agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/stages/toolCalls/observation/observationsOperations.js

@@ -0,0 +1,57 @@
+import { frozenView, frozenProjectionOf } from '../../../../../lib/frozenCopy.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+import { startToolCall, toolOutcomeOf, appendToolCall, } from '../../../../../answer-validation/toolLedger.js';
+import { settleNegativeCall, captureNegativeRefusal } from '../../../negativeClaims/capture.js';
+/** Compose the existing observations callbacks once for this handler. */
+export function buildToolObservationsOperations(deps) {
+    /** `emitToolEnd`'s twin: the call is open in the ledger until its `tool_end` lands. */
+    const emitToolStart = (scope, payload) => {
+        // A listener sees the call's frozen copy — the dispatch loop's shared one
+        // when it hands that over — never the arguments the tool runs with: one
+        // that set `amount = 9000` used to refund 9000. Arguments no copy can be
+        // made of are carried as a frozen, detached projection — what JSON writes
+        // of them — never as their live objects.
+        const args = frozenView(payload.args) ?? frozenProjectionOf(payload.args);
+        typedEmit(scope, 'agentfootprint.stream.tool_start', { ...payload, args });
+        const ledger = deps.toolCallLedger;
+        if (ledger === undefined)
+            return;
+        const prior = scope.toolCallLedger;
+        const next = startToolCall(prior, payload.toolCallId, ledger.maxCalls);
+        if (next !== prior)
+            scope.toolCallLedger = next;
+    };
+    /**
+     * THE one door for a `stream.tool_end` bracket in this handler. Every
+     * dispatch path here closes a call through it, so the run's tool-call ledger (when `answerValidation` keeps
+     * one) lists exactly the brackets the stream reported — never arguments,
+     * never results. `ran` is whether the tool's own code ran: a call a person
+     * declined or a rule refused without an `error` is listed `not-run`, never `ok`.
+     */
+    const emitToolEnd = (scope, toolName, payload, ran, declaredStatus = payload.status, negativeResultId, refusalArgs) => {
+        if (deps.negativeClaimsArmed === true) {
+            settleNegativeCall(scope, negativeResultId, toolOutcomeOf(payload, ran));
+            if (!ran ||
+                payload.error ||
+                ['invalid', 'denied', 'failure'].includes(declaredStatus ?? '')) {
+                captureNegativeRefusal(scope, toolName, payload.result, refusalArgs);
+                if (payload.modelResult !== undefined)
+                    captureNegativeRefusal(scope, toolName, payload.modelResult, refusalArgs);
+            }
+        }
+        typedEmit(scope, 'agentfootprint.stream.tool_end', payload);
+        const ledger = deps.toolCallLedger;
+        if (ledger === undefined)
+            return;
+        const prior = scope.toolCallLedger;
+        const next = appendToolCall(prior, { name: toolName, callId: payload.toolCallId, outcome: toolOutcomeOf(payload, ran) }, ledger.maxCalls, 
+        // A tool that declared `pending` returned before its own work settled —
+        // read off what the TOOL declared, before a ceiling or contract refusal
+        // rewrote the bracket's status.
+        declaredStatus !== 'pending' && payload.status !== 'pending');
+        if (next !== prior)
+            scope.toolCallLedger = next;
+    };
+    return { emitToolStart, emitToolEnd };
+}
+//# sourceMappingURL=observationsOperations.js.map

package/dist/esm/core/agent/stages/toolCalls/observation/observationsOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observationsOperations.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/observation/observationsOperations.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AACvE,OAAO,EACL,aAAa,EACb,aAAa,EACb,cAAc,GACf,MAAM,gDAAgD,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAGhG,yEAAyE;AACzE,MAAM,UAAU,+BAA+B,CAC7C,IAA0E;IAE1E,uFAAuF;IACvF,MAAM,aAAa,GAAG,CACpB,KAA6B,EAC7B,OAA8E,EACxE,EAAE;QACR,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,yCAAyC;QACzC,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1E,SAAS,CAAC,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,IAAI,IAAI,KAAK,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;IAClD,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,WAAW,GAAG,CAClB,KAA6B,EAC7B,QAAgB,EAChB,OAA4E,EAC5E,GAAY,EACZ,iBAAqC,OAAO,CAAC,MAAM,EACnD,gBAAyB,EACzB,WAA+C,EACzC,EAAE;QACR,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACtC,kBAAkB,CAAC,KAAK,EAAE,gBAAgB,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACzE,IACE,CAAC,GAAG;gBACJ,OAAO,CAAC,KAAK;gBACb,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,cAAc,IAAI,EAAE,CAAC,EAC/D,CAAC;gBACD,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACrE,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;oBACnC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,gCAAgC,EAAE,OAAO,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC;QACnC,MAAM,IAAI,GAAG,cAAc,CACzB,KAAK,EACL,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,EACpF,MAAM,CAAC,QAAQ;QACf,wEAAwE;QACxE,wEAAwE;QACxE,gCAAgC;QAChC,cAAc,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAC7D,CAAC;QACF,IAAI,IAAI,KAAK,KAAK;YAAE,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;IAClD,CAAC,CAAC;IAEF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/observation/progressOperations.d.ts

@@ -0,0 +1,7 @@
+import type { ToolProgressOperations } from '../contracts/operations/progress.js';
+interface ToolProgressOperationsLinks {
+    readonly progressWarned: Set<string>;
+}
+/** Compose the existing progress callbacks once for this handler. */
+export declare function buildToolProgressOperations(links: ToolProgressOperationsLinks): ToolProgressOperations;
+export {};

package/dist/esm/core/agent/stages/toolCalls/observation/progressOperations.js

@@ -0,0 +1,28 @@
+import { isDevMode } from 'footprintjs';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+/** Compose the existing progress callbacks once for this handler. */
+export function buildToolProgressOperations(links) {
+    const toolProgress = (scope, call) => ({
+        progress: (payload) => {
+            try {
+                typedEmit(scope, 'agentfootprint.stream.tool_progress', {
+                    toolCallId: call.toolCallId,
+                    toolName: call.toolName,
+                    iteration: call.iteration,
+                    payload,
+                });
+            }
+            catch (err) {
+                if (isDevMode() && !links.progressWarned.has(call.toolName)) {
+                    links.progressWarned.add(call.toolName);
+                    // eslint-disable-next-line no-console
+                    console.warn(`[agentfootprint] tool '${call.toolName}': ctx.progress could not file a report ` +
+                        `(${err instanceof Error ? err.message : String(err)}). The call itself is ` +
+                        'unaffected — progress is telemetry, and a dropped report never fails a tool.');
+                }
+            }
+        },
+    });
+    return { toolProgress };
+}
+//# sourceMappingURL=progressOperations.js.map

package/dist/esm/core/agent/stages/toolCalls/observation/progressOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"progressOperations.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/observation/progressOperations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,SAAS,EAAE,MAAM,aAAa,CAAC;AAGzD,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAOvE,qEAAqE;AACrE,MAAM,UAAU,2BAA2B,CACzC,KAAkC;IAElC,MAAM,YAAY,GAAG,CACnB,KAA6B,EAC7B,IAIC,EACuC,EAAE,CAAC,CAAC;QAC5C,QAAQ,EAAE,CAAC,OAAgB,EAAQ,EAAE;YACnC,IAAI,CAAC;gBACH,SAAS,CAAC,KAAK,EAAE,qCAAqC,EAAE;oBACtD,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5D,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACxC,sCAAsC;oBACtC,OAAO,CAAC,IAAI,CACV,0BAA0B,IAAI,CAAC,QAAQ,0CAA0C;wBAC/E,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB;wBAC5E,8EAA8E,CACjF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,YAAY,EAAE,CAAC;AAC1B,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/resume/ask.d.ts

@@ -0,0 +1,44 @@
+import type { ToolResourcesOperations } from '../contracts/operations/resources.js';
+import { type DecisionLedger } from '../../../../consentRequest.js';
+import { buildToolResolver } from '../../toolResolver.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ResumeConsentFrame } from '../contracts/resumeFrames.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+import type { ToolSettlementOperations } from '../contracts/operations/settlement.js';
+import type { ResumedInvocation } from '../contracts/operations/resumedInvocation.js';
+import type { ToolStepsOperations } from '../contracts/operations/steps.js';
+import type { ToolArtifactsOperations } from '../contracts/operations/artifacts.js';
+import type { ToolMiddlewareOperations } from '../contracts/operations/middleware.js';
+import type { ToolLimitsOperations } from '../contracts/operations/limits.js';
+import type { ToolEffectsOperations } from '../contracts/operations/effects.js';
+import type { ToolScriptsOperations } from '../contracts/operations/scripts.js';
+import type { ToolObservationsOperations } from '../contracts/operations/observations.js';
+interface ResumeAskLinks {
+    readonly endCall: ToolResourcesOperations['endCall'];
+    readonly decisionLedger: DecisionLedger;
+    readonly resolveTool: ReturnType<typeof buildToolResolver>;
+    readonly unmountedRules: ToolCatalogOperations['unmountedRules'];
+    readonly historyForCheckIn: ToolSettlementOperations['historyForCheckIn'];
+    readonly resolveCredentialAndExecute: ResumedInvocation['resolveCredentialAndExecute'];
+    readonly frameworkSkipStepAnswered: ToolCatalogOperations['frameworkSkipStepAnswered'];
+    readonly applySkipStep: ToolStepsOperations['applySkipStep'];
+    readonly applyPresent: ToolArtifactsOperations['applyPresent'];
+    readonly afterMoment: ToolMiddlewareOperations['afterMoment'];
+    readonly placeResults: ToolArtifactsOperations['placeResults'];
+    readonly capResults: ToolLimitsOperations['capResults'];
+    readonly applyStepReturn: ToolStepsOperations['applyStepReturn'];
+    readonly applyToolEffects: ToolEffectsOperations['applyToolEffects'];
+    readonly emitTransitionConflict: ToolEffectsOperations['emitTransitionConflict'];
+    readonly settleBatch: ToolSettlementOperations['settleBatch'];
+    readonly turnStampOf: ToolCatalogOperations['turnStampOf'];
+    readonly fileResumedScript: ToolScriptsOperations['fileResumedScript'];
+    readonly emitToolEnd: ToolObservationsOperations['emitToolEnd'];
+    readonly bracketSettled: ToolSettlementOperations['bracketSettled'];
+}
+/** Compose only the existing ask resume door and its original landing order. */
+export declare function buildResumeAsk(deps: Pick<ToolCallsHandlerDeps, 'resources' | 'inputsLayer' | 'toolMiddleware' | 'artifactStore' | 'negativeClaimsArmed' | 'stepPlanFor' | 'findings' | 'findingsJudge'>, links: ResumeAskLinks): {
+    resumeAsk: (scope: TypedScope<AgentState>, frame: ResumeConsentFrame) => Promise<void>;
+};
+export {};

package/dist/esm/core/agent/stages/toolCalls/resume/ask.js

@@ -0,0 +1,400 @@
+import { spendDecision, runsAsAsked, gatedCallOf, } from '../../../../consentRequest.js';
+import { boundArgsOf, changedAfterApproval, rewrittenAfterApproval } from '../access/bindings.js';
+import { declinedResult, shouldCheckIn } from '../../../../checkin.js';
+import { recordDecisions } from '../../../middleware/ledger.js';
+import { runToolChain } from '../../../../../tools/runChain.js';
+import { PRESENT_TOOL_NAME } from '../../../../../artifacts/present.js';
+import { safeStringify } from '../../../validators.js';
+import { serveNegativeHandle } from '../../../negativeClaims/capture.js';
+import { appendBatchResult } from '../batch/settle.js';
+import { judgeLanded } from '../evidence/judgeLanded.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+/** Compose only the existing ask resume door and its original landing order. */
+export function buildResumeAsk(deps, links) {
+    const resumeAsk = async (scope, frame) => {
+        const { consentDecision, runSignal, toolName, toolCallId, startMs } = frame;
+        const iteration = scope.iteration;
+        // What the rest of the chain is handed: a detached copy of the
+        // approved arguments (`boundArgsOf`). The arguments that come back are
+        // held to the REQUEST, never to this copy — a link that edits it in
+        // place edits the copy — and the tool runs on another fresh copy.
+        const args = boundArgsOf(scope, 'pausedAskArgs');
+        const askIndex = (scope.pausedAskIndex ?? 0);
+        const askedBy = (scope.pausedAskMiddleware ?? 'middleware');
+        // The registered component that COLLECTED this decision (9.24.0),
+        // written at pause time only when the ask carried one — the ledger
+        // rows below then say which surface the person answered through.
+        const answeredVia = scope.pausedComponentId;
+        const decision = consentDecision;
+        // Used from here — so spent here, before any row or the tool: a second
+        // resume presenting it is refused ('already-answered').
+        await spendDecision(links.decisionLedger, decision, 'ask', runSignal, deps.resources?.answer);
+        let result;
+        /** What the model reads. Differs from `result` only when a rule at the
+         *  after-tool moment transformed or withheld it. */
+        let modelResult;
+        let error;
+        /** The call REALLY ran, clean — the step-advance eligibility this
+         *  path knows about itself (a decline or a chain-deny never ran). */
+        let stepToolRan = false;
+        /** The effects envelope the resumed call returned (9.19.0). */
+        let resumeEnvelope;
+        /** The tool ran (any outcome) — the judge's gate (9.104.0). */
+        let toolRan = false;
+        let negativeResultId;
+        /** What the approved call's `execute` saw — its script row reads it. */
+        const scriptSeen = {};
+        if (!decision.approved) {
+            result = declinedResult(decision.note);
+            recordDecisions(scope, [
+                {
+                    middleware: askedBy,
+                    moment: 'before-tool',
+                    at: 'tool',
+                    toolName,
+                    toolCallId,
+                    iteration,
+                    outcome: 'deny',
+                    changed: false,
+                    why: `declined by ${decision.by}${decision.note ? `: ${decision.note}` : ''}`,
+                    ...(answeredVia !== undefined && { componentId: answeredVia }),
+                },
+            ]);
+        }
+        else {
+            recordDecisions(scope, [
+                {
+                    middleware: askedBy,
+                    moment: 'before-tool',
+                    at: 'tool',
+                    toolName,
+                    toolCallId,
+                    iteration,
+                    outcome: 'allow',
+                    changed: false,
+                    why: `approved by ${decision.by}${decision.note ? `: ${decision.note}` : ''}`,
+                    ...(answeredVia !== undefined && { componentId: answeredVia }),
+                },
+            ]);
+            // Continue the chain from the link AFTER the one that asked. Its
+            // decision is already on the checkpoint; re-running it would ask the
+            // same question twice and file a duplicate row.
+            //
+            // `askPolicy: 'refuse'` because footprintjs's `PausableHandler.resume`
+            // returns void — a resumed dispatch has no second checkpoint to give.
+            // A link further down the chain that also wants a person gets a named,
+            // model-visible refusal and the tool does NOT run. That is the same
+            // rule already applied to a tool that tries to pause during an
+            // approved check-in resume: at most one human question per resume.
+            // Resolved BEFORE the chain runs, not after, because the links that
+            // continue here must see the same `toolSource` the links before the
+            // ask saw. A chain that changed its mind about where a tool came from
+            // halfway through one dispatch would be worse than not knowing.
+            //
+            // Resolved against the party the CHECKPOINT carries (9.92.0): a
+            // fresh instance has an empty served record and Compose has not
+            // re-run, so without it the build-time map's first holder answered.
+            const resolved = links.resolveTool(toolName, scope.pausedToolParty);
+            const tool = resolved.tool;
+            // ── THE INPUTS LAYER'S REFUSALS, re-applied at this door (honesty
+            // layer 2). The batch loop decides them BEFORE the chain, so a call
+            // it refuses never reaches an ask. This door still asks both
+            // questions itself: a checkpoint written before they moved ahead of
+            // the chain, or resumed on an agent built without the layer, must
+            // not run a ruled tool unruled because a person approved the ask.
+            // Refused here, the rest of the chain is not walked and the tool
+            // does not run — the argument-refusal shape the loop lands.
+            const inputs = deps.inputsLayer === true ? await import('../../../arguments/dispatch.js') : undefined;
+            const unmounted = links.unmountedRules(tool, toolName);
+            const rulesRefusal = inputs?.resolutionsFor(scope, iteration).get(toolCallId)?.refused ??
+                (unmounted === undefined ? undefined : await unmounted);
+            if (rulesRefusal !== undefined) {
+                error = true;
+                result = rulesRefusal;
+            }
+            else {
+                const rest = await runToolChain(deps.toolMiddleware ?? [], {
+                    toolName,
+                    ...(tool?.source !== undefined && { toolSource: tool.source }),
+                    toolCallId,
+                    iteration,
+                    args,
+                    history: [...scope.history],
+                    startIndex: askIndex + 1,
+                    askPolicy: 'refuse',
+                });
+                recordDecisions(scope, rest.decisions);
+                // The approval covers the arguments the person was shown. The ones
+                // the rest of the chain hands back must re-derive the paused
+                // request's id (`runsAsAsked`) — held to the request itself, never
+                // to the copy the links were handed. Any other arguments are not
+                // approved: the call does not run, and the record and the model
+                // are told why ('call-changed').
+                const read = (key) => scope.$getValue(key);
+                const rewrittenBy = rest.kind === 'deny' ||
+                    runsAsAsked(read('pausedRequest'), gatedCallOf(read, 'ask'), rest.args)
+                    ? undefined
+                    : changedAfterApproval(rest.decisions);
+                // The arguments the call runs with: a fresh copy of the approved
+                // ones (equal, by the check above, to what the chain handed back),
+                // so nothing a link still holds can reach the tool.
+                const runArgs = boundArgsOf(scope, 'pausedAskArgs');
+                // Would this tool's OWN consent gate have fired for this call? Asked by
+                // EVALUATING the demand, not by noticing that one was declared (8.13.0).
+                // Before that, any tool carrying a `checkIn` field was refused here even
+                // when its predicate said no — a selective gate (`amount > 1000`) blocked
+                // the £5 refunds it was written to let through, and the refusal claimed a
+                // consent gate would have run when it provably would not have.
+                //
+                // Judged on `runArgs` (what the tool would actually run with) and on
+                // the same history shape the loop's gate uses, so the answer cannot
+                // depend on which door the call arrived through. The predicate is
+                // handed its own frozen copy of them (`shouldCheckIn`), never
+                // `runArgs` itself: a predicate that wrote into its argument used
+                // to change the call the person had approved.
+                const demandTrips = rest.kind !== 'deny' &&
+                    rewrittenBy === undefined &&
+                    tool?.checkIn !== undefined &&
+                    shouldCheckIn(tool.checkIn, runArgs, {
+                        iteration,
+                        toolCallId,
+                        history: links.historyForCheckIn(scope, scope.history),
+                    });
+                if (rest.kind === 'deny') {
+                    result = rest.reason;
+                }
+                else if (rewrittenBy !== undefined) {
+                    error = true;
+                    result = rewrittenAfterApproval(toolName, rewrittenBy);
+                    recordDecisions(scope, [
+                        {
+                            middleware: askedBy,
+                            moment: 'before-tool',
+                            at: 'tool',
+                            toolName,
+                            toolCallId,
+                            iteration,
+                            outcome: 'deny',
+                            changed: false,
+                            why: `the approval covers the arguments the person was shown; ${rewrittenBy}, ` +
+                                `so the call was not run (call-changed)`,
+                        },
+                    ]);
+                }
+                else if (demandTrips) {
+                    // The one-question rule, from the other direction: this tool's own
+                    // consent gate really does demand a person for THESE arguments, and
+                    // there is no checkpoint left to ask with.
+                    //
+                    // The two gates ask DIFFERENT questions, which is why an approval of
+                    // one is not an answer to the other. A middleware `ask` carries the
+                    // rule's own free-text question; a check-in carries the TOOL's demand
+                    // with the evidence pack attached — `willDo`, what the run read, what
+                    // drove the choice, the trail — none of which the person who approved
+                    // the ask ever saw. Letting the approval satisfy both would file a
+                    // `checkin.decision` for a question nobody was asked. Governance never
+                    // silently invents a decision, for the same reason it never silently
+                    // drops one.
+                    error = true;
+                    // A past fact about the resumed call, not a forecast about the
+                    // turn (9.86.1): "cannot be retried this turn … Answer without it,
+                    // or finish" was a prediction plus a standing order on a result
+                    // that is re-read on every later call.
+                    result =
+                        `tool '${toolName}' was not executed on that call, and the resumed dispatch had ` +
+                            `no second checkpoint to retry it on: it declares its own checkIn consent gate, ` +
+                            `and that gate tripped for those arguments. (To ` +
+                            `the agent's author: the middleware '${askedBy}' and the tool's checkIn ask ` +
+                            `different questions — one is the rule's, one is the tool's with the evidence ` +
+                            `pack attached — so approving one is not answering the other. Keep one gate for ` +
+                            `this tool: drop the tool's \`checkIn\`, or let \`onToolCall\` return allow() for ` +
+                            `tools that declare their own.)`;
+                }
+                else {
+                    const env = scope.$getEnv();
+                    const dispatched = await links.resolveCredentialAndExecute(scope, resolved, toolName, runArgs, toolCallId, iteration, env, 'ask', scriptSeen);
+                    negativeResultId = dispatched.negativeResultId;
+                    result = dispatched.result;
+                    error = dispatched.error;
+                    toolRan = dispatched.executed === true;
+                    // Held to the request at the last moment and found changed: the
+                    // record says so, as for a rewrite the chain handed back.
+                    if (dispatched.callChanged === true) {
+                        recordDecisions(scope, [
+                            {
+                                middleware: askedBy,
+                                moment: 'before-tool',
+                                at: 'tool',
+                                toolName,
+                                toolCallId,
+                                iteration,
+                                outcome: 'deny',
+                                changed: false,
+                                why: 'the approval covers the arguments the person was shown; they changed ' +
+                                    'before the call could run, so the call was not run (call-changed)',
+                            },
+                        ]);
+                    }
+                    // A ceiling-refused call RAN but must not advance a step (9.20.0);
+                    // its envelope — status 'invalid' plus any surviving declared
+                    // effects — is still picked up and judged below.
+                    stepToolRan =
+                        dispatched.executed === true && error !== true && dispatched.ceilingRefused !== true;
+                    if (dispatched.executed === true && error !== true) {
+                        resumeEnvelope = dispatched.envelope;
+                    }
+                    // skip_step behind a middleware ask, approved (9.18.0): the
+                    // placeholder just landed — replace it with the authoritative
+                    // sentence BEFORE the chain's last word, the execute loop's
+                    // composition kept.
+                    if (links.frameworkSkipStepAnswered(toolName, tool) && stepToolRan) {
+                        result = links.applySkipStep(scope, { args: runArgs, toolCallId, iteration });
+                    }
+                    // present behind a middleware ask, approved (9.22.0): same
+                    // overwrite the batch loop applies — the snapshot (or refusal)
+                    // replaces the placeholder before the chain's last word. A miss
+                    // is an errored call here too.
+                    if (deps.artifactStore && toolName === PRESENT_TOOL_NAME && stepToolRan) {
+                        const presented = await links.applyPresent(scope, {
+                            args: runArgs,
+                            toolCallId,
+                            iteration,
+                        });
+                        result = presented.text;
+                        if (!presented.ok) {
+                            error = true;
+                            stepToolRan = false;
+                        }
+                    }
+                    // The tool ran on this side of the pause, so the chain gets its
+                    // last word here too — a rule about results cannot be skipped by
+                    // routing a call through a human.
+                    if (dispatched.executed === true) {
+                        modelResult = await links.afterMoment(scope, {
+                            ...(tool && { tool }),
+                            toolName,
+                            toolCallId,
+                            iteration,
+                            args: runArgs,
+                            result,
+                            negativeResultId,
+                            ...(error === true && { error: true }),
+                            history: [...scope.history],
+                            ...(scope.runIdentity && { identity: scope.runIdentity }),
+                            ...(env.signal && { signal: env.signal }),
+                        });
+                    }
+                }
+            }
+        }
+        // `modelResult` is only set where the after-tool moment ran; everywhere
+        // else the two are the same value.
+        if (modelResult === undefined)
+            modelResult = result;
+        // Placement then the truncation net — the batch loop's precedence,
+        // kept on this door (a resumed result is as placeable as an inline
+        // one; `stepToolRan` is exactly "ran clean").
+        const askPlaced = await links.placeResults(scope, { toolName, toolCallId, iteration }, { result, modelResult }, stepToolRan);
+        const askCapped = links.capResults(toolName, askPlaced);
+        modelResult = askCapped.modelResult;
+        let askResultStr = typeof modelResult === 'string' ? modelResult : safeStringify(modelResult);
+        const askToolChars = askResultStr.length;
+        if (deps.negativeClaimsArmed === true)
+            askResultStr = serveNegativeHandle(scope, negativeResultId, askResultStr);
+        // Step boundary (9.18.0) — a result finalized HERE is as final as one
+        // from the batch loop; the answered call advances the pointer before
+        // the push, exactly as it would have inline.
+        if (deps.stepPlanFor && stepToolRan) {
+            askResultStr += links.applyStepReturn(scope, { toolName, toolCallId, iteration });
+        }
+        // Typed tool effects (9.19.0) — a resumed call's envelope is judged
+        // exactly as an inline one's (fresh single-call batch state).
+        if (resumeEnvelope !== undefined) {
+            const askTransition = { losers: [] };
+            askResultStr += links.applyToolEffects(scope, { toolName, toolCallId, iteration }, resumeEnvelope, askTransition);
+            links.emitTransitionConflict(scope, iteration, askTransition);
+        }
+        // The batch settlement (9.113.0): the answered call's result, then the
+        // siblings the pause left un-dispatched, each settled — never run.
+        const askSettlement = links.settleBatch([
+            ...scope.history,
+            {
+                role: 'tool',
+                content: askResultStr,
+                ...(deps.negativeClaimsArmed === true && { toolChars: askToolChars }),
+                toolCallId,
+                toolName,
+                ...(deps.findings === true && !toolRan && { toolResultOrigin: 'not-entered' }),
+            },
+        ], { toolName, toolCallId });
+        const askHistory = askSettlement.history;
+        scope.history = askHistory;
+        scope.lastToolResult = {
+            toolName,
+            result: askResultStr,
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+        };
+        appendBatchResult(scope, {
+            toolName,
+            result: askResultStr,
+            toolCallId,
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+        });
+        await judgeLanded(scope, deps.findingsJudge, toolRan, { toolName, result: askResultStr, toolCallId }, iteration, links.turnStampOf(scope));
+        links.fileResumedScript(scope, {
+            toolName,
+            toolCallId,
+            iteration,
+            carried: args,
+            entered: toolRan,
+            seen: scriptSeen,
+        });
+        links.emitToolEnd(scope, toolName, {
+            toolCallId,
+            result: askCapped.result,
+            durationMs: Date.now() - startMs,
+            ...(error === true && { error: true }),
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+            ...(askCapped.modelResult !== askCapped.result && {
+                modelResult: askCapped.modelResult,
+            }),
+        }, toolRan, undefined, negativeResultId, args);
+        links.bracketSettled(scope, askSettlement);
+        typedEmit(scope, 'agentfootprint.agent.iteration_end', {
+            turnIndex: 0,
+            iterIndex: iteration,
+            // The brackets THIS leg closed: the answered call's, plus one per
+            // settled sibling. The calls before the paused one closed theirs on
+            // the leg that paused, which ended in a checkpoint, not here.
+            toolCallCount: 1 + askSettlement.settled.length,
+            history: askHistory,
+        });
+        if (deps.inputsLayer === true)
+            scope.argumentAsk = undefined;
+        scope.iteration = iteration + 1;
+        await links.endCall(scope);
+        scope.pausedToolCallId = '';
+        scope.pausedToolName = '';
+        scope.pausedToolStartMs = 0;
+        scope.pausedAsk = false;
+        scope.pausedAskArgs = undefined;
+        scope.pausedAskIndex = undefined;
+        scope.pausedAskMiddleware = undefined;
+        scope.pausedAskChain = undefined;
+        // The request was answered — and spent — by this resume.
+        scope.pausedRequest = undefined;
+        // Cleared ONLY when it was set: a later component-less pause in this
+        // run must not inherit this ask's surface, and a run that never
+        // carried one must not gain the key (byte-identical).
+        if (answeredVia !== undefined)
+            scope.pausedComponentId = undefined;
+        // The served party the checkpoint carried is consumed with it (9.92.0);
+        // written back only when it was there, so an older checkpoint's resume
+        // commits exactly what it always did.
+        if (scope.pausedToolParty !== undefined)
+            scope.pausedToolParty = undefined;
+        return;
+    };
+    return { resumeAsk };
+}
+//# sourceMappingURL=ask.js.map

package/dist/esm/core/agent/stages/toolCalls/resume/ask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ask.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/resume/ask.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,aAAa,EACb,WAAW,EACX,WAAW,GACZ,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAClG,OAAO,EAAwB,cAAc,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAG7F,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAEhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAqCvE,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAC5B,IAUC,EACD,KAAqB;IAErB,MAAM,SAAS,GAAG,KAAK,EACrB,KAA6B,EAC7B,KAAyB,EACV,EAAE;QACjB,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAE5E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,+DAA+D;QAC/D,uEAAuE;QACvE,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,CAAW,CAAC;QACvD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,mBAAmB,IAAI,YAAY,CAAW,CAAC;QACtE,kEAAkE;QAClE,mEAAmE;QACnE,iEAAiE;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAuC,CAAC;QAClE,MAAM,QAAQ,GAAoB,eAAe,CAAC;QAClD,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE9F,IAAI,MAAe,CAAC;QACpB;4DACoD;QACpD,IAAI,WAAoB,CAAC;QACzB,IAAI,KAA0B,CAAC;QAC/B;6EACqE;QACrE,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,+DAA+D;QAC/D,IAAI,cAAkD,CAAC;QACvD,+DAA+D;QAC/D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAAoC,CAAC;QACzC,wEAAwE;QACxE,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvC,eAAe,CAAC,KAAK,EAAE;gBACrB;oBACE,UAAU,EAAE,OAAO;oBACnB,MAAM,EAAE,aAAa;oBACrB,EAAE,EAAE,MAAM;oBACV,QAAQ;oBACR,UAAU;oBACV,SAAS;oBACT,OAAO,EAAE,MAAM;oBACf,OAAO,EAAE,KAAK;oBACd,GAAG,EAAE,eAAe,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7E,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;iBAC/D;aACF,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,eAAe,CAAC,KAAK,EAAE;gBACrB;oBACE,UAAU,EAAE,OAAO;oBACnB,MAAM,EAAE,aAAa;oBACrB,EAAE,EAAE,MAAM;oBACV,QAAQ;oBACR,UAAU;oBACV,SAAS;oBACT,OAAO,EAAE,OAAO;oBAChB,OAAO,EAAE,KAAK;oBACd,GAAG,EAAE,eAAe,QAAQ,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7E,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;iBAC/D;aACF,CAAC,CAAC;YACH,iEAAiE;YACjE,qEAAqE;YACrE,gDAAgD;YAChD,EAAE;YACF,uEAAuE;YACvE,sEAAsE;YACtE,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,mEAAmE;YACnE,oEAAoE;YACpE,oEAAoE;YACpE,sEAAsE;YACtE,gEAAgE;YAChE,EAAE;YACF,gEAAgE;YAChE,gEAAgE;YAChE,oEAAoE;YACpE,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAwC,CAAC,CAAC;YAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,mEAAmE;YACnE,oEAAoE;YACpE,6DAA6D;YAC7D,oEAAoE;YACpE,kEAAkE;YAClE,kEAAkE;YAClE,iEAAiE;YACjE,4DAA4D;YAC5D,MAAM,MAAM,GACV,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACvD,MAAM,YAAY,GAChB,MAAM,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,OAAO;gBACjE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC;YAC1D,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM,GAAG,YAAY,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,EAAE;oBACzD,QAAQ;oBACR,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;oBAC9D,UAAU;oBACV,SAAS;oBACT,IAAI;oBACJ,OAAO,EAAE,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;oBACtD,UAAU,EAAE,QAAQ,GAAG,CAAC;oBACxB,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAC;gBACH,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvC,mEAAmE;gBACnE,6DAA6D;gBAC7D,mEAAmE;gBACnE,iEAAiE;gBACjE,gEAAgE;gBAChE,iCAAiC;gBACjC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC5D,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,MAAM;oBACpB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;oBACrE,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC3C,iEAAiE;gBACjE,mEAAmE;gBACnE,oDAAoD;gBACpD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;gBACpD,wEAAwE;gBACxE,yEAAyE;gBACzE,yEAAyE;gBACzE,0EAA0E;gBAC1E,0EAA0E;gBAC1E,+DAA+D;gBAC/D,EAAE;gBACF,qEAAqE;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,8DAA8D;gBAC9D,kEAAkE;gBAClE,8CAA8C;gBAC9C,MAAM,WAAW,GACf,IAAI,CAAC,IAAI,KAAK,MAAM;oBACpB,WAAW,KAAK,SAAS;oBACzB,IAAI,EAAE,OAAO,KAAK,SAAS;oBAC3B,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE;wBACnC,SAAS;wBACT,UAAU;wBACV,OAAO,EAAE,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,OAAgC,CAAC;qBAChF,CAAC,CAAC;gBACL,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBACzB,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBACvB,CAAC;qBAAM,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBACrC,KAAK,GAAG,IAAI,CAAC;oBACb,MAAM,GAAG,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;oBACvD,eAAe,CAAC,KAAK,EAAE;wBACrB;4BACE,UAAU,EAAE,OAAO;4BACnB,MAAM,EAAE,aAAa;4BACrB,EAAE,EAAE,MAAM;4BACV,QAAQ;4BACR,UAAU;4BACV,SAAS;4BACT,OAAO,EAAE,MAAM;4BACf,OAAO,EAAE,KAAK;4BACd,GAAG,EACD,2DAA2D,WAAW,IAAI;gCAC1E,wCAAwC;yBAC3C;qBACF,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,mEAAmE;oBACnE,oEAAoE;oBACpE,2CAA2C;oBAC3C,EAAE;oBACF,qEAAqE;oBACrE,oEAAoE;oBACpE,sEAAsE;oBACtE,sEAAsE;oBACtE,sEAAsE;oBACtE,mEAAmE;oBACnE,uEAAuE;oBACvE,qEAAqE;oBACrE,aAAa;oBACb,KAAK,GAAG,IAAI,CAAC;oBACb,+DAA+D;oBAC/D,mEAAmE;oBACnE,gEAAgE;oBAChE,uCAAuC;oBACvC,MAAM;wBACJ,SAAS,QAAQ,gEAAgE;4BACjF,iFAAiF;4BACjF,iDAAiD;4BACjD,uCAAuC,OAAO,+BAA+B;4BAC7E,+EAA+E;4BAC/E,iFAAiF;4BACjF,mFAAmF;4BACnF,gCAAgC,CAAC;gBACrC,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACxD,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,UAAU,EACV,SAAS,EACT,GAAG,EACH,KAAK,EACL,UAAU,CACX,CAAC;oBACF,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;oBAC/C,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;oBAC3B,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;oBACzB,OAAO,GAAG,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC;oBACvC,gEAAgE;oBAChE,0DAA0D;oBAC1D,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;wBACpC,eAAe,CAAC,KAAK,EAAE;4BACrB;gCACE,UAAU,EAAE,OAAO;gCACnB,MAAM,EAAE,aAAa;gCACrB,EAAE,EAAE,MAAM;gCACV,QAAQ;gCACR,UAAU;gCACV,SAAS;gCACT,OAAO,EAAE,MAAM;gCACf,OAAO,EAAE,KAAK;gCACd,GAAG,EACD,uEAAuE;oCACvE,mEAAmE;6BACtE;yBACF,CAAC,CAAC;oBACL,CAAC;oBACD,mEAAmE;oBACnE,8DAA8D;oBAC9D,iDAAiD;oBACjD,WAAW;wBACT,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,CAAC;oBACvF,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnD,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;oBACvC,CAAC;oBACD,4DAA4D;oBAC5D,8DAA8D;oBAC9D,4DAA4D;oBAC5D,oBAAoB;oBACpB,IAAI,KAAK,CAAC,yBAAyB,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC;wBACnE,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;oBAChF,CAAC;oBACD,2DAA2D;oBAC3D,+DAA+D;oBAC/D,gEAAgE;oBAChE,+BAA+B;oBAC/B,IAAI,IAAI,CAAC,aAAa,IAAI,QAAQ,KAAK,iBAAiB,IAAI,WAAW,EAAE,CAAC;wBACxE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,KAAK,EAAE;4BAChD,IAAI,EAAE,OAAO;4BACb,UAAU;4BACV,SAAS;yBACV,CAAC,CAAC;wBACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;wBACxB,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;4BAClB,KAAK,GAAG,IAAI,CAAC;4BACb,WAAW,GAAG,KAAK,CAAC;wBACtB,CAAC;oBACH,CAAC;oBACD,gEAAgE;oBAChE,iEAAiE;oBACjE,kCAAkC;oBAClC,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;wBACjC,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE;4BAC3C,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;4BACrB,QAAQ;4BACR,UAAU;4BACV,SAAS;4BACT,IAAI,EAAE,OAAO;4BACb,MAAM;4BACN,gBAAgB;4BAChB,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;4BACtC,OAAO,EAAE,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;4BACtD,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;4BACzD,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;yBAC1C,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,mCAAmC;QACnC,IAAI,WAAW,KAAK,SAAS;YAAE,WAAW,GAAG,MAAM,CAAC;QACpD,mEAAmE;QACnE,mEAAmE;QACnE,8CAA8C;QAC9C,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CACxC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,WAAW,CACZ,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACxD,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;QACpC,IAAI,YAAY,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC9F,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC;QACzC,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;YACnC,YAAY,GAAG,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC5E,sEAAsE;QACtE,qEAAqE;QACrE,6CAA6C;QAC7C,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;YACpC,YAAY,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,oEAAoE;QACpE,8DAA8D;QAC9D,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,aAAa,GAAyB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC3D,YAAY,IAAI,KAAK,CAAC,gBAAgB,CACpC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,cAAc,EACd,aAAa,CACd,CAAC;YACF,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAChE,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,aAAa,GAAG,KAAK,CAAC,WAAW,CACrC;YACE,GAAI,KAAK,CAAC,OAAiC;YAC3C;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,YAAY;gBACrB,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;gBACrE,UAAU;gBACV,QAAQ;gBACR,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,gBAAgB,EAAE,aAAsB,EAAE,CAAC;aACxF;SACF,EACD,EAAE,QAAQ,EAAE,UAAU,EAAE,CACzB,CAAC;QACF,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC;QACzC,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;QAC3B,KAAK,CAAC,cAAc,GAAG;YACrB,QAAQ;YACR,MAAM,EAAE,YAAY;YACpB,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;SAC/E,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE;YACvB,QAAQ;YACR,MAAM,EAAE,YAAY;YACpB,UAAU;YACV,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,WAAW,CACf,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,OAAO,EACP,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,EAC9C,SAAS,EACT,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CACzB,CAAC;QACF,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE;YAC7B,QAAQ;YACR,UAAU;YACV,SAAS;YACT,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,CACf,KAAK,EACL,QAAQ,EACR;YACE,UAAU;YACV,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;YAC9E,GAAG,CAAC,SAAS,CAAC,WAAW,KAAK,SAAS,CAAC,MAAM,IAAI;gBAChD,WAAW,EAAE,SAAS,CAAC,WAAW;aACnC,CAAC;SACH,EACD,OAAO,EACP,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QACF,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QAC3C,SAAS,CAAC,KAAK,EAAE,oCAAoC,EAAE;YACrD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,kEAAkE;YAClE,oEAAoE;YACpE,8DAA8D;YAC9D,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM;YAC/C,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7D,KAAK,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC5B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC1B,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;QACjC,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACtC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;QACjC,yDAAyD;QACzD,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,qEAAqE;QACrE,gEAAgE;QAChE,sDAAsD;QACtD,IAAI,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,sCAAsC;QACtC,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;QAC3E,OAAO;IACT,CAAC,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/resume/checkIn.d.ts

@@ -0,0 +1,39 @@
+import type { ToolResourcesOperations } from '../contracts/operations/resources.js';
+import { type DecisionLedger } from '../../../../consentRequest.js';
+import { buildToolResolver } from '../../toolResolver.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ResumeConsentFrame } from '../contracts/resumeFrames.js';
+import type { ResumedInvocation } from '../contracts/operations/resumedInvocation.js';
+import type { ToolMiddlewareOperations } from '../contracts/operations/middleware.js';
+import type { ToolArtifactsOperations } from '../contracts/operations/artifacts.js';
+import type { ToolLimitsOperations } from '../contracts/operations/limits.js';
+import type { ToolStepsOperations } from '../contracts/operations/steps.js';
+import type { ToolEffectsOperations } from '../contracts/operations/effects.js';
+import type { ToolSettlementOperations } from '../contracts/operations/settlement.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+import type { ToolScriptsOperations } from '../contracts/operations/scripts.js';
+import type { ToolObservationsOperations } from '../contracts/operations/observations.js';
+interface ResumeCheckInLinks {
+    readonly endCall: ToolResourcesOperations['endCall'];
+    readonly decisionLedger: DecisionLedger;
+    readonly resolveTool: ReturnType<typeof buildToolResolver>;
+    readonly resolveCredentialAndExecute: ResumedInvocation['resolveCredentialAndExecute'];
+    readonly afterMoment: ToolMiddlewareOperations['afterMoment'];
+    readonly placeResults: ToolArtifactsOperations['placeResults'];
+    readonly capResults: ToolLimitsOperations['capResults'];
+    readonly applyStepReturn: ToolStepsOperations['applyStepReturn'];
+    readonly applyToolEffects: ToolEffectsOperations['applyToolEffects'];
+    readonly emitTransitionConflict: ToolEffectsOperations['emitTransitionConflict'];
+    readonly settleBatch: ToolSettlementOperations['settleBatch'];
+    readonly turnStampOf: ToolCatalogOperations['turnStampOf'];
+    readonly fileResumedScript: ToolScriptsOperations['fileResumedScript'];
+    readonly emitToolEnd: ToolObservationsOperations['emitToolEnd'];
+    readonly bracketSettled: ToolSettlementOperations['bracketSettled'];
+}
+/** Compose only the existing checkIn resume door and its original landing order. */
+export declare function buildResumeCheckIn(deps: Pick<ToolCallsHandlerDeps, 'inputsLayer' | 'resources' | 'negativeClaimsArmed' | 'stepPlanFor' | 'findings' | 'findingsJudge'>, links: ResumeCheckInLinks): {
+    resumeCheckIn: (scope: TypedScope<AgentState>, frame: ResumeConsentFrame) => Promise<void>;
+};
+export {};