@happyvertical/smrt-ingestion 0.57.30 → 0.57.31

package/PROPOSALS.md

@@ -186,7 +186,8 @@ Model output can contain only offered handler versions, schema-valid arguments,
 retained evidence locations and offered alternative handler/candidate keys.
 Candidate IDs must occur in the offered set, and evidence IDs in retained source
 results. Unknown enums, invented IDs, extra authority/tool/approval fields and
-malformed structures fail closed. Missing required fields are retained as
+malformed structures fail closed (an invented candidate target alone is dropped
+for review instead, see below). Missing required fields are retained as
 `missingFields`, with `needs_review`; values are never invented to satisfy a
 schema. Observed page/time/source granularity is preserved. Logical scan splits
 use `proposeDocumentSplits`; originals and hashes remain intact.
@@ -237,6 +238,34 @@ rejected, even when the earlier split on that evidence was dropped. Like
 reply. Stored output is never re-validated, so earlier attempts and their
 digests replay unchanged.
 
+An invented target — a value in an offered handler's candidate reference field
+that is not among the offered candidates for that field's model — no longer
+rejects the attempt (#4289). The validator drops the key from the arguments
+(no placeholder) and revalidates what remains through the required-only path
+above: a dropped required field becomes a computed `missingFields` entry, a
+dropped optional field is simply absent, and either way the suggestion is
+`needs_review` for the reviewer to choose an offered target.
+`provenance.unofferedTargetsDropped` records `{suggestions, fields}` counts
+only, never IDs, labels or field names; it is absent when nothing was dropped
+and removed whenever the suggestions are discarded. Every candidate field that
+stays in the arguments has been checked against the offered set, so no
+unoffered value survives as a target. The attempt still rejects as before for
+an unoffered handler or alternative, unknown evidence (argument or reference),
+a non-string target, a target field the handler schema does not declare in
+`properties`, any other argument error, or a drop that exposes a refusal other
+than `required`.
+
+The exact dropped value is also searched for in the kept suggestions and splits
+(JSON-escaped, keys included); an exact echo, such as the ID repeated in an
+explanation or another argument, rejects the attempt. This guard fails closed
+on short or common values: a dropped `"1"` or `"a"` almost always occurs
+somewhere else in the output, so such a reply rejects rather than being kept.
+It is an exact-match check, not a general leak filter: a case variant, a
+reformatted copy or a fragment of the ID in free text (an explanation or a
+text argument) is not detected and may reach the reviewer as ordinary model
+prose. Free text is never a target and never authority; only the checked
+candidate fields are.
+
 A rejected reply ends the attempt as `provider_error` with the `malformed_output`
 warning and a bounded, value-free `provenance.failure` `{category, reason}` (#4207).
 The reason lists schema-owned paths, keywords and schema constants, for example

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-ingestion",
-  "packageVersion": "0.57.30",
+  "packageVersion": "0.57.31",
   "objects": {
     "@happyvertical/smrt-ingestion:IntakeItem": {
       "name": "intakeitem",