agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/stages/toolCalls/access/middlewareAdmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middlewareAdmission.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/access/middlewareAdmission.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EACL,kBAAkB,GAGnB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAmChE,iHAAiH;AACjH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAA6B,EAC7B,IAAkD,EAClD,KAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAe,EAAE;QACrD,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;QACvB,iEAAiE;QACjE,gEAAgE;QAChE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1E,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,QAAQ;QAClC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE;QACpC,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;QACzD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACrD,8DAA8D;QAC9D,iEAAiE;QACjE,4DAA4D;QAC5D,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,SAAS,EAAE,QAAiB,EAAE,CAAC;KAChE,CAAC,CAAC;IACH,6DAA6D;IAC7D,6DAA6D;IAC7D,MAAM,QAAQ,GACZ,KAAK,CAAC,IAAI,KAAK,KAAK;QAClB,CAAC,CAAC,IAAI,CAAC,cAAe,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAClE,CAAC,CAAC,SAAS,CAAC;IAChB,oEAAoE;IACpE,oEAAoE;IACpE,+DAA+D;IAC/D,mEAAmE;IACnE,qBAAqB;IACrB,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,KAAK,KAAK;QAClB,CAAC,CAAC,kBAAkB,CAChB;YACE,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACnB,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE;YACvB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,KAAK;YACrB,KAAK,EAAE,QAAQ;SACI,EACrB,KAAK,CAAC,cAAc,CACrB;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,iEAAiE;IACjE,8BAA8B;IAC9B,MAAM,SAAS,GACb,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS;QACzC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3E,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;IACtB,mEAAmE;IACnE,kEAAkE;IAClE,iEAAiE;IACjE,iEAAiE;IACjE,eAAe,CACb,KAAK,EACL,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAC/F,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;IAC1C,KAAK,CAAC,aAAa,CAAC,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC;IAC7C,oEAAoE;IACpE,gEAAgE;IAChE,6DAA6D;IAC7D,KAAK,CAAC,eAAe,EAAE,CAAC;IACxB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,mEAAmE;QACnE,4DAA4D;QAC5D,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,KAAK,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;gBACzD,CAAC,CAAC,KAAK,CAAC,MAAM;oBACZ,KAAK,CAAC,UAAU,CAAC,QAAQ,CACvB,KAAK,EACL,KAAK,CAAC,EAAE,CAAC,IAAI,EACb,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,aAAa,CAAC,QAAQ,CAC7B;gBACH,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;IACrB,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACvD,gEAAgE;QAChE,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACvD,kEAAkE;QAClE,6DAA6D;QAC7D,+DAA+D;QAC/D,8DAA8D;QAC9D,8DAA8D;QAC9D,4DAA4D;QAC5D,yDAAyD;QACzD,4BAA4B;QAC5B,MAAM,YAAY,GAChB,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;YACnC,CAAC,CAAC,MAAM,KAAK,CAAC,0BAA0B,CACpC,KAAK,EACL,KAAK,CAAC,EAAE,CAAC,IAAI,EACb,KAAK,CAAC,OAAO,CAAC,SAAS,EACvB,mBAAmB,KAAK,CAAC,UAAU,GAAG,CACvC;YACH,CAAC,CAAC,SAAS,CAAC;QAChB,6DAA6D;QAC7D,iEAAiE;QACjE,mEAAmE;QACnE,0DAA0D;QAC1D,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;QACjC,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;QACrC,KAAK,CAAC,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC;QACxC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;QACvB,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC;QACjC,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7C,KAAK,CAAC,cAAc,GAAG,QAAQ,CAAC;QAChC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC;QACpC,kEAAkE;QAClE,iEAAiE;QACjE,kDAAkD;QAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrF,2DAA2D;QAC3D,4DAA4D;QAC5D,uDAAuD;QACvD,mCAAmC;QACnC,IAAI,YAAY,KAAK,SAAS;YAAE,KAAK,CAAC,iBAAiB,GAAG,YAAY,CAAC,WAAW,CAAC;QACnF,6DAA6D;QAC7D,8DAA8D;QAC9D,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACvB,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE;YACvB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,eAAe;YAC/B,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;YACtD,UAAU,EAAE,aAAa;YACzB,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,8DAA8D;QAC9D,6DAA6D;QAC7D,6CAA6C;QAC7C,OAAO;YACL,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE;YACvB,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACvB,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;SAC9E,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/access/toolPermission.d.ts

@@ -0,0 +1,24 @@
+import type { buildCallStart } from '../execution/callStart.js';
+import type { buildDispatchContext } from '../batch/dispatchContext.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { ToolArgs } from '../../../../../tools/runChain.js';
+import type { CallExecution, CallResultCell } from '../contracts/callCells.js';
+import type { DispatchCall } from '../contracts/batchCall.js';
+type CallStartFacts = ReturnType<ReturnType<typeof buildCallStart>['beginDispatchCall']>;
+type DispatchContext = ReturnType<ReturnType<typeof buildDispatchContext>['prepareDispatchContext']>;
+interface CheckToolPermissionFrame {
+    readonly historyForCallbacks: CallStartFacts['historyForCallbacks'];
+    readonly iteration: number;
+    readonly permissionChecker: NonNullable<ToolCallsHandlerDeps['permissionChecker']>;
+    readonly tc: DispatchCall;
+    readonly viewOf: CallStartFacts['viewOf'];
+    readonly runArgs: ToolArgs;
+    readonly runIdentity: DispatchContext['runIdentity'];
+    readonly env: DispatchContext['env'];
+    readonly emitSecurity: CallStartFacts['emitSecurity'];
+    readonly execution: CallExecution;
+    readonly outcome: CallResultCell;
+}
+/** Existing toolPermission body; the owning handler retains its admission guard and native pause return. */
+export declare function checkToolPermission(frame: CheckToolPermissionFrame): Promise<void>;
+export {};

package/dist/esm/core/agent/stages/toolCalls/access/toolPermission.js

@@ -0,0 +1,99 @@
+import { extractSequence } from '../../../../../security/extractSequence.js';
+import { checkerContextOf } from './bindings.js';
+import { warnFrozenWrite } from '../../../../../lib/frozenCopy.js';
+/** Existing toolPermission body; the owning handler retains its admission guard and native pause return. */
+export async function checkToolPermission(frame) {
+    try {
+        // Sequence is derived from history at check time (not parallel
+        // state) — single source of truth, survives resumeOnError.
+        const sequence = extractSequence(frame.historyForCallbacks(), frame.iteration);
+        const decision = await frame.permissionChecker.check({
+            capability: 'tool_call',
+            actor: 'agent',
+            target: frame.tc.name,
+            // The call's shared frozen copy, never the arguments it runs with.
+            context: checkerContextOf(frame.viewOf(frame.runArgs)),
+            sequence,
+            history: frame.historyForCallbacks(),
+            iteration: frame.iteration,
+            ...(frame.runIdentity && { identity: frame.runIdentity }),
+            ...(frame.env.signal && { signal: frame.env.signal }),
+        });
+        frame.emitSecurity('agentfootprint.permission.check', {
+            capability: 'tool_call',
+            actor: 'agent',
+            target: frame.tc.name,
+            result: decision.result,
+            ...(decision.policyRuleId !== undefined && { policyRuleId: decision.policyRuleId }),
+            ...(decision.rationale !== undefined && { rationale: decision.rationale }),
+            ...(decision.reason !== undefined && { reason: decision.reason }),
+        });
+        // LENS · tool-result · persistent-history
+        // reads: the checker's own words ← decision.tellLLM ?? decision.rationale (an AUTHORITY omission: the rule space is never named)
+        // known gap: the generic fallback anchors a per-call refusal to the whole run and is on the record as
+        // unrepaired in test/modelFacingScan.test.ts · `LEDGER`, under this file's own key.
+        // Do not widen it here without that test.
+        // law: may omit, never deny; every clause anchored to the call it was composed on.
+        if (decision.result === 'deny') {
+            frame.execution.denied = true;
+            // Deny default keeps the existing v2.4 shape (carries
+            // rationale text — historically intentional, since deny
+            // lets the LLM recover and rationale is consumer-supplied).
+            const tellLLM = decision.tellLLM ?? `[permission denied: ${decision.rationale ?? 'policy'}]`;
+            frame.outcome.result = tellLLM;
+        }
+        else if (decision.result === 'halt') {
+            frame.execution.denied = true;
+            // Halt default is DELIBERATELY GENERIC — never falls back
+            // to `reason` (which is telemetry, e.g. 'security:exfiltration'
+            // — leaking that to the LLM teaches it the rule space).
+            // Consumers who want a richer message provide `tellLLM` explicitly.
+            const tellLLM = decision.tellLLM ?? `Tool '${frame.tc.name}' is not available in this context.`;
+            frame.outcome.result = tellLLM;
+            frame.execution.haltContext = {
+                reason: decision.reason ?? decision.rationale ?? 'policy-halt',
+                tellLLM,
+                ...(frame.permissionChecker.name && { checkerId: frame.permissionChecker.name }),
+            };
+        }
+    }
+    catch (permErr) {
+        // A checker that wrote into its frozen `context` lands here too —
+        // said once, in dev mode, so a checker that normalised in place
+        // does not deny every call in silence.
+        warnFrozenWrite('permission checker', permErr, 'the call was denied');
+        // A checker that threw is treated as deny-by-default — fail closed:
+        // something that did not answer did not say yes.
+        //
+        // ── What the MODEL is told, and why it changed in 9.4.0 ────────
+        // It used to be told the checker's own error text. Those messages
+        // are written for operators and read as WEATHER — "not available
+        // right now", "ECONNREFUSED", "timed out" — so a model does the
+        // reasonable thing and tries again. In a real deployment one did
+        // exactly that, burned every iteration to `maxIterations`, and
+        // returned the empty string; nobody could see why, because the
+        // reason never left the tool result.
+        //
+        // The refusal is now TERMINAL and says so, in the bracketed form
+        // the local policy has always used (`[permission denied: …]`) —
+        // the one a model adapts to cleanly. The thrown message is an
+        // operator's fact and stays on the typed event's `rationale`,
+        // where it was already going: an outage is not something a model
+        // should be invited to argue with, and infrastructure text does
+        // not belong in a transcript.
+        frame.execution.denied = true;
+        const msg = permErr instanceof Error ? permErr.message : String(permErr);
+        frame.emitSecurity('agentfootprint.permission.check', {
+            capability: 'tool_call',
+            actor: 'agent',
+            target: frame.tc.name,
+            result: 'deny',
+            rationale: `permission-checker threw: ${msg}`,
+        });
+        frame.outcome.result =
+            `[permission denied: Tool '${frame.tc.name}' could not be authorized. This will not ` +
+                `change during this run — do not call it again. Continue without it, or say ` +
+                `what you are unable to do.]`;
+    }
+}
+//# sourceMappingURL=toolPermission.js.map

package/dist/esm/core/agent/stages/toolCalls/access/toolPermission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolPermission.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/access/toolPermission.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAsBnE,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAA+B;IACvE,IAAI,CAAC;QACH,+DAA+D;QAC/D,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACnD,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACrB,mEAAmE;YACnE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtD,QAAQ;YACR,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE;YACpC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;YACzD,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;SACtD,CAAC,CAAC;QACH,KAAK,CAAC,YAAY,CAAC,iCAAiC,EAAE;YACpD,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;YACnF,GAAG,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC1E,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;SAClE,CAAC,CAAC;QACH,0CAA0C;QAC1C,iIAAiI;QACjI,sGAAsG;QACtG,oFAAoF;QACpF,0CAA0C;QAC1C,mFAAmF;QACnF,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9B,sDAAsD;YACtD,wDAAwD;YACxD,4DAA4D;YAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,uBAAuB,QAAQ,CAAC,SAAS,IAAI,QAAQ,GAAG,CAAC;YAC7F,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;QACjC,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACtC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;YAC9B,0DAA0D;YAC1D,gEAAgE;YAChE,wDAAwD;YACxD,oEAAoE;YACpE,MAAM,OAAO,GACX,QAAQ,CAAC,OAAO,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC,IAAI,qCAAqC,CAAC;YAClF,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC;YAC/B,KAAK,CAAC,SAAS,CAAC,WAAW,GAAG;gBAC5B,MAAM,EAAE,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,IAAI,aAAa;gBAC9D,OAAO;gBACP,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;aACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,kEAAkE;QAClE,gEAAgE;QAChE,uCAAuC;QACvC,eAAe,CAAC,oBAAoB,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACtE,oEAAoE;QACpE,iDAAiD;QACjD,EAAE;QACF,kEAAkE;QAClE,kEAAkE;QAClE,iEAAiE;QACjE,gEAAgE;QAChE,iEAAiE;QACjE,+DAA+D;QAC/D,+DAA+D;QAC/D,qCAAqC;QACrC,EAAE;QACF,iEAAiE;QACjE,gEAAgE;QAChE,8DAA8D;QAC9D,8DAA8D;QAC9D,iEAAiE;QACjE,gEAAgE;QAChE,8BAA8B;QAC9B,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzE,KAAK,CAAC,YAAY,CAAC,iCAAiC,EAAE;YACpD,UAAU,EAAE,WAAW;YACvB,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI;YACrB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,6BAA6B,GAAG,EAAE;SAC9C,CAAC,CAAC;QACH,KAAK,CAAC,OAAO,CAAC,MAAM;YAClB,6BAA6B,KAAK,CAAC,EAAE,CAAC,IAAI,2CAA2C;gBACrF,6EAA6E;gBAC7E,6BAA6B,CAAC;IAClC,CAAC;AACH,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/batch/completion.d.ts

@@ -0,0 +1,18 @@
+import type { buildDispatchContext } from './dispatchContext.js';
+import type { buildToolEffectsOperations } from '../routing/effectsOperations.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { DispatchCall } from '../contracts/batchCall.js';
+type DispatchContext = ReturnType<ReturnType<typeof buildDispatchContext>['prepareDispatchContext']>;
+interface CompleteToolBatchFrame {
+    readonly askAnswered?: boolean;
+    readonly inputsLayer?: boolean;
+    readonly newHistory: DispatchContext['newHistory'];
+    readonly emitTransitionConflict: ReturnType<typeof buildToolEffectsOperations>['emitTransitionConflict'];
+    readonly iteration: number;
+    readonly transitionState: DispatchContext['transitionState'];
+    readonly toolCalls: readonly DispatchCall[];
+}
+/** The existing synchronous batchCompletion phase; no new await or checkpoint carrier. */
+export declare function completeToolBatch(scope: TypedScope<AgentState>, frame: CompleteToolBatchFrame): void;
+export {};

package/dist/esm/core/agent/stages/toolCalls/batch/completion.js

@@ -0,0 +1,24 @@
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+/** The existing synchronous batchCompletion phase; no new await or checkpoint carrier. */
+export function completeToolBatch(scope, frame) {
+    scope.history = frame.newHistory;
+    if (frame.inputsLayer === true && frame.askAnswered !== true && scope.argumentAsk !== undefined)
+        scope.argumentAsk = undefined;
+    // The batch-end aggregate for conflicting transition proposals
+    // (9.19.0) — fires only when ≥2 accepted proposals named different
+    // targets; the per-effect events above already told each story.
+    frame.emitTransitionConflict(scope, frame.iteration, frame.transitionState);
+    typedEmit(scope, 'agentfootprint.agent.iteration_end', {
+        turnIndex: 0,
+        iterIndex: frame.iteration,
+        toolCallCount: frame.toolCalls.length,
+        // The PLAIN local array, not `scope.history` — a TypedScope array
+        // read returns a live deep-Proxy view, which is not structured-
+        // clone-safe. Event payloads must be detached plain data so they
+        // survive RFC-001 'clone' capture (observerDelivery: 'deferred')
+        // and never hand consumers a mutable view of engine state.
+        history: frame.newHistory,
+    });
+    scope.iteration = frame.iteration + 1;
+}
+//# sourceMappingURL=completion.js.map

package/dist/esm/core/agent/stages/toolCalls/batch/completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/batch/completion.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAmBvE,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAC/B,KAA6B,EAC7B,KAA6B;IAE7B,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC;IACjC,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAC7F,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;IAEhC,+DAA+D;IAC/D,mEAAmE;IACnE,gEAAgE;IAChE,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IAE5E,SAAS,CAAC,KAAK,EAAE,oCAAoC,EAAE;QACrD,SAAS,EAAE,CAAC;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;QACrC,kEAAkE;QAClE,gEAAgE;QAChE,iEAAiE;QACjE,iEAAiE;QACjE,2DAA2D;QAC3D,OAAO,EAAE,KAAK,CAAC,UAAU;KAC1B,CAAC,CAAC;IACH,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;AACxC,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/batch/dispatchContext.d.ts

@@ -0,0 +1,36 @@
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { LLMMessage } from '../../../../../provider-contract/types.js';
+import type { ToolArgs } from '../../../../../tools/runChain.js';
+import type { ToolResultStatus } from '../../../../../semantics/toolEffects.js';
+import type { TransitionBatchState } from '../contracts/callFacts.js';
+import type { DispatchCall } from '../contracts/batchCall.js';
+/** Compose the existing synchronous dispatchContext phase; no additional await or checkpoint state. */
+export declare function buildDispatchContext(deps: Pick<ToolCallsHandlerDeps, 'allowedSkillIds' | 'engagementPlan' | 'resultsLayer' | 'findings' | 'evidenceGate'>): {
+    prepareDispatchContext: (scope: TypedScope<AgentState>, toolCalls: readonly DispatchCall[], iteration: number) => {
+        newHistory: LLMMessage[];
+        frozenTurn: LLMMessage | undefined;
+        callbackHistory: () => LLMMessage[];
+        frozenArgsAt: (at: number) => ToolArgs | undefined;
+        batchResults: {
+            toolName: string;
+            result: string;
+            toolCallId: string;
+            status?: ToolResultStatus | undefined;
+        }[];
+        towers: {
+            readonly gate: import("../../../evidence/types.js").ResolvedEvidenceGate;
+            readonly corpus: import("../../../evidence/evidenceIndex.js").EvidenceCorpus;
+            readonly exempt: ReadonlySet<string>;
+            readonly standingOf: ReadonlyMap<string, import("../../../findings/types.js").StandingRow>;
+        } | undefined;
+        transitionState: TransitionBatchState;
+        runIdentity: {
+            tenant?: string | undefined;
+            principal?: string | undefined;
+            conversationId: string;
+        } | undefined;
+        env: Readonly<import("footprintjs").ExecutionEnv>;
+    };
+};

package/dist/esm/core/agent/stages/toolCalls/batch/dispatchContext.js

@@ -0,0 +1,133 @@
+import { assistantReplayFields } from '../../../assistantReplay.js';
+import { frozenTurnOf } from '../access/bindings.js';
+import { isSealed } from '../../../../../lib/frozenCopy.js';
+import { towersFor } from '../evidence/towers.js';
+/** Compose the existing synchronous dispatchContext phase; no additional await or checkpoint state. */
+export function buildDispatchContext(deps) {
+    const prepareDispatchContext = (scope, toolCalls, iteration) => {
+        const newHistory = [...scope.history];
+        // ALWAYS push the assistant turn when there are tool calls — even
+        // if the content was empty — so providers (Anthropic, OpenAI) can
+        // round-trip the tool_use blocks via `LLMMessage.toolCalls`.
+        // Without this, the next iteration's request lacks the assistant
+        // turn that initiated the tool call, and the API rejects the
+        // following tool_result with "preceding tool_use missing".
+        if (scope.llmLatestContent || toolCalls.length > 0) {
+            // v2.14 — attach thinking blocks (if any). Required for
+            // Anthropic signature round-trip: the next request MUST echo
+            // back the signed blocks BYTE-EXACT or Anthropic returns 400.
+            // Empty array (no thinking) → field omitted from message.
+            const thinkingBlocks = scope.thinkingBlocks;
+            const hasThinking = thinkingBlocks !== undefined && thinkingBlocks.length > 0;
+            newHistory.push({
+                role: 'assistant',
+                content: scope.llmLatestContent ?? '',
+                ...(toolCalls.length > 0 && { toolCalls }),
+                // Spread = materialize the proxy view (see toolCalls above).
+                ...(hasThinking && { thinkingBlocks: [...thinkingBlocks] }),
+                ...assistantReplayFields(scope),
+            });
+        }
+        // ── ONE FROZEN COPY OF THE BATCH, for every pre-execute callback ──
+        // The assistant turn just pushed holds every call's arguments — the
+        // objects the calls run with. A callback that reads the history (the
+        // permission checker, middleware, a check-in predicate, the evidence
+        // assembler) gets it with this turn as a frozen copy, and each call's
+        // `tool_start`, checker and predicate share that copy's arguments: one
+        // copy of the batch, and nothing a callback holds reaches what runs.
+        // Earlier turns are handed as they are: their calls already ran, and
+        // deep-copying the whole conversation for every call would cost
+        // O(conversation) per call.
+        const turnAt = newHistory.length - 1;
+        const pushedTurn = toolCalls.length > 0 ? newHistory[turnAt] : undefined;
+        const frozenTurn = pushedTurn === undefined ? undefined : frozenTurnOf(pushedTurn);
+        /**
+         * The history a pre-execute callback is handed — the batch's turn frozen.
+         * The one copy is shared only when freezing SEALED it (`isSealed`: every
+         * JSON turn); a turn holding a container freezing leaves writable (a
+         * `Map`, a `Date`, a typed array an app's provider put in a call) is
+         * copied again for each callback, so none can change what the next sees.
+         */
+        const callbackHistory = () => {
+            if (pushedTurn === undefined || frozenTurn === undefined)
+                return [...newHistory];
+            const turn = isSealed(frozenTurn) ? frozenTurn : frozenTurnOf(pushedTurn);
+            return newHistory.map((message, at) => (at === turnAt ? turn : message));
+        };
+        /** The batch's sealed copy of call `at`'s arguments, when there is one to share. */
+        const frozenArgsAt = (at) => {
+            const shared = frozenTurn?.toolCalls?.[at]?.args;
+            return isSealed(shared) ? shared : undefined;
+        };
+        // `lookupTool` is hoisted to the handler closure (shared with resume).
+        // ── The model's `read_skill` pick: one-shot by construction ──────
+        // Cleared at the TOP of every iteration that dispatches tools, and set
+        // below only when the gate ACCEPTS a pick. Since the only way back into
+        // the ReAct loop is through this handler, a pick can never survive into a
+        // later iteration and drag the cursor backwards after a declared edge has
+        // moved it. Written only for skill-graph agents (the gate is what makes a
+        // pick "validated"); a plain read_skill agent never sees this key.
+        if (deps.allowedSkillIds)
+            scope.pendingSkillPick = undefined;
+        // ── The pass's ACCEPTED picks (9.59.0) — per-pass by construction ──
+        // Same one-shot discipline as `pendingSkillPick` one line up, and for
+        // the same reason: the mount kernel's renewal feed must see evidence
+        // from THIS pass. It used to read `activatedInjectionIds`, which is
+        // cleared only at run start, so one accepted pick anywhere kept the
+        // kernel disarmed for the whole turn. Every accepted pick lands here —
+        // hops, open skills and re-engagements alike — while
+        // `pendingSkillPick` keeps its exact meaning (the last accepted HOP,
+        // the cursor's input). Written only for agents with the kernel mounted.
+        if (deps.engagementPlan)
+            scope.acceptedSkillPicks = [];
+        // ── The iteration's tool-result batch, in call order (9.16.0) ────
+        // Reset here, appended beside every `lastToolResult` write — each entry
+        // stamped as its result lands, so a pause mid-batch commits exactly the
+        // results that really happened (the resume paths APPEND the answered
+        // call to this same array). `lastToolResult` stays the last entry;
+        // `on-tool-return` triggers and skill-graph routes read the batch.
+        const batchResults = [];
+        // Findings standings were preserved in the admission preflight, before
+        // the batch ask could pause. Their identity came from this response's
+        // immutable request witness, not this resetting result list. Absence
+        // interpretation still uses the existing known-results/coverage reader.
+        scope.toolResults = [];
+        // The results layer (honesty layer 3) judges each batch ONCE, at the
+        // first loop-head visit after it ran — told apart from a re-entry by
+        // the iteration that dispatched it, never by call id (a provider may
+        // reuse one). Written beside the batch, under the arm only.
+        if (deps.resultsLayer === true)
+            scope.toolResultsIteration = iteration;
+        // ── THE TOWERS AT DISPATCH (9.110.0) — one corpus per batch ────────
+        // Built AFTER the standings above are on the record (a standing the
+        // model declared on THIS batch's calls counts for this batch's
+        // arguments) and only when the fold holds a set-aside standing at
+        // all. The history is the list this call was served — the same one
+        // `knownResults` read one screen up — and `exemptFromRun` reads what
+        // the route decider reads at the answer, so a value the person or the
+        // app supplied is never a tower at either moment.
+        const towers = towersFor(scope, deps.findings, deps.evidenceGate);
+        // ── The batch's transition bookkeeping (9.19.0) ───────────────────
+        // First ACCEPTED `propose-transition` wins (committed at acceptance);
+        // later ones to other targets are suppressed + aggregated at batch end.
+        const transitionState = { losers: [] };
+        // Capture run identity from scope for the enriched permission ctx.
+        // Same value the Tools slot passes to ToolProvider.list(ctx) so the
+        // checker sees consistent identity across both gates.
+        const runIdentity = scope.runIdentity;
+        const env = scope.$getEnv();
+        return {
+            newHistory,
+            frozenTurn,
+            callbackHistory,
+            frozenArgsAt,
+            batchResults,
+            towers,
+            transitionState,
+            runIdentity,
+            env,
+        };
+    };
+    return { prepareDispatchContext };
+}
+//# sourceMappingURL=dispatchContext.js.map

package/dist/esm/core/agent/stages/toolCalls/batch/dispatchContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatchContext.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/batch/dispatchContext.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AAG5D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAIlD,uGAAuG;AACvG,MAAM,UAAU,oBAAoB,CAClC,IAGC;IAED,MAAM,sBAAsB,GAAG,CAC7B,KAA6B,EAC7B,SAAkC,EAClC,SAAiB,EACjB,EAAE;QACF,MAAM,UAAU,GAAiB,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC,CAAC;QAC/E,kEAAkE;QAClE,kEAAkE;QAClE,6DAA6D;QAC7D,iEAAiE;QACjE,6DAA6D;QAC7D,2DAA2D;QAC3D,IAAI,KAAK,CAAC,gBAAgB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnD,wDAAwD;YACxD,6DAA6D;YAC7D,8DAA8D;YAC9D,0DAA0D;YAC1D,MAAM,cAAc,GAAI,KAAiD,CAAC,cAAc,CAAC;YACzF,MAAM,WAAW,GAAG,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;YAC9E,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,WAA0B;gBAChC,OAAO,EAAE,KAAK,CAAC,gBAAgB,IAAI,EAAE;gBACrC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBAC1C,6DAA6D;gBAC7D,GAAG,CAAC,WAAW,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,cAAc,CAAU,EAAE,CAAC;gBACpE,GAAG,qBAAqB,CAAC,KAAK,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;QACD,qEAAqE;QACrE,oEAAoE;QACpE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,gEAAgE;QAChE,4BAA4B;QAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,MAAM,UAAU,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QACnF;;;;;;WAMG;QACH,MAAM,eAAe,GAAG,GAAiB,EAAE;YACzC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;gBAAE,OAAO,CAAC,GAAG,UAAU,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YAC1E,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC;QACF,oFAAoF;QACpF,MAAM,YAAY,GAAG,CAAC,EAAU,EAAwB,EAAE;YACxD,MAAM,MAAM,GAAG,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,IAA4B,CAAC;YACzE,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC;QACF,uEAAuE;QAEvE,oEAAoE;QACpE,uEAAuE;QACvE,wEAAwE;QACxE,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,IAAI,CAAC,eAAe;YAAE,KAAK,CAAC,gBAAgB,GAAG,SAAS,CAAC;QAE7D,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,oEAAoE;QACpE,oEAAoE;QACpE,uEAAuE;QACvE,qDAAqD;QACrD,qEAAqE;QACrE,wEAAwE;QACxE,IAAI,IAAI,CAAC,cAAc;YAAE,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAEvD,oEAAoE;QACpE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,MAAM,YAAY,GAKZ,EAAE,CAAC;QACT,uEAAuE;QACvE,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,KAAK,CAAC,WAAW,GAAG,EAAE,CAAC;QACvB,qEAAqE;QACrE,qEAAqE;QACrE,qEAAqE;QACrE,4DAA4D;QAC5D,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;YAAE,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACvE,sEAAsE;QACtE,oEAAoE;QACpE,+DAA+D;QAC/D,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAElE,qEAAqE;QACrE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,eAAe,GAAyB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAE7D,mEAAmE;QACnE,oEAAoE;QACpE,sDAAsD;QACtD,MAAM,WAAW,GAAG,KAAK,CAAC,WAEb,CAAC;QACd,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO;YACL,UAAU;YACV,UAAU;YACV,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,eAAe;YACf,WAAW;YACX,GAAG;SACJ,CAAC;IACJ,CAAC,CAAC;IACF,OAAO,EAAE,sBAAsB,EAAE,CAAC;AACpC,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/batch/execute.d.ts

@@ -0,0 +1,7 @@
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { PausableHandler, TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ToolCallOperations } from '../compose.js';
+import type { DispatchCallRunner } from '../contracts/dispatchCall.js';
+/** The existing native batch handler: original waits, one serial call loop, and defined pause propagation. */
+export declare function buildToolBatchExecution(deps: ToolCallsHandlerDeps, operations: ToolCallOperations, dispatchCall: DispatchCallRunner): PausableHandler<TypedScope<AgentState>>['execute'];

package/dist/esm/core/agent/stages/toolCalls/batch/execute.js

@@ -0,0 +1,154 @@
+import { refuseToolBatch } from './refusal.js';
+import { toolBatchFailure } from '../../toolCallShape.js';
+import { hasUnbindableCallId } from '../../batchParties.js';
+import { restoreServedParties, saveServedParties } from '../../servedParties.js';
+import { readBatchResolutions } from './inputResolutions.js';
+import { completeToolBatch } from './completion.js';
+/** The existing native batch handler: original waits, one serial call loop, and defined pause propagation. */
+export function buildToolBatchExecution(deps, operations, dispatchCall) {
+    const execute = async (scope) => {
+        if (deps.servedTools?.argumentAskPending === true)
+            deps.resources?.expectAnswer();
+        restoreServedParties(scope, deps.servedTools);
+        if (deps.servedTools?.argumentAskPending === true)
+            deps.resources?.expectAnswer();
+        // Replay and pausable resume both admit the saved native owner and current executable catalog.
+        deps.resources?.restore(scope, operations.resourceFactsOf(scope));
+        const catalog = deps.prepareProviderTools?.(scope);
+        if (catalog)
+            await catalog;
+        scope.$getEnv().signal?.throwIfAborted();
+        // Durable-write barrier — the LAST iteration's state must have landed in
+        // the session store before THIS iteration's tools are allowed to run.
+        // `undefined` (no composer, or nothing outstanding) means no await, no
+        // microtask, no behaviour change whatsoever.
+        const durable = deps.awaitDurable?.();
+        if (durable)
+            await durable;
+        // The time layer: a resume whose pause was the inputs layer's argument
+        // ask re-runs THIS function from its top — the kept clock is recorded
+        // against the resume's `time` here, first, exactly as the resume door
+        // does (TQ21). A fresh run passed no resume `time`: nothing is filed.
+        if (deps.time !== undefined) {
+            (await import('../../timeLayer.js')).recordClockOnResume(scope, deps.time);
+        }
+        const { toolCalls, iteration, findingsRefusals } = operations.admitFindingsBatch(scope);
+        if (hasUnbindableCallId(toolCalls)) {
+            refuseToolBatch(scope, 'invalid-call-id');
+            return;
+        }
+        // THE INPUTS LAYER'S HALF OF DISPATCH (honesty layer 2) — loaded through
+        // `import()` only under the arm, so an unarmed batch awaits nothing new.
+        const inputs = deps.inputsLayer === true ? await import('../../../arguments/dispatch.js') : undefined;
+        let resolutions = readBatchResolutions(scope, inputs, iteration, toolCalls, findingsRefusals);
+        // ── THE BATCH ASK (honesty layer 2, step 4) — FIRST, before anything
+        // is written or dispatched: when the layer named an `ask` argument a
+        // call of this batch left out, the person is asked ONCE for everything
+        // the batch needs (`../../argumentAsk.ts` · `askBeforeDispatch`, which
+        // pauses through footprintjs's `interrupt()`). The resume re-runs this
+        // stage from here; the answer comes back out of the same interrupt, is
+        // bound, and the entries below carry the answered fills. A pass that
+        // carries an answer has asked this batch's one human question: every
+        // later pause in the SAME batch is refused by name (`askedLayer`, the
+        // layer's dispatch half, set only then).
+        let askedLayer;
+        if (inputs !== undefined &&
+            resolutions !== undefined &&
+            ([...resolutions.values()].some((r) => r.ask !== undefined) ||
+                deps.time?.reader !== undefined)) {
+            // Loaded on first use — the optional-family law: a plain agent's
+            // graph never carries the ask (`test/trace-toolpack/browserGraph`).
+            const { askBeforeDispatch } = await import('../../argumentAsk.js');
+            const asked = askBeforeDispatch(scope, resolutions, {
+                pendingAsk: deps.servedTools?.argumentAskPending === true,
+                settledAsk: () => {
+                    if (deps.servedTools !== undefined)
+                        deps.servedTools.argumentAskPending = false;
+                },
+                refuseMalformedBatch: () => {
+                    const malformed = toolBatchFailure(toolCalls);
+                    if (malformed === undefined)
+                        return false;
+                    refuseToolBatch(scope, malformed);
+                    return true;
+                },
+                excludedCallIds: toolCalls
+                    .filter((_, index) => findingsRefusals[index] !== undefined)
+                    .map((call) => call.id),
+                ...(deps.argumentSources === true && { argumentSources: true }),
+                toolOf: (toolName) => operations.resolveTool(toolName).tool,
+                admitAnswer: () => deps.resources?.answer.record(),
+                saveParties: () => saveServedParties(scope, deps.servedTools, {
+                    calls: toolCalls,
+                    iteration,
+                    partyOf: (name) => operations.resolveTool(name).party,
+                    argumentAsk: true,
+                }),
+                runId: () => operations.runFactsOf(scope)?.runId,
+                ...(deps.argumentAskContext !== undefined && { hostContext: deps.argumentAskContext }),
+                ...(deps.time !== undefined && {
+                    time: {
+                        ...(deps.time.appZone !== undefined && { appZone: deps.time.appZone }),
+                        ...(deps.time.reader !== undefined && { reader: deps.time.reader }),
+                    },
+                }),
+            });
+            if (asked.refused === true)
+                return;
+            resolutions = asked.resolutions;
+            if (asked.answered)
+                askedLayer = inputs;
+        }
+        const oneQuestionAsked = askedLayer !== undefined;
+        const { newHistory, frozenTurn, callbackHistory, frozenArgsAt, batchResults, towers, transitionState, runIdentity, env, } = operations.prepareDispatchContext(scope, toolCalls, iteration);
+        const batch = {
+            toolCalls,
+            iteration,
+            findingsRefusals,
+            inputs,
+            resolutions,
+            askedLayer,
+            oneQuestionAsked,
+            newHistory,
+            frozenTurn,
+            callbackHistory,
+            frozenArgsAt,
+            batchResults,
+            towers,
+            transitionState,
+            runIdentity,
+            env,
+        };
+        for (const [callIndex, tc] of toolCalls.entries()) {
+            const result = await dispatchCall(scope, tc, callIndex, batch);
+            if (result.kind === 'paused') {
+                saveServedParties(scope, deps.servedTools, {
+                    calls: toolCalls,
+                    iteration,
+                    partyOf: (name) => operations.resolveTool(name).party,
+                    paused: { id: tc.id, name: tc.name },
+                });
+                return result.pause;
+            }
+            if (result.kind === 'halted')
+                return undefined;
+        }
+        completeToolBatch(scope, {
+            askAnswered: oneQuestionAsked,
+            inputsLayer: deps.servedTools?.argumentAskPending === true,
+            newHistory,
+            emitTransitionConflict: operations.emitTransitionConflict,
+            iteration,
+            transitionState,
+            toolCalls,
+        });
+        if (deps.servedTools !== undefined) {
+            deps.servedTools.pinned = undefined;
+            deps.servedTools.restored = undefined;
+            deps.servedTools.argumentAskPending = false;
+        }
+        return undefined; // explicit: no pause, flow continues to loopTo
+    };
+    return execute;
+}
+//# sourceMappingURL=execute.js.map

package/dist/esm/core/agent/stages/toolCalls/batch/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/batch/execute.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAKjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAKpD,8GAA8G;AAC9G,MAAM,UAAU,uBAAuB,CACrC,IAA0B,EAC1B,UAA8B,EAC9B,YAAgC;IAEhC,MAAM,OAAO,GAAuD,KAAK,EAAE,KAAK,EAAE,EAAE;QAClF,IAAI,IAAI,CAAC,WAAW,EAAE,kBAAkB,KAAK,IAAI;YAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;QAClF,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,WAAW,EAAE,kBAAkB,KAAK,IAAI;YAAE,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;QAClF,+FAA+F;QAC/F,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEzC,yEAAyE;QACzE,sEAAsE;QACtE,uEAAuE;QACvE,6CAA6C;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,uEAAuE;QACvE,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACxF,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,eAAe,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,MAAM,GACV,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzF,IAAI,WAAW,GAAG,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAC9F,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,qEAAqE;QACrE,sEAAsE;QACtE,yCAAyC;QACzC,IAAI,UAAsC,CAAC;QAC3C,IACE,MAAM,KAAK,SAAS;YACpB,WAAW,KAAK,SAAS;YACzB,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,SAAS,CAAC;gBACzD,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,CAAC,EAClC,CAAC;YACD,iEAAiE;YACjE,oEAAoE;YACpE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,WAAW,EAAE;gBAClD,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,kBAAkB,KAAK,IAAI;gBACzD,UAAU,EAAE,GAAG,EAAE;oBACf,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;wBAAE,IAAI,CAAC,WAAW,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAClF,CAAC;gBACD,oBAAoB,EAAE,GAAG,EAAE;oBACzB,MAAM,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBAC9C,IAAI,SAAS,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBAC1C,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;oBAClC,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,eAAe,EAAE,SAAS;qBACvB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;qBAC3D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,EAAE,eAAe,EAAE,IAAa,EAAE,CAAC;gBACxE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI;gBAC3D,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;gBAClD,WAAW,EAAE,GAAG,EAAE,CAChB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;oBACzC,KAAK,EAAE,SAAS;oBAChB,SAAS;oBACT,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK;oBACrD,WAAW,EAAE,IAAI;iBAClB,CAAC;gBACJ,KAAK,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK;gBAChD,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI;oBAC7B,IAAI,EAAE;wBACJ,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;wBACtE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;qBACpE;iBACF,CAAC;aACH,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;gBAAE,OAAO;YACnC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;YAChC,IAAI,KAAK,CAAC,QAAQ;gBAAE,UAAU,GAAG,MAAM,CAAC;QAC1C,CAAC;QACD,MAAM,gBAAgB,GAAG,UAAU,KAAK,SAAS,CAAC;QAClD,MAAM,EACJ,UAAU,EACV,UAAU,EACV,eAAe,EACf,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,eAAe,EACf,WAAW,EACX,GAAG,GACJ,GAAG,UAAU,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACnE,MAAM,KAAK,GAAuB;YAChC,SAAS;YACT,SAAS;YACT,gBAAgB;YAChB,MAAM;YACN,WAAW;YACX,UAAU;YACV,gBAAgB;YAChB,UAAU;YACV,UAAU;YACV,eAAe;YACf,YAAY;YACZ,YAAY;YACZ,MAAM;YACN,eAAe;YACf,WAAW;YACX,GAAG;SACJ,CAAC;QACF,KAAK,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE;oBACzC,KAAK,EAAE,SAAS;oBAChB,SAAS;oBACT,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK;oBACrD,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;iBACrC,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC,KAAK,CAAC;YACtB,CAAC;YACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,SAAS,CAAC;QACjD,CAAC;QACD,iBAAiB,CAAC,KAAK,EAAE;YACvB,WAAW,EAAE,gBAAgB;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,kBAAkB,KAAK,IAAI;YAC1D,UAAU;YACV,sBAAsB,EAAE,UAAU,CAAC,sBAAsB;YACzD,SAAS;YACT,eAAe;YACf,SAAS;SACV,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC;YACpC,IAAI,CAAC,WAAW,CAAC,QAAQ,GAAG,SAAS,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,kBAAkB,GAAG,KAAK,CAAC;QAC9C,CAAC;QACD,OAAO,SAAS,CAAC,CAAC,+CAA+C;IACnE,CAAC,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/batch/findingsAdmission.d.ts

@@ -0,0 +1,18 @@
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { LLMMessage } from '../../../../../provider-contract/types.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+/** Compose the existing synchronous findingsAdmission phase; no additional await or checkpoint state. */
+export declare function buildFindingsAdmission(deps: Pick<ToolCallsHandlerDeps, 'findings'>, links: Pick<ToolCatalogOperations, 'peelCall' | 'turnStampOf'>): {
+    admitFindingsBatch: (scope: TypedScope<AgentState>) => {
+        toolCalls: {
+            readonly id: string;
+            readonly name: string;
+            readonly args: Readonly<Record<string, unknown>>;
+            readonly argumentsFailure?: LLMMessage['toolArgumentsFailure'];
+        }[];
+        iteration: number;
+        findingsRefusals: (string | undefined)[];
+    };
+};

package/dist/esm/core/agent/stages/toolCalls/batch/findingsAdmission.js

@@ -0,0 +1,48 @@
+import { findingsReferenceRefusal } from '../../../findings/admission.js';
+import { knownResults } from '../../../findings/offer.js';
+import { recordFindings, standingRowsFrom } from '../../../findings/ledger.js';
+import { referenceRefusalRow } from '../../../findings/refusal.js';
+import { withUnsettledRows } from '../../../findings/unsettled.js';
+/** Compose the existing synchronous findingsAdmission phase; no additional await or checkpoint state. */
+export function buildFindingsAdmission(deps, links) {
+    const admitFindingsBatch = (scope) => {
+        const { peelCall, turnStampOf } = links;
+        // Materialize ONCE — `scope.llmLatestToolCalls` is a live TypedScope
+        // deep-Proxy view; spreading yields the raw (plain, structured-clone-
+        // safe) elements. This array is embedded into the assistant history
+        // message and into typed event payloads (tool_start args,
+        // iteration_end history), which must be detached plain data
+        // (RFC-001 'clone' capture under observerDelivery: 'deferred').
+        const toolCalls = [
+            ...scope.llmLatestToolCalls,
+        ];
+        const iteration = scope.iteration;
+        // ── STANDINGS OF EARLIER RESULTS AND REFERENCE ADMISSION ───────
+        // Freeze admission before batch asks, kept-answer consumption or any
+        // policy/credential callback. A sibling result never enlarges it.
+        const findingsPeels = deps.findings === true ? toolCalls.map(peelCall) : [];
+        const findingsRefusals = findingsPeels.map((peeled) => findingsReferenceRefusal(peeled.findings, scope.findingsRequest?.[0], iteration, peeled.malformed));
+        if (deps.findings === true &&
+            findingsPeels.some((p) => p.findings !== undefined || p.malformed) &&
+            scope.findingsBatchRecordedAt !== iteration) {
+            const known = knownResults([...(scope.history ?? [])], [...(scope.toolResults ?? [])]);
+            scope.findingsBatchRecordedAt = iteration;
+            recordFindings(scope, toolCalls.flatMap((tc, index) => findingsRefusals[index] === undefined
+                ? []
+                : [
+                    referenceRefusalRow({ toolCallId: tc.id }, iteration, (findingsPeels[index]?.malformed ?? 0) > 0, findingsPeels[index]?.malformed ? tc.args._findings : undefined),
+                ]), turnStampOf(scope));
+            recordFindings(scope, withUnsettledRows(toolCalls.flatMap((tc, index) => {
+                const declared = findingsPeels[index]?.findings;
+                return declared?.previous !== undefined
+                    ? standingRowsFrom(known, declared, { toolCallId: tc.id }, iteration, {
+                        witness: scope.findingsRequest?.[0],
+                    })
+                    : [];
+            }), known, () => [...(scope.coverageDeclared ?? [])]), turnStampOf(scope));
+        }
+        return { toolCalls, iteration, findingsRefusals };
+    };
+    return { admitFindingsBatch };
+}
+//# sourceMappingURL=findingsAdmission.js.map

package/dist/esm/core/agent/stages/toolCalls/batch/findingsAdmission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"findingsAdmission.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/batch/findingsAdmission.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAuB,cAAc,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AACpG,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAInE,yGAAyG;AACzG,MAAM,UAAU,sBAAsB,CACpC,IAA4C,EAC5C,KAA8D;IAE9D,MAAM,kBAAkB,GAAG,CAAC,KAA6B,EAAE,EAAE;QAC3D,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;QACxC,qEAAqE;QACrE,sEAAsE;QACtE,oEAAoE;QACpE,0DAA0D;QAC1D,4DAA4D;QAC5D,gEAAgE;QAChE,MAAM,SAAS,GAAG;YAChB,GAAI,KAAK,CAAC,kBAKN;SACL,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,kEAAkE;QAClE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpD,wBAAwB,CACtB,MAAM,CAAC,QAAQ,EACf,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAC1B,SAAS,EACT,MAAM,CAAC,SAAS,CACjB,CACF,CAAC;QACF,IACE,IAAI,CAAC,QAAQ,KAAK,IAAI;YACtB,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC;YAClE,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAC3C,CAAC;YACD,MAAM,KAAK,GAAG,YAAY,CACxB,CAAC,GAAG,CAAE,KAAK,CAAC,OAA6C,IAAI,EAAE,CAAC,CAAC,EACjE,CAAC,GAAI,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAA+B,CAAC,CAC9D,CAAC;YACF,KAAK,CAAC,uBAAuB,GAAG,SAAS,CAAC;YAC1C,cAAc,CACZ,KAAK,EACL,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAC9B,gBAAgB,CAAC,KAAK,CAAC,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,mBAAmB,CACjB,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,EACrB,SAAS,EACT,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,EAC1C,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAChE;iBACF,CACN,EACD,WAAW,CAAC,KAAK,CAAC,CACnB,CAAC;YACF,cAAc,CACZ,KAAK,EACL,iBAAiB,CACf,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE;gBAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;gBAChD,OAAO,QAAQ,EAAE,QAAQ,KAAK,SAAS;oBACrC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE;wBAClE,OAAO,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;qBACpC,CAAC;oBACJ,CAAC,CAAC,EAAE,CAAC;YACT,CAAC,CAAC,EACF,KAAK,EACL,GAAG,EAAE,CAAC,CAAC,GAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAiC,CAAC,CAC3E,EACD,WAAW,CAAC,KAAK,CAAC,CACnB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACpD,CAAC,CAAC;IACF,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAChC,CAAC"}