wunderland 0.72.2 → 0.82.0

package/dist/runtime/tools/ToolStreamProcessor.d.ts

@@ -0,0 +1,200 @@
+/**
+ * @fileoverview Streaming tool-call parsing and SSE chunk assembly.
+ *
+ * Extracted from `tool-calling.ts` to isolate the streaming-specific
+ * logic (SSE line iteration, token yielding, multi-round streaming loop)
+ * from the non-streaming tool-calling loop and the shared authorization
+ * layer.
+ *
+ * The main export is {@link streamToolCallingTurn}, an async generator
+ * that yields individual text tokens as they arrive from the LLM streaming
+ * API, enabling real-time TTS playback.
+ *
+ * @module wunderland/runtime/ToolStreamProcessor
+ */
+import type { StepUpAuthorizationConfig } from '../../types/core-types.js';
+import type { StepUpAuthorizationManager } from '../../security/StepUpAuthorizationManager.js';
+import type { ToolInstance, LLMProviderConfig } from './tool-helpers.js';
+/**
+ * Options for {@link streamToolCallingTurn}.
+ *
+ * Mirrors `runToolCallingTurn` options with the addition of an `AbortSignal`
+ * that enables external cancellation of the in-flight streaming LLM request.
+ * This is critical for the voice pipeline's barge-in flow: when the user
+ * starts speaking while the agent is mid-response, the pipeline aborts the
+ * signal to immediately stop token generation at the provider, saving both
+ * latency and tokens.
+ *
+ * @see {@link streamToolCallingTurn}
+ */
+export interface StreamToolCallingTurnOpts {
+    /** LLM provider identifier (e.g. `'openai'`, `'openrouter'`, `'ollama'`). */
+    providerId?: string;
+    /** API key (or promise resolving to one) for the LLM provider. */
+    apiKey: string | Promise<string>;
+    /** Model name/ID (e.g. `'gpt-4o-mini'`, `'llama3'`). */
+    model: string;
+    /**
+     * Mutable conversation history. The streaming function appends assistant
+     * and tool messages to this array as the conversation progresses.
+     */
+    messages: Array<Record<string, unknown>>;
+    /** Map of tool name -> tool instance for tool execution. */
+    toolMap: Map<string, ToolInstance>;
+    /** Pre-built tool definitions (overrides auto-generation from toolMap). */
+    toolDefs?: Array<Record<string, unknown>>;
+    /** Lazy tool definition supplier (called per round; overrides toolDefs). */
+    getToolDefs?: () => Array<Record<string, unknown>>;
+    /** Shared context object passed to every tool `execute()` call. */
+    toolContext: Record<string, unknown>;
+    /** Maximum number of LLM round-trips before forcibly stopping. */
+    maxRounds: number;
+    /** When `true`, bypasses all step-up authorization checks. */
+    dangerouslySkipPermissions: boolean;
+    /** Custom step-up authorization tier configuration. */
+    stepUpAuthConfig?: StepUpAuthorizationConfig;
+    /** Interactive permission callback for Tier 3 (sync HITL) tools. */
+    askPermission: (tool: ToolInstance, args: Record<string, unknown>) => Promise<boolean>;
+    /** Optional checkpoint callback invoked before executing a batch of tool calls. */
+    askCheckpoint?: (info: {
+        round: number;
+        toolCalls: Array<{
+            toolName: string;
+            hasSideEffects: boolean;
+            args: Record<string, unknown>;
+        }>;
+    }) => Promise<boolean>;
+    /** Notification callback fired when a tool call is about to execute. */
+    onToolCall?: (tool: ToolInstance, args: Record<string, unknown>) => void;
+    /** Notification callback fired after each tool call completes. */
+    onToolResult?: (info: {
+        toolName: string;
+        args: Record<string, unknown>;
+        success: boolean;
+        error?: string;
+        output?: unknown;
+        durationMs: number;
+    }) => void;
+    /** Pre-configured authorization manager (skips internal creation). */
+    authorizationManager?: StepUpAuthorizationManager;
+    /** Custom base URL for the LLM API endpoint. */
+    baseUrl?: string;
+    /** Fallback LLM provider config for automatic retry on transient errors. */
+    fallback?: LLMProviderConfig;
+    /** Callback fired when the primary provider fails and we fall back. */
+    onFallback?: (primaryError: Error, fallbackProvider: string) => void;
+    /** Lazy API key supplier (alternative to static `apiKey`). */
+    getApiKey?: () => string | Promise<string>;
+    /** Ollama-specific runtime options (e.g. num_ctx, num_gpu). */
+    ollamaOptions?: Record<string, unknown>;
+    /**
+     * Behavior when a tool execution fails.
+     * - `'fail_open'` — report the error to the LLM and let it continue.
+     * - `'fail_closed'` — immediately abort the turn.
+     */
+    toolFailureMode?: 'fail_open' | 'fail_closed';
+    /** When `true`, tool names that require sanitization cause an error instead. */
+    strictToolNames?: boolean;
+    /** Enable verbose debug logging for the streaming loop. */
+    debug?: boolean;
+    /** Progress callback for long-running tool executions. */
+    onToolProgress?: (info: {
+        toolName: string;
+        phase: string;
+        message: string;
+        progress?: number;
+    }) => void;
+    /**
+     * External abort signal for cancelling the in-flight streaming LLM request.
+     *
+     * When aborted, the HTTP stream is terminated immediately via the
+     * `AbortController` wired into `fetch()`. This is the primary mechanism
+     * for voice pipeline barge-in: the orchestrator calls `abort()` on the
+     * agent session, which triggers this signal, stopping token generation
+     * at the provider.
+     *
+     * @see {@link StreamingPipelineAgentSession.abort}
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Streaming variant of `runToolCallingTurn`.
+ *
+ * Yields individual text tokens as they arrive from the LLM streaming API,
+ * enabling real-time TTS playback (~500ms first-token latency instead of
+ * waiting for the full LLM response). Tool-call rounds are handled
+ * identically to the non-streaming variant: tool execution blocks, then
+ * the next LLM round resumes streaming.
+ *
+ * ## Multi-round streaming + blocking tool execution
+ *
+ * The outer loop runs up to `opts.maxRounds` LLM round-trips:
+ *
+ * 1. **Stream phase** -- Send the conversation to the LLM with
+ *    `stream: true` and yield text tokens as they arrive via SSE. Tool-call
+ *    fragments are accumulated silently by `wrapStreamingLLMAsGenerator`.
+ * 2. **Tool phase** (blocking) -- If the model's `finish_reason` is
+ *    `'tool_calls'`, execute each requested tool synchronously. Tool
+ *    results are appended to `opts.messages` as `role: 'tool'` messages.
+ * 3. **Next round** -- Loop back to step 1 with the updated conversation
+ *    history, allowing the model to incorporate tool results and stream
+ *    more text or request additional tools.
+ *
+ * The generator terminates when the model finishes with text only
+ * (`finish_reason: 'stop'`), the abort signal fires, or the round limit
+ * is reached.
+ *
+ * ## AbortSignal integration
+ *
+ * The optional `opts.signal` is wired through three layers:
+ * - **Outer loop**: checked at the start of each round and after tool execution.
+ * - **SSE fetch**: passed to `fetch()` so the HTTP connection is torn down
+ *   immediately on abort, stopping token generation at the provider.
+ * - **Token iteration**: checked between each yielded token so the generator
+ *   exits promptly after abort.
+ *
+ * This triple-layer cancellation ensures that voice pipeline barge-in stops
+ * the LLM within one event-loop tick of the abort signal.
+ *
+ * ## Provider fallback
+ *
+ * For providers that do not support SSE streaming (Ollama, Anthropic via
+ * the Messages API), this automatically falls back to the non-streaming
+ * `runToolCallingTurn` and post-splits the complete response into
+ * word-boundary chunks so the caller still receives an incremental token
+ * stream.
+ *
+ * @param opts - Configuration for the streaming tool-calling turn.
+ * @yields Individual text token strings (typically 1-4 words each).
+ * @returns The full accumulated reply text after all rounds complete.
+ *
+ * @example
+ * ```ts
+ * const controller = new AbortController();
+ * const gen = streamToolCallingTurn({
+ *   providerId: 'openai',
+ *   apiKey: process.env.OPENAI_API_KEY!,
+ *   model: 'gpt-4o-mini',
+ *   messages: [{ role: 'user', content: 'Hello' }],
+ *   toolMap: myToolMap,
+ *   toolContext: {},
+ *   maxRounds: 8,
+ *   dangerouslySkipPermissions: true,
+ *   askPermission: async () => true,
+ *   signal: controller.signal,
+ * });
+ *
+ * let result = await gen.next();
+ * while (!result.done) {
+ *   ttsEngine.feed(result.value); // stream to TTS immediately
+ *   result = await gen.next();
+ * }
+ * const fullReply = result.value;
+ * ```
+ *
+ * @see {@link runToolCallingTurn} for the non-streaming variant.
+ * @see {@link wrapStreamingLLMAsGenerator} for the SSE-to-generator adapter.
+ * @see {@link streamingOpenaiChatWithTools} for the HTTP streaming layer.
+ */
+export declare function streamToolCallingTurn(opts: StreamToolCallingTurnOpts): AsyncGenerator<string, string, undefined>;
+//# sourceMappingURL=ToolStreamProcessor.d.ts.map

package/dist/runtime/tools/ToolStreamProcessor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolStreamProcessor.d.ts","sourceRoot":"","sources":["../../../src/runtime/tools/ToolStreamProcessor.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAC3E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAC/F,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAgCzE;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,4DAA4D;IAC5D,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,0BAA0B,EAAE,OAAO,CAAC;IACpC,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,yBAAyB,CAAC;IAC7C,oEAAoE;IACpE,aAAa,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvF,mFAAmF;IACnF,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,KAAK,CAAC;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,cAAc,EAAE,OAAO,CAAC;YAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAC;KAChG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvB,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACzE,kEAAkE;IAClE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,KAAK,IAAI,CAAC;IACX,sEAAsE;IACtE,oBAAoB,CAAC,EAAE,0BAA0B,CAAC;IAClD,gDAAgD;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IAC7B,uEAAuE;IACvE,UAAU,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,KAAK,IAAI,CAAC;IACrE,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC;;;;OAIG;IACH,eAAe,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IAC9C,gFAAgF;IAChF,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2DAA2D;IAC3D,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,KAAK,IAAI,CAAC;IACX;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,wBAAuB,qBAAqB,CAC1C,IAAI,EAAE,yBAAyB,GAC9B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CA0V3C"}

package/dist/runtime/tools/ToolStreamProcessor.js

@@ -0,0 +1,410 @@
+// @ts-nocheck
+/**
+ * @fileoverview Streaming tool-call parsing and SSE chunk assembly.
+ *
+ * Extracted from `tool-calling.ts` to isolate the streaming-specific
+ * logic (SSE line iteration, token yielding, multi-round streaming loop)
+ * from the non-streaming tool-calling loop and the shared authorization
+ * layer.
+ *
+ * The main export is {@link streamToolCallingTurn}, an async generator
+ * that yields individual text tokens as they arrive from the LLM streaming
+ * API, enabling real-time TTS playback.
+ *
+ * @module wunderland/runtime/ToolStreamProcessor
+ */
+import { getBooleanProp, getStringProp, normalizeToolFailureMode, maybeConfigureGuardrailsForAgent, getSecurityPipeline, createAuthorizationManager, streamingOpenaiChatWithTools, parseProviderId, buildStrictToolNameError, shouldLogRewrite, } from './tool-helpers.js';
+import { buildToolDefsFromMapping, buildToolFunctionNameMapping, formatToolNameRewriteSummary, resolveStrictToolNames, resolveToolMapKeyFromFunctionName, sanitizeToolDefsForProvider, } from './tool-function-names.js';
+import { wrapStreamingLLMAsGenerator } from '../execution/llm-stream-adapter.js';
+import { runToolCallingTurn } from './tool-calling.js';
+import { authorizeToolCall, executeWithGuardrails, buildToolResultPayload, } from './ToolApprovalHandler.js';
+// ── Streaming variant ──────────────────────────────────────────────────────
+/**
+ * Streaming variant of `runToolCallingTurn`.
+ *
+ * Yields individual text tokens as they arrive from the LLM streaming API,
+ * enabling real-time TTS playback (~500ms first-token latency instead of
+ * waiting for the full LLM response). Tool-call rounds are handled
+ * identically to the non-streaming variant: tool execution blocks, then
+ * the next LLM round resumes streaming.
+ *
+ * ## Multi-round streaming + blocking tool execution
+ *
+ * The outer loop runs up to `opts.maxRounds` LLM round-trips:
+ *
+ * 1. **Stream phase** -- Send the conversation to the LLM with
+ *    `stream: true` and yield text tokens as they arrive via SSE. Tool-call
+ *    fragments are accumulated silently by `wrapStreamingLLMAsGenerator`.
+ * 2. **Tool phase** (blocking) -- If the model's `finish_reason` is
+ *    `'tool_calls'`, execute each requested tool synchronously. Tool
+ *    results are appended to `opts.messages` as `role: 'tool'` messages.
+ * 3. **Next round** -- Loop back to step 1 with the updated conversation
+ *    history, allowing the model to incorporate tool results and stream
+ *    more text or request additional tools.
+ *
+ * The generator terminates when the model finishes with text only
+ * (`finish_reason: 'stop'`), the abort signal fires, or the round limit
+ * is reached.
+ *
+ * ## AbortSignal integration
+ *
+ * The optional `opts.signal` is wired through three layers:
+ * - **Outer loop**: checked at the start of each round and after tool execution.
+ * - **SSE fetch**: passed to `fetch()` so the HTTP connection is torn down
+ *   immediately on abort, stopping token generation at the provider.
+ * - **Token iteration**: checked between each yielded token so the generator
+ *   exits promptly after abort.
+ *
+ * This triple-layer cancellation ensures that voice pipeline barge-in stops
+ * the LLM within one event-loop tick of the abort signal.
+ *
+ * ## Provider fallback
+ *
+ * For providers that do not support SSE streaming (Ollama, Anthropic via
+ * the Messages API), this automatically falls back to the non-streaming
+ * `runToolCallingTurn` and post-splits the complete response into
+ * word-boundary chunks so the caller still receives an incremental token
+ * stream.
+ *
+ * @param opts - Configuration for the streaming tool-calling turn.
+ * @yields Individual text token strings (typically 1-4 words each).
+ * @returns The full accumulated reply text after all rounds complete.
+ *
+ * @example
+ * ```ts
+ * const controller = new AbortController();
+ * const gen = streamToolCallingTurn({
+ *   providerId: 'openai',
+ *   apiKey: process.env.OPENAI_API_KEY!,
+ *   model: 'gpt-4o-mini',
+ *   messages: [{ role: 'user', content: 'Hello' }],
+ *   toolMap: myToolMap,
+ *   toolContext: {},
+ *   maxRounds: 8,
+ *   dangerouslySkipPermissions: true,
+ *   askPermission: async () => true,
+ *   signal: controller.signal,
+ * });
+ *
+ * let result = await gen.next();
+ * while (!result.done) {
+ *   ttsEngine.feed(result.value); // stream to TTS immediately
+ *   result = await gen.next();
+ * }
+ * const fullReply = result.value;
+ * ```
+ *
+ * @see {@link runToolCallingTurn} for the non-streaming variant.
+ * @see {@link wrapStreamingLLMAsGenerator} for the SSE-to-generator adapter.
+ * @see {@link streamingOpenaiChatWithTools} for the HTTP streaming layer.
+ */
+export async function* streamToolCallingTurn(opts) {
+    // Determine whether we can use true streaming for this provider.
+    const providerIdRaw = typeof opts.providerId === 'string' ? opts.providerId.trim() : '';
+    const providerIdParsed = parseProviderId(providerIdRaw);
+    const providerId = providerIdParsed ?? 'openai';
+    // Only OpenAI-compatible endpoints support SSE streaming in our stack.
+    // Ollama, Anthropic, and Gemini use different protocols — fall back to
+    // non-streaming with post-split chunking for those providers.
+    const canStream = providerId === 'openai' || providerId === 'openrouter';
+    if (!canStream) {
+        // Fallback: run the blocking variant, then post-split into word chunks.
+        const fullReply = await runToolCallingTurn({
+            ...opts,
+            // Strip the signal — runToolCallingTurn does not support it.
+        });
+        if (fullReply) {
+            const chunks = fullReply.match(/\S+\s*/g) ?? [fullReply];
+            for (const chunk of chunks) {
+                if (opts.signal?.aborted)
+                    break;
+                yield chunk;
+            }
+        }
+        return fullReply;
+    }
+    // --- True streaming path (OpenAI / OpenRouter) ---
+    const rounds = opts.maxRounds > 0 ? opts.maxRounds : 8;
+    const strictToolNames = resolveStrictToolNames(opts.strictToolNames ?? getBooleanProp(opts.toolContext, 'strictToolNames'));
+    const loggedRewriteEvents = new Set();
+    const shouldWrapToolOutputs = (() => {
+        const v = getBooleanProp(opts.toolContext, 'wrapToolOutputs');
+        return typeof v === 'boolean' ? v : true;
+    })();
+    const toolFailureMode = normalizeToolFailureMode(opts.toolFailureMode ?? getStringProp(opts.toolContext, 'toolFailureMode'), 'fail_open');
+    const failClosedOnToolFailure = toolFailureMode === 'fail_closed';
+    // Ensure folder-level sandboxing is always configured.
+    try {
+        maybeConfigureGuardrailsForAgent(opts.toolContext);
+    }
+    catch { /* non-fatal */ }
+    // Content security pipeline (pre-LLM input check).
+    const contentPipeline = getSecurityPipeline();
+    if (contentPipeline) {
+        try {
+            const lastMsg = opts.messages[opts.messages.length - 1];
+            const userText = lastMsg?.role === 'user' && typeof lastMsg.content === 'string'
+                ? lastMsg.content
+                : undefined;
+            if (userText) {
+                contentPipeline.reset();
+                const inputResult = await contentPipeline.evaluateInput({
+                    input: { textInput: userText },
+                });
+                if (inputResult?.action === 'block') {
+                    const blockReason = inputResult.metadata?.reason ??
+                        inputResult.metadata?.explanation ??
+                        'Input blocked by security pipeline.';
+                    const blockMsg = `I'm unable to process that request. ${blockReason}`;
+                    opts.messages.push({ role: 'assistant', content: blockMsg });
+                    yield blockMsg;
+                    return blockMsg;
+                }
+            }
+        }
+        catch { /* non-fatal */ }
+    }
+    const authManager = opts.authorizationManager ?? createAuthorizationManager({
+        dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+        stepUpAuthConfig: opts.stepUpAuthConfig,
+        askPermission: opts.askPermission,
+    });
+    let fullText = '';
+    /**
+     * Performs one LLM round with streaming, yielding text tokens as they
+     * arrive. Returns the collected tool calls (empty if the model finished
+     * with text only) and the finish reason.
+     */
+    async function* streamOneRound(toolDefs, signal) {
+        let sseLines;
+        try {
+            sseLines = await streamingOpenaiChatWithTools({
+                apiKey: opts.apiKey,
+                model: opts.model,
+                messages: opts.messages,
+                tools: toolDefs,
+                temperature: 0.2,
+                maxTokens: 1400,
+                baseUrl: opts.baseUrl,
+                fallback: opts.fallback,
+                onFallback: (primaryError, providerName) => {
+                    opts.onFallback?.(primaryError, providerName);
+                },
+                getApiKey: opts.getApiKey,
+                signal,
+            });
+        }
+        catch (err) {
+            // If aborted, return empty result gracefully.
+            if (err instanceof DOMException && err.name === 'AbortError') {
+                return { toolCalls: [], finishReason: 'abort' };
+            }
+            throw err;
+        }
+        const gen = wrapStreamingLLMAsGenerator(sseLines);
+        let iterResult = await gen.next();
+        while (!iterResult.done) {
+            const chunk = iterResult.value;
+            if (chunk.type === 'text_delta' && chunk.content) {
+                yield chunk.content;
+            }
+            // tool_call_request chunks are handled after the loop via the return value.
+            iterResult = await gen.next();
+        }
+        return iterResult.value;
+    }
+    // --- Main multi-round loop ---
+    for (let round = 0; round < rounds; round++) {
+        if (opts.signal?.aborted)
+            break;
+        // Build tool name mapping and defs for this round.
+        const nameMapping = buildToolFunctionNameMapping(opts.toolMap);
+        if (nameMapping.rewrites.length > 0) {
+            const summary = formatToolNameRewriteSummary(nameMapping.rewrites);
+            if (strictToolNames) {
+                throw buildStrictToolNameError('[stream-tool-calling]', summary);
+            }
+            const eventKey = `mapping:${summary}`;
+            if (shouldLogRewrite(loggedRewriteEvents, eventKey)) {
+                console.warn(`[stream-tool-calling] Sanitized tool map function names: ${summary}`);
+            }
+        }
+        const rawToolDefs = opts.getToolDefs
+            ? opts.getToolDefs()
+            : opts.toolDefs ?? buildToolDefsFromMapping(opts.toolMap, nameMapping);
+        const sanitizedDefs = sanitizeToolDefsForProvider(rawToolDefs);
+        if (sanitizedDefs.rewrites.length > 0 && strictToolNames) {
+            const summary = formatToolNameRewriteSummary(sanitizedDefs.rewrites.map((r) => ({
+                sourceName: r.originalName,
+                rewrittenName: r.sanitizedName,
+                reason: r.reason,
+            })));
+            throw buildStrictToolNameError('[stream-tool-calling]', summary);
+        }
+        const toolDefs = sanitizedDefs.toolDefs;
+        // Stream the LLM response, yielding tokens as they arrive.
+        let roundText = '';
+        const roundGen = streamOneRound(toolDefs, opts.signal);
+        let roundResult = await roundGen.next();
+        while (!roundResult.done) {
+            const token = roundResult.value;
+            roundText += token;
+            fullText += token;
+            yield token;
+            roundResult = await roundGen.next();
+        }
+        const { toolCalls, finishReason } = roundResult.value;
+        if (opts.signal?.aborted)
+            break;
+        // No tool calls — model is done generating text.
+        if (toolCalls.length === 0 || finishReason === 'stop' || finishReason === 'abort') {
+            // Strip think tags.
+            let content = fullText.trim();
+            content = content.replace(/<think>[\s\S]*?<\/think>\s*/g, '').trim();
+            content = content.replace(/\*{0,2}<think>[\s\S]*?<\/think>\*{0,2}\s*/g, '').trim();
+            // Content security (post-LLM output check).
+            if (contentPipeline && content) {
+                try {
+                    const outputResult = await contentPipeline.evaluateOutput({
+                        chunk: { finalResponseText: content },
+                    });
+                    if (outputResult?.action === 'block') {
+                        const safeMsg = 'I generated a response but it was blocked by the security pipeline. Please try rephrasing your request.';
+                        opts.messages.push({ role: 'assistant', content: safeMsg });
+                        return safeMsg;
+                    }
+                }
+                catch { /* non-fatal */ }
+            }
+            opts.messages.push({ role: 'assistant', content: content || '(no content)' });
+            return content || '';
+        }
+        // --- Tool calls: push assistant message, execute tools, loop ---
+        const rawToolCallMessages = toolCalls.map((tc) => ({
+            id: tc.id,
+            type: 'function',
+            function: {
+                name: tc.name,
+                arguments: JSON.stringify(tc.arguments),
+            },
+        }));
+        opts.messages.push({
+            role: 'assistant',
+            content: roundText || null,
+            tool_calls: rawToolCallMessages,
+        });
+        // Execute each tool call (blocking — tool execution is not streamed).
+        let earlyReturn = null;
+        for (const tc of toolCalls) {
+            if (opts.signal?.aborted)
+                break;
+            const resolvedToolKey = resolveToolMapKeyFromFunctionName({
+                functionName: tc.name,
+                toolMap: opts.toolMap,
+                mapping: nameMapping,
+                sanitizedAliasByName: sanitizedDefs.aliasBySanitizedName,
+            });
+            const tool = resolvedToolKey ? opts.toolMap.get(resolvedToolKey) : undefined;
+            if (!tool) {
+                opts.messages.push({
+                    role: 'tool',
+                    tool_call_id: tc.id,
+                    content: JSON.stringify({ error: `Tool not found: ${tc.name}` }),
+                });
+                if (failClosedOnToolFailure) {
+                    earlyReturn = `[tool_failure_mode=fail_closed] Tool not found: ${tc.name}.`;
+                    break;
+                }
+                continue;
+            }
+            const toolName = tool.name || resolvedToolKey || tc.name;
+            const args = tc.arguments;
+            if (opts.onToolCall) {
+                try {
+                    opts.onToolCall(tool, args);
+                }
+                catch { /* ignore */ }
+            }
+            // Step-up authorization (delegated to ToolApprovalHandler).
+            const authResult = await authorizeToolCall({
+                tool,
+                toolName,
+                args,
+                callId: tc.id,
+                authManager,
+                toolContext: opts.toolContext,
+                dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+                askPermission: opts.askPermission,
+                shouldWrapToolOutputs,
+                failClosedOnToolFailure,
+                messages: opts.messages,
+            });
+            if (!authResult.authorized) {
+                if (authResult.earlyReturn) {
+                    earlyReturn = authResult.earlyReturn;
+                    break;
+                }
+                continue;
+            }
+            // Execute the tool with guardrails (delegated to ToolApprovalHandler).
+            const callToolContext = opts.onToolProgress
+                ? { ...opts.toolContext, onToolProgress: (info) => {
+                        try {
+                            opts.onToolProgress({ toolName, ...info });
+                        }
+                        catch { /* ignore */ }
+                    } }
+                : opts.toolContext;
+            const start = Date.now();
+            let result;
+            try {
+                result = await executeWithGuardrails({
+                    tool,
+                    toolName,
+                    resolvedToolKey: resolvedToolKey || tool.name,
+                    args,
+                    callId: tc.id,
+                    toolContext: opts.toolContext,
+                    callToolContext,
+                    hitlApproved: authResult.hitlApproved,
+                    dangerouslySkipPermissions: opts.dangerouslySkipPermissions,
+                    askPermission: opts.askPermission,
+                });
+            }
+            catch (err) {
+                const errMsg = err instanceof Error ? err.message : String(err);
+                result = { success: false, error: `Tool threw: ${errMsg}` };
+            }
+            const durationMs = Math.max(0, Date.now() - start);
+            if (opts.onToolResult) {
+                try {
+                    opts.onToolResult({
+                        toolName,
+                        args,
+                        success: result?.success === true,
+                        error: result?.success ? undefined : (result?.error || 'Tool failed'),
+                        output: result?.success ? result.output : undefined,
+                        durationMs,
+                    });
+                }
+                catch { /* ignore */ }
+            }
+            const content = buildToolResultPayload(result, toolName, tc.id, opts.toolMap, shouldWrapToolOutputs, false);
+            opts.messages.push({ role: 'tool', tool_call_id: tc.id, content });
+            if (!result?.success && failClosedOnToolFailure) {
+                earlyReturn = `[tool_failure_mode=fail_closed] Tool ${toolName} failed: ${result?.error || 'Tool failed'}`;
+                break;
+            }
+        }
+        if (earlyReturn !== null) {
+            opts.messages.push({ role: 'assistant', content: earlyReturn });
+            return earlyReturn;
+        }
+        // Reset per-round text — the next round's text delta will accumulate freshly.
+        roundText = '';
+        // Continue to the next round (tool results are now in messages).
+    }
+    // Exceeded max rounds without a natural stop.
+    return fullText || '';
+}
+//# sourceMappingURL=ToolStreamProcessor.js.map

package/dist/runtime/tools/ToolStreamProcessor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ToolStreamProcessor.js","sourceRoot":"","sources":["../../../src/runtime/tools/ToolStreamProcessor.ts"],"names":[],"mappings":"AAAA,cAAc;AACd;;;;;;;;;;;;;GAaG;AAKH,OAAO,EACL,cAAc,EACd,aAAa,EACb,wBAAwB,EACxB,gCAAgC,EAChC,mBAAmB,EACnB,0BAA0B,EAC1B,4BAA4B,EAC5B,eAAe,EACf,wBAAwB,EACxB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,EACxB,4BAA4B,EAC5B,4BAA4B,EAC5B,sBAAsB,EACtB,iCAAiC,EACjC,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AACjF,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EACL,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAuGlC,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,IAA+B;IAE/B,iEAAiE;IACjE,MAAM,aAAa,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,gBAAgB,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,gBAAgB,IAAI,QAAQ,CAAC;IAEhD,uEAAuE;IACvE,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,YAAY,CAAC;IAEzE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC;YACzC,GAAG,IAAI;YACP,6DAA6D;SAC9D,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAM;gBAChC,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,oDAAoD;IAEpD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,sBAAsB,CAC5C,IAAI,CAAC,eAAe,IAAI,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAC5E,CAAC;IACF,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9C,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC,CAAC,EAAE,CAAC;IACL,MAAM,eAAe,GAAG,wBAAwB,CAC9C,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAC1E,WAAW,CACZ,CAAC;IACF,MAAM,uBAAuB,GAAG,eAAe,KAAK,aAAa,CAAC;IAElE,uDAAuD;IACvD,IAAI,CAAC;QAAC,gCAAgC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAErF,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,IAAI,eAAe,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxD,MAAM,QAAQ,GACZ,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;gBAC7D,CAAC,CAAC,OAAO,CAAC,OAAO;gBACjB,CAAC,CAAC,SAAS,CAAC;YAChB,IAAI,QAAQ,EAAE,CAAC;gBACb,eAAe,CAAC,KAAK,EAAE,CAAC;gBACxB,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC;oBACtD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE;iBACxB,CAAC,CAAC;gBACV,IAAI,WAAW,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;oBACpC,MAAM,WAAW,GACf,WAAW,CAAC,QAAQ,EAAE,MAAM;wBAC5B,WAAW,CAAC,QAAQ,EAAE,WAAW;wBACjC,qCAAqC,CAAC;oBACxC,MAAM,QAAQ,GAAG,uCAAuC,WAAW,EAAE,CAAC;oBACtE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC7D,MAAM,QAAQ,CAAC;oBACf,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,IAAI,0BAA0B,CAAC;QAC1E,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;QAC3D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,EAAE,CAAC;IAElB;;;;OAIG;IACH,KAAK,SAAS,CAAC,CAAC,cAAc,CAC5B,QAAwC,EACxC,MAA+B;QAE/B,IAAI,QAA+B,CAAC;QACpC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,4BAA4B,CAAC;gBAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,QAAQ;gBACf,WAAW,EAAE,GAAG;gBAChB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,EAAE;oBACzC,IAAI,CAAC,UAAU,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;gBAChD,CAAC;gBACD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8CAA8C;YAC9C,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC7D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;YAClD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,GAAG,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBACjD,MAAM,KAAK,CAAC,OAAO,CAAC;YACtB,CAAC;YACD,4EAA4E;YAC5E,UAAU,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,gCAAgC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAEhC,mDAAmD;QACnD,MAAM,WAAW,GAAG,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,4BAA4B,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACnE,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,wBAAwB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,QAAQ,GAAG,WAAW,OAAO,EAAE,CAAC;YACtC,IAAI,gBAAgB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACpD,OAAO,CAAC,IAAI,CAAC,4DAA4D,OAAO,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;YAClC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAC/D,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,eAAe,EAAE,CAAC;YACzD,MAAM,OAAO,GAAG,4BAA4B,CAC1C,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,UAAU,EAAE,CAAC,CAAC,YAAY;gBAC1B,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC,CACJ,CAAC;YACF,MAAM,wBAAwB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;QAExC,2DAA2D;QAC3D,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAChC,SAAS,IAAI,KAAK,CAAC;YACnB,QAAQ,IAAI,KAAK,CAAC;YAClB,MAAM,KAAK,CAAC;YACZ,WAAW,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtC,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC;QAEtD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM;QAEhC,iDAAiD;QACjD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,MAAM,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAClF,oBAAoB;YACpB,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACrE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAEnF,4CAA4C;YAC5C,IAAI,eAAe,IAAI,OAAO,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC;wBACxD,KAAK,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE;qBAC/B,CAAC,CAAC;oBACV,IAAI,YAAY,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;wBACrC,MAAM,OAAO,GACX,yGAAyG,CAAC;wBAC5G,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC5D,OAAO,OAAO,CAAC;oBACjB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC,CAAC;YAC9E,OAAO,OAAO,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,kEAAkE;QAClE,MAAM,mBAAmB,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACjD,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE;gBACR,IAAI,EAAE,EAAE,CAAC,IAAI;gBACb,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC;aACxC;SACF,CAAC,CAAC,CAAC;QAEJ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,SAAS,IAAI,IAAI;YAC1B,UAAU,EAAE,mBAAmB;SAChC,CAAC,CAAC;QAEH,sEAAsE;QACtE,IAAI,WAAW,GAAkB,IAAI,CAAC;QACtC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM;YAEhC,MAAM,eAAe,GAAG,iCAAiC,CAAC;gBACxD,YAAY,EAAE,EAAE,CAAC,IAAI;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,WAAW;gBACpB,oBAAoB,EAAE,aAAa,CAAC,oBAAoB;aACzD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAE7E,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,EAAE,CAAC,EAAE;oBACnB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;iBACjE,CAAC,CAAC;gBACH,IAAI,uBAAuB,EAAE,CAAC;oBAC5B,WAAW,GAAG,mDAAmD,EAAE,CAAC,IAAI,GAAG,CAAC;oBAC5E,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,eAAe,IAAI,EAAE,CAAC,IAAI,CAAC;YACzD,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC;YAE1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC;oBAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC7D,CAAC;YAED,4DAA4D;YAC5D,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;gBACzC,IAAI;gBACJ,QAAQ;gBACR,IAAI;gBACJ,MAAM,EAAE,EAAE,CAAC,EAAE;gBACb,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;gBAC3D,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,qBAAqB;gBACrB,uBAAuB;gBACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;YAEH,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;gBAC3B,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;oBAC3B,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;oBACrC,MAAM;gBACR,CAAC;gBACD,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,MAAM,eAAe,GAA4B,IAAI,CAAC,cAAc;gBAClE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC,IAA2D,EAAE,EAAE;wBACrG,IAAI,CAAC;4BAAC,IAAI,CAAC,cAAe,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;oBAC7E,CAAC,EAAE;gBACL,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;YAErB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,MAA8D,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,qBAAqB,CAAC;oBACnC,IAAI;oBACJ,QAAQ;oBACR,eAAe,EAAE,eAAe,IAAI,IAAI,CAAC,IAAI;oBAC7C,IAAI;oBACJ,MAAM,EAAE,EAAE,CAAC,EAAE;oBACb,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,eAAe;oBACf,YAAY,EAAE,UAAU,CAAC,YAAY;oBACrC,0BAA0B,EAAE,IAAI,CAAC,0BAA0B;oBAC3D,aAAa,EAAE,IAAI,CAAC,aAAa;iBAClC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,MAAM,EAAE,EAAE,CAAC;YAC9D,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,IAAI,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC;wBAChB,QAAQ;wBACR,IAAI;wBACJ,OAAO,EAAE,MAAM,EAAE,OAAO,KAAK,IAAI;wBACjC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,aAAa,CAAC;wBACrE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;wBACnD,UAAU;qBACX,CAAC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,OAAO,GAAG,sBAAsB,CACpC,MAAM,EACN,QAAQ,EACR,EAAE,CAAC,EAAE,EACL,IAAI,CAAC,OAAO,EACZ,qBAAqB,EACrB,KAAK,CACN,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAEnE,IAAI,CAAC,MAAM,EAAE,OAAO,IAAI,uBAAuB,EAAE,CAAC;gBAChD,WAAW,GAAG,wCAAwC,QAAQ,YAAY,MAAM,EAAE,KAAK,IAAI,aAAa,EAAE,CAAC;gBAC3G,MAAM;YACR,CAAC;QACH,CAAC;QAED,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAChE,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,8EAA8E;QAC9E,SAAS,GAAG,EAAE,CAAC;QACf,iEAAiE;IACnE,CAAC;IAED,8CAA8C;IAC9C,OAAO,QAAQ,IAAI,EAAE,CAAC;AACxB,CAAC"}

package/dist/runtime/tools/attach-env.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @fileoverview Build browser-automation attach options from the environment.
+ *
+ * The attach tool family (`browser_attach_*`) is off unless the pack is
+ * constructed with `attach.expectedIdentity`. A normal `wunderland mission run`
+ * never passes that, so without this the tools would never load from the CLI.
+ * This sources the attach config from env vars (mirroring how voice-synthesis
+ * pulls its provider keys) so setting `WUNDERLAND_ATTACH_IDENTITY` is all it
+ * takes to make the capability reachable.
+ *
+ * @module wunderland/runtime/tools/attach-env
+ */
+/** Attach options shape consumed by the browser-automation pack. */
+export interface AttachOptions {
+    expectedIdentity: string;
+    transport?: 'jxa' | 'cdp';
+    allowHosts?: string[];
+    leaseFile?: string;
+    profileRoot?: string;
+    identityProbeUrl?: string;
+}
+/**
+ * Read attach options from an environment map.
+ *
+ * @returns `{ attach }` when `WUNDERLAND_ATTACH_IDENTITY` is set, else `{}`
+ *   (attach stays off).
+ */
+export declare function attachOptionsFromEnv(env: Record<string, string | undefined>): {
+    attach?: AttachOptions;
+};
+//# sourceMappingURL=attach-env.d.ts.map