@namzu/sdk 34.2.0 → 35.0.0

package/dist/runtime/query/review-policy.d.ts

@@ -0,0 +1,142 @@
+/**
+ * How a run resolves the calls no rule decided.
+ *
+ * An authorization rule says what a tool may do. A review policy says what
+ * happens to everything the rules did not cover: the batch the gate routed
+ * to REVIEW. The two axes are separate on purpose — a rule is a durable
+ * statement an operator reviewed, and a mode is a property of ONE run, the
+ * difference between "we never force-push" and "this run is unattended".
+ *
+ * Only calls the gate routed to review arrive here. A rule that denied one
+ * already stopped it, and a rule that allowed one never asked. So a mode
+ * decides the undecided and can never reopen what a rule closed; a host's
+ * `--permission-mode` flag cannot widen a `deny`. That is the whole
+ * precedence story between a flag and a config file, in one sentence.
+ *
+ * This lived in the operator application as one closure. It moved here
+ * because none of it is about a terminal: the modes name kernel tools, the
+ * exemptions reason about kernel tools' blast radius, and a second host
+ * would otherwise write the same five branches and drift on the sixth.
+ * What a host supplies is the one thing the kernel cannot: how to ask a
+ * person (`prompt`).
+ */
+import type { ToolRegistry } from '../../registry/tool/execute.js';
+import type { ResumeHandler, ToolCallSummary } from '../../types/hitl/index.js';
+import type { ApprovalPolicy } from '../../types/hitl/policy.js';
+import { PLAN_MODE_REFUSAL } from '../../types/permission/index.js';
+export type ReviewMode = 
+/** Ask a person. The default when a `prompt` is supplied. */
+'prompt'
+/** Approve it. The default without a `prompt`, and what every headless run has always done. */
+ | 'auto'
+/**
+ * Approve a file edit, ask about everything else.
+ *
+ * The mode an operator watching the agent write code actually wants: an
+ * `edit` or `write` inside the working directory is what they asked for
+ * and is undoable with `git`, so a prompt on each one is a prompt they
+ * answer `y` to forty times an hour — and a prompt that is always
+ * answered the same way trains the hand to answer the next one, which is
+ * the shell prompt, the same way. Shell commands, delegation and anything
+ * a tool declares destructive still ask.
+ */
+ | 'accept-edits'
+/**
+ * Read and think, do not act. A call that only reads is approved; a call
+ * that would change anything is refused with feedback telling the model
+ * to present its plan instead. The operator reads the plan and switches
+ * mode to have it carried out — the switch IS the approval. The kernel's
+ * `permissionMode: 'plan'` is the floor under this: it blocks a mutating
+ * call at execution with no feedback, where this refuses it at review
+ * with the words that make the model plan.
+ */
+ | 'plan'
+/**
+ * Refuse it. Nothing runs unless a rule allowed it by name or pattern —
+ * the allowlist is the whole permission surface, which is the only form
+ * an unattended run can actually be reasoned about.
+ */
+ | 'strict';
+export declare const REVIEW_MODES: readonly ReviewMode[];
+export declare function isReviewMode(value: unknown): value is ReviewMode;
+export { PLAN_MODE_REFUSAL };
+/** What the model is told when a call is refused under `strict`. */
+export declare const STRICT_MODE_REFUSAL = "Refused: this run only permits tools an explicit rule allows, and no rule covers this call. Asking again will not change it \u2014 either the operator adds a rule, or this has to be done another way.";
+/** The tools `accept-edits` approves without asking. Everything else prompts. */
+export declare const ACCEPT_EDITS_TOOLS: ReadonlySet<string>;
+/**
+ * Writes that skip review anyway, in spite of declaring `readOnly: false`.
+ *
+ * This is an OVERRIDE of the tool's own declaration, and it is named as one.
+ * The bar for an entry is that prompting would be unusable AND a bad write
+ * cannot reach beyond the agent's own bookkeeping:
+ *
+ * - `task_create` / `task_update` / `update_goal` — the model's own plan for
+ *   the current request, written several times per planning turn; asking
+ *   each time would put a consent dialog between the agent and its todo
+ *   list. What a bad write costs is a polluted task list, visible in the
+ *   transcript, and it grants nothing.
+ *
+ * `save_memory` is deliberately NOT here. Content saved now is retrievable
+ * by `search_memory` in a later session, so a tool result that talks the
+ * model into saving something reaches a future run's reasoning. A write
+ * that survives the process is not read-only under any reading.
+ */
+export declare const REVIEW_EXEMPT_WRITES: ReadonlySet<string>;
+/**
+ * Whether a call runs without review: it declares itself read-only and is
+ * trusted to say so, or it is a named exemption above.
+ *
+ * The read-only half comes from the tool's own declaration through
+ * `isTrustedReadOnly`, the predicate the authorization gate uses, never from
+ * a list of names kept here: a renamed tool would otherwise change posture
+ * with nothing to notice. A fetch declares itself read-only and is still a
+ * request leaving the machine to an address the model chose, so `network`
+ * tools are reviewed like a shell command. A tool the registry does not
+ * know, or one that declares nothing, is reviewed.
+ */
+export declare function isReviewExempt(registry: Pick<ToolRegistry, 'get'>, name: string, input: unknown): boolean;
+export type ReviewExemption = (name: string, input: unknown) => boolean;
+/** A batch needs review when any call mutates state: flagged destructive, or not exempt. */
+export declare function batchNeedsReview(toolCalls: readonly ToolCallSummary[], exempt: ReviewExemption): boolean;
+/** The batch a person is asked about. */
+export interface ToolReviewRequest {
+    readonly toolCalls: readonly ToolCallSummary[];
+}
+export type ToolReviewAnswer = {
+    readonly kind: 'approve';
+}
+/** Approve, and stop asking for the rest of the run. */
+ | {
+    readonly kind: 'approve-all';
+} | {
+    readonly kind: 'reject';
+    readonly feedback?: string;
+};
+/** How a host asks a person. The one thing the kernel cannot supply. */
+export type ToolReviewPrompt = (request: ToolReviewRequest) => Promise<ToolReviewAnswer>;
+export interface ReviewPolicyOptions {
+    /** Default `prompt` when a `prompt` is supplied, `auto` otherwise. */
+    readonly mode?: ReviewMode;
+    readonly prompt?: ToolReviewPrompt;
+    /** Which calls skip review; default `isReviewExempt` over `registry`, or nothing without one. */
+    readonly exempt?: ReviewExemption;
+    readonly registry?: Pick<ToolRegistry, 'get'>;
+    /**
+     * Where "approve all" is remembered. A host that shows the state (a
+     * badge saying the session is unattended) passes its own box so both
+     * read the same fact; omitted, the policy keeps one privately.
+     */
+    readonly remembered?: {
+        all: boolean;
+    };
+}
+/** The handler behind `createReviewPolicy`, for a host that wants only the function. */
+export declare function createReviewHandler(options?: ReviewPolicyOptions): ResumeHandler;
+/**
+ * The mode as an `ApprovalPolicy`, named after itself so a durable log can
+ * say which one approved a call. Swap it on a run's `RunApprovalPolicy`
+ * to change mode without ending the run.
+ */
+export declare function createReviewPolicy(options?: ReviewPolicyOptions): ApprovalPolicy;
+//# sourceMappingURL=review-policy.d.ts.map

package/dist/runtime/query/review-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-policy.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/review-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAA;AAElE,OAAO,KAAK,EAAsB,aAAa,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAEnE,MAAM,MAAM,UAAU;AACrB,6DAA6D;AAC3D,QAAQ;AACV,+FAA+F;GAC7F,MAAM;AACR;;;;;;;;;;GAUG;GACD,cAAc;AAChB;;;;;;;;GAQG;GACD,MAAM;AACR;;;;GAIG;GACD,QAAQ,CAAA;AAEX,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAM7C,CAAA;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAE5B,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,4MACqK,CAAA;AAErM,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAA8B,CAAA;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAInD,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,EACnC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,OAAO,GACZ,OAAO,CAKT;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAA;AAEvE,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAC/B,SAAS,EAAE,SAAS,eAAe,EAAE,EACrC,MAAM,EAAE,eAAe,GACrB,OAAO,CAET;AAED,yCAAyC;AACzC,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAED,MAAM,MAAM,gBAAgB,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE;AAC9B,wDAAwD;GACtD;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,GAChC;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1D,wEAAwE;AACxE,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAA;AAExF,MAAM,WAAW,mBAAmB;IACnC,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAA;IAClC,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,OAAO,CAAA;KAAE,CAAA;CACtC;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,mBAAwB,GAAG,aAAa,CAiDpF;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,cAAc,CAGpF"}

package/dist/runtime/query/review-policy.js

@@ -0,0 +1,144 @@
+/**
+ * How a run resolves the calls no rule decided.
+ *
+ * An authorization rule says what a tool may do. A review policy says what
+ * happens to everything the rules did not cover: the batch the gate routed
+ * to REVIEW. The two axes are separate on purpose — a rule is a durable
+ * statement an operator reviewed, and a mode is a property of ONE run, the
+ * difference between "we never force-push" and "this run is unattended".
+ *
+ * Only calls the gate routed to review arrive here. A rule that denied one
+ * already stopped it, and a rule that allowed one never asked. So a mode
+ * decides the undecided and can never reopen what a rule closed; a host's
+ * `--permission-mode` flag cannot widen a `deny`. That is the whole
+ * precedence story between a flag and a config file, in one sentence.
+ *
+ * This lived in the operator application as one closure. It moved here
+ * because none of it is about a terminal: the modes name kernel tools, the
+ * exemptions reason about kernel tools' blast radius, and a second host
+ * would otherwise write the same five branches and drift on the sixth.
+ * What a host supplies is the one thing the kernel cannot: how to ask a
+ * person (`prompt`).
+ */
+import { isTrustedReadOnly } from '../../tools/trusted-read-only.js';
+import { PLAN_MODE_REFUSAL } from '../../types/permission/index.js';
+export const REVIEW_MODES = [
+    'prompt',
+    'accept-edits',
+    'auto',
+    'strict',
+    'plan',
+];
+export function isReviewMode(value) {
+    return typeof value === 'string' && REVIEW_MODES.includes(value);
+}
+export { PLAN_MODE_REFUSAL };
+/** What the model is told when a call is refused under `strict`. */
+export const STRICT_MODE_REFUSAL = 'Refused: this run only permits tools an explicit rule allows, and no rule covers this call. Asking again will not change it — either the operator adds a rule, or this has to be done another way.';
+/** The tools `accept-edits` approves without asking. Everything else prompts. */
+export const ACCEPT_EDITS_TOOLS = new Set(['edit', 'write']);
+/**
+ * Writes that skip review anyway, in spite of declaring `readOnly: false`.
+ *
+ * This is an OVERRIDE of the tool's own declaration, and it is named as one.
+ * The bar for an entry is that prompting would be unusable AND a bad write
+ * cannot reach beyond the agent's own bookkeeping:
+ *
+ * - `task_create` / `task_update` / `update_goal` — the model's own plan for
+ *   the current request, written several times per planning turn; asking
+ *   each time would put a consent dialog between the agent and its todo
+ *   list. What a bad write costs is a polluted task list, visible in the
+ *   transcript, and it grants nothing.
+ *
+ * `save_memory` is deliberately NOT here. Content saved now is retrievable
+ * by `search_memory` in a later session, so a tool result that talks the
+ * model into saving something reaches a future run's reasoning. A write
+ * that survives the process is not read-only under any reading.
+ */
+export const REVIEW_EXEMPT_WRITES = new Set([
+    'task_create',
+    'task_update',
+    'update_goal',
+]);
+/**
+ * Whether a call runs without review: it declares itself read-only and is
+ * trusted to say so, or it is a named exemption above.
+ *
+ * The read-only half comes from the tool's own declaration through
+ * `isTrustedReadOnly`, the predicate the authorization gate uses, never from
+ * a list of names kept here: a renamed tool would otherwise change posture
+ * with nothing to notice. A fetch declares itself read-only and is still a
+ * request leaving the machine to an address the model chose, so `network`
+ * tools are reviewed like a shell command. A tool the registry does not
+ * know, or one that declares nothing, is reviewed.
+ */
+export function isReviewExempt(registry, name, input) {
+    if (REVIEW_EXEMPT_WRITES.has(name.toLowerCase()))
+        return true;
+    const tool = registry.get(name) ?? registry.get(name.toLowerCase());
+    if (tool?.category === 'network')
+        return false;
+    return isTrustedReadOnly(tool, input);
+}
+/** A batch needs review when any call mutates state: flagged destructive, or not exempt. */
+export function batchNeedsReview(toolCalls, exempt) {
+    return toolCalls.some((tc) => tc.isDestructive || !exempt(tc.name, tc.input));
+}
+/** The handler behind `createReviewPolicy`, for a host that wants only the function. */
+export function createReviewHandler(options = {}) {
+    const { prompt, registry } = options;
+    const mode = options.mode ?? (prompt ? 'prompt' : 'auto');
+    const exempt = options.exempt ??
+        (registry ? (name, input) => isReviewExempt(registry, name, input) : () => false);
+    const remembered = options.remembered ?? { all: false };
+    return async (request) => {
+        if (request.type !== 'tool_review') {
+            return request.type === 'plan_approval' ? { action: 'approve_plan' } : { action: 'continue' };
+        }
+        if (!batchNeedsReview(request.toolCalls, exempt)) {
+            return { action: 'approve_tools' };
+        }
+        // A batch of nothing but non-destructive file edits is the case
+        // `accept-edits` exists for. One shell call in the same batch and the
+        // whole batch asks — the operator reviews the batch as a unit, and a
+        // prompt that showed only the shell command while the edits went
+        // through beside it would be approving something it did not show.
+        if (mode === 'accept-edits' &&
+            request.toolCalls.every((tc) => !tc.isDestructive && (ACCEPT_EDITS_TOOLS.has(tc.name) || exempt(tc.name, tc.input)))) {
+            return { action: 'approve_tools' };
+        }
+        // Reads were approved above. Anything that reached here would change
+        // something, and plan mode's answer is the same every time: not now,
+        // tell the user what you would do.
+        if (mode === 'plan')
+            return { action: 'reject_tools', feedback: PLAN_MODE_REFUSAL };
+        if (mode === 'strict')
+            return { action: 'reject_tools', feedback: STRICT_MODE_REFUSAL };
+        if (mode === 'auto' || !prompt || remembered.all) {
+            return { action: 'approve_tools' };
+        }
+        const answer = await prompt({ toolCalls: request.toolCalls });
+        switch (answer.kind) {
+            case 'approve':
+                return { action: 'approve_tools' };
+            case 'approve-all':
+                remembered.all = true;
+                return { action: 'approve_tools' };
+            case 'reject':
+                return {
+                    action: 'reject_tools',
+                    feedback: answer.feedback ?? 'User declined to run the proposed tool(s).',
+                };
+        }
+    };
+}
+/**
+ * The mode as an `ApprovalPolicy`, named after itself so a durable log can
+ * say which one approved a call. Swap it on a run's `RunApprovalPolicy`
+ * to change mode without ending the run.
+ */
+export function createReviewPolicy(options = {}) {
+    const mode = options.mode ?? (options.prompt ? 'prompt' : 'auto');
+    return { name: mode, handler: createReviewHandler({ ...options, mode }) };
+}
+//# sourceMappingURL=review-policy.js.map

package/dist/runtime/query/review-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-policy.js","sourceRoot":"","sources":["../../../src/runtime/query/review-policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AAGpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAA;AAoCnE,MAAM,CAAC,MAAM,YAAY,GAA0B;IAClD,QAAQ;IACR,cAAc;IACd,MAAM;IACN,QAAQ;IACR,MAAM;CACN,CAAA;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxF,CAAC;AAED,OAAO,EAAE,iBAAiB,EAAE,CAAA;AAE5B,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAC/B,oMAAoM,CAAA;AAErM,iFAAiF;AACjF,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAChE,aAAa;IACb,aAAa;IACb,aAAa;CACb,CAAC,CAAA;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAC7B,QAAmC,EACnC,IAAY,EACZ,KAAc;IAEd,IAAI,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACnE,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9C,OAAO,iBAAiB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACtC,CAAC;AAID,4FAA4F;AAC5F,MAAM,UAAU,gBAAgB,CAC/B,SAAqC,EACrC,MAAuB;IAEvB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;AAC9E,CAAC;AA+BD,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,UAA+B,EAAE;IACpE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAA;IACpC,MAAM,IAAI,GAAe,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IACrE,MAAM,MAAM,GACX,OAAO,CAAC,MAAM;QACd,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;IAClF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;IACvD,OAAO,KAAK,EAAE,OAAO,EAA+B,EAAE;QACrD,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,OAAO,OAAO,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;QAC9F,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QACnC,CAAC;QACD,gEAAgE;QAChE,sEAAsE;QACtE,qEAAqE;QACrE,iEAAiE;QACjE,kEAAkE;QAClE,IACC,IAAI,KAAK,cAAc;YACvB,OAAO,CAAC,SAAS,CAAC,KAAK,CACtB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,aAAa,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAC3F,EACA,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QACnC,CAAC;QACD,qEAAqE;QACrE,qEAAqE;QACrE,mCAAmC;QACnC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAA;QACnF,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAA;QACvF,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;QAC7D,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACrB,KAAK,SAAS;gBACb,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;YACnC,KAAK,aAAa;gBACjB,UAAU,CAAC,GAAG,GAAG,IAAI,CAAA;gBACrB,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;YACnC,KAAK,QAAQ;gBACZ,OAAO;oBACN,MAAM,EAAE,cAAc;oBACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,4CAA4C;iBACzE,CAAA;QACH,CAAC;IACF,CAAC,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IACnE,MAAM,IAAI,GAAe,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC7E,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;AAC1E,CAAC"}

package/dist/runtime/query/run-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/run-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAC9F,OAAO,EAAqB,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AAGzD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACxD,OAAO,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,aAAa,EACpB,KAAK,CAAC,EAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;CACvC,GACC,QAAQ,CA2BV;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,YAAY,CACjC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,YAAY,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAE1B;AAED,6FAA6F;AAC7F,wBAAsB,oBAAoB,CACzC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,YAAY,GACzB,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CAAE,GAAG,IAAI,CAAC,CA2BxF"}
+{"version":3,"file":"run-state.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/run-state.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAC9F,OAAO,EAAqB,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAC3E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAA;AAGzD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,aAAc,SAAQ,kBAAkB;IACxD,OAAO,EAAE,OAAO,CAAA;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC9B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,aAAa,EACpB,KAAK,CAAC,EAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAA;CACvC,GACC,QAAQ,CA6BV;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,YAAY,CACjC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,YAAY,GACzB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAE1B;AAED,6FAA6F;AAC7F,wBAAsB,oBAAoB,CACzC,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,aAAa,EACpB,YAAY,CAAC,EAAE,YAAY,GACzB,OAAO,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;CAAE,GAAG,IAAI,CAAC,CA6BxF"}

package/dist/runtime/query/run-state.js

@@ -25,6 +25,8 @@ export function captureRunState(runMgr, scope, extra) {
         ...(session.lastError ? { lastError: session.lastError } : {}),
         messages: structuredClone(runMgr.messages),
         tokenUsage: { ...runMgr.tokenUsage },
+        budgetBinding: runMgr.budget?.binding,
+        budgetAccountId: runMgr.budget?.accountId,
         costInfo: { ...runMgr.costInfo },
         currentIteration: runMgr.currentIteration,
         startedAt,
@@ -75,6 +77,8 @@ export async function loadSelectedRunState(store, scope, checkpointId) {
         status: 'running',
         messages: checkpoint.messages,
         tokenUsage: checkpoint.tokenUsage,
+        budgetBinding: checkpoint.budgetBinding,
+        budgetAccountId: checkpoint.budgetAccountId,
         costInfo: checkpoint.costInfo,
         currentIteration: checkpoint.guardState.iterationCount,
         startedAt: checkpoint.createdAt - checkpoint.guardState.elapsedMs,

package/dist/runtime/query/run-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-state.js","sourceRoot":"","sources":["../../../src/runtime/query/run-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAiB,MAAM,0BAA0B,CAAA;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAiBvD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,MAAsB,EACtB,KAAoB,EACpB,KAGC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IAEnC,OAAO;QACN,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,MAAM,CAAC,EAAE;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;QACpC,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,SAAS;QACT,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACrD,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,KAAsB,EACtB,KAAoB,EACpB,YAA2B;IAE3B,OAAO,CAAC,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;AAC/E,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,KAAsB,EACtB,KAAoB,EACpB,YAA2B;IAE3B,MAAM,UAAU,GAAG,YAAY;QAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAEhF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAE5B,MAAM,KAAK,GAAa;QACvB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,cAAc;QACtD,SAAS,EAAE,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS;QACjE,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS;QAC1C,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC7B,CAAC;AAED,KAAK,UAAU,MAAM,CACpB,KAAsB,EACtB,KAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAyB,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtF,CAAC"}
+{"version":3,"file":"run-state.js","sourceRoot":"","sources":["../../../src/runtime/query/run-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAiB,MAAM,0BAA0B,CAAA;AAE3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAiBvD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC9B,MAAsB,EACtB,KAAoB,EACpB,KAGC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAA;IAEnC,OAAO;QACN,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,MAAM,CAAC,EAAE;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC;QAC1C,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE;QACpC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO;QACrC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS;QACzC,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE;QAChC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,SAAS;QACT,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACrD,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,KAAsB,EACtB,KAAoB,EACpB,YAA2B;IAE3B,OAAO,CAAC,MAAM,oBAAoB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;AAC/E,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,KAAsB,EACtB,KAAoB,EACpB,YAA2B;IAE3B,MAAM,UAAU,GAAG,YAAY;QAC9B,CAAC,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,YAAY,CAAC;QACjD,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;IAEhF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAA;IAE5B,MAAM,KAAK,GAAa;QACvB,OAAO,EAAE,iBAAiB;QAC1B,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,eAAe,EAAE,UAAU,CAAC,eAAe;QAC3C,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,gBAAgB,EAAE,UAAU,CAAC,UAAU,CAAC,cAAc;QACtD,SAAS,EAAE,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS;QACjE,SAAS,EAAE,UAAU,CAAC,UAAU,CAAC,SAAS;QAC1C,YAAY,EAAE,UAAU,CAAC,EAAE;QAC3B,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAA;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAA;AAC7B,CAAC;AAED,KAAK,UAAU,MAAM,CACpB,KAAsB,EACtB,KAAyB;IAEzB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAyB,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACtF,CAAC"}

package/dist/runtime/query/steering.d.ts

@@ -65,6 +65,10 @@ export declare class SteeringBinding implements SteeringChannel {
  * to be worked with rather than followed would inverting the very thing the
  * host is trying to do. Different party, different frame, on purpose.
  */
+/** The same slot as steering, for notices the kernel itself has to deliver. */
+export declare function attachNotice(messages: readonly Message[], channel: SteeringChannel | undefined, format: (text: string) => string): readonly Message[];
+/** What the model reads when a background job it started has ended. */
+export declare function formatJobNote(text: string): string;
 export declare function formatSteeringNote(text: string): string;
 /**
  * Append the guidance to the last tool result in a settled batch.

package/dist/runtime/query/steering.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"steering.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,yDAAyD;IACzD,KAAK,IAAI,MAAM,GAAG,SAAS,CAAA;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CACzB;AAED,qBAAa,eAAgB,YAAW,eAAe;IACtD,OAAO,CAAC,MAAM,CAAe;IAE7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMzB,KAAK,IAAI,MAAM,GAAG,SAAS;IAO3B,IAAI,OAAO,IAAI,OAAO,CAErB;CACD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS,GAClC,SAAS,OAAO,EAAE,CA8BpB"}
+{"version":3,"file":"steering.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAA;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,eAAe;IAC/B;;;;;;;;;;OAUG;IACH,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,yDAAyD;IACzD,KAAK,IAAI,MAAM,GAAG,SAAS,CAAA;IAE3B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CACzB;AAED,qBAAa,eAAgB,YAAW,eAAe;IACtD,OAAO,CAAC,MAAM,CAAe;IAE7B,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAMzB,KAAK,IAAI,MAAM,GAAG,SAAS;IAO3B,IAAI,OAAO,IAAI,OAAO,CAErB;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,wBAAgB,YAAY,CAC3B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS,EACpC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAC9B,SAAS,OAAO,EAAE,CAoBpB;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC7B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,OAAO,EAAE,eAAe,GAAG,SAAS,GAClC,SAAS,OAAO,EAAE,CA8BpB"}

package/dist/runtime/query/steering.js

@@ -30,6 +30,35 @@ export class SteeringBinding {
  * to be worked with rather than followed would inverting the very thing the
  * host is trying to do. Different party, different frame, on purpose.
  */
+/** The same slot as steering, for notices the kernel itself has to deliver. */
+export function attachNotice(messages, channel, format) {
+    if (!channel?.pending)
+        return messages;
+    let lastToolIndex = -1;
+    for (let index = messages.length - 1; index >= 0; index--) {
+        if (messages[index]?.role === 'tool') {
+            lastToolIndex = index;
+            break;
+        }
+    }
+    if (lastToolIndex === -1)
+        return messages;
+    const text = channel.drain();
+    if (text === undefined)
+        return messages;
+    const target = messages[lastToolIndex];
+    if (typeof target.content !== 'string') {
+        channel.steer(text);
+        return messages;
+    }
+    const next = [...messages];
+    next[lastToolIndex] = { ...target, content: target.content + format(text) };
+    return next;
+}
+/** What the model reads when a background job it started has ended. */
+export function formatJobNote(text) {
+    return `\n\n[Background job update]\n${text}`;
+}
 export function formatSteeringNote(text) {
     return `\n\n[Message from the operator, received while this tool was running]\n${text}`;
 }

package/dist/runtime/query/steering.js.map

@@ -1 +1 @@
-{"version":3,"file":"steering.js","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAoDA,MAAM,OAAO,eAAe;IACnB,MAAM,GAAa,EAAE,CAAA;IAE7B,KAAK,CAAC,IAAY;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,OAAO,MAAM,CAAA;IACd,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9B,CAAC;CACD;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,0EAA0E,IAAI,EAAE,CAAA;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC7B,QAA4B,EAC5B,OAAoC;IAEpC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IAEtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,QAAQ,CAAA;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3F,OAAO,IAAI,CAAA;AACZ,CAAC"}
+{"version":3,"file":"steering.js","sourceRoot":"","sources":["../../../src/runtime/query/steering.ts"],"names":[],"mappings":"AAoDA,MAAM,OAAO,eAAe;IACnB,MAAM,GAAa,EAAE,CAAA;IAE7B,KAAK,CAAC,IAAY;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO;YAAE,OAAM;QACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC1B,CAAC;IAED,KAAK;QACJ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAA;QAChB,OAAO,MAAM,CAAA;IACd,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9B,CAAC;CACD;AAED;;;;;;;;;;;;GAYG;AACH,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAC3B,QAA4B,EAC5B,OAAoC,EACpC,MAAgC;IAEhC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAC5B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACnB,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAA;IAC3E,OAAO,IAAI,CAAA;AACZ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,OAAO,gCAAgC,IAAI,EAAE,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,0EAA0E,IAAI,EAAE,CAAA;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC7B,QAA4B,EAC5B,OAAoC;IAEpC,IAAI,CAAC,OAAO,EAAE,OAAO;QAAE,OAAO,QAAQ,CAAA;IAEtC,IAAI,aAAa,GAAG,CAAC,CAAC,CAAA;IACtB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3D,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;YACtC,aAAa,GAAG,KAAK,CAAA;YACrB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAA;IAEzC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,EAAE,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAA;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAY,CAAA;IACjD,wEAAwE;IACxE,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,0EAA0E;IAC1E,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;QACvB,OAAO,QAAQ,CAAA;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAA;IAC3F,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/runtime/query/token-budget.d.ts

@@ -0,0 +1,7 @@
+import type { TokenBudget } from '../../run/token-budget.js';
+import type { RunId } from '../../types/ids/index.js';
+import type { RunState } from '../../types/run/state.js';
+import type { QueryParams } from './index.js';
+/** Resolve one authority before any model request or recovered tool dispatch. */
+export declare function resolveQueryBudget(params: QueryParams, runId: RunId, selected?: RunState): Promise<TokenBudget>;
+//# sourceMappingURL=token-budget.d.ts.map

package/dist/runtime/query/token-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-budget.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/token-budget.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAA;AAK5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAA;AACrD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAA;AAExD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,iFAAiF;AACjF,wBAAsB,kBAAkB,CACvC,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,KAAK,EACZ,QAAQ,CAAC,EAAE,QAAQ,GACjB,OAAO,CAAC,WAAW,CAAC,CA0GtB"}

package/dist/runtime/query/token-budget.js

@@ -0,0 +1,101 @@
+import { join } from 'node:path';
+import { DefaultPathBuilder } from '../../session/workspace/path-builder.js';
+import { DiskCheckpointStore } from '../../store/run/checkpoint-disk.js';
+import { openTokenBudget } from '../../store/run/token-budget-disk.js';
+import { validateTokenBudgetBinding } from '../../types/run/token-budget-store.js';
+/** Resolve one authority before any model request or recovered tool dispatch. */
+export async function resolveQueryBudget(params, runId, selected) {
+    let saved = selected;
+    if (params.resumeFromCheckpoint && !saved) {
+        const paths = params.pathBuilder ??
+            new DefaultPathBuilder(join(params.workingDirectory ?? process.cwd(), '.namzu'));
+        const scope = {
+            tenantId: params.tenantId,
+            projectId: params.projectId,
+            sessionId: params.sessionId,
+            runId,
+            parentRunId: params.parentRunId,
+        };
+        const store = params.checkpointStore ??
+            new DiskCheckpointStore({
+                baseDir: join(paths.sessionDir(params.projectId, params.sessionId), 'runs'),
+            }, scope);
+        saved = (await store.readCheckpoint(scope, params.resumeFromCheckpoint)) ?? undefined;
+        if (!saved)
+            throw new Error('Cannot restore a token budget from a missing checkpoint.');
+    }
+    const schedulerBudget = params.taskScheduler?.budget;
+    if (params.taskScheduler && !schedulerBudget) {
+        throw new Error('A task scheduler must expose its shared token budget account.');
+    }
+    if (params.budget && schedulerBudget && params.budget !== schedulerBudget) {
+        throw new Error('Query and task scheduler must share the same token budget account.');
+    }
+    const provided = params.budget ?? schedulerBudget;
+    const binding = saved?.budgetBinding === undefined ? undefined : validateTokenBudgetBinding(saved.budgetBinding);
+    if (binding &&
+        saved?.budgetAccountId !== undefined &&
+        saved.budgetAccountId !== binding.accountId) {
+        throw new Error('Checkpoint token budget account references disagree.');
+    }
+    if (binding &&
+        (binding.scope.tenantId !== params.tenantId || binding.scope.projectId !== params.projectId)) {
+        throw new Error('Checkpoint token budget belongs to a different tenant or project.');
+    }
+    if (binding && binding.scope.runId === runId && binding.scope.sessionId !== params.sessionId) {
+        throw new Error('Checkpoint token budget belongs to a different root session.');
+    }
+    if (provided) {
+        const providedBinding = provided.binding;
+        if (providedBinding &&
+            (providedBinding.scope.tenantId !== params.tenantId ||
+                providedBinding.scope.projectId !== params.projectId ||
+                (providedBinding.scope.runId === runId &&
+                    providedBinding.scope.sessionId !== params.sessionId))) {
+            throw new Error('Supplied token budget belongs to a different root scope.');
+        }
+        if (saved?.budgetAccountId && saved.budgetAccountId !== provided.accountId) {
+            throw new Error('Resume requires the original token budget account.');
+        }
+        if (binding &&
+            (binding.accountId !== provided.accountId || binding.scope.runId !== provided.rootRunId)) {
+            throw new Error('Checkpoint and supplied token budget authority disagree.');
+        }
+        if (binding &&
+            (!providedBinding ||
+                binding.scope.tenantId !== providedBinding.scope.tenantId ||
+                binding.scope.projectId !== providedBinding.scope.projectId ||
+                binding.scope.sessionId !== providedBinding.scope.sessionId ||
+                binding.scope.runId !== providedBinding.scope.runId)) {
+            throw new Error('Checkpoint and supplied token budget root scopes disagree.');
+        }
+        provided.bindRun(runId);
+        narrowToRunLimit(provided, params.runConfig.tokenBudget);
+        return provided;
+    }
+    if (saved?.budgetAccountId && !binding) {
+        throw new Error('This checkpoint used an in-memory token budget. Supply its current authoritative budget to resume.');
+    }
+    const budget = await openTokenBudget({
+        store: params.tokenBudgetStore,
+        pathBuilder: params.pathBuilder,
+        workingDirectory: params.workingDirectory,
+        scope: binding?.scope ?? {
+            tenantId: params.tenantId,
+            projectId: params.projectId,
+            sessionId: params.sessionId,
+            runId,
+        },
+        limit: binding && binding.scope.runId !== runId ? undefined : params.runConfig.tokenBudget,
+        accountId: binding?.accountId,
+        requireExisting: binding !== undefined,
+    });
+    budget.bindRun(runId);
+    narrowToRunLimit(budget, params.runConfig.tokenBudget);
+    return budget;
+}
+function narrowToRunLimit(budget, limit) {
+    if (limit > 0 && (budget.limit === 0 || limit < budget.limit))
+        budget.narrow(limit);
+}
+//# sourceMappingURL=token-budget.js.map

package/dist/runtime/query/token-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-budget.js","sourceRoot":"","sources":["../../../src/runtime/query/token-budget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAA;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAItE,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAA;AAGlF,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,MAAmB,EACnB,KAAY,EACZ,QAAmB;IAEnB,IAAI,KAAK,GAA+E,QAAQ,CAAA;IAChG,IAAI,MAAM,CAAC,oBAAoB,IAAI,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,KAAK,GACV,MAAM,CAAC,WAAW;YAClB,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAA;QACjF,MAAM,KAAK,GAAG;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;SAC/B,CAAA;QACD,MAAM,KAAK,GACV,MAAM,CAAC,eAAe;YACtB,IAAI,mBAAmB,CACtB;gBACC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;aAC3E,EACD,KAAK,CACL,CAAA;QACF,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,SAAS,CAAA;QACrF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,CAAA;IACpD,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAA;IACjD,MAAM,OAAO,GACZ,KAAK,EAAE,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;IACjG,IACC,OAAO;QACP,KAAK,EAAE,eAAe,KAAK,SAAS;QACpC,KAAK,CAAC,eAAe,KAAK,OAAO,CAAC,SAAS,EAC1C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACxE,CAAC;IACD,IACC,OAAO;QACP,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,EAC3F,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACd,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAA;QACxC,IACC,eAAe;YACf,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;gBAClD,eAAe,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;gBACpD,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK;oBACrC,eAAe,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC,EACvD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC5E,CAAC;QACD,IAAI,KAAK,EAAE,eAAe,IAAI,KAAK,CAAC,eAAe,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC5E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACtE,CAAC;QACD,IACC,OAAO;YACP,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,CAAC,EACvF,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA;QAC5E,CAAC;QACD,IACC,OAAO;YACP,CAAC,CAAC,eAAe;gBAChB,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,eAAe,CAAC,KAAK,CAAC,QAAQ;gBACzD,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,eAAe,CAAC,KAAK,CAAC,SAAS;gBAC3D,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,eAAe,CAAC,KAAK,CAAC,SAAS;gBAC3D,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,EACpD,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QAC9E,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACxD,OAAO,QAAQ,CAAA;IAChB,CAAC;IACD,IAAI,KAAK,EAAE,eAAe,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACd,oGAAoG,CACpG,CAAA;IACF,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,gBAAgB;QAC9B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI;YACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK;SACL;QACD,KAAK,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;QAC1F,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,eAAe,EAAE,OAAO,KAAK,SAAS;KACtC,CAAC,CAAA;IACF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IACrB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACtD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmB,EAAE,KAAa;IAC3D,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACpF,CAAC"}

package/dist/runtime/query/tool-output-budget.d.ts

@@ -58,6 +58,8 @@ export interface ApplyToolOutputBudgetOptions {
     readonly toolUseId: string;
     readonly output: string;
     readonly maxChars: number;
+    /** An omission notice that shares the text budget, never extends it. */
+    readonly notice?: string;
     /**
      * Directory to spill overflow into. When absent the output is
      * middle-elided instead — degraded, but never unbounded.

package/dist/runtime/query/tool-output-budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-output-budget.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/tool-output-budget.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAA;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,oCAAoC,CAAA;AA+D7D,MAAM,WAAW,sBAAsB;IACtC,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,gDAAgD;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,GAC7C,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,GAAG,MAAM,CAQjF;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,sBAAsB,CAyBhG"}
+{"version":3,"file":"tool-output-budget.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/tool-output-budget.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAA;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,oCAAoC,CAAA;AAsE7D,MAAM,WAAW,sBAAsB;IACtC,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,gDAAgD;IAChD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,SAAS;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,GAC7C,MAAM,GAAG,SAAS,CAapB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,GAAG,MAAM,CAOjF;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,4BAA4B,GAAG,sBAAsB,CAoChG"}