@evalops/maestro 0.10.8 → 0.10.11

package/dist/agent/transport.js

@@ -57,15 +57,48 @@ import { checkSessionLimits } from "../safety/policy.js";
 import { createSafetyMiddleware, } from "../safety/safety-middleware.js";
 import { SemanticJudge } from "../safety/semantic-judge.js";
 import { WorkflowStateError, WorkflowStateTracker, applyWorkflowStateHooks, isWorkflowTrackedTool, } from "../safety/workflow-state.js";
+import { getSkillArtifactMetadataFromDetails, } from "../skills/artifact-metadata.js";
 import { getOptimalConcurrency } from "../tools/parallel-execution.js";
 import { trackUsage } from "../tracking/cost-tracker.js";
 import { getTrainingHeaders } from "../training.js";
 import { getStoredCredentials } from "./keys.js";
 import { createProviderStream } from "./transport/create-provider-stream.js";
+import { getDefaultPlatformToolExecutionBridge, } from "./transport/tool-execution-bridge.js";
 import { createToolExecutionPromise } from "./transport/tool-execution.js";
 import { evaluateToolSafety, } from "./transport/tool-safety-pipeline.js";
 import { createToolUpdateQueue, waitForNextExecutionOrUpdate, } from "./transport/tool-update-queue.js";
 import { calculateCost, resolveEnvCredential, } from "./transport/transport-utils.js";
+function getGovernedToolResultEventMetadata(details) {
+    if (!details || typeof details !== "object") {
+        return {};
+    }
+    const governedOutcome = details
+        .governedOutcome;
+    if (!governedOutcome || typeof governedOutcome !== "object") {
+        return {};
+    }
+    const normalized = governedOutcome;
+    const classification = typeof normalized.classification === "string"
+        ? normalized.classification
+        : undefined;
+    const errorCode = typeof normalized.code === "string" && normalized.code.trim().length > 0
+        ? normalized.code.trim()
+        : classification;
+    const approvalRequestId = typeof normalized.approvalRequestId === "string" &&
+        normalized.approvalRequestId.trim().length > 0
+        ? normalized.approvalRequestId.trim()
+        : undefined;
+    return {
+        errorCode,
+        approvalRequestId,
+        governedOutcome: classification,
+    };
+}
+function getSkillToolResultEventMetadata(details) {
+    return {
+        skillMetadata: getSkillArtifactMetadataFromDetails(details),
+    };
+}
 /**
  * Provider Transport - Multi-provider LLM communication with safety controls
  *
@@ -266,6 +299,7 @@ export class ProviderTransport {
             authType: credential?.type ?? "api-key",
             headers,
             requestBody: credential?.requestBody,
+            sessionId: cfg.session?.id,
             taskBudget: cfg.taskBudget,
         };
         let hasMoreToolCalls = true;
@@ -325,6 +359,7 @@ export class ProviderTransport {
             let steeringAfterTools = null;
             let pendingNextTurn = false;
             let encounteredError = false;
+            let firstModelOutputSeen = false;
             const currentMessages = cfg.preprocessMessages
                 ? await cfg.preprocessMessages(allMessages, {
                     systemPrompt,
@@ -358,6 +393,9 @@ export class ProviderTransport {
                     await new Promise((resolve) => setTimeout(resolve, backoffMs));
                 }
                 streamAttempt++;
+                cfg.queryProfiler?.checkpoint("model:request:start", {
+                    attempt: streamAttempt,
+                });
                 const stream = createProviderStream(model, currentContext, streamOptions, { reasoning: cfg.reasoning, reasoningSummary: cfg.reasoningSummary });
                 try {
                     for await (const event of stream) {
@@ -374,6 +412,10 @@ export class ProviderTransport {
                         if (event.type === "text_delta" ||
                             event.type === "thinking_delta" ||
                             event.type === "toolcall_delta") {
+                            if (!firstModelOutputSeen) {
+                                cfg.queryProfiler?.checkpoint("model:first-token");
+                                firstModelOutputSeen = true;
+                            }
                             if (currentAssistantMessage) {
                                 yield {
                                     type: "message_update",
@@ -384,6 +426,10 @@ export class ProviderTransport {
                             continue;
                         }
                         if (event.type === "toolcall_end") {
+                            if (!firstModelOutputSeen) {
+                                cfg.queryProfiler?.checkpoint("model:first-token");
+                                firstModelOutputSeen = true;
+                            }
                             const rawArgs = event.toolCall.arguments;
                             const normalizedArgs = rawArgs &&
                                 typeof rawArgs === "object" &&
@@ -410,6 +456,7 @@ export class ProviderTransport {
                                     if (credential?.type !== "anthropic-oauth") {
                                         try {
                                             trackUsage({
+                                                sessionId: cfg.session?.id,
                                                 provider: model.provider,
                                                 model: model.id,
                                                 tokensInput: usage.input || 0,
@@ -496,18 +543,28 @@ export class ProviderTransport {
                         steeringAfterTools = steering;
                     }
                 };
-                const buildExecutionEvents = (toolCall, message, isError) => [
-                    { type: "message_start", message },
-                    { type: "message_end", message },
-                    {
-                        type: "tool_execution_end",
-                        toolCallId: toolCall.id,
-                        toolName: toolCall.name,
-                        result: message,
-                        isError,
-                    },
-                ];
-                const emitToolResult = (message, toolCall, isError) => {
+                const buildExecutionEvents = (toolCall, message, isError, metadata) => {
+                    const governedMetadata = getGovernedToolResultEventMetadata(message.details);
+                    const skillMetadata = getSkillToolResultEventMetadata(message.details).skillMetadata;
+                    return [
+                        { type: "message_start", message },
+                        { type: "message_end", message },
+                        {
+                            type: "tool_execution_end",
+                            toolCallId: toolCall.id,
+                            toolExecutionId: metadata?.toolExecutionId,
+                            approvalRequestId: metadata?.approvalRequestId ??
+                                governedMetadata.approvalRequestId,
+                            errorCode: governedMetadata.errorCode,
+                            governedOutcome: governedMetadata.governedOutcome,
+                            skillMetadata,
+                            toolName: toolCall.name,
+                            result: message,
+                            isError,
+                        },
+                    ];
+                };
+                const emitToolResult = (message, toolCall, isError, metadata) => {
                     try {
                         applyWorkflowStateHooks({
                             toolCall,
@@ -516,7 +573,7 @@ export class ProviderTransport {
                             isError,
                         });
                         toolResults.push(message);
-                        return buildExecutionEvents(toolCall, message, isError);
+                        return buildExecutionEvents(toolCall, message, isError, metadata);
                     }
                     catch (error) {
                         if (error instanceof WorkflowStateError) {
@@ -529,7 +586,7 @@ export class ProviderTransport {
                                 timestamp: this.clock.now(),
                             };
                             toolResults.push(workflowErrorResult);
-                            return buildExecutionEvents(toolCall, workflowErrorResult, true);
+                            return buildExecutionEvents(toolCall, workflowErrorResult, true, metadata);
                         }
                         throw error;
                     }
@@ -571,7 +628,10 @@ export class ProviderTransport {
                             continue;
                         }
                         const outcome = next.outcome;
-                        events.push(...emitToolResult(outcome.message, next.execution.toolCall, outcome.isError));
+                        events.push(...emitToolResult(outcome.message, next.execution.toolCall, outcome.isError, {
+                            toolExecutionId: outcome.toolExecutionId,
+                            approvalRequestId: outcome.approvalRequestId,
+                        }));
                         await checkSteering();
                         break;
                     }
@@ -598,6 +658,10 @@ export class ProviderTransport {
                         adaptiveThresholds: this.adaptiveThresholds,
                         auditLogger: this.auditLogger,
                         approvalService: this.options.approvalService,
+                        toolExecutionBridge: this.options.platformToolExecutionBridge === false
+                            ? undefined
+                            : (this.options.platformToolExecutionBridge ??
+                                getDefaultPlatformToolExecutionBridge()),
                         hookService,
                         firewall,
                         rateLimitState: {
@@ -667,6 +731,11 @@ export class ProviderTransport {
                         toolRetryService: this.options.toolRetryService,
                         toolRetryConfig: this.options.toolRetryConfig,
                         clientToolService: this.options.clientToolService,
+                        toolExecutionBridge: this.options.platformToolExecutionBridge === false
+                            ? undefined
+                            : (this.options.platformToolExecutionBridge ??
+                                getDefaultPlatformToolExecutionBridge()),
+                        toolExecutionBridgePlan: safetyVerdict.toolExecutionBridgePlan,
                         toolUpdateQueue,
                         clientToolExecPromise,
                     });
@@ -690,7 +759,10 @@ export class ProviderTransport {
                         continue;
                     }
                     const outcome = next.outcome;
-                    for (const event of emitToolResult(outcome.message, next.execution.toolCall, outcome.isError)) {
+                    for (const event of emitToolResult(outcome.message, next.execution.toolCall, outcome.isError, {
+                        toolExecutionId: outcome.toolExecutionId,
+                        approvalRequestId: outcome.approvalRequestId,
+                    })) {
                         yield event;
                     }
                     await checkSteering();
@@ -762,6 +834,14 @@ export class ProviderTransport {
                 pendingNextTurn = true;
             }
             hasMoreToolCalls = encounteredError ? false : pendingNextTurn;
+            if (encounteredError) {
+                cfg.queryProfiler?.terminal("turn:error");
+            }
+            else if (!hasMoreToolCalls) {
+                cfg.queryProfiler?.terminal("turn:complete", {
+                    tool_results: toolResults.length,
+                });
+            }
         }
     }
 }

package/dist/agent/transport.js.map

@@ -1 +1 @@
-{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/agent/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAwB,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAc,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAEN,sBAAsB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACN,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAEN,kBAAkB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAEN,qBAAqB,EACrB,4BAA4B,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGN,aAAa,EACb,oBAAoB,GACpB,MAAM,gCAAgC,CAAC;AAsDxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,OAAO,iBAAiB;IAmB7B;;;OAGG;aACqB,wBAAmB,GAAG,MAAM,AAAT,CAAU;IAErD;;;OAGG;aACqB,oBAAe,GAAG,CAAC,AAAJ,CAAK;IAE5C,YAAoB,UAAoC,EAAE;QAAtC,YAAO,GAAP,OAAO,CAA+B;QA9B1D,sEAAsE;QAC9D,kBAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACnD,qEAAqE;QAC7D,mCAA8B,GAAG,KAAK,CAAC;QAC/C,8DAA8D;QACtD,yBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;QAK3D,uEAAuE;QAC/D,wBAAmB,GAAG,CAAC,CAAC;QAChC,oCAAoC;QAC5B,sBAAiB,GAAG,CAAC,CAAC;QAkB7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1C,uDAAuD;QACvD,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,CAAC;YAChD,KAAK,EAAE,GAAG,EAAE,0CAA0C;YACtD,gBAAgB,EAAE,GAAG,EAAE,mDAAmD;YAC1E,eAAe,EAAE,CAAC,EAAE,wDAAwD;SAC5E,CAAC,CAAC;QACH,2DAA2D;QAC3D,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC;YAC9C,mEAAmE;YACnE,mBAAmB,EAAE,IAAI;YACzB,iEAAiE;YACjE,YAAY,EAAE;gBACb,iBAAiB,EAAE,CAAC,EAAE,4BAA4B;gBAClD,eAAe,EAAE,CAAC;gBAClB,iBAAiB,EAAE,EAAE,EAAE,kDAAkD;gBACzE,SAAS,EAAE,KAAK,EAAE,mCAAmC;aACrD;YACD,2DAA2D;YAC3D,sBAAsB,EAAE,IAAI;YAC5B,kEAAkE;YAClE,qBAAqB,EAAE,IAAI;YAC3B,gGAAgG;YAChG,eAAe,EAAE;gBAChB,qFAAqF;gBACrF,gBAAgB,EAAE,CAAC,gCAAgC,EAAE;gBACrD,QAAQ,EAAE;oBACT,OAAO,EAAE,gCAAgC,EAAE;iBAC3C;aACD;SACD,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,CAAC,QAAQ,CACd,QAAmB,EACnB,MAAsB,EACtB,MAAoB;QAEpB,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,mBAAmB,GAAY;YACpC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE;gBACR,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE;aACpE;YACD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC3B,CAAC;QAEF,kEAAkE;QAClE,uDAAuD;QACvD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,CAAC,GAAG,CACT,QAAmB,EACnB,WAAoB,EACpB,GAAmB,EACnB,MAAoB;QAEpB,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACpC,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QAEvC,qDAAqD;QACrD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,QAAQ,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,mDAAmD;QACnD,MAAM,WAAW,GAChB,IAAI,CAAC,OAAO,CAAC,WAAW;YACxB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAChB,CAAC,CAAC,qBAAqB,CAAC;oBACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;oBACrB,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;oBAC1B,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACzB,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAClD,CAAC;gBACH,CAAC,CAAC,SAAS,CAAC,CAAC;QAEf,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAE3B,IAAI,UAAsC,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,WAAW,EAAE,CAAC;gBACjB,UAAU,GAAG;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,KAAK;iBACb,CAAC;YACH,CAAC;QACF,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,aAAa,EAAE,CAAC;gBACnB,UAAU,GAAG,aAAa,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,UAAU,GAAG;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;oBAClC,MAAM,EAAE,gBAAgB;iBACxB,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACd,sCAAsC,KAAK,CAAC,QAAQ,oDAAoD,CACxG,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtD,IAAI,GAAG,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG;YACf,YAAY;YACZ,QAAQ;YACR,KAAK;SACL,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChD,KAAK,GAAG;gBACP,GAAG,KAAK;gBACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,SAAS,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;aACjF,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,OAAO,GACZ,eAAe,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,EAAE,OAAO;YACtD,CAAC,CAAC;gBACA,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;gBAC1B,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;aAC9B;YACF,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,aAAa,GAAG;YACrB,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,SAAS;YACvC,OAAO;YACP,WAAW,EAAE,UAAU,EAAE,WAAW;YACpC,UAAU,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;QAEF,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,mBAAmB,GACxB,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,iBAAiB,CAAC;QAClD,MAAM,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACpD,MAAM,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QAExD,IAAI,eAAe,GAAG,mBAAmB;YACxC,CAAC,CAAC,MAAM,mBAAmB,EAAc;YACzC,CAAC,CAAC,EAAE,CAAC;QAEN,OAAO,gBAAgB,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAE7B,+DAA+D;YAC/D,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,UAA8B,CAAC;gBACnC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC7D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BACpB,UAAU,GAAG,KAAK,CAAC;wBACpB,CAAC;oBACF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,gEAAgE;wBAChE,6EAA6E;wBAC7E,4EAA4E;wBAC5E,MAAM,CAAC,KAAK,CACX,mCAAmC,EACnC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;oBACH,CAAC;gBACF,CAAC;gBAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE;oBAClD,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;YACF,CAAC;YAED,IAAI,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,EAAE,CAAC;gBACzD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,WAAW,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;gBACzC,CAAC;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;oBACtC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC1D,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACxD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;wBAChB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC9B,CAAC;gBACF,CAAC;gBACD,eAAe,GAAG,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,uBAAuB,GAA4B,IAAI,CAAC;YAC5D,IAAI,yBAAyB,GAA4B,IAAI,CAAC;YAC9D,MAAM,kBAAkB,GAAe,EAAE,CAAC;YAC1C,IAAI,WAAW,GAAwB,EAAE,CAAC;YAC1C,IAAI,kBAAkB,GAAuC,IAAI,CAAC;YAClE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAE7B,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB;gBAC7C,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAC5B,WAAW,EACX;oBACC,YAAY;oBACZ,KAAK;oBACL,KAAK;oBACL,WAAW;iBACX,EACD,MAAM,CACN;gBACF,CAAC,CAAC,WAAW,CAAC;YAEf,MAAM,cAAc,GAAG;gBACtB,GAAG,OAAO;gBACV,QAAQ,EAAE,eAAe;aACzB,CAAC;YAEF,uCAAuC;YACvC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/D,MAAM,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;YACxD,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,OAAO,CAAC,aAAa,IAAI,aAAa,IAAI,gBAAgB,EAAE,CAAC;gBAC5D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACvB,wBAAwB;oBACxB,uBAAuB,GAAG,IAAI,CAAC;oBAC/B,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC9B,eAAe,GAAG,KAAK,CAAC;oBAExB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACzB,aAAa,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,EACvD,aAAa,CAAC,UAAU,CACxB,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;wBACjD,OAAO,EAAE,aAAa;wBACtB,UAAU,EAAE,gBAAgB;wBAC5B,SAAS;wBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACxB,CAAC,CAAC;oBACH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,aAAa,EAAE,CAAC;gBAEhB,MAAM,MAAM,GAAG,oBAAoB,CAClC,KAAK,EACL,cAAc,EACd,aAAa,EACb,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CACpE,CAAC;gBAEF,IAAI,CAAC;oBACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAClC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC5B,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAAC;4BACxC,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM;oCACL,IAAI,EAAE,eAAe;oCACrB,OAAO,EAAE,uBAAuB;iCAChC,CAAC;4BACH,CAAC;4BACD,SAAS;wBACV,CAAC;wBAED,IACC,KAAK,CAAC,IAAI,KAAK,YAAY;4BAC3B,KAAK,CAAC,IAAI,KAAK,gBAAgB;4BAC/B,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAC9B,CAAC;4BACF,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM;oCACL,IAAI,EAAE,gBAAgB;oCACtB,OAAO,EAAE,uBAAuB;oCAChC,qBAAqB,EAAE,KAAK;iCAC5B,CAAC;4BACH,CAAC;4BACD,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;4BACnC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACzC,MAAM,cAAc,GACnB,OAAO;gCACP,OAAO,OAAO,KAAK,QAAQ;gCAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gCACtB,CAAC,CAAE,OAAmC;gCACtC,CAAC,CAAC,EAAE,CAAC;4BACP,kBAAkB,CAAC,IAAI,CAAC;gCACvB,IAAI,EAAE,UAAU;gCAChB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gCACrB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gCACzB,SAAS,EAAE,cAAc;6BACzB,CAAC,CAAC;4BACH,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC3B,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,yBAAyB,GAAG,uBAAuB,CAAC;gCACpD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;gCAChE,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC;oCACnC,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC;oCAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;wCACtB,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;wCAClC,CAAC,CAAC,CAAC,CAAC;oCACL,IAAI,UAAU,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;wCAC5C,IAAI,CAAC;4CACJ,UAAU,CAAC;gDACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;gDACxB,KAAK,EAAE,KAAK,CAAC,EAAE;gDACf,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gDAC7B,YAAY,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;gDAC/B,eAAe,EAAE,KAAK,CAAC,SAAS;gDAChC,gBAAgB,EAAE,KAAK,CAAC,UAAU;gDAClC,IAAI;6CACJ,CAAC,CAAC;wCACJ,CAAC;wCAAC,OAAO,KAAK,EAAE,CAAC;4CAChB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gDACpC,KAAK,EACJ,KAAK,YAAY,KAAK;oDACrB,CAAC,CAAC,KAAK,CAAC,OAAO;oDACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gDACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;6CACvD,CAAC,CAAC;wCACJ,CAAC;oCACF,CAAC;gCACF,CAAC;4BACF,CAAC;4BACD,eAAe,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;4BAChD,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC5B,yBAAyB,GAAG,KAAK,CAAC,KAAK,CAAC;4BACxC,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;4BACjE,CAAC;4BACD,eAAe,GAAG,KAAK,CAAC;4BACxB,gBAAgB,GAAG,IAAI,CAAC;4BACxB,MAAM;wBACP,CAAC;oBACF,CAAC;oBACD,aAAa,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IACC,wBAAwB,CAAC,KAAK,CAAC;wBAC/B,aAAa,IAAI,gBAAgB,EAChC,CAAC;wBACF,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;4BAC9C,OAAO,EAAE,aAAa;4BACtB,UAAU,EAAE,gBAAgB;4BAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,KAAK,CAAC,MAAM;yBACpB,CAAC,CAAC;wBACH,SAAS,CAAC,mBAAmB;oBAC9B,CAAC;oBACD,gDAAgD;oBAChD,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC,CAAC,uBAAuB;YAEzB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;gBAChD,MAAM,iBAAiB,GAAuB,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,CAAC,CAAC;gBACrE,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAC5D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC,CAAC;gBACL,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/D,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAChC,CAAC;gBACF,MAAM,sBAAsB,GAC3B,sBAAsB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;gBAEzD,+DAA+D;gBAC/D,IAAI,gBAAgB,GAAG,qBAAqB,CAC3C,kBAAkB,EAClB,KAAK,EACL;oBACC,eAAe,EAAE,qBAAqB;oBACtC,sBAAsB,EAAE,CAAC,EAAE,wCAAwC;oBACnE,OAAO,EAAE,IAAI;iBACb,CACD,CAAC;gBAEF,yDAAyD;gBACzD,IAAI,qBAAqB,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC;oBACzD,gBAAgB,GAAG,CAAC,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC;wBAC1C,MAAM,CAAC,IAAI,CACV,kGAAkG,CAClG,CAAC;wBACF,IAAI,CAAC,8BAA8B,GAAG,IAAI,CAAC;oBAC5C,CAAC;gBACF,CAAC;gBAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;gBAC9B,IAAI,kBAAkB,GAAe,EAAE,CAAC;gBAExC,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;oBAC/C,IAAI,iBAAiB,IAAI,CAAC,mBAAmB,EAAE,CAAC;wBAC/C,OAAO;oBACR,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;oBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,iBAAiB,GAAG,IAAI,CAAC;wBACzB,kBAAkB,GAAG,QAAQ,CAAC;oBAC/B,CAAC;gBACF,CAAC,CAAC;gBAEF,MAAM,oBAAoB,GAAG,CAC5B,QAAkB,EAClB,OAA0B,EAC1B,OAAgB,EACD,EAAE,CAAC;oBAClB,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAgB;oBAChD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAgB;oBAC9C;wBACC,IAAI,EAAE,oBAAoB;wBAC1B,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;wBACvB,MAAM,EAAE,OAAO;wBACf,OAAO;qBACO;iBACf,CAAC;gBACF,MAAM,cAAc,GAAG,CACtB,OAA0B,EAC1B,QAAkB,EAClB,OAAgB,EACf,EAAE;oBACH,IAAI,CAAC;wBACJ,uBAAuB,CAAC;4BACvB,QAAQ;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE,IAAI,CAAC,aAAa;4BAC3B,OAAO;yBACP,CAAC,CAAC;wBACH,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;4BACzC,MAAM,mBAAmB,GAAsB;gCAC9C,IAAI,EAAE,YAAY;gCAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gCACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gCACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gCAChD,OAAO,EAAE,IAAI;gCACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;6BAC3B,CAAC;4BACF,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;4BACtC,OAAO,oBAAoB,CAAC,QAAQ,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC;wBAClE,CAAC;wBACD,MAAM,KAAK,CAAC;oBACb,CAAC;gBACF,CAAC,CAAC;gBACF,MAAM,mBAAmB,GAAG,CAAC,QAAkB,EAAgB,EAAE;oBAChE,MAAM,oBAAoB,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CACpE,QAAQ,CAAC,SAAoC,CAC7C,CAAC;oBACF,MAAM,aAAa,GAAsB;wBACxC,IAAI,EAAE,YAAY;wBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;wBACvB,OAAO,EAAE;4BACR;gCACC,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,qCAAqC;6BAC3C;yBACD;wBACD,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;qBAC3B,CAAC;oBACF,OAAO;wBACN;4BACC,IAAI,EAAE,sBAAsB;4BAC5B,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;4BACvB,IAAI,EAAE,oBAAoB;yBACZ;wBACf,GAAG,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC;qBAChD,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,uBAAuB,GAAG,KAAK,IAA2B,EAAE;oBACjE,IAAI,iBAAiB,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;wBACjD,OAAO,EAAE,CAAC;oBACX,CAAC;oBACD,MAAM,MAAM,GAAiB,EAAE,CAAC;oBAChC,OAAO,iBAAiB,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;wBACrD,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC9C,iBAAiB,EACjB,eAAe,CACf,CAAC;wBACF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACxB,SAAS;wBACV,CAAC;wBACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;wBAC7B,MAAM,CAAC,IAAI,CACV,GAAG,cAAc,CAChB,OAAO,CAAC,OAAO,EACf,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,OAAO,CAAC,OAAO,CACf,CACD,CAAC;wBACF,MAAM,aAAa,EAAE,CAAC;wBACtB,MAAM;oBACP,CAAC;oBACD,OAAO,MAAM,CAAC;gBACf,CAAC,CAAC;gBAEF,KACC,IAAI,SAAS,GAAG,CAAC,EACjB,SAAS,GAAG,kBAAkB,CAAC,MAAM,EACrC,SAAS,EAAE,EACV,CAAC;oBACF,IAAI,iBAAiB,EAAE,CAAC;wBACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBACzD,MAAM;oBACP,CAAC;oBACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBAExB,6EAA6E;oBAC7E,MAAM,cAAc,GAAG,kBAAkB,CAAC;wBACzC,QAAQ;wBACR,KAAK;wBACL,WAAW;wBACX,GAAG;wBACH,MAAM;wBACN,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;wBAC7C,WAAW;wBACX,QAAQ;wBACR,cAAc,EAAE;4BACf,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;4BAC/C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;4BAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;4BACzC,YAAY,EAAE,iBAAiB,CAAC,mBAAmB;4BACnD,SAAS,EAAE,iBAAiB,CAAC,eAAe;yBAC5C;wBACD,cAAc;qBACd,CAAC,CAAC;oBACH,IAAI,aAA4C,CAAC;oBACjD,IAAI,eAEQ,CAAC;oBACb,OAAO,IAAI,EAAE,CAAC;wBACb,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;wBAC/C,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;4BACrB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;4BACjE,MAAM;wBACP,CAAC;wBACD,MAAM,UAAU,CAAC,KAAK,CAAC;oBACxB,CAAC;oBACD,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;oBAC9D,CAAC;oBAED,iCAAiC;oBACjC,IAAI,CAAC,mBAAmB,GAAG,eAAe,CAAC,mBAAmB,CAAC;oBAC/D,IAAI,CAAC,iBAAiB,GAAG,eAAe,CAAC,iBAAiB,CAAC;oBAE3D,IAAI,aAAa,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBACzC,MAAM,aAAa,EAAE,CAAC;wBACtB,IAAI,iBAAiB,EAAE,CAAC;4BACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;4BAC7D,MAAM;wBACP,CAAC;wBACD,SAAS;oBACV,CAAC;oBAED,MAAM,EACL,iBAAiB,EACjB,aAAa,EACb,OAAO,EAAE,IAAI,EACb,sBAAsB,GACtB,GAAG,aAAa,CAAC;oBAClB,0DAA0D;oBAE1D,wEAAwE;oBACxE,iFAAiF;oBACjF,IAAI,qBAEQ,CAAC;oBACb,IACC,IAAI,CAAC,iBAAiB,KAAK,QAAQ;wBACnC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC7B,CAAC;wBACF,qBAAqB;4BACpB,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAC9C,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,IAAI,EACb,aAAa,EACb,MAAM,CACN,CAAC;wBACH,qEAAqE;wBACrE,MAAM;4BACL,IAAI,EAAE,qBAAqB;4BAC3B,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;4BACvB,gEAAgE;4BAChE,IAAI,EAAE,aAAa;yBACnB,CAAC;oBACH,CAAC;oBAED,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;wBACnD,QAAQ;wBACR,iBAAiB;wBACjB,IAAI;wBACJ,aAAa;wBACb,sBAAsB;wBACtB,GAAG;wBACH,MAAM;wBACN,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,WAAW;wBACX,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;wBAC/C,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;wBAC7C,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;wBACjD,eAAe;wBACf,qBAAqB;qBACrB,CAAC,CAAC;oBAEH,iBAAiB,CAAC,IAAI,CAAC;wBACtB,QAAQ;wBACR,OAAO,EAAE,gBAAgB;qBACzB,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;oBAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAC5B,MAAM,KAAK,CAAC;oBACb,CAAC;oBACD,IAAI,iBAAiB,EAAE,CAAC;wBACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;wBAC7D,MAAM;oBACP,CAAC;gBACF,CAAC;gBAED,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC9C,iBAAiB,EACjB,eAAe,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5B,MAAM,IAAI,CAAC,KAAK,CAAC;wBACjB,SAAS;oBACV,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,KAAK,MAAM,KAAK,IAAI,cAAc,CACjC,OAAO,CAAC,OAAO,EACf,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,OAAO,CAAC,OAAO,CACf,EAAE,CAAC;wBACH,MAAM,KAAK,CAAC;oBACb,CAAC;oBACD,MAAM,aAAa,EAAE,CAAC;gBACvB,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;gBAEzC,IAAI,iBAAiB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;wBAC3C,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACnD,MAAM,KAAK,CAAC;wBACb,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,iBAAiB,IAAI,mBAAmB,EAAE,CAAC;oBAC/C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;oBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,kBAAkB,GAAG,QAAQ,CAAC;oBAC/B,CAAC;gBACF,CAAC;YACF,CAAC;YAED,IAAI,yBAAyB,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC7C,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAEjC,MAAM;gBACL,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,yBAAyB;oBACjC,uBAAuB,IAAI;oBAC1B,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,EAAE;oBACX,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,EAAE;oBACf,KAAK,EAAE;wBACN,KAAK,EAAE,CAAC;wBACR,MAAM,EAAE,CAAC;wBACT,SAAS,EAAE,CAAC;wBACZ,UAAU,EAAE,CAAC;wBACb,IAAI,EAAE;4BACL,KAAK,EAAE,CAAC;4BACR,MAAM,EAAE,CAAC;4BACT,SAAS,EAAE,CAAC;4BACZ,UAAU,EAAE,CAAC;4BACb,KAAK,EAAE,CAAC;yBACR;qBACD;oBACD,UAAU,EAAE,OAAO;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;iBAC3B;gBACF,WAAW;aACX,CAAC;YAEF,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,eAAe,GAAG,kBAAkB,CAAC;YACtC,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;gBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,eAAe,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACF,CAAC;YAED,IACC,CAAC,eAAe;gBAChB,eAAe,CAAC,MAAM,KAAK,CAAC;gBAC5B,mBAAmB,EAClB,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAc,CAAC;gBAC1D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,eAAe,GAAG,SAAS,CAAC;gBAC7B,CAAC;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,eAAe,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QAC/D,CAAC;IACF,CAAC","sourcesContent":["/**\n * Agent Transport Layer - LLM Communication and Tool Execution Orchestration\n *\n * This module is the heart of the agent's execution loop. It handles:\n * 1. Streaming communication with LLM providers (Anthropic, OpenAI, Google)\n * 2. Concurrent tool execution with configurable parallelism\n * 3. Safety enforcement via action firewall integration\n * 4. Hook system integration for tool lifecycle events\n *\n * ## Architecture Overview\n *\n * ```\n * User Message → Transport.run() → Provider Stream → Parse Tool Calls\n *                      ↓                                    ↓\n *              Emit Turn Events ←── Tool Results ←── Execute Tools\n *                      ↓                                    ↑\n *              Continue Loop ───────────────────────────────┘\n * ```\n *\n * ## Concurrent Tool Execution\n *\n * When the LLM returns multiple tool calls in a single response, we execute\n * them concurrently up to `maxConcurrentToolExecutions` limit. This improves\n * latency for independent operations (e.g., reading multiple files).\n *\n * However, tools that affect WorkflowStateTracker (PII tracking) are serialized\n * to maintain consistent state ordering. A warning is logged when this happens.\n *\n * ## Safety Integration Points\n *\n * 1. **Pre-execution**: Action firewall evaluates each tool call\n * 2. **Approval flow**: Dangerous actions trigger user approval\n * 3. **PII tracking**: WorkflowState hooks track data flow for egress prevention\n * 4. **Doom loop detection**: Identical consecutive tool calls are blocked\n * 5. **Rate limiting**: Per-tool rate limits prevent runaway execution\n *\n * ## Event Stream\n *\n * The transport yields AgentEvents that drive the UI:\n * - turn_start/end: Turn boundaries for UI state management\n * - message_start/update/end: Streaming content updates\n * - tool_execution_start/end: Tool lifecycle for progress display\n * - action_approval_required/resolved: Approval UI triggers\n *\n * @module agent/transport\n */\n\nimport { isContextFirewallBlockingEnabled } from \"../config/env-vars.js\";\nimport { type ToolHookService, createToolHookService } from \"../hooks/index.js\";\nimport { getProviderNetworkConfig } from \"../providers/network-config.js\";\nimport { isStreamIdleTimeoutError } from \"../providers/stream-idle-timeout.js\";\nimport { type Clock, systemClock } from \"../utils/clock.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"transport\");\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport { defaultActionFirewall } from \"../safety/action-firewall.js\";\nimport { AdaptiveThresholds } from \"../safety/adaptive-thresholds.js\";\nimport { checkSessionLimits } from \"../safety/policy.js\";\nimport {\n\ttype SafetyMiddleware,\n\tcreateSafetyMiddleware,\n} from \"../safety/safety-middleware.js\";\nimport { SemanticJudge } from \"../safety/semantic-judge.js\";\nimport {\n\tWorkflowStateError,\n\tWorkflowStateTracker,\n\tapplyWorkflowStateHooks,\n\tisWorkflowTrackedTool,\n} from \"../safety/workflow-state.js\";\nimport { getOptimalConcurrency } from \"../tools/parallel-execution.js\";\nimport { trackUsage } from \"../tracking/cost-tracker.js\";\nimport { getTrainingHeaders } from \"../training.js\";\nimport type { ActionApprovalService } from \"./action-approval.js\";\nimport { getStoredCredentials } from \"./keys.js\";\nimport type { ToolRetryConfig, ToolRetryService } from \"./tool-retry.js\";\nimport { createProviderStream } from \"./transport/create-provider-stream.js\";\nimport { createToolExecutionPromise } from \"./transport/tool-execution.js\";\nimport {\n\ttype ToolSafetyVerdict,\n\tevaluateToolSafety,\n} from \"./transport/tool-safety-pipeline.js\";\nimport {\n\ttype PendingExecution,\n\tcreateToolUpdateQueue,\n\twaitForNextExecutionOrUpdate,\n} from \"./transport/tool-update-queue.js\";\nimport {\n\ttype SessionTokenCounter,\n\ttype ToolAuditLogger,\n\tcalculateCost,\n\tresolveEnvCredential,\n} from \"./transport/transport-utils.js\";\nimport type {\n\tAgentEvent,\n\tAgentRunConfig,\n\tAgentToolResult,\n\tAgentTransport,\n\tAppMessage,\n\tAssistantMessage,\n\tMessage,\n\tQueuedMessage,\n\tToolCall,\n\tToolResultMessage,\n} from \"./types.js\";\n\n// Re-export types for backward compatibility\nexport type {\n\tSessionTokenCounter,\n\tToolAuditLogger,\n} from \"./transport/transport-utils.js\";\n\nexport interface ClientToolExecutionService {\n\trequestExecution: (\n\t\tid: string,\n\t\ttoolName: string,\n\t\targs: Record<string, unknown>,\n\t\tsignal?: AbortSignal,\n\t) => Promise<{ content: AgentToolResult[\"content\"]; isError: boolean }>;\n}\n\nexport interface ProviderTransportOptions {\n\tgetApiKey?: (\n\t\tprovider: string,\n\t) => Promise<string | undefined> | string | undefined;\n\tgetAuthContext?: (\n\t\tprovider: string,\n\t) => AuthCredential | undefined | Promise<AuthCredential | undefined>;\n\tcorsProxyUrl?: string;\n\tapprovalService?: ActionApprovalService;\n\ttoolRetryService?: ToolRetryService;\n\ttoolRetryConfig?: ToolRetryConfig;\n\tclientToolService?: ClientToolExecutionService;\n\tmaxConcurrentToolExecutions?: number;\n\t/** Hook service for tool lifecycle hooks (PreToolUse, PostToolUse, etc.) */\n\thookService?: ToolHookService;\n\t/** Current working directory for hook execution (required if hookService not provided) */\n\tcwd?: string;\n\t/** Clock for timestamps and rate limiting (default: system clock) */\n\tclock?: Clock;\n\t/** Session token counter used for enforcing policy session limits */\n\tsessionTokenCounter?: SessionTokenCounter;\n\t/** Audit logger for sensitive tool execution events */\n\tauditLogger?: ToolAuditLogger;\n}\n\n/**\n * Provider Transport - Multi-provider LLM communication with safety controls\n *\n * The main transport implementation that handles streaming LLM responses,\n * executing tool calls, and enforcing safety policies. Supports Anthropic,\n * OpenAI, and Google providers through a unified interface.\n *\n * ## State Management\n *\n * - **workflowState**: Tracks PII artifacts for egress prevention\n * - **recentToolTimestamps**: Per-tool timestamps for rate limiting\n * - **safetyMiddleware**: Unified security (loop detection, sequence analysis, firewall)\n *\n * ## Safety Mechanisms\n *\n * ### SafetyMiddleware Integration\n * All safety checks are now handled through SafetyMiddleware:\n * - **Loop Detection**: Catches identical consecutive calls (replaces doom loop)\n * - **Sequence Analysis**: Detects suspicious behavioral patterns\n * - **Context Firewall**: Sanitizes arguments and blocks sensitive content\n *\n * ### Rate Limiting\n * Each tool has a per-window rate limit (TOOL_RATE_LIMIT calls per\n * TOOL_RATE_WINDOW_MS). This prevents runaway tool execution that could\n * waste resources or hit external API limits.\n *\n * ### Workflow State Serialization\n * When tools that track PII are present in a batch, concurrent execution\n * is disabled to ensure correct state ordering.\n */\nexport class ProviderTransport implements AgentTransport {\n\t/** Tracks PII artifacts through the workflow for egress prevention */\n\tprivate workflowState = new WorkflowStateTracker();\n\t/** Prevents repeated warnings about serialized workflow execution */\n\tprivate warnedAboutWorkflowConcurrency = false;\n\t/** Per-tool timestamp arrays for rate limiting enforcement */\n\tprivate recentToolTimestamps = new Map<string, number[]>();\n\t/** Safety middleware for sequence analysis and context sanitization */\n\tprivate readonly safetyMiddleware!: SafetyMiddleware;\n\t/** Adaptive thresholds for anomaly-based rate limiting */\n\tprivate readonly adaptiveThresholds!: AdaptiveThresholds;\n\t/** Tool call count in current minute window (for adaptive tracking) */\n\tprivate toolCallsThisMinute = 0;\n\t/** Last minute window start time */\n\tprivate minuteWindowStart = 0;\n\tprivate readonly clock: Clock;\n\tprivate readonly sessionTokenCounter?: SessionTokenCounter;\n\tprivate readonly auditLogger?: ToolAuditLogger;\n\n\t/**\n\t * Rate Limit Window - time window for counting tool invocations\n\t * 10 seconds balances burst protection with legitimate rapid use\n\t */\n\tprivate static readonly TOOL_RATE_WINDOW_MS = 10_000;\n\n\t/**\n\t * Rate Limit Maximum - max calls per tool within the window\n\t * 5 calls in 10 seconds allows fast iteration while preventing abuse\n\t */\n\tprivate static readonly TOOL_RATE_LIMIT = 5;\n\n\tconstructor(private options: ProviderTransportOptions = {}) {\n\t\tthis.clock = options.clock ?? systemClock;\n\t\tthis.sessionTokenCounter = options.sessionTokenCounter;\n\t\tthis.auditLogger = options.auditLogger;\n\t\tthis.minuteWindowStart = this.clock.now();\n\t\t// Initialize adaptive thresholds for anomaly detection\n\t\tthis.adaptiveThresholds = new AdaptiveThresholds({\n\t\t\talpha: 0.3, // Give more weight to recent observations\n\t\t\tanomalyThreshold: 2.5, // 2.5 std devs = more aggressive anomaly detection\n\t\t\tminObservations: 5, // Need at least 5 observations before anomaly detection\n\t\t});\n\t\t// Initialize safety middleware for unified security checks\n\t\tthis.safetyMiddleware = createSafetyMiddleware({\n\t\t\t// Enable loop detection (replaces transport's doom loop detection)\n\t\t\tenableLoopDetection: true,\n\t\t\t// Configure loop detector to match transport's previous behavior\n\t\t\tloopDetector: {\n\t\t\t\tmaxIdenticalCalls: 3, // Match DOOM_LOOP_THRESHOLD\n\t\t\t\tmaxSimilarCalls: 5,\n\t\t\t\tmaxCallsPerMinute: 30, // More aggressive rate limit than TOOL_RATE_LIMIT\n\t\t\t\tautoPause: false, // Transport handles the pause flow\n\t\t\t},\n\t\t\t// Enable sequence analysis for behavioral threat detection\n\t\t\tenableSequenceAnalysis: true,\n\t\t\t// Enable context firewall with blocking for sanitizing audit logs\n\t\t\tenableContextFirewall: true,\n\t\t\t// Configure context firewall blocking (can be disabled via MAESTRO_CONTEXT_FIREWALL_BLOCKING=0)\n\t\t\tcontextFirewall: {\n\t\t\t\t// When blocking is disabled, vault credentials so test keys can pass through safely.\n\t\t\t\tvaultCredentials: !isContextFirewallBlockingEnabled(),\n\t\t\t\tblocking: {\n\t\t\t\t\tenabled: isContextFirewallBlockingEnabled(),\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t}\n\n\t/**\n\t * Continue from current context without a new user message.\n\t *\n\t * This method reuses the run() logic but skips adding a new user message.\n\t * Useful for:\n\t * - Retrying after transient errors (rate limits, overload, 5xx)\n\t * - Continuing after context compaction\n\t * - Resuming interrupted tool execution\n\t *\n\t * @param messages - Current conversation history\n\t * @param config - Runtime configuration\n\t * @param signal - Optional abort signal for cancellation\n\t * @returns Async iterable of agent events\n\t */\n\tasync *continue(\n\t\tmessages: Message[],\n\t\tconfig: AgentRunConfig,\n\t\tsignal?: AbortSignal,\n\t): AsyncGenerator<AgentEvent, void, unknown> {\n\t\t// Create a synthetic \"continuation\" message that signals we're resuming\n\t\t// This doesn't get added to the conversation but satisfies the run() interface\n\t\tconst continuationMessage: Message = {\n\t\t\trole: \"user\",\n\t\t\tcontent: [\n\t\t\t\t{ type: \"text\", text: \"[System: Continuing from previous context]\" },\n\t\t\t],\n\t\t\ttimestamp: this.clock.now(),\n\t\t};\n\n\t\t// Delegate to run() - the continuation message is used internally\n\t\t// but the actual context comes from the messages array\n\t\tyield* this.run(messages, continuationMessage, config, signal);\n\t}\n\n\tasync *run(\n\t\tmessages: Message[],\n\t\tuserMessage: Message,\n\t\tcfg: AgentRunConfig,\n\t\tsignal?: AbortSignal,\n\t): AsyncGenerator<AgentEvent, void, unknown> {\n\t\tconst { systemPrompt, tools } = cfg;\n\t\tlet model = cfg.model;\n\t\tconst firewall = defaultActionFirewall;\n\n\t\t// Configure semantic judge if LLM access is provided\n\t\tif (cfg.runLLM) {\n\t\t\tfirewall.setSemanticJudge(new SemanticJudge(cfg.runLLM));\n\t\t}\n\n\t\t// Initialize hook service for tool lifecycle hooks\n\t\tconst hookService =\n\t\t\tthis.options.hookService ??\n\t\t\t(this.options.cwd\n\t\t\t\t? createToolHookService({\n\t\t\t\t\t\tcwd: this.options.cwd,\n\t\t\t\t\t\tsessionId: cfg.session?.id,\n\t\t\t\t\t\tresolveTool: (toolName) =>\n\t\t\t\t\t\t\tcfg.tools?.find((tool) => tool.name === toolName),\n\t\t\t\t\t})\n\t\t\t\t: undefined);\n\n\t\tthis.workflowState.reset();\n\n\t\tlet credential: AuthCredential | undefined;\n\t\tif (this.options.getAuthContext) {\n\t\t\tcredential = await this.options.getAuthContext(model.provider);\n\t\t}\n\t\tif (!credential && this.options.getApiKey) {\n\t\t\tconst fallbackKey = await this.options.getApiKey(model.provider);\n\t\t\tif (fallbackKey) {\n\t\t\t\tcredential = {\n\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\ttoken: fallbackKey,\n\t\t\t\t\ttype: \"api-key\",\n\t\t\t\t\tsource: \"env\",\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\t\tif (!credential) {\n\t\t\tconst envCredential = resolveEnvCredential(model.provider);\n\t\t\tif (envCredential) {\n\t\t\t\tcredential = envCredential;\n\t\t\t}\n\t\t}\n\t\tif (!credential) {\n\t\t\tconst stored = getStoredCredentials(model.provider);\n\t\t\tif (stored.apiKey) {\n\t\t\t\tcredential = {\n\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\ttoken: stored.apiKey,\n\t\t\t\t\ttype: stored.authType ?? \"api-key\",\n\t\t\t\t\tsource: \"custom_literal\",\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tconst apiKey = credential?.token;\n\t\tif (!apiKey) {\n\t\t\tthrow new Error(\n\t\t\t\t`No credentials found for provider \"${model.provider}\". Provide an API key or configure getAuthContext.`,\n\t\t\t);\n\t\t}\n\n\t\tyield { type: \"message_start\", message: userMessage };\n\t\tif (cfg.emitUserMessageEnd !== false) {\n\t\t\tyield { type: \"message_end\", message: userMessage };\n\t\t}\n\n\t\tconst context = {\n\t\t\tsystemPrompt,\n\t\t\tmessages,\n\t\t\ttools,\n\t\t};\n\n\t\tif (this.options.corsProxyUrl && model.baseUrl) {\n\t\t\tmodel = {\n\t\t\t\t...model,\n\t\t\t\tbaseUrl: `${this.options.corsProxyUrl}/?url=${encodeURIComponent(model.baseUrl)}`,\n\t\t\t};\n\t\t}\n\n\t\tconst trainingHeaders = getTrainingHeaders();\n\t\tconst headers =\n\t\t\ttrainingHeaders || model.headers || credential?.headers\n\t\t\t\t? {\n\t\t\t\t\t\t...(model.headers ?? {}),\n\t\t\t\t\t\t...(trainingHeaders ?? {}),\n\t\t\t\t\t\t...(credential?.headers ?? {}),\n\t\t\t\t\t}\n\t\t\t\t: undefined;\n\n\t\tconst streamOptions = {\n\t\t\tapiKey,\n\t\t\tmaxTokens: model.maxTokens,\n\t\t\tsignal,\n\t\t\tauthType: credential?.type ?? \"api-key\",\n\t\t\theaders,\n\t\t\trequestBody: credential?.requestBody,\n\t\t\ttaskBudget: cfg.taskBudget,\n\t\t};\n\n\t\tlet hasMoreToolCalls = true;\n\t\tconst allMessages = [...context.messages];\n\t\tconst getSteeringMessages =\n\t\t\tcfg.getSteeringMessages ?? cfg.getQueuedMessages;\n\t\tconst getFollowUpMessages = cfg.getFollowUpMessages;\n\t\tconst getPromptOnlyMessages = cfg.getPromptOnlyMessages;\n\n\t\tlet pendingMessages = getSteeringMessages\n\t\t\t? await getSteeringMessages<AppMessage>()\n\t\t\t: [];\n\n\t\twhile (hasMoreToolCalls || pendingMessages.length > 0) {\n\t\t\tyield { type: \"turn_start\" };\n\n\t\t\t// Enforce session limits before every turn (duration + tokens)\n\t\t\tif (cfg.session) {\n\t\t\t\tlet tokenCount: number | undefined;\n\t\t\t\tif (this.sessionTokenCounter) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst count = await this.sessionTokenCounter(cfg.session.id);\n\t\t\t\t\t\tif (count !== null) {\n\t\t\t\t\t\t\ttokenCount = count;\n\t\t\t\t\t\t}\n\t\t\t\t\t} catch (err) {\n\t\t\t\t\t\t// Log error but don't throw - let checkSessionLimits handle it.\n\t\t\t\t\t\t// If limits are active, it will fail closed because tokenCount is undefined.\n\t\t\t\t\t\t// If no limits are active, we shouldn't block just because tracking failed.\n\t\t\t\t\t\tlogger.error(\n\t\t\t\t\t\t\t\"Failed to get session token count\",\n\t\t\t\t\t\t\terr instanceof Error ? err : new Error(String(err)),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst limitCheck = checkSessionLimits(cfg.session, {\n\t\t\t\t\ttokenCount: tokenCount,\n\t\t\t\t});\n\t\t\t\tif (!limitCheck.allowed) {\n\t\t\t\t\tthrow new Error(limitCheck.reason);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (getPromptOnlyMessages) {\n\t\t\t\tconst promptOnlyMessages = await getPromptOnlyMessages();\n\t\t\t\tif (promptOnlyMessages.length > 0) {\n\t\t\t\t\tallMessages.push(...promptOnlyMessages);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (pendingMessages.length > 0) {\n\t\t\t\tfor (const queued of pendingMessages) {\n\t\t\t\t\tyield { type: \"message_start\", message: queued.original };\n\t\t\t\t\tyield { type: \"message_end\", message: queued.original };\n\t\t\t\t\tif (queued.llm) {\n\t\t\t\t\t\tallMessages.push(queued.llm);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tpendingMessages = [];\n\t\t\t}\n\n\t\t\tlet currentAssistantMessage: AssistantMessage | null = null;\n\t\t\tlet completedAssistantMessage: AssistantMessage | null = null;\n\t\t\tconst toolCallsToExecute: ToolCall[] = [];\n\t\t\tlet toolResults: ToolResultMessage[] = [];\n\t\t\tlet steeringAfterTools: QueuedMessage<AppMessage>[] | null = null;\n\t\t\tlet pendingNextTurn = false;\n\t\t\tlet encounteredError = false;\n\n\t\t\tconst currentMessages = cfg.preprocessMessages\n\t\t\t\t? await cfg.preprocessMessages(\n\t\t\t\t\t\tallMessages,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsystemPrompt,\n\t\t\t\t\t\t\ttools,\n\t\t\t\t\t\t\tmodel,\n\t\t\t\t\t\t\tuserMessage,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t)\n\t\t\t\t: allMessages;\n\n\t\t\tconst currentContext = {\n\t\t\t\t...context,\n\t\t\t\tmessages: currentMessages,\n\t\t\t};\n\n\t\t\t// Stream retry logic for idle timeouts\n\t\t\tconst networkConfig = getProviderNetworkConfig(model.provider);\n\t\t\tconst maxStreamRetries = networkConfig.streamMaxRetries;\n\t\t\tlet streamAttempt = 0;\n\t\t\tlet streamSuccess = false;\n\n\t\t\twhile (!streamSuccess && streamAttempt <= maxStreamRetries) {\n\t\t\t\tif (streamAttempt > 0) {\n\t\t\t\t\t// Reset state for retry\n\t\t\t\t\tcurrentAssistantMessage = null;\n\t\t\t\t\ttoolCallsToExecute.length = 0;\n\t\t\t\t\tpendingNextTurn = false;\n\n\t\t\t\t\tconst backoffMs = Math.min(\n\t\t\t\t\t\tnetworkConfig.backoffInitial * 2 ** (streamAttempt - 1),\n\t\t\t\t\t\tnetworkConfig.backoffMax,\n\t\t\t\t\t);\n\t\t\t\t\tlogger.info(\"Retrying stream after idle timeout\", {\n\t\t\t\t\t\tattempt: streamAttempt,\n\t\t\t\t\t\tmaxRetries: maxStreamRetries,\n\t\t\t\t\t\tbackoffMs,\n\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t});\n\t\t\t\t\tawait new Promise((resolve) => setTimeout(resolve, backoffMs));\n\t\t\t\t}\n\t\t\t\tstreamAttempt++;\n\n\t\t\t\tconst stream = createProviderStream(\n\t\t\t\t\tmodel,\n\t\t\t\t\tcurrentContext,\n\t\t\t\t\tstreamOptions,\n\t\t\t\t\t{ reasoning: cfg.reasoning, reasoningSummary: cfg.reasoningSummary },\n\t\t\t\t);\n\n\t\t\t\ttry {\n\t\t\t\t\tfor await (const event of stream) {\n\t\t\t\t\t\tif (event.type === \"start\") {\n\t\t\t\t\t\t\tcurrentAssistantMessage = event.partial;\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\t\t\ttype: \"message_start\",\n\t\t\t\t\t\t\t\t\tmessage: currentAssistantMessage,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tevent.type === \"text_delta\" ||\n\t\t\t\t\t\t\tevent.type === \"thinking_delta\" ||\n\t\t\t\t\t\t\tevent.type === \"toolcall_delta\"\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\t\t\ttype: \"message_update\",\n\t\t\t\t\t\t\t\t\tmessage: currentAssistantMessage,\n\t\t\t\t\t\t\t\t\tassistantMessageEvent: event,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"toolcall_end\") {\n\t\t\t\t\t\t\tconst rawArgs = event.toolCall.arguments;\n\t\t\t\t\t\t\tconst normalizedArgs =\n\t\t\t\t\t\t\t\trawArgs &&\n\t\t\t\t\t\t\t\ttypeof rawArgs === \"object\" &&\n\t\t\t\t\t\t\t\t!Array.isArray(rawArgs)\n\t\t\t\t\t\t\t\t\t? (rawArgs as Record<string, unknown>)\n\t\t\t\t\t\t\t\t\t: {};\n\t\t\t\t\t\t\ttoolCallsToExecute.push({\n\t\t\t\t\t\t\t\ttype: \"toolCall\",\n\t\t\t\t\t\t\t\tid: event.toolCall.id,\n\t\t\t\t\t\t\t\tname: event.toolCall.name,\n\t\t\t\t\t\t\t\targuments: normalizedArgs,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"done\") {\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tcompletedAssistantMessage = currentAssistantMessage;\n\t\t\t\t\t\t\t\tyield { type: \"message_end\", message: currentAssistantMessage };\n\t\t\t\t\t\t\t\tif (currentAssistantMessage.usage) {\n\t\t\t\t\t\t\t\t\tconst usage = currentAssistantMessage.usage;\n\t\t\t\t\t\t\t\t\tconst cost = model.cost\n\t\t\t\t\t\t\t\t\t\t? calculateCost(usage, model.cost)\n\t\t\t\t\t\t\t\t\t\t: 0;\n\t\t\t\t\t\t\t\t\tif (credential?.type !== \"anthropic-oauth\") {\n\t\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\t\ttrackUsage({\n\t\t\t\t\t\t\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\t\t\t\t\t\t\tmodel: model.id,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensInput: usage.input || 0,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensOutput: usage.output || 0,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensCacheRead: usage.cacheRead,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensCacheWrite: usage.cacheWrite,\n\t\t\t\t\t\t\t\t\t\t\t\tcost,\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\t\t\t\t\tlogger.warn(\"Failed to track usage\", {\n\t\t\t\t\t\t\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\t\t\t\t\t\terror instanceof Error\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t? error.message\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t: String(error),\n\t\t\t\t\t\t\t\t\t\t\t\tstack: error instanceof Error ? error.stack : undefined,\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tpendingNextTurn = toolCallsToExecute.length > 0;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"error\") {\n\t\t\t\t\t\t\tcompletedAssistantMessage = event.error;\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield { type: \"message_end\", message: currentAssistantMessage };\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tpendingNextTurn = false;\n\t\t\t\t\t\t\tencounteredError = true;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tstreamSuccess = true;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (\n\t\t\t\t\t\tisStreamIdleTimeoutError(error) &&\n\t\t\t\t\t\tstreamAttempt <= maxStreamRetries\n\t\t\t\t\t) {\n\t\t\t\t\t\tlogger.warn(\"Stream idle timeout, will retry\", {\n\t\t\t\t\t\t\tattempt: streamAttempt,\n\t\t\t\t\t\t\tmaxRetries: maxStreamRetries,\n\t\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\t\tidleMs: error.idleMs,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tcontinue; // Retry the stream\n\t\t\t\t\t}\n\t\t\t\t\t// Not retryable or exhausted retries - re-throw\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t} // end while retry loop\n\n\t\t\tif (toolCallsToExecute.length > 0) {\n\t\t\t\ttoolResults = [];\n\t\t\t\tconst toolUpdateQueue = createToolUpdateQueue();\n\t\t\t\tconst pendingExecutions: PendingExecution[] = [];\n\t\t\t\tconst rawConcurrency = this.options.maxConcurrentToolExecutions ?? 2;\n\t\t\t\tconst configuredConcurrency = Number.isFinite(rawConcurrency)\n\t\t\t\t\t? Math.max(1, Math.floor(rawConcurrency))\n\t\t\t\t\t: 2;\n\t\t\t\tconst hasWorkflowTrackedTool = toolCallsToExecute.some((call) =>\n\t\t\t\t\tisWorkflowTrackedTool(call.name),\n\t\t\t\t);\n\t\t\t\tconst requiresSerializedTurn =\n\t\t\t\t\thasWorkflowTrackedTool && toolCallsToExecute.length > 1;\n\n\t\t\t\t// Calculate optimal concurrency - higher for read-only batches\n\t\t\t\tlet concurrencyLimit = getOptimalConcurrency(\n\t\t\t\t\ttoolCallsToExecute,\n\t\t\t\t\ttools,\n\t\t\t\t\t{\n\t\t\t\t\t\tbaseConcurrency: configuredConcurrency,\n\t\t\t\t\t\tmaxReadOnlyConcurrency: 8, // Allow up to 8x parallel for read-only\n\t\t\t\t\t\tenabled: true,\n\t\t\t\t\t},\n\t\t\t\t);\n\n\t\t\t\t// Override: workflow-tracked tools require serialization\n\t\t\t\tif (configuredConcurrency > 1 && requiresSerializedTurn) {\n\t\t\t\t\tconcurrencyLimit = 1;\n\t\t\t\t\tif (!this.warnedAboutWorkflowConcurrency) {\n\t\t\t\t\t\tlogger.warn(\n\t\t\t\t\t\t\t\"WorkflowStateTracker requires serialized tool execution; maxConcurrentToolExecutions capped at 1\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.warnedAboutWorkflowConcurrency = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tlet steeringTriggered = false;\n\t\t\t\tlet remainingToolCalls: ToolCall[] = [];\n\n\t\t\t\tconst checkSteering = async (): Promise<void> => {\n\t\t\t\t\tif (steeringTriggered || !getSteeringMessages) {\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\t\tsteeringTriggered = true;\n\t\t\t\t\t\tsteeringAfterTools = steering;\n\t\t\t\t\t}\n\t\t\t\t};\n\n\t\t\t\tconst buildExecutionEvents = (\n\t\t\t\t\ttoolCall: ToolCall,\n\t\t\t\t\tmessage: ToolResultMessage,\n\t\t\t\t\tisError: boolean,\n\t\t\t\t): AgentEvent[] => [\n\t\t\t\t\t{ type: \"message_start\", message } as AgentEvent,\n\t\t\t\t\t{ type: \"message_end\", message } as AgentEvent,\n\t\t\t\t\t{\n\t\t\t\t\t\ttype: \"tool_execution_end\",\n\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\tresult: message,\n\t\t\t\t\t\tisError,\n\t\t\t\t\t} as AgentEvent,\n\t\t\t\t];\n\t\t\t\tconst emitToolResult = (\n\t\t\t\t\tmessage: ToolResultMessage,\n\t\t\t\t\ttoolCall: ToolCall,\n\t\t\t\t\tisError: boolean,\n\t\t\t\t) => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tapplyWorkflowStateHooks({\n\t\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\t\tresult: message,\n\t\t\t\t\t\t\ttracker: this.workflowState,\n\t\t\t\t\t\t\tisError,\n\t\t\t\t\t\t});\n\t\t\t\t\t\ttoolResults.push(message);\n\t\t\t\t\t\treturn buildExecutionEvents(toolCall, message, isError);\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (error instanceof WorkflowStateError) {\n\t\t\t\t\t\t\tconst workflowErrorResult: ToolResultMessage = {\n\t\t\t\t\t\t\t\trole: \"toolResult\",\n\t\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\t\tcontent: [{ type: \"text\", text: error.message }],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\ttoolResults.push(workflowErrorResult);\n\t\t\t\t\t\t\treturn buildExecutionEvents(toolCall, workflowErrorResult, true);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\tconst emitSkippedToolCall = (toolCall: ToolCall): AgentEvent[] => {\n\t\t\t\t\tconst sanitizedSkippedArgs = this.safetyMiddleware.sanitizeForLogging(\n\t\t\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t\t\t);\n\t\t\t\t\tconst skippedResult: ToolResultMessage = {\n\t\t\t\t\t\trole: \"toolResult\",\n\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: \"Skipped due to queued user message.\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t};\n\t\t\t\t\treturn [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"tool_execution_start\",\n\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\targs: sanitizedSkippedArgs,\n\t\t\t\t\t\t} as AgentEvent,\n\t\t\t\t\t\t...emitToolResult(skippedResult, toolCall, true),\n\t\t\t\t\t];\n\t\t\t\t};\n\n\t\t\t\tconst scheduleResolveIfNeeded = async (): Promise<AgentEvent[]> => {\n\t\t\t\t\tif (pendingExecutions.length < concurrencyLimit) {\n\t\t\t\t\t\treturn [];\n\t\t\t\t\t}\n\t\t\t\t\tconst events: AgentEvent[] = [];\n\t\t\t\t\twhile (pendingExecutions.length >= concurrencyLimit) {\n\t\t\t\t\t\tconst next = await waitForNextExecutionOrUpdate(\n\t\t\t\t\t\t\tpendingExecutions,\n\t\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (next.kind === \"update\") {\n\t\t\t\t\t\t\tevents.push(next.event);\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst outcome = next.outcome;\n\t\t\t\t\t\tevents.push(\n\t\t\t\t\t\t\t...emitToolResult(\n\t\t\t\t\t\t\t\toutcome.message,\n\t\t\t\t\t\t\t\tnext.execution.toolCall,\n\t\t\t\t\t\t\t\toutcome.isError,\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait checkSteering();\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\treturn events;\n\t\t\t\t};\n\n\t\t\t\tfor (\n\t\t\t\t\tlet toolIndex = 0;\n\t\t\t\t\ttoolIndex < toolCallsToExecute.length;\n\t\t\t\t\ttoolIndex++\n\t\t\t\t) {\n\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\tconst toolCall = toolCallsToExecute[toolIndex];\n\t\t\t\t\tif (!toolCall) continue;\n\n\t\t\t\t\t// Run safety pipeline (rate limiting, hooks, firewall, approval, validation)\n\t\t\t\t\tconst safetyIterator = evaluateToolSafety({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\ttools,\n\t\t\t\t\t\tuserMessage,\n\t\t\t\t\t\tcfg,\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tclock: this.clock,\n\t\t\t\t\t\tsafetyMiddleware: this.safetyMiddleware,\n\t\t\t\t\t\tworkflowState: this.workflowState,\n\t\t\t\t\t\tadaptiveThresholds: this.adaptiveThresholds,\n\t\t\t\t\t\tauditLogger: this.auditLogger,\n\t\t\t\t\t\tapprovalService: this.options.approvalService,\n\t\t\t\t\t\thookService,\n\t\t\t\t\t\tfirewall,\n\t\t\t\t\t\trateLimitState: {\n\t\t\t\t\t\t\trecentToolTimestamps: this.recentToolTimestamps,\n\t\t\t\t\t\t\ttoolCallsThisMinute: this.toolCallsThisMinute,\n\t\t\t\t\t\t\tminuteWindowStart: this.minuteWindowStart,\n\t\t\t\t\t\t\trateWindowMs: ProviderTransport.TOOL_RATE_WINDOW_MS,\n\t\t\t\t\t\t\trateLimit: ProviderTransport.TOOL_RATE_LIMIT,\n\t\t\t\t\t\t},\n\t\t\t\t\t\temitToolResult,\n\t\t\t\t\t});\n\t\t\t\t\tlet safetyVerdict: ToolSafetyVerdict | undefined;\n\t\t\t\t\tlet rateLimitUpdate:\n\t\t\t\t\t\t| { toolCallsThisMinute: number; minuteWindowStart: number }\n\t\t\t\t\t\t| undefined;\n\t\t\t\t\twhile (true) {\n\t\t\t\t\t\tconst safetyStep = await safetyIterator.next();\n\t\t\t\t\t\tif (safetyStep.done) {\n\t\t\t\t\t\t\t({ verdict: safetyVerdict, rateLimitUpdate } = safetyStep.value);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tyield safetyStep.value;\n\t\t\t\t\t}\n\t\t\t\t\tif (!safetyVerdict || !rateLimitUpdate) {\n\t\t\t\t\t\tthrow new Error(\"Safety pipeline did not return a verdict.\");\n\t\t\t\t\t}\n\n\t\t\t\t\t// Apply rate limit state updates\n\t\t\t\t\tthis.toolCallsThisMinute = rateLimitUpdate.toolCallsThisMinute;\n\t\t\t\t\tthis.minuteWindowStart = rateLimitUpdate.minuteWindowStart;\n\n\t\t\t\t\tif (safetyVerdict.outcome === \"blocked\") {\n\t\t\t\t\t\tawait checkSteering();\n\t\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex + 1);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\n\t\t\t\t\tconst {\n\t\t\t\t\t\teffectiveToolCall,\n\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\ttoolDef: tool,\n\t\t\t\t\t\tsanitizedExecutionArgs,\n\t\t\t\t\t} = safetyVerdict;\n\t\t\t\t\t// Use hook-modified (pre-validation) args for hook inputs\n\n\t\t\t\t\t// For client tools, set up the execution promise first, then emit event\n\t\t\t\t\t// This prevents race conditions where the client responds before we're listening\n\t\t\t\t\tlet clientToolExecPromise:\n\t\t\t\t\t\t| ReturnType<ClientToolExecutionService[\"requestExecution\"]>\n\t\t\t\t\t\t| undefined;\n\t\t\t\t\tif (\n\t\t\t\t\t\ttool.executionLocation === \"client\" &&\n\t\t\t\t\t\tthis.options.clientToolService\n\t\t\t\t\t) {\n\t\t\t\t\t\tclientToolExecPromise =\n\t\t\t\t\t\t\tthis.options.clientToolService.requestExecution(\n\t\t\t\t\t\t\t\ttoolCall.id,\n\t\t\t\t\t\t\t\ttoolCall.name,\n\t\t\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\t\t\tsignal,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t// Now emit the event - the promise is already waiting for the result\n\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\ttype: \"client_tool_request\",\n\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\t// Client tools execute out-of-process; they need the real args.\n\t\t\t\t\t\t\targs: validatedArgs,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\n\t\t\t\t\tconst executionPromise = createToolExecutionPromise({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\teffectiveToolCall,\n\t\t\t\t\t\ttool,\n\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\tsanitizedExecutionArgs,\n\t\t\t\t\t\tcfg,\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tclock: this.clock,\n\t\t\t\t\t\tsafetyMiddleware: this.safetyMiddleware,\n\t\t\t\t\t\tadaptiveThresholds: this.adaptiveThresholds,\n\t\t\t\t\t\tauditLogger: this.auditLogger,\n\t\t\t\t\t\thookService,\n\t\t\t\t\t\ttoolRetryService: this.options.toolRetryService,\n\t\t\t\t\t\ttoolRetryConfig: this.options.toolRetryConfig,\n\t\t\t\t\t\tclientToolService: this.options.clientToolService,\n\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t\tclientToolExecPromise,\n\t\t\t\t\t});\n\n\t\t\t\t\tpendingExecutions.push({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\tpromise: executionPromise,\n\t\t\t\t\t});\n\t\t\t\t\tconst events = await scheduleResolveIfNeeded();\n\t\t\t\t\tfor (const event of events) {\n\t\t\t\t\t\tyield event;\n\t\t\t\t\t}\n\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex + 1);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\twhile (pendingExecutions.length > 0) {\n\t\t\t\t\tconst next = await waitForNextExecutionOrUpdate(\n\t\t\t\t\t\tpendingExecutions,\n\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t);\n\t\t\t\t\tif (next.kind === \"update\") {\n\t\t\t\t\t\tyield next.event;\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst outcome = next.outcome;\n\t\t\t\t\tfor (const event of emitToolResult(\n\t\t\t\t\t\toutcome.message,\n\t\t\t\t\t\tnext.execution.toolCall,\n\t\t\t\t\t\toutcome.isError,\n\t\t\t\t\t)) {\n\t\t\t\t\t\tyield event;\n\t\t\t\t\t}\n\t\t\t\t\tawait checkSteering();\n\t\t\t\t}\n\n\t\t\t\tthis.safetyMiddleware.clearCredentials();\n\n\t\t\t\tif (steeringTriggered && remainingToolCalls.length > 0) {\n\t\t\t\t\tfor (const toolCall of remainingToolCalls) {\n\t\t\t\t\t\tfor (const event of emitSkippedToolCall(toolCall)) {\n\t\t\t\t\t\t\tyield event;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (!steeringTriggered && getSteeringMessages) {\n\t\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\t\tsteeringAfterTools = steering;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (completedAssistantMessage) {\n\t\t\t\tallMessages.push(completedAssistantMessage);\n\t\t\t}\n\t\t\tallMessages.push(...toolResults);\n\n\t\t\tyield {\n\t\t\t\ttype: \"turn_end\",\n\t\t\t\tmessage: completedAssistantMessage ??\n\t\t\t\t\tcurrentAssistantMessage ?? {\n\t\t\t\t\t\trole: \"assistant\",\n\t\t\t\t\t\tcontent: [],\n\t\t\t\t\t\tapi: model.api,\n\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\tmodel: model.id,\n\t\t\t\t\t\tusage: {\n\t\t\t\t\t\t\tinput: 0,\n\t\t\t\t\t\t\toutput: 0,\n\t\t\t\t\t\t\tcacheRead: 0,\n\t\t\t\t\t\t\tcacheWrite: 0,\n\t\t\t\t\t\t\tcost: {\n\t\t\t\t\t\t\t\tinput: 0,\n\t\t\t\t\t\t\t\toutput: 0,\n\t\t\t\t\t\t\t\tcacheRead: 0,\n\t\t\t\t\t\t\t\tcacheWrite: 0,\n\t\t\t\t\t\t\t\ttotal: 0,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tstopReason: \"error\",\n\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t},\n\t\t\t\ttoolResults,\n\t\t\t};\n\n\t\t\tif (steeringAfterTools && steeringAfterTools.length > 0) {\n\t\t\t\tpendingMessages = steeringAfterTools;\n\t\t\t} else if (getSteeringMessages) {\n\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\tpendingMessages = steering;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\t!pendingNextTurn &&\n\t\t\t\tpendingMessages.length === 0 &&\n\t\t\t\tgetFollowUpMessages\n\t\t\t) {\n\t\t\t\tconst followUps = await getFollowUpMessages<AppMessage>();\n\t\t\t\tif (followUps.length > 0) {\n\t\t\t\t\tpendingMessages = followUps;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (pendingMessages.length > 0) {\n\t\t\t\tpendingNextTurn = true;\n\t\t\t}\n\n\t\t\thasMoreToolCalls = encounteredError ? false : pendingNextTurn;\n\t\t}\n\t}\n}\n"]}
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../src/agent/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAwB,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAc,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAEN,sBAAsB,GACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EACN,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,GACrB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEN,mCAAmC,GACnC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAEN,qCAAqC,GACrC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,OAAO,EAEN,kBAAkB,GAClB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAEN,qBAAqB,EACrB,4BAA4B,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAGN,aAAa,EACb,oBAAoB,GACpB,MAAM,gCAAgC,CAAC;AAqBxC,SAAS,kCAAkC,CAAC,OAAgB;IAK3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,eAAe,GAAI,OAAyC;SAChE,eAAe,CAAC;IAClB,IAAI,CAAC,eAAe,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,eAA0C,CAAC;IAC9D,MAAM,cAAc,GACnB,OAAO,UAAU,CAAC,cAAc,KAAK,QAAQ;QAC5C,CAAC,CAAE,UAAU,CAAC,cAAsC;QACpD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,SAAS,GACd,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACvE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE;QACxB,CAAC,CAAC,cAAc,CAAC;IACnB,MAAM,iBAAiB,GACtB,OAAO,UAAU,CAAC,iBAAiB,KAAK,QAAQ;QAChD,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE;QACrC,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACN,SAAS;QACT,iBAAiB;QACjB,eAAe,EAAE,cAAc;KAC/B,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CAAC,OAAgB;IAGxD,OAAO;QACN,aAAa,EAAE,mCAAmC,CAAC,OAAO,CAAC;KAC3D,CAAC;AACH,CAAC;AA4CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,OAAO,iBAAiB;IAmB7B;;;OAGG;aACqB,wBAAmB,GAAG,MAAM,AAAT,CAAU;IAErD;;;OAGG;aACqB,oBAAe,GAAG,CAAC,AAAJ,CAAK;IAE5C,YAAoB,UAAoC,EAAE;QAAtC,YAAO,GAAP,OAAO,CAA+B;QA9B1D,sEAAsE;QAC9D,kBAAa,GAAG,IAAI,oBAAoB,EAAE,CAAC;QACnD,qEAAqE;QAC7D,mCAA8B,GAAG,KAAK,CAAC;QAC/C,8DAA8D;QACtD,yBAAoB,GAAG,IAAI,GAAG,EAAoB,CAAC;QAK3D,uEAAuE;QAC/D,wBAAmB,GAAG,CAAC,CAAC;QAChC,oCAAoC;QAC5B,sBAAiB,GAAG,CAAC,CAAC;QAkB7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;QAC1C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC1C,uDAAuD;QACvD,IAAI,CAAC,kBAAkB,GAAG,IAAI,kBAAkB,CAAC;YAChD,KAAK,EAAE,GAAG,EAAE,0CAA0C;YACtD,gBAAgB,EAAE,GAAG,EAAE,mDAAmD;YAC1E,eAAe,EAAE,CAAC,EAAE,wDAAwD;SAC5E,CAAC,CAAC;QACH,2DAA2D;QAC3D,IAAI,CAAC,gBAAgB,GAAG,sBAAsB,CAAC;YAC9C,mEAAmE;YACnE,mBAAmB,EAAE,IAAI;YACzB,iEAAiE;YACjE,YAAY,EAAE;gBACb,iBAAiB,EAAE,CAAC,EAAE,4BAA4B;gBAClD,eAAe,EAAE,CAAC;gBAClB,iBAAiB,EAAE,EAAE,EAAE,kDAAkD;gBACzE,SAAS,EAAE,KAAK,EAAE,mCAAmC;aACrD;YACD,2DAA2D;YAC3D,sBAAsB,EAAE,IAAI;YAC5B,kEAAkE;YAClE,qBAAqB,EAAE,IAAI;YAC3B,gGAAgG;YAChG,eAAe,EAAE;gBAChB,qFAAqF;gBACrF,gBAAgB,EAAE,CAAC,gCAAgC,EAAE;gBACrD,QAAQ,EAAE;oBACT,OAAO,EAAE,gCAAgC,EAAE;iBAC3C;aACD;SACD,CAAC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,CAAC,QAAQ,CACd,QAAmB,EACnB,MAAsB,EACtB,MAAoB;QAEpB,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,mBAAmB,GAAY;YACpC,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE;gBACR,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE;aACpE;YACD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SAC3B,CAAC;QAEF,kEAAkE;QAClE,uDAAuD;QACvD,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,CAAC,GAAG,CACT,QAAmB,EACnB,WAAoB,EACpB,GAAmB,EACnB,MAAoB;QAEpB,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACpC,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACtB,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QAEvC,qDAAqD;QACrD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,QAAQ,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,mDAAmD;QACnD,MAAM,WAAW,GAChB,IAAI,CAAC,OAAO,CAAC,WAAW;YACxB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG;gBAChB,CAAC,CAAC,qBAAqB,CAAC;oBACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;oBACrB,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;oBAC1B,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CACzB,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAClD,CAAC;gBACH,CAAC,CAAC,SAAS,CAAC,CAAC;QAEf,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAE3B,IAAI,UAAsC,CAAC;QAC3C,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACjC,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,WAAW,EAAE,CAAC;gBACjB,UAAU,GAAG;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,KAAK;iBACb,CAAC;YACH,CAAC;QACF,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,aAAa,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC3D,IAAI,aAAa,EAAE,CAAC;gBACnB,UAAU,GAAG,aAAa,CAAC;YAC5B,CAAC;QACF,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,UAAU,GAAG;oBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;oBAClC,MAAM,EAAE,gBAAgB;iBACxB,CAAC;YACH,CAAC;QACF,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,EAAE,KAAK,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACd,sCAAsC,KAAK,CAAC,QAAQ,oDAAoD,CACxG,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACtD,IAAI,GAAG,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YACtC,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG;YACf,YAAY;YACZ,QAAQ;YACR,KAAK;SACL,CAAC;QAEF,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAChD,KAAK,GAAG;gBACP,GAAG,KAAK;gBACR,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,SAAS,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE;aACjF,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;QAC7C,MAAM,OAAO,GACZ,eAAe,IAAI,KAAK,CAAC,OAAO,IAAI,UAAU,EAAE,OAAO;YACtD,CAAC,CAAC;gBACA,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;gBAC1B,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC;aAC9B;YACF,CAAC,CAAC,SAAS,CAAC;QAEd,MAAM,aAAa,GAAG;YACrB,MAAM;YACN,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM;YACN,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,SAAS;YACvC,OAAO;YACP,WAAW,EAAE,UAAU,EAAE,WAAW;YACpC,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;YAC1B,UAAU,EAAE,GAAG,CAAC,UAAU;SAC1B,CAAC;QAEF,IAAI,gBAAgB,GAAG,IAAI,CAAC;QAC5B,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,mBAAmB,GACxB,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,iBAAiB,CAAC;QAClD,MAAM,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;QACpD,MAAM,qBAAqB,GAAG,GAAG,CAAC,qBAAqB,CAAC;QAExD,IAAI,eAAe,GAAG,mBAAmB;YACxC,CAAC,CAAC,MAAM,mBAAmB,EAAc;YACzC,CAAC,CAAC,EAAE,CAAC;QAEN,OAAO,gBAAgB,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAE7B,+DAA+D;YAC/D,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,UAA8B,CAAC;gBACnC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC9B,IAAI,CAAC;wBACJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;wBAC7D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;4BACpB,UAAU,GAAG,KAAK,CAAC;wBACpB,CAAC;oBACF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACd,gEAAgE;wBAChE,6EAA6E;wBAC7E,4EAA4E;wBAC5E,MAAM,CAAC,KAAK,CACX,mCAAmC,EACnC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACnD,CAAC;oBACH,CAAC;gBACF,CAAC;gBAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE;oBAClD,UAAU,EAAE,UAAU;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACpC,CAAC;YACF,CAAC;YAED,IAAI,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,kBAAkB,GAAG,MAAM,qBAAqB,EAAE,CAAC;gBACzD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnC,WAAW,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,CAAC;gBACzC,CAAC;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;oBACtC,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC1D,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACxD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;wBAChB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBAC9B,CAAC;gBACF,CAAC;gBACD,eAAe,GAAG,EAAE,CAAC;YACtB,CAAC;YAED,IAAI,uBAAuB,GAA4B,IAAI,CAAC;YAC5D,IAAI,yBAAyB,GAA4B,IAAI,CAAC;YAC9D,MAAM,kBAAkB,GAAe,EAAE,CAAC;YAC1C,IAAI,WAAW,GAAwB,EAAE,CAAC;YAC1C,IAAI,kBAAkB,GAAuC,IAAI,CAAC;YAClE,IAAI,eAAe,GAAG,KAAK,CAAC;YAC5B,IAAI,gBAAgB,GAAG,KAAK,CAAC;YAC7B,IAAI,oBAAoB,GAAG,KAAK,CAAC;YAEjC,MAAM,eAAe,GAAG,GAAG,CAAC,kBAAkB;gBAC7C,CAAC,CAAC,MAAM,GAAG,CAAC,kBAAkB,CAC5B,WAAW,EACX;oBACC,YAAY;oBACZ,KAAK;oBACL,KAAK;oBACL,WAAW;iBACX,EACD,MAAM,CACN;gBACF,CAAC,CAAC,WAAW,CAAC;YAEf,MAAM,cAAc,GAAG;gBACtB,GAAG,OAAO;gBACV,QAAQ,EAAE,eAAe;aACzB,CAAC;YAEF,uCAAuC;YACvC,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC/D,MAAM,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;YACxD,IAAI,aAAa,GAAG,CAAC,CAAC;YACtB,IAAI,aAAa,GAAG,KAAK,CAAC;YAE1B,OAAO,CAAC,aAAa,IAAI,aAAa,IAAI,gBAAgB,EAAE,CAAC;gBAC5D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACvB,wBAAwB;oBACxB,uBAAuB,GAAG,IAAI,CAAC;oBAC/B,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;oBAC9B,eAAe,GAAG,KAAK,CAAC;oBAExB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACzB,aAAa,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,EACvD,aAAa,CAAC,UAAU,CACxB,CAAC;oBACF,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;wBACjD,OAAO,EAAE,aAAa;wBACtB,UAAU,EAAE,gBAAgB;wBAC5B,SAAS;wBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;qBACxB,CAAC,CAAC;oBACH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;gBAChE,CAAC;gBACD,aAAa,EAAE,CAAC;gBAEhB,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,qBAAqB,EAAE;oBACpD,OAAO,EAAE,aAAa;iBACtB,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,oBAAoB,CAClC,KAAK,EACL,cAAc,EACd,aAAa,EACb,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CACpE,CAAC;gBAEF,IAAI,CAAC;oBACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAClC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC5B,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAAC;4BACxC,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM;oCACL,IAAI,EAAE,eAAe;oCACrB,OAAO,EAAE,uBAAuB;iCAChC,CAAC;4BACH,CAAC;4BACD,SAAS;wBACV,CAAC;wBAED,IACC,KAAK,CAAC,IAAI,KAAK,YAAY;4BAC3B,KAAK,CAAC,IAAI,KAAK,gBAAgB;4BAC/B,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAC9B,CAAC;4BACF,IAAI,CAAC,oBAAoB,EAAE,CAAC;gCAC3B,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;gCACnD,oBAAoB,GAAG,IAAI,CAAC;4BAC7B,CAAC;4BACD,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM;oCACL,IAAI,EAAE,gBAAgB;oCACtB,OAAO,EAAE,uBAAuB;oCAChC,qBAAqB,EAAE,KAAK;iCAC5B,CAAC;4BACH,CAAC;4BACD,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;4BACnC,IAAI,CAAC,oBAAoB,EAAE,CAAC;gCAC3B,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC;gCACnD,oBAAoB,GAAG,IAAI,CAAC;4BAC7B,CAAC;4BACD,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;4BACzC,MAAM,cAAc,GACnB,OAAO;gCACP,OAAO,OAAO,KAAK,QAAQ;gCAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gCACtB,CAAC,CAAE,OAAmC;gCACtC,CAAC,CAAC,EAAE,CAAC;4BACP,kBAAkB,CAAC,IAAI,CAAC;gCACvB,IAAI,EAAE,UAAU;gCAChB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;gCACrB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gCACzB,SAAS,EAAE,cAAc;6BACzB,CAAC,CAAC;4BACH,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC3B,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,yBAAyB,GAAG,uBAAuB,CAAC;gCACpD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;gCAChE,IAAI,uBAAuB,CAAC,KAAK,EAAE,CAAC;oCACnC,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC;oCAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;wCACtB,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;wCAClC,CAAC,CAAC,CAAC,CAAC;oCACL,IAAI,UAAU,EAAE,IAAI,KAAK,iBAAiB,EAAE,CAAC;wCAC5C,IAAI,CAAC;4CACJ,UAAU,CAAC;gDACV,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE;gDAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gDACxB,KAAK,EAAE,KAAK,CAAC,EAAE;gDACf,WAAW,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;gDAC7B,YAAY,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC;gDAC/B,eAAe,EAAE,KAAK,CAAC,SAAS;gDAChC,gBAAgB,EAAE,KAAK,CAAC,UAAU;gDAClC,IAAI;6CACJ,CAAC,CAAC;wCACJ,CAAC;wCAAC,OAAO,KAAK,EAAE,CAAC;4CAChB,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;gDACpC,KAAK,EACJ,KAAK,YAAY,KAAK;oDACrB,CAAC,CAAC,KAAK,CAAC,OAAO;oDACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gDACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;6CACvD,CAAC,CAAC;wCACJ,CAAC;oCACF,CAAC;gCACF,CAAC;4BACF,CAAC;4BACD,eAAe,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;4BAChD,SAAS;wBACV,CAAC;wBAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;4BAC5B,yBAAyB,GAAG,KAAK,CAAC,KAAK,CAAC;4BACxC,IAAI,uBAAuB,EAAE,CAAC;gCAC7B,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC;4BACjE,CAAC;4BACD,eAAe,GAAG,KAAK,CAAC;4BACxB,gBAAgB,GAAG,IAAI,CAAC;4BACxB,MAAM;wBACP,CAAC;oBACF,CAAC;oBACD,aAAa,GAAG,IAAI,CAAC;gBACtB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,IACC,wBAAwB,CAAC,KAAK,CAAC;wBAC/B,aAAa,IAAI,gBAAgB,EAChC,CAAC;wBACF,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE;4BAC9C,OAAO,EAAE,aAAa;4BACtB,UAAU,EAAE,gBAAgB;4BAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;4BACxB,MAAM,EAAE,KAAK,CAAC,MAAM;yBACpB,CAAC,CAAC;wBACH,SAAS,CAAC,mBAAmB;oBAC9B,CAAC;oBACD,gDAAgD;oBAChD,MAAM,KAAK,CAAC;gBACb,CAAC;YACF,CAAC,CAAC,uBAAuB;YAEzB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,WAAW,GAAG,EAAE,CAAC;gBACjB,MAAM,eAAe,GAAG,qBAAqB,EAAE,CAAC;gBAChD,MAAM,iBAAiB,GAAuB,EAAE,CAAC;gBACjD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,2BAA2B,IAAI,CAAC,CAAC;gBACrE,MAAM,qBAAqB,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAC5D,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBACzC,CAAC,CAAC,CAAC,CAAC;gBACL,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/D,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAChC,CAAC;gBACF,MAAM,sBAAsB,GAC3B,sBAAsB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;gBAEzD,+DAA+D;gBAC/D,IAAI,gBAAgB,GAAG,qBAAqB,CAC3C,kBAAkB,EAClB,KAAK,EACL;oBACC,eAAe,EAAE,qBAAqB;oBACtC,sBAAsB,EAAE,CAAC,EAAE,wCAAwC;oBACnE,OAAO,EAAE,IAAI;iBACb,CACD,CAAC;gBAEF,yDAAyD;gBACzD,IAAI,qBAAqB,GAAG,CAAC,IAAI,sBAAsB,EAAE,CAAC;oBACzD,gBAAgB,GAAG,CAAC,CAAC;oBACrB,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC;wBAC1C,MAAM,CAAC,IAAI,CACV,kGAAkG,CAClG,CAAC;wBACF,IAAI,CAAC,8BAA8B,GAAG,IAAI,CAAC;oBAC5C,CAAC;gBACF,CAAC;gBAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;gBAC9B,IAAI,kBAAkB,GAAe,EAAE,CAAC;gBAExC,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;oBAC/C,IAAI,iBAAiB,IAAI,CAAC,mBAAmB,EAAE,CAAC;wBAC/C,OAAO;oBACR,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;oBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,iBAAiB,GAAG,IAAI,CAAC;wBACzB,kBAAkB,GAAG,QAAQ,CAAC;oBAC/B,CAAC;gBACF,CAAC,CAAC;gBAEF,MAAM,oBAAoB,GAAG,CAC5B,QAAkB,EAClB,OAA0B,EAC1B,OAAgB,EAChB,QAGC,EACc,EAAE;oBACjB,MAAM,gBAAgB,GAAG,kCAAkC,CAC1D,OAAO,CAAC,OAAO,CACf,CAAC;oBACF,MAAM,aAAa,GAAG,+BAA+B,CACpD,OAAO,CAAC,OAAO,CACf,CAAC,aAAa,CAAC;oBAChB,OAAO;wBACN,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAgB;wBAChD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAgB;wBAC9C;4BACC,IAAI,EAAE,oBAAoB;4BAC1B,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,eAAe,EAAE,QAAQ,EAAE,eAAe;4BAC1C,iBAAiB,EAChB,QAAQ,EAAE,iBAAiB;gCAC3B,gBAAgB,CAAC,iBAAiB;4BACnC,SAAS,EAAE,gBAAgB,CAAC,SAAS;4BACrC,eAAe,EAAE,gBAAgB,CAAC,eAAe;4BACjD,aAAa;4BACb,QAAQ,EAAE,QAAQ,CAAC,IAAI;4BACvB,MAAM,EAAE,OAAO;4BACf,OAAO;yBACO;qBACf,CAAC;gBACH,CAAC,CAAC;gBACF,MAAM,cAAc,GAAG,CACtB,OAA0B,EAC1B,QAAkB,EAClB,OAAgB,EAChB,QAGC,EACA,EAAE;oBACH,IAAI,CAAC;wBACJ,uBAAuB,CAAC;4BACvB,QAAQ;4BACR,MAAM,EAAE,OAAO;4BACf,OAAO,EAAE,IAAI,CAAC,aAAa;4BAC3B,OAAO;yBACP,CAAC,CAAC;wBACH,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1B,OAAO,oBAAoB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;oBACnE,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;4BACzC,MAAM,mBAAmB,GAAsB;gCAC9C,IAAI,EAAE,YAAY;gCAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;gCACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gCACvB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gCAChD,OAAO,EAAE,IAAI;gCACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;6BAC3B,CAAC;4BACF,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;4BACtC,OAAO,oBAAoB,CAC1B,QAAQ,EACR,mBAAmB,EACnB,IAAI,EACJ,QAAQ,CACR,CAAC;wBACH,CAAC;wBACD,MAAM,KAAK,CAAC;oBACb,CAAC;gBACF,CAAC,CAAC;gBACF,MAAM,mBAAmB,GAAG,CAAC,QAAkB,EAAgB,EAAE;oBAChE,MAAM,oBAAoB,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,CACpE,QAAQ,CAAC,SAAoC,CAC7C,CAAC;oBACF,MAAM,aAAa,GAAsB;wBACxC,IAAI,EAAE,YAAY;wBAClB,UAAU,EAAE,QAAQ,CAAC,EAAE;wBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;wBACvB,OAAO,EAAE;4BACR;gCACC,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,qCAAqC;6BAC3C;yBACD;wBACD,OAAO,EAAE,IAAI;wBACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;qBAC3B,CAAC;oBACF,OAAO;wBACN;4BACC,IAAI,EAAE,sBAAsB;4BAC5B,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;4BACvB,IAAI,EAAE,oBAAoB;yBACZ;wBACf,GAAG,cAAc,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,CAAC;qBAChD,CAAC;gBACH,CAAC,CAAC;gBAEF,MAAM,uBAAuB,GAAG,KAAK,IAA2B,EAAE;oBACjE,IAAI,iBAAiB,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;wBACjD,OAAO,EAAE,CAAC;oBACX,CAAC;oBACD,MAAM,MAAM,GAAiB,EAAE,CAAC;oBAChC,OAAO,iBAAiB,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;wBACrD,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC9C,iBAAiB,EACjB,eAAe,CACf,CAAC;wBACF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACxB,SAAS;wBACV,CAAC;wBACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;wBAC7B,MAAM,CAAC,IAAI,CACV,GAAG,cAAc,CAChB,OAAO,CAAC,OAAO,EACf,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,OAAO,CAAC,OAAO,EACf;4BACC,eAAe,EAAE,OAAO,CAAC,eAAe;4BACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;yBAC5C,CACD,CACD,CAAC;wBACF,MAAM,aAAa,EAAE,CAAC;wBACtB,MAAM;oBACP,CAAC;oBACD,OAAO,MAAM,CAAC;gBACf,CAAC,CAAC;gBAEF,KACC,IAAI,SAAS,GAAG,CAAC,EACjB,SAAS,GAAG,kBAAkB,CAAC,MAAM,EACrC,SAAS,EAAE,EACV,CAAC;oBACF,IAAI,iBAAiB,EAAE,CAAC;wBACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;wBACzD,MAAM;oBACP,CAAC;oBACD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBAExB,6EAA6E;oBAC7E,MAAM,cAAc,GAAG,kBAAkB,CAAC;wBACzC,QAAQ;wBACR,KAAK;wBACL,WAAW;wBACX,GAAG;wBACH,MAAM;wBACN,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,aAAa,EAAE,IAAI,CAAC,aAAa;wBACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;wBAC7C,mBAAmB,EAClB,IAAI,CAAC,OAAO,CAAC,2BAA2B,KAAK,KAAK;4BACjD,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B;gCAC1C,qCAAqC,EAAE,CAAC;wBAC3C,WAAW;wBACX,QAAQ;wBACR,cAAc,EAAE;4BACf,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;4BAC/C,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;4BAC7C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;4BACzC,YAAY,EAAE,iBAAiB,CAAC,mBAAmB;4BACnD,SAAS,EAAE,iBAAiB,CAAC,eAAe;yBAC5C;wBACD,cAAc;qBACd,CAAC,CAAC;oBACH,IAAI,aAA4C,CAAC;oBACjD,IAAI,eAEQ,CAAC;oBACb,OAAO,IAAI,EAAE,CAAC;wBACb,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;wBAC/C,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;4BACrB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;4BACjE,MAAM;wBACP,CAAC;wBACD,MAAM,UAAU,CAAC,KAAK,CAAC;oBACxB,CAAC;oBACD,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;oBAC9D,CAAC;oBAED,iCAAiC;oBACjC,IAAI,CAAC,mBAAmB,GAAG,eAAe,CAAC,mBAAmB,CAAC;oBAC/D,IAAI,CAAC,iBAAiB,GAAG,eAAe,CAAC,iBAAiB,CAAC;oBAE3D,IAAI,aAAa,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;wBACzC,MAAM,aAAa,EAAE,CAAC;wBACtB,IAAI,iBAAiB,EAAE,CAAC;4BACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;4BAC7D,MAAM;wBACP,CAAC;wBACD,SAAS;oBACV,CAAC;oBAED,MAAM,EACL,iBAAiB,EACjB,aAAa,EACb,OAAO,EAAE,IAAI,EACb,sBAAsB,GACtB,GAAG,aAAa,CAAC;oBAClB,0DAA0D;oBAE1D,wEAAwE;oBACxE,iFAAiF;oBACjF,IAAI,qBAEQ,CAAC;oBACb,IACC,IAAI,CAAC,iBAAiB,KAAK,QAAQ;wBACnC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAC7B,CAAC;wBACF,qBAAqB;4BACpB,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAC9C,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,IAAI,EACb,aAAa,EACb,MAAM,CACN,CAAC;wBACH,qEAAqE;wBACrE,MAAM;4BACL,IAAI,EAAE,qBAAqB;4BAC3B,UAAU,EAAE,QAAQ,CAAC,EAAE;4BACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;4BACvB,gEAAgE;4BAChE,IAAI,EAAE,aAAa;yBACnB,CAAC;oBACH,CAAC;oBAED,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;wBACnD,QAAQ;wBACR,iBAAiB;wBACjB,IAAI;wBACJ,aAAa;wBACb,sBAAsB;wBACtB,GAAG;wBACH,MAAM;wBACN,KAAK,EAAE,IAAI,CAAC,KAAK;wBACjB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;wBACvC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;wBAC3C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,WAAW;wBACX,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB;wBAC/C,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;wBAC7C,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;wBACjD,mBAAmB,EAClB,IAAI,CAAC,OAAO,CAAC,2BAA2B,KAAK,KAAK;4BACjD,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,2BAA2B;gCAC1C,qCAAqC,EAAE,CAAC;wBAC3C,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;wBAC9D,eAAe;wBACf,qBAAqB;qBACrB,CAAC,CAAC;oBAEH,iBAAiB,CAAC,IAAI,CAAC;wBACtB,QAAQ;wBACR,OAAO,EAAE,gBAAgB;qBACzB,CAAC,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,uBAAuB,EAAE,CAAC;oBAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAC5B,MAAM,KAAK,CAAC;oBACb,CAAC;oBACD,IAAI,iBAAiB,EAAE,CAAC;wBACvB,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;wBAC7D,MAAM;oBACP,CAAC;gBACF,CAAC;gBAED,OAAO,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACrC,MAAM,IAAI,GAAG,MAAM,4BAA4B,CAC9C,iBAAiB,EACjB,eAAe,CACf,CAAC;oBACF,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC5B,MAAM,IAAI,CAAC,KAAK,CAAC;wBACjB,SAAS;oBACV,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,KAAK,MAAM,KAAK,IAAI,cAAc,CACjC,OAAO,CAAC,OAAO,EACf,IAAI,CAAC,SAAS,CAAC,QAAQ,EACvB,OAAO,CAAC,OAAO,EACf;wBACC,eAAe,EAAE,OAAO,CAAC,eAAe;wBACxC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;qBAC5C,CACD,EAAE,CAAC;wBACH,MAAM,KAAK,CAAC;oBACb,CAAC;oBACD,MAAM,aAAa,EAAE,CAAC;gBACvB,CAAC;gBAED,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC;gBAEzC,IAAI,iBAAiB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxD,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;wBAC3C,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;4BACnD,MAAM,KAAK,CAAC;wBACb,CAAC;oBACF,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,iBAAiB,IAAI,mBAAmB,EAAE,CAAC;oBAC/C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;oBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,kBAAkB,GAAG,QAAQ,CAAC;oBAC/B,CAAC;gBACF,CAAC;YACF,CAAC;YAED,IAAI,yBAAyB,EAAE,CAAC;gBAC/B,WAAW,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAC7C,CAAC;YACD,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YAEjC,MAAM;gBACL,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,yBAAyB;oBACjC,uBAAuB,IAAI;oBAC1B,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,EAAE;oBACX,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,KAAK,EAAE,KAAK,CAAC,EAAE;oBACf,KAAK,EAAE;wBACN,KAAK,EAAE,CAAC;wBACR,MAAM,EAAE,CAAC;wBACT,SAAS,EAAE,CAAC;wBACZ,UAAU,EAAE,CAAC;wBACb,IAAI,EAAE;4BACL,KAAK,EAAE,CAAC;4BACR,MAAM,EAAE,CAAC;4BACT,SAAS,EAAE,CAAC;4BACZ,UAAU,EAAE,CAAC;4BACb,KAAK,EAAE,CAAC;yBACR;qBACD;oBACD,UAAU,EAAE,OAAO;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;iBAC3B;gBACF,WAAW;aACX,CAAC;YAEF,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,eAAe,GAAG,kBAAkB,CAAC;YACtC,CAAC;iBAAM,IAAI,mBAAmB,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,EAAc,CAAC;gBACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,eAAe,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACF,CAAC;YAED,IACC,CAAC,eAAe;gBAChB,eAAe,CAAC,MAAM,KAAK,CAAC;gBAC5B,mBAAmB,EAClB,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,mBAAmB,EAAc,CAAC;gBAC1D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC1B,eAAe,GAAG,SAAS,CAAC;gBAC7B,CAAC;YACF,CAAC;YAED,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChC,eAAe,GAAG,IAAI,CAAC;YACxB,CAAC;YAED,gBAAgB,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9D,IAAI,gBAAgB,EAAE,CAAC;gBACtB,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,eAAe,EAAE;oBAC5C,YAAY,EAAE,WAAW,CAAC,MAAM;iBAChC,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC","sourcesContent":["/**\n * Agent Transport Layer - LLM Communication and Tool Execution Orchestration\n *\n * This module is the heart of the agent's execution loop. It handles:\n * 1. Streaming communication with LLM providers (Anthropic, OpenAI, Google)\n * 2. Concurrent tool execution with configurable parallelism\n * 3. Safety enforcement via action firewall integration\n * 4. Hook system integration for tool lifecycle events\n *\n * ## Architecture Overview\n *\n * ```\n * User Message → Transport.run() → Provider Stream → Parse Tool Calls\n *                      ↓                                    ↓\n *              Emit Turn Events ←── Tool Results ←── Execute Tools\n *                      ↓                                    ↑\n *              Continue Loop ───────────────────────────────┘\n * ```\n *\n * ## Concurrent Tool Execution\n *\n * When the LLM returns multiple tool calls in a single response, we execute\n * them concurrently up to `maxConcurrentToolExecutions` limit. This improves\n * latency for independent operations (e.g., reading multiple files).\n *\n * However, tools that affect WorkflowStateTracker (PII tracking) are serialized\n * to maintain consistent state ordering. A warning is logged when this happens.\n *\n * ## Safety Integration Points\n *\n * 1. **Pre-execution**: Action firewall evaluates each tool call\n * 2. **Approval flow**: Dangerous actions trigger user approval\n * 3. **PII tracking**: WorkflowState hooks track data flow for egress prevention\n * 4. **Doom loop detection**: Identical consecutive tool calls are blocked\n * 5. **Rate limiting**: Per-tool rate limits prevent runaway execution\n *\n * ## Event Stream\n *\n * The transport yields AgentEvents that drive the UI:\n * - turn_start/end: Turn boundaries for UI state management\n * - message_start/update/end: Streaming content updates\n * - tool_execution_start/end: Tool lifecycle for progress display\n * - action_approval_required/resolved: Approval UI triggers\n *\n * @module agent/transport\n */\n\nimport { isContextFirewallBlockingEnabled } from \"../config/env-vars.js\";\nimport { type ToolHookService, createToolHookService } from \"../hooks/index.js\";\nimport { getProviderNetworkConfig } from \"../providers/network-config.js\";\nimport { isStreamIdleTimeoutError } from \"../providers/stream-idle-timeout.js\";\nimport { type Clock, systemClock } from \"../utils/clock.js\";\nimport { createLogger } from \"../utils/logger.js\";\n\nconst logger = createLogger(\"transport\");\nimport type { AuthCredential } from \"../providers/auth.js\";\nimport { defaultActionFirewall } from \"../safety/action-firewall.js\";\nimport { AdaptiveThresholds } from \"../safety/adaptive-thresholds.js\";\nimport { checkSessionLimits } from \"../safety/policy.js\";\nimport {\n\ttype SafetyMiddleware,\n\tcreateSafetyMiddleware,\n} from \"../safety/safety-middleware.js\";\nimport { SemanticJudge } from \"../safety/semantic-judge.js\";\nimport {\n\tWorkflowStateError,\n\tWorkflowStateTracker,\n\tapplyWorkflowStateHooks,\n\tisWorkflowTrackedTool,\n} from \"../safety/workflow-state.js\";\nimport {\n\ttype SkillArtifactMetadata,\n\tgetSkillArtifactMetadataFromDetails,\n} from \"../skills/artifact-metadata.js\";\nimport { getOptimalConcurrency } from \"../tools/parallel-execution.js\";\nimport { trackUsage } from \"../tracking/cost-tracker.js\";\nimport { getTrainingHeaders } from \"../training.js\";\nimport type { ActionApprovalService } from \"./action-approval.js\";\nimport { getStoredCredentials } from \"./keys.js\";\nimport type { ToolRetryConfig, ToolRetryService } from \"./tool-retry.js\";\nimport { createProviderStream } from \"./transport/create-provider-stream.js\";\nimport {\n\ttype PlatformToolExecutionBridge,\n\tgetDefaultPlatformToolExecutionBridge,\n} from \"./transport/tool-execution-bridge.js\";\nimport { createToolExecutionPromise } from \"./transport/tool-execution.js\";\nimport {\n\ttype ToolSafetyVerdict,\n\tevaluateToolSafety,\n} from \"./transport/tool-safety-pipeline.js\";\nimport {\n\ttype PendingExecution,\n\tcreateToolUpdateQueue,\n\twaitForNextExecutionOrUpdate,\n} from \"./transport/tool-update-queue.js\";\nimport {\n\ttype SessionTokenCounter,\n\ttype ToolAuditLogger,\n\tcalculateCost,\n\tresolveEnvCredential,\n} from \"./transport/transport-utils.js\";\nimport type {\n\tAgentEvent,\n\tAgentRunConfig,\n\tAgentToolResult,\n\tAgentTransport,\n\tAppMessage,\n\tAssistantMessage,\n\tMessage,\n\tQueuedMessage,\n\tToolCall,\n\tToolResultMessage,\n} from \"./types.js\";\n\ntype GovernedToolOutcome =\n\t| \"approval_required\"\n\t| \"approval_pending\"\n\t| \"authentication_required\"\n\t| \"denied\"\n\t| \"rate_limited\";\n\nfunction getGovernedToolResultEventMetadata(details: unknown): {\n\terrorCode?: string;\n\tapprovalRequestId?: string;\n\tgovernedOutcome?: GovernedToolOutcome;\n} {\n\tif (!details || typeof details !== \"object\") {\n\t\treturn {};\n\t}\n\n\tconst governedOutcome = (details as { governedOutcome?: unknown })\n\t\t.governedOutcome;\n\tif (!governedOutcome || typeof governedOutcome !== \"object\") {\n\t\treturn {};\n\t}\n\n\tconst normalized = governedOutcome as Record<string, unknown>;\n\tconst classification =\n\t\ttypeof normalized.classification === \"string\"\n\t\t\t? (normalized.classification as GovernedToolOutcome)\n\t\t\t: undefined;\n\tconst errorCode =\n\t\ttypeof normalized.code === \"string\" && normalized.code.trim().length > 0\n\t\t\t? normalized.code.trim()\n\t\t\t: classification;\n\tconst approvalRequestId =\n\t\ttypeof normalized.approvalRequestId === \"string\" &&\n\t\tnormalized.approvalRequestId.trim().length > 0\n\t\t\t? normalized.approvalRequestId.trim()\n\t\t\t: undefined;\n\n\treturn {\n\t\terrorCode,\n\t\tapprovalRequestId,\n\t\tgovernedOutcome: classification,\n\t};\n}\n\nfunction getSkillToolResultEventMetadata(details: unknown): {\n\tskillMetadata?: SkillArtifactMetadata;\n} {\n\treturn {\n\t\tskillMetadata: getSkillArtifactMetadataFromDetails(details),\n\t};\n}\n\n// Re-export types for backward compatibility\nexport type {\n\tSessionTokenCounter,\n\tToolAuditLogger,\n} from \"./transport/transport-utils.js\";\n\nexport interface ClientToolExecutionService {\n\trequestExecution: (\n\t\tid: string,\n\t\ttoolName: string,\n\t\targs: Record<string, unknown>,\n\t\tsignal?: AbortSignal,\n\t) => Promise<{ content: AgentToolResult[\"content\"]; isError: boolean }>;\n}\n\nexport interface ProviderTransportOptions {\n\tgetApiKey?: (\n\t\tprovider: string,\n\t) => Promise<string | undefined> | string | undefined;\n\tgetAuthContext?: (\n\t\tprovider: string,\n\t) => AuthCredential | undefined | Promise<AuthCredential | undefined>;\n\tcorsProxyUrl?: string;\n\tapprovalService?: ActionApprovalService;\n\ttoolRetryService?: ToolRetryService;\n\ttoolRetryConfig?: ToolRetryConfig;\n\tclientToolService?: ClientToolExecutionService;\n\tmaxConcurrentToolExecutions?: number;\n\t/** Hook service for tool lifecycle hooks (PreToolUse, PostToolUse, etc.) */\n\thookService?: ToolHookService;\n\t/** Current working directory for hook execution (required if hookService not provided) */\n\tcwd?: string;\n\t/** Clock for timestamps and rate limiting (default: system clock) */\n\tclock?: Clock;\n\t/** Session token counter used for enforcing policy session limits */\n\tsessionTokenCounter?: SessionTokenCounter;\n\t/** Audit logger for sensitive tool execution events */\n\tauditLogger?: ToolAuditLogger;\n\t/** Optional Platform ToolExecution bridge override */\n\tplatformToolExecutionBridge?: PlatformToolExecutionBridge | false;\n}\n\n/**\n * Provider Transport - Multi-provider LLM communication with safety controls\n *\n * The main transport implementation that handles streaming LLM responses,\n * executing tool calls, and enforcing safety policies. Supports Anthropic,\n * OpenAI, and Google providers through a unified interface.\n *\n * ## State Management\n *\n * - **workflowState**: Tracks PII artifacts for egress prevention\n * - **recentToolTimestamps**: Per-tool timestamps for rate limiting\n * - **safetyMiddleware**: Unified security (loop detection, sequence analysis, firewall)\n *\n * ## Safety Mechanisms\n *\n * ### SafetyMiddleware Integration\n * All safety checks are now handled through SafetyMiddleware:\n * - **Loop Detection**: Catches identical consecutive calls (replaces doom loop)\n * - **Sequence Analysis**: Detects suspicious behavioral patterns\n * - **Context Firewall**: Sanitizes arguments and blocks sensitive content\n *\n * ### Rate Limiting\n * Each tool has a per-window rate limit (TOOL_RATE_LIMIT calls per\n * TOOL_RATE_WINDOW_MS). This prevents runaway tool execution that could\n * waste resources or hit external API limits.\n *\n * ### Workflow State Serialization\n * When tools that track PII are present in a batch, concurrent execution\n * is disabled to ensure correct state ordering.\n */\nexport class ProviderTransport implements AgentTransport {\n\t/** Tracks PII artifacts through the workflow for egress prevention */\n\tprivate workflowState = new WorkflowStateTracker();\n\t/** Prevents repeated warnings about serialized workflow execution */\n\tprivate warnedAboutWorkflowConcurrency = false;\n\t/** Per-tool timestamp arrays for rate limiting enforcement */\n\tprivate recentToolTimestamps = new Map<string, number[]>();\n\t/** Safety middleware for sequence analysis and context sanitization */\n\tprivate readonly safetyMiddleware!: SafetyMiddleware;\n\t/** Adaptive thresholds for anomaly-based rate limiting */\n\tprivate readonly adaptiveThresholds!: AdaptiveThresholds;\n\t/** Tool call count in current minute window (for adaptive tracking) */\n\tprivate toolCallsThisMinute = 0;\n\t/** Last minute window start time */\n\tprivate minuteWindowStart = 0;\n\tprivate readonly clock: Clock;\n\tprivate readonly sessionTokenCounter?: SessionTokenCounter;\n\tprivate readonly auditLogger?: ToolAuditLogger;\n\n\t/**\n\t * Rate Limit Window - time window for counting tool invocations\n\t * 10 seconds balances burst protection with legitimate rapid use\n\t */\n\tprivate static readonly TOOL_RATE_WINDOW_MS = 10_000;\n\n\t/**\n\t * Rate Limit Maximum - max calls per tool within the window\n\t * 5 calls in 10 seconds allows fast iteration while preventing abuse\n\t */\n\tprivate static readonly TOOL_RATE_LIMIT = 5;\n\n\tconstructor(private options: ProviderTransportOptions = {}) {\n\t\tthis.clock = options.clock ?? systemClock;\n\t\tthis.sessionTokenCounter = options.sessionTokenCounter;\n\t\tthis.auditLogger = options.auditLogger;\n\t\tthis.minuteWindowStart = this.clock.now();\n\t\t// Initialize adaptive thresholds for anomaly detection\n\t\tthis.adaptiveThresholds = new AdaptiveThresholds({\n\t\t\talpha: 0.3, // Give more weight to recent observations\n\t\t\tanomalyThreshold: 2.5, // 2.5 std devs = more aggressive anomaly detection\n\t\t\tminObservations: 5, // Need at least 5 observations before anomaly detection\n\t\t});\n\t\t// Initialize safety middleware for unified security checks\n\t\tthis.safetyMiddleware = createSafetyMiddleware({\n\t\t\t// Enable loop detection (replaces transport's doom loop detection)\n\t\t\tenableLoopDetection: true,\n\t\t\t// Configure loop detector to match transport's previous behavior\n\t\t\tloopDetector: {\n\t\t\t\tmaxIdenticalCalls: 3, // Match DOOM_LOOP_THRESHOLD\n\t\t\t\tmaxSimilarCalls: 5,\n\t\t\t\tmaxCallsPerMinute: 30, // More aggressive rate limit than TOOL_RATE_LIMIT\n\t\t\t\tautoPause: false, // Transport handles the pause flow\n\t\t\t},\n\t\t\t// Enable sequence analysis for behavioral threat detection\n\t\t\tenableSequenceAnalysis: true,\n\t\t\t// Enable context firewall with blocking for sanitizing audit logs\n\t\t\tenableContextFirewall: true,\n\t\t\t// Configure context firewall blocking (can be disabled via MAESTRO_CONTEXT_FIREWALL_BLOCKING=0)\n\t\t\tcontextFirewall: {\n\t\t\t\t// When blocking is disabled, vault credentials so test keys can pass through safely.\n\t\t\t\tvaultCredentials: !isContextFirewallBlockingEnabled(),\n\t\t\t\tblocking: {\n\t\t\t\t\tenabled: isContextFirewallBlockingEnabled(),\n\t\t\t\t},\n\t\t\t},\n\t\t});\n\t}\n\n\t/**\n\t * Continue from current context without a new user message.\n\t *\n\t * This method reuses the run() logic but skips adding a new user message.\n\t * Useful for:\n\t * - Retrying after transient errors (rate limits, overload, 5xx)\n\t * - Continuing after context compaction\n\t * - Resuming interrupted tool execution\n\t *\n\t * @param messages - Current conversation history\n\t * @param config - Runtime configuration\n\t * @param signal - Optional abort signal for cancellation\n\t * @returns Async iterable of agent events\n\t */\n\tasync *continue(\n\t\tmessages: Message[],\n\t\tconfig: AgentRunConfig,\n\t\tsignal?: AbortSignal,\n\t): AsyncGenerator<AgentEvent, void, unknown> {\n\t\t// Create a synthetic \"continuation\" message that signals we're resuming\n\t\t// This doesn't get added to the conversation but satisfies the run() interface\n\t\tconst continuationMessage: Message = {\n\t\t\trole: \"user\",\n\t\t\tcontent: [\n\t\t\t\t{ type: \"text\", text: \"[System: Continuing from previous context]\" },\n\t\t\t],\n\t\t\ttimestamp: this.clock.now(),\n\t\t};\n\n\t\t// Delegate to run() - the continuation message is used internally\n\t\t// but the actual context comes from the messages array\n\t\tyield* this.run(messages, continuationMessage, config, signal);\n\t}\n\n\tasync *run(\n\t\tmessages: Message[],\n\t\tuserMessage: Message,\n\t\tcfg: AgentRunConfig,\n\t\tsignal?: AbortSignal,\n\t): AsyncGenerator<AgentEvent, void, unknown> {\n\t\tconst { systemPrompt, tools } = cfg;\n\t\tlet model = cfg.model;\n\t\tconst firewall = defaultActionFirewall;\n\n\t\t// Configure semantic judge if LLM access is provided\n\t\tif (cfg.runLLM) {\n\t\t\tfirewall.setSemanticJudge(new SemanticJudge(cfg.runLLM));\n\t\t}\n\n\t\t// Initialize hook service for tool lifecycle hooks\n\t\tconst hookService =\n\t\t\tthis.options.hookService ??\n\t\t\t(this.options.cwd\n\t\t\t\t? createToolHookService({\n\t\t\t\t\t\tcwd: this.options.cwd,\n\t\t\t\t\t\tsessionId: cfg.session?.id,\n\t\t\t\t\t\tresolveTool: (toolName) =>\n\t\t\t\t\t\t\tcfg.tools?.find((tool) => tool.name === toolName),\n\t\t\t\t\t})\n\t\t\t\t: undefined);\n\n\t\tthis.workflowState.reset();\n\n\t\tlet credential: AuthCredential | undefined;\n\t\tif (this.options.getAuthContext) {\n\t\t\tcredential = await this.options.getAuthContext(model.provider);\n\t\t}\n\t\tif (!credential && this.options.getApiKey) {\n\t\t\tconst fallbackKey = await this.options.getApiKey(model.provider);\n\t\t\tif (fallbackKey) {\n\t\t\t\tcredential = {\n\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\ttoken: fallbackKey,\n\t\t\t\t\ttype: \"api-key\",\n\t\t\t\t\tsource: \"env\",\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\t\tif (!credential) {\n\t\t\tconst envCredential = resolveEnvCredential(model.provider);\n\t\t\tif (envCredential) {\n\t\t\t\tcredential = envCredential;\n\t\t\t}\n\t\t}\n\t\tif (!credential) {\n\t\t\tconst stored = getStoredCredentials(model.provider);\n\t\t\tif (stored.apiKey) {\n\t\t\t\tcredential = {\n\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\ttoken: stored.apiKey,\n\t\t\t\t\ttype: stored.authType ?? \"api-key\",\n\t\t\t\t\tsource: \"custom_literal\",\n\t\t\t\t};\n\t\t\t}\n\t\t}\n\n\t\tconst apiKey = credential?.token;\n\t\tif (!apiKey) {\n\t\t\tthrow new Error(\n\t\t\t\t`No credentials found for provider \"${model.provider}\". Provide an API key or configure getAuthContext.`,\n\t\t\t);\n\t\t}\n\n\t\tyield { type: \"message_start\", message: userMessage };\n\t\tif (cfg.emitUserMessageEnd !== false) {\n\t\t\tyield { type: \"message_end\", message: userMessage };\n\t\t}\n\n\t\tconst context = {\n\t\t\tsystemPrompt,\n\t\t\tmessages,\n\t\t\ttools,\n\t\t};\n\n\t\tif (this.options.corsProxyUrl && model.baseUrl) {\n\t\t\tmodel = {\n\t\t\t\t...model,\n\t\t\t\tbaseUrl: `${this.options.corsProxyUrl}/?url=${encodeURIComponent(model.baseUrl)}`,\n\t\t\t};\n\t\t}\n\n\t\tconst trainingHeaders = getTrainingHeaders();\n\t\tconst headers =\n\t\t\ttrainingHeaders || model.headers || credential?.headers\n\t\t\t\t? {\n\t\t\t\t\t\t...(model.headers ?? {}),\n\t\t\t\t\t\t...(trainingHeaders ?? {}),\n\t\t\t\t\t\t...(credential?.headers ?? {}),\n\t\t\t\t\t}\n\t\t\t\t: undefined;\n\n\t\tconst streamOptions = {\n\t\t\tapiKey,\n\t\t\tmaxTokens: model.maxTokens,\n\t\t\tsignal,\n\t\t\tauthType: credential?.type ?? \"api-key\",\n\t\t\theaders,\n\t\t\trequestBody: credential?.requestBody,\n\t\t\tsessionId: cfg.session?.id,\n\t\t\ttaskBudget: cfg.taskBudget,\n\t\t};\n\n\t\tlet hasMoreToolCalls = true;\n\t\tconst allMessages = [...context.messages];\n\t\tconst getSteeringMessages =\n\t\t\tcfg.getSteeringMessages ?? cfg.getQueuedMessages;\n\t\tconst getFollowUpMessages = cfg.getFollowUpMessages;\n\t\tconst getPromptOnlyMessages = cfg.getPromptOnlyMessages;\n\n\t\tlet pendingMessages = getSteeringMessages\n\t\t\t? await getSteeringMessages<AppMessage>()\n\t\t\t: [];\n\n\t\twhile (hasMoreToolCalls || pendingMessages.length > 0) {\n\t\t\tyield { type: \"turn_start\" };\n\n\t\t\t// Enforce session limits before every turn (duration + tokens)\n\t\t\tif (cfg.session) {\n\t\t\t\tlet tokenCount: number | undefined;\n\t\t\t\tif (this.sessionTokenCounter) {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tconst count = await this.sessionTokenCounter(cfg.session.id);\n\t\t\t\t\t\tif (count !== null) {\n\t\t\t\t\t\t\ttokenCount = count;\n\t\t\t\t\t\t}\n\t\t\t\t\t} catch (err) {\n\t\t\t\t\t\t// Log error but don't throw - let checkSessionLimits handle it.\n\t\t\t\t\t\t// If limits are active, it will fail closed because tokenCount is undefined.\n\t\t\t\t\t\t// If no limits are active, we shouldn't block just because tracking failed.\n\t\t\t\t\t\tlogger.error(\n\t\t\t\t\t\t\t\"Failed to get session token count\",\n\t\t\t\t\t\t\terr instanceof Error ? err : new Error(String(err)),\n\t\t\t\t\t\t);\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tconst limitCheck = checkSessionLimits(cfg.session, {\n\t\t\t\t\ttokenCount: tokenCount,\n\t\t\t\t});\n\t\t\t\tif (!limitCheck.allowed) {\n\t\t\t\t\tthrow new Error(limitCheck.reason);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (getPromptOnlyMessages) {\n\t\t\t\tconst promptOnlyMessages = await getPromptOnlyMessages();\n\t\t\t\tif (promptOnlyMessages.length > 0) {\n\t\t\t\t\tallMessages.push(...promptOnlyMessages);\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (pendingMessages.length > 0) {\n\t\t\t\tfor (const queued of pendingMessages) {\n\t\t\t\t\tyield { type: \"message_start\", message: queued.original };\n\t\t\t\t\tyield { type: \"message_end\", message: queued.original };\n\t\t\t\t\tif (queued.llm) {\n\t\t\t\t\t\tallMessages.push(queued.llm);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tpendingMessages = [];\n\t\t\t}\n\n\t\t\tlet currentAssistantMessage: AssistantMessage | null = null;\n\t\t\tlet completedAssistantMessage: AssistantMessage | null = null;\n\t\t\tconst toolCallsToExecute: ToolCall[] = [];\n\t\t\tlet toolResults: ToolResultMessage[] = [];\n\t\t\tlet steeringAfterTools: QueuedMessage<AppMessage>[] | null = null;\n\t\t\tlet pendingNextTurn = false;\n\t\t\tlet encounteredError = false;\n\t\t\tlet firstModelOutputSeen = false;\n\n\t\t\tconst currentMessages = cfg.preprocessMessages\n\t\t\t\t? await cfg.preprocessMessages(\n\t\t\t\t\t\tallMessages,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\tsystemPrompt,\n\t\t\t\t\t\t\ttools,\n\t\t\t\t\t\t\tmodel,\n\t\t\t\t\t\t\tuserMessage,\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t)\n\t\t\t\t: allMessages;\n\n\t\t\tconst currentContext = {\n\t\t\t\t...context,\n\t\t\t\tmessages: currentMessages,\n\t\t\t};\n\n\t\t\t// Stream retry logic for idle timeouts\n\t\t\tconst networkConfig = getProviderNetworkConfig(model.provider);\n\t\t\tconst maxStreamRetries = networkConfig.streamMaxRetries;\n\t\t\tlet streamAttempt = 0;\n\t\t\tlet streamSuccess = false;\n\n\t\t\twhile (!streamSuccess && streamAttempt <= maxStreamRetries) {\n\t\t\t\tif (streamAttempt > 0) {\n\t\t\t\t\t// Reset state for retry\n\t\t\t\t\tcurrentAssistantMessage = null;\n\t\t\t\t\ttoolCallsToExecute.length = 0;\n\t\t\t\t\tpendingNextTurn = false;\n\n\t\t\t\t\tconst backoffMs = Math.min(\n\t\t\t\t\t\tnetworkConfig.backoffInitial * 2 ** (streamAttempt - 1),\n\t\t\t\t\t\tnetworkConfig.backoffMax,\n\t\t\t\t\t);\n\t\t\t\t\tlogger.info(\"Retrying stream after idle timeout\", {\n\t\t\t\t\t\tattempt: streamAttempt,\n\t\t\t\t\t\tmaxRetries: maxStreamRetries,\n\t\t\t\t\t\tbackoffMs,\n\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t});\n\t\t\t\t\tawait new Promise((resolve) => setTimeout(resolve, backoffMs));\n\t\t\t\t}\n\t\t\t\tstreamAttempt++;\n\n\t\t\t\tcfg.queryProfiler?.checkpoint(\"model:request:start\", {\n\t\t\t\t\tattempt: streamAttempt,\n\t\t\t\t});\n\t\t\t\tconst stream = createProviderStream(\n\t\t\t\t\tmodel,\n\t\t\t\t\tcurrentContext,\n\t\t\t\t\tstreamOptions,\n\t\t\t\t\t{ reasoning: cfg.reasoning, reasoningSummary: cfg.reasoningSummary },\n\t\t\t\t);\n\n\t\t\t\ttry {\n\t\t\t\t\tfor await (const event of stream) {\n\t\t\t\t\t\tif (event.type === \"start\") {\n\t\t\t\t\t\t\tcurrentAssistantMessage = event.partial;\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\t\t\ttype: \"message_start\",\n\t\t\t\t\t\t\t\t\tmessage: currentAssistantMessage,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (\n\t\t\t\t\t\t\tevent.type === \"text_delta\" ||\n\t\t\t\t\t\t\tevent.type === \"thinking_delta\" ||\n\t\t\t\t\t\t\tevent.type === \"toolcall_delta\"\n\t\t\t\t\t\t) {\n\t\t\t\t\t\t\tif (!firstModelOutputSeen) {\n\t\t\t\t\t\t\t\tcfg.queryProfiler?.checkpoint(\"model:first-token\");\n\t\t\t\t\t\t\t\tfirstModelOutputSeen = true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\t\t\ttype: \"message_update\",\n\t\t\t\t\t\t\t\t\tmessage: currentAssistantMessage,\n\t\t\t\t\t\t\t\t\tassistantMessageEvent: event,\n\t\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"toolcall_end\") {\n\t\t\t\t\t\t\tif (!firstModelOutputSeen) {\n\t\t\t\t\t\t\t\tcfg.queryProfiler?.checkpoint(\"model:first-token\");\n\t\t\t\t\t\t\t\tfirstModelOutputSeen = true;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tconst rawArgs = event.toolCall.arguments;\n\t\t\t\t\t\t\tconst normalizedArgs =\n\t\t\t\t\t\t\t\trawArgs &&\n\t\t\t\t\t\t\t\ttypeof rawArgs === \"object\" &&\n\t\t\t\t\t\t\t\t!Array.isArray(rawArgs)\n\t\t\t\t\t\t\t\t\t? (rawArgs as Record<string, unknown>)\n\t\t\t\t\t\t\t\t\t: {};\n\t\t\t\t\t\t\ttoolCallsToExecute.push({\n\t\t\t\t\t\t\t\ttype: \"toolCall\",\n\t\t\t\t\t\t\t\tid: event.toolCall.id,\n\t\t\t\t\t\t\t\tname: event.toolCall.name,\n\t\t\t\t\t\t\t\targuments: normalizedArgs,\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"done\") {\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tcompletedAssistantMessage = currentAssistantMessage;\n\t\t\t\t\t\t\t\tyield { type: \"message_end\", message: currentAssistantMessage };\n\t\t\t\t\t\t\t\tif (currentAssistantMessage.usage) {\n\t\t\t\t\t\t\t\t\tconst usage = currentAssistantMessage.usage;\n\t\t\t\t\t\t\t\t\tconst cost = model.cost\n\t\t\t\t\t\t\t\t\t\t? calculateCost(usage, model.cost)\n\t\t\t\t\t\t\t\t\t\t: 0;\n\t\t\t\t\t\t\t\t\tif (credential?.type !== \"anthropic-oauth\") {\n\t\t\t\t\t\t\t\t\t\ttry {\n\t\t\t\t\t\t\t\t\t\t\ttrackUsage({\n\t\t\t\t\t\t\t\t\t\t\t\tsessionId: cfg.session?.id,\n\t\t\t\t\t\t\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\t\t\t\t\t\t\tmodel: model.id,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensInput: usage.input || 0,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensOutput: usage.output || 0,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensCacheRead: usage.cacheRead,\n\t\t\t\t\t\t\t\t\t\t\t\ttokensCacheWrite: usage.cacheWrite,\n\t\t\t\t\t\t\t\t\t\t\t\tcost,\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\t\t\t\t\t\tlogger.warn(\"Failed to track usage\", {\n\t\t\t\t\t\t\t\t\t\t\t\terror:\n\t\t\t\t\t\t\t\t\t\t\t\t\terror instanceof Error\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t? error.message\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t: String(error),\n\t\t\t\t\t\t\t\t\t\t\t\tstack: error instanceof Error ? error.stack : undefined,\n\t\t\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tpendingNextTurn = toolCallsToExecute.length > 0;\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\n\t\t\t\t\t\tif (event.type === \"error\") {\n\t\t\t\t\t\t\tcompletedAssistantMessage = event.error;\n\t\t\t\t\t\t\tif (currentAssistantMessage) {\n\t\t\t\t\t\t\t\tyield { type: \"message_end\", message: currentAssistantMessage };\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tpendingNextTurn = false;\n\t\t\t\t\t\t\tencounteredError = true;\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tstreamSuccess = true;\n\t\t\t\t} catch (error) {\n\t\t\t\t\tif (\n\t\t\t\t\t\tisStreamIdleTimeoutError(error) &&\n\t\t\t\t\t\tstreamAttempt <= maxStreamRetries\n\t\t\t\t\t) {\n\t\t\t\t\t\tlogger.warn(\"Stream idle timeout, will retry\", {\n\t\t\t\t\t\t\tattempt: streamAttempt,\n\t\t\t\t\t\t\tmaxRetries: maxStreamRetries,\n\t\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\t\tidleMs: error.idleMs,\n\t\t\t\t\t\t});\n\t\t\t\t\t\tcontinue; // Retry the stream\n\t\t\t\t\t}\n\t\t\t\t\t// Not retryable or exhausted retries - re-throw\n\t\t\t\t\tthrow error;\n\t\t\t\t}\n\t\t\t} // end while retry loop\n\n\t\t\tif (toolCallsToExecute.length > 0) {\n\t\t\t\ttoolResults = [];\n\t\t\t\tconst toolUpdateQueue = createToolUpdateQueue();\n\t\t\t\tconst pendingExecutions: PendingExecution[] = [];\n\t\t\t\tconst rawConcurrency = this.options.maxConcurrentToolExecutions ?? 2;\n\t\t\t\tconst configuredConcurrency = Number.isFinite(rawConcurrency)\n\t\t\t\t\t? Math.max(1, Math.floor(rawConcurrency))\n\t\t\t\t\t: 2;\n\t\t\t\tconst hasWorkflowTrackedTool = toolCallsToExecute.some((call) =>\n\t\t\t\t\tisWorkflowTrackedTool(call.name),\n\t\t\t\t);\n\t\t\t\tconst requiresSerializedTurn =\n\t\t\t\t\thasWorkflowTrackedTool && toolCallsToExecute.length > 1;\n\n\t\t\t\t// Calculate optimal concurrency - higher for read-only batches\n\t\t\t\tlet concurrencyLimit = getOptimalConcurrency(\n\t\t\t\t\ttoolCallsToExecute,\n\t\t\t\t\ttools,\n\t\t\t\t\t{\n\t\t\t\t\t\tbaseConcurrency: configuredConcurrency,\n\t\t\t\t\t\tmaxReadOnlyConcurrency: 8, // Allow up to 8x parallel for read-only\n\t\t\t\t\t\tenabled: true,\n\t\t\t\t\t},\n\t\t\t\t);\n\n\t\t\t\t// Override: workflow-tracked tools require serialization\n\t\t\t\tif (configuredConcurrency > 1 && requiresSerializedTurn) {\n\t\t\t\t\tconcurrencyLimit = 1;\n\t\t\t\t\tif (!this.warnedAboutWorkflowConcurrency) {\n\t\t\t\t\t\tlogger.warn(\n\t\t\t\t\t\t\t\"WorkflowStateTracker requires serialized tool execution; maxConcurrentToolExecutions capped at 1\",\n\t\t\t\t\t\t);\n\t\t\t\t\t\tthis.warnedAboutWorkflowConcurrency = true;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tlet steeringTriggered = false;\n\t\t\t\tlet remainingToolCalls: ToolCall[] = [];\n\n\t\t\t\tconst checkSteering = async (): Promise<void> => {\n\t\t\t\t\tif (steeringTriggered || !getSteeringMessages) {\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\t\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\t\tsteeringTriggered = true;\n\t\t\t\t\t\tsteeringAfterTools = steering;\n\t\t\t\t\t}\n\t\t\t\t};\n\n\t\t\t\tconst buildExecutionEvents = (\n\t\t\t\t\ttoolCall: ToolCall,\n\t\t\t\t\tmessage: ToolResultMessage,\n\t\t\t\t\tisError: boolean,\n\t\t\t\t\tmetadata?: {\n\t\t\t\t\t\ttoolExecutionId?: string;\n\t\t\t\t\t\tapprovalRequestId?: string;\n\t\t\t\t\t},\n\t\t\t\t): AgentEvent[] => {\n\t\t\t\t\tconst governedMetadata = getGovernedToolResultEventMetadata(\n\t\t\t\t\t\tmessage.details,\n\t\t\t\t\t);\n\t\t\t\t\tconst skillMetadata = getSkillToolResultEventMetadata(\n\t\t\t\t\t\tmessage.details,\n\t\t\t\t\t).skillMetadata;\n\t\t\t\t\treturn [\n\t\t\t\t\t\t{ type: \"message_start\", message } as AgentEvent,\n\t\t\t\t\t\t{ type: \"message_end\", message } as AgentEvent,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"tool_execution_end\",\n\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\ttoolExecutionId: metadata?.toolExecutionId,\n\t\t\t\t\t\t\tapprovalRequestId:\n\t\t\t\t\t\t\t\tmetadata?.approvalRequestId ??\n\t\t\t\t\t\t\t\tgovernedMetadata.approvalRequestId,\n\t\t\t\t\t\t\terrorCode: governedMetadata.errorCode,\n\t\t\t\t\t\t\tgovernedOutcome: governedMetadata.governedOutcome,\n\t\t\t\t\t\t\tskillMetadata,\n\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\tresult: message,\n\t\t\t\t\t\t\tisError,\n\t\t\t\t\t\t} as AgentEvent,\n\t\t\t\t\t];\n\t\t\t\t};\n\t\t\t\tconst emitToolResult = (\n\t\t\t\t\tmessage: ToolResultMessage,\n\t\t\t\t\ttoolCall: ToolCall,\n\t\t\t\t\tisError: boolean,\n\t\t\t\t\tmetadata?: {\n\t\t\t\t\t\ttoolExecutionId?: string;\n\t\t\t\t\t\tapprovalRequestId?: string;\n\t\t\t\t\t},\n\t\t\t\t) => {\n\t\t\t\t\ttry {\n\t\t\t\t\t\tapplyWorkflowStateHooks({\n\t\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\t\tresult: message,\n\t\t\t\t\t\t\ttracker: this.workflowState,\n\t\t\t\t\t\t\tisError,\n\t\t\t\t\t\t});\n\t\t\t\t\t\ttoolResults.push(message);\n\t\t\t\t\t\treturn buildExecutionEvents(toolCall, message, isError, metadata);\n\t\t\t\t\t} catch (error) {\n\t\t\t\t\t\tif (error instanceof WorkflowStateError) {\n\t\t\t\t\t\t\tconst workflowErrorResult: ToolResultMessage = {\n\t\t\t\t\t\t\t\trole: \"toolResult\",\n\t\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\t\tcontent: [{ type: \"text\", text: error.message }],\n\t\t\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t\t\t};\n\t\t\t\t\t\t\ttoolResults.push(workflowErrorResult);\n\t\t\t\t\t\t\treturn buildExecutionEvents(\n\t\t\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\t\t\tworkflowErrorResult,\n\t\t\t\t\t\t\t\ttrue,\n\t\t\t\t\t\t\t\tmetadata,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t}\n\t\t\t\t\t\tthrow error;\n\t\t\t\t\t}\n\t\t\t\t};\n\t\t\t\tconst emitSkippedToolCall = (toolCall: ToolCall): AgentEvent[] => {\n\t\t\t\t\tconst sanitizedSkippedArgs = this.safetyMiddleware.sanitizeForLogging(\n\t\t\t\t\t\ttoolCall.arguments as Record<string, unknown>,\n\t\t\t\t\t);\n\t\t\t\t\tconst skippedResult: ToolResultMessage = {\n\t\t\t\t\t\trole: \"toolResult\",\n\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\tcontent: [\n\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\ttype: \"text\",\n\t\t\t\t\t\t\t\ttext: \"Skipped due to queued user message.\",\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t],\n\t\t\t\t\t\tisError: true,\n\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t};\n\t\t\t\t\treturn [\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttype: \"tool_execution_start\",\n\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\targs: sanitizedSkippedArgs,\n\t\t\t\t\t\t} as AgentEvent,\n\t\t\t\t\t\t...emitToolResult(skippedResult, toolCall, true),\n\t\t\t\t\t];\n\t\t\t\t};\n\n\t\t\t\tconst scheduleResolveIfNeeded = async (): Promise<AgentEvent[]> => {\n\t\t\t\t\tif (pendingExecutions.length < concurrencyLimit) {\n\t\t\t\t\t\treturn [];\n\t\t\t\t\t}\n\t\t\t\t\tconst events: AgentEvent[] = [];\n\t\t\t\t\twhile (pendingExecutions.length >= concurrencyLimit) {\n\t\t\t\t\t\tconst next = await waitForNextExecutionOrUpdate(\n\t\t\t\t\t\t\tpendingExecutions,\n\t\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t\t);\n\t\t\t\t\t\tif (next.kind === \"update\") {\n\t\t\t\t\t\t\tevents.push(next.event);\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tconst outcome = next.outcome;\n\t\t\t\t\t\tevents.push(\n\t\t\t\t\t\t\t...emitToolResult(\n\t\t\t\t\t\t\t\toutcome.message,\n\t\t\t\t\t\t\t\tnext.execution.toolCall,\n\t\t\t\t\t\t\t\toutcome.isError,\n\t\t\t\t\t\t\t\t{\n\t\t\t\t\t\t\t\t\ttoolExecutionId: outcome.toolExecutionId,\n\t\t\t\t\t\t\t\t\tapprovalRequestId: outcome.approvalRequestId,\n\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t),\n\t\t\t\t\t\t);\n\t\t\t\t\t\tawait checkSteering();\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\treturn events;\n\t\t\t\t};\n\n\t\t\t\tfor (\n\t\t\t\t\tlet toolIndex = 0;\n\t\t\t\t\ttoolIndex < toolCallsToExecute.length;\n\t\t\t\t\ttoolIndex++\n\t\t\t\t) {\n\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t\tconst toolCall = toolCallsToExecute[toolIndex];\n\t\t\t\t\tif (!toolCall) continue;\n\n\t\t\t\t\t// Run safety pipeline (rate limiting, hooks, firewall, approval, validation)\n\t\t\t\t\tconst safetyIterator = evaluateToolSafety({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\ttools,\n\t\t\t\t\t\tuserMessage,\n\t\t\t\t\t\tcfg,\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tclock: this.clock,\n\t\t\t\t\t\tsafetyMiddleware: this.safetyMiddleware,\n\t\t\t\t\t\tworkflowState: this.workflowState,\n\t\t\t\t\t\tadaptiveThresholds: this.adaptiveThresholds,\n\t\t\t\t\t\tauditLogger: this.auditLogger,\n\t\t\t\t\t\tapprovalService: this.options.approvalService,\n\t\t\t\t\t\ttoolExecutionBridge:\n\t\t\t\t\t\t\tthis.options.platformToolExecutionBridge === false\n\t\t\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t\t\t: (this.options.platformToolExecutionBridge ??\n\t\t\t\t\t\t\t\t\tgetDefaultPlatformToolExecutionBridge()),\n\t\t\t\t\t\thookService,\n\t\t\t\t\t\tfirewall,\n\t\t\t\t\t\trateLimitState: {\n\t\t\t\t\t\t\trecentToolTimestamps: this.recentToolTimestamps,\n\t\t\t\t\t\t\ttoolCallsThisMinute: this.toolCallsThisMinute,\n\t\t\t\t\t\t\tminuteWindowStart: this.minuteWindowStart,\n\t\t\t\t\t\t\trateWindowMs: ProviderTransport.TOOL_RATE_WINDOW_MS,\n\t\t\t\t\t\t\trateLimit: ProviderTransport.TOOL_RATE_LIMIT,\n\t\t\t\t\t\t},\n\t\t\t\t\t\temitToolResult,\n\t\t\t\t\t});\n\t\t\t\t\tlet safetyVerdict: ToolSafetyVerdict | undefined;\n\t\t\t\t\tlet rateLimitUpdate:\n\t\t\t\t\t\t| { toolCallsThisMinute: number; minuteWindowStart: number }\n\t\t\t\t\t\t| undefined;\n\t\t\t\t\twhile (true) {\n\t\t\t\t\t\tconst safetyStep = await safetyIterator.next();\n\t\t\t\t\t\tif (safetyStep.done) {\n\t\t\t\t\t\t\t({ verdict: safetyVerdict, rateLimitUpdate } = safetyStep.value);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tyield safetyStep.value;\n\t\t\t\t\t}\n\t\t\t\t\tif (!safetyVerdict || !rateLimitUpdate) {\n\t\t\t\t\t\tthrow new Error(\"Safety pipeline did not return a verdict.\");\n\t\t\t\t\t}\n\n\t\t\t\t\t// Apply rate limit state updates\n\t\t\t\t\tthis.toolCallsThisMinute = rateLimitUpdate.toolCallsThisMinute;\n\t\t\t\t\tthis.minuteWindowStart = rateLimitUpdate.minuteWindowStart;\n\n\t\t\t\t\tif (safetyVerdict.outcome === \"blocked\") {\n\t\t\t\t\t\tawait checkSteering();\n\t\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex + 1);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\n\t\t\t\t\tconst {\n\t\t\t\t\t\teffectiveToolCall,\n\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\ttoolDef: tool,\n\t\t\t\t\t\tsanitizedExecutionArgs,\n\t\t\t\t\t} = safetyVerdict;\n\t\t\t\t\t// Use hook-modified (pre-validation) args for hook inputs\n\n\t\t\t\t\t// For client tools, set up the execution promise first, then emit event\n\t\t\t\t\t// This prevents race conditions where the client responds before we're listening\n\t\t\t\t\tlet clientToolExecPromise:\n\t\t\t\t\t\t| ReturnType<ClientToolExecutionService[\"requestExecution\"]>\n\t\t\t\t\t\t| undefined;\n\t\t\t\t\tif (\n\t\t\t\t\t\ttool.executionLocation === \"client\" &&\n\t\t\t\t\t\tthis.options.clientToolService\n\t\t\t\t\t) {\n\t\t\t\t\t\tclientToolExecPromise =\n\t\t\t\t\t\t\tthis.options.clientToolService.requestExecution(\n\t\t\t\t\t\t\t\ttoolCall.id,\n\t\t\t\t\t\t\t\ttoolCall.name,\n\t\t\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\t\t\tsignal,\n\t\t\t\t\t\t\t);\n\t\t\t\t\t\t// Now emit the event - the promise is already waiting for the result\n\t\t\t\t\t\tyield {\n\t\t\t\t\t\t\ttype: \"client_tool_request\",\n\t\t\t\t\t\t\ttoolCallId: toolCall.id,\n\t\t\t\t\t\t\ttoolName: toolCall.name,\n\t\t\t\t\t\t\t// Client tools execute out-of-process; they need the real args.\n\t\t\t\t\t\t\targs: validatedArgs,\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\n\t\t\t\t\tconst executionPromise = createToolExecutionPromise({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\teffectiveToolCall,\n\t\t\t\t\t\ttool,\n\t\t\t\t\t\tvalidatedArgs,\n\t\t\t\t\t\tsanitizedExecutionArgs,\n\t\t\t\t\t\tcfg,\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t\tclock: this.clock,\n\t\t\t\t\t\tsafetyMiddleware: this.safetyMiddleware,\n\t\t\t\t\t\tadaptiveThresholds: this.adaptiveThresholds,\n\t\t\t\t\t\tauditLogger: this.auditLogger,\n\t\t\t\t\t\thookService,\n\t\t\t\t\t\ttoolRetryService: this.options.toolRetryService,\n\t\t\t\t\t\ttoolRetryConfig: this.options.toolRetryConfig,\n\t\t\t\t\t\tclientToolService: this.options.clientToolService,\n\t\t\t\t\t\ttoolExecutionBridge:\n\t\t\t\t\t\t\tthis.options.platformToolExecutionBridge === false\n\t\t\t\t\t\t\t\t? undefined\n\t\t\t\t\t\t\t\t: (this.options.platformToolExecutionBridge ??\n\t\t\t\t\t\t\t\t\tgetDefaultPlatformToolExecutionBridge()),\n\t\t\t\t\t\ttoolExecutionBridgePlan: safetyVerdict.toolExecutionBridgePlan,\n\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t\tclientToolExecPromise,\n\t\t\t\t\t});\n\n\t\t\t\t\tpendingExecutions.push({\n\t\t\t\t\t\ttoolCall,\n\t\t\t\t\t\tpromise: executionPromise,\n\t\t\t\t\t});\n\t\t\t\t\tconst events = await scheduleResolveIfNeeded();\n\t\t\t\t\tfor (const event of events) {\n\t\t\t\t\t\tyield event;\n\t\t\t\t\t}\n\t\t\t\t\tif (steeringTriggered) {\n\t\t\t\t\t\tremainingToolCalls = toolCallsToExecute.slice(toolIndex + 1);\n\t\t\t\t\t\tbreak;\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\twhile (pendingExecutions.length > 0) {\n\t\t\t\t\tconst next = await waitForNextExecutionOrUpdate(\n\t\t\t\t\t\tpendingExecutions,\n\t\t\t\t\t\ttoolUpdateQueue,\n\t\t\t\t\t);\n\t\t\t\t\tif (next.kind === \"update\") {\n\t\t\t\t\t\tyield next.event;\n\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t\tconst outcome = next.outcome;\n\t\t\t\t\tfor (const event of emitToolResult(\n\t\t\t\t\t\toutcome.message,\n\t\t\t\t\t\tnext.execution.toolCall,\n\t\t\t\t\t\toutcome.isError,\n\t\t\t\t\t\t{\n\t\t\t\t\t\t\ttoolExecutionId: outcome.toolExecutionId,\n\t\t\t\t\t\t\tapprovalRequestId: outcome.approvalRequestId,\n\t\t\t\t\t\t},\n\t\t\t\t\t)) {\n\t\t\t\t\t\tyield event;\n\t\t\t\t\t}\n\t\t\t\t\tawait checkSteering();\n\t\t\t\t}\n\n\t\t\t\tthis.safetyMiddleware.clearCredentials();\n\n\t\t\t\tif (steeringTriggered && remainingToolCalls.length > 0) {\n\t\t\t\t\tfor (const toolCall of remainingToolCalls) {\n\t\t\t\t\t\tfor (const event of emitSkippedToolCall(toolCall)) {\n\t\t\t\t\t\t\tyield event;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\tif (!steeringTriggered && getSteeringMessages) {\n\t\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\t\tsteeringAfterTools = steering;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (completedAssistantMessage) {\n\t\t\t\tallMessages.push(completedAssistantMessage);\n\t\t\t}\n\t\t\tallMessages.push(...toolResults);\n\n\t\t\tyield {\n\t\t\t\ttype: \"turn_end\",\n\t\t\t\tmessage: completedAssistantMessage ??\n\t\t\t\t\tcurrentAssistantMessage ?? {\n\t\t\t\t\t\trole: \"assistant\",\n\t\t\t\t\t\tcontent: [],\n\t\t\t\t\t\tapi: model.api,\n\t\t\t\t\t\tprovider: model.provider,\n\t\t\t\t\t\tmodel: model.id,\n\t\t\t\t\t\tusage: {\n\t\t\t\t\t\t\tinput: 0,\n\t\t\t\t\t\t\toutput: 0,\n\t\t\t\t\t\t\tcacheRead: 0,\n\t\t\t\t\t\t\tcacheWrite: 0,\n\t\t\t\t\t\t\tcost: {\n\t\t\t\t\t\t\t\tinput: 0,\n\t\t\t\t\t\t\t\toutput: 0,\n\t\t\t\t\t\t\t\tcacheRead: 0,\n\t\t\t\t\t\t\t\tcacheWrite: 0,\n\t\t\t\t\t\t\t\ttotal: 0,\n\t\t\t\t\t\t\t},\n\t\t\t\t\t\t},\n\t\t\t\t\t\tstopReason: \"error\",\n\t\t\t\t\t\ttimestamp: this.clock.now(),\n\t\t\t\t\t},\n\t\t\t\ttoolResults,\n\t\t\t};\n\n\t\t\tif (steeringAfterTools && steeringAfterTools.length > 0) {\n\t\t\t\tpendingMessages = steeringAfterTools;\n\t\t\t} else if (getSteeringMessages) {\n\t\t\t\tconst steering = await getSteeringMessages<AppMessage>();\n\t\t\t\tif (steering.length > 0) {\n\t\t\t\t\tpendingMessages = steering;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (\n\t\t\t\t!pendingNextTurn &&\n\t\t\t\tpendingMessages.length === 0 &&\n\t\t\t\tgetFollowUpMessages\n\t\t\t) {\n\t\t\t\tconst followUps = await getFollowUpMessages<AppMessage>();\n\t\t\t\tif (followUps.length > 0) {\n\t\t\t\t\tpendingMessages = followUps;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (pendingMessages.length > 0) {\n\t\t\t\tpendingNextTurn = true;\n\t\t\t}\n\n\t\t\thasMoreToolCalls = encounteredError ? false : pendingNextTurn;\n\t\t\tif (encounteredError) {\n\t\t\t\tcfg.queryProfiler?.terminal(\"turn:error\");\n\t\t\t} else if (!hasMoreToolCalls) {\n\t\t\t\tcfg.queryProfiler?.terminal(\"turn:complete\", {\n\t\t\t\t\ttool_results: toolResults.length,\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n}\n"]}

package/dist/agent/types.d.ts

@@ -32,6 +32,8 @@
  */
 import type { TSchema } from "@sinclair/typebox";
 import type { PromptMetadata } from "../prompts/types.js";
+import type { SkillArtifactMetadata } from "../skills/artifact-metadata.js";
+import type { CheckpointProfiler } from "../utils/checkpoint-profiler.js";
 import type { ActionApprovalDecision, ActionApprovalRequest } from "./action-approval.js";
 import type { ToolRetryDecision, ToolRetryRequest } from "./tool-retry.js";
 /**
@@ -40,12 +42,13 @@ import type { ToolRetryDecision, ToolRetryRequest } from "./tool-retry.js";
  * Each provider may support different API formats:
  * - `openai-completions` - OpenAI Chat Completions API
  * - `openai-responses` - OpenAI Responses API (newer format)
+ * - `openai-codex-responses` - ChatGPT Codex Responses backend
  * - `anthropic-messages` - Anthropic Messages API
  * - `google-generative-ai` - Google Generative AI (Gemini)
  * - `google-gemini-cli` - Google Cloud Code Assist (Gemini CLI)
  * - `bedrock-converse` - AWS Bedrock Converse API
  */
-export type Api = "openai-completions" | "openai-responses" | "anthropic-messages" | "google-generative-ai" | "google-gemini-cli" | "bedrock-converse" | "vertex-ai";
+export type Api = "openai-completions" | "openai-responses" | "openai-codex-responses" | "anthropic-messages" | "google-generative-ai" | "google-gemini-cli" | "bedrock-converse" | "vertex-ai";
 export interface OpenAICompatOverrides {
     supportsStore?: boolean;
     supportsDeveloperRole?: boolean;
@@ -75,7 +78,7 @@ export interface OpenAICompatOverrides {
  * - `openrouter` - OpenRouter (aggregator)
  * - `zai` - ZAI
  */
-export type KnownProvider = "anthropic" | "bedrock" | "google" | "openai" | "azure-openai" | "writer" | "xai" | "groq" | "cerebras" | "openrouter" | "zai";
+export type KnownProvider = "anthropic" | "bedrock" | "google" | "openai" | "openai-codex" | "azure-openai" | "writer" | "xai" | "groq" | "cerebras" | "openrouter" | "zai";
 /**
  * Provider identifier - either a known provider or a custom string.
  * Custom providers can be used with OpenAI-compatible APIs.
@@ -994,6 +997,8 @@ export type AgentEvent = {
     type: "tool_execution_start";
     /** Tool call identifier */
     toolCallId: string;
+    /** Optional Platform ToolExecution identifier */
+    toolExecutionId?: string;
     /** Name of the tool */
     toolName: string;
     /** Optional human-facing label for live UI */
@@ -1007,6 +1012,16 @@ export type AgentEvent = {
     type: "tool_execution_end";
     /** Tool call identifier */
     toolCallId: string;
+    /** Optional Platform ToolExecution identifier */
+    toolExecutionId?: string;
+    /** Optional approval request identifier correlated to Platform ToolExecution */
+    approvalRequestId?: string;
+    /** Optional stable error or outcome code for telemetry and clients */
+    errorCode?: string;
+    /** Optional governed outcome classification surfaced by the tool result */
+    governedOutcome?: "approval_required" | "approval_pending" | "authentication_required" | "denied" | "rate_limited";
+    /** Optional selected skill artifact metadata surfaced by the tool result */
+    skillMetadata?: SkillArtifactMetadata;
     /** Name of the tool */
     toolName: string;
     /** Optional human-facing label for live UI */
@@ -1017,6 +1032,35 @@ export type AgentEvent = {
     result: ToolResultMessage;
     /** Whether the tool returned an error */
     isError: boolean;
+} | {
+    /** LSP diagnostic delta produced by an edit/write tool call */
+    type: "diagnostic_delta";
+    /** Tool call identifier */
+    toolCallId: string;
+    /** Name of the tool */
+    toolName: string;
+    /** File affected by the diagnostic delta */
+    file: string;
+    /** User-facing file path from the tool call */
+    displayPath: string;
+    /** Whether a pre-edit baseline was available */
+    usedDelta: boolean;
+    /** Newly introduced diagnostic count */
+    introducedCount: number;
+    /** Diagnostics repaired by the tool call */
+    repairedCount: number;
+    /** Remaining diagnostics for the affected file */
+    remainingCount: number;
+    /** Stable fingerprint for introduced diagnostics */
+    fingerprint: string;
+    /** Repair attempt number for this fingerprint */
+    repairAttempt?: number;
+    /** Maximum automatic repair attempts for this fingerprint */
+    maxRepairAttempts?: number;
+    /** Whether Agent queued a follow-up repair turn */
+    willAutoFollowUp: boolean;
+    /** Why a repair follow-up was or was not queued */
+    reason: string;
 } | {
     /** Summary emitted after the final tool in a batch completes */
     type: "tool_batch_summary";
@@ -1206,6 +1250,8 @@ export interface AgentRunConfig {
     };
     /** Optional helper function for running LLM queries (e.g., for summarization) */
     runLLM?: (systemPrompt: string, userPrompt: string) => Promise<string>;
+    /** Optional debug checkpoint profiler for local query latency diagnostics. */
+    queryProfiler?: CheckpointProfiler;
     /** Optional sandbox for isolated tool execution */
     sandbox?: import("../sandbox/types.js").Sandbox;
     /** Sampling temperature override (0.0-2.0, lower = more deterministic) */
@@ -1273,6 +1319,8 @@ export interface StreamOptions {
     headers?: Record<string, string>;
     /** Additional request body fields for provider-specific extensions */
     requestBody?: Record<string, unknown>;
+    /** Stable session id for provider-side request grouping/cache keys */
+    sessionId?: string;
     /** Authentication type for the request */
     authType?: "api-key" | "anthropic-oauth";
     /** Optional Anthropic API-side task budget for the current turn */