eve 0.83.2 → 0.84.0

package/dist/src/execution/durable-session-store.d.ts

@@ -1,5 +1,5 @@
 import type { HarnessModelMessage } from "#harness/messages.js";
-import type { HarnessSession, HarnessSessionBase, SessionStateMap } from "#harness/types.js";
+import type { CompactionState, HarnessSession, HarnessSessionBase, SessionStateMap } from "#harness/types.js";
 import type { SandboxState } from "#sandbox/state.js";
 import type { JsonObject } from "#shared/json.js";
 import { DURABLE_SESSION_VERSION } from "#execution/durable-session-read.js";
@@ -53,10 +53,7 @@ export interface DurableSession {
     readonly agent: {
         readonly system: string;
     };
-    readonly compaction?: {
-        readonly lastKnownInputTokens?: number;
-        readonly lastKnownPromptMessageCount?: number;
-    };
+    readonly compaction?: CompactionState;
 }
 /** Session program memory persisted atomically with Workflow step results. */
 export interface DurableSessionSnapshot {

package/dist/src/execution/dynamic-workflow/tool.js

@@ -1 +1 @@
-import{runJsProgram}from"#execution/dynamic-workflow/workflow.js";async function runWorkflowProgramTask(e,t){"use workflow";return runJsProgram(e.js,t,{maxSubagents:e.maxSubagents??0})}runWorkflowProgramTask.workflowId=`workflow//eve@0.83.2//runWorkflowProgramTask`;export{runWorkflowProgramTask};
+import{runJsProgram}from"#execution/dynamic-workflow/workflow.js";async function runWorkflowProgramTask(e,t){"use workflow";return runJsProgram(e.js,t,{maxSubagents:e.maxSubagents??0})}runWorkflowProgramTask.workflowId=`workflow//eve@0.84.0//runWorkflowProgramTask`;export{runWorkflowProgramTask};

package/dist/src/execution/dynamic-workflow/workflow.js

@@ -1 +1 @@
-import{toErrorMessage}from"#shared/errors.js";import{DEFAULT_WORKFLOW_PROGRAM_MAX_SUBAGENTS,MAX_WORKFLOW_PROGRAM_MAX_SUBAGENTS,WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES,parseWorkflowProgramOptions}from"#execution/dynamic-workflow/schema.js";import{runWorkflowProgramStep}from"#execution/dynamic-workflow/program-step.js";import{createWorkflowProgramContinuationSecurityStep}from"#execution/dynamic-workflow/security-step.js";async function runJsProgram(e,t,n){if(typeof e!=`string`)throw TypeError(`workflow requires a "js" string.`);let r={...parseWorkflowProgramOptions({maxSubagents:n.maxSubagents??DEFAULT_WORKFLOW_PROGRAM_MAX_SUBAGENTS}),continuationSecurity:await createWorkflowProgramContinuationSecurityStep(),js:e},i={callId:t.callId,program:r},a=await runWorkflowProgramStep(i),o=0;for(;a.status===`interrupted`;){t.abortSignal.throwIfAborted();let e=await Promise.all(a.pending.map(async({call:e,id:n})=>{if(o++>=r.maxSubagents)return{interruptionId:n,value:{status:`failed`,error:`WORKFLOW_PROGRAM_SUBAGENT_LIMIT_REACHED: workflow may invoke at most ${String(r.maxSubagents)} agents; "${e.target}" was not called.`}};try{return{interruptionId:n,value:{status:`completed`,output:await callProgramAgent(t,e)}}}catch(e){return t.abortSignal.throwIfAborted(),{interruptionId:n,value:{status:`failed`,error:toErrorMessage(e)}}}}));a=await runWorkflowProgramStep({...i,resume:{continuation:a.continuation,resolutions:e}})}return a.output}async function callProgramAgent(e,t){let{message:n,outputSchema:r}=t.input,i=await(await e.agent(t.target).send(n,{outputSchema:r,signal:e.abortSignal})).result();if(i.status===`failed`)throw Error(`Agent "${t.target}" failed to handle the message: ${i.error?.message??`no reason given`}`);let a=r===void 0?i.message??null:i.data??null,o=new TextEncoder().encode(JSON.stringify(a)).byteLength;if(o>WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES)throw Error(`Agent "${t.target}" replied with ${String(o)} bytes of JSON, over the ${String(WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES)} byte limit for a ctx.agent() result.`);return a}export{MAX_WORKFLOW_PROGRAM_MAX_SUBAGENTS,runJsProgram};
+import{toErrorMessage}from"#shared/errors.js";import{DEFAULT_WORKFLOW_PROGRAM_MAX_SUBAGENTS,MAX_WORKFLOW_PROGRAM_MAX_SUBAGENTS,WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES,parseWorkflowProgramOptions}from"#execution/dynamic-workflow/schema.js";import{runWorkflowProgramStep}from"#execution/dynamic-workflow/program-step.js";import{createWorkflowProgramContinuationSecurityStep}from"#execution/dynamic-workflow/security-step.js";async function runJsProgram(e,t,n){if(typeof e!=`string`)throw TypeError(`workflow requires a "js" string.`);let r={...parseWorkflowProgramOptions({maxSubagents:n.maxSubagents??DEFAULT_WORKFLOW_PROGRAM_MAX_SUBAGENTS}),continuationSecurity:await createWorkflowProgramContinuationSecurityStep(),js:e},i={callId:t.callId,program:r},a=await runWorkflowProgramStep(i),o=0;for(;a.status===`interrupted`;){t.abortSignal.throwIfAborted();let e=await Promise.all(a.pending.map(async({call:e,id:n})=>{if(o++>=r.maxSubagents)return{interruptionId:n,value:{status:`failed`,error:`WORKFLOW_PROGRAM_SUBAGENT_LIMIT_REACHED: workflow may invoke at most ${String(r.maxSubagents)} agents; "${e.target}" was not called.`}};try{return{interruptionId:n,value:{status:`completed`,output:await callProgramAgent(t,e)}}}catch(e){return t.abortSignal.throwIfAborted(),{interruptionId:n,value:{status:`failed`,error:toErrorMessage(e)}}}}));a=await runWorkflowProgramStep({...i,resume:{continuation:a.continuation,resolutions:e}})}return a.output}async function callProgramAgent(e,t){let{message:n,outputSchema:r}=t.input,i=await(await e.agent(t.target).send(n,{outputSchema:r,signal:e.abortSignal})).result();if(i.status===`failed`)throw Error(`Agent "${t.target}" failed to handle the message: ${i.error.message}`);let a=r===void 0?i.reply??null:i.data??null,o=new TextEncoder().encode(JSON.stringify(a)).byteLength;if(o>WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES)throw Error(`Agent "${t.target}" replied with ${String(o)} bytes of JSON, over the ${String(WORKFLOW_PROGRAM_MAX_AGENT_OUTPUT_BYTES)} byte limit for a ctx.agent() result.`);return a}export{MAX_WORKFLOW_PROGRAM_MAX_SUBAGENTS,runJsProgram};

package/dist/src/execution/failure-summary.d.ts

@@ -0,0 +1,11 @@
+import type { JsonObject } from "#shared/json.js";
+/**
+ * A thrown error as a failure reports it. Cataloged failures replace the raw identity with the
+ * curated one; the `detail` dump stays in `details` so the session trace keeps the raw evidence
+ * while the transcript shows the actionable summary.
+ */
+export declare function summarizeFailure(error: unknown, fallbackCode: string): {
+    readonly code: string;
+    readonly details: JsonObject;
+    readonly message: string;
+};

package/dist/src/execution/failure-summary.js

@@ -0,0 +1 @@
+import{formatError}from"#internal/logging.js";import{summarizeKnownError}from"#harness/semantic-errors/index.js";function summarizeFailure(e,t){let n=formatError(e),r=summarizeKnownError(e),i=n;if(r!==null){let e={...n,message:r.message,name:r.name,semanticErrorId:r.id};i=r.hint===void 0?e:{...e,hint:r.hint}}return{code:typeof i.name==`string`?i.name:t,details:i,message:typeof i.message==`string`?i.message:String(e)}}export{summarizeFailure};

package/dist/src/execution/forward-session-input.d.ts

@@ -1,4 +1,4 @@
+import type { SessionEvent } from "#protocol/session-event.js";
 import type { ContextContainer } from "#context/container.js";
-import type { UnstampedMessageStreamEvent } from "#protocol/message.js";
 /** A remote session sends input to its caller instead of presenting it on its own channel. */
-export declare function forwardSessionInput(ctx: ContextContainer, event: UnstampedMessageStreamEvent, inputSource?: string): Promise<boolean>;
+export declare function forwardSessionInput(ctx: ContextContainer, event: SessionEvent, inputSource?: string): Promise<boolean>;

package/dist/src/execution/forward-session-input.js

@@ -1 +1 @@
-import{sessionCommandHookToken}from"#execution/session-inbox/address.js";import{ContinuationTokenKey,LegacyRemoteAgentCallerKey,SessionCallbackKey,SessionIdKey,SessionInboxKey}from"#context/keys.js";import{forwardLegacySessionInput}from"#execution/legacy-remote-agent/protocol.js";import{resolvedForParent}from"#harness/hitl/relays.js";import{postSessionCallbackRequest}from"#execution/session-callback-request.js";async function forwardSessionInput(e,t,n){let r=e.get(SessionCallbackKey);if(r===void 0)return!1;let i=e.get(LegacyRemoteAgentCallerKey);if(i!==void 0)return await forwardLegacySessionInput(e,i,t);if(t.type===`input.resolved`){let e=resolvedForParent(t.data);if(e===void 0)return!1;t={data:e,type:`input.resolved`}}if(t.type!==`input.requested`&&t.type!==`authorization.required`&&t.type!==`authorization.completed`&&t.type!==`approval.candidate`&&t.type!==`approval.settled`&&t.type!==`input.resolved`)return!1;let a=t.type===`input.requested`?{callId:r.callId,childContinuationToken:e.get(ContinuationTokenKey)??sessionCommandHookToken(e.require(SessionIdKey)),childSessionId:e.require(SessionIdKey),childSessionInbox:e.get(SessionInboxKey),event:t.data,inputSource:n??`session`,kind:`subagent-input-request`,subagentName:r.subagentName}:{callId:r.callId,childSessionId:e.require(SessionIdKey),event:t,kind:`subagent-authorization-event`,subagentName:r.subagentName},o=await postSessionCallbackRequest({body:a,url:r.url});if(!o.ok)throw Error(`Remote input callback failed with HTTP ${o.status}.`);return!0}export{forwardSessionInput};
+import{sessionCommandHookToken}from"#execution/session-inbox/address.js";import{ContinuationTokenKey,EarlierRemoteCallerKey,SessionCallbackKey,SessionIdKey,SessionInboxKey}from"#context/keys.js";import{currentView}from"#harness/session-machine/current.js";import{relayedInteractionEvents}from"#harness/interaction-relay.js";import{postSessionCallbackRequest}from"#execution/session-callback-request.js";async function forwardSessionInput(e,t,n){let r=e.get(SessionCallbackKey);if(r===void 0||e.get(EarlierRemoteCallerKey)!==void 0)return!1;let i=e.require(SessionIdKey),a=relayedInteractionEvents(currentView(e),t,i);if(a.length===0)return t.type===`interaction.opened`;let o=e.get(SessionInboxKey),s={callId:r.callId,childSessionId:i,events:a,kind:`subagent-interaction`,subagentName:r.subagentName,...a.some(e=>e.type===`interaction.opened`&&e.data.request.kind!==`sign-in`)&&{route:{childContinuationToken:e.get(ContinuationTokenKey)??sessionCommandHookToken(i),inputSource:n??`session`,...o!==void 0&&{childSessionInbox:o}}}},c=await postSessionCallbackRequest({body:s,url:r.url});if(!c.ok)throw Error(`Remote input callback failed with HTTP ${c.status}.`);return!0}export{forwardSessionInput};

package/dist/src/execution/invoke-tool.js

@@ -1 +1 @@
-import{createLogger,logError}from"#internal/logging.js";import{compiledToolOwner,isInvocableCompiledTool}from"#channel/tool-eligibility.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AuthKey,InitiatorAuthKey,SandboxKey,SessionIdKey,SessionKey}from"#context/keys.js";import{toErrorMessage}from"#shared/errors.js";import{buildCallbackContext}from"#context/build-callback-context.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{resolveApprovalPolicy}from"#approval/definition.js";import{ensureSandboxAccess}from"#execution/sandbox/ensure.js";import{isConnectionAuthorizationFailedError}from"#connections/errors.js";import{AuthorizationHookKey,CallbackBaseUrlKey,isAuthorizationSignal,modelFacingAuthorizationOutput}from"#harness/authorization.js";import{checkToolCallInput,toolCallModelOutput}from"#harness/tool-call-io.js";import{context,trace}from"#compiled/@opentelemetry/api/index.js";import{isAnonymousPrincipal}from"#channel/principal-identity.js";import{deriveToolSessionId,validateToolSessionKey}from"#execution/tool-session/id.js";import{normalizeToolJsonOutput}from"#harness/tool-model-output.js";import{isAsyncIterable}from"#shared/async-iterable.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{createUlid}from"#shared/ulid.js";import{withInvokeToolSpan}from"#tracing/eve/invoke-tool-span.js";const log=createLogger(`invoke-tool`);function ineligibility(e,t){if(!isInvocableCompiledTool(e,t))return compiledToolOwner(e,t).kind===`framework`?`it is a framework tool, which needs a conversation`:t.behavior?.handling===void 0?`it has no server-side execute`:`the harness or the model provider runs it, not its execute`}async function invokeTool(e,t,n,r){let i=e.manifest.tools.find(e=>e.name===t),a=e.tools.get(t);if(i===void 0||a===void 0)return failed(`The agent has no tool named "${t}".`);let o=ineligibility(e.manifest,i)??(a.execute===void 0?`it has no server-side execute`:void 0);if(o!==void 0)return failed(`Tool "${t}" cannot be invoked outside a conversation: ${o}.`);let s=r.key,c=s===void 0?void 0:validateToolSessionKey(s);if(c!==void 0)return{message:c,status:`invalid-input`};if(s!==void 0&&isAnonymousPrincipal(r.auth))return denied(`Tool sessions need an authenticated caller: an anonymous caller cannot send a key. Call without a key for a one-off session.`);let l=`call_${createUlid()}`,u=`call_session_${createUlid()}`,d=s===void 0?u:deriveToolSessionId({current:r.auth,forwardedBy:r.forwardedBy,key:s});return await withInvokeToolSpan({agentName:e.agentName,auth:r.auth,callId:l,origin:e.origin,sessionId:u,toolName:t},i=>runInvocation({callId:l,definition:a,input:n,name:t,observer:i,options:r,runtime:e,sessionId:d}))}async function runInvocation(e){let{callId:t,definition:n,name:r,observer:i,options:a,runtime:o,sessionId:s}=e,c=await checkToolCallInput(n,e.input,t);if(c.kind===`threw`)return i.failedWith(c.error),failedFromError(c.error,r,`input validation failed`);if(c.kind===`invalid`)return{message:c.message,status:`invalid-input`};let l=a.key===void 0?await callSandbox(o,s):await keyedSandbox(o,s),u=createCallContext({auth:a.auth,initiator:a.initiator??a.auth,callId:t,callbackBaseUrl:o.callbackBaseUrl,sessionId:s});u.setVirtualContext(SandboxKey,l.access),o.bundle!==void 0&&u.setVirtualContext(BundleKey,o.bundle);try{return await contextStorage.run(u,()=>runCall({callId:t,definition:n,input:c.value,observer:i,signal:a.signal}))}finally{await l.release().catch(e=>{logError(log,`failed to release a call's sandbox`,e,{sessionId:s,toolName:r})})}}async function keyedSandbox(e,t){let n=await ensureSandboxAccess({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:e.nodeId,ownsSandbox:!1,registry:e.sandboxRegistry,sessionId:t,shutdownTracking:`call`,state:null});return{access:n,release:()=>n.release()}}async function callSandbox(e,t){let n=await ensureSandboxAccess({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:e.nodeId,ownsSandbox:!0,registry:e.sandboxRegistry,sessionId:t,state:null}),r=!1;return{access:{...n,get(){return r=!0,n.get()}},async release(){r&&await n.end(`completed`)}}}function createCallContext(e){let t=new ContextContainer;return t.set(AuthKey,e.auth),t.set(InitiatorAuthKey,e.initiator),t.set(SessionIdKey,e.sessionId),t.setVirtualContext(SessionKey,{auth:{current:e.auth,initiator:e.initiator},sessionId:e.sessionId,turn:{id:e.callId,sequence:0}}),t.set(CallbackBaseUrlKey,e.callbackBaseUrl.replace(/\/$/,``)),t.setVirtualContext(AuthorizationHookKey,`invoke-tool:${e.callId}`),t}async function runCall(e){let{callId:t,definition:n,observer:r}=e,i=e.signal??new AbortController().signal;if(n.approval!==void 0){let a;try{a=await resolveApprovalPolicy(n.approval)({...buildCallbackContext(),abortSignal:i,approvedTools:new Set,callId:t,toolInput:e.input,toolName:n.name})}catch(e){return r.failedWith(e),failedFromError(e,n.name,`approval policy failed`)}let o=decideApproval(a);if(o.kind===`denied`)return denied(o.reason);if(o.kind===`user-approval`)return{status:`approval-required`}}let a={abortSignal:i,messages:[],toolCallId:t};await r.executing(e.input);let o,s,c=!1,l=performance.now(),elapsed=()=>performance.now()-l,u;try{o=await n.execute(e.input,a),isAsyncIterable(o)&&(o=await lastIterated(o)),c=!0,isAuthorizationSignal(o)||(s=normalizeToolJsonOutput({boundary:`execute`,output:o,toolCallId:t,toolName:n.name})),u=elapsed()}catch(e){return await r.executed({durationMs:elapsed(),error:e,type:`error`}),r.failedWith(e),c?failedFromError(e,n.name,`tool output could not be serialized`):isConnectionAuthorizationFailedError(e)||e instanceof ToolSessionSandboxUnsupportedError?failed(toErrorMessage(e)):failedFromError(e,n.name,`tool execution failed`)}if(isAuthorizationSignal(o))return await r.executed({durationMs:u,output:modelFacingAuthorizationOutput(o),type:`result`}),{connections:o.challenges.map(e=>e.name),status:`authorization-required`};await r.executed({durationMs:u,output:s,type:`result`});try{return{modelOutput:await toolCallModelOutput(n,s,t),output:s,status:`completed`}}catch(e){return r.failedWith(e),failedFromError(e,n.name,`tool output could not be serialized`)}}function decideApproval(e){if(e===!0||e===`user-approval`)return{kind:`user-approval`};if(e===`denied`)return{kind:`denied`};if(typeof e==`object`&&e){if(e.type===`user-approval`)return{kind:`user-approval`};if(e.type===`denied`)return{kind:`denied`,reason:e.reason}}return{kind:`run`}}async function lastIterated(e){let t;for await(let n of e)t=n;return t}function denied(e){return e===void 0?{status:`denied`}:{reason:e,status:`denied`}}function failed(e){return{message:e,status:`failed`}}function failedFromError(e,t,n){let r=context.with(trace.deleteSpan(context.active()),()=>logError(log,`invokeTool ${n}`,e,{toolName:t}));return{errorId:r,message:`Tool "${t}" failed: ${n}. The error is logged with id ${r}.`,status:`failed`}}export{invokeTool};
+import{createLogger,logError}from"#internal/logging.js";import{compiledToolOwner,isInvocableCompiledTool}from"#channel/tool-eligibility.js";import{isAnonymousPrincipal}from"#channel/principal-identity.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AuthKey,InitiatorAuthKey,SandboxKey,SessionIdKey,SessionKey}from"#context/keys.js";import{toErrorMessage}from"#shared/errors.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{ensureSandboxAccess}from"#execution/sandbox/ensure.js";import{isConnectionAuthorizationFailedError}from"#connections/errors.js";import{AuthorizationHookKey,CallbackBaseUrlKey,isAuthorizationSignal,modelFacingAuthorizationOutput}from"#harness/authorization.js";import{checkToolCallInput,toolCallModelOutput}from"#harness/tool-call-io.js";import{context,trace}from"#compiled/@opentelemetry/api/index.js";import{decideApproval}from"#harness/tools.js";import{deriveToolSessionId,validateToolSessionKey}from"#execution/tool-session/id.js";import{normalizeToolJsonOutput}from"#harness/tool-model-output.js";import{isAsyncIterable}from"#shared/async-iterable.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{createUlid}from"#shared/ulid.js";import{withInvokeToolSpan}from"#tracing/eve/invoke-tool-span.js";const log=createLogger(`invoke-tool`);function ineligibility(e,t){if(!isInvocableCompiledTool(e,t))return compiledToolOwner(e,t).kind===`framework`?`it is a framework tool, which needs a conversation`:t.behavior?.handling===void 0?`it has no server-side execute`:`the harness or the model provider runs it, not its execute`}async function invokeTool(e,t,n,r){let i=`call_${createUlid()}`,a=`call_session_${createUlid()}`;return await withInvokeToolSpan({agentName:e.agentName,auth:r.auth,callId:i,input:n,origin:e.origin,sessionId:a,toolName:t},async o=>{let s=e.manifest.tools.find(e=>e.name===t),c=e.tools.get(t);if(s===void 0||c===void 0)return failed(`The agent has no tool named "${t}".`);let l=ineligibility(e.manifest,s)??(c.execute===void 0?`it has no server-side execute`:void 0);if(l!==void 0)return failed(`Tool "${t}" cannot be invoked outside a conversation: ${l}.`);let u=r.key,d=u===void 0?void 0:validateToolSessionKey(u);if(d!==void 0)return failed(d,`INVALID_INPUT`);if(u!==void 0&&isAnonymousPrincipal(r.auth))return rejected(`Tool sessions need an authenticated caller: an anonymous caller cannot send a key. Call without a key for a one-off session.`);let f=u===void 0?a:deriveToolSessionId({current:r.auth,forwardedBy:r.forwardedBy,key:u});return await runInvocation({callId:i,definition:c,input:n,name:t,observer:o,options:r,runtime:e,sessionId:f})})}async function runInvocation(e){let{callId:t,definition:n,name:r,observer:i,options:a,runtime:o,sessionId:s}=e,c=await checkToolCallInput(n,e.input,t);if(c.kind===`threw`)return i.failedWith(c.error),failedFromError(c.error,r,`input validation failed`);if(c.kind===`invalid`)return failed(c.message,`INVALID_INPUT`);let l=a.key===void 0?await callSandbox(o,s):await keyedSandbox(o,s),u=createCallContext({auth:a.auth,initiator:a.initiator??a.auth,callId:t,callbackBaseUrl:o.callbackBaseUrl,sessionId:s});u.setVirtualContext(SandboxKey,l.access),o.bundle!==void 0&&u.setVirtualContext(BundleKey,o.bundle);try{return await contextStorage.run(u,()=>runCall({callId:t,definition:n,input:c.value,observer:i,signal:a.signal}))}finally{await l.release().catch(e=>{logError(log,`failed to release a call's sandbox`,e,{sessionId:s,toolName:r})})}}async function keyedSandbox(e,t){let n=await ensureSandboxAccess({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:e.nodeId,ownsSandbox:!1,registry:e.sandboxRegistry,sessionId:t,shutdownTracking:`call`,state:null});return{access:n,release:()=>n.release()}}async function callSandbox(e,t){let n=await ensureSandboxAccess({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:e.nodeId,ownsSandbox:!0,registry:e.sandboxRegistry,sessionId:t,state:null}),r=!1;return{access:{...n,get(){return r=!0,n.get()}},async release(){r&&await n.end(`completed`)}}}function createCallContext(e){let t=new ContextContainer;return t.set(AuthKey,e.auth),t.set(InitiatorAuthKey,e.initiator),t.set(SessionIdKey,e.sessionId),t.setVirtualContext(SessionKey,{auth:{current:e.auth,initiator:e.initiator},sessionId:e.sessionId,turn:{id:e.callId,sequence:0}}),t.set(CallbackBaseUrlKey,e.callbackBaseUrl.replace(/\/$/,``)),t.setVirtualContext(AuthorizationHookKey,`invoke-tool:${e.callId}`),t}async function runCall(e){let{callId:t,definition:n,observer:r}=e,i=e.signal??new AbortController().signal,a={denied:!1};if(n.approval!==void 0){try{a=await decideApproval(n,{abortSignal:i,callId:t,input:e.input})}catch(e){return r.failedWith(e),failedFromError(e,n.name,`approval policy failed`)}if(a.denied)return{outcome:`rejected`,reason:a.reason??`The tool "${n.name}" was denied by its approval policy.`,cause:{policy:`approval`}};if(a.awaitsPerson===!0)return{outcome:`rejected`,reason:`approval-required`}}let o={abortSignal:i,messages:[],toolCallId:t};await r.executing(e.input);let s,c,l=!1,u=performance.now(),elapsed=()=>performance.now()-u,d;try{s=await n.execute(e.input,o),isAsyncIterable(s)&&(s=await lastIterated(s)),l=!0,isAuthorizationSignal(s)||(c=normalizeToolJsonOutput({boundary:`execute`,output:s,toolCallId:t,toolName:n.name})),d=elapsed()}catch(e){return await r.executed({durationMs:elapsed(),error:e,type:`error`}),r.failedWith(e),l?failedFromError(e,n.name,`tool output could not be serialized`):isConnectionAuthorizationFailedError(e)||e instanceof ToolSessionSandboxUnsupportedError?failed(toErrorMessage(e)):failedFromError(e,n.name,`tool execution failed`)}if(isAuthorizationSignal(s))return await r.executed({durationMs:d,output:modelFacingAuthorizationOutput(s),type:`result`}),{connections:s.challenges.map(e=>e.name),outcome:`rejected`,reason:`sign-in-required`};await r.executed({durationMs:d,output:c,type:`result`});try{return{modelOutput:await toolCallModelOutput(n,c,t),output:c,outcome:`completed`}}catch(e){return r.failedWith(e),failedFromError(e,n.name,`tool output could not be serialized`)}}async function lastIterated(e){let t;for await(let n of e)t=n;return t}function rejected(e){return{reason:e,outcome:`rejected`}}function failed(e,t=`TOOL_FAILED`){return{outcome:`failed`,error:{code:t,message:e}}}function failedFromError(e,t,n){let r=context.with(trace.deleteSpan(context.active()),()=>logError(log,`invokeTool ${n}`,e,{toolName:t}));return{outcome:`failed`,error:{code:`TOOL_FAILED`,id:r,message:`Tool "${t}" failed: ${n}. The error is logged with id ${r}.`}}}export{invokeTool};

package/dist/src/execution/legacy-session/prepare-step.js

@@ -1 +1 @@
-import{readLegacyTurnInput}from"./input.js";import{importConversation,readLegacySnapshot}from"./snapshot.js";import{isObject}from"#shared/guards.js";import{SESSION_INBOX_CONTEXT_KEY}from"#execution/session-inbox/address.js";import{getWorld,resolveRunEncryptionKey}from"#internal/workflow/runtime.js";import{hydrateWorkflowArguments}from"#compiled/@workflow/core/serialization.js";import{DEFAULT_SESSION_TIMEOUT_MS}from"#execution/session/timeout.js";async function prepareLegacySessionStep(e){"use step";let t=readLegacyTurnInput(e),n=readLegacySnapshot(t.sessionState),{history:r,sessionState:i}=importConversation(n),a=await getWorld(),o=await a.runs.get(i.sessionId),s=await hydrateWorkflowArguments(o.input,o.runId,await resolveRunEncryptionKey(a,o)),c=Array.isArray(s)&&isObject(s[0])?s[0]:void 0;if(c===void 0)throw Error(`Cannot read the original session timeout.`);let l=c.sessionTimeoutMs;if(l!==void 0&&l!==!1&&(typeof l!=`number`||!Number.isFinite(l)||l<0))throw Error(`Invalid original session timeout.`);let u=l??DEFAULT_SESSION_TIMEOUT_MS,d={...t.serializedContext,"eve.sessionId":i.sessionId,[SESSION_INBOX_CONTEXT_KEY]:{sessionId:i.sessionId}};delete d[`eve.sessionCallback`];let f=d[`eve.channel`];return isObject(f)&&f.kind===`subagent`&&isObject(f.state)&&(d[`eve.channel`]={...f,state:{...f.state,parentContinuationToken:``}}),{input:{...t,retention:t.retention??c.retention},history:r,originalSession:n,sessionState:i,serializedContext:d,sessionTimeoutMs:u,deploymentId:process.env.VERCEL_DEPLOYMENT_ID?.trim()||await a.getDeploymentId()}}export{prepareLegacySessionStep};
+import{readLegacyTurnInput}from"./input.js";import{importConversation,readLegacySnapshot}from"./snapshot.js";import{isObject}from"#shared/guards.js";import{SESSION_INBOX_CONTEXT_KEY}from"#execution/session-inbox/address.js";import{getWorld,resolveRunEncryptionKey}from"#internal/workflow/runtime.js";import{hydrateWorkflowArguments}from"#compiled/@workflow/core/serialization.js";import{DEFAULT_SESSION_TIMEOUT_MS}from"#execution/session/timeout.js";const RETIRED_CONTEXT_KEYS=[`eve.activityObserver`,`eve.activityPendingBlockers`,`eve.activityRootTurnId`,`eve.connectionSearchResults`,`eve.internal.backgroundToolExecution`,`eve.mode`,`eve.pendingSkillAnnouncement`,`eve.pendingTurnSleepDuration`,`eve.subagentDepth`,`eve.tasksEnabled`,`eve.todo`,`eve.turnTaskDelivery`,`eve.turnTaskState`];async function prepareLegacySessionStep(e){"use step";let t=readLegacyTurnInput(e),n=readLegacySnapshot(t.sessionState),{history:r,sessionState:i}=importConversation(n),a=await getWorld(),o=await a.runs.get(i.sessionId),s=await hydrateWorkflowArguments(o.input,o.runId,await resolveRunEncryptionKey(a,o)),c=Array.isArray(s)&&isObject(s[0])?s[0]:void 0;if(c===void 0)throw Error(`Cannot read the original session timeout.`);let l=c.sessionTimeoutMs;if(l!==void 0&&l!==!1&&(typeof l!=`number`||!Number.isFinite(l)||l<0))throw Error(`Invalid original session timeout.`);let u=l??DEFAULT_SESSION_TIMEOUT_MS,d={...t.serializedContext,"eve.sessionId":i.sessionId,[SESSION_INBOX_CONTEXT_KEY]:{sessionId:i.sessionId}};delete d[`eve.sessionCallback`];for(let e of RETIRED_CONTEXT_KEYS)delete d[e];let f=d[`eve.channel`];return isObject(f)&&f.kind===`subagent`&&isObject(f.state)&&(d[`eve.channel`]={...f,state:{...f.state,parentContinuationToken:``}}),{input:{...t,retention:t.retention??c.retention},history:r,originalSession:n,sessionState:i,serializedContext:d,sessionTimeoutMs:u,deploymentId:process.env.VERCEL_DEPLOYMENT_ID?.trim()||await a.getDeploymentId()}}export{prepareLegacySessionStep};

package/dist/src/execution/legacy-session/snapshot.d.ts

@@ -14,6 +14,9 @@ export declare function importConversation(session: LegacySession): {
     readonly history: HarnessModelMessage[];
     readonly sessionState: DurableSessionState;
 };
-/** The turn position a legacy driver persisted, as the projection that replaces it. */
+/**
+ * The turn position a legacy driver persisted, as the projection that replaces it, with what it
+ * counted the session spent as the view's usage, so the session's limits keep counting.
+ */
 export declare function importProjection(session: LegacySession): SessionProjection;
 export declare function normalizeHistory(messages: readonly ModelMessage[]): HarnessModelMessage[];

package/dist/src/execution/legacy-session/snapshot.js

@@ -1 +1 @@
-import{initialSessionProjection}from"#protocol/session-projection.js";import{isObject}from"#shared/guards.js";import{isUserMessageKind,validateHarnessModelMessages}from"#harness/messages.js";import{SESSION_PROJECTION_STATE_KEY}from"#harness/session-machine/view.js";import{DURABLE_SESSION_VERSION}from"#execution/durable-session-store.js";const PRESERVED_FRAMEWORK_STATE=new Set([`eve.harness.turnUsage`,`eve.harness.reportedSessionUsage`,`eve.harness.sessionRuntimeTokenLimit`]);function readLegacySnapshot(e){let t=e.snapshot;if(!isObject(t)||t.version!==1||!isObject(t.session)||t.session.sessionId!==e.sessionId||!Array.isArray(t.session.history))throw Error(`Unsupported legacy session snapshot.`);return t.session}function importConversation(e){let{history:t,...n}=e,r=Object.fromEntries(Object.entries(e.state??{}).filter(([e])=>!e.startsWith(`eve.`)||PRESERVED_FRAMEWORK_STATE.has(e)));return{history:normalizeHistory(t),sessionState:{version:DURABLE_SESSION_VERSION,sessionId:e.sessionId,continuationToken:e.continuationToken,hasProxyInputRequests:!1,snapshot:{session:{...n,state:{...r,[SESSION_PROJECTION_STATE_KEY]:importProjection(e)}}}}}}function importProjection(e){let t=e.state?.[`eve.harness.emission`],n=initialSessionProjection();if(!isObject(t)||typeof t.sequence!=`number`)return n;let r=t.sessionStarted===!0?{started:!0}:{},i=typeof t.turnId==`string`?t.turnId:``;if(i===``)return{...n,...r,nextSequence:t.sequence};let a=typeof t.stepIndex==`number`?t.stepIndex:0;return{...n,...r,activeTurnId:i,nextSequence:t.sequence+1,turns:{[i]:{turnId:i,sequence:t.sequence,status:`active`,...a>0&&{stepIndex:a-1}}}}}function normalizeHistory(e){let t=[],n=new Map,settle=()=>{n.size!==0&&(t.push({role:`tool`,content:[...n].map(([e,t])=>({type:`tool-result`,toolCallId:e,toolName:t,output:{type:`error-text`,value:`Interrupted by the session upgrade. Start this work again if it is still needed.`}}))}),n.clear())};for(let r of e){let e=r;if(e.role===`assistant`&&Array.isArray(e.content))e={...e,content:e.content.filter(e=>e.type!==`tool-approval-request`)};else if(e.role===`tool`&&(e={...e,content:e.content.filter(e=>e.type!==`tool-approval-response`)},e.content.length===0))continue;if(e.role!==`tool`&&settle(),e.role===`assistant`&&Array.isArray(e.content))for(let t of e.content)t.type===`tool-call`&&n.set(t.toolCallId,t.toolName);if(e.role===`tool`)for(let t of e.content)t.type===`tool-result`&&n.delete(t.toolCallId);let i=e.kind;t.push(e.role===`user`&&!isUserMessageKind(i)?{...e,kind:`user`}:e)}return settle(),validateHarnessModelMessages(t)}export{importConversation,importProjection,normalizeHistory,readLegacySnapshot};
+import{isObject}from"#shared/guards.js";import{SESSION_PROJECTION_STATE_KEY}from"#harness/session-machine/view.js";import{DURABLE_SESSION_VERSION}from"#execution/durable-session-store.js";import{isUserMessageKind,validateHarnessModelMessages}from"#harness/messages.js";import{usageOf}from"#harness/facts.js";import{withModelUsage}from"#harness/session-usage.js";import{initialSessionProjection}from"#protocol/session-projection.js";const PRESERVED_FRAMEWORK_STATE=new Set([`eve.harness.sessionRuntimeTokenLimit`]),LEGACY_USAGE_KEY=`eve.harness.turnUsage`,REPORTED_USAGE_KEY=`eve.harness.reportedSessionUsage`;function readLegacySnapshot(e){let t=e.snapshot;if(!isObject(t)||t.version!==1||!isObject(t.session)||t.session.sessionId!==e.sessionId||!Array.isArray(t.session.history))throw Error(`Unsupported legacy session snapshot.`);return t.session}function importConversation(e){let{history:t,...n}=e,r=Object.fromEntries(Object.entries(e.state??{}).filter(([e])=>!e.startsWith(`eve.`)||PRESERVED_FRAMEWORK_STATE.has(e))),i=legacyUsage(e.state?.[REPORTED_USAGE_KEY]);return i!==void 0&&(r[REPORTED_USAGE_KEY]=i),{history:normalizeHistory(t),sessionState:{version:DURABLE_SESSION_VERSION,sessionId:e.sessionId,continuationToken:e.continuationToken,hasProxyInputRequests:!1,snapshot:{session:{...n,state:{...r,[SESSION_PROJECTION_STATE_KEY]:importProjection(e)}}}}}}function importProjection(e){let t=e.state?.[`eve.harness.emission`],n=initialSessionProjection(),r=legacyUsage(isObject(e.state?.[LEGACY_USAGE_KEY])?e.state[LEGACY_USAGE_KEY].session:void 0),i=r===void 0?n:{...n,view:withModelUsage(n.view,r)};if(!isObject(t)||typeof t.sequence!=`number`)return i;let{view:a}=i,o=t.sessionStarted===!0?`open`:`new`,s=typeof t.turnId==`string`?t.turnId:``;if(s===``)return{...i,view:{...a,session:{status:o,turnCount:t.sequence}}};let c=typeof t.stepIndex==`number`?t.stepIndex:0,l={cause:{hook:`legacy`},follows:null,introducedAt:0,startedAt:new Date(0).toISOString(),status:`running`,turnId:s,...c>0&&{runs:c}};return{...i,view:{...a,session:{latestTurnId:s,status:o,turnCount:t.sequence+1},turns:{[s]:l}}}}function legacyUsage(e){if(!isObject(e))return;let count=t=>typeof e[t]==`number`?e[t]:0;return usageOf({cacheReadTokens:count(`cacheReadTokens`),cacheWriteTokens:count(`cacheWriteTokens`),costUsd:e.sawCost===!0&&typeof e.costUsd==`number`?e.costUsd:void 0,inputTokens:count(`inputTokens`),outputTokens:count(`outputTokens`)})}function normalizeHistory(e){let t=[],n=new Map,settle=()=>{n.size!==0&&(t.push({role:`tool`,content:[...n].map(([e,t])=>({type:`tool-result`,toolCallId:e,toolName:t,output:{type:`error-text`,value:`Interrupted by the session upgrade. Start this work again if it is still needed.`}}))}),n.clear())};for(let r of e){let e=r;if(e.role===`assistant`&&Array.isArray(e.content))e={...e,content:e.content.filter(e=>e.type!==`tool-approval-request`)};else if(e.role===`tool`&&(e={...e,content:e.content.filter(e=>e.type!==`tool-approval-response`)},e.content.length===0))continue;if(e.role!==`tool`&&settle(),e.role===`assistant`&&Array.isArray(e.content))for(let t of e.content)t.type===`tool-call`&&n.set(t.toolCallId,t.toolName);if(e.role===`tool`)for(let t of e.content)t.type===`tool-result`&&n.delete(t.toolCallId);let i=e.kind;t.push(e.role===`user`&&!isUserMessageKind(i)?{...e,kind:`user`}:e)}return settle(),validateHarnessModelMessages(t)}export{importConversation,importProjection,normalizeHistory,readLegacySnapshot};

package/dist/src/execution/model-call-batching.d.ts

@@ -1,12 +1,12 @@
-import type { HarnessSession, StepInput, StepResult } from "#harness/types.js";
+import type { HarnessSession, HarnessStepInput, StepResult } from "#harness/types.js";
 export declare function runModelCallBatch(input: {
     readonly steeringSignal?: AbortSignal;
-    readonly initialInput: StepInput | undefined;
+    readonly initialInput: HarnessStepInput | undefined;
     readonly initialSession: HarnessSession;
     readonly modelCallsPerStep: number;
     readonly runStep: (input: {
         readonly firstCall: boolean;
         readonly session: HarnessSession;
-        readonly stepInput: StepInput | undefined;
+        readonly stepInput: HarnessStepInput | undefined;
     }) => Promise<StepResult>;
 }): Promise<StepResult>;

package/dist/src/execution/model-call-batching.js

@@ -1 +1 @@
-import{storedProjection}from"#harness/session-machine/view.js";import{derivePendingState}from"#execution/session/pending-turn-state.js";async function runModelCallBatch(e){let t=e.initialSession,n=e.initialInput,r=0;for(;;){let i=await e.runStep({firstCall:r===0,session:t,stepInput:n});if(r++,e.steeringSignal?.aborted===!0||i.steered===!0||!shouldRunAnotherModelCall({completedModelCalls:r,modelCallsPerStep:e.modelCallsPerStep,result:i}))return i;t=i.session,n=void 0}}function shouldRunAnotherModelCall(e){if(e.completedModelCalls>=e.modelCallsPerStep||typeof e.result.next!=`function`)return!1;let t=derivePendingState(e.result.session,storedProjection(e.result.session.state));return!t.hasPendingAuthorization&&!t.hasPendingInputBatch&&(t.pendingCoordinationCallIds?.length??0)===0}export{runModelCallBatch};
+import{storedProjection}from"#harness/session-machine/view.js";import{waitsOnAnything}from"#execution/session/pending-turn-state.js";async function runModelCallBatch(e){let t=e.initialSession,n=e.initialInput,r=0;for(;;){let i=await e.runStep({firstCall:r===0,session:t,stepInput:n});if(r++,e.steeringSignal?.aborted===!0||i.steered===!0||!shouldRunAnotherModelCall({completedModelCalls:r,modelCallsPerStep:e.modelCallsPerStep,result:i}))return i;t=i.session,n=void 0}}function shouldRunAnotherModelCall(e){return e.completedModelCalls>=e.modelCallsPerStep||typeof e.result.next!=`function`?!1:!waitsOnAnything(e.result.session,storedProjection(e.result.session.state))}export{runModelCallBatch};

package/dist/src/execution/ndjson-stream.d.ts

@@ -9,7 +9,7 @@
  * Cancellation is forwarded to the source. When the returned stream is
  * cancelled — e.g. an SSE client disconnects and the server cancels the
  * response body — the underlying reader is cancelled too. This matters for
- * runs that never reach EOF: a parked (`session.waiting`) durable run keeps
+ * runs that never reach EOF: a parked durable run keeps
  * its event stream open indefinitely, and the world-local streamer runs a
  * filesystem poll until its reader is cancelled. Without forwarding the
  * cancel, a pending `reader.read()` would block forever and that poll would

package/dist/src/execution/node-step.d.ts

@@ -1,11 +1,10 @@
 import type { Runtime, SessionCapabilities } from "#channel/types.js";
 import type { ExecutionInstrumentation } from "#instrumentation/runtime.js";
 import type { HandleEventFn, HarnessToolMap, StepFn } from "#harness/types.js";
-import type { RuntimeIdentity } from "#protocol/message.js";
+import type { RuntimeIdentity } from "#protocol/session-events/families/session.js";
 import { type RuntimeModelResolutionScope } from "#runtime/agent/resolve-model.js";
 import type { RuntimeCompiledArtifactsSource } from "#runtime/compiled-artifacts-source.js";
 import type { ResolvedRuntimeAgentNode } from "#runtime/graph.js";
-import type { HistoryViewProjector, PreparedHistoryView } from "#shared/history-view.js";
 import type { ToolLoopHarnessConfig } from "#harness/types.js";
 /**
  * Factory that creates a {@link Runtime} for the given compiled
@@ -33,20 +32,15 @@ interface CreateExecutionNodeStepInput {
     readonly clearOnly?: boolean;
     /** Runs only a forced context compaction and returns to the parked session. */
     readonly compactOnly?: boolean;
+    readonly controlDelivery?: ToolLoopHarnessConfig["controlDelivery"];
     /**
      * Runtime constructor used by the subagent tool executor to start
      * delegated child runs on the same workflow runtime as the parent.
      */
     readonly createRuntime: CreateRuntime;
     readonly handleEvent?: HandleEventFn;
-    readonly prepareApprovalTurn?: (event: {
-        readonly sequence: number;
-        readonly turnId: string;
-    }) => Promise<void>;
     readonly signInCompletions?: ToolLoopHarnessConfig["signInCompletions"];
     readonly typedAnswers?: ToolLoopHarnessConfig["typedAnswers"];
-    readonly historyProjector?: HistoryViewProjector;
-    readonly historyView?: PreparedHistoryView;
     readonly instrumentation: ExecutionInstrumentation | undefined;
     readonly titleAttributeWrite?: ToolLoopHarnessConfig["titleAttributeWrite"];
     readonly modelResolutionScope: RuntimeModelResolutionScope;

package/dist/src/execution/node-step.js

@@ -1 +1 @@
-import{createLogger}from"#internal/logging.js";import{resolveInstalledPackageInfo}from"#internal/application/package.js";import{UNSPECIFIED_INPUT_SCHEMA}from"#tools/schema.js";import{createToolExecuteWithAuth}from"#execution/tool-auth.js";import{resolveRuntimeModelReference}from"#runtime/agent/resolve-model.js";import{createPreparedWorkflowToolHarnessDefinition,createWorkflowToolHarnessDefinition}from"#execution/tools/workflow/harness-definition.js";import{isFrameworkTool}from"#tools/provided/framework-tool.js";import{workflowIdForHandling}from"#runtime/subagents/workflow-reference.js";import{dispatchDynamicModelEvent}from"#context/dynamic-model-lifecycle.js";import{preparePersistedStepDynamicToolMetadata}from"#context/dynamic-tool-lifecycle.js";import{createToolLoopHarness}from"#harness/tool-loop.js";import{findRegisteredRuntimeTool}from"#runtime/tools/registry.js";import{WEB_SEARCH_TOOL_NAME,resolveWebSearchActivityLabel}from"#harness/provider-tool-schemas.js";const log=createLogger(`execution.node-step`);function createExecutionNodeStep(e){let t=createRuntimeModelResolver(e.modelResolutionScope),n=e.node.turnAgent.dynamicModel===void 0?void 0:createRuntimeDynamicModelEventDispatcher(e.modelResolutionScope,e.node.turnAgent.dynamicModel,e.abortSignal),r=createNodeHarnessTools({node:e.node}),i=e.instrumentation,a=i?.prepareExecution(),o=createToolLoopHarness({steeringSignal:e.steeringSignal,abortSignal:e.abortSignal,capabilities:e.capabilities,clearOnly:e.clearOnly,compactOnly:e.compactOnly,handleEvent:e.handleEvent,historyProjector:e.historyProjector,historyView:e.historyView,instrumentation:a,prepareApprovalTurn:e.prepareApprovalTurn,signInCompletions:e.signInCompletions,typedAnswers:e.typedAnswers,resolveStepDynamicTools:t=>preparePersistedStepDynamicToolMetadata({...t,resolvers:e.node.agent.dynamicToolResolvers??[]}),dispatchDynamicModelEvent:n,resolveModel:t,runtimeIdentity:buildRuntimeIdentity(e.node),sessionUsageLimit:e.sessionUsageLimit,tools:r,titleAttributeWrite:e.titleAttributeWrite});return i===void 0?o:async(e,t)=>{try{return await o(e,t)}finally{await i.flush()}}}function buildRuntimeIdentity(e){let t=resolveInstalledPackageInfo(),n={agentId:e.turnAgent.id,agentName:e.agent.config?.name,eveVersion:t.version},r=process.env.VERCEL_GIT_COMMIT_SHA?.trim(),i=process.env.VERCEL_GIT_COMMIT_REF?.trim(),a=process.env.VERCEL_DEPLOYMENT_CREATED_AT?.trim();return r||i||a?{...n,build:{deployedAt:a||void 0,gitBranch:i||void 0,gitSha:r||void 0}}:n}function createRuntimeModelResolver(e){return t=>resolveRuntimeModelReference(t,e)}function createRuntimeDynamicModelEventDispatcher(e,t,n){return r=>dispatchDynamicModelEvent({abortSignal:n,ctx:r.ctx,dynamicModel:t,event:r.event,messages:r.messages,scope:e})}function createNodeHarnessTools(e){let t=new Map;for(let n of e.node.turnAgent.tools){let r=resolveHarnessToolDefinition({node:e.node,tool:n});r!==null&&t.set(n.name,r)}return t}function resolveHarnessToolDefinition(e){let t=findRegisteredRuntimeTool(e.node.toolRegistry,e.tool.name),n=workflowIdForHandling(e.tool.behavior?.handling);return n===void 0?t===null?(log.warn(`declared tool is not registered — omitting from toolset`,{toolName:e.tool.name,nodeId:e.node.nodeId}),null):createRegisteredHarnessToolDefinition({behavior:e.tool.behavior,definition:t.definition,rootOnly:e.tool.rootOnly}):t===null?createPreparedWorkflowToolHarnessDefinition(e.tool):createWorkflowToolHarnessDefinition({executeInput:t.definition.executeInput,definition:createRegisteredHarnessToolDefinition({behavior:e.tool.behavior,definition:t.definition,rootOnly:e.tool.rootOnly}),workflowId:n})}function createRegisteredHarnessToolDefinition(e){let t=e.definition,n=t.execute;return{availableInSubagents:t.availableInSubagents,label:t.label??(t.owner.kind===`framework`&&t.name===WEB_SEARCH_TOOL_NAME?{start:resolveWebSearchActivityLabel}:void 0),approvalKey:t.approvalKey,behavior:e.behavior,deferred:t.deferred,description:t.description,endsTurn:t.endsTurn,executeInput:t.executeInput,execute:resolveAuthoredExecute({rawExecute:n,scope:t.name}),frameworkTool:isFrameworkTool(t)||t.owner.kind===`framework`,inputSchema:t.inputSchema??UNSPECIFIED_INPUT_SCHEMA,name:t.name,approval:t.approval,outputSchema:t.outputSchema,rootOnly:e.rootOnly,toModelOutput:t.toModelOutput}}function resolveAuthoredExecute(e){let{rawExecute:t,scope:n}=e;return t===void 0?void 0:createToolExecuteWithAuth({execute:t,scope:n})}export{buildRuntimeIdentity,createExecutionNodeStep,createNodeHarnessTools};
+import{createLogger}from"#internal/logging.js";import{resolveInstalledPackageInfo}from"#internal/application/package.js";import{UNSPECIFIED_INPUT_SCHEMA}from"#tools/schema.js";import{resolveRuntimeModelReference}from"#runtime/agent/resolve-model.js";import{isFrameworkTool}from"#tools/provided/framework-tool.js";import{createToolLoopHarness}from"#harness/tool-loop.js";import{workflowIdForHandling}from"#runtime/subagents/workflow-reference.js";import{findRegisteredRuntimeTool}from"#runtime/tools/registry.js";import{createToolExecuteWithAuth}from"#execution/tool-auth.js";import{createPreparedWorkflowToolHarnessDefinition,createWorkflowToolHarnessDefinition}from"#execution/tools/workflow/harness-definition.js";import{WEB_SEARCH_TOOL_NAME,resolveWebSearchActivityLabel}from"#harness/provider-tool-schemas.js";const log=createLogger(`execution.node-step`);function createExecutionNodeStep(e){let t=createRuntimeModelResolver(e.modelResolutionScope),n=createNodeHarnessTools({node:e.node}),r=e.instrumentation,i=r?.prepareExecution(),a=createToolLoopHarness({steeringSignal:e.steeringSignal,abortSignal:e.abortSignal,capabilities:e.capabilities,clearOnly:e.clearOnly,compactOnly:e.compactOnly,controlDelivery:e.controlDelivery,handleEvent:e.handleEvent,instrumentation:i,signInCompletions:e.signInCompletions,typedAnswers:e.typedAnswers,resolveModel:t,runtimeIdentity:buildRuntimeIdentity(e.node),sessionUsageLimit:e.sessionUsageLimit,tools:n,titleAttributeWrite:e.titleAttributeWrite});return r===void 0?a:async(e,t)=>{try{return await a(e,t)}finally{await r.flush()}}}function buildRuntimeIdentity(e){let t=resolveInstalledPackageInfo(),n={agentId:e.turnAgent.id,agentName:e.agent.config?.name,eveVersion:t.version},r=process.env.VERCEL_GIT_COMMIT_SHA?.trim(),i=process.env.VERCEL_GIT_COMMIT_REF?.trim(),a=process.env.VERCEL_DEPLOYMENT_CREATED_AT?.trim();return r||i||a?{...n,build:{deployedAt:a||void 0,gitBranch:i||void 0,gitSha:r||void 0}}:n}function createRuntimeModelResolver(e){return t=>resolveRuntimeModelReference(t,e)}function createNodeHarnessTools(e){let t=new Map;for(let n of e.node.turnAgent.tools){let r=resolveHarnessToolDefinition({node:e.node,tool:n});r!==null&&t.set(n.name,r)}return t}function resolveHarnessToolDefinition(e){let t=findRegisteredRuntimeTool(e.node.toolRegistry,e.tool.name),n=workflowIdForHandling(e.tool.behavior?.handling);return n===void 0?t===null?(log.warn(`declared tool is not registered — omitting from toolset`,{toolName:e.tool.name,nodeId:e.node.nodeId}),null):createRegisteredHarnessToolDefinition({behavior:e.tool.behavior,definition:t.definition,rootOnly:e.tool.rootOnly}):t===null?createPreparedWorkflowToolHarnessDefinition(e.tool):createWorkflowToolHarnessDefinition({executeInput:t.definition.executeInput,definition:createRegisteredHarnessToolDefinition({behavior:e.tool.behavior,definition:t.definition,rootOnly:e.tool.rootOnly}),workflowId:n})}function createRegisteredHarnessToolDefinition(e){let t=e.definition,n=t.execute;return{availableInSubagents:t.availableInSubagents,label:t.label??(t.owner.kind===`framework`&&t.name===WEB_SEARCH_TOOL_NAME?{start:resolveWebSearchActivityLabel}:void 0),behavior:e.behavior,deferred:t.deferred,description:t.description,endsTurn:t.endsTurn,executeInput:t.executeInput,execute:resolveAuthoredExecute({rawExecute:n,scope:t.name}),frameworkTool:isFrameworkTool(t)||t.owner.kind===`framework`,inputSchema:t.inputSchema??UNSPECIFIED_INPUT_SCHEMA,name:t.name,approval:t.approval,outputSchema:t.outputSchema,rootOnly:e.rootOnly,toModelOutput:t.toModelOutput}}function resolveAuthoredExecute(e){let{rawExecute:t,scope:n}=e;return t===void 0?void 0:createToolExecuteWithAuth({execute:t,scope:n})}export{buildRuntimeIdentity,createExecutionNodeStep,createNodeHarnessTools};

package/dist/src/execution/proxied-deliver-step.d.ts

@@ -14,18 +14,23 @@ export type RoutedDeliverResult = {
 };
 /**
  * Splits an envelope and forwards descendant input to the child that asked for
- * it. This session relayed each forwarded request's `input.requested`, so it
- * also relays their `input.resolved` once the answers are on their way down.
+ * it. This session relayed each forwarded request's `interaction.opened`, so it
+ * also relays their `interaction.settled` once the answers are on their way down.
  */
 export declare function routeProxiedDeliverStep(input: SessionStepState & {
     readonly delivery: DeliverHookPayload;
 }): Promise<WithSessionStateDelta<RoutedDeliverResult>>;
+/**
+ * Names one delivery's answers to one child, stable across retries and within the key limit. A
+ * delivery that names no delivery ids has nothing stable to name its answers by, so it gets none.
+ */
+export declare function answersIdempotencyKey(delivery: DeliverHookPayload, childKey: string): Promise<string | undefined>;
 /**
  * Maps a delivery's channel-specific answers to the requests a held turn waits
  * on, so the turn can tell they answer it. Returns the mapped delivery, or
  * `undefined` when the channel maps none of them to one of `requestIds`.
  */
-export declare function mapHeldInputResponsesStep(input: SessionStepState & {
+export declare function mapHeldAnswersStep(input: SessionStepState & {
     readonly delivery: DeliverHookPayload;
     readonly requestIds: readonly string[];
 }): Promise<WithSessionStateDelta<{

package/dist/src/execution/proxied-deliver-step.js

@@ -1 +1 @@
-import{AuthKey,TurnDeliveryIdsKey}from"#context/keys.js";import"#protocol/message.js";import{BundleKey,ChannelKey}from"#runtime/sessions/runtime-context-keys.js";import{resolveRemoteAgentStreamHeaders,respondToRemoteAgentSession}from"#execution/agent-sessions/remote.js";import{readDurableSession}from"#execution/durable-session-store.js";import{deserializeContext,serializeContext}from"#context/serialize.js";import{readHitlState}from"#harness/hitl/index.js";import{resumeSessionInbox}from"#execution/session-inbox/resume.js";import{buildAdapterContext}from"#channel/adapter-context.js";import{commitSessionStep,publishSessionEvents}from"#execution/publish-session-events.js";import{withSessionStateDelta}from"#execution/session/state-delta.js";import{receiveRelayedAnswer,routeAnswer}from"#harness/session-machine/transitions.js";import{coalesceDeliverPayloads}from"#execution/deliver-payloads.js";import{hasDelegatedSessionContext}from"#execution/delegated-session-context.js";import{setChannelContext}from"#execution/channel-context.js";import{routeDeliverPayload}from"#subagents/hitl-proxy.js";import{sendWorkflowAskAnswers,toToolInputResponseResponder}from"#execution/tools/workflow/answer.js";async function routeProxiedDeliverStep(e){"use step";return await withSessionStateDelta(e,routeProxiedDeliver)}async function routeProxiedDeliver(e){let t=readHitlState(readDurableSession(e.sessionState).state).relays,{delivery:n,serializedContext:r}=await deliverChannelInputResponses({...e,routable:e=>t.has(e.requestId)}),i=readDurableSession(e.sessionState),a=new Map,o=new Map,s,c=!hasDelegatedSessionContext(r)&&n.caller===void 0,l=new Set,u=[],d=[];for(let[e,t]of n.payloads.entries()){let r=routeDeliverPayload({allowRoute:e=>!l.has(e),payload:t,resolveMessage:c,state:i.state});s??=r.parentAction,r.forSelf!==void 0&&a.set(e,r.forSelf);for(let[t,i]of r.forChildren.entries()){if(i.workflowAsk!==void 0||i.message!==void 0)for(let{requestId:e}of i.payload.inputResponses)l.add(e);if(i.message!==void 0){let{sequence:t,turnId:r}=i.resolved.event;u.push(receiveRelayedAnswer({message:i.message,sequence:t,turnId:r}));for(let t of n.deliveryMetadata??[])t.payloadIndex===e&&d.push(t.deliveryId)}let a=JSON.stringify([i.childContinuationToken,i.childSessionInbox?.sessionId??``,i.remote?.sessionId??``,i.resolved.event.sequence,i.resolved.event.stepIndex,i.resolved.event.turnId,i.inputSource??null]),s=o.get(a)??{workflowAsk:i.workflowAsk,remote:i.remote,childContinuationToken:i.childContinuationToken,childSessionInbox:i.childSessionInbox,event:i.resolved.event,metadata:[],payloads:[],resolutions:new Map},c=s.payloads.length;s.payloads.push(i.payload);for(let e of i.resolved.resolutions)s.resolutions.has(e.requestId)||s.resolutions.set(e.requestId,e);if(r.forSelf===void 0&&t===0)for(let t of n.deliveryMetadata??[])t.payloadIndex===e&&s.metadata.push({...t,payloadIndex:c});o.set(a,s)}}let f={serializedContext:r,sessionState:e.sessionState,cancelled:!1};u.length>0&&(f=await publishSessionEvents({serializedContext:joinTurnDeliveryIds(f.serializedContext,d),sessionState:f.sessionState,sessionWritable:e.sessionWritable},u,{canCancelTurn:!0})),f.cancelled&&(s={kind:`cancel-turn`});let p=[];for(let e of f.cancelled?[]:o.values()){if(e.workflowAsk!==void 0){let t=coalesceDeliverPayloads(e.payloads).inputResponses??[];await sendWorkflowAskAnswers(e.workflowAsk,t,toToolInputResponseResponder(n.auth))}else{let t={...n,deliveryMetadata:e.metadata.length===0?void 0:e.metadata,payloads:e.payloads},i=e.remote;if(i!==void 0){let t=await deserializeContext(r),a=await resolveRemoteAgentStreamHeaders({bundle:t.require(BundleKey),name:i.name,resolverId:i.resolverId,url:i.url});await respondToRemoteAgentSession({remote:i,headers:a,auth:n.auth,responses:coalesceDeliverPayloads(e.payloads).inputResponses??[]})}else await resumeSessionInbox(e.childSessionInbox??e.childContinuationToken,t)}p.push({event:e.event,resolutions:[...e.resolutions.values()]})}let m=new Set([...o.values()].flatMap(e=>e.payloads.flatMap(e=>(e.inputResponses??[]).map(e=>e.requestId)))),h=new Set(p.flatMap(e=>e.resolutions.map(e=>e.requestId))),g=o.size>0&&a.size===0&&s===void 0&&[...t.keys()].some(e=>!h.has(e)&&!m.has(e)),_=await commitSessionStep({...f,sessionWritable:e.sessionWritable},e=>[routeAnswer(e,{children:p,holds:g})],{origin:`relayed`});if(s!==void 0)return{..._,...s};let v=[...a].sort(([e],[t])=>e-t),y=v.flatMap(([e],t)=>(n.deliveryMetadata??[]).filter(t=>t.payloadIndex===e).map(e=>({...e,payloadIndex:t}))),b=v.length===0?void 0:{...n,deliveryMetadata:y.length===0?void 0:y,payloads:v.map(([,e])=>e)};return{..._,kind:`continue`,remainder:b}}function joinTurnDeliveryIds(e,t){if(t.length===0)return e;let n=e[TurnDeliveryIdsKey.name]??[];return{...e,[TurnDeliveryIdsKey.name]:[...new Set([...n,...t])]}}async function mapHeldInputResponsesStep(e){"use step";return await withSessionStateDelta(e,async()=>{let t=new Set(e.requestIds),n=await deliverChannelInputResponses({...e,routable:e=>t.has(e.requestId)});return n.delivery===e.delivery?{delivery:void 0}:{delivery:n.delivery,serializedContext:n.serializedContext}})}async function deliverChannelInputResponses(e){let{routable:t}=e;if(!e.delivery.payloads.some(e=>e.inputResponses?.some(e=>!t(e))===!0))return e;let n=await deserializeContext(e.serializedContext),r=n.require(ChannelKey);if(r.deliver===void 0)return e;e.delivery.auth!==void 0&&n.set(AuthKey,e.delivery.auth??null);let i=r.state??{},a=!1,o=[];for(let s of e.delivery.payloads){if(s.inputResponses===void 0){o.push(s);continue}let e=[];for(let o of s.inputResponses){if(t(o)){e.push(o);continue}let c=buildAdapterContext({...r,state:structuredClone(i)},n),l=(await r.deliver({...s,inputResponses:[o],message:void 0},c))?.inputResponses?.filter(t)??[];if(l.length===0){e.push(o);continue}a=!0,i=c.state,e.push(...l)}o.push({...s,inputResponses:e})}if(!a)return e;let s=await deserializeContext(e.serializedContext);return setChannelContext(s,{...r,state:i}),{delivery:{...e.delivery,payloads:o},serializedContext:serializeContext(s)}}export{mapHeldInputResponsesStep,routeProxiedDeliverStep};
+import{activeTurn,interactionOwner,waiting}from"#protocol/session-projection/selectors.js";import{AuthKey,TurnDeliveryIdsKey}from"#context/keys.js";import{BundleKey,ChannelKey}from"#runtime/sessions/runtime-context-keys.js";import{storedProjection}from"#harness/session-machine/view.js";import{V26_INPUT_REMOTE_AGENT_PROTOCOL}from"#protocol/remote-agent-protocol.js";import{resolveRemoteAgentStreamHeaders,respondToRemoteAgentSession}from"#execution/agent-sessions/remote.js";import{deserializeContext,serializeContext}from"#context/serialize.js";import{readDurableSession}from"#execution/durable-session-store.js";import{readHitlState}from"#harness/hitl/index.js";import{selectDeliveryPayloads}from"#harness/messages.js";import{resumeSessionInbox}from"#execution/session-inbox/resume.js";import{buildAdapterContext}from"#channel/adapter-context.js";import{commitSessionStep,publishSessionEvents}from"#execution/publish-session-events.js";import"#execution/session/state-delta.js";import{withSessionStateDelta}from"#execution/session/step-state-delta.js";import{routeAnswer}from"#harness/session-machine/transitions.js";import{coalesceDeliverPayloads}from"#execution/deliver-payloads.js";import{fact}from"#harness/facts.js";import{userPartsOf}from"#harness/user-parts.js";import{principalOf}from"#execution/session/delivery-facts.js";import{hasDelegatedSessionContext}from"#execution/delegated-session-context.js";import{setChannelContext}from"#execution/channel-context.js";import{routeDeliverPayload}from"#subagents/hitl-proxy.js";import{protocolTwoAnswersSettledOnForward}from"#subagents/protocol-two-callback.js";import{sendWorkflowAskAnswers}from"#execution/tools/workflow/answer.js";async function routeProxiedDeliverStep(e){"use step";return await withSessionStateDelta(e,routeProxiedDeliver)}async function routeProxiedDeliver(e){let t=readHitlState(readDurableSession(e.sessionState).state).relays,{delivery:n,serializedContext:r}=await deliverChannelAnswers({...e,routable:e=>t.has(e.interactionId)}),i=readDurableSession(e.sessionState),a=new Map,o=new Map,s,c=!hasDelegatedSessionContext(r)&&n.caller===void 0,l=new Set,u=[],d=storedProjection(i.state).view,f=activeTurn(d),p=f===void 0?void 0:waiting(d,f.turnId),askedTurn=e=>{let t=interactionOwner(d,e).turnId;return t!==void 0&&d.turns[t]?.status===`running`?t:p?.on===`interaction`&&p.interactions.some(t=>t.interactionId===e.interactionId)?f?.turnId:void 0},m=[],h=[];for(let[e,t]of n.payloads.entries()){let r=routeDeliverPayload({allowRoute:e=>!l.has(e),payload:t,resolveMessage:c,state:i.state});s??=r.parentAction,r.forSelf!==void 0&&a.set(e,r.forSelf);let f=(n.deliveryMetadata??[]).filter(t=>t.payloadIndex===e),p=f[0]?.deliveryId;if(r.forChildren.length>0&&p!==void 0){let e=r.forChildren.find(e=>e.message!==void 0),i=r.forChildren.flatMap(e=>e.payload.answers).map(e=>d.interactions[e.interactionId]).find(e=>e!==void 0&&askedTurn(e)!==void 0),a=i===void 0?void 0:askedTurn(i);r.forSelf===void 0&&a!==void 0&&u.push(...f.map(e=>e.deliveryId));for(let t of f)m.push({consumed:r.forSelf===void 0&&a!==void 0?{parts:e?.message===void 0?[]:userPartsOf(e.message),turnId:a}:void 0,continues:r.forSelf!==void 0||void 0,deliveryId:t.deliveryId,principal:principalOf(n.auth),source:t.channelKind===void 0?void 0:{channel:t.channelKind}});for(let e of r.forChildren)for(let n of e.payload.answers){let e=(t.answers??[]).indexOf(n),r={};n.optionId!==void 0&&(r.optionId=n.optionId),n.text!==void 0&&(r.text=n.text),h.push({deliveryId:p,interactionId:n.interactionId,responseId:`response_${p}_forwarded_${e===-1?`typed_0`:String(e)}`,value:r})}}for(let[t,i]of r.forChildren.entries()){if(i.workflowAsk!==void 0||i.message!==void 0)for(let{interactionId:e}of i.payload.answers)l.add(e);let a=JSON.stringify([i.childContinuationToken,i.childSessionInbox?.sessionId??``,i.remote?.sessionId??``,i.inputSource??null,i.workflowAsk?.control??null]),s=o.get(a)??{workflowAsk:i.workflowAsk,remote:i.remote,childContinuationToken:i.childContinuationToken,childSessionInbox:i.childSessionInbox,metadata:[],payloads:[]},c=s.payloads.length;if(s.payloads.push(i.payload),r.forSelf===void 0&&t===0)for(let t of n.deliveryMetadata??[])t.payloadIndex===e&&s.metadata.push({...t,payloadIndex:c});o.set(a,s)}}let g={serializedContext:joinTurnDeliveryIds(r,u),sessionState:e.sessionState},_=!1,v=m.filter(e=>e.consumed!==void 0),y=v.length===0?g:await commitSessionStep({...g,sessionWritable:e.sessionWritable},e=>[routeAnswer(e,{deliveries:v,forwarded:[],decided:[]})],{origin:`own`,cancelTurn:()=>{_=!0}});if(_){let t=storedProjection(readDurableSession(y.sessionState).state).view,r=(n.deliveryMetadata??[]).filter(({deliveryId:e,payloadIndex:n})=>a.has(n)&&t.deliveries[e]?.status!==`settled`);if(r.length===0)return{...y,kind:`cancel-turn`};let i=await publishSessionEvents({...y,sessionWritable:e.sessionWritable},r.flatMap(({channelKind:e,deliveryId:r})=>[...t.deliveries[r]===void 0?[fact(`delivery.admitted`,{deliveryId:r,principal:principalOf(n.auth),source:e===void 0?void 0:{channel:e}})]:[],fact(`delivery.settled`,{deliveryId:r,outcome:`ignored`})]));return{kind:`cancel-turn`,serializedContext:i.serializedContext,sessionState:i.sessionState}}let b=[];for(let[e,t]of o)if(t.workflowAsk!==void 0){let e=coalesceDeliverPayloads(t.payloads).answers??[];b.push(...e.map(e=>({answer:e,outcome:`accepted`}))),await sendWorkflowAskAnswers(t.workflowAsk,e,principalOf(n.auth))}else{let i={...n,deliveryMetadata:t.metadata.length===0?void 0:t.metadata,payloads:t.payloads},a=t.remote;if(a!==void 0){let i=await deserializeContext(r),o=await resolveRemoteAgentStreamHeaders({bundle:i.require(BundleKey),name:a.name,dynamicBinding:a.dynamicBinding,resolverId:a.resolverId,url:a.url}),c=coalesceDeliverPayloads(t.payloads).answers??[];if(await respondToRemoteAgentSession({remote:a,headers:o,auth:n.auth,idempotencyKey:await answersIdempotencyKey(n,e),responses:c}),a.earlierProtocol===V26_INPUT_REMOTE_AGENT_PROTOCOL)for(let e of protocolTwoAnswersSettledOnForward({answers:c,decidedHere:s?.answer.interactionId,kindOf:e=>d.interactions[e]?.request.kind}))b.push({answer:e,outcome:`accepted`})}else await resumeSessionInbox(t.childSessionInbox??t.childContinuationToken,i)}let x=await commitSessionStep({...y,sessionWritable:e.sessionWritable},e=>[routeAnswer(e,{decided:s===void 0?b:[...b,{answer:s.answer,outcome:`declined`}],deliveries:m,forwarded:h})],{origin:`relayed`});if(s!==void 0)return{...x,kind:s.kind};let S=[...a].sort(([e],[t])=>e-t),C=S.length===0?void 0:selectDeliveryPayloads(n,S.map(([e,t])=>({index:e,payload:t})));return{...x,kind:`continue`,remainder:C}}async function answersIdempotencyKey(e,t){let n=(e.deliveryMetadata??[]).map(e=>e.deliveryId);if(n.length===0)return;let r=JSON.stringify([n,t]),i=await crypto.subtle.digest(`SHA-256`,new TextEncoder().encode(r));return`eve-answers:${Array.from(new Uint8Array(i),e=>e.toString(16).padStart(2,`0`)).join(``)}`}function joinTurnDeliveryIds(e,t){if(t.length===0)return e;let n=e[TurnDeliveryIdsKey.name]??[];return{...e,[TurnDeliveryIdsKey.name]:[...new Set([...n,...t])]}}async function mapHeldAnswersStep(e){"use step";return await withSessionStateDelta(e,async()=>{let t=new Set(e.requestIds),n=await deliverChannelAnswers({...e,routable:e=>t.has(e.interactionId)});return n.delivery===e.delivery?{delivery:void 0}:{delivery:n.delivery,serializedContext:n.serializedContext}})}async function deliverChannelAnswers(e){let{routable:t}=e;if(!e.delivery.payloads.some(e=>e.answers?.some(e=>!t(e))===!0))return e;let n=await deserializeContext(e.serializedContext),r=n.require(ChannelKey);if(r.deliver===void 0)return e;e.delivery.auth!==void 0&&n.set(AuthKey,e.delivery.auth??null);let i=r.state??{},a=!1,o=[];for(let s of e.delivery.payloads){if(s.answers===void 0){o.push(s);continue}let e=[];for(let o of s.answers){if(t(o)){e.push(o);continue}let c=buildAdapterContext({...r,state:structuredClone(i)},n),l=(await r.deliver({...s,answers:[o],message:void 0},c))?.answers?.filter(t)??[];if(l.length===0){e.push(o);continue}a=!0,i=c.state,e.push(...l)}o.push({...s,answers:e})}if(!a)return e;let s=await deserializeContext(e.serializedContext);return setChannelContext(s,{...r,state:i}),{delivery:{...e.delivery,payloads:o},serializedContext:serializeContext(s)}}export{answersIdempotencyKey,mapHeldAnswersStep,routeProxiedDeliverStep};

package/dist/src/execution/public-destination.d.ts

@@ -0,0 +1,34 @@
+import type { Dispatcher1Wrapper } from "undici";
+/** Rejection for a destination that the {@link PublicDestinationPolicy} blocks. */
+export declare class UnsafeDestinationError extends Error {
+    constructor(message?: string);
+}
+/** Destination policy for a framework request to an untrusted URL. */
+export interface PublicDestinationPolicy {
+    /** Permits loopback destinations, such as callbacks between local development servers. */
+    readonly allowLoopback: boolean;
+}
+type DispatcherRequestInit = Omit<RequestInit, "dispatcher"> & {
+    readonly dispatcher: Dispatcher1Wrapper;
+};
+/**
+ * Rejects IP-literal and `localhost` hostnames the policy blocks. Socket
+ * lookups never run for IP literals, so this check must precede the request.
+ */
+export declare function assertPublicHostname(hostname: string, policy: PublicDestinationPolicy): void;
+/**
+ * Creates a dispatcher whose socket lookup rejects a hostname when any
+ * resolved address is blocked, then connects using those exact results so DNS
+ * cannot change between validation and connection.
+ */
+export declare function createPublicDispatcher(policy: PublicDestinationPolicy): Promise<Dispatcher1Wrapper>;
+/** Finds the policy rejection in an error, including one fetch wrapped from the socket lookup. */
+export declare function findUnsafeDestinationError(error: unknown): UnsafeDestinationError | undefined;
+export declare function fetchWithDispatcher(url: string | URL, init: DispatcherRequestInit): Promise<Response>;
+/**
+ * Buffers a response from an untrusted host, rejecting a declared or streamed
+ * body over `maxResponseSize` bytes, so its connection can close.
+ */
+export declare function readBoundedResponse(response: Response, maxResponseSize: number): Promise<Response>;
+export declare function cancelResponseBody(response: Response): Promise<void>;
+export {};

package/dist/src/execution/public-destination.js

@@ -0,0 +1 @@
+import{isBlockedDestinationHost}from"#shared/network-address.js";import{lookup}from"node:dns";var UnsafeDestinationError=class extends Error{constructor(e=`URL must not target localhost, private, link-local, or reserved IP addresses.`){super(e),this.name=`UnsafeDestinationError`}};function assertPublicHostname(e,t){if(isBlockedDestinationHost(e,t))throw new UnsafeDestinationError}async function createPublicDispatcher(e){let{Agent:t,Dispatcher1Wrapper:n}=await import(`undici`);return new n(new t({connect:{lookup:createPublicLookup(e)}}))}function findUnsafeDestinationError(e){return e instanceof UnsafeDestinationError?e:e instanceof Error&&e.cause instanceof UnsafeDestinationError?e.cause:void 0}function fetchWithDispatcher(e,t){return fetch(e,t)}function createPublicLookup(e){return(t,n,r)=>{lookup(t,{all:!0,verbatim:!0},(i,a)=>{if(i!==null){r(i,``,0);return}if(a.some(({address:t})=>isBlockedDestinationHost(t,e))){r(new UnsafeDestinationError,``,0);return}let o=n.family===void 0||n.family===0?a:a.filter(({family:e})=>e===n.family);if(o.length===0){let e=Error(`Unable to resolve URL hostname "${t}" in the requested IP family.`);Object.assign(e,{code:`ENOTFOUND`}),r(e,``,0);return}if(n.all===!0){r(null,o);return}let s=o[0];r(null,s.address,s.family)})}}async function readBoundedResponse(e,t){let n=parseContentLength(e.headers.get(`content-length`));if(n!==void 0&&n>t)throw await cancelResponseBody(e),createResponseTooLargeError(t);let r=await readBoundedBody(e,t),i=r.byteLength===0?null:Uint8Array.from(r).buffer;return new Response(i,{headers:e.headers,status:e.status,statusText:e.statusText})}function parseContentLength(e){if(e===null)return;let t=Number.parseInt(e,10);return Number.isFinite(t)&&t>=0?t:void 0}async function readBoundedBody(e,t){if(e.body===null)return new Uint8Array;let n=e.body.getReader(),r=[],i=0;try{for(;;){let{done:e,value:a}=await n.read();if(e)break;if(i+=a.byteLength,i>t)throw await n.cancel(),createResponseTooLargeError(t);r.push(a)}}finally{n.releaseLock()}let a=new Uint8Array(i),o=0;for(let e of r)a.set(e,o),o+=e.byteLength;return a}async function cancelResponseBody(e){try{await e.body?.cancel()}catch{}}function createResponseTooLargeError(e){return Error(`Response too large (exceeds ${e} bytes).`)}export{UnsafeDestinationError,assertPublicHostname,cancelResponseBody,createPublicDispatcher,fetchWithDispatcher,findUnsafeDestinationError,readBoundedResponse};

package/dist/src/execution/publish-session-events.d.ts

@@ -1,12 +1,18 @@
+import type { ControlDelivery } from "#harness/types.js";
 import { type ChannelAdapterContext } from "#channel/adapter.js";
 import { type ContextContainer } from "#context/container.js";
+import { type RunReactionsInput } from "#reactions/runner.js";
 import { type DurableSession, type DurableSessionState } from "#execution/durable-session-store.js";
 import { type Transition } from "#harness/session-machine/commit.js";
-import { type SessionView } from "#harness/session-machine/view.js";
+import { type SessionView as MachineView } from "#harness/session-machine/view.js";
 import { type HarnessModelMessage } from "#harness/messages.js";
-import type { HandleEventFn, HarnessSession, HarnessSessionBase } from "#harness/types.js";
-import { type MessageStreamEvent, type UnstampedMessageStreamEvent } from "#protocol/message.js";
+import type { HandleEventFn, HarnessSession, HarnessSessionBase, SessionPublication } from "#harness/types.js";
+import type { SessionEvent, SessionStreamEvent } from "#protocol/session-event.js";
+import { type FactPosition, type StoredLine } from "#protocol/session-events/envelope.js";
 import { type SessionProjection } from "#protocol/session-projection.js";
+import type { Cause, ErrorInfo } from "#protocol/session-events/envelope.js";
+import { type ControlSettlement } from "#harness/facts.js";
+import type { SessionView } from "#protocol/session-projection/tables.js";
 /**
  * Whose event a session publishes. Every event reaches the channel adapter, the
  * session stream, and stream-event hooks. The session's own events also reach
@@ -14,7 +20,7 @@ import { type SessionProjection } from "#protocol/session-projection.js";
  *
  * A relayed event belongs to an exchange this session carries for a child
  * session or a workflow run: the question or sign-in it raised, the turn
- * boundary that question causes here, and the `input.resolved` for the answer
+ * boundary that question causes here, and the `interaction.settled` for the answer
  * this session routes back. This session's instrumentation never tracks that
  * pending input, so no event of the exchange reaches it; the child records its
  * side as its own.
@@ -37,13 +43,10 @@ export interface PublishedSessionEvents {
 }
 /**
  * Publishes a session step's own events, such as a workflow tool's
- * `action.partial`, exactly as a turn publishes its events. Call from a step
+ * `call.progress`, exactly as a turn publishes its events. Call from a step
  * and adopt the result: hooks run in the session's context and may change it.
- * Set `canCancelTurn` only for events of a running turn. Cancellation is
- * returned with the updated state after the hooks finish, not thrown across
- * the durable step boundary.
  */
-export declare function publishSessionEvents(target: SessionStepState, events: readonly UnstampedMessageStreamEvent[], options?: {
+export declare function publishSessionEvents(target: SessionStepState, events: readonly SessionEvent[], options?: {
     readonly canCancelTurn?: boolean;
 }): Promise<PublishedSessionEvents & {
     readonly cancelled: boolean;
@@ -65,9 +68,9 @@ export declare function restoreSessionStep(step: SessionStepState): Promise<Rest
  * restored with its history.
  */
 export interface SessionStepPublication<T, R, S extends HarnessSessionBase = HarnessSessionBase> {
-    readonly origin: SessionEventOrigin;
-    /** Stops the running turn the events belong to, for a hook's `ctx.cancel()`. */
+    /** A hook stops this publication's running turn; its owner adopts the cancellation after commit. */
     readonly cancelTurn?: () => void;
+    readonly origin: SessionEventOrigin;
     /** Where a relayed input batch came from; the channel adapter and its forwarding see it. */
     readonly inputSource?: string;
     /** Emits the step's events in the session's context scope. */
@@ -108,55 +111,112 @@ export interface SessionEventWriter {
     /** Releases the writer lock so the next step can acquire it. Safe after `close()`. */
     release(): void;
 }
-/** Dispatches a session's events to its channel and stream-event hooks. */
+/** One event as written: as readers read it back, with where it sits on the stream. */
+export interface WrittenEvent {
+    readonly event: SessionStreamEvent;
+    readonly position: FactPosition;
+    /** It rode as a progress record, which only hooks keyed on its type hear. */
+    readonly progress: boolean;
+    /** Immutable table snapshot after this record's whole line, not a later concurrent write. */
+    readonly view: SessionView;
+}
+/** Dispatches a session's written events to its channel and stream-event hooks. */
 export interface SessionEventDispatcher {
     /** The context delivery hands the channel adapter; a turn step also hands it to `adapter.deliver`. */
     readonly adapterCtx: ChannelAdapterContext;
-    /**
-     * Runs the stream-event hooks for a written event. `cancelTurn` is passed
-     * only for an event of a running turn; see `turn-event-handler.ts`.
-     */
-    runHooks(event: MessageStreamEvent, cancelTurn?: () => void): Promise<void>;
+    /** Runs the session's reactions after written events; see `reactions/runner.ts`. */
+    react(written: readonly WrittenEvent[], options?: Omit<RunReactionsInput, "written">): Promise<void>;
 }
 /** A session's stream held by one step, with the dispatch of the events that step publishes. */
 export interface SessionEventPublisher {
     readonly dispatcher: SessionEventDispatcher;
     readonly writer: SessionEventWriter;
     /**
-     * Delivers and writes one event the step produced, and returns it
-     * as written for its hooks. Delivery comes first so the channel adapter's
-     * handler shapes what is written.
+     * Writes one publication (a commit's facts on one line, each progress record on its own),
+     * folds each line into the step's projection, then runs the channel's handlers. Returns the
+     * events as written, for their hooks.
      */
-    emit(event: UnstampedMessageStreamEvent): Promise<MessageStreamEvent>;
-    /** `emit`, then the event's stream-event hooks. */
-    publish(event: UnstampedMessageStreamEvent): Promise<void>;
+    emit(publication: SessionPublication): Promise<readonly WrittenEvent[]>;
+    /** `emit`, then the events' stream-event hooks. */
+    publish(publication: SessionPublication): Promise<void>;
+    /**
+     * Ends a unit of the step's progress: publishes what the tables now say about the open
+     * turn waiting on people (`announceWaiting`). Steps call it as they end. A turn step passes
+     * whether it stopped for a person; a step that runs while the turn waits leaves it to the
+     * tables.
+     */
+    finish(options?: {
+        readonly announce?: boolean;
+    }): Promise<void>;
+}
+/**
+ * Whether publication checks each line against the event contract before writing it: on under
+ * `eve dev` and with `EVE_CHECK_SESSION_EVENTS=1`, off with `EVE_CHECK_SESSION_EVENTS=0`. A
+ * violation fails the publication instead of writing a line readers can't fold.
+ */
+export declare function checksSessionEvents(): boolean;
+/** A line an interrupted attempt of the current step wrote after the step's checkpoint. */
+export interface OrphanedLine {
+    readonly line: StoredLine;
+    readonly position: number;
 }
+/**
+ * The lines an interrupted earlier attempt of this step wrote after the checkpoint: none on a
+ * first attempt, unless `always`, for a step that recovers what a failed step's attempts left.
+ */
+export declare function readOrphanedLines(input: {
+    readonly sessionId: string;
+    readonly position: number;
+    readonly sessionWritable: WritableStream<Uint8Array>;
+    readonly always?: boolean;
+}): Promise<readonly OrphanedLine[]>;
+/**
+ * The state a retried step returns, following every line its interrupted attempt wrote. The
+ * retry decides from the same checkpoint and writes the same lines again, so this changes
+ * nothing; if its decisions changed and it wrote fewer, the lines it left still sit on the
+ * stream, and the session folds them instead of writing its next lines over their positions.
+ */
+export declare function followInterruptedAttempt(sessionWritable: WritableStream<Uint8Array>, state: DurableSessionState): DurableSessionState;
+/** The projection with orphaned lines folded in, as if the step had just written them. */
+export declare function foldOrphanedLines(projection: SessionProjection, lines: readonly OrphanedLine[]): SessionProjection;
 export declare function openSessionEventPublisher(input: {
     readonly cancelTurn?: () => void;
     readonly ctx: ContextContainer;
     readonly origin: SessionEventOrigin;
     readonly sessionWritable: WritableStream<Uint8Array>;
     readonly inputSource?: string;
+    /**
+     * What an interrupted attempt of this step already wrote. Each line the publication would
+     * write again is folded from the stream instead, and its handlers and hooks don't run again.
+     */
+    readonly orphaned?: readonly OrphanedLine[];
 }): SessionEventPublisher;
 /** The session's projection as of the last event it published. */
 export declare function readSessionProjection(ctx: ContextContainer): SessionProjection;
-type TerminalSessionEvent = Extract<UnstampedMessageStreamEvent, {
-    type: "session.completed" | "session.failed";
-}>;
+/** How a session ends from outside a turn. */
+export interface SessionEnding {
+    readonly outcome: "completed" | "failed";
+    readonly settles?: readonly ControlSettlement[];
+    readonly cause?: Cause;
+    /** The reset control that ends the session, when it named its delivery. */
+    readonly control?: ControlDelivery;
+    readonly error?: ErrorInfo;
+}
 /**
- * Publishes a terminal `session.completed` or `session.failed` from outside a
- * turn as the session's own event, through its channel adapter and
- * instrumentation, then closes the session stream so readers following it
- * reach EOF. Stream-event hooks do not run: the ending session may not
- * restore, and no turn scope remains for authored code. Never throws.
+ * Ends the session from outside a turn: one commit settles what it left open and ends it
+ * (`session.ended`), through its channel adapter and instrumentation, then closes the session
+ * stream so readers following it reach its end. Stream-event hooks do not run: the ending session
+ * may not restore, and no turn scope remains for authored code. Throws only when the session's
+ * published tail cannot be read, which the ending must follow.
  *
- * When the context cannot be restored, the event is only stamped, written, and
- * the stream closed: the one degraded write of a session event.
+ * When the context cannot be restored, the commit is only written and the stream closed: the one
+ * degraded write of a session event.
  */
 export declare function publishTerminalSessionEvent(input: {
     readonly errorId?: string;
-    readonly event: TerminalSessionEvent;
+    readonly ending: SessionEnding;
     readonly serializedContext: Record<string, unknown>;
+    readonly sessionState?: DurableSessionState;
     readonly sessionWritable: WritableStream<Uint8Array>;
     /** The session's last turn, for channel handlers' `ctx.session.turn`. */
     readonly turn?: {
@@ -165,6 +225,8 @@ export declare function publishTerminalSessionEvent(input: {
     };
     /** The turn the event ends, for instrumentation. */
     readonly turnId?: string;
+    /** The session's last checkpointed projection: what's open, and the next line's position. */
+    readonly projection?: SessionProjection;
 }): Promise<void>;
 /**
  * The commit of a step that owns the session outside a turn: restore it, decide its transitions
@@ -172,9 +234,9 @@ export declare function publishTerminalSessionEvent(input: {
  * Used by relay-changing steps outside a turn; other steps still publish or apply transitions
  * directly. Batches keep the turn unchanged and contain at most one sign-in snapshot.
  */
-export declare function commitSessionStep(target: SessionStepState | RestoredSessionStep, decide: (view: SessionView) => readonly Transition[], options: {
+export declare function commitSessionStep(target: SessionStepState | RestoredSessionStep, decide: (view: MachineView) => readonly Transition[], options: {
     readonly origin: SessionEventOrigin;
+    readonly cancelTurn?: () => void;
     /** Where a relayed input batch came from; see `SessionStepPublication.inputSource`. */
     readonly inputSource?: string;
 }): Promise<PublishedSessionEvents>;
-export {};