@sema-agent/core 7.17.7 → 7.19.0

package/dist/core/runner/prepare-hands-readface.d.ts

@@ -1,11 +1,11 @@
-import { type BeforeWriteHook, type CwdRef, type ReadDenyMatcher, type ReadFace } from "../../tools/fs/index.js";
+import { type BeforeWriteHook, type CwdRef, type ReadDenyMatcher, type ContainmentFace } from "../../tools/fs/index.js";
 import { type ReadFileState } from "../../tools/fs/safety.js";
 import type { RunnerDeps, ShellGateDoctrine, TaskSpec } from "../types.js";
 import type { Model } from "../../internal/llm.js";
-import type { AgentTool, ExecutionEnv, WorkspaceState } from "../../internal/harness.js";
+import type { AgentHarness, AgentTool, ExecutionEnv, WorkspaceState } from "../../internal/harness.js";
 import type { AdvertisedWritableDirs } from "./advertised-writable-dirs.js";
 import type { StoredSession } from "../session.js";
-import type { IrreversibilityTier, PrepareResume, ReversibilityProbes, RunInternals, ToolFaceSnapshot } from "./contracts.js";
+import type { IrreversibilityTier, PrepareResume, ReversibilityProbes, RunInternals, ToolFaceSnapshot, ToolProgressLane } from "./contracts.js";
 import { RosterBuilder } from "../tool-roster.js";
 /** Test seam (mirrors `__resetMalformedNoticeSeatAnnouncement`): never called by production code.
  *  Deliberately asymmetric — it resets only the console latch: the WeakSet arm needs no seam
@@ -145,16 +145,26 @@ export interface PrepareHandsReadFaceInput {
     model: Model;
     /** borrowed-readonly — the task-spec seats this phase reads, as a Pick over the SAME spec object
      *  (R-4). `tools` feeds only the band shadow check; `envFacts` only the advertised scratchpad. */
-    spec: Pick<TaskSpec, "additionalDirectories" | "additionalReadDirectories" | "envFacts" | "handsReadOnly" | "readDenyPatterns" | "readFace" | "oneShot" | "resumeAt" | "sessionId" | "tools">;
+    spec: Pick<TaskSpec, "additionalDirectories" | "additionalReadDirectories" | "envFacts" | "handsReadOnly" | "readDenyPatterns" | "readFace" | "writeFace" | "oneShot" | "resumeAt" | "sessionId" | "tools">;
     /** borrowed-readonly — the deployment seats this phase reads, as a Pick over the SAME deps
      *  object (R-4: `deps.onError?.()` keeps its receiver; a new deps read must widen this Pick).
      *  `readDenyBuiltinTiers`/`readDenyBuiltinExclude` are SNAPSHOTTED before the first await that
      *  precedes the toolkit compile (the caller retains these arrays by reference). */
-    deps: Pick<RunnerDeps, "onError" | "onNotice" | "tracer" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readFace" | "permissionRuleStore" | "hands">;
+    deps: Pick<RunnerDeps, "onError" | "onNotice" | "tracer" | "readDenyPatterns" | "readDenyBuiltinTiers" | "readDenyBuiltinExclude" | "readFace" | "writeFace" | "permissionRuleStore" | "hands">;
     /** borrowed-readonly — the trusted spawn-side seats the band forwards: the finished-command
      *  notification lane, the mid-flight detach hub, and the Runner's per-session
      *  read-state seats (absent on a standalone prepare ⇒ the transcript-replay rung covers alone). */
     internals: Pick<RunInternals, "onTaskNotification" | "detachHub" | "sessionReadStates"> | undefined;
+    /** borrowed-mutable — the harness seat, read LIVE by the band's queued-human-input predicate (the shell's
+     *  auto-backgrounding leg asks it mid-command). Late-bound: the band is built here, the harness later. */
+    harnessRef: {
+        current?: AgentHarness;
+    };
+    /** borrowed-mutable — the tool-progress lane's cell, read LIVE by the band's progress seat; same
+     *  late-binding contract as {@link harnessRef}. Unbound ⇒ every tick through it is a silent no-op. */
+    toolProgressRef: {
+        current?: ToolProgressLane;
+    };
     /** borrowed-readonly — ABSOLUTE paths this prepare's restore wrote, deleted,
      *  or failed to write. Every read-state seed above describes the PRE-restore tree, so these keys are
      *  dropped from the map: the engine replaced those bytes itself, and a surviving entry makes the
@@ -255,7 +265,14 @@ export interface PrepareHandsReadFaceResult {
     /** write-back (D-3 hold) — the run's RESOLVED read face where hands mount; undefined ⇔ no hands
      *  (the hands-less value lives in `handsLessResolvedFace`). The driver assigns this onto its
      *  outer `let` for the call-time closures (ctx enrichment / checkpoint mint / envFacts). */
-    resolvedReadFace: ReadFace | undefined;
+    resolvedReadFace: ContainmentFace | undefined;
+    /** write-back — the run's RESOLVED WRITE face where hands mount; undefined ⇔ no hands (the
+     *  hands-less value lives in `handsLessResolvedWriteFace`). The read seat's twin, resolved by the
+     *  SAME order on its OWN seats — the two never read each other. */
+    resolvedWriteFace: ContainmentFace | undefined;
+    /** write-back — the hands-LESS legs' resolved WRITE face (the posture is a property of the RUN,
+     *  not the mount): the delegation carriers and the checkpoint mint need it on every leg. */
+    handsLessResolvedWriteFace: ContainmentFace | undefined;
     /** write-back (D-3 hold) — the NORMALIZED deny-set additions in force (deployment ∪ task ∪
      *  resume-seed; zero-builtin compile — the persisted/carrier form, never the judged union's
      *  post-dedup remainder). Driver assigns onto its outer `let`. */
@@ -265,7 +282,7 @@ export interface PrepareHandsReadFaceResult {
     }>;
     /** write-back (D-3 hold) — the hands-LESS legs' resolved face (the read posture is a
      *  property of the RUN, not the mount). Driver assigns onto its outer `let`. */
-    handsLessResolvedFace: ReadFace | undefined;
+    handsLessResolvedFace: ContainmentFace | undefined;
     /** owned — the canonicalized write-capable extra roots (additionalDirectories + the advertised
      *  scratchpad), deduped; the driver's envFacts advertisement and attachment readers share the
      *  ARRAY identity. Settled here (no mutation after return). */

package/dist/core/runner/prepare-hands-readface.js

@@ -3,17 +3,31 @@ import { StubExecutionEnv } from "../stub-env.js";
 import { hasBackgroundShell } from "../background-shell.js";
 import { boundaryIsTheSandbox } from "../remote-env.js";
 import { defaultTaskRegistry } from "../task-registry.js";
-import { bashReadBoundaryProbe, bashReversibilityProbe, compileReadDeny, createHandsToolkit, deploymentReadFaceClampNotice, pdfModelCapabilitiesOf, resolveReadDenyBuiltins, inheritSessionReadFileState, resolveReadFace, seedReadFileStateFromContext, seedReadFileStateFromTranscript, } from "../../tools/fs/index.js";
+import { bashReadBoundaryProbe, bashReversibilityProbe, compileReadDeny, createHandsToolkit, deploymentFaceClampNotice, pdfModelCapabilitiesOf, resolveReadDenyBuiltins, inheritSessionReadFileState, resolveContainmentFace, seedReadFileStateFromContext, seedReadFileStateFromTranscript, } from "../../tools/fs/index.js";
 import { resolveKey, sha256 } from "../../tools/fs/safety.js";
 import { normalizeFileText } from "../../tools/fs/encoding.js";
 import { wholeFileRecordsFromTranscript } from "./session-file-state-replay.js";
 import { deliverEngineNotice } from "../types.js";
 import { rebaseWorkspacePath } from "./workspace-path.js";
 import { RosterBuilder } from "../tool-roster.js";
-const readFaceClampAnnouncedSinks = new WeakSet();
-let readFaceClampConsoleAnnounced = false;
+const faceClampAnnouncedSinks = { read: new WeakSet(), write: new WeakSet() };
+const faceClampConsoleAnnounced = { read: false, write: false };
+function announceDeploymentFaceClamp(kind, sink) {
+    if (typeof sink === "function") {
+        if (faceClampAnnouncedSinks[kind].has(sink))
+            return;
+        faceClampAnnouncedSinks[kind].add(sink);
+    }
+    else {
+        if (faceClampConsoleAnnounced[kind])
+            return;
+        faceClampConsoleAnnounced[kind] = true;
+    }
+    deliverEngineNotice(sink, deploymentFaceClampNotice(kind));
+}
 export function __resetReadFaceClampAnnouncement() {
-    readFaceClampConsoleAnnounced = false;
+    faceClampConsoleAnnounced.read = false;
+    faceClampConsoleAnnounced.write = false;
 }
 export class SessionReadFileStates {
     seats = new Map();
@@ -82,17 +96,29 @@ export function resolveHandsLessReadFace(input) {
     assertStringArraySeat(deps.readDenyPatterns, "RunnerDeps.readDenyPatterns", "compiler-owned");
     assertStringArraySeat(spec.readDenyPatterns, "TaskSpec.readDenyPatterns", "compiler-owned");
     let handsLessResolvedFace;
+    let handsLessResolvedWriteFace;
     let readDenyAdditionsNormalized = [];
     {
-        const liveFace = resolveReadFace({
-            specReadFace: spec.readFace,
-            depsReadFace: deps.readFace,
+        const liveFace = resolveContainmentFace({
+            kind: "read",
+            specFace: spec.readFace,
+            depsFace: deps.readFace,
             readOnlyMount: spec.handsReadOnly === true,
             orgGoverned: deps.permissionRuleStore?.partitions.org === true,
             fullShellReachable,
         });
         const seed = resume?.seed.readFace;
         handsLessResolvedFace = resume !== undefined && (seed === undefined || seed.face === "roots") ? "roots" : liveFace;
+        const liveWriteFace = resolveContainmentFace({
+            kind: "write",
+            specFace: spec.writeFace,
+            depsFace: deps.writeFace,
+            readOnlyMount: spec.handsReadOnly === true,
+            orgGoverned: deps.permissionRuleStore?.partitions.org === true,
+            fullShellReachable,
+        });
+        const seedWrite = resume?.seed.writeFace;
+        handsLessResolvedWriteFace = resume !== undefined && (seedWrite === undefined || seedWrite.face === "roots") ? "roots" : liveWriteFace;
         const denyAdditions = [...(deps.readDenyPatterns ?? []), ...(spec.readDenyPatterns ?? []), ...(seed?.denyEntries ?? [])];
         resolveReadDenyBuiltins({
             ...(deps.readDenyBuiltinTiers !== undefined ? { tiers: deps.readDenyBuiltinTiers } : {}),
@@ -111,8 +137,10 @@ export function resolveHandsLessReadFace(input) {
         rebaseWsPath: (p) => p,
         backgroundTaskToolsActive: false,
         resolvedReadFace: undefined,
+        resolvedWriteFace: undefined,
         readDenyAdditionsNormalized,
         handsLessResolvedFace,
+        handsLessResolvedWriteFace,
         additionalRootsCanonical: [],
         additionalReadRootsCanonical: [],
         attachmentRootCanonical: undefined,
@@ -138,8 +166,10 @@ export async function prepareHandsMount(input) {
     let rebaseWsPath = (p) => p;
     let backgroundTaskToolsActive = false;
     let resolvedReadFace;
+    let resolvedWriteFace;
     let readDenyAdditionsNormalized = [];
     let handsLessResolvedFace;
+    const handsLessResolvedWriteFace = undefined;
     const shellGatedTools = new Set();
     const additionalRootsCanonical = [];
     const additionalReadRootsCanonical = [];
@@ -218,30 +248,31 @@ export async function prepareHandsMount(input) {
         };
         readDenyMatcher = compileReadDeny(readDenyAdditions, "readDenyPatterns", readDenyBuiltinCfg);
         readDenyAdditionsNormalized = compileReadDeny(readDenyAdditions, "readDenyPatterns", { tiers: [] }).entries;
-        let liveReadFace = resolveReadFace({
-            specReadFace: spec.readFace,
-            depsReadFace: deps.readFace,
+        let liveReadFace = resolveContainmentFace({
+            kind: "read",
+            specFace: spec.readFace,
+            depsFace: deps.readFace,
             readOnlyMount: handsReadOnly,
             orgGoverned: deps.permissionRuleStore?.partitions.org === true,
             fullShellReachable,
-            onDeploymentClamp: () => {
-                const sink = deps.onNotice;
-                if (typeof sink === "function") {
-                    if (readFaceClampAnnouncedSinks.has(sink))
-                        return;
-                    readFaceClampAnnouncedSinks.add(sink);
-                }
-                else {
-                    if (readFaceClampConsoleAnnounced)
-                        return;
-                    readFaceClampConsoleAnnounced = true;
-                }
-                deliverEngineNotice(sink, deploymentReadFaceClampNotice());
-            },
+            onDeploymentClamp: () => announceDeploymentFaceClamp("read", deps.onNotice),
         });
         if (resume !== undefined && (seedReadFaceSection === undefined || seedReadFaceSection.face === "roots"))
             liveReadFace = "roots";
         resolvedReadFace = liveReadFace;
+        let liveWriteFace = resolveContainmentFace({
+            kind: "write",
+            specFace: spec.writeFace,
+            depsFace: deps.writeFace,
+            readOnlyMount: handsReadOnly,
+            orgGoverned: deps.permissionRuleStore?.partitions.org === true,
+            fullShellReachable,
+            onDeploymentClamp: () => announceDeploymentFaceClamp("write", deps.onNotice),
+        });
+        const seedWriteFaceSection = resume?.seed.writeFace;
+        if (resume !== undefined && (seedWriteFaceSection === undefined || seedWriteFaceSection.face === "roots"))
+            liveWriteFace = "roots";
+        resolvedWriteFace = liveWriteFace;
         const sessionSeats = input.internals?.sessionReadStates;
         let seatLeafId;
         try {
@@ -308,6 +339,7 @@ export async function prepareHandsMount(input) {
             ...(readDenyBuiltinCfg.tiers !== undefined ? { readDenyBuiltinTiers: readDenyBuiltinCfg.tiers } : {}),
             ...(readDenyBuiltinCfg.exclude !== undefined ? { readDenyBuiltinExclude: readDenyBuiltinCfg.exclude } : {}),
             readFace: liveReadFace,
+            writeFace: liveWriteFace,
             reminderMark: input.reminderMark,
             reminderDisclosureCounts: input.reminderDisclosureCounts,
             ...(input.trackFileEdit !== undefined ? { trackFileEdit: input.trackFileEdit } : {}),
@@ -323,6 +355,8 @@ export async function prepareHandsMount(input) {
             ...(sessionId !== undefined ? { sessionId } : {}),
             ...(internals?.onTaskNotification !== undefined ? { taskNotification: internals.onTaskNotification } : {}),
             ...(internals?.detachHub !== undefined ? { detachHub: internals.detachHub } : {}),
+            onToolProgress: (body) => input.toolProgressRef.current?.emit(body),
+            queuedHumanInput: () => input.harnessRef.current?.hasPendingUserInput() === true,
             ...(deps.onNotice !== undefined ? { onNotice: deps.onNotice } : {}),
             pdfModelCapabilities: pdfModelCapabilitiesOf(model),
             ...(deps.hands?.bashReadonlyAllow !== undefined ? { bashReadonlyAllow: deps.hands.bashReadonlyAllow } : {}),
@@ -386,6 +420,8 @@ export async function prepareHandsMount(input) {
         rebaseWsPath,
         backgroundTaskToolsActive,
         resolvedReadFace,
+        resolvedWriteFace,
+        handsLessResolvedWriteFace,
         readDenyAdditionsNormalized,
         handsLessResolvedFace,
         additionalRootsCanonical,

package/dist/core/runner/prepare-inherited-gate.d.ts

@@ -32,7 +32,7 @@ import type { SubagentWorktreeIsolation } from "../../agents/subagent.js";
 import { forkGovernanceDenial } from "../../agents/subagent.js";
 import type { SubagentRetainLedger } from "../../agents/retain-ledger.js";
 import type { PromptEpochArtifact } from "../../prompt-assembly/artifact.js";
-import type { ReadFace } from "../../tools/fs/index.js";
+import type { ContainmentFace } from "../../tools/fs/index.js";
 import type { AutoModeArmingRecipe } from "../auto-mode-arming.js";
 import type { AutoModeDecider, AutoModeDenialTracker } from "../auto-mode.js";
 import { type OnQuestion } from "../ask-question.js";
@@ -159,14 +159,18 @@ export interface PrepareInheritedGateInput {
     /** borrowed-readonly — LATE-BOUND: the observers grant (ctx `observersAllowed`, present only when explicitly granted). */
     observersActive: () => boolean;
     /** borrowed-readonly — LATE-BOUND: the hands mount's resolved read face (undefined until/unless hands mount). */
-    resolvedReadFace: () => ReadFace | undefined;
+    resolvedReadFace: () => ContainmentFace | undefined;
+    /** borrowed-readonly — LATE-BOUND: the hands mount's resolved WRITE face (the read seat's twin). */
+    resolvedWriteFace: () => ContainmentFace | undefined;
     /** borrowed-readonly — LATE-BOUND: the normalized deny additions in force (empty until the hands mount resolves them). */
     readDenyAdditionsNormalized: () => ReadonlyArray<{
         pattern: string;
         caseSensitive: boolean;
     }>;
     /** borrowed-readonly — LATE-BOUND: the hands-less legs' resolved face (the carrier's second source). */
-    handsLessResolvedFace: () => ReadFace | undefined;
+    handsLessResolvedFace: () => ContainmentFace | undefined;
+    /** borrowed-readonly — LATE-BOUND: the hands-less legs' resolved WRITE face (same second source, write seat). */
+    handsLessResolvedWriteFace: () => ContainmentFace | undefined;
     /** borrowed-readonly — LATE-BOUND: the adopted center artifact (ctx `centerArtifactDigest` / `centerSourceRevision`). */
     centerAdoption: () => {
         artifact: PromptEpochArtifact;
@@ -230,6 +234,13 @@ export interface PrepareInheritedGateResult {
     } | undefined;
     /** owned — the face stamp predicate (`faceCheckpointSection() !== undefined`). */
     faceCheckpointState: () => boolean;
+    /** owned — the WRITE-face checkpoint section builder: written ONLY for a non-default (open) write
+     *  posture, so an absent section IS "roots" on every reader, including an engine that predates the
+     *  seat. No version stamp rides it — dropping the section can only ever make a resume STRICTER
+     *  (the opposite direction from the read section, whose deny additions a blind reader would lose). */
+    writeFaceCheckpointSection: () => {
+        face: "open" | "roots";
+    } | undefined;
     /** owned — the F-012 stamp predicate (opaque constraints present ∨ seed frozen chain ∨ provenance-armed). */
     f012CheckpointState: () => boolean;
     /** owned — the FROZEN approver seat (spec over deps) every station of this leg and its children's chain resolve at. */
@@ -259,7 +270,9 @@ export interface PrepareInheritedGateResult {
     /** owned — chain assembly SINGLE SITE: upstream chain + this task's own contribution, called by delegation tools at spawn. */
     inheritedGateForChildren: () => InheritedGate;
     /** owned — the ONE carrier expression both delegation mounts consume (resolved face ?? hands-less face). */
-    carrierReadFace: () => ReadFace | undefined;
+    carrierReadFace: () => ContainmentFace | undefined;
+    /** owned — the same expression on the WRITE seat. */
+    carrierWriteFace: () => ContainmentFace | undefined;
     /** owned — the full shell's structural reachability from spec-time facts. */
     fullShellReachable: boolean;
     /** borrowed-mutable — the gate's typed stop seat (`Prepared.gateStopRef`). Writers: `stopForDenialLimit` only. */

package/dist/core/runner/prepare-inherited-gate.js

@@ -70,7 +70,9 @@ export function prepareInheritedGate(input) {
         const readDenyAdditionsNormalized = input.readDenyAdditionsNormalized();
         if (resolvedReadFace === undefined && resume !== undefined) {
             const seed = resume.seed.readFace;
-            return seed !== undefined ? { face: seed.face, ...(seed.denyEntries !== undefined ? { denyEntries: seed.denyEntries.map((e) => ({ ...e })) } : {}) } : undefined;
+            if (seed === undefined)
+                return undefined;
+            return { face: handsLessResolvedFace ?? seed.face, ...(seed.denyEntries !== undefined ? { denyEntries: seed.denyEntries.map((e) => ({ ...e })) } : {}) };
         }
         const face = resolvedReadFace ?? handsLessResolvedFace;
         if (face === undefined)
@@ -81,6 +83,10 @@ export function prepareInheritedGate(input) {
         return undefined;
     };
     const faceCheckpointState = () => faceCheckpointSection() !== undefined;
+    const writeFaceCheckpointSection = () => {
+        const face = input.resolvedWriteFace() ?? input.handsLessResolvedWriteFace();
+        return face === "open" ? { face } : undefined;
+    };
     const f012CheckpointState = () => (inheritedParentConstraints?.length ?? 0) > 0 ||
         seedInheritedGate?.constraintChain !== undefined ||
         internals?.delegationProvenance !== undefined;
@@ -160,6 +166,7 @@ export function prepareInheritedGate(input) {
         };
     };
     const carrierReadFace = () => input.resolvedReadFace() ?? input.handsLessResolvedFace();
+    const carrierWriteFace = () => input.resolvedWriteFace() ?? input.handsLessResolvedWriteFace();
     const fullShellReachable = handsEnabled &&
         !(executionEnv instanceof StubExecutionEnv) &&
         spec.handsReadOnly !== true &&
@@ -184,6 +191,7 @@ export function prepareInheritedGate(input) {
             ...(frozenOnQuestion !== undefined ? { onQuestion: frozenOnQuestion } : {}),
             ...(spec.handsReadOnly === true ? { handsReadOnly: true } : {}),
             ...(carrierReadFace() === "roots" ? { readFace: "roots" } : {}),
+            ...(carrierWriteFace() === "roots" ? { writeFace: "roots" } : {}),
             ...(readDenyAdditionsNormalized.length > 0 ? { readDenyPatterns: Object.freeze(readDenyAdditionsNormalized.map((e) => ({ ...e }))) } : {}),
             ...(spec.interactiveTools === false ? { interactiveTools: false } : {}),
             oneShot: spec.oneShot,
@@ -262,5 +270,5 @@ export function prepareInheritedGate(input) {
             ...(spec.enablePlanMode === true ? { enterPlanMode } : {}),
         };
     };
-    return { liveInheritedGate, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, inheritedParentConstraints, autoModeIntent, inheritedAdmittedOrgScopes, priorOwnOrgVerdict, orgGovernedProvenance, effectiveShellGate, ownSessionRulesRef, memoryAdmittedOrgScopesRef, ownOrgVerdictRef, orgAdmissionCheckpointState, faceCheckpointSection, faceCheckpointState, f012CheckpointState, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, frozenOnQuestion, parentSpecSeat, provenanceForChildrenRef, delegationSettlementRef, inheritedGateForChildren, carrierReadFace, fullShellReachable, gateStopRef, stopForDenialLimit, enrichSpecToolCtx };
+    return { liveInheritedGate, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, inheritedParentConstraints, autoModeIntent, inheritedAdmittedOrgScopes, priorOwnOrgVerdict, orgGovernedProvenance, effectiveShellGate, ownSessionRulesRef, memoryAdmittedOrgScopesRef, ownOrgVerdictRef, orgAdmissionCheckpointState, faceCheckpointSection, faceCheckpointState, writeFaceCheckpointSection, f012CheckpointState, frozenOnAsk, hookEnvSource, notifyOwnHookCrash, frozenOnQuestion, parentSpecSeat, provenanceForChildrenRef, delegationSettlementRef, inheritedGateForChildren, carrierReadFace, carrierWriteFace, fullShellReachable, gateStopRef, stopForDenialLimit, enrichSpecToolCtx };
 }

package/dist/core/runner/prepare-lsp.d.ts

@@ -48,9 +48,9 @@ export interface PrepareLspResult {
     lspDiagnostics: LspDiagnosticsRegistry | undefined;
     /** owned — the edit nudge (raw path in), or undefined when the lane is not live. */
     nudgeLspOnEdit: ((rawPath: string) => void) | undefined;
-    /** borrowed-readonly — the run's registry key (= the session id): a session hosts one run at a time and the
-     *  run loop releases the key at the terminal. */
+    /** borrowed-readonly — the run's registry key (= the session id): one run per session, released at the terminal. */
     lspRunIdent: string;
+    /** Did a MANAGER seat resolve? The manifest's LSP-section presence condition, from the ONE fold that decided the mount. */ managerWired: boolean;
 }
 /** The M8 phase body — prepareTask's LSP stretch, verbatim (see the module header). */
 export declare function prepareLsp(input: PrepareLspInput): PrepareLspResult;

package/dist/core/runner/prepare-lsp.js

@@ -24,5 +24,5 @@ export function prepareLsp(input) {
                 .catch(() => undefined);
         }
         : undefined;
-    return { lspDiagnostics, nudgeLspOnEdit, lspRunIdent };
+    return { lspDiagnostics, nudgeLspOnEdit, lspRunIdent, managerWired: lspManager !== undefined };
 }

package/dist/core/runner/prepare-policy-chain.js

@@ -2,6 +2,7 @@ import { policyAskClassOf } from "../ask-class.js";
 import { ASK_USER_QUESTION_TOOL_NAME } from "../ask-question.js";
 import { resolveCheckpointStore } from "../checkpoint-store.js";
 import { cloneObserverInput, resolveHookTimeoutMs } from "../hooks.js";
+import { assertHookSeatsCallable } from "../hook-seats.js";
 import { isNamespacedCoveringRuleName, namespacedRuleNameCovers } from "../permission-rules.js";
 import { isIsolated } from "../remote-env.js";
 import { askApproverIdentity, carryEngineAttestations, carryPrecedingSettlement, checkToolPolicyProjection, combinePolicies, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, durableParkOptInDeclared, isLiveApproverSeat, resolveAsk, toolPolicyNameSets, attestAskUnresolvableCause } from "../tool-policy.js";
@@ -113,6 +114,7 @@ export async function preparePolicyChain(input) {
     const denyNarrowingPolicy = narrowingLayers.length === 0 ? undefined : narrowingLayers.length === 1 ? narrowingLayers[0] : combinePolicies(...narrowingLayers);
     const basePolicyForResumeEdit = lockedPreflight.basePolicyForResumeEdit ?? lockedPreflight.toolPolicy;
     const hooks = spec.hooks ?? deps.hooks;
+    assertHookSeatsCallable(hooks, spec.hooks !== undefined ? "spec" : "deps");
     const hookTimeoutMs = resolveHookTimeoutMs(hooks?.timeoutMs, notifyOwnHookCrash, hooks);
     const preToolUseObservational = hooks?.preToolUse !== undefined && hooks.preToolUseObservational === true;
     const ownGatePreToolUse = !preToolUseObservational

package/dist/core/runner/prepare-project-context.d.ts

@@ -1,3 +1,4 @@
+import type { ResolvedSkillListingBudget } from "../skill-listing-budget.js";
 import { type StoredSession } from "../session.js";
 import type { RunnerDeps, TaskSpec, ToolSpec } from "../types.js";
 import type { ActiveSkillScope } from "./active-skill-scope.js";
@@ -8,7 +9,7 @@ export interface PrepareProjectContextInput {
     /** borrowed-readonly — the deployment seams this phase reads: `loadProjectMemory` (the snapshot),
      *  `onError` (the operator lane for a throwing seam / seeding / oversize skill), `sharedMemoryStores`
      *  (the shared-memory pair's switch: wired ⇒ mount). Receiver preserved (`deps.onError?.(…)`). */
-    deps: Pick<RunnerDeps, "loadProjectMemory" | "onError" | "sharedMemoryStores">;
+    deps: Pick<RunnerDeps, "loadProjectMemory" | "onError" | "sharedMemoryStores" | "onNotice">;
     /** borrowed-readonly — the REBOUND spec (`spec′`). Read: `sessionId` (phase derivation + the
      *  continuation projections), `skills` (the roster), `principal` (the shared-memory tools' trusted
      *  identity). Never mutated. */
@@ -69,6 +70,9 @@ export interface PrepareProjectContextInput {
     /** borrowed-readonly — the durable-resume carrier; read for `!== undefined` (seedAnnounced) and
      *  `seed.announcedListings.skills` (the removal-to-zero projection's gate). */
     resume: Pick<PrepareResume, "seed"> | undefined;
+    /** borrowed-readonly — the lowered listing-budget seats from the config door. The listing projection
+     *  carries it to the boundary renderer, and the over-budget disclosure below is priced against it. */
+    skillListingBudget: ResolvedSkillListingBudget;
 }
 export interface PrepareProjectContextResult {
     /** owned — the memory block with the project layer appended at the tail (unchanged when the seam is

package/dist/core/runner/prepare-project-context.js

@@ -6,9 +6,10 @@ import { createSharedMemoryTools } from "../shared-memory/tools.js";
 import { SHARED_MEMORY_TOOL_NAMES } from "../shared-memory/types.js";
 import { defineTool } from "../tools.js";
 import { SKILL_CONTENT_MAX_CHARS, SKILL_TOOL_NAME, createSkillTool, normalizeSkills } from "./synthetic-tools.js";
+import { substitutedSkillLength } from "./skill-base-dir.js";
 import { RosterBuilder } from "../tool-roster.js";
 export async function prepareProjectContext(input) {
-    const { deps, spec, internals, session, sessionId, hostTaskId, taskRootFinal, handsEnabled, delegation, seedContextFiles, memoryBlockFromEngine, skillScope, roster, toolFaceSnapshot, onceLedger, memoryTools, memoryEngineSession, memorySearchToolsPlanned, memoryPairExcludedName, memoryPairOccupiedName, resume } = input;
+    const { deps, spec, internals, session, sessionId, hostTaskId, taskRootFinal, handsEnabled, delegation, seedContextFiles, memoryBlockFromEngine, skillScope, roster, toolFaceSnapshot, onceLedger, memoryTools, memoryEngineSession, memorySearchToolsPlanned, memoryPairExcludedName, memoryPairOccupiedName, resume, skillListingBudget } = input;
     const tools = roster.tools;
     let memoryBlock = memoryBlockFromEngine;
     let instructionSources;
@@ -74,9 +75,10 @@ export async function prepareProjectContext(input) {
         if (!declaredSkillRank.has(s.name))
             declaredSkillRank.set(s.name, declaredSkillRank.size);
     const skillSpecs = normalizeSkills(spec.skills ?? []).filter((s) => {
-        if (s.content.length <= SKILL_CONTENT_MAX_CHARS)
+        const delivered = substitutedSkillLength(s.content, s.baseDir);
+        if (delivered <= SKILL_CONTENT_MAX_CHARS)
             return true;
-        deps.onError?.(new Error(`Skill "${s.name}" content is ${s.content.length} chars, over the ${SKILL_CONTENT_MAX_CHARS}-char load limit — skill not loaded (skills are never truncated; shrink the body or move material to attachments/files).`), { phase: "config", sessionId });
+        deps.onError?.(new Error(`Skill "${s.name}" content is ${delivered} chars${delivered === s.content.length ? "" : ` once its base directory resolves (${s.content.length} as written)`}, over the ${SKILL_CONTENT_MAX_CHARS}-char load limit — skill not loaded (skills are never truncated; shrink the body or move material to attachments/files).`), { phase: "config", sessionId });
         return false;
     });
     const inheritedFrames = internals?.inheritedManifestScope ?? [];
@@ -140,11 +142,12 @@ export async function prepareProjectContext(input) {
                 ...(declaredSkillRank.get(s.name) !== undefined ? { declaredRank: declaredSkillRank.get(s.name) } : {}),
             })),
             seedAnnounced: resume !== undefined || spec.sessionId !== undefined,
+            budget: skillListingBudget,
         }
         :
             (resume?.seed.announcedListings?.skills?.length ?? 0) > 0 || spec.sessionId !== undefined
                 ?
-                    { entries: [], seedAnnounced: true }
+                    { entries: [], seedAnnounced: true, budget: skillListingBudget }
                 : undefined;
     return { memoryBlock, instructionSources, projectInstructionContent, skillSpecs, hasSkillManifest, skillsListing, sharedMemoryPairMounted, memoryEnginePairMounted };
 }

package/dist/core/runner/prepare-prompt-inputs.d.ts

@@ -22,7 +22,7 @@
 import type { ExecutionEnv, ThinkingLevel } from "../../internal/harness.js";
 import type { Model } from "../../internal/llm.js";
 import { type EnvironmentFacts, type PromptProvider } from "../../prompts/default.js";
-import type { ReadFace } from "../../tools/fs/index.js";
+import type { ContainmentFace } from "../../tools/fs/index.js";
 import type { LockedPreflight } from "../locked-config.js";
 import type { MaterializedMcp } from "../mcp.js";
 import type { ResolvedRole } from "../roles.js";
@@ -53,7 +53,9 @@ export interface PreparePromptInputsInput {
     /** borrowed-readonly — the session's reminder mark (rides the prompt facts for the declaration). */
     reminderMark: string;
     /** borrowed-readonly — the resolved read face (the open-reads flag + the structured env fact). */
-    resolvedReadFace: ReadFace | undefined;
+    resolvedReadFace: ContainmentFace | undefined;
+    /** borrowed-readonly — the resolved write face (the open-writes flag + the structured env fact). */
+    resolvedWriteFace: ContainmentFace | undefined;
     /** borrowed-readonly — the frozen tool face; only `defer` is read (the Workflow short-pointer flag). */
     toolFaceSnapshot: Pick<ToolFaceSnapshot, "defer">;
     /** borrowed-readonly — the resolved prompt profile (rides the flags to the legacy ctx). */

package/dist/core/runner/prepare-prompt-inputs.js

@@ -4,7 +4,7 @@ import { probeGitStatusLane } from "./git-status-frame.js";
 import { fenceMcpServerInstructions } from "./turn-attachments.js";
 const ULTRA_REASONING_TIERS = new Set(["xhigh", "max"]);
 export async function preparePromptInputs(input) {
-    const { spec, deps, failClosedReason, lockedPreflight, selfOrchestrationActive, executionEnv, reminderMark, resolvedReadFace, toolFaceSnapshot, promptProfile, fableMitigations, internals, thinking, ownedEnv, delegation, resolvedRole, mcp, model, externalContentTargetActive, resume, handsEnabled, taskRootFinal, additionalRootsCanonical, additionalReadRootsCanonical, sessionId, advertisedWritableDirs } = input;
+    const { spec, deps, failClosedReason, lockedPreflight, selfOrchestrationActive, executionEnv, reminderMark, resolvedReadFace, resolvedWriteFace, toolFaceSnapshot, promptProfile, fableMitigations, internals, thinking, ownedEnv, delegation, resolvedRole, mcp, model, externalContentTargetActive, resume, handsEnabled, taskRootFinal, additionalRootsCanonical, additionalReadRootsCanonical, sessionId, advertisedWritableDirs } = input;
     const provider = spec.promptProvider ?? deps.promptProvider ?? defaultPromptProvider;
     const promptPolicyEnabled = Boolean(lockedPreflight.toolPolicy);
     const promptHooks = spec.hooks ?? deps.hooks;
@@ -18,6 +18,7 @@ export async function preparePromptInputs(input) {
         isolationEnabled: isIsolated(executionEnv),
         reminderMark,
         readFaceOpen: resolvedReadFace === "open",
+        writeFaceOpen: resolvedWriteFace === "open",
         orchestrationEnabled: selfOrchestrationActive,
         orchestrationDeferred: selfOrchestrationActive && (toolFaceSnapshot.defer?.includes("Workflow") ?? false),
         promptProfile,
@@ -74,6 +75,8 @@ export async function preparePromptInputs(input) {
         }
         if (resolvedReadFace !== undefined)
             envFacts.readFace = resolvedReadFace;
+        if (resolvedWriteFace !== undefined)
+            envFacts.writeFace = resolvedWriteFace;
         if (additionalReadRootsCanonical.length > 0) {
             envFacts.additionalReadDirectories = [...additionalReadRootsCanonical];
         }

package/dist/core/runner/prepare-run-refs.d.ts

@@ -20,7 +20,7 @@ import type { SubagentWorktreeIsolation } from "../../agents/subagent.js";
 import { SubagentRetainLedger } from "../../agents/retain-ledger.js";
 import type { TaskEvent, TaskSpec } from "../types.js";
 import { ActiveSkillScope } from "./active-skill-scope.js";
-import type { Prepared, RunInternals } from "./contracts.js";
+import type { Prepared, RunInternals, ToolProgressLane } from "./contracts.js";
 import { type EditedFilesLedger } from "./edited-files-ledger.js";
 export interface PrepareRunRefsInput {
     /** borrowed-readonly — the REBOUND spec. Read: `forwardSubagentEvents` (widens the forwarding filter),
@@ -52,6 +52,14 @@ export interface PrepareRunRefsResult {
     harnessRef: {
         current?: AgentHarness;
     };
+    /** borrowed-mutable — the tool-progress lane's seat (`Prepared.toolProgressRef`), the same late-bound
+     *  shape and reason as `harnessRef`: the band is built HERE while the lane needs the run's content pusher
+     *  and identity mint, which exist only after prepare returns. Writer (R-3): the driver, ONCE, right after
+     *  `pushContent` exists. Readers: the band's progress seat and the harness-handler lane. Identity is the
+     *  contract. Unbound is LEGITIMATE — a band outside a Runner has no run to tick on, and emissions no-op. */
+    toolProgressRef: {
+        current?: ToolProgressLane;
+    };
     /** borrowed-mutable — the per-task LIFO skill scope. Writers: the project-context phase (the inherited-
      *  from-parent seed frame, `push`) and the `skill` tool minted over it (`push` on a manifest load; a frame
      *  closes by `pop`). Readers: the tool ctx's `activeSkillScope()` snapshot and the skill-scope policy layer. */

package/dist/core/runner/prepare-run-refs.js

@@ -12,6 +12,7 @@ export function prepareRunRefs(input) {
     const { spec, internals, executionEnv, taskRootFinal } = input;
     const { note: noteFileEdited, snapshot: editedFilesSnapshot } = createEditedFilesLedger();
     const harnessRef = {};
+    const toolProgressRef = {};
     const skillScope = new ActiveSkillScope();
     const forwardSink = internals?.onForwardEvent;
     const forwardEvent = forwardSink
@@ -19,7 +20,7 @@ export function prepareRunRefs(input) {
             if (e.type === "task_progress")
                 forwardSink(e);
             else if (spec.forwardSubagentEvents === true &&
-                (e.type === "text_delta" || e.type === "text_end" || e.type === "reasoning_delta" || e.type === "tool_start" || e.type === "tool_end")) {
+                (e.type === "text_delta" || e.type === "text_end" || e.type === "reasoning_delta" || e.type === "tool_start" || e.type === "tool_progress" || e.type === "tool_end")) {
                 forwardSink(e);
             }
         }
@@ -41,5 +42,5 @@ export function prepareRunRefs(input) {
     };
     const subagentRetain = spec.retainSubagentSessions ? new SubagentRetainLedger(spec.retainSubagentSessions) : undefined;
     const worktreeIsolation = spec.handsReadOnly !== true ? createSubagentWorktreeHelper(executionEnv, taskRootFinal) : undefined;
-    return { noteFileEdited, editedFilesSnapshot, harnessRef, skillScope, forwardEvent, reviewRequestRef, requestReview, stopRequestedRef, requestStopAfterTurn, planModeRef, enterPlanMode, subagentRetain, worktreeIsolation };
+    return { noteFileEdited, editedFilesSnapshot, harnessRef, toolProgressRef, skillScope, forwardEvent, reviewRequestRef, requestReview, stopRequestedRef, requestStopAfterTurn, planModeRef, enterPlanMode, subagentRetain, worktreeIsolation };
 }

package/dist/core/runner/prepare-suspend-saga.d.ts

@@ -109,12 +109,17 @@ export interface PrepareSuspendSagaInput {
     readFileStateForCheckpoint: ReadFileState | undefined;
     /** borrowed-readonly — the inherited-gate phase's read-face section builder (the row's `readFace`). */
     faceCheckpointSection: () => SerializedCheckpointState["readFace"];
+    /** borrowed-readonly — the inherited-gate phase's WRITE-face section builder (the row's `writeFace`). */
+    writeFaceCheckpointSection: () => SerializedCheckpointState["writeFace"];
     /** borrowed-readonly — the leg's reminder provenance mark (travels with the row). */
     reminderMark: string;
     /** borrowed-readonly — the hand's live tracked cwd, or undefined; `current` is read at mint time. Not written here. */
     handsCwdRef: CwdRef | undefined;
     /** borrowed-readonly — the active EnterWorktree session seat, or undefined; `current` is read at mint time. */
     worktreeSessionRef: Prepared["worktreeSessionRef"];
+    /** borrowed-readonly — the resumed leg's not-yet-delivered continuation content; its orphan obituaries fold into this
+     *  snapshot at mint time (a re-park before delivery must not lose them). */
+    undeliveredContinuationRef: Prepared["undeliveredContinuationRef"];
     /** borrowed-readonly — the LIVE inherited parent constraints, or undefined (the row's `requiresParentConstraint`,
      *  count, frozen chain and the screening-park disclosure's predicate). */
     inheritedParentConstraints: NonNullable<InheritedGate["parentConstraints"]>[number][] | undefined;

package/dist/core/runner/prepare-suspend-saga.js

@@ -78,7 +78,7 @@ function stampPlacementRootSessionId(placementRootResolved) {
     return placementValueOrAbsent(placementRootResolved);
 }
 export function prepareSuspendSaga(input) {
-    const { gateMachineryActive, abortController, harness, checkpointStore, deps, sessionId, hostTaskId, taskScope, liveSpendRef, resume, nestedStats, internals, activeTools, outputRef, readFileStateForCheckpoint, faceCheckpointSection, reminderMark, handsCwdRef, worktreeSessionRef, inheritedParentConstraints, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, autoModeIntent, inheritedAdmittedOrgScopes, ownOrgVerdictRef, orgGovernedProvenance, announcedListingsRef, gitStatusRef, hookIdentity, placementRootResolved, externalContentTargetActive, remoteEnvFailures, memoryEngineSession, suspendLoopRef, ownedEnv, incompleteSuspendAdapter } = input;
+    const { gateMachineryActive, abortController, harness, checkpointStore, deps, sessionId, hostTaskId, taskScope, liveSpendRef, resume, nestedStats, internals, activeTools, outputRef, readFileStateForCheckpoint, faceCheckpointSection, writeFaceCheckpointSection, reminderMark, handsCwdRef, worktreeSessionRef, undeliveredContinuationRef, inheritedParentConstraints, seedInheritedGate, inheritedAncestorRules, inheritedShellGate, autoModeIntent, inheritedAdmittedOrgScopes, ownOrgVerdictRef, orgGovernedProvenance, announcedListingsRef, gitStatusRef, hookIdentity, placementRootResolved, externalContentTargetActive, remoteEnvFailures, memoryEngineSession, suspendLoopRef, ownedEnv, incompleteSuspendAdapter } = input;
     if (!gateMachineryActive)
         return { saga: undefined };
     const inFlightSpendMicroUsd = () => {
@@ -108,6 +108,7 @@ export function prepareSuspendSaga(input) {
         nestedStats: { ...nestedStats },
         readFileState: readFileStateForCheckpoint ? [...readFileStateForCheckpoint.entries()] : undefined,
         readFace: faceCheckpointSection(),
+        writeFace: writeFaceCheckpointSection(),
         reminderMark,
         repairBundle: repairBundleForCheckpoint(parkedSpendMicroUsd),
         workspaceHandle,
@@ -118,7 +119,9 @@ export function prepareSuspendSaga(input) {
                 .list({ owner: hostTaskId, scope: taskScope, sessionId })
                 .filter((t) => t.status === "pending" || t.status === "running")
                 .map((t) => ({ id: t.task_id, ...(t.description !== undefined ? { description: t.description } : {}) }));
-            return live.length > 0 ? live : undefined;
+            const owed = undeliveredContinuationRef.current.orphanTasks.filter((o) => !live.some((t) => t.id === o.id));
+            const all = [...owed, ...live];
+            return all.length > 0 ? all : undefined;
         })(),
         pendingSteerQueue: undefined,
         inheritedGate: (() => {