@framers/agentos 0.12.3 → 0.12.5

package/dist/cognition/emergent/EffectsStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EffectsStore.d.ts","sourceRoot":"","sources":["../../../src/cognition/emergent/EffectsStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAEjE,qEAAqE;AACrE,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEjF,oDAAoD;AACpD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC;IAChC,sFAAsF;IACtF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,wGAAwG;IACxG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,uCAAuC;AACvC,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAEjF;AAID,qBAAa,YAAY;IAIrB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJ1B,OAAO,CAAC,KAAK,CAA4B;gBAGtB,EAAE,EAAE,eAAe,EACnB,OAAO,EAAE;QACxB,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,wEAAwE;QACxE,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;KACnC;IAGH,+GAA+G;IACzG,MAAM,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAuBhD,2GAA2G;IACrG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,4EAA4E;IACtE,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA4BlE;;;;;OAKG;IACH,OAAO,CAAC,OAAO;CAsBhB"}

package/dist/cognition/emergent/EffectsStore.js

@@ -0,0 +1,96 @@
+/**
+ * @fileoverview Effect records for code-forged tools under a ceiling: an
+ * intent row written before each capability call, and a terminal update after
+ * it, in `agentos_emergent_effects`. A row without an outcome reads as
+ * unknown: its run's process ended, or its terminal write failed.
+ * @module @framers/agentos/emergent/EffectsStore
+ */
+import { createHash, randomUUID } from 'node:crypto';
+/** The target as a record keeps it. */
+export function recordedTarget(target, content) {
+    return content === 'full' ? target : createHash('sha256').update(target).digest('hex');
+}
+const DAY_MS = 86400000;
+export class EffectsStore {
+    constructor(db, options) {
+        this.db = db;
+        this.options = options;
+    }
+    /** Writes the intent row and resolves to its id. Rejects when the write fails; the caller refuses the call. */
+    async intent(row) {
+        await this.prepare();
+        const id = randomUUID();
+        await this.db.run(`INSERT INTO agentos_emergent_effects
+         (id, tool_id, call_id, agent_id, capability, target, target_form, decision, decided_by, intent_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+            id,
+            row.toolId,
+            row.callId,
+            row.agentId,
+            row.capability,
+            recordedTarget(row.target, this.options.content),
+            this.options.content,
+            row.decision,
+            row.decidedBy,
+            Date.now(),
+        ]);
+        return id;
+    }
+    /** Writes the terminal half of an intent row. Rejects when the write fails; the row then reads unknown. */
+    async terminal(id, end) {
+        await this.db.run(`UPDATE agentos_emergent_effects
+          SET outcome = ?, code = ?, bytes = ?, uses = ?, terminal_at = ?
+        WHERE id = ?`, [end.outcome, end.code ?? null, end.bytes ?? null, end.uses ?? null, Date.now(), id]);
+    }
+    /** One row holding both halves: a refused call, or a run's crypto count. */
+    async whole(row, end) {
+        await this.prepare();
+        const at = Date.now();
+        await this.db.run(`INSERT INTO agentos_emergent_effects
+         (id, tool_id, call_id, agent_id, capability, target, target_form, decision, decided_by, intent_at,
+          outcome, code, bytes, uses, terminal_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+            randomUUID(),
+            row.toolId,
+            row.callId,
+            row.agentId,
+            row.capability,
+            recordedTarget(row.target, this.options.content),
+            this.options.content,
+            row.decision,
+            row.decidedBy,
+            at,
+            end.outcome,
+            end.code ?? null,
+            end.bytes ?? null,
+            end.uses ?? null,
+            at,
+        ]);
+    }
+    /**
+     * The schema made ready, then, once per store, the rows older than
+     * `retainDays` deleted from this table (never tool rows or state). A failed
+     * preparation is tried again by the next write; a failed prune is logged
+     * and not tried again.
+     */
+    prepare() {
+        if (!this.ready) {
+            this.ready = (async () => {
+                await this.options.ensureSchema();
+                if (this.options.retainDays !== undefined) {
+                    const cutoff = Date.now() - this.options.retainDays * DAY_MS;
+                    await this.db
+                        .run('DELETE FROM agentos_emergent_effects WHERE intent_at < ?', [cutoff])
+                        .catch((error) => {
+                        console.warn('[agentos:emergent] could not prune effect records:', error instanceof Error ? error.message : error);
+                    });
+                }
+            })().catch((error) => {
+                this.ready = undefined;
+                throw error;
+            });
+        }
+        return this.ready;
+    }
+}
+//# sourceMappingURL=EffectsStore.js.map

package/dist/cognition/emergent/EffectsStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EffectsStore.js","sourceRoot":"","sources":["../../../src/cognition/emergent/EffectsStore.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA6BrD,uCAAuC;AACvC,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,OAA0B;IACvE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,MAAM,GAAG,QAAU,CAAC;AAE1B,MAAM,OAAO,YAAY;IAGvB,YACmB,EAAmB,EACnB,OAKhB;QANgB,OAAE,GAAF,EAAE,CAAiB;QACnB,YAAO,GAAP,OAAO,CAKvB;IACA,CAAC;IAEJ,+GAA+G;IAC/G,KAAK,CAAC,MAAM,CAAC,GAAiB;QAC5B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;;6CAEuC,EACvC;YACE,EAAE;YACF,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,UAAU;YACd,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,OAAO;YACpB,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,SAAS;YACb,IAAI,CAAC,GAAG,EAAE;SACX,CACF,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2GAA2G;IAC3G,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,GAAmB;QAC5C,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;;qBAEe,EACf,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CACrF,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,KAAK,CAAC,GAAiB,EAAE,GAAmB;QAChD,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;;;4DAGsD,EACtD;YACE,UAAU,EAAE;YACZ,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,MAAM;YACV,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,UAAU;YACd,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAChD,IAAI,CAAC,OAAO,CAAC,OAAO;YACpB,GAAG,CAAC,QAAQ;YACZ,GAAG,CAAC,SAAS;YACb,EAAE;YACF,GAAG,CAAC,OAAO;YACX,GAAG,CAAC,IAAI,IAAI,IAAI;YAChB,GAAG,CAAC,KAAK,IAAI,IAAI;YACjB,GAAG,CAAC,IAAI,IAAI,IAAI;YAChB,EAAE;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,OAAO;QACb,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE;gBACvB,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;gBAClC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;oBAC7D,MAAM,IAAI,CAAC,EAAE;yBACV,GAAG,CAAC,0DAA0D,EAAE,CAAC,MAAM,CAAC,CAAC;yBACzE,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;wBACxB,OAAO,CAAC,IAAI,CACV,oDAAoD,EACpD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;oBACJ,CAAC,CAAC,CAAC;gBACP,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC5B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/cognition/emergent/EmergentCapabilityEngine.d.ts

@@ -135,8 +135,15 @@ export interface EmergentCapabilityEngineDeps {
     config: EmergentConfig;
     /** Builder for composable (tool-chaining) implementations. */
     composableBuilder: ComposableToolBuilder;
-    /** Sandboxed code executor for arbitrary-code implementations. */
-    sandboxForge: SandboxedToolForge;
+    /**
+     * The executor for code-forged tools. Optional: without it the engine
+     * builds one from `config.sandboxMemoryMB` and `config.sandboxTimeoutMs`.
+     * Under a ceiling (`config.capabilities`) a forge given here must be no
+     * wider than the ceiling (construction fails with
+     * `forge_wider_than_ceiling` naming the option), narrows it where it is
+     * narrower, and serves this engine only.
+     */
+    sandboxForge?: SandboxedToolForge;
     /** LLM-as-judge evaluator for creation and promotion reviews. */
     judge: EmergentJudge;
     /** Tiered registry for storing and querying emergent tools. */
@@ -165,6 +172,10 @@ export declare class EmergentCapabilityEngine {
     private readonly onToolForged?;
     private readonly onToolPromoted?;
     private readonly onToolRemoved?;
+    /** The host's ceiling for code-forged tools, resolved; absent on the legacy path. */
+    private readonly ceiling?;
+    /** The broker the forge's injected functions come from under a ceiling. */
+    private readonly broker?;
     /** Internal index for fast session/agent → tool lookups. */
     private readonly index;
     /**
@@ -427,5 +438,14 @@ export declare class EmergentCapabilityEngine {
     private removeIndexedToolEverywhere;
     private extractSessionId;
     private buildSandboxExecutable;
+    /**
+     * One run of forged code, as a forge test or a call. Under a ceiling the
+     * run has its own call handle, which ends when the run does, however it
+     * ends (it returns, throws or times out): the broker refuses capability
+     * calls from then on, aborts the ones in flight, waits up to a second for
+     * them, and hands back the run's effects. The handle is per run, so ending
+     * one never touches a concurrent run of the same tool.
+     */
+    private runSandboxed;
 }
 //# sourceMappingURL=EmergentCapabilityEngine.d.ts.map

package/dist/cognition/emergent/EmergentCapabilityEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EmergentCapabilityEngine.d.ts","sourceRoot":"","sources":["../../../src/cognition/emergent/EmergentCapabilityEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EAKZ,SAAS,EAET,QAAQ,EACT,MAAM,YAAY,CAAC;AAgBpB,OAAO,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAuB,MAAM,2BAA2B,CAAC;AAClG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAMjE;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3E;;;;OAIG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,OAAO,GAAG,IAAI,CAAC;IAEjG,8FAA8F;IAC9F,aAAa,CAAC,EAAE,wBAAwB,CAAC;IAEzC,mDAAmD;IACnD,eAAe,EAAE,CACf,OAAO,CAAC,EAAE,oBAAoB,KAC3B,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEhE,gEAAgE;IAChE,eAAe,EAAE,MAAM,MAAM,EAAE,CAAC;IAEhC,gEAAgE;IAChE,SAAS,EAAE,CACT,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAElE,oDAAoD;IACpD,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAElE,sFAAsF;IACtF,YAAY,EAAE,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,KAC3B,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAErF,mEAAmE;IACnE,WAAW,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,oBAAoB,EAC9B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,KAAK,KACT,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;IAE1B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CACZ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,EACvE,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnB,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC;IAEb,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,oBAAoB,KAC1B,IAAI,CAAC;CACX;AA8CD,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,GAAG;IAC7E;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC;CAC9C,CAAC;AAEF,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,mGAAmG;IACnG,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAqCD;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kDAAkD;IAClD,MAAM,EAAE,cAAc,CAAC;IAEvB,8DAA8D;IAC9D,iBAAiB,EAAE,qBAAqB,CAAC;IAEzC,kEAAkE;IAClE,YAAY,EAAE,kBAAkB,CAAC;IAEjC,iEAAiE;IACjE,KAAK,EAAE,aAAa,CAAC;IAErB,+DAA+D;IAC/D,QAAQ,EAAE,oBAAoB,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AA6DD,qBAAa,wBAAwB;IACnC,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAA2D;IACzF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAwC;IAEvE,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGpB;IAEF;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuC;IAEvE;;;;OAIG;gBACS,IAAI,EAAE,4BAA4B;IAqB9C;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,KAAK,CACT,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,oBAAoB,CAAA;KAAE,GAC7E,OAAO,CAAC,WAAW,CAAC;IA0RvB;;;;;;;;;;;;;;;;OAgBG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA4DrE;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAoBlD;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE;IAQ9C;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAkBjD;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIzD,OAAO;IAmCrB;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAkBnE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAyF/F;;;;;;;;OAQG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBnE;;;;;OAKG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBlE;;;;;;OAMG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAI5E;;;;;OAKG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAuB7C,OAAO;YAIP,UAAU;IA4BxB;;;;OAIG;YACW,QAAQ;IAStB,gFAAgF;IAChF,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,QAAQ;IAgDhB;;;OAGG;IACH;;;;;OAKG;YACW,OAAO;YA6BP,KAAK;IAmPnB;;;;;;;;;;;;;OAaG;YACW,kBAAkB;IAwChC,6DAA6D;YAC/C,cAAc;IAc5B;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAsBlB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAoBxB,oFAAoF;IACpF,OAAO,CAAC,WAAW;IASnB;;;;OAIG;YACW,gBAAgB;YAYhB,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAU5B,iFAAiF;IACjF,OAAO,CAAC,UAAU;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACG,0BAA0B,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAqGjF;;;;;;;OAOG;IACH,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG,sBAAsB;IAuIhE;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,2BAA2B;IASnC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,sBAAsB;CAgC/B"}
+{"version":3,"file":"EmergentCapabilityEngine.d.ts","sourceRoot":"","sources":["../../../src/cognition/emergent/EmergentCapabilityEngine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,cAAc,EACd,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,YAAY,EAKZ,SAAS,EAET,QAAQ,EAIT,MAAM,YAAY,CAAC;AAmBpB,OAAO,KAAK,EAAE,KAAK,EAAoB,oBAAoB,EAAuB,MAAM,2BAA2B,CAAC;AACpH,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAE9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAMjE;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;;OAIG;IACH,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,oBAAoB,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE3E;;;;OAIG;IACH,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,OAAO,GAAG,IAAI,CAAC;IAEjG,8FAA8F;IAC9F,aAAa,CAAC,EAAE,wBAAwB,CAAC;IAEzC,mDAAmD;IACnD,eAAe,EAAE,CACf,OAAO,CAAC,EAAE,oBAAoB,KAC3B,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAEhE,gEAAgE;IAChE,eAAe,EAAE,MAAM,MAAM,EAAE,CAAC;IAEhC,gEAAgE;IAChE,SAAS,EAAE,CACT,EAAE,EAAE,MAAM,EACV,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAElE,oDAAoD;IACpD,WAAW,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAElE,sFAAsF;IACtF,YAAY,EAAE,CACZ,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,oBAAoB,KAC3B,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAErF,mEAAmE;IACnE,WAAW,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,OAAO,CAAC,EAAE,oBAAoB,EAC9B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,KAAK,KACT,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtB,2DAA2D;IAC3D,SAAS,EAAE,MAAM,MAAM,EAAE,CAAC;IAE1B;;;;OAIG;IACH,WAAW,CAAC,EAAE,CACZ,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,EACvE,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnB,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,oBAAoB,KAC1B,OAAO,CAAC;IAEb,wFAAwF;IACxF,eAAe,CAAC,EAAE,CAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,oBAAoB,KAC1B,IAAI,CAAC;CACX;AAiED,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,GAAG;IAC7E;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,SAAS,GAAG,SAAS,CAAC;CAC9C,CAAC;AAEF,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,4DAA4D;AAC5D,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,yEAAyE;AACzE,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,mGAAmG;IACnG,MAAM,EAAE,cAAc,EAAE,CAAC;CAC1B;AAqCD;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,kDAAkD;IAClD,MAAM,EAAE,cAAc,CAAC;IAEvB,8DAA8D;IAC9D,iBAAiB,EAAE,qBAAqB,CAAC;IAEzC;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAElC,iEAAiE;IACjE,KAAK,EAAE,aAAa,CAAC;IAErB,+DAA+D;IAC/D,QAAQ,EAAE,oBAAoB,CAAC;IAE/B;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAEpB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAExE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvD;AA6DD,qBAAa,wBAAwB;IACnC,6BAA6B;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwB;IAC1D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAA2D;IACzF,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAwC;IACxE,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAwC;IAEvE,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAkB;IAE3C,2EAA2E;IAC3E,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAmB;IAE3C,4DAA4D;IAC5D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGpB;IAEF;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuC;IAEvE;;;;OAIG;gBACS,IAAI,EAAE,4BAA4B;IA4C9C;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,KAAK,CACT,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,oBAAoB,CAAA;KAAE,GAC7E,OAAO,CAAC,WAAW,CAAC;IAuSvB;;;;;;;;;;;;;;;;OAgBG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IA4DrE;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAoBlD;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE;IAQ9C;;;;;;;OAOG;IACH,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,YAAY,EAAE;IAkBjD;;;;;;;;;;;;OAYG;IACG,iBAAiB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIzD,OAAO;IAmCrB;;OAEG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IAkBnE;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,kBAAkB,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAyF/F;;;;;;;;OAQG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAmBnE;;;;;OAKG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiBlE;;;;;;OAMG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAI5E;;;;;OAKG;IACG,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAuB7C,OAAO;YAIP,UAAU;IA4BxB;;;;OAIG;YACW,QAAQ;IAStB,gFAAgF;IAChF,OAAO,CAAC,kBAAkB;IAc1B,OAAO,CAAC,QAAQ;IAgDhB;;;OAGG;IACH;;;;;OAKG;YACW,OAAO;YA6BP,KAAK;IAyPnB;;;;;;;;;;;;;OAaG;YACW,kBAAkB;IAwChC,6DAA6D;YAC/C,cAAc;IAc5B;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA+BlB;;;;;OAKG;IACH,OAAO,CAAC,gBAAgB;IAoBxB,oFAAoF;IACpF,OAAO,CAAC,WAAW;IASnB;;;;OAIG;YACW,gBAAgB;YAYhB,gBAAgB;IAO9B;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAU5B,iFAAiF;IACjF,OAAO,CAAC,UAAU;IAWlB;;;;;;;;;;;;;;;;OAgBG;IACG,0BAA0B,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IAqGjF;;;;;;;OAOG;IACH,oBAAoB,CAAC,IAAI,EAAE,YAAY,GAAG,sBAAsB;IAyIhE;;;;;;OAMG;IACH,OAAO,CAAC,SAAS;IAcjB,OAAO,CAAC,iBAAiB;IAKzB,OAAO,CAAC,2BAA2B;IASnC,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,sBAAsB;IAkC9B;;;;;;;OAOG;YACW,YAAY;CAqC3B"}

package/dist/cognition/emergent/EmergentCapabilityEngine.js

@@ -16,6 +16,10 @@
 import { GMI_INSTANCE_ID_PREFIX } from './types.js';
 import { parsePersistedSource, parseRowSchemas, parseStoredRequest, requestFromImplementation, sessionFromSource, requestFromSource, sourceFromImplementation, stateSetterFromColumn, toolFromRow, } from './persisted-source.js';
 import { normalizeAllowlist, toSandboxApis } from './capabilities.js';
+import { randomUUID } from 'node:crypto';
+import { checkRequest, narrowToForge, resolveCeiling } from './ceiling.js';
+import { CapabilityBroker } from './broker/CapabilityBroker.js';
+import { SandboxedToolForge } from './SandboxedToolForge.js';
 // ============================================================================
 // DEPENDENCY BUNDLE
 // ============================================================================
@@ -30,7 +34,23 @@ const REASON_CONFIG_KEYS = {
     step_not_chainable: 'emergent.compose.sideEffectingTools',
     side_effects_undeclared: "the step tool's hasSideEffects",
     step_cycle: "the composition's steps (a step reaches the composition itself)",
+    capability_not_granted: 'emergent.capabilities',
+    request_unreadable: "the tool's stored request (a release that reads it)",
 };
+/**
+ * The start-up line of an engine that runs code-forged tools without a
+ * ceiling: what runs unscoped, and the ceiling that comes closest.
+ */
+function legacyLine(options) {
+    const everyHost = options.fetchDomainAllowlist.length === 0;
+    const hosts = everyHost ? 'any host' : options.fetchDomainAllowlist.join(', ');
+    const domains = everyHost ? "'*'" : JSON.stringify(options.fetchDomainAllowlist);
+    return ('[agentos:emergent] code-forged tools run without a ceiling: a tool granted fetch sends any method to ' +
+        `${hosts} (only the first host is checked; redirects go anywhere), fs.readFile reads under ` +
+        `${options.fsReadRoots.join(', ')}, and crypto is unscoped. The closest ceiling: ` +
+        `capabilities: { fetch: { domains: ${domains} }, 'fs.read': { roots: ${JSON.stringify(options.fsReadRoots)} }, crypto: {} } ` +
+        '(a ceiling sends GET and HEAD only, checks every redirect, and bounds bodies, reads and time).');
+}
 /**
  * The library's suspensions of a composition that a change in what is
  * registered can lift: the composition is checked again when a tool one of
@@ -116,7 +136,6 @@ export class EmergentCapabilityEngine {
         this.admissionChains = new Map();
         this.config = deps.config;
         this.composableBuilder = deps.composableBuilder;
-        this.sandboxForge = deps.sandboxForge;
         this.judge = deps.judge;
         this.registry = deps.registry;
         this.onToolForged = deps.onToolForged;
@@ -128,6 +147,28 @@ export class EmergentCapabilityEngine {
         this.composableBuilder.bind({
             sideEffectingTools: this.config.compose?.sideEffectingTools ?? [],
         });
+        const forge = deps.sandboxForge ??
+            new SandboxedToolForge({ memoryMB: this.config.sandboxMemoryMB, timeoutMs: this.config.sandboxTimeoutMs });
+        if (this.config.capabilities) {
+            // Throws a CeilingError naming the key of the first failure.
+            const resolved = resolveCeiling(this.config.capabilities, this.config.audit, {
+                hasStorage: this.registry.hasStorage(),
+            });
+            this.ceiling = deps.sandboxForge ? narrowToForge(resolved, deps.sandboxForge.effectiveOptions()) : resolved;
+            const store = this.ceiling.audit.store === 'storage'
+                ? this.registry.effectsStore({
+                    content: this.ceiling.audit.content,
+                    ...(this.ceiling.audit.retainDays !== undefined ? { retainDays: this.ceiling.audit.retainDays } : {}),
+                })
+                : undefined;
+            this.broker = new CapabilityBroker(this.ceiling, store);
+            forge.attachBroker(this.broker);
+        }
+        else if (this.config.allowSandboxTools) {
+            // A direct host never calls the loader, so the line comes from here.
+            console.warn(legacyLine(forge.effectiveOptions()));
+        }
+        this.sandboxForge = forge;
     }
     // --------------------------------------------------------------------------
     // PUBLIC: forge
@@ -226,7 +267,7 @@ export class EmergentCapabilityEngine {
                     output: result.output,
                     success: result.success,
                     error: result.error,
-                    ...(details?.effects && details.effects.length > 0 ? { effects: details.effects } : {}),
+                    ...(result.effects && result.effects.length > 0 ? { effects: result.effects } : {}),
                 });
             }
         }
@@ -249,7 +290,20 @@ export class EmergentCapabilityEngine {
                     error: `allowlist names capabilities outside the catalogue: ${list.unknown.join(', ')}`,
                 };
             }
-            // Step 2b: Static code validation before any execution.
+            // Step 2b: under a ceiling the list is a request, and a name the ceiling
+            // does not grant refuses the forge before any test case runs.
+            if (this.ceiling) {
+                const fit = checkRequest(list.capabilities, this.ceiling);
+                if (!fit.ok) {
+                    return {
+                        success: false,
+                        error: `capability_not_granted: ${fit.refused.join(', ')}; this host grants ` +
+                            (fit.allowed.length > 0 ? fit.allowed.join(', ') : 'no capability') +
+                            ' to code-forged tools',
+                    };
+                }
+            }
+            // Step 2c: Static code validation before any execution.
             const validation = this.sandboxForge.validateCode(request.implementation.code, request.implementation.allowlist);
             if (!validation.valid) {
                 return {
@@ -257,20 +311,18 @@ export class EmergentCapabilityEngine {
                     error: `Code validation failed: ${validation.violations.join('; ')}`,
                 };
             }
-            // Step 3: Execute test cases in the sandbox.
+            // Step 3: Execute test cases in the sandbox, each as a run of its own.
             for (const tc of request.testCases) {
-                const sandboxResult = await this.sandboxForge.execute({
-                    code: request.implementation.code,
-                    input: tc.input,
-                    allowlist: request.implementation.allowlist,
-                    memoryMB: this.config.sandboxMemoryMB,
-                    timeoutMs: this.config.sandboxTimeoutMs,
+                const sandboxResult = await this.runSandboxed(request.implementation, tc.input, {
+                    toolId,
+                    agentId: context.agentId,
                 });
                 testResults.push({
                     input: tc.input,
                     output: sandboxResult.output,
                     success: sandboxResult.success,
                     error: sandboxResult.error,
+                    ...(sandboxResult.effects ? { effects: sandboxResult.effects } : {}),
                 });
             }
         }
@@ -1004,6 +1056,12 @@ export class EmergentCapabilityEngine {
         if (!refusal && candidate.tier === 'agent' && candidate.createdBy.startsWith(GMI_INSTANCE_ID_PREFIX)) {
             refusal = 'legacy_owner';
         }
+        // 3b. Under a ceiling, a stored request this release cannot read is not
+        //     replaced by one derived from the source, which could narrow the
+        //     tool silently: it waits, suspended, for a release that reads it.
+        if (!refusal && this.ceiling && implementation?.mode === 'sandbox' && requestStored && !stored?.request) {
+            refusal = 'request_unreadable';
+        }
         if (implementation && !refusal) {
             refusal = this.refusalFor(implementation, name);
         }
@@ -1212,6 +1270,15 @@ export class EmergentCapabilityEngine {
             if (implementation.code.trim() === '') {
                 return 'source_not_persisted';
             }
+            if (this.ceiling) {
+                // The grant must fit the ceiling in force: a lowered ceiling
+                // suspends the tool, and the next load under a ceiling that covers
+                // it again lifts the suspension (the library's, so it is re-checked).
+                const list = normalizeAllowlist(implementation.allowlist);
+                if (list.unknown.length > 0 || !checkRequest(list.capabilities, this.ceiling).ok) {
+                    return 'capability_not_granted';
+                }
+            }
             return null;
         }
         for (const step of implementation.steps) {
@@ -1490,6 +1557,7 @@ export class EmergentCapabilityEngine {
                         output: result.output,
                         error: result.error ?? 'A step of this composition can no longer be chained.',
                         details: result.details,
+                        ...(result.effects ? { effects: result.effects } : {}),
                     };
                 }
                 let success = result.success;
@@ -1520,6 +1588,7 @@ export class EmergentCapabilityEngine {
                         output: result.output,
                         error: error ?? 'Emergent tool execution failed.',
                         ...(result.details ? { details: result.details } : {}),
+                        ...(result.effects ? { effects: result.effects } : {}),
                     };
             },
         };
@@ -1571,25 +1640,65 @@ export class EmergentCapabilityEngine {
             outputSchema: tool.outputSchema,
             category: 'emergent',
             hasSideEffects: true,
-            execute: async (args) => {
+            execute: async (args, context) => {
                 if (tool.implementation.mode !== 'sandbox') {
                     return {
                         success: false,
                         error: 'Sandbox executor received a non-sandbox emergent tool.',
                     };
                 }
-                const sandboxResult = await this.sandboxForge.execute({
-                    code: tool.implementation.code,
-                    input: args,
-                    allowlist: tool.implementation.allowlist,
-                    memoryMB: this.config.sandboxMemoryMB,
-                    timeoutMs: this.config.sandboxTimeoutMs,
+                const sandboxResult = await this.runSandboxed(tool.implementation, args, {
+                    toolId: tool.id,
+                    agentId: context?.personaId ?? 'unknown',
                 });
+                const effects = sandboxResult.effects ? { effects: sandboxResult.effects } : {};
                 return sandboxResult.success
-                    ? { success: true, output: sandboxResult.output }
-                    : { success: false, error: sandboxResult.error };
+                    ? { success: true, output: sandboxResult.output, ...effects }
+                    : { success: false, error: sandboxResult.error, ...effects };
             },
         };
     }
+    /**
+     * One run of forged code, as a forge test or a call. Under a ceiling the
+     * run has its own call handle, which ends when the run does, however it
+     * ends (it returns, throws or times out): the broker refuses capability
+     * calls from then on, aborts the ones in flight, waits up to a second for
+     * them, and hands back the run's effects. The handle is per run, so ending
+     * one never touches a concurrent run of the same tool.
+     */
+    async runSandboxed(implementation, input, who) {
+        const request = {
+            code: implementation.code,
+            input,
+            allowlist: implementation.allowlist,
+            memoryMB: this.config.sandboxMemoryMB,
+            timeoutMs: this.config.sandboxTimeoutMs,
+        };
+        if (!this.broker) {
+            return this.sandboxForge.execute(request);
+        }
+        const controller = new AbortController();
+        const call = {
+            id: randomUUID(),
+            toolId: who.toolId,
+            agentId: who.agentId,
+            signal: controller.signal,
+        };
+        let result;
+        try {
+            result = await this.sandboxForge.execute({ ...request, call });
+        }
+        catch (error) {
+            result = {
+                success: false,
+                error: error instanceof Error ? error.message : String(error),
+                executionTimeMs: 0,
+                memoryUsedBytes: 0,
+            };
+        }
+        controller.abort();
+        const effects = await this.broker.endCall(call.id);
+        return effects.length > 0 ? { ...result, effects } : result;
+    }
 }
 //# sourceMappingURL=EmergentCapabilityEngine.js.map