@ouispec/agent-worker 0.7.0 → 0.8.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxJ,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAI3F,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC/F,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAInF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,YAAY,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrF,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAK9D,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC1H,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIpE,YAAY,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvJ,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACpJ,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,YAAY,EACV,eAAe,EACf,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAClG,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACxJ,YAAY,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,YAAY,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACzE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AACvE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAI3F,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC/F,YAAY,EACV,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,KAAK,EACL,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,UAAU,GACX,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAInF,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AACtE,YAAY,EAAE,mBAAmB,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACrF,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAK9D,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC1H,YAAY,EAAE,cAAc,EAAE,wBAAwB,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,YAAY,EAAE,eAAe,EAAE,0BAA0B,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACxK,OAAO,EAAE,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EACL,SAAS,IAAI,oBAAoB,EACjC,SAAS,IAAI,oBAAoB,EACjC,SAAS,IAAI,oBAAoB,EACjC,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,gBAAgB,MAAM,yBAAyB,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAIpE,YAAY,EAAE,eAAe,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACvJ,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,6BAA6B,EAAE,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACpJ,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGtD,YAAY,EACV,eAAe,EACf,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAGpE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC1H,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC/F,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -29,6 +29,10 @@ export { buildApprovalPreview } from './approvals/preview.js';
 // turn. What the turn had produced is stored, then announced.
 export { createHttpTurnStopClient, watchTurnStop, stopOf, TurnStopped, DEFAULT_STOP_GRACE_MS } from './stop/turn-stop.js';
 export { stoppedTurnMessages } from './stop/partial.js';
+export { AttachmentGuard } from './attachments/guard.js';
+export { attachmentTools, ATTACHMENT_TOOLS, ATTACHMENT_TOOL_CLASS } from './attachments/tools.js';
+export { VIEW_TOOL as ATTACHMENT_VIEW_TOOL, READ_TOOL as ATTACHMENT_READ_TOOL, LIST_TOOL as ATTACHMENT_LIST_TOOL, ATTACHMENT_DATA_NOTE, escapeAttachmentText, } from './attachments/content.js';
+export * as attachmentLimits from './attachments/limits.js';
 export { createHttpUIActionChannel } from './ui/channel.js';
 export { readClientPage, withoutClientSnapshot, withoutClientUI, capabilityFingerprint, CLIENT_SNAPSHOT_KEY } from './ui/snapshot.js';
 export { DEFAULT_INDEX_CHARS, indexDiff, indexLine, indexText, pageActions, pageFingerprint, pageFromIndex, pageFromSurfaces, } from './ui/page-index.js';
@@ -43,7 +47,7 @@ export { PROMPT_CACHE_BREAKPOINTS, describeModel } from './model.js';
 export { defaultTurnPolicy } from './turn-policy.js';
 export { createHttpEmitAdapter } from './emit/http-adapter.js';
 // The runtime: one core, two host adapters (Lambda + SQS, container)
-export { createAgentTurnRunner, categorizeError, payloadRefusal } from './runtime/turn-runner.js';
+export { createAgentTurnRunner, categorizeError, payloadRefusal, TURN_DEADLINE_EXCEEDED } from './runtime/turn-runner.js';
 export { assertAgentRuntimeConfig } from './runtime/config.js';
 export { createLambdaAgentHandler } from './lambda/handler.js';
 export { startContainerAgentWorker } from './container/server.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,yDAAyD;AACzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,kFAAkF;AAClF,iEAAiE;AACjE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAkB/F,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEnF,4EAA4E;AAC5E,8EAA8E;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,yEAAyE;AACzE,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE1H,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAMxD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAmB,MAAM,kBAAkB,CAAC;AACvJ,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,eAAe,EACf,aAAa,EACb,gBAAgB,GAIjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,6BAA6B,EAAoB,MAAM,sBAAsB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAmB,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAwB,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEpJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAevD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,0EAA0E;AAC1E,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,qEAAqE;AACrE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAElG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,mBAAmB;AACnB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAU3D,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,yDAAyD;AACzD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAEzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAGvE,kFAAkF;AAClF,iEAAiE;AACjE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAkB/F,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEnF,4EAA4E;AAC5E,8EAA8E;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,uBAAuB,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,yEAAyE;AACzE,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE1H,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAA8D,MAAM,wBAAwB,CAAC;AACrH,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAClG,OAAO,EACL,SAAS,IAAI,oBAAoB,EACjC,SAAS,IAAI,oBAAoB,EACjC,SAAS,IAAI,oBAAoB,EACjC,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,gBAAgB,MAAM,yBAAyB,CAAC;AAM5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,qBAAqB,EAAE,mBAAmB,EAAmB,MAAM,kBAAkB,CAAC;AACvJ,OAAO,EACL,mBAAmB,EACnB,SAAS,EACT,SAAS,EACT,SAAS,EACT,WAAW,EACX,eAAe,EACf,aAAa,EACb,gBAAgB,GAIjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,6BAA6B,EAAoB,MAAM,sBAAsB,CAAC;AAClI,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAmB,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAwB,MAAM,mBAAmB,CAAC;AAChJ,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEpJ,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAevD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,0EAA0E;AAC1E,OAAO,EAAE,wBAAwB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG/D,qEAAqE;AACrE,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAE1H,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAGlE,mBAAmB;AACnB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAU3D,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/orchestrator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAmC,MAAM,YAAY,CAAC;AA0EtH;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,eAAe,CAAC,CA+gD1B"}
+{"version":3,"file":"orchestrator.d.ts","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAmC,MAAM,YAAY,CAAC;AAiFtH;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,cAAc,GACpB,OAAO,CAAC,eAAe,CAAC,CAwsD1B"}

package/dist/orchestrator.js

@@ -30,6 +30,12 @@ import { readClientPage, withoutClientUI } from './ui/snapshot.js';
 import { KNOWLEDGE_TOOL, knowledgeTool, readClientKnowledge, withClientKnowledge } from './ui/knowledge.js';
 import { withNewestPageStateOnly } from './ui/newest-page-state.js';
 import { withClock } from './prompt/clock.js';
+import { withUserText } from './prompt/user-text.js';
+import { AttachmentGuard } from './attachments/guard.js';
+import { ATTACHMENT_DATA_NOTE, turnAttachmentParts, withReferenceLines, withTurnAttachments, withoutLeftOut } from './attachments/content.js';
+import { attachmentTools } from './attachments/tools.js';
+import { acceptsMediaType, attachmentIdsIn, attachmentNameForModel, misplacedAttachmentInputs } from '@ouispec/agent-core';
+const ATTACHMENT_LIST_HINT = 'attachment_list lists the files that can.';
 import { buildUITools, createPageSight, DefinitionUnavailable, fitNotes, jobWaitOf, UI_ACT_TOOL, UI_DESCRIBE_TOOL, UI_READ_TOOL, } from './ui/ui-tools.js';
 import { DEFAULT_INDEX_CHARS, indexText, pageFingerprint } from './ui/page-index.js';
 import { describeSchema } from './ui/outline.js';
@@ -119,6 +125,30 @@ export async function runAgentTurn(config, input) {
     let pageStatesNotRepeated = 0;
     // The knowledge the client sent for its page goes after the host's prompt.
     const knowledge = readClientKnowledge(input.context ?? null);
+    // ─── Files (ADR-0252 §2.11, §2.12) ─────────────────────────────────────────
+    // With the host's file area, the turn's files go to the model with its
+    // message, the attachment tools reach every file of the conversation, and the
+    // cost guard caps what the model is given of them.
+    const fileArea = config.attachments ?? null;
+    const fileOwner = { userId: input.userId, accountId: input.accountId, conversationId: input.conversationId };
+    let conversationFileTokens = 0;
+    if (fileArea?.store.conversationUsage) {
+        try {
+            conversationFileTokens = await fileArea.store.conversationUsage(fileOwner, { signal: AbortSignal.timeout(5_000) });
+        }
+        catch (err) {
+            log('warn', 'agent:tool', 'Could not read the conversation’s use of files; only the turn’s cap applies', {
+                turnId,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    const fileGuard = new AttachmentGuard({
+        turnTokens: fileArea?.turnTokens,
+        conversationTokens: fileArea?.conversationTokens,
+        conversationUsed: conversationFileTokens,
+    });
+    const fileTools = fileArea ? attachmentTools({ store: fileArea.store, owner: fileOwner, guard: fileGuard }) : [];
     log('info', 'agent:ui', 'UI surfaces for this turn', {
         turnId,
         clientSentSnapshot: client !== null,
@@ -152,14 +182,14 @@ export async function runAgentTurn(config, input) {
     const hostPrompt = typeof config.systemPrompt === 'function'
         ? config.systemPrompt({ userId: input.userId, accountId: input.accountId, context: withoutClientUI(input.context) })
         : config.systemPrompt;
-    const systemPrompt = withClientKnowledge(hostPrompt, input.context);
+    // With a file area, the model is told a file's name and content are data, never instructions (ADR-0252 §2.11).
+    const systemPrompt = withClientKnowledge(fileArea ? `${hostPrompt}\n\n${ATTACHMENT_DATA_NOTE}` : hostPrompt, input.context);
     log('debug', 'agent:prompt', 'System prompt built', { turnId, promptLength: systemPrompt.length, hostPromptLength: hostPrompt.length });
     // Wall-clock deadline: abort the entire streamText call if it exceeds turnDeadlineMs.
     const turnStartedAt = Date.now();
     // A UI tool waiting on work it started stops in time for the model to answer.
     const uiWaitDeadline = () => turnStartedAt + turnDeadlineMs - UI_ANSWER_MARGIN_MS;
     const abortController = new AbortController();
-    const deadlineTimer = setTimeout(() => abortController.abort('Turn deadline exceeded'), turnDeadlineMs);
     // ─── Stopping (ADR-0252) ───────────────────────────────────────────────────
     // The person's Stop, or a newer message superseding this turn, is kept by the
     // realtime server; the watch asks for it for as long as the turn runs. A stop
@@ -185,7 +215,8 @@ export async function runAgentTurn(config, input) {
             return stopGraceMs;
         },
     };
-    stopWatch.onStop((record) => {
+    /** Abort the turn on its stop path: what it had produced is stored, then announced. */
+    const stopTurn = (stop) => {
         if (ending || abortController.signal.aborted)
             return;
         // Never longer than this process has left, less what storing and announcing take.
@@ -193,9 +224,17 @@ export async function runAgentTurn(config, input) {
         if (remaining !== undefined)
             stopGraceMs = Math.max(0, Math.min(stopGraceMs, remaining - STOP_STORE_MARGIN_MS));
         graceSignal = AbortSignal.timeout(stopGraceMs + 250);
-        log('info', 'agent:turn', 'Turn asked to stop', { turnId, reason: record.reason, graceMs: stopGraceMs });
-        abortController.abort(new TurnStopped(record.reason, record.at));
-    });
+        log('info', 'agent:turn', stop.reason === 'deadline' ? 'Turn ran out of time' : 'Turn asked to stop', {
+            turnId,
+            reason: stop.reason,
+            graceMs: stopGraceMs,
+        });
+        abortController.abort(stop);
+    };
+    stopWatch.onStop((record) => stopTurn(new TurnStopped(record.reason, record.at)));
+    // The turn's deadline ends it on the same path (ADR-0252 §6.4): what it did
+    // before it ran out of time is kept, marked, and the next turn is told.
+    const deadlineTimer = setTimeout(() => stopTurn(new TurnStopped('deadline', Date.now())), turnDeadlineMs);
     // Build tool execution context
     const toolCtx = {
         userId: input.userId,
@@ -213,6 +252,8 @@ export async function runAgentTurn(config, input) {
     const executedToolResults = [];
     // The pictures results came with, by call: given to the model with that call's result (ui/answer-image.ts).
     const answerImages = new Map();
+    // The text results came with (a file's text, read by attachment_read), by call: the model's only, like the pictures.
+    const answerTexts = new Map();
     // The worker's own record of the turn, kept as it runs: what a stopped turn
     // is stored from (stop/partial.ts). The model stream's own results do not
     // survive an abort, so nothing on the stop path reads them.
@@ -360,6 +401,65 @@ export async function runAgentTurn(config, input) {
             }, rawArgs);
         }
         const args = validation.value;
+        // ── Attached files named in the call (ADR-0252 §2.13) ──
+        // Each must be a file of this turn's conversation, ready, and of a type the
+        // input takes, checked before anything is dispatched; the page then
+        // resolves it through its own host. An action declaring a file where none
+        // can be checked is not run at all.
+        const misplaced = misplacedAttachmentInputs(schema);
+        if (misplaced.length > 0) {
+            return refused({
+                error: `"${t.name}" declares an attached file at ${misplaced.join(', ')}, where none can be checked: it cannot be run with a file.`,
+                notRun: true,
+            }, args);
+        }
+        const namedFiles = attachmentIdsIn(schema, args);
+        const callFiles = new Map();
+        if (namedFiles.length > 0) {
+            if (!fileArea) {
+                return refused({ error: `"${t.name}" takes an attached file, and this assistant cannot use attached files.`, notRun: true }, args);
+            }
+            const ids = [...new Set(namedFiles.map((f) => f.id))];
+            try {
+                for (const ref of await fileArea.store.describe(ids, fileOwner, { signal: abortController.signal }))
+                    callFiles.set(ref.id, ref);
+            }
+            catch (err) {
+                log('warn', 'agent:tool', 'Could not check the files a call names; it was not run', {
+                    turnId,
+                    toolName: t.name,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                return refused({ error: `The files "${t.name}" names could not be checked just now. It was not run; try again.`, notRun: true }, args);
+            }
+            const missing = ids.filter((id) => !callFiles.has(id) || callFiles.get(id).removed);
+            if (missing.length > 0) {
+                return refused({
+                    error: `${missing.map((id) => `"${id}"`).join(', ')} ${missing.length === 1 ? 'is not a file' : 'are not files'} of this conversation that can be used. ${ATTACHMENT_LIST_HINT}`,
+                    notRun: true,
+                }, args);
+            }
+            const pending = ids.filter((id) => callFiles.get(id).pending);
+            if (pending.length > 0) {
+                return refused({
+                    error: `${pending.map((id) => `"${id}"`).join(', ')} ${pending.length === 1 ? 'is' : 'are'} still being checked, and can be used once that is done. It was not run.`,
+                    notRun: true,
+                }, args);
+            }
+            // The type each input takes, checked here as the page checks it (OUI spec §7.3.11).
+            const wrongType = namedFiles.filter((f) => !acceptsMediaType(f.input, callFiles.get(f.id).mediaType));
+            if (wrongType.length > 0) {
+                return refused({
+                    error: wrongType
+                        .map((f) => {
+                        const ref = callFiles.get(f.id);
+                        return `${f.property}: ${attachmentNameForModel(ref.name)} (${f.id}) is ${ref.mediaType}; it takes ${f.input.mediaTypes.join(', ')}.`;
+                    })
+                        .join(' '),
+                    notRun: true,
+                }, args);
+            }
+        }
         // Told to the model with the result, so it sends the value itself next time (below).
         const readFromText = validation.coerced ?? [];
         // The call as a repeat is judged by: its name and its exact input. Set for a UI action that changes the page.
@@ -415,6 +515,7 @@ export async function runAgentTurn(config, input) {
                 turnId,
                 hasSideEffects: isSideEffecting,
                 toolKind: isUI ? 'ui' : 'backend',
+                ...(t.toolClass ? { toolClass: t.toolClass } : {}),
                 effect: requirement.effect,
                 destructive: requirement.destructive,
             });
@@ -434,7 +535,7 @@ export async function runAgentTurn(config, input) {
         }
         if ((requirement.required || policyRequiresApproval) && !approved) {
             ledger.record({ tool: t.name, ok: false, error: 'Not run: it waits for the user’s approval on the card' });
-            return { text: await requestApproval(t, args, toolUseId, requirement), ran: false };
+            return { text: await requestApproval(t, args, toolUseId, requirement, callFiles), ran: false };
         }
         if (t.name === UI_DESCRIBE_TOOL)
             uiCounts.describes++;
@@ -544,6 +645,8 @@ export async function runAgentTurn(config, input) {
         // result, and nothing else's: it is not in the text above, the event or the record.
         if (isWrapped && result.image)
             answerImages.set(toolUseId, result.image);
+        if (isWrapped && typeof result.modelText === 'string')
+            answerTexts.set(toolUseId, result.modelText);
         return { text: JSON.stringify(modelPayload ?? { error: 'no result' }), ran: true };
     };
     /**
@@ -553,13 +656,15 @@ export async function runAgentTurn(config, input) {
     const toModelOutput = ({ toolCallId, output }) => {
         const text = typeof output === 'string' ? output : JSON.stringify(output ?? null);
         const image = answerImages.get(toolCallId);
-        if (!image)
+        const fileText = answerTexts.get(toolCallId);
+        if (!image && fileText === undefined)
             return { type: 'text', value: text };
         return {
             type: 'content',
             value: [
                 { type: 'text', text },
-                { type: 'file', mediaType: image.mediaType, data: { type: 'data', data: image.base64 } },
+                ...(fileText !== undefined ? [{ type: 'text', text: fileText }] : []),
+                ...(image ? [{ type: 'file', mediaType: image.mediaType, data: { type: 'data', data: image.base64 } }] : []),
             ],
         };
     };
@@ -568,8 +673,9 @@ export async function runAgentTurn(config, input) {
      * stores it as a pending approval, shows the card, and tells the model only
      * that it is waiting. The model never sees a token.
      */
-    const requestApproval = async (t, args, toolUseId, requirement) => {
-        const preview = buildApprovalPreview(t, args);
+    const requestApproval = async (t, args, toolUseId, requirement, files) => {
+        // A file is shown by its name and size; the approval stays bound to its id (ADR-0252 §2.13).
+        const preview = buildApprovalPreview(t, args, files);
         approvalHold = { approvalId: toolUseId, title: preview.title };
         const refuse = (why) => {
             approvalHold = null;
@@ -711,9 +817,10 @@ export async function runAgentTurn(config, input) {
     // with the id of an action of the page, is withheld (ADR-0209 D6): for a
     // UI-only agent, the page is the authority.
     function hostTools(ui) {
+        const sdkOwned = new Set(fileTools.map((t) => t.name));
         if (!ui)
-            return config.tools.tools;
-        const taken = (name) => ui.actions.has(name) || name === UI_ACT_TOOL || name === UI_DESCRIBE_TOOL || name === UI_READ_TOOL;
+            return [...config.tools.tools.filter((t) => !sdkOwned.has(t.name)), ...fileTools];
+        const taken = (name) => sdkOwned.has(name) || ui.actions.has(name) || name === UI_ACT_TOOL || name === UI_DESCRIBE_TOOL || name === UI_READ_TOOL;
         const withheld = config.tools.tools.filter((t) => taken(t.name)).map((t) => t.name);
         if (withheld.length > 0) {
             log('error', 'agent:ui', 'Host tools collide with UI tools or action ids; the host tools are withheld this turn', {
@@ -721,7 +828,7 @@ export async function runAgentTurn(config, input) {
                 withheld,
             });
         }
-        return config.tools.tools.filter((t) => !taken(t.name));
+        return [...config.tools.tools.filter((t) => !taken(t.name)), ...fileTools];
     }
     /** Every tool a call can name: the host's, and the page's actions. What an approved call is looked up in. */
     function callableTools() {
@@ -791,6 +898,16 @@ export async function runAgentTurn(config, input) {
             return text;
         }
     }
+    /** A tool the model is given, as a turn policy sees it: its name, kind and class. */
+    function describeStepTool(name) {
+        if (name === UI_ACT_TOOL || name === UI_DESCRIBE_TOOL || name === UI_READ_TOOL)
+            return { name, kind: 'ui' };
+        // The SDK's own file tools take their names before the host's (hostTools).
+        const registered = fileTools.find((t) => t.name === name) ?? config.tools.tools.find((t) => t.name === name);
+        if (!registered)
+            return { name, kind: 'builtin' };
+        return { name, kind: registered.kind === 'ui' ? 'ui' : 'backend', ...(registered.toolClass ? { toolClass: registered.toolClass } : {}) };
+    }
     function assembleTools() {
         const ui = currentUI();
         const tools = {};
@@ -1044,15 +1161,48 @@ export async function runAgentTurn(config, input) {
         // The date and time on the user's clock travel with their message too: a
         // model has no clock, and the changing minute must stay out of the cached
         // system prompt (prompt/clock.ts).
+        const turnFilesGiven = !!fileArea && (input.attachments?.length ?? 0) > 0;
         const messages = [
             ...withClock(withPageState(withNote(convertHistoryToCoreMessages(
             // An approved call's outcome, and an expired one's, is a later result of the call already in the
             // history: it takes that call's place.
-            [...(input.history ?? []), ...expired.outcomes, ...(continued?.outcome ? [continued.outcome] : [])], [input.content, continued?.note].filter(Boolean).join('\n\n')), 
+            [...(input.history ?? []), ...expired.outcomes, ...(continued?.outcome ? [continued.outcome] : [])], [input.content, continued?.note].filter(Boolean).join('\n\n'), 
+            // The turn's own message, when the history already holds it: its files are given below,
+            // each with its line, so the history's copy of the message does not name them again.
+            turnFilesGiven && input.history?.at(-1)?.role === 'user' ? input.history.length - 1 : null), 
             // Said on the user's message whether or not the host's history already holds that message.
             expired.outcomes.length > 0 ? expiredNote(expired) : null), client, config.ui?.maxObservationChars ?? DEFAULT_PAGE_STATE_CHARS, config.ui?.maxIndexChars ?? DEFAULT_INDEX_CHARS), input.context ?? null),
             ...(continued?.messages ?? []),
         ];
+        // The turn's files go with its message, after everything said about it (ADR-0252 §2.11).
+        // A file that cannot be had is named with why; the turn goes on with the others.
+        if (fileArea && turnFilesGiven) {
+            try {
+                const files = await turnAttachmentParts(input.attachments, {
+                    store: fileArea.store,
+                    owner: fileOwner,
+                    guard: fileGuard,
+                    pdfAsDocument: fileArea.pdfAsDocument ?? false,
+                    perMessage: fileArea.perMessage,
+                    signal: abortController.signal,
+                });
+                if (files.failures.length > 0) {
+                    log('warn', 'agent:tool', 'Some of the message’s files could not be loaded; the turn goes on without them', { turnId, failures: files.failures });
+                }
+                messages.splice(0, messages.length, ...withTurnAttachments(messages, files));
+            }
+            catch (err) {
+                log('error', 'agent:tool', 'The message’s files could not be given; the turn goes on with their lines', {
+                    turnId,
+                    error: err instanceof Error ? err.message : String(err),
+                });
+                messages.splice(0, messages.length, ...withTurnAttachments(messages, {
+                    parts: [],
+                    notes: [withReferenceLines('', input.attachments), 'These files could not be loaded with this message.'],
+                    failures: [],
+                }));
+            }
+        }
         // The system prompt goes in `instructions`, NOT in `messages`.
         //
         // ai v7 rejects a system-role entry in `messages` outright —
@@ -1125,6 +1275,11 @@ export async function runAgentTurn(config, input) {
                         })),
                         turnClass,
                         allToolNames: [...Object.keys(aiTools), ...actionIds],
+                        // What each tool is, so a policy can choose by class (the attachment tools are `attachment`).
+                        allTools: [
+                            ...Object.keys(aiTools).map((name) => describeStepTool(name)),
+                            ...actionIds.map((name) => ({ name, kind: 'ui' })),
+                        ],
                     });
                     // What it constrained, in the model's terms: an action is run through
                     // `ui_act`, which holds the step to the actions the policy allowed.
@@ -1155,9 +1310,19 @@ export async function runAgentTurn(config, input) {
                     const trimmed = messages ? withNewestPageStateOnly(messages) : null;
                     if (trimmed)
                         pageStatesNotRepeated += trimmed.replaced;
+                    // The files this step would carry, within the turn's and the conversation's caps (ADR-0252 §2.11).
+                    const leftOutNow = fileGuard.beforeStep();
+                    if (leftOutNow.length > 0) {
+                        log('info', 'agent:tool', 'Files left out of the next step to keep within the cap', {
+                            turnId,
+                            attachments: leftOutNow.map((p) => ({ id: p.attachmentId, kind: p.kind, estimatedTokens: p.tokens })),
+                        });
+                    }
+                    const leftOut = fileGuard.leftOutParts();
+                    const stepMessages = leftOut.length > 0 && messages ? withoutLeftOut(trimmed?.messages ?? messages, leftOut) : trimmed?.messages;
                     return {
                         ...constraints,
-                        ...(trimmed ? { messages: trimmed.messages } : {}),
+                        ...(stepMessages ? { messages: stepMessages } : {}),
                         instructions: notes.length
                             ? [instructions, ...notes.map((content) => ({ role: 'system', content }))]
                             : instructions,
@@ -1292,6 +1457,7 @@ export async function runAgentTurn(config, input) {
                     },
                 }
                 : {}),
+            ...(fileArea ? { attachments: fileGuard.usage() } : {}),
         });
         // The turn's messages, in the host's format, for it to store.
         const newMessages = [...expired.persisted, ...(continued?.persisted ?? []), ...convertResponseToTurnMessages({ steps }, executedToolResults)];
@@ -1330,6 +1496,7 @@ export async function runAgentTurn(config, input) {
             ...(expired.claimed.length > 0 ? { settledApprovals: expired.claimed } : {}),
             maxRoundsReached: steps.length >= maxRounds,
             stopReason,
+            ...(fileArea ? { attachments: fileGuard.usage() } : {}),
         };
     }
     finally {
@@ -1417,14 +1584,16 @@ export async function runAgentTurn(config, input) {
             cacheWriteTokens: usage.cacheWriteTokens,
             ...(unsettled.length > 0 ? { unsettledCalls: unsettled } : {}),
             ...(client ? { ui: { ...uiCounts, blindRefusals: sight.refusals(), stopped: sight.stopped() } } : {}),
+            ...(fileArea ? { attachments: fileGuard.usage() } : {}),
         });
         // The store and the announcement each get a limit of their own when the host says how long
         // the process has left: a slow store must not run it to its hard end with nothing announced.
+        /** Whether the work finished within its limit. */
         const within = async (what, keepBackMs, work) => {
             const remaining = input.remainingMs?.();
             if (remaining === undefined) {
                 await work();
-                return;
+                return true;
             }
             const limitMs = Math.max(STOP_STEP_FLOOR_MS, remaining - keepBackMs);
             let timer;
@@ -1443,14 +1612,20 @@ export async function runAgentTurn(config, input) {
                     limitMs,
                     remainingMs: remaining,
                 });
+                return false;
             }
+            return true;
         };
+        // Whether what the turn had produced was stored: a deadline stop that could not store it is
+        // not a stopped turn but one that ran out of time with nothing kept (ADR-0252 §6.4).
+        let stored = true;
         if (config.beforeTurnComplete) {
             try {
                 // Kept back: time to announce after it.
-                await within('store', STOP_ANNOUNCE_MARGIN_MS, () => config.beforeTurnComplete({ rounds, usage, newMessages, stopped: marker }));
+                stored = await within('store', STOP_ANNOUNCE_MARGIN_MS, () => config.beforeTurnComplete({ rounds, usage, newMessages, stopped: marker }));
             }
             catch (err) {
+                stored = false;
                 log('error', 'agent:turn', 'beforeTurnComplete failed; the stopped turn is announced without it', {
                     turnId,
                     error: err instanceof Error ? err.message : String(err),
@@ -1484,6 +1659,8 @@ export async function runAgentTurn(config, input) {
             maxRoundsReached: false,
             stopReason: stopped.reason,
             stopped: marker,
+            ...(stored ? {} : { stored: false }),
+            ...(fileArea ? { attachments: fileGuard.usage() } : {}),
         };
     }
 }
@@ -1492,8 +1669,7 @@ function withNote(messages, note) {
     const last = messages[messages.length - 1];
     if (!note || !last || last.role !== 'user')
         return messages;
-    const text = typeof last.content === 'string' ? last.content : last.content.map((p) => ('text' in p ? p.text : '')).join('');
-    return [...messages.slice(0, -1), { role: 'user', content: text ? `${text}\n\n${note}` : note }];
+    return [...messages.slice(0, -1), withUserText(last, note)];
 }
 /**
  * Put the client's page on the user's message: what it offers, as an index of
@@ -1517,10 +1693,7 @@ function withPageState(messages, client, maxChars, maxIndexChars) {
         ...(notShown.length ? [`Not shown: ${notShown.join(' ')}`] : []),
         '</page_state>',
     ].join('\n');
-    const text = typeof last.content === 'string'
-        ? last.content
-        : last.content.map((p) => ('text' in p ? p.text : '')).join('');
-    return [...messages.slice(0, -1), { role: 'user', content: `${text}\n\n${pageState}` }];
+    return [...messages.slice(0, -1), withUserText(last, pageState)];
 }
 /**
  * Convert our TurnHistoryMessage[] to AI SDK CoreMessage[].
@@ -1531,7 +1704,9 @@ function withPageState(messages, client, maxChars, maxIndexChars) {
  * AI_MissingToolResultsError crashes when persistence has gaps (e.g., stopWhen
  * triggered before a tool result was persisted).
  */
-function convertHistoryToCoreMessages(history, currentContent) {
+function convertHistoryToCoreMessages(history, currentContent, 
+/** The history's copy of the turn's own message, whose files the turn gives with their lines. */
+turnMessageAt = null) {
     const messages = [];
     // First pass: collect all tool_call_ids that have results in history
     // AND all tool call IDs from assistant messages (to validate results)
@@ -1574,7 +1749,8 @@ function convertHistoryToCoreMessages(history, currentContent) {
     for (let idx = 0; idx < history.length; idx++) {
         const msg = history[idx];
         if (msg.role === 'user') {
-            messages.push({ role: 'user', content: msg.content });
+            // A message's files are in history as their reference lines, never their content (ADR-0252 §2.11).
+            messages.push({ role: 'user', content: idx === turnMessageAt ? msg.content : withReferenceLines(msg.content, msg.attachments ?? undefined) });
         }
         else if (msg.role === 'assistant') {
             // A stopped turn's last message says so after its text (ADR-0252 §2.3).