@sjawhar/pi-legion-envoy 3.0.1 → 3.0.3

package/dist/envoy.js

@@ -30250,7 +30250,7 @@ var dispatchToolSpecs = [
         index: z2.number({ int: true, min: 0 }).describe("Zero-based row or column index for delete_row or delete_column.").optional(),
         type: z2.string().describe("Typed block name for retype.").optional(),
         attributes: z2.unknown().describe("Typed block attributes for retype.").optional()
-      })).describe("Flat tagged edits; the server validates fields required for each operation."),
+      }, { strict: true })).describe("Flat tagged edits; an operation takes only the keys below, a misspelled one is refused rather than ignored, and the server validates the fields its op requires."),
       precondition: z2.object({
         document: z2.string({ min: 1 }).describe("Token for the exact canonical document returned by dispatch_doc_read.").optional(),
         blocks: z2.array(z2.object({
@@ -32657,8 +32657,11 @@ function formatZodIssues(issues, schema) {
         return issue2.input === undefined ? [`${path2} is required (${issue2.expected})`] : [
           `${path2} must be ${describeExpected(issue2.expected, schemaAt(schema, issue2.path))}, not ${describeInput(issue2.input)}`
         ];
-      case "unrecognized_keys":
-        return issue2.keys.map((key) => `unknown field "${key}"; allowed: ${allowed}`);
+      case "unrecognized_keys": {
+        const here = Object.keys(shapeOf(schemaAt(schema, issue2.path)) ?? {}).join(", ") || allowed;
+        const where = path2 === "" ? "" : ` in ${path2}`;
+        return issue2.keys.map((key) => `unknown field "${key}"${where}; allowed: ${here}`);
+      }
       case "invalid_value":
         return [
           `${path2} must be one of ${issue2.values.map(String).join("|")}; got ${JSON.stringify(issue2.input)}`

package/dist/legion.js

@@ -16142,7 +16142,7 @@ import { logger } from "@oh-my-pi/pi-utils";
 // package.json
 var package_default = {
   name: "@sjawhar/pi-legion-envoy",
-  version: "3.0.1",
+  version: "3.0.3",
   type: "module",
   omp: {
     extensions: [
@@ -30323,7 +30323,7 @@ var dispatchToolSpecs = [
         index: z2.number({ int: true, min: 0 }).describe("Zero-based row or column index for delete_row or delete_column.").optional(),
         type: z2.string().describe("Typed block name for retype.").optional(),
         attributes: z2.unknown().describe("Typed block attributes for retype.").optional()
-      })).describe("Flat tagged edits; the server validates fields required for each operation."),
+      }, { strict: true })).describe("Flat tagged edits; an operation takes only the keys below, a misspelled one is refused rather than ignored, and the server validates the fields its op requires."),
       precondition: z2.object({
         document: z2.string({ min: 1 }).describe("Token for the exact canonical document returned by dispatch_doc_read.").optional(),
         blocks: z2.array(z2.object({

package/dist/skills/dispatch/SKILL.md

@@ -92,8 +92,9 @@ A spec has two readers: the human who decides reads the **Summary** and **New si
 
 - The spec is the issue's one primary document. Extend it in place — a new version that keeps the
   human's own text — never a second "spec" artifact beside it.
-- No hedging ("might", "could consider"). No TBD, TODO, or placeholders: an open item is either
-  an ask block or a question for the platform PO whose ruling becomes a Requirement (see
+- No hedging ("might", "could consider"). No TBD, TODO, or placeholders: an open item is an ask
+  block, a technical decision your lane makes and records as a Requirement, or, for a contract
+  between two lanes or a halt condition, a question for the platform PO (see
   [Before you ask](#before-you-ask) under Asking).
 - Keep each section to one screen; work that exceeds one screen per section is two specs.
 - Update the spec as decisions land: the spec is the record, comments are the discussion.
@@ -281,9 +282,13 @@ eval_id? What's an R4 model header? What exactly is the question or uncertainty
 production import). Every `dispatch_ask` passes three gates first:
 
 1. **Does it need his authority, taste, or risk appetite?** This is the bar for a decision
-   written as an `:::ask` block in context ([Decision blocks](#decision-blocks)). Schema shapes,
-   table layouts, field names, migration internals, and contracts between lanes do not: they go to
-   the platform PO over Envoy, who rules.
+   written as an `:::ask` block in context ([Decision blocks](#decision-blocks)). Technical
+   decisions inside your outcome do not: schema shapes, table layouts, field names, and migration
+   internals are your lane's to decide and record in the spec. Two things still go to the
+   platform PO over Envoy: a contract between two lanes, and a halt condition (a change to IAM,
+   deletion or exposure of production data, anything that reaches a customer). The PO takes those
+   to Sami as a Dispatch ask; you do not open one yourself, even as a permission ask under gate 2
+   (Sami, 2026-09-25, AGENTC-34 §12).
 2. **Is there genuine uncertainty?** If not, it is a plan you execute. The one legitimate ask
    without uncertainty is permission for an action only a human can authorise — a production
    write, an external send, a console action — and then the question is that action in one
@@ -381,11 +386,13 @@ It returns the imported commit, or the recorded error when the model was rejecte
 
 Before saying you are waiting for human input, call `dispatch_open_asks`. With no arguments it lists this session's active asks across open issues and project documents, including whether the human or agent owes the next reply. With `dispatch_open_asks({ project })` it lists every open ask in that project — on its issues and on its documents, whoever authored them — which is how you audit what a whole project is waiting on rather than just your own asks.
 
-**Unsettled product shape needs a decision before implementation.** When a page, navigation entry, table key, customer-scoping rule, or persisted sidecar would set product shape that Sami has not already settled, send a one-line ask before the first implementation commit. A platform-PO schema or contract ruling does not settle product shape. This does not turn a user-specified decision or routine implementation into an approval request; it is inferred from AGENTC-186's 2026-09-16 retro (platform PO, 2026-09-17).
+**Unsettled product shape needs a decision before implementation.** When a page, navigation entry, table key, customer-scoping rule, or persisted sidecar would set product shape that Sami has not already settled, send a one-line ask before the first implementation commit. A lane's schema decision or a platform-PO contract ruling does not settle product shape. This does not turn a user-specified decision or routine implementation into an approval request; it is inferred from AGENTC-186's 2026-09-16 retro (platform PO, 2026-09-17).
 
 **Anything that needs the human is an ask, or it does not exist.** An approval, a credential,
 a setting only they can change, a review click, a conflict between two of their own rules - if
-your work waits on it, open a `dispatch_ask` the moment you know, the action as the question.
+your work waits on it, open a `dispatch_ask` the moment you know, the action as the question. The
+exception is a halt condition from [Before you ask](#before-you-ask) gate 1, which goes to the
+platform PO over Envoy instead.
 Never write it into a spec, a comment reply, a message, or a
 pull-request body: nothing in those paths reaches the human's Inbox, and a human who is not
 reading your document does not know they are the blocker. Before asking, try to remove the
@@ -535,6 +542,11 @@ type EditOp = {
 };
 ```
 
+An operation takes only these keys. A key it does not declare is refused before the call leaves
+your process, naming the operation and its keys, because every key but `op` is optional: a
+misspelled `with` would otherwise be dropped and the `replace` would delete the text you meant to
+rewrite.
+
 Target `replace`, `delete`, and quote insert anchors by a block's text as rendered: write inline
 code without backticks, bold without asterisks, and link text without link syntax. A table-cell
 anchor is its cell text. Quote code-block contents without their Markdown fences. A quote must stay

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/pi-legion-envoy",
-  "version": "3.0.1",
+  "version": "3.0.3",
   "type": "module",
   "omp": {
     "extensions": [