agentfootprint 13.0.0 → 14.0.0

package/dist/esm/core/agent/stages/toolCalls/resume/plain.js

@@ -0,0 +1,140 @@
+import { PauseAnswerRequiredError } from '../../../../pause.js';
+import { argsForPausedCall } from '../batch/paused.js';
+import { pausedNegativeResultId } from '../../../negativeClaims/capture.js';
+import { safeStringify } from '../../../validators.js';
+import { appendBatchResult } from '../batch/settle.js';
+import { judgeLanded } from '../evidence/judgeLanded.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+/** Compose only the existing plain resume door and its original landing order. */
+export function buildResumePlain(deps, links) {
+    const resumePlain = async (scope, frame) => {
+        const { input, toolName, toolCallId, startMs } = frame;
+        // ── The `pauseHere` / `askHuman` path ────────────────────────────
+        // Reached when none of the three decision pauses above claimed this
+        // resume: a tool called `pauseHere()` / `askHuman()` from inside its own
+        // `execute`, and the value the consumer supplies IS that tool's result —
+        // this handler's contract since it was written.
+        //
+        // Which is why the after-tool moment runs here too (8.13.0). The tool RAN:
+        // `pauseHere` throws from inside `execute`, so it started and may have done
+        // half its work — the case `ToolResultContext.error` was written for. Its
+        // before-tool chain already walked in the loop, so skipping the after half
+        // left the ledger with an opening row and no closing one, and left every
+        // `onToolResult` rule — redaction first among them — unapplied to the one
+        // value a PERSON typed.
+        // A pause of this kind exists to collect a value, and the value BECOMES
+        // the tool's result. Resuming with nothing has two live readings — "the
+        // person gave no answer" and "just carry on" — and the library does not
+        // get to pick. Before 8.18.0 it picked the worst one silently: the
+        // undefined answer became `content: undefined` on a `role: 'tool'`
+        // message and the next turn died in the messages slot with an anonymous
+        // TypeError. Refused here, at the top of the branch, so no middleware has
+        // been told about a result that does not exist and the checkpoint is
+        // still good — answer it and resume again.
+        if (input === undefined) {
+            throw new PauseAnswerRequiredError({ toolName, toolCallId });
+        }
+        deps.resources?.answer.record();
+        const iteration = scope.iteration;
+        const env = scope.$getEnv();
+        const tool = links.lookupTool(toolName);
+        // Peeled under the arm unless the tool owns the name — the same rule as
+        // `peelCall` on the dispatch side, asked of the same tool.
+        const args = argsForPausedCall(scope, toolCallId, links.peelsReserved(tool));
+        // No `error` flag: a human's answer is not a tool failure.
+        const rawPauseResult = await links.afterMoment(scope, {
+            ...(tool && { tool }),
+            toolName,
+            toolCallId,
+            iteration,
+            args,
+            result: input,
+            negativeResultId: deps.negativeClaimsArmed === true ? pausedNegativeResultId(scope) : undefined,
+            history: [...scope.history],
+            ...(scope.runIdentity && {
+                identity: scope.runIdentity,
+            }),
+            ...(env.signal && { signal: env.signal }),
+        });
+        // A person's answer is measured too. The cap is about what one turn can
+        // afford to carry, and a pasted transcript costs a window exactly as much
+        // as a tool's rows do — which is also why PLACEMENT judges it: the
+        // handler's contract makes the answer the tool's result, so a pasted
+        // 500KB transcript is checked in as `tool-result/<tool>` and the model
+        // routes the ticket.
+        const pausePlaced = await links.placeResults(scope, { toolName, toolCallId, iteration }, { result: input, modelResult: rawPauseResult }, true);
+        const pauseCapped = links.capResults(toolName, pausePlaced);
+        const modelResult = pauseCapped.modelResult;
+        let resultStr = typeof modelResult === 'string' ? modelResult : safeStringify(modelResult);
+        // Step boundary (9.18.0) — THE HITL step ("ask a human, then export"):
+        // the tool paused mid-step, the person's answer IS its result, and the
+        // completed step advances here at the same boundary it would have
+        // inline. The pointer itself crossed the checkpoint for free (it is
+        // committed shared state); this is the half that has to be wired.
+        if (deps.stepPlanFor) {
+            resultStr += links.applyStepReturn(scope, { toolName, toolCallId, iteration });
+        }
+        // The batch settlement (9.113.0) — the door a `requestInput` answer
+        // comes back through, and the one most likely to meet a batch: a tool
+        // that asks a person mid-lookup, batched with the lookups after it.
+        const pauseSettlement = links.settleBatch([
+            ...scope.history,
+            {
+                role: 'tool',
+                content: resultStr,
+                toolCallId,
+                toolName,
+            },
+        ], { toolName, toolCallId });
+        const newHistory = pauseSettlement.history;
+        scope.history = newHistory;
+        // Drives `on-tool-return` triggers, same as every other dispatch path.
+        scope.lastToolResult = { toolName, result: resultStr };
+        appendBatchResult(scope, { toolName, result: resultStr, toolCallId });
+        // The person's answer IS the tool's result (the handler's contract
+        // above), so it ran by definition.
+        await judgeLanded(scope, deps.findingsJudge, true, { toolName, result: resultStr, toolCallId }, iteration, links.turnStampOf(scope));
+        // The tool asked a person from inside `execute`, and the answer IS its
+        // result (the handler's contract): the call returned, and no runner
+        // reported an execution — `returned`, never `completed`.
+        links.fileResumedScript(scope, {
+            toolName,
+            toolCallId,
+            iteration,
+            carried: args,
+            entered: true,
+            seen: {},
+        });
+        links.emitToolEnd(scope, toolName, {
+            toolCallId,
+            // The REAL value the pause returned, not what a rule let the model read
+            // — the same split the other four paths keep. Capped when a ceiling is
+            // configured, because the marker IS the result on every channel.
+            result: pauseCapped.result,
+            durationMs: Date.now() - startMs,
+            ...(pauseCapped.modelResult !== pauseCapped.result && {
+                modelResult: pauseCapped.modelResult,
+            }),
+        }, true, undefined, deps.negativeClaimsArmed === true ? pausedNegativeResultId(scope) : undefined);
+        links.bracketSettled(scope, pauseSettlement);
+        typedEmit(scope, 'agentfootprint.agent.iteration_end', {
+            turnIndex: 0,
+            iterIndex: iteration,
+            // The brackets this leg closed — see the ask path's twin.
+            toolCallCount: 1 + pauseSettlement.settled.length,
+            // Plain local array — see the matching note on the execute path.
+            history: newHistory,
+        });
+        if (deps.inputsLayer === true)
+            scope.argumentAsk = undefined;
+        scope.iteration = iteration + 1;
+        // Clear pause checkpoint fields.
+        await links.endCall(scope);
+        scope.pausedToolCallId = '';
+        scope.pausedToolName = '';
+        scope.pausedToolStartMs = 0;
+        scope.pausedToolArgs = undefined;
+    };
+    return { resumePlain };
+}
+//# sourceMappingURL=plain.js.map

package/dist/esm/core/agent/stages/toolCalls/resume/plain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plain.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/resume/plain.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAE5E,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AA0BvE,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAC9B,IAGC,EACD,KAAuB;IAEvB,MAAM,WAAW,GAAG,KAAK,EACvB,KAA6B,EAC7B,KAAwB,EACT,EAAE;QACjB,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QAEvD,oEAAoE;QACpE,oEAAoE;QACpE,yEAAyE;QACzE,yEAAyE;QACzE,gDAAgD;QAChD,EAAE;QACF,2EAA2E;QAC3E,4EAA4E;QAC5E,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,0EAA0E;QAC1E,wBAAwB;QACxB,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,mEAAmE;QACnE,wEAAwE;QACxE,0EAA0E;QAC1E,qEAAqE;QACrE,2CAA2C;QAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,wBAAwB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxC,wEAAwE;QACxE,2DAA2D;QAC3D,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,2DAA2D;QAC3D,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE;YACpD,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;YACrB,QAAQ;YACR,UAAU;YACV,SAAS;YACT,IAAI;YACJ,MAAM,EAAE,KAAK;YACb,gBAAgB,EACd,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC/E,OAAO,EAAE,CAAC,GAAI,KAAK,CAAC,OAAiC,CAAC;YACtD,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI;gBACvB,QAAQ,EAAE,KAAK,CAAC,WAIf;aACF,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,wEAAwE;QACxE,0EAA0E;QAC1E,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,qBAAqB;QACrB,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,YAAY,CAC1C,KAAK,EACL,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,EACnC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,EAC9C,IAAI,CACL,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAC;QAC5C,IAAI,SAAS,GAAG,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;QAC3F,uEAAuE;QACvE,uEAAuE;QACvE,kEAAkE;QAClE,oEAAoE;QACpE,kEAAkE;QAClE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,SAAS,IAAI,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,oEAAoE;QACpE,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,eAAe,GAAG,KAAK,CAAC,WAAW,CACvC;YACE,GAAI,KAAK,CAAC,OAAiC;YAC3C;gBACE,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,SAAS;gBAClB,UAAU;gBACV,QAAQ;aACT;SACF,EACD,EAAE,QAAQ,EAAE,UAAU,EAAE,CACzB,CAAC;QACF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC;QAC3C,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;QAC3B,uEAAuE;QACvE,KAAK,CAAC,cAAc,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACvD,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACtE,mEAAmE;QACnE,mCAAmC;QACnC,MAAM,WAAW,CACf,KAAK,EACL,IAAI,CAAC,aAAa,EAClB,IAAI,EACJ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAC3C,SAAS,EACT,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CACzB,CAAC;QAEF,uEAAuE;QACvE,oEAAoE;QACpE,yDAAyD;QACzD,KAAK,CAAC,iBAAiB,CAAC,KAAK,EAAE;YAC7B,QAAQ;YACR,UAAU;YACV,SAAS;YACT,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,KAAK,CAAC,WAAW,CACf,KAAK,EACL,QAAQ,EACR;YACE,UAAU;YACV,wEAAwE;YACxE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;YAChC,GAAG,CAAC,WAAW,CAAC,WAAW,KAAK,WAAW,CAAC,MAAM,IAAI;gBACpD,WAAW,EAAE,WAAW,CAAC,WAAW;aACrC,CAAC;SACH,EACD,IAAI,EACJ,SAAS,EACT,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAC9E,CAAC;QACF,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAC7C,SAAS,CAAC,KAAK,EAAE,oCAAoC,EAAE;YACrD,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,SAAS;YACpB,0DAA0D;YAC1D,aAAa,EAAE,CAAC,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM;YACjD,iEAAiE;YACjE,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI;YAAE,KAAK,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7D,KAAK,CAAC,SAAS,GAAG,SAAS,GAAG,CAAC,CAAC;QAChC,iCAAiC;QACjC,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC5B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;QAC1B,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC5B,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;IACnC,CAAC,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,CAAC;AACzB,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/routing/effectsOperations.d.ts

@@ -0,0 +1,4 @@
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { ToolEffectsOperations } from '../contracts/operations/effects.js';
+/** Compose the existing effects callbacks once for this handler. */
+export declare function buildToolEffectsOperations(deps: Pick<ToolCallsHandlerDeps, 'allowedSkillIds' | 'leaseTargets'>): ToolEffectsOperations;

package/dist/esm/core/agent/stages/toolCalls/routing/effectsOperations.js

@@ -0,0 +1,260 @@
+import { isDevMode } from 'footprintjs';
+import { tenantOf, pruneLeases, } from '../../../../../injection-engine/leases.js';
+import { typedEmit } from '../../../../../recorders/core/typedEmit.js';
+import { classifySkillTarget } from '../../../../../injection-engine/skillGraph.js';
+import { spoken } from '../../../../../lib/spokenIds.js';
+/** Compose the existing effects callbacks once for this handler. */
+export function buildToolEffectsOperations(deps) {
+    const warnEffect = (toolName, sentence) => {
+        if (isDevMode()) {
+            // eslint-disable-next-line no-console
+            console.warn(`agentfootprint tool-effects: tool '${toolName}' — ${sentence}`);
+        }
+    };
+    /**
+     * Judge one finalized result's effects, in declaration order. Returns the
+     * model-visible NOTE (teaching refusals only — an accepted effect speaks
+     * through what it does: the cursor move, the delivered instruction).
+     * Every judgment is a `tools.effect` event; nothing is half-applied.
+     */
+    const applyToolEffects = (scope, call, envelope, state) => {
+        let note = '';
+        const refuse = (kind, refusalReason, fields = {}) => {
+            typedEmit(scope, 'agentfootprint.tools.effect', {
+                kind,
+                outcome: 'refused',
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+                ...(fields.targetSkillId !== undefined && { targetSkillId: fields.targetSkillId }),
+                ...(fields.reason !== undefined && { reason: fields.reason }),
+                ...(fields.instructionId !== undefined && { instructionId: fields.instructionId }),
+                ...(fields.deliveryLease !== undefined && { deliveryLease: fields.deliveryLease }),
+                refusalReason,
+            });
+            note += ` [tool effect refused: ${refusalReason}]`;
+            warnEffect(call.toolName, refusalReason);
+        };
+        for (const bad of envelope.malformed)
+            refuse(bad.kind, bad.refusalReason);
+        for (const effect of envelope.effects) {
+            if (effect.kind === 'propose-transition') {
+                const target = effect.targetSkillId;
+                if (!deps.allowedSkillIds) {
+                    refuse('propose-transition', `propose-transition → '${target}' needs a mounted skill graph: without one there ` +
+                        `is no routing law to check the proposal against and no cursor to move. Mount ` +
+                        `.skillGraph(), or drop the effect.`, { targetSkillId: target, reason: effect.reason });
+                    continue;
+                }
+                const currentSkillId = scope.currentSkillId;
+                const hops = deps.allowedSkillIds(currentSkillId);
+                const targetClass = classifySkillTarget({
+                    ...(currentSkillId !== undefined && { cursor: currentSkillId }),
+                    target,
+                    hops,
+                });
+                // ── A PROPOSAL TO THE CURSOR'S OWN SKILL IS A STAY (9.86.0) ──────
+                // `makeReachableSkills` filters the cursor out of its own successor
+                // set — right for a MOVE, and this judge read it as "not reachable"
+                // and refused. A tool saying "stay where you are" asks for the state
+                // the run is already in: there is no cursor to move, no activation to
+                // append, and nothing to refuse. It is accepted as a no-op — no
+                // `pendingToolTransition`, no cursor move, and no `[tool effect
+                // refused: …]` suffix on a result that proposed nothing wrong.
+                //
+                // The event carries the existing `'accepted'` outcome plus an
+                // ADDITIVE `stay: true`, deliberately not a new enum member: an
+                // exhaustive switch over `outcome` in a consumer must keep compiling.
+                //
+                // A STAY COMPETES FOR THE SLOT LIKE ANY OTHER ACCEPTED PROPOSAL
+                // (9.86.1). The batch law is "first ACCEPTED proposal wins, later
+                // proposals to OTHER targets are superseded", and a stay is accepted
+                // — so a stay judged first holds the slot (with nothing written to
+                // `pendingToolTransition`, because a stay moves nothing) and a later
+                // sibling proposing a hop is `'superseded'` and lands in the
+                // `route_conflict` losers, exactly as two conflicting hops do. Before
+                // this the stay `continue`d past the bookkeeping, so the tool that
+                // judged its data first lost to whichever sibling came second, with
+                // two `'accepted'` events in one batch and no conflict on the record.
+                // The same law in the other order: a stay proposed AFTER an accepted
+                // hop is superseded by it, not accepted beside it.
+                if (targetClass === 'self') {
+                    if (state.winner !== undefined && state.winner.targetSkillId !== target) {
+                        state.losers.push({
+                            toolCallId: call.toolCallId,
+                            toolName: call.toolName,
+                            target,
+                        });
+                        typedEmit(scope, 'agentfootprint.tools.effect', {
+                            kind: 'propose-transition',
+                            outcome: 'superseded',
+                            toolName: call.toolName,
+                            toolCallId: call.toolCallId,
+                            iteration: call.iteration,
+                            targetSkillId: target,
+                            reason: effect.reason,
+                            supersededBy: 'earlier-proposal',
+                        });
+                        continue;
+                    }
+                    if (state.winner === undefined) {
+                        state.winner = {
+                            targetSkillId: target,
+                            toolName: call.toolName,
+                            toolCallId: call.toolCallId,
+                            reason: effect.reason,
+                            iteration: call.iteration,
+                        };
+                    }
+                    typedEmit(scope, 'agentfootprint.tools.effect', {
+                        kind: 'propose-transition',
+                        outcome: 'accepted',
+                        stay: true,
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        iteration: call.iteration,
+                        targetSkillId: target,
+                        reason: effect.reason,
+                    });
+                    continue;
+                }
+                if (targetClass === 'unreachable') {
+                    // ── THE REFUSAL SPEAKS WITH THE FILTERED SETS (9.86.1) ──────────
+                    // This sentence is appended to the tool result the model reads and
+                    // rides the `tools.effect` payload, and it named the raw hop set and
+                    // the raw cursor — the leak the `read_skill` refusals closed one
+                    // function up. Same filter, same law: the hidden set the tools slot
+                    // resolved for this iteration, and OMIT, NEVER DENY — a hop set the
+                    // filter emptied composes no reachable clause rather than an empty
+                    // one. Admission is still judged on the raw `hops`.
+                    const hiddenIds = new Set(scope.hiddenSkillIds ?? []);
+                    const mayName = (id) => !hiddenIds.has(id);
+                    const reachable = spoken(hops, mayName);
+                    const from = currentSkillId === undefined
+                        ? 'the turn start'
+                        : mayName(currentSkillId)
+                            ? `'${currentSkillId}'`
+                            : 'the skill the cursor stood in';
+                    refuse('propose-transition', `propose-transition → '${target}' was refused: '${target}' is not reachable from ` +
+                        `${from} per the graph's own law${reachable.named.length > 0 ? ` (reachable: ${reachable.named.join(', ')})` : ''}. The graph decides — a proposal is evidence, never authority.`, { targetSkillId: target, reason: effect.reason });
+                    continue;
+                }
+                if (state.winner !== undefined && state.winner.targetSkillId !== target) {
+                    // A later proposal to a DIFFERENT target — suppressed under the
+                    // route_conflict law (first in call order wins), on the record.
+                    state.losers.push({
+                        toolCallId: call.toolCallId,
+                        toolName: call.toolName,
+                        target,
+                    });
+                    typedEmit(scope, 'agentfootprint.tools.effect', {
+                        kind: 'propose-transition',
+                        outcome: 'superseded',
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        iteration: call.iteration,
+                        targetSkillId: target,
+                        reason: effect.reason,
+                        supersededBy: 'earlier-proposal',
+                    });
+                    continue;
+                }
+                if (state.winner === undefined) {
+                    state.winner = {
+                        targetSkillId: target,
+                        toolName: call.toolName,
+                        toolCallId: call.toolCallId,
+                        reason: effect.reason,
+                        iteration: call.iteration,
+                    };
+                    // Committed AT ACCEPTANCE (not batch end) so a pause later in the
+                    // batch checkpoints the accepted move instead of dropping it.
+                    scope.pendingToolTransition = state.winner;
+                    // The activation promise a gate-accepted read_skill pick makes,
+                    // made here too: a model-edge-only target keeps its llm-activated
+                    // trigger, so the ledger entry is what makes the body actually
+                    // load when the cursor lands.
+                    const activated = scope.activatedInjectionIds;
+                    if (!activated.includes(target)) {
+                        scope.activatedInjectionIds = [...activated, target];
+                    }
+                }
+                // First acceptance AND a same-target repeat both land here: every
+                // proposal that asked for the move that happens is 'accepted'.
+                typedEmit(scope, 'agentfootprint.tools.effect', {
+                    kind: 'propose-transition',
+                    outcome: 'accepted',
+                    toolName: call.toolName,
+                    toolCallId: call.toolCallId,
+                    iteration: call.iteration,
+                    targetSkillId: target,
+                    reason: effect.reason,
+                });
+                continue;
+            }
+            // require-instruction
+            const known = deps.leaseTargets?.get(effect.instructionId);
+            if (known === undefined) {
+                refuse('require-instruction', `require-instruction '${effect.instructionId}' was refused: no registered ` +
+                    `injection carries that id — the push door serves the declared catalog only ` +
+                    `(read_skill stays the pull door).`, { instructionId: effect.instructionId, deliveryLease: effect.deliveryLease });
+                continue;
+            }
+            if (known.surfaceMode === 'tool-only') {
+                refuse('require-instruction', `require-instruction '${effect.instructionId}' was refused: that skill declares ` +
+                    `surfaceMode 'tool-only', whose body travels only as a read_skill result — the ` +
+                    `system slot suppresses it, so the lease would be granted and never delivered. ` +
+                    `Pull it with read_skill, or change the skill's surfaceMode.`, { instructionId: effect.instructionId, deliveryLease: effect.deliveryLease });
+                continue;
+            }
+            const tenant = tenantOf(scope.currentSkillId, scope.activatedInjectionIds);
+            const lease = {
+                instructionId: effect.instructionId,
+                deliveryLease: effect.deliveryLease,
+                ...(tenant !== undefined && { skillId: tenant }),
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+            };
+            // Prune-as-we-write: spent grants leave with the same write that adds
+            // the new one, so a long turn never accumulates dead leases.
+            scope.instructionLeases = [
+                ...pruneLeases(scope.instructionLeases, call.iteration, tenant),
+                lease,
+            ];
+            typedEmit(scope, 'agentfootprint.tools.effect', {
+                kind: 'require-instruction',
+                outcome: 'accepted',
+                toolName: call.toolName,
+                toolCallId: call.toolCallId,
+                iteration: call.iteration,
+                instructionId: effect.instructionId,
+                deliveryLease: effect.deliveryLease,
+            });
+        }
+        return note;
+    };
+    /** The batch-end aggregate for conflicting proposals — the
+     *  `route_conflict` reuse, additive `source` says what conflicted. The
+     *  per-effect `tools.effect` events above already carried every fact;
+     *  this is the one-event-per-batch view the edge law already ships. */
+    const emitTransitionConflict = (scope, iteration, state) => {
+        if (state.winner === undefined || state.losers.length === 0)
+            return;
+        typedEmit(scope, 'agentfootprint.skill.route_conflict', {
+            iteration,
+            ...(scope.currentSkillId !== undefined && {
+                fromSkillId: scope.currentSkillId,
+            }),
+            winner: {
+                ...(state.winner.toolCallId !== undefined && { toolCallId: state.winner.toolCallId }),
+                toolName: state.winner.toolName,
+                target: state.winner.targetSkillId,
+            },
+            losers: state.losers.map((l) => ({ ...l })),
+            source: 'tool-proposal',
+        });
+    };
+    return { warnEffect, applyToolEffects, emitTransitionConflict };
+}
+//# sourceMappingURL=effectsOperations.js.map

package/dist/esm/core/agent/stages/toolCalls/routing/effectsOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"effectsOperations.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/routing/effectsOperations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAmB,MAAM,aAAa,CAAC;AAOzD,OAAO,EAEL,QAAQ,EACR,WAAW,GACZ,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,4CAA4C,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAC;AAGzD,oEAAoE;AACpE,MAAM,UAAU,0BAA0B,CACxC,IAAoE;IAEpE,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAE,QAAgB,EAAQ,EAAE;QAC9D,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,sCAAsC,QAAQ,OAAO,QAAQ,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,gBAAgB,GAAG,CACvB,KAA6B,EAC7B,IAA4F,EAC5F,QAAgC,EAChC,KAA2B,EACnB,EAAE;QACV,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,CACb,IAA4B,EAC5B,aAAqB,EACrB,SAKI,EAAE,EACA,EAAE;YACR,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;gBAC9C,IAAI;gBACJ,OAAO,EAAE,SAAS;gBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC7D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC;gBAClF,aAAa;aACd,CAAC,CAAC;YACH,IAAI,IAAI,0BAA0B,aAAa,GAAG,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3C,CAAC,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QAE1E,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACzC,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,MAAM,CACJ,oBAAoB,EACpB,yBAAyB,MAAM,mDAAmD;wBAChF,+EAA+E;wBAC/E,oCAAoC,EACtC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACjD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,cAAc,GAAG,KAAK,CAAC,cAAoC,CAAC;gBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,mBAAmB,CAAC;oBACtC,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;oBAC/D,MAAM;oBACN,IAAI;iBACL,CAAC,CAAC;gBACH,oEAAoE;gBACpE,oEAAoE;gBACpE,oEAAoE;gBACpE,qEAAqE;gBACrE,sEAAsE;gBACtE,gEAAgE;gBAChE,gEAAgE;gBAChE,+DAA+D;gBAC/D,EAAE;gBACF,8DAA8D;gBAC9D,gEAAgE;gBAChE,sEAAsE;gBACtE,EAAE;gBACF,gEAAgE;gBAChE,kEAAkE;gBAClE,qEAAqE;gBACrE,mEAAmE;gBACnE,qEAAqE;gBACrE,6DAA6D;gBAC7D,sEAAsE;gBACtE,mEAAmE;gBACnE,oEAAoE;gBACpE,sEAAsE;gBACtE,qEAAqE;gBACrE,mDAAmD;gBACnD,IAAI,WAAW,KAAK,MAAM,EAAE,CAAC;oBAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;wBACxE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;4BAChB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,MAAM;yBACP,CAAC,CAAC;wBACH,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;4BAC9C,IAAI,EAAE,oBAAoB;4BAC1B,OAAO,EAAE,YAAY;4BACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,aAAa,EAAE,MAAM;4BACrB,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,YAAY,EAAE,kBAAkB;yBACjC,CAAC,CAAC;wBACH,SAAS;oBACX,CAAC;oBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC/B,KAAK,CAAC,MAAM,GAAG;4BACb,aAAa,EAAE,MAAM;4BACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,SAAS,EAAE,IAAI,CAAC,SAAS;yBAC1B,CAAC;oBACJ,CAAC;oBACD,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;wBAC9C,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,UAAU;wBACnB,IAAI,EAAE,IAAI;wBACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,aAAa,EAAE,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;qBACtB,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,WAAW,KAAK,aAAa,EAAE,CAAC;oBAClC,mEAAmE;oBACnE,mEAAmE;oBACnE,qEAAqE;oBACrE,iEAAiE;oBACjE,oEAAoE;oBACpE,oEAAoE;oBACpE,mEAAmE;oBACnE,oDAAoD;oBACpD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAE,KAAK,CAAC,cAAgD,IAAI,EAAE,CAAC,CAAC;oBACzF,MAAM,OAAO,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACxC,MAAM,IAAI,GACR,cAAc,KAAK,SAAS;wBAC1B,CAAC,CAAC,gBAAgB;wBAClB,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;4BACzB,CAAC,CAAC,IAAI,cAAc,GAAG;4BACvB,CAAC,CAAC,+BAA+B,CAAC;oBACtC,MAAM,CACJ,oBAAoB,EACpB,yBAAyB,MAAM,mBAAmB,MAAM,0BAA0B;wBAChF,GAAG,IAAI,2BACL,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAC/E,gEAAgE,EAClE,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CACjD,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;oBACxE,gEAAgE;oBAChE,gEAAgE;oBAChE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;wBAChB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,MAAM;qBACP,CAAC,CAAC;oBACH,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;wBAC9C,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,YAAY;wBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,aAAa,EAAE,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,YAAY,EAAE,kBAAkB;qBACjC,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC/B,KAAK,CAAC,MAAM,GAAG;wBACb,aAAa,EAAE,MAAM;wBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;qBAC1B,CAAC;oBACF,kEAAkE;oBAClE,8DAA8D;oBAC9D,KAAK,CAAC,qBAAqB,GAAG,KAAK,CAAC,MAAM,CAAC;oBAC3C,gEAAgE;oBAChE,kEAAkE;oBAClE,+DAA+D;oBAC/D,8BAA8B;oBAC9B,MAAM,SAAS,GAAG,KAAK,CAAC,qBAA0C,CAAC;oBACnE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBAChC,KAAK,CAAC,qBAAqB,GAAG,CAAC,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBACD,kEAAkE;gBAClE,+DAA+D;gBAC/D,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;oBAC9C,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,aAAa,EAAE,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;iBACtB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,sBAAsB;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YAC3D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CACJ,qBAAqB,EACrB,wBAAwB,MAAM,CAAC,aAAa,+BAA+B;oBACzE,6EAA6E;oBAC7E,mCAAmC,EACrC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAC7E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;gBACtC,MAAM,CACJ,qBAAqB,EACrB,wBAAwB,MAAM,CAAC,aAAa,qCAAqC;oBAC/E,gFAAgF;oBAChF,gFAAgF;oBAChF,6DAA6D,EAC/D,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAC7E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CACrB,KAAK,CAAC,cAAoC,EAC1C,KAAK,CAAC,qBAAsD,CAC7D,CAAC;YACF,MAAM,KAAK,GAAqB;gBAC9B,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;gBAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC;YACF,sEAAsE;YACtE,6DAA6D;YAC7D,KAAK,CAAC,iBAAiB,GAAG;gBACxB,GAAG,WAAW,CACZ,KAAK,CAAC,iBAA4D,EAClE,IAAI,CAAC,SAAS,EACd,MAAM,CACP;gBACD,KAAK;aACN,CAAC;YACF,SAAS,CAAC,KAAK,EAAE,6BAA6B,EAAE;gBAC9C,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF;;;2EAGuE;IACvE,MAAM,sBAAsB,GAAG,CAC7B,KAA6B,EAC7B,SAAiB,EACjB,KAA2B,EACrB,EAAE;QACR,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpE,SAAS,CAAC,KAAK,EAAE,qCAAqC,EAAE;YACtD,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI;gBACxC,WAAW,EAAE,KAAK,CAAC,cAAwB;aAC5C,CAAC;YACF,MAAM,EAAE;gBACN,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBACrF,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;gBAC/B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa;aACnC;YACD,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YAC3C,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,CAAC;AAClE,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/routing/policyHalt.d.ts

@@ -0,0 +1,17 @@
+import type { buildCallStart } from '../execution/callStart.js';
+import type { CallExecution, CallArguments } from '../contracts/callCells.js';
+import type { LLMMessage } from '../../../../../provider-contract/types.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { DispatchCall } from '../contracts/batchCall.js';
+type CallStartFacts = ReturnType<ReturnType<typeof buildCallStart>['beginDispatchCall']>;
+interface PolicyHaltFrame {
+    readonly haltContext: NonNullable<CallExecution['haltContext']>;
+    readonly emitSecurity: CallStartFacts['emitSecurity'];
+    readonly tc: DispatchCall;
+    readonly newHistory: LLMMessage[];
+    readonly iteration: number;
+    readonly callArguments: CallArguments;
+}
+export declare function haltLandedCall(scope: TypedScope<AgentState>, frame: PolicyHaltFrame): void;
+export {};

package/dist/esm/core/agent/stages/toolCalls/routing/policyHalt.js

@@ -0,0 +1,36 @@
+import { extractSequence } from '../../../../../security/extractSequence.js';
+// v2.12 — strict halt ordering (continued).
+//
+// The synthetic tool_result for the halt-triggering call has
+// ALREADY been pushed to newHistory above. Now: emit the halt
+// event, commit history to scope, set the scope flags Agent.run
+// reads at the API boundary, and break the loop. This SKIPS any
+// remaining parallel-call siblings (intentional — once a halt
+// fires, no further tool dispatches should occur this turn).
+export function haltLandedCall(scope, frame) {
+    const { haltContext, emitSecurity, tc, newHistory, iteration, callArguments } = frame;
+    emitSecurity('agentfootprint.permission.halt', {
+        target: tc.name,
+        reason: haltContext.reason,
+        tellLLM: haltContext.tellLLM,
+        sequenceLength: extractSequence(newHistory, iteration).length,
+        ...(haltContext.checkerId !== undefined && { checkerId: haltContext.checkerId }),
+    });
+    scope.history = newHistory;
+    scope.policyHaltReason = haltContext.reason;
+    scope.policyHaltTellLLM = haltContext.tellLLM;
+    scope.policyHaltTarget = tc.name;
+    // The carrier law every pause carrier follows (`pausedToolArgs`,
+    // `pausedCheckInArgs`, `pausedCredentialArgs`): what the call would
+    // have RUN with — `callArgs`, peeled under `.findings()` — never the
+    // emission. `PolicyHaltError.proposed.args` hands this to the app as
+    // the arguments the policy refused; the model's declaration is on
+    // the ledger and in history, not in that hand-off.
+    scope.policyHaltArgs = callArguments.callArgs;
+    scope.policyHaltIteration = iteration;
+    if (haltContext.checkerId !== undefined) {
+        scope.policyHaltCheckerId = haltContext.checkerId;
+    }
+    scope.$break(`policy-halt: ${haltContext.reason}`);
+}
+//# sourceMappingURL=policyHalt.js.map

package/dist/esm/core/agent/stages/toolCalls/routing/policyHalt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policyHalt.js","sourceRoot":"","sources":["../../../../../../../src/core/agent/stages/toolCalls/routing/policyHalt.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAc7E,4CAA4C;AAC5C,EAAE;AACF,6DAA6D;AAC7D,8DAA8D;AAC9D,gEAAgE;AAChE,gEAAgE;AAChE,8DAA8D;AAC9D,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,KAA6B,EAAE,KAAsB;IAClF,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IACtF,YAAY,CAAC,gCAAgC,EAAE;QAC7C,MAAM,EAAE,EAAE,CAAC,IAAI;QACf,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,cAAc,EAAE,eAAe,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,MAAM;QAC7D,GAAG,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC;KACjF,CAAC,CAAC;IACH,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC;IAC3B,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC,MAAM,CAAC;IAC5C,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC,OAAO,CAAC;IAC9C,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,IAAI,CAAC;IACjC,iEAAiE;IACjE,oEAAoE;IACpE,qEAAqE;IACrE,qEAAqE;IACrE,kEAAkE;IAClE,mDAAmD;IACnD,KAAK,CAAC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;IAC9C,KAAK,CAAC,mBAAmB,GAAG,SAAS,CAAC;IACtC,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACxC,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC,SAAS,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;AACrD,CAAC"}

package/dist/esm/core/agent/stages/toolCalls/routing/readSkillRoute.d.ts

@@ -0,0 +1,20 @@
+import type { CallResultCell, CallExecution, CallArguments, CallSkillRoute } from '../contracts/callCells.js';
+import type { TypedScope } from 'footprintjs';
+import type { AgentState } from '../../../types.js';
+import type { ToolCallsHandlerDeps } from '../contracts/handlerDeps.js';
+import type { DispatchCall } from '../contracts/batchCall.js';
+import type { ToolCatalogOperations } from '../contracts/operations/catalog.js';
+import type { ToolStepsOperations } from '../contracts/operations/steps.js';
+interface ReadSkillRouteBindings {
+    readonly tc: DispatchCall;
+    readonly iteration: number;
+    readonly parkedNow: ToolCatalogOperations['parkedNow'];
+    readonly noteSkillRefusal: ToolStepsOperations['noteSkillRefusal'];
+    readonly outcome: CallResultCell;
+    readonly execution: CallExecution;
+    readonly callArguments: CallArguments;
+    readonly skillRoute: CallSkillRoute;
+}
+/** Apply the existing post-execution read_skill route, in the original order. */
+export declare function applyReadSkillRoute(scope: TypedScope<AgentState>, deps: Pick<ToolCallsHandlerDeps, 'allowedSkillIds' | 'openSkillIds' | 'skillGraphIsTree' | 'skillStrictness'>, bindings: ReadSkillRouteBindings): void;
+export {};