agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/stages/toolCalls/resume/checkIn.js

@@ -0,0 +1,189 @@
+import { spendDecision } from '../../../../consentRequest.js';
+import { boundArgsOf } from '../access/bindings.js';
+import { declinedResult } from '../../../../checkin.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+import { safeStringify } from '../../../validators.js';
+import { serveNegativeHandle } from '../../../negativeClaims/capture.js';
+import { appendBatchResult } from '../batch/settle.js';
+import { judgeLanded } from '../evidence/judgeLanded.js';
+/** Compose only the existing checkIn resume door and its original landing order. */
+export function buildResumeCheckIn(deps, links) {
+    const resumeCheckIn = async (scope, frame) => {
+        const { consentDecision, runSignal, toolName, toolCallId, startMs } = frame;
+        const iteration = scope.iteration;
+        // The copy the person approved, detached (`boundArgsOf`).
+        const args = boundArgsOf(scope, 'pausedCheckInArgs');
+        // A check-in pause is resumed with a CheckInDecision for THIS request
+        // and this exact call, or not at all: `heldAnswer` refused anything else
+        // at the top — a bare string, a decision for another request, a replay.
+        // A consequential tool never EXECUTES from a malformed resume, and a
+        // decline is never invented for one.
+        const decision = consentDecision;
+        // Used from here — so spent here, before the record or the tool: a
+        // second resume presenting it is refused ('already-answered').
+        await spendDecision(links.decisionLedger, decision, 'checkIn', runSignal, deps.resources?.answer);
+        // The registered component that COLLECTED this decision (9.24.0),
+        // written at pause time only when the ask carried one. The decision
+        // stays exactly what it was — a structured `CheckInDecision`, never
+        // parsed from prose — and the record now says which surface asked.
+        const answeredVia = scope.pausedComponentId;
+        typedEmit(scope, 'agentfootprint.checkin.decision', {
+            toolName,
+            toolCallId,
+            iteration,
+            requestId: decision.requestId,
+            approved: decision.approved,
+            by: decision.by,
+            ...(decision.note !== undefined && { note: decision.note }),
+            ...(answeredVia !== undefined && { componentId: answeredVia }),
+        });
+        let result;
+        /** What the model reads — see the ask path above. */
+        let modelResult;
+        let error;
+        /** Step-advance eligibility, judged by this path (a decline ran nothing). */
+        let stepToolRan = false;
+        /** The effects envelope the approved call returned (9.19.0). */
+        let resumeEnvelope;
+        /** The tool ran (any outcome) — the judge's gate (9.104.0). */
+        let toolRan = false;
+        let negativeResultId;
+        /** What the approved call's `execute` saw — its script row reads it. */
+        const scriptSeen = {};
+        if (decision.approved) {
+            const env = scope.$getEnv();
+            // Resolved against the party the checkpoint carries (9.92.0).
+            const resolved = links.resolveTool(toolName, scope.pausedToolParty);
+            const tool = resolved.tool;
+            const dispatched = await links.resolveCredentialAndExecute(scope, resolved, toolName, args, toolCallId, iteration, env, 'checkIn', scriptSeen);
+            negativeResultId = dispatched.negativeResultId;
+            result = dispatched.result;
+            error = dispatched.error;
+            toolRan = dispatched.executed === true;
+            // Same ceiling law as the ask path: ran ≠ completed a step (9.20.0).
+            stepToolRan =
+                dispatched.executed === true && error !== true && dispatched.ceilingRefused !== true;
+            if (dispatched.executed === true && error !== true) {
+                resumeEnvelope = dispatched.envelope;
+            }
+            // Consent moved the execution to this side of the pause; the rules
+            // about results move with it.
+            if (dispatched.executed === true) {
+                modelResult = await links.afterMoment(scope, {
+                    ...(tool && { tool }),
+                    toolName,
+                    toolCallId,
+                    iteration,
+                    args,
+                    result,
+                    negativeResultId,
+                    ...(error === true && { error: true }),
+                    history: [...scope.history],
+                    ...(scope.runIdentity && { identity: scope.runIdentity }),
+                    ...(env.signal && { signal: env.signal }),
+                });
+            }
+        }
+        else {
+            result = declinedResult(decision.note);
+        }
+        if (modelResult === undefined)
+            modelResult = result;
+        // Placement then the truncation net — the batch loop's precedence.
+        const decisionPlaced = await links.placeResults(scope, { toolName, toolCallId, iteration }, { result, modelResult }, stepToolRan);
+        const decisionCapped = links.capResults(toolName, decisionPlaced);
+        modelResult = decisionCapped.modelResult;
+        let decisionResultStr = typeof modelResult === 'string' ? modelResult : safeStringify(modelResult);
+        const decisionToolChars = decisionResultStr.length;
+        if (deps.negativeClaimsArmed === true)
+            decisionResultStr = serveNegativeHandle(scope, negativeResultId, decisionResultStr);
+        // Step boundary (9.18.0) — an approved consequential step (a checkIn
+        // tool CAN be a step's tool) advances on the resumed dispatch.
+        if (deps.stepPlanFor && stepToolRan) {
+            decisionResultStr += links.applyStepReturn(scope, { toolName, toolCallId, iteration });
+        }
+        // Typed tool effects (9.19.0) — an approved consequential call may
+        // carry them too; judged exactly as inline.
+        if (resumeEnvelope !== undefined) {
+            const decisionTransition = { losers: [] };
+            decisionResultStr += links.applyToolEffects(scope, { toolName, toolCallId, iteration }, resumeEnvelope, decisionTransition);
+            links.emitTransitionConflict(scope, iteration, decisionTransition);
+        }
+        // The batch settlement (9.113.0) — the ask path's twin.
+        const decisionSettlement = links.settleBatch([
+            ...scope.history,
+            {
+                role: 'tool',
+                content: decisionResultStr,
+                ...(deps.negativeClaimsArmed === true && { toolChars: decisionToolChars }),
+                toolCallId,
+                toolName,
+                ...(deps.findings === true && !toolRan && { toolResultOrigin: 'not-entered' }),
+            },
+        ], { toolName, toolCallId });
+        const decisionHistory = decisionSettlement.history;
+        scope.history = decisionHistory;
+        // Drives `on-tool-return` triggers, same as the execute path.
+        scope.lastToolResult = {
+            toolName,
+            result: decisionResultStr,
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+        };
+        appendBatchResult(scope, {
+            toolName,
+            result: decisionResultStr,
+            toolCallId,
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+        });
+        await judgeLanded(scope, deps.findingsJudge, toolRan, { toolName, result: decisionResultStr, toolCallId }, iteration, links.turnStampOf(scope));
+        links.fileResumedScript(scope, {
+            toolName,
+            toolCallId,
+            iteration,
+            carried: args,
+            entered: toolRan,
+            seen: scriptSeen,
+        });
+        links.emitToolEnd(scope, toolName, {
+            toolCallId,
+            result: decisionCapped.result,
+            durationMs: Date.now() - startMs,
+            ...(error === true && { error: true }),
+            ...(resumeEnvelope?.status !== undefined && { status: resumeEnvelope.status }),
+            ...(decisionCapped.modelResult !== decisionCapped.result && {
+                modelResult: decisionCapped.modelResult,
+            }),
+        }, toolRan, undefined, negativeResultId, args);
+        links.bracketSettled(scope, decisionSettlement);
+        typedEmit(scope, 'agentfootprint.agent.iteration_end', {
+            turnIndex: 0,
+            iterIndex: iteration,
+            // The brackets this leg closed — see the ask path's twin.
+            toolCallCount: 1 + decisionSettlement.settled.length,
+            history: decisionHistory,
+        });
+        if (deps.inputsLayer === true)
+            scope.argumentAsk = undefined;
+        scope.iteration = iteration + 1;
+        // Clear ALL pause checkpoint fields (shared + check-in).
+        await links.endCall(scope);
+        scope.pausedToolCallId = '';
+        scope.pausedToolName = '';
+        scope.pausedToolStartMs = 0;
+        scope.pausedCheckIn = false;
+        scope.pausedCheckInArgs = undefined;
+        // The request was answered — and spent — by this resume.
+        scope.pausedRequest = undefined;
+        // Cleared ONLY when it was set — see the ask path's twin note.
+        if (answeredVia !== undefined)
+            scope.pausedComponentId = undefined;
+        // The served party the checkpoint carried is consumed with it (9.92.0);
+        // written back only when it was there, so an older checkpoint's resume
+        // commits exactly what it always did.
+        if (scope.pausedToolParty !== undefined)
+            scope.pausedToolParty = undefined;
+        return;
+    };
+    return { resumeCheckIn };
+}
+//# sourceMappingURL=checkIn.js.map

package/dist/esm/core/agent/stages/toolCalls/resume/checkIn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkIn.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/resume/checkIn.ts"],"names":[],"mappings":"AACA,OAAO,EAAuB,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAKnF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAwB,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AAKvE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AA+BzD,oFAAoF;AACpF,MAAM,UAAU,kBAAkB,CAChC,IAQC,EACD,KAAyB;IAEzB,MAAM,aAAa,GAAG,KAAK,EACzB,KAA6B,EAC7B,KAAyB,EACV,EAAE;QACjB,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAE5E,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,0DAA0D;QAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;QACrD,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,qCAAqC;QACrC,MAAM,QAAQ,GAAoB,eAAe,CAAC;QAClD,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,aAAa,CACjB,KAAK,CAAC,cAAc,EACpB,QAAQ,EACR,SAAS,EACT,SAAS,EACT,IAAI,CAAC,SAAS,EAAE,MAAM,CACvB,CAAC;QAEF,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,WAAW,GAAG,KAAK,CAAC,iBAAuC,CAAC;QAClE,SAAS,CAAC,KAAK,EAAE,iCAAiC,EAAE;YAClD,QAAQ;YACR,UAAU;YACV,SAAS;YACT,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3D,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;SAC/D,CAAC,CAAC;QAEH,IAAI,MAAe,CAAC;QACpB,qDAAqD;QACrD,IAAI,WAAoB,CAAC;QACzB,IAAI,KAA0B,CAAC;QAC/B,6EAA6E;QAC7E,IAAI,WAAW,GAAG,KAAK,CAAC;QACxB,gEAAgE;QAChE,IAAI,cAAkD,CAAC;QACvD,+DAA+D;QAC/D,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,gBAAoC,CAAC;QACzC,wEAAwE;QACxE,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC5B,8DAA8D;YAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAwC,CAAC,CAAC;YAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACxD,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,SAAS,EACT,GAAG,EACH,SAAS,EACT,UAAU,CACX,CAAC;YACF,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;YAC/C,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;YAC3B,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;YACzB,OAAO,GAAG,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC;YACvC,qEAAqE;YACrE,WAAW;gBACT,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,CAAC;YACvF,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnD,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC;YACvC,CAAC;YACD,mEAAmE;YACnE,8BAA8B;YAC9B,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACjC,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE;oBAC3C,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;oBACrB,QAAQ;oBACR,UAAU;oBACV,SAAS;oBACT,IAAI;oBACJ,MAAM;oBACN,gBAAgB;oBAChB,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;oBACtC,OAAO,EAAE,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;oBACtD,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;oBACzD,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,WAAW,KAAK,SAAS;YAAE,WAAW,GAAG,MAAM,CAAC;QACpD,mEAAmE;QACnE,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,YAAY,CAC7C,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,WAAW,CACZ,CAAC;QACF,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAClE,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;QACzC,IAAI,iBAAiB,GACnB,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,MAAM,CAAC;QACnD,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;YACnC,iBAAiB,GAAG,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;QACtF,qEAAqE;QACrE,+DAA+D;QAC/D,IAAI,IAAI,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;YACpC,iBAAiB,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,mEAAmE;QACnE,4CAA4C;QAC5C,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,kBAAkB,GAAyB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAChE,iBAAiB,IAAI,KAAK,CAAC,gBAAgB,CACzC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,cAAc,EACd,kBAAkB,CACnB,CAAC;YACF,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACrE,CAAC;QACD,wDAAwD;QACxD,MAAM,kBAAkB,GAAG,KAAK,CAAC,WAAW,CAC1C;YACE,GAAI,KAAK,CAAC,OAAiC;YAC3C;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,iBAAiB;gBAC1B,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC;gBAC1E,UAAU;gBACV,QAAQ;gBACR,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,gBAAgB,EAAE,aAAsB,EAAE,CAAC;aACxF;SACF,EACD,EAAE,QAAQ,EAAE,UAAU,EAAE,CACzB,CAAC;QACF,MAAM,eAAe,GAAG,kBAAkB,CAAC,OAAO,CAAC;QACnD,KAAK,CAAC,OAAO,GAAG,eAAe,CAAC;QAChC,8DAA8D;QAC9D,KAAK,CAAC,cAAc,GAAG;YACrB,QAAQ;YACR,MAAM,EAAE,iBAAiB;YACzB,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;SAC/E,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE;YACvB,QAAQ;YACR,MAAM,EAAE,iBAAiB;YACzB,UAAU;YACV,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;SAC/E,CAAC,CAAC;QACH,MAAM,WAAW,CACf,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,OAAO,EACP,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,EACnD,SAAS,EACT,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CACzB,CAAC;QACF,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE;YAC7B,QAAQ;YACR,UAAU;YACV,SAAS;YACT,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO;YAChB,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,CACf,KAAK,EACL,QAAQ,EACR;YACE,UAAU;YACV,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,cAAc,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC;YAC9E,GAAG,CAAC,cAAc,CAAC,WAAW,KAAK,cAAc,CAAC,MAAM,IAAI;gBAC1D,WAAW,EAAE,cAAc,CAAC,WAAW;aACxC,CAAC;SACH,EACD,OAAO,EACP,SAAS,EACT,gBAAgB,EAChB,IAAI,CACL,CAAC;QACF,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAChD,SAAS,CAAC,KAAK,EAAE,oCAAoC,EAAE;YACrD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,0DAA0D;YAC1D,aAAa,EAAE,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM;YACpD,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7D,KAAK,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;QAChC,yDAAyD;QACzD,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC5B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC1B,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC5B,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;QAC5B,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACpC,yDAAyD;QACzD,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;QAChC,+DAA+D;QAC/D,IAAI,WAAW,KAAK,SAAS;YAAE,KAAK,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnE,wEAAwE;QACxE,uEAAuE;QACvE,sCAAsC;QACtC,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;QAC3E,OAAO;IACT,CAAC,CAAC;IACF,OAAO,EAAE,aAAa,EAAE,CAAC;AAC3B,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/resume/credential.d.ts

@@ -0,0 +1,37 @@
+import type { ToolResourcesOperations } from '../contracts/operations/resources.js';
+import { buildToolResolver } from '../../toolResolver.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ResumeCallFrame } from '../contracts/resumeFrames.js';
+import type { ResumedInvocation } from '../contracts/operations/resumedInvocation.js';
+import type { ToolMiddlewareOperations } from '../contracts/operations/middleware.js';
+import type { ToolArtifactsOperations } from '../contracts/operations/artifacts.js';
+import type { ToolLimitsOperations } from '../contracts/operations/limits.js';
+import type { ToolStepsOperations } from '../contracts/operations/steps.js';
+import type { ToolEffectsOperations } from '../contracts/operations/effects.js';
+import type { ToolSettlementOperations } from '../contracts/operations/settlement.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+import type { ToolScriptsOperations } from '../contracts/operations/scripts.js';
+import type { ToolObservationsOperations } from '../contracts/operations/observations.js';
+interface ResumeCredentialLinks {
+    readonly endCall: ToolResourcesOperations['endCall'];
+    readonly resolveTool: ReturnType<typeof buildToolResolver>;
+    readonly resolveCredentialAndExecute: ResumedInvocation['resolveCredentialAndExecute'];
+    readonly afterMoment: ToolMiddlewareOperations['afterMoment'];
+    readonly placeResults: ToolArtifactsOperations['placeResults'];
+    readonly capResults: ToolLimitsOperations['capResults'];
+    readonly applyStepReturn: ToolStepsOperations['applyStepReturn'];
+    readonly applyToolEffects: ToolEffectsOperations['applyToolEffects'];
+    readonly emitTransitionConflict: ToolEffectsOperations['emitTransitionConflict'];
+    readonly settleBatch: ToolSettlementOperations['settleBatch'];
+    readonly turnStampOf: ToolCatalogOperations['turnStampOf'];
+    readonly fileResumedScript: ToolScriptsOperations['fileResumedScript'];
+    readonly emitToolEnd: ToolObservationsOperations['emitToolEnd'];
+    readonly bracketSettled: ToolSettlementOperations['bracketSettled'];
+}
+/** Compose only the existing credential resume door and its original landing order. */
+export declare function buildResumeCredential(deps: Pick<ToolCallsHandlerDeps, 'inputsLayer' | 'resources' | 'negativeClaimsArmed' | 'stepPlanFor' | 'findings' | 'findingsJudge'>, links: ResumeCredentialLinks): {
+    resumeCredential: (scope: TypedScope<AgentState>, frame: ResumeCallFrame) => Promise<void>;
+};
+export {};

package/dist/esm/core/agent/stages/toolCalls/resume/credential.js

@@ -0,0 +1,135 @@
+import { safeStringify } from '../../../validators.js';
+import { serveNegativeHandle } from '../../../negativeClaims/capture.js';
+import { appendBatchResult } from '../batch/settle.js';
+import { judgeLanded } from '../evidence/judgeLanded.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+/** Compose only the existing credential resume door and its original landing order. */
+export function buildResumeCredential(deps, links) {
+    const resumeCredential = async (scope, frame) => {
+        const { toolName, toolCallId, startMs } = frame;
+        deps.resources?.answer.record();
+        const iteration = scope.iteration;
+        const args = (scope.pausedCredentialArgs ?? {});
+        const env = scope.$getEnv();
+        // Resolved against the party the checkpoint carries (9.92.0).
+        const resolved = links.resolveTool(toolName, scope.pausedToolParty);
+        const tool = resolved.tool;
+        /** What the call's `execute` saw — its script row reads it. */
+        const scriptSeen = {};
+        const dispatched = await links.resolveCredentialAndExecute(scope, resolved, toolName, args, toolCallId, iteration, env, undefined, scriptSeen);
+        const result = dispatched.result;
+        const error = dispatched.error;
+        let modelResult;
+        if (dispatched.executed === true) {
+            modelResult = await links.afterMoment(scope, {
+                ...(tool && { tool }),
+                toolName,
+                toolCallId,
+                iteration,
+                args,
+                result,
+                negativeResultId: dispatched.negativeResultId,
+                ...(error === true && { error: true }),
+                history: [...scope.history],
+                ...(scope.runIdentity && { identity: scope.runIdentity }),
+                ...(env.signal && { signal: env.signal }),
+            });
+        }
+        if (modelResult === undefined)
+            modelResult = result;
+        // Placement then the truncation net — the batch loop's precedence.
+        const consentPlaced = await links.placeResults(scope, { toolName, toolCallId, iteration }, { result, modelResult }, dispatched.executed === true && error !== true && dispatched.ceilingRefused !== true);
+        const consentCapped = links.capResults(toolName, consentPlaced);
+        modelResult = consentCapped.modelResult;
+        let consentResultStr = typeof modelResult === 'string' ? modelResult : safeStringify(modelResult);
+        const consentToolChars = consentResultStr.length;
+        if (deps.negativeClaimsArmed === true)
+            consentResultStr = serveNegativeHandle(scope, dispatched.negativeResultId, consentResultStr);
+        // Step boundary (9.18.0) — a step tool that waited on 3LO consent
+        // advances the moment its resumed dispatch really ran, clean. A
+        // ceiling-refused result is not clean (9.20.0): the model holds no
+        // data and was told to call again.
+        if (deps.stepPlanFor &&
+            dispatched.executed === true &&
+            error !== true &&
+            dispatched.ceilingRefused !== true) {
+            consentResultStr += links.applyStepReturn(scope, { toolName, toolCallId, iteration });
+        }
+        // Typed tool effects (9.19.0) — same judge as every other path.
+        const consentEnvelope = dispatched.executed === true && error !== true ? dispatched.envelope : undefined;
+        if (consentEnvelope !== undefined) {
+            const consentTransition = { losers: [] };
+            consentResultStr += links.applyToolEffects(scope, { toolName, toolCallId, iteration }, consentEnvelope, consentTransition);
+            links.emitTransitionConflict(scope, iteration, consentTransition);
+        }
+        // The batch settlement (9.113.0) — the ask path's twin.
+        const consentSettlement = links.settleBatch([
+            ...scope.history,
+            {
+                role: 'tool',
+                content: consentResultStr,
+                ...(deps.negativeClaimsArmed === true && { toolChars: consentToolChars }),
+                toolCallId,
+                toolName,
+                ...(deps.findings === true &&
+                    dispatched.executed !== true && { toolResultOrigin: 'not-entered' }),
+            },
+        ], { toolName, toolCallId });
+        const consentHistory = consentSettlement.history;
+        scope.history = consentHistory;
+        scope.lastToolResult = {
+            toolName,
+            result: consentResultStr,
+            ...(consentEnvelope?.status !== undefined && { status: consentEnvelope.status }),
+        };
+        appendBatchResult(scope, {
+            toolName,
+            result: consentResultStr,
+            toolCallId,
+            ...(consentEnvelope?.status !== undefined && { status: consentEnvelope.status }),
+        });
+        await judgeLanded(scope, deps.findingsJudge, dispatched.executed === true, { toolName, result: consentResultStr, toolCallId }, iteration, links.turnStampOf(scope));
+        links.fileResumedScript(scope, {
+            toolName,
+            toolCallId,
+            iteration,
+            carried: args,
+            entered: dispatched.executed === true,
+            seen: scriptSeen,
+        });
+        links.emitToolEnd(scope, toolName, {
+            toolCallId,
+            result: consentCapped.result,
+            durationMs: Date.now() - startMs,
+            ...(error === true && { error: true }),
+            ...(consentEnvelope?.status !== undefined && { status: consentEnvelope.status }),
+            ...(consentCapped.modelResult !== consentCapped.result && {
+                modelResult: consentCapped.modelResult,
+            }),
+        }, dispatched.executed === true, undefined, dispatched.negativeResultId, args);
+        links.bracketSettled(scope, consentSettlement);
+        typedEmit(scope, 'agentfootprint.agent.iteration_end', {
+            turnIndex: 0,
+            iterIndex: iteration,
+            // The brackets this leg closed — see the ask path's twin.
+            toolCallCount: 1 + consentSettlement.settled.length,
+            history: consentHistory,
+        });
+        if (deps.inputsLayer === true)
+            scope.argumentAsk = undefined;
+        scope.iteration = iteration + 1;
+        // Clear ALL pause checkpoint fields (shared + credential).
+        await links.endCall(scope);
+        scope.pausedToolCallId = '';
+        scope.pausedToolName = '';
+        scope.pausedToolStartMs = 0;
+        scope.pausedCredential = false;
+        scope.pausedCredentialArgs = undefined;
+        scope.pausedCredentialService = undefined;
+        if (scope.pausedToolParty !== undefined)
+            scope.pausedToolParty = undefined;
+        return;
+    };
+    return { resumeCredential };
+}
+//# sourceMappingURL=credential.js.map

package/dist/esm/core/agent/stages/toolCalls/resume/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/resume/credential.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AA8BvE,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CACnC,IAQC,EACD,KAA4B;IAE5B,MAAM,gBAAgB,GAAG,KAAK,EAC5B,KAA6B,EAC7B,KAAsB,EACP,EAAE;QACjB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,oBAAoB,IAAI,EAAE,CAAsC,CAAC;QACrF,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,eAAwC,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,+DAA+D;QAC/D,MAAM,UAAU,GAAqB,EAAE,CAAC;QACxC,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,2BAA2B,CACxD,KAAK,EACL,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,UAAU,EACV,SAAS,EACT,GAAG,EACH,SAAS,EACT,UAAU,CACX,CAAC;QACF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC/B,IAAI,WAAoB,CAAC;QACzB,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YACjC,WAAW,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE;gBAC3C,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;gBACrB,QAAQ;gBACR,UAAU;gBACV,SAAS;gBACT,IAAI;gBACJ,MAAM;gBACN,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;gBAC7C,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBACzD,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,WAAW,KAAK,SAAS;YAAE,WAAW,GAAG,MAAM,CAAC;QACpD,mEAAmE;QACnE,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,YAAY,CAC5C,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,EAAE,MAAM,EAAE,WAAW,EAAE,EACvB,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI,CACrF,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAChE,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC;QACxC,IAAI,gBAAgB,GAClB,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC;QACjD,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI;YACnC,gBAAgB,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;QAC/F,kEAAkE;QAClE,gEAAgE;QAChE,mEAAmE;QACnE,mCAAmC;QACnC,IACE,IAAI,CAAC,WAAW;YAChB,UAAU,CAAC,QAAQ,KAAK,IAAI;YAC5B,KAAK,KAAK,IAAI;YACd,UAAU,CAAC,cAAc,KAAK,IAAI,EAClC,CAAC;YACD,gBAAgB,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,gEAAgE;QAChE,MAAM,eAAe,GACnB,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,iBAAiB,GAAyB,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC/D,gBAAgB,IAAI,KAAK,CAAC,gBAAgB,CACxC,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,eAAe,EACf,iBAAiB,CAClB,CAAC;YACF,KAAK,CAAC,sBAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;QACpE,CAAC;QACD,wDAAwD;QACxD,MAAM,iBAAiB,GAAG,KAAK,CAAC,WAAW,CACzC;YACE,GAAI,KAAK,CAAC,OAAiC;YAC3C;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,gBAAgB;gBACzB,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,IAAI,IAAI,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;gBACzE,UAAU;gBACV,QAAQ;gBACR,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACxB,UAAU,CAAC,QAAQ,KAAK,IAAI,IAAI,EAAE,gBAAgB,EAAE,aAAsB,EAAE,CAAC;aAChF;SACF,EACD,EAAE,QAAQ,EAAE,UAAU,EAAE,CACzB,CAAC;QACF,MAAM,cAAc,GAAG,iBAAiB,CAAC,OAAO,CAAC;QACjD,KAAK,CAAC,OAAO,GAAG,cAAc,CAAC;QAC/B,KAAK,CAAC,cAAc,GAAG;YACrB,QAAQ;YACR,MAAM,EAAE,gBAAgB;YACxB,GAAG,CAAC,eAAe,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC;SACjF,CAAC;QACF,iBAAiB,CAAC,KAAK,EAAE;YACvB,QAAQ;YACR,MAAM,EAAE,gBAAgB;YACxB,UAAU;YACV,GAAG,CAAC,eAAe,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC;SACjF,CAAC,CAAC;QACH,MAAM,WAAW,CACf,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,UAAU,CAAC,QAAQ,KAAK,IAAI,EAC5B,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,EAClD,SAAS,EACT,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CACzB,CAAC;QACF,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE;YAC7B,QAAQ;YACR,UAAU;YACV,SAAS;YACT,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,UAAU,CAAC,QAAQ,KAAK,IAAI;YACrC,IAAI,EAAE,UAAU;SACjB,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,CACf,KAAK,EACL,QAAQ,EACR;YACE,UAAU;YACV,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,GAAG,CAAC,KAAK,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACtC,GAAG,CAAC,eAAe,EAAE,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC;YAChF,GAAG,CAAC,aAAa,CAAC,WAAW,KAAK,aAAa,CAAC,MAAM,IAAI;gBACxD,WAAW,EAAE,aAAa,CAAC,WAAW;aACvC,CAAC;SACH,EACD,UAAU,CAAC,QAAQ,KAAK,IAAI,EAC5B,SAAS,EACT,UAAU,CAAC,gBAAgB,EAC3B,IAAI,CACL,CAAC;QACF,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAC;QAC/C,SAAS,CAAC,KAAK,EAAE,oCAAoC,EAAE;YACrD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,0DAA0D;YAC1D,aAAa,EAAE,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,MAAM;YACnD,OAAO,EAAE,cAAc;SACxB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7D,KAAK,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;QAChC,2DAA2D;QAC3D,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC5B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC1B,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC5B,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAC/B,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC;QACvC,KAAK,CAAC,uBAAuB,GAAG,SAAS,CAAC;QAC1C,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,eAAe,GAAG,SAAS,CAAC;QAC3E,OAAO;IACT,CAAC,CAAC;IACF,OAAO,EAAE,gBAAgB,EAAE,CAAC;AAC9B,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/resume/handler.d.ts

@@ -0,0 +1,6 @@
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { PausableHandler, TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ToolCallOperations } from '../compose.js';
+/** Existing native resume admission and four door-specific continuations. */
+export declare function buildToolResume(deps: ToolCallsHandlerDeps, operations: ToolCallOperations): PausableHandler<TypedScope<AgentState>>['resume'];

package/dist/esm/core/agent/stages/toolCalls/resume/handler.js

@@ -0,0 +1,148 @@
+import { restoreServedParties } from '../../servedParties.js';
+import { noteDecisionTakenUp, recordedRequestId } from '../../../../consentRequest.js';
+import { findingsReferenceRefusal } from '../../../findings/admission.js';
+/** Existing native resume admission and four door-specific continuations. */
+export function buildToolResume(deps, operations) {
+    const resume = async (scope, input) => {
+        deps.resources?.expectAnswer();
+        restoreServedParties(scope, deps.servedTools);
+        // A consent gate's answer is a DECISION for ONE request: held to the
+        // request this run paused on and to the exact call it was bound to —
+        // refused (thrown) before anything below writes or runs. The two
+        // decision paths further down spend it as their first act, once.
+        const consentGate = scope.pausedAsk === true ? 'ask' : scope.pausedCheckIn === true ? 'checkIn' : undefined;
+        // Taken up here, too: a composition resumes this chart without an
+        // agent's own `resume()`, and a door watching the paused request must
+        // still know that every use of its decision passes through the spend
+        // below (`consentRequest.ts` · `watchDecisionUse`).
+        if (consentGate !== undefined) {
+            noteDecisionTakenUp(recordedRequestId(scope.$getValue('pausedRequest')));
+        }
+        // Checkpoint resource preflight may refuse without spending the decision.
+        deps.resources?.restore(scope, operations.resourceFactsOf(scope));
+        // The run's signal, read while the stage is live: the engine stops
+        // waiting on this stage when the run is aborted, but the stage goes on,
+        // and a decision must not be spent — nor its call run — by a resume
+        // nobody is waiting for any more (`spendDecision`).
+        const runSignal = scope.$getEnv().signal;
+        // Same barrier as `execute`, for the same reason: an approved check-in
+        // runs the REAL tool here, and that side effect must not go out ahead of
+        // the state the last write is still carrying.
+        const durable = deps.awaitDurable?.();
+        if (durable)
+            await durable;
+        const consentDecision = consentGate === undefined ? undefined : operations.heldAnswer(scope, input, consentGate);
+        // Fresh components discover tools; saved party and current rules still govern dispatch.
+        const catalog = deps.prepareProviderTools?.(scope);
+        if (catalog)
+            await catalog;
+        runSignal?.throwIfAborted();
+        // The time layer: the paused turn's clock is KEPT — its words were
+        // resolved against it. A resume that passed a different `time` is
+        // recorded here, first, and never applied (TQ21).
+        if (deps.time !== undefined) {
+            (await import('../../timeLayer.js')).recordClockOnResume(scope, deps.time);
+        }
+        // Consumer-supplied resume input becomes the paused tool's result.
+        // The subflow's pre-pause scope is restored automatically by
+        // footprintjs 4.17.0 via `checkpoint.subflowStates`, so
+        // `scope.history` and `scope.pausedToolCallId` read back cleanly
+        // across same-executor AND cross-executor resume.
+        const toolCallId = scope.pausedToolCallId;
+        const toolName = scope.pausedToolName;
+        const startMs = scope.pausedToolStartMs;
+        // A batch paused before anything stamped it — a checkpoint written by an
+        // older build, or by an agent without the results layer — is stamped
+        // here as it completes, so the loop head still judges it once (honesty
+        // layer 3). A batch dispatched under the arm already carries its stamp.
+        if (deps.resultsLayer === true && scope.toolResultsIteration === undefined) {
+            scope.toolResultsIteration = scope.iteration;
+        }
+        if (deps.findings === true) {
+            const proposed = [...scope.history]
+                .reverse()
+                .find((message) => message.role === 'assistant' &&
+                message.toolCalls?.some((call) => call.id === toolCallId))
+                ?.toolCalls?.filter((call) => call.id === toolCallId);
+            const declaration = proposed?.length === 1 ? operations.peelCall(proposed[0]) : undefined;
+            const refusal = proposed?.length === 1
+                ? findingsReferenceRefusal(declaration?.findings, scope.findingsRequest?.[0], scope.iteration, declaration?.malformed)
+                : JSON.stringify({
+                    refused: 'findings-reference',
+                    reason: 'The original paused proposal is unavailable or ambiguous.',
+                });
+            if (refusal !== undefined) {
+                scope.messageDeniedReason = refusal;
+                scope.messageDeniedPhase = 'output';
+                scope.messageDeniedBy = 'findings-reference-admission';
+                scope.$break('findings reference refused the resumed proposal');
+                return;
+            }
+        }
+        // ── Middleware-ask decision path ─────────────────────────────────
+        // Discriminated by `scope.pausedAsk`, restored from the checkpoint.
+        //
+        // The answer is a DECISION, not a result. That is the whole reason the
+        // outcome union has no `result` arm: a middleware asks a person whether
+        // this call may proceed, and on approval the REAL tool runs — the person
+        // never writes the tool's answer, and neither does the middleware.
+        //
+        // A malformed resume never reaches here: `heldAnswer` refused it at the
+        // top (a governed call never executes, and nobody's decline is invented,
+        // because a message was mis-shaped).
+        if (consentGate === 'ask' && consentDecision !== undefined) {
+            return operations.resumeAsk(scope, {
+                consentDecision,
+                runSignal,
+                toolName,
+                toolCallId,
+                startMs,
+            });
+        }
+        // ── Check-in decision path ───────────────────────────────────────
+        // A check-in pause is discriminated by `scope.pausedCheckIn` (restored
+        // from the checkpoint). The resume input is a `CheckInDecision`. On
+        // APPROVE the tool executes NOW (it never ran at pause time — consent
+        // comes BEFORE execute); on DECLINE a model-visible tool_result lands so
+        // the agent adapts in-loop. The typed `checkin.decision` event fires
+        // either way. Same iteration semantics as resume-after-askHuman.
+        if (consentGate === 'checkIn' && consentDecision !== undefined) {
+            return operations.resumeCheckIn(scope, {
+                consentDecision,
+                runSignal,
+                toolName,
+                toolCallId,
+                startMs,
+            });
+        }
+        // ── Credential-consent decision path (8.6.0) ─────────────────────
+        // Discriminated by `scope.pausedCredential`, restored from the checkpoint.
+        //
+        // The resume input is IGNORED, and that is the design rather than an
+        // omission. The person's answer here is "I authorized it", not a result:
+        // they consented at the identity provider, out of band. So resume asks
+        // the provider again and, if it now issues, runs the tool that was
+        // waiting — the same reasoning that gave the middleware-ask outcome union
+        // no `result` arm. A human never writes a tool's answer.
+        //
+        // Still not authorized? `resolveCredentialAndExecute` returns the
+        // URL-free refusal with `error: true` and reports the outstanding
+        // consent; the loop carries on and a further attempt can pause afresh.
+        if (scope.pausedCredential === true) {
+            return operations.resumeCredential(scope, { toolName, toolCallId, startMs });
+        }
+        return operations.resumePlain(scope, { input, toolName, toolCallId, startMs });
+    };
+    return async (scope, input) => {
+        try {
+            return await resume(scope, input);
+        }
+        finally {
+            if (deps.servedTools !== undefined) {
+                deps.servedTools.pinned = undefined;
+                deps.servedTools.restored = undefined;
+            }
+        }
+    };
+}
+//# sourceMappingURL=handler.js.map

package/dist/esm/core/agent/stages/toolCalls/resume/handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/resume/handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAK9D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAEvF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAG1E,6EAA6E;AAC7E,MAAM,UAAU,eAAe,CAC7B,IAA0B,EAC1B,UAA8B;IAE9B,MAAM,MAAM,GAAsD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QACvF,IAAI,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC;QAC/B,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,qEAAqE;QACrE,qEAAqE;QACrE,iEAAiE;QACjE,iEAAiE;QACjE,MAAM,WAAW,GACf,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,kEAAkE;QAClE,sEAAsE;QACtE,qEAAqE;QACrE,oDAAoD;QACpD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,mBAAmB,CAAC,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,0EAA0E;QAC1E,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,mEAAmE;QACnE,wEAAwE;QACxE,oEAAoE;QACpE,oDAAoD;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;QACzC,uEAAuE;QACvE,yEAAyE;QACzE,8CAA8C;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtC,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,MAAM,eAAe,GACnB,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC3F,wFAAwF;QACxF,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;QAC3B,SAAS,EAAE,cAAc,EAAE,CAAC;QAC5B,mEAAmE;QACnE,kEAAkE;QAClE,kDAAkD;QAClD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,CAAC,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,mEAAmE;QACnE,6DAA6D;QAC7D,wDAAwD;QACxD,iEAAiE;QACjE,kDAAkD;QAClD,MAAM,UAAU,GAAG,KAAK,CAAC,gBAA0B,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAwB,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAA2B,CAAC;QAClD,yEAAyE;QACzE,qEAAqE;QACrE,uEAAuE;QACvE,wEAAwE;QACxE,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC3E,KAAK,CAAC,oBAAoB,GAAG,KAAK,CAAC,SAAmB,CAAC;QACzD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;iBAC3D,OAAO,EAAE;iBACT,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,IAAI,KAAK,WAAW;gBAC5B,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,CAC5D;gBACD,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,QAAQ,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,MAAM,OAAO,GACX,QAAQ,EAAE,MAAM,KAAK,CAAC;gBACpB,CAAC,CAAC,wBAAwB,CACtB,WAAW,EAAE,QAAQ,EACrB,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAC1B,KAAK,CAAC,SAAS,EACf,WAAW,EAAE,SAAS,CACvB;gBACH,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;oBACb,OAAO,EAAE,oBAAoB;oBAC7B,MAAM,EAAE,2DAA2D;iBACpE,CAAC,CAAC;YACT,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,KAAK,CAAC,mBAAmB,GAAG,OAAO,CAAC;gBACpC,KAAK,CAAC,kBAAkB,GAAG,QAAQ,CAAC;gBACpC,KAAK,CAAC,eAAe,GAAG,8BAA8B,CAAC;gBACvD,KAAK,CAAC,MAAM,CAAC,iDAAiD,CAAC,CAAC;gBAChE,OAAO;YACT,CAAC;QACH,CAAC;QAED,oEAAoE;QACpE,oEAAoE;QACpE,EAAE;QACF,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,mEAAmE;QACnE,EAAE;QACF,wEAAwE;QACxE,yEAAyE;QACzE,qCAAqC;QACrC,IAAI,WAAW,KAAK,KAAK,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE;gBACjC,eAAe;gBACf,SAAS;gBACT,QAAQ;gBACR,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,oEAAoE;QACpE,uEAAuE;QACvE,oEAAoE;QACpE,sEAAsE;QACtE,yEAAyE;QACzE,qEAAqE;QACrE,iEAAiE;QACjE,IAAI,WAAW,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAC/D,OAAO,UAAU,CAAC,aAAa,CAAC,KAAK,EAAE;gBACrC,eAAe;gBACf,SAAS;gBACT,QAAQ;gBACR,UAAU;gBACV,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,oEAAoE;QACpE,2EAA2E;QAC3E,EAAE;QACF,qEAAqE;QACrE,yEAAyE;QACzE,uEAAuE;QACvE,mEAAmE;QACnE,0EAA0E;QAC1E,yDAAyD;QACzD,EAAE;QACF,kEAAkE;QAClE,kEAAkE;QAClE,uEAAuE;QACvE,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACpC,OAAO,UAAU,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,CAAC,CAAC;IACF,OAAO,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,CAAC;gBACpC,IAAI,CAAC,WAAW,CAAC,QAAQ,GAAG,SAAS,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/resume/plain.d.ts

@@ -0,0 +1,32 @@
+import type { ToolResourcesOperations } from '../contracts/operations/resources.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ResumeResultFrame } from '../contracts/resumeFrames.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+import type { ToolMiddlewareOperations } from '../contracts/operations/middleware.js';
+import type { ToolArtifactsOperations } from '../contracts/operations/artifacts.js';
+import type { ToolLimitsOperations } from '../contracts/operations/limits.js';
+import type { ToolStepsOperations } from '../contracts/operations/steps.js';
+import type { ToolSettlementOperations } from '../contracts/operations/settlement.js';
+import type { ToolScriptsOperations } from '../contracts/operations/scripts.js';
+import type { ToolObservationsOperations } from '../contracts/operations/observations.js';
+interface ResumePlainLinks {
+    readonly endCall: ToolResourcesOperations['endCall'];
+    readonly lookupTool: ToolCatalogOperations['lookupTool'];
+    readonly peelsReserved: ToolCatalogOperations['peelsReserved'];
+    readonly afterMoment: ToolMiddlewareOperations['afterMoment'];
+    readonly placeResults: ToolArtifactsOperations['placeResults'];
+    readonly capResults: ToolLimitsOperations['capResults'];
+    readonly applyStepReturn: ToolStepsOperations['applyStepReturn'];
+    readonly settleBatch: ToolSettlementOperations['settleBatch'];
+    readonly turnStampOf: ToolCatalogOperations['turnStampOf'];
+    readonly fileResumedScript: ToolScriptsOperations['fileResumedScript'];
+    readonly emitToolEnd: ToolObservationsOperations['emitToolEnd'];
+    readonly bracketSettled: ToolSettlementOperations['bracketSettled'];
+}
+/** Compose only the existing plain resume door and its original landing order. */
+export declare function buildResumePlain(deps: Pick<ToolCallsHandlerDeps, 'inputsLayer' | 'resources' | 'negativeClaimsArmed' | 'stepPlanFor' | 'findingsJudge'>, links: ResumePlainLinks): {
+    resumePlain: (scope: TypedScope<AgentState>, frame: ResumeResultFrame) => Promise<void>;
+};
+export {};