@sema-agent/core 5.1.0 → 5.3.0

package/dist/core/protocol-table.d.ts

@@ -1,14 +1,19 @@
-export type ProtocolId = "mcp";
-export interface ProtocolNamespace {
+export type ProtocolId = "mcp" | "a2a";
+export interface ProtocolPeerTool {
+    peer: string;
+    tool: string;
+}
+export interface ProtocolNamespace<P extends string = string> {
     readonly id: ProtocolId;
-    readonly prefix: string;
+    readonly prefix: P;
     makeName(peer: string, tool: string): string;
-    parse(name: string): {
-        peer: string;
-        tool: string;
-    } | undefined;
+    parse(name: string): ProtocolPeerTool | undefined;
     displayGroupKey(name: string): string;
 }
-export declare const MCP_NAMESPACE: ProtocolNamespace;
+declare const MCP_PREFIX_NAME: "mcp__";
+declare const A2A_PREFIX_NAME: "a2a__";
+export declare const MCP_NAMESPACE: ProtocolNamespace<typeof MCP_PREFIX_NAME>;
+export declare const A2A_NAMESPACE: ProtocolNamespace<typeof A2A_PREFIX_NAME>;
 export declare const PROTOCOL_TABLE: readonly ProtocolNamespace[];
 export declare function protocolOf(name: string): ProtocolNamespace | undefined;
+export {};

package/dist/core/protocol-table.js

@@ -1,23 +1,42 @@
 const NAME_SEP = "__";
-export const MCP_NAMESPACE = {
-    id: "mcp",
-    prefix: `mcp${NAME_SEP}`,
-    makeName: (peer, tool) => `mcp${NAME_SEP}${peer}${NAME_SEP}${tool}`,
-    parse(name) {
-        if (!name.startsWith(this.prefix))
+function makeProtocolNamespace(id, prefix) {
+    const parse = (name) => {
+        if (!name.startsWith(prefix))
             return undefined;
-        const rest = name.slice(this.prefix.length);
+        const rest = name.slice(prefix.length);
         const sep = rest.indexOf(NAME_SEP);
         if (sep <= 0)
             return undefined;
-        return { peer: rest.slice(0, sep), tool: rest.slice(sep + NAME_SEP.length) };
-    },
-    displayGroupKey(name) {
-        const p = this.parse(name);
-        return p === undefined ? name : `${this.prefix}${p.peer}${NAME_SEP}*`;
-    },
-};
-export const PROTOCOL_TABLE = [MCP_NAMESPACE];
+        const tool = rest.slice(sep + NAME_SEP.length);
+        if (tool.length === 0)
+            return undefined;
+        return { peer: rest.slice(0, sep), tool };
+    };
+    const makeName = (peer, tool) => {
+        if (peer.length === 0 || tool.length === 0) {
+            throw new Error(`protocol table (${id}): peer and tool must both be non-empty (got peer=${JSON.stringify(peer)}, tool=${JSON.stringify(tool)})`);
+        }
+        if (peer.includes(NAME_SEP)) {
+            throw new Error(`protocol table (${id}): peer must not contain the ${NAME_SEP} separator (got ${JSON.stringify(peer)}) — the composed name would parse back as a DIFFERENT peer`);
+        }
+        return `${prefix}${peer}${NAME_SEP}${tool}`;
+    };
+    return {
+        id,
+        prefix,
+        makeName,
+        parse,
+        displayGroupKey: (name) => {
+            const p = parse(name);
+            return p === undefined ? name : `${prefix}${p.peer}${NAME_SEP}*`;
+        },
+    };
+}
+const MCP_PREFIX_NAME = `mcp${NAME_SEP}`;
+const A2A_PREFIX_NAME = `a2a${NAME_SEP}`;
+export const MCP_NAMESPACE = makeProtocolNamespace("mcp", MCP_PREFIX_NAME);
+export const A2A_NAMESPACE = makeProtocolNamespace("a2a", A2A_PREFIX_NAME);
+export const PROTOCOL_TABLE = [MCP_NAMESPACE, A2A_NAMESPACE];
 export function protocolOf(name) {
     return PROTOCOL_TABLE.find((ns) => name.startsWith(ns.prefix));
 }

package/dist/core/runner/prepare-memory.js

@@ -1,4 +1,4 @@
-import { adoptLegacyRepoDirs, deriveControlPlaneDir, deriveProjectControlDir, deriveProjectMemoryDir, deriveRepoMemoryDir, drainMemoryAnnouncements, enqueueMemoryAnnouncement, lookupProjectIdHint, recordProjectIdHint, resolveMemoryEngineRoot } from "../memory-engine/layout.js";
+import { adoptLegacyRepoDirs, deriveRepoControlPlaneDir, deriveProjectControlDir, deriveProjectMemoryDir, deriveRepoMemoryDir, drainMemoryAnnouncements, enqueueMemoryAnnouncement, lookupProjectIdHint, recordProjectIdHint, resolveMemoryEngineRoot } from "../memory-engine/layout.js";
 import { classifyScopePlanes, derivePersonalControlDir, derivePersonalMemoryDir, mergeHarvestReports, mergeInjections, needsDualRoots, parsedProjectPlane } from "../memory-engine/dual-root.js";
 import { normalizeMemorySpec } from "../memory.js";
 import { MemoryEngine } from "../memory-engine/engine.js";
@@ -38,7 +38,7 @@ export async function prepareMemory(input) {
                     recordProjectIdHint(engineRoot, repoRoot, marker.projectId);
                     if (firstSwitch) {
                         try {
-                            const oldCtl = deriveControlPlaneDir(engineRoot, repoRoot);
+                            const oldCtl = deriveRepoControlPlaneDir(engineRoot, repoRoot);
                             const newCtl = deriveProjectControlDir(engineRoot, marker.projectId);
                             const drained = drainMemoryAnnouncements(oldCtl);
                             for (const ann of drained.queue)
@@ -100,7 +100,7 @@ export async function prepareMemory(input) {
                 const projectEngine = new MemoryEngine({
                     backend,
                     memoryDir,
-                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveControlPlaneDir(engineRoot, repoRoot),
+                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveRepoControlPlaneDir(engineRoot, repoRoot),
                 });
                 const personalEngine = createPersonalEngine();
                 const p = planes;
@@ -140,7 +140,7 @@ export async function prepareMemory(input) {
                 const engine = new MemoryEngine({
                     backend,
                     memoryDir,
-                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveControlPlaneDir(engineRoot, repoRoot),
+                    controlDir: identityKey !== undefined ? deriveProjectControlDir(engineRoot, identityKey) : deriveRepoControlPlaneDir(engineRoot, repoRoot),
                 });
                 const handle = await engine.materialize(memorySpec.scopes, memorySpec.writeScope);
                 writeEngine = engine;

package/dist/core/runner/prepare-task.d.ts

@@ -1,6 +1,7 @@
 import { AgentHarness, type ThinkingLevel } from "../../internal/harness.js";
 import type { Model } from "../../internal/llm.js";
 import { type MaterializedMcp } from "../mcp.js";
+import { type MaterializedA2a } from "../a2a.js";
 import type { HarvestReport, MemorySessionHandle } from "../memory-engine/types.js";
 import { StoredSession } from "../session.js";
 import type { SessionStore } from "../session.js";
@@ -15,6 +16,7 @@ import type { MemoryEngine } from "../memory-engine/engine.js";
 import { type ToolManifestRow } from "../../prompt-assembly/tool-catalog.js";
 import type { TaskNotificationPayload } from "../task-notification.js";
 import { type CwdRef } from "../../tools/fs/index.js";
+import { type WorkflowSizeGuideline } from "../../orchestration/workflow-size-guideline.js";
 import type { Runner } from "./runtask.js";
 import { type CheckpointGate, type CheckpointState, type CheckpointToken, type ResourceLedger, type ResourceLimitReason } from "../checkpoint-store.js";
 import type { ActiveWorktreeSession, AgentMessage, AgentTool, ExecutionEnv } from "../../internal/harness.js";
@@ -36,6 +38,7 @@ export interface Prepared {
     thinking?: ThinkingLevel;
     compModel?: Model;
     mcp: MaterializedMcp;
+    a2a?: MaterializedA2a;
     blockedRef: BlockedRef;
     outputRef: OutputRef;
     abortController: AbortController;
@@ -186,6 +189,10 @@ export interface Prepared {
         path: string;
         contentHash: string | null;
     }>;
+    workflowSizeGuideline?: {
+        legGuideline: WorkflowSizeGuideline;
+        current: () => WorkflowSizeGuideline;
+    };
     detectExternalChanges?: (maxFiles: number) => Promise<{
         changed: Array<{
             path: string;

package/dist/core/runner/prepare-task.js

@@ -9,6 +9,7 @@ import { buildAutoModePrompt, renderAutoModeAction, renderAutoModeWindow } from
 import { resolveModel, resolveTaskModel, roleModelIfSet } from "../roles.js";
 import { primaryActivityArg } from "../arg-summary.js";
 import { materializeMcpTools } from "../mcp.js";
+import { materializeA2aTools } from "../a2a.js";
 import { Type } from "typebox";
 import { brainToRuntime } from "../runtime.js";
 import { StoredSession, isSessionConflict, hasSessionFork } from "../session.js";
@@ -16,7 +17,7 @@ import { createSubagentWorktreeHelper, forkGovernanceDenial } from "../../agents
 import { createAgentTranscriptTool, AGENT_TRANSCRIPT_TOOL_NAME } from "../../agents/agent-transcript-tool.js";
 import { createSendMessageTool, SEND_MESSAGE_TOOL_NAME } from "../../agents/send-message-tool.js";
 import { SubagentRetainLedger } from "../../agents/retain-ledger.js";
-import { combinePolicies, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, resolveAsk, toolPolicyNameSets } from "../tool-policy.js";
+import { combinePolicies, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, refuseOutOfContractDecision, resolveAsk, toolPolicyNameSets } from "../tool-policy.js";
 import { ActiveSkillScope, createActiveSkillScopePolicy } from "./active-skill-scope.js";
 import { computeCallCap, createCallCapRef, softExecDeadlineMs, toolCutDeadlineMs, WALLTIME_STALL_CONNECT_MS, WALLTIME_STALL_FIRST_TOKEN_MS, WALLTIME_STALL_IDLE_MS } from "./call-cap.js";
 import { createCutKillRegistry } from "./cut-kill.js";
@@ -30,7 +31,7 @@ import { CacheBreakDetector, toolsToFingerprintInputs } from "../cache-break-det
 import { reservedCollisions, reservedFor } from "../../brain/request-params.js";
 import { defineTool, isDefineToolProduct } from "../tools.js";
 import { RETIRED_TOOL_NAMES } from "../tool-name-aliases.js";
-import { protocolOf } from "../protocol-table.js";
+import { protocolOf, PROTOCOL_TABLE } from "../protocol-table.js";
 import { pathToUri } from "../lsp-protocol.js";
 import { DEFAULT_TOOL_RESULT_THRESHOLD_CHARS, createOffloadPersist, firstPartyOffloadPolicy, InMemoryToolResultStore, RunnerSharedToolResultStore, ScopedToolResultStore, isVolatileOffloadStore, OFFLOAD_TOOL_NAME, createReadToolResultTool, withToolResultOffload, } from "../tool-result-store.js";
 import { OUTPUT_TOOL_NAME, REPORT_FINDINGS_TOOL_NAME, SKILL_CONTENT_MAX_CHARS, SKILL_TOOL_NAME, createOutputTool, createReportBlockedTool, createReportFindingsTool, createSkillTool, normalizeSkills } from "./synthetic-tools.js";
@@ -64,6 +65,7 @@ import { createSchedulerTools } from "../../tools/scheduler-tools.js";
 import { createPresentPlanTool, createEnterPlanModeTool, PRESENT_PLAN_TOOL_NAME, ENTER_PLAN_MODE_TOOL_NAME } from "../present-plan-tool.js";
 import { isSelfOrchestrationActive, selfOrchestrationFailClosedReason } from "../../orchestration/workflow-script-runner.js";
 import { createRunWorkflowTool, RUN_WORKFLOW_TOOL_NAME } from "../../orchestration/run-workflow-tool.js";
+import { resolveWorkflowSizeGuideline } from "../../orchestration/workflow-size-guideline.js";
 import { createLspTool, gitCheckIgnoreFilter, resolveLspPath } from "../lsp.js";
 import { resolveKey } from "../../tools/fs/safety.js";
 import { BINDING_CHECKPOINT_VERSION, mintCheckpointToken, RESOURCE_CHECKPOINT_VERSION, WALLTIME_CHECKPOINT_VERSION, buildRiskDescriptor, debitLedger, remainingBudgetMicroUsd, } from "../checkpoint-store.js";
@@ -82,6 +84,7 @@ function sanitizedTtlMs(ttlMs) {
 const ungatedWarnedShapes = new WeakMap();
 const advisedPolicyNames = new WeakMap();
 const ADVISED_KEYS_CAP = 64;
+const NAMESPACED_NAME_SHAPES = PROTOCOL_TABLE.map((ns) => `${ns.prefix}<peer>__<tool>`).join(", ");
 export const DEFAULT_IRREVERSIBLE_SCOPE = "irreversible";
 export function checkpointScopeOf(spec) {
     return spec.durableApproval?.scope || spec.principal || DEFAULT_IRREVERSIBLE_SCOPE;
@@ -261,7 +264,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
     let shellGatedMonitor = false;
     for (const t of spec.tools ?? []) {
         if (t.name.includes("__")) {
-            const e = new Error(`Tool name "${t.name}" is invalid: "__" is reserved for the MCP namespace (mcp__<server>__<tool>) and must not appear in a caller tool name.`);
+            const e = new Error(`Tool name "${t.name}" is invalid: "__" is reserved for the engine's protocol tool namespaces (${NAMESPACED_NAME_SHAPES}) and must not appear in a caller tool name.`);
             e.code = "config.tool_name_invalid";
             throw e;
         }
@@ -479,7 +482,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             return maybeOffload(tool, policy);
         return maybeOffload(tool, explicitGlobalThreshold === undefined ? policy : undefined);
     };
-    const mcpOffload = (tool) => {
+    const remoteToolOffload = (tool) => {
         if (explicitGlobalThreshold !== undefined)
             return maybeOffload(tool);
         return maybeOffload(tool, { offloadThresholdChars: tool.mcpMaxResultSizeChars ?? 50_000 });
@@ -492,6 +495,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
     }
     let ownedEnv;
     let mcp;
+    let a2a;
     if (internals?.requestedCwd !== undefined && deps.executionEnvFactory === undefined) {
         await settleTeardownLeg(() => forgetOnThrow(), "forgetOnThrow (cwd-unsupported leg)", (err) => deps.onError?.(err, { phase: "config", sessionId }));
         const e = new Error(`Agent cwd "${internals.requestedCwd}" cannot take effect: this deployment has no executionEnvFactory (a static execution environment cannot be re-rooted per agent). Drop the cwd parameter or deploy a factory.`);
@@ -969,8 +973,11 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 `(per-principal entitlement governance, not a misconfiguration — the run_workflow tool is not mounted)`), { phase: "config", sessionId });
         }
         let workflowToolsActive = false;
+        let workflowSizeGuideline;
         if (selfOrchestrationActive && runnerSelf && deps.workflowScriptRunner && deps.workflowGovernanceBaseline) {
             workflowToolsActive = true;
+            const currentSizeGuideline = () => resolveWorkflowSizeGuideline(deps.workflowLimits?.sizeGuideline).size;
+            workflowSizeGuideline = { legGuideline: currentSizeGuideline(), current: currentSizeGuideline };
             toolEffects.set(RUN_WORKFLOW_TOOL_NAME, "write");
             tools.push(await createRunWorkflowTool({
                 runner: runnerSelf,
@@ -1093,7 +1100,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 throw e;
             }
         }
-        tools.push(...mcp.tools.map((t) => mcpOffload(t)));
+        tools.push(...mcp.tools.map((t) => remoteToolOffload(t)));
         const rebuildHarnessToolsRef = {};
         const toolCallGateArmedRef = { armed: false };
         if (spec.mcp?.length) {
@@ -1121,7 +1128,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         const pushable = r.tools.filter((t) => !excludedSet.has(t.name));
                         const excludedNow = r.tools.filter((t) => excludedSet.has(t.name)).map((t) => t.name);
                         try {
-                            foldMcpAxes((r.axes ?? []).filter((a) => !excludedSet.has(a.name)));
+                            foldProtocolAxes((r.axes ?? []).filter((a) => !excludedSet.has(a.name)), "MCP");
                         }
                         catch (foldErr) {
                             lines.push(`${r.server}: failed (${foldErr instanceof Error ? foldErr.message : String(foldErr)})`);
@@ -1135,7 +1142,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                                 tools.splice(i, 1);
                             }
                         }
-                        tools.push(...pushable.map((t) => mcpOffload(t)));
+                        tools.push(...pushable.map((t) => remoteToolOffload(t)));
                         changed = true;
                         const detail = [];
                         const shownAdded = r.added.filter((n) => !excludedSet.has(n));
@@ -1165,7 +1172,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             });
             toolEffects.set("RefreshMcpTools", "read");
         }
-        const foldMcpAxes = (axes) => {
+        const foldProtocolAxes = (axes, protocolLabel) => {
             for (const axis of axes) {
                 if (axis.irreversibility === "always") {
                     irreversibilityTier.set(axis.name, "always");
@@ -1173,7 +1180,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 }
                 if (axis.egress) {
                     if (axis.effect !== undefined && axis.effect !== "write") {
-                        const e = new Error(`MCP tool "${axis.name}" resolves to egress:true with effect:"${axis.effect}" — an egress tool (external write) must have effect:"write". Clear egress (toolAxes egress:false) if it is a pure read, or set effect:"write".`);
+                        const e = new Error(`${protocolLabel} tool "${axis.name}" resolves to egress:true with effect:"${axis.effect}" — an egress tool (external write) must have effect:"write". Clear egress (toolAxes egress:false) if it is a pure read, or set effect:"write".`);
                         e.code = "config.egress_requires_write_effect";
                         throw e;
                     }
@@ -1183,7 +1190,25 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     toolEffects.set(axis.name, axis.effect ?? "write");
             }
         };
-        foldMcpAxes(mcp.toolAxes);
+        foldProtocolAxes(mcp.toolAxes, "MCP");
+        a2a = spec.a2a?.length
+            ? await materializeA2aTools(spec.a2a, spec.principal, abortController.signal)
+            : { tools: [], toolAxes: [], warnings: [], statuses: [], refresh: async () => [], dispose: async () => { } };
+        for (const w of a2a.warnings)
+            deps.onError?.(w, { phase: "a2a", sessionId });
+        {
+            const callerNames = new Set((spec.tools ?? []).flatMap((t) => [t.name, ...(t.aliases ?? [])]));
+            const clash = a2a.tools.find((t) => callerNames.has(t.name));
+            if (clash) {
+                await a2a.dispose();
+                await mcp.dispose();
+                const e = new Error(`Tool name "${clash.name}" is reserved by an injected A2A tool — a caller tool of the same name would silently shadow it.`);
+                e.code = "config.reserved_tool_name";
+                throw e;
+            }
+        }
+        tools.push(...a2a.tools.map((t) => remoteToolOffload(t)));
+        foldProtocolAxes(a2a.toolAxes, "A2A");
         const callCapOn = spec.limits?.callCapByDeadline !== false;
         const callCapRef = spec.limits?.timeoutSec &&
             spec.limits.timeoutSec > 0 &&
@@ -1861,11 +1886,11 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             }
         }
         const userToolNames = (spec.tools ?? []).map((t) => t.name);
-        const mcpToolNames = mcp.tools.map((t) => t.name);
+        const protocolToolNames = [...mcp.tools.map((t) => t.name), ...a2a.tools.map((t) => t.name)];
         const deferred = classifyDeferred({
             specs: spec.tools ?? [],
-            mcpToolNames,
-            fullTools: tools.filter((t) => userToolNames.includes(t.name) || mcpToolNames.includes(t.name)),
+            protocolToolNames,
+            fullTools: tools.filter((t) => userToolNames.includes(t.name) || protocolToolNames.includes(t.name)),
             deferMode: deps.deferMode,
             model,
             deferNames: (toolFaceSnapshot.defer ?? []).filter((n) => tools.some((t) => t.name === n)),
@@ -2211,7 +2236,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                                 throw err;
                             }
                             if (n.includes("__") && protocolOf(n) === undefined) {
-                                const err = new Error(`tool policy ${kind}-list entry "${n}" is a pre-prefix MCP tool name and matches nothing in this run's roster — MCP tools are named "mcp__<server>__<tool>" and legacy-name normalization was removed (RB-476-A), so this entry would silently guard nothing. Prefix the entry with "mcp__".`);
+                                const err = new Error(`tool policy ${kind}-list entry "${n}" carries the "__" namespace separator but no protocol prefix, and matches nothing in this run's roster — protocol tools are named ${NAMESPACED_NAME_SHAPES}, and legacy-name normalization was removed (RB-476-A), so this entry would silently guard nothing. Prefix the entry with the owning protocol's marker.`);
                                 err.code = "config.legacy_tool_name";
                                 throw err;
                             }
@@ -2364,7 +2389,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                     toolName: creq.toolName,
                     toolCallId: creq.toolCallId,
                     args: editArgs,
-                    message: re.message ?? re.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                    message: re.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                     ...askSourceIdentity(),
                     ...(re.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                 }, onAskOf, csignal ?? abortController.signal);
@@ -2410,7 +2435,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         toolName: creq.toolName,
                         toolCallId: creq.toolCallId,
                         args: presentedArgs,
-                        message: first.message ?? first.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                        message: first.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                         ...askSourceIdentity(),
                         ...(first.action === "ask" && first.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                     }, pc.onAsk, csignal ?? abortController.signal);
@@ -2466,7 +2491,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         toolName: creq.toolName,
                         toolCallId: creq.toolCallId,
                         args: presentedArgs,
-                        message: decision.message ?? decision.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
+                        message: decision.message ?? `approval required for "${creq.toolName}" (inherited parent policy)`,
                         ...askSourceIdentity(),
                         ...(decision.action === "ask" && decision.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                     }, pc.onAsk, csignal ?? abortController.signal);
@@ -2706,7 +2731,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         const preview = approvalPreviewOf(req.toolName, req.args);
                         return preview !== undefined ? { preview } : {};
                     })(),
-                    message: decision.message ?? decision.message ?? `approval required for "${req.toolName}"`,
+                    message: decision.message ?? `approval required for "${req.toolName}"`,
                     ...askSourceIdentity(),
                     ...(decision.action === "ask" && decision.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
                 }, onAsk, abortController.signal);
@@ -2750,17 +2775,33 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             const checkpointStore = spec.checkpointStore ?? deps.checkpointStore;
             const durableApproval = spec.durableApproval ??
                 (runtimeCaps?.forceDurableGate ? { scope: spec.principal || DEFAULT_IRREVERSIBLE_SCOPE } : undefined);
-            const serializeCheckpointState = (workspaceHandle) => ({
+            const inFlightSpendMicroUsd = () => {
+                const own = liveSpendRef.get?.().costMicroUsd ?? 0;
+                const seededNested = resume?.seed.nestedStats.costMicroUsd;
+                const nestedDelta = nestedStats.costMicroUsd - (typeof seededNested === "number" && Number.isFinite(seededNested) ? seededNested : 0);
+                return (Number.isFinite(own) ? own : 0) + Math.max(0, Number.isFinite(nestedDelta) ? nestedDelta : 0);
+            };
+            const repairBundleForCheckpoint = (parkedSpendMicroUsd) => {
+                const carried = internals?.repairBundle !== undefined
+                    ? structuredClone(internals.repairBundle)
+                    : resume?.seed.repairBundle !== undefined
+                        ? structuredClone(resume.seed.repairBundle)
+                        : undefined;
+                if (carried === undefined)
+                    return undefined;
+                if (parkedSpendMicroUsd === undefined || !Number.isFinite(parkedSpendMicroUsd) || parkedSpendMicroUsd <= 0)
+                    return carried;
+                const prior = typeof carried.spentMicroUsd === "number" && Number.isFinite(carried.spentMicroUsd) ? Math.max(0, carried.spentMicroUsd) : 0;
+                carried.spentMicroUsd = prior + parkedSpendMicroUsd;
+                return carried;
+            };
+            const serializeCheckpointState = (workspaceHandle, parkedSpendMicroUsd) => ({
                 activeTools: [...activeTools],
                 outputRef: { value: outputRef.value, set: outputRef.set },
                 nestedStats: { ...nestedStats },
                 consolidationNotes: undefined,
                 readFileState: readFileStateForCheckpoint ? [...readFileStateForCheckpoint.entries()] : undefined,
-                repairBundle: internals?.repairBundle !== undefined
-                    ? structuredClone(internals.repairBundle)
-                    : resume?.seed.repairBundle !== undefined
-                        ? structuredClone(resume.seed.repairBundle)
-                        : undefined,
+                repairBundle: repairBundleForCheckpoint(parkedSpendMicroUsd),
                 workspaceHandle,
                 handsCwd: handsCwdRef?.current,
                 activeWorktree: worktreeSessionRef?.current ? { ...worktreeSessionRef.current } : undefined,
@@ -2978,7 +3019,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                         leafId,
                         gate,
                         pendingAction: { kind: "plan_review" },
-                        state: serializeCheckpointState(remoteHandle),
+                        state: serializeCheckpointState(remoteHandle, inFlightSpendMicroUsd()),
                         status: "pending",
                         createdAt: mintedAt,
                         suspendedAt: now(),
@@ -3092,7 +3133,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                                     };
                         const scope = durableApproval?.scope || checkpointScopeOf({ principal: spec.principal });
                         const ttlMs = sanitizedTtlMs(durableApproval?.ttlMs);
-                        const checkpointState = serializeCheckpointState(remoteHandle);
+                        const checkpointState = serializeCheckpointState(remoteHandle, inFlightSpendMicroUsd());
                         const approvalLedger = debitLedger(priorLedger, liveSpendRef.get?.() ?? { costMicroUsd: 0, tokens: 0, turns: 0, walltimeMs: 0 }, resourceTotal, { countSlice: false });
                         const mintedAt = Date.now();
                         cp = {
@@ -3396,7 +3437,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             ? undefined
             : async (path) => {
                 try {
-                    const d = await denyNarrowingPolicy.check({ toolName: "Read", args: { file_path: path }, toolCallId: "changed-files-visibility-probe" }, abortController.signal);
+                    const d = refuseOutOfContractDecision(await denyNarrowingPolicy.check({ toolName: "Read", args: { file_path: path }, toolCallId: "changed-files-visibility-probe" }, abortController.signal));
                     return d.action === "deny";
                 }
                 catch {
@@ -3488,12 +3529,16 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
             : undefined;
         overheadState.promptChars = systemPrompt.length;
         const preparedHolder = {};
-        const buildPrepared = () => ({ harness, session, sessionId, taskRootPath, model, thinking, compModel, mcp: mcp, blockedRef, outputRef, abortController, conflictRef, blockedToolCalls, nestedStats, ...(rewindNotes.length > 0 ? { rewindNotes } : {}), cwdRef: handsCwdRef, ...(worktreeSessionRef !== undefined ? { worktreeSessionRef } : {}), ...(workspaceStateSettle !== undefined ? { workspaceStateSettle } : {}), denyNarrowingPolicy, ...(basePolicyForResumeEdit !== undefined ? { basePolicyForResumeEdit } : {}), releaseSignal, cacheBreakDetector, cacheFingerprint, promptManifest, epochDeclaredSections, activeTools, ...(deferred.size > 0 ? { deferredToolNames: deferred } : {}), ownedEnv, suspendRef, reviewRef, remoteEnvFailures, reviewRequestRef, suspendLoopRef, suspendForResource, ...(callCapRef ? { callCapRef } : {}), ...(cutKills ? { cutKills } : {}), ...(callCapRef ? { callIssuedAtRef } : {}), suspendForReview, resourceLedger: priorLedger, liveSpendRef, humanReviewRef, now, tools, toolEffects, promptOverheadTokens, readTaskFile, recentlyReadFiles, normalizeAttachmentPath, isDedupStubResult, ...(onCompactionApplied ? { onCompactionApplied } : {}), compactionReuseRef, trimPressureRef, ...(memoryEngineSession ? { memoryEngineSession } : {}), ...(subagentRetain ? { subagentRetain } : {}), ...(lspDiagnostics && nudgeLspOnEdit ? { lspDiagnostics: { registry: lspDiagnostics, nudge: nudgeLspOnEdit } } : {}), planModeRef, ...(dateChange ? { dateChange } : {}), ...(instructionSources ? { instructionSources } : {}), ...(detectExternalChanges ? { detectExternalChanges } : {}), ...(toolsDeltaRef ? { toolsDeltaRef } : {}), ...(agentListing ? { agentListing } : {}), ...(skillsListing ? { skillsListing } : {}), announcedListingsRef, listBackgroundTasks, ...(turnSnapshotRef.current !== undefined ? { turnSnapshot: turnSnapshotRef.current } : {}), ...(centerCompactionCandidate !== undefined ? { centerCompactionCandidate } : {}) });
+        const buildPrepared = () => ({ harness, session, sessionId, taskRootPath, model, thinking, compModel, mcp: mcp, ...(a2a !== undefined && a2a.tools.length > 0 ? { a2a } : {}), blockedRef, outputRef, abortController, conflictRef, blockedToolCalls, nestedStats, ...(rewindNotes.length > 0 ? { rewindNotes } : {}), cwdRef: handsCwdRef, ...(worktreeSessionRef !== undefined ? { worktreeSessionRef } : {}), ...(workspaceStateSettle !== undefined ? { workspaceStateSettle } : {}), denyNarrowingPolicy, ...(basePolicyForResumeEdit !== undefined ? { basePolicyForResumeEdit } : {}), releaseSignal, cacheBreakDetector, cacheFingerprint, promptManifest, epochDeclaredSections, activeTools, ...(deferred.size > 0 ? { deferredToolNames: deferred } : {}), ownedEnv, suspendRef, reviewRef, remoteEnvFailures, reviewRequestRef, suspendLoopRef, suspendForResource, ...(callCapRef ? { callCapRef } : {}), ...(cutKills ? { cutKills } : {}), ...(callCapRef ? { callIssuedAtRef } : {}), suspendForReview, resourceLedger: priorLedger, liveSpendRef, humanReviewRef, now, tools, toolEffects, promptOverheadTokens, readTaskFile, recentlyReadFiles, normalizeAttachmentPath, isDedupStubResult, ...(onCompactionApplied ? { onCompactionApplied } : {}), compactionReuseRef, trimPressureRef, ...(memoryEngineSession ? { memoryEngineSession } : {}), ...(subagentRetain ? { subagentRetain } : {}), ...(lspDiagnostics && nudgeLspOnEdit ? { lspDiagnostics: { registry: lspDiagnostics, nudge: nudgeLspOnEdit } } : {}), planModeRef, ...(dateChange ? { dateChange } : {}), ...(instructionSources ? { instructionSources } : {}), ...(workflowSizeGuideline ? { workflowSizeGuideline } : {}), ...(detectExternalChanges ? { detectExternalChanges } : {}), ...(toolsDeltaRef ? { toolsDeltaRef } : {}), ...(agentListing ? { agentListing } : {}), ...(skillsListing ? { skillsListing } : {}), announcedListingsRef, listBackgroundTasks, ...(turnSnapshotRef.current !== undefined ? { turnSnapshot: turnSnapshotRef.current } : {}), ...(centerCompactionCandidate !== undefined ? { centerCompactionCandidate } : {}) });
         const prepared = buildPrepared();
         preparedHolder.current = prepared;
         return prepared;
     }
     catch (prepareErr) {
+        if (a2a) {
+            const a2aHandle = a2a;
+            await settleTeardownLeg(() => a2aHandle.dispose(), "a2a.dispose (prepare-throw leg)", (e) => deps.onError?.(e, { phase: "config", sessionId }));
+        }
         if (mcp) {
             const mcpHandle = mcp;
             await settleTeardownLeg(() => mcpHandle.dispose(), "mcp.dispose (prepare-throw leg)", (e) => deps.onError?.(e, { phase: "config", sessionId }));

package/dist/core/runner/runtask.js

@@ -36,10 +36,11 @@ import { delimitUntrusted, inlineUntrusted, sanitizeUntrustedText } from "../unt
 import { reconcileInterruptedSession } from "../session-reconcile.js";
 import { RunnerSharedToolResultStore } from "../tool-result-store.js";
 import { formatDiagnosticsBlock } from "../lsp-diagnostics.js";
-import { toolPolicyNameSets } from "../tool-policy.js";
+import { refuseOutOfContractDecision, toolPolicyNameSets } from "../tool-policy.js";
 import { defaultTaskRegistry } from "../task-registry.js";
 import { discloseDroppedPending, PendingSessionNotifications, renderTaskNotificationXml, SystemInjectionQueue, taskNotificationDedupKey } from "../task-notification.js";
 import { ToolDetachHub } from "../tool-detach.js";
+import { workflowSizeGuidelineChangeNotice } from "../../orchestration/workflow-size-guideline.js";
 import { DEFAULT_MAX_TURNS } from "../../config/defaults.js";
 import { structuredFrom, toolOutputFrom } from "./tool-output-projection.js";
 export { DEFAULT_MAX_TURNS };
@@ -51,7 +52,7 @@ function createRunState() {
         budget: { remainingMicroUsd: undefined, maxCostMicroUsd: undefined, overBudget: () => false, streamCancel: false, callOutputChars: 0, lastStreamBudgetCheck: 0, projectedOverBudget: () => false },
         turn: { callStartAt: undefined, firstTokenAt: undefined, turnUsage: undefined, turnUsageMissing: false, turnStopReason: undefined, lastTurnHadToolCalls: false, toolBatch: [] },
         counters: { nudgesSent: 0, nudgeIdx: 0, finalizeInjected: false, walltimeSyncBackstopFired: false, compactionFloor: 0, trimForceBackoff: false, callCutoffs: 0, repetitionCuts: 0, repetitionSpared: 0, repetitionEvents: [], REPETITION_EVENTS_CAP: 0, preemptIgnoredReported: false, wroteThisRun: false, finalVerifyInjections: 0, groundingSignalPreR9: false, groundingSignalPostR9: false, cadenceTurns: 0 },
-        attach: { attachmentsCfg: undefined, agentListingOn: false, skillsListingOn: false, attachState: undefined, dateState: undefined, instrProbe: undefined, instrState: undefined, attachmentsInjected: 0 },
+        attach: { attachmentsCfg: undefined, agentListingOn: false, skillsListingOn: false, attachState: undefined, dateState: undefined, instrProbe: undefined, instrState: undefined, sizeGuidelineState: undefined, attachmentsInjected: 0 },
     };
 }
 const MAX_CONSECUTIVE_COMPACTION_FAILURES = 3;
@@ -314,7 +315,10 @@ function makeTurnBoundary(prepared, stats, rs, deps) {
         }
         let boundaryAttachmentBytes = 0;
         let attachmentsPayload;
-        if ((rs.attach.dateState !== undefined || rs.attach.instrState !== undefined || rs.attach.attachState !== undefined) &&
+        if ((rs.attach.dateState !== undefined ||
+            rs.attach.instrState !== undefined ||
+            rs.attach.sizeGuidelineState !== undefined ||
+            rs.attach.attachState !== undefined) &&
             !boundarySteered &&
             !rs.counters.finalizeInjected &&
             rs.counters.finalVerifyInjections === 0 &&
@@ -457,6 +461,16 @@ function makeTurnBoundary(prepared, stats, rs, deps) {
                     rs.attach.dateState.announcedDate = today;
                 }
             }
+            if (rs.attach.sizeGuidelineState !== undefined && rs.turn.lastTurnHadToolCalls) {
+                const guideline = rs.attach.sizeGuidelineState.current();
+                if (guideline !== rs.attach.sizeGuidelineState.announcedGuideline) {
+                    due.splice(due.length > 0 && due[0].source === "date_change" ? 1 : 0, 0, {
+                        source: "workflow_size_guideline_change",
+                        body: workflowSizeGuidelineChangeNotice(guideline),
+                    });
+                    rs.attach.sizeGuidelineState.announcedGuideline = guideline;
+                }
+            }
             if (rs.attach.instrState !== undefined && rs.attach.instrProbe !== undefined && rs.turn.lastTurnHadToolCalls) {
                 let probed = null;
                 try {
@@ -1674,13 +1688,19 @@ export class Runner {
         }
         rs.telemetry.taskStart = Date.now();
         rs.telemetry.taskStartMonotonic = performance.now();
-        void Promise.resolve(this.sessions.noteTaskRun?.(prepared.sessionId, rs.telemetry.taskId)).catch((err) => {
+        const discloseNoteTaskRunFailure = (err) => {
             try {
                 this.deps.onError?.(err instanceof Error ? err : new Error(String(err)), { phase: "config", sessionId: prepared.sessionId });
             }
             catch {
             }
-        });
+        };
+        try {
+            void Promise.resolve(this.sessions.noteTaskRun?.(prepared.sessionId, rs.telemetry.taskId)).catch(discloseNoteTaskRunFailure);
+        }
+        catch (err) {
+            discloseNoteTaskRunFailure(err);
+        }
         rs.degrade.recordDegraded = (info, toModel) => {
             if (rs.degrade.degraded !== undefined)
                 return;
@@ -1764,6 +1784,10 @@ export class Runner {
             rs.attach.instrProbe !== undefined && prepared.instructionSources !== undefined && prepared.instructionSources.length > 0
                 ? { lastAnnouncedHash: new Map(prepared.instructionSources.map((s) => [s.path, s.contentHash])) }
                 : undefined;
+        rs.attach.sizeGuidelineState =
+            prepared.workflowSizeGuideline !== undefined
+                ? { announcedGuideline: prepared.workflowSizeGuideline.legGuideline, current: prepared.workflowSizeGuideline.current }
+                : undefined;
         rs.counters.cadenceTurns = 0;
         rs.turn.lastTurnHadToolCalls = false;
         if (rs.attach.attachState !== undefined && rs.attach.attachmentsCfg?.backgroundTasks === true) {
@@ -2614,6 +2638,7 @@ export class Runner {
         catch (err) {
             if (errorCodeOf(err) === "resume.tool_unavailable") {
                 await settleTeardownLeg(() => prepared.mcp.dispose(), "mcp.dispose (tool_unavailable leg)", (e) => this.deps.onError?.(e, { phase: "config", sessionId: prepared.sessionId }));
+                await settleTeardownLeg(() => prepared.a2a?.dispose(), "a2a.dispose (tool_unavailable leg)", (e) => this.deps.onError?.(e, { phase: "config", sessionId: prepared.sessionId }));
                 await settleTeardownLeg(() => (prepared.ownedEnv && hasDestroy(prepared.ownedEnv) ? prepared.ownedEnv.destroy() : undefined), "ownedEnv.destroy (tool_unavailable leg)", (e) => this.deps.onError?.(e, { phase: "config", sessionId: prepared.sessionId }));
                 throw err;
             }
@@ -3192,12 +3217,12 @@ export class Runner {
         if (outcome.gate === "policy_ask") {
             const boundTo = cp.pendingAction.kind === "tool_approval" ? cp.pendingAction.toolCallId : undefined;
             if (outcome.boundCallId !== boundTo) {
-                throw new CheckpointError("checkpoint.invalid_outcome", `resume boundCallId "${outcome.boundCallId}" does not match the checkpoint's pending tool call "${boundTo ?? "(none)"}" — the decision-action binding (design/80 D-1) failed; refusing to apply a decision bound to a different action`);
+                throw new CheckpointError("checkpoint.invalid_outcome", `resume boundCallId "${outcome.boundCallId}" does not match the checkpoint's pending tool call "${boundTo ?? "(none)"}" — the decision-action binding (design/80 D-1) failed; refusing to apply a decision bound to a different action`, { field: "boundCallId" });
             }
             const boundHash = cp.pendingAction.kind === "tool_approval" ? cp.pendingAction.boundInputHash : undefined;
             if (boundHash !== undefined) {
                 if (outcome.boundInputHash !== boundHash) {
-                    throw new CheckpointError("checkpoint.invalid_outcome", "resume boundInputHash does not match the checkpoint's pending tool call input — the decision-action input binding (design/80 D-1 §2) failed; refusing to apply an approval bound to a different input (TOCTOU re-mint guard)");
+                    throw new CheckpointError("checkpoint.invalid_outcome", "resume boundInputHash does not match the checkpoint's pending tool call input — the decision-action input binding (design/80 D-1 §2) failed; refusing to apply an approval bound to a different input (TOCTOU re-mint guard)", { field: "boundInputHash" });
                 }
             }
             else if (checkpointVersionOf(cp) >= BINDING_CHECKPOINT_VERSION) {
@@ -3347,7 +3372,7 @@ export class Runner {
             return;
         }
         if (outcome.decision === "allow" && outcome.updatedInput !== undefined && prepared.basePolicyForResumeEdit) {
-            const rechecked = await prepared.basePolicyForResumeEdit.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal);
+            const rechecked = refuseOutOfContractDecision(await prepared.basePolicyForResumeEdit.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal));
             if (rechecked.action === "deny") {
                 emitEnd(true);
                 const eid = await prepared.session.appendMessage(toolResultMsg(pendingAction.toolCallId, pendingAction.toolName, formatHookFeedback(`The approver EDITED this call's input; the edited call is denied by the deployment's tool policy and was not executed${rechecked.message ? `: ${rechecked.message}` : ""}.`), true));
@@ -3356,7 +3381,7 @@ export class Runner {
             }
         }
         if (prepared.denyNarrowingPolicy) {
-            const narrowed = await prepared.denyNarrowingPolicy.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal);
+            const narrowed = refuseOutOfContractDecision(await prepared.denyNarrowingPolicy.check({ toolName: pendingAction.toolName, args: resolvedArgs, toolCallId: pendingAction.toolCallId }, prepared.abortController.signal));
             if (narrowed.action === "deny") {
                 emitEnd(true);
                 const eid = await prepared.session.appendMessage(toolResultMsg(pendingAction.toolCallId, pendingAction.toolName, formatHookFeedback(`The approved tool call "${pendingAction.toolName}" is now denied by a session rule and was not executed${narrowed.message ? `: ${narrowed.message}` : ""}.`), true));
@@ -3514,6 +3539,14 @@ export class Runner {
         catch (err) {
             this.deps.onError?.(err, { phase: "mcp", sessionId: prepared.sessionId });
         }
+        if (prepared.a2a !== undefined) {
+            try {
+                await prepared.a2a.dispose();
+            }
+            catch (err) {
+                this.deps.onError?.(err, { phase: "a2a", sessionId: prepared.sessionId });
+            }
+        }
         return comp;
     }
     async teardownOwnedEnv(prepared) {

package/dist/core/runner/tool-disclosure.d.ts

@@ -14,7 +14,7 @@ export declare function deferHint(description: string, max?: number): string;
 export declare function safeName(name: string): string;
 export declare function classifyDeferred(opts: {
     specs: ReadonlyArray<ToolSpec>;
-    mcpToolNames: ReadonlyArray<string>;
+    protocolToolNames: ReadonlyArray<string>;
     fullTools: ReadonlyArray<ToolFingerprintInput>;
     deferMode?: "auto";
     model: Model;

package/dist/core/runner/tool-disclosure.js

@@ -1,6 +1,6 @@
 import { Type } from "typebox";
 import { Value } from "typebox/value";
-import { defineTool } from "../tools.js";
+import { defineTool, errorResult } from "../tools.js";
 export const TOOL_SEARCH_NAME = "ToolSearch";
 const DEFER_AUTO_FRACTION = 0.1;
 const CHARS_PER_TOKEN = 4;
@@ -35,7 +35,7 @@ export function classifyDeferred(opts) {
         if (s.defer === true && !pinned.has(s.name))
             deferred.add(s.name);
     }
-    for (const name of opts.mcpToolNames)
+    for (const name of opts.protocolToolNames)
         if (!pinned.has(name))
             deferred.add(name);
     for (const name of opts.deferNames ?? [])
@@ -247,6 +247,11 @@ export function createToolSearchTool(opts) {
         }),
         effect: "read",
         execute: async (raw) => {
+            const staleSelect = (raw ?? {});
+            if (staleSelect.select !== undefined) {
+                return errorResult(`Error (${TOOL_SEARCH_NAME}): \`select\` is not a parameter (the array form is retired) — put the ` +
+                    `selection in \`query\` instead: {"query":"select:ToolA,ToolB"}. Nothing was activated.`);
+            }
             const args = (raw ?? {});
             const { matched, missing } = resolveToolSearchDetailed(args, registry);
             const mounted = mountedNames?.() ?? new Set();