nika-engine 0.38.0

Nika workflow engine — embeddable runtime, provider, DAG, and binding logic
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
//! Provider-specific execution methods
//!
//! Contains: run_mock, run_claude, run_openai, run_auto,
//! run_mistral, run_groq, run_deepseek, run_gemini, run_xai,
//! and the generic provider implementation with retry logic.

use std::sync::Arc;

use rig::client::{CompletionClient, ProviderClient};
use rig::providers::{anthropic, openai};
use serde_json;

use crate::error::NikaError;
use crate::event::{AgentTurnMetadata, EventKind};

use crate::ast::limits::LimitType;

use super::types::{RigAgentLoopResult, RigAgentStatus};
use super::RigAgentLoop;

impl RigAgentLoop {
    /// Run the agent loop with a mock provider (for testing)
    ///
    /// This method simulates agent execution without making real API calls.
    pub async fn run_mock(&self) -> Result<RigAgentLoopResult, NikaError> {
        // Emit start event (no metadata for "started")
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: "started".to_string(),
            metadata: None,
        });

        // For mock execution, we simulate a single turn with natural completion
        let response_text = "Mock response from rig agent".to_string();
        let final_output = serde_json::json!({
            "response": &response_text,
            "completed": true
        });

        // Check stop conditions
        let status = self.determine_status(&final_output.to_string());

        // Build metadata for completion event
        let stop_reason = status.as_canonical_str();
        let metadata = AgentTurnMetadata {
            thinking: None, // Mock mode doesn't have thinking
            response_text: response_text.clone(),
            input_tokens: 50,
            output_tokens: 50,
            cache_read_tokens: 0,
            stop_reason: stop_reason.to_string(),
        };

        // Emit completion event with metadata
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: stop_reason.to_string(),
            metadata: Some(metadata),
        });

        // Check guardrails
        let guardrail_result = self.check_guardrails(&response_text);
        let guardrails_passed = guardrail_result.is_passed();

        Ok(RigAgentLoopResult {
            status: status.clone(),
            turns: 1,
            final_output,
            total_tokens: 100, // Mock token count
            confidence: status.confidence(),
            retry_count: 0,
            guardrails_passed,
            cost_usd: 0.0,
            partial_result: None,
        })
    }

    /// Run the agent loop with the real Claude provider
    ///
    /// This method uses rig-core's AgentBuilder for actual execution.
    /// Requires ANTHROPIC_API_KEY environment variable to be set.
    ///
    /// # Note
    /// This method takes `&mut self` because tools are consumed (moved to rig's AgentBuilder).
    /// The agent loop is designed for single-use execution.
    ///
    /// ## Extended Thinking
    /// When `extended_thinking: true` is set in AgentParams, this method uses
    /// the streaming API to capture Claude's reasoning process. The thinking
    /// is stored in `AgentTurnMetadata.thinking` for observability.
    ///
    /// ## Token Tracking
    /// - Without tools: Uses streaming API for accurate token tracking
    /// - With tools: Falls back to agent.prompt() (tokens will be 0)
    /// - With extended_thinking: Uses dedicated streaming path
    pub async fn run_claude(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        // Check if extended thinking is enabled
        if self.params.extended_thinking == Some(true) {
            return self.run_claude_with_thinking().await;
        }

        // Create Anthropic client from environment
        let client = anthropic::Client::from_env();

        // Get model name — validated by analyzer (NIKA-034)
        let model_name = self
            .params
            .model
            .clone()
            .expect("model is required -- validated by analyzer");
        let model = client.completion_model(&model_name);

        // Take ownership of tools (they'll be consumed by the builder)
        let tools = self.tools_as_boxed();

        // Get max_turns
        let max_turns = self.params.max_turns.unwrap_or(10) as usize;

        // Emit start event (no metadata for "started")
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: "started".to_string(),
            metadata: None,
        });

        // Execute with streaming helper
        // - No tools: Pure streaming with token tracking
        // - With tools: Falls back to agent.prompt() (0 tokens)
        let prompt = self.params.prompt.clone();
        let result = self
            .stream_with_tools(model, &prompt, tools, max_turns)
            .await?;

        // Record turn in limit tracker
        let cost = crate::provider::cost::calculate_cost(
            crate::provider::cost::ProviderKind::Claude,
            &model_name,
            result.input_tokens,
            result.output_tokens,
        );
        self.limit_tracker
            .record_turn(result.input_tokens, result.output_tokens, cost);

        // Determine status from response (limits can override)
        let status = if let Some(exceeded) = self.limit_tracker.check_limits() {
            match exceeded.limit_type {
                LimitType::Turns => RigAgentStatus::MaxTurnsReached,
                LimitType::Tokens => RigAgentStatus::TokenBudgetExceeded,
                LimitType::Cost => RigAgentStatus::CostLimitReached,
                LimitType::Duration => RigAgentStatus::DurationLimitReached,
            }
        } else {
            self.determine_status(&result.response)
        };

        // Build metadata WITH token tracking
        let stop_reason = status.as_canonical_str();
        let metadata = AgentTurnMetadata {
            thinking: result.thinking,
            response_text: result.response.clone(),
            input_tokens: result.input_tokens,
            output_tokens: result.output_tokens,
            cache_read_tokens: 0,
            stop_reason: stop_reason.to_string(),
        };

        // Emit completion event
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: stop_reason.to_string(),
            metadata: Some(metadata),
        });

        // Check guardrails and override status on failure
        let guardrail_result = self.check_guardrails(&result.response);
        let guardrails_passed = guardrail_result.is_passed();
        let status = if guardrail_result.should_fail() {
            RigAgentStatus::Failed
        } else if guardrail_result.should_escalate() {
            RigAgentStatus::Escalated(status.confidence().unwrap_or(0.0))
        } else {
            status
        };

        Ok(RigAgentLoopResult {
            status: status.clone(),
            turns: 1, // rig handles turns internally, we report completion as 1
            final_output: serde_json::json!({ "response": result.response }),
            total_tokens: result.input_tokens + result.output_tokens,
            confidence: status.confidence(),
            retry_count: 0,
            guardrails_passed,
            cost_usd: self.limit_tracker.cost_usd(),
            partial_result: None,
        })
    }

    /// Run the agent loop with the OpenAI provider
    ///
    /// This method uses rig-core's OpenAI client for actual execution.
    /// Requires OPENAI_API_KEY environment variable to be set.
    ///
    /// # Note
    /// This method takes `&mut self` because tools are consumed (moved to rig's AgentBuilder).
    /// The agent loop is designed for single-use execution.
    pub async fn run_openai(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        // Create OpenAI client from environment
        let client = openai::Client::from_env();

        // Get model name — validated by analyzer (NIKA-034)
        let model_name = self
            .params
            .model
            .clone()
            .expect("model is required -- validated by analyzer");
        let model = client.completion_model(&model_name);

        // Take ownership of tools (they'll be consumed by the builder)
        let tools = self.tools_as_boxed();

        // Get max_turns
        let max_turns = self.params.max_turns.unwrap_or(10) as usize;

        // Emit start event (no metadata for "started")
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: "started".to_string(),
            metadata: None,
        });

        // Execute with streaming helper
        // - No tools: Pure streaming with token tracking
        // - With tools: Falls back to agent.prompt() (0 tokens)
        let prompt = self.params.prompt.clone();
        let result = self
            .stream_with_tools(model, &prompt, tools, max_turns)
            .await?;

        // Record turn in limit tracker
        let cost = crate::provider::cost::calculate_cost(
            crate::provider::cost::ProviderKind::OpenAI,
            &model_name,
            result.input_tokens,
            result.output_tokens,
        );
        self.limit_tracker
            .record_turn(result.input_tokens, result.output_tokens, cost);

        // Determine status from response (limits can override)
        let status = if let Some(exceeded) = self.limit_tracker.check_limits() {
            match exceeded.limit_type {
                LimitType::Turns => RigAgentStatus::MaxTurnsReached,
                LimitType::Tokens => RigAgentStatus::TokenBudgetExceeded,
                LimitType::Cost => RigAgentStatus::CostLimitReached,
                LimitType::Duration => RigAgentStatus::DurationLimitReached,
            }
        } else {
            self.determine_status(&result.response)
        };

        // Build metadata WITH token tracking
        let stop_reason = status.as_canonical_str();
        let metadata = AgentTurnMetadata {
            thinking: result.thinking,
            response_text: result.response.clone(),
            input_tokens: result.input_tokens,
            output_tokens: result.output_tokens,
            cache_read_tokens: 0,
            stop_reason: stop_reason.to_string(),
        };

        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: stop_reason.to_string(),
            metadata: Some(metadata),
        });

        // Check guardrails and override status on failure
        let guardrail_result = self.check_guardrails(&result.response);
        let guardrails_passed = guardrail_result.is_passed();
        let status = if guardrail_result.should_fail() {
            RigAgentStatus::Failed
        } else if guardrail_result.should_escalate() {
            RigAgentStatus::Escalated(status.confidence().unwrap_or(0.0))
        } else {
            status
        };

        Ok(RigAgentLoopResult {
            status: status.clone(),
            turns: 1,
            final_output: serde_json::json!({ "response": result.response }),
            total_tokens: result.input_tokens + result.output_tokens,
            confidence: status.confidence(),
            retry_count: 0,
            guardrails_passed,
            cost_usd: self.limit_tracker.cost_usd(),
            partial_result: None,
        })
    }

    /// Run the agent loop with the best available provider
    ///
    /// Provider selection order:
    /// 1. Check AgentParams.provider field
    /// 2. Check ANTHROPIC_API_KEY env var → use Claude
    /// 3. Check OPENAI_API_KEY env var → use OpenAI
    /// 4. Check MISTRAL_API_KEY env var → use Mistral
    /// 5. Check GROQ_API_KEY env var → use Groq
    /// 6. Check DEEPSEEK_API_KEY env var → use DeepSeek
    /// 7. Error if no provider available
    ///
    /// # Note
    /// This is the recommended method for production use.
    pub async fn run_auto(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        // Check explicit provider from params
        if let Some(ref provider_name) = self.params.provider {
            let resolved = crate::core::find_provider(provider_name).ok_or_else(|| {
                NikaError::AgentValidationError {
                    reason: format!(
                        "Unknown provider: '{}'. Use 'claude', 'openai', 'mistral', 'groq', 'deepseek', 'gemini', or 'xai'.",
                        provider_name
                    ),
                }
            })?;
            return match resolved.id {
                "anthropic" => self.run_claude().await,
                "openai" => self.run_openai().await,
                "mistral" => self.run_mistral().await,
                "groq" => self.run_groq().await,
                "deepseek" => self.run_deepseek().await,
                "gemini" => self.run_gemini().await,
                "xai" => self.run_xai().await,
                "native" => Err(NikaError::AgentValidationError {
                    reason: "Provider 'native' is not supported for agent: tasks. Native inference (mistral.rs) is only available for infer: tasks. Use a cloud provider (claude, openai, mistral, groq, deepseek, gemini, xai) for agent tasks.".to_string(),
                }),
                _ => Err(NikaError::AgentValidationError {
                    reason: format!("Provider '{}' is not supported for agent: tasks.", resolved.id),
                }),
            };
        }

        // Auto-detect: iterate KNOWN_PROVIDERS in priority order (LLM category only)
        use crate::core::providers::{ProviderCategory, KNOWN_PROVIDERS};
        for p in KNOWN_PROVIDERS.iter() {
            if p.category == ProviderCategory::Llm && p.has_env_key() {
                return match p.id {
                    "anthropic" => self.run_claude().await,
                    "openai" => self.run_openai().await,
                    "mistral" => self.run_mistral().await,
                    "groq" => self.run_groq().await,
                    "deepseek" => self.run_deepseek().await,
                    "gemini" => self.run_gemini().await,
                    "xai" => self.run_xai().await,
                    _ => continue,
                };
            }
        }

        Err(NikaError::AgentValidationError {
            reason: "No API key found. Set one of: ANTHROPIC_API_KEY, OPENAI_API_KEY, MISTRAL_API_KEY, GROQ_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, or XAI_API_KEY.".to_string(),
        })
    }

    // =========================================================================
    // Additional Provider Methods
    // =========================================================================

    /// Run with Mistral provider (requires MISTRAL_API_KEY)
    pub async fn run_mistral(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        let model_name = self
            .params
            .model
            .clone()
            .unwrap_or_else(|| rig::providers::mistral::MISTRAL_LARGE.to_string());
        let client = rig::providers::mistral::Client::from_env();
        self.run_generic_provider_impl(
            client,
            &model_name,
            Some(crate::provider::cost::ProviderKind::Mistral),
        )
        .await
    }

    /// Run with Groq provider (requires GROQ_API_KEY)
    pub async fn run_groq(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        let model_name = self
            .params
            .model
            .clone()
            .unwrap_or_else(|| "llama-3.3-70b-versatile".to_string());
        let client = rig::providers::groq::Client::from_env();
        self.run_generic_provider_impl(
            client,
            &model_name,
            Some(crate::provider::cost::ProviderKind::Groq),
        )
        .await
    }

    /// Run with DeepSeek provider (requires DEEPSEEK_API_KEY)
    pub async fn run_deepseek(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        let model_name = self
            .params
            .model
            .clone()
            .unwrap_or_else(|| "deepseek-chat".to_string());
        let client = rig::providers::deepseek::Client::from_env();
        self.run_generic_provider_impl(
            client,
            &model_name,
            Some(crate::provider::cost::ProviderKind::DeepSeek),
        )
        .await
    }

    /// Run with Gemini provider (requires GEMINI_API_KEY)
    pub async fn run_gemini(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        let model_name = self
            .params
            .model
            .clone()
            .unwrap_or_else(|| "gemini-2.0-flash".to_string());
        let client = rig::providers::gemini::Client::from_env();
        self.run_generic_provider_impl(
            client,
            &model_name,
            Some(crate::provider::cost::ProviderKind::Gemini),
        )
        .await
    }

    /// Run with xAI provider (requires XAI_API_KEY)
    pub async fn run_xai(&mut self) -> Result<RigAgentLoopResult, NikaError> {
        let model_name = self
            .params
            .model
            .clone()
            .unwrap_or_else(|| "grok-3-fast".to_string());
        let client = rig::providers::xai::Client::from_env();
        self.run_generic_provider_impl(
            client,
            &model_name,
            Some(crate::provider::cost::ProviderKind::XAi),
        )
        .await
    }

    /// Generic provider runner implementation
    ///
    /// Uses rig-core's unified ProviderClient + CompletionClient interface.
    /// Includes retry logic for low confidence responses.
    async fn run_generic_provider_impl<C>(
        &mut self,
        client: C,
        model_name: &str,
        provider_kind: Option<crate::provider::cost::ProviderKind>,
    ) -> Result<RigAgentLoopResult, NikaError>
    where
        C: CompletionClient,
        C::CompletionModel: Clone + 'static,
        <C::CompletionModel as rig::completion::CompletionModel>::Response: Send,
    {
        let model = client.completion_model(model_name);

        // Take ownership of tools for first attempt
        let tools = self.tools_as_boxed();
        let max_turns = self.params.max_turns.unwrap_or(10) as usize;
        let base_prompt = self.params.prompt.clone();

        // Get max retries from config (default: 2)
        let max_retries = self
            .get_low_confidence_config()
            .map(|c| c.max_retries)
            .unwrap_or(2);

        let mut retry_count: u32 = 0;
        let mut current_prompt = base_prompt.clone();
        let mut total_input_tokens: u64 = 0;
        let mut total_output_tokens: u64 = 0;

        // Emit start event
        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: 1,
            kind: "started".to_string(),
            metadata: None,
        });

        // First attempt with tools
        let mut result = self
            .stream_with_tools(model.clone(), &current_prompt, tools, max_turns)
            .await?;

        total_input_tokens += result.input_tokens;
        total_output_tokens += result.output_tokens;

        // Record turn in limit tracker
        let turn_cost = provider_kind
            .map(|pk| {
                crate::provider::cost::calculate_cost(
                    pk,
                    model_name,
                    result.input_tokens,
                    result.output_tokens,
                )
            })
            .unwrap_or(0.0);
        self.limit_tracker
            .record_turn(result.input_tokens, result.output_tokens, turn_cost);

        // Check limits after first turn
        if let Some(exceeded) = self.limit_tracker.check_limits() {
            let status = match exceeded.limit_type {
                LimitType::Turns => RigAgentStatus::MaxTurnsReached,
                LimitType::Tokens => RigAgentStatus::TokenBudgetExceeded,
                LimitType::Cost => RigAgentStatus::CostLimitReached,
                LimitType::Duration => RigAgentStatus::DurationLimitReached,
            };
            tracing::warn!(
                task_id = %self.task_id,
                limit = %exceeded.limit_type,
                current = exceeded.current,
                maximum = exceeded.maximum,
                "Agent limit exceeded after first turn"
            );
            return Ok(RigAgentLoopResult {
                status,
                turns: 1,
                final_output: serde_json::json!({ "response": result.response }),
                total_tokens: total_input_tokens + total_output_tokens,
                confidence: None,
                retry_count: 0,
                guardrails_passed: true,
                cost_usd: self.limit_tracker.cost_usd(),
                partial_result: None,
            });
        }

        let mut status = self.determine_status(&result.response);

        // Retry loop for low confidence
        while self.should_retry(&status, retry_count) {
            retry_count += 1;

            // Check limits before starting a retry
            if let Some(exceeded) = self.limit_tracker.check_limits() {
                let limit_status = match exceeded.limit_type {
                    LimitType::Turns => RigAgentStatus::MaxTurnsReached,
                    LimitType::Tokens => RigAgentStatus::TokenBudgetExceeded,
                    LimitType::Cost => RigAgentStatus::CostLimitReached,
                    LimitType::Duration => RigAgentStatus::DurationLimitReached,
                };
                tracing::warn!(
                    task_id = %self.task_id,
                    limit = %exceeded.limit_type,
                    retry = retry_count,
                    "Agent limit exceeded during retry loop"
                );
                status = limit_status;
                break;
            }

            // Get confidence from status for feedback message
            let confidence = match &status {
                RigAgentStatus::LowConfidence(c) => *c,
                _ => 0.0,
            };

            // Emit retry event
            self.event_log.emit(EventKind::AgentTurn {
                task_id: Arc::from(self.task_id.as_str()),
                turn_index: retry_count + 1,
                kind: format!("retry_{}", retry_count),
                metadata: Some(AgentTurnMetadata {
                    thinking: None,
                    response_text: format!(
                        "Low confidence ({:.2}), retrying ({}/{})",
                        confidence, retry_count, max_retries
                    ),
                    input_tokens: 0,
                    output_tokens: 0,
                    cache_read_tokens: 0,
                    stop_reason: "low_confidence_retry".to_string(),
                }),
            });

            // Append feedback to prompt for retry
            current_prompt = format!(
                "{}\n\n{}\n\nPrevious response:\n{}",
                base_prompt,
                self.get_retry_feedback(confidence),
                result.response
            );

            // Retry without tools (agent has already gathered context)
            // Using empty tools vec for retry attempts
            result = self
                .stream_with_tools(model.clone(), &current_prompt, vec![], max_turns)
                .await?;

            total_input_tokens += result.input_tokens;
            total_output_tokens += result.output_tokens;

            // Record retry turn in limit tracker
            let retry_cost = provider_kind
                .map(|pk| {
                    crate::provider::cost::calculate_cost(
                        pk,
                        model_name,
                        result.input_tokens,
                        result.output_tokens,
                    )
                })
                .unwrap_or(0.0);
            self.limit_tracker
                .record_turn(result.input_tokens, result.output_tokens, retry_cost);

            status = self.determine_status(&result.response);
        }

        // Build metadata WITH token tracking
        let stop_reason = status.as_canonical_str();
        let metadata = AgentTurnMetadata {
            thinking: result.thinking,
            response_text: result.response.clone(),
            input_tokens: total_input_tokens,
            output_tokens: total_output_tokens,
            cache_read_tokens: 0,
            stop_reason: stop_reason.to_string(),
        };

        self.event_log.emit(EventKind::AgentTurn {
            task_id: Arc::from(self.task_id.as_str()),
            turn_index: retry_count + 1,
            kind: stop_reason.to_string(),
            metadata: Some(metadata),
        });

        // Check guardrails with retry loop for `on_failure: retry`
        let max_guardrail_retries: u32 = 2;
        let mut guardrail_retry_count: u32 = 0;
        let mut guardrail_result = self.check_guardrails(&result.response);

        while guardrail_result.should_retry() && guardrail_retry_count < max_guardrail_retries {
            guardrail_retry_count += 1;

            // Check limits before starting a guardrail retry
            if let Some(exceeded) = self.limit_tracker.check_limits() {
                tracing::warn!(
                    task_id = %self.task_id,
                    limit = %exceeded.limit_type,
                    guardrail_retry = guardrail_retry_count,
                    "Agent limit exceeded during guardrail retry loop"
                );
                break;
            }

            // Build feedback from guardrail failure messages
            let feedback = guardrail_result.failure_messages().join("; ");
            tracing::info!(
                task_id = %self.task_id,
                guardrail_retry = guardrail_retry_count,
                max = max_guardrail_retries,
                feedback = %feedback,
                "Retrying due to guardrail failure"
            );

            // Emit guardrail retry event
            self.event_log.emit(EventKind::AgentTurn {
                task_id: Arc::from(self.task_id.as_str()),
                turn_index: retry_count + guardrail_retry_count + 1,
                kind: format!("guardrail_retry_{}", guardrail_retry_count),
                metadata: Some(AgentTurnMetadata {
                    thinking: None,
                    response_text: format!(
                        "Guardrail validation failed, retrying ({}/{}): {}",
                        guardrail_retry_count, max_guardrail_retries, feedback
                    ),
                    input_tokens: 0,
                    output_tokens: 0,
                    cache_read_tokens: 0,
                    stop_reason: "guardrail_retry".to_string(),
                }),
            });

            // Append guardrail feedback to prompt
            current_prompt = format!(
                "{}\n\n[GUARDRAIL RETRY {}/{}] Your previous output failed quality validation:\n{}\n\nPlease fix these issues and try again.\n\nPrevious response:\n{}",
                base_prompt,
                guardrail_retry_count,
                max_guardrail_retries,
                feedback,
                result.response
            );

            // Re-run without tools (agent already has context)
            result = self
                .stream_with_tools(model.clone(), &current_prompt, vec![], max_turns)
                .await?;

            total_input_tokens += result.input_tokens;
            total_output_tokens += result.output_tokens;

            // Record guardrail retry turn in limit tracker
            let gr_cost = provider_kind
                .map(|pk| {
                    crate::provider::cost::calculate_cost(
                        pk,
                        model_name,
                        result.input_tokens,
                        result.output_tokens,
                    )
                })
                .unwrap_or(0.0);
            self.limit_tracker
                .record_turn(result.input_tokens, result.output_tokens, gr_cost);

            // Re-determine status and re-check guardrails
            status = self.determine_status(&result.response);
            guardrail_result = self.check_guardrails(&result.response);
        }

        // After guardrail retries exhausted, if still failing with retry -> accept anyway
        // (don't block forever, the guardrails_passed flag will indicate the failure)
        if guardrail_result.should_retry() {
            tracing::warn!(
                task_id = %self.task_id,
                retries = guardrail_retry_count,
                "Guardrail retries exhausted, accepting output with guardrails_passed=false"
            );
        }

        let guardrails_passed = guardrail_result.is_passed();

        // Override status when guardrails fail with terminal actions
        let status = if guardrail_result.should_fail() {
            RigAgentStatus::Failed
        } else if guardrail_result.should_escalate() {
            RigAgentStatus::Escalated(status.confidence().unwrap_or(0.0))
        } else {
            status
        };

        let total_retries = retry_count + guardrail_retry_count;

        Ok(RigAgentLoopResult {
            status: status.clone(),
            turns: (total_retries + 1) as usize,
            final_output: serde_json::json!({ "response": result.response }),
            total_tokens: total_input_tokens + total_output_tokens,
            confidence: status.confidence(),
            retry_count: total_retries,
            guardrails_passed,
            cost_usd: self.limit_tracker.cost_usd(),
            partial_result: None,
        })
    }
}