@arnilo/prism 0.4.0 → 0.5.0

package/dist/agent-session/session.js

@@ -1,53 +1,20 @@
 /** session (0.2.5 plan 025 Task 1 split). Moved verbatim from agent-session.ts; public surface unchanged behind the barrel. */
-import { AgentRunSuspended, decisionIdentityRef, decisionScopesEqual, nestedApprovalId, nestedOutcomeToolResult, pathsEqual, } from "../agent-approval.js";
-import { resolveLoop, resolveToolConcurrency } from "../agent-loops.js";
-import { boundedLoopSnapshot, initialAgentRunState, publicState, saveAgentRunState, validateRunStateOptions } from "../agent-run-state.js";
-import { activeTools, policyList, toolElicitationRequest } from "../agent-tool-dispatch.js";
+import { policyList } from "../agent-tool-dispatch.js";
 import { createDefaultCompactionStrategy, isCompactionEntryData } from "../compaction.js";
-import { AgentDecisionError, AgentDelegationSuspendedError, AgentLoopStateError, AgentRunError, AgentRunStateError, DEFAULT_MAX_PENDING_DECISIONS, DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS, HARD_MAX_PENDING_DECISIONS, MAX_ATTRIBUTION_DEPTH, } from "../contracts.js";
-import { assertGuardrailsAllowed, GuardrailError, runGuardrails } from "../guardrails.js";
-import { identityTelemetryAttributes, ownershipFromIdentity, resolveRunIdentity } from "../identity.js";
-import { assembleProviderInput } from "../input.js";
-import { createProviderTurnMetadata, readProviderHttpStatus } from "../observability.js";
-import { providerToolCallDeltaContent } from "../provider-events.js";
+import { DEFAULT_MAX_PENDING_STEER_BYTES, DEFAULT_MAX_PENDING_STEERS } from "../contracts.js";
+import { GuardrailError, runGuardrails } from "../guardrails.js";
 import { createProviderRequestPolicyChain, normalizeProviderRequestPolicyResult } from "../provider-request-policy.js";
-import { errorToErrorInfo, redactAgentEvent, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry, } from "../redaction.js";
-import { createDefaultRetryPolicy, waitForRetry } from "../retry.js";
-import { isFlushableRunLedger } from "../run-ledger.js";
-import { RunLimitError, RunLimitTracker, resolveRunLimits } from "../run-limits.js";
+import { redactAgentEvent, redactProviderRequest, redactRunLedgerRecord, redactSecrets, redactSessionEntry } from "../redaction.js";
 import { createMemorySessionStore, createSessionEntry, getSessionBranchEntries, rebuildSessionContext } from "../session-stores.js";
-import { createLoadedSkillSet, resolveSkillsDisclosure } from "../skill-disclosure.js";
-import { applyRestoredSkillBodies, snapshotLoadedSkillBodies, validateLoadedSkillBodies } from "../skill-load.js";
+import { createLoadedSkillSet } from "../skill-disclosure.js";
+import { validateLoadedSkillBodies } from "../skill-load.js";
 import { resolveActiveSkills } from "../skills.js";
-import { assertStructuredOutputRequestSupported, resolveRunProviderOptions } from "../structured-output.js";
-import { composeSystemPrompt, mergeSystemPromptConfig } from "../system-prompts.js";
-import { canonicalToolEffectJson, toolEffectArgumentsHash } from "../tool-effects.js";
-import { resolveToolResultFold } from "../tool-result-fold.js";
-import { createActiveToolSet, createSearchToolsTool, createToolSearchState, resolveToolsDisclosure } from "../tool-search.js";
-import { createToolRegistry, dispatchToolCall, resolveToolEffectDeclaration } from "../tools.js";
+import { createActiveToolSet } from "../tool-search.js";
 import { createAgentSession } from "./create-agent.js";
 import { EventSubscriber } from "./event-subscriber.js";
-import { bridgeAbort, createUsageAccumulator, errorFromInfo, finalAssistantMessage, inputToMessages, isDurableLoop, isSteerSoftInterrupt, jsonBytes, mergeCompaction, mergeGuardrails, mergeRetry, messageTextBytes, ProviderTurnFailure, providerContent, randomId, reconstructMissingToolCalls, SteerSoftInterrupt, throwIfAborted, throwIfAbortedSignal, withoutTrailingInput, } from "./helpers.js";
-const PROMPT_VERSION_MAX_NAME_BYTES = 256;
-const PROMPT_VERSION_HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
-/** Plan 042: validate the opaque provenance ref fail-closed before any session mutation. */
-function assertPromptVersionRef(ref) {
-    if (ref === undefined)
-        return undefined;
-    if (typeof ref !== "object" || ref === null)
-        throw new TypeError("RunOptions.promptVersion must be a PromptVersionRef object");
-    const { name, version, hash } = ref;
-    if (typeof name !== "string" || name.length === 0 || Buffer.byteLength(name, "utf8") > PROMPT_VERSION_MAX_NAME_BYTES) {
-        throw new TypeError(`RunOptions.promptVersion.name must be 1-${PROMPT_VERSION_MAX_NAME_BYTES} UTF-8 bytes`);
-    }
-    if (!Number.isInteger(version) || version < 1 || version > 0x7fffffff) {
-        throw new TypeError("RunOptions.promptVersion.version must be an integer in [1, 2147483647]");
-    }
-    if (typeof hash !== "string" || !PROMPT_VERSION_HASH_PATTERN.test(hash)) {
-        throw new TypeError('RunOptions.promptVersion.hash must be "sha256:" plus 64 lowercase hex characters');
-    }
-    return ref;
-}
+import { finalAssistantMessage, inputToMessages, mergeCompaction, messageTextBytes, randomId, SteerSoftInterrupt, throwIfAborted, throwIfAbortedSignal, withoutTrailingInput, } from "./helpers.js";
+import { executeRun } from "./session/assemble.js";
+import { asSessionHost } from "./session/types.js";
 export class RuntimeAgentSession {
     id;
     agent;
@@ -193,813 +160,7 @@ export class RuntimeAgentSession {
         }
     }
     async runInternal(input, options, runId, resumed) {
-        // 0.1.5 breaking cut: the deprecated RunOptions.maxToolRounds alias was removed. Reject
-        // untyped/legacy input fail-closed before any session mutation, provider call, or tool
-        // execution; silently honoring it would widen or mis-apply the intended tool-round cap.
-        const legacyMaxToolRounds = options.maxToolRounds;
-        if (legacyMaxToolRounds !== undefined) {
-            throw new TypeError("RunOptions.maxToolRounds was removed in 0.1.5; use RunOptions.limits.maxToolRounds instead");
-        }
-        const promptVersion = assertPromptVersionRef(options.promptVersion);
-        if (this.agent.config.secure &&
-            (options.redactor !== undefined ||
-                options.ownership !== undefined ||
-                options.validate !== undefined ||
-                options.effectStore !== undefined ||
-                options.runState !== undefined)) {
-            throw new AgentRunStateError("Secure agent defaults cannot be replaced per run");
-        }
-        const requestedLimits = options.limits;
-        const resolvedLimits = resolveRunLimits(this.agent.config.limits, requestedLimits);
-        const durableOptions = options.runState ?? this.agent.config.runState;
-        if (this.agent.config.runState && options.runState && this.agent.config.runState !== options.runState) {
-            throw new AgentRunStateError("RunOptions cannot replace agent durable run-state configuration");
-        }
-        if (durableOptions) {
-            validateRunStateOptions(durableOptions);
-            if (options.model || options.guardrails || options.loop || options.effectStore)
-                throw new AgentRunStateError("Durable runs require model, guardrails, loop, and effect store on AgentConfig for fingerprinting");
-            const configuredLoop = this.agent.config.loop;
-            if (configuredLoop && !isDurableLoop(configuredLoop)) {
-                throw new AgentLoopStateError("ERR_PRISM_LOOP_NOT_DURABLE", "Custom AgentLoopStrategy on a durable run requires snapshot and restore hooks");
-            }
-        }
-        if (this.activeRun) {
-            const error = new Error("Agent session already has an active run");
-            this.emit({ type: "error", sessionId: this.id, runId, error: errorToErrorInfo(error) });
-            throw error;
-        }
-        const controller = new AbortController();
-        const cleanupSignal = bridgeAbort(options.signal, controller);
-        this.activeRun = controller;
-        this.activeRunId = runId;
-        this.pendingSteers = [];
-        this.pendingSteerBytes = 0;
-        this.pendingSoftInterrupt = false;
-        this.activeRedactor = options.redactor ?? this.agent.config.redactor;
-        this.activeLedger = options.runLedger ?? this.agent.config.runLedger;
-        this.activeEffectStore = options.effectStore ?? this.agent.config.effectStore;
-        this.activeOwnership = options.ownership ?? this.agent.config.ownership;
-        this.activeIdentity = resolveRunIdentity(options.identity, this.agent.config.identity, this.activeOwnership);
-        if (this.activeIdentity && !this.activeOwnership)
-            this.activeOwnership = ownershipFromIdentity(this.activeIdentity);
-        this.activeIdempotencyKey = options.idempotencyKey ?? this.agent.config.idempotencyKey;
-        this.activeGuardrails = mergeGuardrails(this.agent.config.guardrails, options.guardrails);
-        this.activeDurable = resumed ?? (durableOptions ? { options: durableOptions, version: 0 } : undefined);
-        this.activeGatedRound = undefined;
-        if (resumed)
-            this.invalidateSnapshot();
-        const model = options.model ?? this.agent.config.model;
-        const startedAt = new Date().toISOString();
-        let runError;
-        let runStatus = "succeeded";
-        const runUsage = createUsageAccumulator();
-        let usage;
-        const metadata = {
-            ...this.agent.config.metadata,
-            ...this.metadata,
-            ...options.metadata,
-            ...(this.activeIdentity ? identityTelemetryAttributes(this.activeIdentity) : {}),
-        };
-        this.activeMetadata = metadata;
-        this.activePromptVersion = promptVersion;
-        const limits = new RunLimitTracker(resolvedLimits, {
-            onExceeded: (breach) => {
-                this.emit({ type: "run_limit_exceeded", sessionId: this.id, runId, breach });
-                controller.abort(new RunLimitError(breach));
-            },
-            snapshot: resumed?.state?.counters,
-            deadlineAt: resumed?.state?.deadlineAt,
-        });
-        this.activeLimits = limits;
-        this.activeLimitOutputBuffer = [this.agent.config.limits, requestedLimits].some((value) => value?.maxOutputTokens !== undefined || value?.maxTotalTokens !== undefined || value?.maxCost !== undefined);
-        try {
-            this.resolveRunProvider(options);
-            throwIfAborted(controller.signal);
-            this.emit({ type: "agent_started", sessionId: this.id, runId });
-            if (resumed)
-                this.emit({ type: "agent_resumed", sessionId: this.id, runId, version: resumed.version });
-            const startRecord = {
-                id: runId,
-                sessionId: this.id,
-                branchId: this.currentLeafId,
-                model,
-                provider: model.provider,
-                idempotencyKey: this.activeIdempotencyKey,
-                status: "running",
-                startedAt,
-                ...(promptVersion ? { promptVersion } : {}),
-                ...this.activeOwnership,
-            };
-            await this.activeLedger?.appendRun(redactRunLedgerRecord(startRecord, this.activeRedactor));
-            await this.rebuildHistory();
-            const { registry: baseRegistry, tools: activeToolList } = activeTools(this.agent.config.tools);
-            const toolsDisclosure = resolveToolsDisclosure(options.toolsDisclosure, this.agent.config.toolsDisclosure);
-            // Search mode: run-local registry copy plus the generated `search_tools` tool; the host
-            // registry is never mutated. Activation names are intersected at disclosure only.
-            const toolSearch = toolsDisclosure === "search" && activeToolList.length > 0
-                ? {
-                    state: createToolSearchState({
-                        tools: activeToolList,
-                        activated: this.activatedTools,
-                        search: this.agent.config.toolsSearch,
-                    }),
-                }
-                : undefined;
-            const searchTool = toolSearch ? createSearchToolsTool(toolSearch.state) : undefined;
-            const registry = searchTool ? createToolRegistry([...activeToolList, searchTool]) : baseRegistry;
-            const tools = searchTool ? [...activeToolList, searchTool] : activeToolList;
-            const activeSkills = this.resolveRunSkills(options, tools);
-            this.activeRunSkills = activeSkills; // for the durable bodies snapshot (plan 018 Task 6)
-            if (options.model && JSON.stringify(options.model) !== JSON.stringify(this.agent.config.model)) {
-                await this.appendEntry(createSessionEntry({
-                    sessionId: this.id,
-                    parentId: this.currentLeafId,
-                    runId,
-                    kind: "model_change",
-                    previousModel: this.agent.config.model,
-                    model: options.model,
-                }));
-            }
-            const inputMessages = inputToMessages(input).map((message) => this.redact(message));
-            const inputGuardrails = await runGuardrails({
-                stage: "input",
-                guardrails: this.activeGuardrails,
-                value: inputMessages,
-                context: { sessionId: this.id, runId, metadata, signal: controller.signal },
-                redactor: this.activeRedactor,
-                emit: (event) => this.emit(event),
-            });
-            // Input-guardrail decision table:
-            // - interrupt + durable + fresh run  → suspend for approval.
-            // - interrupt + durable + resumed run → proceed: resuming IS the operator approval.
-            // - interrupt without durable, or block/tripwire → fail via assertGuardrailsAllowed.
-            const approvedByResume = resumed !== undefined && inputGuardrails.terminal?.action === "interrupt" && this.activeDurable !== undefined;
-            if (inputGuardrails.terminal?.action === "interrupt" && this.activeDurable && !approvedByResume) {
-                const interruption = { kind: "input_guardrail", reason: inputGuardrails.terminal.reason ?? "Input requires approval" };
-                throw new AgentRunSuspended(await this.suspendDurable({ runId, model, limits, interruption, messages: inputMessages }), interruption);
-            }
-            if (inputGuardrails.terminal && !approvedByResume)
-                assertGuardrailsAllowed(inputGuardrails);
-            for (const message of inputMessages)
-                await this.appendMessage(message, runId);
-            await this.autoCompact(runId, options, controller.signal, inputMessages);
-            const maxToolRounds = resolvedLimits.maxToolRounds;
-            const systemInstructions = composeSystemPrompt(mergeSystemPromptConfig(this.agent.config.systemPrompt, options.systemPrompt), {
-                base: this.agent.config.instructions,
-            });
-            const contextProviders = [
-                ...(this.agent.config.context ?? []),
-                // ponytail: skill context after host context; no per-skill token budget yet.
-                ...activeSkills.flatMap((skill) => skill.context ?? []),
-            ];
-            const providerOptions = resolveRunProviderOptions(options, this.agent.config);
-            assertStructuredOutputRequestSupported(options.model ?? this.agent.config.model, providerOptions);
-            const validate = options.validate ?? this.agent.config.validator;
-            // ponytail: RunOptions.instructionInjectors overrides AgentConfig.instructionInjectors (mirrors validate/loop).
-            const instructionInjectors = options.instructionInjectors ?? this.agent.config.instructionInjectors ?? [];
-            const inputLayout = options.inputLayout ?? this.agent.config.inputLayout;
-            const loop = resolveLoop(options, this.agent.config);
-            this.activeLoop = loop;
-            const toolConcurrency = resolveToolConcurrency(options, this.agent.config);
-            this.activeLoopTurn = 1;
-            const recordProviderUsage = async (turnUsage, turn, attempt) => {
-                limits.recordUsage(turnUsage);
-                if (!turnUsage)
-                    return;
-                runUsage.add(turnUsage);
-                if (!this.activeLedger)
-                    return;
-                const usageRecord = {
-                    id: randomId("usage"),
-                    sessionId: this.id,
-                    runId,
-                    scope: "provider_turn",
-                    turn,
-                    attempt,
-                    usage: turnUsage,
-                    recordedAt: new Date().toISOString(),
-                    ...this.activeOwnership,
-                };
-                await this.activeLedger.appendUsage(redactRunLedgerRecord(usageRecord, this.activeRedactor));
-            };
-            // Suspends the run when a round recorded gated calls. Fires at the next provider turn
-            // (generate) or after the loop ends, so ungated round siblings dispatch first.
-            const suspendGatedRound = async () => {
-                const gated = this.activeGatedRound;
-                if (!gated?.size)
-                    return;
-                const entries = [...gated.values()];
-                const decisions = entries.map((gatedCall) => gatedCall.decision);
-                const single = decisions.length === 1 ? decisions[0] : undefined;
-                const interruption = {
-                    kind: single?.kind === "elicitation" ? "elicitation" : "tool_approval",
-                    reason: single ? single.reason : `${decisions.length} tool side effects require approval`,
-                    ...(single?.toolCallId ? { toolCallId: single.toolCallId } : {}),
-                    ...(single?.scope.toolName ? { toolName: single.scope.toolName } : {}),
-                    pendingDecisions: decisions,
-                };
-                throw new AgentRunSuspended(await this.suspendDurable({ runId, model, limits, interruption, pendingCalls: entries.map((gatedCall) => gatedCall.entry) }), interruption);
-            };
-            // Suspends on a nested run's pending decisions, merging any still-ready round entries
-            // (with their decisions attached) so a nested signal mid-replay never drops own work.
-            const suspendNested = async (nested) => {
-                const state = this.activeDurable?.state;
-                const kept = (state?.pendingCalls ?? [])
-                    .filter((entry) => entry.status === "ready")
-                    .map((entry) => {
-                    const decision = entry.decision ?? resumed?.decisions?.get(entry.approvalId);
-                    return decision ? { ...entry, decision } : entry;
-                });
-                const gated = [...(this.activeGatedRound?.values() ?? [])];
-                const pendingCalls = [
-                    ...kept,
-                    ...gated.map((gatedCall) => gatedCall.entry),
-                    { call: nested.toolCall, status: "ready", approvalId: `nr_${nested.entry.runId}` },
-                ];
-                const keptIds = new Set(kept.map((entry) => entry.approvalId));
-                const decisions = [
-                    ...(state?.interruption?.pendingDecisions ?? []).filter((pending) => keptIds.has(pending.approvalId)),
-                    ...gated.map((gatedCall) => gatedCall.decision),
-                    ...nested.pending,
-                ];
-                if (decisions.length > HARD_MAX_PENDING_DECISIONS) {
-                    throw new AgentDecisionError("ERR_PRISM_DECISION_LIMIT", `Pending decisions exceed ${HARD_MAX_PENDING_DECISIONS} per run`);
-                }
-                const single = decisions.length === 1 ? decisions[0] : undefined;
-                const interruption = {
-                    kind: single?.kind ?? "tool_approval",
-                    reason: single ? single.reason : `${decisions.length} approval request(s) need a decision`,
-                    ...(single?.toolCallId ? { toolCallId: single.toolCallId } : {}),
-                    ...(single?.scope.toolName ? { toolName: single.scope.toolName } : {}),
-                    pendingDecisions: decisions,
-                };
-                throw new AgentRunSuspended(await this.suspendDurable({
-                    runId,
-                    model,
-                    limits,
-                    interruption,
-                    pendingCalls,
-                    nestedRuns: [...(state?.nestedRuns ?? []), nested.entry],
-                }), interruption);
-            };
-            // Converts a nested-run suspension into either root-visible pending decisions (hashed,
-            // attributed approval ids) or — when a root sticky covers every surfaced decision and a
-            // hook is available — an immediate child resume loop ending in a synthesized tool result.
-            const applyNestedRun = async (input) => {
-                let current = input.pending;
-                // ponytail: sticky auto-apply only when the whole surfaced set is covered; mixed sets
-                // surface to the host. Hook round-trips capped at 4 per suspension event.
-                for (let depth = 0;; depth += 1) {
-                    const attributed = current.map((decision) => {
-                        const id = nestedApprovalId(input.ref.runId, decision.approvalId);
-                        return {
-                            id,
-                            childApprovalId: decision.approvalId,
-                            decision: { ...decision, approvalId: id, attribution: decision.attribution ?? { path: input.path } },
-                        };
-                    });
-                    if (attributed.some(({ decision }) => (decision.attribution?.path.length ?? 0) > MAX_ATTRIBUTION_DEPTH)) {
-                        throw new AgentDecisionError("ERR_PRISM_DECISION_LIMIT", `Attribution path exceeds ${MAX_ATTRIBUTION_DEPTH} entries`);
-                    }
-                    const allSticky = attributed.length > 0 && attributed.every(({ decision }) => this.matchNestedSticky(decision) !== undefined);
-                    if (!input.hook || !allSticky || depth >= 4) {
-                        return {
-                            entry: {
-                                runId: input.ref.runId,
-                                ...(input.ref.sessionId ? { sessionId: input.ref.sessionId } : {}),
-                                toolCallId: input.toolCall.id,
-                                path: attributed[0]?.decision.attribution?.path ?? input.path,
-                                approvals: attributed.map(({ id, childApprovalId }) => ({ id, childApprovalId })),
-                            },
-                            pending: attributed.map(({ decision }) => decision),
-                        };
-                    }
-                    const outcome = await input.hook({ ref: input.ref, toolCallId: input.toolCall.id, path: input.path }, attributed.map(({ childApprovalId, decision }) => {
-                        const sticky = this.matchNestedSticky(decision);
-                        return {
-                            approvalId: childApprovalId,
-                            outcome: sticky.outcome,
-                            ...(sticky.reason !== undefined ? { reason: sticky.reason } : {}),
-                        };
-                    }));
-                    if (outcome.status === "suspended") {
-                        current = outcome.pendingDecisions;
-                        continue;
-                    }
-                    return { toolResult: nestedOutcomeToolResult(outcome, input.toolCall.id, input.toolCall.name) };
-                }
-            };
-            // ponytail: LoopContext binds existing private helpers; loop orchestrates only.
-            let assembledTurn = false;
-            let artifactFinished = false;
-            let artifactFailedInfo;
-            const ctx = {
-                sessionId: this.id,
-                runId,
-                metadata,
-                signal: controller.signal,
-                history: this.history,
-                input,
-                inputMessages,
-                maxToolRounds,
-                toolConcurrency,
-                restoredLoopState: resumed?.state?.loopState?.snapshot,
-                assemble: async (nextInput, toolResults, turn) => {
-                    limits.charge("maxTurns");
-                    const request = await assembleProviderInput({
-                        model: options.model ?? this.agent.config.model,
-                        input: nextInput,
-                        history: this.history,
-                        summaries: (await this.snapshot()).summaries,
-                        toolResults: toolResults ?? [],
-                        turn,
-                        instructionInjectors,
-                        inputLayout,
-                        systemInstructions,
-                        inputBuilder: this.agent.config.inputBuilder,
-                        promptBuilder: this.agent.config.promptBuilder,
-                        contextProviders,
-                        skills: this.restoredSkillBodies.length ? applyRestoredSkillBodies(activeSkills, this.restoredSkillBodies) : activeSkills,
-                        skillsDisclosure: resolveSkillsDisclosure(options.skillsDisclosure, this.agent.config.skillsDisclosure),
-                        toolsDisclosure,
-                        toolsSearch: this.agent.config.toolsSearch,
-                        activatedTools: this.activatedTools,
-                        toolResultFold: resolveToolResultFold(options.toolResultFold, this.agent.config.toolResultFold),
-                        loadedSkills: this.loadedSkills,
-                        tools,
-                        resourceLoader: this.agent.config.resourceLoader,
-                        permission: this.agent.config.permission,
-                        trust: this.agent.config.trust,
-                        providerOptions,
-                        redactor: this.activeRedactor,
-                        middleware: this.agent.config.middleware,
-                        sessionId: this.id,
-                        runId,
-                        metadata,
-                        signal: controller.signal,
-                    });
-                    assembledTurn = true;
-                    return request;
-                },
-                chargeToolRound: (calls) => {
-                    if (calls.length > 0)
-                        limits.charge("maxToolRounds");
-                    const durable = this.activeDurable;
-                    if (!durable?.options.interruptBeforeTool || calls.length === 0)
-                        return;
-                    // Round-level gate: record one pending decision per uncovered gated call. Ungated
-                    // and sticky-allowed calls still dispatch; the suspension fires at the next provider
-                    // turn (or run end) via suspendGatedRound. Per-call beforeExecute is the backstop
-                    // for loops that dispatch without charging a round.
-                    for (const call of calls) {
-                        if (this.matchStickyDecision(call, registry))
-                            continue;
-                        const approvalId = randomId("approval");
-                        this.activeGatedRound ??= new Map();
-                        this.activeGatedRound.set(call.id, {
-                            entry: { call, status: "ready", approvalId },
-                            decision: this.buildPendingDecision(call, approvalId, registry, runId, metadata, controller.signal),
-                        });
-                    }
-                    if (this.activeGatedRound && this.activeGatedRound.size > DEFAULT_MAX_PENDING_DECISIONS) {
-                        throw new AgentDecisionError("ERR_PRISM_DECISION_LIMIT", `Pending decisions exceed ${DEFAULT_MAX_PENDING_DECISIONS} per run`);
-                    }
-                },
-                generate: async (request) => {
-                    await suspendGatedRound();
-                    if (!assembledTurn)
-                        limits.charge("maxTurns");
-                    assembledTurn = false;
-                    const policyResult = await this.applyProviderRequestPolicies(request, runId, options, metadata, controller.signal);
-                    const middlewareRequest = (await this.agent.config.middleware?.run("provider_request", policyResult.request)) ?? policyResult.request;
-                    try {
-                        return await this.generateWithRetry(this.redactProviderRequest(middlewareRequest), runId, options, controller.signal, policyResult.secrets, this.activeLoopTurn, recordProviderUsage);
-                    }
-                    catch (error) {
-                        if (isSteerSoftInterrupt(error)) {
-                            return { content: [], calls: [], started: false, usage: undefined };
-                        }
-                        throw error;
-                    }
-                },
-                isToolCallExclusive: (call) => registry.get(call.name)?.exclusive === true,
-                dispatchToolCall: async (call) => {
-                    const sticky = this.matchStickyDecision(call, registry);
-                    if (sticky?.outcome === "reject_for_run") {
-                        return {
-                            toolCallId: call.id,
-                            name: call.name,
-                            error: { code: "approval_rejected", message: sticky.reason ?? "Rejected for this run" },
-                        };
-                    }
-                    if (this.activeGatedRound?.has(call.id)) {
-                        // Gated this round: never dispatched. The marker is skipped by
-                        // dispatchToolCallsInOrder so the transcript stays free of phantom results.
-                        return { toolCallId: call.id, name: call.name, metadata: { approvalPending: true } };
-                    }
-                    try {
-                        return await dispatchToolCall({
-                            call,
-                            registry,
-                            context: {
-                                sessionId: this.id,
-                                runId,
-                                toolCallId: call.id,
-                                signal: controller.signal,
-                                metadata: {
-                                    ...metadata,
-                                    loadedSkills: this.loadedSkills,
-                                    activeTools: tools,
-                                    activeSkillNames: activeSkills.map((skill) => skill.name),
-                                },
-                                identity: this.activeIdentity,
-                            },
-                            middleware: this.agent.config.middleware,
-                            emit: (event) => this.emit(event),
-                            permission: this.agent.config.permission,
-                            trust: this.agent.config.trust,
-                            redactor: this.activeRedactor,
-                            ledger: this.activeLedger,
-                            effectStore: this.activeEffectStore,
-                            ownership: this.activeOwnership,
-                            identity: this.activeIdentity,
-                            guardrails: this.activeGuardrails,
-                            limitTracker: limits,
-                            beforeExecute: async (mediatedCall) => {
-                                const durable = this.activeDurable;
-                                if (!durable)
-                                    return;
-                                const pendingCalls = durable.state?.pendingCalls;
-                                const matched = pendingCalls?.find((entry) => entry.call.id === mediatedCall.id && entry.status === "ready");
-                                if (matched) {
-                                    await this.persistDurable({
-                                        ...durable.state,
-                                        status: "running",
-                                        pendingCalls: pendingCalls.map((entry) => (entry === matched ? { ...entry, status: "dispatched" } : entry)),
-                                        interruption: undefined,
-                                    });
-                                    return;
-                                }
-                                const pending = durable.state?.pending;
-                                if (pending?.call.id === mediatedCall.id && pending.status === "ready") {
-                                    await this.persistDurable({
-                                        ...durable.state,
-                                        status: "running",
-                                        pending: { ...pending, status: "dispatched" },
-                                        interruption: undefined,
-                                    });
-                                    return;
-                                }
-                                if (!durable.options.interruptBeforeTool)
-                                    return;
-                                if (this.matchStickyDecision(mediatedCall, registry)?.outcome === "allow_for_run")
-                                    return;
-                                // Backstop for loops that dispatch without awaiting chargeToolRound: suspend on
-                                // the first uncovered gated call with a single pending decision.
-                                const approvalId = randomId("approval");
-                                const decision = this.buildPendingDecision(mediatedCall, approvalId, registry, runId, metadata, controller.signal);
-                                const interruption = {
-                                    kind: "tool_approval",
-                                    reason: decision.reason,
-                                    toolCallId: mediatedCall.id,
-                                    toolName: mediatedCall.name,
-                                    pendingDecisions: [decision],
-                                };
-                                throw new AgentRunSuspended(await this.suspendDurable({
-                                    runId,
-                                    model,
-                                    limits,
-                                    interruption,
-                                    pending: { call: mediatedCall, status: "ready" },
-                                    pendingCalls: [{ call: mediatedCall, status: "ready", approvalId }],
-                                }), interruption);
-                            },
-                            // ponytail: RunOptions wins; array-compose deferred (roadmap: compose-later).
-                            validate,
-                        });
-                    }
-                    catch (error) {
-                        // Link the suspension signal to the hosting call so the root suspension can
-                        // synthesize this call's tool_result when the nested run later terminates.
-                        if (error instanceof AgentDelegationSuspendedError && !error.toolCall)
-                            error.toolCall = call;
-                        throw error;
-                    }
-                },
-                appendMessage: (message) => this.appendMessage(message, runId),
-                hasPendingSteers: () => this.pendingSteers.length > 0,
-                applyPendingSteers: () => this.applyPendingSteers(runId, metadata, controller.signal),
-                emit: (event) => {
-                    if (event.type === "turn_started")
-                        this.activeLoopTurn = event.turn;
-                    if (event.type === "artifact_finished")
-                        artifactFinished = true;
-                    if (event.type === "artifact_failed") {
-                        const first = event.result.errors?.[0];
-                        const reason = event.result.metadata?.reason;
-                        artifactFailedInfo = {
-                            message: first?.message ?? "artifact failed",
-                            code: typeof reason === "string" || typeof reason === "number" ? reason : "artifact_failed",
-                        };
-                    }
-                    this.emit(event);
-                },
-            };
-            const replayToolResult = async (result) => {
-                await ctx.appendMessage({
-                    role: "tool",
-                    content: [
-                        { type: "tool_result", toolCallId: result.toolCallId, name: result.name, result: result.value, error: result.error },
-                        ...(result.content ?? []),
-                    ],
-                    metadata: result.metadata,
-                });
-            };
-            // Handles a nested-run suspension signal: sticky auto-apply appends a synthesized
-            // tool_result and returns; anything else re-suspends the root (throws AgentRunSuspended).
-            const handleNestedSignal = async (error) => {
-                const durableOptions = this.activeDurable?.options;
-                if (!durableOptions || !error.toolCall) {
-                    throw new AgentDecisionError("ERR_PRISM_DECISION_INVALID", "Nested-run suspension requires durable run state and a hosting tool call");
-                }
-                if (error.pendingDecisions.length === 0) {
-                    throw new AgentDecisionError("ERR_PRISM_DECISION_INVALID", "Nested-run suspension carried no pending decisions");
-                }
-                const applied = await applyNestedRun({
-                    ref: error.ref,
-                    toolCall: error.toolCall,
-                    path: error.path ?? [],
-                    pending: error.pendingDecisions,
-                    hook: durableOptions.resumeNestedRun,
-                });
-                if ("toolResult" in applied) {
-                    await replayToolResult(applied.toolResult);
-                    return;
-                }
-                await suspendNested({ entry: applied.entry, toolCall: error.toolCall, pending: applied.pending });
-            };
-            // Route decided nested-run approvals back to their children before replaying own calls.
-            // Undecided or re-suspended children re-suspend the root with the surfaced remainder.
-            let resumePendingCalls = resumed?.state?.pendingCalls;
-            if (resumed?.state?.nestedRuns?.length) {
-                const nestedRuns = resumed.state.nestedRuns;
-                const hook = this.activeDurable?.options.resumeNestedRun;
-                const oldPending = resumed.state.interruption?.pendingDecisions ?? [];
-                const nestedApprovalIds = new Set(nestedRuns.flatMap((entry) => entry.approvals.map((approval) => approval.id)));
-                const remainingNested = [];
-                const surfacedPending = [];
-                const resolvedToolCallIds = new Set();
-                for (const entry of nestedRuns) {
-                    const grouped = [];
-                    for (const approval of entry.approvals) {
-                        const decision = entry.decisions?.[approval.id] ?? resumed.decisions?.get(approval.id);
-                        if (decision)
-                            grouped.push({ ...decision, approvalId: approval.childApprovalId });
-                    }
-                    if (grouped.length === 0) {
-                        remainingNested.push(entry);
-                        surfacedPending.push(...oldPending.filter((pending) => entry.approvals.some((approval) => approval.id === pending.approvalId)));
-                        continue;
-                    }
-                    if (!hook) {
-                        throw new AgentDecisionError("ERR_PRISM_DECISION_INVALID", "Nested-run decisions require a resumeNestedRun hook");
-                    }
-                    const toolCall = resumePendingCalls?.find((pending) => pending.call.id === entry.toolCallId)?.call;
-                    if (!toolCall)
-                        throw new AgentRunStateError("Nested run link is missing its tool call");
-                    const ref = { runId: entry.runId, ...(entry.sessionId ? { sessionId: entry.sessionId } : {}) };
-                    const outcome = await hook({ ref, toolCallId: entry.toolCallId, path: entry.path }, grouped);
-                    if (outcome.status !== "suspended") {
-                        await replayToolResult(nestedOutcomeToolResult(outcome, entry.toolCallId, toolCall.name));
-                        resolvedToolCallIds.add(entry.toolCallId);
-                        continue;
-                    }
-                    const applied = await applyNestedRun({ ref, toolCall, path: entry.path, pending: outcome.pendingDecisions, hook });
-                    if ("toolResult" in applied) {
-                        await replayToolResult(applied.toolResult);
-                        resolvedToolCallIds.add(entry.toolCallId);
-                    }
-                    else {
-                        remainingNested.push(applied.entry);
-                        surfacedPending.push(...applied.pending);
-                    }
-                }
-                resumePendingCalls = resumePendingCalls
-                    ?.filter((entry) => !resolvedToolCallIds.has(entry.call.id))
-                    .map((entry) => {
-                    const decision = resumed.decisions?.get(entry.approvalId);
-                    return decision && !entry.decision ? { ...entry, decision } : entry;
-                });
-                if (this.activeDurable?.state) {
-                    this.activeDurable.state = {
-                        ...this.activeDurable.state,
-                        pendingCalls: resumePendingCalls?.length ? resumePendingCalls : undefined,
-                        nestedRuns: remainingNested.length ? remainingNested : undefined,
-                    };
-                }
-                const remainingOwn = oldPending.filter((pending) => !nestedApprovalIds.has(pending.approvalId) &&
-                    !resumed.decisions?.has(pending.approvalId) &&
-                    !resumePendingCalls?.some((entry) => entry.approvalId === pending.approvalId && entry.decision !== undefined));
-                if (remainingOwn.length > 0 || surfacedPending.length > 0) {
-                    const pendingDecisions = [...remainingOwn, ...surfacedPending];
-                    const single = pendingDecisions.length === 1 ? pendingDecisions[0] : undefined;
-                    const interruption = {
-                        kind: single?.kind ?? "tool_approval",
-                        reason: `${pendingDecisions.length} approval request(s) remain`,
-                        ...(single?.toolCallId ? { toolCallId: single.toolCallId } : {}),
-                        ...(single?.scope.toolName ? { toolName: single.scope.toolName } : {}),
-                        pendingDecisions,
-                    };
-                    throw new AgentRunSuspended(await this.suspendDurable({
-                        runId,
-                        model,
-                        limits,
-                        interruption,
-                        pendingCalls: resumePendingCalls,
-                        nestedRuns: remainingNested,
-                    }), interruption);
-                }
-            }
-            if (resumePendingCalls?.length) {
-                for (const entry of resumePendingCalls) {
-                    if (entry.status !== "ready")
-                        continue;
-                    const decision = entry.decision ?? resumed?.decisions?.get(entry.approvalId);
-                    if (decision && (decision.outcome === "reject_once" || decision.outcome === "reject_for_run")) {
-                        await replayToolResult({
-                            toolCallId: entry.call.id,
-                            name: entry.call.name,
-                            error: { code: "approval_rejected", message: decision.reason ?? "Approval rejected" },
-                        });
-                        continue;
-                    }
-                    if (decision?.elicitation !== undefined) {
-                        // Elicitation acceptance resolves the suspended call with the validated payload.
-                        await replayToolResult({ toolCallId: entry.call.id, name: entry.call.name, value: decision.elicitation });
-                        continue;
-                    }
-                    const call = decision?.modifiedArguments ? { ...entry.call, arguments: decision.modifiedArguments } : entry.call;
-                    try {
-                        await replayToolResult(await ctx.dispatchToolCall(call));
-                    }
-                    catch (error) {
-                        if (!(error instanceof AgentDelegationSuspendedError))
-                            throw error;
-                        await handleNestedSignal(error);
-                    }
-                }
-            }
-            else if (resumed?.state?.pending?.status === "ready") {
-                await replayToolResult(await ctx.dispatchToolCall(resumed.state.pending.call));
-            }
-            const resumedLoopState = resumed?.state?.loopState;
-            if (resumedLoopState) {
-                if (loop.name !== resumedLoopState.name || (loop.revision ?? "1") !== resumedLoopState.revision) {
-                    throw new AgentLoopStateError("ERR_PRISM_LOOP_REVISION", `Loop ${resumedLoopState.name} revision ${resumedLoopState.revision} does not match the resumed durable run`);
-                }
-                loop.restore?.(resumedLoopState.snapshot);
-            }
-            let loopUsage;
-            while (true) {
-                try {
-                    loopUsage = await loop.run(ctx);
-                    await suspendGatedRound();
-                    break;
-                }
-                catch (error) {
-                    if (!(error instanceof AgentDelegationSuspendedError))
-                        throw error;
-                    await handleNestedSignal(error);
-                }
-            }
-            if (loop.name === "generate-validate-revise" && !artifactFinished) {
-                throw Object.assign(new Error(artifactFailedInfo?.message ?? "artifact loop ended without a validated artifact"), {
-                    name: "ArtifactFailed",
-                    code: artifactFailedInfo?.code ?? "artifact_failed",
-                });
-            }
-            usage = runUsage.value() ?? loopUsage;
-            if (usage && this.activeLedger) {
-                const usageRecord = {
-                    id: randomId("usage"),
-                    sessionId: this.id,
-                    runId,
-                    scope: "run_total",
-                    usage,
-                    recordedAt: new Date().toISOString(),
-                    ...this.activeOwnership,
-                };
-                await this.activeLedger.appendUsage(redactRunLedgerRecord(usageRecord, this.activeRedactor));
-            }
-            await this.drainLedger();
-            const runState = this.activeDurable?.state
-                ? await this.persistDurable({
-                    ...this.activeDurable.state,
-                    status: "succeeded",
-                    pending: undefined,
-                    pendingCalls: undefined,
-                    nestedRuns: undefined,
-                    stickyDecisions: undefined,
-                    interruption: undefined,
-                    loopState: undefined,
-                })
-                : undefined;
-            this.emit({
-                type: "agent_finished",
-                sessionId: this.id,
-                runId,
-                usage,
-                // F4: loop strategies record why a ceiling ended the run cleanly (e.g. turn_limit).
-                ...(ctx.finishReason ? { finishReason: ctx.finishReason } : {}),
-            });
-            return this.buildRunResult({ runId, status: "succeeded", usage, runState });
-        }
-        catch (error) {
-            if (error instanceof AgentRunSuspended) {
-                runStatus = "suspended";
-                const version = error.state.version;
-                this.emit({ type: "agent_suspended", sessionId: this.id, runId, interruption: error.interruption, version });
-                return this.buildRunResult({ runId, status: "suspended", runState: error.state, interruption: error.interruption });
-            }
-            runError = errorToErrorInfo(error);
-            this.emit({ type: "error", sessionId: this.id, runId, error: runError });
-            const breach = error instanceof RunLimitError ? error.breach : limits.breach;
-            runStatus = breach ? "failed" : controller.signal.aborted ? "aborted" : "failed";
-            const runState = this.activeDurable?.state
-                ? await this.persistDurable({
-                    ...this.activeDurable.state,
-                    status: runStatus,
-                    interruption: undefined,
-                    loopState: undefined,
-                    pendingCalls: undefined,
-                    nestedRuns: undefined,
-                    stickyDecisions: undefined,
-                })
-                : undefined;
-            const result = this.buildRunResult({
-                runId,
-                status: runStatus,
-                usage: runUsage.value() ?? usage,
-                limit: breach,
-                error: runError,
-                abortReason: !breach && controller.signal.aborted ? String(controller.signal.reason) : undefined,
-                runState,
-            });
-            throw new AgentRunError(result, { cause: error });
-        }
-        finally {
-            if (this.activeRun === controller)
-                this.activeRun = undefined;
-            this.activeRunId = undefined;
-            this.activeLoop = undefined;
-            this.activeGatedRound = undefined;
-            this.activeProviderTurnAbort = undefined;
-            this.pendingSoftInterrupt = false;
-            this.pendingSteers = [];
-            this.pendingSteerBytes = 0;
-            try {
-                await this.drainLedger();
-                if (this.activeLedger) {
-                    const status = runStatus;
-                    const finishRecord = {
-                        id: runId,
-                        sessionId: this.id,
-                        branchId: this.currentLeafId,
-                        model,
-                        provider: model.provider,
-                        idempotencyKey: this.activeIdempotencyKey,
-                        status,
-                        startedAt,
-                        finishedAt: new Date().toISOString(),
-                        abortReason: controller.signal.aborted ? String(controller.signal.reason) : undefined,
-                        error: runError,
-                        ...(this.activePromptVersion ? { promptVersion: this.activePromptVersion } : {}),
-                        ...this.activeOwnership,
-                    };
-                    await this.activeLedger.appendRun(redactRunLedgerRecord(finishRecord, this.activeRedactor));
-                    if (isFlushableRunLedger(this.activeLedger) && this.activeLedger.durability === "flush_on_terminal")
-                        await this.activeLedger.flush();
-                }
-            }
-            finally {
-                this.activeLedger = undefined;
-                this.activeEffectStore = undefined;
-                this.activeOwnership = undefined;
-                this.activeIdentity = undefined;
-                this.activeIdempotencyKey = undefined;
-                this.activeGuardrails = undefined;
-                this.activeMetadata = undefined;
-                this.activePromptVersion = undefined;
-                this.activeLimits?.dispose();
-                this.activeLimits = undefined;
-                this.activeLimitOutputBuffer = false;
-                this.activeRedactor = undefined;
-                this.activeProvider = undefined;
-                cleanupSignal();
-                this.closeSubscribers();
-            }
-        }
+        return executeRun(asSessionHost(this), input, options, runId, resumed);
     }
     prompt(input, options) {
         return this.run(input, options);
@@ -1049,159 +210,6 @@ export class RuntimeAgentSession {
             interruption: input.interruption,
         };
     }
-    async suspendDurable(input) {
-        const durable = this.activeDurable;
-        if (!durable)
-            throw new AgentRunStateError("Durable interruption is not configured");
-        // Capture loop-local state before persisting the suspension. Undefined before the loop
-        // starts (input-guardrail suspensions) and for snapshot-less built-ins.
-        const loop = this.activeLoop;
-        const loopState = loop?.snapshot ? boundedLoopSnapshot(loop.name, loop.revision ?? "1", loop.snapshot()) : undefined;
-        const state = durable.state ??
-            initialAgentRunState({
-                agent: this.agent,
-                options: durable.options,
-                runId: input.runId,
-                sessionId: this.id,
-                leafId: this.currentLeafId,
-                model: input.model,
-                counters: input.limits.snapshot(),
-                deadlineAt: input.limits.deadlineAt,
-                status: "suspended",
-                interruption: input.interruption,
-                messages: input.messages,
-                pending: input.pending,
-                pendingCalls: input.pendingCalls,
-                interruptBeforeTool: durable.options.interruptBeforeTool,
-            });
-        return this.persistDurable({
-            ...state,
-            leafId: this.currentLeafId,
-            status: "suspended",
-            interruption: input.interruption,
-            ...(input.messages ? { input: input.messages } : {}),
-            ...(input.pending ? { pending: input.pending } : {}),
-            ...(input.pendingCalls ? { pendingCalls: input.pendingCalls } : {}),
-            nestedRuns: input.nestedRuns ?? state.nestedRuns,
-            ...(loopState ? { loopState } : {}),
-            counters: input.limits.snapshot(),
-        });
-    }
-    /** First attributed sticky whose scope and delegation path exactly match a nested decision. */
-    matchNestedSticky(decision) {
-        const stickies = this.activeDurable?.state?.stickyDecisions;
-        return stickies?.find((sticky) => sticky.attribution !== undefined &&
-            pathsEqual(sticky.attribution.path, decision.attribution?.path) &&
-            decisionScopesEqual(sticky.scope, decision.scope));
-    }
-    /** First sticky decision whose scope exactly matches this call, if any. */
-    matchStickyDecision(call, registry) {
-        const stickies = this.activeDurable?.state?.stickyDecisions;
-        if (!stickies?.length)
-            return undefined;
-        const identityRef = decisionIdentityRef(this.activeIdentity);
-        let argumentsHash;
-        let effectKind;
-        let effectResolved = false;
-        return stickies.find((sticky) => {
-            if (sticky.attribution !== undefined)
-                return false; // nested-run stickies match decisions, not calls
-            const scope = sticky.scope;
-            if (scope.toolName !== undefined && scope.toolName !== call.name)
-                return false;
-            if (scope.identity !== undefined && scope.identity !== identityRef)
-                return false;
-            if (scope.argumentsHash !== undefined) {
-                argumentsHash ??= toolEffectArgumentsHash(call.arguments);
-                if (scope.argumentsHash !== argumentsHash)
-                    return false;
-            }
-            if (scope.effectKind !== undefined) {
-                if (!effectResolved) {
-                    effectResolved = true;
-                    const tool = registry.get(call.name);
-                    effectKind = tool?.effect
-                        ? resolveToolEffectDeclaration(tool, call.arguments, { sessionId: this.id, runId: "", toolCallId: call.id })?.kind
-                        : undefined;
-                }
-                if (scope.effectKind !== effectKind)
-                    return false;
-            }
-            if (scope.actionConstraints) {
-                for (const [key, value] of Object.entries(scope.actionConstraints)) {
-                    const actual = call.arguments[key];
-                    if (canonicalToolEffectJson(actual === undefined ? null : actual) !== canonicalToolEffectJson(value))
-                        return false;
-                }
-            }
-            return true;
-        });
-    }
-    /** Redacted pending-decision descriptor for one gated call; never carries raw arguments. */
-    buildPendingDecision(call, approvalId, registry, runId, metadata, signal) {
-        const tool = registry.get(call.name);
-        const declaration = tool?.effect
-            ? resolveToolEffectDeclaration(tool, call.arguments, {
-                sessionId: this.id,
-                runId,
-                toolCallId: call.id,
-                signal,
-                metadata,
-            })
-            : undefined;
-        const identityRef = decisionIdentityRef(this.activeIdentity);
-        const elicitation = toolElicitationRequest(tool, call.arguments, {
-            sessionId: this.id,
-            runId,
-            toolCallId: call.id,
-            signal,
-            metadata,
-        });
-        return {
-            approvalId,
-            kind: elicitation ? "elicitation" : "tool_approval",
-            toolCallId: call.id,
-            scope: {
-                toolName: call.name,
-                argumentsHash: toolEffectArgumentsHash(call.arguments),
-                ...(declaration && declaration.kind !== "none" ? { effectKind: declaration.kind } : {}),
-                ...(identityRef ? { identity: identityRef } : {}),
-            },
-            reason: elicitation?.reason ?? "Tool side effect requires approval",
-            ...(elicitation ? { elicitationSchema: elicitation.schema } : {}),
-        };
-    }
-    async persistDurable(state) {
-        const durable = this.activeDurable;
-        if (!durable)
-            throw new AgentRunStateError("Durable run state is not configured");
-        const persisted = durable.options.persistSessionState
-            ? {
-                ...state,
-                sessionState: {
-                    loadedSkillNames: this.loadedSkills.list(),
-                    ...(this.activatedTools.list().length ? { activatedToolNames: this.activatedTools.list() } : {}),
-                    ...(durable.options.includeSkillBodies
-                        ? {
-                            loadedSkillBodies: snapshotLoadedSkillBodies(this.activeRunSkills, this.loadedSkills, this.restoredSkillBodies.length ? new Map(this.restoredSkillBodies.map((e) => [e.name, e.instructions])) : undefined),
-                        }
-                        : {}),
-                },
-            }
-            : state;
-        const saved = await saveAgentRunState({
-            checkpoints: durable.options.checkpoints,
-            state: persisted,
-            expectedVersion: durable.version,
-            ownership: this.activeOwnership,
-            fencingToken: durable.options.fencingToken,
-            redactor: this.activeRedactor,
-            maxStateBytes: durable.options.maxStateBytes,
-        });
-        durable.state = saved.state;
-        durable.version = saved.record.version;
-        return publicState(saved.state);
-    }
     async compact(options = {}) {
         if (this.activeRun)
             throw new Error("Agent session already has an active run");
@@ -1324,180 +332,6 @@ export class RuntimeAgentSession {
         if (failure)
             throw failure;
     }
-    async generateWithRetry(request, runId, options, signal, requestSecrets = [], turn = 1, recordUsage) {
-        const retry = mergeRetry(this.agent.config.retry, options.retry);
-        const secrets = [...requestSecrets, ...(retry?.secrets ?? [])];
-        const policy = retry?.policy ?? (retry ? createDefaultRetryPolicy(retry) : undefined);
-        for (let attempt = 1;; attempt += 1) {
-            try {
-                return await this.generateProviderTurn(request, runId, signal, secrets, turn, attempt, recordUsage);
-            }
-            catch (error) {
-                if (error instanceof GuardrailError || isSteerSoftInterrupt(error))
-                    throw error;
-                const failure = error instanceof ProviderTurnFailure ? error : undefined;
-                const info = failure ? redactSecrets(failure.info, secrets) : errorToErrorInfo(error, secrets);
-                if (!policy || failure?.observable)
-                    throw errorFromInfo(info);
-                const context = { sessionId: this.id, runId, attempt, error: info, metadata: retry?.metadata, signal };
-                let decision = await policy.decide(context);
-                const payload = (await this.agent.config.middleware?.run("retry", { context, decision })) ?? {
-                    context,
-                    decision,
-                };
-                decision = payload.decision;
-                if (!decision.retry)
-                    throw errorFromInfo(info);
-                const delayMs = decision.delayMs ?? 0;
-                this.emit({ type: "retry_scheduled", sessionId: this.id, runId, attempt, delayMs, error: info });
-                await waitForRetry(decision, signal);
-            }
-        }
-    }
-    async generateProviderTurn(request, runId, signal, secrets = [], turn = 1, attempt = 1, recordUsage) {
-        this.activeLimits.charge("maxProviderAttempts");
-        this.activeLimits.charge("maxRequestBytes", jsonBytes(request));
-        const startedAt = performance.now();
-        const providerId = this.activeProvider?.id ?? request.model.provider;
-        const buildMetadata = (extra = {}) => createProviderTurnMetadata(request, providerId, { attempt, ...extra });
-        this.emit({
-            type: "provider_turn_started",
-            sessionId: this.id,
-            runId,
-            turn,
-            metadata: buildMetadata(),
-        });
-        const content = [];
-        const calls = [];
-        const toolDeltas = [];
-        let messageId;
-        let started = false;
-        let usage;
-        let usageRecorded = false;
-        const bufferedOutput = [];
-        const bufferOutput = Boolean(this.activeGuardrails?.output?.length || this.activeLimitOutputBuffer);
-        const emitOutput = (event) => {
-            if (bufferOutput)
-                bufferedOutput.push(event);
-            else
-                this.emit(event);
-        };
-        const recordTurnUsage = async () => {
-            if (usageRecorded)
-                return;
-            usageRecorded = true;
-            await recordUsage?.(usage, turn, attempt);
-        };
-        const turnAbort = new AbortController();
-        const cleanupTurn = bridgeAbort(signal, turnAbort);
-        this.activeProviderTurnAbort = turnAbort;
-        if (this.pendingSoftInterrupt) {
-            this.pendingSoftInterrupt = false;
-            turnAbort.abort(new SteerSoftInterrupt());
-        }
-        const turnRequest = { ...request, signal: turnAbort.signal };
-        try {
-            throwIfAborted(turnAbort.signal);
-            for await (const event of this.activeProvider.generate(turnRequest)) {
-                throwIfAborted(turnAbort.signal);
-                this.activeLimits.charge("maxResponseBytes", jsonBytes(event));
-                if (event.type === "error")
-                    throw new ProviderTurnFailure(event.error, started);
-                if (event.type === "usage")
-                    usage = event.usage;
-                if (event.type === "done") {
-                    usage = event.usage ?? usage;
-                    break;
-                }
-                if (event.type === "message_start") {
-                    started = true;
-                    messageId = event.messageId;
-                    emitOutput({ type: "message_started", sessionId: this.id, runId, message: { id: messageId, role: "assistant", content: [] } });
-                    continue;
-                }
-                if (event.type === "content_delta" || event.type === "tool_call" || event.type === "tool_call_delta") {
-                    if (!started) {
-                        started = true;
-                        emitOutput({ type: "message_started", sessionId: this.id, runId, message: { role: "assistant", content: [] } });
-                    }
-                    if (event.type === "tool_call_delta") {
-                        toolDeltas.push(event);
-                        emitOutput({ type: "message_delta", sessionId: this.id, runId, content: providerToolCallDeltaContent(event) });
-                        continue;
-                    }
-                    const block = providerContent(event);
-                    content.push(block);
-                    if (block.type === "tool_call")
-                        calls.push(block);
-                    emitOutput({ type: "message_delta", sessionId: this.id, runId, content: block });
-                }
-            }
-            for (const call of reconstructMissingToolCalls(toolDeltas, calls)) {
-                content.push(call);
-                calls.push(call);
-                emitOutput({ type: "message_delta", sessionId: this.id, runId, content: call });
-            }
-            await recordTurnUsage();
-            if (this.activeGuardrails?.output?.length) {
-                assertGuardrailsAllowed(await runGuardrails({
-                    stage: "output",
-                    guardrails: this.activeGuardrails,
-                    value: { content, calls, messageId, started, usage },
-                    context: { sessionId: this.id, runId, metadata: this.activeMetadata ?? {}, signal: turnAbort.signal },
-                    redactor: this.activeRedactor,
-                    emit: (event) => this.emit(event),
-                }));
-            }
-            if (bufferOutput)
-                for (const event of bufferedOutput)
-                    this.emit(event);
-            const latencyMs = Math.round(performance.now() - startedAt);
-            this.emit({
-                type: "provider_turn_finished",
-                sessionId: this.id,
-                runId,
-                turn,
-                metadata: buildMetadata({ latencyMs }),
-                usage,
-            });
-            return { content, calls, messageId, started, usage };
-        }
-        catch (error) {
-            if (isSteerSoftInterrupt(error) || isSteerSoftInterrupt(turnAbort.signal.reason)) {
-                await recordTurnUsage();
-                const latencyMs = Math.round(performance.now() - startedAt);
-                this.emit({
-                    type: "provider_turn_finished",
-                    sessionId: this.id,
-                    runId,
-                    turn,
-                    metadata: buildMetadata({ latencyMs }),
-                    usage,
-                });
-                throw new SteerSoftInterrupt();
-            }
-            const latencyMs = Math.round(performance.now() - startedAt);
-            const info = error instanceof ProviderTurnFailure ? redactSecrets(error.info, secrets) : errorToErrorInfo(error, secrets);
-            await recordTurnUsage();
-            this.emit({
-                type: "provider_turn_finished",
-                sessionId: this.id,
-                runId,
-                turn,
-                metadata: buildMetadata({ latencyMs, httpStatus: readProviderHttpStatus(info) }),
-                usage,
-                error: info,
-            });
-            if (error instanceof GuardrailError || error instanceof ProviderTurnFailure)
-                throw error;
-            throw new ProviderTurnFailure(info, started);
-        }
-        finally {
-            cleanupTurn();
-            if (this.activeProviderTurnAbort === turnAbort)
-                this.activeProviderTurnAbort = undefined;
-        }
-    }
     async applyPendingSteers(runId, metadata, signal) {
         if (this.pendingSteers.length === 0)
             return false;