@namzu/sdk 2.0.0 → 3.0.0

package/dist/runtime/query/iteration/phases/retained-messages.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=retained-messages.test.d.ts.map

package/dist/runtime/query/iteration/phases/retained-messages.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-messages.test.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/retained-messages.test.ts"],"names":[],"mappings":""}

package/dist/runtime/query/iteration/phases/retained-messages.test.js

@@ -0,0 +1,180 @@
+import { describe, expect, it, vi } from 'vitest';
+import { findDanglingMessages } from '../../../../compaction/dangling.js';
+import { WorkingStateManager } from '../../../../compaction/manager.js';
+import { clearStaleToolResults } from '../../../../compaction/tool-result-editing.js';
+import { CompactionConfigSchema } from '../../../../config/runtime.js';
+import { createAssistantMessage, createSystemMessage, createToolMessage, createUserMessage, } from '../../../../types/message/index.js';
+import { runCompactionCheck } from './compaction.js';
+/**
+ * Everything the run protected from compaction was protected by POSITION:
+ * the leading system run, the working-memory slot, the last N turns, the
+ * most recent tool results. So a standing constraint stated in the MIDDLE
+ * of a conversation aged out at the same rate as chatter, and no
+ * positional rule could express it.
+ */
+function makeLogger() {
+    const self = {
+        info: vi.fn(),
+        warn: vi.fn(),
+        error: vi.fn(),
+        debug: vi.fn(),
+    };
+    self.child = vi.fn(() => self);
+    return self;
+}
+const FILLER = 'x'.repeat(200);
+const CONSTRAINT = 'the account id is 4471; never bill a different one';
+function makeCtx(messages) {
+    const config = CompactionConfigSchema.parse({
+        strategy: 'structured',
+        llmVerification: false,
+        contextWindowTokens: 100,
+        // Off, so these cases exercise the rebuild rather than being
+        // satisfied by the cheap in-place reclaim that runs first.
+        clearToolResults: false,
+    });
+    const manager = new WorkingStateManager(config);
+    manager.addDecision('built the report');
+    return {
+        runConfig: { tokenBudget: 0 },
+        compactionConfig: config,
+        workingStateManager: manager,
+        log: makeLogger(),
+        runMgr: {
+            id: 'run_1',
+            currentIteration: 3,
+            messages,
+            lastPromptTokens: undefined,
+            clearLastPromptTokens: () => { },
+            accumulateUsage: () => { },
+        },
+        emitEvent: async () => { },
+    };
+}
+/** A long run whose middle holds one message worth keeping. */
+function longRun(pin = (m) => m) {
+    const msgs = [createSystemMessage(`STATIC SYSTEM PROMPT ${FILLER}`, 'cache')];
+    for (let i = 0; i < 8; i++) {
+        msgs.push(i === 1 ? pin(createUserMessage(CONSTRAINT)) : createUserMessage(`user turn ${i} ${FILLER}`));
+        msgs.push(createAssistantMessage(`assistant turn ${i} ${FILLER}`));
+    }
+    return msgs;
+}
+const pinned = (m) => ({ ...m, retain: true });
+const asText = (content) => (typeof content === 'string' ? content : '');
+describe('a message the host marked as never-evictable', () => {
+    it('is evicted without the marker', async () => {
+        // The premise. Without this the next case proves nothing: the
+        // message might simply have been recent enough to survive.
+        const messages = longRun();
+        await runCompactionCheck(makeCtx(messages));
+        expect(messages.some((m) => asText(m.content) === CONSTRAINT)).toBe(false);
+    });
+    it('survives the pass verbatim', async () => {
+        const messages = longRun(pinned);
+        await runCompactionCheck(makeCtx(messages));
+        expect(messages.some((m) => asText(m.content).includes('[COMPACTED CONTEXT]'))).toBe(true);
+        expect(messages.some((m) => asText(m.content) === CONSTRAINT)).toBe(true);
+    });
+    it('sits after the summary and before the recent window', async () => {
+        const messages = longRun(pinned);
+        await runCompactionCheck(makeCtx(messages));
+        const summary = messages.findIndex((m) => asText(m.content).includes('[COMPACTED CONTEXT]'));
+        const kept = messages.findIndex((m) => asText(m.content) === CONSTRAINT);
+        const lastTurn = messages.findIndex((m) => asText(m.content).startsWith('assistant turn 7'));
+        expect(kept).toBeGreaterThan(summary);
+        expect(kept).toBeLessThan(lastTurn);
+    });
+    it('does not keep the run alive by pinning everything', async () => {
+        // The marker is a budget the setter spends, and the pass must still
+        // reclaim what was not pinned.
+        const messages = longRun(pinned);
+        const before = messages.length;
+        await runCompactionCheck(makeCtx(messages));
+        expect(messages.length).toBeLessThan(before);
+    });
+});
+describe('a pinned half of a tool pair', () => {
+    function runWithPairs(pinIndex) {
+        const call = {
+            id: 'call_pinned',
+            type: 'function',
+            function: { name: 'lookup_account', arguments: '{}' },
+        };
+        const msgs = [createSystemMessage(`STATIC SYSTEM PROMPT ${FILLER}`, 'cache')];
+        msgs.push(createUserMessage(`user turn 0 ${FILLER}`));
+        const assistant = { ...createAssistantMessage(null, [call]) };
+        const result = createToolMessage(CONSTRAINT, 'call_pinned');
+        msgs.push(pinIndex === 'call' ? { ...assistant, retain: true } : assistant, pinIndex === 'result' ? { ...result, retain: true } : result);
+        for (let i = 1; i < 8; i++) {
+            msgs.push(createUserMessage(`user turn ${i} ${FILLER}`));
+            msgs.push(createAssistantMessage(`assistant turn ${i} ${FILLER}`));
+        }
+        return msgs;
+    }
+    it('pulls in the result when the call is pinned', async () => {
+        const messages = runWithPairs('call');
+        await runCompactionCheck(makeCtx(messages));
+        // Half a pair is not a smaller history — a `tool_use` with no
+        // `tool_result` is rejected outright on the next turn.
+        expect(findDanglingMessages(messages).isValid).toBe(true);
+        expect(messages.some((m) => asText(m.content) === CONSTRAINT)).toBe(true);
+    });
+    it('pulls in the call when the result is pinned', async () => {
+        const messages = runWithPairs('result');
+        await runCompactionCheck(makeCtx(messages));
+        expect(findDanglingMessages(messages).isValid).toBe(true);
+        expect(messages.some((m) => m.role === 'assistant' && m.toolCalls?.length)).toBe(true);
+    });
+    it('pulls in the SIBLING results of a fan-out, not just the pinned one', async () => {
+        // The second hop. Pinning one result pulls in its assistant turn,
+        // and that turn issued two more calls — an assistant with three
+        // calls and one surviving result is the same dangling error in the
+        // other direction.
+        const calls = ['a', 'b', 'c'].map((suffix) => ({
+            id: `call_${suffix}`,
+            type: 'function',
+            function: { name: `lookup_${suffix}`, arguments: '{}' },
+        }));
+        const messages = [createSystemMessage(`STATIC SYSTEM PROMPT ${FILLER}`, 'cache')];
+        messages.push(createUserMessage(`user turn 0 ${FILLER}`));
+        messages.push(createAssistantMessage(null, calls));
+        messages.push({ ...createToolMessage(CONSTRAINT, 'call_a'), retain: true }, createToolMessage(`sibling b ${FILLER}`, 'call_b'), createToolMessage(`sibling c ${FILLER}`, 'call_c'));
+        for (let i = 1; i < 8; i++) {
+            messages.push(createUserMessage(`user turn ${i} ${FILLER}`));
+            messages.push(createAssistantMessage(`assistant turn ${i} ${FILLER}`));
+        }
+        await runCompactionCheck(makeCtx(messages));
+        expect(findDanglingMessages(messages).isValid).toBe(true);
+        expect(messages.filter((m) => m.role === 'tool')).toHaveLength(3);
+    });
+});
+describe('a pinned tool result and the cheap in-place reclaim', () => {
+    function bigResults(pin) {
+        const calls = [0, 1, 2, 3].map((i) => ({
+            id: `call_${i}`,
+            type: 'function',
+            function: { name: 'lookup_account', arguments: '{}' },
+        }));
+        const msgs = [createUserMessage('go')];
+        for (const call of calls) {
+            msgs.push(createAssistantMessage(null, [call]));
+            const body = `${CONSTRAINT} ${'y'.repeat(5000)}`;
+            const result = createToolMessage(body, call.id);
+            msgs.push(pin && call.id === 'call_0' ? { ...result, retain: true } : result);
+        }
+        return msgs;
+    }
+    it('is cleared without the marker', async () => {
+        const edit = clearStaleToolResults(bigResults(false), { keepRecentToolResults: 1 });
+        expect(edit.clearedCount).toBe(3);
+    });
+    it('keeps its content when marked', async () => {
+        // Clearing keeps the message and replaces its content, which is
+        // exactly the loss the marker was asked to prevent.
+        const edit = clearStaleToolResults(bigResults(true), { keepRecentToolResults: 1 });
+        expect(edit.clearedCount).toBe(2);
+        expect(asText(edit.messages[2]?.content)).toContain(CONSTRAINT);
+    });
+});
+//# sourceMappingURL=retained-messages.test.js.map

package/dist/runtime/query/iteration/phases/retained-messages.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retained-messages.test.js","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/retained-messages.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+CAA+C,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAEtE,OAAO,EAEN,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GACjB,MAAM,oCAAoC,CAAA;AAE3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAGpD;;;;;;GAMG;AAEH,SAAS,UAAU;IAClB,MAAM,IAAI,GAAG;QACZ,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;QACb,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;QACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;KACO,CACrB;IAAC,IAA4C,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IACxE,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;AAC9B,MAAM,UAAU,GAAG,oDAAoD,CAAA;AAEvE,SAAS,OAAO,CAAC,QAAmB;IACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC;QAC3C,QAAQ,EAAE,YAAY;QACtB,eAAe,EAAE,KAAK;QACtB,mBAAmB,EAAE,GAAG;QACxB,6DAA6D;QAC7D,2DAA2D;QAC3D,gBAAgB,EAAE,KAAK;KACvB,CAAC,CAAA;IACF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAA;IAC/C,OAAO,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IAEvC,OAAO;QACN,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;QAC7B,gBAAgB,EAAE,MAAM;QACxB,mBAAmB,EAAE,OAAO;QAC5B,GAAG,EAAE,UAAU,EAAE;QACjB,MAAM,EAAE;YACP,EAAE,EAAE,OAAgB;YACpB,gBAAgB,EAAE,CAAC;YACnB,QAAQ;YACR,gBAAgB,EAAE,SAAS;YAC3B,qBAAqB,EAAE,GAAG,EAAE,GAAE,CAAC;YAC/B,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;SACzB;QACD,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;KACM,CAAA;AACjC,CAAC;AAED,+DAA+D;AAC/D,SAAS,OAAO,CAAC,MAA+B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,IAAI,GAAc,CAAC,mBAAmB,CAAC,wBAAwB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;IACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,CACR,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,MAAM,EAAE,CAAC,CAC5F,CAAA;QACD,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAChE,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAU,EAAE,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAEzF,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC7D,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC9C,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAA;QAC1B,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1F,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAA;QAC5F,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAA;QACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAA;QAE5F,MAAM,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,oEAAoE;QACpE,+BAA+B;QAC/B,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAA;QAC9B,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC7C,SAAS,YAAY,CAAC,QAA2B;QAChD,MAAM,IAAI,GAAG;YACZ,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE;SACrD,CAAA;QACD,MAAM,IAAI,GAAc,CAAC,mBAAmB,CAAC,wBAAwB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;QACxF,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAA;QACrD,MAAM,SAAS,GAAG,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,EAAa,CAAA;QACxE,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,aAAa,CAAY,CAAA;QACtE,IAAI,CAAC,IAAI,CACR,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,EAChE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC5D,CAAA;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;YACxD,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;QACnE,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QACrC,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,8DAA8D;QAC9D,uDAAuD;QACvD,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;QACvC,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACnF,kEAAkE;QAClE,gEAAgE;QAChE,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC9C,EAAE,EAAE,QAAQ,MAAM,EAAE;YACpB,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SACvD,CAAC,CAAC,CAAA;QACH,MAAM,QAAQ,GAAc,CAAC,mBAAmB,CAAC,wBAAwB,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAA;QAC5F,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAA;QACzD,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAY,CAAC,CAAA;QAC7D,QAAQ,CAAC,IAAI,CACZ,EAAE,GAAI,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAa,EAAE,MAAM,EAAE,IAAI,EAAE,EACzE,iBAAiB,CAAC,aAAa,MAAM,EAAE,EAAE,QAAQ,CAAY,EAC7D,iBAAiB,CAAC,aAAa,MAAM,EAAE,EAAE,QAAQ,CAAY,CAC7D,CAAA;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;YAC5D,QAAQ,CAAC,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAA;QACvE,CAAC;QAED,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACpE,SAAS,UAAU,CAAC,GAAY;QAC/B,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,UAAmB;YACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,EAAE;SACrD,CAAC,CAAC,CAAA;QACH,MAAM,IAAI,GAAc,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC,CAAA;YAC1D,MAAM,IAAI,GAAG,GAAG,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;YAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAY,CAAA;YAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9E,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAA;QACnF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC9C,gEAAgE;QAChE,oDAAoD;QACpD,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,CAAC,CAAA;QAElF,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/runtime/query/iteration/phases/tool-review-denials.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tool-review-denials.test.d.ts.map

package/dist/runtime/query/iteration/phases/tool-review-denials.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-review-denials.test.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/tool-review-denials.test.ts"],"names":[],"mappings":""}

package/dist/runtime/query/iteration/phases/tool-review-denials.test.js

@@ -0,0 +1,224 @@
+import { describe, expect, it, vi } from 'vitest';
+import { findDanglingMessages } from '../../../../compaction/dangling.js';
+import { ActivityStore } from '../../../../store/activity/memory.js';
+import { VerificationGate } from '../../../../verification/gate.js';
+import { ToolExecutor } from '../../executor.js';
+import { runToolReview } from './tool-review.js';
+/**
+ * Regression suite for the tool-review invariant:
+ *
+ *   Every `tool_use` block the model emits is answered by exactly one
+ *   `tool_result`, on every path — gate denial, human rejection, partial
+ *   approval — because an unanswered `tool_use` makes the NEXT provider
+ *   request malformed and kills the run.
+ *
+ * Plus the policy invariant discovered alongside it: a human "approve" on
+ * the gate's mixed-decision path must not execute the calls the gate
+ * denied.
+ */
+const RUN_ID = 'run_denial_test';
+function makeLogger() {
+    const stub = { info: vi.fn(), warn: vi.fn(), error: vi.fn(), debug: vi.fn() };
+    return { ...stub, child: vi.fn(() => ({ ...stub, child: vi.fn() })) };
+}
+/** `read` is read-only (gate-allowable); `bash rm -rf /` trips deny_dangerous_patterns. */
+function response() {
+    return {
+        id: 'resp_1',
+        model: 'test',
+        message: {
+            role: 'assistant',
+            content: null,
+            toolCalls: [
+                {
+                    id: 'call_safe',
+                    type: 'function',
+                    function: { name: 'read', arguments: JSON.stringify({ path: 'a.txt' }) },
+                },
+                {
+                    id: 'call_danger',
+                    type: 'function',
+                    function: { name: 'bash', arguments: JSON.stringify({ command: 'rm -rf /' }) },
+                },
+            ],
+        },
+        finishReason: 'tool_calls',
+        usage: { promptTokens: 0, completionTokens: 0, totalTokens: 0 },
+    };
+}
+/** The schema fills defaults; tests only state the rules they care about. */
+function gateConfig(partial) {
+    return {
+        enabled: true,
+        rules: [],
+        allowReadOnlyTools: false,
+        denyDangerousPatterns: false,
+        logDecisions: false,
+        ...partial,
+    };
+}
+function harness(opts) {
+    const executed = [];
+    const messages = [];
+    const log = makeLogger();
+    const toolDefs = {
+        read: { readOnly: true, category: 'filesystem' },
+        bash: { readOnly: false, category: 'shell' },
+    };
+    const tools = {
+        get: vi.fn((name) => {
+            const def = toolDefs[name];
+            if (!def)
+                return undefined;
+            return {
+                name,
+                category: def.category,
+                isReadOnly: () => def.readOnly,
+                isDestructive: () => !def.readOnly,
+                isConcurrencySafe: () => def.readOnly,
+            };
+        }),
+        execute: vi.fn(async (name) => {
+            executed.push(name);
+            return { success: true, output: `${name} ok` };
+        }),
+        has: vi.fn(() => true),
+        listNames: vi.fn(() => Object.keys(toolDefs)),
+        getAvailability: vi.fn(() => 'active'),
+        register: vi.fn(),
+        unregister: vi.fn(),
+    };
+    const toolExecutor = new ToolExecutor({
+        tools,
+        runId: RUN_ID,
+        workingDirectory: '/tmp',
+        permissionMode: 'auto',
+        env: {},
+        abortSignal: new AbortController().signal,
+    }, new ActivityStore(RUN_ID, { enabled: true, trackToolCalls: true, trackLlmTurns: true }), async () => { }, log);
+    const ctx = {
+        tools,
+        toolExecutor,
+        log,
+        abortController: new AbortController(),
+        runMgr: {
+            id: RUN_ID,
+            messages,
+            pushMessage: (m) => {
+                messages.push(m);
+            },
+            setStopReason: vi.fn(),
+            markCancelled: vi.fn(),
+        },
+        checkpointMgr: { create: async () => ({ id: 'cp_1' }) },
+        emitEvent: async () => { },
+        drainPending: async function* () { },
+        resumeHandler: async () => opts.decision ?? { action: 'approve_tools' },
+        verificationGate: opts.gate ? new VerificationGate(opts.gate, log) : undefined,
+    };
+    return { ctx, messages, executed };
+}
+/** Drain the generator and return its decision. */
+async function run(ctx, resp) {
+    const gen = runToolReview(ctx, resp, 1);
+    let next = await gen.next();
+    while (!next.done)
+        next = await gen.next();
+    return next.value.decision;
+}
+/** The whole point: history must be sendable to a provider afterwards. */
+function expectEveryToolCallAnswered(messages, resp) {
+    const assistant = {
+        role: 'assistant',
+        content: resp.message.content,
+        toolCalls: resp.message.toolCalls,
+    };
+    const history = [assistant, ...messages];
+    const dangling = findDanglingMessages(history);
+    expect(dangling.assistantsWithUnmatchedCalls).toEqual([]);
+    expect(dangling.orphanedToolMessages).toEqual([]);
+    expect(dangling.isValid).toBe(true);
+    const answered = messages
+        .filter((m) => m.role === 'tool')
+        .map((m) => m.toolCallId);
+    expect(answered.sort()).toEqual((resp.message.toolCalls ?? []).map((tc) => tc.id).sort());
+}
+describe('runToolReview — every tool_use is answered', () => {
+    it('gate all-deny still emits a tool_result per call', async () => {
+        const h = harness({
+            gate: gateConfig({ rules: [{ type: 'deny_by_name', toolNames: ['read', 'bash'] }] }),
+        });
+        const resp = response();
+        const outcome = await run(h.ctx, resp);
+        expect(outcome).toBe('rejected');
+        expect(h.executed).toEqual([]);
+        expectEveryToolCallAnswered(h.messages, resp);
+        // The reason must travel inside the tool_result so it can steer.
+        expect(h.messages.some((m) => String(m.content).includes('verification gate'))).toBe(true);
+    });
+    it('human reject_tools still emits a tool_result per call, carrying the feedback', async () => {
+        const h = harness({
+            decision: { action: 'reject_tools', feedback: 'Use the API instead of shelling out.' },
+        });
+        const resp = response();
+        const outcome = await run(h.ctx, resp);
+        expect(outcome).toBe('rejected');
+        expect(h.executed).toEqual([]);
+        expectEveryToolCallAnswered(h.messages, resp);
+        expect(h.messages.some((m) => String(m.content).includes('Use the API instead'))).toBe(true);
+    });
+    it('modify_tools with a PARTIAL deny answers the denied call too', async () => {
+        const h = harness({
+            decision: {
+                action: 'modify_tools',
+                modifications: [{ toolCallId: 'call_danger', action: 'deny' }],
+            },
+        });
+        const resp = response();
+        const outcome = await run(h.ctx, resp);
+        expect(outcome).toBe('executed');
+        expect(h.executed).toEqual(['read']);
+        expectEveryToolCallAnswered(h.messages, resp);
+    });
+    it('plain approval executes everything and answers everything', async () => {
+        const h = harness({ decision: { action: 'approve_tools' } });
+        const resp = response();
+        const outcome = await run(h.ctx, resp);
+        expect(outcome).toBe('executed');
+        expect(h.executed.sort()).toEqual(['bash', 'read']);
+        expectEveryToolCallAnswered(h.messages, resp);
+    });
+});
+describe('runToolReview — a gate denial outranks a human approval', () => {
+    it('approve_tools on the gate MIXED path does not execute the gate-denied call', async () => {
+        // allow_read_only allows `read`; deny_dangerous_patterns denies the
+        // `rm -rf /` bash call → mixed → human review → human approves.
+        const h = harness({
+            gate: gateConfig({ allowReadOnlyTools: true, denyDangerousPatterns: true }),
+            decision: { action: 'approve_tools' },
+        });
+        const resp = response();
+        const outcome = await run(h.ctx, resp);
+        expect(outcome).toBe('executed');
+        // THE BUG: this used to be ['read', 'bash'] — approval replayed the
+        // full unfiltered response and ran the call the gate refused.
+        expect(h.executed).toEqual(['read']);
+        expectEveryToolCallAnswered(h.messages, resp);
+    });
+    it('modify_tools cannot rewrite a gate-denied call back into execution', async () => {
+        const h = harness({
+            gate: gateConfig({ allowReadOnlyTools: true, denyDangerousPatterns: true }),
+            decision: {
+                action: 'modify_tools',
+                modifications: [
+                    { toolCallId: 'call_danger', action: 'modify', modifiedInput: { command: 'ls' } },
+                ],
+            },
+        });
+        const resp = response();
+        await run(h.ctx, resp);
+        expect(h.executed).toEqual(['read']);
+        expectEveryToolCallAnswered(h.messages, resp);
+    });
+});
+//# sourceMappingURL=tool-review-denials.test.js.map

package/dist/runtime/query/iteration/phases/tool-review-denials.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-review-denials.test.js","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/tool-review-denials.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAA;AAQpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAA;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEhD;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,GAAG,iBAA0B,CAAA;AAEzC,SAAS,UAAU;IAClB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAA;IAC7E,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAuB,CAAA;AAC3F,CAAC;AAED,2FAA2F;AAC3F,SAAS,QAAQ;IAChB,OAAO;QACN,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,MAAM;QACb,OAAO,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE;gBACV;oBACC,EAAE,EAAE,WAAW;oBACf,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE;iBACxE;gBACD;oBACC,EAAE,EAAE,aAAa;oBACjB,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE;iBAC9E;aACD;SACD;QACD,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;KACrC,CAAA;AAC5B,CAAC;AAQD,6EAA6E;AAC7E,SAAS,UAAU,CAAC,OAAwC;IAC3D,OAAO;QACN,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,EAAE;QACT,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,KAAK;QAC5B,YAAY,EAAE,KAAK;QACnB,GAAG,OAAO;KACV,CAAA;AACF,CAAC;AAED,SAAS,OAAO,CAAC,IAGhB;IACA,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,GAAG,GAAG,UAAU,EAAE,CAAA;IAExB,MAAM,QAAQ,GAA4D;QACzE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE;QAChD,IAAI,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE;KAC5C,CAAA;IAED,MAAM,KAAK,GAAG;QACb,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;YAC3B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;YAC1B,IAAI,CAAC,GAAG;gBAAE,OAAO,SAAS,CAAA;YAC1B,OAAO;gBACN,IAAI;gBACJ,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ;gBAC9B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ;gBAClC,iBAAiB,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ;aACrC,CAAA;QACF,CAAC,CAAC;QACF,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YACrC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,KAAK,EAAE,CAAA;QAC/C,CAAC,CAAC;QACF,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACtB,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;QACtC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;QACjB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;KACgB,CAAA;IAEpC,MAAM,YAAY,GAAG,IAAI,YAAY,CACpC;QACC,KAAK;QACL,KAAK,EAAE,MAAM;QACb,gBAAgB,EAAE,MAAM;QACxB,cAAc,EAAE,MAAM;QACtB,GAAG,EAAE,EAAE;QACP,WAAW,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;KACzC,EACD,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EACvF,KAAK,IAAI,EAAE,GAAE,CAAC,EACd,GAAG,CACH,CAAA;IAED,MAAM,GAAG,GAAG;QACX,KAAK;QACL,YAAY;QACZ,GAAG;QACH,eAAe,EAAE,IAAI,eAAe,EAAE;QACtC,MAAM,EAAE;YACP,EAAE,EAAE,MAAM;YACV,QAAQ;YACR,WAAW,EAAE,CAAC,CAAU,EAAE,EAAE;gBAC3B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,CAAC;YACD,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;YACtB,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE;SACtB;QACD,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;QACvD,SAAS,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;QACzB,YAAY,EAAE,KAAK,SAAS,CAAC,MAAK,CAAC;QACnC,aAAa,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAK,EAAE,MAAM,EAAE,eAAe,EAAyB;QAC/F,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/C,CAAA;IAEhC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;AACnC,CAAC;AAED,mDAAmD;AACnD,KAAK,UAAU,GAAG,CAAC,GAAqB,EAAE,IAA4B;IACrE,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACvC,IAAI,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC3B,OAAO,CAAC,IAAI,CAAC,IAAI;QAAE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAA;AAC3B,CAAC;AAED,0EAA0E;AAC1E,SAAS,2BAA2B,CAAC,QAAmB,EAAE,IAA4B;IACrF,MAAM,SAAS,GAAY;QAC1B,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;KACjC,CAAA;IACD,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;IAC9C,MAAM,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACzD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;IACjD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEnC,MAAM,QAAQ,GAAG,QAAQ;SACvB,MAAM,CAAC,CAAC,CAAC,EAAyC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;SACvE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,CAAC,GAAG,OAAO,CAAC;YACjB,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;SACpF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9B,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC7C,iEAAiE;QACjE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,CAAC,GAAG,OAAO,CAAC;YACjB,QAAQ,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,sCAAsC,EAAE;SACtF,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QAC9B,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,CAAC,GAAG,OAAO,CAAC;YACjB,QAAQ,EAAE;gBACT,MAAM,EAAE,cAAc;gBACtB,aAAa,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aACxC;SACvB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACpC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;QACnD,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;IACxE,EAAE,CAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC3F,oEAAoE;QACpE,gEAAgE;QAChE,MAAM,CAAC,GAAG,OAAO,CAAC;YACjB,IAAI,EAAE,UAAU,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;YAC3E,QAAQ,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE;SACrC,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAChC,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACpC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,CAAC,GAAG,OAAO,CAAC;YACjB,IAAI,EAAE,UAAU,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC;YAC3E,QAAQ,EAAE;gBACT,MAAM,EAAE,cAAc;gBACtB,aAAa,EAAE;oBACd,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;iBACjF;aACqB;SACvB,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAA;QACvB,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;QACpC,2BAA2B,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/runtime/query/iteration/phases/tool-review.d.ts

@@ -5,7 +5,35 @@ import { type IterationContext } from './context.js';
 interface VerificationAwareContext extends IterationContext {
     readonly verificationGate?: VerificationGate;
 }
-export type ToolReviewOutcome = 'executed' | 'rejected' | 'stop';
+export type ToolReviewDecision = 'executed' | 'rejected' | 'stop';
+/**
+ * What the review produced. The tool outcomes travel with the decision so
+ * the loop can build a `StepResult` without re-deriving them from the
+ * messages it just pushed.
+ */
+export interface ToolReviewOutcome {
+    decision: ToolReviewDecision;
+    results: readonly import('../../executor.js').ToolCallOutcome[];
+    /** Wall-clock spent executing tools in this review. */
+    durationMs: number;
+}
+/**
+ * Run every tool call in `response` through the gate and (when the gate is
+ * inconclusive) a human, then hand the whole batch — approved and refused
+ * alike — to the executor.
+ *
+ * Two invariants this function is responsible for:
+ *
+ * 1. **Every `tool_use` is answered.** No branch may return without the
+ *    executor having produced a `tool_result` for each call, because an
+ *    unanswered `tool_use` makes the next provider request malformed. The
+ *    refusal reason rides inside the `tool_result`, which is also what
+ *    lets a rejection steer the model instead of just stopping it.
+ * 2. **A gate denial is never overridable by an approval.** A human
+ *    approving a batch approves the calls the gate left undecided — not
+ *    the ones it refused. Gate denials are threaded into every downstream
+ *    execution so no path can widen them.
+ */
 export declare function runToolReview(ctx: VerificationAwareContext, response: ChatCompletionResponse, iterationNum: number): AsyncGenerator<RunEvent, ToolReviewOutcome>;
 export {};
 //# sourceMappingURL=tool-review.d.ts.map

package/dist/runtime/query/iteration/phases/tool-review.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-review.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/tool-review.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACzE,OAAO,EAAE,KAAK,gBAAgB,EAAwB,MAAM,cAAc,CAAA;AAE1E,UAAU,wBAAyB,SAAQ,gBAAgB;IAC1D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CAC5C;AAED,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAA;AAEhE,wBAAuB,aAAa,CACnC,GAAG,EAAE,wBAAwB,EAC7B,QAAQ,EAAE,sBAAsB,EAChC,YAAY,EAAE,MAAM,GAClB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CA8M7C"}
+{"version":3,"file":"tool-review.d.ts","sourceRoot":"","sources":["../../../../../src/runtime/query/iteration/phases/tool-review.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAA;AACjF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AAEzE,OAAO,EAAE,KAAK,gBAAgB,EAAwB,MAAM,cAAc,CAAA;AAE1E,UAAU,wBAAyB,SAAQ,gBAAgB;IAC1D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAA;CAC5C;AAED,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAA;AAEjE;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,EAAE,kBAAkB,CAAA;IAC5B,OAAO,EAAE,SAAS,OAAO,mBAAmB,EAAE,eAAe,EAAE,CAAA;IAC/D,uDAAuD;IACvD,UAAU,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAuB,aAAa,CACnC,GAAG,EAAE,wBAAwB,EAC7B,QAAQ,EAAE,sBAAsB,EAChC,YAAY,EAAE,MAAM,GAClB,cAAc,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CA0Q7C"}