@sema-agent/core 7.23.5 → 7.24.1

package/dist/core/tools.js

@@ -6,7 +6,7 @@ function normalizeContent(ret) {
     if (typeof ret === "string") {
         return { content: [{ type: "text", text: ret }], details: undefined, terminate: false, isError: false };
     }
-    const raw = ret.content;
+    const raw = readMember(ret, "content");
     if (typeof raw !== "string" && !Array.isArray(raw)) {
         return {
             content: [{ type: "text", text: "Tool error: content must be a string or an array of content blocks." }],
@@ -16,7 +16,7 @@ function normalizeContent(ret) {
         };
     }
     const content = typeof raw === "string" ? [{ type: "text", text: raw }] : raw;
-    return { content, details: ret.details, terminate: ret.terminate ?? false, isError: ret.isError === true };
+    return { content, details: readMember(ret, "details"), terminate: readMember(ret, "terminate") === true, isError: readMember(ret, "isError") === true };
 }
 function isEmptyToolContent(content) {
     if (content.length === 0)
@@ -108,11 +108,15 @@ export function defineTool(spec, options) {
                     isError: true,
                 };
             }
-            let ret;
             try {
                 const baseCtx = { toolCallId, signal };
                 const ctx = options?.enrichCtx ? stampCallIdentity(options.enrichCtx(baseCtx), toolCallId, signal) : baseCtx;
-                ret = await spec.execute(params, ctx);
+                const ret = await spec.execute(params, ctx);
+                const { content, details, terminate, isError } = normalizeContent(ret);
+                const guarded = isEmptyToolContent(content)
+                    ? [{ type: "text", text: isError ? `(${spec.name} reported an error with no further output)` : `(${spec.name} completed with no output)` }]
+                    : content;
+                return { content: guarded, details, terminate, ...(isError ? { isError: true } : {}) };
             }
             catch (err) {
                 const wrapped = new Error(formatToolError(err));
@@ -124,11 +128,6 @@ export function defineTool(spec, options) {
                     wrapped.errorKind = errorKind;
                 throw wrapped;
             }
-            const { content, details, terminate, isError } = normalizeContent(ret);
-            const guarded = isEmptyToolContent(content)
-                ? [{ type: "text", text: isError ? `(${spec.name} reported an error with no further output)` : `(${spec.name} completed with no output)` }]
-                : content;
-            return { content: guarded, details, terminate, ...(isError ? { isError: true } : {}) };
         },
     };
     if (spec.contract) {

package/dist/core/types.d.ts

@@ -12,6 +12,7 @@
 import type { AgentTool, ThinkingLevel, ToolInputValidationContext, ToolInputVerdict } from "../internal/harness.js";
 import type { Model, StreamFn } from "../internal/llm.js";
 export type { ModelRef, ModelRole, RoleSpec, ModelRoles, Brain } from "./model-seat.js";
+export { MODEL_ROLES } from "./model-seat.js";
 export type { StaleToolResultOffloadOptions, ImageInput, TaskSpec, ShellGateDoctrine } from "./task-spec.js";
 export type { ToolEffect, ToolContentOrigin, ReversibilityVerdict, ReadRootGrantCandidate, ToolSpec, ToolReturn, NestedUsage, NestedUsageAccum, ToolExecuteContext } from "./tool-spec.js";
 export type { BeforeWriteRequest, BeforeWriteResult, BeforeWriteHook, TrackEditRequest, TrackEditResult, TrackFileEditHook, FileEditedNotice, FileEditedHook, HandsBandOptions } from "./hands-band.js";

package/dist/core/types.js

@@ -1,3 +1,4 @@
+export { MODEL_ROLES } from "./model-seat.js";
 export { AUTO_MODE_DENY_SOURCES, isAutoModeDenySource } from "./runtime-caps.js";
 export { __resetMalformedDelegationSeatAnnouncement, deliverDelegationLifecycle } from "./delegation-frames.js";
 export { __resetMalformedNoticeSeatAnnouncement, deliverEngineNotice, owedUserInputCounts, settleOwedUserInput, undrainedUserInputNotices } from "./engine-notice.js";

package/dist/engine/llm/types.d.ts

@@ -911,14 +911,14 @@ export interface RoutePairingConfig {
 export type RoutePairingPosture = "per-model" | "paired" | "unpinned" | "keyless";
 /** Machine codes an adjudication refusal carries (minted here, forwarded verbatim by consumers). */
 export type RouteRefusalCode = "route.credential_mismatch" | "route.credential_missing";
-/** The structured account of a refusal — enough for a caller to render the two halves and the fix. */
+/** The structured account of a refusal — the two halves and the fix, every URL a DISPLAY spelling. */
 export interface RouteRefusalDetail {
     modelId: string;
-    /** The entry's declared URL half (`Model.baseUrl`, normalized). */
+    /** The entry's declared URL half (`Model.baseUrl`), via `displayUrlOf` — NOT route identity. */
     entryBaseUrl: string;
-    /** The root the request would actually target (normalized). */
+    /** The root the request would actually target, rendered (use `routeKeyOf` for identity). */
     requestBaseUrl: string;
-    /** The deployment's declared root the credential is paired with (mismatch refusals). */
+    /** The declared root the credential is paired with (mismatch refusals), rendered. */
     configBaseUrl?: string;
     /** One-line configuration fix. */
     fixHint: string;

package/dist/index.d.ts

@@ -40,7 +40,7 @@ export { LspDiagnosticsRegistry, formatDiagnosticsBlock, formatDiagnosticsSummar
 export { NodeLspManager, DEFAULT_LSP_SERVERS, languageFor, defaultLspSpawn, type NodeLspManagerOptions, type LspSpawn, } from "./engine/lsp/node-lsp-manager.js";
 export { StdioLspTransport, type LspChildProcess } from "./engine/lsp/stdio-lsp-transport.js";
 export { encodeFrame, createFrameDecoder } from "./engine/lsp/frame-decoder.js";
-export { resolveModel, resolveTaskModel, parseModelMention, expandTiers, DEFAULT_TIER_ORDER, CC_MODEL_TIER_ALIASES, ROLE_TIER_DEFAULTS, type ModelRole, type RoleSpec, type ModelRoles, type ResolvedRole, type ModelMention, } from "./core/roles.js";
+export { resolveModel, resolveTaskModel, parseModelMention, expandTiers, DEFAULT_TIER_ORDER, CC_MODEL_TIER_ALIASES, ROLE_TIER_DEFAULTS, MODEL_ROLES, type ModelRole, type RoleSpec, type ModelRoles, type ResolvedRole, type ModelMention, } from "./core/roles.js";
 export { selectModel, selectModelOrThrow, type ModelCriteria, type ModelTier } from "./core/select-model.js";
 export { BrainError, classifyHttp, type BrainErrorCode } from "./brain/errors.js";
 export { looksDegenerate, inspectDegenerate, trimDegenerateTail } from "./brain/repetition.js";
@@ -325,7 +325,7 @@ export { createCircuitBreakerBrain, type CircuitBreakerOptions, type BreakerStat
 export { createDegradingBrain, readDegradation, DEGRADED_DIAGNOSTIC_TYPE, type DegradingBrainOptions, type DegradeReason, type DegradationInfo, } from "./brain/degrading.js";
 export { retryBackoffMs, parseRetryAfter } from "./brain/retry.js";
 export { WAITING_FIRST_TOKEN_AFTER_MS, WAITING_FIRST_TOKEN_EVERY_MS } from "./brain/stream-engine.js";
-export { adjudicateModelRoute, resolveRouteCredential, routeRefusalText, routePairingStatus, normalizeBaseUrl, hasAuthCarrier, type RoutePairingStatus, } from "./brain/route-adjudicator.js";
+export { adjudicateModelRoute, resolveRouteCredential, routeRefusalText, routePairingStatus, routeKeyOf, displayUrlOf, resolveRequestRoot, hasAuthCarrier, type RoutePairingStatus, } from "./brain/route-adjudicator.js";
 export type { RouteAdjudication, RouteCredential, RouteCredentialSource, RoutePairingConfig, RoutePairingPosture, RouteRefusalCode, RouteRefusalDetail, } from "./internal/llm.js";
 export { ROUTE_ADJUDICATION_CONFORMANCE_CORPUS, type RouteAdjudicationVector } from "./brain/route-conformance.js";
 export { type BrainTimeoutConfig } from "./brain/timeout.js";

package/dist/index.js

@@ -27,7 +27,7 @@ export { LspDiagnosticsRegistry, formatDiagnosticsBlock, formatDiagnosticsSummar
 export { NodeLspManager, DEFAULT_LSP_SERVERS, languageFor, defaultLspSpawn, } from "./engine/lsp/node-lsp-manager.js";
 export { StdioLspTransport } from "./engine/lsp/stdio-lsp-transport.js";
 export { encodeFrame, createFrameDecoder } from "./engine/lsp/frame-decoder.js";
-export { resolveModel, resolveTaskModel, parseModelMention, expandTiers, DEFAULT_TIER_ORDER, CC_MODEL_TIER_ALIASES, ROLE_TIER_DEFAULTS, } from "./core/roles.js";
+export { resolveModel, resolveTaskModel, parseModelMention, expandTiers, DEFAULT_TIER_ORDER, CC_MODEL_TIER_ALIASES, ROLE_TIER_DEFAULTS, MODEL_ROLES, } from "./core/roles.js";
 export { selectModel, selectModelOrThrow } from "./core/select-model.js";
 export { BrainError, classifyHttp } from "./brain/errors.js";
 export { looksDegenerate, inspectDegenerate, trimDegenerateTail } from "./brain/repetition.js";
@@ -279,7 +279,7 @@ export { createCircuitBreakerBrain, CIRCUIT_OPEN_MARKER, } from "./brain/circuit
 export { createDegradingBrain, readDegradation, DEGRADED_DIAGNOSTIC_TYPE, } from "./brain/degrading.js";
 export { retryBackoffMs, parseRetryAfter } from "./brain/retry.js";
 export { WAITING_FIRST_TOKEN_AFTER_MS, WAITING_FIRST_TOKEN_EVERY_MS } from "./brain/stream-engine.js";
-export { adjudicateModelRoute, resolveRouteCredential, routeRefusalText, routePairingStatus, normalizeBaseUrl, hasAuthCarrier, } from "./brain/route-adjudicator.js";
+export { adjudicateModelRoute, resolveRouteCredential, routeRefusalText, routePairingStatus, routeKeyOf, displayUrlOf, resolveRequestRoot, hasAuthCarrier, } from "./brain/route-adjudicator.js";
 export { ROUTE_ADJUDICATION_CONFORMANCE_CORPUS } from "./brain/route-conformance.js";
 export {} from "./brain/timeout.js";
 export { createAssistantMessageEventStream } from "./internal/llm.js";

package/dist/orchestration/workflow.js

@@ -23,7 +23,7 @@ import { compileOutputSchema } from "../core/runner/strict-output-schema.js";
 import { WorkflowBudgetExceededError, WorkflowNestingError, WorkflowAgentBlockedError, WorkflowAgentParkedError, WorkflowAgentSchemaError, WorkflowAgentStalledError, WorkflowMaxAgentsError, WORKFLOW_SPAWN_BLOCKED_ERROR_CODE } from "./workflow-types.js";
 import { WorkflowScriptError } from "./workflow-meta.js";
 import { STALL_CONNECT_MS, STALL_FIRST_TOKEN_MS } from "../brain/timeout.js";
-import { asThrownError, thrownText } from "../core/thrown-value.js";
+import { asThrownError, isErrorLike, readMember, thrownIs, thrownName, thrownText } from "../core/thrown-value.js";
 export * from "./workflow-types.js";
 const MAX_TRANSCRIPT_CHARS = 4000;
 const WORKFLOW_RESULT_MAX = 4000;
@@ -176,7 +176,7 @@ export function assertSupportedAgentIsolation(isolation) {
     }
 }
 function rethrowIfMaxAgents(e) {
-    if (e instanceof WorkflowMaxAgentsError)
+    if (thrownIs(e, WorkflowMaxAgentsError))
         throw e;
     return null;
 }
@@ -186,7 +186,7 @@ function foldFanOutSettled(settled, lane, errorsOut, emitRunLog) {
     const results = settled.map((s) => {
         if (s.ok)
             return s.v;
-        if (s.e instanceof WorkflowBudgetExceededError) {
+        if (thrownIs(s.e, WorkflowBudgetExceededError)) {
             dropped++;
             droppedSlots.push(s.i);
             errorsOut?.push(workflowFanOutSlotError(s.i, s.e));
@@ -201,9 +201,19 @@ function foldFanOutSettled(settled, lane, errorsOut, emitRunLog) {
         emitRunLog(`${lane}: ${dropped} ${dropped === 1 ? "slot" : "slots"} dropped — token budget exceeded (${dropped === 1 ? "slot" : "slots"} ${droppedSlots.join(", ")})`);
     return results;
 }
+function thrownMessageOf(err) {
+    if (!isErrorLike(err))
+        return undefined;
+    const message = readMember(err, "message");
+    return typeof message === "string" && message !== "" ? message : undefined;
+}
+function thrownNameOf(err) {
+    const name = thrownName(err);
+    return name !== undefined && name !== "" ? name : undefined;
+}
 function workflowFanOutSlotError(index, e) {
-    const code = e?.code;
-    const kind = typeof code === "string" && code.length > 0 ? code : e instanceof Error ? e.name : "Error";
+    const code = readMember(e, "code");
+    const kind = typeof code === "string" && code.length > 0 ? code : thrownNameOf(e) ?? "Error";
     return { index, kind, message: boundedRedactedSummary(thrownText(e), 300) };
 }
 export class WorkflowResultTooLargeError extends Error {
@@ -247,12 +257,20 @@ export const MAX_WORKFLOW_ITEMS = 4096;
 function describeFanOutValue(v) {
     if (v === null)
         return "null";
-    if (Array.isArray(v))
+    if (isFanOutArray(v))
         return "array";
-    if (v instanceof Promise)
+    if (thrownIs(v, Promise))
         return "a Promise (an already-CALLED agent(...) — wrap it: () => agent(...))";
     return typeof v;
 }
+function isFanOutArray(v) {
+    try {
+        return Array.isArray(v);
+    }
+    catch {
+        return false;
+    }
+}
 function assertFanOutCallables(lane, member, list) {
     for (let i = 0; i < list.length; i++) {
         if (typeof list[i] !== "function") {
@@ -263,7 +281,7 @@ function assertFanOutCallables(lane, member, list) {
     }
 }
 function assertFanOutArray(lane, what, v) {
-    if (!Array.isArray(v)) {
+    if (!isFanOutArray(v)) {
         throw new WorkflowScriptError(`${lane}(): ${what} must be an ARRAY (got ${describeFanOutValue(v)}). Nothing was run.`);
     }
 }
@@ -1740,14 +1758,14 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                 }
             }
             catch (err) {
-                if (drive !== undefined && !finalized && !(err instanceof WorkflowAgentParkedError)) {
+                if (drive !== undefined && !finalized && !thrownIs(err, WorkflowAgentParkedError)) {
                     emitRunLog(`[park] the parked leg "${label}" could not be driven — the resume was refused before the checkpoint was consumed (${withoutToken(errText(err), drive.token)}); the park stands.`);
                     return await parkAgentLeg(rec, drive.paused, activityTail, false);
                 }
                 if (!finalized) {
                     rec.status = "failed";
                     rec.endedAt = now();
-                    const salvaged = err instanceof WorkflowAgentStalledError ? err.lastResult : undefined;
+                    const salvaged = thrownIs(err, WorkflowAgentStalledError) ? err.lastResult : undefined;
                     if (salvaged?.runId === undefined)
                         delete rec.taskRunId;
                     if (salvaged !== undefined) {
@@ -1763,17 +1781,18 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                         rec.output = boundedRedactedSummary(salvaged.structuredOutput ?? salvaged.result, MAX_TRANSCRIPT_CHARS) || (rec.errorMessage ?? "");
                         rec.stats = { tokens: salvaged.stats.tokens ?? 0, turns: salvaged.stats.turns ?? 0, costMicroUsd: salvaged.stats.costMicroUsd };
                     }
-                    if (err instanceof WorkflowAgentBlockedError) {
+                    if (thrownIs(err, WorkflowAgentBlockedError)) {
                         rec.errorCode = WORKFLOW_SPAWN_BLOCKED_ERROR_CODE;
                         rec.errorMessage = boundedRedactedSummary(err.message, MAX_TRANSCRIPT_CHARS);
                     }
-                    if (err instanceof WorkflowBudgetExceededError) {
+                    if (thrownIs(err, WorkflowBudgetExceededError)) {
                         rec.errorCode = err.code;
                         rec.errorMessage = boundedRedactedSummary(err.message, MAX_TRANSCRIPT_CHARS);
                     }
-                    if (rec.errorMessage === undefined && err instanceof Error && err.message !== "")
-                        rec.errorMessage = boundedRedactedSummary(err.message, MAX_TRANSCRIPT_CHARS);
-                    if (err instanceof WorkflowAgentStalledError && err.attempts > 1) {
+                    const preLaunchMessage = thrownMessageOf(err);
+                    if (rec.errorMessage === undefined && preLaunchMessage !== undefined)
+                        rec.errorMessage = boundedRedactedSummary(preLaunchMessage, MAX_TRANSCRIPT_CHARS);
+                    if (thrownIs(err, WorkflowAgentStalledError) && err.attempts > 1) {
                         rec.attempts = err.attempts;
                         rec.lastAttemptReason = "stalled";
                     }
@@ -1785,12 +1804,12 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                         result: boundedRedactedSummary(thrownText(err), 500),
                         terminal: {
                             kind: "failed",
-                            ...(err instanceof WorkflowAgentBlockedError ? { code: WORKFLOW_SPAWN_BLOCKED_ERROR_CODE } : err instanceof WorkflowBudgetExceededError ? { code: err.code } : {}),
+                            ...(thrownIs(err, WorkflowAgentBlockedError) ? { code: WORKFLOW_SPAWN_BLOCKED_ERROR_CODE } : thrownIs(err, WorkflowBudgetExceededError) ? { code: err.code } : {}),
                             message: boundedRedactedSummary(thrownText(err), 500),
                         },
                         stats: { turns: 0, tokens: 0, costMicroUsd: 0, usageMissing: true },
                     }, label).catch(() => undefined);
-                    if (!((err instanceof WorkflowBudgetExceededError || err instanceof WorkflowAgentParkedError) && rec.startedAt === undefined))
+                    if (!((thrownIs(err, WorkflowBudgetExceededError) || thrownIs(err, WorkflowAgentParkedError)) && rec.startedAt === undefined))
                         await journaled;
                     bceTerminal(callKey, "failed", rec.output ?? (thrownText(err)), rec.sessionId, rec.stats);
                 }
@@ -1955,9 +1974,10 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     releaseLeg();
                     return await parkAgentLeg(rec, drive.paused, [], false);
                 }
-                if (!finalized && rec.errorMessage === undefined && err instanceof Error && err.message !== "")
-                    rec.errorMessage = boundedRedactedSummary(err.message, MAX_TRANSCRIPT_CHARS);
-                if (!finalized && err instanceof WorkflowAgentBlockedError) {
+                const spawnMessage = thrownMessageOf(err);
+                if (!finalized && rec.errorMessage === undefined && spawnMessage !== undefined)
+                    rec.errorMessage = boundedRedactedSummary(spawnMessage, MAX_TRANSCRIPT_CHARS);
+                if (!finalized && thrownIs(err, WorkflowAgentBlockedError)) {
                     rec.errorCode = WORKFLOW_SPAWN_BLOCKED_ERROR_CODE;
                     rec.errorMessage = boundedRedactedSummary(err.message, MAX_TRANSCRIPT_CHARS);
                     void journalAppend(callKey, {
@@ -2210,8 +2230,9 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                             prior = await opts.store.get(opts.resumeFromRunId);
                         }
                         catch (err) {
-                            const errCode = err instanceof Error ? err.code : undefined;
-                            const errClass = err instanceof Error ? `${err.name}${typeof errCode === "string" ? `/${errCode}` : ""}` : typeof err;
+                            const errName = thrownNameOf(err);
+                            const errCode = errName !== undefined ? readMember(err, "code") : undefined;
+                            const errClass = errName !== undefined ? `${errName}${typeof errCode === "string" ? `/${errCode}` : ""}` : typeof err;
                             throw new WorkflowParkRefusal("workflow.park_truth_unreadable", `startWorkflow: resume from "${fromRunId}" was REFUSED — the prior run's record could not be read from the run store (${errClass}), so its parks cannot be proven.`, { reason: "store_threw" });
                         }
                         if (prior !== null && prior.scope !== scope)
@@ -2376,7 +2397,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             run.status = "failed";
             run.completionId ??= uuidv7();
             run.endedAt = now();
-            if (parkedLeg !== undefined && !(err instanceof WorkflowAgentParkedError))
+            if (parkedLeg !== undefined && !thrownIs(err, WorkflowAgentParkedError))
                 err = parkedError();
             run.error = thrownText(err);
             closeAbandonedAgents(run.endedAt);

package/dist/stores/file/file-history-store.js

@@ -1,6 +1,7 @@
 import { createHash, randomBytes } from "node:crypto";
 import { appendFileSync, closeSync, existsSync, fsyncSync, openSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
+import { thrownText } from "../../core/thrown-value.js";
 import { applyFileRestoreViaEnv, boundaryPublishVerdict, worldStillMatchesMint, captureFileBackupViaEnv, modeProvenDifferent, previewFileDelta, describeTrackKey, fileHistoryExportDigest, resolveTrackKey, trackKeyOf, validateFileHistoryExport, } from "../../core/file-history-store.js";
 import { fileHistoryBoundariesToKeep, resolveFileHistoryRetention } from "../../core/file-history-retention.js";
 import { atomicWriteFile, ensureDir, sanitizePathComponent, sanitizeScope, writeThenLink } from "./fs-atomic.js";
@@ -456,7 +457,7 @@ export class FileFileHistoryStore {
             return { ok: true, minted: true };
         }
         catch (err) {
-            return { ok: false, error: { code: "track_failed", message: `first-touch record for ${absPath} could not be persisted: ${err.message}` } };
+            return { ok: false, error: { code: "track_failed", message: `first-touch record for ${absPath} could not be persisted: ${thrownText(err)}` } };
         }
     }
     async annulTrack(scope, absPath, root, verify) {
@@ -511,7 +512,7 @@ export class FileFileHistoryStore {
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: { code: "track_failed", message: `annulling the first-touch record for ${absPath} failed: ${err.message}` } };
+            return { ok: false, error: { code: "track_failed", message: `annulling the first-touch record for ${absPath} failed: ${thrownText(err)}` } };
         }
     }
     scopeIsEmptySync(scope) {
@@ -677,7 +678,7 @@ export class FileFileHistoryStore {
         }
         catch (err) {
             nestedSetAdd(this.spentAttempts, scope, entryId);
-            return { ok: false, error: { code: "snapshot_failed", message: `boundary for entry "${entryId}" could not be committed: ${err.message}` } };
+            return { ok: false, error: { code: "snapshot_failed", message: `boundary for entry "${entryId}" could not be committed: ${thrownText(err)}` } };
         }
         finally {
             this.activeCaptures.get(scope)?.delete(entryId);
@@ -754,7 +755,7 @@ export class FileFileHistoryStore {
                     });
                 }
                 catch (err) {
-                    applied = { outcome: "failed", reason: err.message };
+                    applied = { outcome: "failed", reason: thrownText(err) };
                 }
                 if (applied.outcome === "applied")
                     ledger.filesChanged.push(key);
@@ -771,7 +772,7 @@ export class FileFileHistoryStore {
         }
         catch (err) {
             const touched = ledger.filesChanged.length > 0 || ledger.identicalSkipped.length > 0 || ledger.refused.length > 0 || ledger.failed.length > 0;
-            return { outcome: touched ? "partial" : "failed", ...ledger, error: { code: "restore_failed", message: err.message } };
+            return { outcome: touched ? "partial" : "failed", ...ledger, error: { code: "restore_failed", message: thrownText(err) } };
         }
     }
     async canRestore(scope, entryId) {
@@ -889,7 +890,7 @@ export class FileFileHistoryStore {
                 this.writeTracked(scope, tracked);
             }
             catch (err) {
-                this.disclose(this.trackedPath(scope), `version-chain trim could not be committed (${err.message}) — trim skipped this pass; untrimmed versions keep their blobs live`);
+                this.disclose(this.trackedPath(scope), `version-chain trim could not be committed (${thrownText(err)}) — trim skipped this pass; untrimmed versions keep their blobs live`);
             }
         }
         this.collectBlobs();
@@ -1091,7 +1092,7 @@ export class FileFileHistoryStore {
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: { code: "adopt_failed", message: `adoptScope failed: ${err.message}` } };
+            return { ok: false, error: { code: "adopt_failed", message: `adoptScope failed: ${thrownText(err)}` } };
         }
     }
     async exportHistory(scope) {
@@ -1151,7 +1152,7 @@ export class FileFileHistoryStore {
             return await this.runImport(scope, data, srcGetBlob, importJournal, identicalRepublish);
         }
         catch (err) {
-            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${err.message}` } };
+            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${thrownText(err)}` } };
         }
     }
     async runImport(scope, data, srcGetBlob, importJournal, identicalRepublish) {
@@ -1178,7 +1179,7 @@ export class FileFileHistoryStore {
                         bytes = await srcGetBlob(v.blobHash);
                     }
                     catch (err) {
-                        return { ok: false, error: { code: "unsupported_format", message: `source blob ${v.blobHash} fetch failed: ${err.message}` } };
+                        return { ok: false, error: { code: "unsupported_format", message: `source blob ${v.blobHash} fetch failed: ${thrownText(err)}` } };
                     }
                     if (bytes === undefined)
                         return { ok: false, error: { code: "not_found", message: `source blob ${v.blobHash} is missing — the envelope's graph cannot be completed, so nothing is published` } };
@@ -1222,7 +1223,7 @@ export class FileFileHistoryStore {
                 }
                 catch (err) {
                     safeRm(staging);
-                    return { ok: false, error: { code: "adopt_failed", message: `importHistory could not publish the staged graph for "${scope}": ${err.message} — nothing was published (a local storage fault, not a malformed envelope)` } };
+                    return { ok: false, error: { code: "adopt_failed", message: `importHistory could not publish the staged graph for "${scope}": ${thrownText(err)} — nothing was published (a local storage fault, not a malformed envelope)` } };
                 }
                 if (published !== "published") {
                     safeRm(staging);
@@ -1238,7 +1239,7 @@ export class FileFileHistoryStore {
             return { ok: true };
         }
         catch (err) {
-            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${err.message}` } };
+            return { ok: false, error: { code: "unsupported_format", message: `importHistory failed: ${thrownText(err)}` } };
         }
         finally {
             safeRm(importJournal);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.23.5",
+  "version": "7.24.1",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2395,
+  "count": 2398,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -679,6 +679,7 @@
     "MEMORY_SAFETY": "variable",
     "MEMORY_SEARCH_SUPERSEDED_TAG": "variable",
     "MEMORY_SEARCH_TOOL_NAME": "variable",
+    "MODEL_ROLES": "variable",
     "MONITOR_BATCH_WINDOW_MS": "variable",
     "MONITOR_DEFAULT_TIMEOUT_MS": "variable",
     "MONITOR_MAX_BATCHES_PER_MINUTE": "variable",
@@ -1867,6 +1868,7 @@
     "devWorkflowScriptRunner": "variable",
     "diffToolRoster": "function",
     "directoryRuleAdmits": "function",
+    "displayUrlOf": "function",
     "distilledEquals": "function",
     "dotAtOrBelowFrontier": "function",
     "drainMemoryAnnouncements": "function",
@@ -2076,7 +2078,6 @@
     "namespacedRuleNameCovers": "function",
     "nextSyncBaseline": "function",
     "normalizeAgentName": "function",
-    "normalizeBaseUrl": "function",
     "normalizeForExactMatch": "function",
     "normalizeMemorySpec": "function",
     "normalizePeerName": "function",
@@ -2242,6 +2243,7 @@
     "resolveReadDenyBuiltins": "function",
     "resolveReasoning": "function",
     "resolveReasoningProfile": "function",
+    "resolveRequestRoot": "function",
     "resolveRouteCredential": "function",
     "resolveSubagentTranscriptTier": "function",
     "resolveTaskLimits": "function",
@@ -2255,6 +2257,7 @@
     "retryBackoffMs": "function",
     "riskSeverity": "function",
     "rosterMemberBoundProblem": "function",
+    "routeKeyOf": "function",
     "routePairingStatus": "function",
     "routePeerDeliveryReceipt": "function",
     "routePeerDroppedReceipt": "function",
@@ -3076,6 +3079,7 @@
     "MEMORY_SAFETY": "advanced",
     "MEMORY_SEARCH_SUPERSEDED_TAG": "advanced",
     "MEMORY_SEARCH_TOOL_NAME": "advanced",
+    "MODEL_ROLES": "advanced",
     "MONITOR_BATCH_WINDOW_MS": "advanced",
     "MONITOR_DEFAULT_TIMEOUT_MS": "advanced",
     "MONITOR_MAX_BATCHES_PER_MINUTE": "advanced",
@@ -4264,6 +4268,7 @@
     "devWorkflowScriptRunner": "stable",
     "diffToolRoster": "advanced",
     "directoryRuleAdmits": "advanced",
+    "displayUrlOf": "advanced",
     "distilledEquals": "stable",
     "dotAtOrBelowFrontier": "advanced",
     "drainMemoryAnnouncements": "advanced",
@@ -4473,7 +4478,6 @@
     "namespacedRuleNameCovers": "advanced",
     "nextSyncBaseline": "advanced",
     "normalizeAgentName": "advanced",
-    "normalizeBaseUrl": "advanced",
     "normalizeForExactMatch": "internal",
     "normalizeMemorySpec": "advanced",
     "normalizePeerName": "advanced",
@@ -4639,6 +4643,7 @@
     "resolveReadDenyBuiltins": "advanced",
     "resolveReasoning": "advanced",
     "resolveReasoningProfile": "advanced",
+    "resolveRequestRoot": "stable",
     "resolveRouteCredential": "advanced",
     "resolveSubagentTranscriptTier": "advanced",
     "resolveTaskLimits": "internal",
@@ -4652,6 +4657,7 @@
     "retryBackoffMs": "advanced",
     "riskSeverity": "advanced",
     "rosterMemberBoundProblem": "advanced",
+    "routeKeyOf": "advanced",
     "routePairingStatus": "advanced",
     "routePeerDeliveryReceipt": "advanced",
     "routePeerDroppedReceipt": "advanced",