tubeless 0.2.15 → 0.3.0

package/README.md

@@ -93,8 +93,8 @@ flags after `--`. Record runs with `--store` or `--trace`, then inspect them wit
 
 - Start with a [typed import](./examples/typed-import.ts) or add
   [dry runs and write gates](./examples/publish-with-gates.ts) to a publishing job.
-- Build a larger workflow with [child pipelines](./examples/child-pipeline.ts)
-  and [fan-out](./examples/fan-out-progress.ts).
+- Build workflows with [child pipelines](./examples/child-pipeline.ts) and [fan-out](./examples/fan-out-progress.ts).
+- Run bounded model decisions, default filesystem/shell tools, custom tools, and subagents with [in-process agents](./docs/agents.md).
 - Optional: the [peloton example](./examples/peloton.ts) is a cycling-themed kitchen sink for the live TUI.
 
 The [recipe index](./docs/recipes.md) covers validation, retries, tracing, testing,
@@ -106,7 +106,7 @@ and more. For help authoring pipelines with a coding agent, install the
 [Website](https://tubeless.io/) · [Getting started](./docs/getting-started.md) · [CLI](./docs/cli.md) ·
 [Studio](./docs/studio.md) · [Concepts](./docs/concepts.md) ·
 [Comparison](./docs/comparison.md) · [API](./docs/api-reference.md) ·
-[Agents](./docs/agent-guide.md)
+[Agent authoring guide](./docs/agent-guide.md)
 
 ## Contributing
 

package/dist/agent/agent-state.d.ts

@@ -0,0 +1,8 @@
+import type { StandardSchemaV1 } from "../core/pipeline-types.js";
+import type { AgentState } from "./agent-types.js";
+export declare function agentError(code: string, message: string, cause?: unknown): Error;
+export declare function ownState<T>(state: T): AgentState<T>;
+export declare function checkSchema(schema: StandardSchemaV1, label: string): void;
+export declare function jsonDescriptor(schema: StandardSchemaV1, explicit: Readonly<Record<string, unknown>> | undefined, label: string): Readonly<Record<string, unknown>>;
+export declare function descriptorFingerprint(descriptor: Readonly<Record<string, unknown>>): string;
+export declare function checkDescription(description: string): void;

package/dist/agent/agent-state.js

@@ -0,0 +1,78 @@
+import { createHash } from "node:crypto";
+export function agentError(code, message, cause) {
+    return Object.assign(new Error(message, cause === undefined ? undefined : { cause }), { code });
+}
+/** Copy plain data into owned, frozen snapshots; repeated references are copied, cycles fail. */
+function copy(value, ancestors, json) {
+    if (value === null || typeof value === "string" || typeof value === "boolean")
+        return value;
+    if (value === undefined && !json)
+        return value;
+    if (typeof value === "number" && Number.isFinite(value))
+        return value;
+    if (typeof value !== "object" || value === null)
+        throw new Error("Expected finite plain data");
+    if (ancestors.has(value))
+        throw new Error("Cyclic data is not supported");
+    if (!Array.isArray(value) &&
+        Object.getPrototypeOf(value) !== Object.prototype &&
+        Object.getPrototypeOf(value) !== null) {
+        throw new Error("Expected an array or plain record");
+    }
+    ancestors.add(value);
+    const result = Array.isArray(value)
+        ? new Array(value.length)
+        : {};
+    const keys = Reflect.ownKeys(value);
+    if (json)
+        keys.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0));
+    for (const key of keys) {
+        if (Array.isArray(value) && key === "length")
+            continue;
+        const property = Object.getOwnPropertyDescriptor(value, key);
+        if (typeof key !== "string" || !("value" in property) || !property.enumerable) {
+            throw new Error("State and descriptors require enumerable data properties");
+        }
+        Object.defineProperty(result, key, {
+            value: copy(property.value, ancestors, json),
+            enumerable: true,
+        });
+    }
+    ancestors.delete(value);
+    return Object.freeze(result);
+}
+export function ownState(state) {
+    try {
+        // SAFETY: copying retains every plain-data value and only adds deep readonly ownership.
+        return copy(state, new Set(), false);
+    }
+    catch (cause) {
+        throw agentError("TUBELESS_AGENT_INVALID_STATE", "Agent state must contain finite primitives, arrays, and plain records", cause);
+    }
+}
+export function checkSchema(schema, label) {
+    if (schema?.["~standard"]?.version !== 1 || typeof schema["~standard"].validate !== "function") {
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", `${label} requires a Standard Schema validator`);
+    }
+}
+export function jsonDescriptor(schema, explicit, label) {
+    checkSchema(schema, label);
+    try {
+        const descriptor = explicit ?? schema["~standard"].jsonSchema?.input({ target: "draft-2020-12" });
+        if (descriptor === null || typeof descriptor !== "object" || Array.isArray(descriptor))
+            throw new Error("Missing JSON Schema object");
+        // SAFETY: the object guard and plain JSON copy validate the descriptor's representation.
+        return copy(descriptor, new Set(), true);
+    }
+    catch (cause) {
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", `${label} requires a JSON Schema input descriptor or explicit fallback`, cause);
+    }
+}
+export function descriptorFingerprint(descriptor) {
+    return `sha256:${createHash("sha256").update(JSON.stringify(descriptor)).digest("hex")}`;
+}
+export function checkDescription(description) {
+    if (typeof description !== "string" || !description.trim() || description.length > 4096)
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", "Tool description must be nonblank and at most 4096 characters");
+}
+//# sourceMappingURL=agent-state.js.map

package/dist/agent/agent-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-state.js","sourceRoot":"","sources":["../../src/agent/agent-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAAe,EAAE,KAAe;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,iGAAiG;AACjG,SAAS,IAAI,CAAC,KAAc,EAAE,SAAsB,EAAE,IAAa;IACjE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/F,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC1E,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;QACjD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,MAAM,MAAM,GAAwC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACzB,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,QAAQ;YAAE,SAAS;QACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAE,CAAC;QAC9D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;YACjC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC;YAC5C,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAI,KAAQ;IAClC,IAAI,CAAC;QACH,wFAAwF;QACxF,OAAO,IAAI,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,CAAkB,CAAC;IACxD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CACd,8BAA8B,EAC9B,uEAAuE,EACvE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAwB,EAAE,KAAa;IACjE,IAAI,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QAC/F,MAAM,UAAU,CACd,mCAAmC,EACnC,GAAG,KAAK,uCAAuC,CAChD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,MAAwB,EACxB,QAAuD,EACvD,KAAa;IAEb,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,UAAU,GACd,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QACjF,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,yFAAyF;QACzF,OAAO,IAAI,CAAC,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,CAAsC,CAAC;IAChF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,CACd,mCAAmC,EACnC,GAAG,KAAK,+DAA+D,EACvE,KAAK,CACN,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAA6C;IACjF,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,MAAM,GAAG,IAAI;QACrF,MAAM,UAAU,CACd,mCAAmC,EACnC,+DAA+D,CAChE,CAAC;AACN,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport type { StandardSchemaV1 } from \"../core/pipeline-types.js\";\nimport type { AgentState } from \"./agent-types.js\";\n\nexport function agentError(code: string, message: string, cause?: unknown): Error {\n  return Object.assign(new Error(message, cause === undefined ? undefined : { cause }), { code });\n}\n\n/** Copy plain data into owned, frozen snapshots; repeated references are copied, cycles fail. */\nfunction copy(value: unknown, ancestors: Set<object>, json: boolean): unknown {\n  if (value === null || typeof value === \"string\" || typeof value === \"boolean\") return value;\n  if (value === undefined && !json) return value;\n  if (typeof value === \"number\" && Number.isFinite(value)) return value;\n  if (typeof value !== \"object\" || value === null) throw new Error(\"Expected finite plain data\");\n  if (ancestors.has(value)) throw new Error(\"Cyclic data is not supported\");\n  if (\n    !Array.isArray(value) &&\n    Object.getPrototypeOf(value) !== Object.prototype &&\n    Object.getPrototypeOf(value) !== null\n  ) {\n    throw new Error(\"Expected an array or plain record\");\n  }\n  ancestors.add(value);\n  const result: Record<string, unknown> | unknown[] = Array.isArray(value)\n    ? new Array(value.length)\n    : {};\n  const keys = Reflect.ownKeys(value);\n  if (json) keys.sort((a, b) => (String(a) < String(b) ? -1 : String(a) > String(b) ? 1 : 0));\n  for (const key of keys) {\n    if (Array.isArray(value) && key === \"length\") continue;\n    const property = Object.getOwnPropertyDescriptor(value, key)!;\n    if (typeof key !== \"string\" || !(\"value\" in property) || !property.enumerable) {\n      throw new Error(\"State and descriptors require enumerable data properties\");\n    }\n    Object.defineProperty(result, key, {\n      value: copy(property.value, ancestors, json),\n      enumerable: true,\n    });\n  }\n  ancestors.delete(value);\n  return Object.freeze(result);\n}\n\nexport function ownState<T>(state: T): AgentState<T> {\n  try {\n    // SAFETY: copying retains every plain-data value and only adds deep readonly ownership.\n    return copy(state, new Set(), false) as AgentState<T>;\n  } catch (cause) {\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_STATE\",\n      \"Agent state must contain finite primitives, arrays, and plain records\",\n      cause\n    );\n  }\n}\n\nexport function checkSchema(schema: StandardSchemaV1, label: string): void {\n  if (schema?.[\"~standard\"]?.version !== 1 || typeof schema[\"~standard\"].validate !== \"function\") {\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      `${label} requires a Standard Schema validator`\n    );\n  }\n}\n\nexport function jsonDescriptor(\n  schema: StandardSchemaV1,\n  explicit: Readonly<Record<string, unknown>> | undefined,\n  label: string\n): Readonly<Record<string, unknown>> {\n  checkSchema(schema, label);\n  try {\n    const descriptor =\n      explicit ?? schema[\"~standard\"].jsonSchema?.input({ target: \"draft-2020-12\" });\n    if (descriptor === null || typeof descriptor !== \"object\" || Array.isArray(descriptor))\n      throw new Error(\"Missing JSON Schema object\");\n    // SAFETY: the object guard and plain JSON copy validate the descriptor's representation.\n    return copy(descriptor, new Set(), true) as Readonly<Record<string, unknown>>;\n  } catch (cause) {\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      `${label} requires a JSON Schema input descriptor or explicit fallback`,\n      cause\n    );\n  }\n}\n\nexport function descriptorFingerprint(descriptor: Readonly<Record<string, unknown>>): string {\n  return `sha256:${createHash(\"sha256\").update(JSON.stringify(descriptor)).digest(\"hex\")}`;\n}\n\nexport function checkDescription(description: string): void {\n  if (typeof description !== \"string\" || !description.trim() || description.length > 4096)\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      \"Tool description must be nonblank and at most 4096 characters\"\n    );\n}\n"]}

package/dist/agent/agent-types.d.ts

@@ -0,0 +1,104 @@
+import type { PipelineStepContext, StandardSchemaV1 } from "../core/pipeline-types.js";
+import type { AgentEnvironment, AgentEnvironmentProvider } from "./environment.js";
+import type { DefaultAgentTools } from "./default-tools.js";
+export type Awaitable<T> = T | Promise<T>;
+export type Input<S extends StandardSchemaV1> = NonNullable<S["~standard"]["types"]>["input"];
+export type Output<S extends StandardSchemaV1> = NonNullable<S["~standard"]["types"]>["output"];
+/** Deeply read-only view of the owned plain-data state supplied to agent callbacks. */
+export type AgentState<T> = {
+    readonly [K in keyof T]: AgentState<T[K]>;
+};
+declare const capabilityTypes: unique symbol;
+/** Opaque capability created by defineTool or pipelineTool; model decisions contain data only. */
+export interface AgentTool<Arguments, Result> {
+    readonly [capabilityTypes]: {
+        readonly input: Arguments;
+        readonly output: Result;
+    };
+}
+export type Tools = Readonly<Record<string, AgentTool<unknown, unknown>>>;
+type RegisteredTools<Custom extends Tools> = Omit<DefaultAgentTools, keyof Custom> & Custom;
+type ToolCall<Registry extends Tools> = {
+    [Name in keyof Registry & string]: {
+        readonly id: string;
+        readonly tool: Name;
+        readonly input: Registry[Name][typeof capabilityTypes]["input"];
+    };
+}[keyof Registry & string];
+/** One built-in or custom call with raw model arguments; custom names replace defaults. */
+export type AgentCall<Registry extends Tools = {}> = ToolCall<RegisteredTools<Registry>>;
+type ToolOutcome<Registry extends Tools> = {
+    [Name in keyof Registry & string]: {
+        readonly id: string;
+        readonly tool: Name;
+    } & ({
+        readonly ok: true;
+        readonly value: Registry[Name][typeof capabilityTypes]["output"];
+    } | {
+        readonly ok: false;
+        readonly error: {
+            readonly code: string;
+            readonly message: string;
+        };
+    });
+}[keyof Registry & string];
+/** Input-order result or deliberately recoverable handler failure, including default tools. */
+export type AgentOutcome<Registry extends Tools = {}> = ToolOutcome<RegisteredTools<Registry>>;
+/** A nonempty batch of independent calls, or the raw input to the final-result schema. */
+export type AgentDecision<Registry extends Tools, Result> = {
+    readonly kind: "continue";
+    readonly calls: readonly [AgentCall<Registry>, ...AgentCall<Registry>[]];
+    readonly result?: never;
+} | {
+    readonly kind: "finish";
+    readonly result: Result;
+    readonly calls?: never;
+};
+/** Finite limits for this agent and its descendants; child limits may only tighten them. */
+export interface AgentLimits {
+    /** Decision callbacks, including finish. Defaults to 20. */
+    readonly maxTurns?: number;
+    /** Admitted subtree calls, including calls stopped before dispatch. Defaults to 100. */
+    readonly maxCalls?: number;
+    /** Subtree decision callback admissions. Defaults to 100; provider retries are application-owned. */
+    readonly maxDecisions?: number;
+    /** Pipeline-tool delegation edges below this agent. Defaults to 4; zero allows leaf tools only. */
+    readonly maxDepth?: number;
+    /** Active decision callbacks and leaf handlers across the subtree. Defaults to 1. */
+    readonly maxConcurrency?: number;
+}
+/** Step services and the workspace capability available to a registered tool. */
+export interface AgentToolContext extends PipelineStepContext<{}> {
+    readonly environment: AgentEnvironment;
+}
+/** Model-facing descriptors and ordinary step services, without executable tools. */
+export interface AgentDecisionContext<Options extends object> extends PipelineStepContext<Options> {
+    readonly environment: AgentEnvironment;
+    readonly turn: number;
+    readonly stateVersion: number;
+    readonly capabilities: readonly {
+        readonly name: string;
+        readonly description: string;
+        readonly inputJsonSchema: Readonly<Record<string, unknown>>;
+    }[];
+    readonly resultJsonSchema: Readonly<Record<string, unknown>>;
+}
+export interface AgentDefinition<Id extends string, Options extends StandardSchemaV1<object, object>, Result extends StandardSchemaV1, State, Registry extends Tools> {
+    readonly id: Id;
+    readonly name?: string;
+    readonly description?: string;
+    readonly implementationVersion?: string;
+    readonly inputSchema: Options;
+    readonly resultSchema: Result;
+    readonly resultJsonSchema?: Readonly<Record<string, unknown>>;
+    /** Extend the standard tools; a custom tool with the same name replaces that default. */
+    readonly tools?: Registry;
+    readonly limits?: AgentLimits;
+    /** Workspace capabilities; descendants inherit them unless explicitly replaced. */
+    readonly environment?: AgentEnvironmentProvider;
+    initialState(options: Output<Options>): State;
+    decide(state: AgentState<NoInfer<State>>, context: AgentDecisionContext<Output<Options>>): Awaitable<unknown>;
+    reduce?(state: AgentState<NoInfer<State>>, outcomes: readonly AgentOutcome<Registry>[]): NoInfer<State>;
+    dryRun?(state: AgentState<NoInfer<State>>, context: AgentDecisionContext<Output<Options>>): Awaitable<unknown>;
+}
+export {};

package/dist/agent/agent-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-types.js.map

package/dist/agent/agent-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-types.js","sourceRoot":"","sources":["../../src/agent/agent-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { PipelineStepContext, StandardSchemaV1 } from \"../core/pipeline-types.js\";\nimport type { AgentEnvironment, AgentEnvironmentProvider } from \"./environment.js\";\nimport type { DefaultAgentTools } from \"./default-tools.js\";\n\nexport type Awaitable<T> = T | Promise<T>;\nexport type Input<S extends StandardSchemaV1> = NonNullable<S[\"~standard\"][\"types\"]>[\"input\"];\nexport type Output<S extends StandardSchemaV1> = NonNullable<S[\"~standard\"][\"types\"]>[\"output\"];\n/** Deeply read-only view of the owned plain-data state supplied to agent callbacks. */\nexport type AgentState<T> = { readonly [K in keyof T]: AgentState<T[K]> };\ndeclare const capabilityTypes: unique symbol;\n\n/** Opaque capability created by defineTool or pipelineTool; model decisions contain data only. */\nexport interface AgentTool<Arguments, Result> {\n  readonly [capabilityTypes]: { readonly input: Arguments; readonly output: Result };\n}\n\nexport type Tools = Readonly<Record<string, AgentTool<unknown, unknown>>>;\ntype RegisteredTools<Custom extends Tools> = Omit<DefaultAgentTools, keyof Custom> & Custom;\n\ntype ToolCall<Registry extends Tools> = {\n  [Name in keyof Registry & string]: {\n    readonly id: string;\n    readonly tool: Name;\n    readonly input: Registry[Name][typeof capabilityTypes][\"input\"];\n  };\n}[keyof Registry & string];\n\n/** One built-in or custom call with raw model arguments; custom names replace defaults. */\nexport type AgentCall<Registry extends Tools = {}> = ToolCall<RegisteredTools<Registry>>;\n\ntype ToolOutcome<Registry extends Tools> = {\n  [Name in keyof Registry & string]: {\n    readonly id: string;\n    readonly tool: Name;\n  } & (\n    | {\n        readonly ok: true;\n        readonly value: Registry[Name][typeof capabilityTypes][\"output\"];\n      }\n    | { readonly ok: false; readonly error: { readonly code: string; readonly message: string } }\n  );\n}[keyof Registry & string];\n\n/** Input-order result or deliberately recoverable handler failure, including default tools. */\nexport type AgentOutcome<Registry extends Tools = {}> = ToolOutcome<RegisteredTools<Registry>>;\n\n/** A nonempty batch of independent calls, or the raw input to the final-result schema. */\nexport type AgentDecision<Registry extends Tools, Result> =\n  | {\n      readonly kind: \"continue\";\n      readonly calls: readonly [AgentCall<Registry>, ...AgentCall<Registry>[]];\n      readonly result?: never;\n    }\n  | { readonly kind: \"finish\"; readonly result: Result; readonly calls?: never };\n\n/** Finite limits for this agent and its descendants; child limits may only tighten them. */\nexport interface AgentLimits {\n  /** Decision callbacks, including finish. Defaults to 20. */\n  readonly maxTurns?: number;\n  /** Admitted subtree calls, including calls stopped before dispatch. Defaults to 100. */\n  readonly maxCalls?: number;\n  /** Subtree decision callback admissions. Defaults to 100; provider retries are application-owned. */\n  readonly maxDecisions?: number;\n  /** Pipeline-tool delegation edges below this agent. Defaults to 4; zero allows leaf tools only. */\n  readonly maxDepth?: number;\n  /** Active decision callbacks and leaf handlers across the subtree. Defaults to 1. */\n  readonly maxConcurrency?: number;\n}\n\n/** Step services and the workspace capability available to a registered tool. */\nexport interface AgentToolContext extends PipelineStepContext<{}> {\n  readonly environment: AgentEnvironment;\n}\n\n/** Model-facing descriptors and ordinary step services, without executable tools. */\nexport interface AgentDecisionContext<Options extends object> extends PipelineStepContext<Options> {\n  readonly environment: AgentEnvironment;\n  readonly turn: number;\n  readonly stateVersion: number;\n  readonly capabilities: readonly {\n    readonly name: string;\n    readonly description: string;\n    readonly inputJsonSchema: Readonly<Record<string, unknown>>;\n  }[];\n  readonly resultJsonSchema: Readonly<Record<string, unknown>>;\n}\n\nexport interface AgentDefinition<\n  Id extends string,\n  Options extends StandardSchemaV1<object, object>,\n  Result extends StandardSchemaV1,\n  State,\n  Registry extends Tools,\n> {\n  readonly id: Id;\n  readonly name?: string;\n  readonly description?: string;\n  readonly implementationVersion?: string;\n  readonly inputSchema: Options;\n  readonly resultSchema: Result;\n  readonly resultJsonSchema?: Readonly<Record<string, unknown>>;\n  /** Extend the standard tools; a custom tool with the same name replaces that default. */\n  readonly tools?: Registry;\n  readonly limits?: AgentLimits;\n  /** Workspace capabilities; descendants inherit them unless explicitly replaced. */\n  readonly environment?: AgentEnvironmentProvider;\n  initialState(options: Output<Options>): State;\n  decide(\n    state: AgentState<NoInfer<State>>,\n    context: AgentDecisionContext<Output<Options>>\n  ): Awaitable<unknown>;\n  reduce?(\n    state: AgentState<NoInfer<State>>,\n    outcomes: readonly AgentOutcome<Registry>[]\n  ): NoInfer<State>;\n  dryRun?(\n    state: AgentState<NoInfer<State>>,\n    context: AgentDecisionContext<Output<Options>>\n  ): Awaitable<unknown>;\n}\n"]}

package/dist/agent/agent.d.ts

@@ -0,0 +1,14 @@
+import type { StandardSchemaV1 } from "../core/pipeline-types.js";
+import type { AgentDefinition, Tools } from "./agent-types.js";
+export { pipelineTool } from "./pipeline-tool.js";
+export { defineTool, ToolError } from "./tools.js";
+export type { DefaultAgentTools } from "./default-tools.js";
+export type { AgentCall, AgentDecision, AgentDecisionContext, AgentLimits, AgentOutcome, AgentState, AgentTool, AgentToolContext, } from "./agent-types.js";
+export type { AgentEnvironment, AgentEnvironmentContext, AgentEnvironmentProvider, AgentProjectInstruction, } from "./environment.js";
+export { defineModelAgent } from "./model-agent.js";
+export type { AgentModel, AgentModelRequest, AgentModelResponse } from "./model-types.js";
+/** Build a bounded in-process agent as an ordinary pipeline with one target, agent. */
+export declare function defineAgent<const Id extends string, const Options extends StandardSchemaV1<object, object>, const Result extends StandardSchemaV1, State, const Registry extends Tools = {}>(definition: AgentDefinition<Id, Options, Result, State, Registry>): import("../core/pipeline-types.js").Pipeline<import("./agent-types.js").Input<Options>, import("./agent-types.js").Output<Result>, "agent", "agent", Id> & {
+    readonly optionsSchema: Options;
+    readonly definition: import("../core/pipeline-types.js").PipelineDefinitionSnapshot;
+};

package/dist/agent/agent.js

@@ -0,0 +1,17 @@
+import { agentError } from "./agent-state.js";
+import { compileAgent } from "./compile-agent.js";
+export { pipelineTool } from "./pipeline-tool.js";
+export { defineTool, ToolError } from "./tools.js";
+export { defineModelAgent } from "./model-agent.js";
+/** Build a bounded in-process agent as an ordinary pipeline with one target, agent. */
+export function defineAgent(definition) {
+    const { decide, dryRun } = definition;
+    if (typeof decide !== "function" || (dryRun !== undefined && typeof dryRun !== "function"))
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", "Agent requires callable decide/dryRun callbacks");
+    return compileAgent({
+        ...definition,
+        decide: async (state, context) => ({ decision: await decide(state, context), state }),
+        dryRun: dryRun && (async (state, context) => ({ decision: await dryRun(state, context), state })),
+    });
+}
+//# sourceMappingURL=agent.js.map

package/dist/agent/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent/agent.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAoBnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAGpD,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAMzB,UAAiE;IACjE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,UAAU,CAAC;QACxF,MAAM,UAAU,CACd,mCAAmC,EACnC,iDAAiD,CAClD,CAAC;IACJ,OAAO,YAAY,CAAuC;QACxD,GAAG,UAAU;QACb,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC;QACrF,MAAM,EACJ,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;KAC5F,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { StandardSchemaV1 } from \"../core/pipeline-types.js\";\nimport type { AgentDefinition, Tools } from \"./agent-types.js\";\nimport { agentError } from \"./agent-state.js\";\nimport { compileAgent } from \"./compile-agent.js\";\n\nexport { pipelineTool } from \"./pipeline-tool.js\";\nexport { defineTool, ToolError } from \"./tools.js\";\nexport type { DefaultAgentTools } from \"./default-tools.js\";\nexport type {\n  AgentCall,\n  AgentDecision,\n  AgentDecisionContext,\n  AgentLimits,\n  AgentOutcome,\n  AgentState,\n  AgentTool,\n  AgentToolContext,\n} from \"./agent-types.js\";\n\nexport type {\n  AgentEnvironment,\n  AgentEnvironmentContext,\n  AgentEnvironmentProvider,\n  AgentProjectInstruction,\n} from \"./environment.js\";\n\nexport { defineModelAgent } from \"./model-agent.js\";\nexport type { AgentModel, AgentModelRequest, AgentModelResponse } from \"./model-types.js\";\n\n/** Build a bounded in-process agent as an ordinary pipeline with one target, agent. */\nexport function defineAgent<\n  const Id extends string,\n  const Options extends StandardSchemaV1<object, object>,\n  const Result extends StandardSchemaV1,\n  State,\n  const Registry extends Tools = {},\n>(definition: AgentDefinition<Id, Options, Result, State, Registry>) {\n  const { decide, dryRun } = definition;\n  if (typeof decide !== \"function\" || (dryRun !== undefined && typeof dryRun !== \"function\"))\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      \"Agent requires callable decide/dryRun callbacks\"\n    );\n  return compileAgent<Id, Options, Result, State, Registry>({\n    ...definition,\n    decide: async (state, context) => ({ decision: await decide(state, context), state }),\n    dryRun:\n      dryRun && (async (state, context) => ({ decision: await dryRun(state, context), state })),\n  });\n}\n"]}

package/dist/agent/compile-agent.d.ts

@@ -0,0 +1,17 @@
+import type { Pipeline, PipelineDefinitionSnapshot, StandardSchemaV1 } from "../core/pipeline-types.js";
+import type { AgentDefinition, AgentDecisionContext, AgentState, Awaitable, Input, Output, Tools } from "./agent-types.js";
+/** Accept raw or already-owned pending state; the turn snapshots it before tools run. */
+export type RuntimeAgentDefinition<Id extends string, Options extends StandardSchemaV1<object, object>, Result extends StandardSchemaV1, State, Registry extends Tools> = Omit<AgentDefinition<Id, Options, Result, State, Registry>, "decide" | "dryRun"> & {
+    decide(state: AgentState<State>, context: AgentDecisionContext<Output<Options>>): Awaitable<{
+        decision: unknown;
+        state: State | AgentState<State>;
+    }>;
+    dryRun?(state: AgentState<State>, context: AgentDecisionContext<Output<Options>>): Awaitable<{
+        decision: unknown;
+        state: State | AgentState<State>;
+    }>;
+};
+export declare function compileAgent<const Id extends string, const Options extends StandardSchemaV1<object, object>, const Result extends StandardSchemaV1, State, const Registry extends Tools = {}>(definition: RuntimeAgentDefinition<Id, Options, Result, State, Registry>, resolveCwd?: boolean): Pipeline<Input<Options>, Output<Result>, "agent", "agent", Id> & {
+    readonly optionsSchema: Options;
+    readonly definition: PipelineDefinitionSnapshot;
+};

package/dist/agent/compile-agent.js

@@ -0,0 +1,76 @@
+import { createSteps, definePipeline } from "../core/pipeline.js";
+import { STEP_AGENT } from "../core/pipeline-step-metadata.js";
+import { agentError, checkSchema, descriptorFingerprint, jsonDescriptor, ownState, } from "./agent-state.js";
+import { compileTool } from "./tools.js";
+import { defaultTools } from "./default-tools.js";
+import { resolvedLimits } from "./execution-scope.js";
+import { createAgentTurn } from "./turn.js";
+import { runAgentInvocation } from "./invocation.js";
+export function compileAgent(definition, resolveCwd = false) {
+    const config = { ...definition };
+    checkSchema(config.inputSchema, "Agent input");
+    if (typeof config.initialState !== "function" ||
+        typeof config.decide !== "function" ||
+        (config.reduce !== undefined && typeof config.reduce !== "function") ||
+        (config.dryRun !== undefined && typeof config.dryRun !== "function"))
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", "Agent requires initialState and decide callbacks, and callable reduce/dryRun when supplied");
+    const limits = resolvedLimits(config.limits);
+    const resultJsonSchema = jsonDescriptor(config.resultSchema, config.resultJsonSchema, "Agent result");
+    const entries = Object.entries({ ...defaultTools, ...config.tools }).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0);
+    if (entries.length > 4096)
+        throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", "Agent capability inventory exceeds 4096 tools");
+    const registry = new Map(entries.map(([name, tool]) => {
+        if (!/^[A-Za-z][A-Za-z0-9_-]{0,127}$/.test(name))
+            throw agentError("TUBELESS_AGENT_INVALID_DEFINITION", `Invalid tool name: ${name}`);
+        return [name, compileTool(config.id, name, tool)];
+    }));
+    const capabilities = Object.freeze([...registry.values()].map(({ name, description, inputJsonSchema }) => Object.freeze({ name, description, inputJsonSchema })));
+    const turn = createAgentTurn(config, registry, limits, { capabilities, resultJsonSchema });
+    const { iteratePipeline } = createSteps(config.inputSchema);
+    const agent = iteratePipeline("agent", {
+        pipeline: turn,
+        maxIterations: limits.maxTurns,
+        dryRun: config.dryRun ? undefined : "skip",
+        initialState: (_inputs, context) => {
+            return {
+                state: ownState(config.initialState(context.options)),
+                turn: 1,
+                stateVersion: 0,
+                calls: 0,
+            };
+        },
+        mapOptions: (execution, _inputs, context) => ({
+            execution,
+            options: context.options,
+            agentRunId: context.runId,
+        }),
+        transition: (result) => result,
+    });
+    const compiledAgent = agent;
+    const run = compiledAgent.run;
+    compiledAgent.run = (inputs, context) => runAgentInvocation({ environment: config.environment, limits, resolveCwd }, context, (scoped) => run(inputs, scoped));
+    Object.defineProperty(agent, STEP_AGENT, {
+        value: Object.freeze({
+            limits,
+            resultSchemaFingerprint: descriptorFingerprint(resultJsonSchema),
+            capabilities: Object.freeze([...registry.values()].map((tool) => Object.freeze({
+                name: tool.name,
+                description: tool.description,
+                inputSchemaFingerprint: descriptorFingerprint(tool.inputJsonSchema),
+                identity: tool.pipeline.definition.identity,
+            }))),
+        }),
+    });
+    const pipeline = definePipeline({
+        id: config.id,
+        name: config.name,
+        description: config.description,
+        implementationVersion: config.implementationVersion,
+        steps: [compiledAgent],
+        finalize: compiledAgent,
+    });
+    // SAFETY: the sole iteration step inherits Options, publishes the once-validated Result,
+    // and is the only target. This restores deferred generic inference at the factory boundary.
+    return pipeline;
+}
+//# sourceMappingURL=compile-agent.js.map

package/dist/agent/compile-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile-agent.js","sourceRoot":"","sources":["../../src/agent/compile-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,mCAAmC,CAAC;AAO/D,OAAO,EACL,UAAU,EACV,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAkB,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAmCrD,MAAM,UAAU,YAAY,CAO1B,UAAwE,EACxE,UAAU,GAAG,KAAK;IAKlB,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC/C,IACE,OAAO,MAAM,CAAC,YAAY,KAAK,UAAU;QACzC,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU;QACnC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;QACpE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC;QAEpE,MAAM,UAAU,CACd,mCAAmC,EACnC,4FAA4F,CAC7F,CAAC;IACJ,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,cAAc,CACrC,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,gBAAgB,EACvB,cAAc,CACf,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACrF,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;QACvB,MAAM,UAAU,CACd,mCAAmC,EACnC,+CAA+C,CAChD,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,MAAM,UAAU,CAAC,mCAAmC,EAAE,sBAAsB,IAAI,EAAE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CACH,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,EAAE,CACpE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CACtD,CACF,CAAC;IACF,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC3F,MAAM,EAAE,eAAe,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,EAAE;QACrC,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,MAAM,CAAC,QAAQ;QAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;QAC1C,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,EAAoB,EAAE;YACnD,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBACrD,IAAI,EAAE,CAAC;gBACP,YAAY,EAAE,CAAC;gBACf,KAAK,EAAE,CAAC;aACT,CAAC;QACJ,CAAC;QACD,UAAU,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5C,SAAS;YACT,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,UAAU,EAAE,OAAO,CAAC,KAAK;SAC1B,CAAC;QACF,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM;KAC/B,CAAC,CAAC;IACH,MAAM,aAAa,GAA6B,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC;IAC9B,aAAa,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CACtC,kBAAkB,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAC9F,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CACpB,CAAC;IACJ,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE;QACvC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,uBAAuB,EAAE,qBAAqB,CAAC,gBAAgB,CAAC;YAChE,YAAY,EAAE,MAAM,CAAC,MAAM,CACzB,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAClC,MAAM,CAAC,MAAM,CAAC;gBACZ,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,sBAAsB,EAAE,qBAAqB,CAAC,IAAI,CAAC,eAAe,CAAC;gBACnE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ;aAC5C,CAAC,CACH,CACF;SACF,CAAC;KACH,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,cAAc,CAAC;QAC9B,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,KAAK,EAAE,CAAC,aAAa,CAAC;QACtB,QAAQ,EAAE,aAAa;KACxB,CAAC,CAAC;IACH,yFAAyF;IACzF,4FAA4F;IAC5F,OAAO,QAGN,CAAC;AACJ,CAAC","sourcesContent":["import { createSteps, definePipeline } from \"../core/pipeline.js\";\nimport { STEP_AGENT } from \"../core/pipeline-step-metadata.js\";\nimport type {\n  Pipeline,\n  PipelineDefinitionSnapshot,\n  StandardSchemaV1,\n} from \"../core/pipeline-types.js\";\nimport type { AnyStep } from \"../core/pipeline-steps.js\";\nimport {\n  agentError,\n  checkSchema,\n  descriptorFingerprint,\n  jsonDescriptor,\n  ownState,\n} from \"./agent-state.js\";\nimport { compileTool } from \"./tools.js\";\nimport { defaultTools } from \"./default-tools.js\";\nimport { resolvedLimits } from \"./execution-scope.js\";\nimport { createAgentTurn, type TurnState } from \"./turn.js\";\nimport { runAgentInvocation } from \"./invocation.js\";\nimport type {\n  AgentDefinition,\n  AgentDecisionContext,\n  AgentState,\n  Awaitable,\n  Input,\n  Output,\n  Tools,\n} from \"./agent-types.js\";\n\n/** Accept raw or already-owned pending state; the turn snapshots it before tools run. */\nexport type RuntimeAgentDefinition<\n  Id extends string,\n  Options extends StandardSchemaV1<object, object>,\n  Result extends StandardSchemaV1,\n  State,\n  Registry extends Tools,\n> = Omit<AgentDefinition<Id, Options, Result, State, Registry>, \"decide\" | \"dryRun\"> & {\n  decide(\n    state: AgentState<State>,\n    context: AgentDecisionContext<Output<Options>>\n  ): Awaitable<{\n    decision: unknown;\n    state: State | AgentState<State>;\n  }>;\n  dryRun?(\n    state: AgentState<State>,\n    context: AgentDecisionContext<Output<Options>>\n  ): Awaitable<{\n    decision: unknown;\n    state: State | AgentState<State>;\n  }>;\n};\n\nexport function compileAgent<\n  const Id extends string,\n  const Options extends StandardSchemaV1<object, object>,\n  const Result extends StandardSchemaV1,\n  State,\n  const Registry extends Tools = {},\n>(\n  definition: RuntimeAgentDefinition<Id, Options, Result, State, Registry>,\n  resolveCwd = false\n): Pipeline<Input<Options>, Output<Result>, \"agent\", \"agent\", Id> & {\n  readonly optionsSchema: Options;\n  readonly definition: PipelineDefinitionSnapshot;\n} {\n  const config = { ...definition };\n  checkSchema(config.inputSchema, \"Agent input\");\n  if (\n    typeof config.initialState !== \"function\" ||\n    typeof config.decide !== \"function\" ||\n    (config.reduce !== undefined && typeof config.reduce !== \"function\") ||\n    (config.dryRun !== undefined && typeof config.dryRun !== \"function\")\n  )\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      \"Agent requires initialState and decide callbacks, and callable reduce/dryRun when supplied\"\n    );\n  const limits = resolvedLimits(config.limits);\n  const resultJsonSchema = jsonDescriptor(\n    config.resultSchema,\n    config.resultJsonSchema,\n    \"Agent result\"\n  );\n  const entries = Object.entries({ ...defaultTools, ...config.tools }).sort(([a], [b]) =>\n    a < b ? -1 : a > b ? 1 : 0\n  );\n  if (entries.length > 4096)\n    throw agentError(\n      \"TUBELESS_AGENT_INVALID_DEFINITION\",\n      \"Agent capability inventory exceeds 4096 tools\"\n    );\n  const registry = new Map(\n    entries.map(([name, tool]) => {\n      if (!/^[A-Za-z][A-Za-z0-9_-]{0,127}$/.test(name))\n        throw agentError(\"TUBELESS_AGENT_INVALID_DEFINITION\", `Invalid tool name: ${name}`);\n      return [name, compileTool(config.id, name, tool)];\n    })\n  );\n  const capabilities = Object.freeze(\n    [...registry.values()].map(({ name, description, inputJsonSchema }) =>\n      Object.freeze({ name, description, inputJsonSchema })\n    )\n  );\n  const turn = createAgentTurn(config, registry, limits, { capabilities, resultJsonSchema });\n  const { iteratePipeline } = createSteps(config.inputSchema);\n  const agent = iteratePipeline(\"agent\", {\n    pipeline: turn,\n    maxIterations: limits.maxTurns,\n    dryRun: config.dryRun ? undefined : \"skip\",\n    initialState: (_inputs, context): TurnState<State> => {\n      return {\n        state: ownState(config.initialState(context.options)),\n        turn: 1,\n        stateVersion: 0,\n        calls: 0,\n      };\n    },\n    mapOptions: (execution, _inputs, context) => ({\n      execution,\n      options: context.options,\n      agentRunId: context.runId,\n    }),\n    transition: (result) => result,\n  });\n  const compiledAgent: AnyStep<Output<Options>> = agent;\n  const run = compiledAgent.run;\n  compiledAgent.run = (inputs, context) =>\n    runAgentInvocation({ environment: config.environment, limits, resolveCwd }, context, (scoped) =>\n      run(inputs, scoped)\n    );\n  Object.defineProperty(agent, STEP_AGENT, {\n    value: Object.freeze({\n      limits,\n      resultSchemaFingerprint: descriptorFingerprint(resultJsonSchema),\n      capabilities: Object.freeze(\n        [...registry.values()].map((tool) =>\n          Object.freeze({\n            name: tool.name,\n            description: tool.description,\n            inputSchemaFingerprint: descriptorFingerprint(tool.inputJsonSchema),\n            identity: tool.pipeline.definition.identity,\n          })\n        )\n      ),\n    }),\n  });\n  const pipeline = definePipeline({\n    id: config.id,\n    name: config.name,\n    description: config.description,\n    implementationVersion: config.implementationVersion,\n    steps: [compiledAgent],\n    finalize: compiledAgent,\n  });\n  // SAFETY: the sole iteration step inherits Options, publishes the once-validated Result,\n  // and is the only target. This restores deferred generic inference at the factory boundary.\n  return pipeline as unknown as Pipeline<Input<Options>, Output<Result>, \"agent\", \"agent\", Id> & {\n    readonly optionsSchema: Options;\n    readonly definition: PipelineDefinitionSnapshot;\n  };\n}\n"]}

package/dist/agent/decision.d.ts

@@ -0,0 +1,32 @@
+import { PreparedOptions } from "../core/prepared-options.js";
+import { type AgentExecutionScope } from "./execution-scope.js";
+import type { PipelinePlan, PipelineStepContext } from "../core/pipeline-types.js";
+import type { CompiledTool } from "./tools.js";
+type PreparedTool = {
+    kind: "handler";
+    tool: Extract<CompiledTool, {
+        kind: "handler";
+    }>;
+    input: unknown;
+} | {
+    kind: "pipeline";
+    tool: Extract<CompiledTool, {
+        kind: "pipeline";
+    }>;
+    options: object;
+    preparedOptions: PreparedOptions;
+    scope: AgentExecutionScope;
+};
+export type PreparedCall = PreparedTool & {
+    id: string;
+    plan: PipelinePlan;
+};
+export declare function decisionEnvelope(value: unknown): {
+    kind: "finish";
+    result: unknown;
+} | {
+    kind: "continue";
+    calls: readonly unknown[];
+};
+export declare function prepareCalls(values: readonly unknown[], registry: ReadonlyMap<string, CompiledTool>, context: PipelineStepContext<object>): Promise<PreparedCall[]>;
+export {};

package/dist/agent/decision.js

@@ -0,0 +1,81 @@
+import { PreparedOptions } from "../core/prepared-options.js";
+import { agentScope } from "./execution-scope.js";
+import { validateStandardSchema } from "../core/pipeline-validation.js";
+import { throwIfAborted } from "../utilities/abort.js";
+import { agentError } from "./agent-state.js";
+function invalid(message) {
+    throw agentError("TUBELESS_AGENT_INVALID_DECISION", message);
+}
+function record(value) {
+    return (value !== null &&
+        typeof value === "object" &&
+        !Array.isArray(value) &&
+        (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null));
+}
+function keys(value, expected) {
+    return (Reflect.ownKeys(value).length === expected.length &&
+        expected.every((key) => Object.hasOwn(value, key)));
+}
+export function decisionEnvelope(value) {
+    if (!record(value))
+        return invalid("Agent decision must be a plain object");
+    if (value.kind === "finish" && keys(value, ["kind", "result"]))
+        return { kind: "finish", result: value.result };
+    if (value.kind !== "continue" ||
+        !keys(value, ["kind", "calls"]) ||
+        !Array.isArray(value.calls) ||
+        value.calls.length === 0)
+        return invalid("Agent decision must finish(result) or continue with a nonempty calls array");
+    // Leave call traversal to prepareCalls, after the turn admits the batch by length.
+    return { kind: "continue", calls: value.calls };
+}
+export async function prepareCalls(values, registry, context) {
+    const ids = new Set();
+    const calls = Array.from(values, (call) => {
+        if (!record(call) ||
+            !keys(call, ["id", "tool", "input"]) ||
+            typeof call.id !== "string" ||
+            !call.id.trim() ||
+            call.id.length > 256 ||
+            typeof call.tool !== "string" ||
+            !call.tool.trim())
+            return invalid("Each call requires a nonblank id (up to 256 characters), tool, and input");
+        if (ids.has(call.id))
+            return invalid(`Duplicate agent call id: ${call.id}`);
+        ids.add(call.id);
+        return { id: call.id, tool: call.tool, input: call.input };
+    });
+    // Resolve the complete registry membership before invoking any argument validators.
+    const entries = calls.map((call) => {
+        const tool = registry.get(call.tool);
+        if (!tool)
+            return invalid(`Unknown agent tool: ${call.tool}`);
+        return { call, tool };
+    });
+    const prepared = [];
+    for (const { call, tool } of entries) {
+        throwIfAborted(context.signal, "Agent batch validation");
+        let invocation;
+        if (tool.kind === "pipeline") {
+            const scope = agentScope(context).delegate();
+            const input = tool.mapOptions
+                ? await validateStandardSchema(tool.inputSchema, call.input, `Agent tool ${call.tool} input`)
+                : call.input;
+            // SAFETY: the private preparation boundary checks object shape, even for schema-less children.
+            const options = tool.mapOptions ? tool.mapOptions(input) : input;
+            const preparedOptions = await PreparedOptions.prepare(tool.pipeline.optionsSchema, options, `Pipeline ${tool.pipeline.id} options`);
+            invocation = { kind: "pipeline", tool, options, preparedOptions, scope };
+        }
+        else {
+            const input = await validateStandardSchema(tool.inputSchema, call.input, `Agent tool ${call.tool} input`);
+            invocation = { kind: "handler", tool, input };
+        }
+        throwIfAborted(context.signal, "Agent batch validation");
+        const plan = tool.pipeline.plan({ dryRun: context.dryRun, cache: context.cachePolicy });
+        if (!plan.ok)
+            return invalid(`Agent tool ${call.tool} has an invalid plan`);
+        prepared.push({ ...invocation, id: call.id, plan });
+    }
+    return prepared;
+}
+//# sourceMappingURL=decision.js.map

package/dist/agent/decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision.js","sourceRoot":"","sources":["../../src/agent/decision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAA4B,MAAM,sBAAsB,CAAC;AAE5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAsB9C,SAAS,OAAO,CAAC,OAAe;IAC9B,MAAM,UAAU,CAAC,iCAAiC,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAA8B,EAAE,QAA2B;IACvE,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACjD,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,KAAc;IAEd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,uCAAuC,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAClD,IACE,KAAK,CAAC,IAAI,KAAK,UAAU;QACzB,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC/B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAExB,OAAO,OAAO,CAAC,4EAA4E,CAAC,CAAC;IAC/F,mFAAmF;IACnF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAA0B,EAC1B,QAA2C,EAC3C,OAAoC;IAEpC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAa,EAAE,EAAE;QACjD,IACE,CAAC,MAAM,CAAC,IAAI,CAAC;YACb,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ;YAC3B,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE;YACf,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG;YACpB,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAEjB,OAAO,OAAO,CAAC,0EAA0E,CAAC,CAAC;QAC7F,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,OAAO,CAAC,4BAA4B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5E,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,oFAAoF;IACpF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC,uBAAuB,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QACrC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACzD,IAAI,UAAwB,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAE,CAAC,QAAQ,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU;gBAC3B,CAAC,CAAC,MAAM,sBAAsB,CAC1B,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,cAAc,IAAI,CAAC,IAAI,QAAQ,CAChC;gBACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;YACf,+FAA+F;YAC/F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAgB,CAAC;YAC7E,MAAM,eAAe,GAAG,MAAM,eAAe,CAAC,OAAO,CACnD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAC3B,OAAO,EACP,YAAY,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,CACvC,CAAC;YACF,UAAU,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,sBAAsB,CACxC,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,KAAK,EACV,cAAc,IAAI,CAAC,IAAI,QAAQ,CAChC,CAAC;YACF,UAAU,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAChD,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,cAAc,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;QAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import { PreparedOptions } from \"../core/prepared-options.js\";\nimport { agentScope, type AgentExecutionScope } from \"./execution-scope.js\";\nimport type { PipelinePlan, PipelineStepContext } from \"../core/pipeline-types.js\";\nimport { validateStandardSchema } from \"../core/pipeline-validation.js\";\nimport { throwIfAborted } from \"../utilities/abort.js\";\nimport { agentError } from \"./agent-state.js\";\nimport type { CompiledTool } from \"./tools.js\";\n\ntype PreparedTool =\n  | {\n      kind: \"handler\";\n      tool: Extract<CompiledTool, { kind: \"handler\" }>;\n      input: unknown;\n    }\n  | {\n      kind: \"pipeline\";\n      tool: Extract<CompiledTool, { kind: \"pipeline\" }>;\n      options: object;\n      preparedOptions: PreparedOptions;\n      scope: AgentExecutionScope;\n    };\n\nexport type PreparedCall = PreparedTool & {\n  id: string;\n  plan: PipelinePlan;\n};\n\nfunction invalid(message: string): never {\n  throw agentError(\"TUBELESS_AGENT_INVALID_DECISION\", message);\n}\n\nfunction record(value: unknown): value is Record<string, unknown> {\n  return (\n    value !== null &&\n    typeof value === \"object\" &&\n    !Array.isArray(value) &&\n    (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null)\n  );\n}\n\nfunction keys(value: Record<string, unknown>, expected: readonly string[]): boolean {\n  return (\n    Reflect.ownKeys(value).length === expected.length &&\n    expected.every((key) => Object.hasOwn(value, key))\n  );\n}\n\nexport function decisionEnvelope(\n  value: unknown\n): { kind: \"finish\"; result: unknown } | { kind: \"continue\"; calls: readonly unknown[] } {\n  if (!record(value)) return invalid(\"Agent decision must be a plain object\");\n  if (value.kind === \"finish\" && keys(value, [\"kind\", \"result\"]))\n    return { kind: \"finish\", result: value.result };\n  if (\n    value.kind !== \"continue\" ||\n    !keys(value, [\"kind\", \"calls\"]) ||\n    !Array.isArray(value.calls) ||\n    value.calls.length === 0\n  )\n    return invalid(\"Agent decision must finish(result) or continue with a nonempty calls array\");\n  // Leave call traversal to prepareCalls, after the turn admits the batch by length.\n  return { kind: \"continue\", calls: value.calls };\n}\n\nexport async function prepareCalls(\n  values: readonly unknown[],\n  registry: ReadonlyMap<string, CompiledTool>,\n  context: PipelineStepContext<object>\n): Promise<PreparedCall[]> {\n  const ids = new Set<string>();\n  const calls = Array.from(values, (call: unknown) => {\n    if (\n      !record(call) ||\n      !keys(call, [\"id\", \"tool\", \"input\"]) ||\n      typeof call.id !== \"string\" ||\n      !call.id.trim() ||\n      call.id.length > 256 ||\n      typeof call.tool !== \"string\" ||\n      !call.tool.trim()\n    )\n      return invalid(\"Each call requires a nonblank id (up to 256 characters), tool, and input\");\n    if (ids.has(call.id)) return invalid(`Duplicate agent call id: ${call.id}`);\n    ids.add(call.id);\n    return { id: call.id, tool: call.tool, input: call.input };\n  });\n  // Resolve the complete registry membership before invoking any argument validators.\n  const entries = calls.map((call) => {\n    const tool = registry.get(call.tool);\n    if (!tool) return invalid(`Unknown agent tool: ${call.tool}`);\n    return { call, tool };\n  });\n  const prepared: PreparedCall[] = [];\n  for (const { call, tool } of entries) {\n    throwIfAborted(context.signal, \"Agent batch validation\");\n    let invocation: PreparedTool;\n    if (tool.kind === \"pipeline\") {\n      const scope = agentScope(context)!.delegate();\n      const input = tool.mapOptions\n        ? await validateStandardSchema(\n            tool.inputSchema,\n            call.input,\n            `Agent tool ${call.tool} input`\n          )\n        : call.input;\n      // SAFETY: the private preparation boundary checks object shape, even for schema-less children.\n      const options = tool.mapOptions ? tool.mapOptions(input) : (input as object);\n      const preparedOptions = await PreparedOptions.prepare(\n        tool.pipeline.optionsSchema,\n        options,\n        `Pipeline ${tool.pipeline.id} options`\n      );\n      invocation = { kind: \"pipeline\", tool, options, preparedOptions, scope };\n    } else {\n      const input = await validateStandardSchema(\n        tool.inputSchema,\n        call.input,\n        `Agent tool ${call.tool} input`\n      );\n      invocation = { kind: \"handler\", tool, input };\n    }\n    throwIfAborted(context.signal, \"Agent batch validation\");\n    const plan = tool.pipeline.plan({ dryRun: context.dryRun, cache: context.cachePolicy });\n    if (!plan.ok) return invalid(`Agent tool ${call.tool} has an invalid plan`);\n    prepared.push({ ...invocation, id: call.id, plan });\n  }\n  return prepared;\n}\n"]}

package/dist/agent/default-tool-bash.d.ts

@@ -0,0 +1,14 @@
+import type { PipelineStepContext } from "../core/pipeline-types.js";
+export declare function bashTool(input: {
+    command: string;
+    cwd?: string | null;
+    timeoutMs?: number | null;
+}, context: Pick<PipelineStepContext<object>, "cwd" | "signal">): Promise<{
+    cwd: string;
+    stdout: string;
+    stderr: string;
+    exitCode: number | null;
+    signal: string | null;
+    timedOut: boolean;
+    truncated: boolean;
+}>;