agentfootprint 13.0.0 → 14.0.0

package/dist/core/agent/stages/servedParties.js

@@ -0,0 +1,220 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.restoreServedParties = exports.saveServedParties = exports.readServedParties = void 0;
+const boundedJson_js_1 = require("../../../lib/boundedJson.js");
+const toolResourceOwner_js_1 = require("../../../tools/toolResourceOwner.js");
+const toolParty_js_1 = require("../../../tools/toolParty.js");
+const finiteLabel_js_1 = require("../../../tools/finiteLabel.js");
+const batchParties_js_1 = require("./batchParties.js");
+const KEY = 'servedToolParties', MAX_BYTES = 131_072, MAX_ROWS = 1024;
+function invalid() {
+    throw new TypeError('Invalid served tool parties in pause checkpoint');
+}
+function own(value, key) {
+    if (value === null || typeof value !== 'object')
+        return undefined;
+    const field = Object.getOwnPropertyDescriptor(value, key);
+    return field !== undefined && 'value' in field ? field.value : undefined;
+}
+function rows(value) {
+    if (!Array.isArray(value) || value.length > MAX_ROWS)
+        invalid();
+    const names = new Set();
+    return value.map((raw) => {
+        const row = (0, boundedJson_js_1.ownData)(raw, ['name', 'party']), name = (0, finiteLabel_js_1.readFiniteLabel)(row.name), key = (0, finiteLabel_js_1.labelKey)(name);
+        if (names.has(key))
+            invalid();
+        names.add(key);
+        return { name, party: (0, toolParty_js_1.readToolParty)(row.party) ?? invalid() };
+    });
+}
+/** Pure admission of one domain; unrelated checkpoint state is never inspected. */
+function readServedParties(state) {
+    const data = (0, boundedJson_js_1.ownData)((0, boundedJson_js_1.copyJson)(own(state, KEY), MAX_BYTES, false, 9), [
+        'version',
+        'owner',
+        'turn',
+        'iteration',
+        'argumentAsk',
+        'truncated',
+        'bound',
+        'current',
+        'last',
+    ]);
+    const rawOwner = (0, boundedJson_js_1.ownData)(data.owner, ['runId', 'componentOrdinal']);
+    const expected = (0, toolResourceOwner_js_1.readToolOwner)(own(state, 'toolResourceOwner')).birth;
+    if (data.version !== 2 ||
+        typeof rawOwner.runId !== 'string' ||
+        typeof rawOwner.componentOrdinal !== 'number' ||
+        !(0, toolResourceOwner_js_1.sameToolBirth)({ runId: rawOwner.runId, componentOrdinal: rawOwner.componentOrdinal }, expected) ||
+        !Number.isSafeInteger(data.turn) ||
+        data.turn < 1 ||
+        data.turn !== own(state, 'turnNumber') ||
+        !Number.isSafeInteger(data.iteration) ||
+        data.iteration < 1 ||
+        data.iteration !== own(state, 'iteration') ||
+        typeof data.argumentAsk !== 'boolean' ||
+        typeof data.truncated !== 'boolean')
+        invalid();
+    const current = rows(data.current), last = rows(data.last);
+    const remembered = new Map(last.map((row) => [(0, finiteLabel_js_1.labelKey)(row.name), row.party]));
+    for (const row of current) {
+        const party = remembered.get((0, finiteLabel_js_1.labelKey)(row.name));
+        if (party === undefined || !(0, toolParty_js_1.sameToolParty)(row.party, party))
+            invalid();
+    }
+    const calls = own(state, 'llmLatestToolCalls') ?? [];
+    const pausedName = own(state, 'pausedToolName');
+    (0, batchParties_js_1.readOriginalParties)(data.bound, calls, !data.argumentAsk && typeof pausedName === 'string'
+        ? {
+            id: own(state, 'pausedToolCallId'),
+            name: pausedName,
+            party: own(state, 'pausedToolParty'),
+        }
+        : undefined);
+    if (data.truncated === false &&
+        Array.isArray(calls) &&
+        data.bound.length !== calls.length)
+        invalid();
+    return {
+        version: 2,
+        owner: expected,
+        turn: data.turn,
+        iteration: data.iteration,
+        argumentAsk: data.argumentAsk,
+        truncated: data.truncated,
+        bound: data.bound,
+        current,
+        last,
+    };
+}
+exports.readServedParties = readServedParties;
+/** One finite proof: selected paused call, then its siblings, then remembered wire. */
+function saveServedParties(scope, served, binding) {
+    if (served === undefined)
+        return;
+    const calls = binding?.calls ?? [];
+    const carrier = {
+        version: 2,
+        owner: (0, toolResourceOwner_js_1.readToolOwner)(scope.$getValue('toolResourceOwner')).birth,
+        turn: scope.turnNumber,
+        iteration: binding?.iteration ?? scope.iteration,
+        argumentAsk: binding?.argumentAsk === true,
+        truncated: served.truncated === true,
+        bound: [],
+        current: [],
+        last: [],
+    };
+    const bound = [], last = [], current = [];
+    let bytes = (0, boundedJson_js_1.jsonBytes)(carrier), truncated = carrier.truncated;
+    const paused = binding?.paused;
+    const selected = paused === undefined
+        ? -1
+        : calls.findIndex((value) => {
+            const call = (0, batchParties_js_1.ownCall)(value);
+            return call?.name === paused.name && Object.is(call.id, paused.id);
+        });
+    const indices = [
+        ...(selected >= 0 ? [selected] : []),
+        ...calls.map((_, index) => index).filter((index) => index !== selected),
+    ];
+    for (const index of indices) {
+        const row = (0, batchParties_js_1.originalPartyRow)(calls[index], index, binding?.partyOf ?? (() => undefined));
+        if (row === undefined) {
+            truncated = true;
+            continue;
+        }
+        const cost = (0, boundedJson_js_1.jsonBytes)(row) + (bound.length > 0 ? 1 : 0);
+        if (bound.length === MAX_ROWS || bytes + cost > MAX_BYTES) {
+            truncated = true;
+            continue;
+        }
+        bytes += cost;
+        bound.push(row);
+    }
+    const recent = new Map();
+    const offered = new Map([...served.current].map(([name, party]) => [(0, finiteLabel_js_1.keyOfLabel)(name), party]));
+    for (const [key, party] of served.lastProof ?? []) {
+        const [kind, value] = JSON.parse(key);
+        const name = (0, finiteLabel_js_1.readFiniteLabel)({ kind, value });
+        recent.set(key, { name, party });
+    }
+    for (const [name, value] of [...served.lastServed, ...served.current]) {
+        const party = value === null ? undefined : (0, toolParty_js_1.readToolParty)(value);
+        if (party === undefined) {
+            truncated = true;
+            continue;
+        }
+        const label = (0, finiteLabel_js_1.finiteLabel)(name), key = (0, finiteLabel_js_1.labelKey)(label);
+        recent.delete(key);
+        recent.set(key, { name: label, party });
+    }
+    for (const row of [...recent.values()].reverse()) {
+        const raw = offered.get((0, finiteLabel_js_1.labelKey)(row.name));
+        const active = raw ?? served.currentProof?.get((0, finiteLabel_js_1.labelKey)(row.name));
+        const onWire = active !== undefined && active !== null && (0, toolParty_js_1.sameToolParty)(active, row.party);
+        const cost = (0, boundedJson_js_1.jsonBytes)(row) +
+            (last.length > 0 ? 1 : 0) +
+            (onWire ? (0, boundedJson_js_1.jsonBytes)(row) + (current.length > 0 ? 1 : 0) : 0);
+        if (last.length === MAX_ROWS || bytes + cost > MAX_BYTES) {
+            truncated = true;
+            continue;
+        }
+        bytes += cost;
+        last.push(row);
+        if (onWire)
+            current.push(row);
+    }
+    const currentByKey = new Map(current.map((row) => [(0, finiteLabel_js_1.labelKey)(row.name), row]));
+    const wireOrder = served.currentProof === undefined
+        ? [...served.current.keys()].map(finiteLabel_js_1.keyOfLabel)
+        : [...served.currentProof.keys()];
+    const ordered = wireOrder.flatMap((key) => {
+        const row = currentByKey.get(key);
+        return row === undefined ? [] : [row];
+    });
+    const saved = { ...carrier, truncated, bound, current: ordered, last: last.reverse() };
+    scope.servedToolParties = readServedParties({
+        [KEY]: saved,
+        toolResourceOwner: { version: 1, birth: carrier.owner, nextDispatch: 0 },
+        turnNumber: carrier.turn,
+        iteration: carrier.iteration,
+        llmLatestToolCalls: calls,
+    });
+    served.argumentAskPending = carrier.argumentAsk;
+}
+exports.saveServedParties = saveServedParties;
+/** Actual restore alone narrows a cached offer; new positive Compose may replace it. */
+function restoreServedParties(scope, served) {
+    if (served === undefined || served.wireReady === true)
+        return;
+    const calls = scope.$getValue('llmLatestToolCalls');
+    const carrier = readServedParties({
+        [KEY]: scope.$getValue(KEY),
+        toolResourceOwner: scope.$getValue('toolResourceOwner'),
+        turnNumber: scope.turnNumber,
+        iteration: scope.iteration,
+        llmLatestToolCalls: calls,
+        pausedToolName: scope.$getValue('pausedToolName'),
+        pausedToolCallId: scope.$getValue('pausedToolCallId'),
+        pausedToolParty: scope.$getValue('pausedToolParty'),
+    });
+    const currentProof = new Map(carrier.current.map(({ name, party }) => [(0, finiteLabel_js_1.labelKey)(name), party]));
+    served.currentProof = currentProof;
+    served.lastProof = new Map(carrier.last.map(({ name, party }) => [(0, finiteLabel_js_1.labelKey)(name), party]));
+    served.current = new Map(carrier.current.flatMap(({ name, party }) => name.kind === 'plain' ? [[name.value, party]] : []));
+    served.lastServed.clear();
+    for (const { name, party } of carrier.last)
+        if (name.kind === 'plain')
+            served.lastServed.set(name.value, party);
+    served.pinned = (0, batchParties_js_1.readOriginalParties)(carrier.bound, calls);
+    served.restored = true;
+    served.truncated = carrier.truncated ? true : undefined;
+    served.argumentAskPending = carrier.argumentAsk;
+    served.wireReady = true;
+    if (carrier.truncated)
+        scope.dynamicToolSchemas = [...(scope.dynamicToolSchemas ?? [])].filter((schema) => currentProof.has((0, finiteLabel_js_1.keyOfLabel)(schema.name)));
+    scope.servedToolParties = undefined;
+}
+exports.restoreServedParties = restoreServedParties;
+//# sourceMappingURL=servedParties.js.map

package/dist/core/agent/stages/servedParties.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servedParties.js","sourceRoot":"","sources":["../../../../src/core/agent/stages/servedParties.ts"],"names":[],"mappings":";;;AACA,gEAA2E;AAC3E,8EAI6C;AAC7C,8DAA2F;AAC3F,kEAMuC;AAGvC,uDAK2B;AAE3B,MAAM,GAAG,GAAG,mBAAmB,EAC7B,SAAS,GAAG,OAAO,EACnB,QAAQ,GAAG,IAAI,CAAC;AAuBlB,SAAS,OAAO;IACd,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;AACzE,CAAC;AACD,SAAS,GAAG,CAAC,KAAc,EAAE,GAAW;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1D,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ;QAAE,OAAO,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAA,wBAAO,EAAC,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,IAAI,GAAG,IAAA,gCAAe,EAAC,GAAG,CAAC,IAAI,CAAC,EAChC,GAAG,GAAG,IAAA,yBAAQ,EAAC,IAAI,CAAC,CAAC;QACvB,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAA,4BAAa,EAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC;AACD,mFAAmF;AACnF,SAAgB,iBAAiB,CAAC,KAA8B;IAC9D,MAAM,IAAI,GAAG,IAAA,wBAAO,EAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE;QACnE,SAAS;QACT,OAAO;QACP,MAAM;QACN,WAAW;QACX,aAAa;QACb,WAAW;QACX,OAAO;QACP,SAAS;QACT,MAAM;KACP,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAA,wBAAO,EAAC,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,IAAA,oCAAa,EAAC,GAAG,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,IACE,IAAI,CAAC,OAAO,KAAK,CAAC;QAClB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAClC,OAAO,QAAQ,CAAC,gBAAgB,KAAK,QAAQ;QAC7C,CAAC,IAAA,oCAAa,EACZ,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EACtE,QAAQ,CACT;QACD,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAe,GAAG,CAAC;QACzB,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC;QACtC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,IAAI,CAAC,SAAoB,GAAG,CAAC;QAC9B,IAAI,CAAC,SAAS,KAAK,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC;QAC1C,OAAO,IAAI,CAAC,WAAW,KAAK,SAAS;QACrC,OAAO,IAAI,CAAC,SAAS,KAAK,SAAS;QAEnC,OAAO,EAAE,CAAC;IACZ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAChC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAA,4BAAa,EAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;IACzE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;IAChD,IAAA,qCAAmB,EACjB,IAAI,CAAC,KAAK,EACV,KAAK,EACL,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,UAAU,KAAK,QAAQ;QACjD,CAAC,CAAC;YACE,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC;YAClC,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,iBAAiB,CAAC;SACrC;QACH,CAAC,CAAC,SAAS,CACd,CAAC;IACF,IACE,IAAI,CAAC,SAAS,KAAK,KAAK;QACxB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,KAAmB,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAEjD,OAAO,EAAE,CAAC;IACZ,OAAO;QACL,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,IAAI,CAAC,IAAc;QACzB,SAAS,EAAE,IAAI,CAAC,SAAmB;QACnC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAA+C;QAC3D,OAAO;QACP,IAAI;KACL,CAAC;AACJ,CAAC;AArED,8CAqEC;AACD,uFAAuF;AACvF,SAAgB,iBAAiB,CAC/B,KAA6B,EAC7B,MAAqC,EACrC,OAA0B;IAE1B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GAAyB;QACpC,OAAO,EAAE,CAAC;QACV,KAAK,EAAE,IAAA,oCAAa,EAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK;QAChE,IAAI,EAAE,KAAK,CAAC,UAAoB;QAChC,SAAS,EAAE,OAAO,EAAE,SAAS,IAAK,KAAK,CAAC,SAAoB;QAC5D,WAAW,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI;QAC1C,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,IAAI;QACpC,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,IAAI,EAAE,EAAE;KACT,CAAC;IACF,MAAM,KAAK,GAAuB,EAAE,EAClC,IAAI,GAAe,EAAE,EACrB,OAAO,GAAe,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,IAAA,0BAAS,EAAC,OAAO,CAAC,EAC5B,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;IAC/B,MAAM,QAAQ,GACZ,MAAM,KAAK,SAAS;QAClB,CAAC,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;YACxB,MAAM,IAAI,GAAG,IAAA,yBAAO,EAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;IACT,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC;KACxE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAA,kCAAgB,EAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACzF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,0BAAS,EAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;YAC1D,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,2BAAU,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAA,gCAAe,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAa,EAAC,KAAK,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,4BAAW,EAAC,IAAI,CAAC,EAC7B,GAAG,GAAG,IAAA,yBAAQ,EAAC,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,IAAI,IAAA,4BAAa,EAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3F,MAAM,IAAI,GACR,IAAA,0BAAS,EAAC,GAAG,CAAC;YACd,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,0BAAS,EAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC;YACzD,SAAS,GAAG,IAAI,CAAC;YACjB,SAAS;QACX,CAAC;QACD,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAA,yBAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GACb,MAAM,CAAC,YAAY,KAAK,SAAS;QAC/B,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,2BAAU,CAAC;QAC5C,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IACvF,KAAK,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC1C,CAAC,GAAG,CAAC,EAAE,KAAK;QACZ,iBAAiB,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,EAAE;QACxE,UAAU,EAAE,OAAO,CAAC,IAAI;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;IACH,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;AAClD,CAAC;AArGD,8CAqGC;AACD,wFAAwF;AACxF,SAAgB,oBAAoB,CAClC,KAA6B,EAC7B,MAAqC;IAErC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAChC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC;QAC3B,iBAAiB,EAAE,KAAK,CAAC,SAAS,CAAC,mBAAmB,CAAC;QACvD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,kBAAkB,EAAE,KAAK;QACzB,cAAc,EAAE,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACjD,gBAAgB,EAAE,KAAK,CAAC,SAAS,CAAC,kBAAkB,CAAC;QACrD,eAAe,EAAE,KAAK,CAAC,SAAS,CAAC,iBAAiB,CAAC;KACpD,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,IAAA,yBAAQ,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChG,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,MAAM,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,IAAA,yBAAQ,EAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,CAAC,OAAO,GAAG,IAAI,GAAG,CACtB,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAC1C,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAC5D,CACF,CAAC;IACF,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,IAAI;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,CAAC,MAAM,GAAG,IAAA,qCAAmB,EAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1D,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,CAAC,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC;IAChD,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,IAAI,OAAO,CAAC,SAAS;QACnB,KAAK,CAAC,kBAAkB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjF,YAAY,CAAC,GAAG,CAAC,IAAA,2BAAU,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC1C,CAAC;IACJ,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;AACtC,CAAC;AArCD,oDAqCC"}

package/dist/core/agent/stages/timeLayer.js

@@ -9,7 +9,7 @@
  *          row — moved out of the two stages verbatim, each taking the
  *          stage's own scope and deps.
  * Role:    core/ layer leaf of the time layer. seed (`stages/seed.ts`) and
- *          ToolCalls (`stages/toolCalls.ts`) load it through `import()` only
+ *          ToolCalls (`stages/toolCalls/execution/initialInvocation.ts`) load it through `import()` only
  *          when the agent armed `.time()` (`deps.timeClock`, `deps.timeReader`,
  *          `deps.time`) — the optional-family law of docs-next's site budget
  *          (`scripts/check-site-budget.mjs`; the `arguments/dispatch.ts`
@@ -41,7 +41,7 @@ const ledger_js_1 = require("../findings/ledger.js");
  * turn number is final (`anchorTurnNumber` may raise it), so the row names
  * the turn every later row of this turn names. One row per run; the clock is
  * a run constant from here on and is never written again this turn (a
- * resume keeps it — `stages/toolCalls.ts` records a differing `time` as
+ * resume keeps it — `stages/timeLayer.ts` records a differing `time` as
  * `clock-on-resume`). No accessor, or no draft → nothing is written. A draft
  * whose zone is unknown (G15) takes the zone the person answered in an earlier
  * turn (`time/rows.ts` · `answeredZoneOf`, `zoneSource: 'answered'`), else stays

package/dist/core/agent/stages/toolCallShape.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toolBatchFailure = exports.MAX_TOOL_CALLS = void 0;
+/** Shared finite shape bounds; fresh model output refuses, stored pause data rejects. */
+exports.MAX_TOOL_CALLS = 1024;
+function toolBatchFailure(calls) {
+    if (calls.length > exports.MAX_TOOL_CALLS)
+        return 'too-many-calls';
+    const ids = new Set();
+    for (const call of calls) {
+        if (typeof call.id !== 'string' || call.id.length === 0)
+            return 'invalid-call-id';
+        if (ids.has(call.id))
+            return 'duplicate-call-id';
+        ids.add(call.id);
+        if (typeof call.name !== 'string' || call.name.length === 0)
+            return 'invalid-tool-name';
+    }
+    return undefined;
+}
+exports.toolBatchFailure = toolBatchFailure;
+//# sourceMappingURL=toolCallShape.js.map

package/dist/core/agent/stages/toolCallShape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolCallShape.js","sourceRoot":"","sources":["../../../../src/core/agent/stages/toolCallShape.ts"],"names":[],"mappings":";;;AAAA,yFAAyF;AAC5E,QAAA,cAAc,GAAG,IAAI,CAAC;AAMnC,SAAgB,gBAAgB,CAC9B,KAAgE;IAEhE,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAc;QAAE,OAAO,gBAAgB,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,iBAAiB,CAAC;QAClF,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,mBAAmB,CAAC;QACjD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,mBAAmB,CAAC;IAC1F,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAZD,4CAYC"}

package/dist/core/agent/stages/toolCalls/access/argumentGate.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareArgumentGate = void 0;
+const toolArgsValidation_js_1 = require("../../../../../tools/toolArgsValidation.js");
+const typedEmit_js_1 = require("../../../../../recorders/core/typedEmit.js");
+/** The original streamed-argument refusal and ruled-tool admission probes. */
+function prepareArgumentGate(scope, frame, ports) {
+    const { tc, tool, iteration, execution, outcome } = frame;
+    const { unmountedRules, warnUnmountedToolPeriod } = ports;
+    const argumentGate = {
+        // Tool-args validation (#9) and the inputs layer's refusals share one
+        // flag: the call is refused for its ARGUMENTS and lands in one shape.
+        argsRejected: tc.argumentsFailure !== undefined,
+    };
+    if (!execution.denied && tc.argumentsFailure !== undefined) {
+        const issues = (0, toolArgsValidation_js_1.streamedToolArgIssues)(tc.argumentsFailure);
+        (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.validation.args_invalid', {
+            toolName: tc.name,
+            toolCallId: tc.id,
+            iteration,
+            issues,
+            enforced: true,
+        });
+        outcome.error = true;
+        outcome.result = (0, toolArgsValidation_js_1.formatToolArgIssues)(tc.name, issues);
+    }
+    const consentGate = {
+        // A check-in that tripped in a batch whose one human question was the
+        // inputs layer's ask (`oneQuestionAsked`) — refused, never asked.
+        checkInRefused: false,
+    };
+    // ── THE INPUTS LAYER'S REFUSALS (honesty layer 2) — the argument-
+    // refusal shape the validation refusal below uses, decided HERE:
+    // after permission (policy sees every attempted call) and BEFORE the
+    // middleware chain, so no middleware can `ask` a person about a call
+    // the library has already decided must not run — an approved ask
+    // resumes through its own door, which re-applies both refusals
+    // (`resume`, the middleware-ask path). Refused: a call whose tool's
+    // rules could not be read at dispatch (the layer's entry), and — with
+    // the layer NOT mounted — any call whose tool declares rules (fail
+    // closed). Neither applies to a tool that declares nothing — and
+    // neither awaits for one (`unmountedRules` answers it synchronously).
+    const unmounted = execution.denied || argumentGate.argsRejected ? undefined : unmountedRules(tool, tc.name);
+    warnUnmountedToolPeriod(tool, tc.name);
+    return { argumentGate, consentGate, unmounted };
+}
+exports.prepareArgumentGate = prepareArgumentGate;
+//# sourceMappingURL=argumentGate.js.map

package/dist/core/agent/stages/toolCalls/access/argumentGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argumentGate.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/access/argumentGate.ts"],"names":[],"mappings":";;;AASA,sFAGoD;AACpD,6EAAuE;AAcvE,8EAA8E;AAC9E,SAAgB,mBAAmB,CACjC,KAA6B,EAC7B,KAAwB,EACxB,KAAgF;IAEhF,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,EAAE,cAAc,EAAE,uBAAuB,EAAE,GAAG,KAAK,CAAC;IAC1D,MAAM,YAAY,GAAqB;QACrC,sEAAsE;QACtE,sEAAsE;QACtE,YAAY,EAAE,EAAE,CAAC,gBAAgB,KAAK,SAAS;KAChD,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAA,6CAAqB,EAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAA,wBAAS,EAAC,KAAK,EAAE,wCAAwC,EAAE;YACzD,QAAQ,EAAE,EAAE,CAAC,IAAI;YACjB,UAAU,EAAE,EAAE,CAAC,EAAE;YACjB,SAAS;YACT,MAAM;YACN,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;QACrB,OAAO,CAAC,MAAM,GAAG,IAAA,2CAAmB,EAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,WAAW,GAAoB;QACnC,sEAAsE;QACtE,kEAAkE;QAClE,cAAc,EAAE,KAAK;KACtB,CAAC;IACF,mEAAmE;IACnE,iEAAiE;IACjE,qEAAqE;IACrE,qEAAqE;IACrE,iEAAiE;IACjE,+DAA+D;IAC/D,oEAAoE;IACpE,sEAAsE;IACtE,mEAAmE;IACnE,iEAAiE;IACjE,sEAAsE;IACtE,MAAM,SAAS,GACb,SAAS,CAAC,MAAM,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5F,uBAAuB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAClD,CAAC;AA5CD,kDA4CC"}

package/dist/core/agent/stages/toolCalls/access/argumentValidation.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildArgumentRefusal = void 0;
+const toolArgsValidation_js_1 = require("../../../../../tools/toolArgsValidation.js");
+const typedEmit_js_1 = require("../../../../../recorders/core/typedEmit.js");
+/** Build the existing per-handler argument-schema admission rule. */
+function buildArgumentRefusal(toolArgValidation) {
+    /**
+     * One admission rule for initial and resumed dispatch. Judge against the
+     * wire schema after middleware, before artifact resolution or credentials.
+     * Approval of an ask does not establish schema validity, and a remaining
+     * middleware link may have changed the paused arguments. Credential-consent
+     * checkpoints holding resolved wants data are not converted back to refs.
+     */
+    const argumentRefusal = (scope, tool, args, call) => {
+        if (toolArgValidation === 'off')
+            return undefined;
+        const verdict = (0, toolArgsValidation_js_1.validateToolArgs)(args, tool.schema.inputSchema);
+        if (verdict.ok)
+            return undefined;
+        (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.validation.args_invalid', {
+            ...call,
+            issues: verdict.issues,
+            enforced: toolArgValidation === 'enforce',
+        });
+        return toolArgValidation === 'enforce'
+            ? (0, toolArgsValidation_js_1.formatToolArgIssues)(call.toolName, verdict.issues)
+            : undefined;
+    };
+    return argumentRefusal;
+}
+exports.buildArgumentRefusal = buildArgumentRefusal;
+//# sourceMappingURL=argumentValidation.js.map

package/dist/core/agent/stages/toolCalls/access/argumentValidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"argumentValidation.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/access/argumentValidation.ts"],"names":[],"mappings":";;;AAAA,sFAIoD;AAIpD,6EAAuE;AAEvE,qEAAqE;AACrE,SAAgB,oBAAoB,CAAC,iBAAwC;IAC3E;;;;;;OAMG;IACH,MAAM,eAAe,GAAG,CACtB,KAA6B,EAC7B,IAAU,EACV,IAAa,EACb,IAA4F,EACxE,EAAE;QACtB,IAAI,iBAAiB,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC;QAClD,MAAM,OAAO,GAAG,IAAA,wCAAgB,EAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACjC,IAAA,wBAAS,EAAC,KAAK,EAAE,wCAAwC,EAAE;YACzD,GAAG,IAAI;YACP,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,iBAAiB,KAAK,SAAS;SAC1C,CAAC,CAAC;QACH,OAAO,iBAAiB,KAAK,SAAS;YACpC,CAAC,CAAC,IAAA,2CAAmB,EAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AA3BD,oDA2BC"}

package/dist/core/agent/stages/toolCalls/access/bindings.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.rewrittenAfterApproval = exports.changedAfterApproval = exports.unboundAskRows = exports.unboundCallRefusal = exports.frozenTurnOf = exports.checkerContextOf = exports.boundArgsOf = void 0;
+const frozenCopy_js_1 = require("../../../../../lib/frozenCopy.js");
+/**
+ * The copy of a paused call's arguments its request was bound to, detached
+ * from the run's state — what an approved call runs with, as at a fresh
+ * dispatch. A live view of the state goes on changing after the call (the
+ * resume clears it, a later pause rewrites it), so a tool or a rule that kept
+ * its arguments would read values nobody approved. `heldAnswer` already
+ * proved them faithful JSON, which is what makes the copy safe to take.
+ */
+const boundArgsOf = (scope, key) => {
+    const raw = scope.$getValue(key);
+    return typeof raw === 'object' && raw !== null
+        ? structuredClone(raw)
+        : {};
+};
+exports.boundArgsOf = boundArgsOf;
+/**
+ * The permission checker's view of a call's arguments: the call's shared
+ * frozen copy (`lib/frozenCopy.ts`), never the object the tool runs with — a
+ * checker that wrote into its `context` used to change the call. Arguments
+ * no copy can be made of are not handed over: the throw lands in the gate's
+ * fail-closed catch, so the call is denied.
+ */
+const checkerContextOf = (view) => {
+    if (view === undefined) {
+        throw new Error("the call's arguments could not be copied for the permission checker");
+    }
+    return view;
+};
+exports.checkerContextOf = checkerContextOf;
+/**
+ * One frozen copy of a batch's assistant turn — every call's arguments in
+ * it — for the callbacks and events that see the batch before its calls run
+ * (`lib/frozenCopy.ts`). The turn holds the very objects the calls run
+ * with, so a history handed to a callback carries this copy in its place.
+ * A turn no copy can be made of is replaced by a frozen shell without its
+ * calls: nothing a callback holds may reach what runs.
+ */
+const frozenTurnOf = (turn) => (0, frozenCopy_js_1.frozenCopyOf)(turn) ?? Object.freeze({ role: turn.role, content: turn.content });
+exports.frozenTurnOf = frozenTurnOf;
+/**
+ * What a consent gate refuses with when the call cannot be bound to a
+ * request — its arguments are not values JSON writes down faithfully, so an
+ * approval could not be held to them. The call does not run and nobody is
+ * asked; the model reads why — as a past fact about that one call, never an
+ * order for the next one, because a tool result is re-read on every later
+ * call of the turn (`test/modelFacingScan.test.ts`).
+ */
+const unboundCallRefusal = (toolName, gate) => `tool '${toolName}' was not run on that call: it needed a person's ${gate === 'ask' ? 'answer to a middleware ask' : 'approval (checkIn)'}, and an approval binds to the exact arguments it is shown — those arguments held a ` +
+    `value plain JSON cannot write down (a date object, a map, a non-finite number, …), so no ` +
+    `approval could be bound to them.`;
+exports.unboundCallRefusal = unboundCallRefusal;
+/**
+ * The chain's rows for an ask no approval could be bound to. Nobody was
+ * asked, so no row may say a person was: the asking link's `ask` row (the
+ * walk's last — it stops at the ask) becomes the refusal it turned into,
+ * naming why, the way `askPolicy: 'refuse'` files a refused ask.
+ */
+const unboundAskRows = (rows, middleware, question) => rows.map((row, at) => at === rows.length - 1 && row.outcome === 'ask'
+    ? {
+        ...row,
+        outcome: 'deny',
+        why: `middleware '${middleware}' asked a person to decide, and the call could not be ` +
+            `bound to a request a decision names — its arguments held a value plain JSON ` +
+            `cannot write down — so nobody was asked: ${question}`,
+    }
+    : row);
+exports.unboundAskRows = unboundAskRows;
+/**
+ * Who changed an approved ask's arguments after the approval, in words: the
+ * links whose rows declared a rewrite — or, when none did (an edit in place
+ * declares nothing), every link that ran after the ask, without claiming
+ * which of them it was.
+ */
+const changedAfterApproval = (rows) => {
+    const quoted = (picked) => [...new Set(picked.map((row) => `'${row.middleware}'`))].join(', ');
+    const declared = rows.filter((row) => row.changed);
+    if (declared.length > 0) {
+        return `the middleware ${quoted(declared)} changed those arguments after the approval`;
+    }
+    return rows.length > 0
+        ? `those arguments came back changed from the middleware after the ask (${quoted(rows)})`
+        : 'a middleware after the ask changed those arguments';
+};
+exports.changedAfterApproval = changedAfterApproval;
+/**
+ * What the model reads when the rest of an approved ask's chain handed back
+ * other arguments than the ones the person approved: the call does not run.
+ * A past fact about that call.
+ */
+const rewrittenAfterApproval = (toolName, changedBy) => `tool '${toolName}' was not run on that call: a person approved it with the arguments ` +
+    `they were shown, and ${changedBy}, so the approval did not cover the call that would ` +
+    `have run.`;
+exports.rewrittenAfterApproval = rewrittenAfterApproval;
+//# sourceMappingURL=bindings.js.map

package/dist/core/agent/stages/toolCalls/access/bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindings.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/access/bindings.ts"],"names":[],"mappings":";;;AAIA,oEAAgE;AAIhE;;;;;;;GAOG;AACI,MAAM,WAAW,GAAG,CACzB,KAA6B,EAC7B,GAA0C,EACP,EAAE;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAC5C,CAAC,CAAE,eAAe,CAAC,GAAG,CAAuC;QAC7D,CAAC,CAAC,EAAE,CAAC;AACT,CAAC,CAAC;AARW,QAAA,WAAW,eAQtB;AAEF;;;;;;GAMG;AACI,MAAM,gBAAgB,GAAG,CAAC,IAA0B,EAAqC,EAAE;IAChG,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AALW,QAAA,gBAAgB,oBAK3B;AAEF;;;;;;;GAOG;AACI,MAAM,YAAY,GAAG,CAAC,IAAgB,EAAc,EAAE,CAC3D,IAAA,4BAAY,EAAC,IAAI,CAAC,IAAK,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAgB,CAAC;AADrF,QAAA,YAAY,gBACyE;AAElG;;;;;;;GAOG;AACI,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAE,IAAqB,EAAU,EAAE,CACpF,SAAS,QAAQ,oDACf,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,oBAClD,sFAAsF;IACtF,2FAA2F;IAC3F,kCAAkC,CAAC;AALxB,QAAA,kBAAkB,sBAKM;AAErC;;;;;GAKG;AACI,MAAM,cAAc,GAAG,CAC5B,IAAmC,EACnC,UAAkB,EAClB,QAAgB,EACM,EAAE,CACxB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CACnB,EAAE,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK;IAC7C,CAAC,CAAC;QACE,GAAG,GAAG;QACN,OAAO,EAAE,MAAM;QACf,GAAG,EACD,eAAe,UAAU,wDAAwD;YACjF,8EAA8E;YAC9E,4CAA4C,QAAQ,EAAE;KACzD;IACH,CAAC,CAAC,GAAG,CACR,CAAC;AAhBS,QAAA,cAAc,kBAgBvB;AAEJ;;;;;GAKG;AACI,MAAM,oBAAoB,GAAG,CAAC,IAAmC,EAAU,EAAE;IAClF,MAAM,MAAM,GAAG,CAAC,MAAqC,EAAU,EAAE,CAC/D,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,kBAAkB,MAAM,CAAC,QAAQ,CAAC,6CAA6C,CAAC;IACzF,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,wEAAwE,MAAM,CAAC,IAAI,CAAC,GAAG;QACzF,CAAC,CAAC,oDAAoD,CAAC;AAC3D,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B;AAEF;;;;GAIG;AACI,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAE,SAAiB,EAAU,EAAE,CACpF,SAAS,QAAQ,sEAAsE;IACvF,wBAAwB,SAAS,sDAAsD;IACvF,WAAW,CAAC;AAHD,QAAA,sBAAsB,0BAGrB"}

package/dist/core/agent/stages/toolCalls/access/callState.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareCallState = void 0;
+/** Initialize the original result, fill and execution cells at one synchronous call boundary. */
+function prepareCallState(tc, findingsRefusal, resolutions, inputs, args) {
+    const outcome = {
+        result: findingsRefusal,
+        error: findingsRefusal === undefined ? undefined : true,
+        /** The typed effects channel (9.19.0) — set only when the tool
+         *  returned a recognized result envelope; everything else keeps
+         *  today's path byte for byte. */
+        toolEnvelope: undefined,
+        toolStatus: findingsRefusal === undefined ? undefined : 'invalid',
+    };
+    // Permission gate — when a checker is configured, evaluate BEFORE
+    // executing the tool. Emits `permission.check` with the decision.
+    //
+    // v2.12 — three terminal results:
+    //   • 'allow' / 'gate_open' → tool executes normally
+    //   • 'deny'                → synthetic tool_result lands; LLM continues
+    //   • 'halt'                → synthetic tool_result lands; run terminates
+    //                             via scope.$break + Agent.run throws
+    //                             PolicyHaltError at the API boundary
+    //
+    // Strict ordering on halt: synthetic tool_result → halt event →
+    // commit (newHistory written to scope) → $break. This guarantees
+    // the audit trail is complete before the run terminates, so
+    // `agent.resumeOnError(checkpoint)` sees consistent state.
+    //
+    // The checker receives the in-flight sequence (derived from
+    // scope.history), full conversation history, current iteration,
+    // identity, and abort signal — enough surface to build sequence-
+    // aware policies (forbidden chains, idempotency limits, cost
+    // guards) without maintaining parallel state.
+    // Args as they will actually be used. The middleware chain below may
+    // replace this; everything downstream (validation, the check-in
+    // evidence a human approves, credentials, execute, the read_skill
+    // gate) reads `callArgs`, never `tc.args`, so there is exactly one
+    // answer to "what did this call really run with". Seeded from the
+    // PEELED `args` (9.101.0), which is `tc.args` itself when unarmed.
+    // ── THE INPUTS LAYER'S ENTRY FOR THIS CALL (honesty layer 2) ──────
+    // Applied AFTER `tool_start` (which keeps the model's proposal) and
+    // BEFORE the permission check, so policy judges the call that will
+    // really run. A fill is a FRESH object — never an edit of `tc.args`,
+    // which is the assistant message's own object when `.findings()` is
+    // off. No entry (every unarmed agent) → `args` itself, by reference.
+    const resolution = resolutions?.get(tc.id);
+    const runArgs = inputs !== undefined ? inputs.withFills(args, resolution) : args;
+    const callArguments = {
+        callArgs: runArgs,
+        /** The arguments AFTER the before-tool chain and BEFORE a `wants`
+         *  resolution swaps refs for artifact data — what `changedArgKeys` is
+         *  judged on. Same reference as `args` unless a link rewrote (or the
+         *  inputs layer filled a value — then every filled key is named). */
+        chainedArgs: runArgs,
+    };
+    const execution = {
+        denied: findingsRefusal !== undefined,
+        /** True once `tool.execute` has been entered — see `afterMoment`. */
+        executed: false,
+        /** The declared argument's value handed to `execute`, read just before it ran. */
+        submittedProgram: undefined,
+        /** `execute` was entered and threw — a settlement the script row reads. */
+        executeThrew: false,
+        /** The code-run facts a code-runner tool left for this call (`takeCodeRun`). */
+        ranCode: undefined,
+        /** The tool's own `resultCeiling` (not the column contract) refused the result. */
+        withheldOverCeiling: false,
+        negativeDispatch: undefined,
+        /** The tool's own `resultCeiling` refused this call's result (9.20.0)
+         *  — the call ran, but it must not complete a procedure step: the
+         *  refusal's own instruction is to call again. */
+        ceilingRefused: false,
+        haltContext: undefined,
+    };
+    return { outcome, resolution, runArgs, callArguments, execution };
+}
+exports.prepareCallState = prepareCallState;
+//# sourceMappingURL=callState.js.map

package/dist/core/agent/stages/toolCalls/access/callState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callState.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/access/callState.ts"],"names":[],"mappings":";;;AAQA,iGAAiG;AACjG,SAAgB,gBAAgB,CAC9B,EAAgB,EAChB,eAAkD,EAClD,WAAqE,EACrE,MAAkC,EAClC,IAA4B;IAE5B,MAAM,OAAO,GAAmB;QAC9B,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACvD;;0CAEkC;QAClC,YAAY,EAAE,SAAS;QACvB,UAAU,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;KAClE,CAAC;IACF,kEAAkE;IAClE,kEAAkE;IAClE,EAAE;IACF,kCAAkC;IAClC,qDAAqD;IACrD,yEAAyE;IACzE,0EAA0E;IAC1E,kEAAkE;IAClE,kEAAkE;IAClE,EAAE;IACF,gEAAgE;IAChE,iEAAiE;IACjE,4DAA4D;IAC5D,2DAA2D;IAC3D,EAAE;IACF,4DAA4D;IAC5D,gEAAgE;IAChE,iEAAiE;IACjE,6DAA6D;IAC7D,8CAA8C;IAC9C,qEAAqE;IACrE,gEAAgE;IAChE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,mEAAmE;IACnE,qEAAqE;IACrE,oEAAoE;IACpE,mEAAmE;IACnE,qEAAqE;IACrE,oEAAoE;IACpE,qEAAqE;IACrE,MAAM,UAAU,GAAG,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAa,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,aAAa,GAAkB;QACnC,QAAQ,EAAE,OAAO;QACjB;;;6EAGqE;QACrE,WAAW,EAAE,OAAO;KACrB,CAAC;IACF,MAAM,SAAS,GAAkB;QAC/B,MAAM,EAAE,eAAe,KAAK,SAAS;QACrC,qEAAqE;QACrE,QAAQ,EAAE,KAAK;QACf,kFAAkF;QAClF,gBAAgB,EAAE,SAAS;QAC3B,2EAA2E;QAC3E,YAAY,EAAE,KAAK;QACnB,gFAAgF;QAChF,OAAO,EAAE,SAAS;QAClB,mFAAmF;QACnF,mBAAmB,EAAE,KAAK;QAC1B,gBAAgB,EAAE,SAAS;QAC3B;;0DAEkD;QAClD,cAAc,EAAE,KAAK;QACrB,WAAW,EAAE,SAAS;KACvB,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AACpE,CAAC;AA9ED,4CA8EC"}