agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/resumeAnswer.js

@@ -0,0 +1,43 @@
+import { throwIfAborted } from '../../lib/abort.js';
+import { knownDecisionState, hasLocalClose } from '../consentLedger.js';
+import { sameIdentity } from './callerIdentity.js';
+import { ResumeIdentityConflictError } from '../conversation.js';
+import { closedProvenKey, ledgerIdentityOf, notePreviouslySpentDecision, } from '../consentRequest.js';
+import { PauseAnswerRequiredError, ResumeDecisionError } from '../pause.js';
+import { ownField } from './checkpointDomain.js';
+import { isArgumentAskPause } from './arguments/askMarker.js';
+/** A synchronous issued-ledger read may refuse a replay; only atomic spend authorizes execution. */
+export async function refuseKnownSpentAnswer(ledger, input, gate, signal, envSignal) {
+    throwIfAborted(signal);
+    throwIfAborted(envSignal);
+    const requestId = ownField(input, 'requestId');
+    if (typeof requestId !== 'string')
+        return;
+    const localClose = hasLocalClose(ledgerIdentityOf(ledger), requestId);
+    if (knownDecisionState(ledger, requestId) !== true && !localClose)
+        return;
+    notePreviouslySpentDecision(requestId);
+    const closed = localClose || knownDecisionState(ledger, closedProvenKey(requestId)) === true;
+    throw new ResumeDecisionError(closed ? 'closed-by-host' : 'already-answered', gate.kind);
+}
+/** The selected CODE-owned tool leaf, without starting or selecting a native execution. */
+export function refuseMissingPlainAnswer(checkpoint, input) {
+    if (input !== undefined || isArgumentAskPause(checkpoint.pauseData))
+        return;
+    const path = checkpoint.subflowPath;
+    const leaf = path.length === 0
+        ? checkpoint.sharedState
+        : ownField(checkpoint.subflowStates, path[path.length - 1]);
+    if (ownField(leaf, 'pausedCredential') === true)
+        return;
+    const toolCallId = ownField(leaf, 'pausedToolCallId');
+    const toolName = ownField(leaf, 'pausedToolName');
+    if (typeof toolCallId === 'string' && typeof toolName === 'string')
+        throw new PauseAnswerRequiredError({ toolCallId, toolName });
+}
+/** A follow-up never changes the selected conversation's explicitly named person. */
+export function refuseFollowUpIdentity(named, selected) {
+    if (named !== undefined && (selected === undefined || !sameIdentity(named, selected)))
+        throw new ResumeIdentityConflictError('followUp');
+}
+//# sourceMappingURL=resumeAnswer.js.map

package/dist/esm/core/agent/resumeAnswer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumeAnswer.js","sourceRoot":"","sources":["../../../../src/core/agent/resumeAnswer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AAEjE,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,2BAA2B,GAE5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAoB,MAAM,aAAa,CAAC;AAC9F,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAsB,EACtB,KAAc,EACd,IAAiB,EACjB,MAAoB,EACpB,SAAuB;IAEvB,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/C,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO;IAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IACtE,IAAI,kBAAkB,CAAC,MAAM,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU;QAAE,OAAO;IAC1E,2BAA2B,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,UAAU,IAAI,kBAAkB,CAAC,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC;IAC7F,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3F,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,wBAAwB,CAAC,UAA+B,EAAE,KAAc;IACtF,IAAI,KAAK,KAAK,SAAS,IAAI,kBAAkB,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IAC5E,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC;IACpC,MAAM,IAAI,GACR,IAAI,CAAC,MAAM,KAAK,CAAC;QACf,CAAC,CAAC,UAAU,CAAC,WAAW;QACxB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,KAAK,IAAI;QAAE,OAAO;IACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;QAChE,MAAM,IAAI,wBAAwB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CACpC,KAAiC,EACjC,QAAoC;IAEpC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnF,MAAM,IAAI,2BAA2B,CAAC,UAAU,CAAC,CAAC;AACtD,CAAC"}

package/dist/esm/core/agent/resumeCheckpoint.d.ts

@@ -0,0 +1,12 @@
+import type { FlowchartCheckpoint } from 'footprintjs';
+export { toolDomainStateOf } from './checkpointDomain.js';
+/**
+ * Domain readers precede native resume. Admit only their plain state carrier
+ * here; footprintjs remains the sole decoder of the native checkpoint protocol.
+ */
+export declare function resumeStateOf(checkpoint: FlowchartCheckpoint): Record<string, unknown>;
+/**
+ * The transport is a separate fact from the memory namespace. Clean14 writes
+ * a string or explicit null on every entry; absent data cannot mean anonymous.
+ */
+export declare function resumeSessionOf(checkpoint: FlowchartCheckpoint): string | undefined;

package/dist/esm/core/agent/resumeCheckpoint.js

@@ -0,0 +1,34 @@
+export { toolDomainStateOf } from './checkpointDomain.js';
+/**
+ * Domain readers precede native resume. Admit only their plain state carrier
+ * here; footprintjs remains the sole decoder of the native checkpoint protocol.
+ */
+export function resumeStateOf(checkpoint) {
+    const state = checkpoint?.sharedState;
+    if (state === null ||
+        typeof state !== 'object' ||
+        Array.isArray(state) ||
+        (Object.getPrototypeOf(state) !== Object.prototype && Object.getPrototypeOf(state) !== null)) {
+        throw new Error('Invalid checkpoint: sharedState must be a plain object.');
+    }
+    return state;
+}
+/**
+ * The transport is a separate fact from the memory namespace. Clean14 writes
+ * a string or explicit null on every entry; absent data cannot mean anonymous.
+ */
+export function resumeSessionOf(checkpoint) {
+    const state = resumeStateOf(checkpoint);
+    const session = state.runSessionId;
+    if (!Object.prototype.hasOwnProperty.call(state, 'runSessionId') ||
+        (session !== null && (typeof session !== 'string' || session.length === 0))) {
+        throw new Error('Invalid checkpoint: runSessionId must be a non-empty string or explicit null.');
+    }
+    if (state.runIdentitySource === 'session') {
+        const identity = state.runIdentity;
+        if (typeof session !== 'string' || identity?.conversationId !== session)
+            throw new Error('Invalid checkpoint: runSessionId disagrees with its session identity.');
+    }
+    return session === null ? undefined : session;
+}
+//# sourceMappingURL=resumeCheckpoint.js.map

package/dist/esm/core/agent/resumeCheckpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumeCheckpoint.js","sourceRoot":"","sources":["../../../../src/core/agent/resumeCheckpoint.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAA+B;IAC3D,MAAM,KAAK,GAAG,UAAU,EAAE,WAAW,CAAC;IACtC,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,EAC5F,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,UAA+B;IAC7D,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC;QAC5D,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,EAC3E,CAAC;QACD,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAuD,CAAC;QAC/E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,QAAQ,EAAE,cAAc,KAAK,OAAO;YACrE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,OAAkB,CAAC;AAC5D,CAAC"}

package/dist/esm/core/agent/resumeError.d.ts

@@ -0,0 +1,8 @@
+/** Internal field-reader refusal; native checkpoint decoding remains footprintjs-owned. */
+export type ResumeCheckpointReason = 'invalid-domain';
+/** No captured identity, request, path or value appears in the error. */
+export declare class ResumeCheckpointError extends TypeError {
+    readonly reason: ResumeCheckpointReason;
+    readonly code: "ERR_RESUME_CHECKPOINT";
+    constructor(reason: ResumeCheckpointReason);
+}

package/dist/esm/core/agent/resumeError.js

@@ -0,0 +1,11 @@
+/** No captured identity, request, path or value appears in the error. */
+export class ResumeCheckpointError extends TypeError {
+    reason;
+    code = 'ERR_RESUME_CHECKPOINT';
+    constructor(reason) {
+        super('Agent.resume: the tool-call checkpoint domain is missing or malformed.');
+        this.reason = reason;
+        this.name = 'ResumeCheckpointError';
+    }
+}
+//# sourceMappingURL=resumeError.js.map

package/dist/esm/core/agent/resumeError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumeError.js","sourceRoot":"","sources":["../../../../src/core/agent/resumeError.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,MAAM,OAAO,qBAAsB,SAAQ,SAAS;IAG7B;IAFZ,IAAI,GAAG,uBAAgC,CAAC;IAEjD,YAAqB,MAA8B;QACjD,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAD7D,WAAM,GAAN,MAAM,CAAwB;QAEjD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF"}

package/dist/esm/core/agent/run/clocks.d.ts

@@ -0,0 +1,44 @@
+import { type ClockDraft, type ReadRunTime, type ReadTimeOptions } from '../../../time/clock.js';
+import type { TimeAnswerContext } from '../../../tools/inputRequest.js';
+import type { AgentRunValues } from '../runValues.js';
+/**
+ * A run's `time`, read into the turn's clock draft (the time layer) — or
+ * refused, before the turn starts: `time` on an agent without `.time()` or
+ * a malformed value. No zone anywhere (the run's, else the builder's) is no
+ * refusal: the zone is UNKNOWN (`zoneSource: 'unknown'`, G15) — never the
+ * server's, never guessed; the person is asked it before any time they
+ * wrote is read. `undefined` on an agent without the layer.
+ *
+ * @internal
+ */
+export declare function draftAgentClock(time: unknown, runner: string, timeOptions: ReadTimeOptions | undefined): ClockDraft | undefined;
+/**
+ * The clock draft seed stamps (the time layer): the one `run()` read — or,
+ * for a turn this agent's `run()` did not start (its chart mounted in a
+ * composition, which passes no `time`), the builder's fallback zone with
+ * the turn's start as `now` (`zoneSource: 'builder'`, `nowSource:
+ * 'default'` — the same record a `run()` with no `time` files). With no
+ * fallback zone that turn's zone is unknown, as a `run()`'s is (G15): the
+ * server's zone is never used.
+ *
+ * @internal
+ */
+export declare function clockForSeed(values: AgentRunValues, timeOptions: ReadTimeOptions | undefined): ClockDraft;
+/**
+ * A `time` passed to a run or a resume, read — or refused by name: passed to
+ * an agent without `.time()` (a door that ignored it would look configured
+ * and do nothing), or malformed.
+ *
+ * @internal
+ */
+export declare function readAgentTime(time: unknown, runner: string, timeOptions: ReadTimeOptions | undefined): ReadRunTime | undefined;
+/**
+ * What the resume door checks a time field's answer with (the time design
+ * § 6.2, step T4): the paused turn's clock zone — the kept `clock` row, so
+ * a resume that passes another `time` changes nothing — and the app's
+ * catalog overrides. `undefined` without `.time()`: a `format` field is
+ * then judged for shape, order and offset only, in the default words.
+ *
+ * @internal
+ */
+export declare function agentTimeAnswerContext(state: unknown, timeOptions: ReadTimeOptions | undefined): TimeAnswerContext | undefined;

package/dist/esm/core/agent/run/clocks.js

@@ -0,0 +1,81 @@
+import { draftClock, readRunTime, } from '../../../time/clock.js';
+import { clockOf } from '../../../time/rows.js';
+import { InvalidRunInputError } from '../../runInput.js';
+/**
+ * A run's `time`, read into the turn's clock draft (the time layer) — or
+ * refused, before the turn starts: `time` on an agent without `.time()` or
+ * a malformed value. No zone anywhere (the run's, else the builder's) is no
+ * refusal: the zone is UNKNOWN (`zoneSource: 'unknown'`, G15) — never the
+ * server's, never guessed; the person is asked it before any time they
+ * wrote is read. `undefined` on an agent without the layer.
+ *
+ * @internal
+ */
+export function draftAgentClock(time, runner, timeOptions) {
+    const passed = readAgentTime(time, runner, timeOptions);
+    if (timeOptions === undefined)
+        return undefined;
+    return draftClock(passed, timeOptions);
+}
+/**
+ * The clock draft seed stamps (the time layer): the one `run()` read — or,
+ * for a turn this agent's `run()` did not start (its chart mounted in a
+ * composition, which passes no `time`), the builder's fallback zone with
+ * the turn's start as `now` (`zoneSource: 'builder'`, `nowSource:
+ * 'default'` — the same record a `run()` with no `time` files). With no
+ * fallback zone that turn's zone is unknown, as a `run()`'s is (G15): the
+ * server's zone is never used.
+ *
+ * @internal
+ */
+export function clockForSeed(values, timeOptions) {
+    if (values.clockDraft !== undefined)
+        return values.clockDraft;
+    return draftClock(undefined, timeOptions ?? {});
+}
+/**
+ * A `time` passed to a run or a resume, read — or refused by name: passed to
+ * an agent without `.time()` (a door that ignored it would look configured
+ * and do nothing), or malformed.
+ *
+ * @internal
+ */
+export function readAgentTime(time, runner, timeOptions) {
+    if (time === undefined)
+        return undefined;
+    if (timeOptions === undefined) {
+        throw new InvalidRunInputError({
+            runner,
+            received: 'time',
+            hint: 'this agent reads no clock — arm the time layer with .time() to pass time',
+        });
+    }
+    const read = readRunTime(time);
+    if ('problem' in read) {
+        throw new InvalidRunInputError({ runner, received: 'a malformed time', hint: read.problem });
+    }
+    return read.value;
+}
+/**
+ * What the resume door checks a time field's answer with (the time design
+ * § 6.2, step T4): the paused turn's clock zone — the kept `clock` row, so
+ * a resume that passes another `time` changes nothing — and the app's
+ * catalog overrides. `undefined` without `.time()`: a `format` field is
+ * then judged for shape, order and offset only, in the default words.
+ *
+ * @internal
+ */
+export function agentTimeAnswerContext(state, timeOptions) {
+    if (timeOptions === undefined)
+        return undefined;
+    const ledger = state?.findingsLedger;
+    const clock = clockOf(Array.isArray(ledger) ? ledger : undefined);
+    // An unknown zone (G15) judges no wall time: `zone` is then only the UTC spelling.
+    const zone = clock?.zoneSource === 'unknown' ? undefined : clock?.zone;
+    const messages = timeOptions.messages;
+    return {
+        ...(zone !== undefined && { zone }),
+        ...(messages !== undefined && { messages }),
+    };
+}
+//# sourceMappingURL=clocks.js.map

package/dist/esm/core/agent/run/clocks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clocks.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/clocks.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,WAAW,GAIZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAIzD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAa,EACb,MAAc,EACd,WAAwC;IAExC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChD,OAAO,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,WAAwC;IAExC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,UAAU,CAAC;IAC9D,OAAO,UAAU,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAa,EACb,MAAc,EACd,WAAwC;IAExC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,oBAAoB,CAAC;YAC7B,MAAM;YACN,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,0EAA0E;SACjF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,oBAAoB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAc,EACd,WAAwC;IAExC,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,MAAM,GAAI,KAAyC,EAAE,cAAc,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClE,mFAAmF;IACnF,MAAM,IAAI,GAAG,KAAK,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;IACvE,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;IACtC,OAAO;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/esm/core/agent/run/commitRunRedaction.d.ts

@@ -0,0 +1,4 @@
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../types.js';
+/** Only positively private-only runs write none; ordinary no-policy runs change no keys. */
+export declare function commitRunRedaction(scope: TypedScope<AgentState>): void;

package/dist/esm/core/agent/run/commitRunRedaction.js

@@ -0,0 +1,12 @@
+import { carriedRunPolicy } from '../../../redaction/conversation.js';
+import { policyInForce, privateFieldsInForce } from '../../../redaction/runRedaction.js';
+import { PRIVATE_CALLER_NONE } from '../../../redaction/privateCaller.js';
+/** Only positively private-only runs write none; ordinary no-policy runs change no keys. */
+export function commitRunRedaction(scope) {
+    const runPolicy = policyInForce(scope);
+    if (runPolicy !== undefined)
+        scope.runRedaction = carriedRunPolicy(runPolicy);
+    else if (privateFieldsInForce(scope) !== undefined)
+        scope.runRedaction = PRIVATE_CALLER_NONE;
+}
+//# sourceMappingURL=commitRunRedaction.js.map

package/dist/esm/core/agent/run/commitRunRedaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commitRunRedaction.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/commitRunRedaction.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAE1E,4FAA4F;AAC5F,MAAM,UAAU,kBAAkB,CAAC,KAA6B;IAC9D,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;SACzE,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,mBAAmB,CAAC;AAC/F,CAAC"}

package/dist/esm/core/agent/run/eventStageIds.d.ts

@@ -0,0 +1,40 @@
+/**
+ * The pseudo-stage a tool-teardown event is stamped with.
+ *
+ * `session_closed` and `session_close_failed` fire after the run's last stage
+ * has committed — there is no runtimeStageId to inherit, and inventing one that
+ * looked like a real stage would put a fictitious node in every consumer's step
+ * strip. This says plainly where it came from, the way `'<stageId>#paused'`
+ * does at the pause boundary. Their two siblings, `session_started` and
+ * `session_reused`, happen inside a real stage and carry its real id.
+ */
+export declare const TOOL_TEARDOWN_STAGE_ID = "tool-teardown#0";
+/**
+ * The pseudo-stage a LATE artifact fact is stamped with — one that lands after
+ * the run its binding was made in had ended (a tool's floating upload). Its
+ * stage is long gone; like the teardown events it says plainly where it came
+ * from, and carries the run it belongs to rather than the one that is live.
+ */
+export declare const LATE_ARTIFACT_FACT_STAGE_ID = "artifact-late#0";
+/**
+ * The pseudo-stage the run-configuration manifest is stamped with (9.41.0).
+ *
+ * Same reasoning as the teardown id above, at the other end of the run: the
+ * manifest is dispatched before the chart starts, so there is no stage to
+ * inherit and inventing a plausible one would put a node in every step strip
+ * that no traversal ever visited. This says plainly where it came from.
+ */
+export declare const RUN_MANIFEST_STAGE_ID = "run-configured#0";
+/**
+ * Pseudo-stage for `agentfootprint.integrity.disposition` (9.60.0) — the
+ * ledger is filed at the run boundary, after the last stage committed, so it
+ * states where it came from exactly as the teardown id above does.
+ */
+export declare const INTEGRITY_DISPOSITION_STAGE_ID = "integrity-disposition#0";
+/**
+ * Pseudo-stage for `agentfootprint.skill.graph_declared` (9.50.0) — same
+ * reasoning as the manifest id directly above: dispatched before the chart
+ * starts, so it states where it came from instead of inheriting a stage no
+ * traversal visited.
+ */
+export declare const GRAPH_DECLARED_STAGE_ID = "graph-declared#0";

package/dist/esm/core/agent/run/eventStageIds.js

@@ -0,0 +1,41 @@
+/**
+ * The pseudo-stage a tool-teardown event is stamped with.
+ *
+ * `session_closed` and `session_close_failed` fire after the run's last stage
+ * has committed — there is no runtimeStageId to inherit, and inventing one that
+ * looked like a real stage would put a fictitious node in every consumer's step
+ * strip. This says plainly where it came from, the way `'<stageId>#paused'`
+ * does at the pause boundary. Their two siblings, `session_started` and
+ * `session_reused`, happen inside a real stage and carry its real id.
+ */
+export const TOOL_TEARDOWN_STAGE_ID = 'tool-teardown#0';
+/**
+ * The pseudo-stage a LATE artifact fact is stamped with — one that lands after
+ * the run its binding was made in had ended (a tool's floating upload). Its
+ * stage is long gone; like the teardown events it says plainly where it came
+ * from, and carries the run it belongs to rather than the one that is live.
+ */
+export const LATE_ARTIFACT_FACT_STAGE_ID = 'artifact-late#0';
+/**
+ * The pseudo-stage the run-configuration manifest is stamped with (9.41.0).
+ *
+ * Same reasoning as the teardown id above, at the other end of the run: the
+ * manifest is dispatched before the chart starts, so there is no stage to
+ * inherit and inventing a plausible one would put a node in every step strip
+ * that no traversal ever visited. This says plainly where it came from.
+ */
+export const RUN_MANIFEST_STAGE_ID = 'run-configured#0';
+/**
+ * Pseudo-stage for `agentfootprint.integrity.disposition` (9.60.0) — the
+ * ledger is filed at the run boundary, after the last stage committed, so it
+ * states where it came from exactly as the teardown id above does.
+ */
+export const INTEGRITY_DISPOSITION_STAGE_ID = 'integrity-disposition#0';
+/**
+ * Pseudo-stage for `agentfootprint.skill.graph_declared` (9.50.0) — same
+ * reasoning as the manifest id directly above: dispatched before the chart
+ * starts, so it states where it came from instead of inheriting a stage no
+ * traversal visited.
+ */
+export const GRAPH_DECLARED_STAGE_ID = 'graph-declared#0';
+//# sourceMappingURL=eventStageIds.js.map

package/dist/esm/core/agent/run/eventStageIds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventStageIds.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/eventStageIds.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAE7D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AAExD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC"}

package/dist/esm/core/agent/run/injectionDelivery.d.ts

@@ -0,0 +1,4 @@
+import type { Injection } from '../../../injection-engine/types.js';
+import { assertDeliverableRole } from '../stages/deliver.js';
+/** Validate every declared injected message against the actual run provider set. */
+export declare function assertInjectionDelivery(injections: readonly Injection[], providers: Parameters<typeof assertDeliverableRole>[0]): void;

package/dist/esm/core/agent/run/injectionDelivery.js

@@ -0,0 +1,26 @@
+import { assertDeliverableRole } from '../stages/deliver.js';
+import { messagesContentRefusal } from '../../../injection-engine/messagesSlotRefusal.js';
+/** Validate every declared injected message against the actual run provider set. */
+export function assertInjectionDelivery(injections, providers) {
+    for (const inj of injections) {
+        for (const msg of inj.inject?.messages ?? []) {
+            assertDeliverableRole(providers, msg.role, `Agent injection '${inj.id}'`);
+            // Content, judged at the same funnel as role (8.18.0). The named
+            // factories refuse empty content; a hand-built Injection reached the
+            // delivery stage unchecked and put a contentless turn on the wire.
+            const content = msg.content;
+            if (typeof content !== 'string' || content.trim() === '') {
+                throw new Error(messagesContentRefusal({
+                    site: `Agent injection '${inj.id}'`,
+                    role: msg.role,
+                    received: typeof content !== 'string'
+                        ? content === undefined
+                            ? 'missing'
+                            : `a ${content === null ? 'null' : typeof content}`
+                        : 'empty',
+                }));
+            }
+        }
+    }
+}
+//# sourceMappingURL=injectionDelivery.js.map

package/dist/esm/core/agent/run/injectionDelivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injectionDelivery.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/injectionDelivery.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kDAAkD,CAAC;AAE1F,oFAAoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,UAAgC,EAChC,SAAsD;IAEtD,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,qBAAqB,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,oBAAoB,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1E,iEAAiE;YACjE,qEAAqE;YACrE,mEAAmE;YACnE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAkB,CAAC;YACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzD,MAAM,IAAI,KAAK,CACb,sBAAsB,CAAC;oBACrB,IAAI,EAAE,oBAAoB,GAAG,CAAC,EAAE,GAAG;oBACnC,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,QAAQ,EACN,OAAO,OAAO,KAAK,QAAQ;wBACzB,CAAC,CAAC,OAAO,KAAK,SAAS;4BACrB,CAAC,CAAC,SAAS;4BACX,CAAC,CAAC,KAAK,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,OAAO,EAAE;wBACrD,CAAC,CAAC,OAAO;iBACd,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/run/ledgerFacts.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Validate the `keepLedgerFacts` dial — `window/options.ts ·
+ * requireKeepLastToolResults`'s twin: the same rule, the same moment.
+ * Refused at construction, never mid-run.
+ */
+export declare function requireKeepLedgerFacts(value: unknown, label: string): void;
+/** `false` → `0`; a number as named; nothing named → the default. */
+export declare function resolveKeepLedgerFacts(named: number | false | undefined): number;

package/dist/esm/core/agent/run/ledgerFacts.js

@@ -0,0 +1,31 @@
+/**
+ * The ledger-fact hold's default ceiling (9.102.0): how many fact turns the
+ * window holds beyond `keepRecentTurns` when `.findings()` and a window
+ * strategy are both configured and nobody named a number. Resolved in the
+ * constructor, ONCE, and threaded to `buildWindowStage` as a plain number —
+ * the stage applies no default of its own (absent = unarmed = no hold), so a
+ * reader has one place to look. `window/options.ts ·
+ * DEFAULT_KEEP_LAST_TOOL_RESULTS` is the pin's twin of this constant.
+ */
+const DEFAULT_KEEP_LEDGER_FACTS = 4;
+/**
+ * Validate the `keepLedgerFacts` dial — `window/options.ts ·
+ * requireKeepLastToolResults`'s twin: the same rule, the same moment.
+ * Refused at construction, never mid-run.
+ */
+export function requireKeepLedgerFacts(value, label) {
+    if (value === false)
+        return;
+    if (!Number.isInteger(value) || value < 0) {
+        throw new Error(`${label}: keepLedgerFacts must be a whole number >= 0, or false, got ` +
+            `${String(value)}. It is how many fact turns the window holds beyond ` +
+            `keepRecentTurns under .findings(); 0 and false both switch the hold off.`);
+    }
+}
+/** `false` → `0`; a number as named; nothing named → the default. */
+export function resolveKeepLedgerFacts(named) {
+    if (named === false)
+        return 0;
+    return named ?? DEFAULT_KEEP_LEDGER_FACTS;
+}
+//# sourceMappingURL=ledgerFacts.js.map

package/dist/esm/core/agent/run/ledgerFacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledgerFacts.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/ledgerFacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAEpC;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+DAA+D;YACrE,GAAG,MAAM,CAAC,KAAK,CAAC,sDAAsD;YACtE,0EAA0E,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB,CAAC,KAAiC;IACtE,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,KAAK,IAAI,yBAAyB,CAAC;AAC5C,CAAC"}

package/dist/esm/core/agent/run/resumeRedaction.d.ts

@@ -0,0 +1,6 @@
+import type { FlowchartCheckpoint, RedactionPolicy } from 'footprintjs';
+import { resumePoliciesOf } from '../../../redaction/privateCheckpoint.js';
+/** Admit the saved caller policy or the explicit closed private-only declaration. */
+export declare function resumeRedactionOf(checkpoint: FlowchartCheckpoint, trusted: readonly (RedactionPolicy | undefined)[]): RedactionPolicy | undefined;
+/** Every runner admits the saved caller declaration before serving or executing a resumed leg. */
+export declare function resumePoliciesForRunner(checkpoint: FlowchartCheckpoint, handedDown: RedactionPolicy | undefined, declared: RedactionPolicy | undefined): ReturnType<typeof resumePoliciesOf>;

package/dist/esm/core/agent/run/resumeRedaction.js

@@ -0,0 +1,36 @@
+import { CarriedPolicyError, carriedVocabularyOf, policyFromCarried, policyOfMarks, unionRedactionPolicies, } from '../../../redaction/policy.js';
+import { callerOfCheckpoint, nonPrivateMarksOf, privateFieldsOfCheckpoint, resumePoliciesOf, } from '../../../redaction/privateCheckpoint.js';
+import { ResumeRedactionError } from '../../conversation.js';
+import { withCurrentVocabulary } from '../../../redaction/conversation.js';
+/** Admit the saved caller policy or the explicit closed private-only declaration. */
+export function resumeRedactionOf(checkpoint, trusted) {
+    let carried;
+    let callerNone = false;
+    let marked = false;
+    try {
+        const declaration = callerOfCheckpoint(checkpoint);
+        callerNone = declaration.state === 'none';
+        const value = declaration.state === 'policy' ? declaration.value : undefined;
+        carried = policyFromCarried(value, 'Agent.resume', trusted);
+        carried = withCurrentVocabulary(carried, carriedVocabularyOf(value));
+        marked =
+            privateFieldsOfCheckpoint(checkpoint) !== undefined ||
+                policyOfMarks(nonPrivateMarksOf(checkpoint)) !== undefined;
+    }
+    catch (refusal) {
+        throw new ResumeRedactionError(refusal instanceof CarriedPolicyError && refusal.refusal === 'unknown-pattern'
+            ? 'unknown-pattern'
+            : 'unreadable');
+    }
+    // Carrier presence describes private selectors. It never proves caller:none.
+    // A policy supplied now cannot stand in for the policy the earlier leg carried.
+    if (carried === undefined && !callerNone && marked)
+        throw new ResumeRedactionError('missing');
+    return carried;
+}
+/** Every runner admits the saved caller declaration before serving or executing a resumed leg. */
+export function resumePoliciesForRunner(checkpoint, handedDown, declared) {
+    const carried = resumeRedactionOf(checkpoint, [declared, handedDown]);
+    return resumePoliciesOf(checkpoint, unionRedactionPolicies(carried, handedDown), declared);
+}
+//# sourceMappingURL=resumeRedaction.js.map

package/dist/esm/core/agent/run/resumeRedaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resumeRedaction.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/resumeRedaction.ts"],"names":[],"mappings":"AACA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAC/B,UAA+B,EAC/B,OAAiD;IAEjD,IAAI,OAAoC,CAAC;IACzC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACnD,UAAU,GAAG,WAAW,CAAC,KAAK,KAAK,MAAM,CAAC;QAC1C,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,OAAO,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,MAAM;YACJ,yBAAyB,CAAC,UAAU,CAAC,KAAK,SAAS;gBACnD,aAAa,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,KAAK,SAAS,CAAC;IAC/D,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,MAAM,IAAI,oBAAoB,CAC5B,OAAO,YAAY,kBAAkB,IAAI,OAAO,CAAC,OAAO,KAAK,iBAAiB;YAC5E,CAAC,CAAC,iBAAiB;YACnB,CAAC,CAAC,YAAY,CACjB,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,gFAAgF;IAChF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,IAAI,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAC9F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uBAAuB,CACrC,UAA+B,EAC/B,UAAuC,EACvC,QAAqC;IAErC,MAAM,OAAO,GAAG,iBAAiB,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IACtE,OAAO,gBAAgB,CAAC,UAAU,EAAE,sBAAsB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC7F,CAAC"}

package/dist/esm/core/agent/run/withoutTime.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The run options without the time layer's `time` — what the engine is handed.
+ * The SAME object when it carries no `time` key, so a run that passed none
+ * hands the executor exactly the options it always did.
+ */
+export declare function withoutTime<T extends {
+    time?: unknown;
+}>(options: T | undefined): T | undefined;

package/dist/esm/core/agent/run/withoutTime.js

@@ -0,0 +1,13 @@
+/**
+ * The run options without the time layer's `time` — what the engine is handed.
+ * The SAME object when it carries no `time` key, so a run that passed none
+ * hands the executor exactly the options it always did.
+ */
+export function withoutTime(options) {
+    if (options === undefined || !('time' in options))
+        return options;
+    const { time: _time, ...rest } = options;
+    void _time;
+    return rest;
+}
+//# sourceMappingURL=withoutTime.js.map

package/dist/esm/core/agent/run/withoutTime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withoutTime.js","sourceRoot":"","sources":["../../../../../src/core/agent/run/withoutTime.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAA+B,OAAsB;IAC9E,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAClE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACzC,KAAK,KAAK,CAAC;IACX,OAAO,IAAS,CAAC;AACnB,CAAC"}

package/dist/esm/core/agent/runValues.d.ts

@@ -0,0 +1,71 @@
+import type { ComponentResources } from './componentResources.js';
+import type { RunnerPauseOutcome } from '../pause.js';
+import type { CausalEvidenceRecorderHandle } from '../../memory/causal/evidenceRecorder.js';
+import type { CompactionMeterHandle } from '../../recorders/core/CompactionMeter.js';
+import type { RequestContext } from '../../identity/requestContext.js';
+import type { MemoryIdentity } from '../../memory/identity/types.js';
+import type { DispositionLedger } from '../../integrity/disposition/ledger.js';
+import type { RunCheckpointTracker } from '../runCheckpoint.js';
+import type { ClockDraft, ReadRunTime } from '../../time/clock.js';
+import type { AnsweredAsk } from '../../tools/inputRequest.js';
+import type { EvidenceRecoveryCheckpoint } from '../runCheckpoint.js';
+import type { FindingsLedger } from './findings/types.js';
+import type { FoldedSpan } from './window/types.js';
+import type { buildSeedStage, PendingResumeHistory } from './stages/seed.js';
+import { type ReceiptDigests } from './receipt/receiptDigests.js';
+import { type EvictedTurnsHandle } from './window/evictedTurns.js';
+import type { buildCallLLMStage } from './stages/callLLM.js';
+import type { buildWindowStage } from './stages/window.js';
+import type { RunnerCoreValues } from '../RunnerBase.js';
+import type { ProviderToolCache, ServedToolParties } from '../slots/buildToolsSlot.js';
+import type { buildToolCallsHandler } from './stages/toolCalls/index.js';
+import type { buildRouteDeciderStage } from './stages/route.js';
+/** Private domain values in the native component bank; never chart state or a run owner. */
+export interface AgentRunValues extends RunnerCoreValues {
+    identity?: MemoryIdentity;
+    request?: RequestContext;
+    answer?: string;
+    checkpointTracker?: RunCheckpointTracker;
+    checkpointObservationFailed?: true;
+    causalEvidence?: CausalEvidenceRecorderHandle;
+    compactionMeter?: CompactionMeterHandle;
+    resources?: ComponentResources;
+    servingConversation?: string;
+    hadAdmitted: boolean;
+    pauseOutcome?: RunnerPauseOutcome;
+    pendingQuestion?: {
+        readonly toolName?: string;
+        readonly toolCallId?: string;
+        readonly question?: string;
+    };
+    readonly integrityLedger: {
+        current: DispositionLedger | undefined;
+    };
+    clockDraft?: ClockDraft;
+    resumePassedTime?: ReadRunTime;
+    answeredAsk?: AnsweredAsk;
+    pendingResumeHistory?: PendingResumeHistory;
+    pendingEvidenceRecovery?: EvidenceRecoveryCheckpoint;
+    pendingResumeFolded?: readonly FoldedSpan[];
+    pendingResumeFindingsLedger?: FindingsLedger;
+    pendingResumeSkillCursor?: string;
+    readonly consentOutstanding: Map<string, {
+        readonly service: string;
+        readonly authorizationUrl: string;
+        readonly sessionId: string;
+        readonly tool: string;
+        readonly iteration: number;
+    }>;
+    seed?: ReturnType<typeof buildSeedStage>;
+    readonly providerToolCache: ProviderToolCache;
+    readonly servedTools: ServedToolParties;
+    readonly receiptDigests: ReceiptDigests;
+    readonly evictedTurnsHandle?: EvictedTurnsHandle;
+    callLLM?: ReturnType<typeof buildCallLLMStage>;
+    window?: ReturnType<typeof buildWindowStage>;
+    toolCalls?: ReturnType<typeof buildToolCallsHandler>;
+    route?: ReturnType<typeof buildRouteDeciderStage>;
+}
+export declare function createAgentRunValues(options: {
+    readonly window: boolean;
+}): AgentRunValues;

package/dist/esm/core/agent/runValues.js

@@ -0,0 +1,14 @@
+import { createReceiptDigests } from './receipt/receiptDigests.js';
+import { createEvictedTurnsHandle } from './window/evictedTurns.js';
+export function createAgentRunValues(options) {
+    return {
+        hadAdmitted: false,
+        integrityLedger: { current: undefined },
+        consentOutstanding: new Map(),
+        providerToolCache: { current: [] },
+        servedTools: { current: new Map(), lastServed: new Map() },
+        receiptDigests: createReceiptDigests(),
+        ...(options.window && { evictedTurnsHandle: createEvictedTurnsHandle() }),
+    };
+}
+//# sourceMappingURL=runValues.js.map

package/dist/esm/core/agent/runValues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runValues.js","sourceRoot":"","sources":["../../../../src/core/agent/runValues.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAA2B,MAAM,0BAA0B,CAAC;AAwD7F,MAAM,UAAU,oBAAoB,CAAC,OAAqC;IACxE,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;QACvC,kBAAkB,EAAE,IAAI,GAAG,EAAE;QAC7B,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QAClC,WAAW,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE;QAC1D,cAAc,EAAE,oBAAoB,EAAE;QACtC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC"}