@sema-agent/core 7.29.0 → 7.30.1

package/dist/core/task-result.d.ts

@@ -274,6 +274,20 @@ export interface TaskResult {
      * Undefined on every other terminal and when there was nothing to salvage.
      */
     salvagedOutput?: string;
+    /**
+     * Present iff this run compacted its context at least once at a turn boundary or a prompt-too-long
+     * recovery, or opened its compaction breaker: `passes` = landed compactions, `kind` = the last landed
+     * pass's trigger (`reactive` is the wire's `forced`), `breakerOpen` = compaction was disabled for the
+     * rest of the run (later context was trimmed away, not summarized). The end-of-task settle pass is
+     * NOT counted (ruled): it summarizes AFTER the work, for the next run, and says nothing about what this
+     * run's model saw. Projected onto a delegated child's terminal frame so
+     * the parent can tell that a child forgot.
+     */
+    compaction?: {
+        passes: number;
+        breakerOpen: boolean;
+        kind?: import("./task-notification.js").CompactionKind;
+    };
     /**
      * The remote-workspace lifecycle failures this run hit, as DATA. The seam declares eleven
      * distinct `RemoteExecutionErrorCode`s, but every one of them used to reach the caller as the same

package/dist/core/task-spec.d.ts

@@ -554,6 +554,13 @@ export interface TaskSpec {
      *  interception, prompt gating, stop pushback, compaction taps, permission-denied observation; each
      *  member's contract is on the interface). Overrides `RunnerDeps.hooks`. */
     hooks?: import("./hooks.js").Hooks;
+    /**
+     * The session's SELF-REPORTED presence for the peer directory (`agent` = what it is, `intent` = what
+     * it is doing; each ≤ 120 chars). The engine never writes a directory row: the same object goes out
+     * on the leg's `wiring_manifest` so a host copies it into the row it writes, and `ListAgents` renders
+     * it on other sessions' listings prefixed `self:`. Labels only — never read by any judgment.
+     */
+    peerPresence?: import("../agents/peer-directory.js").PeerPresence;
     /**
      * design/45 **durable suspend-on-approval** (F4). When set AND a `CheckpointStore` is wired
      * (`checkpointStore` here or on `RunnerDeps`), a tool-policy `ask` **can suspend durably**: when no LIVE

package/dist/core/tool-catalog-entries.js

@@ -111,7 +111,8 @@ export const TOOL_CATALOG_ENTRIES = [
     { id: "monitor", name: "Monitor", source: "builtin", definedIn: "src/tools/monitor.ts", mountedBy: ["backgroundTasks"], cards: ["monitor-start", "readonly_out_of_root"], face: { family: "other", effect: "write", contract: c("core.monitor@1"), offloadThresholdChars: 10_000 } },
     { id: "send-message", name: "SendMessage", source: "builtin", definedIn: "src/agents/send-message-tool.ts", mountedBy: ["delegation", "hostInternals", "peerLane"], cards: ["send-message"], face: { family: "protocol", effect: "write", contract: c("core.send_message@1") } },
     { id: "agent-transcript", name: "AgentTranscript", source: "builtin", definedIn: "src/agents/agent-transcript-tool.ts", mountedBy: ["delegation"], cards: ["agent-transcript"], face: { family: "delegate", effect: "read", contract: c("core.agent_transcript@1") } },
-    { id: "list-agents", name: "ListAgents", source: "builtin", definedIn: "src/agents/list-agents-tool.ts", mountedBy: ["peerLane"], cards: ["list-agents"], face: { family: "protocol", effect: "read", aliases: ["ListPeers"], contract: c("core.list_agents@1") } },
+    { id: "list-agents", name: "ListAgents", source: "builtin", definedIn: "src/agents/list-agents-tool.ts", mountedBy: ["delegation", "peerLane"], cards: ["list-agents"], face: { family: "protocol", effect: "read", aliases: ["ListPeers"], contract: c("core.list_agents@1") } },
+    { id: "read-inbox", name: "ReadInbox", source: "builtin", definedIn: "src/agents/read-inbox-tool.ts", mountedBy: ["peerLane"], cards: ["read-inbox"], face: { family: "protocol", effect: "read", contract: c("core.read_inbox@1"), offload: false, budgetExempt: true } },
     { id: "workflow", name: "Workflow", source: "builtin", definedIn: "src/orchestration/run-workflow-tool.ts", mountedBy: ["workflow"], cards: ["workflow-run"], face: { family: "delegate", effect: "write", contract: c("core.workflow@1") } },
     { id: "report-blocked", name: "ReportBlocked", source: "builtin", definedIn: "src/core/runner/synthetic-tools.ts", mountedBy: ["always"], cards: [], face: { family: "scaffold", effect: "read", contract: c("core.report_blocked@1") } },
     { id: "report-findings", name: "ReportFindings", source: "builtin", definedIn: "src/core/runner/synthetic-tools.ts", mountedBy: ["always"], cards: ["report-findings"], face: { family: "scaffold", effect: "read", contract: c("core.report_findings@1") } },

package/dist/core/tool-conformance.js

@@ -13,6 +13,7 @@ export const TOOL_CONFORMANCE_VECTORS = [
     vector("hands-full", ["always", "hands", "backgroundTasks", "delegation"], [
         { name: "SendMessage", why: "needs the runner self seat (a direct prepare has none)" },
         { name: "AgentTranscript", why: "needs the runner self seat (a direct prepare has none)" },
+        { name: "ListAgents", why: "mounts with the delegation face only under a runner self seat (a direct prepare has none)" },
     ], [OFFLOAD_READER]),
     vector("hands-readonly", ["always", "hands"], [
         { name: "Edit", why: "the read-only band mounts the read half only" },

package/dist/core/tool-policy.d.ts

@@ -321,8 +321,12 @@ export type PermissionResult = {
      *  in the one direction the stamp cannot reach (a caller composing its own ask) the claim is
      *  tightening-only: it can make an ask outlive a rule, never turn one into an allow. */
     probeMandated?: true;
-    /** This ask is MANDATED — no persisted allow rule and no standing posture may retire it, only an
-     *  answer to THIS call. ENGINE-STAMPED at the gate's single origin stamp from the ONE derivation
+    /** This ask is MANDATED — no persisted allow rule and no STANDING ANSWER (a release remembered from an
+     *  earlier call, at any scope, a session included) may retire it; only an answer produced for THIS call
+     *  clears it — a person, a hook, a deployment's blanket `onAsk: "allow"` seat, or the live deciders the
+     *  mandate tables admit ({@link import("./ask-origin.js").classifierMayAnswerMandate} /
+     *  `sandboxMayAdmitMandate`); {@link requiresRealApproval} is the stronger demand that also refuses the
+     *  blanket seat. ENGINE-STAMPED at the gate's single origin stamp from the ONE derivation
      *  the approval card's rule-offer word also reads ({@link import("./ask-origin.js").ruleClearanceOf},
      *  which lists the doors). TIGHTENING-ONLY: a layer below the mint may not clear one a layer above
      *  set, and a policy self-declaring it only opts its own ask OUT of automatic answering. Carried
@@ -1259,8 +1263,9 @@ export interface AskRequest {
      *  caller/worker-settable field. */
     readonly requiresRealApproval?: boolean;
     /**
-     * PRESENCE ONLY, and a FACT ABOUT THIS ASK: no persisted allow rule and no standing posture can
-     * retire this question. ABSENT is not the inverse claim: a person's own explicit `ask` rule and a
+     * PRESENCE ONLY, and a FACT ABOUT THIS ASK: no persisted allow rule and no STANDING ANSWER — a release
+     * remembered from an earlier call, at any scope, a session included — can retire this question; it is
+     * answered only for THIS call, by an answerer (see the ask-arm member of the same name for who may). ABSENT is not the inverse claim: a person's own explicit `ask` rule and a
      * matching allow rule the lane already refused both leave it absent and still block rule clearance
      * ({@link ruleOffersAbsence} words those `shadowed`). The wire twin of the
      * {@link PermissionResult} ask-arm member of the same name, minted once by the engine at the gate's

package/dist/core/tool-spec.d.ts

@@ -14,6 +14,7 @@ import type { AgentDefinition } from "./agent-definition.js";
 import type { TaskEvent } from "./task-event.js";
 import type { TaskSpec } from "./task-spec.js";
 import type { BackgroundChildEvent } from "./delegation-frames.js";
+import type { ModelRef } from "./model-seat.js";
 import type { ToolFamily, ToolPathTarget, ToolRenderHints, ToolRuleFace } from "./tool-face.js";
 /**
  * Side-effect class of a tool. Used by wake/resume reconciliation: when a call was interrupted
@@ -819,6 +820,19 @@ export interface ToolExecuteContext {
      * the tool runs outside a Runner task.
      */
     model?: Model;
+    /**
+     * WHICH REF chose {@link model} — the catalog word the parent leg is running under, or the `Model`
+     * object itself when no word exists (an object-pinned spec, a `select`-criteria role). Snapshotted at
+     * the same call-time instant as {@link model}, and its companion in the same sense {@link thinkingLevel}
+     * is: one read, one moment.
+     *
+     * A delegation tool inheriting the caller's model reads THIS, not {@link model}: a word resolves against
+     * the catalog generation in force at the CHILD's own spawn, so a child spawned after a catalog hot-swap
+     * lands on the current generation instead of on the object its parent has been holding since its own
+     * prepare (and a word the swap retired refuses loudly, exactly as a caller-written retired word does).
+     * Undefined when the tool runs outside a Runner task — the same absence {@link model} has there.
+     */
+    modelRef?: ModelRef;
     /**
      * The PARENT task's current thinking level, snapshotted at call time — the {@link model} companion.
      * A delegation tool threads it into the child so a sub-agent inherits the caller's thinking depth by

package/dist/core/wiring-manifest.d.ts

@@ -158,6 +158,14 @@ export interface WiringManifest {
     leg?: {
         kind: WiringLegKind;
     };
+    /** Effective half only — the leg's team role ({@link import("../agents/team-role.js").teamRoleOf}):
+     *  `lead` for a top-level leg, `teammate` for a named delegation, `none` for an unnamed one. Leg-local
+     *  (excluded from the fingerprint). */
+    teamRole?: import("../agents/team-role.js").TeamRole;
+    /** Effective half only, present iff the spec reported one — the session's self-reported presence,
+     *  the very object `TaskSpec.peerPresence` carried, for a host to copy into the directory row it
+     *  writes without parsing the spec. Leg-local (excluded from the fingerprint). */
+    peerPresence?: import("../agents/peer-directory.js").PeerPresence;
     ask: {
         form: AskSeamForm;
         /** Absent iff `form === "absent"` (no seat supplied a value — a fabricated provenance would be
@@ -413,6 +421,10 @@ export interface WiringFacts {
     half: "static" | "effective";
     /** Required on the effective half; must be absent on the static half. */
     leg?: WiringLegKind;
+    /** Effective half only — see {@link WiringManifest.teamRole}. */
+    teamRole?: import("../agents/team-role.js").TeamRole;
+    /** Effective half only — see {@link WiringManifest.peerPresence}; copied, never aliased. */
+    peerPresence?: import("../agents/peer-directory.js").PeerPresence;
     askForm: AskSeamForm;
     askProvenance?: SeamProvenance;
     questionWired: boolean;

package/dist/core/wiring-manifest.js

@@ -146,9 +146,13 @@ export function deriveWiringManifest(facts) {
             ? { readDeny: { builtinTiers: [...facts.readDenyBuiltinTiersActive] } }
             : {}),
         ...(facts.half === "effective" && facts.autoConsolidationOnRecommendation === true ? { autoConsolidation: { onRecommendation: true } } : {}),
+        ...(facts.half === "effective" && facts.teamRole !== undefined ? { teamRole: facts.teamRole } : {}),
+        ...(facts.half === "effective" && facts.peerPresence !== undefined && (facts.peerPresence.agent !== undefined || facts.peerPresence.intent !== undefined)
+            ? { peerPresence: { ...(facts.peerPresence.agent !== undefined ? { agent: facts.peerPresence.agent } : {}), ...(facts.peerPresence.intent !== undefined ? { intent: facts.peerPresence.intent } : {}) } }
+            : {}),
     };
     if (facts.half === "effective") {
-        const { leg: _leg, mcp: _mcp, tools: _tools, lsp: _lsp, hooks: _hooks, ...assembly } = manifest;
+        const { leg: _leg, mcp: _mcp, tools: _tools, lsp: _lsp, hooks: _hooks, teamRole: _teamRole, peerPresence: _peerPresence, ...assembly } = manifest;
         const { provenance: _askSeat, ...askForHash } = assembly.ask;
         const { provenance: _questionSeat, ...questionForHash } = assembly.question;
         manifest.configFingerprint = createHash("sha256")

package/dist/engine/harness/agent-harness.d.ts

@@ -2,6 +2,7 @@ import type { ActorAssertion, AssistantMessage, ImageContent, Model, UserMessage
 import type { HaltRemainingDirective } from "../loop/types.js";
 import type { AgentMessage, AgentTool, LoopMalformedToolUseRecovery, LoopThinkingOnlyRecovery, LoopTruncatedOutputRecovery, QueueMode, ThinkingLevel } from "../loop/types.js";
 import { type EngineSegment } from "../../core/untrusted-text.js";
+import type { CommittedFrameCarrier } from "../../core/frame-settlement.js";
 import type { AbortResult, AgentHarnessEvent, AgentHarnessEventResultMap, AgentHarnessOptions, AgentHarnessOwnEvent, AgentHarnessResources, AgentHarnessStreamOptions, ExecutionEnv, PromptTemplate, Skill } from "./types.js";
 /** [c209-C] 收口 C1/C2 — engine-provenance metadata a caller can stamp on the user message it
  *  mints (see the field docs on {@link UserMessage}). Threaded from `prompt`/`steer`/`followUp`/
@@ -56,6 +57,10 @@ export interface UserMessageProvenance {
      *  while an engine-authored one is held. Minter-stated at the single relay seam that mints such
      *  frames — never inferred from text. Metadata only; not persisted on the message. */
     callerAuthored?: true;
+    /** #1036 — the frame's injection-queue dedup key, persisted on the message it becomes
+     *  ({@link UserMessage.engineNoteKey}) so a reader of the TRANSCRIPT alone can join an entry back
+     *  to its frame. Rides only WITH `provenance:"engine-note"`. */
+    engineNoteKey?: string;
     /** RB-30 terminal fix — an OPAQUE payload the engine rides on this queued message (the runner's
      *  task-notification frame). Never serialized, never interpreted by the harness: if the message is
      *  still undrained at agent_end, the payload is handed back through `onUndrainedEngineNotes` so
@@ -178,6 +183,8 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     private runPromise?;
     private pendingSessionWrites;
     private model;
+    /** The ref that chose {@link model}, moved by the SAME assignment (one value, never two answers). */
+    private modelRef;
     /** The run's thinking level; `undefined` = undeclared (provider default, no wire key) — distinct from "off". */
     private thinkingLevel;
     /** RB-30 terminal fix — runner-set sink for engine-note payloads left undrained at agent_end. */
@@ -200,6 +207,9 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
      *  Advisory (swallow-guarded at the call sites via the runner's own closure); never re-entered
      *  for the same payload — consumption deletes the sidecar entry in the same step. */
     onEngineNoteConsumed?: (payload: unknown) => void;
+    /** #1036 — THE RECEIPT SINK: a frame reached the TRANSCRIPT, reported at the `message_end` append
+     *  that proves it, with its carrier and entry id. Advisory. */
+    onFrameCommitted?: (carrier: CommittedFrameCarrier, entryId: string) => void;
     /** Runner-set HOLD — the single gate for every engine-authored injection against the run's live
      *  human-halt fact. When it reports true (a person's bare rejection halted the run at this
      *  boundary, and only that person's own input may continue it):
@@ -496,9 +506,12 @@ export declare class AgentHarness<TSkill extends Skill = Skill, TPromptTemplate
     } & UserMessageProvenance): Promise<void>;
     appendMessage(message: AgentMessage): Promise<void>;
     getModel(): Model;
+    /** The ref that chose the CURRENT model — {@link getModel}'s companion (a word re-resolves, an object pins). */
+    getModelRef(): import("../../core/model-seat.js").ModelRef;
     /** The current level, or `undefined` when none was declared (provider default — no wire key). */
     getThinkingLevel(): ThinkingLevel | undefined;
-    setModel(model: Model): Promise<void>;
+    /** `ref` = the word that chose `model`; omitted ⇒ the object pins itself. The pair moves together. */
+    setModel(model: Model, ref?: import("../../core/model-seat.js").ModelRef): Promise<void>;
     setThinkingLevel(level: ThinkingLevel): Promise<void>;
     setActiveTools(toolNames: string[]): Promise<void>;
     getSteeringMode(): QueueMode;

package/dist/engine/harness/agent-harness.js

@@ -28,6 +28,7 @@ function createUserMessage(text, images, provenance) {
             : {}),
         ...(provenance?.engineMinted === true && !engineNote ? { engineMinted: true } : {}),
         ...(engineNote ? { provenance: "engine-note" } : {}),
+        ...(engineNote && typeof provenance?.engineNoteKey === "string" && provenance.engineNoteKey.length > 0 ? { engineNoteKey: provenance.engineNoteKey } : {}),
         ...(provenance?.actor !== undefined &&
             typeof provenance.actor.id === "string" &&
             provenance.actor.id.length > 0 &&
@@ -206,10 +207,12 @@ export class AgentHarness {
     runPromise;
     pendingSessionWrites = [];
     model;
+    modelRef;
     thinkingLevel;
     onUndrainedEngineNotes;
     onUndrainedUserInputs;
     onEngineNoteConsumed;
+    onFrameCommitted;
     engineInjectionsHeld;
     recoverUndrainedEngineNotes() {
         this.sweepUndrainedEngineNotes([this.drainedPendingInjection, this.nextTurnQueue, this.steerQueue, this.followUpQueue]);
@@ -297,6 +300,7 @@ export class AgentHarness {
             this.tools.set(tool.name, tool);
         }
         this.model = options.model;
+        this.modelRef = options.modelRef ?? options.model;
         this.thinkingLevel = options.thinkingLevel;
         this.activeToolNames =
             options.activeToolNames ?? (options.tools ?? []).map((tool) => tool.name);
@@ -582,11 +586,21 @@ export class AgentHarness {
         const gone = new Set(messages);
         this.drainedPendingInjection = this.drainedPendingInjection.filter((m) => !gone.has(m));
     }
-    settleInjectedFrame(message) {
+    settleInjectedFrame(message, entryId) {
         if (!this.drainedPendingInjection.includes(message))
             return;
         this.unbookInFlight([message]);
         userInputParkRecords.delete(message);
+        if (entryId !== undefined) {
+            const payload = engineNotePayloads.get(message);
+            if (payload !== undefined) {
+                try {
+                    this.onFrameCommitted?.({ kind: "engine_note", payload }, entryId);
+                }
+                catch {
+                }
+            }
+        }
         engineNotePayloads.delete(message);
     }
     createLoopConfig(getTurnState, setTurnState, runPromptOverride) {
@@ -788,7 +802,14 @@ export class AgentHarness {
             let entryId;
             if (!isEmptyFailureAssistant(event.message)) {
                 entryId = await this.session.appendMessage(event.message);
-                this.settleInjectedFrame(event.message);
+                this.settleInjectedFrame(event.message, entryId);
+                if (entryId !== undefined && event.message.role === "toolResult" && typeof event.message.toolCallId === "string") {
+                    try {
+                        this.onFrameCommitted?.({ kind: "tool_result", toolCallId: event.message.toolCallId, content: event.message.content }, entryId);
+                    }
+                    catch {
+                    }
+                }
             }
             else if (event.message.isApiErrorMessage === true) {
                 await this.recordApiFailure(event.message);
@@ -1169,10 +1190,13 @@ export class AgentHarness {
     getModel() {
         return this.model;
     }
+    getModelRef() {
+        return this.modelRef;
+    }
     getThinkingLevel() {
         return this.thinkingLevel;
     }
-    async setModel(model) {
+    async setModel(model, ref) {
         try {
             const previousModel = this.model;
             if (this.phase === "idle") {
@@ -1186,6 +1210,7 @@ export class AgentHarness {
                 });
             }
             this.model = model;
+            this.modelRef = ref ?? model;
             await this.emitOwn({ type: "model_select", model, previousModel, source: "set" });
         }
         catch (error) {

package/dist/engine/harness/types.d.ts

@@ -210,7 +210,7 @@ export declare class CompactionError extends Error {
     code: CompactionErrorCode;
     constructor(code: CompactionErrorCode, message: string, cause?: Error);
 }
-export type SessionErrorCode = "not_found" | "invalid_session" | "invalid_entry" | "invalid_fork_target" | "storage" | "conflict" | "placement_refused" | "unknown";
+export type SessionErrorCode = "not_found" | "invalid_session" | "invalid_entry" | "invalid_fork_target" | "storage" | "conflict" | "placement_refused" | "corrupt_session" | "unknown";
 /** Error thrown by session storage, repositories, and session tree operations. */
 export declare class SessionError extends Error {
     /** Session subsystem error code. */
@@ -1380,6 +1380,8 @@ export interface AgentHarnessOptions<TSkill extends Skill = Skill, TPromptTempla
     /** Curated stream/provider request options. Snapshotted at turn start. */
     streamOptions?: AgentHarnessStreamOptions;
     model: Model;
+    /** WHICH REF chose {@link AgentHarnessOptions.model} — the word, else the object. Omitted ⇒ pinned. */
+    modelRef?: import("../../core/model-seat.js").ModelRef;
     thinkingLevel?: ThinkingLevel;
     activeToolNames?: string[];
     steeringMode?: QueueMode;

package/dist/engine/llm/types.d.ts

@@ -348,6 +348,8 @@ export interface UserMessage {
      * invariant outranks the may-skip one (dropping visible content is the unrecoverable direction).
      */
     engineMinted?: true;
+    /** #1036 — this frame's injection-queue dedup key, with `provenance:"engine-note"`; OPAQUE (equality only), the DURABLE half of frame identity. */
+    engineNoteKey?: string;
     /**
      * [c209-C] R3 收口 — the "visible but not the user" THIRD state. This message is an
      * ENGINE-INJECTED note whose CONTENT the model must read (LSP `<new-diagnostics>` blocks,
@@ -524,13 +526,12 @@ export interface ToolResultMessage<TDetails = unknown> {
 export type Message = UserMessage | AssistantMessage | ToolResultMessage;
 /**
  * RB-3 (stage S4 carry): strip the engine-provenance metadata fields from user messages before
- * serializing a Context to an external wire. The five fields (`enginePrefixChars`/`engineSegments`/
- * `engineMinted`/`provenance`/`actor`, the last per design/171 §5.2) are INTERNAL coordination
- * between the engine's minting side and its consumers (permission classifier, compaction summarizer,
- * prompt suggestions, multiplayer attribution) — they must never reach a provider payload. The
- * built-in brains construct their own wire shapes and are immune; a CUSTOM Brain that
- * whole-object-serializes messages (`JSON.stringify(context.messages)`) would leak them — run the
- * array through this projection first.
+ * serializing a Context to an external wire. The six fields (`enginePrefixChars`/`engineSegments`/
+ * `engineMinted`/`provenance`/`actor`/`engineNoteKey`) are INTERNAL coordination between the engine's
+ * minting side and its consumers (permission classifier, compaction summarizer, prompt suggestions,
+ * multiplayer attribution) — they must never reach a provider payload. The built-in brains construct
+ * their own wire shapes and are immune; a CUSTOM Brain that whole-object-serializes messages
+ * (`JSON.stringify(context.messages)`) would leak them — run the array through this projection first.
  */
 export declare function stripEngineMetadata(messages: Message[]): Message[];
 export type ImagesInputContent = TextContent | ImageContent;

package/dist/engine/llm/types.js

@@ -9,7 +9,7 @@ export function stripEngineMetadata(messages) {
     return messages.map((m) => {
         if (m.role !== "user")
             return m;
-        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, actor: _e, ...rest } = m;
+        const { enginePrefixChars: _a, engineSegments: _b, engineMinted: _c, provenance: _d, actor: _e, engineNoteKey: _f, ...rest } = m;
         return rest;
     });
 }

package/dist/engine/lsp/node-lsp-manager.d.ts

@@ -19,6 +19,9 @@ export interface NodeLspManagerOptions {
     servers?: Record<string, string | null>;
     /** Injectable spawn (tests supply a fake server; default = {@link defaultLspSpawn} over `child_process.spawn`). */
     spawn?: LspSpawn;
+    /** The language server's environment for the default spawn, verbatim. Omitted ⇒ the host environment scrubbed of
+     *  credential-shaped names (`scrubSecretEnv`, a tool child's scrub). Unread when {@link spawn} is supplied. */
+    env?: Record<string, string>;
     /** Read a file's CURRENT text for the session's didOpen/didChange re-sync (default = local `fs.readFile` utf8). */
     readText?: LspReadText;
     /** Resolve the server `cwd`/`rootUri` for a file (default = env.cwd ?? nearest project marker ?? file dir). */

package/dist/engine/lsp/node-lsp-manager.js

@@ -9,6 +9,7 @@ import { TransportLspSession } from "../../core/lsp-session.js";
 import { StdioLspTransport } from "./stdio-lsp-transport.js";
 import { MAX_LSP_FILE_BYTES, SharedAbortScope, settleOnAbort } from "../../core/lsp.js";
 import { asThrownError, thrownText } from "../../core/thrown-value.js";
+import { scrubSecretEnv } from "../../core/secret-env.js";
 export const DEFAULT_LSP_SERVERS = {
     typescript: "typescript-language-server --stdio",
     javascript: "typescript-language-server --stdio",
@@ -66,7 +67,7 @@ export class NodeLspManager {
     disposed = false;
     constructor(opts = {}) {
         this.servers = { ...DEFAULT_LSP_SERVERS, ...opts.servers };
-        this.spawnFn = opts.spawn ?? defaultLspSpawn;
+        this.spawnFn = opts.spawn ?? (opts.env !== undefined ? lspSpawnWithEnv(opts.env) : defaultLspSpawn);
         this.readTextFn = opts.readText ?? defaultLspReadText;
         this.resolveRootFn = opts.resolveRoot ?? defaultResolveRoot;
         this.log = opts.log ?? (() => { });
@@ -328,10 +329,11 @@ export function lspSpawnOptions(cwd) {
         ? { cwd, stdio: ["pipe", "pipe", "ignore"], shell: true }
         : { cwd, stdio: ["pipe", "pipe", "ignore"] };
 }
-export const defaultLspSpawn = (command, args, cwd, signal) => new Promise((resolve, reject) => {
+export const defaultLspSpawn = (command, args, cwd, signal) => lspSpawnWithEnv(undefined)(command, args, cwd, signal);
+const lspSpawnWithEnv = (env) => (command, args, cwd, signal) => new Promise((resolve, reject) => {
     let child;
     try {
-        child = spawn(command, args, lspSpawnOptions(cwd));
+        child = spawn(command, args, { ...lspSpawnOptions(cwd), env: env ?? scrubSecretEnv(process.env) });
     }
     catch (e) {
         return reject(asThrownError(e));

package/dist/engine/session/import-validate.js

@@ -293,6 +293,10 @@ function normalizeEngineProvenanceStamp(message, preserveActorAssertions = false
         delete m.engineMinted;
     if (m.provenance !== undefined && m.provenance !== "engine-note")
         delete m.provenance;
+    if (m.engineNoteKey !== undefined && !(typeof m.engineNoteKey === "string" && m.engineNoteKey.length > 0))
+        delete m.engineNoteKey;
+    if (m.engineNoteKey !== undefined && m.provenance !== "engine-note")
+        delete m.engineNoteKey;
     if (m.engineMinted === true && m.provenance === "engine-note") {
         delete m.engineMinted;
     }

package/dist/index.d.ts

@@ -128,14 +128,15 @@ export type { FileHistoryRetentionPolicy } from "./core/file-history-retention.j
 export { FileStorageBackend, FileSessionRepo, FileCheckpointStore, FileMemoryStore, FileToolResultStore, FileSessionPolicyStore, FileStrategyStore, FileFileHistoryStore, FileWorkflowJournalStore, MAX_JOURNAL_RESULT_BYTES, oversizeJournalResult, resolveDataRoot, sanitizeScope, sanitizePathComponent, createFileConsolidationLock, atomicWriteFile, writeThenLink, ensureDir, readJsonlRecords, AppendLog, FileStoreLockError, type FileStoreLockErrorCode, processFingerprint, isProcessLive, type ProcessFingerprint, type FileStorageBackendOptions, type FileStorageCorruptReadInfo, type FileStrategyStoreOptions, type FileFileHistoryStoreOptions, type FileSessionRepoOptions, type FileCheckpointStoreOptions, } from "./stores/file/index.js";
 export { CacheBreakDetector, type CacheBreakFinding, type ToolFingerprintInput } from "./core/cache-break-detector.js";
 export { maybeCompact, type MaybeCompactOptions, type CompactionWindowSafetyInfo } from "./core/auto-compaction.js";
+export type { CompactionEffect } from "./core/frame-settlement.js";
 export { brainToRuntime } from "./core/runtime.js";
 export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./core/sensitive-path-policy.js";
 export { createFsWriteGatePolicy, WRITE_EXEMPT_DIR_COVERS_ROOT_CODE, type FsWriteGatePolicyOptions } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, type NotificationInjectionOutcome, // the injector's outcome words (`parked_durably` = the session's durable box took the frame)
+export { renderTaskNotificationXml, RESUPPLIED_FRAME_PREAMBLE, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, type TaskNotificationPayload, type TaskNotificationStatus, type ExternalNotificationInput, type SystemInjection, type SystemInjectionPriority, type NotificationInjectionOutcome, // the injector's outcome words (`parked_durably` = the session's durable box took the frame)
 NOTIFICATION_INJECTION_OUTCOMES, // …and their value half + guard, so a host wiring its own uplink validates a reported outcome without duplicating the vocabulary
-isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, type SemaProvenance, } from "./core/task-notification.js";
+isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, type SemaProvenance, HANDBACK_STATES, type HandbackState, COMPACTION_KINDS, type CompactionKind, handbackStateOf, terminalFrameFacets, } from "./core/task-notification.js";
 export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, type ToolFamily, type ToolMountTag, type ToolApprovalCard, type ToolPathAccess, type ToolPathBase, type ToolPathAbsence, type ToolPathTarget, type ToolCallPathTarget, type ToolRosterPathTarget, pathTargetSlotOnly, type ToolRuleFace, type ToolRenderHints, type ToolFaceDeclaration, type ToolCatalogEntry, } from "./core/tool-face.js";
 export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, type ToolCallLike, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
 export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, type RosterSource, type ToolIdentity, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, type RosterBoundMembers, type RosterBoundCode, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
@@ -158,7 +159,7 @@ export { type StoreDurability } from "./core/checkpoint-store.js";
 export { type StoreFidelity } from "./core/checkpoint-store.js";
 export { projectHumanInput, buildHumanInputEvent, type HumanInputSource, type HumanInputFrame, type HumanInputEvent, type HumanInputDelivery, } from "./core/human-input-projection.js";
 export { TaskRegistry, defaultTaskRegistry, createTaskOutputTool, createTaskStopTool, type SemaTaskType, type SemaTaskStatus, type SemaTaskHandle, type ParkedClaimTicket, type TaskAccess, type UnifiedTaskOutput, type TaskRetrievalStatus, type StopSource, type RegisterMonitorInput, type MonitorTimers, MONITOR_BATCH_WINDOW_MS, MONITOR_DEFAULT_TIMEOUT_MS, MONITOR_MAX_TIMEOUT_MS, MONITOR_MAX_BATCHES_PER_MINUTE, canAccessWorkflowRun, DURABLE_AGENT_HANDLE_RE, } from "./core/task-registry.js";
-export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease, MailboxStoreError, type MailboxStoreErrorCode, MAILBOX_TOMBSTONED_RECIPIENT_CODE, type MailboxAppendMessage, type MailboxPeerMeta, type MailboxPeerFromMode, type MailboxPeerRecordKind, type MailboxPeerNoticeMeta, type MailboxPeerNoticeState, MAILBOX_PEER_NOTICE_STATES, MAILBOX_PEER_FROM_MODES, MAILBOX_PEER_RECORD_KINDS, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_CROSS_PROCESS_UNSAFE_CODE, readMailboxPeerMeta, mailboxCrossProcessMountVerdict, type MailboxCrossProcessVerdict, } from "./core/mailbox-store.js";
+export { InMemoryMailboxStore, type MailboxStore, type MailboxMessage, type MailboxLease, MailboxStoreError, type MailboxStoreErrorCode, MAILBOX_TOMBSTONED_RECIPIENT_CODE, type MailboxAppendMessage, type MailboxPeerMeta, type MailboxPeerFromMode, type MailboxPeerRecordKind, type MailboxPeerNoticeMeta, type MailboxPeerNoticeState, MAILBOX_PEER_NOTICE_STATES, MAILBOX_PEER_FROM_MODES, MAILBOX_PEER_RECORD_KINDS, MAILBOX_INVALID_PEER_META_CODE, MAILBOX_CROSS_PROCESS_UNSAFE_CODE, readMailboxPeerMeta, mailboxCrossProcessMountVerdict, type MailboxCrossProcessVerdict, type MailboxAckResult, } from "./core/mailbox-store.js";
 export { FileMailboxStore, type FileMailboxStoreOptions } from "./stores/file/mailbox-store.js";
 export { createFileTaskListStore } from "./stores/file/task-list-store.js";
 export { createCcFileTaskListStore } from "./stores/cc/task-list-store.js";
@@ -311,14 +312,16 @@ export { COORDINATOR_ROLE_PROMPT, TEAMMATE_COMMUNICATION_ADDENDUM } from "./prom
 export { createSubagentTool, FORK_SUBAGENT_TYPE, GENERAL_PURPOSE_SUBAGENT_TYPE, agentWhenToUseText, FORK_DIRECTIVE_FRAME, SUBAGENT_SYSTEM_NOTE, type SubagentToolOptions, resolveDelegationEntryCaps, type ResolvedDelegationEntryCaps, type SubagentSpawnContext, type SubagentSteerHandle, type SubagentStep, type SubagentEditedFile, } from "./agents/subagent.js";
 export { getSessionRetainLedger, releaseSessionRetainLedger, } from "./agents/retain-ledger.js";
 export { createSendMessageTool, createAgentContinuationVerb, SEND_MESSAGE_TOOL_NAME, type SendMessageToolOptions, type AgentContinuationReceipt } from "./agents/send-message-tool.js";
-export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerAdmissionConfig, PEER_ADMISSION_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, type PeerAdmission, type PeerAdmissionConfig, type PeerAdmissionOptions, type PeerAdmissionRequest, type PeerAdmissionVerdict, type PeerAdmissionRefusal, type PeerRefusalCode, type PeerAxisTag, type PeerIdentity, type PeerSelfRef, type PeerInboundChainRef, } from "./agents/peer-admission.js";
+export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerLaneConfig, PEER_LANE_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, type PeerAdmission, type PeerLaneConfig, type PeerAdmissionOptions, type PeerAdmissionRequest, type PeerAdmissionVerdict, type PeerAdmissionRefusal, type PeerRefusalCode, type PeerAxisTag, type PeerIdentity, type PeerSelfRef, type PeerInboundChainRef, } from "./agents/peer-admission.js";
 export { CROSS_SESSION_MESSAGE_TAG, CROSS_SESSION_MESSAGE_NOTICE, PERMISSION_MODE_CLASSES, isPermissionModeClass, CrossSessionCodecError, PEER_HOP_CHAIN_CARRY_WINDOW, encodePeerAddress, isCanonicalPeerAddress, encodeScopeAttribute, decodeScopeAttribute, canonicalPeerDisplayName, buildCrossSessionEnvelope, parseCrossSessionEnvelope, clampHopChain, encodeCcPeerFrame, decodeCcPeerFrame, type PermissionModeClass, type CrossSessionEnvelopeFields, type CrossSessionEnvelopeParse, type CrossSessionEnvelopeRefusal, type CcPeerFrameFields, type CcPeerFrameParse, } from "./agents/cross-session-envelope.js";
 export { CROSS_SESSION_INBOUND_SETTINGS, isCrossSessionInboundSetting, resolveCrossSessionInboundSetting, CROSS_SESSION_HOLD_CAUSES, describeCrossSessionHoldCause, judgeCrossSessionInbound, foldPermissionModeClass, PEER_SEND_VERDICT_CODES, peerSendVerdictSeverity, type CrossSessionInboundSetting, type CrossSessionSettingSource, type CrossSessionInboundSettingLayers, type ResolvedCrossSessionInboundSetting, type CrossSessionHoldCause, type CrossSessionInboundVerdict, type CrossSessionInboundInput, type PeerSendVerdictCode, type PeerSendVerdict, } from "./agents/cross-session-judge.js";
 export { PEER_REF_MIN, PEER_REF_MAX, PEER_REF_RE, mintPeerRef, formatPeerNameRef, parsePeerNameRef, normalizePeerName, PEER_ADDRESS_PREFIXES, reservedPeerNameReason, type PeerRefEntry, } from "./agents/cross-session-ref.js";
-export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, type PeerSessionRecord, type PeerSessionLiveness, type PeerSessionTempo, type PeerSessionRecordRefusal, type PeerSessionRecordRead, type PeerLivenessProbe, type PeerDirectory, type PeerDirectoryAccess, type PeerSessionCandidate, type PeerSessionResolution, type InMemoryPeerDirectory, type PeerRegistryDirectoryRefusal, type PeerRegistryDirectoryVerdict, } from "./agents/peer-directory.js";
-export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, type ListAgentsToolOptions, type ListAgentsRow } from "./agents/list-agents-tool.js";
+export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, type PeerSessionRecord, type PeerPresence, PEER_PRESENCE_MAX_CHARS, type PeerSessionLiveness, type PeerSessionTempo, type PeerSessionRecordRefusal, type PeerSessionRecordRead, type PeerLivenessProbe, type PeerDirectory, type PeerDirectoryAccess, type PeerSessionCandidate, type PeerSessionResolution, type InMemoryPeerDirectory, type PeerRegistryDirectoryRefusal, type PeerRegistryDirectoryVerdict, } from "./agents/peer-directory.js";
+export { createReadInboxTool, READ_INBOX_TOOL_NAME, READ_INBOX_MAX_LIMIT, READ_INBOX_RESULT_BUDGET_CHARS, type ReadInboxToolOptions } from "./agents/read-inbox-tool.js";
+export { TEAM_ROLES, DIRECTION_RELATIONS, teamRoleOf, mayDirect, type TeamRole, type DirectionRelation } from "./agents/team-role.js";
+export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, PEER_LISTING_FRESH_WINDOW_MS, isFreshPeerRow, type ListAgentsToolOptions, type ListAgentsRow } from "./agents/list-agents-tool.js";
 export { CROSS_SESSION_CLASSIFIER_RULE } from "./agents/cross-session-envelope.js";
-export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, type PeerLaneMountVerdict, type PeerInboundDisposition } from "./agents/peer-session-drain.js";
+export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, PEER_RESUPPLY_CAP, type PeerLaneMountVerdict, type PeerInboundDisposition } from "./agents/peer-session-drain.js";
 export { renderCrossSessionMessageFrame, renderCrossSessionNoticeLine } from "./core/task-notification.js";
 export { PEER_HELD_QUEUE_CAP, PEER_IDLE_SUBSCRIPTION_TTL_MS, PEER_IDLE_SUBSCRIBER_TABLE_CAP, PEER_IDLE_OUTSTANDING_CAP, PEER_IDLE_PRIORS_KEPT, PEER_IDLE_FIRE_DEBOUNCE_MS, PEER_IDLE_HELD_BACKOFF_MS, PEER_IDLE_LABEL_MAX, CROSS_SESSION_DIALOG_EXPIRY_VALUES, CROSS_SESSION_DIALOG_EXPIRY_DEFAULT, resolveCrossSessionDialogExpiry, PEER_HELD_REVIEW_CAUSES, PEER_DELIVERY_RECEIPT_STATES, isPeerDeliveryReceiptState, PEER_DROP_REASONS, peerRecipientSuffix, renderCrossSessionDeliveryNotice, describePeerDropReasons, renderCrossSessionDroppedNotice, PEER_IDLE_NOTICE_KINDS, isPeerIdleNoticeKind, PEER_IDLE_UNAVAILABLE_CAUSES, peerIdleNoticeLabel, formatPeerNoticeClock, renderCrossSessionIdleNotice, describePeerIdleSubscription, type CrossSessionDialogExpiry, type ResolvedCrossSessionDialogExpiry, type PeerDeliveryReceiptState, type PeerDropReason, type PeerIdleNoticeKind, type PeerIdleNoticeFields, } from "./agents/peer-notices.js";
 export { createPeerHeldQueue, peerHeldQueueFor, peerHeldQueueIfAny, peerHeldQueueKey, realPeerClock, type PeerInboundHoldCause, type PeerHeldEntry, type PeerHeldSettlement, type PeerHeldSettleReason, type PeerHeldSettleOutcome, type PeerClock, type PeerHeldQueueSink, type PeerHeldQueueConfig, type PeerHeldQueue, } from "./agents/peer-held-queue.js";

package/dist/index.js

@@ -108,7 +108,7 @@ export { createSensitivePathPolicy, RECOMMENDED_SENSITIVE_PATTERNS } from "./cor
 export { createFsWriteGatePolicy, WRITE_EXEMPT_DIR_COVERS_ROOT_CODE } from "./core/fs-write-gate-policy.js";
 export { RETIRED_TOOL_NAMES } from "./core/tool-name-aliases.js";
 export { DEFAULT_SUBAGENT_TOOL_NAME } from "./agents/subagent.js";
-export { renderTaskNotificationXml, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, NOTIFICATION_INJECTION_OUTCOMES, isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, } from "./core/task-notification.js";
+export { renderTaskNotificationXml, RESUPPLIED_FRAME_PREAMBLE, taskNotificationDedupKey, isDelegatedAgentTerminal, isTerminalTaskNotification, SystemInjectionQueue, NOTIFICATION_INJECTION_OUTCOMES, isNotificationInjectionOutcome, SYSTEM_INJECTION_PRIORITIES, isSystemInjectionPriority, AGENT_MESSAGE_TAG, renderAgentMessageFrame, HANDBACK_STATES, COMPACTION_KINDS, handbackStateOf, terminalFrameFacets, } from "./core/task-notification.js";
 export { TOOL_FAMILIES, TOOL_MOUNT_TAGS, TOOL_APPROVAL_CARDS, TOOL_PATH_ACCESSES, TOOL_PATH_BASES, TOOL_PATH_ABSENCES, TOOL_WIRE_NAME_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_CARD_ID_MAX_CHARS, TOOL_KEY_MAX_CHARS, TOOL_KEYS_MAX, RENDER_HINT_MAX_CHARS, RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_LIST, pathTargetSlotOnly, } from "./core/tool-face.js";
 export { describeToolCatalog, catalogEntriesNamed, catalogToolNames, catalogRuleFaceOf, pathTargetOf, pathTargetValue, protectivePathTargetOf, declaredPathTargetOf, BARE_REQUEST_CODE, isProtectedWrite, isDeclaredWrite, fileOpAccessOf, pathConfinableWriteToolNames, skillScopeWriteToolNames, pathTargetingToolNames, compactableToolNames, budgetExemptToolNames, handBandEffects, engineCardTypes, predictMountedToolNames, HANDS_BAND_TAGS, MOUNT_TAG_IN_HANDS_BAND, } from "./core/tool-registry.js";
 export { ToolRosterEntry, ToolRoster, ToolRosterDelta, ToolRosterRenderHints, ROSTER_SOURCES, toolIdentityOf, mintCapabilityId, diffToolRoster, judgeParkedToolIdentity, ruleFacesFromRoster, toolCallFaceOf, inputKeysOf, ruleFaceOfInstance, rosterMemberBoundProblem, ToolRosterDeltaSeat, } from "./core/tool-roster.js";
@@ -258,14 +258,16 @@ export { COORDINATOR_ROLE_PROMPT, TEAMMATE_COMMUNICATION_ADDENDUM } from "./prom
 export { createSubagentTool, FORK_SUBAGENT_TYPE, GENERAL_PURPOSE_SUBAGENT_TYPE, agentWhenToUseText, FORK_DIRECTIVE_FRAME, SUBAGENT_SYSTEM_NOTE, resolveDelegationEntryCaps, } from "./agents/subagent.js";
 export { getSessionRetainLedger, releaseSessionRetainLedger, } from "./agents/retain-ledger.js";
 export { createSendMessageTool, createAgentContinuationVerb, SEND_MESSAGE_TOOL_NAME } from "./agents/send-message-tool.js";
-export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerAdmissionConfig, PEER_ADMISSION_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, } from "./agents/peer-admission.js";
+export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerLaneConfig, PEER_LANE_DEFAULTS, PEER_HOP_CHAIN_WINDOW, PEER_MESSAGE_NOTICE, createPeerSelfRef, createPeerInboundChainRef, peerAxisToken, appendHopToken, } from "./agents/peer-admission.js";
 export { CROSS_SESSION_MESSAGE_TAG, CROSS_SESSION_MESSAGE_NOTICE, PERMISSION_MODE_CLASSES, isPermissionModeClass, CrossSessionCodecError, PEER_HOP_CHAIN_CARRY_WINDOW, encodePeerAddress, isCanonicalPeerAddress, encodeScopeAttribute, decodeScopeAttribute, canonicalPeerDisplayName, buildCrossSessionEnvelope, parseCrossSessionEnvelope, clampHopChain, encodeCcPeerFrame, decodeCcPeerFrame, } from "./agents/cross-session-envelope.js";
 export { CROSS_SESSION_INBOUND_SETTINGS, isCrossSessionInboundSetting, resolveCrossSessionInboundSetting, CROSS_SESSION_HOLD_CAUSES, describeCrossSessionHoldCause, judgeCrossSessionInbound, foldPermissionModeClass, PEER_SEND_VERDICT_CODES, peerSendVerdictSeverity, } from "./agents/cross-session-judge.js";
 export { PEER_REF_MIN, PEER_REF_MAX, PEER_REF_RE, mintPeerRef, formatPeerNameRef, parsePeerNameRef, normalizePeerName, PEER_ADDRESS_PREFIXES, reservedPeerNameReason, } from "./agents/cross-session-ref.js";
-export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, } from "./agents/peer-directory.js";
-export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS } from "./agents/list-agents-tool.js";
+export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, PEER_PRESENCE_MAX_CHARS, } from "./agents/peer-directory.js";
+export { createReadInboxTool, READ_INBOX_TOOL_NAME, READ_INBOX_MAX_LIMIT, READ_INBOX_RESULT_BUDGET_CHARS } from "./agents/read-inbox-tool.js";
+export { TEAM_ROLES, DIRECTION_RELATIONS, teamRoleOf, mayDirect } from "./agents/team-role.js";
+export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, PEER_LISTING_FRESH_WINDOW_MS, isFreshPeerRow } from "./agents/list-agents-tool.js";
 export { CROSS_SESSION_CLASSIFIER_RULE } from "./agents/cross-session-envelope.js";
-export { PEER_SESSION_ID_UNGRAMMATICAL_CODE } from "./agents/peer-session-drain.js";
+export { PEER_SESSION_ID_UNGRAMMATICAL_CODE, PEER_RESUPPLY_CAP } from "./agents/peer-session-drain.js";
 export { renderCrossSessionMessageFrame, renderCrossSessionNoticeLine } from "./core/task-notification.js";
 export { PEER_HELD_QUEUE_CAP, PEER_IDLE_SUBSCRIPTION_TTL_MS, PEER_IDLE_SUBSCRIBER_TABLE_CAP, PEER_IDLE_OUTSTANDING_CAP, PEER_IDLE_PRIORS_KEPT, PEER_IDLE_FIRE_DEBOUNCE_MS, PEER_IDLE_HELD_BACKOFF_MS, PEER_IDLE_LABEL_MAX, CROSS_SESSION_DIALOG_EXPIRY_VALUES, CROSS_SESSION_DIALOG_EXPIRY_DEFAULT, resolveCrossSessionDialogExpiry, PEER_HELD_REVIEW_CAUSES, PEER_DELIVERY_RECEIPT_STATES, isPeerDeliveryReceiptState, PEER_DROP_REASONS, peerRecipientSuffix, renderCrossSessionDeliveryNotice, describePeerDropReasons, renderCrossSessionDroppedNotice, PEER_IDLE_NOTICE_KINDS, isPeerIdleNoticeKind, PEER_IDLE_UNAVAILABLE_CAUSES, peerIdleNoticeLabel, formatPeerNoticeClock, renderCrossSessionIdleNotice, describePeerIdleSubscription, } from "./agents/peer-notices.js";
 export { createPeerHeldQueue, peerHeldQueueFor, peerHeldQueueIfAny, peerHeldQueueKey, realPeerClock, } from "./agents/peer-held-queue.js";

package/dist/orchestration/run-workflow-tool.d.ts

@@ -293,10 +293,10 @@ export interface RunWorkflowToolDeps {
      *  `ToolExecuteContext.interactiveTools` seat — without it a headless-clamped host's workflow
      *  children could re-mount the interactive tool the host run disabled. */
     parentInteractiveTools?: false;
-    /** Call-time getter for the HOST task's RESOLVED Model object: a spawned agent whose
-     *  fold chain produced no model inherits the parent's full object (baseUrl/key routing included),
-     *  mirroring the subagent lane's ctx.model semantics. */
-    parentModel?: () => import("../internal/llm.js").Model | undefined;
+    /** Call-time getter for the HOST task's RESOLVED model AND the word that chose it: a spawned agent whose
+     *  fold chain produced no model inherits the object on its spec and the word on its trusted channel
+     *  (the subagent lane's `ctx.model` / `ctx.modelRef` pair). Word-less ⇒ the object alone, i.e. a pin. */
+    parentModel?: () => import("../agents/child-model-seat.js").InheritedModelPick | undefined;
     /** The HOST task's per-model auth hook: the CREDENTIAL half of model
      *  inheritance. The Model object fixed the URL routing but the child brain still authenticated
      *  with the boot env token (rerun: 7/7 kimi-route 401s with the qwen key). The subagent lane

package/dist/orchestration/workflow.d.ts

@@ -451,7 +451,7 @@ export interface RunWorkflowOptions {
      *  parent's full object — baseUrl/key routing included — instead of falling to a string/role
      *  re-resolution that loses per-model routing (the 4/4-agents-404 incident: session model id
      *  re-resolved against the base gateway). Mirrors the subagent lane's `ctx.model` semantics. */
-    defaultModel?: () => import("../internal/llm.js").Model | undefined;
+    defaultModel?: () => import("../agents/child-model-seat.js").InheritedModelPick | undefined;
     /** Call-time getter for the thinking level a spawned agent runs at when neither the script, the
      *  agentType definition nor the governance baseline set `thinking` — the child thinking seat's lower rungs
      *  (the deployment's STATED `roles.subagent.thinking`, else the host's current level), as the run-workflow