@sema-agent/core 7.15.0 → 7.17.0

package/dist/core/runner/prepare-suspend-saga.js

@@ -106,7 +106,6 @@ export function prepareSuspendSaga(input) {
         activeTools: [...activeTools],
         outputRef: { value: outputRef.value, set: outputRef.set },
         nestedStats: { ...nestedStats },
-        consolidationNotes: undefined,
         readFileState: readFileStateForCheckpoint ? [...readFileStateForCheckpoint.entries()] : undefined,
         readFace: faceCheckpointSection(),
         reminderMark,
@@ -121,7 +120,6 @@ export function prepareSuspendSaga(input) {
                 .map((t) => ({ id: t.task_id, ...(t.description !== undefined ? { description: t.description } : {}) }));
             return live.length > 0 ? live : undefined;
         })(),
-        pendingSteer: undefined,
         pendingSteerQueue: undefined,
         inheritedGate: (() => {
             const requiresParentConstraint = (inheritedParentConstraints?.length ?? 0) > 0 || seedInheritedGate?.requiresParentConstraint === true;

package/dist/core/runner/prepare-task.d.ts

@@ -26,7 +26,7 @@ export declare function __resetToolModelGateAnnouncements(): void;
 export declare const TOOL_MODEL_GATE_RESTORE_SENTENCE = "restore via TaskSpec.restoreGatedTools, SEMA_TOOL_MODEL_GATE=off, or RunnerDeps.toolModelGate: false";
 export { __resetReadFaceClampAnnouncement } from "./prepare-hands-readface.js";
 /**
- * design/164 件四 — how long before an execution environment's declared `lifetimeMs` expires the engine
+ * How long before an execution environment's declared `lifetimeMs` expires the engine
  * stops the run and checkpoints it. The margin has to cover ONE suspend: pausing/snapshotting the
  * workspace, minting the checkpoint, committing it durably, and letting the loop stop cleanly — with
  * room for a slow durable store. 60s is generous for that work and small next to any real sandbox
@@ -39,7 +39,7 @@ export { __resetReadFaceClampAnnouncement } from "./prepare-hands-readface.js";
  */
 export declare const ENV_LIFETIME_SUSPEND_MARGIN_MS = 60000;
 /**
- * design/164 件四 — resolve the moment an env's lifetime EXPIRES (epoch ms), or `undefined` when the env
+ * Resolve the moment an env's lifetime EXPIRES (epoch ms), or `undefined` when the env
  * declares none / cannot be aged. Split out as a pure function so the anchor rules are testable and
  * stated once.
  *
@@ -66,7 +66,7 @@ export { isFableFamilyModelId, resolveAttachmentsConfig, resolveModelPromptTrait
 export { rebaseWorkspacePath, rebaseWorkspacePathAcross } from "./workspace-path.js";
 /** Everything the run loop needs, built once by {@link prepareTask} (task setup, isolated from the loop). */
 /**
- * RB-330 + 5.38 r2 件2 — the SINGLE effective-delegation derivation for a leg, minted once per prepare
+ * The SINGLE effective-delegation derivation for a leg, minted once per prepare
  * and read by EVERY consumer face; two facets, one source:
  *
  *  - `isDelegatedChild` — the raw delegation fact, forks included. Trusted internals first; on a
@@ -79,10 +79,10 @@ export { rebaseWorkspacePath, rebaseWorkspacePathAcross } from "./workspace-path
  *    the `hookIdentity` mint.
  *  - `isNonForkChild` — the fact minus forks, for the authority/context faces: the `loadProjectMemory`
  *    ctx flag ({@link RunnerDeps.loadProjectMemory} `isSubagent`) and the prompt runtime fact
- *    `isSubagent` (RB-204's `SUBAGENT_CONSENT_NOTICE` gate). A FORK is excluded on both, deliberately:
- *    a fork IS the parent continuing (design/110), so it inherits the parent's authority — and, on the
+ *    `isSubagent` (the `SUBAGENT_CONSENT_NOTICE` gate). A FORK is excluded on both, deliberately:
+ * a fork IS the parent continuing, so it inherits the parent's authority — and, on the
  *    memory face, the parent's own project context; trimming a fork's CLAUDE.md would hand the
- *    continuation LESS context than the run it continues. (RB-330 history: the memory face once used
+ *    continuation LESS context than the run it continues. (The memory face must not use
  *    `parentTaskId !== undefined` alone, which {@link RunInternals.isDelegatedChild}'s own docstring
  *    forbids — a directly-started workflow's children have no nameable parent.)
  *
@@ -95,7 +95,7 @@ export declare function effectiveDelegationFacts(internals: Pick<RunInternals, "
     isNonForkChild: boolean;
 };
 /**
- * Build everything a task run needs (council design/34 ②: a free function with EXPLICIT deps, not a
+ * Build everything a task run needs (a free function with EXPLICIT deps, not a
  * Runner method — testable and decoupled). Resolves the model/role/thinking, acquires + reconciles the
  * session (with the conflict-detecting Proxy + bounded re-wake on a lost CAS), assembles the tool set
  * (caller tools + offload wrap + report_blocked + submit_output + MCP + memory + read_tool_result),
@@ -104,19 +104,19 @@ export declare function effectiveDelegationFacts(internals: Pick<RunInternals, "
  * flow** lives here — that stays in the Runner loop.
  */
 export declare function prepareTask(spec: TaskSpec, deps: RunnerDeps, sessions: SessionStore, resume?: PrepareResume, internals?: RunInternals, 
-/** design/98 §3.1 (S8c): a TRUSTED self-reference to the Runner, passed by the Runner itself (never a
+/** A TRUSTED self-reference to the Runner, passed by the Runner itself (never a
  *  TaskSpec field) so the `run_workflow` tool can execute child tasks via `runner.runTask`. Undefined when
  *  prepareTask is exercised standalone (then run_workflow is simply not mounted). */
 runnerSelf?: RunnerSelfSeat, 
-/** #499 — carrier for the id minted below, so a prepare that THROWS still lets its caller name the
+/** Carrier for the id minted below, so a prepare that THROWS still lets its caller name the
  *  run (prepare emits run-scoped notices of its own; each needs a terminal that names it). Same seat
  *  shape the Runner uses for the generated taskId/sessionId. */
 runIdSink?: {
     runId?: string;
 }): Promise<Prepared>;
-/** design/393 S7 (#675) — the entry IS the contract the notification lane's seat names ({@link PrepareTaskFn}, contracts.ts):
- *  a signature change reds HERE, at the declaration, as `false` failing the `true` bound. IDENTITY, not assignability (review
- *  round 1): the parameter tuple (arity, optionality, each type) and the return type must be the SAME type in both directions —
+/** The entry IS the contract the notification lane's seat names ({@link PrepareTaskFn}, contracts.ts):
+ *  a signature change reds HERE, at the declaration, as `false` failing the `true` bound. IDENTITY, not assignability:
+ *  the parameter tuple (arity, optionality, each type) and the return type must be the SAME type in both directions —
  *  one-way `extends` let a dropped trailing parameter, an added optional one or a narrowed return slip through. Type-level only —
  *  nothing is emitted. */
 type Holds<T extends true> = T;

package/dist/core/runner/prepare-task.js

@@ -58,6 +58,7 @@ import { derivedRouteFallsBack } from "./derived-route-fallback.js";
 import { prepareProtocolTools } from "./prepare-protocol-tools.js";
 import { prepareQuestionFace } from "./prepare-question-face.js";
 import { prepareLsp } from "./prepare-lsp.js";
+import { prepareArtifact } from "./prepare-artifact.js";
 import { createRollbackStack } from "./rollback-stack.js";
 export { __resetMaterializeEnvAnnouncements } from "./prepare-tool-disclosure-mount.js";
 export { fileHistoryFilesystemIdentity, resolveFileHistoryScope } from "./prepare-file-history.js";
@@ -70,6 +71,7 @@ import { createSchedulerTools } from "../../tools/scheduler-tools.js";
 import { selfOrchestrationFailClosedReason } from "../../orchestration/workflow-script-runner.js";
 import { remainingBudgetMicroUsd, resolveCheckpointStore } from "../checkpoint-store.js";
 import { checkpointSeatOf } from "../checkpoint-seat.js";
+import { handsWriteHalfMounts } from "../../tools/fs/index.js";
 import { durableParkGapFor } from "../park-selfcheck.js";
 import { deliverEngineNotice } from "../types.js";
 import { ToolRosterDeltaSeat } from "../tool-roster.js";
@@ -264,7 +266,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
     const { toolFaceSnapshot, promptProfile, lockedPreflight, resolvedInteractionPosture, microCompactKnob, resolvedRole, model, thinking, compModel, fableMitigations, memoryDelegationEvidence, memoryProvenance, memoryCapturePolicy, usageWindows, brainCallGuardrailRef, brainCallGuardrailMs } = doors;
     announceToolModelGate(deps.onNotice, model.id, doors.modelGate);
     const modelGateManifest = toolModelGateManifest(doors.modelGate);
-    const { toolEffects, egressTools, irreversibleTools, irreversibilityTier, axisExplicitNegatives, reversibilityProbes, ownToolNames } = prepareSafetyScan({ spec, deps });
+    const { toolEffects, egressTools, irreversibleTools, irreversibilityTier, axisExplicitNegatives, reversibilityProbes } = prepareSafetyScan({ spec, deps });
     let shellGatedTools = new Set();
     refuseRequireExistingWithoutSession(spec);
     const { acquired, session, conflictRef, wakeRecovered, resumeAtBeforeParentId } = await prepareAcquireReconcile({ sessions, spec, resume, toolEffects, ...(internals?.sessionPlacement !== undefined ? { placement: internals.sessionPlacement } : {}), ...(() => { const g = durableParkGapFor(deps, spec); return g !== undefined ? { durableParkGap: g } : {}; })() });
@@ -368,8 +370,8 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         let resolvedReadFace;
         let readDenyAdditionsNormalized = [];
         let handsLessResolvedFace;
-        const { liveInheritedGate, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, inheritedParentConstraints, autoModeIntent, inheritedAdmittedOrgScopes, priorOwnOrgVerdict, orgGovernedProvenance, effectiveShellGate, ownSessionRulesRef, memoryAdmittedOrgScopesRef, ownOrgVerdictRef, orgAdmissionCheckpointState, faceCheckpointSection, faceCheckpointState, f012CheckpointState, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, frozenOnQuestion, provenanceForChildrenRef, delegationSettlementRef, inheritedGateForChildren, carrierReadFace, fullShellReachable, gateStopRef, stopForDenialLimit, enrichSpecToolCtx } = prepareInheritedGate({ spec, deps, internals, resume, sessions, sessionId, runId, hostTaskId, taskRootFinal, executionEnv, ownedEnv, lockedPreflight, checkpointSeat, toolFaceSnapshot, promptProfile, resolvedInteractionPosture, autoModeSeat, handsEnabled, reportUsage, harnessRef, skillScope, forwardEvent, subagentRetain, worktreeIsolation, requestReview, requestStopAfterTurn, enterPlanMode, reminderMark, reminderDisclosureCounts, fileHistoryEnabled, historyScope, historyRoot, historyFs, abortRun: () => { abortController.abort(); void harness.abort(); }, runtimeCaps: () => runtimeCaps, hooks: () => hooks, preToolUseObservational: () => preToolUseObservational, hookTimeoutMs: () => hookTimeoutMs, hookEnvFace: () => hookEnvFace, autoModeDecider: () => autoModeDecider, autoModeDenialTracking: () => autoModeDenialTracking, autoModeArming: () => autoModeArming, agentForkDenial: () => agentForkDenial, observersActive: () => observersActive, resolvedReadFace: () => resolvedReadFace, readDenyAdditionsNormalized: () => readDenyAdditionsNormalized, handsLessResolvedFace: () => handsLessResolvedFace, centerAdoption: () => centerAdoptionRef.current, memoryEngineSession: () => memoryEngineSession });
-        const { roster, blockedRef, runtimeCaps, runtimeCapsFaulted, complianceDenies, complianceDegraded, agentForkDenial, observersActive, autoModeArmReason, autoModeDecider, autoModeDenialTracking, autoModeArming, selfOrchestrationActive, workflowToolsActive, workflowSizeGuideline } = await prepareCapsAndWorkflow({ spec, deps, internals, session, sessionId, runId, hostTaskId, taskScope, taskRootFinal, model, thinking, lockedPreflight, checkpointSeat, toolEffects, toolFaceSnapshot, promptProfile, resolvedInteractionPosture, harnessRef, frozenOnAsk, carrierReadFace, forwardEvent, inheritedGateForChildren, enrichSpecToolCtx, maybeOffload, requestReview, enterPlanMode, autoModeIntent, peerLaneActive, peerSendMessageBuiltIn, runnerSelf, memoryEngineSession: () => memoryEngineSession, centerAdoption: () => centerAdoptionRef.current, readDenyAdditionsNormalized: () => readDenyAdditionsNormalized });
+        const { liveInheritedGate, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, inheritedParentConstraints, autoModeIntent, inheritedAdmittedOrgScopes, priorOwnOrgVerdict, orgGovernedProvenance, effectiveShellGate, ownSessionRulesRef, memoryAdmittedOrgScopesRef, ownOrgVerdictRef, orgAdmissionCheckpointState, faceCheckpointSection, faceCheckpointState, f012CheckpointState, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, frozenOnQuestion, parentSpecSeat, provenanceForChildrenRef, delegationSettlementRef, inheritedGateForChildren, carrierReadFace, fullShellReachable, gateStopRef, stopForDenialLimit, enrichSpecToolCtx } = prepareInheritedGate({ spec, deps, internals, resume, sessions, sessionId, runId, hostTaskId, taskRootFinal, executionEnv, ownedEnv, lockedPreflight, checkpointSeat, toolFaceSnapshot, promptProfile, resolvedInteractionPosture, autoModeSeat, handsEnabled, reportUsage, harnessRef, skillScope, forwardEvent, subagentRetain, worktreeIsolation, requestReview, requestStopAfterTurn, enterPlanMode, reminderMark, reminderDisclosureCounts, fileHistoryEnabled, historyScope, historyRoot, historyFs, abortRun: () => { abortController.abort(); void harness.abort(); }, runtimeCaps: () => runtimeCaps, hooks: () => hooks, preToolUseObservational: () => preToolUseObservational, hookTimeoutMs: () => hookTimeoutMs, hookEnvFace: () => hookEnvFace, autoModeDecider: () => autoModeDecider, autoModeDenialTracking: () => autoModeDenialTracking, autoModeArming: () => autoModeArming, agentForkDenial: () => agentForkDenial, observersActive: () => observersActive, resolvedReadFace: () => resolvedReadFace, readDenyAdditionsNormalized: () => readDenyAdditionsNormalized, handsLessResolvedFace: () => handsLessResolvedFace, centerAdoption: () => centerAdoptionRef.current, memoryEngineSession: () => memoryEngineSession });
+        const { roster, blockedRef, runtimeCaps, runtimeCapsFaulted, complianceDenies, complianceDegraded, agentForkDenial, observersActive, autoModeArmReason, autoModeDecider, autoModeDenialTracking, autoModeArming, selfOrchestrationActive, workflowToolsActive, workflowSizeGuideline } = await prepareCapsAndWorkflow({ spec, deps, internals, session, sessionId, runId, hostTaskId, taskScope, taskRootFinal, model, thinking, lockedPreflight, checkpointSeat, toolEffects, toolFaceSnapshot, promptProfile, resolvedInteractionPosture, harnessRef, frozenOnAsk, parentSpecSeat, carrierReadFace, forwardEvent, inheritedGateForChildren, enrichSpecToolCtx, maybeOffload, requestReview, enterPlanMode, autoModeIntent, peerLaneActive, peerSendMessageBuiltIn, runnerSelf, memoryEngineSession: () => memoryEngineSession, centerAdoption: () => centerAdoptionRef.current, readDenyAdditionsNormalized: () => readDenyAdditionsNormalized });
         const tools = roster.tools;
         const pausedRef = {};
         const remoteEnvFailures = [];
@@ -432,11 +434,10 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         const { mcp, a2a, rebuildHarnessToolsRef, contentOriginWrapRef, toolCallGateArmedRef } = await prepareProtocolTools({ lockedPreflight, spec, deps, reminderMark, reminderDisclosureCounts, runId, sessionId, onceLedger, roster, rosterSeat, remoteToolOffload, toolFaceSnapshot, toolEffects, axisExplicitNegatives, irreversibilityTier, irreversibleTools, egressTools, abortController, rollback });
         const callIssuedAtRef = {};
         const workCutRef = { continuation: false, abortedBeforeTurnEnd: false };
-        const memoryWriteGateRef = {};
         const advertisedWritableDirs = handsEnabled
             ? new AdvertisedWritableDirs(executionEnv, (dir, reason) => deps.onError?.(new Error(`${dir.advertiser} advertised writable directory skipped (cannot canonicalize): ${dir.path} — ${reason}`), { phase: "config", sessionId }))
             : undefined;
-        const handsWriteHalfPlanned = handsEnabled && spec.handsReadOnly !== true;
+        const handsWriteHalfPlanned = handsEnabled && handsWriteHalfMounts({ readOnly: spec.handsReadOnly === true });
         const memoryPairNameDomain = new Set();
         for (const t of tools) {
             memoryPairNameDomain.add(t.name);
@@ -455,12 +456,11 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 return { fault: true };
             }
         })();
-        const { memoryEngineSession, memoryTools, composeInjection: composeMemoryInjection, admittedOrgScopes: memoryAdmittedOrgScopes, ownOrgVerdict: memoryOwnOrgVerdict, effectiveMemoryScopes: memoryEffectiveScopes, } = await prepareMemory({
+        const { memoryEngineSession, memoryTools, memoryWriteGate, composeInjection: composeMemoryInjection, admittedOrgScopes: memoryAdmittedOrgScopes, ownOrgVerdict: memoryOwnOrgVerdict, effectiveMemoryScopes: memoryEffectiveScopes, } = await prepareMemory({
             spec,
             deps,
             sessionId,
             taskRootPath: taskRootFinal,
-            memoryWriteGateRef,
             reminderMark,
             writeToolsMounted: (handsWriteHalfPlanned || tools.some((t) => t.name === "Write")) &&
                 !(toolFaceSnapshot.exclude?.includes("Write") ?? false) &&
@@ -505,7 +505,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
         if (internals?.ownOrgAdmissionRef !== undefined && ownOrgVerdictRef.current !== undefined) {
             internals.ownOrgAdmissionRef.current = ownOrgVerdictRef.current;
         }
-        const handsReadFaceInput = { handsEnabled, executionEnv, taskRootFinal, rebaseRestoredPath, resume, session, sessionId, hostTaskId, taskScope, fullShellReachable, effectiveShellGate, toolFaceSnapshot, model, spec, deps, internals, memoryWriteGateRef, ...(advertisedWritableDirs !== undefined ? { advertisedWritableDirs } : {}), firstPartyOffload, roster, egressTools, irreversibilityTier, irreversibleTools, reversibilityProbes, reminderMark, reminderDisclosureCounts, ...(trackFileEdit !== undefined ? { trackFileEdit } : {}), onFileEdited: noteFileEdited, ...(restoredFilePaths.length > 0 ? { restoredFilePaths } : {}) };
+        const handsReadFaceInput = { handsEnabled, executionEnv, taskRootFinal, rebaseRestoredPath, resume, session, sessionId, hostTaskId, taskScope, fullShellReachable, effectiveShellGate, toolFaceSnapshot, model, spec, deps, internals, memoryWriteGate, ...(advertisedWritableDirs !== undefined ? { advertisedWritableDirs } : {}), firstPartyOffload, roster, egressTools, irreversibilityTier, irreversibleTools, reversibilityProbes, reminderMark, reminderDisclosureCounts, ...(trackFileEdit !== undefined ? { trackFileEdit } : {}), onFileEdited: noteFileEdited, ...(restoredFilePaths.length > 0 ? { restoredFilePaths } : {}) };
         const handsReadFace = handsEnabled ? await prepareHandsMount(handsReadFaceInput) : resolveHandsLessReadFace(handsReadFaceInput);
         const { readFileStateForCheckpoint, seedContextFiles, handsCwdRef, workspaceStateSettle, wsSnapshot, rebaseWsPath, backgroundTaskToolsActive, additionalRootsCanonical, additionalReadRootsCanonical, attachmentRootCanonical, readDenyMatcher, envHandToolNames, sealReadStateSeat } = handsReadFace;
         resolvedReadFace = handsReadFace.resolvedReadFace;
@@ -532,6 +532,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 `(per-principal entitlement governance, not a misconfiguration — Agent(subagent_type:"fork") will refuse honestly)`), { phase: "config", sessionId });
         }
         const { lspDiagnostics, nudgeLspOnEdit, lspRunIdent } = prepareLsp({ spec, deps, executionEnv, taskRootFinal, handsEnabled, sessionId, handsCwdRef, roster, envHandToolNames });
+        prepareArtifact({ deps, runId, taskId: hostTaskId, sessionId, agentName: internals?.explicitAgentName, executionEnv, rootCanonical: attachmentRootCanonical, additionalRootsCanonical: [...additionalRootsCanonical, ...additionalReadRootsCanonical], readDenyMatcher, resolvedReadFace, handsCwdRef, roster, firstPartyOffload, envHandToolNames });
         if (internals?.delegationProvenance !== undefined && resume !== undefined) {
             const live = internals.delegationProvenance.ref.current;
             const seed = resume.seed.delegationProvenance;
@@ -681,7 +682,7 @@ export async function prepareTask(spec, deps, sessions, resume, internals, runne
                 releaseSignal = () => sig.removeEventListener("abort", onExternalAbort);
             }
         }
-        const { hooks, hookTimeoutMs, preToolUseObservational, ownGatePreToolUse, basePolicyForResumeEdit, denyNarrowingPolicy, policyLayers, effectivePolicy, inheritedUnavailableAsks, inheritedAskGrants, askSourceIdentity, riskAxesOf, ruleOffersOf, permissionRuleLane, permissionRuleOrgLane, sandboxAdmissionArmed, sandboxBoundaryCapable, emitSandboxAdmitted, foldAskClasses, ancestorSandboxAdmissions } = await preparePolicyChain({ spec, deps, internals, sessionId, runId, hostTaskId, taskRootFinal, executionEnv, lockedPreflight, tools, harnessTools, toolEffects, egressTools, irreversibilityTier, axisExplicitNegatives, ownToolNames, shellGatedTools, handsCwdRef, readDenyMatcher, questionToolMounted, runtimeCaps, inheritedAncestorRules, inheritedParentConstraints, seedInheritedGate, hasSkillManifest, skillScope, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, autoModeDecider, stopForDenialLimit, delegation, abortController, now, ownSessionRulesRef });
+        const { hooks, hookTimeoutMs, preToolUseObservational, ownGatePreToolUse, basePolicyForResumeEdit, denyNarrowingPolicy, policyLayers, effectivePolicy, inheritedUnavailableAsks, inheritedAskGrants, askSourceIdentity, riskAxesOf, ruleOffersOf, permissionRuleLane, permissionRuleOrgLane, sandboxAdmissionArmed, sandboxBoundaryCapable, emitSandboxAdmitted, foldAskClasses, ancestorSandboxAdmissions } = await preparePolicyChain({ spec, deps, internals, sessionId, runId, hostTaskId, taskRootFinal, executionEnv, lockedPreflight, tools, harnessTools, toolEffects, egressTools, irreversibilityTier, axisExplicitNegatives, shellGatedTools, envHandToolNames, handsCwdRef, readDenyMatcher, questionToolMounted, runtimeCaps, inheritedAncestorRules, inheritedParentConstraints, seedInheritedGate, hasSkillManifest, skillScope, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, autoModeDecider, stopForDenialLimit, delegation, abortController, now, ownSessionRulesRef });
         const { onAsk, preToolContexts, blockedToolCalls, gateOutcomes, batchHaltRef, blockedTracked, incompleteSuspendAdapter, durableSuspendInfraReady, resourceSuspendEligible, usageGovernance, durableApproval, wiringManifest, parkLaneArmed, gateMachineryActive, hookIdentity, hookEnvFace } = prepareWiringManifest({ spec, deps, internals, resume, sessionId, runId, hostTaskId, taskScope, hooks, preToolUseObservational, policyLayers, effectivePolicy, handsEnabled, mcp, irreversibleTools, egressTools, toolEffects, ownedEnv, executionEnv, offloadStore, onceLedger, usageWindows, envLifetimeSuspendAt, runtimeCaps, resolvedInteractionPosture, durableQuestionFace, liveQuestionFace, checkpointStore, sessions, modelGateManifest, autoModeArmReason, lockedPreflight, peerLaneRefs, peerLaneActive, harness, pausedRef, frozenOnAsk, liveInheritedGate, delegation, toolRoster });
         if (fileHistoryBoundary !== undefined) {
             harness.on("tool_call", async () => {

package/dist/core/runner/prepare-tool-disclosure-mount.d.ts

@@ -1,12 +1,11 @@
 /**
- * design/390 §1.2 M14 — prepareTask's TOOL-DISCLOSURE-MOUNT phase, verbatim from the driver: the deferred registry
+ * PrepareTask's TOOL-DISCLOSURE-MOUNT phase, verbatim from the driver: the deferred registry
  * and its placeholders, the ToolSearch mount with its serialized activation section, the materialize strategy's
  * two-layer resolution (spec over the env channel, the safety interlock, the loud arms for a discarded env value), the
  * per-tool static exemption with its monotone ledger, the activation seed from the transcript / compaction snapshots /
  * checkpoint, the callable-names accessor the offload preview and ToolSearch share, the delta ref with its failed-server
  * arm, and the RefreshMcpTools rebuild seam's two arms. The env-channel announce ledger (per sink, per line) moved with
- * the segment — only this phase announces through it. The interface is the dependency list the segment had implicitly
- * (design/238 R-1).
+ * the segment — only this phase announces through it. The interface is the dependency list the segment had implicitly.
  *
  * ASYNC PHASE: with deferred names present the segment awaits the session's context and branch (the activation seed),
  * exactly where the driver awaited them; with nothing deferred the body has no await of its own. The phase adds no yield

package/dist/core/runner/prepare-wiring-manifest.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/390 §1.2 M18 — prepareTask's WIRING-MANIFEST phase, verbatim from the driver: the run's own frozen approver
+ * PrepareTask's WIRING-MANIFEST phase, verbatim from the driver: the run's own frozen approver
  * seat, the loud ungated-write warning (hand band / destructive MCP / first-party write tools with no effect-aware gate,
  * deduped per deployment and tool-set shape), the PreToolUse context stash and the blocked-call set, the settlement and
  * bare-rejection sidebands, the turn halt fact, the suspend infrastructure predicates (restore surface gap, durable
@@ -7,10 +7,10 @@
  * durableApproval, the effective wiring manifest, the peer lane's ask fold and drain binding, the park predicate as ONE
  * named const, the durable-gate-unavailable notice, the hook identity mint and the hook env face. The four helpers only
  * this segment called moved with it (usage governance, the per-deployment warn ledger, the MCP manifest projection, the
- * durable-gate notice). The interface is the dependency list the segment had implicitly (design/238 R-1).
+ * durable-gate notice). The interface is the dependency list the segment had implicitly.
  *
  * SYNCHRONOUS FUNCTION, SYNCHRONOUS CALL: the stretch has no await, so the phase adds no yield between the policy-chain
- * station before it and the gate registration after it (design/390 §1.5: a stretch with no await is extracted as a sync
+ * station before it and the gate registration after it (a stretch with no await is extracted as a sync
  * function). Read-stability of the host handles for the call: {@link RunInternals} (`@contract prepare.deps-read-stable`).
  *
  * One read changed spelling and nothing else: the manifest's MCP face read `mcp?.statuses ?? []` while `mcp` had long
@@ -103,7 +103,7 @@ export interface PrepareWiringManifestInput {
     sessions: SessionStore;
     /** borrowed-readonly — the model gate's per-leg read face, or undefined. */
     modelGateManifest: WiringManifest["modelGate"];
-    /** borrowed-readonly — the leg's minted tool roster (design/388): rides the manifest's `tools` section and is the
+    /** borrowed-readonly — the leg's minted tool roster: rides the manifest's `tools` section and is the
      *  source of the hand band's write-capable names for the ungated-write warning (what actually MOUNTED). */
     toolRoster: ToolRoster;
     /** borrowed-readonly — the arming outcome the caps phase minted (the manifest's auto-mode face). */

package/dist/core/runner/prepare-wiring-manifest.js

@@ -3,7 +3,7 @@ import { resolveCheckpointStore } from "../checkpoint-store.js";
 import { createHookEnvCapabilities, mintHookInvocationIdentity } from "../hooks.js";
 import { isRemoteExecutionEnv, missingRestoreSurface } from "../remote-env.js";
 import { isVolatileOffloadStore } from "../tool-result-store.js";
-import { isLiveApproverSeat } from "../tool-policy.js";
+import { durableMandateSourceOf, isLiveApproverSeat } from "../tool-policy.js";
 import { deliverEngineNotice } from "../types.js";
 import { inlineUntrusted } from "../untrusted-text.js";
 import { GLOBAL_USAGE_KEY, usageRetryAfterMs, windowsGovernCost } from "../usage-window-store.js";
@@ -84,24 +84,26 @@ function buildUsageGovernance(windows, deps, principal, sessionId) {
 }
 const ungatedWarnedShapes = new WeakMap();
 function announceDurableGateUnavailable(args) {
-    if (!args.forceDurableGate || args.storeWired)
+    if (args.mandate === undefined || args.storeWired)
         return;
+    const source = args.mandate;
     const cause = args.taskStoreDisabled ? "task_store_disabled" : "no_deployment_store";
     const inheritedContentMandate = (args.parentConstraints ?? []).some((pc) => pc.contentMandate === true);
     const liveQuestionFace = args.liveQuestionFace && !inheritedContentMandate;
     deliverEngineNotice(args.onNotice, {
         code: "config.durable_gate_unavailable",
-        message: `Durable approval gate mandated but unavailable: the runtime entitlement forceDurableGate is in force for this ` +
-            `principal, but ${cause === "task_store_disabled" ? 'this task disabled the checkpoint store (checkpointStore: "disabled")' : "this deployment wired no checkpoint store"}, ` +
+        message: `Durable approval gate mandated but unavailable: ${source === "force_durable_gate" ? "the runtime entitlement forceDurableGate is in force for this principal" : "this task opted into durable approval (durableApproval) with no live approver seat"}, ` +
+            `but ${cause === "task_store_disabled" ? 'this task disabled the checkpoint store (checkpointStore: "disabled")' : "this deployment wired no checkpoint store"}, ` +
             `so no interactive ask of this task can be parked for a durable answer. Asks resolve on the live chain instead ` +
-            `(${args.liveApprover ? "a live approver answers permission asks in-stream" : "permission asks are denied fail-closed — no live approver is wired"}; ` +
+            `(${args.liveApprover ? "a live approver answers permission asks in-stream" : args.blanketAllow ? 'a blanket "allow" posture answers ordinary permission asks without judgment (a mandated ask is refused)' : "permission asks are denied fail-closed — no live approver is wired"}; ` +
             `${liveQuestionFace ? "a live question face answers AskUserQuestion in-stream" : args.liveQuestionFace ? "AskUserQuestion is withheld from the live face by an inherited durable mandate and refused" : "AskUserQuestion has no live face and is refused"}) ` +
-            `and NO durable approval record is written. ${cause === "task_store_disabled" ? "Run this task with its store, or withdraw the entitlement for principals whose runs are machine-started." : "Wire a checkpoint store on this deployment, or withdraw the entitlement for principals served here."}`,
+            `and NO durable approval record is written. ${cause === "task_store_disabled" ? "Run this task with its store" : "Wire a checkpoint store on this deployment"}, or ${source === "force_durable_gate" ? "withdraw the entitlement for principals served here" : "give the task a live approver seat (or drop durableApproval)"}.`,
         detail: {
             sessionId: args.sessionId,
             runId: args.runId,
             ...(args.principal ? { principal: args.principal } : {}),
             cause,
+            source,
             liveApprover: args.liveApprover,
             liveQuestionFace,
         },
@@ -225,7 +227,7 @@ export function prepareWiringManifest(input) {
         resourceSuspendEligible ||
         platformSuspendArmed ||
         spec.enablePlanMode === true;
-    announceDurableGateUnavailable({ onNotice: deps.onNotice, forceDurableGate: runtimeCaps?.forceDurableGate === true, storeWired: checkpointStore !== undefined, taskStoreDisabled: spec.checkpointStore === "disabled", liveApprover: isLiveApproverSeat(frozenOnAsk), liveQuestionFace: liveQuestionFace !== undefined, parentConstraints: liveInheritedGate?.parentConstraints, sessionId, runId, principal: spec.principal });
+    announceDurableGateUnavailable({ onNotice: deps.onNotice, mandate: durableMandateSourceOf({ forceDurableGate: runtimeCaps?.forceDurableGate === true, durableApprovalDeclared: spec.durableApproval !== undefined, onAsk: frozenOnAsk }), storeWired: checkpointStore !== undefined, taskStoreDisabled: spec.checkpointStore === "disabled", liveApprover: isLiveApproverSeat(frozenOnAsk), blanketAllow: frozenOnAsk === "allow", liveQuestionFace: liveQuestionFace !== undefined, parentConstraints: liveInheritedGate?.parentConstraints, sessionId, runId, principal: spec.principal });
     const hookIdentity = mintHookInvocationIdentity({
         sessionId,
         taskId: hostTaskId,

package/dist/core/runner/prepare-workspace-restore.d.ts

@@ -45,7 +45,7 @@ export interface PrepareWorkspaceRestoreResult {
      *  phases, so a consumer moved ahead of this call is a lexical error. */
     taskRootFinal: string;
     /** owned (pure function; closes over the phase-armed rebase state) — migrates one checkpointed
-     *  absolute path from the OLD workspace root onto the restored one (RB-439-c: any accepted
+     *  absolute path from the OLD workspace root onto the restored one (any accepted
      *  spelling of the old root); the identity function when no divergence was armed. Consumers (T7):
      *  the readFileState checkpoint seed, the handsCwd seed, the activeWorktree restore. */
     rebaseRestoredPath: (p: string) => string;

package/dist/core/runner/remote-env-retry.d.ts

@@ -1,13 +1,13 @@
 import type { RemoteExecutionEnv, RemoteExecutionError, SnapshotId, VmLifecycleOptions } from "../remote-env.js";
 import type { RemoteEnvFailureNote } from "../types.js";
 /**
- * RB-439-a — project one failed remote lifecycle call onto the caller-facing note. ONE builder for all
+ * Project one failed remote lifecycle call onto the caller-facing note. ONE builder for all
  * three ops so the `retryable` classification can never drift between the lane that reports a `suspendVM`
  * refusal and the lane that reports a failed restore.
  */
 export declare function remoteEnvFailureNote(op: RemoteEnvFailureNote["op"], error: RemoteExecutionError, attempts: number): RemoteEnvFailureNote;
 /**
- * RB-439-a — `resumeVM` with a bounded retry on the TRANSIENT codes, plus the attempt count for the
+ * `resumeVM` with a bounded retry on the TRANSIENT codes, plus the attempt count for the
  * caller-facing note.
  *
  * Why this op and no other: `resumeVM` is the one lifecycle call the seam documents as "idempotent +
@@ -19,7 +19,7 @@ export declare function remoteEnvFailureNote(op: RemoteEnvFailureNote["op"], err
  * attempt — `withRetry` will not spend a second call on a permanent refusal.
  */
 export declare function restoreWorkspaceWithRetry(env: RemoteExecutionEnv, snapshotId: SnapshotId, options: VmLifecycleOptions, 
-/** design/384 slice 2 (additive): observe each attempt AS IT STARTS. The returned `attempts` is
+/** Observe each attempt AS IT STARTS. The returned `attempts` is
  *  only readable after settlement, and a caller whose wait on this promise is BOUNDED (the park
  *  compensation) must report the live attempt count when its bound fires mid-call — without this
  *  seat a deaf second attempt was reported as `attempts: 1`. */

package/dist/core/runner/resume-admission.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's ADMISSION rung (E1) and the wake's shaping (E2), verbatim from
+ * The resume ladder's ADMISSION rung (E1) and the wake's shaping (E2), verbatim from
  * `Runner.resumeStream`: the outcome container's domain, the one-read snapshots of the caller's config and
  * the trusted internals bag, the store resolution, the row read and its terminal-status confirm, the
  * same-process parent-constraint re-supply, then the wake pre-ladder (gate purity, pendingAction purity,

package/dist/core/runner/resume-admission.js

@@ -36,6 +36,7 @@ export async function resumeAdmission(input) {
     const outcomeGate = outcome.gate;
     const resumeSignal = config.signal;
     let suppliedMessage;
+    const parkedSteers = readPendingSteerQueue(cp.state);
     if (outcomeGate === "wake") {
         suppliedMessage = outcome.message;
         const gk = cp.gate.kind;
@@ -74,7 +75,7 @@ export async function resumeAdmission(input) {
         if (suppliedMessage !== undefined) {
             wakeMessage = validatePendingSteer(suppliedMessage);
         }
-        else if (readPendingSteerQueue(cp.state).length === 0) {
+        else if (parkedSteers.length === 0) {
             throw new CheckpointError("wake.nothing_to_deliver", "cannot wake: no message was supplied and the checkpoint holds no parked pendingSteer — an empty " +
                 "wake would burn the checkpoint on a blank continuation; supply `message` or park a steer first");
         }

package/dist/core/runner/resume-claim.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's CLAIM rung (E10), verbatim from `Runner.resumeStream`: the atomic
+ * The resume ladder's CLAIM rung (E10), verbatim from `Runner.resumeStream`: the atomic
  * CAS (`claimTerminal` when the store provides it — one round trip carrying the loser's truth — else the
  * two-step `resolve` + diagnostic read), the same-Runner claim mark around it, and the loss classification
  * (`reopened_concurrently` for a live row whose rev moved, `already_resolved` for a consumed one, with the

package/dist/core/runner/resume-internals-and-config.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's INTERNALS-AND-CONFIG rung (E7), verbatim from `Runner.resumeStream`:
+ * The resume ladder's INTERNALS-AND-CONFIG rung (E7), verbatim from `Runner.resumeStream`:
  * the locked-policy guard on the resume-edit seat, the principal and placement identity-continuity rungs,
  * and the governance-window ENTRANCE check for a row that still owes a delivery.
  *

package/dist/core/runner/resume-internals-and-config.js

@@ -1,9 +1,13 @@
 import { CheckpointError, readPendingSteerQueue } from "../checkpoint-store.js";
 import { GLOBAL_USAGE_KEY, resolveUsageWindows, usageRetryAfterMs } from "../usage-window-store.js";
 import { placementValueOrAbsent } from "./checkpoint-scope.js";
+import { assertNoRetiredRunnerDeps } from "./retired-runner-deps.js";
+import { resolveMicroCompactKnob } from "./prepare-config-doors.js";
 export function resumeInternalsAndConfig(input) {
     const { cp, config, internals, outcomeGate, runner } = input;
     let windowEntrance;
+    assertNoRetiredRunnerDeps(runner.deps);
+    resolveMicroCompactKnob(runner.deps.microCompact);
     if (runner.deps.lockedConfig?.keys?.includes("toolPolicy") === true && config.basePolicyForResumeEdit !== undefined) {
         throw new CheckpointError("checkpoint.invalid_outcome", "TaskSpec.basePolicyForResumeEdit is administratively locked by this deployment (locked key \"toolPolicy\") — a task-supplied " +
             "resume-edit policy is refused pre-CAS (the checkpoint stays pending); remove the field or change the deployment's lock configuration");

package/dist/core/runner/resume-policy-outcome.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's APPROVAL-LANE capture and binding rung (E4), verbatim from
+ * The resume ladder's APPROVAL-LANE capture and binding rung (E4), verbatim from
  * `Runner.resumeStream`: on a human / irreversible_ask row every deployment-supplied field of the
  * `policy_ask` decide is read exactly once into a plain twin (answer canonicalized, updatedInput cloned to the
  * JSON domain, the decision word, the refused keys, the host's decision facts and attribution, the deny note),

package/dist/core/runner/resume-preflight.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's deployment PREFLIGHT rung (E9), verbatim from `Runner.resumeStream`:
+ * The resume ladder's deployment PREFLIGHT rung (E9), verbatim from `Runner.resumeStream`:
  * the LAST rung before the CAS. The deployment's `resumePreflight` screens the resume off the persisted row's
  * facts under its own validated deadline; every non-answer arm refuses retry-later (the row stays pending);
  * only an explicit, fully readable `terminal` verdict settles the row through the single-shot expire CAS

package/dist/core/runner/resume-review-outcome.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S3 — the resume ladder's gate-match rung and the review / park TWINS (E3), verbatim from
+ * The resume ladder's gate-match rung and the review / park TWINS (E3), verbatim from
  * `Runner.resumeStream`: the outcome arm must match the persisted gate kind; a review-gate outcome
  * (plan_review / dry_run_review) is captured into a plain twin with its domain and text-payload checks, the
  * break-out-tag hygiene and the env_failed replay guard; the two tool-less park lanes (wake / resource_limit)

package/dist/core/runner/retired-runner-deps.d.ts

@@ -0,0 +1,3 @@
+import type { RunnerDeps } from "../types.js";
+/** Runs in the pre-first-await config-doors phase, before any resource-bearing preparation, and pre-CAS on a resume. */
+export declare function assertNoRetiredRunnerDeps(deps: RunnerDeps): void;

package/dist/core/runner/retired-runner-deps.js

@@ -0,0 +1,7 @@
+import { assertNoRetiredKeys } from "../retired-keys.js";
+const RETIRED_RUNNER_DEPS_KEYS = {
+    legacyRewindBoundaryProbe: "the rewind refusal always names both possibilities (never existed / retired whole-tree era); a deployment that holds that era's table answers the question on its own surface",
+};
+export function assertNoRetiredRunnerDeps(deps) {
+    assertNoRetiredKeys(deps, RETIRED_RUNNER_DEPS_KEYS, "RunnerDeps");
+}

package/dist/core/runner/run-brain-sinks.d.ts

@@ -21,7 +21,7 @@ export interface RunBrainSinksInput {
     observeReasoningWireFacts: (facts: ReasoningWireFacts) => void;
 }
 export interface RunBrainSinksResult {
-    /** design/99 BC-2: the subagent's human display name for its `task_progress` ticks, or undefined. */
+    /** The subagent's human display name for its `task_progress` ticks, or undefined. */
     subagentName: string | undefined;
     /** Compose the three brain ALS sinks around a brain-driving call. */
     withBrainSinks: <T>(fn: () => Promise<T>) => Promise<T>;

package/dist/core/runner/run-clock-and-content.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S5 — the run body's CLOCK and CONTENT seats (R6), verbatim from `Runner.runLocked`: the per-slice
+ * The run body's CLOCK and CONTENT seats (R6), verbatim from `Runner.runLocked`: the per-slice
  * walltime window and its MONOTONIC deadline anchored at task start, the hard-abort timer armed against that same
  * deadline (a suspendable task gets the backstop grace), the content-event push that also forwards a sub-agent's
  * events to the parent's display sink, the run's own committed-tail ref and the `message_committed` mint that
@@ -34,15 +34,15 @@ export interface RunClockAndContentInput {
     startedToolCallIds: Set<string>;
 }
 export interface RunClockAndContentResult {
-    /** design/164: the PER-SLICE active clock, or undefined (0 is a valid, exhausted window). */
+    /** The PER-SLICE active clock, or undefined (0 is a valid, exhausted window). */
     effectiveTimeoutMs: number | undefined;
-    /** RB-20: the monotonic deadline every walltime enforcement decision reads, or undefined. */
+    /** The monotonic deadline every walltime enforcement decision reads, or undefined. */
     walltimeMonotonicDeadline: number | undefined;
     /** The hard walltime backstop: its fired flag / lateness, and the clear the teardown calls. */
     timeout: ReturnType<typeof startTimeout>;
     /** Push a content event to the run's queue and, for a sub-agent, to the parent's display sink. */
     pushContent: (e: TaskEvent) => void;
-    /** #483: the id of the LAST entry this run committed — the settle-time seal's provenance anchor. */
+    /** The id of the LAST entry this run committed — the settle-time seal's provenance anchor. */
     ownCommittedTailRef: {
         current: string | undefined;
     };

package/dist/core/runner/run-compaction-machinery.d.ts

@@ -15,7 +15,7 @@ export interface RunCompactionMachineryInput {
     /** borrowed-mutable — the run's usage counters: every accounted summary call adds to them (compaction spend
      *  tracked separately too). */
     stats: Stats;
-    /** borrowed-readonly — the telemetry lane's price-table door (#462), consulted for every summarizer table adopted. */
+    /** borrowed-readonly — the telemetry lane's price-table door, consulted for every summarizer table adopted. */
     noteUnevaluablePriceTable: (p: ModelPricing) => void;
     /** borrowed-readonly — the Runner's deployment deps, read LIVE (`brain`, `pricing`, `onError`). */
     runner: RunnerDepsSeat;
@@ -23,13 +23,13 @@ export interface RunCompactionMachineryInput {
 export interface RunCompactionMachineryResult {
     /** The accounted compaction brain — `complete` always provided, usage recorded inline. */
     compactionBrain: Brain;
-    /** design/64 §25 (A): whether ROUTINE turn-boundary compaction runs for this task. */
+    /** Whether ROUTINE turn-boundary compaction runs for this task. */
     withinTaskCompaction: boolean;
     /** §17.4: the consecutive-failure circuit breaker shared by every compaction lane of the run. */
     compactionBreaker: {
         failures: number;
     };
-    /** design/145 门A/§3: the window-safety wiring (per call — a mid-task degrade moves the fallback target). */
+    /** The window-safety wiring (per call — a mid-task degrade moves the fallback target). */
     windowSafetyOptions: (mainModel: Model) => Pick<MaybeCompactOptions, "fallbackBudget" | "onWindowSafety">;
 }
 export declare function runCompactionMachinery(input: RunCompactionMachineryInput): RunCompactionMachineryResult;

package/dist/core/runner/run-git-lane.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S5 — the run body's GIT LANE (R12), verbatim from `Runner.runLocked`: the git-status re-assert closure
+ * The run body's GIT LANE (R12), verbatim from `Runner.runLocked`: the git-status re-assert closure
  * installed on `prepared.gitStatusRef` (compaction landing hook + owed-frame retry — an engine-minted standalone
  * append with the receipt in hand, the announced mirror written only then), the parked mirror flush (F4), the
  * owed-frame retry subscription registered BEFORE the boundary handler, the boundary subscription itself and the

package/dist/core/runner/run-harness-handlers.d.ts

@@ -34,11 +34,11 @@ export interface RunHarnessHandlersResult {
         type: "tool_execution_end";
     }>) => void;
     onTurnEnd: () => void;
-    /** RB-475 — the single workspace_changed mint (cwd diff vs the closure's dedupe state); the run body
+    /** The single workspace_changed mint (cwd diff vs the closure's dedupe state); the run body
      *  calls it after a resume's approved-call resolution, which bypasses onToolEnd. */
     announceWorkspaceMove: () => void;
 }
-/** design/157 B15 尾件 — R5 抽取:runLocked 的五个 harness 事件处理器(onMessageUpdate/onMessageEnd/
+/** R5 抽取:runLocked 的五个 harness 事件处理器(onMessageUpdate/onMessageEnd/
  *  onToolStart/onToolEnd/onTurnEnd,~530 行)整块搬迁。正文逐字;唯一字面变化 = this.deps.onError →
  *  deps.runnerHooks.onError(1 处)。`lastWorkspaceCwd` 是纯 R5 局部(读写全在 onToolEnd 内,零段外
  *  读者),声明随迁进工厂体——调用点放在原声明位之后,初值 `prepared.cwdRef?.current` 的求值时机不变

package/dist/core/runner/run-harness-handlers.js

@@ -286,9 +286,8 @@ export function createHarnessHandlers(input) {
         if (prepared.abortController.signal.aborted)
             prepared.workCutRef.abortedBeforeTurnEnd = true;
         const stopExtra = rs.turn.turnStopReason !== undefined ? { stopReason: rs.turn.turnStopReason } : {};
-        queue.push(rs.turn.turnUsage
-            ? { type: "turn_end", usage: rs.turn.turnUsage, ...(rs.turn.turnUsageMissing ? { usageMissing: true } : {}), ...stopExtra, ...ident() }
-            : { type: "turn_end", usageMissing: true, ...stopExtra, ...ident() });
+        const usage = rs.turn.turnUsage ?? { inputTokens: 0, totalInputTokens: 0, outputTokens: 0, cacheReadTokens: 0, cacheWriteTokens: 0, costMicroUsd: 0 };
+        queue.push({ type: "turn_end", usage, ...(rs.turn.turnUsage === undefined || rs.turn.turnUsageMissing ? { usageMissing: true } : {}), ...stopExtra, ...ident() });
         rs.turn.turnUsageMissing = false;
         rs.turn.turnStopReason = undefined;
         if (parentToolCallId !== undefined) {

package/dist/core/runner/run-identity-wiring.d.ts

@@ -33,7 +33,7 @@ export interface RunIdentityWiringInput {
     }) => Promise<"queued" | "parked" | "dropped_duplicate">;
     /** borrowed-mutable — the turn-open dedup set (the cross-layer double-park dedup): a redelivered frame's key is registered here. */
     deliveredAtTurnOpen: Set<string>;
-    /** borrowed-mutable — design/176: the peer inbound chain, overwritten by each consumed peer-class payload. */
+    /** borrowed-mutable — the peer inbound chain, overwritten by each consumed peer-class payload. */
     peerInboundChainRef: PeerInboundChainRef;
     /** borrowed-mutable — the notification lane's bindings seat (its own `let`s behind getters / setters, never a copy):
      *  this lane binds the harness, the session anchor and the identity mint the lane's closures read, and reads the
@@ -55,7 +55,7 @@ export interface RunIdentityWiringResult {
         parentToolCallId?: string;
         sourceTaskId?: string;
     };
-    /** #281 件B: the delegation-lifecycle emission closure both stations share (spawn here, terminal in the driver). */
+    /** The delegation-lifecycle emission closure both stations share (spawn here, terminal in the driver). */
     emitDelegationLifecycle: (event: import("../types.js").DelegationLifecycleEvent) => void;
     /** The loop-liveness latch and the two attribution seats (ended / userInterrupted / userHalted). */
     loopLatch: {
@@ -65,7 +65,7 @@ export interface RunIdentityWiringResult {
     };
     /** This leg's usage counters, zeroed here; the harness-handlers lane is their writer from the first turn on. */
     stats: Stats;
-    /** backlog #389 — the held agent_end account, a READ FACE over this lane's own `let` (the undrained-inputs sink writes it
+    /** The held agent_end account, a READ FACE over this lane's own `let` (the undrained-inputs sink writes it
      *  when the run committed a durable park); the terminal-adoption lane settles it minus what the park carried. */
     undrainedUserAtEnd: {
         readonly current: {
@@ -73,7 +73,7 @@ export interface RunIdentityWiringResult {
             followUp: number;
         } | undefined;
     };
-    /** #677 — did the run END with a person's steer / follow-up still pending (queued, or drained at the final boundary and
+    /** Did the run END with a person's steer / follow-up still pending (queued, or drained at the final boundary and
      *  never served)? A READ FACE over this lane's own `let`, written by the same undrained-inputs sink on BOTH its arms
      *  (park or not): the terminal-adoption lane folds it into the answer-settled verdict — a "stop" answer the person had
      *  already asked to continue past is not a settled answer, so a stop that cut that continuation is a stop on work. */

package/dist/core/runner/run-leg.d.ts

@@ -1,5 +1,5 @@
 /**
- * design/393 S6 — the run body's LEG (R13), verbatim from `Runner.runLocked`: the one `harness.prompt` of the leg and
+ * The run body's LEG (R13), verbatim from `Runner.runLocked`: the one `harness.prompt` of the leg and
  * everything that decides whether it is issued. Two legs behind one try / catch / finally: the RESUME leg (the walltime
  * and governance-window entrance claims, the gated decision's application, the exhaustion arms, the continuation prompt's
  * assembly — orphaned background tasks, the git frame, the parked steer queue and the wake message each under its own trust
@@ -7,7 +7,7 @@
  * frame's primary delivery, the first-frame listings, the pre-call budget / token / entry-governance gates, the image
  * conversion, the objective's human-input frame and the prompt itself). The resumed decision's application
  * (`applyResumeDecision`) and the gated call's resolver (`resolvePendingCall` — the post-CAS belts, the execution record)
- * are the lane's own module-private functions since design/393 S7, verbatim from the Runner's private methods: the resume
+ * are the lane's own module-private functions since S7, verbatim from the Runner's private methods: the resume
  * leg is their one caller, and a sibling file would be a lane-to-lane reach (the S6 legs' reading). The tail captures the abort facts; the catch
  * re-throws the resume-equivalent env failures after a bounded teardown and adopts everything else as the leg's throw;
  * the finally releases the timer, the diagnostics, the signal, the content-ask bindings, flips the notification lane
@@ -99,7 +99,7 @@ export interface RunLegResult {
     abortedLive: boolean;
     /** The snapshot of `loopLatch.userInterrupted`, taken with `abortedLive`. */
     userInterruptedLive: boolean;
-    /** design/174: the answered-but-never-collected deliveries the finally settled. */
+    /** The answered-but-never-collected deliveries the finally settled. */
     strandedHumanAnswers: ReadonlyArray<{
         deliveryId: string;
         toolCallId: string;