@sema-ai/core 1.275.1

package/dist/core/tool-result-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-budget.d.ts","sourceRoot":"","sources":["../../src/core/tool-result-budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAG3D,OAAO,EAAE,KAAK,eAAe,EAA4D,MAAM,wBAAwB,CAAC;AAExH;;;;;;;;;;;;;;;GAeG;AAEH,qGAAqG;AACrG,eAAO,MAAM,kCAAkC,SAAU,CAAC;AA0C1D,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wGAAwG;IACxG,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,yFAAyF;IACzF,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB;;yGAEqG;IACrG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;CACzF;AAED;yGACyG;AACzG,eAAO,MAAM,2BAA2B,EAAE,WAAW,CAAC,MAAM,CAAwC,CAAC;AAErG,8GAA8G;AAC9G,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,YAAY,EAAE,EACxB,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,YAAY,EAAE,CAAC,CAsEzB"}

package/dist/core/tool-result-budget.js

@@ -0,0 +1,140 @@
+import { isToolResult } from "./message-utils.js";
+import { buildPreview, OFFLOAD_TOOL_NAME, PERSISTED_OUTPUT_PREFIX } from "./tool-result-store.js";
+/**
+ * Per-message aggregate tool-result budget (design/64 §17.2 / §24 — CC `MAX_TOOL_RESULTS_PER_MESSAGE_CHARS`,
+ * `constants/toolLimits.ts:49`). A single turn's batch of N parallel tool results can each be under the
+ * per-tool offload threshold yet SUM past the model/API limit (10×40K = 400K). This caps the aggregate of
+ * one turn's tool_result batch: while over budget, the LARGEST fresh non-exempt result is offloaded to a
+ * preview (largest-first), repeating until the batch fits.
+ *
+ * **Simpler than CC by construction (§24.2):** a request-only, non-destructive transform (returns a new
+ * array; the durable session keeps full results) applied in the existing `harness.on("context")` hook —
+ * the same per-query point as `clearStaleToolResults` (the mirror of CC's query.ts:379). It is DETERMINISTIC
+ * (stable `ref = tr_<sessionId>_<toolCallId>` + deterministic {@link buildPreview}), so re-running it every
+ * query yields byte-identical previews → prompt-cache safe **without** CC's ContentReplacementState freeze
+ * machine (the determinism IS the freeze), and resume-free (the transcript holds originals; this re-applies
+ * on replay). Reuses design/30's offload store + preview format; with no store it falls back to a
+ * self-contained head+tail truncation preview that still bounds the request.
+ */
+/** CC's per-message cap (chars, not tokens — the "100K token" figure in old notes was unsourced). */
+export const AGGREGATE_TOOL_RESULT_BUDGET_CHARS = 200_000;
+const HEAD = 1_000;
+const TAIL = 1_000;
+/** Upper bound on a preview's fixed wrapper (tags + ref + size digits) — a candidate must be larger than
+ *  HEAD+TAIL+OVERHEAD for the preview to be smaller than the original (council #2 — else replacing GROWS it). */
+const PREVIEW_OVERHEAD = 256;
+function textChars(content) {
+    let n = 0;
+    for (const b of content)
+        if (b.type === "text" && typeof b.text === "string")
+            n += b.text.length;
+    return n;
+}
+function textOf(content) {
+    return content.filter((b) => b.type === "text").map((b) => b.text).join("\n");
+}
+/** True if this result is ALREADY an offload preview — so it is never re-offloaded. Relies on the preview's
+ *  text being the FIRST content block (design/30 `buildPreview`/`withToolResultOffload` always put it first,
+ *  with any image blocks after), which this module also preserves via {@link replaceTextBlock}. */
+function isOffloadedPreview(content) {
+    const first = content[0];
+    return first?.type === "text" && typeof first.text === "string" && first.text.startsWith(PERSISTED_OUTPUT_PREFIX);
+}
+/** Return a copy of `m` with its text replaced by `text`, preserving any image blocks (council #10). */
+function replaceTextBlock(m, text) {
+    const images = m.content.filter((b) => b.type !== "text");
+    return { ...m, content: [{ type: "text", text }, ...images] };
+}
+/** Self-contained head+tail preview (no store / no read-back) — still bounds the request deterministically. */
+function truncationPreview(full) {
+    const total = full.length;
+    const tailStart = Math.max(HEAD, total - TAIL);
+    return (`${full.slice(0, HEAD)}\n` +
+        `…[${total} chars total; ${tailStart - HEAD} omitted to fit the per-turn result budget — re-run with a narrower query to see the rest.]\n` +
+        `${full.slice(tailStart)}`);
+}
+/** Default exemptions: tools whose result is self-bounded (read_file errors at its own token cap; the
+ *  offload reader pages small slices). grep/bash/glob/web_fetch/MCP are the risk sources, NOT exempt. */
+export const DEFAULT_BUDGET_EXEMPT_TOOLS = new Set(["Read", OFFLOAD_TOOL_NAME]);
+/** Cap each over-budget turn-batch (run of consecutive tool_result messages). Request-only; see file docs. */
+export async function capAggregateToolResults(messages, opts) {
+    const budget = opts.budgetChars ?? AGGREGATE_TOOL_RESULT_BUDGET_CHARS;
+    const exempt = opts.exemptTools ?? DEFAULT_BUDGET_EXEMPT_TOOLS;
+    let out;
+    let i = 0;
+    while (i < messages.length) {
+        if (!isToolResult(messages[i])) {
+            i++;
+            continue;
+        }
+        let j = i;
+        while (j < messages.length && isToolResult(messages[j]))
+            j++;
+        // Batch = [i, j): one turn's consecutive tool_result messages. Exempt tools don't count toward the
+        // fresh budget (§24.1: their own token cap bounds them).
+        const arr = out ?? messages;
+        let total = 0;
+        for (let k = i; k < j; k++) {
+            const m = arr[k];
+            if (m.toolName && exempt.has(m.toolName))
+                continue;
+            total += textChars(m.content);
+        }
+        if (total > budget) {
+            out = out ?? messages.slice();
+            // Candidates: fresh (not already a preview), non-exempt, big enough to be worth offloading. Sort
+            // largest-first (ties by index) for a deterministic, CC-matching selection order.
+            const cand = [];
+            for (let k = i; k < j; k++) {
+                const m = out[k];
+                if (m.toolName && exempt.has(m.toolName))
+                    continue;
+                if (isOffloadedPreview(m.content))
+                    continue;
+                const size = textChars(m.content);
+                // Only worth offloading if the preview can actually be SMALLER (council #2): a result barely over
+                // HEAD+TAIL would produce a preview LARGER than itself (head+tail+wrapper). Conservative gate here;
+                // exact "is it smaller?" check below as belt-and-suspenders.
+                if (size > HEAD + TAIL + PREVIEW_OVERHEAD)
+                    cand.push({ k, size });
+            }
+            cand.sort((a, b) => b.size - a.size || a.k - b.k);
+            for (const { k, size } of cand) {
+                if (total <= budget)
+                    break;
+                const m = out[k];
+                const before = size; // reuse the size computed for the candidate (its content is unchanged here)
+                const full = textOf(m.content);
+                const ref = `tr_${opts.sessionId}_${m.toolCallId ?? `idx${k}`}`;
+                let previewText;
+                let storeFallback;
+                if (opts.store) {
+                    try {
+                        await opts.store.put(ref, full); // write-once + stable ref ⇒ idempotent on replay
+                        previewText = buildPreview(full, ref);
+                        storeFallback = false;
+                    }
+                    catch {
+                        // A store failure must NEVER crash the per-query context hook (council #3): fall back to the
+                        // self-contained truncation preview (the model loses read-back for this one result, not the run).
+                        previewText = truncationPreview(full);
+                        storeFallback = true; // [398] C8: the silent `catch{}` face — surfaced via onCapped below
+                    }
+                }
+                else {
+                    previewText = truncationPreview(full);
+                    storeFallback = true;
+                }
+                // Never make a result LARGER than the original (council #2): if the preview isn't smaller, skip it.
+                if (previewText.length >= before)
+                    continue;
+                out[k] = replaceTextBlock(out[k], previewText);
+                total -= before - previewText.length;
+                opts.onCapped?.({ ...(m.toolName !== undefined ? { tool: m.toolName } : {}), sizeChars: before, storeFallback }); // [398] C8
+            }
+        }
+        i = j;
+    }
+    return out ?? messages;
+}
+//# sourceMappingURL=tool-result-budget.js.map

package/dist/core/tool-result-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-budget.js","sourceRoot":"","sources":["../../src/core/tool-result-budget.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAwB,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAExH;;;;;;;;;;;;;;;GAeG;AAEH,qGAAqG;AACrG,MAAM,CAAC,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAC1D,MAAM,IAAI,GAAG,KAAK,CAAC;AACnB,MAAM,IAAI,GAAG,KAAK,CAAC;AACnB;iHACiH;AACjH,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAI7B,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,MAAM,CAAC,OAAgB;IAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClG,CAAC;AACD;;mGAEmG;AACnG,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,KAAK,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,CAAC;AACpH,CAAC;AAED,wGAAwG;AACxG,SAAS,gBAAgB,CAAC,CAAe,EAAE,IAAY;IACrD,MAAM,MAAM,GAAI,CAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACpF,OAAO,EAAE,GAAI,CAAwC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,EAA6B,CAAC;AACnI,CAAC;AAED,+GAA+G;AAC/G,SAAS,iBAAiB,CAAC,IAAY;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,CACL,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI;QAC1B,KAAK,KAAK,iBAAiB,SAAS,GAAG,IAAI,+FAA+F;QAC1I,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAC3B,CAAC;AACJ,CAAC;AAiBD;yGACyG;AACzG,MAAM,CAAC,MAAM,2BAA2B,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAErG,8GAA8G;AAC9G,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAwB,EACxB,IAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,kCAAkC,CAAC;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,IAAI,2BAA2B,CAAC;IAC/D,IAAI,GAA+B,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,QAAQ,CAAC,MAAM,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QAC7D,mGAAmG;QACnG,yDAAyD;QACzD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4C,CAAC;YAC5D,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;gBAAE,SAAS;YACnD,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;YACnB,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC9B,iGAAiG;YACjG,kFAAkF;YAClF,MAAM,IAAI,GAAuC,EAAE,CAAC;YACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAA4C,CAAC;gBAC5D,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,SAAS;gBACnD,IAAI,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAClC,kGAAkG;gBAClG,oGAAoG;gBACpG,6DAA6D;gBAC7D,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,gBAAgB;oBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,KAAK,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gBAC/B,IAAI,KAAK,IAAI,MAAM;oBAAE,MAAM;gBAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAiE,CAAC;gBACjF,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,4EAA4E;gBACjG,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC/B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChE,IAAI,WAAmB,CAAC;gBACxB,IAAI,aAAsB,CAAC;gBAC3B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,iDAAiD;wBAClF,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBACtC,aAAa,GAAG,KAAK,CAAC;oBACxB,CAAC;oBAAC,MAAM,CAAC;wBACP,6FAA6F;wBAC7F,kGAAkG;wBAClG,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBACtC,aAAa,GAAG,IAAI,CAAC,CAAC,oEAAoE;oBAC5F,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBACtC,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC;gBACD,oGAAoG;gBACpG,IAAI,WAAW,CAAC,MAAM,IAAI,MAAM;oBAAE,SAAS;gBAC3C,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBAC/C,KAAK,IAAI,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;gBACrC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,WAAW;YAC/H,CAAC;QACH,CAAC;QACD,CAAC,GAAG,CAAC,CAAC;IACR,CAAC;IACD,OAAO,GAAG,IAAI,QAAQ,CAAC;AACzB,CAAC"}

package/dist/core/tool-result-store.d.ts

@@ -0,0 +1,136 @@
+import type { AgentTool } from "../internal/harness.js";
+/**
+ * Pluggable backing store for **offloaded large tool results** (design/30). When a tool returns more
+ * text than the threshold, the full content is moved here and the conversation keeps only a preview +
+ * a `ref`; the model fetches the rest via the injected `read_tool_result` tool. This is the local,
+ * provider-agnostic equivalent of CC's `toolResultStorage` (no Anthropic `cache_edits` dependency).
+ *
+ * Default is {@link InMemoryToolResultStore} (task-scoped, lives only for the run). Inject a durable
+ * implementation (TiDB/blob, keyed by the opaque `ref`) so an offloaded result survives wake/resume;
+ * with the in-memory default, a fetch after a cross-process wake returns undefined and the model is told
+ * the output is no longer available — the preview still stands in context, so it degrades, never crashes.
+ */
+export interface ToolResultStore {
+    /**
+     * Persist full content under a stable `ref`. **Write-once and idempotent**: if `ref` already exists,
+     * keep the existing content and do nothing (the aggregate budget re-runs every query with the same
+     * deterministic ref, so `put` for an already-stored ref MUST be a no-op — re-writing would risk a
+     * non-identical preview and break the prompt cache). A durable backend treats `ref` as the primary key
+     * and should validate/sanitize it (it is composed from sessionId+toolCallId, not raw model input, but a
+     * durable store still owns key hygiene for its storage layer).
+     */
+    put(ref: string, content: string): Promise<void> | void;
+    /** Read a slice of the stored content. Unknown `ref` → undefined. */
+    get(ref: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<ToolResultSlice | undefined> | ToolResultSlice | undefined;
+}
+export interface ToolResultSlice {
+    content: string;
+    /** Byte/char offset this slice starts at. */
+    offset: number;
+    /** Total chars of the full stored content. */
+    totalChars: number;
+}
+/** Default in-memory store (no cross-process durability); write-once per ref.
+ *
+ *  Blackboard 2026-07-03 (clay dogfood: `ReadToolResult(ref)` came back empty for a workflow child's
+ *  offloaded output): the Runner now shares ONE instance across its tasks (instead of a per-task
+ *  island), so a parent can deref a child's ref within the process. A shared long-lived instance
+ *  needs a bound — `maxTotalChars` FIFO-evicts the oldest refs past the cap (an evicted deref lands
+ *  on the existing honest "may have expired" text). Durability across restarts still requires a real
+ *  store (e.g. FileToolResultStore) via `RunnerDeps.toolResultStore`. */
+export declare class InMemoryToolResultStore implements ToolResultStore {
+    private readonly opts?;
+    private readonly map;
+    private totalChars;
+    constructor(opts?: {
+        maxTotalChars?: number;
+    } | undefined);
+    put(ref: string, content: string): void;
+    /** design/80 D-2: true when NOTHING has been offloaded — a durable suspend can then proceed safely even on
+     *  this in-memory store, because a cross-replica resume has no offloaded result to deref to null. */
+    isEmpty(): boolean;
+    get(ref: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): ToolResultSlice | undefined;
+}
+/** Marker subclass for the Runner's own shared fallback instance (no injected store). prepare-task
+ *  detects it and wraps a per-task {@link ScopedToolResultStore} around it — an INJECTED store is
+ *  never wrapped (a multi-tenant deployment that injects a durable store owns its own scoping). */
+export declare class RunnerSharedToolResultStore extends InMemoryToolResultStore {
+}
+/**
+ * Per-task view over the Runner-shared fallback (impl-review 2026-07-03, codex 2 BLOCKER):
+ * 1. **Tenant isolation**: refs are namespaced by the task's trust scope (principal), so tenant B's
+ *    `ReadToolResult` can never deref tenant A's ref — the per-task-instance era made this isolation
+ *    implicit; sharing one instance re-opened it. Same-scope cross-task deref (the A2 fix's whole
+ *    point) still works: same scope ⇒ same namespace.
+ * 2. **D-2 durable-suspend gate fidelity**: `isEmpty()` reflects only THIS task's offloads (local put
+ *    count) — matching the per-task-instance semantics the gate was written against — so an unrelated
+ *    prior task's offloaded entry can no longer disable durable suspend for a task that offloaded
+ *    nothing (prepare-task's fail-fast reads `isEmpty()`).
+ */
+export declare class ScopedToolResultStore implements ToolResultStore {
+    private readonly inner;
+    private readonly scope;
+    private localPuts;
+    /** True when the underlying shared store is process-memory (volatile across replicas) — the D-2
+     *  suspend gate treats a NON-empty volatile store as unsafe to durably suspend. */
+    readonly volatileBacking: boolean;
+    constructor(inner: ToolResultStore, scope: string);
+    /** Length-prefixed namespace — unambiguous for any scope string (no delimiter-injection ambiguity). */
+    private key;
+    put(ref: string, content: string): Promise<void> | void;
+    get(ref: string, opts?: {
+        offset?: number;
+        limit?: number;
+    }): Promise<ToolResultSlice | undefined> | ToolResultSlice | undefined;
+    /** THIS task's offload count only — the D-2 gate's per-task semantics (see class doc). */
+    isEmpty(): boolean;
+}
+/** True when a durable suspend would lose offloaded results held only in process memory (D-2 gate). */
+export declare function isVolatileOffloadStore(store: ToolResultStore): boolean;
+/** Reserved name of the injected large-result reader (design/108 PascalCase: `read_tool_result`→`ReadToolResult`). */
+export declare const OFFLOAD_TOOL_NAME = "ReadToolResult";
+/** Leading marker of an offload preview (see {@link buildPreview}) — single source so the aggregate
+ *  budget (design/64 §17.2) can recognize an already-offloaded result without re-deriving the string. */
+export declare const PERSISTED_OUTPUT_PREFIX = "<persisted-output ref=";
+/** Default per-result offload threshold (chars). ~5K tokens; configurable globally or per tool. */
+export declare const DEFAULT_TOOL_RESULT_THRESHOLD_CHARS = 20000;
+/**
+ * CC 198 per-tool persistence thresholds, mirrored for the first-party mounts (PARITY-SPOT-USAGE-CONSTANTS
+ * 2026-07-10 F1/F2). CC's GIa framework (pretty.js:286716-286721) resolves each tool's persist threshold as
+ * `min(maxResultSizeChars, w6t=50000)`:
+ *   - Read declares `maxResultSizeChars: 1/0` (:478260) → **never persisted**. Read already owns its bound
+ *     (25K-token first-page auto-pagination) and the aggregate budget exempts it — wrapping it in offload
+ *     re-truncated a page the tool had already sized (the F1 two-layer inconsistency). Structural exemption:
+ *     applies even when a deployment sets an explicit global threshold.
+ *   - Bash 30000 (:335231) / Grep 20000 (:333220) / Monitor 1e4 (:450030); everything else first-party
+ *     declares 1e5 (Agent :453402, Glob :333570, TaskOutput :458260, …) → min(1e5, 50000) = 50000.
+ * Unknown tools keep the deployment default ({@link DEFAULT_TOOL_RESULT_THRESHOLD_CHARS}) — we deliberately
+ * do NOT mirror KIa's bare `$xa=400000` undeclared-tool fallback: our aggregate budget is 200K chars, so a
+ * 400K inline result is unrepresentable anyway.
+ */
+export declare function firstPartyOffloadPolicy(toolName: string): {
+    offload?: boolean;
+    offloadThresholdChars?: number;
+};
+/** Head+tail preview of an offloaded result, pointing at {@link OFFLOAD_TOOL_NAME} via `ref`. Exported so
+ *  the per-message aggregate budget (design/64 §17.2) produces the SAME preview format (deterministic →
+ *  byte-identical across queries → prompt-cache safe). */
+export declare function buildPreview(full: string, ref: string): string;
+/**
+ * Wrap an {@link AgentTool} so that an oversized text result is offloaded to `store` and replaced with a
+ * preview + `ref` before it ever reaches the session/model. `ref = tr_<toolCallId>` is stable and the
+ * store is write-once: a **same-process** replay keeps an identical (cacheable) preview; a **cross-process**
+ * wake needs a durable store (the default in-memory store loses the full text — the preview still stands).
+ * Image blocks are left untouched; only text is offloaded. Forwards the `onUpdate` progress callback so a
+ * wrapped (e.g. MCP) streaming tool isn't broken.
+ */
+export declare function withToolResultOffload(tool: AgentTool, store: ToolResultStore, thresholdChars: number, sessionId: string): AgentTool;
+/** The injected `read_tool_result` tool: pages through an offloaded result. `effect:"read"` (verifier/reconcile-safe). */
+export declare function makeReadToolResultTool(store: ToolResultStore): AgentTool;
+//# sourceMappingURL=tool-result-store.d.ts.map

package/dist/core/tool-result-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-store.d.ts","sourceRoot":"","sources":["../../src/core/tool-result-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAIxD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;OAOG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxD,qEAAqE;IACrE,GAAG,CACD,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GACzC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,eAAe,GAAG,SAAS,CAAC;CACvE;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;yEAOyE;AACzE,qBAAa,uBAAwB,YAAW,eAAe;IAGjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;IAFlC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA6B;IACjD,OAAO,CAAC,UAAU,CAAK;gBACM,IAAI,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,YAAA;IAC9D,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAavC;yGACqG;IACrG,OAAO,IAAI,OAAO;IAGlB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,eAAe,GAAG,SAAS;CAQ1F;AAED;;mGAEmG;AACnG,qBAAa,2BAA4B,SAAQ,uBAAuB;CAAG;AAE3E;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,YAAW,eAAe;IAMzD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANxB,OAAO,CAAC,SAAS,CAAK;IACtB;uFACmF;IACnF,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;gBAEf,KAAK,EAAE,eAAe,EACtB,KAAK,EAAE,MAAM;IAIhC,uGAAuG;IACvG,OAAO,CAAC,GAAG;IAGX,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIvD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,GAAG,eAAe,GAAG,SAAS;IAGhI,0FAA0F;IAC1F,OAAO,IAAI,OAAO;CAGnB;AAED,uGAAuG;AACvG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAGtE;AAED,sHAAsH;AACtH,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAClD;yGACyG;AACzG,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,mGAAmG;AACnG,eAAO,MAAM,mCAAmC,QAAS,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAAE,CAa/G;AAiBD;;0DAE0D;AAC1D,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAa9D;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,SAAS,EACf,KAAK,EAAE,eAAe,EACtB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,GAChB,SAAS,CAmBX;AAED,0HAA0H;AAC1H,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,GAAG,SAAS,CAyBxE"}

package/dist/core/tool-result-store.js

@@ -0,0 +1,219 @@
+import { Type } from "typebox";
+import { defineTool } from "./tools.js";
+/** Default in-memory store (no cross-process durability); write-once per ref.
+ *
+ *  Blackboard 2026-07-03 (clay dogfood: `ReadToolResult(ref)` came back empty for a workflow child's
+ *  offloaded output): the Runner now shares ONE instance across its tasks (instead of a per-task
+ *  island), so a parent can deref a child's ref within the process. A shared long-lived instance
+ *  needs a bound — `maxTotalChars` FIFO-evicts the oldest refs past the cap (an evicted deref lands
+ *  on the existing honest "may have expired" text). Durability across restarts still requires a real
+ *  store (e.g. FileToolResultStore) via `RunnerDeps.toolResultStore`. */
+export class InMemoryToolResultStore {
+    opts;
+    map = new Map();
+    totalChars = 0;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    put(ref, content) {
+        if (this.map.has(ref))
+            return;
+        this.map.set(ref, content);
+        this.totalChars += content.length;
+        const cap = this.opts?.maxTotalChars;
+        if (cap !== undefined && cap > 0) {
+            for (const [oldRef, oldContent] of this.map) {
+                if (this.totalChars <= cap || oldRef === ref)
+                    break; // never evict the just-written ref
+                this.map.delete(oldRef);
+                this.totalChars -= oldContent.length;
+            }
+        }
+    }
+    /** design/80 D-2: true when NOTHING has been offloaded — a durable suspend can then proceed safely even on
+     *  this in-memory store, because a cross-replica resume has no offloaded result to deref to null. */
+    isEmpty() {
+        return this.map.size === 0;
+    }
+    get(ref, opts) {
+        const full = this.map.get(ref);
+        if (full === undefined)
+            return undefined;
+        const offset = Math.min(full.length, Math.max(0, intOr(opts?.offset, 0)));
+        const limit = opts?.limit != null ? Math.max(0, intOr(opts.limit, 0)) : undefined;
+        const content = limit != null ? full.slice(offset, offset + limit) : full.slice(offset);
+        return { content, offset, totalChars: full.length };
+    }
+}
+/** Marker subclass for the Runner's own shared fallback instance (no injected store). prepare-task
+ *  detects it and wraps a per-task {@link ScopedToolResultStore} around it — an INJECTED store is
+ *  never wrapped (a multi-tenant deployment that injects a durable store owns its own scoping). */
+export class RunnerSharedToolResultStore extends InMemoryToolResultStore {
+}
+/**
+ * Per-task view over the Runner-shared fallback (impl-review 2026-07-03, codex 2 BLOCKER):
+ * 1. **Tenant isolation**: refs are namespaced by the task's trust scope (principal), so tenant B's
+ *    `ReadToolResult` can never deref tenant A's ref — the per-task-instance era made this isolation
+ *    implicit; sharing one instance re-opened it. Same-scope cross-task deref (the A2 fix's whole
+ *    point) still works: same scope ⇒ same namespace.
+ * 2. **D-2 durable-suspend gate fidelity**: `isEmpty()` reflects only THIS task's offloads (local put
+ *    count) — matching the per-task-instance semantics the gate was written against — so an unrelated
+ *    prior task's offloaded entry can no longer disable durable suspend for a task that offloaded
+ *    nothing (prepare-task's fail-fast reads `isEmpty()`).
+ */
+export class ScopedToolResultStore {
+    inner;
+    scope;
+    localPuts = 0;
+    /** True when the underlying shared store is process-memory (volatile across replicas) — the D-2
+     *  suspend gate treats a NON-empty volatile store as unsafe to durably suspend. */
+    volatileBacking;
+    constructor(inner, scope) {
+        this.inner = inner;
+        this.scope = scope;
+        this.volatileBacking = inner instanceof InMemoryToolResultStore;
+    }
+    /** Length-prefixed namespace — unambiguous for any scope string (no delimiter-injection ambiguity). */
+    key(ref) {
+        return `${this.scope.length}:${this.scope}:${ref}`;
+    }
+    put(ref, content) {
+        this.localPuts++;
+        return this.inner.put(this.key(ref), content);
+    }
+    get(ref, opts) {
+        return this.inner.get(this.key(ref), opts);
+    }
+    /** THIS task's offload count only — the D-2 gate's per-task semantics (see class doc). */
+    isEmpty() {
+        return this.localPuts === 0;
+    }
+}
+/** True when a durable suspend would lose offloaded results held only in process memory (D-2 gate). */
+export function isVolatileOffloadStore(store) {
+    if (store instanceof ScopedToolResultStore)
+        return store.volatileBacking;
+    return store instanceof InMemoryToolResultStore;
+}
+/** Reserved name of the injected large-result reader (design/108 PascalCase: `read_tool_result`→`ReadToolResult`). */
+export const OFFLOAD_TOOL_NAME = "ReadToolResult";
+/** Leading marker of an offload preview (see {@link buildPreview}) — single source so the aggregate
+ *  budget (design/64 §17.2) can recognize an already-offloaded result without re-deriving the string. */
+export const PERSISTED_OUTPUT_PREFIX = "<persisted-output ref=";
+/** Default per-result offload threshold (chars). ~5K tokens; configurable globally or per tool. */
+export const DEFAULT_TOOL_RESULT_THRESHOLD_CHARS = 20_000;
+/**
+ * CC 198 per-tool persistence thresholds, mirrored for the first-party mounts (PARITY-SPOT-USAGE-CONSTANTS
+ * 2026-07-10 F1/F2). CC's GIa framework (pretty.js:286716-286721) resolves each tool's persist threshold as
+ * `min(maxResultSizeChars, w6t=50000)`:
+ *   - Read declares `maxResultSizeChars: 1/0` (:478260) → **never persisted**. Read already owns its bound
+ *     (25K-token first-page auto-pagination) and the aggregate budget exempts it — wrapping it in offload
+ *     re-truncated a page the tool had already sized (the F1 two-layer inconsistency). Structural exemption:
+ *     applies even when a deployment sets an explicit global threshold.
+ *   - Bash 30000 (:335231) / Grep 20000 (:333220) / Monitor 1e4 (:450030); everything else first-party
+ *     declares 1e5 (Agent :453402, Glob :333570, TaskOutput :458260, …) → min(1e5, 50000) = 50000.
+ * Unknown tools keep the deployment default ({@link DEFAULT_TOOL_RESULT_THRESHOLD_CHARS}) — we deliberately
+ * do NOT mirror KIa's bare `$xa=400000` undeclared-tool fallback: our aggregate budget is 200K chars, so a
+ * 400K inline result is unrepresentable anyway.
+ */
+export function firstPartyOffloadPolicy(toolName) {
+    switch (toolName) {
+        case "Read":
+            return { offload: false };
+        case "Bash":
+            return { offloadThresholdChars: 30_000 };
+        case "Grep":
+            return { offloadThresholdChars: 20_000 };
+        case "Monitor":
+            return { offloadThresholdChars: 10_000 };
+        default:
+            return { offloadThresholdChars: 50_000 };
+    }
+}
+const PREVIEW_HEAD_CHARS = 1_000;
+const PREVIEW_TAIL_CHARS = 1_000;
+const READ_DEFAULT_LIMIT = 4_000;
+const READ_MAX_LIMIT = 20_000;
+/** Floor a finite number, else fall back — rejects NaN/Infinity (council #4; mirrors resolveOutputRetries). */
+function intOr(x, fallback) {
+    return Number.isFinite(x) ? Math.floor(x) : fallback;
+}
+function totalTextChars(content) {
+    let n = 0;
+    for (const b of content)
+        if (b.type === "text" && typeof b.text === "string")
+            n += b.text.length;
+    return n;
+}
+/** Head+tail preview of an offloaded result, pointing at {@link OFFLOAD_TOOL_NAME} via `ref`. Exported so
+ *  the per-message aggregate budget (design/64 §17.2) produces the SAME preview format (deterministic →
+ *  byte-identical across queries → prompt-cache safe). */
+export function buildPreview(full, ref) {
+    const total = full.length;
+    // head + tail (big outputs often carry the conclusion/error at the tail); guard against overlap.
+    const head = full.slice(0, PREVIEW_HEAD_CHARS);
+    const tailStart = Math.max(PREVIEW_HEAD_CHARS, total - PREVIEW_TAIL_CHARS);
+    const tail = full.slice(tailStart);
+    return (`${PERSISTED_OUTPUT_PREFIX}"${ref}" chars="${total}">\n` +
+        `${head}\n` +
+        `…[truncated — ${total} chars total. Call ${OFFLOAD_TOOL_NAME} with ref="${ref}" (offset, limit) to read more.]\n` +
+        `${tail}\n` +
+        `</persisted-output>`);
+}
+/**
+ * Wrap an {@link AgentTool} so that an oversized text result is offloaded to `store` and replaced with a
+ * preview + `ref` before it ever reaches the session/model. `ref = tr_<toolCallId>` is stable and the
+ * store is write-once: a **same-process** replay keeps an identical (cacheable) preview; a **cross-process**
+ * wake needs a durable store (the default in-memory store loses the full text — the preview still stands).
+ * Image blocks are left untouched; only text is offloaded. Forwards the `onUpdate` progress callback so a
+ * wrapped (e.g. MCP) streaming tool isn't broken.
+ */
+export function withToolResultOffload(tool, store, thresholdChars, sessionId) {
+    const wrappedExecute = async (toolCallId, params, signal, onUpdate) => {
+        const res = await tool.execute(toolCallId, params, signal, onUpdate); // forward onUpdate (MCP progress)
+        if (totalTextChars(res.content) <= thresholdChars)
+            return res;
+        const full = res.content
+            .filter((b) => b.type === "text")
+            .map((b) => b.text)
+            .join("\n");
+        // If the whole thing already fits in the head+tail preview, offloading wouldn't shrink context —
+        // leave it inline (and don't emit a misleading "truncated" directive that wastes a round-trip). #5
+        if (full.length <= PREVIEW_HEAD_CHARS + PREVIEW_TAIL_CHARS)
+            return res;
+        // Namespace the ref by sessionId so it is GLOBALLY unique (toolCallId is provider-assigned and not
+        // guaranteed unique across sessions) — a durable store can then use `ref` as a plain primary key.
+        const ref = `tr_${sessionId}_${toolCallId}`;
+        await store.put(ref, full);
+        const images = res.content.filter((b) => b.type !== "text");
+        return { ...res, content: [{ type: "text", text: buildPreview(full, ref) }, ...images] };
+    };
+    return { ...tool, execute: wrappedExecute };
+}
+/** The injected `read_tool_result` tool: pages through an offloaded result. `effect:"read"` (verifier/reconcile-safe). */
+export function makeReadToolResultTool(store) {
+    return defineTool({
+        name: OFFLOAD_TOOL_NAME,
+        description: `Read the full content of a tool result that was too large and persisted (you saw it as ` +
+            `<persisted-output ref="..."> with a preview). Pass the ref; use offset/limit to page through it.`,
+        parameters: Type.Object({
+            ref: Type.String({ description: "The ref from the <persisted-output> tag." }),
+            offset: Type.Optional(Type.Number({ description: "Char offset to start at (default 0)." })),
+            limit: Type.Optional(Type.Number({ description: `Max chars to return (default ${READ_DEFAULT_LIMIT}, capped ${READ_MAX_LIMIT}).` })),
+        }),
+        effect: "read",
+        execute: async (args) => {
+            const { ref, offset, limit } = args;
+            const off = Math.max(0, intOr(offset, 0));
+            const lim = Math.min(READ_MAX_LIMIT, Math.max(1, intOr(limit, READ_DEFAULT_LIMIT)));
+            const slice = await store.get(ref, { offset: off, limit: lim });
+            if (!slice) {
+                return `No persisted output for ref "${ref}" — it may have expired, or this process has no durable tool-result store (the preview above is all that remains).`;
+            }
+            const end = slice.offset + slice.content.length;
+            const more = end < slice.totalChars ? `\n…[${slice.totalChars - end} more chars — call again with offset=${end}.]` : "";
+            return `[ref=${ref} · chars ${slice.offset}–${end} of ${slice.totalChars}]\n${slice.content}${more}`;
+        },
+    });
+}
+//# sourceMappingURL=tool-result-store.js.map

package/dist/core/tool-result-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-store.js","sourceRoot":"","sources":["../../src/core/tool-result-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAsCxC;;;;;;;yEAOyE;AACzE,MAAM,OAAO,uBAAuB;IAGL;IAFZ,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,UAAU,GAAG,CAAC,CAAC;IACvB,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;IAAG,CAAC;IAClE,GAAG,CAAC,GAAW,EAAE,OAAe;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG;oBAAE,MAAM,CAAC,mCAAmC;gBACxF,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACxB,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,CAAC;YACvC,CAAC;QACH,CAAC;IACH,CAAC;IACD;yGACqG;IACrG,OAAO;QACL,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;IAC7B,CAAC;IACD,GAAG,CAAC,GAAW,EAAE,IAA0C;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,OAAO,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;CACF;AAED;;mGAEmG;AACnG,MAAM,OAAO,2BAA4B,SAAQ,uBAAuB;CAAG;AAE3E;;;;;;;;;;GAUG;AACH,MAAM,OAAO,qBAAqB;IAMb;IACA;IANX,SAAS,GAAG,CAAC,CAAC;IACtB;uFACmF;IAC1E,eAAe,CAAU;IAClC,YACmB,KAAsB,EACtB,KAAa;QADb,UAAK,GAAL,KAAK,CAAiB;QACtB,UAAK,GAAL,KAAK,CAAQ;QAE9B,IAAI,CAAC,eAAe,GAAG,KAAK,YAAY,uBAAuB,CAAC;IAClE,CAAC;IACD,uGAAuG;IAC/F,GAAG,CAAC,GAAW;QACrB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;IACrD,CAAC;IACD,GAAG,CAAC,GAAW,EAAE,OAAe;QAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IACD,GAAG,CAAC,GAAW,EAAE,IAA0C;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,0FAA0F;IAC1F,OAAO;QACL,OAAO,IAAI,CAAC,SAAS,KAAK,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,uGAAuG;AACvG,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,IAAI,KAAK,YAAY,qBAAqB;QAAE,OAAO,KAAK,CAAC,eAAe,CAAC;IACzE,OAAO,KAAK,YAAY,uBAAuB,CAAC;AAClD,CAAC;AAED,sHAAsH;AACtH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAClD;yGACyG;AACzG,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,mGAAmG;AACnG,MAAM,CAAC,MAAM,mCAAmC,GAAG,MAAM,CAAC;AAE1D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM;YACT,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAC3C,KAAK,MAAM;YACT,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAC3C,KAAK,SAAS;YACZ,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;QAC3C;YACE,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AACD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,+GAA+G;AAC/G,SAAS,KAAK,CAAC,CAAqB,EAAE,QAAgB;IACpD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,OAA4D;IAClF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACjG,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;0DAE0D;AAC1D,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,GAAW;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,iGAAiG;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,GAAG,kBAAkB,CAAC,CAAC;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,OAAO,CACL,GAAG,uBAAuB,IAAI,GAAG,YAAY,KAAK,MAAM;QACxD,GAAG,IAAI,IAAI;QACX,iBAAiB,KAAK,sBAAsB,iBAAiB,cAAc,GAAG,oCAAoC;QAClH,GAAG,IAAI,IAAI;QACX,qBAAqB,CACtB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAe,EACf,KAAsB,EACtB,cAAsB,EACtB,SAAiB;IAEjB,MAAM,cAAc,GAAyB,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;QAC1F,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,kCAAkC;QACxG,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc;YAAE,OAAO,GAAG,CAAC;QAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;aAClB,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,iGAAiG;QACjG,mGAAmG;QACnG,IAAI,IAAI,CAAC,MAAM,IAAI,kBAAkB,GAAG,kBAAkB;YAAE,OAAO,GAAG,CAAC;QACvE,mGAAmG;QACnG,kGAAkG;QAClG,MAAM,GAAG,GAAG,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QAC5C,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC5D,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IAC3F,CAAC,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AAC9C,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,sBAAsB,CAAC,KAAsB;IAC3D,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EACT,yFAAyF;YACzF,kGAAkG;QACpG,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;YACtB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,0CAA0C,EAAE,CAAC;YAC7E,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,sCAAsC,EAAE,CAAC,CAAC;YAC3F,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,gCAAgC,kBAAkB,YAAY,cAAc,IAAI,EAAE,CAAC,CAAC;SACrI,CAAC;QACF,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAwD,CAAC;YACxF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACpF,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,gCAAgC,GAAG,oHAAoH,CAAC;YACjK,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAChD,MAAM,IAAI,GAAG,GAAG,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,UAAU,GAAG,GAAG,wCAAwC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACxH,OAAO,QAAQ,GAAG,YAAY,KAAK,CAAC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,UAAU,MAAM,KAAK,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;QACvG,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/core/tools.d.ts

@@ -0,0 +1,14 @@
+import type { TSchema } from "typebox";
+import type { AgentTool, Skill } from "../internal/harness.js";
+import type { SkillSpec, ToolSpec } from "./types.js";
+/** Adapt a friendly ToolSpec into the vendored AgentTool the agent loop expects. */
+export declare function defineTool<TParams extends TSchema = TSchema>(spec: ToolSpec<TParams>): AgentTool<TParams>;
+/**
+ * Adapt an object-form skill into the vendored Skill shape (synthetic in-memory path).
+ *
+ * @deprecated No longer used by the runner: `TaskSpec.skills` is served by the first-party
+ * disclosure block + `skill` tool (design/71 黑盒#5 fix), and the vendored consumers of this shape
+ * were deleted. Kept only for API stability.
+ */
+export declare function toSkill(spec: SkillSpec): Skill;
+//# sourceMappingURL=tools.d.ts.map

package/dist/core/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/core/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAU,OAAO,EAAE,MAAM,SAAS,CAAC;AAE/C,OAAO,KAAK,EACV,SAAS,EAET,KAAK,EACN,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,SAAS,EAAc,QAAQ,EAAE,MAAM,YAAY,CAAC;AAyBlE,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,OAAO,SAAS,OAAO,GAAG,OAAO,EAC1D,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GACtB,SAAS,CAAC,OAAO,CAAC,CAkEpB;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,KAAK,CAO9C"}