@stigmer/runner 3.0.9-dev.20260615153829 → 3.1.0

package/dist/.build-fingerprint

@@ -1 +1 @@
-{"hash":"2b309c83fe956c6b","builtAt":"2026-06-15T15:40:04.205Z","fileCount":198}
+{"hash":"cdec4dda6bfadae6","builtAt":"2026-07-02T20:57:56.801Z","fileCount":229}

package/dist/__test-utils__/approval-contract/types.d.ts

@@ -0,0 +1,174 @@
+/**
+ * The substrate-agnostic seam for the HITL gateway Contract Test Kit.
+ *
+ * Stigmer enforces tool approval through two real substrates with very different
+ * mechanics:
+ * - the in-process deep-agent gate (a LangGraph middleware that IS the side
+ *   effect), and
+ * - the out-of-process Cursor deny-oracle (a bash preToolUse hook that allows or
+ *   denies a tool the agent runs inside cursor-agent).
+ *
+ * The safety invariants they must uphold are identical, so the contract describes
+ * them once and runs them against anything that implements {@link GatewaySubstrate}.
+ * A future substrate (e.g. the T04 TS server's runner) joins the safety net by
+ * implementing this one interface — it does not get to redefine the invariants.
+ *
+ * This seam intentionally does NOT carry raw, harness-specific tool names. The
+ * two substrates name the same operation differently (the Cursor hook says
+ * `Write`/`Shell`/`Delete`; the deep-agent stream says `edit`/`shell`/`delete`),
+ * so the contract speaks in the abstract {@link ProposedAction} and each adapter
+ * translates it into its own taxonomy. Keeping the contract taxonomy-free is what
+ * makes "both substrates agree on the same logical action" a meaningful assertion.
+ */
+/**
+ * A logical action a model proposes, expressed independently of any harness
+ * taxonomy. Each adapter maps it to its substrate's concrete tool name and args.
+ */
+export interface ProposedAction {
+    /**
+     * The action's approval-relevant kind. `write`/`shell`/`delete` are the gated
+     * mutating categories; `read` is any non-mutating built-in; `mcp` is an
+     * MCP-server tool.
+     */
+    readonly kind: "write" | "shell" | "delete" | "read" | "mcp";
+    /**
+     * The resource the action acts on — the absolute file path for file actions,
+     * the command string for shell. Empty for `mcp` (MCP identity is name-scoped).
+     * This is the "salient" value the exact-resource lease binds to.
+     */
+    readonly resource: string;
+    /**
+     * The edit content for a `write` action — the body whose digest the
+     * content-exact grant binds to. Two `write`s to the same `resource` with
+     * DIFFERENT `content` are distinct identities (the sibling-isolation probe);
+     * omitted, a substrate uses a fixed placeholder. Ignored for non-write kinds.
+     */
+    readonly content?: string;
+    /** MCP server slug — required for `kind: "mcp"`, ignored otherwise. */
+    readonly mcpServerSlug?: string;
+    /** MCP tool name — required for `kind: "mcp"`, ignored otherwise. */
+    readonly mcpToolName?: string;
+}
+/**
+ * The decision applied to a proposed action.
+ * - `none`   — no decision yet: run the action up to the gate and stop (the
+ *              "what happens with no backing authorization" probe).
+ * - `approve`— authorize THIS action.
+ * - `skip` / `reject` / `unknown` — every non-approving outcome; none may execute.
+ */
+export type GatewayDecision = "none" | "approve" | "skip" | "reject" | "unknown";
+/**
+ * The observable result of putting one proposed action through a substrate.
+ */
+export interface GatewayOutcome {
+    /**
+     * Whether the side effect ran (or, for an out-of-process substrate, whether
+     * the substrate ALLOWED it to run). This is the safety-critical observable and
+     * is comparable across substrates.
+     */
+    readonly executed: boolean;
+    /**
+     * Whether the substrate withheld the action pending approval. Note the precise
+     * meaning is substrate-specific (the in-process gate "paused at an interrupt";
+     * the deny-oracle "denied this call"), so it is only compared across substrates
+     * for `none`-decision probes, where both mean "withheld".
+     */
+    readonly gated: boolean;
+    /**
+     * Exact number of times the side effect ran. Populated only when
+     * {@link SubstrateCapabilities.observesExecution} is true (an in-process
+     * substrate can count; an out-of-process one cannot observe execution at all).
+     */
+    readonly executionCount?: number;
+    /**
+     * The authorization provenance the gate attached when it withheld the action —
+     * the PolicySource union string (e.g. "builtin_category", "agent_override").
+     * Populated only when {@link SubstrateCapabilities.surfacesGatePolicySource} is
+     * true; empty/undefined otherwise. Lets the contract assert every gated side
+     * effect is provenance-tagged.
+     */
+    readonly policySource?: string;
+}
+/**
+ * Capability flags for invariants that legitimately differ by substrate, gated
+ * rather than forked — mirroring the conformance suite's `CapabilityFlags`.
+ */
+export interface SubstrateCapabilities {
+    /**
+     * True when the runner executes the tool in-process and can therefore observe
+     * (and count) the side effect directly. The deep-agent gate is in-process
+     * (`true`); the Cursor hook authorizes a tool that runs in another process
+     * (`false`, receipts are best-effort).
+     */
+    readonly observesExecution: boolean;
+    /**
+     * True when an approval is bound to the exact resource it was granted for, so
+     * approving one resource never authorizes another. The Cursor grant token binds
+     * the resource (`true`); the deep-agent gate re-checks every distinct call and
+     * relies on checkpoint replay for sameness, so per-resource lease isolation is
+     * not a property of that gate (`false`).
+     */
+    readonly enforcesExactResource: boolean;
+    /**
+     * True when an approval is bound to the exact CONTENT of the action, not just
+     * its resource — so approving one edit to a file never authorizes a DIFFERENT
+     * edit to the SAME file. The Cursor grant binds (category, path, contentDigest)
+     * (`true`); the deep-agent gate relies on checkpoint replay for sameness, so
+     * content isolation is not a property of that gate (`false`).
+     */
+    readonly enforcesExactContent: boolean;
+    /**
+     * True when the substrate honors a run-lifetime CLASS lease: an APPROVE_ALL on
+     * one action auto-approves later actions of the SAME class (built-in category)
+     * for the rest of the run, while a DIFFERENT class stays gated. Both production
+     * substrates enforce this (the deep-agent gate clears leased categories; the
+     * Cursor hook reads `leasedCategories` from its state file), so both set `true`
+     * and implement {@link GatewaySubstrate.authorizeUnderClassLease}.
+     */
+    readonly appliesRunLifetimeLease: boolean;
+    /**
+     * True when the substrate attaches authorization provenance
+     * (approval_policy_source) at the gate, so a withheld action's
+     * {@link GatewayOutcome.policySource} is populated. The deep-agent gate decides
+     * and stamps the source at interrupt time (`true`); the Cursor substrate's
+     * provenance is a reconstruction-time projection over the persisted tool call,
+     * not a property of the hook's deny decision, so it is `false` here and is
+     * covered instead by the message-translator and corpus suites.
+     */
+    readonly surfacesGatePolicySource: boolean;
+}
+/**
+ * A real enforcement substrate, wired to its production code. Adapters translate
+ * abstract actions/decisions into substrate-specific drives and report a uniform
+ * {@link GatewayOutcome}; they never reimplement enforcement logic.
+ */
+export interface GatewaySubstrate {
+    /** Stable substrate name, used in suite titles and diagnostics. */
+    readonly name: string;
+    /** Honest per-substrate capability flags. */
+    readonly capabilities: SubstrateCapabilities;
+    /**
+     * Whether this substrate can run in the current environment (e.g. the Cursor
+     * deny-oracle needs `bash`). The contract skips its suite when `false`.
+     */
+    readonly available: boolean;
+    /**
+     * Put a single proposed action through the substrate under a decision and
+     * report what happened.
+     */
+    authorize(action: ProposedAction, decision: GatewayDecision): Promise<GatewayOutcome>;
+    /**
+     * Approve `granted`, then probe `probe` against that standing authorization —
+     * the lease-isolation drive. Implemented only when
+     * {@link SubstrateCapabilities.enforcesExactResource} is true.
+     */
+    authorizeAfterGrant?(granted: ProposedAction, probe: ProposedAction): Promise<GatewayOutcome>;
+    /**
+     * Grant a run-lifetime CLASS lease by choosing APPROVE_ALL on `leased`, then
+     * probe `probe` against that standing lease — the scoped-lease drive that
+     * proves "approving all of class A never auto-approves class B." `leased` must
+     * be a gated built-in (write/shell/delete). Implemented only when
+     * {@link SubstrateCapabilities.appliesRunLifetimeLease} is true.
+     */
+    authorizeUnderClassLease?(leased: ProposedAction, probe: ProposedAction): Promise<GatewayOutcome>;
+}

package/dist/__test-utils__/approval-contract/types.js

@@ -0,0 +1,24 @@
+/**
+ * The substrate-agnostic seam for the HITL gateway Contract Test Kit.
+ *
+ * Stigmer enforces tool approval through two real substrates with very different
+ * mechanics:
+ * - the in-process deep-agent gate (a LangGraph middleware that IS the side
+ *   effect), and
+ * - the out-of-process Cursor deny-oracle (a bash preToolUse hook that allows or
+ *   denies a tool the agent runs inside cursor-agent).
+ *
+ * The safety invariants they must uphold are identical, so the contract describes
+ * them once and runs them against anything that implements {@link GatewaySubstrate}.
+ * A future substrate (e.g. the T04 TS server's runner) joins the safety net by
+ * implementing this one interface — it does not get to redefine the invariants.
+ *
+ * This seam intentionally does NOT carry raw, harness-specific tool names. The
+ * two substrates name the same operation differently (the Cursor hook says
+ * `Write`/`Shell`/`Delete`; the deep-agent stream says `edit`/`shell`/`delete`),
+ * so the contract speaks in the abstract {@link ProposedAction} and each adapter
+ * translates it into its own taxonomy. Keeping the contract taxonomy-free is what
+ * makes "both substrates agree on the same logical action" a meaningful assertion.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/__test-utils__/approval-contract/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/__test-utils__/approval-contract/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/activities/call-agent-status.d.ts

@@ -13,7 +13,23 @@
  */
 import type { ChildApprovalNotification } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/approval_pb";
 export declare function updateWorkflowTaskApprovalStatus(executionId: string, _taskName: string, notification: ChildApprovalNotification): Promise<void>;
-export declare function clearWorkflowApprovalStatus(executionId: string): Promise<void>;
+export declare function clearWorkflowApprovalStatus(executionId: string, childExecutionId: string): Promise<void>;
+/**
+ * Surfaces (or clears) a child agent's file-review gate on the parent workflow.
+ *
+ * Reference-only: writes a single WorkflowPendingFileReview naming the child and
+ * the change_set ids it currently has AWAITING_REVIEW — never the diffs, which
+ * stay single-sourced on the child. Passing an empty changeSetIds clears this
+ * child's entry (per-child merge, so parallel siblings are never disturbed).
+ */
+export declare function updateWorkflowFileReviewStatus(executionId: string, childExecutionId: string, changeSetIds: string[]): Promise<void>;
+/**
+ * Reads the child agent execution and returns the ids of its change sets that
+ * are currently AWAITING_REVIEW. The gated child is non-terminal, so its last
+ * status write stored a populated file_change_sets projection; GET returns it
+ * (the same reason getAgentExecutionProgress reads status.messages).
+ */
+export declare function getAwaitingFileReviewChangeSetIds(childExecutionId: string): Promise<string[]>;
 /**
  * Queries the child AgentExecution for progress data that can be
  * emitted as an `agent_call_progress` event on the parent workflow.
@@ -33,5 +49,7 @@ export declare function getAgentExecutionProgress(childExecutionId: string): Pro
 export declare function createCallAgentStatusActivities(): {
     UpdateWorkflowTaskApprovalStatus: typeof updateWorkflowTaskApprovalStatus;
     ClearWorkflowApprovalStatus: typeof clearWorkflowApprovalStatus;
+    UpdateWorkflowFileReviewStatus: typeof updateWorkflowFileReviewStatus;
+    GetAwaitingFileReviewChangeSetIds: typeof getAwaitingFileReviewChangeSetIds;
     GetAgentExecutionProgress: typeof getAgentExecutionProgress;
 };

package/dist/activities/call-agent-status.js

@@ -14,8 +14,8 @@
 import { StigmerClient } from "../client/stigmer-client.js";
 import { loadConfig } from "../config.js";
 import { create } from "@bufbuild/protobuf";
-import { WorkflowExecutionStatusSchema, WorkflowPendingApprovalSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
-import { ToolCallStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
+import { WorkflowExecutionStatusSchema, WorkflowPendingApprovalSchema, WorkflowPendingFileReviewSchema } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import { ToolCallStatus, FileChangeSetStatus } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/enum_pb";
 function buildClient() {
     const config = loadConfig();
     return new StigmerClient({
@@ -26,29 +26,86 @@ function buildClient() {
 export async function updateWorkflowTaskApprovalStatus(executionId, _taskName, notification) {
     if (!executionId)
         return;
+    const childExecId = notification.executionId;
     const client = buildClient();
     const pendingApprovals = (notification.pendingApprovals ?? []).map((approval) => create(WorkflowPendingApprovalSchema, {
         approval,
-        childAgentExecutionId: notification.executionId,
+        childAgentExecutionId: childExecId,
     }));
     const status = create(WorkflowExecutionStatusSchema, {
         pendingApprovals,
     });
+    // Per-child merge scoped to this child: the write replaces only this child's
+    // approvals and preserves every parallel sibling's entries.
     await client.updateWorkflowExecutionStatus(executionId, status, {
         updatePendingApprovals: true,
+        pendingUpdateChildAgentExecutionId: childExecId,
     });
 }
-export async function clearWorkflowApprovalStatus(executionId) {
-    if (!executionId)
+export async function clearWorkflowApprovalStatus(executionId, childExecutionId) {
+    if (!executionId || !childExecutionId)
         return;
     const client = buildClient();
     const status = create(WorkflowExecutionStatusSchema, {
         pendingApprovals: [],
     });
+    // Scoped clear: empty list for this child clears only its approvals; sibling
+    // children still awaiting approval are untouched.
     await client.updateWorkflowExecutionStatus(executionId, status, {
         updatePendingApprovals: true,
+        pendingUpdateChildAgentExecutionId: childExecutionId,
+    });
+}
+/**
+ * Surfaces (or clears) a child agent's file-review gate on the parent workflow.
+ *
+ * Reference-only: writes a single WorkflowPendingFileReview naming the child and
+ * the change_set ids it currently has AWAITING_REVIEW — never the diffs, which
+ * stay single-sourced on the child. Passing an empty changeSetIds clears this
+ * child's entry (per-child merge, so parallel siblings are never disturbed).
+ */
+export async function updateWorkflowFileReviewStatus(executionId, childExecutionId, changeSetIds) {
+    if (!executionId || !childExecutionId)
+        return;
+    const client = buildClient();
+    const pendingFileReviews = changeSetIds.length > 0
+        ? [
+            create(WorkflowPendingFileReviewSchema, {
+                childAgentExecutionId: childExecutionId,
+                changeSetId: changeSetIds,
+            }),
+        ]
+        : [];
+    const status = create(WorkflowExecutionStatusSchema, {
+        pendingFileReviews,
+    });
+    await client.updateWorkflowExecutionStatus(executionId, status, {
+        updatePendingFileReviews: true,
+        pendingUpdateChildAgentExecutionId: childExecutionId,
     });
 }
+/**
+ * Reads the child agent execution and returns the ids of its change sets that
+ * are currently AWAITING_REVIEW. The gated child is non-terminal, so its last
+ * status write stored a populated file_change_sets projection; GET returns it
+ * (the same reason getAgentExecutionProgress reads status.messages).
+ */
+export async function getAwaitingFileReviewChangeSetIds(childExecutionId) {
+    if (!childExecutionId)
+        return [];
+    try {
+        const client = buildClient();
+        const execution = await client.getExecution(childExecutionId);
+        const changeSets = execution?.status?.fileChangeSets ?? [];
+        return changeSets
+            .filter((cs) => cs.status === FileChangeSetStatus.AWAITING_REVIEW)
+            .map((cs) => cs.id);
+    }
+    catch (err) {
+        console.warn("Failed to fetch child file-review state (non-fatal):", String(err));
+        return [];
+    }
+}
 export async function getAgentExecutionProgress(childExecutionId) {
     if (!childExecutionId)
         return null;
@@ -85,6 +142,8 @@ export function createCallAgentStatusActivities() {
     return {
         UpdateWorkflowTaskApprovalStatus: updateWorkflowTaskApprovalStatus,
         ClearWorkflowApprovalStatus: clearWorkflowApprovalStatus,
+        UpdateWorkflowFileReviewStatus: updateWorkflowFileReviewStatus,
+        GetAwaitingFileReviewChangeSetIds: getAwaitingFileReviewChangeSetIds,
         GetAgentExecutionProgress: getAgentExecutionProgress,
     };
 }

package/dist/activities/call-agent-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-agent-status.js","sourceRoot":"","sources":["../../src/activities/call-agent-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,MAAM,gEAAgE,CAAC;AAE9I,OAAO,EAAE,cAAc,EAAE,MAAM,8DAA8D,CAAC;AAE9F,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,IAAI,aAAa,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB,EACnB,SAAiB,EACjB,YAAuC;IAEvC,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAChE,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,6BAA6B,EAAE;QACpC,QAAQ;QACR,qBAAqB,EAAE,YAAY,CAAC,WAAW;KAChD,CAAC,CACL,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB;KACjB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB;IAEnB,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;KAC7B,CAAC,CAAC;AACL,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,gBAAwB;IAExB,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YAClC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAAC;oBAC9D,eAAe,GAAG,EAAE,CAAC,IAAI,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAEhC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,gCAAgC,EAAE,gCAAgC;QAClE,2BAA2B,EAAE,2BAA2B;QACxD,yBAAyB,EAAE,yBAAyB;KACrD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"call-agent-status.js","sourceRoot":"","sources":["../../src/activities/call-agent-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,6BAA6B,EAAE,6BAA6B,EAAE,+BAA+B,EAAE,MAAM,gEAAgE,CAAC;AAE/K,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AAEnH,SAAS,WAAW;IAClB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,IAAI,aAAa,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC,sBAAsB;QACvC,KAAK,EAAE,MAAM,CAAC,YAAY;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,WAAmB,EACnB,SAAiB,EACjB,YAAuC;IAEvC,IAAI,CAAC,WAAW;QAAE,OAAO;IAEzB,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC;IAC7C,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAChE,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,6BAA6B,EAAE;QACpC,QAAQ;QACR,qBAAqB,EAAE,WAAW;KACnC,CAAC,CACL,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB;KACjB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;QAC5B,kCAAkC,EAAE,WAAW;KAChD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,WAAmB,EACnB,gBAAwB;IAExB,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAE9C,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,gBAAgB,EAAE,EAAE;KACrB,CAAC,CAAC;IAEH,6EAA6E;IAC7E,kDAAkD;IAClD,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,sBAAsB,EAAE,IAAI;QAC5B,kCAAkC,EAAE,gBAAgB;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAAmB,EACnB,gBAAwB,EACxB,YAAsB;IAEtB,IAAI,CAAC,WAAW,IAAI,CAAC,gBAAgB;QAAE,OAAO;IAE9C,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,kBAAkB,GACtB,YAAY,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC;YACE,MAAM,CAAC,+BAA+B,EAAE;gBACtC,qBAAqB,EAAE,gBAAgB;gBACvC,WAAW,EAAE,YAAY;aAC1B,CAAC;SACH;QACH,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,MAAM,GAAG,MAAM,CAAC,6BAA6B,EAAE;QACnD,kBAAkB;KACnB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,6BAA6B,CAAC,WAAW,EAAE,MAAM,EAAE;QAC9D,wBAAwB,EAAE,IAAI;QAC9B,kCAAkC,EAAE,gBAAgB;KACrD,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,gBAAwB;IAExB,IAAI,CAAC,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,SAAS,EAAE,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC;QAC3D,OAAO,UAAU;aACd,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,mBAAmB,CAAC,eAAe,CAAC;aACjE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAClF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAkBD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,gBAAwB;IAExB,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC;QAEtC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YAClC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;YAC/B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,CAAC,iBAAiB,EAAE,CAAC;oBAC9D,eAAe,GAAG,EAAE,CAAC,IAAI,CAAC;gBAC5B,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAEhC,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,gCAAgC,EAAE,gCAAgC;QAClE,2BAA2B,EAAE,2BAA2B;QACxD,8BAA8B,EAAE,8BAA8B;QAC9D,iCAAiC,EAAE,iCAAiC;QACpE,yBAAyB,EAAE,yBAAyB;KACrD,CAAC;AACJ,CAAC"}

package/dist/activities/call-llm.js

@@ -15,53 +15,14 @@
  *   Input:  (config: LlmCallConfig, runtimeEnv: Record<string, unknown>, executionId: string)
  *   Output: LlmCallResult
  */
-import { ChatAnthropic } from "@langchain/anthropic";
-import { ChatOpenAI } from "@langchain/openai";
 import { HumanMessage, SystemMessage } from "@langchain/core/messages";
 import { z } from "zod";
 import { ApplicationFailure } from "@temporalio/activity";
 import { jsonSchemaToZod } from "../shared/json-schema-to-zod.js";
-import { inferProvider, stripProviderPrefix, resolveProxyBaseUrl, buildProxyHeaders, } from "../shared/llm-proxy.js";
+import { inferProvider, stripProviderPrefix, } from "../shared/llm-proxy.js";
 import { computeLlmCostMicros, ensureLoaded as ensurePricingLoaded } from "../shared/model-pricing.js";
 import { resolveToApiModelId } from "../shared/model-registry.js";
-function constructModel(provider, modelId, config, baseUrl, headers) {
-    if (provider === "openai") {
-        const apiKey = baseUrl
-            ? (headers?.Authorization?.replace("Bearer ", "") ?? "proxy-managed")
-            : (process.env.OPENAI_API_KEY ?? "");
-        return new ChatOpenAI({
-            model: modelId,
-            temperature: config.temperature ?? 0,
-            maxTokens: config.max_tokens,
-            ...(baseUrl || headers
-                ? {
-                    configuration: {
-                        ...(baseUrl ? { baseURL: baseUrl } : {}),
-                        ...(headers ? { defaultHeaders: headers } : {}),
-                    },
-                }
-                : {}),
-            apiKey,
-        });
-    }
-    const apiKey = baseUrl
-        ? (headers?.Authorization?.replace("Bearer ", "") ?? "proxy-managed")
-        : (process.env.ANTHROPIC_API_KEY ?? "");
-    return new ChatAnthropic({
-        model: modelId,
-        temperature: config.temperature ?? 0,
-        maxTokens: config.max_tokens ?? 4096,
-        ...(baseUrl || headers
-            ? {
-                clientOptions: {
-                    ...(baseUrl ? { baseURL: baseUrl } : {}),
-                    ...(headers ? { defaultHeaders: headers } : {}),
-                },
-            }
-            : {}),
-        apiKey,
-    });
-}
+import { buildChatModel } from "../shared/model-client.js";
 /**
  * Stream a chat model invocation and collect the response.
  *
@@ -171,25 +132,30 @@ export async function callLlmAction(config, runtimeEnv, executionId) {
     const proxyActive = !!(proxyEndpoint && stigmerToken);
     console.log(`[call-llm] model=${modelId} provider=${provider} proxy=${proxyActive} ` +
         `structured=${!!config.response_schema} execution=${executionId}`);
-    let baseUrl;
-    let headers;
-    if (proxyActive) {
-        baseUrl = resolveProxyBaseUrl(proxyEndpoint, provider);
-        headers = buildProxyHeaders(stigmerToken, { workflowExecutionId: executionId });
-    }
-    else if (provider === "openai") {
-        if (!process.env.OPENAI_API_KEY) {
+    // Direct mode (no proxy) requires the provider's own API key. Validated here
+    // rather than in buildChatModel so the shared module stays free of Temporal
+    // failure types.
+    if (!proxyActive) {
+        if (provider === "openai" && !process.env.OPENAI_API_KEY) {
             throw ApplicationFailure.nonRetryable(`OPENAI_API_KEY is not set and no proxy is configured. ` +
                 `Set the API key in your environment or connect to a Stigmer Cloud deployment.`, "LLM_MISSING_API_KEY");
         }
-    }
-    else {
-        if (!process.env.ANTHROPIC_API_KEY) {
+        if (provider === "anthropic" && !process.env.ANTHROPIC_API_KEY) {
             throw ApplicationFailure.nonRetryable(`ANTHROPIC_API_KEY is not set and no proxy is configured. ` +
                 `Set the API key in your environment or connect to a Stigmer Cloud deployment.`, "LLM_MISSING_API_KEY");
         }
     }
-    const model = constructModel(provider, modelId, config, baseUrl, headers);
+    // Anthropic requires an explicit maxTokens; preserve the 4096 default here
+    // (buildChatModel intentionally imposes none). resolvedModel is already an
+    // API id, so buildChatModel's resolve step is a no-op for it.
+    const { model } = await buildChatModel({
+        modelName: resolvedModel,
+        proxyEndpoint: proxyActive ? proxyEndpoint : undefined,
+        stigmerToken: proxyActive ? stigmerToken : undefined,
+        headerScope: { workflowExecutionId: executionId },
+        temperature: config.temperature,
+        maxTokens: provider === "anthropic" ? (config.max_tokens ?? 4096) : config.max_tokens,
+    });
     const messages = [];
     if (config.system_prompt) {
         messages.push(new SystemMessage(config.system_prompt));

package/dist/activities/call-llm.js.map

@@ -1 +1 @@
-{"version":3,"file":"call-llm.js","sourceRoot":"","sources":["../../src/activities/call-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GAElB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAqBlE,SAAS,cAAc,CACrB,QAAqB,EACrB,OAAe,EACf,MAAqB,EACrB,OAAgB,EAChB,OAAgC;IAEhC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,OAAO;YACpB,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC;YACrE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAEvC,OAAO,IAAI,UAAU,CAAC;YACpB,KAAK,EAAE,OAAO;YACd,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,GAAG,CAAC,OAAO,IAAI,OAAO;gBACpB,CAAC,CAAC;oBACE,aAAa,EAAE;wBACb,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChD;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,OAAO;QACpB,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC;QACrE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IAE1C,OAAO,IAAI,aAAa,CAAC;QACvB,KAAK,EAAE,OAAO;QACd,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI;QACpC,GAAG,CAAC,OAAO,IAAI,OAAO;YACpB,CAAC,CAAC;gBACE,aAAa,EAAE;oBACb,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAAoB,EACpB,QAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,KAAyB,CAAC;QAC/C,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC;QAClC,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,KAAK,GAAI,YAAkG,CAAC,cAAc,CAAC;QACjI,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC3C,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC5C,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,wBAAwB,CAC/B,GAAY,EACZ,OAAe,EACf,QAAqB;IAErB,MAAM,MAAM,GAAG,OAAQ,GAA4B,CAAC,MAAM,KAAK,QAAQ;QACrE,CAAC,CAAE,GAA0B,CAAC,MAAM;QACpC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAExE,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,kBAAkB,CAAC,YAAY,CACnC,iCAAiC,OAAO,MAAM,aAAa,uCAAuC;YAClG,sBAAsB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3F,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,OAAO,MAAM,aAAa,GAAG,CAAC;QAExD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,6BAA6B,OAAO,qDAAqD,EACzF,0BAA0B,CAC3B,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,qBAAqB,OAAO,8DAA8D,EAC1F,uBAAuB,CACxB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,oBAAoB,OAAO,mEAAmE,EAC9F,qBAAqB,CACtB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,sBAAsB,OAAO,KAAK,UAAU,EAAE,EAC9C,iBAAiB,CAClB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,4BAA4B,OAAO,KAAK,UAAU,EAAE,EACpD,2BAA2B,CAC5B,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,2BAA2B,OAAO,iDAAiD;oBACnF,8CAA8C,EAC9C,gBAAgB,CACjB,CAAC;YACJ;gBACE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,yBAAyB,MAAM,SAAS,OAAO,KAAK,UAAU,EAAE,CACjF,CAAC;gBACJ,CAAC;gBACD,MAAM,kBAAkB,CAAC,YAAY,CACnC,GAAG,aAAa,oBAAoB,MAAM,SAAS,OAAO,KAAK,UAAU,EAAE,EAC3E,eAAe,CAChB,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,CAAC,YAAY,CACnC,8BAA8B,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,EAC1E,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,UAAmC,EACnC,WAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE5C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,CACT,oBAAoB,OAAO,aAAa,QAAQ,UAAU,WAAW,GAAG;QACxE,cAAc,CAAC,CAAC,MAAM,CAAC,eAAe,cAAc,WAAW,EAAE,CAClE,CAAC;IAEF,IAAI,OAA2B,CAAC;IAChC,IAAI,OAA2C,CAAC;IAEhD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,GAAG,mBAAmB,CAAC,aAAc,EAAE,QAAQ,CAAC,CAAC;QACxD,OAAO,GAAG,iBAAiB,CAAC,YAAa,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;SAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAChC,MAAM,kBAAkB,CAAC,YAAY,CACnC,wDAAwD;gBACxD,+EAA+E,EAC/E,qBAAqB,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YACnC,MAAM,kBAAkB,CAAC,YAAY,CACnC,2DAA2D;gBAC3D,+EAA+E,EAC/E,qBAAqB,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAE1E,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/C,IAAI,MAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEnD,MAAM,QAAQ,GAAI,QAAQ,CAAC,GAEzB,CAAC,cAAc,CAAC;YAElB,MAAM,GAAG;gBACP,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,CAAC;gBACzC,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,CAAC;gBAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,OAAO;gBACd,QAAQ;aACT,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAEvF,MAAM,GAAG;gBACP,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,OAAO;gBACd,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACjG,MAAM,cAAc,GAAG,UAAU,GAAG,CAAC;QACnC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE;QAClD,CAAC,CAAC,MAAM,CAAC;IAEX,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,cAA+B,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAqB;IACvE,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG;YACZ,sBAAsB,EAAE,MAAM,CAAC,QAAQ;YACvC,mBAAmB,EAAE,MAAM,CAAC,KAAK;SAClC,CAAC;QACF,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,YAAY;YAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,aAAa;YAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,OAAO,EAAE,KAAK,EACZ,MAAqB,EACrB,UAAmC,EACnC,WAAmB,EACK,EAAE;YAC1B,OAAO,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"call-llm.js","sourceRoot":"","sources":["../../src/activities/call-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAGvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EACL,aAAa,EACb,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,YAAY,IAAI,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAqB3D;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAAoB,EACpB,QAA0C;IAE1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,KAAyB,CAAC;QAC/C,IAAI,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC;QAClC,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,KAAK,GAAI,YAAkG,CAAC,cAAc,CAAC;QACjI,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;gBAC3C,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBAC5C,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,SAAS,wBAAwB,CAC/B,GAAY,EACZ,OAAe,EACf,QAAqB;IAErB,MAAM,MAAM,GAAG,OAAQ,GAA4B,CAAC,MAAM,KAAK,QAAQ;QACrE,CAAC,CAAE,GAA0B,CAAC,MAAM;QACpC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAExE,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,kBAAkB,CAAC,YAAY,CACnC,iCAAiC,OAAO,MAAM,aAAa,uCAAuC;YAClG,sBAAsB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3F,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,OAAO,MAAM,aAAa,GAAG,CAAC;QAExD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,6BAA6B,OAAO,qDAAqD,EACzF,0BAA0B,CAC3B,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,qBAAqB,OAAO,8DAA8D,EAC1F,uBAAuB,CACxB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,oBAAoB,OAAO,mEAAmE,EAC9F,qBAAqB,CACtB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,sBAAsB,OAAO,KAAK,UAAU,EAAE,EAC9C,iBAAiB,CAClB,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,4BAA4B,OAAO,KAAK,UAAU,EAAE,EACpD,2BAA2B,CAC5B,CAAC;YACJ,KAAK,GAAG;gBACN,MAAM,kBAAkB,CAAC,YAAY,CACnC,2BAA2B,OAAO,iDAAiD;oBACnF,8CAA8C,EAC9C,gBAAgB,CACjB,CAAC;YACJ;gBACE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;oBAClB,MAAM,IAAI,KAAK,CACb,GAAG,aAAa,yBAAyB,MAAM,SAAS,OAAO,KAAK,UAAU,EAAE,CACjF,CAAC;gBACJ,CAAC;gBACD,MAAM,kBAAkB,CAAC,YAAY,CACnC,GAAG,aAAa,oBAAoB,MAAM,SAAS,OAAO,KAAK,UAAU,EAAE,EAC3E,eAAe,CAChB,CAAC;QACN,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACjE,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,gCAAgC,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,CAAC,YAAY,CACnC,8BAA8B,OAAO,MAAM,aAAa,MAAM,UAAU,EAAE,EAC1E,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAqB,EACrB,UAAmC,EACnC,WAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE5C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,YAAY,CAAC,CAAC;IAEtD,OAAO,CAAC,GAAG,CACT,oBAAoB,OAAO,aAAa,QAAQ,UAAU,WAAW,GAAG;QACxE,cAAc,CAAC,CAAC,MAAM,CAAC,eAAe,cAAc,WAAW,EAAE,CAClE,CAAC;IAEF,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YACzD,MAAM,kBAAkB,CAAC,YAAY,CACnC,wDAAwD;gBACxD,+EAA+E,EAC/E,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC/D,MAAM,kBAAkB,CAAC,YAAY,CACnC,2DAA2D;gBAC3D,+EAA+E,EAC/E,qBAAqB,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAAC;QACrC,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QACtD,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACpD,WAAW,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE;QACjD,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU;KACtF,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAE/C,IAAI,MAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,oBAAoB,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAEnD,MAAM,QAAQ,GAAI,QAAQ,CAAC,GAEzB,CAAC,cAAc,CAAC;YAElB,MAAM,GAAG;gBACP,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,CAAC;gBACzC,aAAa,EAAE,QAAQ,EAAE,aAAa,IAAI,CAAC;gBAC3C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,OAAO;gBACd,QAAQ;aACT,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAEvF,MAAM,GAAG;gBACP,YAAY,EAAE,WAAW;gBACzB,aAAa,EAAE,YAAY;gBAC3B,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,OAAO;gBACd,QAAQ;aACT,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACjG,MAAM,cAAc,GAAG,UAAU,GAAG,CAAC;QACnC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,UAAU,EAAE;QAClD,CAAC,CAAC,MAAM,CAAC;IAEX,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,cAA+B,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,UAAkB,EAAE,MAAqB;IACvE,IAAI,CAAC;QACH,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG;YACZ,sBAAsB,EAAE,MAAM,CAAC,QAAQ;YACvC,mBAAmB,EAAE,MAAM,CAAC,KAAK;SAClC,CAAC;QACF,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC7C,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,YAAY;YAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,aAAa;YAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,uCAAuC;IACzC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,OAAO,EAAE,KAAK,EACZ,MAAqB,EACrB,UAAmC,EACnC,WAAmB,EACK,EAAE;YAC1B,OAAO,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACxD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/activities/classify-tool-approvals.d.ts

@@ -33,6 +33,15 @@ export interface ToolApprovalResult {
     tool_name: string;
     requires_approval: boolean;
     message: string;
+    /**
+     * True when the connect-time fail-closed tightener force-gated this tool from
+     * its destructiveHint annotation (see applyDestructiveHintTightener), not the
+     * classifier. Persisted on ToolApprovalPolicy.from_destructive_hint so the
+     * runner attributes the gate to the annotation
+     * (ApprovalPolicySource.ANNOTATION_DESTRUCTIVE_TIGHTEN) instead of the
+     * classifier default. Absent/false on classifier and human-pinned entries.
+     */
+    from_destructive_hint?: boolean;
 }
 export interface ClassifyToolsOptions {
     proxyEndpoint: string;
@@ -40,6 +49,21 @@ export interface ClassifyToolsOptions {
     primaryModel: string;
 }
 export declare function classifyTools(input: ClassifyToolApprovalsInput, options: ClassifyToolsOptions): Promise<ToolApprovalResult[]>;
+/**
+ * Reconcile a batch's LLM classifications against the tools that were actually
+ * sent. The canonical result is built from the INPUT batch, never the raw model
+ * output, so the classifier can never silently disarm a gate by omission:
+ *
+ * - A tool the model classified is kept as-is (its requires_approval + message).
+ * - A tool the model OMITTED fails closed (requires_approval=true) — a missing
+ *   decision is treated exactly like an outage for that one tool.
+ * - A name the model returned that was never in the batch (a hallucinated or
+ *   duplicated entry) is dropped — only real tools earn a policy.
+ */
+export declare function reconcileBatchClassifications(batch: ToolDescriptor[], llmResults: ToolApprovalResult[]): {
+    reconciled: ToolApprovalResult[];
+    failedClosedCount: number;
+};
 export declare function fallbackApprovals(tools: ToolDescriptor[]): ToolApprovalResult[];
 export declare function buildToolsPayload(tools: ToolDescriptor[]): string;
 export declare function createClassifyToolApprovalsActivities(config: Config): {