@sema-agent/core 7.28.1 → 7.30.0

package/dist/engine/harness/agent-harness.d.ts

@@ -2,6 +2,7 @@ import type { ActorAssertion, AssistantMessage, ImageContent, Model, UserMessage
 import type { HaltRemainingDirective } from "../loop/types.js";
 import type { AgentMessage, AgentTool, LoopMalformedToolUseRecovery, LoopThinkingOnlyRecovery, LoopTruncatedOutputRecovery, QueueMode, ThinkingLevel } from "../loop/types.js";
 import { type EngineSegment } from "../../core/untrusted-text.js";
+import type { CommittedFrameCarrier } from "../../core/frame-settlement.js";
 import type { AbortResult, AgentHarnessEvent, AgentHarnessEventResultMap, AgentHarnessOptions, AgentHarnessOwnEvent, AgentHarnessResources, AgentHarnessStreamOptions, ExecutionEnv, PromptTemplate, Skill } from "./types.js";
 /** [c209-C] 收口 C1/C2 — engine-provenance metadata a caller can stamp on the user message it
  *  mints (see the field docs on {@link UserMessage}). Threaded from `prompt`/`steer`/`followUp`/
@@ -56,6 +57,10 @@ export interface UserMessageProvenance {
      *  while an engine-authored one is held. Minter-stated at the single relay seam that mints such
      *  frames — never inferred from text. Metadata only; not persisted on the message. */
     callerAuthored?: true;
+    /** #1036 — the frame's injection-queue dedup key, persisted on the message it becomes
+     *  ({@link UserMessage.engineNoteKey}) so a reader of the TRANSCRIPT alone can join an entry back
+     *  to its frame. Rides only WITH `provenance:"engine-note"`. */
+    engineNoteKey?: string;
     /** RB-30 terminal fix — an OPAQUE payload the engine rides on this queued message (the runner's
      *  task-notification frame). Never serialized, never interpreted by the harness: if the message is
      *  still undrained at agent_end, the payload is handed back through `onUndrainedEngineNotes` so
@@ -178,6 +183,8 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     private runPromise?;
     private pendingSessionWrites;
     private model;
+    /** The ref that chose {@link model}, moved by the SAME assignment (one value, never two answers). */
+    private modelRef;
     /** The run's thinking level; `undefined` = undeclared (provider default, no wire key) — distinct from "off". */
     private thinkingLevel;
     /** RB-30 terminal fix — runner-set sink for engine-note payloads left undrained at agent_end. */
@@ -200,6 +207,9 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
      *  Advisory (swallow-guarded at the call sites via the runner's own closure); never re-entered
      *  for the same payload — consumption deletes the sidecar entry in the same step. */
     onEngineNoteConsumed?: (payload: unknown) => void;
+    /** #1036 — THE RECEIPT SINK: a frame reached the TRANSCRIPT, reported at the `message_end` append
+     *  that proves it, with its carrier and entry id. Advisory. */
+    onFrameCommitted?: (carrier: CommittedFrameCarrier, entryId: string) => void;
     /** Runner-set HOLD — the single gate for every engine-authored injection against the run's live
      *  human-halt fact. When it reports true (a person's bare rejection halted the run at this
      *  boundary, and only that person's own input may continue it):
@@ -496,9 +506,12 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     } & UserMessageProvenance): Promise<void>;
     appendMessage(message: AgentMessage): Promise<void>;
     getModel(): Model;
+    /** The ref that chose the CURRENT model — {@link getModel}'s companion (a word re-resolves, an object pins). */
+    getModelRef(): import("../../core/model-seat.js").ModelRef;
     /** The current level, or `undefined` when none was declared (provider default — no wire key). */
     getThinkingLevel(): ThinkingLevel | undefined;
-    setModel(model: Model): Promise<void>;
+    /** `ref` = the word that chose `model`; omitted ⇒ the object pins itself. The pair moves together. */
+    setModel(model: Model, ref?: import("../../core/model-seat.js").ModelRef): Promise<void>;
     setThinkingLevel(level: ThinkingLevel): Promise<void>;
     setActiveTools(toolNames: string[]): Promise<void>;
     getSteeringMode(): QueueMode;

package/dist/engine/harness/agent-harness.js

@@ -28,6 +28,7 @@ function createUserMessage(text, images, provenance) {
             : {}),
         ...(provenance?.engineMinted === true && !engineNote ? { engineMinted: true } : {}),
         ...(engineNote ? { provenance: "engine-note" } : {}),
+        ...(engineNote && typeof provenance?.engineNoteKey === "string" && provenance.engineNoteKey.length > 0 ? { engineNoteKey: provenance.engineNoteKey } : {}),
         ...(provenance?.actor !== undefined &&
             typeof provenance.actor.id === "string" &&
             provenance.actor.id.length > 0 &&
@@ -206,10 +207,12 @@ export class AgentHarness {
     runPromise;
     pendingSessionWrites = [];
     model;
+    modelRef;
     thinkingLevel;
     onUndrainedEngineNotes;
     onUndrainedUserInputs;
     onEngineNoteConsumed;
+    onFrameCommitted;
     engineInjectionsHeld;
     recoverUndrainedEngineNotes() {
         this.sweepUndrainedEngineNotes([this.drainedPendingInjection, this.nextTurnQueue, this.steerQueue, this.followUpQueue]);
@@ -297,6 +300,7 @@ export class AgentHarness {
             this.tools.set(tool.name, tool);
         }
         this.model = options.model;
+        this.modelRef = options.modelRef ?? options.model;
         this.thinkingLevel = options.thinkingLevel;
         this.activeToolNames =
             options.activeToolNames ?? (options.tools ?? []).map((tool) => tool.name);
@@ -582,11 +586,21 @@ export class AgentHarness {
         const gone = new Set(messages);
         this.drainedPendingInjection = this.drainedPendingInjection.filter((m) => !gone.has(m));
     }
-    settleInjectedFrame(message) {
+    settleInjectedFrame(message, entryId) {
         if (!this.drainedPendingInjection.includes(message))
             return;
         this.unbookInFlight([message]);
         userInputParkRecords.delete(message);
+        if (entryId !== undefined) {
+            const payload = engineNotePayloads.get(message);
+            if (payload !== undefined) {
+                try {
+                    this.onFrameCommitted?.({ kind: "engine_note", payload }, entryId);
+                }
+                catch {
+                }
+            }
+        }
         engineNotePayloads.delete(message);
     }
     createLoopConfig(getTurnState, setTurnState, runPromptOverride) {
@@ -788,7 +802,14 @@ export class AgentHarness {
             let entryId;
             if (!isEmptyFailureAssistant(event.message)) {
                 entryId = await this.session.appendMessage(event.message);
-                this.settleInjectedFrame(event.message);
+                this.settleInjectedFrame(event.message, entryId);
+                if (entryId !== undefined && event.message.role === "toolResult" && typeof event.message.toolCallId === "string") {
+                    try {
+                        this.onFrameCommitted?.({ kind: "tool_result", toolCallId: event.message.toolCallId, content: event.message.content }, entryId);
+                    }
+                    catch {
+                    }
+                }
             }
             else if (event.message.isApiErrorMessage === true) {
                 await this.recordApiFailure(event.message);
@@ -1169,10 +1190,13 @@ export class AgentHarness {
     getModel() {
         return this.model;
     }
+    getModelRef() {
+        return this.modelRef;
+    }
     getThinkingLevel() {
         return this.thinkingLevel;
     }
-    async setModel(model) {
+    async setModel(model, ref) {
         try {
             const previousModel = this.model;
             if (this.phase === "idle") {
@@ -1186,6 +1210,7 @@ export class AgentHarness {
                 });
             }
             this.model = model;
+            this.modelRef = ref ?? model;
             await this.emitOwn({ type: "model_select", model, previousModel, source: "set" });
         }
         catch (error) {

package/dist/engine/harness/types.d.ts

@@ -210,7 +210,7 @@ export declare class CompactionError extends Error {
     code: CompactionErrorCode;
     constructor(code: CompactionErrorCode, message: string, cause?: Error);
 }
-export type SessionErrorCode = "not_found" | "invalid_session" | "invalid_entry" | "invalid_fork_target" | "storage" | "conflict" | "placement_refused" | "unknown";
+export type SessionErrorCode = "not_found" | "invalid_session" | "invalid_entry" | "invalid_fork_target" | "storage" | "conflict" | "placement_refused" | "corrupt_session" | "unknown";
 /** Error thrown by session storage, repositories, and session tree operations. */
 export declare class SessionError extends Error {
     /** Session subsystem error code. */
@@ -1380,6 +1380,8 @@ export interface AgentHarnessOptions<TSkill extends Skill = Skill, TPromptTempla
     /** Curated stream/provider request options. Snapshotted at turn start. */
     streamOptions?: AgentHarnessStreamOptions;
     model: Model;
+    /** WHICH REF chose {@link AgentHarnessOptions.model} — the word, else the object. Omitted ⇒ pinned. */
+    modelRef?: import("../../core/model-seat.js").ModelRef;
     thinkingLevel?: ThinkingLevel;
     activeToolNames?: string[];
     steeringMode?: QueueMode;

package/dist/engine/llm/types.d.ts

@@ -348,6 +348,8 @@ export interface UserMessage {
      * invariant outranks the may-skip one (dropping visible content is the unrecoverable direction).
      */
     engineMinted?: true;
+    /** #1036 — this frame's injection-queue dedup key, with `provenance:"engine-note"`; OPAQUE (equality only), the DURABLE half of frame identity. */
+    engineNoteKey?: string;
     /**
      * [c209-C] R3 收口 — the "visible but not the user" THIRD state. This message is an
      * ENGINE-INJECTED note whose CONTENT the model must read (LSP `<new-diagnostics>` blocks,
@@ -524,13 +526,12 @@ export interface ToolResultMessage<TDetails = unknown> {
 export type Message = UserMessage | AssistantMessage | ToolResultMessage;
 /**
  * RB-3 (stage S4 carry): strip the engine-provenance metadata fields from user messages before
- * serializing a Context to an external wire. The five fields (`enginePrefixChars`/`engineSegments`/
- * `engineMinted`/`provenance`/`actor`, the last per design/171 §5.2) are INTERNAL coordination
- * between the engine's minting side and its consumers (permission classifier, compaction summarizer,
- * prompt suggestions, multiplayer attribution) — they must never reach a provider payload. The
- * built-in brains construct their own wire shapes and are immune; a CUSTOM Brain that
- * whole-object-serializes messages (`JSON.stringify(context.messages)`) would leak them — run the
- * array through this projection first.
+ * serializing a Context to an external wire. The six fields (`enginePrefixChars`/`engineSegments`/
+ * `engineMinted`/`provenance`/`actor`/`engineNoteKey`) are INTERNAL coordination between the engine's
+ * minting side and its consumers (permission classifier, compaction summarizer, prompt suggestions,
+ * multiplayer attribution) — they must never reach a provider payload. The built-in brains construct
+ * their own wire shapes and are immune; a CUSTOM Brain that whole-object-serializes messages
+ * (`JSON.stringify(context.messages)`) would leak them — run the array through this projection first.
  */
 export declare function stripEngineMetadata(messages: Message[]): Message[];
 export type ImagesInputContent = TextContent | ImageContent;

package/dist/engine/llm/types.js

@@ -9,7 +9,7 @@ export function stripEngineMetadata(messages) {
     return messages.map((m) => {
         if (m.role !== "user")
             return m;
-        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, actor: _e, ...rest } = m;
+        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, actor: _e, engineNoteKey: _f, ...rest } = m;
         return rest;
     });
 }

package/dist/engine/session/import-validate.js

@@ -293,6 +293,10 @@ function normalizeEngineProvenanceStamp(message, preserveActorAssertions = false
         delete m.engineMinted;
     if (m.provenance !== undefined && m.provenance !== "engine-note")
         delete m.provenance;
+    if (m.engineNoteKey !== undefined && !(typeof m.engineNoteKey === "string" && m.engineNoteKey.length > 0))
+        delete m.engineNoteKey;
+    if (m.engineNoteKey !== undefined && m.provenance !== "engine-note")
+        delete m.engineNoteKey;
     if (m.engineMinted === true && m.provenance === "engine-note") {
         delete m.engineMinted;
     }

package/dist/index.d.ts

@@ -128,14 +128,15 @@ export type { FileHistoryRetentionPolicy } from "./core/file-history-retention.j
 export { FileStorageBackend, FileSessionRepo, FileCheckpointStore, FileMemoryStore, FileToolResultStore, FileSessionPolicyStore, FileStrategyStore, FileFileHistoryStore, FileWorkflowJournalStore, MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult, resolveDataRoot, sanitizeScope, sanitizePathComponent, createFileConsolidationLock, atomicWriteFile, writeThenLink, ensureDir, readJsonlRecords, AppendLog, FileStoreLockError, type FileStoreLockErrorCode, processFingerprint, isProcessLive, type ProcessFingerprint, type FileStorageBackendOptions, type FileStorageCorruptReadInfo, type FileStrategyStoreOptions, type FileFileHistoryStoreOptions, type FileSessionRepoOptions, type FileCheckpointStoreOptions, } from "./stores/file/index.js";
 export { CacheBreakDetector, type CacheBreakFinding, type ToolFingerprintInput } from "./core/cache-break-detector.js";
 export { maybeCompact, type MaybeCompactOptions, type CompactionWindowSafetyInfo } from "./core/auto-compaction.js";
+export type { CompactionEffect } from "./core/frame-settlement.js";
 export { brainToRuntime } from "./core/runtime.js";
 export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./core/sensitive-path-policy.js";
 export { createFsWriteGatePolicy, WRITE_EXEMPT_DIR_COVERS_ROOT_CODE, type FsWriteGatePolicyOptions } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, type NotificationInjectionOutcome, // the injector's outcome words (`parked_durably` = the session's durable box took the frame)
+export { renderTaskNotificationXml, RESUPPLIED_FRAME_PREAMBLE, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, type NotificationInjectionOutcome, // the injector's outcome words (`parked_durably` = the session's durable box took the frame)
 NOTIFICATION_INJECTION_OUTCOMES, // …and their value half + guard, so a host wiring its own uplink validates a reported outcome without duplicating the vocabulary
-isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, type SemaProvenance, } from "./core/task-notification.js";
+isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, type SemaProvenance, HANDBACK_STATES, type HandbackState, COMPACTION_KINDS, type CompactionKind, handbackStateOf, terminalFrameFacets, } from "./core/task-notification.js";
 export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, type ToolFamily, type ToolMountTag, type ToolApprovalCard, type ToolPathAccess, type ToolPathBase, type ToolPathAbsence, type ToolPathTarget, type ToolCallPathTarget, type ToolRosterPathTarget, pathTargetSlotOnly, type ToolRuleFace, type ToolRenderHints, type ToolFaceDeclaration, type ToolCatalogEntry, } from "./core/tool-face.js";
 export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, type ToolCallLike, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
 export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, type RosterSource, type ToolIdentity, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, type RosterBoundMembers, type RosterBoundCode, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
@@ -158,7 +159,7 @@ export { type StoreDurability } from "./core/checkpoint-store.js";
 export { type StoreFidelity } from "./core/checkpoint-store.js";
 export { projectHumanInput, buildHumanInputEvent, type HumanInputSource, type HumanInputFrame, type HumanInputEvent, type HumanInputDelivery, } from "./core/human-input-projection.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, type SemaTaskType, type SemaTaskStatus, type SemaTaskHandle, type ParkedClaimTicket, type TaskAccess, type UnifiedTaskOutput, type TaskRetrievalStatus, type StopSource, type RegisterMonitorInput, type MonitorTimers, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
-export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease, MailboxStoreError, type MailboxStoreErrorCode, MAILBOX_TOMBSTONED_RECIPIENT_CODE, type MailboxAppendMessage, type MailboxPeerMeta, type MailboxPeerFromMode, type MailboxPeerRecordKind, type MailboxPeerNoticeMeta, type MailboxPeerNoticeState, MAILBOX_PEER_NOTICE_STATES, MAILBOX_PEER_FROM_MODES, MAILBOX_PEER_RECORD_KINDS, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_CROSS_PROCESS_UNSAFE_CODE, readMailboxPeerMeta, mailboxCrossProcessMountVerdict, type MailboxCrossProcessVerdict, } from "./core/mailbox-store.js";
+export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease, MailboxStoreError, type MailboxStoreErrorCode, MAILBOX_TOMBSTONED_RECIPIENT_CODE, type MailboxAppendMessage, type MailboxPeerMeta, type MailboxPeerFromMode, type MailboxPeerRecordKind, type MailboxPeerNoticeMeta, type MailboxPeerNoticeState, MAILBOX_PEER_NOTICE_STATES, MAILBOX_PEER_FROM_MODES, MAILBOX_PEER_RECORD_KINDS, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_CROSS_PROCESS_UNSAFE_CODE, readMailboxPeerMeta, mailboxCrossProcessMountVerdict, type MailboxCrossProcessVerdict, type MailboxAckResult, } from "./core/mailbox-store.js";
 export { FileMailboxStore, type FileMailboxStoreOptions } from "./stores/file/mailbox-store.js";
 export { createFileTaskListStore } from "./stores/file/task-list-store.js";
 export { createCcFileTaskListStore } from "./stores/cc/task-list-store.js";
@@ -311,14 +312,16 @@ export { COORDINATOR_ROLE_PROMPT, TEAMMATE_COMMUNICATION_ADDENDUM } from "./prom
 export { createSubagentTool, FORK_SUBAGENT_TYPE, GENERAL_PURPOSE_SUBAGENT_TYPE, agentWhenToUseText, FORK_DIRECTIVE_FRAME, SUBAGENT_SYSTEM_NOTE, type SubagentToolOptions, resolveDelegationEntryCaps, type ResolvedDelegationEntryCaps, type SubagentSpawnContext, type SubagentSteerHandle, type SubagentStep, type SubagentEditedFile, } from "./agents/subagent.js";
 export { getSessionRetainLedger, releaseSessionRetainLedger, } from "./agents/retain-ledger.js";
 export { createSendMessageTool, createAgentContinuationVerb, SEND_MESSAGE_TOOL_NAME, type SendMessageToolOptions, type AgentContinuationReceipt } from "./agents/send-message-tool.js";
-export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerAdmissionConfig, PEER_ADMISSION_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, type PeerAdmission, type PeerAdmissionConfig, type PeerAdmissionOptions, type PeerAdmissionRequest, type PeerAdmissionVerdict, type PeerAdmissionRefusal, type PeerRefusalCode, type PeerAxisTag, type PeerIdentity, type PeerSelfRef, type PeerInboundChainRef, } from "./agents/peer-admission.js";
+export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerLaneConfig, PEER_LANE_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, type PeerAdmission, type PeerLaneConfig, type PeerAdmissionOptions, type PeerAdmissionRequest, type PeerAdmissionVerdict, type PeerAdmissionRefusal, type PeerRefusalCode, type PeerAxisTag, type PeerIdentity, type PeerSelfRef, type PeerInboundChainRef, } from "./agents/peer-admission.js";
 export { CROSS_SESSION_MESSAGE_TAG, CROSS_SESSION_MESSAGE_NOTICE, PERMISSION_MODE_CLASSES, isPermissionModeClass, CrossSessionCodecError, PEER_HOP_CHAIN_CARRY_WINDOW, encodePeerAddress, isCanonicalPeerAddress, encodeScopeAttribute, decodeScopeAttribute, canonicalPeerDisplayName, buildCrossSessionEnvelope, parseCrossSessionEnvelope, clampHopChain, encodeCcPeerFrame, decodeCcPeerFrame, type PermissionModeClass, type CrossSessionEnvelopeFields, type CrossSessionEnvelopeParse, type CrossSessionEnvelopeRefusal, type CcPeerFrameFields, type CcPeerFrameParse, } from "./agents/cross-session-envelope.js";
 export { CROSS_SESSION_INBOUND_SETTINGS, isCrossSessionInboundSetting, resolveCrossSessionInboundSetting, CROSS_SESSION_HOLD_CAUSES, describeCrossSessionHoldCause, judgeCrossSessionInbound, foldPermissionModeClass, PEER_SEND_VERDICT_CODES, peerSendVerdictSeverity, type CrossSessionInboundSetting, type CrossSessionSettingSource, type CrossSessionInboundSettingLayers, type ResolvedCrossSessionInboundSetting, type CrossSessionHoldCause, type CrossSessionInboundVerdict, type CrossSessionInboundInput, type PeerSendVerdictCode, type PeerSendVerdict, } from "./agents/cross-session-judge.js";
 export { PEER_REF_MIN, PEER_REF_MAX, PEER_REF_RE, mintPeerRef, formatPeerNameRef, parsePeerNameRef, normalizePeerName, PEER_ADDRESS_PREFIXES, reservedPeerNameReason, type PeerRefEntry, } from "./agents/cross-session-ref.js";
-export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, type PeerSessionRecord, type PeerSessionLiveness, type PeerSessionTempo, type PeerSessionRecordRefusal, type PeerSessionRecordRead, type PeerLivenessProbe, type PeerDirectory, type PeerDirectoryAccess, type PeerSessionCandidate, type PeerSessionResolution, type InMemoryPeerDirectory, type PeerRegistryDirectoryRefusal, type PeerRegistryDirectoryVerdict, } from "./agents/peer-directory.js";
-export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, type ListAgentsToolOptions, type ListAgentsRow } from "./agents/list-agents-tool.js";
+export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, type PeerSessionRecord, type PeerPresence, PEER_PRESENCE_MAX_CHARS, type PeerSessionLiveness, type PeerSessionTempo, type PeerSessionRecordRefusal, type PeerSessionRecordRead, type PeerLivenessProbe, type PeerDirectory, type PeerDirectoryAccess, type PeerSessionCandidate, type PeerSessionResolution, type InMemoryPeerDirectory, type PeerRegistryDirectoryRefusal, type PeerRegistryDirectoryVerdict, } from "./agents/peer-directory.js";
+export { createReadInboxTool, READ_INBOX_TOOL_NAME, READ_INBOX_MAX_LIMIT, READ_INBOX_RESULT_BUDGET_CHARS, type ReadInboxToolOptions } from "./agents/read-inbox-tool.js";
+export { TEAM_ROLES, DIRECTION_RELATIONS, teamRoleOf, mayDirect, type TeamRole, type DirectionRelation } from "./agents/team-role.js";
+export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, PEER_LISTING_FRESH_WINDOW_MS, isFreshPeerRow, type ListAgentsToolOptions, type ListAgentsRow } from "./agents/list-agents-tool.js";
 export { CROSS_SESSION_CLASSIFIER_RULE } from "./agents/cross-session-envelope.js";
-export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, type PeerLaneMountVerdict, type PeerInboundDisposition } from "./agents/peer-session-drain.js";
+export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, PEER_RESUPPLY_CAP, type PeerLaneMountVerdict, type PeerInboundDisposition } from "./agents/peer-session-drain.js";
 export { renderCrossSessionMessageFrame, renderCrossSessionNoticeLine } from "./core/task-notification.js";
 export { PEER_HELD_QUEUE_CAP, PEER_IDLE_SUBSCRIPTION_TTL_MS, PEER_IDLE_SUBSCRIBER_TABLE_CAP, PEER_IDLE_OUTSTANDING_CAP, PEER_IDLE_PRIORS_KEPT, PEER_IDLE_FIRE_DEBOUNCE_MS, PEER_IDLE_HELD_BACKOFF_MS, PEER_IDLE_LABEL_MAX, CROSS_SESSION_DIALOG_EXPIRY_VALUES, CROSS_SESSION_DIALOG_EXPIRY_DEFAULT, resolveCrossSessionDialogExpiry, PEER_HELD_REVIEW_CAUSES, PEER_DELIVERY_RECEIPT_STATES, isPeerDeliveryReceiptState, PEER_DROP_REASONS, peerRecipientSuffix, renderCrossSessionDeliveryNotice, describePeerDropReasons, renderCrossSessionDroppedNotice, PEER_IDLE_NOTICE_KINDS, isPeerIdleNoticeKind, PEER_IDLE_UNAVAILABLE_CAUSES, peerIdleNoticeLabel, formatPeerNoticeClock, renderCrossSessionIdleNotice, describePeerIdleSubscription, type CrossSessionDialogExpiry, type ResolvedCrossSessionDialogExpiry, type PeerDeliveryReceiptState, type PeerDropReason, type PeerIdleNoticeKind, type PeerIdleNoticeFields, } from "./agents/peer-notices.js";
 export { createPeerHeldQueue, peerHeldQueueFor, peerHeldQueueIfAny, peerHeldQueueKey, realPeerClock, type PeerInboundHoldCause, type PeerHeldEntry, type PeerHeldSettlement, type PeerHeldSettleReason, type PeerHeldSettleOutcome, type PeerClock, type PeerHeldQueueSink, type PeerHeldQueueConfig, type PeerHeldQueue, } from "./agents/peer-held-queue.js";

package/dist/index.js

@@ -108,7 +108,7 @@ export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./cor
 export { createFsWriteGatePolicy, WRITE_EXEMPT_DIR_COVERS_ROOT_CODE } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, NOTIFICATION_INJECTION_OUTCOMES, isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, } from "./core/task-notification.js";
+export { renderTaskNotificationXml, RESUPPLIED_FRAME_PREAMBLE, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, NOTIFICATION_INJECTION_OUTCOMES, isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, HANDBACK_STATES, COMPACTION_KINDS, handbackStateOf, terminalFrameFacets, } from "./core/task-notification.js";
 export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, pathTargetSlotOnly, } from "./core/tool-face.js";
 export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
 export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
@@ -258,14 +258,16 @@ export { COORDINATOR_ROLE_PROMPT, TEAMMATE_COMMUNICATION_ADDENDUM } from "./prom
 export { createSubagentTool, FORK_SUBAGENT_TYPE, GENERAL_PURPOSE_SUBAGENT_TYPE, agentWhenToUseText, FORK_DIRECTIVE_FRAME, SUBAGENT_SYSTEM_NOTE, resolveDelegationEntryCaps, } from "./agents/subagent.js";
 export { getSessionRetainLedger, releaseSessionRetainLedger, } from "./agents/retain-ledger.js";
 export { createSendMessageTool, createAgentContinuationVerb, SEND_MESSAGE_TOOL_NAME } from "./agents/send-message-tool.js";
-export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerAdmissionConfig, PEER_ADMISSION_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, } from "./agents/peer-admission.js";
+export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerLaneConfig, PEER_LANE_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, } from "./agents/peer-admission.js";
 export { CROSS_SESSION_MESSAGE_TAG, CROSS_SESSION_MESSAGE_NOTICE, PERMISSION_MODE_CLASSES, isPermissionModeClass, CrossSessionCodecError, PEER_HOP_CHAIN_CARRY_WINDOW, encodePeerAddress, isCanonicalPeerAddress, encodeScopeAttribute, decodeScopeAttribute, canonicalPeerDisplayName, buildCrossSessionEnvelope, parseCrossSessionEnvelope, clampHopChain, encodeCcPeerFrame, decodeCcPeerFrame, } from "./agents/cross-session-envelope.js";
 export { CROSS_SESSION_INBOUND_SETTINGS, isCrossSessionInboundSetting, resolveCrossSessionInboundSetting, CROSS_SESSION_HOLD_CAUSES, describeCrossSessionHoldCause, judgeCrossSessionInbound, foldPermissionModeClass, PEER_SEND_VERDICT_CODES, peerSendVerdictSeverity, } from "./agents/cross-session-judge.js";
 export { PEER_REF_MIN, PEER_REF_MAX, PEER_REF_RE, mintPeerRef, formatPeerNameRef, parsePeerNameRef, normalizePeerName, PEER_ADDRESS_PREFIXES, reservedPeerNameReason, } from "./agents/cross-session-ref.js";
-export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, } from "./agents/peer-directory.js";
-export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS } from "./agents/list-agents-tool.js";
+export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, PEER_PRESENCE_MAX_CHARS, } from "./agents/peer-directory.js";
+export { createReadInboxTool, READ_INBOX_TOOL_NAME, READ_INBOX_MAX_LIMIT, READ_INBOX_RESULT_BUDGET_CHARS } from "./agents/read-inbox-tool.js";
+export { TEAM_ROLES, DIRECTION_RELATIONS, teamRoleOf, mayDirect } from "./agents/team-role.js";
+export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, PEER_LISTING_FRESH_WINDOW_MS, isFreshPeerRow } from "./agents/list-agents-tool.js";
 export { CROSS_SESSION_CLASSIFIER_RULE } from "./agents/cross-session-envelope.js";
-export { PEER_SESSION_ID_UNGRAMMATICAL_CODE } from "./agents/peer-session-drain.js";
+export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, PEER_RESUPPLY_CAP } from "./agents/peer-session-drain.js";
 export { renderCrossSessionMessageFrame, renderCrossSessionNoticeLine } from "./core/task-notification.js";
 export { PEER_HELD_QUEUE_CAP, PEER_IDLE_SUBSCRIPTION_TTL_MS, PEER_IDLE_SUBSCRIBER_TABLE_CAP, PEER_IDLE_OUTSTANDING_CAP, PEER_IDLE_PRIORS_KEPT, PEER_IDLE_FIRE_DEBOUNCE_MS, PEER_IDLE_HELD_BACKOFF_MS, PEER_IDLE_LABEL_MAX, CROSS_SESSION_DIALOG_EXPIRY_VALUES, CROSS_SESSION_DIALOG_EXPIRY_DEFAULT, resolveCrossSessionDialogExpiry, PEER_HELD_REVIEW_CAUSES, PEER_DELIVERY_RECEIPT_STATES, isPeerDeliveryReceiptState, PEER_DROP_REASONS, peerRecipientSuffix, renderCrossSessionDeliveryNotice, describePeerDropReasons, renderCrossSessionDroppedNotice, PEER_IDLE_NOTICE_KINDS, isPeerIdleNoticeKind, PEER_IDLE_UNAVAILABLE_CAUSES, peerIdleNoticeLabel, formatPeerNoticeClock, renderCrossSessionIdleNotice, describePeerIdleSubscription, } from "./agents/peer-notices.js";
 export { createPeerHeldQueue, peerHeldQueueFor, peerHeldQueueIfAny, peerHeldQueueKey, realPeerClock, } from "./agents/peer-held-queue.js";

package/dist/orchestration/run-workflow-tool.d.ts

@@ -293,10 +293,10 @@ export interface RunWorkflowToolDeps {
      *  `ToolExecuteContext.interactiveTools` seat — without it a headless-clamped host's workflow
      *  children could re-mount the interactive tool the host run disabled. */
     parentInteractiveTools?: false;
-    /** Call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
-     *  fold chain produced no model inherits the parent's full object (baseUrl/key routing included),
-     *  mirroring the subagent lane's ctx.model semantics. */
-    parentModel?: () => import("../internal/llm.js").Model | undefined;
+    /** Call-time getter for the HOST task's RESOLVED model AND the word that chose it: a spawned agent whose
+     *  fold chain produced no model inherits the object on its spec and the word on its trusted channel
+     *  (the subagent lane's `ctx.model` / `ctx.modelRef` pair). Word-less ⇒ the object alone, i.e. a pin. */
+    parentModel?: () => import("../agents/child-model-seat.js").InheritedModelPick | undefined;
     /** The HOST task's per-model auth hook: the CREDENTIAL half of model
      *  inheritance. The Model object fixed the URL routing but the child brain still authenticated
      *  with the boot env token (rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane

package/dist/orchestration/workflow.d.ts

@@ -451,7 +451,7 @@ export interface RunWorkflowOptions {
      *  parent's full object — baseUrl/key routing included — instead of falling to a string/role
      *  re-resolution that loses per-model routing (the 4/4-agents-404 incident: session model id
      *  re-resolved against the base gateway). Mirrors the subagent lane's `ctx.model` semantics. */
-    defaultModel?: () => import("../internal/llm.js").Model | undefined;
+    defaultModel?: () => import("../agents/child-model-seat.js").InheritedModelPick | undefined;
     /** Call-time getter for the thinking level a spawned agent runs at when neither the script, the
      *  agentType definition nor the governance baseline set `thinking` — the child thinking seat's lower rungs
      *  (the deployment's STATED `roles.subagent.thinking`, else the host's current level), as the run-workflow

package/dist/orchestration/workflow.js

@@ -1291,16 +1291,17 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
         const groupId = currentGroup;
         const typeDef = agentOpts.agentType !== undefined ? agentRegistry.find((d) => d.name === agentOpts.agentType) : undefined;
         const typeDefModel = typeDef?.model;
-        let inheritedModelSnap;
+        let inheritedModelPick;
         let inheritedModelError;
         if (spec.model === undefined && typeDefModel === undefined) {
             try {
-                inheritedModelSnap = opts.defaultModel?.();
+                inheritedModelPick = opts.defaultModel?.();
             }
             catch (err) {
                 inheritedModelError = asThrownError(err);
             }
         }
+        const inheritedModelSnap = inheritedModelPick?.model;
         const inheritedThinkingSnap = spec.thinking === undefined ? opts.defaultThinking?.() : undefined;
         const inheritedPrincipal = spec.principal === undefined ? opts.parentSpecSeat?.principal : undefined;
         const specForIdentity = {
@@ -1313,7 +1314,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
         const prompt = boundedRedactedSummary(spec.systemPrompt ? `${spec.systemPrompt}\n\n${spec.objective}` : spec.objective, MAX_TRANSCRIPT_CHARS);
         const specForLabel = spec.model === undefined && typeDefModel !== undefined ? { ...spec, model: typeDefModel } : specForIdentity;
         const model = workflowModelLabel(specForLabel, modelCatalog);
-        return { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model };
+        return { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelRef: inheritedModelPick?.modelRef, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model };
     };
     const reviewSpawnBeforeLaunch = async (lane, label, callKey, runSpec, effectiveSignal) => {
         const review = opts.autoModeReview;
@@ -1460,7 +1461,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
         },
         async agent(spec, agentOpts = {}) {
             const effectiveSignal = assertAgentSpawnAllowed("ctx.agent", spec, agentOpts);
-            const { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model } = prepareAgentCall(spec, agentOpts);
+            const { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelRef, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model } = prepareAgentCall(spec, agentOpts);
             let drive;
             const cached = opts.resumeFromRunId !== undefined ? replayByOrdinal[run.agents.length] : undefined;
             const truth = opts.resumeFromRunId !== undefined ? parkedByOrdinal[run.agents.length] : undefined;
@@ -1616,6 +1617,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     }
                     const attemptInternals = {
                         ...baseInternals,
+                        ...(inheritedModelRef !== undefined ? { inheritedModelRef } : {}),
                         ...(bceSink !== undefined
                             ? {
                                 onForwardEvent: (e) => {
@@ -1845,7 +1847,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
             if (budgetTotal !== null && spent() >= budgetTotal) {
                 throw new WorkflowBudgetExceededError(spent(), budgetTotal);
             }
-            const { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model } = prepareAgentCall(spec, agentOpts);
+            const { label, phase, phaseInstance, groupId, inheritedModelSnap, inheritedModelRef, inheritedModelError, inheritedThinkingSnap, callKey, prompt, model } = prepareAgentCall(spec, agentOpts);
             let drive;
             const truth = opts.resumeFromRunId !== undefined ? parkedByOrdinal[run.agents.length] : undefined;
             if (truth !== undefined) {
@@ -1946,6 +1948,7 @@ export function startWorkflow(runner, fn, opts = {}, internals) {
                     }
                     : undefined;
                 const runInternals = {
+                    ...(inheritedModelRef !== undefined ? { inheritedModelRef } : {}),
                     ...(agentOpts.isolation ? { isolation: agentOpts.isolation } : {}),
                     ...(opts.parentCwd !== undefined ? { parentCwd: opts.parentCwd } : {}),
                     ...spawnAttribution,

package/dist/shell/lex.d.ts

@@ -5,13 +5,11 @@
  * environment's last-resort `sh` reads `$'…'`, `+=`, a subscript, `<<<`, `<(…)` and `&>` differently; see
  * {@link bashOnlyConstructsOf}).
  *
- * Two modes remain. STRICT is the residual space the classify faces live in: the caller has hard-rejected
- * `< > $ ( ) \` \n \r \\` (or passes `<`/`>` through as text under the rule lane's tolerate option), so the whole of
- * bash's word grammar left to model there is quote pairing, the four connectors and whitespace. LENIENT is the space
- * the read faces read — everything the strict gate refused, RECORDED instead of refused. The lenient-only
- * constructs are branches the strict caller can never reach, so for every strict-accepted input the two modes
- * produce the same words and connectors, up to the strict mode's two residuals (a `#` is a word there, and JS
- * whitespace rather than bash's blanks bounds a word).
+ * ONE walk, ONE reading: every construct bash reads is RECORDED — a redirection, a substitution, an escape, a
+ * comment, a line break, a backgrounding `&` — never refused here. Which of them a face refuses is that face's
+ * predicate over the result (the classify faces' residual predicate in the read-only classifier); the lexer has
+ * no modes. Bash's own word rules hold throughout: an unquoted word-start `#` begins a comment, and only a blank
+ * (space or tab) bounds a word — a non-breaking space or a vertical tab is a word character.
  *
  * A command bash cannot parse is a {@link LexParseFailure}, never a guessed reading: an unterminated quote,
  * substitution, subscript or here-document yields NO segments. A word bash reads but whose VALUE the text does not
@@ -21,13 +19,6 @@
  * a comment and a QUOTED here-document body. Every lookahead below reads the next LOGICAL character past any
  * continuation, so a pair can stand inside a construct's spelling and never inside the three places bash keeps it.
  */
-export type LexMode = "strict" | "lenient";
-export interface LexOptions {
-    readonly mode: LexMode;
-    /** `"split"` (default): the connectors bound segments. `"text"`: a single segment is being tokenized and an
-     *  unquoted connector character is a word character. */
-    readonly connectors?: "split" | "text";
-}
 /** The dialect this lexer reads. The execution environment falls back to `sh` when no bash is found; a reader on
  *  that path must degrade every word carrying a {@link BashOnlyConstruct} to the conservative reading. */
 export declare const SHELL_LEX_DIALECT = "bash";
@@ -42,18 +33,9 @@ export type ExpansionKind = (typeof EXPANSION_KINDS)[number];
  *  contain — never "the lexer did not look". */
 export declare const UNRESOLVED_REASONS: readonly ["ansi_c_escape", "locale_string", "parameter_text", "subscript_text", "compound_array_value"];
 export type UnresolvedReason = (typeof UNRESOLVED_REASONS)[number];
-/** What the {@link lexShellText} view does with an unresolved word: `refuse` hands the consumer the reason's
- *  sentence; `fold` hands it the folded spelling as the pre-fact readers judged it. The locale string folds:
- *  refusing it would turn a deny row's HIT (judged on the untranslated spelling) into a mere question, and a
- *  reader that asks on both faces AND keeps the deny judgment reads the fact, not this view. */
-export declare const UNRESOLVED_VIEW: {
-    readonly ansi_c_escape: "refuse";
-    readonly locale_string: "fold";
-    readonly parameter_text: "refuse";
-    readonly subscript_text: "refuse";
-    readonly compound_array_value: "refuse";
-};
-/** The sentence the {@link lexShellText} view hands a consumer for an unresolved word it refuses. */
+/** The sentence a consumer hands on for an unresolved word: every reason is one a face ASKS about (the locale
+ *  string included — its translation is not in the text), and a deny row is still judged on the written spelling
+ *  by the readers that keep the word beside the reason. */
 export declare const UNRESOLVED_SENTENCE: {
     readonly ansi_c_escape: "an ANSI-C quoted word carries an escape this lexer does not fold";
     readonly locale_string: "a locale-translated string carries text this lexer does not read";
@@ -61,9 +43,8 @@ export declare const UNRESOLVED_SENTENCE: {
     readonly subscript_text: "a subscript carries text this lexer does not read";
     readonly compound_array_value: "a compound assignment value is a list this lexer does not read";
 };
-/** Why a command yields no segments: bash's own syntax errors, the two constructs this lexer cannot delimit, and
- *  the strict mode's backgrounding refusal. */
-export declare const PARSE_FAILURE_REASONS: readonly ["unterminated_single_quote", "unterminated_double_quote", "unterminated_ansi_c", "unterminated_subscript", "unterminated_compound_value", "unterminated_command_substitution", "unterminated_process_substitution", "unterminated_parameter_expansion", "unterminated_heredoc", "undelimited_substitution", "redirect_without_target", "heredoc_without_delimiter", "heredoc_delimiter_expands", "background_operator"];
+/** Why a command yields no segments: bash's own syntax errors and the two constructs this lexer cannot delimit. */
+export declare const PARSE_FAILURE_REASONS: readonly ["unterminated_single_quote", "unterminated_double_quote", "unterminated_ansi_c", "unterminated_subscript", "unterminated_compound_value", "unterminated_command_substitution", "unterminated_process_substitution", "unterminated_parameter_expansion", "unterminated_heredoc", "undelimited_substitution", "redirect_without_target", "heredoc_without_delimiter", "heredoc_delimiter_expands"];
 export type ParseFailureReason = (typeof PARSE_FAILURE_REASONS)[number];
 export declare const PARSE_FAILURE_SENTENCE: {
     readonly unterminated_single_quote: "a single-quoted word never closes";
@@ -79,10 +60,9 @@ export declare const PARSE_FAILURE_SENTENCE: {
     readonly redirect_without_target: "a redirection names no target";
     readonly heredoc_without_delimiter: "a here-document operator names no delimiter";
     readonly heredoc_delimiter_expands: "a here-document delimiter is not a plain word";
-    readonly background_operator: "`&` backgrounding is not allowed — a backgrounded process outlives the command";
 };
 /** The constructs of this dialect a POSIX `sh` reads as something else. */
-export declare const BASH_ONLY_CONSTRUCTS: readonly ["ansi_c_quoting", "locale_string", "append_assignment", "subscript_assignment", "compound_assignment", "here_string", "process_substitution", "redirect_both", "brace_expansion"];
+export declare const BASH_ONLY_CONSTRUCTS: readonly ["ansi_c_quoting", "locale_string", "append_assignment", "subscript_assignment", "compound_assignment", "here_string", "process_substitution", "redirect_both", "pipe_both", "brace_expansion"];
 export type BashOnlyConstruct = (typeof BASH_ONLY_CONSTRUCTS)[number];
 /**
  * The ANSI-C escapes this lexer folds: the thirteen single-letter ones, whose byte is the same in every bash and
@@ -172,11 +152,16 @@ export interface LexedWord {
      *  assignment word, after a bare control-prefix word, or after a leading redirection list. */
     readonly atCommandPosition: boolean;
 }
-/** A redirection and the word it takes. A descriptor duplication (`>&2`, `<&0`, `>&-`, `>&1-`) takes none. */
+/** A redirection and the word it takes. A descriptor duplication (`>&2`, `<&0`, `>&-`, `>&1-`) takes none: its
+ *  operand is `dup`, the descriptor (or `-`, or a descriptor followed by `-`) as written. `fd` is the descriptor
+ *  number written in front of the operator (`2>f`, `3>&0`); absent when none was (bash's default, `1` for an
+ *  output form and `0` for an input form, is the reader's to apply). */
 export interface LexedRedirect {
     readonly kind: "redirect";
     readonly op: "<" | ">" | ">>" | "<<<" | "&>" | "&>>" | ">&" | "<&";
+    readonly fd?: number;
     readonly target?: LexedWord;
+    readonly dup?: string;
 }
 /** A here-document: the body is DATA the program reads on stdin, never command text. `quoted` records whether
  *  the delimiter word carried a quote or an escape, which is bash's rule for "the body does not expand". */
@@ -197,13 +182,17 @@ export type LexedToken = LexedWord | LexedRedirect | LexedHeredoc | LexedGroup;
  *  exited ZERO, `||` is the only one under which the previous segment may have been SKIPPED ENTIRELY, `|`
  *  puts the segment in a subshell whose directory changes never reach the parent, and `;` is plain sequence. */
 export type ShellSegmentConnector = "start" | ";" | "&&" | "||" | "|";
-/** The lenient mode's two extra boundaries: a backgrounding `&` and a line break. */
+/** The two boundaries the read boundary does not distinguish from a plain sequence: a backgrounding `&` and a
+ *  line break. */
 export type LenientConnector = ShellSegmentConnector | "&" | "\n";
 export interface LexedSegment {
     /** The segment's text exactly as written (surrounding whitespace included). Here-document bodies are not part
      *  of any segment's text. */
     readonly text: string;
     readonly connector: LenientConnector;
+    /** The `|` was spelled `|&`: the previous segment's standard error is piped too (bash 4+; a syntax error on
+     *  bash 3.2, so a reader on the fail-closed side treats the pipe as real). */
+    readonly pipesStderr?: true;
     readonly tokens: readonly LexedToken[];
     /** The bodies of the substitutions found in THIS segment (its words and its redirection targets), in order. */
     readonly substitutions: readonly string[];
@@ -233,7 +222,6 @@ export declare const SUBSTITUTION_PLACEHOLDER = " subst";
 /** Shell control words that stand BEFORE a command: transparent for the boundary walk (the command behind them is
  *  judged), and a position after which bash still accepts an assignment word. */
 export declare const SHELL_CONTROL_PREFIXES: ReadonlySet<string>;
-export type QuoteOpen = '"' | "'" | undefined;
 /**
  * Does the `$` at `at` OPEN a quote form (`$'…'` / `$"…"`)? ONE question, asked by every walker that has to
  * answer it. Escaped means an ODD run of backslashes in front of it: `\$'y'` is a literal `$`, while `x\\$'y'`
@@ -244,34 +232,25 @@ export declare function dollarOpensQuote(text: string, at: number): boolean;
 /** The `'` that CLOSES the ANSI-C quote opened at `open`, or `undefined` when none does. `\'` does not close
  *  one — the single place a quote region honours a backslash. */
 export declare function ansiCQuoteClose(source: string, open: number): number | undefined;
-/**
- * Which QUOTE holds each character of `s`, by the same pairing rule the lexer walks with, and the boolean view of
- * it. The pairing quote characters belong to the region they bound. `balanced` is false when a region is still
- * open at the end of the string; callers must then NOT use the mask. This models bash only for the residual
- * character space the strict faces operate in, where backslash escapes are rejected outright.
- */
-export declare function quoteMask(s: string): {
-    openedBy: readonly QuoteOpen[];
-    quoted: readonly boolean[];
-    balanced: boolean;
-};
 /** The ONE spelling of a LITERAL leading tilde — `./~…`, the relative path it is — for every position bash does not
  *  expand it in; a word without a leading tilde is returned as is. */
 export declare function literalTildeSpelling(word: string): string;
-/** The argv-word projection of a segment: redirections, here-documents and groups are not words the program
- *  receives (bash removes them before exec). */
+/** The argv words of a segment: redirections, here-documents and groups are not words the program receives (bash
+ *  removes them before exec). */
+export declare function argvOf(segment: LexedSegment): readonly LexedWord[];
+/** The two-spelling view of {@link argvOf}, for the readers that compare spellings. */
 export declare function wordsOf(segment: LexedSegment): SegmentTokens;
 /** The substitution bodies of an UNQUOTED here-document body: `$(…)` and backticks are live there, quotes are
  *  ordinary characters, a backslash protects the next character. `undefined` when a substitution never closes. */
 export declare function substitutionsInHeredocBody(body: string): string[] | undefined;
 /** Lex a command: its segments, or the one reason bash (or this lexer) cannot delimit them. */
-export declare function lexShell(source: string, opts: LexOptions): ShellLex;
+export declare function lexShell(source: string): ShellLex;
 /**
  * The refused-reading view of {@link lexShell}: a parse failure, and any word whose value cannot be read off the
- * text and whose reason {@link UNRESOLVED_VIEW} refuses, become the one `{ reject }` sentence a consumer's
- * unreadable arm already takes.
+ * text, become the one `{ reject }` sentence a consumer's unreadable arm already takes. A reader that keeps the
+ * other words (the read station) reads {@link lexShell} and the word's {@link LexedWord.unresolved} instead.
  */
-export declare function lexShellText(source: string, opts: LexOptions): LexedCommand | {
+export declare function lexShellText(source: string): LexedCommand | {
     reject: string;
 };
 /** The constructs of this dialect the command leans on — what a POSIX `sh` would read as something else. Empty