@sema-agent/core 7.54.1 → 7.56.0

package/dist/index.js

@@ -10,6 +10,7 @@ export { createSkillsFromDirectory, } from "./core/skills-directory.js";
 export { REPORT_FINDINGS_TOOL_NAME } from "./core/runner/synthetic-tools.js";
 export { formatToolError, formatZodValidationError, formatValidationPath, truncateError, errorClassOf } from "./core/tool-errors.js";
 export { createWebFetchTool, webFetchToolSpec, htmlToText, createWebSearchTool, createSearxngSearchBackend, probeSearchBackend, createWebFetchSummarizer, WEBFETCH_SUMMARY_MAX_CONTENT, WEBFETCH_SUMMARY_GUIDELINES, } from "./tools/web.js";
+export { compileHostFloor } from "./core/host-floor.js";
 export { createTodoWriteTool } from "./tools/todo.js";
 export { ARTIFACT_ACTIONS, ARTIFACT_PLANES, ARTIFACT_COMMIT_CERTAINTIES, ARTIFACT_COMMIT_THROW_OUTCOME, ARTIFACT_PUBLISH_CONTEXTS, ARTIFACT_LIST_SCOPES, ARTIFACT_PLANE_CONTENT_ORIGIN, ARTIFACT_ACTION_HOST_METHOD, ARTIFACT_ACTION_CONCURRENCY_SAFE, ARTIFACT_HOST_FAILURE_CODES, ARTIFACT_FAILURE_RESULT_CODE, ARTIFACT_HOST_ERROR_CODE, ARTIFACT_CARD, readArtifactHostCapabilities, } from "./core/artifact-host.js";
 export { createArtifactTool, artifactAttemptId, normalizePublishedPath, mediaTypeOf } from "./tools/artifact/artifact-tool.js";
@@ -52,6 +53,7 @@ export { MCP_FAILURE_KINDS, MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, classify
 export { MCP_INJECTION_DROP_REASONS, MCP_INJECTION_DROP_TEXT, mcpInjectionDroppedNotice } from "./core/mcp-injection-drop.js";
 export { askUnresolvableNotice } from "./core/ask-unresolvable-notice.js";
 export { ASK_UNRESOLVABLE_CAUSES } from "./core/ask-unresolvable-notice.js";
+export { APPROVAL_REMEDY_KINDS } from "./core/ask-origin.js";
 export { USER_INPUT_UNDRAINED_CAUSES, USER_INPUT_UNDRAINED_FAMILIES } from "./core/engine-notice.js";
 export { STEER_REPLAY_FACETS } from "./core/steer-replay.js";
 export { TOOL_TURN_INCOMPLETE_CAUSES } from "./internal/llm.js";
@@ -63,7 +65,7 @@ export { WORKFLOW_SIZE_GUIDELINE_AGENT_CAPS } from "./orchestration/workflow-siz
 export { ENGINE_AUTHORITY_ENVELOPE_TAGS } from "./core/untrusted-text.js";
 export { materializeA2aTools, A2aRpcError } from "./core/a2a.js";
 export { PROTOCOL_TABLE, MCP_NAMESPACE, A2A_NAMESPACE, protocolOf } from "./core/protocol-table.js";
-export { InMemorySessionPolicyStore, SessionPolicyError, loosenReasons, normalizeRules, judgeSessionRulesWrite, readSessionRulesShape, SESSION_RULES_GRAMMAR, compileSessionRuleBucket, unreadableDenyEntries, } from "./core/session-policy-store.js";
+export { InMemorySessionPolicyStore, SessionPolicyError, loosenReasons, normalizeRules, judgeSessionRulesWrite, readSessionRulesShape, SESSION_RULES_GRAMMAR, compileSessionRuleBucket, unreadableDenyEntries, readRuleGrammarStamp, } from "./core/session-policy-store.js";
 export { SAFETY_MERGE_CONFORMANCE_CORPUS } from "./core/safety-merge-corpus.js";
 export { SAFETY_AXIS_VOCABULARY } from "./core/safety-axis-vocab.js";
 export { createSessionRulePolicy } from "./core/runner/session-rule-policy.js";
@@ -75,7 +77,7 @@ export { GOVERNANCE_CODES, governanceRetryClass, TOOL_DECLARATION_CODES } from "
 export { NOTICE_AUDIENCE, noticeAudienceOf, ENGINE_NOTICE_CODES, NOTICE_MINTER } from "./core/governance-codes.js";
 export { TtlSessionStore } from "./core/session-store.js";
 export { reconcileInterruptedSession, findOrphanToolCalls, } from "./core/session-reconcile.js";
-export { StoredSession, InMemorySessionRepo, InMemorySessionStorage, BaseSessionStorage, leafIdAfterEntry, validateEntriesForImport, StreamingImportValidator, boundedTail, SessionError, isSessionConflict, hasSessionFork, uuidv7, } from "./core/session.js";
+export { StoredSession, InMemorySessionRepo, InMemorySessionStorage, BaseSessionStorage, leafIdAfterEntry, validateEntriesForImport, StreamingImportValidator, boundedTail, SessionError, isSessionConflict, hasSessionFork, uuidv7, readSessionListQuery, SESSION_LIST_LIMITS, } from "./core/session.js";
 export { warmResume } from "./core/warm-resume.js";
 export { StubExecutionEnv } from "./core/stub-env.js";
 export { NodeExecutionEnv, FileError, ExecutionError } from "./internal/harness.js";
@@ -111,11 +113,12 @@ export { InMemoryUsageWindowStore, GLOBAL_USAGE_KEY, EMPTY_USAGE_WINDOW_RECORD,
 export { FileUsageWindowStore } from "./stores/file/usage-window-store.js";
 export { ENV_LIFETIME_SUSPEND_MARGIN_MS, USAGE_WINDOW_REAP_MARGIN_MS } from "./core/runner/prepare-task.js";
 export { InMemoryFileHistoryStore, boundaryPublishVerdict } from "./core/file-history-store.js";
-export { FILE_HISTORY_ERROR_CODES } from "./core/file-history-store.js";
+export { FILE_HISTORY_ERROR_CODES, FileHistoryStoreError } from "./core/file-history-store.js";
 export { captureFileBackupViaEnv, applyFileRestoreViaEnv } from "./core/file-history-store.js";
 export { modeProvenDifferent as fileHistoryModeProvenDifferent } from "./core/file-history-store.js";
 export { countRestoreLineDiff, FILE_HISTORY_DIFF_LINE_BUDGET } from "./core/file-history-store.js";
-export { worldStillMatchesMint } from "./core/file-history-store.js";
+export { worldStillMatchesMint, annulProofFailure } from "./core/file-history-store.js";
+export { FILE_HISTORY_REFUSAL_CLASSES } from "./core/file-history-store.js";
 export { trackKeyOf as fileHistoryTrackKeyOf, resolveTrackKey as fileHistoryResolveTrackKey } from "./core/file-history-store.js";
 export { describeTrackKey as fileHistoryDescribeTrackKey, fileHistoryExportDigest, validateFileHistoryExport } from "./core/file-history-store.js";
 export { DEFAULT_FILE_HISTORY_BOUNDARY_KEEP, resolveFileHistoryRetention, fileHistoryBoundariesToKeep } from "./core/file-history-retention.js";
@@ -184,16 +187,19 @@ export { ENGINE_BUILTIN_TOOL_NAMES, isEngineBuiltinToolName } from "./core/tool-
 export { policyCannotAnswer } from "./core/real-approval.js";
 export {} from "./core/hooks.js";
 export { SWAPPABLE_DEP_SEATS, SWAP_SEAT_NOTICE, isSwappableDepSeat, screenSwappableDeps } from "./core/swappable-deps.js";
-export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, classifierUnavailableDenyMessage, classifierParseFailureDenyMessage, AUTO_MODE_PARSE_FAILURES, isAutoModeParseFailure, AUTO_MODE_CLASSIFIER_FALLBACKS, isAutoModeClassifierFallback, AUTO_MODE_FALLBACK_CAUSES, isAutoModeFallbackCause, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, } from "./core/auto-mode.js";
-export { AUTO_MODE_DENIAL_LIMIT_DEFAULTS, AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS, AUTO_MODE_CLASSIFIER_MAX_TOKENS } from "./core/auto-mode-defaults.js";
+export { parseAutoModeResponse, createAutoModeDecider, AUTO_MODE_UNAVAILABLE_CAUSES, isAutoModeUnavailableCause, classifierUnavailableDenyMessage, classifierParseFailureDenyMessage, AUTO_MODE_PARSE_FAILURES, isAutoModeParseFailure, AUTO_MODE_CLASSIFIER_FALLBACKS, isAutoModeClassifierFallback, AUTO_MODE_FALLBACK_CAUSES, isAutoModeFallbackCause, createAutoModeDenialTracker, denialLimitFallbackMessage, denialLimitSentence, unarmedWindow, DENIAL_LIMIT_BOUNDS, isDenialLimitBound, } from "./core/auto-mode.js";
+export { AUTO_MODE_DENIAL_LIMIT_DEFAULTS, AUTO_MODE_DENIAL_AUTO_DENY_DEFAULT_MS, AUTO_MODE_CLASSIFIER_MAX_TOKENS, AUTO_MODE_CLASSIFIER_LOW_REASONING_BUDGET_TOKENS } from "./core/auto-mode-defaults.js";
 export { classifierSeatModel } from "./core/runner/classifier-ladder.js";
+export { advisorAttachVerdict, advisorHoldOf, ADVISOR_NOT_ATTACHED_REASONS, ADVISOR_OUTCOMES } from "./core/advisor-verdict.js";
 export { buildAutoModePrompt, renderAutoModeWindow, renderAutoModeAction, AUTO_MODE_DEFAULTS_SENTINEL, } from "./core/auto-mode-prompt.js";
 export { AUTO_MODE_BASE_PROMPT, AUTO_MODE_PERMISSIONS_EXTERNAL } from "./core/auto-mode-prompt-assets.js";
 export { AUTO_MODE_ARMING_RECIPE_VERSION, autoModeArmingRecipeOf, sanitizeAutoModeArmingRecipe, foldAutoModeArming, } from "./core/auto-mode-arming.js";
 export { rebuildAutoModeDecider, } from "./core/auto-mode-rebuild.js";
-export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, isNamespacedCoveringRuleName, namespacedRuleNameCovers, } from "./core/permission-rules.js";
-export { RULE_BEHAVIORS, RULE_BEHAVIOR_PRECEDENCE, RULE_BEHAVIORS_BY_PRECEDENCE, isRuleBehavior, readRowBehavior, adjudicatePersistedRules, adjudicatePersistedPathRules, ruleReachesProgramRun, programRunReachOf, PROGRAM_RUN_REACHES, pathRuleReachOf, ruleBasesNeeded, PATH_RULE_BASES, PATH_RULE_BASE_LABEL, ruleToolGrammarOf, COMMAND_RULE_TOOL, READ_RULE_TOOL, parseRuleText, formatRuleText, ruleAdmitsCommand, findAdmittingRule, suggestRulesForCommand, scopeCoversCwd, pathWithinRoot, isRuleLive, renderUntrustedCommandText, stripFormatCharacters, UNCOVERED_SEGMENT_REASON_BASELINE, RULE_OFFERS_ABSENCE_BASELINE, PERSISTED_RULE_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, UNCOVERED_SEGMENT_REASONS, EDITED_RULE_BREADTH_WARNING_CODES, RULE_ADD_ORIGINS, directoryRuleAdmits, BARE_INTERPRETER_NAMES, MAX_RULE_TEXT_CHARS, } from "./core/permission-rule-model.js";
-export { removePersistedRule, addPersistedRule, applyTombstones, sameScope, sameRuleIdentity, isValidConsentScope, isValidDurableScope, InMemoryDurableRulePartition, EMPTY_DURABLE_RULE_PARTITION, joinRuleStates, screenRuleSyncState, collectBelowFrontier, ruleSyncVector, joinFrontiers, dotAtOrBelowFrontier, sameRuleOwner, RULE_OWNER_KINDS, PERMISSION_RULE_WRITER, writerOf, foldDelta, addDotsOf, assertDeleteDeltaCarriesNoAdd, assertRedemptionNotQuarantined, assertWriteDeltaScopeDurable, } from "./core/permission-rule-store.js";
+export { createPermissionRulePolicy, validatePermissionRules, parsePermissionRule, wildcardMatch, isCoveringRuleName, ruleNameCovers, } from "./core/permission-rules.js";
+export { RULE_BEHAVIORS, RULE_BEHAVIOR_PRECEDENCE, RULE_BEHAVIORS_BY_PRECEDENCE, isRuleBehavior, readRowBehavior, adjudicatePersistedRules, adjudicatePersistedPathRules, ruleReachesProgramRun, programRunReachOf, PROGRAM_RUN_REACHES, pathRuleReachOf, ruleBasesNeeded, PATH_RULE_BASES, PATH_RULE_BASE_LABEL, ruleToolGrammarOf, COMMAND_RULE_TOOL, READ_RULE_TOOL, parseRuleText, formatRuleText, ruleAdmitsCommand, findAdmittingRule, suggestRulesForCommand, scopeCoversCwd, pathWithinRoot, isRuleLive, renderUntrustedCommandText, stripFormatCharacters, UNCOVERED_SEGMENT_REASON_BASELINE, RULE_OFFERS_ABSENCE_BASELINE, PERSISTED_RULE_MATCHES, RULE_OFFER_KINDS, RULE_OFFER_BATCH_MEMBER_KINDS, UNCOVERED_SEGMENT_REASONS, EDITED_RULE_BREADTH_WARNING_CODES, RULE_ADD_ORIGINS, directoryRuleAdmits, BARE_INTERPRETER_NAMES, MAX_RULE_TEXT_CHARS, } from "./core/permission-rule-model.js";
+export { removePersistedRule, addPersistedRule, applyTombstones, sameScope, sameRuleIdentity, isValidConsentScope, isValidDurableScope, InMemoryDurableRulePartition, EMPTY_DURABLE_RULE_PARTITION, joinRuleStates, screenRuleSyncState, collectBelowFrontier, ruleSyncVector, joinFrontiers, dotAtOrBelowFrontier, PERMISSION_RULE_WRITER, writerOf, foldDelta, addDotsOf, assertDeleteDeltaCarriesNoAdd, assertRedemptionNotQuarantined, assertWriteDeltaScopeDurable, PERMISSION_RULES_LATER_GRAMMAR_CODE, } from "./core/permission-rule-store.js";
+export { readRuleOwner, sameRuleOwner, RULE_OWNER_KINDS, } from "./core/rule-owner.js";
+export { principalNameOf } from "./core/principal-name.js";
 export { syncPermissionRules, parseRuleSyncResponse, PERMISSION_RULE_SYNC_PATH, LOCAL_OWNER_UNSYNCABLE_CODE, } from "./core/permission-rule-sync.js";
 export { createPermissionRuleStoreProvider, effectivePermissionRules, effectiveOrThrow, ruleSourceOf, } from "./core/permission-rule-provider.js";
 export { InMemorySessionRulePartition, } from "./core/permission-rule-session.js";
@@ -202,7 +208,7 @@ export { readOnlyShellVerdict } from "./core/read-only-shell.js";
 export { READ_ONLY_FLAG_ARITIES, FLAG_VALUE_ACCEPTS, READ_ONLY_COMMAND_TABLE, READ_ONLY_BARE_PROGRAMS, READ_ONLY_GLOB_PROGRAMS, READ_ONLY_EXACT_FORMS, READ_ONLY_BARE_ONLY, FIND_ACTION_PRIMARIES, FIND_VALUE_PRIMARIES, FIND_NEWER_PRIMARY, READ_ONLY_ENV_NAMES, XARGS_READ_ONLY_TARGETS, } from "./core/read-only-shell-table.js";
 export { orgRuleVerdictFor, sameOrgPolicyContent, orgRuleShadows, unenforceableOrgRules, ORG_UNAVAILABLE_DECISION_REASON, ORG_RULE_DECISION_REASON, ORG_ADJUDICATION_TIMEOUT_MS, } from "./core/permission-rule-org.js";
 export { RULE_SYNC_DROP_CODES } from "./core/governance-codes.js";
-export { prepareCardApproval, confirmRuleApproval, precheckEditedRuleText, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, ruleOffersOfRecord, RULE_APPROVAL_KINDS, RULE_APPROVAL_STATES, IMPORTED_SETTINGS_LAYERS, RULE_APPROVAL_RECORD_SCHEMA, } from "./core/permission-rule-consent.js";
+export { prepareCardApproval, confirmRuleApproval, precheckEditedRuleText, redeemRuleTicket, redeemRuleBatch, prepareCcImport, prepareStarterBatch, mintRuleTicket, STARTER_RULES, InMemoryRuleApprovalRecordStore, ruleOffersOfRecord, RULE_APPROVAL_KINDS, RULE_APPROVAL_STATES, IMPORTED_SETTINGS_LAYERS, RULE_APPROVAL_RECORD_SCHEMA, readRuleOffer2, } from "./core/permission-rule-consent.js";
 export { FileDurableRulePartitionProvider, ORG_STATE_FILE } from "./stores/file/permission-rule-store.js";
 export { adoptFilePermissionRuleStore } from "./stores/file/permission-rule-adopt.js";
 export { AdoptionError, assertAdoptionBootGate, readRootAdoptionFile, writeRootAdoptionFile, ROOT_ADOPTION_FILE, } from "./stores/file/adoption/marker.js";
@@ -229,6 +235,7 @@ export { SUPERVISOR_PROMPT, ORCHESTRATION_GUIDANCE, ORCHESTRATION_AWARENESS, GOA
 export { OVERLAY_SOURCE_ORDER } from "./prompt-assembly/overlay.js";
 export { PROMPT_BINDING_LIST_MAX, PROMPT_BINDING_MAX_CHARS } from "./prompt-assembly/overlay.js";
 export { BANDS as PROMPT_BANDS } from "./prompt-assembly/bands.js";
+export { PROMPT_TRAITS, PROMPT_TRAIT_BUNDLES, isPromptTraitName } from "./prompt-assembly/catalog/schema.js";
 export { OVERLAY_OPS, HOST_ROLES, isHostRole, HOST_FORMS } from "./prompt-assembly/catalog/schema.js";
 export { SEMA_DEFAULT_CATALOG, catalogText } from "./prompt-assembly/catalog/index.js";
 export { attachToolContract, getToolContract, hasToolContract, computeShapeDigest, projectToolManifest } from "./prompt-assembly/tool-catalog.js";
@@ -240,8 +247,9 @@ export { stripEngineMetadata } from "./internal/llm.js";
 export { EVENT_PROMPT_REGISTRY, eventDefaultOn } from "./prompt-assembly/event-registry.js";
 export { OUTPUT_STYLE_NAME_MAX } from "./core/output-style.js";
 export { contextUsageSections } from "./prompt-assembly/section-usage.js";
-export { DEFAULT_EFFORT_LEVELS, REASONING_BUDGET_SHARE, isThinkingLevel, rankOf, resolveEffort, reasoningEffortLevelsOf, resolveBinary, reasoningBudgetShare, resolveReasoning, thinkingOffSpelled, declaredOffSpelling, resolveReasoningProfile, } from "./brain/reasoning.js";
-export { runWorkflow, startWorkflow, workflowAgentCallKey, WorkflowBudgetExceededError, WorkflowNestingError, WorkflowAgentSchemaError, WorkflowAgentStalledError, WorkflowAgentBlockedError, WORKFLOW_SPAWN_BLOCKED_ERROR_CODE, WorkflowAgentParkedError, WORKFLOW_AGENT_PARKED_ERROR_CODE, WORKFLOW_SUBAGENT_PROMPT, WORKFLOW_SUBAGENT_PROMPT_SCHEMA, WORKFLOW_SUBAGENT_APPEND, WORKFLOW_SUBAGENT_APPEND_SCHEMA, MAX_WORKFLOW_ITEMS, } from "./orchestration/workflow.js";
+export { DEFAULT_EFFORT_LEVELS, REASONING_BUDGET_SHARE, isThinkingLevel, rankOf, resolveEffort, reasoningEffortLevelsOf, resolveBinary, reasoningBudgetShare, resolveReasoning, thinkingOffSpelled, declaredOffSpelling, mintEffortWireValue, resolveReasoningProfile, } from "./brain/reasoning.js";
+export { applyReasoningToRequest, mergeReasoningHeaders, lowestReasoningSeat, } from "./brain/reasoning-request.js";
+export { runWorkflow, startWorkflow, workflowAgentCallKey, WorkflowBudgetExceededError, WorkflowNestingError, WorkflowAgentSchemaError, WorkflowAgentStalledError, WorkflowAgentBlockedError, WORKFLOW_SPAWN_BLOCKED_ERROR_CODE, WorkflowAgentParkedError, WORKFLOW_AGENT_PARKED_ERROR_CODE, parkedAgentsOf, runParkedOf, WORKFLOW_SUBAGENT_PROMPT, WORKFLOW_SUBAGENT_PROMPT_SCHEMA, WORKFLOW_SUBAGENT_APPEND, WORKFLOW_SUBAGENT_APPEND_SCHEMA, MAX_WORKFLOW_ITEMS, } from "./orchestration/workflow.js";
 export { listWorkflowRuns, getWorkflowRun, subscribeWorkflow, deriveAgentDisplayStatus } from "./orchestration/workflow-observe.js";
 export { runGoal, DECLARE_DONE_TOOL_NAME, } from "./orchestration/goal.js";
 export { emitTaskOutcome } from "./core/task-outcome.js";
@@ -252,7 +260,7 @@ export { devWorkflowScriptRunner } from "./orchestration/dev-vm-script-runner.js
 export { parseWorkflowMeta, splitWorkflowMeta, WorkflowScriptError, workflowScriptReadsClockOrRandom } from "./orchestration/workflow-meta.js";
 export { assertWorkflowSandboxConformance, assertWorkflowPrimitivesWiring, assertWorkflowDeterminism } from "./orchestration/workflow-sandbox-conformance.js";
 export { WorkflowModelNotAllowedError } from "./orchestration/workflow-governance.js";
-export { WorkflowMaxAgentsError, WorkflowResultTooLargeError, WorkflowJournalIncompatibleError, WorkflowJournalAppendTimeoutError } from "./orchestration/workflow.js";
+export { WorkflowMaxAgentsError, WorkflowResultTooLargeError, WorkflowJournalAppendTimeoutError } from "./orchestration/workflow.js";
 export { createFileWorkflowScriptStore, mergeWorkflowArgs, } from "./orchestration/workflow-script-store.js";
 export { WORKFLOW_AGENT_STALL_MS, WORKFLOW_AGENT_MAX_RETRIES, WORKFLOW_AGENT_THROTTLE_BACKOFF_MS, WORKFLOW_JOURNAL_APPEND_TIMEOUT_MS } from "./orchestration/workflow.js";
 export { parentSpecSeatOf, applyParentSpecSeat } from "./core/parent-spec-seat.js";
@@ -267,10 +275,10 @@ export { CORRUPT_BODY_FORMS, storeReadBackShapeContract, } from "./core/store-co
 export {} from "./core/store-contracts/contract-harness.js";
 export { checkpointStoreContract } from "./core/store-contracts/checkpoint-store-contract.js";
 export { sessionRepoContract } from "./core/store-contracts/session-repo-contract.js";
-export { sessionStoreIncarnationContract } from "./core/store-contracts/session-store-incarnation-contract.js";
 export { toolResultStoreContract } from "./core/store-contracts/tool-result-store-contract.js";
 export { fileHistoryStoreContract } from "./core/store-contracts/file-history-store-contract.js";
 export { workflowJournalStoreContract } from "./core/store-contracts/workflow-journal-store-contract.js";
+export { sessionPolicyStoreContract } from "./core/store-contracts/session-policy-store-contract.js";
 export { permissionRuleSyncContract } from "./core/store-contracts/permission-rule-sync-contract.js";
 export { permissionRuleWriteContract } from "./core/store-contracts/permission-rule-write-contract.js";
 export { MAILBOX_CONTRACT_SCOPE, mailboxStoreContract, mailboxAckOwnershipContract, mailboxBundledOnlyContract, mailboxTombstonedRecipientContract, mailboxCrossProcessContract, } from "./core/store-contracts/mailbox-store-contract.js";
@@ -284,7 +292,7 @@ export { REMOVAL_LIVENESS_WORDS, RULE_WRITE_COMMITTED_WORDS } from "./core/permi
 export { normalizeReadRootCandidate, READ_ROOT_CANDIDATE_DIR_MAX } from "./core/read-root-candidate.js";
 export { FileBackgroundAgentStore } from "./stores/file/background-agent-store.js";
 export { A2A_TASK_STATES, toA2ATaskState, fromA2ATaskState, } from "./core/a2a-task-state.js";
-export { InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, WorkflowJournalOversizeError, assertJournalEntryFits, } from "./core/workflow-journal-store.js";
+export { InMemoryWorkflowJournalStore, callKeyOrdinal, JOURNAL_OVERSIZE_ERROR_CODE, WorkflowJournalOversizeError, assertJournalEntryFits, readWorkflowJournalEntry, WorkflowJournalIncompatibleError, JOURNAL_INCOMPATIBLE_ERROR_CODE, } from "./core/workflow-journal-store.js";
 export { untrustedEgressForHuman, redactHostLeaks, redactSecrets, boundedRedactedSummary } from "./core/untrusted-egress.js";
 export { summarizeRedactions } from "./core/untrusted-egress.js";
 export { headerOwnershipCollision } from "./core/protocol-http-auth.js";
@@ -300,7 +308,11 @@ export { createPeerAdmission, peerAdmissionFor, judgePeerAdmission, resolvePeerL
 export { CROSS_SESSION_MESSAGE_TAG, CROSS_SESSION_MESSAGE_NOTICE, PERMISSION_MODE_CLASSES, isPermissionModeClass, CrossSessionCodecError, PEER_HOP_CHAIN_CARRY_WINDOW, encodePeerAddress, isCanonicalPeerAddress, encodeScopeAttribute, decodeScopeAttribute, canonicalPeerDisplayName, buildCrossSessionEnvelope, parseCrossSessionEnvelope, clampHopChain, encodeCcPeerFrame, decodeCcPeerFrame, } from "./agents/cross-session-envelope.js";
 export { CROSS_SESSION_INBOUND_SETTINGS, isCrossSessionInboundSetting, resolveCrossSessionInboundSetting, CROSS_SESSION_HOLD_CAUSES, describeCrossSessionHoldCause, judgeCrossSessionInbound, foldPermissionModeClass, PEER_SEND_VERDICT_CODES, peerSendVerdictSeverity, } from "./agents/cross-session-judge.js";
 export { PEER_REF_MIN, PEER_REF_MAX, PEER_REF_RE, mintPeerRef, formatPeerNameRef, parsePeerNameRef, normalizePeerName, PEER_ADDRESS_PREFIXES, reservedPeerNameReason, } from "./agents/cross-session-ref.js";
-export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, PEER_PRESENCE_MAX_CHARS, } from "./agents/peer-directory.js";
+export { PEER_SESSION_RECORD_SCHEMA_VERSION, PEER_SESSION_RECORD_MAX_BYTES, SESSION_BOX_PREFIX, peerSessionBoxHandle, isPeerSessionId, PEER_SESSION_ID_GRAMMAR, parsePeerSessionAddress, readPeerSessionRecord, defaultPeerLivenessProbe, isPeerSessionProcessAlive, mintPeerSessionCandidates, resolvePeerSessions, createInMemoryPeerDirectory, vetPeerRegistryDirectory, judgePeerRecordFile, PEER_PRESENCE_MAX_CHARS, PEER_SESSION_WHERE_VALUES, PEER_SESSION_WHERE_LABELS, SEMA_MAILBOX_FEATURE_PREFIX, semaMailboxFeature, peerSessionLane, } from "./agents/peer-directory.js";
+export { PEER_CHANNEL_DROP_REASONS } from "./core/peer-channel.js";
+export { createCcUdsPeerChannel, CcPeerChannelError } from "./agents/cc-uds-peer-channel.js";
+export { createCcPeerDirectory, CcPeerDirectoryError, ccProcessStartToken, defaultCcProcessProbe, CC_UNNAMED_SESSION_NAME } from "./agents/cc-peer-directory.js";
+export { ccPeerDefaultLocations } from "./agents/cc-peer-wire.js";
 export { createReadInboxTool, READ_INBOX_TOOL_NAME, READ_INBOX_MAX_LIMIT, READ_INBOX_RESULT_BUDGET_CHARS } from "./agents/read-inbox-tool.js";
 export { TEAM_ROLES, DIRECTION_RELATIONS, teamRoleOf, mayDirect } from "./agents/team-role.js";
 export { createListAgentsTool, LIST_AGENTS_TOOL_NAME, LIST_AGENTS_TOOL_ALIAS, LIST_AGENTS_MAX_RESULT_CHARS, PEER_LISTING_FRESH_WINDOW_MS, isFreshPeerRow } from "./agents/list-agents-tool.js";
@@ -350,5 +362,11 @@ export { receiveDeclaration, DECLARATION_PATH_RULES } from "./core/mcp-server-sp
 export { sessionStoreContract } from "./core/store-contracts/session-store-contract.js";
 export { canonicalJsonStringify } from "./core/canonical-json.js";
 export { parkedApprovalCardOf } from "./core/pause-registry.js";
-export { admitSessionPlacement } from "./core/session-store.js";
+export { admitSessionPlacement, settledForkOptions } from "./core/session-store.js";
 export { incarnationCell, forkRowCells, assertForkTarget, readIncarnationCell } from "./engine/session/repo-utils.js";
+export { checkpointIndexFacts } from "./core/checkpoint-store.js";
+export { checkpointRevOf, checkpointOccMatches, checkpointHolderMatches } from "./core/checkpoint-generation.js";
+export { CARD_FACET_OVERRIDES } from "./core/pause-registry.js";
+export { readRuleOffers, RULE_OFFER_SHAPE_PROBLEMS } from "./core/rule-offer-read.js";
+export { compareOccupants } from "./engine/session/repo-utils.js";
+export { CHECKPOINT_LIST_LIMITS, readCheckpointOverdueQuery, readCheckpointSessionQuery, readCheckpointDeleteGuard, checkpointDeadlinePassed, deleteGuardAdmits, selectOverduePage, selectSessionPage, } from "./core/checkpoint-queries.js";

package/dist/internal/harness-types.d.ts

@@ -14,4 +14,4 @@ export type { SessionWriteOptions, CompactionEntry } from "../engine/harness/typ
 export type { ActiveWorktreeSession, WorkspaceState } from "../engine/harness/types.js";
 export type { GitAnnouncementKind, GitAnnouncementState } from "../engine/harness/types.js";
 export type { SessionForkOptions } from "../engine/harness/types.js";
-export type { SessionPlacementRecord, SessionCreateOptions } from "../engine/harness/types.js";
+export type { SessionPlacementRecord, SessionCreateOptions, SessionHead, SessionRow } from "../engine/harness/types.js";

package/dist/internal/harness.d.ts

@@ -17,16 +17,16 @@ export { DEFAULT_CHARS_PER_TOKEN, DEFAULT_CLAMP_TOLERANCE, DEFAULT_COMPACTION_SE
 export { SKILL_RETENTION_PER_SKILL_MAX_CHARS, SKILL_RETENTION_TOTAL_MAX_CHARS, SKILL_RETENTION_TRUNCATION_MARKER, formatFileOperations, formatPersistedOutputRefs, readCompactionActiveTools, readRetainedInvokedSkills, renderInvokedSkillsRetention, } from "../engine/compaction/utils.js";
 export { NodeExecutionEnv } from "../engine/execution-env/node-execution-env.js";
 export { StoredSession, buildSessionContext } from "../engine/session/session.js";
-export { assertForkTarget, forkRowCells, getEntriesToFork, incarnationCell } from "../engine/session/repo-utils.js";
+export { assertForkTarget, compareOccupants, forkRowCells, frozenRow, getEntriesToFork, importRowCells, incarnationCell, ownerCell, readIncarnationCell, readOwnerCell } from "../engine/session/repo-utils.js";
 export { validateEntriesForImport, StreamingImportValidator } from "../engine/session/import-validate.js";
 export { BaseSessionStorage, leafIdAfterEntry } from "../engine/session/storage-base.js";
 export { InMemorySessionStorage } from "../engine/session/memory-storage.js";
 export { InMemorySessionRepo } from "../engine/session/memory-repo.js";
 export { uuidv7 } from "../engine/session/uuid.js";
 export { ParentChainGuard } from "../engine/session/parent-chain-guard.js";
-export { readToolCallArguments } from "../engine/loop/agent-loop.js";
+export { findUnansweredToolBatch, readToolCallArguments } from "../engine/loop/agent-loop.js";
 export { SessionError } from "../engine/harness/types.js";
-export type { AnnouncedListingSnapshot, AnnouncedListingSnapshotInput, AnnouncedMcpFailure } from "../engine/harness/types.js";
+export type { AnnouncedAdvisorState, AnnouncedListingSnapshot, AnnouncedListingSnapshotInput, AnnouncedMcpFailure } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";
 export { isSyntheticApiErrorMessage } from "../engine/harness/types.js";

package/dist/internal/harness.js

@@ -5,14 +5,14 @@ export { DEFAULT_CHARS_PER_TOKEN, DEFAULT_CLAMP_TOLERANCE, DEFAULT_COMPACTION_SE
 export { SKILL_RETENTION_PER_SKILL_MAX_CHARS, SKILL_RETENTION_TOTAL_MAX_CHARS, SKILL_RETENTION_TRUNCATION_MARKER, formatFileOperations, formatPersistedOutputRefs, readCompactionActiveTools, readRetainedInvokedSkills, renderInvokedSkillsRetention, } from "../engine/compaction/utils.js";
 export { NodeExecutionEnv } from "../engine/execution-env/node-execution-env.js";
 export { StoredSession, buildSessionContext } from "../engine/session/session.js";
-export { assertForkTarget, forkRowCells, getEntriesToFork, incarnationCell } from "../engine/session/repo-utils.js";
+export { assertForkTarget, compareOccupants, forkRowCells, frozenRow, getEntriesToFork, importRowCells, incarnationCell, ownerCell, readIncarnationCell, readOwnerCell } from "../engine/session/repo-utils.js";
 export { validateEntriesForImport, StreamingImportValidator } from "../engine/session/import-validate.js";
 export { BaseSessionStorage, leafIdAfterEntry } from "../engine/session/storage-base.js";
 export { InMemorySessionStorage } from "../engine/session/memory-storage.js";
 export { InMemorySessionRepo } from "../engine/session/memory-repo.js";
 export { uuidv7 } from "../engine/session/uuid.js";
 export { ParentChainGuard } from "../engine/session/parent-chain-guard.js";
-export { readToolCallArguments } from "../engine/loop/agent-loop.js";
+export { findUnansweredToolBatch, readToolCallArguments } from "../engine/loop/agent-loop.js";
 export { SessionError } from "../engine/harness/types.js";
 export { normalizeGitAnnouncement } from "../engine/harness/types.js";
 export { gitFrameContextVisible } from "../engine/session/session.js";

package/dist/internal/llm.d.ts

@@ -4,5 +4,5 @@
  * design/118 ①②: the layer is now first-party (`src/engine/llm/`, naturalized out of the vendored
  * llm-core); the facade stays so consumers never notice which side a symbol lives on.
  */
-export { createAssistantMessageEventStream, DATA_LABEL_UNSAFE, ensureToolTurnInvariants, findToolByName, isTextBlock, MODEL_OUTPUT_INVALID_CAUSES, quoteDataLabel, renderContentBlock, renderUserAttachmentView, snapshotActorAssertion, stampStreamDrops, streamDropsOf, stripEngineMetadata, TOOL_TURN_INCOMPLETE_CAUSES, TOOL_TURN_REPAIR_DROPS, userAttachmentOf } from "../engine/llm/index.js";
-export type { ActorAssertion, UserAttachmentKind, UserAttachmentObservation, UserAttachmentOutcome, UserAttachmentSupply, UserMessageAttachment, AnthropicMessagesCompat, OpenAICompletionsCompat, OpenAIResponsesCompat, AssistantMessage, AssistantMessageDiagnostic, AssistantMessageEvent, CompleteSimpleFn, Context, DocumentContent, ImageContent, Message, Model, ModelOutputInvalid, ModelOutputInvalidCause, OutputLimit, ResilienceOptions, RouteAdjudication, RouteCredential, RouteCredentialSource, RoutePairingConfig, RoutePairingPosture, RouteRefusalCode, RouteRefusalDetail, SimpleStreamOptions, StallTimeouts, StopReason, StreamFn, TextContent, ThinkingContent, Tool, ToolCall, ToolResultMessage, StreamDrop, StreamDropCause, ToolTurnIncompleteCause, ToolTurnRepair, Usage, UserMessage, } from "../engine/llm/index.js";
+export { createAssistantMessageEventStream, DATA_LABEL_UNSAFE, ensureToolTurnInvariants, findToolByName, isTextBlock, MODEL_OUTPUT_INVALID_CAUSES, quoteDataLabel, renderContentBlock, renderUserAttachmentView, snapshotActorAssertion, stampStreamDrops, streamDropsOf, stripEngineMetadata, TOOL_TURN_INCOMPLETE_CAUSES, TOOL_TURN_REPAIR_DROPS, toolNameIndex, userAttachmentOf } from "../engine/llm/index.js";
+export type { ActorAssertion, UserAttachmentKind, UserAttachmentObservation, UserAttachmentOutcome, UserAttachmentSupply, UserMessageAttachment, AnthropicMessagesCompat, OpenAICompletionsCompat, OpenAIResponsesCompat, AssistantMessage, AssistantMessageDiagnostic, AssistantMessageEvent, CompleteSimpleFn, Context, DocumentContent, ImageContent, Message, Model, ModelOutputInvalid, ModelOutputInvalidCause, OutputLimit, ResilienceOptions, RouteAdjudication, RouteCredential, RouteCredentialSource, RoutePairingConfig, RoutePairingPosture, RouteRefusalCode, RouteRefusalDetail, SimpleStreamOptions, StallTimeouts, StopReason, StreamFn, TextContent, ThinkingContent, Tool, ToolCall, ToolDescriptionVariant, ToolResultMessage, StreamDrop, StreamDropCause, ToolTurnIncompleteCause, ToolTurnRepair, Usage, UserMessage, } from "../engine/llm/index.js";

package/dist/internal/llm.js

@@ -1 +1 @@
-export { createAssistantMessageEventStream, DATA_LABEL_UNSAFE, ensureToolTurnInvariants, findToolByName, isTextBlock, MODEL_OUTPUT_INVALID_CAUSES, quoteDataLabel, renderContentBlock, renderUserAttachmentView, snapshotActorAssertion, stampStreamDrops, streamDropsOf, stripEngineMetadata, TOOL_TURN_INCOMPLETE_CAUSES, TOOL_TURN_REPAIR_DROPS, userAttachmentOf } from "../engine/llm/index.js";
+export { createAssistantMessageEventStream, DATA_LABEL_UNSAFE, ensureToolTurnInvariants, findToolByName, isTextBlock, MODEL_OUTPUT_INVALID_CAUSES, quoteDataLabel, renderContentBlock, renderUserAttachmentView, snapshotActorAssertion, stampStreamDrops, streamDropsOf, stripEngineMetadata, TOOL_TURN_INCOMPLETE_CAUSES, TOOL_TURN_REPAIR_DROPS, toolNameIndex, userAttachmentOf } from "../engine/llm/index.js";

package/dist/orchestration/goal.js

@@ -1,14 +1,14 @@
 import { createHash, randomUUID } from "node:crypto";
 import { Type } from "typebox";
 import { delimitUntrusted } from "../core/untrusted-text.js";
-import { OUTPUT_TOOL_NAME } from "../core/runner/synthetic-tools.js";
 import { isDurablePause, pauseFamily } from "../agents/suspend-guard.js";
-import { toolFace } from "../core/tool-catalog-entries.js";
+import { OUTPUT_TOOL_NAME, mountRuleFace, toolFace } from "../core/tool-catalog-entries.js";
 export const DECLARE_DONE_TOOL_NAME = "DeclareDone";
 function createDeclareDoneTool(ref) {
     return {
         name: DECLARE_DONE_TOOL_NAME,
         ...toolFace("declare-done"),
+        ruleFace: mountRuleFace("declare-done"),
         description: "Call this ONLY when you believe the goal is FULLY achieved — verified against evidence, not just " +
             "attempted. Provide a concise summary of what was achieved and how you verified it. Calling this " +
             "declares completion; a verification check then runs. If it passes, the goal stops and surfaces for " +

package/dist/orchestration/run-workflow-tool.d.ts

@@ -99,8 +99,8 @@ export interface WorkflowLimits {
     /** Max single log-line length (chars). Default 10_000. */
     maxLogChars?: number;
     /**
-     * CC 2.1.202+ config key `workflowSizeGuideline`: ADVISORY workflow size guidance
-     * (NOT a cap — the hard ceiling stays `maxAgents`). small/medium/large append CC's verbatim
+     * Config key `workflowSizeGuideline`: ADVISORY workflow size guidance
+     * (NOT a cap — the hard ceiling stays `maxAgents`). small/medium/large append the reference's
      * "keep workflows under N agents … guideline, not a hard limit" section to the Workflow tool card
      * (matching observed CC behavior); an EXPLICIT "unrestricted" injects nothing, while unset resolves
      * to the medium DEFAULT arm (RB-339 rebaseline — see workflow-size-guideline.ts).
@@ -151,10 +151,10 @@ export interface RunWorkflowToolDeps {
      *  loosening toward tools the DEPLOYMENT's own baseline composes (the script cannot name this
      *  field; excludeTools still wins downstream). */
     parentRestoreGatedTools?: readonly string[] | true;
-    /** R2 双形轴 — the HOST task's resolved prompt profile, inherited by every workflow-spawned child
-     *  (base spec seat; the child's own explicit promptProfile would win in prepare, but workflow
-     *  scripts cannot name this field, so in practice the tree speaks the host's profile). */
-    parentPromptProfile?: "simple" | "classic";
+    /** The HOST task's task-level lean switch (`TaskSpec.promptLean`, its own or inherited), inherited by every
+     *  workflow-spawned child (base spec seat; a baseline that writes its own `promptLean` keeps it; workflow scripts
+     *  cannot name this field). Absent ⇒ each child's model answers alone. */
+    parentPromptLean?: boolean;
     /** Model catalog (for the name→Model allowlist resolution). */
     models?: Record<string, Model>;
     /** F4 agentType registry: deployment agent definitions `agent(…, {agentType})` resolves (SHADOW over
@@ -320,6 +320,8 @@ export interface RunWorkflowToolDeps {
      *  apply). Threaded into `RunWorkflowOptions.parkedResume`: the resume drives the parked child on with the
      *  decision instead of re-parking. Never a tool argument — a model cannot decide an approval. */
     parkedResume?: (resumeFromRunId: string) => ReadonlyArray<import("./workflow.js").WorkflowParkedResume> | undefined;
+    /** The HOST run's claim holder (`RunInternals.holder`), threaded into `RunWorkflowOptions.holder`. Never a tool argument. */
+    holder?: string;
     /** The HOST run's display sink (its `RunInternals.onForwardEvent` behind the runner's ctx wrapper:
      *  `task_progress` always, plus the children's content events — `text_delta`/`text_end`/
      *  `reasoning_delta`/`tool_start`/`tool_end`, UNTRUSTED-RAW: the consumer must redact — when the HOST spec set

package/dist/orchestration/run-workflow-tool.js

@@ -5,7 +5,7 @@ import { egressText, egressThrownText, boundedRedactedSummary } from "../core/un
 import { withDelegationProvenance } from "../core/tool-policy.js";
 import { LAUNCH_RECEIPT_OWN_WORDS_CLAUSE, launchReceiptNoQuoteClause } from "../agents/launch-receipt-contract.js";
 import { startWorkflow } from "./workflow.js";
-import { WORKFLOW_AGENT_PARKED_ERROR_CODE } from "./workflow-types.js";
+import { WORKFLOW_AGENT_PARKED_ERROR_CODE, parkedAgentsOf } from "./workflow-types.js";
 import { checkpointStoreOfSeat } from "../core/checkpoint-seat.js";
 import { buildWorkflowPrimitives } from "./workflow-primitives.js";
 import { stripSpawnTurnQuestionFace } from "../core/ask-question.js";
@@ -17,6 +17,7 @@ const RETIRED_RUN_WORKFLOW_TOOL_DEPS_KEYS = {
     oneShot: "the host run's one-shot fact rides `RunWorkflowToolDeps.parentSpecSeat.oneShot` (only `true` travels), never a seat of its own",
     builtinWorkflows: "the engine ships no built-in named workflows — `{name}` resolves only the deployment's `scriptStore`; register any named workflow there, or pass `script` inline",
     parentExcludeTools: "the host run's tool selector layers ride `RunWorkflowToolDeps.parentToolCeiling` (`ToolExecuteContext.toolSelector.layers`, the host's prepare-time selector) and bound every agent the workflow spawns as its ceiling — an exclusion list is no longer handed down by name",
+    parentPromptProfile: "the host run's prompt shape rides `RunWorkflowToolDeps.parentPromptLean` (`ToolExecuteContext.promptLean`: `false` for the long shape), never a profile word",
     ...Object.fromEntries(CLAMP_SEATS.filter((seat) => CLAMP_SET[seat].carrier === "clamp").map((seat) => [
         `parent${seat.charAt(0).toUpperCase()}${seat.slice(1)}`,
         `the host's tighten-only clamps ride ONE getter, \`RunWorkflowToolDeps.parentClamps\` (every clamp row, present keys) — return \`${seat}\` from it`,
@@ -25,7 +26,7 @@ const RETIRED_RUN_WORKFLOW_TOOL_DEPS_KEYS = {
 import { parseWorkflowMeta, splitWorkflowMeta, workflowScriptReadsClockOrRandom } from "./workflow-meta.js";
 import { mergeWorkflowArgs, normalizeStringArg } from "./workflow-script-store.js";
 import { workflowSizeGuidelineSection } from "./workflow-size-guideline.js";
-import { toolFace } from "../core/tool-catalog-entries.js";
+import { mountRuleFace, toolFace } from "../core/tool-catalog-entries.js";
 import { thrownText } from "../core/thrown-value.js";
 export const RUN_WORKFLOW_TOOL_NAME = "Workflow";
 function stripCodeFences(s) {
@@ -62,12 +63,13 @@ function completionIdFromRejection(err) {
 }
 function workflowUsageBlock(run) {
     const agents = run.agents;
+    const parked = parkedAgentsOf(agents);
     return {
         ...run.stats,
         agent_count: agents.length,
         agents_done: agents.filter((a) => a.status === "completed").length,
         agents_error: agents.filter((a) => a.status === "failed").length,
-        ...(agents.some((a) => a.status === "parked") ? { agents_parked: agents.filter((a) => a.status === "parked").length } : {}),
+        ...(parked.length > 0 ? { agents_parked: parked.length } : {}),
         agents_empty_result: agents.filter((a) => a.status === "completed" && (a.output === undefined || a.output === "")).length,
         agents_replayed: run.resume?.replayed ?? 0,
         ...(run.journalSkips !== undefined && run.journalSkips > 0 ? { journal_skipped: run.journalSkips } : {}),
@@ -219,11 +221,11 @@ async function mountRunWorkflowTool(d) {
             };
         })(),
     });
-    const withParentProfile = (base) => d.parentPromptProfile !== undefined && base.promptProfile === undefined ? { ...base, promptProfile: d.parentPromptProfile } : base;
-    const baselineWithParentFace = (d.parentDeferTools?.length ?? 0) > 0 || (d.parentAlwaysLoadTools?.length ?? 0) > 0 || d.parentPromptProfile !== undefined || d.parentRestoreGatedTools !== undefined
+    const withParentLean = (base) => d.parentPromptLean !== undefined && base.promptLean === undefined ? { ...base, promptLean: d.parentPromptLean } : base;
+    const baselineWithParentFace = (d.parentDeferTools?.length ?? 0) > 0 || (d.parentAlwaysLoadTools?.length ?? 0) > 0 || d.parentPromptLean !== undefined || d.parentRestoreGatedTools !== undefined
         ? {
             ...sanitizedBaseline,
-            base: withParentProfile(withParentFace(sanitizedBaseline.base)),
+            base: withParentLean(withParentFace(sanitizedBaseline.base)),
             ...(sanitizedBaseline.worktreeBase !== undefined
                 ? { worktreeBase: withParentFace(sanitizedBaseline.worktreeBase, sanitizedBaseline.base) }
                 : {}),
@@ -236,6 +238,7 @@ async function mountRunWorkflowTool(d) {
     return defineTool({
         name: RUN_WORKFLOW_TOOL_NAME,
         ...toolFace("workflow"),
+        ruleFace: mountRuleFace("workflow"),
         approvalPreview: (raw) => {
             const a = (raw ?? {});
             if (typeof a.name === "string" && a.name)
@@ -534,6 +537,7 @@ async function mountRunWorkflowTool(d) {
                     ...(detachedSeat?.internalsFlag.questionFaceStripped === true || ctx.questionFaceStripped === true || d.parentQuestionFaceStripped === true ? { questionFaceStripped: true } : {}),
                     ...(hostDurableApproval !== undefined && d.store !== undefined && parkStore !== undefined ? { defaultDurableApproval: { ...hostDurableApproval } } : {}),
                     ...(resumeFromRunId !== undefined && d.parkedResume !== undefined && d.parkedResume(resumeFromRunId) !== undefined ? { parkedResume: d.parkedResume(resumeFromRunId) } : {}),
+                    ...(d.holder !== undefined ? { holder: d.holder } : {}),
                     ...(parentCenterArtifactDigest !== undefined ? { parentCenterArtifactDigest } : {}),
                     ...(parentCenterSourceRevision !== undefined ? { parentCenterSourceRevision } : {}),
                     ...((ctx.forwardEvent ?? d.forwardEvent) !== undefined ? { onForwardEvent: (ctx.forwardEvent ?? d.forwardEvent) } : {}),

package/dist/orchestration/workflow-size-guideline.d.ts

@@ -3,8 +3,8 @@
  * (small/medium/large/unrestricted), injected into the Workflow tool's prompt/description. It is
  * guidance, NOT a cap — the hard ceiling stays `WorkflowLimits.maxAgents`.
  *
- * RB-339 (2026-07-30, A 案) — REBASELINED on CC 2.1.220 (语料 ../cc-decoded/pretty220.js). The
- * module was anchored to 2.1.206 and had drifted on four points; all four are corrected here and the
+ * RB-339 (2026-07-30, A 案) — REBASELINED. The
+ * module was anchored to an older release and had drifted on four points; all four are corrected here and the
  * old "verbatim" claims (which were not true of the two sentence builders) are replaced with what
  * each function actually is:
  *  1. DEFAULT. CC's `_Td = "medium"` (:455529) with `Oft` (:455538) returning `{ size: "medium",
@@ -64,7 +64,7 @@ export declare function resolveWorkflowSizeGuideline(value: unknown): {
 /** CC `ubd`/`yTd` — the tier's advisory agent count (undefined for "unrestricted"). CC feeds this into
  *  its workflow-size warning thresholds; exported for the same future lane + deployments. */
 export declare function workflowSizeGuidelineAgentCap(g: WorkflowSizeGuideline): number | undefined;
-/** CC `bTd` (:455507) — the tier description embedded in the injected sentences. Verbatim. */
+/** The tier description embedded in the injected sentences. */
 export declare function describeWorkflowSizeGuideline(g: WorkflowSizeGuideline): string;
 /** CC `Sj_` (:455497) — the settings-face display label ("Dynamic workflow size" enum row). Verbatim.
  *  Exported for a shell's settings 透传 (the shell only surfaces the key; the engine hosts it). */
@@ -75,7 +75,7 @@ export declare function formatWorkflowSizeGuidelineLabel(g: WorkflowSizeGuidelin
  * to the medium DEFAULT and injects the default arm (RB-339 — this is the behavior narrowing).
  */
 export declare function workflowSizeGuidelineSection(value: unknown): string;
-/** CC `ETd` (:455523) — the mid-session change notice. Verbatim. Emitted by the run loop's
+/** The mid-session change notice. Emitted by the run loop's
  *  `workflow_size_guideline_change` turn-boundary lane (see the module header); this is that frame's
  *  ONLY copy — the lane renders through here rather than restating the sentences. */
 export declare function workflowSizeGuidelineChangeNotice(g: WorkflowSizeGuideline): string;

package/dist/orchestration/workflow-types.d.ts

@@ -614,6 +614,24 @@ export declare class WorkflowAgentBlockedError extends Error {
 /** #642 — the machine code of a run that SUSPENDED on a parked agent (the thrown error's `code`, the run's
  *  failed terminal). Not a script fault and not a host fault: an approval a person still has to decide. */
 export declare const WORKFLOW_AGENT_PARKED_ERROR_CODE = "workflow.agent_parked";
+/** The agent rows that are PARKED — the one definition of "this row is parked" (the row's own word,
+ *  {@link WorkflowItemStatus} `"parked"`). The `<usage>` block's `agents_parked` count and the run-level
+ *  {@link runParkedOf} both read it, so the two can never disagree about which rows count. */
+export declare function parkedAgentsOf<A extends Pick<WorkflowAgentRun, "status">>(agents: ReadonlyArray<A>): A[];
+/**
+ * Run-level parked bit: this run is STILL RUNNING while at least one of its legs is parked at an approval gate —
+ * somebody is being waited on, and the closed `status` word cannot say so. Derived on every read from the agent
+ * rows; never stored on the run, never journaled, so there is no second copy to drift from the rows.
+ *
+ * Two states, one word each. While the run still runs (a sibling leg has not settled yet) the bit is this
+ * function's `true`. Once the siblings have drained, the run SUSPENDS: it is recorded `failed` with
+ * {@link WORKFLOW_AGENT_PARKED_ERROR_CODE} and its parked rows beside it — that existing code is the "waiting for
+ * an approval" word and this bit does not say it a second time. A terminal record also stays exactly as written
+ * after a resume decides the park, so reading its rows would show "waiting" on a park long since decided: a
+ * non-running run answers `false`. Consumers surface the bit as an optional wire member that is `true` or absent,
+ * never `false`.
+ */
+export declare function runParkedOf(run: Pick<WorkflowRun, "status" | "agents">): boolean;
 /**
  * #642 — thrown by `ctx.agent` / `ctx.agentStream().result()` when the child durably PAUSED at an approval gate
  * under the host's forwarded `durableApproval` (the workflow lane's park family, the background delegation's

package/dist/orchestration/workflow-types.js

@@ -58,6 +58,12 @@ export class WorkflowAgentBlockedError extends Error {
     }
 }
 export const WORKFLOW_AGENT_PARKED_ERROR_CODE = "workflow.agent_parked";
+export function parkedAgentsOf(agents) {
+    return agents.filter((a) => a.status === "parked");
+}
+export function runParkedOf(run) {
+    return run.status === "running" && parkedAgentsOf(run.agents).length > 0;
+}
 export class WorkflowAgentParkedError extends Error {
     label;
     gateKind;

package/dist/orchestration/workflow.d.ts

@@ -32,7 +32,7 @@ export declare const WORKFLOW_SUBAGENT_APPEND_SCHEMA = "---\n\nNOTE: You are run
  * core versions replays cleanly; the persona is an execution detail, not call identity).
  */
 /**
- * F4 agentType (CC 198 锚 pretty.js:446608-446627): resolve `opts.agentType` against the registry
+ * F4 agentType: resolve `opts.agentType` against the registry
  * (deployment SHADOW over built-ins) and fold the definition into the child spec — persona as
  * `systemPrompt` (so {@link withWorkflowChildPersona} composes the return-contract NOTE via the
  * custom-persona APPEND arm = CC `O0m` semantics), model/thinking/maxTurns/skills/memory/
@@ -115,17 +115,6 @@ export declare class WorkflowResultTooLargeError extends Error {
     readonly code = "workflow.result_too_large";
     constructor(size: number, max: number);
 }
-/** A resume journal entry whose result carries no terminal cause — a journal written before
- *  `TaskResult.terminal` existed, or a malformed entry — is INCOMPATIBLE, and the resume is refused
- *  before any work is dispatched. The alternative (letting the entry diverge into a live re-run) would
- *  execute the already-completed prefix again, side effects included; a schema mismatch is never a
- *  permission to rerun finished work. Start a fresh run instead of resuming such a journal. */
-export declare class WorkflowJournalIncompatibleError extends Error {
-    readonly fromRunId: string;
-    readonly ordinal: number;
-    readonly code = "workflow.journal_incompatible";
-    constructor(fromRunId: string, ordinal: number);
-}
 /**
  * Thrown by `ctx.agent` / `ctx.agentStream().result()` when the journal store did not answer the append of the
  * call's result within {@link RunWorkflowOptions.journalAppendTimeoutMs}. A STORE fault, not a run timeout: the
@@ -174,7 +163,7 @@ export interface WorkflowAgentOptions {
     /** Display label for this agent-run (else `agent-N`). */
     label?: string;
     /**
-     * F4 (CC 198 parity, 锚 pretty.js:446608-446627; DEFER 解除 2026-07-11 — 前提「无 agent 注册表」被
+     * F4 (DEFER 解除 2026-07-11 — 前提「无 agent 注册表」被
      * 1.262.0 agents F1 推翻): run this agent AS a named agent type from the deployment's registry
      * (built-in Explore/Plan + `RunWorkflowOptions.agents`, deployment SHADOW wins on a name collision —
      * the same registry the Agent tool's `subagent_type` resolves). The definition supplies persona
@@ -555,6 +544,9 @@ export interface RunWorkflowOptions {
      * takes). TRUSTED: a host-supplied decision, never a script/model argument; requires `resumeFromRunId`.
      */
     parkedResume?: ReadonlyArray<WorkflowParkedResume>;
+    /** The claim holder of the run on whose behalf the drives run (`RunInternals.holder`): every drive's resume carries it into its
+     *  CAS (`expect.holder`), so a run whose grant was superseded applies none of the decisions above. TRUSTED, like the decisions. */
+    holder?: string;
     /** design/148 S1 — the HOST run's adopted center artifact (trusted, threaded by the Workflow tool
      *  from ctx): every spawned agent composes the same closure. */
     parentCenterArtifactDigest?: string;