agentfootprint 9.94.3 → 9.96.1

package/dist/esm/answer-validation/validate.js

@@ -0,0 +1,321 @@
+/** One explicit JSON-answer validation; the runner owns when to invoke it. */
+import { applyOutputSchema } from '../core/outputSchema.js';
+import { computeArtifactDigest } from '../artifacts/payload.js';
+import { createAnswerEvidenceResolver } from './evidence.js';
+const DEFAULT_LIMITS = Object.freeze({
+    maxReads: 16,
+    maxBytes: 4 * 1024 * 1024,
+    maxChecks: 100,
+    maxCandidateBytes: 1024 * 1024,
+    timeoutMs: 5000,
+});
+const encoder = new TextEncoder();
+const dispositions = new Set(['checked-pass', 'checked-fail', 'not-applicable', 'unreachable']);
+function ownData(value, allowed) {
+    if (value === null ||
+        typeof value !== 'object' ||
+        Array.isArray(value) ||
+        ![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+        throw new Error('Expected a plain data object.');
+    const result = Object.create(null);
+    for (const key of Reflect.ownKeys(value)) {
+        if (typeof key !== 'string' || (allowed && !allowed.includes(key)))
+            throw new Error('Unknown property.');
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        if (!descriptor?.enumerable || !('value' in descriptor))
+            throw new Error('Expected an enumerable data property.');
+        Object.defineProperty(result, key, { value: descriptor.value, enumerable: true });
+    }
+    return result;
+}
+function text(value, max) {
+    if (typeof value !== 'string' || value.trim() === '' || value.length > max)
+        throw new Error('Expected bounded non-empty text.');
+    return value;
+}
+/** Validate and snapshot an authored contract once, before running an agent. */
+export function resolveAnswerValidation(options) {
+    const source = ownData(options, ['id', 'version', 'mode', 'limits', 'validate']);
+    const id = text(source.id, 128);
+    const version = text(source.version, 128);
+    const mode = source.mode === undefined ? 'enforce' : source.mode;
+    if (mode !== 'enforce' && mode !== 'observe')
+        throw new Error('answerValidation.mode must be enforce or observe.');
+    if (typeof source.validate !== 'function')
+        throw new Error('answerValidation.validate must be a function.');
+    const validate = source.validate;
+    const supplied = source.limits === undefined ? {} : ownData(source.limits, Object.keys(DEFAULT_LIMITS));
+    const limits = { ...DEFAULT_LIMITS };
+    for (const key of Object.keys(DEFAULT_LIMITS)) {
+        if (Object.hasOwn(supplied, key)) {
+            const value = supplied[key];
+            if (typeof value !== 'number' ||
+                !Number.isSafeInteger(value) ||
+                value <= 0 ||
+                (key === 'timeoutMs' && value > 2147483647))
+                throw new Error(`answerValidation.limits.${key} must be a positive bounded integer.`);
+            limits[key] = value;
+        }
+    }
+    return Object.freeze({
+        id,
+        version,
+        mode,
+        limits: Object.freeze(limits),
+        validate: (candidate, context) => validate(candidate, context),
+    });
+}
+/** JSON copy without invoking toJSON/getters or silently dropping data. */
+function jsonCopy(value, maxBytes, freeze) {
+    let budget = maxBytes;
+    const ancestors = new Set();
+    const spend = (bytes) => {
+        budget -= bytes;
+        if (budget < 0)
+            throw new Error('JSON byte limit.');
+    };
+    const string = (item) => {
+        if (item.length > budget)
+            throw new Error('JSON byte limit.');
+        spend(encoder.encode(JSON.stringify(item)).byteLength);
+    };
+    const copy = (item, depth) => {
+        if (depth > 100)
+            throw new Error('JSON nesting limit.');
+        if (item === null) {
+            spend(4);
+            return null;
+        }
+        if (typeof item === 'string') {
+            string(item);
+            return item;
+        }
+        if (typeof item === 'boolean') {
+            spend(item ? 4 : 5);
+            return item;
+        }
+        if (typeof item === 'number') {
+            if (!Number.isFinite(item) || Object.is(item, -0))
+                throw new Error('Non-lossless JSON number.');
+            spend(JSON.stringify(item).length);
+            return item;
+        }
+        if (typeof item !== 'object')
+            throw new Error('Non-JSON value.');
+        if (ancestors.has(item))
+            throw new Error('Cyclic JSON value.');
+        ancestors.add(item);
+        spend(2);
+        let output;
+        if (Array.isArray(item)) {
+            if (Object.getPrototypeOf(item) !== Array.prototype)
+                throw new Error('Non-JSON array prototype.');
+            if (item.length > budget + 1)
+                throw new Error('JSON byte limit.');
+            const keys = Reflect.ownKeys(item);
+            if (keys.length !== item.length + 1)
+                throw new Error('Sparse or decorated array.');
+            const result = [];
+            for (let index = 0; index < item.length; index++) {
+                const descriptor = Object.getOwnPropertyDescriptor(item, String(index));
+                if (!descriptor?.enumerable || !('value' in descriptor))
+                    throw new Error('Sparse or accessor array.');
+                if (index)
+                    spend(1);
+                result.push(copy(descriptor.value, depth + 1));
+            }
+            output = result;
+        }
+        else {
+            const fields = ownData(item);
+            const result = {};
+            let index = 0;
+            for (const key of Object.keys(fields)) {
+                if (index++)
+                    spend(1);
+                string(key);
+                spend(1);
+                Object.defineProperty(result, key, {
+                    value: copy(fields[key], depth + 1),
+                    enumerable: true,
+                    writable: true,
+                    configurable: true,
+                });
+            }
+            output = result;
+        }
+        ancestors.delete(item);
+        return freeze ? Object.freeze(output) : output;
+    };
+    return copy(value, 0);
+}
+function readChecks(value, config, resolved) {
+    // Bound before copying. The copy rejects getters, class instances, cycles,
+    // decorated arrays and values JSON would otherwise silently discard.
+    const source = ownData(value, ['checks']);
+    if (!Array.isArray(source.checks) || source.checks.length > config.limits.maxChecks)
+        throw new Error('Invalid checks.');
+    const detached = jsonCopy(source.checks, config.limits.maxChecks * 4096, false);
+    const ids = new Set();
+    const refs = new Set(resolved);
+    return detached.map((raw) => {
+        const check = ownData(raw, ['id', 'disposition', 'reason', 'path', 'evidenceRefs']);
+        const id = text(check.id, 128);
+        if (ids.has(id) ||
+            typeof check.disposition !== 'string' ||
+            !dispositions.has(check.disposition))
+            throw new Error('Invalid check identity or disposition.');
+        ids.add(id);
+        const reason = check.reason === undefined ? undefined : text(check.reason, 1024);
+        const path = check.path;
+        if (path !== undefined && (typeof path !== 'string' || path.length > 256))
+            throw new Error('Invalid check path.');
+        let evidenceRefs;
+        if (check.evidenceRefs !== undefined) {
+            if (!Array.isArray(check.evidenceRefs) || check.evidenceRefs.length > config.limits.maxReads)
+                throw new Error('Invalid evidence references.');
+            evidenceRefs = check.evidenceRefs.map((ref) => {
+                if (typeof ref !== 'string' || !refs.has(ref))
+                    throw new Error('Unresolved evidence reference.');
+                return ref;
+            });
+            if (new Set(evidenceRefs).size !== evidenceRefs.length)
+                throw new Error('Duplicate evidence reference.');
+        }
+        return Object.freeze({
+            id,
+            disposition: check.disposition,
+            ...(reason !== undefined && { reason }),
+            ...(path !== undefined && { path }),
+            ...(evidenceRefs !== undefined && { evidenceRefs: Object.freeze(evidenceRefs) }),
+        });
+    });
+}
+/**
+ * Validate once. Content is present only when delivery is permitted by this
+ * contract. It is the exact JSON string whose detached value was checked;
+ * callers must not reparse through a transforming schema or rewrite afterward.
+ */
+export async function executeAnswerValidation(raw, parser, config, store, scope, signal) {
+    const controller = new AbortController();
+    const evidence = createAnswerEvidenceResolver(store, scope, config.limits, controller.signal);
+    let reason;
+    let schemaAccepted = false;
+    let canonical;
+    let candidateDigest;
+    let checks = [];
+    let active = true;
+    let stop;
+    const abort = () => {
+        reason = 'aborted';
+        controller.abort();
+        stop?.();
+    };
+    const timedOut = () => {
+        reason = 'timeout';
+        controller.abort();
+        stop?.();
+    };
+    const deadline = Date.now() + config.limits.timeoutMs;
+    const timer = setTimeout(timedOut, config.limits.timeoutMs);
+    signal?.addEventListener('abort', abort, { once: true });
+    if (signal?.aborted)
+        abort();
+    try {
+        const interrupted = new Promise((resolve) => {
+            stop = resolve;
+            if (controller.signal.aborted)
+                resolve();
+        });
+        const work = async () => {
+            if (controller.signal.aborted)
+                return;
+            let candidate;
+            try {
+                if (raw.length > config.limits.maxCandidateBytes ||
+                    encoder.encode(raw).byteLength > config.limits.maxCandidateBytes) {
+                    reason = 'candidate-limit';
+                    return;
+                }
+                candidate = applyOutputSchema(raw, parser);
+            }
+            catch {
+                reason = 'schema-rejected';
+                return;
+            }
+            try {
+                candidate = jsonCopy(candidate, config.limits.maxCandidateBytes, true);
+                canonical = JSON.stringify(candidate);
+                schemaAccepted = true;
+            }
+            catch {
+                reason = 'non-json-candidate';
+                return;
+            }
+            if (Date.now() >= deadline) {
+                timedOut();
+                return;
+            }
+            try {
+                const digest = await computeArtifactDigest(canonical);
+                if (!active || controller.signal.aborted)
+                    return;
+                candidateDigest = digest;
+                const returned = await config.validate(candidate, Object.freeze({ signal: controller.signal, artifacts: evidence.resolver }));
+                if (!active || controller.signal.aborted)
+                    return;
+                if (Date.now() >= deadline) {
+                    timedOut();
+                    return;
+                }
+                try {
+                    checks = readChecks(returned, config, evidence.resolvedRefs());
+                }
+                catch {
+                    reason = 'invalid-validator-result';
+                }
+            }
+            catch {
+                if (active && !controller.signal.aborted)
+                    reason = 'validator-error';
+            }
+        };
+        await Promise.race([work(), interrupted]);
+    }
+    finally {
+        active = false;
+        clearTimeout(timer);
+        signal?.removeEventListener('abort', abort);
+        evidence.close();
+        controller.abort();
+    }
+    const failed = checks.filter((check) => check.disposition === 'checked-fail').length;
+    const checked = failed + checks.filter((check) => check.disposition === 'checked-pass').length;
+    const unreachable = checks.filter((check) => check.disposition === 'unreachable').length;
+    const notApplicable = checks.filter((check) => check.disposition === 'not-applicable').length;
+    if (!reason && evidence.failureReason())
+        reason = `evidence-${evidence.failureReason()}`;
+    if (!reason && checked === 0)
+        reason = 'no-comparable-checks';
+    if (!reason && unreachable > 0)
+        reason = 'unreachable-checks';
+    const status = reason ? 'unverified' : failed > 0 ? 'failed' : 'passed';
+    const report = Object.freeze({
+        validatorId: config.id,
+        validatorVersion: config.version,
+        mode: config.mode,
+        status,
+        checked,
+        failed,
+        unreachable,
+        notApplicable,
+        checks: Object.freeze(checks),
+        schemaAccepted,
+        ...(reason !== undefined && { reason }),
+        ...(candidateDigest !== undefined && { candidateDigest }),
+        resolvedRefs: Object.freeze(evidence.resolvedRefs()),
+    });
+    const content = status === 'passed' || config.mode === 'observe' ? canonical ?? raw : undefined;
+    return { report, ...(content !== undefined && { content }) };
+}
+//# sourceMappingURL=validate.js.map

package/dist/esm/answer-validation/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/answer-validation/validate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,iBAAiB,EAA2B,MAAM,yBAAyB,CAAC;AAErF,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAS7D,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IACzB,SAAS,EAAE,GAAG;IACd,iBAAiB,EAAE,IAAI,GAAG,IAAI;IAC9B,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AACH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEhG,SAAS,OAAO,CAAC,KAAc,EAAE,OAA2B;IAC1D,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEhE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IACvF,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,GAAW;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QACxE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CACrC,OAAmC;IAEnC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IACjF,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;QAC1C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,UAAU;QACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAkD,CAAC;IAC3E,MAAM,QAAQ,GACZ,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACzF,MAAM,MAAM,GAA6D,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAuC,EAAE,CAAC;QACpF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,IACE,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;gBAC5B,KAAK,IAAI,CAAC;gBACV,CAAC,GAAG,KAAK,WAAW,IAAI,KAAK,GAAG,UAAU,CAAC;gBAE3C,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,sCAAsC,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,OAAO;QACP,IAAI;QACJ,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,QAAQ,EAAE,CAAC,SAAkB,EAAE,OAAgC,EAAE,EAAE,CACjE,QAAQ,CAAC,SAAwB,EAAE,OAAO,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,KAAc,EAAE,QAAgB,EAAE,MAAe;IACjE,IAAI,MAAM,GAAG,QAAQ,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE;QAC9B,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC9D,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,KAAa,EAAW,EAAE;QACrD,IAAI,KAAK,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,CAAC,CAAC,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACjE,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC/D,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,KAAK,CAAC,CAAC,CAAC,CAAC;QACT,IAAI,MAAe,CAAC;QACpB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,SAAS;gBACjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAClE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YACnF,MAAM,MAAM,GAAc,EAAE,CAAC;YAC7B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACjD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxE,IAAI,CAAC,UAAU,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;oBACrD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC/C,IAAI,KAAK;oBAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,MAAM,GAA4B,EAAE,CAAC;YAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,KAAK,EAAE;oBAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC;gBACZ,KAAK,CAAC,CAAC,CAAC,CAAC;gBACT,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;oBACjC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;oBACnC,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QACD,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,UAAU,CACjB,KAAc,EACd,MAAgC,EAChC,QAA2B;IAE3B,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS;QACjF,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,IAAI,EAAE,KAAK,CAAc,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACpF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/B,IACE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC;YAEpC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACzC,IAAI,YAAkC,CAAC;QACvC,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ;gBAC1F,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAC3C,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACpD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM;gBACpD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE;YACF,WAAW,EAAE,KAAK,CAAC,WAAyC;YAC5D,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAW,EACX,MAAmC,EACnC,MAAgC,EAChC,KAAgC,EAChC,KAAoB,EACpB,MAAoB;IAEpB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,MAA0B,CAAC;IAC/B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,SAA6B,CAAC;IAClC,IAAI,eAAmC,CAAC;IACxC,IAAI,MAAM,GAAkB,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,IAAI,IAA8B,CAAC;IACnC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,SAAS,CAAC;QACnB,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,MAAM,GAAG,SAAS,CAAC;QACnB,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,EAAE,EAAE,CAAC;IACX,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,MAAM,EAAE,OAAO;QAAE,KAAK,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAChD,IAAI,GAAG,OAAO,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;gBAAE,OAAO;YACtC,IAAI,SAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,IACE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB;oBAC5C,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAChE,CAAC;oBACD,MAAM,GAAG,iBAAiB,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBACD,SAAS,GAAG,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,iBAAiB,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;gBACvE,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBACtC,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,oBAAoB,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAC3B,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,CAAC,CAAC;gBACtD,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACjD,eAAe,GAAG,MAAM,CAAC;gBACzB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CACpC,SAAS,EACT,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAC3E,CAAC;gBACF,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACjD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC3B,QAAQ,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC;gBACjE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,GAAG,0BAA0B,CAAC;gBACtC,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,GAAG,iBAAiB,CAAC;YACvE,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,KAAK,CAAC;QACf,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,UAAU,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,cAAc,CAAC,CAAC,MAAM,CAAC;IAC/F,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC,MAAM,CAAC;IACzF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,gBAAgB,CAAC,CAAC,MAAM,CAAC;IAC9F,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE;QAAE,MAAM,GAAG,YAAY,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC;IACzF,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,CAAC;QAAE,MAAM,GAAG,sBAAsB,CAAC;IAC9D,IAAI,CAAC,MAAM,IAAI,WAAW,GAAG,CAAC;QAAE,MAAM,GAAG,oBAAoB,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,MAAM,MAAM,GAA2B,MAAM,CAAC,MAAM,CAAC;QACnD,WAAW,EAAE,MAAM,CAAC,EAAE;QACtB,gBAAgB,EAAE,MAAM,CAAC,OAAO;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM;QACN,OAAO;QACP,MAAM;QACN,WAAW;QACX,aAAa;QACb,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,cAAc;QACd,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC;QACvC,GAAG,CAAC,eAAe,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,CAAC;QACzD,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;AAC/D,CAAC"}

package/dist/esm/core/Agent.d.ts

@@ -36,6 +36,7 @@ import { RunnerBase } from './RunnerBase.js';
 import type { ToolRegistryEntry } from './tools.js';
 import type { ToolProvider } from '../tool-providers/types.js';
 import type { AgentArtifactsOptions, AgentInput, AgentOptions, AgentOutput, AgentRecordingsOptions, AgentState, ObserverDeliveryOptions, RunConfig, RunConfigContext, RunConfigFn, WriteProvenanceMode } from './agent/types.js';
+import { type AnswerValidationReport, type ResolvedAnswerValidation } from '../answer-validation/index.js';
 import type { MessageMiddleware, ToolMiddleware } from './agent/middleware/types.js';
 import { AgentBuilder } from './agent/AgentBuilder.js';
 export type { SkillGraphOptions } from './agent/AgentBuilder.js';
@@ -361,6 +362,8 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
      *  function restores `scope.history` from this instead of starting
      *  fresh. Cleared on first read so subsequent runs start clean. */
     private pendingResumeHistory?;
+    /** Retried request's repair state; never inherited by a new human turn. */
+    private pendingEvidenceRecovery?;
     /** Its sibling for the folded spans. A restored conversation that dropped
      *  them would carry summaries nobody could unpack — the evidence would be
      *  destroyed by the act of continuing, which is the one thing retention
@@ -463,6 +466,7 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
     /** `AgentOptions.recordReceipt` (9.88.0) — ON by default. `false` declines
      *  the mint at `callLLM`; nothing else about the run changes. */
     private readonly recordReceiptValue;
+    private readonly answerValidationConfig?;
     constructor(opts: AgentOptions, systemPromptValue: string, registry: readonly ToolRegistryEntry[], voice: {
         readonly appName: string;
         readonly commentaryTemplates: Readonly<Record<string, string>>;
@@ -472,7 +476,7 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
         readonly strictness: 'assist' | 'guard' | 'rails';
         readonly continuity: 'turn' | 'conversation';
         readonly nodeIds: ReadonlySet<string>;
-    }, skillBrains?: import('./agent/skillBrains.js').FoldedSkillBrains, evidenceGate?: ResolvedEvidenceGate, limitsTravelWithTheAnswer?: boolean, recipes?: readonly AppliedRecipe[], skillGraphDeclared?: SkillGraphDeclaredMap, mapsPlan?: import('../maps/engagement/types.js').EngagementPlan, claimContract?: readonly import('../integrity/unsupported-claim/check.js').DeclaredClaim[]);
+    }, skillBrains?: import('./agent/skillBrains.js').FoldedSkillBrains, evidenceGate?: ResolvedEvidenceGate, limitsTravelWithTheAnswer?: boolean, recipes?: readonly AppliedRecipe[], skillGraphDeclared?: SkillGraphDeclaredMap, mapsPlan?: import('../maps/engagement/types.js').EngagementPlan, claimContract?: readonly import('../integrity/unsupported-claim/check.js').DeclaredClaim[], answerValidationConfig?: ResolvedAnswerValidation);
     static create(opts: AgentOptions): AgentBuilder;
     /**
      * Cache policy for the base system prompt. Read by the CacheDecision
@@ -873,6 +877,8 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
      * ```
      */
     checkpoint(): AgentRunCheckpoint | undefined;
+    /** Both checkpoint doors keep the repair budget separately from conversation text. */
+    private evidenceRecoveryOf;
     /**
      * The graph cursor a conversation carrier stores — the run's final
      * committed `currentSkillId`, read from the SNAPSHOT (the state the run
@@ -1302,6 +1308,9 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
      * ```
      */
     unsupportedValues(): AgentState['unsupportedValues'];
+    /** The last run's answer checks, detached from its execution record.
+     * Undefined means no terminal validation ran, never an implicit pass. */
+    answerValidation(): AnswerValidationReport | undefined;
     private finalizeResult;
     private buildChart;
 }

package/dist/esm/core/Agent.js

@@ -121,6 +121,8 @@ import { buildOutputRetryStage } from './agent/stages/outputRetry.js';
 import { RunnerBase, makeRunId } from './RunnerBase.js';
 import { clampIterations, validateMemoryIdUniqueness, validateToolNameUniqueness, } from './agent/validators.js';
 import { buildRouteDeciderStage } from './agent/stages/route.js';
+import { withAnswerValidation } from './agent/stages/answerValidation.js';
+import { AnswerValidationError, } from '../answer-validation/index.js';
 import { buildSeedStage } from './agent/stages/seed.js';
 import { MessageDeniedError } from './agent/middleware/errors.js';
 import { buildCallLLMStage } from './agent/stages/callLLM.js';
@@ -414,6 +416,8 @@ export class Agent extends RunnerBase {
      *  function restores `scope.history` from this instead of starting
      *  fresh. Cleared on first read so subsequent runs start clean. */
     pendingResumeHistory;
+    /** Retried request's repair state; never inherited by a new human turn. */
+    pendingEvidenceRecovery;
     /** Its sibling for the folded spans. A restored conversation that dropped
      *  them would carry summaries nobody could unpack — the evidence would be
      *  destroyed by the act of continuing, which is the one thing retention
@@ -516,8 +520,10 @@ export class Agent extends RunnerBase {
     /** `AgentOptions.recordReceipt` (9.88.0) — ON by default. `false` declines
      *  the mint at `callLLM`; nothing else about the run changes. */
     recordReceiptValue = true;
-    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains, evidenceGate, limitsTravelWithTheAnswer, recipes, skillGraphDeclared, mapsPlan, claimContract) {
+    answerValidationConfig;
+    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains, evidenceGate, limitsTravelWithTheAnswer, recipes, skillGraphDeclared, mapsPlan, claimContract, answerValidationConfig) {
         super();
+        this.answerValidationConfig = answerValidationConfig;
         this.provider = opts.provider;
         this.name = opts.name ?? 'Agent';
         this.id = opts.id ?? 'agent';
@@ -1144,6 +1150,17 @@ export class Agent extends RunnerBase {
             throw new Error('Agent.runTyped: run paused — typed mode does not support pauses. ' +
                 'Use agent.run() + agent.parseOutput(...) after resume.');
         }
+        if (this.answerValidationConfig !== undefined) {
+            // The validator judged the schema's JSON output. Do not run a transforming
+            // or stateful parser again and hand back a value the validator never saw.
+            if (this.answerValidation()?.schemaAccepted !== true) {
+                throw new OutputSchemaError('Answer validation could not establish a JSON schema result.', {
+                    rawOutput: out,
+                    stage: 'schema-validate',
+                });
+            }
+            return JSON.parse(out);
+        }
         return this.parseOutputAsync(out);
     }
     /**
@@ -1306,6 +1323,7 @@ export class Agent extends RunnerBase {
                     // named values one `.cause` deep, where the person deciding what to
                     // do about them will not look.
                     cause instanceof UnsupportedValuesError ||
+                    cause instanceof AnswerValidationError ||
                     // 9.60.0 — a dead checker is a WIRING verdict on this build, not a
                     // recoverable run state: resuming would run the same dead wiring.
                     cause.name === 'CheckerDeadError');
@@ -1334,7 +1352,7 @@ export class Agent extends RunnerBase {
                 this.conversationOwner(), 
                 // …and the same graph cursor (SG-C), from the same snapshot reader —
                 // one reader, two carriers, so neither can lose what the other keeps.
-                this.continuityCursorOf(this.getLastSnapshot()?.sharedState));
+                this.continuityCursorOf(this.getLastSnapshot()?.sharedState), this.evidenceRecoveryOf(this.getLastSnapshot()?.sharedState));
                 throw new RunCheckpointError(cause, checkpoint);
             }
             throw cause;
@@ -1356,6 +1374,7 @@ export class Agent extends RunnerBase {
             this.pendingResumeHistory = undefined;
             this.pendingResumeFolded = undefined;
             this.pendingResumeSkillCursor = undefined;
+            this.pendingEvidenceRecovery = undefined;
         }
     }
     /**
@@ -1724,6 +1743,7 @@ export class Agent extends RunnerBase {
         const folded = this.foldedSpansOf(state);
         const owner = this.conversationOwner();
         const skillCursor = this.continuityCursorOf(state);
+        const evidenceRecovery = this.evidenceRecoveryOf(state);
         return {
             version: 1,
             runId: this.currentRunContext.runId,
@@ -1742,6 +1762,20 @@ export class Agent extends RunnerBase {
             // `continuity: 'conversation'`, so every other checkpoint keeps its
             // exact byte shape.
             ...(skillCursor !== undefined && { skillCursor }),
+            ...(evidenceRecovery !== undefined && { evidenceRecovery }),
+        };
+    }
+    /** Both checkpoint doors keep the repair budget separately from conversation text. */
+    evidenceRecoveryOf(state) {
+        if (state?.evidenceRevisionSpent !== true)
+            return undefined;
+        const pending = state.evidenceRecovery;
+        return {
+            revisionSpent: true,
+            ...(pending !== undefined &&
+                state.evidenceRecoveryUsed !== true && {
+                pending: { instruction: pending.instruction },
+            }),
         };
     }
     /**
@@ -1834,6 +1868,12 @@ export class Agent extends RunnerBase {
         // continuity graph and continued on a `'turn'` one is consumed and
         // ignored, exactly like a `folded` field on an agent that never folds.
         this.pendingResumeSkillCursor = cp.skillCursor;
+        // Same failed request retains its single repair budget. A new user turn
+        // receives neither the rejected draft nor a spent retry allowance.
+        this.pendingEvidenceRecovery =
+            appendMessage === undefined && cp.evidenceRecovery !== undefined
+                ? structuredClone(cp.evidenceRecovery)
+                : undefined;
     }
     /** One turn at a time — see `RunInFlightError`. @internal */
     assertNotRunning(door) {
@@ -2717,6 +2757,13 @@ export class Agent extends RunnerBase {
         const state = this.getLastSnapshot()?.sharedState;
         return state?.unsupportedValues;
     }
+    /** The last run's answer checks, detached from its execution record.
+     * Undefined means no terminal validation ran, never an implicit pass. */
+    answerValidation() {
+        const report = this.getLastSnapshot()?.sharedState
+            ?.answerValidation;
+        return report === undefined ? undefined : structuredClone(report);
+    }
     finalizeResult(executor, result) {
         const paused = this.detectPause(executor, result);
         if (paused)
@@ -2844,6 +2891,32 @@ export class Agent extends RunnerBase {
         }
         if (result instanceof Error)
             throw result;
+        if (this.answerValidationConfig !== undefined) {
+            const state = executor.getSnapshot().sharedState;
+            if (state.answerValidationBlocked === true && state.answerValidation !== undefined) {
+                throw new AnswerValidationError(state.answerValidation);
+            }
+            if (state.answerValidation === undefined ||
+                state.answerValidationCommitted !== true ||
+                typeof state.finalContent !== 'string') {
+                const config = this.answerValidationConfig;
+                throw new AnswerValidationError({
+                    validatorId: config.id,
+                    validatorVersion: config.version,
+                    mode: config.mode,
+                    status: 'unverified',
+                    checked: 0,
+                    failed: 0,
+                    unreachable: 0,
+                    notApplicable: 0,
+                    checks: [],
+                    resolvedRefs: [],
+                    schemaAccepted: false,
+                    reason: 'delivery-incomplete',
+                });
+            }
+            return state.finalContent;
+        }
         if (typeof result === 'string')
             return result;
         throw new Error('Agent: unexpected result shape — expected final-answer string');
@@ -2923,6 +2996,14 @@ export class Agent extends RunnerBase {
                 this.pendingResumeHistory = undefined;
                 return h;
             },
+            ...(this.evidenceGate !== undefined &&
+                this.evidenceGate.posture !== 'assist' && {
+                consumePendingEvidenceRecovery: () => {
+                    const recovery = this.pendingEvidenceRecovery;
+                    this.pendingEvidenceRecovery = undefined;
+                    return recovery;
+                },
+            }),
             consumePendingResumeFolded: () => {
                 const f = this.pendingResumeFolded;
                 this.pendingResumeFolded = undefined;
@@ -3254,6 +3335,11 @@ export class Agent extends RunnerBase {
         // callLLM extracted to ./agent/stages/callLLM.ts (v2.11.2). Same
         // late-binding pattern as seed for toolSchemas (computed below).
         const callLLM = buildCallLLMStage({
+            ...(this.evidenceGate !== undefined &&
+                this.evidenceGate.posture !== 'assist' && {
+                hasEvidenceRecovery: true,
+            }),
+            ...(this.answerValidationConfig !== undefined && { suppressDraftTokens: true }),
             // The receipt's salt (9.88.0) — read per call, like seed's own accessor.
             getRunId: () => this.currentRunContext?.runId,
             // …and its off switch. Value-conditional, so an agent on the default
@@ -3381,13 +3467,16 @@ export class Agent extends RunnerBase {
         // question a build-time mount can answer.
         const canCallTools = registryByName.size > 0 || this.externalToolProvider !== undefined;
         const hasWrapUp = canCallTools && this.wrapUpAtMaxIterations !== false;
-        const routeDecider = buildRouteDeciderStage(this.messageMiddleware, this.outputEnforcement, stepPlanFor, this.evidenceGate, hasWrapUp, this.claimContract, this.integrityLedgerHolder, 
+        const baseRouteDecider = buildRouteDeciderStage(this.messageMiddleware, this.outputEnforcement, stepPlanFor, this.evidenceGate, hasWrapUp, this.claimContract, this.integrityLedgerHolder, 
         // THE CLAIM SEAM'S RECENCY READ (9.83.0). Value-conditional on both
         // halves, so an agent that armed neither hands the decider builder
         // exactly the arguments it always did — and `buildRouteDeciderStage`'s
         // no-judge fast path still returns the very function reference every
         // pre-9.83.0 chart was given.
         this.noticePriorTurnEvidence && this.evidenceGate !== undefined ? true : undefined);
+        const routeDecider = this.answerValidationConfig === undefined
+            ? baseRouteDecider
+            : withAnswerValidation(baseRouteDecider, this.answerValidationConfig, this.outputSchemaParser, artifactStore, () => this.consentOutstanding.size > 0);
         // toolCallsHandler extracted to ./agent/stages/toolCalls.ts (v2.11.2).
         const toolCallsHandler = buildToolCallsHandler({
             registryByName,
@@ -3595,6 +3684,7 @@ export class Agent extends RunnerBase {
             // agent that did not ask, so both builders mount the final-branch stage
             // function they have always mounted.
             ...(this.limitsTravelWithTheAnswerValue && { attachCoverageLimits: true }),
+            ...(this.answerValidationConfig !== undefined && { hasAnswerValidation: true }),
             // The out-of-budget wrap-up branch (9.56.0) — the conditional-mount law
             // above, decided once beside the Route decider that routes to it so the
             // two can never disagree about whether the branch exists.