@sema-agent/core 7.26.0 → 7.26.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/CHANGELOG.md +73 -0
  2. package/dist/agents/verify.d.ts +16 -6
  3. package/dist/agents/verify.js +12 -5
  4. package/dist/core/checkpoint-store.d.ts +13 -10
  5. package/dist/core/gate-lanes.js +2 -1
  6. package/dist/core/gate-outcome.d.ts +54 -5
  7. package/dist/core/gate-outcome.js +17 -0
  8. package/dist/core/permission-rule-provider.js +6 -1
  9. package/dist/core/permission-rule-store.d.ts +36 -0
  10. package/dist/core/permission-rule-store.js +119 -19
  11. package/dist/core/permission-rule-sync.js +14 -5
  12. package/dist/core/runner/contracts.d.ts +48 -0
  13. package/dist/core/runner/decide-continuation.js +3 -1
  14. package/dist/core/runner/denial-limit-arms.d.ts +4 -3
  15. package/dist/core/runner/denial-limit-arms.js +2 -1
  16. package/dist/core/runner/prepare-inherited-gate.d.ts +1 -1
  17. package/dist/core/runner/prepare-inherited-gate.js +2 -1
  18. package/dist/core/runner/resume-apply.js +3 -1
  19. package/dist/core/runner/resume-policy-outcome.js +6 -6
  20. package/dist/core/runner/run-harness-handlers.js +2 -5
  21. package/dist/core/runner/run-identity-wiring.d.ts +6 -0
  22. package/dist/core/runner/run-identity-wiring.js +8 -3
  23. package/dist/core/runner/run-leg.js +9 -3
  24. package/dist/core/runner/runtask.js +2 -2
  25. package/dist/core/runner/session-rule-policy.d.ts +1 -1
  26. package/dist/core/runner/session-rule-policy.js +6 -7
  27. package/dist/core/session-policy-store.d.ts +18 -0
  28. package/dist/core/session-policy-store.js +3 -0
  29. package/dist/core/store-contracts/permission-rule-write-contract.js +16 -3
  30. package/dist/core/store-contracts/read-back-shape-contract.d.ts +56 -0
  31. package/dist/core/store-contracts/read-back-shape-contract.js +78 -0
  32. package/dist/core/tool-policy.d.ts +36 -12
  33. package/dist/core/tool-policy.js +22 -9
  34. package/dist/index.d.ts +4 -0
  35. package/dist/index.js +4 -0
  36. package/dist/stores/file/adoption/adopt.js +4 -10
  37. package/dist/stores/file/permission-rule-store.d.ts +5 -1
  38. package/dist/stores/file/permission-rule-store.js +5 -3
  39. package/dist/stores/file/session-policy-store.d.ts +32 -0
  40. package/dist/stores/file/session-policy-store.js +72 -50
  41. package/dist/tools/fs/shell-read-check.d.ts +58 -1
  42. package/dist/tools/fs/shell-read-check.js +47 -33
  43. package/dist/tools/fs/shell-read-establish.js +19 -8
  44. package/dist/tools/fs/shell-read-judge.d.ts +3 -0
  45. package/dist/tools/fs/shell-read-judge.js +3 -1
  46. package/dist/tools/fs/shell-read-plan.js +16 -17
  47. package/package.json +1 -1
  48. package/test/export-surface.snapshot.json +52 -2
  49. package/wire-changes/core@7.26.1.json +605 -0
  50. package/wire-changes/core@7.26.2.json +106 -0
@@ -0,0 +1,605 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.26.1",
4
+ "from": "35eccbd2672aa68395adb61e0c37ee0a035bf1c3",
5
+ "to": "v7.26.1",
6
+ "added": [
7
+ {
8
+ "name": "CORRUPT_BODY_FORMS",
9
+ "kind": "variable",
10
+ "tier": "advanced",
11
+ "at": [
12
+ "src/core/store-contracts/read-back-shape-contract.ts:21",
13
+ "src/index.ts:2756"
14
+ ],
15
+ "criteriaCovered": false,
16
+ "breaking": false
17
+ },
18
+ {
19
+ "name": "CorruptBodyForm",
20
+ "kind": "type",
21
+ "tier": "advanced",
22
+ "at": [
23
+ "src/core/store-contracts/read-back-shape-contract.ts:24",
24
+ "src/index.ts:2758"
25
+ ],
26
+ "criteriaCovered": false,
27
+ "breaking": false
28
+ },
29
+ {
30
+ "name": "EstablishedRead",
31
+ "kind": "interface",
32
+ "tier": "advanced",
33
+ "at": [
34
+ "src/index.ts:1095",
35
+ "src/tools/fs/shell-read-judge.ts:107"
36
+ ],
37
+ "criteriaCovered": false,
38
+ "breaking": false
39
+ },
40
+ {
41
+ "name": "ReadBackShapeSubject",
42
+ "kind": "interface",
43
+ "tier": "advanced",
44
+ "at": [
45
+ "src/core/store-contracts/read-back-shape-contract.ts:26",
46
+ "src/index.ts:2759"
47
+ ],
48
+ "criteriaCovered": true,
49
+ "breaking": false
50
+ },
51
+ {
52
+ "name": "ReadCandidate",
53
+ "kind": "interface",
54
+ "tier": "advanced",
55
+ "at": [
56
+ "src/index.ts:1098",
57
+ "src/tools/fs/shell-read-plan.ts:105"
58
+ ],
59
+ "criteriaCovered": false,
60
+ "breaking": false
61
+ },
62
+ {
63
+ "name": "ReadEstablishment",
64
+ "kind": "type",
65
+ "tier": "advanced",
66
+ "at": [
67
+ "src/index.ts:1094",
68
+ "src/tools/fs/shell-read-judge.ts:105"
69
+ ],
70
+ "criteriaCovered": false,
71
+ "breaking": false
72
+ },
73
+ {
74
+ "name": "ReadFinding",
75
+ "kind": "interface",
76
+ "tier": "advanced",
77
+ "at": [
78
+ "src/index.ts:1096",
79
+ "src/tools/fs/shell-read-judge.ts:127"
80
+ ],
81
+ "criteriaCovered": false,
82
+ "breaking": false
83
+ },
84
+ {
85
+ "name": "SHELL_READ_DECISION",
86
+ "kind": "variable",
87
+ "tier": "advanced",
88
+ "at": [
89
+ "src/index.ts:1088",
90
+ "src/tools/fs/shell-read-judge.ts:72"
91
+ ],
92
+ "criteriaCovered": false,
93
+ "breaking": false
94
+ },
95
+ {
96
+ "name": "SHELL_READ_FINDINGS",
97
+ "kind": "variable",
98
+ "tier": "advanced",
99
+ "at": [
100
+ "src/index.ts:1086",
101
+ "src/tools/fs/shell-read-judge.ts:26"
102
+ ],
103
+ "criteriaCovered": false,
104
+ "breaking": false
105
+ },
106
+ {
107
+ "name": "SHELL_READ_FINDING_RANK",
108
+ "kind": "variable",
109
+ "tier": "advanced",
110
+ "at": [
111
+ "src/index.ts:1089",
112
+ "src/tools/fs/shell-read-judge.ts:37"
113
+ ],
114
+ "criteriaCovered": false,
115
+ "breaking": false
116
+ },
117
+ {
118
+ "name": "SHELL_READ_SEATS",
119
+ "kind": "variable",
120
+ "tier": "advanced",
121
+ "at": [
122
+ "src/index.ts:1087",
123
+ "src/tools/fs/shell-read-judge.ts:33"
124
+ ],
125
+ "criteriaCovered": false,
126
+ "breaking": false
127
+ },
128
+ {
129
+ "name": "ShellReadAdmission",
130
+ "kind": "type",
131
+ "tier": "advanced",
132
+ "at": [
133
+ "src/index.ts:1083",
134
+ "src/tools/fs/shell-read-check.ts:94"
135
+ ],
136
+ "criteriaCovered": false,
137
+ "breaking": false
138
+ },
139
+ {
140
+ "name": "ShellReadBoundary",
141
+ "kind": "interface",
142
+ "tier": "advanced",
143
+ "at": [
144
+ "src/index.ts:1093",
145
+ "src/tools/fs/shell-read-judge.ts:97"
146
+ ],
147
+ "criteriaCovered": false,
148
+ "breaking": false
149
+ },
150
+ {
151
+ "name": "ShellReadDisposition",
152
+ "kind": "type",
153
+ "tier": "advanced",
154
+ "at": [
155
+ "src/index.ts:1092",
156
+ "src/tools/fs/shell-read-judge.ts:52"
157
+ ],
158
+ "criteriaCovered": false,
159
+ "breaking": false
160
+ },
161
+ {
162
+ "name": "ShellReadFinding",
163
+ "kind": "type",
164
+ "tier": "advanced",
165
+ "at": [
166
+ "src/index.ts:1090",
167
+ "src/tools/fs/shell-read-judge.ts:27"
168
+ ],
169
+ "criteriaCovered": false,
170
+ "breaking": false
171
+ },
172
+ {
173
+ "name": "ShellReadJudgeInput",
174
+ "kind": "interface",
175
+ "tier": "advanced",
176
+ "at": [
177
+ "src/index.ts:1079",
178
+ "src/tools/fs/shell-read-check.ts:299"
179
+ ],
180
+ "criteriaCovered": false,
181
+ "breaking": false
182
+ },
183
+ {
184
+ "name": "ShellReadJudgment",
185
+ "kind": "interface",
186
+ "tier": "advanced",
187
+ "at": [
188
+ "src/index.ts:1080",
189
+ "src/tools/fs/shell-read-check.ts:316"
190
+ ],
191
+ "criteriaCovered": true,
192
+ "breaking": false
193
+ },
194
+ {
195
+ "name": "ShellReadPlan",
196
+ "kind": "interface",
197
+ "tier": "advanced",
198
+ "at": [
199
+ "src/index.ts:1098",
200
+ "src/tools/fs/shell-read-plan.ts:162"
201
+ ],
202
+ "criteriaCovered": false,
203
+ "breaking": false
204
+ },
205
+ {
206
+ "name": "ShellReadSeat",
207
+ "kind": "type",
208
+ "tier": "advanced",
209
+ "at": [
210
+ "src/index.ts:1091",
211
+ "src/tools/fs/shell-read-judge.ts:34"
212
+ ],
213
+ "criteriaCovered": false,
214
+ "breaking": false
215
+ },
216
+ {
217
+ "name": "ShellReadSegment",
218
+ "kind": "interface",
219
+ "tier": "advanced",
220
+ "at": [
221
+ "src/index.ts:1098",
222
+ "src/tools/fs/shell-read-plan.ts:136"
223
+ ],
224
+ "criteriaCovered": false,
225
+ "breaking": false
226
+ },
227
+ {
228
+ "name": "ShellReadStationSeat",
229
+ "kind": "type",
230
+ "tier": "advanced",
231
+ "at": [
232
+ "src/index.ts:1082",
233
+ "src/tools/fs/shell-read-check.ts:77"
234
+ ],
235
+ "criteriaCovered": false,
236
+ "breaking": false
237
+ },
238
+ {
239
+ "name": "ShellReadVerdict",
240
+ "kind": "interface",
241
+ "tier": "advanced",
242
+ "at": [
243
+ "src/index.ts:1081",
244
+ "src/tools/fs/shell-read-check.ts:61"
245
+ ],
246
+ "criteriaCovered": false,
247
+ "breaking": false
248
+ },
249
+ {
250
+ "name": "StoreReadBackShapeHooks",
251
+ "kind": "interface",
252
+ "tier": "advanced",
253
+ "at": [
254
+ "src/core/store-contracts/read-back-shape-contract.ts:42",
255
+ "src/index.ts:2760"
256
+ ],
257
+ "criteriaCovered": false,
258
+ "breaking": false
259
+ },
260
+ {
261
+ "name": "judgeShellRead",
262
+ "kind": "function",
263
+ "tier": "advanced",
264
+ "at": [
265
+ "src/index.ts:1078",
266
+ "src/tools/fs/shell-read-check.ts:348"
267
+ ],
268
+ "criteriaCovered": false,
269
+ "breaking": false
270
+ },
271
+ {
272
+ "name": "storeReadBackShapeContract",
273
+ "kind": "function",
274
+ "tier": "advanced",
275
+ "at": [
276
+ "src/core/store-contracts/read-back-shape-contract.ts:107",
277
+ "src/index.ts:2757"
278
+ ],
279
+ "criteriaCovered": false,
280
+ "breaking": false
281
+ }
282
+ ],
283
+ "removed": [],
284
+ "changed": [],
285
+ "narrowed": [
286
+ {
287
+ "id": "F1",
288
+ "source": "behaviorFlips.summary",
289
+ "text": "NARROWING (#1003, P2, session-policy File store): the enumeration face (`listBySession`) judges a stored row by the SAME row-shape judgment the per-key read (`getRules`) applies — a bad bucket (`toolDeny: \"rm\"`), `rev: 0`, a non-integer or negative `gen`, a non-object or torn body are disclosed through `onCorruptRead` and skipped instead of served; a `__principal` that is not a string is disclosed and skipped on the enumeration face."
290
+ },
291
+ {
292
+ "id": "F3",
293
+ "source": "behaviorFlips.summary",
294
+ "text": "NARROWING (#1007, P2, permission-rule write entries): a write outcome is READ by one judgment (`readRuleWriteOutcome`) at every door — a refusal is a non-empty string, a decline is `conflict: true`, a landing carries a non-negative safe-integer `rev` (zero is a landing: a session-scope add on an empty durable bucket), and an answer that is two arms is an answer about neither; every unreadable answer lands as `failed` with `committed: \"unknown\"`. A landing the store cannot read back (identity not standing after the write) is `unknown` too, never `added`."
295
+ }
296
+ ],
297
+ "closedSetMembers": [
298
+ {
299
+ "set": "CORRUPT_BODY_FORMS",
300
+ "at": [
301
+ "src/core/store-contracts/read-back-shape-contract.ts:21"
302
+ ],
303
+ "newSet": true,
304
+ "added": [
305
+ "missing-required",
306
+ "not-an-object",
307
+ "torn-json",
308
+ "wrong-type"
309
+ ],
310
+ "removed": [],
311
+ "breaking": false,
312
+ "criteriaCovered": false
313
+ },
314
+ {
315
+ "set": "CorruptBodyForm",
316
+ "at": [
317
+ "src/core/store-contracts/read-back-shape-contract.ts:24",
318
+ "src/index.ts:2758"
319
+ ],
320
+ "newSet": true,
321
+ "added": [
322
+ "missing-required",
323
+ "not-an-object",
324
+ "torn-json",
325
+ "wrong-type"
326
+ ],
327
+ "removed": [],
328
+ "breaking": false,
329
+ "criteriaCovered": false
330
+ }
331
+ ],
332
+ "closedSetsUnreadable": [],
333
+ "typeKeys": [],
334
+ "declarationMoves": [
335
+ {
336
+ "name": "EstablishedRead",
337
+ "kind": "interface",
338
+ "onSurface": true,
339
+ "from": [
340
+ "src/tools/fs/shell-read-judge.ts"
341
+ ],
342
+ "to": [
343
+ "src/index.ts",
344
+ "src/tools/fs/shell-read-judge.ts"
345
+ ]
346
+ },
347
+ {
348
+ "name": "ReadCandidate",
349
+ "kind": "interface",
350
+ "onSurface": true,
351
+ "from": [
352
+ "src/tools/fs/shell-read-plan.ts"
353
+ ],
354
+ "to": [
355
+ "src/index.ts",
356
+ "src/tools/fs/shell-read-plan.ts"
357
+ ]
358
+ },
359
+ {
360
+ "name": "ReadEstablishment",
361
+ "kind": "type",
362
+ "onSurface": true,
363
+ "from": [
364
+ "src/tools/fs/shell-read-judge.ts"
365
+ ],
366
+ "to": [
367
+ "src/index.ts",
368
+ "src/tools/fs/shell-read-judge.ts"
369
+ ]
370
+ },
371
+ {
372
+ "name": "ReadFinding",
373
+ "kind": "interface",
374
+ "onSurface": true,
375
+ "from": [
376
+ "src/tools/fs/shell-read-judge.ts"
377
+ ],
378
+ "to": [
379
+ "src/index.ts",
380
+ "src/tools/fs/shell-read-judge.ts"
381
+ ]
382
+ },
383
+ {
384
+ "name": "SHELL_READ_DECISION",
385
+ "kind": "variable",
386
+ "onSurface": true,
387
+ "from": [
388
+ "src/tools/fs/shell-read-judge.ts"
389
+ ],
390
+ "to": [
391
+ "src/index.ts",
392
+ "src/tools/fs/shell-read-judge.ts"
393
+ ]
394
+ },
395
+ {
396
+ "name": "SHELL_READ_FINDINGS",
397
+ "kind": "variable",
398
+ "onSurface": true,
399
+ "from": [
400
+ "src/tools/fs/shell-read-judge.ts"
401
+ ],
402
+ "to": [
403
+ "src/index.ts",
404
+ "src/tools/fs/shell-read-judge.ts"
405
+ ]
406
+ },
407
+ {
408
+ "name": "SHELL_READ_FINDING_RANK",
409
+ "kind": "variable",
410
+ "onSurface": true,
411
+ "from": [
412
+ "src/tools/fs/shell-read-judge.ts"
413
+ ],
414
+ "to": [
415
+ "src/index.ts",
416
+ "src/tools/fs/shell-read-judge.ts"
417
+ ]
418
+ },
419
+ {
420
+ "name": "SHELL_READ_SEATS",
421
+ "kind": "variable",
422
+ "onSurface": true,
423
+ "from": [
424
+ "src/tools/fs/shell-read-judge.ts"
425
+ ],
426
+ "to": [
427
+ "src/index.ts",
428
+ "src/tools/fs/shell-read-judge.ts"
429
+ ]
430
+ },
431
+ {
432
+ "name": "ShellReadAdmission",
433
+ "kind": "type",
434
+ "onSurface": true,
435
+ "from": [
436
+ "src/tools/fs/shell-read-check.ts"
437
+ ],
438
+ "to": [
439
+ "src/index.ts",
440
+ "src/tools/fs/shell-read-check.ts"
441
+ ]
442
+ },
443
+ {
444
+ "name": "ShellReadBoundary",
445
+ "kind": "interface",
446
+ "onSurface": true,
447
+ "from": [
448
+ "src/tools/fs/shell-read-judge.ts"
449
+ ],
450
+ "to": [
451
+ "src/index.ts",
452
+ "src/tools/fs/shell-read-judge.ts"
453
+ ]
454
+ },
455
+ {
456
+ "name": "ShellReadDisposition",
457
+ "kind": "type",
458
+ "onSurface": true,
459
+ "from": [
460
+ "src/tools/fs/shell-read-judge.ts"
461
+ ],
462
+ "to": [
463
+ "src/index.ts",
464
+ "src/tools/fs/shell-read-judge.ts"
465
+ ]
466
+ },
467
+ {
468
+ "name": "ShellReadFinding",
469
+ "kind": "type",
470
+ "onSurface": true,
471
+ "from": [
472
+ "src/tools/fs/shell-read-judge.ts"
473
+ ],
474
+ "to": [
475
+ "src/index.ts",
476
+ "src/tools/fs/shell-read-judge.ts"
477
+ ]
478
+ },
479
+ {
480
+ "name": "ShellReadPlan",
481
+ "kind": "interface",
482
+ "onSurface": true,
483
+ "from": [
484
+ "src/tools/fs/shell-read-plan.ts"
485
+ ],
486
+ "to": [
487
+ "src/index.ts",
488
+ "src/tools/fs/shell-read-plan.ts"
489
+ ]
490
+ },
491
+ {
492
+ "name": "ShellReadSeat",
493
+ "kind": "type",
494
+ "onSurface": true,
495
+ "from": [
496
+ "src/tools/fs/shell-read-judge.ts"
497
+ ],
498
+ "to": [
499
+ "src/index.ts",
500
+ "src/tools/fs/shell-read-judge.ts"
501
+ ]
502
+ },
503
+ {
504
+ "name": "ShellReadSegment",
505
+ "kind": "interface",
506
+ "onSurface": true,
507
+ "from": [
508
+ "src/tools/fs/shell-read-plan.ts"
509
+ ],
510
+ "to": [
511
+ "src/index.ts",
512
+ "src/tools/fs/shell-read-plan.ts"
513
+ ]
514
+ },
515
+ {
516
+ "name": "ShellReadStationSeat",
517
+ "kind": "type",
518
+ "onSurface": true,
519
+ "from": [
520
+ "src/tools/fs/shell-read-check.ts"
521
+ ],
522
+ "to": [
523
+ "src/index.ts",
524
+ "src/tools/fs/shell-read-check.ts"
525
+ ]
526
+ },
527
+ {
528
+ "name": "ShellReadVerdict",
529
+ "kind": "interface",
530
+ "onSurface": true,
531
+ "from": [
532
+ "src/tools/fs/shell-read-check.ts"
533
+ ],
534
+ "to": [
535
+ "src/index.ts",
536
+ "src/tools/fs/shell-read-check.ts"
537
+ ]
538
+ }
539
+ ],
540
+ "mintMoves": [],
541
+ "criteriaObserves": [
542
+ {
543
+ "kind": "typeMember",
544
+ "name": "AddResult.committed",
545
+ "assertions": [
546
+ "G2.a"
547
+ ]
548
+ },
549
+ {
550
+ "kind": "typeMember",
551
+ "name": "ReadBackShapeSubject.read",
552
+ "assertions": [
553
+ "G3.a"
554
+ ]
555
+ },
556
+ {
557
+ "kind": "typeMember",
558
+ "name": "SessionRulesRecord.rules",
559
+ "assertions": [
560
+ "G1.a"
561
+ ]
562
+ },
563
+ {
564
+ "kind": "typeMember",
565
+ "name": "ShellReadJudgment.offer",
566
+ "assertions": [
567
+ "G5.a"
568
+ ]
569
+ },
570
+ {
571
+ "kind": "typeMember",
572
+ "name": "ShellReadJudgment.verdict",
573
+ "assertions": [
574
+ "G4.a"
575
+ ]
576
+ },
577
+ {
578
+ "kind": "typeMember",
579
+ "name": "StoredSessionRules.gen",
580
+ "assertions": [
581
+ "G1.b"
582
+ ]
583
+ }
584
+ ],
585
+ "consumersHint": {
586
+ "cli": [
587
+ "EstablishedRead",
588
+ "ReadEstablishment",
589
+ "SHELL_READ_DECISION",
590
+ "SHELL_READ_FINDINGS",
591
+ "SHELL_READ_SEATS",
592
+ "ShellReadDisposition",
593
+ "ShellReadFinding",
594
+ "ShellReadSeat"
595
+ ],
596
+ "server": [
597
+ "SHELL_READ_DECISION"
598
+ ],
599
+ "sdk": [],
600
+ "note": "scanned cli@91f1d289 server@6e083eba sdk@b9937d5 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
601
+ },
602
+ "breakingCount": 0,
603
+ "breakingItems": [],
604
+ "toResolvedAt": "85f33a1d582c4fa8c73d2de943b4e1b0f93a96d8"
605
+ }
@@ -0,0 +1,106 @@
1
+ {
2
+ "repo": "core",
3
+ "version": "7.26.2",
4
+ "from": "d9d6418fe808128c2b9bd9a51273602f5d6c28e1",
5
+ "to": "v7.26.2",
6
+ "added": [],
7
+ "removed": [],
8
+ "changed": [
9
+ {
10
+ "name": "SettlementKind",
11
+ "from": {
12
+ "kind": "type",
13
+ "tier": "advanced"
14
+ },
15
+ "to": {
16
+ "kind": "type",
17
+ "tier": "stable"
18
+ },
19
+ "at": [
20
+ "src/core/gate-outcome.ts:64",
21
+ "src/index.ts:1411"
22
+ ],
23
+ "breaking": false
24
+ }
25
+ ],
26
+ "narrowed": [
27
+ {
28
+ "id": "F3",
29
+ "source": "behaviorFlips.summary",
30
+ "text": "NARROWING + closed-set addition (#1016, P1, approval face — user-visible through the model): a deployment's own policy refusal is no longer handed to the model as the user's words. `AskOutcome.settledBy` gains `\"policy\"` (live) and the durable `hostDecision.decidedBy` gains `\"policy\"`; `SETTLEMENT_KINDS` gains `policy_refused` (party `none`); a refusal so settled reaches the model as ONE policy sentence (`Action requires interactive approval and permission prompts are not available in this context` + `Policy note:` when the host supplied one), minted in one place for the live and the durable-resume arms. A refusal with no `settledBy` is still read as a person's (default unchanged)."
31
+ }
32
+ ],
33
+ "closedSetMembers": [
34
+ {
35
+ "set": "SETTLEMENT_KINDS",
36
+ "at": [
37
+ "src/core/gate-outcome.ts:49"
38
+ ],
39
+ "newSet": false,
40
+ "added": [
41
+ "policy_refused"
42
+ ],
43
+ "removed": [],
44
+ "breaking": false,
45
+ "criteriaCovered": false
46
+ }
47
+ ],
48
+ "closedSetsUnreadable": [],
49
+ "typeKeys": [
50
+ {
51
+ "type": "RunInternals",
52
+ "at": [
53
+ "src/core/runner/contracts.ts:1340"
54
+ ],
55
+ "added": [
56
+ "onWiringManifest"
57
+ ],
58
+ "removed": [],
59
+ "breaking": false,
60
+ "criteriaCovered": true
61
+ }
62
+ ],
63
+ "declarationMoves": [],
64
+ "mintMoves": [],
65
+ "criteriaObserves": [
66
+ {
67
+ "kind": "taskEventField",
68
+ "name": "tool_end.gate",
69
+ "assertions": [
70
+ "G3.a"
71
+ ]
72
+ },
73
+ {
74
+ "kind": "typeMember",
75
+ "name": "RunInternals.onWiringManifest",
76
+ "assertions": [
77
+ "G2.a"
78
+ ]
79
+ },
80
+ {
81
+ "kind": "typeMember",
82
+ "name": "ShellReadJudgment.verdict",
83
+ "assertions": [
84
+ "G1.a"
85
+ ]
86
+ }
87
+ ],
88
+ "consumersHint": {
89
+ "cli": [
90
+ "RunInternals",
91
+ "SETTLEMENT_KINDS"
92
+ ],
93
+ "server": [
94
+ "RunInternals",
95
+ "SETTLEMENT_KINDS",
96
+ "SettlementKind"
97
+ ],
98
+ "sdk": [
99
+ "SETTLEMENT_KINDS"
100
+ ],
101
+ "note": "scanned cli@1da88f0f server@8fe5139f sdk@192ebd1 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it"
102
+ },
103
+ "breakingCount": 0,
104
+ "breakingItems": [],
105
+ "toResolvedAt": "cf8254dcbedc7be05f796fb4813b6b9a2967c842"
106
+ }