@sema-agent/mods-kernel 7.57.0 → 7.58.0

package/dist/dispatch.d.ts

@@ -48,6 +48,7 @@ export interface ModDispatchOptions {
     readonly frames?: readonly ModFrame[];
     readonly origin?: ModOrigin;
     readonly checkAnswer?: ModAnswerCheck;
+    readonly checkHandOn?: (payload: ModEventPayload) => string | undefined;
     readonly ranks?: ModAnswerRanks;
     readonly participant?: (p: ModParticipant) => boolean;
 }

package/dist/dispatch.js

@@ -1,7 +1,7 @@
 import { CATCH_BUDGET_MS, createSelfBudget, POST_ABORT_GRACE_MS, RUNAWAY_AFTER_MS, unrefTimer, watchRunaway } from "./budget.js";
 import { expandOnSide, failureRefuses, isModEventName, MOD_SEATS, nextToRefusal, stationOn } from "./events.js";
 import { ENGINE_ORIGIN, modsInvalid, screenModSeats, } from "./registration.js";
-import { answerUpward, answerViolation, detachedCopy, engineObjectsOnce, handedOn, matcherMatches, matcherViolation, methodAnswerViolation, NEXT_IN_FLIGHT, receiveAnswer, receiveEvent, receivePayload, sealedObjects, } from "./site-rules.js";
+import { answerUpward, answerViolation, detachedCopy, engineObjectsOnce, handedOn, handOnViolation, matcherMatches, matcherViolation, methodAnswerViolation, NEXT_IN_FLIGHT, receiveAnswer, receiveEvent, receivePayload, sealedObjects, } from "./site-rules.js";
 const TIER_RANK = { prepend: 0, user: 1, append: 2, builtin: 3, core: 4 };
 const bypassed = (floors, tier) => floors.some((f) => TIER_RANK[f.from] < TIER_RANK[tier] && TIER_RANK[tier] < TIER_RANK[f.to]);
 export async function admitMods(input) {
@@ -31,23 +31,22 @@ export async function admitMods(input) {
         });
         if (outcome.kind === "aborted")
             throw input.signal?.reason ?? new Error("admission aborted");
+        const whose = { name: cand.name, seat: cand.seat, tier: cand.tier, ...(cand.provenance !== undefined ? { provenance: cand.provenance } : {}) };
         if (outcome.kind === "failed") {
-            records.push(Object.freeze({ name: cand.name, seat: cand.seat, tier: cand.tier, refusedBy: outcome.registration, reason: `${outcome.registration} failed: ${outcome.reason}` }));
+            records.push(Object.freeze({ ...whose, refusedBy: outcome.registration, reason: `${outcome.registration} failed: ${outcome.reason}` }));
             continue;
         }
         const refused = refusalOf(outcome.answer);
         if (refused !== undefined) {
-            records.push(Object.freeze({ name: cand.name, seat: cand.seat, tier: cand.tier, refusedBy: outcome.answeredBy ?? "engine", reason: refused }));
+            records.push(Object.freeze({ ...whose, refusedBy: outcome.answeredBy ?? "engine", reason: refused }));
             continue;
         }
         const own = mountOne(cand, input.side, describe);
         mounted.push(...own);
         const events = unique(own.map((h) => h.pattern));
-        const observe = unique(own.filter((h) => h.observe).map((h) => h.pattern));
+        const observe = Object.freeze(events.filter((p) => own.every((h) => h.pattern !== p || h.observe)));
         records.push(Object.freeze({
-            name: cand.name,
-            seat: cand.seat,
-            tier: cand.tier,
+            ...whose,
             events,
             ...(observe.length > 0 ? { observe } : {}),
             ...(outcome.skipped.length > 0 ? { skipped: outcome.skipped } : {}),
@@ -376,7 +375,10 @@ function createBus(side, mounted, bottoms, entries, report, records, describe, i
             if (passed === e0)
                 return { snap: e0 };
             const handed = handedOn(st.pinned, e0, passed, engines(), isProxy);
-            return "violation" in handed ? handed : { snap: handed.payload };
+            if ("violation" in handed)
+                return handed;
+            const why = handOnViolation(handed.payload, options.checkHandOn);
+            return why !== undefined ? { violation: why } : { snap: handed.payload };
         };
         const trustFloors = new Map();
         const NO_FLOOR = Object.freeze(MOD_SEATS.map(() => 0));

package/dist/events.d.ts

@@ -1,4 +1,4 @@
-export declare const KERNEL_CONTRACT_VERSION = 3;
+export declare const KERNEL_CONTRACT_VERSION = 4;
 export declare const MOD_TIERS: readonly ["prepend", "user", "append", "builtin", "core"];
 export type ModTier = (typeof MOD_TIERS)[number];
 export type ModRegistrationTier = Exclude<ModTier, "builtin" | "core">;

package/dist/events.js

@@ -1,4 +1,4 @@
-export const KERNEL_CONTRACT_VERSION = 3;
+export const KERNEL_CONTRACT_VERSION = 4;
 export const MOD_TIERS = Object.freeze(["prepend", "user", "append", "builtin", "core"]);
 export const MOD_SEATS = Object.freeze(["deployment", "task"]);
 export const MOD_EVENT_SIDES = Object.freeze(["engine", "surface", "both"]);

package/dist/registration.d.ts

@@ -88,6 +88,7 @@ export type ModAdmissionRecord = {
     readonly name: string;
     readonly seat: ModSeat;
     readonly tier: ModTier;
+    readonly provenance?: string;
     readonly events: readonly string[];
     readonly observe?: readonly string[];
     readonly skipped?: readonly ModSkip[];
@@ -95,6 +96,7 @@ export type ModAdmissionRecord = {
     readonly name: string;
     readonly seat: ModSeat;
     readonly tier: ModTier;
+    readonly provenance?: string;
     readonly refusedBy: string;
     readonly reason: string;
 };

package/dist/site-rules.d.ts

@@ -44,6 +44,7 @@ export declare function pinnedHandOn(pinned: readonly string[], held: ModEventPa
     readonly violation: string;
 };
 export declare function answerViolation(answer: unknown, check: ModAnswerCheck | undefined, e: ModEventPayload, by: ModAnswerer, below: readonly unknown[], run: ModDispatchRun): string | undefined;
+export declare function handOnViolation(payload: ModEventPayload, check: ((payload: ModEventPayload) => string | undefined) | undefined): string | undefined;
 export declare function methodAnswerViolation(answer: unknown, _e?: ModEventPayload, _by?: ModAnswerer, below?: readonly unknown[]): string | undefined;
 export declare function matcherViolation(m: unknown): string | undefined;
 export declare function matcherMatches(m: ModMatcher | undefined, e: ModEventPayload): boolean;

package/dist/site-rules.js

@@ -203,6 +203,16 @@ export function answerViolation(answer, check, e, by, below, run) {
         return "returned an answer the station cannot read";
     }
 }
+export function handOnViolation(payload, check) {
+    if (check === undefined)
+        return undefined;
+    try {
+        return check(payload);
+    }
+    catch {
+        return "handed on an event the station cannot read";
+    }
+}
 const denyOf = (a) => (typeof a === "object" && a !== null && Object.prototype.hasOwnProperty.call(a, "deny") ? Reflect.get(a, "deny") : undefined);
 export function methodAnswerViolation(answer, _e, _by, below = []) {
     if (!isPlainRecord(answer))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/mods-kernel",
-  "version": "7.57.0",
+  "version": "7.58.0",
   "private": false,
   "description": "The sema mods kernel: one extension bus (registration, admission, chain, failure and budget law) shared by the engine and the shell. Zero dependencies.",
   "type": "module",
@@ -31,5 +31,5 @@
   "scripts": {
     "build": "tsc -p tsconfig.json"
   },
-  "gitHead": "84be0e09dcdd8e157f88f083241ceafedc0f33aa"
+  "gitHead": "05f1a14710d078da0b338fe8712e16f8d790f6bd"
 }