QAAQ;AAAA,QAER;AAAA,MACF;AACA,YAAM,UAAU,SAAS,UAAU,WAAW,CAAC,UAAU;AACvD,cAAM,MAAM,MAAM;AAAA,UAChB;AAAA,UACA;AAAA,UACA,CAAC,UAAU;AACT,iBAAK,eAAe,MAAM,KAAK,MAAM,IAAI,CAAC;AAAA,UAC5C;AAAA,UACA,MAAM;AACJ,kBAAM;AAAA,UACR;AAAA,QACF;AACA,YAAI,CAAC,IAAI,OAAO;AACd,gBAAM;AACN;AAAA,QACF;AACA,mBAAW,SAAS,IAAI,OAAQ,MAAK,eAAe,MAAM,KAAK,MAAM,IAAI,CAAC;AAC1E,YAAI,IAAI,OAAO;AACb,gBAAM;AACN;AAAA,QACF;AACA,uBAAe,IAAI;AAAA,MACrB,CAAC;AAID,YAAM,iBAAiB,MAAY;AACjC,gBAAQ;AACR,uBAAe;AAAA,MACjB;AACA,YAAM,QAAQ,WAAW,MAAM;AAC7B,uBAAe;AACf,cAAM;AAAA,MACR,GAAG,UAAU;AACb,YAAM,MAAM;AACZ,cAAQ,OAAO,iBAAiB,SAAS,MAAM;AAC7C,uBAAe;AACf,qBAAa,KAAK;AAClB,cAAM;AAAA,MACR,CAAC;AAAA,IACH;AAAA,EACF,CAAC;AACD,SAAO,IAAI,SAAS,QAAQ,EAAE,SAAS,EAAE,GAAG,iBAAiB,EAAE,CAAC;AAClE;;;AChKA,IAAM,YAAY;AAGX,SAAS,oBAAoB,SAAgC;AAClE,QAAM,QAAQ,UAAU,KAAK,OAAO;AACpC,SAAO,QAAQ,mBAAmB,MAAM,CAAC,CAAC,IAAI;AAChD;AAYO,SAAS,oBACd,UACA,SACU;AACV,QAAM,UAAU,SAAS,KAAK,EAAE,OAAO,CAAC,aAAa;AACnD,UAAM,QAAQ,SAAS,QAAQ,SAAS,UAAU;AAClD,WAAO,UAAU,UAAa,UAAU;AAAA,EAC1C,CAAC;AAKD,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,WAAW,SAAS,OAAO,SAAS,SAAS,WAAW,CAAC,GAAG;AAAA,IAC/F,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,EAC/D,CAAC;AACH;;;ACPA,SAASA,WAAU,QAAgB,MAAc,SAA2B;AAC1E,SAAO,IAAI,SAAS,KAAK,UAAU,EAAE,OAAO,EAAE,MAAM,QAAQ,EAAE,CAAC,GAAG;AAAA,IAChE;AAAA,IACA,SAAS,EAAE,gBAAgB,kCAAkC;AAAA,EAC/D,CAAC;AACH;AAyDA,SAAS,SACP,MACA,MACA,OACU;AACV,MAAI,SAAS,KAAM,QAAO;AAC1B,QAAM,QAAQ,KAAK,OAAO,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI;AACrD,SAAO,UAAU,SAAY,OAAO,MAAM,KAAK;AACjD;AAGA,SAAS,iBAAiB,MAAc,SAAiB,MAA0C;AACjG,MAAI,SAAS,MAAO,QAAO;AAG3B,QAAM,OAAO;AAAA,IACX;AAAA,IACA,gBAAgB,OAAO;AAAA,IACvB,CAAC,WAAW,EAAE,MAAM,QAAQ,MAAM;AAAA,EACpC;AACA,MAAI,SAAS,KAAM,QAAO;AAG1B,QAAM,YAAY;AAAA,IAChB;AAAA,IACA,oBAAoB,OAAO;AAAA,IAC3B,CAAC,WAAW,EAAE,MAAM,aAAa,MAAM;AAAA,EACzC;AACA,MAAI,cAAc,KAAM,QAAO;AAG/B,QAAM,MAAM,qBAAqB,OAAO;AACxC,MAAI,QAAQ,MAAM;AAChB,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ,CAAC,WAAW,EAAE,MAAM,cAAc,OAAO,OAAO,IAAI,MAAM;AAAA,IAC5D;AAAA,EACF;AAGA,QAAM,SAAS,mBAAmB,OAAO;AACzC,MAAI,WAAW,KAAM,QAAO;AAC5B,SAAO;AAAA,IACL;AAAA,IACA,OAAO;AAAA,IACP,CAAC,WAAW,EAAE,MAAM,iBAAiB,OAAO,WAAW,OAAO,UAAU;AAAA,EAC1E;AACF;AAGA,eAAe,kBACb,MACA,SACA,MAC+B;AAC/B,MAAI,SAAS,OAAQ,QAAO;AAG5B,QAAM,MAAM,oBAAoB,OAAO;AACvC,MAAI,QAAQ,MAAM;AAChB,WAAO;AAAA,MACL;AAAA,MACA,IAAI;AAAA,MACJ,CAACC,YAAW,EAAE,MAAM,kBAAkB,OAAAA,QAAO,WAAW,IAAI,UAAU;AAAA,IACxE;AAAA,EACF;AAGA,QAAM,QAAQ,SAAS,MAAM,UAAU,OAAO,GAAG,CAAC,UAAU,KAAK;AACjE,MAAI,UAAU,KAAM,QAAO;AAK3B,QAAM,MAAM,MAAM,KAAK,WAAW,MAAM,QAAQ;AAChD,SAAO,aAAa,GAAG,IAAI,EAAE,MAAM,OAAO,OAAO,IAAI,IAAI;AAC3D;AAiBA,eAAsB,mBACpB,QACA,SACA,MAC+B;AAC/B,QAAM,OAAO,OAAO,YAAY;AAChC,SAAO,iBAAiB,MAAM,SAAS,IAAI,KAAM,MAAM,kBAAkB,MAAM,SAAS,IAAI;AAC9F;AAgBA,eAAe,SACb,MACA,OACA,QACA,MACoB;AACpB,QAAM,MAAM,MAAM,KAAK,WAAW,MAAM,QAAQ;AAMhD,QAAMC,WAAU,KAAK;AAGrB,QAAM,WAA6C,EAAE,SAAS,KAAK;AACnE,QAAM,YACJA,aAAY,SACR,SACA,YAAY;AACV,aAAS,UAAU,MAAMA,SAAQ;AACjC,WAAO,SAAS;AAAA,EAClB;AACN,QAAM,WAAW,MAAM;AAAA,IACrB,gBAAgB,KAAK,MAAM,QAAQ;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,QAAM,UAAU,SAAS,UAAU,OAAO,kBAAkB,UAAU,MAAM;AAC5E,SAAO,EAAE,SAAS,SAAS,SAAS,SAAS,GAAG;AAClD;AAOA,eAAsB,qBACpB,OACA,SACA,MACmB;AACnB,MAAI,MAAM,SAAS,QAAQ;AACzB,UAAM,MAAM,MAAM,KAAK,WAAW,MAAM,MAAM,QAAQ;AACtD,WAAO,gBAAgB,KAAK,MAAM,MAAM,MAAM,MAAM,MAAM,WAAW,KAAK,OAAO;AAAA,EACnF;AAIA,MAAI,MAAM,SAAS,aAAa;AAC9B,UAAM,YAAY,MAAM,SAAS,MAAM,MAAM,OAAO;AAAA,MAClD,OAAO,MAAM,MAAM;AAAA,MACnB,UAAU;AAAA,IACZ,CAAC;AACD,QAAI,UAAU,YAAY,KAAM,QAAO,UAAU;AAGjD,WAAO,oBAAoB,oBAAoB,GAAG,UAAU,OAAO;AAAA,EACrE;AASA,MAAI,MAAM,SAAS,cAAc;AAC/B,WAAO,wBAAwB,MAAM,OAAO,SAAS,iBAAiB,CAAC;AAAA,EACzE;AAEA,MAAI,MAAM,SAAS,MAAO,QAAO,cAAc,OAAO,SAAS,IAAI;AAEnE,SAAO,iBAAiB,OAAO,SAAS,IAAI;AAC9C;AAuBA,eAAe,iBACb,OACA,SACA,MACmB;AACnB,QAAM,EAAE,OAAO,UAAU,IAAI;AAE7B,MAAI,MAAM,SAAS,iBAAiB;AAClC,UAAM,EAAE,SAAAC,SAAQ,IAAI,MAAM,SAAS,MAAM,OAAO;AAAA,MAC9C,OAAO,MAAM;AAAA,MACb,UAAU;AAAA,MACV;AAAA,IACF,CAAC;AACD,WAAOA,YAAW,mBAAmB,WAAW,OAAO;AAAA,EACzD;AAEA,QAAM,EAAE,QAAQ,IAAI,MAAM,SAAS,MAAM,OAAO;AAAA,IAC9C,OAAO,MAAM;AAAA,IACb,UAAU;AAAA,IACV;AAAA,EACF,CAAC;AACD,MAAI,YAAY,KAAM,QAAO;AAC7B,MAAI,KAAK,kBAAkB,QAAW;AAGpC,WAAOH;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,QAAM,MAAM,MAAM,KAAK,WAAW,MAAM,QAAQ;AAChD,SAAO,oBAAoB;AAAA,IACzB;AAAA;AAAA;AAAA,IAGA,QAAQ,KAAK;AAAA,IACb;AAAA,IACA;AAAA,IACA,QAAQ,UAAU,MAAM,IAAI;AAAA;AAAA;AAAA,IAG5B,WAAW,MAAM;AAAA,IACjB,UAAU,KAAK,YAAY;AAAA,EAC7B,CAAC;AACH;AAMA,eAAe,cACb,OACA,SACA,MACmB;AACnB,QAAM,EAAE,OAAO,IAAI,IAAI;AAIvB,QAAM,YAAY,EAAE,OAAO,MAAM,MAAM,UAAU,MAAe;AAChE,QAAM,cAAc,MAAM;AAAA,IACxB,gBAAgB,KAAK,MAAM,QAAQ;AAAA,IACnC,KAAK;AAAA,IACL;AAAA,EACF;AACA,MAAI,CAAC,YAAY,QAAS,QAAO,kBAAkB,aAAa,SAAS;AAIzE,QAAM,WAAW,KAAK,YAAY;AAClC,MAAI,aAAa,UAAU;AACzB,UAAM,OAAO,oBAAoB,OAAO;AACxC,QAAI,CAAC,KAAK,MAAO,QAAOA,WAAU,KAAK,eAAe,sBAAsB,KAAK,MAAM,EAAE;AAAA,EAC3F;AAEA,MAAI,OAAgB;AACpB,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK;AAAA,EAC5B,QAAQ;AAAA,EAER;AAGA,SAAO,iBAAiB,KAAK,MAAM,MAAM,MAAM,oBAAoB,GAAG,CAAC;AACzE;AAOA,SAAS,aAAa,KAAuB;AAC3C,SAAQ,KAA8C,QAAQ;AAChE;;;ACtWO,SAAS,2BACd,SACoC;AACpC,MAAI;AACJ,SAAO,MAAM;AACX,gBAAY,QAAQ,OAAO;AAC3B,WAAO;AAAA,EACT;AACF;AAEA,eAAe,QAAQ,SAA4D;AACjF,QAAM,EAAE,KAAK,KAAK,YAAY,WAAW,aAAa,IAAI;AAC1D,QAAM,WACJ,cAAc,SAAY,CAAC,IAAI,MAAM,oBAAoB,KAAK,KAAK,YAAY,SAAS;AAC1F,SAAO,YAAY,UAAU,YAAY;AAC3C;AAgCO,SAAS,iCACd,eACA,SACA,UACA,cACoC;AACpC,MAAI;AACJ,SAAO,MAAM;AACX,iBAAa,YACX;AAAA;AAAA;AAAA,MAGE,kBAAkB,SAAY,CAAC,IAAI,MAAM,cAAc,EAAE,SAAS,SAAS,CAAC;AAAA,MAC5E;AAAA,IACF,GAAG;AACL,WAAO;AAAA,EACT;AACF;AAOA,SAAS,YACP,UACA,cACqB;AACrB,QAAM,MAAO,YAAY,CAAC;AAC1B,gBAAc,iBAAiB,GAAG;AAClC,SAAO,mBAAmB,GAAG;AAC/B;","names":["jsonError","agent","resolve","refusal"]}

package/dist/{chunk-UETVDZBE.js → chunk-BINRCILF.js}

@@ -164,6 +164,9 @@ function getApprovalRegistry() {
 function createInProcessApprovalRegistry() {
   const pending = /* @__PURE__ */ new Map();
   return {
+    // B-236 — stated rather than left for a caller to infer from the name. This map is one
+    // process's, so every answer built from it is one process's.
+    scope: "instance",
     register(approvalId, opts) {
       return new Promise((resolve) => {
         const settle = (decision) => {
@@ -218,4 +221,4 @@ export {
   getApprovalRegistry,
   resolveProvider
 };
-//# sourceMappingURL=chunk-UETVDZBE.js.map
+//# sourceMappingURL=chunk-BINRCILF.js.map