@sema-agent/core 5.12.0 → 5.14.0

package/dist/core/wiring-manifest.js

@@ -0,0 +1,186 @@
+import { createHash } from "node:crypto";
+import { canonicalize } from "./canonical-json.js";
+import { resolveCheckpointStore } from "./checkpoint-store.js";
+import { isLiveQuestionFace } from "./ask-question.js";
+export function resolveDeclaredDurability(store, storeName) {
+    const declared = store?.durability;
+    if (declared === undefined)
+        return "process-local";
+    if (declared === "durable" || declared === "process-local")
+        return declared;
+    const e = new Error(`${storeName}.durability declares ${JSON.stringify(declared)} — not a recognized StoreDurability ` +
+        `("durable" | "process-local"). Fix the declaration; an unparseable durability cannot be folded to either arm.`);
+    e.code = "config.store_durability_invalid";
+    throw e;
+}
+const manifestDurabilityOf = (d) => (d === "durable" ? "declared_durable" : "process_local");
+export function deriveAskEffective(form, parkEffective) {
+    switch (form) {
+        case "callback":
+            return "human_reachable";
+        case "allow":
+            return "auto_allow";
+        case "deny":
+            return "auto_deny";
+        case "absent":
+            return parkEffective === true ? "park_only" : parkEffective === "unresolved" ? "unresolved" : "auto_deny";
+        default: {
+            const _exhaustive = form;
+            void _exhaustive;
+            throw new Error(`unreachable ask form ${String(form)}`);
+        }
+    }
+}
+function deriveParkLane(facts) {
+    if (!facts.parkCapable) {
+        return { capable: false, effective: false, reasons: ["no_checkpoint_store"] };
+    }
+    const durability = facts.checkpointDurability !== undefined ? { checkpointDurability: manifestDurabilityOf(facts.checkpointDurability) } : {};
+    if (facts.parkDurableApprovalOptIn || facts.parkForceDurableGate === true || facts.parkSafetyVocabularyArmed === true) {
+        return { capable: true, effective: true, reasons: [], ...durability };
+    }
+    const reasons = ["no_durable_approval_opt_in"];
+    const unresolved = facts.parkForceDurableGate === undefined || facts.parkSafetyVocabularyArmed === undefined;
+    if (facts.parkForceDurableGate === undefined)
+        reasons.push("await_runtime_caps");
+    else
+        reasons.push("no_force_durable_gate");
+    if (facts.parkSafetyVocabularyArmed === undefined)
+        reasons.push("await_tool_vocabulary");
+    else
+        reasons.push("no_armed_safety_vocabulary");
+    return { capable: true, effective: unresolved ? "unresolved" : false, reasons, ...durability };
+}
+export function deriveWiringManifest(facts) {
+    if (facts.half === "static" && facts.leg !== undefined) {
+        throw new Error("a static wiring manifest has no leg — leg identity is an effective-half fact");
+    }
+    if (facts.half === "effective" && facts.leg === undefined) {
+        throw new Error("an effective wiring manifest requires its leg kind");
+    }
+    if (facts.half === "effective" && (facts.parkForceDurableGate === undefined || facts.parkSafetyVocabularyArmed === undefined)) {
+        throw new Error("an effective wiring manifest requires the resolved park atoms (parkForceDurableGate, parkSafetyVocabularyArmed) — " +
+            "`unresolved` is a static-half fact; report the static half instead, or resolve the atoms first.");
+    }
+    const parkLane = deriveParkLane(facts);
+    const questionChannel = facts.questionWired
+        ? "wired"
+        : facts.half === "effective" && facts.questionStrippedByEngine === true
+            ? "stripped_bg_lane"
+            : "absent";
+    const manifest = {
+        schemaVersion: 1,
+        ...(facts.leg !== undefined ? { leg: { kind: facts.leg } } : {}),
+        ask: {
+            form: facts.askForm,
+            ...(facts.askProvenance !== undefined ? { provenance: facts.askProvenance } : {}),
+            ...(facts.half === "effective" ? { effective: deriveAskEffective(facts.askForm, parkLane.effective) } : {}),
+        },
+        question: {
+            wired: questionChannel,
+            ...(questionChannel === "wired" && facts.questionProvenance !== undefined ? { provenance: facts.questionProvenance } : {}),
+            ...(facts.interactiveToolsWithoutDeliveryFace === true ? { interactiveToolsWithoutDeliveryFace: true } : {}),
+        },
+        interaction: { posture: facts.interactionPosture ?? "absent" },
+        elicit: { seamWired: facts.elicitSeamWired, serversOptedIn: facts.elicitServersOptedIn },
+        parkLane,
+        session: { store: manifestDurabilityOf(facts.sessionDurability) },
+        fleet: { backgroundAgentStore: facts.backgroundAgentStoreWired, hostChildEventSink: facts.hostChildEventSinkWired },
+        governance: {
+            audience: "operator",
+            lockedConfig: facts.lockedConfigWired,
+            compliance: facts.complianceWired,
+            memoryAdmission: facts.memoryAdmissionWired,
+            retention: facts.retentionPolicyWired,
+        },
+    };
+    if (facts.half === "effective") {
+        const { leg: _leg, ...assembly } = manifest;
+        const { provenance: _askSeat, ...askForHash } = assembly.ask;
+        const { provenance: _questionSeat, ...questionForHash } = assembly.question;
+        manifest.configFingerprint = createHash("sha256")
+            .update(canonicalize({ ...assembly, ask: askForHash, question: questionForHash }))
+            .digest("hex")
+            .slice(0, 16);
+    }
+    return manifest;
+}
+export function resolveAskSeamForm(spec, deps) {
+    const seat = spec.onAsk !== undefined ? { value: spec.onAsk, provenance: "spec" } : deps.onAsk !== undefined ? { value: deps.onAsk, provenance: "deps" } : undefined;
+    if (seat === undefined)
+        return { form: "absent" };
+    const v = seat.value;
+    const form = typeof v === "function" ? "callback" : v === "allow" ? "allow" : v === "deny" ? "deny" : undefined;
+    if (form === undefined) {
+        const e = new Error(`the resolved onAsk seat (${seat.provenance}) holds ${JSON.stringify(v)} — not an OnAsk ` +
+            `("allow" | "deny" | approver function); refusing to classify it.`);
+        e.code = "config.interaction_wiring";
+        throw e;
+    }
+    return { form, provenance: seat.provenance };
+}
+export function resolveQuestionSeam(spec, deps) {
+    const seat = spec.onQuestion !== undefined ? { value: spec.onQuestion, provenance: "spec" } : deps.onQuestion !== undefined ? { value: deps.onQuestion, provenance: "deps" } : undefined;
+    if (seat === undefined)
+        return { wired: false };
+    if (typeof seat.value !== "function") {
+        const e = new Error(`the resolved onQuestion seat (${seat.provenance}) holds ${seat.value === null ? "null" : typeof seat.value} — not an OnQuestion ` +
+            `callback; refusing to report it as a wired question channel (omit the key, or wire a function).`);
+        e.code = "config.interaction_wiring";
+        throw e;
+    }
+    if (!isLiveQuestionFace(seat.value))
+        return { wired: false };
+    return { wired: true, provenance: seat.provenance };
+}
+export function countElicitOptIns(spec) {
+    return (spec.mcp ?? []).filter((s) => s.elicitation === true).length;
+}
+export function resolveElicitSeam(deps) {
+    if (deps.onElicit === undefined)
+        return false;
+    if (typeof deps.onElicit !== "function") {
+        const e = new Error(`RunnerDeps.onElicit holds ${deps.onElicit === null ? "null" : typeof deps.onElicit} — not an OnElicit ` +
+            `callback; refusing to report it as a wired elicitation seam (omit the key, or wire a function).`);
+        e.code = "config.interaction_wiring";
+        throw e;
+    }
+    return true;
+}
+export function describeStaticWiring(deps, spec = {}) {
+    const ask = resolveAskSeamForm(spec, deps);
+    const question = resolveQuestionSeam(spec, deps);
+    const checkpointStore = resolveCheckpointStore(spec, deps);
+    const capable = checkpointStore !== undefined;
+    return deriveWiringManifest({
+        half: "static",
+        askForm: ask.form,
+        ...(ask.provenance !== undefined ? { askProvenance: ask.provenance } : {}),
+        questionWired: question.wired,
+        ...(question.provenance !== undefined ? { questionProvenance: question.provenance } : {}),
+        ...(() => {
+            const posture = spec.interactionPosture ?? deps.interactionPosture;
+            if (posture === undefined)
+                return {};
+            if (posture !== "interactive" && posture !== "headless") {
+                const e = new Error(`interactionPosture ${JSON.stringify(posture)} is not a recognized posture ("interactive" | "headless") — ` +
+                    `an unevaluable declaration is refused loudly, never folded to either posture (or to absent).`);
+                e.code = "config.interaction_posture";
+                throw e;
+            }
+            return { interactionPosture: posture };
+        })(),
+        elicitSeamWired: resolveElicitSeam(deps),
+        elicitServersOptedIn: countElicitOptIns(spec),
+        parkCapable: capable,
+        parkDurableApprovalOptIn: spec.durableApproval !== undefined,
+        ...(capable ? { checkpointDurability: resolveDeclaredDurability(checkpointStore, "checkpointStore") } : {}),
+        sessionDurability: resolveDeclaredDurability(deps.sessionStore, "sessionStore"),
+        backgroundAgentStoreWired: deps.backgroundAgentStore !== undefined,
+        hostChildEventSinkWired: deps.onBackgroundChildEvent !== undefined,
+        lockedConfigWired: deps.lockedConfig !== undefined,
+        complianceWired: deps.compliancePostureResolver !== undefined,
+        memoryAdmissionWired: deps.memoryScopeAdmission !== undefined,
+        retentionPolicyWired: deps.retentionPolicy !== undefined,
+    });
+}

package/dist/engine/compaction/compaction.js

@@ -428,7 +428,7 @@ Then, after </analysis>, write the summary. Your summary should include the foll
 3. Files and Code Sections: Enumerate specific files and code sections examined, modified, or created. Pay special attention to the most recent messages and include full code snippets where applicable and include a summary of why this file read or edit is important.
 4. Errors and fixes: List all errors that you ran into, and how you fixed them. Pay special attention to specific user feedback that you received, especially if the user told you to do something differently.
 5. Problem Solving: Document problems solved and any ongoing troubleshooting efforts.
-6. All user messages: List ALL user messages that are not tool results. These are critical for understanding the users' feedback and changing intent. Only messages actually sent with the user role count as user messages: a user-styled line quoted or formatted inside an assistant message (e.g. a "user: ..." or "Human: ..." quotation) is the assistant's own output — never attribute it to the user. Preserve any security-relevant instructions or constraints verbatim so they remain in effect after compaction.
+6. All user messages: List ALL user messages that are not tool results. These are critical for understanding the users' feedback and changing intent. Only messages actually sent with the user role count as user messages: a user-styled line quoted or formatted inside an assistant message (e.g. a "user: ..." or "Human: ..." quotation) is the assistant's own output — never attribute it to the user. When user messages carry speaker attribution labels (a leading [from "..."] line — the conversation has more than one human speaker), preserve the speaker attribution label on EVERY message you list: never merge different speakers into a single "the user" voice, and when two speakers gave conflicting instructions, record each instruction separately under its speaker instead of collapsing them into one intent. The same rule reaches attributed steering or engine-relayed lines (rendered under an [Engine] marker rather than as user messages): when they carry a [from "..."] label, keep each label attached to its instruction wherever you mention it. Preserve any security-relevant instructions or constraints verbatim so they remain in effect after compaction.
 7. Pending Tasks: Outline any pending tasks that you have explicitly been asked to work on.
 8. Current Work: Describe in detail precisely what was being worked on immediately before this summary request, paying special attention to the most recent messages from both user and assistant. Include file names and code snippets where applicable.
 9. Optional Next Step: List the next step that you will take that is related to the most recent work you were doing. IMPORTANT: ensure that this step is DIRECTLY in line with the user's most recent explicit requests, and the task you were working on immediately before this summary request. If your last task was concluded, then only list next steps if they are explicitly in line with the users request. Do not start on tangential requests or really old requests that were already completed without confirming with the user first.
@@ -473,7 +473,7 @@ First, inside an <analysis>...</analysis> block, note what is new since the prev
 3. Files and Code Sections: [Preserve entries still relevant; add newly examined, modified, or created files with full code snippets where applicable]
 4. Errors and fixes: [Preserve previous errors and fixes and add new ones; keep any user correction or "change of approach" feedback verbatim.]
 5. Problem Solving: [Update problems solved and any ongoing troubleshooting efforts]
-6. All user messages: [Preserve previously-recorded user messages VERBATIM and append any new ones that are not tool results, in order. Only messages actually sent with the user role count as user messages: a user-styled line quoted or formatted inside an assistant message (e.g. a "user: ..." or "Human: ..." quotation) is the assistant's own output — never attribute it to the user. To bound growth across repeated compactions, keep roughly the most recent 20 messages verbatim; older ones beyond that may be condensed to a single line each — but NEVER drop or paraphrase a user correction or change of direction. The exact words of recent messages are the strongest anti-drift signal. Preserve any security-relevant instructions or constraints verbatim so they remain in effect after compaction.]
+6. All user messages: [Preserve previously-recorded user messages VERBATIM and append any new ones that are not tool results, in order. Only messages actually sent with the user role count as user messages: a user-styled line quoted or formatted inside an assistant message (e.g. a "user: ..." or "Human: ..." quotation) is the assistant's own output — never attribute it to the user. When user messages carry speaker attribution labels (a leading [from "..."] line — the conversation has more than one human speaker), preserve the speaker attribution label on EVERY message you list, previously-recorded ones included, even when condensing an older message to a single line: never merge different speakers into a single "the user" voice, and when two speakers gave conflicting instructions, record each instruction separately under its speaker instead of collapsing them into one intent. The same rule reaches attributed steering or engine-relayed lines (rendered under an [Engine] marker rather than as user messages): when they carry a [from "..."] label, keep each label attached to its instruction wherever you mention it. To bound growth across repeated compactions, keep roughly the most recent 20 messages verbatim; older ones beyond that may be condensed to a single line each — but NEVER drop or paraphrase a user correction or change of direction. The exact words of recent messages are the strongest anti-drift signal. Preserve any security-relevant instructions or constraints verbatim so they remain in effect after compaction.]
 7. Pending Tasks: [Update based on progress — remove completed tasks, add newly requested ones]
 8. Current Work: [Describe in detail precisely what was being worked on immediately before this summary request, paying special attention to the most recent messages from both user and assistant]
 9. Optional Next Step: [Update based on current state. IMPORTANT: ensure that this step is DIRECTLY in line with the user's most recent explicit requests, and the task you were working on immediately before this summary request — include a direct verbatim quote of that request. Do not start on tangential requests or really old requests that were already completed.]

package/dist/engine/harness/agent-harness.d.ts

@@ -1,4 +1,4 @@
-import type { AssistantMessage, ImageContent, Model } from "../llm/index.js";
+import type { ActorAssertion, AssistantMessage, ImageContent, Model } from "../llm/index.js";
 import type { AgentMessage, AgentTool, LoopMalformedToolUseRecovery, LoopThinkingOnlyRecovery, LoopTruncatedOutputRecovery, QueueMode, ThinkingLevel } from "../loop/types.js";
 import { type EngineSegment } from "../../core/untrusted-text.js";
 import type { AbortResult, AgentHarnessEvent, AgentHarnessEventResultMap, AgentHarnessOptions, AgentHarnessOwnEvent, AgentHarnessResources, AgentHarnessStreamOptions, ExecutionEnv, PromptTemplate, Skill } from "./types.js";
@@ -8,6 +8,7 @@ export interface UserMessageProvenance {
     engineMinted?: true;
     provenance?: "engine-note";
     enginePayload?: unknown;
+    actor?: ActorAssertion;
 }
 export interface HarnessLoopRecovery {
     truncatedOutput?: LoopTruncatedOutputRecovery;

package/dist/engine/harness/agent-harness.js

@@ -1,3 +1,4 @@
+import { snapshotActorAssertion, stripEngineMetadata } from "../llm/index.js";
 import { runAgentLoop } from "../loop/agent-loop.js";
 import { resolveAgentCoreStreamFn } from "../loop/runtime-deps.js";
 import { normalizeEngineSegments } from "../../core/untrusted-text.js";
@@ -24,9 +25,16 @@ function createUserMessage(text, images, provenance) {
             : {}),
         ...(provenance?.engineMinted === true && !engineNote ? { engineMinted: true } : {}),
         ...(engineNote ? { provenance: "engine-note" } : {}),
+        ...(provenance?.actor !== undefined &&
+            typeof provenance.actor.id === "string" &&
+            provenance.actor.id.length > 0 &&
+            typeof provenance.actor.hostAsserted === "boolean"
+            ? { actor: snapshotActorAssertion(provenance.actor) }
+            : {}),
     };
 }
 const engineNotePayloads = new WeakMap();
+const ENGINE_NOTE_STEER_BACKLOG_CAP = 50;
 function createFailureMessage(model, error, aborted) {
     return {
         role: "assistant",
@@ -418,7 +426,13 @@ export class AgentHarness {
         };
     }
     async drainQueuedMessages(queue, mode) {
-        const messages = mode === "all" ? queue.splice(0) : queue.splice(0, 1);
+        let count = mode === "all" ? queue.length : 1;
+        if (mode !== "all" && queue.length > 1 && engineNotePayloads.has(queue[0])) {
+            count = 1;
+            while (count < queue.length && engineNotePayloads.has(queue[count]))
+                count++;
+        }
+        const messages = queue.splice(0, count);
         if (messages.length === 0) {
             return messages;
         }
@@ -448,7 +462,7 @@ export class AgentHarness {
             ...(this.streamingToolExecution === true && (this.getHandlers("tool_call")?.size ?? 0) === 0
                 ? { streamingToolExecution: true }
                 : {}),
-            convertToLlm,
+            convertToLlm: (messages) => stripEngineMetadata(convertToLlm(messages)),
             shouldStopAfterTurn: () => this._stopAfterTurn,
             transformContext: async (messages) => {
                 const result = await this.emitHook({ type: "context", messages: [...messages] });
@@ -713,6 +727,9 @@ export class AgentHarness {
     async enqueueInjection(queue, text, options) {
         if (AgentHarness.emptyInjection(text, options))
             return;
+        if (options?.enginePayload !== undefined && queue.filter((q) => engineNotePayloads.has(q)).length >= ENGINE_NOTE_STEER_BACKLOG_CAP) {
+            throw new AgentHarnessError("invalid_state", `engine-note backlog at cap (${ENGINE_NOTE_STEER_BACKLOG_CAP}) — park the payload for the session's next run`);
+        }
         const m = createUserMessage(text, options?.images, options);
         if (options?.enginePayload !== undefined)
             engineNotePayloads.set(m, options.enginePayload);

package/dist/engine/harness/types.d.ts

@@ -336,7 +336,9 @@ export interface SessionRepo<TMetadata extends SessionMetadata = SessionMetadata
     delete(metadata: TMetadata): Promise<void>;
     fork(source: TMetadata, options: SessionForkOptions & TCreateOptions): Promise<Session<TMetadata>>;
     exportEntries?(sessionId: string): Promise<SessionTreeEntry[]>;
-    importEntries?(sessionId: string, owner: string | undefined, entries: SessionTreeEntry[]): Promise<void>;
+    importEntries?(sessionId: string, owner: string | undefined, entries: SessionTreeEntry[], options?: {
+        preserveActorAssertions?: boolean;
+    }): Promise<void>;
 }
 export interface JsonlSessionCreateOptions extends SessionCreateOptions {
     cwd: string;

package/dist/engine/llm/types.d.ts

@@ -110,6 +110,12 @@ export interface Usage {
     };
 }
 export type StopReason = "stop" | "length" | "toolUse" | "error" | "aborted";
+export interface ActorAssertion {
+    id: string;
+    hostAsserted: boolean;
+    issuer?: string;
+}
+export declare function snapshotActorAssertion(actor: ActorAssertion): ActorAssertion;
 export interface UserMessage {
     role: "user";
     content: string | (TextContent | ImageContent)[];
@@ -121,6 +127,7 @@ export interface UserMessage {
     }>;
     engineMinted?: true;
     provenance?: "engine-note";
+    actor?: ActorAssertion;
 }
 export interface AssistantMessage {
     role: "assistant";

package/dist/engine/llm/types.js

@@ -1,8 +1,15 @@
+export function snapshotActorAssertion(actor) {
+    return {
+        id: actor.id,
+        hostAsserted: actor.hostAsserted,
+        ...(actor.issuer !== undefined ? { issuer: actor.issuer } : {}),
+    };
+}
 export function stripEngineMetadata(messages) {
     return messages.map((m) => {
         if (m.role !== "user")
             return m;
-        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, ...rest } = m;
+        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, actor: _e, ...rest } = m;
         return rest;
     });
 }

package/dist/engine/llm/validation.js

@@ -288,5 +288,15 @@ export function validateToolArguments(tool, toolCall) {
         .Errors(args)
         .map((error) => `  - ${formatValidationPath(error)}: ${error.message}`)
         .join("\n") || "Unknown validation error";
-    throw new Error(`Validation failed for tool "${toolCall.name}":\n${errors}\n\nReceived arguments:\n${JSON.stringify(toolCall.arguments, null, 2)}`);
+    const schemaJson = (() => {
+        try {
+            const s = JSON.stringify(tool.parameters);
+            return s.length > VALIDATION_ERROR_SCHEMA_MAX_CHARS ? `${s.slice(0, VALIDATION_ERROR_SCHEMA_MAX_CHARS)}… (schema truncated)` : s;
+        }
+        catch {
+            return "(schema not serializable)";
+        }
+    })();
+    throw new Error(`Validation failed for tool "${toolCall.name}":\n${errors}\n\nReceived arguments:\n${JSON.stringify(toolCall.arguments, null, 2)}\n\nExpected parameter schema:\n${schemaJson}`);
 }
+const VALIDATION_ERROR_SCHEMA_MAX_CHARS = 4_000;

package/dist/engine/session/import-validate.d.ts

@@ -1,13 +1,18 @@
 import { type SessionTreeEntry } from "../harness/types.js";
+export interface ImportValidatorOptions {
+    preserveActorAssertions?: boolean;
+}
 export declare class StreamingImportValidator {
     private readonly seen;
     private readonly parentOf;
     private rootCount;
     private runningLeaf;
     private done;
+    private readonly preserveActorAssertions;
+    constructor(options?: ImportValidatorOptions);
     step(entry: SessionTreeEntry): void;
     finish(): {
         leafId: string | null;
     };
 }
-export declare function validateEntriesForImport(entries: SessionTreeEntry[]): SessionTreeEntry[];
+export declare function validateEntriesForImport(entries: SessionTreeEntry[], options?: ImportValidatorOptions): SessionTreeEntry[];

package/dist/engine/session/import-validate.js

@@ -17,6 +17,10 @@ export class StreamingImportValidator {
     rootCount = 0;
     runningLeaf = null;
     done = false;
+    preserveActorAssertions;
+    constructor(options) {
+        this.preserveActorAssertions = options?.preserveActorAssertions === true;
+    }
     step(entry) {
         if (this.done) {
             throw new SessionError("invalid_session", "StreamingImportValidator.step() called after finish()");
@@ -55,7 +59,7 @@ export class StreamingImportValidator {
         }
         if (e.type === "message") {
             validateMessageContentShape(e.message, `Entry "${e.id}"`);
-            normalizeEngineProvenanceStamp(e.message);
+            normalizeEngineProvenanceStamp(e.message, this.preserveActorAssertions);
         }
         else if (e.type === "custom_message") {
             validateContentShape(e.content, CUSTOM_CONTENT_BLOCK_TYPES, true, `Entry "${e.id}".content`);
@@ -208,12 +212,15 @@ export class StreamingImportValidator {
         return { leafId: this.runningLeaf };
     }
 }
-export function validateEntriesForImport(entries) {
-    const v = new StreamingImportValidator();
-    for (const e of entries)
+export function validateEntriesForImport(entries, options) {
+    const protectedEntries = entries.map((e) => e.type === "message" && typeof e.message === "object" && e.message !== null && !Array.isArray(e.message)
+        ? { ...e, message: { ...e.message } }
+        : e);
+    const v = new StreamingImportValidator(options);
+    for (const e of protectedEntries)
         v.step(e);
     v.finish();
-    return entries;
+    return protectedEntries;
 }
 const TEXT_IMAGE_BLOCK_TYPES = new Set(["text", "image"]);
 const CUSTOM_CONTENT_BLOCK_TYPES = TEXT_IMAGE_BLOCK_TYPES;
@@ -235,12 +242,28 @@ function describeShape(value) {
     }
     return `a ${typeof value}`;
 }
-function normalizeEngineProvenanceStamp(message) {
+function normalizeEngineProvenanceStamp(message, preserveActorAssertions = false) {
     if (message === null || typeof message !== "object")
         return;
     const m = message;
     if (m.role !== "user")
         return;
+    if (m.actor !== undefined) {
+        const a = m.actor;
+        const wellFormed = preserveActorAssertions &&
+            a !== null &&
+            typeof a === "object" &&
+            typeof a.id === "string" &&
+            a.id.length > 0 &&
+            typeof a.hostAsserted === "boolean" &&
+            (a.issuer === undefined || (typeof a.issuer === "string" && a.issuer.length > 0));
+        if (wellFormed) {
+            m.actor = { id: a.id, hostAsserted: a.hostAsserted, ...(a.issuer !== undefined ? { issuer: a.issuer } : {}) };
+        }
+        else {
+            delete m.actor;
+        }
+    }
     if (m.engineMinted !== undefined && m.engineMinted !== true)
         delete m.engineMinted;
     if (m.provenance !== undefined && m.provenance !== "engine-note")

package/dist/engine/session/memory-repo.d.ts

@@ -11,5 +11,7 @@ export declare class InMemorySessionRepo implements SessionRepo<SessionMetadata,
     delete(metadata: SessionMetadata): Promise<void>;
     fork(sourceMetadata: SessionMetadata, options: SessionForkOptions): Promise<Session>;
     exportEntries(sessionId: string): Promise<SessionTreeEntry[]>;
-    importEntries(sessionId: string, owner: string | undefined, entries: SessionTreeEntry[]): Promise<void>;
+    importEntries(sessionId: string, owner: string | undefined, entries: SessionTreeEntry[], options?: {
+        preserveActorAssertions?: boolean;
+    }): Promise<void>;
 }

package/dist/engine/session/memory-repo.js

@@ -49,9 +49,9 @@ export class InMemorySessionRepo {
         const session = await this.open({ id: sessionId, createdAt: "" });
         return session.getStorage().getEntries();
     }
-    async importEntries(sessionId, owner, entries) {
+    async importEntries(sessionId, owner, entries, options) {
         void owner;
-        const validated = validateEntriesForImport(entries);
+        const validated = validateEntriesForImport(entries, options);
         const metadata = { id: sessionId, createdAt: createTimestamp() };
         this.sessions.set(sessionId, toSession(new InMemorySessionStorage({ metadata, entries: validated })));
     }

package/dist/index.d.ts

@@ -15,7 +15,7 @@ export { createTaskListTools, createMemoryTaskListStore, assertJsonMetadata, typ
 export { assembleCodeTools, type CodeToolsConfig, CODE_ROLE } from "./scenarios/full-body.js";
 export { capAggregateToolResults, AGGREGATE_TOOL_RESULT_BUDGET_CHARS, DEFAULT_BUDGET_EXEMPT_TOOLS, type AggregateBudgetOptions, } from "./core/tool-result-budget.js";
 export { capAggregateMediaBytes, AGGREGATE_MEDIA_BUDGET_BYTES, type MediaStripInfo } from "./core/media-byte-cap.js";
-export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, type OnQuestion, type AskQuestion, type AskQuestionOption, type AskQuestionRequest, type QuestionAnswer, type QuestionAnswerItem, } from "./core/ask-question.js";
+export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, isQuestionUnavailable, type OnQuestionOutcome, type QuestionUnavailable, type OnQuestion, type AskQuestion, type AskQuestionOption, type AskQuestionRequest, type QuestionAnswer, type QuestionAnswerItem, type AskQuestionCardDetails, type AskUserQuestionToolOptions, type AskAnswerContinuationSource, type SyntheticContinuationReason, } from "./core/ask-question.js";
 export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, SharedAbortScope, settleOnAbort, type LspNoneReason, type LspOperation, type LspServerManager, type LspSession, type LspResult, type LspLocation, type LspSymbolInfo, type LspRequestParams, type LspToolOptions, type LspTransport, type LspReadText, } from "./core/lsp.js";
 export { buildRequest, parseResult, callHierarchyMethod, pathToUri } from "./core/lsp-protocol.js";
 export { TransportLspSession, type SessionWarmup } from "./core/lsp-session.js";
@@ -48,6 +48,11 @@ export { InMemorySessionPolicyStore, SessionPolicyError, loosenReasons, normaliz
 export { SAFETY_MERGE_CONFORMANCE_CORPUS, type SafetyMergeVector } from "./core/safety-merge-corpus.js";
 export { SAFETY_AXIS_VOCABULARY } from "./core/safety-axis-vocab.js";
 export { createSessionRulePolicy } from "./core/runner/session-rule-policy.js";
+export { LOCKED_KEY_REGISTRY, resolveLockedKeys, type LockedKey, type LockedConfig } from "./core/locked-config.js";
+export { BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, WEB_FETCH_TOOL_NAME, complianceCallDenial, resolveComplianceDenies, type ComplianceCapability, type CompliancePosture, type ComplianceProfile, } from "./core/compliance.js";
+export { admitMemoryScopes, foldAdmissionFreeze, type OwnOrgAdmissionVerdict, type MemoryAdmissionInput, type MemoryAdmissionOutcome, type MemoryAdmissionVerdict, type MemoryScopeAdmission, type MemoryScopeOrigin, type MemoryScopeRequest, } from "./core/memory-admission.js";
+export { assertRetentionCapability, type ManagedRetentionCapability, type RetentionDeclaration, type RetentionDeclaring, type RetentionPolicy, type RetentionReceipt, } from "./core/retention.js";
+export { GOVERNANCE_CODES, governanceRetryClass, type GovernanceCode, type GovernanceRetryClass } from "./core/governance-codes.js";
 export { TtlSessionStore, type TtlSessionStoreOptions, type EvictPolicy } from "./core/session-store.js";
 export { reconcileInterruptedSession, findOrphanToolCalls, type OrphanToolCall, type ReconcileReport, } from "./core/session-reconcile.js";
 export { StoredSession, InMemorySessionRepo, InMemorySessionStorage, BaseSessionStorage, leafIdAfterEntry, validateEntriesForImport, StreamingImportValidator, boundedTail, SessionError, isSessionConflict, hasSessionFork, uuidv7, type Session, type SessionStore, type AcquiredSession, type SessionStoreSummary, type SessionStorage, type SessionRepo, type SessionMetadata, type SessionTreeEntry, type SessionWriteOptions, } from "./core/session.js";
@@ -77,7 +82,7 @@ export { HAND_TOOL_EFFECTS, bashReversibilityProbe, BASH_READONLY_DEFAULT_ALLOW,
 export { classifyCompoundReadonlyDetailed, formatOutOfRootReadApprovalOption, type BashReadonlyRootBoundary, type CompoundReadonlyVerdict, } from "./tools/fs/index.js";
 export { resolveBashTimeoutCaps } from "./tools/fs/index.js";
 export { InMemoryToolResultStore, OFFLOAD_TOOL_NAME, DEFAULT_TOOL_RESULT_THRESHOLD_CHARS, assertSafeToolResultRef, type ToolResultStore, type ToolResultSlice, } from "./core/tool-result-store.js";
-export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpointVersionOf, CURRENT_CHECKPOINT_VERSION, MAX_SUPPORTED_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, debitLedger, remainingBudgetMicroUsd, remainingTokens, winnerFromOutcome, validatePendingSteer, riskSeverity, buildRiskDescriptor, summarizeCheckpoint, type RiskDescriptor, type CheckpointStore, type CheckpointSummary, type Checkpoint, type CheckpointToken, type CheckpointGate, type CheckpointState, type SerializedCheckpointState, type CheckpointFaultMode, type PendingAction, type ResumeOutcome, type ResolvedOutcome, type ReopenReason, type ResolveExpectation, type SafetyAxis, type ResourceLedger, type ResourceLimitReason, type PlatformLimitReason, } from "./core/checkpoint-store.js";
+export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpointVersionOf, CURRENT_CHECKPOINT_VERSION, MAX_SUPPORTED_CHECKPOINT_VERSION, ORG_ADMISSION_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, debitLedger, remainingBudgetMicroUsd, remainingTokens, winnerFromOutcome, validatePendingSteer, readPendingSteerQueue, appendPendingSteer, MAX_PENDING_STEER_CHARS, MAX_PENDING_STEER_ENTRIES, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, PENDING_STEER_FROZEN_FIELDS, ACTOR_ASSERTION_FROZEN_FIELDS, MAX_ACTOR_FIELD_CHARS, MAX_STEER_INPUT_ID_CHARS, LEGACY_PENDING_STEER_INPUT_ID, type ActorAssertion, type PendingSteerEntry, type PendingSteerInput, riskSeverity, buildRiskDescriptor, summarizeCheckpoint, type RiskDescriptor, type CheckpointStore, type CheckpointSummary, type Checkpoint, type CheckpointToken, type CheckpointGate, type CheckpointState, type SerializedCheckpointState, type CheckpointFaultMode, type PendingAction, type ResumeOutcome, type ResolvedOutcome, type ReopenReason, type ResolveExpectation, type SafetyAxis, type ResourceLedger, type ResourceLimitReason, type PlatformLimitReason, } from "./core/checkpoint-store.js";
 export { InMemoryUsageWindowStore, GLOBAL_USAGE_KEY, EMPTY_USAGE_WINDOW_RECORD, chargeUsageRecord, readUsageRecord, usageRetryAfterMs, resolveUsageWindows, type UsageWindow, type UsageWindowStore, type UsageWindowReading, type UsageWindowRecord, type UsageSlot, type UsageBucketRow, } from "./core/usage-window-store.js";
 export { FileUsageWindowStore } from "./stores/file/usage-window-store.js";
 export { ENV_LIFETIME_SUSPEND_MARGIN_MS, USAGE_WINDOW_REAP_MARGIN_MS } from "./core/runner/prepare-task.js";
@@ -92,7 +97,10 @@ export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./cor
 export { createFsWriteGatePolicy, type FsWriteGatePolicyOptions } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, } from "./core/task-notification.js";
+export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, } from "./core/task-notification.js";
+export { describeStaticWiring, deriveWiringManifest, deriveAskEffective, resolveDeclaredDurability, resolveAskSeamForm, resolveQuestionSeam, countElicitOptIns, type WiringManifest, type WiringFacts, type WiringLegKind, type AskSeamForm, type AskEffective, type QuestionChannelState, type SeamProvenance, type ParkLaneReason, type ManifestDurability, type StaticWiringDeps, type StaticWiringSpec, } from "./core/wiring-manifest.js";
+export { type StoreDurability } from "./core/checkpoint-store.js";
+export { projectHumanInput, buildHumanInputEvent, type HumanInputSource, type HumanInputFrame, type HumanInputEvent, type HumanInputDelivery, } from "./core/human-input-projection.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, type SemaTaskType, type SemaTaskStatus, type SemaTaskHandle, type ParkedClaimTicket, type TaskAccess, type UnifiedTaskOutput, type TaskRetrievalStatus, type StopSource, type RegisterMonitorInput, type MonitorTimers, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
 export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease } from "./core/mailbox-store.js";
 export { FileMailboxStore, type FileMailboxStoreOptions } from "./stores/file/mailbox-store.js";
@@ -118,7 +126,7 @@ export { parseAutoModeResponse, createAutoModeDecider, type AutoModeVerdict, typ
 export { buildAutoModePrompt, renderAutoModeWindow, renderAutoModeAction, AUTO_MODE_DEFAULTS_SENTINEL, type AutoModeRules, type BuildAutoModePromptOptions, type AutoModeWindowOptions, } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/auto-mode-prompt-assets.js";
 export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, type PermissionRule, type ParsedPermissionRule, type PermissionRuleIssue, type PermissionRuleCaps, type PermissionRulePolicyOptions, } from "./core/permission-rules.js";
-export { formatHookFeedback, runToolGate, type Hooks, type HookToolContext, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
+export { formatHookFeedback, runToolGate, createHookEnvCapabilities, type Hooks, type HookToolContext, type HookEnvCapabilities, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, type NormalizedMemorySpec, type MemorySpecInput, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, type Embedder, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, type UtilityGate, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryNoteType, type StructuredNoteInput, } from "./core/memory.js";
 export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";

package/dist/index.js

@@ -12,7 +12,7 @@ export { createTaskListTools, createMemoryTaskListStore, assertJsonMetadata } fr
 export { assembleCodeTools, CODE_ROLE } from "./scenarios/full-body.js";
 export { capAggregateToolResults, AGGREGATE_TOOL_RESULT_BUDGET_CHARS, DEFAULT_BUDGET_EXEMPT_TOOLS, } from "./core/tool-result-budget.js";
 export { capAggregateMediaBytes, AGGREGATE_MEDIA_BUDGET_BYTES } from "./core/media-byte-cap.js";
-export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, } from "./core/ask-question.js";
+export { createAskUserQuestionTool, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, isQuestionUnavailable, } from "./core/ask-question.js";
 export { createLspTool, gitCheckIgnoreFilter, LSP_OPERATIONS, LSP_FAILURE_BRAND, brandLspFailure, lspFailureOf, SharedAbortScope, settleOnAbort, } from "./core/lsp.js";
 export { buildRequest, parseResult, callHierarchyMethod, pathToUri } from "./core/lsp-protocol.js";
 export { TransportLspSession } from "./core/lsp-session.js";
@@ -44,6 +44,11 @@ export { InMemorySessionPolicyStore, SessionPolicyError, loosenReasons, normaliz
 export { SAFETY_MERGE_CONFORMANCE_CORPUS } from "./core/safety-merge-corpus.js";
 export { SAFETY_AXIS_VOCABULARY } from "./core/safety-axis-vocab.js";
 export { createSessionRulePolicy } from "./core/runner/session-rule-policy.js";
+export { LOCKED_KEY_REGISTRY, resolveLockedKeys } from "./core/locked-config.js";
+export { BUILTIN_COMPLIANCE_DENIES, COMPLIANCE_CAPABILITIES, WEB_FETCH_TOOL_NAME, complianceCallDenial, resolveComplianceDenies, } from "./core/compliance.js";
+export { admitMemoryScopes, foldAdmissionFreeze, } from "./core/memory-admission.js";
+export { assertRetentionCapability, } from "./core/retention.js";
+export { GOVERNANCE_CODES, governanceRetryClass } from "./core/governance-codes.js";
 export { TtlSessionStore } from "./core/session-store.js";
 export { reconcileInterruptedSession, findOrphanToolCalls, } from "./core/session-reconcile.js";
 export { StoredSession, InMemorySessionRepo, InMemorySessionStorage, BaseSessionStorage, leafIdAfterEntry, validateEntriesForImport, StreamingImportValidator, boundedTail, SessionError, isSessionConflict, hasSessionFork, uuidv7, } from "./core/session.js";
@@ -65,7 +70,7 @@ export { HAND_TOOL_EFFECTS, bashReversibilityProbe, BASH_READONLY_DEFAULT_ALLOW,
 export { classifyCompoundReadonlyDetailed, formatOutOfRootReadApprovalOption, } from "./tools/fs/index.js";
 export { resolveBashTimeoutCaps } from "./tools/fs/index.js";
 export { InMemoryToolResultStore, OFFLOAD_TOOL_NAME, DEFAULT_TOOL_RESULT_THRESHOLD_CHARS, assertSafeToolResultRef, } from "./core/tool-result-store.js";
-export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpointVersionOf, CURRENT_CHECKPOINT_VERSION, MAX_SUPPORTED_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, debitLedger, remainingBudgetMicroUsd, remainingTokens, winnerFromOutcome, validatePendingSteer, riskSeverity, buildRiskDescriptor, summarizeCheckpoint, } from "./core/checkpoint-store.js";
+export { InMemoryCheckpointStore, CheckpointError, mintCheckpointToken, checkpointVersionOf, CURRENT_CHECKPOINT_VERSION, MAX_SUPPORTED_CHECKPOINT_VERSION, ORG_ADMISSION_CHECKPOINT_VERSION, RESOURCE_CHECKPOINT_VERSION, TOKEN_CHECKPOINT_VERSION, debitLedger, remainingBudgetMicroUsd, remainingTokens, winnerFromOutcome, validatePendingSteer, readPendingSteerQueue, appendPendingSteer, MAX_PENDING_STEER_CHARS, MAX_PENDING_STEER_ENTRIES, PENDING_STEER_QUEUE_BYTE_BUDGET_BYTES, PENDING_STEER_FROZEN_FIELDS, ACTOR_ASSERTION_FROZEN_FIELDS, MAX_ACTOR_FIELD_CHARS, MAX_STEER_INPUT_ID_CHARS, LEGACY_PENDING_STEER_INPUT_ID, riskSeverity, buildRiskDescriptor, summarizeCheckpoint, } from "./core/checkpoint-store.js";
 export { InMemoryUsageWindowStore, GLOBAL_USAGE_KEY, EMPTY_USAGE_WINDOW_RECORD, chargeUsageRecord, readUsageRecord, usageRetryAfterMs, resolveUsageWindows, } from "./core/usage-window-store.js";
 export { FileUsageWindowStore } from "./stores/file/usage-window-store.js";
 export { ENV_LIFETIME_SUSPEND_MARGIN_MS, USAGE_WINDOW_REAP_MARGIN_MS } from "./core/runner/prepare-task.js";
@@ -79,7 +84,10 @@ export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./cor
 export { createFsWriteGatePolicy } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, SystemInjectionQueue, } from "./core/task-notification.js";
+export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, SystemInjectionQueue, } from "./core/task-notification.js";
+export { describeStaticWiring, deriveWiringManifest, deriveAskEffective, resolveDeclaredDurability, resolveAskSeamForm, resolveQuestionSeam, countElicitOptIns, } from "./core/wiring-manifest.js";
+export {} from "./core/checkpoint-store.js";
+export { projectHumanInput, buildHumanInputEvent, } from "./core/human-input-projection.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
 export { InMemoryMailboxStore } from "./core/mailbox-store.js";
 export { FileMailboxStore } from "./stores/file/mailbox-store.js";
@@ -103,7 +111,7 @@ export { parseAutoModeResponse, createAutoModeDecider, } from "./core/auto-mode.
 export { buildAutoModePrompt, renderAutoModeWindow, renderAutoModeAction, AUTO_MODE_DEFAULTS_SENTINEL, } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/auto-mode-prompt-assets.js";
 export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, } from "./core/permission-rules.js";
-export { formatHookFeedback, runToolGate, } from "./core/hooks.js";
+export { formatHookFeedback, runToolGate, createHookEnvCapabilities, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, } from "./core/memory.js";
 export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, syncMemoryScope, } from "./core/memory-engine/index.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";

package/dist/internal/harness-types.d.ts

@@ -2,7 +2,7 @@ export type { CompactionPreparation, SummarizationClampDryRun } from "../engine/
 export type { InvokedSkillRetention } from "../engine/compaction/utils.js";
 export type { AgentCoreRuntimeDeps } from "../engine/loop/runtime-deps.js";
 export type { AgentMessage, AgentTool, AgentToolResult, AgentToolUpdateCallback, ThinkingLevel, ToolExecutionMode, } from "../engine/loop/types.js";
-export type { AgentHarnessEvent, CompactionSettings, ExecutionEnv, ExecutionErrorCode, FileErrorCode, FileInfo, Result, Session, SessionMetadata, SessionRepo, SessionStorage, SessionTreeEntry, Skill, } from "../engine/harness/types.js";
+export type { AgentHarnessEvent, CompactionSettings, ExecutionEnv, ExecutionErrorCode, FileError, FileErrorCode, FileInfo, Result, Session, SessionMetadata, SessionRepo, SessionStorage, SessionTreeEntry, Skill, } from "../engine/harness/types.js";
 export type { ExecutionEnvExecOptions, ExecResult } from "../engine/harness/types.js";
 export type { SessionWriteOptions, CompactionEntry } from "../engine/harness/types.js";
 export type { ActiveWorktreeSession, WorkspaceState } from "../engine/harness/types.js";

package/dist/internal/llm.d.ts

@@ -1,2 +1,2 @@
-export { createAssistantMessageEventStream, stripEngineMetadata } from "../engine/llm/index.js";
-export type { AnthropicMessagesCompat, OpenAICompletionsCompat, OpenAIResponsesCompat, AssistantMessage, AssistantMessageDiagnostic, AssistantMessageEvent, CompleteSimpleFn, Context, DocumentContent, ImageContent, Message, Model, ResilienceOptions, SimpleStreamOptions, StallTimeouts, StopReason, StreamFn, TextContent, ThinkingContent, Tool, ToolCall, ToolResultMessage, Usage, UserMessage, } from "../engine/llm/index.js";
+export { createAssistantMessageEventStream, snapshotActorAssertion, stripEngineMetadata } from "../engine/llm/index.js";
+export type { ActorAssertion, AnthropicMessagesCompat, OpenAICompletionsCompat, OpenAIResponsesCompat, AssistantMessage, AssistantMessageDiagnostic, AssistantMessageEvent, CompleteSimpleFn, Context, DocumentContent, ImageContent, Message, Model, ResilienceOptions, SimpleStreamOptions, StallTimeouts, StopReason, StreamFn, TextContent, ThinkingContent, Tool, ToolCall, ToolResultMessage, Usage, UserMessage, } from "../engine/llm/index.js";

package/dist/internal/llm.js

@@ -1 +1 @@
-export { createAssistantMessageEventStream, stripEngineMetadata } from "../engine/llm/index.js";
+export { createAssistantMessageEventStream, snapshotActorAssertion, stripEngineMetadata } from "../engine/llm/index.js";