@mcoda/codali 0.1.133 → 0.1.135-codali.2

package/dist/runtime/Runner.d.ts

@@ -3,11 +3,19 @@ import { ToolRegistry } from "../tools/ToolRegistry.js";
 import type { ToolContext } from "../tools/ToolTypes.js";
 import type { RunLogger } from "./RunLogger.js";
 export interface RunnerOptions {
+    signal?: AbortSignal;
+    /** A controller may reject a premature final answer within this same bounded loop. */
+    continueAfterFinal?: (message: ProviderMessage) => string | undefined | Promise<string | undefined>;
+    onMessages?: (messages: ProviderMessage[]) => Promise<void>;
     provider: Provider;
     tools: ToolRegistry;
     context: ToolContext;
     maxSteps: number;
     maxToolCalls: number;
+    /** Reserve the last bounded worker step for summarizing gathered evidence. */
+    finalStepWithoutTools?: boolean;
+    /** Combined tool-result character budget per model turn, when bounded. */
+    maxToolResultChars?: number;
     maxTokens?: number;
     temperature?: number;
     responseFormat?: ProviderResponseFormat;
@@ -45,11 +53,15 @@ export declare class RunnerBudgetError extends Error {
     });
 }
 export declare class Runner {
+    private continueAfterFinal?;
+    private onMessages?;
     private provider;
     private tools;
     private context;
     private maxSteps;
     private maxToolCalls;
+    private finalStepWithoutTools;
+    private maxToolResultChars?;
     private maxTokens?;
     private temperature?;
     private responseFormat?;
@@ -60,6 +72,7 @@ export declare class Runner {
     private streamFlushMs?;
     private timeoutMs?;
     private logger?;
+    private signal?;
     constructor(options: RunnerOptions);
     run(initialMessages: ProviderMessage[]): Promise<RunnerResult>;
 }

package/dist/runtime/Runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Runner.d.ts","sourceRoot":"","sources":["../../src/runtime/Runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAEV,QAAQ,EACR,eAAe,EACf,eAAe,EACf,sBAAsB,EAEtB,aAAa,EACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,UAAU,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,eAAe,CAAC;IAC9B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAC9B,yBAAyB,GACzB,iCAAiC,GACjC,4BAA4B,CAAC;AAEjC,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE;QACjB,WAAW,EAAE,sBAAsB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,mBAAmB,EAAE,MAAM,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;gBAGA,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,mBAAmB,EAAE,MAAM,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAgBJ;AASD,qBAAa,MAAM;IACjB,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAC,CAAyB;IAChD,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,MAAM,CAAC,CAAU;IACzB,OAAO,CAAC,OAAO,CAAC,CAA8B;IAC9C,OAAO,CAAC,OAAO,CAAC,CAA0B;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAY;gBAEf,OAAO,EAAE,aAAa;IAkB5B,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAyLrE"}
+{"version":3,"file":"Runner.d.ts","sourceRoot":"","sources":["../../src/runtime/Runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EAEV,QAAQ,EACR,eAAe,EACf,eAAe,EACf,sBAAsB,EAEtB,aAAa,EACd,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,sFAAsF;IACtF,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,KAAK,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpG,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5D,QAAQ,EAAE,QAAQ,CAAC;IACnB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,WAAW,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,0EAA0E;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,sBAAsB,CAAC;IACxC,UAAU,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,IAAI,CAAC;IACtC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,eAAe,CAAC;IAC9B,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAC9B,yBAAyB,GACzB,iCAAiC,GACjC,4BAA4B,CAAC;AAEjC,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE;QACjB,WAAW,EAAE,sBAAsB,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC;QACb,mBAAmB,EAAE,MAAM,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;gBAGA,IAAI,EAAE,sBAAsB,EAC5B,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,mBAAmB,EAAE,MAAM,CAAC;QAC5B,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;CAgBJ;AASD,qBAAa,MAAM;IACjB,OAAO,CAAC,kBAAkB,CAAC,CAAsC;IACjE,OAAO,CAAC,UAAU,CAAC,CAA8B;IACjD,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,KAAK,CAAe;IAC5B,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,qBAAqB,CAAU;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,cAAc,CAAC,CAAyB;IAChD,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,MAAM,CAAC,CAAU;IACzB,OAAO,CAAC,OAAO,CAAC,CAA8B;IAC9C,OAAO,CAAC,OAAO,CAAC,CAA0B;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAY;IAC3B,OAAO,CAAC,MAAM,CAAC,CAAc;gBAEjB,OAAO,EAAE,aAAa;IAuB5B,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;CAkOrE"}

package/dist/runtime/Runner.js

@@ -1,3 +1,4 @@
+import { truncateToolResult } from "../tools/TruncateResult.js";
 export class RunnerBudgetError extends Error {
     constructor(code, metadata) {
         super(code === "runner_timeout_exceeded"
@@ -26,6 +27,8 @@ export class Runner {
         this.context = options.context;
         this.maxSteps = options.maxSteps;
         this.maxToolCalls = options.maxToolCalls;
+        this.finalStepWithoutTools = options.finalStepWithoutTools === true;
+        this.maxToolResultChars = options.maxToolResultChars;
         this.maxTokens = options.maxTokens;
         this.temperature = options.temperature;
         this.responseFormat = options.responseFormat;
@@ -35,181 +38,240 @@ export class Runner {
         this.onToken = options.onToken;
         this.streamFlushMs = options.streamFlushMs;
         this.timeoutMs = options.timeoutMs;
+        this.continueAfterFinal = options.continueAfterFinal;
+        this.onMessages = options.onMessages;
         this.logger = options.logger;
+        this.signal = options.signal ?? options.context.signal;
     }
     async run(initialMessages) {
-        const messages = [...initialMessages];
-        let toolCallsExecuted = 0;
-        let usageTotals;
-        const deadline = this.timeoutMs ? Date.now() + this.timeoutMs : undefined;
-        const emitEvent = (event) => {
-            if (this.onEvent) {
-                this.onEvent(event);
-                return;
-            }
-            if (event.type === "token") {
-                this.onToken?.(event.content);
-            }
-        };
-        const emitStatus = (phase, message) => {
-            this.onEvent?.({ type: "status", phase, message });
-        };
-        const recordUsage = (usage) => {
-            if (!usage)
-                return;
-            if (!usageTotals)
-                usageTotals = {};
-            if (usage.inputTokens !== undefined) {
-                usageTotals.inputTokens = (usageTotals.inputTokens ?? 0) + usage.inputTokens;
-            }
-            if (usage.outputTokens !== undefined) {
-                usageTotals.outputTokens = (usageTotals.outputTokens ?? 0) + usage.outputTokens;
-            }
-            if (usage.totalTokens !== undefined) {
-                usageTotals.totalTokens = (usageTotals.totalTokens ?? 0) + usage.totalTokens;
-            }
-        };
-        const timeRemaining = () => {
-            if (!deadline)
-                return undefined;
-            return deadline - Date.now();
-        };
-        const throwBudgetError = async (code, step) => {
-            const error = new RunnerBudgetError(code, {
-                step,
-                tool_calls_executed: toolCallsExecuted,
-                max_steps: this.maxSteps,
-                max_tool_calls: this.maxToolCalls,
-                timeout_ms: this.timeoutMs,
-            });
-            if (this.logger) {
-                await this.logger.log("runner_budget_failure", error.metadata);
-            }
-            throw error;
-        };
-        const withTimeout = async (promise, label) => {
-            const remaining = timeRemaining();
-            if (remaining === undefined)
-                return promise;
-            if (remaining <= 0) {
-                await throwBudgetError("runner_timeout_exceeded", -1);
-            }
-            let timeoutId;
-            const timeoutPromise = new Promise((_, reject) => {
-                timeoutId = setTimeout(() => reject(new Error("Runner timeout exceeded")), remaining);
-            });
-            try {
-                return await Promise.race([promise, timeoutPromise]);
-            }
-            catch (error) {
-                if (error instanceof Error && /Runner timeout exceeded/i.test(error.message)) {
-                    await throwBudgetError("runner_timeout_exceeded", -1);
+        this.signal?.throwIfAborted();
+        const abortController = new AbortController();
+        const onAbort = () => abortController.abort(this.signal?.reason);
+        this.signal?.addEventListener("abort", onAbort, { once: true });
+        const timeout = this.timeoutMs ? setTimeout(() => abortController.abort(new Error("Runner timeout exceeded")), this.timeoutMs) : undefined;
+        const signal = abortController.signal;
+        try {
+            const messages = [...initialMessages];
+            let toolCallsExecuted = 0;
+            let usageTotals;
+            const deadline = this.timeoutMs ? Date.now() + this.timeoutMs : undefined;
+            const emitEvent = (event) => {
+                if (signal.aborted)
+                    return;
+                if (this.onEvent) {
+                    this.onEvent(event);
+                    return;
+                }
+                if (event.type === "token") {
+                    this.onToken?.(event.content);
+                }
+            };
+            const emitStatus = (phase, message) => {
+                this.onEvent?.({ type: "status", phase, message });
+            };
+            const recordUsage = (usage) => {
+                if (!usage)
+                    return;
+                if (!usageTotals)
+                    usageTotals = {};
+                if (usage.inputTokens !== undefined) {
+                    usageTotals.inputTokens = (usageTotals.inputTokens ?? 0) + usage.inputTokens;
+                }
+                if (usage.outputTokens !== undefined) {
+                    usageTotals.outputTokens = (usageTotals.outputTokens ?? 0) + usage.outputTokens;
+                }
+                if (usage.totalTokens !== undefined) {
+                    usageTotals.totalTokens = (usageTotals.totalTokens ?? 0) + usage.totalTokens;
+                }
+            };
+            const timeRemaining = () => {
+                if (!deadline)
+                    return undefined;
+                return deadline - Date.now();
+            };
+            const throwBudgetError = async (code, step) => {
+                const error = new RunnerBudgetError(code, {
+                    step,
+                    tool_calls_executed: toolCallsExecuted,
+                    max_steps: this.maxSteps,
+                    max_tool_calls: this.maxToolCalls,
+                    timeout_ms: this.timeoutMs,
+                });
+                if (this.logger) {
+                    await this.logger.log("runner_budget_failure", error.metadata);
                 }
                 throw error;
-            }
-            finally {
-                if (timeoutId)
-                    clearTimeout(timeoutId);
-            }
-        };
-        for (let step = 0; step < this.maxSteps; step += 1) {
-            if (deadline && timeRemaining() <= 0) {
-                await throwBudgetError("runner_timeout_exceeded", step);
-            }
-            const toolSpecs = this.tools.describe().map((tool) => ({
-                name: tool.name,
-                description: tool.description,
-                inputSchema: tool.inputSchema,
-            }));
-            const allowTools = toolSpecs.length > 0 && this.toolChoice !== "none";
-            emitStatus("thinking");
-            if (this.logger) {
-                await this.logger.log("provider_request", {
-                    provider: this.provider.name,
-                    messages,
-                    tools: allowTools ? toolSpecs : [],
-                    toolChoice: allowTools ? this.toolChoice ?? "auto" : "none",
-                    responseFormat: this.responseFormat,
-                    temperature: this.temperature,
-                    maxTokens: this.maxTokens,
-                    stream: this.stream ?? false,
+            };
+            const withTimeout = async (promise, label) => {
+                const remaining = timeRemaining();
+                if (remaining !== undefined && remaining <= 0) {
+                    await throwBudgetError("runner_timeout_exceeded", -1);
+                }
+                let timeoutId;
+                const timeoutPromise = new Promise((_, reject) => {
+                    if (remaining !== undefined)
+                        timeoutId = setTimeout(() => reject(new Error("Runner timeout exceeded")), remaining);
                 });
-            }
-            const response = await withTimeout(this.provider.generate({
-                messages,
-                tools: allowTools ? toolSpecs : undefined,
-                toolChoice: allowTools ? this.toolChoice ?? "auto" : undefined,
-                maxTokens: this.maxTokens,
-                temperature: this.temperature,
-                responseFormat: this.responseFormat,
-                stream: this.stream,
-                onEvent: emitEvent,
-                onToken: (token) => emitEvent({ type: "token", content: token }),
-                streamFlushMs: this.streamFlushMs,
-            }), "provider");
-            recordUsage(response.usage);
-            messages.push(response.message);
-            if (this.logger) {
-                await this.logger.log("provider_response", {
-                    message: response.message,
-                    toolCalls: response.toolCalls,
-                    usage: response.usage,
+                let onCancel;
+                const cancelled = new Promise((_, reject) => {
+                    // Provider streams may not honor AbortSignal; never accept their late reply.
+                    // Tools are allowed to finish their cancellation cleanup before unlocking.
+                    if (label === "provider") {
+                        onCancel = () => reject(signal.reason ?? new Error("Cancelled"));
+                        signal.addEventListener("abort", onCancel, { once: true });
+                        if (signal.aborted)
+                            onCancel();
+                    }
                 });
-            }
-            if (!response.toolCalls || response.toolCalls.length === 0) {
-                return {
-                    finalMessage: response.message,
-                    messages,
-                    toolCallsExecuted,
-                    usage: usageTotals,
-                };
-            }
-            for (const call of response.toolCalls) {
-                if (toolCallsExecuted >= this.maxToolCalls) {
-                    await throwBudgetError("runner_tool_call_limit_exceeded", step);
+                try {
+                    return await Promise.race([promise, timeoutPromise, cancelled]);
+                }
+                catch (error) {
+                    if (error instanceof Error && /Runner timeout exceeded/i.test(error.message)) {
+                        await throwBudgetError("runner_timeout_exceeded", -1);
+                    }
+                    throw error;
+                }
+                finally {
+                    if (timeoutId)
+                        clearTimeout(timeoutId);
+                    if (onCancel)
+                        signal.removeEventListener("abort", onCancel);
                 }
-                toolCallsExecuted += 1;
-                emitStatus("executing", call.name);
-                this.onEvent?.({ type: "tool_call", name: call.name, args: call.args });
-                const result = await withTimeout(this.tools.execute(call.name, call.args, this.context), "tool");
-                const toolError = result.error;
-                const content = result.ok
-                    ? result.output
-                    : `ERROR[${toolError?.code ?? "tool_execution_failed"}]: ${toolError?.message ?? "tool failed"}`;
-                messages.push(buildToolMessage(call, content));
-                this.onEvent?.({
-                    type: "tool_result",
-                    name: call.name,
-                    output: content,
-                    ok: result.ok,
-                    errorCode: toolError?.code,
-                    retryable: toolError?.retryable,
+            };
+            for (let step = 0; step < this.maxSteps; step += 1) {
+                signal.throwIfAborted();
+                if (deadline && timeRemaining() <= 0) {
+                    await throwBudgetError("runner_timeout_exceeded", step);
+                }
+                const toolSpecs = this.tools.describe().map((tool) => ({
+                    name: tool.name,
+                    description: tool.description,
+                    inputSchema: tool.inputSchema,
+                }));
+                const finalSummaryStep = this.finalStepWithoutTools && step > 0 && step === this.maxSteps - 1;
+                const allowTools = toolSpecs.length > 0 && this.toolChoice !== "none" && !finalSummaryStep;
+                emitStatus("thinking");
+                if (this.logger) {
+                    await this.logger.log("provider_request", {
+                        provider: this.provider.name,
+                        messages,
+                        tools: allowTools ? toolSpecs : [],
+                        toolChoice: allowTools ? this.toolChoice ?? "auto" : "none",
+                        responseFormat: this.responseFormat,
+                        temperature: this.temperature,
+                        maxTokens: this.maxTokens,
+                        stream: this.stream ?? false,
+                    });
+                }
+                const response = await withTimeout(this.provider.generate({
+                    signal,
+                    messages,
+                    tools: allowTools ? toolSpecs : undefined,
+                    toolChoice: allowTools ? this.toolChoice ?? "auto" : finalSummaryStep ? "none" : undefined,
+                    maxTokens: this.maxTokens,
+                    temperature: this.temperature,
+                    responseFormat: this.responseFormat,
+                    stream: this.stream,
+                    onEvent: emitEvent,
+                    onToken: (token) => emitEvent({ type: "token", content: token }),
+                    streamFlushMs: this.streamFlushMs,
+                }), "provider");
+                recordUsage(response.usage);
+                signal.throwIfAborted();
+                messages.push({
+                    ...response.message,
+                    ...(response.toolCalls?.length ? { toolCalls: response.toolCalls } : {}),
                 });
+                await this.onMessages?.([...messages]);
                 if (this.logger) {
-                    await this.logger.log("tool_call", {
+                    await this.logger.log("provider_response", {
+                        message: response.message,
+                        toolCalls: response.toolCalls,
+                        usage: response.usage,
+                    });
+                }
+                if (!response.toolCalls || response.toolCalls.length === 0) {
+                    const continuation = await this.continueAfterFinal?.(response.message);
+                    if (continuation) {
+                        messages.push({ role: "user", content: continuation });
+                        continue;
+                    }
+                    return {
+                        finalMessage: response.message,
+                        messages,
+                        toolCallsExecuted,
+                        usage: usageTotals,
+                    };
+                }
+                for (const call of response.toolCalls) {
+                    signal.throwIfAborted();
+                    if (toolCallsExecuted >= this.maxToolCalls) {
+                        await throwBudgetError("runner_tool_call_limit_exceeded", step);
+                    }
+                    toolCallsExecuted += 1;
+                    emitStatus("executing", call.name);
+                    this.onEvent?.({ type: "tool_call", name: call.name, args: call.args });
+                    const result = await withTimeout(this.tools.execute(call.name, call.args, { ...this.context, signal }), "tool");
+                    const toolError = result.error;
+                    let content = result.ok
+                        ? result.output
+                        : `ERROR[${toolError?.code ?? "tool_execution_failed"}]: ${toolError?.message ?? "tool failed"}`;
+                    if (result.ok && this.maxToolResultChars && this.maxToolResultChars > 0) {
+                        const limit = Math.max(1, Math.floor(this.maxToolResultChars / response.toolCalls.length));
+                        let structured = result.data;
+                        if (structured === undefined) {
+                            try {
+                                structured = JSON.parse(content);
+                            }
+                            catch { /* Plain-text tool output. */ }
+                        }
+                        content = truncateToolResult(structured, content, limit).text;
+                    }
+                    if (result.invocationReceipt) {
+                        content += `\n\n[Tool metadata: invocation receipt ID ${result.invocationReceipt.id}; receiptRef=${result.invocationReceipt.reference}]`;
+                    }
+                    messages.push(buildToolMessage(call, content));
+                    await this.onMessages?.([...messages]);
+                    this.onEvent?.({
+                        type: "tool_result",
                         name: call.name,
+                        output: content,
                         ok: result.ok,
-                        error: toolError?.message,
-                        error_code: toolError?.code,
-                        error_category: toolError?.category,
-                        error_retryable: toolError?.retryable,
-                        error_details: toolError?.details,
+                        errorCode: toolError?.code,
+                        retryable: toolError?.retryable,
                     });
-                    if (toolError) {
-                        await this.logger.logSafetyEvent({
-                            phase: "act",
-                            category: "tool",
-                            code: toolError.code,
-                            disposition: toolError.retryable ? "retryable" : "non_retryable",
-                            tool: call.name,
-                            message: toolError.message,
-                            details: toolError.details,
+                    if (this.logger) {
+                        await this.logger.log("tool_call", {
+                            name: call.name,
+                            ok: result.ok,
+                            error: toolError?.message,
+                            error_code: toolError?.code,
+                            error_category: toolError?.category,
+                            error_retryable: toolError?.retryable,
+                            error_details: toolError?.details,
                         });
+                        if (toolError) {
+                            await this.logger.logSafetyEvent({
+                                phase: "act",
+                                category: "tool",
+                                code: toolError.code,
+                                disposition: toolError.retryable ? "retryable" : "non_retryable",
+                                tool: call.name,
+                                message: toolError.message,
+                                details: toolError.details,
+                            });
+                        }
                     }
                 }
             }
+            await throwBudgetError("runner_step_limit_exceeded", this.maxSteps);
+            throw new Error("unreachable_runner_budget_path");
+        }
+        finally {
+            if (timeout)
+                clearTimeout(timeout);
+            this.signal?.removeEventListener("abort", onAbort);
         }
-        await throwBudgetError("runner_step_limit_exceeded", this.maxSteps);
-        throw new Error("unreachable_runner_budget_path");
     }
 }

package/dist/runtime/SecretRedaction.d.ts

@@ -0,0 +1,11 @@
+/** Register credentials when resolved; do not scan or expose unrelated environment values. */
+export declare const registerSecretValue: (value: string) => void;
+export declare const redactSecretValues: (value: string) => string;
+/** Hold incomplete credential-shaped words so split chunks cannot expose a prefix or tail. */
+export declare class StreamingSecretRedactor {
+    private pending;
+    private droppingWord;
+    write(chunk: string): string;
+    finish(): string;
+}
+//# sourceMappingURL=SecretRedaction.d.ts.map

package/dist/runtime/SecretRedaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecretRedaction.d.ts","sourceRoot":"","sources":["../../src/runtime/SecretRedaction.ts"],"names":[],"mappings":"AAaA,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,GAAI,OAAO,MAAM,KAAG,IAEnD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,OAAO,MAAM,KAAG,MAKlD,CAAC;AAEF,8FAA8F;AAC9F,qBAAa,uBAAuB;IAClC,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,YAAY,CAAS;IAC7B,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA4B5B,MAAM,IAAI,MAAM;CAUjB"}

package/dist/runtime/SecretRedaction.js

@@ -0,0 +1,85 @@
+const knownSecrets = new Set();
+const patterns = [
+    /\bBearer\s+[A-Za-z0-9._~+/=-]{12,}/gi,
+    /\bsk-[A-Za-z0-9_-]{16,}\b/g,
+    /\bsk_[A-Za-z0-9]+_[A-Za-z0-9_]{8,}\b/g,
+    /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g,
+    /\bglpat-[A-Za-z0-9_-]{16,}\b/g,
+    /\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
+    /\bAIza[0-9A-Za-z_-]{30,}\b/g,
+    /\beyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g,
+];
+/** Register credentials when resolved; do not scan or expose unrelated environment values. */
+export const registerSecretValue = (value) => {
+    if (value.length >= 4) {
+        knownSecrets.add(value);
+        knownSecrets.add(JSON.stringify(value).slice(1, -1));
+    }
+};
+export const redactSecretValues = (value) => {
+    let output = value;
+    for (const secret of [...knownSecrets].sort((a, b) => b.length - a.length))
+        output = output.split(secret).join("[redacted]");
+    for (const pattern of patterns)
+        output = output.replace(pattern, "[redacted]");
+    return output;
+};
+/** Hold incomplete credential-shaped words so split chunks cannot expose a prefix or tail. */
+export class StreamingSecretRedactor {
+    constructor() {
+        this.pending = "";
+        this.droppingWord = false;
+    }
+    write(chunk) {
+        if (this.droppingWord) {
+            const boundary = chunk.search(/[^A-Za-z0-9._~+/=-]/);
+            if (boundary < 0)
+                return "";
+            chunk = chunk.slice(boundary);
+            this.droppingWord = false;
+        }
+        this.pending += chunk;
+        let cutoff = this.pending.search(/[A-Za-z0-9._~+/=-]*$/);
+        const bearer = /\bBearer\s+[A-Za-z0-9._~+/=-]*$/i.exec(this.pending);
+        if (bearer)
+            cutoff = Math.min(cutoff, bearer.index);
+        for (const secret of knownSecrets) {
+            // An exact credential may contain spaces/punctuation, unlike a bearer word.
+            for (let at = this.pending.indexOf(secret); at >= 0; at = this.pending.indexOf(secret, at + 1)) {
+                if (at < cutoff && at + secret.length > cutoff)
+                    cutoff = at;
+            }
+            for (let size = Math.min(secret.length - 1, this.pending.length); size > 0; size--) {
+                if (this.pending.endsWith(secret.slice(0, size))) {
+                    cutoff = Math.min(cutoff, this.pending.length - size);
+                    break;
+                }
+            }
+        }
+        let output = redactSecretValues(this.pending.slice(0, cutoff));
+        this.pending = this.pending.slice(cutoff);
+        // Never release a truncated prefix; discard an oversized unbroken token.
+        const longestCredential = Math.max(0, ...[...knownSecrets].map(secret => secret.length));
+        if (this.pending.length > Math.max(65536, longestCredential)) {
+            output += "[redacted oversized token]";
+            this.pending = "";
+            this.droppingWord = true;
+        }
+        return output;
+    }
+    finish() {
+        let output = redactSecretValues(this.pending);
+        for (const secret of knownSecrets) {
+            for (let size = Math.min(secret.length - 1, output.length); size >= 4; size--) {
+                if (output.endsWith(secret.slice(0, size))) {
+                    output = `${output.slice(0, -size)}[redacted]`;
+                    break;
+                }
+            }
+        }
+        this.pending = "";
+        this.droppingWord = false;
+        return output;
+    }
+}