effect-agent 0.1.0-beta.93 → 0.1.0-beta.94

package/dist/{Agent-RklVROrm.mjs → Agent-CG_VMrtA.mjs}

@@ -1,6 +1,6 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { AgentPolicy } from "./core/AgentPolicy.mjs";
 import { AgentId } from "./core/Identifiers.mjs";
+import { AgentPolicy } from "./core/AgentPolicy.mjs";
 import { Emitter, UpdateError } from "./core/AgentUpdates.mjs";
 import * as S from "effect/Schema";
 import { Tool, Toolkit } from "effect/unstable/ai";
@@ -80,4 +80,4 @@ const withModel = (definition, model) => Object.freeze({
 //#endregion
 export { withModel as a, make as i, ToolInspection as n, inspectTools as r, Agent_exports as t };
 
-//# sourceMappingURL=Agent-RklVROrm.mjs.map
+//# sourceMappingURL=Agent-CG_VMrtA.mjs.map

package/dist/{Agent-RklVROrm.mjs.map → Agent-CG_VMrtA.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"Agent-RklVROrm.mjs","names":[],"sources":["../src/core/internal/agent-updates.ts","../src/core/Agent.ts"],"sourcesContent":["import { Schema } from \"effect\";\nimport { Tool, Toolkit } from \"effect/unstable/ai\";\n\nimport { Emitter, UpdateError } from \"../AgentUpdates.ts\";\n\n/** Definition-owned native Tool. Runtime supplies its handler under the same identity. */\nexport const updateTool = <S extends Schema.Top>(schema: S) =>\n  Tool.make(\"emit_update\", {\n    description: \"Emit a structured intermediate update. This does not complete the task.\",\n    parameters: Schema.Struct({ value: schema }),\n    success: Schema.Void,\n    failure: UpdateError,\n    failureMode: \"return\",\n  }).addDependency(Emitter);\n\nexport type UpdateToolkit<\n  T extends Toolkit.Any,\n  S extends Schema.Top | undefined,\n> = S extends Schema.Top\n  ? Toolkit.Toolkit<T[\"tools\"] & { readonly emit_update: ReturnType<typeof updateTool<S>> }>\n  : T;\n\nexport const withUpdateTool = (\n  toolkit: Toolkit.Any,\n  schema: Schema.Top | undefined,\n): Toolkit.Any => {\n  if (schema === undefined) return toolkit;\n  if (Object.hasOwn(toolkit.tools, \"emit_update\"))\n    throw new TypeError(\"emit_update is reserved for Agent updates\");\n\n  return Toolkit.make(...Object.values(toolkit.tools), updateTool(schema));\n};\n","import type { Effect, Layer, Option, Schema } from \"effect\";\nimport * as S from \"effect/Schema\";\nimport {\n  type AiError,\n  type LanguageModel,\n  type Model,\n  type Prompt,\n  Tool,\n  type Toolkit,\n} from \"effect/unstable/ai\";\n\nimport type { AgentInputError, AgentOutputError, AgentRunDispositionError } from \"./AgentError.ts\";\nimport { AgentPolicy, type AgentPolicyInput } from \"./AgentPolicy.ts\";\nimport { AgentId } from \"./Identifiers.ts\";\nimport { type UpdateToolkit, withUpdateTool } from \"./internal/agent-updates.ts\";\nimport type { Configuration } from \"./ToolExposure.ts\";\n\n/** Prompt input produced directly or by an Effect that preserves its failure and requirements. */\nexport type InstructionResult<E = never, R = never> =\n  | Prompt.RawInput\n  | Effect.Effect<Prompt.RawInput, E, R>;\n\n/** Static prompt input or an input-dependent source evaluated once while preparing a run. */\nexport type InstructionSource<Input, E = never, R = never> =\n  | Prompt.RawInput\n  | ((input: Input) => InstructionResult<E, R>);\n\n/** Definition-owned projection from decoded Agent input to model-visible prompt content. */\nexport type InputPromptSource<Input, E = never, R = never> = (\n  input: Input,\n) => InstructionResult<E, R>;\n\n/** Native services needed to execute and identify model calls. */\nexport type ModelServices = LanguageModel.LanguageModel | Model.ProviderName | Model.ModelName;\n\n/** Accepts Layers providing the native model and both identity services. */\nexport type NativeModel<ModelValue> =\n  ModelValue extends Layer.Layer<infer Provides, never, infer _Requires>\n    ? ModelServices extends Provides\n      ? ModelValue\n      : never\n    : never;\n\n/** Definition-owned boundary for selecting and validating an application run disposition. */\nexport interface RunDispositionDeclaration<Output, DispositionSchema extends Schema.Top> {\n  /** Canonical Schema used to validate and encode the selected disposition. */\n  readonly schema: DispositionSchema;\n  /** Pure selection from decoded output; `undefined` means this ordinary Run declares none. */\n  readonly fromOutput: (output: Output) => unknown;\n}\n\n/** Values available to a Definition-owned completion Tool projector after canonical decoding. */\nexport interface CompletionProjectionInput<Parameters = unknown, Result = unknown> {\n  readonly parameters: Parameters;\n  readonly result: Result;\n}\n\n/**\n * One application Tool whose successful result can complete its owning Agent when it is the\n * only application call. Provider-executed calls may accompany it only with terminal results.\n * Mixed, wholly unexecuted application batches are rejected with failed Tool results so the\n * model can correct them within ordinary Run budgets; completed provider results are retained.\n * Missing provider results and invalid pending resumed batches fail closed. The completion\n * designation never permits side-effect replay.\n */\nexport interface CompletionToolDeclaration<\n  Parameters = unknown,\n  Result = unknown,\n  Output = unknown,\n> {\n  readonly tool: string;\n  /** Require native Tool use on every model Turn and this Tool for final completion. */\n  readonly required?: boolean | undefined;\n  readonly project: (input: CompletionProjectionInput<Parameters, Result>) => Output;\n}\n\ntype CompletionToolFor<ToolkitValue extends Toolkit.Any, Output> = {\n  readonly [Name in keyof ToolkitValue[\"tools\"] & string]: CompletionToolDeclaration<\n    Tool.Parameters<ToolkitValue[\"tools\"][Name]>,\n    Tool.Success<ToolkitValue[\"tools\"][Name]>,\n    Output\n  > & { readonly tool: Name };\n}[keyof ToolkitValue[\"tools\"] & string];\n\n/**\n * An ordinary action Tool whose canonical success may satisfy the whole request.\n * Projectors must be pure and deterministic: recovery re-evaluates them. None preserves\n * ordinary continuation; Some is validated as the Agent output. These Tools must be the sole\n * application call; terminal provider results may accompany them. They never receive the\n * required completion Tool's exhaustion allowance.\n */\nexport interface CompletionFromToolDeclaration<\n  Parameters = unknown,\n  Result = unknown,\n  Output = unknown,\n> {\n  readonly tool: string;\n  readonly project: (input: CompletionProjectionInput<Parameters, Result>) => Option.Option<Output>;\n}\n\ntype CompletionFromToolFor<ToolkitValue extends Toolkit.Any, Output> = {\n  readonly [Name in keyof ToolkitValue[\"tools\"] & string]: CompletionFromToolDeclaration<\n    Tool.Parameters<ToolkitValue[\"tools\"][Name]>,\n    Tool.Success<ToolkitValue[\"tools\"][Name]>,\n    Output\n  > & { readonly tool: Name };\n}[keyof ToolkitValue[\"tools\"] & string];\n\n/** Immutable, model-agnostic schemas, behavior, tools, and bounds for an agent. */\nexport interface Definition<\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions,\n  ToolkitValue extends Toolkit.Any,\n  RunDispositionValue = undefined,\n  InputPromptValue = undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n> {\n  /** Stable agent identity; changing it creates a distinct definition identity. */\n  readonly id: AgentId;\n  /** Canonical Schema for intermediate updates emitted by this Agent. */\n  readonly updates?: UpdatesSchema;\n  /** Canonical schema used to decode and encode run input. */\n  readonly input: InputSchema;\n  /** Canonical schema used to decode the final model output. */\n  readonly output: OutputSchema;\n  /** Instructions evaluated once while preparing each run. */\n  readonly instructions: Instructions;\n  /** Optional projection from decoded input to model-visible native Effect AI prompt content. */\n  readonly inputPrompt?: InputPromptValue | undefined;\n  /** Native Effect AI toolkit whose failures and requirements remain visible. */\n  readonly toolkit: ToolkitValue;\n  readonly toolExposure?: Configuration | undefined;\n  /** Finite execution bounds enforced by the runtime. */\n  readonly policy: AgentPolicy;\n  /** Explicit policy fields, retained so delegated runs can inherit omitted fields. */\n  readonly policyOverrides?: Partial<AgentPolicyInput> | undefined;\n  /** Optional successful Tool result that projects directly to the Agent output and settles. */\n  readonly completion?: CompletionToolDeclaration | undefined;\n  readonly completionFromTools?: ReadonlyArray<CompletionFromToolDeclaration> | undefined;\n  readonly runDisposition?: RunDispositionValue | undefined;\n  readonly description?: string | undefined;\n  readonly metadata?: Readonly<Record<string, string>> | undefined;\n}\n\n/** Options for a model-agnostic agent definition. */\nexport interface DefinitionOptions<\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  RunDispositionValue extends\n    | RunDispositionDeclaration<OutputSchema[\"Type\"], Schema.Top>\n    | undefined = undefined,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined =\n    undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n> {\n  readonly updates?: UpdatesSchema;\n  readonly input: InputSchema;\n  readonly output: OutputSchema;\n  readonly instructions: Instructions;\n  readonly inputPrompt?: InputPromptValue | undefined;\n  readonly toolkit: ToolkitValue;\n  readonly toolExposure?: Configuration | undefined;\n  readonly policy?: Partial<AgentPolicyInput> | undefined;\n  readonly completion?: CompletionToolFor<ToolkitValue, OutputSchema[\"Type\"]> | undefined;\n  readonly completionFromTools?:\n    | ReadonlyArray<CompletionFromToolFor<ToolkitValue, OutputSchema[\"Type\"]>>\n    | undefined;\n  readonly runDisposition?: RunDispositionValue | undefined;\n  readonly description?: string | undefined;\n  readonly metadata?: Readonly<Record<string, string>> | undefined;\n}\n\ntype AnyDefinitionShape = Definition<\n  Schema.Top,\n  Schema.Top,\n  unknown,\n  Toolkit.Any,\n  RunDispositionDeclaration<never, Schema.Top> | undefined,\n  unknown,\n  Schema.Top | undefined\n>;\n\n/** Immutable pairing of an agent definition with its native model Layer. */\nexport interface Binding<DefinitionValue extends AnyDefinitionShape, ModelValue> {\n  readonly definition: DefinitionValue;\n  readonly model: NativeModel<ModelValue>;\n}\n\ntype InstructionEffect<Instructions, Input> = Instructions extends (input: Input) => infer Result\n  ? Result\n  : Instructions;\n\ntype InputPromptEffect<InputPrompt, Input> = InputPrompt extends (input: Input) => infer Result\n  ? Result\n  : never;\n\ntype EffectError<Value> =\n  Value extends Effect.Effect<infer _Success, infer Error, infer _Services> ? Error : never;\n\ntype EffectServices<Value> =\n  Value extends Effect.Effect<infer _Success, infer _Error, infer Services> ? Services : never;\n\ntype ModelRequirements<Value> =\n  Value extends Layer.Layer<infer _Provides, infer _Error, infer Services> ? Services : never;\n\n/** Constructors and type projections for definitions and runnable model bindings. */\n\n/** Type-erased definition used at generic framework boundaries. */\nexport type AnyDefinition = AnyDefinitionShape;\n\n/** Read-only interpreter program or binding used at inspection and projection boundaries. */\nexport interface Any {\n  readonly definition: AnyDefinition;\n  readonly model?: unknown;\n}\n\n/** Native Tool configuration for inspection; it does not predict an invocation's outcome. */\nexport const ToolInspection = S.Struct({\n  name: S.String,\n  failureMode: S.Literals([\"error\", \"return\"]),\n  /** False for provider-executed Tools, whose results do not pass through local handlers. */\n  requiresHandler: S.Boolean,\n});\n\nexport type ToolInspection = typeof ToolInspection.Type;\n\n/**\n * Inspect registered native Tools in declaration order without acquiring handlers or a Model.\n * This is the full Definition toolkit, before run-specific visibility or exposure filtering.\n * `failureMode` is Effect AI's configured mode, including its `\"error\"` default. Handler-level\n * recovery, programmatic invocation and Subagent containment can change where failures go;\n * consult execution diagnostics for the actual route. No arguments, results or services are read.\n */\nexport const inspectTools = (agent: AnyDefinition | Any): ReadonlyArray<ToolInspection> => {\n  const definition = \"definition\" in agent ? agent.definition : agent;\n\n  return Object.values(definition.toolkit.tools).map((tool) =>\n    ToolInspection.make({\n      name: tool.name,\n      failureMode: tool.failureMode,\n      requiresHandler: !Tool.isProviderDefined(tool) || tool.requiresHandler,\n    }),\n  );\n};\n\ntype DefinitionOf<AgentValue extends AnyDefinition | Any> = AgentValue extends {\n  readonly definition: infer DefinitionValue extends AnyDefinition;\n}\n  ? DefinitionValue\n  : AgentValue;\n\ntype RunDispositionSchemaOf<DefinitionValue extends AnyDefinition> = [\n  Exclude<DefinitionValue[\"runDisposition\"], undefined>,\n] extends [never]\n  ? never\n  : Exclude<DefinitionValue[\"runDisposition\"], undefined> extends RunDispositionDeclaration<\n        never,\n        infer DispositionSchema\n      >\n    ? DispositionSchema\n    : never;\n\n/** Literal Agent ID, retained by Agent.make. */\nexport type Name<A extends AnyDefinition | Any> = DefinitionOf<A>[\"id\"] extends AgentId &\n  (infer N extends string)\n  ? N\n  : string;\n\n/** Declared update Schema, or never for Agents without updates. */\nexport type UpdatesSchema<A extends AnyDefinition | Any> = Exclude<\n  DefinitionOf<A>[\"updates\"],\n  undefined\n>;\n\n/** Decoded intermediate update value. */\nexport type Update<A extends AnyDefinition | Any> = UpdatesSchema<A>[\"Type\"];\n\n/** Decoded input type of a definition or binding. */\nexport type Input<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"input\"][\"Type\"];\n\n/** Encoded input accepted by the primary execution operations. */\nexport type EncodedInput<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"input\"][\"Encoded\"];\n\n/** Decoded output type of a definition or binding. */\nexport type Output<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"output\"][\"Type\"];\n\n/** Input Schema carried by a definition or binding. */\nexport type InputSchema<AgentValue extends AnyDefinition | Any> = DefinitionOf<AgentValue>[\"input\"];\n\n/** Output Schema carried by a definition or binding. */\nexport type OutputSchema<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"output\"];\n\n/** Application run-disposition Schema carried by a definition or binding, or `never`. */\nexport type RunDispositionSchema<AgentValue extends AnyDefinition | Any> = RunDispositionSchemaOf<\n  DefinitionOf<AgentValue>\n>;\n\n/** Decoded application run disposition declared by a definition or binding. */\nexport type RunDisposition<AgentValue extends AnyDefinition | Any> = [\n  RunDispositionSchema<AgentValue>,\n] extends [never]\n  ? never\n  : RunDispositionSchema<AgentValue>[\"Type\"];\n\n/** Validation failure admitted only by definitions that declare a run disposition. */\nexport type RunDispositionFailure<AgentValue extends AnyDefinition | Any> = [\n  RunDispositionSchemaOf<DefinitionOf<AgentValue>>,\n] extends [never]\n  ? never\n  : AgentRunDispositionError;\n\n/** Effect AI tool map carried by a definition or binding. */\nexport type Tools<AgentValue extends AnyDefinition | Any> = Toolkit.Tools<\n  DefinitionOf<AgentValue>[\"toolkit\"]\n>;\n\ntype ApplicationTools<A extends AnyDefinition> = [UpdatesSchema<A>] extends [never]\n  ? Tools<A>\n  : Omit<Tools<A>, \"emit_update\">;\n\ntype ToolMapValues<ToolMap extends Record<string, Tool.Any>> = ToolMap extends unknown\n  ? ToolMap[keyof ToolMap]\n  : never;\n\n/** All possible tools, including keys present in only one definition or binding branch. */\nexport type ToolUnion<AgentValue extends AnyDefinition | Any> = ToolMapValues<Tools<AgentValue>>;\n\n/** Instruction, tool-handler, and Schema services required before a Model is bound. */\nexport type DefinitionRequirements<DefinitionValue extends AnyDefinition> =\n  DefinitionValue extends unknown\n    ?\n        | EffectServices<InstructionEffect<DefinitionValue[\"instructions\"], Input<DefinitionValue>>>\n        | EffectServices<InputPromptEffect<DefinitionValue[\"inputPrompt\"], Input<DefinitionValue>>>\n        | Tool.HandlersFor<ApplicationTools<DefinitionValue>>\n        | Tool.HandlerServices<ToolMapValues<ApplicationTools<DefinitionValue>>>\n        // The interpreter canonically re-encodes decoded Tool parameters before recording them.\n        | Tool.ParametersSchema<ToolUnion<DefinitionValue>>[\"EncodingServices\"]\n        | Tool.SuccessSchema<ToolUnion<DefinitionValue>>[\"DecodingServices\"]\n        | DefinitionValue[\"input\"][\"DecodingServices\"]\n        | DefinitionValue[\"input\"][\"EncodingServices\"]\n        | DefinitionValue[\"output\"][\"DecodingServices\"]\n        | DefinitionValue[\"output\"][\"EncodingServices\"]\n        | UpdatesSchema<DefinitionValue>[\"DecodingServices\"]\n        | UpdatesSchema<DefinitionValue>[\"EncodingServices\"]\n        | RunDispositionSchemaOf<DefinitionValue>[\"DecodingServices\"]\n        | RunDispositionSchemaOf<DefinitionValue>[\"EncodingServices\"]\n    : never;\n\n/** Definition services plus native model services, or a binding's model Layer requirements. */\nexport type Requirements<AgentValue extends AnyDefinition | Any> =\n  | DefinitionRequirements<DefinitionOf<AgentValue>>\n  | (AgentValue extends { readonly model: infer ModelValue }\n      ? ModelRequirements<ModelValue>\n      : ModelServices);\n\n// Distribute after unwrapping bindings too: withModel may itself contain a definition union.\ntype DefinitionFailure<DefinitionValue extends AnyDefinition> = DefinitionValue extends unknown\n  ?\n      | EffectError<InstructionEffect<DefinitionValue[\"instructions\"], Input<DefinitionValue>>>\n      | EffectError<InputPromptEffect<DefinitionValue[\"inputPrompt\"], Input<DefinitionValue>>>\n      | Tool.HandlerError<ToolUnion<DefinitionValue>>\n  : never;\n\n/** Failures from every possible definition, preserving each branch's instruction input type. */\nexport type Failure<AgentValue extends AnyDefinition | Any> =\n  | DefinitionFailure<DefinitionOf<AgentValue>>\n  | AiError.AiError\n  | AgentInputError\n  | AgentOutputError\n  | RunDispositionFailure<AgentValue>;\n\n/** Validate an agent ID and return a shallowly frozen, model-agnostic definition. */\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  DispositionSchema extends Schema.Top,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n    InputPromptValue,\n    UpdatesSchema\n  > & {\n    readonly runDisposition: RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>;\n    readonly inputPrompt: InputPromptValue;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n  InputPromptValue,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  DispositionSchema extends Schema.Top,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n    undefined,\n    UpdatesSchema\n  > & {\n    readonly runDisposition: RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>;\n    readonly inputPrompt?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n  undefined,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    undefined,\n    InputPromptValue,\n    UpdatesSchema\n  > & {\n    readonly inputPrompt: InputPromptValue;\n    readonly runDisposition?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  undefined,\n  InputPromptValue,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    undefined,\n    undefined,\n    UpdatesSchema\n  > & {\n    readonly inputPrompt?: undefined;\n    readonly runDisposition?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  undefined,\n  undefined,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make(\n  id: string,\n  options: {\n    readonly updates?: Schema.Top | undefined;\n    readonly input: Schema.Top;\n    readonly output: Schema.Top;\n    readonly instructions: unknown;\n    readonly inputPrompt?: unknown;\n    readonly toolkit: Toolkit.Any;\n    readonly toolExposure?: Configuration | undefined;\n    readonly policy?: Partial<AgentPolicyInput> | undefined;\n    readonly completion?: CompletionToolDeclaration | undefined;\n    readonly completionFromTools?: ReadonlyArray<CompletionFromToolDeclaration> | undefined;\n    readonly runDisposition?: RunDispositionDeclaration<never, Schema.Top> | undefined;\n    readonly description?: string | undefined;\n    readonly metadata?: Readonly<Record<string, string>> | undefined;\n  },\n): AnyDefinition {\n  const completionNames = new Set<string>();\n\n  for (const declaration of options.completionFromTools ?? []) {\n    if (declaration.tool === options.completion?.tool || completionNames.has(declaration.tool)) {\n      throw new Error(`Tool ${declaration.tool} has more than one completion declaration`);\n    }\n    if (!Object.hasOwn(options.toolkit.tools, declaration.tool)) {\n      throw new Error(`Unknown completion Tool ${declaration.tool}`);\n    }\n    completionNames.add(declaration.tool);\n  }\n\n  return Object.freeze({\n    ...options,\n    toolkit: withUpdateTool(options.toolkit, options.updates),\n    policy: AgentPolicy.resolve(options.policy),\n    policyOverrides: Object.freeze({ ...options.policy }),\n    toolExposure:\n      options.toolExposure === undefined\n        ? undefined\n        : Object.freeze({\n            ...options.toolExposure,\n            initialToolNames: Object.freeze([...(options.toolExposure.initialToolNames ?? [])]),\n          }),\n    id: S.decodeSync(AgentId)(id),\n    metadata: options.metadata === undefined ? undefined : Object.freeze({ ...options.metadata }),\n    completion:\n      options.completion === undefined ? undefined : Object.freeze({ ...options.completion }),\n    completionFromTools:\n      options.completionFromTools === undefined\n        ? undefined\n        : Object.freeze(\n            options.completionFromTools.map((declaration) => Object.freeze({ ...declaration })),\n          ),\n    runDisposition:\n      options.runDisposition === undefined\n        ? undefined\n        : Object.freeze({ ...options.runDisposition }),\n  });\n}\n\n/** Fix a model Layer for registration or delegation without acquiring or hiding its requirements. */\nexport const withModel = <DefinitionValue extends AnyDefinition, ModelValue>(\n  definition: DefinitionValue,\n  model: NativeModel<ModelValue>,\n): Binding<DefinitionValue, ModelValue> =>\n  Object.freeze({\n    definition,\n    model,\n  });\n"],"mappings":";;;;;;;;;AAMA,MAAa,cAAoC,WAC/C,KAAK,KAAK,eAAe;CACvB,aAAa;CACb,YAAY,OAAO,OAAO,EAAE,OAAO,OAAO,CAAC;CAC3C,SAAS,OAAO;CAChB,SAAS;CACT,aAAa;AACf,CAAC,CAAC,CAAC,cAAc,OAAO;AAS1B,MAAa,kBACX,SACA,WACgB;CAChB,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,OAAO,QAAQ,OAAO,aAAa,GAC5C,MAAM,IAAI,UAAU,2CAA2C;CAEjE,OAAO,QAAQ,KAAK,GAAG,OAAO,OAAO,QAAQ,KAAK,GAAG,WAAW,MAAM,CAAC;AACzE;;;;;;;;;;AC6LA,MAAa,iBAAiB,EAAE,OAAO;CACrC,MAAM,EAAE;CACR,aAAa,EAAE,SAAS,CAAC,SAAS,QAAQ,CAAC;;CAE3C,iBAAiB,EAAE;AACrB,CAAC;;;;;;;;AAWD,MAAa,gBAAgB,UAA8D;CACzF,MAAM,aAAa,gBAAgB,QAAQ,MAAM,aAAa;CAE9D,OAAO,OAAO,OAAO,WAAW,QAAQ,KAAK,CAAC,CAAC,KAAK,SAClD,eAAe,KAAK;EAClB,MAAM,KAAK;EACX,aAAa,KAAK;EAClB,iBAAiB,CAAC,KAAK,kBAAkB,IAAI,KAAK,KAAK;CACzD,CAAC,CACH;AACF;AAqQA,SAAgB,KACd,IACA,SAee;CACf,MAAM,kCAAkB,IAAI,IAAY;CAExC,KAAK,MAAM,eAAe,QAAQ,uBAAuB,CAAC,GAAG;EAC3D,IAAI,YAAY,SAAS,QAAQ,YAAY,QAAQ,gBAAgB,IAAI,YAAY,IAAI,GACvF,MAAM,IAAI,MAAM,QAAQ,YAAY,KAAK,0CAA0C;EAErF,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,OAAO,YAAY,IAAI,GACxD,MAAM,IAAI,MAAM,2BAA2B,YAAY,MAAM;EAE/D,gBAAgB,IAAI,YAAY,IAAI;CACtC;CAEA,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,SAAS,eAAe,QAAQ,SAAS,QAAQ,OAAO;EACxD,QAAQ,YAAY,QAAQ,QAAQ,MAAM;EAC1C,iBAAiB,OAAO,OAAO,EAAE,GAAG,QAAQ,OAAO,CAAC;EACpD,cACE,QAAQ,iBAAiB,KAAA,IACrB,KAAA,IACA,OAAO,OAAO;GACZ,GAAG,QAAQ;GACX,kBAAkB,OAAO,OAAO,CAAC,GAAI,QAAQ,aAAa,oBAAoB,CAAC,CAAE,CAAC;EACpF,CAAC;EACP,IAAI,EAAE,WAAW,OAAO,CAAC,CAAC,EAAE;EAC5B,UAAU,QAAQ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,SAAS,CAAC;EAC5F,YACE,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACxF,qBACE,QAAQ,wBAAwB,KAAA,IAC5B,KAAA,IACA,OAAO,OACL,QAAQ,oBAAoB,KAAK,gBAAgB,OAAO,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,CACpF;EACN,gBACE,QAAQ,mBAAmB,KAAA,IACvB,KAAA,IACA,OAAO,OAAO,EAAE,GAAG,QAAQ,eAAe,CAAC;CACnD,CAAC;AACH;;AAGA,MAAa,aACX,YACA,UAEA,OAAO,OAAO;CACZ;CACA;AACF,CAAC"}
+{"version":3,"file":"Agent-CG_VMrtA.mjs","names":[],"sources":["../src/core/internal/agent-updates.ts","../src/core/Agent.ts"],"sourcesContent":["import { Schema } from \"effect\";\nimport { Tool, Toolkit } from \"effect/unstable/ai\";\n\nimport { Emitter, UpdateError } from \"../AgentUpdates.ts\";\n\n/** Definition-owned native Tool. Runtime supplies its handler under the same identity. */\nexport const updateTool = <S extends Schema.Top>(schema: S) =>\n  Tool.make(\"emit_update\", {\n    description: \"Emit a structured intermediate update. This does not complete the task.\",\n    parameters: Schema.Struct({ value: schema }),\n    success: Schema.Void,\n    failure: UpdateError,\n    failureMode: \"return\",\n  }).addDependency(Emitter);\n\nexport type UpdateToolkit<\n  T extends Toolkit.Any,\n  S extends Schema.Top | undefined,\n> = S extends Schema.Top\n  ? Toolkit.Toolkit<T[\"tools\"] & { readonly emit_update: ReturnType<typeof updateTool<S>> }>\n  : T;\n\nexport const withUpdateTool = (\n  toolkit: Toolkit.Any,\n  schema: Schema.Top | undefined,\n): Toolkit.Any => {\n  if (schema === undefined) return toolkit;\n  if (Object.hasOwn(toolkit.tools, \"emit_update\"))\n    throw new TypeError(\"emit_update is reserved for Agent updates\");\n\n  return Toolkit.make(...Object.values(toolkit.tools), updateTool(schema));\n};\n","import type { Effect, Layer, Option, Schema } from \"effect\";\nimport * as S from \"effect/Schema\";\nimport {\n  type AiError,\n  type LanguageModel,\n  type Model,\n  type Prompt,\n  Tool,\n  type Toolkit,\n} from \"effect/unstable/ai\";\n\nimport type { AgentInputError, AgentOutputError, AgentRunDispositionError } from \"./AgentError.ts\";\nimport { AgentPolicy, type AgentPolicyInput } from \"./AgentPolicy.ts\";\nimport { AgentId } from \"./Identifiers.ts\";\nimport { type UpdateToolkit, withUpdateTool } from \"./internal/agent-updates.ts\";\nimport type { Configuration } from \"./ToolExposure.ts\";\n\n/** Prompt input produced directly or by an Effect that preserves its failure and requirements. */\nexport type InstructionResult<E = never, R = never> =\n  | Prompt.RawInput\n  | Effect.Effect<Prompt.RawInput, E, R>;\n\n/** Static prompt input or an input-dependent source evaluated once while preparing a run. */\nexport type InstructionSource<Input, E = never, R = never> =\n  | Prompt.RawInput\n  | ((input: Input) => InstructionResult<E, R>);\n\n/** Definition-owned projection from decoded Agent input to model-visible prompt content. */\nexport type InputPromptSource<Input, E = never, R = never> = (\n  input: Input,\n) => InstructionResult<E, R>;\n\n/** Native services needed to execute and identify model calls. */\nexport type ModelServices = LanguageModel.LanguageModel | Model.ProviderName | Model.ModelName;\n\n/** Accepts Layers providing the native model and both identity services. */\nexport type NativeModel<ModelValue> =\n  ModelValue extends Layer.Layer<infer Provides, never, infer _Requires>\n    ? ModelServices extends Provides\n      ? ModelValue\n      : never\n    : never;\n\n/** Definition-owned boundary for selecting and validating an application run disposition. */\nexport interface RunDispositionDeclaration<Output, DispositionSchema extends Schema.Top> {\n  /** Canonical Schema used to validate and encode the selected disposition. */\n  readonly schema: DispositionSchema;\n  /** Pure selection from decoded output; `undefined` means this ordinary Run declares none. */\n  readonly fromOutput: (output: Output) => unknown;\n}\n\n/** Values available to a Definition-owned completion Tool projector after canonical decoding. */\nexport interface CompletionProjectionInput<Parameters = unknown, Result = unknown> {\n  readonly parameters: Parameters;\n  readonly result: Result;\n}\n\n/**\n * One application Tool whose successful result can complete its owning Agent when it is the\n * only application call. Provider-executed calls may accompany it only with terminal results.\n * Mixed, wholly unexecuted application batches are rejected with failed Tool results so the\n * model can correct them within ordinary Run budgets; completed provider results are retained.\n * Missing provider results and invalid pending resumed batches fail closed. The completion\n * designation never permits side-effect replay.\n */\nexport interface CompletionToolDeclaration<\n  Parameters = unknown,\n  Result = unknown,\n  Output = unknown,\n> {\n  readonly tool: string;\n  /** Require native Tool use on every model Turn and this Tool for final completion. */\n  readonly required?: boolean | undefined;\n  readonly project: (input: CompletionProjectionInput<Parameters, Result>) => Output;\n}\n\ntype CompletionToolFor<ToolkitValue extends Toolkit.Any, Output> = {\n  readonly [Name in keyof ToolkitValue[\"tools\"] & string]: CompletionToolDeclaration<\n    Tool.Parameters<ToolkitValue[\"tools\"][Name]>,\n    Tool.Success<ToolkitValue[\"tools\"][Name]>,\n    Output\n  > & { readonly tool: Name };\n}[keyof ToolkitValue[\"tools\"] & string];\n\n/**\n * An ordinary action Tool whose canonical success may satisfy the whole request.\n * Projectors must be pure and deterministic: recovery re-evaluates them. None preserves\n * ordinary continuation; Some is validated as the Agent output. These Tools must be the sole\n * application call; terminal provider results may accompany them. They never receive the\n * required completion Tool's exhaustion allowance.\n */\nexport interface CompletionFromToolDeclaration<\n  Parameters = unknown,\n  Result = unknown,\n  Output = unknown,\n> {\n  readonly tool: string;\n  readonly project: (input: CompletionProjectionInput<Parameters, Result>) => Option.Option<Output>;\n}\n\ntype CompletionFromToolFor<ToolkitValue extends Toolkit.Any, Output> = {\n  readonly [Name in keyof ToolkitValue[\"tools\"] & string]: CompletionFromToolDeclaration<\n    Tool.Parameters<ToolkitValue[\"tools\"][Name]>,\n    Tool.Success<ToolkitValue[\"tools\"][Name]>,\n    Output\n  > & { readonly tool: Name };\n}[keyof ToolkitValue[\"tools\"] & string];\n\n/** Immutable, model-agnostic schemas, behavior, tools, and bounds for an agent. */\nexport interface Definition<\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions,\n  ToolkitValue extends Toolkit.Any,\n  RunDispositionValue = undefined,\n  InputPromptValue = undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n> {\n  /** Stable agent identity; changing it creates a distinct definition identity. */\n  readonly id: AgentId;\n  /** Canonical Schema for intermediate updates emitted by this Agent. */\n  readonly updates?: UpdatesSchema;\n  /** Canonical schema used to decode and encode run input. */\n  readonly input: InputSchema;\n  /** Canonical schema used to decode the final model output. */\n  readonly output: OutputSchema;\n  /** Instructions evaluated once while preparing each run. */\n  readonly instructions: Instructions;\n  /** Optional projection from decoded input to model-visible native Effect AI prompt content. */\n  readonly inputPrompt?: InputPromptValue | undefined;\n  /** Native Effect AI toolkit whose failures and requirements remain visible. */\n  readonly toolkit: ToolkitValue;\n  readonly toolExposure?: Configuration | undefined;\n  /** Finite execution bounds enforced by the runtime. */\n  readonly policy: AgentPolicy;\n  /** Explicit policy fields, retained so delegated runs can inherit omitted fields. */\n  readonly policyOverrides?: Partial<AgentPolicyInput> | undefined;\n  /** Optional successful Tool result that projects directly to the Agent output and settles. */\n  readonly completion?: CompletionToolDeclaration | undefined;\n  readonly completionFromTools?: ReadonlyArray<CompletionFromToolDeclaration> | undefined;\n  readonly runDisposition?: RunDispositionValue | undefined;\n  readonly description?: string | undefined;\n  readonly metadata?: Readonly<Record<string, string>> | undefined;\n}\n\n/** Options for a model-agnostic agent definition. */\nexport interface DefinitionOptions<\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  RunDispositionValue extends\n    | RunDispositionDeclaration<OutputSchema[\"Type\"], Schema.Top>\n    | undefined = undefined,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined =\n    undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n> {\n  readonly updates?: UpdatesSchema;\n  readonly input: InputSchema;\n  readonly output: OutputSchema;\n  readonly instructions: Instructions;\n  readonly inputPrompt?: InputPromptValue | undefined;\n  readonly toolkit: ToolkitValue;\n  readonly toolExposure?: Configuration | undefined;\n  readonly policy?: Partial<AgentPolicyInput> | undefined;\n  readonly completion?: CompletionToolFor<ToolkitValue, OutputSchema[\"Type\"]> | undefined;\n  readonly completionFromTools?:\n    | ReadonlyArray<CompletionFromToolFor<ToolkitValue, OutputSchema[\"Type\"]>>\n    | undefined;\n  readonly runDisposition?: RunDispositionValue | undefined;\n  readonly description?: string | undefined;\n  readonly metadata?: Readonly<Record<string, string>> | undefined;\n}\n\ntype AnyDefinitionShape = Definition<\n  Schema.Top,\n  Schema.Top,\n  unknown,\n  Toolkit.Any,\n  RunDispositionDeclaration<never, Schema.Top> | undefined,\n  unknown,\n  Schema.Top | undefined\n>;\n\n/** Immutable pairing of an agent definition with its native model Layer. */\nexport interface Binding<DefinitionValue extends AnyDefinitionShape, ModelValue> {\n  readonly definition: DefinitionValue;\n  readonly model: NativeModel<ModelValue>;\n}\n\ntype InstructionEffect<Instructions, Input> = Instructions extends (input: Input) => infer Result\n  ? Result\n  : Instructions;\n\ntype InputPromptEffect<InputPrompt, Input> = InputPrompt extends (input: Input) => infer Result\n  ? Result\n  : never;\n\ntype EffectError<Value> =\n  Value extends Effect.Effect<infer _Success, infer Error, infer _Services> ? Error : never;\n\ntype EffectServices<Value> =\n  Value extends Effect.Effect<infer _Success, infer _Error, infer Services> ? Services : never;\n\ntype ModelRequirements<Value> =\n  Value extends Layer.Layer<infer _Provides, infer _Error, infer Services> ? Services : never;\n\n/** Constructors and type projections for definitions and runnable model bindings. */\n\n/** Type-erased definition used at generic framework boundaries. */\nexport type AnyDefinition = AnyDefinitionShape;\n\n/** Read-only interpreter program or binding used at inspection and projection boundaries. */\nexport interface Any {\n  readonly definition: AnyDefinition;\n  readonly model?: unknown;\n}\n\n/** Native Tool configuration for inspection; it does not predict an invocation's outcome. */\nexport const ToolInspection = S.Struct({\n  name: S.String,\n  failureMode: S.Literals([\"error\", \"return\"]),\n  /** False for provider-executed Tools, whose results do not pass through local handlers. */\n  requiresHandler: S.Boolean,\n});\n\nexport type ToolInspection = typeof ToolInspection.Type;\n\n/**\n * Inspect registered native Tools in declaration order without acquiring handlers or a Model.\n * This is the full Definition toolkit, before run-specific visibility or exposure filtering.\n * `failureMode` is Effect AI's configured mode, including its `\"error\"` default. Handler-level\n * recovery, programmatic invocation and Subagent containment can change where failures go;\n * consult execution diagnostics for the actual route. No arguments, results or services are read.\n */\nexport const inspectTools = (agent: AnyDefinition | Any): ReadonlyArray<ToolInspection> => {\n  const definition = \"definition\" in agent ? agent.definition : agent;\n\n  return Object.values(definition.toolkit.tools).map((tool) =>\n    ToolInspection.make({\n      name: tool.name,\n      failureMode: tool.failureMode,\n      requiresHandler: !Tool.isProviderDefined(tool) || tool.requiresHandler,\n    }),\n  );\n};\n\ntype DefinitionOf<AgentValue extends AnyDefinition | Any> = AgentValue extends {\n  readonly definition: infer DefinitionValue extends AnyDefinition;\n}\n  ? DefinitionValue\n  : AgentValue;\n\ntype RunDispositionSchemaOf<DefinitionValue extends AnyDefinition> = [\n  Exclude<DefinitionValue[\"runDisposition\"], undefined>,\n] extends [never]\n  ? never\n  : Exclude<DefinitionValue[\"runDisposition\"], undefined> extends RunDispositionDeclaration<\n        never,\n        infer DispositionSchema\n      >\n    ? DispositionSchema\n    : never;\n\n/** Literal Agent ID, retained by Agent.make. */\nexport type Name<A extends AnyDefinition | Any> = DefinitionOf<A>[\"id\"] extends AgentId &\n  (infer N extends string)\n  ? N\n  : string;\n\n/** Declared update Schema, or never for Agents without updates. */\nexport type UpdatesSchema<A extends AnyDefinition | Any> = Exclude<\n  DefinitionOf<A>[\"updates\"],\n  undefined\n>;\n\n/** Decoded intermediate update value. */\nexport type Update<A extends AnyDefinition | Any> = UpdatesSchema<A>[\"Type\"];\n\n/** Decoded input type of a definition or binding. */\nexport type Input<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"input\"][\"Type\"];\n\n/** Encoded input accepted by the primary execution operations. */\nexport type EncodedInput<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"input\"][\"Encoded\"];\n\n/** Decoded output type of a definition or binding. */\nexport type Output<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"output\"][\"Type\"];\n\n/** Input Schema carried by a definition or binding. */\nexport type InputSchema<AgentValue extends AnyDefinition | Any> = DefinitionOf<AgentValue>[\"input\"];\n\n/** Output Schema carried by a definition or binding. */\nexport type OutputSchema<AgentValue extends AnyDefinition | Any> =\n  DefinitionOf<AgentValue>[\"output\"];\n\n/** Application run-disposition Schema carried by a definition or binding, or `never`. */\nexport type RunDispositionSchema<AgentValue extends AnyDefinition | Any> = RunDispositionSchemaOf<\n  DefinitionOf<AgentValue>\n>;\n\n/** Decoded application run disposition declared by a definition or binding. */\nexport type RunDisposition<AgentValue extends AnyDefinition | Any> = [\n  RunDispositionSchema<AgentValue>,\n] extends [never]\n  ? never\n  : RunDispositionSchema<AgentValue>[\"Type\"];\n\n/** Validation failure admitted only by definitions that declare a run disposition. */\nexport type RunDispositionFailure<AgentValue extends AnyDefinition | Any> = [\n  RunDispositionSchemaOf<DefinitionOf<AgentValue>>,\n] extends [never]\n  ? never\n  : AgentRunDispositionError;\n\n/** Effect AI tool map carried by a definition or binding. */\nexport type Tools<AgentValue extends AnyDefinition | Any> = Toolkit.Tools<\n  DefinitionOf<AgentValue>[\"toolkit\"]\n>;\n\ntype ApplicationTools<A extends AnyDefinition> = [UpdatesSchema<A>] extends [never]\n  ? Tools<A>\n  : Omit<Tools<A>, \"emit_update\">;\n\ntype ToolMapValues<ToolMap extends Record<string, Tool.Any>> = ToolMap extends unknown\n  ? ToolMap[keyof ToolMap]\n  : never;\n\n/** All possible tools, including keys present in only one definition or binding branch. */\nexport type ToolUnion<AgentValue extends AnyDefinition | Any> = ToolMapValues<Tools<AgentValue>>;\n\n/** Instruction, tool-handler, and Schema services required before a Model is bound. */\nexport type DefinitionRequirements<DefinitionValue extends AnyDefinition> =\n  DefinitionValue extends unknown\n    ?\n        | EffectServices<InstructionEffect<DefinitionValue[\"instructions\"], Input<DefinitionValue>>>\n        | EffectServices<InputPromptEffect<DefinitionValue[\"inputPrompt\"], Input<DefinitionValue>>>\n        | Tool.HandlersFor<ApplicationTools<DefinitionValue>>\n        | Tool.HandlerServices<ToolMapValues<ApplicationTools<DefinitionValue>>>\n        // The interpreter canonically re-encodes decoded Tool parameters before recording them.\n        | Tool.ParametersSchema<ToolUnion<DefinitionValue>>[\"EncodingServices\"]\n        | Tool.SuccessSchema<ToolUnion<DefinitionValue>>[\"DecodingServices\"]\n        | DefinitionValue[\"input\"][\"DecodingServices\"]\n        | DefinitionValue[\"input\"][\"EncodingServices\"]\n        | DefinitionValue[\"output\"][\"DecodingServices\"]\n        | DefinitionValue[\"output\"][\"EncodingServices\"]\n        | UpdatesSchema<DefinitionValue>[\"DecodingServices\"]\n        | UpdatesSchema<DefinitionValue>[\"EncodingServices\"]\n        | RunDispositionSchemaOf<DefinitionValue>[\"DecodingServices\"]\n        | RunDispositionSchemaOf<DefinitionValue>[\"EncodingServices\"]\n    : never;\n\n/** Definition services plus native model services, or a binding's model Layer requirements. */\nexport type Requirements<AgentValue extends AnyDefinition | Any> =\n  | DefinitionRequirements<DefinitionOf<AgentValue>>\n  | (AgentValue extends { readonly model: infer ModelValue }\n      ? ModelRequirements<ModelValue>\n      : ModelServices);\n\n// Distribute after unwrapping bindings too: withModel may itself contain a definition union.\ntype DefinitionFailure<DefinitionValue extends AnyDefinition> = DefinitionValue extends unknown\n  ?\n      | EffectError<InstructionEffect<DefinitionValue[\"instructions\"], Input<DefinitionValue>>>\n      | EffectError<InputPromptEffect<DefinitionValue[\"inputPrompt\"], Input<DefinitionValue>>>\n      | Tool.HandlerError<ToolUnion<DefinitionValue>>\n  : never;\n\n/** Failures from every possible definition, preserving each branch's instruction input type. */\nexport type Failure<AgentValue extends AnyDefinition | Any> =\n  | DefinitionFailure<DefinitionOf<AgentValue>>\n  | AiError.AiError\n  | AgentInputError\n  | AgentOutputError\n  | RunDispositionFailure<AgentValue>;\n\n/** Validate an agent ID and return a shallowly frozen, model-agnostic definition. */\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  DispositionSchema extends Schema.Top,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n    InputPromptValue,\n    UpdatesSchema\n  > & {\n    readonly runDisposition: RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>;\n    readonly inputPrompt: InputPromptValue;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n  InputPromptValue,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  DispositionSchema extends Schema.Top,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n    undefined,\n    UpdatesSchema\n  > & {\n    readonly runDisposition: RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>;\n    readonly inputPrompt?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  RunDispositionDeclaration<OutputSchema[\"Type\"], DispositionSchema>,\n  undefined,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  InputPromptValue extends InputPromptSource<InputSchema[\"Type\"], unknown, unknown> | undefined,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    undefined,\n    InputPromptValue,\n    UpdatesSchema\n  > & {\n    readonly inputPrompt: InputPromptValue;\n    readonly runDisposition?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  undefined,\n  InputPromptValue,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make<\n  const Name extends string,\n  InputSchema extends Schema.Top,\n  OutputSchema extends Schema.Top,\n  Instructions extends InstructionSource<InputSchema[\"Type\"], unknown, unknown>,\n  ToolkitValue extends Toolkit.Any,\n  UpdatesSchema extends Schema.Top | undefined = undefined,\n>(\n  id: Name,\n  options: DefinitionOptions<\n    InputSchema,\n    OutputSchema,\n    Instructions,\n    ToolkitValue,\n    undefined,\n    undefined,\n    UpdatesSchema\n  > & {\n    readonly inputPrompt?: undefined;\n    readonly runDisposition?: undefined;\n  },\n): Definition<\n  InputSchema,\n  OutputSchema,\n  Instructions,\n  UpdateToolkit<ToolkitValue, NoInfer<UpdatesSchema>>,\n  undefined,\n  undefined,\n  NoInfer<UpdatesSchema>\n> & { readonly id: AgentId & Name };\n\nexport function make(\n  id: string,\n  options: {\n    readonly updates?: Schema.Top | undefined;\n    readonly input: Schema.Top;\n    readonly output: Schema.Top;\n    readonly instructions: unknown;\n    readonly inputPrompt?: unknown;\n    readonly toolkit: Toolkit.Any;\n    readonly toolExposure?: Configuration | undefined;\n    readonly policy?: Partial<AgentPolicyInput> | undefined;\n    readonly completion?: CompletionToolDeclaration | undefined;\n    readonly completionFromTools?: ReadonlyArray<CompletionFromToolDeclaration> | undefined;\n    readonly runDisposition?: RunDispositionDeclaration<never, Schema.Top> | undefined;\n    readonly description?: string | undefined;\n    readonly metadata?: Readonly<Record<string, string>> | undefined;\n  },\n): AnyDefinition {\n  const completionNames = new Set<string>();\n\n  for (const declaration of options.completionFromTools ?? []) {\n    if (declaration.tool === options.completion?.tool || completionNames.has(declaration.tool)) {\n      throw new Error(`Tool ${declaration.tool} has more than one completion declaration`);\n    }\n    if (!Object.hasOwn(options.toolkit.tools, declaration.tool)) {\n      throw new Error(`Unknown completion Tool ${declaration.tool}`);\n    }\n    completionNames.add(declaration.tool);\n  }\n\n  return Object.freeze({\n    ...options,\n    toolkit: withUpdateTool(options.toolkit, options.updates),\n    policy: AgentPolicy.resolve(options.policy),\n    policyOverrides: Object.freeze({ ...options.policy }),\n    toolExposure:\n      options.toolExposure === undefined\n        ? undefined\n        : Object.freeze({\n            ...options.toolExposure,\n            initialToolNames: Object.freeze([...(options.toolExposure.initialToolNames ?? [])]),\n          }),\n    id: S.decodeSync(AgentId)(id),\n    metadata: options.metadata === undefined ? undefined : Object.freeze({ ...options.metadata }),\n    completion:\n      options.completion === undefined ? undefined : Object.freeze({ ...options.completion }),\n    completionFromTools:\n      options.completionFromTools === undefined\n        ? undefined\n        : Object.freeze(\n            options.completionFromTools.map((declaration) => Object.freeze({ ...declaration })),\n          ),\n    runDisposition:\n      options.runDisposition === undefined\n        ? undefined\n        : Object.freeze({ ...options.runDisposition }),\n  });\n}\n\n/** Fix a model Layer for registration or delegation without acquiring or hiding its requirements. */\nexport const withModel = <DefinitionValue extends AnyDefinition, ModelValue>(\n  definition: DefinitionValue,\n  model: NativeModel<ModelValue>,\n): Binding<DefinitionValue, ModelValue> =>\n  Object.freeze({\n    definition,\n    model,\n  });\n"],"mappings":";;;;;;;;;AAMA,MAAa,cAAoC,WAC/C,KAAK,KAAK,eAAe;CACvB,aAAa;CACb,YAAY,OAAO,OAAO,EAAE,OAAO,OAAO,CAAC;CAC3C,SAAS,OAAO;CAChB,SAAS;CACT,aAAa;AACf,CAAC,CAAC,CAAC,cAAc,OAAO;AAS1B,MAAa,kBACX,SACA,WACgB;CAChB,IAAI,WAAW,KAAA,GAAW,OAAO;CACjC,IAAI,OAAO,OAAO,QAAQ,OAAO,aAAa,GAC5C,MAAM,IAAI,UAAU,2CAA2C;CAEjE,OAAO,QAAQ,KAAK,GAAG,OAAO,OAAO,QAAQ,KAAK,GAAG,WAAW,MAAM,CAAC;AACzE;;;;;;;;;;AC6LA,MAAa,iBAAiB,EAAE,OAAO;CACrC,MAAM,EAAE;CACR,aAAa,EAAE,SAAS,CAAC,SAAS,QAAQ,CAAC;;CAE3C,iBAAiB,EAAE;AACrB,CAAC;;;;;;;;AAWD,MAAa,gBAAgB,UAA8D;CACzF,MAAM,aAAa,gBAAgB,QAAQ,MAAM,aAAa;CAE9D,OAAO,OAAO,OAAO,WAAW,QAAQ,KAAK,CAAC,CAAC,KAAK,SAClD,eAAe,KAAK;EAClB,MAAM,KAAK;EACX,aAAa,KAAK;EAClB,iBAAiB,CAAC,KAAK,kBAAkB,IAAI,KAAK,KAAK;CACzD,CAAC,CACH;AACF;AAqQA,SAAgB,KACd,IACA,SAee;CACf,MAAM,kCAAkB,IAAI,IAAY;CAExC,KAAK,MAAM,eAAe,QAAQ,uBAAuB,CAAC,GAAG;EAC3D,IAAI,YAAY,SAAS,QAAQ,YAAY,QAAQ,gBAAgB,IAAI,YAAY,IAAI,GACvF,MAAM,IAAI,MAAM,QAAQ,YAAY,KAAK,0CAA0C;EAErF,IAAI,CAAC,OAAO,OAAO,QAAQ,QAAQ,OAAO,YAAY,IAAI,GACxD,MAAM,IAAI,MAAM,2BAA2B,YAAY,MAAM;EAE/D,gBAAgB,IAAI,YAAY,IAAI;CACtC;CAEA,OAAO,OAAO,OAAO;EACnB,GAAG;EACH,SAAS,eAAe,QAAQ,SAAS,QAAQ,OAAO;EACxD,QAAQ,YAAY,QAAQ,QAAQ,MAAM;EAC1C,iBAAiB,OAAO,OAAO,EAAE,GAAG,QAAQ,OAAO,CAAC;EACpD,cACE,QAAQ,iBAAiB,KAAA,IACrB,KAAA,IACA,OAAO,OAAO;GACZ,GAAG,QAAQ;GACX,kBAAkB,OAAO,OAAO,CAAC,GAAI,QAAQ,aAAa,oBAAoB,CAAC,CAAE,CAAC;EACpF,CAAC;EACP,IAAI,EAAE,WAAW,OAAO,CAAC,CAAC,EAAE;EAC5B,UAAU,QAAQ,aAAa,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,SAAS,CAAC;EAC5F,YACE,QAAQ,eAAe,KAAA,IAAY,KAAA,IAAY,OAAO,OAAO,EAAE,GAAG,QAAQ,WAAW,CAAC;EACxF,qBACE,QAAQ,wBAAwB,KAAA,IAC5B,KAAA,IACA,OAAO,OACL,QAAQ,oBAAoB,KAAK,gBAAgB,OAAO,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,CACpF;EACN,gBACE,QAAQ,mBAAmB,KAAA,IACvB,KAAA,IACA,OAAO,OAAO,EAAE,GAAG,QAAQ,eAAe,CAAC;CACnD,CAAC;AACH;;AAGA,MAAa,aACX,YACA,UAEA,OAAO,OAAO;CACZ;CACA;AACF,CAAC"}

package/dist/{Agent-CN0EWRsR.d.mts → Agent-CM6JubNX.d.mts}

@@ -2,7 +2,7 @@ import { t as AgentId } from "./Identifiers-CN2s30fF.mjs";
 import { i as UpdateError, n as Emitter } from "./AgentUpdates-DMJ-_xow.mjs";
 import { r as Configuration } from "./ToolExposure-r2eOWk4F.mjs";
 import { a as AgentInputError, l as AgentRunDispositionError, s as AgentOutputError } from "./AgentError-CggcAQ7V.mjs";
-import { n as AgentPolicyInput, t as AgentPolicy } from "./AgentPolicy-CetmQrf3.mjs";
+import { n as AgentPolicyInput, t as AgentPolicy } from "./AgentPolicy-BqDoSXO6.mjs";
 import { AiError, LanguageModel, Model, Prompt, Tool, Toolkit } from "effect/unstable/ai";
 import { Effect, Layer, Option, Schema } from "effect";
 //#region src/core/internal/agent-updates.d.ts
@@ -223,4 +223,4 @@ declare function make<const Name extends string, InputSchema extends Schema.Top,
 declare const withModel: <DefinitionValue extends AnyDefinition, ModelValue>(definition: DefinitionValue, model: NativeModel<ModelValue>) => Binding<DefinitionValue, ModelValue>;
 //#endregion
 export { Tools as A, Requirements as C, RunDispositionSchema as D, RunDispositionFailure as E, withModel as F, UpdatesSchema as M, inspectTools as N, ToolInspection as O, make as P, OutputSchema as S, RunDispositionDeclaration as T, InstructionSource as _, CompletionFromToolDeclaration as a, NativeModel as b, Definition as c, EncodedInput as d, Failure as f, InstructionResult as g, InputSchema as h, Binding as i, Update as j, ToolUnion as k, DefinitionOptions as l, InputPromptSource as m, Any as n, CompletionProjectionInput as o, Input as p, AnyDefinition as r, CompletionToolDeclaration as s, Agent_d_exports as t, DefinitionRequirements as u, ModelServices as v, RunDisposition as w, Output as x, Name as y };
-//# sourceMappingURL=Agent-CN0EWRsR.d.mts.map
+//# sourceMappingURL=Agent-CM6JubNX.d.mts.map

package/dist/{AgentPolicy-CetmQrf3.d.mts → AgentPolicy-BqDoSXO6.d.mts}

@@ -1,4 +1,4 @@
-import { t as ToolResultBounds } from "./ToolResult-DmmgoChv.mjs";
+import { n as ToolResultBounds } from "./ToolResult-BKdqWRff.mjs";
 import * as Schema from "effect/Schema";
 import * as Duration from "effect/Duration";
 declare namespace AgentPolicy_d_exports {
@@ -93,4 +93,4 @@ declare class AgentPolicy extends AgentPolicy_base {
 }
 //#endregion
 export { CompactionPolicyInput as a, CompactionPolicy as i, AgentPolicyInput as n, AgentPolicy_d_exports as r, AgentPolicy as t };
-//# sourceMappingURL=AgentPolicy-CetmQrf3.d.mts.map
+//# sourceMappingURL=AgentPolicy-BqDoSXO6.d.mts.map

package/dist/{AgentRuntime-BPjQM1Nv.mjs → AgentRuntime-Cdvqw7l_.mjs}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { n as utf8ByteLength } from "./utf8-DchGZRBd.mjs";
-import { applyToolResultBounds, unserializableToolResult } from "./core/ToolResult.mjs";
 import { ReceiptId, RunId, SubmissionId, ThreadId, ToolCallId } from "./core/Identifiers.mjs";
+import { n as utf8ByteLength } from "./utf8-DchGZRBd.mjs";
+import { ToolParameterRejection, applyToolResultBounds, unserializableToolResult } from "./core/ToolResult.mjs";
 import { IdempotencyKey } from "./core/Receipt.mjs";
 import { Emitter, Update, UpdateError } from "./core/AgentUpdates.mjs";
 import { AgentApprovalDenied, AgentApprovalPending, AgentInputError, AgentOutputError, AgentPolicyError, AgentRunDispositionError, AgentToolAuthorizationDenied, ContextBudgetError, ContextOverflowError, ModelProtocolError } from "./core/AgentError.mjs";
@@ -24,7 +24,7 @@ import { RunEventSink, RunEventSinkClosedError } from "./engine/RunEventSink.mjs
 import { AgentUpdateAcceptance, CurrentToolFailureObserver, ModelUsageAccounting, RunContextPreparation, RunResumeUsageSchema, RunToolAuthorization, RunToolScheduling, RunTurnResumeSettledCallSchema } from "./engine/RunOptions.mjs";
 import { ToolBroker, ToolBrokerConfigurationError, ToolBrokerUnavailableError } from "./engine/ToolBroker.mjs";
 import { AiError, LanguageModel, Model, Prompt, Response, Tool, Toolkit } from "effect/unstable/ai";
-import { Cause, Channel, Clock, Context, DateTime, Duration, Effect, Equal, ErrorReporter, Exit, Fiber, Layer, Metric, Option, PubSub, Queue, Redacted, Result, Schema, Scope, Semaphore, Stream, Tracer } from "effect";
+import { Cause, Channel, Clock, Context, DateTime, Duration, Effect, Equal, ErrorReporter, Exit, Fiber, Layer, Metric, Option, PubSub, Queue, Redacted, Result, Schema, SchemaGetter, Scope, Semaphore, Stream, Tracer } from "effect";
 //#region src/engine/internal/bounded-value.ts
 const DEFAULT_MAX_DEPTH = 128;
 const OBJECT_OVERHEAD_BYTES = 32;
@@ -872,12 +872,24 @@ const inspectModelResponsePartCapacity = (usage, part, limits, knownSafePrototyp
 	return bytes === void 0 ? Effect.fail(ModelProtocolError.make({ message: `Model response exceeded the ${limits.maxModelResponseBytes}-byte retained response limit` })) : Effect.succeed(bytes);
 });
 /**
-* `disableToolCallResolution` keeps model Tool Call parameters in their
-* encoded wire form. Build the response ownership codec from those encoded
-* parameter Schemas; the engine decodes and canonically re-encodes each call
-* against the Definition-owned Schema before it enters history or executes.
+* LanguageModel validates encoded parameters even with automatic resolution disabled.
+* Defer only recoverable application parameter validation; the declaration's JSON codec
+* still exposes the original schema to providers and preserves their wire normalization.
+* No handler is installed or executed by this transport-only Toolkit.
 */
-const encodedToolParameterToolkit = (toolkit) => Toolkit.make(...Object.values(toolkit.tools).map((tool) => tool.setParameters(Schema.toEncoded(tool.parametersSchema))));
+const defersToolParameters = (tool) => tool.failureMode === "return" && !(Tool.isProviderDefined(tool) && !tool.requiresHandler) && !(Tool.isDynamic(tool) && tool.jsonSchema !== void 0);
+const deferredToolParameterToolkit = (toolkit) => {
+	if (!Object.values(toolkit.tools).some(defersToolParameters)) return toolkit;
+	return Toolkit.make(...Object.values(toolkit.tools).map((tool) => !defersToolParameters(tool) ? tool : tool.setParameters(Schema.declareConstructor()([], () => (input) => Schema.decodeUnknownEffect(Schema.toEncoded(tool.parametersSchema))(input).pipe(Effect.orElseSucceed(() => input)), {
+		description: Tool.getDescription(tool),
+		toCodecJson: () => Schema.link()(Schema.toEncoded(tool.parametersSchema), {
+			decode: SchemaGetter.passthrough(),
+			encode: SchemaGetter.passthrough()
+		})
+	}))));
+};
+/** Own fresh JSON arguments without accepting them as executable parameters. */
+const encodedToolParameterToolkit = (toolkit) => Toolkit.make(...Object.values(toolkit.tools).map((tool) => tool.setParameters(tool.failureMode === "return" && !(Tool.isProviderDefined(tool) && !tool.requiresHandler) ? Schema.Json : Schema.toEncoded(tool.parametersSchema))));
 const makeModelResponseCodec = (toolkit) => Schema.toCodecJson(Response.StreamPart(encodedToolParameterToolkit(toolkit)));
 const modelResponseCodecs = /* @__PURE__ */ new WeakMap();
 const modelResponseCodecFor = (toolkit) => {
@@ -945,24 +957,28 @@ const encodeToolCallParameters = (tool, toolName, decodedParams) => {
 * lookup only around a successful Schema decode.
 */
 const decodeToolCallParameters = (tool, toolName, encodedParams, boundary = "execution") => {
-	return Schema.decodeUnknownEffect(tool.parametersSchema)(encodedParams).pipe(Effect.mapError((cause) => ModelProtocolError.make({ message: `Recorded parameters for Tool ${toolName} failed validation${boundary === "resume" ? " on resume" : ""}: ${cause.message}` })));
+	return Schema.decodeUnknownEffect(tool.parametersSchema)(encodedParams).pipe(Effect.mapError((cause) => ModelProtocolError.make({ message: boundary === "model" ? `Invalid parameters for Tool ${toolName}: ${cause.message}` : `Recorded parameters for Tool ${toolName} failed validation${boundary === "resume" ? " on resume" : ""}: ${cause.message}` })));
 };
 /**
-* Decode canonical parameters for approval while retaining their encoded
-* form for the native `Toolkit.handle` boundary.
+* Decode executable parameters for approval while retaining their encoded form for
+* Toolkit.handle. A recorded rejection is a terminal failure, never an executable call.
 */
-const prepareToolCall = (toolkit, call, declarationIndex) => {
+const prepareToolCall = (toolkit, call, declarationIndex, rejection) => {
 	const name = call.name;
 	if (!hasTool(toolkit.tools, name)) return Effect.fail(ModelProtocolError.make({ message: `Model requested unknown Tool ${call.name}` }));
 	const tool = toolkit.tools[name];
-	return decodeToolCallId(call.id).pipe(Effect.flatMap((toolCallId) => decodeToolCallParameters(tool, call.name, call.params).pipe(Effect.map((decodedParams) => ({
-		call,
-		name,
-		toolCallId,
-		decodedParams,
-		tool,
-		declarationIndex
-	})))));
+	return Effect.gen(function* () {
+		const toolCallId = yield* decodeToolCallId(call.id);
+		const validation = rejection === void 0 ? Result.succeed(yield* decodeToolCallParameters(tool, call.name, call.params)) : Result.fail(rejection);
+		return {
+			call,
+			name,
+			toolCallId,
+			validation,
+			tool,
+			declarationIndex
+		};
+	});
 };
 /**
 * Re-validate one canonically recorded Tool Call's encoded parameters through
@@ -1173,10 +1189,12 @@ const stampSubagentEvent = Effect.fn("AgentRuntime.stampSubagentEvent")(function
 	}
 });
 const approvalDecision = (context, turnId, prepared, options) => Effect.gen(function* () {
+	if (Result.isFailure(prepared.validation)) return { required: false };
+	const decodedParams = prepared.validation.success;
 	const approval = prepared.tool.needsApproval;
 	if (approval === void 0 || approval === false) return { required: false };
 	if (!(typeof approval === "function" ? yield* Effect.suspend(() => {
-		const result = approval(prepared.decodedParams, {
+		const result = approval(decodedParams, {
 			toolCallId: prepared.call.id,
 			messages: context.history.content
 		});
@@ -1205,7 +1223,7 @@ const approvalDecision = (context, turnId, prepared, options) => Effect.gen(func
 			turnId,
 			toolCallId,
 			toolName: prepared.call.name,
-			parameters: prepared.decodedParams
+			parameters: decodedParams
 		})
 	};
 });
@@ -1412,7 +1430,7 @@ const executePreparedToolCall = (context, turnId, toolkit, prepared, trace, resu
 		const after = observer === void 0 ? telemetry : telemetry.pipe(Effect.andThen(Effect.suspend(() => failureObservation === void 0 ? Effect.void : deliverToolFailure(observer, failureObservation))));
 		return emitThenAfter(event, after.pipe(Effect.andThen(failSpan ? Effect.fail(toolSpanFailure) : Effect.void)));
 	};
-	const started = Stream.fromEffect(Effect.gen(function* () {
+	const started = Result.isFailure(prepared.validation) ? Stream.empty : Stream.fromEffect(Effect.gen(function* () {
 		const toolCallId = yield* decodeToolCallId(call.id);
 		yield* Effect.logDebug("agent tool handler started").pipe(Effect.annotateLogs({
 			agentId: context.agentId,
@@ -1430,7 +1448,13 @@ const executePreparedToolCall = (context, turnId, toolkit, prepared, trace, resu
 		});
 	}).pipe(Effect.withLogSpan("AgentRuntime.tool")));
 	const handle = toolkit.handle;
-	const results = Stream.unwrap(Effect.flatMap(ToolSpanTelemetry, ({ isolateToolkitHandle }) => isolateToolkitHandle(handle.call(toolkit, prepared.name, call.params, call.id)))).pipe(Stream.mapEffect((result) => Effect.gen(function* () {
+	const rejection = Result.isFailure(prepared.validation) ? prepared.validation.failure : void 0;
+	const results = (rejection === void 0 ? Stream.unwrap(Effect.flatMap(ToolSpanTelemetry, ({ isolateToolkitHandle }) => isolateToolkitHandle(handle.call(toolkit, prepared.name, call.params, call.id)))) : Stream.fromEffect(Schema.decodeEffect(Schema.toCodecJson(AiError.AiError))(rejection.error).pipe(Effect.mapError(() => ModelProtocolError.make({ message: "Invalid parameter rejection evidence" })), Effect.map((error) => ({
+		result: error,
+		encodedResult: rejection.error,
+		isFailure: true,
+		preliminary: false
+	}))))).pipe(Stream.mapEffect((result) => Effect.gen(function* () {
 		if (terminal || trace.finalToolResultIds.has(call.id)) return yield* ModelProtocolError.make({ message: `Tool Call ${call.id} produced more than one terminal result` });
 		const toolCallId = yield* decodeToolCallId(call.id);
 		if (result.preliminary) {
@@ -1555,11 +1579,11 @@ const executeToolBatch = (context, turnId, turn, toolkit, calls, trace, concurre
 	const visibility = yield* RunToolVisibility;
 	const eligible = new Set(context.toolCatalog.filter((entry) => entry.kind === "native").map((entry) => entry.nativeToolName));
 	if (calls.some((call) => exposed !== void 0 && !exposed.includes(call.name) || visibility !== void 0 && !settledCallIds?.has(call.id) && !eligible.has(call.name))) return yield* ModelProtocolError.make({ message: "Tool batch calls a Tool outside its request exposure or current visibility" });
-	const prepared = yield* Effect.forEach(calls, (call, declarationIndex) => prepareToolCall(toolkit, call, declarationIndex));
+	const prepared = yield* Effect.forEach(calls, (call, declarationIndex) => prepareToolCall(toolkit, call, declarationIndex, trace.toolParameterRejections.get(call.id)));
 	if (prepared.some((call) => Context.get(call.tool.annotations, ContextRolloverTool)) && trace.toolCalls.size !== 1) return yield* ModelProtocolError.make({ message: "A context rollover Tool must be the only Tool Call in its batch" });
 	const semaphore = yield* Semaphore.make(concurrency);
 	const approvalPreflight = prepared.reduce((stream, call) => stream.pipe(Stream.concat(preflightApproval(context, turnId, call, options))), Stream.empty);
-	const descriptors = trace.applicationCallDescriptors;
+	const descriptors = trace.applicationCallDescriptors.filter((call) => !trace.toolParameterRejections.has(call.toolCallId));
 	const durability = options.durability;
 	const hookServices = yield* Effect.context();
 	const executable = settledCallIds === void 0 ? prepared : prepared.filter((call) => !settledCallIds.has(call.call.id));
@@ -2520,9 +2544,27 @@ const eventsForPart = Effect.fnUntraced(function* (context, turnId, turn, tools,
 			if (parameterPart !== void 0 && (parameterPart.name !== part.name || parameterPart.providerExecuted !== part.providerExecuted)) return yield* ModelProtocolError.make({ message: `Completed Tool parameters did not match Tool Call ${part.id}` });
 			const toolCallId = yield* decodeToolCallId(part.id);
 			const tool = tools[part.name];
-			const decodedParameters = yield* decodeToolCallParameters(tool, part.name, part.params);
-			const encodedParameters = yield* encodeToolCallParameters(tool, part.name, decodedParameters);
-			const parameters = yield* decodeEventJson(encodedParameters, "Tool parameters");
+			const decoded = yield* Effect.result(decodeToolCallParameters(tool, part.name, part.params, "model"));
+			let parameters;
+			if (Result.isFailure(decoded)) {
+				if (part.providerExecuted || tool.failureMode !== "return") return yield* decoded.failure;
+				parameters = yield* decodeEventJson(part.params, "Tool parameters");
+				const error = AiError.make({
+					module: "Toolkit",
+					method: `${part.name}.handle`,
+					reason: new AiError.ToolParameterValidationError({
+						toolName: part.name,
+						description: decoded.failure.message
+					})
+				});
+				const encodedError = yield* Schema.encodeEffect(Schema.toCodecJson(AiError.AiError))(error).pipe(Effect.mapError(() => ModelProtocolError.make({ message: "Unable to encode parameter rejection" })));
+				const rejection = yield* Schema.decodeUnknownEffect(ToolParameterRejection)({
+					toolCallId,
+					parameters,
+					error: encodedError
+				}).pipe(Effect.mapError(() => ModelProtocolError.make({ message: "Invalid parameter rejection evidence" })));
+				trace.toolParameterRejections.set(part.id, rejection);
+			} else parameters = yield* encodeToolCallParameters(tool, part.name, decoded.success).pipe(Effect.flatMap((encoded) => decodeEventJson(encoded, "Tool parameters")));
 			const canonicalCall = Response.makePart("tool-call", {
 				id: part.id,
 				name: part.name,
@@ -2793,6 +2835,7 @@ const makeTurn = (agent, context, prompt, turn, priorToolCalls, options) => Stre
 		providerStagedPayloadBytes: 0,
 		turnCompletion: void 0,
 		applicationToolCalls: [],
+		toolParameterRejections: /* @__PURE__ */ new Map(),
 		applicationCallDescriptors: [],
 		applicationToolResults: [],
 		finished: false,
@@ -3033,7 +3076,7 @@ const makeTurn = (agent, context, prompt, turn, priorToolCalls, options) => Stre
 			context.windowTokens = tokens;
 		})), Effect.tap(() => snapshot === void 0 || options.durability?.noteToolExposure === void 0 ? Effect.void : options.durability.noteToolExposure(turn, snapshot)), Effect.as(guardBudgetStream(LanguageModel.streamText({
 			prompt: providerPrompt,
-			toolkit: requestToolkit,
+			toolkit: deferredToolParameterToolkit(requestToolkit),
 			disableToolCallResolution: true,
 			...toolChoice === void 0 ? {} : { toolChoice }
 		}), options.budget).pipe(Stream.provideServiceEffect(Tracer.Tracer, modelTelemetryTracer(context, turnId)), Stream.onStart(Effect.sync(() => {
@@ -3243,6 +3286,7 @@ const makeTurn = (agent, context, prompt, turn, priorToolCalls, options) => Stre
 					turnId,
 					responseMessages: promptFromTurnParts(trace),
 					calls: trace.applicationCallDescriptors,
+					...trace.toolParameterRejections.size === 0 ? {} : { toolParameterRejections: [...trace.toolParameterRejections.values()] },
 					toolExposure: snapshot
 				});
 				return guardBudgetStream(executeToolBatch(context, turnId, turn, toolkit, trace.applicationToolCalls, trace, concurrency, options, {
@@ -3372,6 +3416,7 @@ const makeResumeTurn = (agent, context, prompt, resume, countedToolCalls, option
 		providerStagedPayloadBytes: 0,
 		turnCompletion: void 0,
 		applicationToolCalls: [],
+		toolParameterRejections: /* @__PURE__ */ new Map(),
 		applicationCallDescriptors: [],
 		applicationToolResults: [],
 		finished: true,
@@ -3379,12 +3424,21 @@ const makeResumeTurn = (agent, context, prompt, resume, countedToolCalls, option
 		usage: void 0
 	};
 	const declarationByCallId = /* @__PURE__ */ new Map();
+	const rejections = yield* Schema.decodeEffect(Schema.Array(ToolParameterRejection))(resume.toolParameterRejections ?? []).pipe(Effect.mapError(() => ModelProtocolError.make({ message: "Invalid parameter rejection evidence on resume" })));
+	const sameJson = Schema.toEquivalence(Schema.Json);
+	for (const rejection of rejections) {
+		const call = resume.calls.find((call) => call.id === rejection.toolCallId);
+		if (call === void 0 || call.providerExecuted || call.name !== rejection.error.reason.toolName || !sameJson(yield* decodeEventJson(call.params, "Tool parameters"), rejection.parameters) || trace.toolParameterRejections.has(call.id) || tools[call.name]?.failureMode !== "return") return yield* ModelProtocolError.make({ message: "Parameter rejection does not match recorded Tool Call on resume" });
+		const validation = yield* Effect.result(decodeToolCallParameters(tools[call.name], call.name, call.params, "resume"));
+		if (Result.isSuccess(validation)) return yield* ModelProtocolError.make({ message: "Recorded parameter rejection contains valid arguments on resume" });
+		trace.toolParameterRejections.set(call.id, rejection);
+	}
 	for (const call of resume.calls) {
 		if (!hasTool(tools, call.name)) return failRunEventStream(ModelProtocolError.make({ message: `Turn resume declared unknown Tool ${call.name}` }));
 		if (trace.toolCalls.has(call.id)) return failRunEventStream(ModelProtocolError.make({ message: `Turn resume repeated Tool Call ID ${call.id}` }));
 		const tool = tools[call.name];
 		const toolCallId = yield* decodeToolCallId(call.id);
-		yield* decodeToolCallParameters(tool, call.name, call.params, "resume");
+		if (!trace.toolParameterRejections.has(call.id)) yield* decodeToolCallParameters(tool, call.name, call.params, "resume");
 		const parameters = yield* decodeEventJson(call.params, "Tool parameters");
 		const providerExecuted = call.providerExecuted === true;
 		declarationByCallId.set(call.id, {
@@ -3428,6 +3482,8 @@ const makeResumeTurn = (agent, context, prompt, resume, countedToolCalls, option
 	const settledInputs = yield* snapshotResumedSettledCalls(resume, declarationByCallId.size);
 	for (const settledInput of settledInputs) {
 		const settledCall = yield* decodeResumedSettledCall(settledInput, agent.definition.policy.toolResultBounds.maxBytes, providerCallIds);
+		const rejection = trace.toolParameterRejections.get(settledCall.id);
+		if (rejection !== void 0 && (!settledCall.isFailure || settledCall.toolSelection !== void 0 || settledCall.budgetRejected !== true && !sameJson(settledCall.result, yield* decodeEventJson(boundEncodedToolResult(rejection.error, agent.definition.policy.toolResultBounds), "Rejected Tool result")))) return yield* ModelProtocolError.make({ message: "Settled result contradicts parameter rejection on resume" });
 		const declared = declarationByCallId.get(settledCall.id);
 		if (declared === void 0) return failRunEventStream(ModelProtocolError.make({ message: `Turn resume settled an undeclared Tool Call ${settledCall.id}` }));
 		if (settledIds.has(settledCall.id)) return failRunEventStream(ModelProtocolError.make({ message: `Turn resume settled Tool Call ${settledCall.id} more than once` }));
@@ -4595,4 +4651,4 @@ var AgentRuntime_exports = /* @__PURE__ */ __exportAll({
 //#endregion
 export { stream as _, SubagentDurability as a, withTerminalDefectEvent as b, decodeFinalOutput as c, projectCompletionOutput as d, renderInputPrompt as f, startUnknown as g, start as h, AgentSpawner as i, encodeRunDisposition as l, runUnknown as m, AgentChildPending as n, SubagentDurabilityError as o, run as p, AgentResultSchema as r, ToolCallWaiting as s, AgentRuntime_exports as t, projectCompletionFromToolOutput as u, streamUnknown as v, streamWithUsageAccountingUnknown as y };
 
-//# sourceMappingURL=AgentRuntime-BPjQM1Nv.mjs.map
+//# sourceMappingURL=AgentRuntime-Cdvqw7l_.mjs.map