@sema-agent/core 7.56.0 → 7.57.0

package/wire-changes/core@7.57.0.json

@@ -0,0 +1,1487 @@
+{
+  "repo": "core",
+  "version": "7.57.0",
+  "from": "f670b709158790d2f763935fd22da62d73e88c47",
+  "to": "v7.57.0",
+  "added": [
+    {
+      "name": "ApprovalTargetReads",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/approval-object.ts:41",
+        "src/index.ts:1203"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CREDENTIAL_REF_KINDS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2152",
+        "src/primitives/credential-ref.ts:9",
+        "src/primitives/index.ts:3"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CREDENTIAL_REF_MAP_MAX",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2155",
+        "src/primitives/credential-ref.ts:48",
+        "src/primitives/index.ts:6"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CREDENTIAL_REF_PROBLEM_REASONS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2156",
+        "src/primitives/credential-ref.ts:51",
+        "src/primitives/index.ts:7"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CREDENTIAL_REF_TEXT_MAX",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2154",
+        "src/primitives/credential-ref.ts:45",
+        "src/primitives/index.ts:5"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CREDENTIAL_REF_TRUST",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2153",
+        "src/primitives/credential-ref.ts:33",
+        "src/primitives/index.ts:4"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CompactSessionRequest",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/auto-compaction.ts:1961",
+        "src/index.ts:910"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CompactSessionResult",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/auto-compaction.ts:1983",
+        "src/index.ts:910"
+      ],
+      "criteriaCovered": true,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRef",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2158",
+        "src/primitives/credential-ref.ts:17",
+        "src/primitives/index.ts:9"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRefKind",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2159",
+        "src/primitives/credential-ref.ts:10",
+        "src/primitives/index.ts:10"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRefProblem",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2161",
+        "src/primitives/credential-ref.ts:60",
+        "src/primitives/index.ts:12"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRefProblemReason",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2162",
+        "src/primitives/credential-ref.ts:52",
+        "src/primitives/index.ts:13"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRefReading",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2163",
+        "src/primitives/credential-ref.ts:67",
+        "src/primitives/index.ts:14"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "CredentialRefRequestAdmission",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2160",
+        "src/primitives/credential-ref.ts:24",
+        "src/primitives/index.ts:11"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "MAILBOX_DECISIONS",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:71",
+        "src/index.ts:1366"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "MAILBOX_INVALID_DECISION_MOVE_CODE",
+      "kind": "variable",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:83",
+        "src/index.ts:1367"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "MailboxDecision",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:72",
+        "src/index.ts:1364"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "MailboxDecisionOutcome",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:115",
+        "src/index.ts:1365"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "McpNameConflict",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-name-judge.ts:37",
+        "src/index.ts:340"
+      ],
+      "criteriaCovered": true,
+      "breaking": false
+    },
+    {
+      "name": "McpNameSetServer",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-name-judge.ts:28",
+        "src/index.ts:340"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "McpNameVerdict",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-name-judge.ts:42",
+        "src/index.ts:340"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "PeerCardDecision",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/agents/peer-held-queue.ts:39",
+        "src/index.ts:3474"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "PeerHoldOutcome",
+      "kind": "type",
+      "tier": "advanced",
+      "at": [
+        "src/agents/peer-held-queue.ts:133",
+        "src/index.ts:3473"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ReadLanding",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:1177",
+        "src/tools/fs/shell-read-identity.ts:36"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "ReadOnlyShellOptions",
+      "kind": "interface",
+      "tier": "advanced",
+      "at": [
+        "src/core/read-only-shell.ts:49",
+        "src/index.ts:1938"
+      ],
+      "criteriaCovered": true,
+      "breaking": false
+    },
+    {
+      "name": "adjudicatePersistedToolRules",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/permission-rule-model.ts:3347",
+        "src/index.ts:1725"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "assertMailboxDecisionMove",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:133",
+        "src/index.ts:1372"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "checkpointStoreIncomplete",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/checkpoint-store.ts:3321",
+        "src/index.ts:828"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "describeMcpNameConflict",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-name-judge.ts:96",
+        "src/index.ts:340"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "engineAgentName",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/task-registry-shared.ts:1184",
+        "src/core/task-registry.ts:75",
+        "src/index.ts:1325"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "isMailboxDecision",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:85",
+        "src/index.ts:1368"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "isMailboxDecisionDeliverable",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:95",
+        "src/index.ts:1370"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "isMailboxDecisionFinal",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:90",
+        "src/index.ts:1369"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "judgeMcpNames",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mcp-name-judge.ts:66",
+        "src/index.ts:340"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "mailboxDecisionEdgeAllowed",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:105",
+        "src/index.ts:1371"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "moveMailboxDecision",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:123",
+        "src/index.ts:1373"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readCredentialRef",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/index.ts:2157",
+        "src/primitives/credential-ref.ts:182",
+        "src/primitives/index.ts:8"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "readStoredMailboxDecision",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/mailbox-store.ts:76",
+        "src/index.ts:1374"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    },
+    {
+      "name": "teardownLegBudget",
+      "kind": "variable",
+      "tier": "internal",
+      "at": [
+        "src/core/runner/teardown-bounded.ts:37",
+        "src/index.ts:2671"
+      ],
+      "criteriaCovered": false,
+      "breaking": false
+    }
+  ],
+  "removed": [
+    {
+      "name": "checkpointStoreExecutionUndeclared",
+      "kind": "function",
+      "tier": "advanced",
+      "at": [
+        "src/core/checkpoint-store.ts:3318",
+        "src/index.ts:827"
+      ],
+      "breaking": true
+    }
+  ],
+  "changed": [],
+  "narrowed": [
+    {
+      "id": "F2",
+      "source": "behaviorFlips.summary",
+      "text": "#2604 (security fix; behavior narrowing, open to veto): the `pkill -P $$` way out is read by the option walk that builds the question — another `-P` list beside the shell's, a negation in any spelling, a word the guard cannot read (an expansion other than the shell's pid, a stream), and on macOS a `-P $$` after the pattern no longer run unasked."
+    },
+    {
+      "id": "F3",
+      "source": "behaviorFlips.summary",
+      "text": "#2604 fix1 (behavior narrowing, open to veto): `$BASHPID` is no longer the shell's pid word — only the special parameters `$$` / `${$}` bound a `pkill -P` selection."
+    },
+    {
+      "id": "F5",
+      "source": "behaviorFlips.summary",
+      "text": "#1449 slice S1 (behavior narrowing, open to veto; stricter than the reference): a remote endpoint's words reach the engine's own text through one mint (`remoteWords`) — a model brain's and the memory distiller seat's failure text carry no declared request value and no credential-shaped string; a torn body's last word, an echoed `requestId` / `apiErrorCode` that carries either, and the non-`category` / `explanation` members of Anthropic `stop_details` are not carried."
+    },
+    {
+      "id": "F6",
+      "source": "behaviorFlips.summary",
+      "text": "#2529 (design/1449 slice S2a; behavior narrowing, open to veto): the engine's own account leaves through one throat per channel and is minted there — a notice's sentence and every string leaf of its detail, every string leaf of a trace frame, a memory announcement item, the three compaction failure lanes' reason, a host Brain's failure words, WebFetch's reason phrase and a worktree mint's thrown text carry no credential-shaped string; a notice's detail and a trace frame reach the host as a new data snapshot."
+    },
+    {
+      "id": "F7",
+      "source": "behaviorFlips.summary",
+      "text": "#1449 fix1 (behavior narrowing, open to veto): the member bound belongs to foreign values only — the engine's own plain data in a frame or a detail is carried whole, and a Proxy inside an account is read as a foreign value."
+    },
+    {
+      "id": "F10",
+      "source": "behaviorFlips.summary",
+      "text": "#2769 (behavior narrowing, open to veto): a Model object the engine cannot read — no non-empty string `id`, or no string `api` — is refused by name at every seat that takes a model, `runTask` and `compactSession` alike, through the existing `config.unknown_role` / `not_a_model_ref`."
+    },
+    {
+      "id": "F15",
+      "source": "behaviorFlips.summary",
+      "text": "#2654 (behavior narrowing, open to veto; differs from the reference in both directions, #2747): a stored bare-name rule names a tool the catalog spells exactly — a case twin of a catalog tool (`BASH`, `webfetch`, `READ`) is refused `unsupported.tool`, its sentence naming the spelling to write, as a retired spelling is."
+    },
+    {
+      "id": "F17",
+      "source": "behaviorFlips.summary",
+      "text": "#1185 (behavior narrowing, open to veto): a parked shell call whose reads moved while it waited — a re-pointed link, a pattern that gains or loses an entry, a read the card did not cover — is vetoed `resume.target_moved` and asked again."
+    },
+    {
+      "id": "F25",
+      "source": "behaviorFlips.summary",
+      "text": "#1438 S1 (hard-breaking one, open to veto; ruling C-R817): `readOnlyShellVerdict(command, shape?, cwd?, bound?)` became `readOnlyShellVerdict(command, { shape?, cwd?, bound?, readers? })`; `readers` (a set of program names) narrows the answer; a `readers` value without a callable `has` throws a `TypeError` (the CHANGELOG's \"a `Set` …; any other value throws\" is stricter than the check, which reads only `has`)."
+    },
+    {
+      "id": "F26",
+      "source": "behaviorFlips.summary",
+      "text": "#1438 S1 (behavior change and security narrowing, open to veto; divergences from the reference, open to veto): one judge answers \"does this shell command only read\" for the parallel-batch admission, the read-only shell face and the transcript gate, each face's program list only narrowing it; `noglob <program>` is no longer read-only."
+    },
+    {
+      "id": "F27",
+      "source": "behaviorFlips.summary",
+      "text": "#2511 (behavior narrowing, open to veto): one selector build — a leg's tool lists are read once by the strict reader before the session is acquired; a refused list is refused before any `acquire` and before any declared MCP server is dialed; a live ceiling layer is read once and a parked row records the layers as read."
+    },
+    {
+      "id": "G9",
+      "source": "criteria.title",
+      "text": "#1438 / #2511 — one read-only judge for every read-only consumer, each face's program list only narrowing it (`readOnlyShellVerdict(command, { readers })`), and one selector build whose read is what a parked row records"
+    }
+  ],
+  "closedSetMembers": [
+    {
+      "set": "CREDENTIAL_REF_KINDS",
+      "at": [
+        "src/primitives/credential-ref.ts:9"
+      ],
+      "newSet": true,
+      "added": [
+        "assertion",
+        "env",
+        "handle",
+        "vault"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CREDENTIAL_REF_PROBLEM_REASONS",
+      "at": [
+        "src/primitives/credential-ref.ts:51"
+      ],
+      "newSet": true,
+      "added": [
+        "bad_value",
+        "extra_field",
+        "missing_field",
+        "not_a_record",
+        "unknown_kind"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CardRuleForm",
+      "at": [
+        "src/core/permission-rule-model.ts:412"
+      ],
+      "newSet": true,
+      "added": [
+        "command",
+        "domain",
+        "name",
+        "tool"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CredentialRefKind",
+      "at": [
+        "src/index.ts:2159",
+        "src/primitives/credential-ref.ts:10",
+        "src/primitives/index.ts:10"
+      ],
+      "newSet": true,
+      "added": [
+        "assertion",
+        "env",
+        "handle",
+        "vault"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CredentialRefProblemReason",
+      "at": [
+        "src/index.ts:2162",
+        "src/primitives/credential-ref.ts:52",
+        "src/primitives/index.ts:13"
+      ],
+      "newSet": true,
+      "added": [
+        "bad_value",
+        "extra_field",
+        "missing_field",
+        "not_a_record",
+        "unknown_kind"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "CredentialRefRequestAdmission",
+      "at": [
+        "src/primitives/credential-ref.ts:24"
+      ],
+      "newSet": true,
+      "added": [
+        "own_entry",
+        "refused"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "MAILBOX_DECISIONS",
+      "at": [
+        "src/core/mailbox-store.ts:71"
+      ],
+      "newSet": true,
+      "added": [
+        "approved",
+        "delivered",
+        "denied",
+        "dropped",
+        "expired",
+        "held",
+        "refused"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "MailboxDecision",
+      "at": [
+        "src/core/mailbox-store.ts:72",
+        "src/index.ts:1364"
+      ],
+      "newSet": true,
+      "added": [
+        "approved",
+        "delivered",
+        "denied",
+        "dropped",
+        "expired",
+        "held",
+        "refused"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PERSISTED_RULE_MATCHES",
+      "at": [
+        "src/core/permission-rule-model.ts:487"
+      ],
+      "newSet": false,
+      "added": [
+        "tool"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PeerHeldSettleOutcome",
+      "at": [
+        "src/agents/peer-held-queue.ts:126"
+      ],
+      "newSet": false,
+      "added": [
+        "decided_elsewhere"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PeerHeldSettleReason",
+      "at": [
+        "src/agents/peer-held-queue.ts:67"
+      ],
+      "newSet": false,
+      "added": [
+        "decided_elsewhere"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PeerHeldSettlement",
+      "at": [
+        "src/agents/peer-held-queue.ts:66"
+      ],
+      "newSet": false,
+      "added": [
+        "retired"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "PeerHoldOutcome",
+      "at": [
+        "src/agents/peer-held-queue.ts:133"
+      ],
+      "newSet": true,
+      "added": [
+        "adopted",
+        "denied",
+        "dropped",
+        "expired",
+        "fault",
+        "gone",
+        "held",
+        "refused",
+        "uncarded"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "set": "REQUIREMENT_WORDS",
+      "at": [
+        "src/core/checkpoint-requirements.ts:36"
+      ],
+      "newSet": false,
+      "added": [
+        "approval_target_reads"
+      ],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "closedSetsUnreadable": [],
+  "typeKeys": [
+    {
+      "type": "ApprovalObject",
+      "at": [
+        "src/core/approval-object.ts:54"
+      ],
+      "added": [
+        "targetReads"
+      ],
+      "addedDetail": [
+        {
+          "key": "targetReads",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "CheckpointStore",
+      "at": [
+        "src/core/checkpoint-store.ts:2962"
+      ],
+      "added": [],
+      "addedDetail": [],
+      "addedRequired": [],
+      "removed": [
+        "redecision",
+        "redecision.reopen",
+        "redecision.validatingLease"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "FileCheckpointStore",
+      "at": [
+        "src/stores/file/checkpoint-store.ts:261"
+      ],
+      "added": [],
+      "addedDetail": [],
+      "addedRequired": [],
+      "removed": [
+        "redecision"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "FileMailboxStore",
+      "at": [
+        "src/stores/file/mailbox-store.ts:561"
+      ],
+      "added": [
+        "moveDecision"
+      ],
+      "addedDetail": [
+        {
+          "key": "moveDecision",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "InMemoryCheckpointStore",
+      "at": [
+        "src/core/checkpoint-store.ts:3718"
+      ],
+      "added": [],
+      "addedDetail": [],
+      "addedRequired": [],
+      "removed": [
+        "redecision"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "InMemoryMailboxStore",
+      "at": [
+        "src/core/mailbox-store.ts:535"
+      ],
+      "added": [
+        "moveDecision"
+      ],
+      "addedDetail": [
+        {
+          "key": "moveDecision",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "LiveApprovalObject",
+      "at": [
+        "src/core/approval-object.ts:114"
+      ],
+      "added": [
+        "reads"
+      ],
+      "addedDetail": [
+        {
+          "key": "reads",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "MailboxMessage",
+      "at": [
+        "src/core/mailbox-store.ts:39"
+      ],
+      "added": [
+        "decision"
+      ],
+      "addedDetail": [
+        {
+          "key": "decision",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": true
+    },
+    {
+      "type": "MailboxStore",
+      "at": [
+        "src/core/mailbox-store.ts:428"
+      ],
+      "added": [
+        "moveDecision"
+      ],
+      "addedDetail": [
+        {
+          "key": "moveDecision",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "moveDecision"
+      ],
+      "removed": [],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "PeerHeldEntry",
+      "at": [
+        "src/agents/peer-held-queue.ts:41"
+      ],
+      "added": [
+        "decision"
+      ],
+      "addedDetail": [
+        {
+          "key": "decision",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "decision"
+      ],
+      "removed": [
+        "released"
+      ],
+      "breaking": true,
+      "criteriaCovered": true
+    },
+    {
+      "type": "PeerHeldQueue",
+      "at": [
+        "src/agents/peer-held-queue.ts:135"
+      ],
+      "added": [
+        "has"
+      ],
+      "addedDetail": [
+        {
+          "key": "has",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "has"
+      ],
+      "removed": [
+        "decisions",
+        "forgetDecisions"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "PeerHeldQueueSink",
+      "at": [
+        "src/agents/peer-held-queue.ts:90"
+      ],
+      "added": [
+        "canInject",
+        "decide",
+        "onFault",
+        "tellsSender"
+      ],
+      "addedDetail": [
+        {
+          "key": "canInject",
+          "optional": true
+        },
+        {
+          "key": "decide",
+          "optional": false
+        },
+        {
+          "key": "onFault",
+          "optional": true
+        },
+        {
+          "key": "tellsSender",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "decide",
+        "tellsSender"
+      ],
+      "removed": [],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "PendingAction",
+      "at": [
+        "src/core/checkpoint-store.ts:993"
+      ],
+      "added": [
+        "tool_approval.targetReads"
+      ],
+      "addedDetail": [
+        {
+          "key": "tool_approval.targetReads",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    },
+    {
+      "type": "RemoteExecutionEnv",
+      "at": [
+        "src/core/remote-env.ts:361"
+      ],
+      "added": [
+        "capabilities.sharesProcessTable"
+      ],
+      "addedDetail": [
+        {
+          "key": "capabilities.sharesProcessTable",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "capabilities.sharesProcessTable"
+      ],
+      "removed": [],
+      "breaking": true,
+      "criteriaCovered": true
+    },
+    {
+      "type": "ResumeRun",
+      "at": [
+        "src/core/runner/contracts.ts:2415"
+      ],
+      "via": "Runner.ResumeRun",
+      "added": [
+        "reopenUnstarted"
+      ],
+      "addedDetail": [
+        {
+          "key": "reopenUnstarted",
+          "optional": false
+        }
+      ],
+      "addedRequired": [
+        "reopenUnstarted"
+      ],
+      "removed": [
+        "onEnvRestoreFailed"
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "type": "Runner",
+      "at": [
+        "src/core/runner/runtask.ts:173"
+      ],
+      "added": [
+        "compactSession"
+      ],
+      "addedDetail": [
+        {
+          "key": "compactSession",
+          "optional": true
+        }
+      ],
+      "addedRequired": [],
+      "removed": [],
+      "breaking": false,
+      "criteriaCovered": false
+    }
+  ],
+  "typeKeysUnreadableArms": [],
+  "typeKeysFlattenedCount": 249,
+  "signatures": [
+    {
+      "name": "PeerHeldQueue.hold",
+      "at": [
+        "src/agents/peer-held-queue.ts:151"
+      ],
+      "from": [
+        "(entry: Omit<PeerHeldEntry, \"heldAt\" | \"released\">): void"
+      ],
+      "to": [
+        "(entry: Omit<PeerHeldEntry, \"heldAt\" | \"decision\">, decision?: PeerCardDecision): Promise<PeerHoldOutcome>"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 1 `entry` type changed, direction not read: …rHeldEntry, \"heldAt\" | \"[released -> decision]\">",
+          "breaking": true,
+          "uncertain": true
+        },
+        {
+          "aspect": "param",
+          "detail": "+optional param `decision?: PeerCardDecision`",
+          "breaking": false
+        },
+        {
+          "aspect": "returns",
+          "detail": "return type [void -> Promise<PeerHoldOutcome>]",
+          "breaking": true
+        }
+      ],
+      "uncertain": "param 1 `entry` type changed, direction not read: …rHeldEntry, \"heldAt\" | \"[released -> decision]\"> — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "PeerHeldQueue.reconcile",
+      "at": [
+        "src/agents/peer-held-queue.ts:164"
+      ],
+      "from": [
+        "(present: ReadonlySet<number>): number"
+      ],
+      "to": [
+        "(snapshot: ReadonlyMap<number, MailboxDecision | undefined>): number"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 1 `snapshot` type changed, direction not read: Readonly[Set<number -> Map<number, MailboxDecision | undefined]>",
+          "breaking": true,
+          "uncertain": true
+        }
+      ],
+      "uncertain": "param 1 `snapshot` type changed, direction not read: Readonly[Set<number -> Map<number, MailboxDecision | undefined]> — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "PeerHeldQueue.rejudge",
+      "at": [
+        "src/agents/peer-held-queue.ts:155"
+      ],
+      "from": [
+        "(): { released: number; refused: number; held: number; }"
+      ],
+      "to": [
+        "(): Promise<{ released: number; refused: number; held: number; }>"
+      ],
+      "changes": [
+        {
+          "aspect": "returns",
+          "detail": "return type [{ released: number; refused: number; held: number; } -> Promise<{ released: number; refused: number; held: number; }>]",
+          "breaking": true
+        }
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "PeerHeldQueue.settle",
+      "at": [
+        "src/agents/peer-held-queue.ts:168"
+      ],
+      "from": [
+        "(seq: number, decision: \"approve\" | \"cancel\" | \"deny\"): PeerHeldSettleOutcome"
+      ],
+      "to": [
+        "(seq: number, decision: \"approve\" | \"cancel\" | \"deny\"): Promise<PeerHeldSettleOutcome>"
+      ],
+      "changes": [
+        {
+          "aspect": "returns",
+          "detail": "return type P[eerHeldSettleOutcome -> romise<PeerHeldSettleOutcome>]",
+          "breaking": true
+        }
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "PeerHeldQueue.shutdown",
+      "at": [
+        "src/agents/peer-held-queue.ts:175"
+      ],
+      "from": [
+        "(): void"
+      ],
+      "to": [
+        "(): Promise<void>"
+      ],
+      "changes": [
+        {
+          "aspect": "returns",
+          "detail": "return type [void -> Promise<void>]",
+          "breaking": true
+        }
+      ],
+      "breaking": true,
+      "criteriaCovered": false
+    },
+    {
+      "name": "readOnlyShellVerdict",
+      "at": [
+        "src/core/read-only-shell.ts:129"
+      ],
+      "from": [
+        "(command: string, shape?: ShellCommandShape, cwd?: string, bound?: (() => LineDescriptors) | LineDescriptors): ReadOnlyShellVerdict"
+      ],
+      "to": [
+        "(command: string, opts?: ReadOnlyShellOptions): ReadOnlyShellVerdict"
+      ],
+      "changes": [
+        {
+          "aspect": "param",
+          "detail": "param 2 `opts` type changed, direction not read: [ShellCommandShape -> ReadOnlyShellOptions]",
+          "breaking": true,
+          "uncertain": true
+        },
+        {
+          "aspect": "param",
+          "detail": "-param `cwd?: string`",
+          "breaking": true
+        },
+        {
+          "aspect": "param",
+          "detail": "-param `bound?: (() => LineDescriptors) | LineDescriptors`",
+          "breaking": true
+        }
+      ],
+      "uncertain": "param 2 `opts` type changed, direction not read: [ShellCommandShape -> ReadOnlyShellOptions] — the direction of a type change is not read syntactically, so it is reported breaking: check whether existing call sites still type-check before writing the BREAKING line",
+      "breaking": true,
+      "criteriaCovered": false
+    }
+  ],
+  "declarationMoves": [
+    {
+      "name": "convertToLlm",
+      "kind": null,
+      "onSurface": false,
+      "from": [
+        "src/engine/harness/messages.ts"
+      ],
+      "to": [
+        "src/engine/harness/messages.ts",
+        "src/internal/harness.ts"
+      ]
+    },
+    {
+      "name": "nearMissSpellingOf",
+      "kind": null,
+      "onSurface": false,
+      "from": [
+        "src/core/allow-entry.ts"
+      ],
+      "to": [
+        "src/core/tool-name-aliases.ts"
+      ]
+    }
+  ],
+  "mintMoves": [],
+  "criteriaObserves": [
+    {
+      "kind": "engineNoticeCode",
+      "name": "config.execution_env_capability_invalid",
+      "assertions": [
+        "G1.a"
+      ]
+    },
+    {
+      "kind": "engineNoticeCode",
+      "name": "route.finish_reason_unknown",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.isError",
+      "assertions": [
+        "G1.a",
+        "G5.a",
+        "G6.a",
+        "G9.a"
+      ]
+    },
+    {
+      "kind": "taskEventField",
+      "name": "tool_end.structured",
+      "assertions": [
+        "G1.a",
+        "G6.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ApprovalObject.targetReads",
+      "assertions": [
+        "G6.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "AskRequest.ruleOffersAbsence",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "BackgroundAgentRecord.name",
+      "assertions": [
+        "G10.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "BackgroundAgentRowSummary.name",
+      "assertions": [
+        "G10.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CheckpointStore.reopen",
+      "assertions": [
+        "G8.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CompactSessionResult.events",
+      "assertions": [
+        "G3.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "CompactSessionResult.outcome",
+      "assertions": [
+        "G3.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "EngineNotice.detail",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "EngineNotice.message",
+      "assertions": [
+        "G2.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "FileHistoryError.code",
+      "assertions": [
+        "G11.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "MailboxMessage.decision",
+      "assertions": [
+        "G7.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "McpNameConflict.kind",
+      "assertions": [
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "PeerHeldEntry.decision",
+      "assertions": [
+        "G7.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "ReadOnlyShellOptions.readers",
+      "assertions": [
+        "G9.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "RemoteExecutionEnv.capabilities.sharesProcessTable",
+      "assertions": [
+        "G1.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "RuleReject.code",
+      "assertions": [
+        "G5.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "TaskResult.terminal.code",
+      "assertions": [
+        "G4.a",
+        "G8.a",
+        "G9.a",
+        "G12.a"
+      ]
+    },
+    {
+      "kind": "typeMember",
+      "name": "TaskResult.terminal.message",
+      "assertions": [
+        "G2.a",
+        "G4.a"
+      ]
+    }
+  ],
+  "consumersHint": {
+    "cli": [
+      "CheckpointStore",
+      "FileMailboxStore",
+      "MailboxStore",
+      "PeerHeldQueue",
+      "PeerHeldSettleReason",
+      "PendingAction",
+      "REQUIREMENT_WORDS",
+      "RemoteExecutionEnv",
+      "ResumeRun",
+      "Runner",
+      "readOnlyShellVerdict"
+    ],
+    "server": [
+      "CheckpointStore",
+      "FileCheckpointStore",
+      "FileMailboxStore",
+      "InMemoryCheckpointStore",
+      "InMemoryMailboxStore",
+      "MailboxMessage",
+      "MailboxStore",
+      "PERSISTED_RULE_MATCHES",
+      "PendingAction",
+      "RemoteExecutionEnv",
+      "ResumeRun",
+      "Runner",
+      "readOnlyShellVerdict"
+    ],
+    "sdk": [
+      "PERSISTED_RULE_MATCHES",
+      "PendingAction",
+      "Runner"
+    ],
+    "note": "scanned cli@d8289997 server@0c4fcc35 sdk@2c4a7c3 — a name listed is MENTIONED there today, which is evidence of consumption, not proof of it. Ledger files (**/docs/core-consumption/**, **/docs/wire-consumption/**, **/*LEDGER*.json) are not evidence of use — server: 10 name(s) matched ONLY in bookkeeping files and were set aside (ApprovalObject, LiveApprovalObject, PeerHeldEntry, PeerHeldQueue, PeerHeldQueueSink, PeerHeldSettleOutcome, PeerHeldSettleReason, PeerHeldSettlement, REQUIREMENT_WORDS, checkpointStoreExecutionUndeclared)"
+  },
+  "breakingCount": 19,
+  "breakingItems": [
+    "export removed: checkpointStoreExecutionUndeclared (function)",
+    "signature changed: PeerHeldQueue.hold — param 1 `entry` type changed, direction not read: …rHeldEntry, \"heldAt\" | \"[released -> decision]\">; return type [void -> Promise<PeerHoldOutcome>]",
+    "signature changed: PeerHeldQueue.reconcile — param 1 `snapshot` type changed, direction not read: Readonly[Set<number -> Map<number, MailboxDecision | undefined]>",
+    "signature changed: PeerHeldQueue.rejudge — return type [{ released: number; refused: number; held: number; } -> Promise<{ released: number; refused: number; held: number; }>]",
+    "signature changed: PeerHeldQueue.settle — return type P[eerHeldSettleOutcome -> romise<PeerHeldSettleOutcome>]",
+    "signature changed: PeerHeldQueue.shutdown — return type [void -> Promise<void>]",
+    "signature changed: readOnlyShellVerdict — param 2 `opts` type changed, direction not read: [ShellCommandShape -> ReadOnlyShellOptions]; -param `cwd?: string`; -param `bound?: (() => LineDescriptors) | LineDescriptors`",
+    "type gained required keys: MailboxStore +moveDecision",
+    "type gained required keys: PeerHeldEntry +decision",
+    "type gained required keys: PeerHeldQueue +has",
+    "type gained required keys: PeerHeldQueueSink +decide,tellsSender",
+    "type gained required keys: RemoteExecutionEnv +capabilities.sharesProcessTable",
+    "type gained required keys: ResumeRun +reopenUnstarted",
+    "type lost keys: CheckpointStore -redecision,redecision.reopen,redecision.validatingLease",
+    "type lost keys: FileCheckpointStore -redecision",
+    "type lost keys: InMemoryCheckpointStore -redecision",
+    "type lost keys: PeerHeldEntry -released",
+    "type lost keys: PeerHeldQueue -decisions,forgetDecisions",
+    "type lost keys: ResumeRun -onEnvRestoreFailed"
+  ],
+  "toResolvedAt": "b70cd95238e728c9652cf11d846cdb3338bff2c6"
+}