@office-ai/aioncli-core 0.2.3 → 0.18.4

package/dist/src/agents/executor.js

@@ -0,0 +1,779 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { reportError } from '../utils/errorReporting.js';
+import { GeminiChat, StreamEventType } from '../core/geminiChat.js';
+import { Type } from '@google/genai';
+import { executeToolCall } from '../core/nonInteractiveToolExecutor.js';
+import { ToolRegistry } from '../tools/tool-registry.js';
+import { CompressionStatus } from '../core/turn.js';
+import { ChatCompressionService } from '../services/chatCompressionService.js';
+import { getDirectoryContextString } from '../utils/environmentContext.js';
+import { GLOB_TOOL_NAME, GREP_TOOL_NAME, LS_TOOL_NAME, MEMORY_TOOL_NAME, READ_FILE_TOOL_NAME, READ_MANY_FILES_TOOL_NAME, WEB_SEARCH_TOOL_NAME, } from '../tools/tool-names.js';
+import { promptIdContext } from '../utils/promptIdContext.js';
+import { logAgentStart, logAgentFinish, logRecoveryAttempt, } from '../telemetry/loggers.js';
+import { AgentStartEvent, AgentFinishEvent, RecoveryAttemptEvent, } from '../telemetry/types.js';
+import { AgentTerminateMode } from './types.js';
+import { templateString } from './utils.js';
+import { parseThought } from '../utils/thoughtUtils.js';
+import {} from 'zod';
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { debugLogger } from '../utils/debugLogger.js';
+import { getModelConfigAlias } from './registry.js';
+const TASK_COMPLETE_TOOL_NAME = 'complete_task';
+const GRACE_PERIOD_MS = 60 * 1000; // 1 min
+/**
+ * Executes an agent loop based on an {@link AgentDefinition}.
+ *
+ * This executor runs the agent in a loop, calling tools until it calls the
+ * mandatory `complete_task` tool to signal completion.
+ */
+export class AgentExecutor {
+    definition;
+    agentId;
+    toolRegistry;
+    runtimeContext;
+    onActivity;
+    compressionService;
+    hasFailedCompressionAttempt = false;
+    /**
+     * Creates and validates a new `AgentExecutor` instance.
+     *
+     * This method ensures that all tools specified in the agent's definition are
+     * safe for non-interactive use before creating the executor.
+     *
+     * @param definition The definition object for the agent.
+     * @param runtimeContext The global runtime configuration.
+     * @param onActivity An optional callback to receive activity events.
+     * @returns A promise that resolves to a new `AgentExecutor` instance.
+     */
+    static async create(definition, runtimeContext, onActivity) {
+        // Create an isolated tool registry for this agent instance.
+        const agentToolRegistry = new ToolRegistry(runtimeContext);
+        const parentToolRegistry = await runtimeContext.getToolRegistry();
+        if (definition.toolConfig) {
+            for (const toolRef of definition.toolConfig.tools) {
+                if (typeof toolRef === 'string') {
+                    // If the tool is referenced by name, retrieve it from the parent
+                    // registry and register it with the agent's isolated registry.
+                    const toolFromParent = parentToolRegistry.getTool(toolRef);
+                    if (toolFromParent) {
+                        agentToolRegistry.registerTool(toolFromParent);
+                    }
+                }
+                else if (typeof toolRef === 'object' &&
+                    'name' in toolRef &&
+                    'build' in toolRef) {
+                    agentToolRegistry.registerTool(toolRef);
+                }
+                // Note: Raw `FunctionDeclaration` objects in the config don't need to be
+                // registered; their schemas are passed directly to the model later.
+            }
+            agentToolRegistry.sortTools();
+            // Validate that all registered tools are safe for non-interactive
+            // execution.
+            await AgentExecutor.validateTools(agentToolRegistry, definition.name);
+        }
+        // Get the parent prompt ID from context
+        const parentPromptId = promptIdContext.getStore();
+        return new AgentExecutor(definition, runtimeContext, agentToolRegistry, parentPromptId, onActivity);
+    }
+    /**
+     * Constructs a new AgentExecutor instance.
+     *
+     * @private This constructor is private. Use the static `create` method to
+     * instantiate the class.
+     */
+    constructor(definition, runtimeContext, toolRegistry, parentPromptId, onActivity) {
+        this.definition = definition;
+        this.runtimeContext = runtimeContext;
+        this.toolRegistry = toolRegistry;
+        this.onActivity = onActivity;
+        this.compressionService = new ChatCompressionService();
+        const randomIdPart = Math.random().toString(36).slice(2, 8);
+        // parentPromptId will be undefined if this agent is invoked directly
+        // (top-level), rather than as a sub-agent.
+        const parentPrefix = parentPromptId ? `${parentPromptId}-` : '';
+        this.agentId = `${parentPrefix}${this.definition.name}-${randomIdPart}`;
+    }
+    /**
+     * Executes a single turn of the agent's logic, from calling the model
+     * to processing its response.
+     *
+     * @returns An {@link AgentTurnResult} object indicating whether to continue
+     * or stop the agent loop.
+     */
+    async executeTurn(chat, currentMessage, tools, turnCounter, combinedSignal, timeoutSignal) {
+        const promptId = `${this.agentId}#${turnCounter}`;
+        await this.tryCompressChat(chat, promptId);
+        const { functionCalls } = await promptIdContext.run(promptId, async () => this.callModel(chat, currentMessage, tools, combinedSignal, promptId));
+        if (combinedSignal.aborted) {
+            const terminateReason = timeoutSignal.aborted
+                ? AgentTerminateMode.TIMEOUT
+                : AgentTerminateMode.ABORTED;
+            return {
+                status: 'stop',
+                terminateReason,
+                finalResult: null, // 'run' method will set the final timeout string
+            };
+        }
+        // If the model stops calling tools without calling complete_task, it's an error.
+        if (functionCalls.length === 0) {
+            this.emitActivity('ERROR', {
+                error: `Agent stopped calling tools but did not call '${TASK_COMPLETE_TOOL_NAME}' to finalize the session.`,
+                context: 'protocol_violation',
+            });
+            return {
+                status: 'stop',
+                terminateReason: AgentTerminateMode.ERROR_NO_COMPLETE_TASK_CALL,
+                finalResult: null,
+            };
+        }
+        const { nextMessage, submittedOutput, taskCompleted } = await this.processFunctionCalls(functionCalls, combinedSignal, promptId);
+        if (taskCompleted) {
+            const finalResult = submittedOutput ?? 'Task completed successfully.';
+            return {
+                status: 'stop',
+                terminateReason: AgentTerminateMode.GOAL,
+                finalResult,
+            };
+        }
+        // Task is not complete, continue to the next turn.
+        return {
+            status: 'continue',
+            nextMessage,
+        };
+    }
+    /**
+     * Generates a specific warning message for the agent's final turn.
+     */
+    getFinalWarningMessage(reason) {
+        let explanation = '';
+        switch (reason) {
+            case AgentTerminateMode.TIMEOUT:
+                explanation = 'You have exceeded the time limit.';
+                break;
+            case AgentTerminateMode.MAX_TURNS:
+                explanation = 'You have exceeded the maximum number of turns.';
+                break;
+            case AgentTerminateMode.ERROR_NO_COMPLETE_TASK_CALL:
+                explanation = 'You have stopped calling tools without finishing.';
+                break;
+            default:
+                throw new Error(`Unknown terminate reason: ${reason}`);
+        }
+        return `${explanation} You have one final chance to complete the task with a short grace period. You MUST call \`${TASK_COMPLETE_TOOL_NAME}\` immediately with your best answer and explain that your investigation was interrupted. Do not call any other tools.`;
+    }
+    /**
+     * Attempts a single, final recovery turn if the agent stops for a recoverable reason.
+     * Gives the agent a grace period to call `complete_task`.
+     *
+     * @returns The final result string if recovery was successful, or `null` if it failed.
+     */
+    async executeFinalWarningTurn(chat, tools, turnCounter, reason, externalSignal) {
+        this.emitActivity('THOUGHT_CHUNK', {
+            text: `Execution limit reached (${reason}). Attempting one final recovery turn with a grace period.`,
+        });
+        const recoveryStartTime = Date.now();
+        let success = false;
+        const gracePeriodMs = GRACE_PERIOD_MS;
+        const graceTimeoutController = new AbortController();
+        const graceTimeoutId = setTimeout(() => graceTimeoutController.abort(new Error('Grace period timed out.')), gracePeriodMs);
+        try {
+            const recoveryMessage = {
+                role: 'user',
+                parts: [{ text: this.getFinalWarningMessage(reason) }],
+            };
+            // We monitor both the external signal and our new grace period timeout
+            const combinedSignal = AbortSignal.any([
+                externalSignal,
+                graceTimeoutController.signal,
+            ]);
+            const turnResult = await this.executeTurn(chat, recoveryMessage, tools, turnCounter, // This will be the "last" turn number
+            combinedSignal, graceTimeoutController.signal);
+            if (turnResult.status === 'stop' &&
+                turnResult.terminateReason === AgentTerminateMode.GOAL) {
+                // Success!
+                this.emitActivity('THOUGHT_CHUNK', {
+                    text: 'Graceful recovery succeeded.',
+                });
+                success = true;
+                return turnResult.finalResult ?? 'Task completed during grace period.';
+            }
+            // Any other outcome (continue, error, non-GOAL stop) is a failure.
+            this.emitActivity('ERROR', {
+                error: `Graceful recovery attempt failed. Reason: ${turnResult.status}`,
+                context: 'recovery_turn',
+            });
+            return null;
+        }
+        catch (error) {
+            // This catch block will likely catch the 'Grace period timed out' error.
+            this.emitActivity('ERROR', {
+                error: `Graceful recovery attempt failed: ${String(error)}`,
+                context: 'recovery_turn',
+            });
+            return null;
+        }
+        finally {
+            clearTimeout(graceTimeoutId);
+            logRecoveryAttempt(this.runtimeContext, new RecoveryAttemptEvent(this.agentId, this.definition.name, reason, Date.now() - recoveryStartTime, success, turnCounter));
+        }
+    }
+    /**
+     * Runs the agent.
+     *
+     * @param inputs The validated input parameters for this invocation.
+     * @param signal An `AbortSignal` for cancellation.
+     * @returns A promise that resolves to the agent's final output.
+     */
+    async run(inputs, signal) {
+        const startTime = Date.now();
+        let turnCounter = 0;
+        let terminateReason = AgentTerminateMode.ERROR;
+        let finalResult = null;
+        const { max_time_minutes } = this.definition.runConfig;
+        const timeoutController = new AbortController();
+        const timeoutId = setTimeout(() => timeoutController.abort(new Error('Agent timed out.')), max_time_minutes * 60 * 1000);
+        // Combine the external signal with the internal timeout signal.
+        const combinedSignal = AbortSignal.any([signal, timeoutController.signal]);
+        logAgentStart(this.runtimeContext, new AgentStartEvent(this.agentId, this.definition.name));
+        let chat;
+        let tools;
+        try {
+            chat = await this.createChatObject(inputs);
+            tools = this.prepareToolsList();
+            const query = this.definition.promptConfig.query
+                ? templateString(this.definition.promptConfig.query, inputs)
+                : 'Get Started!';
+            let currentMessage = { role: 'user', parts: [{ text: query }] };
+            while (true) {
+                // Check for termination conditions like max turns.
+                const reason = this.checkTermination(startTime, turnCounter);
+                if (reason) {
+                    terminateReason = reason;
+                    break;
+                }
+                // Check for timeout or external abort.
+                if (combinedSignal.aborted) {
+                    // Determine which signal caused the abort.
+                    terminateReason = timeoutController.signal.aborted
+                        ? AgentTerminateMode.TIMEOUT
+                        : AgentTerminateMode.ABORTED;
+                    break;
+                }
+                const turnResult = await this.executeTurn(chat, currentMessage, tools, turnCounter++, combinedSignal, timeoutController.signal);
+                if (turnResult.status === 'stop') {
+                    terminateReason = turnResult.terminateReason;
+                    // Only set finalResult if the turn provided one (e.g., error or goal).
+                    if (turnResult.finalResult) {
+                        finalResult = turnResult.finalResult;
+                    }
+                    break; // Exit the loop for *any* stop reason.
+                }
+                // If status is 'continue', update message for the next loop
+                currentMessage = turnResult.nextMessage;
+            }
+            // === UNIFIED RECOVERY BLOCK ===
+            // Only attempt recovery if it's a known recoverable reason.
+            // We don't recover from GOAL (already done) or ABORTED (user cancelled).
+            if (terminateReason !== AgentTerminateMode.ERROR &&
+                terminateReason !== AgentTerminateMode.ABORTED &&
+                terminateReason !== AgentTerminateMode.GOAL) {
+                const recoveryResult = await this.executeFinalWarningTurn(chat, tools, turnCounter, // Use current turnCounter for the recovery attempt
+                terminateReason, signal);
+                if (recoveryResult !== null) {
+                    // Recovery Succeeded
+                    terminateReason = AgentTerminateMode.GOAL;
+                    finalResult = recoveryResult;
+                }
+                else {
+                    // Recovery Failed. Set the final error message based on the *original* reason.
+                    if (terminateReason === AgentTerminateMode.TIMEOUT) {
+                        finalResult = `Agent timed out after ${this.definition.runConfig.max_time_minutes} minutes.`;
+                        this.emitActivity('ERROR', {
+                            error: finalResult,
+                            context: 'timeout',
+                        });
+                    }
+                    else if (terminateReason === AgentTerminateMode.MAX_TURNS) {
+                        finalResult = `Agent reached max turns limit (${this.definition.runConfig.max_turns}).`;
+                        this.emitActivity('ERROR', {
+                            error: finalResult,
+                            context: 'max_turns',
+                        });
+                    }
+                    else if (terminateReason === AgentTerminateMode.ERROR_NO_COMPLETE_TASK_CALL) {
+                        // The finalResult was already set by executeTurn, but we re-emit just in case.
+                        finalResult =
+                            finalResult ||
+                                `Agent stopped calling tools but did not call '${TASK_COMPLETE_TOOL_NAME}'.`;
+                        this.emitActivity('ERROR', {
+                            error: finalResult,
+                            context: 'protocol_violation',
+                        });
+                    }
+                }
+            }
+            // === FINAL RETURN LOGIC ===
+            if (terminateReason === AgentTerminateMode.GOAL) {
+                return {
+                    result: finalResult || 'Task completed.',
+                    terminate_reason: terminateReason,
+                };
+            }
+            return {
+                result: finalResult || 'Agent execution was terminated before completion.',
+                terminate_reason: terminateReason,
+            };
+        }
+        catch (error) {
+            // Check if the error is an AbortError caused by our internal timeout.
+            if (error instanceof Error &&
+                error.name === 'AbortError' &&
+                timeoutController.signal.aborted &&
+                !signal.aborted // Ensure the external signal was not the cause
+            ) {
+                terminateReason = AgentTerminateMode.TIMEOUT;
+                // Also use the unified recovery logic here
+                if (chat && tools) {
+                    const recoveryResult = await this.executeFinalWarningTurn(chat, tools, turnCounter, // Use current turnCounter
+                    AgentTerminateMode.TIMEOUT, signal);
+                    if (recoveryResult !== null) {
+                        // Recovery Succeeded
+                        terminateReason = AgentTerminateMode.GOAL;
+                        finalResult = recoveryResult;
+                        return {
+                            result: finalResult,
+                            terminate_reason: terminateReason,
+                        };
+                    }
+                }
+                // Recovery failed or wasn't possible
+                finalResult = `Agent timed out after ${this.definition.runConfig.max_time_minutes} minutes.`;
+                this.emitActivity('ERROR', {
+                    error: finalResult,
+                    context: 'timeout',
+                });
+                return {
+                    result: finalResult,
+                    terminate_reason: terminateReason,
+                };
+            }
+            this.emitActivity('ERROR', { error: String(error) });
+            throw error; // Re-throw other errors or external aborts.
+        }
+        finally {
+            clearTimeout(timeoutId);
+            logAgentFinish(this.runtimeContext, new AgentFinishEvent(this.agentId, this.definition.name, Date.now() - startTime, turnCounter, terminateReason));
+        }
+    }
+    async tryCompressChat(chat, prompt_id) {
+        const model = this.definition.modelConfig.model;
+        const { newHistory, info } = await this.compressionService.compress(chat, prompt_id, false, model, this.runtimeContext, this.hasFailedCompressionAttempt);
+        if (info.compressionStatus ===
+            CompressionStatus.COMPRESSION_FAILED_INFLATED_TOKEN_COUNT) {
+            this.hasFailedCompressionAttempt = true;
+        }
+        else if (info.compressionStatus === CompressionStatus.COMPRESSED) {
+            if (newHistory) {
+                chat.setHistory(newHistory);
+                this.hasFailedCompressionAttempt = false;
+            }
+        }
+    }
+    /**
+     * Calls the generative model with the current context and tools.
+     *
+     * @returns The model's response, including any tool calls or text.
+     */
+    async callModel(chat, message, tools, signal, promptId) {
+        if (tools.length > 0) {
+            // TODO(12622): Move tools back to config.
+            chat.setTools([{ functionDeclarations: tools }]);
+        }
+        const responseStream = await chat.sendMessageStream({
+            model: getModelConfigAlias(this.definition),
+            overrideScope: this.definition.name,
+        }, message.parts || [], promptId, signal);
+        const functionCalls = [];
+        let textResponse = '';
+        for await (const resp of responseStream) {
+            if (signal.aborted)
+                break;
+            if (resp.type === StreamEventType.CHUNK) {
+                const chunk = resp.value;
+                const parts = chunk.candidates?.[0]?.content?.parts;
+                // Extract and emit any subject "thought" content from the model.
+                const { subject } = parseThought(parts?.find((p) => p.thought)?.text || '');
+                if (subject) {
+                    this.emitActivity('THOUGHT_CHUNK', { text: subject });
+                }
+                // Collect any function calls requested by the model.
+                if (chunk.functionCalls) {
+                    functionCalls.push(...chunk.functionCalls);
+                }
+                // Handle text response (non-thought text)
+                const text = parts
+                    ?.filter((p) => !p.thought && p.text)
+                    .map((p) => p.text)
+                    .join('') || '';
+                if (text) {
+                    textResponse += text;
+                }
+            }
+        }
+        return { functionCalls, textResponse };
+    }
+    /** Initializes a `GeminiChat` instance for the agent run. */
+    async createChatObject(inputs) {
+        const { promptConfig } = this.definition;
+        if (!promptConfig.systemPrompt && !promptConfig.initialMessages) {
+            throw new Error('PromptConfig must define either `systemPrompt` or `initialMessages`.');
+        }
+        const startHistory = this.applyTemplateToInitialMessages(promptConfig.initialMessages ?? [], inputs);
+        // Build system instruction from the templated prompt string.
+        const systemInstruction = promptConfig.systemPrompt
+            ? await this.buildSystemPrompt(inputs)
+            : undefined;
+        try {
+            return new GeminiChat(this.runtimeContext, systemInstruction, [], // set in `callModel`,
+            startHistory);
+        }
+        catch (error) {
+            await reportError(error, `Error initializing Gemini chat for agent ${this.definition.name}.`, startHistory, 'startChat');
+            // Re-throw as a more specific error after reporting.
+            throw new Error(`Failed to create chat object: ${error}`);
+        }
+    }
+    /**
+     * Executes function calls requested by the model and returns the results.
+     *
+     * @returns A new `Content` object for history, any submitted output, and completion status.
+     */
+    async processFunctionCalls(functionCalls, signal, promptId) {
+        const allowedToolNames = new Set(this.toolRegistry.getAllToolNames());
+        // Always allow the completion tool
+        allowedToolNames.add(TASK_COMPLETE_TOOL_NAME);
+        let submittedOutput = null;
+        let taskCompleted = false;
+        // We'll collect promises for the tool executions
+        const toolExecutionPromises = [];
+        // And we'll need a place to store the synchronous results (like complete_task or blocked calls)
+        const syncResponseParts = [];
+        for (const [index, functionCall] of functionCalls.entries()) {
+            const callId = functionCall.id ?? `${promptId}-${index}`;
+            const args = (functionCall.args ?? {});
+            this.emitActivity('TOOL_CALL_START', {
+                name: functionCall.name,
+                args,
+            });
+            if (functionCall.name === TASK_COMPLETE_TOOL_NAME) {
+                if (taskCompleted) {
+                    // We already have a completion from this turn. Ignore subsequent ones.
+                    const error = 'Task already marked complete in this turn. Ignoring duplicate call.';
+                    syncResponseParts.push({
+                        functionResponse: {
+                            name: TASK_COMPLETE_TOOL_NAME,
+                            response: { error },
+                            id: callId,
+                        },
+                    });
+                    this.emitActivity('ERROR', {
+                        context: 'tool_call',
+                        name: functionCall.name,
+                        error,
+                    });
+                    continue;
+                }
+                const { outputConfig } = this.definition;
+                taskCompleted = true; // Signal completion regardless of output presence
+                if (outputConfig) {
+                    const outputName = outputConfig.outputName;
+                    if (args[outputName] !== undefined) {
+                        const outputValue = args[outputName];
+                        const validationResult = outputConfig.schema.safeParse(outputValue);
+                        if (!validationResult.success) {
+                            taskCompleted = false; // Validation failed, revoke completion
+                            const error = `Output validation failed: ${JSON.stringify(validationResult.error.flatten())}`;
+                            syncResponseParts.push({
+                                functionResponse: {
+                                    name: TASK_COMPLETE_TOOL_NAME,
+                                    response: { error },
+                                    id: callId,
+                                },
+                            });
+                            this.emitActivity('ERROR', {
+                                context: 'tool_call',
+                                name: functionCall.name,
+                                error,
+                            });
+                            continue;
+                        }
+                        const validatedOutput = validationResult.data;
+                        if (this.definition.processOutput) {
+                            submittedOutput = this.definition.processOutput(validatedOutput);
+                        }
+                        else {
+                            submittedOutput =
+                                typeof outputValue === 'string'
+                                    ? outputValue
+                                    : JSON.stringify(outputValue, null, 2);
+                        }
+                        syncResponseParts.push({
+                            functionResponse: {
+                                name: TASK_COMPLETE_TOOL_NAME,
+                                response: { result: 'Output submitted and task completed.' },
+                                id: callId,
+                            },
+                        });
+                        this.emitActivity('TOOL_CALL_END', {
+                            name: functionCall.name,
+                            output: 'Output submitted and task completed.',
+                        });
+                    }
+                    else {
+                        // Failed to provide required output.
+                        taskCompleted = false; // Revoke completion status
+                        const error = `Missing required argument '${outputName}' for completion.`;
+                        syncResponseParts.push({
+                            functionResponse: {
+                                name: TASK_COMPLETE_TOOL_NAME,
+                                response: { error },
+                                id: callId,
+                            },
+                        });
+                        this.emitActivity('ERROR', {
+                            context: 'tool_call',
+                            name: functionCall.name,
+                            error,
+                        });
+                    }
+                }
+                else {
+                    // No output expected. Just signal completion.
+                    submittedOutput = 'Task completed successfully.';
+                    syncResponseParts.push({
+                        functionResponse: {
+                            name: TASK_COMPLETE_TOOL_NAME,
+                            response: { status: 'Task marked complete.' },
+                            id: callId,
+                        },
+                    });
+                    this.emitActivity('TOOL_CALL_END', {
+                        name: functionCall.name,
+                        output: 'Task marked complete.',
+                    });
+                }
+                continue;
+            }
+            // Handle standard tools
+            if (!allowedToolNames.has(functionCall.name)) {
+                const error = `Unauthorized tool call: '${functionCall.name}' is not available to this agent.`;
+                debugLogger.warn(`[AgentExecutor] Blocked call: ${error}`);
+                syncResponseParts.push({
+                    functionResponse: {
+                        name: functionCall.name,
+                        id: callId,
+                        response: { error },
+                    },
+                });
+                this.emitActivity('ERROR', {
+                    context: 'tool_call_unauthorized',
+                    name: functionCall.name,
+                    callId,
+                    error,
+                });
+                continue;
+            }
+            const requestInfo = {
+                callId,
+                name: functionCall.name,
+                args,
+                isClientInitiated: true,
+                prompt_id: promptId,
+            };
+            // Create a promise for the tool execution
+            const executionPromise = (async () => {
+                const { response: toolResponse } = await executeToolCall(this.runtimeContext, requestInfo, signal);
+                if (toolResponse.error) {
+                    this.emitActivity('ERROR', {
+                        context: 'tool_call',
+                        name: functionCall.name,
+                        error: toolResponse.error.message,
+                    });
+                }
+                else {
+                    this.emitActivity('TOOL_CALL_END', {
+                        name: functionCall.name,
+                        output: toolResponse.resultDisplay,
+                    });
+                }
+                return toolResponse.responseParts;
+            })();
+            toolExecutionPromises.push(executionPromise);
+        }
+        // Wait for all tool executions to complete
+        const asyncResults = await Promise.all(toolExecutionPromises);
+        // Combine all response parts
+        const toolResponseParts = [...syncResponseParts];
+        for (const result of asyncResults) {
+            if (result) {
+                toolResponseParts.push(...result);
+            }
+        }
+        // If all authorized tool calls failed (and task isn't complete), provide a generic error.
+        if (functionCalls.length > 0 &&
+            toolResponseParts.length === 0 &&
+            !taskCompleted) {
+            toolResponseParts.push({
+                text: 'All tool calls failed or were unauthorized. Please analyze the errors and try an alternative approach.',
+            });
+        }
+        return {
+            nextMessage: { role: 'user', parts: toolResponseParts },
+            submittedOutput,
+            taskCompleted,
+        };
+    }
+    /**
+     * Prepares the list of tool function declarations to be sent to the model.
+     */
+    prepareToolsList() {
+        const toolsList = [];
+        const { toolConfig, outputConfig } = this.definition;
+        if (toolConfig) {
+            const toolNamesToLoad = [];
+            for (const toolRef of toolConfig.tools) {
+                if (typeof toolRef === 'string') {
+                    toolNamesToLoad.push(toolRef);
+                }
+                else if (typeof toolRef === 'object' && 'schema' in toolRef) {
+                    // Tool instance with an explicit schema property.
+                    toolsList.push(toolRef.schema);
+                }
+                else {
+                    // Raw `FunctionDeclaration` object.
+                    toolsList.push(toolRef);
+                }
+            }
+            // Add schemas from tools that were registered by name.
+            toolsList.push(...this.toolRegistry.getFunctionDeclarationsFiltered(toolNamesToLoad));
+        }
+        // Always inject complete_task.
+        // Configure its schema based on whether output is expected.
+        const completeTool = {
+            name: TASK_COMPLETE_TOOL_NAME,
+            description: outputConfig
+                ? 'Call this tool to submit your final answer and complete the task. This is the ONLY way to finish.'
+                : 'Call this tool to signal that you have completed your task. This is the ONLY way to finish.',
+            parameters: {
+                type: Type.OBJECT,
+                properties: {},
+                required: [],
+            },
+        };
+        if (outputConfig) {
+            const jsonSchema = zodToJsonSchema(outputConfig.schema);
+            const { $schema: _$schema, definitions: _definitions, ...schema } = jsonSchema;
+            completeTool.parameters.properties[outputConfig.outputName] =
+                schema;
+            completeTool.parameters.required.push(outputConfig.outputName);
+        }
+        toolsList.push(completeTool);
+        return toolsList;
+    }
+    /** Builds the system prompt from the agent definition and inputs. */
+    async buildSystemPrompt(inputs) {
+        const { promptConfig } = this.definition;
+        if (!promptConfig.systemPrompt) {
+            return '';
+        }
+        // Inject user inputs into the prompt template.
+        let finalPrompt = templateString(promptConfig.systemPrompt, inputs);
+        // Append environment context (CWD and folder structure).
+        const dirContext = await getDirectoryContextString(this.runtimeContext);
+        finalPrompt += `\n\n# Environment Context\n${dirContext}`;
+        // Append standard rules for non-interactive execution.
+        finalPrompt += `
+Important Rules:
+* You are running in a non-interactive mode. You CANNOT ask the user for input or clarification.
+* Work systematically using available tools to complete your task.
+* Always use absolute paths for file operations. Construct them using the provided "Environment Context".`;
+        finalPrompt += `
+* When you have completed your task, you MUST call the \`${TASK_COMPLETE_TOOL_NAME}\` tool.
+* Do not call any other tools in the same turn as \`${TASK_COMPLETE_TOOL_NAME}\`.
+* This is the ONLY way to complete your mission. If you stop calling tools without calling this, you have failed.`;
+        return finalPrompt;
+    }
+    /**
+     * Applies template strings to initial messages.
+     *
+     * @param initialMessages The initial messages from the prompt config.
+     * @param inputs The validated input parameters for this invocation.
+     * @returns A new array of `Content` with templated strings.
+     */
+    applyTemplateToInitialMessages(initialMessages, inputs) {
+        return initialMessages.map((content) => {
+            const newParts = (content.parts ?? []).map((part) => {
+                if ('text' in part && part.text !== undefined) {
+                    return { text: templateString(part.text, inputs) };
+                }
+                return part;
+            });
+            return { ...content, parts: newParts };
+        });
+    }
+    /**
+     * Validates that all tools in a registry are safe for non-interactive use.
+     *
+     * @throws An error if a tool is not on the allow-list for non-interactive execution.
+     */
+    static async validateTools(toolRegistry, agentName) {
+        // Tools that are non-interactive. This is temporary until we have tool
+        // confirmations for subagents.
+        const allowlist = new Set([
+            LS_TOOL_NAME,
+            READ_FILE_TOOL_NAME,
+            GREP_TOOL_NAME,
+            GLOB_TOOL_NAME,
+            READ_MANY_FILES_TOOL_NAME,
+            MEMORY_TOOL_NAME,
+            WEB_SEARCH_TOOL_NAME,
+        ]);
+        for (const tool of toolRegistry.getAllTools()) {
+            if (!allowlist.has(tool.name)) {
+                throw new Error(`Tool "${tool.name}" is not on the allow-list for non-interactive ` +
+                    `execution in agent "${agentName}". Only tools that do not require user ` +
+                    `confirmation can be used in subagents.`);
+            }
+        }
+    }
+    /**
+     * Checks if the agent should terminate due to exceeding configured limits.
+     *
+     * @returns The reason for termination, or `null` if execution can continue.
+     */
+    checkTermination(startTime, turnCounter) {
+        const { runConfig } = this.definition;
+        if (runConfig.max_turns && turnCounter >= runConfig.max_turns) {
+            return AgentTerminateMode.MAX_TURNS;
+        }
+        return null;
+    }
+    /** Emits an activity event to the configured callback. */
+    emitActivity(type, data) {
+        if (this.onActivity) {
+            const event = {
+                isSubagentActivityEvent: true,
+                agentName: this.definition.name,
+                type,
+                data,
+            };
+            this.onActivity(event);
+        }
+    }
+}
+//# sourceMappingURL=executor.js.map