agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/stages/toolCalls/compose.d.ts

@@ -0,0 +1,239 @@
+import type { ToolCallsHandlerDeps } from './contracts/handlerDeps.js';
+import type { AuthorizationRequiredMode } from '../../../../identity/consent.js';
+/** Compose the existing callback families once per handler, preserving their construction order. */
+export declare function composeToolCallOperations(deps: ToolCallsHandlerDeps): {
+    resourceFactsOf: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => import("../../componentResources.js").ResourceFacts;
+    admitFindingsBatch: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => {
+        toolCalls: {
+            readonly id: string;
+            readonly name: string;
+            readonly args: Readonly<Record<string, unknown>>;
+            readonly argumentsFailure?: {
+                readonly reason: "invalid-json" | "invalid-argument-shape" | "incomplete-stream";
+            } | undefined;
+        }[];
+        iteration: number;
+        findingsRefusals: (string | undefined)[];
+    };
+    resolveTool: import("../toolResolver.js").ToolResolver;
+    runFactsOf: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => {
+        readonly runContext?: import("../../../../index.js").RunContext | undefined;
+        readonly runId: string;
+        readonly sessionId?: string | undefined;
+        readonly identity?: import("../../../../memory/index.js").MemoryIdentity | undefined;
+    } | undefined;
+    prepareDispatchContext: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolCalls: readonly import("./contracts/batchCall.js").DispatchCall[], iteration: number) => {
+        newHistory: import("../../../../index.js").LLMMessage[];
+        frozenTurn: import("../../../../index.js").LLMMessage | undefined;
+        callbackHistory: () => import("../../../../index.js").LLMMessage[];
+        frozenArgsAt: (at: number) => Readonly<Record<string, unknown>> | undefined;
+        batchResults: {
+            toolName: string;
+            result: string;
+            toolCallId: string;
+            status?: import("../../../../index.js").ToolResultStatus | undefined;
+        }[];
+        towers: {
+            readonly gate: import("../../evidence/types.js").ResolvedEvidenceGate;
+            readonly corpus: import("../../evidence/evidenceIndex.js").EvidenceCorpus;
+            readonly exempt: ReadonlySet<string>;
+            readonly standingOf: ReadonlyMap<string, import("../../findings/types.js").StandingRow>;
+        } | undefined;
+        transitionState: import("./contracts/callFacts.js").TransitionBatchState;
+        runIdentity: {
+            tenant?: string | undefined;
+            principal?: string | undefined;
+            conversationId: string;
+        } | undefined;
+        env: Readonly<import("footprintjs").ExecutionEnv>;
+    };
+    beginDispatchCall: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, tc: import("./contracts/batchCall.js").DispatchCall, iteration: number, towers: {
+        readonly gate: import("../../evidence/types.js").ResolvedEvidenceGate;
+        readonly corpus: import("../../evidence/evidenceIndex.js").EvidenceCorpus;
+        readonly exempt: ReadonlySet<string>;
+        readonly standingOf: ReadonlyMap<string, import("../../findings/types.js").StandingRow>;
+    } | undefined, callIndex: number, toolCalls: readonly import("./contracts/batchCall.js").DispatchCall[], findingsRefusals: readonly (string | undefined)[], frozenTurn: import("../../../../index.js").LLMMessage | undefined, callbackHistory: () => import("../../../../index.js").LLMMessage[], frozenArgsAt: (at: number) => Readonly<Record<string, unknown>> | undefined) => {
+        emitSecurity: import("../../toolSecurityEvents.js").ToolSecurityEmitter;
+        resolved: import("../toolResolver.js").ToolResolution;
+        tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined;
+        args: Readonly<Record<string, unknown>>;
+        proposedProgram: unknown;
+        viewOf: (source: Readonly<Record<string, unknown>>) => Readonly<Record<string, unknown>> | undefined;
+        historyForCallbacks: () => import("../../../../index.js").LLMMessage[];
+        startMs: number;
+        findingsRefusal: string | undefined;
+        invalidateViews: () => void;
+    };
+    permissionChecker: import("../../../../index.js").PermissionChecker | undefined;
+    unmountedRules: (tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined, toolName: string) => Promise<string> | undefined;
+    warnUnmountedToolPeriod: (tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined, toolName: string) => void;
+    decisionLedger: import("../../../consentRequest.js").DecisionLedger;
+    assertComponentDeliverable: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolName: string, component: unknown, door: string) => Promise<import("../../../../index.js").AskComponent>;
+    fileScript: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined;
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+        readonly proposed: unknown;
+        readonly submitted?: unknown;
+        readonly settlement: import("../../scripts/label.js").CallSettlement;
+        readonly facts?: import("../../../codeRunnerTool.js").CodeRunFacts | undefined;
+        readonly withheld?: boolean | undefined;
+        readonly paused?: boolean | undefined;
+        readonly dispatch?: number | undefined;
+    }) => number | undefined;
+    programOfCall: (tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined, args: Readonly<Record<string, unknown>> | undefined) => unknown;
+    argumentRefusal: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown>, args: unknown, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => string | undefined;
+    parkedNow: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => ReadonlySet<string> | undefined;
+    historyForCheckIn: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, history: readonly import("../../../../index.js").LLMMessage[]) => import("../../../../index.js").LLMMessage[];
+    resolveWantsAtDispatch: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolName: string, wants: Readonly<Record<string, string>>, args: Readonly<Record<string, unknown>>, inputSchema: Readonly<Record<string, unknown>> | undefined) => Promise<{
+        readonly ok: true;
+        readonly args: Readonly<Record<string, unknown>>;
+        readonly wanted?: Readonly<Record<string, import("../../../../index.js").ArtifactMeta>> | undefined;
+    } | {
+        readonly ok: false;
+        readonly refusal: string;
+    }>;
+    credentialsIn: (scope: object, service: string | undefined) => import("../../../../identity/types.js").CredentialProvider;
+    onAuthorizationRequired: AuthorizationRequiredMode;
+    dispatchRoster: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => import("../../../../lib/spokenIds.js").SpokenIds;
+    noteOffWire: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, resolved: import("../toolResolver.js").ToolResolution, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => void;
+    hasCredentials: boolean;
+    toolArtifacts: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolName: string, toolCallId: string) => Pick<import("../../../../index.js").ToolExecutionContext, "artifacts" | "hasArtifacts">;
+    toolProgress: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => Pick<import("../../../../index.js").ToolExecutionContext, "progress">;
+    sessionContext: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolName: string, toolCallId: string) => Pick<import("../../../../index.js").ToolExecutionContext, "identity" | "runId" | "sessionId" | "resourceOwner" | "redact" | "onTeardown" | "teardownScopes">;
+    toolDispatchCtx: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, signal?: AbortSignal | undefined) => Pick<import("../../../../index.js").ToolExecutionContext, "tools">;
+    searchFunnel: import("../searchCoverage.js").SearchCoverageFunnel;
+    takeCodeRun: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown>, slot: import("../../../codeRunnerTool.js").CodeRunSlot, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly takeListed: boolean;
+    }) => import("../../../codeRunnerTool.js").CodeRunFacts | undefined;
+    warnEffect: (toolName: string, sentence: string) => void;
+    declareCoverage: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, value: unknown, composed?: import("../../../../index.js").CoverageReading | undefined) => import("../../../../index.js").ToolResultStatus | undefined;
+    declareSemantics: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, value: unknown) => unknown;
+    refuseOverCeiling: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined, value: unknown, declaredStatus?: import("../../../../index.js").ToolResultStatus | undefined) => string | undefined;
+    judgeColumns: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, value: unknown) => string | undefined;
+    endCall: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => Promise<void>;
+    declareRaisedAbsence: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, args: Readonly<Record<string, unknown>>, absence: import("../../../../index.js").ToolAbsence, history: readonly import("../../../../index.js").LLMMessage[]) => string | undefined;
+    noteSkillRefusal: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, iteration: number) => void;
+    frameworkSkipStepAnswered: (name: string, answered: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined) => boolean;
+    applySkipStep: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly args: Readonly<Record<string, unknown>>;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => string;
+    applyPresent: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly args: Readonly<Record<string, unknown>>;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => Promise<{
+        readonly ok: boolean;
+        readonly text: string;
+    }>;
+    afterMoment: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly tool?: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined;
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+        readonly args: Readonly<Record<string, unknown>>;
+        readonly result: unknown;
+        readonly error?: boolean | undefined;
+        readonly negativeResultId?: string | undefined;
+        readonly history: readonly import("../../../../index.js").LLMMessage[];
+        readonly identity?: {
+            tenant?: string | undefined;
+            principal?: string | undefined;
+            conversationId: string;
+        } | undefined;
+        readonly signal?: AbortSignal | undefined;
+    }) => Promise<unknown>;
+    placeResults: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, values: {
+        readonly result: unknown;
+        readonly modelResult: unknown;
+    }, eligible: boolean) => Promise<{
+        readonly result: unknown;
+        readonly modelResult: unknown;
+    }>;
+    noticeEmptyLookup: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, args: Readonly<Record<string, unknown>>, result: unknown, history: readonly import("../../../../index.js").LLMMessage[], answered: boolean) => void;
+    capResults: (toolName: string, values: {
+        readonly result: unknown;
+        readonly modelResult: unknown;
+    }) => {
+        readonly result: unknown;
+        readonly modelResult: unknown;
+    };
+    emitToolEnd: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, toolName: string, payload: import("../../../../events/payloads.js").ToolEndPayload, ran: boolean, declaredStatus?: string | undefined, negativeResultId?: string | undefined, refusalArgs?: Readonly<Record<string, unknown>> | undefined) => void;
+    readSkillStepIntroFor: (pickedId: string) => string;
+    applyStepReturn: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }) => string;
+    applyToolEffects: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, call: {
+        readonly toolName: string;
+        readonly toolCallId: string;
+        readonly iteration: number;
+    }, envelope: import("../../../../index.js").ReadToolResultEnvelope, state: import("./contracts/callFacts.js").TransitionBatchState) => string;
+    repeatLedgers: import("../../repeatedCall.js").RepeatedCallLedgers;
+    noteOptionsFor: (tool: import("../../../../index.js").Tool<Record<string, unknown>, unknown> | undefined) => {
+        readonly sources: true;
+    } | undefined;
+    turnStampOf: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>) => import("../../findings/ledger.js").TurnStamp | undefined;
+    emitTransitionConflict: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, iteration: number, state: import("./contracts/callFacts.js").TransitionBatchState) => void;
+    heldAnswer: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, input: unknown, gate: import("../../../pause.js").ConsentGateKind) => import("../../../checkin.js").CheckInDecision;
+    peelCall: (tc: {
+        readonly name: string;
+        readonly args: Readonly<Record<string, unknown>>;
+    }) => import("../../findings/reserved.js").SplitFindings;
+    resumeAsk: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, frame: import("./contracts/resumeFrames.js").ResumeConsentFrame) => Promise<void>;
+    resumeCheckIn: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, frame: import("./contracts/resumeFrames.js").ResumeConsentFrame) => Promise<void>;
+    resumeCredential: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, frame: import("./contracts/resumeFrames.js").ResumeCallFrame) => Promise<void>;
+    resumePlain: (scope: import("footprintjs").TypedScope<import("../../types.js").AgentState>, frame: import("./contracts/resumeFrames.js").ResumeResultFrame) => Promise<void>;
+};
+/** Internal immutable callback and build-configuration port; no run state or dispatcher. */
+export type ToolCallOperations = Readonly<ReturnType<typeof composeToolCallOperations>>;

package/dist/esm/core/agent/stages/toolCalls/compose.js

@@ -0,0 +1,349 @@
+import { processDecisionLedger } from '../../../consentRequest.js';
+import { buildHeldAnswer } from './access/heldAnswer.js';
+import { buildArgumentRefusal } from './access/argumentValidation.js';
+import { unconfiguredCredentialProvider } from '../../../../identity/types.js';
+import { buildToolCredentialsOperations } from './execution/credentialsOperations.js';
+import { repeatedCallLedgers } from '../../repeatedCall.js';
+import { buildToolLimitsOperations } from './decorators/limitsOperations.js';
+import { buildToolIntegrityOperations } from './evidence/integrityOperations.js';
+import { buildToolCoverageOperations } from './evidence/coverageOperations.js';
+import { buildToolSemanticsOperations } from './evidence/semanticsOperations.js';
+import { buildToolStepsOperations } from './routing/stepsOperations.js';
+import { buildToolEffectsOperations } from './routing/effectsOperations.js';
+import { buildSearchCoverage } from '../searchCoverage.js';
+import { buildToolResourcesOperations } from './execution/resourcesOperations.js';
+import { buildToolObservationsOperations } from './observation/observationsOperations.js';
+import { buildToolScriptsOperations } from './evidence/scriptsOperations.js';
+import { buildToolProgressOperations } from './observation/progressOperations.js';
+import { buildToolContextOperations } from './execution/contextOperations.js';
+import { buildToolArtifactsOperations } from './execution/artifactsOperations.js';
+import { buildToolSettlementOperations } from './batch/settlementOperations.js';
+import { buildToolResolver } from '../toolResolver.js';
+import { notServedResult } from './helpers/dispatchRefusals.js';
+import { buildToolCatalogOperations } from './execution/catalogOperations.js';
+import { SKIP_STEP_TOOL_NAME } from '../../../../injection-engine/skillSteps.js';
+import { buildToolMiddlewareOperations } from './decorators/middlewareOperations.js';
+import { buildResumedInvocation } from './execution/resumedInvocation.js';
+import { buildResumeAsk } from './resume/ask.js';
+import { buildResumeCheckIn } from './resume/checkIn.js';
+import { buildResumeCredential } from './resume/credential.js';
+import { buildResumePlain } from './resume/plain.js';
+import { buildFindingsAdmission } from './batch/findingsAdmission.js';
+import { buildDispatchContext } from './batch/dispatchContext.js';
+import { buildCallStart } from './execution/callStart.js';
+/** Compose the existing callback families once per handler, preserving their construction order. */
+export function composeToolCallOperations(deps) {
+    const { registryByName, externalToolProvider, providerToolCache, servedTools, toolClaimants, permissionChecker, } = deps;
+    const toolArgValidation = deps.toolArgValidation ?? 'enforce';
+    /** Where answered consent requests are spent — the agent's, else this process's. */
+    const decisionLedger = deps.decisionLedger ?? processDecisionLedger();
+    const heldAnswer = buildHeldAnswer(() => deps.toolMiddleware, decisionLedger);
+    const argumentRefusal = buildArgumentRefusal(toolArgValidation);
+    // 8.6.0 — default `'pause'`. Consent is work waiting on a person, and every
+    // other place this library needs a person stops the run and asks the caller.
+    const onAuthorizationRequired = deps.onAuthorizationRequired ?? 'pause';
+    // Fail-closed: when no provider is attached, `ctx.credentials` is a provider
+    // that THROWS on use (never undefined) — so a tool can't silently no-op.
+    const baseCredentials = deps.credentialProvider ?? unconfiguredCredentialProvider();
+    const hasCredentials = deps.credentialProvider !== undefined;
+    const { credentialsIn } = buildToolCredentialsOperations(deps, { baseCredentials });
+    // The repeated-call counters (9.26.0), run-keyed and OFF tracked scope — an
+    // empty Map here, and not one byte written anywhere a reader can see until a
+    // tool actually lands. See `../repeatedCall.ts` for why they are not state.
+    const repeatLedgers = repeatedCallLedgers();
+    const { capResults, refuseOverCeiling } = buildToolLimitsOperations(deps);
+    const { judgeColumns, noticeEmptyLookup } = buildToolIntegrityOperations(deps);
+    const { declareCoverage, declareRaisedAbsence } = buildToolCoverageOperations(deps, {
+        noticeEmptyLookup,
+    });
+    const { declareSemantics } = buildToolSemanticsOperations(deps);
+    const { applySkipStep, applyStepReturn, readSkillStepIntroFor, noteSkillRefusal } = buildToolStepsOperations(deps);
+    const { warnEffect, applyToolEffects, emitTransitionConflict } = buildToolEffectsOperations(deps);
+    /**
+     * Every teardown scope an Agent run can honour (9.7.0).
+     *
+     * All four are real here and each has a firing site: `'call'` in this loop,
+     * `'run'` at `Agent.run`'s non-pause terminals, `'session'` at
+     * `agent.closeToolSessions(...)`, `'shutdown'` at `agent.shutdown()`. A door
+     * that cannot honour one declares a shorter list rather than accepting the
+     * registration and never firing it.
+     */
+    const AGENT_TEARDOWN_SCOPES = ['call', 'run', 'session', 'shutdown'];
+    /**
+     * The identity + teardown half of a `ToolExecutionContext`.
+     *
+     * Built per call, from the run accessor rather than from a captured value.
+     * Every field is ABSENT when the fact is absent: a tool branching on
+     * `ctx.sessionId` must be able to tell "not session-bound" from "bound to
+     * something I made up".
+     *
+     * `redact` is read off the stage's own scope — the run that is actually
+     * executing this call (`src/redaction/runRedaction.ts` · `policyInForce`),
+     * which is a composition's run when this agent is mounted in one — never
+     * off the agent's last standalone run.
+     */
+    /**
+     * The run facts this dispatch serves. A composition MEMBER's come from the
+     * run it is mounted in (`scope.memberRun`, `core/memberRun.ts`): the
+     * instance's own (`deps.currentRun`) describe some other run — its last
+     * standalone caller, or none — and must never reach this run's tools.
+     */
+    /**
+     * `Tool.search` — the call's result identity reserved before dispatch, its
+     * coverage composed after (`./searchCoverage.ts`). Inert for every tool
+     * that declares no search.
+     */
+    const searchFunnel = buildSearchCoverage((scope) => runFactsOf(scope)?.runId);
+    const { runFactsOf, resourceFactsOf, sessionContext, endCall } = buildToolResourcesOperations(deps, {
+        AGENT_TEARDOWN_SCOPES,
+    });
+    const { emitToolStart, emitToolEnd } = buildToolObservationsOperations(deps);
+    const { fileScript, programOfCall, proposedArgsOf, fileResumedScript, takeCodeRun } = buildToolScriptsOperations(deps, {
+        get peelCall() {
+            return peelCall;
+        },
+        get resolveTool() {
+            return resolveTool;
+        },
+    });
+    /**
+     * `ctx.progress` for one dispatch (9.52.0) — the tool's mid-call report.
+     *
+     * The whole feature is this closure. A tool call is atomic on the record
+     * (`tool_start`, then silence for as long as the handler runs, then
+     * `tool_end`), and a twelve-hop walk spends forty seconds there with nothing
+     * to show. `progress` breaks the silence over the channel already built for
+     * it: `typedEmit` mid-stage, so each report carries the real
+     * `runtimeStageId`, rides the `agentfootprint.stream.` prefix the EmitBridge
+     * already forwards, and lands in recordings with the rest of the run.
+     *
+     * The three identity facts are stamped HERE, from the dispatch this closure
+     * was built for — the tool sends only its own payload. A report that could
+     * name its own `toolCallId` could name somebody else's, and a correlation id
+     * a consumer cannot trust is worse than none.
+     *
+     * NEVER fatal: an emit that throws (a recorder that dies at the wrong moment,
+     * a scope past its stage) must not fail a tool call that is otherwise
+     * succeeding — telemetry is not the work. Named in dev mode rather than
+     * swallowed, and once per tool: a twelve-hop walk whose channel is broken
+     * would otherwise print twelve identical warnings per call.
+     */
+    const progressWarned = new Set();
+    const { toolProgress } = buildToolProgressOperations({ progressWarned });
+    const { toolArtifacts, toolDispatchCtx, runScopeOf } = buildToolContextOperations(deps, {
+        runFactsOf,
+        registryByName,
+        credentialsIn,
+        hasCredentials,
+        toolProgress,
+    });
+    const { resolveWantsAtDispatch, assertComponentDeliverable, applyPresent, placeResults } = buildToolArtifactsOperations(deps, {
+        runScopeOf,
+        toolArtifacts,
+        get lookupTool() {
+            return lookupTool;
+        },
+    });
+    const { historyForCheckIn, settleBatch, bracketSettled } = buildToolSettlementOperations(deps, {
+        fileScript,
+        get resolveTool() {
+            return resolveTool;
+        },
+        programOfCall,
+        get peelCall() {
+            return peelCall;
+        },
+        emitToolStart,
+        emitToolEnd,
+    });
+    const resolveTool = buildToolResolver({
+        registryByName,
+        ...(externalToolProvider !== undefined && { externalToolProvider }),
+        ...(providerToolCache !== undefined && { providerToolCache }),
+        ...(servedTools !== undefined && { servedTools }),
+        ...(toolClaimants !== undefined && { toolClaimants }),
+        notServed: notServedResult,
+    });
+    const { lookupTool, unmountedRules, warnUnmountedToolPeriod, turnStampOf, peelsReserved, peelCall, noteOptionsFor, noteOffWire, frameworkSkipStepAnswered, parkedNow, dispatchRoster, } = buildToolCatalogOperations(deps, {
+        resolveTool,
+        get peelArms() {
+            return peelArms;
+        },
+        get frameworkSkipStep() {
+            return frameworkSkipStep;
+        },
+        registryByName,
+        externalToolProvider,
+        providerToolCache,
+    });
+    const peelArms = deps.argumentSources === true ? { argumentSources: true } : undefined;
+    // The framework's own `skip_step` — `buildToolRegistry` installs it in the
+    // dispatch map whenever a skill declares steps. The step bookkeeping below
+    // keys on THIS instance having answered, not on the name: since 9.92.0 a
+    // provider's `skip_step` on the wire is the provider's to answer, and a
+    // procedure must not advance on a call whose contract the model read from
+    // somebody else (recorded-not-built, entry 3).
+    const frameworkSkipStep = deps.stepPlanFor ? registryByName.get(SKIP_STEP_TOOL_NAME) : undefined;
+    const { afterMoment } = buildToolMiddlewareOperations(deps);
+    const { resolveCredentialAndExecute } = buildResumedInvocation(deps, {
+        dispatchRoster,
+        argumentRefusal,
+        noteOffWire,
+        resolveWantsAtDispatch,
+        credentialsIn,
+        hasCredentials,
+        toolArtifacts,
+        toolProgress,
+        sessionContext,
+        toolDispatchCtx,
+        endCall,
+        searchFunnel,
+        runFactsOf,
+        programOfCall,
+        proposedArgsOf,
+        takeCodeRun,
+        declareCoverage,
+        declareSemantics,
+        refuseOverCeiling,
+        judgeColumns,
+        warnEffect,
+    });
+    const { resumeAsk } = buildResumeAsk(deps, {
+        decisionLedger,
+        resolveTool,
+        unmountedRules,
+        historyForCheckIn,
+        resolveCredentialAndExecute,
+        frameworkSkipStepAnswered,
+        applySkipStep,
+        applyPresent,
+        afterMoment,
+        placeResults,
+        capResults,
+        applyStepReturn,
+        applyToolEffects,
+        emitTransitionConflict,
+        settleBatch,
+        turnStampOf,
+        fileResumedScript,
+        emitToolEnd,
+        bracketSettled,
+        endCall,
+    });
+    const { resumeCheckIn } = buildResumeCheckIn(deps, {
+        decisionLedger,
+        resolveTool,
+        resolveCredentialAndExecute,
+        afterMoment,
+        placeResults,
+        capResults,
+        applyStepReturn,
+        applyToolEffects,
+        emitTransitionConflict,
+        settleBatch,
+        turnStampOf,
+        fileResumedScript,
+        emitToolEnd,
+        bracketSettled,
+        endCall,
+    });
+    const { resumeCredential } = buildResumeCredential(deps, {
+        resolveTool,
+        resolveCredentialAndExecute,
+        afterMoment,
+        placeResults,
+        capResults,
+        applyStepReturn,
+        applyToolEffects,
+        emitTransitionConflict,
+        settleBatch,
+        turnStampOf,
+        fileResumedScript,
+        emitToolEnd,
+        bracketSettled,
+        endCall,
+    });
+    const { resumePlain } = buildResumePlain(deps, {
+        lookupTool,
+        peelsReserved,
+        afterMoment,
+        placeResults,
+        capResults,
+        applyStepReturn,
+        settleBatch,
+        turnStampOf,
+        fileResumedScript,
+        emitToolEnd,
+        bracketSettled,
+        endCall,
+    });
+    const { admitFindingsBatch } = buildFindingsAdmission(deps, { peelCall, turnStampOf });
+    const { prepareDispatchContext } = buildDispatchContext(deps);
+    const { beginDispatchCall } = buildCallStart(deps, {
+        resolveTool,
+        peelCall,
+        programOfCall,
+        turnStampOf,
+        emitToolStart,
+    });
+    return {
+        resourceFactsOf,
+        admitFindingsBatch,
+        resolveTool,
+        runFactsOf,
+        prepareDispatchContext,
+        beginDispatchCall,
+        permissionChecker,
+        unmountedRules,
+        warnUnmountedToolPeriod,
+        decisionLedger,
+        assertComponentDeliverable,
+        fileScript,
+        programOfCall,
+        argumentRefusal,
+        parkedNow,
+        historyForCheckIn,
+        resolveWantsAtDispatch,
+        credentialsIn,
+        onAuthorizationRequired,
+        dispatchRoster,
+        noteOffWire,
+        hasCredentials,
+        toolArtifacts,
+        toolProgress,
+        sessionContext,
+        toolDispatchCtx,
+        searchFunnel,
+        takeCodeRun,
+        warnEffect,
+        declareCoverage,
+        declareSemantics,
+        refuseOverCeiling,
+        judgeColumns,
+        endCall,
+        declareRaisedAbsence,
+        noteSkillRefusal,
+        frameworkSkipStepAnswered,
+        applySkipStep,
+        applyPresent,
+        afterMoment,
+        placeResults,
+        noticeEmptyLookup,
+        capResults,
+        emitToolEnd,
+        readSkillStepIntroFor,
+        applyStepReturn,
+        applyToolEffects,
+        repeatLedgers,
+        noteOptionsFor,
+        turnStampOf,
+        emitTransitionConflict,
+        heldAnswer,
+        peelCall,
+        resumeAsk,
+        resumeCheckIn,
+        resumeCredential,
+        resumePlain,
+    };
+}
+//# sourceMappingURL=compose.js.map

package/dist/esm/core/agent/stages/toolCalls/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/compose.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AAC/E,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AACxE,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACjF,OAAO,EAAE,6BAA6B,EAAE,MAAM,sCAAsC,CAAC;AACrF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,oGAAoG;AACpG,MAAM,UAAU,yBAAyB,CAAC,IAA0B;IAClE,MAAM,EACJ,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,iBAAiB,GAClB,GAAG,IAAI,CAAC;IACT,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,SAAS,CAAC;IAC9D,oFAAoF;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,qBAAqB,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC9E,MAAM,eAAe,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;IAChE,4EAA4E;IAC5E,6EAA6E;IAC7E,MAAM,uBAAuB,GAC3B,IAAI,CAAC,uBAAuB,IAAI,OAAO,CAAC;IAC1C,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,IAAI,8BAA8B,EAAE,CAAC;IACpF,MAAM,cAAc,GAAG,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC;IAC7D,MAAM,EAAE,aAAa,EAAE,GAAG,8BAA8B,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;IACpF,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,aAAa,GAAG,mBAAmB,EAAE,CAAC;IAC5C,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAC/E,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,2BAA2B,CAAC,IAAI,EAAE;QAClF,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,4BAA4B,CAAC,IAAI,CAAC,CAAC;IAChE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,GAC/E,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAElG;;;;;;;;OAQG;IACH,MAAM,qBAAqB,GAA6B,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAE/F;;;;;;;;;;;;OAYG;IACH;;;;;OAKG;IACH;;;;OAIG;IACH,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,4BAA4B,CAC3F,IAAI,EACJ;QACE,qBAAqB;KACtB,CACF,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,GACjF,0BAA0B,CAAC,IAAI,EAAE;QAC/B,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,WAAW;YACb,OAAO,WAAW,CAAC;QACrB,CAAC;KACF,CAAC,CAAC;IAEL;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,EAAE,YAAY,EAAE,GAAG,2BAA2B,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,0BAA0B,CAAC,IAAI,EAAE;QACtF,UAAU;QACV,cAAc;QACd,aAAa;QACb,cAAc;QACd,YAAY;KACb,CAAC,CAAC;IACH,MAAM,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,YAAY,EAAE,YAAY,EAAE,GACtF,4BAA4B,CAAC,IAAI,EAAE;QACjC,UAAU;QACV,aAAa;QACb,IAAI,UAAU;YACZ,OAAO,UAAU,CAAC;QACpB,CAAC;KACF,CAAC,CAAC;IACL,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,6BAA6B,CAAC,IAAI,EAAE;QAC7F,UAAU;QACV,IAAI,WAAW;YACb,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,aAAa;QACb,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,aAAa;QACb,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,iBAAiB,CAAC;QACpC,cAAc;QACd,GAAG,CAAC,oBAAoB,KAAK,SAAS,IAAI,EAAE,oBAAoB,EAAE,CAAC;QACnE,GAAG,CAAC,iBAAiB,KAAK,SAAS,IAAI,EAAE,iBAAiB,EAAE,CAAC;QAC7D,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;QACjD,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,CAAC;QACrD,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC;IACH,MAAM,EACJ,UAAU,EACV,cAAc,EACd,uBAAuB,EACvB,WAAW,EACX,aAAa,EACb,QAAQ,EACR,cAAc,EACd,WAAW,EACX,yBAAyB,EACzB,SAAS,EACT,cAAc,GACf,GAAG,0BAA0B,CAAC,IAAI,EAAE;QACnC,WAAW;QACX,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,iBAAiB;YACnB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,cAAc;QACd,oBAAoB;QACpB,iBAAiB;KAClB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,2EAA2E;IAC3E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,0EAA0E;IAC1E,+CAA+C;IAC/C,MAAM,iBAAiB,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjG,MAAM,EAAE,WAAW,EAAE,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;IAC5D,MAAM,EAAE,2BAA2B,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE;QACnE,cAAc;QACd,eAAe;QACf,WAAW;QACX,sBAAsB;QACtB,aAAa;QACb,cAAc;QACd,aAAa;QACb,YAAY;QACZ,cAAc;QACd,eAAe;QACf,OAAO;QACP,YAAY;QACZ,UAAU;QACV,aAAa;QACb,cAAc;QACd,WAAW;QACX,eAAe;QACf,gBAAgB;QAChB,iBAAiB;QACjB,YAAY;QACZ,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,EAAE,SAAS,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE;QACzC,cAAc;QACd,WAAW;QACX,cAAc;QACd,iBAAiB;QACjB,2BAA2B;QAC3B,yBAAyB;QACzB,aAAa;QACb,YAAY;QACZ,WAAW;QACX,YAAY;QACZ,UAAU;QACV,eAAe;QACf,gBAAgB;QAChB,sBAAsB;QACtB,WAAW;QACX,WAAW;QACX,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,OAAO;KACR,CAAC,CAAC;IACH,MAAM,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,IAAI,EAAE;QACjD,cAAc;QACd,WAAW;QACX,2BAA2B;QAC3B,WAAW;QACX,YAAY;QACZ,UAAU;QACV,eAAe;QACf,gBAAgB;QAChB,sBAAsB;QACtB,WAAW;QACX,WAAW;QACX,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,OAAO;KACR,CAAC,CAAC;IACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,qBAAqB,CAAC,IAAI,EAAE;QACvD,WAAW;QACX,2BAA2B;QAC3B,WAAW;QACX,YAAY;QACZ,UAAU;QACV,eAAe;QACf,gBAAgB;QAChB,sBAAsB;QACtB,WAAW;QACX,WAAW;QACX,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,OAAO;KACR,CAAC,CAAC;IACH,MAAM,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,EAAE;QAC7C,UAAU;QACV,aAAa;QACb,WAAW;QACX,YAAY;QACZ,UAAU;QACV,eAAe;QACf,WAAW;QACX,WAAW;QACX,iBAAiB;QACjB,WAAW;QACX,cAAc;QACd,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,EAAE,kBAAkB,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;IAEvF,MAAM,EAAE,sBAAsB,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAE9D,MAAM,EAAE,iBAAiB,EAAE,GAAG,cAAc,CAAC,IAAI,EAAE;QACjD,WAAW;QACX,QAAQ;QACR,aAAa;QACb,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IACH,OAAO;QACL,eAAe;QACf,kBAAkB;QAClB,WAAW;QACX,UAAU;QACV,sBAAsB;QACtB,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,uBAAuB;QACvB,cAAc;QACd,0BAA0B;QAC1B,UAAU;QACV,aAAa;QACb,eAAe;QACf,SAAS;QACT,iBAAiB;QACjB,sBAAsB;QACtB,aAAa;QACb,uBAAuB;QACvB,cAAc;QACd,WAAW;QACX,cAAc;QACd,aAAa;QACb,YAAY;QACZ,cAAc;QACd,eAAe;QACf,YAAY;QACZ,WAAW;QACX,UAAU;QACV,eAAe;QACf,gBAAgB;QAChB,iBAAiB;QACjB,YAAY;QACZ,OAAO;QACP,oBAAoB;QACpB,gBAAgB;QAChB,yBAAyB;QACzB,aAAa;QACb,YAAY;QACZ,WAAW;QACX,YAAY;QACZ,iBAAiB;QACjB,UAAU;QACV,WAAW;QACX,qBAAqB;QACrB,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,WAAW;QACX,sBAAsB;QACtB,UAAU;QACV,QAAQ;QACR,SAAS;QACT,aAAa;QACb,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC"}