pagegraph 0.14.1 → 0.15.1

package/dist/{pi-D3mMmYey.js → pi-Bz4BgZdC.js}

@@ -1,10 +1,10 @@
 import { n as __exportAll$1 } from "./rolldown-runtime-B-lAHAz2.js";
-import { $ as decodeUnknownEffect, A as Defect, Bi as none, Bn as runPromise, C as ConfigProvider, E as Boolean, Fn as provideService, Fr as findErrorOption, G as String$1, H as Number$1, Hn as runSync, K as Struct, L as Literal, Li as isSome, Lr as pretty, Nn as provide$1, Or as isSuccess, Q as Unknown, R as Literals, S as option, T as ArraySchema, Tn as mapError, U as Record, V as NullOr, Vi as some, Vn as runPromiseExit, Z as Union, _ as prependUrl, _t as make$1, a as layer$1, b as String$2, c as mapRequest, dn as fn, er as timeoutOption, fr as provide, g as post, gn as gen, h as get, i as normalizeResearchState, jn as orElseSucceed, l as retryTransient, ln as fail, lr as effect, m as bodyJsonUnsafe, n as decodeActionState, ni as format, o as HttpClient, oi as minutes, ot as optional, pn as forEach, q as TaggedError, qn as succeed, r as decodeResearchState, rn as catch_, si as seconds, sr as withSpan, t as actionStateJsonSchema, tr as tryPromise, un as flatMap, v as setHeaders, vt as value, w as fromEnv, wn as map, x as all, xi as Service$1, y as Redacted, zi as match } from "./state-BuJP_3Lr.js";
+import { An as fn, B as fromEnv, Bi as Service$1, E as resolveRepositoryReadPath, Ei as seconds, Er as withSpan, F as Redacted, Fn as gen, H as Boolean, I as String$2, It as make$1, K as Defect, L as all, Lt as value, Mn as forEach, On as fail, Or as effect, Qn as provide$1, R as option, S as normalizeEditPaths, Sn as catch_, Ti as minutes, Tt as optional, Un as map, V as ArraySchema, Wn as mapError, Xn as orElseSucceed, _ as prependUrl, _t as decodeUnknownEffect, a as layer$1, aa as none, ar as runPromise, at as NullOr, b as applyWorkflowEdits, br as tryPromise, c as mapRequest, dt as TaggedError, ei as findErrorOption, er as provideService, et as Literal, fr as succeed, g as post, gt as Unknown, h as get, ht as Union, i as salvageResearchState, ia as match, jr as provide, kn as flatMap, l as retryTransient, lt as String$1, m as bodyJsonUnsafe, n as dropNulls, na as isSome, ni as pretty, o as HttpClient, oa as some, or as runPromiseExit, ot as Number$1, qr as isSuccess, r as normalizeResearchState, sr as runSync, st as Record, t as decodeResearchState, tt as Literals, ut as Struct, v as setHeaders, x as decodeActionState, xi as format, y as actionStateJsonSchema, yr as timeoutOption, z as ConfigProvider } from "./state-2ikjo7uI.js";
 import { a as ANTHROPIC_OAUTH_TOKEN_ENV, c as ANTHROPIC_WORKSPACE_ID_ENV, i as ANTHROPIC_IDENTITY_TOKEN_FILE_ENV, l as findEnvKeys, n as ANTHROPIC_AUTH_TOKEN_ENV, o as ANTHROPIC_ORGANIZATION_ID_ENV, r as ANTHROPIC_FEDERATION_RULE_ID_ENV, s as ANTHROPIC_SERVICE_ACCOUNT_ID_ENV, t as ANTHROPIC_API_KEY_ENV, u as getEnvApiKey } from "./env-api-keys-C-OA0yM-.js";
 import { D as lazyApi, _ as normalizeContext, b as toToolDeclaration, d as getCurrentTools, i as createProvider, l as getCurrentSystemMessage, m as getToolStateChanges, r as createModels, s as createInitialSystemMessage, u as getCurrentSystemPrompt } from "./models-DcT5qOEL.js";
-import { $ as Ref$1, A as Literal$1, At as IsNumber$1, B as Intersect, Bt as SomeAll$1, C as Number$2, Ct as IsInteger$1, D as IsLiteralBoolean, Dt as IsMinLength$2, E as IsLiteralBigInt, Et as IsMaxLength$2, F as IsBigInt$2, Ft as IsUndefined$1, G as IsCyclic, H as IsEnum$1, I as IsCodec, It as IsUnsafePropertyKey, J as _Object_, K as Unknown$1, L as Hash, Lt as IsValueLike, M as IsInteger$2, Mt as IsObjectNotArray$1, N as Boolean$1, Nt as IsString$1, O as IsLiteralNumber, Ot as IsMultipleOf$1, P as IsBoolean$2, Pt as IsSymbol$1, Q as IsRef$1, R as hash_exports, Rt as Keys$1, S as IsNumber$2, St as IsGreaterThan$1, T as IsLiteral, Tt as IsLessThan$1, U as Match$1, V as IsIntersect, Vt as guard_exports, W as Unsafe, X as Optional, Y as IsOptional, Z as IsNever, _ as IsUnion, _t as IsConstructor$1, a as With, at as IsSchema$1, b as String$3, bt as IsFunction$1, c as IsUndefined$2, ct as Counted$1, d as RecordKey, dt as Every$1, et as IsFunction$2, f as RecordPattern, ft as EveryAll, g as TemplateLiteralDecode, gt as IsBoolean$1, h as Tuple, ht as IsBigInt$1, i as Instantiate, it as _Array_, j as Integer, jt as IsObject$1, k as IsLiteralString, kt as IsNull$1, l as IsRecord, lt as Entries$2, m as IsTuple, mt as IsArray$1, n as Priority, nt as ArrayOptions, o as IsTemplateLiteral, ot as Clone$1, p as RecordValue, pt as HasPropertyKey$1, q as IsObject$2, r as Evaluate$1, rt as IsArray$2, s as IsVoid, st as Get$3, tt as IsConstructor$2, u as Record$1, ut as EntriesRegExp, v as Union$1, vt as IsDeepEqual$1, w as IsNull$2, wt as IsLessEqualThan$1, x as IsSymbol$2, xt as IsGreaterEqualThan$1, y as IsString$2, yt as IsEqual$1, z as Unreachable, zt as Some$1 } from "./dist-cFoAzruL.js";
-import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
-import { lstat, mkdir, open, readFile, readdir, realpath, writeFile } from "node:fs/promises";
+import { $ as Ref$1, A as Literal$1, At as IsNumber$1, B as Intersect, Bt as SomeAll$1, C as Number$2, Ct as IsInteger$1, D as IsLiteralBoolean, Dt as IsMinLength$2, E as IsLiteralBigInt, Et as IsMaxLength$2, F as IsBigInt$2, Ft as IsUndefined$1, G as IsCyclic, H as IsEnum$1, I as IsCodec, It as IsUnsafePropertyKey, J as _Object_, K as Unknown$1, L as Hash, Lt as IsValueLike, M as IsInteger$2, Mt as IsObjectNotArray$1, N as Boolean$1, Nt as IsString$1, O as IsLiteralNumber, Ot as IsMultipleOf$1, P as IsBoolean$2, Pt as IsSymbol$1, Q as IsRef$1, R as hash_exports, Rt as Keys$1, S as IsNumber$2, St as IsGreaterThan$1, T as IsLiteral, Tt as IsLessThan$1, U as Match$1, V as IsIntersect, Vt as guard_exports, W as Unsafe, X as Optional, Y as IsOptional, Z as IsNever, _ as IsUnion, _t as IsConstructor$1, a as With, at as IsSchema$1, b as String$3, bt as IsFunction$1, c as IsUndefined$2, ct as Counted$1, d as RecordKey, dt as Every$1, et as IsFunction$2, f as RecordPattern, ft as EveryAll, g as TemplateLiteralDecode, gt as IsBoolean$1, h as Tuple, ht as IsBigInt$1, i as Instantiate, it as _Array_, j as Integer, jt as IsObject$1, k as IsLiteralString, kt as IsNull$1, l as IsRecord, lt as Entries$2, m as IsTuple, mt as IsArray$1, n as Priority, nt as ArrayOptions, o as IsTemplateLiteral, ot as Clone$1, p as RecordValue, pt as HasPropertyKey$1, q as IsObject$2, r as Evaluate$1, rt as IsArray$2, s as IsVoid, st as Get$3, tt as IsConstructor$2, u as Record$1, ut as EntriesRegExp, v as Union$1, vt as IsDeepEqual$1, w as IsNull$2, wt as IsLessEqualThan$1, x as IsSymbol$2, xt as IsGreaterEqualThan$1, y as IsString$2, yt as IsEqual$1, z as Unreachable, zt as Some$1 } from "./dist-Br2oOB2Q.js";
+import { relative, resolve } from "node:path";
+import { mkdir, open, readFile, readdir, realpath, writeFile } from "node:fs/promises";
 //#region node_modules/typebox/build/guard/emit.mjs
 const identifierRegExp = /^[\p{ID_Start}_$][\p{ID_Continue}_$\u200C\u200D]*$/u;
 /** Returns true if this value is a valid JavaScript identifier */
@@ -56321,6 +56321,34 @@ const executorTools = (options) => [{
 }];
 //#endregion
 //#region src/workflows/executor.ts
+/** Retains complete Executor outcomes even when the model-facing preview is truncated. */
+const persistExecutorToolResults = (toolset, runDirectory) => {
+	const directory = resolve(runDirectory, "tool-results");
+	let sequence;
+	return {
+		trace: toolset.trace,
+		tools: toolset.tools.map((tool) => tool.name !== "executor_execute" ? tool : {
+			...tool,
+			execute: async (...args) => {
+				const result = await tool.execute(...args);
+				await mkdir(directory, { recursive: true });
+				if (sequence === void 0) {
+					const entries = await readdir(directory);
+					sequence = Math.max(0, ...entries.flatMap((name) => /^\d+\.json$/.test(name) ? [Number(name.slice(0, -5))] : []));
+				}
+				const path = resolve(directory, `${++sequence}.json`);
+				await writeFile(path, JSON.stringify(result.details ?? null, null, 2) + "\n", { flag: "wx" });
+				return result.content.some((part) => part.type === "text" && /\[truncated \d+ chars\]/.test(part.text)) ? {
+					...result,
+					content: [...result.content, {
+						type: "text",
+						text: `Full Executor result: ${path}. Use read_file to read it; paginate with offset and maxBytes when needed.`
+					}]
+				} : result;
+			}
+		})
+	};
+};
 const executionEvidence = (record) => {
 	if (record.isError) return void 0;
 	const succeeded = (record.toolCalls ?? []).filter((call) => !call.isError).map((call) => call.path);
@@ -56368,74 +56396,15 @@ const repositoryToolNames = /* @__PURE__ */ new Set([
 	"list_files",
 	"search_text"
 ]);
-const writeToolNames = /* @__PURE__ */ new Set(["write_file", "edit_file"]);
-const missingPath = (cause) => cause instanceof Error && "code" in cause && cause.code === "ENOENT";
-const resolveWritablePath = async (path) => {
-	let ancestor = path;
-	const suffix = [];
-	while (true) try {
-		return resolve(await realpath(ancestor), ...suffix);
-	} catch (cause) {
-		if (!missingPath(cause)) throw cause;
-		try {
-			if ((await lstat(ancestor)).isSymbolicLink()) throw new Error(`Repository path has a dangling symlink: ${path}`);
-		} catch (statCause) {
-			if (!missingPath(statCause)) throw statCause;
-		}
-		const parent = dirname(ancestor);
-		if (parent === ancestor) throw cause;
-		suffix.unshift(relative(parent, ancestor));
-		ancestor = parent;
-	}
-};
-const writableRepositoryPath = async (root, path, options) => {
-	const projectRoot = await realpath(root);
-	const requested = resolve(projectRoot, path);
-	if (!insideRoot(projectRoot, requested)) throw new Error(`Repository path escapes project root: ${path}`);
-	const resolved = await resolveWritablePath(requested);
-	if (!insideRoot(projectRoot, resolved)) throw new Error(`Repository path escapes project root through a symlink: ${path}`);
-	if ([requested, resolved].some((target) => relative(projectRoot, target).split(sep).some((part) => part === ".git" || part === "node_modules"))) throw new Error(`Repository write targets a protected directory: ${path}`);
-	const forbidden = [
-		resolve(projectRoot, ".git"),
-		resolve(projectRoot, "node_modules"),
-		resolve(projectRoot, options.runsDirectory),
-		resolve(projectRoot, options.presetDirectory)
-	];
-	for (const directory of forbidden) {
-		const actual = await resolveWritablePath(directory);
-		if (insideRoot(directory, requested) || insideRoot(actual, resolved)) throw new Error(`Repository write targets a protected directory: ${path}`);
-	}
-	const existing = await lstat(resolved).catch((error) => {
-		if (error instanceof Error && "code" in error && error.code === "ENOENT") return void 0;
-		throw error;
-	});
-	if (existing !== void 0 && existing.nlink > 1) throw new Error(`Repository write targets a hard-linked file: ${path}`);
-	return resolved;
-};
-const insideRoot = (root, path) => {
-	const pathFromRoot = relative(root, path);
-	return pathFromRoot !== ".." && !pathFromRoot.startsWith(`..${sep}`) && !isAbsolute(pathFromRoot);
-};
-const repositoryPath = async (root, path) => {
-	const projectRoot = await realpath(root);
-	const requested = resolve(projectRoot, path);
-	if (!insideRoot(projectRoot, requested) && !insideRoot(resolve(root), requested)) throw new Error(`Repository path escapes project root: ${path}`);
-	const resolved = await realpath(requested);
-	if (!insideRoot(projectRoot, resolved)) throw new Error(`Repository path escapes project root through a symlink: ${path}`);
-	return resolved;
-};
 const pathArgument = (args) => {
 	if (typeof args !== "object" || args === null || !("path" in args) || typeof args.path !== "string") throw new Error("Repository tools require a string path");
 	return args.path;
 };
-const guardRepositoryToolCall = (root, writeOptions) => async ({ toolCall, args }, signal) => {
-	if (!repositoryToolNames.has(toolCall.name) && !writeToolNames.has(toolCall.name)) return void 0;
+const guardRepositoryToolCall = (root, readOptions) => async ({ toolCall, args }, signal) => {
+	if (!repositoryToolNames.has(toolCall.name)) return void 0;
 	try {
 		signal?.throwIfAborted();
-		if (writeToolNames.has(toolCall.name)) {
-			if (!writeOptions) throw new Error("Repository writes are unavailable in this workflow phase");
-			await writableRepositoryPath(root, pathArgument(args), writeOptions);
-		} else await repositoryPath(root, pathArgument(args));
+		await resolveRepositoryReadPath(readOptions?.repositoryRoot ?? root, pathArgument(args), readOptions);
 		return;
 	} catch (error) {
 		return {
@@ -56444,15 +56413,20 @@ const guardRepositoryToolCall = (root, writeOptions) => async ({ toolCall, args
 		};
 	}
 };
-const readBoundedFile = async (path, signal) => {
+const readBoundedFile = async (path, signal, offset = 0, maxBytes = MAX_FILE_BYTES) => {
 	signal?.throwIfAborted();
 	const file = await open(path, "r");
 	try {
 		if (!(await file.stat()).isFile()) throw new Error(`Repository path is not a regular file: ${path}`);
-		const buffer = Buffer.alloc(65537);
-		const { bytesRead } = await file.read(buffer, 0, buffer.length, 0);
+		const buffer = Buffer.alloc(maxBytes + 1);
+		const { bytesRead } = await file.read(buffer, 0, buffer.length, offset);
 		signal?.throwIfAborted();
-		return buffer.subarray(0, Math.min(bytesRead, MAX_FILE_BYTES)).toString("utf8") + (bytesRead > MAX_FILE_BYTES ? "\n[File truncated at 64 KiB]" : "");
+		let consumed = Math.min(bytesRead, maxBytes);
+		if (bytesRead > maxBytes) {
+			while (consumed > 0 && (buffer[consumed] & 192) === 128) consumed--;
+			if (consumed === 0) throw new Error("read_file maxBytes cannot fit the next UTF-8 character; increase maxBytes");
+		}
+		return buffer.subarray(0, consumed).toString("utf8") + (bytesRead > maxBytes ? `\n[File truncated; continue with read_file offset=${offset + consumed}]` : "");
 	} finally {
 		await file.close();
 	}
@@ -56464,14 +56438,14 @@ const result = (text) => ({
 	}],
 	details: void 0
 });
-const discoverFiles = async (root, directory, recursive, signal) => {
+const discoverFiles = async (root, directory, recursive, signal, options) => {
 	const files = [];
 	const pending = [directory];
 	let inspected = 0;
 	while (pending.length > 0 && inspected < MAX_ENTRIES) {
 		signal?.throwIfAborted();
 		const next = pending.shift();
-		const entries = (await readdir(await repositoryPath(root, next), { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name));
+		const entries = (await readdir(await resolveRepositoryReadPath(root, next, options), { withFileTypes: true })).sort((a, b) => a.name.localeCompare(b.name));
 		for (const entry of entries) {
 			if (++inspected > MAX_ENTRIES) break;
 			const path = resolve(next, entry.name);
@@ -56481,13 +56455,26 @@ const discoverFiles = async (root, directory, recursive, signal) => {
 	}
 	return files;
 };
-const createRepositoryTools = (root) => [
+const byteArgument = (args, key, fallback, minimum, maximum) => {
+	const value = typeof args === "object" && args !== null ? Reflect.get(args, key) : void 0;
+	if (value === void 0) return fallback;
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < minimum || value > maximum) throw new Error(`read_file ${key} must be an integer between ${minimum} and ${maximum}`);
+	return value;
+};
+const createRepositoryTools = (root, options = {}) => [
 	{
 		name: "read_file",
 		label: "Read repository file",
-		description: "Read a UTF-8 file within the project root, limited to 64 KiB.",
-		parameters: _Object_({ path: String$3() }),
-		execute: async (_id, args, signal) => result(await readBoundedFile(await repositoryPath(root, pathArgument(args)), signal))
+		description: "Read a UTF-8 repository or run-artifact file. offset is a byte offset (default 0); maxBytes is at most 65536. A truncated page tells you the next offset.",
+		parameters: _Object_({
+			path: String$3(),
+			offset: Optional(Integer({ minimum: 0 })),
+			maxBytes: Optional(Integer({
+				minimum: 1,
+				maximum: MAX_FILE_BYTES
+			}))
+		}),
+		execute: async (_id, args, signal) => result(await readBoundedFile(await resolveRepositoryReadPath(root, pathArgument(args), options), signal, byteArgument(args, "offset", 0, 0, Number.MAX_SAFE_INTEGER), byteArgument(args, "maxBytes", MAX_FILE_BYTES, 1, MAX_FILE_BYTES)))
 	},
 	{
 		name: "list_files",
@@ -56502,8 +56489,8 @@ const createRepositoryTools = (root) => [
 			const recursive = typeof args === "object" && args !== null && "recursive" in args ? args.recursive : false;
 			if (typeof recursive !== "boolean") throw new Error("list_files recursive must be a boolean");
 			const projectRoot = await realpath(root);
-			const directory = await repositoryPath(root, path);
-			const files = await discoverFiles(root, directory, recursive, signal);
+			const directory = await resolveRepositoryReadPath(root, path, options);
+			const files = await discoverFiles(root, directory, recursive, signal, options);
 			return result(files.map((file) => relative(projectRoot, file)).join("\n").slice(0, MAX_OUTPUT_CHARACTERS));
 		}
 	},
@@ -56520,11 +56507,11 @@ const createRepositoryTools = (root) => [
 			const text = typeof args === "object" && args !== null && "text" in args ? args.text : void 0;
 			if (typeof text !== "string" || text.length === 0) throw new Error("search_text requires nonempty literal text");
 			const projectRoot = await realpath(root);
-			const directory = await repositoryPath(root, path);
-			const files = await discoverFiles(root, directory, true, signal);
+			const directory = await resolveRepositoryReadPath(root, path, options);
+			const files = await discoverFiles(root, directory, true, signal, options);
 			const matches = [];
 			for (const file of files) {
-				const content = await readBoundedFile(await repositoryPath(root, file), signal);
+				const content = await readBoundedFile(await resolveRepositoryReadPath(root, file, options), signal);
 				if (content.includes("\0")) continue;
 				for (const [index, line] of content.split("\n").entries()) {
 					if (line.includes(text)) matches.push(`${relative(projectRoot, file)}:${index + 1}:${line}`);
@@ -56536,51 +56523,6 @@ const createRepositoryTools = (root) => [
 		}
 	}
 ];
-const stringArgument = (args, key) => {
-	if (typeof args !== "object" || args === null || !(key in args) || typeof Reflect.get(args, key) !== "string") throw new Error(`Repository tools require a string ${key}`);
-	return Reflect.get(args, key);
-};
-const createRepositoryWriteTools = (root, options) => [{
-	name: "write_file",
-	label: "Write repository file",
-	description: "Create or overwrite a UTF-8 repository file. Protected directories and symlink escapes are blocked.",
-	parameters: _Object_({
-		path: String$3(),
-		content: String$3()
-	}),
-	execute: async (_id, args, signal) => {
-		signal?.throwIfAborted();
-		const requested = pathArgument(args);
-		const path = await writableRepositoryPath(root, requested, options);
-		await mkdir(dirname(path), { recursive: true });
-		signal?.throwIfAborted();
-		await writeFile(await writableRepositoryPath(root, pathArgument(args), options), stringArgument(args, "content"), "utf8");
-		return result(`Wrote ${pathArgument(args)}`);
-	}
-}, {
-	name: "edit_file",
-	label: "Edit repository file",
-	description: "Replace exact text in a UTF-8 repository file. oldText must match exactly one region; protected directories and symlink escapes are blocked.",
-	parameters: _Object_({
-		path: String$3(),
-		oldText: String$3({ minLength: 1 }),
-		newText: String$3()
-	}),
-	execute: async (_id, args, signal) => {
-		signal?.throwIfAborted();
-		const oldText = stringArgument(args, "oldText");
-		const newText = stringArgument(args, "newText");
-		if (oldText.length === 0) throw new Error("edit_file oldText must be nonempty");
-		const requested = pathArgument(args);
-		const path = await writableRepositoryPath(root, requested, options);
-		const content = await readFile(path, "utf8");
-		const index = content.indexOf(oldText);
-		if (index < 0 || content.indexOf(oldText, index + 1) >= 0) throw new Error("edit_file oldText must match exactly once");
-		signal?.throwIfAborted();
-		await writeFile(await writableRepositoryPath(root, pathArgument(args), options), content.slice(0, index) + newText + content.slice(index + oldText.length), "utf8");
-		return result(`Edited ${pathArgument(args)}`);
-	}
-}];
 //#endregion
 //#region src/workflows/pi.ts
 const MAX_REJECTED_SUBMISSIONS = 3;
@@ -56642,36 +56584,97 @@ var WorkflowRunnerError = class extends Error {
 };
 const createPiRunner = (options) => {
 	let agent;
-	let researched = false;
-	const phase = async (spec, prompt, signal, mode) => {
+	let researched = options.resume?.phase === "action";
+	let resume = options.resume;
+	const priorEvidence = options.resume?.executor;
+	const evidence = () => {
+		const current = executorEvidence(options.executor.trace);
+		return priorEvidence === void 0 ? current : {
+			searches: [...priorEvidence.searches, ...current.searches],
+			calls: [...priorEvidence.calls, ...current.calls]
+		};
+	};
+	const replayTools = options.executor.tools.map((tool) => ({
+		...tool,
+		execute: async (id, params, signal, onUpdate) => {
+			if (priorEvidence !== void 0 && typeof params === "object" && params !== null) {
+				const recorded = tool.name === "executor_execute" && "code" in params ? priorEvidence.calls.findLast((call) => typeof call.input === "object" && call.input !== null && "code" in call.input && call.input.code === params.code) : tool.name === "executor_search" && "query" in params ? priorEvidence.searches.findLast((call) => typeof call.input === "object" && call.input !== null && "query" in call.input && call.input.query === params.query) : void 0;
+				if (recorded !== void 0) {
+					const text = JSON.stringify(recorded.output) ?? "null";
+					return {
+						content: [{
+							type: "text",
+							text: `Recorded completed Executor result (reused without a provider call):\n${text.length > 3e4 ? `${text.slice(0, 3e4)}... [truncated ${text.length - 3e4} chars]` : text}`
+						}],
+						details: recorded.output
+					};
+				}
+			}
+			return tool.execute(id, params, signal, onUpdate);
+		}
+	}));
+	const executor = options.runDirectory === void 0 ? {
+		...options.executor,
+		tools: replayTools
+	} : persistExecutorToolResults({
+		...options.executor,
+		tools: replayTools
+	}, options.runDirectory);
+	const writeOptions = {
+		presetDirectory: options.presetDirectory,
+		runsDirectory: options.runsDirectory ?? resolve(options.root, ".pagegraph/runs")
+	};
+	const readOptions = {
+		repositoryRoot: options.repositoryRoot ?? options.root,
+		runsDirectory: options.runsDirectory ?? resolve(options.root, ".pagegraph/runs")
+	};
+	const phase = async (spec, prompt, signal, action = false) => {
 		const assertDeadline = (messages = []) => {
 			if (signal.aborted) throw new WorkflowRunnerError(`Workflow deadline exceeded or run aborted: ${String(signal.reason)}`, {
 				messages,
 				usage: totalUsage(messages),
-				executor: executorEvidence(options.executor.trace)
+				executor: evidence()
 			}, { cause: signal.reason });
 		};
 		assertDeadline(agent?.state.messages);
-		if (mode !== void 0 && !researched) throw new Error("Workflow action requires a completed research conversation");
-		const systemPrompt = mode === void 0 ? await composeSystemPrompt(options.presetDirectory, spec) : void 0;
+		if (action && !researched) throw new Error("Workflow action requires a completed research conversation");
+		const systemPrompt = !action || agent === void 0 ? await composeSystemPrompt(options.presetDirectory, spec) : void 0;
 		assertDeadline();
+		const validateAction = async (raw) => {
+			const state = normalizeEditPaths(decodeActionState(dropNulls(raw)), readOptions.repositoryRoot, options.root);
+			const refused = (await applyWorkflowEdits(options.root, state.edits.map((edit, index) => ({
+				id: `edits[${index}]`,
+				...edit
+			})), {
+				...writeOptions,
+				check: true
+			})).filter((outcome) => outcome.status !== "applicable");
+			if (refused.length > 0) throw new Error(`Edits must apply to the current files:\n${refused.map((outcome) => `${outcome.id} (${outcome.path}): ${outcome.status}, ${outcome.reason}`).join("\n")}\nCopy oldText exactly from a fresh read_file result, with enough context to match once.`);
+			return state;
+		};
 		let state;
 		let submitted = false;
 		let rejected = 0;
 		let lastIssues = "No structured result was submitted.";
+		let lastSubmission;
+		let rejectedItems;
 		const rawSubmissions = /* @__PURE__ */ new Map();
 		const submit = {
 			name: "submit_result",
 			label: "Submit workflow result",
 			description: "Validate and submit the final workflow state after collecting Executor evidence.",
-			parameters: Unsafe(mode === void 0 ? spec.stateJsonSchema : actionStateJsonSchema),
-			prepareArguments: (args) => mode === void 0 ? normalizeResearchState(args, options.limit) : args,
+			parameters: Unsafe(action ? actionStateJsonSchema : spec.stateJsonSchema),
+			prepareArguments: (args) => {
+				lastSubmission = args;
+				return action ? dropNulls(args) : normalizeResearchState(args, options.limit);
+			},
 			execute: async (_id, params) => {
 				try {
-					const decoded = mode === void 0 ? decodeResearchState(spec, rawSubmissions.get(_id) ?? params, options.limit) : decodeActionState(rawSubmissions.get(_id) ?? params);
-					const evidence = executorEvidence(options.executor.trace);
-					if (mode === void 0 && (evidence.searches.length === 0 || evidence.calls.length === 0)) throw new Error([
-						`Your research returned without completed Executor provider evidence (searches: ${evidence.searches.length}, calls: ${evidence.calls.length}).`,
+					const raw = rawSubmissions.get(_id) ?? lastSubmission ?? params;
+					const decoded = action ? await validateAction(raw) : decodeResearchState(spec, raw, options.limit);
+					const collected = evidence();
+					if (!action && (collected.searches.length === 0 || collected.calls.length === 0)) throw new Error([
+						`Your research returned without completed Executor provider evidence (searches: ${collected.searches.length}, calls: ${collected.calls.length}).`,
 						"Catalog searches and schema discovery alone do not satisfy this workflow.",
 						"Use the catalog results already collected, inspect the exact discovered tool schema, and complete at least one relevant read-only provider call before submitting the original workflow state.",
 						"Preserve provider errors and empty datasets honestly; do not invent evidence or mutate provider state."
@@ -56700,29 +56703,26 @@ const createPiRunner = (options) => {
 				}
 			}
 		};
-		const writeOptions = {
-			presetDirectory: options.presetDirectory,
-			runsDirectory: options.runsDirectory ?? resolve(options.root, ".pagegraph/runs")
-		};
 		const tools = [
-			...options.executor.tools,
-			...createRepositoryTools(options.root),
+			...executor.tools,
+			...createRepositoryTools(readOptions.repositoryRoot, readOptions),
 			...options.additionalTools ?? [],
-			...mode === "write" ? createRepositoryWriteTools(options.root, writeOptions) : [],
 			submit
 		];
 		if (systemPrompt !== void 0) {
-			researched = false;
+			if (!action) researched = false;
 			agent = new Agent({
 				initialState: {
 					systemPrompt,
 					model: options.model,
-					tools
+					tools,
+					...resume === void 0 ? {} : { messages: [...resume.agent.messages] }
 				},
 				streamFn: options.streamFn ?? streamSimple,
 				getApiKey: getEnvApiKey,
 				toolExecution: "sequential"
 			});
+			resume = void 0;
 		}
 		if (!agent) throw new Error("Workflow action requires a research conversation");
 		agent.state.tools = tools;
@@ -56733,7 +56733,7 @@ const createPiRunner = (options) => {
 				terminate: true
 			};
 			if (context.toolCall.name === "submit_result") rawSubmissions.set(context.toolCall.id, context.toolCall.arguments);
-			return guardRepositoryToolCall(options.root, mode === "write" ? writeOptions : void 0)?.(context, signal);
+			return guardRepositoryToolCall(options.root, readOptions)?.(context, signal);
 		};
 		agent.finishTurn = () => submitted || rejected >= MAX_REJECTED_SUBMISSIONS ? { action: "end" } : void 0;
 		const current = agent;
@@ -56751,15 +56751,30 @@ const createPiRunner = (options) => {
 			const result = {
 				messages: current.state.messages,
 				usage: totalUsage(current.state.messages),
-				executor: executorEvidence(options.executor.trace)
+				executor: evidence()
 			};
 			if (signal.aborted) throw new WorkflowRunnerError(`Workflow deadline exceeded or run aborted: ${String(signal.reason)}`, result, { cause: signal.reason });
+			if (!submitted && !action && rejected >= MAX_REJECTED_SUBMISSIONS && result.executor.searches.length > 0 && result.executor.calls.length > 0) try {
+				const salvaged = salvageResearchState(spec, lastSubmission, options.limit);
+				state = salvaged.state;
+				rejectedItems = salvaged.rejectedItems;
+				submitted = true;
+			} catch {}
 			if (!submitted) throw new WorkflowRunnerError(`Workflow result rejected: ${lastIssues}${current.state.errorMessage ? `\n${current.state.errorMessage}` : ""}`, result);
-			if (mode === void 0) researched = true;
+			if (!action) researched = true;
 			return {
 				...result,
-				state
+				state,
+				...rejectedItems === void 0 ? {} : { rejectedItems }
 			};
+		} catch (cause) {
+			if (cause instanceof WorkflowRunnerError) throw cause;
+			const messages = current.state.messages;
+			throw new WorkflowRunnerError(`Workflow agent turn failed: ${cause instanceof Error ? cause.message : String(cause)}`, {
+				messages,
+				usage: totalUsage(messages),
+				executor: evidence()
+			}, { cause });
 		} finally {
 			signal.removeEventListener("abort", abort);
 			unsubscribe();
@@ -56771,7 +56786,7 @@ const createPiRunner = (options) => {
 			id: options.model.id
 		},
 		research: (spec, prompt, { signal }) => phase(spec, prompt, signal),
-		act: (spec, prompt, { signal, mode }) => phase(spec, prompt, signal, mode),
+		act: (spec, prompt, { signal }) => phase(spec, prompt, signal, true),
 		async close() {
 			agent?.abort();
 			await agent?.waitForIdle();
@@ -56785,21 +56800,36 @@ const acquireWorkflowRunner = async (options) => {
 	const provider = id.slice(0, slash);
 	const model = builtinModels().getModel(provider, id.slice(slash + 1));
 	if (!model) throw new Error(`Unknown Pi model: ${id}`);
-	if (!getEnvApiKey(provider)) {
+	if (!getEnvApiKey(provider)?.trim()) {
 		const names = findEnvKeys(provider, new Proxy({}, { get: (_target, key) => typeof key === "string" ? "configured" : void 0 }));
 		throw new Error(`Missing Pi credentials for ${provider}; set ${names?.join(" or ") ?? `${provider} provider credentials`}.`);
 	}
+	let executor = options.executor;
+	if (executor === void 0) {
+		const baseUrl = process.env["EXECUTOR_BASE_URL"]?.trim();
+		if (!baseUrl) throw new Error("Missing Executor configuration; set EXECUTOR_BASE_URL before starting a workflow.");
+		try {
+			const url = new URL(baseUrl);
+			if (url.protocol !== "http:" && url.protocol !== "https:") throw new Error("expected http: or https:");
+			executor = await createExecutorToolset({ policy: "decline" });
+		} catch (cause) {
+			throw new Error(`Invalid workflow Executor configuration: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+		}
+	}
 	return createPiRunner({
 		root: options.root,
 		presetDirectory: resolve(options.root, options.config.presetDirectory),
 		model,
 		limit: options.limit,
 		...options.runsDirectory === void 0 ? {} : { runsDirectory: options.runsDirectory },
+		...options.repositoryRoot === void 0 ? {} : { repositoryRoot: options.repositoryRoot },
+		...options.runDirectory === void 0 ? {} : { runDirectory: options.runDirectory },
+		...options.resume === void 0 ? {} : { resume: options.resume },
 		...options.additionalTools === void 0 ? {} : { additionalTools: options.additionalTools },
-		executor: options.executor ?? await createExecutorToolset({ policy: "decline" })
+		executor
 	});
 };
 //#endregion
 export { WorkflowRunnerError, acquireWorkflowRunner, composeSystemPrompt, createPiRunner, envApiKeyAuth as n, lazyOAuth as r, validateToolArguments as t, totalUsage };
 
-//# sourceMappingURL=pi-D3mMmYey.js.map
+//# sourceMappingURL=pi-Bz4BgZdC.js.map