@sema-agent/core 7.23.1 → 7.23.3

package/dist/brain/stream-engine.js

@@ -6,6 +6,7 @@ import { classifyInputTooLong } from "./input-too-long.js";
 import { FAST_MAX_BACKOFF_MS, providerWaitHint, retryBackoffMs } from "./retry.js";
 import { bindBrainStatusEmitter, emitBrainStatus, emitBrainTelemetry } from "./status-sink.js";
 import { createConnectController, resolveStallTimeoutMs } from "./timeout.js";
+import { thrownText } from "../core/thrown-value.js";
 const DEFAULT_MAX_RETRIES = 10;
 const MAX_RETRIES_ENV_CEILING = 15;
 const MAX_RETRIES_ENV = "SEMA_MAX_RETRIES";
@@ -270,7 +271,7 @@ export function runStreamingBrain(args) {
         terminalWaitDetail = aborted ? "cancelled while waiting for the first token" : "the first-token wait ended in failure";
         const errorMsg = emptyAssistant(model);
         errorMsg.stopReason = aborted ? "aborted" : "error";
-        errorMsg.errorMessage = err instanceof Error ? err.message : String(err);
+        errorMsg.errorMessage = thrownText(err);
         if (!aborted && err instanceof BrainError) {
             if (err.inputTooLong === true)
                 errorMsg.errorKind = "input_too_long";

package/dist/core/a2a.js

@@ -6,6 +6,7 @@ import { describeHttpTransportFailure } from "./mcp-failure.js";
 import { findNamespacePrefixCollision, mintNamespacePrefix, mintNamespacedToolName } from "./protocol-naming.js";
 import { A2A_NAMESPACE } from "./protocol-table.js";
 import { delimitUntrusted, inlineUntrusted } from "./untrusted-text.js";
+import { thrownText } from "./thrown-value.js";
 const A2A_REQUEST_TIMEOUT_MS = 30_000;
 const A2A_CARD_TIMEOUT_MS = 10_000;
 const A2A_CALL_TOTAL_TIMEOUT_MS = 10 * 60_000;
@@ -570,7 +571,7 @@ async function materializePeer(spec, principal, lifecycle, signal) {
     };
 }
 function asPeerWarning(spec, err) {
-    const detail = err instanceof Error ? err.message : String(err);
+    const detail = thrownText(err);
     const warning = new Error(`a2a: peer "${spec.name}" could not be materialized — skipped (${detail})`, { cause: err });
     warning.code = "a2a.peer_unavailable";
     return warning;
@@ -603,7 +604,7 @@ export async function materializeA2aTools(specs, principal, signal) {
         }
         else {
             warnings.push(asPeerWarning(spec, outcome.reason));
-            statuses.push({ name: spec.name, status: "failed", error: inlineUntrusted(outcome.reason instanceof Error ? outcome.reason.message : String(outcome.reason), A2A_ERROR_TEXT_MAX_CHARS) });
+            statuses.push({ name: spec.name, status: "failed", error: inlineUntrusted(thrownText(outcome.reason), A2A_ERROR_TEXT_MAX_CHARS) });
         }
     }
     return {
@@ -650,7 +651,7 @@ export async function materializeA2aTools(specs, principal, signal) {
                         toolCount: previous.length,
                         added: [],
                         removed: [],
-                        error: inlineUntrusted(err instanceof Error ? err.message : String(err), A2A_ERROR_TEXT_MAX_CHARS),
+                        error: inlineUntrusted(thrownText(err), A2A_ERROR_TEXT_MAX_CHARS),
                     });
                 }
             }

package/dist/core/artifact-host.js

@@ -1,4 +1,5 @@
 import { isAbsoluteForFamily, pathFamilyOf } from "../tools/fs/safety.js";
+import { thrownText } from "./thrown-value.js";
 export const ARTIFACT_ACTIONS = ["publish", "list", "read", "list_files", "read_file"];
 export const ARTIFACT_PLANES = ["hosted", "local-stub"];
 export const ARTIFACT_COMMIT_CERTAINTIES = ["throw_means_uncommitted", "uncertain"];
@@ -51,7 +52,7 @@ export function readArtifactHostCapabilities(host) {
         raw = h.capabilities.call(host);
     }
     catch (err) {
-        return { ok: false, problem: `artifactHost.capabilities() threw: ${err instanceof Error ? err.message : String(err)}` };
+        return { ok: false, problem: `artifactHost.capabilities() threw: ${thrownText(err)}` };
     }
     if (raw === null || typeof raw !== "object")
         return { ok: false, problem: "artifactHost.capabilities() did not return an object" };

package/dist/core/ask-question.js

@@ -4,6 +4,7 @@ import { boundInputHashOf } from "./canonical-json.js";
 import { defineTool, errorResult } from "./tools.js";
 import { delimitUntrusted, inlineUntrusted } from "./untrusted-text.js";
 import { toolFace } from "./tool-catalog-entries.js";
+import { thrownText } from "./thrown-value.js";
 export const ASK_USER_QUESTION_TOOL_NAME = "AskUserQuestion";
 export function classifyQuestionOutcome(outcome) {
     let unavailable;
@@ -299,7 +300,7 @@ export function createAskUserQuestionTool(onQuestion, source, opts) {
                 if (opts?.posture === "interactive" && opts.interactiveFallback !== true) {
                     return {
                         content: `Error (AskUserQuestion): the wired human channel failed to deliver an answer ` +
-                            `(${e instanceof Error ? e.message : String(e)}). This run declared interaction posture ` +
+                            `(${thrownText(e)}). This run declared interaction posture ` +
                             `"interactive", so the engine will not silently self-answer; fix the question channel ` +
                             `(or opt into the synthetic continuation explicitly via interactiveQuestionFallback).`,
                         isError: true,
@@ -308,7 +309,7 @@ export function createAskUserQuestionTool(onQuestion, source, opts) {
                 }
                 discloseSyntheticContinuation(ctx.toolCallId, "callback_failed");
                 return {
-                    content: `${NO_HUMAN} (no answer was obtained: ${e instanceof Error ? e.message : String(e)})`,
+                    content: `${NO_HUMAN} (no answer was obtained: ${thrownText(e)})`,
                     details: continuationCard(ctx.toolCallId, "synthetic_self_answer_instruction", "callback_failed"),
                 };
             }

package/dist/core/auto-promote.js

@@ -1,5 +1,6 @@
 import { extractSymbols } from "../tools/fs/repo-map.js";
 import { parseSkillToolEntry } from "./skill-tool-specifier.js";
+import { thrownText } from "./thrown-value.js";
 export function decideAutoPromote(i) {
     if (i.tripwire.escalate)
         return "needs_human";
@@ -71,7 +72,7 @@ export function deriveTripwire(artifactText, declared, profileTokens) {
     catch (e) {
         return {
             escalate: true,
-            reasons: [...reasons, `symbol-drift scan threw (fail-closed): ${String(e?.message ?? e)}`],
+            reasons: [...reasons, `symbol-drift scan threw (fail-closed): ${thrownText(e)}`],
         };
     }
     try {
@@ -86,7 +87,7 @@ export function deriveTripwire(artifactText, declared, profileTokens) {
     catch (e) {
         return {
             escalate: true,
-            reasons: [...reasons, `denylist scan threw (fail-closed): ${String(e?.message ?? e)}`],
+            reasons: [...reasons, `denylist scan threw (fail-closed): ${thrownText(e)}`],
         };
     }
     return { escalate, reasons };

package/dist/core/gate-bounded-await.js

@@ -1,4 +1,5 @@
 import { traceHookCrash } from "./gate-crash-trace.js";
+import { thrownText } from "./thrown-value.js";
 export function gateWaitFailureOf(err) {
     const mark = err?.gateWait;
     return mark === "timeout" || mark === "aborted" ? mark : undefined;
@@ -58,6 +59,6 @@ export async function awaitWriteProtectionJudgment(judged, ms, signal, onFailure
     }
     catch (err) {
         onFailure?.(err);
-        return { kind: "unresolvable", cause: err instanceof Error ? err.message : String(err), unresolvedSymlink: false };
+        return { kind: "unresolvable", cause: thrownText(err), unresolvedSymlink: false };
     }
 }

package/dist/core/gate-fold.js

@@ -5,6 +5,7 @@ import {} from "./runner/gate-exit.js";
 import { traceHookCrash } from "./gate-crash-trace.js";
 import { writeProtectionMandated, writeProtectionTightenDecision, writeProtectionUnresolved } from "./write-protect.js";
 import { createGateDeadline, awaitWriteProtectionJudgment, gateWaitFailureOf, withGateTimeout } from "./gate-bounded-await.js";
+import { thrownText } from "./thrown-value.js";
 export async function runGateFold(pass) {
     const { input, toolName, toolCallId, callSignal, ledger, notifier, adjudicate } = pass;
     const boundedAwaitDeadlineMs = createGateDeadline(input, notifier);
@@ -76,6 +77,8 @@ export async function runGateFold(pass) {
                     probeCause = normalizeProbeCause(verdict?.cause);
                     if (verdict?.mandated === true)
                         probeMandated = true;
+                    if (verdict?.boundaryDeclined === true)
+                        pass.probeBoundaryDeclined = true;
                     probeReadRootCandidate = normalizeReadRootCandidate(verdict?.readRootCandidate);
                 }
             }
@@ -120,7 +123,7 @@ export async function runGateFold(pass) {
                 const kind = gateWaitFailureOf(err);
                 if (kind === "aborted" || input.abortSignal?.aborted === true)
                     return;
-                traceHookCrash(input, new Error(`write-protection judge ${kind === "timeout" ? "timed out" : "threw"} for tool "${toolName}" (toolCallId ${toolCallId}) — this call's write target could not be judged: ${err instanceof Error ? err.message : String(err)}`), notifier);
+                traceHookCrash(input, new Error(`write-protection judge ${kind === "timeout" ? "timed out" : "threw"} for tool "${toolName}" (toolCallId ${toolCallId}) — this call's write target could not be judged: ${thrownText(err)}`), notifier);
             });
         if (verdict !== undefined && writeProtectionMandated(verdict))
             pass.writeProtected = true;

package/dist/core/gate-lanes.js

@@ -12,6 +12,7 @@ import { ORG_ADJUDICATION_TIMEOUT_MS, ORG_RULE_DECISION_REASON, ORG_UNAVAILABLE_
 import { exitGate } from "./runner/gate-exit.js";
 import { traceHookCrash } from "./gate-crash-trace.js";
 import { createGateDeadline, awaitWriteProtectionJudgment } from "./gate-bounded-await.js";
+import { thrownText } from "./thrown-value.js";
 function isPlainOwnRecord(x) {
     try {
         if (x === null || typeof x !== "object" || Array.isArray(x))
@@ -345,7 +346,7 @@ export async function runGateLanes(pass) {
             const stamped = { ...unstamped, ruleEvidence: mintRuleEvidence(personalEvidence), ...(laneCoverage !== undefined ? { segmentCoverage: laneCoverage } : {}), ...(originFacts.ruleStore !== undefined ? { ruleStoreUnreadable: originFacts.ruleStore } : {}) };
             pass.decision = stampAskOrigin(stamped, originFacts);
         }
-        if (allowLayerMayClear() && pass.decision.action === "ask" && persistedRuleMandate === undefined && pass.decision.matchedAskRule === undefined && pass.req.toolName === COMMAND_RULE_TOOL) {
+        if (allowLayerMayClear() && pass.decision.action === "ask" && persistedRuleMandate === undefined && pass.probeBoundaryDeclined !== true && pass.decision.matchedAskRule === undefined && pass.req.toolName === COMMAND_RULE_TOOL) {
             const commandParam = catalogRuleFaceOf(COMMAND_RULE_TOOL)?.primaryParams[0] ?? "command";
             const args = pass.req.args;
             const command = typeof args === "object" && args !== null && !Array.isArray(args) ? args[commandParam] : undefined;
@@ -422,6 +423,7 @@ export async function runGateLanes(pass) {
             input.egress !== true &&
             input.peerMessage !== true &&
             sandboxMayAdmitMandate(persistedRuleMandate) &&
+            pass.probeBoundaryDeclined !== true &&
             input.sandboxAdmission.boundaryCapable !== true) {
             const recorded = input.sandboxAdmission.askClassesOf(toolCallId);
             const admissible = recorded !== undefined && recorded.length > 0 && recorded.every((r) => r.cls === "sandbox_local");
@@ -605,7 +607,7 @@ export async function runGateLanes(pass) {
                         catch (err) {
                             recheck = {
                                 action: "deny",
-                                message: `policy re-check of the approved edit for "${toolName}" errored: ${err instanceof Error ? err.message : String(err)}`,
+                                message: `policy re-check of the approved edit for "${toolName}" errored: ${thrownText(err)}`,
                             };
                         }
                     }

package/dist/core/git-worktree-env.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { thrownLabel, thrownText } from "./thrown-value.js";
 export const WORKTREE_PARENT = ".sema-worktrees";
 function shq(s) {
     return `'${s.replace(/'/g, "'\\''")}'`;
@@ -10,10 +11,10 @@ async function removeWorktree(baseEnv, repoRoot, worktreeDir) {
             const r = await baseEnv.exec(`git worktree remove --force ${shq(worktreeDir)}`, { cwd: repoRoot });
             if (r.ok && r.value.exitCode === 0)
                 return { ok: true };
-            detail = r.ok ? r.value.stderr || r.value.stdout || `exit ${r.value.exitCode}` : String(r.error);
+            detail = r.ok ? r.value.stderr || r.value.stdout || `exit ${r.value.exitCode}` : thrownText(r.error);
         }
         catch (err) {
-            detail = String(err);
+            detail = thrownLabel(err);
         }
     }
     return { ok: false, detail };
@@ -25,7 +26,7 @@ export async function addWorktree(baseEnv, opts) {
         cwd: opts.repoRoot,
     });
     if (!add.ok || add.value.exitCode !== 0) {
-        const detail = add.ok ? add.value.stderr || add.value.stdout : String(add.error);
+        const detail = add.ok ? add.value.stderr || add.value.stdout : thrownText(add.error);
         throw new Error(`git worktree add failed: ${detail}`);
     }
     const excludeLine = shq(`/${WORKTREE_PARENT}/`);
@@ -65,10 +66,10 @@ export async function pruneWorktrees(baseEnv, repoRoot) {
             return { ok: true };
         return {
             ok: false,
-            detail: r.ok ? (r.value.stderr || r.value.stdout || `exit ${r.value.exitCode}`).trim() : String(r.error),
+            detail: r.ok ? (r.value.stderr || r.value.stdout || `exit ${r.value.exitCode}`).trim() : thrownText(r.error),
         };
     }
     catch (err) {
-        return { ok: false, detail: String(err) };
+        return { ok: false, detail: thrownLabel(err) };
     }
 }

package/dist/core/hooks.js

@@ -1,4 +1,5 @@
-import { decisionText, refuseOutOfContractDecision } from "./tool-policy.js";
+import { decisionText, describeThrown, refuseOutOfContractDecision } from "./tool-policy.js";
+import { asThrownError } from "./thrown-value.js";
 import { createSettlementLedger, engineFailClosedExit, hookDenyExit } from "./runner/gate-exit.js";
 import { traceHookCrash } from "./gate-crash-trace.js";
 import { runGateFold } from "./gate-fold.js";
@@ -88,7 +89,7 @@ export async function runHookSeat(seat, bound, call) {
                 listening = true;
             }
         }
-        pending.then((value) => finish(() => resolve({ expired: false, value })), (err) => finish(() => reject(err instanceof Error ? err : new Error(String(err)))));
+        pending.then((value) => finish(() => resolve({ expired: false, value })), (err) => finish(() => reject(asThrownError(err))));
     });
 }
 export function hookSeatExpiredError(seat, timeoutMs, cause, consequence) {
@@ -170,8 +171,7 @@ export function mintHookInvocationIdentity(facts) {
     }));
 }
 function preToolUseCrashReason(subject, err) {
-    const raw = err instanceof Error ? err.message.trim() || err.name : String(err);
-    const cause = inlineUntrusted(raw, 200);
+    const cause = inlineUntrusted(describeThrown(err), 200);
     return (`a PreToolUse hook crashed while screening ${subject}; the call was NOT executed (fail-closed). ` +
         `This is a failure of the deployment's hook, NOT of the tool itself — an identical retry reaches the ` +
         `same hook and fails the same way. Hook error: ${cause || "(no message)"}`);

package/dist/core/lsp-session.js

@@ -1,5 +1,6 @@
 import { uriToPath, buildRequest, callHierarchyMethod, parseResult, pathToUri } from "./lsp-protocol.js";
 import { lspFailureOf, SharedAbortScope, settleOnAbort } from "./lsp.js";
+import { thrownText } from "./thrown-value.js";
 const WARMUP_MAX_ATTEMPTS = 3;
 export class TransportLspSession {
     transport;
@@ -81,7 +82,7 @@ export class TransportLspSession {
             }
             catch (e) {
                 const f = lspFailureOf(e) ?? TransportLspSession.classifyUnbranded(signal, this.transport);
-                this.log("lsp_op_degraded", { op, file: params.filePath, reason: f.reason, err: e instanceof Error ? e.message : String(e) });
+                this.log("lsp_op_degraded", { op, file: params.filePath, reason: f.reason, err: thrownText(e) });
                 return { kind: "none", reason: f.reason, ...(f.detail !== undefined ? { detail: f.detail } : {}) };
             }
             const result = noHierarchyItem
@@ -152,7 +153,7 @@ export class TransportLspSession {
                     text = await this.readText(filePath, scope.signal);
                 }
                 catch (e) {
-                    const error = e instanceof Error ? e.message : String(e);
+                    const error = thrownText(e);
                     this.log("lsp_sync_skipped", { file: filePath, error, opened: this.opened.has(filePath) });
                     return { ok: false, error };
                 }

package/dist/core/mcp.js

@@ -21,6 +21,7 @@ import { withContentOrigin } from "./memory-engine/content-origin.js";
 import { snapshotMcpEntries } from "./locked-config.js";
 import { validateJsonSchemaShape } from "./runner/strict-output-schema.js";
 import { schemaKeyBoundProblem } from "./tool-roster.js";
+import { thrownText } from "./thrown-value.js";
 export const MCP_PREFIX = MCP_NAMESPACE.prefix;
 const MCP_OUTPUT_TOKENS_DEFAULT = 25_000;
 const MCP_CHARS_PER_TOKEN = 4;
@@ -190,7 +191,7 @@ function namedMcpFailureText(err) {
     return condition !== undefined ? `${condition}: ${detail}` : detail;
 }
 function remoteErrorText(err, opts) {
-    const raw = err instanceof Error ? err.message : String(err);
+    const raw = thrownText(err);
     return redactSecrets(opts?.collapse === true ? collapseMcpErrorPrefix(raw) : raw);
 }
 function writeEffectWarning(writeEffect) {
@@ -202,7 +203,7 @@ function rethrowHonestMcpError(err, ctx) {
     const finish = (e) => {
         if (ctx.reminder !== undefined) {
             observeReminderMarkEcho({
-                text: e instanceof Error ? e.message : String(e),
+                text: thrownText(e),
                 mark: ctx.reminder.mark,
                 outlet: ctx.reminder.outlet,
                 counts: ctx.reminder.counts,
@@ -321,7 +322,7 @@ async function persistMcpBlob(base64Data, mimeType, server) {
         return { filePath, bytes: bytes.length };
     }
     catch (err) {
-        return { error: err instanceof Error ? err.message : String(err), bytes: bytes.length };
+        return { error: thrownText(err), bytes: bytes.length };
     }
 }
 async function blobToTextBlock(base64Data, mimeType, server, prefix, refetchHint = "") {

package/dist/core/memory-admission.js

@@ -1,4 +1,5 @@
 import { parseScopeKey } from "./memory-engine/scope-contract.js";
+import { thrownText } from "./thrown-value.js";
 function codedError(code, message) {
     const e = new Error(message);
     e.code = code;
@@ -122,7 +123,7 @@ export async function admitMemoryScopes(input) {
     }
     catch (err) {
         const hinted = err.retryAfterMs;
-        const e = codedError("memory.admission_required", `memory-scope admission resolver failed (${err instanceof Error ? err.message : String(err)}) — refused fail-closed.`);
+        const e = codedError("memory.admission_required", `memory-scope admission resolver failed (${thrownText(err)}) — refused fail-closed.`);
         if (typeof hinted === "number" && Number.isFinite(hinted) && hinted > 0)
             e.retryAfterMs = hinted;
         throw e;

package/dist/core/memory-engine/consolidation-driver.js

@@ -5,6 +5,7 @@ import { inlineUntrusted } from "../untrusted-text.js";
 import { deliverEngineNotice } from "../engine-notice.js";
 import { CONSOLIDATION_FORCE_THROTTLE_FLOOR_MS, screenConsolidationOptions, supersessionFuseCeiling, updateConsolidationGate, recommendationUnconsumed, } from "./consolidation.js";
 import { memoryConsolidationIncompleteNotice, memoryConsolidationWithheldNotice } from "./engine.js";
+import { asThrownError, thrownText } from "../thrown-value.js";
 import { CONSOLIDATION_DRIVE_ABORT, CONSOLIDATION_SNAPSHOT_PARKED, MEMORY_DISTILLER_CONTRACT_V1, detectCleanArmVerbatimLeak, driveConsolidationToFixpoint, isAliasModelId, llmPlanDistiller, mintExposurePartitionedPlan, mintLlmConsolidationPlan, normalizedCandidateRev, } from "./distiller.js";
 export const CONSOLIDATION_DRIVER_RUNS_FILE = "distiller-runs.json";
 export const CONSOLIDATION_DRIVER_PLANS_DIR = "distiller-plans";
@@ -119,7 +120,7 @@ export async function runMemoryConsolidationDriver(engine, scope, opts) {
             await rawSleep(ms);
         }
         catch (err) {
-            const e = typeof err === "object" && err !== null ? err : new Error(String(err));
+            const e = typeof err === "object" && err !== null ? err : asThrownError(err);
             Reflect.set(e, CONSOLIDATION_DRIVE_ABORT, true);
             throw e;
         }
@@ -155,7 +156,7 @@ export async function runMemoryConsolidationDriver(engine, scope, opts) {
             enqueueMemoryAnnouncement(controlDir, { kind: "gate", at: now(), items });
         }
         catch (err) {
-            announceFailures.push(err instanceof Error ? err.message : String(err));
+            announceFailures.push(thrownText(err));
         }
     };
     const egressEndpoint = ((raw) => {
@@ -211,7 +212,7 @@ export async function runMemoryConsolidationDriver(engine, scope, opts) {
                 });
             }
             catch (err) {
-                announceFailures.push(err instanceof Error ? err.message : String(err));
+                announceFailures.push(thrownText(err));
             }
         }
         const notices = [];
@@ -279,7 +280,7 @@ export async function runMemoryConsolidationDriver(engine, scope, opts) {
                 announce([
                     `memory consolidation driver run ${run.runId} for scope ${inlineUntrusted(scope, 80)} ATTEMPTED to send memory content to the configured consolidation model: ${egressSeat} — the seat threw before any answer was recorded, so whether any content reached the provider is NOT observable from here; up to ${candidates.length} candidate(s) were in flight, each rendered as its name, description and body. Treat this as a possible transmission.`,
                 ]);
-                throw new DriverMintFailure(`the model seat failed during the mint: ${err instanceof Error ? err.message : String(err)}`);
+                throw new DriverMintFailure(`the model seat failed during the mint: ${thrownText(err)}`);
             }
             const transcript = minted.ok ? minted.plan.minting.transcript : minted.calls;
             run.usage.calls += transcript.length;

package/dist/core/memory-engine/consolidation.js

@@ -2,6 +2,7 @@ import { existsSync, readdirSync, renameSync } from "node:fs";
 import { join } from "node:path";
 import { uuidv7 } from "../../engine/session/uuid.js";
 import { atomicWriteFileSync, lockedStrictUpdate, readStrictSidecar, ControlPlaneCorruptError, ensureDirExists } from "./layout.js";
+import { thrownText } from "../thrown-value.js";
 export function deriveSupersededSet(headers, opts = {}) {
     const byId = new Map();
     for (const h of headers)
@@ -296,7 +297,7 @@ export function readConsolidationPlan(controlDir, planId) {
         return { state: "ok", plan: raw };
     }
     catch (err) {
-        return { state: "corrupt", detail: err instanceof Error ? err.message : String(err) };
+        return { state: "corrupt", detail: thrownText(err) };
     }
 }
 export function listConsolidationPlanIds(controlDir) {

package/dist/core/memory-engine/delegation-settlement.js

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { closeSync, existsSync, fsyncSync, linkSync, lstatSync, openSync, readFileSync, readdirSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { QUARANTINE_DIR, appendChallengeEvents, enqueueMemoryAnnouncement, ensureDirExists, v1MemoryPathKeyResolver, lineageContributionsOfSession, lockedStrictUpdate, markSessionPolluted, readProjectionDebts, readSessionPollution, readStrictSidecar, ControlPlaneCorruptError } from "./layout.js";
+import { thrownText } from "../thrown-value.js";
 export const DELEGATION_SETTLEMENT_FILE = "delegation-settlement.json";
 function reqStr(v) {
     return typeof v === "string" && v.length > 0;
@@ -584,13 +585,13 @@ export function openInstructionHold(controlDir, input) {
         });
     }
     catch (err) {
-        return { ok: false, reason: `hold ledger refused: ${err instanceof Error ? err.message : String(err)}` };
+        return { ok: false, reason: `hold ledger refused: ${thrownText(err)}` };
     }
     try {
         ensureDirExists(holdDir);
     }
     catch (err) {
-        return refuse(`hold capture failed: ${err instanceof Error ? err.message : String(err)}`, "capture_lost");
+        return refuse(`hold capture failed: ${thrownText(err)}`, "capture_lost");
     }
     if (!writeCustodyVerified(join(holdDir, captureName), buf)) {
         return refuse("hold capture verification failed (the custody copy could not be written, made durable, or hashed back to the captured digest)", "capture_lost");
@@ -633,7 +634,7 @@ export function openInstructionHold(controlDir, input) {
         });
     }
     catch (err) {
-        return refuse(`hold ledger flip refused: ${err instanceof Error ? err.message : String(err)}`, "discarded");
+        return refuse(`hold ledger flip refused: ${thrownText(err)}`, "discarded");
     }
     return { ok: true, holdId, ...(thirdWriterStrandedAt !== undefined ? { thirdWriterStrandedAt } : {}) };
 }

package/dist/core/memory-engine/distiller.js

@@ -1,3 +1,4 @@
+import { readMember, thrownText } from "../thrown-value.js";
 export const DISTILLER_DEFAULT_MAX_INPUTS_PER_PRODUCT = 32;
 const SIZE_CLAUSE = {
     "dl-2": "- the index should be as small as it can be made without losing either of the above.",
@@ -595,10 +596,13 @@ export function scheduleUnderFuse(products, ceiling, { maxProductsPerRun = Infin
     };
 }
 export function codedReason(err) {
-    const e = err;
-    const code = e?.code !== undefined ? `${String(e.code)}: ` : "";
-    const reasons = Array.isArray(e?.reasons) && e.reasons.length > 0 ? `\n  - ${e.reasons.join("\n  - ")}` : "";
-    return `${code}${String(e?.message ?? err)}${reasons}`;
+    const codeValue = readMember(err, "code");
+    const code = codeValue !== undefined ? `${thrownText(codeValue)}: ` : "";
+    const rs = readMember(err, "reasons");
+    const reasons = Array.isArray(rs) && rs.length > 0 ? `\n  - ${rs.map((r) => thrownText(r)).join("\n  - ")}` : "";
+    const m = readMember(err, "message");
+    const duckMessage = typeof m === "string" && m !== "" ? m : undefined;
+    return `${code}${duckMessage ?? thrownText(err)}${reasons}`;
 }
 async function tryReconcile(engine, scope) {
     try {