@sema-agent/core 3.0.0 → 5.0.0

package/dist/engine/loop/agent-loop.js

@@ -1,5 +1,4 @@
 import { findToolByName, validateToolArguments } from "../llm/index.js";
-import { TOMBSTONED_TOOLS } from "../../core/tool-name-aliases.js";
 import { resolveAgentCoreStreamFn } from "./runtime-deps.js";
 function appendTextDeltaToAssistantMessage(message, contentIndex, delta) {
     const content = [...message.content];
@@ -647,10 +646,16 @@ function partitionToolCalls(toolCalls, tools) {
     }
     return batches;
 }
+function resolveToolConcurrency(configured) {
+    if (configured === undefined)
+        return 10;
+    return Number.isFinite(configured) ? Math.max(1, Math.floor(configured)) : 1;
+}
 async function runCapped(thunks, limit) {
     const results = new Array(thunks.length);
     let next = 0;
-    const workers = Array.from({ length: Math.max(1, Math.min(limit, thunks.length)) }, async () => {
+    const width = Number.isFinite(limit) ? Math.max(1, Math.min(limit, thunks.length)) : 1;
+    const workers = Array.from({ length: width }, async () => {
         while (next < thunks.length) {
             const i = next++;
             results[i] = await thunks[i]();
@@ -660,7 +665,7 @@ async function runCapped(thunks, limit) {
     return results;
 }
 async function executeToolCallsPartitioned(currentContext, assistantMessage, toolCalls, config, signal, emit, executor) {
-    const cap = config.maxToolConcurrency ?? 10;
+    const cap = resolveToolConcurrency(config.maxToolConcurrency);
     const allFinalized = [];
     const messages = [];
     let engineCutSeen = false;
@@ -798,7 +803,7 @@ class StreamToolExecutor {
             this.signal?.aborted ||
             partialAssistant === null ||
             !isBatchSafeToolCall(findToolByName(this.context.tools, toolCall.name), toolCall) ||
-            this.inFlight >= (this.config.maxToolConcurrency ?? 10) ||
+            this.inFlight >= resolveToolConcurrency(this.config.maxToolConcurrency) ||
             this.entries.has(toolCall.id)) {
             this.barrier = true;
             return;
@@ -927,18 +932,11 @@ function prepareToolCallArguments(tool, toolCall) {
 async function prepareToolCall(currentContext, assistantMessage, toolCall, config, signal) {
     const tool = findToolByName(currentContext.tools, toolCall.name);
     if (!tool) {
-        const tombstone = TOMBSTONED_TOOLS[toolCall.name];
-        if (tombstone !== undefined) {
-            return {
-                kind: "immediate",
-                result: createErrorToolResult(tombstone),
-                isError: true,
-            };
-        }
-        const available = (currentContext.tools ?? []).map((t) => t.name).join(", ");
+        const availableTools = (currentContext.tools ?? []).map((t) => t.name);
+        const available = availableTools.join(", ");
         return {
             kind: "immediate",
-            result: createErrorToolResult(`Tool ${toolCall.name} not found.${available ? ` Available tools: ${available}` : ""}`),
+            result: createErrorToolResult(`Tool ${toolCall.name} not found.${available ? ` Available tools: ${available}` : ""}`, { details: { code: "tool.not_found", toolName: toolCall.name, availableTools } }),
             isError: true,
         };
     }

package/dist/engine/loop/types.d.ts

@@ -74,21 +74,23 @@ export interface LoopRecoveryOptions {
         hasLiveWriteoutWindow?: () => boolean;
     };
 }
+export interface ToolCutInfo {
+    toolCallId: string;
+    toolName: string;
+    elapsedMs: number;
+    settled: Promise<void>;
+}
+export interface LoopToolDeadline {
+    deadlineMs: () => number | undefined;
+    onCut?: (info: ToolCutInfo) => void;
+}
 export interface AgentLoopConfig extends SimpleStreamOptions {
     model: Model;
     recovery?: LoopRecoveryOptions;
     maxTokensPerCall?: () => number | undefined;
     callDeadlineMsPerCall?: () => number | undefined;
     stallTimeoutsPerCall?: () => import("../llm/types.js").StallTimeouts | undefined;
-    toolDeadline?: {
-        deadlineMs: () => number | undefined;
-        onCut?: (info: {
-            toolCallId: string;
-            toolName: string;
-            elapsedMs: number;
-            settled: Promise<void>;
-        }) => void;
-    };
+    toolDeadline?: LoopToolDeadline;
     maxToolConcurrency?: number;
     streamingToolExecution?: boolean;
     convertToLlm: (messages: AgentMessage[]) => Message[] | Promise<Message[]>;

package/dist/engine/session/memory-repo.d.ts

@@ -1,4 +1,4 @@
-import { type Session, type SessionMetadata, type SessionRepo, type SessionTreeEntry } from "../harness/types.js";
+import { type Session, type SessionForkOptions, type SessionMetadata, type SessionRepo, type SessionTreeEntry } from "../harness/types.js";
 export declare class InMemorySessionRepo implements SessionRepo<SessionMetadata, {
     id?: string;
 }> {
@@ -9,11 +9,7 @@ export declare class InMemorySessionRepo implements SessionRepo<SessionMetadata,
     open(metadata: SessionMetadata): Promise<Session>;
     list(): Promise<SessionMetadata[]>;
     delete(metadata: SessionMetadata): Promise<void>;
-    fork(sourceMetadata: SessionMetadata, options: {
-        entryId?: string;
-        position?: "before" | "at";
-        id?: string;
-    }): Promise<Session>;
+    fork(sourceMetadata: SessionMetadata, options: SessionForkOptions): Promise<Session>;
     exportEntries(sessionId: string): Promise<SessionTreeEntry[]>;
     importEntries(sessionId: string, owner: string | undefined, entries: SessionTreeEntry[]): Promise<void>;
 }

package/dist/engine/session/session.d.ts

@@ -1,7 +1,8 @@
 import type { ImageContent, TextContent } from "../llm/index.js";
 import type { AgentMessage } from "../loop/types.js";
-import type { Session, SessionContext, SessionMetadata, SessionStorage, SessionTreeEntry } from "../harness/types.js";
+import type { Session, SessionContext, SessionMetadata, SessionStorage, SessionTreeEntry, WorkspaceState } from "../harness/types.js";
 import type { BuildContextOptions } from "../harness/types.js";
+import type { PromptEpochDescriptor } from "../../prompt-assembly/epoch.js";
 export declare function buildSessionContext(pathEntries: SessionTreeEntry[], opts?: BuildContextOptions): SessionContext;
 export declare class StoredSession<TMetadata extends SessionMetadata = SessionMetadata> implements Session<TMetadata> {
     private storage;
@@ -19,40 +20,14 @@ export declare class StoredSession<TMetadata extends SessionMetadata = SessionMe
     appendMessage(message: AgentMessage): Promise<string>;
     appendThinkingLevelChange(thinkingLevel: string): Promise<string>;
     appendModelChange(provider: string, modelId: string): Promise<string>;
-    appendPromptEpoch(descriptor: {
-        epoch: number;
-        artifactDigest: string;
-        packId: string;
-        assemblyApi: number;
-        activatedBy: "session_start" | "compaction" | "legacy_migration";
-        centerArtifactDigest?: string;
-        sourceRevision?: string;
-    }): Promise<string>;
+    appendPromptEpoch(descriptor: PromptEpochDescriptor): Promise<string>;
     appendAnnouncedListing(snapshot: {
         agents?: readonly string[];
         skills?: readonly string[];
         models?: readonly string[];
     }): Promise<string>;
-    appendWorkspaceState(state: {
-        taskRoot: string;
-        handsCwd?: string;
-        activeWorktree?: {
-            worktreeDir: string;
-            originalCwd: string;
-            baseSha: string;
-            entered?: boolean;
-        };
-    }): Promise<string>;
-    getWorkspaceState(): Promise<{
-        taskRoot: string;
-        handsCwd?: string;
-        activeWorktree?: {
-            worktreeDir: string;
-            originalCwd: string;
-            baseSha: string;
-            entered?: boolean;
-        };
-    } | undefined>;
+    appendWorkspaceState(state: WorkspaceState): Promise<string>;
+    getWorkspaceState(): Promise<WorkspaceState | undefined>;
     getAnnouncedListing(): Promise<{
         agents?: string[];
         skills?: string[];

package/dist/index.d.ts

@@ -14,7 +14,7 @@ export { assembleCodeTools, type CodeToolsConfig, CODE_ROLE } from "./scenarios/
 export { capAggregateToolResults, AGGREGATE_TOOL_RESULT_BUDGET_CHARS, DEFAULT_BUDGET_EXEMPT_TOOLS, type AggregateBudgetOptions, } from "./core/tool-result-budget.js";
 export { capAggregateMediaBytes, AGGREGATE_MEDIA_BUDGET_BYTES, type MediaStripInfo } from "./core/media-byte-cap.js";
 export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, type OnQuestion, type AskQuestion, type AskQuestionOption, type AskQuestionRequest, type QuestionAnswer, type QuestionAnswerItem, } from "./core/ask-question.js";
-export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, type LspNoneReason, type LspOperation, type LspServerManager, type LspSession, type LspResult, type LspLocation, type LspSymbolInfo, type LspRequestParams, type LspToolOptions, type LspTransport, type LspReadText, } from "./core/lsp.js";
+export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, SharedAbortScope, settleOnAbort, type LspNoneReason, type LspOperation, type LspServerManager, type LspSession, type LspResult, type LspLocation, type LspSymbolInfo, type LspRequestParams, type LspToolOptions, type LspTransport, type LspReadText, } from "./core/lsp.js";
 export { buildRequest, parseResult, callHierarchyMethod, pathToUri } from "./core/lsp-protocol.js";
 export { TransportLspSession, type SessionWarmup } from "./core/lsp-session.js";
 export { LspDiagnosticsRegistry, formatDiagnosticsBlock, formatDiagnosticsSummary, type LspDiagnostic, type LspFileDiagnostics, } from "./core/lsp-diagnostics.js";
@@ -27,6 +27,7 @@ export { BrainError, classifyHttp, type BrainErrorCode } from "./brain/errors.js
 export { looksDegenerate, inspectDegenerate, trimDegenerateTail } from "./brain/repetition.js";
 export type { RepetitionEvent, RepetitionInspection } from "./brain/repetition.js";
 export { computeCostMicroUsd, modelCostToPricing, type ModelPricing, type TokenCounts, } from "./core/pricing.js";
+export { cacheFamilyOf, promptTokensOf, uncachedInputTokensOf, type CacheFamily } from "./core/runner/usage-accounting.js";
 export { emitTrace, type TraceEvent, type TracerHook } from "./core/trace.js";
 export { InMemoryStrategyStore, type StrategyStore, type StoredStrategy } from "./core/strategy-store.js";
 export { createSqlTool, validateReadOnlySql, type SqlToolOptions } from "./tools/sql.js";
@@ -56,6 +57,7 @@ export { getShellConfig, isWslBashLauncher } from "./engine/execution-env/node-e
 export { isSecretEnvKey, scrubSecretEnv } from "./core/secret-env.js";
 export { MAX_EXEC_OUTPUT_BYTES, RollingTailBuffer, markTruncated } from "./core/exec-output-tail.js";
 export type { ExecutionEnv, FileInfo, Result, FileErrorCode, ExecutionErrorCode } from "./internal/harness.js";
+export type { ExecResult } from "./internal/harness.js";
 export { RemoteExecutionError, hasDestroy, isRemoteExecutionEnv, isSuspendable, isIsolated, missingRestoreSurface, isRetryableRemoteErrorCode, RETRYABLE_REMOTE_ERROR_CODES, } from "./core/remote-env.js";
 export { withRetry } from "./core/with-retry.js";
 export type { RetryPolicy, RetryResult } from "./core/with-retry.js";
@@ -80,8 +82,8 @@ export { maybeCompact, type MaybeCompactOptions, type CompactionWindowSafetyInfo
 export { brainToRuntime } from "./core/runtime.js";
 export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./core/sensitive-path-policy.js";
 export { createFsWriteGatePolicy, type FsWriteGatePolicyOptions } from "./core/fs-write-gate-policy.js";
-export { canonicalToolName, TOMBSTONED_TOOLS } from "./core/tool-name-aliases.js";
-export { DEFAULT_SUBAGENT_TOOL_NAME, LEGACY_SUBAGENT_TOOL_NAME, SESSION_BG_DEFAULT_TIMEOUT_SEC } from "./agents/subagent.js";
+export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
+export { DEFAULT_SUBAGENT_TOOL_NAME, SESSION_BG_DEFAULT_TIMEOUT_SEC } from "./agents/subagent.js";
 export { renderTaskNotificationXml, taskNotificationDedupKey, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, } from "./core/task-notification.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, type SemaTaskType, type SemaTaskStatus, type SemaTaskHandle, type ParkedClaimTicket, type TaskAccess, type UnifiedTaskOutput, type TaskRetrievalStatus, type StopSource, type RegisterMonitorInput, type MonitorTimers, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
 export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease } from "./core/mailbox-store.js";
@@ -164,6 +166,7 @@ export { type BackgroundAgentStore, type BackgroundAgentRecord, type BackgroundA
 export { FileBackgroundAgentStore, type FileBackgroundAgentStoreOptions } from "./stores/file/background-agent-store.js";
 export { type WorkflowJournalStore, type WorkflowJournalEntry, InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, } from "./core/workflow-journal-store.js";
 export { untrustedEgressForHuman, redactHostLeaks, redactSecrets, boundedRedactedSummary } from "./core/untrusted-egress.js";
+export type { RedactionFinding, RedactionReport, RedactionConfidence } from "./core/untrusted-egress.js";
 export { MemoryRosterStore, FileRosterStore, type RosterStore, type RosterEntry, type RosterAccess, type RosterGcOptions } from "./agents/roster-store.js";
 export { CONFIG_CATALOG_VERSION, describeConfigCatalog, resolveEffectiveConfig, type ConfigKnob, type ConfigOverrideDeclaration, type ConfigProvenance, type EffectiveConfigField, } from "./config/catalog.js";
 export { normalizeAgentName } from "./core/task-registry.js";

package/dist/index.js

@@ -12,7 +12,7 @@ export { assembleCodeTools, CODE_ROLE } from "./scenarios/full-body.js";
 export { capAggregateToolResults, AGGREGATE_TOOL_RESULT_BUDGET_CHARS, DEFAULT_BUDGET_EXEMPT_TOOLS, } from "./core/tool-result-budget.js";
 export { capAggregateMediaBytes, AGGREGATE_MEDIA_BUDGET_BYTES } from "./core/media-byte-cap.js";
 export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, } from "./core/ask-question.js";
-export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, } from "./core/lsp.js";
+export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, SharedAbortScope, settleOnAbort, } from "./core/lsp.js";
 export { buildRequest, parseResult, callHierarchyMethod, pathToUri } from "./core/lsp-protocol.js";
 export { TransportLspSession } from "./core/lsp-session.js";
 export { LspDiagnosticsRegistry, formatDiagnosticsBlock, formatDiagnosticsSummary, } from "./core/lsp-diagnostics.js";
@@ -24,6 +24,7 @@ export { selectModel, selectModelOrThrow } from "./core/select-model.js";
 export { BrainError, classifyHttp } from "./brain/errors.js";
 export { looksDegenerate, inspectDegenerate, trimDegenerateTail } from "./brain/repetition.js";
 export { computeCostMicroUsd, modelCostToPricing, } from "./core/pricing.js";
+export { cacheFamilyOf, promptTokensOf, uncachedInputTokensOf } from "./core/runner/usage-accounting.js";
 export { emitTrace } from "./core/trace.js";
 export { InMemoryStrategyStore } from "./core/strategy-store.js";
 export { createSqlTool, validateReadOnlySql } from "./tools/sql.js";
@@ -70,8 +71,8 @@ export { maybeCompact } from "./core/auto-compaction.js";
 export { brainToRuntime } from "./core/runtime.js";
 export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./core/sensitive-path-policy.js";
 export { createFsWriteGatePolicy } from "./core/fs-write-gate-policy.js";
-export { canonicalToolName, TOMBSTONED_TOOLS } from "./core/tool-name-aliases.js";
-export { DEFAULT_SUBAGENT_TOOL_NAME, LEGACY_SUBAGENT_TOOL_NAME, SESSION_BG_DEFAULT_TIMEOUT_SEC } from "./agents/subagent.js";
+export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
+export { DEFAULT_SUBAGENT_TOOL_NAME, SESSION_BG_DEFAULT_TIMEOUT_SEC } from "./agents/subagent.js";
 export { renderTaskNotificationXml, taskNotificationDedupKey, SystemInjectionQueue, } from "./core/task-notification.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
 export { InMemoryMailboxStore } from "./core/mailbox-store.js";

package/dist/internal/harness-types.d.ts

@@ -3,5 +3,7 @@ export type { InvokedSkillRetention } from "../engine/compaction/utils.js";
 export type { AgentCoreRuntimeDeps } from "../engine/loop/runtime-deps.js";
 export type { AgentMessage, AgentTool, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolExecutionMode, } from "../engine/loop/types.js";
 export type { AgentHarnessEvent, CompactionSettings, ExecutionEnv, ExecutionErrorCode, FileErrorCode, FileInfo, Result, Session, SessionMetadata, SessionRepo, SessionStorage, SessionTreeEntry, Skill, } from "../engine/harness/types.js";
-export type { ExecutionEnvExecOptions } from "../engine/harness/types.js";
+export type { ExecutionEnvExecOptions, ExecResult } from "../engine/harness/types.js";
 export type { SessionWriteOptions, CompactionEntry } from "../engine/harness/types.js";
+export type { ActiveWorktreeSession, WorkspaceState } from "../engine/harness/types.js";
+export type { SessionForkOptions } from "../engine/harness/types.js";

package/dist/orchestration/run-spec.js

@@ -4,8 +4,9 @@ import { isAbsolute, resolve, sep } from "node:path";
 import { combinePolicies } from "../core/tool-policy.js";
 import { delimitUntrusted } from "../core/untrusted-text.js";
 import { isDurablePause } from "../agents/suspend-guard.js";
+import { isAbsolutePathForm, writeTargetPath } from "../tools/fs/safety.js";
 import { captureBaseline, resolveFrozenPaths, restoreFrozenPaths, runOracle, snapshotFrozenPaths, specError, } from "../core/spec-contract.js";
-const WRITE_TOOLS = new Set(["Write", "Edit", "MultiEdit", "NotebookEdit"]);
+const WRITE_TOOLS = new Set(["Write", "Edit", "NotebookEdit"]);
 const CASE_INSENSITIVE_FS = process.platform === "darwin" || process.platform === "win32";
 const pathKey = (p) => {
     let n = p.replace(/\\/g, "/");
@@ -17,13 +18,14 @@ function frozenDenyPolicy(rootDir, frozenResolved) {
     const frozen = new Set(frozenResolved.map(pathKey));
     return {
         check(req) {
-            if (!WRITE_TOOLS.has(req.toolName))
+            const toolName = req.toolName;
+            if (!WRITE_TOOLS.has(toolName))
                 return { action: "allow" };
             const args = req.args;
-            const raw = args?.file_path ?? args?.path ?? args?.notebook_path;
+            const raw = writeTargetPath(toolName, args);
             if (typeof raw !== "string" || raw.length === 0)
                 return { action: "allow" };
-            const absForm = raw.startsWith("/") || /^[A-Za-z]:[\\/]/.test(raw);
+            const absForm = isAbsolutePathForm(raw);
             const abs = pathKey(absForm ? raw : resolve(rootDir, raw));
             if (frozen.has(abs)) {
                 return { action: "deny", reason: `${raw} is part of the frozen specification surface (read-only).` };

package/dist/orchestration/run-workflow-tool.js

@@ -175,7 +175,6 @@ export async function createRunWorkflowTool(d) {
     const structuredError = (message) => errorResult(JSON.stringify({ error: message }));
     return defineTool({
         name: RUN_WORKFLOW_TOOL_NAME,
-        aliases: ["RunWorkflow", "run_workflow"],
         contract: { contractId: "core.workflow@1", implementationRevision: "1" },
         approvalPreview: (raw) => {
             const a = (raw ?? {});
@@ -456,7 +455,7 @@ export async function createRunWorkflowTool(d) {
                     },
                 });
             }
-            if (d.notifier) {
+            {
                 let notified = false;
                 const fire = (notification) => {
                     if (notified)
@@ -467,6 +466,8 @@ export async function createRunWorkflowTool(d) {
                     }
                     catch {
                     }
+                    if (!d.notifier)
+                        return;
                     void Promise.resolve()
                         .then(() => d.notifier.notify({
                         runId,
@@ -507,40 +508,6 @@ export async function createRunWorkflowTool(d) {
                 }))
                     .catch(() => { });
             }
-            else {
-                let notified = false;
-                const fire = (notification) => {
-                    if (notified)
-                        return;
-                    notified = true;
-                    try {
-                        d.taskNotification?.(notification);
-                    }
-                    catch {
-                    }
-                };
-                handle.done
-                    .then((res) => fire({
-                    task_id: runId,
-                    task_type: "workflow",
-                    ...(ctx.toolCallId !== undefined ? { toolUseId: ctx.toolCallId } : {}),
-                    status: "completed",
-                    summary: completionSummary(meta.name, res.run),
-                    result: boundedRedactedSummary(res.result, 4000),
-                    usage: workflowUsageBlock(res.run),
-                    diagnostics: workflowDiagnostics(runId, d.journalStore?.locator?.(runId, res.run.scope), res.run.resume?.journalEntries === 0),
-                    completionId: res.run.completionId,
-                }), (err) => fire({
-                    task_id: runId,
-                    task_type: "workflow",
-                    ...(ctx.toolCallId !== undefined ? { toolUseId: ctx.toolCallId } : {}),
-                    status: "failed",
-                    summary: failureSummary(err, runId),
-                    diagnostics: workflowDiagnostics(runId, undefined),
-                    ...(completionIdFromRejection(err) !== undefined ? { completionId: completionIdFromRejection(err) } : {}),
-                }))
-                    .catch(() => { });
-            }
             return {
                 details: { type: "workflow-run", status: "backgrounded", workflowRunId: runId },
                 content: JSON.stringify({

package/dist/orchestration/workflow-governance.js

@@ -1,4 +1,5 @@
 import { tightenTaskSpec } from "../core/tighten-task-spec.js";
+import { sanitizeUntrustedText } from "../core/untrusted-text.js";
 import { WorkflowScriptError } from "./workflow-meta.js";
 export class WorkflowModelNotAllowedError extends Error {
     modelName;
@@ -81,7 +82,7 @@ function pickWhitelist(scriptSpec) {
     if (s.systemPrompt !== undefined) {
         if (typeof s.systemPrompt !== "string")
             throw new WorkflowScriptError("agent(spec): `systemPrompt` must be a string");
-        safe.systemPrompt = s.systemPrompt;
+        safe.systemPrompt = `[workflow-script-authored persona — task guidance, not engine authority]\n${sanitizeUntrustedText(s.systemPrompt)}`;
     }
     if (s.images !== undefined) {
         if (!Array.isArray(s.images))

package/dist/orchestration/workflow.d.ts

@@ -2,7 +2,7 @@ import type { TSchema } from "typebox";
 import type { Runner } from "../core/runner/runtask.js";
 import type { AgentDefinition, TaskEvent, TaskResult, TaskSpec } from "../core/types.js";
 import type { WorkflowRunStore } from "../core/workflow-run-store.js";
-import type { WorkflowJournalStore } from "../core/workflow-journal-store.js";
+import type { WorkflowJournalStore, ResumeClaimArgs } from "../core/workflow-journal-store.js";
 import type { WorkflowRun, WorkflowEvent } from "./workflow-types.js";
 export * from "./workflow-types.js";
 export declare const WORKFLOW_SUBAGENT_PROMPT = "You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.\n\nCRITICAL: Your final text response is returned **verbatim** as a string to the calling script \u2014 it is your return value, not a message to a human.\n- Output the literal result (data, JSON, text). Do NOT output confirmations like \"Done.\" or \"Sent.\"\n- If asked for JSON, return ONLY the raw JSON \u2014 no code fences, no prose, no markdown.\n- Do NOT address a human user \u2014 there is no user on the other end. Put your answer in your final text response.\n- Do NOT delegate to further sub-agents or start nested workflows; complete the task yourself.\n- Be concise. The script will parse your output.";
@@ -89,6 +89,7 @@ export interface RunWorkflowOptions {
     maxLogChars?: number;
     maxResultChars?: number;
     onEvent?: (e: WorkflowEvent) => void;
+    onNotifyError?: (failure: import("../core/safe-notify.js").SafeNotifyFailure) => void;
     now?: () => number;
     journalStore?: WorkflowJournalStore;
     resumeFromRunId?: string;
@@ -131,19 +132,11 @@ export interface WorkflowTimers {
     clearTimeout(handle: unknown): void;
 }
 export declare const workflowResumeClaimFallback: {
-    acquire(store: WorkflowJournalStore, input: {
-        sourceRunId: string;
-        newRunId: string;
-        scope: string;
-    }): {
+    acquire(store: WorkflowJournalStore, input: ResumeClaimArgs): {
         granted: boolean;
         holder?: string;
     };
-    release(store: WorkflowJournalStore, input: {
-        sourceRunId: string;
-        newRunId: string;
-        scope: string;
-    }): void;
+    release(store: WorkflowJournalStore, input: ResumeClaimArgs): void;
 };
 export declare function startWorkflow<T>(runner: Runner, fn: (ctx: WorkflowRunContext) => Promise<T>, opts?: RunWorkflowOptions, internals?: WorkflowInternals): WorkflowHandle<T>;
 export declare function runWorkflow<T>(runner: Runner, fn: (ctx: WorkflowRunContext) => Promise<T>, opts?: RunWorkflowOptions, internals?: WorkflowInternals): Promise<RunWorkflowResult<T>>;