@evalops/maestro 0.10.8 → 0.10.11

package/dist/agent/transport/tool-safety-pipeline.js

@@ -7,12 +7,30 @@
  */
 import { HUMAN_EGRESS_PII_RULE_ID, } from "../../safety/action-firewall.js";
 import { METRICS } from "../../safety/adaptive-thresholds.js";
+import { recordMaestroApprovalHit, recordMaestroFirewallBlock, } from "../../telemetry/maestro-event-bus.js";
 import { trackToolBlocked } from "../../telemetry/security-events.js";
 import { createLogger } from "../../utils/logger.js";
 import { describeToolActivity, describeToolDisplayName, summarizeToolUse, } from "../../utils/tool-use-summary.js";
 import { validateToolArguments } from "../providers/validation.js";
 import { buildPiiPolicyResult, extractTextFromContent, logToolExecutionAudit, } from "./transport-utils.js";
 const logger = createLogger("transport:tool-safety");
+async function waitForPendingApprovalRegistration(approvalService, requestId, decisionPromise, signal) {
+    const registrationAware = approvalService;
+    if (typeof registrationAware.waitForPendingApprovalRegistration !== "function") {
+        return null;
+    }
+    try {
+        return await Promise.race([
+            registrationAware.waitForPendingApprovalRegistration(requestId, {
+                signal,
+            }),
+            decisionPromise.then(() => null, () => null),
+        ]);
+    }
+    catch {
+        return null;
+    }
+}
 function checkRateLimit(ctx) {
     const { toolCall, clock, adaptiveThresholds, emitToolResult } = ctx;
     const { recentToolTimestamps, rateWindowMs, rateLimit } = ctx.rateLimitState;
@@ -120,7 +138,7 @@ function checkRateLimit(ctx) {
  * Yields events as they occur and returns the final verdict.
  */
 export async function* evaluateToolSafety(ctx) {
-    const { toolCall, tools, userMessage, cfg, signal, clock, safetyMiddleware, workflowState, auditLogger, approvalService, hookService, firewall, emitToolResult, } = ctx;
+    const { toolCall, tools, userMessage, cfg, signal, clock, safetyMiddleware, workflowState, auditLogger, approvalService, toolExecutionBridge, hookService, firewall, emitToolResult, } = ctx;
     const events = [];
     const recordEvent = (event) => {
         events.push(event);
@@ -234,6 +252,11 @@ export async function* evaluateToolSafety(ctx) {
     // 4. Firewall evaluation
     const workflowSnapshot = workflowState.snapshot();
     const toolDef = tools.find((t) => t.name === effectiveToolCall.name);
+    const describeArgs = (args) => ({
+        displayName: describeToolDisplayName(toolCall.name, args, toolDef),
+        summaryLabel: summarizeToolUse(toolCall.name, args, toolDef),
+        actionDescription: describeToolActivity(toolCall.name, args, toolDef),
+    });
     const verdict = await firewall.evaluate({
         toolName: effectiveToolCall.name,
         args: effectiveToolCall.arguments,
@@ -261,6 +284,20 @@ export async function* evaluateToolSafety(ctx) {
         };
         await logToolExecutionAudit(auditLogger, toolCall.name, safetyMiddleware.sanitizeForLogging(toolCall.arguments), "denied", 0, verdict.reason);
         const firewallBlockedEvents = recordEvents(emitToolResult(blockedResult, toolCall, true));
+        const sanitizedFirewallArgs = safetyMiddleware.sanitizeForLogging(effectiveToolCall.arguments);
+        recordMaestroFirewallBlock({
+            rule_id: verdict.ruleId,
+            operation: toolCall.name,
+            target: typeof sanitizedFirewallArgs.command === "string"
+                ? sanitizedFirewallArgs.command
+                : toolCall.name,
+            reason: verdict.reason,
+            context: sanitizedFirewallArgs,
+            correlation: {
+                session_id: cfg.session?.id,
+                agent_run_step_id: toolCall.id,
+            },
+        });
         for (const event of firewallBlockedEvents) {
             yield event;
         }
@@ -282,11 +319,88 @@ export async function* evaluateToolSafety(ctx) {
             rateLimitUpdate: rateLimitResult.updatedState,
         };
     }
+    if (!toolDef) {
+        const errorResult = {
+            role: "toolResult",
+            toolCallId: toolCall.id,
+            toolName: toolCall.name,
+            content: [
+                {
+                    type: "text",
+                    text: `Error: Tool "${toolCall.name}" not found`,
+                },
+            ],
+            isError: true,
+            timestamp: clock.now(),
+        };
+        const errorEvents = recordEvents(emitToolResult(errorResult, toolCall, true));
+        for (const event of errorEvents) {
+            yield event;
+        }
+        return {
+            verdict: { outcome: "blocked", events },
+            rateLimitUpdate: rateLimitResult.updatedState,
+        };
+    }
+    let toolExecutionBridgePlan;
+    let platformApprovalRequest;
+    let platformApprovalResolved = false;
+    const bridgeArgs = safetyMiddleware.sanitizeForLogging(effectiveToolCall.arguments);
+    const bridgeInput = {
+        cfg,
+        toolCall,
+        toolDef,
+        sanitizedArgs: bridgeArgs,
+        ...describeArgs(bridgeArgs),
+    };
+    if (toolExecutionBridge) {
+        const bridgeResult = await toolExecutionBridge.prepare(bridgeInput, signal);
+        switch (bridgeResult.status) {
+            case "observe":
+            case "allow":
+                toolExecutionBridgePlan = bridgeResult.plan;
+                break;
+            case "wait_approval":
+                toolExecutionBridgePlan = bridgeResult.plan;
+                platformApprovalRequest = bridgeResult.request;
+                approvalAllowed = false;
+                approvalReason = bridgeResult.request.reason;
+                break;
+            case "deny": {
+                await logToolExecutionAudit(auditLogger, effectiveToolCall.name, bridgeArgs, "denied", 0, bridgeResult.reason);
+                const deniedResult = {
+                    role: "toolResult",
+                    toolCallId: toolCall.id,
+                    toolName: toolCall.name,
+                    content: [{ type: "text", text: bridgeResult.reason }],
+                    isError: true,
+                    timestamp: clock.now(),
+                };
+                const deniedEvents = recordEvents(emitToolResult(deniedResult, toolCall, true, {
+                    toolExecutionId: bridgeResult.plan?.metadata.toolExecutionId,
+                    approvalRequestId: bridgeResult.plan?.metadata.approvalRequestId,
+                }));
+                for (const event of deniedEvents) {
+                    yield event;
+                }
+                return {
+                    verdict: { outcome: "blocked", events },
+                    rateLimitUpdate: rateLimitResult.updatedState,
+                };
+            }
+            default:
+                break;
+        }
+    }
     // 6. Approval flow
-    if (verdict.action === "require_approval") {
+    if (verdict.action === "require_approval" || platformApprovalRequest) {
+        const localApprovalReason = verdict.action === "require_approval" ? verdict.reason : undefined;
         let permissionHookMadeDecision = false;
         if (hookService?.runPermissionRequestHooks) {
-            const permissionHookResult = await hookService.runPermissionRequestHooks(effectiveToolCall, verdict.reason ?? approvalReason ?? "Approval required", signal);
+            const permissionHookResult = await hookService.runPermissionRequestHooks(effectiveToolCall, platformApprovalRequest?.reason ??
+                localApprovalReason ??
+                approvalReason ??
+                "Approval required", signal);
             if (permissionHookResult.updatedInput) {
                 effectiveToolCall = {
                     ...effectiveToolCall,
@@ -306,22 +420,65 @@ export async function* evaluateToolSafety(ctx) {
                         "Permission denied by PermissionRequest hook";
             }
         }
+        if (permissionHookMadeDecision &&
+            toolExecutionBridge &&
+            platformApprovalRequest &&
+            toolExecutionBridgePlan?.kind === "governed") {
+            const resolution = await toolExecutionBridge.resolveApproval(bridgeInput, toolExecutionBridgePlan, {
+                approved: approvalAllowed,
+                reason: approvalReason,
+                resolvedBy: "policy",
+            }, signal);
+            platformApprovalResolved = true;
+            toolExecutionBridgePlan = resolution.plan;
+            if (resolution.status === "deny") {
+                approvalAllowed = false;
+                approvalReason = resolution.reason;
+            }
+            else {
+                approvalAllowed = true;
+                approvalReason = undefined;
+            }
+        }
         if (approvalService && !permissionHookMadeDecision) {
             const sanitizedApprovalArgs = safetyMiddleware.sanitizeForLogging(effectiveToolCall.arguments);
-            const request = {
-                id: toolCall.id,
-                toolName: toolCall.name,
-                displayName: describeToolDisplayName(toolCall.name, sanitizedApprovalArgs, toolDef),
-                summaryLabel: summarizeToolUse(toolCall.name, sanitizedApprovalArgs, toolDef),
-                actionDescription: describeToolActivity(toolCall.name, sanitizedApprovalArgs, toolDef),
-                args: sanitizedApprovalArgs,
-                reason: verdict.reason ?? "Approval required",
-            };
+            const request = platformApprovalRequest ??
+                {
+                    id: toolCall.id,
+                    toolName: toolCall.name,
+                    ...describeArgs(sanitizedApprovalArgs),
+                    args: sanitizedApprovalArgs,
+                    reason: localApprovalReason ?? "Approval required",
+                };
             const shouldEmitEvents = approvalService.requiresUserInteraction();
+            const decisionPromise = approvalService.requestApproval(request, signal);
+            const registrationMetadata = await waitForPendingApprovalRegistration(approvalService, request.id, decisionPromise, signal);
+            recordMaestroApprovalHit({
+                approval_request_id: platformApprovalRequest?.id ??
+                    toolExecutionBridgePlan?.metadata.approvalRequestId ??
+                    registrationMetadata?.remoteApprovalRequestId ??
+                    request.id,
+                action: request.actionDescription ?? request.summaryLabel ?? request.toolName,
+                command: typeof sanitizedApprovalArgs.command === "string"
+                    ? sanitizedApprovalArgs.command
+                    : undefined,
+                decision_mode: "MAESTRO_DECISION_MODE_REQUIRE_APPROVAL",
+                reason: request.reason,
+                context: {
+                    tool_name: request.toolName,
+                    display_name: request.displayName,
+                    summary_label: request.summaryLabel,
+                    args: sanitizedApprovalArgs,
+                },
+                correlation: {
+                    session_id: cfg.session?.id,
+                    agent_run_step_id: toolCall.id,
+                },
+            });
             if (shouldEmitEvents) {
                 yield recordEvent({ type: "action_approval_required", request });
             }
-            const decision = await approvalService.requestApproval(request, signal);
+            const decision = await decisionPromise;
             if (shouldEmitEvents) {
                 yield recordEvent({
                     type: "action_approval_resolved",
@@ -329,13 +486,43 @@ export async function* evaluateToolSafety(ctx) {
                     decision,
                 });
             }
+            if (toolExecutionBridge &&
+                platformApprovalRequest &&
+                toolExecutionBridgePlan?.kind === "governed") {
+                const resolution = await toolExecutionBridge.resolveApproval(bridgeInput, toolExecutionBridgePlan, decision, signal);
+                platformApprovalResolved = true;
+                toolExecutionBridgePlan = resolution.plan;
+                if (resolution.status === "deny") {
+                    approvalAllowed = false;
+                    approvalReason = resolution.reason;
+                }
+                else {
+                    approvalAllowed = true;
+                    approvalReason = undefined;
+                }
+            }
             if (!decision.approved) {
                 approvalAllowed = false;
-                approvalReason = decision.reason ?? verdict.reason;
+                approvalReason = decision.reason ?? localApprovalReason;
             }
         }
     }
     if (!approvalAllowed) {
+        if (toolExecutionBridge &&
+            platformApprovalRequest &&
+            toolExecutionBridgePlan?.kind === "governed" &&
+            !platformApprovalResolved) {
+            const resolution = await toolExecutionBridge.resolveApproval(bridgeInput, toolExecutionBridgePlan, {
+                approved: false,
+                reason: approvalReason ?? "Approval denied",
+                resolvedBy: "policy",
+            }, signal);
+            toolExecutionBridgePlan = resolution.plan;
+            approvalReason =
+                resolution.status === "deny"
+                    ? resolution.reason
+                    : (approvalReason ?? "Approval denied");
+        }
         await logToolExecutionAudit(auditLogger, effectiveToolCall.name, safetyMiddleware.sanitizeForLogging(effectiveToolCall.arguments), "denied", 0, approvalReason);
         const deniedResult = {
             role: "toolResult",
@@ -345,7 +532,10 @@ export async function* evaluateToolSafety(ctx) {
             isError: true,
             timestamp: clock.now(),
         };
-        const deniedEvents = recordEvents(emitToolResult(deniedResult, toolCall, true));
+        const deniedEvents = recordEvents(emitToolResult(deniedResult, toolCall, true, {
+            toolExecutionId: toolExecutionBridgePlan?.metadata.toolExecutionId,
+            approvalRequestId: toolExecutionBridgePlan?.metadata.approvalRequestId,
+        }));
         for (const event of deniedEvents) {
             yield event;
         }
@@ -354,31 +544,7 @@ export async function* evaluateToolSafety(ctx) {
             rateLimitUpdate: rateLimitResult.updatedState,
         };
     }
-    // 7. Tool lookup
-    if (!toolDef) {
-        const errorResult = {
-            role: "toolResult",
-            toolCallId: toolCall.id,
-            toolName: toolCall.name,
-            content: [
-                {
-                    type: "text",
-                    text: `Error: Tool "${toolCall.name}" not found`,
-                },
-            ],
-            isError: true,
-            timestamp: clock.now(),
-        };
-        const errorEvents = recordEvents(emitToolResult(errorResult, toolCall, true));
-        for (const event of errorEvents) {
-            yield event;
-        }
-        return {
-            verdict: { outcome: "blocked", events },
-            rateLimitUpdate: rateLimitResult.updatedState,
-        };
-    }
-    // 8. Argument validation
+    // 7. Argument validation
     let validatedArgs;
     try {
         const rawArgs = validateToolArguments(toolDef, effectiveToolCall);
@@ -417,6 +583,7 @@ export async function* evaluateToolSafety(ctx) {
             toolDef,
             events,
             sanitizedExecutionArgs,
+            ...(toolExecutionBridgePlan ? { toolExecutionBridgePlan } : {}),
         },
         rateLimitUpdate: rateLimitResult.updatedState,
     };

package/dist/agent/transport/tool-safety-pipeline.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-safety-pipeline.js","sourceRoot":"","sources":["../../../src/agent/transport/tool-safety-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEN,wBAAwB,GACxB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAG9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACN,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,GAChB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AASnE,OAAO,EAEN,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AA6ErD,SAAS,cAAc,CAAC,GAAsB;IAY7C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC;IACpE,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAC7E,IAAI,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAEpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC;IAElE,sDAAsD;IACtD,IAAI,GAAG,GAAG,iBAAiB,IAAI,MAAM,EAAE,CAAC;QACvC,kBAAkB,CAAC,iBAAiB,CACnC,OAAO,CAAC,qBAAqB,EAC7B,mBAAmB,CACnB,CAAC;QACF,mBAAmB,GAAG,CAAC,CAAC;QACxB,iBAAiB,GAAG,GAAG,CAAC;IACzB,CAAC;IACD,mBAAmB,EAAE,CAAC;IAEtB,8BAA8B;IAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC1D,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAClE,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;SAAM,IACN,aAAa,KAAK,UAAU;QAC5B,aAAa,KAAK,WAAW;QAC7B,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;QACF,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,YAAY,GAAoB;QACrC,mBAAmB;QACnB,iBAAiB;KACjB,CAAC;IAEF,qCAAqC;IACrC,MAAM,YAAY,GAAG,kBAAkB,CAAC,YAAY,CACnD,OAAO,CAAC,qBAAqB,EAC7B,mBAAmB,CACnB,CAAC;IAEF,4BAA4B;IAC5B,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,YAAY,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACtF,gBAAgB,CAAC;YAChB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM;YACN,MAAM,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,MAAM,cAAc,GAAsB;YACzC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,gCAAgC,YAAY,CAAC,MAAM,IAAI,oCAAoC,cAAc,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;iBACvP;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG;SACd,CAAC;QACF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC;YACtD,YAAY;YACZ,KAAK,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,mBAAmB,CAChE,aAAa,QAAQ,CAAC,IAAI,EAAE,EAC5B,SAAS,CACT,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,yBAAyB,kBAAkB,aAAa,YAAY,GAAG,IAAI,UAAU,CAAC;QACrG,MAAM,WAAW,GAAsB;YACtC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,yBAAyB,kBAAkB,aAAa,YAAY,GAAG,IAAI,YACzG,YAAY,CAAC,SAAS;wBACrB,CAAC,CAAC,uBAAuB,YAAY,CAAC,MAAM,GAAG;wBAC/C,CAAC,CAAC,EACJ,EAAE;iBACF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG;SACd,CAAC;QACF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC;YACnD,YAAY;YACZ,KAAK,EAAE;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,kBAAkB,CAAC,iBAAiB,CACnC,aAAa,QAAQ,CAAC,IAAI,EAAE,EAC5B,MAAM,CAAC,MAAM,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEhD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAOD,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACxC,GAAsB;IAKtB,MAAM,EACL,QAAQ,EACR,KAAK,EACL,WAAW,EACX,GAAG,EACH,MAAM,EACN,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,WAAW,EACX,QAAQ,EACR,cAAc,GACd,GAAG,GAAG,CAAC;IAER,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAE,EAAE;QACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,SAAuB,EAAE,EAAE;QAChD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,kBAAkB,CAC7D,QAAQ,CAAC,SAAoC,CAC7C,CAAC;IAEF,mBAAmB;IACnB,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,kBAAkB,EAClB,QAAQ,EACR,CAAC,EACD,eAAe,CAAC,KAAK,CAAC,MAAM,CAC5B,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,CAAC;QACjB,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IAEH,sBAAsB;IACtB,IAAI,iBAAiB,GAAG,QAAQ,CAAC;IACjC,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE1E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,iBAAiB,GAAsB;gBAC5C,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oBAAoB,UAAU,CAAC,WAAW,IAAI,uBAAuB,EAAE;qBAC7E;iBACD;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,gBAAgB,CAAC,kBAAkB,CAClC,QAAQ,CAAC,SAAoC,CAC7C,EACD,QAAQ,EACR,CAAC,EACD,UAAU,CAAC,WAAW,CACtB,CAAC;YACF,MAAM,iBAAiB,GAAG,YAAY,CACrC,cAAc,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACjD,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC;YACb,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;gBACvC,eAAe,EAAE,eAAe,CAAC,YAAY;aAC7C,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC/B,QAAQ,CAAC,SAAoC,CAC7C,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CACL,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvB,QAAQ,CAAC,SAAqC,CAAC,CAAC,CAAC;oBACjD,UAAU,CAAC,YAAa,CAAC,CAAC,CAAC,CAC7B,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,SAAS;gBACT,WAAW;gBACX,YAAY;aACZ,CAAC,CAAC;YACH,iBAAiB,GAAG;gBACnB,GAAG,QAAQ;gBACX,SAAS,EAAE,UAAU,CAAC,YAAY;aAClC,CAAC;QACH,CAAC;IACF,CAAC;IAED,yCAAyC;IACzC,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,CAChD,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,SAAoC,CACtD,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,mBAAmB,GAAsB;YAC9C,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,4BAA4B,WAAW,CAAC,MAAM,IAAI,yBAAyB,EAAE;iBACnF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,WAAW,CAAC,aAAa,EACzB,QAAQ,EACR,CAAC,EACD,WAAW,CAAC,MAAM,CAClB,CAAC;QACF,MAAM,mBAAmB,GAAG,YAAY,CACvC,cAAc,CAAC,mBAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACnD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,IAAI,eAAe,GAAG,IAAI,CAAC;IAC3B,IAAI,cAAkC,CAAC;IAEvC,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAClC,eAAe,GAAG,KAAK,CAAC;QACxB,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;QACvC,QAAQ,EAAE,iBAAiB,CAAC,IAAI;QAChC,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,QAAQ,EAAE;YACT,aAAa,EAAE,gBAAgB;YAC/B,WAAW,EAAE,OAAO,EAAE,WAAW;SACjC;QACD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC;KACvD,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,aAAa,GAAsB;YACxC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,+BAA+B,OAAO,CAAC,MAAM,GAClD,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAClE,EAAE;iBACF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,gBAAgB,CAAC,kBAAkB,CAClC,QAAQ,CAAC,SAAoC,CAC7C,EACD,QAAQ,EACR,CAAC,EACD,OAAO,CAAC,MAAM,CACd,CAAC;QACF,MAAM,qBAAqB,GAAG,YAAY,CACzC,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC7C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IACC,OAAO,CAAC,MAAM,KAAK,kBAAkB;QACrC,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAC1C,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CACxC,QAAQ,EACR,gBAAgB,EAChB,KAAK,CACL,CAAC;QACF,MAAM,mBAAmB,GAAG,YAAY,CACvC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC5C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAC3C,IAAI,0BAA0B,GAAG,KAAK,CAAC;QACvC,IAAI,WAAW,EAAE,yBAAyB,EAAE,CAAC;YAC5C,MAAM,oBAAoB,GAAG,MAAM,WAAW,CAAC,yBAAyB,CACvE,iBAAiB,EACjB,OAAO,CAAC,MAAM,IAAI,cAAc,IAAI,mBAAmB,EACvD,MAAM,CACN,CAAC;YACF,IAAI,oBAAoB,CAAC,YAAY,EAAE,CAAC;gBACvC,iBAAiB,GAAG;oBACnB,GAAG,iBAAiB;oBACpB,SAAS,EAAE,oBAAoB,CAAC,YAAY;iBAC5C,CAAC;YACH,CAAC;YACD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC/C,0BAA0B,GAAG,IAAI,CAAC;gBAClC,eAAe,GAAG,IAAI,CAAC;gBACvB,cAAc,GAAG,oBAAoB,CAAC,cAAc,CAAC;YACtD,CAAC;iBAAM,IAAI,oBAAoB,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrD,0BAA0B,GAAG,IAAI,CAAC;gBAClC,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc;oBACb,oBAAoB,CAAC,cAAc;wBACnC,6CAA6C,CAAC;YAChD,CAAC;QACF,CAAC;QAED,IAAI,eAAe,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACpD,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAChE,iBAAiB,CAAC,SAAoC,CACtD,CAAC;YACF,MAAM,OAAO,GAAG;gBACf,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,WAAW,EAAE,uBAAuB,CACnC,QAAQ,CAAC,IAAI,EACb,qBAAqB,EACrB,OAAO,CACP;gBACD,YAAY,EAAE,gBAAgB,CAC7B,QAAQ,CAAC,IAAI,EACb,qBAAqB,EACrB,OAAO,CACP;gBACD,iBAAiB,EAAE,oBAAoB,CACtC,QAAQ,CAAC,IAAI,EACb,qBAAqB,EACrB,OAAO,CACP;gBACD,IAAI,EAAE,qBAAqB;gBAC3B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,mBAAmB;aAC7C,CAAC;YACF,MAAM,gBAAgB,GAAG,eAAe,CAAC,uBAAuB,EAAE,CAAC;YACnE,IAAI,gBAAgB,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,gBAAgB,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,OAAO;oBACP,QAAQ;iBACR,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxB,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc,GAAG,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;YACpD,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,MAAM,qBAAqB,CAC1B,WAAW,EACX,iBAAiB,CAAC,IAAI,EACtB,gBAAgB,CAAC,kBAAkB,CAClC,iBAAiB,CAAC,SAAoC,CACtD,EACD,QAAQ,EACR,CAAC,EACD,cAAc,CACd,CAAC;QACF,MAAM,YAAY,GAAsB;YACvC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,IAAI,eAAe,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,YAAY,GAAG,YAAY,CAChC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC5C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,WAAW,GAAsB;YACtC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,gBAAgB,QAAQ,CAAC,IAAI,aAAa;iBAChD;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,WAAW,GAAG,YAAY,CAC/B,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC3C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,aAAsC,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnE,aAAa,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,qBAAqB,GAAsB;YAChD,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5D;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,YAAY,CACpC,cAAc,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACrD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,MAAM,sBAAsB,GAC3B,gBAAgB,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEpD,OAAO;QACN,OAAO,EAAE;YACR,OAAO,EAAE,SAAS;YAClB,iBAAiB;YACjB,aAAa;YACb,OAAO;YACP,MAAM;YACN,sBAAsB;SACtB;QACD,eAAe,EAAE,eAAe,CAAC,YAAY;KAC7C,CAAC;AACH,CAAC","sourcesContent":["/**\n * Tool Safety Pipeline\n * Pre-execution safety evaluation: rate limiting, adaptive thresholds,\n * safety middleware, firewall checks, PII policy, approval flow, and tool validation.\n *\n * Yields events as they occur and returns a verdict when complete.\n */\n\nimport {\n\ttype ActionFirewall,\n\tHUMAN_EGRESS_PII_RULE_ID,\n} from \"../../safety/action-firewall.js\";\nimport type { AdaptiveThresholds } from \"../../safety/adaptive-thresholds.js\";\nimport { METRICS } from \"../../safety/adaptive-thresholds.js\";\nimport type { SafetyMiddleware } from \"../../safety/safety-middleware.js\";\nimport type { WorkflowStateTracker } from \"../../safety/workflow-state.js\";\nimport { trackToolBlocked } from \"../../telemetry/security-events.js\";\nimport type { Clock } from \"../../utils/clock.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport {\n\tdescribeToolActivity,\n\tdescribeToolDisplayName,\n\tsummarizeToolUse,\n} from \"../../utils/tool-use-summary.js\";\nimport type { ActionApprovalService } from \"../action-approval.js\";\nimport { validateToolArguments } from \"../providers/validation.js\";\nimport type {\n\tAgentEvent,\n\tAgentRunConfig,\n\tAgentTool,\n\tMessage,\n\tToolCall,\n\tToolResultMessage,\n} from \"../types.js\";\nimport {\n\ttype ToolAuditLogger,\n\tbuildPiiPolicyResult,\n\textractTextFromContent,\n\tlogToolExecutionAudit,\n} from \"./transport-utils.js\";\n\nconst logger = createLogger(\"transport:tool-safety\");\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type ToolSafetyVerdict =\n\t| { outcome: \"blocked\"; events: AgentEvent[] }\n\t| {\n\t\t\toutcome: \"proceed\";\n\t\t\teffectiveToolCall: ToolCall;\n\t\t\tvalidatedArgs: Record<string, unknown>;\n\t\t\ttoolDef: AgentTool;\n\t\t\tevents: AgentEvent[];\n\t\t\tsanitizedExecutionArgs: Record<string, unknown>;\n\t  };\n\nexport interface ToolSafetyContext {\n\ttoolCall: ToolCall;\n\ttools: AgentTool[];\n\tuserMessage: Message;\n\tcfg: AgentRunConfig;\n\tsignal?: AbortSignal;\n\t// Services\n\tclock: Clock;\n\tsafetyMiddleware: SafetyMiddleware;\n\tworkflowState: WorkflowStateTracker;\n\tadaptiveThresholds: AdaptiveThresholds;\n\tauditLogger?: ToolAuditLogger;\n\tapprovalService?: ActionApprovalService;\n\thookService?: {\n\t\trunPreToolUseHooks: (\n\t\t\ttoolCall: ToolCall,\n\t\t\tsignal?: AbortSignal,\n\t\t) => Promise<{\n\t\t\tblocked?: boolean;\n\t\t\tblockReason?: string;\n\t\t\tupdatedInput?: Record<string, unknown>;\n\t\t}>;\n\t\trunPermissionRequestHooks?: (\n\t\t\ttoolCall: ToolCall,\n\t\t\treason: string,\n\t\t\tsignal?: AbortSignal,\n\t\t) => Promise<{\n\t\t\tdecision?: \"allow\" | \"deny\";\n\t\t\tdecisionReason?: string;\n\t\t\tupdatedInput?: Record<string, unknown>;\n\t\t}>;\n\t};\n\tfirewall: ActionFirewall;\n\t// Mutable rate-limit state\n\trateLimitState: {\n\t\trecentToolTimestamps: Map<string, number[]>;\n\t\ttoolCallsThisMinute: number;\n\t\tminuteWindowStart: number;\n\t\trateWindowMs: number;\n\t\trateLimit: number;\n\t};\n\t// Emit helpers\n\temitToolResult: (\n\t\tmessage: ToolResultMessage,\n\t\ttoolCall: ToolCall,\n\t\tisError: boolean,\n\t) => AgentEvent[];\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Rate Limiting\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype RateLimitBlockKind = \"anomaly\" | \"rate_limit\";\n\ninterface RateLimitBlock {\n\tkind: RateLimitBlockKind;\n\treason: string;\n}\n\nfunction checkRateLimit(ctx: ToolSafetyContext):\n\t| {\n\t\t\tblocked: true;\n\t\t\tevents: AgentEvent[];\n\t\t\tupdatedState: RateLimitUpdate;\n\t\t\tblock: RateLimitBlock;\n\t  }\n\t| {\n\t\t\tblocked: false;\n\t\t\trecent: number[];\n\t\t\tupdatedState: RateLimitUpdate;\n\t  } {\n\tconst { toolCall, clock, adaptiveThresholds, emitToolResult } = ctx;\n\tconst { recentToolTimestamps, rateWindowMs, rateLimit } = ctx.rateLimitState;\n\tlet { toolCallsThisMinute, minuteWindowStart } = ctx.rateLimitState;\n\n\tconst now = clock.now();\n\tconst timestamps = recentToolTimestamps.get(toolCall.name) ?? [];\n\tconst recent = timestamps.filter((ts) => now - ts < rateWindowMs);\n\n\t// Track tool calls per minute for adaptive thresholds\n\tif (now - minuteWindowStart >= 60_000) {\n\t\tadaptiveThresholds.recordObservation(\n\t\t\tMETRICS.TOOL_CALLS_PER_MINUTE,\n\t\t\ttoolCallsThisMinute,\n\t\t);\n\t\ttoolCallsThisMinute = 0;\n\t\tminuteWindowStart = now;\n\t}\n\ttoolCallsThisMinute++;\n\n\t// Track tool-specific metrics\n\tconst toolNameLower = toolCall.name.toLowerCase();\n\tif (toolNameLower === \"read\" || toolNameLower === \"glob\") {\n\t\tadaptiveThresholds.recordObservation(METRICS.READS_PER_MINUTE, 1);\n\t} else if (toolNameLower === \"write\" || toolNameLower === \"edit\") {\n\t\tadaptiveThresholds.recordObservation(METRICS.WRITES_PER_MINUTE, 1);\n\t} else if (\n\t\ttoolNameLower === \"webfetch\" ||\n\t\ttoolNameLower === \"websearch\" ||\n\t\ttoolNameLower.includes(\"mcp\")\n\t) {\n\t\tadaptiveThresholds.recordObservation(METRICS.EGRESS_PER_MINUTE, 1);\n\t}\n\n\tconst updatedState: RateLimitUpdate = {\n\t\ttoolCallsThisMinute,\n\t\tminuteWindowStart,\n\t};\n\n\t// Check for anomalous tool call rate\n\tconst anomalyCheck = adaptiveThresholds.checkAnomaly(\n\t\tMETRICS.TOOL_CALLS_PER_MINUTE,\n\t\ttoolCallsThisMinute,\n\t);\n\n\t// Enforce anomaly detection\n\tif (anomalyCheck.isAnomaly) {\n\t\tconst reason = `Anomaly detected: ${anomalyCheck.reason ?? \"Unusual tool call rate\"}`;\n\t\ttrackToolBlocked({\n\t\t\ttoolName: toolCall.name,\n\t\t\treason,\n\t\t\tsource: \"adaptive\",\n\t\t});\n\t\tconst anomalyMessage: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked \"${toolCall.name}\" due to anomalous behavior: ${anomalyCheck.reason ?? \"Unusual tool call pattern detected\"}. Z-score: ${anomalyCheck.zScore.toFixed(2)}, Baseline: ${anomalyCheck.mean.toFixed(2)} ± ${anomalyCheck.stdDev.toFixed(2)}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: now,\n\t\t};\n\t\treturn {\n\t\t\tblocked: true,\n\t\t\tevents: emitToolResult(anomalyMessage, toolCall, true),\n\t\t\tupdatedState,\n\t\t\tblock: {\n\t\t\t\tkind: \"anomaly\",\n\t\t\t\treason,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Use adaptive threshold if we have enough data, otherwise use static limit\n\tconst effectiveRateLimit = adaptiveThresholds.getAdaptedThreshold(\n\t\t`tool_rate_${toolCall.name}`,\n\t\trateLimit,\n\t);\n\n\tif (recent.length >= effectiveRateLimit) {\n\t\tconst reason = `Rate limit exceeded: >${effectiveRateLimit} calls in ${rateWindowMs / 1000}s window`;\n\t\tconst rateMessage: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked \"${toolCall.name}\" due to rate limit: >${effectiveRateLimit} calls in ${rateWindowMs / 1000}s window.${\n\t\t\t\t\t\tanomalyCheck.isAnomaly\n\t\t\t\t\t\t\t? ` (Anomaly detected: ${anomalyCheck.reason})`\n\t\t\t\t\t\t\t: \"\"\n\t\t\t\t\t}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: now,\n\t\t};\n\t\treturn {\n\t\t\tblocked: true,\n\t\t\tevents: emitToolResult(rateMessage, toolCall, true),\n\t\t\tupdatedState,\n\t\t\tblock: {\n\t\t\t\tkind: \"rate_limit\",\n\t\t\t\treason,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Record observation for per-tool adaptive rate\n\tadaptiveThresholds.recordObservation(\n\t\t`tool_rate_${toolCall.name}`,\n\t\trecent.length,\n\t);\n\trecent.push(now);\n\trecentToolTimestamps.set(toolCall.name, recent);\n\n\treturn { blocked: false, recent, updatedState };\n}\n\ninterface RateLimitUpdate {\n\ttoolCallsThisMinute: number;\n\tminuteWindowStart: number;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Main Safety Evaluation\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Evaluate all safety checks for a tool call before execution.\n * Yields events as they occur and returns the final verdict.\n */\nexport async function* evaluateToolSafety(\n\tctx: ToolSafetyContext,\n): AsyncGenerator<\n\tAgentEvent,\n\t{ verdict: ToolSafetyVerdict; rateLimitUpdate: RateLimitUpdate }\n> {\n\tconst {\n\t\ttoolCall,\n\t\ttools,\n\t\tuserMessage,\n\t\tcfg,\n\t\tsignal,\n\t\tclock,\n\t\tsafetyMiddleware,\n\t\tworkflowState,\n\t\tauditLogger,\n\t\tapprovalService,\n\t\thookService,\n\t\tfirewall,\n\t\temitToolResult,\n\t} = ctx;\n\n\tconst events: AgentEvent[] = [];\n\tconst recordEvent = (event: AgentEvent) => {\n\t\tevents.push(event);\n\t\treturn event;\n\t};\n\tconst recordEvents = (newEvents: AgentEvent[]) => {\n\t\tevents.push(...newEvents);\n\t\treturn newEvents;\n\t};\n\n\tconst sanitizedStartArgs = safetyMiddleware.sanitizeForLogging(\n\t\ttoolCall.arguments as Record<string, unknown>,\n\t);\n\n\t// 1. Rate limiting\n\tconst rateLimitResult = checkRateLimit(ctx);\n\tif (rateLimitResult.blocked) {\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsanitizedStartArgs,\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\trateLimitResult.block.reason,\n\t\t);\n\t\tconst blockedEvents = recordEvents(rateLimitResult.events);\n\t\tfor (const event of blockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\tyield recordEvent({\n\t\ttype: \"tool_execution_start\",\n\t\ttoolCallId: toolCall.id,\n\t\ttoolName: toolCall.name,\n\t\targs: sanitizedStartArgs,\n\t});\n\n\t// 2. PreToolUse hooks\n\tlet effectiveToolCall = toolCall;\n\tif (hookService) {\n\t\tconst hookResult = await hookService.runPreToolUseHooks(toolCall, signal);\n\n\t\tif (hookResult.blocked) {\n\t\t\tconst hookBlockedResult: ToolResultMessage = {\n\t\t\t\trole: \"toolResult\",\n\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\ttoolName: toolCall.name,\n\t\t\t\tcontent: [\n\t\t\t\t\t{\n\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\ttext: `Blocked by hook: ${hookResult.blockReason ?? \"Hook denied execution\"}`,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t\tisError: true,\n\t\t\t\ttimestamp: clock.now(),\n\t\t\t};\n\t\t\tawait logToolExecutionAudit(\n\t\t\t\tauditLogger,\n\t\t\t\ttoolCall.name,\n\t\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t\t),\n\t\t\t\t\"denied\",\n\t\t\t\t0,\n\t\t\t\thookResult.blockReason,\n\t\t\t);\n\t\t\tconst hookBlockedEvents = recordEvents(\n\t\t\t\temitToolResult(hookBlockedResult, toolCall, true),\n\t\t\t);\n\t\t\tfor (const event of hookBlockedEvents) {\n\t\t\t\tyield event;\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t\t};\n\t\t}\n\n\t\tif (hookResult.updatedInput) {\n\t\t\tconst originalKeys = Object.keys(\n\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst updatedKeys = Object.keys(hookResult.updatedInput);\n\t\t\tconst addedKeys = updatedKeys.filter((k) => !originalKeys.includes(k));\n\t\t\tconst removedKeys = originalKeys.filter((k) => !updatedKeys.includes(k));\n\t\t\tconst modifiedKeys = updatedKeys.filter(\n\t\t\t\t(k) =>\n\t\t\t\t\toriginalKeys.includes(k) &&\n\t\t\t\t\t(toolCall.arguments as Record<string, unknown>)[k] !==\n\t\t\t\t\t\thookResult.updatedInput![k],\n\t\t\t);\n\t\t\tlogger.debug(\"Hook modified tool input\", {\n\t\t\t\ttoolName: toolCall.name,\n\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\taddedKeys,\n\t\t\t\tremovedKeys,\n\t\t\t\tmodifiedKeys,\n\t\t\t});\n\t\t\teffectiveToolCall = {\n\t\t\t\t...toolCall,\n\t\t\t\targuments: hookResult.updatedInput,\n\t\t\t};\n\t\t}\n\t}\n\n\t// 3. Safety middleware sequence analysis\n\tconst safetyCheck = safetyMiddleware.preExecution(\n\t\teffectiveToolCall.name,\n\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t);\n\n\tif (!safetyCheck.allowed && !safetyCheck.requiresApproval) {\n\t\tconst safetyBlockedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked by safety check: ${safetyCheck.reason ?? \"Safety policy violation\"}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsafetyCheck.sanitizedArgs,\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tsafetyCheck.reason,\n\t\t);\n\t\tconst safetyBlockedEvents = recordEvents(\n\t\t\temitToolResult(safetyBlockedResult, toolCall, true),\n\t\t);\n\t\tfor (const event of safetyBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tlet approvalAllowed = true;\n\tlet approvalReason: string | undefined;\n\n\tif (safetyCheck.requiresApproval) {\n\t\tapprovalAllowed = false;\n\t\tapprovalReason = safetyCheck.reason;\n\t}\n\n\t// 4. Firewall evaluation\n\tconst workflowSnapshot = workflowState.snapshot();\n\tconst toolDef = tools.find((t) => t.name === effectiveToolCall.name);\n\tconst verdict = await firewall.evaluate({\n\t\ttoolName: effectiveToolCall.name,\n\t\targs: effectiveToolCall.arguments,\n\t\tmetadata: {\n\t\t\tworkflowState: workflowSnapshot,\n\t\t\tannotations: toolDef?.annotations,\n\t\t},\n\t\tuser: cfg.user,\n\t\tsession: cfg.session,\n\t\tuserIntent: extractTextFromContent(userMessage.content),\n\t});\n\n\tif (verdict.action === \"block\") {\n\t\tconst blockedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Action blocked by firewall: ${verdict.reason}${\n\t\t\t\t\t\tverdict.remediation ? `\\n\\nSuggestion: ${verdict.remediation}` : \"\"\n\t\t\t\t\t}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t),\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tverdict.reason,\n\t\t);\n\t\tconst firewallBlockedEvents = recordEvents(\n\t\t\temitToolResult(blockedResult, toolCall, true),\n\t\t);\n\t\tfor (const event of firewallBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 5. PII policy check\n\tif (\n\t\tverdict.action === \"require_approval\" &&\n\t\tverdict.ruleId === HUMAN_EGRESS_PII_RULE_ID\n\t) {\n\t\tconst policyResult = buildPiiPolicyResult(\n\t\t\ttoolCall,\n\t\t\tworkflowSnapshot,\n\t\t\tclock,\n\t\t);\n\t\tconst policyBlockedEvents = recordEvents(\n\t\t\temitToolResult(policyResult, toolCall, true),\n\t\t);\n\t\tfor (const event of policyBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 6. Approval flow\n\tif (verdict.action === \"require_approval\") {\n\t\tlet permissionHookMadeDecision = false;\n\t\tif (hookService?.runPermissionRequestHooks) {\n\t\t\tconst permissionHookResult = await hookService.runPermissionRequestHooks(\n\t\t\t\teffectiveToolCall,\n\t\t\t\tverdict.reason ?? approvalReason ?? \"Approval required\",\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tif (permissionHookResult.updatedInput) {\n\t\t\t\teffectiveToolCall = {\n\t\t\t\t\t...effectiveToolCall,\n\t\t\t\t\targuments: permissionHookResult.updatedInput,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (permissionHookResult.decision === \"allow\") {\n\t\t\t\tpermissionHookMadeDecision = true;\n\t\t\t\tapprovalAllowed = true;\n\t\t\t\tapprovalReason = permissionHookResult.decisionReason;\n\t\t\t} else if (permissionHookResult.decision === \"deny\") {\n\t\t\t\tpermissionHookMadeDecision = true;\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason =\n\t\t\t\t\tpermissionHookResult.decisionReason ??\n\t\t\t\t\t\"Permission denied by PermissionRequest hook\";\n\t\t\t}\n\t\t}\n\n\t\tif (approvalService && !permissionHookMadeDecision) {\n\t\t\tconst sanitizedApprovalArgs = safetyMiddleware.sanitizeForLogging(\n\t\t\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst request = {\n\t\t\t\tid: toolCall.id,\n\t\t\t\ttoolName: toolCall.name,\n\t\t\t\tdisplayName: describeToolDisplayName(\n\t\t\t\t\ttoolCall.name,\n\t\t\t\t\tsanitizedApprovalArgs,\n\t\t\t\t\ttoolDef,\n\t\t\t\t),\n\t\t\t\tsummaryLabel: summarizeToolUse(\n\t\t\t\t\ttoolCall.name,\n\t\t\t\t\tsanitizedApprovalArgs,\n\t\t\t\t\ttoolDef,\n\t\t\t\t),\n\t\t\t\tactionDescription: describeToolActivity(\n\t\t\t\t\ttoolCall.name,\n\t\t\t\t\tsanitizedApprovalArgs,\n\t\t\t\t\ttoolDef,\n\t\t\t\t),\n\t\t\t\targs: sanitizedApprovalArgs,\n\t\t\t\treason: verdict.reason ?? \"Approval required\",\n\t\t\t};\n\t\t\tconst shouldEmitEvents = approvalService.requiresUserInteraction();\n\t\t\tif (shouldEmitEvents) {\n\t\t\t\tyield recordEvent({ type: \"action_approval_required\", request });\n\t\t\t}\n\n\t\t\tconst decision = await approvalService.requestApproval(request, signal);\n\t\t\tif (shouldEmitEvents) {\n\t\t\t\tyield recordEvent({\n\t\t\t\t\ttype: \"action_approval_resolved\",\n\t\t\t\t\trequest,\n\t\t\t\t\tdecision,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tif (!decision.approved) {\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason = decision.reason ?? verdict.reason;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!approvalAllowed) {\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\teffectiveToolCall.name,\n\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t\t\t),\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tapprovalReason,\n\t\t);\n\t\tconst deniedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [{ type: \"text\", text: approvalReason ?? \"Action denied\" }],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst deniedEvents = recordEvents(\n\t\t\temitToolResult(deniedResult, toolCall, true),\n\t\t);\n\t\tfor (const event of deniedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 7. Tool lookup\n\tif (!toolDef) {\n\t\tconst errorResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Error: Tool \"${toolCall.name}\" not found`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst errorEvents = recordEvents(\n\t\t\temitToolResult(errorResult, toolCall, true),\n\t\t);\n\t\tfor (const event of errorEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 8. Argument validation\n\tlet validatedArgs: Record<string, unknown>;\n\ttry {\n\t\tconst rawArgs = validateToolArguments(toolDef, effectiveToolCall);\n\t\tconst vaultedArgs = safetyMiddleware.prepareExecutionArgs(rawArgs);\n\t\tvalidatedArgs = safetyMiddleware.resolveCredentials(vaultedArgs);\n\t} catch (error: unknown) {\n\t\tconst validationErrorResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst validationEvents = recordEvents(\n\t\t\temitToolResult(validationErrorResult, toolCall, true),\n\t\t);\n\t\tfor (const event of validationEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tconst sanitizedExecutionArgs =\n\t\tsafetyMiddleware.sanitizeForLogging(validatedArgs);\n\n\treturn {\n\t\tverdict: {\n\t\t\toutcome: \"proceed\",\n\t\t\teffectiveToolCall,\n\t\t\tvalidatedArgs,\n\t\t\ttoolDef,\n\t\t\tevents,\n\t\t\tsanitizedExecutionArgs,\n\t\t},\n\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t};\n}\n"]}
+{"version":3,"file":"tool-safety-pipeline.js","sourceRoot":"","sources":["../../../src/agent/transport/tool-safety-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAEN,wBAAwB,GACxB,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAC;AAG9D,OAAO,EACN,wBAAwB,EACxB,0BAA0B,GAC1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAEtE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACN,oBAAoB,EACpB,uBAAuB,EACvB,gBAAgB,GAChB,MAAM,iCAAiC,CAAC;AAKzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAcnE,OAAO,EAEN,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,uBAAuB,CAAC,CAAC;AAmFrD,KAAK,UAAU,kCAAkC,CAChD,eAAsC,EACtC,SAAiB,EACjB,eAAgD,EAChD,MAAoB;IAEpB,MAAM,iBAAiB,GAAG,eACO,CAAC;IAClC,IACC,OAAO,iBAAiB,CAAC,kCAAkC,KAAK,UAAU,EACzE,CAAC;QACF,OAAO,IAAI,CAAC;IACb,CAAC;IAED,IAAI,CAAC;QACJ,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACzB,iBAAiB,CAAC,kCAAkC,CAAC,SAAS,EAAE;gBAC/D,MAAM;aACN,CAAC;YACF,eAAe,CAAC,IAAI,CACnB,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,IAAI,CACV;SACD,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAaD,SAAS,cAAc,CAAC,GAAsB;IAY7C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,GAAG,CAAC;IACpE,MAAM,EAAE,oBAAoB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAC7E,IAAI,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,GAAG,CAAC,cAAc,CAAC;IAEpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,CAAC;IAElE,sDAAsD;IACtD,IAAI,GAAG,GAAG,iBAAiB,IAAI,MAAM,EAAE,CAAC;QACvC,kBAAkB,CAAC,iBAAiB,CACnC,OAAO,CAAC,qBAAqB,EAC7B,mBAAmB,CACnB,CAAC;QACF,mBAAmB,GAAG,CAAC,CAAC;QACxB,iBAAiB,GAAG,GAAG,CAAC;IACzB,CAAC;IACD,mBAAmB,EAAE,CAAC;IAEtB,8BAA8B;IAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,aAAa,KAAK,MAAM,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC1D,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAClE,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;SAAM,IACN,aAAa,KAAK,UAAU;QAC5B,aAAa,KAAK,WAAW;QAC7B,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;QACF,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,YAAY,GAAoB;QACrC,mBAAmB;QACnB,iBAAiB;KACjB,CAAC;IAEF,qCAAqC;IACrC,MAAM,YAAY,GAAG,kBAAkB,CAAC,YAAY,CACnD,OAAO,CAAC,qBAAqB,EAC7B,mBAAmB,CACnB,CAAC;IAEF,4BAA4B;IAC5B,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,qBAAqB,YAAY,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;QACtF,gBAAgB,CAAC;YAChB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,MAAM;YACN,MAAM,EAAE,UAAU;SAClB,CAAC,CAAC;QACH,MAAM,cAAc,GAAsB;YACzC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,gCAAgC,YAAY,CAAC,MAAM,IAAI,oCAAoC,cAAc,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;iBACvP;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG;SACd,CAAC;QACF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,CAAC;YACtD,YAAY;YACZ,KAAK,EAAE;gBACN,IAAI,EAAE,SAAS;gBACf,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,mBAAmB,CAChE,aAAa,QAAQ,CAAC,IAAI,EAAE,EAC5B,SAAS,CACT,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,yBAAyB,kBAAkB,aAAa,YAAY,GAAG,IAAI,UAAU,CAAC;QACrG,MAAM,WAAW,GAAsB;YACtC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,YAAY,QAAQ,CAAC,IAAI,yBAAyB,kBAAkB,aAAa,YAAY,GAAG,IAAI,YACzG,YAAY,CAAC,SAAS;wBACrB,CAAC,CAAC,uBAAuB,YAAY,CAAC,MAAM,GAAG;wBAC/C,CAAC,CAAC,EACJ,EAAE;iBACF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG;SACd,CAAC;QACF,OAAO;YACN,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC;YACnD,YAAY;YACZ,KAAK,EAAE;gBACN,IAAI,EAAE,YAAY;gBAClB,MAAM;aACN;SACD,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,kBAAkB,CAAC,iBAAiB,CACnC,aAAa,QAAQ,CAAC,IAAI,EAAE,EAC5B,MAAM,CAAC,MAAM,CACb,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAEhD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AACjD,CAAC;AAOD,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACxC,GAAsB;IAKtB,MAAM,EACL,QAAQ,EACR,KAAK,EACL,WAAW,EACX,GAAG,EACH,MAAM,EACN,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,WAAW,EACX,QAAQ,EACR,cAAc,GACd,GAAG,GAAG,CAAC;IAER,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAE,EAAE;QACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IACF,MAAM,YAAY,GAAG,CAAC,SAAuB,EAAE,EAAE;QAChD,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAC1B,OAAO,SAAS,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,kBAAkB,CAC7D,QAAQ,CAAC,SAAoC,CAC7C,CAAC;IAEF,mBAAmB;IACnB,MAAM,eAAe,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,kBAAkB,EAClB,QAAQ,EACR,CAAC,EACD,eAAe,CAAC,KAAK,CAAC,MAAM,CAC5B,CAAC;QACF,MAAM,aAAa,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,CAAC;QACjB,IAAI,EAAE,sBAAsB;QAC5B,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,IAAI,EAAE,kBAAkB;KACxB,CAAC,CAAC;IAEH,sBAAsB;IACtB,IAAI,iBAAiB,GAAG,QAAQ,CAAC;IACjC,IAAI,WAAW,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAE1E,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,iBAAiB,GAAsB;gBAC5C,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,OAAO,EAAE;oBACR;wBACC,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,oBAAoB,UAAU,CAAC,WAAW,IAAI,uBAAuB,EAAE;qBAC7E;iBACD;gBACD,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;aACtB,CAAC;YACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,gBAAgB,CAAC,kBAAkB,CAClC,QAAQ,CAAC,SAAoC,CAC7C,EACD,QAAQ,EACR,CAAC,EACD,UAAU,CAAC,WAAW,CACtB,CAAC;YACF,MAAM,iBAAiB,GAAG,YAAY,CACrC,cAAc,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACjD,CAAC;YACF,KAAK,MAAM,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBACvC,MAAM,KAAK,CAAC;YACb,CAAC;YACD,OAAO;gBACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;gBACvC,eAAe,EAAE,eAAe,CAAC,YAAY;aAC7C,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAC/B,QAAQ,CAAC,SAAoC,CAC7C,CAAC;YACF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACzD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CACL,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvB,QAAQ,CAAC,SAAqC,CAAC,CAAC,CAAC;oBACjD,UAAU,CAAC,YAAa,CAAC,CAAC,CAAC,CAC7B,CAAC;YACF,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBACxC,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,SAAS;gBACT,WAAW;gBACX,YAAY;aACZ,CAAC,CAAC;YACH,iBAAiB,GAAG;gBACnB,GAAG,QAAQ;gBACX,SAAS,EAAE,UAAU,CAAC,YAAY;aAClC,CAAC;QACH,CAAC;IACF,CAAC;IAED,yCAAyC;IACzC,MAAM,WAAW,GAAG,gBAAgB,CAAC,YAAY,CAChD,iBAAiB,CAAC,IAAI,EACtB,iBAAiB,CAAC,SAAoC,CACtD,CAAC;IAEF,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC3D,MAAM,mBAAmB,GAAsB;YAC9C,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,4BAA4B,WAAW,CAAC,MAAM,IAAI,yBAAyB,EAAE;iBACnF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,WAAW,CAAC,aAAa,EACzB,QAAQ,EACR,CAAC,EACD,WAAW,CAAC,MAAM,CAClB,CAAC;QACF,MAAM,mBAAmB,GAAG,YAAY,CACvC,cAAc,CAAC,mBAAmB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACnD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,IAAI,eAAe,GAAG,IAAI,CAAC;IAC3B,IAAI,cAAkC,CAAC;IAEvC,IAAI,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAClC,eAAe,GAAG,KAAK,CAAC;QACxB,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC;IACrC,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,CAAC,IAA6B,EAAE,EAAE,CAAC,CAAC;QACxD,WAAW,EAAE,uBAAuB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;QAClE,YAAY,EAAE,gBAAgB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;QAC5D,iBAAiB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC;KACrE,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;QACvC,QAAQ,EAAE,iBAAiB,CAAC,IAAI;QAChC,IAAI,EAAE,iBAAiB,CAAC,SAAS;QACjC,QAAQ,EAAE;YACT,aAAa,EAAE,gBAAgB;YAC/B,WAAW,EAAE,OAAO,EAAE,WAAW;SACjC;QACD,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,UAAU,EAAE,sBAAsB,CAAC,WAAW,CAAC,OAAO,CAAC;KACvD,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,aAAa,GAAsB;YACxC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,+BAA+B,OAAO,CAAC,MAAM,GAClD,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,mBAAmB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAClE,EAAE;iBACF;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,qBAAqB,CAC1B,WAAW,EACX,QAAQ,CAAC,IAAI,EACb,gBAAgB,CAAC,kBAAkB,CAClC,QAAQ,CAAC,SAAoC,CAC7C,EACD,QAAQ,EACR,CAAC,EACD,OAAO,CAAC,MAAM,CACd,CAAC;QACF,MAAM,qBAAqB,GAAG,YAAY,CACzC,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC7C,CAAC;QACF,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAChE,iBAAiB,CAAC,SAAoC,CACtD,CAAC;QACF,0BAA0B,CAAC;YAC1B,OAAO,EAAE,OAAO,CAAC,MAAM;YACvB,SAAS,EAAE,QAAQ,CAAC,IAAI;YACxB,MAAM,EACL,OAAO,qBAAqB,CAAC,OAAO,KAAK,QAAQ;gBAChD,CAAC,CAAC,qBAAqB,CAAC,OAAO;gBAC/B,CAAC,CAAC,QAAQ,CAAC,IAAI;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,qBAAqB;YAC9B,WAAW,EAAE;gBACZ,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;gBAC3B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;aAC9B;SACD,CAAC,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,qBAAqB,EAAE,CAAC;YAC3C,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IACC,OAAO,CAAC,MAAM,KAAK,kBAAkB;QACrC,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAC1C,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CACxC,QAAQ,EACR,gBAAgB,EAChB,KAAK,CACL,CAAC;QACF,MAAM,mBAAmB,GAAG,YAAY,CACvC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC5C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,mBAAmB,EAAE,CAAC;YACzC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,WAAW,GAAsB;YACtC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,gBAAgB,QAAQ,CAAC,IAAI,aAAa;iBAChD;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,WAAW,GAAG,YAAY,CAC/B,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAC3C,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,IAAI,uBAA4D,CAAC;IACjE,IAAI,uBAEQ,CAAC;IACb,IAAI,wBAAwB,GAAG,KAAK,CAAC;IACrC,MAAM,UAAU,GAAG,gBAAgB,CAAC,kBAAkB,CACrD,iBAAiB,CAAC,SAAoC,CACtD,CAAC;IACF,MAAM,WAAW,GAA6B;QAC7C,GAAG;QACH,QAAQ;QACR,OAAO;QACP,aAAa,EAAE,UAAU;QACzB,GAAG,YAAY,CAAC,UAAU,CAAC;KAC3B,CAAC;IACF,IAAI,mBAAmB,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC5E,QAAQ,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,KAAK,SAAS,CAAC;YACf,KAAK,OAAO;gBACX,uBAAuB,GAAG,YAAY,CAAC,IAAI,CAAC;gBAC5C,MAAM;YACP,KAAK,eAAe;gBACnB,uBAAuB,GAAG,YAAY,CAAC,IAAI,CAAC;gBAC5C,uBAAuB,GAAG,YAAY,CAAC,OAAO,CAAC;gBAC/C,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC7C,MAAM;YACP,KAAK,MAAM,CAAC,CAAC,CAAC;gBACb,MAAM,qBAAqB,CAC1B,WAAW,EACX,iBAAiB,CAAC,IAAI,EACtB,UAAU,EACV,QAAQ,EACR,CAAC,EACD,YAAY,CAAC,MAAM,CACnB,CAAC;gBACF,MAAM,YAAY,GAAsB;oBACvC,IAAI,EAAE,YAAY;oBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;oBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;oBACtD,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;iBACtB,CAAC;gBACF,MAAM,YAAY,GAAG,YAAY,CAChC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC5C,eAAe,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,eAAe;oBAC5D,iBAAiB,EAAE,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,iBAAiB;iBAChE,CAAC,CACF,CAAC;gBACF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;oBAClC,MAAM,KAAK,CAAC;gBACb,CAAC;gBACD,OAAO;oBACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;oBACvC,eAAe,EAAE,eAAe,CAAC,YAAY;iBAC7C,CAAC;YACH,CAAC;YACD;gBACC,MAAM;QACR,CAAC;IACF,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,CAAC,MAAM,KAAK,kBAAkB,IAAI,uBAAuB,EAAE,CAAC;QACtE,MAAM,mBAAmB,GACxB,OAAO,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,0BAA0B,GAAG,KAAK,CAAC;QACvC,IAAI,WAAW,EAAE,yBAAyB,EAAE,CAAC;YAC5C,MAAM,oBAAoB,GAAG,MAAM,WAAW,CAAC,yBAAyB,CACvE,iBAAiB,EACjB,uBAAuB,EAAE,MAAM;gBAC9B,mBAAmB;gBACnB,cAAc;gBACd,mBAAmB,EACpB,MAAM,CACN,CAAC;YACF,IAAI,oBAAoB,CAAC,YAAY,EAAE,CAAC;gBACvC,iBAAiB,GAAG;oBACnB,GAAG,iBAAiB;oBACpB,SAAS,EAAE,oBAAoB,CAAC,YAAY;iBAC5C,CAAC;YACH,CAAC;YACD,IAAI,oBAAoB,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC/C,0BAA0B,GAAG,IAAI,CAAC;gBAClC,eAAe,GAAG,IAAI,CAAC;gBACvB,cAAc,GAAG,oBAAoB,CAAC,cAAc,CAAC;YACtD,CAAC;iBAAM,IAAI,oBAAoB,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACrD,0BAA0B,GAAG,IAAI,CAAC;gBAClC,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc;oBACb,oBAAoB,CAAC,cAAc;wBACnC,6CAA6C,CAAC;YAChD,CAAC;QACF,CAAC;QAED,IACC,0BAA0B;YAC1B,mBAAmB;YACnB,uBAAuB;YACvB,uBAAuB,EAAE,IAAI,KAAK,UAAU,EAC3C,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAC3D,WAAW,EACX,uBAAuB,EACvB;gBACC,QAAQ,EAAE,eAAe;gBACzB,MAAM,EAAE,cAAc;gBACtB,UAAU,EAAE,QAAQ;aACpB,EACD,MAAM,CACN,CAAC;YACF,wBAAwB,GAAG,IAAI,CAAC;YAChC,uBAAuB,GAAG,UAAU,CAAC,IAAI,CAAC;YAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAClC,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACP,eAAe,GAAG,IAAI,CAAC;gBACvB,cAAc,GAAG,SAAS,CAAC;YAC5B,CAAC;QACF,CAAC;QAED,IAAI,eAAe,IAAI,CAAC,0BAA0B,EAAE,CAAC;YACpD,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAChE,iBAAiB,CAAC,SAAoC,CACtD,CAAC;YACF,MAAM,OAAO,GACZ,uBAAuB;gBACtB;oBACA,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,GAAG,YAAY,CAAC,qBAAqB,CAAC;oBACtC,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,mBAAmB,IAAI,mBAAmB;iBACe,CAAC;YACpE,MAAM,gBAAgB,GAAG,eAAe,CAAC,uBAAuB,EAAE,CAAC;YACnE,MAAM,eAAe,GAAG,eAAe,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACzE,MAAM,oBAAoB,GAAG,MAAM,kCAAkC,CACpE,eAAe,EACf,OAAO,CAAC,EAAE,EACV,eAAe,EACf,MAAM,CACN,CAAC;YACF,wBAAwB,CAAC;gBACxB,mBAAmB,EAClB,uBAAuB,EAAE,EAAE;oBAC3B,uBAAuB,EAAE,QAAQ,CAAC,iBAAiB;oBACnD,oBAAoB,EAAE,uBAAuB;oBAC7C,OAAO,CAAC,EAAE;gBACX,MAAM,EACL,OAAO,CAAC,iBAAiB,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,QAAQ;gBACtE,OAAO,EACN,OAAO,qBAAqB,CAAC,OAAO,KAAK,QAAQ;oBAChD,CAAC,CAAC,qBAAqB,CAAC,OAAO;oBAC/B,CAAC,CAAC,SAAS;gBACb,aAAa,EAAE,wCAAwC;gBACvD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACR,SAAS,EAAE,OAAO,CAAC,QAAQ;oBAC3B,YAAY,EAAE,OAAO,CAAC,WAAW;oBACjC,aAAa,EAAE,OAAO,CAAC,YAAY;oBACnC,IAAI,EAAE,qBAAqB;iBAC3B;gBACD,WAAW,EAAE;oBACZ,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;oBAC3B,iBAAiB,EAAE,QAAQ,CAAC,EAAE;iBAC9B;aACD,CAAC,CAAC;YACH,IAAI,gBAAgB,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,OAAO,EAAE,CAAC,CAAC;YAClE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACtB,MAAM,WAAW,CAAC;oBACjB,IAAI,EAAE,0BAA0B;oBAChC,OAAO;oBACP,QAAQ;iBACR,CAAC,CAAC;YACJ,CAAC;YAED,IACC,mBAAmB;gBACnB,uBAAuB;gBACvB,uBAAuB,EAAE,IAAI,KAAK,UAAU,EAC3C,CAAC;gBACF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAC3D,WAAW,EACX,uBAAuB,EACvB,QAAQ,EACR,MAAM,CACN,CAAC;gBACF,wBAAwB,GAAG,IAAI,CAAC;gBAChC,uBAAuB,GAAG,UAAU,CAAC,IAAI,CAAC;gBAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAClC,eAAe,GAAG,KAAK,CAAC;oBACxB,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC;gBACpC,CAAC;qBAAM,CAAC;oBACP,eAAe,GAAG,IAAI,CAAC;oBACvB,cAAc,GAAG,SAAS,CAAC;gBAC5B,CAAC;YACF,CAAC;YAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxB,eAAe,GAAG,KAAK,CAAC;gBACxB,cAAc,GAAG,QAAQ,CAAC,MAAM,IAAI,mBAAmB,CAAC;YACzD,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,CAAC,eAAe,EAAE,CAAC;QACtB,IACC,mBAAmB;YACnB,uBAAuB;YACvB,uBAAuB,EAAE,IAAI,KAAK,UAAU;YAC5C,CAAC,wBAAwB,EACxB,CAAC;YACF,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,eAAe,CAC3D,WAAW,EACX,uBAAuB,EACvB;gBACC,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,cAAc,IAAI,iBAAiB;gBAC3C,UAAU,EAAE,QAAQ;aACpB,EACD,MAAM,CACN,CAAC;YACF,uBAAuB,GAAG,UAAU,CAAC,IAAI,CAAC;YAC1C,cAAc;gBACb,UAAU,CAAC,MAAM,KAAK,MAAM;oBAC3B,CAAC,CAAC,UAAU,CAAC,MAAM;oBACnB,CAAC,CAAC,CAAC,cAAc,IAAI,iBAAiB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,qBAAqB,CAC1B,WAAW,EACX,iBAAiB,CAAC,IAAI,EACtB,gBAAgB,CAAC,kBAAkB,CAClC,iBAAiB,CAAC,SAAoC,CACtD,EACD,QAAQ,EACR,CAAC,EACD,cAAc,CACd,CAAC;QACF,MAAM,YAAY,GAAsB;YACvC,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,IAAI,eAAe,EAAE,CAAC;YACpE,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,YAAY,GAAG,YAAY,CAChC,cAAc,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC5C,eAAe,EAAE,uBAAuB,EAAE,QAAQ,CAAC,eAAe;YAClE,iBAAiB,EAAE,uBAAuB,EAAE,QAAQ,CAAC,iBAAiB;SACtE,CAAC,CACF,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,aAAsC,CAAC;IAC3C,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnE,aAAa,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACzB,MAAM,qBAAqB,GAAsB;YAChD,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,OAAO,EAAE;gBACR;oBACC,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC5D;aACD;YACD,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,gBAAgB,GAAG,YAAY,CACpC,cAAc,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CACrD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,KAAK,CAAC;QACb,CAAC;QACD,OAAO;YACN,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;YACvC,eAAe,EAAE,eAAe,CAAC,YAAY;SAC7C,CAAC;IACH,CAAC;IAED,MAAM,sBAAsB,GAC3B,gBAAgB,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAEpD,OAAO;QACN,OAAO,EAAE;YACR,OAAO,EAAE,SAAS;YAClB,iBAAiB;YACjB,aAAa;YACb,OAAO;YACP,MAAM;YACN,sBAAsB;YACtB,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D;QACD,eAAe,EAAE,eAAe,CAAC,YAAY;KAC7C,CAAC;AACH,CAAC","sourcesContent":["/**\n * Tool Safety Pipeline\n * Pre-execution safety evaluation: rate limiting, adaptive thresholds,\n * safety middleware, firewall checks, PII policy, approval flow, and tool validation.\n *\n * Yields events as they occur and returns a verdict when complete.\n */\n\nimport {\n\ttype ActionFirewall,\n\tHUMAN_EGRESS_PII_RULE_ID,\n} from \"../../safety/action-firewall.js\";\nimport type { AdaptiveThresholds } from \"../../safety/adaptive-thresholds.js\";\nimport { METRICS } from \"../../safety/adaptive-thresholds.js\";\nimport type { SafetyMiddleware } from \"../../safety/safety-middleware.js\";\nimport type { WorkflowStateTracker } from \"../../safety/workflow-state.js\";\nimport {\n\trecordMaestroApprovalHit,\n\trecordMaestroFirewallBlock,\n} from \"../../telemetry/maestro-event-bus.js\";\nimport { trackToolBlocked } from \"../../telemetry/security-events.js\";\nimport type { Clock } from \"../../utils/clock.js\";\nimport { createLogger } from \"../../utils/logger.js\";\nimport {\n\tdescribeToolActivity,\n\tdescribeToolDisplayName,\n\tsummarizeToolUse,\n} from \"../../utils/tool-use-summary.js\";\nimport type {\n\tActionApprovalDecision,\n\tActionApprovalService,\n} from \"../action-approval.js\";\nimport { validateToolArguments } from \"../providers/validation.js\";\nimport type {\n\tAgentEvent,\n\tAgentRunConfig,\n\tAgentTool,\n\tMessage,\n\tToolCall,\n\tToolResultMessage,\n} from \"../types.js\";\nimport type {\n\tPlatformToolExecutionBridge,\n\tToolExecutionBridgeInput,\n\tToolExecutionBridgePlan,\n} from \"./tool-execution-bridge.js\";\nimport {\n\ttype ToolAuditLogger,\n\tbuildPiiPolicyResult,\n\textractTextFromContent,\n\tlogToolExecutionAudit,\n} from \"./transport-utils.js\";\n\nconst logger = createLogger(\"transport:tool-safety\");\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type ToolSafetyVerdict =\n\t| { outcome: \"blocked\"; events: AgentEvent[] }\n\t| {\n\t\t\toutcome: \"proceed\";\n\t\t\teffectiveToolCall: ToolCall;\n\t\t\tvalidatedArgs: Record<string, unknown>;\n\t\t\ttoolDef: AgentTool;\n\t\t\tevents: AgentEvent[];\n\t\t\tsanitizedExecutionArgs: Record<string, unknown>;\n\t\t\ttoolExecutionBridgePlan?: ToolExecutionBridgePlan;\n\t  };\n\nexport interface ToolSafetyContext {\n\ttoolCall: ToolCall;\n\ttools: AgentTool[];\n\tuserMessage: Message;\n\tcfg: AgentRunConfig;\n\tsignal?: AbortSignal;\n\t// Services\n\tclock: Clock;\n\tsafetyMiddleware: SafetyMiddleware;\n\tworkflowState: WorkflowStateTracker;\n\tadaptiveThresholds: AdaptiveThresholds;\n\tauditLogger?: ToolAuditLogger;\n\tapprovalService?: ActionApprovalService;\n\ttoolExecutionBridge?: PlatformToolExecutionBridge;\n\thookService?: {\n\t\trunPreToolUseHooks: (\n\t\t\ttoolCall: ToolCall,\n\t\t\tsignal?: AbortSignal,\n\t\t) => Promise<{\n\t\t\tblocked?: boolean;\n\t\t\tblockReason?: string;\n\t\t\tupdatedInput?: Record<string, unknown>;\n\t\t}>;\n\t\trunPermissionRequestHooks?: (\n\t\t\ttoolCall: ToolCall,\n\t\t\treason: string,\n\t\t\tsignal?: AbortSignal,\n\t\t) => Promise<{\n\t\t\tdecision?: \"allow\" | \"deny\";\n\t\t\tdecisionReason?: string;\n\t\t\tupdatedInput?: Record<string, unknown>;\n\t\t}>;\n\t};\n\tfirewall: ActionFirewall;\n\t// Mutable rate-limit state\n\trateLimitState: {\n\t\trecentToolTimestamps: Map<string, number[]>;\n\t\ttoolCallsThisMinute: number;\n\t\tminuteWindowStart: number;\n\t\trateWindowMs: number;\n\t\trateLimit: number;\n\t};\n\t// Emit helpers\n\temitToolResult: (\n\t\tmessage: ToolResultMessage,\n\t\ttoolCall: ToolCall,\n\t\tisError: boolean,\n\t\tmetadata?: {\n\t\t\ttoolExecutionId?: string;\n\t\t\tapprovalRequestId?: string;\n\t\t},\n\t) => AgentEvent[];\n}\n\ninterface ApprovalRegistrationMetadata {\n\tremoteApprovalRequestId?: string;\n}\n\ninterface ApprovalRegistrationAwareService {\n\twaitForPendingApprovalRegistration?: (\n\t\trequestId: string,\n\t\toptions?: { signal?: AbortSignal },\n\t) => Promise<ApprovalRegistrationMetadata | null>;\n}\n\nasync function waitForPendingApprovalRegistration(\n\tapprovalService: ActionApprovalService,\n\trequestId: string,\n\tdecisionPromise: Promise<ActionApprovalDecision>,\n\tsignal?: AbortSignal,\n): Promise<ApprovalRegistrationMetadata | null> {\n\tconst registrationAware = approvalService as ActionApprovalService &\n\t\tApprovalRegistrationAwareService;\n\tif (\n\t\ttypeof registrationAware.waitForPendingApprovalRegistration !== \"function\"\n\t) {\n\t\treturn null;\n\t}\n\n\ttry {\n\t\treturn await Promise.race([\n\t\t\tregistrationAware.waitForPendingApprovalRegistration(requestId, {\n\t\t\t\tsignal,\n\t\t\t}),\n\t\t\tdecisionPromise.then(\n\t\t\t\t() => null,\n\t\t\t\t() => null,\n\t\t\t),\n\t\t]);\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Rate Limiting\n// ─────────────────────────────────────────────────────────────────────────────\n\ntype RateLimitBlockKind = \"anomaly\" | \"rate_limit\";\n\ninterface RateLimitBlock {\n\tkind: RateLimitBlockKind;\n\treason: string;\n}\n\nfunction checkRateLimit(ctx: ToolSafetyContext):\n\t| {\n\t\t\tblocked: true;\n\t\t\tevents: AgentEvent[];\n\t\t\tupdatedState: RateLimitUpdate;\n\t\t\tblock: RateLimitBlock;\n\t  }\n\t| {\n\t\t\tblocked: false;\n\t\t\trecent: number[];\n\t\t\tupdatedState: RateLimitUpdate;\n\t  } {\n\tconst { toolCall, clock, adaptiveThresholds, emitToolResult } = ctx;\n\tconst { recentToolTimestamps, rateWindowMs, rateLimit } = ctx.rateLimitState;\n\tlet { toolCallsThisMinute, minuteWindowStart } = ctx.rateLimitState;\n\n\tconst now = clock.now();\n\tconst timestamps = recentToolTimestamps.get(toolCall.name) ?? [];\n\tconst recent = timestamps.filter((ts) => now - ts < rateWindowMs);\n\n\t// Track tool calls per minute for adaptive thresholds\n\tif (now - minuteWindowStart >= 60_000) {\n\t\tadaptiveThresholds.recordObservation(\n\t\t\tMETRICS.TOOL_CALLS_PER_MINUTE,\n\t\t\ttoolCallsThisMinute,\n\t\t);\n\t\ttoolCallsThisMinute = 0;\n\t\tminuteWindowStart = now;\n\t}\n\ttoolCallsThisMinute++;\n\n\t// Track tool-specific metrics\n\tconst toolNameLower = toolCall.name.toLowerCase();\n\tif (toolNameLower === \"read\" || toolNameLower === \"glob\") {\n\t\tadaptiveThresholds.recordObservation(METRICS.READS_PER_MINUTE, 1);\n\t} else if (toolNameLower === \"write\" || toolNameLower === \"edit\") {\n\t\tadaptiveThresholds.recordObservation(METRICS.WRITES_PER_MINUTE, 1);\n\t} else if (\n\t\ttoolNameLower === \"webfetch\" ||\n\t\ttoolNameLower === \"websearch\" ||\n\t\ttoolNameLower.includes(\"mcp\")\n\t) {\n\t\tadaptiveThresholds.recordObservation(METRICS.EGRESS_PER_MINUTE, 1);\n\t}\n\n\tconst updatedState: RateLimitUpdate = {\n\t\ttoolCallsThisMinute,\n\t\tminuteWindowStart,\n\t};\n\n\t// Check for anomalous tool call rate\n\tconst anomalyCheck = adaptiveThresholds.checkAnomaly(\n\t\tMETRICS.TOOL_CALLS_PER_MINUTE,\n\t\ttoolCallsThisMinute,\n\t);\n\n\t// Enforce anomaly detection\n\tif (anomalyCheck.isAnomaly) {\n\t\tconst reason = `Anomaly detected: ${anomalyCheck.reason ?? \"Unusual tool call rate\"}`;\n\t\ttrackToolBlocked({\n\t\t\ttoolName: toolCall.name,\n\t\t\treason,\n\t\t\tsource: \"adaptive\",\n\t\t});\n\t\tconst anomalyMessage: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked \"${toolCall.name}\" due to anomalous behavior: ${anomalyCheck.reason ?? \"Unusual tool call pattern detected\"}. Z-score: ${anomalyCheck.zScore.toFixed(2)}, Baseline: ${anomalyCheck.mean.toFixed(2)} ± ${anomalyCheck.stdDev.toFixed(2)}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: now,\n\t\t};\n\t\treturn {\n\t\t\tblocked: true,\n\t\t\tevents: emitToolResult(anomalyMessage, toolCall, true),\n\t\t\tupdatedState,\n\t\t\tblock: {\n\t\t\t\tkind: \"anomaly\",\n\t\t\t\treason,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Use adaptive threshold if we have enough data, otherwise use static limit\n\tconst effectiveRateLimit = adaptiveThresholds.getAdaptedThreshold(\n\t\t`tool_rate_${toolCall.name}`,\n\t\trateLimit,\n\t);\n\n\tif (recent.length >= effectiveRateLimit) {\n\t\tconst reason = `Rate limit exceeded: >${effectiveRateLimit} calls in ${rateWindowMs / 1000}s window`;\n\t\tconst rateMessage: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked \"${toolCall.name}\" due to rate limit: >${effectiveRateLimit} calls in ${rateWindowMs / 1000}s window.${\n\t\t\t\t\t\tanomalyCheck.isAnomaly\n\t\t\t\t\t\t\t? ` (Anomaly detected: ${anomalyCheck.reason})`\n\t\t\t\t\t\t\t: \"\"\n\t\t\t\t\t}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: now,\n\t\t};\n\t\treturn {\n\t\t\tblocked: true,\n\t\t\tevents: emitToolResult(rateMessage, toolCall, true),\n\t\t\tupdatedState,\n\t\t\tblock: {\n\t\t\t\tkind: \"rate_limit\",\n\t\t\t\treason,\n\t\t\t},\n\t\t};\n\t}\n\n\t// Record observation for per-tool adaptive rate\n\tadaptiveThresholds.recordObservation(\n\t\t`tool_rate_${toolCall.name}`,\n\t\trecent.length,\n\t);\n\trecent.push(now);\n\trecentToolTimestamps.set(toolCall.name, recent);\n\n\treturn { blocked: false, recent, updatedState };\n}\n\ninterface RateLimitUpdate {\n\ttoolCallsThisMinute: number;\n\tminuteWindowStart: number;\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Main Safety Evaluation\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Evaluate all safety checks for a tool call before execution.\n * Yields events as they occur and returns the final verdict.\n */\nexport async function* evaluateToolSafety(\n\tctx: ToolSafetyContext,\n): AsyncGenerator<\n\tAgentEvent,\n\t{ verdict: ToolSafetyVerdict; rateLimitUpdate: RateLimitUpdate }\n> {\n\tconst {\n\t\ttoolCall,\n\t\ttools,\n\t\tuserMessage,\n\t\tcfg,\n\t\tsignal,\n\t\tclock,\n\t\tsafetyMiddleware,\n\t\tworkflowState,\n\t\tauditLogger,\n\t\tapprovalService,\n\t\ttoolExecutionBridge,\n\t\thookService,\n\t\tfirewall,\n\t\temitToolResult,\n\t} = ctx;\n\n\tconst events: AgentEvent[] = [];\n\tconst recordEvent = (event: AgentEvent) => {\n\t\tevents.push(event);\n\t\treturn event;\n\t};\n\tconst recordEvents = (newEvents: AgentEvent[]) => {\n\t\tevents.push(...newEvents);\n\t\treturn newEvents;\n\t};\n\n\tconst sanitizedStartArgs = safetyMiddleware.sanitizeForLogging(\n\t\ttoolCall.arguments as Record<string, unknown>,\n\t);\n\n\t// 1. Rate limiting\n\tconst rateLimitResult = checkRateLimit(ctx);\n\tif (rateLimitResult.blocked) {\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsanitizedStartArgs,\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\trateLimitResult.block.reason,\n\t\t);\n\t\tconst blockedEvents = recordEvents(rateLimitResult.events);\n\t\tfor (const event of blockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\tyield recordEvent({\n\t\ttype: \"tool_execution_start\",\n\t\ttoolCallId: toolCall.id,\n\t\ttoolName: toolCall.name,\n\t\targs: sanitizedStartArgs,\n\t});\n\n\t// 2. PreToolUse hooks\n\tlet effectiveToolCall = toolCall;\n\tif (hookService) {\n\t\tconst hookResult = await hookService.runPreToolUseHooks(toolCall, signal);\n\n\t\tif (hookResult.blocked) {\n\t\t\tconst hookBlockedResult: ToolResultMessage = {\n\t\t\t\trole: \"toolResult\",\n\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\ttoolName: toolCall.name,\n\t\t\t\tcontent: [\n\t\t\t\t\t{\n\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\ttext: `Blocked by hook: ${hookResult.blockReason ?? \"Hook denied execution\"}`,\n\t\t\t\t\t},\n\t\t\t\t],\n\t\t\t\tisError: true,\n\t\t\t\ttimestamp: clock.now(),\n\t\t\t};\n\t\t\tawait logToolExecutionAudit(\n\t\t\t\tauditLogger,\n\t\t\t\ttoolCall.name,\n\t\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t\t),\n\t\t\t\t\"denied\",\n\t\t\t\t0,\n\t\t\t\thookResult.blockReason,\n\t\t\t);\n\t\t\tconst hookBlockedEvents = recordEvents(\n\t\t\t\temitToolResult(hookBlockedResult, toolCall, true),\n\t\t\t);\n\t\t\tfor (const event of hookBlockedEvents) {\n\t\t\t\tyield event;\n\t\t\t}\n\t\t\treturn {\n\t\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t\t};\n\t\t}\n\n\t\tif (hookResult.updatedInput) {\n\t\t\tconst originalKeys = Object.keys(\n\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst updatedKeys = Object.keys(hookResult.updatedInput);\n\t\t\tconst addedKeys = updatedKeys.filter((k) => !originalKeys.includes(k));\n\t\t\tconst removedKeys = originalKeys.filter((k) => !updatedKeys.includes(k));\n\t\t\tconst modifiedKeys = updatedKeys.filter(\n\t\t\t\t(k) =>\n\t\t\t\t\toriginalKeys.includes(k) &&\n\t\t\t\t\t(toolCall.arguments as Record<string, unknown>)[k] !==\n\t\t\t\t\t\thookResult.updatedInput![k],\n\t\t\t);\n\t\t\tlogger.debug(\"Hook modified tool input\", {\n\t\t\t\ttoolName: toolCall.name,\n\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\taddedKeys,\n\t\t\t\tremovedKeys,\n\t\t\t\tmodifiedKeys,\n\t\t\t});\n\t\t\teffectiveToolCall = {\n\t\t\t\t...toolCall,\n\t\t\t\targuments: hookResult.updatedInput,\n\t\t\t};\n\t\t}\n\t}\n\n\t// 3. Safety middleware sequence analysis\n\tconst safetyCheck = safetyMiddleware.preExecution(\n\t\teffectiveToolCall.name,\n\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t);\n\n\tif (!safetyCheck.allowed && !safetyCheck.requiresApproval) {\n\t\tconst safetyBlockedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Blocked by safety check: ${safetyCheck.reason ?? \"Safety policy violation\"}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsafetyCheck.sanitizedArgs,\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tsafetyCheck.reason,\n\t\t);\n\t\tconst safetyBlockedEvents = recordEvents(\n\t\t\temitToolResult(safetyBlockedResult, toolCall, true),\n\t\t);\n\t\tfor (const event of safetyBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tlet approvalAllowed = true;\n\tlet approvalReason: string | undefined;\n\n\tif (safetyCheck.requiresApproval) {\n\t\tapprovalAllowed = false;\n\t\tapprovalReason = safetyCheck.reason;\n\t}\n\n\t// 4. Firewall evaluation\n\tconst workflowSnapshot = workflowState.snapshot();\n\tconst toolDef = tools.find((t) => t.name === effectiveToolCall.name);\n\tconst describeArgs = (args: Record<string, unknown>) => ({\n\t\tdisplayName: describeToolDisplayName(toolCall.name, args, toolDef),\n\t\tsummaryLabel: summarizeToolUse(toolCall.name, args, toolDef),\n\t\tactionDescription: describeToolActivity(toolCall.name, args, toolDef),\n\t});\n\tconst verdict = await firewall.evaluate({\n\t\ttoolName: effectiveToolCall.name,\n\t\targs: effectiveToolCall.arguments,\n\t\tmetadata: {\n\t\t\tworkflowState: workflowSnapshot,\n\t\t\tannotations: toolDef?.annotations,\n\t\t},\n\t\tuser: cfg.user,\n\t\tsession: cfg.session,\n\t\tuserIntent: extractTextFromContent(userMessage.content),\n\t});\n\n\tif (verdict.action === \"block\") {\n\t\tconst blockedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Action blocked by firewall: ${verdict.reason}${\n\t\t\t\t\t\tverdict.remediation ? `\\n\\nSuggestion: ${verdict.remediation}` : \"\"\n\t\t\t\t\t}`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\ttoolCall.name,\n\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t),\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tverdict.reason,\n\t\t);\n\t\tconst firewallBlockedEvents = recordEvents(\n\t\t\temitToolResult(blockedResult, toolCall, true),\n\t\t);\n\t\tconst sanitizedFirewallArgs = safetyMiddleware.sanitizeForLogging(\n\t\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t\t);\n\t\trecordMaestroFirewallBlock({\n\t\t\trule_id: verdict.ruleId,\n\t\t\toperation: toolCall.name,\n\t\t\ttarget:\n\t\t\t\ttypeof sanitizedFirewallArgs.command === \"string\"\n\t\t\t\t\t? sanitizedFirewallArgs.command\n\t\t\t\t\t: toolCall.name,\n\t\t\treason: verdict.reason,\n\t\t\tcontext: sanitizedFirewallArgs,\n\t\t\tcorrelation: {\n\t\t\t\tsession_id: cfg.session?.id,\n\t\t\t\tagent_run_step_id: toolCall.id,\n\t\t\t},\n\t\t});\n\t\tfor (const event of firewallBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 5. PII policy check\n\tif (\n\t\tverdict.action === \"require_approval\" &&\n\t\tverdict.ruleId === HUMAN_EGRESS_PII_RULE_ID\n\t) {\n\t\tconst policyResult = buildPiiPolicyResult(\n\t\t\ttoolCall,\n\t\t\tworkflowSnapshot,\n\t\t\tclock,\n\t\t);\n\t\tconst policyBlockedEvents = recordEvents(\n\t\t\temitToolResult(policyResult, toolCall, true),\n\t\t);\n\t\tfor (const event of policyBlockedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tif (!toolDef) {\n\t\tconst errorResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: `Error: Tool \"${toolCall.name}\" not found`,\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst errorEvents = recordEvents(\n\t\t\temitToolResult(errorResult, toolCall, true),\n\t\t);\n\t\tfor (const event of errorEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tlet toolExecutionBridgePlan: ToolExecutionBridgePlan | undefined;\n\tlet platformApprovalRequest:\n\t\t| import(\"../action-approval.js\").ActionApprovalRequest\n\t\t| undefined;\n\tlet platformApprovalResolved = false;\n\tconst bridgeArgs = safetyMiddleware.sanitizeForLogging(\n\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t);\n\tconst bridgeInput: ToolExecutionBridgeInput = {\n\t\tcfg,\n\t\ttoolCall,\n\t\ttoolDef,\n\t\tsanitizedArgs: bridgeArgs,\n\t\t...describeArgs(bridgeArgs),\n\t};\n\tif (toolExecutionBridge) {\n\t\tconst bridgeResult = await toolExecutionBridge.prepare(bridgeInput, signal);\n\t\tswitch (bridgeResult.status) {\n\t\t\tcase \"observe\":\n\t\t\tcase \"allow\":\n\t\t\t\ttoolExecutionBridgePlan = bridgeResult.plan;\n\t\t\t\tbreak;\n\t\t\tcase \"wait_approval\":\n\t\t\t\ttoolExecutionBridgePlan = bridgeResult.plan;\n\t\t\t\tplatformApprovalRequest = bridgeResult.request;\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason = bridgeResult.request.reason;\n\t\t\t\tbreak;\n\t\t\tcase \"deny\": {\n\t\t\t\tawait logToolExecutionAudit(\n\t\t\t\t\tauditLogger,\n\t\t\t\t\teffectiveToolCall.name,\n\t\t\t\t\tbridgeArgs,\n\t\t\t\t\t\"denied\",\n\t\t\t\t\t0,\n\t\t\t\t\tbridgeResult.reason,\n\t\t\t\t);\n\t\t\t\tconst deniedResult: ToolResultMessage = {\n\t\t\t\t\trole: \"toolResult\",\n\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\tcontent: [{ type: \"text\", text: bridgeResult.reason }],\n\t\t\t\t\tisError: true,\n\t\t\t\t\ttimestamp: clock.now(),\n\t\t\t\t};\n\t\t\t\tconst deniedEvents = recordEvents(\n\t\t\t\t\temitToolResult(deniedResult, toolCall, true, {\n\t\t\t\t\t\ttoolExecutionId: bridgeResult.plan?.metadata.toolExecutionId,\n\t\t\t\t\t\tapprovalRequestId: bridgeResult.plan?.metadata.approvalRequestId,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t\tfor (const event of deniedEvents) {\n\t\t\t\t\tyield event;\n\t\t\t\t}\n\t\t\t\treturn {\n\t\t\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t\t\t};\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\tbreak;\n\t\t}\n\t}\n\n\t// 6. Approval flow\n\tif (verdict.action === \"require_approval\" || platformApprovalRequest) {\n\t\tconst localApprovalReason =\n\t\t\tverdict.action === \"require_approval\" ? verdict.reason : undefined;\n\t\tlet permissionHookMadeDecision = false;\n\t\tif (hookService?.runPermissionRequestHooks) {\n\t\t\tconst permissionHookResult = await hookService.runPermissionRequestHooks(\n\t\t\t\teffectiveToolCall,\n\t\t\t\tplatformApprovalRequest?.reason ??\n\t\t\t\t\tlocalApprovalReason ??\n\t\t\t\t\tapprovalReason ??\n\t\t\t\t\t\"Approval required\",\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tif (permissionHookResult.updatedInput) {\n\t\t\t\teffectiveToolCall = {\n\t\t\t\t\t...effectiveToolCall,\n\t\t\t\t\targuments: permissionHookResult.updatedInput,\n\t\t\t\t};\n\t\t\t}\n\t\t\tif (permissionHookResult.decision === \"allow\") {\n\t\t\t\tpermissionHookMadeDecision = true;\n\t\t\t\tapprovalAllowed = true;\n\t\t\t\tapprovalReason = permissionHookResult.decisionReason;\n\t\t\t} else if (permissionHookResult.decision === \"deny\") {\n\t\t\t\tpermissionHookMadeDecision = true;\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason =\n\t\t\t\t\tpermissionHookResult.decisionReason ??\n\t\t\t\t\t\"Permission denied by PermissionRequest hook\";\n\t\t\t}\n\t\t}\n\n\t\tif (\n\t\t\tpermissionHookMadeDecision &&\n\t\t\ttoolExecutionBridge &&\n\t\t\tplatformApprovalRequest &&\n\t\t\ttoolExecutionBridgePlan?.kind === \"governed\"\n\t\t) {\n\t\t\tconst resolution = await toolExecutionBridge.resolveApproval(\n\t\t\t\tbridgeInput,\n\t\t\t\ttoolExecutionBridgePlan,\n\t\t\t\t{\n\t\t\t\t\tapproved: approvalAllowed,\n\t\t\t\t\treason: approvalReason,\n\t\t\t\t\tresolvedBy: \"policy\",\n\t\t\t\t},\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\tplatformApprovalResolved = true;\n\t\t\ttoolExecutionBridgePlan = resolution.plan;\n\t\t\tif (resolution.status === \"deny\") {\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason = resolution.reason;\n\t\t\t} else {\n\t\t\t\tapprovalAllowed = true;\n\t\t\t\tapprovalReason = undefined;\n\t\t\t}\n\t\t}\n\n\t\tif (approvalService && !permissionHookMadeDecision) {\n\t\t\tconst sanitizedApprovalArgs = safetyMiddleware.sanitizeForLogging(\n\t\t\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t\t\t);\n\t\t\tconst request =\n\t\t\t\tplatformApprovalRequest ??\n\t\t\t\t({\n\t\t\t\t\tid: toolCall.id,\n\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t...describeArgs(sanitizedApprovalArgs),\n\t\t\t\t\targs: sanitizedApprovalArgs,\n\t\t\t\t\treason: localApprovalReason ?? \"Approval required\",\n\t\t\t\t} satisfies import(\"../action-approval.js\").ActionApprovalRequest);\n\t\t\tconst shouldEmitEvents = approvalService.requiresUserInteraction();\n\t\t\tconst decisionPromise = approvalService.requestApproval(request, signal);\n\t\t\tconst registrationMetadata = await waitForPendingApprovalRegistration(\n\t\t\t\tapprovalService,\n\t\t\t\trequest.id,\n\t\t\t\tdecisionPromise,\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\trecordMaestroApprovalHit({\n\t\t\t\tapproval_request_id:\n\t\t\t\t\tplatformApprovalRequest?.id ??\n\t\t\t\t\ttoolExecutionBridgePlan?.metadata.approvalRequestId ??\n\t\t\t\t\tregistrationMetadata?.remoteApprovalRequestId ??\n\t\t\t\t\trequest.id,\n\t\t\t\taction:\n\t\t\t\t\trequest.actionDescription ?? request.summaryLabel ?? request.toolName,\n\t\t\t\tcommand:\n\t\t\t\t\ttypeof sanitizedApprovalArgs.command === \"string\"\n\t\t\t\t\t\t? sanitizedApprovalArgs.command\n\t\t\t\t\t\t: undefined,\n\t\t\t\tdecision_mode: \"MAESTRO_DECISION_MODE_REQUIRE_APPROVAL\",\n\t\t\t\treason: request.reason,\n\t\t\t\tcontext: {\n\t\t\t\t\ttool_name: request.toolName,\n\t\t\t\t\tdisplay_name: request.displayName,\n\t\t\t\t\tsummary_label: request.summaryLabel,\n\t\t\t\t\targs: sanitizedApprovalArgs,\n\t\t\t\t},\n\t\t\t\tcorrelation: {\n\t\t\t\t\tsession_id: cfg.session?.id,\n\t\t\t\t\tagent_run_step_id: toolCall.id,\n\t\t\t\t},\n\t\t\t});\n\t\t\tif (shouldEmitEvents) {\n\t\t\t\tyield recordEvent({ type: \"action_approval_required\", request });\n\t\t\t}\n\n\t\t\tconst decision = await decisionPromise;\n\t\t\tif (shouldEmitEvents) {\n\t\t\t\tyield recordEvent({\n\t\t\t\t\ttype: \"action_approval_resolved\",\n\t\t\t\t\trequest,\n\t\t\t\t\tdecision,\n\t\t\t\t});\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\ttoolExecutionBridge &&\n\t\t\t\tplatformApprovalRequest &&\n\t\t\t\ttoolExecutionBridgePlan?.kind === \"governed\"\n\t\t\t) {\n\t\t\t\tconst resolution = await toolExecutionBridge.resolveApproval(\n\t\t\t\t\tbridgeInput,\n\t\t\t\t\ttoolExecutionBridgePlan,\n\t\t\t\t\tdecision,\n\t\t\t\t\tsignal,\n\t\t\t\t);\n\t\t\t\tplatformApprovalResolved = true;\n\t\t\t\ttoolExecutionBridgePlan = resolution.plan;\n\t\t\t\tif (resolution.status === \"deny\") {\n\t\t\t\t\tapprovalAllowed = false;\n\t\t\t\t\tapprovalReason = resolution.reason;\n\t\t\t\t} else {\n\t\t\t\t\tapprovalAllowed = true;\n\t\t\t\t\tapprovalReason = undefined;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (!decision.approved) {\n\t\t\t\tapprovalAllowed = false;\n\t\t\t\tapprovalReason = decision.reason ?? localApprovalReason;\n\t\t\t}\n\t\t}\n\t}\n\n\tif (!approvalAllowed) {\n\t\tif (\n\t\t\ttoolExecutionBridge &&\n\t\t\tplatformApprovalRequest &&\n\t\t\ttoolExecutionBridgePlan?.kind === \"governed\" &&\n\t\t\t!platformApprovalResolved\n\t\t) {\n\t\t\tconst resolution = await toolExecutionBridge.resolveApproval(\n\t\t\t\tbridgeInput,\n\t\t\t\ttoolExecutionBridgePlan,\n\t\t\t\t{\n\t\t\t\t\tapproved: false,\n\t\t\t\t\treason: approvalReason ?? \"Approval denied\",\n\t\t\t\t\tresolvedBy: \"policy\",\n\t\t\t\t},\n\t\t\t\tsignal,\n\t\t\t);\n\t\t\ttoolExecutionBridgePlan = resolution.plan;\n\t\t\tapprovalReason =\n\t\t\t\tresolution.status === \"deny\"\n\t\t\t\t\t? resolution.reason\n\t\t\t\t\t: (approvalReason ?? \"Approval denied\");\n\t\t}\n\t\tawait logToolExecutionAudit(\n\t\t\tauditLogger,\n\t\t\teffectiveToolCall.name,\n\t\t\tsafetyMiddleware.sanitizeForLogging(\n\t\t\t\teffectiveToolCall.arguments as Record<string, unknown>,\n\t\t\t),\n\t\t\t\"denied\",\n\t\t\t0,\n\t\t\tapprovalReason,\n\t\t);\n\t\tconst deniedResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [{ type: \"text\", text: approvalReason ?? \"Action denied\" }],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst deniedEvents = recordEvents(\n\t\t\temitToolResult(deniedResult, toolCall, true, {\n\t\t\t\ttoolExecutionId: toolExecutionBridgePlan?.metadata.toolExecutionId,\n\t\t\t\tapprovalRequestId: toolExecutionBridgePlan?.metadata.approvalRequestId,\n\t\t\t}),\n\t\t);\n\t\tfor (const event of deniedEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\t// 7. Argument validation\n\tlet validatedArgs: Record<string, unknown>;\n\ttry {\n\t\tconst rawArgs = validateToolArguments(toolDef, effectiveToolCall);\n\t\tconst vaultedArgs = safetyMiddleware.prepareExecutionArgs(rawArgs);\n\t\tvalidatedArgs = safetyMiddleware.resolveCredentials(vaultedArgs);\n\t} catch (error: unknown) {\n\t\tconst validationErrorResult: ToolResultMessage = {\n\t\t\trole: \"toolResult\",\n\t\t\ttoolCallId: toolCall.id,\n\t\t\ttoolName: toolCall.name,\n\t\t\tcontent: [\n\t\t\t\t{\n\t\t\t\t\ttype: \"text\",\n\t\t\t\t\ttext: error instanceof Error ? error.message : String(error),\n\t\t\t\t},\n\t\t\t],\n\t\t\tisError: true,\n\t\t\ttimestamp: clock.now(),\n\t\t};\n\t\tconst validationEvents = recordEvents(\n\t\t\temitToolResult(validationErrorResult, toolCall, true),\n\t\t);\n\t\tfor (const event of validationEvents) {\n\t\t\tyield event;\n\t\t}\n\t\treturn {\n\t\t\tverdict: { outcome: \"blocked\", events },\n\t\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t\t};\n\t}\n\n\tconst sanitizedExecutionArgs =\n\t\tsafetyMiddleware.sanitizeForLogging(validatedArgs);\n\n\treturn {\n\t\tverdict: {\n\t\t\toutcome: \"proceed\",\n\t\t\teffectiveToolCall,\n\t\t\tvalidatedArgs,\n\t\t\ttoolDef,\n\t\t\tevents,\n\t\t\tsanitizedExecutionArgs,\n\t\t\t...(toolExecutionBridgePlan ? { toolExecutionBridgePlan } : {}),\n\t\t},\n\t\trateLimitUpdate: rateLimitResult.updatedState,\n\t};\n}\n"]}

package/dist/agent/transport/tool-update-queue.d.ts

@@ -7,6 +7,8 @@ import type { AgentEvent, ToolCall, ToolResultMessage } from "../types.js";
 export interface ToolExecutionOutcome {
     message: ToolResultMessage;
     isError: boolean;
+    toolExecutionId?: string;
+    approvalRequestId?: string;
 }
 export interface PendingExecution {
     toolCall: ToolCall;

package/dist/agent/transport/tool-update-queue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-update-queue.d.ts","sourceRoot":"","sources":["../../../src/agent/transport/tool-update-queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAM3E,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,CACpC,UAAU,EACV;IACC,IAAI,EACD,uBAAuB,GACvB,qBAAqB,GACrB,qBAAqB,CAAC;CACzB,CACD,CAAC;AAMF,qBAAa,eAAe;IAC3B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,OAAO,CAAC,CAAmC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA2B;IAE3C,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAWlC,UAAU,IAAI,OAAO;IAIrB,KAAK,IAAI,eAAe,GAAG,SAAS;IAIpC,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC;CAYhC;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAEvD;AAMD,wBAAsB,4BAA4B,CACjD,iBAAiB,EAAE,gBAAgB,EAAE,EACrC,WAAW,EAAE,eAAe,GAC1B,OAAO,CACP;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAC1C;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,OAAO,EAAE,oBAAoB,CAAC;CAC7B,CACH,CA6BA"}
+{"version":3,"file":"tool-update-queue.d.ts","sourceRoot":"","sources":["../../../src/agent/transport/tool-update-queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAM3E,MAAM,WAAW,oBAAoB;IACpC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,CACpC,UAAU,EACV;IACC,IAAI,EACD,uBAAuB,GACvB,qBAAqB,GACrB,qBAAqB,CAAC;CACzB,CACD,CAAC;AAMF,qBAAa,eAAe;IAC3B,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,OAAO,CAAC,CAAmC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA2B;IAE3C,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI;IAWlC,UAAU,IAAI,OAAO;IAIrB,KAAK,IAAI,eAAe,GAAG,SAAS;IAIpC,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC;CAYhC;AAED,wBAAgB,qBAAqB,IAAI,eAAe,CAEvD;AAMD,wBAAsB,4BAA4B,CACjD,iBAAiB,EAAE,gBAAgB,EAAE,EACrC,WAAW,EAAE,eAAe,GAC1B,OAAO,CACP;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,eAAe,CAAA;CAAE,GAC1C;IACA,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,OAAO,EAAE,oBAAoB,CAAC;CAC7B,CACH,CA6BA"}

package/dist/agent/transport/tool-update-queue.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-update-queue.js","sourceRoot":"","sources":["../../../src/agent/transport/tool-update-queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA4BH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,OAAO,eAAe;IAA5B;QACS,YAAO,GAAsB,EAAE,CAAC;IAmCzC,CAAC;IA/BA,IAAI,CAAC,KAAsB;QAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;gBACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACxB,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;CACD;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO,IAAI,eAAe,EAAE,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,iBAAqC,EACrC,WAA4B;IAS5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CACpC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CACrD,CACD,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjB,IAAI,EAAE,WAAoB;QAC1B,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACrB,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,EAAE,QAAiB;QACvB,KAAK;KACL,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAChB,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["/**\n * Tool Update Queue\n * Async concurrency primitives for interleaving tool execution completions\n * with streaming tool update events.\n */\n\nimport type { AgentEvent, ToolCall, ToolResultMessage } from \"../types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface ToolExecutionOutcome {\n\tmessage: ToolResultMessage;\n\tisError: boolean;\n}\n\nexport interface PendingExecution {\n\ttoolCall: ToolCall;\n\tpromise: Promise<ToolExecutionOutcome>;\n}\n\nexport type ToolUpdateEvent = Extract<\n\tAgentEvent,\n\t{\n\t\ttype:\n\t\t\t| \"tool_execution_update\"\n\t\t\t| \"tool_retry_required\"\n\t\t\t| \"tool_retry_resolved\";\n\t}\n>;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ToolUpdateQueue\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class ToolUpdateQueue {\n\tprivate updates: ToolUpdateEvent[] = [];\n\tprivate resolve?: (event: ToolUpdateEvent) => void;\n\tprivate pending?: Promise<ToolUpdateEvent>;\n\n\tpush(event: ToolUpdateEvent): void {\n\t\tif (this.resolve) {\n\t\t\tconst resolve = this.resolve;\n\t\t\tthis.resolve = undefined;\n\t\t\tthis.pending = undefined;\n\t\t\tresolve(event);\n\t\t\treturn;\n\t\t}\n\t\tthis.updates.push(event);\n\t}\n\n\thasPending(): boolean {\n\t\treturn this.updates.length > 0;\n\t}\n\n\tshift(): ToolUpdateEvent | undefined {\n\t\treturn this.updates.shift();\n\t}\n\n\tnext(): Promise<ToolUpdateEvent> {\n\t\tconst queued = this.shift();\n\t\tif (queued) {\n\t\t\treturn Promise.resolve(queued);\n\t\t}\n\t\tif (!this.pending) {\n\t\t\tthis.pending = new Promise<ToolUpdateEvent>((resolve) => {\n\t\t\t\tthis.resolve = resolve;\n\t\t\t});\n\t\t}\n\t\treturn this.pending;\n\t}\n}\n\nexport function createToolUpdateQueue(): ToolUpdateQueue {\n\treturn new ToolUpdateQueue();\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Execution/Update Interleaving\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport async function waitForNextExecutionOrUpdate(\n\tpendingExecutions: PendingExecution[],\n\tupdateQueue: ToolUpdateQueue,\n): Promise<\n\t| { kind: \"update\"; event: ToolUpdateEvent }\n\t| {\n\t\t\tkind: \"execution\";\n\t\t\texecution: PendingExecution;\n\t\t\toutcome: ToolExecutionOutcome;\n\t  }\n> {\n\tconst queued = updateQueue.shift();\n\tif (queued) {\n\t\treturn { kind: \"update\", event: queued };\n\t}\n\n\tconst executionPromise = Promise.race(\n\t\tpendingExecutions.map((entry) =>\n\t\t\tentry.promise.then((outcome) => ({ entry, outcome })),\n\t\t),\n\t).then((race) => ({\n\t\tkind: \"execution\" as const,\n\t\texecution: race.entry,\n\t\toutcome: race.outcome,\n\t}));\n\n\tconst updatePromise = updateQueue.next().then((event) => ({\n\t\tkind: \"update\" as const,\n\t\tevent,\n\t}));\n\n\tconst next = await Promise.race([executionPromise, updatePromise]);\n\tif (next.kind === \"execution\") {\n\t\tconst index = pendingExecutions.indexOf(next.execution);\n\t\tif (index >= 0) {\n\t\t\tpendingExecutions.splice(index, 1);\n\t\t}\n\t}\n\treturn next;\n}\n"]}
+{"version":3,"file":"tool-update-queue.js","sourceRoot":"","sources":["../../../src/agent/transport/tool-update-queue.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA8BH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,MAAM,OAAO,eAAe;IAA5B;QACS,YAAO,GAAsB,EAAE,CAAC;IAmCzC,CAAC;IA/BA,IAAI,CAAC,KAAsB;QAC1B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACJ,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,EAAE;gBACvD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACxB,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;CACD;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO,IAAI,eAAe,EAAE,CAAC;AAC9B,CAAC;AAED,gFAAgF;AAChF,gCAAgC;AAChC,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,4BAA4B,CACjD,iBAAqC,EACrC,WAA4B;IAS5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC;IACnC,IAAI,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,gBAAgB,GAAG,OAAO,CAAC,IAAI,CACpC,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/B,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CACrD,CACD,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjB,IAAI,EAAE,WAAoB;QAC1B,SAAS,EAAE,IAAI,CAAC,KAAK;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACrB,CAAC,CAAC,CAAC;IAEJ,MAAM,aAAa,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,EAAE,QAAiB;QACvB,KAAK;KACL,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAChB,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC","sourcesContent":["/**\n * Tool Update Queue\n * Async concurrency primitives for interleaving tool execution completions\n * with streaming tool update events.\n */\n\nimport type { AgentEvent, ToolCall, ToolResultMessage } from \"../types.js\";\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Types\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport interface ToolExecutionOutcome {\n\tmessage: ToolResultMessage;\n\tisError: boolean;\n\ttoolExecutionId?: string;\n\tapprovalRequestId?: string;\n}\n\nexport interface PendingExecution {\n\ttoolCall: ToolCall;\n\tpromise: Promise<ToolExecutionOutcome>;\n}\n\nexport type ToolUpdateEvent = Extract<\n\tAgentEvent,\n\t{\n\t\ttype:\n\t\t\t| \"tool_execution_update\"\n\t\t\t| \"tool_retry_required\"\n\t\t\t| \"tool_retry_resolved\";\n\t}\n>;\n\n// ─────────────────────────────────────────────────────────────────────────────\n// ToolUpdateQueue\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport class ToolUpdateQueue {\n\tprivate updates: ToolUpdateEvent[] = [];\n\tprivate resolve?: (event: ToolUpdateEvent) => void;\n\tprivate pending?: Promise<ToolUpdateEvent>;\n\n\tpush(event: ToolUpdateEvent): void {\n\t\tif (this.resolve) {\n\t\t\tconst resolve = this.resolve;\n\t\t\tthis.resolve = undefined;\n\t\t\tthis.pending = undefined;\n\t\t\tresolve(event);\n\t\t\treturn;\n\t\t}\n\t\tthis.updates.push(event);\n\t}\n\n\thasPending(): boolean {\n\t\treturn this.updates.length > 0;\n\t}\n\n\tshift(): ToolUpdateEvent | undefined {\n\t\treturn this.updates.shift();\n\t}\n\n\tnext(): Promise<ToolUpdateEvent> {\n\t\tconst queued = this.shift();\n\t\tif (queued) {\n\t\t\treturn Promise.resolve(queued);\n\t\t}\n\t\tif (!this.pending) {\n\t\t\tthis.pending = new Promise<ToolUpdateEvent>((resolve) => {\n\t\t\t\tthis.resolve = resolve;\n\t\t\t});\n\t\t}\n\t\treturn this.pending;\n\t}\n}\n\nexport function createToolUpdateQueue(): ToolUpdateQueue {\n\treturn new ToolUpdateQueue();\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Execution/Update Interleaving\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport async function waitForNextExecutionOrUpdate(\n\tpendingExecutions: PendingExecution[],\n\tupdateQueue: ToolUpdateQueue,\n): Promise<\n\t| { kind: \"update\"; event: ToolUpdateEvent }\n\t| {\n\t\t\tkind: \"execution\";\n\t\t\texecution: PendingExecution;\n\t\t\toutcome: ToolExecutionOutcome;\n\t  }\n> {\n\tconst queued = updateQueue.shift();\n\tif (queued) {\n\t\treturn { kind: \"update\", event: queued };\n\t}\n\n\tconst executionPromise = Promise.race(\n\t\tpendingExecutions.map((entry) =>\n\t\t\tentry.promise.then((outcome) => ({ entry, outcome })),\n\t\t),\n\t).then((race) => ({\n\t\tkind: \"execution\" as const,\n\t\texecution: race.entry,\n\t\toutcome: race.outcome,\n\t}));\n\n\tconst updatePromise = updateQueue.next().then((event) => ({\n\t\tkind: \"update\" as const,\n\t\tevent,\n\t}));\n\n\tconst next = await Promise.race([executionPromise, updatePromise]);\n\tif (next.kind === \"execution\") {\n\t\tconst index = pendingExecutions.indexOf(next.execution);\n\t\tif (index >= 0) {\n\t\t\tpendingExecutions.splice(index, 1);\n\t\t}\n\t}\n\treturn next;\n}\n"]}

package/dist/agent/transport.d.ts

@@ -49,6 +49,7 @@ import { type Clock } from "../utils/clock.js";
 import type { AuthCredential } from "../providers/auth.js";
 import type { ActionApprovalService } from "./action-approval.js";
 import type { ToolRetryConfig, ToolRetryService } from "./tool-retry.js";
+import { type PlatformToolExecutionBridge } from "./transport/tool-execution-bridge.js";
 import { type SessionTokenCounter, type ToolAuditLogger } from "./transport/transport-utils.js";
 import type { AgentEvent, AgentRunConfig, AgentToolResult, AgentTransport, Message } from "./types.js";
 export type { SessionTokenCounter, ToolAuditLogger, } from "./transport/transport-utils.js";
@@ -77,6 +78,8 @@ export interface ProviderTransportOptions {
     sessionTokenCounter?: SessionTokenCounter;
     /** Audit logger for sensitive tool execution events */
     auditLogger?: ToolAuditLogger;
+    /** Optional Platform ToolExecution bridge override */
+    platformToolExecutionBridge?: PlatformToolExecutionBridge | false;
 }
 /**
  * Provider Transport - Multi-provider LLM communication with safety controls

package/dist/agent/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/agent/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,KAAK,eAAe,EAAyB,MAAM,mBAAmB,CAAC;AAGhF,OAAO,EAAE,KAAK,KAAK,EAAe,MAAM,mBAAmB,CAAC;AAI5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAkB3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAYzE,OAAO,EACN,KAAK,mBAAmB,EACxB,KAAK,eAAe,EAGpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACX,UAAU,EACV,cAAc,EACd,eAAe,EACf,cAAc,EAGd,OAAO,EAIP,MAAM,YAAY,CAAC;AAGpB,YAAY,EACX,mBAAmB,EACnB,eAAe,GACf,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,0BAA0B;IAC1C,gBAAgB,EAAE,CACjB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC;QAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,CAAC,EAAE,CACX,QAAQ,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,cAAc,CAAC,EAAE,CAChB,QAAQ,EAAE,MAAM,KACZ,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;IAC/C,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,4EAA4E;IAC5E,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,0FAA0F;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,uDAAuD;IACvD,WAAW,CAAC,EAAE,eAAe,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IA+B3C,OAAO,CAAC,OAAO;IA9B3B,sEAAsE;IACtE,OAAO,CAAC,aAAa,CAA8B;IACnD,qEAAqE;IACrE,OAAO,CAAC,8BAA8B,CAAS;IAC/C,8DAA8D;IAC9D,OAAO,CAAC,oBAAoB,CAA+B;IAC3D,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IACzD,uEAAuE;IACvE,OAAO,CAAC,mBAAmB,CAAK;IAChC,oCAAoC;IACpC,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAsB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAkB;IAE/C;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAErD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAK;gBAExB,OAAO,GAAE,wBAA6B;IAqC1D;;;;;;;;;;;;;OAaG;IACI,QAAQ,CACd,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GAClB,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;IAgBrC,GAAG,CACT,QAAQ,EAAE,OAAO,EAAE,EACnB,WAAW,EAAE,OAAO,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,CAAC,EAAE,WAAW,GAClB,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;CA0sB5C"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../src/agent/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,EAAE,KAAK,eAAe,EAAyB,MAAM,mBAAmB,CAAC;AAGhF,OAAO,EAAE,KAAK,KAAK,EAAe,MAAM,mBAAmB,CAAC;AAI5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAsB3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EACN,KAAK,2BAA2B,EAEhC,MAAM,sCAAsC,CAAC;AAW9C,OAAO,EACN,KAAK,mBAAmB,EACxB,KAAK,eAAe,EAGpB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACX,UAAU,EACV,cAAc,EACd,eAAe,EACf,cAAc,EAGd,OAAO,EAIP,MAAM,YAAY,CAAC;AAuDpB,YAAY,EACX,mBAAmB,EACnB,eAAe,GACf,MAAM,gCAAgC,CAAC;AAExC,MAAM,WAAW,0BAA0B;IAC1C,gBAAgB,EAAE,CACjB,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,CAAC,EAAE,WAAW,KAChB,OAAO,CAAC;QAAE,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACxE;AAED,MAAM,WAAW,wBAAwB;IACxC,SAAS,CAAC,EAAE,CACX,QAAQ,EAAE,MAAM,KACZ,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,SAAS,CAAC;IACtD,cAAc,CAAC,EAAE,CAChB,QAAQ,EAAE,MAAM,KACZ,cAAc,GAAG,SAAS,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,qBAAqB,CAAC;IACxC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,iBAAiB,CAAC,EAAE,0BAA0B,CAAC;IAC/C,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,4EAA4E;IAC5E,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,0FAA0F;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,qEAAqE;IACrE,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,uDAAuD;IACvD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,sDAAsD;IACtD,2BAA2B,CAAC,EAAE,2BAA2B,GAAG,KAAK,CAAC;CAClE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,qBAAa,iBAAkB,YAAW,cAAc;IA+B3C,OAAO,CAAC,OAAO;IA9B3B,sEAAsE;IACtE,OAAO,CAAC,aAAa,CAA8B;IACnD,qEAAqE;IACrE,OAAO,CAAC,8BAA8B,CAAS;IAC/C,8DAA8D;IAC9D,OAAO,CAAC,oBAAoB,CAA+B;IAC3D,uEAAuE;IACvE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;IACrD,0DAA0D;IAC1D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAsB;IACzD,uEAAuE;IACvE,OAAO,CAAC,mBAAmB,CAAK;IAChC,oCAAoC;IACpC,OAAO,CAAC,iBAAiB,CAAK;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAsB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAkB;IAE/C;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAErD;;;OAGG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAK;gBAExB,OAAO,GAAE,wBAA6B;IAqC1D;;;;;;;;;;;;;OAaG;IACI,QAAQ,CACd,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,WAAW,GAClB,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;IAgBrC,GAAG,CACT,QAAQ,EAAE,OAAO,EAAE,EACnB,WAAW,EAAE,OAAO,EACpB,GAAG,EAAE,cAAc,EACnB,MAAM,CAAC,EAAE,WAAW,GAClB,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC;CA8wB5C"}