eve 0.83.3 → 0.84.0

package/dist/src/extensions/git/extension/lib/gh-tool.d.ts

@@ -1,15 +1,6 @@
-import { type ToolContext } from "eve/tools";
 import { type GitHubConfig } from "./github-shell.ts";
 export declare const GH_TOOL_DESCRIPTION = "Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.";
-/**
- * The Connect-brokered `gh` tool, bound to one extension's GitHub config.
- *
- * Callbacks declare durable descriptors with empty closures: eve's transform
- * would capture the `github` getter, which is not JSON, and imports through
- * `eve/extensions/git/sandbox` are not transformed. The getter is boot-time
- * wiring, not per-tool data; a fresh process reruns the dynamic resolver
- * before replay, which binds a new getter.
- */
+/** The Connect-brokered `gh` tool, rebuilt by the dynamic resolver with its current config. */
 export declare function defineGhTool(github: () => GitHubConfig | undefined, description?: string): import("eve/tools").ToolDefinition<{
     command: string;
     permissions: {
@@ -34,5 +25,5 @@ export declare function defineGhTool(github: () => GitHubConfig | undefined, des
         }[];
         description: string;
         workingDirectory?: string | undefined;
-    }, ctx: ToolContext): Promise<import("./github-shell.ts").GitHubShellOutput>;
+    }, ctx: import("eve/tools").ToolContext): Promise<import("./github-shell.ts").GitHubShellOutput>;
 };

package/dist/src/extensions/git/extension/lib/gh-tool.js

@@ -1 +1 @@
-import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{githubShellInputSchema}from"./github-shell-schema.js";import{z}from"#compiled/zod/index.js";import{defineDurableCallback,defineDurableSchema,defineTool}from"eve/tools";const GH_TOOL_DESCRIPTION=`Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.`,ghOutputSchema=z.object({exitCode:z.number().int(),stderr:z.string(),stdout:z.string(),truncated:z.boolean()});function defineGhTool(e,t=GH_TOOL_DESCRIPTION){return defineTool({description:t,approval:defineDurableCallback({closure:{},callback:(e,{toolInput:t})=>githubShellApproval(t)}),inputSchema:defineDurableSchema({closure:{},schema:()=>githubShellInputSchema}),outputSchema:defineDurableSchema({closure:{},schema:()=>ghOutputSchema}),execute:defineDurableCallback({closure:{},callback:(t,n,r)=>executeGitHubShell(n,e(),{context:r,auth:r.session.auth.current,getSandbox:()=>r.getSandbox(),sessionId:r.session.id})})})}export{GH_TOOL_DESCRIPTION,defineGhTool};
+import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{githubShellInputSchema}from"./github-shell-schema.js";import{z}from"#compiled/zod/index.js";import{defineTool}from"eve/tools";const GH_TOOL_DESCRIPTION=`Run one authenticated GitHub command in the sandbox. The full gh CLI surface is available. Commands run without an approval prompt; description records the GitHub-side result the command intends to produce. Declare exactly one repository in the configured GitHub organization: Connect mints the real token for only that repository, and the sandbox process receives only a placeholder GH_TOKEN that the firewall exchanges on matching GitHub requests. GitHub rejects access outside the token's server-side repository scope; commands that explicitly name another repository with -R, --repo, --repo=, or a repository argument to gh repo clone, view, or fork are denied before minting. Use simple argv quoting only, never environment assignments, pipes, redirects, substitutions, or other shell syntax. gh alias and extension commands may execute local code, but remain sandboxed. Use git here only for authenticated fetch, pull, push, or ls-remote against a strictly validated origin, and use gh-signed-commit only with --repo. Use ordinary bash for local git status, diff, add, commit, and rebase.`,ghOutputSchema=z.object({exitCode:z.number().int(),stderr:z.string(),stdout:z.string(),truncated:z.boolean()});function defineGhTool(e,t=GH_TOOL_DESCRIPTION){return defineTool({description:t,approval:({toolInput:e})=>githubShellApproval(e),inputSchema:githubShellInputSchema,outputSchema:ghOutputSchema,execute(t,n){return executeGitHubShell(t,e(),{context:n,auth:n.session.auth.current,getSandbox:()=>n.getSandbox(),sessionId:n.session.id})}})}export{GH_TOOL_DESCRIPTION,defineGhTool};

package/dist/src/extensions/git/extension/lib/github-shell.d.ts

@@ -1,4 +1,3 @@
-import { getToken } from "@vercel/connect";
 import type { SessionAuthContext } from "eve/context";
 import type { SandboxSession } from "eve/sandbox";
 import type { ToolContext } from "eve/tools";
@@ -21,6 +20,8 @@ export interface GitHubShellOutput {
     readonly stdout: string;
     readonly truncated: boolean;
 }
+/** Resolves the co-author credited by this turn's GitHub publishing commands. */
+export type GitHubAttribution = (ctx: ToolContext) => GitHubCoAuthor | null | PromiseLike<GitHubCoAuthor | null>;
 export interface GitHubConfig {
     /**
      * Resolves who the current turn publishes for. When it returns a person,
@@ -29,7 +30,7 @@ export interface GitHubConfig {
      * receives the `gh` tool's context, so `ctx.getToken` can resolve the
      * requester's linked accounts.
      */
-    readonly attribution?: (ctx: ToolContext) => GitHubCoAuthor | null | PromiseLike<GitHubCoAuthor | null>;
+    readonly attribution?: GitHubAttribution;
     readonly authorize?: GitHubAuthorize;
     readonly broker: (sandbox: SandboxSession, rules: Readonly<Record<string, readonly GitHubLeaseRule[]>> | null) => Promise<void>;
     readonly connector: string;
@@ -66,7 +67,16 @@ interface GitHubShellDependencies {
     /** The calling tool's context, passed to `attribution`. */
     readonly context?: ToolContext;
     readonly auth?: SessionAuthContext | null;
-    readonly getConnectToken?: typeof getToken;
+    readonly getConnectToken?: (connector: string, params: {
+        authorizationDetails: {
+            type: "github_app_installation";
+            org: string;
+            repositories: string[];
+        }[];
+        subject: {
+            type: "app";
+        };
+    }) => Promise<string>;
     readonly getSandbox: () => Promise<SandboxSession>;
     /** Serializes credential leases per eve session; every `ctx.getSandbox()` call returns a new handle. */
     readonly sessionId: string;

package/dist/src/extensions/git/extension/lib/sandbox.d.ts

@@ -1,6 +1,2 @@
 /** Consumer-facing helpers exported as `eve/extensions/git/sandbox`. */
 export { executeGitHubShell, githubShellApproval, type GitHubCoAuthor, type GitHubConfig, type GitHubLeaseRule, type GitHubShellInput, type GitHubShellOutput, } from "./github-shell.ts";
-export { GH_SIGNED_COMMIT_SOURCE, GH_SIGNED_COMMIT_VERSION } from "./signed-commit.ts";
-export { GITHUB_TOOLING_PATHS } from "./tooling.ts";
-export { defineGhTool, GH_TOOL_DESCRIPTION } from "./gh-tool.ts";
-export { githubInstructions, prSkillDescription, prSkillMarkdown } from "./github-guidance.ts";

package/dist/src/extensions/git/extension/lib/sandbox.js

@@ -1 +1 @@
-import{githubInstructions,prSkillDescription,prSkillMarkdown}from"./github-guidance.js";import{GITHUB_TOOLING_PATHS}from"./tooling.js";import{executeGitHubShell,githubShellApproval}from"./github-shell.js";import{GH_TOOL_DESCRIPTION,defineGhTool}from"./gh-tool.js";import{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION}from"./signed-commit.js";export{GH_SIGNED_COMMIT_SOURCE,GH_SIGNED_COMMIT_VERSION,GH_TOOL_DESCRIPTION,GITHUB_TOOLING_PATHS,defineGhTool,executeGitHubShell,githubInstructions,githubShellApproval,prSkillDescription,prSkillMarkdown};
+import{executeGitHubShell,githubShellApproval}from"./github-shell.js";export{executeGitHubShell,githubShellApproval};

package/dist/src/extensions/git/extension/skills/pr.d.ts

@@ -1,5 +1,2 @@
-declare const _default: import("eve/skills").DynamicSentinel<{
-    description: string;
-    markdown: string;
-}>;
+declare const _default: import("eve/skills").DynamicSentinel<import("eve/skills").DynamicSkillResult, import("eve/skills").DynamicContext>;
 export default _default;

package/dist/src/extensions/git/extension/skills/pr.js

@@ -1 +1 @@
-import extension_default from"../extension.js";import{prSkillDescription,prSkillMarkdown}from"../lib/github-guidance.js";import{defineDynamic,defineSkill}from"eve/skills";var pr_default=defineDynamic({events:{"session.started":()=>{let e=extension_default.config.github!==void 0;return defineSkill({description:prSkillDescription(e),markdown:prSkillMarkdown(e)})}}});export{pr_default as default};
+import extension_default from"../extension.js";import{prSkillDescription,prSkillMarkdown}from"../lib/github-guidance.js";import{defineDynamic,defineSkill}from"eve/skills";var pr_default=defineDynamic(()=>{let e=extension_default.config.github!==void 0;return defineSkill({description:prSkillDescription(e),content:prSkillMarkdown(e)})});export{pr_default as default};

package/dist/src/extensions/git/extension/tools/gh.d.ts

@@ -1,28 +1,3 @@
 /** Present only with `github` config; otherwise agents use `gh` from their own shell. */
-declare const _default: import("eve/tools").DynamicSentinel<(import("eve/tools").ToolDefinition<{
-    command: string;
-    permissions: {
-        provider: "github";
-        repositories: string[];
-        access: "write";
-    }[];
-    description: string;
-    workingDirectory?: string | undefined;
-}, {
-    exitCode: number;
-    stderr: string;
-    stdout: string;
-    truncated: boolean;
-}> & {
-    execute(input: {
-        command: string;
-        permissions: {
-            provider: "github";
-            repositories: string[];
-            access: "write";
-        }[];
-        description: string;
-        workingDirectory?: string | undefined;
-    }, ctx: import("eve/tools").ToolContext): Promise<import("../lib/github-shell.ts").GitHubShellOutput>;
-}) | null>;
+declare const _default: import("eve/tools").DynamicSentinel<import("eve/tools").DynamicToolResult, import("eve/tools").DynamicContext>;
 export default _default;

package/dist/src/extensions/git/extension/tools/gh.js

@@ -1 +1 @@
-import extension_default from"../extension.js";import{defineGhTool}from"../lib/gh-tool.js";import{defineDynamic}from"eve/tools";var gh_default=defineDynamic({events:{"session.started":()=>extension_default.config.github===void 0?null:defineGhTool(()=>extension_default.config.github)}});export{gh_default as default};
+import extension_default from"../extension.js";import{defineGhTool}from"../lib/gh-tool.js";import{defineDynamic}from"eve/tools";var gh_default=defineDynamic(()=>extension_default.config.github===void 0?null:defineGhTool(()=>extension_default.config.github));export{gh_default as default};

package/dist/src/framework/sources/modules/schedule-collection-wrapper.js

@@ -1 +1 @@
-import{getAuthoredModuleExport,materializeAuthoredModuleExport}from"#internal/authored-module.js";import{defineDynamic}from"#dynamic/definition.js";import{isScheduleCollectionDefinition,stampScheduleCollectionSource}from"#shared/schedule-collection-definition.js";import{normalizeScheduleCollectionDefinition}from"#internal/authored-definition/schedule-collection.js";import{createScheduleCollectionToolDynamicDefinition}from"#context/schedule-collection-tools.js";async function loadScheduleCollectionWrapperNamespace(e){let t=e.parameters.application,n=e.parameters.collection,r=e.parameters.collectionLogicalPath,i=e.parameters.collectionExportName,a=e.dependencies.collection;if(typeof t!=`string`||typeof n!=`string`||typeof r!=`string`||typeof i!=`string`||a===void 0)throw Error(`The compiled schedule collection wrapper is missing its selected collection source.`);let o=await materializeAuthoredModuleExport(getAuthoredModuleExport(a,{exportName:i,logicalPath:r}));if(!isScheduleCollectionDefinition(o))return{default:defineDynamic({events:{"turn.started":()=>null}})};let s=normalizeScheduleCollectionDefinition(o,`Expected the schedule collection export "${i}" from "${r}" to be created with defineDynamicSchedules().`);return stampScheduleCollectionSource(o,{application:t,collection:n,logicalPath:r,sourceId:String(e.parameters.collectionSourceId??``)}),{default:createScheduleCollectionToolDynamicDefinition(s,{application:t,collection:n})}}export{loadScheduleCollectionWrapperNamespace};
+import{getAuthoredModuleExport,materializeAuthoredModuleExport}from"#internal/authored-module.js";import{defineDynamic}from"#dynamic/definition.js";import{isScheduleCollectionDefinition,stampScheduleCollectionSource}from"#shared/schedule-collection-definition.js";import{normalizeScheduleCollectionDefinition}from"#internal/authored-definition/schedule-collection.js";import{createScheduleCollectionToolDynamicDefinition}from"#context/schedule-collection-tools.js";async function loadScheduleCollectionWrapperNamespace(e){let t=e.parameters.application,n=e.parameters.collection,r=e.parameters.collectionLogicalPath,i=e.parameters.collectionExportName,a=e.dependencies.collection;if(typeof t!=`string`||typeof n!=`string`||typeof r!=`string`||typeof i!=`string`||a===void 0)throw Error(`The compiled schedule collection wrapper is missing its selected collection source.`);let o=await materializeAuthoredModuleExport(getAuthoredModuleExport(a,{exportName:i,logicalPath:r}));if(!isScheduleCollectionDefinition(o))return{default:defineDynamic(()=>null)};let s=normalizeScheduleCollectionDefinition(o,`Expected the schedule collection export "${i}" from "${r}" to be created with defineDynamicSchedules().`);return stampScheduleCollectionSource(o,{application:t,collection:n,logicalPath:r,sourceId:String(e.parameters.collectionSourceId??``)}),{default:createScheduleCollectionToolDynamicDefinition(s,{application:t,collection:n})}}export{loadScheduleCollectionWrapperNamespace};

package/dist/src/harness/action-presentation.d.ts

@@ -1,5 +1,4 @@
 import type { ToolSet, TypedToolCall } from "ai";
-import type { ActionPresentationByCallId } from "#protocol/message.js";
 import type { HarnessToolDefinition } from "#harness/execute-tool.js";
 import type { HarnessToolLookup } from "#harness/types.js";
 import type { RuntimeActionRequest } from "#shared/action-types.js";
@@ -11,8 +10,7 @@ export declare function createPresentedRuntimeActionRequestFromToolCall(input: {
     readonly toolCall: TypedToolCall<ToolSet>;
     readonly tools: HarnessToolLookup;
 }): RuntimeActionRequestProjection;
-/** Calls a tool's label callback with a detached, JSON-safe input copy. */
-export declare function projectToolStartLabel(definition: {
+/** Label callbacks share normalization, detached input, and failure isolation. */
+export declare function projectToolLabel(definition: {
     readonly label?: HarnessToolDefinition["label"];
-} | undefined, input: unknown): string | undefined;
-export declare function collectActionPresentation(actions: readonly RuntimeActionRequestProjection[]): ActionPresentationByCallId | undefined;
+} | undefined, phase: "start" | "delta" | "complete", input: unknown, output?: unknown): string | undefined;

package/dist/src/harness/action-presentation.js

@@ -1 +1 @@
-import{normalizePresentationText}from"#shared/presentation-text.js";import{parseJsonObject}from"#shared/json.js";import{createRuntimeActionRequestFromToolCall}from"#harness/coordination.js";function createPresentedRuntimeActionRequestFromToolCall(e){let t=createRuntimeActionRequestFromToolCall(e),n=projectToolStartLabel(e.tools.get(e.toolCall.toolName),t.input);return n===void 0?{action:t}:{action:t,presentationLabel:n}}function projectToolStartLabel(e,t){let n=e?.label?.start;if(n!==void 0)try{let e=normalizePresentationText(n(parseJsonObject(t)));return e===``?void 0:e}catch{return}}function collectActionPresentation(e){let t=Object.fromEntries(e.flatMap(({action:e,presentationLabel:t})=>t===void 0?[]:[[e.callId,{label:t}]]));return Object.keys(t).length===0?void 0:t}export{collectActionPresentation,createPresentedRuntimeActionRequestFromToolCall,projectToolStartLabel};
+import{parseJsonObject}from"#shared/json.js";import{createRuntimeActionRequestFromToolCall}from"#harness/coordination.js";import{normalizePresentationText}from"#shared/presentation-text.js";function createPresentedRuntimeActionRequestFromToolCall(e){let t=createRuntimeActionRequestFromToolCall(e),n=projectToolLabel(e.tools.get(e.toolCall.toolName),`start`,t.input);return n===void 0?{action:t}:{action:t,presentationLabel:n}}function projectToolLabel(e,t,n,r){let i=e?.label?.[t];if(i!==void 0&&n!==void 0)try{let e=normalizePresentationText(i(parseJsonObject(n),r));return e===``?void 0:e}catch{return}}export{createPresentedRuntimeActionRequestFromToolCall,projectToolLabel};

package/dist/src/harness/action-result-helpers.d.ts

@@ -1,5 +1,5 @@
 import type { ModelMessage, ToolSet, TypedToolError, TypedToolResult } from "ai";
-import type { RuntimeActionResult, RuntimeToolResultActionResult } from "#shared/action-types.js";
+import type { RuntimeToolResultActionResult } from "#shared/action-types.js";
 type ToolResponsePart = Extract<ModelMessage, {
     role: "tool";
 }>["content"][number];
@@ -9,7 +9,7 @@ type ToolResultPart = Extract<ToolResponsePart, {
 /**
  * Builds a `RuntimeToolResultActionResult` from a raw tool output value.
  *
- * This is the single coercion point for `action.result` projection. Both
+ * This is the single coercion point for `call.settled` projection. Both
  * native tool execution (via {@link createRuntimeToolResultFromStepResult} /
  * {@link createRuntimeToolResultFromMessagePart}) and Workflow child calls
  * funnel through here, so the raw-output-vs-`toModelOutput` decision —
@@ -33,12 +33,6 @@ export declare function createRuntimeToolResultFromStepResult(toolResult: TypedT
  * `tool-error` part.
  */
 export declare function createRuntimeToolResultFromToolError(toolError: TypedToolError<ToolSet>): RuntimeToolResultActionResult;
-/**
- * The action result a call's tool result reports. A skill load reports the
- * `load-skill-result` of the skill its `input` names, as its call reports a
- * `load-skill` action.
- */
-export declare function toActionResult(result: RuntimeToolResultActionResult, input: unknown): RuntimeActionResult;
 /**
  * Builds the inline tool-result message part that repairs model history after a
  * local tool execution error.

package/dist/src/harness/action-result-helpers.js

@@ -1 +1 @@
-import{skillTarget}from"#shared/action-request-name.js";import{toError}from"#shared/errors.js";import{SKILL_ENTRY_NAME}from"#protocol/catalog-tools.js";import{parseJsonValue}from"#shared/json.js";import{authorizationPendingAsJsonObject,isAuthorizationPendingModelOutput,isAuthorizationSignal}from"#harness/authorization.js";import{withToolOutputSerializationError}from"#harness/tool-output-serialization.js";function toJsonValue(e){return isAuthorizationSignal(e)?parseJsonValue(authorizationPendingAsJsonObject({connections:e.challenges.map(e=>e.name)})):isAuthorizationPendingModelOutput(e)?parseJsonValue(authorizationPendingAsJsonObject(e)):parseJsonValue(e===void 0?null:e)}function createRuntimeToolResultFromValue(e){let t=e.isError===!0&&e.output instanceof Error?e.output:void 0,n={callId:e.callId,kind:`tool-result`,output:toolResultOutputToJsonValue({output:{type:e.isError===!0?`error-json`:`json`,value:t===void 0?e.output:t.message},toolCallId:e.callId,toolName:e.toolName}),toolName:e.toolName};return e.isError===!0?t===void 0?{...n,isError:!0}:{...n,errorName:t.name,isError:!0}:n}function createRuntimeToolResultFromStepResult(e){return createRuntimeToolResultFromValue({callId:e.toolCallId,output:e.output,toolName:e.toolName})}function createRuntimeToolResultFromToolError(e){return createRuntimeToolResultFromValue({callId:e.toolCallId,isError:!0,output:toError(e.error),toolName:e.toolName})}function toActionResult(e,t){let n=e.toolName===SKILL_ENTRY_NAME?skillTarget(t):void 0;return n===void 0?e:{callId:e.callId,isError:e.isError,kind:`load-skill-result`,name:n,output:e.output}}function createToolResultMessagePartFromToolError(e){return{type:`tool-result`,toolCallId:e.toolCallId,toolName:e.toolName,output:{type:`error-text`,value:toError(e.error).message}}}function createRuntimeToolResultFromMessagePart(e,t){return createRuntimeToolResultFromValue({callId:e.toolCallId,output:toolResultOutputToJsonValue({output:e.output,toolCallId:e.toolCallId,toolName:t}),toolName:t,isError:isToolResultError(e.output)})}function toolResultOutputToJsonValue(e){return withToolOutputSerializationError({boundary:`action.result`,toolCallId:e.toolCallId,toolName:e.toolName},()=>{switch(e.output.type){case`text`:case`error-text`:return e.output.value;case`json`:case`error-json`:return toJsonValue(e.output.value);case`execution-denied`:return{code:`TOOL_EXECUTION_DENIED`,message:e.output.reason??`Tool execution was denied.`};case`content`:return toJsonValue(e.output.value)}})}function isToolResultError(e){return e.type===`error-json`||e.type===`error-text`||e.type===`execution-denied`}export{createRuntimeToolResultFromMessagePart,createRuntimeToolResultFromStepResult,createRuntimeToolResultFromToolError,createRuntimeToolResultFromValue,createToolResultMessagePartFromToolError,isToolResultError,toActionResult};
+import{toError}from"#shared/errors.js";import{parseJsonValue}from"#shared/json.js";import{authorizationPendingAsJsonObject,isAuthorizationPendingModelOutput,isAuthorizationSignal}from"#harness/authorization.js";import{withToolOutputSerializationError}from"#harness/tool-output-serialization.js";function toJsonValue(e){return isAuthorizationSignal(e)?parseJsonValue(authorizationPendingAsJsonObject({connections:e.challenges.map(e=>e.name)})):isAuthorizationPendingModelOutput(e)?parseJsonValue(authorizationPendingAsJsonObject(e)):parseJsonValue(e===void 0?null:e)}function createRuntimeToolResultFromValue(e){let t=e.isError===!0&&e.output instanceof Error?e.output:void 0,n={callId:e.callId,kind:`tool-result`,output:toolResultOutputToJsonValue({output:{type:e.isError===!0?`error-json`:`json`,value:t===void 0?e.output:t.message},toolCallId:e.callId,toolName:e.toolName}),toolName:e.toolName};return e.isError===!0?t===void 0?{...n,isError:!0}:{...n,errorName:t.name,isError:!0}:n}function createRuntimeToolResultFromStepResult(e){return createRuntimeToolResultFromValue({callId:e.toolCallId,output:e.output,toolName:e.toolName})}function createRuntimeToolResultFromToolError(e){return createRuntimeToolResultFromValue({callId:e.toolCallId,isError:!0,output:toError(e.error),toolName:e.toolName})}function createToolResultMessagePartFromToolError(e){return{type:`tool-result`,toolCallId:e.toolCallId,toolName:e.toolName,output:{type:`error-text`,value:toError(e.error).message}}}function createRuntimeToolResultFromMessagePart(e,t){return createRuntimeToolResultFromValue({callId:e.toolCallId,output:toolResultOutputToJsonValue({output:e.output,toolCallId:e.toolCallId,toolName:t}),toolName:t,isError:isToolResultError(e.output)})}function toolResultOutputToJsonValue(e){return withToolOutputSerializationError({boundary:`action.result`,toolCallId:e.toolCallId,toolName:e.toolName},()=>{switch(e.output.type){case`text`:case`error-text`:return e.output.value;case`json`:case`error-json`:return toJsonValue(e.output.value);case`execution-denied`:return{code:`TOOL_EXECUTION_DENIED`,message:e.output.reason??`Tool execution was denied.`};case`content`:return toJsonValue(e.output.value)}})}function isToolResultError(e){return e.type===`error-json`||e.type===`error-text`||e.type===`execution-denied`}export{createRuntimeToolResultFromMessagePart,createRuntimeToolResultFromStepResult,createRuntimeToolResultFromToolError,createRuntimeToolResultFromValue,createToolResultMessagePartFromToolError,isToolResultError};

package/dist/src/harness/approval-outcome.d.ts

@@ -0,0 +1,32 @@
+import type { SettledCall } from "#harness/session-machine/transitions.js";
+import type { ResponseValue } from "#protocol/session-events/families/response.js";
+export declare const TOOL_EXECUTION_DENIED_MESSAGE = "Tool execution was denied.";
+type ApprovalTerminalStatus = "approved" | "denied" | "ignored" | "invalid";
+export declare function resolveApprovalOutcome(response: ResponseValue | undefined): {
+    readonly approved: boolean;
+    readonly reason: string | undefined;
+    readonly status: ApprovalTerminalStatus;
+};
+/**
+ * What the model reads when a call's tool went away before the call could run.
+ * `searchable` says whether the agent has `eve__search` to find another.
+ */
+export declare function unavailableToolMessage(toolName: string, searchable: boolean): string;
+/** Whether a parked call's dynamic entry has changed since the model was offered it. */
+export declare function changedSinceOffered(call: {
+    readonly version?: string;
+}, definition: {
+    readonly version?: string;
+} | undefined): boolean;
+/** What the model reads when a call's dynamic entry changed before the call could run. */
+export declare function changedToolMessage(toolName: string): string;
+/**
+ * A call that ends without running: its failed runtime result, which the lifecycle reports at the
+ * step's coordinates, and the `error-text` result the model reads.
+ */
+export declare function failedCall(call: {
+    readonly callId: string;
+    readonly message: string | Error;
+    readonly toolName: string;
+}): Required<Pick<SettledCall, "part" | "result">>;
+export {};

package/dist/src/harness/approval-outcome.js

@@ -0,0 +1 @@
+import{SEARCH_TOOL_NAME}from"#protocol/catalog-tools.js";import{createRuntimeToolResultFromValue}from"#harness/action-result-helpers.js";const TOOL_EXECUTION_DENIED_MESSAGE=`Tool execution was denied.`;function resolveApprovalOutcome(e){if(e===void 0)return{approved:!1,reason:`Ignored because the user continued without responding.`,status:`ignored`};if(e.optionId===`approve`)return{approved:!0,reason:void 0,status:`approved`};if(e.optionId===`cancel`||e.optionId===`deny`){let t=e.text?.trim();return{approved:!1,reason:t?`${TOOL_EXECUTION_DENIED_MESSAGE} The person who denied it wrote: ${JSON.stringify(t)}`:TOOL_EXECUTION_DENIED_MESSAGE,status:`denied`}}return{approved:!1,reason:`Invalid approval response.`,status:`invalid`}}function unavailableToolMessage(e,t){return`The tool "${e}" is no longer available, so the call didn't run. If the task still needs it, ${t?`find an available tool with ${SEARCH_TOOL_NAME} and make a new call`:`make a new call with an available tool`}.`}function changedSinceOffered(e,t){return t!==void 0&&e.version!==t.version}function changedToolMessage(e){return`The tool "${e}" changed since it was offered, so the call didn't run. If the task still needs it, request it again.`}function failedCall(e){let{callId:t,message:n,toolName:r}=e;return{part:{output:{type:`error-text`,value:n instanceof Error?n.message:n},toolCallId:t,toolName:r,type:`tool-result`},result:createRuntimeToolResultFromValue({callId:t,isError:!0,output:n,toolName:r})}}export{TOOL_EXECUTION_DENIED_MESSAGE,changedSinceOffered,changedToolMessage,failedCall,resolveApprovalOutcome,unavailableToolMessage};

package/dist/src/harness/attachment-staging.js

@@ -1 +1 @@
-import{createHash}from"node:crypto";import{buildSessionHandle}from"#channel/session.js";import{createLogger}from"#internal/logging.js";import{getAdapterKind}from"#channel/adapter.js";import{contextStorage,loadContext}from"#context/container.js";import{SandboxKey,SessionIdKey}from"#context/keys.js";import{deserializeUrlFilePart,isSerializedUrlFilePart}from"#internal/attachments/url-refs.js";import{basename,dirname,extname}from"node:path";import{ChannelKey}from"#runtime/sessions/runtime-context-keys.js";import{createFrameworkUserMessage}from"#harness/messages.js";import{DEFAULT_UPLOAD_POLICY,isMediaTypeAllowed}from"#public/channels/upload-policy.js";import{buildAdapterContext}from"#channel/adapter-context.js";import{verifyMediaType}from"#internal/attachments/media-metadata.js";import{readMediaMetadata}from"#internal/attachments/read-media-metadata.js";import{decodeSandboxRef,encodeSandboxRef,inlinesSandboxRefAsBytes,isSandboxRefUrl}from"#internal/attachments/sandbox-refs.js";import{isUnresolvedFileData,readFileData}from"#internal/attachments/data.js";import{EveAttachmentError}from"#internal/attachments/errors.js";import{maxBytesOf}from"#internal/attachments/limited-read.js";import{createPublicDownloads}from"#internal/attachments/public-link.js";const log=createLogger(`harness.attachment-staging`),UNSAFE_FILENAME_CHARS=/[^\w.-]+/g,CACHED_REF_BYTES_LIMIT=67108864,cachedRefBytes=new Map;let cachedRefBytesTotal=0;const MEDIA_TYPE_EXTENSIONS={"application/pdf":`.pdf`,"image/gif":`.gif`,"image/jpeg":`.jpg`,"image/png":`.png`,"image/webp":`.webp`};async function stageAttachmentsForAdapter(e,t,n){if(typeof e==`string`)return e;let r=reconstitueFilePartUrls(e),i=n.ctx.get(ChannelKey)?.uploadPolicy,a=createPublicDownloads(maxBytesOf(i??DEFAULT_UPLOAD_POLICY));return Promise.all(r.map(async e=>e.type===`file`?stageFilePart(e,t,n,a,i):e))}async function stageAttachmentsToSandbox(e){if(typeof e==`string`||!Array.isArray(e)||!hasFileParts(e))return e;let t=loadContext(),n=await activeSandbox(t.get(SandboxKey));if(n===null)return e.map(e=>e.type===`file`&&!isSandboxRefUrl(e.data)&&readFileData(e.data).kind!==`reference`?attachmentNote(e,`could not be stored: no sandbox is available.`):e);let r=t.get(ChannelKey);return stageAttachmentsForAdapter(e,n,r?buildAdapterContext(r,t):{ctx:t,state:{},session:buildSessionHandle(t)})}async function stageToolResultMedia(e){if(!e.some(hasInlineToolResultFile))return[...e];let t=await activeSandbox(contextStorage.getStore()?.get(SandboxKey));return Promise.all(e.map(async e=>{if(e.role!==`tool`||!hasInlineToolResultFile(e))return e;let n=await Promise.all(e.content.map(async e=>e.type===`tool-result`?{...e,output:await stageToolOutputFiles(e.output,t)}:e));return{...e,content:n}}))}async function hydrateSandboxAttachments(e){let t=replaceUnresolvedFileParts(e);if(!messagesContainSandboxRef(t))return t;let n=loadContext(),r=sandboxRefReader(n.get(SandboxKey),n.get(SessionIdKey));return Promise.all(t.map(async e=>{if(!messageContainsSandboxRef(e))return e;let t=await hydrateMessageContent(e.content,r);return{...e,content:t}}))}function sandboxRefReader(e,t){let n;return async r=>{let i=cacheKey(t,r),a=i===void 0?void 0:readCachedRefBytes(i);if(a!==void 0)return a;if(e===void 0)throw Error(`Cannot hydrate attachment ${r.path}: no SandboxKey is bound on the active eve context. Hydration must run inside a step scope with the framework sandbox provider installed.`);n??=activeSandbox(e);let o=await readSandboxRefBytes(r,await n);return o!==null&&i!==void 0&&cacheRefBytes(i,o),o}}function cacheKey(e,t){if(e!==void 0)return JSON.stringify([e,t.path,t.size,t.mediaType])}function readCachedRefBytes(e){let t=cachedRefBytes.get(e);return t!==void 0&&(cachedRefBytes.delete(e),cachedRefBytes.set(e,t)),t}function cacheRefBytes(e,t){if(!(t.byteLength>CACHED_REF_BYTES_LIMIT||cachedRefBytes.has(e))){cachedRefBytes.set(e,Buffer.from(t)),cachedRefBytesTotal+=t.byteLength;for(let[e,t]of cachedRefBytes){if(cachedRefBytesTotal<=CACHED_REF_BYTES_LIMIT)break;cachedRefBytes.delete(e),cachedRefBytesTotal-=t.byteLength}}}async function activeSandbox(e){if(e===void 0)return null;try{return await e.open()}catch(e){return log.warn(`session sandbox unavailable, degrading attachments to text`,{error:e}),null}}function replaceUnresolvedFileParts(e){let t=!1,n=e.map(e=>{if(e.role!==`user`||!Array.isArray(e.content)||!e.content.some(isUnresolvedFilePart))return e;t=!0;let n=e.content.map(e=>isUnresolvedFilePart(e)?attachmentNote(e,`could not be retrieved.`):e);return{...e,content:n}});return t?n:e}function isUnresolvedFilePart(e){return e.type===`file`&&!isSandboxRefUrl(e.data)&&isUnresolvedFileData(e.data)}function hasFileParts(e){for(let t of e)if(t.type===`file`)return!0;return!1}function messagesContainSandboxRef(e){for(let t of e)if(messageContainsSandboxRef(t))return!0;return!1}function messageContainsSandboxRef(e){let t=e.content;if(!Array.isArray(t))return!1;for(let e of t)if(isSandboxRefFilePart(e)||e.type===`tool-result`&&contentOutputParts(e.output).some(isToolOutputRefFile))return!0;return!1}function contentOutputParts(e){return e.type===`content`?e.value:[]}function hasInlineToolResultFile(e){return e.role===`tool`&&e.content.some(e=>e.type===`tool-result`&&contentOutputParts(e.output).some(isInlineToolOutputFile))}function isInlineToolOutputFile(e){return e.type===`file`&&e.data.type===`data`}function isToolOutputRefFile(e){return e.type===`file`&&e.data.type===`url`&&isSandboxRefUrl(e.data.url)}async function stageToolOutputFiles(e,t){if(e.type!==`content`||!e.value.some(isInlineToolOutputFile))return e;let n=await Promise.all(e.value.map(async e=>{if(!isInlineToolOutputFile(e)||e.data.type!==`data`)return e;let n=readFileData(e.data.data);if(n.kind===`link`)return e;if(t===null||n.kind!==`bytes`)return{text:`Returned file ${e.filename??`file`} (${e.mediaType}) could not be stored.`,type:`text`};let r=await writeSandboxRef(n.bytes,e.mediaType,e.filename,t);return{...e,data:{type:`url`,url:encodeSandboxRef(r)},mediaType:r.mediaType}}));return{...e,value:n}}function isSandboxRefFilePart(e){return typeof e==`object`&&!!e&&e.type===`file`&&isSandboxRefUrl(e.data)}async function hydrateMessageContent(e,t){return Array.isArray(e)?(await Promise.all(e.map(async e=>{if(isSandboxRefFilePart(e)){let n=decodeSandboxRef(e.data),r=renderSandboxRefAsTextPart(n);if(!inlinesSandboxRefAsBytes(n))return[r];let i=await t(n);return i===null?[renderMissingSandboxRef(n)]:[r,{...e,data:i,mediaType:n.mediaType}]}if(e.type===`tool-result`){let n=e;return[{...n,output:await hydrateToolOutput(n.output,t)}]}return[e]}))).flat():e}async function hydrateToolOutput(e,t){if(e.type!==`content`||!e.value.some(isToolOutputRefFile))return e;let n=await Promise.all(e.value.map(async e=>{if(!isToolOutputRefFile(e)||e.data.type!==`url`)return[e];let n=decodeSandboxRef(e.data.url),r=renderSandboxRefAsTextPart(n);if(!inlinesSandboxRefAsBytes(n))return[r];let i=await t(n);return i===null?[renderMissingSandboxRef(n)]:[r,{...e,data:{data:Buffer.from(i).toString(`base64`),type:`data`}}]}));return{...e,value:n.flat()}}async function readSandboxRefBytes(e,t){if(t===null)return null;let n=await t.readBinaryFile({path:e.path});return n===null?(log.warn(`sandbox-ref attachment bytes missing on hydration — degrading to text reference`,{mediaType:e.mediaType,path:e.path,size:e.size}),null):n.byteLength!==e.size||sha256Prefix(n)!==basename(dirname(e.path))?(log.warn(`sandbox-ref attachment bytes changed since staging — degrading to text reference`,{mediaType:e.mediaType,path:e.path,size:e.size}),null):n}function renderMissingSandboxRef(e){return{text:`FileNotFound: Current snapshot may be newer and does not contain ${e.path}.`,type:`text`}}function moveToolResultFilesToUserMessages(e){let t=[],n=[];for(let r of e){if(r.role!==`tool`&&n.length>0&&(t.push(createReturnedFilesMessage(n)),n=[]),r.role!==`tool`){t.push(r);continue}let e=r.content.map(e=>{if(e.type!==`tool-result`||e.output.type!==`content`)return e;let t=e.output.value.map(e=>{if(e.type!==`file`)return e;let t={data:e.data,mediaType:e.mediaType,type:`file`};return e.filename!==void 0&&(t.filename=e.filename),n.push(t),{text:`Attached file ${e.filename??`file`} (${e.mediaType}) follows this tool result.`,type:`text`}});return{...e,output:{...e.output,value:t}}});t.push({...r,content:e})}return n.length>0&&t.push(createReturnedFilesMessage(n)),t}function createReturnedFilesMessage(e){return createFrameworkUserMessage(`context.state`,[{text:`Files returned by the preceding tool results:`,type:`text`},...e])}function renderSandboxRefAsTextPart(e){return{text:`Attached file ${e.path} (${e.mediaType})`,type:`text`}}async function stageFilePart(e,t,n,r,i){if(isSandboxRefUrl(e.data))return e;let a=readFileData(e.data);if(a.kind===`bytes`)return stageResolvedBytes(e,{bytes:a.bytes},t,i);if(a.kind===`reference`)return e;if(a.kind===`unreadable`)return log.warn(`attachment data is not bytes, base64, or a URL — degrading to text part`,{filename:e.filename,mediaType:e.mediaType}),attachmentNote(e,`could not be read.`);let o;try{o=await resolveLink(a.url,n,r)}catch(t){if(!(t instanceof EveAttachmentError))throw t;return log.warn(`attachment resolver failed — degrading to text part`,{adapterKind:t.adapterKind,error:t.cause,filename:e.filename,kind:t.kind}),attachmentNote(e,`could not be retrieved: ${t.message}`)}return stageResolvedBytes(e,o,t,i)}function attachmentNote(e,t){return{text:`Attachment ${e.filename?.trim()||`file`} ${t}`,type:`text`}}async function stageResolvedBytes(e,t,n,r){let i=verifyMediaType(t.bytes,t.mediaType??e.mediaType??`application/octet-stream`);if(r!==void 0){let n=maxBytesOf(r);if(t.bytes.byteLength>n)return attachmentNote(e,`was not accepted: it is ${t.bytes.byteLength} bytes, over this channel's ${n}-byte upload limit.`);if(!isMediaTypeAllowed(i,r))return attachmentNote(e,`was not accepted: this channel doesn't accept ${i} files.`)}let a=await writeSandboxRef(t.bytes,i,t.filename??e.filename,n);return{...e,data:encodeSandboxRef(a),filename:a.path,mediaType:a.mediaType}}async function writeSandboxRef(e,t,n,r){let i=verifyMediaType(e,t),a=sha256Prefix(e),o=`.eve/attachments/${a}/${safeFilename(n,a,i)}`;await r.writeBinaryFile({content:e,path:o});let s={...readMediaMetadata(e,i),path:r.resolvePath(o)},c=cacheKey(contextStorage.getStore()?.get(SessionIdKey),s);return c!==void 0&&inlinesSandboxRefAsBytes(s)&&cacheRefBytes(c,e),s}async function resolveLink(e,t,n){let r=t.ctx.get(ChannelKey),i=r===void 0?`none`:getAdapterKind(r);if(r?.fetchFile!==void 0){let n;try{n=await r.fetchFile(e.href,t)}catch(e){throw e instanceof EveAttachmentError?new EveAttachmentError({adapterKind:i,cause:e.cause,kind:e.kind,message:e.message}):new EveAttachmentError({adapterKind:i,cause:e,kind:`resolver-threw`,message:`Attachment retrieval failed in the "${i}" channel.`})}if(n!==null)return Buffer.isBuffer(n)?{bytes:n}:n}return n(e,i)}function reconstitueFilePartUrls(e){let t=!1,n=e.map(e=>e.type===`file`&&isSerializedUrlFilePart(e.data)?(t=!0,{...e,data:deserializeUrlFilePart(e.data)}):e);return t?n:e}function sha256Prefix(e){return createHash(`sha256`).update(e).digest(`hex`).slice(0,16)}function safeFilename(e,t,n){let r=e===void 0?``:basename(e).replace(UNSAFE_FILENAME_CHARS,`_`),i=r.length>0?r:`file-${t}`,a=MEDIA_TYPE_EXTENSIONS[n];return a===void 0||extname(i)!==``?i:`${i}${a}`}export{hydrateSandboxAttachments,moveToolResultFilesToUserMessages,stageAttachmentsForAdapter,stageAttachmentsToSandbox,stageToolResultMedia};
+import{createHash}from"node:crypto";import{buildChannelContext}from"#channel/session.js";import{createLogger}from"#internal/logging.js";import{getAdapterKind}from"#channel/adapter.js";import{contextStorage,loadContext}from"#context/container.js";import{SandboxKey,SessionIdKey}from"#context/keys.js";import{deserializeUrlFilePart,isSerializedUrlFilePart}from"#internal/attachments/url-refs.js";import{basename,dirname,extname}from"node:path";import{ChannelKey}from"#runtime/sessions/runtime-context-keys.js";import{DEFAULT_UPLOAD_POLICY,isMediaTypeAllowed}from"#public/channels/upload-policy.js";import{createFrameworkUserMessage}from"#harness/messages.js";import{buildAdapterContext}from"#channel/adapter-context.js";import{verifyMediaType}from"#internal/attachments/media-metadata.js";import{readMediaMetadata}from"#internal/attachments/read-media-metadata.js";import{decodeSandboxRef,encodeSandboxRef,inlinesSandboxRefAsBytes,isSandboxRefUrl}from"#internal/attachments/sandbox-refs.js";import{isUnresolvedFileData,readFileData}from"#internal/attachments/data.js";import{EveAttachmentError}from"#internal/attachments/errors.js";import{maxBytesOf}from"#internal/attachments/limited-read.js";import{createPublicDownloads}from"#internal/attachments/public-link.js";const log=createLogger(`harness.attachment-staging`),UNSAFE_FILENAME_CHARS=/[^\w.-]+/g,CACHED_REF_BYTES_LIMIT=67108864,cachedRefBytes=new Map;let cachedRefBytesTotal=0;const MEDIA_TYPE_EXTENSIONS={"application/pdf":`.pdf`,"image/gif":`.gif`,"image/jpeg":`.jpg`,"image/png":`.png`,"image/webp":`.webp`};async function stageAttachmentsForAdapter(e,t,n){if(typeof e==`string`)return e;let r=reconstitueFilePartUrls(e),i=n.ctx.get(ChannelKey)?.uploadPolicy,a=createPublicDownloads(maxBytesOf(i??DEFAULT_UPLOAD_POLICY));return Promise.all(r.map(async e=>e.type===`file`?stageFilePart(e,t,n,a,i):e))}async function stageAttachmentsToSandbox(e){if(typeof e==`string`||!Array.isArray(e)||!hasFileParts(e))return e;let t=loadContext(),n=await activeSandbox(t.get(SandboxKey));if(n===null)return e.map(e=>e.type===`file`&&!isSandboxRefUrl(e.data)&&readFileData(e.data).kind!==`reference`?attachmentNote(e,`could not be stored: no sandbox is available.`):e);let r=t.get(ChannelKey);return stageAttachmentsForAdapter(e,n,r?buildAdapterContext(r,t):{ctx:t,state:{},session:buildChannelContext(t).session})}async function stageToolResultMedia(e){if(!e.some(hasInlineToolResultFile))return[...e];let t=await activeSandbox(contextStorage.getStore()?.get(SandboxKey));return Promise.all(e.map(async e=>{if(e.role!==`tool`||!hasInlineToolResultFile(e))return e;let n=await Promise.all(e.content.map(async e=>e.type===`tool-result`?{...e,output:await stageToolOutputFiles(e.output,t)}:e));return{...e,content:n}}))}async function hydrateSandboxAttachments(e){let t=replaceUnresolvedFileParts(e);if(!messagesContainSandboxRef(t))return t;let n=loadContext(),r=sandboxRefReader(n.get(SandboxKey),n.get(SessionIdKey));return Promise.all(t.map(async e=>{if(!messageContainsSandboxRef(e))return e;let t=await hydrateMessageContent(e.content,r);return{...e,content:t}}))}function sandboxRefReader(e,t){let n;return async r=>{let i=cacheKey(t,r),a=i===void 0?void 0:readCachedRefBytes(i);if(a!==void 0)return a;if(e===void 0)throw Error(`Cannot hydrate attachment ${r.path}: no SandboxKey is bound on the active eve context. Hydration must run inside a step scope with the framework sandbox provider installed.`);n??=activeSandbox(e);let o=await readSandboxRefBytes(r,await n);return o!==null&&i!==void 0&&cacheRefBytes(i,o),o}}function cacheKey(e,t){if(e!==void 0)return JSON.stringify([e,t.path,t.size,t.mediaType])}function readCachedRefBytes(e){let t=cachedRefBytes.get(e);return t!==void 0&&(cachedRefBytes.delete(e),cachedRefBytes.set(e,t)),t}function cacheRefBytes(e,t){if(!(t.byteLength>CACHED_REF_BYTES_LIMIT||cachedRefBytes.has(e))){cachedRefBytes.set(e,Buffer.from(t)),cachedRefBytesTotal+=t.byteLength;for(let[e,t]of cachedRefBytes){if(cachedRefBytesTotal<=CACHED_REF_BYTES_LIMIT)break;cachedRefBytes.delete(e),cachedRefBytesTotal-=t.byteLength}}}async function activeSandbox(e){if(e===void 0)return null;try{return await e.open()}catch(e){return log.warn(`session sandbox unavailable, degrading attachments to text`,{error:e}),null}}function replaceUnresolvedFileParts(e){let t=!1,n=e.map(e=>{if(e.role!==`user`||!Array.isArray(e.content)||!e.content.some(isUnresolvedFilePart))return e;t=!0;let n=e.content.map(e=>isUnresolvedFilePart(e)?attachmentNote(e,`could not be retrieved.`):e);return{...e,content:n}});return t?n:e}function isUnresolvedFilePart(e){return e.type===`file`&&!isSandboxRefUrl(e.data)&&isUnresolvedFileData(e.data)}function hasFileParts(e){for(let t of e)if(t.type===`file`)return!0;return!1}function messagesContainSandboxRef(e){for(let t of e)if(messageContainsSandboxRef(t))return!0;return!1}function messageContainsSandboxRef(e){let t=e.content;if(!Array.isArray(t))return!1;for(let e of t)if(isSandboxRefFilePart(e)||e.type===`tool-result`&&contentOutputParts(e.output).some(isToolOutputRefFile))return!0;return!1}function contentOutputParts(e){return e.type===`content`?e.value:[]}function hasInlineToolResultFile(e){return e.role===`tool`&&e.content.some(e=>e.type===`tool-result`&&contentOutputParts(e.output).some(isInlineToolOutputFile))}function isInlineToolOutputFile(e){return e.type===`file`&&e.data.type===`data`}function isToolOutputRefFile(e){return e.type===`file`&&e.data.type===`url`&&isSandboxRefUrl(e.data.url)}async function stageToolOutputFiles(e,t){if(e.type!==`content`||!e.value.some(isInlineToolOutputFile))return e;let n=await Promise.all(e.value.map(async e=>{if(!isInlineToolOutputFile(e)||e.data.type!==`data`)return e;let n=readFileData(e.data.data);if(n.kind===`link`)return e;if(t===null||n.kind!==`bytes`)return{text:`Returned file ${e.filename??`file`} (${e.mediaType}) could not be stored.`,type:`text`};let r=await writeSandboxRef(n.bytes,e.mediaType,e.filename,t);return{...e,data:{type:`url`,url:encodeSandboxRef(r)},mediaType:r.mediaType}}));return{...e,value:n}}function isSandboxRefFilePart(e){return typeof e==`object`&&!!e&&e.type===`file`&&isSandboxRefUrl(e.data)}async function hydrateMessageContent(e,t){return Array.isArray(e)?(await Promise.all(e.map(async e=>{if(isSandboxRefFilePart(e)){let n=decodeSandboxRef(e.data),r=renderSandboxRefAsTextPart(n);if(!inlinesSandboxRefAsBytes(n))return[r];let i=await t(n);return i===null?[renderMissingSandboxRef(n)]:[r,{...e,data:i,mediaType:n.mediaType}]}if(e.type===`tool-result`){let n=e;return[{...n,output:await hydrateToolOutput(n.output,t)}]}return[e]}))).flat():e}async function hydrateToolOutput(e,t){if(e.type!==`content`||!e.value.some(isToolOutputRefFile))return e;let n=await Promise.all(e.value.map(async e=>{if(!isToolOutputRefFile(e)||e.data.type!==`url`)return[e];let n=decodeSandboxRef(e.data.url),r=renderSandboxRefAsTextPart(n);if(!inlinesSandboxRefAsBytes(n))return[r];let i=await t(n);return i===null?[renderMissingSandboxRef(n)]:[r,{...e,data:{data:Buffer.from(i).toString(`base64`),type:`data`}}]}));return{...e,value:n.flat()}}async function readSandboxRefBytes(e,t){if(t===null)return null;let n=await t.readBinaryFile({path:e.path});return n===null?(log.warn(`sandbox-ref attachment bytes missing on hydration — degrading to text reference`,{mediaType:e.mediaType,path:e.path,size:e.size}),null):n.byteLength!==e.size||sha256Prefix(n)!==basename(dirname(e.path))?(log.warn(`sandbox-ref attachment bytes changed since staging — degrading to text reference`,{mediaType:e.mediaType,path:e.path,size:e.size}),null):n}function renderMissingSandboxRef(e){return{text:`FileNotFound: Current snapshot may be newer and does not contain ${e.path}.`,type:`text`}}function moveToolResultFilesToUserMessages(e){let t=[],n=[];for(let r of e){if(r.role!==`tool`&&n.length>0&&(t.push(createReturnedFilesMessage(n)),n=[]),r.role!==`tool`){t.push(r);continue}let e=r.content.map(e=>{if(e.type!==`tool-result`||e.output.type!==`content`)return e;let t=e.output.value.map(e=>{if(e.type!==`file`)return e;let t={data:e.data,mediaType:e.mediaType,type:`file`};return e.filename!==void 0&&(t.filename=e.filename),n.push(t),{text:`Attached file ${e.filename??`file`} (${e.mediaType}) follows this tool result.`,type:`text`}});return{...e,output:{...e.output,value:t}}});t.push({...r,content:e})}return n.length>0&&t.push(createReturnedFilesMessage(n)),t}function createReturnedFilesMessage(e){return createFrameworkUserMessage(`context.state`,[{text:`Files returned by the preceding tool results:`,type:`text`},...e])}function renderSandboxRefAsTextPart(e){return{text:`Attached file ${e.path} (${e.mediaType})`,type:`text`}}async function stageFilePart(e,t,n,r,i){if(isSandboxRefUrl(e.data))return e;let a=readFileData(e.data);if(a.kind===`bytes`)return stageResolvedBytes(e,{bytes:a.bytes},t,i);if(a.kind===`reference`)return e;if(a.kind===`unreadable`)return log.warn(`attachment data is not bytes, base64, or a URL — degrading to text part`,{filename:e.filename,mediaType:e.mediaType}),attachmentNote(e,`could not be read.`);let o;try{o=await resolveLink(a.url,n,r)}catch(t){if(!(t instanceof EveAttachmentError))throw t;return log.warn(`attachment resolver failed — degrading to text part`,{adapterKind:t.adapterKind,error:t.cause,filename:e.filename,kind:t.kind}),attachmentNote(e,`could not be retrieved: ${t.message}`)}return stageResolvedBytes(e,o,t,i)}function attachmentNote(e,t){return{text:`Attachment ${e.filename?.trim()||`file`} ${t}`,type:`text`}}async function stageResolvedBytes(e,t,n,r){let i=verifyMediaType(t.bytes,t.mediaType??e.mediaType??`application/octet-stream`);if(r!==void 0){let n=maxBytesOf(r);if(t.bytes.byteLength>n)return attachmentNote(e,`was not accepted: it is ${t.bytes.byteLength} bytes, over this channel's ${n}-byte upload limit.`);if(!isMediaTypeAllowed(i,r))return attachmentNote(e,`was not accepted: this channel doesn't accept ${i} files.`)}let a=await writeSandboxRef(t.bytes,i,t.filename??e.filename,n);return{...e,data:encodeSandboxRef(a),filename:a.path,mediaType:a.mediaType}}async function writeSandboxRef(e,t,n,r){let i=verifyMediaType(e,t),a=sha256Prefix(e),o=`.eve/attachments/${a}/${safeFilename(n,a,i)}`;await r.writeBinaryFile({content:e,path:o});let s={...readMediaMetadata(e,i),path:r.resolvePath(o)},c=cacheKey(contextStorage.getStore()?.get(SessionIdKey),s);return c!==void 0&&inlinesSandboxRefAsBytes(s)&&cacheRefBytes(c,e),s}async function resolveLink(e,t,n){let r=t.ctx.get(ChannelKey),i=r===void 0?`none`:getAdapterKind(r);if(r?.fetchFile!==void 0){let n;try{n=await r.fetchFile(e.href,t)}catch(e){throw e instanceof EveAttachmentError?new EveAttachmentError({adapterKind:i,cause:e.cause,kind:e.kind,message:e.message}):new EveAttachmentError({adapterKind:i,cause:e,kind:`resolver-threw`,message:`Attachment retrieval failed in the "${i}" channel.`})}if(n!==null)return Buffer.isBuffer(n)?{bytes:n}:n}return n(e,i)}function reconstitueFilePartUrls(e){let t=!1,n=e.map(e=>e.type===`file`&&isSerializedUrlFilePart(e.data)?(t=!0,{...e,data:deserializeUrlFilePart(e.data)}):e);return t?n:e}function sha256Prefix(e){return createHash(`sha256`).update(e).digest(`hex`).slice(0,16)}function safeFilename(e,t,n){let r=e===void 0?``:basename(e).replace(UNSAFE_FILENAME_CHARS,`_`),i=r.length>0?r:`file-${t}`,a=MEDIA_TYPE_EXTENSIONS[n];return a===void 0||extname(i)!==``?i:`${i}${a}`}export{hydrateSandboxAttachments,moveToolResultFilesToUserMessages,stageAttachmentsForAdapter,stageAttachmentsToSandbox,stageToolResultMedia};

package/dist/src/harness/authorization.d.ts

@@ -60,7 +60,7 @@ export interface AuthorizationResult {
  * Creates an authorization signal. Return this from a tool's execute
  * to suspend the session for OAuth or other external authorization.
  *
- * The harness emits `authorization.required` events for each challenge
+ * The harness emits sign-in `interaction.opened` events for each challenge
  * and parks the session. Channels render sign-in buttons.
  */
 export declare function requestAuthorization(challenges: readonly AuthorizationChallenge[]): AuthorizationSignal;
@@ -106,7 +106,7 @@ export declare function isAuthorizationSignal(value: unknown): value is Authoriz
 export declare function isAuthorizationPendingModelOutput(value: unknown): value is AuthorizationPendingModelOutput;
 /**
  * JSON-safe pending authorization output for model-facing tool results and
- * wire surfaces (`action.result`, telemetry). Omits OAuth URLs and user
+ * wire surfaces (`call.settled`, telemetry). Omits OAuth URLs and user
  * codes — connection names only.
  */
 export declare function authorizationPendingAsJsonObject(input: {
@@ -119,7 +119,6 @@ export declare function authorizationPendingAsJsonObject(input: {
 export declare function modelFacingAuthorizationOutput(signal: AuthorizationSignal): AuthorizationPendingModelOutput;
 /** Human-readable tool output for {@link modelFacingAuthorizationOutput}. */
 export declare function authorizationPendingModelText(connections: readonly string[]): string;
-export declare function isPendingAuthorizationToolOutput(value: unknown): boolean;
 /**
  * Physical hook token embedded in a session's authorization callback URLs.
  * The callback route resumes exactly this hook, so it is the stable inbox's

package/dist/src/harness/authorization.js

@@ -1 +1 @@
-import{sessionCommandHookToken,sessionInboxHookToken}from"#execution/session-inbox/address.js";import{loadContext}from"#context/container.js";import{SessionIdKey}from"#context/keys.js";import{createEveConnectionCallbackRoutePath}from"#protocol/routes.js";import{ContextKey}from"#context/key.js";import{createBrowserCallbackUrl}from"#execution/workflow-callback-url.js";import{createUlid}from"#shared/ulid.js";const AUTHORIZATION_BRAND=`__eveAuthorization`,AUTHORIZATION_PENDING_BRAND=`__eveAuthorizationPending`;function requestAuthorization(e){return{[AUTHORIZATION_BRAND]:!0,challenges:e}}function getAuthorizationResult(e){let t=loadContext().get(PendingAuthorizationResultKey);if(t&&t.length!==0)return e===void 0?t[0]:t.find(t=>t.name===e)}function getAuthorizationResults(){return loadContext().get(PendingAuthorizationResultKey)??[]}function consumeAuthorizationResult(e,t){let n=loadContext(),r=n.get(PendingAuthorizationResultKey);if(!r||r.length===0)return;let i=r.findIndex(n=>n.name===e&&n.instanceId===t);if(i===-1&&t!==void 0&&r.some(t=>t.name===e&&t.instanceId!==void 0))throw Error(`Authorization for "${e}" cannot complete because its resolved connection changed while sign-in was pending. Start sign-in again.`);if(i===-1)return;let a=r[i],o=r.filter((e,t)=>t!==i);return n.delete(PendingAuthorizationResultKey),o.length>0&&n.set(PendingAuthorizationResultKey,o),a}function getHookUrl(e,t){let n=loadContext(),r=n.get(SessionIdKey),i=n.get(CallbackBaseUrlKey),a=n.get(AuthorizationHookKey)??(r?authHookToken(r):void 0);if(a&&i)return createBrowserCallbackUrl(i,createEveConnectionCallbackRoutePath(e,t,a))}function createAuthorizationAttempt(e){let t=createUlid(),n=getHookUrl(e,t);return n===void 0?void 0:{attemptId:t,hookUrl:n}}function isAuthorizationSignal(e){return typeof e!=`object`||!e?!1:e[AUTHORIZATION_BRAND]===!0}function isAuthorizationPendingModelOutput(e){return typeof e!=`object`||!e?!1:e[AUTHORIZATION_PENDING_BRAND]===!0}function authorizationPendingAsJsonObject(e){return{[AUTHORIZATION_PENDING_BRAND]:!0,connections:[...e.connections]}}function modelFacingAuthorizationOutput(e){return authorizationPendingAsJsonObject({connections:e.challenges.map(e=>e.name)})}function authorizationPendingModelText(e){return e.length===0?`Authorization required. Waiting for the user to sign in.`:e.length===1?`Authorization required for ${e[0]}. Waiting for the user to sign in.`:`Authorization required for ${e.join(`, `)}. Waiting for the user to sign in.`}function isPendingAuthorizationToolOutput(e){return isAuthorizationPendingModelOutput(e)||isAuthorizationSignal(e)}function authHookToken(e){return sessionInboxHookToken(sessionCommandHookToken(e))}const PendingAuthorizationResultKey=new ContextKey(`eve.pendingAuthorizationResult`),CallbackBaseUrlKey=new ContextKey(`eve.callbackBaseUrl`),AuthorizationHookKey=new ContextKey(`eve.authorizationHook`);export{AuthorizationHookKey,CallbackBaseUrlKey,PendingAuthorizationResultKey,authHookToken,authorizationPendingAsJsonObject,authorizationPendingModelText,consumeAuthorizationResult,createAuthorizationAttempt,getAuthorizationResult,getAuthorizationResults,getHookUrl,isAuthorizationPendingModelOutput,isAuthorizationSignal,isPendingAuthorizationToolOutput,modelFacingAuthorizationOutput,requestAuthorization};
+import{sessionCommandHookToken,sessionInboxHookToken}from"#execution/session-inbox/address.js";import{loadContext}from"#context/container.js";import{SessionIdKey}from"#context/keys.js";import{createEveConnectionCallbackRoutePath}from"#protocol/routes.js";import{ContextKey}from"#context/key.js";import{createBrowserCallbackUrl}from"#execution/workflow-callback-url.js";import{createUlid}from"#shared/ulid.js";const AUTHORIZATION_BRAND=`__eveAuthorization`,AUTHORIZATION_PENDING_BRAND=`__eveAuthorizationPending`;function requestAuthorization(e){return{[AUTHORIZATION_BRAND]:!0,challenges:e}}function getAuthorizationResult(e){let t=loadContext().get(PendingAuthorizationResultKey);if(t&&t.length!==0)return e===void 0?t[0]:t.find(t=>t.name===e)}function getAuthorizationResults(){return loadContext().get(PendingAuthorizationResultKey)??[]}function consumeAuthorizationResult(e,t){let n=loadContext(),r=n.get(PendingAuthorizationResultKey);if(!r||r.length===0)return;let i=r.findIndex(n=>n.name===e&&n.instanceId===t);if(i===-1&&t!==void 0&&r.some(t=>t.name===e&&t.instanceId!==void 0))throw Error(`Authorization for "${e}" cannot complete because its resolved connection changed while sign-in was pending. Start sign-in again.`);if(i===-1)return;let a=r[i],o=r.filter((e,t)=>t!==i);return n.delete(PendingAuthorizationResultKey),o.length>0&&n.set(PendingAuthorizationResultKey,o),a}function getHookUrl(e,t){let n=loadContext(),r=n.get(SessionIdKey),i=n.get(CallbackBaseUrlKey),a=n.get(AuthorizationHookKey)??(r?authHookToken(r):void 0);if(a&&i)return createBrowserCallbackUrl(i,createEveConnectionCallbackRoutePath(e,t,a))}function createAuthorizationAttempt(e){let t=createUlid(),n=getHookUrl(e,t);return n===void 0?void 0:{attemptId:t,hookUrl:n}}function isAuthorizationSignal(e){return typeof e!=`object`||!e?!1:e[AUTHORIZATION_BRAND]===!0}function isAuthorizationPendingModelOutput(e){return typeof e!=`object`||!e?!1:e[AUTHORIZATION_PENDING_BRAND]===!0}function authorizationPendingAsJsonObject(e){return{[AUTHORIZATION_PENDING_BRAND]:!0,connections:[...e.connections]}}function modelFacingAuthorizationOutput(e){return authorizationPendingAsJsonObject({connections:e.challenges.map(e=>e.name)})}function authorizationPendingModelText(e){return e.length===0?`Authorization required. Waiting for the user to sign in.`:e.length===1?`Authorization required for ${e[0]}. Waiting for the user to sign in.`:`Authorization required for ${e.join(`, `)}. Waiting for the user to sign in.`}function authHookToken(e){return sessionInboxHookToken(sessionCommandHookToken(e))}const PendingAuthorizationResultKey=new ContextKey(`eve.pendingAuthorizationResult`),CallbackBaseUrlKey=new ContextKey(`eve.callbackBaseUrl`),AuthorizationHookKey=new ContextKey(`eve.authorizationHook`);export{AuthorizationHookKey,CallbackBaseUrlKey,PendingAuthorizationResultKey,authHookToken,authorizationPendingAsJsonObject,authorizationPendingModelText,consumeAuthorizationResult,createAuthorizationAttempt,getAuthorizationResult,getAuthorizationResults,getHookUrl,isAuthorizationPendingModelOutput,isAuthorizationSignal,modelFacingAuthorizationOutput,requestAuthorization};

package/dist/src/harness/call-executor.d.ts

@@ -0,0 +1,118 @@
+import type { ApprovalMemory, RememberRequest } from "#approval/evaluation.js";
+import type { SessionAuthContext } from "#channel/types.js";
+import type { ClearedBy } from "#protocol/session-events/families/call.js";
+import { type ModelMessage, type TelemetryOptions, type ToolResultPart, type ToolSet, type TypedToolCall, type TypedToolResult } from "ai";
+import { type AuthorizationSignal } from "#harness/authorization.js";
+import { type RunnableTool } from "#harness/tools.js";
+import type { HandleEventFn, HarnessToolLookup } from "#harness/types.js";
+import type { ApprovalAsk } from "#harness/session-machine/view.js";
+type ToolResponsePart = Extract<ModelMessage, {
+    role: "tool";
+}>["content"][number];
+/** A call's result, as the model reads it. */
+export interface CallResult {
+    readonly part: Extract<ToolResponsePart, {
+        type: "tool-result";
+    }>;
+}
+/** What the model reads for an approved call the turn's cancellation cut short. */
+export declare const APPROVED_CALL_INTERRUPTED_MESSAGE = "The turn was cancelled while this approved tool call was running. It may have partially run; it was not retried.";
+/** How a call's approval is decided before it runs. */
+type CallApproval = 
+/** A person approved it; the policy may still refuse it now. */
+"recheck"
+/** The model just made it; the policy decides whether it runs, waits for a person, or is denied. */
+ | "evaluate";
+/** A call that stopped for a sign-in: the tool returned the challenge instead of a result. */
+export interface ToolSignIn {
+    readonly callId: string;
+    readonly input: unknown;
+    readonly toolName: string;
+    readonly signal: AuthorizationSignal;
+    readonly version?: string;
+}
+/** How one call came out: its result for the model, or what it waits on instead. */
+export interface CallOutcome {
+    readonly remember?: RememberRequest;
+    readonly clearedBy?: ClearedBy;
+    readonly settled: readonly CallResult[];
+    /** What `execute` returned, for `endsTurn`. */
+    readonly toolResults: readonly TypedToolResult<ToolSet>[];
+    readonly awaitsApproval?: true;
+    readonly signIn?: ToolSignIn;
+}
+/**
+ * Runs one local call: it decides the approval, streams the call's progress and result, and
+ * returns the result the model reads. A call a person approved revalidates its input first.
+ */
+export declare function executeToolCall(call: {
+    readonly callId: string;
+    readonly input: unknown;
+    readonly toolName: string;
+}, input: {
+    readonly abortSignal: AbortSignal | undefined;
+    readonly approvalMemory?: ApprovalMemory;
+    readonly definition: RunnableTool;
+    readonly messages: readonly ModelMessage[];
+    readonly publish: HandleEventFn;
+    readonly telemetry?: TelemetryOptions;
+    /** The AI SDK's ID for the model call that made a fresh call. */
+    readonly modelCallId?: string;
+    /** Runs just before the tool does, as the step's steering protection. */
+    readonly beforeExecute?: () => void;
+    /** What cleared a call a person approved: the interaction that asked them. */
+    readonly clearedBy?: ClearedBy;
+    /** Who approved the call, which it reads as `ctx.approval`; it still runs as the requester. */
+    readonly responder?: SessionAuthContext;
+    /**
+     * Runs once the call settles, just before its result is reported: with why it didn't succeed,
+     * if it didn't. Not when it stops for a sign-in or the turn's cancellation cuts it short.
+     */
+    readonly beforeResult?: (failure?: Error | string) => Promise<void>;
+}, approval: CallApproval): Promise<CallOutcome>;
+/** What the local calls of one model response produced. */
+export interface InlineCallResults {
+    /** The calls' results, for the response's tool message. */
+    readonly parts: readonly ToolResultPart[];
+    /** What each call's `execute` returned, for `endsTurn`. */
+    readonly toolResults: readonly TypedToolResult<ToolSet>[];
+    /** The calls that wait on a person's approval. */
+    readonly approvals: readonly ApprovalAsk[];
+    /** The calls that stopped for a sign-in. */
+    readonly signIns: readonly ToolSignIn[];
+    readonly policyApprovals?: Readonly<Record<string, ClearedBy>>;
+}
+/** Nothing ran: the response ended early, or made no local calls. */
+export declare const NO_INLINE_CALLS: InlineCallResults;
+/**
+ * Runs the local calls a model response made. The AI SDK only calls the model: eve decides each
+ * call's approval and runs it the way it runs a call a person approved. A call to a tool that runs
+ * outside the step (a workflow or task tool) is decided here and left for the runtime.
+ */
+export declare function executeInlineCalls(input: {
+    readonly toolCalls: readonly TypedToolCall<ToolSet>[];
+    /** Calls whose input failed validation; they already have their result. */
+    readonly excludedCallIds: ReadonlySet<string>;
+    /** The step's entries: each call already names the entry it runs. */
+    readonly tools: HarnessToolLookup;
+    readonly approvalMemory: ApprovalMemory;
+    /** The conversation the tools read as `ctx.messages`. */
+    readonly messages: readonly ModelMessage[];
+    readonly publish: HandleEventFn;
+    readonly abortSignal: AbortSignal | undefined;
+    readonly telemetry?: TelemetryOptions;
+    /** The AI SDK's ID for the model call that made the calls. */
+    readonly modelCallId?: string;
+    /** Runs just before each tool does, so steering no longer interrupts the step. */
+    readonly beforeExecute: () => void;
+}): Promise<InlineCallResults>;
+/** Reports a call its approval policy refused: it settles rejected, without running. */
+export declare function publishDenial(call: {
+    readonly callId: string;
+    readonly input: unknown;
+    readonly toolName: string;
+}, input: {
+    readonly publish: HandleEventFn;
+    readonly reason: string | undefined;
+}): Promise<CallOutcome>;
+export {};

package/dist/src/harness/call-executor.js

@@ -0,0 +1 @@
+import{asSchema,generateId}from"ai";import{createLogger,logError}from"#internal/logging.js";import{displayTitle}from"#protocol/session-projection/display-name.js";import{toError}from"#shared/errors.js";import{toModelSchema}from"#tools/schema.js";import{isAuthorizationSignal,modelFacingAuthorizationOutput}from"#harness/authorization.js";import{toolCallModelOutput}from"#harness/tool-call-io.js";import{resolveToolCallInputObject}from"#harness/coordination.js";import{callProgress,callSettledFrom,callStarted}from"#harness/call-facts.js";import{decideApproval,invokeTool,isRunnableTool}from"#harness/tools.js";import{isAsyncIterable}from"#shared/async-iterable.js";import{throwIfTurnAborted}from"#harness/turn-cancellation.js";import{createRuntimeToolResultFromValue}from"#harness/action-result-helpers.js";import{TOOL_EXECUTION_DENIED_MESSAGE,failedCall}from"#harness/approval-outcome.js";import{isInvalidToolCall}from"#harness/tool-call-input-errors.js";import{projectToolLabel}from"#harness/action-presentation.js";const log=createLogger(`harness.tool-loop`),APPROVED_CALL_INTERRUPTED_MESSAGE=`The turn was cancelled while this approved tool call was running. It may have partially run; it was not retried.`;async function executeToolCall(e,t,n){let{callId:r,toolName:i,input:a}=e,{definition:o}=t,s=[],c=[],l=!1,u;try{if(throwIfTurnAborted(t.abortSignal),(n===`recheck`?await asSchema(toModelSchema(o.inputSchema,`input`)).validate?.(a):void 0)?.success===!1){let e=`The approved input is no longer valid for tool "${i}". Request a new tool call and approval.`;return await t.beforeResult?.(e),await t.publish(callSettledFrom(createRuntimeToolResultFromValue({callId:r,isError:!0,output:e,toolName:i}),{})),{settled:[{part:{type:`tool-result`,toolCallId:r,toolName:i,output:{type:`error-text`,value:e}}}],toolResults:c}}let e=await decideApproval(o,{abortSignal:t.abortSignal,callId:r,input:a,approvalMemory:t.approvalMemory,recheck:n===`recheck`});if(e.awaitsPerson===!0)return{awaitsApproval:!0,remember:e.remember,settled:s,toolResults:c};if(e.denied){await t.beforeResult?.(e.reason??TOOL_EXECUTION_DENIED_MESSAGE);let n=await publishDenial({callId:r,input:a,toolName:i},{publish:t.publish,reason:e.reason});return{settled:[...s,...n.settled],toolResults:c}}let d=t.clearedBy??e.clearedBy,f,p=!1,m=``,h,g=toolTelemetry(t.telemetry,{callId:t.modelCallId??`approved:${r}`,messages:[...t.messages],toolCall:{input:a,toolCallId:r,toolName:i,type:`tool-call`}});t.beforeExecute?.(),await g.started();let _=0;try{await g.execute(async()=>{let e=performance.now();try{l=!0,await t.publish(callStarted(r,d===void 0?{}:{clearedBy:d}));let e=invokeTool(o,a,{...t.responder!==void 0&&{approval:{responder:t.responder}},abortSignal:t.abortSignal,messages:[...t.messages],toolCallId:r}),i=n===`evaluate`?t.abortSignal:void 0;if(isAsyncIterable(e))for await(let n of untilAborted(e,i)){f=n;let e=withoutSignInSecrets(n);await t.publish(callProgress(r,e,projectToolLabel(o,`delta`,a,e)))}else f=await raceAbort(Promise.resolve(e),i)}finally{_=performance.now()-e}})}catch(e){await g.ended({error:e,input:a,toolCallId:r,toolName:i,type:`tool-error`},_),throwIfTurnAborted(t.abortSignal),logError(log,`tool execution failed`,e,{toolName:i,toolCallId:r}),p=!0,h=toError(e),f=h.message,m=modelFacingError(e)}if(p||await g.ended({input:a,output:withoutSignInSecrets(f),toolCallId:r,toolName:i,type:`tool-result`},_),!p&&isAuthorizationSignal(f)){let e={callId:r,input:a,signal:f,toolName:i};return{settled:s,signIn:o.version===void 0?e:{...e,version:o.version},toolResults:c}}return c.push({input:a,output:f,toolCallId:r,toolName:i,type:`tool-result`}),u={part:{output:p?{type:`error-text`,value:m}:await toolCallModelOutput(o,f,r),toolCallId:r,toolName:i,type:`tool-result`}},s.push(u),await t.beforeResult?.(p?h:void 0),await t.publish(callSettledFrom(createRuntimeToolResultFromValue({callId:r,isError:p,output:h??f,toolName:i}),{label:p?void 0:projectToolLabel(o,`complete`,a,f)})),{settled:s,toolResults:c}}catch(e){if(t.abortSignal?.aborted===!0)return l||throwIfTurnAborted(t.abortSignal),u===void 0?{settled:[interruptedResult(r,i)],toolResults:c}:{settled:[u],toolResults:c};let n=toError(e);logError(log,`tool call failed`,e,{toolName:i,toolCallId:r}),await t.beforeResult?.(n);let a=failedCall({callId:r,toolName:i,message:n});return await t.publish(callSettledFrom(a.result)),{settled:[{part:a.part}],toolResults:c}}}async function raceAbort(e,t){if(t===void 0)return await e;e.catch(()=>{}),t.throwIfAborted();let onAbort,n=new Promise((e,n)=>{onAbort=()=>n(t.reason),t.addEventListener(`abort`,onAbort,{once:!0})});try{return await Promise.race([e,n])}finally{t.removeEventListener(`abort`,onAbort)}}async function*untilAborted(e,t){let n=e[Symbol.asyncIterator](),r=!1;try{for(;;){let e=await raceAbort(n.next(),t);if(e.done===!0){r=!0;return}yield e.value}}finally{!r&&n.return!==void 0&&await raceAbort(Promise.resolve(n.return()),t)}}function modelFacingError(e){return e==null?`unknown error`:typeof e==`string`?e:e instanceof Error?e.toString():JSON.stringify(e)}function withoutSignInSecrets(e){return isAuthorizationSignal(e)?modelFacingAuthorizationOutput(e):e}function interruptedResult(e,t){return{part:{output:{type:`error-text`,value:APPROVED_CALL_INTERRUPTED_MESSAGE},toolCallId:e,toolName:t,type:`tool-result`}}}function toolTelemetry(e,t){let n=e===void 0||e.isEnabled===!1?[]:[e.integrations??[]].flat(),r={...t,functionId:e?.functionId,recordInputs:e?.recordInputs,recordOutputs:e?.recordOutputs,toolContext:void 0},notify=async e=>{await Promise.allSettled(n.map(async t=>await e(t)))};return{started:()=>notify(e=>e.onToolExecutionStart?.(r)),execute:async e=>{let wrapped=e;for(let e of n){if(e.executeTool===void 0)continue;let n=wrapped;wrapped=()=>e.executeTool({...r,execute:n,toolCallId:t.toolCall.toolCallId})}await wrapped()},ended:(e,t)=>notify(n=>n.onToolExecutionEnd?.({...r,toolExecutionMs:t,toolOutput:e}))}}const NO_INLINE_CALLS={approvals:[],parts:[],signIns:[],toolResults:[]};async function executeInlineCalls(e){let t=e.toolCalls.filter(t=>t.providerExecuted!==!0&&!isInvalidToolCall(t)&&!e.excludedCallIds.has(t.toolCallId)&&e.tools.get(t.toolName)!==void 0),n=await Promise.allSettled(t.map(async t=>{let n=e.tools.get(t.toolName),r={callId:t.toolCallId,input:t.input,toolName:t.toolName};try{let i=isRunnableTool(n)?await executeToolCall(r,{...e,definition:n},`evaluate`):await decideDeferredCall(r,n,e);return{call:t,executed:i,approval:i.awaitsApproval===!0?{...approvalRequest(t,n),remember:i.remember}:void 0}}catch(n){throwIfTurnAborted(e.abortSignal);let i=failedCall({...r,message:toError(n)});return await e.publish(callSettledFrom(i.result)),{call:t,executed:{settled:[{part:i.part}],toolResults:[]}}}})),r=n.find(e=>e.status===`rejected`);if(r?.status===`rejected`)throw r.reason;let i=n.flatMap(e=>e.status===`fulfilled`?[e.value]:[]);return{policyApprovals:Object.fromEntries(i.flatMap(({call:e,executed:t})=>t.clearedBy===void 0?[]:[[e.toolCallId,t.clearedBy]])),approvals:i.flatMap(({approval:e})=>e===void 0?[]:[e]),parts:i.flatMap(({executed:e})=>e.settled.map(e=>e.part)),signIns:i.flatMap(({executed:e})=>e.signIn===void 0?[]:[e.signIn]),toolResults:i.flatMap(({executed:e})=>e.toolResults)}}async function decideDeferredCall(e,t,n){if(t.approval===void 0)return{settled:[],toolResults:[]};let r=await decideApproval(t,{abortSignal:n.abortSignal,approvalMemory:n.approvalMemory,callId:e.callId,input:e.input});return r.awaitsPerson===!0?{awaitsApproval:!0,remember:r.remember,settled:[],toolResults:[]}:r.denied?await publishDenial(e,{publish:n.publish,reason:r.reason}):{settled:[],toolResults:[],clearedBy:r.clearedBy}}async function publishDenial(e,t){let n={output:{reason:t.reason,type:`execution-denied`},toolCallId:e.callId,toolName:e.toolName,type:`tool-result`};return await t.publish(callSettledFrom({callId:e.callId,isError:!0,kind:`tool-result`,output:{code:`TOOL_EXECUTION_DENIED`,message:t.reason??TOOL_EXECUTION_DENIED_MESSAGE,tool:{result:`not_run`}},toolName:e.toolName},{rejected:!0})),{settled:[{part:n}],toolResults:[]}}function approvalRequest(e,t){let{toolCallId:n,toolName:r}=e,i=resolveToolCallInputObject(e.input,{callId:n,toolName:r}),a=projectToolLabel(t,`start`,i)??displayTitle(r),o=authoredApprovalPrompt(e,t);return{call:{callId:n,input:i,toolName:r,...t?.version!==void 0&&{version:t.version}},interactionId:generateId(),request:{allowFreeform:!1,display:`confirmation`,kind:`approval`,options:[{id:`approve`,label:`Approve`},{id:`deny`,label:`Deny`}],prompt:o??`Approve ${a}?`}}}function authoredApprovalPrompt(e,t){let n=t?.approval;if(n===void 0||typeof n==`function`)return;let r=typeof e.input==`object`&&e.input!==null&&!Array.isArray(e.input)?e.input:{},i=n.prompt?.({callId:e.toolCallId,input:r,toolName:e.toolName});if(i!==void 0&&typeof i!=`string`)throw Error(`Tool "${e.toolName}" approval prompt must return a string.`);return i}export{APPROVED_CALL_INTERRUPTED_MESSAGE,NO_INLINE_CALLS,executeInlineCalls,executeToolCall,publishDenial};

package/dist/src/harness/call-facts.d.ts

@@ -0,0 +1,31 @@
+import type { SessionEvent } from "#protocol/session-event.js";
+import type { Cause, ErrorInfo, JsonValue } from "#protocol/session-events/envelope.js";
+import type { FactOf } from "#protocol/session-events/facts.js";
+import type { Capability, CapabilityKind, CallOwner, ClearedBy } from "#protocol/session-events/families/call.js";
+import type { HarnessToolDefinition } from "#harness/execute-tool.js";
+import type { RuntimeActionRequest, RuntimeActionResult } from "#shared/action-types.js";
+/** What a call invokes: a tool, an agent, the skill it loads, or a task control, with its label. */
+export declare function capabilityOf(action: RuntimeActionRequest, label?: string): Capability;
+/** What a call to an entry invokes, as its input starts streaming. */
+export declare function announcedKind(name: string, definition: Pick<HarnessToolDefinition, "behavior"> | undefined): CapabilityKind;
+/** The model asked for a call. */
+export declare function callRequested(input: {
+    readonly action: RuntimeActionRequest;
+    readonly owner: CallOwner;
+    readonly label?: string;
+    readonly inputError?: ErrorInfo;
+}): FactOf<"call.requested">;
+/** A call was cleared and began running. */
+export declare function callStarted(callId: string, options?: {
+    readonly clearedBy?: ClearedBy;
+}): FactOf<"call.started">;
+/** A call settled from its runtime result: failed if the result says so, otherwise completed. */
+export declare function callSettledFrom(result: RuntimeActionResult, options?: {
+    readonly label?: string;
+    readonly rejected?: boolean;
+    readonly cause?: Cause;
+}): FactOf<"call.settled">;
+/** A call's partial output, as progress. */
+export declare function callProgress(callId: string, output: unknown, label?: string): SessionEvent;
+/** A value as the wire carries it: JSON, with anything else as its string form. */
+export declare function toJsonValue(value: unknown): JsonValue;

package/dist/src/harness/call-facts.js

@@ -0,0 +1 @@
+import{isTaskControlTool}from"#protocol/task-tools.js";import{SKILL_ENTRY_NAME}from"#protocol/catalog-tools.js";import{defined,fact}from"#harness/facts.js";import{callOutcomeOf}from"#harness/call-outcome.js";function capabilityOf(e,t){let n=e.kind===`load-skill`?{kind:`skill`,name:e.name}:e.kind===`subagent-call`?{kind:`agent`,name:e.name}:e.kind===`remote-agent-call`?{kind:`agent`,name:e.name,remote:!0}:{kind:toolKind(e.toolName),name:e.toolName};return t===void 0?n:{...n,label:t}}function announcedKind(e,t){if(e===SKILL_ENTRY_NAME)return`skill`;let n=t?.behavior?.handling;return n?.kind===`dispatch`&&n.target.kind!==`workflow-tool-call`?`agent`:toolKind(e)}function toolKind(e){return isTaskControlTool(e)?`control`:`tool`}function callRequested(e){let{action:t,inputError:n}=e;return fact(`call.requested`,{callId:t.callId,capability:capabilityOf(t,e.label),input:n===void 0?toJsonValue(t.input):void 0,inputError:n,owner:e.owner})}function callStarted(e,t={}){return fact(`call.started`,{callId:e,clearedBy:t.clearedBy})}function callSettledFrom(e,t={}){let{error:n,outcome:r}=callOutcomeOf(e),i=t.rejected===!0;return fact(`call.settled`,{callId:e.callId,cause:t.cause??(i?{policy:`approval`}:void 0),error:n,outcome:i?`rejected`:r,output:e.output===void 0?void 0:toJsonValue(e.output),label:t.label})}function callProgress(e,t,n){return{data:defined({callId:e,output:toJsonValue(t),label:n}),type:`call.progress`}}function toJsonValue(e){if(e===void 0)return null;if(e===null||typeof e==`string`||typeof e==`boolean`)return e;if(typeof e==`number`)return Number.isFinite(e)?e:String(e);if(typeof e==`bigint`||typeof e==`symbol`||typeof e==`function`)return String(e);try{return JSON.parse(JSON.stringify(e))}catch{return String(e)}}export{announcedKind,callProgress,callRequested,callSettledFrom,callStarted,capabilityOf,toJsonValue};

package/dist/src/harness/call-outcome.d.ts

@@ -0,0 +1,6 @@
+import type { ErrorInfo } from "#protocol/session-events/envelope.js";
+import type { RuntimeActionResult } from "#shared/action-types.js";
+export declare function callOutcomeOf(result: RuntimeActionResult): {
+    readonly outcome: "completed" | "failed";
+    readonly error?: ErrorInfo;
+};

package/dist/src/harness/call-outcome.js

@@ -0,0 +1 @@
+function callOutcomeOf(e){if(e.isError===!0){let t=readOutputError(e.output)??{code:`ACTION_RESULT_FAILED`,message:formatOutput(e.output)};return{error:`errorName`in e&&e.errorName!==void 0?{...t,name:e.errorName}:t,outcome:`failed`}}return{outcome:`completed`}}function readOutputError(e){let t=parseRecord(e);if(t===void 0)return;let n=typeof t.code==`string`&&t.code.length>0?t.code:void 0,r=typeof t.message==`string`&&t.message.length>0?t.message:void 0;return n===void 0||r===void 0?void 0:{code:n,message:r}}function parseRecord(e){if(typeof e==`object`&&e)return e;if(typeof e!=`string`)return;let t=e.trim();if(t.length!==0)try{let e=JSON.parse(t);return typeof e==`object`&&e?e:void 0}catch{return}}function formatOutput(e){if(typeof e==`string`)return e;let t=JSON.stringify(e);return typeof t==`string`&&t.length>0?t:`Action failed.`}export{callOutcomeOf};

package/dist/src/harness/compaction/engine.d.ts

@@ -6,6 +6,17 @@ import type { CompactionConfig } from "#harness/types.js";
  * appended since.
  */
 export declare function getInputTokenCount(messages: readonly ModelMessage[], config: CompactionConfig, requestEnvelopeTokens?: number, previousEnvelopeTokens?: number): number;
+/** The settings without the last measured prompt, which a rewritten history no longer matches. */
+export declare function withoutPromptMeasurement(config: CompactionConfig): CompactionConfig;
+/**
+ * The settings with a model-reported prompt measurement and the envelope around it. Without a
+ * usable measurement, the next count is an estimate, and no envelope baseline applies.
+ */
+export declare function withPromptMeasurement(config: CompactionConfig, measured: {
+    readonly inputTokens?: number;
+    readonly promptMessageCount?: number;
+    readonly requestEnvelopeTokens?: number;
+}): CompactionConfig;
 /**
  * Returns true when the message history and fixed compaction-prompt envelope
  * exceed the compaction threshold.