@sema-agent/core 7.0.2 → 7.1.0

package/dist/core/types.d.ts

@@ -3941,8 +3941,11 @@ export interface TaskEventIdentity {
 }
 /**
  * design/99 §E3/§E10 — a BRAIN-LAYER liveness phase, surfaced so a UI can show why a
- * turn is stalled (the brain otherwise absorbs these silently in its connect/retry loop). Provider-NEUTRAL:
- * carries only the graduated phase + a neutral hint, NEVER an HTTP status / provider taxonomy / stop_reason.
+ * turn is stalled (the brain otherwise absorbs these silently in its connect/retry loop). The PHASE
+ * itself is provider-NEUTRAL — a graduated bucket this engine mints, never a provider taxonomy or a
+ * `stop_reason`. The one provider-stated number that does cross this channel is the failing attempt's
+ * HTTP status, and it travels on its own named seat ({@link BrainStatus.errorStatus}) in the retry
+ * context only; the phase and the {@link BrainStatus.detail} hint stay free of it.
  * A CLOSED union (type-safe) covering the core brain layer; a deployment that surfaces its OWN states
  * (e.g. E25 token-refresh `authenticating`) does so on its own channel, not by widening this.
  */
@@ -3960,8 +3963,10 @@ export type BrainStatusPhase = "rate_limited" | "retrying" | "reconnecting" | "c
  * WHY a retry wait is happening, as a closed, provider-NEUTRAL bucket — the companion to
  * {@link BrainStatusPhase}, which says what the brain is doing about it. A consumer rendering an
  * unattended progress line ("no answer for three minutes") needs the reason, and until this existed the
- * only carriers of it were the HTTP status and the syscall code, neither of which may cross this
- * channel. Values are about the SHAPE of the failure, never its provider taxonomy:
+ * only carriers of it were the HTTP status and the syscall code, neither of which crossed this channel
+ * at the time. (The status has since gained its own seat, {@link BrainStatus.errorStatus}; this bucket
+ * remains the reason a consumer RENDERS, and it is the only carrier for the transport classes, which
+ * have no status at all.) Values are about the SHAPE of the failure, never its provider taxonomy:
  *  - `connect_refused` — the attempt got a definite negative about the target itself (nothing accepts
  *    at that address, or the name has no address). This is the class the SHORT retry lane serves.
  *  - `transport`      — any other transport-level failure: a connect timeout, a reset, a mid-stream
@@ -3977,7 +3982,11 @@ export type BrainRetryErrClass = "connect_refused" | "transport" | "rate_limit"
 /** design/99 §E3/§E10 — the payload of a {@link TaskEvent} `status` event (and the brain→runner signal). */
 export interface BrainStatus {
     phase: BrainStatusPhase;
-    /** Optional neutral, human-readable hint (NO provider/HTTP detail). */
+    /** Optional neutral, human-readable hint. Stays free of provider/HTTP detail even now that
+     *  {@link errorStatus} exists: the machine-readable status has its own seat, and interpolating it
+     *  into the prose too would make one fact travel in two spellings a consumer has to reconcile.
+     *  (CC parity: its own retry banner renders a TRANSLATED sentence — "No response from API",
+     *  "Connection dropped" — while the raw status rides the structured key beside it.) */
     detail?: string;
     /** Seconds until the brain's next retry attempt (from the honored backoff / `Retry-After`), when known. */
     retryInSec?: number;
@@ -4015,6 +4024,41 @@ export interface BrainStatus {
      *  the engine classified; absent on frames that are not a retry wait (`recovered`/`gave_up`) and on a
      *  `circuit_open` fast-fail, which is a local verdict rather than an observed failure. */
     errClass?: BrainRetryErrClass;
+    /**
+     * #506 ㋑ — the HTTP status of the attempt that just failed, on the frame announcing the RETRY of it.
+     * The one provider-stated number this channel carries; everything else about the failure still
+     * crosses as the engine's own graduated buckets ({@link phase} / {@link errClass}).
+     *
+     * WHY IT IS HERE AT ALL, given the channel spent its life refusing it: a UI that must tell an
+     * operator whether to wait or to go fix something needs the status, and the two neutral buckets
+     * cannot supply it — `rate_limit` covers a 429 the provider will clear on its own AND a 429 that
+     * means the account is out of quota, and `server` covers a 500 alongside a 503 behind a load
+     * balancer. CC states the same number on the same occasion (`system/api_retry.error_status`, read
+     * off `APIError.status`), so a serving layer forwarding this frame no longer has to choose between
+     * matching CC's payload and honoring this channel's contract.
+     *
+     * PRESENCE — an api_retry context whose attempt got a response that NAMES the failure, and nothing
+     * else. Present on the connect-ladder retry wait (`rate_limited` / `retrying` / `reconnecting` when
+     * a response came back) and on the output-cap re-send (the provider's own 400). ABSENT — never
+     * zeroed, never null — for:
+     *   · a transport failure (`connect_refused` / `transport` at the connect leg): no response existed,
+     *     so no status was ever stated. This is the arm CC spells as an explicit `null`; here it is
+     *     absence, for the same reason every other seat on this interface uses absence, and the fact is
+     *     still TOTAL rather than guessable — {@link errClass} names those two classes by construction.
+     *   · a mid-stream tear (tiers B/C): its response's own status was a SUCCESS, and a status that
+     *     failed nothing must not be published as the cause of a retry.
+     *   · a `circuit_open` fast-fail: a local verdict, nothing was sent, nobody answered.
+     *   · the terminal `recovered` / `gave_up` frames: they announce no attempt.
+     * Same "only a status that names the failure travels" predicate as the assistant frame's
+     * {@link AssistantMessage.apiErrorStatus} (one helper, both sites) — a 2xx never travels here either,
+     * which is reachable on this path via a provider's own `x-should-retry` verdict on a success status.
+     *
+     * OPTIONAL, not CC's nullable-REQUIRED, and the difference is CC's own: CC dedicates a whole message
+     * (`system/api_retry`) to the retry occasion and can therefore require the key on it, while this
+     * interface is ONE shape shared by every phase — the same geometry as CC's shared
+     * `control_request_progress` frame, where CC itself makes the key optional.
+     */
+    errorStatus?: number;
 }
 /**
  * design/97 CORE-8 (③): one lightweight TOOL-ACTIVITY beat surfaced from a running task, for a per-agent live
@@ -4575,7 +4619,9 @@ export type TaskEvent = ({
      * silently (a 429 rate-limit / a 5xx or network retry / a reconnect / an open circuit breaker). Emitted
      * the moment the brain decides to wait/retry, carrying the graduated {@link BrainStatusPhase} + an
      * optional `retryInSec` so a UI can show "rate limited, retrying in Ns". EPHEMERAL — a pure liveness
-     * signal, never persisted or replayed on resume. Provider-neutral (no HTTP status / stop_reason).
+     * signal, never persisted or replayed on resume. The phase and the hint are provider-neutral (no
+     * provider taxonomy, no `stop_reason`); the failing attempt's HTTP status rides its own seat in the
+     * retry context only — see {@link BrainStatus.errorStatus}.
      * SCOPE: reflects THIS task's own (top-level) brain calls. A delegated sub-agent's brain liveness routes
      * to the SUB-AGENT's own stream (isolated, like every child event — §E2); a background internal brain
      * call (memory recall/consolidation) is intentionally not surfaced.
@@ -5168,9 +5214,15 @@ export interface WorkflowGovernanceBaseline {
      * The allowed model NAMES an LLM-authored script may pick (design/98 §2.5 新洞2). A script gives a
      * `modelName` string (never a `Model` object — that carries `baseUrl`/`headers` = exfil); the engine
      * resolves it against this list to a deploy-configured `Model` (the script never sees the object).
-     * **FAIL-CLOSED**: `undefined`/empty ⇒ the script CANNOT pick a model (its `modelName` is rejected → the
-     * child falls back to the workflow's default role). NEVER fail-open to the whole `models` catalog for an
-     * LLM-authored workflow.
+     * **FAIL-CLOSED**: `undefined`/empty ⇒ the script CANNOT pick a model — a spec that names `modelName`
+     * THROWS `WorkflowModelNotAllowedError` and the child is never spawned. The refusal is loud, not a
+     * silent downgrade: the script asked for a model it may not have, so the agent call FAILS rather than
+     * quietly running on the workflow's default role (a script that wants the default must simply OMIT
+     * the field). The same throw covers a name that is off the list, and a listed name the `models`
+     * catalog does not hold — so the legal set is the INTERSECTION of this list and the catalog keys
+     * (note the catalog is the Runner's TIER-EXPANDED one, so on a deployment with `RunnerDeps.tiers`
+     * the tier words and CC aliases are catalog keys here too, still gated by this list).
+     * NEVER fail-open to the whole `models` catalog for an LLM-authored workflow.
      */
     workflowModelAllowlist?: string[];
 }
@@ -5749,6 +5801,32 @@ export interface EngineNotice {
      *    implemented, so the unhonored-knob disclosure it carried has no referent; consumers must
      *    judge ladder support by VERSION, never by that code's absence.
      *
+     *  - `"task.halt_unconsumed"` (design/384 slice 1) — the user's stop verb ({@link TaskStream.halt})
+     *    was ANSWERED (not refused) while the run's ending was already owned by its own abort: nothing
+     *    was cut and nothing was stopped by the halt, the run's own ending stands, and the result will
+     *    NOT carry `haltedByUser` for it (the attribution seat never signs someone else's stop). This
+     *    notice is the halt's only trace on that arm — without it the verb receipt (`{turnCut:false}`)
+     *    was the sole record and the caller could not tell "my stop did nothing because the run beat
+     *    me to ending" from "my stop is being honored at the next boundary". Minted once per such verb
+     *    call (each arrival is a distinct fact); `detail: { sessionId, runId, taskId? }` — `runId` is
+     *    the run whose ending the halt failed to claim. Audience `"user"` (the person who pressed
+     *    stop). A REFUSED halt (typed `steering.not_running` throw) mints nothing: the refusal itself
+     *    is the loud answer.
+     *
+     *  - `"task.late_approval"` (design/384 slice 1) — a synchronous ask approval was NOT CONSUMED:
+     *    a run or turn interrupt released the wait (the `resolveAsk` race arm detached the approver's
+     *    promise; an unconsumed resolve is the approver releasing its wait, never a verdict), so the
+     *    tool did NOT run and the approval was not honored. The notice asserts non-consumption ONLY —
+     *    never an arrival order: an approval and an abort settling close together read as the abort
+     *    (the resolver's documented one-directional residual — the engine never claims a person
+     *    decided something it cannot show they did, and it equally never claims which came first).
+     *    Minted only for a value that reads as an APPROVAL — an unconsumed
+     *    deny/refusal is an ordinary release and leaves no trace, and an unconsumed REJECTION goes to
+     *    `onError(phase:"hook")` instead (a failing callback, not an answer). One notice per
+     *    unconsumed approval; `detail: { toolName, toolCallId, sessionId, runId, taskId? }`. Audience `"user"`
+     *    (whoever answered the card is the one entitled to hear the answer ran nothing); a host may
+     *    forward it on its own wire.
+     *
      *  - `"steering.parked_input_blocked"` (design/373 §4.3) — a PARKED steer entry was withheld when
      *    a resume redelivered it (any resume kind that drains parked steers — wake included) by the
      *    deployment's `userPromptSubmit` screen (block verdict, or a fail-closed non-answer/crash):

package/dist/engine/compaction/compaction.js

@@ -1,7 +1,7 @@
 import { resolveAgentCoreCompleteFn, } from "../loop/runtime-deps.js";
 import { asAgentMessage, convertToLlm, createCompactionSummaryMessage, createCustomMessage, } from "../harness/messages.js";
 import { buildSessionContext } from "../session/session.js";
-import { CompactionError, err, ok, } from "../harness/types.js";
+import { CompactionError, err, isSyntheticApiErrorMessage, ok, } from "../harness/types.js";
 import { budgetInvokedSkillsRetention, computeFileLists, createFileOps, extractFileOpsFromMessage, extractInvokedSkills, extractPersistedOutputRefs, formatFileOperations, formatPersistedOutputRefs, PERSISTED_OUTPUT_REFS_MAX_ENTRIES, readElidedMessages, readPersistedOutputRefs, readRetainedInvokedSkills, readUnsummarizedMessages, replaceInvokedSkillBodiesForSummary, serializeConversation, stripFileOperationsFooter, } from "./utils.js";
 import { ENGINE_AUTHORITY_ENVELOPE_TAGS, sanitizeUntrustedText } from "../../core/untrusted-text.js";
 import { sliceHeadSafe } from "../../core/surrogate-safe-slice.js";
@@ -223,9 +223,13 @@ function findValidCutPoints(entries, startIndex, endIndex) {
                     case "custom":
                     case "compactionSummary":
                     case "user":
-                    case "assistant":
                         cutPoints.push(i);
                         break;
+                    case "assistant":
+                        if (!isSyntheticApiErrorMessage(entry.message)) {
+                            cutPoints.push(i);
+                        }
+                        break;
                     case "toolResult":
                         break;
                 }

package/dist/engine/harness/agent-harness.d.ts

@@ -168,16 +168,17 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
      *  gated: its splice opens a NEW run (idle-park redelivery), and a halt belongs to the run that
      *  minted it. */
     engineInjectionsHeld?: () => boolean;
-    /** RB-30: shared recovery sweep — collects engine-note payloads from the given queues
-     *  in DELIVERY order (steer before followUp, each queue forward — the live loop serves steering
-     *  first, so the recovered redelivery must not present "later" frames ahead of "now/next"),
-     *  removes those entries, and hands the payloads to the runner sink. Called from BOTH terminal
-     *  paths: the natural agent_end AND abort() (which clears the queues before agent_end would see
-     *  them — the hard-abort race that round-1 shipped would have lost). */
     /** RB-30 R2 belt-and-braces: runner-callable idempotent recovery for exit paths that reach
      *  neither agent_end nor abort() (a pre-prompt throw after prepare). Swept entries are removed,
      *  so a double call is a no-op. */
     recoverUndrainedEngineNotes(): void;
+    /** RB-30: shared recovery sweep — collects engine-note payloads from the given queues
+     *  in DELIVERY order (steer before followUp, each queue forward — the live loop serves steering
+     *  first, so the recovered redelivery must not present "later" frames ahead of "now/next"),
+     *  removes those entries, and hands the payloads to the runner sink. Called from BOTH terminal
+     *  paths: the natural agent_end AND abort() — which does NOT clear the queues: #389 retired that
+     *  clearing, so they are LEFT STANDING (the durable-park migration reads them AFTER abort()
+     *  returns) and the abort-side pass is the belt for an exit that never reached agent_end. */
     private sweepUndrainedEngineNotes;
     /** backlog #259 — what remains in the steer/follow-up queues AFTER the engine-note sweep is USER
      *  input that was accepted ("queued") and will never be consumed: the run reached agent_end first.
@@ -261,6 +262,27 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     setStopGate(gate: (() => Promise<AgentMessage[]>) | undefined): void;
     private validateToolNames;
     private flushPendingSessionWrites;
+    /**
+     * #506 ㋐ — write the transcript's record of a TERMINAL provider failure (CC 2.1.250 parity, `Oo`/`CIt`).
+     *
+     * A SEPARATE object, never the live frame: `failure` is the engine's terminal error shell and every
+     * other consumer of it (the run result, failover, telemetry, usage accounting) reads its real
+     * `model`, so re-stamping that field in place would corrupt all of them. The record is minted here
+     * with the reserved {@link SYNTHETIC_MESSAGE_MODEL} instead, which is what makes it recognizable — and
+     * therefore droppable — at the request boundary and at the derived-state walks.
+     *
+     * Two CC fields are deliberately NOT copied, because this tree already states the same facts more
+     * honestly: CC writes `stop_reason: "stop_sequence"` on an entry that stopped for no such reason (its
+     * own consumers must read `isApiErrorMessage` to know better), and CC writes a zero `usage` with
+     * nothing marking it synthetic. Here the stop reason stays `"error"` and `usageMissing` says the zeros
+     * are a shell rather than a measurement — the same discipline the live frame already carries.
+     *
+     * BEST-EFFORT: a record of a failure must never become a second failure. The append can lose the
+     * session's optimistic lock (another writer moved the leaf) or hit a storage fault, and the run is
+     * already over — swallowing that leaves the pre-#506 behavior (no record) rather than converting a
+     * provider outage into a harness throw on the teardown path.
+     */
+    private recordApiFailure;
     private handleAgentEvent;
     private emitRunFailure;
     private executeTurn;

package/dist/engine/harness/agent-harness.js

@@ -4,7 +4,8 @@ import { resolveAgentCoreStreamFn } from "../loop/runtime-deps.js";
 import { normalizeEngineSegments } from "../../core/untrusted-text.js";
 import { AUTH_CARRIER_NAMES } from "../../brain/request-params.js";
 import { convertToLlm } from "./messages.js";
-import { AgentHarnessError, CompactionError, SessionError, toError, } from "./types.js";
+import { AgentHarnessError, CompactionError, SessionError, SYNTHETIC_MESSAGE_MODEL, toError, } from "./types.js";
+const API_FAILURE_RECORD_MAX_CHARS = 2000;
 function createUserMessage(text, images, provenance) {
     const content = text.length > 0 ? [{ type: "text", text }] : [];
     if (images) {
@@ -603,12 +604,13 @@ export class AgentHarness {
                     },
                 };
             },
-            beforeToolCall: async ({ toolCall, args }) => {
+            beforeToolCall: async ({ toolCall, args }, signal) => {
                 const result = await this.emitHook({
                     type: "tool_call",
                     toolCallId: toolCall.id,
                     toolName: toolCall.name,
                     input: args,
+                    ...(signal !== undefined ? { signal } : {}),
                 });
                 return result;
             },
@@ -726,6 +728,33 @@ export class AgentHarness {
             this.pendingSessionWrites.shift();
         }
     }
+    async recordApiFailure(failure) {
+        const raw = failure.errorMessage?.trim();
+        const detail = raw !== undefined && raw.length > API_FAILURE_RECORD_MAX_CHARS
+            ? `${raw.slice(0, API_FAILURE_RECORD_MAX_CHARS)}… (truncated)`
+            : raw;
+        const record = {
+            role: "assistant",
+            content: [{ type: "text", text: detail ? `API Error: ${detail}` : "API Error" }],
+            api: failure.api,
+            provider: failure.provider,
+            model: SYNTHETIC_MESSAGE_MODEL,
+            isApiErrorMessage: true,
+            ...(failure.apiErrorStatus !== undefined ? { apiErrorStatus: failure.apiErrorStatus } : {}),
+            ...(failure.requestId !== undefined ? { requestId: failure.requestId } : {}),
+            usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
+            usageMissing: true,
+            stopReason: "error",
+            ...(failure.errorMessage !== undefined ? { errorMessage: failure.errorMessage } : {}),
+            ...(failure.errorKind !== undefined ? { errorKind: failure.errorKind } : {}),
+            timestamp: failure.timestamp,
+        };
+        try {
+            await this.session.appendMessage(record);
+        }
+        catch {
+        }
+    }
     async handleAgentEvent(event, signal) {
         if (event.type === "message_end") {
             let entryId;
@@ -733,6 +762,9 @@ export class AgentHarness {
                 entryId = await this.session.appendMessage(event.message);
                 this.settleInjectedFrame(event.message);
             }
+            else if (event.message.isApiErrorMessage === true) {
+                await this.recordApiFailure(event.message);
+            }
             await this.emitAny(entryId !== undefined ? { ...event, entryId } : event, signal);
             return;
         }

package/dist/engine/harness/messages.js

@@ -1,3 +1,4 @@
+import { isSyntheticApiErrorMessage } from "./types.js";
 import { parseSessionTimestampMs, requireSessionTimestampMs } from "../session/timestamps.js";
 export function asAgentMessage(message) {
     return message;
@@ -155,6 +156,9 @@ export function convertToLlm(messages) {
             case "user":
             case "assistant":
             case "toolResult":
+                if (isSyntheticApiErrorMessage(message)) {
+                    return undefined;
+                }
                 return normalizeLlmMessageContent(message);
             default:
                 return undefined;

package/dist/engine/harness/types.d.ts

@@ -754,6 +754,37 @@ export declare function isValidModelChange(e: {
     provider?: unknown;
     modelId?: unknown;
 }): boolean;
+/**
+ * #506 ㋐ — the reserved `model` value on a transcript entry NO MODEL PRODUCED. CC-verbatim
+ * (`"<synthetic>"`, CC 2.1.250's own single-occurrence constant), and single-occurrence here for the
+ * same reason: the mint site and the recognition predicate must read the same literal or the entry
+ * becomes unrecognizable the first time one of them is retyped.
+ *
+ * It is deliberately a MODEL-SHAPED string (non-empty, bounded), so an entry carrying it survives this
+ * session's own import door and round-trips — a self-generated entry its own validator rejected would
+ * be the worse failure.
+ *
+ * ACCEPTED RESIDUAL, recorded rather than defended against: nothing RESERVES this id, because model ids
+ * are caller-supplied and `isModelIdentifier` admits any bounded non-empty string. A deployment that
+ * names a real model literally `<synthetic>` AND whose Brain stamps `isApiErrorMessage` on
+ * content-bearing output would have that output treated as a record. Both halves are required, the
+ * spelling is chosen to be one no catalog would use, and CC carries the same residual for the same
+ * reason — a reserved-word door here would refuse ids this engine has no business refusing.
+ */
+export declare const SYNTHETIC_MESSAGE_MODEL = "<synthetic>";
+/**
+ * #506 ㋐ — is this transcript entry the engine's own SYNTHETIC record of a terminal API failure?
+ *
+ * Such an entry is real transcript (a session that died on a provider failure must say so when it is
+ * re-read) but it is NOT model output, so it is dropped wherever transcript becomes model input, and
+ * it must not move any state derived from real turns. This predicate is the single gate for both.
+ *
+ * THREE keys, CC-anchored (`Hje`: `type==="assistant" && isApiErrorMessage===true && model===<synthetic>`),
+ * and the narrowness is the whole point. `isApiErrorMessage` alone would also match an assistant message
+ * a foreign Brain stamped while it carried REAL output — dropping that from the request view would
+ * silently delete the model's own words from its context. Only the engine's own mint sets all three.
+ */
+export declare function isSyntheticApiErrorMessage(m: unknown): boolean;
 /** RB-128: a `label` / `session_info.name` that is not a string reaches `.trim()` inside
  *  `BaseSessionStorage`'s CONSTRUCTOR — and the file backend validates BEFORE constructing any storage, so
  *  the contamination lands on disk and every later `open()` throws a raw `TypeError` (not even a `SessionError`).
@@ -1077,6 +1108,12 @@ export interface ToolCallEvent {
     toolCallId: string;
     toolName: string;
     input: Record<string, unknown>;
+    /** The per-call abort signal (additive, design/384 slice 1). Present iff the loop handed its
+     *  turn-scoped signal to `beforeToolCall` — the run-level abort is composed into that controller,
+     *  so this signal fires on a turn interrupt (bare halt / steer-now) AND on a run abort. Absent on
+     *  emits that carry no per-call signal; a subscriber gating a wait on it must then fall back to
+     *  whatever run-level signal it already holds (the historical shape, byte-identical). */
+    signal?: AbortSignal;
 }
 export interface ToolResultEvent {
     type: "tool_result";

package/dist/engine/harness/types.js

@@ -155,6 +155,11 @@ export function isValidThinkingLevelChange(e) {
 export function isValidModelChange(e) {
     return isModelIdentifier(e.provider) && isModelIdentifier(e.modelId);
 }
+export const SYNTHETIC_MESSAGE_MODEL = "<synthetic>";
+export function isSyntheticApiErrorMessage(m) {
+    const a = m;
+    return a?.role === "assistant" && a.isApiErrorMessage === true && a.model === SYNTHETIC_MESSAGE_MODEL;
+}
 export function isOptionalDisplayString(v, max = 4096) {
     return v === undefined || v === null || (typeof v === "string" && v.length <= max);
 }

package/dist/engine/session/session.js

@@ -1,5 +1,5 @@
 import { asAgentMessage, createCompactionSummaryMessage, createCustomMessage, } from "../harness/messages.js";
-import { SessionError, isValidModelChange, normalizeAnnouncedListing, normalizeCompactionStateCarrier, normalizeGitAnnouncement, normalizeReminderMark, normalizeWorkspaceState } from "../harness/types.js";
+import { SessionError, isSyntheticApiErrorMessage, isValidModelChange, normalizeAnnouncedListing, normalizeCompactionStateCarrier, normalizeGitAnnouncement, normalizeReminderMark, normalizeWorkspaceState } from "../harness/types.js";
 import { normalizePromptEpoch } from "../../prompt-assembly/epoch.js";
 import { budgetInvokedSkillsRetention, readElidedMessages, readRetainedInvokedSkills, readUnsummarizedMessages, renderInvokedSkillsRetention, } from "../compaction/utils.js";
 const RETENTION_CLAMP_DEFAULT_CHARS_PER_TOKEN = 3;
@@ -25,7 +25,8 @@ export function buildSessionContext(pathEntries, opts) {
             model = { provider: entry.provider, modelId: entry.modelId };
         }
         else if (entry.type === "message" && entry.message.role === "assistant") {
-            if (isValidModelChange({ provider: entry.message.provider, modelId: entry.message.model })) {
+            if (!isSyntheticApiErrorMessage(entry.message) &&
+                isValidModelChange({ provider: entry.message.provider, modelId: entry.message.model })) {
                 model = { provider: entry.message.provider, modelId: entry.message.model };
             }
         }

package/dist/internal/harness.d.ts

@@ -25,3 +25,4 @@ export { uuidv7 } from "../engine/session/uuid.js";
 export { SessionError } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";
+export { isSyntheticApiErrorMessage } from "../engine/harness/types.js";

package/dist/internal/harness.js

@@ -14,3 +14,4 @@ export { uuidv7 } from "../engine/session/uuid.js";
 export { SessionError } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";
+export { isSyntheticApiErrorMessage } from "../engine/harness/types.js";

package/dist/orchestration/builtin-workflows.d.ts

@@ -22,12 +22,17 @@ import type { NamedWorkflowListing } from "./workflow-script-store.js";
 /** The built-in round-based discussion workflow's registered name. */
 export declare const DISCUSSION_WORKFLOW_NAME = "discussion";
 /**
- * The registered name this built-in carried before the C-R14 vocabulary ruling (2026-08-16), kept
- * resolvable for ONE minor: "team" now names the agent-teams family (persistent named teammates) only,
- * and a one-off multi-agent debate is a "discussion".
+ * The registered name this built-in carried before the C-R14 vocabulary ruling (2026-08-16): "team" now
+ * names the agent-teams family (persistent named teammates) only, and a one-off multi-agent debate is a
+ * "discussion".
  *
- * @deprecated Use {@link DISCUSSION_WORKFLOW_NAME}. Removed in the next minor; the retired spelling still
- * RESOLVES via {@link canonicalWorkflowName} until then, but the listing/card face shows the new name only.
+ * RETENTION, as a fact rather than a plan: the ruling's original "kept resolvable for ONE minor" window
+ * LAPSED. The alias has stayed on the public export surface from the 5.37.0 window through 7.x, across
+ * BOTH the 6.0.0 and 7.0.0 BREAKING windows. It is therefore retained until a removal is announced in a
+ * named BREAKING window's ship post — no minor removes it by default.
+ *
+ * @deprecated Use {@link DISCUSSION_WORKFLOW_NAME}. The retired spelling still RESOLVES via
+ * {@link canonicalWorkflowName}, but the listing/card face shows the new name only.
  */
 export declare const TEAM_DISCUSSION_WORKFLOW_NAME = "discussion";
 /**
@@ -35,7 +40,8 @@ export declare const TEAM_DISCUSSION_WORKFLOW_NAME = "discussion";
  * retired alias. The canonical name is the authority: a resolution reached through an alias returns the
  * canonical definition (its `meta.name`, hence every run/card projection, is the new name).
  *
- * @deprecated together with the alias table — this becomes an identity function next minor (C-R14).
+ * @deprecated together with the alias table — it becomes an identity function when that table is removed
+ * in an announced BREAKING window (C-R14).
  */
 export declare function canonicalWorkflowName(name: string): string;
 /**
@@ -72,7 +78,8 @@ export declare function retiredWorkflowNameAliases(canonicalName: string): strin
  * Callers must apply the deployment's `builtinWorkflows` opt-out BEFORE using this: the equivalence is a
  * fact about the built-in registry, so a deployment that removed the built-ins removed the alias with them.
  *
- * @deprecated together with the alias table — collapses to `[requested]` next minor (C-R14).
+ * @deprecated together with the alias table — collapses to `[requested]` when that table is removed in an
+ * announced BREAKING window (C-R14).
  */
 export declare function workflowNameProbeOrder(requested: string): string[];
 /**
@@ -82,8 +89,9 @@ export declare function workflowNameProbeOrder(requested: string): string[];
  */
 export declare const DISCUSSION_SCRIPT = "export const meta = {\n  name: \"discussion\",\n  description: \"Round-based discussion: configurable members debate a topic across rounds (each member sees the transcript so far), then a finalizer synthesizes a structured verdict.\",\n  whenToUse: \"Use for a genuinely contested question that benefits from several perspectives arguing across rounds - design trade-offs, plan or risk reviews, adversarial critique of a proposal. Do NOT use it for a single factual question, a task with one obvious answer, or a budget-sensitive run: every round costs one agent call per member, so a discussion is never cheaper than asking once. args (all optional): { topic, members?: [{ role, prompt?, model? }], rounds?, finalizer?: { prompt?, model? } }. Hard ceilings: members is capped at 6 and rounds is capped at 5 regardless of what you pass; the run reports it via log() and a capped field on the result when a request exceeds either.\",\n  phases: [\n    { title: \"Discussion\" },\n    { title: \"Synthesis\" },\n  ],\n};\n// Zero-config runnable (design/140 \u00A76 1c): every arg has an opinionated fallback.\nconst raw = args;\nconst a = raw !== null && typeof raw === \"object\" && !Array.isArray(raw) ? raw : {};\nconst topic =\n  typeof a.topic === \"string\" && a.topic.trim() !== \"\"\n    ? a.topic\n    : typeof raw === \"string\" && raw.trim() !== \"\"\n      ? raw // ergonomic form: a bare string args IS the topic\n      : \"No topic was provided. Discuss: what information should a caller supply to make a discussion like this productive, and when should they NOT convene one?\";\nconst defaultMembers = [\n  { role: \"advocate\", prompt: \"Make the strongest constructive case. Propose concrete options and argue their benefits with specifics.\" },\n  { role: \"skeptic\", prompt: \"Stress-test every claim made so far. Surface risks, hidden costs, failure modes, and cheaper alternatives.\" },\n];\nconst rawMembers = Array.isArray(a.members) && a.members.length > 0 ? a.members : defaultMembers;\nconst members = rawMembers.slice(0, 6).map((m, i) => {\n  const mm = m !== null && typeof m === \"object\" ? m : {};\n  const member = {\n    role: typeof mm.role === \"string\" && mm.role.trim() !== \"\" ? mm.role : \"member-\" + (i + 1),\n    prompt: typeof mm.prompt === \"string\" && mm.prompt.trim() !== \"\" ? mm.prompt : \"Contribute your own distinct perspective: be concrete, give reasons, and engage with what others said.\",\n  };\n  if (typeof mm.model === \"string\" && mm.model.trim() !== \"\") member.model = mm.model;\n  // Slot-tools carrier (design/140 \u2461-3 + F4): a member may BE a registered agent type ({agent:\"reviewer\"}) \u2014\n  // persona/tools/model then come from the deployment's AgentDefinition (role library), args stay thin.\n  if (typeof mm.agent === \"string\" && mm.agent.trim() !== \"\") member.agent = mm.agent;\n  return member;\n});\n// Deterministic budget truncation (design/140 \u00A71 \u9884\u7B97 row): a HARD rounds ceiling + member cap \u2014 never an\n// evaluator agent. The engine's budget/maxAgents hard stops remain the backstop.\nconst requestedRounds = Math.floor(Number(a.rounds));\nconst normalizedRounds = Number.isFinite(requestedRounds) && requestedRounds >= 1 ? requestedRounds : 2;\nconst rounds = Math.min(normalizedRounds, 5);\n// RB-380 disclosure: the member/round slices above are silent by construction (Array.prototype.slice /\n// Math.min just drop the excess) \u2014 record + surface it instead of a caller finding out only by counting\n// transcript entries. Fires only when a request actually exceeded a ceiling (never on the common path).\nconst capNotes = [];\nif (rawMembers.length > 6) capNotes.push(\"requested \" + rawMembers.length + \" members, capped at 6\");\nif (normalizedRounds > 5) capNotes.push(\"requested \" + normalizedRounds + \" rounds, capped at 5\");\nfor (const note of capNotes) log(\"discussion: \" + note);\nconst fin = a.finalizer !== null && typeof a.finalizer === \"object\" && !Array.isArray(a.finalizer) ? a.finalizer : {};\nconst finalizerPrompt = typeof fin.prompt === \"string\" && fin.prompt.trim() !== \"\"\n  ? fin.prompt\n  : \"You are the synthesis lead. Read the full discussion transcript and produce the final verdict: the decision/answer, the key supporting points, and the strongest unresolved dissent (if any). Do not introduce new arguments of your own.\";\nconst clip = (s) => { const t = String(s); return t.length > 4000 ? t.slice(0, 4000) + \" ...[truncated]\" : t; };\nconst isBudgetStop = (e) => e !== null && typeof e === \"object\" && e.code === \"workflow.budget_exceeded\";\n\nphase(\"Discussion\");\nconst transcript = [];\nlet truncated = null;\nfor (let r = 1; r <= rounds && truncated === null; r++) {\n  // Deterministic early stop on an exhausted budget (a live read of the engine budget; the engine's\n  // hard WorkflowBudgetExceededError remains the backstop if a member call itself crosses the line).\n  if (budget.total !== null && budget.remaining() <= 0) { truncated = \"budget exhausted before round \" + r; break; }\n  for (const m of members) {\n    const history = transcript.length === 0 ? \"(none yet - you open the discussion)\" : transcript.join(\"\\n\\n\");\n    const spec = {\n      objective:\n        \"Discussion on: \" + topic + \"\\n\\n\" +\n        'You are \"' + m.role + '\" in round ' + r + \" of \" + rounds + \".\\n\" +\n        \"Your brief: \" + m.prompt + \"\\n\\n\" +\n        \"Transcript so far:\\n\" + history + \"\\n\\n\" +\n        \"Respond to the strongest points others made (do not repeat yourself), then advance your own position. Be concise: a few tight paragraphs at most.\",\n    };\n    if (m.model !== undefined) spec.modelName = m.model;\n    let res;\n    try {\n      res = await agent(spec, m.agent !== undefined ? { label: m.role + \"-r\" + r, phase: \"Discussion\", agentType: m.agent } : { label: m.role + \"-r\" + r, phase: \"Discussion\" });\n    } catch (e) {\n      // The engine's budget hard stop: keep what the discussion already produced instead of failing the run.\n      if (isBudgetStop(e)) { truncated = \"budget exhausted at \" + m.role + \", round \" + r; break; }\n      throw e;\n    }\n    const text = res && res.status === \"completed\" ? clip(res.result) : \"(no contribution - agent ended \" + (res ? res.status : \"unknown\") + \")\";\n    transcript.push(m.role + \" (round \" + r + \"): \" + text);\n  }\n}\n\nphase(\"Synthesis\");\nconst finalSpec = {\n  objective:\n    finalizerPrompt + \"\\n\\nTopic: \" + topic + \"\\n\\nFull transcript:\\n\" +\n    (transcript.length === 0 ? \"(the discussion produced no contributions)\" : transcript.join(\"\\n\\n\")) +\n    (truncated ? \"\\n\\nNote: the discussion was cut short (\" + truncated + \").\" : \"\"),\n};\nif (typeof fin.model === \"string\" && fin.model.trim() !== \"\") finalSpec.modelName = fin.model;\nlet verdict = null;\ntry {\n  verdict = await agent(finalSpec, {\n    label: \"finalizer\",\n    phase: \"Synthesis\",\n    schema: {\n      type: \"object\",\n      properties: {\n        decision: { type: \"string\", description: \"The final answer/decision, one paragraph.\" },\n        keyPoints: { type: \"array\", items: { type: \"string\" }, description: \"The strongest supporting points from the discussion.\" },\n        dissent: { type: \"string\", description: \"The strongest unresolved counter-position, if any.\" },\n      },\n      required: [\"decision\", \"keyPoints\"],\n    },\n  });\n} catch (e) {\n  // Budget died before synthesis: return the transcript honestly rather than failing the whole run.\n  if (!isBudgetStop(e)) throw e;\n  truncated = truncated === null ? \"budget exhausted before synthesis\" : truncated;\n}\n\nreturn {\n  topic,\n  rounds,\n  members: members.map((m) => m.role),\n  ...(capNotes.length > 0 ? { capped: capNotes } : {}),\n  ...(truncated ? { truncated } : {}),\n  transcript,\n  verdict: verdict && verdict.structuredOutput !== undefined ? verdict.structuredOutput : (verdict ? verdict.result : null),\n};\n";
 /**
- * @deprecated Use {@link DISCUSSION_SCRIPT}. Retired spelling kept for one minor (C-R14) so a deployment
- * importing the constant by its old name keeps compiling; the value is the SAME script (its `meta.name`
+ * @deprecated Use {@link DISCUSSION_SCRIPT}. Retired spelling retained (C-R14; the original one-minor
+ * window lapsed — removal needs an announced BREAKING window) so a deployment importing the constant by
+ * its old name keeps compiling; the value is the SAME script (its `meta.name`
  * is the new `discussion`).
  */
 export declare const TEAM_DISCUSSION_SCRIPT = "export const meta = {\n  name: \"discussion\",\n  description: \"Round-based discussion: configurable members debate a topic across rounds (each member sees the transcript so far), then a finalizer synthesizes a structured verdict.\",\n  whenToUse: \"Use for a genuinely contested question that benefits from several perspectives arguing across rounds - design trade-offs, plan or risk reviews, adversarial critique of a proposal. Do NOT use it for a single factual question, a task with one obvious answer, or a budget-sensitive run: every round costs one agent call per member, so a discussion is never cheaper than asking once. args (all optional): { topic, members?: [{ role, prompt?, model? }], rounds?, finalizer?: { prompt?, model? } }. Hard ceilings: members is capped at 6 and rounds is capped at 5 regardless of what you pass; the run reports it via log() and a capped field on the result when a request exceeds either.\",\n  phases: [\n    { title: \"Discussion\" },\n    { title: \"Synthesis\" },\n  ],\n};\n// Zero-config runnable (design/140 \u00A76 1c): every arg has an opinionated fallback.\nconst raw = args;\nconst a = raw !== null && typeof raw === \"object\" && !Array.isArray(raw) ? raw : {};\nconst topic =\n  typeof a.topic === \"string\" && a.topic.trim() !== \"\"\n    ? a.topic\n    : typeof raw === \"string\" && raw.trim() !== \"\"\n      ? raw // ergonomic form: a bare string args IS the topic\n      : \"No topic was provided. Discuss: what information should a caller supply to make a discussion like this productive, and when should they NOT convene one?\";\nconst defaultMembers = [\n  { role: \"advocate\", prompt: \"Make the strongest constructive case. Propose concrete options and argue their benefits with specifics.\" },\n  { role: \"skeptic\", prompt: \"Stress-test every claim made so far. Surface risks, hidden costs, failure modes, and cheaper alternatives.\" },\n];\nconst rawMembers = Array.isArray(a.members) && a.members.length > 0 ? a.members : defaultMembers;\nconst members = rawMembers.slice(0, 6).map((m, i) => {\n  const mm = m !== null && typeof m === \"object\" ? m : {};\n  const member = {\n    role: typeof mm.role === \"string\" && mm.role.trim() !== \"\" ? mm.role : \"member-\" + (i + 1),\n    prompt: typeof mm.prompt === \"string\" && mm.prompt.trim() !== \"\" ? mm.prompt : \"Contribute your own distinct perspective: be concrete, give reasons, and engage with what others said.\",\n  };\n  if (typeof mm.model === \"string\" && mm.model.trim() !== \"\") member.model = mm.model;\n  // Slot-tools carrier (design/140 \u2461-3 + F4): a member may BE a registered agent type ({agent:\"reviewer\"}) \u2014\n  // persona/tools/model then come from the deployment's AgentDefinition (role library), args stay thin.\n  if (typeof mm.agent === \"string\" && mm.agent.trim() !== \"\") member.agent = mm.agent;\n  return member;\n});\n// Deterministic budget truncation (design/140 \u00A71 \u9884\u7B97 row): a HARD rounds ceiling + member cap \u2014 never an\n// evaluator agent. The engine's budget/maxAgents hard stops remain the backstop.\nconst requestedRounds = Math.floor(Number(a.rounds));\nconst normalizedRounds = Number.isFinite(requestedRounds) && requestedRounds >= 1 ? requestedRounds : 2;\nconst rounds = Math.min(normalizedRounds, 5);\n// RB-380 disclosure: the member/round slices above are silent by construction (Array.prototype.slice /\n// Math.min just drop the excess) \u2014 record + surface it instead of a caller finding out only by counting\n// transcript entries. Fires only when a request actually exceeded a ceiling (never on the common path).\nconst capNotes = [];\nif (rawMembers.length > 6) capNotes.push(\"requested \" + rawMembers.length + \" members, capped at 6\");\nif (normalizedRounds > 5) capNotes.push(\"requested \" + normalizedRounds + \" rounds, capped at 5\");\nfor (const note of capNotes) log(\"discussion: \" + note);\nconst fin = a.finalizer !== null && typeof a.finalizer === \"object\" && !Array.isArray(a.finalizer) ? a.finalizer : {};\nconst finalizerPrompt = typeof fin.prompt === \"string\" && fin.prompt.trim() !== \"\"\n  ? fin.prompt\n  : \"You are the synthesis lead. Read the full discussion transcript and produce the final verdict: the decision/answer, the key supporting points, and the strongest unresolved dissent (if any). Do not introduce new arguments of your own.\";\nconst clip = (s) => { const t = String(s); return t.length > 4000 ? t.slice(0, 4000) + \" ...[truncated]\" : t; };\nconst isBudgetStop = (e) => e !== null && typeof e === \"object\" && e.code === \"workflow.budget_exceeded\";\n\nphase(\"Discussion\");\nconst transcript = [];\nlet truncated = null;\nfor (let r = 1; r <= rounds && truncated === null; r++) {\n  // Deterministic early stop on an exhausted budget (a live read of the engine budget; the engine's\n  // hard WorkflowBudgetExceededError remains the backstop if a member call itself crosses the line).\n  if (budget.total !== null && budget.remaining() <= 0) { truncated = \"budget exhausted before round \" + r; break; }\n  for (const m of members) {\n    const history = transcript.length === 0 ? \"(none yet - you open the discussion)\" : transcript.join(\"\\n\\n\");\n    const spec = {\n      objective:\n        \"Discussion on: \" + topic + \"\\n\\n\" +\n        'You are \"' + m.role + '\" in round ' + r + \" of \" + rounds + \".\\n\" +\n        \"Your brief: \" + m.prompt + \"\\n\\n\" +\n        \"Transcript so far:\\n\" + history + \"\\n\\n\" +\n        \"Respond to the strongest points others made (do not repeat yourself), then advance your own position. Be concise: a few tight paragraphs at most.\",\n    };\n    if (m.model !== undefined) spec.modelName = m.model;\n    let res;\n    try {\n      res = await agent(spec, m.agent !== undefined ? { label: m.role + \"-r\" + r, phase: \"Discussion\", agentType: m.agent } : { label: m.role + \"-r\" + r, phase: \"Discussion\" });\n    } catch (e) {\n      // The engine's budget hard stop: keep what the discussion already produced instead of failing the run.\n      if (isBudgetStop(e)) { truncated = \"budget exhausted at \" + m.role + \", round \" + r; break; }\n      throw e;\n    }\n    const text = res && res.status === \"completed\" ? clip(res.result) : \"(no contribution - agent ended \" + (res ? res.status : \"unknown\") + \")\";\n    transcript.push(m.role + \" (round \" + r + \"): \" + text);\n  }\n}\n\nphase(\"Synthesis\");\nconst finalSpec = {\n  objective:\n    finalizerPrompt + \"\\n\\nTopic: \" + topic + \"\\n\\nFull transcript:\\n\" +\n    (transcript.length === 0 ? \"(the discussion produced no contributions)\" : transcript.join(\"\\n\\n\")) +\n    (truncated ? \"\\n\\nNote: the discussion was cut short (\" + truncated + \").\" : \"\"),\n};\nif (typeof fin.model === \"string\" && fin.model.trim() !== \"\") finalSpec.modelName = fin.model;\nlet verdict = null;\ntry {\n  verdict = await agent(finalSpec, {\n    label: \"finalizer\",\n    phase: \"Synthesis\",\n    schema: {\n      type: \"object\",\n      properties: {\n        decision: { type: \"string\", description: \"The final answer/decision, one paragraph.\" },\n        keyPoints: { type: \"array\", items: { type: \"string\" }, description: \"The strongest supporting points from the discussion.\" },\n        dissent: { type: \"string\", description: \"The strongest unresolved counter-position, if any.\" },\n      },\n      required: [\"decision\", \"keyPoints\"],\n    },\n  });\n} catch (e) {\n  // Budget died before synthesis: return the transcript honestly rather than failing the whole run.\n  if (!isBudgetStop(e)) throw e;\n  truncated = truncated === null ? \"budget exhausted before synthesis\" : truncated;\n}\n\nreturn {\n  topic,\n  rounds,\n  members: members.map((m) => m.role),\n  ...(capNotes.length > 0 ? { capped: capNotes } : {}),\n  ...(truncated ? { truncated } : {}),\n  transcript,\n  verdict: verdict && verdict.structuredOutput !== undefined ? verdict.structuredOutput : (verdict ? verdict.result : null),\n};\n";

package/dist/orchestration/run-workflow-tool.js

@@ -332,8 +332,13 @@ export async function createRunWorkflowTool(d) {
             "body (equivalently, pass { phase: 'Fix' } in an agent's opts). Give each stage a phase so progress " +
             "renders as stage groups; use the same titles you declared in meta.phases.\n" +
             "• spec.modelName works only when the deployment configured a workflow model allowlist, and its legal " +
-            "values are that deployment's own model CATALOG KEYS — not generic tier words (a bare 'opus'/'sonnet'/" +
-            "'haiku' is a name the catalog almost certainly does not hold, and is refused rather than approximated). " +
+            "values are the names on THAT allowlist which the deployment's model CATALOG KEYS also hold — a name " +
+            "off the allowlist, and a listed name the catalog lacks, are both refused rather than approximated. " +
+            "Generic tier words ('opus'/'sonnet'/'haiku'/'pro'/'flash'/'best') are not a separate namespace: on a " +
+            "deployment that configured tier bindings they become ordinary catalog keys, but only the ones its " +
+            "bindings actually resolve; on one that did not they are simply absent, unless its catalog happens to " +
+            "declare that literal name. Either way the allowlist is the gate, so a tier word is legal here only " +
+            "when this deployment allowlisted it, never as a shortcut around it. " +
             "It also goes on the SPEC (the first argument), never in an agent()'s options object; `model` is accepted " +
             "there as an alias for the same field. If unsure, omit it and the agent runs on the deployment's default " +
             "role.\n" +

package/dist/orchestration/workflow-governance.js

@@ -99,7 +99,7 @@ export function resolveModelName(name, allowlist, models) {
     if (!allowlist.includes(name)) {
         throw new WorkflowModelNotAllowedError(name, `not in the workflow model allowlist [${allowlist.join(", ")}]`);
     }
-    const model = models?.[name];
+    const model = models !== undefined && Object.hasOwn(models, name) ? models[name] : undefined;
     if (!model) {
         throw new WorkflowModelNotAllowedError(name, "allowed by name but not present in RunnerDeps.models");
     }

package/dist/orchestration/workflow-types.d.ts

@@ -392,6 +392,7 @@ export type WorkflowEvent = {
     output?: string;
     errorCode?: string;
     toolCalls?: number;
+    modelResolved?: string;
     replayed?: boolean;
     ts: number;
 } | {

package/dist/orchestration/workflow.js

@@ -60,7 +60,7 @@ function workflowModelLabel(spec, catalog) {
         return undefined;
     if (typeof model !== "string")
         return model.id ?? model.name;
-    const served = catalog?.[model]?.id;
+    const served = catalog !== undefined && Object.hasOwn(catalog, model) ? catalog[model]?.id : undefined;
     return served ?? resolveModelDisplayLabel(model);
 }
 export const WORKFLOW_SUBAGENT_PROMPT = `You are a subagent spawned by a workflow orchestration script. Use the tools available to complete the task.

package/dist/stores/file/mailbox-store.d.ts

@@ -30,7 +30,8 @@ export declare class FileMailboxStore implements MailboxStore {
      * file can never disagree. Before this, `AgentOne` and `agentone` produced two DIFFERENT shared-state
      * keys but the SAME file on a case-insensitive filesystem (macOS/Windows default) — one recipient read
      * the other's messages after a restart. Folding is also the semantically correct answer, not just the
-     * safe one: the addressing layer's `normalizeAgentName` (task-registry.ts:621) already lowercases, so
+     * safe one: the addressing layer's `normalizeAgentName` (defined in core/task-registry-shared.ts and
+     * re-exported by task-registry.ts) already lowercases, so
      * two case-variant handles ARE the same agent; this makes the storage layer say so explicitly instead of
      * depending on an upstream coincidence, and behave identically on case-SENSITIVE filesystems (Linux),
      * where the old code silently split one logical agent's mail across two boxes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.0.2",
+  "version": "7.1.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",