@namzu/sdk 43.0.0 → 44.0.0

package/dist/runtime/query/fork/mutate.js

@@ -0,0 +1,69 @@
+import { createToolMessage, } from '../../../types/message/index.js';
+import { MutationNotApplicableError } from '../../../types/session/fork.js';
+/**
+ * Returns the tool calls on the most recent assistant message that do not
+ * yet have a matching {@link import('../../../types/message/index.js').ToolMessage}
+ * response further down the message list. These are the fork-point "pending"
+ * tool calls that mutations may target.
+ */
+function findPendingToolCalls(messages) {
+    let lastAssistantIdx = -1;
+    for (let i = messages.length - 1; i >= 0; i--) {
+        const msg = messages[i];
+        if (msg && msg.role === 'assistant' && (msg.toolCalls?.length ?? 0) > 0) {
+            lastAssistantIdx = i;
+            break;
+        }
+    }
+    if (lastAssistantIdx === -1)
+        return [];
+    const assistant = messages[lastAssistantIdx];
+    const satisfied = new Set();
+    for (let i = lastAssistantIdx + 1; i < messages.length; i++) {
+        const msg = messages[i];
+        if (msg && msg.role === 'tool') {
+            satisfied.add(msg.toolCallId);
+        }
+    }
+    return (assistant.toolCalls ?? []).filter((tc) => !satisfied.has(tc.id));
+}
+/**
+ * Apply an ordered list of {@link Mutation} to a checkpoint's message
+ * history at the fork point, producing a new message array that the
+ * resumed iteration loop consumes. Pure function; does not touch the turn
+ * store, does not emit events.
+ *
+ * Throws {@link MutationNotApplicableError} when an `injectToolResponse`
+ * mutation targets a tool call id that is not pending at the fork point —
+ * the error payload carries the list of ids that *are* pending so the
+ * caller can recover without guessing.
+ *
+ * See ses_005-deterministic-replay design §3.3.
+ */
+export function applyMutations(messages, mutations) {
+    let current = [...messages];
+    for (const m of mutations) {
+        current = applyOne(current, m);
+    }
+    return current;
+}
+function applyOne(messages, mutation) {
+    switch (mutation.type) {
+        case 'injectToolResponse': {
+            const pending = findPendingToolCalls(messages);
+            const match = pending.find((tc) => tc.id === mutation.toolCallId);
+            if (!match) {
+                throw new MutationNotApplicableError(`No pending tool call ${mutation.toolCallId} at fork point`, 
+                // `ToolCall.id` is a bare `string` — a provider chooses its own
+                // shape, which is what `ToolUseId` exists to say. This assertion
+                // satisfies `MutationNotApplicableError`'s parameter and is only
+                // ever read back as text in that message; it never becomes a
+                // key. Left as a cast because the honest fix is that parameter
+                // type, not this line.
+                pending.map((tc) => tc.id));
+            }
+            return [...messages, createToolMessage(mutation.response.output, mutation.toolCallId)];
+        }
+    }
+}
+//# sourceMappingURL=mutate.js.map

package/dist/runtime/query/fork/mutate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutate.js","sourceRoot":"","sources":["../../../../src/runtime/query/fork/mutate.ts"],"names":[],"mappings":"AACA,OAAO,EAIN,iBAAiB,GACjB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAiB,0BAA0B,EAAE,MAAM,gCAAgC,CAAA;AAE1F;;;;;GAKG;AACH,SAAS,oBAAoB,CAAC,QAA4B;IACzD,IAAI,gBAAgB,GAAG,CAAC,CAAC,CAAA;IACzB,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACzE,gBAAgB,GAAG,CAAC,CAAA;YACpB,MAAK;QACN,CAAC;IACF,CAAC;IACD,IAAI,gBAAgB,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAA;IAEtC,MAAM,SAAS,GAAG,QAAQ,CAAC,gBAAgB,CAAqB,CAAA;IAChE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IACnC,KAAK,IAAI,CAAC,GAAG,gBAAgB,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAChC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;QAC9B,CAAC;IACF,CAAC;IACD,OAAO,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,cAAc,CAC7B,QAA4B,EAC5B,SAA8B;IAE9B,IAAI,OAAO,GAAc,CAAC,GAAG,QAAQ,CAAC,CAAA;IACtC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,QAAmB,EAAE,QAAkB;IACxD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC3B,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;YAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAA;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,0BAA0B,CACnC,wBAAwB,QAAQ,CAAC,UAAU,gBAAgB;gBAC3D,gEAAgE;gBAChE,iEAAiE;gBACjE,iEAAiE;gBACjE,6DAA6D;gBAC7D,+DAA+D;gBAC/D,uBAAuB;gBACvB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAgB,CAAC,CACxC,CAAA;YACF,CAAC;YACD,OAAO,CAAC,GAAG,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;QACvF,CAAC;IACF,CAAC;AACF,CAAC"}

package/dist/runtime/query/fork/prepare.d.ts

@@ -0,0 +1,52 @@
+import type { CheckpointScope, SessionCheckpointStore } from '../../../store/checkpoint/index.js';
+import type { SessionLog } from '../../../store/session-log/index.js';
+import type { CheckpointId } from '../../../types/hitl/index.js';
+import type { Message } from '../../../types/message/index.js';
+import type { Checkpoint } from '../../../types/session/checkpoint.js';
+import type { Mutation } from '../../../types/session/fork.js';
+import type { TurnForkOrigin } from '../../../types/session/turn.js';
+import type { Logger } from '../../../utils/logger.js';
+/** Which checkpoint to fork at: an id, or the turn's newest. */
+export type CheckpointSelector = CheckpointId | 'latest';
+export interface PrepareForkInput {
+    /** The source session's log: the checkpoint's context is its fold. */
+    readonly sessionLog: SessionLog;
+    /** The store the source turn's checkpoints are in. */
+    readonly checkpointStore: SessionCheckpointStore;
+    /** The source turn, across the full attribution. */
+    readonly scope: CheckpointScope;
+    /** Which checkpoint to fork at. */
+    readonly fromCheckpoint: CheckpointSelector;
+    /** Mutations applied at the fork point before the caller hands the state to `query()`. */
+    readonly mutate?: Mutation[];
+    readonly logger?: Logger;
+}
+export interface PreparedForkState {
+    /**
+     * The context at the fork point, with mutations applied: the fold of the
+     * source session's log through the checkpoint. Seed a NEW session with it
+     * (`query({ sessionId: <new>, messages, forkedFrom })`).
+     */
+    readonly messages: Message[];
+    /** The checkpoint the fork starts from. */
+    readonly sourceCheckpoint: Checkpoint;
+    /**
+     * Where the fork comes from. Pass it as `query({ forkedFrom })`: the new
+     * session's `session_started.forkedFrom` names it, and the returned turn
+     * carries it.
+     */
+    readonly forkedFrom: TurnForkOrigin;
+    /** The mutations that were applied. */
+    readonly mutations: readonly Mutation[];
+}
+/**
+ * Produce what a fork needs: the context at a checkpoint of a source turn,
+ * with mutations applied, and the origin the new session records. A fork is
+ * always a NEW session; the source session is only read.
+ *
+ * The checkpoint is restored under the same rules a resume uses: its
+ * document must match its `checkpoint_written` record and the log prefix it
+ * covers must be intact.
+ */
+export declare function prepareForkState(input: PrepareForkInput): Promise<PreparedForkState>;
+//# sourceMappingURL=prepare.d.ts.map

package/dist/runtime/query/fork/prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.d.ts","sourceRoot":"","sources":["../../../../src/runtime/query/fork/prepare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AACjG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAA;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAA;AAChE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAA;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sCAAsC,CAAA;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAA;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAA;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAItD,gEAAgE;AAChE,MAAM,MAAM,kBAAkB,GAAG,YAAY,GAAG,QAAQ,CAAA;AAExD,MAAM,WAAW,gBAAgB;IAChC,sEAAsE;IACtE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAA;IAChD,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,cAAc,EAAE,kBAAkB,CAAA;IAC3C,0FAA0F;IAC1F,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IACjC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;IAC5B,2CAA2C;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAA;IACrC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAA;IACnC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAA;CACvC;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAe1F"}

package/dist/runtime/query/fork/prepare.js

@@ -0,0 +1,43 @@
+import { restoreCheckpointContext } from '../checkpoint.js';
+import { applyMutations } from './mutate.js';
+/**
+ * Produce what a fork needs: the context at a checkpoint of a source turn,
+ * with mutations applied, and the origin the new session records. A fork is
+ * always a NEW session; the source session is only read.
+ *
+ * The checkpoint is restored under the same rules a resume uses: its
+ * document must match its `checkpoint_written` record and the log prefix it
+ * covers must be intact.
+ */
+export async function prepareForkState(input) {
+    const sourceCheckpoint = await resolveCheckpoint(input);
+    const restored = await restoreCheckpointContext(input.sessionLog, sourceCheckpoint);
+    const mutations = input.mutate ?? [];
+    const messages = applyMutations(restored.messages, mutations);
+    return {
+        messages,
+        sourceCheckpoint,
+        forkedFrom: {
+            sessionId: sourceCheckpoint.sessionId,
+            turnId: sourceCheckpoint.turnId,
+            checkpointId: sourceCheckpoint.checkpointId,
+        },
+        mutations,
+    };
+}
+async function resolveCheckpoint(input) {
+    if (input.fromCheckpoint === 'latest') {
+        const all = await input.checkpointStore.list(input.scope);
+        const newest = [...all].sort((a, b) => b.iteration - a.iteration)[0];
+        if (!newest) {
+            throw new Error(`No checkpoints found for turn ${input.scope.turnId} of session ${input.scope.sessionId}`);
+        }
+        return (await input.checkpointStore.restore(input.scope, newest.checkpointId));
+    }
+    const checkpoint = await input.checkpointStore.restore(input.scope, input.fromCheckpoint);
+    if (!checkpoint) {
+        throw new Error(`Checkpoint ${input.fromCheckpoint} not found for turn ${input.scope.turnId} of session ${input.scope.sessionId}`);
+    }
+    return checkpoint;
+}
+//# sourceMappingURL=prepare.js.map

package/dist/runtime/query/fork/prepare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare.js","sourceRoot":"","sources":["../../../../src/runtime/query/fork/prepare.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAsC5C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAuB;IAC7D,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACvD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IACnF,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;IACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC7D,OAAO;QACN,QAAQ;QACR,gBAAgB;QAChB,UAAU,EAAE;YACX,SAAS,EAAE,gBAAgB,CAAC,SAAS;YACrC,MAAM,EAAE,gBAAgB,CAAC,MAAM;YAC/B,YAAY,EAAE,gBAAgB,CAAC,YAAY;SAC3C;QACD,SAAS;KACT,CAAA;AACF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,KAAuB;IACvD,IAAI,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;QACpE,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACd,iCAAiC,KAAK,CAAC,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CACzF,CAAA;QACF,CAAC;QACD,OAAO,CAAC,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,CAAe,CAAA;IAC7F,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;IACzF,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACd,cAAc,KAAK,CAAC,cAAc,uBAAuB,KAAK,CAAC,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,CACjH,CAAA;IACF,CAAC;IACD,OAAO,UAAU,CAAA;AAClB,CAAC"}

package/dist/runtime/query/guard.d.ts

@@ -1,16 +1,16 @@
-import type { RunPersistence } from '../../manager/run/persistence.js';
-import type { StopReason } from '../../types/run/index.js';
+import type { TurnRecorder } from '../../manager/session/turn-recorder.js';
+import type { StopReason } from '../../types/session/index.js';
 export interface GuardConfig {
     tokenBudget: number;
     timeoutMs: number;
     costLimitUsd?: number;
     maxIterations?: number;
     /**
-     * Wall-clock already consumed by this run before the current process
-     * picked it up, from `IterationCheckpoint.guardState.elapsedMs`.
+     * Wall-clock already consumed by this turn before the current process
+     * picked it up, from the checkpoint's `guards.elapsedMs`.
      *
-     * The timeout budget is a property of the RUN, not of the process
-     * hosting it. Without the offset a run resumed from a checkpoint got a
+     * The timeout budget is a property of the TURN, not of the process
+     * hosting it. Without the offset a turn resumed from a checkpoint got a
      * fresh clock every time, so N resumes bought N x `timeoutMs`.
      */
     elapsedMsOffset?: number;
@@ -29,24 +29,24 @@ export declare class GuardCoordinator {
      * Adopt a checkpoint's elapsed time after construction.
      *
      * The guard is built before the checkpoint is read (restore is async and
-     * happens inside the run generator), so the resume path cannot pass
+     * happens inside the turn generator), so the resume path cannot pass
      * `elapsedMsOffset` to the constructor. Rather than reorder setup around
      * one field, let the resume branch hand it over.
      */
     restoreElapsed(elapsedMs: number): void;
     /**
-     * Wall-clock left before this run is asked to start finishing.
+     * Wall-clock left before this turn is asked to start finishing.
      *
      * NOT the time left before the deadline, and the difference is the whole
      * point. The checks above run BETWEEN iterations, so anything that waits
      * inside one cannot be stopped by them, and a caller sizing such a wait
-     * needs a number the run actually owns: a fixed two-minute hold measured
-     * against a run configured for twenty seconds kept it open for 120,267 ms.
+     * needs a number the turn actually owns: a fixed two-minute hold measured
+     * against a turn configured for twenty seconds kept it open for 120,267 ms.
      *
      * Measuring to the DEADLINE was the first attempt and it was wrong. The
      * binding constraint is `budgetWarningThreshold`, the point at which this
      * guard stops asking for more work and asks for a closing summary — that
-     * last slice exists so the run can produce an answer, and a wait sized
+     * last slice exists so the turn can produce an answer, and a wait sized
      * against the deadline eats into it. Half of the time-to-deadline, started
      * just under the threshold, ends at 95% of the budget: half the closing
      * reserve spent waiting for a result the closing answer was supposed to
@@ -57,20 +57,20 @@ export declare class GuardCoordinator {
      * iteration and this is read when the wait is about to start, so a long
      * iteration that crossed the line in between is told to wait for nothing.
      *
-     * Reads through the same `startTime` the limit checks use, so a run
+     * Reads through the same `startTime` the limit checks use, so a turn
      * resumed from a checkpoint (see `restoreElapsed`) reports the time left
-     * on the RUN rather than on the process now hosting it.
+     * on the TURN rather than on the process now hosting it.
      */
     remainingBeforeFinalizeMs(): number;
     /**
-     * Wall-clock left before the run's hard timeout.
+     * Wall-clock left before the turn's hard timeout.
      *
      * Setup work that happens before the first iteration cannot rely on
      * {@link beforeIteration}: there is no iteration boundary to sample while
-     * that work is pending. Callers use this value to put the same run-owned
+     * that work is pending. Callers use this value to put the same turn-owned
      * deadline around such work instead of inventing a second clock.
      */
     remainingUntilTimeoutMs(): number;
-    beforeIteration(runMgr: RunPersistence, abortSignal: AbortSignal): GuardCheckResult;
+    beforeIteration(recorder: TurnRecorder, abortSignal: AbortSignal): GuardCheckResult;
 }
 //# sourceMappingURL=guard.d.ts.map

package/dist/runtime/query/guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAA;AAEtE,OAAO,KAAK,EAAsB,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAE9E,MAAM,WAAW,WAAW;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,aAAa,EAAE,OAAO,CAAA;IACtB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,EAAE,OAAO,CAAA;CACpB;AAED,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,SAAS,CAAQ;gBAEb,MAAM,EAAE,WAAW;IAc/B;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,yBAAyB,IAAI,MAAM;IAMnC;;;;;;;OAOG;IACH,uBAAuB,IAAI,MAAM;IAKjC,eAAe,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,WAAW,GAAG,gBAAgB;CA4CnF"}
+{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../../src/runtime/query/guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAA;AAE1E,OAAO,KAAK,EAAsB,UAAU,EAAE,MAAM,8BAA8B,CAAA;AAElF,MAAM,WAAW,WAAW;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,aAAa,EAAE,OAAO,CAAA;IACtB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB,WAAW,EAAE,OAAO,CAAA;CACpB;AAED,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,SAAS,CAAQ;gBAEb,MAAM,EAAE,WAAW;IAc/B;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIvC;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,yBAAyB,IAAI,MAAM;IAMnC;;;;;;;OAOG;IACH,uBAAuB,IAAI,MAAM;IAKjC,eAAe,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,GAAG,gBAAgB;CA4CnF"}

package/dist/runtime/query/guard.js

@@ -1,4 +1,4 @@
-import { buildLimitConfig, checkLimitsDetailed } from '../../run/LimitChecker.js';
+import { buildLimitConfig, checkLimitsDetailed } from '../../turn/LimitChecker.js';
 export class GuardCoordinator {
     limitConfig;
     startTime;
@@ -14,7 +14,7 @@ export class GuardCoordinator {
      * Adopt a checkpoint's elapsed time after construction.
      *
      * The guard is built before the checkpoint is read (restore is async and
-     * happens inside the run generator), so the resume path cannot pass
+     * happens inside the turn generator), so the resume path cannot pass
      * `elapsedMsOffset` to the constructor. Rather than reorder setup around
      * one field, let the resume branch hand it over.
      */
@@ -22,18 +22,18 @@ export class GuardCoordinator {
         this.startTime = Date.now() - Math.max(0, elapsedMs);
     }
     /**
-     * Wall-clock left before this run is asked to start finishing.
+     * Wall-clock left before this turn is asked to start finishing.
      *
      * NOT the time left before the deadline, and the difference is the whole
      * point. The checks above run BETWEEN iterations, so anything that waits
      * inside one cannot be stopped by them, and a caller sizing such a wait
-     * needs a number the run actually owns: a fixed two-minute hold measured
-     * against a run configured for twenty seconds kept it open for 120,267 ms.
+     * needs a number the turn actually owns: a fixed two-minute hold measured
+     * against a turn configured for twenty seconds kept it open for 120,267 ms.
      *
      * Measuring to the DEADLINE was the first attempt and it was wrong. The
      * binding constraint is `budgetWarningThreshold`, the point at which this
      * guard stops asking for more work and asks for a closing summary — that
-     * last slice exists so the run can produce an answer, and a wait sized
+     * last slice exists so the turn can produce an answer, and a wait sized
      * against the deadline eats into it. Half of the time-to-deadline, started
      * just under the threshold, ends at 95% of the budget: half the closing
      * reserve spent waiting for a result the closing answer was supposed to
@@ -44,9 +44,9 @@ export class GuardCoordinator {
      * iteration and this is read when the wait is about to start, so a long
      * iteration that crossed the line in between is told to wait for nothing.
      *
-     * Reads through the same `startTime` the limit checks use, so a run
+     * Reads through the same `startTime` the limit checks use, so a turn
      * resumed from a checkpoint (see `restoreElapsed`) reports the time left
-     * on the RUN rather than on the process now hosting it.
+     * on the TURN rather than on the process now hosting it.
      */
     remainingBeforeFinalizeMs() {
         if (this.limitConfig.timeoutMs === 0)
@@ -55,11 +55,11 @@ export class GuardCoordinator {
         return Math.max(0, finalizeAt - (Date.now() - this.startTime));
     }
     /**
-     * Wall-clock left before the run's hard timeout.
+     * Wall-clock left before the turn's hard timeout.
      *
      * Setup work that happens before the first iteration cannot rely on
      * {@link beforeIteration}: there is no iteration boundary to sample while
-     * that work is pending. Callers use this value to put the same run-owned
+     * that work is pending. Callers use this value to put the same turn-owned
      * deadline around such work instead of inventing a second clock.
      */
     remainingUntilTimeoutMs() {
@@ -67,17 +67,17 @@ export class GuardCoordinator {
             return Number.POSITIVE_INFINITY;
         return Math.max(0, this.limitConfig.timeoutMs - (Date.now() - this.startTime));
     }
-    beforeIteration(runMgr, abortSignal) {
+    beforeIteration(recorder, abortSignal) {
         const limitState = {
             aborted: abortSignal.aborted,
-            totalTokens: runMgr.tokenUsage.totalTokens,
-            totalCost: runMgr.costInfo.totalCost,
-            unpricedTokens: runMgr.costInfo.unpricedTokens,
-            currentIteration: runMgr.currentIteration,
+            totalTokens: recorder.tokenUsage.totalTokens,
+            totalCost: recorder.costInfo.totalCost,
+            unpricedTokens: recorder.costInfo.unpricedTokens,
+            currentIteration: recorder.currentIteration,
             startTime: this.startTime,
         };
         const limitResult = checkLimitsDetailed(this.limitConfig, limitState);
-        if (!abortSignal.aborted && runMgr.budget && runMgr.budget.remaining <= 0) {
+        if (!abortSignal.aborted && recorder.budget && recorder.budget.remaining <= 0) {
             return {
                 shouldStop: true,
                 forceFinalize: false,

package/dist/runtime/query/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/runtime/query/guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAA;AA0BjF,MAAM,OAAO,gBAAgB;IACpB,WAAW,CAAoB;IAC/B,SAAS,CAAQ;IAEzB,YAAY,MAAmB;QAC9B,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAClC,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,aAAa,CACpB,CAAA;QACD,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,SAAS;QACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,SAAiB;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,yBAAyB;QACxB,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAA;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAA;QACvF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB;QACtB,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAA;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,eAAe,CAAC,MAAsB,EAAE,WAAwB;QAC/D,MAAM,UAAU,GAAG;YAClB,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC,WAAW;YAC1C,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,cAAc;YAC9C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,IAAI,CAAC,SAAS;SACzB,CAAA;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACrE,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YAC3E,OAAO;gBACN,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,cAAc;gBAC1B,WAAW,EAAE,KAAK;aAClB,CAAA;QACF,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO;gBACN,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,WAAW,EAAE,WAAW,CAAC,MAAM,KAAK,WAAW;aAC/C,CAAA;QACF,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,WAAW,EAAE,KAAK;aAClB,CAAA;QACF,CAAC;QAED,OAAO;YACN,UAAU,EAAE,KAAK;YACjB,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,KAAK;SAClB,CAAA;IACF,CAAC;CACD"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/runtime/query/guard.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AA0BlF,MAAM,OAAO,gBAAgB;IACpB,WAAW,CAAoB;IAC/B,SAAS,CAAQ;IAEzB,YAAY,MAAmB;QAC9B,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAClC,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,YAAY,EACnB,MAAM,CAAC,aAAa,CACpB,CAAA;QACD,oEAAoE;QACpE,gEAAgE;QAChE,kEAAkE;QAClE,SAAS;QACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC,CAAA;IACvE,CAAC;IAED;;;;;;;OAOG;IACH,cAAc,CAAC,SAAiB;QAC/B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;IACrD,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,yBAAyB;QACxB,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAA;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAA;QACvF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/D,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB;QACtB,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,iBAAiB,CAAA;QACrE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/E,CAAC;IAED,eAAe,CAAC,QAAsB,EAAE,WAAwB;QAC/D,MAAM,UAAU,GAAG;YAClB,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,WAAW;YAC5C,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS;YACtC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc;YAChD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,SAAS,EAAE,IAAI,CAAC,SAAS;SACzB,CAAA;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACrE,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;YAC/E,OAAO;gBACN,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,cAAc;gBAC1B,WAAW,EAAE,KAAK;aAClB,CAAA;QACF,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YACtC,OAAO;gBACN,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,WAAW,EAAE,WAAW,CAAC,MAAM,KAAK,WAAW;aAC/C,CAAA;QACF,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,IAAI;gBACnB,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,WAAW,EAAE,KAAK;aAClB,CAAA;QACF,CAAC;QAED,OAAO;YACN,UAAU,EAAE,KAAK;YACjB,aAAa,EAAE,KAAK;YACpB,WAAW,EAAE,KAAK;SAClB,CAAA;IACF,CAAC;CACD"}

package/dist/runtime/query/guardrail-presets.d.ts

@@ -22,7 +22,7 @@ export interface SecretRedactionOptions {
  */
 export declare function secretRedactionGuardrail(options?: SecretRedactionOptions): NamedGuardrail<OutputGuardrail>;
 /**
- * Flag likely instruction-override attempts in the run's input.
+ * Flag likely instruction-override attempts in the turn's input.
  *
  * Input-side because it is cheapest there — nothing has been spent — and
  * because the same text reaching the model is the thing you are trying to
@@ -30,7 +30,7 @@ export declare function secretRedactionGuardrail(options?: SecretRedactionOption
  *
  * It cannot see an INDIRECT injection, and that is not a limitation of the
  * patterns: an injection carried in a web page or a connected server's
- * answer never appears in the run's input at all. See
+ * answer never appears in the turn's input at all. See
  * {@link toolResultInjectionGuardrail}, which is the same list at the other
  * boundary.
  */
@@ -44,13 +44,13 @@ export declare function promptInjectionGuardrail(): NamedGuardrail<(ctx: {
  *
  * The case the input-side screen structurally cannot reach. An indirect
  * injection arrives in a fetched page or a connected server's answer, so it
- * is never in the run's input — by the time it matters the run is
+ * is never in the turn's input — by the time it matters the turn is
  * legitimate and the payload is riding on a result the model asked for.
  *
  * `refuse`, not `halt`: a hostile result is a reason to abandon that call,
- * not the run. The model is told the answer was refused and can choose
+ * not the turn. The model is told the answer was refused and can choose
  * something else, which is the behaviour that keeps the control switched on
- * — a screen that ends a run on a false positive gets removed, and then it
+ * — a screen that ends a turn on a false positive gets removed, and then it
  * protects nothing.
  *
  * **Detection is partial and this says so rather than implying coverage.**
@@ -219,13 +219,13 @@ export declare function passthroughToolNames(toolName: string, server?: string):
  */
 export declare function toolResultCorrespondenceGuardrail(options?: ToolResultCorrespondenceOptions): NamedGuardrail<ToolResultGuardrail>;
 /**
- * The screens a run installs on itself when its host configured none.
+ * The screens a turn installs on itself when its host configured none.
  *
  * A DEFAULT, and the reason it is here rather than on
  * {@link ToolRegistryConfig.resultGuardrails}: a host assembles a registry
  * and hands it to `runAgent`, so a registry-constructor default would be the
- * host's to write and this repository's default would reach nobody. The run
- * is the thing that has to carry it, and a run that wants none says so with
+ * host's to write and this repository's default would reach nobody. The turn
+ * is the thing that has to carry it, and a turn that wants none says so with
  * an empty array — which is the escape hatch, and it exists precisely because
  * the screen below can refuse a result.
  *
@@ -238,14 +238,14 @@ export declare function toolResultCorrespondenceGuardrail(options?: ToolResultCo
  * **A default that refuses a legitimate result is a default that gets turned
  * off, so the exemption has to be reachable from wherever the screen is
  * installed.** `toolResultCorrespondenceGuardrail({ passthroughTools })` is
- * how a host writing SDK code says so; a run's `toolResultGuardrails` array
+ * how a host writing SDK code says so; a turn's `toolResultGuardrails` array
  * is where it substitutes its own configured instance. An application that
  * ships the default without also shipping a way to name an exception has
  * shipped a switch with one position.
  *
  * Frozen, because it is handed to callers who may want to extend it:
  * `[...DEFAULT_TOOL_RESULT_GUARDRAILS, myScreen()]`. A caller that could
- * mutate it would be mutating the default for every other run in the process.
+ * mutate it would be mutating the default for every other turn in the process.
  */
 export declare const DEFAULT_TOOL_RESULT_GUARDRAILS: readonly ToolResultGuardrailSpec[];
 //# sourceMappingURL=guardrail-presets.d.ts.map

package/dist/runtime/query/guardrail-presets.js

@@ -2,7 +2,7 @@ import { PLUGIN_NAMESPACE_SEPARATOR } from '../../constants/plugin/index.js';
 import { OUTPUT_SECRET_PATTERNS } from '../../constants/secret-patterns.js';
 import { untrustedEnvelopeBody } from '../../tools/untrusted-envelope.js';
 /**
- * Patterns for credentials that must never leave a run.
+ * Patterns for credentials that must never leave a turn.
  *
  * Deliberately narrow and prefix-anchored, unchanged by the move to
  * `constants/secret-patterns.ts`: a loose "looks like a secret" regex over
@@ -33,7 +33,7 @@ export function secretRedactionGuardrail(options = {}) {
             let redacted = output;
             for (const [label, pattern] of patterns) {
                 // Fresh lastIndex: these are module-level /g regexes and are
-                // reused across runs.
+                // reused across turns.
                 pattern.lastIndex = 0;
                 if (!pattern.test(output))
                     continue;
@@ -67,7 +67,7 @@ const INJECTION_PATTERNS = [
     /pretend (?:that )?you (?:are|have) no (?:restrictions|rules|guidelines)/i,
 ];
 /**
- * Flag likely instruction-override attempts in the run's input.
+ * Flag likely instruction-override attempts in the turn's input.
  *
  * Input-side because it is cheapest there — nothing has been spent — and
  * because the same text reaching the model is the thing you are trying to
@@ -75,7 +75,7 @@ const INJECTION_PATTERNS = [
  *
  * It cannot see an INDIRECT injection, and that is not a limitation of the
  * patterns: an injection carried in a web page or a connected server's
- * answer never appears in the run's input at all. See
+ * answer never appears in the turn's input at all. See
  * {@link toolResultInjectionGuardrail}, which is the same list at the other
  * boundary.
  */
@@ -103,13 +103,13 @@ export function promptInjectionGuardrail() {
  *
  * The case the input-side screen structurally cannot reach. An indirect
  * injection arrives in a fetched page or a connected server's answer, so it
- * is never in the run's input — by the time it matters the run is
+ * is never in the turn's input — by the time it matters the turn is
  * legitimate and the payload is riding on a result the model asked for.
  *
  * `refuse`, not `halt`: a hostile result is a reason to abandon that call,
- * not the run. The model is told the answer was refused and can choose
+ * not the turn. The model is told the answer was refused and can choose
  * something else, which is the behaviour that keeps the control switched on
- * — a screen that ends a run on a false positive gets removed, and then it
+ * — a screen that ends a turn on a false positive gets removed, and then it
  * protects nothing.
  *
  * **Detection is partial and this says so rather than implying coverage.**
@@ -405,13 +405,13 @@ export function toolResultCorrespondenceGuardrail(options = {}) {
     };
 }
 /**
- * The screens a run installs on itself when its host configured none.
+ * The screens a turn installs on itself when its host configured none.
  *
  * A DEFAULT, and the reason it is here rather than on
  * {@link ToolRegistryConfig.resultGuardrails}: a host assembles a registry
  * and hands it to `runAgent`, so a registry-constructor default would be the
- * host's to write and this repository's default would reach nobody. The run
- * is the thing that has to carry it, and a run that wants none says so with
+ * host's to write and this repository's default would reach nobody. The turn
+ * is the thing that has to carry it, and a turn that wants none says so with
  * an empty array — which is the escape hatch, and it exists precisely because
  * the screen below can refuse a result.
  *
@@ -424,14 +424,14 @@ export function toolResultCorrespondenceGuardrail(options = {}) {
  * **A default that refuses a legitimate result is a default that gets turned
  * off, so the exemption has to be reachable from wherever the screen is
  * installed.** `toolResultCorrespondenceGuardrail({ passthroughTools })` is
- * how a host writing SDK code says so; a run's `toolResultGuardrails` array
+ * how a host writing SDK code says so; a turn's `toolResultGuardrails` array
  * is where it substitutes its own configured instance. An application that
  * ships the default without also shipping a way to name an exception has
  * shipped a switch with one position.
  *
  * Frozen, because it is handed to callers who may want to extend it:
  * `[...DEFAULT_TOOL_RESULT_GUARDRAILS, myScreen()]`. A caller that could
- * mutate it would be mutating the default for every other run in the process.
+ * mutate it would be mutating the default for every other turn in the process.
  */
 export const DEFAULT_TOOL_RESULT_GUARDRAILS = Object.freeze([
     toolResultCorrespondenceGuardrail(),

package/dist/runtime/query/guardrail-presets.js.map

@@ -1 +1 @@
-{"version":3,"file":"guardrail-presets.js","sourceRoot":"","sources":["../../../src/runtime/query/guardrail-presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAUzE;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAgB9C;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACvC,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAA;IAExC,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAoB,EAAE;YACvC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,IAAI,QAAQ,GAAG,MAAM,CAAA;YAErB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzC,6DAA6D;gBAC7D,sBAAsB;gBACtB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;gBACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACjB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;gBACrB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,KAAK,GAAG,CAAC,CAAA;YAC5D,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEjD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9C,OAAO,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,OAAO,GAAG,EAAE;gBAC1E,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,OAAO,GAAG,EAAE,CAAA;QACxF,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAsB;IAC7C,uGAAuG;IACvG,yGAAyG;IACzG,4EAA4E;IAC5E,iHAAiH;IACjH,0EAA0E;CAC1E,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB;IAGvC,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAoB,EAAE;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;gBACvE,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxB,OAAO;4BACN,MAAM,EAAE,OAAO;4BACf,MAAM,EAAE,oDAAoD;yBAC5D,CAAA;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,4BAA4B;IAC3C,OAAO;QACN,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAqB,EAAE;YACpD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBACnC,6DAA6D;gBAC7D,+DAA+D;gBAC/D,uDAAuD;gBACvD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,yBAAyB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;gBACvF,OAAO;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,mBAAmB,MAAM,+CAA+C;iBAChF,CAAA;YACF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAEjC,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAA;QACV,IAAI,KAAK,IAAI,OAAO;YAAE,OAAO,IAAI,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAiDD,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,IAAmB;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAChF,OAAM;IACP,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,kBAAkB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,CAAA;QACpD,CAAC;QACD,OAAM;IACP,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,kBAAkB,CAAC,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;IACvE,CAAC;AACF,CAAC;AAED,uGAAuG;AACvG,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,qBAAqB,CAAA;IAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,IAAI;QAAE,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjD,OAAO,QAAQ,IAAI,2BAA2B,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,MAAe;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;IAClE,MAAM,UAAU,GACf,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAC1F,IAAI,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAEnD,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAA;IACxE,MAAM,aAAa,GAClB,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QAC9D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAG,aAAa,IAAI,UAAU,CAAA;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;IAE9E,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AACH,MAAM,UAAU,iCAAiC,CAChD,UAA2C,EAAE;IAE7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAA;IAEvC,OAAO;QACN,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAqB,EAAE;YAC9E,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YACvC,gEAAgE;YAChE,kEAAkE;YAClE,6DAA6D;YAC7D,gEAAgE;YAChE,gCAAgC;YAChC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEzD,kEAAkE;YAClE,iEAAiE;YACjE,EAAE;YACF,4DAA4D;YAC5D,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,kEAAkE;YAClE,2DAA2D;YAC3D,8DAA8D;YAC9D,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEpE,IACC,WAAW,CAAC,IAAI,GAAG,CAAC;gBACpB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EACvF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAC1B,CAAC;YAED,MAAM,OAAO,GAAkB,EAAE,CAAA;YACjC,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;YACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEnD,gEAAgE;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,sCAAsC;YACtC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACjC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBAC9B,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC;aACxB,EAAE,CAAC;gBACZ,IAAI,IAAI,KAAK,EAAE;oBAAE,SAAQ;gBACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;gBAC7D,IAAI,CAAC,QAAQ;oBAAE,SAAQ;gBACvB,0DAA0D;gBAC1D,2DAA2D;gBAC3D,yDAAyD;gBACzD,2DAA2D;gBAC3D,kCAAkC;gBAClC,MAAM,OAAO,GAAG,WAAW;oBAC1B,CAAC,CAAC,6CAA6C,QAAQ,GAAG;oBAC1D,CAAC,CAAC,oBAAoB,QAAQ,GAAG,CAAA;gBAClC,OAAO;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,GAAG,OAAO,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,2EAA2E;iBAClI,CAAA;YACF,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAuC,MAAM,CAAC,MAAM,CAAC;IAC/F,iCAAiC,EAAE;CACnC,CAAC,CAAA"}
+{"version":3,"file":"guardrail-presets.js","sourceRoot":"","sources":["../../../src/runtime/query/guardrail-presets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAA;AAUzE;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAG,sBAAsB,CAAA;AAgB9C;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CACvC,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,CAAC,GAAG,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAA;IACvE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAA;IAExC,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAoB,EAAE;YACvC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,IAAI,QAAQ,GAAG,MAAM,CAAA;YAErB,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;gBACzC,6DAA6D;gBAC7D,uBAAuB;gBACvB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;gBACrB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBACnC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACjB,OAAO,CAAC,SAAS,GAAG,CAAC,CAAA;gBACrB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,KAAK,GAAG,CAAC,CAAA;YAC5D,CAAC;YAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEjD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9C,OAAO,IAAI,KAAK,OAAO;gBACtB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iCAAiC,OAAO,GAAG,EAAE;gBAC1E,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,yBAAyB,OAAO,GAAG,EAAE,CAAA;QACxF,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAAsB;IAC7C,uGAAuG;IACvG,yGAAyG;IACzG,4EAA4E;IAC5E,iHAAiH;IACjH,0EAA0E;CAC1E,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,wBAAwB;IAGvC,OAAO;QACN,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAoB,EAAE;YACzC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;gBACvE,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;oBAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;wBACxB,OAAO;4BACN,MAAM,EAAE,OAAO;4BACf,MAAM,EAAE,oDAAoD;yBAC5D,CAAA;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,4BAA4B;IAC3C,OAAO;QACN,IAAI,EAAE,uBAAuB;QAC7B,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAqB,EAAE;YACpD,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;gBAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,SAAQ;gBACnC,6DAA6D;gBAC7D,+DAA+D;gBAC/D,uDAAuD;gBACvD,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,yBAAyB,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,WAAW,CAAA;gBACvF,OAAO;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,mBAAmB,MAAM,+CAA+C;iBAChF,CAAA;YACF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAEjC,2FAA2F;AAC3F,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACzD,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,UAAU,IAAI,IAAI,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,CAAA;QACV,IAAI,KAAK,IAAI,OAAO;YAAE,OAAO,IAAI,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAiDD,SAAS,aAAa,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AACxC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,IAAmB;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;QACjC,IAAI,mBAAmB,CAAC,IAAI,EAAE,sBAAsB,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QAChF,OAAM;IACP,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,kBAAkB,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,CAAA;QACpD,CAAC;QACD,OAAM;IACP,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAM;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,kBAAkB,CAAC,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,IAAI,CAAC,CAAA;IACvE,CAAC;AACF,CAAC;AAED,uGAAuG;AACvG,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,qBAAqB,CAAA;IAC7C,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,IAAI,IAAI;QAAE,OAAO,QAAQ,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAA;IACjD,OAAO,QAAQ,IAAI,2BAA2B,CAAA;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,MAAe;IACrE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;IAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAA;IAClE,MAAM,UAAU,GACf,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAA;IAC1F,IAAI,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAEnD,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,MAAM,GAAG,CAAA;IACxE,MAAM,aAAa,GAClB,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QAC9D,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;QACrC,CAAC,CAAC,SAAS,CAAA;IACb,IAAI,aAAa,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAA;IAEzD,MAAM,IAAI,GAAG,aAAa,IAAI,UAAU,CAAA;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAA;IAE9E,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AACH,MAAM,UAAU,iCAAiC,CAChD,UAA2C,EAAE;IAE7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAA;IAEvC,OAAO;QACN,IAAI,EAAE,4BAA4B;QAClC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAqB,EAAE;YAC9E,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YACvC,gEAAgE;YAChE,kEAAkE;YAClE,6DAA6D;YAC7D,gEAAgE;YAChE,gCAAgC;YAChC,IAAI,OAAO,MAAM,KAAK,QAAQ;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEzD,kEAAkE;YAClE,iEAAiE;YACjE,EAAE;YACF,4DAA4D;YAC5D,iEAAiE;YACjE,kEAAkE;YAClE,kEAAkE;YAClE,kEAAkE;YAClE,2DAA2D;YAC3D,8DAA8D;YAC9D,mEAAmE;YACnE,6CAA6C;YAC7C,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,KAAK,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEpE,IACC,WAAW,CAAC,IAAI,GAAG,CAAC;gBACpB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EACvF,CAAC;gBACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAC1B,CAAC;YAED,MAAM,OAAO,GAAkB,EAAE,CAAA;YACjC,kBAAkB,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,CAAC,CAAA;YACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;YAEnD,gEAAgE;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,sCAAsC;YACtC,KAAK,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI;gBACjC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBAC9B,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC;aACxB,EAAE,CAAC;gBACZ,IAAI,IAAI,KAAK,EAAE;oBAAE,SAAQ;gBACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;gBAC7D,IAAI,CAAC,QAAQ;oBAAE,SAAQ;gBACvB,0DAA0D;gBAC1D,2DAA2D;gBAC3D,yDAAyD;gBACzD,2DAA2D;gBAC3D,kCAAkC;gBAClC,MAAM,OAAO,GAAG,WAAW;oBAC1B,CAAC,CAAC,6CAA6C,QAAQ,GAAG;oBAC1D,CAAC,CAAC,oBAAoB,QAAQ,GAAG,CAAA;gBAClC,OAAO;oBACN,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,GAAG,OAAO,OAAO,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,2EAA2E;iBAClI,CAAA;YACF,CAAC;YAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;QAC1B,CAAC;KACD,CAAA;AACF,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAuC,MAAM,CAAC,MAAM,CAAC;IAC/F,iCAAiC,EAAE;CACnC,CAAC,CAAA"}

package/dist/runtime/query/guardrails.d.ts

@@ -12,9 +12,9 @@ export interface GuardrailOutcome {
 /**
  * Run input guardrails before the first model call.
  *
- * Cheapest possible place to stop a run: nothing has been spent yet. The
- * previous surface could not do this at all — `run_start` fires with only
- * `{ runId }` and the `run_started` event carries only `systemPrompt`, so
+ * Cheapest possible place to stop a turn: nothing has been spent yet. The
+ * previous surface could not do this at all — `turn_start` fires with only
+ * `{ sessionId, turnId }` and the `turn_started` event carries only `systemPrompt`, so
  * the user's prompt was unreachable from any hook.
  */
 export declare function runInputGuardrails(guardrails: readonly InputGuardrailSpec[] | undefined, ctx: InputGuardrailContext, log: Logger): Promise<GuardrailOutcome>;
@@ -25,7 +25,7 @@ export declare function runInputGuardrails(guardrails: readonly InputGuardrailSp
  * `text_delta` events reach the host as the model produces them, so a
  * consumer that renders deltas live has already shown text by the time a
  * guardrail sees it. A rewrite therefore has to be treated as a
- * correction, and `run_completed` carries the corrected text. Gating the
+ * correction, and `turn_completed` carries the corrected text. Gating the
  * stream itself would mean buffering every token — trading the streaming
  * UX for the guarantee — which is a decision for the host, not the SDK.
  *