@sema-agent/core 7.51.2 → 7.52.0

package/dist/core/governance-codes.d.ts

@@ -49,7 +49,8 @@ export declare function governanceRetryClass(code: string): GovernanceRetryClass
  * member over a roster row's wire bound (`config.tool_roster_bound` / `config.tool_name_too_long` /
  * `config.tool_contract_too_long`), a schema over the row's key bounds (`config.tool_schema_bound`), a
  * declared face or result card the schema / namespace cannot carry (`config.tool_face_invalid`), a name or
- * alias in the engine's protocol namespace (`config.tool_name_invalid`), an egress tool declared other than
+ * alias outside the caller tool name contract — one no rule can name, or one carrying the protocol namespace separator
+ * (`config.tool_name_invalid`), an egress tool declared other than
  * `write` (`config.egress_requires_write_effect` — also minted, same meaning, for a protocol tool's resolved
  * axes), a name the run reserves for a tool the engine injects (`config.reserved_tool_name` — structured output,
  * the skill tool, tool search, the offload reader, an injected protocol tool; `runGoal`'s completion tool, which
@@ -137,7 +138,7 @@ export type NoticeAudience = "user" | "operator";
  * the union's catalog ({@link EngineNotice.code}). The groups below say only which family a row joins,
  * so the catalog is not written a second time here and the two cannot drift.
  */
-export declare const ENGINE_NOTICE_CODES: readonly ["config.autocompact_window_clamped", "config.env_timeout_discarded", "config.materialize_env_discarded", "config.models_swapped", "config.context_settings_swapped", "config.read_face_swapped", "config.read_face_deployment_clamped", "config.write_face_swapped", "config.write_face_deployment_clamped", "config.read_deny_swapped", "config.tool_model_gate_removed", "config.tool_model_gate_unknown_class", "config.tool_model_gate_env_invalid", "config.artifact_host_invalid", "config.task_root_not_canonical", "config.write_protection_target_view_absent", "config.path_view_unresolved", "config.execution_env_capability_invalid", "config.tool_card_undeclared", "config.tool_face_undeclared", "config.tool_face_invalid", "config.forward_sink_failed", "config.durable_gate_unavailable", "config.peer_admission_out_of_range", "config.peer_lane_unmounted", "config.secret_env_scrubbed", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "classifier.fallback", "classifier.role_defaulted", "classifier.contract_broken", "classifier.unavailable", "checkpoint.execution_outcome_unrecorded", "delegation.transcript_integrity", "delegation.ask_unresolvable", "mcp.injection_dropped", "mcp.revocation_probe_failed", "mcp.server_redialed", "workflow.governance_key_stripped", "workflow.agent_option_ignored", "memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.content_class_declared", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "memory.consolidation_recommended", "memory.consolidation_committed", "memory.consolidation_conflict", "memory.consolidation_incomplete", "memory.consolidation_refused", "memory.consolidation_withheld", "memory.restore_withheld", "memory.project_scope_absent", "route.fallback_to_primary", "route.classifier_unroutable", "route.base_url_changed_key_unchanged", "route.response_model_mismatch", "route.tool_call_id_folded", "route.finish_reason_unknown", "route.stream_end_ignored", "route.extra_body_reserved_dropped", "context.tool_turn_repaired", "task.user_steer_undrained", "task.user_followup_undrained", "steering.parked_input_blocked", "task.turn_interrupted", "task.halt_unconsumed", "task.late_approval", "task.interrupt_unconsumed", "task.tool_turn_incomplete", "approval.read_root_granted", "approval.read_root_grant_rejected", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "skills.listing_truncated", "agents.listing_truncated", "tool_result.offload_put_failed", "tool_result.media_refused", "instructions.source_changed", "session.records_skipped", "memory.layer_locked_legacy", "server.model_unreachable", "permission.entry_mode_clamped"];
+export declare const ENGINE_NOTICE_CODES: readonly ["config.autocompact_window_clamped", "config.env_timeout_discarded", "config.materialize_env_discarded", "config.models_swapped", "config.context_settings_swapped", "config.read_face_swapped", "config.read_face_deployment_clamped", "config.write_face_swapped", "config.write_face_deployment_clamped", "config.read_deny_swapped", "config.tool_model_gate_removed", "config.tool_model_gate_unknown_class", "config.tool_model_gate_env_invalid", "config.artifact_host_invalid", "config.task_root_not_canonical", "config.write_protection_target_view_absent", "config.path_view_unresolved", "config.execution_env_capability_invalid", "config.tool_card_undeclared", "config.tool_face_undeclared", "config.tool_face_invalid", "config.forward_sink_failed", "config.durable_gate_unavailable", "config.peer_admission_out_of_range", "config.peer_lane_unmounted", "config.secret_env_scrubbed", "config.credential_not_withheld", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "mods.registration_refused", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "classifier.fallback", "classifier.role_defaulted", "classifier.contract_broken", "classifier.unavailable", "checkpoint.execution_outcome_unrecorded", "delegation.transcript_integrity", "delegation.ask_unresolvable", "mcp.injection_dropped", "mcp.revocation_probe_failed", "mcp.server_redialed", "workflow.governance_key_stripped", "workflow.agent_option_ignored", "memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.content_class_declared", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "memory.consolidation_recommended", "memory.consolidation_committed", "memory.consolidation_conflict", "memory.consolidation_incomplete", "memory.consolidation_refused", "memory.consolidation_withheld", "memory.restore_withheld", "memory.project_scope_absent", "route.fallback_to_primary", "route.classifier_unroutable", "route.credential_origin_mismatch", "route.response_model_mismatch", "route.tool_call_id_folded", "route.finish_reason_unknown", "route.stream_end_ignored", "route.extra_body_reserved_dropped", "context.tool_turn_repaired", "task.user_steer_undrained", "task.user_followup_undrained", "steering.parked_input_blocked", "task.turn_interrupted", "task.halt_unconsumed", "task.late_approval", "task.interrupt_unconsumed", "task.tool_turn_incomplete", "approval.read_root_granted", "approval.read_root_grant_rejected", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "skills.listing_truncated", "agents.listing_truncated", "tool_result.offload_put_failed", "tool_result.media_refused", "instructions.source_changed", "session.records_skipped", "memory.layer_locked_legacy", "server.model_unreachable", "permission.entry_mode_clamped"];
 /** A catalogued code (see {@link ENGINE_NOTICE_CODES}); {@link NOTICE_MINTER} says who mints it. NOT the type of
  *  `EngineNotice.code`, which stays `string` — a host forwarding its own notices through the same
  *  sink is a supported shape, and narrowing that field would break it. */
@@ -177,6 +178,7 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "task.tool_turn_incomplete": "user";
     readonly "route.finish_reason_unknown": "user";
     readonly "route.stream_end_ignored": "user";
+    readonly "route.credential_origin_mismatch": "user";
     readonly "approval.read_root_granted": "user";
     readonly "approval.read_root_grant_rejected": "user";
     readonly "config.durable_gate_unavailable": "user";
@@ -186,6 +188,7 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "permission.rule_store_unavailable": "user";
     readonly "permission.rule_row_dropped": "user";
     readonly "permission.allowed_tool_not_granted": "user";
+    readonly "mods.registration_refused": "user";
     readonly "memory.capture_opted_out": "user";
     readonly "memory.capture_optout_unpersisted": "user";
     readonly "memory.consolidation_withheld": "operator";
@@ -214,6 +217,7 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "config.peer_lane_unmounted": "operator";
     readonly "config.peer_admission_out_of_range": "operator";
     readonly "config.secret_env_scrubbed": "operator";
+    readonly "config.credential_not_withheld": "operator";
     readonly "peer.inbound_disposition": "user";
     readonly "peer.held_settled": "user";
     readonly "peer.idle_subscription": "user";
@@ -234,7 +238,6 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "memory.project_scope_absent": "operator";
     readonly "route.fallback_to_primary": "operator";
     readonly "route.classifier_unroutable": "operator";
-    readonly "route.base_url_changed_key_unchanged": "operator";
     readonly "route.response_model_mismatch": "operator";
     readonly "route.tool_call_id_folded": "operator";
     readonly "route.extra_body_reserved_dropped": "operator";
@@ -300,12 +303,14 @@ declare const NOTICE_MINTER_TABLE: {
     readonly "config.peer_admission_out_of_range": "engine";
     readonly "config.peer_lane_unmounted": "engine";
     readonly "config.secret_env_scrubbed": "engine";
+    readonly "config.credential_not_withheld": "engine";
     readonly "config.permission_mode_unavailable": "engine";
     readonly "permission.ask_released_by_mode": "engine";
     readonly "permission.read_deny_unapplied": "engine";
     readonly "permission.rule_store_unavailable": "engine";
     readonly "permission.rule_row_dropped": "engine";
     readonly "permission.allowed_tool_not_granted": "engine";
+    readonly "mods.registration_refused": "engine";
     readonly "peer.inbound_disposition": "engine";
     readonly "peer.held_settled": "engine";
     readonly "peer.idle_subscription": "engine";
@@ -339,7 +344,7 @@ declare const NOTICE_MINTER_TABLE: {
     readonly "memory.project_scope_absent": "engine";
     readonly "route.fallback_to_primary": "engine";
     readonly "route.classifier_unroutable": "engine";
-    readonly "route.base_url_changed_key_unchanged": "engine";
+    readonly "route.credential_origin_mismatch": "engine";
     readonly "route.response_model_mismatch": "engine";
     readonly "route.tool_call_id_folded": "engine";
     readonly "route.finish_reason_unknown": "engine";

package/dist/core/governance-codes.js

@@ -145,12 +145,14 @@ export const ENGINE_NOTICE_CODES = Object.freeze([
     "config.peer_admission_out_of_range",
     "config.peer_lane_unmounted",
     "config.secret_env_scrubbed",
+    "config.credential_not_withheld",
     "config.permission_mode_unavailable",
     "permission.ask_released_by_mode",
     "permission.read_deny_unapplied",
     "permission.rule_store_unavailable",
     "permission.rule_row_dropped",
     "permission.allowed_tool_not_granted",
+    "mods.registration_refused",
     "peer.inbound_disposition",
     "peer.held_settled",
     "peer.idle_subscription",
@@ -184,7 +186,7 @@ export const ENGINE_NOTICE_CODES = Object.freeze([
     "memory.project_scope_absent",
     "route.fallback_to_primary",
     "route.classifier_unroutable",
-    "route.base_url_changed_key_unchanged",
+    "route.credential_origin_mismatch",
     "route.response_model_mismatch",
     "route.tool_call_id_folded",
     "route.finish_reason_unknown",
@@ -235,6 +237,7 @@ const NOTICE_AUDIENCE_TABLE = {
     "task.tool_turn_incomplete": "user",
     "route.finish_reason_unknown": "user",
     "route.stream_end_ignored": "user",
+    "route.credential_origin_mismatch": "user",
     "approval.read_root_granted": "user",
     "approval.read_root_grant_rejected": "user",
     "config.durable_gate_unavailable": "user",
@@ -244,6 +247,7 @@ const NOTICE_AUDIENCE_TABLE = {
     "permission.rule_store_unavailable": "user",
     "permission.rule_row_dropped": "user",
     "permission.allowed_tool_not_granted": "user",
+    "mods.registration_refused": "user",
     "memory.capture_opted_out": "user",
     "memory.capture_optout_unpersisted": "user",
     "memory.consolidation_withheld": "operator",
@@ -272,6 +276,7 @@ const NOTICE_AUDIENCE_TABLE = {
     "config.peer_lane_unmounted": "operator",
     "config.peer_admission_out_of_range": "operator",
     "config.secret_env_scrubbed": "operator",
+    "config.credential_not_withheld": "operator",
     "peer.inbound_disposition": "user",
     "peer.held_settled": "user",
     "peer.idle_subscription": "user",
@@ -292,7 +297,6 @@ const NOTICE_AUDIENCE_TABLE = {
     "memory.project_scope_absent": "operator",
     "route.fallback_to_primary": "operator",
     "route.classifier_unroutable": "operator",
-    "route.base_url_changed_key_unchanged": "operator",
     "route.response_model_mismatch": "operator",
     "route.tool_call_id_folded": "operator",
     "route.extra_body_reserved_dropped": "operator",
@@ -339,12 +343,14 @@ const NOTICE_MINTER_TABLE = {
     "config.peer_admission_out_of_range": "engine",
     "config.peer_lane_unmounted": "engine",
     "config.secret_env_scrubbed": "engine",
+    "config.credential_not_withheld": "engine",
     "config.permission_mode_unavailable": "engine",
     "permission.ask_released_by_mode": "engine",
     "permission.read_deny_unapplied": "engine",
     "permission.rule_store_unavailable": "engine",
     "permission.rule_row_dropped": "engine",
     "permission.allowed_tool_not_granted": "engine",
+    "mods.registration_refused": "engine",
     "peer.inbound_disposition": "engine",
     "peer.held_settled": "engine",
     "peer.idle_subscription": "engine",
@@ -378,7 +384,7 @@ const NOTICE_MINTER_TABLE = {
     "memory.project_scope_absent": "engine",
     "route.fallback_to_primary": "engine",
     "route.classifier_unroutable": "engine",
-    "route.base_url_changed_key_unchanged": "engine",
+    "route.credential_origin_mismatch": "engine",
     "route.response_model_mismatch": "engine",
     "route.tool_call_id_folded": "engine",
     "route.finish_reason_unknown": "engine",