@n8n/agents 0.27.4 → 0.28.1

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export type { BuiltTool, BuiltProviderTool, BuiltAgent, BuiltMemory, BuiltEpisodicMemoryCaptureStore, BuiltEpisodicMemoryStore, BuiltGuardrail, PiiDetectionType, BuiltEval, RunOptions, AgentResult, GenerateResult, StreamResult, EvalInput, EvalScore, EvalRunResult, EvalResults, ToolContext, ToolCancellationContext, ToolExecutionContext, InterruptibleToolContext, ToolSuspendOptions, CheckpointStore, StreamChunk, Provider, ThinkingConfig, ThinkingConfigFor, AnthropicThinkingEffort, AnthropicThinkingConfig, OpenAIReasoningEffort, OpenAIThinkingConfig, GoogleThinkingConfig, XaiThinkingConfig, ReasoningLevel, SerializableAgentState, AgentRunState, MemoryConfig, ObservationLogMemoryConfig, MemoryDescriptor, ObservationCapableMemory, TitleGenerationConfig, Thread, EpisodicMemoryConfig, EpisodicMemoryCaptureCandidate, EpisodicMemoryCaptureKind, EpisodicMemoryCaptureMethods, EpisodicMemoryCaptureStatus, EpisodicMemoryEmbeddingProviderOptions, EpisodicMemoryEntry, EpisodicMemoryEntrySource, EpisodicMemoryMethods, EpisodicMemoryPrompts, EpisodicMemoryReflectFn, EpisodicMemoryReflection, EpisodicMemoryReflectionApply, EpisodicMemoryReflectionApplyMerge, EpisodicMemoryReflectionMerge, EpisodicMemoryReflectionResult, EpisodicMemoryReflectorInput, EpisodicMemoryScope, EpisodicMemorySearchOptions, EpisodicMemoryStatus, EpisodicMemoryTaskLockHandle, EpisodicMemoryTaskLockMethods, NewEpisodicMemoryCaptureCandidate, NewEpisodicMemoryEntry, NewEpisodicMemoryEntrySource, NewEpisodicMemoryEntrySourceForEntry, RetrievedEpisodicMemoryEntry, ResumeOptions, McpServerConfig, McpToolCallSettledEvent, McpConnectionFailedEvent, McpVerifyResult, ModelConfig, ExecutionOptions, SmoothStreamOptions, TokenUsage, AgentExecutionCounter, PersistedExecutionOptions, AnthropicPromptCachingConfig, OpenAIPromptCachingConfig, PromptCachingConfig, BuiltTelemetry, AttributeValue, ObservationCursor, ObservationalMemoryConfig, BuiltObservationLogStore, BuiltObservationLogTaskLockStore, MemoryTaskUsageReport, NewObservationLogEntry, ObservationLogEntry, ObservationLogMarker, ObservationLogMerge, ObservationLogReadOptions, ObservationLogReflection, ObservationLogReflectionResult, ObservationLogScope, ObservationLogStatus, ObservationLogTaskKind, ObservationLogTaskLockHandle, FinishReason, } from './types';
+export type { BuiltTool, BuiltProviderTool, BuiltAgent, BuiltMemory, BuiltEpisodicMemoryCaptureStore, BuiltEpisodicMemoryStore, BuiltGuardrail, GuardrailDecision, GuardrailModelCallContext, GuardrailModelCallSource, GuardrailStop, GuardrailToolCallContext, GuardrailsOptions, ModelGuardrail, PiiDetectionType, BuiltEval, RunOptions, AgentResult, GenerateResult, StreamResult, EvalInput, EvalScore, EvalRunResult, EvalResults, ToolContext, ToolCancellationContext, ToolExecutionContext, ToolApprovalContext, InterruptibleToolContext, ToolSuspendOptions, CheckpointStore, StreamChunk, Provider, ThinkingConfig, ThinkingConfigFor, AnthropicThinkingEffort, AnthropicThinkingConfig, OpenAIReasoningEffort, OpenAIThinkingConfig, GoogleThinkingConfig, XaiThinkingConfig, ReasoningLevel, SerializableAgentState, AgentRunState, MemoryConfig, ObservationLogMemoryConfig, MemoryDescriptor, ObservationCapableMemory, TitleGenerationConfig, Thread, EpisodicMemoryConfig, EpisodicMemoryCaptureCandidate, EpisodicMemoryCaptureKind, EpisodicMemoryCaptureMethods, EpisodicMemoryCaptureStatus, EpisodicMemoryEmbeddingProviderOptions, EpisodicMemoryEntry, EpisodicMemoryEntrySource, EpisodicMemoryMethods, EpisodicMemoryPrompts, EpisodicMemoryReflectFn, EpisodicMemoryReflectResult, EpisodicMemoryReflection, EpisodicMemoryReflectionApply, EpisodicMemoryReflectionApplyMerge, EpisodicMemoryReflectionMerge, EpisodicMemoryReflectionResult, EpisodicMemoryReflectorInput, EpisodicMemoryScope, EpisodicMemorySearchOptions, EpisodicMemoryStatus, EpisodicMemoryTaskLockHandle, EpisodicMemoryTaskLockMethods, NewEpisodicMemoryCaptureCandidate, NewEpisodicMemoryEntry, NewEpisodicMemoryEntrySource, NewEpisodicMemoryEntrySourceForEntry, RetrievedEpisodicMemoryEntry, ResumeOptions, McpServerConfig, McpToolCallSettledEvent, McpConnectionFailedEvent, McpVerifyResult, ModelConfig, ExecutionOptions, AgentInputBoundary, SmoothStreamOptions, TokenUsage, AgentExecutionCounter, SideCallTask, SideCallUsageReport, PersistedExecutionOptions, AnthropicPromptCachingConfig, OpenAIPromptCachingConfig, PromptCachingConfig, BuiltTelemetry, AttributeValue, ObservationCursor, ObservationalMemoryConfig, BuiltObservationLogStore, BuiltObservationLogTaskLockStore, MemoryTaskUsageReport, NewObservationLogEntry, ObservationLogEntry, ObservationLogMarker, ObservationLogMerge, ObservationLogObserveResult, ObservationLogReadOptions, ObservationLogReflection, ObservationLogReflectResult, ObservationLogReflectionResult, ObservationLogScope, ObservationLogStatus, ObservationLogTaskKind, ObservationLogTaskLockHandle, FinishReason, } from './types';
 export { FINISH_REASONS, isFinishReason } from './types';
 export type { ProviderOptions } from '@ai-sdk/provider-utils';
 export { AgentEvent } from './types';
@@ -17,6 +17,8 @@ export { VectorStore } from './sdk/vector-store';
 export { FILTER_OPERATORS, normalizeFilterInput, assertValidFilter, buildFilterInputSchema, } from './sdk/vector-store-filter';
 export type { VectorFilterInput } from './sdk/vector-store-filter';
 export { Guardrail } from './sdk/guardrail';
+export { budgetMonthKey, createBudgetGuardrail } from './runtime/guardrails/budget-guardrail';
+export type { BudgetGuardrailOptions, SpendEntry, SpendLedger, SpendTotal, } from './runtime/guardrails/budget-guardrail';
 export { redactText, redactDeep, redactionOptionsFromGuardrail, DEFAULT_PLACEHOLDER, StreamingRedactor, resolvePatterns, passesLuhn, SUPPORTED_PII_CATEGORIES, } from './sdk/guardrails';
 export type { RedactionOptions, RedactionResult, DeepRedactionResult, RedactionCategory, RedactionPattern, } from './sdk/guardrails';
 export { Eval } from './sdk/eval';
@@ -66,7 +68,7 @@ export { generateTitleFromMessage } from './runtime/memory/title-generation';
 export { activeLifecycleState, droppedLifecycleState, markLifecycleActive, markLifecycleDropped, markLifecycleSuperseded, normalizeFlatReflectionActions, supersededLifecycleState, uniqueStrings, } from './runtime/memory/memory-lifecycle';
 export { RECALL_MEMORY_TOOL_NAME, createRecallMemoryTool, getEpisodicMemoryScope, hashEpisodicMemoryContent, hashEpisodicMemoryEvidence, hasEpisodicMemoryCaptureStore, hasEpisodicMemoryStore, isEpisodicMemoryEnabled, rankEpisodicMemoryEntries, withEpisodicMemoryDefaults, } from './runtime/memory/episodic-memory';
 export { FLAG_MEMORY_TOOL_NAME, createFlagMemoryTool, runEpisodicMemoryCandidateProcessor, } from './runtime/memory/episodic-memory-capture';
-export type { RunEpisodicMemoryCandidateProcessorOpts, RunEpisodicMemoryCandidateProcessorResult, } from './runtime/memory/episodic-memory-capture';
+export type { RunEpisodicMemoryCandidateProcessorOpts, RunEpisodicMemoryCandidateProcessorResult, EpisodicMemoryUsageReport, } from './runtime/memory/episodic-memory-capture';
 export { DEFAULT_EPISODIC_MEMORY_CAPTURE_TOOL_INSTRUCTION, DEFAULT_EPISODIC_MEMORY_EMBEDDING_MODEL, DEFAULT_EPISODIC_MEMORY_MAX_ENTRIES_PER_RUN, DEFAULT_EPISODIC_MEMORY_RECALL_TOOL_INSTRUCTION, DEFAULT_EPISODIC_MEMORY_REFLECTION_PROMPT, DEFAULT_EPISODIC_MEMORY_TOP_K, buildEpisodicMemoryReflectorPrompt, createEpisodicMemoryReflectFn, } from './runtime/memory/episodic-memory-defaults';
 export type { CreateEpisodicMemoryReflectFnOptions } from './runtime/memory/episodic-memory-defaults';
 export type { MemoryLifecycleState, MemoryLifecycleStatus, } from './runtime/memory/memory-lifecycle';

package/dist/index.js

@@ -33,10 +33,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createRuntimeSkillTools = exports.createRuntimeSkillSource = exports.createRuntimeSkillRegistry = exports.appendSkillCatalogToInstructions = exports.Agent = exports.LangSmithTelemetry = exports.deriveSubAgentTelemetry = exports.Telemetry = exports.evals = exports.evaluate = exports.Eval = exports.SUPPORTED_PII_CATEGORIES = exports.passesLuhn = exports.resolvePatterns = exports.StreamingRedactor = exports.DEFAULT_PLACEHOLDER = exports.redactionOptionsFromGuardrail = exports.redactDeep = exports.redactText = exports.Guardrail = exports.buildFilterInputSchema = exports.assertValidFilter = exports.normalizeFilterInput = exports.FILTER_OPERATORS = exports.VectorStore = exports.Memory = exports.wrapUntrustedData = exports.UNTRUSTED_OUTPUT_DOCTRINE = exports.stripInvisibleUnicode = exports.sanitizeToolName = exports.wrapToolForApproval = exports.Tool = exports.APPROVAL_SUSPEND_SCHEMA = exports.APPROVAL_RESUME_SCHEMA = exports.ModelStreamStallError = exports.DEFAULT_MODEL_STREAM_IDLE_TIMEOUT_MS = exports.DEFAULT_MODEL_STREAM_FIRST_OUTPUT_TIMEOUT_MS = exports.throwIfAborted = exports.raceWithAbort = exports.isAbortError = exports.createAbortError = exports.CANCELLATION_TYPE = exports.isCancellation = exports.createCancellation = exports.estimateObservationTokens = exports.OBSERVATION_LOG_STATUSES = exports.OBSERVATION_LOG_MARKERS = exports.AgentEvent = exports.isFinishReason = exports.FINISH_REASONS = void 0;
-exports.createPlannerTodosTool = exports.createWriteTodosTool = exports.WRITE_TODOS_TOOL_NAME = exports.renderDelegateSubAgentPrompt = exports.parseDelegateSubAgentContinuation = exports.isDelegateSubAgentTool = exports.getInlineDelegateSubAgentToolOptions = exports.generateResultToDelegateSubAgentOutput = exports.failedDelegatedChildSuspendOutput = exports.createDelegateSubAgentTool = exports.SUB_AGENT_TASK_DIFFICULTIES = exports.INLINE_SUB_AGENT_ID = exports.DELEGATED_CHILD_SUSPEND_UNSUPPORTED_MESSAGE = exports.DELEGATE_SUB_AGENT_TOOL_NAME = exports.sanitizeSubAgentTaskName = exports.isSubAgentTaskPath = exports.createChildSubAgentTaskPath = exports.assertSubAgentTaskPath = exports.ROOT_SUB_AGENT_TASK_PATH = exports.DEFAULT_SUB_AGENT_MAX_CHILDREN = exports.createModel = exports.BaseVectorStore = exports.BaseMemory = exports.fetchProviderCatalog = exports.isLlmMessage = exports.getCreatedAt = exports.filterLlmMessages = exports.stripHydratedFileData = exports.verify = exports.providerTools = exports.mcpContentToModelParts = exports.mcpContentToMessageParts = exports.hasMcpMediaContent = exports.McpClient = exports.validateRuntimeSkill = exports.SKILL_LOAD_TOOL_NAME = exports.RUNTIME_SKILL_REGISTRY_SCHEMA_VERSION = exports.RUNTIME_SKILL_NAME_PATTERN = exports.RUNTIME_SKILL_LINKED_FILE_GROUPS = exports.RUNTIME_SKILL_MAX_OUTPUT_BYTES = exports.RUNTIME_SKILL_FILE_NAME = exports.RUNTIME_SKILL_TOOL_NAMES = exports.renderSkillCatalogPrompt = exports.parseRuntimeSkillMarkdown = exports.loadRuntimeSkillSourceFromDirectory = exports.loadRuntimeSkillsFromDirectory = exports.InvalidRuntimeSkillError = exports.formatSkillValidationErrors = exports.filterRuntimeSkillSource = exports.createSkillLoadTool = void 0;
-exports.DEFAULT_OBSERVATION_LOG_REFLECTOR_THRESHOLD_TOKENS = exports.DEFAULT_OBSERVATION_LOG_REFLECTOR_PROMPT = exports.DEFAULT_OBSERVATION_LOG_OBSERVER_THRESHOLD_TOKENS = exports.DEFAULT_OBSERVATION_LOG_OBSERVER_PROMPT = exports.DEFAULT_OBSERVATION_LOG_LOCK_TTL_MS = exports.createObservationLogObserveFn = exports.createObservationLogReflectFn = exports.buildObservationLogObserverPrompt = exports.buildObservationLogReflectorPrompt = exports.ScopedMemoryTaskRunner = exports.runObservationLogReflector = exports.renderObservationLogForReflection = exports.parseObservationLogReflectionJson = exports.normalizeObservationLogReflection = exports.wrapUntrustedObserverData = exports.runObservationLogObserver = exports.renderObserverTranscript = exports.parseObservationLogMarkdown = exports.createEpisodicMemoryReflectFn = exports.buildEpisodicMemoryReflectorPrompt = exports.DEFAULT_EPISODIC_MEMORY_TOP_K = exports.DEFAULT_EPISODIC_MEMORY_REFLECTION_PROMPT = exports.DEFAULT_EPISODIC_MEMORY_RECALL_TOOL_INSTRUCTION = exports.DEFAULT_EPISODIC_MEMORY_MAX_ENTRIES_PER_RUN = exports.DEFAULT_EPISODIC_MEMORY_EMBEDDING_MODEL = exports.DEFAULT_EPISODIC_MEMORY_CAPTURE_TOOL_INSTRUCTION = exports.runEpisodicMemoryCandidateProcessor = exports.createFlagMemoryTool = exports.FLAG_MEMORY_TOOL_NAME = exports.withEpisodicMemoryDefaults = exports.rankEpisodicMemoryEntries = exports.isEpisodicMemoryEnabled = exports.hasEpisodicMemoryStore = exports.hasEpisodicMemoryCaptureStore = exports.hashEpisodicMemoryEvidence = exports.hashEpisodicMemoryContent = exports.getEpisodicMemoryScope = exports.createRecallMemoryTool = exports.RECALL_MEMORY_TOOL_NAME = exports.uniqueStrings = exports.supersededLifecycleState = exports.normalizeFlatReflectionActions = exports.markLifecycleSuperseded = exports.markLifecycleDropped = exports.markLifecycleActive = exports.droppedLifecycleState = exports.activeLifecycleState = exports.generateTitleFromMessage = exports.createEmbeddingModel = exports.isAttachmentValidationError = void 0;
-exports.zodToJsonSchema = exports.isZodSchema = exports.modelConfigToId = exports.ProcessHandle = exports.SandboxProcessManager = exports.reconcileToolResultRuns = exports.createWorkspaceTools = exports.createScopedWorkspace = exports.CORE_WORKSPACE_TOOL_NAMES = exports.BaseSandbox = exports.BaseFilesystem = exports.Workspace = exports.DEFAULT_OBSERVATION_LOG_TAIL_LIMIT = exports.DEFAULT_OBSERVATION_LOG_RENDER_TOKEN_BUDGET = void 0;
+exports.createRuntimeSkillRegistry = exports.appendSkillCatalogToInstructions = exports.Agent = exports.LangSmithTelemetry = exports.deriveSubAgentTelemetry = exports.Telemetry = exports.evals = exports.evaluate = exports.Eval = exports.SUPPORTED_PII_CATEGORIES = exports.passesLuhn = exports.resolvePatterns = exports.StreamingRedactor = exports.DEFAULT_PLACEHOLDER = exports.redactionOptionsFromGuardrail = exports.redactDeep = exports.redactText = exports.createBudgetGuardrail = exports.budgetMonthKey = exports.Guardrail = exports.buildFilterInputSchema = exports.assertValidFilter = exports.normalizeFilterInput = exports.FILTER_OPERATORS = exports.VectorStore = exports.Memory = exports.wrapUntrustedData = exports.UNTRUSTED_OUTPUT_DOCTRINE = exports.stripInvisibleUnicode = exports.sanitizeToolName = exports.wrapToolForApproval = exports.Tool = exports.APPROVAL_SUSPEND_SCHEMA = exports.APPROVAL_RESUME_SCHEMA = exports.ModelStreamStallError = exports.DEFAULT_MODEL_STREAM_IDLE_TIMEOUT_MS = exports.DEFAULT_MODEL_STREAM_FIRST_OUTPUT_TIMEOUT_MS = exports.throwIfAborted = exports.raceWithAbort = exports.isAbortError = exports.createAbortError = exports.CANCELLATION_TYPE = exports.isCancellation = exports.createCancellation = exports.estimateObservationTokens = exports.OBSERVATION_LOG_STATUSES = exports.OBSERVATION_LOG_MARKERS = exports.AgentEvent = exports.isFinishReason = exports.FINISH_REASONS = void 0;
+exports.WRITE_TODOS_TOOL_NAME = exports.renderDelegateSubAgentPrompt = exports.parseDelegateSubAgentContinuation = exports.isDelegateSubAgentTool = exports.getInlineDelegateSubAgentToolOptions = exports.generateResultToDelegateSubAgentOutput = exports.failedDelegatedChildSuspendOutput = exports.createDelegateSubAgentTool = exports.SUB_AGENT_TASK_DIFFICULTIES = exports.INLINE_SUB_AGENT_ID = exports.DELEGATED_CHILD_SUSPEND_UNSUPPORTED_MESSAGE = exports.DELEGATE_SUB_AGENT_TOOL_NAME = exports.sanitizeSubAgentTaskName = exports.isSubAgentTaskPath = exports.createChildSubAgentTaskPath = exports.assertSubAgentTaskPath = exports.ROOT_SUB_AGENT_TASK_PATH = exports.DEFAULT_SUB_AGENT_MAX_CHILDREN = exports.createModel = exports.BaseVectorStore = exports.BaseMemory = exports.fetchProviderCatalog = exports.isLlmMessage = exports.getCreatedAt = exports.filterLlmMessages = exports.stripHydratedFileData = exports.verify = exports.providerTools = exports.mcpContentToModelParts = exports.mcpContentToMessageParts = exports.hasMcpMediaContent = exports.McpClient = exports.validateRuntimeSkill = exports.SKILL_LOAD_TOOL_NAME = exports.RUNTIME_SKILL_REGISTRY_SCHEMA_VERSION = exports.RUNTIME_SKILL_NAME_PATTERN = exports.RUNTIME_SKILL_LINKED_FILE_GROUPS = exports.RUNTIME_SKILL_MAX_OUTPUT_BYTES = exports.RUNTIME_SKILL_FILE_NAME = exports.RUNTIME_SKILL_TOOL_NAMES = exports.renderSkillCatalogPrompt = exports.parseRuntimeSkillMarkdown = exports.loadRuntimeSkillSourceFromDirectory = exports.loadRuntimeSkillsFromDirectory = exports.InvalidRuntimeSkillError = exports.formatSkillValidationErrors = exports.filterRuntimeSkillSource = exports.createSkillLoadTool = exports.createRuntimeSkillTools = exports.createRuntimeSkillSource = void 0;
+exports.DEFAULT_OBSERVATION_LOG_OBSERVER_THRESHOLD_TOKENS = exports.DEFAULT_OBSERVATION_LOG_OBSERVER_PROMPT = exports.DEFAULT_OBSERVATION_LOG_LOCK_TTL_MS = exports.createObservationLogObserveFn = exports.createObservationLogReflectFn = exports.buildObservationLogObserverPrompt = exports.buildObservationLogReflectorPrompt = exports.ScopedMemoryTaskRunner = exports.runObservationLogReflector = exports.renderObservationLogForReflection = exports.parseObservationLogReflectionJson = exports.normalizeObservationLogReflection = exports.wrapUntrustedObserverData = exports.runObservationLogObserver = exports.renderObserverTranscript = exports.parseObservationLogMarkdown = exports.createEpisodicMemoryReflectFn = exports.buildEpisodicMemoryReflectorPrompt = exports.DEFAULT_EPISODIC_MEMORY_TOP_K = exports.DEFAULT_EPISODIC_MEMORY_REFLECTION_PROMPT = exports.DEFAULT_EPISODIC_MEMORY_RECALL_TOOL_INSTRUCTION = exports.DEFAULT_EPISODIC_MEMORY_MAX_ENTRIES_PER_RUN = exports.DEFAULT_EPISODIC_MEMORY_EMBEDDING_MODEL = exports.DEFAULT_EPISODIC_MEMORY_CAPTURE_TOOL_INSTRUCTION = exports.runEpisodicMemoryCandidateProcessor = exports.createFlagMemoryTool = exports.FLAG_MEMORY_TOOL_NAME = exports.withEpisodicMemoryDefaults = exports.rankEpisodicMemoryEntries = exports.isEpisodicMemoryEnabled = exports.hasEpisodicMemoryStore = exports.hasEpisodicMemoryCaptureStore = exports.hashEpisodicMemoryEvidence = exports.hashEpisodicMemoryContent = exports.getEpisodicMemoryScope = exports.createRecallMemoryTool = exports.RECALL_MEMORY_TOOL_NAME = exports.uniqueStrings = exports.supersededLifecycleState = exports.normalizeFlatReflectionActions = exports.markLifecycleSuperseded = exports.markLifecycleDropped = exports.markLifecycleActive = exports.droppedLifecycleState = exports.activeLifecycleState = exports.generateTitleFromMessage = exports.createEmbeddingModel = exports.isAttachmentValidationError = exports.createPlannerTodosTool = exports.createWriteTodosTool = void 0;
+exports.zodToJsonSchema = exports.isZodSchema = exports.modelConfigToId = exports.ProcessHandle = exports.SandboxProcessManager = exports.reconcileToolResultRuns = exports.createWorkspaceTools = exports.createScopedWorkspace = exports.CORE_WORKSPACE_TOOL_NAMES = exports.BaseSandbox = exports.BaseFilesystem = exports.Workspace = exports.DEFAULT_OBSERVATION_LOG_TAIL_LIMIT = exports.DEFAULT_OBSERVATION_LOG_RENDER_TOKEN_BUDGET = exports.DEFAULT_OBSERVATION_LOG_REFLECTOR_THRESHOLD_TOKENS = exports.DEFAULT_OBSERVATION_LOG_REFLECTOR_PROMPT = void 0;
 var types_1 = require("./types");
 Object.defineProperty(exports, "FINISH_REASONS", { enumerable: true, get: function () { return types_1.FINISH_REASONS; } });
 Object.defineProperty(exports, "isFinishReason", { enumerable: true, get: function () { return types_1.isFinishReason; } });
@@ -81,6 +81,9 @@ Object.defineProperty(exports, "assertValidFilter", { enumerable: true, get: fun
 Object.defineProperty(exports, "buildFilterInputSchema", { enumerable: true, get: function () { return vector_store_filter_1.buildFilterInputSchema; } });
 var guardrail_1 = require("./sdk/guardrail");
 Object.defineProperty(exports, "Guardrail", { enumerable: true, get: function () { return guardrail_1.Guardrail; } });
+var budget_guardrail_1 = require("./runtime/guardrails/budget-guardrail");
+Object.defineProperty(exports, "budgetMonthKey", { enumerable: true, get: function () { return budget_guardrail_1.budgetMonthKey; } });
+Object.defineProperty(exports, "createBudgetGuardrail", { enumerable: true, get: function () { return budget_guardrail_1.createBudgetGuardrail; } });
 var guardrails_1 = require("./sdk/guardrails");
 Object.defineProperty(exports, "redactText", { enumerable: true, get: function () { return guardrails_1.redactText; } });
 Object.defineProperty(exports, "redactDeep", { enumerable: true, get: function () { return guardrails_1.redactDeep; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwGA,iCAAyD;AAAhD,uGAAA,cAAc,OAAA;AAAE,uGAAA,cAAc,OAAA;AAEvC,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAEnB,iCAGiB;AAFhB,gHAAA,uBAAuB,OAAA;AACvB,iHAAA,wBAAwB,OAAA;AAEzB,2EAG6C;AAF5C,gIAAA,yBAAyB,OAAA;AAI1B,mDAA2F;AAAlF,kHAAA,kBAAkB,OAAA;AAAE,8GAAA,cAAc,OAAA;AAAE,iHAAA,iBAAiB,OAAA;AAE9D,qCAKqB;AAJpB,yGAAA,gBAAgB,OAAA;AAChB,qGAAA,YAAY,OAAA;AACZ,sGAAA,aAAa,OAAA;AACb,uGAAA,cAAc,OAAA;AAEf,iEAI0C;AAHzC,4IAAA,4CAA4C,OAAA;AAC5C,oIAAA,oCAAoC,OAAA;AACpC,qHAAA,qBAAqB,OAAA;AAEtB,mCAMoB;AALnB,8GAAA,sBAAsB,OAAA;AACtB,+GAAA,uBAAuB,OAAA;AACvB,4FAAA,IAAI,OAAA;AACJ,2GAAA,mBAAmB,OAAA;AACnB,wGAAA,gBAAgB,OAAA;AAGjB,6DAIiC;AAHhC,0HAAA,qBAAqB,OAAA;AACrB,8HAAA,yBAAyB,OAAA;AACzB,sHAAA,iBAAiB,OAAA;AAElB,uCAAsC;AAA7B,gGAAA,MAAM,OAAA;AACf,mDAAiD;AAAxC,2GAAA,WAAW,OAAA;AACpB,iEAKmC;AAJlC,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AACjB,6HAAA,sBAAsB,OAAA;AAGvB,6CAA4C;AAAnC,sGAAA,SAAS,OAAA;AAClB,+CAS0B;AARzB,wGAAA,UAAU,OAAA;AACV,wGAAA,UAAU,OAAA;AACV,2HAAA,6BAA6B,OAAA;AAC7B,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,6GAAA,eAAe,OAAA;AACf,wGAAA,UAAU,OAAA;AACV,sHAAA,wBAAwB,OAAA;AASzB,mCAAkC;AAAzB,4FAAA,IAAI,OAAA;AACb,2CAA0C;AAAjC,oGAAA,QAAQ,OAAA;AAEjB,QAAY,KAAK,0CAAsB;AACvC,6CAA4C;AAAnC,sGAAA,SAAS,OAAA;AAClB,+EAAkF;AAAzE,8HAAA,uBAAuB,OAAA;AAChC,sDAA8D;AAArD,+GAAA,kBAAkB,OAAA;AAE3B,qCAAoC;AAA3B,8FAAA,KAAK,OAAA;AAMd,mCAqBkB;AApBjB,0HAAA,gCAAgC,OAAA;AAChC,oHAAA,0BAA0B,OAAA;AAC1B,kHAAA,wBAAwB,OAAA;AACxB,iHAAA,uBAAuB,OAAA;AACvB,6GAAA,mBAAmB,OAAA;AACnB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,kHAAA,wBAAwB,OAAA;AACxB,wHAAA,8BAA8B,OAAA;AAC9B,6HAAA,mCAAmC,OAAA;AACnC,mHAAA,yBAAyB,OAAA;AACzB,kHAAA,wBAAwB,OAAA;AACxB,kHAAA,wBAAwB,OAAA;AACxB,iHAAA,uBAAuB,OAAA;AACvB,wHAAA,8BAA8B,OAAA;AAC9B,0HAAA,gCAAgC,OAAA;AAChC,oHAAA,0BAA0B,OAAA;AAC1B,+HAAA,qCAAqC,OAAA;AACrC,8GAAA,oBAAoB,OAAA;AACpB,8GAAA,oBAAoB,OAAA;AAgCrB,+CAA6C;AAApC,uGAAA,SAAS,OAAA;AAClB,yDAImC;AAHlC,iHAAA,kBAAkB,OAAA;AAClB,uHAAA,wBAAwB,OAAA;AACxB,qHAAA,sBAAsB,OAAA;AAGvB,uDAAqD;AAA5C,+GAAA,aAAa,OAAA;AACtB,uCAAsC;AAA7B,gGAAA,MAAM,OAAA;AAmBf,+CAA4D;AAAnD,gHAAA,qBAAqB,OAAA;AAG9B,yCAIuB;AAHtB,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AAEb,yCAAqD;AAA5C,+GAAA,oBAAoB,OAAA;AAS7B,qDAAmD;AAA1C,yGAAA,UAAU,OAAA;AACnB,iEAA8D;AAArD,oHAAA,eAAe,OAAA;AAaxB,+DAA4D;AAAnD,4GAAA,WAAW,OAAA;AAEpB,2EAO6C;AAN5C,qIAAA,8BAA8B,OAAA;AAC9B,+HAAA,wBAAwB,OAAA;AACxB,6HAAA,sBAAsB,OAAA;AACtB,kIAAA,2BAA2B,OAAA;AAC3B,yHAAA,kBAAkB,OAAA;AAClB,+HAAA,wBAAwB,OAAA;AAGzB,mFAYiD;AAXhD,uIAAA,4BAA4B,OAAA;AAC5B,sJAAA,2CAA2C,OAAA;AAC3C,8HAAA,mBAAmB,OAAA;AACnB,sIAAA,2BAA2B,OAAA;AAC3B,qIAAA,0BAA0B,OAAA;AAC1B,4IAAA,iCAAiC,OAAA;AACjC,iJAAA,sCAAsC,OAAA;AACtC,+IAAA,oCAAoC,OAAA;AACpC,iIAAA,sBAAsB,OAAA;AACtB,4IAAA,iCAAiC,OAAA;AACjC,uIAAA,4BAA4B,OAAA;AAkB7B,qEAA+F;AAAtF,yHAAA,qBAAqB,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AACpD,yEAA4E;AAAnE,4HAAA,sBAAsB,OAAA;AAG/B,2FAA0F;AAAjF,0IAAA,2BAA2B,OAAA;AACpC,+DAAqE;AAA5D,qHAAA,oBAAoB,OAAA;AAC7B,sEAA6E;AAApE,4HAAA,wBAAwB,OAAA;AACjC,sEAS2C;AAR1C,wHAAA,oBAAoB,OAAA;AACpB,yHAAA,qBAAqB,OAAA;AACrB,uHAAA,mBAAmB,OAAA;AACnB,wHAAA,oBAAoB,OAAA;AACpB,2HAAA,uBAAuB,OAAA;AACvB,kIAAA,8BAA8B,OAAA;AAC9B,4HAAA,wBAAwB,OAAA;AACxB,iHAAA,aAAa,OAAA;AAEd,oEAW0C;AAVzC,0HAAA,uBAAuB,OAAA;AACvB,yHAAA,sBAAsB,OAAA;AACtB,yHAAA,sBAAsB,OAAA;AACtB,4HAAA,yBAAyB,OAAA;AACzB,6HAAA,0BAA0B,OAAA;AAC1B,gIAAA,6BAA6B,OAAA;AAC7B,yHAAA,sBAAsB,OAAA;AACtB,0HAAA,uBAAuB,OAAA;AACvB,4HAAA,yBAAyB,OAAA;AACzB,6HAAA,0BAA0B,OAAA;AAE3B,oFAIkD;AAHjD,gIAAA,qBAAqB,OAAA;AACrB,+HAAA,oBAAoB,OAAA;AACpB,8IAAA,mCAAmC,OAAA;AAMpC,sFASmD;AARlD,4JAAA,gDAAgD,OAAA;AAChD,mJAAA,uCAAuC,OAAA;AACvC,uJAAA,2CAA2C,OAAA;AAC3C,2JAAA,+CAA+C,OAAA;AAC/C,qJAAA,yCAAyC,OAAA;AACzC,yIAAA,6BAA6B,OAAA;AAC7B,8IAAA,kCAAkC,OAAA;AAClC,yIAAA,6BAA6B,OAAA;AAO9B,sFAKmD;AAJlD,uIAAA,2BAA2B,OAAA;AAC3B,oIAAA,wBAAwB,OAAA;AACxB,qIAAA,yBAAyB,OAAA;AACzB,qIAAA,yBAAyB,OAAA;AAE1B,wFAKoD;AAJnD,8IAAA,iCAAiC,OAAA;AACjC,8IAAA,iCAAiC,OAAA;AACjC,8IAAA,iCAAiC,OAAA;AACjC,uIAAA,0BAA0B,OAAA;AAE3B,wFAAoF;AAA3E,mIAAA,sBAAsB,OAAA;AAC/B,sFAYmD;AAXlD,8IAAA,kCAAkC,OAAA;AAClC,6IAAA,iCAAiC,OAAA;AACjC,yIAAA,6BAA6B,OAAA;AAC7B,yIAAA,6BAA6B,OAAA;AAC7B,+IAAA,mCAAmC,OAAA;AACnC,mJAAA,uCAAuC,OAAA;AACvC,6JAAA,iDAAiD,OAAA;AACjD,oJAAA,wCAAwC,OAAA;AACxC,8JAAA,kDAAkD,OAAA;AAClD,uJAAA,2CAA2C,OAAA;AAC3C,8IAAA,kCAAkC,OAAA;AAmCnC,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAClB,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AACvB,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AACpB,yCAKqB;AAJpB,sHAAA,yBAAyB,OAAA;AACzB,kHAAA,qBAAqB,OAAA;AACrB,iHAAA,oBAAoB,OAAA;AACpB,oHAAA,uBAAuB,OAAA;AAExB,yCAAmE;AAA1D,kHAAA,qBAAqB,OAAA;AAAE,0GAAA,aAAa,OAAA;AAoC7C,uCAAgD;AAAvC,wGAAA,eAAe,OAAA;AACxB,mCAA2D;AAAlD,kGAAA,WAAW,OAAA;AAAE,sGAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsHA,iCAAyD;AAAhD,uGAAA,cAAc,OAAA;AAAE,uGAAA,cAAc,OAAA;AAEvC,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAEnB,iCAGiB;AAFhB,gHAAA,uBAAuB,OAAA;AACvB,iHAAA,wBAAwB,OAAA;AAEzB,2EAG6C;AAF5C,gIAAA,yBAAyB,OAAA;AAI1B,mDAA2F;AAAlF,kHAAA,kBAAkB,OAAA;AAAE,8GAAA,cAAc,OAAA;AAAE,iHAAA,iBAAiB,OAAA;AAE9D,qCAKqB;AAJpB,yGAAA,gBAAgB,OAAA;AAChB,qGAAA,YAAY,OAAA;AACZ,sGAAA,aAAa,OAAA;AACb,uGAAA,cAAc,OAAA;AAEf,iEAI0C;AAHzC,4IAAA,4CAA4C,OAAA;AAC5C,oIAAA,oCAAoC,OAAA;AACpC,qHAAA,qBAAqB,OAAA;AAEtB,mCAMoB;AALnB,8GAAA,sBAAsB,OAAA;AACtB,+GAAA,uBAAuB,OAAA;AACvB,4FAAA,IAAI,OAAA;AACJ,2GAAA,mBAAmB,OAAA;AACnB,wGAAA,gBAAgB,OAAA;AAGjB,6DAIiC;AAHhC,0HAAA,qBAAqB,OAAA;AACrB,8HAAA,yBAAyB,OAAA;AACzB,sHAAA,iBAAiB,OAAA;AAElB,uCAAsC;AAA7B,gGAAA,MAAM,OAAA;AACf,mDAAiD;AAAxC,2GAAA,WAAW,OAAA;AACpB,iEAKmC;AAJlC,uHAAA,gBAAgB,OAAA;AAChB,2HAAA,oBAAoB,OAAA;AACpB,wHAAA,iBAAiB,OAAA;AACjB,6HAAA,sBAAsB,OAAA;AAGvB,6CAA4C;AAAnC,sGAAA,SAAS,OAAA;AAClB,0EAA8F;AAArF,kHAAA,cAAc,OAAA;AAAE,yHAAA,qBAAqB,OAAA;AAO9C,+CAS0B;AARzB,wGAAA,UAAU,OAAA;AACV,wGAAA,UAAU,OAAA;AACV,2HAAA,6BAA6B,OAAA;AAC7B,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,6GAAA,eAAe,OAAA;AACf,wGAAA,UAAU,OAAA;AACV,sHAAA,wBAAwB,OAAA;AASzB,mCAAkC;AAAzB,4FAAA,IAAI,OAAA;AACb,2CAA0C;AAAjC,oGAAA,QAAQ,OAAA;AAEjB,QAAY,KAAK,0CAAsB;AACvC,6CAA4C;AAAnC,sGAAA,SAAS,OAAA;AAClB,+EAAkF;AAAzE,8HAAA,uBAAuB,OAAA;AAChC,sDAA8D;AAArD,+GAAA,kBAAkB,OAAA;AAE3B,qCAAoC;AAA3B,8FAAA,KAAK,OAAA;AAMd,mCAqBkB;AApBjB,0HAAA,gCAAgC,OAAA;AAChC,oHAAA,0BAA0B,OAAA;AAC1B,kHAAA,wBAAwB,OAAA;AACxB,iHAAA,uBAAuB,OAAA;AACvB,6GAAA,mBAAmB,OAAA;AACnB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,kHAAA,wBAAwB,OAAA;AACxB,wHAAA,8BAA8B,OAAA;AAC9B,6HAAA,mCAAmC,OAAA;AACnC,mHAAA,yBAAyB,OAAA;AACzB,kHAAA,wBAAwB,OAAA;AACxB,kHAAA,wBAAwB,OAAA;AACxB,iHAAA,uBAAuB,OAAA;AACvB,wHAAA,8BAA8B,OAAA;AAC9B,0HAAA,gCAAgC,OAAA;AAChC,oHAAA,0BAA0B,OAAA;AAC1B,+HAAA,qCAAqC,OAAA;AACrC,8GAAA,oBAAoB,OAAA;AACpB,8GAAA,oBAAoB,OAAA;AAgCrB,+CAA6C;AAApC,uGAAA,SAAS,OAAA;AAClB,yDAImC;AAHlC,iHAAA,kBAAkB,OAAA;AAClB,uHAAA,wBAAwB,OAAA;AACxB,qHAAA,sBAAsB,OAAA;AAGvB,uDAAqD;AAA5C,+GAAA,aAAa,OAAA;AACtB,uCAAsC;AAA7B,gGAAA,MAAM,OAAA;AAmBf,+CAA4D;AAAnD,gHAAA,qBAAqB,OAAA;AAG9B,yCAIuB;AAHtB,4GAAA,iBAAiB,OAAA;AACjB,uGAAA,YAAY,OAAA;AACZ,uGAAA,YAAY,OAAA;AAEb,yCAAqD;AAA5C,+GAAA,oBAAoB,OAAA;AAS7B,qDAAmD;AAA1C,yGAAA,UAAU,OAAA;AACnB,iEAA8D;AAArD,oHAAA,eAAe,OAAA;AAaxB,+DAA4D;AAAnD,4GAAA,WAAW,OAAA;AAEpB,2EAO6C;AAN5C,qIAAA,8BAA8B,OAAA;AAC9B,+HAAA,wBAAwB,OAAA;AACxB,6HAAA,sBAAsB,OAAA;AACtB,kIAAA,2BAA2B,OAAA;AAC3B,yHAAA,kBAAkB,OAAA;AAClB,+HAAA,wBAAwB,OAAA;AAGzB,mFAYiD;AAXhD,uIAAA,4BAA4B,OAAA;AAC5B,sJAAA,2CAA2C,OAAA;AAC3C,8HAAA,mBAAmB,OAAA;AACnB,sIAAA,2BAA2B,OAAA;AAC3B,qIAAA,0BAA0B,OAAA;AAC1B,4IAAA,iCAAiC,OAAA;AACjC,iJAAA,sCAAsC,OAAA;AACtC,+IAAA,oCAAoC,OAAA;AACpC,iIAAA,sBAAsB,OAAA;AACtB,4IAAA,iCAAiC,OAAA;AACjC,uIAAA,4BAA4B,OAAA;AAkB7B,qEAA+F;AAAtF,yHAAA,qBAAqB,OAAA;AAAE,wHAAA,oBAAoB,OAAA;AACpD,yEAA4E;AAAnE,4HAAA,sBAAsB,OAAA;AAG/B,2FAA0F;AAAjF,0IAAA,2BAA2B,OAAA;AACpC,+DAAqE;AAA5D,qHAAA,oBAAoB,OAAA;AAC7B,sEAA6E;AAApE,4HAAA,wBAAwB,OAAA;AACjC,sEAS2C;AAR1C,wHAAA,oBAAoB,OAAA;AACpB,yHAAA,qBAAqB,OAAA;AACrB,uHAAA,mBAAmB,OAAA;AACnB,wHAAA,oBAAoB,OAAA;AACpB,2HAAA,uBAAuB,OAAA;AACvB,kIAAA,8BAA8B,OAAA;AAC9B,4HAAA,wBAAwB,OAAA;AACxB,iHAAA,aAAa,OAAA;AAEd,oEAW0C;AAVzC,0HAAA,uBAAuB,OAAA;AACvB,yHAAA,sBAAsB,OAAA;AACtB,yHAAA,sBAAsB,OAAA;AACtB,4HAAA,yBAAyB,OAAA;AACzB,6HAAA,0BAA0B,OAAA;AAC1B,gIAAA,6BAA6B,OAAA;AAC7B,yHAAA,sBAAsB,OAAA;AACtB,0HAAA,uBAAuB,OAAA;AACvB,4HAAA,yBAAyB,OAAA;AACzB,6HAAA,0BAA0B,OAAA;AAE3B,oFAIkD;AAHjD,gIAAA,qBAAqB,OAAA;AACrB,+HAAA,oBAAoB,OAAA;AACpB,8IAAA,mCAAmC,OAAA;AAOpC,sFASmD;AARlD,4JAAA,gDAAgD,OAAA;AAChD,mJAAA,uCAAuC,OAAA;AACvC,uJAAA,2CAA2C,OAAA;AAC3C,2JAAA,+CAA+C,OAAA;AAC/C,qJAAA,yCAAyC,OAAA;AACzC,yIAAA,6BAA6B,OAAA;AAC7B,8IAAA,kCAAkC,OAAA;AAClC,yIAAA,6BAA6B,OAAA;AAO9B,sFAKmD;AAJlD,uIAAA,2BAA2B,OAAA;AAC3B,oIAAA,wBAAwB,OAAA;AACxB,qIAAA,yBAAyB,OAAA;AACzB,qIAAA,yBAAyB,OAAA;AAE1B,wFAKoD;AAJnD,8IAAA,iCAAiC,OAAA;AACjC,8IAAA,iCAAiC,OAAA;AACjC,8IAAA,iCAAiC,OAAA;AACjC,uIAAA,0BAA0B,OAAA;AAE3B,wFAAoF;AAA3E,mIAAA,sBAAsB,OAAA;AAC/B,sFAYmD;AAXlD,8IAAA,kCAAkC,OAAA;AAClC,6IAAA,iCAAiC,OAAA;AACjC,yIAAA,6BAA6B,OAAA;AAC7B,yIAAA,6BAA6B,OAAA;AAC7B,+IAAA,mCAAmC,OAAA;AACnC,mJAAA,uCAAuC,OAAA;AACvC,6JAAA,iDAAiD,OAAA;AACjD,oJAAA,wCAAwC,OAAA;AACxC,8JAAA,kDAAkD,OAAA;AAClD,uJAAA,2CAA2C,OAAA;AAC3C,8IAAA,kCAAkC,OAAA;AAmCnC,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAClB,yCAA6C;AAApC,2GAAA,cAAc,OAAA;AACvB,yCAA0C;AAAjC,wGAAA,WAAW,OAAA;AACpB,yCAKqB;AAJpB,sHAAA,yBAAyB,OAAA;AACzB,kHAAA,qBAAqB,OAAA;AACrB,iHAAA,oBAAoB,OAAA;AACpB,oHAAA,uBAAuB,OAAA;AAExB,yCAAmE;AAA1D,kHAAA,qBAAqB,OAAA;AAAE,0GAAA,aAAa,OAAA;AAoC7C,uCAAgD;AAAvC,wGAAA,eAAe,OAAA;AACxB,mCAA2D;AAAlD,kGAAA,WAAW,OAAA;AAAE,sGAAA,eAAe,OAAA"}

package/dist/runtime/guardrails/budget-guardrail.d.ts

@@ -0,0 +1,27 @@
+import type { ModelGuardrail } from '../../types';
+export interface SpendEntry {
+    key: string;
+    usd: number;
+}
+export interface SpendTotal {
+    key: string;
+    totalUsd: number;
+    previousUsd: number;
+}
+export interface SpendLedger {
+    add(callId: string, entries: SpendEntry[]): Promise<SpendTotal[]>;
+    read(key: string): Promise<number>;
+}
+export interface BudgetGuardrailOptions {
+    ledger: SpendLedger;
+    sessionId?: string;
+    agentId?: string;
+    sessionCostCapUsd?: number;
+    monthlyBudgetUsd?: number;
+    alertThresholdPercent?: number;
+    onNotice?: (notice: {
+        code: 'budget.alert';
+    }) => void;
+}
+export declare function budgetMonthKey(agentId: string, now?: Date): string;
+export declare function createBudgetGuardrail(options: BudgetGuardrailOptions): ModelGuardrail;

package/dist/runtime/guardrails/budget-guardrail.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.budgetMonthKey = budgetMonthKey;
+exports.createBudgetGuardrail = createBudgetGuardrail;
+const SESSION_STOP = { action: 'stop', code: 'budget.session' };
+const MONTHLY_STOP = { action: 'stop', code: 'budget.monthly' };
+const MISCONFIGURED = { action: 'stop', code: 'budget.misconfigured' };
+const ALLOW = { action: 'allow' };
+function budgetMonthKey(agentId, now = new Date()) {
+    return `${agentId}:${now.toISOString().slice(0, 7)}`;
+}
+function hasId(value) {
+    return value !== undefined && value.length > 0;
+}
+function positiveUsd(value) {
+    if (value === undefined || !Number.isFinite(value) || value <= 0)
+        return undefined;
+    return value;
+}
+function createBudgetGuardrail(options) {
+    const { ledger, sessionId, agentId, alertThresholdPercent, onNotice } = options;
+    const sessionCostCapUsd = positiveUsd(options.sessionCostCapUsd);
+    const monthlyBudgetUsd = positiveUsd(options.monthlyBudgetUsd);
+    const alertLine = monthlyBudgetUsd !== undefined && alertThresholdPercent !== undefined
+        ? (monthlyBudgetUsd * alertThresholdPercent) / 100
+        : undefined;
+    return {
+        async before() {
+            if (sessionCostCapUsd !== undefined && !hasId(sessionId))
+                return MISCONFIGURED;
+            if (monthlyBudgetUsd !== undefined && !hasId(agentId))
+                return MISCONFIGURED;
+            if (sessionCostCapUsd !== undefined && hasId(sessionId)) {
+                const spent = await ledger.read(sessionId);
+                if (spent >= sessionCostCapUsd)
+                    return SESSION_STOP;
+            }
+            if (monthlyBudgetUsd !== undefined && hasId(agentId)) {
+                const spent = await ledger.read(budgetMonthKey(agentId));
+                if (spent >= monthlyBudgetUsd)
+                    return MONTHLY_STOP;
+            }
+            return ALLOW;
+        },
+        async after(ctx, usage) {
+            const cost = usage?.cost;
+            if (cost === undefined)
+                return;
+            const entries = [];
+            if (sessionCostCapUsd !== undefined && hasId(sessionId)) {
+                entries.push({ key: sessionId, usd: cost });
+            }
+            const month = hasId(agentId) ? budgetMonthKey(agentId) : undefined;
+            if (monthlyBudgetUsd !== undefined && month !== undefined) {
+                entries.push({ key: month, usd: cost });
+            }
+            if (entries.length === 0)
+                return;
+            const totals = await ledger.add(ctx.callId, entries);
+            if (alertLine === undefined || month === undefined)
+                return;
+            const monthTotal = totals.find((total) => total.key === month);
+            if (!monthTotal)
+                return;
+            if (monthTotal.previousUsd < alertLine && monthTotal.totalUsd >= alertLine) {
+                onNotice?.({ code: 'budget.alert' });
+            }
+        },
+    };
+}
+//# sourceMappingURL=budget-guardrail.js.map

package/dist/runtime/guardrails/budget-guardrail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-guardrail.js","sourceRoot":"","sources":["../../../src/runtime/guardrails/budget-guardrail.ts"],"names":[],"mappings":";;;;AA6BA,MAAM,YAAY,GAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACnF,MAAM,YAAY,GAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;AACnF,MAAM,aAAa,GAAsB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;AAC1F,MAAM,KAAK,GAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAGrD,wBAA+B,OAAe,EAAE,GAAG,GAAS,IAAI,IAAI,EAAE;IACrE,OAAO,GAAG,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,KAAK,CAAC,KAAyB;IACvC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAChD,CAAC;AAGD,SAAS,WAAW,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACnF,OAAO,KAAK,CAAC;AACd,CAAC;AAMD,+BAAsC,OAA+B;IACpE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAChF,MAAM,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,SAAS,GACd,gBAAgB,KAAK,SAAS,IAAI,qBAAqB,KAAK,SAAS;QACpE,CAAC,CAAC,CAAC,gBAAgB,GAAG,qBAAqB,CAAC,GAAG,GAAG;QAClD,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACN,KAAK,CAAC,MAAM;YACX,IAAI,iBAAiB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAE,OAAO,aAAa,CAAC;YAC/E,IAAI,gBAAgB,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;gBAAE,OAAO,aAAa,CAAC;YAE5E,IAAI,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,KAAK,IAAI,iBAAiB;oBAAE,OAAO,YAAY,CAAC;YACrD,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;gBACzD,IAAI,KAAK,IAAI,gBAAgB;oBAAE,OAAO,YAAY,CAAC;YACpD,CAAC;YACD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAA6B;YAC7C,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO;YAE/B,MAAM,OAAO,GAAiB,EAAE,CAAC;YACjC,IAAI,iBAAiB,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnE,IAAI,gBAAgB,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACzC,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,IAAI,UAAU,CAAC,WAAW,GAAG,SAAS,IAAI,UAAU,CAAC,QAAQ,IAAI,SAAS,EAAE,CAAC;gBAC5E,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;YACtC,CAAC;QACF,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/runtime/guardrails/guardrail-runner.d.ts

@@ -0,0 +1,18 @@
+import type { GuardrailModelCallContext, GuardrailModelCallSource, GuardrailStop, GuardrailToolCallContext, GuardrailsOptions, TokenUsage } from '../../types';
+export declare class GuardrailRunner {
+    private readonly hooks;
+    private readonly ids;
+    private constructor();
+    static from(options: GuardrailsOptions | undefined): GuardrailRunner | undefined;
+    modelCallContext(source: GuardrailModelCallSource, model: string): GuardrailModelCallContext;
+    toolCallContext(call: {
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
+        runId: string;
+    }): GuardrailToolCallContext;
+    before(ctx: GuardrailModelCallContext): Promise<GuardrailStop | undefined>;
+    after(ctx: GuardrailModelCallContext, usage: TokenUsage | undefined): Promise<void>;
+    beforeTool(ctx: GuardrailToolCallContext): Promise<GuardrailStop | undefined>;
+    afterTool(ctx: GuardrailToolCallContext, result: unknown): Promise<void>;
+}

package/dist/runtime/guardrails/guardrail-runner.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GuardrailRunner = void 0;
+class GuardrailRunner {
+    constructor(hooks, ids) {
+        this.hooks = hooks;
+        this.ids = ids;
+    }
+    static from(options) {
+        if (!options || options.hooks.length === 0)
+            return undefined;
+        return new GuardrailRunner(options.hooks, {
+            agentId: options.agentId,
+            threadId: options.threadId,
+        });
+    }
+    modelCallContext(source, model) {
+        return { callId: crypto.randomUUID(), ...this.ids, model, source };
+    }
+    toolCallContext(call) {
+        return { ...call, ...this.ids };
+    }
+    async before(ctx) {
+        for (const hook of this.hooks) {
+            const decision = await hook.before?.(ctx);
+            if (decision?.action === 'stop')
+                return { code: decision.code };
+        }
+        return undefined;
+    }
+    async after(ctx, usage) {
+        for (const hook of this.hooks) {
+            await hook.after?.(ctx, usage);
+        }
+    }
+    async beforeTool(ctx) {
+        for (const hook of this.hooks) {
+            const decision = await hook.beforeTool?.(ctx);
+            if (decision?.action === 'stop')
+                return { code: decision.code };
+        }
+        return undefined;
+    }
+    async afterTool(ctx, result) {
+        for (const hook of this.hooks) {
+            await hook.afterTool?.(ctx, result);
+        }
+    }
+}
+exports.GuardrailRunner = GuardrailRunner;
+//# sourceMappingURL=guardrail-runner.js.map

package/dist/runtime/guardrails/guardrail-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-runner.js","sourceRoot":"","sources":["../../../src/runtime/guardrails/guardrail-runner.ts"],"names":[],"mappings":";;;AAiBA;IACC,YACkB,KAAuB,EACvB,GAAiB;qBADjB,KAAK;mBACL,GAAG;IAClB,CAAC;IAGJ,MAAM,CAAC,IAAI,CAAC,OAAsC;QACjD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7D,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED,gBAAgB,CAAC,MAAgC,EAAE,KAAa;QAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpE,CAAC;IAED,eAAe,CAAC,IAKf;QACA,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAA8B;QAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,QAAQ,EAAE,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAA8B,EAAE,KAA6B;QACxE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAA6B;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,QAAQ,EAAE,MAAM,KAAK,MAAM;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAA6B,EAAE,MAAe;QAC7D,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;CACD"}

package/dist/runtime/loop/agent-runtime.d.ts

@@ -26,6 +26,7 @@ export declare class AgentRuntime {
     stream(input: AgentMessage[] | string, options?: RunOptions & ExecutionOptions): Promise<StreamResult>;
     resume(method: 'generate', data: unknown, options: ResumeOptions & ExecutionOptions): Promise<GenerateResult>;
     resume(method: 'stream', data: unknown, options: ResumeOptions & ExecutionOptions): Promise<StreamResult>;
+    resumePaused(options: Omit<ResumeOptions, 'toolCallId'> & ExecutionOptions): Promise<StreamResult>;
     crashResume(options: {
         runId: string;
         contextNotes?: string[];
@@ -45,8 +46,9 @@ export declare class AgentRuntime {
     private createRunServices;
     private maybeGenerateTitle;
     private runAgentLoop;
+    private consumeAdditionalInput;
     private prepareLoop;
-    private canDiscardRejectedInput;
+    private getRejectableInputIds;
     private buildToolBatchContext;
     private resumePendingTools;
     private runLoopIteration;

package/dist/runtime/loop/agent-runtime.js

@@ -11,8 +11,10 @@ const stream_sink_1 = require("./stream-sink");
 const catalog_1 = require("../../sdk/catalog");
 const model_1 = require("../../utils/model");
 const workspace_1 = require("../../workspace");
+const guardrail_runner_1 = require("../guardrails/guardrail-runner");
 const logger_1 = require("../logger");
 const memory_orchestrator_1 = require("../memory/memory-orchestrator");
+const tool_result_memory_1 = require("../memory/tool-result-memory");
 const title_generation_1 = require("../memory/title-generation");
 const message_list_1 = require("../model/message-list");
 const model_token_counter_1 = require("../model/model-token-counter");
@@ -138,6 +140,7 @@ class AgentRuntime {
         const { state, list, resumeData } = await this.prepareToolResume(data, options);
         let abortScope;
         let resumeClaimed = false;
+        let resumeAdmitted = false;
         try {
             const { runId: _rid, toolCallId: _tcid, onResumeClaimed: _onResumeClaimed, hostMetadata, ...callerExecOptions } = options;
             const mergedExecOptions = (0, checkpoint_data_1.mergeResumeExecutionOptions)(state, callerExecOptions);
@@ -152,6 +155,7 @@ class AgentRuntime {
             };
             this.updateState({ persistence: resumeOptions.persistence });
             await options.onResumeClaimed?.();
+            resumeAdmitted = true;
             abortScope = this.eventBus.createAbortScope(resumeOptions.abortSignal);
             const activeAbortScope = abortScope;
             const pendingResume = {
@@ -171,9 +175,52 @@ class AgentRuntime {
             return this.createResumedStream(ctx);
         }
         catch (error) {
+            if (resumeClaimed && !resumeAdmitted) {
+                const suspendedState = { ...state, persistence: this.currentState.persistence };
+                await this.runState.suspend(this.runId, suspendedState);
+                this.updateState(suspendedState);
+                throw error;
+            }
             return await this.handleResumeFailure(method, error, abortScope, resumeClaimed);
         }
     }
+    async resumePaused(options) {
+        this.runId = options.runId;
+        const state = await this.runState.resume(this.runId);
+        if (!state || state.finishReason !== 'paused' || Object.keys(state.pendingToolCalls).length) {
+            throw new run_state_1.StaleResumeError('This run is not paused');
+        }
+        if (options.hostMetadata !== undefined && !state.persistence) {
+            throw new Error('Cannot update host metadata without persistence');
+        }
+        const { runId: _runId, hostMetadata, onResumeClaimed, ...executionOptions } = options;
+        const resumeOptions = {
+            ...(0, checkpoint_data_1.mergeResumeExecutionOptions)(state, executionOptions),
+            persistence: (0, checkpoint_data_1.mergeResumePersistence)(state.persistence, hostMetadata),
+        };
+        const list = await this.restoreCheckpointMessages(state);
+        if (!(await this.runState.claimResume(this.runId, state))) {
+            throw new run_state_1.StaleResumeError('This run has already resumed');
+        }
+        this.updateState({
+            status: 'running',
+            finishReason: undefined,
+            persistence: resumeOptions.persistence,
+        });
+        const abortScope = this.eventBus.createAbortScope(resumeOptions.abortSignal);
+        try {
+            await onResumeClaimed?.();
+            await this.prepareResumeMemory(list, state.persistence);
+            return this.createResumedStream({ list, options: resumeOptions, abortScope });
+        }
+        catch (error) {
+            abortScope.dispose();
+            const suspendedState = { ...state, persistence: resumeOptions.persistence };
+            await this.runState.suspend(this.runId, suspendedState);
+            this.updateState(suspendedState);
+            throw error;
+        }
+    }
     async crashResume(options) {
         this.runId = options.runId;
         const state = await this.loadStepCheckpoint();
@@ -318,7 +365,7 @@ class AgentRuntime {
         result.runId = this.runId;
         result.usage = this.applyCost(result.usage);
         result.model = this.modelIdString;
-        if (!result.pendingSuspend?.length) {
+        if (!result.pendingSuspend?.length && result.finishReason !== 'paused') {
             this.updateState({ status: 'success', messageList: list.serialize() });
             this.eventBus.emit({ type: "agent_end", messages: result.messages });
         }
@@ -329,7 +376,8 @@ class AgentRuntime {
             ...this.telemetry.buildTelemetryOptions(options),
             ...(options?.onStepStart ? { onStepStart: options.onStepStart } : {}),
             ...(options?.onStepEnd || options?.onStepFinish
-                ? { onStepEnd: options.onStepEnd ?? options.onStepFinish }
+                ?
+                    { onStepEnd: options.onStepEnd ?? options.onStepFinish }
                 : {}),
             repairToolCall: async (options) => {
                 return await (0, fix_tool_call_1.fixToolCall)({
@@ -372,6 +420,8 @@ class AgentRuntime {
             modelFetch: this.config.modelFetch,
             turnDelta: list.turnDelta(),
             executionCounter: options.executionCounter,
+            onSideCallUsage: options.onSideCallUsage,
+            promptCaching: this.config.promptCaching,
         });
         this.backgroundTasks.track(titlePromise);
         if (this.config.titleGeneration.sync) {
@@ -386,12 +436,33 @@ class AgentRuntime {
                 return settlement.result;
         }
         for (; state.iterationCount < state.maxIterations; state.iterationCount++) {
+            const hasInput = await this.consumeAdditionalInput(prepared, sink, state);
+            if (state.guardrailStop)
+                break;
+            if (state.reachedStopCondition && !hasInput)
+                break;
+            this.assertNotAborted(prepared.abortScope);
+            if (await prepared.options?.shouldPause?.()) {
+                await this.persistSuspension({}, prepared.options, prepared.list, state.totalUsage, state.maxIterations, state.iterationCount, 'paused');
+                this.assertNotAborted(prepared.abortScope);
+                return await sink.finishSuspended({
+                    suspendRunId: this.runId,
+                    list: prepared.list,
+                    usage: state.totalUsage,
+                    suspensions: [],
+                    finishReason: 'paused',
+                });
+            }
+            state.reachedStopCondition = false;
             const settlement = await this.runLoopIteration(prepared, sink, state);
             if (settlement.suspended)
                 return settlement.result;
-            if (state.reachedStopCondition)
+            if (state.reachedStopCondition && !prepared.options?.onInputBoundary)
                 break;
         }
+        if (state.iterationCount >= state.maxIterations) {
+            await this.consumeAdditionalInput(prepared, sink, state);
+        }
         if (!state.reachedStopCondition && state.iterationCount >= state.maxIterations) {
             state.lastFinishReason = 'max-iterations';
         }
@@ -401,8 +472,34 @@ class AgentRuntime {
             finishReason: state.lastFinishReason,
             usage: state.totalUsage,
             structuredOutput: state.structuredOutput,
+            guardrail: state.guardrailStop,
         });
     }
+    async consumeAdditionalInput(ctx, sink, state) {
+        const receive = ctx.options?.onInputBoundary;
+        if (!receive || state.lastFinishReason === 'error')
+            return false;
+        this.assertNotAborted(ctx.abortScope);
+        await sink.inputBoundary?.(ctx.abortScope.signal);
+        this.assertNotAborted(ctx.abortScope);
+        const messages = await receive({
+            messages: (0, tool_result_memory_1.sanitizeOffloadedToolResultsForMemory)(ctx.list.turnDelta()),
+            lastCreatedAt: ctx.list.messages().at(-1)?.createdAt.getTime() ?? 0,
+            completing: state.reachedStopCondition,
+            canContinue: state.iterationCount < state.maxIterations && !state.guardrailStop,
+        });
+        ctx.list.addInput(messages);
+        for (const message of messages)
+            await sink.emitInput?.(message);
+        this.assertNotAborted(ctx.abortScope);
+        if (messages.length > 0) {
+            state.structuredOutput = undefined;
+            await (0, hydrate_file_parts_1.hydrateFileParts)(ctx.list.messages(), this.config.fileStore, {
+                threadId: ctx.options?.persistence?.threadId,
+            });
+        }
+        return messages.length > 0;
+    }
     async prepareLoop(ctx) {
         const { list, options } = ctx;
         await this.activeSkills?.restore(list, options?.persistence);
@@ -428,22 +525,23 @@ class AgentRuntime {
                 runTelemetry,
                 staticContext,
                 instructionProviderOptions,
-                canDiscardRejectedInput: this.canDiscardRejectedInput(ctx),
+                acceptedInputIds: new Set(ctx.isFreshRun ? [] : list.inputDelta().map((message) => message.id)),
             },
             state,
         };
     }
-    canDiscardRejectedInput(ctx) {
-        const inputMessages = new Set(ctx.list.inputDelta());
+    getRejectableInputIds(ctx) {
+        const inputMessages = new Set(ctx.list.inputDelta().filter((message) => !ctx.acceptedInputIds.has(message.id)));
         const inputIds = new Set([...inputMessages].map((message) => message.id));
-        return (ctx.isFreshRun === true &&
-            [...inputMessages].some((message) => 'role' in message &&
-                message.role === 'user' &&
-                Array.isArray(message.content) &&
-                message.content.some((part) => part.type === 'file' && part.data !== undefined)) &&
-            !ctx.list
-                .messages()
-                .some((message) => !inputMessages.has(message) && inputIds.has(message.id)));
+        const hasFiles = [...inputMessages].some((message) => 'role' in message &&
+            message.role === 'user' &&
+            Array.isArray(message.content) &&
+            message.content.some((part) => part.type === 'file' && part.data !== undefined));
+        if (!hasFiles)
+            return [];
+        if (ctx.list.messages().some((message) => !inputMessages.has(message) && inputIds.has(message.id)))
+            return [];
+        return [...inputIds];
     }
     buildToolBatchContext(ctx, toolMap) {
         return {
@@ -453,6 +551,8 @@ class AgentRuntime {
             persistence: ctx.options?.persistence,
             telemetry: ctx.runTelemetry,
             executionCounter: ctx.options?.executionCounter,
+            guardrails: ctx.options?.guardrails,
+            approvalContext: ctx.options?.approvalContext,
             abortSignal: ctx.abortScope.signal,
             isAborted: () => ctx.abortScope.isAborted,
         };
@@ -472,9 +572,16 @@ class AgentRuntime {
     async runLoopIteration(ctx, sink, state) {
         this.assertNotAborted(ctx.abortScope);
         this.eventBus.emit({ type: "turn_start" });
-        const { toolMap, modelCallContext } = await this.prepareModelCall(ctx, state.iterationCount);
+        const { toolMap, modelCallContext } = await this.prepareModelCall(ctx);
         const turn = await this.callModelWithRetries(ctx, sink, state, modelCallContext);
+        if (!turn) {
+            state.lastFinishReason = 'guardrail';
+            state.reachedStopCondition = true;
+            return { suspended: false };
+        }
         this.assertNotAborted(ctx.abortScope);
+        for (const message of ctx.list.inputDelta())
+            ctx.acceptedInputIds.add(message.id);
         state.lastFinishReason = turn.finishReason;
         if (!(0, runtime_helpers_1.isReasoningOnlyStop)(turn))
             ctx.list.addResponse(turn.newMessages);
@@ -497,7 +604,7 @@ class AgentRuntime {
         await this.completeToolTurn(ctx, state, turn);
         return settlement;
     }
-    async prepareModelCall(ctx, iterationCount) {
+    async prepareModelCall(ctx) {
         const { list, options, abortScope, staticContext } = ctx;
         const tools = this.context.buildToolLoopContext(staticContext.aiProviderTools, options?.persistence, options?.executionCounter, list);
         const hostVolatileInstructions = await this.resolveVolatileInstructions(options?.persistence);
@@ -513,34 +620,53 @@ class AgentRuntime {
             system: prompt.system,
             messages: prompt.messages,
             abortSignal: abortScope.signal,
-            hasTools: tools.hasTools,
+            hasTools: options?.toolsEnabled !== false && tools.hasTools,
             aiTools: prompt.aiTools,
             reasoning: staticContext.reasoning,
             providerOptions: staticContext.providerOptions,
             outputSpec: staticContext.outputSpec,
             maxOutputTokens: staticContext.maxOutputTokens,
             aiSdkOptions: this.buildAiSdkOptions(tools.toolMap, options),
-            onInputRejected: this.createInputRejectionHandler(ctx, iterationCount),
+            onInputRejected: this.createInputRejectionHandler(ctx),
         };
         return { toolMap: tools.toolMap, modelCallContext };
     }
-    createInputRejectionHandler(ctx, iterationCount) {
-        if (!ctx.canDiscardRejectedInput || iterationCount !== 0)
+    createInputRejectionHandler(ctx) {
+        const messageIds = this.getRejectableInputIds(ctx);
+        if (messageIds.length === 0)
             return undefined;
         return async () => {
             if (ctx.abortScope.isAborted)
                 return;
-            await this.memory.discardRejectedInput(ctx.list, ctx.options);
+            await this.memory.discardRejectedInput(ctx.list, messageIds, ctx.options);
             this.updateState({ messageList: ctx.list.serialize() });
         };
     }
     async callModelWithRetries(ctx, sink, state, modelCallContext) {
-        let turn = await sink.callModel(modelCallContext);
-        for (let retry = 0; retry < MAX_EMPTY_TURN_RETRIES && (0, runtime_helpers_1.isEmptyModelTurn)(turn); retry++) {
+        const guardrails = guardrail_runner_1.GuardrailRunner.from(ctx.options?.guardrails);
+        const callModel = async () => {
+            const guardCtx = guardrails?.modelCallContext('turn', this.modelIdString);
+            if (guardrails && guardCtx) {
+                const stop = await guardrails.before(guardCtx);
+                if (stop) {
+                    state.guardrailStop = stop;
+                    return undefined;
+                }
+            }
+            const turn = await sink.callModel(modelCallContext);
+            turn.usage = this.applyCost(turn.usage);
+            if (guardrails && guardCtx)
+                await guardrails.after(guardCtx, turn.usage);
+            return turn;
+        };
+        let turn = await callModel();
+        for (let retry = 0; turn && retry < MAX_EMPTY_TURN_RETRIES && (0, runtime_helpers_1.isEmptyModelTurn)(turn); retry++) {
             this.recordTurnUsage(ctx, sink, state, turn);
             this.assertNotAborted(ctx.abortScope);
-            turn = await sink.callModel(modelCallContext);
+            turn = await callModel();
         }
+        if (!turn)
+            return undefined;
         this.recordTurnUsage(ctx, sink, state, turn);
         return turn;
     }
@@ -650,7 +776,7 @@ class AgentRuntime {
             });
         }
     }
-    async persistSuspension(pendingToolCalls, options, list, totalUsage, maxIterations, iterationCount) {
+    async persistSuspension(pendingToolCalls, options, list, totalUsage, maxIterations, iterationCount, finishReason) {
         const checkpointOptions = (0, checkpoint_data_1.buildCheckpointOptions)(options, maxIterations, iterationCount);
         (0, checkpoint_data_1.markSuspendedToolCalls)(list, pendingToolCalls);
         const state = {
@@ -659,10 +785,16 @@ class AgentRuntime {
             messageList: list.serialize(),
             pendingToolCalls,
             usage: totalUsage,
+            finishReason,
             ...checkpointOptions,
         };
         await this.runState.suspend(this.runId, state);
-        this.updateState({ status: 'suspended', pendingToolCalls, messageList: list.serialize() });
+        this.updateState({
+            status: 'suspended',
+            pendingToolCalls,
+            messageList: list.serialize(),
+            finishReason,
+        });
         await this.memory.persistTurnDelta(list, options);
     }
     async persistStepCheckpoint(list, totalUsage, options, maxIterations, iterationCount) {