@sema-agent/core 7.0.1 → 7.1.0

package/dist/core/types.d.ts

@@ -934,8 +934,14 @@ export interface ToolExecuteContext {
      * opted-out session captures nothing, whatever its chosen AgentDefinition says — the opt-out is
      * a floor no selection loosens (the `memoryPersistenceCapable:false` floor's exact law, on the
      * privacy axis). Trusted Runner-filled seat, never a model/tool argument.
+     *
+     * DUAL FORM (#511 件2): on a deployment whose capture record store is synchronous (the default
+     * file trio) this is a plain boolean, byte-identical to before; a Promise-form
+     * {@link RunnerDeps.memoryCaptureRecordStore} makes the live read answer a `Promise<boolean>`.
+     * Consumers must `await` (identity on the boolean arm) — a bare `=== true` on the Promise arm
+     * would coin `false`, the exact un-floored escape this seat closes.
      */
-    memoryCaptureOptedOut?: boolean;
+    memoryCaptureOptedOut?: boolean | Promise<boolean>;
     /**
      * design/383 §2.5 (rescan post-6.0.0-RC) — the floor seat's THIRD state: TRUE ⇔ the spawning
      * session's capture opt-out state is INDETERMINATE at the moment a delegation tool reads this
@@ -947,8 +953,10 @@ export interface ToolExecuteContext {
      * irreversible record is ever minted off an unreadable state); a readable-and-clean answer
      * proceeds clean. Never TRUE beside {@link memoryCaptureOptedOut} — a known opt-out is
      * determinate. Trusted Runner-filled seat, never a model/tool argument.
+     * Dual form like its twin (#511 件2): `boolean` over a sync store, `Promise<boolean>` over a
+     * Promise-form store — consumers `await`.
      */
-    memoryCaptureIndeterminate?: boolean;
+    memoryCaptureIndeterminate?: boolean | Promise<boolean>;
     /** design/383 §2.5 — the spawning session's write-plane control dir (the coordinate its capture
      *  record is keyed under), forwarded beside the floor bit so a cross-plane child's record-query
      *  leg reads the PARENT's carrier, not its own plane's. Trusted Runner-filled seat. */
@@ -3933,8 +3941,11 @@ export interface TaskEventIdentity {
 }
 /**
  * design/99 §E3/§E10 — a BRAIN-LAYER liveness phase, surfaced so a UI can show why a
- * turn is stalled (the brain otherwise absorbs these silently in its connect/retry loop). Provider-NEUTRAL:
- * carries only the graduated phase + a neutral hint, NEVER an HTTP status / provider taxonomy / stop_reason.
+ * turn is stalled (the brain otherwise absorbs these silently in its connect/retry loop). The PHASE
+ * itself is provider-NEUTRAL — a graduated bucket this engine mints, never a provider taxonomy or a
+ * `stop_reason`. The one provider-stated number that does cross this channel is the failing attempt's
+ * HTTP status, and it travels on its own named seat ({@link BrainStatus.errorStatus}) in the retry
+ * context only; the phase and the {@link BrainStatus.detail} hint stay free of it.
  * A CLOSED union (type-safe) covering the core brain layer; a deployment that surfaces its OWN states
  * (e.g. E25 token-refresh `authenticating`) does so on its own channel, not by widening this.
  */
@@ -3952,8 +3963,10 @@ export type BrainStatusPhase = "rate_limited" | "retrying" | "reconnecting" | "c
  * WHY a retry wait is happening, as a closed, provider-NEUTRAL bucket — the companion to
  * {@link BrainStatusPhase}, which says what the brain is doing about it. A consumer rendering an
  * unattended progress line ("no answer for three minutes") needs the reason, and until this existed the
- * only carriers of it were the HTTP status and the syscall code, neither of which may cross this
- * channel. Values are about the SHAPE of the failure, never its provider taxonomy:
+ * only carriers of it were the HTTP status and the syscall code, neither of which crossed this channel
+ * at the time. (The status has since gained its own seat, {@link BrainStatus.errorStatus}; this bucket
+ * remains the reason a consumer RENDERS, and it is the only carrier for the transport classes, which
+ * have no status at all.) Values are about the SHAPE of the failure, never its provider taxonomy:
  *  - `connect_refused` — the attempt got a definite negative about the target itself (nothing accepts
  *    at that address, or the name has no address). This is the class the SHORT retry lane serves.
  *  - `transport`      — any other transport-level failure: a connect timeout, a reset, a mid-stream
@@ -3969,7 +3982,11 @@ export type BrainRetryErrClass = "connect_refused" | "transport" | "rate_limit"
 /** design/99 §E3/§E10 — the payload of a {@link TaskEvent} `status` event (and the brain→runner signal). */
 export interface BrainStatus {
     phase: BrainStatusPhase;
-    /** Optional neutral, human-readable hint (NO provider/HTTP detail). */
+    /** Optional neutral, human-readable hint. Stays free of provider/HTTP detail even now that
+     *  {@link errorStatus} exists: the machine-readable status has its own seat, and interpolating it
+     *  into the prose too would make one fact travel in two spellings a consumer has to reconcile.
+     *  (CC parity: its own retry banner renders a TRANSLATED sentence — "No response from API",
+     *  "Connection dropped" — while the raw status rides the structured key beside it.) */
     detail?: string;
     /** Seconds until the brain's next retry attempt (from the honored backoff / `Retry-After`), when known. */
     retryInSec?: number;
@@ -4007,6 +4024,41 @@ export interface BrainStatus {
      *  the engine classified; absent on frames that are not a retry wait (`recovered`/`gave_up`) and on a
      *  `circuit_open` fast-fail, which is a local verdict rather than an observed failure. */
     errClass?: BrainRetryErrClass;
+    /**
+     * #506 ㋑ — the HTTP status of the attempt that just failed, on the frame announcing the RETRY of it.
+     * The one provider-stated number this channel carries; everything else about the failure still
+     * crosses as the engine's own graduated buckets ({@link phase} / {@link errClass}).
+     *
+     * WHY IT IS HERE AT ALL, given the channel spent its life refusing it: a UI that must tell an
+     * operator whether to wait or to go fix something needs the status, and the two neutral buckets
+     * cannot supply it — `rate_limit` covers a 429 the provider will clear on its own AND a 429 that
+     * means the account is out of quota, and `server` covers a 500 alongside a 503 behind a load
+     * balancer. CC states the same number on the same occasion (`system/api_retry.error_status`, read
+     * off `APIError.status`), so a serving layer forwarding this frame no longer has to choose between
+     * matching CC's payload and honoring this channel's contract.
+     *
+     * PRESENCE — an api_retry context whose attempt got a response that NAMES the failure, and nothing
+     * else. Present on the connect-ladder retry wait (`rate_limited` / `retrying` / `reconnecting` when
+     * a response came back) and on the output-cap re-send (the provider's own 400). ABSENT — never
+     * zeroed, never null — for:
+     *   · a transport failure (`connect_refused` / `transport` at the connect leg): no response existed,
+     *     so no status was ever stated. This is the arm CC spells as an explicit `null`; here it is
+     *     absence, for the same reason every other seat on this interface uses absence, and the fact is
+     *     still TOTAL rather than guessable — {@link errClass} names those two classes by construction.
+     *   · a mid-stream tear (tiers B/C): its response's own status was a SUCCESS, and a status that
+     *     failed nothing must not be published as the cause of a retry.
+     *   · a `circuit_open` fast-fail: a local verdict, nothing was sent, nobody answered.
+     *   · the terminal `recovered` / `gave_up` frames: they announce no attempt.
+     * Same "only a status that names the failure travels" predicate as the assistant frame's
+     * {@link AssistantMessage.apiErrorStatus} (one helper, both sites) — a 2xx never travels here either,
+     * which is reachable on this path via a provider's own `x-should-retry` verdict on a success status.
+     *
+     * OPTIONAL, not CC's nullable-REQUIRED, and the difference is CC's own: CC dedicates a whole message
+     * (`system/api_retry`) to the retry occasion and can therefore require the key on it, while this
+     * interface is ONE shape shared by every phase — the same geometry as CC's shared
+     * `control_request_progress` frame, where CC itself makes the key optional.
+     */
+    errorStatus?: number;
 }
 /**
  * design/97 CORE-8 (③): one lightweight TOOL-ACTIVITY beat surfaced from a running task, for a per-agent live
@@ -4567,7 +4619,9 @@ export type TaskEvent = ({
      * silently (a 429 rate-limit / a 5xx or network retry / a reconnect / an open circuit breaker). Emitted
      * the moment the brain decides to wait/retry, carrying the graduated {@link BrainStatusPhase} + an
      * optional `retryInSec` so a UI can show "rate limited, retrying in Ns". EPHEMERAL — a pure liveness
-     * signal, never persisted or replayed on resume. Provider-neutral (no HTTP status / stop_reason).
+     * signal, never persisted or replayed on resume. The phase and the hint are provider-neutral (no
+     * provider taxonomy, no `stop_reason`); the failing attempt's HTTP status rides its own seat in the
+     * retry context only — see {@link BrainStatus.errorStatus}.
      * SCOPE: reflects THIS task's own (top-level) brain calls. A delegated sub-agent's brain liveness routes
      * to the SUB-AGENT's own stream (isolated, like every child event — §E2); a background internal brain
      * call (memory recall/consolidation) is intentionally not surfaced.
@@ -5160,9 +5214,15 @@ export interface WorkflowGovernanceBaseline {
      * The allowed model NAMES an LLM-authored script may pick (design/98 §2.5 新洞2). A script gives a
      * `modelName` string (never a `Model` object — that carries `baseUrl`/`headers` = exfil); the engine
      * resolves it against this list to a deploy-configured `Model` (the script never sees the object).
-     * **FAIL-CLOSED**: `undefined`/empty ⇒ the script CANNOT pick a model (its `modelName` is rejected → the
-     * child falls back to the workflow's default role). NEVER fail-open to the whole `models` catalog for an
-     * LLM-authored workflow.
+     * **FAIL-CLOSED**: `undefined`/empty ⇒ the script CANNOT pick a model — a spec that names `modelName`
+     * THROWS `WorkflowModelNotAllowedError` and the child is never spawned. The refusal is loud, not a
+     * silent downgrade: the script asked for a model it may not have, so the agent call FAILS rather than
+     * quietly running on the workflow's default role (a script that wants the default must simply OMIT
+     * the field). The same throw covers a name that is off the list, and a listed name the `models`
+     * catalog does not hold — so the legal set is the INTERSECTION of this list and the catalog keys
+     * (note the catalog is the Runner's TIER-EXPANDED one, so on a deployment with `RunnerDeps.tiers`
+     * the tier words and CC aliases are catalog keys here too, still gated by this list).
+     * NEVER fail-open to the whole `models` catalog for an LLM-authored workflow.
      */
     workflowModelAllowlist?: string[];
 }
@@ -5741,6 +5801,32 @@ export interface EngineNotice {
      *    implemented, so the unhonored-knob disclosure it carried has no referent; consumers must
      *    judge ladder support by VERSION, never by that code's absence.
      *
+     *  - `"task.halt_unconsumed"` (design/384 slice 1) — the user's stop verb ({@link TaskStream.halt})
+     *    was ANSWERED (not refused) while the run's ending was already owned by its own abort: nothing
+     *    was cut and nothing was stopped by the halt, the run's own ending stands, and the result will
+     *    NOT carry `haltedByUser` for it (the attribution seat never signs someone else's stop). This
+     *    notice is the halt's only trace on that arm — without it the verb receipt (`{turnCut:false}`)
+     *    was the sole record and the caller could not tell "my stop did nothing because the run beat
+     *    me to ending" from "my stop is being honored at the next boundary". Minted once per such verb
+     *    call (each arrival is a distinct fact); `detail: { sessionId, runId, taskId? }` — `runId` is
+     *    the run whose ending the halt failed to claim. Audience `"user"` (the person who pressed
+     *    stop). A REFUSED halt (typed `steering.not_running` throw) mints nothing: the refusal itself
+     *    is the loud answer.
+     *
+     *  - `"task.late_approval"` (design/384 slice 1) — a synchronous ask approval was NOT CONSUMED:
+     *    a run or turn interrupt released the wait (the `resolveAsk` race arm detached the approver's
+     *    promise; an unconsumed resolve is the approver releasing its wait, never a verdict), so the
+     *    tool did NOT run and the approval was not honored. The notice asserts non-consumption ONLY —
+     *    never an arrival order: an approval and an abort settling close together read as the abort
+     *    (the resolver's documented one-directional residual — the engine never claims a person
+     *    decided something it cannot show they did, and it equally never claims which came first).
+     *    Minted only for a value that reads as an APPROVAL — an unconsumed
+     *    deny/refusal is an ordinary release and leaves no trace, and an unconsumed REJECTION goes to
+     *    `onError(phase:"hook")` instead (a failing callback, not an answer). One notice per
+     *    unconsumed approval; `detail: { toolName, toolCallId, sessionId, runId, taskId? }`. Audience `"user"`
+     *    (whoever answered the card is the one entitled to hear the answer ran nothing); a host may
+     *    forward it on its own wire.
+     *
      *  - `"steering.parked_input_blocked"` (design/373 §4.3) — a PARKED steer entry was withheld when
      *    a resume redelivered it (any resume kind that drains parked steers — wake included) by the
      *    deployment's `userPromptSubmit` screen (block verdict, or a fail-closed non-answer/crash):

package/dist/engine/compaction/compaction.js

@@ -1,7 +1,7 @@
 import { resolveAgentCoreCompleteFn, } from "../loop/runtime-deps.js";
 import { asAgentMessage, convertToLlm, createCompactionSummaryMessage, createCustomMessage, } from "../harness/messages.js";
 import { buildSessionContext } from "../session/session.js";
-import { CompactionError, err, ok, } from "../harness/types.js";
+import { CompactionError, err, isSyntheticApiErrorMessage, ok, } from "../harness/types.js";
 import { budgetInvokedSkillsRetention, computeFileLists, createFileOps, extractFileOpsFromMessage, extractInvokedSkills, extractPersistedOutputRefs, formatFileOperations, formatPersistedOutputRefs, PERSISTED_OUTPUT_REFS_MAX_ENTRIES, readElidedMessages, readPersistedOutputRefs, readRetainedInvokedSkills, readUnsummarizedMessages, replaceInvokedSkillBodiesForSummary, serializeConversation, stripFileOperationsFooter, } from "./utils.js";
 import { ENGINE_AUTHORITY_ENVELOPE_TAGS, sanitizeUntrustedText } from "../../core/untrusted-text.js";
 import { sliceHeadSafe } from "../../core/surrogate-safe-slice.js";
@@ -223,9 +223,13 @@ function findValidCutPoints(entries, startIndex, endIndex) {
                     case "custom":
                     case "compactionSummary":
                     case "user":
-                    case "assistant":
                         cutPoints.push(i);
                         break;
+                    case "assistant":
+                        if (!isSyntheticApiErrorMessage(entry.message)) {
+                            cutPoints.push(i);
+                        }
+                        break;
                     case "toolResult":
                         break;
                 }

package/dist/engine/harness/agent-harness.d.ts

@@ -168,16 +168,17 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
      *  gated: its splice opens a NEW run (idle-park redelivery), and a halt belongs to the run that
      *  minted it. */
     engineInjectionsHeld?: () => boolean;
-    /** RB-30: shared recovery sweep — collects engine-note payloads from the given queues
-     *  in DELIVERY order (steer before followUp, each queue forward — the live loop serves steering
-     *  first, so the recovered redelivery must not present "later" frames ahead of "now/next"),
-     *  removes those entries, and hands the payloads to the runner sink. Called from BOTH terminal
-     *  paths: the natural agent_end AND abort() (which clears the queues before agent_end would see
-     *  them — the hard-abort race that round-1 shipped would have lost). */
     /** RB-30 R2 belt-and-braces: runner-callable idempotent recovery for exit paths that reach
      *  neither agent_end nor abort() (a pre-prompt throw after prepare). Swept entries are removed,
      *  so a double call is a no-op. */
     recoverUndrainedEngineNotes(): void;
+    /** RB-30: shared recovery sweep — collects engine-note payloads from the given queues
+     *  in DELIVERY order (steer before followUp, each queue forward — the live loop serves steering
+     *  first, so the recovered redelivery must not present "later" frames ahead of "now/next"),
+     *  removes those entries, and hands the payloads to the runner sink. Called from BOTH terminal
+     *  paths: the natural agent_end AND abort() — which does NOT clear the queues: #389 retired that
+     *  clearing, so they are LEFT STANDING (the durable-park migration reads them AFTER abort()
+     *  returns) and the abort-side pass is the belt for an exit that never reached agent_end. */
     private sweepUndrainedEngineNotes;
     /** backlog #259 — what remains in the steer/follow-up queues AFTER the engine-note sweep is USER
      *  input that was accepted ("queued") and will never be consumed: the run reached agent_end first.
@@ -261,6 +262,27 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     setStopGate(gate: (() => Promise<AgentMessage[]>) | undefined): void;
     private validateToolNames;
     private flushPendingSessionWrites;
+    /**
+     * #506 ㋐ — write the transcript's record of a TERMINAL provider failure (CC 2.1.250 parity, `Oo`/`CIt`).
+     *
+     * A SEPARATE object, never the live frame: `failure` is the engine's terminal error shell and every
+     * other consumer of it (the run result, failover, telemetry, usage accounting) reads its real
+     * `model`, so re-stamping that field in place would corrupt all of them. The record is minted here
+     * with the reserved {@link SYNTHETIC_MESSAGE_MODEL} instead, which is what makes it recognizable — and
+     * therefore droppable — at the request boundary and at the derived-state walks.
+     *
+     * Two CC fields are deliberately NOT copied, because this tree already states the same facts more
+     * honestly: CC writes `stop_reason: "stop_sequence"` on an entry that stopped for no such reason (its
+     * own consumers must read `isApiErrorMessage` to know better), and CC writes a zero `usage` with
+     * nothing marking it synthetic. Here the stop reason stays `"error"` and `usageMissing` says the zeros
+     * are a shell rather than a measurement — the same discipline the live frame already carries.
+     *
+     * BEST-EFFORT: a record of a failure must never become a second failure. The append can lose the
+     * session's optimistic lock (another writer moved the leaf) or hit a storage fault, and the run is
+     * already over — swallowing that leaves the pre-#506 behavior (no record) rather than converting a
+     * provider outage into a harness throw on the teardown path.
+     */
+    private recordApiFailure;
     private handleAgentEvent;
     private emitRunFailure;
     private executeTurn;

package/dist/engine/harness/agent-harness.js

@@ -4,7 +4,8 @@ import { resolveAgentCoreStreamFn } from "../loop/runtime-deps.js";
 import { normalizeEngineSegments } from "../../core/untrusted-text.js";
 import { AUTH_CARRIER_NAMES } from "../../brain/request-params.js";
 import { convertToLlm } from "./messages.js";
-import { AgentHarnessError, CompactionError, SessionError, toError, } from "./types.js";
+import { AgentHarnessError, CompactionError, SessionError, SYNTHETIC_MESSAGE_MODEL, toError, } from "./types.js";
+const API_FAILURE_RECORD_MAX_CHARS = 2000;
 function createUserMessage(text, images, provenance) {
     const content = text.length > 0 ? [{ type: "text", text }] : [];
     if (images) {
@@ -603,12 +604,13 @@ export class AgentHarness {
                     },
                 };
             },
-            beforeToolCall: async ({ toolCall, args }) => {
+            beforeToolCall: async ({ toolCall, args }, signal) => {
                 const result = await this.emitHook({
                     type: "tool_call",
                     toolCallId: toolCall.id,
                     toolName: toolCall.name,
                     input: args,
+                    ...(signal !== undefined ? { signal } : {}),
                 });
                 return result;
             },
@@ -726,6 +728,33 @@ export class AgentHarness {
             this.pendingSessionWrites.shift();
         }
     }
+    async recordApiFailure(failure) {
+        const raw = failure.errorMessage?.trim();
+        const detail = raw !== undefined && raw.length > API_FAILURE_RECORD_MAX_CHARS
+            ? `${raw.slice(0, API_FAILURE_RECORD_MAX_CHARS)}… (truncated)`
+            : raw;
+        const record = {
+            role: "assistant",
+            content: [{ type: "text", text: detail ? `API Error: ${detail}` : "API Error" }],
+            api: failure.api,
+            provider: failure.provider,
+            model: SYNTHETIC_MESSAGE_MODEL,
+            isApiErrorMessage: true,
+            ...(failure.apiErrorStatus !== undefined ? { apiErrorStatus: failure.apiErrorStatus } : {}),
+            ...(failure.requestId !== undefined ? { requestId: failure.requestId } : {}),
+            usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
+            usageMissing: true,
+            stopReason: "error",
+            ...(failure.errorMessage !== undefined ? { errorMessage: failure.errorMessage } : {}),
+            ...(failure.errorKind !== undefined ? { errorKind: failure.errorKind } : {}),
+            timestamp: failure.timestamp,
+        };
+        try {
+            await this.session.appendMessage(record);
+        }
+        catch {
+        }
+    }
     async handleAgentEvent(event, signal) {
         if (event.type === "message_end") {
             let entryId;
@@ -733,6 +762,9 @@ export class AgentHarness {
                 entryId = await this.session.appendMessage(event.message);
                 this.settleInjectedFrame(event.message);
             }
+            else if (event.message.isApiErrorMessage === true) {
+                await this.recordApiFailure(event.message);
+            }
             await this.emitAny(entryId !== undefined ? { ...event, entryId } : event, signal);
             return;
         }

package/dist/engine/harness/messages.js

@@ -1,3 +1,4 @@
+import { isSyntheticApiErrorMessage } from "./types.js";
 import { parseSessionTimestampMs, requireSessionTimestampMs } from "../session/timestamps.js";
 export function asAgentMessage(message) {
     return message;
@@ -155,6 +156,9 @@ export function convertToLlm(messages) {
             case "user":
             case "assistant":
             case "toolResult":
+                if (isSyntheticApiErrorMessage(message)) {
+                    return undefined;
+                }
                 return normalizeLlmMessageContent(message);
             default:
                 return undefined;

package/dist/engine/harness/types.d.ts

@@ -754,6 +754,37 @@ export declare function isValidModelChange(e: {
     provider?: unknown;
     modelId?: unknown;
 }): boolean;
+/**
+ * #506 ㋐ — the reserved `model` value on a transcript entry NO MODEL PRODUCED. CC-verbatim
+ * (`"<synthetic>"`, CC 2.1.250's own single-occurrence constant), and single-occurrence here for the
+ * same reason: the mint site and the recognition predicate must read the same literal or the entry
+ * becomes unrecognizable the first time one of them is retyped.
+ *
+ * It is deliberately a MODEL-SHAPED string (non-empty, bounded), so an entry carrying it survives this
+ * session's own import door and round-trips — a self-generated entry its own validator rejected would
+ * be the worse failure.
+ *
+ * ACCEPTED RESIDUAL, recorded rather than defended against: nothing RESERVES this id, because model ids
+ * are caller-supplied and `isModelIdentifier` admits any bounded non-empty string. A deployment that
+ * names a real model literally `<synthetic>` AND whose Brain stamps `isApiErrorMessage` on
+ * content-bearing output would have that output treated as a record. Both halves are required, the
+ * spelling is chosen to be one no catalog would use, and CC carries the same residual for the same
+ * reason — a reserved-word door here would refuse ids this engine has no business refusing.
+ */
+export declare const SYNTHETIC_MESSAGE_MODEL = "<synthetic>";
+/**
+ * #506 ㋐ — is this transcript entry the engine's own SYNTHETIC record of a terminal API failure?
+ *
+ * Such an entry is real transcript (a session that died on a provider failure must say so when it is
+ * re-read) but it is NOT model output, so it is dropped wherever transcript becomes model input, and
+ * it must not move any state derived from real turns. This predicate is the single gate for both.
+ *
+ * THREE keys, CC-anchored (`Hje`: `type==="assistant" && isApiErrorMessage===true && model===<synthetic>`),
+ * and the narrowness is the whole point. `isApiErrorMessage` alone would also match an assistant message
+ * a foreign Brain stamped while it carried REAL output — dropping that from the request view would
+ * silently delete the model's own words from its context. Only the engine's own mint sets all three.
+ */
+export declare function isSyntheticApiErrorMessage(m: unknown): boolean;
 /** RB-128: a `label` / `session_info.name` that is not a string reaches `.trim()` inside
  *  `BaseSessionStorage`'s CONSTRUCTOR — and the file backend validates BEFORE constructing any storage, so
  *  the contamination lands on disk and every later `open()` throws a raw `TypeError` (not even a `SessionError`).
@@ -1077,6 +1108,12 @@ export interface ToolCallEvent {
     toolCallId: string;
     toolName: string;
     input: Record<string, unknown>;
+    /** The per-call abort signal (additive, design/384 slice 1). Present iff the loop handed its
+     *  turn-scoped signal to `beforeToolCall` — the run-level abort is composed into that controller,
+     *  so this signal fires on a turn interrupt (bare halt / steer-now) AND on a run abort. Absent on
+     *  emits that carry no per-call signal; a subscriber gating a wait on it must then fall back to
+     *  whatever run-level signal it already holds (the historical shape, byte-identical). */
+    signal?: AbortSignal;
 }
 export interface ToolResultEvent {
     type: "tool_result";

package/dist/engine/harness/types.js

@@ -155,6 +155,11 @@ export function isValidThinkingLevelChange(e) {
 export function isValidModelChange(e) {
     return isModelIdentifier(e.provider) && isModelIdentifier(e.modelId);
 }
+export const SYNTHETIC_MESSAGE_MODEL = "<synthetic>";
+export function isSyntheticApiErrorMessage(m) {
+    const a = m;
+    return a?.role === "assistant" && a.isApiErrorMessage === true && a.model === SYNTHETIC_MESSAGE_MODEL;
+}
 export function isOptionalDisplayString(v, max = 4096) {
     return v === undefined || v === null || (typeof v === "string" && v.length <= max);
 }

package/dist/engine/session/session.js

@@ -1,5 +1,5 @@
 import { asAgentMessage, createCompactionSummaryMessage, createCustomMessage, } from "../harness/messages.js";
-import { SessionError, isValidModelChange, normalizeAnnouncedListing, normalizeCompactionStateCarrier, normalizeGitAnnouncement, normalizeReminderMark, normalizeWorkspaceState } from "../harness/types.js";
+import { SessionError, isSyntheticApiErrorMessage, isValidModelChange, normalizeAnnouncedListing, normalizeCompactionStateCarrier, normalizeGitAnnouncement, normalizeReminderMark, normalizeWorkspaceState } from "../harness/types.js";
 import { normalizePromptEpoch } from "../../prompt-assembly/epoch.js";
 import { budgetInvokedSkillsRetention, readElidedMessages, readRetainedInvokedSkills, readUnsummarizedMessages, renderInvokedSkillsRetention, } from "../compaction/utils.js";
 const RETENTION_CLAMP_DEFAULT_CHARS_PER_TOKEN = 3;
@@ -25,7 +25,8 @@ export function buildSessionContext(pathEntries, opts) {
             model = { provider: entry.provider, modelId: entry.modelId };
         }
         else if (entry.type === "message" && entry.message.role === "assistant") {
-            if (isValidModelChange({ provider: entry.message.provider, modelId: entry.message.model })) {
+            if (!isSyntheticApiErrorMessage(entry.message) &&
+                isValidModelChange({ provider: entry.message.provider, modelId: entry.message.model })) {
                 model = { provider: entry.message.provider, modelId: entry.message.model };
             }
         }

package/dist/index.d.ts

@@ -179,7 +179,7 @@ export { AdoptionError, assertAdoptionBootGate, readRootAdoptionFile, writeRootA
 export { adoptLocalDataRoot, ackAdoptionConfig, witnessAdoptionConfig, listAdoptionQuarantine, readAdoptionStatus, type AdoptionStatus, type AdoptLocalDataRootOptions, type AdoptLocalDataRootResult, type AdoptionCarriageLeg, type AdoptionCarriageLegContext, type AdoptionConfigWitnessReceipt, } from "./stores/file/adoption/adopt.js";
 export { formatHookFeedback, runToolGate, createHookEnvCapabilities, createPreToolUseConstraintPolicy, type PersistedRuleHit, type PersistedRuleHitRule, type PersistedRuleUnreadable, type PersistedRuleCoverage, type PersistedRuleAnswer, normalizePersistedRuleHit, type Hooks, type HookToolContext, type HookInvocationIdentity, type UserPromptSubmitContext, type PostToolBatchContext, type HookEnvCapabilities, type HookToolOutput, type PreToolUseResult, type PostToolUseResult, type UserPromptSubmitResult, type HookToolFailure, type PostToolUseFailureResult, type PostToolBatchCall, type PostToolBatchResult, type PreCompactContext, type PreCompactResult, type PostCompactContext, type StopFailureContext, type PermissionDeniedPayload, type PermissionDeniedSource, } from "./core/hooks.js";
 export { InMemoryMemoryStore, composeMemoryBlock, composeLayeredMemoryBlock, normalizeMemorySpec, type NormalizedMemorySpec, type MemorySpecInput, supportsConsolidation, supportsPeriodicConsolidation, firstSentence, expandLexicalTerms, lexicalSearchMatch, type Embedder, classifyPromotable, enforcePromotableWriteGate, guardedMemoryStore, MemoryGateError, detectSecret, enforceSecretWriteGate, enforceStructuredNoteSecretGate, type UtilityGate, type MemoryStore, type MemoryVectorMode, type ScoredMemory, type MemoryNoteHeader, type MemoryNoteRecord, type MemoryNoteType, type StructuredNoteInput, } from "./core/memory.js";
-export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, consolidationExposedFrontmatter, ambiguousOriginRepresentation, type OriginClearanceRow, type OriginClearanceEvent, type OriginClearanceShadow, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, memoryConsolidationWithheldNotice, type ConsolidationGateRead, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, type ConsolidationPlanFoldEvidence, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintExposurePartitionedPlan, mintLlmConsolidationPlan, MEMORY_DISTILLER_PURITY_CONTRACT_V1, detectCleanArmVerbatimLeak, type CleanArmLeakFinding, type CleanArmLeakVerdict, type MemoryDistillerPurityContract, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, type ConsolidationDistillFn, type ConsolidationDriveCycleRow, type ConsolidationDriveEngine, type ConsolidationDriveResult, type ConsolidationFoldState, type DistillerCandidate, type DistillerChatAnswer, type DistillerChatFn, type DistillerChatRequest, type FuseSchedule, type LlmConsolidationPlan, type LlmConsolidationPlanArm, type LlmConsolidationPlanProduct, type LlmDistillerContract, type MintLlmConsolidationPlanResult, type PlanParseRepairs, type SanitizedLlmGroups, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, type ConsolidationDriverEngine, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type ConsolidationRunStopReason, type RunMemoryConsolidationOptions, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, MEMORY_CAPTURE_OPTOUT_NOTICE, memoryCaptureOptedOutNotice, memoryCaptureOptOutUnpersistedNotice, SESSION_CAPTURE_OPTOUT_DIR, markSessionCaptureOptOut, readSessionCaptureOptOut, listSessionCaptureOptOut, fileSessionCaptureRecordStore, type SessionCaptureOptOutRecord, type SessionCaptureOptOutMarkOutcome, type SessionCaptureRecordStore, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_INDEX_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, type MemoryIndexDetails, type MemoryIndexRow, type CleanMemoryIndexRow, type ExposedMemoryIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type MemoryScopeEnumeration, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
+export { MemoryEngine, FileMemoryEngineBackend, memoryBackendContract, assertMemoryBackendSearchEquivalence, type MemoryBackendContractHooks, buildMemoryInstruction, truncateIndex, scanEntryFiles, deriveRepoKey, deriveRepoMemoryDir, deriveControlPlaneDir, deriveRepoControlPlaneDir, resolveMemoryEngineRoot, scopeDirName, ControlPlaneCorruptError, parseEntryFile, serializeEntryFile, computeEntryRev, entryFromFile, MEMORY_ORIGIN_CAUSES, committedOriginOf, originEquals, consolidationExposedFrontmatter, ambiguousOriginRepresentation, type OriginClearanceRow, type OriginClearanceEvent, type OriginClearanceShadow, committedDistilledOf, distilledEquals, type MemoryEntryDistilled, type MemoryEntryDistilledInput, CONSOLIDATION_DEFAULTS, ConsolidationRefusedError, MEMORY_SEARCH_SUPERSEDED_TAG, consolidationTypeEligible, deriveSupersededSet, memorySupersededNote, readIntentCredentials, supersessionFuseCeiling, memoryConsolidationRecommendedNotice, memoryConsolidationCommittedNotice, memoryConsolidationConflictNotice, memoryConsolidationIncompleteNotice, memoryConsolidationRefusedNotice, memoryConsolidationWithheldNotice, type ConsolidationGateRead, type ConsolidationGateRow, type ConsolidationIntent, type ConsolidationIntentCredentialRow, type ConsolidationLeaseSeat, type ConsolidationProductProposal, type ConsolidationProposal, type MemoryConsolidationOptions, type ConsolidationCommitReceipt, type ConsolidationReconcileReport, type ConsolidationResolveReceipt, type ConsolidationPlanSummary, type ConsolidationPlanFoldEvidence, type SessionMemoryStatus, DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT, LLM_DISTILLER_CONTRACT, LLM_DISTILLER_CONTRACT_DL2, LLM_DISTILLER_CONTRACT_DL3, LLM_DISTILLER_CONTRACTS, MEMORY_DISTILLER_CONTRACT_V1, contractGroupingDiff, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintExposurePartitionedPlan, mintLlmConsolidationPlan, MEMORY_DISTILLER_PURITY_CONTRACT_V1, detectCleanArmVerbatimLeak, type CleanArmLeakFinding, type CleanArmLeakVerdict, type MemoryDistillerPurityContract, openAiCompatChatSeat, parseJsonAnswer, planParseRepairs, sanitizeLlmGroups, scheduleUnderFuse, type ConsolidationDistillFn, type ConsolidationDriveCycleRow, type ConsolidationDriveEngine, type ConsolidationDriveResult, type ConsolidationFoldState, type DistillerCandidate, type DistillerChatAnswer, type DistillerChatFn, type DistillerChatRequest, type FuseSchedule, type LlmConsolidationPlan, type LlmConsolidationPlanArm, type LlmConsolidationPlanProduct, type LlmDistillerContract, type MintLlmConsolidationPlanResult, type PlanParseRepairs, type SanitizedLlmGroups, CONSOLIDATION_DRIVER_PLANS_DIR, CONSOLIDATION_DRIVER_RUNS_FILE, CONSOLIDATION_RUN_STOP_REASONS, archiveDistillerPlan, readConsolidationDriverRun, runMemoryConsolidationDriver, type ConsolidationDriverEngine, type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type ConsolidationRunStopReason, type RunMemoryConsolidationOptions, isInstructionEntry, type MemoryEntryOrigin, type MemoryOriginCause, MEMORY_INSTRUCTION_TEMPLATE, MEMORY_RECALL_DISCIPLINE, MEMORY_PREFERENCE_DISCIPLINE, MEMORY_READONLY_NOTICE, MEMORY_CAPTURE_OPTOUT_NOTICE, memoryCaptureOptedOutNotice, memoryCaptureOptOutUnpersistedNotice, SESSION_CAPTURE_OPTOUT_DIR, markSessionCaptureOptOut, readSessionCaptureOptOut, listSessionCaptureOptOut, fileSessionCaptureRecordStore, type SessionCaptureOptOutRecord, type SessionCaptureOptOutMarkOutcome, type SessionCaptureRecordStore, readV2HeaderHints, type V2HeaderHints, LINEAGE_FILE, CHALLENGES_FILE, CHALLENGED_HISTORY_FILE, CHALLENGE_LEDGER_MAX_EVENTS, rebuildStrictControlPlaneLedger, type ControlPlaneRebuildReceipt, type StrictControlPlaneLedger, type ChallengeAssignment, type ChallengeEvent, type ChallengedHistoryRow, type LineagePendingTxn, type LineagePromotion, MEMORY_INDEX_FILENAME, MEMORY_INDEX_MAX_LINES, MEMORY_INDEX_MAX_BYTES, MEMORY_SEARCH_TOOL_NAME, MEMORY_GET_TOOL_NAME, MEMORY_INDEX_TOOL_NAME, MEMORY_ENGINE_TOOL_NAMES, type MemorySearchDetails, type MemorySearchHit, type CleanMemorySearchHit, type ExposedMemorySearchHit, MEMORY_EXPOSURE_BANNER, MEMORY_EXPOSURE_HANDLE_TAG, memoryExposureIndexRow, type MemoryGetDetails, type MemoryIndexDetails, type MemoryIndexRow, type CleanMemoryIndexRow, type ExposedMemoryIndexRow, STUB_ARCHIVED_LINE, DEFAULT_MAX_MEMORY_FILES, DEFAULT_MAX_ENTRY_DEPTH, DEFAULT_HARVEST_DEADLINE_MS, DEFAULT_HARVEST_FILE_BUDGET, MASS_DELETION_FUSE_RATIO, scanMemoryWrite, scanMemoryFileName, scanRemediation, MEMORY_FILENAME_SEGMENT_RE, renderAnnouncements, enqueueMemoryAnnouncement, drainMemoryAnnouncements, peekMemoryAnnouncements, bumpScanFuse, scanFuseCount, clearScanFuse, ANNOUNCEMENTS_FILE, MEMORY_ANNOUNCEMENTS_MAX, SCAN_FUSE_FILE, SCAN_FUSE_THRESHOLD, type MemoryAnnouncement, type ScanFinding, type MemoryEngineOptions, type MemoryInjection, type EntryProvenanceAccount, type TransferEvidence, type CommittedBinding, type CommittedEntrySnapshot, type CommittedScopeSnapshots, type EntryCustodyReport, erasureSelectHash, type EraseMemoryEntriesInput, type ErasureSelect, type ErasedBinding, type MemoryErasureAttestation, computeMemoryBundleHash, type MemoryExportBundle, type MemoryImportReport, type MemoryExportSnapshot, type MemoryBundleImportPlan, type BundleChallengeRow, type BundleLineageRow, type BundlePollutedSession, type MemoryBackend, type MemoryEntry, type MemoryEntryFrontmatter, type MemoryEntryHeader, type MemoryScopeEnumeration, type ScoredMemoryEntry, type NotePatch, type PatchReport, type MaterializedFile, type MemorySessionHandle, type HarvestReport, type HarvestRejection, type HarvestRejectionCode, type ParsedEntryFile, type ScannedEntryFile, SCOPE_SEGMENT_MAX_ENCODED, PROJECT_MARKER_PATH, encodeScopeSegment, decodeScopeSegment, parseScopeKey, formatUserScope, formatOrgScope, formatProjScope, formatUserProjScope, isPersonalScope, assertScopeContractPlacement, formatProjectMarker, parseProjectMarker, resolveProjectId, PROJECT_ID_REGEX, type ParsedScopeKey, migrateScope, type MigrateScopeReport, materializeEntriesToFiles, harvestFilesToPatches, projectionsToWriteBack, screenInboundEntries, REMOTE_HARVEST_PER_FILE_BYTES, REMOTE_MASS_DELETION_FUSE_RATIO, type RemoteMemoryFile, type RemoteMemoryBaseline, type RemoteMaterialization, type RemoteHarvestResult, type InboundEntryFinding, deriveProjectMemoryDir, deriveProjectControlDir, recordProjectIdHint, lookupProjectIdHint, PROJECT_ID_HINTS_FILE, reconcileMemoryEntries, nextSyncBaseline, mergeRecallHits, type MemorySyncCursor, type MemorySyncConflict, type MemorySyncPlan, type RecallSource, syncMemoryScope, type MemorySyncTransport, type MemorySyncRequestBody, type MemorySyncResponseBody, type MemorySyncClientConflict, type SyncMemoryScopeOptions, type MemorySyncClientResult, } from "./core/memory-engine/index.js";
 export { SHARED_MEMORY_READ_CAP_BYTES, SHARED_MEMORY_LIST_PAGE_SIZE, SharedMemoryStoreError, type SharedMemoryStoreProvider, type SharedMemoryStoreReader, type SharedMemoryPagedList, type SharedMemoryStoreInfo, type SharedMemoryDocumentEntry, type SharedMemorySnapshot, type SharedMemoryRequestContext, type MemoryListDetails, type MemoryReadDetails, } from "./core/shared-memory/types.js";
 export { sharedMemoryStoreContract, type SharedMemoryFixture, type SharedMemoryStoreContractHooks, } from "./core/shared-memory/contract.js";
 export { termSet, jaccardDistance, cosineDistance } from "./core/memory-vector.js";

package/dist/internal/harness.d.ts

@@ -25,3 +25,4 @@ export { uuidv7 } from "../engine/session/uuid.js";
 export { SessionError } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";
+export { isSyntheticApiErrorMessage } from "../engine/harness/types.js";

package/dist/internal/harness.js

@@ -14,3 +14,4 @@ export { uuidv7 } from "../engine/session/uuid.js";
 export { SessionError } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";
+export { isSyntheticApiErrorMessage } from "../engine/harness/types.js";

package/dist/orchestration/builtin-workflows.d.ts

@@ -22,12 +22,17 @@ import type { NamedWorkflowListing } from "./workflow-script-store.js";
 /** The built-in round-based discussion workflow's registered name. */
 export declare const DISCUSSION_WORKFLOW_NAME = "discussion";
 /**
- * The registered name this built-in carried before the C-R14 vocabulary ruling (2026-08-16), kept
- * resolvable for ONE minor: "team" now names the agent-teams family (persistent named teammates) only,
- * and a one-off multi-agent debate is a "discussion".
+ * The registered name this built-in carried before the C-R14 vocabulary ruling (2026-08-16): "team" now
+ * names the agent-teams family (persistent named teammates) only, and a one-off multi-agent debate is a
+ * "discussion".
  *
- * @deprecated Use {@link DISCUSSION_WORKFLOW_NAME}. Removed in the next minor; the retired spelling still
- * RESOLVES via {@link canonicalWorkflowName} until then, but the listing/card face shows the new name only.
+ * RETENTION, as a fact rather than a plan: the ruling's original "kept resolvable for ONE minor" window
+ * LAPSED. The alias has stayed on the public export surface from the 5.37.0 window through 7.x, across
+ * BOTH the 6.0.0 and 7.0.0 BREAKING windows. It is therefore retained until a removal is announced in a
+ * named BREAKING window's ship post — no minor removes it by default.
+ *
+ * @deprecated Use {@link DISCUSSION_WORKFLOW_NAME}. The retired spelling still RESOLVES via
+ * {@link canonicalWorkflowName}, but the listing/card face shows the new name only.
  */
 export declare const TEAM_DISCUSSION_WORKFLOW_NAME = "discussion";
 /**
@@ -35,7 +40,8 @@ export declare const TEAM_DISCUSSION_WORKFLOW_NAME = "discussion";
  * retired alias. The canonical name is the authority: a resolution reached through an alias returns the
  * canonical definition (its `meta.name`, hence every run/card projection, is the new name).
  *
- * @deprecated together with the alias table — this becomes an identity function next minor (C-R14).
+ * @deprecated together with the alias table — it becomes an identity function when that table is removed
+ * in an announced BREAKING window (C-R14).
  */
 export declare function canonicalWorkflowName(name: string): string;
 /**
@@ -72,7 +78,8 @@ export declare function retiredWorkflowNameAliases(canonicalName: string): strin
  * Callers must apply the deployment's `builtinWorkflows` opt-out BEFORE using this: the equivalence is a
  * fact about the built-in registry, so a deployment that removed the built-ins removed the alias with them.
  *
- * @deprecated together with the alias table — collapses to `[requested]` next minor (C-R14).
+ * @deprecated together with the alias table — collapses to `[requested]` when that table is removed in an
+ * announced BREAKING window (C-R14).
  */
 export declare function workflowNameProbeOrder(requested: string): string[];
 /**
@@ -82,8 +89,9 @@ export declare function workflowNameProbeOrder(requested: string): string[];
  */
 export declare const DISCUSSION_SCRIPT = "export const meta = {\n  name: \"discussion\",\n  description: \"Round-based discussion: configurable members debate a topic across rounds (each member sees the transcript so far), then a finalizer synthesizes a structured verdict.\",\n  whenToUse: \"Use for a genuinely contested question that benefits from several perspectives arguing across rounds - design trade-offs, plan or risk reviews, adversarial critique of a proposal. Do NOT use it for a single factual question, a task with one obvious answer, or a budget-sensitive run: every round costs one agent call per member, so a discussion is never cheaper than asking once. args (all optional): { topic, members?: [{ role, prompt?, model? }], rounds?, finalizer?: { prompt?, model? } }. Hard ceilings: members is capped at 6 and rounds is capped at 5 regardless of what you pass; the run reports it via log() and a capped field on the result when a request exceeds either.\",\n  phases: [\n    { title: \"Discussion\" },\n    { title: \"Synthesis\" },\n  ],\n};\n// Zero-config runnable (design/140 \u00A76 1c): every arg has an opinionated fallback.\nconst raw = args;\nconst a = raw !== null && typeof raw === \"object\" && !Array.isArray(raw) ? raw : {};\nconst topic =\n  typeof a.topic === \"string\" && a.topic.trim() !== \"\"\n    ? a.topic\n    : typeof raw === \"string\" && raw.trim() !== \"\"\n      ? raw // ergonomic form: a bare string args IS the topic\n      : \"No topic was provided. Discuss: what information should a caller supply to make a discussion like this productive, and when should they NOT convene one?\";\nconst defaultMembers = [\n  { role: \"advocate\", prompt: \"Make the strongest constructive case. Propose concrete options and argue their benefits with specifics.\" },\n  { role: \"skeptic\", prompt: \"Stress-test every claim made so far. Surface risks, hidden costs, failure modes, and cheaper alternatives.\" },\n];\nconst rawMembers = Array.isArray(a.members) && a.members.length > 0 ? a.members : defaultMembers;\nconst members = rawMembers.slice(0, 6).map((m, i) => {\n  const mm = m !== null && typeof m === \"object\" ? m : {};\n  const member = {\n    role: typeof mm.role === \"string\" && mm.role.trim() !== \"\" ? mm.role : \"member-\" + (i + 1),\n    prompt: typeof mm.prompt === \"string\" && mm.prompt.trim() !== \"\" ? mm.prompt : \"Contribute your own distinct perspective: be concrete, give reasons, and engage with what others said.\",\n  };\n  if (typeof mm.model === \"string\" && mm.model.trim() !== \"\") member.model = mm.model;\n  // Slot-tools carrier (design/140 \u2461-3 + F4): a member may BE a registered agent type ({agent:\"reviewer\"}) \u2014\n  // persona/tools/model then come from the deployment's AgentDefinition (role library), args stay thin.\n  if (typeof mm.agent === \"string\" && mm.agent.trim() !== \"\") member.agent = mm.agent;\n  return member;\n});\n// Deterministic budget truncation (design/140 \u00A71 \u9884\u7B97 row): a HARD rounds ceiling + member cap \u2014 never an\n// evaluator agent. The engine's budget/maxAgents hard stops remain the backstop.\nconst requestedRounds = Math.floor(Number(a.rounds));\nconst normalizedRounds = Number.isFinite(requestedRounds) && requestedRounds >= 1 ? requestedRounds : 2;\nconst rounds = Math.min(normalizedRounds, 5);\n// RB-380 disclosure: the member/round slices above are silent by construction (Array.prototype.slice /\n// Math.min just drop the excess) \u2014 record + surface it instead of a caller finding out only by counting\n// transcript entries. Fires only when a request actually exceeded a ceiling (never on the common path).\nconst capNotes = [];\nif (rawMembers.length > 6) capNotes.push(\"requested \" + rawMembers.length + \" members, capped at 6\");\nif (normalizedRounds > 5) capNotes.push(\"requested \" + normalizedRounds + \" rounds, capped at 5\");\nfor (const note of capNotes) log(\"discussion: \" + note);\nconst fin = a.finalizer !== null && typeof a.finalizer === \"object\" && !Array.isArray(a.finalizer) ? a.finalizer : {};\nconst finalizerPrompt = typeof fin.prompt === \"string\" && fin.prompt.trim() !== \"\"\n  ? fin.prompt\n  : \"You are the synthesis lead. Read the full discussion transcript and produce the final verdict: the decision/answer, the key supporting points, and the strongest unresolved dissent (if any). Do not introduce new arguments of your own.\";\nconst clip = (s) => { const t = String(s); return t.length > 4000 ? t.slice(0, 4000) + \" ...[truncated]\" : t; };\nconst isBudgetStop = (e) => e !== null && typeof e === \"object\" && e.code === \"workflow.budget_exceeded\";\n\nphase(\"Discussion\");\nconst transcript = [];\nlet truncated = null;\nfor (let r = 1; r <= rounds && truncated === null; r++) {\n  // Deterministic early stop on an exhausted budget (a live read of the engine budget; the engine's\n  // hard WorkflowBudgetExceededError remains the backstop if a member call itself crosses the line).\n  if (budget.total !== null && budget.remaining() <= 0) { truncated = \"budget exhausted before round \" + r; break; }\n  for (const m of members) {\n    const history = transcript.length === 0 ? \"(none yet - you open the discussion)\" : transcript.join(\"\\n\\n\");\n    const spec = {\n      objective:\n        \"Discussion on: \" + topic + \"\\n\\n\" +\n        'You are \"' + m.role + '\" in round ' + r + \" of \" + rounds + \".\\n\" +\n        \"Your brief: \" + m.prompt + \"\\n\\n\" +\n        \"Transcript so far:\\n\" + history + \"\\n\\n\" +\n        \"Respond to the strongest points others made (do not repeat yourself), then advance your own position. Be concise: a few tight paragraphs at most.\",\n    };\n    if (m.model !== undefined) spec.modelName = m.model;\n    let res;\n    try {\n      res = await agent(spec, m.agent !== undefined ? { label: m.role + \"-r\" + r, phase: \"Discussion\", agentType: m.agent } : { label: m.role + \"-r\" + r, phase: \"Discussion\" });\n    } catch (e) {\n      // The engine's budget hard stop: keep what the discussion already produced instead of failing the run.\n      if (isBudgetStop(e)) { truncated = \"budget exhausted at \" + m.role + \", round \" + r; break; }\n      throw e;\n    }\n    const text = res && res.status === \"completed\" ? clip(res.result) : \"(no contribution - agent ended \" + (res ? res.status : \"unknown\") + \")\";\n    transcript.push(m.role + \" (round \" + r + \"): \" + text);\n  }\n}\n\nphase(\"Synthesis\");\nconst finalSpec = {\n  objective:\n    finalizerPrompt + \"\\n\\nTopic: \" + topic + \"\\n\\nFull transcript:\\n\" +\n    (transcript.length === 0 ? \"(the discussion produced no contributions)\" : transcript.join(\"\\n\\n\")) +\n    (truncated ? \"\\n\\nNote: the discussion was cut short (\" + truncated + \").\" : \"\"),\n};\nif (typeof fin.model === \"string\" && fin.model.trim() !== \"\") finalSpec.modelName = fin.model;\nlet verdict = null;\ntry {\n  verdict = await agent(finalSpec, {\n    label: \"finalizer\",\n    phase: \"Synthesis\",\n    schema: {\n      type: \"object\",\n      properties: {\n        decision: { type: \"string\", description: \"The final answer/decision, one paragraph.\" },\n        keyPoints: { type: \"array\", items: { type: \"string\" }, description: \"The strongest supporting points from the discussion.\" },\n        dissent: { type: \"string\", description: \"The strongest unresolved counter-position, if any.\" },\n      },\n      required: [\"decision\", \"keyPoints\"],\n    },\n  });\n} catch (e) {\n  // Budget died before synthesis: return the transcript honestly rather than failing the whole run.\n  if (!isBudgetStop(e)) throw e;\n  truncated = truncated === null ? \"budget exhausted before synthesis\" : truncated;\n}\n\nreturn {\n  topic,\n  rounds,\n  members: members.map((m) => m.role),\n  ...(capNotes.length > 0 ? { capped: capNotes } : {}),\n  ...(truncated ? { truncated } : {}),\n  transcript,\n  verdict: verdict && verdict.structuredOutput !== undefined ? verdict.structuredOutput : (verdict ? verdict.result : null),\n};\n";
 /**
- * @deprecated Use {@link DISCUSSION_SCRIPT}. Retired spelling kept for one minor (C-R14) so a deployment
- * importing the constant by its old name keeps compiling; the value is the SAME script (its `meta.name`
+ * @deprecated Use {@link DISCUSSION_SCRIPT}. Retired spelling retained (C-R14; the original one-minor
+ * window lapsed — removal needs an announced BREAKING window) so a deployment importing the constant by
+ * its old name keeps compiling; the value is the SAME script (its `meta.name`
  * is the new `discussion`).
  */
 export declare const TEAM_DISCUSSION_SCRIPT = "export const meta = {\n  name: \"discussion\",\n  description: \"Round-based discussion: configurable members debate a topic across rounds (each member sees the transcript so far), then a finalizer synthesizes a structured verdict.\",\n  whenToUse: \"Use for a genuinely contested question that benefits from several perspectives arguing across rounds - design trade-offs, plan or risk reviews, adversarial critique of a proposal. Do NOT use it for a single factual question, a task with one obvious answer, or a budget-sensitive run: every round costs one agent call per member, so a discussion is never cheaper than asking once. args (all optional): { topic, members?: [{ role, prompt?, model? }], rounds?, finalizer?: { prompt?, model? } }. Hard ceilings: members is capped at 6 and rounds is capped at 5 regardless of what you pass; the run reports it via log() and a capped field on the result when a request exceeds either.\",\n  phases: [\n    { title: \"Discussion\" },\n    { title: \"Synthesis\" },\n  ],\n};\n// Zero-config runnable (design/140 \u00A76 1c): every arg has an opinionated fallback.\nconst raw = args;\nconst a = raw !== null && typeof raw === \"object\" && !Array.isArray(raw) ? raw : {};\nconst topic =\n  typeof a.topic === \"string\" && a.topic.trim() !== \"\"\n    ? a.topic\n    : typeof raw === \"string\" && raw.trim() !== \"\"\n      ? raw // ergonomic form: a bare string args IS the topic\n      : \"No topic was provided. Discuss: what information should a caller supply to make a discussion like this productive, and when should they NOT convene one?\";\nconst defaultMembers = [\n  { role: \"advocate\", prompt: \"Make the strongest constructive case. Propose concrete options and argue their benefits with specifics.\" },\n  { role: \"skeptic\", prompt: \"Stress-test every claim made so far. Surface risks, hidden costs, failure modes, and cheaper alternatives.\" },\n];\nconst rawMembers = Array.isArray(a.members) && a.members.length > 0 ? a.members : defaultMembers;\nconst members = rawMembers.slice(0, 6).map((m, i) => {\n  const mm = m !== null && typeof m === \"object\" ? m : {};\n  const member = {\n    role: typeof mm.role === \"string\" && mm.role.trim() !== \"\" ? mm.role : \"member-\" + (i + 1),\n    prompt: typeof mm.prompt === \"string\" && mm.prompt.trim() !== \"\" ? mm.prompt : \"Contribute your own distinct perspective: be concrete, give reasons, and engage with what others said.\",\n  };\n  if (typeof mm.model === \"string\" && mm.model.trim() !== \"\") member.model = mm.model;\n  // Slot-tools carrier (design/140 \u2461-3 + F4): a member may BE a registered agent type ({agent:\"reviewer\"}) \u2014\n  // persona/tools/model then come from the deployment's AgentDefinition (role library), args stay thin.\n  if (typeof mm.agent === \"string\" && mm.agent.trim() !== \"\") member.agent = mm.agent;\n  return member;\n});\n// Deterministic budget truncation (design/140 \u00A71 \u9884\u7B97 row): a HARD rounds ceiling + member cap \u2014 never an\n// evaluator agent. The engine's budget/maxAgents hard stops remain the backstop.\nconst requestedRounds = Math.floor(Number(a.rounds));\nconst normalizedRounds = Number.isFinite(requestedRounds) && requestedRounds >= 1 ? requestedRounds : 2;\nconst rounds = Math.min(normalizedRounds, 5);\n// RB-380 disclosure: the member/round slices above are silent by construction (Array.prototype.slice /\n// Math.min just drop the excess) \u2014 record + surface it instead of a caller finding out only by counting\n// transcript entries. Fires only when a request actually exceeded a ceiling (never on the common path).\nconst capNotes = [];\nif (rawMembers.length > 6) capNotes.push(\"requested \" + rawMembers.length + \" members, capped at 6\");\nif (normalizedRounds > 5) capNotes.push(\"requested \" + normalizedRounds + \" rounds, capped at 5\");\nfor (const note of capNotes) log(\"discussion: \" + note);\nconst fin = a.finalizer !== null && typeof a.finalizer === \"object\" && !Array.isArray(a.finalizer) ? a.finalizer : {};\nconst finalizerPrompt = typeof fin.prompt === \"string\" && fin.prompt.trim() !== \"\"\n  ? fin.prompt\n  : \"You are the synthesis lead. Read the full discussion transcript and produce the final verdict: the decision/answer, the key supporting points, and the strongest unresolved dissent (if any). Do not introduce new arguments of your own.\";\nconst clip = (s) => { const t = String(s); return t.length > 4000 ? t.slice(0, 4000) + \" ...[truncated]\" : t; };\nconst isBudgetStop = (e) => e !== null && typeof e === \"object\" && e.code === \"workflow.budget_exceeded\";\n\nphase(\"Discussion\");\nconst transcript = [];\nlet truncated = null;\nfor (let r = 1; r <= rounds && truncated === null; r++) {\n  // Deterministic early stop on an exhausted budget (a live read of the engine budget; the engine's\n  // hard WorkflowBudgetExceededError remains the backstop if a member call itself crosses the line).\n  if (budget.total !== null && budget.remaining() <= 0) { truncated = \"budget exhausted before round \" + r; break; }\n  for (const m of members) {\n    const history = transcript.length === 0 ? \"(none yet - you open the discussion)\" : transcript.join(\"\\n\\n\");\n    const spec = {\n      objective:\n        \"Discussion on: \" + topic + \"\\n\\n\" +\n        'You are \"' + m.role + '\" in round ' + r + \" of \" + rounds + \".\\n\" +\n        \"Your brief: \" + m.prompt + \"\\n\\n\" +\n        \"Transcript so far:\\n\" + history + \"\\n\\n\" +\n        \"Respond to the strongest points others made (do not repeat yourself), then advance your own position. Be concise: a few tight paragraphs at most.\",\n    };\n    if (m.model !== undefined) spec.modelName = m.model;\n    let res;\n    try {\n      res = await agent(spec, m.agent !== undefined ? { label: m.role + \"-r\" + r, phase: \"Discussion\", agentType: m.agent } : { label: m.role + \"-r\" + r, phase: \"Discussion\" });\n    } catch (e) {\n      // The engine's budget hard stop: keep what the discussion already produced instead of failing the run.\n      if (isBudgetStop(e)) { truncated = \"budget exhausted at \" + m.role + \", round \" + r; break; }\n      throw e;\n    }\n    const text = res && res.status === \"completed\" ? clip(res.result) : \"(no contribution - agent ended \" + (res ? res.status : \"unknown\") + \")\";\n    transcript.push(m.role + \" (round \" + r + \"): \" + text);\n  }\n}\n\nphase(\"Synthesis\");\nconst finalSpec = {\n  objective:\n    finalizerPrompt + \"\\n\\nTopic: \" + topic + \"\\n\\nFull transcript:\\n\" +\n    (transcript.length === 0 ? \"(the discussion produced no contributions)\" : transcript.join(\"\\n\\n\")) +\n    (truncated ? \"\\n\\nNote: the discussion was cut short (\" + truncated + \").\" : \"\"),\n};\nif (typeof fin.model === \"string\" && fin.model.trim() !== \"\") finalSpec.modelName = fin.model;\nlet verdict = null;\ntry {\n  verdict = await agent(finalSpec, {\n    label: \"finalizer\",\n    phase: \"Synthesis\",\n    schema: {\n      type: \"object\",\n      properties: {\n        decision: { type: \"string\", description: \"The final answer/decision, one paragraph.\" },\n        keyPoints: { type: \"array\", items: { type: \"string\" }, description: \"The strongest supporting points from the discussion.\" },\n        dissent: { type: \"string\", description: \"The strongest unresolved counter-position, if any.\" },\n      },\n      required: [\"decision\", \"keyPoints\"],\n    },\n  });\n} catch (e) {\n  // Budget died before synthesis: return the transcript honestly rather than failing the whole run.\n  if (!isBudgetStop(e)) throw e;\n  truncated = truncated === null ? \"budget exhausted before synthesis\" : truncated;\n}\n\nreturn {\n  topic,\n  rounds,\n  members: members.map((m) => m.role),\n  ...(capNotes.length > 0 ? { capped: capNotes } : {}),\n  ...(truncated ? { truncated } : {}),\n  transcript,\n  verdict: verdict && verdict.structuredOutput !== undefined ? verdict.structuredOutput : (verdict ? verdict.result : null),\n};\n";

package/dist/orchestration/run-workflow-tool.d.ts

@@ -245,7 +245,15 @@ export interface RunWorkflowToolDeps {
             sessionId: string;
             controlDir?: string;
         }>;
-    };
+    } | Promise<{
+        optedOut: boolean;
+        indeterminate: boolean;
+        controlDir?: string;
+        ancestors?: ReadonlyArray<{
+            sessionId: string;
+            controlDir?: string;
+        }>;
+    }>;
     /** TRUSTED nesting depth from the run's internals (NOT a tool param) — passed to `startWorkflow` so a
      *  cross-process child workflow is rejected by the one-level guard. */
     workflowDepth?: number;