agentfootprint 10.9.0 → 11.0.0

package/dist/core/Agent.js

@@ -1,19 +1,4 @@
 "use strict";
-/**
- * Agent — ReAct primitive (LLM + tools + iteration loop).
- *
- * Pattern: Builder (GoF) → produces a Runner backed by a footprintjs FlowChart.
- * Role:    Layer-5 primitive (core/). Assembles the 3-slot context
- *          pipeline + callLLM + route decider + tool-calls subflow +
- *          loopTo. Composition nestable anywhere that accepts a Runner.
- * Emits:   Via internal recorders:
- *            agentfootprint.agent.turn_start / turn_end
- *            agentfootprint.agent.iteration_start / iteration_end
- *            agentfootprint.agent.route_decided
- *            agentfootprint.stream.llm_start / llm_end
- *            agentfootprint.stream.tool_start / tool_end
- *            agentfootprint.context.* (via ContextRecorder)
- */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     var desc = Object.getOwnPropertyDescriptor(m, k);
@@ -39,6 +24,22 @@ var __importStar = (this && this.__importStar) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Agent = exports.AgentBuilder = void 0;
+const context_js_1 = require("./agent/findings/context.js");
+/**
+ * Agent — ReAct primitive (LLM + tools + iteration loop).
+ *
+ * Pattern: Builder (GoF) → produces a Runner backed by a footprintjs FlowChart.
+ * Role:    Layer-5 primitive (core/). Assembles the 3-slot context
+ *          pipeline + callLLM + route decider + tool-calls subflow +
+ *          loopTo. Composition nestable anywhere that accepts a Runner.
+ * Emits:   Via internal recorders:
+ *            agentfootprint.agent.turn_start / turn_end
+ *            agentfootprint.agent.iteration_start / iteration_end
+ *            agentfootprint.agent.route_decided
+ *            agentfootprint.stream.llm_start / llm_end
+ *            agentfootprint.stream.tool_start / tool_end
+ *            agentfootprint.context.* (via ContextRecorder)
+ */
 const footprintjs_1 = require("footprintjs");
 const types_js_1 = require("../reliability/types.js");
 const extractSequence_js_1 = require("../security/extractSequence.js");
@@ -53,6 +54,7 @@ const assistantReplay_js_1 = require("./agent/assistantReplay.js");
 const skillBrains_js_1 = require("./agent/skillBrains.js");
 const conventions_js_1 = require("../lib/conventions.js");
 const pause_js_1 = require("./pause.js");
+const consentRequest_js_1 = require("./consentRequest.js");
 const placement_js_1 = require("../artifacts/placement.js");
 const recordingArtifact_js_1 = require("../artifacts/recordingArtifact.js");
 const recordRun_js_1 = require("../recorders/observability/recordRun.js");
@@ -177,6 +179,9 @@ const outputRetry_js_1 = require("./agent/stages/outputRetry.js");
 const RunnerBase_js_1 = require("./RunnerBase.js");
 const validators_js_1 = require("./agent/validators.js");
 const route_js_1 = require("./agent/stages/route.js");
+const checkpoint_js_1 = require("./agent/negativeClaims/checkpoint.js");
+const observe_js_1 = require("./agent/negativeClaims/observe.js");
+const recheck_js_1 = require("./agent/negativeClaims/recheck.js");
 const answerValidation_js_1 = require("./agent/stages/answerValidation.js");
 const messagePhase_js_1 = require("./agent/middleware/messagePhase.js");
 const answerCoverage_js_1 = require("./agent/stages/answerCoverage.js");
@@ -434,6 +439,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      *  present — defaults to `standard` evidence + the lexical scorer, so a tool
      *  that declares `checkIn` works even without a `.checkIn()` builder call. */
     checkInConfig;
+    /** Where answered consent requests are spent (`AgentOptions.decisionLedger`).
+     *  Undefined → this process's ledger, shared by every agent that names none. */
+    decisionLedger;
     /** Per-run config resolver from `.configure()`. Undefined for every agent
      *  that never called it — and the chart is then built exactly as before,
      *  with no scope writes and no scope reads added. */
@@ -755,7 +763,10 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      *  rebinding itself to each run id (`core/agent/receipt/receiptDigests.ts`). */
     receiptDigests = (0, receiptDigests_js_1.createReceiptDigests)();
     answerValidationConfig;
-    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains, evidenceGate, limitsTravelWithTheAnswer, recipes, skillGraphDeclared, mapsPlan, claimContract, answerValidationConfig, systemPromptCacheExplicit = false) {
+    negativeClaimsConfig;
+    typedNegativeClaimsConfig;
+    applicationAnswerValidation;
+    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains, evidenceGate, limitsTravelWithTheAnswer, recipes, skillGraphDeclared, mapsPlan, claimContract, answerValidationConfig, systemPromptCacheExplicit = false, negativeClaimsConfig) {
         super();
         // Which conversation this instance's self-explain evidence belongs to —
         // held in a module registry, not on the class, so it is not public API
@@ -765,7 +776,20 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             runId: this.currentRunContext.runId,
             ...(this.servingConversation?.startsWith('hosted:') === true && { oneShot: true }),
         }));
-        this.answerValidationConfig = answerValidationConfig;
+        this.negativeClaimsConfig = negativeClaimsConfig;
+        this.typedNegativeClaimsConfig =
+            negativeClaimsConfig?.mode === 'typed' ? negativeClaimsConfig : undefined;
+        this.applicationAnswerValidation = answerValidationConfig !== undefined;
+        this.answerValidationConfig =
+            answerValidationConfig ??
+                (this.typedNegativeClaimsConfig === undefined
+                    ? undefined
+                    : (0, index_js_1.resolveAnswerValidation)({
+                        id: 'negative-claims',
+                        version: '1',
+                        mode: 'observe',
+                        validate: () => ({ checks: [] }),
+                    }));
         this.provider = opts.provider;
         this.name = opts.name ?? 'Agent';
         this.id = opts.id ?? 'agent';
@@ -810,7 +834,15 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         this.skillGraphIsTree = skillGraphIsTree ?? false;
         this.skillGraphCascade = skillGraphCascade;
         this.skillBrains = skillBrains;
-        this.evidenceGate = evidenceGate;
+        // Under an enforcing answer validation the gate's revision calls no tools
+        // (`ResolvedEvidenceGate.toolsOffAfterRevision`): one fact on the one gate
+        // every reader is already handed.
+        this.evidenceGate =
+            evidenceGate !== undefined &&
+                evidenceGate.posture !== 'assist' &&
+                (answerValidationConfig?.mode === 'enforce' || this.typedNegativeClaimsConfig !== undefined)
+                ? { ...evidenceGate, toolsOffAfterRevision: true }
+                : evidenceGate;
         this.limitsTravelWithTheAnswerValue = limitsTravelWithTheAnswer === true;
         this.appliedRecipes = recipes;
         this.skillGraphDeclared = skillGraphDeclared;
@@ -867,7 +899,10 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         if (opts.toolArgValidation !== undefined)
             this.toolArgValidation = opts.toolArgValidation;
         if (opts.findings !== undefined)
-            this.findingsOptions = opts.findings;
+            this.findingsOptions = {
+                ...opts.findings,
+                maxContextBytes: (0, context_js_1.findingsContextBytes)(opts.findings.maxContextBytes),
+            };
         // The inputs layer's door (honesty layer 2): `true`, or `{ argumentSources }`
         // — either form mounts the layer; the object form may also arm declared
         // sources without the findings ledger.
@@ -918,6 +953,15 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // + lexical scorer) so a `checkIn`-declaring tool works even without a
         // `.checkIn()` call; the gate only fires for tools that declared `checkIn`.
         this.checkInConfig = (0, checkin_js_1.resolveCheckInConfig)(checkInOptions);
+        // Refused HERE, not at the first resume: a ledger that cannot spend would
+        // refuse every decision, and that is a configuration mistake.
+        if (opts.decisionLedger !== undefined) {
+            if (typeof opts.decisionLedger?.spend !== 'function') {
+                throw new TypeError('Agent: `decisionLedger` must have a `spend(requestId)` method — see ' +
+                    "`DecisionLedger`, or omit it for this process's in-memory ledger.");
+            }
+            this.decisionLedger = opts.decisionLedger;
+        }
         if (runConfigFn !== undefined)
             this.runConfigFn = runConfigFn;
         // `.window()` / `.compaction()`: the meter is created ONCE per agent
@@ -941,6 +985,12 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // The two governance chains. Empty arrays (not undefined) so every read
         // site is a plain `.length > 0` test rather than an optional dance.
         this.toolMiddleware = toolMiddleware ?? [];
+        // What an ask's approval holds to, for a host that keeps this agent's
+        // pauses and must tell one no answer can reach (`consentRequest.ts`).
+        (0, consentRequest_js_1.registerConsentRules)(this, () => this.toolMiddleware.map((link) => link.name));
+        // …and the ledger it spends decisions in, so that host can tell a paused
+        // call that provably never ran from one whose outcome is not known.
+        (0, consentRequest_js_1.registerConsentLedger)(this, this.decisionLedger);
         this.messageMiddleware = messageMiddleware ?? [];
         // Default 'summary' — measurement-gated (#18): stageReads values have
         // zero consumers across af/lens/eui, and 'full' clones ~18MB of unread
@@ -1003,20 +1053,10 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         if (opts.keepLedgerFacts !== undefined)
             requireKeepLedgerFacts(opts.keepLedgerFacts, 'Agent');
         if (this.findingsOptions !== undefined) {
-            // The ledger needs the tools slot recomposed every call: from the second
-            // call on, the served `_findings` property binds the ids the model may
-            // name (`findings/offer.ts · offeredResultIds`, bound at the Tools
-            // mount) — and on a hosted model that binding is what makes a standing
-            // resolve at all (docs/design/2026-09-findings-ledger-real-model.md).
-            // `reactMode: 'classic'` selects the Tools branch on turn 1 only, so an
-            // armed classic agent would serve the offer-less base on every call and
-            // file every standing as `unknownId`. Refused loud, here at build, the
-            // `AgentBuilder.selfExplain` twin — never a silent degrade.
+            // Keep the supported findings execution modes explicit. This change
+            // restores prefix caching; it does not add findings support to classic.
             if (this.reactMode === 'classic') {
-                throw new Error("Agent: .findings() requires per-iteration slot recomposition — reactMode 'classic' " +
-                    'caches the tools slot on turn 1, so the ids the model may name (bound into every ' +
-                    'served tool schema from the second call on) would never reach it and every standing ' +
-                    "would file as unknownId. Use the default 'dynamic' mode (or 'dynamic-grouped').");
+                throw new Error("Agent: .findings() is supported in 'dynamic' and 'dynamic-grouped' modes only; reactMode 'classic' is not supported.");
             }
             this.keepLedgerFacts = resolveKeepLedgerFacts(this.findingsOptions.keepLedgerFacts ?? opts.keepLedgerFacts);
         }
@@ -1568,7 +1608,7 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                     stage: 'schema-validate',
                 });
             }
-            return JSON.parse(out);
+            return (0, outputSchema_js_1.applyOutputSchema)(out, { parse: (value) => value });
         }
         return this.parseOutputAsync(out);
     }
@@ -1814,7 +1854,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                 this.findingsLedgerOf(this.liveSnapshot()?.sharedState), 
                 // …and the turn the failing run was on (honesty layers), so the
                 // retry is stamped the same turn — one reader, two carriers.
-                this.turnNumberOf(this.liveSnapshot()?.sharedState));
+                this.turnNumberOf(this.liveSnapshot()?.sharedState), undefined, this.negativeClaimsConfig === undefined
+                    ? undefined
+                    : (0, checkpoint_js_1.negativeCheckpointOf)(this.liveSnapshot()?.sharedState ?? {}));
                 throw new runCheckpoint_js_1.RunCheckpointError(cause, checkpoint);
             }
             throw cause;
@@ -2158,6 +2200,11 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      *   paused run's caller identity — before anything runs.
      * @throws DecisionRequiredError when a consent gate is answered with
      *   something other than a decision.
+     * @throws ResumeDecisionError when the decision does not answer the request
+     *   this run is paused on: it names no request, another request, a call the
+     *   checkpoint no longer holds (refused before anything runs), or a request
+     *   a resume already answered (refused before the tool runs). The tool never
+     *   runs on a refusal.
      * @throws RunInFlightError when a run is already in flight.
      *
      * @example
@@ -2167,6 +2214,11 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      * ```
      */
     async resume(checkpoint, input, options) {
+        // Taken up, before anything can refuse: from here every use of a consent
+        // decision passes through the one spend a door watching this pause sees
+        // (`consentRequest.ts` · `watchDecisionUse`) — so a resume that fails
+        // without reaching it, refused or aborted, used nothing.
+        (0, consentRequest_js_1.noteDecisionTakenUp)((0, consentRequest_js_1.pausedRequestIdOf)(checkpoint));
         // ── A consent gate is answered with a DECISION (8.13.0) ─────────────
         // Refused HERE, before the engine is handed the checkpoint, so nothing
         // executes and the checkpoint is unchanged — the caller can answer the same
@@ -2187,6 +2239,14 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // Native guard lands with the new checkpoint protocol, before its runtime
         // opt-in is mounted. Until then no Agent is armed to consume this carrier.
         (0, verificationCheckpoint_js_1.requireVerificationOnResume)(checkpoint.sharedState ?? {}, false);
+        if (this.negativeClaimsConfig !== undefined) {
+            const prior = (0, checkpoint_js_1.negativeCheckpointOf)(checkpoint.sharedState ?? {});
+            if (prior === undefined)
+                throw new TypeError('Negative-claims pause checkpoint is missing its private evidence carrier.');
+        }
+        else if ((0, checkpoint_js_1.negativeCheckpointOf)(checkpoint.sharedState ?? {}) !== undefined) {
+            throw new TypeError('Resume requires the negative-claims setting used by the paused agent.');
+        }
         // The policy the paused run was covered by, carried in its own state
         // (`runRedaction`) — it covers this leg too, joined with any the caller
         // adds now. Read, or refused, before anything moves (`resumeRedactionOf`).
@@ -2200,10 +2260,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // differing value is recorded by the ToolCalls resume door.
         const passedTime = this.passedTimeFor(options?.time, 'Agent.resume');
         options = withoutTime(options);
-        const gate = (0, pause_js_1.pauseDemandsDecision)(checkpoint.pauseData);
-        if (gate && !(0, checkin_js_1.isCheckInDecision)(input))
-            throw new pause_js_1.DecisionRequiredError(gate, input);
-        // One run, one identity — refused before anything moves. The paused run's
+        // One run, one identity — refused before anything moves, and before the
+        // answer is read at all: a caller this run is not for learns nothing about
+        // what it is waiting on (its gate, its tool, its request). The paused run's
         // caller identity is read off the checkpoint (`callerIdentity.ts`); a call
         // naming a DIFFERENT one would give the run one person's memory namespace
         // and credentials (restored, never re-seeded) and another's `ctx.identity`,
@@ -2226,6 +2285,18 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                 (restored === undefined || !(0, callerIdentity_js_1.sameIdentity)(options.identity, restored)))) {
             throw new conversation_js_3.ResumeIdentityConflictError();
         }
+        // …and the decision must be for THIS request and this exact call
+        // (`core/consentRequest.ts`): refused here, before anything moves, when it
+        // names no request, another request, a call the checkpoint no longer
+        // holds, or — for an ask — rules this agent's chain no longer runs. The
+        // dispatch loop asks again where the decision is used — and spends it
+        // there, once.
+        const gate = (0, pause_js_1.pauseDemandsDecision)(checkpoint.pauseData);
+        if (gate) {
+            (0, consentRequest_js_1.checkDecisionAgainst)(checkpoint, gate, input, this.toolMiddleware.map((link) => link.name), 
+            // A request minted under a ledger that can prove is spent only there.
+            this.decisionLedger ?? (0, consentRequest_js_1.processDecisionLedger)());
+        }
         // Typed data collection is not consent. Validate before changing any run state.
         const awaitingInput = gate === undefined ? (0, inputRequest_js_1.readAwaitingInput)(checkpoint.pauseData) : undefined;
         let answeredAsk;
@@ -2275,6 +2346,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // Settled the moment the answer is handed over, not when the resumed run
         // finishes: a resume that then FAILS must not leave the agent refusing
         // every later message on behalf of a question that has been answered.
+        // Kept to put back when the run refuses the answer itself (a replay of a
+        // request already answered): that resume answered nothing.
+        const questionBefore = this.pendingQuestion;
         this.pendingQuestion = undefined;
         // WHO this resumed run is for — set BEFORE the executor exists, because the
         // run context's principal (every event's `EventMeta.principal`), a tool's
@@ -2363,6 +2437,14 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             return finalized;
         }
         catch (cause) {
+            // An answer the run refused ran nothing and answered nothing: the
+            // question this agent was waiting on (if any) is still outstanding, and
+            // no tool session ended — a replayed decision must not tear down the
+            // sandbox a live pause is holding.
+            if (cause instanceof pause_js_1.ResumeDecisionError || cause instanceof pause_js_1.DecisionRequiredError) {
+                this.pendingQuestion = questionBefore;
+                throw cause;
+            }
             await this.endRunToolSessions(cause);
             throw cause;
         }
@@ -2516,6 +2598,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             // The turn this history ends on (honesty layers) — absent unless a
             // layer is armed, so every other checkpoint keeps its byte shape.
             ...(turnNumber !== undefined && { turnNumber }),
+            ...(this.negativeClaimsConfig === undefined || state === undefined
+                ? {}
+                : (0, checkpoint_js_1.negativeCheckpointOf)(state)),
         };
     }
     /** Called as each run/resume ends: remember a run that got past input admission. */
@@ -2524,6 +2609,16 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             this.hadAdmittedRun = true;
         }
     }
+    /**
+     * Whether the evidence gate's revision calls no tools: a posture that can
+     * revise (`'guard'`, `'rails'`) under an ENFORCING answer validation. There
+     * the answer may yet be withheld, so a revision must not run a tool that
+     * writes or sends again — and the library cannot tell one that only reads.
+     */
+    revisionWithholdsTools() {
+        return (this.typedNegativeClaimsConfig !== undefined ||
+            this.evidenceGate?.toolsOffAfterRevision === true);
+    }
     /** Whether input middleware refused the last run's message — the one reading both doors ask. */
     lastInputRefused() {
         const state = this.liveSnapshot()?.sharedState;
@@ -2630,9 +2725,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      * @internal
      */
     turnNumberOf(state) {
-        if (state?.honestyLayers === undefined)
+        if (state?.honestyLayers === undefined && this.negativeClaimsConfig === undefined)
             return undefined;
-        const turn = state.turnNumber;
+        const turn = state?.turnNumber;
         return typeof turn === 'number' && Number.isSafeInteger(turn) && turn >= 1 ? turn : undefined;
     }
     /**
@@ -2679,12 +2774,15 @@ class Agent extends RunnerBase_js_1.RunnerBase {
     applyContinuation(cp, door, appendsUserTurn) {
         (0, runCheckpoint_js_1.assertContinuable)(cp, this.explicitId, door);
         (0, verificationCheckpoint_js_1.requireVerificationOnResume)(cp, false);
+        if (this.negativeClaimsConfig === undefined && (0, checkpoint_js_1.negativeCheckpointOf)(cp) !== undefined)
+            throw new TypeError('Continuation requires the negative-claims setting used by the recording agent.');
         this.pendingResumeHistory = {
             history: cp.history,
             appendsUserTurn,
             // The turn the stored history ends on (honesty layers) — seed continues
             // the turn stamp from it only while a layer is armed.
             ...(cp.turnNumber !== undefined && { turn: cp.turnNumber }),
+            ...(this.negativeClaimsConfig === undefined ? {} : { negatives: (0, checkpoint_js_1.negativeCheckpointOf)(cp) }),
         };
         // The folded spans beside it. A conversation stored before 8.2 has none,
         // and `undefined` is the right answer there — it means "this conversation
@@ -3099,7 +3197,8 @@ class Agent extends RunnerBase_js_1.RunnerBase {
      * lies.
      */
     assertNativeOutputSchemaSupported() {
-        if (this.outputEnforcement?.outputFormat === undefined)
+        if (this.outputEnforcement?.outputFormat === undefined ||
+            this.outputEnforcement.nativeOutputAuto === true)
             return;
         const first = this.reliabilityConfig?.providers?.[0];
         const provider = first?.provider ?? this.provider;
@@ -3339,15 +3438,19 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                 getRunContext: getRunCtx,
             }));
         }
-        // Same wiring for `agentfootprint.findings.*` (9.101.0) — the ledger's two
-        // events, filed by `recordFindings` on scope. Attached only under
-        // `.findings()`: an unarmed agent gains no bridge, no listener and no
+        // Same wiring for `agentfootprint.findings.*` (9.101.0) — the ledger's
+        // events, filed by `recordFindings` on scope. An unarmed agent gains
+        // no bridge, no listener and no
         // per-event work, and `agent.on('agentfootprint.findings.*')` can only
         // ever fire on an agent that could have filed a row.
         // Also under the inputs layer (honesty layer 2): its `argument` rows are
         // filed through the same writer and ride the same domain — and under the
         // results layer (honesty layer 3), whose `period` rows do the same.
-        if (this.findingsOptions !== undefined || this.inputsLayerArmed || this.resultsLayerArmed) {
+        // Negative claims also file prose warnings, independently of those layers.
+        if (this.findingsOptions !== undefined ||
+            this.inputsLayerArmed ||
+            this.resultsLayerArmed ||
+            this.negativeClaimsConfig !== undefined) {
             attachObserver(new EmitBridge_js_1.EmitBridge({
                 id: 'agentfootprint.findings-bridge',
                 prefix: 'agentfootprint.findings.',
@@ -3767,6 +3870,14 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ?.findingsLedger;
         return ledger === undefined ? undefined : structuredClone(ledger);
     }
+    /** The library-composed negative statements and their recorded limits.
+     * Detached, in-process data for the caller. Record redaction applies to the
+     * snapshots and emitted events, not this caller-owned value. */
+    answerNegatives() {
+        const value = this.liveSnapshot()?.sharedState
+            ?.answerNegatives;
+        return value === undefined ? undefined : structuredClone(value);
+    }
     /** The last run's answer checks, detached from its execution record.
      * Undefined means no terminal validation ran, never an implicit pass. */
     answerValidation() {
@@ -4123,8 +4234,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // The findings ledger's restore (9.101.0), WIDENED (honesty layer 2): wired
         // whenever the ledger OR an honesty layer is armed — an agent without
         // `.findings()` files argument rows too, and a continued conversation must
-        // keep them. Still value-conditional inside seed (only when rows exist).
-        let ledgerRestoreArmed = this.findingsOptions !== undefined;
+        // keep them. Negative-claim observations also persist independently of those
+        // layers. Still value-conditional inside seed (only when rows exist).
+        let ledgerRestoreArmed = this.findingsOptions !== undefined || this.negativeClaimsConfig !== undefined;
         const consumeResumeLedger = () => {
             const l = this.pendingResumeFindingsLedger;
             this.pendingResumeFindingsLedger = undefined;
@@ -4173,8 +4285,10 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             // under the arm (refused at build without the inputs layer).
             ...(this.argumentSourcesArmed === true && { argumentSources: true }),
             // The answer check's tool-call ledger — value-conditional, so an agent
-            // without `answerValidation` hands seed the deps it always did.
-            ...(this.answerValidationConfig !== undefined && { toolCallLedger: true }),
+            // without answer validation or negative claims keeps its prior shape.
+            ...((this.answerValidationConfig !== undefined ||
+                this.negativeClaimsConfig !== undefined) && { toolCallLedger: true }),
+            ...(this.negativeClaimsConfig !== undefined && { negativeClaimsArmed: true }),
             get consumePendingResumeFindingsLedger() {
                 return ledgerRestoreArmed ? consumeResumeLedger : undefined;
             },
@@ -4204,6 +4318,7 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ...(this.findingsOptions !== undefined && {
                 findings: true,
                 findingsServe: this.findingsOptions.serve ?? 'ledger-and-facts',
+                findingsContextBytes: this.findingsOptions.maxContextBytes,
                 // The answer-turn ask (9.103.0): VALUE-conditional inside the arm —
                 // the default `'none'` threads nothing and writes no key.
                 ...(this.findingsOptions.answerAsk === 'quote-facts' && {
@@ -4236,8 +4351,13 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ...(this.skillBrains?.escalation !== undefined && { hasEscalation: true }),
             // The evidence gate's one bounded revision (9.35.0) — a per-turn budget,
             // reset here. Only a posture that can revise writes the key.
-            ...(this.evidenceGate !== undefined &&
-                this.evidenceGate.posture !== 'assist' && { hasEvidenceRevision: true }),
+            ...((this.typedNegativeClaimsConfig !== undefined ||
+                (this.evidenceGate !== undefined && this.evidenceGate.posture !== 'assist')) && {
+                hasEvidenceRevision: true,
+            }),
+            // Under an enforcing answer validation the tools stay off for a run
+            // resumed after its revision was asked (`toolsOffAfterRevision`).
+            ...(this.revisionWithholdsTools() && { toolsOffAfterRevision: true }),
             getCurrentRunId: () => this.currentRunContext?.runId,
             // WHO this run is for, when the caller named nobody (9.10.0). Seed uses
             // it for exactly one rung of the identity ladder — see `seedFrom` — and
@@ -4691,10 +4811,13 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                     this.inFlightRunId === this.checkpointTracker.runId)
                     (0, runCheckpoint_js_1.retainReplayRetirements)(this.checkpointTracker, preparation);
             },
-            ...(this.evidenceGate !== undefined &&
-                this.evidenceGate.posture !== 'assist' && {
+            ...((this.typedNegativeClaimsConfig !== undefined ||
+                (this.evidenceGate !== undefined && this.evidenceGate.posture !== 'assist')) && {
                 hasEvidenceRecovery: true,
             }),
+            // The revision calls no tools under an enforcing answer validation: only
+            // then does request assembly read `toolsOffAfterRevision`.
+            ...(this.revisionWithholdsTools() && { toolsOffAfterRevision: true }),
             // The findings ledger (9.101.0): the choice seam and `postValidate`
             // read peeled args / content under `findings`; the SERVING (step 3) —
             // the ledger piece after the recovery piece, the wire-only collapse of
@@ -4706,6 +4829,7 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                 findings: true,
                 hasFindingsLedger: true,
                 findingsServe: this.findingsOptions.serve ?? 'ledger-and-facts',
+                findingsContextBytes: this.findingsOptions.maxContextBytes,
                 // The answer-turn ask (9.103.0): the same value seed records, so the
                 // wire and the rebuild append it from one fact; absent on `'none'`.
                 ...(this.findingsOptions.answerAsk === 'quote-facts' && {
@@ -4783,9 +4907,12 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ...(this.outputEnforcement?.schemaTool !== undefined && {
                 schemaTool: this.outputEnforcement.schemaTool,
             }),
-            // The structured-output format, under `strategy: 'native'` only.
+            // The native format candidate; auto selects it for the effective request.
             ...(this.outputEnforcement?.outputFormat !== undefined && {
                 outputFormat: this.outputEnforcement.outputFormat,
+                ...(this.outputEnforcement.nativeOutputAuto === true && {
+                    nativeOutputAuto: true,
+                }),
             }),
             ...(this.thinkingBudget !== undefined && { thinkingBudget: this.thinkingBudget }),
             // Only a configured agent reads `scope.resolvedModel` — see the dep's
@@ -4918,9 +5045,26 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // trailing positional: the judges file the answer's witness rows, and
         // every row this decider files carries the turn stamp.
         answerArmed ? true : undefined);
-        const routeDecider = this.answerValidationConfig === undefined
+        const validatedRouteDecider = this.answerValidationConfig === undefined
             ? baseRouteDecider
-            : (0, answerValidation_js_1.withAnswerValidation)(baseRouteDecider, this.answerValidationConfig, this.outputSchemaParser, artifactStore, () => this.consentOutstanding.size > 0, this.outputEnforcement?.outputFormat !== undefined);
+            : (0, answerValidation_js_1.withAnswerValidation)(baseRouteDecider, this.answerValidationConfig, this.outputSchemaParser, artifactStore, () => this.consentOutstanding.size > 0, this.outputEnforcement?.outputFormat !== undefined, 
+            // Read only when `agentChecks` lists 'claims' (the agent's own rows).
+            this.claimContract, this.typedNegativeClaimsConfig === undefined
+                ? undefined
+                : {
+                    config: this.typedNegativeClaimsConfig,
+                    phrases: this.typedNegativeClaimsConfig.phrases,
+                    applicationValidation: this.applicationAnswerValidation,
+                    runId: () => this.currentRunContext.runId,
+                });
+        const routeDecider = this.negativeClaimsConfig?.mode === 'prose'
+            ? (0, observe_js_1.withNegativeProse)(validatedRouteDecider, {
+                runId: () => this.currentRunContext.runId,
+                hasOutstandingConsent: () => this.consentOutstanding.size > 0,
+                structured: this.outputSchemaParser !== undefined,
+                phrases: this.negativeClaimsConfig.phrases,
+            })
+            : validatedRouteDecider;
         // `.limitsTravelWithTheAnswer()` on a TYPED answer — decided once, here.
         // An output schema makes the answer JSON, and the appended block would
         // make it JSON followed by prose, which `runTyped()` cannot parse. So the
@@ -5030,10 +5174,12 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             // handler exactly the deps object it always did.
             ...(this.repeatedCallNudge === false && { repeatedCallNudge: false }),
             // The answer check's tool-call ledger (`context.toolCalls`) — kept ONLY
-            // when `answerValidation` is configured, so no other agent's record changes.
-            ...(this.answerValidationConfig !== undefined && {
-                toolCallLedger: { maxCalls: this.answerValidationConfig.limits.maxToolCalls },
+            // for answer validation or negative claims; other records stay unchanged.
+            ...((this.answerValidationConfig !== undefined ||
+                this.negativeClaimsConfig !== undefined) && {
+                toolCallLedger: { maxCalls: this.answerValidationConfig?.limits.maxToolCalls ?? 1000 },
             }),
+            ...(this.negativeClaimsConfig !== undefined && { negativeClaimsArmed: true }),
             // Skill-graph read_skill gate: bound the model's read_skill jumps to the
             // reachable set from the current cursor. Undefined → gate off (back-compat).
             ...(this.skillGraphReachable && {
@@ -5090,6 +5236,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             // Check-in (evidence-carrying human consent). Always threaded (resolved
             // default); the gate fires only for tools that declared `checkIn`.
             checkIn: this.checkInConfig,
+            // Where a decision's request is spent, once (`core/consentRequest.ts`).
+            // Absent → this process's ledger, shared by every agent that names none.
+            ...(this.decisionLedger !== undefined && { decisionLedger: this.decisionLedger }),
             // The governance chain. Threaded only when non-empty so an agent without
             // one produces the same handler behaviour it always did.
             ...(this.toolMiddleware.length > 0 && { toolMiddleware: this.toolMiddleware }),
@@ -5221,6 +5370,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ...(inputsArmed && {
                 inputsLayer: {
                     ...(this.findingsOptions !== undefined && { findings: true }),
+                    // Route's sixth dispatch value, read only by an agent whose revision
+                    // turns the tools off (an enforcing answer validation).
+                    ...(this.revisionWithholdsTools() && { toolsOffAfterRevision: true }),
                     toolOf: (toolName) => resolveForLayer(toolName).tool,
                     ...(this.toolMiddleware.length > 0 && { rewrites: true }),
                     // The time layer (step T5a): a tool whose period declares forms is filled from the
@@ -5299,6 +5451,9 @@ class Agent extends RunnerBase_js_1.RunnerBase {
             ...(this.timeOptions !== undefined && { timeWindows: true }),
             ...(inputsArmed && this.timeOptions !== undefined && { timeLimits: true }),
             ...(this.answerValidationConfig !== undefined && { hasAnswerValidation: true }),
+            ...(this.typedNegativeClaimsConfig !== undefined && {
+                negativeRecheckStage: recheck_js_1.negativeRecheckStage,
+            }),
             ...(governsOutput && { releaseOutputTokens: true }),
             ...(this.evidenceGate?.posture === 'rails' && { evidenceRails: true }),
             // The out-of-budget wrap-up branch (9.56.0) — the conditional-mount law