@namzu/sdk 2.0.0 → 3.0.0

package/dist/runtime/query/question-park.js

@@ -0,0 +1,71 @@
+/**
+ * A recorder whose backing store is attached later.
+ *
+ * The tool that asks is built before the run exists — an agent constructs
+ * its tool registry, and only then hands it to `query()`, which is where
+ * the checkpoint manager is created. Binding late is what lets the same
+ * tool instance be durable inside a run and inert outside one, without the
+ * tool builder needing to know about checkpoints at all.
+ *
+ * Unbound, `record` returns `null` and `resolve` is a no-op, which is
+ * exactly the previous behaviour: the in-process await still works, only
+ * the cross-process handoff is missing.
+ */
+export class QuestionParkBinding {
+    backing;
+    bind(recorder) {
+        this.backing = recorder;
+    }
+    /** Detach when the run settles, so a later run cannot write into it. */
+    unbind() {
+        this.backing = undefined;
+    }
+    async record(question) {
+        return (await this.backing?.record(question)) ?? null;
+    }
+    async resolve(checkpointId, decision) {
+        await this.backing?.resolve(checkpointId, decision);
+    }
+}
+/**
+ * Answers carried into a resumed run, keyed by the `questionId` of the
+ * tool call that asked.
+ *
+ * Consulted before the park handler, so a re-entered `ask_user_question`
+ * returns the recorded answer rather than parking a second time — which
+ * would ask the user something they have already answered, and in a
+ * headless resume would deadlock or auto-answer with the no-consent
+ * sentinel.
+ *
+ * Each answer is consumed once. A tool that somehow asks the same question
+ * twice in one resumed run is asking a genuinely new question the second
+ * time, and answering it from a stale record would be fabricating consent.
+ */
+export class PendingAnswers {
+    answers = new Map();
+    static from(decision) {
+        const pending = new PendingAnswers();
+        if (decision?.action === 'answer_question' && decision.questionId !== undefined) {
+            pending.set(decision.questionId, decision);
+        }
+        return pending;
+    }
+    set(questionId, decision) {
+        this.answers.set(questionId, decision);
+    }
+    /** Take the answer for this question, removing it. */
+    take(questionId) {
+        const answer = this.answers.get(questionId);
+        if (answer !== undefined)
+            this.answers.delete(questionId);
+        return answer;
+    }
+    /** Every recorded answer, for copying between instances. */
+    entries() {
+        return this.answers.entries();
+    }
+    get size() {
+        return this.answers.size;
+    }
+}
+//# sourceMappingURL=question-park.js.map

package/dist/runtime/query/question-park.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"question-park.js","sourceRoot":"","sources":["../../../src/runtime/query/question-park.ts"],"names":[],"mappings":"AAyCA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,mBAAmB;IACvB,OAAO,CAAuB;IAEtC,IAAI,CAAC,QAA8B;QAClC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAA;IACxB,CAAC;IAED,wEAAwE;IACxE,MAAM;QACL,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA0B;QACtC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAA;IACtD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAA0B,EAAE,QAA4B;QACrE,MAAM,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAA;IACpD,CAAC;CACD;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IACT,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAA;IAEhE,MAAM,CAAC,IAAI,CAAC,QAAwC;QACnD,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;QACpC,IAAI,QAAQ,EAAE,MAAM,KAAK,iBAAiB,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QAC3C,CAAC;QACD,OAAO,OAAO,CAAA;IACf,CAAC;IAED,GAAG,CAAC,UAAkB,EAAE,QAA4B;QACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IACvC,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,UAAkB;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACzD,OAAO,MAAM,CAAA;IACd,CAAC;IAED,4DAA4D;IAC5D,OAAO;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAA;IAC9B,CAAC;IAED,IAAI,IAAI;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAA;IACzB,CAAC;CACD"}

package/dist/runtime/query/result.d.ts

@@ -2,6 +2,7 @@ import { type Span } from '@opentelemetry/api';
 import type { PlanManager } from '../../manager/plan/lifecycle.js';
 import type { RunPersistence } from '../../manager/run/persistence.js';
 import type { ActivityStore } from '../../store/activity/memory.js';
+import type { CheckpointId } from '../../types/hitl/index.js';
 import type { Run, RunEvent } from '../../types/run/index.js';
 import type { Logger } from '../../utils/logger.js';
 import type { EmitEvent } from './events.js';
@@ -12,6 +13,14 @@ export interface ResultAssemblerConfig {
     log: Logger;
     emitEvent: EmitEvent;
     drainPending: () => Generator<RunEvent>;
+    /**
+     * The state a host should resume from if the run settles recoverably.
+     *
+     * A function rather than a value: checkpoints are written per iteration,
+     * so the answer changes as the run proceeds and reading it at
+     * construction would pin the first one forever.
+     */
+    resumeCheckpointId?: () => CheckpointId | undefined;
 }
 export declare class ResultAssembler {
     private config;

package/dist/runtime/query/result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,EAAkB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAEtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAEnE,OAAO,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAE7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,cAAc,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;IACxB,aAAa,EAAE,aAAa,CAAA;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAA;CACvC;AAED,qBAAa,eAAe;IAC3B,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,EAAE,qBAAqB;IAIlC,WAAW,CAAC,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IA8BrD,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IAIzD,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IAsCpE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC;CAI9B"}
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,EAAkB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAEtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAA;AAInE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAE7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAE5C,MAAM,WAAW,qBAAqB;IACrC,MAAM,EAAE,cAAc,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;IACxB,aAAa,EAAE,aAAa,CAAA;IAC5B,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,SAAS,CAAA;IACpB,YAAY,EAAE,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAA;IACvC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,YAAY,GAAG,SAAS,CAAA;CACnD;AAED,qBAAa,eAAe;IAC3B,OAAO,CAAC,MAAM,CAAuB;gBAEzB,MAAM,EAAE,qBAAqB;IAIlC,WAAW,CAAC,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IA8BrD,eAAe,CAAC,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IAIzD,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC;IA2FpE,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC;CAI9B"}

package/dist/runtime/query/result.js

@@ -1,6 +1,8 @@
 import { SpanStatusCode } from '@opentelemetry/api';
 import { isProviderRequestError } from '../../provider/errors.js';
 import { GENAI, NAMZU } from '../../telemetry/attributes.js';
+import { explainError } from '../../types/errors/catalog.js';
+import { toPlatformError } from '../../types/errors/index.js';
 import { toErrorMessage } from '../../utils/error.js';
 export class ResultAssembler {
     config;
@@ -38,6 +40,46 @@ export class ResultAssembler {
     async *handleError(err, rootSpan) {
         const { runMgr, planManager, log, emitEvent, drainPending } = this.config;
         const errorMessage = toErrorMessage(err);
+        // The classifier at the provider boundary already walked the cause
+        // chain over status, errno and `Retry-After`, so a fully-populated
+        // error arrives here — and used to be flattened to a string one line
+        // later, discarding every field of it. `toPlatformError` is the
+        // projection that was written for exactly this and had no callers.
+        const failure = toPlatformError(err);
+        // A transient failure that survived every in-turn recovery is not the
+        // same thing as a bad API key, and settling both as `failed` gave the
+        // host no way to tell them apart — recovery meant knowing about
+        // checkpoints and driving replay itself. The state is already there:
+        // checkpoints are written every iteration by default. Only the settle
+        // and the signal were missing.
+        const resumeFrom = failure.retryable ? this.config.resumeCheckpointId?.() : undefined;
+        if (resumeFrom !== undefined) {
+            runMgr.setLastError(errorMessage);
+            runMgr.setStopReason('paused');
+            await emitEvent({
+                type: 'run_paused',
+                runId: runMgr.id,
+                checkpointId: resumeFrom,
+                reason: errorMessage,
+            });
+            yield* drainPending();
+            // OK, not ERROR: the run is resumable, and a span marked failed
+            // puts it in an error dashboard it does not belong in.
+            rootSpan.setAttributes({
+                [NAMZU.RUN_STATUS]: 'paused',
+                [NAMZU.ITERATION]: runMgr.currentIteration,
+            });
+            rootSpan.setStatus({ code: SpanStatusCode.OK });
+            log.warn('Run paused on a recoverable failure — resume from the checkpoint', {
+                runId: runMgr.id,
+                checkpointId: resumeFrom,
+                code: failure.code,
+                error: errorMessage,
+            });
+            return;
+        }
+        // The driver's classification, carried onto the run so a host can
+        // branch on WHAT failed without re-parsing a sentence.
         const providerError = isProviderRequestError(err)
             ? {
                 kind: err.kind,
@@ -50,11 +92,18 @@ export class ResultAssembler {
         if (planManager.isActive) {
             planManager.failPlan(errorMessage);
         }
+        // The classification says what kind of failure it is; the catalog
+        // says what a person should do about it. Keeping them separate is the
+        // point — classification is structural and belongs at the boundary,
+        // remediation is editorial and belongs in a list a human appends to.
+        const explanation = explainError(err) ?? undefined;
         await emitEvent({
             type: 'run_failed',
             runId: runMgr.id,
             error: errorMessage,
+            failure,
             ...(providerError ? { providerError } : {}),
+            ...(explanation ? { explanation } : {}),
         });
         yield* drainPending();
         rootSpan.setAttributes({

package/dist/runtime/query/result.js.map

@@ -1 +1 @@
-{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../src/runtime/query/result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAG9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AAEjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAE5D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAarD,MAAM,OAAO,eAAe;IACnB,MAAM,CAAuB;IAErC,YAAY,MAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAC,QAAc;QAChC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAE3E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACxC,CAAC;QAED,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,YAAY,EAAE,CAAA;QAErB,QAAQ,CAAC,aAAa,CAAC;YACtB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,IAAI,WAAW;YACpD,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB;YAC1C,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;YAC1D,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB;SAC/D,CAAC,CAAA;QACF,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;QAE/C,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,CAAC,eAAe,CAAC,QAAc;QACpC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAC,GAAY,EAAE,QAAc;QAC9C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QACzE,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QACxC,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC;YAChD,CAAC,CAAC;gBACA,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E;YACF,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;QAE9C,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACnC,CAAC;QAED,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,KAAK,EAAE,YAAY;YACnB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3C,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,YAAY,EAAE,CAAA;QAErB,QAAQ,CAAC,aAAa,CAAC;YACtB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO;YAC3B,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CAAC,CAAA;QACF,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;QACzE,QAAQ,CAAC,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QAE9E,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE;YACzB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,KAAK,EAAE,YAAY;SACnB,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACnC,CAAC;CACD"}
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../../src/runtime/query/result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAG9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAA;AAEjE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAqBrD,MAAM,OAAO,eAAe;IACnB,MAAM,CAAuB;IAErC,YAAY,MAA6B;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACrB,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAC,QAAc;QAChC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QAE3E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QACxC,CAAC;QAED,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,MAAM,IAAI,EAAE;SACpC,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,YAAY,EAAE,CAAA;QAErB,QAAQ,CAAC,aAAa,CAAC;YACtB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,UAAU,IAAI,WAAW;YACpD,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB;YAC1C,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,YAAY;YAC1D,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,gBAAgB;SAC/D,CAAC,CAAA;QACF,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;QAE/C,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE;YAC3B,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,UAAU,EAAE,MAAM,CAAC,gBAAgB;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,CAAC,eAAe,CAAC,QAAc;QACpC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IAClC,CAAC;IAED,KAAK,CAAC,CAAC,WAAW,CAAC,GAAY,EAAE,QAAc;QAC9C,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,MAAM,CAAA;QACzE,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,CAAC,CAAA;QACxC,mEAAmE;QACnE,mEAAmE;QACnE,qEAAqE;QACrE,gEAAgE;QAChE,mEAAmE;QACnE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAEpC,sEAAsE;QACtE,sEAAsE;QACtE,gEAAgE;QAChE,qEAAqE;QACrE,sEAAsE;QACtE,+BAA+B;QAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;QACrF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAA;YACjC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;YAE9B,MAAM,SAAS,CAAC;gBACf,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,MAAM,CAAC,EAAE;gBAChB,YAAY,EAAE,UAAU;gBACxB,MAAM,EAAE,YAAY;aACpB,CAAC,CAAA;YACF,KAAK,CAAC,CAAC,YAAY,EAAE,CAAA;YAErB,gEAAgE;YAChE,uDAAuD;YACvD,QAAQ,CAAC,aAAa,CAAC;gBACtB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,QAAQ;gBAC5B,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CAAA;YACF,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAA;YAE/C,GAAG,CAAC,IAAI,CAAC,kEAAkE,EAAE;gBAC5E,KAAK,EAAE,MAAM,CAAC,EAAE;gBAChB,YAAY,EAAE,UAAU;gBACxB,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK,EAAE,YAAY;aACnB,CAAC,CAAA;YACF,OAAM;QACP,CAAC;QAED,kEAAkE;QAClE,uDAAuD;QACvD,MAAM,aAAa,GAAG,sBAAsB,CAAC,GAAG,CAAC;YAChD,CAAC,CAAC;gBACA,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7E;YACF,CAAC,CAAC,SAAS,CAAA;QACZ,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;QAE9C,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;YAC1B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;QACnC,CAAC;QAED,kEAAkE;QAClE,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,SAAS,CAAA;QAElD,MAAM,SAAS,CAAC;YACf,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,KAAK,EAAE,YAAY;YACnB,OAAO;YACP,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAA;QACF,KAAK,CAAC,CAAC,YAAY,EAAE,CAAA;QAErB,QAAQ,CAAC,aAAa,CAAC;YACtB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,OAAO;YAC3B,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,gBAAgB;SAC1C,CAAC,CAAA;QACF,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAA;QACzE,QAAQ,CAAC,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAA;QAE9E,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE;YACzB,KAAK,EAAE,MAAM,CAAC,EAAE;YAChB,KAAK,EAAE,YAAY;SACnB,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAA;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAA;IACnC,CAAC;CACD"}

package/dist/runtime/query/resume-pending.d.ts

@@ -0,0 +1,106 @@
+import type { RunPersistence } from '../../manager/run/persistence.js';
+import type { CheckpointId, HITLResumeDecision, IterationCheckpoint } from '../../types/hitl/index.js';
+import type { AssistantMessage, Message, ToolCall } from '../../types/message/index.js';
+import type { ChatCompletionResponse } from '../../types/provider/index.js';
+import type { Logger } from '../../utils/logger.js';
+import type { PriorToolResults, ToolCallDenials, ToolExecutor } from './executor.js';
+import { PendingAnswers } from './question-park.js';
+/**
+ * Apply a decision collected out-of-band to the tool calls a run parked on.
+ *
+ * This is the half of durable HITL that actually pays off. Recording the
+ * park makes the request survive a restart; without this, a resumed run
+ * still threw the approval away — the restore path repairs the unanswered
+ * `tool_use` blocks and lets the model re-decide, so a human's "yes, delete
+ * that row" became "ask the model again and hope it asks for the same
+ * thing". The tool calls the human approved are right there in the
+ * checkpoint; the decision applies to THOSE, or it means nothing.
+ *
+ * Returns `null` when there is nothing to apply, in which case the caller
+ * keeps the existing repair-and-re-decide behavior.
+ */
+export interface PendingResumePlan {
+    /**
+     * The checkpoint the park was recorded on, so the caller can clear it
+     * once the decision has actually been applied. Leaving it outstanding
+     * makes an approval queue re-serve a destructive call that already ran.
+     */
+    readonly checkpointId: CheckpointId;
+    /** The assistant turn whose `tool_use` blocks are unanswered. */
+    readonly assistant: AssistantMessage;
+    /** Synthesized response the executor consumes. */
+    readonly response: ChatCompletionResponse;
+    /** Per-call refusals derived from the decision. */
+    readonly denials: ToolCallDenials;
+    /**
+     * Answers to deliver to tools that parked on a question, keyed by the
+     * asking call's id. Present only on a question resume.
+     */
+    readonly answers?: PendingAnswers;
+}
+/**
+ * Decide whether a restored checkpoint can have `decision` applied to it
+ * directly.
+ *
+ * Only `tool_review` parks qualify. A `plan_approval` or
+ * `iteration_checkpoint` park leaves no unanswered tool calls behind, so
+ * there is nothing to apply a decision TO — those resume by simply
+ * continuing, which the normal path already does correctly. A
+ * `user_question` park happens inside a tool's own execution, so honoring
+ * it across a restart would mean re-entering that tool; it is out of scope
+ * here and says so rather than pretending.
+ */
+export declare function planPendingResume(checkpoint: IterationCheckpoint, decision: HITLResumeDecision, log: Logger): PendingResumePlan | null;
+/**
+ * Decide whether a checkpoint left behind a batch that was PART-WAY
+ * through executing when the process died.
+ *
+ * The ordinary repair for an unanswered assistant turn — strip it and let
+ * the model re-decide — is right when nothing ran: the calls were still
+ * awaiting a decision, so re-deciding costs only a round trip. It is
+ * exactly wrong when some of them already ran, because re-deciding means
+ * re-executing, and a tool that charged a card does not become idempotent
+ * on the second attempt.
+ *
+ * The discriminator is the transcript: a tool-review park records the
+ * checkpoint BEFORE any execution, so it has no completed calls and takes
+ * the cheap path unchanged. One or more completions means execution had
+ * begun, which is a resume, not a fresh decision.
+ *
+ * The calls that did NOT complete are executed here for the first time,
+ * through the ordinary executor — so every guard, permission check and
+ * probe still applies to them.
+ */
+export declare function planCrashResume(checkpoint: IterationCheckpoint, completed: ReadonlyMap<string, unknown>, log: Logger): PendingResumePlan | null;
+/**
+ * Execute a resume plan, pushing the assistant turn and its results.
+ *
+ * The assistant message is re-pushed rather than repaired away, because
+ * the `tool_result` blocks about to be produced must answer the `tool_use`
+ * blocks that are in it — a result with no matching call is exactly the
+ * malformed request the repair path exists to prevent.
+ */
+export declare function applyPendingResume(plan: PendingResumePlan, runMgr: RunPersistence, executor: ToolExecutor, prior?: PriorToolResults): Promise<void>;
+/**
+ * Results the run already produced for calls in `toolCalls`.
+ *
+ * Read from the transcript, which records a `tool_completed` per tool as
+ * it finishes — durable long before the batch settles. Scoped to the calls
+ * being resumed so an id from an earlier turn can never answer this one.
+ *
+ * A failure to read is not fatal: the worst case is the behaviour that
+ * existed before this recovery, and refusing to resume because a log could
+ * not be read would be a strictly worse trade.
+ */
+export declare function recoverCompletedCalls(runMgr: RunPersistence, toolCalls: readonly ToolCall[], log: Logger): Promise<Map<string, {
+    result: string;
+    isError: boolean;
+}>>;
+/**
+ * Tool calls in the history that no `tool_result` answers.
+ *
+ * The set worth asking the transcript about: an already-answered call's
+ * result is in the history and needs no recovery.
+ */
+export declare function unansweredToolCalls(messages: readonly Message[]): ToolCall[];
+//# sourceMappingURL=resume-pending.d.ts.map

package/dist/runtime/query/resume-pending.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-pending.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/resume-pending.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,KAAK,EACX,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AACvF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAEnD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAA;IACnC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAA;IACpC,kDAAkD;IAClD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAA;IACzC,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CACjC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,mBAAmB,EAC/B,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,GACT,iBAAiB,GAAG,IAAI,CAyD1B;AAwDD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAC9B,UAAU,EAAE,mBAAmB,EAC/B,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,GAAG,EAAE,MAAM,GACT,iBAAiB,GAAG,IAAI,CAsB1B;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACvC,IAAI,EAAE,iBAAiB,EACvB,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,YAAY,EACtB,KAAK,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,SAAS,QAAQ,EAAE,EAC9B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC,CAsB5D;AA+ED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,QAAQ,EAAE,CAS5E"}

package/dist/runtime/query/resume-pending.js

@@ -0,0 +1,312 @@
+import { PendingAnswers } from './question-park.js';
+/**
+ * Decide whether a restored checkpoint can have `decision` applied to it
+ * directly.
+ *
+ * Only `tool_review` parks qualify. A `plan_approval` or
+ * `iteration_checkpoint` park leaves no unanswered tool calls behind, so
+ * there is nothing to apply a decision TO — those resume by simply
+ * continuing, which the normal path already does correctly. A
+ * `user_question` park happens inside a tool's own execution, so honoring
+ * it across a restart would mean re-entering that tool; it is out of scope
+ * here and says so rather than pretending.
+ */
+export function planPendingResume(checkpoint, decision, log) {
+    const pending = checkpoint.pending;
+    if (!pending)
+        return null;
+    // A question raised INSIDE a tool resumes through the same door. The
+    // checkpoint was written mid-execution, so it holds the assistant turn
+    // with its `tool_use` blocks unanswered — the same shape a tool-review
+    // park leaves — and re-executing that batch is exactly how the asking
+    // tool gets re-entered. The answer reaches it through `PendingAnswers`
+    // rather than through a second question, and siblings that already
+    // finished are answered from the transcript, so re-execution costs
+    // nothing beyond the one tool that was waiting.
+    if (pending.request.type === 'user_question') {
+        return planQuestionResume(checkpoint, decision, pending.request.question.questionId, log);
+    }
+    if (pending.request.type !== 'tool_review') {
+        log.info('Pending decision supplied for a park that leaves no tool calls to apply it to', {
+            checkpointId: checkpoint.id,
+            pendingType: pending.request.type,
+            decision: decision.action,
+        });
+        return null;
+    }
+    const assistant = lastAssistantWithUnansweredCalls(checkpoint.messages);
+    if (!assistant?.toolCalls || assistant.toolCalls.length === 0) {
+        log.warn('Checkpoint records a tool_review park but has no unanswered tool calls', {
+            checkpointId: checkpoint.id,
+        });
+        return null;
+    }
+    // The human approved the calls they were SHOWN. If the checkpoint's
+    // calls no longer match the recorded request, the decision does not
+    // describe this state and applying it would be consent-by-coincidence.
+    const recordedIds = new Set(pending.request.toolCalls.map((tc) => tc.id));
+    const actualIds = assistant.toolCalls.map((tc) => tc.id);
+    const mismatched = actualIds.filter((id) => !recordedIds.has(id));
+    if (mismatched.length > 0 || recordedIds.size !== actualIds.length) {
+        log.error('Tool calls in the checkpoint do not match the ones the decision was made about', {
+            checkpointId: checkpoint.id,
+            recorded: [...recordedIds],
+            actual: actualIds,
+        });
+        return null;
+    }
+    const denials = derriveDenials(assistant.toolCalls, decision);
+    if (!denials)
+        return null;
+    return {
+        checkpointId: checkpoint.id,
+        assistant,
+        response: synthesizeResponse(assistant),
+        denials,
+    };
+}
+/**
+ * Resume a batch that parked inside a tool asking the user a question.
+ *
+ * The re-entry contract, stated plainly: the batch is re-executed, the
+ * asking tool is re-entered, and the recorded answer is handed to it
+ * instead of a second question. Nothing else in the batch runs twice —
+ * every sibling that already completed is answered from the transcript by
+ * the same recovery the crash path uses.
+ *
+ * This is why the answer must be delivered through the tool rather than
+ * appended as a message: the question was asked BY a tool, its result is
+ * what the model reads, and there is no `tool_result` for that call until
+ * the tool produces one. Skipping the model call and re-running the batch
+ * is what makes the answer land in the slot the model is already waiting
+ * on.
+ */
+function planQuestionResume(checkpoint, decision, questionId, log) {
+    const assistant = lastAssistantWithUnansweredCalls(checkpoint.messages);
+    if (!assistant?.toolCalls || assistant.toolCalls.length === 0) {
+        log.warn('Checkpoint records a question park but has no unanswered tool calls', {
+            checkpointId: checkpoint.id,
+        });
+        return null;
+    }
+    // The answer must belong to a call that is actually in this turn. A
+    // stale client answering a question from an earlier turn would
+    // otherwise have its answer delivered to whatever tool now holds that
+    // slot — the misdirection the asking tool's own id guard exists to
+    // prevent, checked here too because by then the tool has been entered.
+    if (!assistant.toolCalls.some((tc) => tc.id === questionId)) {
+        log.error('The parked question does not belong to any unanswered call in this turn', {
+            checkpointId: checkpoint.id,
+            questionId,
+        });
+        return null;
+    }
+    return {
+        checkpointId: checkpoint.id,
+        assistant,
+        response: synthesizeResponse(assistant),
+        // Nothing was refused. A question is not an approval gate: the
+        // answer steers the tool, it does not license it.
+        denials: new Map(),
+        answers: PendingAnswers.from(decision),
+    };
+}
+/**
+ * Decide whether a checkpoint left behind a batch that was PART-WAY
+ * through executing when the process died.
+ *
+ * The ordinary repair for an unanswered assistant turn — strip it and let
+ * the model re-decide — is right when nothing ran: the calls were still
+ * awaiting a decision, so re-deciding costs only a round trip. It is
+ * exactly wrong when some of them already ran, because re-deciding means
+ * re-executing, and a tool that charged a card does not become idempotent
+ * on the second attempt.
+ *
+ * The discriminator is the transcript: a tool-review park records the
+ * checkpoint BEFORE any execution, so it has no completed calls and takes
+ * the cheap path unchanged. One or more completions means execution had
+ * begun, which is a resume, not a fresh decision.
+ *
+ * The calls that did NOT complete are executed here for the first time,
+ * through the ordinary executor — so every guard, permission check and
+ * probe still applies to them.
+ */
+export function planCrashResume(checkpoint, completed, log) {
+    const assistant = lastAssistantWithUnansweredCalls(checkpoint.messages);
+    const calls = assistant?.toolCalls;
+    if (!assistant || !calls || calls.length === 0)
+        return null;
+    const done = calls.filter((tc) => completed.has(tc.id));
+    if (done.length === 0)
+        return null;
+    log.warn('Checkpoint holds a tool batch that was part-way through executing', {
+        checkpointId: checkpoint.id,
+        completed: done.length,
+        total: calls.length,
+        remaining: calls.filter((tc) => !completed.has(tc.id)).map((tc) => tc.function.name),
+    });
+    return {
+        checkpointId: checkpoint.id,
+        assistant,
+        response: synthesizeResponse(assistant),
+        // Nothing was refused: this is a resume, not a decision.
+        denials: new Map(),
+    };
+}
+/**
+ * Execute a resume plan, pushing the assistant turn and its results.
+ *
+ * The assistant message is re-pushed rather than repaired away, because
+ * the `tool_result` blocks about to be produced must answer the `tool_use`
+ * blocks that are in it — a result with no matching call is exactly the
+ * malformed request the repair path exists to prevent.
+ */
+export async function applyPendingResume(plan, runMgr, executor, prior) {
+    runMgr.pushMessage(plan.assistant);
+    const batch = await executor.executeBatch(plan.response, plan.denials, prior);
+    for (const msg of batch.messages) {
+        runMgr.pushMessage(msg);
+    }
+}
+/**
+ * Results the run already produced for calls in `toolCalls`.
+ *
+ * Read from the transcript, which records a `tool_completed` per tool as
+ * it finishes — durable long before the batch settles. Scoped to the calls
+ * being resumed so an id from an earlier turn can never answer this one.
+ *
+ * A failure to read is not fatal: the worst case is the behaviour that
+ * existed before this recovery, and refusing to resume because a log could
+ * not be read would be a strictly worse trade.
+ */
+export async function recoverCompletedCalls(runMgr, toolCalls, log) {
+    const recovered = new Map();
+    try {
+        const completed = await runMgr.getRunStore().readCompletedTools();
+        for (const call of toolCalls) {
+            const record = completed.get(call.id);
+            if (record)
+                recovered.set(call.id, { result: record.result, isError: record.isError });
+        }
+    }
+    catch (error) {
+        log.warn('Could not read the transcript to recover completed tool calls', {
+            error: error instanceof Error ? error.message : String(error),
+        });
+        return new Map();
+    }
+    if (recovered.size > 0) {
+        log.info('Recovered tool results from the transcript instead of re-executing', {
+            recovered: recovered.size,
+            ofCalls: toolCalls.length,
+        });
+    }
+    return recovered;
+}
+/**
+ * Turn a decision into per-call refusals, or `null` when the decision does
+ * not resolve the park at all.
+ *
+ * An empty map means "execute everything" — the shape `executeBatch`
+ * already expects for an unrestricted batch.
+ */
+function derriveDenials(toolCalls, decision) {
+    switch (decision.action) {
+        case 'approve_tools':
+            return new Map();
+        case 'reject_tools': {
+            const reason = decision.feedback || 'The user rejected this tool call.';
+            return new Map(toolCalls.map((tc) => [tc.id, reason]));
+        }
+        case 'modify_tools': {
+            // Mirrors the in-process `modify_tools` branch so a decision
+            // means the same thing whether it is answered live or across a
+            // restart: named denials refuse, `modify` rewrites the arguments
+            // in place, anything unnamed is approved.
+            const denials = new Map();
+            for (const mod of decision.modifications) {
+                if (mod.action === 'deny') {
+                    denials.set(mod.toolCallId, 'The user denied this tool call.');
+                }
+            }
+            for (const mod of decision.modifications) {
+                if (mod.action === 'modify' && mod.modifiedInput !== undefined) {
+                    const tc = toolCalls.find((t) => t.id === mod.toolCallId);
+                    if (tc && !denials.has(tc.id)) {
+                        tc.function.arguments = JSON.stringify(mod.modifiedInput);
+                    }
+                }
+            }
+            return denials;
+        }
+        default:
+            // `abort`, `continue`, `answer_question`, … do not describe what
+            // to do with a batch of pending tool calls. The caller falls back
+            // to the repair path rather than guessing.
+            return null;
+    }
+}
+/**
+ * `executeBatch` consumes a provider response; on resume the response is
+ * long gone and the checkpointed assistant turn is the surviving record of
+ * it. Usage is zeroed rather than re-invented — those tokens were already
+ * billed to the run that produced the turn, and the checkpoint restored
+ * that total.
+ */
+function synthesizeResponse(assistant) {
+    return {
+        id: `resume_${assistant.toolCalls?.[0]?.id ?? 'pending'}`,
+        model: 'resumed-from-checkpoint',
+        message: {
+            role: 'assistant',
+            content: assistant.content,
+            toolCalls: assistant.toolCalls,
+        },
+        finishReason: 'tool_calls',
+        usage: {
+            promptTokens: 0,
+            completionTokens: 0,
+            totalTokens: 0,
+            cachedTokens: 0,
+            cacheWriteTokens: 0,
+        },
+    };
+}
+/**
+ * Tool calls in the history that no `tool_result` answers.
+ *
+ * The set worth asking the transcript about: an already-answered call's
+ * result is in the history and needs no recovery.
+ */
+export function unansweredToolCalls(messages) {
+    const assistant = lastAssistantWithUnansweredCalls(messages);
+    if (!assistant?.toolCalls)
+        return [];
+    const answered = new Set();
+    for (const msg of messages) {
+        if (msg.role === 'tool' && msg.toolCallId)
+            answered.add(msg.toolCallId);
+    }
+    return assistant.toolCalls.filter((tc) => !answered.has(tc.id));
+}
+function lastAssistantWithUnansweredCalls(messages) {
+    const answered = new Set();
+    for (const msg of messages) {
+        if (msg.role === 'tool' && msg.toolCallId)
+            answered.add(msg.toolCallId);
+    }
+    for (let i = messages.length - 1; i >= 0; i--) {
+        const msg = messages[i];
+        if (msg?.role !== 'assistant')
+            continue;
+        const assistant = msg;
+        const calls = assistant.toolCalls;
+        if (!calls || calls.length === 0)
+            continue;
+        if (calls.some((tc) => !answered.has(tc.id)))
+            return assistant;
+        return null;
+    }
+    return null;
+}
+//# sourceMappingURL=resume-pending.js.map

package/dist/runtime/query/resume-pending.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-pending.js","sourceRoot":"","sources":["../../../src/runtime/query/resume-pending.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAoCnD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAChC,UAA+B,EAC/B,QAA4B,EAC5B,GAAW;IAEX,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;IAClC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,mEAAmE;IACnE,gDAAgD;IAChD,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QAC9C,OAAO,kBAAkB,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;IAC1F,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,+EAA+E,EAAE;YACzF,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;YACjC,QAAQ,EAAE,QAAQ,CAAC,MAAM;SACzB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,gCAAgC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACvE,IAAI,CAAC,SAAS,EAAE,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,wEAAwE,EAAE;YAClF,YAAY,EAAE,UAAU,CAAC,EAAE;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,oEAAoE;IACpE,oEAAoE;IACpE,uEAAuE;IACvE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACzE,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IACxD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IACjE,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;QACpE,GAAG,CAAC,KAAK,CAAC,gFAAgF,EAAE;YAC3F,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,QAAQ,EAAE,CAAC,GAAG,WAAW,CAAC;YAC1B,MAAM,EAAE,SAAS;SACjB,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IAEzB,OAAO;QACN,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,SAAS;QACT,QAAQ,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACvC,OAAO;KACP,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,kBAAkB,CAC1B,UAA+B,EAC/B,QAA4B,EAC5B,UAAkB,EAClB,GAAW;IAEX,MAAM,SAAS,GAAG,gCAAgC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACvE,IAAI,CAAC,SAAS,EAAE,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,IAAI,CAAC,qEAAqE,EAAE;YAC/E,YAAY,EAAE,UAAU,CAAC,EAAE;SAC3B,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,oEAAoE;IACpE,+DAA+D;IAC/D,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,yEAAyE,EAAE;YACpF,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,UAAU;SACV,CAAC,CAAA;QACF,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,OAAO;QACN,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,SAAS;QACT,QAAQ,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACvC,+DAA+D;QAC/D,kDAAkD;QAClD,OAAO,EAAE,IAAI,GAAG,EAAE;QAClB,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;KACtC,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAC9B,UAA+B,EAC/B,SAAuC,EACvC,GAAW;IAEX,MAAM,SAAS,GAAG,gCAAgC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACvE,MAAM,KAAK,GAAG,SAAS,EAAE,SAAS,CAAA;IAClC,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAE3D,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAElC,GAAG,CAAC,IAAI,CAAC,mEAAmE,EAAE;QAC7E,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,SAAS,EAAE,IAAI,CAAC,MAAM;QACtB,KAAK,EAAE,KAAK,CAAC,MAAM;QACnB,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;KACpF,CAAC,CAAA;IAEF,OAAO;QACN,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,SAAS;QACT,QAAQ,EAAE,kBAAkB,CAAC,SAAS,CAAC;QACvC,yDAAyD;QACzD,OAAO,EAAE,IAAI,GAAG,EAAE;KAClB,CAAA;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,IAAuB,EACvB,MAAsB,EACtB,QAAsB,EACtB,KAAwB;IAExB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC7E,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACxB,CAAC;AACF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAAsB,EACtB,SAA8B,EAC9B,GAAW;IAEX,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgD,CAAA;IACzE,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE,CAAA;QACjE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACrC,IAAI,MAAM;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,+DAA+D,EAAE;YACzE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAC,CAAA;QACF,OAAO,IAAI,GAAG,EAAE,CAAA;IACjB,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,oEAAoE,EAAE;YAC9E,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,OAAO,EAAE,SAAS,CAAC,MAAM;SACzB,CAAC,CAAA;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AACjB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CACtB,SAA8B,EAC9B,QAA4B;IAE5B,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzB,KAAK,eAAe;YACnB,OAAO,IAAI,GAAG,EAAE,CAAA;QAEjB,KAAK,cAAc,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,IAAI,mCAAmC,CAAA;YACvE,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;QACvD,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACrB,6DAA6D;YAC7D,+DAA+D;YAC/D,iEAAiE;YACjE,0CAA0C;YAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAA;YACzC,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAA;gBAC/D,CAAC;YACF,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;oBAChE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,UAAU,CAAC,CAAA;oBACzD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;wBAC/B,EAAE,CAAC,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;oBAC1D,CAAC;gBACF,CAAC;YACF,CAAC;YACD,OAAO,OAAO,CAAA;QACf,CAAC;QAED;YACC,iEAAiE;YACjE,kEAAkE;YAClE,2CAA2C;YAC3C,OAAO,IAAI,CAAA;IACb,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,SAA2B;IACtD,OAAO;QACN,EAAE,EAAE,UAAU,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,SAAS,EAAE;QACzD,KAAK,EAAE,yBAAyB;QAChC,OAAO,EAAE;YACR,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,SAAS,EAAE,SAAS,CAAC,SAAS;SAC9B;QACD,YAAY,EAAE,YAAY;QAC1B,KAAK,EAAE;YACN,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;SACnB;KACD,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA4B;IAC/D,MAAM,SAAS,GAAG,gCAAgC,CAAC,QAAQ,CAAC,CAAA;IAC5D,IAAI,CAAC,SAAS,EAAE,SAAS;QAAE,OAAO,EAAE,CAAA;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAChE,CAAC;AAED,SAAS,gCAAgC,CAAC,QAA4B;IACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAClC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACxE,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,GAAG,EAAE,IAAI,KAAK,WAAW;YAAE,SAAQ;QACvC,MAAM,SAAS,GAAG,GAAuB,CAAA;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAA;QACjC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ;QAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9D,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}