agentfootprint 10.1.0 → 10.2.0

package/dist/core/agent/findings/verificationRow.js

@@ -0,0 +1,181 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isClaimVerificationRow = exports.readClaimVerificationRow = exports.readClaimIdentity = exports.claimIdentityOf = exports.VERIFICATION_LIMITS = void 0;
+/**
+ * Strict saved claim-verification protocol. Role: validate and detach a recorded
+ * check, never reconstruct evidence or rerun its checker. Storage authenticity
+ * and caller authorization are the surrounding checkpoint owner's responsibility.
+ */
+const boundedJson_js_1 = require("../../../lib/boundedJson.js");
+const canonicalJson_js_1 = require("../../../lib/canonicalJson.js");
+const encode_js_1 = require("../../../memory/identity/encode.js");
+const types_js_1 = require("../../../integrity/assertion/types.js");
+const scope_js_1 = require("../../../integrity/claim-binding/scope.js");
+const admit_js_1 = require("../../../integrity/claim-binding/admit.js");
+const capture_js_1 = require("../../../integrity/claim-binding/capture.js");
+const period_js_1 = require("../coverage/period.js");
+const types_js_2 = require("./types.js");
+const verificationTypes_js_1 = require("./verificationTypes.js");
+/** Reuse receipt bounds; declared values have the compact binding-request cap. */
+exports.VERIFICATION_LIMITS = Object.freeze({
+    rowBytes: scope_js_1.BINDING_LIMITS.resultBytes,
+    valueBytes: scope_js_1.BINDING_LIMITS.scopeBytes,
+    identityText: scope_js_1.BINDING_LIMITS.resultIdText + 'claim-verification'.length - 'claim-result'.length,
+});
+/** A runtime-reserved claim occurrence cannot collide with a result occurrence. */
+function claimIdentityOf(raw) {
+    const identity = (0, boundedJson_js_1.ownData)(raw, ['namespace', 'runId', 'ordinal']);
+    if (!(0, scope_js_1.boundedText)(identity.namespace) ||
+        !(0, scope_js_1.boundedText)(identity.runId) ||
+        typeof identity.ordinal !== 'number' ||
+        !Number.isSafeInteger(identity.ordinal) ||
+        identity.ordinal < 1)
+        throw new TypeError('Invalid runtime claim identity.');
+    return `claim-verification/${(0, encode_js_1.encodeIdentityField)(identity.namespace)}/${(0, encode_js_1.encodeIdentityField)(identity.runId)}/${identity.ordinal}`;
+}
+exports.claimIdentityOf = claimIdentityOf;
+/** Canonical claim tuple reader, shared with checkpoint lineage/counter checks. */
+function readClaimIdentity(value) {
+    if (typeof value !== 'string' || value.length > exports.VERIFICATION_LIMITS.identityText)
+        throw new TypeError('Invalid saved claim identity.');
+    const parts = value.split('/');
+    if (parts.length !== 4 || parts[0] !== 'claim-verification')
+        throw new TypeError('Invalid saved claim identity.');
+    const identity = {
+        namespace: (0, encode_js_1.decodePresentIdentityField)(parts[1]),
+        runId: (0, encode_js_1.decodePresentIdentityField)(parts[2]),
+        ordinal: Number(parts[3]),
+    };
+    if (value !== claimIdentityOf(identity))
+        throw new TypeError('Noncanonical saved claim identity.');
+    return Object.freeze(identity);
+}
+exports.readClaimIdentity = readClaimIdentity;
+function integer(value, minimum) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= minimum;
+}
+function eligibleAssertion(raw) {
+    const assertion = (0, boundedJson_js_1.ownData)(raw, ['subject', 'predicate', 'value', 'stratum', 'provenance']);
+    const subject = (0, boundedJson_js_1.ownData)(assertion.subject, ['kind', 'id']);
+    const comparable = (0, types_js_1.comparableValueOf)(assertion.value);
+    if (subject.kind !== 'entity' ||
+        !(0, scope_js_1.boundedText)(subject.id) ||
+        !(0, scope_js_1.boundedText)(assertion.predicate) ||
+        assertion.stratum !== 'asserted' ||
+        typeof assertion.provenance !== 'string' ||
+        !Object.hasOwn(assertion, 'value') ||
+        !(0, types_js_1.participates)(assertion.value) ||
+        comparable === null ||
+        comparable === undefined ||
+        comparable === 'unknown')
+        throw new TypeError('Invalid eligible assertion.');
+    return assertion;
+}
+function validateResolved(row, claimIdentity) {
+    const resolved = (0, boundedJson_js_1.ownData)(row.resolved, [
+        'resultId',
+        'rule',
+        'scope',
+        'coverage',
+        'period',
+        'evidence',
+        'claim',
+    ]);
+    const rule = (0, boundedJson_js_1.ownData)(resolved.rule, ['id', 'version']);
+    const scope = (0, boundedJson_js_1.ownData)((0, boundedJson_js_1.copyJson)(resolved.scope, scope_js_1.BINDING_LIMITS.scopeBytes, true));
+    const resultIdentity = (0, capture_js_1.readResultIdentity)(resolved.resultId);
+    if (resultIdentity.namespace !== claimIdentity.namespace ||
+        resolved.resultId !== row.declaredResult ||
+        !(0, scope_js_1.boundedText)(rule.id) ||
+        rule.id !== row.declaredRule ||
+        !(0, scope_js_1.boundedText)(rule.version) ||
+        Object.keys(scope).length === 0 ||
+        Object.keys(scope).length > scope_js_1.BINDING_LIMITS.dimensions ||
+        !Object.keys(scope).every(scope_js_1.boundedText))
+        throw new TypeError('Invalid verification association.');
+    (0, admit_js_1.validateCoverage)(resolved.coverage);
+    if (Object.hasOwn(resolved, 'period') && (0, period_js_1.periodProblem)(resolved.period, 'camel') !== undefined)
+        throw new TypeError('Invalid verification period.');
+    const evidence = eligibleAssertion(resolved.evidence);
+    const claim = eligibleAssertion(resolved.claim);
+    if ((0, canonicalJson_js_1.canonicalJson)(evidence.subject) !== (0, canonicalJson_js_1.canonicalJson)(claim.subject) ||
+        evidence.predicate !== claim.predicate ||
+        evidence.provenance !== `result ${resolved.resultId}` ||
+        claim.provenance !== `rule ${rule.id}` ||
+        (0, canonicalJson_js_1.canonicalJson)(claim.value) !== (0, canonicalJson_js_1.canonicalJson)(row.declaredValue))
+        throw new TypeError('Invalid verification pair association.');
+}
+/** Validate the recorded protocol without evaluating whether its value agrees. */
+function readClaimVerificationRow(raw) {
+    const detached = (0, boundedJson_js_1.copyJson)(raw, exports.VERIFICATION_LIMITS.rowBytes, true);
+    const row = (0, boundedJson_js_1.ownData)(detached, [
+        'kind',
+        'claimId',
+        'declaredOn',
+        'standing',
+        'iteration',
+        'turn',
+        'checker',
+        'declaredResult',
+        'declaredRule',
+        'declaredValue',
+        'outcome',
+        'reason',
+        'resolved',
+    ]);
+    const checker = (0, boundedJson_js_1.ownData)(row.checker, ['id', 'version']);
+    const claimIdentity = readClaimIdentity(row.claimId);
+    if (row.kind !== 'claim-verification' ||
+        typeof row.standing !== 'string' ||
+        !types_js_2.STANDING_VALUES.includes(row.standing) ||
+        !integer(row.iteration, 0) ||
+        (Object.hasOwn(row, 'turn') && !integer(row.turn, 1)) ||
+        checker.id !== 'claim-pair' ||
+        checker.version !== 1 ||
+        !Object.hasOwn(row, 'declaredValue') ||
+        (Object.hasOwn(row, 'declaredResult') &&
+            (typeof row.declaredResult !== 'string' ||
+                row.declaredResult.length > scope_js_1.BINDING_LIMITS.resultIdText)) ||
+        (Object.hasOwn(row, 'declaredRule') && !(0, scope_js_1.boundedText)(row.declaredRule)))
+        throw new TypeError('Invalid claim-verification row.');
+    (0, boundedJson_js_1.copyJson)(row.declaredValue, exports.VERIFICATION_LIMITS.valueBytes, true);
+    if (row.declaredOn !== 'answer') {
+        const at = (0, boundedJson_js_1.ownData)(row.declaredOn, ['toolCallId']);
+        if (!(0, scope_js_1.boundedText)(at.toolCallId))
+            throw new TypeError('Invalid claim declaration location.');
+    }
+    if (row.outcome === 'unverified') {
+        if (typeof row.reason !== 'string' ||
+            !verificationTypes_js_1.VERIFICATION_UNVERIFIED_REASONS.includes(row.reason) ||
+            Object.hasOwn(row, 'resolved') ||
+            (row.standing === 'noise' && row.reason !== 'ineligible-noise') ||
+            (row.reason === 'ineligible-noise' && row.standing !== 'noise') ||
+            (row.reason === 'missing-check' && Object.hasOwn(row, 'declaredRule')) ||
+            (!['missing-check', 'malformed-check', 'ineligible-noise'].includes(row.reason) &&
+                (!Object.hasOwn(row, 'declaredRule') ||
+                    (row.reason !== 'missing-result' && !Object.hasOwn(row, 'declaredResult')))))
+            throw new TypeError('Invalid unverified claim row.');
+    }
+    else {
+        if (row.standing === 'noise' ||
+            !((row.outcome === 'supported' &&
+                (row.reason === 'no-conflict' || row.reason === 'numeric-leniency')) ||
+                (row.outcome === 'contradicted' && row.reason === 'conflict')))
+            throw new TypeError('Invalid compared claim row.');
+        validateResolved(row, claimIdentity);
+    }
+    return detached;
+}
+exports.readClaimVerificationRow = readClaimVerificationRow;
+/** Non-throwing checkpoint union guard; admission uses the same strict reader. */
+function isClaimVerificationRow(raw) {
+    try {
+        readClaimVerificationRow(raw);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+exports.isClaimVerificationRow = isClaimVerificationRow;
+//# sourceMappingURL=verificationRow.js.map

package/dist/core/agent/findings/verificationRow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationRow.js","sourceRoot":"","sources":["../../../../src/core/agent/findings/verificationRow.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,gEAAgE;AAChE,oEAA8D;AAC9D,kEAG4C;AAC5C,oEAAwF;AACxF,wEAAwF;AAExF,wEAA6E;AAC7E,4EAAiF;AACjF,qDAAsD;AACtD,yCAA6C;AAC7C,iEAAoG;AAEpG,kFAAkF;AACrE,QAAA,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,yBAAc,CAAC,WAAW;IACpC,UAAU,EAAE,yBAAc,CAAC,UAAU;IACrC,YAAY,EAAE,yBAAc,CAAC,YAAY,GAAG,oBAAoB,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM;CAChG,CAAC,CAAC;AAEH,mFAAmF;AACnF,SAAgB,eAAe,CAAC,GAAmB;IACjD,MAAM,QAAQ,GAAG,IAAA,wBAAO,EAAC,GAAG,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACjE,IACE,CAAC,IAAA,sBAAW,EAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,CAAC,IAAA,sBAAW,EAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC;QACvC,QAAQ,CAAC,OAAO,GAAG,CAAC;QAEpB,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,OAAO,sBAAsB,IAAA,+BAAmB,EAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAA,+BAAmB,EACzF,QAAQ,CAAC,KAAK,CACf,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAbD,0CAaC;AAED,mFAAmF;AACnF,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,2BAAmB,CAAC,YAAY;QAC9E,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,oBAAoB;QACzD,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAA,sCAA0B,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,KAAK,EAAE,IAAA,sCAA0B,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;KAC1B,CAAC;IACF,IAAI,KAAK,KAAK,eAAe,CAAC,QAAQ,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAdD,8CAcC;AAED,SAAS,OAAO,CAAC,KAAc,EAAE,OAAe;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,OAAO,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,MAAM,SAAS,GAAG,IAAA,wBAAO,EAAC,GAAG,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,IAAA,wBAAO,EAAC,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAA,4BAAiB,EAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACtD,IACE,OAAO,CAAC,IAAI,KAAK,QAAQ;QACzB,CAAC,IAAA,sBAAW,EAAC,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC,IAAA,sBAAW,EAAC,SAAS,CAAC,SAAS,CAAC;QACjC,SAAS,CAAC,OAAO,KAAK,UAAU;QAChC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ;QACxC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;QAClC,CAAC,IAAA,uBAAY,EAAC,SAAS,CAAC,KAAK,CAAC;QAC9B,UAAU,KAAK,IAAI;QACnB,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,SAAS;QAExB,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACrD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAA4B,EAAE,aAA6B;IACnF,MAAM,QAAQ,GAAG,IAAA,wBAAO,EAAC,GAAG,CAAC,QAAQ,EAAE;QACrC,UAAU;QACV,MAAM;QACN,OAAO;QACP,UAAU;QACV,QAAQ;QACR,UAAU;QACV,OAAO;KACR,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAA,wBAAO,EAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAA,wBAAO,EAAC,IAAA,yBAAQ,EAAC,QAAQ,CAAC,KAAK,EAAE,yBAAc,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,cAAc,GAAG,IAAA,+BAAkB,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,IACE,cAAc,CAAC,SAAS,KAAK,aAAa,CAAC,SAAS;QACpD,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,cAAc;QACxC,CAAC,IAAA,sBAAW,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,YAAY;QAC5B,CAAC,IAAA,sBAAW,EAAC,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,yBAAc,CAAC,UAAU;QACrD,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,sBAAW,CAAC;QAEtC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,IAAA,2BAAgB,EAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,IAAA,yBAAa,EAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,SAAS;QAC5F,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChD,IACE,IAAA,gCAAa,EAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAA,gCAAa,EAAC,KAAK,CAAC,OAAO,CAAC;QAChE,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QACtC,QAAQ,CAAC,UAAU,KAAK,UAAU,QAAQ,CAAC,QAAQ,EAAE;QACrD,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAE,EAAE;QACtC,IAAA,gCAAa,EAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAA,gCAAa,EAAC,GAAG,CAAC,aAAa,CAAC;QAE/D,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;AAClE,CAAC;AAED,kFAAkF;AAClF,SAAgB,wBAAwB,CAAC,GAAY;IACnD,MAAM,QAAQ,GAAG,IAAA,yBAAQ,EAAC,GAAG,EAAE,2BAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,IAAA,wBAAO,EAAC,QAAQ,EAAE;QAC5B,MAAM;QACN,SAAS;QACT,YAAY;QACZ,UAAU;QACV,WAAW;QACX,MAAM;QACN,SAAS;QACT,gBAAgB;QAChB,cAAc;QACd,eAAe;QACf,SAAS;QACT,QAAQ;QACR,UAAU;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAA,wBAAO,EAAC,GAAG,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,IACE,GAAG,CAAC,IAAI,KAAK,oBAAoB;QACjC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,CAAE,0BAAqC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9D,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1B,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,EAAE,KAAK,YAAY;QAC3B,OAAO,CAAC,OAAO,KAAK,CAAC;QACrB,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC;QACpC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC;YACnC,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ;gBACrC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,yBAAc,CAAC,YAAY,CAAC,CAAC;QAC7D,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAEtE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,IAAA,yBAAQ,EAAC,GAAG,CAAC,aAAa,EAAE,2BAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAClE,IAAI,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,IAAA,wBAAO,EAAC,GAAG,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,IAAA,sBAAW,EAAC,EAAE,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACjC,IACE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC9B,CAAE,sDAAqD,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC;YAC9B,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,CAAC;YAC/D,CAAC,GAAG,CAAC,MAAM,KAAK,kBAAkB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;YAC/D,CAAC,GAAG,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YACtE,CAAC,CAAC,CAAC,eAAe,EAAE,iBAAiB,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7E,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC;oBAClC,CAAC,GAAG,CAAC,MAAM,KAAK,gBAAgB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAEhF,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,IACE,GAAG,CAAC,QAAQ,KAAK,OAAO;YACxB,CAAC,CACC,CAAC,GAAG,CAAC,OAAO,KAAK,WAAW;gBAC1B,CAAC,GAAG,CAAC,MAAM,KAAK,aAAa,IAAI,GAAG,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;gBACtE,CAAC,GAAG,CAAC,OAAO,KAAK,cAAc,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAC9D;YAED,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrD,gBAAgB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,QAAgC,CAAC;AAC1C,CAAC;AAjED,4DAiEC;AAED,kFAAkF;AAClF,SAAgB,sBAAsB,CAAC,GAAY;IACjD,IAAI,CAAC;QACH,wBAAwB,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAPD,wDAOC"}

package/dist/core/agent/findings/verificationState.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.retainVerificationEvidence = exports.reserveClaimIdentity = exports.reserveResultIdentity = exports.continueVerificationState = exports.createVerificationState = exports.readVerificationState = void 0;
+/**
+ * Private, immutable evidence carrier for the explicit findings verifier.
+ * Role: reservation and bounded retention; no schema, events or Agent wiring.
+ * The checkpoint owner authenticates provenance and supplies the ledger's
+ * largest claim ordinal. Shape validation alone never authorizes a record.
+ */
+const admit_js_1 = require("../../../integrity/claim-binding/admit.js");
+const capture_js_1 = require("../../../integrity/claim-binding/capture.js");
+const scope_js_1 = require("../../../integrity/claim-binding/scope.js");
+const boundedJson_js_1 = require("../../../lib/boundedJson.js");
+const verificationRow_js_1 = require("./verificationRow.js");
+const positiveOrdinal = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value > 0;
+/**
+ * Read only after the checkpoint's owner/namespace authority is established.
+ * The caller MUST derive largestClaimOrdinal from its validated claim rows;
+ * this carrier does not contain those rows and cannot infer their maximum.
+ * Stage commits clone changed state. At entry, admit the tracked raw value
+ * and publish this detached carrier before the batch; subsequent raw reads
+ * can reuse its immutable evidence. A live scope proxy is not that identity.
+ */
+function readVerificationState(raw, largestClaimOrdinal) {
+    const source = (0, boundedJson_js_1.ownData)(raw, [
+        'version',
+        'evidence',
+        'nextResultOrdinal',
+        'nextClaimOrdinal',
+        'limited',
+    ]);
+    if (source.version !== 1 ||
+        !positiveOrdinal(source.nextResultOrdinal) ||
+        !positiveOrdinal(source.nextClaimOrdinal) ||
+        !Number.isSafeInteger(largestClaimOrdinal) ||
+        largestClaimOrdinal < 0 ||
+        source.nextClaimOrdinal <= largestClaimOrdinal ||
+        (Object.hasOwn(source, 'limited') && source.limited !== true))
+        throw new Error('Invalid findings verification carrier.');
+    const evidence = (0, admit_js_1.readEvidenceSnapshot)(source.evidence);
+    if (evidence.runIds.length === 0)
+        throw new Error('Verification carrier requires its recorded run lineage.');
+    const ordinals = new Set();
+    for (const result of evidence.results) {
+        if (result.identity.namespace !== evidence.namespace ||
+            !evidence.runIds.includes(result.identity.runId) ||
+            result.identity.ordinal >= source.nextResultOrdinal ||
+            ordinals.has(result.identity.ordinal))
+            throw new Error('Invalid verification receipt lineage or ordinal.');
+        ordinals.add(result.identity.ordinal);
+    }
+    return Object.freeze({
+        version: 1,
+        evidence,
+        nextResultOrdinal: source.nextResultOrdinal,
+        nextClaimOrdinal: source.nextClaimOrdinal,
+        ...(source.limited === true && { limited: true }),
+    });
+}
+exports.readVerificationState = readVerificationState;
+/** Called only when opted in. No randomness is consumed at module load. */
+function createVerificationState(runId, namespaceSource = () => globalThis.crypto.randomUUID()) {
+    const namespace = namespaceSource();
+    if (!(0, scope_js_1.boundedText)(runId) || !(0, scope_js_1.boundedText)(namespace))
+        throw new Error('Invalid verification recording identity.');
+    return readVerificationState({
+        version: 1,
+        evidence: { version: 1, namespace, runIds: [runId], results: [] },
+        nextResultOrdinal: 1,
+        nextClaimOrdinal: 1,
+    }, 0);
+}
+exports.createVerificationState = createVerificationState;
+const limited = (state) => state.limited === true ? state : Object.freeze({ ...state, limited: true });
+/** A resume keeps its namespace/counters, including when a process reuses runId. */
+function continueVerificationState(state, runId) {
+    if (!(0, scope_js_1.boundedText)(runId))
+        throw new Error('Invalid verification run identity.');
+    if (state.evidence.runIds.includes(runId))
+        return state;
+    if (state.evidence.runIds.length >= scope_js_1.BINDING_LIMITS.results)
+        throw new Error('Verification run lineage capacity exhausted.');
+    try {
+        const evidence = (0, admit_js_1.readEvidenceSnapshot)({
+            ...state.evidence,
+            runIds: [...state.evidence.runIds, runId],
+        });
+        return Object.freeze({ ...state, evidence });
+    }
+    catch {
+        // Identity cannot be reserved for an unrecorded run. The input is an
+        // admitted carrier; adding one bounded run can exceed only its budget.
+        // Refuse this continuation rather than evicting old lineage or evidence.
+        throw new Error('Verification run lineage capacity exhausted.');
+    }
+}
+exports.continueVerificationState = continueVerificationState;
+/** Publish the returned state before awaiting execution, even if it later fails. */
+function reserveResultIdentity(state, runId) {
+    state = continueVerificationState(state, runId);
+    const ordinal = state.nextResultOrdinal;
+    if (!positiveOrdinal(ordinal) || ordinal === Number.MAX_SAFE_INTEGER)
+        throw new Error('Verification result identity capacity exhausted.');
+    const identity = Object.freeze({ namespace: state.evidence.namespace, runId, ordinal });
+    return Object.freeze({
+        state: Object.freeze({ ...state, nextResultOrdinal: ordinal + 1 }),
+        identity,
+        id: (0, capture_js_1.resultIdentityOf)(identity),
+    });
+}
+exports.reserveResultIdentity = reserveResultIdentity;
+/** One occurrence, not a text key. The caller publishes state before evaluation. */
+function reserveClaimIdentity(state, runId) {
+    state = continueVerificationState(state, runId);
+    const ordinal = state.nextClaimOrdinal;
+    if (!positiveOrdinal(ordinal) || ordinal === Number.MAX_SAFE_INTEGER)
+        throw new Error('Verification claim identity capacity exhausted.');
+    return Object.freeze({
+        state: Object.freeze({ ...state, nextClaimOrdinal: ordinal + 1 }),
+        ordinal,
+        id: (0, verificationRow_js_1.claimIdentityOf)({ namespace: state.evidence.namespace, runId, ordinal }),
+    });
+}
+exports.reserveClaimIdentity = reserveClaimIdentity;
+/**
+ * Retain only a finalized, previously reserved receipt. Capacity refusal is
+ * sticky and never replaces an earlier result; the writer reports the limit.
+ */
+function retainVerificationEvidence(state, receipt) {
+    if (state.limited === true)
+        return state;
+    const singleton = (0, admit_js_1.readEvidenceSnapshot)({ ...state.evidence, results: [receipt] });
+    const admitted = singleton.results[0];
+    if (admitted.identity.namespace !== state.evidence.namespace ||
+        !state.evidence.runIds.includes(admitted.identity.runId) ||
+        admitted.identity.ordinal >= state.nextResultOrdinal ||
+        state.evidence.results.some((prior) => prior.identity.ordinal === admitted.identity.ordinal))
+        throw new Error('Verification receipt was not uniquely reserved in this recording.');
+    if (state.evidence.results.length >= scope_js_1.BINDING_LIMITS.results)
+        return limited(state);
+    try {
+        const evidence = (0, admit_js_1.appendEvidenceSnapshot)(state.evidence, singleton);
+        return Object.freeze({ ...state, evidence });
+    }
+    catch {
+        // Both the carrier and individual receipt were already admitted. Their
+        // combined bytes exceed the snapshot cap; preserve the earlier snapshot.
+        return limited(state);
+    }
+}
+exports.retainVerificationEvidence = retainVerificationEvidence;
+//# sourceMappingURL=verificationState.js.map

package/dist/core/agent/findings/verificationState.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationState.js","sourceRoot":"","sources":["../../../../src/core/agent/findings/verificationState.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,wEAGmD;AACnD,4EAA+E;AAC/E,wEAAwF;AAMxF,gEAAsD;AACtD,6DAAuD;AAWvD,MAAM,eAAe,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC1D,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;AAExE;;;;;;;GAOG;AACH,SAAgB,qBAAqB,CACnC,GAAY,EACZ,mBAA2B;IAE3B,MAAM,MAAM,GAAG,IAAA,wBAAO,EAAC,GAAG,EAAE;QAC1B,SAAS;QACT,UAAU;QACV,mBAAmB;QACnB,kBAAkB;QAClB,SAAS;KACV,CAAC,CAAC;IACH,IACE,MAAM,CAAC,OAAO,KAAK,CAAC;QACpB,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC;QAC1C,CAAC,eAAe,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACzC,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC;QAC1C,mBAAmB,GAAG,CAAC;QACvB,MAAM,CAAC,gBAAgB,IAAI,mBAAmB;QAC9C,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;QAE7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,IACE,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAChD,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,iBAAiB;YACnD,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAErC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,CAAC;QACV,QAAQ;QACR,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC;KAC3D,CAAC,CAAC;AACL,CAAC;AA1CD,sDA0CC;AAED,2EAA2E;AAC3E,SAAgB,uBAAuB,CACrC,KAAa,EACb,kBAAgC,GAAG,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE;IAEpE,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,IAAI,CAAC,IAAA,sBAAW,EAAC,KAAK,CAAC,IAAI,CAAC,IAAA,sBAAW,EAAC,SAAS,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAC1B;QACE,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;QACjE,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;KACpB,EACD,CAAC,CACF,CAAC;AACJ,CAAC;AAhBD,0DAgBC;AAED,MAAM,OAAO,GAAG,CAAC,KAA6B,EAA0B,EAAE,CACxE,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9E,oFAAoF;AACpF,SAAgB,yBAAyB,CACvC,KAA6B,EAC7B,KAAa;IAEb,IAAI,CAAC,IAAA,sBAAW,EAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,yBAAc,CAAC,OAAO;QACxD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,+BAAoB,EAAC;YACpC,GAAG,KAAK,CAAC,QAAQ;YACjB,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;SAC1C,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AApBD,8DAoBC;AAED,oFAAoF;AACpF,SAAgB,qBAAqB,CACnC,KAA6B,EAC7B,KAAa;IAMb,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACxC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,gBAAgB;QAClE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,iBAAiB,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QAClE,QAAQ;QACR,EAAE,EAAE,IAAA,6BAAgB,EAAC,QAAQ,CAAC;KAC/B,CAAC,CAAC;AACL,CAAC;AAlBD,sDAkBC;AAED,oFAAoF;AACpF,SAAgB,oBAAoB,CAClC,KAA6B,EAC7B,KAAa;IAEb,KAAK,GAAG,yBAAyB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC;IACvC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,MAAM,CAAC,gBAAgB;QAClE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,OAAO,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO;QACP,EAAE,EAAE,IAAA,oCAAe,EAAC,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;KAC7E,CAAC,CAAC;AACL,CAAC;AAbD,oDAaC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CACxC,KAA6B,EAC7B,OAAuB;IAEvB,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,IAAA,+BAAoB,EAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACtC,IACE,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS;QACxD,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,KAAK,CAAC,iBAAiB;QACpD,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAE5F,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,IAAI,yBAAc,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,iCAAsB,EAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,yEAAyE;QACzE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAvBD,gEAuBC"}

package/dist/core/agent/findings/verificationTypes.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERIFICATION_UNVERIFIED_REASONS = void 0;
+/**
+ * Internal typed-finding protocol: model declarations and library checks stay
+ * separate. A supported row concerns only its resolved rule and executed scope;
+ * it is not verification of arbitrary prose or an entire answer.
+ * Role: plain data shared by the pure writer and the strict saved-row reader.
+ */
+const types_js_1 = require("../../../integrity/claim-binding/types.js");
+exports.VERIFICATION_UNVERIFIED_REASONS = Object.freeze([
+    ...types_js_1.BINDING_REASONS,
+    'missing-check',
+    'malformed-check',
+    'ineligible-noise',
+    'assertion-mismatch',
+    'retention-limit',
+    'evidence-unavailable',
+    'claim-nonparticipating',
+    'doubt-against-value',
+    'both-doubt',
+]);
+//# sourceMappingURL=verificationTypes.js.map

package/dist/core/agent/findings/verificationTypes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationTypes.js","sourceRoot":"","sources":["../../../../src/core/agent/findings/verificationTypes.ts"],"names":[],"mappings":";;;AAAA;;;;;GAKG;AACH,wEAA4E;AAK/D,QAAA,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,GAAG,0BAAe;IAClB,eAAe;IACf,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,iBAAiB;IACjB,sBAAsB;IACtB,wBAAwB;IACxB,qBAAqB;IACrB,YAAY;CACJ,CAAC,CAAC"}

package/dist/core/agent/outputEnforcement.js

@@ -39,6 +39,7 @@ exports.judgeAnswer = exports.resolveJsonSchema = exports.readSchemaToolAnswer =
 const helpers_js_1 = require("../slots/helpers.js");
 const outputSchema_js_1 = require("../outputSchema.js");
 const saidByPerson_js_1 = require("../../lib/saidByPerson.js");
+const toolArgsValidation_js_1 = require("./toolArgsValidation.js");
 /**
  * Append one row to the run's output-attempt ledger.
  *
@@ -143,6 +144,10 @@ function readSchemaToolAnswer(response) {
     const call = response.toolCalls.find((tc) => tc.name === exports.SCHEMA_TOOL_NAME);
     if (!call)
         return undefined;
+    // A fixed non-JSON refusal follows the existing output-attempt/retry path.
+    // Even a parser accepting {} must never validate an SDK repair as an answer.
+    if (call.argumentsFailure !== undefined)
+        return (0, toolArgsValidation_js_1.formatToolArgIssues)(call.name, (0, toolArgsValidation_js_1.streamedToolArgIssues)(call.argumentsFailure));
     return JSON.stringify(call.args);
 }
 exports.readSchemaToolAnswer = readSchemaToolAnswer;

package/dist/core/agent/outputEnforcement.js.map

@@ -1 +1 @@
-{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAGH,oDAA4C;AAC5C,wDAAgF;AAChF,+DAAsE;AAoDtE;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AALD,kDAKC;AAcD;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAjBD,0CAiBC;AAED,wEAAwE;AAExE,+EAA+E;AAC/E,4EAA4E;AAC5E,6DAAsE;AAA7D,4HAAA,yBAAyB,OAAA;AAElC,4CAA4C;AAC5C,iHAAiH;AACjH,mFAAmF;AACnF;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,2CAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAfD,kDAeC;AAED,uEAAuE;AACvE,SAAgB,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,2CAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAJD,oDAIC;AAED,2EAA2E;AAC3E,SAAgB,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAA,kBAAK,EAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAFD,sDAEC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,SAAgB,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAZD,0CAYC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,wBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAJD,oDAIC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAlBD,8CAkBC;AAoCD;;;;;;;;;GASG;AACH,SAAgB,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,IAAA,mCAAiB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAVD,kCAUC"}
+{"version":3,"file":"outputEnforcement.js","sourceRoot":"","sources":["../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAGH,oDAA4C;AAC5C,wDAAgF;AAChF,+DAAsE;AACtE,mEAAqF;AAoDrF;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAAwB,EAAE,GAAkB;IAC9E,MAAM,IAAI,GAAI,KAAK,CAAC,cAAuD,IAAI,EAAE,CAAC;IAClF,2EAA2E;IAC3E,+DAA+D;IAC/D,KAAK,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AALD,kDAKC;AAcD;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,CAAC,GAAG,GAOT,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GACR,UAAU,EAAE,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,iBAAiB;QACpC,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,IAAI,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAjBD,0CAiBC;AAED,wEAAwE;AAExE,+EAA+E;AAC/E,4EAA4E;AAC5E,6DAAsE;AAA7D,4HAAA,yBAAyB,OAAA;AAElC,4CAA4C;AAC5C,iHAAiH;AACjH,mFAAmF;AACnF;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CACjC,YAAoB,EACpB,OAAsB,EACtB,KAAmE;IAEnE,MAAM,KAAK,GACT,GAAG,2CAAyB,wDAAwD;QACpF,yBAAyB,KAAK,CAAC,OAAO,OAAO,KAAK,CAAC,aAAa,sBAAsB;QACtF,uFAAuF;QACvF,wFAAwF;QACxF,mEAAmE,CAAC;IACtE,OAAO;QACL,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE;QAC5C,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAfD,kDAeC;AAED,uEAAuE;AACvE,SAAgB,oBAAoB,CAAC,GAA2B;IAC9D,OAAO,CACL,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,2CAAyB,CAAC,CAC9F,CAAC;AACJ,CAAC;AAJD,oDAIC;AAED,2EAA2E;AAC3E,SAAgB,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAA,kBAAK,EAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAFD,sDAEC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACU,QAAA,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,8DAA8D;AAC9D,SAAgB,eAAe,CAC7B,UAA6C,EAC7C,WAAoB;IAEpB,OAAO;QACL,IAAI,EAAE,wBAAgB;QACtB,WAAW,EACT,oFAAoF;YACpF,iBAAiB;YACjB,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC;AAZD,0CAYC;AAED;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAAC,QAAqB;IACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,wBAAgB,CAAC,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QACrC,OAAO,IAAA,2CAAmB,EAAC,IAAI,CAAC,IAAI,EAAE,IAAA,6CAAqB,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AARD,oDAQC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAC/B,MAAmC,EACnC,QAA4C;IAE5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,KAAK,GAAG,MAA0C,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,OAAO,QAA6C,CAAC;QACvD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,sEAAsE;QACtE,+DAA+D;IACjE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAlBD,8CAkBC;AAoCD;;;;;;;;;GASG;AACH,SAAgB,WAAW,CACzB,MAAc,EACd,MAAmC;IAEnC,IAAI,CAAC;QACH,IAAA,mCAAiB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAVD,kCAUC"}

package/dist/core/agent/stages/toolCalls.js

@@ -3165,7 +3165,19 @@ function buildToolCallsHandler(deps) {
                 }
                 // Tool-args validation (#9) and the inputs layer's refusals share one
                 // flag: the call is refused for its ARGUMENTS and lands in one shape.
-                let argsRejected = false;
+                let argsRejected = tc.argumentsFailure !== undefined;
+                if (!denied && tc.argumentsFailure !== undefined) {
+                    const issues = (0, toolArgsValidation_js_1.streamedToolArgIssues)(tc.argumentsFailure);
+                    (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.validation.args_invalid', {
+                        toolName: tc.name,
+                        toolCallId: tc.id,
+                        iteration,
+                        issues,
+                        enforced: true,
+                    });
+                    error = true;
+                    result = (0, toolArgsValidation_js_1.formatToolArgIssues)(tc.name, issues);
+                }
                 // A check-in that tripped in a batch whose one human question was the
                 // inputs layer's ask (`oneQuestionAsked`) — refused, never asked.
                 let checkInRefused = false;
@@ -3180,9 +3192,11 @@ function buildToolCallsHandler(deps) {
                 // the layer NOT mounted — any call whose tool declares rules (fail
                 // closed). Neither applies to a tool that declares nothing — and
                 // neither awaits for one (`unmountedRules` answers it synchronously).
-                const unmounted = unmountedRules(tool, tc.name);
+                const unmounted = argsRejected ? undefined : unmountedRules(tool, tc.name);
                 warnUnmountedToolPeriod(tool, tc.name);
-                const rulesRefusal = resolution?.refused ?? (unmounted === undefined ? undefined : await unmounted);
+                const rulesRefusal = argsRejected
+                    ? undefined
+                    : resolution?.refused ?? (unmounted === undefined ? undefined : await unmounted);
                 if (!denied && rulesRefusal !== undefined) {
                     argsRejected = true;
                     error = true;
@@ -4275,6 +4289,9 @@ function buildToolCallsHandler(deps) {
                     toolCallId: tc.id,
                     toolName: tc.name,
                     ...(layerNote !== '' && { toolChars: deliveredResult.length }),
+                    ...(tc.argumentsFailure !== undefined && {
+                        toolArgumentsFailure: { ...tc.argumentsFailure },
+                    }),
                 });
                 // ── Dynamic ReAct wiring ───────────────────────────────
                 //