@sema-agent/core 7.35.2 → 7.37.0

package/dist/core/tool-roster.d.ts

@@ -257,11 +257,11 @@ export declare function rosterEntryNamed(roster: ToolRoster, toolName: string):
  * an alias and one written against the wire name are one rule.
  */
 export declare function rosterToolName(roster: ToolRoster | undefined, name: string): string;
-export { anyNamed, callAnswersTo, firstNamed, ruleNamesOf, toolNameSetHas } from "./tool-registry.js";
+export { ruleNamesOf } from "./tool-name-readings.js";
 /** design/388 B6 — the per-call face a gated request carries, read off a roster snapshot by name (aliases resolve).
  *  `names` leads with the name the face was minted under (the model's spelling at the gate), then the wire name and the
- *  other aliases: a reader that must pick ONE of the call's names (the protective path floor) picks the spelling first,
- *  as the same call was judged before name resolution. */
+ *  other aliases — the ONE order of a call's names: a reader that must pick one of them by position (a `member` seat)
+ *  picks the spelling first, as the same call was judged before name resolution. */
 export declare function toolCallFaceOf(roster: ToolRoster | undefined, toolName: string): import("./tool-policy.js").ToolCallFace | undefined;
 /** design/388 B18 — the identity members a park row carries, read off a roster snapshot by name; an empty object when
  *  the name is not on the snapshot (the row then reads pre-identity and the resume takes the name-only path). */
@@ -272,16 +272,30 @@ export declare function parkedToolIdentity(roster: ToolRoster | undefined, toolN
     implementationRevision?: string;
     rosterDigest?: string;
 };
-/** design/388 B6 × B18 (merge-seam adversarial round H1) — the FACE members a park row carries beside its identity:
- *  the display family and the declared path target the parked call was judged under. A recheck that runs before
- *  the leg's roster exists (the pre-CAS resume-edit re-adjudication) rebuilds the call face from the row through
- *  {@link parkedCallFaceOf}, so it judges the same object the live gate judged. An empty object when the name is
- *  not on the snapshot (the row then reads pre-face and the recheck falls to the catalog for the name). */
-export declare function parkedToolFace(roster: ToolRoster | undefined, toolName: string): {
+/** design/388 B6 × B18 — the FACE members a park row carries beside its identity: the display family, the declared
+ *  path target and the names the parked call was judged under. `names` is copied from the face the gate stamped on the
+ *  request (the model's spelling first — the row carries the judged fact, it is not re-derived); a request with no face
+ *  takes the roster's names for its row. A recheck that runs before the leg's roster exists (the pre-CAS resume-edit
+ *  re-adjudication) rebuilds the call face from the row through {@link parkedCallFaceOf}, so it judges the same object
+ *  the live gate judged. An empty object when the name is not on the snapshot (the row then reads pre-face and the
+ *  recheck falls to the catalog for the name). */
+export declare function parkedToolFace(roster: ToolRoster | undefined, req: {
+    readonly toolName: string;
+    readonly face?: {
+        readonly names?: readonly string[];
+    } | undefined;
+}): {
     family?: ToolFamily;
     pathTarget?: ToolRosterEntry["pathTarget"];
     names?: readonly string[];
 };
+/** The live face a resumed park row is re-judged under: minted under the row's recorded spelling (`names[0]`) when that
+ *  spelling still resolves to the row's own tool on this roster, else under the row's wire name — a spelling that no
+ *  longer resolves, or that another row now owns, never lends the row another tool's face. */
+export declare function parkedRowLiveFace(roster: ToolRoster | undefined, row: {
+    readonly toolName: string;
+    readonly names?: readonly string[];
+}): import("./tool-policy.js").ToolCallFace | undefined;
 /** The call face a park row carries — present iff the row was minted with BOTH its face members and its four
  *  identity members (one mint writes all of them; a row missing any is pre-388 and yields undefined, never a
  *  partial face). This is the face every recheck of the row judges under, roster or no roster. */
@@ -443,6 +457,13 @@ export declare class RosterBuilder {
      *  yielded instance's position and never a row per object. */
     snapshot(facts: RosterSnapshotFacts): ToolRoster;
 }
+/**
+ * The roster's one declaration rule on engine names: a row whose names (its wire name and the aliases that resolve to it,
+ * {@link namesResolvingTo}) belong to TWO or more engine tools is refused — one tool answering as two engine tools would
+ * have every per-call seat keyed on engine names choose between two definitions of the call. A row answering to one engine
+ * tool under several of that tool's names, and an alias another row owns, are not counted twice. Undefined ⇒ none.
+ */
+export declare function rosterEngineNamesProblem(roster: ToolRoster): string | undefined;
 /** Which source a `TaskSpec.tools` entry mounts as: a definition carrying a CORE contract is a built-in the host chose
  *  to mount; anything else is the caller's own tool. Identity follows the object, never the name. */
 export declare function callerMountSource(tool: AgentTool): RosterSource;

package/dist/core/tool-roster.js

@@ -2,6 +2,7 @@ import { createHash } from "node:crypto";
 import { Type } from "typebox";
 import { getToolContract } from "../prompt-assembly/tool-catalog.js";
 import { protocolOf } from "./protocol-table.js";
+import { describeToolCatalog } from "./tool-registry.js";
 import { RENDER_HINT_ACTIVITY_MAX_CHARS, RENDER_HINT_MAX_CHARS, RENDER_HINT_MAX_LIST, TOOL_APPROVAL_CARDS, TOOL_CARD_ID_MAX_CHARS, TOOL_CONTRACT_MAX_CHARS, TOOL_FAMILIES, TOOL_KEYS_MAX, TOOL_KEY_MAX_CHARS, TOOL_MOUNT_TAGS, TOOL_WIRE_NAME_MAX_CHARS, TOOL_PATH_ABSENCES, TOOL_PATH_BASES, } from "./tool-face.js";
 function lit(values) {
     return Type.Union(values.map((v) => Type.Literal(v)));
@@ -80,7 +81,7 @@ export function rosterToolName(roster, name) {
 function namesResolvingTo(roster, e) {
     return [e.name, ...e.aliases.filter((a) => a !== e.name && rosterToolName(roster, a) === e.name)];
 }
-export { anyNamed, callAnswersTo, firstNamed, ruleNamesOf, toolNameSetHas } from "./tool-registry.js";
+export { ruleNamesOf } from "./tool-name-readings.js";
 export function toolCallFaceOf(roster, toolName) {
     if (roster === undefined)
         return undefined;
@@ -106,13 +107,19 @@ export function parkedToolIdentity(roster, toolName) {
         return {};
     return { capabilityId: e.capabilityId, contractId: e.contract.contractId, shapeDigest: e.shapeDigest, implementationRevision: e.contract.implementationRevision, rosterDigest: roster.digest };
 }
-export function parkedToolFace(roster, toolName) {
+export function parkedToolFace(roster, req) {
     if (roster === undefined)
         return {};
-    const e = rosterEntryNamed(roster, toolName);
+    const e = rosterEntryNamed(roster, req.toolName);
     if (e === undefined)
         return {};
-    return { family: e.family, ...(e.pathTarget !== undefined ? { pathTarget: e.pathTarget } : {}), names: namesResolvingTo(roster, e) };
+    const judged = req.face?.names;
+    return { family: e.family, ...(e.pathTarget !== undefined ? { pathTarget: e.pathTarget } : {}), names: judged !== undefined && judged.includes(req.toolName) ? [...judged] : namesResolvingTo(roster, e) };
+}
+export function parkedRowLiveFace(roster, row) {
+    const spelled = row.names?.[0];
+    const under = spelled !== undefined && roster !== undefined && rosterToolName(roster, spelled) === row.toolName ? spelled : row.toolName;
+    return toolCallFaceOf(roster, under);
 }
 export function parkedCallFaceOf(pending) {
     if (pending.family === undefined || pending.capabilityId === undefined || pending.contractId === undefined || pending.shapeDigest === undefined || pending.implementationRevision === undefined)
@@ -369,8 +376,41 @@ export class RosterBuilder {
             const meta = this.#meta.get(survivor) ?? { source: "caller", mountedBy: "scenario" };
             entries.push(mintRosterEntry(survivor, meta, facts));
         }
-        return { schemaVersion: 1, count: entries.length, entries, digest: rosterDigestOf(entries) };
+        const roster = { schemaVersion: 1, count: entries.length, entries, digest: rosterDigestOf(entries) };
+        const worn = rosterEngineNamesProblem(roster);
+        if (worn !== undefined)
+            throw configError("config.tool_face_invalid", worn);
+        return roster;
+    }
+}
+let catalogOwners;
+function catalogOwnerOf(name) {
+    if (catalogOwners === undefined) {
+        const owners = new Map();
+        for (const e of describeToolCatalog()) {
+            owners.set(e.name, e.name);
+            for (const a of e.face.aliases ?? [])
+                if (!owners.has(a))
+                    owners.set(a, e.name);
+        }
+        catalogOwners = owners;
     }
+    return catalogOwners.get(name);
+}
+export function rosterEngineNamesProblem(roster) {
+    for (const e of roster.entries) {
+        const resolving = namesResolvingTo(roster, e);
+        const worn = new Map();
+        for (const n of resolving) {
+            const owner = catalogOwnerOf(n);
+            if (owner !== undefined && !worn.has(owner))
+                worn.set(owner, n);
+        }
+        if (worn.size >= 2) {
+            return `tool ${JSON.stringify(e.name)} answers to the names of ${worn.size} engine tools (${[...worn.values()].map((n) => JSON.stringify(n)).join(", ")}): a tool may answer to at most one engine tool's names — keep one of those aliases`;
+        }
+    }
+    return undefined;
 }
 export function callerMountSource(tool) {
     return getToolContract(tool, "caller").origin === "core" ? "builtin" : "caller";

package/dist/engine/llm/types.d.ts

@@ -242,6 +242,10 @@ export interface DocumentContent {
 export interface ToolCall {
     type: "toolCall";
     id: string;
+    /** The provider's own spelling of {@link id}, present only when the brain folded it (`brain/tool-call-id.ts`);
+     *  handed back to the provider for the call and its result, persisted with the message. Upstream bytes: render
+     *  {@link id}. */
+    wireId?: string;
     name: string;
     arguments: Record<string, unknown>;
     executionMode?: "sequential" | "parallel";

package/dist/index.d.ts

@@ -192,7 +192,7 @@ export { createAllowDenyPolicy, createApprovalPolicy,
 type ApprovalSeatOutcome, COARSE_SHELL_TOOLS, createCoarseCommandNamePolicy, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, findUnverifiableRecursiveDelete, combinePolicies, wrapToolPolicy, decisionText, resolveAsk, toolPolicyNameSets, toolPolicyPathDenyRules, type ToolPolicyNameSets, type NamedToolPolicy, type ToolPolicyProjection, type ToolPolicyProjectionComponent, type ConstraintChainEntry, checkToolPolicyProjection, constraintChainEntryOf, constraintChainDigest, type ToolPolicy, type ToolCallRequest, type PermissionResult, type DecisionReason, screenApproverAttribution, APPROVER_ATTRIBUTION_MAX_CHARS, type OnAsk, type AskOutcome, type ResolvedAsk, type AskRequest, type AskDelegationProvenance, type AskRuleEvidence, type AskEvidenceAbsence, ASK_EVIDENCE_ABSENCE_VALUES, } from "./core/tool-policy.js";
 export { type ReadRootGrantScreen } from "./core/read-root-grant-screen.js";
 export { type AskOrigin, ASK_ORIGINS, isAskOrigin, ORIGIN_IMPLIES_REAL_APPROVAL, PERSISTED_RULE_MANDATES, type PersistedRuleMandate, isPersistedRuleMandate } from "./core/ask-origin.js";
-export { PERMISSION_MODES, type PermissionMode, isPermissionMode, PERMISSION_MODE_RANK, clampPermissionMode, ASK_CLASSES, type AskClass, isAskClass, MODE_ARBITRATION, type ModeArbitrationRow, RELEASABLE_ASK_CLASSES, RRA_EXPLAINERS, classifyAsk, foldArbitrationRow, type AskClassification, type AskClassFacts, type ToolMarkSource, arbitrateByMode, type Arbitration, fileCommandOptionsSentence } from "./core/ask-origin.js";
+export { PERMISSION_MODES, type PermissionMode, isPermissionMode, PERMISSION_MODE_RANK, clampPermissionMode, ASK_CLASSES, type AskClass, isAskClass, MODE_ARBITRATION, type ModeArbitrationRow, RELEASABLE_ASK_CLASSES, MODE_RELEASE_REASONS, type ModeReleaseReason, isModeReleaseReason, RRA_EXPLAINERS, classifyAsk, foldArbitrationRow, type AskClassification, type AskClassFacts, type ToolMarkSource, arbitrateByMode, type Arbitration, fileCommandOptionsSentence } from "./core/ask-origin.js";
 export { modePolicyOf, type ModePolicy, PERMISSION_MODE_FOLD_REASONS, type PermissionModeFoldReason, type PermissionModeReceipt, ACCEPT_EDITS_FILE_COMMANDS, modeAcceptsFileCommand } from "./core/mode-policy.js";
 export { readDenyClassifierRules, renderClassifierDenyRules, type DerivedDenyRule } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_DENY_SOURCES, isAutoModeDenySource, type AutoModeDenySource } from "./core/runtime-caps.js";

package/dist/index.js

@@ -157,7 +157,7 @@ export { tightenTaskSpec, TaskSpecTightenError } from "./core/tighten-task-spec.
 export { createAllowDenyPolicy, createApprovalPolicy, COARSE_SHELL_TOOLS, createCoarseCommandNamePolicy, createTranscriptIntegrityPolicy, createUnverifiableDeletePolicy, findUnverifiableRecursiveDelete, combinePolicies, wrapToolPolicy, decisionText, resolveAsk, toolPolicyNameSets, toolPolicyPathDenyRules, checkToolPolicyProjection, constraintChainEntryOf, constraintChainDigest, screenApproverAttribution, APPROVER_ATTRIBUTION_MAX_CHARS, ASK_EVIDENCE_ABSENCE_VALUES, } from "./core/tool-policy.js";
 export {} from "./core/read-root-grant-screen.js";
 export { ASK_ORIGINS, isAskOrigin, ORIGIN_IMPLIES_REAL_APPROVAL, PERSISTED_RULE_MANDATES, isPersistedRuleMandate } from "./core/ask-origin.js";
-export { PERMISSION_MODES, isPermissionMode, PERMISSION_MODE_RANK, clampPermissionMode, ASK_CLASSES, isAskClass, MODE_ARBITRATION, RELEASABLE_ASK_CLASSES, RRA_EXPLAINERS, classifyAsk, foldArbitrationRow, arbitrateByMode, fileCommandOptionsSentence } from "./core/ask-origin.js";
+export { PERMISSION_MODES, isPermissionMode, PERMISSION_MODE_RANK, clampPermissionMode, ASK_CLASSES, isAskClass, MODE_ARBITRATION, RELEASABLE_ASK_CLASSES, MODE_RELEASE_REASONS, isModeReleaseReason, RRA_EXPLAINERS, classifyAsk, foldArbitrationRow, arbitrateByMode, fileCommandOptionsSentence } from "./core/ask-origin.js";
 export { modePolicyOf, PERMISSION_MODE_FOLD_REASONS, ACCEPT_EDITS_FILE_COMMANDS, modeAcceptsFileCommand } from "./core/mode-policy.js";
 export { readDenyClassifierRules, renderClassifierDenyRules } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_DENY_SOURCES, isAutoModeDenySource } from "./core/runtime-caps.js";

package/dist/tools/fs/file-read-check.d.ts

@@ -15,7 +15,7 @@
 import type { ExecutionEnv } from "../../internal/harness-types.js";
 import type { ContainmentFace } from "./containment-face.js";
 import { type ReadDenyMatcher } from "./read-deny.js";
-import type { ShellReadCheck } from "./shell-read-check.js";
+import { type ShellReadCheck } from "./shell-read-check.js";
 export interface FileReadStation {
     readonly check: ShellReadCheck;
     /** The station's membership: the tool names whose declared read target it judges. */

package/dist/tools/fs/file-read-check.js

@@ -1,7 +1,8 @@
 import { effectivePathSpellingOf } from "../../core/effective-path-target.js";
-import { firstNamed, pathTargetOf, ruleNamesOf } from "../../core/tool-registry.js";
+import { pathTargetOf } from "../../core/tool-registry.js";
 import { fitMiddle, READ_DENY_SENTENCE_PART_MAX } from "./read-deny.js";
 import { resolveKey, violationDetails } from "./safety.js";
+import { readStationMemberOf } from "./shell-read-check.js";
 import { grantOfferFor, parentDirLexically } from "./shell-read-judge.js";
 const ADMISSION_MAX = 1024;
 const VOUCH = { disposition: "vouch", finding: "none" };
@@ -17,7 +18,7 @@ export function createFileReadStation(opts) {
     };
     const check = {
         judge(call, args, cwd, signal, callOpts) {
-            const member = ruleNamesOf(call).find((n) => opts.tools.has(n));
+            const member = readStationMemberOf(call, opts.tools)?.name;
             if (member === undefined)
                 return null;
             const toolName = call.toolName;
@@ -71,7 +72,7 @@ export function composeReadChecks(stations) {
         for (const n of s.tools)
             if (!byName.has(n))
                 byName.set(n, s);
-    const stationOf = (call) => firstNamed(byName, ruleNamesOf(call))?.value;
+    const stationOf = (call) => readStationMemberOf(call, byName)?.value;
     return {
         judge: (call, args, cwd, signal, callOpts) => stationOf(call)?.check.judge(call, args, cwd, signal, callOpts) ?? null,
         unanswered: (call, cause) => (stationOf(call) ?? stations[0]).check.unanswered(call, cause),

package/dist/tools/fs/shell-read-check.d.ts

@@ -22,7 +22,7 @@ import { violationDetails } from "./safety.js";
 import { type ShellReadPlan } from "./shell-read-plan.js";
 import { type EstablishedRead, type ShellReadBoundary, type ShellReadDisposition, type ShellReadFinding, type ShellReadSeat } from "./shell-read-judge.js";
 import type { ReadRootGrantCandidate } from "../../core/tool-spec.js";
-import { type ToolCallLike } from "../../core/tool-registry.js";
+import type { ToolCallLike } from "../../core/tool-registry.js";
 /** The ONE mint of the containment card — the targets a finding established OUTSIDE the roots (an out-of-root read, a
  *  target that resolves elsewhere by the spawn). */
 declare function containmentDetails(paths: readonly string[]): {
@@ -105,6 +105,20 @@ export interface ShellReadCheck {
 }
 /** The call a read station judges: its wire name and the face the gate stamped (whose `names` the station reads). */
 export type ReadStationCall = Pick<ToolCallLike, "toolName" | "face">;
+/** The read station a call belongs to — the first of its names (the spelling first) a station's membership holds; every
+ *  station reads the call's slot and seat under that one name. */
+export declare function readStationMemberOf<V>(call: ReadStationCall, members: {
+    get(name: string): V | undefined;
+}): {
+    readonly name: string;
+    readonly value: V;
+} | undefined;
+export declare function readStationMemberOf(call: ReadStationCall, members: {
+    has(name: string): boolean;
+}): {
+    readonly name: string;
+    readonly value: true;
+} | undefined;
 /** The pre-spawn admission the shell tools call: re-establishes what the station established for this
  *  call and refuses when any canonical target moved. `undefined` ⇒ spawn. A call the station never judged
  *  (no gate ran) has nothing to re-establish and spawns. */

package/dist/tools/fs/shell-read-check.js

@@ -8,7 +8,7 @@ import { planShellReads } from "./shell-read-plan.js";
 import { createShellReadEstablisher, establishShellReadsLexically } from "./shell-read-establish.js";
 import { programArgs, spellsOption } from "./shell-read-write-targets.js";
 import { allFindings, decideShellRead, denyRowAtOrBelow, foldShellReadFindings, judgeEstablishedPlan, readRootGrantCandidateOf, } from "./shell-read-judge.js";
-import { ruleNamesOf } from "../../core/tool-registry.js";
+import { seatOf } from "../../core/tool-name-readings.js";
 import { normalizeReadRootCandidate } from "../../core/read-root-candidate.js";
 import { argvOf, lexShellText } from "../../shell/lex.js";
 function containmentDetails(paths) {
@@ -178,6 +178,9 @@ async function writeGuardsOf(judged, boundary, placed, env, signal) {
     }
     return { unplaced, writeProtected };
 }
+export function readStationMemberOf(call, members) {
+    return seatOf("fold.readStation", members, call);
+}
 const ADMISSION_MAX = 1024;
 function shellCommandOf(args) {
     const command = args?.command;
@@ -360,7 +363,7 @@ export function createShellReadStation(opts) {
         }
         admissions.set(toolCallId, a);
     };
-    const memberOf = (call) => ruleNamesOf(call).find((n) => opts.tools.has(n));
+    const memberOf = (call) => readStationMemberOf(call, opts.tools)?.name;
     const check = {
         judge(call, args, cwd, signal, callOpts) {
             const member = memberOf(call);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/core",
-  "version": "7.35.2",
+  "version": "7.37.0",
   "description": "Stateless, task-oriented AI agent core",
   "type": "module",
   "license": "BUSL-1.1",
@@ -83,6 +83,7 @@
     "gate:contract-sentences": "node scripts/verify-contract-sentences.mjs",
     "gate:tool-catalog": "node scripts/verify-tool-catalog.mjs",
     "gate:tool-names": "node scripts/verify-tool-name-tables.mjs",
+    "gate:name-readings": "node scripts/verify-name-readings.mjs",
     "gate:tool-docs": "node scripts/gen-tool-spec-fields.mjs --check",
     "gate:backlog-ledger": "node scripts/verify-backlog-ledger.mjs",
     "gate:child-clamp-seats": "node scripts/verify-child-clamp-seats.mjs",

package/test/export-surface.snapshot.json

@@ -1,7 +1,7 @@
 {
   "_comment": "design/87 L3 — frozen public export surface of src/index.ts (name -> kind). DO NOT edit by hand to silence a red test. A removed/changed entry = a SemVer-BREAKING change; bump MAJOR and update this fixture in the SAME commit (design/87 §4.2 / §5.2). Regenerate via REGEN in test/export-surface.test.ts.",
   "_tierComment": "#435 v1 — machine-readable layering of the public surface: stable = demonstrated by README.md / src/examples; internal = an `Internal`-marked name or a runner/engine deep-subtree declaration (the model seam src/engine/llm is excluded — it is the BYOM contract, not an engine internal); advanced = a supported export the front door does not walk you through. THIS IS AN INITIAL HEURISTIC, derived mechanically and expected to be refined ticket by ticket: no human reviewed these 1700+ entries one by one, and nothing here claims otherwise. Known bias: a short or English-word export name (ok, err, Result, Usage) can match ordinary prose in README.md and land `stable` on a coincidence. Every export MUST carry a tier — a new export with no row fails the gate in export-surface.test.ts.",
-  "count": 2537,
+  "count": 2540,
   "exports": {
     "A2ATaskState": "type",
     "A2ATaskStateReversal": "type",
@@ -713,6 +713,7 @@
     "MEMORY_SEARCH_TOOL_NAME": "variable",
     "MODEL_ROLES": "variable",
     "MODE_ARBITRATION": "variable",
+    "MODE_RELEASE_REASONS": "variable",
     "MONITOR_BATCH_WINDOW_MS": "variable",
     "MONITOR_DEFAULT_TIMEOUT_MS": "variable",
     "MONITOR_MAX_BATCHES_PER_MINUTE": "variable",
@@ -822,6 +823,7 @@
     "ModePolicy": "interface",
     "ModeRefusal": "interface",
     "ModeRelease": "interface",
+    "ModeReleaseReason": "type",
     "Model": "interface",
     "ModelCriteria": "interface",
     "ModelMention": "interface",
@@ -2094,6 +2096,7 @@
     "isGateKind": "function",
     "isInstructionEntry": "function",
     "isIsolated": "function",
+    "isModeReleaseReason": "function",
     "isModelGatedForClass": "function",
     "isModelPriced": "function",
     "isNamespacedCoveringRuleName": "function",
@@ -3252,6 +3255,7 @@
     "MEMORY_SEARCH_TOOL_NAME": "advanced",
     "MODEL_ROLES": "advanced",
     "MODE_ARBITRATION": "advanced",
+    "MODE_RELEASE_REASONS": "advanced",
     "MONITOR_BATCH_WINDOW_MS": "advanced",
     "MONITOR_DEFAULT_TIMEOUT_MS": "advanced",
     "MONITOR_MAX_BATCHES_PER_MINUTE": "advanced",
@@ -3361,6 +3365,7 @@
     "ModePolicy": "advanced",
     "ModeRefusal": "advanced",
     "ModeRelease": "advanced",
+    "ModeReleaseReason": "advanced",
     "Model": "stable",
     "ModelCriteria": "advanced",
     "ModelMention": "advanced",
@@ -4633,6 +4638,7 @@
     "isGateKind": "advanced",
     "isInstructionEntry": "advanced",
     "isIsolated": "advanced",
+    "isModeReleaseReason": "advanced",
     "isModelGatedForClass": "advanced",
     "isModelPriced": "advanced",
     "isNamespacedCoveringRuleName": "advanced",

package/wire-changes/core@7.36.0.json

@@ -0,0 +1,288 @@
+{
+  "repo": "core",
+  "version": "7.36.0",
+  "from": "df0162002e59d5f355bda182d867378859405254",
+  "to": "e033cec051a178169a17a3f55d5fdaac98bedf2d",
+  "added": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "ENGINE_NOTICE_CODES",
+      "at": [
+        "src/core/governance-codes.ts:344"
+      ],
+      "newSet": false,
+      "added": [
+        "route.tool_call_id_folded"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "set": "ToolCallIdFoldReason",
+      "at": [
+        "src/brain/tool-call-id.ts:65"
+      ],
+      "newSet": true,
+      "added": [
+        "charset",
+        "length"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "AggregateBudgetOptions",
+      "at": [
+        "src/core/tool-result-budget.ts:86"
+      ],
+      "added": [
+        "toolNameOf"
+      ],
+      "addedDetail": [
+        {
+          "key": "toolNameOf",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ContextEditOptions",
+      "at": [
+        "src/core/context-edit.ts:240"
+      ],
+      "added": [
+        "toolNameOf"
+      ],
+      "addedDetail": [
+        {
+          "key": "toolNameOf",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "ToolCall",
+      "at": [
+        "src/engine/llm/types.ts:309"
+      ],
+      "added": [
+        "wireId"
+      ],
+      "addedDetail": [
+        {
+          "key": "wireId",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    }
+  ],
+  "typeKeysUnreadableArms": [],
+  "typeKeysFlattenedCount": 219,
+  "declarationMoves": [
+    {
+      "name": "PROVIDER_ECHO_SHAPE",
+      "kind": "variable",
+      "onSurface": true,
+      "from": [
+        "src/brain/errors.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/brain/errors.ts",
+        "src/brain/provider-echo-shape.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "isProviderEchoShape",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/brain/errors.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/brain/errors.ts",
+        "src/brain/provider-echo-shape.ts",
+        "src/index.ts"
+      ]
+    },
+    {
+      "name": "ruleNamesOf",
+      "kind": "function",
+      "onSurface": true,
+      "from": [
+        "src/core/tool-registry.ts",
+        "src/core/tool-roster.ts",
+        "src/index.ts"
+      ],
+      "to": [
+        "src/core/tool-name-readings.ts",
+        "src/core/tool-roster.ts",
+        "src/index.ts"
+      ]
+    }
+  ],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "engineNoticeCode",
+      "name": "route.tool_call_id_folded",
+      "assertions": [
+        "G8.b"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "message_committed.toolCallId",
+      "assertions": [
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.toolCallId",
+      "assertions": [
+        "G7.a",
+        "G8.a",
+        "G9.a",
+        "G10.a",
+        "G10.b"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.toolName",
+      "assertions": [
+        "G4.b"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_start.toolCallId",
+      "assertions": [
+        "G7.a",
+        "G7.b",
+        "G8.a",
+        "G9.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_start.toolName",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.riskAxes",
+      "assertions": [
+        "G1.a",
+        "G1.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "HookToolContext.toolName",
+      "assertions": [
+        "G2.a",
+        "G2.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "PostToolBatchCall.toolName",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "SideQueryResult.toolCalls",
+      "assertions": [
+        "G8.d"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "TaskResult.terminal",
+      "assertions": [
+        "G3.a",
+        "G3.b"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ToolCall.id",
+      "assertions": [
+        "G7.b",
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ToolCall.wireId",
+      "assertions": [
+        "G7.a",
+        "G8.a",
+        "G8.c",
+        "G10.a",
+        "G10.c"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ToolCallFace.names",
+      "assertions": [
+        "G4.a",
+        "G4.b",
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ToolSpec.effect",
+      "assertions": [
+        "G6.a"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "ContextEditOptions",
+      "ENGINE_NOTICE_CODES",
+      "ToolCall"
+    ],
+    "server": [
+      "ContextEditOptions",
+      "ENGINE_NOTICE_CODES"
+    ],
+    "sdk": [
+      "ENGINE_NOTICE_CODES"
+    ],
+    "note": "scanned cli@6b6025f7 server@25d6b7a6 sdk@e8f6f0d — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 2 name(s) matched ONLY in bookkeeping files and were set aside (AggregateBudgetOptions, ToolCall)"
+  },
+  "breakingCount": 0,
+  "breakingItems": []
+}