@tangle-network/agent-eval 0.150.0 → 0.150.1

package/dist/{external-optimizer-process-tDe72VRO.js.map → external-optimizer-process-Bhmzngf-.js.map}

@@ -1 +1 @@
-{"version":3,"file":"external-optimizer-process-tDe72VRO.js","names":[],"sources":["../src/campaign/single-run-lock.ts","../src/campaign/external-optimizer-callback.ts"],"sourcesContent":["/**\n * Single-run lock for evaluations that share one mutable environment.\n *\n * Two concurrent runs against a shared stateful gym silently corrupt each\n * other: each resets/mutates environment state mid-cell of the other, and\n * every score from both becomes garbage that LOOKS like worker variance\n * (agent-lab R357 burned hours on flip-flopping scores before tracing them\n * to exactly this). The fix is a pid lockfile: refuse to start while a live\n * holder exists, reclaim stale locks whose pid is gone, release only if the\n * lock is still ours.\n *\n * `alsoCheck` exists because independent runners can guard the same shared\n * resource with differently named lockfiles; a runner must respect all of\n * them even though it writes only its own.\n */\n\nimport {\n  type AtomicFileLockUnavailable,\n  probeAtomicFileLock,\n  tryAcquireAtomicFileLock,\n} from '../ledger-core/atomic-file-lock'\n\nexport interface SingleRunLockOptions {\n  /** Lockfile this runner writes (and checks). */\n  readonly lockPath: string\n  /** Other runners' lockfiles guarding the same resource; checked, never written. */\n  readonly alsoCheck?: readonly string[]\n  /** Install a process 'exit' hook that releases the lock. Default true. */\n  readonly releaseOnExit?: boolean\n  /** Owner pid recorded in the lockfile metadata. Default process.pid. */\n  readonly pid?: number\n}\n\nexport interface SingleRunLock {\n  /** Remove the lockfile if this process still owns it. Idempotent. */\n  release(): void\n}\n\nfunction assertAvailable(path: string): void {\n  const unavailable = probeAtomicFileLock({ lockPath: path })\n  if (unavailable) throw unavailableError(path, unavailable)\n}\n\nfunction unavailableError(path: string, unavailable: AtomicFileLockUnavailable): Error {\n  if (unavailable.reason === 'recovery') {\n    return new Error(\n      `single-run lock recovery is already in progress (${path}); refusing a concurrent run`,\n    )\n  }\n  return new Error(\n    `single-run lock held by live pid ${unavailable.holder.pid} (${path}); refusing a concurrent run on the shared resource`,\n  )\n}\n\n/**\n * Acquire the lock or throw naming the live holder. A stale lock (holder pid\n * no longer running) is reclaimed by one contender. An interrupted reclaim\n * leaves a marker that fails closed instead of admitting overlapping runs.\n */\nexport function acquireSingleRunLock(opts: SingleRunLockOptions): SingleRunLock {\n  const pid = opts.pid ?? process.pid\n  if (!Number.isSafeInteger(pid) || pid <= 0)\n    throw new Error('single-run lock pid must be a positive integer')\n  for (const path of opts.alsoCheck ?? []) assertAvailable(path)\n  const acquisition = tryAcquireAtomicFileLock({\n    lockPath: opts.lockPath,\n    pid,\n  })\n  if (!acquisition.acquired) throw unavailableError(opts.lockPath, acquisition)\n  const releaseOnExit = opts.releaseOnExit ?? true\n  let released = false\n  const release = (): void => {\n    if (released) return\n    released = true\n    if (releaseOnExit) process.off('exit', release)\n    try {\n      acquisition.lock.release()\n    } catch {\n      // release is best-effort; a leftover stale lock is reclaimed on next acquire\n    }\n  }\n  try {\n    for (const path of opts.alsoCheck ?? []) assertAvailable(path)\n  } catch (error) {\n    release()\n    throw error\n  }\n  if (releaseOnExit) process.on('exit', release)\n  return { release }\n}\n","import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'\nimport { contentHash } from '../verdict-cache'\nimport {\n  type ExternalOptimizerCallback,\n  type ExternalOptimizerCallbackLimits,\n  type ExternalOptimizerEvaluationObservation,\n  type ExternalTextCandidate,\n  type ExternalTextEvaluationRequest,\n  isExternalTextCandidate,\n  isRecord,\n  resolveExternalOptimizerCallbackLimits,\n} from './external-optimizer-contracts'\nimport { closeServer, listenLocal, sendJson } from './external-optimizer-http'\n\ntype UnsequencedObservation = ExternalOptimizerEvaluationObservation extends infer T\n  ? T extends ExternalOptimizerEvaluationObservation\n    ? Omit<T, 'sequence'>\n    : never\n  : never\n\nexport async function startExternalOptimizerCallback<TResponse>(args: {\n  token: string\n  maxEvaluations: number\n  acceptEvaluation?: () => number | undefined\n  evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<TResponse>\n  observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  /** Loopback JSON byte limits. Omitted fields use finite defaults. */\n  limits?: Partial<ExternalOptimizerCallbackLimits>\n  signal?: AbortSignal\n}): Promise<ExternalOptimizerCallback> {\n  assertCallbackConfig(args)\n  const limits = resolveExternalOptimizerCallbackLimits(args.limits)\n  args.signal?.throwIfAborted()\n  let evaluations = 0\n  let accepting = true\n  let closePromise: Promise<void> | undefined\n  const activeControllers = new Set<AbortController>()\n  const activeHandlers = new Set<Promise<void>>()\n  const proposedCandidateHashes = new Set<string>()\n  let observationSequence = 0\n  const server = createServer((request, response) => {\n    if (!accepting) {\n      sendJsonIfOpen(response, 503, { error: 'external optimizer callback is closing' })\n      return\n    }\n\n    const controller = new AbortController()\n    const abortRequest = (): void => {\n      request.destroy()\n      response.destroy()\n    }\n    activeControllers.add(controller)\n    controller.signal.addEventListener('abort', abortRequest, { once: true })\n\n    let handler!: Promise<void>\n    handler = handleCallback(\n      request,\n      response,\n      controller.signal,\n      args,\n      limits,\n      () => {\n        const accepted = args.acceptEvaluation ? args.acceptEvaluation() : evaluations + 1\n        if (accepted === undefined) return undefined\n        if (!Number.isSafeInteger(accepted) || accepted <= 0) {\n          throw new Error('external optimizer callback: invalid accepted evaluation count')\n        }\n        if (accepted > args.maxEvaluations) return undefined\n        evaluations += 1\n        return accepted\n      },\n      (observation) => {\n        if (!args.observe) return\n        args.observe({ ...observation, sequence: ++observationSequence })\n      },\n      proposedCandidateHashes,\n    ).finally(() => {\n      controller.signal.removeEventListener('abort', abortRequest)\n      activeControllers.delete(controller)\n      activeHandlers.delete(handler)\n    })\n    activeHandlers.add(handler)\n    void handler.catch(() => undefined)\n  })\n  const port = await listenLocal(server)\n  const close = (): Promise<void> => {\n    closePromise ??= closeCallbackServer()\n    return closePromise\n  }\n  const onAbort = (): void => {\n    void close().catch(() => undefined)\n  }\n  args.signal?.addEventListener('abort', onAbort, { once: true })\n  if (args.signal?.aborted) onAbort()\n  return {\n    url: `http://127.0.0.1:${port}/evaluate`,\n    token: args.token,\n    evaluations: () => evaluations,\n    close,\n  }\n\n  async function closeCallbackServer(): Promise<void> {\n    args.signal?.removeEventListener('abort', onAbort)\n    accepting = false\n    const closingServer = closeServer(server)\n    server.closeIdleConnections?.()\n    for (const controller of activeControllers) controller.abort()\n    const [serverResult] = await Promise.allSettled([\n      closingServer,\n      waitForActiveHandlers(activeHandlers),\n    ])\n    if (activeControllers.size !== 0 || activeHandlers.size !== 0) {\n      throw new Error('external optimizer callback closed with active request work')\n    }\n    if (serverResult?.status === 'rejected') throw serverResult.reason\n  }\n}\n\nasync function handleCallback<TResponse>(\n  request: IncomingMessage,\n  response: ServerResponse,\n  signal: AbortSignal,\n  args: {\n    token: string\n    maxEvaluations: number\n    acceptEvaluation?: () => number | undefined\n    evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<TResponse>\n    observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  },\n  limits: ExternalOptimizerCallbackLimits,\n  nextEvaluation: () => number | undefined,\n  observe: (observation: UnsequencedObservation) => void,\n  proposedCandidateHashes: Set<string>,\n): Promise<void> {\n  try {\n    if (request.method !== 'POST' || request.url !== '/evaluate') {\n      sendJsonIfOpen(response, 404, { error: 'not found' })\n      return\n    }\n    if (request.headers.authorization !== `Bearer ${args.token}`) {\n      sendJsonIfOpen(response, 401, { error: 'unauthorized' })\n      return\n    }\n    let body: unknown\n    try {\n      body = await readJson(request, limits.maxRequestBytes)\n    } catch {\n      observe({ kind: 'refusal', reason: 'invalid-request' })\n      sendJsonIfOpen(response, 400, { error: 'request body must be bounded valid JSON' })\n      return\n    }\n    if (\n      !isRecord(body) ||\n      !isExternalTextCandidate(body.candidate) ||\n      typeof body.exampleId !== 'string'\n    ) {\n      observe({ kind: 'refusal', reason: 'invalid-request' })\n      sendJsonIfOpen(response, 400, { error: 'candidate and exampleId are required strings' })\n      return\n    }\n    const candidate = cloneCandidate(body.candidate)\n    const candidateHash = contentHash({ kind: 'external-text-candidate', candidate })\n    if (!proposedCandidateHashes.has(candidateHash)) {\n      observe({ kind: 'proposal', candidate, candidateHash })\n      proposedCandidateHashes.add(candidateHash)\n    }\n    const count = nextEvaluation()\n    if (count === undefined) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-limit',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 429, { error: 'evaluation limit reached' })\n      return\n    }\n    let result: TResponse\n    try {\n      result = await args.evaluate({ candidate, exampleId: body.exampleId }, signal)\n    } catch (error) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      // The thrown detail is the only diagnostic for a failed evaluation —\n      // an opaque 500 costs the caller a blind debugging round.\n      sendJsonIfOpen(response, 500, {\n        error: `evaluation failed: ${String(error).slice(0, 400)}`,\n      })\n      return\n    }\n    let encoded: string\n    try {\n      encoded = encodeJsonResponse(result)\n    } catch {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 500, { error: 'evaluation response must be valid JSON' })\n      return\n    }\n    if (Buffer.byteLength(encoded) > limits.maxResponseBytes) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 413, { error: 'evaluation response too large' })\n      return\n    }\n    observe({\n      kind: 'evaluation',\n      candidate,\n      candidateHash,\n      exampleId: body.exampleId,\n      evaluationNumber: count,\n      response: structuredClone(result),\n    })\n    sendEncodedJsonIfOpen(response, 200, encoded)\n  } catch {\n    sendJsonIfOpen(response, 500, { error: 'evaluation failed' })\n  }\n}\n\nasync function waitForActiveHandlers(activeHandlers: Set<Promise<void>>): Promise<void> {\n  while (activeHandlers.size > 0) {\n    await Promise.allSettled([...activeHandlers])\n  }\n}\n\nfunction sendJsonIfOpen(response: ServerResponse, status: number, body: unknown): void {\n  if (response.destroyed || response.writableEnded) return\n  sendJson(response, status, body)\n}\n\nfunction readJson(request: IncomingMessage, maxRequestBytes: number): Promise<unknown> {\n  return new Promise((resolvePromise, reject) => {\n    let size = 0\n    const chunks: Buffer[] = []\n    request.on('data', (chunk: Buffer) => {\n      size += chunk.length\n      if (size > maxRequestBytes) {\n        reject(new Error('callback body too large'))\n        request.destroy()\n        return\n      }\n      chunks.push(chunk)\n    })\n    request.on('error', reject)\n    request.on('end', () => {\n      try {\n        resolvePromise(JSON.parse(Buffer.concat(chunks).toString('utf8')))\n      } catch (error) {\n        reject(error)\n      }\n    })\n  })\n}\n\nfunction encodeJsonResponse(value: unknown): string {\n  const encoded = JSON.stringify(value)\n  if (encoded === undefined) throw new Error('evaluation response must be JSON-serializable')\n  return encoded\n}\n\nfunction sendEncodedJsonIfOpen(response: ServerResponse, status: number, encoded: string): void {\n  if (response.destroyed || response.writableEnded) return\n  response.writeHead(status, {\n    'content-type': 'application/json; charset=utf-8',\n    'content-length': String(Buffer.byteLength(encoded)),\n  })\n  response.end(encoded)\n}\n\nfunction assertCallbackConfig(args: {\n  token: string\n  maxEvaluations: number\n  acceptEvaluation?: () => number | undefined\n  evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<unknown>\n  observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  limits?: Partial<ExternalOptimizerCallbackLimits>\n  signal?: AbortSignal\n}): void {\n  if (typeof args.token !== 'string' || !args.token.trim()) {\n    throw new Error('external optimizer callback: token must be non-empty')\n  }\n  if (!Number.isSafeInteger(args.maxEvaluations) || args.maxEvaluations <= 0) {\n    throw new Error('external optimizer callback: maxEvaluations must be a positive safe integer')\n  }\n  if (args.acceptEvaluation !== undefined && typeof args.acceptEvaluation !== 'function') {\n    throw new Error('external optimizer callback: acceptEvaluation must be a function')\n  }\n  if (typeof args.evaluate !== 'function') {\n    throw new Error('external optimizer callback: evaluate must be a function')\n  }\n  if (args.observe !== undefined && typeof args.observe !== 'function') {\n    throw new Error('external optimizer callback: observe must be a function')\n  }\n}\n\nfunction cloneCandidate(candidate: ExternalTextCandidate): ExternalTextCandidate {\n  return typeof candidate === 'string' ? candidate : { ...candidate }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsCA,SAAS,gBAAgB,MAAoB;CAC3C,MAAM,cAAc,oBAAoB,EAAE,UAAU,KAAK,CAAC;CAC1D,IAAI,aAAa,MAAM,iBAAiB,MAAM,WAAW;AAC3D;AAEA,SAAS,iBAAiB,MAAc,aAA+C;CACrF,IAAI,YAAY,WAAW,YACzB,uBAAO,IAAI,MACT,oDAAoD,KAAK,6BAC3D;CAEF,uBAAO,IAAI,MACT,oCAAoC,YAAY,OAAO,IAAI,IAAI,KAAK,oDACtE;AACF;;;;;;AAOA,SAAgB,qBAAqB,MAA2C;CAC9E,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,GACvC,MAAM,IAAI,MAAM,gDAAgD;CAClE,KAAK,MAAM,QAAQ,KAAK,aAAa,CAAC,GAAG,gBAAgB,IAAI;CAC7D,MAAM,cAAc,yBAAyB;EAC3C,UAAU,KAAK;EACf;CACF,CAAC;CACD,IAAI,CAAC,YAAY,UAAU,MAAM,iBAAiB,KAAK,UAAU,WAAW;CAC5E,MAAM,gBAAgB,KAAK,iBAAiB;CAC5C,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,IAAI,eAAe,QAAQ,IAAI,QAAQ,OAAO;EAC9C,IAAI;GACF,YAAY,KAAK,QAAQ;EAC3B,QAAQ,CAER;CACF;CACA,IAAI;EACF,KAAK,MAAM,QAAQ,KAAK,aAAa,CAAC,GAAG,gBAAgB,IAAI;CAC/D,SAAS,OAAO;EACd,QAAQ;EACR,MAAM;CACR;CACA,IAAI,eAAe,QAAQ,GAAG,QAAQ,OAAO;CAC7C,OAAO,EAAE,QAAQ;AACnB;;;ACrEA,eAAsB,+BAA0C,MASzB;CACrC,qBAAqB,IAAI;CACzB,MAAM,SAAS,uCAAuC,KAAK,MAAM;CACjE,KAAK,QAAQ,eAAe;CAC5B,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI;CACJ,MAAM,oCAAoB,IAAI,IAAqB;CACnD,MAAM,iCAAiB,IAAI,IAAmB;CAC9C,MAAM,0CAA0B,IAAI,IAAY;CAChD,IAAI,sBAAsB;CAC1B,MAAM,SAAS,cAAc,SAAS,aAAa;EACjD,IAAI,CAAC,WAAW;GACd,eAAe,UAAU,KAAK,EAAE,OAAO,yCAAyC,CAAC;GACjF;EACF;EAEA,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,qBAA2B;GAC/B,QAAQ,QAAQ;GAChB,SAAS,QAAQ;EACnB;EACA,kBAAkB,IAAI,UAAU;EAChC,WAAW,OAAO,iBAAiB,SAAS,cAAc,EAAE,MAAM,KAAK,CAAC;EAExE,IAAI;EACJ,UAAU,eACR,SACA,UACA,WAAW,QACX,MACA,cACM;GACJ,MAAM,WAAW,KAAK,mBAAmB,KAAK,iBAAiB,IAAI,cAAc;GACjF,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;GACnC,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,YAAY,GACjD,MAAM,IAAI,MAAM,gEAAgE;GAElF,IAAI,WAAW,KAAK,gBAAgB,OAAO,KAAA;GAC3C,eAAe;GACf,OAAO;EACT,IACC,gBAAgB;GACf,IAAI,CAAC,KAAK,SAAS;GACnB,KAAK,QAAQ;IAAE,GAAG;IAAa,UAAU,EAAE;GAAoB,CAAC;EAClE,GACA,uBACF,CAAC,CAAC,cAAc;GACd,WAAW,OAAO,oBAAoB,SAAS,YAAY;GAC3D,kBAAkB,OAAO,UAAU;GACnC,eAAe,OAAO,OAAO;EAC/B,CAAC;EACD,eAAe,IAAI,OAAO;EAC1B,QAAa,YAAY,KAAA,CAAS;CACpC,CAAC;CACD,MAAM,OAAO,MAAM,YAAY,MAAM;CACrC,MAAM,cAA6B;EACjC,iBAAiB,oBAAoB;EACrC,OAAO;CACT;CACA,MAAM,gBAAsB;EAC1B,MAAW,CAAC,CAAC,YAAY,KAAA,CAAS;CACpC;CACA,KAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC9D,IAAI,KAAK,QAAQ,SAAS,QAAQ;CAClC,OAAO;EACL,KAAK,oBAAoB,KAAK;EAC9B,OAAO,KAAK;EACZ,mBAAmB;EACnB;CACF;CAEA,eAAe,sBAAqC;EAClD,KAAK,QAAQ,oBAAoB,SAAS,OAAO;EACjD,YAAY;EACZ,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,uBAAuB;EAC9B,KAAK,MAAM,cAAc,mBAAmB,WAAW,MAAM;EAC7D,MAAM,CAAC,gBAAgB,MAAM,QAAQ,WAAW,CAC9C,eACA,sBAAsB,cAAc,CACtC,CAAC;EACD,IAAI,kBAAkB,SAAS,KAAK,eAAe,SAAS,GAC1D,MAAM,IAAI,MAAM,6DAA6D;EAE/E,IAAI,cAAc,WAAW,YAAY,MAAM,aAAa;CAC9D;AACF;AAEA,eAAe,eACb,SACA,UACA,QACA,MAOA,QACA,gBACA,SACA,yBACe;CACf,IAAI;EACF,IAAI,QAAQ,WAAW,UAAU,QAAQ,QAAQ,aAAa;GAC5D,eAAe,UAAU,KAAK,EAAE,OAAO,YAAY,CAAC;GACpD;EACF;EACA,IAAI,QAAQ,QAAQ,kBAAkB,UAAU,KAAK,SAAS;GAC5D,eAAe,UAAU,KAAK,EAAE,OAAO,eAAe,CAAC;GACvD;EACF;EACA,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,SAAS,SAAS,OAAO,eAAe;EACvD,QAAQ;GACN,QAAQ;IAAE,MAAM;IAAW,QAAQ;GAAkB,CAAC;GACtD,eAAe,UAAU,KAAK,EAAE,OAAO,0CAA0C,CAAC;GAClF;EACF;EACA,IACE,CAAC,SAAS,IAAI,KACd,CAAC,wBAAwB,KAAK,SAAS,KACvC,OAAO,KAAK,cAAc,UAC1B;GACA,QAAQ;IAAE,MAAM;IAAW,QAAQ;GAAkB,CAAC;GACtD,eAAe,UAAU,KAAK,EAAE,OAAO,+CAA+C,CAAC;GACvF;EACF;EACA,MAAM,YAAY,eAAe,KAAK,SAAS;EAC/C,MAAM,gBAAgB,YAAY;GAAE,MAAM;GAA2B;EAAU,CAAC;EAChF,IAAI,CAAC,wBAAwB,IAAI,aAAa,GAAG;GAC/C,QAAQ;IAAE,MAAM;IAAY;IAAW;GAAc,CAAC;GACtD,wBAAwB,IAAI,aAAa;EAC3C;EACA,MAAM,QAAQ,eAAe;EAC7B,IAAI,UAAU,KAAA,GAAW;GACvB,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,2BAA2B,CAAC;GACnE;EACF;EACA,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,KAAK,SAAS;IAAE;IAAW,WAAW,KAAK;GAAU,GAAG,MAAM;EAC/E,SAAS,OAAO;GACd,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GAGD,eAAe,UAAU,KAAK,EAC5B,OAAO,sBAAsB,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,IACzD,CAAC;GACD;EACF;EACA,IAAI;EACJ,IAAI;GACF,UAAU,mBAAmB,MAAM;EACrC,QAAQ;GACN,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,yCAAyC,CAAC;GACjF;EACF;EACA,IAAI,OAAO,WAAW,OAAO,IAAI,OAAO,kBAAkB;GACxD,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,gCAAgC,CAAC;GACxE;EACF;EACA,QAAQ;GACN,MAAM;GACN;GACA;GACA,WAAW,KAAK;GAChB,kBAAkB;GAClB,UAAU,gBAAgB,MAAM;EAClC,CAAC;EACD,sBAAsB,UAAU,KAAK,OAAO;CAC9C,QAAQ;EACN,eAAe,UAAU,KAAK,EAAE,OAAO,oBAAoB,CAAC;CAC9D;AACF;AAEA,eAAe,sBAAsB,gBAAmD;CACtF,OAAO,eAAe,OAAO,GAC3B,MAAM,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC;AAEhD;AAEA,SAAS,eAAe,UAA0B,QAAgB,MAAqB;CACrF,IAAI,SAAS,aAAa,SAAS,eAAe;CAClD,SAAS,UAAU,QAAQ,IAAI;AACjC;AAEA,SAAS,SAAS,SAA0B,iBAA2C;CACrF,OAAO,IAAI,SAAS,gBAAgB,WAAW;EAC7C,IAAI,OAAO;EACX,MAAM,SAAmB,CAAC;EAC1B,QAAQ,GAAG,SAAS,UAAkB;GACpC,QAAQ,MAAM;GACd,IAAI,OAAO,iBAAiB;IAC1B,uBAAO,IAAI,MAAM,yBAAyB,CAAC;IAC3C,QAAQ,QAAQ;IAChB;GACF;GACA,OAAO,KAAK,KAAK;EACnB,CAAC;EACD,QAAQ,GAAG,SAAS,MAAM;EAC1B,QAAQ,GAAG,aAAa;GACtB,IAAI;IACF,eAAe,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC;GACnE,SAAS,OAAO;IACd,OAAO,KAAK;GACd;EACF,CAAC;CACH,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAwB;CAClD,MAAM,UAAU,KAAK,UAAU,KAAK;CACpC,IAAI,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,+CAA+C;CAC1F,OAAO;AACT;AAEA,SAAS,sBAAsB,UAA0B,QAAgB,SAAuB;CAC9F,IAAI,SAAS,aAAa,SAAS,eAAe;CAClD,SAAS,UAAU,QAAQ;EACzB,gBAAgB;EAChB,kBAAkB,OAAO,OAAO,WAAW,OAAO,CAAC;CACrD,CAAC;CACD,SAAS,IAAI,OAAO;AACtB;AAEA,SAAS,qBAAqB,MAQrB;CACP,IAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,MAAM,KAAK,GACrD,MAAM,IAAI,MAAM,sDAAsD;CAExE,IAAI,CAAC,OAAO,cAAc,KAAK,cAAc,KAAK,KAAK,kBAAkB,GACvE,MAAM,IAAI,MAAM,6EAA6E;CAE/F,IAAI,KAAK,qBAAqB,KAAA,KAAa,OAAO,KAAK,qBAAqB,YAC1E,MAAM,IAAI,MAAM,kEAAkE;CAEpF,IAAI,OAAO,KAAK,aAAa,YAC3B,MAAM,IAAI,MAAM,0DAA0D;CAE5E,IAAI,KAAK,YAAY,KAAA,KAAa,OAAO,KAAK,YAAY,YACxD,MAAM,IAAI,MAAM,yDAAyD;AAE7E;AAEA,SAAS,eAAe,WAAyD;CAC/E,OAAO,OAAO,cAAc,WAAW,YAAY,EAAE,GAAG,UAAU;AACpE"}
+{"version":3,"file":"external-optimizer-process-Bhmzngf-.js","names":[],"sources":["../src/campaign/single-run-lock.ts","../src/campaign/external-optimizer-callback.ts"],"sourcesContent":["/**\n * Single-run lock for evaluations that share one mutable environment.\n *\n * Two concurrent runs against a shared stateful gym silently corrupt each\n * other: each resets/mutates environment state mid-cell of the other, and\n * every score from both becomes garbage that LOOKS like worker variance\n * (agent-lab R357 burned hours on flip-flopping scores before tracing them\n * to exactly this). The fix is a pid lockfile: refuse to start while a live\n * holder exists, reclaim stale locks whose pid is gone, release only if the\n * lock is still ours.\n *\n * `alsoCheck` exists because independent runners can guard the same shared\n * resource with differently named lockfiles; a runner must respect all of\n * them even though it writes only its own.\n */\n\nimport {\n  type AtomicFileLockUnavailable,\n  probeAtomicFileLock,\n  tryAcquireAtomicFileLock,\n} from '../ledger-core/atomic-file-lock'\n\nexport interface SingleRunLockOptions {\n  /** Lockfile this runner writes (and checks). */\n  readonly lockPath: string\n  /** Other runners' lockfiles guarding the same resource; checked, never written. */\n  readonly alsoCheck?: readonly string[]\n  /** Install a process 'exit' hook that releases the lock. Default true. */\n  readonly releaseOnExit?: boolean\n  /** Owner pid recorded in the lockfile metadata. Default process.pid. */\n  readonly pid?: number\n}\n\nexport interface SingleRunLock {\n  /** Remove the lockfile if this process still owns it. Idempotent. */\n  release(): void\n}\n\nfunction assertAvailable(path: string): void {\n  const unavailable = probeAtomicFileLock({ lockPath: path })\n  if (unavailable) throw unavailableError(path, unavailable)\n}\n\nfunction unavailableError(path: string, unavailable: AtomicFileLockUnavailable): Error {\n  if (unavailable.reason === 'recovery') {\n    return new Error(\n      `single-run lock recovery is already in progress (${path}); refusing a concurrent run`,\n    )\n  }\n  return new Error(\n    `single-run lock held by live pid ${unavailable.holder.pid} (${path}); refusing a concurrent run on the shared resource`,\n  )\n}\n\n/**\n * Acquire the lock or throw naming the live holder. A stale lock (holder pid\n * no longer running) is reclaimed by one contender. An interrupted reclaim\n * leaves a marker that fails closed instead of admitting overlapping runs.\n */\nexport function acquireSingleRunLock(opts: SingleRunLockOptions): SingleRunLock {\n  const pid = opts.pid ?? process.pid\n  if (!Number.isSafeInteger(pid) || pid <= 0)\n    throw new Error('single-run lock pid must be a positive integer')\n  for (const path of opts.alsoCheck ?? []) assertAvailable(path)\n  const acquisition = tryAcquireAtomicFileLock({\n    lockPath: opts.lockPath,\n    pid,\n  })\n  if (!acquisition.acquired) throw unavailableError(opts.lockPath, acquisition)\n  const releaseOnExit = opts.releaseOnExit ?? true\n  let released = false\n  const release = (): void => {\n    if (released) return\n    released = true\n    if (releaseOnExit) process.off('exit', release)\n    try {\n      acquisition.lock.release()\n    } catch {\n      // release is best-effort; a leftover stale lock is reclaimed on next acquire\n    }\n  }\n  try {\n    for (const path of opts.alsoCheck ?? []) assertAvailable(path)\n  } catch (error) {\n    release()\n    throw error\n  }\n  if (releaseOnExit) process.on('exit', release)\n  return { release }\n}\n","import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'\nimport { contentHash } from '../verdict-cache'\nimport {\n  type ExternalOptimizerCallback,\n  type ExternalOptimizerCallbackLimits,\n  type ExternalOptimizerEvaluationObservation,\n  type ExternalTextCandidate,\n  type ExternalTextEvaluationRequest,\n  isExternalTextCandidate,\n  isRecord,\n  resolveExternalOptimizerCallbackLimits,\n} from './external-optimizer-contracts'\nimport { closeServer, listenLocal, sendJson } from './external-optimizer-http'\n\ntype UnsequencedObservation = ExternalOptimizerEvaluationObservation extends infer T\n  ? T extends ExternalOptimizerEvaluationObservation\n    ? Omit<T, 'sequence'>\n    : never\n  : never\n\nexport async function startExternalOptimizerCallback<TResponse>(args: {\n  token: string\n  maxEvaluations: number\n  acceptEvaluation?: () => number | undefined\n  evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<TResponse>\n  observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  /** Loopback JSON byte limits. Omitted fields use finite defaults. */\n  limits?: Partial<ExternalOptimizerCallbackLimits>\n  signal?: AbortSignal\n}): Promise<ExternalOptimizerCallback> {\n  assertCallbackConfig(args)\n  const limits = resolveExternalOptimizerCallbackLimits(args.limits)\n  args.signal?.throwIfAborted()\n  let evaluations = 0\n  let accepting = true\n  let closePromise: Promise<void> | undefined\n  const activeControllers = new Set<AbortController>()\n  const activeHandlers = new Set<Promise<void>>()\n  const proposedCandidateHashes = new Set<string>()\n  let observationSequence = 0\n  const server = createServer((request, response) => {\n    if (!accepting) {\n      sendJsonIfOpen(response, 503, { error: 'external optimizer callback is closing' })\n      return\n    }\n\n    const controller = new AbortController()\n    const abortRequest = (): void => {\n      request.destroy()\n      response.destroy()\n    }\n    activeControllers.add(controller)\n    controller.signal.addEventListener('abort', abortRequest, { once: true })\n\n    let handler!: Promise<void>\n    handler = handleCallback(\n      request,\n      response,\n      controller.signal,\n      args,\n      limits,\n      () => {\n        const accepted = args.acceptEvaluation ? args.acceptEvaluation() : evaluations + 1\n        if (accepted === undefined) return undefined\n        if (!Number.isSafeInteger(accepted) || accepted <= 0) {\n          throw new Error('external optimizer callback: invalid accepted evaluation count')\n        }\n        if (accepted > args.maxEvaluations) return undefined\n        evaluations += 1\n        return accepted\n      },\n      (observation) => {\n        if (!args.observe) return\n        args.observe({ ...observation, sequence: ++observationSequence })\n      },\n      proposedCandidateHashes,\n    ).finally(() => {\n      controller.signal.removeEventListener('abort', abortRequest)\n      activeControllers.delete(controller)\n      activeHandlers.delete(handler)\n    })\n    activeHandlers.add(handler)\n    void handler.catch(() => undefined)\n  })\n  const port = await listenLocal(server)\n  const close = (): Promise<void> => {\n    closePromise ??= closeCallbackServer()\n    return closePromise\n  }\n  const onAbort = (): void => {\n    void close().catch(() => undefined)\n  }\n  args.signal?.addEventListener('abort', onAbort, { once: true })\n  if (args.signal?.aborted) onAbort()\n  return {\n    url: `http://127.0.0.1:${port}/evaluate`,\n    token: args.token,\n    evaluations: () => evaluations,\n    close,\n  }\n\n  async function closeCallbackServer(): Promise<void> {\n    args.signal?.removeEventListener('abort', onAbort)\n    accepting = false\n    const closingServer = closeServer(server)\n    server.closeIdleConnections?.()\n    for (const controller of activeControllers) controller.abort()\n    const [serverResult] = await Promise.allSettled([\n      closingServer,\n      waitForActiveHandlers(activeHandlers),\n    ])\n    if (activeControllers.size !== 0 || activeHandlers.size !== 0) {\n      throw new Error('external optimizer callback closed with active request work')\n    }\n    if (serverResult?.status === 'rejected') throw serverResult.reason\n  }\n}\n\nasync function handleCallback<TResponse>(\n  request: IncomingMessage,\n  response: ServerResponse,\n  signal: AbortSignal,\n  args: {\n    token: string\n    maxEvaluations: number\n    acceptEvaluation?: () => number | undefined\n    evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<TResponse>\n    observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  },\n  limits: ExternalOptimizerCallbackLimits,\n  nextEvaluation: () => number | undefined,\n  observe: (observation: UnsequencedObservation) => void,\n  proposedCandidateHashes: Set<string>,\n): Promise<void> {\n  try {\n    if (request.method !== 'POST' || request.url !== '/evaluate') {\n      sendJsonIfOpen(response, 404, { error: 'not found' })\n      return\n    }\n    if (request.headers.authorization !== `Bearer ${args.token}`) {\n      sendJsonIfOpen(response, 401, { error: 'unauthorized' })\n      return\n    }\n    let body: unknown\n    try {\n      body = await readJson(request, limits.maxRequestBytes)\n    } catch {\n      observe({ kind: 'refusal', reason: 'invalid-request' })\n      sendJsonIfOpen(response, 400, { error: 'request body must be bounded valid JSON' })\n      return\n    }\n    if (\n      !isRecord(body) ||\n      !isExternalTextCandidate(body.candidate) ||\n      typeof body.exampleId !== 'string'\n    ) {\n      observe({ kind: 'refusal', reason: 'invalid-request' })\n      sendJsonIfOpen(response, 400, { error: 'candidate and exampleId are required strings' })\n      return\n    }\n    const candidate = cloneCandidate(body.candidate)\n    const candidateHash = contentHash({ kind: 'external-text-candidate', candidate })\n    if (!proposedCandidateHashes.has(candidateHash)) {\n      observe({ kind: 'proposal', candidate, candidateHash })\n      proposedCandidateHashes.add(candidateHash)\n    }\n    const count = nextEvaluation()\n    if (count === undefined) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-limit',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 429, { error: 'evaluation limit reached' })\n      return\n    }\n    let result: TResponse\n    try {\n      result = await args.evaluate({ candidate, exampleId: body.exampleId }, signal)\n    } catch (error) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      // The thrown detail is the only diagnostic for a failed evaluation —\n      // an opaque 500 costs the caller a blind debugging round.\n      sendJsonIfOpen(response, 500, {\n        error: `evaluation failed: ${String(error).slice(0, 400)}`,\n      })\n      return\n    }\n    let encoded: string\n    try {\n      encoded = encodeJsonResponse(result)\n    } catch {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 500, { error: 'evaluation response must be valid JSON' })\n      return\n    }\n    if (Buffer.byteLength(encoded) > limits.maxResponseBytes) {\n      observe({\n        kind: 'refusal',\n        reason: 'evaluation-failed',\n        candidate,\n        candidateHash,\n        exampleId: body.exampleId,\n      })\n      sendJsonIfOpen(response, 413, { error: 'evaluation response too large' })\n      return\n    }\n    observe({\n      kind: 'evaluation',\n      candidate,\n      candidateHash,\n      exampleId: body.exampleId,\n      evaluationNumber: count,\n      response: structuredClone(result),\n    })\n    sendEncodedJsonIfOpen(response, 200, encoded)\n  } catch {\n    sendJsonIfOpen(response, 500, { error: 'evaluation failed' })\n  }\n}\n\nasync function waitForActiveHandlers(activeHandlers: Set<Promise<void>>): Promise<void> {\n  while (activeHandlers.size > 0) {\n    await Promise.allSettled([...activeHandlers])\n  }\n}\n\nfunction sendJsonIfOpen(response: ServerResponse, status: number, body: unknown): void {\n  if (response.destroyed || response.writableEnded) return\n  sendJson(response, status, body)\n}\n\nfunction readJson(request: IncomingMessage, maxRequestBytes: number): Promise<unknown> {\n  return new Promise((resolvePromise, reject) => {\n    let size = 0\n    const chunks: Buffer[] = []\n    request.on('data', (chunk: Buffer) => {\n      size += chunk.length\n      if (size > maxRequestBytes) {\n        reject(new Error('callback body too large'))\n        request.destroy()\n        return\n      }\n      chunks.push(chunk)\n    })\n    request.on('error', reject)\n    request.on('end', () => {\n      try {\n        resolvePromise(JSON.parse(Buffer.concat(chunks).toString('utf8')))\n      } catch (error) {\n        reject(error)\n      }\n    })\n  })\n}\n\nfunction encodeJsonResponse(value: unknown): string {\n  const encoded = JSON.stringify(value)\n  if (encoded === undefined) throw new Error('evaluation response must be JSON-serializable')\n  return encoded\n}\n\nfunction sendEncodedJsonIfOpen(response: ServerResponse, status: number, encoded: string): void {\n  if (response.destroyed || response.writableEnded) return\n  response.writeHead(status, {\n    'content-type': 'application/json; charset=utf-8',\n    'content-length': String(Buffer.byteLength(encoded)),\n  })\n  response.end(encoded)\n}\n\nfunction assertCallbackConfig(args: {\n  token: string\n  maxEvaluations: number\n  acceptEvaluation?: () => number | undefined\n  evaluate: (request: ExternalTextEvaluationRequest, signal: AbortSignal) => Promise<unknown>\n  observe?: (observation: ExternalOptimizerEvaluationObservation) => void\n  limits?: Partial<ExternalOptimizerCallbackLimits>\n  signal?: AbortSignal\n}): void {\n  if (typeof args.token !== 'string' || !args.token.trim()) {\n    throw new Error('external optimizer callback: token must be non-empty')\n  }\n  if (!Number.isSafeInteger(args.maxEvaluations) || args.maxEvaluations <= 0) {\n    throw new Error('external optimizer callback: maxEvaluations must be a positive safe integer')\n  }\n  if (args.acceptEvaluation !== undefined && typeof args.acceptEvaluation !== 'function') {\n    throw new Error('external optimizer callback: acceptEvaluation must be a function')\n  }\n  if (typeof args.evaluate !== 'function') {\n    throw new Error('external optimizer callback: evaluate must be a function')\n  }\n  if (args.observe !== undefined && typeof args.observe !== 'function') {\n    throw new Error('external optimizer callback: observe must be a function')\n  }\n}\n\nfunction cloneCandidate(candidate: ExternalTextCandidate): ExternalTextCandidate {\n  return typeof candidate === 'string' ? candidate : { ...candidate }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAsCA,SAAS,gBAAgB,MAAoB;CAC3C,MAAM,cAAc,oBAAoB,EAAE,UAAU,KAAK,CAAC;CAC1D,IAAI,aAAa,MAAM,iBAAiB,MAAM,WAAW;AAC3D;AAEA,SAAS,iBAAiB,MAAc,aAA+C;CACrF,IAAI,YAAY,WAAW,YACzB,uBAAO,IAAI,MACT,oDAAoD,KAAK,6BAC3D;CAEF,uBAAO,IAAI,MACT,oCAAoC,YAAY,OAAO,IAAI,IAAI,KAAK,oDACtE;AACF;;;;;;AAOA,SAAgB,qBAAqB,MAA2C;CAC9E,MAAM,MAAM,KAAK,OAAO,QAAQ;CAChC,IAAI,CAAC,OAAO,cAAc,GAAG,KAAK,OAAO,GACvC,MAAM,IAAI,MAAM,gDAAgD;CAClE,KAAK,MAAM,QAAQ,KAAK,aAAa,CAAC,GAAG,gBAAgB,IAAI;CAC7D,MAAM,cAAc,yBAAyB;EAC3C,UAAU,KAAK;EACf;CACF,CAAC;CACD,IAAI,CAAC,YAAY,UAAU,MAAM,iBAAiB,KAAK,UAAU,WAAW;CAC5E,MAAM,gBAAgB,KAAK,iBAAiB;CAC5C,IAAI,WAAW;CACf,MAAM,gBAAsB;EAC1B,IAAI,UAAU;EACd,WAAW;EACX,IAAI,eAAe,QAAQ,IAAI,QAAQ,OAAO;EAC9C,IAAI;GACF,YAAY,KAAK,QAAQ;EAC3B,QAAQ,CAER;CACF;CACA,IAAI;EACF,KAAK,MAAM,QAAQ,KAAK,aAAa,CAAC,GAAG,gBAAgB,IAAI;CAC/D,SAAS,OAAO;EACd,QAAQ;EACR,MAAM;CACR;CACA,IAAI,eAAe,QAAQ,GAAG,QAAQ,OAAO;CAC7C,OAAO,EAAE,QAAQ;AACnB;;;ACrEA,eAAsB,+BAA0C,MASzB;CACrC,qBAAqB,IAAI;CACzB,MAAM,SAAS,uCAAuC,KAAK,MAAM;CACjE,KAAK,QAAQ,eAAe;CAC5B,IAAI,cAAc;CAClB,IAAI,YAAY;CAChB,IAAI;CACJ,MAAM,oCAAoB,IAAI,IAAqB;CACnD,MAAM,iCAAiB,IAAI,IAAmB;CAC9C,MAAM,0CAA0B,IAAI,IAAY;CAChD,IAAI,sBAAsB;CAC1B,MAAM,SAAS,cAAc,SAAS,aAAa;EACjD,IAAI,CAAC,WAAW;GACd,eAAe,UAAU,KAAK,EAAE,OAAO,yCAAyC,CAAC;GACjF;EACF;EAEA,MAAM,aAAa,IAAI,gBAAgB;EACvC,MAAM,qBAA2B;GAC/B,QAAQ,QAAQ;GAChB,SAAS,QAAQ;EACnB;EACA,kBAAkB,IAAI,UAAU;EAChC,WAAW,OAAO,iBAAiB,SAAS,cAAc,EAAE,MAAM,KAAK,CAAC;EAExE,IAAI;EACJ,UAAU,eACR,SACA,UACA,WAAW,QACX,MACA,cACM;GACJ,MAAM,WAAW,KAAK,mBAAmB,KAAK,iBAAiB,IAAI,cAAc;GACjF,IAAI,aAAa,KAAA,GAAW,OAAO,KAAA;GACnC,IAAI,CAAC,OAAO,cAAc,QAAQ,KAAK,YAAY,GACjD,MAAM,IAAI,MAAM,gEAAgE;GAElF,IAAI,WAAW,KAAK,gBAAgB,OAAO,KAAA;GAC3C,eAAe;GACf,OAAO;EACT,IACC,gBAAgB;GACf,IAAI,CAAC,KAAK,SAAS;GACnB,KAAK,QAAQ;IAAE,GAAG;IAAa,UAAU,EAAE;GAAoB,CAAC;EAClE,GACA,uBACF,CAAC,CAAC,cAAc;GACd,WAAW,OAAO,oBAAoB,SAAS,YAAY;GAC3D,kBAAkB,OAAO,UAAU;GACnC,eAAe,OAAO,OAAO;EAC/B,CAAC;EACD,eAAe,IAAI,OAAO;EAC1B,QAAa,YAAY,KAAA,CAAS;CACpC,CAAC;CACD,MAAM,OAAO,MAAM,YAAY,MAAM;CACrC,MAAM,cAA6B;EACjC,iBAAiB,oBAAoB;EACrC,OAAO;CACT;CACA,MAAM,gBAAsB;EAC1B,MAAW,CAAC,CAAC,YAAY,KAAA,CAAS;CACpC;CACA,KAAK,QAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;CAC9D,IAAI,KAAK,QAAQ,SAAS,QAAQ;CAClC,OAAO;EACL,KAAK,oBAAoB,KAAK;EAC9B,OAAO,KAAK;EACZ,mBAAmB;EACnB;CACF;CAEA,eAAe,sBAAqC;EAClD,KAAK,QAAQ,oBAAoB,SAAS,OAAO;EACjD,YAAY;EACZ,MAAM,gBAAgB,YAAY,MAAM;EACxC,OAAO,uBAAuB;EAC9B,KAAK,MAAM,cAAc,mBAAmB,WAAW,MAAM;EAC7D,MAAM,CAAC,gBAAgB,MAAM,QAAQ,WAAW,CAC9C,eACA,sBAAsB,cAAc,CACtC,CAAC;EACD,IAAI,kBAAkB,SAAS,KAAK,eAAe,SAAS,GAC1D,MAAM,IAAI,MAAM,6DAA6D;EAE/E,IAAI,cAAc,WAAW,YAAY,MAAM,aAAa;CAC9D;AACF;AAEA,eAAe,eACb,SACA,UACA,QACA,MAOA,QACA,gBACA,SACA,yBACe;CACf,IAAI;EACF,IAAI,QAAQ,WAAW,UAAU,QAAQ,QAAQ,aAAa;GAC5D,eAAe,UAAU,KAAK,EAAE,OAAO,YAAY,CAAC;GACpD;EACF;EACA,IAAI,QAAQ,QAAQ,kBAAkB,UAAU,KAAK,SAAS;GAC5D,eAAe,UAAU,KAAK,EAAE,OAAO,eAAe,CAAC;GACvD;EACF;EACA,IAAI;EACJ,IAAI;GACF,OAAO,MAAM,SAAS,SAAS,OAAO,eAAe;EACvD,QAAQ;GACN,QAAQ;IAAE,MAAM;IAAW,QAAQ;GAAkB,CAAC;GACtD,eAAe,UAAU,KAAK,EAAE,OAAO,0CAA0C,CAAC;GAClF;EACF;EACA,IACE,CAAC,SAAS,IAAI,KACd,CAAC,wBAAwB,KAAK,SAAS,KACvC,OAAO,KAAK,cAAc,UAC1B;GACA,QAAQ;IAAE,MAAM;IAAW,QAAQ;GAAkB,CAAC;GACtD,eAAe,UAAU,KAAK,EAAE,OAAO,+CAA+C,CAAC;GACvF;EACF;EACA,MAAM,YAAY,eAAe,KAAK,SAAS;EAC/C,MAAM,gBAAgB,YAAY;GAAE,MAAM;GAA2B;EAAU,CAAC;EAChF,IAAI,CAAC,wBAAwB,IAAI,aAAa,GAAG;GAC/C,QAAQ;IAAE,MAAM;IAAY;IAAW;GAAc,CAAC;GACtD,wBAAwB,IAAI,aAAa;EAC3C;EACA,MAAM,QAAQ,eAAe;EAC7B,IAAI,UAAU,KAAA,GAAW;GACvB,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,2BAA2B,CAAC;GACnE;EACF;EACA,IAAI;EACJ,IAAI;GACF,SAAS,MAAM,KAAK,SAAS;IAAE;IAAW,WAAW,KAAK;GAAU,GAAG,MAAM;EAC/E,SAAS,OAAO;GACd,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GAGD,eAAe,UAAU,KAAK,EAC5B,OAAO,sBAAsB,OAAO,KAAK,CAAC,CAAC,MAAM,GAAG,GAAG,IACzD,CAAC;GACD;EACF;EACA,IAAI;EACJ,IAAI;GACF,UAAU,mBAAmB,MAAM;EACrC,QAAQ;GACN,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,yCAAyC,CAAC;GACjF;EACF;EACA,IAAI,OAAO,WAAW,OAAO,IAAI,OAAO,kBAAkB;GACxD,QAAQ;IACN,MAAM;IACN,QAAQ;IACR;IACA;IACA,WAAW,KAAK;GAClB,CAAC;GACD,eAAe,UAAU,KAAK,EAAE,OAAO,gCAAgC,CAAC;GACxE;EACF;EACA,QAAQ;GACN,MAAM;GACN;GACA;GACA,WAAW,KAAK;GAChB,kBAAkB;GAClB,UAAU,gBAAgB,MAAM;EAClC,CAAC;EACD,sBAAsB,UAAU,KAAK,OAAO;CAC9C,QAAQ;EACN,eAAe,UAAU,KAAK,EAAE,OAAO,oBAAoB,CAAC;CAC9D;AACF;AAEA,eAAe,sBAAsB,gBAAmD;CACtF,OAAO,eAAe,OAAO,GAC3B,MAAM,QAAQ,WAAW,CAAC,GAAG,cAAc,CAAC;AAEhD;AAEA,SAAS,eAAe,UAA0B,QAAgB,MAAqB;CACrF,IAAI,SAAS,aAAa,SAAS,eAAe;CAClD,SAAS,UAAU,QAAQ,IAAI;AACjC;AAEA,SAAS,SAAS,SAA0B,iBAA2C;CACrF,OAAO,IAAI,SAAS,gBAAgB,WAAW;EAC7C,IAAI,OAAO;EACX,MAAM,SAAmB,CAAC;EAC1B,QAAQ,GAAG,SAAS,UAAkB;GACpC,QAAQ,MAAM;GACd,IAAI,OAAO,iBAAiB;IAC1B,uBAAO,IAAI,MAAM,yBAAyB,CAAC;IAC3C,QAAQ,QAAQ;IAChB;GACF;GACA,OAAO,KAAK,KAAK;EACnB,CAAC;EACD,QAAQ,GAAG,SAAS,MAAM;EAC1B,QAAQ,GAAG,aAAa;GACtB,IAAI;IACF,eAAe,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC;GACnE,SAAS,OAAO;IACd,OAAO,KAAK;GACd;EACF,CAAC;CACH,CAAC;AACH;AAEA,SAAS,mBAAmB,OAAwB;CAClD,MAAM,UAAU,KAAK,UAAU,KAAK;CACpC,IAAI,YAAY,KAAA,GAAW,MAAM,IAAI,MAAM,+CAA+C;CAC1F,OAAO;AACT;AAEA,SAAS,sBAAsB,UAA0B,QAAgB,SAAuB;CAC9F,IAAI,SAAS,aAAa,SAAS,eAAe;CAClD,SAAS,UAAU,QAAQ;EACzB,gBAAgB;EAChB,kBAAkB,OAAO,OAAO,WAAW,OAAO,CAAC;CACrD,CAAC;CACD,SAAS,IAAI,OAAO;AACtB;AAEA,SAAS,qBAAqB,MAQrB;CACP,IAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,MAAM,KAAK,GACrD,MAAM,IAAI,MAAM,sDAAsD;CAExE,IAAI,CAAC,OAAO,cAAc,KAAK,cAAc,KAAK,KAAK,kBAAkB,GACvE,MAAM,IAAI,MAAM,6EAA6E;CAE/F,IAAI,KAAK,qBAAqB,KAAA,KAAa,OAAO,KAAK,qBAAqB,YAC1E,MAAM,IAAI,MAAM,kEAAkE;CAEpF,IAAI,OAAO,KAAK,aAAa,YAC3B,MAAM,IAAI,MAAM,0DAA0D;CAE5E,IAAI,KAAK,YAAY,KAAA,KAAa,OAAO,KAAK,YAAY,YACxD,MAAM,IAAI,MAAM,yDAAyD;AAE7E;AAEA,SAAS,eAAe,WAAyD;CAC/E,OAAO,OAAO,cAAc,WAAW,YAAY,EAAE,GAAG,UAAU;AACpE"}

package/dist/{external-optimizer-subprocess-BepyNwtj.js → external-optimizer-subprocess-Dn90UqN2.js}

@@ -2,7 +2,7 @@ import { s as ValidationError } from "./errors-Dngq5h35.js";
 import { t as canonicalJson } from "./verdict-cache-mZf5FEiY.js";
 import { c as costForTokenPricing, i as CostLedger } from "./cost-ledger-B1qx30B4.js";
 import { a as appendLedgerLine, o as tryWithLedgerFileLock } from "./ledger-core-DTae9rv_.js";
-import { h as ModelSubstitutionError, v as assertServedModel, y as assertServedModelPolicy } from "./llm-client-CxyJ8Oft.js";
+import { h as ModelSubstitutionError, v as assertServedModel, y as assertServedModelPolicy } from "./llm-client-Bg32RW0j.js";
 import { createRequire } from "node:module";
 import { randomBytes } from "node:crypto";
 import { isAbsolute, join, resolve } from "node:path";
@@ -255,14 +255,22 @@ function isRecord(value) {
 * The `claude` CLI driven by GEPA agent engines speaks `POST /v1/messages`.
 * Each request becomes one canonical `ExternalOptimizerChatRequest`, so the
 * shared reservation, receipt, and execution-evidence pipeline applies
-* unchanged. Anything without a full-fidelity mapping onto that contract is
-* refused with a loud Anthropic error envelope. The only silent strips are
-* `metadata` and `cache_control`: the CLI always sends both, neither has a
-* canonical slot, and dropping them changes no message content.
+* unchanged. Tool use translates in both directions: Anthropic `tools`,
+* `tool_choice`, `tool_use`, and `tool_result` map onto the canonical
+* function-tool contract, and a tool-calling response is synthesized back as
+* the Anthropic stream shape the CLI expects.
 *
-* Tool use is refused because the canonical contract carries text-only
-* messages. Metering CLI tool calls requires a tool extension of
-* `ExternalOptimizerChatRequest` and the execution-owner result.
+* Anything without a full-fidelity mapping onto the canonical contract is
+* refused with a loud Anthropic error envelope, with two exceptions:
+*
+* - `metadata` and `cache_control` are dropped silently: the CLI always sends
+*   both, neither has a canonical slot, and dropping them changes no content.
+* - Claude-specific control fields (`thinking`, `context_management`,
+*   `output_config`, replayed reasoning blocks, and unknown tool-entry keys)
+*   are STRIPPED AND RECORDED. They carry no token-billing semantics on the
+*   owner wire, and the real CLI sends them on every request — refusing them
+*   makes every real CLI call impossible. The dropped names are returned in
+*   `strippedFields` so accounting discloses exactly what the shim removed.
 */
 var AnthropicRequestRefusal = class extends Error {
 	status;
@@ -280,12 +288,16 @@ const REQUEST_FIELDS = /* @__PURE__ */ new Set([
 	"system",
 	"temperature",
 	"stream",
-	"metadata"
+	"metadata",
+	"tools",
+	"tool_choice"
+]);
+const STRIPPED_REQUEST_FIELDS = /* @__PURE__ */ new Set([
+	"thinking",
+	"context_management",
+	"output_config"
 ]);
 const REFUSED_REQUEST_FIELDS = {
-	tools: "tools require a tool-call extension of the canonical execution-owner contract",
-	tool_choice: "tool_choice requires a tool-call extension of the canonical execution-owner contract",
-	thinking: "thinking has no canonical mapping; the injected CLI environment disables it",
 	top_p: "top_p has no canonical execution-owner slot",
 	top_k: "top_k has no canonical execution-owner slot",
 	stop_sequences: "stop_sequences has no canonical execution-owner slot"
@@ -298,8 +310,13 @@ function translateAnthropicMessagesRequest(raw, expectedModel, maxOutputTokensPe
 		throw refuse("request must be valid JSON");
 	}
 	if (!isRecord(parsed)) throw refuse("request must be a JSON object");
+	const stripped = /* @__PURE__ */ new Set();
 	for (const key of Object.keys(parsed)) {
 		if (REQUEST_FIELDS.has(key)) continue;
+		if (STRIPPED_REQUEST_FIELDS.has(key)) {
+			stripped.add(key);
+			continue;
+		}
 		const reason = REFUSED_REQUEST_FIELDS[key];
 		throw refuse(reason ?? `request field '${key}' has no metered translation and is not supported`);
 	}
@@ -315,35 +332,179 @@ function translateAnthropicMessagesRequest(raw, expectedModel, maxOutputTokensPe
 		role: "system",
 		content: systemText
 	});
-	messages.push(...translateConversation(parsed.messages));
+	messages.push(...translateConversation(parsed.messages, stripped));
+	const tools = translateTools(parsed.tools, stripped);
+	const toolChoice = translateToolChoice(parsed.tool_choice, stripped);
 	return {
 		request: {
 			model: expectedModel,
 			messages,
 			maxTokens,
-			...parsed.temperature !== void 0 ? { temperature: parsed.temperature } : {}
+			...parsed.temperature !== void 0 ? { temperature: parsed.temperature } : {},
+			...tools === void 0 ? {} : { tools },
+			...toolChoice === void 0 ? {} : { toolChoice }
 		},
 		maxOutputTokens: maxTokens,
-		stream: parsed.stream === true
+		stream: parsed.stream === true,
+		strippedFields: [...stripped].sort()
 	};
 }
+const TOOL_ENTRY_FIELDS = /* @__PURE__ */ new Set([
+	"name",
+	"description",
+	"input_schema",
+	"type",
+	"cache_control"
+]);
+function translateTools(value, stripped) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value) || value.length === 0) throw refuse("tools must be a non-empty array of tool definitions");
+	return value.map((entry, index) => {
+		if (!isRecord(entry)) throw refuse(`tools[${index}] must be an object`);
+		if (entry.type !== void 0 && entry.type !== "custom") throw refuse(`tools[${index}] type '${String(entry.type)}' has no metered translation; only client function tools are served`);
+		if (typeof entry.name !== "string" || !entry.name.trim()) throw refuse(`tools[${index}] requires a non-empty name`);
+		if (entry.description !== void 0 && typeof entry.description !== "string") throw refuse(`tools[${index}] description must be a string`);
+		if (!isRecord(entry.input_schema)) throw refuse(`tools[${index}] requires an input_schema object`);
+		for (const key of Object.keys(entry)) {
+			if (TOOL_ENTRY_FIELDS.has(key)) continue;
+			stripped.add(`tools.${key}`);
+		}
+		return {
+			type: "function",
+			function: {
+				name: entry.name,
+				...entry.description === void 0 ? {} : { description: entry.description },
+				parameters: entry.input_schema
+			}
+		};
+	});
+}
+function translateToolChoice(value, stripped) {
+	if (value === void 0) return void 0;
+	if (!isRecord(value) || typeof value.type !== "string") throw refuse("tool_choice must be an object with a type");
+	for (const key of Object.keys(value)) {
+		if (key === "type") continue;
+		if (key === "name" && value.type === "tool") continue;
+		if (key === "disable_parallel_tool_use") {
+			stripped.add("tool_choice.disable_parallel_tool_use");
+			continue;
+		}
+		throw refuse(`tool_choice field '${key}' has no metered translation`);
+	}
+	if (value.type === "auto") return "auto";
+	if (value.type === "none") return "none";
+	if (value.type === "any") return "required";
+	if (value.type === "tool") {
+		if (typeof value.name !== "string" || !value.name.trim()) throw refuse("tool_choice type tool requires a tool name");
+		return {
+			type: "function",
+			function: { name: value.name }
+		};
+	}
+	throw refuse(`tool_choice type '${String(value.type)}' has no metered translation`);
+}
 function translateSystem(value) {
 	if (value === void 0) return void 0;
 	if (typeof value === "string") return value;
 	if (!Array.isArray(value)) throw refuse("system must be a string or an array of text blocks");
 	return joinTextBlocks(value, "system");
 }
-function translateConversation(value) {
+function translateConversation(value, stripped) {
 	if (!Array.isArray(value) || value.length === 0) throw refuse("request requires a non-empty messages array");
-	return value.map((entry) => {
+	const out = [];
+	for (const entry of value) {
 		if (!isRecord(entry)) throw refuse("each message must be an object");
 		if (entry.role !== "user" && entry.role !== "assistant") throw refuse(`message role must be 'user' or 'assistant'`);
-		const content = typeof entry.content === "string" ? entry.content : Array.isArray(entry.content) && entry.content.length > 0 ? joinTextBlocks(entry.content, `${entry.role} message`) : refuseValue(`${entry.role} message content must be a string or a non-empty block array`);
-		return {
-			role: entry.role,
-			content
-		};
-	});
+		if (typeof entry.content === "string") {
+			out.push({
+				role: entry.role,
+				content: entry.content
+			});
+			continue;
+		}
+		if (!Array.isArray(entry.content) || entry.content.length === 0) throw refuse(`${entry.role} message content must be a string or a non-empty block array`);
+		if (entry.role === "assistant") out.push(translateAssistantBlocks(entry.content, stripped));
+		else out.push(...translateUserBlocks(entry.content, stripped));
+	}
+	return out;
+}
+function translateAssistantBlocks(blocks, stripped) {
+	const parts = [];
+	const toolCalls = [];
+	for (const block of blocks) {
+		if (!isRecord(block)) throw refuse("assistant message content blocks must be objects");
+		if (block.type === "text") {
+			if (typeof block.text !== "string") throw refuse("assistant message text blocks require string text");
+			parts.push(block.text);
+			continue;
+		}
+		if (block.type === "tool_use") {
+			if (typeof block.id !== "string" || !block.id.trim()) throw refuse("assistant tool_use blocks require a string id");
+			if (typeof block.name !== "string" || !block.name.trim()) throw refuse("assistant tool_use blocks require a string name");
+			if (!isRecord(block.input)) throw refuse("assistant tool_use blocks require an input object");
+			toolCalls.push({
+				id: block.id,
+				name: block.name,
+				argumentsJson: JSON.stringify(block.input)
+			});
+			continue;
+		}
+		if (block.type === "thinking" || block.type === "redacted_thinking") {
+			stripped.add(`messages.${String(block.type)}`);
+			continue;
+		}
+		throw refuse(`assistant message content block type '${String(block.type)}' has no metered translation`);
+	}
+	return {
+		role: "assistant",
+		content: parts.join("\n\n"),
+		...toolCalls.length > 0 ? { toolCalls } : {}
+	};
+}
+function translateUserBlocks(blocks, stripped) {
+	const out = [];
+	const textParts = [];
+	const flushText = () => {
+		if (textParts.length === 0) return;
+		out.push({
+			role: "user",
+			content: textParts.join("\n\n")
+		});
+		textParts.length = 0;
+	};
+	for (const block of blocks) {
+		if (!isRecord(block)) throw refuse("user message content blocks must be objects");
+		if (block.type === "text") {
+			if (typeof block.text !== "string") throw refuse("user message text blocks require string text");
+			textParts.push(block.text);
+			continue;
+		}
+		if (block.type === "tool_result") {
+			if (typeof block.tool_use_id !== "string" || !block.tool_use_id.trim()) throw refuse("user tool_result blocks require a string tool_use_id");
+			if (block.is_error === true) stripped.add("messages.tool_result.is_error");
+			flushText();
+			out.push({
+				role: "tool",
+				content: toolResultText(block.content),
+				toolCallId: block.tool_use_id
+			});
+			continue;
+		}
+		throw refuse(`user message content block type '${String(block.type)}' has no metered translation`);
+	}
+	flushText();
+	return out;
+}
+function toolResultText(value) {
+	if (value === void 0) return "";
+	if (typeof value === "string") return value;
+	if (!Array.isArray(value)) throw refuse("user tool_result content must be a string or a block array");
+	const parts = [];
+	for (const block of value) {
+		if (!isRecord(block) || block.type !== "text" || typeof block.text !== "string") throw refuse("user tool_result content blocks must be text blocks");
+		parts.push(block.text);
+	}
+	return parts.join("\n\n");
 }
 function joinTextBlocks(blocks, label) {
 	const parts = [];
@@ -354,7 +515,6 @@ function joinTextBlocks(blocks, label) {
 			parts.push(block.text);
 			continue;
 		}
-		if (block.type === "tool_use" || block.type === "tool_result") throw refuse(`${label} ${String(block.type)} blocks require a tool-call extension of the canonical execution-owner contract`);
 		throw refuse(`${label} content block type '${String(block.type)}' has no metered translation`);
 	}
 	return parts.join("\n\n");
@@ -362,7 +522,9 @@ function joinTextBlocks(blocks, label) {
 const STOP_REASON_BY_FINISH_REASON = {
 	stop: "end_turn",
 	length: "max_tokens",
-	content_filter: "refusal"
+	content_filter: "refusal",
+	tool_calls: "tool_use",
+	tool_use: "tool_use"
 };
 /**
 * Encode one canonical owner response as an Anthropic message.
@@ -370,7 +532,8 @@ const STOP_REASON_BY_FINISH_REASON = {
 * Usage fields are display-level for the CLI; the ledger receipt reads the
 * same canonical response through the proxy's strict receipt checks. An
 * uncaptured usage renders as zeros here while the receipt keeps the honest
-* unknown-cost maximum.
+* unknown-cost maximum. Canonical tool calls become `tool_use` content blocks
+* after the text block, matching Anthropic block ordering.
 */
 function encodeAnthropicMessage(response, callId) {
 	const finishReason = response.finishReason ?? "stop";
@@ -378,15 +541,23 @@ function encodeAnthropicMessage(response, callId) {
 	if (stopReason === void 0) throw new AnthropicRequestRefusal(502, "api_error", `optimizer model finish reason '${String(finishReason)}' has no Anthropic translation`);
 	const captured = response.usage.captured !== false;
 	const cachedTokens = response.usage.cachedPromptTokens ?? 0;
+	const content = [];
+	if (response.content.length > 0) content.push({
+		type: "text",
+		text: response.content
+	});
+	for (const call of response.toolCalls ?? []) content.push({
+		type: "tool_use",
+		id: call.id,
+		name: call.name,
+		input: parseToolInput(call)
+	});
 	return {
 		id: `msg_${callId}`,
 		type: "message",
 		role: "assistant",
 		model: response.model,
-		content: response.content.length > 0 ? [{
-			type: "text",
-			text: response.content
-		}] : [],
+		content,
 		stop_reason: stopReason,
 		stop_sequence: null,
 		usage: captured ? {
@@ -400,12 +571,26 @@ function encodeAnthropicMessage(response, callId) {
 		}
 	};
 }
+function parseToolInput(call) {
+	const text = call.argumentsJson.trim();
+	if (text === "") return {};
+	let parsed;
+	try {
+		parsed = JSON.parse(text);
+	} catch {
+		throw new AnthropicRequestRefusal(502, "api_error", `optimizer model tool call '${call.name}' returned arguments that are not valid JSON`);
+	}
+	if (!isRecord(parsed)) throw new AnthropicRequestRefusal(502, "api_error", `optimizer model tool call '${call.name}' arguments must encode a JSON object`);
+	return parsed;
+}
 /**
 * Render one completed Anthropic message as the SSE stream the CLI expects.
 *
 * The whole stream is synthesized after the owner call completes, so the
 * event burst is exact: usage is final and a cap-violating response is
-* rejected with a real status instead of a half-delivered stream.
+* rejected with a real status instead of a half-delivered stream. A
+* `tool_use` block streams as an empty-input `content_block_start` plus one
+* `input_json_delta` carrying the complete arguments JSON.
 */
 function renderAnthropicSseStream(message) {
 	const content = Array.isArray(message.content) ? message.content : [];
@@ -426,15 +611,47 @@ function renderAnthropicSseStream(message) {
 		}
 	}];
 	for (const [index, block] of content.entries()) {
-		if (!isRecord(block) || block.type !== "text") continue;
-		events.push({
+		if (!isRecord(block)) continue;
+		if (block.type === "text") {
+			events.push({
+				event: "content_block_start",
+				data: {
+					type: "content_block_start",
+					index,
+					content_block: {
+						type: "text",
+						text: ""
+					}
+				}
+			}, {
+				event: "content_block_delta",
+				data: {
+					type: "content_block_delta",
+					index,
+					delta: {
+						type: "text_delta",
+						text: block.text
+					}
+				}
+			}, {
+				event: "content_block_stop",
+				data: {
+					type: "content_block_stop",
+					index
+				}
+			});
+			continue;
+		}
+		if (block.type === "tool_use") events.push({
 			event: "content_block_start",
 			data: {
 				type: "content_block_start",
 				index,
 				content_block: {
-					type: "text",
-					text: ""
+					type: "tool_use",
+					id: block.id,
+					name: block.name,
+					input: {}
 				}
 			}
 		}, {
@@ -443,8 +660,8 @@ function renderAnthropicSseStream(message) {
 				type: "content_block_delta",
 				index,
 				delta: {
-					type: "text_delta",
-					text: block.text
+					type: "input_json_delta",
+					partial_json: JSON.stringify(block.input)
 				}
 			}
 		}, {
@@ -492,9 +709,6 @@ function anthropicErrorTypeForStatus(status) {
 function refuse(message) {
 	return new AnthropicRequestRefusal(400, "invalid_request_error", message);
 }
-function refuseValue(message) {
-	throw refuse(message);
-}
 //#endregion
 //#region src/campaign/external-optimizer-http.ts
 function listenLocal(server) {
@@ -710,7 +924,8 @@ async function handleModelProxyRequest(args) {
 		try {
 			const requestTags = wire === "anthropic" ? {
 				...args.args.tags ?? {},
-				wire: "anthropic"
+				wire: "anthropic",
+				...parsed.strippedFields === void 0 ? {} : { strippedFields: parsed.strippedFields.join(",") }
 			} : args.args.tags;
 			const paid = await args.args.costLedger.runPaidCall({
 				...args.args.callId ? { callId: args.args.callId } : {},
@@ -928,6 +1143,7 @@ function parseModelProxyRequest(body, path, expectedModel, budget) {
 		return {
 			maxOutputTokens: translated.maxOutputTokens,
 			stream: translated.stream,
+			...translated.strippedFields.length > 0 ? { strippedFields: translated.strippedFields } : {},
 			request: freezeJsonSnapshot(translated.request, "optimizer model canonical request")
 		};
 	}
@@ -1190,6 +1406,7 @@ function snapshotChatResponse(value, expectedModel, allowWithinFamily) {
 	if (!isNonnegativeFiniteNumber(value.durationMs)) throw new OwnerModelContractError("optimizer model callback response durationMs must be finite and non-negative");
 	if (value.costUsd !== null && !isNonnegativeFiniteNumber(value.costUsd)) throw new OwnerModelContractError("optimizer model callback response costUsd must be null or finite and non-negative");
 	if (value.finishReason !== void 0 && value.finishReason !== null && typeof value.finishReason !== "string") throw new OwnerModelContractError("optimizer model callback response finishReason must be a string or null");
+	const toolCalls = snapshotResponseToolCalls(value.toolCalls);
 	if (value.contentEmpty !== void 0 && (typeof value.contentEmpty !== "boolean" || value.contentEmpty !== (value.content.trim().length === 0))) throw new OwnerModelContractError("optimizer model callback response contentEmpty must match content");
 	if (!isRecord(value.raw)) throw new OwnerModelContractError("optimizer model callback response raw must be an object");
 	if (!isRecord(value.usage)) throw new OwnerModelContractError("optimizer model callback response usage must be an object");
@@ -1214,6 +1431,7 @@ function snapshotChatResponse(value, expectedModel, allowWithinFamily) {
 	}
 	return deepFreezeJson({
 		content: value.content,
+		...toolCalls === void 0 ? {} : { toolCalls },
 		usage: {
 			promptTokens,
 			completionTokens,
@@ -1230,6 +1448,19 @@ function snapshotChatResponse(value, expectedModel, allowWithinFamily) {
 		raw
 	});
 }
+/** Snapshot the owner's canonical tool calls onto the allowlisted response. */
+function snapshotResponseToolCalls(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value) || value.length === 0) throw new OwnerModelContractError("optimizer model callback response toolCalls must be a non-empty array when present");
+	return value.map((entry) => {
+		if (!isRecord(entry) || typeof entry.id !== "string" || !entry.id || typeof entry.name !== "string" || !entry.name || typeof entry.argumentsJson !== "string") throw new OwnerModelContractError("optimizer model callback response toolCalls entries require string id, name, and argumentsJson");
+		return {
+			id: entry.id,
+			name: entry.name,
+			argumentsJson: entry.argumentsJson
+		};
+	});
+}
 function encodeAnthropicResponseBody(args) {
 	const message = encodeAnthropicMessage(args.response, args.callId);
 	const body = new TextEncoder().encode(args.stream ? renderAnthropicSseStream(message) : JSON.stringify(message));
@@ -1666,4 +1897,4 @@ function summarizeProcessOutput(capture, max = 4e3) {
 //#endregion
 export { SEARCH_LEDGER_FILE_CONTEXT as C, SearchLedgerIntegrityError as E, inMemoryCampaignStorage as S, SearchLedgerError as T, resolveExternalOptimizerCallbackLimits as _, closeServer as a, createRunCostLedger as b, DEFAULT_EXTERNAL_OPTIMIZER_CALLBACK_LIMITS as c, assertJsonValue as d, assertNoCredentialValues as f, removeCredentialEnvironment as g, isRecord as h, startExternalOptimizerModelProxy as i, DEFAULT_EXTERNAL_OPTIMIZER_PROCESS_LIMITS as l, isExternalTextCandidate as m, closeExternalOptimizerResources as n, listenLocal as o, isCandidateText as p, runWithCleanup as r, sendJson as s, runExternalOptimizerProcess as t, assertExternalOptimizerModelBudget as u, resolveExternalOptimizerProcessLimits as v, SearchLedgerConflictError as w, fsCampaignStorage as x, safePathComponent as y };
 
-//# sourceMappingURL=external-optimizer-subprocess-BepyNwtj.js.map
+//# sourceMappingURL=external-optimizer-subprocess-Dn90UqN2.js.map