agentfootprint 9.82.0 → 9.84.0

package/dist/types/core/agent/evidence/evidenceIndex.d.ts

@@ -18,8 +18,18 @@
  *
  * ## What counts as evidence, and what deliberately does not
  *
- *   • **Tool results** — the `role: 'tool'` turns in the conversation. This is
- *     the whole corpus. A value the model read from a tool is grounded.
+ *   • **Tool results** — the `role: 'tool'` turns in `scope.history` AS IT
+ *     STANDS AT JUDGEMENT. A value the model read from a tool is grounded.
+ *
+ *     Say that precisely, because "the whole conversation" is only true for an
+ *     agent with no window strategy. `.window()` / `.compaction()` /
+ *     `tokenBudget` REWRITE `scope.history` in place (window.ts, `scope.history
+ *     = result.window`), so on those agents this corpus is the LIVE WINDOW and
+ *     a result the window has dropped is not in it — the same value then reads
+ *     as ungrounded. `keepLastToolResults` (default 2) is what keeps the most
+ *     recent observations pinned; nothing pins the rest. Anything computed from
+ *     this index therefore describes what the run can still SEE, never
+ *     everything it ever read.
  *   • **Object KEYS count.** A map keyed by WWN puts real identifiers in key
  *     position, and the model saw them exactly as it saw the values.
  *   • **Tool call ARGUMENTS do not count.** The model typed those. Grounding a
@@ -40,12 +50,61 @@
  * system-prompt content this turn was built from. A value the user supplied is
  * not a fabrication — the user gave it — and neither is one the app's own
  * prompt or skill body put in front of the model.
+ *
+ * ## WHEN a value was read, and why the corpus is still conversation-wide
+ *
+ * The corpus above answers "did the run read this?" and says nothing about
+ * WHEN. That gap has a measured cost: an agent answered a fresh question with
+ * ZERO tool calls, and the gate approved it because all seven values appeared
+ * in an inventory result fetched four turns earlier for a different question.
+ * Grounded, and four turns out of date.
+ *
+ * The fix is NOT to narrow the corpus to this turn. "And what about that
+ * disk?" legitimately leans on the previous turn's rows, and flagging those
+ * would make the gate cry wolf until somebody switched it off. So the corpus
+ * stays whole and every indexed form carries the TURN it was last served in
+ * — one number, stamped during the walk that was happening anyway.
+ *
+ * A TURN starts at each `role: 'user'` message the library did NOT author.
+ * `isLibraryAuthoredTurn` (frames.ts) is a statement about AUTHORSHIP, not
+ * about time — it exists to keep the exempt corpus from swallowing the gate's
+ * own corrections — and it is reused here for a different reason that happens
+ * to need the same predicate: a frame the library wrote is not a person asking
+ * something new. Excluding them is load-bearing rather than tidy. The evidence
+ * recheck appends a `role: 'user'` turn MID-RUN, so counting it as a boundary
+ * would push this turn's own tool results into the "earlier" bucket and file a
+ * notice against every revised answer.
+ *
+ * Turn 1 is the first user message still in the window; anything indexed
+ * before one (a history with no user turn at all) is turn 0, which is also
+ * `currentTurn`, so nothing can read as earlier and no notice can be filed
+ * from a conversation with no boundary in it.
+ *
+ * **The ordinals are WINDOW-RELATIVE**, and that is the honest bound: they
+ * count the user turns the run can still see, so under a window strategy
+ * "turn 2 of 4" may be the conversation's turn 9 of 13. The BOUNDARY is
+ * exact regardless — the current request is un-droppable by every window
+ * strategy (`'current-request'`, window/currentRequest.ts) — so "this turn
+ * versus earlier" holds; only the DISTANCE is a floor.
  */
 import type { LLMMessage } from '../../../adapters/types.js';
 import type { InjectionRecord } from '../../../recorders/core/types.js';
 /** A finished index plus the honesty flag that says whether it is complete. */
 export interface EvidenceCorpus {
-    readonly values: ReadonlySet<string>;
+    /**
+     * Every indexed form, stamped with the LATEST turn whose tool result
+     * carried it.
+     *
+     * A Map rather than a Set plus a second structure: the walk already visits
+     * each leaf once, so the turn is an attribute of the entry it was going to
+     * write anyway. `.has()` reads exactly as it did when this was a Set, which
+     * is all the grounding decision ever needed; `.get()` is the new half.
+     *
+     * LATEST, not first, and the direction is the whole point: the question is
+     * "could this turn's own results have supplied this value?", so a form
+     * served in turn 2 and again in turn 7 is turn 7's.
+     */
+    readonly values: ReadonlyMap<string, number>;
     /**
      * True when the ceiling was hit and the index is INCOMPLETE. The gate
      * downgrades itself to record-only when this is set: a partial corpus can
@@ -53,14 +112,28 @@ export interface EvidenceCorpus {
      * corpus is worse than no accusation at all.
      */
     readonly truncated: boolean;
+    /**
+     * The turn in progress — the ordinal every stamp above is compared against.
+     * `0` means the history carries no user turn at all, so there is no
+     * boundary and nothing can be attributed to an earlier one.
+     */
+    readonly currentTurn: number;
+    /**
+     * How many `role: 'tool'` results this turn served. `0` is the sharp case:
+     * a turn that fetched nothing sourced every value in its answer from
+     * history, by construction and without needing the index to prove it.
+     */
+    readonly toolResultsThisTurn: number;
 }
 /**
- * Build the evidence corpus from a conversation: every `role: 'tool'` turn.
+ * Build the evidence corpus from the history AS IT STANDS: every `role: 'tool'`
+ * turn still in it, each indexed form stamped with the turn that served it.
  *
  * In a single-turn run these are exactly this turn's tool results. In a
  * continued conversation the earlier turns' results are in here too, and that
  * is deliberate: the model really did read them, and calling a value from turn
- * one a fabrication in turn two would be false.
+ * one a fabrication in turn two would be false. Which earlier turns are still
+ * here is the WINDOW's decision, not this function's — see the header.
  */
 export declare function evidenceFromHistory(history: readonly LLMMessage[]): EvidenceCorpus;
 /**
@@ -73,6 +146,19 @@ export declare function evidenceFromHistory(history: readonly LLMMessage[]): Evi
  * summarised or redacted contributes what it has. That direction is the safe
  * one: a missing exemption can only cost a false flag on a value the app
  * supplied, and the caller can name it in `exempt`.
+ *
+ * STATED REACH, because `systemPromptInjections` is broader than "the app's
+ * own prompt": it also carries `.memory()` recall and RAG passages. A value
+ * that reached the model through memory or retrieval is therefore EXEMPT from
+ * grounding — never flagged, and never counted as tool evidence of any turn,
+ * so it is invisible to the recency read too. That is the correct call for the
+ * fabrication question (the run really did put those words in front of the
+ * model) and a real blind spot for the recency one, and it is deliberately NOT
+ * fixed here: recall is its own seam, with its own record
+ * (`retrievalEvidence_<id>`, `agentfootprint.memory.attached`), and giving a
+ * recalled passage a turn stamp means deciding whose turn it belongs to — the
+ * one it was written in or the one it was recalled in — which is a question
+ * this file has no standing to answer.
  */
 export declare function exemptFromRun(args: {
     readonly userMessage?: string;

package/dist/types/core/agent/evidence/evidenceIndex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidenceIndex.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/evidenceIndex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAYxE,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AA8ED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,cAAc,CAOlF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9D,GAAG,WAAW,CAAC,MAAM,CAAC,CAoBtB"}
+{"version":3,"file":"evidenceIndex.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/evidenceIndex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAYxE,+EAA+E;AAC/E,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAuFD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,cAAc,CAsBlF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,CAAC;IACxC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9D,GAAG,WAAW,CAAC,MAAM,CAAC,CAwBtB"}

package/dist/types/core/agent/evidence/frames.d.ts

@@ -22,16 +22,21 @@
  * from the exempt corpus. The frames are stable exported constants for this
  * reason as much as for the tests that match on them.
  */
-/** Opening of the evidence correction's authored frame. Stable — tests, docs
- *  and readers match on it. */
-export declare const EVIDENCE_CHECK_FRAME_PREFIX = "[evidence check";
+export { EVIDENCE_CHECK_FRAME_PREFIX } from '../../../lib/saidByPerson.js';
 /**
- * True when this message content is a correction the library wrote.
+ * True when this message content is a CORRECTION the library wrote.
  *
  * Both in-loop corrections are listed: the schema re-ask quotes a validator's
  * message about the model's own output, and the evidence recheck quotes the
  * model's own values. Neither is a person supplying data, and treating either
  * as one would exempt the very text it was written to challenge.
+ *
+ * DELIBERATELY NARROWER than `isSaidByPerson` (9.84.0), which excludes all
+ * four authored frames. This one is the exempt corpus's rule, and the exempt
+ * corpus is about who SUPPLIED a value, not who typed the message: widening it
+ * to the drop notice and the compaction frame would change which values the
+ * evidence gate exempts, which is a decision about the gate and not about
+ * authorship. Read `LIBRARY_AUTHORED_PREFIXES` if you want the whole list.
  */
 export declare function isLibraryAuthoredTurn(content: string): boolean;
 //# sourceMappingURL=frames.d.ts.map

package/dist/types/core/agent/evidence/frames.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/frames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH;+BAC+B;AAC/B,eAAO,MAAM,2BAA2B,oBAAoB,CAAC;AAE7D;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI9D"}
+{"version":3,"file":"frames.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/frames.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAUH,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAE3E;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAI9D"}

package/dist/types/core/agent/evidence/gate.d.ts

@@ -42,6 +42,13 @@
  * unexamined. A missed fabrication is a miss; a false accusation costs a real
  * turn and can refuse a good answer, so the bias points the way it does.
  *
+ * **And it does not ask WHEN.** A value read four turns ago for a different
+ * question is as grounded here as one read a second ago — which is a measured
+ * failure, not a hypothetical (see `../../../integrity/prior-turn-evidence`).
+ * That fact is reported beside this check, never folded into it: the gate's
+ * job is "was this read at all", and answering a second question through the
+ * same verdict would make one dial control two decisions.
+ *
  * ## Why the check is DETERMINISTIC
  *
  * No model call, no embedding, no judge. The library's thesis is that
@@ -69,6 +76,13 @@ export declare function resolveEvidenceGate(opts?: NamesAndNumbersOptions): Reso
  *
  * `exempt` is checked BEFORE the evidence: a value the user supplied is not a
  * fabrication whether or not a tool ever echoed it back.
+ *
+ * The same pass reports WHEN each grounded value was read (`grounding`) — the
+ * time axis the corpus gained in 9.83.0. Three buckets, and an exempt value is
+ * in none of them: exemption is a statement about who SUPPLIED a value, and a
+ * value the app or the person put in front of the model was never something
+ * the run had to go and look up. Counting one as tool evidence — of any turn —
+ * would answer a question nobody asked.
  */
 export declare function checkAnswer(answer: string, args: {
     readonly gate: ResolvedEvidenceGate;
@@ -92,6 +106,19 @@ export declare function describeValues(values: readonly UnsupportedValue[]): str
  * compaction frame and the schema frame follow, and a rule with an exception
  * is not a rule.
  *
+ * ## The scope this sentence used to claim, and no longer does (9.83.0)
+ *
+ * Both this frame and {@link evidenceRefusalSentence} said the flagged values
+ * "appear in NO tool result FROM THIS TURN". The index they are written from
+ * has never been turn-scoped — it walks every `role: 'tool'` turn in
+ * `scope.history` — so the sentence named a boundary the check did not honour,
+ * in the two places the claim is read by a model and by an operator. It was
+ * also needlessly weak: a flagged value appears in no tool result the run can
+ * point at AT ALL, which is a stronger and true thing to say. So the words
+ * changed to the check's real reach. The recency fact the old wording gestured
+ * at is now reported where it can be measured — `prior-turn-evidence`, off by
+ * default — instead of asserted here where it could not be.
+ *
  * `stagedRefs` (optional) is the staged-refs join computed by the recheck
  * stage: when this turn holds placed artifact tickets a served `wants` tool
  * can spend, the frame names the refs and the spender by their declared names

package/dist/types/core/agent/evidence/gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,KAAK,EACV,eAAe,EAEf,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAUtC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,sBAA2B,GAAG,oBAAoB,CAuE3F;AAcD;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACtC,GACA,eAAe,CAajB;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAK1E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,UAAU,CAAC,EAAE,eAAe,GAC3B,SAAS,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAetF;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,OAAO,GACf,MAAM,CAcR"}
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAG1D,OAAO,KAAK,EACV,eAAe,EAEf,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAAE,2BAA2B,EAAE,CAAC;AAEvC,wEAAwE;AACxE,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAUtC;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,sBAA2B,GAAG,oBAAoB,CAuE3F;AAcD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IACJ,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACtC,GACA,eAAe,CA0CjB;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAK1E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,UAAU,CAAC,EAAE,eAAe,GAC3B,SAAS,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAetF;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,gBAAgB,EAAE,EACnC,OAAO,EAAE,eAAe,EACxB,OAAO,EAAE,OAAO,GACf,MAAM,CAgBR"}

package/dist/types/core/agent/evidence/types.d.ts

@@ -6,6 +6,7 @@
  * Role:    core/ layer. Nothing here runs; it is the contract.
  * Emits:   N/A.
  */
+import type { AnswerGroundingReading } from '../../../integrity/prior-turn-evidence/check.js';
 /**
  * How hard the check pushes back. **Same three words as the skill-graph
  * routing dial, deliberately** — one posture vocabulary across the library —
@@ -138,5 +139,16 @@ export interface EvidenceVerdict {
      * accusation.
      */
     readonly evidenceTruncated: boolean;
+    /**
+     * WHEN the answer's grounded values were read (9.83.0) — the same pass,
+     * one time axis.
+     *
+     * Always computed, because it is three counters over a loop that was
+     * already running. It is only READ when the operator armed
+     * `AgentOptions.noticePriorTurnEvidence`, which is what turns it into a
+     * `prior-turn-evidence` finding; nothing else in the gate consults it and
+     * no posture changes because of it.
+     */
+    readonly grounding: AnswerGroundingReading;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/types/core/agent/evidence/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B;sDACkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;+CAC2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/evidence/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iDAAiD,CAAC;AAE9F;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,aAAa;IAC5B;sDACkD;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC3C;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;IAC/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;+CAC2C;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IAC1C,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;;;;;;;OAOG;IACH,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;;;;OASG;IACH,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC;CAC5C"}

package/dist/types/core/agent/outputEnforcement.d.ts

@@ -105,8 +105,7 @@ export interface OutputFailure {
  * the two paths report a failure the same way.
  */
 export declare function describeFailure(err: unknown): OutputFailure;
-/** Opening of the authored frame. Stable — tests and readers match on it. */
-export declare const SCHEMA_CHECK_FRAME_PREFIX = "[schema check";
+export { SCHEMA_CHECK_FRAME_PREFIX } from '../../lib/saidByPerson.js';
 /**
  * The two messages a failed attempt adds to the conversation: the answer
  * that failed, and the correction.

package/dist/types/core/agent/outputEnforcement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outputEnforcement.d.ts","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAIhF;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IACrD,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,iBAAiB,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;yEAEqE;IACrE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAKtF;AAID;yBACyB;AACzB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,iBAAiB,CAAC;IACjD;4EACwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAiB3D;AAID,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB,kBAAkB,CAAC;AAEzD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAClE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAWnC;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAIzE;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,8DAA8D;AAC9D,wBAAgB,eAAe,CAC7B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,WAAW,CAAC,EAAE,MAAM,GACnB,aAAa,CASf;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAI9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EACnC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC3C,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAe/C;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC;;0EAEsE;IACtE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAClC,aAAa,GAAG,SAAS,CAO3B"}
+{"version":3,"file":"outputEnforcement.d.ts","sourceRoot":"","sources":["../../../../src/core/agent/outputEnforcement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEtF,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAKhF;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IACrD,gEAAgE;IAChE,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,iBAAiB,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;yEAEqE;IACrE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CAC3C;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,GAAG,IAAI,CAKtF;AAID;yBACyB;AACzB,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,iBAAiB,CAAC;IACjD;4EACwE;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,CAiB3D;AAMD,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAEtE;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GAClE,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAWnC;AAED,uEAAuE;AACvE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAIzE;AAED,2EAA2E;AAC3E,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE7D;AAID;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAEtD,8DAA8D;AAC9D,wBAAgB,eAAe,CAC7B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC7C,WAAW,CAAC,EAAE,MAAM,GACnB,aAAa,CASf;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAI9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EACnC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC3C,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAe/C;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC7C;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC;;0EAEsE;IACtE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,GAClC,aAAa,GAAG,SAAS,CAO3B"}

package/dist/types/core/agent/selfCallNotice.d.ts

@@ -0,0 +1,141 @@
+/**
+ * The answer a `read_skill` SELF-CALL gets back (9.84.0).
+ *
+ * A self-call is `read_skill("X")` from a cursor already standing on X. It used
+ * to fall through the skill-graph gate's reachability arm — `makeReachableSkills`
+ * filters the cursor out of its own successor set (a MOVE to where you already
+ * are is not a move) and `openSkillIds()` excludes every graph-wired skill, so
+ * the cursor's own id is in neither half of `hops ∪ open`. The model was told:
+ *
+ *     read_skill("X") is not reachable from here. Reachable skills: …
+ *
+ * while X's body was in its system prompt and X's tools were in that very call's
+ * tool list. Read as a statement about AVAILABILITY — which is how a model reads
+ * "not reachable" — that is a flat contradiction of the request it arrived in,
+ * and the observed behaviour was to stop and answer that it could not help.
+ *
+ * ── THE LAW THIS FILE IS WRITTEN AGAINST ──────────────────────────────────
+ *
+ * A TOOL RESULT IS NOT READ ONCE. It is composed during iteration N, written
+ * into `history`, and then read by the model on call N+1 AND ON EVERY CALL
+ * AFTER IT for the rest of the turn — including the out-of-budget WRAP-UP,
+ * which `callLLM` serves with an EMPTY tool list under a user message saying
+ * "Do not request tools".
+ *
+ * The consequence is the whole design: NO COMPOSE-TIME CHECK CAN MAKE A
+ * FORWARD-LOOKING SENTENCE SAFE. A budget test, a posture test, a cursor test
+ * — each is true at the instant it runs and each is outlived by the sentence
+ * it admitted. Three rounds of this file fixed one clause at a time and each
+ * time a different clause was still false, because every one of them was a
+ * PREDICTION and the fix was always a better prediction.
+ *
+ * So the notice makes no predictions at all. Every clause is a fact about ONE
+ * already-finished event — the call the model made `read_skill` on — and every
+ * clause is anchored to that call by name ("that call"), never by deixis ("the
+ * call you just made", which denotes a different call each time it is re-read).
+ * A past fact about a named call cannot be falsified by anything that happens
+ * afterwards: not by the budget running out, not by a posture refusing a hop,
+ * not by a sibling tool in the same batch moving the cursor.
+ *
+ * ── WHAT WAS DELETED, AND WHY THE NOTICE STILL DOES ITS JOB ───────────────
+ *
+ * Gone: the exhortation ("Go ahead and act on the request"), the move offer
+ * ("read_skill MOVES you somewhere else — from here that would be: beta"), the
+ * open-skill offer ("These activate without moving you: gamma"), and the
+ * budget clause that was added to gate them. Each was false somewhere:
+ *
+ *   • the exhortation, on the wrap-up call, beside "Do not request tools";
+ *   • the move offer, on the wrap-up call (a hop is a tool call), under
+ *     `strictness: 'rails'` (every model hop refused) and under `'guard'` on a
+ *     decisively-routed turn (every hop not on an outstanding menu refused) —
+ *     where the sibling posture arm answers a taken-up offer with "read_skill
+ *     here reaches only the open skills: gamma", contradicting the notice from
+ *     the arm immediately above it, and spending escalation budget to do so;
+ *   • the budget clause, because a budget read at compose time is a claim
+ *     about a call that has not happened.
+ *
+ * The notice's JOB is to stop a model concluding its capability is gone. It
+ * does that by stating what it held, not by promising what it may do: you were
+ * standing in this skill, its instructions were in that call's prompt, its
+ * tools were on that call's wire, and asking took nothing away. A model that
+ * reads those four facts has no ground left for "I cannot help".
+ *
+ * The forward-looking half had a rightful owner all along, and it is not a
+ * tool result: the `read_skill` DESCRIPTION is recomposed on every single call,
+ * so it can safely speak in the present ("You are in 'beta'."), it is filtered
+ * for per-role visibility at source, and it is absent from the wrap-up because
+ * the whole tool list is. One owner for the present tense, one for the past,
+ * and they can no longer disagree — which is the only property that survived
+ * every round of this bug.
+ */
+import type { ActiveInjection } from '../../lib/injection-engine/types.js';
+import type { LLMToolSchema } from '../../adapters/types.js';
+/** What the current skill's tools did on the call the model made `read_skill` on. */
+export interface SelfSkillTools {
+    /** Every tool the skill declares — `[]` for a skill that declares none. */
+    readonly declared: readonly string[];
+    /** Those actually on that call's wire. A subset of `declared`. */
+    readonly served: readonly string[];
+}
+/**
+ * The skill's tools, as of the call the model just made — or `undefined` when
+ * that cannot be established, which is not the same answer and must not be
+ * reported as one.
+ *
+ * `undefined` means the notice says nothing about tools at all. It happens when
+ * the tools slot composed no per-iteration list (`reactMode: 'classic'` caches
+ * the slot, and `callLLM` falls back to its build-time schemas), or when the
+ * cursor's skill is not in the active set. Silence is the only honest output
+ * there: the alternative is a sentence naming tools the model may not have.
+ *
+ * The out-of-budget wrap-up is NOT one of these cases and must not be modelled
+ * as one. Its empty tool list belongs to a LATER call; the wire read here is
+ * always the one the model was really handed on the call being answered, and
+ * the notice speaks of that call and only that call.
+ */
+export declare function selfSkillTools(skillId: string, activeInjections: readonly ActiveInjection[] | undefined, wire: readonly LLMToolSchema[] | undefined): SelfSkillTools | undefined;
+/**
+ * The self-call's tool result.
+ *
+ * NOT a refusal to the MODEL, and deliberately so. The gate's other two arms
+ * refuse because the model asked for something it may not have; a self-call
+ * asks for a body it already holds, and the useful reply is the fact — where
+ * you stood, and what rode that call — not a decline. It is still counted as a
+ * refusal by the ESCALATION BUDGET (`noteSkillRefusal`, beside the emit), and
+ * those two facts do not fight: the budget is not measuring how the sentence
+ * reads, it is measuring a model that keeps asking the graph where it is
+ * instead of working, which is exactly the stuck run the budget escalates.
+ *
+ * It still OVERWRITES the tool's own result the way every other arm does,
+ * because that overwrite is what puts the authoritative sentence in front of
+ * the governance rules, the refusal cap and the after-tool moment, on both
+ * channels, before the model reads anything.
+ *
+ * The one thing not overwritten is a BODY. The live case is `surfaceMode:
+ * 'both'` — `'tool-only'` cannot arise here, because `skillBodyDelivery`
+ * refuses it at BUILD time for anything but an `llm-activated` skill and only a
+ * graph-wired skill can be the cursor. Under `'both'` the body is in the system
+ * prompt AND rides the tool result, and the second copy is the whole point of
+ * the mode: recency-first delivery, the body at the end of the window rather
+ * than only at the top of the prompt. Dropping it here would quietly demote
+ * `'both'` to `'system-prompt'` on the one call that asked to re-read.
+ *
+ * TENSE IS LOAD-BEARING, AND SO IS DEIXIS. Every clause below is past tense
+ * about a single named call, and every reference to that call is "that call" —
+ * bound by the opening clause, which says which call it was. "The call you just
+ * made" was the earlier wording and it is not safe: re-read four calls later it
+ * denotes call four, and the tools it names rode call one.
+ *
+ * There are exactly two present-tense phrases in the output and both are
+ * timeless rather than temporal: "It declares no tools of its own" (a
+ * declaration is fixed when the skill is defined and cannot vary within a run)
+ * and "Its instructions are repeated below" (the body is appended to this very
+ * string, so the sentence is true wherever the string is read).
+ */
+export declare function selfCallNotice(args: {
+    readonly skillId: string;
+    /** `undefined` when the wire could not be established — see `selfSkillTools`. */
+    readonly tools: SelfSkillTools | undefined;
+    readonly body?: string;
+}): string;
+//# sourceMappingURL=selfCallNotice.d.ts.map

package/dist/types/core/agent/selfCallNotice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfCallNotice.d.ts","sourceRoot":"","sources":["../../../../src/core/agent/selfCallNotice.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE7D,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,gBAAgB,EAAE,SAAS,eAAe,EAAE,GAAG,SAAS,EACxD,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,SAAS,GACzC,cAAc,GAAG,SAAS,CAO5B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAoCT"}

package/dist/types/core/agent/stages/route.d.ts

@@ -75,5 +75,10 @@ hasWrapUp?: boolean,
  *  Both absent → the claim seam never runs and not one line changes. */
 claims?: readonly DeclaredClaim[], integrityLedger?: {
     current: DispositionLedger | undefined;
-}): (scope: TypedScope<AgentState>) => RouteBranch | Promise<RouteBranch>;
+}, 
+/** `AgentOptions.noticePriorTurnEvidence` (9.83.0) — the claim seam's
+ *  recency read. Needs the evidence gate to be armed too (it owns the
+ *  extractor), so absent OR gate-less → not one row, not one event, and
+ *  the decider a pre-9.83.0 chart was handed. */
+noticePriorTurnEvidence?: boolean): (scope: TypedScope<AgentState>) => RouteBranch | Promise<RouteBranch>;
 //# sourceMappingURL=route.d.ts.map

package/dist/types/core/agent/stages/route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,6CAA6C,CAAC;AAGrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAEnF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,OAAO,GACP,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,SAAS,CAAC;AAucd;4DAC4D;AAC5D,eAAO,MAAM,iBAAiB,UArB2B,WAAW,UAAU,CAAC,KAAK,WAqB1B,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,sBAAsB,CACpC,iBAAiB,CAAC,EAAE,SAAS,iBAAiB,EAAE,EAChD,WAAW,CAAC,EAAE,yBAAyB,EACvC,WAAW,CAAC,EAAE,WAAW,EACzB,QAAQ,CAAC,EAAE,oBAAoB;AAC/B;;oEAEoE;AACpE,SAAS,UAAQ;AACjB;wEACwE;AACxE,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,EACjC,eAAe,CAAC,EAAE;IAAE,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAA;CAAE,GAC3D,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CA8DvE"}
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAGhE,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAIL,KAAK,WAAW,EACjB,MAAM,6CAA6C,CAAC;AAGrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAIjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAEnF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAIlF,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,OAAO,GACP,cAAc,GACd,YAAY,GACZ,kBAAkB,GAClB,SAAS,CAAC;AA0fd;4DAC4D;AAC5D,eAAO,MAAM,iBAAiB,UArB2B,WAAW,UAAU,CAAC,KAAK,WAqB1B,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,wBAAgB,sBAAsB,CACpC,iBAAiB,CAAC,EAAE,SAAS,iBAAiB,EAAE,EAChD,WAAW,CAAC,EAAE,yBAAyB,EACvC,WAAW,CAAC,EAAE,WAAW,EACzB,QAAQ,CAAC,EAAE,oBAAoB;AAC/B;;oEAEoE;AACpE,SAAS,UAAQ;AACjB;wEACwE;AACxE,MAAM,CAAC,EAAE,SAAS,aAAa,EAAE,EACjC,eAAe,CAAC,EAAE;IAAE,OAAO,EAAE,iBAAiB,GAAG,SAAS,CAAA;CAAE;AAC5D;;;iDAGiD;AACjD,uBAAuB,CAAC,EAAE,OAAO,GAChC,CAAC,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAsEvE"}

package/dist/types/core/agent/stages/toolCalls.d.ts

@@ -251,6 +251,12 @@ export interface ToolCallsHandlerDeps {
      *   • `'rails'` — routing picks are refused outright: rules/scorer resolve
      *     turn starts, declared routes handle transitions.
      * Same graph, same trace: postures change refusal behavior only.
+     *
+     * Read only by the `read_skill` gate below, and that is the whole scope:
+     * `applyToolEffects` never consults it, because a `propose-transition`
+     * comes from a tool — the author's own code — and is admitted under every
+     * posture against reachability alone. See `SkillGraphOptions.strictness`
+     * (AgentBuilder.ts), which states the exemption for authors.
      */
     readonly skillStrictness?: 'guard' | 'rails';
     /**

package/dist/types/core/agent/stages/toolCalls.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"toolCalls.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/toolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAGV,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AASpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQjF,OAAO,KAAK,EAA+B,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG9F,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAQ9E,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,IAAI,EAAwB,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAkC,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAYL,KAAK,WAAW,EAEjB,MAAM,6CAA6C,CAAC;AAYrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAmBlF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC;;4DAEwD;IACxD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrE;;kEAE8D;IAC9D,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,OAAO,EAAE,OAAO,0CAA0C,EAAE,iBAAiB,GAAG,SAAS,CAAC;KAC3F,CAAC;IACF;;qDAEiD;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;4DAEwD;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;kEAE8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC;;;8EAG0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAC1E;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,CAAC;IACrF;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,2DAA2D;QAC3D,QAAQ,CAAC,EAAE,EAAE;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACpE;4EACoE;QACpE,QAAQ,CAAC,YAAY,EAAE,CACrB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,KAC9B;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5D,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAEpD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IACxD;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;KACpC,CAAC;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,eAAe,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;IAC7D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,KAAK,IAAI,CAAC;IACX;;;;;;;OAOG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAsMD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAqkHzC"}
+{"version":3,"file":"toolCalls.d.ts","sourceRoot":"","sources":["../../../../../src/core/agent/stages/toolCalls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAGV,iBAAiB,EAClB,MAAM,4BAA4B,CAAC;AAapC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AACrE,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAQjF,OAAO,KAAK,EAA+B,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAG9F,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAQ9E,OAAO,EAIL,KAAK,qBAAqB,EAG3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,IAAI,EAAwB,MAAM,gBAAgB,CAAC;AAEjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACxE,OAAO,KAAK,EAAkC,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAI7D,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,0BAA0B,CAAC;AAIlC,OAAO,EAYL,KAAK,WAAW,EAEjB,MAAM,6CAA6C,CAAC;AAYrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAChF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,0CAA0C,CAAC;AAmBlF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC;;4DAEwD;IACxD,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD;;;;;;OAMG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACvE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrE;;kEAE8D;IAC9D,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE;QACzB,OAAO,EAAE,OAAO,0CAA0C,EAAE,iBAAiB,GAAG,SAAS,CAAC;KAC3F,CAAC;IACF;;qDAEiD;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC;IAC7C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;4DAEwD;IACxD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C;;kEAE8D;IAC9D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACjD;;;;;;;OAOG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;IACvC;;;8EAG0E;IAC1E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;OASG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAC1E;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,CAAC;IACrF;;;;;;;;OAQG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7C;;;;;;;OAOG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,2DAA2D;QAC3D,QAAQ,CAAC,EAAE,EAAE;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACpE;4EACoE;QACpE,QAAQ,CAAC,YAAY,EAAE,CACrB,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,KAC9B;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5D,CAAC;IACF;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/E;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAEpD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;IACxD;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;KACpC,CAAC;IACF;;;;;;;;OAQG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,eAAe,CAAC;IAC9C;;;OAGG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,yBAAyB,CAAC;IAC7D;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,MAAM,EAAE;QAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,KAAK,IAAI,CAAC;IACX;;;;;;;OAOG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9D;AAsMD,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,oBAAoB,GACzB,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CA2pHzC"}

package/dist/types/core/agent/types.d.ts

@@ -562,6 +562,72 @@ export interface AgentOptions {
      * result the tool returned.
      */
     readonly noticeEmptyLookups?: boolean;
+    /**
+     * Notice when the final answer's values were ALL read before this turn
+     * (9.83.0) — the claim seam's `prior-turn-evidence` advisory. **Default
+     * off.**
+     *
+     * The recorded failure: an agent answered a data question with ZERO tool
+     * calls, and the evidence gate approved it — "all 7 values in the answer
+     * were found in what the tools returned". They were: in an inventory result
+     * fetched four turns earlier for a different question. The user had asked
+     * about array performance; the answer recommended enabling a collector that
+     * had been running for months. Two turns did it back to back. The gate
+     * measures GROUNDEDNESS and had no notion of WHEN a value was grounded —
+     * while SAYING it did: both of its sentences claimed the flagged values
+     * "appear in no tool result from this turn", a boundary the index never
+     * honoured. 9.83.0 narrowed those sentences to what the gate really reaches
+     * and made the boundary measurable here instead.
+     *
+     * What the library CAN see, once every indexed form carries the turn that
+     * served it, is that every value the answer states was last served BEFORE
+     * the turn being answered — and that this turn contributed none of them.
+     * Turn this on and each such answer files one `advisory` finding on
+     * `agentfootprint.integrity.context_error`, naming the count, the newest
+     * turn they came from, how far back that is, and how many tool results this
+     * turn served (`0` is the sharp case: an answer assembled entirely from the
+     * conversation).
+     *
+     * THE CEILING, and it is why this never accuses: an answer that legitimately
+     * refers back to an earlier result is indistinguishable, by evidence alone,
+     * from one that has gone stale. This reports WHERE the values came from,
+     * never whether they were still the ones the reader wanted. The same
+     * advisory is filed for the honest follow-up and the stale answer, because
+     * nothing in this library can tell them apart. Every finding carries the
+     * ceiling sentence (`PRIOR_TURN_EVIDENCE_CEILING`) in its own message.
+     *
+     * WHAT IT CAN SEE, and it is narrower than "the conversation": the evidence
+     * corpus is `scope.history` as it stands at judgement, which on an agent
+     * with `.window()` / `.compaction()` / `tokenBudget` is the LIVE WINDOW. So
+     * the turn ordinals count the turns the run can still see and the distance
+     * is a FLOOR (the boundary itself is exact — the current request is
+     * un-droppable). And a value that reached the model through `.memory()`
+     * recall or RAG is exempt from grounding altogether, so it is invisible
+     * here: this can under-report, never over-report.
+     *
+     * WHAT KEEPS AN HONEST FOLLOW-UP QUIET. ONE grounded value from this turn's
+     * own results is enough to file nothing — the claim being tested is that
+     * EVERY value came from earlier, and one that did not falsifies it. A
+     * follow-up that calls a tool usually gets that for free: a lookup keyed on
+     * an earlier identifier echoes the identifier back in its own result, so the
+     * value is re-served this turn. The evidence corpus is deliberately NOT
+     * narrowed to this turn — "and what about that disk?" leans on the previous
+     * turn's rows legitimately, and flagging those would make the gate cry wolf
+     * until somebody switched it off.
+     *
+     * TWO HALVES ARM IT: this dial AND `.namesAndNumbersFromEvidence()`. The
+     * gate is not a policy companion here — it owns the extractor that decides
+     * which tokens in an answer are DATA at all, so without it there is nothing
+     * whose provenance could be read. Absent, the run is byte-identical: no
+     * finding, no event, no branch changes, and the posture decides exactly what
+     * it always decided. The one visible difference is the registered
+     * `prior-turn-evidence` row in the disposition report, filed
+     * `not-applicable` — registered-but-unarmed is a ROW, never silence.
+     *
+     * It REPORTS. Whether an answer is advised or refused stays the evidence
+     * gate's `posture`; nothing here blocks, revises or rewrites anything.
+     */
+    readonly noticePriorTurnEvidence?: boolean;
     /**
      * Check a tool's rows against the columns it declared (9.78.0) — the write
      * seam's COLUMN-TYPE CONTRACT. **Default `'off'`.**