eve 0.83.2 → 0.84.0

package/dist/src/harness/hitl/delivery.js

@@ -1 +1 @@
-import{openInputs}from"#protocol/session-projection.js";import{attachClientContext,readClientContext}from"#internal/client-context.js";import{readAnswerText}from"#internal/input-text.js";import{firstOpenInput}from"#harness/open-input-request.js";import{resolveTextToResponse,resolveTextToResponses}from"#channel/resolve-text.js";import{coalesceTurnInputs}from"#harness/messages.js";import{ownOpenRequestIds}from"#harness/session-machine/transitions.js";import{isApprovalRequest}from"#harness/input-request-class.js";import{convertStaleResponsesToUserMessage,dropStaleSessionLimitContinuationResponses}from"#harness/hitl/stale-responses.js";function deliver(e,t,n){let r=n.takeQueued?e.turn.queued:void 0,i=openInputs(e.projection).find(e=>e.request.kind===`session-limit`),a=r!==void 0&&i!==void 0&&n.typedAnswers!==!1?resolveTextInput({requests:[i.request]},t):t,o=r===void 0?a:a===void 0?r:coalesceTurnInputs(r,a),s=new Set([...ownOpenRequestIds(e),...e.turn.suspended.flatMap(e=>e.requests.map(e=>e.requestId))]),c=new Map(Object.values(e.projection.inputs).map(e=>[e.request.requestId,e.request])),l=convertStaleResponsesToUserMessage({pendingRequestIds:s,requests:c,stepInput:dropStaleSessionLimitContinuationResponses({pendingRequestIds:s,stepInput:o})});return l.kind===`converted`?{displayMessage:l.displayMessage,input:l.stepInput,takeQueued:n.takeQueued}:{input:l.stepInput,takeQueued:n.takeQueued}}function resolveTextInput(e,t){let n=readAnswerText(t);if(t===void 0||n===void 0)return t;let r=new Set(e.requests.map(e=>e.requestId));if(t.inputResponses?.some(e=>r.has(e.requestId)))return t;let i=resolveTextToResponses(n,e.requests);return i.length===0?t:compactInput({...t,context:void 0,history:void 0,inputResponses:[...t.inputResponses??[],...i],message:void 0,messageConsumed:!0})}function resolveTypedApproval(e,t){let n=readAnswerText(t);if(t===void 0||n===void 0)return t;let r=new Set([...t.inputResponses??[],...(t.attributedInputResponses??[]).map(({response:e})=>e)].map(({requestId:e})=>e)),i=firstOpenInput(e.projection,e=>r.has(e))?.request,a=e.turn.suspended.some(e=>e.requests.some(e=>e.requestId===i?.requestId));if(i===void 0||!a||!isApprovalRequest(i))return t;let o=resolveTextToResponse(n,i);return o===void 0?t:{...t,context:void 0,history:void 0,inputResponses:[...t.inputResponses??[],o],message:void 0,messageConsumed:!0}}function canonicalize(e){let t=new Map;for(let n of e)t.set(n.requestId,n);return[...t.values()]}function isEmptyInput(e){return Object.keys(compactInput(e)).length===0}function withoutResponses(e){if(e===void 0)return;let{attributedInputResponses:t,inputResponses:n,messageConsumed:r,...i}=e;return i}function turnInputOnly(e){if(e===void 0)return;let t={};(e.context?.length??0)>0&&(t.context=e.context),(e.history?.length??0)>0&&(t.history=e.history),e.message!==void 0&&e.messageConsumed!==!0&&(t.message=e.message);let n=attachClientContext(t,readClientContext(e));return isEmptyInput(n)?void 0:n}function withoutTurnInput(e){let t={};return(e?.inputResponses?.length??0)>0&&(t.inputResponses=e.inputResponses),e?.outputSchema!==void 0&&(t.outputSchema=e.outputSchema),t}function compactInput(e){if(e===void 0)return{};let t={};return(e.context?.length??0)>0&&(t.context=e.context),(e.history?.length??0)>0&&(t.history=e.history),(e.inputResponses?.length??0)>0&&(t.inputResponses=e.inputResponses),e.message!==void 0&&(t.message=e.message),e.messageConsumed===!0&&(t.messageConsumed=!0),e.outputSchema!==void 0&&(t.outputSchema=e.outputSchema),attachClientContext(t,readClientContext(e))}export{canonicalize,compactInput,deliver,isEmptyInput,resolveTextInput,resolveTypedApproval,turnInputOnly,withoutResponses,withoutTurnInput};
+import{openRequests,promptQueueHead}from"#protocol/session-projection/reader.js";import{attachClientContext,readClientContext}from"#internal/client-context.js";import{readAnswerText}from"#internal/input-text.js";import{ownOpenRequestIds}from"#harness/session-machine/view.js";import{coalesceTurnInputs}from"#harness/messages.js";import{answerFromText}from"#channel/resolve-text.js";import{convertStaleResponsesToUserMessage,dropStaleSessionLimitContinuationResponses}from"#harness/hitl/stale-responses.js";function deliver(e,t,n){let r=n.takeQueued?e.turn.queued:void 0,i=openRequests(e.projection.view).find(e=>e.request.kind===`budget`),a=r!==void 0&&i!==void 0&&n.typedAnswers!==!1?resolveTextInput(e.projection.view,t):t,o=r===void 0?a:a===void 0?r:coalesceTurnInputs(r,a),s=e.projection.view,c=new Set([...ownOpenRequestIds(e),...e.turn.suspended.flatMap(e=>e.requests.filter(e=>s.interactions[e.interactionId]===void 0).map(e=>e.interactionId))]),l=convertStaleResponsesToUserMessage({pendingRequestIds:c,view:s,stepInput:dropStaleSessionLimitContinuationResponses({pendingRequestIds:c,stepInput:o})});return l.kind===`converted`?{displayMessage:l.displayMessage,input:l.stepInput,takeQueued:n.takeQueued}:{input:l.stepInput,takeQueued:n.takeQueued}}function resolveTextInput(e,t){let n=readAnswerText(t);if(t===void 0||n===void 0)return t;let r=new Set(openRequests(e).map(e=>e.interactionId));if(t.answers?.some(e=>r.has(e.interactionId)))return t;let i=promptQueueHead(e),a=i===void 0?void 0:answerFromText(n,i),o=typedAnswers(t,a===void 0?[]:[a]);return o===void 0?t:compactInput(consumeTypedMessage(t,o))}function resolveTypedApproval(e,t){let n=readAnswerText(t);if(t===void 0||n===void 0)return t;let r=new Set((t.answers??[]).map(({interactionId:e})=>e)),i=promptQueueHead(e.projection.view,e=>r.has(e)),a=e.turn.suspended.some(e=>e.requests.some(e=>e.interactionId===i?.interactionId));if(i===void 0||!a||i.request.kind!==`approval`)return t;let o=answerFromText(n,i),s=typedAnswers(t,o===void 0?[]:[o]);return s===void 0?t:consumeTypedMessage(t,s)}function consumeTypedMessage(e,t){return{...e,answers:[...e.answers??[],...t],context:void 0,deliveries:withoutHistory(e.deliveries),history:void 0,message:void 0,messageConsumed:!0}}function withoutHistory(e){return e?.map(({history:e,...t})=>t)}function typedAnswers(e,t){let n=e.deliveries?.at(-1)?.deliveryId;if(n!==void 0&&t.length!==0)return t.map((e,t)=>({...e,deliveryId:n,responseId:typedResponseId(n,t)}))}function typedResponseId(e,t){return`response_${e}_typed_${String(t)}`}function isEmptyInput(e){return Object.keys(compactInput(e)).length===0}function withoutResponses(e){if(e===void 0)return;let{answers:t,messageConsumed:n,...r}=e;return r}function turnInputOnly(e){if(e===void 0)return;let t={};(e.context?.length??0)>0&&(t.context=e.context),(e.history?.length??0)>0&&(t.history=e.history),e.message!==void 0&&e.messageConsumed!==!0&&(t.message=e.message);let n=attachClientContext(t,readClientContext(e));return isEmptyInput(n)?void 0:n}function withoutTurnInput(e){let t={};return(e?.answers?.length??0)>0&&(t.answers=e.answers),(e?.deliveries?.length??0)>0&&(t.deliveries=e.deliveries),e?.outputSchema!==void 0&&(t.outputSchema=e.outputSchema),t}function compactInput(e){if(e===void 0)return{};let t={};return(e.deliveries?.length??0)>0&&(t.deliveries=e.deliveries),(e.context?.length??0)>0&&(t.context=e.context),(e.history?.length??0)>0&&(t.history=e.history),(e.answers?.length??0)>0&&(t.answers=e.answers),e.message!==void 0&&(t.message=e.message),e.messageConsumed===!0&&(t.messageConsumed=!0),e.outputSchema!==void 0&&(t.outputSchema=e.outputSchema),attachClientContext(t,readClientContext(e))}export{compactInput,deliver,isEmptyInput,resolveTextInput,resolveTypedApproval,turnInputOnly,typedResponseId,withoutResponses,withoutTurnInput};

package/dist/src/harness/hitl/index.d.ts

@@ -1,29 +1,26 @@
+import type { ApprovalMemory } from "#approval/evaluation.js";
 import type { ModelMessage } from "ai";
 import type { resolveInlineAuthorizationInterrupt } from "#harness/inline-tool-authorization.js";
-import type { StepCoordinates } from "#harness/session-machine/view.js";
 import type { Step } from "#harness/step/context.js";
 import type { HarnessSessionBase, HarnessToolLookup, StepInput, StepResult } from "#harness/types.js";
 import type { RuntimeWorkflowTaskRequest } from "#shared/action-types.js";
-import type { InputRequest } from "#shared/input.js";
-export { acceptHumanInput, admitApprovedWork, dispatchApprovedWorkflows, hasApprovedWork, runApprovedLocalCalls, type ApprovedWork, type HumanInputIntake, } from "./intake.js";
-export { extractToolApprovalInputRequests } from "#harness/input-extraction.js";
-export { hasRunnableQueue } from "./approvals.js";
-export { discardClearedHitlState as discardClearedHumanInput } from "./requests.js";
+import type { ApprovalAsk, StepCoordinates } from "#harness/session-machine/view.js";
+export { admitHumanInput, applyHumanDecisions, settleHumanInput, type HumanDecisions, type HumanInputIntake, } from "./intake.js";
+export { openDeferredApprovals, queueInput } from "./approvals.js";
+export { compactInput, turnInputOnly, withoutTurnInput } from "./delivery.js";
+export type { PendingResponder } from "./responders.js";
 /**
- * A model step made calls that need a person's approval: the step parks on them beside any
- * runtime calls it made. The turn holds for the answers, unless the runtime runs calls for it
- * meanwhile, or queued input can already run.
+ * A model step made calls that need a person's approval: the step's response waits on them
+ * beside any runtime calls it made, asked as the turn's requester.
  */
-export declare function parkOnApprovals(step: Step, input: {
+export declare function askStepApprovals(step: Step, input: {
     readonly event: StepCoordinates;
     readonly messages: readonly ModelMessage[];
-    readonly requests: readonly InputRequest[];
+    readonly requests: readonly ApprovalAsk[];
     readonly tasks: readonly RuntimeWorkflowTaskRequest[];
     /** The entries the step's calls ran, whose approvals the requests ask for. */
     readonly tools: HarnessToolLookup;
-    /** Runtime calls run first, or the caller will report a sibling sign-in hold. */
-    readonly waitsOn: "runtime" | "sign-in" | undefined;
-}): Promise<StepResult>;
+}): Promise<void>;
 /**
  * A call the model step ran needs a sign-in: the calls that need it stop and wait in their
  * steps, and run once it completes.
@@ -36,15 +33,13 @@ export declare function stopForToolSignIn(step: Step, interrupt: NonNullable<Ret
  */
 export declare function enforceBudget(step: Step, messages: readonly ModelMessage[]): Promise<StepResult | undefined>;
 /**
- * What a model call needs from the approvals: the keys `once()` approvals of `tools` granted, and
+ * What a model call needs from the approvals: what their policies remember, and
  * a note on the calls still awaiting approval, which a message may revise.
  */
-export declare function humanInputContext(step: Step, tools: HarnessToolLookup): {
-    readonly approvedTools: ReadonlySet<string>;
+export declare function humanInputContext(step: Step): {
+    readonly approvalMemory: ApprovalMemory;
     readonly pendingApprovalsNote?: string;
 };
-/** The cancelled turn's responders stop checking its approvals: their candidates stale. */
-export declare function retireCancelledCandidates<T extends HarnessSessionBase>(session: T): T;
 /**
  * Takes the message a delivery's answers deferred into the turn queue out of it, so a cancelled
  * turn can keep it in history once instead of also leaving it queued. The rest of the queue stays.

package/dist/src/harness/hitl/index.js

@@ -1 +1 @@
-import{renderPendingApprovalsInstruction}from"./approval-prompt.js";import{isEmptyInput}from"./delivery.js";import{grantedApprovalKeys,hasRunnableQueue,parkOnApprovals as parkOnApprovals$1,requestLimit,requireSignIn}from"./approvals.js";import{DEFAULT_SESSION_USAGE_LIMIT,checkSessionUsageLimit}from"./budget.js";import{discardClearedHitlState,holdsHitlRequests,readHitlState}from"./requests.js";import{retireActiveCandidates}from"./candidates.js";import{acceptHumanInput,admitApprovedWork,dispatchApprovedWorkflows,hasApprovedWork,holdForInput,runApprovedLocalCalls}from"./intake.js";import"./view.js";import{AuthKey,SessionKey}from"#context/keys.js";import{validateHarnessModelMessages}from"#harness/messages.js";import{fail,hold}from"#harness/session-machine/transitions.js";import{readTurnState,writeTurnState}from"#harness/session-machine/state.js";import{extractToolApprovalInputRequests}from"#harness/input-extraction.js";async function parkOnApprovals(e,t){let n=parkOnApprovals$1(e.view(),{event:t.event,messages:t.messages,requests:t.requests,tasks:t.tasks,requester:currentRequester(e),responseAuthRequiredRequestIds:responsePolicyRequestIds(t.tools,t.requests)});return await e.apply(n,[...e.session.history,...n.commit??[]]),t.waitsOn===void 0?hasRunnableQueue(e.view())?{next:e.runStep,session:e.session}:holdForInput(e):(t.waitsOn===`runtime`&&t.tasks.some(e=>e.entry.entryPoint===`execute`)&&await e.apply(hold(e.view(),{on:`tasks`})),{next:null,session:e.session})}async function stopForToolSignIn(e,t){return await e.apply(requireSignIn(e.view(),{calls:t.calls,challenges:t.challenges}),e.session.history),{held:{kind:`request`},next:null,session:e.session}}async function enforceBudget(e,t){let n=checkSessionUsageLimit({canAsk:e.emit!==void 0&&e.config.capabilities?.requestInput===!0,limit:e.config.sessionUsageLimit??DEFAULT_SESSION_USAGE_LIMIT,session:e.session,turnSequence:e.position().sequence});if(n.kind!==`within`)return n.kind===`ask`?(e.session={...e.session,history:validateHarnessModelMessages([...t])},await e.apply(requestLimit(e.view(),{request:n.request}),e.session.history),{next:null,session:e.session}):(await e.apply(fail(e.view(),{code:n.code,details:n.details,message:n.message,terminal:{sessionId:e.session.sessionId}})),{next:{done:!0,output:``},session:e.session})}function humanInputContext(e,t){let n=e.view();return{approvedTools:grantedApprovalKeys(n,e=>t.get(e.action.toolName)?.approvalKey?.(e.action.input)),pendingApprovalsNote:renderPendingApprovalsInstruction(n.turn.suspended.flatMap(e=>e.requests))}}function responsePolicyRequestIds(e,t){return t.filter(t=>{let n=e.get(t.action.toolName)?.approval;return n!==void 0&&typeof n!=`function`&&n.response!==void 0}).map(e=>e.requestId)}function currentRequester(e){return e.ctx?.get(AuthKey)??e.ctx?.get(SessionKey)?.auth.current??null}function retireCancelledCandidates(e){return{...e,state:retireActiveCandidates(e.state,{completedAt:Date.now(),reason:`Cancelled.`})}}function takeDeferredMessage(e){let{queued:t,...n}=readTurnState(e.state);if(t?.message===void 0)return{session:e};let{message:r,...i}=t;return{message:r,session:writeTurnState(e,isEmptyInput(i)?n:{...n,queued:i})}}export{acceptHumanInput,admitApprovedWork,discardClearedHitlState as discardClearedHumanInput,dispatchApprovedWorkflows,enforceBudget,extractToolApprovalInputRequests,hasApprovedWork,hasRunnableQueue,holdsHitlRequests,humanInputContext,parkOnApprovals,readHitlState,retireCancelledCandidates,runApprovedLocalCalls,stopForToolSignIn,takeDeferredMessage};
+import{renderPendingApprovalsInstruction}from"./approval-prompt.js";import{compactInput,isEmptyInput,turnInputOnly,withoutTurnInput}from"./delivery.js";import{approvalMemory,askApprovals,openDeferredApprovals,openLimit,pendingApprovals,queueInput,requestLimit,requireSignIn}from"./approvals.js";import{DEFAULT_SESSION_USAGE_LIMIT,checkSessionUsageLimit}from"./budget.js";import{admitHumanInput,applyHumanDecisions,settleHumanInput}from"./intake.js";import{holdsHitlRequests,readHitlState}from"./requests.js";import"./view.js";import{AuthKey,SessionKey}from"#context/keys.js";import{validateHarnessModelMessages}from"#harness/messages.js";import{fail}from"#harness/session-machine/transitions.js";import{readTurnState,writeTurnState}from"#harness/session-machine/state.js";import{park}from"#harness/step/park.js";async function askStepApprovals(e,t){let n=askApprovals(e.view(),{event:t.event,messages:t.messages,requests:t.requests,requester:currentRequester(e),responseAuthRequiredRequestIds:responsePolicyRequestIds(t.tools,t.requests),tasks:t.tasks});await e.apply(n,[...e.session.history,...n.commit??[]])}async function stopForToolSignIn(e,t){return await e.apply(requireSignIn(e.view(),{calls:t.calls,challenges:t.challenges}),e.session.history),park(e)}async function enforceBudget(e,t){let n=checkSessionUsageLimit({canAsk:e.emit!==void 0&&e.config.capabilities?.requestInput===!0,limit:e.config.sessionUsageLimit??DEFAULT_SESSION_USAGE_LIMIT,session:e.session,turnSequence:e.position().sequence,usage:e.view().projection.view.usage.total,window:e.view().projection.usageWindow});if(n.kind!==`within`)return n.kind===`ask`?(e.session={...e.session,history:validateHarnessModelMessages([...t])},openLimit(e.view())?.row.interactionId!==n.ask.interactionId&&await e.apply(requestLimit(e.view(),n.ask),e.session.history),park(e)):(await e.apply(fail(e.view(),{code:n.code,details:n.details,message:n.message,terminal:!0})),{next:{done:!0,output:``},session:e.session})}function humanInputContext(e){let t=e.view();return{approvalMemory:approvalMemory(t),pendingApprovalsNote:renderPendingApprovalsInstruction(t.turn.suspended.flatMap(e=>pendingApprovals(t,e)))}}function responsePolicyRequestIds(e,t){return t.filter(t=>{let n=e.get(t.call.toolName)?.approval;return n!==void 0&&typeof n!=`function`&&n.response!==void 0}).map(e=>e.interactionId)}function currentRequester(e){return e.ctx?.get(AuthKey)??e.ctx?.get(SessionKey)?.auth.current??null}function takeDeferredMessage(e){let{queued:t,...n}=readTurnState(e.state);if(t?.message===void 0)return{session:e};let{message:r,...i}=t;return{message:r,session:writeTurnState(e,isEmptyInput(i)?n:{...n,queued:i})}}export{admitHumanInput,applyHumanDecisions,askStepApprovals,compactInput,enforceBudget,holdsHitlRequests,humanInputContext,openDeferredApprovals,queueInput,readHitlState,settleHumanInput,stopForToolSignIn,takeDeferredMessage,turnInputOnly,withoutTurnInput};

package/dist/src/harness/hitl/intake.d.ts

@@ -1,67 +1,56 @@
-import type { SuspendedStep } from "#harness/session-machine/view.js";
 import type { Step } from "#harness/step/context.js";
-import type { HarnessToolLookup, StepInput, StepResult } from "#harness/types.js";
-import type { InstrumentationAttempt } from "#instrumentation/runtime.js";
+import type { HarnessStepInput, StepResult } from "#harness/types.js";
+import { type RunnableCall } from "./approvals.js";
 /**
- * What a delivery does before its turn runs. `stop` ends the step: the answers left nothing to
- * run yet, so the turn holds, or a responder must sign in first. `run` carries the turn's input,
- * without the answers the session took, and the approved work that runs once the turn opens.
+ * What a delivery leaves for its step once its answers are admitted. `stop` ends the step: a
+ * response policy committed and runs next step, or a responder must sign in first. `run` carries
+ * the turn's input, without the answers, and whether a message steers the turn.
  */
 export type HumanInputIntake = {
     readonly kind: "stop";
     readonly result: StepResult;
 } | {
     readonly kind: "run";
-    readonly input: StepInput | undefined;
+    readonly input: HarnessStepInput | undefined;
     /** The message the turn receives, as the stream shows it. */
-    readonly message?: StepInput["message"];
+    readonly message?: HarnessStepInput["message"];
     /** A plain-text answer consumed the message, so the model never reads it. */
     readonly consumedMessage: boolean;
     /** The delivery carries input for a turn. */
     readonly opensTurn: boolean;
-    readonly approved: ApprovedWork;
+    /** A message steers the turn past what it waits on. */
+    readonly steer: boolean;
 };
 /**
- * What the delivery decided: the session-limit answer, and the tools approved calls run with.
- * The calls themselves wait in their suspended steps until the turn's next model step.
+ * Admits a delivery's answers: a sign-in callback completes its sign-in, a stale answer becomes
+ * text, a typed one the answer it stands for, and each answer stands once its checks and response
+ * policy allow it. Nothing is decided here; `settleHumanInput` decides.
  */
-export interface ApprovedWork {
-    readonly limit?: {
-        readonly granted: boolean;
-    };
-    /** The entries a parked step's calls run with: those of the step that asked. */
-    readonly toolsOf: (step: SuspendedStep | undefined) => HarnessToolLookup;
-}
-/**
- * Answers what the session asked: approval answers pass the response policies, and the session
- * decides which parked steps they resolve. Runs before the delivery joins its turn, so approved
- * calls get the tools of the step that asked.
- */
-export declare function acceptHumanInput(step: Step, input: StepInput | undefined, options: {
+export declare function admitHumanInput(step: Step, input: HarnessStepInput | undefined, options: {
     readonly takeQueued: boolean;
 }): Promise<HumanInputIntake>;
 /**
- * Admits what a delivery decided before its turn calls the model: a session-limit answer starts a
- * new usage window or ends the turn tree, and a step its answers completed, as denials do, commits.
+ * What the person decided: the budget answer, and the calls that run now: those they approved,
+ * and those a sign-in stopped whose sign-ins have called back.
  */
-export declare function admitApprovedWork(step: Step, work: ApprovedWork): Promise<void>;
-/** Whether a suspended step holds approved calls that haven't run. */
-export declare function hasApprovedWork(step: Step): boolean;
-/**
- * Approved workflow and agent calls join the runs their steps wait on, once the step has started
- * and before its budget check. Returns whether any did: the turn then waits on the runtime, and
- * approved local calls run after their results arrive.
- */
-export declare function dispatchApprovedWorkflows(step: Step, work: ApprovedWork): Promise<boolean>;
+export interface HumanDecisions {
+    readonly limit?: {
+        readonly granted: boolean;
+    };
+    readonly approved: readonly RunnableCall[];
+    /** Approvals settled on their answers: the model reads their results before the turn input. */
+    readonly settledApprovals: boolean;
+}
 /**
- * Runs approved local calls once the step has started and its budget allows it, as the AI SDK ran
- * them before the model read their results: each with the tools of the step that asked, as
- * the turn's requester, and in the step's first attempt. A call that needs a sign-in holds the
- * turn.
+ * The person's standing answers decide what they answer: the budget prompt settles, and each
+ * step's approvals settle together once each has an answer, or when a message steers past them.
+ * A call a sign-in stopped runs once its sign-ins have called back, as the call that asked.
  */
-export declare function runApprovedLocalCalls(step: Step, work: ApprovedWork, setAttemptScope: (scope: InstrumentationAttempt | undefined) => void): Promise<StepResult | undefined>;
+export declare function settleHumanInput(step: Step, intake: Extract<HumanInputIntake, {
+    readonly kind: "run";
+}>): Promise<HumanDecisions>;
 /**
- * The held turn holds on, for a person to act on its sign-in, approval, or the session-limit
- * prompt; the session resumes it when they do.
+ * What the decisions do once the turn has the delivery: a budget answer grants a fresh budget or
+ * ends the turn tree, the steps denials completed commit, and approved calls run.
  */
-export declare function holdForInput(step: Step): Promise<StepResult>;
+export declare function applyHumanDecisions(step: Step, decided: HumanDecisions): Promise<StepResult | undefined>;

package/dist/src/harness/hitl/intake.js

@@ -1 +1 @@
-import{deliver,resolveTypedApproval,turnInputOnly,withoutTurnInput}from"./delivery.js";import{answer,approvingSteps,deferInput,dispatch,grantedApprovalKeys,requireSignIn,stepForRequest,withdrawSignIns}from"./approvals.js";import{rejectApprovedCall,runApprovedCalls}from"./approved-calls.js";import{getApprovalAuditState,responderOfRequest,retireActiveCandidates}from"./candidates.js";import{coordinateApprovalDelivery}from"./coordinator.js";import{SEARCH_TOOL_NAME}from"#protocol/catalog-tools.js";import{activeTurnId}from"#harness/session-machine/view.js";import{resetSessionUsageWindow}from"#harness/turn-tag-state.js";import{collectWorkflowCalls}from"#harness/coordination.js";import{approvedCalls,completeSignIn,hold,runnableCalls,settle}from"#harness/session-machine/transitions.js";import{stepStartedForResolvers}from"#harness/session-machine/resolver-events.js";import{SessionLimitDeclinedError,throwIfTurnAborted}from"#harness/turn-cancellation.js";import{resolveInlineAuthorizationInterrupt}from"#harness/inline-tool-authorization.js";import{recheckApprovedCall}from"#harness/tools.js";import{buildStepCatalog}from"#execution/catalog/step-catalog.js";import{signInAttemptKey}from"#harness/hitl/sign-ins.js";async function acceptHumanInput(e,t,n){let{config:r,ctx:i}=e,a=r.signInCompletions??[];a.length>0&&await e.apply(completeSignIn(e.view(),{completions:a}));let o=r.typedAnswers!==!1,s=deliver(e.view(),t,{...n,typedAnswers:o}),c=o?resolveTypedApproval(e.view(),s.input):s.input,l=t?.message!==void 0&&c?.message!==void 0||s.displayMessage!==void 0?await withdrawSteeredSignIns(e,c):c,u=new Map,d,restoreTools=async t=>{let n=t?.event??e.position(),a=`${n.turnId}:${n.stepIndex}`,o=u.get(a);if(o!==void 0&&d===a)return o;t!==void 0&&await r.prepareApprovalTurn?.(t.event),i!==void 0&&await r.resolveStepDynamicTools?.({ctx:i,event:stepStartedForResolvers({modelId:e.session.agent.modelReference?.id??`dynamic`,sequence:n.sequence,stepIndex:n.stepIndex,turnId:n.turnId}),messages:e.projectHistory(e.session.history)});let s=buildStepCatalog({agentTools:r.tools,ctx:i,endsTurn:!1,session:e.session});return u.set(a,s),d=a,s},toolsOf=e=>(e&&u.get(`${e.event.turnId}:${e.event.stepIndex}`))??r.tools,f=e.view().signIns,p=await coordinateApprovalDelivery({session:e.session,stepInput:l,tools:r.tools,prepareTools:t=>restoreTools(stepForRequest(e.view(),t.requestId))});e.session=p.session;for(let t of approvingSteps(e.view(),p.stepInput))await restoreTools(t);let m=answer(e.view(),{approvalKey:t=>toolsOf(stepForRequest(e.view(),t.requestId)).get(t.action.toolName)?.approvalKey?.(t.action.input),delivery:p.stepInput,searchable:t=>toolsOf(stepForRequest(e.view(),t.requestId)).get(SEARCH_TOOL_NAME)!==void 0,policy:{...p,audit:getApprovalAuditState(e.session.state),challengesAtStart:f},takeQueued:s.takeQueued,typedAnswers:o});for(let t of m.resolved)await e.instrumentation?.publishInputResolutions({batch:t,sessionId:e.session.sessionId});await e.apply(m);let stop=e=>({kind:`stop`,result:e});switch(m.next){case`park`:return e.view().projection.activeTurnId===void 0?stop({next:null,session:e.session}):stop(await holdForInput(e));case`repeat`:return stop({next:e.runStep,session:e.session});case`sign-in`:return await e.apply(requireSignIn(e.view(),{challenges:p.challenges,queued:p.stepInput})),stop(held(e))}let h=e.view();for(let e of h.turn.suspended)runnableCalls(h,e).length>0&&await restoreTools(e);let g=m.resolved.some(e=>e.inputs.some(e=>e.request.kind===`tool-approval`)&&e.inputs.every(e=>e.response!==void 0))||approvedCalls(e.view()).length>0?turnInputOnly(m.input):void 0;return g!==void 0&&await e.apply(deferInput(e.view(),g)),{approved:{limit:m.limit,toolsOf},consumedMessage:m.consumedMessage===!0,input:g===void 0?m.input:withoutTurnInput(m.input),message:m.consumedMessage===!0||g!==void 0?void 0:s.displayMessage??s.input?.message,kind:`run`,opensTurn:hasTurnInput(s.input)||hasTurnInput(p.stepInput)}}async function admitApprovedWork(e,t){if(t.limit!==void 0){if(!t.limit.granted)throw new SessionLimitDeclinedError;e.session=resetSessionUsageWindow(e.session)}await e.apply(settle(e.view(),{results:[]}))}function hasApprovedWork(e){return approvedCalls(e.view()).length>0}async function dispatchApprovedWorkflows(e,t){let n=[],r=[],i=e.view();for(let a of i.turn.suspended){let o=t.toolsOf(a),s=[];for(let t of runnableCalls(i,a)){let n=o.get(t.action.toolName);if(n?.workflowId===void 0)continue;let i=await recheckApprovedCall(n,{abortSignal:e.config.abortSignal,callId:t.action.callId,input:t.action.input,approvedTools:grantedApprovalKeys(e.view(),e=>o.get(e.action.toolName)?.approvalKey?.(e.action.input))});i.denied?r.push(await rejectApprovedCall({request:t,reason:i.reason,position:e.position(),publish:e.publish})):s.push(t)}if(s.length===0)continue;let c=collectWorkflowCalls({session:e.session,toolCalls:s.map(({action:e})=>({input:e.input,toolCallId:e.callId,toolName:e.toolName})),tools:o,turnId:a.event.turnId});e.session=c.session,n.push(...c.workflowRequests)}return r.length>0&&await e.apply(settle(e.view(),{results:r})),n.length!==0&&(await e.apply(dispatch(e.view(),{tasks:n})),n.some(e=>e.entry.entryPoint===`execute`)&&await e.apply(hold(e.view(),{on:`tasks`})),!0)}function reportingOnce(e,t,n){let r=(t.signIns??[]).filter(t=>{let r=signInAttemptKey(t),i=e.projection.authorizations[t.attemptId??t.name]?.status;return n.has(r)||i!==`required`?!1:(n.add(r),!0)});return{...t,signIns:r}}async function runApprovedLocalCalls(e,t,n){let r=e.view(),i=new Set,a=r.turn.suspended.map(e=>{let n=t.toolsOf(e);return{requests:runnableCalls(r,e).filter(e=>n.get(e.action.toolName)?.workflowId===void 0).map(e=>reportingOnce(r,e,i)),tools:n}}),o=a.flatMap(({requests:e})=>e);e.frameworkToolNames=new Set(a.flatMap(({requests:e,tools:t})=>e.map(e=>e.action.toolName).filter(e=>t.get(e)?.frameworkTool===!0)));let s=e.position(),c=o.length===0?void 0:e.instrumentation?.prepareAttempt({isFrameworkTool:t=>e.frameworkToolNames.has(t),attemptIndex:0,stepIndex:s.stepIndex,turnId:activeTurnId(s)});c!==void 0&&n(c.scope);let l=await Promise.all(a.map(async({requests:t,tools:n})=>t.length===0?{settled:[],toolResults:[]}:await runApprovedCalls({abortSignal:e.config.abortSignal,approvedTools:grantedApprovalKeys(e.view(),e=>n.get(e.action.toolName)?.approvalKey?.(e.action.input)),messages:e.projectHistory(e.session.history),position:e.position(),publish:e.publish,requests:t,responderOf:t=>responderOfRequest(e.session.state,t.requestId),telemetry:c?.telemetry,tools:n})));await e.apply(settle(e.view(),{results:l.flatMap(e=>e.settled)})),throwIfTurnAborted(e.config.abortSignal);let u=resolveInlineAuthorizationInterrupt({toolResults:l.flatMap(e=>e.toolResults)});if(u!==void 0)return await e.apply(requireSignIn(e.view(),{calls:u.calls,challenges:u.challenges}),e.session.history),held(e)}const STEERED_SIGN_IN_REASON=`Cancelled because a new message arrived.`;async function holdForInput(e){return await e.apply(hold(e.view(),{on:`input`})),held(e)}function held(e){return{held:{kind:`request`},next:null,session:e.session}}async function withdrawSteeredSignIns(e,t){let n=[...new Set(e.view().signIns.map(e=>e.name))];return e.session={...e.session,state:retireActiveCandidates(e.session.state,{completedAt:Date.now(),reason:STEERED_SIGN_IN_REASON})},n.length===0?t:(await e.apply(withdrawSignIns(e.view(),STEERED_SIGN_IN_REASON)),{...t,context:[...t?.context??[],`Sign-in to ${n.join(`, `)} was cancelled because the user sent a new message instead. Ask to sign in again only if the new message still needs it.`]})}function hasTurnInput(e){return e===void 0?!1:e.message!==void 0||(e.inputResponses?.length??0)>0}export{acceptHumanInput,admitApprovedWork,dispatchApprovedWorkflows,hasApprovedWork,holdForInput,runApprovedLocalCalls};
+import{compactInput,deliver,resolveTextInput,resolveTypedApproval,withoutResponses}from"./delivery.js";import{admitAnswers,approvalMemory,dispatch,openLimit,queueInput,requireSignIn,settleApprovals,settleLimit,withdrawSignIns,withdrawUnavailable}from"./approvals.js";import{runApprovedCalls}from"./approved-calls.js";import{checkResponders,weighResponders}from"./responders.js";import{callRun,runTurn}from"#protocol/session-projection/selectors.js";import{stepForRequest}from"#harness/session-machine/view.js";import{SEARCH_TOOL_NAME}from"#protocol/catalog-tools.js";import{collectWorkflowCalls}from"#harness/coordination.js";import{completeSignIn,runnableCalls,settle}from"#harness/session-machine/transitions.js";import{callSettledFrom}from"#harness/call-facts.js";import{decideApproval}from"#harness/tools.js";import{SessionLimitDeclinedError,throwIfTurnAborted}from"#harness/turn-cancellation.js";import{signInInteractionId}from"#harness/interaction-facts.js";import{changedSinceOffered,changedToolMessage,failedCall}from"#harness/approval-outcome.js";import{publishDenial}from"#harness/call-executor.js";import{park}from"#harness/step/park.js";import{buildStepCatalog}from"#execution/catalog/step-catalog.js";import{resolveInlineAuthorizationInterrupt}from"#harness/inline-tool-authorization.js";import{signInAttemptKey}from"#harness/hitl/sign-ins.js";async function admitHumanInput(e,t,n){let{config:r}=e,i=r.signInCompletions??[];i.length>0&&await e.apply(completeSignIn(e.view(),{completions:i}));let a=await weighResponders(e.view(),{now:Date.now(),toolsOf:t=>restoreTools(e,t)});if(await e.apply(a),a.unavailable.length>0&&await e.apply(withdrawUnavailable(e.view(),{interactionIds:a.unavailable,searchable:t=>toolsOf(e,stepForRequest(e.view(),t.interactionId)).get(SEARCH_TOOL_NAME)!==void 0})),a.challenges.length>0)return await e.apply(requireSignIn(e.view(),{challenges:a.challenges,queued:t})),{kind:`stop`,result:await park(e)};let o=r.typedAnswers!==!1,s=deliver(e.view(),t,{...n,typedAnswers:o});s.takeQueued&&e.view().turn.queued!==void 0&&await e.apply({events:[],turn:{...e.view().turn,queued:void 0}});let c=o?resolveTypedApproval(e.view(),s.input):s.input,l=openLimit(e.view()),u=(s.input?.message!==void 0&&c?.message!==void 0||s.displayMessage!==void 0)&&l===void 0,d=u?await withdrawSteeredSignIns(e,c):c,f=l===void 0||!o?d:resolveTextInput(e.view().projection.view,d),p=checkResponders(e.view(),f,Date.now());if(await e.apply(admitAnswers(e.view(),{check:p,delivery:f})),Object.keys(p.weigh).length>0)return await e.apply(queueInput(e.view(),compactInput(withoutResponses(f)))),{kind:`stop`,result:{next:e.runStep,session:e.session}};let m=f?.messageConsumed===!0;return{consumedMessage:m,input:withoutResponses(f),kind:`run`,message:m?void 0:s.displayMessage??s.input?.message,opensTurn:hasTurnInput(s.input)||hasTurnInput(d),steer:u&&!m}}async function settleHumanInput(e,t){let n=settleLimit(e.view());n.events.length>0&&await e.apply(n);for(let t of e.view().turn.suspended)await restoreTools(e,t);let r=settleApprovals(e.view(),{steer:t.steer});await e.apply(r);let i=e.view(),a=i.turn.suspended.flatMap(e=>runnableCalls(i,e).map(t=>({approval:t,step:e})));return{approved:[...r.approved,...a],limit:n.limit,settledApprovals:r.answered}}async function applyHumanDecisions(e,t){if(t.limit?.granted===!1)throw new SessionLimitDeclinedError;return await e.apply(settle(e.view(),{results:[]})),runApproved(e,t.approved)}async function runApproved(e,t){if(t.length===0)return;let n=new Map;for(let{approval:e,step:r}of t)n.set(r,[...n.get(r)??[],e]);let r=[],i=[],a=[],o=new Set;for(let[t,s]of n){let n=toolsOf(e,t),c=new Map;for(let t of s){let r=n.get(t.call.toolName);if(r?.workflowId===void 0)continue;if(changedSinceOffered(t.call,r)){let{callId:n,toolName:r}=t.call,a=failedCall({callId:n,message:changedToolMessage(r),toolName:r});await e.publish(callSettledFrom(a.result)),i.push({part:a.part});continue}let a=await decideApproval(r,{recheck:!0,abortSignal:e.config.abortSignal,approvalMemory:approvalMemory(e.view()),callId:t.call.callId,input:t.call.input});a.denied?i.push(...(await publishDenial(t.call,{publish:e.publish,reason:a.reason})).settled):c.set(t.call.callId,{approval:t,clearedBy:t.interactionId===void 0?a.clearedBy:{interactionId:t.interactionId}})}if(a.push({approvals:s.filter(e=>n.get(e.call.toolName)?.workflowId===void 0).map(t=>reportingOnce(e.view(),t,o)),tools:n}),c.size===0)continue;let l=collectWorkflowCalls({session:e.session,toolCalls:[...c.values()].map(({approval:{call:e}})=>({input:e.input,toolCallId:e.callId,toolName:e.toolName})),tools:n,turnId:t.event.turnId});e.session=l.session,r.push(...l.workflowRequests.map(e=>({...e,clearedBy:c.get(e.callId)?.clearedBy})))}i.length>0&&await e.apply(settle(e.view(),{results:i})),r.length>0&&await e.apply(dispatch(e.view(),{tasks:r}));let s=a.flatMap(({approvals:e})=>e);if(e.frameworkToolNames=new Set(a.flatMap(({approvals:e,tools:t})=>e.map(e=>e.call.toolName).filter(e=>t.get(e)?.frameworkTool===!0))),s.length===0)return;let c=await Promise.all(a.map(async({approvals:t,tools:n})=>{if(t.length===0)return{settled:[],signIns:[]};let r=e.view().projection.view,i=r.calls[t[0].call.callId],a=i===void 0?void 0:callRun(r,i),o=a===void 0?void 0:r.runs[a],s=o?.attempt===void 0?void 0:e.instrumentation?.prepareAttempt({runId:o.runId,attempt:o.attempt,stepIndex:o.step,turnId:runTurn(r,o.runId),isFrameworkTool:t=>e.frameworkToolNames.has(t)});return await runApprovedCalls({abortSignal:e.config.abortSignal,approvalMemory:approvalMemory(e.view()),approvals:t,messages:e.session.history,publish:e.publish,responderOf:e=>e.responder,telemetry:s?.telemetry,tools:n,view:()=>e.view()})}));await e.apply(settle(e.view(),{results:c.flatMap(e=>e.settled)})),throwIfTurnAborted(e.config.abortSignal);let l=resolveInlineAuthorizationInterrupt({signIns:c.flatMap(e=>e.signIns)});if(l===void 0)return;let u=new Map(s.map(e=>[e.call.callId,e]));return await e.apply(requireSignIn(e.view(),{calls:l.calls.map(e=>{let t=u.get(e.call.callId);return t===void 0?e:{...e,approval:t}}),challenges:l.challenges}),e.session.history),park(e)}function reportingOnce(e,t,n){let{interactions:r}=e.projection.view,i=(t.signIns??[]).filter(e=>{let t=signInAttemptKey(e),i=r[signInInteractionId(e)]?.status===`open`;return n.has(t)||!i?!1:(n.add(t),!0)});return{...t,signIns:i}}const restoredTools=new WeakMap;function stepKey(e){return`${e.turnId}:${e.stepIndex}`}async function restoreTools(e,t){let{config:n}=e,r=stepKey(t?.event??e.position()),i=restoredTools.get(e)??{tools:new Map};restoredTools.set(e,i);let a=i.tools.get(r);if(a!==void 0&&i.last===r)return a;let o=buildStepCatalog({agentTools:n.tools,ctx:e.ctx,endsTurn:!1,session:e.session});return i.tools.set(r,o),i.last=r,o}function toolsOf(e,t){return(t&&restoredTools.get(e)?.tools.get(stepKey(t.event)))??e.config.tools}async function withdrawSteeredSignIns(e,t){let n=[...new Set(e.view().signIns.map(e=>e.name))];return n.length===0?t:(await e.apply(withdrawSignIns(e.view(),`Cancelled because a new message arrived.`)),{...t,context:[...t?.context??[],`Sign-in to ${n.join(`, `)} was cancelled because the user sent a new message instead. Ask to sign in again only if the new message still needs it.`]})}function hasTurnInput(e){return e===void 0?!1:e.message!==void 0||(e.answers?.length??0)>0}export{admitHumanInput,applyHumanDecisions,settleHumanInput};

package/dist/src/harness/hitl/relays.d.ts

@@ -1,9 +1,4 @@
-import type { SubagentInputRequestHookPayload } from "#channel/types.js";
-import type { InputResolvedStreamEvent } from "#protocol/message.js";
-import type { StepCoordinates as PendingInputBatchEvent } from "#harness/session-machine/view.js";
-import type { InputOption, InputRequestKind } from "#shared/input.js";
-import { type SessionInboxAddress } from "#execution/session-inbox/address.js";
-import type { RemoteAgentBinding } from "#eve-channel/support.js";
+import type { RelayRoute } from "#channel/types.js";
 /**
  * Marks a request as a workflow tool run's `ctx.ask()` question, rather than a
  * child session's. Its answer goes to the run's control hook, which carries
@@ -12,17 +7,11 @@ import type { RemoteAgentBinding } from "#eve-channel/support.js";
 export interface WorkflowAskRoute {
     readonly control: string;
 }
-/** The parts of a request a plain-text reply is resolved against. */
-export interface ProxyInputReply {
-    readonly allowFreeform?: boolean;
-    readonly options?: readonly InputOption[];
-}
-/** Routing and control metadata for one descendant-owned input request. */
-export interface ProxyInputRequest {
-    readonly remote?: RemoteAgentBinding & {
-        readonly sessionId: string;
-    };
-    readonly inputSource?: string;
+/**
+ * Where answers to one relayed request go. What the request asks, and how it stands, is its
+ * interaction row; this is only the way back to the asker.
+ */
+export interface Relay extends RelayRoute {
     readonly workflowAsk?: WorkflowAskRoute;
     /**
      * The workflow tool run that relayed the request: its own `ctx.ask()`
@@ -30,39 +19,6 @@ export interface ProxyInputRequest {
      * can answer the request once that run ends.
      */
     readonly runId?: string;
-    /** Batch semantics are optional so sessions written before this field remain routable. */
-    readonly batch?: ProxyInputRequestBatch;
-    readonly childContinuationToken: string;
-    readonly childSessionInbox?: SessionInboxAddress;
-    /**
-     * Coordinates of the `input.requested` this session emitted for the request;
-     * the `input.resolved` it emits once it routes the answer repeats them.
-     */
-    readonly event: PendingInputBatchEvent;
-    readonly kind: InputRequestKind;
-    /** Lets the human-facing parent resolve a plain-text reply before proxying it by ID. */
-    readonly reply?: ProxyInputReply;
-}
-export interface ProxyInputRequestBatch {
-    readonly approvalRequestIds: readonly string[];
-    readonly requestIds: readonly string[];
 }
-/**
- * Whether the child, not this session, closes a relayed request. A child's tool approval can
- * refuse the person who answered, so it stays open here until the child's own `input.resolved`
- * or `approval.settled` arrives. This session closes every other relayed request once it
- * forwards the answer.
- */
-export declare function resolvedByChild(kind: InputRequestKind): boolean;
-/**
- * The part of a child's `input.resolved` its parent relays: the requests the parent leaves for
- * the child to close. `undefined` when the parent already closed all of them.
- */
-export declare function resolvedForParent(data: InputResolvedStreamEvent["data"]): InputResolvedStreamEvent["data"] | undefined;
-/**
- * Projects a {@link SubagentInputRequestHookPayload} into the
- * `(requestId, route)` tuples the session stores.
- */
-export declare function toProxyInputRequestEntries(payload: SubagentInputRequestHookPayload): readonly (readonly [requestId: string, route: ProxyInputRequest])[];
 /** Reads one stored route, or `undefined` when it is malformed. */
-export declare function parseProxyInputRequest(value: unknown, requestId: string): ProxyInputRequest | undefined;
+export declare function parseRelay(value: unknown): Relay | undefined;

package/dist/src/harness/hitl/relays.js

@@ -1 +1 @@
-import{isSessionInboxAddress}from"#execution/session-inbox/address.js";const PROXY_INPUT_REQUEST_KINDS={question:!0,"session-limit":!0,"tool-approval":!0};function resolvedByChild(e){return e===`tool-approval`}function resolvedForParent(e){let t=e.resolutions.filter(({kind:e})=>resolvedByChild(e));return t.length===0?void 0:{...e,resolutions:t}}function toProxyInputRequestEntries(e){let t={approvalRequestIds:e.event.requests.flatMap(e=>e.kind===`tool-approval`?[e.requestId]:[]),requestIds:e.event.requests.map(e=>e.requestId)},n={sequence:e.event.sequence,stepIndex:e.event.stepIndex,turnId:e.event.turnId};return e.event.requests.map(r=>{let i={batch:t,childContinuationToken:e.childContinuationToken,...e.inputSource!==void 0&&{inputSource:e.inputSource},...e.remote!==void 0&&{remote:e.remote},event:n,kind:r.kind,reply:{...r.allowFreeform!==void 0&&{allowFreeform:r.allowFreeform},...r.options!==void 0&&{options:[...r.options]}}};return e.childSessionInbox?.sessionId===e.childSessionId&&(i.childSessionInbox=e.childSessionInbox),[r.requestId,i]})}function parseProxyInputRequest(e,t){if(typeof e!=`object`||!e||Array.isArray(e)||!(`childContinuationToken`in e)||!(`kind`in e)||typeof e.childContinuationToken!=`string`||!isInputRequestKind(e.kind))return;let n=`remote`in e?parseRemoteAgentBinding(e.remote):void 0;if(`remote`in e&&n===void 0)return;let r=`inputSource`in e?e.inputSource:void 0;if(r!==void 0&&(typeof r!=`string`||r.length===0))return;let i=`event`in e?parseInputRequestEvent(e.event):void 0;if(i===void 0)return;let a=`batch`in e?parseProxyInputRequestBatch(e.batch):void 0,o=`workflowAsk`in e?parseWorkflowAskRoute(e.workflowAsk):void 0;if(`workflowAsk`in e&&o===void 0)return;let s=`runId`in e?e.runId:void 0;if(s!==void 0&&(typeof s!=`string`||s.length===0))return;let c=`reply`in e?parseProxyInputReply(e.reply):void 0;if(`reply`in e&&c===void 0)return;let l=`childSessionInbox`in e?e.childSessionInbox:void 0;if(l!==void 0&&!isSessionInboxAddress(l))return;let u={childContinuationToken:e.childContinuationToken,event:i,kind:e.kind};return typeof r==`string`&&(u.inputSource=r),n!==void 0&&(u.remote=n),o!==void 0&&(u.workflowAsk=o),typeof s==`string`&&(u.runId=s),l!==void 0&&(u.childSessionInbox=l),a!==void 0&&a.requestIds.includes(t)&&(u.batch=a),c!==void 0&&(u.reply=c),u}function parseInputRequestEvent(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=Reflect.get(e,`sequence`),n=Reflect.get(e,`stepIndex`),r=Reflect.get(e,`turnId`);if(typeof t==`number`&&typeof n==`number`&&typeof r==`string`)return{sequence:t,stepIndex:n,turnId:r}}function parseWorkflowAskRoute(e){if(typeof e!=`object`||!e)return;let t=Reflect.get(e,`control`);if(typeof t==`string`&&t.length!==0)return{control:t}}function parseRemoteAgentBinding(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=Reflect.get(e,`name`),n=Reflect.get(e,`url`),r=Reflect.get(e,`resolverId`),i=Reflect.get(e,`forwardPrincipal`),a=Reflect.get(e,`sessionId`);if(typeof t==`string`&&t&&typeof n==`string`&&n&&typeof a==`string`&&a&&(r===void 0||typeof r==`string`&&r)&&(i===void 0||typeof i==`boolean`))return{name:t,url:n,sessionId:a,...r!==void 0&&{resolverId:r},...i!==void 0&&{forwardPrincipal:i}}}function parseProxyInputReply(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t={},n=Reflect.get(e,`allowFreeform`);if(n!==void 0){if(typeof n!=`boolean`)return;t.allowFreeform=n}let r=Reflect.get(e,`options`);if(r!==void 0){if(!Array.isArray(r)||!Array.from(r).every(isInputOption))return;t.options=r}return t}function parseProxyInputRequestBatch(e){if(typeof e!=`object`||!e||Array.isArray(e)||!(`approvalRequestIds`in e)||!(`requestIds`in e)||!isStringArray(e.approvalRequestIds)||!isStringArray(e.requestIds))return;let t=new Set(e.requestIds);if(!(t.size!==e.requestIds.length||e.approvalRequestIds.some(e=>!t.has(e))))return{approvalRequestIds:e.approvalRequestIds,requestIds:e.requestIds}}const INPUT_OPTION_FIELDS={description:e=>e===void 0||typeof e==`string`,id:e=>typeof e==`string`,label:e=>typeof e==`string`,style:e=>e===void 0||e===`primary`||e===`danger`||e==="default"};function isInputOption(e){return typeof e!=`object`||!e||Array.isArray(e)?!1:Object.keys(e).every(e=>Object.hasOwn(INPUT_OPTION_FIELDS,e))&&Object.entries(INPUT_OPTION_FIELDS).every(([t,n])=>n(Reflect.get(e,t)))}function isStringArray(e){return Array.isArray(e)&&e.every(e=>typeof e==`string`)}function isInputRequestKind(e){return typeof e==`string`&&Object.hasOwn(PROXY_INPUT_REQUEST_KINDS,e)}export{parseProxyInputRequest,resolvedByChild,resolvedForParent,toProxyInputRequestEntries};
+import{isSessionInboxAddress}from"#execution/session-inbox/address.js";function parseRelay(e){if(typeof e!=`object`||!e||Array.isArray(e))return;let t=Reflect.get(e,`childContinuationToken`);if(typeof t!=`string`)return;let n={childContinuationToken:t},r=Reflect.get(e,`inputSource`);if(r!==void 0){if(typeof r!=`string`||r.length===0)return;n.inputSource=r}let i=Reflect.get(e,`childSessionInbox`);if(i!==void 0){if(!isSessionInboxAddress(i))return;n.childSessionInbox=i}let a=Reflect.get(e,`remote`);if(a!==void 0){let e=parseRemoteAgentBinding(a);if(e===void 0)return;n.remote=e}let o=Reflect.get(e,`workflowAsk`);if(o!==void 0){let e=isRecord(o)?Reflect.get(o,`control`):void 0;if(typeof e!=`string`||e.length===0)return;n.workflowAsk={control:e}}let s=Reflect.get(e,`runId`);if(s!==void 0){if(typeof s!=`string`||s.length===0)return;n.runId=s}return n}function parseRemoteAgentBinding(e){if(!isRecord(e))return;let t=Reflect.get(e,`name`),n=Reflect.get(e,`url`),r=Reflect.get(e,`resolverId`),i=Reflect.get(e,`forwardPrincipal`),a=Reflect.get(e,`sessionId`),o=Reflect.get(e,`dynamicBinding`),s=Reflect.get(e,`earlierProtocol`);if((s===void 0||typeof s==`number`&&Number.isInteger(s))&&typeof t==`string`&&t&&typeof n==`string`&&n&&typeof a==`string`&&a&&(r===void 0||typeof r==`string`&&r)&&(i===void 0||typeof i==`boolean`))return{name:t,url:n,sessionId:a,...r!==void 0&&{resolverId:r},...i!==void 0&&{forwardPrincipal:i},...o!==void 0&&{dynamicBinding:o},...s!==void 0&&{earlierProtocol:s}}}function isRecord(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}export{parseRelay};

package/dist/src/harness/hitl/requests.d.ts

@@ -1,64 +1,22 @@
 import type { AuthorizationChallenge } from "#harness/authorization.js";
-import type { HarnessSessionBase, SessionStateMap } from "#harness/types.js";
-import type { DurableApprovalState } from "./candidates.js";
-import { type ProxyInputRequest } from "./relays.js";
-/** Where builds before checkpoint version 15 kept the requests. Only checkpoint upgrades read them. */
-export declare const LEGACY_HITL_STATE_KEYS: {
-    readonly approvals: "eve.runtime.hitl.approvalState";
-    readonly signIns: "eve.runtime.pendingAuthorization";
-    readonly relays: "eve.runtime.proxyInputRequests";
-};
-/**
- * A read-only snapshot of the human-in-the-loop records, the one way code outside `harness/hitl/`
- * reads them.
- */
+import type { SessionStateMap } from "#harness/types.js";
+import type { SessionView } from "#protocol/session-projection/tables.js";
+import type { PendingResponder } from "./responders.js";
+import { type Relay } from "./relays.js";
 export interface HitlState {
-    /** The sign-in attempts the session waits on. */
     readonly signIns: readonly AuthorizationChallenge[];
-    /** Requests this session relays for a child session or a workflow run, by `requestId`. */
-    readonly relays: ReadonlyMap<string, ProxyInputRequest>;
+    readonly responders: Readonly<Record<string, PendingResponder>>;
+    readonly relays: ReadonlyMap<string, Relay>;
 }
-/** Each record is parsed on first read: most readers want one. */
 export declare function readHitlState(state: SessionStateMap | undefined): HitlState;
-/**
- * Whether the session holds a sign-in or relayed request, or a record of them it can't read.
- * Settling the last one deletes its record; a malformed record that ordinary readers read as
- * empty must not let a session hand off.
- */
+/** Unreadable checkpoint records must still prevent a handoff. */
 export declare function holdsHitlRequests(state: SessionStateMap | undefined): boolean;
-/** What a session-machine transition changes in these records. */
 export interface HitlStateChange {
-    /** Every sign-in the session waits on once the change applies; `[]` withdraws them all. */
     readonly signIns?: readonly AuthorizationChallenge[];
-    readonly relays?: RelayChange;
+    readonly relays?: Readonly<Record<string, Relay>>;
+    readonly responders?: Readonly<Record<string, PendingResponder>>;
 }
-/** Relay routes a transition records or retires. */
-export interface RelayChange {
-    /** A child's fresh batch: it replaces the routes that child's input source held. */
-    readonly upsert?: {
-        readonly entries: readonly (readonly [requestId: string, route: ProxyInputRequest])[];
-        readonly forChildContinuationToken: string;
-        readonly inputSource?: string;
-    };
-    /** Routes whose answers went down to the asker, or whose request closed. */
-    readonly retire?: readonly string[];
-}
-/** Writes a transition's change. Production callers are the machine save and its closed-route cleanup. */
+/** Changes and retirement share one save; the fold, not another ledger, owns record lifetime. */
 export declare function writeHitlState<T extends {
     readonly state?: SessionStateMap;
-}>(session: T, change: HitlStateChange): T;
-/**
- * Moves the records builds before checkpoint version 15 kept under
- * {@link LEGACY_HITL_STATE_KEYS} into the requests record as they were stored; each reader is as
- * lenient as its old one. Only the checkpoint upgrade calls it.
- */
-export declare function upgradeLegacyHitlState(state: Readonly<Record<string, unknown>>): Record<string, unknown>;
-/** The approval records. Only `candidates.ts` calls it. */
-export declare function readApprovalState(state: SessionStateMap | undefined): DurableApprovalState;
-/** Saves the approval records. Only `candidates.ts` calls it. */
-export declare function writeApprovalState(state: SessionStateMap | undefined, approvalState: DurableApprovalState): SessionStateMap;
-/**
- * Drops what a cleared context owned: sign-in attempts and responders' approval progress. `clear`
- * reported each close; relay routes for live tasks stay.
- */
-export declare function discardClearedHitlState<T extends HarnessSessionBase>(session: T): T;
+}>(session: T, change: HitlStateChange, view?: SessionView): T;

package/dist/src/harness/hitl/requests.js

@@ -1 +1 @@
-import{resolveActiveAuthorizationChallenges}from"./sign-ins.js";import{parseProxyInputRequest}from"./relays.js";import{isObject}from"#shared/guards.js";const REQUESTS_KEY=`eve.runtime.hitl.requests`,LEGACY_HITL_STATE_KEYS={approvals:`eve.runtime.hitl.approvalState`,signIns:`eve.runtime.pendingAuthorization`,relays:`eve.runtime.proxyInputRequests`};function readHitlState(e){let t,n;return{get signIns(){return t??=readSignIns(e)},get relays(){return n??=new Map(Object.entries(readRelays(e)))}}}function holdsHitlRequests(e){let t=e?.[REQUESTS_KEY];if(t===void 0)return!1;if(!isObject(t)||Array.isArray(t))return!0;let{signIns:n,relays:r}=t;return n!==void 0||r!==void 0&&(!isObject(r)||Object.keys(r).length>0)}function writeHitlState(e,t){let n=e.state;return t.signIns!==void 0&&(n=writeSignIns(n,resolveActiveAuthorizationChallenges(t.signIns))),t.relays?.upsert!==void 0&&(n=upsertRelays(n,t.relays.upsert)),t.relays?.retire!==void 0&&(n=retireRelays(n,t.relays.retire)),n===e.state?e:{...e,state:n}}function readRequests(e){let t=e?.[REQUESTS_KEY];return isObject(t)?t:{}}function writeRequests(e,t,n){let{[t]:r,...i}=readRequests(e);if(r===void 0&&n===void 0)return e;let a=n===void 0?i:{...i,[t]:n},{[REQUESTS_KEY]:o,...s}=e??{};return Object.keys(a).length>0?{...s,[REQUESTS_KEY]:a}:Object.keys(s).length>0?s:void 0}function upgradeLegacyHitlState(e){let{[LEGACY_HITL_STATE_KEYS.approvals]:t,[LEGACY_HITL_STATE_KEYS.signIns]:n,[LEGACY_HITL_STATE_KEYS.relays]:r,...i}=e,a=i;a=writeRequests(a,`approvals`,t),a=writeRequests(a,`signIns`,isObject(n)&&n.challenges!==void 0?n.challenges:n);let o=isObject(r)&&Object.keys(r).length===0;return a=writeRequests(a,`relays`,o?void 0:r),a??{}}function readActiveCandidates(e){return Object.fromEntries(Object.entries(e).map(([e,t])=>[e,{...t,decision:t.decision===`cancel`?`cancel`:`approve`}]))}function readApprovalState(e){let t=readRequests(e).approvals;if(typeof t!=`object`||!t)return{activeCandidates:{},candidateHistory:[],nextCandidateSequence:0,settlements:{}};let n=t;return{activeCandidates:typeof n.activeCandidates==`object`&&n.activeCandidates!==null?readActiveCandidates(n.activeCandidates):{},candidateHistory:Array.isArray(n.candidateHistory)?n.candidateHistory:[],nextCandidateSequence:typeof n.nextCandidateSequence==`number`&&Number.isSafeInteger(n.nextCandidateSequence)&&n.nextCandidateSequence>=0?n.nextCandidateSequence:deriveNextCandidateSequence(n),settlements:typeof n.settlements==`object`&&n.settlements!==null?n.settlements:{}}}function deriveNextCandidateSequence(e){return Object.keys(e.activeCandidates??{}).length+(Array.isArray(e.candidateHistory)?e.candidateHistory.length:0)}function writeApprovalState(e,t){return writeRequests(e,`approvals`,t)??{}}function discardClearedHitlState(e){let t=writeRequests(writeSignIns(e.state,[]),`approvals`,void 0);return{...e,state:t}}function readSignIns(e){let t=readRequests(e).signIns;return Array.isArray(t)?t:[]}function writeSignIns(e,t){return writeRequests(e,`signIns`,t.length>0?t:void 0)}function readRelays(e){let t=readRequests(e).relays;if(typeof t!=`object`||!t||Array.isArray(t))return{};let n={};for(let[e,r]of Object.entries(t)){let t=parseProxyInputRequest(r,e);t!==void 0&&(n[e]=t)}return n}function writeRelays(e,t){return writeRequests(e,`relays`,Object.keys(t).length>0?t:void 0)}function upsertRelays(e,t){let n=Object.entries(readRelays(e)).filter(([,e])=>e.childContinuationToken!==t.forChildContinuationToken||e.inputSource!==t.inputSource);return writeRelays(e,Object.fromEntries([...n,...t.entries]))}function retireRelays(e,t){let n=readRelays(e);return t.some(e=>Object.hasOwn(n,e))?writeRelays(e,Object.fromEntries(Object.entries(n).filter(([e])=>!t.includes(e)))):e}export{LEGACY_HITL_STATE_KEYS,discardClearedHitlState,holdsHitlRequests,readApprovalState,readHitlState,upgradeLegacyHitlState,writeApprovalState,writeHitlState};
+import{resolveActiveAuthorizationChallenges}from"./sign-ins.js";import{parseRelay}from"./relays.js";import{isObject}from"#shared/guards.js";import{signInInteractionId}from"#harness/interaction-facts.js";const REQUESTS_KEY=`eve.runtime.hitl.requests`;function readRequests(e){let t=e?.[REQUESTS_KEY];return isObject(t)?t:{}}function record(e){return isObject(e)&&!Array.isArray(e)?e:{}}function readHitlState(e){let t=readRequests(e),n;return{signIns:Array.isArray(t.signIns)?t.signIns:[],responders:record(t.responders),get relays(){return n??=new Map(Object.entries(record(t.relays)).flatMap(([e,t])=>{let n=parseRelay(t);return n===void 0?[]:[[e,n]]}))}}}function holdsHitlRequests(e){let t=e?.[REQUESTS_KEY];if(t===void 0)return!1;if(!isObject(t)||Array.isArray(t))return!0;let{signIns:n,relays:r}=t;return n!==void 0||r!==void 0&&(!isObject(r)||Object.keys(r).length>0)}function writeHitlState(e,t,n){let r=e.state?.[REQUESTS_KEY];if(t.signIns===void 0&&t.relays===void 0&&t.responders===void 0&&r!==void 0&&(!isObject(r)||Array.isArray(r)))return e;let i=readRequests(e.state),a=readHitlState(e.state),o={...i},put=(e,t)=>{Object.keys(t).length>0?o[e]=t:delete o[e]};(t.signIns!==void 0||n!==void 0&&a.signIns.length>0)&&put(`signIns`,resolveActiveAuthorizationChallenges(t.signIns??a.signIns).filter(e=>n?.interactions[signInInteractionId(e)]?.status!==`settled`));let kept=(e,t)=>Object.fromEntries(Object.entries(e).filter(([e])=>t(e)));if(t.relays!==void 0||n!==void 0&&a.relays.size>0){let e={...record(i.relays),...t.relays};put(`relays`,kept(e,t=>n===void 0||parseRelay(e[t])===void 0||n.interactions[t]?.status===`open`))}(t.responders!==void 0||n!==void 0)&&put(`responders`,kept({...a.responders,...t.responders},e=>n===void 0||(n.responses[e]?.status??`settled`)!==`settled`));let s={...e.state};return delete s[REQUESTS_KEY],Object.keys(o).length>0&&(s[REQUESTS_KEY]=o),{...e,state:Object.keys(s).length>0?s:void 0}}export{holdsHitlRequests,readHitlState,writeHitlState};

package/dist/src/harness/hitl/responders.d.ts

@@ -0,0 +1,50 @@
+import type { SessionAuthContext } from "#channel/types.js";
+import { type AuthorizationChallenge } from "#harness/authorization.js";
+import type { Transition } from "#harness/session-machine/commit.js";
+import { type SessionView, type SuspendedStep } from "#harness/session-machine/view.js";
+import type { HarnessStepInput, HarnessToolLookup } from "#harness/types.js";
+/** Who answered an approval its tool's response policy hasn't allowed yet. */
+export interface PendingResponder {
+    readonly responder: SessionAuthContext;
+    readonly expiresAt: number;
+    /** The sign-ins the policy asked the responder for. */
+    readonly challenges?: readonly AuthorizationChallenge[];
+}
+/** What checking a delivery's answers concluded, by response. */
+export interface ResponderCheck {
+    /** Answers that stand now. */
+    readonly admit: readonly string[];
+    /** Answers refused before any policy ran, with why. */
+    readonly refused: readonly {
+        readonly responseId?: string;
+        readonly reason: string;
+    }[];
+    /** Answers a response policy weighs next step, with who gave each. */
+    readonly weigh: Readonly<Record<string, PendingResponder>>;
+}
+/**
+ * Checks who gave each of a delivery's answers. An approval takes only Approve or Cancel. Without
+ * a response policy, it takes only its requester's answer, or anyone's when its requester is
+ * anonymous; with one, it records an authenticated responder for the policy to weigh. Other
+ * answers stand as they arrive, and an answer the session already holds was checked when it did.
+ */
+export declare function checkResponders(view: SessionView, delivery: HarnessStepInput | undefined, now: number): ResponderCheck;
+/** What weighing the recorded answers concluded. */
+export interface WeighedResponders extends Transition {
+    /** Responders' sign-ins a policy asked for. */
+    readonly challenges: readonly AuthorizationChallenge[];
+    /** Approvals whose tool is gone: no answer can run their call. */
+    readonly unavailable: readonly string[];
+}
+/**
+ * Each recorded answer meets its response policy: allowed, it stands; refused or failed, it
+ * settles with why; past its time, it expires. A policy that asks the responder to sign in waits
+ * for the callback, then runs again.
+ */
+export declare function weighResponders(view: SessionView, input: {
+    readonly now: number;
+    /** The entries of the step that asked, which carry the policy. */
+    readonly toolsOf: (step: SuspendedStep | undefined) => Promise<HarnessToolLookup>;
+}): Promise<WeighedResponders>;
+/** Whether two auth contexts name the same principal. */
+export declare function sameResponder(left: SessionAuthContext, right: SessionAuthContext): boolean;

package/dist/src/harness/hitl/responders.js

@@ -0,0 +1 @@
+import{createLogger,logError}from"#internal/logging.js";import{contextStorage}from"#context/container.js";import{AuthKey,SessionKey}from"#context/keys.js";import{buildCallbackContext}from"#context/build-callback-context.js";import{stepForRequest}from"#harness/session-machine/view.js";import{getAuthorizationResult,isAuthorizationSignal}from"#harness/authorization.js";import{buildApprovalResponseAuth,handleApprovalResponsePolicyError}from"#execution/tool-auth.js";import{responseAdmitted,responseSettled}from"#harness/interaction-facts.js";const UNAUTHENTICATED_FEEDBACK=`Authentication is required to respond to this approval.`,TEMPORARILY_UNAVAILABLE_REASON=`Approval authorization is temporarily unavailable. Please try again.`,FAILED_REASON=`We couldn’t verify your response. Please try again.`,log=createLogger(`harness.hitl`);function checkResponders(e,t,n){let r=[],i=[],a={},o=new Set;for(let s of t?.answers??[]){let{responder:t,responseId:c}=s;if(o.has(c)||(o.add(c),e.projection.view.responses[c]!==void 0))continue;let l=stepForRequest(e,s.interactionId),u=l?.requests.find(e=>e.interactionId===s.interactionId);if(l===void 0||u===void 0){c!==void 0&&r.push(c);continue}if(decisionOf(s)===void 0){i.push({reason:`Respond to this approval with Approve or Cancel.`,responseId:c});continue}if(l.responseAuthRequiredRequestIds?.includes(u.interactionId)!==!0){let e=t===void 0?currentResponder():t,n=l.requester??null;if(n!==null&&e===null){i.push({reason:UNAUTHENTICATED_FEEDBACK,responseId:c});continue}if(n!==null&&e!==null&&!sameResponder(n,e)){i.push({reason:`Only the person who requested this action can respond to this approval.`,responseId:c});continue}c!==void 0&&r.push(c);continue}if(c===void 0)continue;let d=t===void 0?buildCallbackContext().session.auth.current:t;if(d===null){i.push({reason:UNAUTHENTICATED_FEEDBACK,responseId:c});continue}a[c]={expiresAt:n+6e5,responder:d}}return{admit:r,refused:i,weigh:a}}async function weighResponders(e,t){let n=e.projection.view,r=e.responders,i=[],a=[],o=[],s={},c=revisedAnswers(e,t.now);for(let[l,u]of Object.entries(r)){let r=n.responses[l];if(r?.status!==`submitted`)continue;if(u.expiresAt<=t.now){i.push(responseSettled(l,`expired`,`The approval response expired. Please submit a new response.`));continue}if(c.has(l)){i.push(responseSettled(l,`withdrawn`,`revised`));continue}if((u.challenges?.length??0)>0&&!u.challenges.some(e=>getAuthorizationResult(e.name)!==void 0))continue;let d=stepForRequest(e,r.interactionId),f=d?.requests.find(e=>e.interactionId===r.interactionId),p=r.value?.optionId===`approve`?`approve`:`deny`;if(d===void 0||f===void 0)continue;let m=await weigh({decision:p,pending:u,request:f,responseId:l,step:d,toolsOf:t.toolsOf});switch(m.kind){case`allowed`:i.push(responseAdmitted(l));break;case`refused`:i.push(responseSettled(l,`refused`,m.reason));break;case`failed`:i.push(responseSettled(l,`failed`,m.reason));break;case`unavailable`:i.push(responseSettled(l,`failed`,`The tool this approval was for is no longer available, so the call won't run.`)),o.push(f.interactionId);break;case`sign-in`:{let e=m.challenges.map(e=>({...e,candidateId:l}));a.push(...e);let t=Math.min(u.expiresAt,...e.map(e=>Date.parse(e.challenge.expiresAt??``)).filter(Number.isFinite));s[l]={...u,challenges:e,expiresAt:t};break}}}return{challenges:a,events:i,responders:s,turn:e.turn,unavailable:o}}function revisedAnswers(e,t){let n=e.projection.view,r=new Map,i=new Set;for(let[a,o]of Object.entries(e.responders)){let e=n.responses[a];if(e?.status!==`submitted`||o.expiresAt<=t||(o.challenges?.length??0)>0)continue;let{authenticator:s,issuer:c,principalId:l,principalType:u}=o.responder,d=JSON.stringify([e.interactionId,s,c??``,u,l]),f=r.get(d);if(f!==void 0&&f.introducedAt>e.introducedAt){i.add(a);continue}f!==void 0&&i.add(f.responseId),r.set(d,{introducedAt:e.introducedAt,responseId:a})}return i}async function weigh(e){let t;try{t=await e.toolsOf(e.step)}catch(t){return logError(log,`approval tools could not be restored`,t,{interactionId:e.request.interactionId}),{kind:`failed`,reason:TEMPORARILY_UNAVAILABLE_REASON}}let n=t.get(e.request.call.toolName);if(n===void 0)return{kind:`unavailable`};let{approval:r}=n,i=r!==void 0&&typeof r!=`function`?r.response:void 0;if(i===void 0)return{kind:`failed`,reason:TEMPORARILY_UNAVAILABLE_REASON};try{let t=buildCallbackContext(),n=await withTimeout(i({auth:buildApprovalResponseAuth({responder:e.pending.responder,scope:e.responseId}),request:{callId:e.request.call.callId,interactionId:e.request.interactionId,principal:e.step.requester??null,toolInput:e.request.call.input,toolName:e.request.call.toolName},response:{decision:e.decision,principal:e.pending.responder},session:{id:t.session.id,initiator:t.session.auth.initiator,parent:t.session.parent,turn:t.session.turn}}));return n.status===`rejected`?{kind:`refused`,reason:n.reason??``}:n.status===`allowed`?{kind:`allowed`}:{kind:`failed`,reason:FAILED_REASON}}catch(e){let t=await handleApprovalResponsePolicyError(e).catch(()=>void 0);return isAuthorizationSignal(t)?{challenges:t.challenges,kind:`sign-in`}:{kind:`failed`,reason:FAILED_REASON}}}function currentResponder(){let e=contextStorage.getStore();return e?.get(AuthKey)??e?.get(SessionKey)?.auth.current??null}function decisionOf(e){if(e.optionId===`approve`)return`approve`;if(e.optionId===`deny`)return`deny`}function sameResponder(e,t){return e.authenticator===t.authenticator&&(e.issuer??``)===(t.issuer??``)&&e.principalType===t.principalType&&e.principalId===t.principalId}async function withTimeout(e){let t;try{return await Promise.race([Promise.resolve(e),new Promise((e,n)=>{t=setTimeout(()=>n(Error(`Approval response authorizer timed out.`)),1e4)})])}finally{t!==void 0&&clearTimeout(t)}}export{checkResponders,sameResponder,weighResponders};

package/dist/src/harness/hitl/sign-ins.d.ts

@@ -1,7 +1,11 @@
 import type { AuthorizationChallenge } from "#harness/authorization.js";
-import type { SessionAuthorization, SessionProjection } from "#protocol/session-projection.js";
+import type { SignInChallenge } from "#protocol/session-events/families/interaction.js";
+import { type SessionProjection } from "#protocol/session-projection.js";
+import type { InteractionRow } from "#protocol/session-projection/tables.js";
 /** What makes two sign-in attempts the same one. */
-type SignInIdentity = Pick<AuthorizationChallenge, "candidateId" | "grant" | "name" | "principal">;
+interface SignInIdentity extends Pick<AuthorizationChallenge, "candidateId" | "grant" | "name"> {
+    readonly principal?: SignInChallenge["principal"];
+}
 /** The pending sign-ins once `challenges` are asked for: each replaces the attempt it supersedes. */
 export declare function withSignIns(previous: readonly AuthorizationChallenge[], challenges: readonly AuthorizationChallenge[]): readonly AuthorizationChallenge[];
 /** Keeps the last challenge for each sign-in and principal. */
@@ -13,7 +17,7 @@ export declare function supersededChallenges(previous: readonly AuthorizationCha
  * grant and principal as `challenge`: asking again would send the person through the same
  * failure. Calls before the turn's first sign-in failure have nothing to find.
  */
-export declare function terminalSignInFailure(projection: SessionProjection, challenge: SignInIdentity): SessionAuthorization | undefined;
+export declare function terminalSignInFailure(projection: SessionProjection, challenge: SignInIdentity): InteractionRow | undefined;
 /** The key a sign-in callback names its attempt by. */
 export declare function signInAttemptKey(challenge: AuthorizationChallenge): string;
 export {};

package/dist/src/harness/hitl/sign-ins.js

@@ -1 +1 @@
-function withSignIns(e,t){let n=resolveActiveAuthorizationChallenges(t),r=supersededChallenges(e,n);return[...e.filter(e=>!r.includes(e)),...n]}function resolveActiveAuthorizationChallenges(e){return e.filter((t,n)=>!e.slice(n+1).some(e=>sameSignIn(t,e)))}function supersededChallenges(e,t){return e.filter(e=>t.some(t=>sameSignIn(e,t)))}function terminalSignInFailure(e,t){return Object.values(e.authorizations).find(n=>n.status===`failed`&&n.retryable===!1&&n.turnId===e.activeTurnId&&sameSignIn(n,t))}function sameSignIn(e,t){let n=e.grant!==void 0&&e.grant===t.grant&&e.candidateId===t.candidateId;return(e.name===t.name||n)&&samePrincipal(e.principal,t.principal)}function samePrincipal(e,t){return e===void 0||t===void 0?e===t:e.type===`app`||t.type===`app`?e.type===t.type:e.id===t.id&&e.issuer===t.issuer}function signInAttemptKey(e){return e.attemptId??e.candidateId??e.name}export{resolveActiveAuthorizationChallenges,signInAttemptKey,supersededChallenges,terminalSignInFailure,withSignIns};
+import{interactionOwner}from"#protocol/session-projection/selectors.js";import{activeTurnIdOf}from"#protocol/session-projection.js";function withSignIns(e,t){let n=resolveActiveAuthorizationChallenges(t),r=supersededChallenges(e,n);return[...e.filter(e=>!r.includes(e)),...n]}function resolveActiveAuthorizationChallenges(e){return e.filter((t,n)=>!e.slice(n+1).some(e=>sameSignIn(t,e)))}function supersededChallenges(e,t){return e.filter(e=>t.some(t=>sameSignIn(e,t)))}function terminalSignInFailure(e,t){let n=activeTurnIdOf(e);if(n===void 0)return;let r=e.view;return Object.values(r.interactions).find(e=>{let i=e.request.signIn;return i!==void 0&&e.outcome===`failed`&&e.response?.retryable===!1&&interactionOwner(r,e).turnId===n&&sameSignIn({candidateId:`responseId`in e.subject?e.subject.responseId:void 0,grant:i.grant,name:i.name,principal:i.principal},t)})}function sameSignIn(e,t){let n=e.grant!==void 0&&e.grant===t.grant&&e.candidateId===t.candidateId;return(e.name===t.name||n)&&samePrincipal(e.principal,t.principal)}function samePrincipal(e,t){return e===void 0||t===void 0?e===t:e.type===t.type&&e.id===t.id&&e.issuer===t.issuer}function signInAttemptKey(e){return e.attemptId??e.candidateId??e.name}export{resolveActiveAuthorizationChallenges,signInAttemptKey,supersededChallenges,terminalSignInFailure,withSignIns};

package/dist/src/harness/hitl/stale-responses.d.ts

@@ -1,13 +1,13 @@
-import type { UserContent } from "ai";
-import type { StepInput } from "#harness/types.js";
-import type { InputRequest } from "#shared/input.js";
+import type { MessageContent } from "#shared/message-content.js";
+import type { HarnessStepInput } from "#harness/types.js";
+import type { SessionView } from "#protocol/session-projection/tables.js";
 type StaleResponseConversion = {
     readonly kind: "unchanged";
-    readonly stepInput?: StepInput;
+    readonly stepInput?: HarnessStepInput;
 } | {
-    readonly displayMessage: string | UserContent;
+    readonly displayMessage: MessageContent;
     readonly kind: "converted";
-    readonly stepInput: StepInput;
+    readonly stepInput: HarnessStepInput;
 };
 /**
  * Filter pass: removes stale answers to session-limit continuation prompts
@@ -22,8 +22,8 @@ type StaleResponseConversion = {
  */
 export declare function dropStaleSessionLimitContinuationResponses(input: {
     readonly pendingRequestIds: ReadonlySet<string>;
-    readonly stepInput?: StepInput;
-}): StepInput | undefined;
+    readonly stepInput?: HarnessStepInput;
+}): HarnessStepInput | undefined;
 /**
  * Transformation pass: a response is stale when its request ID is not in
  * the currently pending HITL batch — the request was already answered,
@@ -39,8 +39,8 @@ export declare function dropStaleSessionLimitContinuationResponses(input: {
  */
 export declare function convertStaleResponsesToUserMessage(input: {
     readonly pendingRequestIds: ReadonlySet<string>;
-    /** Requests the session still knows, by id, closed ones included. */
-    readonly requests: ReadonlyMap<string, InputRequest>;
-    readonly stepInput?: StepInput;
+    /** The session's tables: the requests it still knows, closed ones included. */
+    readonly view: SessionView;
+    readonly stepInput?: HarnessStepInput;
 }): StaleResponseConversion;
 export {};