@animalabs/agent-framework 0.6.10 → 0.7.2

package/dist/src/code-execution/py-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"py-runner.js","sourceRoot":"","sources":["../../../src/code-execution/py-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,KAAK,EAAuC,MAAM,oBAAoB,CAAC;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAkB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAoCxD,MAAM,4BAA4B,GAAG,OAAO,CAAC;AAC7C,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAC1C,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC,MAAM,eAAe,GAAG,MAAM,CAAC;AAU/B,MAAM,OAAO,QAAQ;IACF,UAAU,CAAS;IACnB,iBAAiB,CAAS;IAC1B,eAAe,CAAS;IACxB,aAAa,CAAS;IACtB,UAAU,CAAwB;IAClC,KAAK,CAAS;IAEvB,KAAK,GAA0C,IAAI,CAAC;IACpD,UAAU,GAAyB,IAAI,CAAC;IACxC,MAAM,GAAqB,IAAI,CAAC;IAChC,UAAU,GAAkB,IAAI,CAAC;IACjC,OAAO,GAAuB,IAAI,CAAC;IACnC,SAAS,GAAyC,IAAI,CAAC;IACvD,WAAW,GAAG,CAAC,CAAC;IAChB,QAAQ,GAAG,KAAK,CAAC;IAEzB,YAAY,OAAwB;QAClC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,4BAA4B,CAAC;QACnF,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACtE,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACvC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAC/B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,IAAY,EAAE,KAAqB;QAC5C,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,+EAA+E;gBACvF,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC7B,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,mCAAmC,IAAI,CAAC,UAAU,MAAM,OAAO,EAAE;gBACzE,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;YACvD,MAAM,OAAO,GAAgB;gBAC3B,EAAE,EAAE,MAAM;gBACV,OAAO;gBACP,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,IAAI;gBACf,OAAO,EAAE,KAAK;aACf,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YAEvB,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACtC,mEAAmE;gBACnE,gEAAgE;gBAChE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5D,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;oBAClC,IAAI,CAAC,aAAa,CAAC;wBACjB,MAAM,EAAE,EAAE;wBACV,MAAM,EAAE,iCAAiC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,YAAY;wBAC5F,UAAU,EAAE,CAAC;wBACb,OAAO,EAAE,IAAI;qBACd,CAAC,CAAC;oBACH,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAChC,CAAC,EAAE,eAAe,CAAC,CAAC;YACtB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAEzB,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,MAAM;gBACV,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACvE,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;aAC1D,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAc;QAClB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,aAAa,CAAC;YACjB,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,2BAA2B,MAAM,EAAE;YAC3C,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,aAAa,CAAC;gBACjB,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,gCAAgC;gBACxC,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,4EAA4E;IAEpE,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACxD,aAAa,CAAC,WAAW,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE;YAClD,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAEnB,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,+DAA+D;YAC/D,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,sEAAsE;YACtE,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,2BAA2B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;YACpC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,aAAa,CAAC;oBACjB,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,4CAA4C,QAAQ,YAAY,MAAM,IAAI,MAAM,GAAG;oBAC3F,UAAU,EAAE,CAAC;oBACb,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAExD,IAAI,CAAC,UAAU,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtD,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,EAAE,CAAC;gBACV,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE;gBAC7B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC,CAAC;YACtE,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC1B,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC1B,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC,CAAC;YACF,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;YAC7B,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,aAAa,GAAwB,IAAI,CAAC;IAE1C,UAAU,CAAC,IAAY;QAC7B,IAAI,GAAwH,CAAC;QAC7H,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,+BAA+B,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,QAAQ,GAAG,CAAC,EAAE,EAAE,CAAC;YACf,KAAK,OAAO;gBACV,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;gBACvB,OAAO;YAET,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC;gBAC1B,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;oBAAE,OAAO;gBACjC,MAAM,IAAI,GACR,GAAG,CAAC,IAAI,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBAClE,CAAC,CAAE,GAAG,CAAC,IAAgC;oBACvC,CAAC,CAAC,EAAE,CAAC;gBACT,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC;qBAC5B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;qBAC5E,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBACf,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACvD,CAAC,CAAC,CAAC;gBACL,OAAO;YACT,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;oBAC/C,IAAI,CAAC,aAAa,CAAC;wBACjB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;wBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;wBACxB,UAAU,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;qBACtE,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO;YACT,CAAC;YAED;gBACE,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,MAAkB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO;QACxC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,IAAI,OAAO,CAAC,aAAa;YAAE,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAEO,IAAI,CAAC,GAAY;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO;QAC9D,IAAI,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CACX,SAAS,IAAI,CAAC,KAAK,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oEAAoE;IAC5D,OAAO,CAAC,MAAc;QAC5B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,oCAAoC,MAAM,GAAG,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,EAAE,CAAC;IACxB,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC1B,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,CAAC;gBACH,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACP,kCAAkC;YACpC,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnD,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACvB,oEAAoE;QACpE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC3B,CAAC;IAEO,cAAc;QACpB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAmB,EACnB,MAAiC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAExD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,gBAAgB,QAAQ,eAAe,MAAM,oCAAoC,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,gBAAgB,QAAQ,2BAA2B,MAAM,oBAAoB,QAAQ,GAAG,CAAC,CAAC;YAC9F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/code-execution/runtime-py.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Python runtime for client-side programmatic tool calling (PTC).
+ *
+ * This is the interpreter-side half of the `code_execution` tool: a small
+ * asyncio REPL that mimics the environment Anthropic's server-side PTC was
+ * trained on (see docs/en/agents-and-tools/tool-use/programmatic-tool-calling):
+ *
+ *   - scripts run with top-level `await` (PyCF_ALLOW_TOP_LEVEL_AWAIT)
+ *   - host tools are injected as async functions taking a single dict and
+ *     returning a string (the tool_result text)
+ *   - a pending tool call that gets no response raises TimeoutError with the
+ *     same message shape the managed runtime produces
+ *   - interpreter globals persist across execs (container-reuse semantics)
+ *
+ * Embedded as a TS string because tsc does not copy non-TS assets to dist/;
+ * PyRunner materializes it to a temp file at spawn.
+ *
+ * Protocol (JSON lines):
+ *   host -> py : {op:"init", tools:[{py_name,tool_name}], call_timeout_s}
+ *                {op:"exec", id, code}
+ *                {op:"tool_result", id, result}
+ *                {op:"cancel", id, reason?}
+ *   py -> host : {op:"ready"}
+ *                {op:"tool_call", id, exec_id, name, args}
+ *                {op:"exec_result", id, stdout, stderr, return_code}
+ *
+ * IMPORTANT: the python source below must not contain backticks or the
+ * sequence dollar+brace (TS template literal syntax). String.raw preserves
+ * backslashes, so \n inside python string literals is fine.
+ */
+export declare const PYTHON_RUNTIME_SOURCE: string;
+//# sourceMappingURL=runtime-py.d.ts.map

package/dist/src/code-execution/runtime-py.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-py.d.ts","sourceRoot":"","sources":["../../../src/code-execution/runtime-py.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,eAAO,MAAM,qBAAqB,EAAE,MAyOnC,CAAC"}

package/dist/src/code-execution/runtime-py.js

@@ -0,0 +1,265 @@
+/**
+ * Python runtime for client-side programmatic tool calling (PTC).
+ *
+ * This is the interpreter-side half of the `code_execution` tool: a small
+ * asyncio REPL that mimics the environment Anthropic's server-side PTC was
+ * trained on (see docs/en/agents-and-tools/tool-use/programmatic-tool-calling):
+ *
+ *   - scripts run with top-level `await` (PyCF_ALLOW_TOP_LEVEL_AWAIT)
+ *   - host tools are injected as async functions taking a single dict and
+ *     returning a string (the tool_result text)
+ *   - a pending tool call that gets no response raises TimeoutError with the
+ *     same message shape the managed runtime produces
+ *   - interpreter globals persist across execs (container-reuse semantics)
+ *
+ * Embedded as a TS string because tsc does not copy non-TS assets to dist/;
+ * PyRunner materializes it to a temp file at spawn.
+ *
+ * Protocol (JSON lines):
+ *   host -> py : {op:"init", tools:[{py_name,tool_name}], call_timeout_s}
+ *                {op:"exec", id, code}
+ *                {op:"tool_result", id, result}
+ *                {op:"cancel", id, reason?}
+ *   py -> host : {op:"ready"}
+ *                {op:"tool_call", id, exec_id, name, args}
+ *                {op:"exec_result", id, stdout, stderr, return_code}
+ *
+ * IMPORTANT: the python source below must not contain backticks or the
+ * sequence dollar+brace (TS template literal syntax). String.raw preserves
+ * backslashes, so \n inside python string literals is fine.
+ */
+export const PYTHON_RUNTIME_SOURCE = String.raw `
+import ast
+import asyncio
+import inspect
+import io
+import json
+import sys
+import threading
+import traceback
+
+PROTO_OUT = sys.stdout          # protocol channel (real stdout)
+REAL_STDERR = sys.stderr        # runtime diagnostics outside execs
+CALL_TIMEOUT_S = 270.0
+OUTPUT_CAP_CHARS = 2_000_000
+
+_send_lock = threading.Lock()
+
+
+def send(obj):
+    line = json.dumps(obj, ensure_ascii=False, default=str)
+    with _send_lock:
+        PROTO_OUT.write(line + "\n")
+        PROTO_OUT.flush()
+
+
+class CappedIO(io.StringIO):
+    """StringIO that stops recording past a cap (keeps a truncation flag)."""
+
+    def __init__(self, cap):
+        super().__init__()
+        self._cap = cap
+        self.truncated = False
+
+    def write(self, s):
+        if not isinstance(s, str):
+            s = str(s)
+        if self.tell() >= self._cap:
+            self.truncated = True
+            return len(s)
+        remaining = self._cap - self.tell()
+        if len(s) > remaining:
+            self.truncated = True
+            return super().write(s[:remaining])
+        return super().write(s)
+
+
+# Persistent interpreter state (mirrors container reuse: variables survive
+# between exec calls until the host reclaims the interpreter).
+SCRIPT_GLOBALS = {"__name__": "__main__", "__builtins__": __builtins__}
+_injected_py_names = set()
+
+_pending_tool_futures = {}
+_next_tool_call_id = 0
+_current_exec_id = None
+_current_exec_task = None
+
+
+def _make_tool_fn(tool_name, py_name):
+    async def tool_fn(args=None):
+        global _next_tool_call_id
+        if args is None:
+            args = {}
+        if not isinstance(args, dict):
+            raise TypeError(
+                "tool functions take a single dict of arguments, e.g. await "
+                + py_name + "({...})"
+            )
+        _next_tool_call_id += 1
+        call_id = "t" + str(_next_tool_call_id)
+        fut = asyncio.get_running_loop().create_future()
+        _pending_tool_futures[call_id] = fut
+        send({
+            "op": "tool_call",
+            "id": call_id,
+            "exec_id": _current_exec_id,
+            "name": tool_name,
+            "args": args,
+        })
+        try:
+            return await asyncio.wait_for(fut, timeout=CALL_TIMEOUT_S)
+        except asyncio.TimeoutError:
+            raise TimeoutError(
+                "Calling tool ['" + tool_name + "'] timed out (no response after "
+                + str(int(CALL_TIMEOUT_S)) + "s)."
+            )
+        finally:
+            _pending_tool_futures.pop(call_id, None)
+
+    tool_fn.__name__ = py_name
+    tool_fn.__qualname__ = py_name
+    tool_fn.__doc__ = (
+        "Host tool '" + tool_name + "'. Takes a single dict of arguments and "
+        "returns the tool result as a string."
+    )
+    return tool_fn
+
+
+def handle_init(msg):
+    global CALL_TIMEOUT_S
+    timeout = msg.get("call_timeout_s")
+    if isinstance(timeout, (int, float)) and timeout > 0:
+        CALL_TIMEOUT_S = float(timeout)
+
+    # Remove functions injected by a previous init that are no longer present
+    # (tool list changed) without touching user-defined globals.
+    new_tools = msg.get("tools") or []
+    new_py_names = set()
+    tools_dict = {}
+    for entry in new_tools:
+        py_name = entry.get("py_name")
+        tool_name = entry.get("tool_name")
+        if not py_name or not tool_name:
+            continue
+        fn = _make_tool_fn(tool_name, py_name)
+        SCRIPT_GLOBALS[py_name] = fn
+        tools_dict[tool_name] = fn
+        new_py_names.add(py_name)
+    for stale in _injected_py_names - new_py_names:
+        SCRIPT_GLOBALS.pop(stale, None)
+    _injected_py_names.clear()
+    _injected_py_names.update(new_py_names)
+    # Exact-name escape hatch: tools["mcpl--server--tool"]({...})
+    SCRIPT_GLOBALS["tools"] = tools_dict
+
+
+async def _run_script(exec_id, code):
+    global _current_exec_id, _current_exec_task
+    out = CappedIO(OUTPUT_CAP_CHARS)
+    err = CappedIO(OUTPUT_CAP_CHARS)
+    old_out, old_err, old_in = sys.stdout, sys.stderr, sys.stdin
+    sys.stdout, sys.stderr = out, err
+    sys.stdin = io.StringIO("")  # input() must not steal the protocol channel
+    return_code = 0
+    try:
+        compiled = compile(code, "<script>", "exec", flags=ast.PyCF_ALLOW_TOP_LEVEL_AWAIT)
+        result = eval(compiled, SCRIPT_GLOBALS)
+        if inspect.iscoroutine(result):
+            await result
+    except asyncio.CancelledError:
+        err.write("\nKeyboardInterrupt: script cancelled by host\n")
+        return_code = 1
+    except BaseException:
+        traceback.print_exc(file=err)
+        return_code = 1
+    finally:
+        sys.stdout, sys.stderr, sys.stdin = old_out, old_err, old_in
+        _current_exec_id = None
+        _current_exec_task = None
+        # Fail any tool futures still pending: their exec is gone.
+        for fut in list(_pending_tool_futures.values()):
+            if not fut.done():
+                fut.cancel()
+        _pending_tool_futures.clear()
+
+    stdout_text = out.getvalue()
+    if out.truncated:
+        stdout_text += "\n[stdout truncated at " + str(OUTPUT_CAP_CHARS) + " chars]"
+    stderr_text = err.getvalue()
+    if err.truncated:
+        stderr_text += "\n[stderr truncated at " + str(OUTPUT_CAP_CHARS) + " chars]"
+    send({
+        "op": "exec_result",
+        "id": exec_id,
+        "stdout": stdout_text,
+        "stderr": stderr_text,
+        "return_code": return_code,
+    })
+
+
+async def main():
+    global _current_exec_id, _current_exec_task
+    loop = asyncio.get_running_loop()
+    queue = asyncio.Queue()
+
+    def reader():
+        for raw_line in sys.stdin:
+            loop.call_soon_threadsafe(queue.put_nowait, raw_line)
+        loop.call_soon_threadsafe(queue.put_nowait, None)
+
+    threading.Thread(target=reader, daemon=True).start()
+    send({"op": "ready"})
+
+    while True:
+        line = await queue.get()
+        if line is None:
+            break
+        line = line.strip()
+        if not line:
+            continue
+        try:
+            msg = json.loads(line)
+        except Exception:
+            REAL_STDERR.write("[pytc-runtime] bad protocol line\n")
+            REAL_STDERR.flush()
+            continue
+        op = msg.get("op")
+        if op == "init":
+            handle_init(msg)
+        elif op == "exec":
+            if _current_exec_task is not None and not _current_exec_task.done():
+                send({
+                    "op": "exec_result",
+                    "id": msg.get("id"),
+                    "stdout": "",
+                    "stderr": "RuntimeError: another script is already running in this interpreter",
+                    "return_code": 1,
+                })
+                continue
+            _current_exec_id = msg.get("id")
+            _current_exec_task = asyncio.ensure_future(
+                _run_script(msg.get("id"), msg.get("code") or "")
+            )
+        elif op == "tool_result":
+            fut = _pending_tool_futures.get(msg.get("id"))
+            if fut is not None and not fut.done():
+                fut.set_result(str(msg.get("result", "")))
+        elif op == "cancel":
+            if _current_exec_task is not None and not _current_exec_task.done():
+                _current_exec_task.cancel()
+        elif op == "exit":
+            break
+
+    # Drain: give a cancelled exec a moment to emit its exec_result.
+    if _current_exec_task is not None and not _current_exec_task.done():
+        _current_exec_task.cancel()
+        try:
+            await asyncio.wait_for(_current_exec_task, timeout=2)
+        except BaseException:
+            pass
+
+
+if __name__ == "__main__":
+    asyncio.run(main())
+`;
+//# sourceMappingURL=runtime-py.js.map

package/dist/src/code-execution/runtime-py.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-py.js","sourceRoot":"","sources":["../../../src/code-execution/runtime-py.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAW,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyOtD,CAAC"}

package/dist/src/code-execution/tool-definition.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Synthesized `code_execution` tool definition.
+ *
+ * The name, input shape ({code}), and description framing deliberately track
+ * Anthropic's server-side programmatic tool calling so models' trained
+ * priors transfer: python scripts, tools as async functions taking a single
+ * dict and returning a string, stdout as the return channel, persistent
+ * interpreter state, asyncio.gather for fan-out.
+ */
+import type { ToolDefinition } from '../types/index.js';
+export declare const CODE_EXECUTION_TOOL_NAME = "code_execution";
+export declare function buildCodeExecutionToolDefinition(opts?: {
+    idleReclaimMs?: number;
+    toolCallTimeoutMs?: number;
+}): ToolDefinition;
+//# sourceMappingURL=tool-definition.d.ts.map

package/dist/src/code-execution/tool-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-definition.d.ts","sourceRoot":"","sources":["../../../src/code-execution/tool-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,eAAO,MAAM,wBAAwB,mBAAmB,CAAC;AAEzD,wBAAgB,gCAAgC,CAAC,IAAI,CAAC,EAAE;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,cAAc,CAkCjB"}

package/dist/src/code-execution/tool-definition.js

@@ -0,0 +1,45 @@
+/**
+ * Synthesized `code_execution` tool definition.
+ *
+ * The name, input shape ({code}), and description framing deliberately track
+ * Anthropic's server-side programmatic tool calling so models' trained
+ * priors transfer: python scripts, tools as async functions taking a single
+ * dict and returning a string, stdout as the return channel, persistent
+ * interpreter state, asyncio.gather for fan-out.
+ */
+export const CODE_EXECUTION_TOOL_NAME = 'code_execution';
+export function buildCodeExecutionToolDefinition(opts) {
+    const idleMinutes = Math.max(1, Math.round((opts?.idleReclaimMs ?? 300_000) / 60_000));
+    const callTimeoutSeconds = Math.round((opts?.toolCallTimeoutMs ?? 270_000) / 1000);
+    return {
+        name: CODE_EXECUTION_TOOL_NAME,
+        description: 'Run Python code that can call your other tools programmatically. ' +
+            'Every tool you have is available inside the script as an async Python function: ' +
+            "the function name is the tool name with '--' replaced by '__' " +
+            "(e.g. tool 'mcpl--discord--fetch_history' is the function mcpl__discord__fetch_history). " +
+            'Each function takes a single dict of arguments and returns a string — the same text ' +
+            'the tool would have returned to you directly; parse structured results with json.loads. ' +
+            "An exact-name lookup dict is also available: tools['mcpl--discord--fetch_history']({...}). " +
+            'Use top-level await; run independent calls in parallel with asyncio.gather. ' +
+            'Only what you print() (plus stderr and the exit code) comes back to you — intermediate ' +
+            'tool results stay in the script, so filter or aggregate large data there and print only ' +
+            'what you need. Interpreter state (variables, imports) persists across code_execution ' +
+            `calls but is reclaimed after ~${idleMinutes} minutes idle. A tool call that receives no ` +
+            `response within ~${callTimeoutSeconds}s raises TimeoutError inside the script. ` +
+            'Use this when fanning out across many items, looping over tool calls, or when tool ' +
+            'results are large and you only need a slice or summary. Call tools directly (not via ' +
+            'code) when a single call answers the question or when you need to reason about each ' +
+            'result before deciding the next step.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                code: {
+                    type: 'string',
+                    description: 'Python code to execute. Top-level await is allowed.',
+                },
+            },
+            required: ['code'],
+        },
+    };
+}
+//# sourceMappingURL=tool-definition.js.map

package/dist/src/code-execution/tool-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-definition.js","sourceRoot":"","sources":["../../../src/code-execution/tool-definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AAEzD,MAAM,UAAU,gCAAgC,CAAC,IAGhD;IACC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,aAAa,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IACvF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,iBAAiB,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACnF,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EACT,mEAAmE;YACnE,kFAAkF;YAClF,gEAAgE;YAChE,2FAA2F;YAC3F,sFAAsF;YACtF,0FAA0F;YAC1F,6FAA6F;YAC7F,8EAA8E;YAC9E,yFAAyF;YACzF,0FAA0F;YAC1F,uFAAuF;YACvF,iCAAiC,WAAW,8CAA8C;YAC1F,oBAAoB,kBAAkB,2CAA2C;YACjF,qFAAqF;YACrF,uFAAuF;YACvF,sFAAsF;YACtF,uCAAuC;QACzC,WAAW,EAAE;YACX,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qDAAqD;iBACnE;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,CAAC;SACnB;KACF,CAAC;AACJ,CAAC"}

package/dist/src/framework.d.ts

@@ -1,6 +1,7 @@
 import { JsStore } from '@animalabs/chronicle';
 import type { Membrane, NormalizedRequest } from '@animalabs/membrane';
 import { ContextManager } from '@animalabs/context-manager';
+import type { TokenBudget } from '@animalabs/context-manager';
 import type { FrameworkConfig, TraceEventListener, InferenceLogQuery, InferenceLogQueryResult, InferenceLogEntryWithId, ProcessLogQuery, ProcessLogQueryResult, ProcessLogEntryWithId, ProcessEvent, ToolCall, ToolResult, AgentConfig, Module, ContextMaintenanceSnapshot, AgentRuntimeSettingsPatch, AgentRuntimeSettingsSnapshot } from './types/index.js';
 import { Agent } from './agent.js';
 import { ChannelRegistry } from './mcpl/channel-registry.js';
@@ -44,20 +45,36 @@ export declare class AgentFramework {
     private processLoggingPersist;
     private processLoggingBroadcast;
     private activeStreams;
-    /** Per-agent output locus pinned for the CURRENT logical turn (see
-     *  resolveTurnLocus in driveStream). Lives here — not in driveStream
-     *  locals — so the pin survives a context-budget stream restart, which
-     *  continues the same logical turn in a fresh driveStream. A mid-turn
-     *  injected channel message replaces the pin for the next conversational
-     *  round; otherwise it remains stable. Cleared at the start of every
-     *  non-restart turn. */
+    /** Per-agent output locus FROZEN for the CURRENT logical turn. Resolved
+     *  eagerly in startAgentStream (home → addressed trigger → global default)
+     *  and never moved until the next turn: mid-turn injected messages — ambient
+     *  chatter, reactions, system markers — must not hijack where the agent's
+     *  plain prose lands (2026-07-21 Cairn lounge misroute). Lives here — not in
+     *  driveStream locals — so the pin survives a context-budget stream restart,
+     *  which continues the same logical turn in a fresh driveStream. Cleared or
+     *  re-set at the start of every non-restart turn. */
     private turnLocusPins;
-    /** A tool boundary injected fresh external input into the live stream.
-     *  Presence (including a null value) tells driveStream to clear sticky
-     *  explicit-send suppression before handling the next model round. A
-     *  string also moves that round's reply locus to the newest injected
-     *  channel. */
-    private midTurnRoutingResets;
+    /** A tool boundary injected fresh CONVERSATIONAL input (a real message —
+     *  not a reaction or a system marker) into the live stream. Tells
+     *  driveStream to clear sticky explicit-send suppression before handling
+     *  the next model round. Never affects routing: the turn locus is frozen. */
+    private midTurnInputSignals;
+    /** Last outbound locus announced to each agent as a durable `[routing]`
+     *  window message. Announce-on-change only: steady state emits nothing
+     *  (KV-safe, no per-turn chatter). In-memory — after a process restart the
+     *  first turn's locus is announced once to re-establish the baseline. */
+    private lastAnnouncedLocus;
+    /** Latest bounced (undelivered) prose per agent — the `{{unsent}}` source. */
+    private proseClipboards;
+    /** Sticky per-TURN delivery target set by the turn's first `>>` prefix.
+     *  Cleared at every non-restart turn start; survives context restarts. */
+    private proseTargetPins;
+    /** Agents whose current turn requested `!` continuation — re-woken when the
+     *  turn completes instead of pausing until the next external event. */
+    private proseContinuations;
+    /** Consecutive bounce-wakes per agent; capped so an agent that keeps
+     *  emitting unprefixed prose can't wake-loop (notices still append). */
+    private proseBounceStreaks;
     private pendingAssistantBlocks;
     /** Streams the FRAMEWORK cancelled for non-terminal reasons, keyed
      *  `${agentName}:${streamId}`: an endTurn tool result or a context-budget
@@ -143,6 +160,13 @@ export declare class AgentFramework {
     /** Forks whose TTL closure turn has been queued — disposed (removed from
      * agents/agentConfigs/conversationAgentHomes) when their stream ends. */
     private closingConversationAgents;
+    private codeExecutionConfig;
+    private codeExecutionRunners;
+    private scriptToolWaiters;
+    /** Agents whose running script hit an endTurn-carrying inner result —
+     *  deferred and applied to the final code_execution result instead of
+     *  cancelling the stream mid-script (which would wedge the turn). */
+    private scriptDeferredEndTurn;
     private mcplTools;
     private mcplToolRefreshInFlight;
     private mcplToolRefreshPending;
@@ -263,8 +287,36 @@ export declare class AgentFramework {
     private buildAgentSettingsTool;
     private getToolsForAgent;
     getAgentRuntimeSettings(agentName: string): AgentRuntimeSettingsSnapshot;
-    updateAgentRuntimeSettings(agentName: string, patch: AgentRuntimeSettingsPatch): AgentRuntimeSettingsSnapshot;
-    resetAgentRuntimeSettings(agentName: string, keys?: Array<keyof AgentRuntimeSettingsPatch>): AgentRuntimeSettingsSnapshot;
+    /**
+     * Apply runtime settings.
+     *
+     * `opts.persist: false` makes the change EPHEMERAL: it takes effect live but
+     * is not written to the `framework/state` slot, so a restart reverts it. That
+     * is the mode for operator experiments ("change it, watch, revert") — the
+     * default persists, because a durable operational change should survive a
+     * bounce like every other override.
+     *
+     * Nothing here notifies the agent. Discovery is deliberately PULL: the agent
+     * can read current settings any time via the `agent_settings` tool's `get`
+     * action, which costs no context perturbation. Pushing a notice injects text
+     * into the very context being tuned — it invalidates the KV prefix and can
+     * itself trip a classifier — so callers opt into that explicitly rather than
+     * getting it by default.
+     *
+     * KNOWN LIMITATION of `persist: false`: the change still lands in the agent's
+     * in-memory override map, and `persistAgentRuntimeSettings` writes that whole
+     * map. So a LATER persisting call promotes any still-live ephemeral change to
+     * durable as a side effect. Ephemeral means "not written by THIS call", not
+     * "can never be written". Reset the ephemeral key before persisting something
+     * else if that matters. Making it airtight needs per-key ephemeral tracking
+     * inside Agent.
+     */
+    updateAgentRuntimeSettings(agentName: string, patch: AgentRuntimeSettingsPatch, opts?: {
+        persist?: boolean;
+    }): AgentRuntimeSettingsSnapshot;
+    resetAgentRuntimeSettings(agentName: string, keys?: Array<keyof AgentRuntimeSettingsPatch>, opts?: {
+        persist?: boolean;
+    }): AgentRuntimeSettingsSnapshot;
     cancelAgentRuntimeSettingsTransition(agentName: string): AgentRuntimeSettingsSnapshot;
     /** Counts-only context-maintenance diagnostics for authenticated debug UIs. */
     getContextMaintenanceSnapshot(): ContextMaintenanceSnapshot;
@@ -295,7 +347,24 @@ export declare class AgentFramework {
      */
     previewActivation(agentName: string, opts?: {
         injections?: boolean;
+        budget?: TokenBudget;
     }): Promise<NormalizedRequest>;
+    /**
+     * Non-committing preview of the FOLD PLAN at a hypothetical budget and/or
+     * context settings — the numbers behind an operator's "what happens if I set
+     * the budget to X" before they apply it.
+     *
+     * Unlike `previewActivation` (which renders a request), this returns the
+     * picker's plan: resulting tokens, whether it fits, how many summaries would
+     * have to be produced first, and the per-chunk fold levels. Commits nothing:
+     * no resolution persistence, no compression enqueue, no transition
+     * bookkeeping — see `AutobiographicalStrategy.previewContext`.
+     *
+     * Returns null when the agent's strategy has no fold plan (non-adaptive).
+     */
+    previewContextSettings(agentName: string, budgetTokens: number, overrides?: Record<string, unknown>, opts?: {
+        render?: boolean;
+    }): unknown;
     /**
      * Check if process logging is enabled.
      */
@@ -639,6 +708,46 @@ export declare class AgentFramework {
      */
     private derivePushEventChannel;
     private processInferenceRequests;
+    /**
+     * Announce-on-change locus notice (turn-frozen routing). Appends a durable
+     * `[routing]` window message when the turn's effective outbound locus
+     * differs from the last one announced — the agent must never have to guess
+     * where its plain prose lands. Durable append (never retracted) keeps the
+     * KV prefix stable; change-only keeps it out of steady-state turns. The
+     * first resolution after boot announces only a non-null locus ("prose has
+     * no destination" is the unremarkable boot default). Never triggers
+     * inference; never locus-eligible itself (system + no channel metadata).
+     */
+    private announceLocusIfChanged;
+    /**
+     * Durable window notice for a channel the agent did not ask to open —
+     * subscription-policy admission, or an open forced by the agent's own
+     * delivery into a closed channel. The agent must always learn that new
+     * traffic will start flowing, and that `channel_close` opts out (their
+     * decision outranks policy). System message: never triggers inference,
+     * never conversational, never locus-eligible.
+     */
+    private recordChannelAutoOpenNotice;
+    /**
+     * Explicit-prose-routing delivery gateway (docs/explicit-prose-routing.md).
+     * Every prose segment of an `explicit`-mode agent flows through here:
+     * parse the `>>` prefix, resolve the target, deliver — or bounce to the
+     * clipboard with a resend notice. Misdelivery is structurally impossible:
+     * nothing is ever sent to a destination the model did not name (directly
+     * or via the turn's sticky target).
+     */
+    private deliverProse;
+    private deliverProseEnvelope;
+    /** Cap on consecutive bounce-triggered wakes (notices still append after). */
+    private static readonly PROSE_BOUNCE_WAKE_CAP;
+    private bounceProse;
+    /**
+     * One-time mode primer (docs/explicit-prose-routing.md): when an agent's
+     * configured proseRouting differs from the last mode we primed them for,
+     * append the teaching notice and persist the new mode. A brand-new agent
+     * in default locus mode is recorded silently — no primer for the status quo.
+     */
+    private maybePrimeProseMode;
     private startAgentStream;
     private driveStream;
     /**
@@ -648,6 +757,39 @@ export declare class AgentFramework {
      */
     executeToolCall(call: ToolCall): Promise<ToolResult>;
     private executeMcplToolCall;
+    /** Event-pushing wrapper for the model-driven dispatch path. */
+    private dispatchCodeExecutionToolCall;
+    /**
+     * Run one code_execution script for an agent. Never rejects.
+     *
+     * The script runs in the agent's persistent python interpreter with every
+     * tool on the agent's CURRENT surface injected (minus code_execution
+     * itself). Inner tool calls are dispatched through dispatchToolCall — the
+     * exact model path, including MCPL state/checkpoint handling, channel
+     * routing, and traces — and resolved via scriptToolWaiters, so their
+     * results reach the running script and never the model context.
+     */
+    private runCodeExecution;
+    private getOrCreateScriptRunner;
+    /**
+     * Resolve one script-inner tool call to the string the script's tool
+     * function returns. Never rejects — errors become "Error: ..." strings,
+     * matching the managed PTC runtime ("Claude's code receives this error").
+     *
+     * Results are serialized with the HISTORY serializer (images become
+     * placeholders): programmatic tool results are text-only by contract, and
+     * a script variable holding megabytes of base64 helps nobody.
+     */
+    private handleScriptToolCall;
+    /**
+     * Dispatch a script-inner tool call through the NORMAL dispatch path and
+     * resolve with its result. The waiter intercept in handleProcessEvent
+     * (keyed by the pytc- call ID) routes the tool-result event here instead
+     * of into the agent's pending tool round.
+     */
+    private dispatchScriptToolCall;
+    /** Abort a running script when the agent's turn dies underneath it. */
+    private abortAgentScript;
     private toMembraneToolResult;
     /**
      * If `data` is an MCP tool-result content array carrying at least one image,