@sema-agent/core 7.11.2 → 7.13.0

package/dist/core/wiring-manifest.d.ts

@@ -71,13 +71,8 @@ export type ParkLaneReason = "no_checkpoint_store" | "no_durable_approval_opt_in
  *                       verdict; the same fail-closed outcome as `denied`, named apart so a consumer
  *                       can tell "policy said no" from "the entitlement source was unreachable".
  *  - `armed`          — all three arms held; the classifier decider was minted for this leg.
- *  - `latch_open`     — the session's one-way "back to non-auto" breaker has tripped. A leg-START
- *                       manifest never carries it (a decider is minted fresh at prepare and its latch
- *                       is closed by construction; a tripped ancestor hands no intent forward, which
- *                       reads as `no_intent`); it is in the vocabulary so a consumer switching on the
- *                       closed set is complete for a mid-leg re-read face, which nothing mints today.
  */
-export declare const AUTO_MODE_ARM_REASONS: readonly ["armed", "no_intent", "no_face", "denied", "resolver_fault", "latch_open"];
+export declare const AUTO_MODE_ARM_REASONS: readonly ["armed", "no_intent", "no_face", "denied", "resolver_fault"];
 export type AutoModeArmReason = (typeof AUTO_MODE_ARM_REASONS)[number];
 /**
  * One declared MCP server's materialization result for THIS leg — the per-server connection-state
@@ -243,22 +238,13 @@ export interface WiringManifest {
      * per-leg READ face of the auto-mode arming decision: `armed` ⇔ `reason === "armed"` (the
      * classifier decider was minted for this leg), and `reason` names the first arm that failed
      * otherwise — see {@link AUTO_MODE_ARM_REASONS}. A serving layer that used to infer the mode from
-     * spec shape reads it here instead.
-     *
-     * `breaker` (#616) — the SESSION-level breaker read face: the most recent one-way breaker trip recorded
-     * for this session on this Runner (an EARLIER leg's decider — the latch is a per-run fact and a leg-start
-     * manifest's own decider is closed by construction, which is why there is no `open` boolean here: it
-     * would read `false` on every mint; the reason vocabulary reserves `latch_open` for a mid-leg re-read
-     * face nothing mints today). Present ⇔ a trip was recorded (never tripped, evicted or a standalone
-     * prepare ⇒ absent). `{ openedAtMs, lastCause, failures, runId }` — see
-     * {@link import("./auto-mode.js").AutoModeBreakerTrip}. A per-leg observation like `mcp`, so it is NOT
-     * part of {@link configFingerprint}: legs of one assembly must fingerprint alike whether or not a
-     * classifier was down.
+     * spec shape reads it here instead. The classifier's availability is a per-CALL fact (an unavailable
+     * round is a deny that says so, and the next round is classified afresh), so there is no session-level
+     * breaker face here and nothing about availability enters {@link configFingerprint}.
      */
     autoMode?: {
         armed: boolean;
         reason: AutoModeArmReason;
-        breaker?: import("./auto-mode.js").AutoModeBreakerTrip;
     };
     /**
      * EFFECTIVE half only, and ALWAYS present on an engine-minted effective manifest (the `autoMode`
@@ -347,13 +333,10 @@ export interface WiringFacts {
         restore: string;
     };
     /** Effective half only — see {@link WiringManifest.autoMode}; the static half has no leg to arm.
-     *  `armed` must agree with `reason` (`armed ⇔ reason === "armed"`); a contradicting pair is refused.
-     *  `breaker` (#616) is the session's most recent recorded trip, or absent; a trip whose cause is outside
-     *  the closed set or whose numbers are not finite is refused. */
+     *  `armed` must agree with `reason` (`armed ⇔ reason === "armed"`); a contradicting pair is refused. */
     autoMode?: {
         armed: boolean;
         reason: AutoModeArmReason;
-        breaker?: import("./auto-mode.js").AutoModeBreakerTrip;
     };
     /** Effective half only — see {@link WiringManifest.mcp}; the static half materializes nothing.
      *  Copied entry-wise onto the manifest (the caller's array is never aliased). */

package/dist/core/wiring-manifest.js

@@ -1,9 +1,8 @@
 import { createHash } from "node:crypto";
-import { AUTO_MODE_BREAKER_CAUSES, isAutoModeBreakerCause } from "./auto-mode.js";
 import { canonicalize } from "./canonical-json.js";
 import { resolveCheckpointStore } from "./checkpoint-store.js";
 import { isLiveQuestionFace } from "./ask-question.js";
-export const AUTO_MODE_ARM_REASONS = ["armed", "no_intent", "no_face", "denied", "resolver_fault", "latch_open"];
+export const AUTO_MODE_ARM_REASONS = ["armed", "no_intent", "no_face", "denied", "resolver_fault"];
 export function resolveDeclaredDurability(store, storeName) {
     const declared = store?.durability;
     if (declared === undefined)
@@ -72,13 +71,7 @@ function readAutoModeFact(fact) {
     if (!AUTO_MODE_ARM_REASONS.includes(fact.reason) || fact.armed !== (fact.reason === "armed")) {
         throw new Error(`the auto-mode wiring fact is inconsistent (armed=${String(fact.armed)}, reason=${JSON.stringify(fact.reason)}) — armed must hold exactly when reason is "armed", and reason must be one of ${AUTO_MODE_ARM_REASONS.join("|")}`);
     }
-    const b = fact.breaker;
-    if (b === undefined)
-        return { armed: fact.armed, reason: fact.reason };
-    if (!isAutoModeBreakerCause(b.lastCause) || !Number.isFinite(b.openedAtMs) || !Number.isInteger(b.failures) || b.failures < 1 || typeof b.runId !== "string" || b.runId === "") {
-        throw new Error(`the auto-mode breaker fact is malformed (${JSON.stringify(b)}) — lastCause must be one of ${AUTO_MODE_BREAKER_CAUSES.join("|")}, openedAtMs finite, failures a positive integer, runId a non-empty string`);
-    }
-    return { armed: fact.armed, reason: fact.reason, breaker: { openedAtMs: b.openedAtMs, lastCause: b.lastCause, failures: b.failures, runId: b.runId } };
+    return { armed: fact.armed, reason: fact.reason };
 }
 export function deriveWiringManifest(facts) {
     if (facts.half === "static" && facts.leg !== undefined) {
@@ -140,9 +133,8 @@ export function deriveWiringManifest(facts) {
         const { leg: _leg, mcp: _mcp, tools: _tools, ...assembly } = manifest;
         const { provenance: _askSeat, ...askForHash } = assembly.ask;
         const { provenance: _questionSeat, ...questionForHash } = assembly.question;
-        const { breaker: _breaker, ...autoModeForHash } = assembly.autoMode ?? {};
         manifest.configFingerprint = createHash("sha256")
-            .update(canonicalize({ ...assembly, ask: askForHash, question: questionForHash, ...(assembly.autoMode !== undefined ? { autoMode: autoModeForHash } : {}) }))
+            .update(canonicalize({ ...assembly, ask: askForHash, question: questionForHash }))
             .digest("hex")
             .slice(0, 16);
     }

package/dist/core/workflow-journal-store.d.ts

@@ -162,11 +162,42 @@ export declare function callKeyOrdinal(callKey: string): number;
  *  say WHY an ordinal never replays. `failed` + this code lands on the T2A-4 no-replay arm, so replay
  *  behavior is identical to the entry simply being absent (the pre-tombstone shape). */
 export declare const JOURNAL_OVERSIZE_ERROR_CODE = "workflow.journal_oversize";
+/**
+ * The refusal every {@link WorkflowJournalStore.append} answers an oversize entry with (#672): a stable
+ * `code` ({@link JOURNAL_OVERSIZE_ERROR_CODE} — the same word the engine's result-arm tombstone carries, so
+ * one code means "too big for the journal" on every face) and a message a person can act on (the bytes, the
+ * cap, the entry's callKey). A backend outside this package throws THIS class from its own `append` — the
+ * contract kit asserts the code only, so the class is the convenience, the code is the contract.
+ */
+export declare class WorkflowJournalOversizeError extends Error {
+    readonly callKey: string;
+    readonly bytes: number;
+    readonly cap: number;
+    readonly code = "workflow.journal_oversize";
+    constructor(callKey: string, bytes: number, cap?: number);
+}
+/**
+ * @contract workflow.journal_oversize.refused — every {@link WorkflowJournalStore.append} REFUSES an entry whose
+ * payload (the `parked` arm when present, else the `result` arm) serializes to more than
+ * {@link MAX_JOURNAL_RESULT_BYTES} UTF-8 bytes: it throws {@link WorkflowJournalOversizeError} and journals
+ * nothing, on BOTH arms alike — no backend degrades an oversize entry to a silent skip, and no backend
+ * judges the size by a rule of its own. A backend calls this first, before it touches its medium.
+ *
+ * Why a refusal and not the earlier skip (RB-168 "every backend degrades identically"): the skip was written
+ * for the `result` arm, where the engine measures the SAME serialization first and journals a small
+ * tombstone (RB-243) — a completed result never reaches this refusal. The `parked` arm (#642) is the child's
+ * whole paused TaskResult, which can exceed the cap; a park the journal dropped silently is a resume that
+ * runs the ordinal live beside the pinned child, and the write is the one moment the deployment can be told.
+ * A bad value answered with a default is the failure mode this repository refuses by default; the loud
+ * answer is the rule, the engine's tombstone the one place that pre-empts it.
+ */
+export declare function assertJournalEntryFits(entry: WorkflowJournalEntry): void;
 /** RB-243: mint the tiny FAILED entry the ENGINE journals in place of an oversize result. The
- *  tombstone is minted in the engine, NOT in a store — the stores' skip semantics are unchanged (the
- *  §4.1 backend-parity pin depends on that layering; a store-side tombstone would re-create the RB-168
- *  dialect divergence). Never copies `result.result`/`structuredOutput` (the oversize payload); keeps
- *  taskId/sessionId/stats so the journal read-face still shows the session handle and the paid spend. */
+ *  tombstone is minted in the engine, NOT in a store — a store REFUSES an oversize entry
+ *  ({@link assertJournalEntryFits}) and never invents one; the engine measures the durable copy first, so
+ *  the store sees the tombstone, not the payload. Never copies `result.result`/`structuredOutput` (the
+ *  oversize payload); keeps taskId/sessionId/stats so the journal read-face still shows the session handle
+ *  and the paid spend. Its own serialization is a few hundred bytes — always under the cap (pinned). */
 export declare function journalOversizeTombstone(result: TaskResult, bytes: number): TaskResult;
 /**
  * RB-367 (dual-process probe, core-side judgment) — the TTL a resume claim {@link

package/dist/core/workflow-journal-store.js

@@ -9,6 +9,24 @@ export function callKeyOrdinal(callKey) {
     return Number.isFinite(n) ? n : 0;
 }
 export const JOURNAL_OVERSIZE_ERROR_CODE = "workflow.journal_oversize";
+export class WorkflowJournalOversizeError extends Error {
+    callKey;
+    bytes;
+    cap;
+    code = JOURNAL_OVERSIZE_ERROR_CODE;
+    constructor(callKey, bytes, cap = MAX_JOURNAL_RESULT_BYTES) {
+        super(`workflow journal: entry "${callKey}" is ${bytes} bytes, over the ${cap}-byte per-entry cap — refused, nothing journaled`);
+        this.callKey = callKey;
+        this.bytes = bytes;
+        this.cap = cap;
+        this.name = "WorkflowJournalOversizeError";
+    }
+}
+export function assertJournalEntryFits(entry) {
+    const serialized = JSON.stringify(entry.parked !== undefined ? entry.parked : entry.result);
+    if (oversizeJournalResult(serialized))
+        throw new WorkflowJournalOversizeError(entry.callKey, Buffer.byteLength(serialized, "utf8"));
+}
 export function journalOversizeTombstone(result, bytes) {
     const message = `[journal] result omitted: ${bytes} bytes exceeds the ${MAX_JOURNAL_RESULT_BYTES}-byte per-entry journal cap; ` +
         `the agent's real terminal status was "${terminalProjection(result.terminal).status}". A resume re-runs this agent (and everything after it) live.`;
@@ -65,8 +83,7 @@ export class InMemoryWorkflowJournalStore {
         return [...rec.byOrdinal.entries()].sort((a, b) => a[0] - b[0]).map(([, e]) => snapshot(e));
     }
     async append(runId, scope, entry) {
-        if (oversizeJournalResult(JSON.stringify(entry.parked !== undefined ? entry.parked : entry.result)))
-            return;
+        assertJournalEntryFits(entry);
         let rec = this.runs.get(runId);
         if (!rec) {
             rec = { scope, byOrdinal: new Map() };

package/dist/index.d.ts

@@ -126,9 +126,9 @@ export { createFsWriteGatePolicy, type FsWriteGatePolicyOptions } from "./core/f
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
 export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, type SemaProvenance, } from "./core/task-notification.js";
-export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, type ToolFamily, type ToolMountTag, type ToolApprovalCard, type ToolPathAccess, type ToolPathBase, type ToolPathAbsence, type ToolPathTarget, type ToolCallPathTarget, type ToolRosterPathTarget, pathTargetSlotOnly, type ToolRuleFace, type ToolRenderHints, type ToolFaceDeclaration, type ToolCatalogEntry, } from "./core/tool-face.js";
-export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, type ToolCallLike, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
-export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, type RosterSource, type ToolIdentity, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
+export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, type ToolFamily, type ToolMountTag, type ToolApprovalCard, type ToolPathAccess, type ToolPathBase, type ToolPathAbsence, type ToolPathTarget, type ToolCallPathTarget, type ToolRosterPathTarget, pathTargetSlotOnly, type ToolRuleFace, type ToolRenderHints, type ToolFaceDeclaration, type ToolCatalogEntry, } from "./core/tool-face.js";
+export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, type ToolCallLike, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
+export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, type RosterSource, type ToolIdentity, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, type RosterBoundMembers, type RosterBoundCode, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
 export { type ToolCallFace } from "./core/tool-policy.js";
 export { effectivePathTargetOf, pathTargetBaseOf, type ToolPathBases } from "./core/effective-path-target.js";
 export { TOOL_CONFORMANCE_VECTORS, describeToolConformanceVectors, type ToolConformanceVector } from "./core/tool-conformance.js";
@@ -168,7 +168,7 @@ export { type AskOrigin, ASK_ORIGINS, isAskOrigin, classifierMayAnswer, ORIGIN_I
 export { SETTLEMENT_KINDS, type SettlementKind, isSettlementKind, type Settlement, SETTLEMENT_IS_REFUSAL, DENIED_BY_VALUES, type DeniedBy, isDeniedBy, DENIED_BY_MAY_VETO, type GateDisposition, type GateOutcome, screenGateOutcome } from "./core/gate-outcome.js";
 export { type AskCarry } from "./core/hooks.js";
 export { SWAPPABLE_DEP_SEATS, SWAP_SEAT_NOTICE, isSwappableDepSeat, screenSwappableDeps, type SwappableDepSeat, type SwappableDeps } from "./core/swappable-deps.js";
-export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, AUTO_MODE_BREAKER_CAUSES, isAutoModeBreakerCause, AutoModeBreakerLedger, type AutoModeUnavailableCause, type AutoModeBreakerCause, type AutoModeBreakerTrip, type AutoModeVerdict, type AutoModeDecider, type AutoModeDeciderOptions, type AutoModeClassified, type AutoModeClassifyFn, type AutoModeClassifyInput, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, type AutoModeDenialTracker, type AutoModeDenialLimitOptions, type DenialLimitCounts, type DenialLimitFallbackFace, type UnarmedDenialLimitFallback, type DenialLimitFallback, type DenialLimitVerdict, } from "./core/auto-mode.js";
+export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, classifierUnavailableDenyMessage, CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE, type AutoModeUnavailableCause, type AutoModeVerdict, type AutoModeDecider, type AutoModeDeciderOptions, type AutoModeClassified, type AutoModeClassifyFn, type AutoModeClassifyInput, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, type AutoModeDenialTracker, type AutoModeDenialLimitOptions, type DenialLimitCounts, type DenialLimitFallbackFace, type UnarmedDenialLimitFallback, type DenialLimitFallback, type DenialLimitVerdict, } from "./core/auto-mode.js";
 export { AUTO_MODE_DENIAL_LIMIT_DEFAULTS, AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS, AUTO_MODE_CLASSIFIER_MAX_TOKENS } from "./core/auto-mode-defaults.js";
 export { buildAutoModePrompt, renderAutoModeWindow, renderAutoModeAction, AUTO_MODE_DEFAULTS_SENTINEL, type AutoModeRules, type BuildAutoModePromptOptions, type AutoModeWindowOptions, } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/auto-mode-prompt-assets.js";
@@ -259,6 +259,7 @@ export { checkpointStoreContract } from "./core/store-contracts/checkpoint-store
 export { sessionRepoContract } from "./core/store-contracts/session-repo-contract.js";
 export { toolResultStoreContract } from "./core/store-contracts/tool-result-store-contract.js";
 export { fileHistoryStoreContract } from "./core/store-contracts/file-history-store-contract.js";
+export { workflowJournalStoreContract } from "./core/store-contracts/workflow-journal-store-contract.js";
 export { permissionRuleSyncContract, type PermissionRuleSyncContractHooks } from "./core/store-contracts/permission-rule-sync-contract.js";
 export { MAILBOX_CONTRACT_SCOPE, mailboxStoreContract, mailboxAckOwnershipContract, mailboxBundledOnlyContract, mailboxTombstonedRecipientContract, type MailboxTombstonedRecipientContractHooks, mailboxCrossProcessContract, type MailboxCrossProcessContractHooks, } from "./core/store-contracts/mailbox-store-contract.js";
 export { BACKGROUND_AGENT_CONTRACT_SCOPE, backgroundAgentStoreContract, backgroundAgentStoreScopesContract, } from "./core/store-contracts/background-agent-store-contract.js";
@@ -267,7 +268,7 @@ export { serveDurableAgentRowLane, buildAgentPollDetails, type AgentPollDetailsI
 export type { UnifiedTaskResult } from "./core/task-registry-shared.js";
 export { FileBackgroundAgentStore, type FileBackgroundAgentStoreOptions } from "./stores/file/background-agent-store.js";
 export { A2A_TASK_STATES, type A2ATaskState, type A2ATaskStateReversal, type A2ATaskStateReversalFaithful, type A2ATaskStateReversalLossy, toA2ATaskState, fromA2ATaskState, } from "./core/a2a-task-state.js";
-export { type WorkflowJournalStore, type WorkflowJournalEntry, InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, } from "./core/workflow-journal-store.js";
+export { type WorkflowJournalStore, type WorkflowJournalEntry, InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, WorkflowJournalOversizeError, assertJournalEntryFits, } from "./core/workflow-journal-store.js";
 export { untrustedEgressForHuman, redactHostLeaks, redactSecrets, boundedRedactedSummary } from "./core/untrusted-egress.js";
 export type { RedactionFinding, RedactionReport, RedactionConfidence, RedactionSource, SummarizableFinding, } from "./core/untrusted-egress.js";
 export { summarizeRedactions } from "./core/untrusted-egress.js";

package/dist/index.js

@@ -102,9 +102,9 @@ export { createFsWriteGatePolicy } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
 export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, } from "./core/task-notification.js";
-export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, pathTargetSlotOnly, } from "./core/tool-face.js";
-export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
-export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
+export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, pathTargetSlotOnly, } from "./core/tool-face.js";
+export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
+export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
 export {} from "./core/tool-policy.js";
 export { effectivePathTargetOf, pathTargetBaseOf } from "./core/effective-path-target.js";
 export { TOOL_CONFORMANCE_VECTORS, describeToolConformanceVectors } from "./core/tool-conformance.js";
@@ -142,7 +142,7 @@ export { ASK_ORIGINS, isAskOrigin, classifierMayAnswer, ORIGIN_IMPLIES_REAL_APPR
 export { SETTLEMENT_KINDS, isSettlementKind, SETTLEMENT_IS_REFUSAL, DENIED_BY_VALUES, isDeniedBy, DENIED_BY_MAY_VETO, screenGateOutcome } from "./core/gate-outcome.js";
 export {} from "./core/hooks.js";
 export { SWAPPABLE_DEP_SEATS, SWAP_SEAT_NOTICE, isSwappableDepSeat, screenSwappableDeps } from "./core/swappable-deps.js";
-export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, AUTO_MODE_BREAKER_CAUSES, isAutoModeBreakerCause, AutoModeBreakerLedger, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, } from "./core/auto-mode.js";
+export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, classifierUnavailableDenyMessage, CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, } from "./core/auto-mode.js";
 export { AUTO_MODE_DENIAL_LIMIT_DEFAULTS, AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS, AUTO_MODE_CLASSIFIER_MAX_TOKENS } from "./core/auto-mode-defaults.js";
 export { buildAutoModePrompt, renderAutoModeWindow, renderAutoModeAction, AUTO_MODE_DEFAULTS_SENTINEL, } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/auto-mode-prompt-assets.js";
@@ -217,6 +217,7 @@ export { checkpointStoreContract } from "./core/store-contracts/checkpoint-store
 export { sessionRepoContract } from "./core/store-contracts/session-repo-contract.js";
 export { toolResultStoreContract } from "./core/store-contracts/tool-result-store-contract.js";
 export { fileHistoryStoreContract } from "./core/store-contracts/file-history-store-contract.js";
+export { workflowJournalStoreContract } from "./core/store-contracts/workflow-journal-store-contract.js";
 export { permissionRuleSyncContract } from "./core/store-contracts/permission-rule-sync-contract.js";
 export { MAILBOX_CONTRACT_SCOPE, mailboxStoreContract, mailboxAckOwnershipContract, mailboxBundledOnlyContract, mailboxTombstonedRecipientContract, mailboxCrossProcessContract, } from "./core/store-contracts/mailbox-store-contract.js";
 export { BACKGROUND_AGENT_CONTRACT_SCOPE, backgroundAgentStoreContract, backgroundAgentStoreScopesContract, } from "./core/store-contracts/background-agent-store-contract.js";
@@ -224,7 +225,7 @@ export { canAccessAgentRecord, STALE_RUNNING_REAP_ATTRIBUTION, BackgroundAgentSt
 export { serveDurableAgentRowLane, buildAgentPollDetails, } from "./core/task-registry-agent.js";
 export { FileBackgroundAgentStore } from "./stores/file/background-agent-store.js";
 export { A2A_TASK_STATES, toA2ATaskState, fromA2ATaskState, } from "./core/a2a-task-state.js";
-export { InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, } from "./core/workflow-journal-store.js";
+export { InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, WorkflowJournalOversizeError, assertJournalEntryFits, } from "./core/workflow-journal-store.js";
 export { untrustedEgressForHuman, redactHostLeaks, redactSecrets, boundedRedactedSummary } from "./core/untrusted-egress.js";
 export { summarizeRedactions } from "./core/untrusted-egress.js";
 export { MemoryRosterStore, FileRosterStore } from "./agents/roster-store.js";

package/dist/orchestration/workflow.js

@@ -923,6 +923,8 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             }
             catch (err) {
                 lastErr = err;
+                if (err?.code === JOURNAL_OVERSIZE_ERROR_CODE)
+                    break;
                 if (attempt < 2)
                     await new Promise((r) => timers.setTimeout(r, 25 * (attempt + 1)));
             }

package/dist/server/http.js

@@ -97,7 +97,8 @@ export function createTaskServer(opts) {
         res.on("close", () => {
             if (!res.writableEnded) {
                 clientGone = true;
-                void stream.interrupt();
+                stream.interrupt().catch(() => {
+                });
                 void stream.destroy();
             }
         });

package/dist/stores/file/workflow-journal-store.d.ts

@@ -1,15 +1,12 @@
 import { type WorkflowJournalEntry, type WorkflowJournalStore, type ResumeClaimArgs } from "../../core/workflow-journal-store.js";
 /**
- * SVC-2 — the shared size bound for a journaled workflow-agent result, so ALL backends DEGRADE IDENTICALLY on
- * an oversize TaskResult (no dialect divergence). Inlined from service's `workflow-journal-limits` on
- * onboarding — the 5 MiB figure aligns with TiDB's ~6 MiB per-row txn-entry-size-limit (a row
- * over it is REJECTED with "entry too large"); a LOAD-BEARING `append` that hit that would THROW and kill the
- * whole workflow. PostgreSQL TEXT has no such low limit, so without a shared guard the same large result would
- * journal fine on PG but fail the workflow on TiDB. All backends instead skip-journal a result whose serialized
- * size exceeds {@link MAX_JOURNAL_RESULT_BYTES} (a no-op, never an insert/throw): the agent's ordinal is simply
- * not cached, so a resume re-runs that one agent live. Resume is an optimization — a too-big-to-cache result is
- * a graceful degrade, not a failure. Measured in BYTES (UTF-8) — a multibyte result can be larger than its
- * `.length` in chars.
+ * SVC-2 — the shared size bound for a journaled workflow-agent entry, so ALL backends answer an oversize
+ * TaskResult with the SAME refusal (no dialect divergence). Inlined from service's `workflow-journal-limits` on
+ * onboarding — the 5 MiB figure aligns with TiDB's ~6 MiB per-row txn-entry-size-limit (a row over it is
+ * REJECTED with "entry too large"). PostgreSQL TEXT has no such low limit, so without a shared bound the same
+ * large entry would journal on PG and fail on TiDB; the shared bound makes every backend refuse at the same
+ * byte and with the same code (`workflow.journal_oversize`) before the row reaches the medium. Measured in
+ * BYTES (UTF-8) — a multibyte result can be larger than its `.length` in chars.
  */
 export { MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult } from "../../core/workflow-journal-store.js";
 /**

package/dist/stores/file/workflow-journal-store.js

@@ -5,7 +5,7 @@ import { callKeyOrdinal } from "../../core/workflow-journal-store.js";
 import { AppendLog } from "./fs-atomic.js";
 import { canonicalStoreKey, sanitizePathComponent, writeThenLink } from "./fs-atomic.js";
 import { assertAdoptionBootGate } from "./adoption/marker.js";
-import { oversizeJournalResult } from "../../core/workflow-journal-store.js";
+import { assertJournalEntryFits } from "../../core/workflow-journal-store.js";
 export { MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult } from "../../core/workflow-journal-store.js";
 function entryOf(rec) {
     if (rec.parked !== undefined)
@@ -92,9 +92,7 @@ export class FileWorkflowJournalStore {
         return scope === undefined ? undefined : { scope, byOrdinal };
     }
     async append(runId, scope, entry) {
-        const serialized = JSON.stringify(entry.parked !== undefined ? entry.parked : entry.result);
-        if (oversizeJournalResult(serialized))
-            return;
+        assertJournalEntryFits(entry);
         const committed = this.scopes.get(runId) ?? this.replay(runId)?.scope;
         if (committed !== undefined && committed !== scope) {
             throw new Error(`workflow journal: runId ${runId} already recorded under a different scope`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.11.2",
+  "version": "7.13.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2274,
+  "count": 2279,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -33,7 +33,6 @@
     "AUTO_MODE_ARMING_RECIPE_VERSION": "variable",
     "AUTO_MODE_ARM_REASONS": "variable",
     "AUTO_MODE_BASE_PROMPT": "variable",
-    "AUTO_MODE_BREAKER_CAUSES": "variable",
     "AUTO_MODE_CLASSIFIER_MAX_TOKENS": "variable",
     "AUTO_MODE_DEFAULTS_SENTINEL": "variable",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "variable",
@@ -90,9 +89,6 @@
     "AutoModeArmingFace": "interface",
     "AutoModeArmingFold": "type",
     "AutoModeArmingRecipe": "interface",
-    "AutoModeBreakerCause": "type",
-    "AutoModeBreakerLedger": "class",
-    "AutoModeBreakerTrip": "interface",
     "AutoModeClassified": "interface",
     "AutoModeClassifierCompletion": "type",
     "AutoModeClassifyFn": "type",
@@ -113,6 +109,7 @@
     "AutonomousLoopPromptOptions": "interface",
     "BACKGROUND_AGENT_CONTRACT_SCOPE": "variable",
     "BARE_INTERPRETER_NAMES": "variable",
+    "BARE_REQUEST_CODE": "variable",
     "BASH_READONLY_DEFAULT_ALLOW": "variable",
     "BUILTIN_COMPLIANCE_DENIES": "variable",
     "BUILTIN_READONLY_DENY_TOOLS": "variable",
@@ -156,6 +153,7 @@
     "CHALLENGES_FILE": "variable",
     "CHALLENGE_LEDGER_MAX_EVENTS": "variable",
     "CIRCUIT_OPEN_MARKER": "variable",
+    "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "variable",
     "COARSE_SHELL_TOOLS": "variable",
     "CODE_AGENT_PROMPT": "variable",
     "CODE_REVIEW_PROMPT": "variable",
@@ -1081,6 +1079,8 @@
     "RollingTailBuffer": "class",
     "RootAdoptionFile": "type",
     "RosterAccess": "interface",
+    "RosterBoundCode": "type",
+    "RosterBoundMembers": "interface",
     "RosterEntry": "interface",
     "RosterGcOptions": "interface",
     "RosterSource": "type",
@@ -1311,6 +1311,7 @@
     "TEAM_DISCUSSION_WORKFLOW_NAME": "variable",
     "TOKEN_CHECKPOINT_VERSION": "variable",
     "TOOL_APPROVAL_CARDS": "variable",
+    "TOOL_CARD_ID_MAX_CHARS": "variable",
     "TOOL_CONFORMANCE_VECTORS": "variable",
     "TOOL_CONTRACT_MAX_CHARS": "variable",
     "TOOL_FAMILIES": "variable",
@@ -1491,6 +1492,7 @@
     "WorkflowItemStatus": "type",
     "WorkflowJournalEntry": "type",
     "WorkflowJournalIncompatibleError": "class",
+    "WorkflowJournalOversizeError": "class",
     "WorkflowJournalStore": "interface",
     "WorkflowLimits": "interface",
     "WorkflowMaxAgentsError": "class",
@@ -1549,6 +1551,7 @@
     "assembleCodeTools": "function",
     "assertAdoptionBootGate": "function",
     "assertDeleteDeltaCarriesNoAdd": "function",
+    "assertJournalEntryFits": "function",
     "assertJsonMetadata": "function",
     "assertMemoryBackendSearchEquivalence": "function",
     "assertOracleIsolation": "function",
@@ -1618,6 +1621,7 @@
     "checkpointVersionOf": "function",
     "clampHopChain": "function",
     "classifierMayAnswer": "function",
+    "classifierUnavailableDenyMessage": "function",
     "classifyCompoundReadonly": "function",
     "classifyCompoundReadonlyDetailed": "function",
     "classifyHttp": "function",
@@ -1857,7 +1861,6 @@
     "inspectDegenerate": "function",
     "isAliasModelId": "function",
     "isAskOrigin": "function",
-    "isAutoModeBreakerCause": "function",
     "isAutoModeUnavailableCause": "function",
     "isCanonicalPeerAddress": "function",
     "isCrossSessionInboundSetting": "function",
@@ -2138,6 +2141,7 @@
     "retiredWorkflowNameAliases": "function",
     "retryBackoffMs": "function",
     "riskSeverity": "function",
+    "rosterMemberBoundProblem": "function",
     "routePairingStatus": "function",
     "routePeerDeliveryReceipt": "function",
     "routePeerDroppedReceipt": "function",
@@ -2269,6 +2273,7 @@
     "withRetry": "function",
     "witnessAdoptionConfig": "function",
     "workflowAgentCallKey": "function",
+    "workflowJournalStoreContract": "function",
     "workflowRunStoreContract": "function",
     "workflowScriptReadsClockOrRandom": "function",
     "workflowWhenToUseText": "function",
@@ -2309,7 +2314,6 @@
     "AUTO_MODE_ARMING_RECIPE_VERSION": "advanced",
     "AUTO_MODE_ARM_REASONS": "advanced",
     "AUTO_MODE_BASE_PROMPT": "advanced",
-    "AUTO_MODE_BREAKER_CAUSES": "advanced",
     "AUTO_MODE_CLASSIFIER_MAX_TOKENS": "advanced",
     "AUTO_MODE_DEFAULTS_SENTINEL": "advanced",
     "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "advanced",
@@ -2366,9 +2370,6 @@
     "AutoModeArmingFace": "advanced",
     "AutoModeArmingFold": "advanced",
     "AutoModeArmingRecipe": "advanced",
-    "AutoModeBreakerCause": "advanced",
-    "AutoModeBreakerLedger": "advanced",
-    "AutoModeBreakerTrip": "advanced",
     "AutoModeClassified": "advanced",
     "AutoModeClassifierCompletion": "advanced",
     "AutoModeClassifyFn": "advanced",
@@ -2389,6 +2390,7 @@
     "AutonomousLoopPromptOptions": "advanced",
     "BACKGROUND_AGENT_CONTRACT_SCOPE": "advanced",
     "BARE_INTERPRETER_NAMES": "advanced",
+    "BARE_REQUEST_CODE": "advanced",
     "BASH_READONLY_DEFAULT_ALLOW": "advanced",
     "BUILTIN_COMPLIANCE_DENIES": "advanced",
     "BUILTIN_READONLY_DENY_TOOLS": "advanced",
@@ -2432,6 +2434,7 @@
     "CHALLENGES_FILE": "advanced",
     "CHALLENGE_LEDGER_MAX_EVENTS": "advanced",
     "CIRCUIT_OPEN_MARKER": "advanced",
+    "CLASSIFIER_PARSE_FAILURE_DENY_MESSAGE": "advanced",
     "COARSE_SHELL_TOOLS": "stable",
     "CODE_AGENT_PROMPT": "advanced",
     "CODE_REVIEW_PROMPT": "advanced",
@@ -3357,6 +3360,8 @@
     "RollingTailBuffer": "advanced",
     "RootAdoptionFile": "advanced",
     "RosterAccess": "advanced",
+    "RosterBoundCode": "advanced",
+    "RosterBoundMembers": "advanced",
     "RosterEntry": "advanced",
     "RosterGcOptions": "advanced",
     "RosterSource": "advanced",
@@ -3587,6 +3592,7 @@
     "TEAM_DISCUSSION_WORKFLOW_NAME": "advanced",
     "TOKEN_CHECKPOINT_VERSION": "advanced",
     "TOOL_APPROVAL_CARDS": "advanced",
+    "TOOL_CARD_ID_MAX_CHARS": "advanced",
     "TOOL_CONFORMANCE_VECTORS": "advanced",
     "TOOL_CONTRACT_MAX_CHARS": "advanced",
     "TOOL_FAMILIES": "advanced",
@@ -3767,6 +3773,7 @@
     "WorkflowItemStatus": "advanced",
     "WorkflowJournalEntry": "advanced",
     "WorkflowJournalIncompatibleError": "advanced",
+    "WorkflowJournalOversizeError": "advanced",
     "WorkflowJournalStore": "advanced",
     "WorkflowLimits": "advanced",
     "WorkflowMaxAgentsError": "advanced",
@@ -3825,6 +3832,7 @@
     "assembleCodeTools": "advanced",
     "assertAdoptionBootGate": "advanced",
     "assertDeleteDeltaCarriesNoAdd": "advanced",
+    "assertJournalEntryFits": "advanced",
     "assertJsonMetadata": "advanced",
     "assertMemoryBackendSearchEquivalence": "advanced",
     "assertOracleIsolation": "advanced",
@@ -3894,6 +3902,7 @@
     "checkpointVersionOf": "advanced",
     "clampHopChain": "advanced",
     "classifierMayAnswer": "advanced",
+    "classifierUnavailableDenyMessage": "advanced",
     "classifyCompoundReadonly": "advanced",
     "classifyCompoundReadonlyDetailed": "advanced",
     "classifyHttp": "advanced",
@@ -4133,7 +4142,6 @@
     "inspectDegenerate": "advanced",
     "isAliasModelId": "advanced",
     "isAskOrigin": "advanced",
-    "isAutoModeBreakerCause": "advanced",
     "isAutoModeUnavailableCause": "advanced",
     "isCanonicalPeerAddress": "advanced",
     "isCrossSessionInboundSetting": "advanced",
@@ -4414,6 +4422,7 @@
     "retiredWorkflowNameAliases": "advanced",
     "retryBackoffMs": "advanced",
     "riskSeverity": "advanced",
+    "rosterMemberBoundProblem": "advanced",
     "routePairingStatus": "advanced",
     "routePeerDeliveryReceipt": "advanced",
     "routePeerDroppedReceipt": "advanced",
@@ -4545,6 +4554,7 @@
     "withRetry": "advanced",
     "witnessAdoptionConfig": "advanced",
     "workflowAgentCallKey": "advanced",
+    "workflowJournalStoreContract": "advanced",
     "workflowRunStoreContract": "advanced",
     "workflowScriptReadsClockOrRandom": "advanced",
     "workflowWhenToUseText": "advanced",