@sema-agent/core 7.3.1 → 7.4.0

package/dist/tools/fs/safety.d.ts

@@ -138,6 +138,18 @@ export declare function isAbsolutePathForm(p: string): boolean;
  * imports are `node:crypto` plus a type, so there is no layering wall between them.
  */
 export declare function isWinFormPath(p: string): boolean;
+/**
+ * Expand a LEADING `~` (bare, or followed by a separator of either family) against `home`; every other
+ * spelling is returned untouched — a `~` anywhere but the front is an ordinary filename character.
+ *
+ * Lives here for the same reason `isWinFormPath` does: it is a path-FAMILY decision (which characters
+ * end the first component), and the domain gate holds this module as the one home for those. Callers
+ * that need it: the sensitive-path guard's data-root resolution, and — spelled privately for now —
+ * `tool-policy.ts`'s `lexicalPath`. NOT a resolution of relative paths: a caller that also needs that
+ * says so with its own `resolve`, because the two consumers of this value disagree about which cwd a
+ * relative spelling belongs to and that disagreement is theirs to state, not this helper's to hide.
+ */
+export declare function expandHomeTilde(p: string, home: string): string;
 export declare function isBlockedDevicePath(key: string): boolean;
 /**
  * RB-153 — purely LEXICAL path normalization: collapse repeated separators, drop `.` segments, and
@@ -335,16 +347,25 @@ export declare function withinAnyRoot(rootsCanonical: readonly string[], p: stri
 /**
  * RB-371 ① — the escape-hatch tail for the `path_not_in_root` refusal: its three sibling hints
  * below each name a sanctioned next step; this refusal named none, leaving the model to oscillate
- * between "the boundary is hard" and discovering by trial that bash is not confined by it.
+ * between "the boundary is hard" and hunting for a way around it.
+ *
+ * The card names the SANCTIONED way out and nothing else: widening the declaration
+ * (`additionalDirectories` / read-only `additionalReadDirectories`, design/119), or the
+ * deployment-level `readFace: "open"` for reads.
  *
- * Ordering is deliberate (ruled 2026-08-12, fence = the deployment's declared containment
- * boundary): the SANCTIONED way out — widening the declaration (`additionalDirectories` /
- * read-only `additionalReadDirectories`, design/119) — leads; the Bash sentence stays as a FACT
- * (the shell genuinely is not confined by this fence — design/44 §5 — and omitting that would
- * just let the model discover it by trial), but it is a statement, not a recommendation, and it
- * comes last. Every shell call still passes the deployment's approval policy.
+ * A trailing sentence naming the shell as unconfined by this fence was REMOVED (it had been kept on
+ * the argument that a statement of fact is not a recommendation, and that omitting it would only let
+ * the model discover the same thing by trial). A live retest settled that argument the other way: a
+ * refused agent read the sentence as the next step, went to the shell, and rewrote through it the
+ * very file the fence had just protected. A refusal card is a PROMPT surface — naming, at the moment
+ * of denial, a second tool that does not enforce the boundary is a recipe whatever its grammar, and
+ * the model cannot be relied on to hear "fact, not advice". The underlying fact is unchanged and
+ * still documented where humans read it (design/44 §5: the shell is deliberately unconfined by this
+ * fence, and every shell call still passes the deployment's approval policy); it is simply no longer
+ * handed to the model inside a denial. What the card says now: this is denied, and here is the
+ * sanctioned way to be allowed.
  */
-export declare const PATH_NOT_IN_ROOT_ESCAPE_HINT = "(This boundary applies to the structured file tools. If you genuinely need content outside the allowed root(s), ask for the directory to be added to the deployment's additionalDirectories \u2014 or additionalReadDirectories for read-only access; a deployment that wants reads open everywhere can declare readFace: \"open\" instead of listing directories. For completeness: the Bash tool is not confined by this fence, and every Bash call remains subject to the deployment's approval policy.)";
+export declare const PATH_NOT_IN_ROOT_ESCAPE_HINT = "(This boundary applies to the structured file tools. If you genuinely need content outside the allowed root(s), ask for the directory to be added to the deployment's additionalDirectories \u2014 or additionalReadDirectories for read-only access; a deployment that wants reads open everywhere can declare readFace: \"open\" instead of listing directories.)";
 /** inv 1 (read-before-edit): a file must have been read this task before it can be edited/overwritten.
  *  Message is CC 2.1.198 live-verbatim (all-tools-live-probe 2026-07-08 §2.1/§3.1/§5.1 — one message for
  *  Edit/Write/NotebookEdit: "before writing to it", not the old sema "before editing").

package/dist/tools/fs/safety.js

@@ -53,6 +53,16 @@ const WIN_RESERVED_RE = /^(CON|PRN|AUX|NUL|COM[0-9¹²³]|LPT[0-9¹²³]|CONIN\$
 export function isWinFormPath(p) {
     return /^[A-Za-z]:[\\/]/.test(p) || p.startsWith("\\\\") || (!p.startsWith("/") && p.includes("\\"));
 }
+export function expandHomeTilde(p, home) {
+    if (p === "~")
+        return home;
+    if (!p.startsWith("~"))
+        return p;
+    const next = p[1];
+    if (next !== "/" && next !== "\\")
+        return p;
+    return home + "/" + p.slice(2);
+}
 function isWinReservedDeviceKey(key) {
     if (!isWinFormPath(key))
         return false;
@@ -493,7 +503,7 @@ export function violationDetails(v) {
 export function withinAnyRoot(rootsCanonical, p) {
     return rootsCanonical.some((r) => within(r, p));
 }
-export const PATH_NOT_IN_ROOT_ESCAPE_HINT = "(This boundary applies to the structured file tools. If you genuinely need content outside the allowed root(s), ask for the directory to be added to the deployment's additionalDirectories — or additionalReadDirectories for read-only access; a deployment that wants reads open everywhere can declare readFace: \"open\" instead of listing directories. For completeness: the Bash tool is not confined by this fence, and every Bash call remains subject to the deployment's approval policy.)";
+export const PATH_NOT_IN_ROOT_ESCAPE_HINT = "(This boundary applies to the structured file tools. If you genuinely need content outside the allowed root(s), ask for the directory to be added to the deployment's additionalDirectories — or additionalReadDirectories for read-only access; a deployment that wants reads open everywhere can declare readFace: \"open\" instead of listing directories.)";
 export function requireRead(state, key) {
     const entry = state.get(key);
     if (entry === undefined || entry.isPartialView) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.3.1",
+  "version": "7.4.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 1964,
+  "count": 2048,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -33,6 +33,8 @@
     "AUTO_MODE_ARM_REASONS": "variable",
     "AUTO_MODE_BASE_PROMPT": "variable",
     "AUTO_MODE_DEFAULTS_SENTINEL": "variable",
+    "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "variable",
+    "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "variable",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "variable",
     "AcquiredSession": "interface",
     "ActiveWorktreeSession": "interface",
@@ -88,6 +90,8 @@
     "AutoModeClassifyInput": "interface",
     "AutoModeDecider": "interface",
     "AutoModeDeciderOptions": "interface",
+    "AutoModeDenialLimitOptions": "interface",
+    "AutoModeDenialTracker": "interface",
     "AutoModeRebuildOptions": "interface",
     "AutoModeRebuildRefusal": "type",
     "AutoModeRebuildResult": "type",
@@ -158,6 +162,8 @@
     "CONTRACT_KIT_ENGINE_VERSION": "variable",
     "COORDINATOR_ROLE_PROMPT": "variable",
     "CROSS_SESSION_CLASSIFIER_RULE": "variable",
+    "CROSS_SESSION_DIALOG_EXPIRY_DEFAULT": "variable",
+    "CROSS_SESSION_DIALOG_EXPIRY_VALUES": "variable",
     "CROSS_SESSION_HOLD_CAUSES": "variable",
     "CROSS_SESSION_INBOUND_SETTINGS": "variable",
     "CROSS_SESSION_MESSAGE_NOTICE": "variable",
@@ -259,6 +265,7 @@
     "ControlPlaneRebuildReceipt": "interface",
     "CoreCompatRange": "interface",
     "CrossSessionCodecError": "class",
+    "CrossSessionDialogExpiry": "type",
     "CrossSessionEnvelopeFields": "interface",
     "CrossSessionEnvelopeParse": "type",
     "CrossSessionEnvelopeRefusal": "type",
@@ -304,6 +311,8 @@
     "DegradingBrainOptions": "type",
     "DelegationLifecycleEvent": "type",
     "DelegationTaskType": "type",
+    "DenialLimitFallback": "interface",
+    "DenialLimitVerdict": "type",
     "DeveloperTaskConfig": "interface",
     "DistillerCandidate": "interface",
     "DistillerChatAnswer": "interface",
@@ -366,6 +375,8 @@
     "FileBackupCapture": "type",
     "FileCheckpointStore": "class",
     "FileCheckpointStoreOptions": "interface",
+    "FileEditedHook": "type",
+    "FileEditedNotice": "interface",
     "FileError": "class",
     "FileErrorCode": "type",
     "FileFileHistoryStore": "class",
@@ -521,6 +532,7 @@
     "MAILBOX_CROSS_PROCESS_UNSAFE_CODE": "variable",
     "MAILBOX_INVALID_PEER_META_CODE": "variable",
     "MAILBOX_PEER_FROM_MODES": "variable",
+    "MAILBOX_PEER_NOTICE_STATES": "variable",
     "MAILBOX_PEER_RECORD_KINDS": "variable",
     "MAILBOX_TOMBSTONED_RECIPIENT_CODE": "variable",
     "MASS_DELETION_FUSE_RATIO": "variable",
@@ -572,6 +584,8 @@
     "MailboxMessage": "interface",
     "MailboxPeerFromMode": "type",
     "MailboxPeerMeta": "interface",
+    "MailboxPeerNoticeMeta": "interface",
+    "MailboxPeerNoticeState": "type",
     "MailboxPeerRecordKind": "type",
     "MailboxStore": "interface",
     "MailboxStoreError": "class",
@@ -714,9 +728,22 @@
     "PARK_SELFCHECK_SCOPE_PREFIX": "variable",
     "PEER_ADDRESS_PREFIXES": "variable",
     "PEER_ADMISSION_DEFAULTS": "variable",
+    "PEER_DELIVERY_RECEIPT_STATES": "variable",
+    "PEER_DROP_REASONS": "variable",
+    "PEER_HELD_QUEUE_CAP": "variable",
+    "PEER_HELD_REVIEW_CAUSES": "variable",
     "PEER_HOP_CHAIN_CARRY_WINDOW": "variable",
     "PEER_HOP_CHAIN_WINDOW": "variable",
     "PEER_HOP_TOKEN_HEX": "variable",
+    "PEER_IDLE_FIRE_DEBOUNCE_MS": "variable",
+    "PEER_IDLE_HELD_BACKOFF_MS": "variable",
+    "PEER_IDLE_LABEL_MAX": "variable",
+    "PEER_IDLE_NOTICE_KINDS": "variable",
+    "PEER_IDLE_OUTSTANDING_CAP": "variable",
+    "PEER_IDLE_PRIORS_KEPT": "variable",
+    "PEER_IDLE_SUBSCRIBER_TABLE_CAP": "variable",
+    "PEER_IDLE_SUBSCRIPTION_TTL_MS": "variable",
+    "PEER_IDLE_UNAVAILABLE_CAUSES": "variable",
     "PEER_MESSAGE_NOTICE": "variable",
     "PEER_REF_MAX": "variable",
     "PEER_REF_MIN": "variable",
@@ -758,12 +785,36 @@
     "PeerAdmissionStage": "type",
     "PeerAdmissionVerdict": "type",
     "PeerAxisTag": "type",
+    "PeerClock": "interface",
+    "PeerDeliveryReceiptState": "type",
     "PeerDirectory": "interface",
     "PeerDirectoryAccess": "interface",
+    "PeerDropReason": "type",
+    "PeerHeldEntry": "interface",
+    "PeerHeldQueue": "interface",
+    "PeerHeldQueueConfig": "interface",
+    "PeerHeldQueueSink": "interface",
+    "PeerHeldSettleOutcome": "type",
+    "PeerHeldSettleReason": "type",
+    "PeerHeldSettlement": "type",
     "PeerIdentity": "interface",
+    "PeerIdleMachine": "interface",
+    "PeerIdleNoticeFields": "interface",
+    "PeerIdleNoticeKind": "type",
+    "PeerIdleOutstanding": "interface",
+    "PeerIdleRequester": "interface",
+    "PeerIdleRequesterSink": "interface",
+    "PeerIdleSubscribeOutcome": "type",
+    "PeerIdleSubscriber": "interface",
+    "PeerIdleTarget": "interface",
+    "PeerIdleTargetNotice": "interface",
+    "PeerIdleTargetSink": "interface",
     "PeerInboundChainRef": "interface",
+    "PeerInboundDisposition": "type",
+    "PeerInboundHoldCause": "type",
     "PeerLaneMountVerdict": "type",
     "PeerLivenessProbe": "interface",
+    "PeerNoticeRoute": "interface",
     "PeerRefEntry": "interface",
     "PeerRefusalCode": "type",
     "PeerRegistryDirectoryRefusal": "type",
@@ -921,6 +972,7 @@
     "ReportedFinding": "interface",
     "ResolveExpectation": "interface",
     "ResolvedAsk": "type",
+    "ResolvedCrossSessionDialogExpiry": "interface",
     "ResolvedCrossSessionInboundSetting": "interface",
     "ResolvedDelegationEntryCaps": "interface",
     "ResolvedOutcome": "interface",
@@ -1452,6 +1504,7 @@
     "createAskUserQuestionTool": "function",
     "createAssistantMessageEventStream": "function",
     "createAutoModeDecider": "function",
+    "createAutoModeDenialTracker": "function",
     "createCcFileMailboxStore": "function",
     "createCcFileTaskListStore": "function",
     "createCcTeamsRosterAdapter": "function",
@@ -1476,6 +1529,9 @@
     "createOpenResponsesBrain": "function",
     "createOrgRuleOverlay": "function",
     "createPeerAdmission": "function",
+    "createPeerHeldQueue": "function",
+    "createPeerIdleRequester": "function",
+    "createPeerIdleTarget": "function",
     "createPeerInboundChainRef": "function",
     "createPeerSelfRef": "function",
     "createPermissionRulePolicy": "function",
@@ -1514,6 +1570,8 @@
     "defineAgent": "function",
     "defineTool": "function",
     "delimitUntrusted": "function",
+    "denialLimitFallbackMessage": "function",
+    "denialLimitSentence": "function",
     "deploymentReadFaceClampNotice": "function",
     "deriveAgentDisplayStatus": "function",
     "deriveAskEffective": "function",
@@ -1530,6 +1588,9 @@
     "describeConfigCatalog": "function",
     "describeCrossSessionHoldCause": "function",
     "describeDefaultPack": "function",
+    "describePeerDeliveryReceipt": "function",
+    "describePeerDropReasons": "function",
+    "describePeerIdleSubscription": "function",
     "describeStaticWiring": "function",
     "detectCleanArmVerbatimLeak": "function",
     "detectSecret": "function",
@@ -1592,6 +1653,7 @@
     "formatOrgScope": "function",
     "formatOutOfRootReadApprovalOption": "function",
     "formatPeerNameRef": "function",
+    "formatPeerNoticeClock": "function",
     "formatProjScope": "function",
     "formatProjectMarker": "function",
     "formatToolError": "function",
@@ -1628,6 +1690,8 @@
     "isIsolated": "function",
     "isModelGatedForClass": "function",
     "isNamespacedCoveringRuleName": "function",
+    "isPeerDeliveryReceiptState": "function",
+    "isPeerIdleNoticeKind": "function",
     "isPeerSessionId": "function",
     "isPeerSessionProcessAlive": "function",
     "isPermissionModeClass": "function",
@@ -1750,6 +1814,17 @@
     "peekMemoryAnnouncements": "function",
     "peerAdmissionFor": "function",
     "peerAxisToken": "function",
+    "peerDeliveryReceiptLabel": "function",
+    "peerHeldQueueFor": "function",
+    "peerHeldQueueIfAny": "function",
+    "peerHeldQueueKey": "function",
+    "peerIdleDetailOf": "function",
+    "peerIdleMachineFor": "function",
+    "peerIdleMachineIfAny": "function",
+    "peerIdleMachineKey": "function",
+    "peerIdleNoticeLabel": "function",
+    "peerIdleNoticeSummary": "function",
+    "peerRecipientSuffix": "function",
     "peerSendVerdictSeverity": "function",
     "peerSessionBoxHandle": "function",
     "permissionRuleSyncContract": "function",
@@ -1783,6 +1858,7 @@
     "readSessionCaptureOptOut": "function",
     "readUsageRecord": "function",
     "readV2HeaderHints": "function",
+    "realPeerClock": "variable",
     "reasoningBudgetShare": "function",
     "rebuildAutoModeDecider": "function",
     "rebuildStrictControlPlaneLedger": "function",
@@ -1803,7 +1879,11 @@
     "renderAnnouncements": "function",
     "renderAutoModeAction": "function",
     "renderAutoModeWindow": "function",
+    "renderCrossSessionDeliveryNotice": "function",
+    "renderCrossSessionDroppedNotice": "function",
+    "renderCrossSessionIdleNotice": "function",
     "renderCrossSessionMessageFrame": "function",
+    "renderCrossSessionNoticeLine": "function",
     "renderNamedWorkflowListing": "function",
     "renderTaskNotificationXml": "function",
     "renderUntrustedCommandText": "function",
@@ -1817,6 +1897,7 @@
     "resolveBinary": "function",
     "resolveBuiltinWorkflow": "function",
     "resolveComplianceDenies": "function",
+    "resolveCrossSessionDialogExpiry": "function",
     "resolveCrossSessionInboundSetting": "function",
     "resolveDataRoot": "function",
     "resolveDeclaredDurability": "function",
@@ -1850,6 +1931,9 @@
     "retryBackoffMs": "function",
     "riskSeverity": "function",
     "routePairingStatus": "function",
+    "routePeerDeliveryReceipt": "function",
+    "routePeerDroppedReceipt": "function",
+    "routePeerIdleNotice": "function",
     "routeRefusalText": "function",
     "ruleAdmitsCommand": "function",
     "ruleOffersOfRecord": "function",
@@ -1999,6 +2083,8 @@
     "AUTO_MODE_ARM_REASONS": "advanced",
     "AUTO_MODE_BASE_PROMPT": "advanced",
     "AUTO_MODE_DEFAULTS_SENTINEL": "advanced",
+    "AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS": "advanced",
+    "AUTO_MODE_DENIAL_LIMIT_DEFAULTS": "advanced",
     "AUTO_MODE_PERMISSIONS_EXTERNAL": "advanced",
     "AcquiredSession": "advanced",
     "ActiveWorktreeSession": "internal",
@@ -2054,6 +2140,8 @@
     "AutoModeClassifyInput": "advanced",
     "AutoModeDecider": "advanced",
     "AutoModeDeciderOptions": "advanced",
+    "AutoModeDenialLimitOptions": "advanced",
+    "AutoModeDenialTracker": "advanced",
     "AutoModeRebuildOptions": "advanced",
     "AutoModeRebuildRefusal": "advanced",
     "AutoModeRebuildResult": "advanced",
@@ -2124,6 +2212,8 @@
     "CONTRACT_KIT_ENGINE_VERSION": "advanced",
     "COORDINATOR_ROLE_PROMPT": "advanced",
     "CROSS_SESSION_CLASSIFIER_RULE": "advanced",
+    "CROSS_SESSION_DIALOG_EXPIRY_DEFAULT": "advanced",
+    "CROSS_SESSION_DIALOG_EXPIRY_VALUES": "advanced",
     "CROSS_SESSION_HOLD_CAUSES": "advanced",
     "CROSS_SESSION_INBOUND_SETTINGS": "advanced",
     "CROSS_SESSION_MESSAGE_NOTICE": "advanced",
@@ -2225,6 +2315,7 @@
     "ControlPlaneRebuildReceipt": "advanced",
     "CoreCompatRange": "advanced",
     "CrossSessionCodecError": "advanced",
+    "CrossSessionDialogExpiry": "advanced",
     "CrossSessionEnvelopeFields": "advanced",
     "CrossSessionEnvelopeParse": "advanced",
     "CrossSessionEnvelopeRefusal": "advanced",
@@ -2270,6 +2361,8 @@
     "DegradingBrainOptions": "advanced",
     "DelegationLifecycleEvent": "advanced",
     "DelegationTaskType": "advanced",
+    "DenialLimitFallback": "advanced",
+    "DenialLimitVerdict": "advanced",
     "DeveloperTaskConfig": "advanced",
     "DistillerCandidate": "advanced",
     "DistillerChatAnswer": "advanced",
@@ -2332,6 +2425,8 @@
     "FileBackupCapture": "advanced",
     "FileCheckpointStore": "stable",
     "FileCheckpointStoreOptions": "advanced",
+    "FileEditedHook": "advanced",
+    "FileEditedNotice": "advanced",
     "FileError": "stable",
     "FileErrorCode": "internal",
     "FileFileHistoryStore": "advanced",
@@ -2487,6 +2582,7 @@
     "MAILBOX_CROSS_PROCESS_UNSAFE_CODE": "advanced",
     "MAILBOX_INVALID_PEER_META_CODE": "advanced",
     "MAILBOX_PEER_FROM_MODES": "advanced",
+    "MAILBOX_PEER_NOTICE_STATES": "advanced",
     "MAILBOX_PEER_RECORD_KINDS": "advanced",
     "MAILBOX_TOMBSTONED_RECIPIENT_CODE": "advanced",
     "MASS_DELETION_FUSE_RATIO": "advanced",
@@ -2538,6 +2634,8 @@
     "MailboxMessage": "advanced",
     "MailboxPeerFromMode": "advanced",
     "MailboxPeerMeta": "advanced",
+    "MailboxPeerNoticeMeta": "advanced",
+    "MailboxPeerNoticeState": "advanced",
     "MailboxPeerRecordKind": "advanced",
     "MailboxStore": "advanced",
     "MailboxStoreError": "advanced",
@@ -2680,9 +2778,22 @@
     "PARK_SELFCHECK_SCOPE_PREFIX": "advanced",
     "PEER_ADDRESS_PREFIXES": "advanced",
     "PEER_ADMISSION_DEFAULTS": "advanced",
+    "PEER_DELIVERY_RECEIPT_STATES": "advanced",
+    "PEER_DROP_REASONS": "advanced",
+    "PEER_HELD_QUEUE_CAP": "advanced",
+    "PEER_HELD_REVIEW_CAUSES": "advanced",
     "PEER_HOP_CHAIN_CARRY_WINDOW": "advanced",
     "PEER_HOP_CHAIN_WINDOW": "advanced",
     "PEER_HOP_TOKEN_HEX": "advanced",
+    "PEER_IDLE_FIRE_DEBOUNCE_MS": "advanced",
+    "PEER_IDLE_HELD_BACKOFF_MS": "advanced",
+    "PEER_IDLE_LABEL_MAX": "advanced",
+    "PEER_IDLE_NOTICE_KINDS": "advanced",
+    "PEER_IDLE_OUTSTANDING_CAP": "advanced",
+    "PEER_IDLE_PRIORS_KEPT": "advanced",
+    "PEER_IDLE_SUBSCRIBER_TABLE_CAP": "advanced",
+    "PEER_IDLE_SUBSCRIPTION_TTL_MS": "advanced",
+    "PEER_IDLE_UNAVAILABLE_CAUSES": "advanced",
     "PEER_MESSAGE_NOTICE": "advanced",
     "PEER_REF_MAX": "advanced",
     "PEER_REF_MIN": "advanced",
@@ -2724,12 +2835,36 @@
     "PeerAdmissionStage": "advanced",
     "PeerAdmissionVerdict": "advanced",
     "PeerAxisTag": "advanced",
+    "PeerClock": "advanced",
+    "PeerDeliveryReceiptState": "advanced",
     "PeerDirectory": "advanced",
     "PeerDirectoryAccess": "advanced",
+    "PeerDropReason": "advanced",
+    "PeerHeldEntry": "advanced",
+    "PeerHeldQueue": "advanced",
+    "PeerHeldQueueConfig": "advanced",
+    "PeerHeldQueueSink": "advanced",
+    "PeerHeldSettleOutcome": "advanced",
+    "PeerHeldSettleReason": "advanced",
+    "PeerHeldSettlement": "advanced",
     "PeerIdentity": "advanced",
+    "PeerIdleMachine": "advanced",
+    "PeerIdleNoticeFields": "advanced",
+    "PeerIdleNoticeKind": "advanced",
+    "PeerIdleOutstanding": "advanced",
+    "PeerIdleRequester": "advanced",
+    "PeerIdleRequesterSink": "advanced",
+    "PeerIdleSubscribeOutcome": "advanced",
+    "PeerIdleSubscriber": "advanced",
+    "PeerIdleTarget": "advanced",
+    "PeerIdleTargetNotice": "advanced",
+    "PeerIdleTargetSink": "advanced",
     "PeerInboundChainRef": "advanced",
+    "PeerInboundDisposition": "advanced",
+    "PeerInboundHoldCause": "advanced",
     "PeerLaneMountVerdict": "advanced",
     "PeerLivenessProbe": "advanced",
+    "PeerNoticeRoute": "advanced",
     "PeerRefEntry": "advanced",
     "PeerRefusalCode": "advanced",
     "PeerRegistryDirectoryRefusal": "advanced",
@@ -2887,6 +3022,7 @@
     "ReportedFinding": "internal",
     "ResolveExpectation": "stable",
     "ResolvedAsk": "advanced",
+    "ResolvedCrossSessionDialogExpiry": "advanced",
     "ResolvedCrossSessionInboundSetting": "advanced",
     "ResolvedDelegationEntryCaps": "advanced",
     "ResolvedOutcome": "stable",
@@ -3418,6 +3554,7 @@
     "createAskUserQuestionTool": "advanced",
     "createAssistantMessageEventStream": "stable",
     "createAutoModeDecider": "advanced",
+    "createAutoModeDenialTracker": "advanced",
     "createCcFileMailboxStore": "advanced",
     "createCcFileTaskListStore": "advanced",
     "createCcTeamsRosterAdapter": "advanced",
@@ -3442,6 +3579,9 @@
     "createOpenResponsesBrain": "advanced",
     "createOrgRuleOverlay": "stable",
     "createPeerAdmission": "advanced",
+    "createPeerHeldQueue": "advanced",
+    "createPeerIdleRequester": "advanced",
+    "createPeerIdleTarget": "advanced",
     "createPeerInboundChainRef": "advanced",
     "createPeerSelfRef": "advanced",
     "createPermissionRulePolicy": "advanced",
@@ -3480,6 +3620,8 @@
     "defineAgent": "stable",
     "defineTool": "stable",
     "delimitUntrusted": "advanced",
+    "denialLimitFallbackMessage": "advanced",
+    "denialLimitSentence": "advanced",
     "deploymentReadFaceClampNotice": "advanced",
     "deriveAgentDisplayStatus": "advanced",
     "deriveAskEffective": "advanced",
@@ -3496,6 +3638,9 @@
     "describeConfigCatalog": "advanced",
     "describeCrossSessionHoldCause": "advanced",
     "describeDefaultPack": "advanced",
+    "describePeerDeliveryReceipt": "advanced",
+    "describePeerDropReasons": "advanced",
+    "describePeerIdleSubscription": "advanced",
     "describeStaticWiring": "stable",
     "detectCleanArmVerbatimLeak": "advanced",
     "detectSecret": "advanced",
@@ -3558,6 +3703,7 @@
     "formatOrgScope": "advanced",
     "formatOutOfRootReadApprovalOption": "advanced",
     "formatPeerNameRef": "advanced",
+    "formatPeerNoticeClock": "advanced",
     "formatProjScope": "stable",
     "formatProjectMarker": "stable",
     "formatToolError": "advanced",
@@ -3594,6 +3740,8 @@
     "isIsolated": "advanced",
     "isModelGatedForClass": "advanced",
     "isNamespacedCoveringRuleName": "advanced",
+    "isPeerDeliveryReceiptState": "advanced",
+    "isPeerIdleNoticeKind": "advanced",
     "isPeerSessionId": "advanced",
     "isPeerSessionProcessAlive": "advanced",
     "isPermissionModeClass": "advanced",
@@ -3716,6 +3864,17 @@
     "peekMemoryAnnouncements": "advanced",
     "peerAdmissionFor": "advanced",
     "peerAxisToken": "advanced",
+    "peerDeliveryReceiptLabel": "advanced",
+    "peerHeldQueueFor": "advanced",
+    "peerHeldQueueIfAny": "advanced",
+    "peerHeldQueueKey": "advanced",
+    "peerIdleDetailOf": "advanced",
+    "peerIdleMachineFor": "advanced",
+    "peerIdleMachineIfAny": "advanced",
+    "peerIdleMachineKey": "advanced",
+    "peerIdleNoticeLabel": "advanced",
+    "peerIdleNoticeSummary": "advanced",
+    "peerRecipientSuffix": "advanced",
     "peerSendVerdictSeverity": "advanced",
     "peerSessionBoxHandle": "advanced",
     "permissionRuleSyncContract": "advanced",
@@ -3749,6 +3908,7 @@
     "readSessionCaptureOptOut": "advanced",
     "readUsageRecord": "advanced",
     "readV2HeaderHints": "advanced",
+    "realPeerClock": "advanced",
     "reasoningBudgetShare": "advanced",
     "rebuildAutoModeDecider": "advanced",
     "rebuildStrictControlPlaneLedger": "advanced",
@@ -3769,7 +3929,11 @@
     "renderAnnouncements": "advanced",
     "renderAutoModeAction": "advanced",
     "renderAutoModeWindow": "advanced",
+    "renderCrossSessionDeliveryNotice": "advanced",
+    "renderCrossSessionDroppedNotice": "advanced",
+    "renderCrossSessionIdleNotice": "advanced",
     "renderCrossSessionMessageFrame": "advanced",
+    "renderCrossSessionNoticeLine": "advanced",
     "renderNamedWorkflowListing": "advanced",
     "renderTaskNotificationXml": "advanced",
     "renderUntrustedCommandText": "advanced",
@@ -3783,6 +3947,7 @@
     "resolveBinary": "advanced",
     "resolveBuiltinWorkflow": "advanced",
     "resolveComplianceDenies": "advanced",
+    "resolveCrossSessionDialogExpiry": "advanced",
     "resolveCrossSessionInboundSetting": "advanced",
     "resolveDataRoot": "advanced",
     "resolveDeclaredDurability": "advanced",
@@ -3816,6 +3981,9 @@
     "retryBackoffMs": "advanced",
     "riskSeverity": "advanced",
     "routePairingStatus": "advanced",
+    "routePeerDeliveryReceipt": "advanced",
+    "routePeerDroppedReceipt": "advanced",
+    "routePeerIdleNotice": "advanced",
     "routeRefusalText": "advanced",
     "ruleAdmitsCommand": "advanced",
     "ruleOffersOfRecord": "advanced",