@caupulican/pi-agent-core 0.93.8 → 0.93.9

package/dist/tool-failure-recovery-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-failure-recovery-gate.d.ts","sourceRoot":"","sources":["../src/tool-failure-recovery-gate.ts"],"names":[],"mappings":"AAEA,OAAO,EAUN,KAAK,uBAAuB,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACX,YAAY,EACZ,SAAS,EACT,+BAA+B,EAE/B,8BAA8B,EAC9B,eAAe,EACf,MAAM,YAAY,CAAC;AAiBpB,MAAM,WAAW,+BAA+B;IAC/C,YAAY,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,6BAA6B,GACtC;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,IAAI,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACpD,WAAW,CAAC,EAAE,+BAA+B,CAAC;CAC7C,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC,CAAA;CAAE,CAAC;AAElG,MAAM,MAAM,4BAA4B,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,WAAW,CAAC,EAAE,+BAA+B,CAAA;CAAE,GAClE;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAC;IAAC,SAAS,EAAE,KAAK,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3F;IACA,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,uBAAuB,CAAC;IAChC,SAAS,EAAE,IAAI,CAAC;IAChB,KAAK,EAAE,WAAW,GAAG,KAAK,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAgCL,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,uBAAuB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACnB;AAmCD;;;;;;;;;;;;GAYG;AACH,qBAAa,uBAAuB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA2C;IAChF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA6B;IAClE,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAqB;IACpE,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA2B;IACjD,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,MAAM,CAAsC;IAEpD,OAAO,IAAI,OAAO,CAEjB;IAED,mBAAmB,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAc3D;IAED,WAAW,CACV,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAC1B,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,+BAA+B,EACxC,cAAc,EAAE,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,EACzC,WAAW,EAAE,+BAA+B,GAAG,SAAS,GACtD,uBAAuB,CAezB;IAED,KAAK,CACJ,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EACpB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,uBAAuB,GAAG,SAAS,EAC3C,QAAQ,GAAE,SAAS,YAAY,EAA4B,GACzD,4BAA4B,CAgE9B;IAED,KAAK,CAAC,MAAM,EAAE,6BAA6B,GAAG,SAAS,GAAG,uBAAuB,GAAG,SAAS,CAQ5F;IAED,QAAQ,IAAI,OAAO,CAElB;IAED,OAAO,IAAI,uBAAuB,GAAG,SAAS,CAE7C;IAED,OAAO,CAAC,0BAA0B;IAgBlC,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,cAAc;IAwCtB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,kBAAkB;IAI1B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,8BAA8B;IAetC,OAAO,CAAC,sBAAsB;CA+B9B"}
+{"version":3,"file":"tool-failure-recovery-gate.d.ts","sourceRoot":"","sources":["../src/tool-failure-recovery-gate.ts"],"names":[],"mappings":"AACA,OAAO,EAQN,KAAK,uBAAuB,EAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EACX,YAAY,EACZ,SAAS,EACT,+BAA+B,EAE/B,8BAA8B,EAC9B,MAAM,YAAY,CAAC;AAapB,MAAM,WAAW,uBAAuB;IACvC,OAAO,EAAE,SAAS,8BAA8B,EAAE,CAAC;IACnD,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,6BAA6B,GACtC;IACA,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,EAAE,uBAAuB,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;CACb,GACD;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5D,MAAM,MAAM,4BAA4B,GAAG;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,uBAAuB,CAAA;CAAE,CAAC;AA2DtH;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,uBAAuB;IACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAqC;IAC1E,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAA6B;IACxE,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAqB;IACpE,OAAO,CAAC,kBAAkB,CAA+B;IACzD,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,cAAc,CAA2B;IACjD,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,WAAW,CAAK;IAExB,OAAO,IAAI,OAAO,CAEjB;IAED,mBAAmB,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAAG,IAAI,CAmB3D;IAED;;;OAGG;IACH,gBAAgB,IAAI,IAAI,CAEvB;IAED,WAAW,CACV,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAC1B,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,+BAA+B,EACxC,cAAc,EAAE,SAAS,SAAS,CAAC,GAAG,CAAC,EAAE,GACvC,uBAAuB,CAYzB;IAED;;;;OAIG;IACH,OAAO,CAAC,sBAAsB;IAS9B,KAAK,CACJ,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EACpB,IAAI,EAAE,OAAO,EACb,MAAM,EAAE,uBAAuB,GAAG,SAAS,EAC3C,QAAQ,GAAE,SAAS,YAAY,EAA4B,GACzD,4BAA4B,CA2B9B;IAED,KAAK,CAAC,MAAM,EAAE,6BAA6B,GAAG,SAAS,GAAG,IAAI,CAO7D;IAED,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,cAAc;IAUtB,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,WAAW;IAQnB,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,8BAA8B;CAYtC"}

package/dist/tool-failure-recovery-gate.js

@@ -1,11 +1,8 @@
 import { getToolExecutionUnchangedRetryLimit } from "@caupulican/pi-ai/tool-repair-registry";
-import { forEachPairedToolResult, getToolExecutionKey, getToolExecutionKeyHashParts, getToolFailureRecordExecutionKey, isClosedOperationFailureCode, isPromptScopedFailureCode, readVisibleToolFailureCode, restoreToolFailureRecord, sanitizeToolFailureEvidence, } from "./tool-failure-memory.js";
+import { getToolExecutionKey, getToolExecutionKeyHashParts, getToolFailureRecordExecutionKey, isPromptScopedFailureCode, readVisibleToolFailureCode, restoreToolFailureRecord, sanitizeToolFailureEvidence, } from "./tool-failure-memory.js";
+import { TOOL_FAILURE_READMISSION_RULE } from "./tool-failure-recovery-protocol.js";
 import { isAgentToolFailureRecoveryAuthority } from "./types.js";
-const MAX_BLOCKED_REPLAYS_PER_FAILURE = 2;
-const BASE_FAILURE_EXECUTIONS_PER_OPERATION = 1;
-const MAX_RECOVERY_PROBES_PER_OPERATION = 1;
-const MAX_REJECTIONS_PER_OPERATION = 4;
-const MAX_HOT_RECOVERY_STATES = 64;
+const MAX_TRACKED_OPERATIONS = 64;
 const SEEN_EXECUTION_FILTER_BYTES = 64 * 1024;
 const MAX_RECOVERY_TARGETS = 8;
 const MAX_RECOVERY_ACTIONS = 8;
@@ -17,10 +14,10 @@ const TARGET_KIND_PATTERN = /^[a-z0-9][a-z0-9._:-]*$/;
 /**
  * Bounded negative lookup for exact execution identities.
  *
- * A miss proves the operation has not failed while this gate has been alive. A hit only means
- * "possibly seen" and must be verified against the transcript, so collisions can cost a scan but
- * can never deny an execution. Keeping this separate from the hot state cache lets old exact
- * circuits survive eviction without retaining one live object graph per historical operation.
+ * A miss proves the operation has not been unproductive while this gate has been alive. A hit only
+ * means "possibly seen" and must be verified against the transcript, so collisions can cost a scan
+ * but can never deny an execution. Keeping this separate from the hot state cache lets old
+ * operations survive eviction without retaining one live object graph per historical operation.
  */
 class SeenExecutionFilter {
     constructor() {
@@ -47,212 +44,151 @@ class SeenExecutionFilter {
     }
 }
 /**
- * Owns execution admission and bounded unresolved-failure budgets.
+ * Admission governor for exact tool operations.
  *
- * Recovery authority is exact and tool-owned. A failed tool declares opaque backend-specific targets;
- * a loaded recovery tool may teach actions only for the same authority and target kind. Only raw
- * successful repair evidence with byte-exact scope can reopen one probe. Argument text and hooks have
- * no recovery authority.
+ * It answers exactly one question: can repeating this identical operation, right now, tell the agent
+ * anything it does not already know? An operation whose last execution was unproductive is admitted
+ * again once the world has moved — that is, once any tool has succeeded, or the user has spoken,
+ * since that operation last ran. Until then the replay is refused, because its result is already in
+ * the transcript.
  *
- * Run-level halt stays on the current run, but admission is never denied because unrelated operations
- * happened to fail. A bounded hot cache carries active per-operation state. A fixed-size negative
- * lookup sends an evicted exact replay back to the transcript for authoritative reconstruction, so
- * cache pressure cannot either stop new work or reopen an already-exhausted operation.
+ * The world cursor is the whole budget. There are no per-operation attempt counts, no probe quotas,
+ * and no circuits that stay open for the rest of the session: correct repair work always re-admits
+ * the operation it repaired, however many times the agent needs it.
+ *
+ * Refusal is always local to one operation. This gate cannot deny an unrelated tool, cannot
+ * terminate a tool batch, and cannot end a run — a stuck agent is the runaway-loop backstop's
+ * problem (`maxStallTurns`), and reporting a dead end is the model's own job.
  */
 export class ToolFailureRecoveryGate {
     constructor() {
         this.statesByExecutionKey = new Map();
-        this.seenFailedExecutions = new SeenExecutionFilter();
+        this.seenUnproductiveExecutions = new SeenExecutionFilter();
         /** Exact successes not yet present in the transcript snapshot consulted by admission. */
         this.resolvedBeforeTranscriptCommit = new Set();
         this.transcriptMessages = [];
         this.transcriptLength = 0;
         this.restoredFromTranscript = false;
+        this.worldCursor = 0;
     }
     isEmpty() {
-        return this.statesByExecutionKey.size === 0 && this.halted === undefined;
+        return this.statesByExecutionKey.size === 0;
     }
     restoreFromMessages(messages) {
         this.trackTranscript(messages);
         if (this.restoredFromTranscript || !this.isEmpty())
             return;
         this.restoredFromTranscript = true;
-        forEachPairedToolResult(messages, ({ tool, args, executionKey, result }) => {
-            const reduction = this.reduceTranscriptResult(this.statesByExecutionKey.get(executionKey), tool, args, result);
-            if (reduction.kind === "resolved") {
-                this.clearResolvedState(executionKey);
+        this.worldCursor = walkTranscript(messages, (event) => {
+            if (event.kind === "resolved") {
+                this.statesByExecutionKey.delete(event.executionKey);
                 return;
             }
-            if (reduction.kind === "ignored")
-                return;
-            this.seenFailedExecutions.add(executionKey);
-            this.retainHotState(executionKey, reduction.state);
+            this.seenUnproductiveExecutions.add(event.executionKey);
+            // A restored state starts with no transient-retry allowance: the transcript already shows the
+            // attempts that were made, and the new user turn that triggers a restore has itself moved the
+            // world, which is the broader permission anyway.
+            this.retainState(event.executionKey, {
+                record: event.record,
+                worldCursorAtLastExecution: event.worldCursor,
+                unchangedRetriesRemaining: 0,
+            });
         });
     }
-    planFailure(failedTool, args, failure, availableTools, reservation) {
+    /**
+     * Record that the world moved for a reason other than a tool result — a new user turn. Authority,
+     * intent, and files can all change across one, so every operation becomes worth attempting again.
+     */
+    noteWorldAdvance() {
+        this.worldCursor++;
+    }
+    planFailure(failedTool, args, failure, availableTools) {
         const targets = readFailureTargets(failedTool, args, failure.failureCode);
         const actions = readAvailableRecoveryActions(availableTools, targets);
-        const unchangedRetryRemaining = this.hasUnchangedRetryRemaining(failedTool, args, failure.failureCode, reservation);
         const evidence = readFailureEvidence(failedTool, args, failure);
         return {
             targets,
-            guidance: formatRecoveryGuidance(failure.failureCode, actions, unchangedRetryRemaining),
+            guidance: formatRecoveryGuidance(actions, this.transientRetryStanding(getToolExecutionKey(failedTool.name, args), failure.failureCode)),
             ...(evidence ? { evidence } : {}),
         };
     }
+    /**
+     * Whether this failure class allows an immediate identical retry, and whether one survives the
+     * failure about to be recorded. Read before that failure is observed, so it mirrors exactly what
+     * `observeUnproductive` is about to leave behind.
+     */
+    transientRetryStanding(executionKey, failureCode) {
+        const retryLimit = getToolExecutionUnchangedRetryLimit(failureCode);
+        if (retryLimit === 0)
+            return "none";
+        const state = this.statesByExecutionKey.get(executionKey);
+        const remaining = !state || state.worldCursorAtLastExecution !== this.worldCursor ? retryLimit : state.unchangedRetriesRemaining;
+        return remaining > 0 ? "available" : "spent";
+    }
     admit(tool, args, record, messages = this.transcriptMessages) {
         this.trackTranscript(messages);
-        const runHalt = this.halted;
-        if (runHalt) {
-            return {
-                kind: "blocked",
-                record: runHalt.record,
-                exhausted: true,
-                scope: "run",
-                diagnostic: runHalt.diagnostic,
-            };
-        }
         const executionKey = getToolExecutionKey(tool.name, args);
         if (this.resolvedBeforeTranscriptCommit.has(executionKey))
             return { kind: "allowed" };
         let state = this.getHotState(executionKey);
-        if (!state && this.seenFailedExecutions.mightContain(executionKey)) {
+        if (!state && this.seenUnproductiveExecutions.mightContain(executionKey)) {
             state = this.restoreOperationFromTranscript(executionKey);
         }
-        if (!state && record && getToolFailureRecordExecutionKey(record) === executionKey) {
-            state = this.getOrCreateState(executionKey, record, readFailureTargets(tool, args, record.failureCode));
+        if (!state &&
+            record &&
+            getToolFailureRecordExecutionKey(record) === executionKey &&
+            // A prompt-scoped block is cleared by a new owner prompt, never by the agent. It is not a
+            // repetition state, so it must not become one through the caller's failure memory either.
+            !isPromptScopedFailureCode(record.failureCode)) {
+            state = { record, worldCursorAtLastExecution: this.worldCursor, unchangedRetriesRemaining: 0 };
+            this.retainState(executionKey, state);
         }
         if (!state)
             return { kind: "allowed" };
         if (record && getToolFailureRecordExecutionKey(record) === executionKey)
             state.record = record;
-        if (state.operationCircuitOpen) {
-            if (state.recoveryAvailable && state.recoveryProbes < MAX_RECOVERY_PROBES_PER_OPERATION) {
-                state.operationCircuitOpen = false;
-                state.recoveryAvailable = false;
-                state.recoveryProbes++;
-                state.reservedExecutions++;
-                state.blockedReplays = 0;
-                return { kind: "allowed", reservation: { executionKey } };
-            }
-            if (usesOperationLocalExhaustion(tool)) {
-                const diagnostic = `Operation recovery circuit remains closed after replay of ${state.record.failureCode}.`;
-                return { kind: "blocked", record: state.record, exhausted: true, scope: "operation", diagnostic };
-            }
-            const diagnostic = `Run recovery circuit opened after replay of an operation whose local circuit was already open for ${state.record.failureCode}.`;
-            this.halted = { record: state.record, diagnostic };
-            return { kind: "blocked", record: state.record, exhausted: true, scope: "run", diagnostic };
-        }
-        const automaticExecutionLimit = BASE_FAILURE_EXECUTIONS_PER_OPERATION + getToolExecutionUnchangedRetryLimit(state.record.failureCode);
-        if (state.reservedExecutions < automaticExecutionLimit) {
-            state.reservedExecutions++;
-            state.blockedReplays = 0;
-            return { kind: "allowed", reservation: { executionKey } };
-        }
-        if (state.recoveryAvailable && state.recoveryProbes < MAX_RECOVERY_PROBES_PER_OPERATION) {
-            state.recoveryAvailable = false;
-            state.recoveryProbes++;
-            state.reservedExecutions++;
-            state.blockedReplays = 0;
-            return { kind: "allowed", reservation: { executionKey } };
-        }
-        state.blockedReplays++;
-        if (state.blockedReplays >= MAX_BLOCKED_REPLAYS_PER_FAILURE) {
-            state.operationCircuitOpen = true;
-            const diagnostic = `Operation recovery circuit opened after ${state.blockedReplays} blocked replays of ${state.record.failureCode}.`;
-            return { kind: "blocked", record: state.record, exhausted: true, scope: "operation", diagnostic };
+        if (this.worldCursor > state.worldCursorAtLastExecution)
+            return { kind: "allowed" };
+        if (state.unchangedRetriesRemaining > 0) {
+            state.unchangedRetriesRemaining--;
+            return { kind: "allowed" };
         }
-        return { kind: "blocked", record: state.record, exhausted: false };
+        return { kind: "blocked", record: state.record };
     }
     apply(effect) {
-        if (!effect || this.halted)
-            return undefined;
+        if (!effect)
+            return;
         if (effect.kind === "success") {
-            this.observeSuccess(effect.tool, effect.args, effect.evidenceResult);
-            return undefined;
+            this.observeSuccess(effect.tool, effect.args);
+            return;
         }
-        this.observeFailure(effect.tool, effect.record, effect.args, effect.targets ?? [], effect.reservation);
-        return this.halted;
+        this.observeUnproductive(effect.record, effect.args);
     }
-    isHalted() {
-        return this.halted !== undefined;
-    }
-    getHalt() {
-        return this.halted;
-    }
-    hasUnchangedRetryRemaining(tool, args, failureCode, reservation) {
-        const retryLimit = getToolExecutionUnchangedRetryLimit(failureCode);
-        if (retryLimit === 0)
-            return false;
-        const executionKey = getToolExecutionKey(tool.name, args);
-        const state = this.statesByExecutionKey.get(executionKey);
-        const executionsIncludingCurrent = state
-            ? state.reservedExecutions + (reservation?.executionKey === executionKey ? 0 : 1)
-            : 1;
-        return executionsIncludingCurrent < BASE_FAILURE_EXECUTIONS_PER_OPERATION + retryLimit;
-    }
-    getOrCreateState(executionKey, record, targets) {
-        const existing = this.getHotState(executionKey);
-        if (existing)
-            return existing;
-        const state = createFailureRecoveryState(record, targets);
-        this.retainHotState(executionKey, state);
-        return state;
-    }
-    observeFailure(tool, record, args, targets, reservation) {
+    observeUnproductive(record, args) {
         const executionKey = getToolExecutionKey(record.tool, args);
         this.resolvedBeforeTranscriptCommit.delete(executionKey);
-        this.seenFailedExecutions.add(executionKey);
-        const state = this.getOrCreateState(executionKey, record, targets);
-        if (this.halted)
-            return;
-        const startsNewEpisode = state.failures > 0 && !sameFailureOutcome(state.record, record);
-        if (startsNewEpisode)
-            resetFailureEpisode(state);
-        state.record = record;
-        state.recoveryTargets = targets;
-        state.recoveryAvailable = false;
-        state.blockedReplays = 0;
-        if (startsNewEpisode || reservation?.executionKey !== executionKey)
-            state.reservedExecutions++;
-        state.failures++;
-        const operationFailureLimit = record.state === "failed"
-            ? BASE_FAILURE_EXECUTIONS_PER_OPERATION +
-                getToolExecutionUnchangedRetryLimit(record.failureCode) +
-                MAX_RECOVERY_PROBES_PER_OPERATION
-            : MAX_REJECTIONS_PER_OPERATION;
-        if (state.failures >= operationFailureLimit) {
-            if (usesOperationLocalExhaustion(tool)) {
-                state.operationCircuitOpen = true;
-                return;
-            }
-            this.halted = {
-                record,
-                diagnostic: `Recovery circuit opened after ${state.failures} failed outcomes for one operation.`,
-            };
-        }
+        this.seenUnproductiveExecutions.add(executionKey);
+        const previous = this.statesByExecutionKey.get(executionKey);
+        // The transient-retry allowance belongs to one episode: it refills when the world has moved
+        // since this operation last ran, and is otherwise spent down so a transient class cannot
+        // bankroll an unbounded run of identical calls.
+        const startsFreshEpisode = !previous || previous.worldCursorAtLastExecution !== this.worldCursor;
+        this.retainState(executionKey, {
+            record,
+            worldCursorAtLastExecution: this.worldCursor,
+            unchangedRetriesRemaining: startsFreshEpisode
+                ? getToolExecutionUnchangedRetryLimit(record.failureCode)
+                : previous.unchangedRetriesRemaining,
+        });
     }
-    observeSuccess(tool, args, result) {
-        const successfulExecutionKey = getToolExecutionKey(tool.name, args);
+    observeSuccess(tool, args) {
+        const executionKey = getToolExecutionKey(tool.name, args);
         // Tool results are appended to the transcript after the current execution batch completes.
         // Until then the last persisted failure is stale authority: remember the exact success so a
         // later sequential call in this same batch cannot resurrect that failure from the transcript.
-        this.resolvedBeforeTranscriptCommit.add(successfulExecutionKey);
-        const evidenceTargets = readRecoveryEvidenceTargets(tool, args, result);
-        for (const [executionKey, state] of this.statesByExecutionKey) {
-            if (executionKey === successfulExecutionKey) {
-                this.clearResolvedState(executionKey);
-                continue;
-            }
-            if (state.recoveryProbes < MAX_RECOVERY_PROBES_PER_OPERATION &&
-                hasSharedRecoveryTarget(state.recoveryTargets, evidenceTargets)) {
-                state.recoveryAvailable = true;
-                state.blockedReplays = 0;
-            }
-        }
-    }
-    clearResolvedState(executionKey) {
+        this.resolvedBeforeTranscriptCommit.add(executionKey);
         this.statesByExecutionKey.delete(executionKey);
+        this.worldCursor++;
     }
     trackTranscript(messages) {
         const tail = messages[messages.length - 1];
@@ -275,10 +211,10 @@ export class ToolFailureRecoveryGate {
         this.statesByExecutionKey.set(executionKey, state);
         return state;
     }
-    retainHotState(executionKey, state) {
+    retainState(executionKey, state) {
         this.statesByExecutionKey.delete(executionKey);
         this.statesByExecutionKey.set(executionKey, state);
-        while (this.statesByExecutionKey.size > MAX_HOT_RECOVERY_STATES) {
+        while (this.statesByExecutionKey.size > MAX_TRACKED_OPERATIONS) {
             const oldest = this.statesByExecutionKey.keys().next().value;
             if (oldest === undefined)
                 break;
@@ -286,66 +222,63 @@ export class ToolFailureRecoveryGate {
         }
     }
     restoreOperationFromTranscript(executionKey) {
-        let restoredState;
-        forEachPairedToolResult(this.transcriptMessages, ({ tool, args, executionKey: candidateKey, result }) => {
-            if (candidateKey !== executionKey)
-                return;
-            const reduction = this.reduceTranscriptResult(restoredState, tool, args, result);
-            if (reduction.kind === "resolved") {
-                restoredState = undefined;
+        let restored;
+        walkTranscript(this.transcriptMessages, (event) => {
+            if (event.executionKey !== executionKey)
                 return;
-            }
-            if (reduction.kind === "failed")
-                restoredState = reduction.state;
+            restored =
+                event.kind === "resolved"
+                    ? undefined
+                    : { record: event.record, worldCursorAtLastExecution: event.worldCursor, unchangedRetriesRemaining: 0 };
         });
-        if (restoredState)
-            this.retainHotState(executionKey, restoredState);
-        return restoredState;
+        if (restored)
+            this.retainState(executionKey, restored);
+        return restored;
     }
-    reduceTranscriptResult(state, tool, args, result) {
-        if (!result.isError)
-            return { kind: "resolved" };
-        const record = restoreToolFailureRecord(result, tool, args);
-        const visibleCode = readVisibleToolFailureCode(result);
-        if (isPromptScopedFailureCode(visibleCode) || isPromptScopedFailureCode(record.failureCode)) {
-            return { kind: "ignored", state };
+}
+/**
+ * Replay a transcript's world advances in order, reporting each completed operation with the cursor
+ * value that was current when it ran. Advances are counted exactly as the live gate counts them —
+ * every successful tool result, plus every user turn — so a resumed session admits precisely what an
+ * uninterrupted one would. Returns the final cursor.
+ */
+function walkTranscript(messages, visit) {
+    const callsById = new Map();
+    let worldCursor = 0;
+    for (const message of messages) {
+        if (message.role === "user") {
+            worldCursor++;
+            continue;
         }
-        const next = state ?? createFailureRecoveryState(record, []);
-        if (isClosedOperationFailureCode(visibleCode)) {
-            next.record = record;
-            next.operationCircuitOpen = true;
-            next.blockedReplays = MAX_BLOCKED_REPLAYS_PER_FAILURE;
-            next.recoveryAvailable = false;
-            return { kind: "failed", state: next };
+        if (message.role === "assistant") {
+            for (const block of message.content) {
+                if (block.type === "toolCall")
+                    callsById.set(block.id, { name: block.name, args: block.arguments });
+            }
+            continue;
         }
-        if (visibleCode === "repeated_failed_operation") {
-            next.record = record;
-            next.blockedReplays++;
-            return { kind: "failed", state: next };
+        if (message.role !== "toolResult")
+            continue;
+        const call = callsById.get(message.toolCallId);
+        if (!call)
+            continue;
+        callsById.delete(message.toolCallId);
+        const executionKey = getToolExecutionKey(call.name, call.args);
+        if (!message.isError) {
+            worldCursor++;
+            visit({ kind: "resolved", executionKey, worldCursor });
+            continue;
+        }
+        const record = restoreToolFailureRecord(message, call.name, call.args);
+        // A prompt-scoped block is cleared by a new owner prompt, not by anything the agent can do, so
+        // it never becomes a repetition state.
+        if (isPromptScopedFailureCode(readVisibleToolFailureCode(message)) ||
+            isPromptScopedFailureCode(record.failureCode)) {
+            continue;
         }
-        if (next.failures > 0 && !sameFailureOutcome(next.record, record))
-            resetFailureEpisode(next);
-        next.record = record;
-        next.reservedExecutions++;
-        next.failures++;
-        return { kind: "failed", state: next };
+        visit({ kind: "unproductive", executionKey, worldCursor, record });
     }
-}
-function usesOperationLocalExhaustion(tool) {
-    return tool?.failureRecovery?.exhaustionScope === "operation";
-}
-function sameFailureOutcome(left, right) {
-    return (left.failureCode === right.failureCode &&
-        left.outputSignature !== undefined &&
-        left.outputSignature === right.outputSignature);
-}
-function resetFailureEpisode(state) {
-    state.reservedExecutions = 0;
-    state.failures = 0;
-    state.recoveryProbes = 0;
-    state.blockedReplays = 0;
-    state.recoveryAvailable = false;
-    state.operationCircuitOpen = false;
+    return worldCursor;
 }
 function readFailureEvidence(tool, args, failure) {
     try {
@@ -360,18 +293,6 @@ function readFailureEvidence(tool, args, failure) {
         return undefined;
     }
 }
-function createFailureRecoveryState(record, recoveryTargets) {
-    return {
-        record,
-        recoveryTargets,
-        reservedExecutions: 0,
-        failures: 0,
-        recoveryProbes: 0,
-        blockedReplays: 0,
-        recoveryAvailable: false,
-        operationCircuitOpen: false,
-    };
-}
 function readFailureTargets(tool, args, failureCode) {
     try {
         const contract = tool.failureRecovery;
@@ -459,80 +380,38 @@ function parseRecoveryAction(value) {
         if (!value || typeof value !== "object" || Array.isArray(value))
             return undefined;
         const candidate = value;
-        if (!isAgentToolFailureRecoveryAuthority(candidate.authority) ||
+        if ((candidate.kind !== "correct" && candidate.kind !== "repair") ||
+            !isAgentToolFailureRecoveryAuthority(candidate.authority) ||
             !validTargetKind(candidate.targetKind) ||
             typeof candidate.instruction !== "string") {
             return undefined;
         }
-        if (candidate.kind === "correct") {
-            return {
-                kind: candidate.kind,
-                authority: candidate.authority,
-                targetKind: candidate.targetKind,
-                instruction: candidate.instruction,
-            };
-        }
-        if (candidate.kind !== "repair" || typeof candidate.getEvidence !== "function")
-            return undefined;
-        const getEvidence = candidate.getEvidence;
         return {
             kind: candidate.kind,
             authority: candidate.authority,
             targetKind: candidate.targetKind,
             instruction: candidate.instruction,
-            getEvidence: (params, result) => Reflect.apply(getEvidence, value, [params, result]),
         };
     }
     catch {
         return undefined;
     }
 }
-function readRecoveryEvidenceTargets(tool, args, result) {
-    const targets = [];
-    for (const candidate of readDeclaredRecoveryActions(tool)) {
-        const action = parseRecoveryAction(candidate);
-        if (targets.length >= MAX_RECOVERY_TARGETS || !action || action.kind !== "repair" || !action.getEvidence) {
-            continue;
-        }
-        let scopes;
-        try {
-            scopes = action.getEvidence(args, result);
-        }
-        catch {
-            continue;
-        }
-        if (!Array.isArray(scopes))
-            continue;
-        for (const scope of scopes) {
-            if (targets.length >= MAX_RECOVERY_TARGETS)
-                break;
-            if (!validTargetScope(scope))
-                continue;
-            const target = { authority: action.authority, kind: action.targetKind, scope };
-            if (!targets.some((candidate) => sameRecoveryTarget(candidate, target)))
-                targets.push(target);
-        }
-    }
-    return targets;
-}
-function formatRecoveryGuidance(failureCode, actions, unchangedRetryRemaining) {
-    const hasTimeoutRetryPolicy = getToolExecutionUnchangedRetryLimit(failureCode) > 0;
-    const timeoutPolicy = hasTimeoutRetryPolicy
-        ? unchangedRetryRemaining
-            ? "Timeout policy allows 1 unchanged retry; if it fails, never retry unchanged."
-            : "Timeout unchanged retry exhausted; never retry unchanged."
-        : undefined;
+/**
+ * The admission rule comes first and is never the part that truncates: a model that reads only the
+ * opening clause still learns exactly what makes this operation runnable again.
+ */
+function formatRecoveryGuidance(actions, transientRetry) {
+    const rule = transientRetry === "available"
+        ? `This failure class allows 1 immediate unchanged retry. ${TOOL_FAILURE_READMISSION_RULE}`
+        : transientRetry === "spent"
+            ? `Unchanged retry spent. ${TOOL_FAILURE_READMISSION_RULE}`
+            : TOOL_FAILURE_READMISSION_RULE;
     if (actions.length === 0) {
-        if (timeoutPolicy)
-            return `${timeoutPolicy} Change/narrow operation, or report blocker.`;
-        return "No loaded tool declares recovery. Never retry unchanged. Use materially different operation justified by diagnostic/schema, or report blocker.";
+        return `${rule} Do the corrective work first, or use a materially different operation justified by the diagnostic.`;
     }
     const available = actions.map((action) => `${action.toolName} ${action.kind}: ${action.instruction}`).join(" ");
-    const hasRepair = actions.some((action) => action.kind === "repair");
-    const authority = hasRepair
-        ? "Only exact matching repair evidence grants 1 probe; else change operation."
-        : "Actions require changed operation; unchanged remains blocked.";
-    return truncate(`${timeoutPolicy ? `${timeoutPolicy} ` : ""}Loaded actions: ${available} ${authority}`, MAX_RECOVERY_GUIDANCE_CHARS);
+    return truncate(`${rule} Loaded actions: ${available}`, MAX_RECOVERY_GUIDANCE_CHARS);
 }
 function truncate(value, maxChars) {
     if (value.length <= maxChars)
@@ -542,9 +421,4 @@ function truncate(value, maxChars) {
 function sameRecoveryTarget(left, right) {
     return left.authority === right.authority && left.kind === right.kind && left.scope === right.scope;
 }
-function hasSharedRecoveryTarget(left, right) {
-    if (left.length > right.length)
-        return hasSharedRecoveryTarget(right, left);
-    return left.some((target) => right.some((candidate) => sameRecoveryTarget(target, candidate)));
-}
 //# sourceMappingURL=tool-failure-recovery-gate.js.map