@adonis-agora/agent 0.52.1 → 0.53.1

package/dist/src/confirmed-tool.d.ts

@@ -0,0 +1,139 @@
+import type { StandardSchemaV1 } from '@standard-schema/spec';
+import { type AiToolOptions, type BrandedFunctionalTool } from './ai-tool-ref.js';
+import type { ConfirmTokenStore } from './spi/confirm-token-store.js';
+import type { AiToolCtx } from './spi/tool.js';
+/** The two fields {@link defineConfirmedTool} adds to a tool's input. */
+export interface ConfirmFields {
+    /** `true` to commit; absent (or `false`) to preview. */
+    confirm?: boolean;
+    /** The `confirmToken` the preview returned. */
+    confirmToken?: string;
+}
+/** The words a confirmed tool says to the model. Each has an English default. */
+export interface ConfirmedToolMessages {
+    /** Sent with every preview: how to confirm. `{minutes}` is replaced with the token's lifetime. */
+    confirm?: string;
+    /** Thrown for a missing, tampered, mismatched or expired token. */
+    invalid?: string;
+    /** Thrown for a token that already committed. */
+    used?: string;
+}
+/** Thrown by a confirmed tool that refused a confirmation. Nothing was written. */
+export declare class ConfirmTokenError extends Error {
+    /** `invalid`: missing, tampered, mismatched or expired. `used`: it already committed once. */
+    readonly reason: 'invalid' | 'used';
+    constructor(
+    /** `invalid`: missing, tampered, mismatched or expired. `used`: it already committed once. */
+    reason: 'invalid' | 'used', message: string);
+}
+/** What {@link defineConfirmedTool} takes besides the usual tool options. */
+export interface ConfirmedToolOptions extends Omit<AiToolOptions, 'kind'> {
+    name: string;
+    /**
+     * The HMAC key the tokens are signed with — the app key, or a secret of its own. A function is
+     * read on every call. Required: there is no default, and an empty one throws.
+     */
+    secret: string | (() => string);
+    /** How long a preview stays confirmable. Default 15 minutes. */
+    ttlMs?: number;
+    /**
+     * Makes a token single use. WITHOUT a store a token commits as many times as it is sent until it
+     * expires — a retry or a repeated call writes twice.
+     */
+    store?: ConfirmTokenStore;
+    messages?: ConfirmedToolMessages;
+}
+/** What a step reports: a sentence for the model to relay, and the structured detail behind it. */
+export interface ConfirmedToolOutcome {
+    summary: string;
+    data?: unknown;
+}
+/** The three steps of a confirmed write. */
+export interface ConfirmedToolSteps<Args, Prepared> {
+    /**
+     * Resolve and validate everything the write needs, applying the SAME rules the commit relies on.
+     * Throw to refuse. Writes nothing. Runs for the preview AND again for the confirmation — state may
+     * have changed in between — and a refusal here does not spend the token.
+     */
+    prepare(args: Args, ctx: AiToolCtx): Promise<Prepared> | Prepared;
+    /** What is about to happen. Writes nothing. */
+    preview(prepared: Prepared, ctx: AiToolCtx): Promise<ConfirmedToolOutcome> | ConfirmedToolOutcome;
+    /** Write, and say what was written. A throw gives the token back. */
+    commit(prepared: Prepared, ctx: AiToolCtx): Promise<ConfirmedToolOutcome> | ConfirmedToolOutcome;
+}
+/** A confirmed tool's answer to a call without `confirm`. */
+export interface ConfirmedToolPreview {
+    status: 'preview';
+    summary: string;
+    data?: unknown;
+    confirmToken: string;
+    /** ISO-8601 instant the token stops working. */
+    expiresAt: string;
+    /** Instructions for the model: show the preview, then call again with the token. */
+    confirm: string;
+}
+/** A confirmed tool's answer to a confirmation that committed. */
+export interface ConfirmedToolDone {
+    status: 'done';
+    summary: string;
+    data?: unknown;
+}
+export type ConfirmedToolResult = ConfirmedToolPreview | ConfirmedToolDone;
+/** The JSON Schema of {@link ConfirmFields}, merged into the schema the model is shown. */
+export declare const CONFIRM_JSON_SCHEMA_PROPERTIES: {
+    readonly confirm: {
+        readonly type: 'boolean';
+        readonly description: 'Omit to get a preview (nothing is written). Send true, with confirmToken, to commit.';
+    };
+    readonly confirmToken: {
+        readonly type: 'string';
+        readonly description: 'The confirmToken the preview returned. Required when confirm is true.';
+    };
+};
+/**
+ * Wrap a tool's input schema so it also accepts {@link ConfirmFields}, without the app declaring
+ * them. `validate` takes the two fields off, checks them itself, hands the REST to the app's schema
+ * (so a strict schema never sees a key it did not declare) and puts them back on the validated value.
+ *
+ * The wrapper always carries the Standard JSON Schema extension, because that is the only form the
+ * model gets to see: the app schema's own JSON Schema plus the two properties. A schema without the
+ * extension (Zod 3, a bare Standard Schema) degrades to a permissive object that still declares the
+ * two fields — `validate` stays the authority either way.
+ */
+export declare function withConfirmFields<Schema extends StandardSchemaV1>(schema: Schema): StandardSchemaV1<StandardSchemaV1.InferInput<Schema> & ConfirmFields, StandardSchemaV1.InferOutput<Schema> & ConfirmFields>;
+/**
+ * A write with a human gate that lives INSIDE the tool: preview first, commit on confirmation.
+ *
+ * - Called without `confirm`: runs `prepare`, writes nothing, and returns the `preview` with a signed
+ *   `confirmToken`.
+ * - Called again with the SAME arguments, `confirm: true` and that token: runs `prepare` again, then
+ *   `commit`.
+ *
+ * The token is an HMAC over the tool, `ctx.actor.id`, `ctx.actor.tenantRef`, the expiry and the
+ * canonical arguments, so it cannot be replayed by another actor, in another tenant, on another
+ * tool or with a changed argument. With a `store` it is also single use: it is claimed right before
+ * `commit` (a refusal in `prepare` does not spend it) and released if `commit` throws.
+ *
+ * Registered as `kind: 'read'` on purpose. An `action` parks on the loop's HITL approval, which an
+ * MCP caller cannot answer — `createMcpServer` keeps `action` tools off the surface, and MCP clients
+ * without elicitation have no other channel. The gate being in the handler is what lets the same
+ * tool serve the chat loop and MCP; the user sees the preview because the model has to relay it to
+ * get a token it can confirm with.
+ *
+ * ```ts
+ * export const refundOrder = defineConfirmedTool(
+ *   { name: 'refund_order', description: '...', input: z.object({ orderId: z.string() }),
+ *     secret: () => env.get('APP_KEY').release(), store: new LucidConfirmTokenStore(db) },
+ *   {
+ *     prepare: async ({ orderId }, ctx) => loadRefundableOrder(orderId, ctx.actor),
+ *     preview: (order) => ({ summary: `Refund ${order.total} to ${order.customer}?`, data: order }),
+ *     commit: async (order) => ({ summary: 'Refunded.', data: await refund(order) }),
+ *   },
+ * )
+ * ```
+ *
+ * `input` is the app's own schema: `confirm` and `confirmToken` are added by
+ * {@link withConfirmFields}, and `prepare` receives the arguments without them.
+ */
+export declare function defineConfirmedTool<Args = unknown, Prepared = unknown>(options: ConfirmedToolOptions, steps: ConfirmedToolSteps<Args, Prepared>): BrandedFunctionalTool;
+//# sourceMappingURL=confirmed-tool.d.ts.map

package/dist/src/confirmed-tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmed-tool.d.ts","sourceRoot":"","sources":["../../src/confirmed-tool.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAc,MAAM,kBAAkB,CAAC;AAQ9F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,iFAAiF;AACjF,MAAM,WAAW,qBAAqB;IACpC,kGAAkG;IAClG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAUD,mFAAmF;AACnF,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM;IAFrC;IACE,8FAA8F;IACrF,MAAM,EAAE,SAAS,GAAG,MAAM,EACnC,OAAO,EAAE,MAAM,EAIhB;CACF;AAED,6EAA6E;AAC7E,MAAM,WAAW,oBAAqB,SAAQ,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;IACvE,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;IAChC,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAClC;AAED,mGAAmG;AACnG,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB,CAAC,IAAI,EAAE,QAAQ;IAChD;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC;IAClE,+CAA+C;IAC/C,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;IAClG,qEAAqE;IACrE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,oBAAoB,CAAC,GAAG,oBAAoB,CAAC;CAClG;AAED,6DAA6D;AAC7D,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,kEAAkE;AAClE,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAE3E,2FAA2F;AAC3F,eAAO,MAAM,8BAA8B;aACzC,OAAO;iBACL,IAAI,EAAE,SAAS;iBACf,WAAW,EACT,sFAAsF;;aAE1F,YAAY;iBACV,IAAI,EAAE,QAAQ;iBACd,WAAW,EAAE,uEAAuE;;CAE9E,CAAC;AA8BX;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,SAAS,gBAAgB,EAC/D,MAAM,EAAE,MAAM,GACb,gBAAgB,CACjB,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,aAAa,EACnD,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,aAAa,CACrD,CA+CA;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAG,OAAO,EAAE,QAAQ,GAAG,OAAO,EACpE,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,GACxC,qBAAqB,CAiEvB"}

package/dist/src/confirmed-tool.js

@@ -0,0 +1,203 @@
+import { defineTool } from './ai-tool-ref.js';
+import { confirmTokenExpiry, DEFAULT_CONFIRM_TTL_MS, hashConfirmToken, signConfirmToken, verifyConfirmToken, } from './confirm-token.js';
+const DEFAULT_MESSAGES = {
+    confirm: 'Nothing was written. Show this preview to the user and ask them to confirm. To commit, call this tool again with the SAME arguments plus "confirm": true and this "confirmToken" (valid for {minutes} minutes).',
+    invalid: 'Invalid or expired confirmation: nothing was written. Call the tool without "confirm" to get a fresh preview, then confirm with the "confirmToken" it returns, without changing the arguments.',
+    used: 'This preview was already confirmed: nothing was written again. To repeat the operation, ask for a new preview.',
+};
+/** Thrown by a confirmed tool that refused a confirmation. Nothing was written. */
+export class ConfirmTokenError extends Error {
+    reason;
+    constructor(
+    /** `invalid`: missing, tampered, mismatched or expired. `used`: it already committed once. */
+    reason, message) {
+        super(message);
+        this.reason = reason;
+        this.name = 'ConfirmTokenError';
+    }
+}
+/** The JSON Schema of {@link ConfirmFields}, merged into the schema the model is shown. */
+export const CONFIRM_JSON_SCHEMA_PROPERTIES = {
+    confirm: {
+        type: 'boolean',
+        description: 'Omit to get a preview (nothing is written). Send true, with confirmToken, to commit.',
+    },
+    confirmToken: {
+        type: 'string',
+        description: 'The confirmToken the preview returned. Required when confirm is true.',
+    },
+};
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Split a call's input into the app's arguments and the two confirmation fields. */
+function splitConfirm(input) {
+    if (!isRecord(input))
+        return { args: input, fields: {} };
+    const { confirm, confirmToken, ...args } = input;
+    return {
+        args,
+        fields: {
+            ...(typeof confirm === 'boolean' ? { confirm } : {}),
+            ...(typeof confirmToken === 'string' ? { confirmToken } : {}),
+        },
+    };
+}
+/** The schema's Standard JSON Schema `input` converter, when it has one. */
+function jsonSchemaInputOf(schema) {
+    const standard = schema['~standard'];
+    const input = standard.jsonSchema?.input;
+    return typeof input === 'function'
+        ? (options) => input.call(standard.jsonSchema, options)
+        : undefined;
+}
+/**
+ * Wrap a tool's input schema so it also accepts {@link ConfirmFields}, without the app declaring
+ * them. `validate` takes the two fields off, checks them itself, hands the REST to the app's schema
+ * (so a strict schema never sees a key it did not declare) and puts them back on the validated value.
+ *
+ * The wrapper always carries the Standard JSON Schema extension, because that is the only form the
+ * model gets to see: the app schema's own JSON Schema plus the two properties. A schema without the
+ * extension (Zod 3, a bare Standard Schema) degrades to a permissive object that still declares the
+ * two fields — `validate` stays the authority either way.
+ */
+export function withConfirmFields(schema) {
+    const inner = schema['~standard'];
+    const innerJsonSchema = jsonSchemaInputOf(schema);
+    const describe = (options) => {
+        const base = innerJsonSchema?.(options) ?? { additionalProperties: true };
+        return {
+            ...base,
+            type: 'object',
+            properties: {
+                ...(isRecord(base.properties) ? base.properties : {}),
+                ...CONFIRM_JSON_SCHEMA_PROPERTIES,
+            },
+        };
+    };
+    const wrapped = {
+        '~standard': {
+            version: 1,
+            vendor: '@adonis-agora/agent',
+            validate: async (value) => {
+                if (!isRecord(value)) {
+                    return { issues: [{ message: 'expected an object' }] };
+                }
+                const issues = [];
+                // `null` is how some models say "absent"; it is read as absent rather than refused.
+                if (value.confirm != null && typeof value.confirm !== 'boolean') {
+                    issues.push({ message: 'expected a boolean', path: ['confirm'] });
+                }
+                if (value.confirmToken != null && typeof value.confirmToken !== 'string') {
+                    issues.push({ message: 'expected a string', path: ['confirmToken'] });
+                }
+                const { args, fields } = splitConfirm(value);
+                const result = await inner.validate(args);
+                if (result.issues !== undefined) {
+                    return { issues: [...issues, ...result.issues] };
+                }
+                if (issues.length > 0) {
+                    return { issues };
+                }
+                return { value: isRecord(result.value) ? { ...result.value, ...fields } : result.value };
+            },
+            jsonSchema: { input: describe, output: describe },
+        },
+    };
+    return wrapped;
+}
+/**
+ * A write with a human gate that lives INSIDE the tool: preview first, commit on confirmation.
+ *
+ * - Called without `confirm`: runs `prepare`, writes nothing, and returns the `preview` with a signed
+ *   `confirmToken`.
+ * - Called again with the SAME arguments, `confirm: true` and that token: runs `prepare` again, then
+ *   `commit`.
+ *
+ * The token is an HMAC over the tool, `ctx.actor.id`, `ctx.actor.tenantRef`, the expiry and the
+ * canonical arguments, so it cannot be replayed by another actor, in another tenant, on another
+ * tool or with a changed argument. With a `store` it is also single use: it is claimed right before
+ * `commit` (a refusal in `prepare` does not spend it) and released if `commit` throws.
+ *
+ * Registered as `kind: 'read'` on purpose. An `action` parks on the loop's HITL approval, which an
+ * MCP caller cannot answer — `createMcpServer` keeps `action` tools off the surface, and MCP clients
+ * without elicitation have no other channel. The gate being in the handler is what lets the same
+ * tool serve the chat loop and MCP; the user sees the preview because the model has to relay it to
+ * get a token it can confirm with.
+ *
+ * ```ts
+ * export const refundOrder = defineConfirmedTool(
+ *   { name: 'refund_order', description: '...', input: z.object({ orderId: z.string() }),
+ *     secret: () => env.get('APP_KEY').release(), store: new LucidConfirmTokenStore(db) },
+ *   {
+ *     prepare: async ({ orderId }, ctx) => loadRefundableOrder(orderId, ctx.actor),
+ *     preview: (order) => ({ summary: `Refund ${order.total} to ${order.customer}?`, data: order }),
+ *     commit: async (order) => ({ summary: 'Refunded.', data: await refund(order) }),
+ *   },
+ * )
+ * ```
+ *
+ * `input` is the app's own schema: `confirm` and `confirmToken` are added by
+ * {@link withConfirmFields}, and `prepare` receives the arguments without them.
+ */
+export function defineConfirmedTool(options, steps) {
+    const { secret, ttlMs = DEFAULT_CONFIRM_TTL_MS, store, messages, ...toolOptions } = options;
+    const text = { ...DEFAULT_MESSAGES, ...messages };
+    const howToConfirm = text.confirm.replaceAll('{minutes}', String(Math.round(ttlMs / 60_000)));
+    const secretNow = () => (typeof secret === 'function' ? secret() : secret);
+    return defineTool({ ...toolOptions, kind: 'read', input: withConfirmFields(options.input) }, async (input, ctx) => {
+        const { args, fields } = splitConfirm(input);
+        const subject = {
+            tool: options.name,
+            actorId: ctx.actor.id,
+            ...(ctx.actor.tenantRef !== undefined ? { tenantRef: ctx.actor.tenantRef } : {}),
+            args,
+        };
+        const confirming = fields.confirm === true;
+        const token = fields.confirmToken;
+        if (confirming && !verifyConfirmToken(token, subject, { secret: secretNow() })) {
+            throw new ConfirmTokenError('invalid', text.invalid);
+        }
+        const prepared = await steps.prepare(args, ctx);
+        if (!confirming || token === undefined) {
+            const preview = await steps.preview(prepared, ctx);
+            const expiresAt = Date.now() + ttlMs;
+            return {
+                status: 'preview',
+                summary: preview.summary,
+                ...(preview.data !== undefined ? { data: preview.data } : {}),
+                confirmToken: signConfirmToken(subject, { secret: secretNow(), expiresAt }),
+                expiresAt: new Date(expiresAt).toISOString(),
+                confirm: howToConfirm,
+            };
+        }
+        // Claimed only now: everything `prepare` refuses leaves the token usable, and a commit that
+        // throws gives it back so the same preview can be confirmed again.
+        const hash = hashConfirmToken(token);
+        if (store !== undefined) {
+            const claimed = await store.claim({
+                hash,
+                actorRef: ctx.actor.id,
+                tool: options.name,
+                expiresAt: confirmTokenExpiry(token) ?? Date.now() + ttlMs,
+            });
+            if (!claimed) {
+                throw new ConfirmTokenError('used', text.used);
+            }
+        }
+        try {
+            const done = await steps.commit(prepared, ctx);
+            return {
+                status: 'done',
+                summary: done.summary,
+                ...(done.data !== undefined ? { data: done.data } : {}),
+            };
+        }
+        catch (error) {
+            // The commit's own error is the one worth reporting, whatever the release does.
+            await store?.release(hash).catch(() => undefined);
+            throw error;
+        }
+    });
+}
+//# sourceMappingURL=confirmed-tool.js.map

package/dist/src/confirmed-tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmed-tool.js","sourceRoot":"","sources":["../../src/confirmed-tool.ts"],"names":[],"mappings":"AACA,OAAO,EAAkD,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAsB5B,MAAM,gBAAgB,GAAoC;IACxD,OAAO,EACL,iNAAiN;IACnN,OAAO,EACL,gMAAgM;IAClM,IAAI,EAAE,gHAAgH;CACvH,CAAC;AAEF,mFAAmF;AACnF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAG/B,MAAM;IAFjB;IACE,8FAA8F;IACrF,MAA0B,EACnC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;sBAHN,MAAM;QAIf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AA6DD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,WAAW,EACT,sFAAsF;KACzF;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,uEAAuE;KACrF;CACO,CAAC;AAEX,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,qFAAqF;AACrF,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzD,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACjD,OAAO;QACL,IAAI;QACJ,MAAM,EAAE;YACN,GAAG,CAAC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAID,4EAA4E;AAC5E,SAAS,iBAAiB,CAAC,MAAwB;IACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAyC,CAAC;IAC7E,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;IACzC,OAAO,OAAO,KAAK,KAAK,UAAU;QAChC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAE,KAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAChF,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc;IAKd,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,OAAiB,EAA2B,EAAE;QAC9D,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;QAC1E,OAAO;YACL,GAAG,IAAI;YACP,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,8BAA8B;aAClC;SACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,OAAO,GAAG;QACd,WAAW,EAAE;YACX,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,qBAAqB;YAC7B,QAAQ,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;gBACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrB,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;gBACzD,CAAC;gBACD,MAAM,MAAM,GAA6B,EAAE,CAAC;gBAC5C,oFAAoF;gBACpF,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAChE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBACpE,CAAC;gBACD,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBACzE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;gBACxE,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAChC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,CAAC;gBACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACtB,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC3F,CAAC;YACD,UAAU,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE;SAClD;KACF,CAAC;IACF,OAAO,OAGN,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAA6B,EAC7B,KAAyC;IAEzC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,sBAAsB,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAC5F,MAAM,IAAI,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE3E,OAAO,UAAU,CACf,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EACzE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACnB,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;YACrB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,IAAI;SACL,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC;QAClC,IAAI,UAAU,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,GAAG,CAAC,CAAC;QAExD,IAAI,CAAC,UAAU,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,YAAY,EAAE,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC;gBAC3E,SAAS,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC5C,OAAO,EAAE,YAAY;aACtB,CAAC;QACJ,CAAC;QAED,4FAA4F;QAC5F,mEAAmE;QACnE,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC;gBAChC,IAAI;gBACJ,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;gBACtB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC3D,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gFAAgF;YAChF,MAAM,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/dangling-tool-calls.d.ts

@@ -0,0 +1,35 @@
+import type { ModelMessage, ToolCallStatus } from './types.js';
+/**
+ * What a store knows about a tool call, read back when its message carries no result for it — see
+ * {@link import('./spi/agent-store.js').AgentStore.toolCallOutcomes}.
+ */
+export interface ToolCallOutcome {
+    id: string;
+    status: ToolCallStatus;
+    output?: unknown;
+    error?: string;
+}
+/** What the model is told about a call whose turn died before the call was settled. */
+export declare const UNFINISHED_TOOL_CALL: string;
+/** What is written on the row of a call whose run ended without settling it. */
+export declare const RUN_ENDED_BEFORE_TOOL_CALL = "the run ended before this tool call was settled";
+/** The ids of every tool call in `messages` that the message asking for it holds no result for. */
+export declare function danglingToolCallIds(messages: readonly ModelMessage[]): string[];
+/**
+ * Give every tool call in a thread's history a result.
+ *
+ * A turn writes its results onto the assistant message once the step's LAST tool has settled. A turn
+ * that dies before that — its run failed, its worker was killed, an approval was never answered and
+ * the run was abandoned — leaves an assistant message that asks for tools and is answered by
+ * nothing. A provider refuses a prompt shaped like that (a tool call must be followed by its
+ * result), so every LATER turn on the thread fails too, with an error about the stream rather than
+ * about the history: one dead turn makes the whole conversation unusable.
+ *
+ * Here each such call is settled from what is actually known: the call's own row where the store
+ * can read it (`outcomes` — a tool that DID run hands the model its real output, so it is not run a
+ * second time), and otherwise a result saying the call was never completed. Pure: the same messages
+ * and outcomes always produce the same prompt, so a replay composes what the first attempt did.
+ * Messages with nothing dangling are returned as they are.
+ */
+export declare function settleDanglingToolCalls(messages: ModelMessage[], outcomes?: readonly ToolCallOutcome[]): ModelMessage[];
+//# sourceMappingURL=dangling-tool-calls.d.ts.map

package/dist/src/dangling-tool-calls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangling-tool-calls.d.ts","sourceRoot":"","sources":["../../src/dangling-tool-calls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAc,MAAM,YAAY,CAAC;AAE3E;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,eAAO,MAAM,oBAAoB,QAIF,CAAC;AAEhC,gFAAgF;AAChF,eAAO,MAAM,0BAA0B,oDAAoD,CAAC;AAO5F,mGAAmG;AACnG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,MAAM,EAAE,CAe/E;AA4BD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,YAAY,EAAE,EACxB,QAAQ,GAAE,SAAS,eAAe,EAAO,GACxC,YAAY,EAAE,CAkBhB"}

package/dist/src/dangling-tool-calls.js

@@ -0,0 +1,84 @@
+/** What the model is told about a call whose turn died before the call was settled. */
+export const UNFINISHED_TOOL_CALL = 'This tool call was never completed: the turn it belonged to ended unexpectedly before it was ' +
+    'settled. Do not assume it ran, and do not assume it did not — check the current state with a ' +
+    'read tool if one exists, tell the person plainly what is and is not confirmed, and do it again ' +
+    'only if they still want it.';
+/** What is written on the row of a call whose run ended without settling it. */
+export const RUN_ENDED_BEFORE_TOOL_CALL = 'the run ended before this tool call was settled';
+const DECLINED = 'The person was asked to approve this action and declined it. Nothing ran and nothing changed.';
+const EXPIRED = 'This action needed approval, and the request expired before anyone decided. Nothing ran.';
+/** The ids of every tool call in `messages` that the message asking for it holds no result for. */
+export function danglingToolCallIds(messages) {
+    const ids = [];
+    for (const message of messages) {
+        const calls = message.toolCalls ?? [];
+        if (message.role !== 'assistant' || calls.length === 0) {
+            continue;
+        }
+        const settled = new Set((message.toolResults ?? []).map((result) => result.id));
+        for (const call of calls) {
+            if (!settled.has(call.id)) {
+                ids.push(call.id);
+            }
+        }
+    }
+    return ids;
+}
+function resultFor(call, outcome) {
+    const base = { id: call.id, name: call.name };
+    switch (outcome?.status) {
+        case 'executed':
+        case 'auto_executed':
+            return { ...base, output: outcome.output ?? null };
+        case 'failed':
+            return { ...base, output: null, error: outcome.error ?? UNFINISHED_TOOL_CALL };
+        case 'rejected':
+            return { ...base, output: { rejected: true }, denied: true, error: DECLINED };
+        case 'expired':
+            return {
+                ...base,
+                output: { rejected: true, expired: true },
+                denied: true,
+                expired: true,
+                error: EXPIRED,
+            };
+        default:
+            return { ...base, output: null, error: UNFINISHED_TOOL_CALL };
+    }
+}
+/**
+ * Give every tool call in a thread's history a result.
+ *
+ * A turn writes its results onto the assistant message once the step's LAST tool has settled. A turn
+ * that dies before that — its run failed, its worker was killed, an approval was never answered and
+ * the run was abandoned — leaves an assistant message that asks for tools and is answered by
+ * nothing. A provider refuses a prompt shaped like that (a tool call must be followed by its
+ * result), so every LATER turn on the thread fails too, with an error about the stream rather than
+ * about the history: one dead turn makes the whole conversation unusable.
+ *
+ * Here each such call is settled from what is actually known: the call's own row where the store
+ * can read it (`outcomes` — a tool that DID run hands the model its real output, so it is not run a
+ * second time), and otherwise a result saying the call was never completed. Pure: the same messages
+ * and outcomes always produce the same prompt, so a replay composes what the first attempt did.
+ * Messages with nothing dangling are returned as they are.
+ */
+export function settleDanglingToolCalls(messages, outcomes = []) {
+    const known = new Map(outcomes.map((outcome) => [outcome.id, outcome]));
+    return messages.map((message) => {
+        const calls = message.toolCalls ?? [];
+        if (message.role !== 'assistant' || calls.length === 0) {
+            return message;
+        }
+        const results = message.toolResults ?? [];
+        const settled = new Set(results.map((result) => result.id));
+        const missing = calls.filter((call) => !settled.has(call.id));
+        if (missing.length === 0) {
+            return message;
+        }
+        return {
+            ...message,
+            toolResults: [...results, ...missing.map((call) => resultFor(call, known.get(call.id)))],
+        };
+    });
+}
+//# sourceMappingURL=dangling-tool-calls.js.map

package/dist/src/dangling-tool-calls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangling-tool-calls.js","sourceRoot":"","sources":["../../src/dangling-tool-calls.ts"],"names":[],"mappings":"AAaA,uFAAuF;AACvF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,+FAA+F;IAC/F,+FAA+F;IAC/F,iGAAiG;IACjG,6BAA6B,CAAC;AAEhC,gFAAgF;AAChF,MAAM,CAAC,MAAM,0BAA0B,GAAG,iDAAiD,CAAC;AAE5F,MAAM,QAAQ,GACZ,+FAA+F,CAAC;AAClG,MAAM,OAAO,GACX,0FAA0F,CAAC;AAE7F,mGAAmG;AACnG,MAAM,UAAU,mBAAmB,CAAC,QAAiC;IACnE,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC1B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAChB,IAAkC,EAClC,OAAoC;IAEpC,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9C,QAAQ,OAAO,EAAE,MAAM,EAAE,CAAC;QACxB,KAAK,UAAU,CAAC;QAChB,KAAK,eAAe;YAClB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACrD,KAAK,QAAQ;YACX,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;QACjF,KAAK,UAAU;YACb,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAChF,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,IAAI;gBACP,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;gBACzC,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,OAAO;aACf,CAAC;QACJ;YACE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAwB,EACxB,QAAQ,GAA+B,EAAE;IAEzC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,WAAW,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;SACzF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/dead-run.d.ts

@@ -0,0 +1,28 @@
+import type { AgentStore } from './spi/agent-store.js';
+/**
+ * Leave nothing waiting on a run that is over and did not say so itself.
+ *
+ * A run normally settles its own row, its calls and its thread from inside its body. One that is
+ * refused a checkpoint position, or whose worker died, never gets there: its row stays `running`,
+ * a call it had put to a person stays `pending_approval` — an approval card that takes a "yes" and
+ * then does nothing, for ever — and its thread stays pointed at it. Everything here is written
+ * straight to the store, outside any checkpoint, because the callers are exactly the paths that
+ * have no journal left to write to; each write is idempotent (first-terminal run row, only
+ * still-pending calls, a release conditional on the holder), so doing it twice changes nothing.
+ *
+ * Best-effort on purpose: this runs while something else is already failing, and must not replace
+ * that failure with one of its own.
+ */
+export declare function settleDeadRun(store: AgentStore, args: {
+    runId: string;
+    threadId?: string;
+    error: string;
+}): Promise<void>;
+/** `approve` / `reject` / `answer` addressed at a run that is no longer running. */
+export declare class RunNotActiveError extends Error {
+    readonly runId: string;
+    readonly status = 409;
+    readonly code = "run_not_active";
+    constructor(runId: string);
+}
+//# sourceMappingURL=dead-run.d.ts.map

package/dist/src/dead-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dead-run.d.ts","sourceRoot":"","sources":["../../src/dead-run.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGvD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD,OAAO,CAAC,IAAI,CAAC,CAQf;AAED,oFAAoF;AACpF,qBAAa,iBAAkB,SAAQ,KAAK;IAG9B,QAAQ,CAAC,KAAK,EAAE,MAAM;IAFlC,QAAQ,CAAC,MAAM,OAAO;IACtB,QAAQ,CAAC,IAAI,oBAAoB;IACjC,YAAqB,KAAK,EAAE,MAAM,EAKjC;CACF"}

package/dist/src/dead-run.js

@@ -0,0 +1,37 @@
+import { RUN_ENDED_BEFORE_TOOL_CALL } from './dangling-tool-calls.js';
+import { releaseThreadRun } from './spi/chat-queue.js';
+/**
+ * Leave nothing waiting on a run that is over and did not say so itself.
+ *
+ * A run normally settles its own row, its calls and its thread from inside its body. One that is
+ * refused a checkpoint position, or whose worker died, never gets there: its row stays `running`,
+ * a call it had put to a person stays `pending_approval` — an approval card that takes a "yes" and
+ * then does nothing, for ever — and its thread stays pointed at it. Everything here is written
+ * straight to the store, outside any checkpoint, because the callers are exactly the paths that
+ * have no journal left to write to; each write is idempotent (first-terminal run row, only
+ * still-pending calls, a release conditional on the holder), so doing it twice changes nothing.
+ *
+ * Best-effort on purpose: this runs while something else is already failing, and must not replace
+ * that failure with one of its own.
+ */
+export async function settleDeadRun(store, args) {
+    await store
+        .recordRunEnd({ runId: args.runId, status: 'failed', error: args.error })
+        .catch(() => undefined);
+    await store.failUnsettledToolCalls?.(args.runId, RUN_ENDED_BEFORE_TOOL_CALL).catch(() => 0);
+    if (args.threadId !== undefined) {
+        await releaseThreadRun(store, args.threadId, args.runId).catch(() => undefined);
+    }
+}
+/** `approve` / `reject` / `answer` addressed at a run that is no longer running. */
+export class RunNotActiveError extends Error {
+    runId;
+    status = 409;
+    code = 'run_not_active';
+    constructor(runId) {
+        super('This request is no longer waiting for an answer: the turn it belonged to has ended. Send the message again.');
+        this.runId = runId;
+        this.name = 'RunNotActiveError';
+    }
+}
+//# sourceMappingURL=dead-run.js.map

package/dist/src/dead-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dead-run.js","sourceRoot":"","sources":["../../src/dead-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAiB,EACjB,IAAyD;IAEzD,MAAM,KAAK;SACR,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACxE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAGrB,KAAK;IAFjB,MAAM,GAAG,GAAG,CAAC;IACb,IAAI,GAAG,gBAAgB,CAAC;IACjC,YAAqB,KAAa;QAChC,KAAK,CACH,6GAA6G,CAC9G,CAAC;qBAHiB,KAAK;QAIxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF"}

package/dist/src/define_config.d.ts

@@ -19,9 +19,10 @@ import type { QuotaProvider } from './spi/quota-provider.js';
 import type { Retriever } from './spi/retriever.js';
 import type { RolesPolicy } from './spi/roles-policy.js';
 import type { TokenStreamSink } from './spi/token-stream-sink.js';
-import type { ActorDirectoryFactory, AttachmentStagingContext, AttachmentStagingFactory, EmbeddingFactory, GovernanceQueriesContext, GovernanceQueriesFactory, LucidGovernanceConfig, LucidPricingConfig, LucidStoreConfig, MemoryActorDirectoryConfig, MemoryRetrieverConfig, MemoryStoreConfig, PgVectorRetrieverConfig, PricingContext, PricingFactory, RedisTokenSinkConfig, RetrieverContext, RetrieverFactory, StoreContext, StoreFactory, TokenSinkFactory } from './stores/factory.js';
+import type { ActorDirectoryFactory, AttachmentStagingContext, AttachmentStagingFactory, EmbeddingFactory, GovernanceQueriesContext, GovernanceQueriesFactory, LucidGovernanceConfig, LucidPricingConfig, LucidStoreConfig, LucidTokenSinkConfig, MemoryActorDirectoryConfig, MemoryRetrieverConfig, MemoryStoreConfig, PgVectorRetrieverConfig, PricingContext, PricingFactory, RedisTokenSinkConfig, RetrieverContext, RetrieverFactory, StoreContext, StoreFactory, TokenSinkFactory } from './stores/factory.js';
 import { actorDirectories, attachmentStores, governanceQueries, pricingStores, retrievers, stores, streamTransports, tokenSinks } from './stores/factory.js';
 import type { QuotaLimits } from './stores/ledger-quota-provider.js';
+import type { EmptyRoles } from './tool-registry.js';
 import type { ToolTransientRetrySetting } from './tool-retry.js';
 import type { Actor, AgentDefinition } from './types.js';
 /** A lazy factory thunk, so the peer (`ai`/a provider SDK) is imported only when the config loads. */
@@ -61,6 +62,8 @@ export interface AgentConfig {
      * Live token transport ("data plane"), or a lazy factory. Defaults to the in-process sink (single
      * replica). Use `tokenSinks.redis({...})` (a.k.a. `streamTransports.redis`) for the multi-replica
      * Redis sink so any pod can serve any run's SSE stream — the SSE envelope is unchanged either way.
+     * With several replicas and no Redis, `tokenSinks.lucid()` keeps the frames in the app's SQL
+     * database instead (polled; see `LucidTokenStreamSink`).
      */
     sink?: TokenStreamSink | SinkFactory;
     /**
@@ -164,6 +167,12 @@ export interface AgentConfig {
      * fail-closed default.
      */
     defaultRoles?: string[];
+    /**
+     * What an empty roles list means to the default authorizer: `'allow'` (default) — no restriction;
+     * `'deny'` — nobody, so a tool needs `roles` (or a non-empty `defaultRoles`) to be reachable. Only
+     * consulted when no `authorizer` is set.
+     */
+    emptyRoles?: EmptyRoles;
     /**
      * Resolves the acting actor per request (the identity seam). Defaults to a resolver that THROWS on
      * every request — the agent never fabricates a caller. Wire `AuthActorResolver` / `HeaderActorResolver`.
@@ -300,6 +309,6 @@ export interface AgentConfig {
 }
 /** Identity helper giving `config/agent.ts` full type-checking. */
 export declare function defineConfig(config: AgentConfig): AgentConfig;
-export type { ActorDirectoryFactory, AttachmentStagingContext, AttachmentStagingFactory, EmbeddingFactory, GovernanceQueriesContext, GovernanceQueriesFactory, LucidGovernanceConfig, LucidPricingConfig, LucidStoreConfig, MemoryActorDirectoryConfig, MemoryRetrieverConfig, MemoryStoreConfig, PgVectorRetrieverConfig, PricingContext, PricingFactory, RedisTokenSinkConfig, RetrieverContext, RetrieverFactory, StoreContext, StoreFactory, TokenSinkFactory, };
+export type { ActorDirectoryFactory, AttachmentStagingContext, AttachmentStagingFactory, EmbeddingFactory, GovernanceQueriesContext, GovernanceQueriesFactory, LucidGovernanceConfig, LucidPricingConfig, LucidStoreConfig, LucidTokenSinkConfig, MemoryActorDirectoryConfig, MemoryRetrieverConfig, MemoryStoreConfig, PgVectorRetrieverConfig, PricingContext, PricingFactory, RedisTokenSinkConfig, RetrieverContext, RetrieverFactory, StoreContext, StoreFactory, TokenSinkFactory, };
 export { actorDirectories, attachmentStores, governanceQueries, pricingStores, retrievers, stores, streamTransports, tokenSinks, };
 //# sourceMappingURL=define_config.d.ts.map

package/dist/src/define_config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../src/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,UAAU,EACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEzD,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACxE,iIAAiI;AACjI,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE5F,uGAAuG;AACvG,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,KAAK,EAAE,aAAa,GAAG,YAAY,CAAC;IACpC,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC;;;;OAIG;IACH,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;IACrC;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa,CAAC;IACjE;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,iBAAiB,GAAG,cAAc,GAAG,KAAK,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,GAAG,KAAK,CAAC;IAC9E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,gBAAgB,CAAC;IACzC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,CAAC;IAChE;;;OAGG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACxD,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,8GAA8G;IAC9G,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,iGAAiG;IACjG,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,2GAA2G;IAC3G,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAE7D;AAED,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,gBAAgB,GACjB,CAAC;AACF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,UAAU,GACX,CAAC"}
+{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../src/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,EACV,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,gBAAgB,EACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,UAAU,EACX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAEzD,sGAAsG;AACtG,MAAM,MAAM,YAAY,GAAG,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;AACxE,iIAAiI;AACjI,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,YAAY,KAAK,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAE5F,uGAAuG;AACvG,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,KAAK,EAAE,aAAa,GAAG,YAAY,CAAC;IACpC,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtC;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;IACrC;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE;QAAE,MAAM,EAAE,WAAW,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,aAAa,CAAC;IACjE;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,iBAAiB,GAAG,cAAc,GAAG,KAAK,CAAC;IAC1D;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,GAAG,KAAK,CAAC;IAC9E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,mBAAmB,CAAC,EAAE,wBAAwB,CAAC;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,GAAG,gBAAgB,CAAC;IACzC,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,sBAAsB,GAAG,wBAAwB,CAAC;IAChE;;;OAGG;IACH,UAAU,CAAC,EAAE,WAAW,CAAC;IACzB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;OAGG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,qBAAqB,CAAC;IACxD,6EAA6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC;IAChD;;;;;;;;;;OAUG;IACH,MAAM,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAAC;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,eAAe,EAAE,CAAC;IAC3B,8GAA8G;IAC9G,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,iGAAiG;IACjG,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;IAC/C;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC;;;OAGG;IACH,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;IAC/B,2GAA2G;IAC3G,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;;OASG;IACH,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,mEAAmE;AACnE,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAE7D;AAED,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,0BAA0B,EAC1B,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,gBAAgB,GACjB,CAAC;AACF,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,MAAM,EACN,gBAAgB,EAChB,UAAU,GACX,CAAC"}