@sema-agent/core 7.0.0 → 7.0.2

package/dist/core/types.d.ts

@@ -934,8 +934,14 @@ export interface ToolExecuteContext {
      * opted-out session captures nothing, whatever its chosen AgentDefinition says — the opt-out is
      * a floor no selection loosens (the `memoryPersistenceCapable:false` floor's exact law, on the
      * privacy axis). Trusted Runner-filled seat, never a model/tool argument.
+     *
+     * DUAL FORM (#511 件2): on a deployment whose capture record store is synchronous (the default
+     * file trio) this is a plain boolean, byte-identical to before; a Promise-form
+     * {@link RunnerDeps.memoryCaptureRecordStore} makes the live read answer a `Promise<boolean>`.
+     * Consumers must `await` (identity on the boolean arm) — a bare `=== true` on the Promise arm
+     * would coin `false`, the exact un-floored escape this seat closes.
      */
-    memoryCaptureOptedOut?: boolean;
+    memoryCaptureOptedOut?: boolean | Promise<boolean>;
     /**
      * design/383 §2.5 (rescan post-6.0.0-RC) — the floor seat's THIRD state: TRUE ⇔ the spawning
      * session's capture opt-out state is INDETERMINATE at the moment a delegation tool reads this
@@ -947,8 +953,10 @@ export interface ToolExecuteContext {
      * irreversible record is ever minted off an unreadable state); a readable-and-clean answer
      * proceeds clean. Never TRUE beside {@link memoryCaptureOptedOut} — a known opt-out is
      * determinate. Trusted Runner-filled seat, never a model/tool argument.
+     * Dual form like its twin (#511 件2): `boolean` over a sync store, `Promise<boolean>` over a
+     * Promise-form store — consumers `await`.
      */
-    memoryCaptureIndeterminate?: boolean;
+    memoryCaptureIndeterminate?: boolean | Promise<boolean>;
     /** design/383 §2.5 — the spawning session's write-plane control dir (the coordinate its capture
      *  record is keyed under), forwarded beside the floor bit so a cross-plane child's record-query
      *  leg reads the PARENT's carrier, not its own plane's. Trusted Runner-filled seat. */
@@ -4646,6 +4654,31 @@ export type TaskEvent = ({
      *  nor an agent-type — the child then keeps its taskId (NOT the raw objective, which could leak a delegated
      *  secret to a progress-scoped consumer — dual-review Q2). Sanitized (control-char-stripped, length-capped). */
     name?: string;
+    /**
+     * The model this sub-run was PREPARED with — the resolved id, read off the leg's prepared model
+     * at the mint, so it is the same value `TaskResult.model` and the `task.start` trace frame carry.
+     * (`task.end` reports the run's totals and has never named a model; there is nothing to join to
+     * there.)
+     *
+     * Why it rides the live lane at all: a delegation may name a tier word (`"sonnet"`), an agent
+     * definition's model, or NOTHING (inherit the caller's current model, or fall to the `subagent`
+     * role) — every one of those resolves somewhere the consumer cannot see, so a shell badging a
+     * running child previously had only the REQUESTED word (or nothing) to render, which is a
+     * different claim from what the child runs on. This is the resolved answer, not the request.
+     *
+     * PREPARED, deliberately, and NOT "whatever is serving this turn" — stated in the first sentence
+     * because the difference is observable. A mid-run DEGRADE switch (`spec.limits.degrade`) or a
+     * gateway re-route moves the serving model without rewriting this field, exactly as
+     * `TaskResult.model` behaves; the switch is announced on its own channel (`TaskResult.degraded`),
+     * and the per-call served id lives on the brain-call telemetry. One name, one meaning, across the
+     * three faces that use it — at the cost of being the leg's declared model rather than a live one.
+     *
+     * Present on every tick this build mints (the frame family is subagent-only by construction, so
+     * there is no lane where a leg has no prepared model). Declared optional for the ordinary reason:
+     * a consumer folding frames from a pre-key producer must keep compiling, and absence there means
+     * "this producer did not state it", never "no model".
+     */
+    model?: string;
     /** The child's most recent tool intent as one human line ("Bash npm test",
      *  "Edit src/x.ts") — the SAME source/value as the registry sink tick's `currentAction` (residual
      *  observability, lane B), attached to the FORWARDED frame because every client wire projects this
@@ -5246,6 +5279,40 @@ export interface BackgroundChildEvent {
      *  waiting for spawn-frame forwarding; `name` stays the design/99 DISPLAY label (description-backed)
      *  and was never a type field. */
     agentType?: string;
+    /**
+     * spawn + tick: the model the ROW runs on — the resolved `ModelRef` the spawner selected for this
+     * child (a per-call `model`, an agent definition's, or the caller's own current model, inherited).
+     * It answers with the SERVED catalog model id wherever that is knowable, because this value sits
+     * beside the child's own `task_progress.model` (the leg's prepared id) and a consumer joins the
+     * two: a row saying "sonnet" next to ticks naming the catalog id it routed to is indistinguishable
+     * from two different children. A `Model` object carries its id — and a per-call word that passed
+     * the spawn gate arrives as exactly that resolved object, so for it the row and the ticks are one
+     * value by construction. A definition/tool-level STRING ref resolves through the catalog in force
+     * at the spawn judgement; the child's own prepare re-resolves such a ref against the runner's live
+     * table, so for those refs alone a catalog hot-swapped between the two reads can lag the row one
+     * generation behind the ticks. The DISPLAY rule survives only as the FALLBACK, for a string the
+     * judgement-time catalog cannot resolve (a CC tier alias then shows its sema tier, never the alias
+     * verbatim). It rides ticks as well as spawn for the same reason
+     * {@link agentType} does: a consumer that only forwards ticks must not have to wait for spawn-frame
+     * forwarding to fill its row. Like `agentType` it is the ROW's own fact and is NEVER copied off a
+     * forwarded frame — a nested descendant's `task_progress` names ITS model, not this row's.
+     *
+     * ABSENT is a fact, not a gap, and there are exactly three ways to get there:
+     *  · the delegation named no model anywhere in the chain, so the child runs on the `subagent` ROLE
+     *    and its concrete id is only decided at the child's own prepare;
+     *  · the RETAIN-LEDGER wake lane (a `SendMessage` resume of a completed child), whose frames are
+     *    projected from an `AccessibleTaskRow` — and that row has no model column, so this lane has
+     *    nothing to state and will not invent one. Stated precisely because the sibling wake lane does
+     *    NOT share the limitation: a tier-3 DURABLE revive re-enters through the ordinary background
+     *    spawn, re-derives the model like a first spawn, and its `(revived)` frames carry it whenever
+     *    that derivation lands on a model (the durable record keeps a `model` of its own; a recorded
+     *    key the current catalog no longer resolves degrades the revival to the inherited model, and a
+     *    mount with nothing to inherit then leaves these frames honestly silent);
+     *  · a pre-key producer.
+     * In every case the child's own `task_progress` frames still carry the resolved answer, which is the
+     * authority; this field is the row-level convenience beside it.
+     */
+    model?: string;
     /** spawn: the HOST task's DECLARED task id (parent attribution). Omitted when the host
      *  run declared no task id (the `spec.taskId ?? sessionId` fallback would launder a session id into
      *  a task-id field — the orphan-pointer shape); {@link parentSessionId} is the always-on linkage. */
@@ -5359,7 +5426,21 @@ export interface BackgroundChildEvent {
     stoppedBy?: "user" | "parent" | "system" | (string & {});
     /** terminal: bounded human summary (same text the task_notification carries). */
     summary?: string;
-    /** tick: live rollup (`task_progress.usage`) · terminal: final `{tokens, turns, costMicroUsd}`. */
+    /** tick: live rollup (`task_progress.usage`) · terminal: the settled
+     *  `{tokens, turns, costMicroUsd?, toolUses?, durationMs}`. `costMicroUsd` is own+nested and present
+     *  only when that total is KNOWN (RB-368); `toolUses` is the run's own `stats.toolCalls` and is
+     *  absent — never zeroed — when the gateway reported no usage. The last two joined the terminal face
+     *  to close a reporting asymmetry: the workflow lane's completion notification and the Agent tool's
+     *  own sync `<usage>` footer had published both all along, so one child answered "how much work, how
+     *  long" on one lane and refused on the other.
+     *
+     *  `durationMs` MEASURES DIFFERENT SPANS on the two kinds, which is worth knowing before plotting it:
+     *  on a TICK it is the child RUN's own elapsed (the forwarded frame's value, from the run's start);
+     *  on the TERMINAL it is the delegation LEG's, from the lane's launch instant — which is earlier, so
+     *  a consumer graphing one series sees a step up at settle. Both are true of what they name; neither
+     *  can be computed from the other without the spawn/prepare interval, which is why they are not
+     *  reconciled into one. The intra-turn activity beat carries a third, narrower shape (`{toolUses}`
+     *  alone — there is no honest live token figure on that lane). */
     usage?: {
         totalTokens?: number;
         toolUses?: number;

package/dist/core/wiring-manifest.d.ts

@@ -133,7 +133,12 @@ export interface WiringManifest {
      *  a completed/failed/killed(non-user) subagent minted through the deps-visible assembly is
      *  continuable across a process restart. A statement about the DEPS-VISIBLE assembly only: a
      *  caller-mounted Agent tool over its own runner is outside this manifest's sight (per-read
-     *  honest degrade + the integrity notice own that case, never a fabricated tier). */
+     *  honest degrade + the integrity notice own that case, never a fabricated tier) — and that
+     *  blind spot is load-bearing here, because the store this field is derived from is the ROOT
+     *  leg's while the store an ordinary child transcript is actually minted through is the AGENT
+     *  TOOL's runner's ({@link resolveSubagentTranscriptTier} names the rule and the fork-lane
+     *  exception). The word names ADDRESSABILITY: `none`/`rows` are silent on whether a child
+     *  transcript reaches disk at all, and only `full` promises the a* handle survives a restart. */
     fleet: {
         backgroundAgentStore: boolean;
         hostChildEventSink: boolean;
@@ -254,6 +259,18 @@ export type SubagentTranscriptTier = "none" | "rows" | "full";
  * fold picked). This is the DEPLOYMENT-level judgment only; the per-handle "did this row's
  * transcript actually land" question belongs to `durableAgentRowProbe` (the S1b release-flip gate)
  * — two different questions, deliberately two named faces (do not merge them back into one).
+ *
+ * WHICH session store to pass: the one on the runner the Agent tool was mounted with
+ * (`SubagentToolOptions.runner.sessions`), because that is the store an ordinary (sync/background)
+ * child transcript is minted through — the fork lane deliberately branches through the HOST store
+ * instead, see the law on `SubagentToolOptions.runner`. A deployment that serves root tasks from one
+ * runner and delegated children from another (a throwaway sub-task store, a routing store) has two
+ * different stores here, and passing the ROOT deps' store reports the root lane's fate under the
+ * child lane's name. Note what the three words do and do not promise about DISK: this tier names
+ * ADDRESSABILITY, not persistence. `none` is returned before any store is inspected, so it covers
+ * both "the transcript is on disk but nothing can address it" and "there is no transcript" — an
+ * operator asking whether a child conversation is readable afterwards must read the delegation
+ * store's own durability + release/evict semantics, not this word.
  */
 export declare function resolveSubagentTranscriptTier(agentStoreWired: boolean, sessionStore: {
     readonly placements?: {

package/dist/index.d.ts

@@ -179,7 +179,7 @@ export { AdoptionError, assertAdoptionBootGate, readRootAdoptionFile, writeRootA
 export { adoptLocalDataRoot, ackAdoptionConfig, witnessAdoptionConfig, listAdoptionQuarantine, readAdoptionStatus, type AdoptionStatus, type AdoptLocalDataRootOptions, type AdoptLocalDataRootResult, type AdoptionCarriageLeg, type AdoptionCarriageLegContext, type AdoptionConfigWitnessReceipt, } from "./stores/file/adoption/adopt.js";
 export { formatHookFeedback, runToolGate, createHookEnvCapabilities, createPreToolUseConstraintPolicy, type PersistedRuleHit, type PersistedRuleHitRule, type PersistedRuleUnreadable, type PersistedRuleCoverage, type PersistedRuleAnswer, normalizePersistedRuleHit, type Hooks, type HookToolContext, type HookInvocationIdentity, type UserPromptSubmitContext, type PostToolBatchContext, type HookEnvCapabilities, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, type NormalizedMemorySpec, type MemorySpecInput, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, type Embedder, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, type UtilityGate, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryNoteType, type StructuredNoteInput, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, consolidationExposedFrontmatter, ambiguousOriginRepresentation, type OriginClearanceRow, type OriginClearanceEvent, type OriginClearanceShadow, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, memoryConsolidationWithheldNotice, type ConsolidationGateRead, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, type ConsolidationPlanFoldEvidence, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintExposurePartitionedPlan, mintLlmConsolidationPlan, MEMORY_DISTILLER_PURITY_CONTRACT_V1, detectCleanArmVerbatimLeak, type CleanArmLeakFinding, type CleanArmLeakVerdict, type MemoryDistillerPurityContract, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, type ConsolidationDistillFn, type ConsolidationDriveCycleRow, type ConsolidationDriveEngine, type ConsolidationDriveResult, type ConsolidationFoldState, type DistillerCandidate, type DistillerChatAnswer, type DistillerChatFn, type DistillerChatRequest, type FuseSchedule, type LlmConsolidationPlan, type LlmConsolidationPlanArm, type LlmConsolidationPlanProduct, type LlmDistillerContract, type MintLlmConsolidationPlanResult, type PlanParseRepairs, type SanitizedLlmGroups, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, type ConsolidationDriverEngine, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type ConsolidationRunStopReason, type RunMemoryConsolidationOptions, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, MEMORY_CAPTURE_OPTOUT_NOTICE, memoryCaptureOptedOutNotice, memoryCaptureOptOutUnpersistedNotice, SESSION_CAPTURE_OPTOUT_DIR, markSessionCaptureOptOut, readSessionCaptureOptOut, listSessionCaptureOptOut, fileSessionCaptureRecordStore, type SessionCaptureOptOutRecord, type SessionCaptureOptOutMarkOutcome, type SessionCaptureRecordStore, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_INDEX_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, type MemoryIndexDetails, type MemoryIndexRow, type CleanMemoryIndexRow, type ExposedMemoryIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type MemoryScopeEnumeration, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, consolidationExposedFrontmatter, ambiguousOriginRepresentation, type OriginClearanceRow, type OriginClearanceEvent, type OriginClearanceShadow, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, memoryConsolidationWithheldNotice, type ConsolidationGateRead, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, type ConsolidationPlanFoldEvidence, type SessionMemoryStatus, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintExposurePartitionedPlan, mintLlmConsolidationPlan, MEMORY_DISTILLER_PURITY_CONTRACT_V1, detectCleanArmVerbatimLeak, type CleanArmLeakFinding, type CleanArmLeakVerdict, type MemoryDistillerPurityContract, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, type ConsolidationDistillFn, type ConsolidationDriveCycleRow, type ConsolidationDriveEngine, type ConsolidationDriveResult, type ConsolidationFoldState, type DistillerCandidate, type DistillerChatAnswer, type DistillerChatFn, type DistillerChatRequest, type FuseSchedule, type LlmConsolidationPlan, type LlmConsolidationPlanArm, type LlmConsolidationPlanProduct, type LlmDistillerContract, type MintLlmConsolidationPlanResult, type PlanParseRepairs, type SanitizedLlmGroups, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, type ConsolidationDriverEngine, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type ConsolidationRunStopReason, type RunMemoryConsolidationOptions, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, MEMORY_CAPTURE_OPTOUT_NOTICE, memoryCaptureOptedOutNotice, memoryCaptureOptOutUnpersistedNotice, SESSION_CAPTURE_OPTOUT_DIR, markSessionCaptureOptOut, readSessionCaptureOptOut, listSessionCaptureOptOut, fileSessionCaptureRecordStore, type SessionCaptureOptOutRecord, type SessionCaptureOptOutMarkOutcome, type SessionCaptureRecordStore, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_INDEX_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, type MemoryIndexDetails, type MemoryIndexRow, type CleanMemoryIndexRow, type ExposedMemoryIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type MemoryScopeEnumeration, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
 export { SHARED_MEMORY_READ_CAP_BYTES, SHARED_MEMORY_LIST_PAGE_SIZE, SharedMemoryStoreError, type SharedMemoryStoreProvider, type SharedMemoryStoreReader, type SharedMemoryPagedList, type SharedMemoryStoreInfo, type SharedMemoryDocumentEntry, type SharedMemorySnapshot, type SharedMemoryRequestContext, type MemoryListDetails, type MemoryReadDetails, } from "./core/shared-memory/types.js";
 export { sharedMemoryStoreContract, type SharedMemoryFixture, type SharedMemoryStoreContractHooks, } from "./core/shared-memory/contract.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";

package/dist/orchestration/run-workflow-tool.d.ts

@@ -245,7 +245,15 @@ export interface RunWorkflowToolDeps {
             sessionId: string;
             controlDir?: string;
         }>;
-    };
+    } | Promise<{
+        optedOut: boolean;
+        indeterminate: boolean;
+        controlDir?: string;
+        ancestors?: ReadonlyArray<{
+            sessionId: string;
+            controlDir?: string;
+        }>;
+    }>;
     /** TRUSTED nesting depth from the run's internals (NOT a tool param) — passed to `startWorkflow` so a
      *  cross-process child workflow is rejected by the one-level guard. */
     workflowDepth?: number;

package/dist/orchestration/run-workflow-tool.js

@@ -3,6 +3,7 @@ import { defineTool, errorResult } from "../core/tools.js";
 import { governanceBaselineError, governanceBaselineProblem } from "./governance-baseline-validity.js";
 import { redactSecrets, redactHostLeaks, boundedRedactedSummary } from "../core/untrusted-egress.js";
 import { withDelegationProvenance } from "../core/tool-policy.js";
+import { LAUNCH_RECEIPT_OWN_WORDS_CLAUSE, launchReceiptNoQuoteClause } from "../agents/launch-receipt-contract.js";
 import { startWorkflow } from "./workflow.js";
 import { buildWorkflowPrimitives } from "./workflow-primitives.js";
 import { parseWorkflowMeta, splitWorkflowMeta, workflowScriptReadsClockOrRandom } from "./workflow-meta.js";
@@ -514,12 +515,17 @@ export async function createRunWorkflowTool(d) {
                     ...(() => {
                         if ("memoryCaptureOptedOut" in ctx) {
                             return {
-                                parentMemoryCaptureState: () => ({
-                                    optedOut: ctx.memoryCaptureOptedOut === true,
-                                    indeterminate: ctx.memoryCaptureIndeterminate === true,
-                                    ...(ctx.memoryCaptureControlDir !== undefined ? { controlDir: ctx.memoryCaptureControlDir } : {}),
-                                    ...(ctx.memoryCaptureAncestors !== undefined ? { ancestors: ctx.memoryCaptureAncestors } : {}),
-                                }),
+                                parentMemoryCaptureState: () => {
+                                    const o = ctx.memoryCaptureOptedOut ?? false;
+                                    const i = ctx.memoryCaptureIndeterminate ?? false;
+                                    const build = (optedOut, indeterminate) => ({
+                                        optedOut: optedOut === true,
+                                        indeterminate: indeterminate === true,
+                                        ...(ctx.memoryCaptureControlDir !== undefined ? { controlDir: ctx.memoryCaptureControlDir } : {}),
+                                        ...(ctx.memoryCaptureAncestors !== undefined ? { ancestors: ctx.memoryCaptureAncestors } : {}),
+                                    });
+                                    return o instanceof Promise || i instanceof Promise ? Promise.all([o, i]).then(([ov, iv]) => build(ov, iv)) : build(o, i);
+                                },
                             };
                         }
                         return d.parentMemoryCaptureState !== undefined ? { parentMemoryCaptureState: d.parentMemoryCaptureState } : {};
@@ -630,8 +636,7 @@ export async function createRunWorkflowTool(d) {
                     task_id: runId,
                     status: "started",
                     ...(persistedScriptPath !== undefined ? { scriptPath: persistedScriptPath } : {}),
-                    handling: "This tool result is internal metadata — never quote or paste any part of it (the ids above, and scriptPath when present) into a user-facing reply. " +
-                        "In your own words, briefly tell the user what you launched; do not echo this result.",
+                    handling: `${launchReceiptNoQuoteClause(" (the ids above, and scriptPath when present)")} ${LAUNCH_RECEIPT_OWN_WORDS_CLAUSE}`,
                     note: (() => {
                         const pollExpr = d.taskRegistry ? `TaskOutput({ task_id: "${runId}" })` : undefined;
                         const blockingPollExpr = d.taskRegistry ? `TaskOutput({ task_id: "${runId}", block: true })` : undefined;

package/dist/orchestration/workflow.d.ts

@@ -405,7 +405,15 @@ export interface RunWorkflowOptions {
             sessionId: string;
             controlDir?: string;
         }>;
-    };
+    } | Promise<{
+        optedOut: boolean;
+        indeterminate: boolean;
+        controlDir?: string;
+        ancestors?: ReadonlyArray<{
+            sessionId: string;
+            controlDir?: string;
+        }>;
+    }>;
     /** Call-time getter for the HOST run's RESOLVED Model object. A spawned agent whose
      *  fold chain (script spec → agentType → governance baseline) produced NO model inherits the
      *  parent's full object — baseUrl/key routing included — instead of falling to a string/role

package/dist/orchestration/workflow.js

@@ -54,11 +54,14 @@ function forReview(text) {
         return text;
     return `${text.slice(0, MAX_REVIEWED_PROMPT_CHARS)}\n[…TRUNCATED FOR REVIEW: ${text.length - MAX_REVIEWED_PROMPT_CHARS} further characters follow that the child WILL receive and this review did NOT see]`;
 }
-function workflowModelLabel(spec) {
+function workflowModelLabel(spec, catalog) {
     const model = spec.model;
     if (model === undefined)
         return undefined;
-    return typeof model === "string" ? resolveModelDisplayLabel(model) : model.id ?? model.name;
+    if (typeof model !== "string")
+        return model.id ?? model.name;
+    const served = catalog?.[model]?.id;
+    return served ?? resolveModelDisplayLabel(model);
 }
 export const WORKFLOW_SUBAGENT_PROMPT = `You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.
 
@@ -441,6 +444,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
     }
     const concurrency = normalizeConcurrency(opts.concurrency);
     const agentRegistry = workflowAgentRegistry(opts);
+    const modelCatalog = runner.agentCatalog?.models;
     const store = opts.store;
     const maxAgents = normalizeWorkflowHardCap("maxAgents", opts.maxAgents);
     const maxLogChars = normalizeWorkflowHardCap("maxLogChars", opts.maxLogChars);
@@ -615,8 +619,8 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
         ...(opts.placementRoot !== undefined ? { placementRoot: opts.placementRoot } : {}),
         ...(opts.originatingSessionId !== undefined ? { parentSessionId: opts.originatingSessionId } : {}),
     };
-    const captureFloorSeatsNow = () => {
-        const s = opts.parentMemoryCaptureState?.();
+    const captureFloorSeatsNow = async () => {
+        const s = await opts.parentMemoryCaptureState?.();
         if (s === undefined)
             return {};
         return {
@@ -633,11 +637,11 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
     const bceParentToolCall = opts.parentToolCallId !== undefined ? { parentToolCallId: opts.parentToolCallId } : {};
     const waIdOf = (callKey) => `wa${createHash("sha256").update(`${runId}:${callKey}`).digest("hex").slice(0, 16)}`;
     const bceLive = new Map();
-    const bceSpawn = (callKey, label, agentType, replayed, sessionId) => {
+    const bceSpawn = (callKey, label, agentType, replayed, sessionId, model) => {
         if (!bceSink)
             return;
         const id = waIdOf(callKey);
-        bceLive.set(id, { callKey, label, ...(agentType !== undefined ? { agentType } : {}), ...(sessionId !== undefined ? { sessionId } : {}) });
+        bceLive.set(id, { callKey, label, ...(agentType !== undefined ? { agentType } : {}), ...(sessionId !== undefined ? { sessionId } : {}), ...(model !== undefined ? { model } : {}) });
         bceEmit({
             kind: "spawn",
             taskId: id,
@@ -648,6 +652,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             ...(scope !== undefined ? { scope } : {}),
             description: replayed ? `${label} (replayed)` : label,
             agentType: agentType ?? "workflow-agent",
+            ...(model !== undefined ? { model } : {}),
             name: label,
             ...(opts.parentTaskId !== undefined ? { parentTaskId: opts.parentTaskId } : {}),
             workflowRunId: runId,
@@ -679,6 +684,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             workflowRunId: runId,
             ...(scope !== undefined ? { scope } : {}),
             ...(row.agentType !== undefined ? { agentType: row.agentType } : { agentType: "workflow-agent" }),
+            ...(row.model !== undefined ? { model: row.model } : {}),
             ...(row.sessionId !== undefined ? { sessionId: row.sessionId, transcriptId: row.sessionId } : {}),
             name: e.name ?? row.label,
             progressTaskId: e.taskId,
@@ -1003,7 +1009,8 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
         const specForIdentity = inheritedModelSnap !== undefined ? { ...spec, model: inheritedModelSnap } : spec;
         const callKey = workflowAgentCallKey(run.agents.length, specForIdentity, agentOpts);
         const prompt = boundedRedactedSummary(spec.systemPrompt ? `${spec.systemPrompt}\n\n${spec.objective}` : spec.objective, MAX_TRANSCRIPT_CHARS);
-        const model = workflowModelLabel(specForIdentity);
+        const specForLabel = spec.model === undefined && typeDefModel !== undefined ? { ...spec, model: typeDefModel } : specForIdentity;
+        const model = workflowModelLabel(specForLabel, modelCatalog);
         return { label, phase, phaseInstance, groupId, inheritedModelSnap, callKey, prompt, model };
     };
     const reviewSpawnBeforeLaunch = async (lane, label, callKey, runSpec, effectiveSignal) => {
@@ -1161,13 +1168,14 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     const rs = r.stats;
                     const cachedOutput = boundedRedactedSummary(r.structuredOutput ?? r.result, MAX_TRANSCRIPT_CHARS);
                     const at = now();
+                    const replayModel = r.model;
                     const replayRec = {
                         label,
                         callKey,
                         ...(groupId !== undefined ? { groupId } : {}),
                         phase,
                         prompt,
-                        ...(model !== undefined ? { model } : {}),
+                        ...(replayModel !== undefined ? { model: replayModel } : {}),
                         replayed: true,
                         status: r.status === "completed" ? "completed" : "failed",
                         taskStatus: r.status,
@@ -1185,9 +1193,9 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     run.agents.push(replayRec);
                     if (phaseInstance)
                         agentPhaseOf.set(replayRec, phaseInstance);
-                    emit({ type: "agent_start", runId, label, phase, ...(groupId !== undefined ? { groupId } : {}), callKey, prompt, ...(model !== undefined ? { model } : {}), replayed: true, ts: at });
+                    emit({ type: "agent_start", runId, label, phase, ...(groupId !== undefined ? { groupId } : {}), callKey, prompt, ...(replayModel !== undefined ? { model: replayModel } : {}), replayed: true, ts: at });
                     emit({ type: "agent_end", runId, label, phase, ...(groupId !== undefined ? { groupId } : {}), status: replayRec.status, output: cachedOutput, ...(rs.toolCalls !== undefined ? { toolCalls: rs.toolCalls } : {}), replayed: true, ts: at });
-                    bceSpawn(callKey, label, agentOpts.agentType, true, r.sessionId || undefined);
+                    bceSpawn(callKey, label, agentOpts.agentType, true, r.sessionId || undefined, replayModel);
                     bceTerminal(callKey, replayRec.status === "completed" ? "completed" : "failed", cachedOutput, r.sessionId || undefined, replayRec.stats);
                     accumulateStats(r, false);
                     void persist("update");
@@ -1233,7 +1241,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                 }
                 rec.startedAt = now();
                 const bornChildSessionId = resolveChildSessionIdAtSpawn(spec);
-                bceSpawn(callKey, label, agentOpts.agentType, false, bornChildSessionId);
+                bceSpawn(callKey, label, agentOpts.agentType, false, bornChildSessionId, model);
                 const typedSpec0 = applyWorkflowAgentType(spec, agentOpts.agentType, agentRegistry);
                 const typedSpec = typedSpec0.model === undefined && inheritedModelSnap !== undefined ? { ...typedSpec0, model: inheritedModelSnap } : typedSpec0;
                 const framedSpec = withWorkflowChildPersona(typedSpec, agentOpts.schema ?? typedSpec.outputSchema);
@@ -1247,7 +1255,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                         opts.onForwardEvent(e.type === "task_progress" ? { ...e, workflowRunId: runId, workflowAgentLabel: label } : e);
                     }
                     : undefined;
-                const baseInternals = { ...(agentOpts.isolation ? { isolation: agentOpts.isolation } : {}), ...(opts.parentCwd !== undefined ? { parentCwd: opts.parentCwd } : {}), ...spawnAttribution, ...captureFloorSeatsNow(), ...(enrichedForward !== undefined ? { onForwardEvent: enrichedForward } : {}), delegationTaskType: "workflow", agentName: label, onWorkspaceResolved: createWorkspaceObserver(rec) };
+                const baseInternals = { ...(agentOpts.isolation ? { isolation: agentOpts.isolation } : {}), ...(opts.parentCwd !== undefined ? { parentCwd: opts.parentCwd } : {}), ...spawnAttribution, ...(await captureFloorSeatsNow()), ...(enrichedForward !== undefined ? { onForwardEvent: enrichedForward } : {}), delegationTaskType: "workflow", agentName: label, onWorkspaceResolved: createWorkspaceObserver(rec) };
                 let attempts = 0;
                 let throttleRetried = false;
                 let lastAttemptReason;
@@ -1545,7 +1553,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             }
             rec.startedAt = now();
             const childSessionId = resolveChildSessionIdAtSpawn(spec);
-            bceSpawn(callKey, label, agentOpts.agentType, false, childSessionId);
+            bceSpawn(callKey, label, agentOpts.agentType, false, childSessionId, model);
             let stream;
             try {
                 const typedSpec0 = applyWorkflowAgentType(spec, agentOpts.agentType, agentRegistry);
@@ -1566,7 +1574,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     ...(agentOpts.isolation ? { isolation: agentOpts.isolation } : {}),
                     ...(opts.parentCwd !== undefined ? { parentCwd: opts.parentCwd } : {}),
                     ...spawnAttribution,
-                    ...captureFloorSeatsNow(),
+                    ...(await captureFloorSeatsNow()),
                     ...(enrichedForwardS !== undefined ? { onForwardEvent: enrichedForwardS } : {}),
                     delegationTaskType: "workflow",
                     agentName: label,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.0.0",
+  "version": "7.0.2",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 1841,
+  "count": 1842,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -996,6 +996,7 @@
     "SessionCaptureOptOutRecord": "interface",
     "SessionCaptureRecordStore": "interface",
     "SessionError": "class",
+    "SessionMemoryStatus": "interface",
     "SessionMetadata": "interface",
     "SessionPermissionRules": "interface",
     "SessionPlacement": "interface",
@@ -2839,6 +2840,7 @@
     "SessionCaptureOptOutRecord": "advanced",
     "SessionCaptureRecordStore": "advanced",
     "SessionError": "stable",
+    "SessionMemoryStatus": "advanced",
     "SessionMetadata": "stable",
     "SessionPermissionRules": "advanced",
     "SessionPlacement": "advanced",