@tanstack/ai 0.42.0 → 0.43.1

package/dist/esm/activities/chat/tools/tool-calls.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-calls.js","sources":["../../../../../src/activities/chat/tools/tool-calls.ts"],"sourcesContent":["import { normalizeToolResult } from '../../../utilities/tool-result'\nimport { isStandardSchema, parseWithStandardSchema } from './schema-converter'\nimport type {\n  AnyTool,\n  ContentPart,\n  CustomEvent,\n  ModelMessage,\n  RunFinishedEvent,\n  Tool,\n  ToolCall,\n  ToolCallArgsEvent,\n  ToolCallEndEvent,\n  ToolCallStartEvent,\n  ToolExecutionContext,\n  ToolOutputState,\n} from '../../../types'\nimport type {\n  AfterToolCallInfo,\n  BeforeToolCallDecision,\n} from '../middleware/types'\nimport type { McpResourceReadResult } from '../mcp/types'\nimport type {\n  ContextFromTool,\n  DefinedContext,\n  MergeContext,\n  UnionToIntersection,\n} from '../runtime-context-types'\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value)\n  } catch {\n    return value\n  }\n}\n\n/**\n * MCP Apps metadata attached to a server tool at discovery (see\n * `@tanstack/ai-mcp` discovery + `MCPManager.discover()`).\n *\n * - `uiResourceUri` / `serverId` are stamped by ai-mcp at tool discovery.\n * - `readResource` is bound by `MCPManager.discover()` (the one site that has\n *   both the tool and its originating source) so the resource can be eagerly\n *   read at the emit site. Under `chat()`-managed MCP lifecycle\n *   (`connection:'close'`), the MCP source is not disposed until the run\n *   drains, so `readResource` is still live at this emit point. Note: a caller\n *   who closes the MCP source early (outside `chat()`'s managed lifecycle)\n *   degrades fail-soft — `readResource` may reject, the widget is absent, but\n *   the tool result still flows to the model.\n *   `@tanstack/ai` never imports `@tanstack/ai-mcp`; this travels structurally\n *   on the tool.\n */\ninterface McpToolAppMeta {\n  uiResourceUri?: string\n  serverId?: string\n  /** Server-native (unprefixed) MCP tool name — used as the renderer's toolName. */\n  serverToolName?: string\n  readResource?: (uri: string) => Promise<McpResourceReadResult>\n}\n\nfunction readMcpAppMeta(tool: AnyTool): McpToolAppMeta | undefined {\n  const meta = (tool.metadata as { mcp?: McpToolAppMeta } | undefined)?.mcp\n  return meta\n}\n\n/**\n * Eagerly read a tool's linked `ui://` resource (MCP Apps) and emit a\n * `ui-resource` CUSTOM event so the client can render the widget. The model\n * still receives the normal text tool-result; the widget rides alongside and\n * never enters model input.\n *\n * Fail-soft: any read error logs a warning and emits nothing — it never throws,\n * so the normal tool-result still flows and a broken widget cannot break the run.\n */\nasync function emitUiResourceIfLinked<TContext>(\n  tool: AnyTool,\n  context: ToolExecutionContext<TContext>,\n): Promise<void> {\n  const mcp = readMcpAppMeta(tool)\n  const uiUri = mcp?.uiResourceUri\n  if (!uiUri || !mcp.readResource) return\n\n  // The try covers ONLY the fallible read — keep `emitCustomEvent` out of it so\n  // an exception from the emit path can't be mislabeled as a read failure.\n  let matched: McpResourceReadResult['contents'][number] | undefined\n  try {\n    const res = await mcp.readResource(uiUri)\n    // Emit ONLY the content whose uri matches the requested `uiUri`. A source\n    // can return unrelated contents; falling back to `contents[0]` would risk\n    // rendering a widget that doesn't correspond to the linked resource. This\n    // is a display widget — a mismatched resource is worse than none, so if no\n    // content matches we fail-soft (warn + return) rather than emit.\n    matched = res.contents.find((c) => c.uri === uiUri)\n  } catch (err) {\n    // fail-soft — the text tool-result already flows; a broken widget must\n    // not break the run.\n    console.warn(`[mcp-apps] failed to read ui resource ${uiUri}:`, err)\n    return\n  }\n  if (!matched) {\n    console.warn(\n      `[mcp-apps] ui resource ${uiUri} returned no content matching that uri; not emitting`,\n    )\n    return\n  }\n  // NOTE: `toolCallId` is intentionally NOT set here — it is stamped onto\n  // every emitted event by the `executeToolCalls` context wrapper, so the\n  // UIResourceEvent.value.toolCallId / UIResourcePart.toolCallId contract is\n  // still satisfied downstream.\n  context.emitCustomEvent('ui-resource', {\n    resource: {\n      uri: matched.uri,\n      mimeType: matched.mimeType ?? 'text/html',\n      text: matched.text,\n      blob: matched.blob,\n    },\n    serverId: mcp.serverId,\n    toolName: mcp.serverToolName ?? tool.name,\n    meta: undefined,\n  })\n}\n\n/**\n * Optional middleware hooks for tool execution.\n * When provided, these callbacks are invoked before/after each tool execution.\n */\nexport interface ToolExecutionMiddlewareHooks {\n  onBeforeToolCall?: (\n    toolCall: ToolCall,\n    tool: Tool | undefined,\n    args: unknown,\n  ) => Promise<BeforeToolCallDecision>\n  onAfterToolCall?: (info: AfterToolCallInfo) => Promise<void>\n}\n\n/**\n * Error thrown when middleware decides to abort the chat run during tool execution.\n */\nexport class MiddlewareAbortError extends Error {\n  constructor(reason: string) {\n    super(reason)\n    this.name = 'MiddlewareAbortError'\n  }\n}\n\n// The leaf context-inference primitives (ContextFromTool, MergeContext,\n// UnionToIntersection, DefinedContext) are shared with the chat activity\n// options layer — see ../runtime-context-types.\ntype RequiredContextFromToolUnion<T> = T extends unknown\n  ? undefined extends ContextFromTool<T>\n    ? never\n    : ContextFromTool<T>\n  : never\n\ntype ContextFromToolUnion<T> = [\n  UnionToIntersection<DefinedContext<ContextFromTool<T>>>,\n] extends [never]\n  ? unknown\n  : [RequiredContextFromToolUnion<T>] extends [never]\n    ? UnionToIntersection<DefinedContext<ContextFromTool<T>>> | undefined\n    : UnionToIntersection<DefinedContext<ContextFromTool<T>>>\n\ntype ContextFromTools<TTools> = TTools extends readonly [\n  infer THead,\n  ...infer TTail,\n]\n  ? MergeContext<ContextFromTool<THead>, ContextFromTools<TTail>>\n  : TTools extends ReadonlyArray<infer TTool>\n    ? ContextFromToolUnion<TTool>\n    : unknown\n\ntype ExecuteToolsContextArgs<TContext> = undefined extends TContext\n  ? [userContext?: TContext]\n  : [userContext: TContext]\n\n/**\n * Manages tool call accumulation and execution for the chat() method's automatic tool execution loop.\n *\n * Responsibilities:\n * - Accumulates streaming tool call events (ID, name, arguments)\n * - Validates tool calls (filters out incomplete ones)\n * - Executes tool `execute` functions with parsed arguments\n * - Emits `TOOL_CALL_END` events for client visibility\n * - Returns tool result messages for conversation history\n *\n * This class is used internally by the AI.chat() method to handle the automatic\n * tool execution loop. It can also be used independently for custom tool execution logic.\n *\n * @example\n * ```typescript\n * const manager = new ToolCallManager(tools);\n *\n * // During streaming, accumulate tool calls\n * for await (const chunk of stream) {\n *   if (chunk.type === 'TOOL_CALL_START') {\n *     manager.addToolCallStartEvent(chunk);\n *   } else if (chunk.type === 'TOOL_CALL_ARGS') {\n *     manager.addToolCallArgsEvent(chunk);\n *   }\n * }\n *\n * // After stream completes, execute tools\n * if (manager.hasToolCalls()) {\n *   const toolResults = yield* manager.executeTools(finishEvent);\n *   messages = [...messages, ...toolResults];\n *   manager.clear();\n * }\n * ```\n */\nexport class ToolCallManager<\n  TToolsOrContext = ReadonlyArray<AnyTool>,\n  TContext = TToolsOrContext extends ReadonlyArray<AnyTool>\n    ? ContextFromTools<TToolsOrContext>\n    : TToolsOrContext,\n> {\n  private readonly toolCallsMap = new Map<number, ToolCall>()\n  private readonly tools: TToolsOrContext extends ReadonlyArray<AnyTool>\n    ? TToolsOrContext\n    : ReadonlyArray<AnyTool>\n\n  constructor(\n    tools: TToolsOrContext extends ReadonlyArray<AnyTool>\n      ? TToolsOrContext\n      : ReadonlyArray<AnyTool>,\n  ) {\n    this.tools = tools\n  }\n\n  /**\n   * Add a TOOL_CALL_START event to begin tracking a tool call (AG-UI)\n   */\n  addToolCallStartEvent(event: ToolCallStartEvent): void {\n    const index = event.index ?? this.toolCallsMap.size\n    const runtimeEvent = event as Partial<ToolCallStartEvent> &\n      Pick<ToolCallStartEvent, 'toolName'>\n    const name = runtimeEvent.toolCallName ?? runtimeEvent.toolName\n    this.toolCallsMap.set(index, {\n      id: event.toolCallId,\n      type: 'function',\n      function: {\n        name,\n        arguments: '',\n      },\n      ...(event.metadata !== undefined && { metadata: event.metadata }),\n    })\n  }\n\n  /**\n   * Add a TOOL_CALL_ARGS event to accumulate arguments (AG-UI)\n   */\n  addToolCallArgsEvent(event: ToolCallArgsEvent): void {\n    // Find the tool call by ID\n    for (const [, toolCall] of this.toolCallsMap.entries()) {\n      if (toolCall.id === event.toolCallId) {\n        toolCall.function.arguments += event.delta\n        break\n      }\n    }\n  }\n\n  /**\n   * Complete a tool call with its final input\n   * Called when TOOL_CALL_END is received\n   */\n  completeToolCall(event: ToolCallEndEvent): void {\n    for (const [, toolCall] of this.toolCallsMap.entries()) {\n      if (toolCall.id === event.toolCallId) {\n        if (event.input !== undefined) {\n          // Normalize null/non-object to {} (e.g. Anthropic empty tool_use blocks)\n          const normalized =\n            event.input && typeof event.input === 'object' ? event.input : {}\n          toolCall.function.arguments = JSON.stringify(normalized)\n        }\n        break\n      }\n    }\n  }\n\n  /**\n   * Check if there are any complete tool calls to execute\n   */\n  hasToolCalls(): boolean {\n    return this.getToolCalls().length > 0\n  }\n\n  /**\n   * Get all complete tool calls (filtered for valid ID and name)\n   */\n  getToolCalls(): Array<ToolCall> {\n    return Array.from(this.toolCallsMap.values()).filter(\n      (tc) => tc.id && tc.function.name && tc.function.name.trim().length > 0,\n    )\n  }\n\n  /**\n   * Execute all tool calls and return tool result messages\n   * Yields TOOL_CALL_END events for streaming\n   * @param finishEvent - RUN_FINISHED event from the stream\n   */\n  async *executeTools(\n    finishEvent: RunFinishedEvent,\n    ...contextArgs: ExecuteToolsContextArgs<TContext>\n  ): AsyncGenerator<ToolCallEndEvent, Array<ModelMessage>, void> {\n    const toolCallsArray = this.getToolCalls()\n    const toolResults: Array<ModelMessage> = []\n    const hasRuntimeContext = contextArgs.length > 0\n    const userContext = contextArgs[0]\n\n    for (const toolCall of toolCallsArray) {\n      const tool = this.tools.find((t) => t.name === toolCall.function.name)\n\n      let toolResultContent: string | Array<ContentPart>\n      let toolResultState: ToolOutputState | undefined\n      if (tool?.execute) {\n        try {\n          // Parse arguments (normalize null/non-object to {} for empty tool_use blocks)\n          let args: unknown\n          try {\n            const argsString = toolCall.function.arguments.trim() || '{}'\n            const parsed = JSON.parse(argsString)\n            args = parsed && typeof parsed === 'object' ? parsed : {}\n          } catch (parseError) {\n            throw new Error(\n              `Failed to parse tool arguments as JSON: ${toolCall.function.arguments}`,\n            )\n          }\n\n          // Validate input against inputSchema (for Standard Schema compliant schemas)\n          if (tool.inputSchema && isStandardSchema(tool.inputSchema)) {\n            try {\n              args = parseWithStandardSchema(tool.inputSchema, args)\n            } catch (validationError: unknown) {\n              const message =\n                validationError instanceof Error\n                  ? validationError.message\n                  : 'Validation failed'\n              throw new Error(\n                `Input validation failed for tool ${tool.name}: ${message}`,\n              )\n            }\n          }\n\n          // Execute the tool\n          const executionContext = {\n            toolCallId: toolCall.id,\n            context: userContext,\n            emitCustomEvent: () => {},\n          } as ToolExecutionContext<TContext>\n          let result = hasRuntimeContext\n            ? await tool.execute(args, executionContext)\n            : await tool.execute(args)\n\n          // Validate output against outputSchema if provided (for Standard\n          // Schema compliant schemas). Unlike the previous implementation we\n          // intentionally validate `undefined`/`null` results too, so a tool\n          // whose schema forbids them surfaces a validation error instead of\n          // silently passing — the schema itself decides whether they're valid.\n          if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n            try {\n              result = parseWithStandardSchema(tool.outputSchema, result)\n            } catch (validationError: unknown) {\n              const message =\n                validationError instanceof Error\n                  ? validationError.message\n                  : 'Validation failed'\n              throw new Error(\n                `Output validation failed for tool ${tool.name}: ${message}`,\n              )\n            }\n          }\n\n          toolResultContent = normalizeToolResult(result)\n        } catch (error: unknown) {\n          // If tool execution fails, add error message\n          const message =\n            error instanceof Error ? error.message : 'Unknown error'\n          toolResultContent = `Error executing tool: ${message}`\n          toolResultState = 'output-error'\n        }\n      } else {\n        // Tool doesn't have execute function, add placeholder\n        toolResultContent = `Tool ${toolCall.function.name} does not have an execute function`\n      }\n\n      // Emit TOOL_CALL_END event\n      yield {\n        type: 'TOOL_CALL_END',\n        toolCallId: toolCall.id,\n        toolCallName: toolCall.function.name,\n        toolName: toolCall.function.name,\n        model: finishEvent.model,\n        timestamp: Date.now(),\n        result: toolResultContent,\n        ...(toolResultState !== undefined && { state: toolResultState }),\n      } as ToolCallEndEvent\n\n      // Add tool result message\n      toolResults.push({\n        role: 'tool',\n        content: toolResultContent,\n        toolCallId: toolCall.id,\n      })\n    }\n\n    return toolResults\n  }\n\n  /**\n   * Clear the tool calls map for the next iteration\n   */\n  clear(): void {\n    this.toolCallsMap.clear()\n  }\n}\n\nexport interface ToolResult {\n  toolCallId: string\n  toolName: string\n  result: any\n  state?: 'output-available' | 'output-error'\n  /** Duration of tool execution in milliseconds (only for server-executed tools) */\n  duration?: number\n}\n\nexport interface ApprovalRequest {\n  toolCallId: string\n  toolName: string\n  input: any\n  approvalId: string\n}\n\nexport interface ClientToolRequest {\n  toolCallId: string\n  toolName: string\n  input: any\n}\n\ninterface ExecuteToolCallsResult {\n  /** Tool results ready to send to LLM */\n  results: Array<ToolResult>\n  /** Tools that need user approval before execution */\n  needsApproval: Array<ApprovalRequest>\n  /** Tools that need client-side execution */\n  needsClientExecution: Array<ClientToolRequest>\n}\n\n/**\n * Helper that runs a tool execution promise while polling for pending custom events.\n * Yields any custom events that are emitted during execution, then returns the\n * execution result.\n */\nasync function* executeWithEventPolling<T>(\n  executionPromise: Promise<T>,\n  pendingEvents: Array<CustomEvent>,\n): AsyncGenerator<CustomEvent, T, void> {\n  // Use an object to track mutable state across the async boundary\n  const state = { done: false, result: undefined as T }\n  const executionWithFlag = executionPromise.then((r) => {\n    state.done = true\n    state.result = r\n    return r\n  })\n\n  while (!state.done) {\n    // Wait for either the execution to complete or a short timeout\n    await Promise.race([\n      executionWithFlag,\n      new Promise((resolve) => setTimeout(resolve, 10)),\n    ])\n\n    // Flush any pending events\n    let event: CustomEvent | undefined\n    while ((event = pendingEvents.shift()) !== undefined) {\n      yield event\n    }\n  }\n\n  // Final flush in case events were emitted right at completion\n  let event: CustomEvent | undefined\n  while ((event = pendingEvents.shift()) !== undefined) {\n    yield event\n  }\n\n  return state.result\n}\n\n/**\n * Apply a middleware onBeforeToolCall decision.\n * Returns the (possibly transformed) input if execution should proceed,\n * or undefined if the tool call was skipped (result already pushed).\n * Throws MiddlewareAbortError if the decision is 'abort'.\n */\nasync function applyBeforeToolCallDecision(\n  toolCall: ToolCall,\n  tool: Tool,\n  input: unknown,\n  toolName: string,\n  middlewareHooks: ToolExecutionMiddlewareHooks,\n  results: Array<ToolResult>,\n): Promise<{ proceed: true; input: unknown } | { proceed: false }> {\n  if (!middlewareHooks.onBeforeToolCall) {\n    return { proceed: true, input }\n  }\n\n  const decision = await middlewareHooks.onBeforeToolCall(toolCall, tool, input)\n  if (!decision) {\n    return { proceed: true, input }\n  }\n\n  if (decision.type === 'abort') {\n    throw new MiddlewareAbortError(decision.reason || 'Aborted by middleware')\n  }\n\n  if (decision.type === 'skip') {\n    const skipResult = decision.result\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result:\n        typeof skipResult === 'string'\n          ? safeJsonParse(skipResult)\n          : (skipResult ?? null),\n      duration: 0,\n    })\n    if (middlewareHooks.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: true,\n        duration: 0,\n        result: skipResult,\n      })\n    }\n    return { proceed: false }\n  }\n\n  return { proceed: true, input: decision.args }\n}\n\n/**\n * Execute a server-side tool with event polling, output validation, and middleware hooks.\n * Yields CustomEvent chunks during execution and pushes the result to the results array.\n */\nexport async function* executeServerTool<TContext = unknown>(\n  toolCall: ToolCall,\n  tool: AnyTool,\n  toolName: string,\n  input: unknown,\n  context: ToolExecutionContext<TContext>,\n  pendingEvents: Array<CustomEvent>,\n  results: Array<ToolResult>,\n  middlewareHooks?: ToolExecutionMiddlewareHooks,\n): AsyncGenerator<CustomEvent, void, void> {\n  const startTime = Date.now()\n  try {\n    if (!tool.execute) {\n      throw new Error(`Tool ${toolName} has no execute() implementation`)\n    }\n    const executionPromise = Promise.resolve(tool.execute(input, context))\n    let result = yield* executeWithEventPolling(executionPromise, pendingEvents)\n    const duration = Date.now() - startTime\n\n    // MCP Apps: if this tool links a ui:// resource, eagerly read it and queue\n    // a `ui-resource` CUSTOM event. The MCP source stays live until the run\n    // drains (MCPManager's `connection:'close'` policy disposes on completion),\n    // so `readResource` is callable here. Fail-soft: a read error warns and\n    // emits nothing — the text result still flows.\n    await emitUiResourceIfLinked(tool, context)\n\n    // Flush remaining events (including any queued ui-resource event)\n    let pendingEvent: CustomEvent | undefined\n    while ((pendingEvent = pendingEvents.shift()) !== undefined) {\n      yield pendingEvent\n    }\n\n    // Validate output against outputSchema if provided. Validates\n    // `undefined`/`null` too — the schema decides whether they're valid.\n    if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n      result = parseWithStandardSchema(tool.outputSchema, result)\n    }\n\n    const finalResult =\n      typeof result === 'string' ? safeJsonParse(result) : (result ?? null)\n\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result: finalResult,\n      duration,\n    })\n\n    if (middlewareHooks?.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: true,\n        duration,\n        result: finalResult,\n      })\n    }\n  } catch (error: unknown) {\n    const duration = Date.now() - startTime\n\n    // Flush remaining events\n    let pendingEvent: CustomEvent | undefined\n    while ((pendingEvent = pendingEvents.shift()) !== undefined) {\n      yield pendingEvent\n    }\n\n    if (error instanceof MiddlewareAbortError) {\n      throw error\n    }\n\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result: { error: message },\n      state: 'output-error',\n      duration,\n    })\n\n    if (middlewareHooks?.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: false,\n        duration,\n        error,\n      })\n    }\n  }\n}\n\nfunction buildClientToolResult(\n  toolCallId: string,\n  toolName: string,\n  tool: AnyTool,\n  rawResult: unknown,\n): ToolResult {\n  try {\n    let result = rawResult\n    if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n      result = parseWithStandardSchema(tool.outputSchema, result)\n    }\n\n    return {\n      toolCallId,\n      toolName,\n      result:\n        typeof result === 'string' ? safeJsonParse(result) : (result ?? null),\n    }\n  } catch (error: unknown) {\n    const message = error instanceof Error ? error.message : 'Validation failed'\n    return {\n      toolCallId,\n      toolName,\n      result: { error: message },\n      state: 'output-error',\n    }\n  }\n}\n\n/**\n * Execute tool calls based on their configuration.\n * Yields CustomEvent chunks during tool execution for real-time progress updates.\n *\n * Handles three cases:\n * 1. Client tools (no execute) - request client to execute\n * 2. Server tools with approval - check approval before executing\n * 3. Normal server tools - execute immediately\n *\n * @param toolCalls - Tool calls from the LLM\n * @param tools - Available tools with their configurations\n * @param approvals - Map of approval decisions (approval.id -> approved boolean)\n * @param clientResults - Map of client-side execution results (toolCallId -> result)\n * @param createCustomEventChunk - Factory to create CustomEvent chunks (optional)\n */\nexport async function* executeToolCalls<TContext = unknown>(\n  toolCalls: Array<ToolCall>,\n  tools: ReadonlyArray<AnyTool>,\n  approvals: Map<string, boolean> = new Map(),\n  clientResults: Map<string, any> = new Map(),\n  createCustomEventChunk?: (\n    eventName: string,\n    value: Record<string, any>,\n  ) => CustomEvent,\n  middlewareHooks?: ToolExecutionMiddlewareHooks,\n  userContext?: TContext,\n  abortSignal?: AbortSignal,\n): AsyncGenerator<CustomEvent, ExecuteToolCallsResult, void> {\n  const results: Array<ToolResult> = []\n  const needsApproval: Array<ApprovalRequest> = []\n  const needsClientExecution: Array<ClientToolRequest> = []\n\n  // Create tool lookup map\n  const toolMap = new Map<string, AnyTool>()\n  for (const tool of tools) {\n    toolMap.set(tool.name, tool)\n  }\n\n  // Batch gating: when any tool in the batch still needs an approval decision,\n  // defer all execution so side effects don't happen before the user decides.\n  const hasPendingApprovals = toolCalls.some((tc) => {\n    const t = toolMap.get(tc.function.name)\n    return t?.needsApproval && !approvals.has(`approval_${tc.id}`)\n  })\n\n  for (const toolCall of toolCalls) {\n    const tool = toolMap.get(toolCall.function.name)\n    const toolName = toolCall.function.name\n\n    if (!tool) {\n      // Unknown tool - return error\n      results.push({\n        toolCallId: toolCall.id,\n        toolName,\n        result: { error: `Unknown tool: ${toolName}` },\n        state: 'output-error',\n      })\n      continue\n    }\n\n    // Skip non-pending tools while approvals are outstanding\n    if (hasPendingApprovals) {\n      if (!tool.needsApproval || approvals.has(`approval_${toolCall.id}`)) {\n        continue\n      }\n    }\n\n    // Parse arguments, throwing error if invalid JSON\n    let input: unknown = {}\n    const argsStr = toolCall.function.arguments.trim() || '{}'\n    if (argsStr) {\n      try {\n        const parsed = JSON.parse(argsStr)\n        // Normalize null/non-object to {} (e.g. Anthropic empty tool_use blocks)\n        input = parsed && typeof parsed === 'object' ? parsed : {}\n      } catch (parseError) {\n        // If parsing fails, throw error to fail fast\n        throw new Error(`Failed to parse tool arguments as JSON: ${argsStr}`)\n      }\n    }\n\n    // Validate input against inputSchema (for Standard Schema compliant schemas)\n    if (tool.inputSchema && isStandardSchema(tool.inputSchema)) {\n      try {\n        input = parseWithStandardSchema(tool.inputSchema, input)\n      } catch (validationError: unknown) {\n        const message =\n          validationError instanceof Error\n            ? validationError.message\n            : 'Validation failed'\n        results.push({\n          toolCallId: toolCall.id,\n          toolName,\n          result: {\n            error: `Input validation failed for tool ${tool.name}: ${message}`,\n          },\n          state: 'output-error',\n        })\n        continue\n      }\n    }\n\n    // Create a ToolExecutionContext for this tool call with event emission\n    const pendingEvents: Array<CustomEvent> = []\n    const context = {\n      toolCallId: toolCall.id,\n      context: userContext,\n      abortSignal,\n      emitCustomEvent: (eventName: string, value: Record<string, any>) => {\n        if (createCustomEventChunk) {\n          pendingEvents.push(\n            createCustomEventChunk(eventName, {\n              ...value,\n              toolCallId: toolCall.id,\n            }),\n          )\n        }\n      },\n    } as ToolExecutionContext<TContext>\n\n    // CASE 1: Client-side tool (no execute function)\n    if (!tool.execute) {\n      // Check if tool needs approval\n      if (tool.needsApproval) {\n        const approvalId = `approval_${toolCall.id}`\n\n        // Check if approval decision exists\n        if (approvals.has(approvalId)) {\n          const approved = approvals.get(approvalId)\n\n          if (approved) {\n            // Approved - check if client has executed\n            if (clientResults.has(toolCall.id)) {\n              results.push(\n                buildClientToolResult(\n                  toolCall.id,\n                  toolName,\n                  tool,\n                  clientResults.get(toolCall.id),\n                ),\n              )\n            } else {\n              // Approved but not executed yet - request client execution\n              needsClientExecution.push({\n                toolCallId: toolCall.id,\n                toolName,\n                input,\n              })\n            }\n          } else {\n            // User declined\n            results.push({\n              toolCallId: toolCall.id,\n              toolName,\n              result: { error: 'User declined tool execution' },\n              state: 'output-error',\n            })\n          }\n        } else {\n          // Need approval first\n          needsApproval.push({\n            toolCallId: toolCall.id,\n            toolName: toolCall.function.name,\n            input,\n            approvalId,\n          })\n        }\n      } else {\n        // No approval needed - check if client has executed\n        if (clientResults.has(toolCall.id)) {\n          results.push(\n            buildClientToolResult(\n              toolCall.id,\n              toolName,\n              tool,\n              clientResults.get(toolCall.id),\n            ),\n          )\n        } else {\n          // Request client execution\n          needsClientExecution.push({\n            toolCallId: toolCall.id,\n            toolName,\n            input,\n          })\n        }\n      }\n      continue\n    }\n\n    // CASE 2: Server tool with approval required\n    if (tool.needsApproval) {\n      const approvalId = `approval_${toolCall.id}`\n\n      // Check if approval decision exists\n      if (approvals.has(approvalId)) {\n        const approved = approvals.get(approvalId)\n\n        if (approved) {\n          // Apply middleware before-hook for approved tools\n          if (middlewareHooks) {\n            const decision = await applyBeforeToolCallDecision(\n              toolCall,\n              tool,\n              input,\n              toolName,\n              middlewareHooks,\n              results,\n            )\n            if (!decision.proceed) continue\n            input = decision.input\n          }\n\n          yield* executeServerTool(\n            toolCall,\n            tool,\n            toolName,\n            input,\n            context,\n            pendingEvents,\n            results,\n            middlewareHooks,\n          )\n        } else {\n          // User declined\n          results.push({\n            toolCallId: toolCall.id,\n            toolName,\n            result: { error: 'User declined tool execution' },\n            state: 'output-error',\n          })\n        }\n      } else {\n        // Need approval\n        needsApproval.push({\n          toolCallId: toolCall.id,\n          toolName,\n          input,\n          approvalId,\n        })\n      }\n      continue\n    }\n\n    // CASE 3: Normal server tool - execute immediately\n    if (middlewareHooks) {\n      const decision = await applyBeforeToolCallDecision(\n        toolCall,\n        tool,\n        input,\n        toolName,\n        middlewareHooks,\n        results,\n      )\n      if (!decision.proceed) continue\n      input = decision.input\n    }\n\n    yield* executeServerTool(\n      toolCall,\n      tool,\n      toolName,\n      input,\n      context,\n      pendingEvents,\n      results,\n      middlewareHooks,\n    )\n  }\n\n  return { results, needsApproval, needsClientExecution }\n}\n"],"names":["event"],"mappings":";;AA4BA,SAAS,cAAc,OAAwB;AAC7C,MAAI;AACF,WAAO,KAAK,MAAM,KAAK;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AA0BA,SAAS,eAAe,MAA2C;AACjE,QAAM,OAAQ,KAAK,UAAmD;AACtE,SAAO;AACT;AAWA,eAAe,uBACb,MACA,SACe;AACf,QAAM,MAAM,eAAe,IAAI;AAC/B,QAAM,QAAQ,KAAK;AACnB,MAAI,CAAC,SAAS,CAAC,IAAI,aAAc;AAIjC,MAAI;AACJ,MAAI;AACF,UAAM,MAAM,MAAM,IAAI,aAAa,KAAK;AAMxC,cAAU,IAAI,SAAS,KAAK,CAAC,MAAM,EAAE,QAAQ,KAAK;AAAA,EACpD,SAAS,KAAK;AAGZ,YAAQ,KAAK,yCAAyC,KAAK,KAAK,GAAG;AACnE;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,YAAQ;AAAA,MACN,0BAA0B,KAAK;AAAA,IAAA;AAEjC;AAAA,EACF;AAKA,UAAQ,gBAAgB,eAAe;AAAA,IACrC,UAAU;AAAA,MACR,KAAK,QAAQ;AAAA,MACb,UAAU,QAAQ,YAAY;AAAA,MAC9B,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,IAAA;AAAA,IAEhB,UAAU,IAAI;AAAA,IACd,UAAU,IAAI,kBAAkB,KAAK;AAAA,IACrC,MAAM;AAAA,EAAA,CACP;AACH;AAkBO,MAAM,6BAA6B,MAAM;AAAA,EAC9C,YAAY,QAAgB;AAC1B,UAAM,MAAM;AACZ,SAAK,OAAO;AAAA,EACd;AACF;AAkEO,MAAM,gBAKX;AAAA,EACiB,mCAAmB,IAAA;AAAA,EACnB;AAAA,EAIjB,YACE,OAGA;AACA,SAAK,QAAQ;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAKA,sBAAsB,OAAiC;AACrD,UAAM,QAAQ,MAAM,SAAS,KAAK,aAAa;AAC/C,UAAM,eAAe;AAErB,UAAM,OAAO,aAAa,gBAAgB,aAAa;AACvD,SAAK,aAAa,IAAI,OAAO;AAAA,MAC3B,IAAI,MAAM;AAAA,MACV,MAAM;AAAA,MACN,UAAU;AAAA,QACR;AAAA,QACA,WAAW;AAAA,MAAA;AAAA,MAEb,GAAI,MAAM,aAAa,UAAa,EAAE,UAAU,MAAM,SAAA;AAAA,IAAS,CAChE;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,qBAAqB,OAAgC;AAEnD,eAAW,CAAA,EAAG,QAAQ,KAAK,KAAK,aAAa,WAAW;AACtD,UAAI,SAAS,OAAO,MAAM,YAAY;AACpC,iBAAS,SAAS,aAAa,MAAM;AACrC;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,iBAAiB,OAA+B;AAC9C,eAAW,CAAA,EAAG,QAAQ,KAAK,KAAK,aAAa,WAAW;AACtD,UAAI,SAAS,OAAO,MAAM,YAAY;AACpC,YAAI,MAAM,UAAU,QAAW;AAE7B,gBAAM,aACJ,MAAM,SAAS,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,CAAA;AACjE,mBAAS,SAAS,YAAY,KAAK,UAAU,UAAU;AAAA,QACzD;AACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAwB;AACtB,WAAO,KAAK,eAAe,SAAS;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA,EAKA,eAAgC;AAC9B,WAAO,MAAM,KAAK,KAAK,aAAa,OAAA,CAAQ,EAAE;AAAA,MAC5C,CAAC,OAAO,GAAG,MAAM,GAAG,SAAS,QAAQ,GAAG,SAAS,KAAK,KAAA,EAAO,SAAS;AAAA,IAAA;AAAA,EAE1E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,aACL,gBACG,aAC0D;AAC7D,UAAM,iBAAiB,KAAK,aAAA;AAC5B,UAAM,cAAmC,CAAA;AACzC,UAAM,oBAAoB,YAAY,SAAS;AAC/C,UAAM,cAAc,YAAY,CAAC;AAEjC,eAAW,YAAY,gBAAgB;AACrC,YAAM,OAAO,KAAK,MAAM,KAAK,CAAC,MAAM,EAAE,SAAS,SAAS,SAAS,IAAI;AAErE,UAAI;AACJ,UAAI;AACJ,UAAI,MAAM,SAAS;AACjB,YAAI;AAEF,cAAI;AACJ,cAAI;AACF,kBAAM,aAAa,SAAS,SAAS,UAAU,UAAU;AACzD,kBAAM,SAAS,KAAK,MAAM,UAAU;AACpC,mBAAO,UAAU,OAAO,WAAW,WAAW,SAAS,CAAA;AAAA,UACzD,SAAS,YAAY;AACnB,kBAAM,IAAI;AAAA,cACR,2CAA2C,SAAS,SAAS,SAAS;AAAA,YAAA;AAAA,UAE1E;AAGA,cAAI,KAAK,eAAe,iBAAiB,KAAK,WAAW,GAAG;AAC1D,gBAAI;AACF,qBAAO,wBAAwB,KAAK,aAAa,IAAI;AAAA,YACvD,SAAS,iBAA0B;AACjC,oBAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;AACN,oBAAM,IAAI;AAAA,gBACR,oCAAoC,KAAK,IAAI,KAAK,OAAO;AAAA,cAAA;AAAA,YAE7D;AAAA,UACF;AAGA,gBAAM,mBAAmB;AAAA,YACvB,YAAY,SAAS;AAAA,YACrB,SAAS;AAAA,YACT,iBAAiB,MAAM;AAAA,YAAC;AAAA,UAAA;AAE1B,cAAI,SAAS,oBACT,MAAM,KAAK,QAAQ,MAAM,gBAAgB,IACzC,MAAM,KAAK,QAAQ,IAAI;AAO3B,cAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GAAG;AAC5D,gBAAI;AACF,uBAAS,wBAAwB,KAAK,cAAc,MAAM;AAAA,YAC5D,SAAS,iBAA0B;AACjC,oBAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;AACN,oBAAM,IAAI;AAAA,gBACR,qCAAqC,KAAK,IAAI,KAAK,OAAO;AAAA,cAAA;AAAA,YAE9D;AAAA,UACF;AAEA,8BAAoB,oBAAoB,MAAM;AAAA,QAChD,SAAS,OAAgB;AAEvB,gBAAM,UACJ,iBAAiB,QAAQ,MAAM,UAAU;AAC3C,8BAAoB,yBAAyB,OAAO;AACpD,4BAAkB;AAAA,QACpB;AAAA,MACF,OAAO;AAEL,4BAAoB,QAAQ,SAAS,SAAS,IAAI;AAAA,MACpD;AAGA,YAAM;AAAA,QACJ,MAAM;AAAA,QACN,YAAY,SAAS;AAAA,QACrB,cAAc,SAAS,SAAS;AAAA,QAChC,UAAU,SAAS,SAAS;AAAA,QAC5B,OAAO,YAAY;AAAA,QACnB,WAAW,KAAK,IAAA;AAAA,QAChB,QAAQ;AAAA,QACR,GAAI,oBAAoB,UAAa,EAAE,OAAO,gBAAA;AAAA,MAAgB;AAIhE,kBAAY,KAAK;AAAA,QACf,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,SAAS;AAAA,MAAA,CACtB;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,QAAc;AACZ,SAAK,aAAa,MAAA;AAAA,EACpB;AACF;AAsCA,gBAAgB,wBACd,kBACA,eACsC;AAEtC,QAAM,QAAQ,EAAE,MAAM,OAAO,QAAQ,OAAA;AACrC,QAAM,oBAAoB,iBAAiB,KAAK,CAAC,MAAM;AACrD,UAAM,OAAO;AACb,UAAM,SAAS;AACf,WAAO;AAAA,EACT,CAAC;AAED,SAAO,CAAC,MAAM,MAAM;AAElB,UAAM,QAAQ,KAAK;AAAA,MACjB;AAAA,MACA,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAAA,IAAA,CACjD;AAGD,QAAIA;AACJ,YAAQA,SAAQ,cAAc,MAAA,OAAa,QAAW;AACpD,YAAMA;AAAAA,IACR;AAAA,EACF;AAGA,MAAI;AACJ,UAAQ,QAAQ,cAAc,MAAA,OAAa,QAAW;AACpD,UAAM;AAAA,EACR;AAEA,SAAO,MAAM;AACf;AAQA,eAAe,4BACb,UACA,MACA,OACA,UACA,iBACA,SACiE;AACjE,MAAI,CAAC,gBAAgB,kBAAkB;AACrC,WAAO,EAAE,SAAS,MAAM,MAAA;AAAA,EAC1B;AAEA,QAAM,WAAW,MAAM,gBAAgB,iBAAiB,UAAU,MAAM,KAAK;AAC7E,MAAI,CAAC,UAAU;AACb,WAAO,EAAE,SAAS,MAAM,MAAA;AAAA,EAC1B;AAEA,MAAI,SAAS,SAAS,SAAS;AAC7B,UAAM,IAAI,qBAAqB,SAAS,UAAU,uBAAuB;AAAA,EAC3E;AAEA,MAAI,SAAS,SAAS,QAAQ;AAC5B,UAAM,aAAa,SAAS;AAC5B,YAAQ,KAAK;AAAA,MACX,YAAY,SAAS;AAAA,MACrB;AAAA,MACA,QACE,OAAO,eAAe,WAClB,cAAc,UAAU,IACvB,cAAc;AAAA,MACrB,UAAU;AAAA,IAAA,CACX;AACD,QAAI,gBAAgB,iBAAiB;AACnC,YAAM,gBAAgB,gBAAgB;AAAA,QACpC;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,IAAI;AAAA,QACJ,UAAU;AAAA,QACV,QAAQ;AAAA,MAAA,CACT;AAAA,IACH;AACA,WAAO,EAAE,SAAS,MAAA;AAAA,EACpB;AAEA,SAAO,EAAE,SAAS,MAAM,OAAO,SAAS,KAAA;AAC1C;AAMA,gBAAuB,kBACrB,UACA,MACA,UACA,OACA,SACA,eACA,SACA,iBACyC;AACzC,QAAM,YAAY,KAAK,IAAA;AACvB,MAAI;AACF,QAAI,CAAC,KAAK,SAAS;AACjB,YAAM,IAAI,MAAM,QAAQ,QAAQ,kCAAkC;AAAA,IACpE;AACA,UAAM,mBAAmB,QAAQ,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC;AACrE,QAAI,SAAS,OAAO,wBAAwB,kBAAkB,aAAa;AAC3E,UAAM,WAAW,KAAK,IAAA,IAAQ;AAO9B,UAAM,uBAAuB,MAAM,OAAO;AAG1C,QAAI;AACJ,YAAQ,eAAe,cAAc,MAAA,OAAa,QAAW;AAC3D,YAAM;AAAA,IACR;AAIA,QAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GAAG;AAC5D,eAAS,wBAAwB,KAAK,cAAc,MAAM;AAAA,IAC5D;AAEA,UAAM,cACJ,OAAO,WAAW,WAAW,cAAc,MAAM,IAAK,UAAU;AAElE,YAAQ,KAAK;AAAA,MACX,YAAY,SAAS;AAAA,MACrB;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,IAAA,CACD;AAED,QAAI,iBAAiB,iBAAiB;AACpC,YAAM,gBAAgB,gBAAgB;AAAA,QACpC;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,IAAI;AAAA,QACJ;AAAA,QACA,QAAQ;AAAA,MAAA,CACT;AAAA,IACH;AAAA,EACF,SAAS,OAAgB;AACvB,UAAM,WAAW,KAAK,IAAA,IAAQ;AAG9B,QAAI;AACJ,YAAQ,eAAe,cAAc,MAAA,OAAa,QAAW;AAC3D,YAAM;AAAA,IACR;AAEA,QAAI,iBAAiB,sBAAsB;AACzC,YAAM;AAAA,IACR;AAEA,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,YAAQ,KAAK;AAAA,MACX,YAAY,SAAS;AAAA,MACrB;AAAA,MACA,QAAQ,EAAE,OAAO,QAAA;AAAA,MACjB,OAAO;AAAA,MACP;AAAA,IAAA,CACD;AAED,QAAI,iBAAiB,iBAAiB;AACpC,YAAM,gBAAgB,gBAAgB;AAAA,QACpC;AAAA,QACA;AAAA,QACA;AAAA,QACA,YAAY,SAAS;AAAA,QACrB,IAAI;AAAA,QACJ;AAAA,QACA;AAAA,MAAA,CACD;AAAA,IACH;AAAA,EACF;AACF;AAEA,SAAS,sBACP,YACA,UACA,MACA,WACY;AACZ,MAAI;AACF,QAAI,SAAS;AACb,QAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GAAG;AAC5D,eAAS,wBAAwB,KAAK,cAAc,MAAM;AAAA,IAC5D;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QACE,OAAO,WAAW,WAAW,cAAc,MAAM,IAAK,UAAU;AAAA,IAAA;AAAA,EAEtE,SAAS,OAAgB;AACvB,UAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;AACzD,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,QAAQ,EAAE,OAAO,QAAA;AAAA,MACjB,OAAO;AAAA,IAAA;AAAA,EAEX;AACF;AAiBA,gBAAuB,iBACrB,WACA,OACA,gCAAsC,IAAA,GACtC,gBAAkC,oBAAI,IAAA,GACtC,wBAIA,iBACA,aACA,aAC2D;AAC3D,QAAM,UAA6B,CAAA;AACnC,QAAM,gBAAwC,CAAA;AAC9C,QAAM,uBAAiD,CAAA;AAGvD,QAAM,8BAAc,IAAA;AACpB,aAAW,QAAQ,OAAO;AACxB,YAAQ,IAAI,KAAK,MAAM,IAAI;AAAA,EAC7B;AAIA,QAAM,sBAAsB,UAAU,KAAK,CAAC,OAAO;AACjD,UAAM,IAAI,QAAQ,IAAI,GAAG,SAAS,IAAI;AACtC,WAAO,GAAG,iBAAiB,CAAC,UAAU,IAAI,YAAY,GAAG,EAAE,EAAE;AAAA,EAC/D,CAAC;AAED,aAAW,YAAY,WAAW;AAChC,UAAM,OAAO,QAAQ,IAAI,SAAS,SAAS,IAAI;AAC/C,UAAM,WAAW,SAAS,SAAS;AAEnC,QAAI,CAAC,MAAM;AAET,cAAQ,KAAK;AAAA,QACX,YAAY,SAAS;AAAA,QACrB;AAAA,QACA,QAAQ,EAAE,OAAO,iBAAiB,QAAQ,GAAA;AAAA,QAC1C,OAAO;AAAA,MAAA,CACR;AACD;AAAA,IACF;AAGA,QAAI,qBAAqB;AACvB,UAAI,CAAC,KAAK,iBAAiB,UAAU,IAAI,YAAY,SAAS,EAAE,EAAE,GAAG;AACnE;AAAA,MACF;AAAA,IACF;AAGA,QAAI,QAAiB,CAAA;AACrB,UAAM,UAAU,SAAS,SAAS,UAAU,UAAU;AACzC;AACX,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,OAAO;AAEjC,gBAAQ,UAAU,OAAO,WAAW,WAAW,SAAS,CAAA;AAAA,MAC1D,SAAS,YAAY;AAEnB,cAAM,IAAI,MAAM,2CAA2C,OAAO,EAAE;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,KAAK,eAAe,iBAAiB,KAAK,WAAW,GAAG;AAC1D,UAAI;AACF,gBAAQ,wBAAwB,KAAK,aAAa,KAAK;AAAA,MACzD,SAAS,iBAA0B;AACjC,cAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;AACN,gBAAQ,KAAK;AAAA,UACX,YAAY,SAAS;AAAA,UACrB;AAAA,UACA,QAAQ;AAAA,YACN,OAAO,oCAAoC,KAAK,IAAI,KAAK,OAAO;AAAA,UAAA;AAAA,UAElE,OAAO;AAAA,QAAA,CACR;AACD;AAAA,MACF;AAAA,IACF;AAGA,UAAM,gBAAoC,CAAA;AAC1C,UAAM,UAAU;AAAA,MACd,YAAY,SAAS;AAAA,MACrB,SAAS;AAAA,MACT;AAAA,MACA,iBAAiB,CAAC,WAAmB,UAA+B;AAClE,YAAI,wBAAwB;AAC1B,wBAAc;AAAA,YACZ,uBAAuB,WAAW;AAAA,cAChC,GAAG;AAAA,cACH,YAAY,SAAS;AAAA,YAAA,CACtB;AAAA,UAAA;AAAA,QAEL;AAAA,MACF;AAAA,IAAA;AAIF,QAAI,CAAC,KAAK,SAAS;AAEjB,UAAI,KAAK,eAAe;AACtB,cAAM,aAAa,YAAY,SAAS,EAAE;AAG1C,YAAI,UAAU,IAAI,UAAU,GAAG;AAC7B,gBAAM,WAAW,UAAU,IAAI,UAAU;AAEzC,cAAI,UAAU;AAEZ,gBAAI,cAAc,IAAI,SAAS,EAAE,GAAG;AAClC,sBAAQ;AAAA,gBACN;AAAA,kBACE,SAAS;AAAA,kBACT;AAAA,kBACA;AAAA,kBACA,cAAc,IAAI,SAAS,EAAE;AAAA,gBAAA;AAAA,cAC/B;AAAA,YAEJ,OAAO;AAEL,mCAAqB,KAAK;AAAA,gBACxB,YAAY,SAAS;AAAA,gBACrB;AAAA,gBACA;AAAA,cAAA,CACD;AAAA,YACH;AAAA,UACF,OAAO;AAEL,oBAAQ,KAAK;AAAA,cACX,YAAY,SAAS;AAAA,cACrB;AAAA,cACA,QAAQ,EAAE,OAAO,+BAAA;AAAA,cACjB,OAAO;AAAA,YAAA,CACR;AAAA,UACH;AAAA,QACF,OAAO;AAEL,wBAAc,KAAK;AAAA,YACjB,YAAY,SAAS;AAAA,YACrB,UAAU,SAAS,SAAS;AAAA,YAC5B;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF,OAAO;AAEL,YAAI,cAAc,IAAI,SAAS,EAAE,GAAG;AAClC,kBAAQ;AAAA,YACN;AAAA,cACE,SAAS;AAAA,cACT;AAAA,cACA;AAAA,cACA,cAAc,IAAI,SAAS,EAAE;AAAA,YAAA;AAAA,UAC/B;AAAA,QAEJ,OAAO;AAEL,+BAAqB,KAAK;AAAA,YACxB,YAAY,SAAS;AAAA,YACrB;AAAA,YACA;AAAA,UAAA,CACD;AAAA,QACH;AAAA,MACF;AACA;AAAA,IACF;AAGA,QAAI,KAAK,eAAe;AACtB,YAAM,aAAa,YAAY,SAAS,EAAE;AAG1C,UAAI,UAAU,IAAI,UAAU,GAAG;AAC7B,cAAM,WAAW,UAAU,IAAI,UAAU;AAEzC,YAAI,UAAU;AAEZ,cAAI,iBAAiB;AACnB,kBAAM,WAAW,MAAM;AAAA,cACrB;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,YAAA;AAEF,gBAAI,CAAC,SAAS,QAAS;AACvB,oBAAQ,SAAS;AAAA,UACnB;AAEA,iBAAO;AAAA,YACL;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,YACA;AAAA,UAAA;AAAA,QAEJ,OAAO;AAEL,kBAAQ,KAAK;AAAA,YACX,YAAY,SAAS;AAAA,YACrB;AAAA,YACA,QAAQ,EAAE,OAAO,+BAAA;AAAA,YACjB,OAAO;AAAA,UAAA,CACR;AAAA,QACH;AAAA,MACF,OAAO;AAEL,sBAAc,KAAK;AAAA,UACjB,YAAY,SAAS;AAAA,UACrB;AAAA,UACA;AAAA,UACA;AAAA,QAAA,CACD;AAAA,MACH;AACA;AAAA,IACF;AAGA,QAAI,iBAAiB;AACnB,YAAM,WAAW,MAAM;AAAA,QACrB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MAAA;AAEF,UAAI,CAAC,SAAS,QAAS;AACvB,cAAQ,SAAS;AAAA,IACnB;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ;AAEA,SAAO,EAAE,SAAS,eAAe,qBAAA;AACnC;"}
+{"version":3,"file":"tool-calls.js","names":[],"sources":["../../../../../src/activities/chat/tools/tool-calls.ts"],"sourcesContent":["import { normalizeToolResult } from '../../../utilities/tool-result'\nimport { isStandardSchema, parseWithStandardSchema } from './schema-converter'\nimport type { ToolApprovalResolution } from '../../../interrupts'\nimport type {\n  AnyTool,\n  ContentPart,\n  CustomEvent,\n  ModelMessage,\n  RunFinishedEvent,\n  Tool,\n  ToolCall,\n  ToolCallArgsEvent,\n  ToolCallEndEvent,\n  ToolCallStartEvent,\n  ToolExecutionContext,\n  ToolOutputState,\n} from '../../../types'\nimport type {\n  AfterToolCallInfo,\n  BeforeToolCallDecision,\n} from '../middleware/types'\nimport type { McpResourceReadResult } from '../mcp/types'\nimport type {\n  ContextFromTool,\n  DefinedContext,\n  MergeContext,\n  UnionToIntersection,\n} from '../runtime-context-types'\n\nfunction safeJsonParse(value: string): unknown {\n  try {\n    return JSON.parse(value)\n  } catch {\n    return value\n  }\n}\n\n/**\n * MCP Apps metadata attached to a server tool at discovery (see\n * `@tanstack/ai-mcp` discovery + `MCPManager.discover()`).\n *\n * - `uiResourceUri` / `serverId` are stamped by ai-mcp at tool discovery.\n * - `readResource` is bound by `MCPManager.discover()` (the one site that has\n *   both the tool and its originating source) so the resource can be eagerly\n *   read at the emit site. Under `chat()`-managed MCP lifecycle\n *   (`connection:'close'`), the MCP source is not disposed until the run\n *   drains, so `readResource` is still live at this emit point. Note: a caller\n *   who closes the MCP source early (outside `chat()`'s managed lifecycle)\n *   degrades fail-soft — `readResource` may reject, the widget is absent, but\n *   the tool result still flows to the model.\n *   `@tanstack/ai` never imports `@tanstack/ai-mcp`; this travels structurally\n *   on the tool.\n */\ninterface McpToolAppMeta {\n  uiResourceUri?: string\n  serverId?: string\n  /** Server-native (unprefixed) MCP tool name — used as the renderer's toolName. */\n  serverToolName?: string\n  readResource?: (uri: string) => Promise<McpResourceReadResult>\n}\n\nfunction readMcpAppMeta(tool: AnyTool): McpToolAppMeta | undefined {\n  const meta = (tool.metadata as { mcp?: McpToolAppMeta } | undefined)?.mcp\n  return meta\n}\n\n/**\n * Eagerly read a tool's linked `ui://` resource (MCP Apps) and emit a\n * `ui-resource` CUSTOM event so the client can render the widget. The model\n * still receives the normal text tool-result; the widget rides alongside and\n * never enters model input.\n *\n * Fail-soft: any read error logs a warning and emits nothing — it never throws,\n * so the normal tool-result still flows and a broken widget cannot break the run.\n */\nasync function emitUiResourceIfLinked<TContext>(\n  tool: AnyTool,\n  context: ToolExecutionContext<TContext>,\n): Promise<void> {\n  const mcp = readMcpAppMeta(tool)\n  const uiUri = mcp?.uiResourceUri\n  if (!uiUri || !mcp.readResource) return\n\n  // The try covers ONLY the fallible read — keep `emitCustomEvent` out of it so\n  // an exception from the emit path can't be mislabeled as a read failure.\n  let matched: McpResourceReadResult['contents'][number] | undefined\n  try {\n    const res = await mcp.readResource(uiUri)\n    // Emit ONLY the content whose uri matches the requested `uiUri`. A source\n    // can return unrelated contents; falling back to `contents[0]` would risk\n    // rendering a widget that doesn't correspond to the linked resource. This\n    // is a display widget — a mismatched resource is worse than none, so if no\n    // content matches we fail-soft (warn + return) rather than emit.\n    matched = res.contents.find((c) => c.uri === uiUri)\n  } catch (err) {\n    // fail-soft — the text tool-result already flows; a broken widget must\n    // not break the run.\n    console.warn(`[mcp-apps] failed to read ui resource ${uiUri}:`, err)\n    return\n  }\n  if (!matched) {\n    console.warn(\n      `[mcp-apps] ui resource ${uiUri} returned no content matching that uri; not emitting`,\n    )\n    return\n  }\n  // NOTE: `toolCallId` is intentionally NOT set here — it is stamped onto\n  // every emitted event by the `executeToolCalls` context wrapper, so the\n  // UIResourceEvent.value.toolCallId / UIResourcePart.toolCallId contract is\n  // still satisfied downstream.\n  context.emitCustomEvent('ui-resource', {\n    resource: {\n      uri: matched.uri,\n      mimeType: matched.mimeType ?? 'text/html',\n      text: matched.text,\n      blob: matched.blob,\n    },\n    serverId: mcp.serverId,\n    toolName: mcp.serverToolName ?? tool.name,\n    meta: undefined,\n  })\n}\n\n/**\n * Optional middleware hooks for tool execution.\n * When provided, these callbacks are invoked before/after each tool execution.\n */\nexport interface ToolExecutionMiddlewareHooks {\n  onBeforeToolCall?: (\n    toolCall: ToolCall,\n    tool: Tool | undefined,\n    args: unknown,\n  ) => Promise<BeforeToolCallDecision>\n  onAfterToolCall?: (info: AfterToolCallInfo) => Promise<void>\n}\n\n/**\n * Error thrown when middleware decides to abort the chat run during tool execution.\n */\nexport class MiddlewareAbortError extends Error {\n  constructor(reason: string) {\n    super(reason)\n    this.name = 'MiddlewareAbortError'\n  }\n}\n\n// The leaf context-inference primitives (ContextFromTool, MergeContext,\n// UnionToIntersection, DefinedContext) are shared with the chat activity\n// options layer — see ../runtime-context-types.\ntype RequiredContextFromToolUnion<T> = T extends unknown\n  ? undefined extends ContextFromTool<T>\n    ? never\n    : ContextFromTool<T>\n  : never\n\ntype ContextFromToolUnion<T> = [\n  UnionToIntersection<DefinedContext<ContextFromTool<T>>>,\n] extends [never]\n  ? unknown\n  : [RequiredContextFromToolUnion<T>] extends [never]\n    ? UnionToIntersection<DefinedContext<ContextFromTool<T>>> | undefined\n    : UnionToIntersection<DefinedContext<ContextFromTool<T>>>\n\ntype ContextFromTools<TTools> = TTools extends readonly [\n  infer THead,\n  ...infer TTail,\n]\n  ? MergeContext<ContextFromTool<THead>, ContextFromTools<TTail>>\n  : TTools extends ReadonlyArray<infer TTool>\n    ? ContextFromToolUnion<TTool>\n    : unknown\n\ntype ExecuteToolsContextArgs<TContext> = undefined extends TContext\n  ? [userContext?: TContext]\n  : [userContext: TContext]\n\n/**\n * Manages tool call accumulation and execution for the chat() method's automatic tool execution loop.\n *\n * Responsibilities:\n * - Accumulates streaming tool call events (ID, name, arguments)\n * - Validates tool calls (filters out incomplete ones)\n * - Executes tool `execute` functions with parsed arguments\n * - Emits `TOOL_CALL_END` events for client visibility\n * - Returns tool result messages for conversation history\n *\n * This class is used internally by the AI.chat() method to handle the automatic\n * tool execution loop. It can also be used independently for custom tool execution logic.\n *\n * @example\n * ```typescript\n * const manager = new ToolCallManager(tools);\n *\n * // During streaming, accumulate tool calls\n * for await (const chunk of stream) {\n *   if (chunk.type === 'TOOL_CALL_START') {\n *     manager.addToolCallStartEvent(chunk);\n *   } else if (chunk.type === 'TOOL_CALL_ARGS') {\n *     manager.addToolCallArgsEvent(chunk);\n *   }\n * }\n *\n * // After stream completes, execute tools\n * if (manager.hasToolCalls()) {\n *   const toolResults = yield* manager.executeTools(finishEvent);\n *   messages = [...messages, ...toolResults];\n *   manager.clear();\n * }\n * ```\n */\nexport class ToolCallManager<\n  TToolsOrContext = ReadonlyArray<AnyTool>,\n  TContext = TToolsOrContext extends ReadonlyArray<AnyTool>\n    ? ContextFromTools<TToolsOrContext>\n    : TToolsOrContext,\n> {\n  private readonly toolCallsMap = new Map<number, ToolCall>()\n  private readonly tools: TToolsOrContext extends ReadonlyArray<AnyTool>\n    ? TToolsOrContext\n    : ReadonlyArray<AnyTool>\n\n  constructor(\n    tools: TToolsOrContext extends ReadonlyArray<AnyTool>\n      ? TToolsOrContext\n      : ReadonlyArray<AnyTool>,\n  ) {\n    this.tools = tools\n  }\n\n  /**\n   * Add a TOOL_CALL_START event to begin tracking a tool call (AG-UI)\n   */\n  addToolCallStartEvent(event: ToolCallStartEvent): void {\n    const index = event.index ?? this.toolCallsMap.size\n    const runtimeEvent = event as Partial<ToolCallStartEvent> &\n      Pick<ToolCallStartEvent, 'toolName'>\n    const name = runtimeEvent.toolCallName ?? runtimeEvent.toolName\n    this.toolCallsMap.set(index, {\n      id: event.toolCallId,\n      type: 'function',\n      function: {\n        name,\n        arguments: '',\n      },\n      ...(event.metadata !== undefined && { metadata: event.metadata }),\n    })\n  }\n\n  /**\n   * Add a TOOL_CALL_ARGS event to accumulate arguments (AG-UI)\n   */\n  addToolCallArgsEvent(event: ToolCallArgsEvent): void {\n    // Find the tool call by ID\n    for (const [, toolCall] of this.toolCallsMap.entries()) {\n      if (toolCall.id === event.toolCallId) {\n        toolCall.function.arguments += event.delta\n        break\n      }\n    }\n  }\n\n  /**\n   * Complete a tool call with its final input\n   * Called when TOOL_CALL_END is received\n   */\n  completeToolCall(event: ToolCallEndEvent): void {\n    for (const [, toolCall] of this.toolCallsMap.entries()) {\n      if (toolCall.id === event.toolCallId) {\n        if (event.input !== undefined) {\n          // Normalize null/non-object to {} (e.g. Anthropic empty tool_use blocks)\n          const normalized =\n            event.input && typeof event.input === 'object' ? event.input : {}\n          toolCall.function.arguments = JSON.stringify(normalized)\n        }\n        break\n      }\n    }\n  }\n\n  /**\n   * Check if there are any complete tool calls to execute\n   */\n  hasToolCalls(): boolean {\n    return this.getToolCalls().length > 0\n  }\n\n  /**\n   * Get all complete tool calls (filtered for valid ID and name)\n   */\n  getToolCalls(): Array<ToolCall> {\n    return Array.from(this.toolCallsMap.values()).filter(\n      (tc) => tc.id && tc.function.name && tc.function.name.trim().length > 0,\n    )\n  }\n\n  /**\n   * Execute all tool calls and return tool result messages\n   * Yields TOOL_CALL_END events for streaming\n   * @param finishEvent - RUN_FINISHED event from the stream\n   */\n  async *executeTools(\n    finishEvent: RunFinishedEvent,\n    ...contextArgs: ExecuteToolsContextArgs<TContext>\n  ): AsyncGenerator<ToolCallEndEvent, Array<ModelMessage>, void> {\n    const toolCallsArray = this.getToolCalls()\n    const toolResults: Array<ModelMessage> = []\n    const hasRuntimeContext = contextArgs.length > 0\n    const userContext = contextArgs[0]\n\n    for (const toolCall of toolCallsArray) {\n      const tool = this.tools.find((t) => t.name === toolCall.function.name)\n\n      let toolResultContent: string | Array<ContentPart>\n      let toolResultState: ToolOutputState | undefined\n      // Holds the parsed/validated execution output before serialization.\n      // Surfaced on the emitted `TOOL_CALL_END` event as `output` so\n      // consumers can read it typed (via `TypedStreamChunk` distribution\n      // over the tools array) without re-parsing `result`.\n      // Stays `undefined` when the tool has no `execute` (client-only\n      // tools) or when execution throws.\n      let toolOutput: unknown\n      if (tool?.execute) {\n        try {\n          // Parse arguments (normalize null/non-object to {} for empty tool_use blocks)\n          let args: unknown\n          try {\n            const argsString = toolCall.function.arguments.trim() || '{}'\n            const parsed = JSON.parse(argsString)\n            args = parsed && typeof parsed === 'object' ? parsed : {}\n          } catch (parseError) {\n            throw new Error(\n              `Failed to parse tool arguments as JSON: ${toolCall.function.arguments}`,\n            )\n          }\n\n          // Validate input against inputSchema (for Standard Schema compliant schemas)\n          if (tool.inputSchema && isStandardSchema(tool.inputSchema)) {\n            try {\n              args = parseWithStandardSchema(tool.inputSchema, args)\n            } catch (validationError: unknown) {\n              const message =\n                validationError instanceof Error\n                  ? validationError.message\n                  : 'Validation failed'\n              throw new Error(\n                `Input validation failed for tool ${tool.name}: ${message}`,\n              )\n            }\n          }\n\n          // Execute the tool\n          const executionContext = {\n            toolCallId: toolCall.id,\n            context: userContext,\n            emitCustomEvent: () => {},\n          } as ToolExecutionContext<TContext>\n          let result = hasRuntimeContext\n            ? await tool.execute(args, executionContext)\n            : await tool.execute(args)\n\n          // Validate output against outputSchema if provided (for Standard\n          // Schema compliant schemas). Unlike the previous implementation we\n          // intentionally validate `undefined`/`null` results too, so a tool\n          // whose schema forbids them surfaces a validation error instead of\n          // silently passing — the schema itself decides whether they're valid.\n          if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n            try {\n              result = parseWithStandardSchema(tool.outputSchema, result)\n            } catch (validationError: unknown) {\n              const message =\n                validationError instanceof Error\n                  ? validationError.message\n                  : 'Validation failed'\n              throw new Error(\n                `Output validation failed for tool ${tool.name}: ${message}`,\n              )\n            }\n          }\n\n          toolOutput = result\n          toolResultContent = normalizeToolResult(result)\n        } catch (error: unknown) {\n          // If tool execution fails, add error message\n          const message =\n            error instanceof Error ? error.message : 'Unknown error'\n          toolResultContent = `Error executing tool: ${message}`\n          toolResultState = 'output-error'\n        }\n      } else {\n        // Tool doesn't have execute function, add placeholder\n        toolResultContent = `Tool ${toolCall.function.name} does not have an execute function`\n      }\n\n      // Emit TOOL_CALL_END event\n      yield {\n        type: 'TOOL_CALL_END',\n        toolCallId: toolCall.id,\n        toolCallName: toolCall.function.name,\n        toolName: toolCall.function.name,\n        model: finishEvent.model,\n        timestamp: Date.now(),\n        // Typed parsed output (undefined for failed exec / client-only tools).\n        ...(toolOutput !== undefined ? { output: toolOutput } : {}),\n        result: toolResultContent,\n        ...(toolResultState !== undefined && { state: toolResultState }),\n      }\n\n      // Add tool result message\n      toolResults.push({\n        role: 'tool',\n        content: toolResultContent,\n        toolCallId: toolCall.id,\n      })\n    }\n\n    return toolResults\n  }\n\n  /**\n   * Clear the tool calls map for the next iteration\n   */\n  clear(): void {\n    this.toolCallsMap.clear()\n  }\n}\n\nexport interface ToolResult {\n  toolCallId: string\n  toolName: string\n  result: any\n  state?: 'output-available' | 'output-error'\n  /** Duration of tool execution in milliseconds (only for server-executed tools) */\n  duration?: number\n  /**\n   * Parsed tool input (after JSON parse + optional Standard Schema validation).\n   * Surfaced on engine-emitted `TOOL_CALL_END` events for TypedStreamChunk consumers.\n   */\n  input?: unknown\n  /**\n   * Parsed tool output before wire serialization. Surfaced on engine-emitted\n   * `TOOL_CALL_END` events so consumers can read typed `output` without\n   * re-parsing `result`. Undefined on error paths and when execution is skipped.\n   */\n  output?: unknown\n}\n\nexport interface ApprovalRequest {\n  toolCallId: string\n  toolName: string\n  input: any\n  approvalId: string\n}\n\nexport interface ClientToolRequest {\n  toolCallId: string\n  toolName: string\n  input: any\n}\n\nexport interface ToolResumeExecutionState {\n  deniedToolResults?: ReadonlyMap<string, unknown>\n  cancelledToolCallIds?: ReadonlySet<string>\n}\n\nfunction approvalResolution(\n  approvals: ReadonlyMap<string, ToolApprovalResolution>,\n  toolCallId: string,\n): ToolApprovalResolution | undefined {\n  return approvals.get(toolCallId) ?? approvals.get(`approval_${toolCallId}`)\n}\n\nfunction isApproved(resolution: ToolApprovalResolution): boolean {\n  return typeof resolution === 'boolean' ? resolution : resolution.approved\n}\n\nfunction editedApprovalArgs(\n  resolution: ToolApprovalResolution,\n): unknown | undefined {\n  return typeof resolution === 'object' && resolution.approved\n    ? resolution.editedArgs\n    : undefined\n}\n\nfunction deniedApprovalResult(resolution: ToolApprovalResolution): unknown {\n  return typeof resolution === 'object' && !resolution.approved\n    ? (resolution.payload ?? { error: 'User declined tool execution' })\n    : { error: 'User declined tool execution' }\n}\n\ninterface ExecuteToolCallsResult {\n  /** Tool results ready to send to LLM */\n  results: Array<ToolResult>\n  /** Tools that need user approval before execution */\n  needsApproval: Array<ApprovalRequest>\n  /** Tools that need client-side execution */\n  needsClientExecution: Array<ClientToolRequest>\n}\n\n/**\n * Helper that runs a tool execution promise while polling for pending custom events.\n * Yields any custom events that are emitted during execution, then returns the\n * execution result.\n */\nasync function* executeWithEventPolling<T>(\n  executionPromise: Promise<T>,\n  pendingEvents: Array<CustomEvent>,\n): AsyncGenerator<CustomEvent, T, void> {\n  // Use an object to track mutable state across the async boundary\n  const state = { done: false, result: undefined as T }\n  const executionWithFlag = executionPromise.then((r) => {\n    state.done = true\n    state.result = r\n    return r\n  })\n\n  while (!state.done) {\n    // Wait for either the execution to complete or a short timeout\n    await Promise.race([\n      executionWithFlag,\n      new Promise((resolve) => setTimeout(resolve, 10)),\n    ])\n\n    // Flush any pending events\n    let event: CustomEvent | undefined\n    while ((event = pendingEvents.shift()) !== undefined) {\n      yield event\n    }\n  }\n\n  // Final flush in case events were emitted right at completion\n  let event: CustomEvent | undefined\n  while ((event = pendingEvents.shift()) !== undefined) {\n    yield event\n  }\n\n  return state.result\n}\n\n/**\n * Apply a middleware onBeforeToolCall decision.\n * Returns the (possibly transformed) input if execution should proceed,\n * or undefined if the tool call was skipped (result already pushed).\n * Throws MiddlewareAbortError if the decision is 'abort'.\n */\nasync function applyBeforeToolCallDecision(\n  toolCall: ToolCall,\n  tool: Tool,\n  input: unknown,\n  toolName: string,\n  middlewareHooks: ToolExecutionMiddlewareHooks,\n  results: Array<ToolResult>,\n): Promise<{ proceed: true; input: unknown } | { proceed: false }> {\n  if (!middlewareHooks.onBeforeToolCall) {\n    return { proceed: true, input }\n  }\n\n  const decision = await middlewareHooks.onBeforeToolCall(toolCall, tool, input)\n  if (!decision) {\n    return { proceed: true, input }\n  }\n\n  if (decision.type === 'abort') {\n    throw new MiddlewareAbortError(decision.reason || 'Aborted by middleware')\n  }\n\n  if (decision.type === 'skip') {\n    const skipResult = decision.result\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result:\n        typeof skipResult === 'string'\n          ? safeJsonParse(skipResult)\n          : (skipResult ?? null),\n      duration: 0,\n    })\n    if (middlewareHooks.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: true,\n        duration: 0,\n        result: skipResult,\n      })\n    }\n    return { proceed: false }\n  }\n\n  return { proceed: true, input: decision.args }\n}\n\n/**\n * Execute a server-side tool with event polling, output validation, and middleware hooks.\n * Yields CustomEvent chunks during execution and pushes the result to the results array.\n */\nexport async function* executeServerTool<TContext = unknown>(\n  toolCall: ToolCall,\n  tool: AnyTool,\n  toolName: string,\n  input: unknown,\n  context: ToolExecutionContext<TContext>,\n  pendingEvents: Array<CustomEvent>,\n  results: Array<ToolResult>,\n  middlewareHooks?: ToolExecutionMiddlewareHooks,\n): AsyncGenerator<CustomEvent, void, void> {\n  const startTime = Date.now()\n  try {\n    if (!tool.execute) {\n      throw new Error(`Tool ${toolName} has no execute() implementation`)\n    }\n    const executionPromise = Promise.resolve(tool.execute(input, context))\n    let result = yield* executeWithEventPolling(executionPromise, pendingEvents)\n    const duration = Date.now() - startTime\n\n    // MCP Apps: if this tool links a ui:// resource, eagerly read it and queue\n    // a `ui-resource` CUSTOM event. The MCP source stays live until the run\n    // drains (MCPManager's `connection:'close'` policy disposes on completion),\n    // so `readResource` is callable here. Fail-soft: a read error warns and\n    // emits nothing — the text result still flows.\n    await emitUiResourceIfLinked(tool, context)\n\n    // Flush remaining events (including any queued ui-resource event)\n    let pendingEvent: CustomEvent | undefined\n    while ((pendingEvent = pendingEvents.shift()) !== undefined) {\n      yield pendingEvent\n    }\n\n    // Validate output against outputSchema if provided. Validates\n    // `undefined`/`null` too — the schema decides whether they're valid.\n    if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n      result = parseWithStandardSchema(tool.outputSchema, result)\n    }\n\n    const finalResult =\n      typeof result === 'string' ? safeJsonParse(result) : (result ?? null)\n\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result: finalResult,\n      input,\n      output: finalResult,\n      duration,\n    })\n\n    if (middlewareHooks?.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: true,\n        duration,\n        result: finalResult,\n      })\n    }\n  } catch (error: unknown) {\n    const duration = Date.now() - startTime\n\n    // Flush remaining events\n    let pendingEvent: CustomEvent | undefined\n    while ((pendingEvent = pendingEvents.shift()) !== undefined) {\n      yield pendingEvent\n    }\n\n    if (error instanceof MiddlewareAbortError) {\n      throw error\n    }\n\n    const message = error instanceof Error ? error.message : 'Unknown error'\n    results.push({\n      toolCallId: toolCall.id,\n      toolName,\n      result: { error: message },\n      input,\n      state: 'output-error',\n      duration,\n    })\n\n    if (middlewareHooks?.onAfterToolCall) {\n      await middlewareHooks.onAfterToolCall({\n        toolCall,\n        tool,\n        toolName,\n        toolCallId: toolCall.id,\n        ok: false,\n        duration,\n        error,\n      })\n    }\n  }\n}\n\nfunction buildClientToolResult(\n  toolCallId: string,\n  toolName: string,\n  tool: AnyTool,\n  rawResult: unknown,\n  input?: unknown,\n): ToolResult {\n  try {\n    let result = rawResult\n    if (tool.outputSchema && isStandardSchema(tool.outputSchema)) {\n      result = parseWithStandardSchema(tool.outputSchema, result)\n    }\n\n    const parsed =\n      typeof result === 'string' ? safeJsonParse(result) : (result ?? null)\n    return {\n      toolCallId,\n      toolName,\n      result: parsed,\n      input,\n      output: parsed,\n    }\n  } catch (error: unknown) {\n    const message = error instanceof Error ? error.message : 'Validation failed'\n    return {\n      toolCallId,\n      toolName,\n      result: { error: message },\n      input,\n      state: 'output-error',\n    }\n  }\n}\n\n/**\n * Execute tool calls based on their configuration.\n * Yields CustomEvent chunks during tool execution for real-time progress updates.\n *\n * Handles three cases:\n * 1. Client tools (no execute) - request client to execute\n * 2. Server tools with approval - check approval before executing\n * 3. Normal server tools - execute immediately\n *\n * @param toolCalls - Tool calls from the LLM\n * @param tools - Available tools with their configurations\n * @param approvals - Map keyed by toolCallId (or `approval_${toolCallId}`) → ToolApprovalResolution\n * @param clientResults - Map of client-side execution results (toolCallId -> result)\n * @param createCustomEventChunk - Factory to create CustomEvent chunks (optional)\n */\nexport async function* executeToolCalls<TContext = unknown>(\n  toolCalls: Array<ToolCall>,\n  tools: ReadonlyArray<AnyTool>,\n  approvals: Map<string, ToolApprovalResolution> = new Map(),\n  clientResults: Map<string, any> = new Map(),\n  createCustomEventChunk?: (\n    eventName: string,\n    value: Record<string, any>,\n  ) => CustomEvent,\n  middlewareHooks?: ToolExecutionMiddlewareHooks,\n  userContext?: TContext,\n  abortSignal?: AbortSignal,\n  resumeState?: ToolResumeExecutionState,\n): AsyncGenerator<CustomEvent, ExecuteToolCallsResult, void> {\n  const results: Array<ToolResult> = []\n  const needsApproval: Array<ApprovalRequest> = []\n  const needsClientExecution: Array<ClientToolRequest> = []\n\n  // Create tool lookup map\n  const toolMap = new Map<string, AnyTool>()\n  for (const tool of tools) {\n    toolMap.set(tool.name, tool)\n  }\n\n  // Batch gating: when any tool in the batch still needs an approval decision,\n  // defer all execution so side effects don't happen before the user decides.\n  const hasPendingApprovals = toolCalls.some((tc) => {\n    const t = toolMap.get(tc.function.name)\n    return (\n      t?.needsApproval &&\n      approvalResolution(approvals, tc.id) === undefined &&\n      !resumeState?.cancelledToolCallIds?.has(tc.id)\n    )\n  })\n\n  for (const toolCall of toolCalls) {\n    const tool = toolMap.get(toolCall.function.name)\n    const toolName = toolCall.function.name\n\n    if (!tool) {\n      // Unknown tool - return error\n      results.push({\n        toolCallId: toolCall.id,\n        toolName,\n        result: { error: `Unknown tool: ${toolName}` },\n        state: 'output-error',\n      })\n      continue\n    }\n\n    // Skip non-pending tools while approvals are outstanding\n    if (hasPendingApprovals) {\n      const isPendingApproval =\n        tool.needsApproval &&\n        approvalResolution(approvals, toolCall.id) === undefined\n      const isPlainClientRequest = !tool.needsApproval && !tool.execute\n      if (!isPendingApproval && !isPlainClientRequest) {\n        continue\n      }\n    }\n\n    if (resumeState?.cancelledToolCallIds?.has(toolCall.id)) {\n      results.push({\n        toolCallId: toolCall.id,\n        toolName,\n        result: { error: 'Tool execution cancelled' },\n        state: 'output-error',\n      })\n      continue\n    }\n\n    // Parse arguments, throwing error if invalid JSON\n    let input: unknown = {}\n    const argsStr = toolCall.function.arguments.trim() || '{}'\n    if (argsStr) {\n      try {\n        const parsed = JSON.parse(argsStr)\n        // Normalize null/non-object to {} (e.g. Anthropic empty tool_use blocks)\n        input = parsed && typeof parsed === 'object' ? parsed : {}\n      } catch (parseError) {\n        // If parsing fails, throw error to fail fast\n        throw new Error(`Failed to parse tool arguments as JSON: ${argsStr}`)\n      }\n    }\n\n    // Validate input against inputSchema (for Standard Schema compliant schemas)\n    if (tool.inputSchema && isStandardSchema(tool.inputSchema)) {\n      try {\n        input = parseWithStandardSchema(tool.inputSchema, input)\n      } catch (validationError: unknown) {\n        const message =\n          validationError instanceof Error\n            ? validationError.message\n            : 'Validation failed'\n        results.push({\n          toolCallId: toolCall.id,\n          toolName,\n          result: {\n            error: `Input validation failed for tool ${tool.name}: ${message}`,\n          },\n          // raw parse may have failed validation — still attach best-effort input\n          input,\n          state: 'output-error',\n        })\n        continue\n      }\n    }\n\n    // Create a ToolExecutionContext for this tool call with event emission\n    const pendingEvents: Array<CustomEvent> = []\n    const context = {\n      toolCallId: toolCall.id,\n      context: userContext,\n      abortSignal,\n      emitCustomEvent: (eventName: string, value: Record<string, any>) => {\n        if (createCustomEventChunk) {\n          pendingEvents.push(\n            createCustomEventChunk(eventName, {\n              ...value,\n              toolCallId: toolCall.id,\n            }),\n          )\n        }\n      },\n    } as ToolExecutionContext<TContext>\n\n    // CASE 1: Client-side tool (no execute function)\n    if (!tool.execute) {\n      // Check if tool needs approval\n      if (tool.needsApproval) {\n        const approvalId = `approval_${toolCall.id}`\n        const resolution = approvalResolution(approvals, toolCall.id)\n\n        // Check if approval decision exists\n        if (resolution !== undefined) {\n          const approved = isApproved(resolution)\n\n          if (approved) {\n            input = editedApprovalArgs(resolution) ?? input\n            // Approved - check if client has executed\n            if (clientResults.has(toolCall.id)) {\n              results.push(\n                buildClientToolResult(\n                  toolCall.id,\n                  toolName,\n                  tool,\n                  clientResults.get(toolCall.id),\n                  input,\n                ),\n              )\n            } else {\n              // Approved but not executed yet - request client execution\n              needsClientExecution.push({\n                toolCallId: toolCall.id,\n                toolName,\n                input,\n              })\n            }\n          } else {\n            // User declined\n            results.push({\n              toolCallId: toolCall.id,\n              toolName,\n              result:\n                resumeState?.deniedToolResults?.get(toolCall.id) ??\n                deniedApprovalResult(resolution),\n              input,\n              state: 'output-error',\n            })\n          }\n        } else {\n          // Need approval first\n          needsApproval.push({\n            toolCallId: toolCall.id,\n            toolName: toolCall.function.name,\n            input,\n            approvalId,\n          })\n        }\n      } else {\n        // No approval needed - check if client has executed\n        if (clientResults.has(toolCall.id)) {\n          results.push(\n            buildClientToolResult(\n              toolCall.id,\n              toolName,\n              tool,\n              clientResults.get(toolCall.id),\n              input,\n            ),\n          )\n        } else {\n          // Request client execution\n          needsClientExecution.push({\n            toolCallId: toolCall.id,\n            toolName,\n            input,\n          })\n        }\n      }\n      continue\n    }\n\n    // CASE 2: Server tool with approval required\n    if (tool.needsApproval) {\n      const approvalId = `approval_${toolCall.id}`\n      const resolution = approvalResolution(approvals, toolCall.id)\n\n      // Check if approval decision exists\n      if (resolution !== undefined) {\n        const approved = isApproved(resolution)\n\n        if (approved) {\n          input = editedApprovalArgs(resolution) ?? input\n          // Apply middleware before-hook for approved tools\n          if (middlewareHooks) {\n            const decision = await applyBeforeToolCallDecision(\n              toolCall,\n              tool,\n              input,\n              toolName,\n              middlewareHooks,\n              results,\n            )\n            if (!decision.proceed) continue\n            input = decision.input\n          }\n\n          yield* executeServerTool(\n            toolCall,\n            tool,\n            toolName,\n            input,\n            context,\n            pendingEvents,\n            results,\n            middlewareHooks,\n          )\n        } else {\n          // User declined\n          results.push({\n            toolCallId: toolCall.id,\n            toolName,\n            result:\n              resumeState?.deniedToolResults?.get(toolCall.id) ??\n              deniedApprovalResult(resolution),\n            input,\n            state: 'output-error',\n          })\n        }\n      } else {\n        // Need approval\n        needsApproval.push({\n          toolCallId: toolCall.id,\n          toolName,\n          input,\n          approvalId,\n        })\n      }\n      continue\n    }\n\n    // CASE 3: Normal server tool - execute immediately\n    if (middlewareHooks) {\n      const decision = await applyBeforeToolCallDecision(\n        toolCall,\n        tool,\n        input,\n        toolName,\n        middlewareHooks,\n        results,\n      )\n      if (!decision.proceed) continue\n      input = decision.input\n    }\n\n    yield* executeServerTool(\n      toolCall,\n      tool,\n      toolName,\n      input,\n      context,\n      pendingEvents,\n      results,\n      middlewareHooks,\n    )\n  }\n\n  return { results, needsApproval, needsClientExecution }\n}\n"],"mappings":";;;AA6BA,SAAS,cAAc,OAAwB;CAC7C,IAAI;EACF,OAAO,KAAK,MAAM,KAAK;CACzB,QAAQ;EACN,OAAO;CACT;AACF;AA0BA,SAAS,eAAe,MAA2C;CAEjE,OADc,KAAK,UAAmD;AAExE;;;;;;;;;;AAWA,eAAe,uBACb,MACA,SACe;CACf,MAAM,MAAM,eAAe,IAAI;CAC/B,MAAM,QAAQ,KAAK;CACnB,IAAI,CAAC,SAAS,CAAC,IAAI,cAAc;CAIjC,IAAI;CACJ,IAAI;EAOF,WAAU,MANQ,IAAI,aAAa,KAAK,EAAA,CAM1B,SAAS,MAAM,MAAM,EAAE,QAAQ,KAAK;CACpD,SAAS,KAAK;EAGZ,QAAQ,KAAK,yCAAyC,MAAM,IAAI,GAAG;EACnE;CACF;CACA,IAAI,CAAC,SAAS;EACZ,QAAQ,KACN,0BAA0B,MAAM,qDAClC;EACA;CACF;CAKA,QAAQ,gBAAgB,eAAe;EACrC,UAAU;GACR,KAAK,QAAQ;GACb,UAAU,QAAQ,YAAY;GAC9B,MAAM,QAAQ;GACd,MAAM,QAAQ;EAChB;EACA,UAAU,IAAI;EACd,UAAU,IAAI,kBAAkB,KAAK;EACrC,MAAM,KAAA;CACR,CAAC;AACH;;;;AAkBA,IAAa,uBAAb,cAA0C,MAAM;CAC9C,YAAY,QAAgB;EAC1B,MAAM,MAAM;EACZ,KAAK,OAAO;CACd;AACF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkEA,IAAa,kBAAb,MAKE;CACA,+BAAgC,IAAI,IAAsB;CAC1D;CAIA,YACE,OAGA;EACA,KAAK,QAAQ;CACf;;;;CAKA,sBAAsB,OAAiC;EACrD,MAAM,QAAQ,MAAM,SAAS,KAAK,aAAa;EAC/C,MAAM,eAAe;EAErB,MAAM,OAAO,aAAa,gBAAgB,aAAa;EACvD,KAAK,aAAa,IAAI,OAAO;GAC3B,IAAI,MAAM;GACV,MAAM;GACN,UAAU;IACR;IACA,WAAW;GACb;GACA,GAAI,MAAM,aAAa,KAAA,KAAa,EAAE,UAAU,MAAM,SAAS;EACjE,CAAC;CACH;;;;CAKA,qBAAqB,OAAgC;EAEnD,KAAK,MAAM,GAAG,aAAa,KAAK,aAAa,QAAQ,GACnD,IAAI,SAAS,OAAO,MAAM,YAAY;GACpC,SAAS,SAAS,aAAa,MAAM;GACrC;EACF;CAEJ;;;;;CAMA,iBAAiB,OAA+B;EAC9C,KAAK,MAAM,GAAG,aAAa,KAAK,aAAa,QAAQ,GACnD,IAAI,SAAS,OAAO,MAAM,YAAY;GACpC,IAAI,MAAM,UAAU,KAAA,GAAW;IAE7B,MAAM,aACJ,MAAM,SAAS,OAAO,MAAM,UAAU,WAAW,MAAM,QAAQ,CAAC;IAClE,SAAS,SAAS,YAAY,KAAK,UAAU,UAAU;GACzD;GACA;EACF;CAEJ;;;;CAKA,eAAwB;EACtB,OAAO,KAAK,aAAa,CAAC,CAAC,SAAS;CACtC;;;;CAKA,eAAgC;EAC9B,OAAO,MAAM,KAAK,KAAK,aAAa,OAAO,CAAC,CAAC,CAAC,QAC3C,OAAO,GAAG,MAAM,GAAG,SAAS,QAAQ,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,SAAS,CACxE;CACF;;;;;;CAOA,OAAO,aACL,aACA,GAAG,aAC0D;EAC7D,MAAM,iBAAiB,KAAK,aAAa;EACzC,MAAM,cAAmC,CAAC;EAC1C,MAAM,oBAAoB,YAAY,SAAS;EAC/C,MAAM,cAAc,YAAY;EAEhC,KAAK,MAAM,YAAY,gBAAgB;GACrC,MAAM,OAAO,KAAK,MAAM,MAAM,MAAM,EAAE,SAAS,SAAS,SAAS,IAAI;GAErE,IAAI;GACJ,IAAI;GAOJ,IAAI;GACJ,IAAI,MAAM,SACR,IAAI;IAEF,IAAI;IACJ,IAAI;KACF,MAAM,aAAa,SAAS,SAAS,UAAU,KAAK,KAAK;KACzD,MAAM,SAAS,KAAK,MAAM,UAAU;KACpC,OAAO,UAAU,OAAO,WAAW,WAAW,SAAS,CAAC;IAC1D,SAAS,YAAY;KACnB,MAAM,IAAI,MACR,2CAA2C,SAAS,SAAS,WAC/D;IACF;IAGA,IAAI,KAAK,eAAe,iBAAiB,KAAK,WAAW,GACvD,IAAI;KACF,OAAO,wBAAwB,KAAK,aAAa,IAAI;IACvD,SAAS,iBAA0B;KACjC,MAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;KACN,MAAM,IAAI,MACR,oCAAoC,KAAK,KAAK,IAAI,SACpD;IACF;IAIF,MAAM,mBAAmB;KACvB,YAAY,SAAS;KACrB,SAAS;KACT,uBAAuB,CAAC;IAC1B;IACA,IAAI,SAAS,oBACT,MAAM,KAAK,QAAQ,MAAM,gBAAgB,IACzC,MAAM,KAAK,QAAQ,IAAI;IAO3B,IAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GACzD,IAAI;KACF,SAAS,wBAAwB,KAAK,cAAc,MAAM;IAC5D,SAAS,iBAA0B;KACjC,MAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;KACN,MAAM,IAAI,MACR,qCAAqC,KAAK,KAAK,IAAI,SACrD;IACF;IAGF,aAAa;IACb,oBAAoB,oBAAoB,MAAM;GAChD,SAAS,OAAgB;IAIvB,oBAAoB,yBADlB,iBAAiB,QAAQ,MAAM,UAAU;IAE3C,kBAAkB;GACpB;QAGA,oBAAoB,QAAQ,SAAS,SAAS,KAAK;GAIrD,MAAM;IACJ,MAAM;IACN,YAAY,SAAS;IACrB,cAAc,SAAS,SAAS;IAChC,UAAU,SAAS,SAAS;IAC5B,OAAO,YAAY;IACnB,WAAW,KAAK,IAAI;IAEpB,GAAI,eAAe,KAAA,IAAY,EAAE,QAAQ,WAAW,IAAI,CAAC;IACzD,QAAQ;IACR,GAAI,oBAAoB,KAAA,KAAa,EAAE,OAAO,gBAAgB;GAChE;GAGA,YAAY,KAAK;IACf,MAAM;IACN,SAAS;IACT,YAAY,SAAS;GACvB,CAAC;EACH;EAEA,OAAO;CACT;;;;CAKA,QAAc;EACZ,KAAK,aAAa,MAAM;CAC1B;AACF;AAwCA,SAAS,mBACP,WACA,YACoC;CACpC,OAAO,UAAU,IAAI,UAAU,KAAK,UAAU,IAAI,YAAY,YAAY;AAC5E;AAEA,SAAS,WAAW,YAA6C;CAC/D,OAAO,OAAO,eAAe,YAAY,aAAa,WAAW;AACnE;AAEA,SAAS,mBACP,YACqB;CACrB,OAAO,OAAO,eAAe,YAAY,WAAW,WAChD,WAAW,aACX,KAAA;AACN;AAEA,SAAS,qBAAqB,YAA6C;CACzE,OAAO,OAAO,eAAe,YAAY,CAAC,WAAW,WAChD,WAAW,WAAW,EAAE,OAAO,+BAA+B,IAC/D,EAAE,OAAO,+BAA+B;AAC9C;;;;;;AAgBA,gBAAgB,wBACd,kBACA,eACsC;CAEtC,MAAM,QAAQ;EAAE,MAAM;EAAO,QAAQ,KAAA;CAAe;CACpD,MAAM,oBAAoB,iBAAiB,MAAM,MAAM;EACrD,MAAM,OAAO;EACb,MAAM,SAAS;EACf,OAAO;CACT,CAAC;CAED,OAAO,CAAC,MAAM,MAAM;EAElB,MAAM,QAAQ,KAAK,CACjB,mBACA,IAAI,SAAS,YAAY,WAAW,SAAS,EAAE,CAAC,CAClD,CAAC;EAGD,IAAI;EACJ,QAAQ,QAAQ,cAAc,MAAM,OAAO,KAAA,GACzC,MAAM;CAEV;CAGA,IAAI;CACJ,QAAQ,QAAQ,cAAc,MAAM,OAAO,KAAA,GACzC,MAAM;CAGR,OAAO,MAAM;AACf;;;;;;;AAQA,eAAe,4BACb,UACA,MACA,OACA,UACA,iBACA,SACiE;CACjE,IAAI,CAAC,gBAAgB,kBACnB,OAAO;EAAE,SAAS;EAAM;CAAM;CAGhC,MAAM,WAAW,MAAM,gBAAgB,iBAAiB,UAAU,MAAM,KAAK;CAC7E,IAAI,CAAC,UACH,OAAO;EAAE,SAAS;EAAM;CAAM;CAGhC,IAAI,SAAS,SAAS,SACpB,MAAM,IAAI,qBAAqB,SAAS,UAAU,uBAAuB;CAG3E,IAAI,SAAS,SAAS,QAAQ;EAC5B,MAAM,aAAa,SAAS;EAC5B,QAAQ,KAAK;GACX,YAAY,SAAS;GACrB;GACA,QACE,OAAO,eAAe,WAClB,cAAc,UAAU,IACvB,cAAc;GACrB,UAAU;EACZ,CAAC;EACD,IAAI,gBAAgB,iBAClB,MAAM,gBAAgB,gBAAgB;GACpC;GACA;GACA;GACA,YAAY,SAAS;GACrB,IAAI;GACJ,UAAU;GACV,QAAQ;EACV,CAAC;EAEH,OAAO,EAAE,SAAS,MAAM;CAC1B;CAEA,OAAO;EAAE,SAAS;EAAM,OAAO,SAAS;CAAK;AAC/C;;;;;AAMA,gBAAuB,kBACrB,UACA,MACA,UACA,OACA,SACA,eACA,SACA,iBACyC;CACzC,MAAM,YAAY,KAAK,IAAI;CAC3B,IAAI;EACF,IAAI,CAAC,KAAK,SACR,MAAM,IAAI,MAAM,QAAQ,SAAS,iCAAiC;EAGpE,IAAI,SAAS,OAAO,wBADK,QAAQ,QAAQ,KAAK,QAAQ,OAAO,OAAO,CACxB,GAAkB,aAAa;EAC3E,MAAM,WAAW,KAAK,IAAI,IAAI;EAO9B,MAAM,uBAAuB,MAAM,OAAO;EAG1C,IAAI;EACJ,QAAQ,eAAe,cAAc,MAAM,OAAO,KAAA,GAChD,MAAM;EAKR,IAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GACzD,SAAS,wBAAwB,KAAK,cAAc,MAAM;EAG5D,MAAM,cACJ,OAAO,WAAW,WAAW,cAAc,MAAM,IAAK,UAAU;EAElE,QAAQ,KAAK;GACX,YAAY,SAAS;GACrB;GACA,QAAQ;GACR;GACA,QAAQ;GACR;EACF,CAAC;EAED,IAAI,iBAAiB,iBACnB,MAAM,gBAAgB,gBAAgB;GACpC;GACA;GACA;GACA,YAAY,SAAS;GACrB,IAAI;GACJ;GACA,QAAQ;EACV,CAAC;CAEL,SAAS,OAAgB;EACvB,MAAM,WAAW,KAAK,IAAI,IAAI;EAG9B,IAAI;EACJ,QAAQ,eAAe,cAAc,MAAM,OAAO,KAAA,GAChD,MAAM;EAGR,IAAI,iBAAiB,sBACnB,MAAM;EAGR,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,QAAQ,KAAK;GACX,YAAY,SAAS;GACrB;GACA,QAAQ,EAAE,OAAO,QAAQ;GACzB;GACA,OAAO;GACP;EACF,CAAC;EAED,IAAI,iBAAiB,iBACnB,MAAM,gBAAgB,gBAAgB;GACpC;GACA;GACA;GACA,YAAY,SAAS;GACrB,IAAI;GACJ;GACA;EACF,CAAC;CAEL;AACF;AAEA,SAAS,sBACP,YACA,UACA,MACA,WACA,OACY;CACZ,IAAI;EACF,IAAI,SAAS;EACb,IAAI,KAAK,gBAAgB,iBAAiB,KAAK,YAAY,GACzD,SAAS,wBAAwB,KAAK,cAAc,MAAM;EAG5D,MAAM,SACJ,OAAO,WAAW,WAAW,cAAc,MAAM,IAAK,UAAU;EAClE,OAAO;GACL;GACA;GACA,QAAQ;GACR;GACA,QAAQ;EACV;CACF,SAAS,OAAgB;EAEvB,OAAO;GACL;GACA;GACA,QAAQ,EAAE,OAJI,iBAAiB,QAAQ,MAAM,UAAU,oBAI9B;GACzB;GACA,OAAO;EACT;CACF;AACF;;;;;;;;;;;;;;;;AAiBA,gBAAuB,iBACrB,WACA,OACA,4BAAiD,IAAI,IAAI,GACzD,gCAAkC,IAAI,IAAI,GAC1C,wBAIA,iBACA,aACA,aACA,aAC2D;CAC3D,MAAM,UAA6B,CAAC;CACpC,MAAM,gBAAwC,CAAC;CAC/C,MAAM,uBAAiD,CAAC;CAGxD,MAAM,0BAAU,IAAI,IAAqB;CACzC,KAAK,MAAM,QAAQ,OACjB,QAAQ,IAAI,KAAK,MAAM,IAAI;CAK7B,MAAM,sBAAsB,UAAU,MAAM,OAAO;EAEjD,OADU,QAAQ,IAAI,GAAG,SAAS,IAEhC,CAAA,EAAG,iBACH,mBAAmB,WAAW,GAAG,EAAE,MAAM,KAAA,KACzC,CAAC,aAAa,sBAAsB,IAAI,GAAG,EAAE;CAEjD,CAAC;CAED,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,OAAO,QAAQ,IAAI,SAAS,SAAS,IAAI;EAC/C,MAAM,WAAW,SAAS,SAAS;EAEnC,IAAI,CAAC,MAAM;GAET,QAAQ,KAAK;IACX,YAAY,SAAS;IACrB;IACA,QAAQ,EAAE,OAAO,iBAAiB,WAAW;IAC7C,OAAO;GACT,CAAC;GACD;EACF;EAGA,IAAI,qBAAqB;GACvB,MAAM,oBACJ,KAAK,iBACL,mBAAmB,WAAW,SAAS,EAAE,MAAM,KAAA;GACjD,MAAM,uBAAuB,CAAC,KAAK,iBAAiB,CAAC,KAAK;GAC1D,IAAI,CAAC,qBAAqB,CAAC,sBACzB;EAEJ;EAEA,IAAI,aAAa,sBAAsB,IAAI,SAAS,EAAE,GAAG;GACvD,QAAQ,KAAK;IACX,YAAY,SAAS;IACrB;IACA,QAAQ,EAAE,OAAO,2BAA2B;IAC5C,OAAO;GACT,CAAC;GACD;EACF;EAGA,IAAI,QAAiB,CAAC;EACtB,MAAM,UAAU,SAAS,SAAS,UAAU,KAAK,KAAK;EACtD,IAAI,SACF,IAAI;GACF,MAAM,SAAS,KAAK,MAAM,OAAO;GAEjC,QAAQ,UAAU,OAAO,WAAW,WAAW,SAAS,CAAC;EAC3D,SAAS,YAAY;GAEnB,MAAM,IAAI,MAAM,2CAA2C,SAAS;EACtE;EAIF,IAAI,KAAK,eAAe,iBAAiB,KAAK,WAAW,GACvD,IAAI;GACF,QAAQ,wBAAwB,KAAK,aAAa,KAAK;EACzD,SAAS,iBAA0B;GACjC,MAAM,UACJ,2BAA2B,QACvB,gBAAgB,UAChB;GACN,QAAQ,KAAK;IACX,YAAY,SAAS;IACrB;IACA,QAAQ,EACN,OAAO,oCAAoC,KAAK,KAAK,IAAI,UAC3D;IAEA;IACA,OAAO;GACT,CAAC;GACD;EACF;EAIF,MAAM,gBAAoC,CAAC;EAC3C,MAAM,UAAU;GACd,YAAY,SAAS;GACrB,SAAS;GACT;GACA,kBAAkB,WAAmB,UAA+B;IAClE,IAAI,wBACF,cAAc,KACZ,uBAAuB,WAAW;KAChC,GAAG;KACH,YAAY,SAAS;IACvB,CAAC,CACH;GAEJ;EACF;EAGA,IAAI,CAAC,KAAK,SAAS;GAEjB,IAAI,KAAK,eAAe;IACtB,MAAM,aAAa,YAAY,SAAS;IACxC,MAAM,aAAa,mBAAmB,WAAW,SAAS,EAAE;IAG5D,IAAI,eAAe,KAAA,GAGjB,IAFiB,WAAW,UAExB,GAAU;KACZ,QAAQ,mBAAmB,UAAU,KAAK;KAE1C,IAAI,cAAc,IAAI,SAAS,EAAE,GAC/B,QAAQ,KACN,sBACE,SAAS,IACT,UACA,MACA,cAAc,IAAI,SAAS,EAAE,GAC7B,KACF,CACF;UAGA,qBAAqB,KAAK;MACxB,YAAY,SAAS;MACrB;MACA;KACF,CAAC;IAEL,OAEE,QAAQ,KAAK;KACX,YAAY,SAAS;KACrB;KACA,QACE,aAAa,mBAAmB,IAAI,SAAS,EAAE,KAC/C,qBAAqB,UAAU;KACjC;KACA,OAAO;IACT,CAAC;SAIH,cAAc,KAAK;KACjB,YAAY,SAAS;KACrB,UAAU,SAAS,SAAS;KAC5B;KACA;IACF,CAAC;GAEL,OAEE,IAAI,cAAc,IAAI,SAAS,EAAE,GAC/B,QAAQ,KACN,sBACE,SAAS,IACT,UACA,MACA,cAAc,IAAI,SAAS,EAAE,GAC7B,KACF,CACF;QAGA,qBAAqB,KAAK;IACxB,YAAY,SAAS;IACrB;IACA;GACF,CAAC;GAGL;EACF;EAGA,IAAI,KAAK,eAAe;GACtB,MAAM,aAAa,YAAY,SAAS;GACxC,MAAM,aAAa,mBAAmB,WAAW,SAAS,EAAE;GAG5D,IAAI,eAAe,KAAA,GAGjB,IAFiB,WAAW,UAExB,GAAU;IACZ,QAAQ,mBAAmB,UAAU,KAAK;IAE1C,IAAI,iBAAiB;KACnB,MAAM,WAAW,MAAM,4BACrB,UACA,MACA,OACA,UACA,iBACA,OACF;KACA,IAAI,CAAC,SAAS,SAAS;KACvB,QAAQ,SAAS;IACnB;IAEA,OAAO,kBACL,UACA,MACA,UACA,OACA,SACA,eACA,SACA,eACF;GACF,OAEE,QAAQ,KAAK;IACX,YAAY,SAAS;IACrB;IACA,QACE,aAAa,mBAAmB,IAAI,SAAS,EAAE,KAC/C,qBAAqB,UAAU;IACjC;IACA,OAAO;GACT,CAAC;QAIH,cAAc,KAAK;IACjB,YAAY,SAAS;IACrB;IACA;IACA;GACF,CAAC;GAEH;EACF;EAGA,IAAI,iBAAiB;GACnB,MAAM,WAAW,MAAM,4BACrB,UACA,MACA,OACA,UACA,iBACA,OACF;GACA,IAAI,CAAC,SAAS,SAAS;GACvB,QAAQ,SAAS;EACnB;EAEA,OAAO,kBACL,UACA,MACA,UACA,OACA,SACA,eACA,SACA,eACF;CACF;CAEA,OAAO;EAAE;EAAS;EAAe;CAAqB;AACxD"}

package/dist/esm/activities/chat/tools/tool-definition.d.ts

@@ -1,38 +1,97 @@
-import { StandardJSONSchemaV1 } from '@standard-schema/spec';
-import { JSONSchema, SchemaInput, Tool, ToolExecuteFunction } from '../../../types.js';
+import { InferSchemaType, JSONSchema, SchemaInput, Tool, ToolExecuteFunction } from '../../../types.js';
+import { StandardJSONSchemaV1, StandardSchemaV1 } from '@standard-schema/spec';
+/**
+ * Type-level brand key for {@link ToolApprovalCapabilityMarker}. Only ever used
+ * in type positions, but it must stay exported: a `unique symbol` referenced by
+ * an exported interface has to be nameable in the emitted declarations.
+ *
+ * @public
+ */
+export declare const toolApprovalCapability: unique symbol;
+export interface ToolApprovalCapabilityMarker<TNeedsApproval extends boolean, TApprovalSchema> {
+    readonly [toolApprovalCapability]?: {
+        needsApproval: TNeedsApproval;
+        approvalSchema: TApprovalSchema;
+    };
+}
+export type ApprovalSchemaConfig = SchemaInput | {
+    approve: SchemaInput;
+    reject?: SchemaInput;
+} | {
+    approve?: SchemaInput;
+    reject: SchemaInput;
+};
+type ApprovalConfig<TNeedsApproval extends boolean, TApprovalSchema extends ApprovalSchemaConfig | undefined> = TNeedsApproval extends true ? {
+    needsApproval: TNeedsApproval;
+    approvalSchema?: TApprovalSchema;
+} : {
+    needsApproval?: TNeedsApproval;
+    approvalSchema?: never;
+};
+export type ApprovalCapabilityOf<TTool> = TTool extends ToolApprovalCapabilityMarker<infer TNeeds, unknown> ? TNeeds : false;
+export type ApprovalSchemaOf<TTool> = TTool extends ToolApprovalCapabilityMarker<boolean, infer TSchema> ? TSchema : undefined;
+export declare const noSchema: unique symbol;
+export type NoSchema = typeof noSchema;
+export type InputSchemaOf<TTool> = TTool extends {
+    inputSchema: infer TInput;
+} ? TInput extends undefined ? NoSchema : TInput : NoSchema;
+export type OutputSchemaOf<TTool> = TTool extends {
+    outputSchema: infer TOutput;
+} ? TOutput extends undefined ? NoSchema : TOutput : NoSchema;
+type BuiltToolSchemaFields<TInput extends SchemaInput | undefined, TOutput extends SchemaInput | undefined, TApprovalSchema extends ApprovalSchemaConfig | undefined> = {
+    inputSchema: TInput;
+    outputSchema: TOutput;
+    approvalSchema: TApprovalSchema;
+};
 /**
  * Marker type for server-side tools
  */
-export interface ServerTool<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, TContext = unknown> extends Tool<TInput, TOutput, TName, TContext> {
+export interface ServerTool<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, TContext = unknown, TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined> extends Tool<TInput, TOutput, TName, TContext>, ToolApprovalCapabilityMarker<TNeedsApproval, TApprovalSchema> {
     __toolSide: 'server';
+    inputSchema?: TInput;
+    outputSchema?: TOutput;
+    needsApproval?: TNeedsApproval;
+    approvalSchema?: TApprovalSchema;
 }
 /**
  * Marker type for client-side tools
  */
-export interface ClientTool<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, TContext = unknown, TNeedsApproval extends boolean = false> {
+export interface ClientTool<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, TContext = unknown, TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined> extends ToolApprovalCapabilityMarker<TNeedsApproval, TApprovalSchema> {
     __toolSide: 'client';
     name: TName;
     description: string;
     inputSchema?: TInput;
     outputSchema?: TOutput;
     needsApproval?: TNeedsApproval;
+    approvalSchema?: TApprovalSchema;
     lazy?: boolean;
     metadata?: Record<string, unknown>;
     execute?: ToolExecuteFunction<TInput, TOutput, TContext>;
 }
+/** Broad server-tool shape for heterogeneous internal collections. */
+export type AnyServerTool = Omit<ServerTool<any, any, string, any, boolean, any>, 'execute'> & {
+    execute?: ((args: any, context?: any) => any) | undefined;
+};
 /**
  * Tool definition that can be used directly or instantiated for server/client
  */
-export interface ToolDefinitionInstance<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, TContext = unknown, TNeedsApproval extends boolean = false> extends Tool<TInput, TOutput, TName, TContext> {
+export interface ToolDefinitionInstance<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, TContext = unknown, TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined> extends Tool<TInput, TOutput, TName, TContext> {
     __toolSide: 'definition';
+    inputSchema: TInput;
+    outputSchema: TOutput;
     needsApproval?: TNeedsApproval;
+    approvalSchema: TApprovalSchema;
+    readonly [toolApprovalCapability]?: {
+        needsApproval: TNeedsApproval;
+        approvalSchema: TApprovalSchema;
+    };
 }
 /**
  * Union type for any kind of client-side tool (client tool or definition)
  */
-export type AnyClientTool = (Omit<ClientTool<any, any, string, any, boolean>, 'execute'> & {
+export type AnyClientTool = (Omit<ClientTool<any, any, string, any, boolean, any>, 'execute'> & {
     execute?: ((args: any, context?: any) => any) | undefined;
-}) | (Omit<ToolDefinitionInstance<any, any, string, any, boolean>, 'execute'> & {
+}) | (Omit<ToolDefinitionInstance<any, any, string, any, boolean, any>, 'execute'> & {
     execute?: ((args: any, context?: any) => any) | undefined;
 });
 /**
@@ -46,39 +105,38 @@ export type InferToolName<T> = T extends {
  */
 export type InferToolInput<T> = T extends {
     inputSchema?: infer TInput;
-} ? TInput extends StandardJSONSchemaV1<infer TInferred, unknown> ? TInferred : TInput extends JSONSchema ? unknown : unknown : unknown;
+} ? TInput extends JSONSchema ? unknown : InferSchemaType<TInput> : unknown;
 /**
  * Extract the output type from a tool (inferred from Standard JSON Schema, or `unknown` for plain JSONSchema)
  */
 export type InferToolOutput<T> = T extends {
     outputSchema?: infer TOutput;
-} ? TOutput extends StandardJSONSchemaV1<infer TInferred, unknown> ? TInferred : TOutput extends JSONSchema ? unknown : unknown : unknown;
+} ? TOutput extends StandardJSONSchemaV1<any, any> ? InferSchemaType<TOutput> : TOutput extends StandardSchemaV1<any, any> ? InferSchemaType<TOutput> : TOutput extends JSONSchema ? unknown : InferSchemaType<TOutput> : unknown;
 /**
  * Tool definition configuration
  */
-export interface ToolDefinitionConfig<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, TNeedsApproval extends boolean = false> {
+export type ToolDefinitionConfig<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined> = {
     name: TName;
     description: string;
     inputSchema?: TInput;
     outputSchema?: TOutput;
-    needsApproval?: TNeedsApproval;
     lazy?: boolean;
     metadata?: Record<string, unknown>;
-}
+} & ApprovalConfig<TNeedsApproval, TApprovalSchema>;
 /**
  * Tool definition builder that allows creating server or client tools from a shared definition
  */
-export interface ToolDefinition<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, TNeedsApproval extends boolean = false> extends ToolDefinitionInstance<TInput, TOutput, TName, unknown, TNeedsApproval> {
+export interface ToolDefinition<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined> extends ToolDefinitionInstance<TInput, TOutput, TName, unknown, TNeedsApproval, TApprovalSchema> {
     /**
      * Create a server-side tool with execute function
      */
-    server: <TContext = unknown>(execute: ToolExecuteFunction<TInput, TOutput, TContext>) => ServerTool<TInput, TOutput, TName, TContext>;
+    server: <TContext = unknown>(execute: ToolExecuteFunction<TInput, TOutput, TContext>) => ServerTool<TInput, TOutput, TName, TContext, TNeedsApproval, TApprovalSchema> & BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema>;
     /**
      * Create a client-side tool with optional execute function.
      * Carries the definition's `needsApproval` literal through to the client
      * tool so the tool-call part's `approval` field stays gated on it.
      */
-    client: <TContext = unknown>(execute?: ToolExecuteFunction<TInput, TOutput, TContext>) => ClientTool<TInput, TOutput, TName, TContext, TNeedsApproval>;
+    client: <TContext = unknown>(execute?: ToolExecuteFunction<TInput, TOutput, TContext>) => ClientTool<TInput, TOutput, TName, TContext, TNeedsApproval, TApprovalSchema> & BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema>;
 }
 /**
  * Create an isomorphic tool definition that can be used directly or instantiated for server/client
@@ -135,4 +193,5 @@ export interface ToolDefinition<TInput extends SchemaInput = SchemaInput, TOutpu
  * });
  * ```
  */
-export declare function toolDefinition<TInput extends SchemaInput = SchemaInput, TOutput extends SchemaInput = SchemaInput, TName extends string = string, const TNeedsApproval extends boolean = false>(config: ToolDefinitionConfig<TInput, TOutput, TName, TNeedsApproval>): ToolDefinition<TInput, TOutput, TName, TNeedsApproval>;
+export declare function toolDefinition<TInput extends SchemaInput | undefined = undefined, TOutput extends SchemaInput | undefined = undefined, TName extends string = string, const TNeedsApproval extends boolean = false, TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined>(config: ToolDefinitionConfig<TInput, TOutput, TName, TNeedsApproval, TApprovalSchema>): ToolDefinition<TInput, TOutput, TName, TNeedsApproval, TApprovalSchema>;
+export {};

package/dist/esm/activities/chat/tools/tool-definition.js

@@ -1,25 +1,97 @@
+//#region src/activities/chat/tools/tool-definition.ts
+/**
+* Create an isomorphic tool definition that can be used directly or instantiated for server/client
+*
+* The definition contains all tool metadata (name, description, schemas) and can be:
+* 1. Used directly in chat() on the server (as a tool definition without execute)
+* 2. Instantiated as a server tool with .server()
+* 3. Instantiated as a client tool with .client()
+*
+* Supports any Standard JSON Schema compliant library (Zod v4+, ArkType, Valibot, etc.)
+* or plain JSON Schema objects.
+*
+* @example
+* ```typescript
+* import { toolDefinition } from '@tanstack/ai';
+* import { z } from 'zod';
+*
+* // Using Zod (natively supports Standard JSON Schema)
+* const addToCartTool = toolDefinition({
+*   name: 'addToCart',
+*   description: 'Add a guitar to the shopping cart (requires approval)',
+*   needsApproval: true,
+*   inputSchema: z.object({
+*     guitarId: z.string(),
+*     quantity: z.number(),
+*   }),
+*   outputSchema: z.object({
+*     success: z.boolean(),
+*     cartId: z.string(),
+*     totalItems: z.number(),
+*   }),
+* });
+*
+* // Use directly in chat (server-side, no execute function)
+* chat({
+*   tools: [addToCartTool],
+*   // ...
+* });
+*
+* // Or create server-side implementation
+* const addToCartServer = addToCartTool.server(async (args) => {
+*   // args is typed as { guitarId: string; quantity: number }
+*   return {
+*     success: true,
+*     cartId: 'CART_' + Date.now(),
+*     totalItems: args.quantity,
+*   };
+* });
+*
+* // Or create client-side implementation
+* const addToCartClient = addToCartTool.client(async (args) => {
+*   // Client-specific logic (e.g., localStorage)
+*   return { success: true, cartId: 'local', totalItems: 1 };
+* });
+* ```
+*/
 function toolDefinition(config) {
-  const definition = {
-    __toolSide: "definition",
-    ...config,
-    server(execute) {
-      return {
-        __toolSide: "server",
-        ...config,
-        execute
-      };
-    },
-    client(execute) {
-      return {
-        __toolSide: "client",
-        ...config,
-        ...execute !== void 0 && { execute }
-      };
-    }
-  };
-  return definition;
+	if (config.approvalSchema !== void 0 && config.needsApproval !== true) throw new TypeError("approvalSchema requires needsApproval: true.");
+	const inputSchema = config.inputSchema;
+	const outputSchema = config.outputSchema;
+	const approvalSchema = config.approvalSchema;
+	const needsApproval = config.needsApproval;
+	return {
+		__toolSide: "definition",
+		...config,
+		inputSchema,
+		outputSchema,
+		approvalSchema,
+		needsApproval,
+		server(execute) {
+			return {
+				__toolSide: "server",
+				...config,
+				inputSchema,
+				outputSchema,
+				approvalSchema,
+				needsApproval,
+				execute
+			};
+		},
+		client(execute) {
+			return {
+				__toolSide: "client",
+				...config,
+				inputSchema,
+				outputSchema,
+				approvalSchema,
+				needsApproval,
+				...execute !== void 0 && { execute }
+			};
+		}
+	};
 }
-export {
-  toolDefinition
-};
-//# sourceMappingURL=tool-definition.js.map
+//#endregion
+export { toolDefinition };
+
+//# sourceMappingURL=tool-definition.js.map

package/dist/esm/activities/chat/tools/tool-definition.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-definition.js","sources":["../../../../../src/activities/chat/tools/tool-definition.ts"],"sourcesContent":["import type { StandardJSONSchemaV1 } from '@standard-schema/spec'\nimport type {\n  JSONSchema,\n  SchemaInput,\n  Tool,\n  ToolExecuteFunction,\n} from '../../../types'\n\n/**\n * Marker type for server-side tools\n */\nexport interface ServerTool<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  TContext = unknown,\n> extends Tool<TInput, TOutput, TName, TContext> {\n  __toolSide: 'server'\n}\n\n/**\n * Marker type for client-side tools\n */\nexport interface ClientTool<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  TContext = unknown,\n  // Captured as a literal (`true` / `false`) so downstream types — notably\n  // the tool-call part's `approval` field — can be gated on it. Defaults to\n  // `false` when the tool config omits `needsApproval`.\n  TNeedsApproval extends boolean = false,\n> {\n  __toolSide: 'client'\n  name: TName\n  description: string\n  // Note: `inputSchema` / `outputSchema` stay as bare optionals (not\n  // widened to `| undefined`). They participate in inference via\n  // `InferToolInput` / `InferToolOutput` — widening with `| undefined`\n  // breaks the `infer TInput extends StandardJSONSchemaV1<...>` chain\n  // because `undefined` doesn't extend the schema constraint.\n  inputSchema?: TInput\n  outputSchema?: TOutput\n  needsApproval?: TNeedsApproval\n  lazy?: boolean\n  metadata?: Record<string, unknown>\n  execute?: ToolExecuteFunction<TInput, TOutput, TContext>\n}\n\n/**\n * Tool definition that can be used directly or instantiated for server/client\n */\nexport interface ToolDefinitionInstance<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  TContext = unknown,\n  TNeedsApproval extends boolean = false,\n> extends Tool<TInput, TOutput, TName, TContext> {\n  __toolSide: 'definition'\n  // Narrow the base `needsApproval?: boolean` to the captured literal so it\n  // survives into `ToolCallPartForTool`'s approval gate.\n  needsApproval?: TNeedsApproval\n}\n\n/**\n * Union type for any kind of client-side tool (client tool or definition)\n */\nexport type AnyClientTool =\n  | (Omit<ClientTool<any, any, string, any, boolean>, 'execute'> & {\n      execute?: ((args: any, context?: any) => any) | undefined\n    })\n  | (Omit<ToolDefinitionInstance<any, any, string, any, boolean>, 'execute'> & {\n      execute?: ((args: any, context?: any) => any) | undefined\n    })\n\n/**\n * Extract the tool name as a literal type\n */\nexport type InferToolName<T> = T extends { name: infer N } ? N : never\n\n/**\n * Extract the input type from a tool (inferred from Standard JSON Schema, or `unknown` for plain JSONSchema)\n */\nexport type InferToolInput<T> = T extends { inputSchema?: infer TInput }\n  ? TInput extends StandardJSONSchemaV1<infer TInferred, unknown>\n    ? TInferred\n    : TInput extends JSONSchema\n      ? unknown\n      : unknown\n  : unknown\n\n/**\n * Extract the output type from a tool (inferred from Standard JSON Schema, or `unknown` for plain JSONSchema)\n */\nexport type InferToolOutput<T> = T extends { outputSchema?: infer TOutput }\n  ? TOutput extends StandardJSONSchemaV1<infer TInferred, unknown>\n    ? TInferred\n    : TOutput extends JSONSchema\n      ? unknown\n      : unknown\n  : unknown\n\n/**\n * Tool definition configuration\n */\nexport interface ToolDefinitionConfig<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  TNeedsApproval extends boolean = false,\n> {\n  name: TName\n  description: string\n  inputSchema?: TInput\n  outputSchema?: TOutput\n  needsApproval?: TNeedsApproval\n  lazy?: boolean\n  metadata?: Record<string, unknown>\n}\n\n/**\n * Tool definition builder that allows creating server or client tools from a shared definition\n */\nexport interface ToolDefinition<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  TNeedsApproval extends boolean = false,\n> extends ToolDefinitionInstance<\n  TInput,\n  TOutput,\n  TName,\n  unknown,\n  TNeedsApproval\n> {\n  /**\n   * Create a server-side tool with execute function\n   */\n  server: <TContext = unknown>(\n    execute: ToolExecuteFunction<TInput, TOutput, TContext>,\n  ) => ServerTool<TInput, TOutput, TName, TContext>\n\n  /**\n   * Create a client-side tool with optional execute function.\n   * Carries the definition's `needsApproval` literal through to the client\n   * tool so the tool-call part's `approval` field stays gated on it.\n   */\n  client: <TContext = unknown>(\n    execute?: ToolExecuteFunction<TInput, TOutput, TContext>,\n  ) => ClientTool<TInput, TOutput, TName, TContext, TNeedsApproval>\n}\n\n/**\n * Create an isomorphic tool definition that can be used directly or instantiated for server/client\n *\n * The definition contains all tool metadata (name, description, schemas) and can be:\n * 1. Used directly in chat() on the server (as a tool definition without execute)\n * 2. Instantiated as a server tool with .server()\n * 3. Instantiated as a client tool with .client()\n *\n * Supports any Standard JSON Schema compliant library (Zod v4+, ArkType, Valibot, etc.)\n * or plain JSON Schema objects.\n *\n * @example\n * ```typescript\n * import { toolDefinition } from '@tanstack/ai';\n * import { z } from 'zod';\n *\n * // Using Zod (natively supports Standard JSON Schema)\n * const addToCartTool = toolDefinition({\n *   name: 'addToCart',\n *   description: 'Add a guitar to the shopping cart (requires approval)',\n *   needsApproval: true,\n *   inputSchema: z.object({\n *     guitarId: z.string(),\n *     quantity: z.number(),\n *   }),\n *   outputSchema: z.object({\n *     success: z.boolean(),\n *     cartId: z.string(),\n *     totalItems: z.number(),\n *   }),\n * });\n *\n * // Use directly in chat (server-side, no execute function)\n * chat({\n *   tools: [addToCartTool],\n *   // ...\n * });\n *\n * // Or create server-side implementation\n * const addToCartServer = addToCartTool.server(async (args) => {\n *   // args is typed as { guitarId: string; quantity: number }\n *   return {\n *     success: true,\n *     cartId: 'CART_' + Date.now(),\n *     totalItems: args.quantity,\n *   };\n * });\n *\n * // Or create client-side implementation\n * const addToCartClient = addToCartTool.client(async (args) => {\n *   // Client-specific logic (e.g., localStorage)\n *   return { success: true, cartId: 'local', totalItems: 1 };\n * });\n * ```\n */\nexport function toolDefinition<\n  TInput extends SchemaInput = SchemaInput,\n  TOutput extends SchemaInput = SchemaInput,\n  TName extends string = string,\n  // `const` forces the literal (`true` / `false`) to be captured from the\n  // config's optional `needsApproval` — without it TS widens to `boolean`,\n  // which collapses the approval gate in `ToolCallPartForTool`.\n  const TNeedsApproval extends boolean = false,\n>(\n  config: ToolDefinitionConfig<TInput, TOutput, TName, TNeedsApproval>,\n): ToolDefinition<TInput, TOutput, TName, TNeedsApproval> {\n  const definition: ToolDefinition<TInput, TOutput, TName, TNeedsApproval> = {\n    __toolSide: 'definition',\n    ...config,\n    server<TContext = unknown>(\n      execute: ToolExecuteFunction<TInput, TOutput, TContext>,\n    ): ServerTool<TInput, TOutput, TName, TContext> {\n      return {\n        __toolSide: 'server',\n        ...config,\n        execute,\n      }\n    },\n\n    client<TContext = unknown>(\n      execute?: ToolExecuteFunction<TInput, TOutput, TContext>,\n    ): ClientTool<TInput, TOutput, TName, TContext, TNeedsApproval> {\n      return {\n        __toolSide: 'client',\n        ...config,\n        ...(execute !== undefined && { execute }),\n      }\n    },\n  }\n\n  return definition\n}\n"],"names":[],"mappings":"AAgNO,SAAS,eASd,QACwD;AACxD,QAAM,aAAqE;AAAA,IACzE,YAAY;AAAA,IACZ,GAAG;AAAA,IACH,OACE,SAC8C;AAC9C,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,GAAG;AAAA,QACH;AAAA,MAAA;AAAA,IAEJ;AAAA,IAEA,OACE,SAC8D;AAC9D,aAAO;AAAA,QACL,YAAY;AAAA,QACZ,GAAG;AAAA,QACH,GAAI,YAAY,UAAa,EAAE,QAAA;AAAA,MAAQ;AAAA,IAE3C;AAAA,EAAA;AAGF,SAAO;AACT;"}
+{"version":3,"file":"tool-definition.js","names":[],"sources":["../../../../../src/activities/chat/tools/tool-definition.ts"],"sourcesContent":["import type {\n  InferSchemaType,\n  JSONSchema,\n  SchemaInput,\n  Tool,\n  ToolExecuteFunction,\n} from '../../../types'\nimport type {\n  StandardJSONSchemaV1,\n  StandardSchemaV1,\n} from '@standard-schema/spec'\n\n/**\n * Type-level brand key for {@link ToolApprovalCapabilityMarker}. Only ever used\n * in type positions, but it must stay exported: a `unique symbol` referenced by\n * an exported interface has to be nameable in the emitted declarations.\n *\n * @public\n */\nexport declare const toolApprovalCapability: unique symbol\n\nexport interface ToolApprovalCapabilityMarker<\n  TNeedsApproval extends boolean,\n  TApprovalSchema,\n> {\n  readonly [toolApprovalCapability]?: {\n    needsApproval: TNeedsApproval\n    approvalSchema: TApprovalSchema\n  }\n}\n\nexport type ApprovalSchemaConfig =\n  | SchemaInput\n  | { approve: SchemaInput; reject?: SchemaInput }\n  | { approve?: SchemaInput; reject: SchemaInput }\n\ntype ApprovalConfig<\n  TNeedsApproval extends boolean,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined,\n> = TNeedsApproval extends true\n  ? { needsApproval: TNeedsApproval; approvalSchema?: TApprovalSchema }\n  : { needsApproval?: TNeedsApproval; approvalSchema?: never }\n\nexport type ApprovalCapabilityOf<TTool> =\n  TTool extends ToolApprovalCapabilityMarker<infer TNeeds, unknown>\n    ? TNeeds\n    : false\n\nexport type ApprovalSchemaOf<TTool> =\n  TTool extends ToolApprovalCapabilityMarker<boolean, infer TSchema>\n    ? TSchema\n    : undefined\n\nexport declare const noSchema: unique symbol\nexport type NoSchema = typeof noSchema\n\nexport type InputSchemaOf<TTool> = TTool extends {\n  inputSchema: infer TInput\n}\n  ? TInput extends undefined\n    ? NoSchema\n    : TInput\n  : NoSchema\n\nexport type OutputSchemaOf<TTool> = TTool extends {\n  outputSchema: infer TOutput\n}\n  ? TOutput extends undefined\n    ? NoSchema\n    : TOutput\n  : NoSchema\n\ntype BuiltToolSchemaFields<\n  TInput extends SchemaInput | undefined,\n  TOutput extends SchemaInput | undefined,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined,\n> = {\n  inputSchema: TInput\n  outputSchema: TOutput\n  approvalSchema: TApprovalSchema\n}\n\n/**\n * Marker type for server-side tools\n */\nexport interface ServerTool<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  TContext = unknown,\n  TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n>\n  extends\n    Tool<TInput, TOutput, TName, TContext>,\n    ToolApprovalCapabilityMarker<TNeedsApproval, TApprovalSchema> {\n  __toolSide: 'server'\n  inputSchema?: TInput\n  outputSchema?: TOutput\n  needsApproval?: TNeedsApproval\n  approvalSchema?: TApprovalSchema\n}\n\n/**\n * Marker type for client-side tools\n */\nexport interface ClientTool<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  TContext = unknown,\n  // Captured as a literal (`true` / `false`) so downstream types — notably\n  // the tool-call part's `approval` field — can be gated on it. Defaults to\n  // `false` when the tool config omits `needsApproval`.\n  TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n> extends ToolApprovalCapabilityMarker<TNeedsApproval, TApprovalSchema> {\n  __toolSide: 'client'\n  name: TName\n  description: string\n  // Note: `inputSchema` / `outputSchema` stay as bare optionals (not\n  // widened to `| undefined`). They participate in inference via\n  // `InferToolInput` / `InferToolOutput` — widening with `| undefined`\n  // breaks the `infer TInput extends StandardJSONSchemaV1<...>` chain\n  // because `undefined` doesn't extend the schema constraint.\n  inputSchema?: TInput\n  outputSchema?: TOutput\n  needsApproval?: TNeedsApproval\n  approvalSchema?: TApprovalSchema\n  lazy?: boolean\n  metadata?: Record<string, unknown>\n  execute?: ToolExecuteFunction<TInput, TOutput, TContext>\n}\n\n/** Broad server-tool shape for heterogeneous internal collections. */\nexport type AnyServerTool = Omit<\n  ServerTool<any, any, string, any, boolean, any>,\n  'execute'\n> & {\n  execute?: ((args: any, context?: any) => any) | undefined\n}\n\n/**\n * Tool definition that can be used directly or instantiated for server/client\n */\nexport interface ToolDefinitionInstance<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  TContext = unknown,\n  TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n> extends Tool<TInput, TOutput, TName, TContext> {\n  __toolSide: 'definition'\n  // Narrow the base `needsApproval?: boolean` to the captured literal so it\n  // survives into `ToolCallPartForTool`'s approval gate.\n  inputSchema: TInput\n  outputSchema: TOutput\n  needsApproval?: TNeedsApproval\n  approvalSchema: TApprovalSchema\n  readonly [toolApprovalCapability]?: {\n    needsApproval: TNeedsApproval\n    approvalSchema: TApprovalSchema\n  }\n}\n\n/**\n * Union type for any kind of client-side tool (client tool or definition)\n */\nexport type AnyClientTool =\n  | (Omit<ClientTool<any, any, string, any, boolean, any>, 'execute'> & {\n      execute?: ((args: any, context?: any) => any) | undefined\n    })\n  | (Omit<\n      ToolDefinitionInstance<any, any, string, any, boolean, any>,\n      'execute'\n    > & {\n      execute?: ((args: any, context?: any) => any) | undefined\n    })\n\n/**\n * Extract the tool name as a literal type\n */\nexport type InferToolName<T> = T extends { name: infer N } ? N : never\n\n/**\n * Extract the input type from a tool (inferred from Standard JSON Schema, or `unknown` for plain JSONSchema)\n */\nexport type InferToolInput<T> = T extends { inputSchema?: infer TInput }\n  ? TInput extends JSONSchema\n    ? unknown\n    : InferSchemaType<TInput>\n  : unknown\n\n/**\n * Extract the output type from a tool (inferred from Standard JSON Schema, or `unknown` for plain JSONSchema)\n */\nexport type InferToolOutput<T> = T extends { outputSchema?: infer TOutput }\n  ? TOutput extends StandardJSONSchemaV1<any, any>\n    ? InferSchemaType<TOutput>\n    : TOutput extends StandardSchemaV1<any, any>\n      ? InferSchemaType<TOutput>\n      : TOutput extends JSONSchema\n        ? unknown\n        : InferSchemaType<TOutput>\n  : unknown\n\n/**\n * Tool definition configuration\n */\nexport type ToolDefinitionConfig<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n> = {\n  name: TName\n  description: string\n  inputSchema?: TInput\n  outputSchema?: TOutput\n  lazy?: boolean\n  metadata?: Record<string, unknown>\n} & ApprovalConfig<TNeedsApproval, TApprovalSchema>\n\n/**\n * Tool definition builder that allows creating server or client tools from a shared definition\n */\nexport interface ToolDefinition<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n> extends ToolDefinitionInstance<\n  TInput,\n  TOutput,\n  TName,\n  unknown,\n  TNeedsApproval,\n  TApprovalSchema\n> {\n  /**\n   * Create a server-side tool with execute function\n   */\n  server: <TContext = unknown>(\n    execute: ToolExecuteFunction<TInput, TOutput, TContext>,\n  ) => ServerTool<\n    TInput,\n    TOutput,\n    TName,\n    TContext,\n    TNeedsApproval,\n    TApprovalSchema\n  > &\n    BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema>\n\n  /**\n   * Create a client-side tool with optional execute function.\n   * Carries the definition's `needsApproval` literal through to the client\n   * tool so the tool-call part's `approval` field stays gated on it.\n   */\n  client: <TContext = unknown>(\n    execute?: ToolExecuteFunction<TInput, TOutput, TContext>,\n  ) => ClientTool<\n    TInput,\n    TOutput,\n    TName,\n    TContext,\n    TNeedsApproval,\n    TApprovalSchema\n  > &\n    BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema>\n}\n\n/**\n * Create an isomorphic tool definition that can be used directly or instantiated for server/client\n *\n * The definition contains all tool metadata (name, description, schemas) and can be:\n * 1. Used directly in chat() on the server (as a tool definition without execute)\n * 2. Instantiated as a server tool with .server()\n * 3. Instantiated as a client tool with .client()\n *\n * Supports any Standard JSON Schema compliant library (Zod v4+, ArkType, Valibot, etc.)\n * or plain JSON Schema objects.\n *\n * @example\n * ```typescript\n * import { toolDefinition } from '@tanstack/ai';\n * import { z } from 'zod';\n *\n * // Using Zod (natively supports Standard JSON Schema)\n * const addToCartTool = toolDefinition({\n *   name: 'addToCart',\n *   description: 'Add a guitar to the shopping cart (requires approval)',\n *   needsApproval: true,\n *   inputSchema: z.object({\n *     guitarId: z.string(),\n *     quantity: z.number(),\n *   }),\n *   outputSchema: z.object({\n *     success: z.boolean(),\n *     cartId: z.string(),\n *     totalItems: z.number(),\n *   }),\n * });\n *\n * // Use directly in chat (server-side, no execute function)\n * chat({\n *   tools: [addToCartTool],\n *   // ...\n * });\n *\n * // Or create server-side implementation\n * const addToCartServer = addToCartTool.server(async (args) => {\n *   // args is typed as { guitarId: string; quantity: number }\n *   return {\n *     success: true,\n *     cartId: 'CART_' + Date.now(),\n *     totalItems: args.quantity,\n *   };\n * });\n *\n * // Or create client-side implementation\n * const addToCartClient = addToCartTool.client(async (args) => {\n *   // Client-specific logic (e.g., localStorage)\n *   return { success: true, cartId: 'local', totalItems: 1 };\n * });\n * ```\n */\nexport function toolDefinition<\n  TInput extends SchemaInput | undefined = undefined,\n  TOutput extends SchemaInput | undefined = undefined,\n  TName extends string = string,\n  // `const` forces the literal (`true` / `false`) to be captured from the\n  // config's optional `needsApproval` — without it TS widens to `boolean`,\n  // which collapses the approval gate in `ToolCallPartForTool`.\n  const TNeedsApproval extends boolean = false,\n  TApprovalSchema extends ApprovalSchemaConfig | undefined = undefined,\n>(\n  config: ToolDefinitionConfig<\n    TInput,\n    TOutput,\n    TName,\n    TNeedsApproval,\n    TApprovalSchema\n  >,\n): ToolDefinition<TInput, TOutput, TName, TNeedsApproval, TApprovalSchema> {\n  if (config.approvalSchema !== undefined && config.needsApproval !== true) {\n    throw new TypeError('approvalSchema requires needsApproval: true.')\n  }\n  const inputSchema = config.inputSchema as TInput\n  const outputSchema = config.outputSchema as TOutput\n  const approvalSchema = config.approvalSchema as TApprovalSchema\n  const needsApproval = config.needsApproval as TNeedsApproval | undefined\n\n  const definition: ToolDefinition<\n    TInput,\n    TOutput,\n    TName,\n    TNeedsApproval,\n    TApprovalSchema\n  > = {\n    __toolSide: 'definition',\n    ...config,\n    inputSchema,\n    outputSchema,\n    approvalSchema,\n    needsApproval,\n    server<TContext = unknown>(\n      execute: ToolExecuteFunction<TInput, TOutput, TContext>,\n    ): ServerTool<\n      TInput,\n      TOutput,\n      TName,\n      TContext,\n      TNeedsApproval,\n      TApprovalSchema\n    > &\n      BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema> {\n      return {\n        __toolSide: 'server',\n        ...config,\n        inputSchema,\n        outputSchema,\n        approvalSchema,\n        needsApproval,\n        execute,\n      }\n    },\n\n    client<TContext = unknown>(\n      execute?: ToolExecuteFunction<TInput, TOutput, TContext>,\n    ): ClientTool<\n      TInput,\n      TOutput,\n      TName,\n      TContext,\n      TNeedsApproval,\n      TApprovalSchema\n    > &\n      BuiltToolSchemaFields<TInput, TOutput, TApprovalSchema> {\n      return {\n        __toolSide: 'client',\n        ...config,\n        inputSchema,\n        outputSchema,\n        approvalSchema,\n        needsApproval,\n        ...(execute !== undefined && { execute }),\n      }\n    },\n  }\n\n  return definition\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0UA,SAAgB,eAUd,QAOyE;CACzE,IAAI,OAAO,mBAAmB,KAAA,KAAa,OAAO,kBAAkB,MAClE,MAAM,IAAI,UAAU,8CAA8C;CAEpE,MAAM,cAAc,OAAO;CAC3B,MAAM,eAAe,OAAO;CAC5B,MAAM,iBAAiB,OAAO;CAC9B,MAAM,gBAAgB,OAAO;CA4D7B,OAAO;EAnDL,YAAY;EACZ,GAAG;EACH;EACA;EACA;EACA;EACA,OACE,SASwD;GACxD,OAAO;IACL,YAAY;IACZ,GAAG;IACH;IACA;IACA;IACA;IACA;GACF;EACF;EAEA,OACE,SASwD;GACxD,OAAO;IACL,YAAY;IACZ,GAAG;IACH;IACA;IACA;IACA;IACA,GAAI,YAAY,KAAA,KAAa,EAAE,QAAQ;GACzC;EACF;CAGK;AACT"}