agentfootprint 9.34.0 → 9.36.0

package/dist/core/agent/toolsFromActiveSkill.js

@@ -0,0 +1,79 @@
+"use strict";
+/**
+ * toolsFromActiveSkill — the AGENT-level tool posture (9.36.0).
+ *
+ * Pattern: pure fold over the final injection list, run once at `Agent.build()`.
+ * Role:    core/ layer. One declaration replaces a per-skill discipline.
+ * Emits:   nothing. It changes what the OFFER contains, and the tools slot
+ *          already records every offered tool and the skill that unlocked it.
+ *
+ * ── The defect this exists for ───────────────────────────────────────────
+ * `buildToolRegistry` pre-loads a skill's `inject.tools` into the STATIC
+ * registry unless that skill declared `autoActivate: 'currentSkill'`. Static
+ * means on the wire from iteration 1, whatever the cursor says. So "only the
+ * active skill's tools are offered" was a promise you had to keep on EVERY
+ * skill, one field at a time, and the first skill you forgot leaked its tools
+ * for the life of the agent — silently, because a tool that is offered too
+ * early looks exactly like a tool that is offered.
+ *
+ * A skill graph can already say it once for the skills it WIRES
+ * (`skillGraph({ scopeTools: true })`, which stamps the same field at graph
+ * compile). Three kinds of skill fall outside that: a skill the graph lists
+ * but never routes to, a skill registered beside the graph, and every skill on
+ * an agent with no graph at all — including a whole directory loaded through
+ * `skillsFromDir`. This is the same decision made where every skill is in
+ * hand: at the agent.
+ *
+ * ── Why it stamps the shipped field instead of adding a second gate ──────
+ * The alternative was a flag threaded into `buildToolRegistry`. That would
+ * have created TWO ways for a tool to be held out, and only one of them
+ * visible to everyone else who asks the question: `ActiveInjection.autoActivate`
+ * (which the boundary projects), a consumer's own `ToolProvider`, a lens
+ * drawing the graph, `warnRedundantSkillScopedTools`. Stamping the declared
+ * field keeps ONE mechanism and one answer.
+ *
+ * ── Which wins: the per-skill flag or the agent posture ──────────────────
+ * Neither overrides the other, because they cannot disagree. `autoActivate`
+ * has exactly one legal value (`'currentSkill'`), so a skill can ask to be
+ * scoped and cannot ask to be exempt. The stamp is `existing ?? 'currentSkill'`
+ * — a DEFAULT, never an override — the same sentence `skillGraph`'s
+ * `scopeTools` already lives by. The result is monotone: turning the posture
+ * on can only ever REMOVE tools from the static registry, never add one.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.scopeToolsToActiveSkill = void 0;
+/** The one legal `autoActivate` mode — see `AutoActivateMode` in defineSkill. */
+const CURRENT_SKILL = 'currentSkill';
+/**
+ * Stamp `autoActivate: 'currentSkill'` on every skill that carries tools and
+ * has not already declared the field.
+ *
+ * Only skills WITH tools are touched: `autoActivate` says where a skill's
+ * tools appear, and a skill with none has nothing to say — stamping it would
+ * put a field on the record that decides nothing, which is exactly the kind of
+ * metadata a reader later has to disprove.
+ *
+ * Called only from `Agent.build()` and only under the opt-in, so an agent that
+ * never asks for it never runs this code.
+ */
+function scopeToolsToActiveSkill(injections) {
+    return injections.map((injection) => {
+        if (injection.flavor !== 'skill')
+            return injection;
+        const tools = injection.inject.tools;
+        if (!tools || tools.length === 0)
+            return injection;
+        const declared = injection.metadata?.autoActivate;
+        if (declared !== undefined)
+            return injection; // a default, never an override
+        // Frozen like `defineSkill`'s own output: the injection list handed to the
+        // Agent is read by the engine, the slots and every recorder, and a copy
+        // that is mutable where the original was not is a copy that drifts.
+        return Object.freeze({
+            ...injection,
+            metadata: Object.freeze({ ...injection.metadata, autoActivate: CURRENT_SKILL }),
+        });
+    });
+}
+exports.scopeToolsToActiveSkill = scopeToolsToActiveSkill;
+//# sourceMappingURL=toolsFromActiveSkill.js.map

package/dist/core/agent/toolsFromActiveSkill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toolsFromActiveSkill.js","sourceRoot":"","sources":["../../../src/core/agent/toolsFromActiveSkill.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;;;AAIH,iFAAiF;AACjF,MAAM,aAAa,GAAG,cAAc,CAAC;AAErC;;;;;;;;;;;GAWG;AACH,SAAgB,uBAAuB,CAAC,UAAgC;IACtE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACnD,MAAM,QAAQ,GAAI,SAAS,CAAC,QAAkD,EAAE,YAAY,CAAC;QAC7F,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC,CAAC,+BAA+B;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,oEAAoE;QACpE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,SAAS;YACZ,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;SAChF,CAAc,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAfD,0DAeC"}

package/dist/esm/conventions.d.ts

@@ -95,6 +95,13 @@ export declare const STAGE_IDS: {
      *  the SchemaRetry mechanism verbatim (an ordinary iteration, not a mode).
      *  At most once per turn; never a forced continue. */
     readonly STEP_NUDGE: "step-nudge";
+    /** The Route decider's evidence branch (9.35.0), mounted ONLY on an agent
+     *  built with `.namesAndNumbersFromEvidence({ posture: 'guard' | 'rails' })`.
+     *  When a would-be-final answer states names or numbers that appear in no
+     *  tool result, they are named back to the model and the loop turns once
+     *  more — the SchemaRetry mechanism verbatim (an ordinary iteration, not a
+     *  mode). At most once per turn. */
+    readonly EVIDENCE_RECHECK: "evidence-recheck";
     readonly FORMAT_MERGE: "format-merge";
     readonly MERGE_LLM: "merge-llm";
     readonly EXTRACT_MERGE: "extract-merge";

package/dist/esm/conventions.js

@@ -94,6 +94,13 @@ export const STAGE_IDS = {
      *  the SchemaRetry mechanism verbatim (an ordinary iteration, not a mode).
      *  At most once per turn; never a forced continue. */
     STEP_NUDGE: 'step-nudge',
+    /** The Route decider's evidence branch (9.35.0), mounted ONLY on an agent
+     *  built with `.namesAndNumbersFromEvidence({ posture: 'guard' | 'rails' })`.
+     *  When a would-be-final answer states names or numbers that appear in no
+     *  tool result, they are named back to the model and the loop turns once
+     *  more — the SchemaRetry mechanism verbatim (an ordinary iteration, not a
+     *  mode). At most once per turn. */
+    EVIDENCE_RECHECK: 'evidence-recheck',
     FORMAT_MERGE: 'format-merge',
     MERGE_LLM: 'merge-llm',
     EXTRACT_MERGE: 'extract-merge',
@@ -215,6 +222,9 @@ const BOUNDARY_LOCAL_IDS = new Set([
     // Same reasoning for the unfinished-steps nudge (9.18.0): the run telling
     // the model its declared procedure is not done is a stop worth reading.
     STAGE_IDS.STEP_NUDGE,
+    // And for the evidence recheck (9.35.0): the run telling the model it made
+    // a value up is the single most interesting stop a reader can find.
+    STAGE_IDS.EVIDENCE_RECHECK,
 ]);
 /**
  * Classify a stage id into its {@link StageRole}. Accepts a path-qualified id
@@ -289,6 +299,10 @@ export function milestoneFor(id) {
         // explaining) its procedure.
         case STAGE_IDS.STEP_NUDGE:
             return { kind: 'decision', label: 'Step nudge' };
+        // The answer stated values no tool result carried and the one revision
+        // went back (9.35.0) — everything after it is the model's second try.
+        case STAGE_IDS.EVIDENCE_RECHECK:
+            return { kind: 'decision', label: 'Evidence recheck' };
         default:
             return null;
     }

package/dist/esm/conventions.js.map

@@ -1 +1 @@
-{"version":3,"file":"conventions.js","sourceRoot":"","sources":["../../src/conventions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;0EACsE;IACtE,gBAAgB,EAAE,qBAAqB;IACvC;;qDAEiD;IACjD,QAAQ,EAAE,aAAa;IACvB,+DAA+D;IAC/D,aAAa,EAAE,kBAAkB;IACjC,6BAA6B;IAC7B,QAAQ,EAAE,aAAa;IACvB,0BAA0B;IAC1B,KAAK,EAAE,UAAU;IACjB,2CAA2C;IAC3C,KAAK,EAAE,UAAU;IACjB,uDAAuD;IACvD,UAAU,EAAE,eAAe;IAC3B,kCAAkC;IAClC,KAAK,EAAE,UAAU;IACjB;;;;oCAIgC;IAChC,KAAK,EAAE,OAAO;IACd;;;;;;gCAM4B;IAC5B,KAAK,EAAE,UAAU;IACjB;;;wDAGoD;IACpD,cAAc,EAAE,mBAAmB;IACnC;;;;;iCAK6B;IAC7B,QAAQ,EAAE,aAAa;CACf,CAAC;AAIX,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ;;oFAEgF;IAChF,UAAU,EAAE,YAAY;IACxB;;;;;0EAKsE;IACtE,OAAO,EAAE,SAAS;IAClB;;;yDAGqD;IACrD,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB;;;8DAG0D;IAC1D,aAAa,EAAE,eAAe;IAC9B,KAAK,EAAE,OAAO;IACd;;0EAEsE;IACtE,YAAY,EAAE,cAAc;IAC5B;;;;0DAIsD;IACtD,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B;;;;;;;6DAOyD;IACzD,OAAO,EAAE,SAAS;IAClB;;;;;;sBAMkB;IAClB,OAAO,EAAE,SAAS;IAClB;wCACoC;IACpC,oBAAoB,EAAE,sBAAsB;IAC5C;gEAC4D;IAC5D,UAAU,EAAE,YAAY;IACxB;4EACwE;IACxE,aAAa,EAAE,eAAe;IAC9B;kEAC8D;IAC9D,YAAY,EAAE,YAAY;IAC1B;8CAC0C;IAC1C,iBAAiB,EAAE,mBAAmB;CAC9B,CAAC;AAIX,wEAAwE;AAExE,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAC3B,EAAU;IAEV,OAAO,CACL,EAAE,KAAK,WAAW,CAAC,aAAa,IAAI,EAAE,KAAK,WAAW,CAAC,QAAQ,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,CAC5F,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,iEAAiE;IACjE,mEAAmE;IACnE,kEAAkE;IAClE,6CAA6C;IAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1C,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,WAAW,CAAC,aAAa;YAC5B,OAAO,eAAe,CAAC;QACzB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,yEAAyE;IACzE,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QAC7C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAQ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAQ,MAAM,CAAC,MAAM,CAAC,SAAS,CAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC;AAuBD,4EAA4E;AAC5E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,WAAW,CAAC,gBAAgB;IAC5B,WAAW,CAAC,QAAQ,EAAE,sDAAsD;IAC5E,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,cAAc;IAC1B,WAAW,CAAC,QAAQ;IACpB,SAAS,CAAC,OAAO,EAAE,iEAAiE;IACpF,SAAS,CAAC,MAAM;IAChB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,YAAY;IACtB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,oBAAoB;IAC9B,SAAS,CAAC,UAAU;IACpB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,YAAY;IACtB,SAAS,CAAC,iBAAiB;CAC5B,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,SAAS,CAAC,IAAI,EAAE,6CAA6C;IAC7D,SAAS,CAAC,KAAK,EAAE,kCAAkC;IACnD,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,SAAS,CAAC,YAAY;IACtB,0EAA0E;IAC1E,wEAAwE;IACxE,SAAS,CAAC,UAAU;CACrB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IACpD,IAAI,YAAY,KAAK,SAAS,CAAC,QAAQ,IAAI,YAAY,KAAK,SAAS,CAAC,SAAS;QAC7E,OAAO,UAAU,CAAC;IACpB,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,YAAY,KAAK,YAAY,IAAI,YAAY,KAAK,WAAW,CAAC,UAAU;QAC1E,OAAO,aAAa,CAAC;IACvB,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5D,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5D,OAAO,UAAU,CAAC,CAAC,2CAA2C;AAChE,CAAC;AAsBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,QAAQ,YAAY,EAAE,CAAC;QACrB,0EAA0E;QAC1E,qDAAqD;QACrD,KAAK,WAAW,CAAC,gBAAgB,CAAC;QAClC,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACnD,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,oCAAoC;QACpC,KAAK,WAAW,CAAC,aAAa;YAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAClD,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC7C,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1C,KAAK,SAAS,CAAC,QAAQ,CAAC;QACxB,KAAK,SAAS,CAAC,SAAS;YACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjD,gEAAgE;QAChE,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW,CAAC,UAAU;YACzB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACnD,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9C,uEAAuE;QACvE,iEAAiE;QACjE,KAAK,SAAS,CAAC,YAAY;YACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACrD,uEAAuE;QACvE,iEAAiE;QACjE,6BAA6B;QAC7B,KAAK,SAAS,CAAC,UAAU;YACvB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACnD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,iBAAiB;CAChB,CAAC;AAIX,6CAA6C;AAC7C,MAAM,UAAU,mBAAmB,CAAC,IAA4C;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,cAAc,CAAC,aAAa,CAAC;QACtC,KAAK,UAAU;YACb,OAAO,cAAc,CAAC,QAAQ,CAAC;QACjC,KAAK,OAAO;YACV,OAAO,cAAc,CAAC,KAAK,CAAC;IAChC,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAQ,MAAM,CAAC,MAAM,CAAC,cAAc,CAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC"}
+{"version":3,"file":"conventions.js","sourceRoot":"","sources":["../../src/conventions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,gEAAgE;AAChE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB;0EACsE;IACtE,gBAAgB,EAAE,qBAAqB;IACvC;;qDAEiD;IACjD,QAAQ,EAAE,aAAa;IACvB,+DAA+D;IAC/D,aAAa,EAAE,kBAAkB;IACjC,6BAA6B;IAC7B,QAAQ,EAAE,aAAa;IACvB,0BAA0B;IAC1B,KAAK,EAAE,UAAU;IACjB,2CAA2C;IAC3C,KAAK,EAAE,UAAU;IACjB,uDAAuD;IACvD,UAAU,EAAE,eAAe;IAC3B,kCAAkC;IAClC,KAAK,EAAE,UAAU;IACjB;;;;oCAIgC;IAChC,KAAK,EAAE,OAAO;IACd;;;;;;gCAM4B;IAC5B,KAAK,EAAE,UAAU;IACjB;;;wDAGoD;IACpD,cAAc,EAAE,mBAAmB;IACnC;;;;;iCAK6B;IAC7B,QAAQ,EAAE,aAAa;CACf,CAAC;AAIX,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,IAAI,EAAE,MAAM;IACZ;;oFAEgF;IAChF,UAAU,EAAE,YAAY;IACxB;;;;;0EAKsE;IACtE,OAAO,EAAE,SAAS;IAClB;;;yDAGqD;IACrD,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB;;;8DAG0D;IAC1D,aAAa,EAAE,eAAe;IAC9B,KAAK,EAAE,OAAO;IACd;;0EAEsE;IACtE,YAAY,EAAE,cAAc;IAC5B;;;;0DAIsD;IACtD,UAAU,EAAE,YAAY;IACxB;;;;;wCAKoC;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;IACtB,aAAa,EAAE,eAAe;IAC9B;;;;;;;6DAOyD;IACzD,OAAO,EAAE,SAAS;IAClB;;;;;;sBAMkB;IAClB,OAAO,EAAE,SAAS;IAClB;wCACoC;IACpC,oBAAoB,EAAE,sBAAsB;IAC5C;gEAC4D;IAC5D,UAAU,EAAE,YAAY;IACxB;4EACwE;IACxE,aAAa,EAAE,eAAe;IAC9B;kEAC8D;IAC9D,YAAY,EAAE,YAAY;IAC1B;8CAC0C;IAC1C,iBAAiB,EAAE,mBAAmB;CAC9B,CAAC;AAIX,wEAAwE;AAExE,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAC3B,EAAU;IAEV,OAAO,CACL,EAAE,KAAK,WAAW,CAAC,aAAa,IAAI,EAAE,KAAK,WAAW,CAAC,QAAQ,IAAI,EAAE,KAAK,WAAW,CAAC,KAAK,CAC5F,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,iEAAiE;IACjE,mEAAmE;IACnE,kEAAkE;IAClE,6CAA6C;IAC7C,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1C,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,WAAW,CAAC,aAAa;YAC5B,OAAO,eAAe,CAAC;QACzB,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,cAAsB;IAC3D,yEAAyE;IACzE,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QAC7C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,OAAQ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,OAAQ,MAAM,CAAC,MAAM,CAAC,SAAS,CAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC;AAuBD,4EAA4E;AAC5E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,WAAW,CAAC,gBAAgB;IAC5B,WAAW,CAAC,QAAQ,EAAE,sDAAsD;IAC5E,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,KAAK;IACjB,WAAW,CAAC,cAAc;IAC1B,WAAW,CAAC,QAAQ;IACpB,SAAS,CAAC,OAAO,EAAE,iEAAiE;IACpF,SAAS,CAAC,MAAM;IAChB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,YAAY;IACtB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,oBAAoB;IAC9B,SAAS,CAAC,UAAU;IACpB,SAAS,CAAC,aAAa;IACvB,SAAS,CAAC,YAAY;IACtB,SAAS,CAAC,iBAAiB;CAC5B,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,SAAS,CAAC,IAAI,EAAE,6CAA6C;IAC7D,SAAS,CAAC,KAAK,EAAE,kCAAkC;IACnD,4EAA4E;IAC5E,0EAA0E;IAC1E,uEAAuE;IACvE,SAAS,CAAC,YAAY;IACtB,0EAA0E;IAC1E,wEAAwE;IACxE,SAAS,CAAC,UAAU;IACpB,2EAA2E;IAC3E,oEAAoE;IACpE,SAAS,CAAC,gBAAgB;CAC3B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,EAAU;IAClC,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC1C,IAAI,aAAa,CAAC,YAAY,CAAC;QAAE,OAAO,WAAW,CAAC;IACpD,IAAI,YAAY,KAAK,SAAS,CAAC,QAAQ,IAAI,YAAY,KAAK,SAAS,CAAC,SAAS;QAC7E,OAAO,UAAU,CAAC;IACpB,0EAA0E;IAC1E,gEAAgE;IAChE,IAAI,YAAY,KAAK,YAAY,IAAI,YAAY,KAAK,WAAW,CAAC,UAAU;QAC1E,OAAO,aAAa,CAAC;IACvB,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5D,IAAI,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,UAAU,CAAC;IAC5D,OAAO,UAAU,CAAC,CAAC,2CAA2C;AAChE,CAAC;AAsBD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,EAAU;IACrC,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAClD,QAAQ,YAAY,EAAE,CAAC;QACrB,0EAA0E;QAC1E,qDAAqD;QACrD,KAAK,WAAW,CAAC,gBAAgB,CAAC;QAClC,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACnD,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,oCAAoC;QACpC,KAAK,WAAW,CAAC,aAAa;YAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAClD,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC7C,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1C,KAAK,SAAS,CAAC,QAAQ,CAAC;QACxB,KAAK,SAAS,CAAC,SAAS;YACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QACjD,gEAAgE;QAChE,KAAK,YAAY,CAAC;QAClB,KAAK,WAAW,CAAC,UAAU;YACzB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QACnD,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC9C,uEAAuE;QACvE,iEAAiE;QACjE,KAAK,SAAS,CAAC,YAAY;YACzB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACrD,uEAAuE;QACvE,iEAAiE;QACjE,6BAA6B;QAC7B,KAAK,SAAS,CAAC,UAAU;YACvB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACnD,uEAAuE;QACvE,sEAAsE;QACtE,KAAK,SAAS,CAAC,gBAAgB;YAC7B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACzD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,aAAa,EAAE,wBAAwB;IACvC,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,iBAAiB;CAChB,CAAC;AAIX,6CAA6C;AAC7C,MAAM,UAAU,mBAAmB,CAAC,IAA4C;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,cAAc,CAAC,aAAa,CAAC;QACtC,KAAK,UAAU;YACb,OAAO,cAAc,CAAC,QAAQ,CAAC;QACjC,KAAK,OAAO;YACV,OAAO,cAAc,CAAC,KAAK,CAAC;IAChC,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAQ,MAAM,CAAC,MAAM,CAAC,cAAc,CAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACnE,CAAC"}

package/dist/esm/core/Agent.d.ts

@@ -23,6 +23,7 @@ import { type CheckInBuilderOptions } from './checkin.js';
 import type { MemoryDefinition } from '../memory/define.types.js';
 import type { MemoryIdentity } from '../memory/identity/types.js';
 import type { SelfExplainBinding } from '../lib/trace-toolpack/selfExplain.js';
+import type { ResolvedEvidenceGate } from './agent/evidence/types.js';
 import type { Injection, InjectionContext } from '../lib/injection-engine/types.js';
 import type { CursorMove, EntryScoring, TurnRoutingPlan } from '../lib/injection-engine/skillGraph.js';
 import { type ResolvedOutputFallback } from './outputFallback.js';
@@ -173,6 +174,13 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
      *  validated at `AgentBuilder.build()`. Undefined = no brain anywhere:
      *  callLLM, the gate, seed and RouteTurn wire nothing new. */
     private readonly skillBrains?;
+    /**
+     * The evidence gate (9.35.0) — `.namesAndNumbersFromEvidence()`, resolved by
+     * the builder. Undefined for every agent that did not ask for it, and that
+     * undefined is the whole zero-cost guarantee: no decider change, no branch,
+     * no scope key, no event.
+     */
+    private readonly evidenceGate?;
     private readonly skillGraphCascade?;
     /** Side channel for the conversation's inherited skill cursor (SG-C) —
      *  stashed by `applyContinuation`, consumed-and-cleared by seed. */
@@ -393,7 +401,7 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
         readonly strictness: 'assist' | 'guard' | 'rails';
         readonly continuity: 'turn' | 'conversation';
         readonly nodeIds: ReadonlySet<string>;
-    }, skillBrains?: import('./agent/skillBrains.js').FoldedSkillBrains);
+    }, skillBrains?: import('./agent/skillBrains.js').FoldedSkillBrains, evidenceGate?: ResolvedEvidenceGate);
     static create(opts: AgentOptions): AgentBuilder;
     /**
      * Cache policy for the base system prompt. Read by the CacheDecision
@@ -1126,6 +1134,31 @@ export declare class Agent extends RunnerBase<AgentInput, AgentOutput> {
      * ```
      */
     outputContractUnmet(): AgentState['outputContractUnmet'];
+    /**
+     * Did the last turn's answer state names or numbers that appear in NO tool
+     * result (9.35.0)?
+     *
+     * `undefined` when every value was grounded — and on any agent without
+     * `.namesAndNumbersFromEvidence()`. Set on a turn that shipped flagged
+     * (`'assist'` / `'guard'`) and on one that was refused (`'rails'`, where
+     * `run()` also raised `UnsupportedValuesError`, so this is what a caller
+     * reads in the `catch`).
+     *
+     * `revised: true` means the model was asked once to correct the values and
+     * they survived that turn — the fact worth alerting on, because it is a
+     * model that cannot ground its own claims rather than one that slipped.
+     *
+     * Remember what the verdict does NOT say: values were invented. It cannot
+     * tell you whether a claim built from real values is true.
+     *
+     * @example
+     * ```ts
+     * const answer = await agent.run({ message: 'which port is down?' });
+     * const bad = agent.unsupportedValues();
+     * if (bad) log.warn({ values: bad.values.map((v) => v.value), revised: bad.revised });
+     * ```
+     */
+    unsupportedValues(): AgentState['unsupportedValues'];
     private finalizeResult;
     private buildChart;
 }

package/dist/esm/core/Agent.js

@@ -74,6 +74,9 @@ import { isDevMode } from 'footprintjs';
 import { buildReadSkillTool } from '../lib/injection-engine/skillTools.js';
 import { foldStepPlans } from '../lib/injection-engine/skillSteps.js';
 import { buildStepNudgeStage } from './agent/stages/stepNudge.js';
+import { buildEvidenceRecheckStage } from './agent/stages/evidenceRecheck.js';
+import { evidenceRefusalSentence } from './agent/evidence/gate.js';
+import { UnsupportedValuesError } from './agent/evidence/errors.js';
 import { checkerGoverns } from '../adapters/types.js';
 import { skillTarget } from '../security/skillTarget.js';
 import { buildInjectionEngineSubflow } from '../lib/injection-engine/buildInjectionEngineSubflow.js';
@@ -180,6 +183,13 @@ export class Agent extends RunnerBase {
      *  validated at `AgentBuilder.build()`. Undefined = no brain anywhere:
      *  callLLM, the gate, seed and RouteTurn wire nothing new. */
     skillBrains;
+    /**
+     * The evidence gate (9.35.0) — `.namesAndNumbersFromEvidence()`, resolved by
+     * the builder. Undefined for every agent that did not ask for it, and that
+     * undefined is the whole zero-cost guarantee: no decider change, no branch,
+     * no scope key, no event.
+     */
+    evidenceGate;
     skillGraphCascade;
     /** Side channel for the conversation's inherited skill cursor (SG-C) —
      *  stashed by `applyContinuation`, consumed-and-cleared by seed. */
@@ -405,7 +415,7 @@ export class Agent extends RunnerBase {
      *  sf-llm-call subflow for richer Lens grouping). Set from `opts.reactMode`.
      *  See AgentOptions. */
     reactMode;
-    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains) {
+    constructor(opts, systemPromptValue, registry, voice, injections = [], memories = [], outputSchemaParser, toolProvider, systemPromptCachePolicy = 'always', cachingDisabled = false, cacheStrategy, outputFallbackCfg, reliabilityConfig, thinkingHandlerValue, thinkingBudgetValue, skillGraphNextSkill, skillGraphReachable, skillGraphScoreEntries, checkInOptions, runConfigFn, windowStrategy, toolMiddleware, messageMiddleware, outputEnforcement, skillGraphEdgeTargets, skillGraphExplainNextSkill, skillGraphIsTree, skillGraphSupersededEntries, skillGraphCascade, skillBrains, evidenceGate) {
         super();
         this.provider = opts.provider;
         this.name = opts.name ?? 'Agent';
@@ -436,6 +446,7 @@ export class Agent extends RunnerBase {
         this.skillGraphIsTree = skillGraphIsTree ?? false;
         this.skillGraphCascade = skillGraphCascade;
         this.skillBrains = skillBrains;
+        this.evidenceGate = evidenceGate;
         this.memories = memories;
         this.outputSchemaParser = outputSchemaParser;
         this.outputEnforcement = outputEnforcement;
@@ -1082,7 +1093,14 @@ export class Agent extends RunnerBase {
                     // checkpoint would hand the caller a retry handle for a wall, and
                     // would bury the `authorizationUrl` one `.cause` deep where the
                     // person who has to click it will not look.
-                    cause instanceof CredentialConsentRequiredError);
+                    cause instanceof CredentialConsentRequiredError ||
+                    // 9.35.0 — an evidence refusal is a VERDICT, not a crash: the run
+                    // finished, the loop already spent its one revision, and resuming
+                    // would put the same model in front of the same evidence. Wrapping
+                    // it would hand the caller a retry handle for a wall and bury the
+                    // named values one `.cause` deep, where the person deciding what to
+                    // do about them will not look.
+                    cause instanceof UnsupportedValuesError);
             if (cause instanceof Error && !isTerminalTypedError && tracker.history.length > 0) {
                 // Observation beats the heuristic: if a bracket was open, it says
                 // exactly what the run was doing. `classifyFailurePhase` only decides
@@ -2229,6 +2247,34 @@ export class Agent extends RunnerBase {
         const state = this.getLastSnapshot()?.sharedState;
         return state?.outputContractUnmet;
     }
+    /**
+     * Did the last turn's answer state names or numbers that appear in NO tool
+     * result (9.35.0)?
+     *
+     * `undefined` when every value was grounded — and on any agent without
+     * `.namesAndNumbersFromEvidence()`. Set on a turn that shipped flagged
+     * (`'assist'` / `'guard'`) and on one that was refused (`'rails'`, where
+     * `run()` also raised `UnsupportedValuesError`, so this is what a caller
+     * reads in the `catch`).
+     *
+     * `revised: true` means the model was asked once to correct the values and
+     * they survived that turn — the fact worth alerting on, because it is a
+     * model that cannot ground its own claims rather than one that slipped.
+     *
+     * Remember what the verdict does NOT say: values were invented. It cannot
+     * tell you whether a claim built from real values is true.
+     *
+     * @example
+     * ```ts
+     * const answer = await agent.run({ message: 'which port is down?' });
+     * const bad = agent.unsupportedValues();
+     * if (bad) log.warn({ values: bad.values.map((v) => v.value), revised: bad.revised });
+     * ```
+     */
+    unsupportedValues() {
+        const state = this.getLastSnapshot()?.sharedState;
+        return state?.unsupportedValues;
+    }
     finalizeResult(executor, result) {
         const paused = this.detectPause(executor, result);
         if (paused)
@@ -2315,6 +2361,25 @@ export class Agent extends RunnerBase {
                 });
             }
         }
+        // Evidence refusal (9.35.0, `posture: 'rails'` only) — the final answer
+        // still states values that appear in no tool result, after the one
+        // revision the posture allows. Surfaced the way a denied message is, and
+        // for the same reason: `rails` was chosen precisely so an answer carrying
+        // invented identifiers cannot reach the caller as a string they are free
+        // to ignore. `'assist'` and `'guard'` never reach here — their verdict is
+        // committed state and an event, and `run()` returns the answer.
+        if (this.evidenceGate?.posture === 'rails') {
+            const state = executor.getSnapshot().sharedState;
+            const verdict = state.unsupportedValues;
+            if (verdict !== undefined && verdict.refused) {
+                throw new UnsupportedValuesError({
+                    values: verdict.values,
+                    candidates: verdict.candidates,
+                    revised: verdict.revised,
+                    message: evidenceRefusalSentence(verdict.values, 'rails', verdict.revised),
+                });
+            }
+        }
         // Credential-consent translation (8.6.0, `'tell-model'` only) — a tool
         // DECLARED a credential, the provider answered `authorization-required`,
         // and the model was told to route around it. The run reached the end
@@ -2423,6 +2488,10 @@ export class Agent extends RunnerBase {
             // Escalation (9.19.0): same gate discipline — the per-run counter/flip
             // reset exists only when the policy does (de-escalation IS the seed).
             ...(this.skillBrains?.escalation !== undefined && { hasEscalation: true }),
+            // The evidence gate's one bounded revision (9.35.0) — a per-turn budget,
+            // reset here. Only a posture that can revise writes the key.
+            ...(this.evidenceGate !== undefined &&
+                this.evidenceGate.posture !== 'assist' && { hasEvidenceRevision: true }),
             getCurrentRunId: () => this.currentRunContext?.runId,
             // WHO this run is for, when the caller named nobody (9.10.0). Seed uses
             // it for exactly one rung of the identity ladder — see `seedFrom` — and
@@ -2665,7 +2734,11 @@ export class Agent extends RunnerBase {
         // active step procedure (nudge once / accept / cut-short) when a stepped
         // skill is registered. Without steps this is the same function reference
         // the chart has always been handed.
-        const routeDecider = buildRouteDeciderStage(this.messageMiddleware, this.outputEnforcement, stepPlanFor);
+        // 9.35.0 — and the decider grounds the would-be-final answer in the
+        // turn's own tool results when `.namesAndNumbersFromEvidence()` is
+        // configured. Without it this is the same function reference the chart
+        // has always been handed.
+        const routeDecider = buildRouteDeciderStage(this.messageMiddleware, this.outputEnforcement, stepPlanFor, this.evidenceGate);
         // toolCallsHandler extracted to ./agent/stages/toolCalls.ts (v2.11.2).
         const toolCallsHandler = buildToolCallsHandler({
             registryByName,
@@ -2800,6 +2873,17 @@ export class Agent extends RunnerBase {
                 hasSteps: true,
                 stepNudgeStage: buildStepNudgeStage(stepPlanFor),
             }),
+            // The evidence gate (9.35.0). `hasEvidenceGate` rides ANY posture (the
+            // grouped chart needs the system-prompt records bubbled out to exempt
+            // what the app itself supplied); the BRANCH is mounted only for a
+            // posture that can revise — `'assist'` records and never loops, so it
+            // gets no branch and no stage, the same conditional-mount law as above.
+            ...(this.evidenceGate !== undefined && {
+                hasEvidenceGate: true,
+                ...(this.evidenceGate.posture !== 'assist' && {
+                    evidenceRecheckStage: buildEvidenceRecheckStage(this.evidenceGate),
+                }),
+            }),
             // Escalation (9.19.0): the grouped chart threads `skillEscalated`
             // across the sf-llm-call boundary only when the policy exists.
             ...(this.skillBrains?.escalation !== undefined && { hasEscalation: true }),