@sema-agent/core 5.57.0 → 5.58.0

package/dist/engine/llm/types.d.ts

@@ -104,7 +104,7 @@ export interface StreamOptions {
      */
     timeoutMs?: number;
     /**
-     * service [405] P0 — true when `maxTokens` on THIS call was DYNAMICALLY SHRUNK by the wall-clock
+     * P0 — true when `maxTokens` on THIS call was DYNAMICALLY SHRUNK by the wall-clock
      * cap (design/130 P1), not statically configured. A provider hitting max_tokens with ONLY
      * reasoning output should then finish as a RECOVERABLE `length` stop (the loop's truncated-output
      * continue picks it up; the next call is cap-exempt via the runtime reasoning observation) instead
@@ -113,7 +113,7 @@ export interface StreamOptions {
      */
     maxTokensDynamic?: boolean;
     /**
-     * Blackboard [477] — the STATIC leg of the [405] dynamicCut family. True = the caller (the agent
+     * the STATIC leg of the dynamicCut family. True = the caller (the agent
      * loop) is prepared to recover a `length` stop, so a provider hitting the STATIC max_tokens with
      * ONLY reasoning output (a budget-ignoring thinking model — e.g. a Qwen gateway that ignores the
      * thinking control plane and eats the whole static budget in one thought) may finish as a
@@ -126,7 +126,7 @@ export interface StreamOptions {
      */
     staticReasoningCutDowngrade?: boolean;
     /**
-     * design/131 (service [404] 拍) — per-task resilience INTENT flags, threaded per call so the
+     * design/131 (拍) — per-task resilience INTENT flags, threaded per call so the
      * resilience decorator stack (degrading / failover / circuit-breaker) can stand aside for THIS
      * task. Intent-only: no decorator topology rides the wire; each layer reads the flag it owns and
      * defaults to today's behavior when absent. See design/131-per-task-resilience-overrides.md.
@@ -206,7 +206,7 @@ export interface ImagesOptions {
 }
 export type ProviderImagesOptions = ImagesOptions & Record<string, unknown>;
 export interface SimpleStreamOptions extends StreamOptions {
-    /** [1076]③a: widened to include the explicit "off" — an off that reaches the wire layer lets the
+    /** widened to include the explicit "off" — an off that reaches the wire layer lets the
      *  brains emit the provider DISABLE key on binary enable formats (default-on Qwen gateways reason
      *  on absence, so absence ≠ off there). Both brains guard: off never enables thinking. */
     reasoning?: ModelThinkingLevel;
@@ -297,7 +297,7 @@ export interface UserMessage {
     content: string | (TextContent | ImageContent)[];
     timestamp: number;
     /**
-     * [c209-C] codex 收口 C1/C2 — EXACT character length of the ENGINE-PREPENDED prefix on this
+     * [c209-C] 收口 C1/C2 — EXACT character length of the ENGINE-PREPENDED prefix on this
      * user-lane message (first-frame listing/`<skills>` reminders + a UserPromptSubmit
      * additionalContext reminder ahead of the objective; the trusted engine-authored head of a resume
      * continuation). Derived views that re-present user messages under a `[user]`/`[User]:` label
@@ -310,7 +310,7 @@ export interface UserMessage {
      */
     enginePrefixChars?: number;
     /**
-     * [c209-C] R4 codex 终判 — the ENGINE-TRUSTED SEGMENTS of this user-lane message, as half-open
+     * [c209-C] R4 终判 — the ENGINE-TRUSTED SEGMENTS of this user-lane message, as half-open
      * `[start, end)` UTF-16 code-unit ranges into the flattened text content (ascending,
      * non-overlapping). Generalizes {@link UserMessage.enginePrefixChars} beyond the head: the resume
      * continuation preserves ISSUE ORDER (parked steer first, wake message second — the public
@@ -334,13 +334,13 @@ export interface UserMessage {
         end: number;
     }>;
     /**
-     * [c209-C] codex 收口 C1/C2 — this ENTIRE message is engine-minted guidance (deadline nudges,
+     * [c209-C] 收口 C1/C2 — this ENTIRE message is engine-minted guidance (deadline nudges,
      * graceful-finalize write-out steers, boundary attachment bundles, final-verification / stop-hook
      * reminders), not user speech. Derived views must not present it under `[user]` authority
      * (auto-mode window: neutral annotation; compaction serialization: skipped). Same additive /
      * old-session-verbatim / never-on-the-wire posture as {@link UserMessage.enginePrefixChars}.
      *
-     * [c209-C] R4 codex 终判 — MUTUALLY EXCLUSIVE with {@link UserMessage.provenance}: a message is
+     * [c209-C] R4 终判 — MUTUALLY EXCLUSIVE with {@link UserMessage.provenance}: a message is
      * either wholly SKIPPABLE (`engineMinted`) or MUST-STAY-VISIBLE (`provenance:"engine-note"`),
      * never both. The exclusion is enforced at runtime (mint clamp in the harness'
      * `createUserMessage`, normalization at the session import gate) and defensively at every
@@ -349,7 +349,7 @@ export interface UserMessage {
      */
     engineMinted?: true;
     /**
-     * [c209-C] R3 codex 收口 — the "visible but not the user" THIRD state. This message is an
+     * [c209-C] R3 收口 — the "visible but not the user" THIRD state. This message is an
      * ENGINE-INJECTED note whose CONTENT the model must read (LSP `<new-diagnostics>` blocks,
      * task-notification frames, TaskStream steering, dynamic memory re-recall, loop recovery
      * guidance), but which is NOT user speech. Two-state contrast with {@link UserMessage.engineMinted}:
@@ -389,7 +389,7 @@ export interface AssistantMessage {
     responseId?: string;
     diagnostics?: AssistantMessageDiagnostic[];
     usage: Usage;
-    /** TB 尸检 T1-5 (codex 1.238 复审 F3): the provider never delivered a usage frame for this message (e.g. a
+    /** TB 尸检 T1-5: the provider never delivered a usage frame for this message (e.g. a
      *  degenerate-repetition cutoff cancelled the stream first) — `usage` above is a zero-synthesized shell.
      *  Consumers must treat the numbers as UNKNOWN, not zero. Absent ⇒ usage is provider-reported. */
     usageMissing?: true;
@@ -429,7 +429,7 @@ export interface AssistantMessage {
      */
     partialFinalized?: true;
     /**
-     * Degenerate-repetition telemetry for THIS call (clay 2026-07-10: counts + detected segment, not just
+     * Degenerate-repetition telemetry for THIS call (2026-07-10: counts + detected segment, not just
      * a boolean). `cut` = the event that cancelled the stream (always paired with the DEGENERATE_MESSAGE
      * errorMessage); `spared` = repetitions that landed in a detection window but were exempted by a
      * 2e1c161 structural allowance (code-line shape / divider run) — deduped per stream by rule+segment.
@@ -441,7 +441,7 @@ export interface AssistantMessage {
         spared?: RepetitionEvent[];
     };
     /**
-     * Blackboard [477]: this `length` stop is a DOWNGRADED reasoning-only STATIC max_tokens hit — the
+     * this `length` stop is a DOWNGRADED reasoning-only STATIC max_tokens hit — the
      * model spent the entire static output budget on thinking (budget-ignoring gateway shape) and the
      * brain, granted `StreamOptions.staticReasoningCutDowngrade`, finished the turn as a recoverable
      * `length` instead of the fail-loud config error. The agent loop counts these per run to enforce
@@ -461,7 +461,7 @@ export interface ToolResultMessage<TDetails = unknown> {
 }
 export type Message = UserMessage | AssistantMessage | ToolResultMessage;
 /**
- * RB-3 (campaign S4 carry): strip the engine-provenance metadata fields from user messages before
+ * RB-3 (stage S4 carry): strip the engine-provenance metadata fields from user messages before
  * serializing a Context to an external wire. The five fields (`enginePrefixChars`/`engineSegments`/
  * `engineMinted`/`provenance`/`actor`, the last per design/171 §5.2) are INTERNAL coordination
  * between the engine's minting side and its consumers (permission classifier, compaction summarizer,
@@ -502,7 +502,7 @@ export interface Tool<TParameters extends TSchema = TSchema> {
 export interface Context {
     systemPrompt?: string;
     /**
-     * Campaign S4 (prompt-assembly §5.4, ADDITIVE): the system prompt as PHYSICAL blocks with
+     * S4 (prompt-assembly §5.4, ADDITIVE): the system prompt as PHYSICAL blocks with
      * per-block cache-span boundaries. Compatibility projection duty (plan M13): when present,
      * `systemPrompt` is ALWAYS also populated with the equivalent joined text — a Brain that only
      * reads `systemPrompt` gets wire-equivalent input (single merged block), never a dropped prompt.

package/dist/engine/loop/agent-loop.d.ts

@@ -33,7 +33,7 @@ export type LoopTerminalReason =
  | "assistant_error"
 /** `shouldStopAfterTurn` requested a clean stop at the turn boundary (mod #16 one-shot). */
  | "stop_requested"
-/** RB-206(形态一续批,黑板 [1870] 归因;CC 220 対位 @400176-400230, `Bxs` @397652-397674 buckets it
+/** RB-206 (CC 220 counterpart @400176-400230, `Bxs` @397652-397674 buckets it
  *  with budget_exhausted/api_error/model_error/turn_setup_failed, explicitly NOT `"completed"`): every
  *  tool call in the turn was dropped as malformed AND the bounded `malformed_tool_use_retry` nudge
  *  budget is used up — the model believes it acted, nothing ran, and there is no more recovery budget
@@ -48,13 +48,13 @@ export type LoopTerminalReason =
  *  区分;调用方若需要"最近是否连续失败"这类更细的语义,需要自行在更高层维护窗口计数,这个 reason 只
  *  承诺"预算耗尽"这一件事。 */
  | "malformed_tool_use_exhausted"
-/** RB-258([1948] RB-206 口径追查的衍生发现;RB-206 的同族对仗):the model kept ending its turn on the
+/** RB-258(RB-206 口径追查的衍生发现;RB-206 的同族对仗):the model kept ending its turn on the
  *  provider's output cap (`length`) with no tool calls, and the bounded truncated-output continue
  *  budget (`recovery.truncatedOutput.maxContinues`, default 3) is used up — every further nudge would
  *  buy another cut-off fragment. Before this reason existed, this case fell through to the generic
  *  no-more-work path and was reported as a plain `"completed"`, indistinguishable from an answer that
  *  actually finished — the same defect RB-206 fixed in the malformed lane, on the shape production
- *  hits MORE often ([1948]: 1/89 real questions reached the precondition).
+ *  hits MORE often (1/89 real questions reached the precondition).
  *
  *  Scope notes (deliberate, mirroring the malformed lane):
  *  - Only the CONFIGURED lane reports it. With `recovery.truncatedOutput` absent (the loop default

package/dist/engine/loop/types.d.ts

@@ -483,7 +483,7 @@ export interface CompactionSummaryMessage {
     tokensBefore: number;
     /** Timestamp may be numeric in memory or string when loaded from older persisted rows. */
     timestamp: number | string;
-    /** RB-398-b① ([2105]): how many transcript messages this summary stands in for — counted at
+    /** RB-398-b①: how many transcript messages this summary stands in for — counted at
      *  render time by `buildSessionContext` (the one place entries become context), so it covers the
      *  cumulative elision across repeated compactions. Drives the wrapper's scale disclosure
      *  (`convertToLlm`); absent (directly constructed messages, older render paths) ⇒ the wrapper is
@@ -535,7 +535,7 @@ export interface AgentToolResult<T> {
     content: (TextContent | ImageContent | DocumentContent)[];
     /** Arbitrary structured details for logs or UI rendering. */
     details: T;
-    /** [1331]③ — mark a RETURNED failure receipt as an error without throwing (keeps structured
+    /** mark a RETURNED failure receipt as an error without throwing (keeps structured
      *  `details` while the wire tool_result carries is_error:true; a non-thrown failure marked
      *  non-error walks the shell's success rendering and can vanish). Omitted = success. */
     isError?: boolean;
@@ -560,10 +560,10 @@ export interface AgentTool<TParameters extends TSchema = TSchema, TDetails = unk
      * Must return an object that matches `TParameters`.
      */
     prepareArguments?: (args: unknown) => Static<TParameters>;
-    /** [1245] — OPTIONAL approval display projection: how this tool's args render for a human
+    /** OPTIONAL approval display projection: how this tool's args render for a human
      *  approval surface (live onAsk dialogs, durable approval inboxes). Pure and cheap; the gate
      *  clamps/serializes the result, strips control characters from every string leaf, and swallows
-     *  throws. **UNTRUSTED + ADVISORY-ONLY** (codex [1245] F1): the projection is authored by the
+     *  throws. **UNTRUSTED + ADVISORY-ONLY**: the projection is authored by the
      *  tool over model-authored args and can misrepresent the executable action — renderers MUST
      *  contextually escape it, and approval surfaces MUST offer the bound raw args alongside
      *  (boundInputHash binds args, never the preview). NEVER adjudication input. Mechanism-neutral:

package/dist/engine/lsp/node-lsp-manager.d.ts

@@ -123,7 +123,7 @@ export declare function languageFor(filePath: string): string | undefined;
  *  enforces it model-visibly; re-exported here so engine-path importers keep working. */
 export { MAX_LSP_FILE_BYTES } from "../../core/lsp.js";
 /**
- * RB-232(黑板 [1937]): the local default {@link LspReadText}, hardened with a stat-first precondition (CC
+ * RB-232: the local default {@link LspReadText}, hardened with a stat-first precondition (CC
  * 2.1.220 validateInput does the same before ever reading — "Path is not a file", pretty220.js ~474700).
  * The stat check is the LOAD-BEARING part, do not "simplify" it away: a plain `readFile` on a FIFO/socket
  * blocks forever on the FIRST read and PINS a libuv threadpool thread (default pool = 4) for the process
@@ -133,7 +133,7 @@ export { MAX_LSP_FILE_BYTES } from "../../core/lsp.js";
  * `env.fileInfo` before any read — this is defense in depth for direct/embedder callers.)
  */
 export declare const defaultLspReadText: LspReadText;
-/** service [377] ask ②: on Windows, npm-global language servers materialize as `.cmd` shims and
+/** ask ②: on Windows, npm-global language servers materialize as `.cmd` shims and
  *  Node 20+ `spawn(cmd, args)` without a shell rejects them (EINVAL, CVE-2024-27980 hardening) —
  *  every DEFAULT_LSP_SERVERS entry would silently degrade to "no LSP". `shell:true` routes through
  *  cmd.exe so PATHEXT/.cmd resolution works. Injection surface: `command`/`args` come from

package/dist/engine/session/import-validate.d.ts

@@ -31,7 +31,7 @@ export declare class StreamingImportValidator {
     };
 }
 /**
- * Validate a verbatim session-entry log for cross-backend IMPORT (2c session-sync, service [266]②). The ARRAY
+ * Validate a verbatim session-entry log for cross-backend IMPORT (2c session-sync). The ARRAY
  * form of {@link StreamingImportValidator} (ONE source of truth — this just drives step()/finish() over the
  * array, kept for `fork`/tests that already hold the whole log). Fail-CLOSED: any violation throws
  * `SessionError("invalid_session")` and nothing is written.

package/dist/engine/session/log-digest.d.ts

@@ -1,6 +1,6 @@
 import type { SessionTreeEntry } from "../harness/types.js";
 /**
- * [1701] session-sync — the SHARED content digest for a session entry log.
+ * session-sync — the SHARED content digest for a session entry log.
  *
  * ## The gap this closes
  * `classifySyncRelationshipByIds` compares only the SET of entry ids. Entry ids are uuidv7, not content

package/dist/engine/session/memory-repo.d.ts

@@ -10,10 +10,10 @@ export declare class InMemorySessionRepo implements SessionRepo<SessionMetadata,
     list(): Promise<SessionMetadata[]>;
     delete(metadata: SessionMetadata): Promise<void>;
     fork(sourceMetadata: SessionMetadata, options: SessionForkOptions): Promise<Session>;
-    /** 2c session-sync ([266]②): the FULL log for export. InMemory holds everything (no F3 floor), so
+    /** 2c session-sync: the FULL log for export. InMemory holds everything (no F3 floor), so
      *  `getEntries()` IS the full oldest-first log with `id`/`parentId` verbatim. */
     exportEntries(sessionId: string): Promise<SessionTreeEntry[]>;
-    /** 2c session-sync ([266]②): import a verbatim log into `sessionId`. The single invariant gate runs first
+    /** 2c session-sync: import a verbatim log into `sessionId`. The single invariant gate runs first
      *  ({@link validateEntriesForImport}, fail-closed); `owner` is a durable multi-tenant concept that the local
      *  in-memory backend has no field for, so it is accepted but unused here. design/171: the operator's
      *  trusted-import flag is forwarded to the gate that persists — see SessionRepo.importEntries. */

package/dist/engine/session/session.d.ts

@@ -29,7 +29,7 @@ export declare class StoredSession<TMetadata extends SessionMetadata = SessionMe
     appendThinkingLevelChange(thinkingLevel: string): Promise<string>;
     appendModelChange(provider: string, modelId: string): Promise<string>;
     /**
-     * Campaign S3 (prompt-assembly §9.2): persist the session's prompt-epoch pin as a first-class
+     * S3 (prompt-assembly §9.2): persist the session's prompt-epoch pin as a first-class
      * typed entry. Written at session start (BEFORE the first conversation entry — the resume path
      * must never see user entries with no pin) and on legacy migration; compactions restate the pin
      * in their own `details.promptEpoch` instead (same-CAS with the new baseline).
@@ -71,7 +71,7 @@ export declare class StoredSession<TMetadata extends SessionMetadata = SessionMe
         entryId?: string;
     } | undefined>;
     /**
-     * design/155 (cli [1580]): persist the settle-time workspace state (tracked cwd + active
+     * design/155: persist the settle-time workspace state (tracked cwd + active
      * EnterWorktree session) as a first-class typed entry. Called best-effort at task settle when the
      * state changed — an append failure degrades to "the next turn starts at the task root", exactly
      * the pre-155 behavior, never fails the run. The same shape gate guards append, read, and the
@@ -115,7 +115,7 @@ export declare class StoredSession<TMetadata extends SessionMetadata = SessionMe
      * `details.announcedListings` restatement; SNAPSHOT semantics: first hit wins). Malformed
      * carriers are skipped (defense in depth behind the import door), never returned.
      * Undefined ⇒ no carrier VISIBLE on this branch — callers fall back to the checkpoint mirror /
-     * transcript probe. Honest bound (codex 1358 F2, RB-33): a bounded-tail backend whose load floor
+     * transcript probe. Honest bound (RB-33): a bounded-tail backend whose load floor
      * cut every carrier (and a rewind cut between the floor and the newest compaction) also returns
      * undefined — the ladder degrades to the lower rungs (worst case a duplicate re-announce, never a
      * loss). A floor-anchor seam (the getEpochAnchor analog) is deliberately deferred until a real
@@ -127,7 +127,7 @@ export declare class StoredSession<TMetadata extends SessionMetadata = SessionMe
         models?: string[];
     } | undefined>;
     /**
-     * Recover the pinned prompt epoch for the ACTIVE branch (campaign S3). Walks the branch from the
+     * Recover the pinned prompt epoch for the ACTIVE branch (stage S3). Walks the branch from the
      * leaf backwards: the nearest `compaction` entry's `details.promptEpoch` restatement wins (the
      * bounded-tail/F3 floor may have cut everything older); else the nearest `prompt_epoch` entry
      * (root pin / legacy migration). Undefined ⇒ pre-epoch session (upgrade-in-place migration path).

package/dist/fixtures/index.d.ts

@@ -1,8 +1,8 @@
 /**
  * `@sema-agent/core/fixtures` — GOLDEN SHAPE fixtures for downstream consumers (server/SDK/cli),
- * the L2 layer of the [1549] anti-drift defense: downstream tests consume THESE shapes instead of
+ * the L2 layer of the anti-drift defense: downstream tests consume THESE shapes instead of
  * hand-building requests/frames, so an upstream shape change breaks a test instead of shipping a
- * silent mismatch (the [1546] "bare req = false-green pins" class).
+ * silent mismatch (the "bare req = false-green pins" class).
  *
  * CONTRACT — shape truth, not value truth:
  *  - Every volatile value is NORMALIZED to an angle-bracket placeholder (`"<issuing-session-id>"`,
@@ -13,14 +13,14 @@
  *    the same normalization, and requires deep equality with the fixture. A shape change upstream
  *    turns THAT pin red first — the fixture can never drift from the engine.
  *  - Additions here are additive API: removing/renaming a fixture key is a downstream-visible
- *    BREAKING change and belongs in the release notes' frame-shape section ([1552] L1.5).
+ *    BREAKING change and belongs in the release notes' frame-shape section.
  */
 import type { AskRequest } from "../core/tool-policy.js";
 /** The normalization placeholders used across all fixtures (downstream may match on the form). */
 export declare const FIXTURE_PLACEHOLDER_RE: RegExp;
 /**
  * AskRequest, HOST form — the shape a live `onAsk` approver receives when the HOST task's own
- * gate raises a permission ask. Key facts downstream must not re-derive by guessing ([1546] MED-1):
+ * gate raises a permission ask. Key facts downstream must not re-derive by guessing:
  *  - `sourceTaskId` is PRESENT on host asks too (always the issuing task's session id) — it is
  *    NOT a subagent discriminator;
  *  - `fromSubagent` / `sourceAgentName` are ABSENT on host asks (design/153 §1: `fromSubagent`

package/dist/index.d.ts

@@ -156,25 +156,26 @@ export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRul
  * and nothing more. Removal is exported without ceremony, because narrowing on a user's behalf is
  * allowed and widening is not.
  */
-export { parseAllowRuleText, formatAllowRuleText, ruleAdmitsCommand, findAdmittingRule, suggestRulesForCommand, scopeCoversCwd, pathWithinRoot, isRuleLive, BARE_INTERPRETER_NAMES, MAX_RULE_TEXT_CHARS, type PersistedAllowRule, type RuleTombstone, type RuleScope, type RuleDot, type RuleAdd, type RuleAddOrigin, type RuleSuggestion, type RuleReject, type RuleRejectCode, type ParsedAllowRule, type PersistedRuleTool, type PersistedRuleMatch, } from "./core/permission-rule-model.js";
+export { parseAllowRuleText, formatAllowRuleText, ruleAdmitsCommand, findAdmittingRule, suggestRulesForCommand, scopeCoversCwd, pathWithinRoot, isRuleLive, BARE_INTERPRETER_NAMES, MAX_RULE_TEXT_CHARS, type PersistedAllowRule, type RuleTombstone, type RuleScope, type RuleDot, type RuleAdd, type RuleAddOrigin, type RuleOffer, type SegmentRuleSuggestion, type SegmentCoverage, type RuleReject, type RuleRejectCode, type ParsedAllowRule, type PersistedRuleTool, type PersistedRuleMatch, } from "./core/permission-rule-model.js";
 export { removePersistedRule, applyTombstones, sameScope, InMemoryPermissionRuleStore, EMPTY_RULE_STORE, type PermissionRuleStore, type PermissionRuleStoreProvider, type StoredAllowRules, type RemoveResult, type PutResult, joinRuleStates, screenRuleSyncState, collectBelowFrontier, ruleSyncVector, joinFrontiers, dotAtOrBelowFrontier, sameRuleOwner, type RuleSyncState, type RuleSyncFrontier, type RuleSyncDrop, type RuleSyncLandingReport, type RuleOwner, type QuarantinedRuleAdd, PERMISSION_RULE_WRITER, writerOf, foldDelta, addDotsOf, assertDeleteDeltaCarriesNoAdd, assertRedemptionNotQuarantined, type PermissionRuleWriter, type WritablePermissionRuleStore, type RuleWriteDelta, type RuleAddDelta, type RuleDeleteDelta, type RuleSyncJoinDelta, type RawRuleSyncState, type RedemptionAuthorization, } from "./core/permission-rule-store.js";
 export { syncPermissionRules, parseRuleSyncResponse, PERMISSION_RULE_SYNC_PATH, LOCAL_OWNER_UNSYNCABLE_CODE, type PermissionRuleSyncTransport, type PermissionRuleSyncResult, type RuleSyncRequestBody, type RuleSyncResponseBody, } from "./core/permission-rule-sync.js";
 export { createOrgRuleOverlay, orgRuleVerdictFor, effectivePermissionRules, orgRuleStatePersistenceOf, ORG_UNAVAILABLE_DECISION_REASON, ORG_RULE_DECISION_REASON, ORG_ADJUDICATION_TIMEOUT_MS, type OrgPermissionRule, type OrgRuleSnapshot, type OrgRuleSnapshotProvider, type OrgRuleStatePersistence, type PersistedOrgRuleState, type OrgRuleOverlay, type OrgOverlayResolution, type OrgOverlayStatus, type EffectivePermissionRule, } from "./core/permission-rule-org.js";
 export { RULE_SYNC_DROP_CODES, type RuleSyncDropReason, type RuleQuarantineReason } from "./core/governance-codes.js";
-export { prepareCardApproval, confirmRuleApproval, type ConfirmResult, type ConfirmRefusalReason, precheckEditedRuleText, type EditedRuleTextPrecheck, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, type RuleTicket, type RuleCandidate, type RuleApprovalKind, type RuleApprovalRecord, type RuleApprovalRecordStore, type RuleConsentDeps, type RedeemResult, type CcImportLayer, type ImportedSettingsLayer, type ImportPreview, type ImportResult, } from "./core/permission-rule-consent.js";
+export { prepareCardApproval, confirmRuleApproval, type ConfirmResult, type ConfirmRefusalReason, precheckEditedRuleText, type EditedRuleTextPrecheck, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, ruleOffersOfRecord, type RuleTicket, type RuleCandidate, type RuleApprovalKind, type RuleApprovalRecord, type RuleApprovalRecordStore, type RuleOffer2, type StaleRuleApprovalRecord, type RuleConsentDeps, type RedeemResult, type RedeemedBatchMember, type CcImportLayer, type ImportedSettingsLayer, type ImportPreview, } from "./core/permission-rule-consent.js";
 export { FilePermissionRuleStoreProvider } from "./stores/file/permission-rule-store.js";
 export { adoptFilePermissionRuleStore, type AdoptFileRuleStoreResult } from "./stores/file/permission-rule-adopt.js";
 export { AdoptionError, assertAdoptionBootGate, readRootAdoptionFile, writeRootAdoptionFile, ROOT_ADOPTION_FILE, type AdoptionErrorCode, type AdoptionSource, type AdoptionReport, type AdoptionReceipt, type AdoptionLegReport, type AffectedDeploymentConfig, type RootAdoptionFile, } from "./stores/file/adoption/marker.js";
 export { adoptLocalDataRoot, ackAdoptionConfig, witnessAdoptionConfig, listAdoptionQuarantine, readAdoptionStatus, type AdoptionStatus, type AdoptLocalDataRootOptions, type AdoptLocalDataRootResult, type AdoptionCarriageLeg, type AdoptionCarriageLegContext, type AdoptionConfigWitnessReceipt, } from "./stores/file/adoption/adopt.js";
-export { formatHookFeedback, runToolGate, createHookEnvCapabilities, createPreToolUseConstraintPolicy, type PersistedRuleHit, type PersistedRuleUnreadable, type PersistedRuleAnswer, normalizePersistedRuleHit, type Hooks, type HookToolContext, type HookInvocationIdentity, type UserPromptSubmitContext, type PostToolBatchContext, type HookEnvCapabilities, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
+export { formatHookFeedback, runToolGate, createHookEnvCapabilities, createPreToolUseConstraintPolicy, type PersistedRuleHit, type PersistedRuleHitRule, type PersistedRuleUnreadable, type PersistedRuleCoverage, type PersistedRuleAnswer, normalizePersistedRuleHit, type Hooks, type HookToolContext, type HookInvocationIdentity, type UserPromptSubmitContext, type PostToolBatchContext, type HookEnvCapabilities, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, type NormalizedMemorySpec, type MemorySpecInput, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, type Embedder, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, type UtilityGate, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryNoteType, type StructuredNoteInput, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, ambiguousOriginRepresentation, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationRefusedNotice, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, ambiguousOriginRepresentation, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintLlmConsolidationPlan, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, type ConsolidationDistillFn, type ConsolidationDriveCycleRow, type ConsolidationDriveEngine, type ConsolidationDriveResult, type ConsolidationFoldState, type DistillerCandidate, type DistillerChatAnswer, type DistillerChatFn, type DistillerChatRequest, type FuseSchedule, type LlmConsolidationPlan, type LlmConsolidationPlanProduct, type LlmDistillerContract, type MintLlmConsolidationPlanResult, type PlanParseRepairs, type SanitizedLlmGroups, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, type ConsolidationDriverEngine, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type ConsolidationRunStopReason, type RunMemoryConsolidationOptions, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
 export { SHARED_MEMORY_READ_CAP_BYTES, SHARED_MEMORY_LIST_PAGE_SIZE, SharedMemoryStoreError, type SharedMemoryStoreProvider, type SharedMemoryStoreReader, type SharedMemoryPagedList, type SharedMemoryStoreInfo, type SharedMemoryDocumentEntry, type SharedMemorySnapshot, type SharedMemoryRequestContext, type MemoryListDetails, type MemoryReadDetails, } from "./core/shared-memory/types.js";
 export { sharedMemoryStoreContract, type SharedMemoryFixture, type SharedMemoryStoreContractHooks, } from "./core/shared-memory/contract.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";
 export { encodeSurfacedKey, buildManifestText, validateSelectedIds, composeSelectiveBody, formatMemoryAge, resolveLinkedIds, RECALL_CAVEAT, DEFAULT_MAX_SELECTED, DEFAULT_MAX_LINKED, type MemorySelector, type MemorySelectRequest, type SelectiveRecallOptions, type SelectiveRecallResult, type LayeredRecallOptions, type LayeredRecallResult, type ScopedNoteHeader, type ScopedNoteRecord, } from "./core/memory-recall.js";
 export { runMemoryConsolidation, CONSOLIDATION_SYSTEM_PROMPT, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATION_SEARCH_LIMIT, DEFAULT_CONSOLIDATION_MAX_NOTES, DEFAULT_CONSOLIDATION_TIMEOUT_SEC, normalizeForExactMatch, type ConsolidationParams, type ConsolidationStats, type ConsolidationNote, type ConsolidationLLM, } from "./core/runner/memory-consolidation.js";
 export { consolidateScope, advanceCursorAfterInline, type ConsolidateScopeDeps, type ConsolidateScopeOptions, } from "./core/consolidate-scope.js";
+export { resolveMemoryConsolidationDriver, type MemoryConsolidationDriverDeps, } from "./core/runner/memory-consolidation-driver.js";
 export { DEFAULT_COMPACTION_INSTRUCTIONS } from "./core/auto-compaction.js";
 export { DEFAULT_SYSTEM_PROMPT, CODE_AGENT_PROMPT, SUBAGENT_PROMPT, CODE_SYSTEM_PROMPT, MEMORY_GUIDANCE, MEMORY_SAFETY, MEMORY_HYGIENE, NO_PERSISTENT_MEMORY_NOTICE, OUTPUT_EFFICIENCY, CYBER_RISK, HARNESS_SECTION_ANCHOR, URL_SAFETY, SUMMARIZE_TOOL_RESULTS, EXECUTION_ENVIRONMENT, EXECUTION_ENVIRONMENT_OPEN_READS, harnessContext, buildEnvironmentContext, buildGitSnapshot, buildScratchpadSection, GIT_STATUS_MAX_CHARS, formatLocalDate, type EnvironmentFacts, defaultPromptProvider, composeSystemPrompt, composeConstitution, constitutionBlocks, type PromptBlock, analyzePromptCacheFriendliness, assertPromptCacheFriendly, type PromptProvider, type StablePromptContext, type PromptCacheReport, type PromptTextDeclaration, } from "./prompts/default.js";
 export { SUPERVISOR_PROMPT, ORCHESTRATION_GUIDANCE, ORCHESTRATION_AWARENESS, GOAL_COMPLETION_GUIDANCE } from "./prompts/supervisor.js";

package/dist/index.js

@@ -123,20 +123,21 @@ export { removePersistedRule, applyTombstones, sameScope, InMemoryPermissionRule
 export { syncPermissionRules, parseRuleSyncResponse, PERMISSION_RULE_SYNC_PATH, LOCAL_OWNER_UNSYNCABLE_CODE, } from "./core/permission-rule-sync.js";
 export { createOrgRuleOverlay, orgRuleVerdictFor, effectivePermissionRules, orgRuleStatePersistenceOf, ORG_UNAVAILABLE_DECISION_REASON, ORG_RULE_DECISION_REASON, ORG_ADJUDICATION_TIMEOUT_MS, } from "./core/permission-rule-org.js";
 export { RULE_SYNC_DROP_CODES } from "./core/governance-codes.js";
-export { prepareCardApproval, confirmRuleApproval, precheckEditedRuleText, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, } from "./core/permission-rule-consent.js";
+export { prepareCardApproval, confirmRuleApproval, precheckEditedRuleText, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, ruleOffersOfRecord, } from "./core/permission-rule-consent.js";
 export { FilePermissionRuleStoreProvider } from "./stores/file/permission-rule-store.js";
 export { adoptFilePermissionRuleStore } from "./stores/file/permission-rule-adopt.js";
 export { AdoptionError, assertAdoptionBootGate, readRootAdoptionFile, writeRootAdoptionFile, ROOT_ADOPTION_FILE, } from "./stores/file/adoption/marker.js";
 export { adoptLocalDataRoot, ackAdoptionConfig, witnessAdoptionConfig, listAdoptionQuarantine, readAdoptionStatus, } from "./stores/file/adoption/adopt.js";
 export { formatHookFeedback, runToolGate, createHookEnvCapabilities, createPreToolUseConstraintPolicy, normalizePersistedRuleHit, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, ambiguousOriginRepresentation, committedDistilledOf, distilledEquals, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationRefusedNotice, isInstructionEntry, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, readV2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, erasureSelectHash, computeMemoryBundleHash, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, syncMemoryScope, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, ambiguousOriginRepresentation, committedDistilledOf, distilledEquals, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintLlmConsolidationPlan, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, isInstructionEntry, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, readV2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, erasureSelectHash, computeMemoryBundleHash, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, migrateScope, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, syncMemoryScope, } from "./core/memory-engine/index.js";
 export { SHARED_MEMORY_READ_CAP_BYTES, SHARED_MEMORY_LIST_PAGE_SIZE, SharedMemoryStoreError, } from "./core/shared-memory/types.js";
 export { sharedMemoryStoreContract, } from "./core/shared-memory/contract.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";
 export { encodeSurfacedKey, buildManifestText, validateSelectedIds, composeSelectiveBody, formatMemoryAge, resolveLinkedIds, RECALL_CAVEAT, DEFAULT_MAX_SELECTED, DEFAULT_MAX_LINKED, } from "./core/memory-recall.js";
 export { runMemoryConsolidation, CONSOLIDATION_SYSTEM_PROMPT, DEFAULT_CONSOLIDATION_BAND, DEFAULT_CONSOLIDATION_SEARCH_LIMIT, DEFAULT_CONSOLIDATION_MAX_NOTES, DEFAULT_CONSOLIDATION_TIMEOUT_SEC, normalizeForExactMatch, } from "./core/runner/memory-consolidation.js";
 export { consolidateScope, advanceCursorAfterInline, } from "./core/consolidate-scope.js";
+export { resolveMemoryConsolidationDriver, } from "./core/runner/memory-consolidation-driver.js";
 export { DEFAULT_COMPACTION_INSTRUCTIONS } from "./core/auto-compaction.js";
 export { DEFAULT_SYSTEM_PROMPT, CODE_AGENT_PROMPT, SUBAGENT_PROMPT, CODE_SYSTEM_PROMPT, MEMORY_GUIDANCE, MEMORY_SAFETY, MEMORY_HYGIENE, NO_PERSISTENT_MEMORY_NOTICE, OUTPUT_EFFICIENCY, CYBER_RISK, HARNESS_SECTION_ANCHOR, URL_SAFETY, SUMMARIZE_TOOL_RESULTS, EXECUTION_ENVIRONMENT, EXECUTION_ENVIRONMENT_OPEN_READS, harnessContext, buildEnvironmentContext, buildGitSnapshot, buildScratchpadSection, GIT_STATUS_MAX_CHARS, formatLocalDate, defaultPromptProvider, composeSystemPrompt, composeConstitution, constitutionBlocks, analyzePromptCacheFriendliness, assertPromptCacheFriendly, } from "./prompts/default.js";
 export { SUPERVISOR_PROMPT, ORCHESTRATION_GUIDANCE, ORCHESTRATION_AWARENESS, GOAL_COMPLETION_GUIDANCE } from "./prompts/supervisor.js";

package/dist/orchestration/goal.d.ts

@@ -1,7 +1,7 @@
 /**
  * design/96 §C (S2) — **Goal 模式**:LLM 自报完成 + core 校验续跑(CC goal 对标:目标 + 完成判定 + 续跑)。
  * `runGoal` 是 `runRepairLoop`/`verifyCompleted` 的 SIBLING —— thin composition over `runner.runTask`,零
- * Runner core 改动。详 `design/96-references/GOAL-IMPLEMENTER-SPEC.md`(v3,codex r1+r2 异源证伪式对照收敛)。
+ * Runner core 改动。详 `design/96-references/GOAL-IMPLEMENTER-SPEC.md`(v3+r2 异源证伪式对照收敛)。
  *
  * 🔴 **完成判定双闸(reward-hack 红线)**:① LLM 自报完成 = 调内置 `declare_done` 工具(或 `submit_output`,有
  * outputSchema 时)= **机器信号**,非泛化 `completed`;② core `doneCheck`(机械/oracle 校验)。**AND**:仅二者

package/dist/orchestration/run-spec.d.ts

@@ -3,7 +3,7 @@
  * 议题#1:不组合 runGoal —— doneCheck 只在模型自报后跑不适合外部强制,且 mechanical goal 终态自己发射
  * TaskOutcome,组合 = 同 taskSignature 双发射,违反 design/73 红线③)。
  *
- * 装配五步(全部**组合而非覆盖**,codex-B1=fable-M4):
+ * 装配五步(全部**组合而非覆盖**=fable-M4):
  *  1. preflight:frozenPaths 校验+字节快照;亲跑三值 oracle;requireRedStart(默认 true)⇒ 必须 red
  *     (green→`spec.not_red`、error→`spec.oracle_error`,均 fail-loud);捕获 baseline 计数。
  *  2. frozen deny policy 经 {@link combinePolicies} 合入部署基线(deny 短路不可被顶);绝不裸赋顶掉

package/dist/orchestration/run-workflow-tool.d.ts

@@ -48,11 +48,11 @@ export interface WorkflowCompletionNotifier {
         summary: string;
         result?: string;
         usage?: unknown;
-        /** [1630]-sweep A-①: the diagnosis route (per-agent rows / journal locator / resumeFromRunId guidance).
+        /** The diagnosis route (per-agent rows / journal locator / resumeFromRunId guidance).
          *  Added 1.353 on the payload but silently dropped at this hand-written subset seam until 1.404 —
          *  keep this interface in lockstep with the payload fields the settle legs mint. */
         diagnostics?: string;
-        /** P1-3(黑板 [1920]/[1921]/[1924]/[1925]) — see {@link "../core/task-notification.js".TaskNotificationPayload.completionId}.
+        /** See {@link "../core/task-notification.js".TaskNotificationPayload.completionId}.
          *  This CROSS-REPLICA seam is exactly one of the read faces the cross-channel correlation contract
          *  promises the same value on — added here in the same car specifically so this interface does not
          *  repeat the diagnostics field's own drift history (the comment right above this one). */
@@ -133,7 +133,7 @@ export interface RunWorkflowToolDeps {
     scriptRunner: WorkflowScriptRunner;
     /** Deployment-trusted governance every spawned agent inherits (design/98 §2.5). */
     governanceBaseline: WorkflowGovernanceBaseline;
-    /** codex F6 (tool-face round 5): the HOST task's tool-face controls (prepare-time snapshot) — a
+    /** (tool-face round 5): the HOST task's tool-face controls (prepare-time snapshot) — a
      *  scenario roster must survive the workflow delegation path exactly like the Agent path. Merged
      *  (union — tighten-only) into the baseline base for every child spec this workflow spawns. */
     parentExcludeTools?: readonly string[];
@@ -142,7 +142,7 @@ export interface RunWorkflowToolDeps {
      *  declared for the tree must survive this direct-mount lane exactly like the deferral it exempts
      *  from. Union (widen-the-exemption never tightens the child beyond the parent's own face). */
     parentAlwaysLoadTools?: readonly string[];
-    /** design/277 (codex r1 F1): the HOST task's model-gate restore selector
+    /** design/277: the HOST task's model-gate restore selector
      *  ({@link import("../core/types.js").TaskSpec.restoreGatedTools}, prepare-time frozen snapshot) —
      *  the workflow lane is a delegation lane too, so the selector inherits here exactly like the
      *  three tool-face controls above (union with the baseline's own; `true` on either side wins).
@@ -166,7 +166,7 @@ export interface RunWorkflowToolDeps {
     /** design/97 CORE-9 (Part A) — optional LOAD-BEARING resume journal: records each agent result so a
      *  `resumeFromRunId` re-run replays the unchanged prefix (durable cross-replica resume). Opt-in. */
     journalStore?: WorkflowJournalStore;
-    /** design/149 ([1422]③ 裁 a): the process-level BackgroundChildEvent sink — workflow-spawned agents
+    /** design/149: the process-level BackgroundChildEvent sink — workflow-spawned agents
      *  mint synthetic `wa*` rows (spawn/tick/terminal) on the SAME observer bg subagents use
      *  (RunnerDeps.onBackgroundChildEvent), immune to any run-leg forwarding freeze. Opt-in. */
     onBackgroundChildEvent?: (event: import("../core/types.js").BackgroundChildEvent) => void;
@@ -180,7 +180,7 @@ export interface RunWorkflowToolDeps {
     notifier?: WorkflowCompletionNotifier;
     /** The originating session id, threaded into every completion notify. */
     originatingSessionId?: string;
-    /** δ 批 codex D-1 — the ROOT host session of the delegation tree (prepare-task passes
+    /** The ROOT host session of the delegation tree (prepare-task passes
      *  `internals?.rootSessionId ?? sessionId` per task). The AUTO-MOUNTED tool's execute ctx is the
      *  harness-native one (no internals enrichment — that wrapper covers spec.tools only), so the
      *  root MUST ride deps; `ctx.rootSessionId` stays first for a deployment-composed mount that
@@ -209,7 +209,7 @@ export interface RunWorkflowToolDeps {
     /** The originating task id + principal, threaded to the notifier. */
     sourceTaskId?: string;
     principal?: string;
-    /** 黑板 [1909]⑧/[1910]/[1911] — mirrors {@link "../core/types.js".TaskSpec.oneShot}: this submission has
+    /** mirrors {@link "../core/types.js".TaskSpec.oneShot}: this submission has
      *  no later turn for an async notification to land in. Branches the launch receipt's `note` guidance
      *  (see {@link createRunWorkflowTool}'s `note` composition) toward an active block-wait instead of
      *  "end your turn and wait" — the latter is actively wrong for a one-shot caller. */
@@ -246,14 +246,14 @@ export interface RunWorkflowToolDeps {
      *  `ToolExecuteContext.interactiveTools` seat — without it a headless-clamped host's workflow
      *  children could re-mount the interactive tool the host run disabled. */
     parentInteractiveTools?: false;
-    /** [1238](A) — call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
+    /** Call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
      *  fold chain produced no model inherits the parent's full object (baseUrl/key routing included),
      *  mirroring the subagent lane's ctx.model semantics. */
     parentModel?: () => import("../internal/llm.js").Model | undefined;
-    /** [1258] v2 — the HOST task's per-model auth hook ([893]④a): the CREDENTIAL half of model
+    /** The HOST task's per-model auth hook: the CREDENTIAL half of model
      *  inheritance. The Model object fixed the URL routing but the child brain still authenticated
-     *  with the boot env token (clay rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane
-     *  has inherited this hook since [893]④a; the workflow lane never did — the governance whitelist
+     *  with the boot env token (rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane
+     *  has inherited this hook since; the workflow lane never did — the governance whitelist
      *  rightly blocks SCRIPTS from setting it, but host inheritance is a different lane. */
     parentGetApiKeyAndHeaders?: import("../core/types.js").TaskSpec["getApiKeyAndHeaders"];
     /** backlog #342 — the HOST task's frozen effective approver (`spec.onAsk ?? deps.onAsk`, the exact
@@ -323,7 +323,7 @@ export interface RunWorkflowToolDeps {
  * mounts it under the same gate). Returns a structured error (not a throw) for an LLM-correctable problem
  * (oversized / malformed-meta / nesting), so the model can fix and retry.
  *
- * Async since codex F3: the card's named-workflow roster is derived from the SAME sources the execute path
+ * Async since: the card's named-workflow roster is derived from the SAME sources the execute path
  * resolves against (built-ins probed through `resolveName` shadowing + awaited `list()`), so the card can
  * never advertise a workflow the call would resolve differently.
  */

package/dist/orchestration/workflow-governance.d.ts

@@ -2,7 +2,7 @@
  * design/98 §2.5 / §E.2 (S8b, security core) — the DEFAULT-DENY governance for a sub-agent an LLM-authored
  * workflow script spawns. The child spec is BUILT (complete-by-construction) from the deployment's trusted
  * {@link WorkflowGovernanceBaseline} + a strict WHITELIST of safe work-fields the script may set — NEVER by
- * stripping a denylist off the untrusted spec (codex BLOCKER2: a missed control-plane field would leak).
+ * stripping a denylist off the untrusted spec (a missed control-plane field would leak).
  *
  * The script's spec is UNTRUSTED. Only {@link WHITELIST_KEYS} are ever read from it; every other field
  * (toolPolicy / onAsk / hooks / principal / tools / mcp / skills / lspManager / checkpointStore /
@@ -15,9 +15,9 @@
  * host-ctx bindings the engine writes onto the baseline/child, never a read of anything the script wrote:
  * a script-authored `onAsk` (or any other control-plane key) keeps being stripped + announced. The model is
  * chosen by NAME ONLY (resolved against an allowlist to a deploy-configured `Model` — the script never sees a
- * `Model` object, which carries `baseUrl`/`headers` = an exfil surface, codex v3 BLOCKER). Resource limits
+ * `Model` object, which carries `baseUrl`/`headers` = an exfil surface). Resource limits
  * are CLAMPED to the baseline + workflow ceilings (`tightenTaskSpec` only covers the safety knobs, not
- * cost/token caps — codex Q4).
+ * cost/token caps).
  */
 import type { Model } from "../internal/llm.js";
 import type { EngineNotice, ImageInput, TaskSpec, ThinkingLevel, WorkflowGovernanceBaseline } from "../core/types.js";
@@ -31,7 +31,7 @@ export declare class WorkflowModelNotAllowedError extends Error {
 }
 /**
  * The SAFE fields an LLM-authored workflow script may set per sub-agent — the WORK, never the control plane.
- * `model` is a NAME (string), NOT a `ModelRef`/`Model` object (codex v3 BLOCKER: a `Model` carries
+ * `model` is a NAME (string), NOT a `ModelRef`/`Model` object (a `Model` carries
  * `baseUrl`/`headers`/`extraBody` = endpoint + auth-header injection). No `modelRole`/`roles` (a `roles.select`
  * conditional selector is its own vector). The engine resolves `modelName` against the allowlist.
  */

package/dist/orchestration/workflow-observe.d.ts

@@ -1,7 +1,7 @@
 import type { WorkflowRunStore, WorkflowRunSummary } from "../core/workflow-run-store.js";
 import type { WorkflowEvent, WorkflowItemStatus, WorkflowRun, WorkflowRunStatus } from "./workflow.js";
 /** design/97 S1c: mark a run RUNNING (called by `runWorkflow` before it emits `run_start`).
- *  γ 批 B-3 (BREAKING): carries the run's SCOPE — {@link subscribeWorkflow} gates on it. */
+ *  B-3 (BREAKING): carries the run's SCOPE — {@link subscribeWorkflow} gates on it. */
 export declare function markWorkflowActive(runId: string, scope: string): void;
 /** T2A-9 (2026-07-05 soak): is this runId currently ACTIVE in-process? Used by `startWorkflow` to reject an
  *  explicit duplicate `opts.runId` up front — two runs sharing one observation channel let the first finisher

package/dist/orchestration/workflow-script-runner.d.ts

@@ -35,7 +35,7 @@ export declare function selfOrchestrationFailClosedReason(spec: TaskSpec, deps:
  * ({@link import("./dev-vm-script-runner.js").devWorkflowScriptRunner}, S8b) that is explicitly NOT a
  * security boundary, plus a conformance contract a hard runner must pass.
  *
- * 🔴 **Membrane = STRUCTURAL constraint, not a behavioral promise (codex v3/v4 BLOCKER).** The seam's
+ * 🔴 **Membrane = STRUCTURAL constraint, not a behavioral promise.** The seam's
  * `run()` accepts ONLY {@link WorkflowPrimitives} — a flat, sterile record of bound callbacks + a budget
  * DATA snapshot. It does NOT accept a `WorkflowRunContext` (a host object whose prototype chain the script
  * could walk via `ctx.constructor.constructor("return process")()` to escape). The engine extracts the bound