@sema-agent/core 5.1.0 → 5.2.0

package/dist/core/protocol-table.js

@@ -1,20 +1,34 @@
 const NAME_SEP = "__";
+const MCP_PREFIX_NAME = `mcp${NAME_SEP}`;
+const parseMcpName = (name) => {
+    if (!name.startsWith(MCP_PREFIX_NAME))
+        return undefined;
+    const rest = name.slice(MCP_PREFIX_NAME.length);
+    const sep = rest.indexOf(NAME_SEP);
+    if (sep <= 0)
+        return undefined;
+    const tool = rest.slice(sep + NAME_SEP.length);
+    if (tool.length === 0)
+        return undefined;
+    return { peer: rest.slice(0, sep), tool };
+};
+const makeMcpName = (peer, tool) => {
+    if (peer.length === 0 || tool.length === 0) {
+        throw new Error(`protocol table (mcp): peer and tool must both be non-empty (got peer=${JSON.stringify(peer)}, tool=${JSON.stringify(tool)})`);
+    }
+    if (peer.includes(NAME_SEP)) {
+        throw new Error(`protocol table (mcp): peer must not contain the ${NAME_SEP} separator (got ${JSON.stringify(peer)}) — the composed name would parse back as a DIFFERENT peer`);
+    }
+    return `${MCP_PREFIX_NAME}${peer}${NAME_SEP}${tool}`;
+};
 export const MCP_NAMESPACE = {
     id: "mcp",
-    prefix: `mcp${NAME_SEP}`,
-    makeName: (peer, tool) => `mcp${NAME_SEP}${peer}${NAME_SEP}${tool}`,
-    parse(name) {
-        if (!name.startsWith(this.prefix))
-            return undefined;
-        const rest = name.slice(this.prefix.length);
-        const sep = rest.indexOf(NAME_SEP);
-        if (sep <= 0)
-            return undefined;
-        return { peer: rest.slice(0, sep), tool: rest.slice(sep + NAME_SEP.length) };
-    },
-    displayGroupKey(name) {
-        const p = this.parse(name);
-        return p === undefined ? name : `${this.prefix}${p.peer}${NAME_SEP}*`;
+    prefix: MCP_PREFIX_NAME,
+    makeName: makeMcpName,
+    parse: parseMcpName,
+    displayGroupKey: (name) => {
+        const p = parseMcpName(name);
+        return p === undefined ? name : `${MCP_PREFIX_NAME}${p.peer}${NAME_SEP}*`;
     },
 };
 export const PROTOCOL_TABLE = [MCP_NAMESPACE];

package/dist/core/runner/prepare-memory.js

@@ -1,4 +1,4 @@
-import { adoptLegacyRepoDirs, deriveControlPlaneDir, deriveProjectControlDir, deriveProjectMemoryDir, deriveRepoMemoryDir, drainMemoryAnnouncements, enqueueMemoryAnnouncement, lookupProjectIdHint, recordProjectIdHint, resolveMemoryEngineRoot } from "../memory-engine/layout.js";
+import { adoptLegacyRepoDirs, deriveRepoControlPlaneDir, deriveProjectControlDir, deriveProjectMemoryDir, deriveRepoMemoryDir, drainMemoryAnnouncements, enqueueMemoryAnnouncement, lookupProjectIdHint, recordProjectIdHint, resolveMemoryEngineRoot } from "../memory-engine/layout.js";
 import { classifyScopePlanes, derivePersonalControlDir, derivePersonalMemoryDir, mergeHarvestReports, mergeInjections, needsDualRoots, parsedProjectPlane } from "../memory-engine/dual-root.js";
 import { normalizeMemorySpec } from "../memory.js";
 import { MemoryEngine } from "../memory-engine/engine.js";
@@ -38,7 +38,7 @@ export async function prepareMemory(input) {
                     recordProjectIdHint(engineRoot, repoRoot, marker.projectId);
                     if (firstSwitch) {
                         try {
-                            const oldCtl = deriveControlPlaneDir(engineRoot, repoRoot);
+                            const oldCtl = deriveRepoControlPlaneDir(engineRoot, repoRoot);
                             const newCtl = deriveProjectControlDir(engineRoot, marker.projectId);
                             const drained = drainMemoryAnnouncements(oldCtl);
                             for (const ann of drained.queue)
@@ -100,7 +100,7 @@ export async function prepareMemory(input) {
                 const projectEngine = new MemoryEngine({
                     backend,
                     memoryDir,
-                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveControlPlaneDir(engineRoot, repoRoot),
+                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveRepoControlPlaneDir(engineRoot, repoRoot),
                 });
                 const personalEngine = createPersonalEngine();
                 const p = planes;
@@ -140,7 +140,7 @@ export async function prepareMemory(input) {
                 const engine = new MemoryEngine({
                     backend,
                     memoryDir,
-                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveControlPlaneDir(engineRoot, repoRoot),
+                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveRepoControlPlaneDir(engineRoot, repoRoot),
                 });
                 const handle = await engine.materialize(memorySpec.scopes, memorySpec.writeScope);
                 writeEngine = engine;

package/dist/core/runner/prepare-task.js

@@ -16,7 +16,7 @@ import { createSubagentWorktreeHelper, forkGovernanceDenial } from "../../agents
 import { createAgentTranscriptTool, AGENT_TRANSCRIPT_TOOL_NAME } from "../../agents/agent-transcript-tool.js";
 import { createSendMessageTool, SEND_MESSAGE_TOOL_NAME } from "../../agents/send-message-tool.js";
 import { SubagentRetainLedger } from "../../agents/retain-ledger.js";
-import { combinePolicies, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, resolveAsk, toolPolicyNameSets } from "../tool-policy.js";
+import { combinePolicies, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, refuseOutOfContractDecision, resolveAsk, toolPolicyNameSets } from "../tool-policy.js";
 import { ActiveSkillScope, createActiveSkillScopePolicy } from "./active-skill-scope.js";
 import { computeCallCap, createCallCapRef, softExecDeadlineMs, toolCutDeadlineMs, WALLTIME_STALL_CONNECT_MS, WALLTIME_STALL_FIRST_TOKEN_MS, WALLTIME_STALL_IDLE_MS } from "./call-cap.js";
 import { createCutKillRegistry } from "./cut-kill.js";
@@ -2364,7 +2364,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     toolName: creq.toolName,
                     toolCallId: creq.toolCallId,
                     args: editArgs,
-                    message: re.message ?? re.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                    message: re.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                     ...askSourceIdentity(),
                     ...(re.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                 }, onAskOf, csignal ?? abortController.signal);
@@ -2410,7 +2410,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         toolName: creq.toolName,
                         toolCallId: creq.toolCallId,
                         args: presentedArgs,
-                        message: first.message ?? first.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                        message: first.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                         ...askSourceIdentity(),
                         ...(first.action === "ask" && first.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                     }, pc.onAsk, csignal ?? abortController.signal);
@@ -2466,7 +2466,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         toolName: creq.toolName,
                         toolCallId: creq.toolCallId,
                         args: presentedArgs,
-                        message: decision.message ?? decision.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                        message: decision.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                         ...askSourceIdentity(),
                         ...(decision.action === "ask" && decision.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                     }, pc.onAsk, csignal ?? abortController.signal);
@@ -2706,7 +2706,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         const preview = approvalPreviewOf(req.toolName, req.args);
                         return preview !== undefined ? { preview } : {};
                     })(),
-                    message: decision.message ?? decision.message ?? `approval required for "${req.toolName}"`,
+                    message: decision.message ?? `approval required for "${req.toolName}"`,
                     ...askSourceIdentity(),
                     ...(decision.action === "ask" && decision.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                 }, onAsk, abortController.signal);
@@ -2750,17 +2750,33 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             const checkpointStore = spec.checkpointStore ?? deps.checkpointStore;
             const durableApproval = spec.durableApproval ??
                 (runtimeCaps?.forceDurableGate ? { scope: spec.principal || DEFAULT_IRREVERSIBLE_SCOPE } : undefined);
-            const serializeCheckpointState = (workspaceHandle) => ({
+            const inFlightSpendMicroUsd = () => {
+                const own = liveSpendRef.get?.().costMicroUsd ?? 0;
+                const seededNested = resume?.seed.nestedStats.costMicroUsd;
+                const nestedDelta = nestedStats.costMicroUsd - (typeof seededNested === "number" && Number.isFinite(seededNested) ? seededNested : 0);
+                return (Number.isFinite(own) ? own : 0) + Math.max(0, Number.isFinite(nestedDelta) ? nestedDelta : 0);
+            };
+            const repairBundleForCheckpoint = (parkedSpendMicroUsd) => {
+                const carried = internals?.repairBundle !== undefined
+                    ? structuredClone(internals.repairBundle)
+                    : resume?.seed.repairBundle !== undefined
+                        ? structuredClone(resume.seed.repairBundle)
+                        : undefined;
+                if (carried === undefined)
+                    return undefined;
+                if (parkedSpendMicroUsd === undefined || !Number.isFinite(parkedSpendMicroUsd) || parkedSpendMicroUsd <= 0)
+                    return carried;
+                const prior = typeof carried.spentMicroUsd === "number" && Number.isFinite(carried.spentMicroUsd) ? Math.max(0, carried.spentMicroUsd) : 0;
+                carried.spentMicroUsd = prior + parkedSpendMicroUsd;
+                return carried;
+            };
+            const serializeCheckpointState = (workspaceHandle, parkedSpendMicroUsd) => ({
                 activeTools: [...activeTools],
                 outputRef: { value: outputRef.value, set: outputRef.set },
                 nestedStats: { ...nestedStats },
                 consolidationNotes: undefined,
                 readFileState: readFileStateForCheckpoint ? [...readFileStateForCheckpoint.entries()] : undefined,
-                repairBundle: internals?.repairBundle !== undefined
-                    ? structuredClone(internals.repairBundle)
-                    : resume?.seed.repairBundle !== undefined
-                        ? structuredClone(resume.seed.repairBundle)
-                        : undefined,
+                repairBundle: repairBundleForCheckpoint(parkedSpendMicroUsd),
                 workspaceHandle,
                 handsCwd: handsCwdRef?.current,
                 activeWorktree: worktreeSessionRef?.current ? { ...worktreeSessionRef.current } : undefined,
@@ -2978,7 +2994,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         leafId,
                         gate,
                         pendingAction: { kind: "plan_review" },
-                        state: serializeCheckpointState(remoteHandle),
+                        state: serializeCheckpointState(remoteHandle, inFlightSpendMicroUsd()),
                         status: "pending",
                         createdAt: mintedAt,
                         suspendedAt: now(),
@@ -3092,7 +3108,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                                     };
                         const scope = durableApproval?.scope || checkpointScopeOf({ principal: spec.principal });
                         const ttlMs = sanitizedTtlMs(durableApproval?.ttlMs);
-                        const checkpointState = serializeCheckpointState(remoteHandle);
+                        const checkpointState = serializeCheckpointState(remoteHandle, inFlightSpendMicroUsd());
                         const approvalLedger = debitLedger(priorLedger, liveSpendRef.get?.() ?? { costMicroUsd: 0, tokens: 0, turns: 0, walltimeMs: 0 }, resourceTotal, { countSlice: false });
                         const mintedAt = Date.now();
                         cp = {
@@ -3396,7 +3412,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             ? undefined
             : async (path) => {
                 try {
-                    const d = await denyNarrowingPolicy.check({ toolName: "Read", args: { file_path: path }, toolCallId: "changed-files-visibility-probe" }, abortController.signal);
+                    const d = refuseOutOfContractDecision(await denyNarrowingPolicy.check({ toolName: "Read", args: { file_path: path }, toolCallId: "changed-files-visibility-probe" }, abortController.signal));
                     return d.action === "deny";
                 }
                 catch {

package/dist/core/runner/runtask.js

@@ -36,7 +36,7 @@ import { delimitUntrusted, inlineUntrusted, sanitizeUntrustedText } from "../unt
 import { reconcileInterruptedSession } from "../session-reconcile.js";
 import { RunnerSharedToolResultStore } from "../tool-result-store.js";
 import { formatDiagnosticsBlock } from "../lsp-diagnostics.js";
-import { toolPolicyNameSets } from "../tool-policy.js";
+import { refuseOutOfContractDecision, toolPolicyNameSets } from "../tool-policy.js";
 import { defaultTaskRegistry } from "../task-registry.js";
 import { discloseDroppedPending, PendingSessionNotifications, renderTaskNotificationXml, SystemInjectionQueue, taskNotificationDedupKey } from "../task-notification.js";
 import { ToolDetachHub } from "../tool-detach.js";
@@ -1674,13 +1674,19 @@ export class Runner {
         }
         rs.telemetry.taskStart = Date.now();
         rs.telemetry.taskStartMonotonic = performance.now();
-        void Promise.resolve(this.sessions.noteTaskRun?.(prepared.sessionId, rs.telemetry.taskId)).catch((err) => {
+        const discloseNoteTaskRunFailure = (err) => {
             try {
                 this.deps.onError?.(err instanceof Error ? err : new Error(String(err)), { phase: "config", sessionId: prepared.sessionId });
             }
             catch {
             }
-        });
+        };
+        try {
+            void Promise.resolve(this.sessions.noteTaskRun?.(prepared.sessionId, rs.telemetry.taskId)).catch(discloseNoteTaskRunFailure);
+        }
+        catch (err) {
+            discloseNoteTaskRunFailure(err);
+        }
         rs.degrade.recordDegraded = (info, toModel) => {
             if (rs.degrade.degraded !== undefined)
                 return;
@@ -3347,7 +3353,7 @@ export class Runner {
             return;
         }
         if (outcome.decision === "allow" && outcome.updatedInput !== undefined && prepared.basePolicyForResumeEdit) {
-            const rechecked = await prepared.basePolicyForResumeEdit.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal);
+            const rechecked = refuseOutOfContractDecision(await prepared.basePolicyForResumeEdit.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal));
             if (rechecked.action === "deny") {
                 emitEnd(true);
                 const eid = await prepared.session.appendMessage(toolResultMsg(pendingAction.toolCallId, pendingAction.toolName, formatHookFeedback(`The approver EDITED this call's input; the edited call is denied by the deployment's tool policy and was not executed${rechecked.message ? `: ${rechecked.message}` : ""}.`), true));
@@ -3356,7 +3362,7 @@ export class Runner {
             }
         }
         if (prepared.denyNarrowingPolicy) {
-            const narrowed = await prepared.denyNarrowingPolicy.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal);
+            const narrowed = refuseOutOfContractDecision(await prepared.denyNarrowingPolicy.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal));
             if (narrowed.action === "deny") {
                 emitEnd(true);
                 const eid = await prepared.session.appendMessage(toolResultMsg(pendingAction.toolCallId, pendingAction.toolName, formatHookFeedback(`The approved tool call "${pendingAction.toolName}" is now denied by a session rule and was not executed${narrowed.message ? `: ${narrowed.message}` : ""}.`), true));

package/dist/core/runner/tool-disclosure.js

@@ -1,6 +1,6 @@
 import { Type } from "typebox";
 import { Value } from "typebox/value";
-import { defineTool } from "../tools.js";
+import { defineTool, errorResult } from "../tools.js";
 export const TOOL_SEARCH_NAME = "ToolSearch";
 const DEFER_AUTO_FRACTION = 0.1;
 const CHARS_PER_TOKEN = 4;
@@ -247,6 +247,11 @@ export function createToolSearchTool(opts) {
         }),
         effect: "read",
         execute: async (raw) => {
+            const staleSelect = (raw ?? {});
+            if (staleSelect.select !== undefined) {
+                return errorResult(`Error (${TOOL_SEARCH_NAME}): \`select\` is not a parameter (the array form is retired) — put the ` +
+                    `selection in \`query\` instead: {"query":"select:ToolA,ToolB"}. Nothing was activated.`);
+            }
             const args = (raw ?? {});
             const { matched, missing } = resolveToolSearchDetailed(args, registry);
             const mounted = mountedNames?.() ?? new Set();

package/dist/core/tool-policy.d.ts

@@ -30,6 +30,7 @@ export declare function decisionText(d: PermissionResult): string | undefined;
 export interface ToolPolicy {
     check(req: ToolCallRequest, signal?: AbortSignal): PermissionResult | Promise<PermissionResult>;
 }
+export declare function refuseOutOfContractDecision(d: PermissionResult): PermissionResult;
 export interface ToolPolicyNameSets {
     readonly allow?: readonly string[];
     readonly deny?: readonly string[];

package/dist/core/tool-policy.js

@@ -6,6 +6,16 @@ export function decisionText(d) {
     return d.message;
 }
 const ALLOW = { action: "allow" };
+const RETIRED_TEXT_FIELD = "reason";
+const RETIRED_TEXT_FIELD_DENY_MESSAGE = `a permission decision carries the retired "${RETIRED_TEXT_FIELD}" field — rename it to "message" (the one text field ` +
+    `a decision carries); denied fail-closed rather than executing a decision whose text this layer cannot read`;
+export function refuseOutOfContractDecision(d) {
+    if (typeof d !== "object" || d === null)
+        return d;
+    if (!Object.prototype.hasOwnProperty.call(d, RETIRED_TEXT_FIELD))
+        return d;
+    return { action: "deny", message: RETIRED_TEXT_FIELD_DENY_MESSAGE, decisionReason: "rule" };
+}
 function withTimeout(p, ms, onTimeout) {
     if (ms === undefined) {
         return p;
@@ -86,7 +96,7 @@ export function createApprovalPolicy(opts) {
                 if (okRaw === true)
                     return ALLOW;
                 if (okRaw !== false) {
-                    return { action: "deny", message: `approval callback for "${req.toolName}" returned an out-of-contract value (${typeof ok}) — denied fail-closed (return true, false, or the {allow} object)` };
+                    return { action: "deny", message: `approval callback for "${req.toolName}" returned an out-of-contract value (${typeof ok}) — denied fail-closed (this policy's \`approve\` returns a boolean: return true or false)` };
                 }
                 return { action: "deny", message: `approval denied for "${req.toolName}"` };
             }
@@ -106,7 +116,7 @@ export function combinePolicies(...policies) {
             let current = req;
             let rewrite;
             for (const p of policies) {
-                const d = await p.check(current, signal);
+                const d = refuseOutOfContractDecision(await p.check(current, signal));
                 if (d.action === "deny") {
                     return rewrite?.updatedInput !== undefined ? { ...d, updatedInput: rewrite.updatedInput } : d;
                 }

package/dist/index.d.ts

@@ -77,7 +77,7 @@ export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpoi
 export { InMemoryFileSnapshotStore, DEFAULT_SNAPSHOT_BOUNDS } from "./core/file-snapshot-store.js";
 export { captureManifest, applyManifest } from "./core/file-snapshot-store.js";
 export type { FileSnapshotStore, FileSnapshotResult, FileSnapshotError, FileSnapshotBounds } from "./core/file-snapshot-store.js";
-export { FileStorageBackend, FileSessionRepo, FileCheckpointStore, FileMemoryStore, FileToolResultStore, FileSessionPolicyStore, FileFileSnapshotStore, FileWorkflowJournalStore, MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult, resolveDataRoot, sanitizeScope, sanitizePathComponent, createFileConsolidationLock, atomicWriteFile, writeThenLink, ensureDir, readJsonlRecords, AppendLog, type FileStorageBackendOptions, type FileCheckpointStoreOptions, } from "./stores/file/index.js";
+export { FileStorageBackend, FileSessionRepo, FileCheckpointStore, FileMemoryStore, FileToolResultStore, FileSessionPolicyStore, FileFileSnapshotStore, FileWorkflowJournalStore, MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult, resolveDataRoot, sanitizeScope, sanitizePathComponent, createFileConsolidationLock, atomicWriteFile, writeThenLink, ensureDir, readJsonlRecords, AppendLog, type FileStorageBackendOptions, type FileStorageCorruptReadInfo, type FileSessionRepoOptions, type FileFileSnapshotStoreOptions, type FileCheckpointStoreOptions, } from "./stores/file/index.js";
 export { CacheBreakDetector, type CacheBreakFinding, type ToolFingerprintInput } from "./core/cache-break-detector.js";
 export { maybeCompact, type MaybeCompactOptions, type CompactionWindowSafetyInfo } from "./core/auto-compaction.js";
 export { brainToRuntime } from "./core/runtime.js";
@@ -113,7 +113,7 @@ export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/au
 export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, type PermissionRule, type ParsedPermissionRule, type PermissionRuleIssue, type PermissionRuleCaps, type PermissionRulePolicyOptions, } from "./core/permission-rules.js";
 export { formatHookFeedback, runToolGate, type Hooks, type HookToolContext, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, type NormalizedMemorySpec, type MemorySpecInput, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, type Embedder, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, type UtilityGate, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryNoteType, type StructuredNoteInput, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";
 export { encodeSurfacedKey, buildManifestText, validateSelectedIds, composeSelectiveBody, formatMemoryAge, resolveLinkedIds, RECALL_CAVEAT, DEFAULT_MAX_SELECTED, DEFAULT_MAX_LINKED, type MemorySelector, type MemorySelectRequest, type SelectiveRecallOptions, type SelectiveRecallResult, type LayeredRecallOptions, type LayeredRecallResult, type ScopedNoteHeader, type ScopedNoteRecord, } from "./core/memory-recall.js";
 export { runMemoryConsolidation, CONSOLIDATION_SYSTEM_PROMPT, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATION_SEARCH_LIMIT, DEFAULT_CONSOLIDATION_MAX_NOTES, DEFAULT_CONSOLIDATION_TIMEOUT_SEC, normalizeForExactMatch, type ConsolidationParams, type ConsolidationStats, type ConsolidationNote, type ConsolidationLLM, } from "./core/runner/memory-consolidation.js";

package/dist/index.js

@@ -100,7 +100,7 @@ export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/au
 export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, } from "./core/permission-rules.js";
 export { formatHookFeedback, runToolGate, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, syncMemoryScope, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, syncMemoryScope, } from "./core/memory-engine/index.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";
 export { encodeSurfacedKey, buildManifestText, validateSelectedIds, composeSelectiveBody, formatMemoryAge, resolveLinkedIds, RECALL_CAVEAT, DEFAULT_MAX_SELECTED, DEFAULT_MAX_LINKED, } from "./core/memory-recall.js";
 export { runMemoryConsolidation, CONSOLIDATION_SYSTEM_PROMPT, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATION_SEARCH_LIMIT, DEFAULT_CONSOLIDATION_MAX_NOTES, DEFAULT_CONSOLIDATION_TIMEOUT_SEC, normalizeForExactMatch, } from "./core/runner/memory-consolidation.js";

package/dist/orchestration/run-workflow-tool.js

@@ -338,6 +338,10 @@ export async function createRunWorkflowTool(d) {
                     catch (err) {
                         return structuredError(`failed to resolve workflow name: ${redactSecrets(err instanceof Error ? err.message : String(err)).slice(0, 300)}`);
                     }
+                    const resolvedShape = resolved;
+                    if (resolvedShape !== undefined && (resolvedShape === null || typeof resolvedShape !== "object")) {
+                        return structuredError("the wired workflow script store's resolveName returned the retired bare-string form — the resolution shape is now { script, defaultArgs? } (one shape); upgrade the store implementation");
+                    }
                 }
                 if (resolved === undefined && builtinsEnabled) {
                     resolved = resolveBuiltinWorkflow(rawName);
@@ -347,7 +351,7 @@ export async function createRunWorkflowTool(d) {
                 script = resolved.script;
                 if ("defaultArgs" in resolved)
                     registeredDefaultArgs = resolved.defaultArgs;
-                if (typeof resolved !== "string" && typeof resolved.stringArgKey === "string" && resolved.stringArgKey.length > 0) {
+                if (typeof resolved.stringArgKey === "string" && resolved.stringArgKey.length > 0) {
                     registeredStringArgKey = resolved.stringArgKey;
                 }
             }

package/dist/prompt-assembly/assemble.js

@@ -101,7 +101,6 @@ export function assemblePrompt(inputs) {
         userSystemPrompt: inputs.userSystemPrompt,
         userAppendSystemPrompt: inputs.userAppendSystemPrompt,
         tools: inputs.tools,
-        consolidationEnabled: false,
         ...facts,
     };
     let pack = SEMA_DEFAULT_PACK;

package/dist/stores/cc/mailbox-store.js

@@ -34,28 +34,66 @@ export function createCcFileMailboxStore(opts) {
         catch {
         }
     };
-    const loadBox = (path) => {
+    const deferredNotes = () => {
+        const pending = [];
+        return {
+            note: (path, reason) => {
+                pending.push({ path, reason });
+            },
+            flush: () => {
+                const batch = pending.splice(0, pending.length);
+                for (const n of batch)
+                    discloseCorrupt(n.path, n.reason);
+            },
+        };
+    };
+    const entryDefect = (e) => {
+        if (e === null)
+            return "null entry";
+        if (Array.isArray(e))
+            return "array entry";
+        if (typeof e !== "object")
+            return `${typeof e} entry`;
+        return undefined;
+    };
+    const loadBox = (path, note) => {
         let raw;
         try {
             raw = readFileSync(path, "utf8");
         }
         catch (err) {
             if (err.code !== "ENOENT")
-                discloseCorrupt(path, `read failed (non-ENOENT): ${err.message}`);
+                note(path, `read failed (non-ENOENT): ${err.message}`);
             return [];
         }
+        let parsed;
         try {
-            const parsed = JSON.parse(raw);
-            if (!Array.isArray(parsed)) {
-                discloseCorrupt(path, "inbox document is not an array");
-                return [];
-            }
-            return parsed;
+            parsed = JSON.parse(raw);
         }
         catch {
-            discloseCorrupt(path, "unparseable inbox JSON (torn write?)");
+            note(path, "unparseable inbox JSON (torn write?)");
             return [];
         }
+        if (!Array.isArray(parsed)) {
+            note(path, "inbox document is not an array");
+            return [];
+        }
+        const kept = [];
+        let dropped = 0;
+        let firstReason;
+        for (const e of parsed) {
+            const defect = entryDefect(e);
+            if (defect === undefined) {
+                kept.push(e);
+                continue;
+            }
+            dropped += 1;
+            if (firstReason === undefined)
+                firstReason = defect;
+        }
+        if (dropped > 0)
+            note(path, `${dropped} malformed inbox entries skipped (first: ${firstReason})`);
+        return kept;
     };
     const saveBox = (path, box) => {
         atomicWriteFile(inboxDir, path, JSON.stringify(box, null, 2));
@@ -65,8 +103,9 @@ export function createCcFileMailboxStore(opts) {
             requireDefaultScope(scope);
             mkdirSync(inboxDir, { recursive: true });
             const path = inboxPath(handle);
+            const notes = deferredNotes();
             return withCcLock(path, () => {
-                const box = loadBox(path);
+                const box = loadBox(path, notes.note);
                 box.push({
                     type: "message",
                     ...(msg.from !== undefined ? { from: msg.from } : {}),
@@ -78,6 +117,8 @@ export function createCcFileMailboxStore(opts) {
                 });
                 saveBox(path, box);
                 return box.length;
+            }).finally(() => {
+                notes.flush();
             });
         },
         claimLease: (scope, handle, owner, ttlMs, now) => {
@@ -87,7 +128,7 @@ export function createCcFileMailboxStore(opts) {
             const held = leases.get(key);
             if (held !== undefined && held.expiresAt > t && held.owner !== owner)
                 return Promise.resolve(null);
-            const box = loadBox(key);
+            const box = loadBox(key, discloseCorrupt);
             const maxSeq = box.length;
             const pending = box
                 .map((e, i) => ({ e, seq: i + 1 }))
@@ -111,8 +152,9 @@ export function createCcFileMailboxStore(opts) {
                 return Promise.resolve();
             if (!existsSync(path))
                 return Promise.resolve();
+            const notes = deferredNotes();
             return withCcLock(path, () => {
-                const box = loadBox(path);
+                const box = loadBox(path, notes.note);
                 let changed = false;
                 for (let i = 0; i < Math.min(upToSeq, box.length); i++) {
                     if (box[i].read !== true) {
@@ -124,6 +166,8 @@ export function createCcFileMailboxStore(opts) {
                     saveBox(path, box);
                 if (held.maxSeq <= upToSeq)
                     leases.delete(path);
+            }).finally(() => {
+                notes.flush();
             });
         },
         releaseLease: (scope, handle, owner) => {
@@ -136,7 +180,7 @@ export function createCcFileMailboxStore(opts) {
         },
         peekCount: (scope, handle) => {
             requireDefaultScope(scope);
-            return Promise.resolve(loadBox(inboxPath(handle)).filter((e) => e.read !== true).length);
+            return Promise.resolve(loadBox(inboxPath(handle), discloseCorrupt).filter((e) => e.read !== true).length);
         },
         drop: (scope, handle) => {
             requireDefaultScope(scope);
@@ -160,7 +204,7 @@ export function createCcFileMailboxStore(opts) {
                 if (!f.endsWith(".json"))
                     continue;
                 const path = join(inboxDir, f);
-                const box = loadBox(path);
+                const box = loadBox(path, discloseCorrupt);
                 const newest = box.reduce((acc, e) => {
                     const t = typeof e.timestamp === "string" ? Date.parse(e.timestamp) : Number.NaN;
                     return Number.isFinite(t) ? Math.max(acc, t) : Number.POSITIVE_INFINITY;

package/dist/stores/file/file-snapshot-store.d.ts

@@ -1,5 +1,11 @@
 import type { ExecutionEnv } from "../../internal/harness-types.js";
 import { type FileSnapshotBounds, type FileSnapshotResult, type FileSnapshotStore } from "../../core/file-snapshot-store.js";
+export interface FileFileSnapshotStoreOptions {
+    onCorruptRead?: (info: {
+        path: string;
+        reason: string;
+    }) => void;
+}
 export declare class FileFileSnapshotStore implements FileSnapshotStore {
     private readonly base;
     private readonly blobsDir;
@@ -7,7 +13,9 @@ export declare class FileFileSnapshotStore implements FileSnapshotStore {
     private get inFlight();
     private readonly inFlightKey;
     private readonly bounds;
-    constructor(root: string, bounds?: Partial<FileSnapshotBounds>);
+    private readonly onCorruptRead;
+    constructor(root: string, bounds?: Partial<FileSnapshotBounds>, opts?: FileFileSnapshotStoreOptions);
+    private disclose;
     private scopeDir;
     private manifestPath;
     private tryManifestPath;