@gaunt-sloth/core 2.0.0-alpha.22 → 2.0.0-alpha.24

package/dist/core/refusal.d.ts

@@ -0,0 +1,53 @@
+/**
+ * EXT-37 — content-policy refusal detection for the agent run loop.
+ *
+ * A *successful* model response (HTTP 200) can carry a stop/finish reason that means the model — or
+ * the provider's safety system — declined to answer. The content is usually empty, so without this
+ * detection the response falls through the empty-response retry in {@link GthAgentRunner} and is
+ * mis-surfaced as "no content, try again" — burning a second, paid call to reproduce a
+ * DETERMINISTIC refusal. This module normalizes the per-provider shapes into one signal so the run
+ * loop can surface the refusal clearly and terminate (never retry the same prompt).
+ *
+ * Prior art: hermes-agent `conversation_loop.py` treats `finish_reason == "content_filter"` as a
+ * terminal, non-retryable "content policy blocked" outcome and surfaces the model's explanation.
+ *
+ * Detection lives here (and is called from {@link GthAbstractAgent}, the invoke/stream loop over
+ * messages/chunks) because that is the only layer where a message's `response_metadata` /
+ * `additional_kwargs` — where finish/stop reasons live — are visible; `GthAgentRunner` only ever
+ * sees the rendered string.
+ */
+/** One detected refusal, normalized across providers. */
+export interface RefusalInfo {
+    /** Best-effort provider family the signal came from (for logging / the surfaced message). */
+    provider: 'openai' | 'anthropic' | 'bedrock' | 'unknown';
+    /** The raw stop/finish reason token that flagged the refusal (e.g. `content_filter`). */
+    reason: string;
+    /** Any model-provided explanation text (empty string when the refusal carried none). */
+    explanation: string;
+}
+/**
+ * Inspect a finished model message (an `AIMessage` / `AIMessageChunk`, or any object exposing
+ * `response_metadata` / `additional_kwargs`) and return a {@link RefusalInfo} when its stop/finish
+ * reason indicates a content-policy refusal, else `null`. Defensive: any non-message / unexpected
+ * shape yields `null`, so a normal turn is never mistaken for a refusal.
+ *
+ * Covered shapes:
+ *  - OpenAI-family `finish_reason: 'content_filter'` (also under `additional_kwargs`).
+ *  - Anthropic `stop_reason: 'refusal'`.
+ *  - Bedrock Converse guardrail intervention: `stopReason`/`stop_reason`/`finish_reason` ===
+ *    `'guardrail_intervened'`, or `additional_kwargs['amazon-bedrock-guardrailAction'] ===
+ *    `'INTERVENED'`.
+ *  - Bedrock Converse content filter: `stopReason`/`stop_reason`/`finish_reason` ===
+ *    `'content_filtered'` (EXT-41 — a distinct `StopReason` enum value from `guardrail_intervened`
+ *    that was previously mapped to `null`, i.e. a silent empty turn / false negative).
+ */
+export declare function detectRefusal(message: unknown): RefusalInfo | null;
+/**
+ * Build the clear, user-facing message shown when the model declines. Framed as the model /
+ * provider's own policy decision (not a Gaunt Sloth fault) and stated as terminal — a refusal is
+ * deterministic for the same input, so retrying as-is will not help. Any model-provided explanation
+ * is included verbatim. This string is BOTH surfaced to the console and RETURNED as the turn's
+ * answer, so the non-interactive caller writes it to the output file and exits `ok` (it is a
+ * successful, if declined, response — not a failure to be re-wrapped as "Failed to get answer").
+ */
+export declare function buildRefusalMessage(info: RefusalInfo): string;

package/dist/core/refusal.js

@@ -0,0 +1,129 @@
+/**
+ * EXT-37 — content-policy refusal detection for the agent run loop.
+ *
+ * A *successful* model response (HTTP 200) can carry a stop/finish reason that means the model — or
+ * the provider's safety system — declined to answer. The content is usually empty, so without this
+ * detection the response falls through the empty-response retry in {@link GthAgentRunner} and is
+ * mis-surfaced as "no content, try again" — burning a second, paid call to reproduce a
+ * DETERMINISTIC refusal. This module normalizes the per-provider shapes into one signal so the run
+ * loop can surface the refusal clearly and terminate (never retry the same prompt).
+ *
+ * Prior art: hermes-agent `conversation_loop.py` treats `finish_reason == "content_filter"` as a
+ * terminal, non-retryable "content policy blocked" outcome and surfaces the model's explanation.
+ *
+ * Detection lives here (and is called from {@link GthAbstractAgent}, the invoke/stream loop over
+ * messages/chunks) because that is the only layer where a message's `response_metadata` /
+ * `additional_kwargs` — where finish/stop reasons live — are visible; `GthAgentRunner` only ever
+ * sees the rendered string.
+ */
+/** Read a nested record field defensively (returns undefined for non-objects / missing keys). */
+function readField(source, key) {
+    if (!source || typeof source !== 'object')
+        return undefined;
+    return source[key];
+}
+/** Pull any human-readable explanation the refusal carried (message content, then reasoning). */
+function extractRefusalText(message) {
+    const content = readField(message, 'content');
+    if (typeof content === 'string' && content.trim().length > 0)
+        return content.trim();
+    // Content-block arrays (Anthropic / Bedrock): concatenate any text parts.
+    if (Array.isArray(content)) {
+        const text = content
+            .map((part) => {
+            if (typeof part === 'string')
+                return part;
+            const t = readField(part, 'text');
+            return typeof t === 'string' ? t : '';
+        })
+            .join('')
+            .trim();
+        if (text.length > 0)
+            return text;
+    }
+    // Some refusals put the explanation only in the reasoning channel.
+    const kwargs = readField(message, 'additional_kwargs');
+    const reasoning = readField(kwargs, 'reasoning_content');
+    if (typeof reasoning === 'string' && reasoning.trim().length > 0)
+        return reasoning.trim();
+    // Anthropic exposes the declined text on a dedicated `refusal` field in some SDK shapes.
+    const refusalField = readField(kwargs, 'refusal') ?? readField(message, 'refusal');
+    if (typeof refusalField === 'string' && refusalField.trim().length > 0)
+        return refusalField.trim();
+    return '';
+}
+/**
+ * Inspect a finished model message (an `AIMessage` / `AIMessageChunk`, or any object exposing
+ * `response_metadata` / `additional_kwargs`) and return a {@link RefusalInfo} when its stop/finish
+ * reason indicates a content-policy refusal, else `null`. Defensive: any non-message / unexpected
+ * shape yields `null`, so a normal turn is never mistaken for a refusal.
+ *
+ * Covered shapes:
+ *  - OpenAI-family `finish_reason: 'content_filter'` (also under `additional_kwargs`).
+ *  - Anthropic `stop_reason: 'refusal'`.
+ *  - Bedrock Converse guardrail intervention: `stopReason`/`stop_reason`/`finish_reason` ===
+ *    `'guardrail_intervened'`, or `additional_kwargs['amazon-bedrock-guardrailAction'] ===
+ *    `'INTERVENED'`.
+ *  - Bedrock Converse content filter: `stopReason`/`stop_reason`/`finish_reason` ===
+ *    `'content_filtered'` (EXT-41 — a distinct `StopReason` enum value from `guardrail_intervened`
+ *    that was previously mapped to `null`, i.e. a silent empty turn / false negative).
+ */
+export function detectRefusal(message) {
+    if (!message || typeof message !== 'object')
+        return null;
+    const meta = readField(message, 'response_metadata');
+    const kwargs = readField(message, 'additional_kwargs');
+    // Gather the stop/finish reason from every place providers surface it.
+    const finishReason = readField(meta, 'finish_reason') ?? readField(kwargs, 'finish_reason') ?? undefined;
+    const stopReasonSnake = readField(meta, 'stop_reason') ?? readField(kwargs, 'stop_reason') ?? undefined;
+    const stopReasonCamel = readField(meta, 'stopReason') ?? readField(kwargs, 'stopReason') ?? undefined;
+    const asString = (v) => (typeof v === 'string' ? v : undefined);
+    const finish = asString(finishReason);
+    const stopSnake = asString(stopReasonSnake);
+    const stopCamel = asString(stopReasonCamel);
+    const explanation = extractRefusalText(message);
+    // OpenAI-family content filter.
+    if (finish === 'content_filter') {
+        return { provider: 'openai', reason: 'content_filter', explanation };
+    }
+    // Anthropic refusal stop reason.
+    if (stopSnake === 'refusal' || stopCamel === 'refusal') {
+        return { provider: 'anthropic', reason: 'refusal', explanation };
+    }
+    // Bedrock Converse guardrail intervention (camelCase `stopReason`, or snake / finish variants).
+    if (stopCamel === 'guardrail_intervened' ||
+        stopSnake === 'guardrail_intervened' ||
+        finish === 'guardrail_intervened' ||
+        readField(kwargs, 'amazon-bedrock-guardrailAction') === 'INTERVENED' ||
+        readField(meta, 'amazon-bedrock-guardrailAction') === 'INTERVENED') {
+        return { provider: 'bedrock', reason: 'guardrail_intervened', explanation };
+    }
+    // EXT-41 — Bedrock Converse content filter. A distinct `StopReason` enum value from
+    // `guardrail_intervened` (both live in the same AWS Converse `StopReason` enum); previously
+    // unmapped, so a content-filtered turn returned `null` → the silent empty-turn false negative.
+    if (stopCamel === 'content_filtered' ||
+        stopSnake === 'content_filtered' ||
+        finish === 'content_filtered') {
+        return { provider: 'bedrock', reason: 'content_filtered', explanation };
+    }
+    return null;
+}
+/**
+ * Build the clear, user-facing message shown when the model declines. Framed as the model /
+ * provider's own policy decision (not a Gaunt Sloth fault) and stated as terminal — a refusal is
+ * deterministic for the same input, so retrying as-is will not help. Any model-provided explanation
+ * is included verbatim. This string is BOTH surfaced to the console and RETURNED as the turn's
+ * answer, so the non-interactive caller writes it to the output file and exits `ok` (it is a
+ * successful, if declined, response — not a failure to be re-wrapped as "Failed to get answer").
+ */
+export function buildRefusalMessage(info) {
+    const head = 'The model declined to respond (safety refusal / content filter) — this is the ' +
+        "model/provider's own policy decision, not a Gaunt Sloth error.";
+    const detail = info.explanation
+        ? `Model's explanation: ${info.explanation}`
+        : 'The model provided no explanation.';
+    const hint = 'A refusal is deterministic for the same input — rephrase the request or try a different ' +
+        'model rather than re-running it as-is.';
+    return `${head}\n\n${detail}\n\n${hint}`;
+}
+//# sourceMappingURL=refusal.js.map

package/dist/core/refusal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/core/refusal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,iGAAiG;AACjG,SAAS,SAAS,CAAC,MAAe,EAAE,GAAW;IAC7C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC5D,OAAQ,MAAkC,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,iGAAiG;AACjG,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACpF,0EAA0E;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,OAAO;aACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC;aACD,IAAI,CAAC,EAAE,CAAC;aACR,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IACD,mEAAmE;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACzD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,EAAE,CAAC;IAC1F,yFAAyF;IACzF,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnF,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACpE,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAEvD,uEAAuE;IACvE,MAAM,YAAY,GAChB,SAAS,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,SAAS,CAAC;IACtF,MAAM,eAAe,GACnB,SAAS,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,SAAS,CAAC;IAClF,MAAM,eAAe,GACnB,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC;IAEhF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAEhD,gCAAgC;IAChC,IAAI,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,CAAC;IACvE,CAAC;IACD,iCAAiC;IACjC,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACnE,CAAC;IACD,gGAAgG;IAChG,IACE,SAAS,KAAK,sBAAsB;QACpC,SAAS,KAAK,sBAAsB;QACpC,MAAM,KAAK,sBAAsB;QACjC,SAAS,CAAC,MAAM,EAAE,gCAAgC,CAAC,KAAK,YAAY;QACpE,SAAS,CAAC,IAAI,EAAE,gCAAgC,CAAC,KAAK,YAAY,EAClE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAC;IAC9E,CAAC;IACD,oFAAoF;IACpF,4FAA4F;IAC5F,+FAA+F;IAC/F,IACE,SAAS,KAAK,kBAAkB;QAChC,SAAS,KAAK,kBAAkB;QAChC,MAAM,KAAK,kBAAkB,EAC7B,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC;IAC1E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB;IACnD,MAAM,IAAI,GACR,gFAAgF;QAChF,gEAAgE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW;QAC7B,CAAC,CAAC,wBAAwB,IAAI,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,oCAAoC,CAAC;IACzC,MAAM,IAAI,GACR,0FAA0F;QAC1F,wCAAwC,CAAC;IAC3C,OAAO,GAAG,IAAI,OAAO,MAAM,OAAO,IAAI,EAAE,CAAC;AAC3C,CAAC"}

package/dist/core/runStats.d.ts

@@ -10,7 +10,14 @@
  * message chunks / `ToolMessage`s as they arrive), across providers whose message shapes vary.
  * Nothing here may throw into a run — a missing/odd field just means that datum is skipped.
  */
-import type { GthRunStats } from '#src/core/types.js';
+import type { GthRunStats, GthToolResult } from '#src/core/types.js';
+/**
+ * BATCH-21 — cap on a captured tool-result `content` (characters). Keeps a giant payload (a whole
+ * file read, a long shell log) from bloating run stats; anything longer is truncated to this
+ * length. Sized so realistic structured payloads (the `gth eval` tool-result-assertion use case)
+ * survive intact.
+ */
+export declare const TOOL_RESULT_CONTENT_CAP = 8192;
 /** Mutable tally behind {@link finalizeRunStats}; see {@link createRunStatsAccumulator}. */
 export interface RunStatsAccumulator {
     /** Running sum of input/prompt tokens. */
@@ -21,15 +28,19 @@ export interface RunStatsAccumulator {
     sawUsage: boolean;
     /** Deduplicated set of invoked tool names. */
     tools: Set<string>;
+    /** BATCH-21 — one record per executed tool result (`ToolMessage`), in arrival order, un-deduped. */
+    toolResults: GthToolResult[];
 }
 /** A fresh, empty accumulator. */
 export declare function createRunStatsAccumulator(): RunStatsAccumulator;
 /**
  * Fold one LangChain message (or message chunk) into the accumulator. Fail-soft: any unexpected
  * shape is swallowed so a run is never affected. Harvests, when present:
- * - `usage_metadata.input_tokens` / `.output_tokens` (summed; marks `sawUsage`), and
+ * - `usage_metadata.input_tokens` / `.output_tokens` (summed; marks `sawUsage`),
  * - tool names from an AIMessage's requested `tool_calls[].name` AND from a `ToolMessage`'s own
- *   `.name` (the executed tool), so both "requested" and "executed" tools are captured.
+ *   `.name` (the executed tool), so both "requested" and "executed" tools are captured, and
+ * - (BATCH-21) a per-`ToolMessage` result record — `name` + `isError` (from `.status`) + capped
+ *   `content` — into `acc.toolResults`, so tool-RESULT assertions can grade what a tool returned.
  */
 export declare function accumulateMessage(acc: RunStatsAccumulator, message: unknown): void;
 /** Freeze the accumulator into the public {@link GthRunStats}. Tokens omitted unless observed. */

package/dist/core/runStats.js

@@ -1,13 +1,47 @@
+/**
+ * BATCH-21 — cap on a captured tool-result `content` (characters). Keeps a giant payload (a whole
+ * file read, a long shell log) from bloating run stats; anything longer is truncated to this
+ * length. Sized so realistic structured payloads (the `gth eval` tool-result-assertion use case)
+ * survive intact.
+ */
+export const TOOL_RESULT_CONTENT_CAP = 8192;
 /** A fresh, empty accumulator. */
 export function createRunStatsAccumulator() {
-    return { input: 0, output: 0, sawUsage: false, tools: new Set() };
+    return { input: 0, output: 0, sawUsage: false, tools: new Set(), toolResults: [] };
+}
+/**
+ * BATCH-21 — derive a tool result's text payload from a `ToolMessage.content`, fail-soft. A string
+ * passes through; anything else non-`undefined` is JSON-stringified (the same derivation the
+ * `tool_result` stream event uses in `GthAbstractAgent`); the result is capped at
+ * {@link TOOL_RESULT_CONTENT_CAP}. Returns `undefined` (payload omitted) when nothing textual can
+ * be derived — never throws.
+ */
+function toolResultContentText(content) {
+    try {
+        let text;
+        if (typeof content === 'string') {
+            text = content;
+        }
+        else if (content !== undefined) {
+            text = JSON.stringify(content);
+        }
+        if (text === undefined)
+            return undefined;
+        return text.length > TOOL_RESULT_CONTENT_CAP ? text.slice(0, TOOL_RESULT_CONTENT_CAP) : text;
+    }
+    catch {
+        /* fail-soft: an unstringifiable payload just means no content is recorded */
+        return undefined;
+    }
 }
 /**
  * Fold one LangChain message (or message chunk) into the accumulator. Fail-soft: any unexpected
  * shape is swallowed so a run is never affected. Harvests, when present:
- * - `usage_metadata.input_tokens` / `.output_tokens` (summed; marks `sawUsage`), and
+ * - `usage_metadata.input_tokens` / `.output_tokens` (summed; marks `sawUsage`),
  * - tool names from an AIMessage's requested `tool_calls[].name` AND from a `ToolMessage`'s own
- *   `.name` (the executed tool), so both "requested" and "executed" tools are captured.
+ *   `.name` (the executed tool), so both "requested" and "executed" tools are captured, and
+ * - (BATCH-21) a per-`ToolMessage` result record — `name` + `isError` (from `.status`) + capped
+ *   `content` — into `acc.toolResults`, so tool-RESULT assertions can grade what a tool returned.
  */
 export function accumulateMessage(acc, message) {
     try {
@@ -39,6 +73,16 @@ export function accumulateMessage(acc, message) {
         const type = typeof m.getType === 'function' ? m.getType() : m._getType?.();
         if (type === 'tool' && typeof m.name === 'string' && m.name.length > 0) {
             acc.tools.add(m.name);
+            // BATCH-21 — capture the RESULT record too (same capture site, same fail-soft discipline):
+            // `.status === 'error'` is LangChain's real tool-error signal, `.content` the returned
+            // payload (capped; omitted when no text can be derived). One record per ToolMessage, in
+            // arrival order — deliberately NOT deduplicated, unlike the name set above.
+            const content = toolResultContentText(m.content);
+            acc.toolResults.push({
+                name: m.name,
+                isError: m.status === 'error',
+                ...(content !== undefined ? { content } : {}),
+            });
         }
     }
     catch {
@@ -51,6 +95,7 @@ export function finalizeRunStats(acc) {
         tokensInput: acc.sawUsage ? acc.input : undefined,
         tokensOutput: acc.sawUsage ? acc.output : undefined,
         tools: [...acc.tools],
+        toolResults: [...acc.toolResults],
     };
 }
 /**

package/dist/core/runStats.js.map

@@ -1 +1 @@
-{"version":3,"file":"runStats.js","sourceRoot":"","sources":["../../src/core/runStats.ts"],"names":[],"mappings":"AA0BA,kCAAkC;AAClC,MAAM,UAAU,yBAAyB;IACvC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAwB,EAAE,OAAgB;IAC1E,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,CAAC,GAAG,OAAc,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QAExC,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC;QAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC;YAClC,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;YACpC,CAAC;QACH,CAAC;QAED,uFAAuF;QACvF,0FAA0F;QAC1F,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;gBACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,MAAM,IAAI,GAAY,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,GAAwB;IACvD,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACjD,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACnD,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"runStats.js","sourceRoot":"","sources":["../../src/core/runStats.ts"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAgB5C,kCAAkC;AAClC,MAAM,UAAU,yBAAyB;IACvC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,IAAI,CAAC;QACH,IAAI,IAAwB,CAAC;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;aAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,IAAI,CAAC,MAAM,GAAG,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAwB,EAAE,OAAgB;IAC1E,IAAI,CAAC;QACH,8DAA8D;QAC9D,MAAM,CAAC,GAAG,OAAc,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO;QAExC,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC;QAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YACpB,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClF,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,YAAY,CAAC;YAClC,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;gBACpF,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC;YACpC,CAAC;QACH,CAAC;QAED,uFAAuF;QACvF,0FAA0F;QAC1F,MAAM,SAAS,GAAG,CAAC,CAAC,UAAU,CAAC;QAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC;gBACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,MAAM,IAAI,GAAY,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrF,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,2FAA2F;YAC3F,uFAAuF;YACvF,wFAAwF;YACxF,4EAA4E;YAC5E,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACjD,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,OAAO;gBAC7B,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;IACvD,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,GAAwB;IACvD,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QACjD,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACnD,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACrB,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC,WAAW,CAAC;KAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,MAAM,GAAG,GAAG,yBAAyB,EAAE,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/dist/core/toolCallRepair/grammar.d.ts

@@ -0,0 +1,41 @@
+/** Legacy marker some models emit after a serialized JSON tool request. */
+export declare const END_TOOL_REQUEST = "[END_TOOL_REQUEST]";
+/** Harmony stream marker that introduces the target channel before a tool call. */
+export declare const HARMONY_CHANNEL_MARKER = "<|channel|>";
+/** Harmony stream marker that may separate the header from the JSON payload. */
+export declare const HARMONY_MESSAGE_MARKER = "<|message|>";
+/** Harmony stream marker that may close a serialized tool-call payload. */
+export declare const HARMONY_CALL_MARKER = "<|call|>";
+/**
+ * Harmony marker real gpt-oss emits in place of the reference grammar's literal `code` token —
+ * e.g. `<|constrain|>json` declares the tool-call payload format. (EXT-43.)
+ */
+export declare const HARMONY_CONSTRAIN_MARKER = "<|constrain|>";
+/** Tool names in bracket/plain-text repairs intentionally match provider-safe ids only. */
+export declare function isPlainTextToolNameChar(char: string | undefined): boolean;
+/**
+ * Harmony tool names may be NAMESPACED with dots (real gpt-oss emits `to=functions.get_weather`),
+ * so the Harmony header scanner accepts `.` on top of the provider-safe id chars. This is a
+ * Harmony-only widening (EXT-43): the bracket/XML-ish dialects keep {@link isPlainTextToolNameChar}
+ * unchanged so their prose-safety is untouched. The final dot-segment is the tool name matched
+ * against the allow-list (see {@link finalDotSegment}).
+ */
+export declare function isHarmonyToolNameChar(char: string | undefined): boolean;
+/**
+ * The tool name for a (possibly namespaced) Harmony target: the final dot-segment.
+ * `functions.get_weather` → `get_weather`; `functions.tools.get_weather` → `get_weather`; a dotless
+ * `get_weather` → itself. Returns `''` for a trailing-dot / empty final segment (rejected upstream).
+ */
+export declare function finalDotSegment(name: string): string;
+/** Skips spaces and tabs only, preserving line boundaries for grammar decisions. */
+export declare function skipHorizontalWhitespace(text: string, start: number): number;
+/** Skips all JavaScript whitespace when line structure is no longer meaningful. */
+export declare function skipWhitespace(text: string, start: number): number;
+/** Consumes either Unix or Windows line endings and returns the first offset after them. */
+export declare function consumeLineBreak(text: string, start: number): number | null;
+/**
+ * Finds the exclusive end offset of a balanced JSON object starting at `start`. Returns null if
+ * the object never closes, or (when `maxPayloadBytes` is set) as soon as the scan runs past the
+ * cap — the payload-size gate that keeps a runaway blob from being treated as a tool call.
+ */
+export declare function findJsonObjectEnd(text: string, start: number, maxPayloadBytes?: number): number | null;

package/dist/core/toolCallRepair/grammar.js

@@ -0,0 +1,116 @@
+// EXT-35 — plain-text tool-call repair grammar.
+//
+// Ported (TypeScript, gaunt-sloth house style) from the openclaw
+// `@openclaw/tool-call-repair` reference (`packages/tool-call-repair/src/grammar.ts`).
+// Only the low-level scanners the standalone-block parser in `./payload.ts` needs are
+// carried over; the reference's streaming/normalizer/strip helpers are intentionally omitted.
+//
+// These functions recognise the fixed protocol markers small/local models emit when they
+// serialise a tool call as assistant TEXT instead of a native tool_call. They do no allow-list
+// or size gating themselves — that lives in `./payload.ts` / `./promote.ts`.
+/** Legacy marker some models emit after a serialized JSON tool request. */
+export const END_TOOL_REQUEST = '[END_TOOL_REQUEST]';
+/** Harmony stream marker that introduces the target channel before a tool call. */
+export const HARMONY_CHANNEL_MARKER = '<|channel|>';
+/** Harmony stream marker that may separate the header from the JSON payload. */
+export const HARMONY_MESSAGE_MARKER = '<|message|>';
+/** Harmony stream marker that may close a serialized tool-call payload. */
+export const HARMONY_CALL_MARKER = '<|call|>';
+/**
+ * Harmony marker real gpt-oss emits in place of the reference grammar's literal `code` token —
+ * e.g. `<|constrain|>json` declares the tool-call payload format. (EXT-43.)
+ */
+export const HARMONY_CONSTRAIN_MARKER = '<|constrain|>';
+/** Tool names in bracket/plain-text repairs intentionally match provider-safe ids only. */
+export function isPlainTextToolNameChar(char) {
+    return Boolean(char && /[A-Za-z0-9_-]/.test(char));
+}
+/**
+ * Harmony tool names may be NAMESPACED with dots (real gpt-oss emits `to=functions.get_weather`),
+ * so the Harmony header scanner accepts `.` on top of the provider-safe id chars. This is a
+ * Harmony-only widening (EXT-43): the bracket/XML-ish dialects keep {@link isPlainTextToolNameChar}
+ * unchanged so their prose-safety is untouched. The final dot-segment is the tool name matched
+ * against the allow-list (see {@link finalDotSegment}).
+ */
+export function isHarmonyToolNameChar(char) {
+    return Boolean(char && /[A-Za-z0-9_.-]/.test(char));
+}
+/**
+ * The tool name for a (possibly namespaced) Harmony target: the final dot-segment.
+ * `functions.get_weather` → `get_weather`; `functions.tools.get_weather` → `get_weather`; a dotless
+ * `get_weather` → itself. Returns `''` for a trailing-dot / empty final segment (rejected upstream).
+ */
+export function finalDotSegment(name) {
+    const lastDot = name.lastIndexOf('.');
+    return lastDot === -1 ? name : name.slice(lastDot + 1);
+}
+/** Skips spaces and tabs only, preserving line boundaries for grammar decisions. */
+export function skipHorizontalWhitespace(text, start) {
+    let index = start;
+    while (index < text.length && (text[index] === ' ' || text[index] === '\t')) {
+        index += 1;
+    }
+    return index;
+}
+/** Skips all JavaScript whitespace when line structure is no longer meaningful. */
+export function skipWhitespace(text, start) {
+    let index = start;
+    while (index < text.length && /\s/.test(text[index] ?? '')) {
+        index += 1;
+    }
+    return index;
+}
+/** Consumes either Unix or Windows line endings and returns the first offset after them. */
+export function consumeLineBreak(text, start) {
+    if (text[start] === '\r') {
+        return text[start + 1] === '\n' ? start + 2 : start + 1;
+    }
+    if (text[start] === '\n') {
+        return start + 1;
+    }
+    return null;
+}
+/**
+ * Finds the exclusive end offset of a balanced JSON object starting at `start`. Returns null if
+ * the object never closes, or (when `maxPayloadBytes` is set) as soon as the scan runs past the
+ * cap — the payload-size gate that keeps a runaway blob from being treated as a tool call.
+ */
+export function findJsonObjectEnd(text, start, maxPayloadBytes) {
+    let depth = 0;
+    let inString = false;
+    let escaped = false;
+    for (let index = start; index < text.length; index += 1) {
+        if (maxPayloadBytes !== undefined && index + 1 - start > maxPayloadBytes) {
+            return null;
+        }
+        const char = text[index];
+        if (inString) {
+            if (escaped) {
+                escaped = false;
+            }
+            else if (char === '\\') {
+                escaped = true;
+            }
+            else if (char === '"') {
+                inString = false;
+            }
+            continue;
+        }
+        if (char === '"') {
+            inString = true;
+            continue;
+        }
+        if (char === '{') {
+            depth += 1;
+            continue;
+        }
+        if (char === '}') {
+            depth -= 1;
+            if (depth === 0) {
+                return index + 1;
+            }
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=grammar.js.map

package/dist/core/toolCallRepair/grammar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grammar.js","sourceRoot":"","sources":["../../../src/core/toolCallRepair/grammar.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iEAAiE;AACjE,uFAAuF;AACvF,sFAAsF;AACtF,8FAA8F;AAC9F,EAAE;AACF,yFAAyF;AACzF,+FAA+F;AAC/F,6EAA6E;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AACrD,mFAAmF;AACnF,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AACpD,gFAAgF;AAChF,MAAM,CAAC,MAAM,sBAAsB,GAAG,aAAa,CAAC;AACpD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAC9C;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,eAAe,CAAC;AAExD,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CAAC,IAAwB;IAC9D,OAAO,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAwB;IAC5D,OAAO,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,KAAa;IAClE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa;IACxD,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,KAAa,EACb,eAAwB;IAExB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,KAAK,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,eAAe,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,GAAG,KAAK,GAAG,eAAe,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACxB,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBAChB,OAAO,KAAK,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/toolCallRepair/index.d.ts

@@ -0,0 +1,2 @@
+export { parseStandalonePlainTextToolCallBlocks, type PlainTextToolCallBlock, type PlainTextToolCallParseOptions, } from './payload.js';
+export { textToNativeToolCalls, promoteTextEmittedToolCallMessage, MAX_TEXT_EMITTED_TOOL_CALL_PAYLOAD_BYTES, type TextToolCallRepairOptions, } from './promote.js';

package/dist/core/toolCallRepair/index.js

@@ -0,0 +1,7 @@
+// EXT-35 — plain-text tool-call repair: promote a text-emitted tool call to a native tool_call.
+// Ported/adapted from the openclaw `@openclaw/tool-call-repair` reference. See the sibling files
+// for the per-dialect grammar (`grammar.ts`), the standalone-block parser (`payload.ts`), and the
+// LangChain-message promotion + gates (`promote.ts`).
+export { parseStandalonePlainTextToolCallBlocks, } from './payload.js';
+export { textToNativeToolCalls, promoteTextEmittedToolCallMessage, MAX_TEXT_EMITTED_TOOL_CALL_PAYLOAD_BYTES, } from './promote.js';
+//# sourceMappingURL=index.js.map

package/dist/core/toolCallRepair/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/toolCallRepair/index.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,sDAAsD;AACtD,OAAO,EACL,sCAAsC,GAGvC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,iCAAiC,EACjC,wCAAwC,GAEzC,MAAM,cAAc,CAAC"}

package/dist/core/toolCallRepair/payload.d.ts

@@ -0,0 +1,36 @@
+/** Parsed standalone plain-text tool call block with source offsets for repair. */
+export type PlainTextToolCallBlock = {
+    /** Parsed JSON arguments object. */
+    arguments: Record<string, unknown>;
+    /** Exclusive end offset of the parsed block. */
+    end: number;
+    /** Tool name parsed from bracket, Harmony, or XML-ish syntax. */
+    name: string;
+    /** Original text slice that produced this block. */
+    raw: string;
+    /** Inclusive start offset of the parsed block. */
+    start: number;
+};
+/** Parser limits and allow-list options for plain-text tool-call repair. */
+export type PlainTextToolCallParseOptions = {
+    /** Optional allow-list of tool names that may be repaired. */
+    allowedToolNames?: Iterable<string>;
+    /** Maximum serialized payload size accepted for one repaired call. */
+    maxPayloadBytes?: number;
+};
+/**
+ * The single source of truth for the plain-text tool-call payload cap (256 KB). A serialized call
+ * larger than this is never treated as a tool call. Re-exported from `./promote.js` (and the module
+ * index) as `MAX_TEXT_EMITTED_TOOL_CALL_PAYLOAD_BYTES` — the public name — so there is ONE constant,
+ * not two duplicated literals. (EXT-43 unified the former `DEFAULT_MAX_PLAIN_TEXT_TOOL_PAYLOAD_BYTES`
+ * here with `promote.ts`'s copy.)
+ */
+export declare const MAX_TEXT_EMITTED_TOOL_CALL_PAYLOAD_BYTES = 256000;
+/**
+ * Parse the WHOLE input into standalone plain-text tool-call blocks, or return null if any part of
+ * it is not such a block. This all-or-nothing walk is the standalone-only gate: prose that merely
+ * mentions a tool name, contains brackets, or embeds a call inside a sentence never parses (the
+ * first non-block character aborts the parse). Allow-list + payload-cap gating are applied per
+ * block via {@link PlainTextToolCallParseOptions}.
+ */
+export declare function parseStandalonePlainTextToolCallBlocks(text: string, options?: PlainTextToolCallParseOptions): PlainTextToolCallBlock[] | null;