@bastani/atomic 0.9.60 → 0.9.61-alpha.2

package/dist/builtin/workflows/src/shared/workflow-infrastructure-error.d.ts

@@ -21,3 +21,9 @@ export declare function failedOnInfrastructureFault(result: {
     readonly failure?: unknown;
     readonly stages?: unknown;
 }): boolean;
+/** The fault a result {@link failedOnInfrastructureFault} failed on: its error, or the error of its first faulted stage. */
+export declare function infrastructureFaultMessage(result: {
+    readonly error?: unknown;
+    readonly failure?: unknown;
+    readonly stages?: unknown;
+}): string;

package/dist/core/agent-session-retry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-session-retry.d.ts","sourceRoot":"","sources":["../../src/core/agent-session-retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAO,gBAAgB,EAAS,MAAM,uBAAuB,CAAC;AAI1E,OAAO,KAAK,EAAE,2BAA2B,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AA+C9F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAS3F;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAexF;AAED;;;;;;;;;;;;;GAaG;AAEH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAsBzF;AAmCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAsBvF;AAUD,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAQjE;AAiCD,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAajE;AAED,wFAAwF;AACxF,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBpF;AAED,wDAAwD;AACxD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyG/G;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CA+F3G;AAaD,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAInD;AAED;;;GAGG;AAEH,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpE;AAED,kDAAkD;AAElD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAE9E;AAMD;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;CAapC,CAAC"}
+{"version":3,"file":"agent-session-retry.d.ts","sourceRoot":"","sources":["../../src/core/agent-session-retry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAO,gBAAgB,EAAS,MAAM,uBAAuB,CAAC;AAI1E,OAAO,KAAK,EAAE,2BAA2B,IAAI,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAqD9F,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAU3F;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAiBxF;AAED;;;;;;;;;;;;;GAaG;AAEH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAsBzF;AAmCD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAsBvF;AAUD,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAQjE;AAiCD,2EAA2E;AAC3E,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAajE;AAED,wFAAwF;AACxF,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBpF;AAED,wDAAwD;AACxD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAyG/G;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CA+F3G;AAaD,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAInD;AAED;;;GAGG;AAEH,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAOpE;AAED,kDAAkD;AAElD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAE9E;AAMD;;;;;;;GAOG;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;CAapC,CAAC"}

package/dist/core/agent-session-retry.js

@@ -3,7 +3,7 @@ import { sleep } from "../utils/sleep.js";
 import { isCodexTokenInvalidationError } from "./codex-errors.js";
 import { DEFAULT_THINKING_LEVEL } from "./defaults.js";
 import { fallbackKey, resolveFallbackModel as resolveConfiguredFallbackModel } from "./fallback-models.js";
-import { isRetryableModelFailure, isRetryableSameModelFailure, isSafetyRefusalFailure, normalizeModelFailureSignal, } from "./model-fallback-failures.js";
+import { isContentFilterRefusal, isRetryableModelFailure, isRetryableSameModelFailure, isSafetyRefusalFailure, normalizeModelFailureSignal, } from "./model-fallback-failures.js";
 import { nextRetryDecision } from "./retry-policy.js";
 import { settingsWriteOwner } from "./settings-write-ownership.js";
 function modelLabel(model) {
@@ -35,6 +35,10 @@ function containsCodexTokenInvalidation(provider, value, seen = new Set()) {
 function resolveFallbackModel(value) {
     return resolveConfiguredFallbackModel(value, this._modelRuntime, this.model?.provider ?? this.settingsManager.getDefaultProvider());
 }
+/** `retry.fallbackOnContentFilter`: a content-filter refusal spends the next fallback candidate, not a retry. */
+function fallsBackOnContentFilter() {
+    return this.settingsManager.getRetrySettings().fallbackOnContentFilter !== false;
+}
 /** Whether an assistant error may advance the configured fallback chain. */
 export function _isFallbackableError(message) {
     if (message.stopReason !== "error")
@@ -48,6 +52,8 @@ export function _isFallbackableError(message) {
     const signal = normalizeModelFailureSignal(message);
     if (signal.kind === "cancelled" || signal.kind === "task_failure")
         return false;
+    if (signal.kind === "content_filter")
+        return fallsBackOnContentFilter.call(this);
     return isRetryableModelFailure(message);
 }
 /**
@@ -68,9 +74,12 @@ export function _isRetryableError(message) {
     const provider = message.provider || this.model?.provider;
     if (provider && containsCodexTokenInvalidation(provider, message))
         return false;
-    // Safety/refusal errors remain bounded same-model retries, but do not spend
-    // another provider candidate. The refusal grammar lives in the shared
+    // The same request gets the same content-filter refusal, so with `retry.fallbackOnContentFilter` it goes
+    // straight to the next fallback candidate. Otherwise safety/refusal errors remain bounded same-model
+    // retries that do not spend another provider candidate. The refusal grammar lives in the shared
     // classifier so this decision cannot drift from workflow fallback handling.
+    if (isContentFilterRefusal(message) && fallsBackOnContentFilter.call(this))
+        return false;
     if (isSafetyRefusalFailure(message))
         return true;
     return isRetryableSameModelFailure(message);

package/dist/core/agent-session-retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-session-retry.js","sourceRoot":"","sources":["../../src/core/agent-session-retry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE9F,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,oBAAoB,IAAI,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAC3G,OAAO,EACN,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,SAAS,UAAU,CAAC,KAA6B;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;AAClE,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAgB,EAAE,KAAc,EAAE,IAAI,GAAG,IAAI,GAAG,EAAW;IAClG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,MAAM,IAAI;QACpB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK;QACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,EAAE,CAAC;QACH,IAAI,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAE5B,KAAa;IAEb,OAAO,8BAA8B,CACpC,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC,kBAAkB,EAAE,CACjE,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAqB,OAAyB;IACjF,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;IACrD,IAAI,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC1D,IAAI,QAAQ,IAAI,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChF,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAqB,OAAyB;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAEjD,wDAAwD;IACxD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;IACrD,IAAI,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC1D,IAAI,QAAQ,IAAI,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhF,4EAA4E;IAC5E,sEAAsE;IACtE,4EAA4E;IAC5E,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,kBAAkB,CAAqB,OAAyB;IAC/E,kFAAkF;IAClF,uEAAuE;IACvE,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC,CAAC,sCAAsC;QACpD,CAAC,CAAC,CAAC;QACH,IAAI,UAAU;YAAE,OAAO,KAAK,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,6EAA6E;IAC7E,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,6BAA6B,GAClC,yOAAyO,CAAC;AAE3O,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAAqB,OAAyB;IAC7E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1G,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1G,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,gCAAgC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5D,2EAA2E;IAC3E,6DAA6D;IAC7D,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAqB,KAAoB;IACjF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IAC3E,IAAI,aAAa,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO;IAClF,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,wBAAwB,CAAC;IAC/D,IAAI,CAAC,oBAAoB,GAAG,YAAY,CAAC;IACzC,IAAI,CAAC,4BAA4B,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IACzF,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,4BAA4B;IACpC,IAAI,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC3C,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;IACtC,IAAI,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAC9C,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;IACvC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,wBAAwB,CAEhC,OAKC;IAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1G,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;KAC/E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC9C,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;QAC7F,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;YACnC,OAAO,EAAE,UAAU,KAAK,SAAS;YACjC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC;YAC9B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC9C,IAAI,WAAW,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,yBAAyB,KAAK,gBAAgB,IAAI,IAAI,CAAC,oBAAoB,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAEnH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE,UAAU,KAAK,SAAS;QACjC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC;QAC9B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACnD,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAqB,OAAyB;IAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAElF,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC3F,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IAClF,MAAM,SAAS,GAAG,YAAY,CAAC;IAC/B,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;QAClC,MAAM,SAAS,GAAG,kBAAkB,CACnC,SAAS,EACT,SAAS,CAAC,aAAa;YACtB,IAAI,CAAC,eAAe,CAAC,uBAAuB,EAAE;YAC9C,oBAAoB;YACpB,sBAAsB,CACN,CAAC;QACnB,IAAI,IAAI,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,SAAS;QAClG,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnD,IAAI,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,oBAAoB;YAAE,SAAS;QACzF,2EAA2E;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAAE,SAAS;QAEhG,uEAAuE;QACvE,sEAAsE;QAEtE,0FAA0F;QAC1F,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9E,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACnC,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;aAC5C,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC;YACV,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;YAC3B,EAAE,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,EAAE;YAC3C,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,uBAAuB;YACvD,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,KAAK,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC;gBAChC,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,SAAS;gBAChB,aAAa,EAAE,oBAAoB;aACnC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uCAAuC,EAAE,CAAC;QAC/C,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QAEvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAC1D,UAAU,CAAC,GAAG,EAAE;YACf,IAAI,IAAI,CAAC,uBAAuB;gBAAE,OAAO;YACzC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBACzD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,IAAI,CAAC,yBAAyB,KAAK,kBAAkB,EAAE,CAAC;oBAC3D,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC;oBACxC,IAAI,CAAC;wBACJ,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBACxC,CAAC;oBAAC,MAAM,CAAC;wBACR,IAAI,IAAI,CAAC,yBAAyB,KAAK,kBAAkB,EAAE,CAAC;4BAC3D,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;gCACnC,OAAO,EAAE,KAAK;gCACd,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;gCACtD,UAAU;6BACV,CAAC,CAAC;wBACJ,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;gBACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,YAAY,IAAI,0BAA0B,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAqB,OAAyB;IACxF,IAAI,IAAI,CAAC,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAChE,MAAM,iBAAiB,GAAG,cAAc,IAAI,eAAe,IAAI,aAAa,CAAC;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,oBAAoB,GAAG,iBAAiB,IAAI,eAAe,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,IAAI,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,IAAI,CAAC,aAAa;gBAC3B,UAAU,EAAE,OAAO,CAAC,YAAY;aAChC,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC9B,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,mFAAmF;IACnF,kEAAkE;IAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IACxB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC;QACb,CAAC;QACD,qDAAqD;QACrD,IAAI,CAAC,KAAK,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC;YAC/B,UAAU,EAAE,OAAO,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,sCAAsC;QAC5D,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,CAAC,qBAAqB,GAAG,IAAI,eAAe,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,IAAI,CAAC,aAAa;QAC3B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,OAAO;QACP,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe;KACrD,CAAC,CAAC;IAEH,0FAA0F;IAC1F,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;IAE3C,4CAA4C;IAC5C,IAAI,IAAI,CAAC,uBAAuB;QAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;IACrE,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,2DAA2D;QAC3D,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;IAEvC,4EAA4E;IAC5E,UAAU,CAAC,GAAG,EAAE;QACf,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAClC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,kDAAkD;QACnD,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,CAAC,CAAC;IAEN,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;GAEG;AAEH,SAAS,oBAAoB;IAC5B,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,UAAU;IACzB,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC;IACpC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AAEH,MAAM,CAAC,KAAK,UAAU,YAAY;IACjC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO;IACR,CAAC;IAED,MAAM,IAAI,CAAC,aAAa,CAAC;IACzB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,kDAAkD;AAElD,MAAM,UAAU,mBAAmB,CAAqB,OAAgB;IACvE,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,4EAA4E;AAC5E,iBAAiB;AACjB,4EAA4E;AAE5E;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,qBAAqB;IACrB,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,UAAU;IACV,YAAY;IACZ,mBAAmB;CACnB,CAAC","sourcesContent":["import type { Api, AssistantMessage, Model } from \"@bastani/pi-ai/compat\";\nimport { clampThinkingLevel, isContextOverflow, modelsAreEqual } from \"@bastani/pi-ai/compat\";\nimport type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { sleep } from \"../utils/sleep.ts\";\nimport type { AgentSessionInternalSurface as AgentSession } from \"./agent-session-methods.ts\";\nimport { isCodexTokenInvalidationError } from \"./codex-errors.ts\";\nimport { DEFAULT_THINKING_LEVEL } from \"./defaults.ts\";\nimport { fallbackKey, resolveFallbackModel as resolveConfiguredFallbackModel } from \"./fallback-models.ts\";\nimport {\n\tisRetryableModelFailure,\n\tisRetryableSameModelFailure,\n\tisSafetyRefusalFailure,\n\tnormalizeModelFailureSignal,\n} from \"./model-fallback-failures.ts\";\nimport { nextRetryDecision } from \"./retry-policy.ts\";\nimport { settingsWriteOwner } from \"./settings-write-ownership.ts\";\n\nfunction modelLabel(model: Model<Api> | undefined): string {\n\treturn model ? `${model.provider}/${model.id}` : \"unknown model\";\n}\n\nfunction containsCodexTokenInvalidation(provider: string, value: unknown, seen = new Set<unknown>()): boolean {\n\tif (value === null || value === undefined || seen.has(value)) return false;\n\tif (typeof value === \"string\") return isCodexTokenInvalidationError(provider, value);\n\tif (typeof value !== \"object\") return false;\n\tseen.add(value);\n\tconst record = value as Record<string, unknown>;\n\tfor (const field of [record.errorMessage, record.message, record.statusText]) {\n\t\tif (typeof field === \"string\" && isCodexTokenInvalidationError(provider, field)) return true;\n\t}\n\tfor (const nested of [\n\t\trecord.error,\n\t\trecord.cause,\n\t\t...(Array.isArray(record.diagnostics) ? record.diagnostics : []),\n\t]) {\n\t\tif (containsCodexTokenInvalidation(provider, nested, seen)) return true;\n\t}\n\treturn false;\n}\n\nfunction resolveFallbackModel(\n\tthis: AgentSession,\n\tvalue: string,\n): { model: Model<Api>; thinkingLevel?: ThinkingLevel } | undefined {\n\treturn resolveConfiguredFallbackModel(\n\t\tvalue,\n\t\tthis._modelRuntime,\n\t\tthis.model?.provider ?? this.settingsManager.getDefaultProvider(),\n\t);\n}\n\n/** Whether an assistant error may advance the configured fallback chain. */\nexport function _isFallbackableError(this: AgentSession, message: AssistantMessage): boolean {\n\tif (message.stopReason !== \"error\") return false;\n\tconst contextWindow = this.model?.contextWindow ?? 0;\n\tif (isContextOverflow(message, contextWindow)) return false;\n\tconst provider = message.provider || this.model?.provider;\n\tif (provider && containsCodexTokenInvalidation(provider, message)) return true;\n\tconst signal = normalizeModelFailureSignal(message);\n\tif (signal.kind === \"cancelled\" || signal.kind === \"task_failure\") return false;\n\treturn isRetryableModelFailure(message);\n}\n\n/**\n * Whether the current model should be requested again.\n *\n * Fallback eligibility is broader than same-model retry eligibility. Auth and\n * request-incompatible failures should spend a fallback candidate, but cannot\n * be repaired by sending the same request again. Codex token invalidation is\n * also terminal for the current model while remaining fallbackable.\n */\nexport function _isRetryableError(this: AgentSession, message: AssistantMessage): boolean {\n\tif (message.stopReason !== \"error\") return false;\n\n\t// Context overflow is handled by compaction, not retry.\n\tconst contextWindow = this.model?.contextWindow ?? 0;\n\tif (isContextOverflow(message, contextWindow)) return false;\n\n\tconst provider = message.provider || this.model?.provider;\n\tif (provider && containsCodexTokenInvalidation(provider, message)) return false;\n\n\t// Safety/refusal errors remain bounded same-model retries, but do not spend\n\t// another provider candidate. The refusal grammar lives in the shared\n\t// classifier so this decision cannot drift from workflow fallback handling.\n\tif (isSafetyRefusalFailure(message)) return true;\n\treturn isRetryableSameModelFailure(message);\n}\n\n/**\n * Detect a degenerate empty completion: the provider ended the stream with no\n * usable content and zero output tokens. Seen with github-copilot Gemini models\n * that emit finish_reason \"stop\" (or a tool-use stop) with an empty content array\n * and 0 output tokens, leaving the turn dead instead of producing the next step.\n *\n * These are treated as retryable so the harness re-issues the request rather than\n * silently stopping mid-task. Guarded tightly (no text, no tool call, no thinking,\n * and output === 0) so legitimate non-empty turns are never matched.\n *\n * Intentionally provider-agnostic (not gated to Copilot Gemini): a degenerate\n * empty turn is a transient failure for any provider. It is bounded by\n * `maxRetries` and falls through to normal handling on exhaustion.\n */\n\nexport function _isEmptyCompletion(this: AgentSession, message: AssistantMessage): boolean {\n\t// Only \"completed\" stop reasons can be deceptively empty. Real errors are handled\n\t// by _isRetryableError; aborted/length turns are intentional outcomes.\n\tif (message.stopReason !== \"stop\" && message.stopReason !== \"toolUse\") return false;\n\n\tconst content = message.content;\n\tif (Array.isArray(content)) {\n\t\tconst hasContent = content.some((part) => {\n\t\t\tif (part.type === \"text\") return part.text.trim().length > 0;\n\t\t\tif (part.type === \"toolCall\") return true;\n\t\t\tif (part.type === \"thinking\") return part.redacted === true || part.thinking.trim().length > 0;\n\t\t\treturn true; // unknown part types count as content\n\t\t});\n\t\tif (hasContent) return false;\n\t}\n\n\t// A turn that produced output tokens but no surfaced content is not \"empty\"\n\t// (e.g. reasoning-only responses); leave those alone. Note: a provider that\n\t// fails to report `usage` (output defaults to 0) would make every\n\t// content-less turn match here; the dual requirement (empty content AND zero\n\t// output) keeps that false-positive risk low in practice.\n\treturn (message.usage?.output ?? 0) === 0;\n}\n\n/**\n * Detect a canned provider-side safety refusal that arrives as a *successful*\n * completion instead of an error. Seen with github-copilot GPT models under\n * heavy contexts: the endpoint intercepts the request and returns exactly\n * \"I'm sorry, but I cannot assist with that request.\" with zero usage and a\n * spurious stopReason of \"length\" (or \"stop\"), which the agent would otherwise\n * accept as the final answer and dead-end the turn (issue #1608).\n *\n * A text heuristic is unavoidable here: the OpenAI Responses API does signal\n * these interceptions structurally (`refusal` content parts plus\n * `incomplete_details.reason: \"content_filter\"`), but pi-ai's normalization\n * folds refusal parts into plain text blocks and collapses the `incomplete`\n * status to stopReason \"length\", discarding the reason — so no structured\n * refusal marker survives on the AssistantMessage. Providers whose safety\n * signals DO survive as structured errors (Anthropic refusal stops, OpenAI\n * `finish_reason: content_filter`) are matched in _isRetryableError instead.\n *\n * Guarded tightly so legitimate turns are never matched:\n * - only non-error completion stops (\"stop\" | \"length\" | \"toolUse\");\n * - content must be a single short canned refusal text — any tool call,\n *   thinking block, or additional prose disqualifies the message;\n * - usage.output must be 0: a genuine model-authored refusal bills output\n *   tokens, while the intercepted canned refusal reports zero usage.\n *\n * Treated as retryable so the harness re-requests the model call rather than\n * accepting the refusal; bounded by `maxRetries` like every other retry path.\n */\n\nconst CANNED_SAFETY_REFUSAL_PATTERN =\n\t/^(?:i['’]?m sorry[,.]?\\s+(?:but\\s+)?|sorry[,.]?\\s+(?:but\\s+)?)?i\\s+(?:cannot|can['’]?t|can\\s+not|am\\s+unable\\s+to|am\\s+not\\s+able\\s+to)\\s+(?:assist|help|comply|continue)(?:\\s+with)?(?:\\s+(?:that|this))?(?:\\s+(?:request|task))?\\.?$/i;\n\nconst CANNED_SAFETY_REFUSAL_MAX_LENGTH = 120;\n\nexport function _isSafetyRefusal(this: AgentSession, message: AssistantMessage): boolean {\n\t// Real errors are handled by _isRetryableError; aborts are user-initiated.\n\tif (message.stopReason !== \"stop\" && message.stopReason !== \"length\" && message.stopReason !== \"toolUse\") {\n\t\treturn false;\n\t}\n\n\tconst content = message.content;\n\tif (!Array.isArray(content) || content.length === 0) return false;\n\n\tlet text = \"\";\n\tfor (const part of content) {\n\t\tif (part.type === \"toolCall\") return false;\n\t\tif (part.type === \"thinking\" && (part.redacted === true || part.thinking.trim().length > 0)) return false;\n\t\tif (part.type === \"text\") text += part.text;\n\t}\n\ttext = text.trim();\n\tif (text.length === 0 || text.length > CANNED_SAFETY_REFUSAL_MAX_LENGTH) return false;\n\tif (!CANNED_SAFETY_REFUSAL_PATTERN.test(text)) return false;\n\n\t// Zero billed output distinguishes a provider interception from legitimate\n\t// model-authored refusal prose, which is never auto-retried.\n\treturn (message.usage?.output ?? 0) === 0;\n}\n\nasync function applyFallbackThinkingLevel(this: AgentSession, level: ThinkingLevel): Promise<boolean> {\n\tconst previousLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tif (previousLevel === level) return false;\n\tawait this.sessionManager.appendThinkingLevelChange(level);\n\tthis.agent.state.thinkingLevel = level;\n\treturn true;\n}\n\n/** Capture the user-selected model before the first fallback in a turn. */\nexport function _beginFallbackModelScope(this: AgentSession): void {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tif (this._fallbackOriginModel !== undefined || currentModel === undefined) return;\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tthis._fallbackOriginGeneration = this._fallbackScopeGeneration;\n\tthis._fallbackOriginModel = currentModel;\n\tthis._fallbackOriginThinkingLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tthis._fallbackRestoreError = undefined;\n}\n\nfunction clearFallbackModelScopeState(this: AgentSession): void {\n\tthis._fallbackOriginGeneration = undefined;\n\tthis._fallbackOriginModel = undefined;\n\tthis._fallbackOriginThinkingLevel = undefined;\n\tthis._fallbackRestoreError = undefined;\n\tthis._fallbackAttemptedKeys.clear();\n\tthis._fallbackBlockedModels.length = 0;\n}\n\nfunction finishFallbackModelScope(\n\tthis: AgentSession,\n\toptions: {\n\t\treadonly success: boolean;\n\t\treadonly from?: string;\n\t\treadonly to?: string;\n\t\treadonly finalError?: string;\n\t},\n): boolean {\n\tif (this._fallbackOriginModel === undefined || this._fallbackOriginGeneration === undefined) return false;\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tclearFallbackModelScopeState.call(this);\n\tthis._emit({\n\t\ttype: \"model_fallback_end\",\n\t\tsuccess: options.success,\n\t\t...(options.from === undefined ? {} : { from: options.from }),\n\t\t...(options.to === undefined ? {} : { to: options.to }),\n\t\t...(options.finalError === undefined ? {} : { finalError: options.finalError }),\n\t});\n\treturn true;\n}\n\n/** Finish an active fallback lifecycle before an explicit model choice. */\nexport function _clearFallbackModelScope(this: AgentSession): void {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tconst finalError = this._fallbackRestoreError;\n\tif (this._fallbackOriginModel !== undefined && this._fallbackOriginGeneration !== undefined) {\n\t\tfinishFallbackModelScope.call(this, {\n\t\t\tsuccess: finalError === undefined,\n\t\t\tfrom: modelLabel(currentModel),\n\t\t\t...(finalError === undefined ? {} : { finalError }),\n\t\t});\n\t\treturn;\n\t}\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tclearFallbackModelScopeState.call(this);\n}\n\n/** Finish an active fallback lifecycle without changing the selected fallback model. */\nexport async function _settleFallbackModelScope(this: AgentSession): Promise<boolean> {\n\tconst originModel = this._fallbackOriginModel;\n\tconst originGeneration = this._fallbackOriginGeneration;\n\tconst finalError = this._fallbackRestoreError;\n\tif (originModel === undefined || originGeneration === undefined) {\n\t\tclearFallbackModelScopeState.call(this);\n\t\treturn false;\n\t}\n\tif (this._fallbackOriginGeneration !== originGeneration || this._fallbackOriginModel !== originModel) return false;\n\n\tconst currentModel = this.agent.state.model ?? this.model;\n\treturn finishFallbackModelScope.call(this, {\n\t\tsuccess: finalError === undefined,\n\t\tfrom: modelLabel(currentModel),\n\t\t...(finalError === undefined ? {} : { finalError }),\n\t});\n}\n\n/** Handle retryable errors with exponential backoff. */\nexport async function _trySwitchToFallbackModel(this: AgentSession, message: AssistantMessage): Promise<boolean> {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tif (this._fallbackModels.length === 0 || currentModel === undefined) return false;\n\n\t// A failure the chain may spend a candidate on, but that requesting the same\n\t// model again cannot repair — a rejected credential, an unavailable model, a\n\t// request this model cannot serve — condemns that model for the rest of the\n\t// turn. Reasoning level does not change any of those answers, so every\n\t// reasoning variant of it is blocked too. Transient rate-limit and transport\n\t// failures stay same-model retryable and keep their reasoning variants.\n\tif (isRetryableModelFailure(message) && !isRetryableSameModelFailure(message)) {\n\t\tif (!this._fallbackBlockedModels.some((blocked) => modelsAreEqual(blocked, currentModel))) {\n\t\t\tthis._fallbackBlockedModels.push(currentModel);\n\t\t}\n\t}\n\n\tconst currentThinkingLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tconst fromModel = currentModel;\n\tfor (const rawCandidate of this._fallbackModels) {\n\t\tconst candidate = resolveFallbackModel.call(this, rawCandidate);\n\t\tif (!candidate) continue;\n\t\tconst nextModel = candidate.model;\n\t\tconst nextLevel = clampThinkingLevel(\n\t\t\tnextModel,\n\t\t\tcandidate.thinkingLevel ??\n\t\t\t\tthis.settingsManager.getDefaultThinkingLevel() ??\n\t\t\t\tcurrentThinkingLevel ??\n\t\t\t\tDEFAULT_THINKING_LEVEL,\n\t\t) as ThinkingLevel;\n\t\tif (this._isFallbackModelAllowed && !this._isFallbackModelAllowed(nextModel, nextLevel)) continue;\n\t\tconst key = fallbackKey(nextModel, nextLevel);\n\t\tif (this._fallbackAttemptedKeys.has(key)) continue;\n\t\tif (modelsAreEqual(nextModel, fromModel) && nextLevel === currentThinkingLevel) continue;\n\t\t// Skipped before any lifecycle starts: a blocked variant emits no fallback\n\t\t// event and opens no scope.\n\t\tif (this._fallbackBlockedModels.some((blocked) => modelsAreEqual(blocked, nextModel))) continue;\n\n\t\t// Do not create a fallback lifecycle until a candidate can actually be\n\t\t// selected. An exhausted or unresolvable chain has no start to close.\n\n\t\t// Keep the failed attempt in raw history while durably omitting it from model projection.\n\t\tawait this._omitTrailingAssistantAttempt();\n\t\tawait this.sessionManager.appendModelChange(nextModel.provider, nextModel.id);\n\t\t_beginFallbackModelScope.call(this);\n\t\tthis.agent.state.model = nextModel;\n\t\tconst thinkingChanged = await applyFallbackThinkingLevel.call(this, nextLevel);\n\t\tthis._fallbackAttemptedKeys.add(fallbackKey(currentModel, currentThinkingLevel));\n\t\tif (this._retryAttempt > 0) {\n\t\t\tthis._emit({\n\t\t\t\ttype: \"auto_retry_end\",\n\t\t\t\tsuccess: true,\n\t\t\t\tattempt: Math.max(0, this._retryAttempt - 1),\n\t\t\t});\n\t\t}\n\t\tthis._fallbackAttemptedKeys.add(key);\n\t\tthis._emit({\n\t\t\ttype: \"model_fallback_start\",\n\t\t\tfrom: modelLabel(fromModel),\n\t\t\tto: `${nextModel.provider}/${nextModel.id}`,\n\t\t\treason: message.errorMessage || \"Retryable model error\",\n\t\t\tattempt: this._fallbackAttemptedKeys.size - 1,\n\t\t});\n\t\tif (thinkingChanged) {\n\t\t\tthis._emit({ type: \"thinking_level_changed\", level: nextLevel });\n\t\t\tvoid this._extensionRunner?.emit({\n\t\t\t\ttype: \"thinking_level_select\",\n\t\t\t\tlevel: nextLevel,\n\t\t\t\tpreviousLevel: currentThinkingLevel,\n\t\t\t});\n\t\t}\n\n\t\tthis._refreshBaseSystemPromptFromActiveTools();\n\t\tthis._emitModelChanged(nextModel, fromModel, \"fallback\");\n\t\tawait this._emitModelSelect(nextModel, fromModel, \"fallback\");\n\t\tthis._retryAttempt = 0;\n\n\t\tconst fallbackGeneration = this._fallbackOriginGeneration;\n\t\tsetTimeout(() => {\n\t\t\tif (this._agentRunAbortRequested) return;\n\t\t\tvoid this.agent.continue().catch(async (error: unknown) => {\n\t\t\t\tconst finalError = error instanceof Error ? error.message : String(error);\n\t\t\t\tif (this._fallbackOriginGeneration === fallbackGeneration) {\n\t\t\t\t\tthis._fallbackRestoreError = finalError;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait this._settleFallbackModelScope();\n\t\t\t\t\t} catch {\n\t\t\t\t\t\tif (this._fallbackOriginGeneration === fallbackGeneration) {\n\t\t\t\t\t\t\tfinishFallbackModelScope.call(this, {\n\t\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\t\tfrom: modelLabel(this.agent.state.model ?? this.model),\n\t\t\t\t\t\t\t\tfinalError,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tthis._retryAttempt = 0;\n\t\t\t\tthis._resolveRetry();\n\t\t\t});\n\t\t}, 0);\n\t\treturn true;\n\t}\n\tif (this._fallbackOriginModel !== undefined) {\n\t\tthis._fallbackRestoreError = message.errorMessage || \"Model fallback exhausted\";\n\t}\n\treturn false;\n}\n\nexport async function _handleRetryableError(this: AgentSession, message: AssistantMessage): Promise<boolean> {\n\tif (this._agentRunAbortRequested) return false;\n\tconst settings = this.settingsManager.getRetrySettings();\n\tconst retryableError = this._isRetryableError?.(message) ?? true;\n\tconst fallbackableError = this._isFallbackableError?.(message) ?? retryableError;\n\tconst emptyCompletion = this._isEmptyCompletion?.(message) ?? false;\n\tconst safetyRefusal = this._isSafetyRefusal?.(message) ?? false;\n\tconst canRetrySameModel = retryableError || emptyCompletion || safetyRefusal;\n\t// Empty completions have historically been allowed to spend a fallback after\n\t// same-model retries. Provider safety refusals stay on the same model.\n\tconst canAdvanceToFallback = fallbackableError || emptyCompletion;\n\tif (!settings.enabled || !canRetrySameModel) {\n\t\tif (canAdvanceToFallback && (await this._trySwitchToFallbackModel(message))) return true;\n\t\tif (this._retryAttempt > 0) {\n\t\t\tthis._emit({\n\t\t\t\ttype: \"auto_retry_end\",\n\t\t\t\tsuccess: false,\n\t\t\t\tattempt: this._retryAttempt,\n\t\t\t\tfinalError: message.errorMessage,\n\t\t\t});\n\t\t}\n\t\tthis._retryAttempt = 0;\n\t\tthis._resolveRetry();\n\t\treturn false;\n\t}\n\n\t// Retry promise is created synchronously in _handleAgentEvent for agent_end.\n\t// Keep a defensive fallback here in case a future refactor bypasses that path.\n\tif (!this._retryPromise) {\n\t\tthis._retryPromise = new Promise((resolve) => {\n\t\t\tthis._retryResolve = resolve;\n\t\t});\n\t}\n\n\t// One shared policy decides the bounded same-model budget and its backoff, so\n\t// main chat and workflow stages cannot drift apart on the same settings. The\n\t// counter still advances on the exhausting attempt, so `_trySwitchToFallbackModel`\n\t// closes the retry lifecycle before the fallback lifecycle opens.\n\tconst decision = nextRetryDecision(settings, this._retryAttempt, canRetrySameModel, message);\n\tthis._retryAttempt += 1;\n\tif (decision === undefined) {\n\t\tif (canAdvanceToFallback && (await this._trySwitchToFallbackModel(message))) {\n\t\t\treturn true;\n\t\t}\n\t\t// Max retries exceeded, emit final failure and reset\n\t\tthis._emit({\n\t\t\ttype: \"auto_retry_end\",\n\t\t\tsuccess: false,\n\t\t\tattempt: this._retryAttempt - 1,\n\t\t\tfinalError: message.errorMessage,\n\t\t});\n\t\tthis._retryAttempt = 0;\n\t\tthis._resolveRetry(); // Resolve so waitForRetry() completes\n\t\treturn false;\n\t}\n\n\tconst delayMs = decision.delayMs;\n\n\tthis._retryAbortController = new AbortController();\n\tthis._emit({\n\t\ttype: \"auto_retry_start\",\n\t\tattempt: this._retryAttempt,\n\t\tmaxAttempts: settings.maxRetries,\n\t\tdelayMs,\n\t\terrorMessage: message.errorMessage || \"Unknown error\",\n\t});\n\n\t// Keep the failed attempt in raw history while durably omitting it from model projection.\n\tawait this._omitTrailingAssistantAttempt();\n\n\t// Wait with exponential backoff (abortable)\n\tif (this._agentRunAbortRequested) this._retryAbortController.abort();\n\ttry {\n\t\tawait sleep(delayMs, this._retryAbortController.signal);\n\t} catch {\n\t\t// Aborted during sleep - emit end event so UI can clean up\n\t\tfinishCancelledRetry.call(this);\n\t\tthis._retryAbortController = undefined;\n\t\tthis._resolveRetry();\n\t\treturn false;\n\t}\n\tthis._retryAbortController = undefined;\n\n\t// Retry via continue() - use setTimeout to break out of event handler chain\n\tsetTimeout(() => {\n\t\tif (this._agentRunAbortRequested) {\n\t\t\tfinishCancelledRetry.call(this);\n\t\t\treturn;\n\t\t}\n\t\tthis.agent.continue().catch(() => {\n\t\t\t// Retry failed - will be caught by next agent_end\n\t\t});\n\t}, 0);\n\n\treturn true;\n}\n\n/**\n * Cancel in-progress retry.\n */\n\nfunction finishCancelledRetry(this: AgentSession): void {\n\tif (this._retryAttempt === 0) return;\n\tconst attempt = this._retryAttempt;\n\tthis._retryAttempt = 0;\n\tthis._emit({ type: \"auto_retry_end\", success: false, attempt, finalError: \"Retry cancelled\" });\n}\n\nexport function abortRetry(this: AgentSession): void {\n\tthis._retryAbortController?.abort();\n\tfinishCancelledRetry.call(this);\n\tthis._resolveRetry();\n}\n\n/**\n * Wait for any in-progress retry to complete.\n * Returns immediately if no retry is in progress.\n */\n\nexport async function waitForRetry(this: AgentSession): Promise<void> {\n\tif (!this._retryPromise) {\n\t\treturn;\n\t}\n\n\tawait this._retryPromise;\n\tawait this.agent.waitForIdle();\n}\n\n/** Whether auto-retry is currently in progress */\n\nexport function setAutoRetryEnabled(this: AgentSession, enabled: boolean): void {\n\tsettingsWriteOwner.run(this, () => this.settingsManager.setRetryEnabled(enabled));\n}\n\n// =========================================================================\n// Bash Execution\n// =========================================================================\n\n/**\n * Execute a bash command.\n * Adds result to agent context and session.\n * @param command The bash command to execute\n * @param onChunk Optional streaming callback for output\n * @param options.excludeFromContext If true, command output won't be sent to LLM (!! prefix)\n * @param options.operations Custom BashOperations for remote execution\n */\n\nexport const agentSessionRetryMethods = {\n\t_isRetryableError,\n\t_isFallbackableError,\n\t_isEmptyCompletion,\n\t_isSafetyRefusal,\n\t_handleRetryableError,\n\t_trySwitchToFallbackModel,\n\t_beginFallbackModelScope,\n\t_clearFallbackModelScope,\n\t_settleFallbackModelScope,\n\tabortRetry,\n\twaitForRetry,\n\tsetAutoRetryEnabled,\n};\n"]}
+{"version":3,"file":"agent-session-retry.js","sourceRoot":"","sources":["../../src/core/agent-session-retry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE9F,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,oBAAoB,IAAI,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAC3G,OAAO,EACN,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,GAC3B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,SAAS,UAAU,CAAC,KAA6B;IAChD,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;AAClE,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAgB,EAAE,KAAc,EAAE,IAAI,GAAG,IAAI,GAAG,EAAW;IAClG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACrF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,6BAA6B,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9F,CAAC;IACD,KAAK,MAAM,MAAM,IAAI;QACpB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,KAAK;QACZ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;KAChE,EAAE,CAAC;QACH,IAAI,8BAA8B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAE5B,KAAa;IAEb,OAAO,8BAA8B,CACpC,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC,eAAe,CAAC,kBAAkB,EAAE,CACjE,CAAC;AACH,CAAC;AAED,iHAAiH;AACjH,SAAS,wBAAwB;IAChC,OAAO,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC,uBAAuB,KAAK,KAAK,CAAC;AAClF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,oBAAoB,CAAqB,OAAyB;IACjF,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;IACrD,IAAI,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC1D,IAAI,QAAQ,IAAI,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAqB,OAAyB;IAC9E,IAAI,OAAO,CAAC,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAEjD,wDAAwD;IACxD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,IAAI,CAAC,CAAC;IACrD,IAAI,iBAAiB,CAAC,OAAO,EAAE,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC1D,IAAI,QAAQ,IAAI,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEhF,yGAAyG;IACzG,qGAAqG;IACrG,gGAAgG;IAChG,4EAA4E;IAC5E,IAAI,sBAAsB,CAAC,OAAO,CAAC,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;GAaG;AAEH,MAAM,UAAU,kBAAkB,CAAqB,OAAyB;IAC/E,kFAAkF;IAClF,uEAAuE;IACvE,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACxC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC7D,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC,CAAC,sCAAsC;QACpD,CAAC,CAAC,CAAC;QACH,IAAI,UAAU;YAAE,OAAO,KAAK,CAAC;IAC9B,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,6EAA6E;IAC7E,0DAA0D;IAC1D,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,6BAA6B,GAClC,yOAAyO,CAAC;AAE3O,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAAqB,OAAyB;IAC7E,2EAA2E;IAC3E,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1G,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAElE,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1G,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;YAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,gCAAgC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAE5D,2EAA2E;IAC3E,6DAA6D;IAC7D,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,0BAA0B,CAAqB,KAAoB;IACjF,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IAC3E,IAAI,aAAa,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO;IAClF,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,IAAI,CAAC,yBAAyB,GAAG,IAAI,CAAC,wBAAwB,CAAC;IAC/D,IAAI,CAAC,oBAAoB,GAAG,YAAY,CAAC;IACzC,IAAI,CAAC,4BAA4B,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IACzF,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;AACxC,CAAC;AAED,SAAS,4BAA4B;IACpC,IAAI,CAAC,yBAAyB,GAAG,SAAS,CAAC;IAC3C,IAAI,CAAC,oBAAoB,GAAG,SAAS,CAAC;IACtC,IAAI,CAAC,4BAA4B,GAAG,SAAS,CAAC;IAC9C,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;IACvC,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,CAAC,sBAAsB,CAAC,MAAM,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,wBAAwB,CAEhC,OAKC;IAED,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1G,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;QAC7D,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;KAC/E,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,wBAAwB;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC9C,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,IAAI,IAAI,CAAC,yBAAyB,KAAK,SAAS,EAAE,CAAC;QAC7F,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;YACnC,OAAO,EAAE,UAAU,KAAK,SAAS;YACjC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC;YAC9B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACnD,CAAC,CAAC;QACH,OAAO;IACR,CAAC;IACD,IAAI,CAAC,wBAAwB,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,yBAAyB;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC;IAC9C,MAAM,gBAAgB,GAAG,IAAI,CAAC,yBAAyB,CAAC;IACxD,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC;IAC9C,IAAI,WAAW,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjE,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,yBAAyB,KAAK,gBAAgB,IAAI,IAAI,CAAC,oBAAoB,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAEnH,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,OAAO,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;QAC1C,OAAO,EAAE,UAAU,KAAK,SAAS;QACjC,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC;QAC9B,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;KACnD,CAAC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAqB,OAAyB;IAC5F,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;IAC1D,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAElF,6EAA6E;IAC7E,6EAA6E;IAC7E,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC3F,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChD,CAAC;IACF,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,CAAC;IAClF,MAAM,SAAS,GAAG,YAAY,CAAC;IAC/B,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAChE,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC;QAClC,MAAM,SAAS,GAAG,kBAAkB,CACnC,SAAS,EACT,SAAS,CAAC,aAAa;YACtB,IAAI,CAAC,eAAe,CAAC,uBAAuB,EAAE;YAC9C,oBAAoB;YACpB,sBAAsB,CACN,CAAC;QACnB,IAAI,IAAI,CAAC,uBAAuB,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC;YAAE,SAAS;QAClG,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACnD,IAAI,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,SAAS,KAAK,oBAAoB;YAAE,SAAS;QACzF,2EAA2E;QAC3E,4BAA4B;QAC5B,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAAE,SAAS;QAEhG,uEAAuE;QACvE,sEAAsE;QAEtE,0FAA0F;QAC1F,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,cAAc,CAAC,iBAAiB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9E,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACnC,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;aAC5C,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC;YACV,IAAI,EAAE,sBAAsB;YAC5B,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC;YAC3B,EAAE,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,EAAE;YAC3C,MAAM,EAAE,OAAO,CAAC,YAAY,IAAI,uBAAuB;YACvD,OAAO,EAAE,IAAI,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,eAAe,EAAE,CAAC;YACrB,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,KAAK,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC;gBAChC,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,SAAS;gBAChB,aAAa,EAAE,oBAAoB;aACnC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,uCAAuC,EAAE,CAAC;QAC/C,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QAEvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,yBAAyB,CAAC;QAC1D,UAAU,CAAC,GAAG,EAAE;YACf,IAAI,IAAI,CAAC,uBAAuB;gBAAE,OAAO;YACzC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE;gBACzD,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC1E,IAAI,IAAI,CAAC,yBAAyB,KAAK,kBAAkB,EAAE,CAAC;oBAC3D,IAAI,CAAC,qBAAqB,GAAG,UAAU,CAAC;oBACxC,IAAI,CAAC;wBACJ,MAAM,IAAI,CAAC,yBAAyB,EAAE,CAAC;oBACxC,CAAC;oBAAC,MAAM,CAAC;wBACR,IAAI,IAAI,CAAC,yBAAyB,KAAK,kBAAkB,EAAE,CAAC;4BAC3D,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE;gCACnC,OAAO,EAAE,KAAK;gCACd,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;gCACtD,UAAU;6BACV,CAAC,CAAC;wBACJ,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;gBACvB,IAAI,CAAC,aAAa,EAAE,CAAC;YACtB,CAAC,CAAC,CAAC;QACJ,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC7C,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,YAAY,IAAI,0BAA0B,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAqB,OAAyB;IACxF,IAAI,IAAI,CAAC,uBAAuB;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IACjE,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACjF,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAChE,MAAM,iBAAiB,GAAG,cAAc,IAAI,eAAe,IAAI,aAAa,CAAC;IAC7E,6EAA6E;IAC7E,uEAAuE;IACvE,MAAM,oBAAoB,GAAG,iBAAiB,IAAI,eAAe,CAAC;IAClE,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,IAAI,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACzF,IAAI,IAAI,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC;gBACV,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,IAAI,CAAC,aAAa;gBAC3B,UAAU,EAAE,OAAO,CAAC,YAAY;aAChC,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,GAAG,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC9B,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,mFAAmF;IACnF,kEAAkE;IAClE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAC;IAC7F,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IACxB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,oBAAoB,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC;QACb,CAAC;QACD,qDAAqD;QACrD,IAAI,CAAC,KAAK,CAAC;YACV,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC;YAC/B,UAAU,EAAE,OAAO,CAAC,YAAY;SAChC,CAAC,CAAC;QACH,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,sCAAsC;QAC5D,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,CAAC,qBAAqB,GAAG,IAAI,eAAe,EAAE,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC;QACV,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,IAAI,CAAC,aAAa;QAC3B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,OAAO;QACP,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe;KACrD,CAAC,CAAC;IAEH,0FAA0F;IAC1F,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;IAE3C,4CAA4C;IAC5C,IAAI,IAAI,CAAC,uBAAuB;QAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;IACrE,IAAI,CAAC;QACJ,MAAM,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,2DAA2D;QAC3D,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;QACvC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,qBAAqB,GAAG,SAAS,CAAC;IAEvC,4EAA4E;IAC5E,UAAU,CAAC,GAAG,EAAE;QACf,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAClC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;QACR,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;YAChC,kDAAkD;QACnD,CAAC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,CAAC,CAAC;IAEN,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;GAEG;AAEH,SAAS,oBAAoB;IAC5B,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC;QAAE,OAAO;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,UAAU;IACzB,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,CAAC;IACpC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AAEH,MAAM,CAAC,KAAK,UAAU,YAAY;IACjC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,OAAO;IACR,CAAC;IAED,MAAM,IAAI,CAAC,aAAa,CAAC;IACzB,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,kDAAkD;AAElD,MAAM,UAAU,mBAAmB,CAAqB,OAAgB;IACvE,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,4EAA4E;AAC5E,iBAAiB;AACjB,4EAA4E;AAE5E;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,iBAAiB;IACjB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,qBAAqB;IACrB,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,yBAAyB;IACzB,UAAU;IACV,YAAY;IACZ,mBAAmB;CACnB,CAAC","sourcesContent":["import type { Api, AssistantMessage, Model } from \"@bastani/pi-ai/compat\";\nimport { clampThinkingLevel, isContextOverflow, modelsAreEqual } from \"@bastani/pi-ai/compat\";\nimport type { ThinkingLevel } from \"@earendil-works/pi-agent-core\";\nimport { sleep } from \"../utils/sleep.ts\";\nimport type { AgentSessionInternalSurface as AgentSession } from \"./agent-session-methods.ts\";\nimport { isCodexTokenInvalidationError } from \"./codex-errors.ts\";\nimport { DEFAULT_THINKING_LEVEL } from \"./defaults.ts\";\nimport { fallbackKey, resolveFallbackModel as resolveConfiguredFallbackModel } from \"./fallback-models.ts\";\nimport {\n\tisContentFilterRefusal,\n\tisRetryableModelFailure,\n\tisRetryableSameModelFailure,\n\tisSafetyRefusalFailure,\n\tnormalizeModelFailureSignal,\n} from \"./model-fallback-failures.ts\";\nimport { nextRetryDecision } from \"./retry-policy.ts\";\nimport { settingsWriteOwner } from \"./settings-write-ownership.ts\";\n\nfunction modelLabel(model: Model<Api> | undefined): string {\n\treturn model ? `${model.provider}/${model.id}` : \"unknown model\";\n}\n\nfunction containsCodexTokenInvalidation(provider: string, value: unknown, seen = new Set<unknown>()): boolean {\n\tif (value === null || value === undefined || seen.has(value)) return false;\n\tif (typeof value === \"string\") return isCodexTokenInvalidationError(provider, value);\n\tif (typeof value !== \"object\") return false;\n\tseen.add(value);\n\tconst record = value as Record<string, unknown>;\n\tfor (const field of [record.errorMessage, record.message, record.statusText]) {\n\t\tif (typeof field === \"string\" && isCodexTokenInvalidationError(provider, field)) return true;\n\t}\n\tfor (const nested of [\n\t\trecord.error,\n\t\trecord.cause,\n\t\t...(Array.isArray(record.diagnostics) ? record.diagnostics : []),\n\t]) {\n\t\tif (containsCodexTokenInvalidation(provider, nested, seen)) return true;\n\t}\n\treturn false;\n}\n\nfunction resolveFallbackModel(\n\tthis: AgentSession,\n\tvalue: string,\n): { model: Model<Api>; thinkingLevel?: ThinkingLevel } | undefined {\n\treturn resolveConfiguredFallbackModel(\n\t\tvalue,\n\t\tthis._modelRuntime,\n\t\tthis.model?.provider ?? this.settingsManager.getDefaultProvider(),\n\t);\n}\n\n/** `retry.fallbackOnContentFilter`: a content-filter refusal spends the next fallback candidate, not a retry. */\nfunction fallsBackOnContentFilter(this: AgentSession): boolean {\n\treturn this.settingsManager.getRetrySettings().fallbackOnContentFilter !== false;\n}\n\n/** Whether an assistant error may advance the configured fallback chain. */\nexport function _isFallbackableError(this: AgentSession, message: AssistantMessage): boolean {\n\tif (message.stopReason !== \"error\") return false;\n\tconst contextWindow = this.model?.contextWindow ?? 0;\n\tif (isContextOverflow(message, contextWindow)) return false;\n\tconst provider = message.provider || this.model?.provider;\n\tif (provider && containsCodexTokenInvalidation(provider, message)) return true;\n\tconst signal = normalizeModelFailureSignal(message);\n\tif (signal.kind === \"cancelled\" || signal.kind === \"task_failure\") return false;\n\tif (signal.kind === \"content_filter\") return fallsBackOnContentFilter.call(this);\n\treturn isRetryableModelFailure(message);\n}\n\n/**\n * Whether the current model should be requested again.\n *\n * Fallback eligibility is broader than same-model retry eligibility. Auth and\n * request-incompatible failures should spend a fallback candidate, but cannot\n * be repaired by sending the same request again. Codex token invalidation is\n * also terminal for the current model while remaining fallbackable.\n */\nexport function _isRetryableError(this: AgentSession, message: AssistantMessage): boolean {\n\tif (message.stopReason !== \"error\") return false;\n\n\t// Context overflow is handled by compaction, not retry.\n\tconst contextWindow = this.model?.contextWindow ?? 0;\n\tif (isContextOverflow(message, contextWindow)) return false;\n\n\tconst provider = message.provider || this.model?.provider;\n\tif (provider && containsCodexTokenInvalidation(provider, message)) return false;\n\n\t// The same request gets the same content-filter refusal, so with `retry.fallbackOnContentFilter` it goes\n\t// straight to the next fallback candidate. Otherwise safety/refusal errors remain bounded same-model\n\t// retries that do not spend another provider candidate. The refusal grammar lives in the shared\n\t// classifier so this decision cannot drift from workflow fallback handling.\n\tif (isContentFilterRefusal(message) && fallsBackOnContentFilter.call(this)) return false;\n\tif (isSafetyRefusalFailure(message)) return true;\n\treturn isRetryableSameModelFailure(message);\n}\n\n/**\n * Detect a degenerate empty completion: the provider ended the stream with no\n * usable content and zero output tokens. Seen with github-copilot Gemini models\n * that emit finish_reason \"stop\" (or a tool-use stop) with an empty content array\n * and 0 output tokens, leaving the turn dead instead of producing the next step.\n *\n * These are treated as retryable so the harness re-issues the request rather than\n * silently stopping mid-task. Guarded tightly (no text, no tool call, no thinking,\n * and output === 0) so legitimate non-empty turns are never matched.\n *\n * Intentionally provider-agnostic (not gated to Copilot Gemini): a degenerate\n * empty turn is a transient failure for any provider. It is bounded by\n * `maxRetries` and falls through to normal handling on exhaustion.\n */\n\nexport function _isEmptyCompletion(this: AgentSession, message: AssistantMessage): boolean {\n\t// Only \"completed\" stop reasons can be deceptively empty. Real errors are handled\n\t// by _isRetryableError; aborted/length turns are intentional outcomes.\n\tif (message.stopReason !== \"stop\" && message.stopReason !== \"toolUse\") return false;\n\n\tconst content = message.content;\n\tif (Array.isArray(content)) {\n\t\tconst hasContent = content.some((part) => {\n\t\t\tif (part.type === \"text\") return part.text.trim().length > 0;\n\t\t\tif (part.type === \"toolCall\") return true;\n\t\t\tif (part.type === \"thinking\") return part.redacted === true || part.thinking.trim().length > 0;\n\t\t\treturn true; // unknown part types count as content\n\t\t});\n\t\tif (hasContent) return false;\n\t}\n\n\t// A turn that produced output tokens but no surfaced content is not \"empty\"\n\t// (e.g. reasoning-only responses); leave those alone. Note: a provider that\n\t// fails to report `usage` (output defaults to 0) would make every\n\t// content-less turn match here; the dual requirement (empty content AND zero\n\t// output) keeps that false-positive risk low in practice.\n\treturn (message.usage?.output ?? 0) === 0;\n}\n\n/**\n * Detect a canned provider-side safety refusal that arrives as a *successful*\n * completion instead of an error. Seen with github-copilot GPT models under\n * heavy contexts: the endpoint intercepts the request and returns exactly\n * \"I'm sorry, but I cannot assist with that request.\" with zero usage and a\n * spurious stopReason of \"length\" (or \"stop\"), which the agent would otherwise\n * accept as the final answer and dead-end the turn (issue #1608).\n *\n * A text heuristic is unavoidable here: the OpenAI Responses API does signal\n * these interceptions structurally (`refusal` content parts plus\n * `incomplete_details.reason: \"content_filter\"`), but pi-ai's normalization\n * folds refusal parts into plain text blocks and collapses the `incomplete`\n * status to stopReason \"length\", discarding the reason — so no structured\n * refusal marker survives on the AssistantMessage. Providers whose safety\n * signals DO survive as structured errors (Anthropic refusal stops, OpenAI\n * `finish_reason: content_filter`) are matched in _isRetryableError instead.\n *\n * Guarded tightly so legitimate turns are never matched:\n * - only non-error completion stops (\"stop\" | \"length\" | \"toolUse\");\n * - content must be a single short canned refusal text — any tool call,\n *   thinking block, or additional prose disqualifies the message;\n * - usage.output must be 0: a genuine model-authored refusal bills output\n *   tokens, while the intercepted canned refusal reports zero usage.\n *\n * Treated as retryable so the harness re-requests the model call rather than\n * accepting the refusal; bounded by `maxRetries` like every other retry path.\n */\n\nconst CANNED_SAFETY_REFUSAL_PATTERN =\n\t/^(?:i['’]?m sorry[,.]?\\s+(?:but\\s+)?|sorry[,.]?\\s+(?:but\\s+)?)?i\\s+(?:cannot|can['’]?t|can\\s+not|am\\s+unable\\s+to|am\\s+not\\s+able\\s+to)\\s+(?:assist|help|comply|continue)(?:\\s+with)?(?:\\s+(?:that|this))?(?:\\s+(?:request|task))?\\.?$/i;\n\nconst CANNED_SAFETY_REFUSAL_MAX_LENGTH = 120;\n\nexport function _isSafetyRefusal(this: AgentSession, message: AssistantMessage): boolean {\n\t// Real errors are handled by _isRetryableError; aborts are user-initiated.\n\tif (message.stopReason !== \"stop\" && message.stopReason !== \"length\" && message.stopReason !== \"toolUse\") {\n\t\treturn false;\n\t}\n\n\tconst content = message.content;\n\tif (!Array.isArray(content) || content.length === 0) return false;\n\n\tlet text = \"\";\n\tfor (const part of content) {\n\t\tif (part.type === \"toolCall\") return false;\n\t\tif (part.type === \"thinking\" && (part.redacted === true || part.thinking.trim().length > 0)) return false;\n\t\tif (part.type === \"text\") text += part.text;\n\t}\n\ttext = text.trim();\n\tif (text.length === 0 || text.length > CANNED_SAFETY_REFUSAL_MAX_LENGTH) return false;\n\tif (!CANNED_SAFETY_REFUSAL_PATTERN.test(text)) return false;\n\n\t// Zero billed output distinguishes a provider interception from legitimate\n\t// model-authored refusal prose, which is never auto-retried.\n\treturn (message.usage?.output ?? 0) === 0;\n}\n\nasync function applyFallbackThinkingLevel(this: AgentSession, level: ThinkingLevel): Promise<boolean> {\n\tconst previousLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tif (previousLevel === level) return false;\n\tawait this.sessionManager.appendThinkingLevelChange(level);\n\tthis.agent.state.thinkingLevel = level;\n\treturn true;\n}\n\n/** Capture the user-selected model before the first fallback in a turn. */\nexport function _beginFallbackModelScope(this: AgentSession): void {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tif (this._fallbackOriginModel !== undefined || currentModel === undefined) return;\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tthis._fallbackOriginGeneration = this._fallbackScopeGeneration;\n\tthis._fallbackOriginModel = currentModel;\n\tthis._fallbackOriginThinkingLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tthis._fallbackRestoreError = undefined;\n}\n\nfunction clearFallbackModelScopeState(this: AgentSession): void {\n\tthis._fallbackOriginGeneration = undefined;\n\tthis._fallbackOriginModel = undefined;\n\tthis._fallbackOriginThinkingLevel = undefined;\n\tthis._fallbackRestoreError = undefined;\n\tthis._fallbackAttemptedKeys.clear();\n\tthis._fallbackBlockedModels.length = 0;\n}\n\nfunction finishFallbackModelScope(\n\tthis: AgentSession,\n\toptions: {\n\t\treadonly success: boolean;\n\t\treadonly from?: string;\n\t\treadonly to?: string;\n\t\treadonly finalError?: string;\n\t},\n): boolean {\n\tif (this._fallbackOriginModel === undefined || this._fallbackOriginGeneration === undefined) return false;\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tclearFallbackModelScopeState.call(this);\n\tthis._emit({\n\t\ttype: \"model_fallback_end\",\n\t\tsuccess: options.success,\n\t\t...(options.from === undefined ? {} : { from: options.from }),\n\t\t...(options.to === undefined ? {} : { to: options.to }),\n\t\t...(options.finalError === undefined ? {} : { finalError: options.finalError }),\n\t});\n\treturn true;\n}\n\n/** Finish an active fallback lifecycle before an explicit model choice. */\nexport function _clearFallbackModelScope(this: AgentSession): void {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tconst finalError = this._fallbackRestoreError;\n\tif (this._fallbackOriginModel !== undefined && this._fallbackOriginGeneration !== undefined) {\n\t\tfinishFallbackModelScope.call(this, {\n\t\t\tsuccess: finalError === undefined,\n\t\t\tfrom: modelLabel(currentModel),\n\t\t\t...(finalError === undefined ? {} : { finalError }),\n\t\t});\n\t\treturn;\n\t}\n\tthis._fallbackScopeGeneration = (this._fallbackScopeGeneration ?? 0) + 1;\n\tclearFallbackModelScopeState.call(this);\n}\n\n/** Finish an active fallback lifecycle without changing the selected fallback model. */\nexport async function _settleFallbackModelScope(this: AgentSession): Promise<boolean> {\n\tconst originModel = this._fallbackOriginModel;\n\tconst originGeneration = this._fallbackOriginGeneration;\n\tconst finalError = this._fallbackRestoreError;\n\tif (originModel === undefined || originGeneration === undefined) {\n\t\tclearFallbackModelScopeState.call(this);\n\t\treturn false;\n\t}\n\tif (this._fallbackOriginGeneration !== originGeneration || this._fallbackOriginModel !== originModel) return false;\n\n\tconst currentModel = this.agent.state.model ?? this.model;\n\treturn finishFallbackModelScope.call(this, {\n\t\tsuccess: finalError === undefined,\n\t\tfrom: modelLabel(currentModel),\n\t\t...(finalError === undefined ? {} : { finalError }),\n\t});\n}\n\n/** Handle retryable errors with exponential backoff. */\nexport async function _trySwitchToFallbackModel(this: AgentSession, message: AssistantMessage): Promise<boolean> {\n\tconst currentModel = this.agent.state.model ?? this.model;\n\tif (this._fallbackModels.length === 0 || currentModel === undefined) return false;\n\n\t// A failure the chain may spend a candidate on, but that requesting the same\n\t// model again cannot repair — a rejected credential, an unavailable model, a\n\t// request this model cannot serve — condemns that model for the rest of the\n\t// turn. Reasoning level does not change any of those answers, so every\n\t// reasoning variant of it is blocked too. Transient rate-limit and transport\n\t// failures stay same-model retryable and keep their reasoning variants.\n\tif (isRetryableModelFailure(message) && !isRetryableSameModelFailure(message)) {\n\t\tif (!this._fallbackBlockedModels.some((blocked) => modelsAreEqual(blocked, currentModel))) {\n\t\t\tthis._fallbackBlockedModels.push(currentModel);\n\t\t}\n\t}\n\n\tconst currentThinkingLevel = this.agent.state.thinkingLevel ?? this.thinkingLevel;\n\tconst fromModel = currentModel;\n\tfor (const rawCandidate of this._fallbackModels) {\n\t\tconst candidate = resolveFallbackModel.call(this, rawCandidate);\n\t\tif (!candidate) continue;\n\t\tconst nextModel = candidate.model;\n\t\tconst nextLevel = clampThinkingLevel(\n\t\t\tnextModel,\n\t\t\tcandidate.thinkingLevel ??\n\t\t\t\tthis.settingsManager.getDefaultThinkingLevel() ??\n\t\t\t\tcurrentThinkingLevel ??\n\t\t\t\tDEFAULT_THINKING_LEVEL,\n\t\t) as ThinkingLevel;\n\t\tif (this._isFallbackModelAllowed && !this._isFallbackModelAllowed(nextModel, nextLevel)) continue;\n\t\tconst key = fallbackKey(nextModel, nextLevel);\n\t\tif (this._fallbackAttemptedKeys.has(key)) continue;\n\t\tif (modelsAreEqual(nextModel, fromModel) && nextLevel === currentThinkingLevel) continue;\n\t\t// Skipped before any lifecycle starts: a blocked variant emits no fallback\n\t\t// event and opens no scope.\n\t\tif (this._fallbackBlockedModels.some((blocked) => modelsAreEqual(blocked, nextModel))) continue;\n\n\t\t// Do not create a fallback lifecycle until a candidate can actually be\n\t\t// selected. An exhausted or unresolvable chain has no start to close.\n\n\t\t// Keep the failed attempt in raw history while durably omitting it from model projection.\n\t\tawait this._omitTrailingAssistantAttempt();\n\t\tawait this.sessionManager.appendModelChange(nextModel.provider, nextModel.id);\n\t\t_beginFallbackModelScope.call(this);\n\t\tthis.agent.state.model = nextModel;\n\t\tconst thinkingChanged = await applyFallbackThinkingLevel.call(this, nextLevel);\n\t\tthis._fallbackAttemptedKeys.add(fallbackKey(currentModel, currentThinkingLevel));\n\t\tif (this._retryAttempt > 0) {\n\t\t\tthis._emit({\n\t\t\t\ttype: \"auto_retry_end\",\n\t\t\t\tsuccess: true,\n\t\t\t\tattempt: Math.max(0, this._retryAttempt - 1),\n\t\t\t});\n\t\t}\n\t\tthis._fallbackAttemptedKeys.add(key);\n\t\tthis._emit({\n\t\t\ttype: \"model_fallback_start\",\n\t\t\tfrom: modelLabel(fromModel),\n\t\t\tto: `${nextModel.provider}/${nextModel.id}`,\n\t\t\treason: message.errorMessage || \"Retryable model error\",\n\t\t\tattempt: this._fallbackAttemptedKeys.size - 1,\n\t\t});\n\t\tif (thinkingChanged) {\n\t\t\tthis._emit({ type: \"thinking_level_changed\", level: nextLevel });\n\t\t\tvoid this._extensionRunner?.emit({\n\t\t\t\ttype: \"thinking_level_select\",\n\t\t\t\tlevel: nextLevel,\n\t\t\t\tpreviousLevel: currentThinkingLevel,\n\t\t\t});\n\t\t}\n\n\t\tthis._refreshBaseSystemPromptFromActiveTools();\n\t\tthis._emitModelChanged(nextModel, fromModel, \"fallback\");\n\t\tawait this._emitModelSelect(nextModel, fromModel, \"fallback\");\n\t\tthis._retryAttempt = 0;\n\n\t\tconst fallbackGeneration = this._fallbackOriginGeneration;\n\t\tsetTimeout(() => {\n\t\t\tif (this._agentRunAbortRequested) return;\n\t\t\tvoid this.agent.continue().catch(async (error: unknown) => {\n\t\t\t\tconst finalError = error instanceof Error ? error.message : String(error);\n\t\t\t\tif (this._fallbackOriginGeneration === fallbackGeneration) {\n\t\t\t\t\tthis._fallbackRestoreError = finalError;\n\t\t\t\t\ttry {\n\t\t\t\t\t\tawait this._settleFallbackModelScope();\n\t\t\t\t\t} catch {\n\t\t\t\t\t\tif (this._fallbackOriginGeneration === fallbackGeneration) {\n\t\t\t\t\t\t\tfinishFallbackModelScope.call(this, {\n\t\t\t\t\t\t\t\tsuccess: false,\n\t\t\t\t\t\t\t\tfrom: modelLabel(this.agent.state.model ?? this.model),\n\t\t\t\t\t\t\t\tfinalError,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tthis._retryAttempt = 0;\n\t\t\t\tthis._resolveRetry();\n\t\t\t});\n\t\t}, 0);\n\t\treturn true;\n\t}\n\tif (this._fallbackOriginModel !== undefined) {\n\t\tthis._fallbackRestoreError = message.errorMessage || \"Model fallback exhausted\";\n\t}\n\treturn false;\n}\n\nexport async function _handleRetryableError(this: AgentSession, message: AssistantMessage): Promise<boolean> {\n\tif (this._agentRunAbortRequested) return false;\n\tconst settings = this.settingsManager.getRetrySettings();\n\tconst retryableError = this._isRetryableError?.(message) ?? true;\n\tconst fallbackableError = this._isFallbackableError?.(message) ?? retryableError;\n\tconst emptyCompletion = this._isEmptyCompletion?.(message) ?? false;\n\tconst safetyRefusal = this._isSafetyRefusal?.(message) ?? false;\n\tconst canRetrySameModel = retryableError || emptyCompletion || safetyRefusal;\n\t// Empty completions have historically been allowed to spend a fallback after\n\t// same-model retries. Provider safety refusals stay on the same model.\n\tconst canAdvanceToFallback = fallbackableError || emptyCompletion;\n\tif (!settings.enabled || !canRetrySameModel) {\n\t\tif (canAdvanceToFallback && (await this._trySwitchToFallbackModel(message))) return true;\n\t\tif (this._retryAttempt > 0) {\n\t\t\tthis._emit({\n\t\t\t\ttype: \"auto_retry_end\",\n\t\t\t\tsuccess: false,\n\t\t\t\tattempt: this._retryAttempt,\n\t\t\t\tfinalError: message.errorMessage,\n\t\t\t});\n\t\t}\n\t\tthis._retryAttempt = 0;\n\t\tthis._resolveRetry();\n\t\treturn false;\n\t}\n\n\t// Retry promise is created synchronously in _handleAgentEvent for agent_end.\n\t// Keep a defensive fallback here in case a future refactor bypasses that path.\n\tif (!this._retryPromise) {\n\t\tthis._retryPromise = new Promise((resolve) => {\n\t\t\tthis._retryResolve = resolve;\n\t\t});\n\t}\n\n\t// One shared policy decides the bounded same-model budget and its backoff, so\n\t// main chat and workflow stages cannot drift apart on the same settings. The\n\t// counter still advances on the exhausting attempt, so `_trySwitchToFallbackModel`\n\t// closes the retry lifecycle before the fallback lifecycle opens.\n\tconst decision = nextRetryDecision(settings, this._retryAttempt, canRetrySameModel, message);\n\tthis._retryAttempt += 1;\n\tif (decision === undefined) {\n\t\tif (canAdvanceToFallback && (await this._trySwitchToFallbackModel(message))) {\n\t\t\treturn true;\n\t\t}\n\t\t// Max retries exceeded, emit final failure and reset\n\t\tthis._emit({\n\t\t\ttype: \"auto_retry_end\",\n\t\t\tsuccess: false,\n\t\t\tattempt: this._retryAttempt - 1,\n\t\t\tfinalError: message.errorMessage,\n\t\t});\n\t\tthis._retryAttempt = 0;\n\t\tthis._resolveRetry(); // Resolve so waitForRetry() completes\n\t\treturn false;\n\t}\n\n\tconst delayMs = decision.delayMs;\n\n\tthis._retryAbortController = new AbortController();\n\tthis._emit({\n\t\ttype: \"auto_retry_start\",\n\t\tattempt: this._retryAttempt,\n\t\tmaxAttempts: settings.maxRetries,\n\t\tdelayMs,\n\t\terrorMessage: message.errorMessage || \"Unknown error\",\n\t});\n\n\t// Keep the failed attempt in raw history while durably omitting it from model projection.\n\tawait this._omitTrailingAssistantAttempt();\n\n\t// Wait with exponential backoff (abortable)\n\tif (this._agentRunAbortRequested) this._retryAbortController.abort();\n\ttry {\n\t\tawait sleep(delayMs, this._retryAbortController.signal);\n\t} catch {\n\t\t// Aborted during sleep - emit end event so UI can clean up\n\t\tfinishCancelledRetry.call(this);\n\t\tthis._retryAbortController = undefined;\n\t\tthis._resolveRetry();\n\t\treturn false;\n\t}\n\tthis._retryAbortController = undefined;\n\n\t// Retry via continue() - use setTimeout to break out of event handler chain\n\tsetTimeout(() => {\n\t\tif (this._agentRunAbortRequested) {\n\t\t\tfinishCancelledRetry.call(this);\n\t\t\treturn;\n\t\t}\n\t\tthis.agent.continue().catch(() => {\n\t\t\t// Retry failed - will be caught by next agent_end\n\t\t});\n\t}, 0);\n\n\treturn true;\n}\n\n/**\n * Cancel in-progress retry.\n */\n\nfunction finishCancelledRetry(this: AgentSession): void {\n\tif (this._retryAttempt === 0) return;\n\tconst attempt = this._retryAttempt;\n\tthis._retryAttempt = 0;\n\tthis._emit({ type: \"auto_retry_end\", success: false, attempt, finalError: \"Retry cancelled\" });\n}\n\nexport function abortRetry(this: AgentSession): void {\n\tthis._retryAbortController?.abort();\n\tfinishCancelledRetry.call(this);\n\tthis._resolveRetry();\n}\n\n/**\n * Wait for any in-progress retry to complete.\n * Returns immediately if no retry is in progress.\n */\n\nexport async function waitForRetry(this: AgentSession): Promise<void> {\n\tif (!this._retryPromise) {\n\t\treturn;\n\t}\n\n\tawait this._retryPromise;\n\tawait this.agent.waitForIdle();\n}\n\n/** Whether auto-retry is currently in progress */\n\nexport function setAutoRetryEnabled(this: AgentSession, enabled: boolean): void {\n\tsettingsWriteOwner.run(this, () => this.settingsManager.setRetryEnabled(enabled));\n}\n\n// =========================================================================\n// Bash Execution\n// =========================================================================\n\n/**\n * Execute a bash command.\n * Adds result to agent context and session.\n * @param command The bash command to execute\n * @param onChunk Optional streaming callback for output\n * @param options.excludeFromContext If true, command output won't be sent to LLM (!! prefix)\n * @param options.operations Custom BashOperations for remote execution\n */\n\nexport const agentSessionRetryMethods = {\n\t_isRetryableError,\n\t_isFallbackableError,\n\t_isEmptyCompletion,\n\t_isSafetyRefusal,\n\t_handleRetryableError,\n\t_trySwitchToFallbackModel,\n\t_beginFallbackModelScope,\n\t_clearFallbackModelScope,\n\t_settleFallbackModelScope,\n\tabortRetry,\n\twaitForRetry,\n\tsetAutoRetryEnabled,\n};\n"]}

package/dist/core/model-fallback-failures.d.ts

@@ -6,7 +6,7 @@
  * module free of AgentSession and workflow imports so the published SDK can
  * expose it to the raw-TypeScript companion packages without a cycle.
  */
-export type ModelFallbackFailureKind = "auth_on_candidate_provider" | "rate_limit" | "quota_exhausted" | "provider_unavailable" | "network_timeout" | "transport_error" | "model_unavailable" | "request_incompatible" | "cancelled" | "task_failure" | "unknown";
+export type ModelFallbackFailureKind = "auth_on_candidate_provider" | "rate_limit" | "quota_exhausted" | "provider_unavailable" | "network_timeout" | "transport_error" | "model_unavailable" | "request_incompatible" | "content_filter" | "cancelled" | "task_failure" | "unknown";
 export type ModelFallbackFailureSource = "assistant_message" | "diagnostic" | "throw" | "structured" | "string_fallback";
 export interface ModelFallbackFailureSignal {
     readonly kind: ModelFallbackFailureKind;
@@ -17,14 +17,24 @@ export interface ModelFallbackFailureSignal {
     readonly code?: string | number;
     readonly name?: string;
 }
+/** How a caller treats a provider content-filter refusal; `retry.fallbackOnContentFilter` in settings. */
+export interface ModelFallbackFailureOptions {
+    /** Whether a content-filter refusal may spend the next fallback candidate. Defaults to true. */
+    readonly fallbackOnContentFilter?: boolean;
+}
 export declare function errorMessage(error: unknown): string;
 /** Alias used by the subagent package's older public helper name. */
 export declare const modelFailureMessage: typeof errorMessage;
 export declare function normalizeModelFailureSignal(error: unknown): ModelFallbackFailureSignal;
-/** Whether a task-failure signal is a provider safety/refusal response. */
+/** Whether a failure is a provider safety/refusal response: a content-filter refusal, or a refused tool call. */
 export declare function isSafetyRefusalFailure(error: unknown): boolean;
-/** True when this failure may spend a configured model fallback candidate. */
-export declare function isRetryableModelFailure(error: unknown): boolean;
+/** Whether a provider's content filter refused the request, as OpenAI's HTTP 422 `cyber_policy` does. */
+export declare function isContentFilterRefusal(error: unknown): boolean;
+/**
+ * True when this failure may spend a configured model fallback candidate. A content-filter refusal does unless
+ * `options.fallbackOnContentFilter` is false.
+ */
+export declare function isRetryableModelFailure(error: unknown, options?: ModelFallbackFailureOptions): boolean;
 /** True when the same model may be requested again before fallback advances. */
 export declare function isRetryableSameModelFailure(error: unknown): boolean;
 //# sourceMappingURL=model-fallback-failures.d.ts.map

package/dist/core/model-fallback-failures.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-fallback-failures.d.ts","sourceRoot":"","sources":["../../src/core/model-fallback-failures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmFH,MAAM,MAAM,wBAAwB,GACjC,4BAA4B,GAC5B,YAAY,GACZ,iBAAiB,GACjB,sBAAsB,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,WAAW,GACX,cAAc,GACd,SAAS,CAAC;AAEb,MAAM,MAAM,0BAA0B,GACnC,mBAAmB,GACnB,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,iBAAiB,CAAC;AAErB,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAijBD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKnD;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,qBAAe,CAAC;AAEhD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAuBtF;AAED,2EAA2E;AAC3E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAK9D;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAG/D;AASD,gFAAgF;AAChF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAcnE"}
+{"version":3,"file":"model-fallback-failures.d.ts","sourceRoot":"","sources":["../../src/core/model-fallback-failures.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmFH,MAAM,MAAM,wBAAwB,GACjC,4BAA4B,GAC5B,YAAY,GACZ,iBAAiB,GACjB,sBAAsB,GACtB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,SAAS,CAAC;AAEb,MAAM,MAAM,0BAA0B,GACnC,mBAAmB,GACnB,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,iBAAiB,CAAC;AAErB,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,0GAA0G;AAC1G,MAAM,WAAW,2BAA2B;IAC3C,gGAAgG;IAChG,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC3C;AAikBD,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKnD;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,qBAAe,CAAC;AAEhD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAuBtF;AAED,iHAAiH;AACjH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAM9D;AAED,yGAAyG;AACzG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE9D;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,OAAO,CAKtG;AASD,gFAAgF;AAChF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAcnE"}

package/dist/core/model-fallback-failures.js

@@ -212,10 +212,14 @@ function refusalKindFromCode(code) {
     const normalizedCode = normalizeCode(code);
     if (normalizedCode === undefined)
         return undefined;
-    if (normalizedCode.includes("content_filter") || normalizedCode.includes("contentfilter"))
+    // A refused tool call, such as `tool_call_refusal` or `tool_use_refused_by_policy`, before the policy words.
+    if (/(?:^|_)tool(?:_|$)/.test(normalizedCode) && normalizedCode.includes("refus"))
         return "task_failure";
+    if (normalizedCode.includes("content_filter") || normalizedCode.includes("contentfilter"))
+        return "content_filter";
+    // Includes OpenAI's `cyber_policy`.
     if (normalizedCode.includes("safety") || normalizedCode.includes("policy"))
-        return "task_failure";
+        return "content_filter";
     switch (normalizedCode) {
         case "blocked":
         case "blocked_by_provider":
@@ -223,10 +227,7 @@ function refusalKindFromCode(code) {
         case "blocked_by_policy":
         case "provider_refusal":
         case "refusal":
-        case "tool_refusal":
-        case "tool_call_refusal":
-        case "tool_use_refusal":
-            return "task_failure";
+            return "content_filter";
         default:
             return undefined;
     }
@@ -331,17 +332,27 @@ const REQUEST_INCOMPATIBLE_FAILURE_PATTERNS = [
     /\binvalid[_\s-]?request(?:[_\s-]?error)?\b/i,
     /\bbad[_\s-]?request\b/i,
 ];
-const PROVIDER_REFUSAL_FAILURE_PATTERNS = [
+/** A provider declined the request's content under its usage policy: the model will refuse it again. */
+const CONTENT_FILTER_FAILURE_PATTERNS = [
     /\bthe\s+model\s+refused\s+to\s+complete\s+the\s+request\b/i,
     /\bfinish[_\s-]?reason\b[^\n]*\bcontent[_\s-]?filter\b/i,
     /\bcontent[_\s-]?filter(?:ed|ing)?\b/i,
+    /\bcyber[_\s-]?policy\b/i,
+    // OpenAI's cyber safeguard: "This content was flagged for possible cybersecurity risk."
+    /\bflagged\s+for\s+(?:possible|potential(?:ly)?)\b[^\n]*\b(?:risk|harm(?:ful)?|safety|policy|cyber\w*)\b/i,
     /\b(?:safety|policy)\b[^\n]*\b(?:refus(?:e|al|ed|es|ing)?|block(?:ed|ing)?|filter(?:ed|ing)?|violat(?:e|ion|ed|ing)?|disallow(?:ed|ing)?|reject(?:ed|ion|ing)?)\b/i,
     /\b(?:refus(?:e|al|ed|es|ing)?|block(?:ed|ing)?|filter(?:ed|ing)?|violat(?:e|ion|ed|ing)?|disallow(?:ed|ing)?|reject(?:ed|ion|ing)?)\b[^\n]*\b(?:safety|policy)\b/i,
+    /\bprovider[_\s-]?refus(?:e|al|ed|es|ing)?\b/i,
+    /\bprovider\b[^\n]*\brefus(?:e|al|ed|es|ing)?\b[^\n]*\b(?:prompt|request|content|policy|safety)\b/i,
+];
+const TOOL_REFUSAL_FAILURE_PATTERNS = [
     /\btool[_\s-]?(?:call|use)?[_\s-]?refus(?:e|al|ed|es|ing)?\b/i,
     /\btool(?:\s+call|\s+use)?\b[^\n]*\brefus(?:e|al|ed|es|ing)?\b/i,
     /\brefus(?:e|al|ed|es|ing)?\b[^\n]*\btool(?:\s+call|\s+use)?\b/i,
-    /\bprovider[_\s-]?refus(?:e|al|ed|es|ing)?\b/i,
-    /\bprovider\b[^\n]*\brefus(?:e|al|ed|es|ing)?\b[^\n]*\b(?:prompt|request|content|policy|safety)\b/i,
+];
+const PROVIDER_REFUSAL_FAILURE_PATTERNS = [
+    ...CONTENT_FILTER_FAILURE_PATTERNS,
+    ...TOOL_REFUSAL_FAILURE_PATTERNS,
 ];
 const TRANSPORT_OUTAGE_FAILURE_PATTERNS = [
     /^connection\s+error\.?$/i,
@@ -379,8 +390,12 @@ function refusalKindFromMessage(message) {
         return "cancelled";
     if (NON_RETRYABLE_FAILURE_PATTERNS.some((pattern) => pattern.test(message)))
         return "task_failure";
-    if (PROVIDER_REFUSAL_FAILURE_PATTERNS.some((pattern) => pattern.test(message)))
+    // A refused tool call is about that call, whatever policy the provider names: another model is asked the same
+    // tool call. So it is checked before the content-filter grammar, which "refused ... safety policy" also matches.
+    if (TOOL_REFUSAL_FAILURE_PATTERNS.some((pattern) => pattern.test(message)))
         return "task_failure";
+    if (CONTENT_FILTER_FAILURE_PATTERNS.some((pattern) => pattern.test(message)))
+        return "content_filter";
     return undefined;
 }
 function fallbackKindFromMessage(message, name) {
@@ -461,12 +476,13 @@ function classifyAssistantRefusalSignal(value, source) {
     return messageRefusalKind === undefined ? undefined : makeSignal(messageRefusalKind, value, source);
 }
 function isRefusalSignal(signal) {
-    return signal.kind === "cancelled" || signal.kind === "task_failure";
+    return signal.kind === "cancelled" || signal.kind === "task_failure" || signal.kind === "content_filter";
 }
 function nestedSignalPriority(signal) {
     switch (signal.kind) {
         case "cancelled":
         case "task_failure":
+        case "content_filter":
             return 100;
         case "auth_on_candidate_provider":
             return 90;
@@ -640,19 +656,31 @@ export function normalizeModelFailureSignal(error) {
         ...(name !== undefined ? { name } : {}),
     };
 }
-/** Whether a task-failure signal is a provider safety/refusal response. */
+/** Whether a failure is a provider safety/refusal response: a content-filter refusal, or a refused tool call. */
 export function isSafetyRefusalFailure(error) {
     const signal = normalizeModelFailureSignal(error);
+    if (signal.kind === "content_filter")
+        return true;
     if (signal.kind !== "task_failure")
         return false;
     const text = `${signal.message}\n${signal.code ?? ""}\n${signal.name ?? ""}`;
     return PROVIDER_REFUSAL_FAILURE_PATTERNS.some((pattern) => pattern.test(text));
 }
-/** True when this failure may spend a configured model fallback candidate. */
-export function isRetryableModelFailure(error) {
+/** Whether a provider's content filter refused the request, as OpenAI's HTTP 422 `cyber_policy` does. */
+export function isContentFilterRefusal(error) {
+    return normalizeModelFailureSignal(error).kind === "content_filter";
+}
+/**
+ * True when this failure may spend a configured model fallback candidate. A content-filter refusal does unless
+ * `options.fallbackOnContentFilter` is false.
+ */
+export function isRetryableModelFailure(error, options) {
     if (error === undefined)
         return false;
-    return FALLBACKABLE_FAILURE_KINDS.has(normalizeModelFailureSignal(error).kind);
+    const kind = normalizeModelFailureSignal(error).kind;
+    if (kind === "content_filter")
+        return options?.fallbackOnContentFilter !== false;
+    return FALLBACKABLE_FAILURE_KINDS.has(kind);
 }
 const SAME_MODEL_RETRYABLE_FAILURE_KINDS = new Set([
     "rate_limit",