@cicctencent/agent-core 0.1.1 → 0.1.3

package/src/agent/tool-executor.ts

@@ -1,713 +0,0 @@
-// ============================================================
-// ToolExecutor — 工具执行管理器（并发分组 + 熔断 + 安全检查）
-// ============================================================
-
-import type { AgentEvent, Message, ToolCall, ToolCallRecord } from '../types.ts';
-import type { ToolRegistry } from '../tool/registry.ts';
-import type { ToolContext, ToolDefinition } from '../tool/types.ts';
-import type { SecurityGuard } from '../security/guard.ts';
-import type { HookEvent, HookContext, HookResult } from '../hooks/types.ts';
-import type { Middleware } from '../middleware/types.ts';
-import type { HistoryManager } from './history-manager.ts';
-
-/** 工具执行配置 */
-export interface ToolExecutorConfig {
-  /** Tool Registry */
-  toolRegistry: ToolRegistry;
-  /** 安全守卫（可选） */
-  securityGuard?: SecurityGuard;
-  /** 单工具执行超时（毫秒） */
-  toolTimeout: number;
-  /** Hook 执行器 */
-  runHooks: (event: HookEvent, ctx: HookContext) => Promise<HookResult[]>;
-  /** 中间件工具阶段执行器 */
-  runMiddlewareToolPhase: (phase: 'onToolBefore' | 'onToolAfter', ctx: HookContext) => Promise<HookResult[]>;
-  /** 事件创建辅助 */
-  createEvent: (sessionId: string, event: Record<string, unknown>) => AgentEvent;
-  /** 历史管理器 */
-  historyManager: HistoryManager;
-  /** 中间件列表 */
-  getMiddleware: () => Middleware[] | undefined;
-}
-
-/** 工具并发执行分组 */
-interface ToolCallGroup {
-  concurrent: boolean;
-  calls: ToolCall[];
-}
-
-/** 工具执行结果 */
-export interface ToolExecResult {
-  result: string;
-  isError: boolean;
-  actualArgs: Record<string, unknown>;
-  duration: number;
-  call: ToolCall;
-}
-
-/** LoopState 接口（与 Engine 交互的最小契约） */
-export interface ToolLoopState {
-  sessionId: string;
-  messages: Message[];
-  toolContext: ToolContext;
-  internalAbort: AbortController;
-  iteration: number;
-  toolCallRecords: ToolCallRecord[];
-  consecutiveToolFailures: Map<string, number>;
-}
-
-/**
- * 工具执行管理器
- *
- * 职责：
- * - 按并发属性分组执行 tool_calls
- * - 串行/并行执行 + 超时保护
- * - 熔断器（连续失败自动阻断）
- * - 安全检查（execute_command）
- * - Hook/Middleware 生命周期集成
- */
-export class AgentToolExecutor {
-  private config: ToolExecutorConfig;
-
-  /** 连续失败熔断阈值：同一工具连续失败超过此值后自动阻断（降低以加速失败重试终止） */
-  private static readonly CIRCUIT_BREAKER_THRESHOLD = 2;
-
-  constructor(config: ToolExecutorConfig) {
-    this.config = config;
-  }
-
-  /** 执行一批 tool_calls（按并发属性分组） */
-  async *executeToolCalls(state: ToolLoopState, toolCalls: ToolCall[]): AsyncGenerator<AgentEvent> {
-    const groups = this.groupByConcurrency(toolCalls);
-
-    for (const group of groups) {
-      if (state.internalAbort.signal.aborted) break;
-
-      if (group.concurrent && group.calls.length > 1) {
-        yield* this.executeToolGroupParallel(state, group.calls);
-      } else {
-        for (const call of group.calls) {
-          if (state.internalAbort.signal.aborted) break;
-          yield* this.executeOneToolCall(state, call);
-        }
-      }
-    }
-  }
-
-  // ---- 内部方法 ----
-
-  /** 按并发属性将 tool_calls 分组 */
-  private groupByConcurrency(toolCalls: ToolCall[]): ToolCallGroup[] {
-    const groups: ToolCallGroup[] = [];
-    let currentGroup: ToolCall[] = [];
-    let currentConcurrent = false;
-
-    for (const call of toolCalls) {
-      const tool = this.config.toolRegistry.get(call.function.name);
-      const isConcurrent = tool?.concurrent ?? false;
-
-      if (currentGroup.length === 0) {
-        currentConcurrent = isConcurrent;
-        currentGroup.push(call);
-      } else if (isConcurrent === currentConcurrent) {
-        currentGroup.push(call);
-      } else {
-        groups.push({ concurrent: currentConcurrent, calls: currentGroup });
-        currentGroup = [call];
-        currentConcurrent = isConcurrent;
-      }
-    }
-    if (currentGroup.length > 0) {
-      groups.push({ concurrent: currentConcurrent, calls: currentGroup });
-    }
-    return groups;
-  }
-
-  /** 并行执行一组工具（按顺序推送事件和结果） */
-  private async *executeToolGroupParallel(state: ToolLoopState, calls: ToolCall[]): AsyncGenerator<AgentEvent> {
-    // 先解析所有参数并推送 tool_call 事件
-    const parsedArgs = calls.map(call => {
-      let args: Record<string, unknown>;
-      try { args = JSON.parse(call.function.arguments); } catch { args = {}; }
-      return { call, args };
-    });
-    for (const { call, args } of parsedArgs) {
-      yield this.config.createEvent(state.sessionId, { type: 'tool_call', tool: call.function.name, args, callId: call.id });
-    }
-
-    // 熔断与可用性检查：过滤掉已被熔断或当前 Agent 未注册的工具
-    const unavailable = parsedArgs.filter(({ call }) => !this.config.toolRegistry.has(call.function.name));
-    for (const { call, args } of unavailable) {
-      yield* this.emitUnavailableToolResult(state, call, args);
-    }
-
-    const available = parsedArgs.filter(({ call }) => this.config.toolRegistry.has(call.function.name));
-    const executable = available.filter(({ call }) => !this.isCircuitBroken(state, call.function.name));
-    const circuitBroken = available.filter(({ call }) => this.isCircuitBroken(state, call.function.name));
-
-    // 被熔断的工具：直接推送阻断结果
-    for (const { call, args } of circuitBroken) {
-      const failCount = state.consecutiveToolFailures.get(call.function.name) || 0;
-      const result = `CIRCUIT_BREAKER: ${call.function.name} has failed ${failCount} consecutive times. ` +
-        `STOP calling this tool with the same approach. Fix your parameters or use a different tool.`;
-      yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-      const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-      state.messages.push(toolMessage);
-      this.config.historyManager.addHistory(state.sessionId, toolMessage);
-      state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args, result, isError: true, duration: 0, timestamp: Date.now() });
-    }
-
-    // 并行执行剩余未被熔断的工具
-    const results = executable.length > 0
-      ? await Promise.all(
-          executable.map(({ call, args }) => this.runWithTimeout(state, call, args))
-        )
-      : [];
-
-    // 按顺序推送结果并同步到历史
-    for (const { result, isError, actualArgs, duration, call } of results) {
-      const afterResults = await this.config.runHooks('after_tool', {
-        sessionId: state.sessionId,
-        iteration: state.iteration,
-        tool: call.function.name,
-        args: actualArgs,
-        result,
-        isError,
-        duration,
-      });
-      const inject = afterResults.find(r => r.inject)?.inject;
-      const finalResult = inject ? `${result}\n${inject}` : result;
-
-      yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError, duration, callId: call.id });
-
-      const sanitizedResult = this.config.securityGuard
-        ? this.config.securityGuard.sanitizeCredentials(finalResult)
-        : finalResult;
-      const truncatedResult = this.config.historyManager.processToolOutput(sanitizedResult, call.id, call.function.name, state.sessionId);
-      const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: truncatedResult };
-      state.messages.push(toolMessage);
-      this.config.historyManager.addHistory(state.sessionId, toolMessage);
-      state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args: actualArgs, result, isError, duration, timestamp: Date.now() });
-      this.updateFailureCount(state, call.function.name, isError);
-    }
-  }
-
-  /** 串行执行单个工具调用（含安全检查 + Hooks） */
-  private async *executeOneToolCall(state: ToolLoopState, call: ToolCall): AsyncGenerator<AgentEvent> {
-    let args: Record<string, unknown>;
-    let jsonParseFailed = false;
-    try { args = JSON.parse(call.function.arguments); } catch { args = {}; jsonParseFailed = true; }
-
-    // run_script 截断抢救：从截断的 JSON 中提取 code 字段并尝试修复执行
-    if (jsonParseFailed && call.function.name === 'run_script') {
-      const rawArgs = call.function.arguments || '';
-      const rescued = this.rescueRunScriptArgs(rawArgs);
-      if (rescued) {
-        args = rescued;
-        jsonParseFailed = false;
-      }
-    }
-
-    // write_file / append_file 截断抢救：提取 path 和部分内容并写入
-    if (jsonParseFailed && (call.function.name === 'write_file' || call.function.name === 'append_file')) {
-      const rawArgs = call.function.arguments || '';
-      const rescued = this.rescueWriteFileArgs(rawArgs);
-      if (rescued) {
-        args = rescued;
-        jsonParseFailed = false;
-      }
-    }
-
-    // delegate_task 截断抢救：从截断的 JSON 中提取 agent + task（即使不完整也可用）
-    if (jsonParseFailed && call.function.name === 'delegate_task') {
-      const rawArgs = call.function.arguments || '';
-      const rescued = this.rescueDelegateTaskArgs(rawArgs);
-      if (rescued) {
-        args = rescued;
-        jsonParseFailed = false;
-      }
-    }
-
-    yield this.config.createEvent(state.sessionId, { type: 'tool_call', tool: call.function.name, args, callId: call.id });
-
-    if (!this.config.toolRegistry.has(call.function.name)) {
-      yield* this.emitUnavailableToolResult(state, call, args);
-      return;
-    }
-
-    // 空参数/截断参数早期检测
-    const argKeys = Object.keys(args);
-    const argsEffectivelyEmpty = argKeys.length === 0 || (argKeys.length === 1 && args[argKeys[0]] === '');
-    const toolName = call.function.name;
-    const isDocTool = ['create_presentation', 'create_document', 'create_pdf'].includes(toolName);
-    const docPayloadKey = toolName === 'create_presentation' ? 'slides' : 'blocks';
-    const docArgsIncomplete = isDocTool && !!args.title && !args.json_file && (!Array.isArray(args[docPayloadKey]) || (args[docPayloadKey] as unknown[]).length === 0);
-    if (argsEffectivelyEmpty || docArgsIncomplete) {
-      const toolDef = this.config.toolRegistry.get(call.function.name);
-      const required = (toolDef?.definition?.function?.parameters as any)?.required as string[] | undefined;
-      if ((required && required.length > 0) || docArgsIncomplete) {
-        const rawArgs = (call.function.arguments || '').trim();
-        const rawArgLength = (call as any)._rawArgLength ?? rawArgs.length;
-        const isTruncated = (jsonParseFailed || docArgsIncomplete) && rawArgLength > 200;
-        let result: string;
-
-        if (isTruncated) {
-          const isFileWrite = ['write_file', 'append_file'].includes(toolName);
-          const isRunScript = toolName === 'run_script';
-          const lines: string[] = [
-            `TRUNCATED_PARAMS_ERROR: ${toolName} parameters were too long (${rawArgLength} chars, JSON truncated or incomplete).`,
-            '',
-          ];
-
-          if (isDocTool) {
-            const rootKey = toolName === 'create_presentation' ? 'slides' : 'blocks';
-            const firstItemType = toolName === 'create_presentation' ? 'cover' : 'heading';
-            const nextItemType = toolName === 'create_presentation' ? 'content' : 'paragraph';
-            lines.push(
-              `RECOMMENDED — use json_file + append_file strategy:`,
-              `  1. write_file({ path: "data.json", content: '{"${rootKey}": [' })`,
-              `  2. append_file({ path: "data.json", content: '{"type":"${firstItemType}","title":"..."},' })`,
-              `  3. append_file({ path: "data.json", content: '{"type":"${nextItemType}","title":"..."},' })`,
-              `  ... repeat for each ${rootKey.slice(0, -1)} ...`,
-              `  N. append_file({ path: "data.json", content: '], "theme": "professional"}' })`,
-              `  N+1. ${toolName}({ title: "My Title", json_file: "data.json" })`,
-              '',
-              'Each write_file/append_file content chunk should be under 3000 chars.',
-              '',
-            );
-          } else if (isFileWrite) {
-            lines.push(
-              'RECOMMENDED — split content across multiple calls:',
-              '  1. write_file({ path: "script.cjs", content: "<first ~2500 chars>" })',
-              '  2. append_file({ path: "script.cjs", content: "<next ~2500 chars>" })',
-              '  3. append_file({ path: "script.cjs", content: "<next ~2500 chars>" })',
-              '  ... repeat until complete ...',
-              '',
-              'Each chunk MUST be under 3000 characters. Count your characters!',
-              '',
-            );
-          } else if (isRunScript) {
-            lines.push(
-              'RECOMMENDED — use Two-Step approach for long scripts:',
-              '  Step 1: write_file({ path: "generate.cjs", content: "<first ~2500 chars of script>" })',
-              '  Step 2: append_file({ path: "generate.cjs", content: "<next ~2500 chars>" })',
-              '  ... repeat append_file until script is complete ...',
-              '  Final: run_script({ language: "nodejs", code: "require(require(\'path\').join(process.cwd(),\'generate.cjs\'));", timeout: 60000 })',
-              '',
-              'Each write_file/append_file chunk MUST be under 3000 chars. The run_script `code` param MUST be under 3000 chars.',
-              '',
-            );
-          } else if (toolName === 'execute_command') {
-            lines.push(
-              'Your command is TOO LONG for a single tool call.',
-              '',
-              'Do NOT use heredoc (cat >> file << EOF) to write scripts. Use the Two-Step approach:',
-              '  Step 1: write_file({ path: "script.cjs", content: "<your FULL script>" })',
-              '  Step 2: execute_command({ command: "node script.cjs", timeout: 60000 })',
-              '',
-              'For appending: use append_file instead of cat >> heredoc.',
-              '',
-            );
-          } else if (toolName === 'show_widget') {
-            lines.push(
-              'Your HTML is TOO LONG for a single tool call.',
-              '',
-              'Use the html_file approach for large widgets (ECharts dashboards, etc.):',
-              '  Step 1: write_file({ path: "widget.html", content: "<your full HTML>" })',
-              '  Step 2: show_widget({ html_file: "widget.html", title: "Dashboard" })',
-              '',
-              'If HTML exceeds write_file limit, use append_file to build it incrementally.',
-              '',
-            );
-          } else if (toolName === 'delegate_task') {
-            lines.push(
-              'Your task description is TOO LONG for a single delegate_task call.',
-              '',
-              'Strategy — write task details to a file, then reference it:',
-              '  Step 1: write_file({ path: "task_brief.md", content: "<detailed task description + data>" })',
-              '  Step 2: delegate_task({ agent: "<name>", task: "Read task_brief.md and execute: <short summary>" })',
-              '',
-              'The sub-agent has read_file access and can load the full task from the file.',
-              '',
-            );
-          } else {
-            lines.push(
-              'Your content is TOO LONG for a single tool call.',
-              '',
-              'Strategies:',
-              '  1. write_file + append_file: Split content into <3000 char chunks',
-              '  2. Write a more compact script (fewer items, less formatting)',
-              '',
-            );
-          }
-
-          lines.push('DO NOT retry the same approach — it will fail again.');
-          result = lines.join('\n');
-        } else {
-          result = [
-            `EMPTY_PARAMS_ERROR: ${call.function.name} was called with empty or invalid parameters.`,
-            rawArgs ? `  Raw arguments: "${rawArgs.slice(0, 200)}"` : '  No arguments were received.',
-            '',
-            `Required parameters: ${required.join(', ')}`,
-            '',
-            'You MUST include ALL parameters. If content is long, use the Two-Step approach:',
-            '  Step 1: write_file({ path: "generate.cjs", content: "<your FULL script>" })',
-            '  Step 2: run_script({ language: "nodejs", code: "require(require(\'path\').join(process.cwd(),\'generate.cjs\'));", timeout: 60000 })',
-          ].join('\n');
-        }
-
-        yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-        const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-        state.messages.push(toolMessage);
-        this.config.historyManager.addHistory(state.sessionId, toolMessage);
-        state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args, result, isError: true, duration: 0, timestamp: Date.now() });
-        this.updateFailureCount(state, call.function.name, true);
-        return;
-      }
-    }
-
-    // 熔断检查
-    if (this.isCircuitBroken(state, call.function.name)) {
-      const failCount = state.consecutiveToolFailures.get(call.function.name) || 0;
-      const result = `CIRCUIT_BREAKER: ${call.function.name} has failed ${failCount} consecutive times. ` +
-        `STOP calling this tool with the same approach. ` +
-        `If your content is too long for tool parameters, SPLIT it: use multiple execute_command calls with "cat >>" to append, ` +
-        `or write a much shorter script. Review ALL error messages above for specific guidance.`;
-      yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-
-      const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-      state.messages.push(toolMessage);
-      this.config.historyManager.addHistory(state.sessionId, toolMessage);
-      state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args, result, isError: true, duration: 0, timestamp: Date.now() });
-      return;
-    }
-
-    // 安全检查（execute_command）
-    let actualArgs = args;
-    if (call.function.name === 'execute_command' && this.config.securityGuard && args.command) {
-      const check = this.config.securityGuard.sanitize(args.command as string);
-      if (!check.safe) {
-        const result = check.reason || 'BLOCKED: Command rejected by security policy';
-        yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-
-        const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-        state.messages.push(toolMessage);
-        this.config.historyManager.addHistory(state.sessionId, toolMessage);
-        state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args, result, isError: true, duration: 0, timestamp: Date.now() });
-        return;
-      }
-      if (check.rewritten) actualArgs = { ...args, command: check.rewritten };
-    }
-
-    // Hook + Middleware: before_tool
-    const hookCtx: HookContext = {
-      sessionId: state.sessionId,
-      iteration: state.iteration,
-      tool: call.function.name,
-      args: actualArgs,
-    };
-    const beforeResults = await this.config.runHooks('before_tool', hookCtx);
-    const mwBeforeResults = await this.config.runMiddlewareToolPhase('onToolBefore', hookCtx);
-    const allBefore = [...beforeResults, ...mwBeforeResults];
-    const blocked = allBefore.find(r => r.block);
-    if (blocked) {
-      const result = blocked.reason || 'Blocked by hook';
-      yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-
-      const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-      state.messages.push(toolMessage);
-      this.config.historyManager.addHistory(state.sessionId, toolMessage);
-      state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args: actualArgs, result, isError: true, duration: 0, timestamp: Date.now() });
-      return;
-    }
-    const modified = allBefore.find(r => r.modify);
-    if (modified?.modify) actualArgs = { ...actualArgs, ...modified.modify };
-
-    // 执行工具（带超时）
-    const execResult = await this.runWithTimeout(state, call, actualArgs);
-    const { result, isError, duration } = execResult;
-
-    // Hook + Middleware: after_tool
-    const afterHookCtx: HookContext = {
-      sessionId: state.sessionId,
-      iteration: state.iteration,
-      traceId: state.toolContext.custom?.traceId as string | undefined,
-      tool: call.function.name,
-      args: actualArgs,
-      result,
-      isError,
-      duration,
-    };
-    const afterResults = await this.config.runHooks('after_tool', afterHookCtx);
-    const mwAfterResults = await this.config.runMiddlewareToolPhase('onToolAfter', afterHookCtx);
-    const allAfter = [...afterResults, ...mwAfterResults];
-    const inject = allAfter.find(r => r.inject)?.inject;
-    const finalResult = inject ? `${result}\n${inject}` : result;
-
-    yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError, duration, callId: call.id });
-
-    const sanitizedResult = this.config.securityGuard
-      ? this.config.securityGuard.sanitizeCredentials(finalResult)
-      : finalResult;
-    const truncatedResult = this.config.historyManager.processToolOutput(sanitizedResult, call.id, call.function.name, state.sessionId);
-    const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: truncatedResult };
-    state.messages.push(toolMessage);
-    this.config.historyManager.addHistory(state.sessionId, toolMessage);
-    state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args: actualArgs, result, isError, duration, timestamp: Date.now() });
-    this.updateFailureCount(state, call.function.name, isError);
-  }
-
-  /** 带超时的工具执行 */
-  private async runWithTimeout(state: ToolLoopState, call: ToolCall, args: Record<string, unknown>): Promise<ToolExecResult> {
-    const isDelegate = call.function.name === 'delegate_task';
-    const timeout = isDelegate
-      ? Math.max(this.config.toolTimeout * 30, 900000)
-      : this.config.toolTimeout;
-    const start = Date.now();
-
-    // 为 delegate_task 创建子 AbortController：超时或父级 abort 时能中止子 Agent
-    const childAbort = new AbortController();
-    const parentSignal = state.toolContext.abortSignal;
-    const onParentAbort = () => childAbort.abort();
-    if (parentSignal?.aborted) {
-      childAbort.abort();
-    } else if (parentSignal) {
-      parentSignal.addEventListener('abort', onParentAbort, { once: true });
-    }
-
-    // 超时定时器：触发时同时 abort 子 Agent（防止子 Agent 泄漏）
-    let timeoutId: ReturnType<typeof setTimeout>;
-    const timeoutPromise = new Promise<string>((_, reject) => {
-      timeoutId = setTimeout(() => {
-        childAbort.abort();  // 中止子 Agent 执行
-        reject(new Error(`Tool execution timeout (${timeout}ms)`));
-      }, timeout);
-    });
-
-    const ctxWithCallId: ToolContext = {
-      ...state.toolContext,
-      currentToolCallId: call.id,
-      abortSignal: childAbort.signal,
-    };
-
-    try {
-      const result = await Promise.race([
-        this.config.toolRegistry.execute(call.function.name, args, ctxWithCallId),
-        timeoutPromise,
-      ]);
-      clearTimeout(timeoutId);
-      return { result, isError: false, actualArgs: args, duration: Date.now() - start, call };
-    } catch (err: any) {
-      clearTimeout(timeoutId);
-      const errorMsg = `Error: ${err.message || err}`;
-      if (isDelegate) {
-        console.error(`[ToolExecutor] delegate_task failed after ${Date.now() - start}ms: ${err.message || err}`);
-      }
-      await this.config.runHooks('on_error', {
-        sessionId: state.sessionId,
-        iteration: state.iteration,
-        tool: call.function.name,
-        error: err.message || String(err),
-        recoverable: true,
-      });
-      return { result: errorMsg, isError: true, actualArgs: args, duration: Date.now() - start, call };
-    } finally {
-      if (parentSignal) parentSignal.removeEventListener('abort', onParentAbort);
-    }
-  }
-
-  private async *emitUnavailableToolResult(
-    state: ToolLoopState,
-    call: ToolCall,
-    args: Record<string, unknown>,
-  ): AsyncGenerator<AgentEvent> {
-    const availableNames = this.config.toolRegistry.listNames();
-    const mcpNames = availableNames.filter(name => name.startsWith('mcp_')).slice(0, 20);
-    const otherNames = availableNames.filter(name => !name.startsWith('mcp_')).slice(0, 30);
-    const result = [
-      `UNAVAILABLE_TOOL: ${call.function.name} is not registered in the current Agent runtime.`,
-      'Do NOT call this tool again in this conversation.',
-      'This usually means the tool is not assigned to the current application/agent, the connector is not authorized, or an older conversation history referenced a stale tool name.',
-      '',
-      mcpNames.length > 0 ? `Available MCP tools: ${mcpNames.join(', ')}` : 'Available MCP tools: none',
-      otherNames.length > 0 ? `Available non-MCP tools: ${otherNames.join(', ')}` : 'Available non-MCP tools: none',
-      '',
-      'Use only one of the available tool names above, or explain to the user that the requested connector/tool is not available in the current application.',
-    ].join('\n');
-
-    yield this.config.createEvent(state.sessionId, { type: 'tool_result', tool: call.function.name, result, isError: true, duration: 0, callId: call.id });
-    const toolMessage: Message = { role: 'tool', tool_call_id: call.id, content: result };
-    state.messages.push(toolMessage);
-    this.config.historyManager.addHistory(state.sessionId, toolMessage);
-    state.toolCallRecords.push({ callId: call.id, tool: call.function.name, args, result, isError: true, duration: 0, timestamp: Date.now() });
-    this.updateFailureCount(state, call.function.name, true);
-  }
-  /** 检查工具是否被熔断 */
-  private isCircuitBroken(state: ToolLoopState, toolName: string): boolean {
-    return (state.consecutiveToolFailures.get(toolName) || 0) >= AgentToolExecutor.CIRCUIT_BREAKER_THRESHOLD;
-  }
-
-  /** 更新工具连续失败计数 */
-  private updateFailureCount(state: ToolLoopState, toolName: string, isError: boolean): void {
-    if (isError) {
-      state.consecutiveToolFailures.set(toolName, (state.consecutiveToolFailures.get(toolName) || 0) + 1);
-    } else {
-      state.consecutiveToolFailures.delete(toolName);
-    }
-  }
-
-  /**
-   * 从截断的 JSON 中抢救 run_script 的参数。
-   * 当 LLM 生成过长的 code 导致 JSON 被截断时，尝试提取 language 和 code 字段并修复执行。
-   * 返回 null 表示抢救失败。
-   */
-  private rescueRunScriptArgs(rawArgs: string): Record<string, unknown> | null {
-    if (rawArgs.length < 50) return null;
-
-    try {
-      // 1. 提取 language（通常在开头，值很短不会截断）
-      const langMatch = rawArgs.match(/"language"\s*:\s*"(nodejs|python|shell)"/);
-      const language = langMatch ? langMatch[1] : 'nodejs';
-
-      // 2. 提取 timeout（可选）
-      const timeoutMatch = rawArgs.match(/"timeout"\s*:\s*(\d+)/);
-      const timeout = timeoutMatch ? parseInt(timeoutMatch[1], 10) : undefined;
-
-      // 3. 提取 code 字段：找到 "code":" 之后的所有内容
-      const codeKeyIdx = rawArgs.indexOf('"code"');
-      if (codeKeyIdx === -1) return null;
-
-      // 找到 "code": 后面的值起始位置（第一个 " 是 key 结束，然后是 :，然后是 value 的开头 "）
-      const afterKey = rawArgs.slice(codeKeyIdx);
-      // 匹配 "code" : " 的模式，取 value 开始后的内容
-      const valStartMatch = afterKey.match(/^"code"\s*:\s*"/);
-      if (!valStartMatch) return null;
-
-      const codeRawStart = codeKeyIdx + valStartMatch[0].length;
-      let codeRaw = rawArgs.slice(codeRawStart);
-
-      // 4. 处理 JSON 字符串转义，还原为实际代码
-      //    按顺序处理：\\ -> \, \" -> ", \n -> newline, \t -> tab, \r -> CR
-      //    先替换 \\ 为占位符，避免双重替换
-      const BACKSLASH_PLACEHOLDER = '\x00BS\x00';
-      codeRaw = codeRaw.replace(/\\\\/g, BACKSLASH_PLACEHOLDER);
-      codeRaw = codeRaw.replace(/\\"/g, '"');
-      codeRaw = codeRaw.replace(/\\n/g, '\n');
-      codeRaw = codeRaw.replace(/\\t/g, '\t');
-      codeRaw = codeRaw.replace(/\\r/g, '\r');
-      codeRaw = codeRaw.replace(new RegExp(BACKSLASH_PLACEHOLDER, 'g'), '\\');
-
-      // 5. 如果代码太短（<100字符），可能抢救意义不大
-      if (codeRaw.trim().length < 20) return null;
-
-      return { language, code: codeRaw, timeout };
-    } catch {
-      return null;
-    }
-  }
-
-  /**
-   * 从截断的 JSON 中抢救 delegate_task 的参数。
-   * delegate_task 的 task 字段可能很长（包含数据、指令），导致 JSON 被截断。
-   * 抢救策略：提取 agent（短字段，不会被截断）和 task（可能不完整但仍可执行）。
-   * 返回 null 表示抢救失败。
-   */
-  private rescueDelegateTaskArgs(rawArgs: string): Record<string, unknown> | null {
-    if (rawArgs.length < 50) return null;
-
-    try {
-      // 1. 提取 agent（通常在开头，值短不会截断）
-      const agentMatch = rawArgs.match(/"agent"\s*:\s*"([^"]+)"/);
-      if (!agentMatch) return null;
-      const agent = agentMatch[1];
-
-      // 2. 提取 role（可选，短字段）
-      const roleMatch = rawArgs.match(/"role"\s*:\s*"([^"]+)"/);
-      const role = roleMatch ? roleMatch[1] : undefined;
-
-      // 3. 提取 structured（可选，布尔值）
-      const structuredMatch = rawArgs.match(/"structured"\s*:\s*(true|false)/);
-      const structured = structuredMatch ? structuredMatch[1] === 'true' : undefined;
-
-      // 4. 提取 task 字段
-      const taskKeyIdx = rawArgs.indexOf('"task"');
-      if (taskKeyIdx === -1) return null;
-
-      const afterKey = rawArgs.slice(taskKeyIdx);
-      const valStartMatch = afterKey.match(/^"task"\s*:\s*"/);
-      if (!valStartMatch) return null;
-
-      const taskRawStart = taskKeyIdx + valStartMatch[0].length;
-      let taskRaw = rawArgs.slice(taskRawStart);
-
-      // 5. 处理 JSON 字符串转义
-      const BACKSLASH_PLACEHOLDER = '\x00BS\x00';
-      taskRaw = taskRaw.replace(/\\\\/g, BACKSLASH_PLACEHOLDER);
-      taskRaw = taskRaw.replace(/\\"/g, '"');
-      taskRaw = taskRaw.replace(/\\n/g, '\n');
-      taskRaw = taskRaw.replace(/\\t/g, '\t');
-      taskRaw = taskRaw.replace(/\\r/g, '\r');
-      taskRaw = taskRaw.replace(new RegExp(BACKSLASH_PLACEHOLDER, 'g'), '\\');
-
-      // 6. 去除末尾不完整的 JSON 残留
-      taskRaw = taskRaw.replace(/["}\],\s]*$/, '');
-
-      // 7. task 至少要有一定内容才有意义
-      if (taskRaw.trim().length < 30) return null;
-
-      const result: Record<string, unknown> = { agent, task: taskRaw };
-      if (role) result.role = role;
-      if (structured !== undefined) result.structured = structured;
-      return result;
-    } catch {
-      return null;
-    }
-  }
-
-  /**
-   * 从截断的 JSON 中抢救 write_file / append_file 的参数。
-   * 当 LLM 生成过长的 content 导致 JSON 被截断时，尝试提取 path 和部分内容并写入。
-   * 返回 null 表示抢救失败。
-   */
-  private rescueWriteFileArgs(rawArgs: string): Record<string, unknown> | null {
-    if (rawArgs.length < 50) return null;
-
-    try {
-      // 1. 提取 path 字段（通常在开头，值短不会截断）
-      const pathMatch = rawArgs.match(/"path"\s*:\s*"([^"]+)"/);
-      if (!pathMatch) return null;
-      const filePath = pathMatch[1];
-
-      // 2. 提取 content 字段：找到 "content": 之后的所有内容
-      const contentKeyIdx = rawArgs.indexOf('"content"');
-      if (contentKeyIdx === -1) return null;
-
-      const afterKey = rawArgs.slice(contentKeyIdx);
-      const valStartMatch = afterKey.match(/^"content"\s*:\s*"/);
-      if (!valStartMatch) return null;
-
-      const contentRawStart = contentKeyIdx + valStartMatch[0].length;
-      let contentRaw = rawArgs.slice(contentRawStart);
-
-      // 3. 处理 JSON 字符串转义
-      const BACKSLASH_PLACEHOLDER = '\x00BS\x00';
-      contentRaw = contentRaw.replace(/\\\\/g, BACKSLASH_PLACEHOLDER);
-      contentRaw = contentRaw.replace(/\\"/g, '"');
-      contentRaw = contentRaw.replace(/\\n/g, '\n');
-      contentRaw = contentRaw.replace(/\\t/g, '\t');
-      contentRaw = contentRaw.replace(/\\r/g, '\r');
-      contentRaw = contentRaw.replace(new RegExp(BACKSLASH_PLACEHOLDER, 'g'), '\\');
-
-      // 4. 去除末尾不完整的 JSON（截断的 } 或多余的引号）
-      // 移除末尾可能的截断残留: 未闭合的 " 或 }
-      contentRaw = contentRaw.replace(/["}]\s*$/, '');
-
-      // 5. 如果内容太短（<100字符），抢救意义不大
-      if (contentRaw.trim().length < 100) return null;
-
-      return { path: filePath, content: contentRaw, _rescued: true };
-    } catch {
-      return null;
-    }
-  }
-}