@intentius/chant-lexicon-fountain 0.105.1 → 0.106.3

package/dist/acp/serve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/acp/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,wFAAwF;AACxF,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BjH"}
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../src/acp/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAUH,wFAAwF;AACxF,wBAAsB,iBAAiB,CAAC,IAAI,GAAE;IAAE,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCjH"}

package/dist/acp/server.d.ts

@@ -42,6 +42,14 @@ export interface AcpServerOptions {
     createHost?: (cwd: string) => ChantHost;
     /** Mints permission request ids. Injected so a test can pin them. */
     newRequestId?: () => string;
+    /**
+     * The id every Op run in this process is named by (#3539). On fountain it
+     * is the conversation id the sandbox's environment carries
+     * (`FOUNTAIN_CONVERSATION_ID`), so the run record the sandbox writes and
+     * the run `chant run status --on fountain` reports have the same id.
+     * Omitted, the local runtime mints one per run.
+     */
+    runId?: string;
 }
 export declare class AcpServer implements JsonRpcHandler {
     private peer;
@@ -50,6 +58,7 @@ export declare class AcpServer implements JsonRpcHandler {
     private readonly version;
     private readonly createHost;
     private readonly newRequestId;
+    private readonly runId;
     /** Serializes turns — see the module doc. */
     private queue;
     constructor(opts?: AcpServerOptions);

package/dist/acp/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/acp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAEL,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AAoBnB,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGvE,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;IACxC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAgBD,qBAAa,SAAU,YAAW,cAAc;IAC9C,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAuC;IAEpD,YAAY,IAAI,GAAE,gBAAqB,EAKtC;IAED,4CAA4C;IAC5C,OAAO,CAAC,SAAS,EAAE,aAAa,GAAG,WAAW,CAG7C;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/D;IAED,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAQ5C;IAED,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,UAAU;YAYJ,MAAM;IAcpB;;;;;;OAMG;YACW,MAAM;YAuCN,cAAc;IAiC5B,8DAA8D;IAC9D,OAAO,CAAC,OAAO;CA0DhB"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/acp/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,OAAO,EAEL,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,WAAW,CAAC;AAoBnB,OAAO,EAAiC,KAAK,SAAS,EAAE,MAAM,QAAQ,CAAC;AAGvE,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;IACxC,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAgBD,qBAAa,SAAU,YAAW,cAAc;IAC9C,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,6CAA6C;IAC7C,OAAO,CAAC,KAAK,CAAuC;IAEpD,YAAY,IAAI,GAAE,gBAAqB,EAMtC;IAED,4CAA4C;IAC5C,OAAO,CAAC,SAAS,EAAE,aAAa,GAAG,WAAW,CAG7C;IAEK,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/D;IAED,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,IAAI,CAQ5C;IAED,OAAO,CAAC,OAAO;IAMf,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,UAAU;YAYJ,MAAM;IAcpB;;;;;;OAMG;YACW,MAAM;YAuCN,cAAc;IAkC5B,8DAA8D;IAC9D,OAAO,CAAC,OAAO;CA0DhB"}

package/dist/acp/turn.d.ts

@@ -59,6 +59,8 @@ export interface TurnOptions {
     durableRequests: boolean;
     /** Mints the id a resume prompt names. Injected so a test can pin it. */
     newRequestId: () => string;
+    /** The id an Op run is named by, when the host names runs (#3539: fountain's conversation id). */
+    runId?: string;
 }
 /**
  * Run one prompt.

package/dist/acp/turn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"turn.d.ts","sourceRoot":"","sources":["../../src/acp/turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG/E,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7E,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAC9D,IAAI,CAAC;IACR,gFAAgF;IAChF,iBAAiB,CACf,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,gBAAgB,EAAE,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,mEAAmE;IACnE,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,iFAAiF;AACjF,eAAO,MAAM,YAAY,UAAU,CAAC;AACpC,eAAO,MAAM,aAAa,WAAW,CAAC;AA8BtC,iCAAiC;AACjC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,YAAY,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAmCrE"}
+{"version":3,"file":"turn.d.ts","sourceRoot":"","sources":["../../src/acp/turn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG/E,kDAAkD;AAClD,MAAM,WAAW,QAAQ;IACvB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC7E,cAAc,CACZ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAC9D,IAAI,CAAC;IACR,gFAAgF;IAChF,iBAAiB,CACf,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,gBAAgB,EAAE,EAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4CAA4C;AAC5C,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,UAAU,CAAC;IACvB,mEAAmE;IACnE,UAAU,CAAC,EAAE,iBAAiB,CAAC;CAChC;AAED,iFAAiF;AACjF,eAAO,MAAM,YAAY,UAAU,CAAC;AACpC,eAAO,MAAM,aAAa,WAAW,CAAC;AA8BtC,iCAAiC;AACjC,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,YAAY,CAAC;IACtB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,YAAY,EAAE,MAAM,MAAM,CAAC;IAC3B,kGAAkG;IAClG,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAmCrE"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "e3c1d8d6142886784c3abb7953bfcd533268ecf18deb71681a3f7230dfbaacac",
+    "manifest.json": "d991df566d8002caaa016de270498899957eae346f481467997be3bd0e339def",
     "meta.json": "3301437a2a56eaf1a5cc8f6eabb18a40767f916e09701b2d9bf20aba4066738c",
     "types/index.d.ts": "cf6b634fe0a8e9e96f1d9d07e3df53838def2683dc93dbe3c7fd971c6d3908ae",
     "rules/ftn001-no-secret-literals.ts": "a417b194cd7039911cca9a0f14c49b042dfa6b1ee48517f7c2e22b16590a8599",
@@ -21,7 +21,7 @@
     "skills/chant-fountain.md": "906a312756a02c88de634915f63ab4dfe1b1078ff4d8cfb4b6dc97eec14bc237",
     "skills/chant-fountain-secrets.md": "40aa847d62547581bebdde630b54796c4e1cbf498869392e0d396d96a75c0ab6",
     "skills/chant-fountain-ops.md": "4e72f0a0c7477a9e98f85ea45e49ba69e8a699f9c13ba0f0cf1cb20a88151373",
-    "skills/chant-fountain-locked-sandboxes.md": "48f4840a891e6b1cc7b5ac3319aebaec8c4e934f452370e55d60cb02a05812ae"
+    "skills/chant-fountain-locked-sandboxes.md": "7404ece96f2a3bc9105942fd3b6db156a3537db7e34c8cf2faa9ba87f5512567"
   },
-  "composite": "24e9d0b9a9ad66534da113e5b373511558c34b3fa592dace618f765034951c43"
+  "composite": "6f4edb83df0d0f55abea6e8fbed09896f4a6a94a73e6f6a81aa21ccb093a916e"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "fountain",
-  "version": "0.105.1",
+  "version": "0.106.3",
   "chantVersion": ">=0.1.0",
   "namespace": "Fountain",
   "specVersion": "v0.21.0"

package/dist/op/activities/fountain-prompt.d.ts

@@ -13,10 +13,11 @@
  * What fountain v0.21.0 can and cannot do here, which decides the arguments:
  *
  * - A conversation that is `terminated` takes no more turns: the prompts route
- *   answers 410. `fountainRun` terminates an ephemeral agent's conversation at
- *   its deadline by default, so a caller that wants a later turn runs the first
- *   one with `terminate: "never"` (a persistent agent's default) and ends the
- *   conversation itself, or with this op's `terminate`, after the last turn.
+ *   answers 410. `fountainRun` terminates an ephemeral agent's conversation
+ *   once its turn ends (or at its deadline) by default, so a caller that wants a
+ *   later turn runs the first one with `terminate: "never"` (a persistent
+ *   agent's default) and ends the conversation itself, or with this op's
+ *   `terminate`, after the last turn.
  * - A turn has no tool allowlist of its own. The prompts route takes only the
  *   prompt, images and `client_request_id`; the tools a conversation may use are
  *   its agent's `permission_policy`, narrowed once at launch, and nothing on the

package/dist/op/activities/fountain-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fountain-prompt.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKtD,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,kCAAkC;IAClC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sHAAsH;IACtH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,UAAU,EAAE,OAAO,CAAC;CACrB;AAuCD,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA2D/B"}
+{"version":3,"file":"fountain-prompt.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAKtD,MAAM,WAAW,kBAAkB;IACjC,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,kCAAkC;IAClC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,qBAAqB,EAAE,OAAO,CAAC;IAC/B,sHAAsH;IACtH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,UAAU,EAAE,OAAO,CAAC;CACrB;AAuCD,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CA2D/B"}

package/dist/op/activities/fountain-run.d.ts

@@ -7,12 +7,18 @@
  * imperative half: resolve the agent by name, POST the conversation, and
  * poll until the turn is done.
  *
- * What "done" means depends on the agent's `sandbox_mode` (#2718). An
- * `ephemeral` conversation's machine is its own and this polls the
- * conversation's own status to `completed | failed | timed_out |
- * terminated` — none of which a running server's conversation status
- * actually reaches on its own, so in practice this waits out `timeoutMs`
- * and terminates, as it always has. A `persistent` agent's conversation
+ * What "done" means depends on the agent's `sandbox_mode` (#2718). Any
+ * conversation is done at `completed | failed | timed_out | terminated`,
+ * but a running server's conversation reaches none of those on its own: when
+ * a turn ends, the conversation settles on `idle`. An `ephemeral`
+ * conversation is done once it is `idle` and its latest turn (`GET .../turns`)
+ * has ended (`completed | failed | interrupted`), and the result is that
+ * turn's outcome (#3386). Before #3386 this path waited for the four statuses
+ * only, so every ephemeral run waited out `timeoutMs` and was terminated. An
+ * ephemeral machine is its own, so by default it is terminated once the wait
+ * ends, cleanly or not (`terminate: "always"`); pass `terminate: "never"` to
+ * keep the conversation up for a later turn through `fountainPrompt`
+ * (#3356). A `persistent` agent's conversation
  * (`Steward`, and `Box` from #2705) shares one machine across every
  * conversation on it, and a turn ending there does not tear the sandbox
  * down: the conversation settles on `idle`, not on any of the four
@@ -43,11 +49,12 @@
  */
 import { type FountainHttp, type FountainConnectionDeps } from "./fountain-apply.js";
 /**
- * Conversation statuses that end an *ephemeral* agent's run. `completed`
- * and `timed_out` are not values fountain's `Conversation.status` takes
- * today (its enum is `pending | running | idle | failed | terminated`) —
- * they are kept so a server that starts reporting them is handled without
- * a further change here.
+ * Conversation statuses that end any agent's run without reading its turns.
+ * `completed` and `timed_out` are not values fountain's `Conversation.status`
+ * takes today (its enum is `pending | running | idle | failed | terminated`);
+ * they are kept so a server that starts reporting them is handled without a
+ * further change here. An ephemeral conversation also ends on `idle` once its
+ * latest turn has ended (#3386).
  */
 export declare const TERMINAL_STATUSES: Set<string>;
 /**
@@ -105,10 +112,12 @@ export interface FountainRunArgs {
     pollMs?: number;
     /**
      * When to terminate the conversation's machine (#2718). Default follows
-     * the agent's `sandbox_mode`: `on-deadline` for `ephemeral` (unchanged),
-     * `never` for `persistent` — its machine is a home meant to outlive the
+     * the agent's `sandbox_mode`: `always` for `ephemeral` (the machine is the
+     * run's own, so it goes once the turn ends or the deadline fires, #3386),
+     * `never` for `persistent` (its machine is a home meant to outlive the
      * conversation, so a run that hits its deadline leaves it be unless this
-     * says otherwise.
+     * says otherwise). Pass `never` on an ephemeral run to send it a later turn
+     * with `fountainPrompt`.
      */
     terminate?: TerminatePolicy;
     /** Injectable clock/sleep for tests. */
@@ -117,9 +126,10 @@ export interface FountainRunArgs {
 export interface FountainRunResult {
     conversationId: string;
     /**
-     * The run's outcome. For a persistent agent whose turn ended, this is the
-     * turn's own status (`completed | failed | interrupted`); otherwise it is
-     * the conversation's status when the wait ended (`terminated` on a
+     * The run's outcome. For a conversation that settled on `idle` after its
+     * turn (persistent, or ephemeral since #3386), this is the turn's own
+     * status (`completed | failed | interrupted`); otherwise it is the
+     * conversation's status when the wait ended (`terminated` on a
      * deadline). For a persistent agent launched with no prompt (#2781), it is
      * the sandbox's outcome: `provisioned` or `failed`.
      */

package/dist/op/activities/fountain-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fountain-run.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,aAA8D,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAA0C,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yHAAyH;IACzH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAaD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAe5F;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAyCD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAqH5B"}
+{"version":3,"file":"fountain-run.d.ts","sourceRoot":"","sources":["../../../src/op/activities/fountain-run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,aAA8D,CAAC;AAE7F;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,aAA0C,CAAC;AAKhF;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,CAAC;AAEjE,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;;;;OAQG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,wCAAwC;IACxC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,UAAU,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yHAAyH;IACzH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAaD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,0EAA0E;IAC1E,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,qEAAqE;AACrE,wBAAsB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAe5F;AAED,qFAAqF;AACrF,wBAAsB,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGvF;AAyCD,wBAAsB,WAAW,CAC/B,IAAI,EAAE,eAAe,EACrB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,CAAC,EAAE,YAAY,EACnB,IAAI,CAAC,EAAE,sBAAsB,GAC5B,OAAO,CAAC,iBAAiB,CAAC,CAwH5B"}

package/dist/op/run-prompt.d.ts

@@ -9,6 +9,57 @@
  * spelling of the same command. Hence one module, imported by both, with no
  * dependencies of its own so neither drags the other in.
  */
-/** The prompt one run of `op` is posted as, and the string a turn is matched by. */
+/**
+ * The bare line one run of `op` is: what a steward's Schedule posts, and the
+ * prefix a turn is matched by. The runtime posts {@link hostedRunPrompt}.
+ */
 export declare function runPrompt(op: string): string;
+/**
+ * One argument as the posted command line spells it (#3539): bare when it is
+ * a plain word, otherwise in double quotes with `\` and `"` escaped, which
+ * is the quoting `tokenize` undoes. An approver named "Alex Smith" reaches the
+ * sandbox as one `--approver` value rather than as `Alex` and a stray `Smith`.
+ */
+export declare function quoteArg(value: string): string;
+/** What {@link hostedRunPrompt} puts on the line after `chant run <op>`. */
+export interface HostedRunPromptOptions {
+    /** `--env`: refused by name unless it is one plain word. */
+    env?: string;
+    /** `--param name=value`, one flag per entry, in order (#3539). */
+    params?: Record<string, unknown>;
+    /**
+     * `--work <item>` and `--holder <name>` (#3555): the work item the run is
+     * for and who holds its lease. The sandbox's run takes the lease.
+     */
+    work?: {
+        item?: string;
+        holder?: string;
+    };
+    /** Flags after `--on local`, as `[flag, value]`; each value is quoted as needed. */
+    flags?: Array<[string, string]>;
+    /** Words appended as they are, already spelled for the command line. */
+    extra?: string[];
+}
+/**
+ * The prompt a hosted run is posted as: {@link runPrompt}, then `--env <env>`
+ * when the caller named one (#3232), then each `--param` (#3539), then
+ * `--work` and `--holder` (#3555), then `--on local` (#3225), then any
+ * further flags.
+ *
+ * `--env` carries the environment the caller asked for into the sandbox,
+ * where `chant acp` hands it to the run as `currentOpRun().env`. `--param`
+ * rides along so the sandbox runs the line the caller typed. `--on local`
+ * keeps a project's `run.on: "fountain"` from sending the posted command
+ * back to fountain: the sandbox runs the Op itself. `chant acp` already runs
+ * every `chant run <op>` on the local runtime; the flag makes the same true
+ * for any other agent that runs the line at a shell.
+ *
+ * A turn still matches {@link runPrompt} by prefix (`turnRunsOp`), and a
+ * steward's Schedule keeps the bare line. An `--env` value that is not one
+ * plain word is refused by name rather than posted, as is a `--work` or
+ * `--holder` value the sandbox's parser would not read as a value (empty, or
+ * starting with `-`); a `--param`, `--work`, `--holder` or flag value is
+ * quoted ({@link quoteArg}).
+ */
+export declare function hostedRunPrompt(op: string, opts?: HostedRunPromptOptions): string;
 //# sourceMappingURL=run-prompt.d.ts.map

package/dist/op/run-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-prompt.d.ts","sourceRoot":"","sources":["../../src/op/run-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5C"}
+{"version":3,"file":"run-prompt.d.ts","sourceRoot":"","sources":["../../src/op/run-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE5C;AAeD;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9C;AAED,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC;;;OAGG;IACH,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1C,oFAAoF;IACpF,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAChC,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,GAAE,sBAA2B,GAAG,MAAM,CA4BrF"}

package/dist/op/runtime.d.ts

@@ -3,7 +3,8 @@
  *
  * `chant run <op> --on fountain` hands the run to a fountain teammate instead
  * of executing it here. This module is the client for that: it posts the
- * command line `chant run <op>` as a prompt on the steward's thread, tails the
+ * command line `chant run <op> [--env <env>] [--param k=v ...] [--work <id>] [--holder <name>] --on local` ({@link hostedRunPrompt})
+ * as a prompt on the steward's thread, tails the
  * conversation's SSE stream, and reports what comes back through the
  * {@link OpRuntimeProvider} contract core defines in
  * `packages/core/src/op/runtime.ts`.
@@ -62,8 +63,8 @@
 import { type ChantConfig } from "@intentius/chant/config";
 import type { OpRunRecord, OpRunState, OpRunStatus, OpRuntimeProvider, StepRecord } from "@intentius/chant/op";
 import { type FountainHttp } from "./activities/fountain-apply.js";
-import { runPrompt } from "./run-prompt.js";
-export { runPrompt };
+import { runPrompt, hostedRunPrompt, quoteArg } from "./run-prompt.js";
+export { runPrompt, hostedRunPrompt, quoteArg };
 /** One server-sent event, already framed. `data` is the raw payload text. */
 export interface FountainSseEvent {
     /** The event id, which becomes the next connection's `Last-Event-ID`. */
@@ -181,7 +182,7 @@ export declare function conversationIsTerminal(status?: string): boolean;
  * turn — its status, its sandbox's, and how many turns it managed. Pure.
  */
 export declare function conversationFailureReason(conversation: Conversation): string;
-/** Does this turn's prompt name `op`? The prompt is `chant run <op>`, exactly. */
+/** Does this turn's prompt name `op`? The prompt is `chant run <op>`, alone or followed by flags. */
 export declare function turnRunsOp(turn: Turn, op: string): boolean;
 /**
  * The run record a turn's final message carries.
@@ -207,6 +208,19 @@ export declare function runStateOfTurn(conversationStatus?: string, turnState?:
  * processes, because nothing here is this client's to remember.
  */
 export declare function createFountainOpRuntime(opts?: FountainOpRuntimeOptions): OpRuntimeProvider;
+/**
+ * The `--env`, `--param`s, `--work` and `--holder` a posted prompt carries,
+ * read with the same quote-aware split `chant acp` uses. A prompt that does
+ * not split (an unterminated quote) carries none of them.
+ */
+export declare function flagsOfPrompt(prompt: string | undefined): {
+    env?: string;
+    params?: Record<string, string>;
+    work?: {
+        item?: string;
+        holder?: string;
+    };
+};
 interface TailOptions {
     sse: FountainSse;
     conversationId: string;
@@ -223,6 +237,12 @@ interface TailOptions {
     http?: FountainHttp;
     /** How much silence asks fountain about the conversation. Default 2s. */
     pollIntervalMs?: number;
+    /**
+     * Turn ids that existed before this run's prompt was posted. The stream
+     * replays the whole log on a first connection, so events of these turns are
+     * skipped: an earlier turn's `done` must not settle this run (#3524).
+     */
+    ignoreTurns?: ReadonlySet<string>;
 }
 /**
  * Tail one conversation to the end of its turn.

package/dist/op/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/op/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAyB,WAAW,EAAqB,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIzJ,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,CAAC;AAIrB,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;CACxG;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAmC/E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAezE;AAiCD,UAAU,IAAI;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,YAAY;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,gGAAgG;AAChG,eAAO,MAAM,8BAA8B,UAAY,CAAC;AAExD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAKlD,wDAAwD;AACxD,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAQ5E;AAOD,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAYpE;AA+BD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CA0B1F;AAwJD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,wBAA6B,GAAG,iBAAiB,CAiW9F;AA4DD,UAAU,WAAW;IACnB,GAAG,EAAE,WAAW,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AA+DD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAgL9E"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/op/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAEH,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAA+C,WAAW,EAAqB,UAAU,EAAE,WAAW,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAI/K,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AAIhD,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC;CACxG;AAED,kFAAkF;AAClF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,CAmC/E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAezE;AAiCD,UAAU,IAAI;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,UAAU,YAAY;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,wBAAwB;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qEAAqE;IACrE,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,sEAAsE;IACtE,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB;;;;;;;;;;;;OAYG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,gGAAgG;AAChG,eAAO,MAAM,8BAA8B,UAAY,CAAC;AAExD;;;;;;;GAOG;AACH,eAAO,MAAM,4BAA4B,OAAQ,CAAC;AAKlD,wDAAwD;AACxD,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,YAAY,GAAG,MAAM,CAQ5E;AAOD,qGAAqG;AACrG,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAG1D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAYpE;AA+BD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU,CA0B1F;AAwJD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,GAAE,wBAA6B,GAAG,iBAAiB,CAuZ9F;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C,CAuCA;AA4DD,UAAU,WAAW;IACnB,GAAG,EAAE,WAAW,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;OAGG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACnC;AA+DD;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAiL9E"}

package/dist/skills/chant-fountain-locked-sandboxes.md

@@ -31,4 +31,4 @@ The environment's config is the enforcement boundary, so watch it: `chant lifecy
 
 ## Running conversations
 
-Conversations are runs, not resources. Use the `fountainRun` activity: resolves the agent by name, starts (optionally with a prompt and an allowlisted vault), and waits for the turn to end. What "end" means, and what happens to the machine, follows the agent's `sandbox_mode`: an `ephemeral` agent's conversation is polled for a terminal status and terminated on deadline, same as before; a `persistent` agent's (a `Steward` or `Box`) conversation settles on `idle` once its turn ends — machine still up for the next turn — so `fountainRun` reads the turn back and returns its outcome (`completed | failed | interrupted`) without terminating anything, by default. Pass `terminate: "on-deadline" | "always"` to opt a persistent agent's run back into ending the machine. To add a turn to a conversation that already exists, use `fountainPrompt` with the conversation's id: it sends the prompt on the same session and waits for that turn, interrupting it at `timeoutMs`. It cannot reach a terminated conversation (fountain answers 410), so run the earlier turn with `terminate: "never"`, and it cannot narrow tools for one turn: that is the agent's `permission_policy`, set at launch. Interrupts and permission answers on their own are fountain's own conversations API.
+Conversations are runs, not resources. Use the `fountainRun` activity: resolves the agent by name, starts (optionally with a prompt and an allowlisted vault), and waits for the turn to end. What "end" means, and what happens to the machine, follows the agent's `sandbox_mode`: an `ephemeral` agent's conversation is done once it settles on `idle` with its turn ended, and `fountainRun` returns that turn's outcome and terminates the machine (`terminate: "always"`, its default; pass `"never"` to keep it for a later turn); a `persistent` agent's (a `Steward` or `Box`) conversation settles on `idle` once its turn ends — machine still up for the next turn — so `fountainRun` reads the turn back and returns its outcome (`completed | failed | interrupted`) without terminating anything, by default. Pass `terminate: "on-deadline" | "always"` to opt a persistent agent's run back into ending the machine. To add a turn to a conversation that already exists, use `fountainPrompt` with the conversation's id: it sends the prompt on the same session and waits for that turn, interrupting it at `timeoutMs`. It cannot reach a terminated conversation (fountain answers 410), so run the earlier turn with `terminate: "never"`, and it cannot narrow tools for one turn: that is the agent's `permission_policy`, set at launch. Interrupts and permission answers on their own are fountain's own conversations API.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-fountain",
-  "version": "0.105.1",
+  "version": "0.106.3",
   "type": "module",
   "description": "Fountain lexicon for chant — sandboxed agent environments, vaults, and agents as typed estate",
   "license": "Apache-2.0",
@@ -50,7 +50,7 @@
     "bundle": "tsx src/package-cli.ts"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.105.1",
+    "@intentius/chant": "^0.106.3",
     "typescript": "^5.9.3",
     "zod": "^4.3.6"
   },

package/src/acp/acp.test.ts

@@ -8,8 +8,15 @@
  * would pass without the protocol ever being spoken.
  */
 
-import { describe, it, expect } from "vitest";
+import { describe, it, expect, vi } from "vitest";
 import { PassThrough } from "node:stream";
+
+// The workspace's sealed gates (`identity.gates`), standing in for a project's declaration.
+const sealedGates = new Set<string>();
+vi.mock("@intentius/chant/op/gate", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("@intentius/chant/op/gate")>();
+  return { ...actual, gateIsSealed: async (gate: string) => sealedGates.has(gate) };
+});
 import {
   JsonRpcPeer,
   memoryTransportPair,
@@ -126,6 +133,8 @@ interface StubHostOptions {
 
 interface StubHost extends ChantHost {
   started: string[];
+  /** The options each `startOp` was handed, in order. */
+  startOpts: OpRunStartOptions[];
   verbsRun: string[];
   resolvedGates: Array<{ op: string; gate: string; by: string }>;
   firstStep: Promise<void>;
@@ -140,6 +149,7 @@ function stubHost(opts: StubHostOptions = {}): StubHost {
   const host: StubHost = {
     cwd: process.cwd(),
     started: [],
+    startOpts: [],
     verbsRun: [],
     resolvedGates: [],
     firstStep,
@@ -153,6 +163,7 @@ function stubHost(opts: StubHostOptions = {}): StubHost {
     },
     async startOp(op: OpConfig, start: OpRunStartOptions): Promise<OpRunHandle> {
       host.started.push(op.name);
+      host.startOpts.push(start);
       const runId = "run-1";
       const settled = (async (): Promise<OpRunStatus> => {
         const records = opts.records ?? [];
@@ -405,6 +416,39 @@ describe("chant acp", () => {
     }
   });
 
+  // #3539: on fountain the session names every run by the conversation id,
+  // and a prompt's --param and --work reach the run as `chant run` passes them.
+  it("names the run by the server's runId and passes --env, --param and --work through", async () => {
+    const host = stubHost({ records: okRecords });
+    const server = new AcpServer({ createHost: () => host, runId: "conv-42" });
+    const { client, sessionId } = await open(server);
+
+    await client.peer.request("session/prompt", {
+      sessionId,
+      prompt: promptOf('chant run demo-op --env prod --param tier=gold --param "note=two words" --work ISSUE-7 --on local'),
+    });
+
+    expect(host.startOpts).toHaveLength(1);
+    expect(host.startOpts[0]).toMatchObject({
+      env: "prod",
+      runId: "conv-42",
+      params: { tier: "gold", note: "two words" },
+      work: { item: "ISSUE-7" },
+    });
+  });
+
+  it("leaves the run id to the runtime when the server names none", async () => {
+    const host = stubHost({ records: okRecords });
+    const server = new AcpServer({ createHost: () => host });
+    const { client, sessionId } = await open(server);
+
+    await client.peer.request("session/prompt", { sessionId, prompt: promptOf("chant run demo-op") });
+
+    expect(host.startOpts[0]).not.toHaveProperty("runId");
+    expect(host.startOpts[0]).not.toHaveProperty("params");
+    expect(host.startOpts[0]).not.toHaveProperty("work");
+  });
+
   it("replies with the run record as the final chunk", async () => {
     const record = {
       version: 1 as const,
@@ -527,12 +571,34 @@ describe("chant acp", () => {
 
     expect(result.stopReason).toBe("end_turn");
     expect(text(client.updates)).toContain("chant approve demo-op deploy");
+    expect(text(client.updates)).not.toContain("--sign");
     expect(client.permissionRequests).toEqual([]);
 
     // A step the run never reached is settled rather than left spinning.
     expect(toolUpdates(client.updates).length).toBe(toolCalls(client.updates).length);
   });
 
+  it("names --sign in the approve hint when the gate is sealed (#3521)", async () => {
+    sealedGates.add("deploy");
+    try {
+      const host = stubHost({
+        records: [okRecords[0]],
+        status: {
+          state: "gated",
+          gate: { name: "deploy", since: "2026-09-06T00:00:01.000Z" },
+        } as Partial<OpRunStatus>,
+      });
+      const server = new AcpServer({ createHost: () => host });
+      const { client, sessionId } = await open(server);
+
+      await client.peer.request("session/prompt", { sessionId, prompt: promptOf("chant run demo-op") });
+
+      expect(text(client.updates)).toContain("chant approve demo-op deploy --sign");
+    } finally {
+      sealedGates.delete("deploy");
+    }
+  });
+
   it("asks for permission and waits under --durable-requests, then completes on resume", async () => {
     let gated = true;
     const gatedHost = stubHost({

package/src/acp/serve.ts

@@ -33,9 +33,17 @@ export async function serveAcpOverStdio(opts: { durableRequests?: boolean; stewa
   // this session is refused, as the gate's resolution is above.
   if (opts.steward) setStewardTurn({ steward: opts.steward });
 
+  // chant#3539 — fountain gives the command it spawns the conversation's id
+  // in `FOUNTAIN_CONVERSATION_ID` (process env only, never on disk), and
+  // `chant run <op> --on fountain` names the run by that same id. Naming the
+  // sandbox's runs by it joins the two: the run record written here carries
+  // the id the caller's `chant run status` reports.
+  const conversationId = process.env.FOUNTAIN_CONVERSATION_ID?.trim();
+
   const server = new AcpServer({
     durableRequests: opts.durableRequests ?? false,
     version: lexiconVersion(),
+    ...(conversationId ? { runId: conversationId } : {}),
   });
 
   const transport = streamTransport(process.stdin, process.stdout);

package/src/acp/server.ts

@@ -70,6 +70,14 @@ export interface AcpServerOptions {
   createHost?: (cwd: string) => ChantHost;
   /** Mints permission request ids. Injected so a test can pin them. */
   newRequestId?: () => string;
+  /**
+   * The id every Op run in this process is named by (#3539). On fountain it
+   * is the conversation id the sandbox's environment carries
+   * (`FOUNTAIN_CONVERSATION_ID`), so the run record the sandbox writes and
+   * the run `chant run status --on fountain` reports have the same id.
+   * Omitted, the local runtime mints one per run.
+   */
+  runId?: string;
 }
 
 /** One open session: a working directory, the turn in flight, and any gate awaiting an answer. */
@@ -93,6 +101,7 @@ export class AcpServer implements JsonRpcHandler {
   private readonly version: string;
   private readonly createHost: (cwd: string) => ChantHost;
   private readonly newRequestId: () => string;
+  private readonly runId: string | undefined;
   /** Serializes turns — see the module doc. */
   private queue: Promise<unknown> = Promise.resolve();
 
@@ -101,6 +110,7 @@ export class AcpServer implements JsonRpcHandler {
     this.version = opts.version ?? "dev";
     this.createHost = opts.createHost ?? createChantHost;
     this.newRequestId = opts.newRequestId ?? (() => randomUUID());
+    this.runId = opts.runId !== undefined && opts.runId !== "" ? opts.runId : undefined;
   }
 
   /** Serve one connection until it closes. */
@@ -256,6 +266,7 @@ export class AcpServer implements JsonRpcHandler {
         signal: controller.signal,
         durableRequests: this.durableRequests,
         newRequestId: this.newRequestId,
+        ...(this.runId ? { runId: this.runId } : {}),
       });
       if (outcome.permission) {
         session.permissions.set(outcome.permission.requestId, { ...outcome.permission });

package/src/acp/turn.ts

@@ -22,7 +22,7 @@ import type { OpConfig, StepDefinition } from "@intentius/chant/op/types";
 import type { StepRecord } from "@intentius/chant/op/local-executor";
 import type { OpRunStatus } from "@intentius/chant/op/runtime";
 import type { PendingGateRecord } from "@intentius/chant/lifecycle/gate-ledger";
-import { approveCommand } from "@intentius/chant/op/gate";
+import { approveCommand, gateIsSealed } from "@intentius/chant/op/gate";
 import { gateName } from "@intentius/chant/op/gate-name";
 import type { ChantCommand } from "./command-line";
 import type { ChantHost } from "./host";
@@ -106,6 +106,8 @@ export interface TurnOptions {
   durableRequests: boolean;
   /** Mints the id a resume prompt names. Injected so a test can pin it. */
   newRequestId: () => string;
+  /** The id an Op run is named by, when the host names runs (#3539: fountain's conversation id). */
+  runId?: string;
 }
 
 /**
@@ -210,8 +212,19 @@ async function runOpTurn(
 
   let status: OpRunStatus;
   try {
+    // What `chant run` itself hands a runtime (#3539): the run's id, when
+    // the session names it, and the prompt's `--param` and `--work`, which a
+    // turn used to drop.
+    const params = paramsOf(command.args.param);
+    const work = {
+      ...(command.args.work !== undefined ? { item: command.args.work } : {}),
+      ...(command.args.holder !== undefined ? { holder: command.args.holder } : {}),
+    };
     const handle = await host.startOp(config, {
       ...(command.args.env ? { env: command.args.env } : {}),
+      ...(opts.runId ? { runId: opts.runId } : {}),
+      ...(params ? { params } : {}),
+      ...(Object.keys(work).length > 0 ? { work } : {}),
       progress: settle,
       signal,
     });
@@ -252,6 +265,18 @@ async function runOpTurn(
   return { stopReason: "end_turn" };
 }
 
+/** `--param name=value` flags as a record, the way `chant run` reads them. */
+function paramsOf(entries: string[] | undefined): Record<string, string> | undefined {
+  if (!entries?.length) return undefined;
+  const out: Record<string, string> = {};
+  for (const entry of entries) {
+    const eq = entry.indexOf("=");
+    if (eq === -1) out[entry] = "";
+    else out[entry.slice(0, eq)] = entry.slice(eq + 1);
+  }
+  return out;
+}
+
 /**
  * A gated run's reply.
  *
@@ -277,7 +302,7 @@ async function gatedReply(
   sink.message(
     `Op "${command.op}" is waiting on gate "${gate.name}", pending since ${gate.since}` +
       (pending?.expiresAt ? ` and expiring ${pending.expiresAt}` : "") +
-      `.\nApprove with: ${approveCommand(command.op, gate.name)}\n`,
+      `.\nApprove with: ${approveCommand(command.op, gate.name, undefined, undefined, await gateIsSealed(gate.name))}\n`,
   );
   sink.message(JSON.stringify(status.result?.record ?? status, null, 2) + "\n");
 

package/src/op/activities/fountain-prompt.ts

@@ -13,10 +13,11 @@
  * What fountain v0.21.0 can and cannot do here, which decides the arguments:
  *
  * - A conversation that is `terminated` takes no more turns: the prompts route
- *   answers 410. `fountainRun` terminates an ephemeral agent's conversation at
- *   its deadline by default, so a caller that wants a later turn runs the first
- *   one with `terminate: "never"` (a persistent agent's default) and ends the
- *   conversation itself, or with this op's `terminate`, after the last turn.
+ *   answers 410. `fountainRun` terminates an ephemeral agent's conversation
+ *   once its turn ends (or at its deadline) by default, so a caller that wants a
+ *   later turn runs the first one with `terminate: "never"` (a persistent
+ *   agent's default) and ends the conversation itself, or with this op's
+ *   `terminate`, after the last turn.
  * - A turn has no tool allowlist of its own. The prompts route takes only the
  *   prompt, images and `client_request_id`; the tools a conversation may use are
  *   its agent's `permission_policy`, narrowed once at launch, and nothing on the