@yolk-sdk/agent 0.1.0-canary.97 → 0.1.0-canary.99

package/README.md

@@ -29,7 +29,7 @@ Published package metadata requires Node.js 22+.
 | `@yolk-sdk/agent/client`                                 | HTTP/NDJSON transport, HITL resume, retry/error state helpers                                 |
 | `@yolk-sdk/agent/compaction`                             | Host-owned compaction budgets, checkpoints, formatting, retry                                 |
 | `@yolk-sdk/agent/classification`                         | Classifier model contract: typed questions, answers, usage, errors                            |
-| `@yolk-sdk/agent/tools`                                  | Tool registry, typed inputs, interactions, subagents/questions                                |
+| `@yolk-sdk/agent/tools`                                  | Tool registry, typed inputs, interactions, subagents/questions, durable tool ledger           |
 | `@yolk-sdk/agent/react`                                  | Headless React chat hook, reducer, selectors, and render model                                |
 | `@yolk-sdk/agent/oauth`                                  | Provider-neutral OAuth token and broker contracts                                             |
 | `@yolk-sdk/agent/providers/openai`                       | OpenAI/Codex OAuth and broker helpers                                                         |
@@ -934,6 +934,26 @@ This package declares them; it does not run scripts.
   bounded `ToolResult.nestedCalls` record and summed `ToolResult.usage` never reach the model:
   `toolResultMessageFromResult` drops both, and the loop does not add `ToolResult.usage` to run
   usage. Capture them from the `ToolResult` or tool events when you need audit or billing records.
+  Size the record with `makeNestedToolCallRecorder({ maxCalls })`; per-status `counts` cover
+  every call, dropped ones included.
+
+## Durable tool ledger
+
+Steps that hosts re-execute (Vercel Workflow's queue is at-least-once) must not repeat writes.
+Pass `resolveTools(modules, context, { ledger: { store } })` with a host-implemented durable
+`ToolLedgerStore` scoped to the run: every ledgered call (by default every non-`read` call plus the
+built-in `subagent` tool, top-level or nested in code mode) runs at most once per ledger key. Add
+custom delegation tools with `isLedgered`. Input and interaction tools are never ledgered; their
+at-most-once guarantee is the host's `InteractionHost` receipts. A different call under the same key (tool name or a
+SHA-256 `argsDigest` of the full arguments, a stable format hosts persist) is a conflict, never a
+replay. Completed calls return their stored result, concurrent duplicates wait, and calls abandoned
+by a crash are never re-run (the model is told to verify). Executors receive a stable
+`idempotencyKey`. Stores get the lease length (`leaseMs`) so they can use database time, and must
+keep their operations interruptible (the ledger's timeouts cannot cut uninterruptible store work).
+`deadline` bounds only waiting for a duplicate; recording an outcome can take about 15 s more.
+`onLedgerDecision` reports each call's decision (`fresh`, `completed`, `in_flight_wait`, ...) for
+logs and metrics. Without the option behavior is unchanged. See
+[the tools README](https://github.com/magoz/yolk-sdk/blob/main/packages/agent/src/tools/README.md#durable-tool-ledger).
 
 ## Tool failures
 
@@ -965,6 +985,9 @@ aborts, and implementation bugs outside typed tool execution.
 - Persist/return one `ToolResultMessage` for every host tool call, including `isError` failures.
 - Persist terminal provider failures and clear active run ids where applicable.
 - Provide tools, approval policy, auth, storage, and observability.
+- When steps can re-execute, implement a durable `ToolLedgerStore` scoped to one run (plus the turn
+  or step when call ids can repeat), keep its operations interruptible, and reserve about 15 s of
+  the step budget after `deadline` for recording outcomes.
 - If you send `ToolDef`s to providers yourself (outside `run`/`runModelTurn`), filter them with
   protocol `providerToolDefs`; codemode-only tools must never reach providers. Executor decorators
   outside `ResolvedToolSet.execute` do not see nested code mode calls.

package/dist/client/state.d.mts

@@ -80,26 +80,6 @@ type AgentToolRun = {
   readonly result: ToolResult;
 };
 declare const AgentToolRun: {
-  readonly InputStreaming: Data.TaggedEnum.ConstructorFrom<{
-    readonly _tag: "InputStreaming";
-    readonly id: string;
-    readonly name?: string;
-    readonly input: string;
-  }, "_tag">;
-  readonly InputReady: Data.TaggedEnum.ConstructorFrom<{
-    readonly _tag: "InputReady";
-    readonly call: ToolCall;
-  }, "_tag">;
-  readonly ApprovalRequested: Data.TaggedEnum.ConstructorFrom<{
-    readonly _tag: "ApprovalRequested";
-    readonly call: ToolCall;
-    readonly request?: ToolApprovalRequest;
-  }, "_tag">;
-  readonly Denied: Data.TaggedEnum.ConstructorFrom<{
-    readonly _tag: "Denied";
-    readonly toolCallId: string;
-    readonly reason: string;
-  }, "_tag">;
   readonly QuestionRequested: Data.TaggedEnum.ConstructorFrom<{
     readonly _tag: "QuestionRequested";
     readonly request: QuestionRequest;
@@ -142,6 +122,26 @@ declare const AgentToolRun: {
     readonly response: InteractionResponse;
     readonly request?: InteractionRequest;
   }, "_tag">;
+  readonly InputStreaming: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "InputStreaming";
+    readonly id: string;
+    readonly name?: string;
+    readonly input: string;
+  }, "_tag">;
+  readonly InputReady: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "InputReady";
+    readonly call: ToolCall;
+  }, "_tag">;
+  readonly ApprovalRequested: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "ApprovalRequested";
+    readonly call: ToolCall;
+    readonly request?: ToolApprovalRequest;
+  }, "_tag">;
+  readonly Denied: Data.TaggedEnum.ConstructorFrom<{
+    readonly _tag: "Denied";
+    readonly toolCallId: string;
+    readonly reason: string;
+  }, "_tag">;
   readonly Executing: Data.TaggedEnum.ConstructorFrom<{
     readonly _tag: "Executing";
     readonly call: ToolCall;
@@ -173,7 +173,7 @@ declare const AgentToolRun: {
     readonly call: ToolCall;
     readonly result: ToolResult;
   }, "_tag">;
-  readonly $is: <Tag extends "InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted">(tag: Tag) => (u: unknown) => u is Extract<{
+  readonly $is: <Tag extends "QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted">(tag: Tag) => (u: unknown) => u is Extract<{
     readonly _tag: "InputStreaming";
     readonly id: string;
     readonly name?: string;
@@ -287,26 +287,6 @@ declare const AgentToolRun: {
   }>;
   readonly $match: {
     <Cases extends {
-      readonly InputStreaming: (args: {
-        readonly _tag: "InputStreaming";
-        readonly id: string;
-        readonly name?: string;
-        readonly input: string;
-      }) => any;
-      readonly InputReady: (args: {
-        readonly _tag: "InputReady";
-        readonly call: ToolCall;
-      }) => any;
-      readonly ApprovalRequested: (args: {
-        readonly _tag: "ApprovalRequested";
-        readonly call: ToolCall;
-        readonly request?: ToolApprovalRequest;
-      }) => any;
-      readonly Denied: (args: {
-        readonly _tag: "Denied";
-        readonly toolCallId: string;
-        readonly reason: string;
-      }) => any;
       readonly QuestionRequested: (args: {
         readonly _tag: "QuestionRequested";
         readonly request: QuestionRequest;
@@ -349,6 +329,26 @@ declare const AgentToolRun: {
         readonly response: InteractionResponse;
         readonly request?: InteractionRequest;
       }) => any;
+      readonly InputStreaming: (args: {
+        readonly _tag: "InputStreaming";
+        readonly id: string;
+        readonly name?: string;
+        readonly input: string;
+      }) => any;
+      readonly InputReady: (args: {
+        readonly _tag: "InputReady";
+        readonly call: ToolCall;
+      }) => any;
+      readonly ApprovalRequested: (args: {
+        readonly _tag: "ApprovalRequested";
+        readonly call: ToolCall;
+        readonly request?: ToolApprovalRequest;
+      }) => any;
+      readonly Denied: (args: {
+        readonly _tag: "Denied";
+        readonly toolCallId: string;
+        readonly reason: string;
+      }) => any;
       readonly Executing: (args: {
         readonly _tag: "Executing";
         readonly call: ToolCall;
@@ -380,28 +380,8 @@ declare const AgentToolRun: {
         readonly call: ToolCall;
         readonly result: ToolResult;
       }) => any;
-    }>(cases: Cases): (value: AgentToolRun) => import("effect/Unify").Unify<ReturnType<Cases["InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted"]>>;
+    }>(cases: Cases): (value: AgentToolRun) => import("effect/Unify").Unify<ReturnType<Cases["QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted"]>>;
     <Cases extends {
-      readonly InputStreaming: (args: {
-        readonly _tag: "InputStreaming";
-        readonly id: string;
-        readonly name?: string;
-        readonly input: string;
-      }) => any;
-      readonly InputReady: (args: {
-        readonly _tag: "InputReady";
-        readonly call: ToolCall;
-      }) => any;
-      readonly ApprovalRequested: (args: {
-        readonly _tag: "ApprovalRequested";
-        readonly call: ToolCall;
-        readonly request?: ToolApprovalRequest;
-      }) => any;
-      readonly Denied: (args: {
-        readonly _tag: "Denied";
-        readonly toolCallId: string;
-        readonly reason: string;
-      }) => any;
       readonly QuestionRequested: (args: {
         readonly _tag: "QuestionRequested";
         readonly request: QuestionRequest;
@@ -444,6 +424,26 @@ declare const AgentToolRun: {
         readonly response: InteractionResponse;
         readonly request?: InteractionRequest;
       }) => any;
+      readonly InputStreaming: (args: {
+        readonly _tag: "InputStreaming";
+        readonly id: string;
+        readonly name?: string;
+        readonly input: string;
+      }) => any;
+      readonly InputReady: (args: {
+        readonly _tag: "InputReady";
+        readonly call: ToolCall;
+      }) => any;
+      readonly ApprovalRequested: (args: {
+        readonly _tag: "ApprovalRequested";
+        readonly call: ToolCall;
+        readonly request?: ToolApprovalRequest;
+      }) => any;
+      readonly Denied: (args: {
+        readonly _tag: "Denied";
+        readonly toolCallId: string;
+        readonly reason: string;
+      }) => any;
       readonly Executing: (args: {
         readonly _tag: "Executing";
         readonly call: ToolCall;
@@ -475,7 +475,7 @@ declare const AgentToolRun: {
         readonly call: ToolCall;
         readonly result: ToolResult;
       }) => any;
-    }>(value: AgentToolRun, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted"]>>;
+    }>(value: AgentToolRun, cases: Cases): import("effect/Unify").Unify<ReturnType<Cases["QuestionRequested" | "QuestionAnswered" | "QuestionCancelled" | "InputRequested" | "InputSubmitted" | "InputCancelled" | "InteractionRequested" | "InteractionSubmitted" | "InteractionCancelled" | "InputStreaming" | "InputReady" | "ApprovalRequested" | "Denied" | "Executing" | "Completed" | "Accepted" | "Errored" | "ProviderCompleted"]>>;
   };
 };
 type AgentClientState = {

package/dist/client/state.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.mts","names":[],"sources":["../../src/client/state.ts"],"mappings":";;;;KAoBY,cAAA;AAAA,KAEA,YAAA;EAAA,SAEG,IAAA;EAAA,SACA,EAAA;EAAA,SACA,IAAA;EAAA,SACA,KAAA;AAAA;EAAA,SAEA,IAAA;EAAA,SAA6B,IAAA,EAAM,QAAA;AAAA;EAAA,SAEnC,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,OAAA,GAAU,mBAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAyB,UAAA;EAAA,SAA6B,MAAA;AAAA;EAAA,SACtD,IAAA;EAAA,SAAoC,OAAA,EAAS,eAAA;AAAA;EAAA,SAE7C,IAAA;EAAA,SACA,QAAA,EAAU,gBAAA;EAAA,SACV,OAAA,GAAU,eAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,gBAAA;EAAA,SACV,OAAA,GAAU,eAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAiC,OAAA,EAAS,YAAA;AAAA;EAAA,SAE1C,IAAA;EAAA,SACA,QAAA,EAAU,aAAA;EAAA,SACV,OAAA,GAAU,YAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,aAAA;EAAA,SACV,OAAA,GAAU,YAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAuC,OAAA,EAAS,kBAAA;AAAA;EAAA,SAEhD,IAAA;EAAA,SACA,QAAA,EAAU,mBAAA;EAAA,SACV,OAAA,GAAU,kBAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,mBAAA;EAAA,SACV,OAAA,GAAU,kBAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,WAAA,UApCoC;EAAA,SAsCpC,WAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,MAAA,EAAQ,UAAA;EAAA,SACR,WAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,MAAA,EAAQ,UAAA;EAAA,SACR,WAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,OAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAEA,IAAA;EAAA,SAAoC,IAAA,EAAM,QAAA;EAAA,SAAmB,MAAA,EAAQ,UAAA;AAAA;AAAA,cAEvE,YAAA;EAAA;;;;;;;;mBArEqC,QAAA;EAAA;EAAA;;mBAG7B,QAAA;IAAA,mBACI,mBAAA;EAAA;EAAA;;;;;;;sBAGmC,eAAA;EAAA;EAAA;;uBAGnC,gBAAA;IAAA,mBACA,eAAA;EAAA;EAAA;;uBAIA,gBAAA;IAAA,mBACA,eAAA;EAAA;EAAA;;sBAEgC,YAAA;EAAA;EAAA;;uBAGhC,aAAA;IAAA,mBACA,YAAA;EAAA;EAAA;;uBAIA,aAAA;IAAA,mBACA,YAAA;EAAA;EAAA;;sBAEsC,kBAAA;EAAA;EAAA;;uBAGtC,mBAAA;IAAA,mBACA,kBAAA;EAAA;EAAA;;uBAIA,mBAAA;IAAA,mBACA,kBAAA;EAAA;EAAA;;mBAIJ,QAAA;IAAA;;;;;mBAOA,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;mBAMF,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;mBAMF,QAAA;IAAA;;;;;mBAIoC,QAAA;IAAA,iBAA2B,UAAA;EAAA;EAAA;;;;;;;;;mBAnElC,QAAA;EAAA;IAAA;;;mBAG7B,QAAA;IAAA,mBACI,mBAAA;EAAA;IAAA;;;;;;;;;sBAGmC,eAAA;EAAA;IAAA;;;uBAGnC,gBAAA;IAAA,mBACA,eAAA;EAAA;IAAA;;;uBAIA,gBAAA;IAAA,mBACA,eAAA;EAAA;IAAA;;;sBAEgC,YAAA;EAAA;IAAA;;;uBAGhC,aAAA;IAAA,mBACA,YAAA;EAAA;IAAA;;;uBAIA,aAAA;IAAA,mBACA,YAAA;EAAA;IAAA;;;sBAEsC,kBAAA;EAAA;IAAA;;;uBAGtC,mBAAA;IAAA,mBACA,kBAAA;EAAA;IAAA;;;uBAIA,mBAAA;IAAA,mBACA,kBAAA;EAAA;IAAA;;;mBAIJ,QAAA;IAAA,8BAOA;IAAA;;;;;mBAAA,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;;mBAMF,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;;mBAMF,QAAA;IAAA;;;;;;mBAIoC,QAAA;IAAA,iBAA2B,UAAA;EAAA;IAAA;;;;;;;;;;;;uBAnElC,QAAA;MAAA;MAAA;;uBAG7B,QAAA;QAAA,mBACI,mBAAA;MAAA;MAAA;;;;;;;0BAGmC,eAAA;MAAA;MAAA;;2BAGnC,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;2BAIA,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;0BAEgC,YAAA;MAAA;MAAA;;2BAGhC,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;2BAIA,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;0BAEsC,kBAAA;MAAA;MAAA;;2BAGtC,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;2BAIA,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;uBAIJ,QAAA;QAAA;;;;;uBAOA,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA;;;;;uBAIoC,QAAA;QAAA,iBAA2B,UAAA;MAAA;IAAA;;;;;;;;;;uBAnElC,QAAA;MAAA;MAAA;;uBAG7B,QAAA;QAAA,mBACI,mBAAA;MAAA;MAAA;;;;;;;0BAGmC,eAAA;MAAA;MAAA;;2BAGnC,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;2BAIA,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;0BAEgC,YAAA;MAAA;MAAA;;2BAGhC,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;2BAIA,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;0BAEsC,kBAAA;MAAA;MAAA;;2BAGtC,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;2BAIA,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;uBAIJ,QAAA;QAAA;;;;;uBAOA,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA;;;;;uBAIoC,QAAA;QAAA,iBAA2B,UAAA;MAAA;IAAA;;;KASxE,gBAAA;EAAA,SACD,MAAA,EAAQ,cAAA;EAAA,SACR,QAAA,EAAU,aAAA,CAAc,YAAA;EAAA,SACxB,YAAA,EAAc,aAAA,CAAc,YAAA;EAAA,SAC5B,IAAA;EAAA,SACA,SAAA;EAAA,SACA,QAAA,EAAU,aAAA,CAAc,YAAA;EAAA,SACxB,KAAA;EAAA,SACA,SAAA,EAAW,UAAA;EAAA,SACX,SAAA,EAAW,UAAA;EAAA,SACX,YAAA,EAAc,aAAA;AAAA;AAAA,KAGb,sBAAA;EAAA,SACD,KAAK;AAAA;AAAA,KAcJ,eAAA,aAA4B,YAAA,KAAiB,KAAA,CAAM,YAAA;AAAA,cAElD,uBAAA,EAAyB,gBAWrC;AAAA,cAwCY,eAAA,GAAmB,GAAA,EAAK,YAAA,KAAY,GAAA;EAAA;;;;;;iBA7JC,QAAA;AAAA;EAAA;iBAG7B,QAAA;EAAA,mBACI,mBAAA;AAAA;EAAA;oBAGmC,eAAA;AAAA;EAAA;oBAWH,YAAA;AAAA;EAAA;oBAWM,kBAAA;AAAA;EAAA;qBAGtC,mBAAA;EAAA,mBACA,kBAAA;AAAA;EAAA;iBASJ,QAAA;EAAA;;;cA+HR,iBAAA,GAAqB,IAAA,EAAM,aAAA,CAAc,YAAA;EAAA;iBAxHjC,QAAA;EAAA,iBACE,UAAA;EAAA;;;cAoIV,wBAAA,GACX,QAAA,EAAU,aAAA,CAAc,WAAA,MACvB,aAAA,CAAc,YAAA;AAAA,cAwNJ,kBAAA,GACX,QAAA,EAAU,aAAA,CAAc,YAAA,GACxB,OAAA,EAAS,YAAA,KACR,eAAA;AAAA,cAUU,eAAA,GAAmB,KAAA,EAAO,gBAAA,EAAkB,KAAA,EAAO,UAAA,KAAa,gBAAA;AAAA,cAMhE,0BAAA,GACX,KAAA,EAAO,gBAAA,EACP,KAAA,EAAO,UAAA,EACP,OAAA,GAAS,sBAAA,KACR,gBAAA;AAAA,cA2SU,sBAAA,GACX,KAAA,EAAO,gBAAA,EACP,OAAA,EAAS,WAAA,KACR,gBAAA;AAAA,cAcU,cAAA,GACX,KAAA,EAAO,gBAAA,EACP,OAAA,WACA,SAAA,GAAW,UAAA,YACV,gBAAA;AAAA,cASU,gBAAA,GAAoB,KAAA,EAAO,gBAAA,KAAmB,gBAOzD;AAAA,cAEW,iBAAA,GACX,MAAA,EAAQ,aAAA,CAAc,UAAA,GACtB,YAAA,GAAc,gBAAA,EACd,OAAA,GAAS,sBAAA,KAA2B,gBAAA"}
+{"version":3,"file":"state.d.mts","names":[],"sources":["../../src/client/state.ts"],"mappings":";;;;KAoBY,cAAA;AAAA,KAEA,YAAA;EAAA,SAEG,IAAA;EAAA,SACA,EAAA;EAAA,SACA,IAAA;EAAA,SACA,KAAA;AAAA;EAAA,SAEA,IAAA;EAAA,SAA6B,IAAA,EAAM,QAAA;AAAA;EAAA,SAEnC,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,OAAA,GAAU,mBAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAyB,UAAA;EAAA,SAA6B,MAAA;AAAA;EAAA,SACtD,IAAA;EAAA,SAAoC,OAAA,EAAS,eAAA;AAAA;EAAA,SAE7C,IAAA;EAAA,SACA,QAAA,EAAU,gBAAA;EAAA,SACV,OAAA,GAAU,eAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,gBAAA;EAAA,SACV,OAAA,GAAU,eAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAiC,OAAA,EAAS,YAAA;AAAA;EAAA,SAE1C,IAAA;EAAA,SACA,QAAA,EAAU,aAAA;EAAA,SACV,OAAA,GAAU,YAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,aAAA;EAAA,SACV,OAAA,GAAU,YAAA;AAAA;EAAA,SAEV,IAAA;EAAA,SAAuC,OAAA,EAAS,kBAAA;AAAA;EAAA,SAEhD,IAAA;EAAA,SACA,QAAA,EAAU,mBAAA;EAAA,SACV,OAAA,GAAU,kBAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,QAAA,EAAU,mBAAA;EAAA,SACV,OAAA,GAAU,kBAAA;AAAA;EAAA,SAGV,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,WAAA,UApCoC;EAAA,SAsCpC,WAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,MAAA,EAAQ,UAAA;EAAA,SACR,WAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,MAAA,EAAQ,UAAA;EAAA,SACR,WAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAGA,IAAA;EAAA,SACA,IAAA,EAAM,QAAA;EAAA,SACN,OAAA;EAAA,SACA,SAAA;AAAA;EAAA,SAEA,IAAA;EAAA,SAAoC,IAAA,EAAM,QAAA;EAAA,SAAmB,MAAA,EAAQ,UAAA;AAAA;AAAA,cAEvE,YAAA;EAAA;;sBA9D+C,eAAA;EAAA;EAAA;;uBAGnC,gBAAA;IAAA,mBACA,eAAA;EAAA;EAAA;;uBAIA,gBAAA;IAAA,mBACA,eAAA;EAAA;EAAA;;sBAEgC,YAAA;EAAA;EAAA;;uBAGhC,aAAA;IAAA,mBACA,YAAA;EAAA;EAAA;;uBAIA,aAAA;IAAA,mBACA,YAAA;EAAA;EAAA;;sBAEsC,kBAAA;EAAA;EAAA;;uBAGtC,mBAAA;IAAA,mBACA,kBAAA;EAAA;EAAA;;uBAIA,mBAAA;IAAA,mBACA,kBAAA;EAAA;EAAA;;;;;;;;mBAtCyB,QAAA;EAAA;EAAA;;mBAG7B,QAAA;IAAA,mBACI,mBAAA;EAAA;EAAA;;;;;;;mBAsCJ,QAAA;IAAA,8BATI;IAAA;;;;mBAgBJ,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;mBAMF,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;mBAMF,QAAA;IAAA;;;;;mBAIoC,QAAA;IAAA,iBAA2B,UAAA;EAAA;EAAA;;;;;;;;;mBAnElC,QAAA;EAAA;IAAA;;;mBAG7B,QAAA;IAAA,mBACI,mBAAA;EAAA;IAAA;;;;;;;;;sBAGmC,eAAA;EAAA;IAAA;;;uBAGnC,gBAAA;IAAA,mBACA,eAAA;EAAA;IAAA;;;uBAIA,gBAAA;IAAA,mBACA,eAAA;EAAA;IAAA;;;sBAEgC,YAAA;EAAA;IAAA;;;uBAGhC,aAAA;IAAA,mBACA,YAAA;EAAA;IAAA;;;uBAIA,aAAA;IAAA,mBACA,YAAA;EAAA;IAAA;;;sBAEsC,kBAAA;EAAA;IAAA;;;uBAGtC,mBAAA;IAAA,mBACA,kBAAA;EAAA;IAAA;;;uBAIA,mBAAA;IAAA,mBACA,kBAAA;EAAA;IAAA;;;mBAIJ,QAAA;IAAA,8BAOA;IAAA;;;;;mBAAA,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;;mBAMF,QAAA;IAAA,iBACE,UAAA;IAAA;;;;;;mBAMF,QAAA;IAAA;;;;;;mBAIoC,QAAA;IAAA,iBAA2B,UAAA;EAAA;IAAA;;;;;;0BA5DxB,eAAA;MAAA;MAAA;;2BAGnC,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;2BAIA,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;0BAEgC,YAAA;MAAA;MAAA;;2BAGhC,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;2BAIA,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;0BAEsC,kBAAA;MAAA;MAAA;;2BAGtC,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;2BAIA,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;;;;;;;uBAtCyB,QAAA;MAAA;MAAA;;uBAG7B,QAAA;QAAA,mBACI,mBAAA;MAAA;MAAA;;;;;;;uBAsCJ,QAAA;QAAA;;;;;uBAOA,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA;;;;;uBAIoC,QAAA;QAAA,iBAA2B,UAAA;MAAA;IAAA;;;;0BA5DxB,eAAA;MAAA;MAAA;;2BAGnC,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;2BAIA,gBAAA;QAAA,mBACA,eAAA;MAAA;MAAA;;0BAEgC,YAAA;MAAA;MAAA;;2BAGhC,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;2BAIA,aAAA;QAAA,mBACA,YAAA;MAAA;MAAA;;0BAEsC,kBAAA;MAAA;MAAA;;2BAGtC,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;2BAIA,mBAAA;QAAA,mBACA,kBAAA;MAAA;MAAA;;;;;;;;uBAtCyB,QAAA;MAAA;MAAA;;uBAG7B,QAAA;QAAA,mBACI,mBAAA;MAAA;MAAA;;;;;;;uBAsCJ,QAAA;QAAA;;;;;uBAOA,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA,iBACE,UAAA;QAAA;;;;;uBAMF,QAAA;QAAA;;;;;uBAIoC,QAAA;QAAA,iBAA2B,UAAA;MAAA;IAAA;;;KASxE,gBAAA;EAAA,SACD,MAAA,EAAQ,cAAA;EAAA,SACR,QAAA,EAAU,aAAA,CAAc,YAAA;EAAA,SACxB,YAAA,EAAc,aAAA,CAAc,YAAA;EAAA,SAC5B,IAAA;EAAA,SACA,SAAA;EAAA,SACA,QAAA,EAAU,aAAA,CAAc,YAAA;EAAA,SACxB,KAAA;EAAA,SACA,SAAA,EAAW,UAAA;EAAA,SACX,SAAA,EAAW,UAAA;EAAA,SACX,YAAA,EAAc,aAAA;AAAA;AAAA,KAGb,sBAAA;EAAA,SACD,KAAK;AAAA;AAAA,KAcJ,eAAA,aAA4B,YAAA,KAAiB,KAAA,CAAM,YAAA;AAAA,cAElD,uBAAA,EAAyB,gBAWrC;AAAA,cAwCY,eAAA,GAAmB,GAAA,EAAK,YAAA,KAAY,GAAA;EAAA;;;;;;iBA7JC,QAAA;AAAA;EAAA;iBAG7B,QAAA;EAAA,mBACI,mBAAA;AAAA;EAAA;oBAGmC,eAAA;AAAA;EAAA;oBAWH,YAAA;AAAA;EAAA;oBAWM,kBAAA;AAAA;EAAA;qBAGtC,mBAAA;EAAA,mBACA,kBAAA;AAAA;EAAA;iBASJ,QAAA;EAAA;;;cA+HR,iBAAA,GAAqB,IAAA,EAAM,aAAA,CAAc,YAAA;EAAA;iBAxHjC,QAAA;EAAA,iBACE,UAAA;EAAA;;;cAoIV,wBAAA,GACX,QAAA,EAAU,aAAA,CAAc,WAAA,MACvB,aAAA,CAAc,YAAA;AAAA,cAwNJ,kBAAA,GACX,QAAA,EAAU,aAAA,CAAc,YAAA,GACxB,OAAA,EAAS,YAAA,KACR,eAAA;AAAA,cAUU,eAAA,GAAmB,KAAA,EAAO,gBAAA,EAAkB,KAAA,EAAO,UAAA,KAAa,gBAAA;AAAA,cAMhE,0BAAA,GACX,KAAA,EAAO,gBAAA,EACP,KAAA,EAAO,UAAA,EACP,OAAA,GAAS,sBAAA,KACR,gBAAA;AAAA,cA2SU,sBAAA,GACX,KAAA,EAAO,gBAAA,EACP,OAAA,EAAS,WAAA,KACR,gBAAA;AAAA,cAcU,cAAA,GACX,KAAA,EAAO,gBAAA,EACP,OAAA,WACA,SAAA,GAAW,UAAA,YACV,gBAAA;AAAA,cASU,gBAAA,GAAoB,KAAA,EAAO,gBAAA,KAAmB,gBAOzD;AAAA,cAEW,iBAAA,GACX,MAAA,EAAQ,aAAA,CAAc,UAAA,GACtB,YAAA,GAAc,gBAAA,EACd,OAAA,GAAS,sBAAA,KAA2B,gBAAA"}

package/dist/protocol/bounded-text.d.mts

@@ -0,0 +1,20 @@
+//#region src/protocol/bounded-text.d.ts
+/** Marker appended to text cut by `truncateUtf8` and `truncateCodePoints`. */
+declare const truncationMarker = "\u2026";
+/** UTF-8 byte length of `text` (a lone surrogate counts as the 3 bytes of U+FFFD). */
+declare const utf8ByteLength: (text: string) => number;
+/**
+ * `text` within `maxBytes` UTF-8 bytes: unchanged when it fits, else cut on a code point boundary
+ * (surrogate pairs and multi-byte characters stay whole) with a trailing `…` counted in the
+ * budget. A budget smaller than the marker yields `''`, so the result never exceeds `maxBytes`.
+ */
+declare const truncateUtf8: (text: string, maxBytes: number) => string;
+/** `text` within `maxCharacters` code points: cut with a trailing `…` (counted) when longer. */
+declare const truncateCodePoints: (text: string, maxCharacters: number) => string;
+/** Compact JSON of tool call arguments: `null` for `undefined`, `[unserializable arguments]` when
+ * `JSON.stringify` throws (cycles, BigInt).
+ */
+declare const compactToolArguments: (args: unknown) => string;
+//#endregion
+export { compactToolArguments, truncateCodePoints, truncateUtf8, truncationMarker, utf8ByteLength };
+//# sourceMappingURL=bounded-text.d.mts.map

package/dist/protocol/bounded-text.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-text.d.mts","names":[],"sources":["../../src/protocol/bounded-text.ts"],"mappings":";;cAGa,gBAAA;;cAQA,cAAA,GAAkB,IAAY;;AARd;AAQ7B;;;cAea,YAAA,GAAgB,IAAA,UAAc,QAAgB;AAfhB;AAAA,cA4C9B,kBAAA,GAAsB,IAAA,UAAc,aAAqB;;;;cAezD,oBAAA,GAAwB,IAAa"}

package/dist/protocol/bounded-text.mjs

@@ -0,0 +1,48 @@
+import { Predicate, Result } from "effect";
+//#region src/protocol/bounded-text.ts
+/** Marker appended to text cut by `truncateUtf8` and `truncateCodePoints`. */
+const truncationMarker = "…";
+const codePointUtf8Bytes = (codePoint) => codePoint <= 127 ? 1 : codePoint <= 2047 ? 2 : codePoint <= 65535 ? 3 : 4;
+const characterUtf8Bytes = (character) => codePointUtf8Bytes(character.codePointAt(0) ?? 0);
+/** UTF-8 byte length of `text` (a lone surrogate counts as the 3 bytes of U+FFFD). */
+const utf8ByteLength = (text) => {
+	let bytes = 0;
+	for (const character of text) bytes += characterUtf8Bytes(character);
+	return bytes;
+};
+/**
+* `text` within `maxBytes` UTF-8 bytes: unchanged when it fits, else cut on a code point boundary
+* (surrogate pairs and multi-byte characters stay whole) with a trailing `…` counted in the
+* budget. A budget smaller than the marker yields `''`, so the result never exceeds `maxBytes`.
+*/
+const truncateUtf8 = (text, maxBytes) => {
+	if (utf8ByteLength(text) <= maxBytes) return text;
+	const budget = maxBytes - utf8ByteLength("…");
+	if (budget < 0) return "";
+	let bytes = 0;
+	let kept = "";
+	for (const character of text) {
+		const size = characterUtf8Bytes(character);
+		if (bytes + size > budget) break;
+		kept += character;
+		bytes += size;
+	}
+	return `${kept}…`;
+};
+/** `text` within `maxCharacters` code points: cut with a trailing `…` (counted) when longer. */
+const truncateCodePoints = (text, maxCharacters) => {
+	const characters = Array.from(text);
+	if (characters.length <= maxCharacters) return text;
+	return maxCharacters < 1 ? "" : `${characters.slice(0, maxCharacters - 1).join("")}…`;
+};
+/** Compact JSON of tool call arguments: `null` for `undefined`, `[unserializable arguments]` when
+* `JSON.stringify` throws (cycles, BigInt).
+*/
+const compactToolArguments = (args) => Result.match(Result.try(() => JSON.stringify(args)), {
+	onFailure: () => "[unserializable arguments]",
+	onSuccess: (encoded) => Predicate.isString(encoded) ? encoded : "null"
+});
+//#endregion
+export { compactToolArguments, truncateCodePoints, truncateUtf8, truncationMarker, utf8ByteLength };
+
+//# sourceMappingURL=bounded-text.mjs.map

package/dist/protocol/bounded-text.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-text.mjs","names":[],"sources":["../../src/protocol/bounded-text.ts"],"sourcesContent":["import { Predicate, Result } from 'effect'\n\n/** Marker appended to text cut by `truncateUtf8` and `truncateCodePoints`. */\nexport const truncationMarker = '…'\n\nconst codePointUtf8Bytes = (codePoint: number) =>\n  codePoint <= 0x7f ? 1 : codePoint <= 0x7ff ? 2 : codePoint <= 0xffff ? 3 : 4\n\nconst characterUtf8Bytes = (character: string) => codePointUtf8Bytes(character.codePointAt(0) ?? 0)\n\n/** UTF-8 byte length of `text` (a lone surrogate counts as the 3 bytes of U+FFFD). */\nexport const utf8ByteLength = (text: string) => {\n  let bytes = 0\n\n  for (const character of text) {\n    bytes += characterUtf8Bytes(character)\n  }\n\n  return bytes\n}\n\n/**\n * `text` within `maxBytes` UTF-8 bytes: unchanged when it fits, else cut on a code point boundary\n * (surrogate pairs and multi-byte characters stay whole) with a trailing `…` counted in the\n * budget. A budget smaller than the marker yields `''`, so the result never exceeds `maxBytes`.\n */\nexport const truncateUtf8 = (text: string, maxBytes: number): string => {\n  if (utf8ByteLength(text) <= maxBytes) {\n    return text\n  }\n\n  const budget = maxBytes - utf8ByteLength(truncationMarker)\n\n  if (budget < 0) {\n    return ''\n  }\n\n  let bytes = 0\n  let kept = ''\n\n  for (const character of text) {\n    const size = characterUtf8Bytes(character)\n\n    if (bytes + size > budget) {\n      break\n    }\n\n    kept += character\n    bytes += size\n  }\n\n  return `${kept}${truncationMarker}`\n}\n\n/** `text` within `maxCharacters` code points: cut with a trailing `…` (counted) when longer. */\nexport const truncateCodePoints = (text: string, maxCharacters: number): string => {\n  const characters = Array.from(text)\n\n  if (characters.length <= maxCharacters) {\n    return text\n  }\n\n  return maxCharacters < 1\n    ? ''\n    : `${characters.slice(0, maxCharacters - 1).join('')}${truncationMarker}`\n}\n\n/** Compact JSON of tool call arguments: `null` for `undefined`, `[unserializable arguments]` when\n * `JSON.stringify` throws (cycles, BigInt).\n */\nexport const compactToolArguments = (args: unknown): string =>\n  Result.match(\n    Result.try(() => JSON.stringify(args)),\n    {\n      onFailure: () => '[unserializable arguments]',\n      onSuccess: (encoded: string | undefined) => (Predicate.isString(encoded) ? encoded : 'null')\n    }\n  )\n"],"mappings":";;;AAGA,MAAa,mBAAmB;AAEhC,MAAM,sBAAsB,cAC1B,aAAa,MAAO,IAAI,aAAa,OAAQ,IAAI,aAAa,QAAS,IAAI;AAE7E,MAAM,sBAAsB,cAAsB,mBAAmB,UAAU,YAAY,CAAC,KAAK,CAAC;;AAGlG,MAAa,kBAAkB,SAAiB;CAC9C,IAAI,QAAQ;CAEZ,KAAK,MAAM,aAAa,MACtB,SAAS,mBAAmB,SAAS;CAGvC,OAAO;AACT;;;;;;AAOA,MAAa,gBAAgB,MAAc,aAA6B;CACtE,IAAI,eAAe,IAAI,KAAK,UAC1B,OAAO;CAGT,MAAM,SAAS,WAAW,eAAA,GAA+B;CAEzD,IAAI,SAAS,GACX,OAAO;CAGT,IAAI,QAAQ;CACZ,IAAI,OAAO;CAEX,KAAK,MAAM,aAAa,MAAM;EAC5B,MAAM,OAAO,mBAAmB,SAAS;EAEzC,IAAI,QAAQ,OAAO,QACjB;EAGF,QAAQ;EACR,SAAS;CACX;CAEA,OAAO,GAAG;AACZ;;AAGA,MAAa,sBAAsB,MAAc,kBAAkC;CACjF,MAAM,aAAa,MAAM,KAAK,IAAI;CAElC,IAAI,WAAW,UAAU,eACvB,OAAO;CAGT,OAAO,gBAAgB,IACnB,KACA,GAAG,WAAW,MAAM,GAAG,gBAAgB,CAAC,EAAE,KAAK,EAAE;AACvD;;;;AAKA,MAAa,wBAAwB,SACnC,OAAO,MACL,OAAO,UAAU,KAAK,UAAU,IAAI,CAAC,GACrC;CACE,iBAAiB;CACjB,YAAY,YAAiC,UAAU,SAAS,OAAO,IAAI,UAAU;AACvF,CACF"}

package/dist/protocol/index.d.mts

@@ -1,7 +1,8 @@
+import { truncateCodePoints } from "./bounded-text.mjs";
 import { AgentContentCapabilities, AgentModelCapabilities, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities } from "./capability.mjs";
 import { AttachmentContentPart, AttachmentSource, AttachmentSourceResolver, AudioPart, Content, ContentPart, DocumentPart, ImagePart, InlineBase64AttachmentSource, RefAttachmentSource, TextPart, UrlAttachmentSource, appendTextToContent, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, documentPartFromText, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, isContentEmpty, isTextDocumentMimeType, refAttachmentSource, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, textDocumentMimeTypeFromFilename, textToBase64Utf8, urlAttachmentSource } from "./content.mjs";
 import { AgentInputUsage, AgentOutputUsage, AgentUsage, addAgentUsage, zeroAgentUsage } from "./usage.mjs";
-import { NestedToolCallInput, NestedToolCallRecord, NestedToolCallRecorder, NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, emptyNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxTotalArgsBytes, nestedToolCallResultFields, recordNestedToolCall } from "./nested-tool-calls.mjs";
+import { BoundedNestedToolCallArgs, NestedToolCallCounts, NestedToolCallInput, NestedToolCallRecord, NestedToolCallRecorder, NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, boundNestedToolCallArgs, emptyNestedToolCallRecorder, makeNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxRecordedCalls, nestedToolCallMaxTotalArgsBytes, nestedToolCallRecordLimit, nestedToolCallResultFields, recordNestedToolCall } from "./nested-tool-calls.mjs";
 import { BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, ErrorToolResultInput, HitlRequest, HitlResponse, HitlResponseSource, InputContentFormatter, InputDescriptor, InputRequest, InputResponse, InputResponseOutcome, InputResponseStructuredContent, InputResponseValidator, InputToolHandler, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCandidate, InteractionClaim, InteractionDescriptor, InteractionHost, InteractionHostError, InteractionOutcome, InteractionPreflight, InteractionReceipt, InteractionReceiptStatus, InteractionRef, InteractionRequest, InteractionResponse, InteractionResponseOutcome, InteractionResponseStructuredContent, InteractionResponseValidator, InteractionValidationError, PlainHitlResponse, PlainInputResponse, PlainInteractionResponse, PlainQuestionAnswer, PlainQuestionResponse, PlainToolApprovalResponse, QuestionAnswer, QuestionOption, QuestionPrompt, QuestionRequest, QuestionResponse, QuestionResponseOutcome, QuestionResponseStructuredContent, QuestionToolParams, ToolApprovalDecision, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalResponse, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolExposure, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isProviderToolDef, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, providerToolDefs, questionResponseStructuredContent, sameInteractionBinding, sameInteractionCall, toolDiscovery, validInteractionReceipt, validateInteractionSubmission } from "./tool.mjs";
 import { AgentMessage, AssistantAgentMessage, AssistantPart, AssistantReasoningPart, AssistantTextPart, DanglingHostToolCall, HostToolCallPart, MessageAnnotations, MessageAuthor, MessageEnvelope, ProviderToolCallPart, ProviderToolResultPart, RepairDanglingHostToolCallsOptions, ToolResultMessage, TranscriptInvariantValidation, UserMessage, assistantContent, assistantHostToolCalls, assistantReasoningText, danglingHostToolCalls, messageContextText, prependMessageContextToContent, repairDanglingHostToolCalls, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, toolResultMessageFromResult, validateNoDanglingHostToolCalls } from "./message.mjs";
 import { AgentAwaitingInput, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentRetry, AgentStart, AssistantMessageEvent, CompactionEnd, CompactionStart, InputCancelled, InputRequested, InputSubmitted, InteractionCancelled, InteractionRequested, InteractionSubmitted, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolResult, QuestionAnswered, QuestionCancelled, QuestionRequested, SubagentCompleted, SubagentStarted, SubagentStatus, TerminalAgentEvent, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalRequested, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, ToolInputDelta, ToolInputEnd, ToolInputStart, TurnEnd, TurnStart, UsageUpdate, UserMessageEvent, hitlResponseEvent, isTerminalAgentEvent, makeSubagentRunId } from "./event.mjs";
@@ -11,5 +12,5 @@ import { AgentWebSocketClientMessage, AgentWebSocketServerMessage, InputResponse
 //#region src/protocol/index.d.ts
 type MessageId = string;
 //#endregion
-export { AgentAwaitingInput, AgentContentCapabilities, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentInputUsage, AgentMessage, AgentModelCapabilities, AgentOutputUsage, AgentReasoningEffort, AgentRetry, AgentStart, AgentUsage, AgentWebSocketClientMessage, AgentWebSocketServerMessage, AssistantAgentMessage, AssistantMessageEvent, AssistantPart, AssistantReasoningPart, AssistantTextPart, type AttachmentContentPart, AttachmentSource, type AttachmentSourceResolver, AudioPart, BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, CompactionEnd, CompactionStart, Content, ContentPart, type DanglingHostToolCall, DocumentPart, type ErrorToolResultInput, HitlRequest, HitlResponse, HitlResponseSource, HostToolCallPart, ImagePart, InlineBase64AttachmentSource, InputCancelled, type InputContentFormatter, InputDescriptor, InputRequest, InputRequested, InputResponse, InputResponseInput, InputResponseOutcome, type InputResponseStructuredContent, type InputResponseValidator, InputSubmitted, type InputToolHandler, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCancelled, InteractionCandidate, InteractionClaim, InteractionDescriptor, type InteractionHost, InteractionHostError, type InteractionOutcome, type InteractionPreflight, InteractionReceipt, InteractionReceiptStatus, type InteractionRef, InteractionRequest, InteractionRequested, InteractionResponse, InteractionResponseInput, InteractionResponseOutcome, type InteractionResponseStructuredContent, type InteractionResponseValidator, InteractionSubmitted, InteractionValidationError, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, MessageAnnotations, MessageAuthor, type MessageEnvelope, MessageId, type NestedToolCallInput, NestedToolCallRecord, type NestedToolCallRecorder, type NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, PlainHitlResponse, type PlainInputResponse, type PlainInteractionResponse, type PlainQuestionAnswer, type PlainQuestionResponse, type PlainToolApprovalResponse, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolCallPart, ProviderToolResult, ProviderToolResultPart, QuestionAnswer, QuestionAnswered, QuestionCancelled, QuestionOption, QuestionPrompt, QuestionRequest, QuestionRequested, QuestionResponse, QuestionResponseInput, QuestionResponseOutcome, type QuestionResponseStructuredContent, QuestionToolParams, RefAttachmentSource, type RepairDanglingHostToolCallsOptions, SessionSnapshot, SubagentCompleted, SubagentStarted, SubagentStatus, type TerminalAgentEvent, TextPart, ToolApprovalDecision, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalRequested, ToolApprovalResponse, ToolApprovalResponseInput, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, type ToolExposure, ToolInputDelta, ToolInputEnd, ToolInputStart, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, ToolResultMessage, type TranscriptInvariantValidation, TurnEnd, TurnStart, UrlAttachmentSource, UsageUpdate, UserInput, UserMessage, UserMessageEvent, addAgentUsage, appendTextToContent, assistantContent, assistantHostToolCalls, assistantReasoningText, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, danglingHostToolCalls, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, documentPartFromText, emptyNestedToolCallRecorder, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, hitlResponseEvent, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isContentEmpty, isProviderToolDef, isTerminalAgentEvent, isTextDocumentMimeType, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, makeSubagentRunId, messageContextText, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxTotalArgsBytes, nestedToolCallResultFields, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, prependMessageContextToContent, providerToolDefs, questionResponseStructuredContent, recordNestedToolCall, refAttachmentSource, repairDanglingHostToolCalls, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, sameInteractionBinding, sameInteractionCall, textDocumentMimeTypeFromFilename, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities, textToBase64Utf8, toolDiscovery, toolResultMessageFromResult, urlAttachmentSource, validInteractionReceipt, validateInteractionSubmission, validateNoDanglingHostToolCalls, zeroAgentUsage };
+export { AgentAwaitingInput, AgentContentCapabilities, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentInputUsage, AgentMessage, AgentModelCapabilities, AgentOutputUsage, AgentReasoningEffort, AgentRetry, AgentStart, AgentUsage, AgentWebSocketClientMessage, AgentWebSocketServerMessage, AssistantAgentMessage, AssistantMessageEvent, AssistantPart, AssistantReasoningPart, AssistantTextPart, type AttachmentContentPart, AttachmentSource, type AttachmentSourceResolver, AudioPart, BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, type BoundedNestedToolCallArgs, CompactionEnd, CompactionStart, Content, ContentPart, type DanglingHostToolCall, DocumentPart, type ErrorToolResultInput, HitlRequest, HitlResponse, HitlResponseSource, HostToolCallPart, ImagePart, InlineBase64AttachmentSource, InputCancelled, type InputContentFormatter, InputDescriptor, InputRequest, InputRequested, InputResponse, InputResponseInput, InputResponseOutcome, type InputResponseStructuredContent, type InputResponseValidator, InputSubmitted, type InputToolHandler, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCancelled, InteractionCandidate, InteractionClaim, InteractionDescriptor, type InteractionHost, InteractionHostError, type InteractionOutcome, type InteractionPreflight, InteractionReceipt, InteractionReceiptStatus, type InteractionRef, InteractionRequest, InteractionRequested, InteractionResponse, InteractionResponseInput, InteractionResponseOutcome, type InteractionResponseStructuredContent, type InteractionResponseValidator, InteractionSubmitted, InteractionValidationError, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, MessageAnnotations, MessageAuthor, type MessageEnvelope, MessageId, NestedToolCallCounts, type NestedToolCallInput, NestedToolCallRecord, type NestedToolCallRecorder, type NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, PlainHitlResponse, type PlainInputResponse, type PlainInteractionResponse, type PlainQuestionAnswer, type PlainQuestionResponse, type PlainToolApprovalResponse, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolCallPart, ProviderToolResult, ProviderToolResultPart, QuestionAnswer, QuestionAnswered, QuestionCancelled, QuestionOption, QuestionPrompt, QuestionRequest, QuestionRequested, QuestionResponse, QuestionResponseInput, QuestionResponseOutcome, type QuestionResponseStructuredContent, QuestionToolParams, RefAttachmentSource, type RepairDanglingHostToolCallsOptions, SessionSnapshot, SubagentCompleted, SubagentStarted, SubagentStatus, type TerminalAgentEvent, TextPart, ToolApprovalDecision, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalRequested, ToolApprovalResponse, ToolApprovalResponseInput, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, type ToolExposure, ToolInputDelta, ToolInputEnd, ToolInputStart, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, ToolResultMessage, type TranscriptInvariantValidation, TurnEnd, TurnStart, UrlAttachmentSource, UsageUpdate, UserInput, UserMessage, UserMessageEvent, addAgentUsage, appendTextToContent, assistantContent, assistantHostToolCalls, assistantReasoningText, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, boundNestedToolCallArgs, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, danglingHostToolCalls, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, documentPartFromText, emptyNestedToolCallRecorder, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, hitlResponseEvent, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isContentEmpty, isProviderToolDef, isTerminalAgentEvent, isTextDocumentMimeType, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, makeNestedToolCallRecorder, makeSubagentRunId, messageContextText, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxRecordedCalls, nestedToolCallMaxTotalArgsBytes, nestedToolCallRecordLimit, nestedToolCallResultFields, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, prependMessageContextToContent, providerToolDefs, questionResponseStructuredContent, recordNestedToolCall, refAttachmentSource, repairDanglingHostToolCalls, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, sameInteractionBinding, sameInteractionCall, textDocumentMimeTypeFromFilename, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities, textToBase64Utf8, toolDiscovery, toolResultMessageFromResult, truncateCodePoints, urlAttachmentSource, validInteractionReceipt, validateInteractionSubmission, validateNoDanglingHostToolCalls, zeroAgentUsage };
 //# sourceMappingURL=index.d.mts.map

package/dist/protocol/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/protocol/index.ts"],"mappings":";;;;;;;;;;;KAgRY,SAAA"}
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../src/protocol/index.ts"],"mappings":";;;;;;;;;;;;KAwRY,SAAA"}

package/dist/protocol/index.mjs

@@ -1,10 +1,11 @@
 import { AttachmentSource, AudioPart, Content, ContentPart, DocumentPart, ImagePart, InlineBase64AttachmentSource, RefAttachmentSource, TextPart, UrlAttachmentSource, appendTextToContent, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, documentPartFromText, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, isContentEmpty, isTextDocumentMimeType, refAttachmentSource, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, textDocumentMimeTypeFromFilename, textToBase64Utf8, urlAttachmentSource } from "./content.mjs";
+import { truncateCodePoints } from "./bounded-text.mjs";
 import { AgentInputUsage, AgentOutputUsage, AgentUsage, addAgentUsage, zeroAgentUsage } from "./usage.mjs";
-import { NestedToolCallRecord, NestedToolCallStatus, NestedToolCalls, emptyNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxTotalArgsBytes, nestedToolCallResultFields, recordNestedToolCall } from "./nested-tool-calls.mjs";
+import { NestedToolCallCounts, NestedToolCallRecord, NestedToolCallStatus, NestedToolCalls, boundNestedToolCallArgs, emptyNestedToolCallRecorder, makeNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxRecordedCalls, nestedToolCallMaxTotalArgsBytes, nestedToolCallRecordLimit, nestedToolCallResultFields, recordNestedToolCall } from "./nested-tool-calls.mjs";
 import { BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, HitlRequest, HitlResponse, HitlResponseSource, InputDescriptor, InputRequest, InputResponse, InputResponseOutcome, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCandidate, InteractionClaim, InteractionDescriptor, InteractionHostError, InteractionReceipt, InteractionReceiptStatus, InteractionRequest, InteractionResponse, InteractionResponseOutcome, InteractionValidationError, PlainHitlResponse, QuestionAnswer, QuestionOption, QuestionPrompt, QuestionRequest, QuestionResponse, QuestionResponseOutcome, QuestionToolParams, ToolApprovalDecision, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalResponse, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isProviderToolDef, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, providerToolDefs, questionResponseStructuredContent, sameInteractionBinding, sameInteractionCall, toolDiscovery, validInteractionReceipt, validateInteractionSubmission } from "./tool.mjs";
 import { AgentContentCapabilities, AgentModelCapabilities, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities } from "./capability.mjs";
 import { AgentMessage, AssistantAgentMessage, AssistantPart, AssistantReasoningPart, AssistantTextPart, HostToolCallPart, MessageAnnotations, MessageAuthor, ProviderToolCallPart, ProviderToolResultPart, ToolResultMessage, UserMessage, assistantContent, assistantHostToolCalls, assistantReasoningText, danglingHostToolCalls, messageContextText, prependMessageContextToContent, repairDanglingHostToolCalls, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, toolResultMessageFromResult, validateNoDanglingHostToolCalls } from "./message.mjs";
 import { AgentAwaitingInput, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentRetry, AgentStart, AssistantMessageEvent, CompactionEnd, CompactionStart, InputCancelled, InputRequested, InputSubmitted, InteractionCancelled, InteractionRequested, InteractionSubmitted, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolResult, QuestionAnswered, QuestionCancelled, QuestionRequested, SubagentCompleted, SubagentStarted, SubagentStatus, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalRequested, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, ToolInputDelta, ToolInputEnd, ToolInputStart, TurnEnd, TurnStart, UsageUpdate, UserMessageEvent, hitlResponseEvent, isTerminalAgentEvent, makeSubagentRunId } from "./event.mjs";
 import { AgentReasoningEffort } from "./reasoning.mjs";
 import { AgentWebSocketClientMessage, AgentWebSocketServerMessage, InputResponseInput, InteractionResponseInput, QuestionResponseInput, SessionSnapshot, ToolApprovalResponseInput, UserInput } from "./session.mjs";
-export { AgentAwaitingInput, AgentContentCapabilities, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentInputUsage, AgentMessage, AgentModelCapabilities, AgentOutputUsage, AgentReasoningEffort, AgentRetry, AgentStart, AgentUsage, AgentWebSocketClientMessage, AgentWebSocketServerMessage, AssistantAgentMessage, AssistantMessageEvent, AssistantPart, AssistantReasoningPart, AssistantTextPart, AttachmentSource, AudioPart, BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, CompactionEnd, CompactionStart, Content, ContentPart, DocumentPart, HitlRequest, HitlResponse, HitlResponseSource, HostToolCallPart, ImagePart, InlineBase64AttachmentSource, InputCancelled, InputDescriptor, InputRequest, InputRequested, InputResponse, InputResponseInput, InputResponseOutcome, InputSubmitted, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCancelled, InteractionCandidate, InteractionClaim, InteractionDescriptor, InteractionHostError, InteractionReceipt, InteractionReceiptStatus, InteractionRequest, InteractionRequested, InteractionResponse, InteractionResponseInput, InteractionResponseOutcome, InteractionSubmitted, InteractionValidationError, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, MessageAnnotations, MessageAuthor, NestedToolCallRecord, NestedToolCallStatus, NestedToolCalls, PlainHitlResponse, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolCallPart, ProviderToolResult, ProviderToolResultPart, QuestionAnswer, QuestionAnswered, QuestionCancelled, QuestionOption, QuestionPrompt, QuestionRequest, QuestionRequested, QuestionResponse, QuestionResponseInput, QuestionResponseOutcome, QuestionToolParams, RefAttachmentSource, SessionSnapshot, SubagentCompleted, SubagentStarted, SubagentStatus, TextPart, ToolApprovalDecision, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalRequested, ToolApprovalResponse, ToolApprovalResponseInput, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, ToolInputDelta, ToolInputEnd, ToolInputStart, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, ToolResultMessage, TurnEnd, TurnStart, UrlAttachmentSource, UsageUpdate, UserInput, UserMessage, UserMessageEvent, addAgentUsage, appendTextToContent, assistantContent, assistantHostToolCalls, assistantReasoningText, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, danglingHostToolCalls, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, documentPartFromText, emptyNestedToolCallRecorder, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, hitlResponseEvent, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isContentEmpty, isProviderToolDef, isTerminalAgentEvent, isTextDocumentMimeType, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, makeSubagentRunId, messageContextText, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxTotalArgsBytes, nestedToolCallResultFields, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, prependMessageContextToContent, providerToolDefs, questionResponseStructuredContent, recordNestedToolCall, refAttachmentSource, repairDanglingHostToolCalls, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, sameInteractionBinding, sameInteractionCall, textDocumentMimeTypeFromFilename, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities, textToBase64Utf8, toolDiscovery, toolResultMessageFromResult, urlAttachmentSource, validInteractionReceipt, validateInteractionSubmission, validateNoDanglingHostToolCalls, zeroAgentUsage };
+export { AgentAwaitingInput, AgentContentCapabilities, AgentEnd, AgentError, AgentErrorCode, AgentEvent, AgentInputUsage, AgentMessage, AgentModelCapabilities, AgentOutputUsage, AgentReasoningEffort, AgentRetry, AgentStart, AgentUsage, AgentWebSocketClientMessage, AgentWebSocketServerMessage, AssistantAgentMessage, AssistantMessageEvent, AssistantPart, AssistantReasoningPart, AssistantTextPart, AttachmentSource, AudioPart, BackgroundToolAccepted, BackgroundToolExecution, BackgroundToolInput, CompactionEnd, CompactionStart, Content, ContentPart, DocumentPart, HitlRequest, HitlResponse, HitlResponseSource, HostToolCallPart, ImagePart, InlineBase64AttachmentSource, InputCancelled, InputDescriptor, InputRequest, InputRequested, InputResponse, InputResponseInput, InputResponseOutcome, InputSubmitted, InteractionActionDescriptor, InteractionAdmissionError, InteractionBusinessOutcome, InteractionCancelled, InteractionCandidate, InteractionClaim, InteractionDescriptor, InteractionHostError, InteractionReceipt, InteractionReceiptStatus, InteractionRequest, InteractionRequested, InteractionResponse, InteractionResponseInput, InteractionResponseOutcome, InteractionSubmitted, InteractionValidationError, LLMReasoningDelta, LLMStreamEnd, LLMStreamStart, LLMTextDelta, MessageAnnotations, MessageAuthor, NestedToolCallCounts, NestedToolCallRecord, NestedToolCallStatus, NestedToolCalls, PlainHitlResponse, ProviderErrorInfo, ProviderFailureKind, ProviderStreamDiagnostics, ProviderStreamProtocol, ProviderStreamResponseFormat, ProviderToolCallPart, ProviderToolResult, ProviderToolResultPart, QuestionAnswer, QuestionAnswered, QuestionCancelled, QuestionOption, QuestionPrompt, QuestionRequest, QuestionRequested, QuestionResponse, QuestionResponseInput, QuestionResponseOutcome, QuestionToolParams, RefAttachmentSource, SessionSnapshot, SubagentCompleted, SubagentStarted, SubagentStatus, TextPart, ToolApprovalDecision, ToolApprovalDenied, ToolApprovalGranted, ToolApprovalMode, ToolApprovalPolicy, ToolApprovalRequest, ToolApprovalRequested, ToolApprovalResponse, ToolApprovalResponseInput, ToolCall, ToolCallableBy, ToolDef, ToolDiscovery, ToolExecutionAccepted, ToolExecutionCompleted, ToolExecutionError, ToolExecutionStarted, ToolInputDelta, ToolInputEnd, ToolInputStart, ToolJsonSchema, ToolJsonSchemaObject, ToolResult, ToolResultMessage, TurnEnd, TurnStart, UrlAttachmentSource, UsageUpdate, UserInput, UserMessage, UserMessageEvent, addAgentUsage, appendTextToContent, assistantContent, assistantHostToolCalls, assistantReasoningText, attachmentSourceBase64, attachmentSourceDataUrl, attachmentSourcePreview, attachmentSourceText, attachmentSourceUrl, boundNestedToolCallArgs, contentPartPreview, contentPartText, contentParts, contentPreview, contentText, danglingHostToolCalls, decodeBackgroundToolInput, decodeToolJsonSchema, decodeToolJsonSchemaObject, documentPartFromText, emptyNestedToolCallRecorder, formatInputResponseContent, formatInteractionResponseContent, formatQuestionResponseContent, hitlResponseEvent, inferTextDocumentMimeType, inlineBase64AttachmentSource, inlineBase64Source, inputRequestId, inputResponseStructuredContent, interactionJsonEquals, interactionRequestId, interactionResponseStructuredContent, interactionUnknownOutcomeNotice, isCodeModeCallable, isCodeModeFailClosed, isContentEmpty, isProviderToolDef, isTerminalAgentEvent, isTextDocumentMimeType, isToolJsonSchemaObject, makeBackgroundToolAcceptedResult, makeErrorToolResult, makeInteractionToolResult, makeNestedToolCallRecorder, makeSubagentRunId, messageContextText, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxRecordedCalls, nestedToolCallMaxTotalArgsBytes, nestedToolCallRecordLimit, nestedToolCallResultFields, plainHitlResponse, plainInputResponse, plainInteractionResponse, plainQuestionAnswer, plainQuestionResponse, plainToolApprovalResponse, prependMessageContextToContent, providerToolDefs, questionResponseStructuredContent, recordNestedToolCall, refAttachmentSource, repairDanglingHostToolCalls, replaceLoneSurrogates, replaceLoneSurrogatesDeep, resolveContentAttachmentSources, resolveMessageAttachmentSources, resolveMessagesAttachmentSources, sameInteractionBinding, sameInteractionCall, textDocumentMimeTypeFromFilename, textImageDocumentModelCapabilities, textImageModelCapabilities, textOnlyModelCapabilities, textToBase64Utf8, toolDiscovery, toolResultMessageFromResult, truncateCodePoints, urlAttachmentSource, validInteractionReceipt, validateInteractionSubmission, validateNoDanglingHostToolCalls, zeroAgentUsage };

package/dist/protocol/nested-tool-calls.d.mts

@@ -2,8 +2,17 @@ import { AgentUsage } from "./usage.mjs";
 import * as Schema from "effect/Schema";
 
 //#region src/protocol/nested-tool-calls.d.ts
-/** At most this many nested calls are recorded; later calls mark the record incomplete. */
+/** Default number of nested calls a record keeps; later calls are dropped (counted, not listed)
+ * and mark the record incomplete. Callers size the record to their own call limit with
+ * `makeNestedToolCallRecorder({ maxCalls })` (code mode uses `limits.maxNestedCalls`).
+ */
 declare const nestedToolCallMaxCalls = 256;
+/** Ceiling of any record's `maxCalls`: a larger (or infinite) limit keeps this many calls. */
+declare const nestedToolCallMaxRecordedCalls = 4096;
+/** The number of calls a record keeps for a requested `maxCalls`: whole, within
+ * `0..nestedToolCallMaxRecordedCalls`; `NaN` and absent mean `nestedToolCallMaxCalls`.
+ */
+declare const nestedToolCallRecordLimit: (maxCalls: number | undefined) => number;
 /** UTF-8 byte budget for one recorded call's compact JSON arguments. */
 declare const nestedToolCallMaxArgsBytes: number;
 /** UTF-8 byte budget for the compact JSON arguments of all recorded calls together. */
@@ -26,11 +35,22 @@ declare const NestedToolCallRecord_base: Schema.Class<NestedToolCallRecord, Sche
  * `args` is compact JSON, cut to the byte bounds with a trailing `…` (then no longer JSON).
  */
 declare class NestedToolCallRecord extends NestedToolCallRecord_base {}
+declare const NestedToolCallCounts_base: Schema.Class<NestedToolCallCounts, Schema.Struct<{
+  readonly ok: Schema.Number;
+  readonly error: Schema.Number;
+  readonly cancelled: Schema.Number;
+}>, {}>;
+/** Calls per status over every recorded call, including calls dropped from `calls`. */
+declare class NestedToolCallCounts extends NestedToolCallCounts_base {}
 declare const NestedToolCalls_base: Schema.Class<NestedToolCalls, Schema.Struct<{
   readonly calls: Schema.$Array<typeof NestedToolCallRecord>;
   readonly complete: Schema.Boolean;
+  readonly counts: Schema.optional<typeof NestedToolCallCounts>;
 }>, {}>;
-/** Bounded nested-call record. `complete: false` means calls were dropped or arguments cut. */
+/** Bounded nested-call record. `complete: false` means calls were dropped or arguments cut.
+ * `counts` (absent on records written before it existed) counts every call by status, dropped
+ * calls included, so totals stay correct when `calls` is cut.
+ */
 declare class NestedToolCalls extends NestedToolCalls_base {}
 type NestedToolCallInput = {
   /** Caller-assigned id; the convention is `<parentToolCallId>/<seq>`. */readonly id: string;
@@ -41,27 +61,56 @@ type NestedToolCallInput = {
   readonly error?: string;
   readonly usage?: AgentUsage;
 };
-/** Immutable recorder state. Fold calls with `recordNestedToolCall`; usage of dropped calls
- * still counts toward the summed usage.
+type StatusCounts = {
+  readonly ok: number;
+  readonly error: number;
+  readonly cancelled: number;
+};
+/** Immutable recorder state. Fold calls with `recordNestedToolCall`; usage and status counts of
+ * dropped calls still count. `maxCalls` defaults to `nestedToolCallMaxCalls`.
  */
 type NestedToolCallRecorder = {
   readonly calls: ReadonlyArray<NestedToolCallRecord>;
   readonly complete: boolean;
   readonly argsBytes: number;
   readonly usage?: AgentUsage;
+  readonly maxCalls?: number;
+  readonly counts?: StatusCounts;
 };
+/** An empty recorder keeping at most `maxCalls` calls (default `nestedToolCallMaxCalls`, clamped
+ * by `nestedToolCallRecordLimit` to at most `nestedToolCallMaxRecordedCalls`); the argument byte
+ * budgets are fixed.
+ */
+declare const makeNestedToolCallRecorder: (options?: {
+  readonly maxCalls?: number;
+}) => NestedToolCallRecorder;
 declare const emptyNestedToolCallRecorder: NestedToolCallRecorder;
-/** Pure fold step enforcing the record bounds. Calls past `nestedToolCallMaxCalls` are dropped,
- * arguments past the per-call or total byte budget are cut; either marks the record incomplete.
- * Errors are always cut to `nestedToolCallMaxErrorChars` without affecting completeness.
+/** One call's arguments cut to the nested-call record budgets (see `boundNestedToolCallArgs`). */
+type BoundedNestedToolCallArgs = {
+  /** The kept compact JSON, cut with a trailing `…` when `truncated`. */readonly args: string; /** UTF-8 bytes of `args`. */
+  readonly bytes: number;
+  readonly truncated: boolean;
+};
+/** One call's compact JSON arguments within the record budgets: at most
+ * `nestedToolCallMaxArgsBytes`, and at most what `usedBytes` leaves of
+ * `nestedToolCallMaxTotalArgsBytes`. Shared by every bounded nested-call listing (`nestedCalls`,
+ * code mode `interruptedCalls`) so the bounds cannot drift.
+ */
+declare const boundNestedToolCallArgs: (args: string, usedBytes: number) => BoundedNestedToolCallArgs;
+/** Pure fold step enforcing the record bounds. Calls past the recorder's `maxCalls` are dropped
+ * (still counted by status), arguments past the per-call or total byte budget are cut; either marks
+ * the record incomplete. Errors are always cut to `nestedToolCallMaxErrorChars` without affecting
+ * completeness.
  */
 declare const recordNestedToolCall: (recorder: NestedToolCallRecorder, input: NestedToolCallInput) => NestedToolCallRecorder;
 type NestedToolCallResultFields = {
   readonly nestedCalls: NestedToolCalls;
   readonly usage?: AgentUsage;
 };
-/** `ToolResult` fields for a recorder: the bounded record plus summed usage when reported. */
+/** `ToolResult` fields for a recorder: the bounded record with per-status counts plus summed
+ * usage when reported.
+ */
 declare const nestedToolCallResultFields: (recorder: NestedToolCallRecorder) => NestedToolCallResultFields;
 //#endregion
-export { NestedToolCallInput, NestedToolCallRecord, NestedToolCallRecorder, NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, emptyNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxTotalArgsBytes, nestedToolCallResultFields, recordNestedToolCall };
+export { BoundedNestedToolCallArgs, NestedToolCallCounts, NestedToolCallInput, NestedToolCallRecord, NestedToolCallRecorder, NestedToolCallResultFields, NestedToolCallStatus, NestedToolCalls, boundNestedToolCallArgs, emptyNestedToolCallRecorder, makeNestedToolCallRecorder, nestedToolCallMaxArgsBytes, nestedToolCallMaxCalls, nestedToolCallMaxErrorChars, nestedToolCallMaxRecordedCalls, nestedToolCallMaxTotalArgsBytes, nestedToolCallRecordLimit, nestedToolCallResultFields, recordNestedToolCall };
 //# sourceMappingURL=nested-tool-calls.d.mts.map

package/dist/protocol/nested-tool-calls.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"nested-tool-calls.d.mts","names":[],"sources":["../../src/protocol/nested-tool-calls.ts"],"mappings":";;;;;cAOa,sBAAA;AAAb;AAAA,cAGa,0BAAA;;cAGA,+BAAA;AANsB;AAAA,cAStB,2BAAA;AAAA,cAIA,oBAAA,EAAoB,MAAA,CAAA,QAAA;AAAA,KAErB,oBAAA,UAA8B,oBAAA,CAAqB,IAAI;AAAA,cAAA,yBAAA;;;;;;;;;;;AAN3B;AAIxC;cAQa,oBAAA,SAA6B,yBAUxC;AAAA,cAAG,oBAAA;;;;;cAGQ,eAAA,SAAwB,oBAGnC;AAAA,KAEU,mBAAA;mFAED,EAAA;EAAA,SACA,IAAA;WAEA,IAAA;EAAA,SACA,MAAA,EAAQ,oBAAA;EAAA,SACR,UAAA;EAAA,SACA,KAAA;EAAA,SACA,KAAA,GAAQ,UAAU;AAAA;;;;KAMjB,sBAAA;EAAA,SACD,KAAA,EAAO,aAAA,CAAc,oBAAA;EAAA,SACrB,QAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA,GAAQ,UAAA;AAAA;AAAA,cAGN,2BAAA,EAA6B,sBAIzC;;;;;cA6EY,oBAAA,GACX,QAAA,EAAU,sBAAA,EACV,KAAA,EAAO,mBAAA,KACN,sBAAA;AAAA,KA8DS,0BAAA;EAAA,SACD,WAAA,EAAa,eAAA;EAAA,SACb,KAAA,GAAQ,UAAU;AAAA;;cAIhB,0BAAA,GACX,QAAA,EAAU,sBAAA,KACT,0BAOF"}
+{"version":3,"file":"nested-tool-calls.d.mts","names":[],"sources":["../../src/protocol/nested-tool-calls.ts"],"mappings":";;;;;;AAeA;;cAAa,sBAAA;;cAGA,8BAAA;AAAb;;;AAAA,cAKa,yBAAA,GAA6B,QAA4B;AAL3B;AAAA,cAW9B,0BAAA;;cAGA,+BAAA;;cAGA,2BAAA;AAAA,cAEA,oBAAA,EAAoB,MAAA,CAAA,QAAA;AAAA,KAErB,oBAAA,UAA8B,oBAAA,CAAqB,IAAI;AAAA,cAAA,yBAAA;;;;;;;;;;;;AAJ3B;cAU3B,oBAAA,SAA6B,yBAUxC;AAAA,cAAG,yBAAA;;;;;;cAGQ,oBAAA,SAA6B,yBAMxC;AAAA,cAAG,oBAAA;;;;;;;;;cAMQ,eAAA,SAAwB,oBAInC;AAAA,KAEU,mBAAA;mFAED,EAAA;EAAA,SACA,IAAA;WAEA,IAAA;EAAA,SACA,MAAA,EAAQ,oBAAA;EAAA,SACR,UAAA;EAAA,SACA,KAAA;EAAA,SACA,KAAA,GAAQ,UAAU;AAAA;AAAA,KAGxB,YAAA;EAAA,SACM,EAAA;EAAA,SACA,KAAA;EAAA,SACA,SAAA;AAAA;;;;KAQC,sBAAA;EAAA,SACD,KAAA,EAAO,aAAA,CAAc,oBAAA;EAAA,SACrB,QAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA,GAAQ,UAAA;EAAA,SACR,QAAA;EAAA,SACA,MAAA,GAAS,YAAA;AAAA;;;;;cAOP,0BAAA,GACX,OAAA;EAAA,SAAoB,QAAA;AAAA,MACnB,sBAMD;AAAA,cAEW,2BAAA,EAA6B,sBAAqD;;KAGnF,yBAAA;kFAED,IAAA;WAEA,KAAA;EAAA,SACA,SAAA;AAAA;;AA3ET;AAAG;;;cAmFQ,uBAAA,GACX,IAAA,UACA,SAAA,aACC,yBASF;;;;;;cAiBY,oBAAA,GACX,QAAA,EAAU,sBAAA,EACV,KAAA,EAAO,mBAAA,KACN,sBAAA;AAAA,KAwES,0BAAA;EAAA,SACD,WAAA,EAAa,eAAA;EAAA,SACb,KAAA,GAAQ,UAAU;AAAA;;;;cAMhB,0BAAA,GACX,QAAA,EAAU,sBAAA,KACT,0BAQF"}