@deepstrike/sdk 0.2.52 → 0.2.60

package/dist/runtime/durable-content.js

@@ -0,0 +1,159 @@
+/** Provider-neutral durable content ABI.
+ *
+ * This is deliberately separate from provider-facing ContentPart. Durable records carry only
+ * portable content and explicit payload locators; protocol adapters decide how to serialize it.
+ */
+export class DurableContentError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DurableContentError";
+    }
+}
+const CONTENT_KEYS = new Set(["blocks"]);
+const TOOL_RESULT_KEYS = new Set(["call_id", "is_error", "blocks"]);
+const SOURCE_KEYS = {
+    url: new Set(["kind", "url"]),
+    base64: new Set(["kind", "data"]),
+    file_id: new Set(["kind", "id", "affinity"]),
+    object: new Set(["kind", "handle", "owner", "payload_ref"]),
+};
+function object(value, label) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new DurableContentError(`${label} must be an object`);
+    return value;
+}
+function exactKeys(value, allowed, label) {
+    for (const key of Object.keys(value))
+        if (!allowed.has(key))
+            throw new DurableContentError(`${label} has unknown field ${key}`);
+}
+function requiredString(value, label) {
+    if (typeof value !== "string" || value.length === 0)
+        throw new DurableContentError(`${label} must be a non-empty string`);
+    return value;
+}
+function requiredBoolean(value, label) {
+    if (typeof value !== "boolean")
+        throw new DurableContentError(`${label} must be a boolean`);
+    return value;
+}
+function base64(value, label) {
+    const data = requiredString(value, label);
+    if (data.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(data)) {
+        throw new DurableContentError(`${label} is not valid base64`);
+    }
+    return data;
+}
+function source(value, label) {
+    const raw = object(value, `${label} source`);
+    const kind = raw.kind;
+    if (kind !== "url" && kind !== "base64" && kind !== "file_id" && kind !== "object")
+        throw new DurableContentError(`${label} source kind is invalid`);
+    exactKeys(raw, SOURCE_KEYS[kind], `${label} source`);
+    if (kind === "url")
+        return { kind, url: requiredString(raw.url, `${label} URL`) };
+    if (kind === "base64")
+        return { kind, data: base64(raw.data, `${label} base64 data`) };
+    if (kind === "file_id") {
+        const id = requiredString(raw.id, `${label} file id`);
+        const a = object(raw.affinity, `${label} affinity`);
+        exactKeys(a, new Set(["provider_id", "endpoint_id"]), `${label} affinity`);
+        return {
+            kind,
+            id,
+            affinity: {
+                provider_id: requiredString(a.provider_id, `${label} affinity provider_id`),
+                endpoint_id: requiredString(a.endpoint_id, `${label} affinity endpoint_id`),
+            },
+        };
+    }
+    return {
+        kind,
+        handle: requiredString(raw.handle, `${label} object handle`),
+        owner: requiredString(raw.owner, `${label} object owner`),
+        payload_ref: requiredString(raw.payload_ref, `${label} payload_ref`),
+    };
+}
+function block(value, index) {
+    const raw = object(value, `content block ${index}`);
+    const type = raw.type;
+    if (type === "text") {
+        exactKeys(raw, new Set(["type", "text"]), `content block ${index}`);
+        return { type, text: typeof raw.text === "string" ? raw.text : (() => { throw new DurableContentError(`content block ${index} text must be a string`); })() };
+    }
+    if (type === "tool_result")
+        throw new DurableContentError("nested tool_result blocks are forbidden");
+    if (type !== "image" && type !== "audio" && type !== "video" && type !== "file")
+        throw new DurableContentError(`unknown content block type: ${String(type)}`);
+    exactKeys(raw, new Set(["type", "source", "media_type", "provider_options"]), `content block ${index}`);
+    const mediaType = raw.media_type === undefined ? undefined : requiredString(raw.media_type, `content block ${index} media_type`);
+    let providerOptions;
+    if (raw.provider_options !== undefined)
+        providerOptions = object(raw.provider_options, `content block ${index} provider_options`);
+    return {
+        type,
+        source: source(raw.source, `content block ${index}`),
+        ...(mediaType === undefined ? {} : { media_type: mediaType }),
+        ...(providerOptions === undefined ? {} : { provider_options: providerOptions }),
+    };
+}
+function blocks(value) {
+    if (!Array.isArray(value))
+        throw new DurableContentError("content blocks must be an array");
+    return value.map(block);
+}
+export function decodeDurableContent(value) {
+    const raw = object(value, "durable content");
+    exactKeys(raw, CONTENT_KEYS, "durable content");
+    return { blocks: blocks(raw.blocks) };
+}
+export function decodeDurableToolResult(value) {
+    const raw = object(value, "durable tool result");
+    exactKeys(raw, TOOL_RESULT_KEYS, "durable tool result");
+    return { call_id: requiredString(raw.call_id, "tool result call_id"), is_error: requiredBoolean(raw.is_error, "tool result is_error"), blocks: blocks(raw.blocks) };
+}
+export function encodeDurableContent(content) {
+    const decoded = decodeDurableContent(content);
+    return { blocks: decoded.blocks };
+}
+export function encodeDurableToolResult(result) {
+    const decoded = decodeDurableToolResult(result);
+    return { call_id: decoded.call_id, is_error: decoded.is_error, blocks: decoded.blocks };
+}
+export function toolOutputBlocksToDurable(blocks) {
+    return blocks.map((part, index) => {
+        if (part.type === "text")
+            return { type: "text", text: part.text };
+        const source = part.source;
+        const durableSource = source.kind === "fileId"
+            ? {
+                kind: "file_id",
+                id: source.id,
+                affinity: source.affinity
+                    ? { provider_id: source.affinity.providerId, endpoint_id: source.affinity.endpointId }
+                    : (() => { throw new DurableContentError(`tool output block ${index} fileId source requires endpoint affinity`); })(),
+            }
+            : source.kind === "base64" ? { kind: "base64", data: source.data }
+                : source.kind === "url" ? { kind: "url", url: source.url }
+                    : {
+                        kind: "object",
+                        handle: source.handle,
+                        owner: source.owner ?? (() => { throw new DurableContentError(`tool output block ${index} object source requires owner`); })(),
+                        payload_ref: source.payloadRef ?? (() => { throw new DurableContentError(`tool output block ${index} object source requires payloadRef`); })(),
+                    };
+        return { type: part.type, source: durableSource, ...(part.mediaType ? { media_type: part.mediaType } : {}), ...(part.providerOptions ? { provider_options: part.providerOptions } : {}) };
+    });
+}
+export function durableBlocksToToolOutput(blocks) {
+    return blocks.map((part) => {
+        if (part.type === "text")
+            return part;
+        const source = part.source;
+        const sdkSource = source.kind === "file_id"
+            ? { kind: "fileId", id: source.id, affinity: { providerId: source.affinity.provider_id, endpointId: source.affinity.endpoint_id } }
+            : source.kind === "base64" ? source
+                : source.kind === "url" ? source
+                    : { kind: "object", handle: source.handle, owner: source.owner, payloadRef: source.payload_ref };
+        return { type: part.type, source: sdkSource, ...(part.media_type ? { mediaType: part.media_type } : {}), ...(part.provider_options ? { providerOptions: part.provider_options } : {}) };
+    });
+}

package/dist/runtime/execution-plane.d.ts

@@ -1,6 +1,6 @@
 import type { ToolCall, ToolSchema, StreamEvent, ToolSuspendEvent, PermissionRequestEvent, PermissionResponse } from "../types.js";
 import type { RegisteredTool } from "../tools/index.js";
-import type { DreamStore, MemoryScope } from "../memory/protocols.js";
+import type { MemoryStore, MemoryScope } from "../memory/protocols.js";
 import type { KnowledgeSource } from "../knowledge/source.js";
 import type { OperationContext } from "./reliability.js";
 export interface RunContext {
@@ -9,7 +9,7 @@ export interface RunContext {
     agentId?: string;
     memoryScope?: MemoryScope;
     skillDir?: string;
-    dreamStore?: DreamStore;
+    memoryStore?: MemoryStore;
     knowledgeSource?: KnowledgeSource;
     onToolSuspend?: (event: ToolSuspendEvent) => Promise<unknown> | unknown;
     onPermissionRequest?: (event: PermissionRequestEvent) => Promise<PermissionResponse | boolean> | PermissionResponse | boolean;

package/dist/runtime/execution-plane.js

@@ -29,8 +29,8 @@ export class LocalExecutionPlane {
         for (const c of memoryCalls) {
             const args = tryParseJson(c.arguments);
             const topK = typeof args?.top_k === "number" ? args.top_k : 5;
-            const entries = (ctx.dreamStore && ctx.agentId && ctx.memoryScope)
-                ? await ctx.dreamStore.search(ctx.agentId, {
+            const entries = (ctx.memoryStore && ctx.agentId && ctx.memoryScope)
+                ? await ctx.memoryStore.search(ctx.agentId, {
                     scope: ctx.memoryScope,
                     query: String(args?.query ?? ""),
                     top_k: topK,

package/dist/runtime/kernel-event-log.js

@@ -91,7 +91,6 @@ export function kernelObservationToSessionEvent(obs, turn, opts = {}) {
                 kind: "entropy_sample",
                 turn: t,
                 score: obs.score ?? 0,
-                score_version: obs.score_version ?? 0,
                 rho: obs.rho ?? 0,
                 repeat_pressure: obs.repeat_pressure ?? 0,
                 failure_rate: obs.failure_rate ?? 0,

package/dist/runtime/kernel-step.d.ts

@@ -194,7 +194,6 @@ export interface KernelObservation {
     /** nodes_rejected. */
     node_index?: number;
     score?: number;
-    score_version?: number;
     rho?: number;
     repeat_pressure?: number;
     failure_rate?: number;

package/dist/runtime/kernel-step.js

@@ -1,4 +1,4 @@
-const CANONICAL_CONTENT_PARTS_PREFIX = "[[deepstrike-content-parts:v1]]";
+const CANONICAL_CONTENT_PARTS_PREFIX = "[[deepstrike-content-parts]]";
 export function encodeCanonicalContentParts(parts) {
     return `${CANONICAL_CONTENT_PARTS_PREFIX}${Buffer.from(JSON.stringify(parts)).toString("base64url")}`;
 }
@@ -43,6 +43,9 @@ export function skillMetadataToKernel(skill) {
     // P1-B: forward declared tool ids (additive; omitted when empty so existing skills' wire is unchanged).
     if (skill.allowedTools?.length)
         out.allowed_tools = skill.allowedTools;
+    // SPC-015-01: structured grants are caller-supplied rather than inferred from scalar frontmatter.
+    if (skill.capabilityGrants?.length)
+        out.capability_grants = skill.capabilityGrants;
     return out;
 }
 export function messageToKernelMessage(message) {
@@ -153,7 +156,6 @@ export function entropySampleFromObservation(obs) {
     return {
         turn: obs.turn ?? 0,
         score: obs.score ?? 0,
-        scoreVersion: obs.score_version ?? 0,
         rho: obs.rho ?? 0,
         repeatPressure: obs.repeat_pressure ?? 0,
         failureRate: obs.failure_rate ?? 0,

package/dist/runtime/mcp-proxy-plane.d.ts

@@ -1,7 +1,31 @@
-import type { ToolCall, ToolSchema, StreamEvent } from "../types.js";
+import type { ToolCall, ToolSchema, StreamEvent, ToolOutputBlock } from "../types.js";
 import type { RegisteredTool } from "../tools/index.js";
 import type { ExecutionPlane, RunContext } from "./execution-plane.js";
 import type { CredentialVault } from "./credential-vault.js";
+/** Raw MCP `tools/call` response `content` block shapes we accept (text/image/audio). */
+export interface McpContentBlock {
+    type: string;
+    text?: string;
+    data?: string;
+    mimeType?: string;
+}
+/**
+ * spc_012-N-02: pure conversion, unit-testable without spawning a subprocess. Prior behavior
+ * silently dropped every non-`"text"` block (INV-012-01 violation — an MCP tool returning a
+ * screenshot lost the image with no trace). `output` stays the text projection for backward
+ * available as the text projection — when non-text blocks exist the projection
+ * carries an explicit `[modality]` placeholder, so text-only providers (spc_012-N-04) degrade visibly instead
+ * of swallowing the block. `contentParts` is populated (and only populated) when the response
+ * actually contains a non-text block, so pure-text tool calls see zero behavior change.
+ */
+export declare function mcpResultToToolOutput(result: {
+    content?: McpContentBlock[];
+    isError?: boolean;
+}): {
+    output: string;
+    isError: boolean;
+    contentParts?: ToolOutputBlock[];
+};
 export interface McpServerConfig {
     /** Executable to run (e.g. "npx", "python3", "/usr/local/bin/my-mcp-server"). */
     command: string;

package/dist/runtime/mcp-proxy-plane.js

@@ -3,6 +3,41 @@ import { createInterface } from "node:readline";
 import { LocalExecutionPlane } from "./execution-plane.js";
 import { formatToolError } from "../tools/errors.js";
 import { operationAbortSignal } from "./reliability.js";
+/**
+ * spc_012-N-02: pure conversion, unit-testable without spawning a subprocess. Prior behavior
+ * silently dropped every non-`"text"` block (INV-012-01 violation — an MCP tool returning a
+ * screenshot lost the image with no trace). `output` stays the text projection for backward
+ * available as the text projection — when non-text blocks exist the projection
+ * carries an explicit `[modality]` placeholder, so text-only providers (spc_012-N-04) degrade visibly instead
+ * of swallowing the block. `contentParts` is populated (and only populated) when the response
+ * actually contains a non-text block, so pure-text tool calls see zero behavior change.
+ */
+export function mcpResultToToolOutput(result) {
+    const blocks = result.content ?? [];
+    const hasNonText = blocks.some(c => c.type !== "text");
+    if (!hasNonText) {
+        const text = blocks
+            .filter(c => c.type === "text")
+            .map(c => c.text ?? "")
+            .join("\n");
+        return { output: text || JSON.stringify(result), isError: result.isError ?? false };
+    }
+    const output = blocks
+        .map(c => (c.type === "text" ? c.text ?? "" : `[${c.type}]`))
+        .join("\n");
+    const contentParts = blocks.map(c => {
+        if (c.type === "text")
+            return { type: "text", text: c.text ?? "" };
+        if (c.type === "image") {
+            return { type: "image", source: { kind: "base64", data: c.data ?? "" }, mediaType: c.mimeType };
+        }
+        if (c.type === "audio") {
+            return { type: "audio", source: { kind: "base64", data: c.data ?? "" }, mediaType: c.mimeType ?? "audio/wav" };
+        }
+        return { type: "text", text: JSON.stringify(c) };
+    });
+    return { output, isError: result.isError ?? false, contentParts };
+}
 class McpConnection {
     serverName;
     config;
@@ -106,11 +141,7 @@ class McpConnection {
         try {
             const args = JSON.parse(call.arguments || "{}");
             const result = await this.request("tools/call", { name: call.name, arguments: args }, signal);
-            const text = (result.content ?? [])
-                .filter(c => c.type === "text")
-                .map(c => c.text ?? "")
-                .join("\n");
-            return { output: text || JSON.stringify(result), isError: result.isError ?? false };
+            return mcpResultToToolOutput(result);
         }
         catch (err) {
             return { output: formatToolError(err), isError: true };
@@ -215,7 +246,14 @@ export class McpProxyPlane {
         });
         for (const settled of await Promise.all(tasks)) {
             for (const { call, result } of settled) {
-                yield { type: "tool_result", callId: call.id, name: call.name, content: result.output, isError: result.isError };
+                yield {
+                    type: "tool_result",
+                    callId: call.id,
+                    name: call.name,
+                    content: result.output,
+                    isError: result.isError,
+                    contentParts: result.contentParts,
+                };
             }
         }
     }

package/dist/runtime/output-schema.d.ts

@@ -2,7 +2,7 @@ export interface SchemaValidation {
     ok: boolean;
     errors: string[];
 }
-type JsonSchema = Record<string, unknown>;
+export type JsonSchema = Record<string, unknown>;
 /** Validate `value` against `schema` (the supported subset). `path` is for error messages. */
 export declare function validateAgainstSchema(value: unknown, schema: JsonSchema, path?: string): SchemaValidation;
 /** The instruction appended to a node's goal so its agent produces schema-conforming JSON. */
@@ -11,4 +11,3 @@ export declare function schemaInstruction(schema: JsonSchema): string;
 export declare function schemaRetryInstruction(schema: JsonSchema, errors: string[]): string;
 /** Best-effort extraction of a JSON value from agent output (raw, fenced, or embedded). */
 export declare function extractJsonValue(text: string): unknown;
-export {};

package/dist/runtime/provider-replay.d.ts

@@ -7,7 +7,7 @@ export declare function assistantReplayKey(message: Pick<Message, "content" | "t
  * incompatible envelope is skipped so B re-serializes neutral context instead
  * of replaying A's protocol-specific shape.
  */
-export declare function isReplayCompatibleWithProvider(replay: ProviderReplay, descriptor: ProviderDescriptor | undefined): boolean;
+export declare function isReplayCompatibleWithProvider(replay: Partial<ProviderReplay>, descriptor: ProviderDescriptor | undefined): boolean;
 export declare function seedProviderReplayFromEvents(provider: LLMProvider, events: Array<{
     event: SessionEvent;
 }>): void;

package/dist/runtime/provider-replay.js

@@ -33,22 +33,6 @@ export function assistantReplayKey(message) {
         toolCalls,
     });
 }
-/**
- * Infer the wire protocol a stored replay envelope belongs to.
- *
- * New envelopes carry an explicit `protocol`. Legacy envelopes are inferred
- * from their shape: Anthropic persisted `native_blocks`, OpenAI-compatible
- * persisted `reasoning_content` / `reasoning_details`.
- */
-function replayProtocol(replay) {
-    if (replay.protocol)
-        return replay.protocol;
-    if (replay.native_blocks?.length)
-        return "anthropic-messages";
-    if (replay.reasoning_content != null || replay.reasoning_details !== undefined)
-        return "openai-chat";
-    return undefined;
-}
 /**
  * A stored replay may only be seeded into a provider speaking the same wire
  * protocol. On a cross-protocol fallback (provider A -> provider B) the
@@ -56,12 +40,16 @@ function replayProtocol(replay) {
  * of replaying A's protocol-specific shape.
  */
 export function isReplayCompatibleWithProvider(replay, descriptor) {
-    if (!descriptor)
-        return true;
-    const protocol = replayProtocol(replay);
-    if (!protocol)
-        return true;
-    return protocol === descriptor.protocol;
+    assertCanonicalReplay(replay);
+    return !descriptor || replay.protocol === descriptor.protocol;
+}
+const REPLAY_KEYS = new Set(["protocol", "provider", "model", "native_blocks", "reasoning_content", "reasoning_details", "native_message", "tool_calls"]);
+function assertCanonicalReplay(replay) {
+    for (const key of Object.keys(replay))
+        if (!REPLAY_KEYS.has(key))
+            throw new Error(`provider replay has unknown field ${key}`);
+    if (typeof replay.protocol !== "string" || replay.protocol.length === 0)
+        throw new Error("provider replay protocol is required");
 }
 export function seedProviderReplayFromEvents(provider, events) {
     if (!provider.seedProviderReplay)
@@ -72,12 +60,9 @@ export function seedProviderReplayFromEvents(provider, events) {
             continue;
         const toolCalls = event.tool_calls ?? [];
         const stored = event.provider_replay;
-        if (stored && !isReplayCompatibleWithProvider(stored, descriptor))
+        if (!stored || !isReplayCompatibleWithProvider(stored, descriptor))
             continue;
-        // Pass the message even when no replay was persisted: a provider may
-        // reconstruct a legacy replay (e.g. Anthropic native_blocks) from the
-        // neutral transcript. Providers that cannot reconstruct simply no-op.
-        provider.seedProviderReplay({ content: event.content, toolCalls }, stored ?? {});
+        provider.seedProviderReplay({ content: event.content, toolCalls }, stored);
     }
 }
 export function peekProviderReplay(provider, content, toolCalls) {

package/dist/runtime/reactive-session.d.ts

@@ -121,7 +121,7 @@ export declare class ReactiveSession {
      * blackboard continuity comes from the (persistent) `EventStream`. Turn-policy cursor state is not
      * restored. W-N5: vehicle members (workflow envelopes, `wf-node*` children, loop iterations) share
      * the governance domain but are NOT personas — resuming them as peers would resurrect phantoms.
-     * A legacy membership with no kind tags falls back to resuming every member.
+     * Only explicitly tagged peer memberships are resumable.
      */
     static resume(opts: ReactiveSessionOptions & {
         peerSpecs?: Record<string, ReactivePeerSpec>;

package/dist/runtime/reactive-session.js

@@ -135,14 +135,13 @@ export class ReactiveSession {
      * blackboard continuity comes from the (persistent) `EventStream`. Turn-policy cursor state is not
      * restored. W-N5: vehicle members (workflow envelopes, `wf-node*` children, loop iterations) share
      * the governance domain but are NOT personas — resuming them as peers would resurrect phantoms.
-     * A legacy membership with no kind tags falls back to resuming every member.
+     * Only explicitly tagged peer memberships are resumable.
      */
     static async resume(opts) {
         const session = new ReactiveSession(opts);
         const members = await opts.runGroup.budgetStore.members(opts.runGroup.id);
-        const anyTagged = members.some(m => m.kind !== undefined);
         for (const member of members) {
-            if (anyTagged && member.kind !== "peer")
+            if (member.kind !== "peer")
                 continue;
             session.peerSpecs.set(member.sessionId, opts.peerSpecs?.[member.sessionId] ?? { role: member.role });
         }

package/dist/runtime/run-group.d.ts

@@ -34,7 +34,7 @@ export interface GroupMember {
     /** W-N5: what this member IS in the lineage — a `"peer"` persona (ReactiveSession.addPeer) vs a
      *  `"vehicle"` session (run()/runWorkflow envelopes, workflow-node children, loop iterations).
      *  `ReactiveSession.resume()` rebuilds the peer set from `"peer"` members only, so DAG-in-Peer
-     *  usage can't resurrect phantom `wf-node*` personas. Absent (legacy) = unknown. */
+     *  usage can't resurrect phantom `wf-node*` personas. Absent means unknown. */
     kind?: "peer" | "vehicle";
 }
 export interface GroupBudgetStore {

package/dist/runtime/runner.d.ts

@@ -1,5 +1,5 @@
-import type { LLMProvider, Message, ContentPart, ToolSchema, StreamEvent, ToolSuspendEvent, PermissionRequestEvent, PermissionResponse, AsyncSummarizer, DreamSummarizer, EntropySample, EntropyWatchOptions } from "../types.js";
-import type { DreamStore, MemoryRecord, MemoryRecall, MemoryScope, MemoryQuery } from "../memory/protocols.js";
+import type { LLMProvider, Message, ContentPart, ToolSchema, StreamEvent, ToolSuspendEvent, PermissionRequestEvent, PermissionResponse, AsyncSummarizer, MemorySummarizer, EntropySample, EntropyWatchOptions } from "../types.js";
+import type { MemoryStore, MemoryRecord, MemoryRecall, MemoryScope, MemoryQuery } from "../memory/protocols.js";
 import type { KnowledgeSource } from "../knowledge/source.js";
 import type { RuntimeSignalUrgency, SignalSource } from "../signals/types.js";
 import type { SessionLog, SessionEvent } from "./session-log.js";
@@ -15,15 +15,18 @@ import { type GovernancePolicy } from "../governance.js";
 import { type NativeOsProfile, type OsProfileId, type SignalPolicy } from "./os-profile.js";
 import { PayloadStore } from "./payload-store.js";
 import type { BackgroundTaskErrorHandler } from "./reliability.js";
-import { type ContextPolicyOverridesV1 } from "./context-policy.js";
+import { type ContextPolicyOverrides } from "./context-policy.js";
 import { type InstructionProfile } from "../harness/manifest.js";
 import { type NudgeRule } from "../harness/nudge.js";
 export interface SchedulerPolicy {
-    version: 1;
     criticalPathWeight: number;
     fanoutWeight: number;
     ageWeight: number;
     tokenCostWeight: number;
+    deadlineWeight?: number;
+    processPriorityWeight?: number;
+    resourcePressureWeight?: number;
+    budgetPressureWeight?: number;
 }
 export declare function schedulerPolicyToKernel(policy: SchedulerPolicy): Record<string, number>;
 /** Host-counted provider envelope and response reserves deducted from the model context window. */
@@ -117,10 +120,10 @@ export interface RuntimeOptions {
     memoryScope?: MemoryScope;
     /** I4: optional run-start memory pre-fetch hook. The runner calls this ONCE per run, before the
      *  first LLM turn, with the request's goal and (optional) run-spec. Each returned scoped query
-     *  becomes a `dreamStore.search(agentId, query)` and the resulting hits land in decaying
+     *  becomes a `memoryStore.search(agentId, query)` and the resulting hits land in decaying
      *  HISTORY as an ordinary user turn before turn 1 (single-use retrieval content — never a
      *  permanent knowledge pin; `initialMemory` is the curated CLAUDE.md-analog seed). Returning
-     *  `undefined` / empty array is a no-op. Requires `dreamStore` + `agentId`; missing either ⇒
+     *  `undefined` / empty array is a no-op. Requires `memoryStore` + `agentId`; missing either ⇒
      *  silently skipped (errs-open). Default when unset: one query = the run goal (P10). Bench memory-recall shows -57% turns / -55% dollars when
      *  relevant memories land on turn 1 instead of being discovered via the meta-tool on turn 3+. */
     preQueryMemory?: (ctx: {
@@ -150,7 +153,7 @@ export interface RuntimeOptions {
      *  scanned skills fed); empty array ⇒ no skills (a legitimate narrowing — unlike an empty
      *  `allowedToolIds`, which the runner reads as "no gating"). Only takes effect when `skillDir` is set. */
     skillFilter?: string[];
-    dreamStore?: DreamStore;
+    memoryStore?: MemoryStore;
     /** M4: advisory callback when a recalled record crosses the promotion threshold. The host/model
      *  decides whether to pin the record or promote its content into knowledge. */
     onPromotionSuggested?: (info: {
@@ -168,13 +171,13 @@ export interface RuntimeOptions {
      * AskUser calls surface as `tool_gated` and run through `onPermissionRequest`.
      */
     governancePolicy?: GovernancePolicy;
-    /** Version-1 in-kernel signal admission, queue, and expiry policy. */
+    /** In-kernel signal admission, queue, and expiry policy. */
     signalPolicy?: SignalPolicy;
     /** Provider-envelope overhead plus output and safety reserves journaled before start. */
     promptBudget?: PromptBudget;
     /** Stable replayable context behavior; SDK ratios are normalized to integer ppm on the ABI wire. */
-    contextPolicy?: ContextPolicyOverridesV1;
-    /** Versioned deterministic DAG scheduling policy installed atomically through ConfigureRun. */
+    contextPolicy?: ContextPolicyOverrides;
+    /** Deterministic DAG scheduling policy installed atomically through ConfigureRun. */
     schedulerPolicy?: SchedulerPolicy;
     /**
      * Optional declarative resource quotas (`set_resource_quota`). Bounds spawn concurrency /
@@ -231,15 +234,13 @@ export interface RuntimeOptions {
      * executes. Return `{ block: true, reason }` to veto — the call never runs and the reason is fed
      * back to the model as a denied tool result. This is the seam for STATEFUL host policy (count
      * repeats, budget writes per resource, project-specific rules); keep static allow/deny in
-     * `governancePolicy`. A throwing decision hook fails closed by default.
+     * `governancePolicy`. A throwing decision hook always fails closed.
      */
     onToolCall?: (call: {
         callId: string;
         name: string;
         arguments: string;
     }) => Promise<ToolCallHookDecision | undefined | void> | ToolCallHookDecision | undefined | void;
-    /** Failure policy for `onToolCall`. Default `closed`; set `open` only for advisory hooks. */
-    onToolCallFailure?: "closed" | "open";
     /**
      * O5 (the PostToolUse-hook analog): called for each executed tool result before it reaches the
      * kernel. Return `{ replaceOutput }` to swap the result the model sees (redact / annotate), and/or
@@ -271,7 +272,7 @@ export interface RuntimeOptions {
      */
     nestedGroupVehicle?: boolean;
     /**
-     * Optional canonical long-term memory policy. Enabling memory still requires `dreamStore` +
+     * Optional canonical long-term memory policy. Enabling memory still requires `memoryStore` +
      * `agentId`; storage location is configured on that host store, not in the kernel contract.
      */
     memoryPolicy?: MemoryPolicy;
@@ -310,8 +311,7 @@ export interface RuntimeOptions {
      * synthesizes a minimal run spec. Omitted **or empty** ⇒ no ceiling (all registered tools) — the
      * empty array is NOT a minimal surface here; use `baselineToolIds: []` for that.
      *
-     * Enforcement: `toolDispatchGate` (default `"exposed"`) makes this a real boundary — a call to a
-     * tool outside the advertised set never executes.
+     * Dispatch is always fail-closed: a call outside the advertised set never executes.
      */
     allowedToolIds?: string[];
     /**
@@ -322,27 +322,13 @@ export interface RuntimeOptions {
      *
      *   `exposed = meta ∪ ((baseline ∪ stableCore ∪ ⋃ activeSkills.allowed_tools) ∩ ceiling)`
      *
-     * An active skill that declares no `allowed_tools` contributes nothing — with a baseline set the
-     * surface stays narrow (strict; the legacy errs-open widening is deliberately not inherited).
+     * An active skill that declares no `allowed_tools` contributes nothing and the surface stays narrow.
      *
-     * `undefined` ⇒ legacy behavior, byte-identical (ceiling + errs-open skill narrowing). `[]` is a
-     * legitimate, distinct value: the minimal surface (meta-tools + `stableCoreToolIds` only) — the
+     * `undefined` and `[]` both mean the minimal surface (meta-tools + `stableCoreToolIds` only) — the
      * `allowedToolIds` "empty means no gating" trap does NOT recur here. Entries outside the ceiling
      * silently intersect away (no root-start error), the same fold every id-list surface uses.
      */
     baselineToolIds?: string[];
-    /**
-     * Dispatch enforcement for the exposure surface. `"exposed"` (default) is fail-closed: a tool call
-     * the model was never advertised this turn never reaches the host — the kernel commits a
-     * model-visible `governance_denied` result instead ("Tool 'X' is not part of this run's toolset"),
-     * which feeds the repeat fuse like any other denial. Allowed siblings in the same batch still
-     * execute; `pace` and the meta-tool family always pass through.
-     *
-     * `"registered"` is the escape hatch restoring the pre-gate permissive behavior (any registered
-     * tool the model names executes, even if it was gated out of the tools schema). Set it only when a
-     * host deliberately relies on blind calls to unadvertised tools.
-     */
-    toolDispatchGate?: "exposed" | "registered";
     /** P0-C: optional per-turn metrics sink for tool-gating telemetry (see `TurnMetrics`). Pure
      *  observation; invoked once per LLM turn. Never throws into the run loop (errors are swallowed). */
     onTurnMetrics?: (metrics: TurnMetrics) => void;
@@ -366,15 +352,15 @@ export interface RuntimeOptions {
     /** G2: custom reducers for `NodeKind::Reduce` workflow nodes, merged over the built-ins
      *  (`concat` / `dedupe_lines` / `merge_json_arrays` / `count`). A reduce node runs no LLM. */
     reducers?: ReducerRegistry;
-    /** Optional system prompt injected into the dream synthesis call. */
-    dreamSystemPrompt?: string;
-    /** Custom LLM provider used for background memory consolidation (dream loop). */
-    dreamProvider?: LLMProvider;
+    /** Optional system prompt injected into durable-memory synthesis. */
+    memorySystemPrompt?: string;
+    /** Custom LLM provider used for durable-memory consolidation. */
+    memoryProvider?: LLMProvider;
     /**
-     * Optional LLM summarizer for semantic page_out events. When unset, `dreamProvider`
-     * (or the runtime provider) is used to produce long-term summaries for DreamStore.
+     * Optional LLM summarizer for semantic page_out events. When unset, `memoryProvider`
+     * (or the runtime provider) is used to produce long-term summaries for MemoryStore.
      */
-    dreamSummarizer?: DreamSummarizer;
+    memorySummarizer?: MemorySummarizer;
     /**
      * Optional async LLM summarizer. When provided, a background call is fired
      * after each compression event to produce a richer semantic summary.
@@ -429,7 +415,7 @@ export declare class RuntimeRunner {
     private retrieveMemoryFromStore;
     /**
      * Route a host-originated renewal prefetch into canonical knowledge commands. This is not an
-     * agent syscall: the host selects records from its store, then the kernel owns the only mutation
+     * agent syscall: the host selects records from its store, then the kernel owns the write
      * of live semantic context. `seenRecordIds` is the prefetch's dedupe horizon.
      */
     private prefetchMemoryIntoKnowledge;