agentfootprint 13.0.0 → 14.0.0

package/dist/core/agent/stages/toolCalls/routing/effectsOperations.js

@@ -0,0 +1,264 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildToolEffectsOperations = void 0;
+const footprintjs_1 = require("footprintjs");
+const leases_js_1 = require("../../../../../injection-engine/leases.js");
+const typedEmit_js_1 = require("../../../../../recorders/core/typedEmit.js");
+const skillGraph_js_1 = require("../../../../../injection-engine/skillGraph.js");
+const spokenIds_js_1 = require("../../../../../lib/spokenIds.js");
+/** Compose the existing effects callbacks once for this handler. */
+function buildToolEffectsOperations(deps) {
+    const warnEffect = (toolName, sentence) => {
+        if ((0, footprintjs_1.isDevMode)()) {
+            // eslint-disable-next-line no-console
+            console.warn(`agentfootprint tool-effects: tool '${toolName}' — ${sentence}`);
+        }
+    };
+    /**
+     * Judge one finalized result's effects, in declaration order. Returns the
+     * model-visible NOTE (teaching refusals only — an accepted effect speaks
+     * through what it does: the cursor move, the delivered instruction).
+     * Every judgment is a `tools.effect` event; nothing is half-applied.
+     */
+    const applyToolEffects = (scope, call, envelope, state) => {
+        let note = '';
+        const refuse = (kind, refusalReason, fields = {}) => {
+            (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                kind,
+                outcome: 'refused',
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+                ...(fields.targetSkillId !== undefined && { targetSkillId: fields.targetSkillId }),
+                ...(fields.reason !== undefined && { reason: fields.reason }),
+                ...(fields.instructionId !== undefined && { instructionId: fields.instructionId }),
+                ...(fields.deliveryLease !== undefined && { deliveryLease: fields.deliveryLease }),
+                refusalReason,
+            });
+            note += ` [tool effect refused: ${refusalReason}]`;
+            warnEffect(call.toolName, refusalReason);
+        };
+        for (const bad of envelope.malformed)
+            refuse(bad.kind, bad.refusalReason);
+        for (const effect of envelope.effects) {
+            if (effect.kind === 'propose-transition') {
+                const target = effect.targetSkillId;
+                if (!deps.allowedSkillIds) {
+                    refuse('propose-transition', `propose-transition → '${target}' needs a mounted skill graph: without one there ` +
+                        `is no routing law to check the proposal against and no cursor to move. Mount ` +
+                        `.skillGraph(), or drop the effect.`, { targetSkillId: target, reason: effect.reason });
+                    continue;
+                }
+                const currentSkillId = scope.currentSkillId;
+                const hops = deps.allowedSkillIds(currentSkillId);
+                const targetClass = (0, skillGraph_js_1.classifySkillTarget)({
+                    ...(currentSkillId !== undefined && { cursor: currentSkillId }),
+                    target,
+                    hops,
+                });
+                // ── A PROPOSAL TO THE CURSOR'S OWN SKILL IS A STAY (9.86.0) ──────
+                // `makeReachableSkills` filters the cursor out of its own successor
+                // set — right for a MOVE, and this judge read it as "not reachable"
+                // and refused. A tool saying "stay where you are" asks for the state
+                // the run is already in: there is no cursor to move, no activation to
+                // append, and nothing to refuse. It is accepted as a no-op — no
+                // `pendingToolTransition`, no cursor move, and no `[tool effect
+                // refused: …]` suffix on a result that proposed nothing wrong.
+                //
+                // The event carries the existing `'accepted'` outcome plus an
+                // ADDITIVE `stay: true`, deliberately not a new enum member: an
+                // exhaustive switch over `outcome` in a consumer must keep compiling.
+                //
+                // A STAY COMPETES FOR THE SLOT LIKE ANY OTHER ACCEPTED PROPOSAL
+                // (9.86.1). The batch law is "first ACCEPTED proposal wins, later
+                // proposals to OTHER targets are superseded", and a stay is accepted
+                // — so a stay judged first holds the slot (with nothing written to
+                // `pendingToolTransition`, because a stay moves nothing) and a later
+                // sibling proposing a hop is `'superseded'` and lands in the
+                // `route_conflict` losers, exactly as two conflicting hops do. Before
+                // this the stay `continue`d past the bookkeeping, so the tool that
+                // judged its data first lost to whichever sibling came second, with
+                // two `'accepted'` events in one batch and no conflict on the record.
+                // The same law in the other order: a stay proposed AFTER an accepted
+                // hop is superseded by it, not accepted beside it.
+                if (targetClass === 'self') {
+                    if (state.winner !== undefined && state.winner.targetSkillId !== target) {
+                        state.losers.push({
+                            toolCallId: call.toolCallId,
+                            toolName: call.toolName,
+                            target,
+                        });
+                        (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                            kind: 'propose-transition',
+                            outcome: 'superseded',
+                            toolName: call.toolName,
+                            toolCallId: call.toolCallId,
+                            iteration: call.iteration,
+                            targetSkillId: target,
+                            reason: effect.reason,
+                            supersededBy: 'earlier-proposal',
+                        });
+                        continue;
+                    }
+                    if (state.winner === undefined) {
+                        state.winner = {
+                            targetSkillId: target,
+                            toolName: call.toolName,
+                            toolCallId: call.toolCallId,
+                            reason: effect.reason,
+                            iteration: call.iteration,
+                        };
+                    }
+                    (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                        kind: 'propose-transition',
+                        outcome: 'accepted',
+                        stay: true,
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        iteration: call.iteration,
+                        targetSkillId: target,
+                        reason: effect.reason,
+                    });
+                    continue;
+                }
+                if (targetClass === 'unreachable') {
+                    // ── THE REFUSAL SPEAKS WITH THE FILTERED SETS (9.86.1) ──────────
+                    // This sentence is appended to the tool result the model reads and
+                    // rides the `tools.effect` payload, and it named the raw hop set and
+                    // the raw cursor — the leak the `read_skill` refusals closed one
+                    // function up. Same filter, same law: the hidden set the tools slot
+                    // resolved for this iteration, and OMIT, NEVER DENY — a hop set the
+                    // filter emptied composes no reachable clause rather than an empty
+                    // one. Admission is still judged on the raw `hops`.
+                    const hiddenIds = new Set(scope.hiddenSkillIds ?? []);
+                    const mayName = (id) => !hiddenIds.has(id);
+                    const reachable = (0, spokenIds_js_1.spoken)(hops, mayName);
+                    const from = currentSkillId === undefined
+                        ? 'the turn start'
+                        : mayName(currentSkillId)
+                            ? `'${currentSkillId}'`
+                            : 'the skill the cursor stood in';
+                    refuse('propose-transition', `propose-transition → '${target}' was refused: '${target}' is not reachable from ` +
+                        `${from} per the graph's own law${reachable.named.length > 0 ? ` (reachable: ${reachable.named.join(', ')})` : ''}. The graph decides — a proposal is evidence, never authority.`, { targetSkillId: target, reason: effect.reason });
+                    continue;
+                }
+                if (state.winner !== undefined && state.winner.targetSkillId !== target) {
+                    // A later proposal to a DIFFERENT target — suppressed under the
+                    // route_conflict law (first in call order wins), on the record.
+                    state.losers.push({
+                        toolCallId: call.toolCallId,
+                        toolName: call.toolName,
+                        target,
+                    });
+                    (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                        kind: 'propose-transition',
+                        outcome: 'superseded',
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        iteration: call.iteration,
+                        targetSkillId: target,
+                        reason: effect.reason,
+                        supersededBy: 'earlier-proposal',
+                    });
+                    continue;
+                }
+                if (state.winner === undefined) {
+                    state.winner = {
+                        targetSkillId: target,
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        reason: effect.reason,
+                        iteration: call.iteration,
+                    };
+                    // Committed AT ACCEPTANCE (not batch end) so a pause later in the
+                    // batch checkpoints the accepted move instead of dropping it.
+                    scope.pendingToolTransition = state.winner;
+                    // The activation promise a gate-accepted read_skill pick makes,
+                    // made here too: a model-edge-only target keeps its llm-activated
+                    // trigger, so the ledger entry is what makes the body actually
+                    // load when the cursor lands.
+                    const activated = scope.activatedInjectionIds;
+                    if (!activated.includes(target)) {
+                        scope.activatedInjectionIds = [...activated, target];
+                    }
+                }
+                // First acceptance AND a same-target repeat both land here: every
+                // proposal that asked for the move that happens is 'accepted'.
+                (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                    kind: 'propose-transition',
+                    outcome: 'accepted',
+                    toolName: call.toolName,
+                    toolCallId: call.toolCallId,
+                    iteration: call.iteration,
+                    targetSkillId: target,
+                    reason: effect.reason,
+                });
+                continue;
+            }
+            // require-instruction
+            const known = deps.leaseTargets?.get(effect.instructionId);
+            if (known === undefined) {
+                refuse('require-instruction', `require-instruction '${effect.instructionId}' was refused: no registered ` +
+                    `injection carries that id — the push door serves the declared catalog only ` +
+                    `(read_skill stays the pull door).`, { instructionId: effect.instructionId, deliveryLease: effect.deliveryLease });
+                continue;
+            }
+            if (known.surfaceMode === 'tool-only') {
+                refuse('require-instruction', `require-instruction '${effect.instructionId}' was refused: that skill declares ` +
+                    `surfaceMode 'tool-only', whose body travels only as a read_skill result — the ` +
+                    `system slot suppresses it, so the lease would be granted and never delivered. ` +
+                    `Pull it with read_skill, or change the skill's surfaceMode.`, { instructionId: effect.instructionId, deliveryLease: effect.deliveryLease });
+                continue;
+            }
+            const tenant = (0, leases_js_1.tenantOf)(scope.currentSkillId, scope.activatedInjectionIds);
+            const lease = {
+                instructionId: effect.instructionId,
+                deliveryLease: effect.deliveryLease,
+                ...(tenant !== undefined && { skillId: tenant }),
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+            };
+            // Prune-as-we-write: spent grants leave with the same write that adds
+            // the new one, so a long turn never accumulates dead leases.
+            scope.instructionLeases = [
+                ...(0, leases_js_1.pruneLeases)(scope.instructionLeases, call.iteration, tenant),
+                lease,
+            ];
+            (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.tools.effect', {
+                kind: 'require-instruction',
+                outcome: 'accepted',
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+                instructionId: effect.instructionId,
+                deliveryLease: effect.deliveryLease,
+            });
+        }
+        return note;
+    };
+    /** The batch-end aggregate for conflicting proposals — the
+     *  `route_conflict` reuse, additive `source` says what conflicted. The
+     *  per-effect `tools.effect` events above already carried every fact;
+     *  this is the one-event-per-batch view the edge law already ships. */
+    const emitTransitionConflict = (scope, iteration, state) => {
+        if (state.winner === undefined || state.losers.length === 0)
+            return;
+        (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.skill.route_conflict', {
+            iteration,
+            ...(scope.currentSkillId !== undefined && {
+                fromSkillId: scope.currentSkillId,
+            }),
+            winner: {
+                ...(state.winner.toolCallId !== undefined && { toolCallId: state.winner.toolCallId }),
+                toolName: state.winner.toolName,
+                target: state.winner.targetSkillId,
+            },
+            losers: state.losers.map((l) => ({ ...l })),
+            source: 'tool-proposal',
+        });
+    };
+    return { warnEffect, applyToolEffects, emitTransitionConflict };
+}
+exports.buildToolEffectsOperations = buildToolEffectsOperations;
+//# sourceMappingURL=effectsOperations.js.map

package/dist/core/agent/stages/toolCalls/routing/effectsOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectsOperations.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/routing/effectsOperations.ts"],"names":[],"mappings":";;;AACA,6CAAyD;AAOzD,yEAImD;AACnD,6EAAuE;AACvE,iFAAoF;AACpF,kEAAyD;AAGzD,oEAAoE;AACpE,SAAgB,0BAA0B,CACxC,IAAoE;IAEpE,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAQ,EAAE;QAC9D,IAAI,IAAA,uBAAS,GAAE,EAAE,CAAC;YAChB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,OAAO,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,gBAAgB,GAAG,CACvB,KAA6B,EAC7B,IAA4F,EAC5F,QAAgC,EAChC,KAA2B,EACnB,EAAE;QACV,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,CACb,IAA4B,EAC5B,aAAqB,EACrB,SAKI,EAAE,EACA,EAAE;YACR,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;gBAC9C,IAAI;gBACJ,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,aAAa;aACd,CAAC,CAAC;YACH,IAAI,IAAI,0BAA0B,aAAa,GAAG,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3C,CAAC,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAE1E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,MAAM,CACJ,oBAAoB,EACpB,yBAAyB,MAAM,mDAAmD;wBAChF,+EAA+E;wBAC/E,oCAAoC,EACtC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACjD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAC;gBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,IAAA,mCAAmB,EAAC;oBACtC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;oBAC/D,MAAM;oBACN,IAAI;iBACL,CAAC,CAAC;gBACH,oEAAoE;gBACpE,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,gEAAgE;gBAChE,gEAAgE;gBAChE,+DAA+D;gBAC/D,EAAE;gBACF,8DAA8D;gBAC9D,gEAAgE;gBAChE,sEAAsE;gBACtE,EAAE;gBACF,gEAAgE;gBAChE,kEAAkE;gBAClE,qEAAqE;gBACrE,mEAAmE;gBACnE,qEAAqE;gBACrE,6DAA6D;gBAC7D,sEAAsE;gBACtE,mEAAmE;gBACnE,oEAAoE;gBACpE,sEAAsE;gBACtE,qEAAqE;gBACrE,mDAAmD;gBACnD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;oBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;wBACxE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;4BAChB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,MAAM;yBACP,CAAC,CAAC;wBACH,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;4BAC9C,IAAI,EAAE,oBAAoB;4BAC1B,OAAO,EAAE,YAAY;4BACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,aAAa,EAAE,MAAM;4BACrB,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,YAAY,EAAE,kBAAkB;yBACjC,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC/B,KAAK,CAAC,MAAM,GAAG;4BACb,aAAa,EAAE,MAAM;4BACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC1B,CAAC;oBACJ,CAAC;oBACD,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;wBAC9C,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,UAAU;wBACnB,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,aAAa,EAAE,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;oBAClC,mEAAmE;oBACnE,mEAAmE;oBACnE,qEAAqE;oBACrE,iEAAiE;oBACjE,oEAAoE;oBACpE,oEAAoE;oBACpE,mEAAmE;oBACnE,oDAAoD;oBACpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAE,KAAK,CAAC,cAAgD,IAAI,EAAE,CAAC,CAAC;oBACzF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,SAAS,GAAG,IAAA,qBAAM,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACxC,MAAM,IAAI,GACR,cAAc,KAAK,SAAS;wBAC1B,CAAC,CAAC,gBAAgB;wBAClB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;4BACzB,CAAC,CAAC,IAAI,cAAc,GAAG;4BACvB,CAAC,CAAC,+BAA+B,CAAC;oBACtC,MAAM,CACJ,oBAAoB,EACpB,yBAAyB,MAAM,mBAAmB,MAAM,0BAA0B;wBAChF,GAAG,IAAI,2BACL,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAC/E,gEAAgE,EAClE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACjD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;oBACxE,gEAAgE;oBAChE,gEAAgE;oBAChE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;wBAChB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM;qBACP,CAAC,CAAC;oBACH,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;wBAC9C,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,YAAY;wBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,aAAa,EAAE,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,YAAY,EAAE,kBAAkB;qBACjC,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC/B,KAAK,CAAC,MAAM,GAAG;wBACb,aAAa,EAAE,MAAM;wBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC;oBACF,kEAAkE;oBAClE,8DAA8D;oBAC9D,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,MAAM,CAAC;oBAC3C,gEAAgE;oBAChE,kEAAkE;oBAClE,+DAA+D;oBAC/D,8BAA8B;oBAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAA0C,CAAC;oBACnE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAChC,KAAK,CAAC,qBAAqB,GAAG,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,kEAAkE;gBAClE,+DAA+D;gBAC/D,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;oBAC9C,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CACJ,qBAAqB,EACrB,wBAAwB,MAAM,CAAC,aAAa,+BAA+B;oBACzE,6EAA6E;oBAC7E,mCAAmC,EACrC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAC7E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACtC,MAAM,CACJ,qBAAqB,EACrB,wBAAwB,MAAM,CAAC,aAAa,qCAAqC;oBAC/E,gFAAgF;oBAChF,gFAAgF;oBAChF,6DAA6D,EAC/D,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAC7E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,oBAAQ,EACrB,KAAK,CAAC,cAAoC,EAC1C,KAAK,CAAC,qBAAsD,CAC7D,CAAC;YACF,MAAM,KAAK,GAAqB;gBAC9B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,sEAAsE;YACtE,6DAA6D;YAC7D,KAAK,CAAC,iBAAiB,GAAG;gBACxB,GAAG,IAAA,uBAAW,EACZ,KAAK,CAAC,iBAA4D,EAClE,IAAI,CAAC,SAAS,EACd,MAAM,CACP;gBACD,KAAK;aACN,CAAC;YACF,IAAA,wBAAS,EAAC,KAAK,EAAE,6BAA6B,EAAE;gBAC9C,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF;;;2EAGuE;IACvE,MAAM,sBAAsB,GAAG,CAC7B,KAA6B,EAC7B,SAAiB,EACjB,KAA2B,EACrB,EAAE;QACR,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpE,IAAA,wBAAS,EAAC,KAAK,EAAE,qCAAqC,EAAE;YACtD,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI;gBACxC,WAAW,EAAE,KAAK,CAAC,cAAwB;aAC5C,CAAC;YACF,MAAM,EAAE;gBACN,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrF,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;aACnC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;AAClE,CAAC;AA7SD,gEA6SC"}

package/dist/core/agent/stages/toolCalls/routing/policyHalt.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.haltLandedCall = void 0;
+const extractSequence_js_1 = require("../../../../../security/extractSequence.js");
+// v2.12 — strict halt ordering (continued).
+//
+// The synthetic tool_result for the halt-triggering call has
+// ALREADY been pushed to newHistory above. Now: emit the halt
+// event, commit history to scope, set the scope flags Agent.run
+// reads at the API boundary, and break the loop. This SKIPS any
+// remaining parallel-call siblings (intentional — once a halt
+// fires, no further tool dispatches should occur this turn).
+function haltLandedCall(scope, frame) {
+    const { haltContext, emitSecurity, tc, newHistory, iteration, callArguments } = frame;
+    emitSecurity('agentfootprint.permission.halt', {
+        target: tc.name,
+        reason: haltContext.reason,
+        tellLLM: haltContext.tellLLM,
+        sequenceLength: (0, extractSequence_js_1.extractSequence)(newHistory, iteration).length,
+        ...(haltContext.checkerId !== undefined && { checkerId: haltContext.checkerId }),
+    });
+    scope.history = newHistory;
+    scope.policyHaltReason = haltContext.reason;
+    scope.policyHaltTellLLM = haltContext.tellLLM;
+    scope.policyHaltTarget = tc.name;
+    // The carrier law every pause carrier follows (`pausedToolArgs`,
+    // `pausedCheckInArgs`, `pausedCredentialArgs`): what the call would
+    // have RUN with — `callArgs`, peeled under `.findings()` — never the
+    // emission. `PolicyHaltError.proposed.args` hands this to the app as
+    // the arguments the policy refused; the model's declaration is on
+    // the ledger and in history, not in that hand-off.
+    scope.policyHaltArgs = callArguments.callArgs;
+    scope.policyHaltIteration = iteration;
+    if (haltContext.checkerId !== undefined) {
+        scope.policyHaltCheckerId = haltContext.checkerId;
+    }
+    scope.$break(`policy-halt: ${haltContext.reason}`);
+}
+exports.haltLandedCall = haltLandedCall;
+//# sourceMappingURL=policyHalt.js.map

package/dist/core/agent/stages/toolCalls/routing/policyHalt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyHalt.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/routing/policyHalt.ts"],"names":[],"mappings":";;;AAKA,mFAA6E;AAc7E,4CAA4C;AAC5C,EAAE;AACF,6DAA6D;AAC7D,8DAA8D;AAC9D,gEAAgE;AAChE,gEAAgE;AAChE,8DAA8D;AAC9D,6DAA6D;AAC7D,SAAgB,cAAc,CAAC,KAA6B,EAAE,KAAsB;IAClF,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACtF,YAAY,CAAC,gCAAgC,EAAE;QAC7C,MAAM,EAAE,EAAE,CAAC,IAAI;QACf,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,cAAc,EAAE,IAAA,oCAAe,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM;QAC7D,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;KACjF,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;IAC3B,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC;IAC5C,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC;IAC9C,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,IAAI,CAAC;IACjC,iEAAiE;IACjE,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,mDAAmD;IACnD,KAAK,CAAC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;IAC9C,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACtC,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC,SAAS,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC;AAzBD,wCAyBC"}

package/dist/core/agent/stages/toolCalls/routing/readSkillRoute.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.applyReadSkillRoute = void 0;
+const spokenIds_js_1 = require("../../../../../lib/spokenIds.js");
+const skillGraph_js_1 = require("../../../../../injection-engine/skillGraph.js");
+const dedupeIds_js_1 = require("../helpers/dedupeIds.js");
+const selfCallNotice_js_1 = require("../../../selfCallNotice.js");
+const skillToolDescriptors_js_1 = require("../../../../../injection-engine/skillToolDescriptors.js");
+const typedEmit_js_1 = require("../../../../../recorders/core/typedEmit.js");
+const readSkillRefusal_js_1 = require("../helpers/readSkillRefusal.js");
+const routingPolicy_js_1 = require("../../../../../injection-engine/routingPolicy.js");
+/** Apply the existing post-execution read_skill route, in the original order. */
+function applyReadSkillRoute(scope, deps, bindings) {
+    if (deps.allowedSkillIds &&
+        bindings.tc.name === 'read_skill' &&
+        !bindings.outcome.error &&
+        !bindings.execution.denied) {
+        const reqId = bindings.callArguments.callArgs.id;
+        if (typeof reqId === 'string' && reqId.length > 0) {
+            const currentSkillId = scope.currentSkillId;
+            // ── ADMISSION reads the graph; every SENTENCE reads the filter ──
+            // Two sets, deliberately (9.86.0). `admissible` is the routing law:
+            // what the graph and the mount actually grant, unfiltered, because a
+            // narrowing may take a schema off the wire but never a name out of
+            // the dispatch map — role visibility governs what the model is TOLD,
+            // not what the gate admits. `hopsNamed` / `openNamed` are what any
+            // sentence, and the `skill.rejected` payload, may NAME: the same
+            // hidden set the description filtered itself with, resolved once by
+            // the tools slot and carried here on scope. Without it the refusals
+            // read the raw sets and could name a skill this role may never see —
+            // the leak the description closed, one stage downstream. (A hidden
+            // skill cannot reach this gate anyway: the `skill_read` permission
+            // gate above denies it first, on the same checker. The filter is
+            // what keeps that true by construction rather than by coincidence.)
+            const hiddenIds = new Set(scope.hiddenSkillIds ?? []);
+            const mayName = (id) => !hiddenIds.has(id);
+            const hops = deps.allowedSkillIds(currentSkillId);
+            const openAll = deps.openSkillIds ?? [];
+            // `spoken` keeps BOTH halves — what may be named, and whether the
+            // graph held anything before the filter ran. A composer handed only
+            // the filtered array cannot tell "nothing was reachable" from
+            // "nothing reachable may be named", and it used to assert the first.
+            const hopsSpoken = (0, spokenIds_js_1.spoken)(hops, mayName);
+            const openSpoken = (0, spokenIds_js_1.spoken)(openAll, mayName);
+            // The cursor through the SAME filter (9.86.1). The description
+            // withholds a hidden cursor's name and every refusal below printed
+            // it raw in two clauses; `cursorWithheld` keeps the sentence's
+            // anchor honest ("the skill the cursor stood in") without the id.
+            const cursorSpoken = currentSkillId === undefined
+                ? {}
+                : mayName(currentSkillId)
+                    ? { cursorId: currentSkillId }
+                    : { cursorWithheld: true };
+            const hopsNamed = hopsSpoken.named;
+            const openNamed = openSpoken.named;
+            // The ONE owner of "is this target the cursor?" — the same function
+            // the description, the tool-effects judge and the permission gate
+            // switch on, so a stay means the same thing in all four.
+            const targetClass = (0, skillGraph_js_1.classifySkillTarget)({
+                ...(currentSkillId !== undefined && { cursor: currentSkillId }),
+                target: reqId,
+                hops,
+                open: openAll,
+            });
+            bindings.skillRoute.skillHop = targetClass === 'hop';
+            const admissible = (0, dedupeIds_js_1.dedupeIds)([...hops, ...openAll]);
+            const allowed = (0, dedupeIds_js_1.dedupeIds)([...hopsNamed, ...openNamed]);
+            // ── The RE-ENGAGEMENT arm (9.59.0) — a third admission class ──
+            // A pick must be routed by INTENT. The reachable set deliberately
+            // excludes the node the cursor already occupies (`makeReachableSkills`
+            // filters it out), which is right for a MOVE and wrong for an
+            // ENGAGEMENT: parking never moves the cursor, so a parked map is
+            // parked exactly WHERE the model wants to return, and the refusal
+            // then told the model to "answer with the current skill" — whose
+            // prompt and tools had just been suppressed. For a single-member
+            // map that made parking permanent for the rest of the turn, under
+            // documentation calling this pick the recovery door.
+            //
+            // So: a pick of a PARKED map's member is admitted, activates, and
+            // does NOT touch the cursor — the same shape as an OPEN skill
+            // ("they ACTIVATE and never move the cursor"). `skillHop` stays
+            // false, `pendingSkillPick` stays unwritten, and the pick lands on
+            // `acceptedSkillPicks`, which the kernel's renewal feed reads as
+            // explicit evidence and re-engages on the very next pass.
+            const parked = bindings.parkedNow(scope);
+            const reengaging = parked?.has(reqId) === true;
+            if (reengaging) {
+                // Admitted. Nothing to refuse and no posture to apply: this is
+                // not a hop, and a posture governs routing, not engagement.
+            }
+            else if (targetClass === 'self') {
+                // ── The SELF-CALL arm (9.84.0) — BEFORE reachability ─────────
+                // The cursor is in neither half of `allowed`, by construction:
+                // `makeReachableSkills` filters it out of its own successor set
+                // and `openSkillIds()` excludes every graph-wired skill. So a
+                // pick of the skill the model is ALREADY IN fell through to the
+                // reachability arm and came back "not reachable from here" —
+                // about the one skill whose body was in the prompt and whose
+                // tools were in that same call's tool list. Models read that as
+                // "unavailable" and stop, which is exactly what happened in the
+                // field, three times in one day.
+                //
+                // It stays a REJECTION mechanically — no activation to append
+                // (the cursor already activates it), no hop (`skillHop` is false
+                // for the cursor anyway), and the refusal cap still counts it,
+                // because a self-call LOOP is precisely the stuck model that
+                // budget exists to escalate. What changes is the sentence: an
+                // acknowledgement of where the model stands, and — named from
+                // this call's own wire list, never from the declaration — what
+                // it can call right now. `reason` on the event is what lets a
+                // consumer tell the two apart without comparing ids.
+                //
+                // Ordered after re-engagement on purpose: a parked map member
+                // picked at its own cursor is a genuine re-engagement request,
+                // and re-engaging it beats telling the model about tools that
+                // the park has just taken off the wire.
+                bindings.skillRoute.skillRejected = true;
+                // The wire the model was ACTUALLY handed on THIS call — the one
+                // the notice speaks about and the only one it may speak about.
+                // Read unconditionally: a `scope.wrapUpAsked` guard here could
+                // never fire. This stage runs only on the Route decider's
+                // `'tool-calls'` branch, which it takes only while
+                // `iteration < maxIterations`; `wrapUpStage` raises the latch one
+                // iteration PAST that, so every self-call is composed with the
+                // latch still down.
+                const wire = scope.dynamicToolSchemas;
+                // No routing map is passed, and that is the fix rather than an
+                // omission. A tool result is re-read on every later call of the
+                // turn, so any id named here as somewhere `read_skill` could go
+                // is a PREDICTION — and three separate mechanisms falsify it
+                // after this line has run: the budget (a hop is a tool call, and
+                // the wrap-up dispatches none), the POSTURE arm forty lines below
+                // (`rails` refuses every model hop; `guard` refuses every hop off
+                // an outstanding menu, which is the default state of a decisively
+                // routed turn), and the cursor itself (a sibling tool in this
+                // very batch can fire a step edge). Passing `hops` through the
+                // hidden-id filter fixed only the third-party leak and left all
+                // three staleness paths open; the notice contradicting the
+                // posture arm's own refusal — and costing a refusal from the
+                // escalation budget to find out — was the live bug. The routing
+                // map belongs to the `read_skill` DESCRIPTION, which is
+                // recomposed on every call and is therefore never stale.
+                bindings.outcome.result = (0, selfCallNotice_js_1.selfCallNotice)({
+                    skillId: reqId,
+                    tools: (0, selfCallNotice_js_1.selfSkillTools)(reqId, scope.activeInjections, wire),
+                    // A body only exists under `surfaceMode: 'both'` (`'tool-only'`
+                    // is refused at build for anything a graph routes, and only a
+                    // graph-wired skill can be the cursor); every other mode
+                    // returns the activation confirmation, which would promise an
+                    // activation that is not pending. `ceilingRefused` is the third
+                    // shape `result` can hold — a `resultCeiling`/`resultColumns`
+                    // refusal composed above — and it is nobody's instructions.
+                    ...(typeof bindings.outcome.result === 'string' &&
+                        !bindings.execution.ceilingRefused &&
+                        bindings.outcome.result !== (0, skillToolDescriptors_js_1.skillActivationConfirmation)(reqId) && {
+                        body: bindings.outcome.result,
+                    }),
+                });
+                (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.skill.rejected', {
+                    requestedId: reqId,
+                    currentSkillId,
+                    allowed,
+                    iteration: bindings.iteration,
+                    reason: 'self-call',
+                });
+                bindings.noteSkillRefusal(scope, bindings.iteration);
+            }
+            else if (!admissible.includes(reqId)) {
+                bindings.skillRoute.skillRejected = true;
+                bindings.outcome.result = (0, readSkillRefusal_js_1.composeReadSkillRefusal)({
+                    requestedId: reqId,
+                    targetClass,
+                    ...cursorSpoken,
+                    hops: hopsSpoken,
+                    openIds: openSpoken,
+                    ...(deps.skillGraphIsTree === true && { isTree: true }),
+                });
+                (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.skill.rejected', {
+                    requestedId: reqId,
+                    ...(currentSkillId !== undefined && { currentSkillId }),
+                    allowed,
+                    iteration: bindings.iteration,
+                    reason: 'unreachable',
+                });
+                bindings.noteSkillRefusal(scope, bindings.iteration);
+            }
+            else if (deps.skillStrictness !== undefined && bindings.skillRoute.skillHop) {
+                // ── The POSTURE arm (SG-C) — after reachability, hops only. ──
+                // OPEN skills never reach here (skillHop is false for them), so
+                // `.selfExplain()` and friends stay admitted under every posture.
+                const turnRoute = scope.turnRoute;
+                const onOutstandingMenu = (0, routingPolicy_js_1.menuOutstanding)(turnRoute, currentSkillId) &&
+                    turnRoute?.offered?.includes(reqId) === true;
+                const refusedByPosture = deps.skillStrictness === 'rails' ||
+                    (deps.skillStrictness === 'guard' && !onOutstandingMenu);
+                if (refusedByPosture) {
+                    bindings.skillRoute.skillRejected = true;
+                    bindings.skillRoute.skillHop = false; // a refused pick must not move the cursor below
+                    // The posture arm names NO hop — under 'rails' the model does
+                    // not route, and under 'guard' it routes only from a menu — so
+                    // the composer is handed the menu when there IS one and an
+                    // empty hop list either way. Open skills are still named:
+                    // they never reach this arm, so nothing here can decline them.
+                    const menuNamed = turnRoute?.offered !== undefined && (0, routingPolicy_js_1.menuOutstanding)(turnRoute, currentSkillId)
+                        ? (0, spokenIds_js_1.spoken)(turnRoute.offered, mayName)
+                        : undefined;
+                    bindings.outcome.result = (0, readSkillRefusal_js_1.composeReadSkillRefusal)({
+                        requestedId: reqId,
+                        targetClass,
+                        ...cursorSpoken,
+                        // No hop is named under a posture, and the graph's hop set
+                        // is not this arm's subject — `held: false` is the honest
+                        // shape, not a claim that nothing was reachable (this arm
+                        // never composes the reachability clause at all).
+                        hops: { named: [], held: false },
+                        openIds: openSpoken,
+                        posture: deps.skillStrictness,
+                        ...(menuNamed !== undefined && { menuOffered: menuNamed }),
+                        // The whole verdict, not a boolean derived from two of its
+                        // six values: the composer says one past fact per value.
+                        ...(turnRoute !== undefined && { turnStartedBy: turnRoute.by }),
+                    });
+                    (0, typedEmit_js_1.typedEmit)(scope, 'agentfootprint.skill.rejected', {
+                        requestedId: reqId,
+                        ...(currentSkillId !== undefined && { currentSkillId }),
+                        allowed,
+                        iteration: bindings.iteration,
+                        posture: deps.skillStrictness,
+                        reason: 'posture',
+                    });
+                    bindings.noteSkillRefusal(scope, bindings.iteration);
+                }
+            }
+        }
+    }
+}
+exports.applyReadSkillRoute = applyReadSkillRoute;
+//# sourceMappingURL=readSkillRoute.js.map

package/dist/core/agent/stages/toolCalls/routing/readSkillRoute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readSkillRoute.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/routing/readSkillRoute.ts"],"names":[],"mappings":";;;AASA,kEAAyD;AACzD,iFAAoF;AACpF,0DAAoD;AAEpD,kEAA4E;AAE5E,qGAAsG;AACtG,6EAAuE;AACvE,wEAAyE;AACzE,uFAAmG;AAgBnG,iFAAiF;AACjF,SAAgB,mBAAmB,CACjC,KAA6B,EAC7B,IAGC,EACD,QAAgC;IAEhC,IACE,IAAI,CAAC,eAAe;QACpB,QAAQ,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY;QACjC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK;QACvB,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAC1B,CAAC;QACD,MAAM,KAAK,GAAI,QAAQ,CAAC,aAAa,CAAC,QAA6B,CAAC,EAAE,CAAC;QACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAC;YAClE,mEAAmE;YACnE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,qEAAqE;YACrE,mEAAmE;YACnE,iEAAiE;YACjE,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,oEAAoE;YACpE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAE,KAAK,CAAC,cAAgD,IAAI,EAAE,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;YACxC,kEAAkE;YAClE,oEAAoE;YACpE,8DAA8D;YAC9D,qEAAqE;YACrE,MAAM,UAAU,GAAG,IAAA,qBAAM,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,IAAA,qBAAM,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC5C,+DAA+D;YAC/D,mEAAmE;YACnE,+DAA+D;YAC/D,kEAAkE;YAClE,MAAM,YAAY,GAChB,cAAc,KAAK,SAAS;gBAC1B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;oBACzB,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE;oBAC9B,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC;YACnC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC;YACnC,oEAAoE;YACpE,kEAAkE;YAClE,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAA,mCAAmB,EAAC;gBACtC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;gBAC/D,MAAM,EAAE,KAAK;gBACb,IAAI;gBACJ,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,WAAW,KAAK,KAAK,CAAC;YACrD,MAAM,UAAU,GAAG,IAAA,wBAAS,EAAC,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,IAAA,wBAAS,EAAC,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;YACxD,iEAAiE;YACjE,kEAAkE;YAClE,uEAAuE;YACvE,8DAA8D;YAC9D,iEAAiE;YACjE,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,qDAAqD;YACrD,EAAE;YACF,kEAAkE;YAClE,8DAA8D;YAC9D,gEAAgE;YAChE,mEAAmE;YACnE,iEAAiE;YACjE,0DAA0D;YAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;YAC/C,IAAI,UAAU,EAAE,CAAC;gBACf,+DAA+D;gBAC/D,4DAA4D;YAC9D,CAAC;iBAAM,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;gBAClC,gEAAgE;gBAChE,+DAA+D;gBAC/D,gEAAgE;gBAChE,8DAA8D;gBAC9D,gEAAgE;gBAChE,6DAA6D;gBAC7D,6DAA6D;gBAC7D,gEAAgE;gBAChE,gEAAgE;gBAChE,iCAAiC;gBACjC,EAAE;gBACF,8DAA8D;gBAC9D,iEAAiE;gBACjE,+DAA+D;gBAC/D,6DAA6D;gBAC7D,8DAA8D;gBAC9D,8DAA8D;gBAC9D,+DAA+D;gBAC/D,8DAA8D;gBAC9D,qDAAqD;gBACrD,EAAE;gBACF,8DAA8D;gBAC9D,+DAA+D;gBAC/D,8DAA8D;gBAC9D,wCAAwC;gBACxC,QAAQ,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC;gBACzC,gEAAgE;gBAChE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,0DAA0D;gBAC1D,mDAAmD;gBACnD,kEAAkE;gBAClE,+DAA+D;gBAC/D,oBAAoB;gBACpB,MAAM,IAAI,GAAG,KAAK,CAAC,kBAA0D,CAAC;gBAC9E,+DAA+D;gBAC/D,gEAAgE;gBAChE,gEAAgE;gBAChE,6DAA6D;gBAC7D,iEAAiE;gBACjE,kEAAkE;gBAClE,kEAAkE;gBAClE,kEAAkE;gBAClE,8DAA8D;gBAC9D,+DAA+D;gBAC/D,gEAAgE;gBAChE,2DAA2D;gBAC3D,6DAA6D;gBAC7D,gEAAgE;gBAChE,wDAAwD;gBACxD,yDAAyD;gBACzD,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAA,kCAAc,EAAC;oBACvC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAA,kCAAc,EACnB,KAAK,EACL,KAAK,CAAC,gBAA0D,EAChE,IAAI,CACL;oBACD,gEAAgE;oBAChE,8DAA8D;oBAC9D,yDAAyD;oBACzD,8DAA8D;oBAC9D,gEAAgE;oBAChE,8DAA8D;oBAC9D,4DAA4D;oBAC5D,GAAG,CAAC,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ;wBAC7C,CAAC,QAAQ,CAAC,SAAS,CAAC,cAAc;wBAClC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,IAAA,qDAA2B,EAAC,KAAK,CAAC,IAAI;wBAChE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM;qBAC9B,CAAC;iBACL,CAAC,CAAC;gBACH,IAAA,wBAAS,EAAC,KAAK,EAAE,+BAA+B,EAAE;oBAChD,WAAW,EAAE,KAAK;oBAClB,cAAc;oBACd,OAAO;oBACP,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,WAAW;iBACpB,CAAC,CAAC;gBACH,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvC,QAAQ,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC;gBACzC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAA,6CAAuB,EAAC;oBAChD,WAAW,EAAE,KAAK;oBAClB,WAAW;oBACX,GAAG,YAAY;oBACf,IAAI,EAAE,UAAU;oBAChB,OAAO,EAAE,UAAU;oBACnB,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;iBACxD,CAAC,CAAC;gBACH,IAAA,wBAAS,EAAC,KAAK,EAAE,+BAA+B,EAAE;oBAChD,WAAW,EAAE,KAAK;oBAClB,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,CAAC;oBACvD,OAAO;oBACP,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;gBACH,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;gBAC9E,gEAAgE;gBAChE,gEAAgE;gBAChE,kEAAkE;gBAClE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAkC,CAAC;gBAC3D,MAAM,iBAAiB,GACrB,IAAA,kCAAe,EAAC,SAAS,EAAE,cAAc,CAAC;oBAC1C,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;gBAC/C,MAAM,gBAAgB,GACpB,IAAI,CAAC,eAAe,KAAK,OAAO;oBAChC,CAAC,IAAI,CAAC,eAAe,KAAK,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC3D,IAAI,gBAAgB,EAAE,CAAC;oBACrB,QAAQ,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC;oBACzC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,gDAAgD;oBACtF,8DAA8D;oBAC9D,+DAA+D;oBAC/D,2DAA2D;oBAC3D,0DAA0D;oBAC1D,+DAA+D;oBAC/D,MAAM,SAAS,GACb,SAAS,EAAE,OAAO,KAAK,SAAS,IAAI,IAAA,kCAAe,EAAC,SAAS,EAAE,cAAc,CAAC;wBAC5E,CAAC,CAAC,IAAA,qBAAM,EAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC;wBACpC,CAAC,CAAC,SAAS,CAAC;oBAChB,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAA,6CAAuB,EAAC;wBAChD,WAAW,EAAE,KAAK;wBAClB,WAAW;wBACX,GAAG,YAAY;wBACf,2DAA2D;wBAC3D,0DAA0D;wBAC1D,0DAA0D;wBAC1D,kDAAkD;wBAClD,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;wBAChC,OAAO,EAAE,UAAU;wBACnB,OAAO,EAAE,IAAI,CAAC,eAAe;wBAC7B,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;wBAC1D,2DAA2D;wBAC3D,yDAAyD;wBACzD,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;qBAChE,CAAC,CAAC;oBACH,IAAA,wBAAS,EAAC,KAAK,EAAE,+BAA+B,EAAE;wBAChD,WAAW,EAAE,KAAK;wBAClB,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,CAAC;wBACvD,OAAO;wBACP,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,OAAO,EAAE,IAAI,CAAC,eAAe;wBAC7B,MAAM,EAAE,SAAS;qBAClB,CAAC,CAAC;oBACH,QAAQ,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AA7OD,kDA6OC"}

package/dist/core/agent/stages/toolCalls/routing/skillActivation.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.activateLandedSkill = void 0;
+/** The existing synchronous skillActivation phase; no new await or checkpoint carrier. */
+function activateLandedSkill(scope, deps, frame) {
+    // (2) `read_skill` is the auto-attached activation tool.
+    //     When the LLM calls it with a valid Skill id, append
+    //     to `activatedInjectionIds` so the InjectionEngine's
+    //     NEXT pass activates that Skill (lifetime: turn — stays
+    //     active until the turn ends).
+    if (frame.tc.name === 'read_skill' &&
+        !frame.outcome.error &&
+        !frame.execution.denied &&
+        !frame.skillRoute.skillRejected) {
+        const requestedId = frame.callArguments.callArgs.id;
+        if (typeof requestedId === 'string' && requestedId.length > 0) {
+            const current = scope.activatedInjectionIds;
+            if (!current.includes(requestedId)) {
+                scope.activatedInjectionIds = [...current, requestedId];
+            }
+            // (3) The same call is also a MOVE through the graph. `read_skill`
+            //     answers "activated for the next iteration", and for a skill
+            //     whose activation is cursor-gated (a route target, an exclusive
+            //     entry) or rule-gated (an intent entry whose rule didn't match)
+            //     appending the id alone never made that true — the sentence was
+            //     a promise the engine didn't keep. Record the pick the gate just
+            //     accepted; the Injection Engine hands it to `graph.nextSkill`,
+            //     which moves the cursor unless a declared edge fired first.
+            //     Last accepted pick of a parallel batch wins the cursor; all of
+            //     them still land in `activatedInjectionIds`.
+            //
+            //     Only a HOP moves the cursor. An OPEN skill (one the graph never
+            //     wires) is not a node, so parking the cursor on it would strand
+            //     the graph: every route trigger reads `nextSkill(ctx) === id`, and
+            //     from a non-node nothing can fire. It activates through its own
+            //     `llm-activated` trigger and the graph stays exactly where it was.
+            if (deps.allowedSkillIds && frame.skillRoute.skillHop)
+                scope.pendingSkillPick = requestedId;
+            // The kernel's per-pass feed: every pick the gate accepted, hop
+            // or not. A re-engagement is here and NOT in `pendingSkillPick`,
+            // which is the whole point — it changes engagement, not position.
+            if (deps.engagementPlan) {
+                const picks = scope.acceptedSkillPicks ?? [];
+                if (!picks.includes(requestedId)) {
+                    scope.acceptedSkillPicks = [...picks, requestedId];
+                }
+            }
+        }
+    }
+}
+exports.activateLandedSkill = activateLandedSkill;
+//# sourceMappingURL=skillActivation.js.map

package/dist/core/agent/stages/toolCalls/routing/skillActivation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skillActivation.js","sourceRoot":"","sources":["../../../../../../src/core/agent/stages/toolCalls/routing/skillActivation.ts"],"names":[],"mappings":";;;AAmBA,0FAA0F;AAC1F,SAAgB,mBAAmB,CACjC,KAA6B,EAC7B,IAAsE,EACtE,KAA+B;IAE/B,yDAAyD;IACzD,0DAA0D;IAC1D,0DAA0D;IAC1D,6DAA6D;IAC7D,mCAAmC;IACnC,IACE,KAAK,CAAC,EAAE,CAAC,IAAI,KAAK,YAAY;QAC9B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK;QACpB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;QACvB,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAC/B,CAAC;QACD,MAAM,WAAW,GAAI,KAAK,CAAC,aAAa,CAAC,QAA6B,CAAC,EAAE,CAAC;QAC1E,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,qBAA0C,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnC,KAAK,CAAC,qBAAqB,GAAG,CAAC,GAAG,OAAO,EAAE,WAAW,CAAC,CAAC;YAC1D,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,qEAAqE;YACrE,qEAAqE;YACrE,sEAAsE;YACtE,oEAAoE;YACpE,iEAAiE;YACjE,qEAAqE;YACrE,kDAAkD;YAClD,EAAE;YACF,sEAAsE;YACtE,qEAAqE;YACrE,wEAAwE;YACxE,qEAAqE;YACrE,wEAAwE;YACxE,IAAI,IAAI,CAAC,eAAe,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ;gBAAE,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC;YAC5F,gEAAgE;YAChE,iEAAiE;YACjE,kEAAkE;YAClE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAI,KAAK,CAAC,kBAAoD,IAAI,EAAE,CAAC;gBAChF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;oBACjC,KAAK,CAAC,kBAAkB,GAAG,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAlDD,kDAkDC"}