agentfootprint 9.63.0 → 9.65.0

package/dist/core/agent/coverage/evidence.js

@@ -26,40 +26,79 @@
  * machine**, and adding a primitive whose purpose is to make failed lookups
  * informative would have made it cheaper still.
  *
- * So an absence grounds its COVERAGE and nothing else. `checked`,
- * `not_checked` and `cannot_cover` are the tool's own words about the world —
- * a fabric name, a collector, a window — and they are exactly what an answer
- * built on an absence should be allowed to cite. `looked_for`, `try_instead`,
- * the note and the marker are not.
- *
- * The consequence is deliberate and worth stating: if the USER named the
- * thing, it is exempt anyway (their message is the exempt corpus), so a real
- * question about a real port is unaffected. Only a value that appears *for
- * the first time* in an absence loses its grounding — which is the only case
- * where it was never evidence to begin with.
+ * ## The line, and where it actually falls
+ *
+ * The first cut of this file drew the line at the coverage lists. That was too
+ * narrow, and the field said so: a share-lookup tool returned its absence with
+ * the answer attached — an extra `known_shares` key holding the 40 real share
+ * names on the filer — and a `try_instead` telling the model to pick one. The
+ * model did exactly that, and the gate called the share it picked ungrounded.
+ * Following the tool's own advice produced a flagged answer, which makes the
+ * advice worthless and the gate wrong.
+ *
+ * So the line is not "coverage vs everything else". It is **tool-authored
+ * knowledge vs caller echo**:
+ *
+ *   • Everything a recognized absence carries is the TOOL speaking about the
+ *     world — the coverage lists, an extra key like `known_shares`, the
+ *     author's `try_instead`, the library's own note. Tool knowledge is
+ *     precisely what the corpus is for, so all of it grounds.
+ *   • `looked_for` is the one field that quotes the REQUEST rather than
+ *     stating what the tool knows. It never grounds. See
+ *     {@link CALLER_ECHO_FIELD}.
+ *
+ * This widens leniency — the gate accuses less — which is the safe direction
+ * on an accusation boundary: a missed fabrication costs a value nobody
+ * checked, a false accusation costs a correct answer and a real turn.
+ *
+ * The consequence of the exclusion is deliberate and worth stating: if the
+ * USER named the thing, it is exempt anyway (their message is the exempt
+ * corpus), so a real question about a real port is unaffected. Only a value
+ * that appears *for the first time* in an absence's `looked_for` loses its
+ * grounding — which is the only case where it was never evidence to begin
+ * with.
  *
  * ## What this does NOT close, said plainly
  *
- * The whitelist rests on "coverage is the tool's own words about the world".
- * An author who interpolates an unvalidated argument into a coverage entry —
- * a `checked` line built by string-interpolating the `switch` argument the
- * model passed — puts a model-supplied token back into the corpus through the
- * one list this file admits. That is narrower than the hole it closes (the
- * author chose to echo, rather than the primitive echoing by design), and it
- * is not detectable from here: this library cannot tell which characters of a
- * sentence a tool composed and which it copied. The guidance is on the door
- * itself — interpolate identifiers you RESOLVED, not identifiers you were
- * handed. It is also the general limit of the evidence corpus, not a new one:
- * any tool that echoes its arguments into its result has always grounded
- * them.
+ * The rule rests on "everything but `looked_for` is the tool's own words about
+ * the world". An author who interpolates an unvalidated argument into any
+ * other field — a `checked` line built by string-interpolating the `switch`
+ * argument the model passed, an extra key echoing the request back — puts a
+ * model-supplied token into the corpus by hand. That is narrower than the hole
+ * this file closes (the author chose to echo, rather than the primitive
+ * echoing by design), and it is not detectable from here: this library cannot
+ * tell which characters of a sentence a tool composed and which it copied. The
+ * guidance is on the door itself — interpolate identifiers you RESOLVED, not
+ * identifiers you were handed. It is also the general limit of the evidence
+ * corpus, not a new one: any tool that echoes its arguments into its result
+ * has always grounded them.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.absenceEvidenceProjection = void 0;
 const absent_js_1 = require("./absent.js");
 const ledger_js_1 = require("./ledger.js");
-/** The coverage lists of one absence, as the only thing it grounds. */
-function coverageOnly(absence) {
-    return [absence.checked ?? [], absence.not_checked ?? [], absence.cannot_cover ?? []];
+/**
+ * The ONE field of an absence that is withheld from the evidence corpus.
+ *
+ * Tool-authored knowledge grounds; caller echoes never do. Every other field —
+ * the coverage lists, the note, `try_instead`, and any extra key the tool
+ * attached — is the tool stating what it knows about the world, and that is
+ * what an answer built on an absence is entitled to cite. `looked_for` states
+ * what was ASKED FOR, and in practice quotes the arguments the model passed,
+ * so indexing it would ground every identifier a model invented as long as it
+ * handed the invention to one tool that found nothing.
+ *
+ * The distinction is about the SOURCE of the words, not their position in the
+ * shape: a tool author who interpolates an unvalidated argument into any other
+ * field re-opens the same hole by hand — see "What this does NOT close" above.
+ */
+const CALLER_ECHO_FIELD = 'looked_for';
+/** One absence, minus the caller's echo. */
+function toolAuthoredOnly(absence) {
+    // Entries, not fields: a tool may spread `absent(…)` and attach keys the
+    // `ToolAbsence` type never named, and those are the point of this widening.
+    const entries = Object.entries(absence);
+    return Object.fromEntries(entries.filter(([key]) => key !== CALLER_ECHO_FIELD));
 }
 /**
  * Project a parsed tool result down to what it may ground, or `undefined`
@@ -67,24 +106,28 @@ function coverageOnly(absence) {
  * indexes exactly as it always did.
  *
  * Two shapes carry one: a bare absence, and an absence bounded by a coverage
- * ledger (`coverage(absent(…), …)`). A ledger's own lists are all tool
- * prose, so they are indexed whole; only the absence inside it is narrowed.
- * An absence buried deeper than that — inside a tool's own domain object —
- * is NOT found, and is left indexed as ordinary data: this projection
- * recognizes the shapes this library mints, and does not go hunting through
- * values it did not write.
+ * ledger (`coverage(absent(…), …)`). A ledger's own lists are all tool prose,
+ * so they are indexed whole; the absence inside it loses the same one field a
+ * bare absence loses, and nothing else. An absence buried deeper than that —
+ * inside a tool's own domain object — is NOT found, and is left indexed as
+ * ordinary data: this projection recognizes the shapes this library mints, and
+ * does not go hunting through values it did not write.
+ *
+ * What comes back is a value to WALK, not a set of strings: the caller's
+ * indexer does the leaf and key work, so an extra key holding a nested object
+ * or an array of names is projected without this file knowing its shape.
  */
 function absenceEvidenceProjection(parsed) {
     const absence = (0, absent_js_1.readAbsence)(parsed);
     if (absence !== undefined)
-        return coverageOnly(absence);
+        return toolAuthoredOnly(absence);
     const covered = (0, ledger_js_1.readCoverageLedger)(parsed);
     if (covered === undefined)
         return undefined;
     const inner = (0, absent_js_1.readAbsence)(covered.result);
     if (inner === undefined)
         return undefined;
-    return [covered.af_coverage, ...coverageOnly(inner)];
+    return [covered.af_coverage, toolAuthoredOnly(inner)];
 }
 exports.absenceEvidenceProjection = absenceEvidenceProjection;
 //# sourceMappingURL=evidence.js.map

package/dist/core/agent/coverage/evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../../src/core/agent/coverage/evidence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;;;AAEH,2CAA0C;AAC1C,2CAAiD;AAGjD,uEAAuE;AACvE,SAAS,YAAY,CAAC,OAAoB;IACxC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,yBAAyB,CAAC,MAAe;IACvD,MAAM,OAAO,GAAG,IAAA,uBAAW,EAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAA,uBAAW,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AARD,8DAQC"}
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../../src/core/agent/coverage/evidence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyEG;;;AAEH,2CAA0C;AAC1C,2CAAiD;AAGjD;;;;;;;;;;;;;;GAcG;AACH,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAEvC,4CAA4C;AAC5C,SAAS,gBAAgB,CAAC,OAAoB;IAC5C,yEAAyE;IACzE,4EAA4E;IAC5E,MAAM,OAAO,GAA8C,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnF,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,yBAAyB,CAAC,MAAe;IACvD,MAAM,OAAO,GAAG,IAAA,uBAAW,EAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAA,8BAAkB,EAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAA,uBAAW,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AARD,8DAQC"}

package/dist/core/agent/evidence/evidenceIndex.js

@@ -27,13 +27,14 @@
  *     value because the model passed it to a tool would let any invention
  *     launder itself through one failed lookup.
  *   • **The model's own earlier answers do not count**, for the same reason.
- *   • **An `absent(…)` result grounds its COVERAGE only.** An absence names
- *     what was looked FOR, which in practice quotes the arguments the model
- *     passed — so indexing the whole frame would ground an invented
- *     identifier through the one operation that proves nothing about it: a
- *     lookup that found nothing. `checked` / `not_checked` / `cannot_cover`
- *     are the tool's own words about the world and do count. See
- *     `../coverage/evidence.ts`.
+ *   • **An `absent(…)` result grounds everything EXCEPT `looked_for`.** Its
+ *     coverage lists, its `try_instead`, its note and any extra key the tool
+ *     attached (a `known_shares` list, say) are the tool's own words about the
+ *     world, and an answer that follows the absence's advice must not be
+ *     called ungrounded for doing so. `looked_for` alone quotes the arguments
+ *     the model passed, so indexing it would ground an invented identifier
+ *     through the one operation that proves nothing about it: a lookup that
+ *     found nothing. See `../coverage/evidence.ts`.
  *
  * The EXEMPT index is built from a different corpus with the same machinery:
  * the user's own message, the conversation's user/system turns, and the
@@ -105,13 +106,13 @@ function indexResult(content, sink) {
     if (trimmed.startsWith('{') || trimmed.startsWith('[')) {
         try {
             const parsed = JSON.parse(trimmed);
-            // An `absent(…)` frame grounds its COVERAGE and nothing else: the rest
-            // of it is prose about the REQUEST, which usually quotes the model's own
-            // arguments, and indexing that would ground every identifier a model
-            // invented as long as it handed the invention to one tool that found
-            // nothing. See `../coverage/evidence.ts` — it is the frames.ts argument
-            // on the tool side of the conversation. `undefined` (every other result
-            // ever returned) keeps the walk it always had.
+            // An `absent(…)` frame grounds everything the TOOL authored and drops
+            // the one field that quotes the REQUEST (`looked_for`) — indexing that
+            // would ground every identifier a model invented as long as it handed
+            // the invention to one tool that found nothing. See
+            // `../coverage/evidence.ts` — it is the frames.ts argument on the tool
+            // side of the conversation. `undefined` (every other result ever
+            // returned) keeps the walk it always had.
             const projection = (0, index_js_1.absenceEvidenceProjection)(parsed);
             walk(projection ?? parsed, sink);
             return;

package/dist/core/agent/evidence/evidenceIndex.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidenceIndex.js","sourceRoot":"","sources":["../../../../src/core/agent/evidence/evidenceIndex.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;;;AAIH,mDAAiE;AACjE,2CAAoD;AACpD,iDAAuE;AAEvE;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAoBjC,SAAS,GAAG,CAAC,IAAU,EAAE,GAAW;IAClC,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO;IACxB,KAAK,MAAM,IAAI,IAAI,IAAA,0BAAW,EAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAU,EAAE,IAAY;IACvC,KAAK,MAAM,KAAK,IAAI,IAAA,uBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO;QAC7B,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,SAAS,IAAI,CAAC,IAAa,EAAE,IAAU;IACrC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IACpE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,wEAAwE;QACxE,uDAAuD;QACvD,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,OAAe,EAAE,IAAU;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,wEAAwE;YACxE,+CAA+C;YAC/C,MAAM,UAAU,GAAG,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,4BAA4B;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAAC,OAA8B;IAChE,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAClC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;AAC9D,CAAC;AAPD,kDAOC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,aAAa,CAAC,IAI7B;IACC,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3E,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC3D,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,IAAA,iCAAqB,EAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACjD,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,wEAAwE;QACxE,wEAAwE;QACxE,iCAAiC;aAC5B,IAAI,GAAG,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAxBD,sCAwBC"}
+{"version":3,"file":"evidenceIndex.js","sourceRoot":"","sources":["../../../../src/core/agent/evidence/evidenceIndex.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;;;AAIH,mDAAiE;AACjE,2CAAoD;AACpD,iDAAuE;AAEvE;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,OAAO,CAAC;AAoBjC,SAAS,GAAG,CAAC,IAAU,EAAE,GAAW;IAClC,MAAM,IAAI,GAAG,IAAA,6BAAc,EAAC,GAAG,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO;IACxB,KAAK,MAAM,IAAI,IAAI,IAAA,0BAAW,EAAC,IAAI,CAAC,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO;QAC7B,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,IAAU,EAAE,IAAY;IACvC,KAAK,MAAM,KAAK,IAAI,IAAA,uBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,OAAO;QAC7B,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,0DAA0D;AAC1D,SAAS,IAAI,CAAC,IAAa,EAAE,IAAU;IACrC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IACpE,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,wEAAwE;QACxE,uDAAuD;QACvD,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChB,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,SAAS,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtF,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,EAAE,IAAI,IAAI;YAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,SAAS,WAAW,CAAC,OAAe,EAAE,IAAU;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,sEAAsE;YACtE,uEAAuE;YACvE,sEAAsE;YACtE,oDAAoD;YACpD,uEAAuE;YACvE,iEAAiE;YACjE,0CAA0C;YAC1C,MAAM,UAAU,GAAG,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,UAAU,IAAI,MAAM,EAAE,IAAI,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,4BAA4B;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,mBAAmB,CAAC,OAA8B;IAChE,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3E,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAClC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;AAC9D,CAAC;AAPD,kDAOC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,aAAa,CAAC,IAI7B;IACC,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,IAAI,GAAG,EAAU,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3E,IAAI,IAAI,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC3D,sEAAsE;QACtE,yEAAyE;QACzE,wEAAwE;QACxE,6BAA6B;QAC7B,IAAI,IAAA,iCAAqB,EAAC,GAAG,CAAC,OAAO,CAAC;YAAE,SAAS;QACjD,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QAClD,wEAAwE;QACxE,wEAAwE;QACxE,iCAAiC;aAC5B,IAAI,GAAG,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAxBD,sCAwBC"}

package/dist/core/agent/toolArgsValidation.js

@@ -3,8 +3,10 @@
  * toolArgsValidation — validate LLM-produced tool args against the tool's
  * declared `inputSchema` BEFORE dispatch (backlog #9).
  *
- * Pattern: pure function module — no state, no events; the toolCalls stage
- *          owns when to call it and what to do with the verdict.
+ * Pattern: pure function module — no events, and no state beyond one compiled-
+ *          regex cache (which doubles as the warn-once ledger for `pattern`s
+ *          that do not compile); the toolCalls stage owns when to call it and
+ *          what to do with the verdict.
  * Role:    The model writes tool args as free-form JSON; nothing guaranteed
  *          they match the schema the tool advertised. Dispatching garbage
  *          surfaced as deep tool stack traces (or worse, silent misbehavior).
@@ -15,27 +17,138 @@
  * ── Honest-subset contract ────────────────────────────────────────────────
  * This is NOT a full JSON Schema implementation. It enforces the core that
  * tool schemas in the wild actually use, and IGNORES everything else
- * (permissive on unknown keywords — a schema using `pattern`/`oneOf`/`$ref`
- * still validates the supported core, never false-rejects on the rest):
+ * (permissive on unknown keywords — a schema using `oneOf`/`$ref` still
+ * validates the supported core, never false-rejects on the rest):
  *
  *   ENFORCED: `type` (object/array/string/number/integer/boolean/null,
  *             union arrays), `required`, `properties` (recursive),
  *             `items` (single-schema, recursive), `enum` (primitives),
- *             `additionalProperties: false` ONLY when explicitly set.
- *   IGNORED:  format, pattern, min/max*, oneOf/anyOf/allOf/not, $ref,
+ *             `additionalProperties: false` ONLY when explicitly set,
+ *             and the STRING SHAPE keywords `pattern` / `minLength` /
+ *             `maxLength`.
+ *   IGNORED:  format, numeric min/max, oneOf/anyOf/allOf/not, $ref,
  *             const, dependencies, …
  *
- * ── Security: never echo VALUES ───────────────────────────────────────────
- * Issues name the PATH, the EXPECTED shape, and the TYPE of what arrived —
- * never the supplied value itself. The message flows into history (LLM),
- * the emit channel, and traces; arg values can carry PII or injection
- * payloads. Enum expectations echo SCHEMA values only (already LLM-visible
- * in the tools block).
+ * ── Why string SHAPE joined the subset ────────────────────────────────────
+ * A tool result ended with an offer ("I can also map these ids to volume
+ * names"); the person answered "yes please"; the model bound that sentence as
+ * the IDENTIFIER argument and dispatched. The tool's schema declared the
+ * identifier's shape and this boundary did not read it, so a call that could
+ * never succeed cost a round trip — and the consumer hand-rolled an
+ * affirmative blocklist to do what the declaration already said. A declared
+ * shape a boundary ignores is worse than no declaration: the author believes
+ * it is enforced.
+ *
+ * `pattern` is JSON Schema's own semantics — UNANCHORED, ECMA-262, applied to
+ * strings only. A regex the schema author got wrong must never take dispatch
+ * with it: it is compiled once, and a compile failure degrades to no-pattern
+ * plus one developer warning.
+ *
+ * ── Security: what an issue may echo ──────────────────────────────────────
+ * `type` / `enum` / `required` / `additionalProperties` issues name the PATH,
+ * the EXPECTED shape, and the TYPE of what arrived — never the supplied value.
+ * Enum expectations echo SCHEMA values only (already LLM-visible in the tools
+ * block).
+ *
+ * String-SHAPE issues are the one exception, and it is a narrow one: the
+ * complaint IS the value's shape, so `expected string, got string` teaches
+ * nothing and the correction cannot converge. They carry `value` — a capped
+ * excerpt ({@link MAX_VALUE_CHARS}) of the offending string — plus `hint`, the
+ * parameter's own `description`, which is where an author writes what the
+ * identifier looks like. Neither adds exposure: the value is the model's own
+ * tool-call argument, already verbatim in the history this message is appended
+ * to. The OTel adapter renders `path`/`expected`/`got` only, so third-party
+ * telemetry stays value-free either way.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.formatToolArgIssues = exports.validateToolArgs = void 0;
 /** Cap so a pathological schema/args pair can't flood history or events. */
 const MAX_ISSUES = 10;
+/** Ceiling on the echoed excerpt of an offending string. Enough to recognize
+ *  a sentence bound where an identifier belonged; short enough that a 5 MB
+ *  argument cannot ride the message into history. */
+const MAX_VALUE_CHARS = 80;
+/**
+ * Ceiling on compiled `pattern`s held. Schemas are finite in a process, so
+ * this is a fence against dynamically-minted ones rather than a tuning knob:
+ * past it, patterns compile per call (and a broken one warns again) instead of
+ * the map growing without bound.
+ */
+const MAX_CACHED_PATTERNS = 256;
+/**
+ * Compiled `pattern`s, and the warn-once ledger for the broken ones. A `null`
+ * entry means "this pattern does not compile" — recorded so a schema bug is
+ * reported once to the developer rather than once per dispatch.
+ */
+const patternCache = new Map();
+function compilePattern(pattern) {
+    const cached = patternCache.get(pattern);
+    if (cached !== undefined)
+        return cached;
+    let compiled = null;
+    try {
+        // No flags: JSON Schema `pattern` is an unanchored ECMA-262 match, and a
+        // `g` flag would make the RegExp stateful across calls.
+        compiled = new RegExp(pattern);
+    }
+    catch {
+        console.warn(`[agentfootprint] a tool inputSchema declares a \`pattern\` that is not a valid regular ` +
+            `expression (${pattern}) — it is IGNORED, so this argument's shape is NOT enforced. ` +
+            `Fix the expression or drop the keyword.`);
+    }
+    if (patternCache.size < MAX_CACHED_PATTERNS)
+        patternCache.set(pattern, compiled);
+    return compiled;
+}
+/** A length bound this validator will act on: a non-negative integer. Anything
+ *  else is outside the honest subset and ignored rather than guessed at. */
+function lengthBound(raw) {
+    return typeof raw === 'number' && Number.isInteger(raw) && raw >= 0 ? raw : undefined;
+}
+function excerptOf(value) {
+    return value.length <= MAX_VALUE_CHARS ? value : `${value.slice(0, MAX_VALUE_CHARS)}…`;
+}
+function descriptionOf(schema) {
+    const raw = schema.description;
+    if (typeof raw !== 'string')
+        return undefined;
+    const trimmed = raw.trim();
+    return trimmed === '' ? undefined : trimmed;
+}
+/**
+ * The string SHAPE keywords. At most ONE issue per argument: `pattern`
+ * describes the value completely, so adding "and it is too short" is a second
+ * sentence about one mistake.
+ */
+function checkStringShape(value, schema, path, issues) {
+    const hint = descriptionOf(schema);
+    const teach = (expected, got) => {
+        issues.push({
+            path,
+            expected,
+            got,
+            value: excerptOf(value),
+            ...(hint !== undefined && { hint }),
+        });
+    };
+    const pattern = schema.pattern;
+    if (typeof pattern === 'string') {
+        const regex = compilePattern(pattern);
+        if (regex !== null && !regex.test(value)) {
+            teach(`a string matching ${pattern}`, 'string');
+            return;
+        }
+    }
+    const min = lengthBound(schema.minLength);
+    if (min !== undefined && value.length < min) {
+        teach(`a string of at least ${min} characters`, `string of length ${value.length}`);
+        return;
+    }
+    const max = lengthBound(schema.maxLength);
+    if (max !== undefined && value.length > max) {
+        teach(`a string of at most ${max} characters`, `string of length ${value.length}`);
+    }
+}
 function typeNameOf(value) {
     if (value === null)
         return 'null';
@@ -97,6 +210,12 @@ function validateNode(value, schema, path, issues) {
             return;
         }
     }
+    // String SHAPE — same place, same dial, same result shape as `type`/`enum`
+    // above. Applies to strings only, which is JSON Schema's own rule.
+    if (typeof value === 'string') {
+        checkStringShape(value, schema, path, issues);
+        return;
+    }
     // Object keywords.
     if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
         const record = value;
@@ -173,17 +292,22 @@ function validateToolArgs(args, inputSchema) {
 }
 exports.validateToolArgs = validateToolArgs;
 /**
- * Render the MODEL-VISIBLE tool result for a rejected call. Names paths,
- * expectations, and received TYPES — never received values. The model
- * already has the full schema in its tools block; pointing at the issues
- * is what makes the retry converge.
+ * Render the MODEL-VISIBLE tool result for a rejected call. Names paths and
+ * expectations; reports received TYPES for structural issues and the capped
+ * offending VALUE for string-shape ones, because a shape complaint that will
+ * not say which string it is about cannot be acted on. `JSON.stringify` quotes
+ * and escapes the excerpt, so a multi-line argument stays one line.
+ *
+ * The parameter's own `description` follows on its own line when the schema
+ * declares one: that sentence is usually the whole correction.
  */
 function formatToolArgIssues(toolName, issues) {
     const lines = issues.map((issue) => {
         const where = issue.path === '' ? 'arguments' : `'${issue.path}'`;
-        return issue.expected === 'required'
+        const head = issue.expected === 'required'
             ? `- ${where} is required but missing`
-            : `- ${where}: expected ${issue.expected}, got ${issue.got}`;
+            : `- ${where}: expected ${issue.expected}, got ${issue.value === undefined ? issue.got : JSON.stringify(issue.value)}`;
+        return issue.hint === undefined ? head : `${head}\n  ${where} is described as: ${issue.hint}`;
     });
     return (`Invalid arguments for tool '${toolName}' — the call was not executed.\n` +
         `${lines.join('\n')}\n` +

package/dist/core/agent/toolArgsValidation.js.map

@@ -1 +1 @@
-{"version":3,"file":"toolArgsValidation.js","sourceRoot":"","sources":["../../../src/core/agent/toolArgsValidation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;;;AAmBH,4EAA4E;AAC5E,MAAM,UAAU,GAAG,EAAE,CAAC;AAItB,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,KAAc,EAAE,UAAkB;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB;YACE,8DAA8D;YAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,MAAsB,EACtB,IAAY,EACZ,MAAsB;IAEtB,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;QAAE,OAAO;IAExC,yDAAyD;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC9D,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,yDAAyD;QACnE,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,QAAQ,EAAE,UAAU,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzF,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,KAA0C,CAAC;QAC1D,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;YACjE,CAAC,CAAE,MAAM,CAAC,UAAgD;YAC1D,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBACtC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE;wBAC1C,QAAQ,EAAE,UAAU;wBACpB,GAAG,EAAE,SAAS;qBACf,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;wBAAE,OAAO;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;oBAAE,SAAS,CAAC,yBAAyB;gBACzD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;oBAAE,SAAS;gBACtE,YAAY,CACV,MAAM,CAAC,GAAG,CAAC,EACX,WAA6B,EAC7B,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EACpC,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;oBAAE,OAAO;YAC1C,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,UAAU,EAAE,CAAC;YACxD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE;wBAC1C,QAAQ,EAAE,0BAA0B;wBACpC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;qBAC7B,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;wBAAE,OAAO;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAuB,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzE,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;oBAAE,OAAO;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,IAAa,EACb,WAA0D;IAE1D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrF,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,YAAY,CAAC,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AARD,4CAQC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAA+B;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QAClE,OAAO,KAAK,CAAC,QAAQ,KAAK,UAAU;YAClC,CAAC,CAAC,KAAK,KAAK,0BAA0B;YACtC,CAAC,CAAC,KAAK,KAAK,cAAc,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,GAAG,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,OAAO,CACL,+BAA+B,QAAQ,kCAAkC;QACzE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACvB,uEAAuE,CACxE,CAAC;AACJ,CAAC;AAZD,kDAYC"}
+{"version":3,"file":"toolArgsValidation.js","sourceRoot":"","sources":["../../../src/core/agent/toolArgsValidation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;;;AAgCH,4EAA4E;AAC5E,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;qDAEqD;AACrD,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAIhC;;;;GAIG;AACH,MAAM,YAAY,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEtD,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,yEAAyE;QACzE,wDAAwD;QACxD,QAAQ,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,IAAI,CACV,yFAAyF;YACvF,eAAe,OAAO,+DAA+D;YACrF,yCAAyC,CAC5C,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,GAAG,mBAAmB;QAAE,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;4EAC4E;AAC5E,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,GAAG,CAAC;AACzF,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CACvB,KAAa,EACb,MAAsB,EACtB,IAAY,EACZ,MAAsB;IAEtB,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAQ,EAAE;QACpD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI;YACJ,QAAQ;YACR,GAAG;YACH,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;YACvB,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,KAAK,CAAC,qBAAqB,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC5C,KAAK,CAAC,wBAAwB,GAAG,aAAa,EAAE,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC5C,KAAK,CAAC,uBAAuB,GAAG,aAAa,EAAE,oBAAoB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,OAAO,OAAO,KAAK,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,KAAc,EAAE,UAAkB;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9E,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9B,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,KAAK,KAAK,IAAI,CAAC;QACxB;YACE,8DAA8D;YAC9D,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,CACL,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,MAAsB,EACtB,IAAY,EACZ,MAAsB;IAEtB,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;QAAE,OAAO;IAExC,yDAAyD;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1C,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC9D,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjB,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,CAAC,yDAAyD;QACnE,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI;gBACJ,QAAQ,EAAE,UAAU,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACzF,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,KAA0C,CAAC;QAC1D,MAAM,UAAU,GACd,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI;YACjE,CAAC,CAAE,MAAM,CAAC,UAAgD;YAC1D,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,SAAS;gBACtC,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE;wBAC1C,QAAQ,EAAE,UAAU;wBACpB,GAAG,EAAE,SAAS;qBACf,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;wBAAE,OAAO;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC;oBAAE,SAAS,CAAC,yBAAyB;gBACzD,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,IAAI;oBAAE,SAAS;gBACtE,YAAY,CACV,MAAM,CAAC,GAAG,CAAC,EACX,WAA6B,EAC7B,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EACpC,MAAM,CACP,CAAC;gBACF,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;oBAAE,OAAO;YAC1C,CAAC;QACH,CAAC;QAED,6DAA6D;QAC7D,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK,IAAI,UAAU,EAAE,CAAC;YACxD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE;wBAC1C,QAAQ,EAAE,0BAA0B;wBACpC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;qBAC7B,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;wBAAE,OAAO;gBAC1C,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAuB,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzE,IAAI,MAAM,CAAC,MAAM,IAAI,UAAU;oBAAE,OAAO;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAC9B,IAAa,EACb,WAA0D;IAE1D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrF,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,YAAY,CAAC,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AARD,4CAQC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,MAA+B;IACnF,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,CAAC;QAClE,MAAM,IAAI,GACR,KAAK,CAAC,QAAQ,KAAK,UAAU;YAC3B,CAAC,CAAC,KAAK,KAAK,0BAA0B;YACtC,CAAC,CAAC,KAAK,KAAK,cAAc,KAAK,CAAC,QAAQ,SACpC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CACpE,EAAE,CAAC;QACT,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,KAAK,qBAAqB,KAAK,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,OAAO,CACL,+BAA+B,QAAQ,kCAAkC;QACzE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACvB,uEAAuE,CACxE,CAAC;AACJ,CAAC;AAhBD,kDAgBC"}

package/dist/esm/adapters/hosting/foundryResponses.d.ts

@@ -0,0 +1,89 @@
+/**
+ * adapters/hosting/foundryResponses — an agent behind Microsoft Foundry's
+ * hosted-agent contract.
+ *
+ * ── The split, and why it is here ────────────────────────────────────────────
+ * Two different things are needed to serve a Foundry hosted agent, and only one
+ * of them is Microsoft's:
+ *
+ *   • The **Responses protocol** — `input` items, a `response` object, the
+ *     named streaming lifecycle. That is a protocol several runtimes speak, so
+ *     it lives in `responsesWire.ts` with no vendor in it.
+ *   • The **hosting contract** — port 8088, `POST /responses`, a `HEAD` probe
+ *     on the same path, `GET /readiness` answering `{"status":"healthy"}`, and
+ *     `agent_session_id` as a session alias. That IS this runtime's contract,
+ *     the same way `/invocations` and `X-Amzn-…` are another's, and it is what
+ *     this file supplies.
+ *
+ * So this file is a configuration, not an implementation. Everything hard —
+ * draining on close, aborting when the caller hangs up, failing a handler that
+ * throws or answers nothing — is `httpHost`'s, shared with every other adapter
+ * rather than reimplemented here where the two would drift.
+ *
+ * ── What it does NOT do ──────────────────────────────────────────────────────
+ * **Workflow Visualizer topology is not provided.** The Inspector can invoke
+ * this host and render its answer; it does not learn that the answer came from
+ * four composed agents, because nothing in the Responses protocol carries that
+ * and inventing a channel for it would be claiming a compatibility this has
+ * never demonstrated. An agent's internal structure is readable from
+ * agentfootprint's own recorders.
+ *
+ * Everything the protocol does not carry — tool calls, image and file input,
+ * function-call output, structured output — is refused by name. See
+ * `responsesWire.ts`.
+ *
+ * This is an **inbound hosting adapter**: it is the door callers arrive at. It
+ * is not a model provider, and it has nothing to do with which model the agent
+ * calls — for Foundry models, that is `openai()` with the endpoint's base URL.
+ *
+ * @example  An agent behind the Inspector
+ *   import { foundryResponsesHost, memorySessions, standingAgent } from 'agentfootprint/hosting';
+ *
+ *   const handle = await standingAgent({
+ *     agent,
+ *     sessions: memorySessions(),
+ *     host: foundryResponsesHost(),
+ *   });
+ *   process.on('SIGTERM', () => void handle.close());
+ */
+/// <reference types="node" />
+import type { IncomingMessage, Server, ServerResponse } from 'node:http';
+import { type HttpHost } from '../../hosting/httpHost.js';
+/** The port a Foundry hosted agent is expected on. */
+export declare const DEFAULT_FOUNDRY_PORT = 8088;
+/** The path that takes a turn. */
+export declare const FOUNDRY_INVOKE_PATH = "/responses";
+/** The path a Foundry hosted agent answers a readiness probe on. */
+export declare const FOUNDRY_READINESS_PATH = "/readiness";
+/**
+ * Session aliases this contract accepts, in precedence order.
+ *
+ * `conversation` is the protocol's own; `agent_session_id` is this runtime's;
+ * `session_id` is the spelling several clients send anyway. First one present
+ * wins, so a caller using any of the three reaches the same session.
+ */
+export declare const FOUNDRY_SESSION_FIELDS: readonly string[];
+export interface FoundryResponsesHostOptions {
+    /** Port to bind. Default {@link DEFAULT_FOUNDRY_PORT}. Pass `0` for an ephemeral test port. */
+    readonly port?: number;
+    /** Interface to bind. Default `'0.0.0.0'` — a container's door has to be reachable from outside it. */
+    readonly hostname?: string;
+    /** Model label echoed in `response` objects when the request names none. */
+    readonly model?: string;
+    /** Ceiling on a request body. Default one mebibyte. */
+    readonly maxBodyBytes?: number;
+    /**
+     * A `node:http` server you own, to ATTACH these routes to rather than binding
+     * one. Refused together with `port`/`hostname`, which would name a socket
+     * this host does not bind.
+     */
+    readonly server?: Server;
+    /** Answer a path this host does not own. Private-server mode only. */
+    readonly onUnhandled?: (req: IncomingMessage, res: ServerResponse) => void;
+}
+/**
+ * An {@link HttpHost} speaking Foundry's hosted-agent contract.
+ *
+ * @param options - Port, interface, model label and body ceiling.
+ */
+export declare function foundryResponsesHost(options?: FoundryResponsesHostOptions): HttpHost;