agentfootprint 9.84.0 → 9.86.0

package/CHANGELOG.md

@@ -7,6 +7,423 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [9.86.0] - 2026-09-05
+
+Every hand-counted list in 9.84.0 and 9.85.0 was short by one or two.
+
+"Five classes of `role: 'user'` message are authored by this library" — seven
+were. "Reachability OR posture" — three arms refuse. "Sixty configurations,
+crossing every source" — the cross skipped four of the seven sources it named,
+and there are seventy-six. The rules that catch a sentence which outlives its
+moment were a transcript of the wordings that had already escaped: thirteen of
+fifteen plausible forward-looking sentences walked straight through them.
+
+None of those was a typo. Each was a fact the library computed in one place and
+re-derived, by hand, wherever a second consumer needed it — and a hand-derived
+list is a list that is short the day after somebody adds the next case. Three
+of them are now WALKS rather than counts: the user-turn producers are parsed out
+of `src/` with the TypeScript compiler, every sentence-shaped literal in `src/`
+is run through the model-facing rules with a file and a line on failure, and the
+offer/dispatch cross iterates its source list whole instead of filtering it.
+Two more are single owners: one function answers "is this `read_skill` target
+the cursor?", and one scope key answers "which skill ids may this role see?".
+
+### Fixed
+
+- **`read_skill` refusals answered for a fact nobody owned.** Five call sites
+  needed to know that `makeReachableSkills` filters the cursor out of its own
+  successor set — correct for a MOVE, silent about a READ. Three of them wrote
+  their own `requested === cursor` line. Two never heard: a tool proposing
+  `propose-transition` back to the cursor's own skill was refused as unreachable,
+  and the `skill_read` permission gate was asked to grant a capability the model
+  was already exercising, then told the model that its own skill was "not
+  available in this context".
+
+  `classifySkillTarget({ cursor, target, hops, open })` now owns it, returning
+  `'self' | 'hop' | 'open' | 'unreachable'`. It is a pure function in the
+  injection engine, exported through the `agentfootprint/context` barrel and the
+  `agentfootprint/skill-graph` door — the same function object through both, so a
+  foreign host cannot re-derive it wrongly either. The five consumers switch on
+  it: the gate arm, `describeOffer`, the tool-effects judge, the `skill_read`
+  permission gate, and the refusal composer. `makeReachableSkills` keeps its own
+  exclusion — it is the PRODUCER of the hop set, and excluding the cursor is what
+  a move means — and its doc comment now says the exclusion is about movement and
+  sends the next reader to `classifySkillTarget`.
+
+- **A refusal could name a skill the caller's own policy hides.** Role visibility
+  was a property of one builder: `Agent.hiddenSkillIdsNow()` fed
+  `buildReadSkillTool` and nothing else. So the description named nothing hidden
+  while the gate, one stage downstream, composed its refusals — and filled
+  `skill.rejected.allowed` — from the graph's raw sets.
+
+  The tools slot now resolves the hidden set once per iteration, publishes it on
+  `scope.hiddenSkillIds`, and both chart shapes bubble it. The gate keeps two sets
+  on purpose: the RAW one it judges with, and the filtered one it speaks with. It
+  judges with the raw set because a narrowing may take a schema off the wire and
+  may never take a name out of the dispatch map — filtering admission would remove
+  a capability, which the monotone rule forbids. In practice a hidden id never
+  reaches the gate, because the same checker denies it upstream; the filter is what
+  makes that true by construction rather than by coincidence.
+
+- **Two refusal composers that contradicted each other forty lines apart are one.**
+  `skillRefusal` and `postureRefusal` are replaced by `composeReadSkillRefusal`,
+  and every arm of it is a past fact about the one call it names. Gone with them:
+  "from here" (deixis — a different place on every re-read), "Pick one of these, or
+  finish" (an exhortation in a string that persists for the rest of the run), and a
+  posture arm that named a hop the very next arm would have declined. A refusal now
+  opens `read_skill("X") was not granted on that call:` and every clause after it
+  refers back to that call.
+
+- **`Unknown tool: X` told the model it was wrong and never what would have
+  worked.** Both dispatch doors now compose one exported `unknownToolResult`, which
+  names the dispatch roster: `Unknown tool 'X' on that call. Tool names that
+  resolved to an implementation on that call: …`, or, with an empty roster, that
+  none did. The leading `Unknown tool` token is preserved, so every matcher on it
+  is untouched.
+
+  It says *resolved*, not *could be dispatched*, because two gates sit between
+  resolution and a tool running — the `tool_call` permission check and the
+  middleware chain — and neither is asked to phrase an error. And the roster is
+  role-filtered before it is named: it used to read the dispatch map raw and could
+  name a tool belonging to a skill the caller's own policy hides, which is the
+  leak the refusals had just closed, one sentence over. `buildToolRegistry` now
+  returns `toolDeclaringSkills` (tool name → the skills that declare it) from the
+  walk it was already doing, and a name is withheld only when EVERY declaring
+  skill is hidden — a tool two skills share stays named. Dispatch is untouched.
+
+- **A filtered-empty list was reported as an empty one — a Lens denying what the
+  Fold holds.** Three sentences branched on `length > 0` over an already-filtered
+  array, so "the graph held nothing" and "the role filter emptied it" composed the
+  same words. A cursor whose only declared hop was hidden answered `read_skill`
+  with *"No skill was reachable from 'alpha' when that call was made."* while the
+  graph was routing `alpha`; a `'guard'` menu whose every id had been hidden since
+  the turn started said *"no menu was outstanding when that call was made.
+  Declared routes moved the cursor instead."* — two false clauses in one breath.
+
+  A model told the map is a dead end stops asking for the door it may not be
+  shown, and the checker cannot see it: every one of those sentences passes
+  `unprovable()`, because the defect is in what the composer was handed, not in
+  how it was worded. So the fact is now a type. `SpokenIds` carries both halves of
+  a filtered set — `named`, and `held` for whether the unfiltered set held
+  anything — and `held` is required, so the compiler asks every caller the
+  question every call site forgot to answer. Where a filter empties a set the
+  clause is OMITTED. Omission is free and always true; the negative is a denial.
+
+  The fourth sentence was the one the model reads to CHOOSE. `describeOffer`
+  computed its columns from an already-filtered catalog, so a cursor whose only
+  declared hop is hidden was told *"Nothing is reachable from here — answer with
+  the skill you are in, or finish."* while the graph held that edge. It classifies
+  the hop set over the unfiltered catalog now and drops the clause when the filter
+  is what emptied it; with nothing wired out at all the sentence still stands,
+  because that absence is one the description has evidence for. Reaching it meant
+  moving `SpokenIds`/`spoken` to `src/lib/spokenIds.ts`: it lived in the tool-calls
+  stage, on the wrong side of the skill-graph fence, so the description — composed
+  inside `src/lib/injection-engine/`, which may not import the agent loop — was the
+  one surface that could not use the fact its own refusals were repaired with.
+
+- **Under a `.tree()` with nothing open, `read_skill` is no longer offered.** A
+  tree routes by predicate on every iteration and keeps no cursor, so the tool had
+  nothing it could do and a menu of one refusal is worse than no menu. The schema
+  leaves the request; the NAME stays in the dispatch map, which is the same law as
+  everywhere else. With open skills present, the description explains the tree and
+  lists exactly what a pick can open, instead of printing "Nothing is reachable
+  from here".
+
+- **Two library-authored user turns were credited to a person.** The out-of-budget
+  wrap-up instruction and the stepped-skill nudge both append to `scope.history`
+  with `role: 'user'` and took no registered opening, so `isSaidByPerson` said a
+  person wrote them. Two things followed. The window's refusal engine could pin
+  "the current request" on the framework's own wrap-up instruction and drop the
+  real request underneath it. And a routing rule written the documented way —
+  `saidByPerson(ctx).some((m) => m.content.includes(…))` — matched on the library's
+  own bookkeeping: the wrap-up said "Do not request tools", and the nudge names a
+  skill id and every unrun step's tool name.
+
+  Both are registered now, and `LIBRARY_AUTHORED_PREFIXES` holds all six openings
+  frozen, so the writer and the recogniser read one constant. Both sentences were
+  also rewritten: each was composed once and re-read on every later call of the
+  turn, which made their present-tense clauses predictions.
+
+- **Three trace-toolpack results said "this call" and "right now".** They are
+  anchored to the call they answer, in the past tense — including the one arm the
+  new deictic-container rule caught the first time it was ever composed.
+
+- **`escalation` counts three kinds of refusal, and its docs named two.**
+  "Reachability OR posture" is wrong in the JSDoc behind `EscalationPolicy` and
+  `SkillGraphOptions`, in the `skill.escalated` payload doc and on the skills page:
+  the counter fires beside all three `skill.rejected` emit sites, self-call
+  included. No behaviour changed — the self-call site has counted since 9.84.0,
+  deliberately.
+
+### Added
+
+- **A WALK over every `role: 'user'` construction site in `src/`.**
+  `test/lib/injection-engine/userTurnProducers.test.ts` parses the tree with the
+  TypeScript compiler (a `PropertyAssignment` of `role: 'user'`, so type members
+  and comments quoting the string are not counted) and requires every site to be
+  classified as an authored frame, a person's own words, or never-in-history, each
+  with a written reason. **Thirty-five** sites are classified today: six authored
+  frames, seven person, twenty-two never-in-history. Sites are keyed by file with
+  the per-file COUNT asserted, so a new producer inside an already-listed file
+  fails as loudly as one in a new file. One producer the parser cannot see — the
+  message an injection delivers, whose role is copied off the `Injection` — is
+  named in the header and pinned by its `injectedBy` marker instead.
+
+- **The model-facing checker judges SHAPE, not just remembered wordings.** Four
+  new rules: a present-tense copula with a capability noun, deictic-present
+  adverbs, second-person effect verbs, and a standing imperative at a clause
+  start. Fifteen plausible forward-looking sentences were written out and put
+  to the rules: "You are currently in 'alpha'", "Calling read_skill switches you
+  to beta", "The following tools are available to you: …", "Nothing is live in
+  this scope at the moment". All fifteen are caught by the rules as they stand,
+  and the suite asserts exactly that. **Thirteen** of them passed against the
+  rule list AS IT STOOD BEFORE THIS RELEASE — the number that motivated the
+  work, measured once against a list this tree no longer contains, so it is a
+  record of why the rules changed rather than something a run here can
+  reproduce. `exemptBecause` is now structurally
+  required: `BannedClause` is a discriminated union, and because the root
+  `tsconfig.json` excludes `test/`, that is proven where it can actually be
+  compiled — `test/type-regressions/`.
+
+- **A WALK over every sentence-shaped literal in `src/`.** The registry's own
+  header used to say the gap it could not close was "a scan of `src/` … and this
+  is not that". `test/modelFacingScan.test.ts` is that: it parses every `.ts` file
+  under `src/` with the TypeScript compiler, folds `+` chains and template holes,
+  runs each literal through the rules at the persistent lifetime, and fails with
+  `file:line` unless the file's flagged literals are accounted for in a ledger of
+  **eighty-four files / one hundred and sixty-three literals**, every entry naming
+  where the string is delivered and how many literals it covers. Per-file counts
+  are the guard again. Four things it cannot see are stated in its header rather
+  than left to be found: a sentence assembled across statements, text that lives
+  in data rather than in `src/`, literals under twenty-five characters, and any
+  falsehood that avoids all the shapes.
+
+  Its ledger carries an `unrepaired` bucket of **thirty-three** literals across
+  thirteen entries that are model-facing, persistent and correctly caught, and
+  that were left alone because each needs its own tests. They are named with their
+  delivery site, so the bucket is a work list rather than a pardon. The bucket's
+  arithmetic is asserted by the suite itself — the counts above come from a run,
+  not from a report, which is the failure this whole entry is about.
+
+- **Five live producers are registered and read.** The `read_skill` refusal
+  composer (every arm), `unknownToolResult`, the trace toolpack's inspection
+  results, and — closing the gap 9.85.0's registry named — the wrap-up and
+  stepped-skill frames at a shared `INJECTED_TURN` surface.
+
+- **The offer/dispatch cross iterates its source list whole.** `frameworkCases()`
+  re-derived a source list inside the walk —
+  `CLAIMANTS.filter((c) => ['static', 'provider', 'skill-active'].includes(c.id))`
+  — so a second hand-written list of sources existed with nothing keeping it in
+  sync with the first, and 9.85.0's "crosses every source" was false. That mattered
+  because the framework's four auto-attach reservations each read a DIFFERENT
+  build-time list, so which source holds a contested name is precisely what decides
+  whether a reservation can see it. The walk goes from **sixty configurations to
+  seventy-six** and from **thirty-six divergence rows to forty-six**; all ten new
+  rows carry a hand-written, checked `tolerated`. Three new tests own what was
+  previously true only because somebody had typed it: that every claimant is
+  crossed against every auto-attach name, that the header's arithmetic equals the
+  recorded case count, and that a placeholder `tolerated` is refused (empty,
+  `todo`/`tbd`/`fixme`/`xxx` on a word boundary in any case, or under forty
+  characters — a floor on effort, not a measure of truth).
+
+  Eight of the ten are already-recorded seams reached through a source that had
+  never been crossed, and say so. Two are defects nobody had recorded and are
+  written up as entries 4 and 5 of `docs/design/2026-09-recorded-not-built.md`
+  rather than papered over: `.selfExplain()` reserves its trace-tool names against
+  `this.registry` and never `this.injectionList`, making it the one auto-attach
+  family with no net at all against a skill's `tools: []`; and the misattributed
+  shadow report can now name a `skill-scoped:self-explain` provider — one the
+  consumer did not write and cannot open — as the file to go look at.
+
+- **`report-misattributed` rows carry their attribution in the row id.** A shadow
+  event's meaning lives in its `schemaFromId`/`dispatchToId`, and the row was keyed
+  on case + tool + epoch, so two reports naming different sources in one epoch — a
+  strictly worse fact than one wrong report — collapsed into one `Map` entry and
+  vanished.
+
+- **`SkillRejectedPayload.allowed` is what the model was actually told.** Role-
+  filtered rather than the graph's raw set. Shape unchanged; only agents with a
+  `PermissionChecker` governing `'skill_read'` see any difference. The field's own
+  JSDoc says so at the call site, which is the doc a consumer actually reads.
+
+- **`ToolRegistryArtifacts.toolDeclaringSkills`** — tool name → the ids of the
+  skills whose `inject.tools` carry it, recorded on the walk `buildToolRegistry`
+  was already doing and thrown away. Empty for an agent whose skills carry no
+  tools. Its one consumer is the unknown-tool roster's role filter; it exists so
+  that consumer does not walk `Agent.injections` a second time to re-derive what
+  this file already knew.
+
+- **`ToolEffectPayload.stay?: true`** on `agentfootprint.tools.effect` — a
+  `propose-transition` naming the cursor's own skill is accepted as a no-op.
+  Deliberately not a fourth `outcome`, so an exhaustive consumer switch keeps
+  compiling.
+
+- **`AgentState.hiddenSkillIds?: readonly string[]`** — the per-iteration
+  role-hidden set, written by the tools slot and read by the `read_skill` gate.
+
+- **`ReadSkillOffer.treeRouted?: boolean`** — declares the mounted graph a decision
+  tree, which is what lets the descriptor withhold the offer.
+
+### Two decisions worth stating plainly
+
+- **A self-call at a MOUNTED cursor is answered BEFORE the permission gate**, because
+  it exercises no capability. `read_skill` naming the cursor's own skill activates
+  nothing and moves nothing, so there is no grant for a `PermissionChecker` to make or
+  withhold; asking it produced a denial about the one skill whose body was already in
+  that call's system prompt. The skip stops at a PARKED cursor, and deliberately: a
+  park suppresses a map's contribution without moving the cursor, so the gate below
+  reads the same id as a RE-ENGAGEMENT and puts the body and its tools back on the
+  wire — which is a capability, and the policy's question to answer. One predicate,
+  `atMountedCursor`, is what both gates ask. Every other id still goes to the policy.
+  The refusal BUDGET is
+  unchanged and still counts the self-call, including the `surfaceMode: 'both'`
+  re-read that returns the body — the 9.84.0 argument stands, and it is about the
+  loop rather than about the wording: a model that keeps asking the graph where it
+  stands instead of working is exactly the stuck run escalation exists for.
+
+- **A `propose-transition` naming the cursor's own skill is a STAY**, accepted as a
+  no-op with `stay: true` on the event and no refusal on the result. The tool asked
+  for a state the run is already in; there is nothing to move and nothing to refuse.
+
+### Deliberately not changed
+
+- **The three `STATED:` prose pins** in `src/core/agent/buildToolRegistry.ts` are
+  untouched, word for word. `test/core/agent/epoch-laws.test.ts` and
+  `test/core/agent/toolDivergenceWalk.test.ts` both read them.
+- **The escalation budget still counts `'both'`-mode self-call re-reads**, per the
+  argument above.
+- **The grounding gate** — item 5 of the "Offer, Not Dispatch" review — is a new
+  DIAL, not a fix for anything here, and is not in this release.
+- **The flat default is not narrowed.** `scopeTools` stays `false` until 10.0.0.
+- **`isLibraryAuthoredTurn`** (the evidence gate's exempt corpus) is deliberately
+  narrower than `isSaidByPerson` and was not widened to the two new frames. It
+  decides who SUPPLIED a value, not who wrote a turn; widening it would change which
+  values the evidence gate exempts, with no finding behind it.
+
+### Changelog corrections
+
+A reader auditing this project by its changelog has to be able to trust the older
+entries, so six sentences in 9.84.0 and 9.85.0 are corrected in place, each marked
+where it stands:
+
+- **9.84.0** — _"Five classes of `role: 'user'` message"_: seven kinds are
+  library-authored; the wrap-up instruction and the stepped-skill nudge went
+  unregistered until this release.
+- **9.84.0** — _"The window's own refusal engine has always applied that rule"_: it
+  applied a three-class version, and 9.84.0 widened it to five.
+- **9.84.0** — _"a step or park hold-out says the tools were withheld rather than
+  naming them"_: the withheld arm names the declared tools, and a parked cursor
+  never reaches the notice at all.
+- **9.85.0** — the fifth _"model-facing sentence"_ bullet credited 9.85.0 with a
+  `read_skill` description fix that shipped in 9.84.0, and quoted a sentence that
+  existed only in a source comment. Removed, with the reason left in its place; the
+  count above it is now four.
+- **9.85.0** — _"drives a real run per configuration. Sixty configurations,
+  thirty-six divergences"_: forty of seventy-six are driven, twenty-six are refused
+  at build and ten are not constructible; the enumeration it replaced was a
+  development draft, never a shipped list.
+- **9.85.0** — law 1 was restated unscoped. It is scoped to the tools
+  `buildToolRegistry` routes, with the shadow seam and the walk as its recorded
+  exceptions.
+
+## [9.85.0] - 2026-09-04
+
+A sentence composed once and read many times is not a fact — it is a prediction.
+
+9.84.0 fixed one such sentence and shipped a checker for the class. The checker
+covered two surfaces. Five more sentences matching its own existing rule were
+live elsewhere in the tree, unread by it, because coverage was decided by which
+suite happened to import the helper. That is the same defect one level up: a
+guard asserting a boundary it cannot verify.
+
+### Fixed
+
+- **Four model-facing sentences that outlive the moment they were true.** Each is
+  now anchored to one named call, in the past tense, after tracing it to its
+  delivery point to confirm it really is re-read:
+
+  - `artifacts/present.ts` and `artifacts/wants.ts` — _"Nothing is live in this
+    run's scope right now"_ and its sibling inventory, _"Live refs in scope: …"_.
+    A census goes wrong in BOTH directions on re-read: entries sweep, new ones
+    appear.
+  - `core/codeRunnerTool.ts` — _"staged into this session"_. The anchor resolves,
+    and goes on resolving; the defect is that it resolves to a scope holding many
+    calls, so a per-call report cannot say which call it describes.
+  - `maps/engagement/parkCard.ts` — _"Its instructions and its tools are not being
+    sent right now"_, on a card that rides every call while a map is parked. Its
+    falsifier is compose order, not staleness: the card is written in the
+    injection-engine pass and the tools slot that acts on the park runs after it.
+
+  _Corrected in 9.86.0._ A fifth bullet stood here, crediting 9.85.0 with the
+  `read_skill` description fix and quoting _"You do not need read_skill to go on
+  using it"_ as a wording it had replaced. `skillToolDescriptors.ts` has no
+  non-comment change between `v9.84.0` and `v9.85.0`: that fix shipped in 9.84.0,
+  where it is also recorded, and the quoted sentence lived only inside a source
+  comment — no release ever put it on the wire. What 9.85.0 added to that file is
+  the LENS LAW block above `describeOffer`, which is a Documentation change.
+
+### Added
+
+- **Surfaces carry `channel` and `lifetime` separately.** Where a string is
+  delivered and how long it lives do not correlate: system text is rebuilt every
+  request, so a present-tense clause in it is a fact; a tool result persists, so
+  the same clause is a forecast. The rules judge lifetime. Both existing
+  exemptions turned out to be lifetime claims wearing channel clothes and are now
+  derivable rather than asserted.
+
+- **A producer registry that fails when a surface is not exercised.** Coverage
+  decided by which suite imports a helper is a habit, not a guarantee. Its header
+  states what a green run does not prove: hand-maintained rows cannot see a
+  producer nobody registered.
+
+- **The offer/dispatch divergence list is walked, not written.**
+  `test/core/agent/toolDivergenceWalk.test.ts` crosses every source that can put
+  a name on the wire or answer to one — static, provider, MCP, always-on skill,
+  active skill, inactive skill, stepped skill — against six narrowing states and
+  the framework's auto-attach names. _Corrected in 9.86.0:_ at 9.85.0 the
+  auto-attach cross did NOT reach every source — it filtered `CLAIMANTS` down to
+  three of the seven — and the walk does not drive a real run per configuration.
+  Both are true of the walk as it stands after 9.86.0 widened it, with these
+  counts. Of its **seventy-six** configurations, **forty** are driven
+  as real runs (thirty-six divergent, four clean), **twenty-six** are refused at
+  build — which is the walk exercising a refusal, and its `because` records the
+  refusal's first line — and **ten** are not constructible at all, so no run is
+  attempted. **Forty-six** divergence rows come out of the forty driven, each
+  with a mechanically derived cause and a stated reason it is tolerated. New
+  fails. Disappeared fails. Vacuous fails, and is unbaselineable.
+
+  It replaced a hand-written enumeration that claimed completeness and was
+  falsified three rounds running — _corrected in 9.86.0:_ that enumeration was
+  drafted and falsified during this work, and no released version ever carried
+  it, so the walk shipped in place of a draft rather than of a shipped list.
+
+  It then found three classes nobody seeded: a
+  provider tool whose name a registry holder already owns is dead in both
+  directions and the shadow report cannot see it; the auto-attach names disagree
+  about what they refuse; and `selfExplain` is a fourth family whose reservation
+  reads only the static registry.
+
+### Documentation
+
+- **Three laws stated where the code lives**, epoch-scoped, after two earlier
+  phrasings were false in shipped configurations. Law 1, as the source states it
+  and _corrected here in 9.86.0_, is SCOPED: **among the tools `buildToolRegistry`
+  routes**, every offered capability resolves to a dispatchable implementation
+  with stable identity for that epoch — same-epoch offer implies same-epoch
+  dispatch. It is not a claim about the whole wire, and the source names its
+  recorded exceptions rather than implying there are none: the SHADOW SEAM (the
+  wire list is merged one layer out in `buildToolsSlot` and carries provider
+  schemas these maps never hold), with the full enumeration delegated to
+  `test/core/agent/toolDivergenceWalk.test.ts`. The second clause is unscoped and
+  unchanged: attention may alter the offer, but omission from the offer must not
+  be presented as proof of permanent capability loss. Only static skill-registry
+  tools are known to remain dispatchable after leaving the offer.
+
+- **`docs/design/2026-09-recorded-not-built.md`** — three real defects with
+  reproductions, deliberately not fixed: an inactive skill's tool shadows in
+  silence, the shadow report names the wrong source, and `skip_step` is
+  claimable by a provider. Each names what deciding to fix it would cost.
+
 ## [9.84.0] - 2026-09-03
 
 ### Fixed
@@ -30,9 +447,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   stands and which tools it could call, taken from the merged wire list the LLM
   stage actually sent, intersected with the skill's own declared tools — never
   from the declaration alone. Every configuration that would make that false has
-  its own wording: a skill declaring no tools says so, a step or park hold-out
-  says the tools were withheld rather than naming them, and a call whose wire
-  cannot be established says nothing about tools at all. Mechanically it is still
+  its own wording: a skill declaring no tools says so, a hold-out names the
+  declared tools and states that they were withheld — _corrected in 9.86.0:_ this
+  read "a step or park hold-out says the tools were withheld rather than naming
+  them", and the withheld arm does name them; a PARK never reaches the notice at
+  all, because a self-call at a parked map member is a re-engagement request
+  (9.59.0) answered on an earlier arm — and a call whose wire cannot be
+  established says nothing about tools at all. Mechanically it is still
   a rejection — no activation, no cursor move, and the refusal budget still
   counts it, because a self-call _loop_ is exactly the stuck model that budget
   exists to escalate.
@@ -81,12 +502,21 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 
 - **`saidByPerson(ctx)` / `isSaidByPerson(msg)` — telling what a person said from
-  what the library wrote.** Five classes of `role: 'user'` message are authored
-  by this library, not by a person: the compaction frame, the drop notice (whose
+  what the library wrote.** _Corrected in 9.86.0:_ this said "five classes", and
+  **seven** kinds of `role: 'user'` message are authored by this library, not by a
+  person. Five are registered here: the compaction frame, the drop notice (whose
   text names tools), the schema-check and evidence-check corrections, and any
-  injection-delivered message. The window's own refusal engine has always applied
-  that rule; a `when` predicate could not, because `InjectionContext.history`
-  exposes only `{ role, content, toolName? }`. An author writing an entry rule
+  injection-delivered message. The out-of-budget wrap-up instruction and the
+  stepped-skill nudge were library-authored the whole time and went unregistered
+  until 9.86.0. _Also corrected:_ the window's own refusal engine had not "always
+  applied that rule" — it applied a THREE-class version (drop notice, compaction
+  frame, injection-delivered), and 9.84.0 widened it to the five registered here,
+  so a schema-check or evidence-check frame can no longer become the protected
+  anchor. That widening changes the anchor only when the run's own message text is
+  absent from the window, because the anchor is matched by content first and only
+  falls back to the last thing a person said. A `when` predicate could apply no
+  version of it, because `InjectionContext.history` exposes only
+  `{ role, content, toolName? }`. An author writing an entry rule
   that reads history was silently matching on our own bookkeeping. One
   implementation, reused by both — the rule cannot drift between routing and the
   window.

package/dist/artifacts/present.js

@@ -67,10 +67,28 @@ async function presentArtifact(store, scope, args) {
     const meta = await store.head(scope, ref);
     if (meta === null) {
         const page = await store.list(scope, { limit: PRESENT_LIST_LIMIT });
+        // ANCHORED TO THE CALL, NOT TO THE MOMENT — BOTH ARMS. This refusal is a
+        // TOOL RESULT: it is written into `history` and re-read on every later call
+        // of the turn, including calls made after the model has stored something.
+        // "Nothing is live … right now" was therefore a forecast — true when
+        // composed, false the moment the run had an artifact — and a model
+        // re-reading it is being told its own stored data does not exist. The
+        // opening clause names the call (`present('<ref>')`), so the listing binds
+        // to that call and stays true wherever it is read.
+        //
+        // The STOCKED arm needed the same repair for the mirror-image reason, and
+        // did not get it until the sentence had a rule to fail: a bare "Live refs
+        // in scope: …" is a census, and a census goes wrong in both directions —
+        // a ref it names can be swept before the model re-reads it, and a ref
+        // minted since will be missing from it. Neither error is visible to the
+        // model, which reads a list and believes it is looking at the scope. Past
+        // tense plus the call it was taken for is the whole fix: an inventory of a
+        // finished moment cannot go stale.
         const listing = page.artifacts.length === 0
-            ? `Nothing is live in this run's scope right now — store the data first, then present ` +
-                `its ref.`
-            : `Live refs in scope: ${page.artifacts.map(describeRef).join(', ')}.`;
+            ? `Nothing was live in this run's scope when you made that call — store the data ` +
+                `first, then present its ref.`
+            : `These were live in this run's scope when you made that call: ` +
+                `${page.artifacts.map(describeRef).join(', ')}.`;
         return {
             ok: false,
             missedRef: ref,

package/dist/artifacts/present.js.map

@@ -1 +1 @@
-{"version":3,"file":"present.js","sourceRoot":"","sources":["../../src/artifacts/present.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAIH;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,SAAS,CAAC;AAyC3C,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,4EAA4E;AAC5E,SAAS,WAAW,CAAC,IAAkB;IACrC,OAAO,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,SAC9C,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EACpD,GAAG,CAAC;AACN,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,KAAoB,EACpB,IAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,kFAAkF;gBAClF,qFAAqF;gBACrF,UAAU;SACb,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,kFAAkF;gBAClF,IAAI,GAAG,2EAA2E;gBAClF,eAAe;SAClB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,qFAAqF;gBACrF,UAAU;YACZ,CAAC,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,GAAG;YACd,OAAO,EACL,YAAY,GAAG,iEAAiE;gBAChF,uDAAuD,OAAO,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,EAAE;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;aACtC;SACF;KACF,CAAC;AACJ,CAAC;AAzDD,0CAyDC"}
+{"version":3,"file":"present.js","sourceRoot":"","sources":["../../src/artifacts/present.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAIH;;;;GAIG;AACU,QAAA,iBAAiB,GAAG,SAAS,CAAC;AAyC3C,wEAAwE;AACxE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,4EAA4E;AAC5E,SAAS,WAAW,CAAC,IAAkB;IACrC,OAAO,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,SAC9C,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EACpD,GAAG,CAAC;AACN,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,KAAoB,EACpB,KAAoB,EACpB,IAAuC;IAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACnB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,kFAAkF;gBAClF,qFAAqF;gBACrF,UAAU;SACb,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,kFAAkF;gBAClF,IAAI,GAAG,2EAA2E;gBAClF,eAAe;SAClB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpE,yEAAyE;QACzE,4EAA4E;QAC5E,0EAA0E;QAC1E,qEAAqE;QACrE,mEAAmE;QACnE,sEAAsE;QACtE,2EAA2E;QAC3E,mDAAmD;QACnD,EAAE;QACF,0EAA0E;QAC1E,0EAA0E;QAC1E,yEAAyE;QACzE,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,mCAAmC;QACnC,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;YACzB,CAAC,CAAC,gFAAgF;gBAChF,8BAA8B;YAChC,CAAC,CAAC,+DAA+D;gBAC/D,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,SAAS,EAAE,GAAG;YACd,OAAO,EACL,YAAY,GAAG,iEAAiE;gBAChF,uDAAuD,OAAO,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GACT,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;IAC3F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE;YACN,SAAS,EAAE,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,EAAE;YACF,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;aACtC;SACF;KACF,CAAC;AACJ,CAAC;AA3ED,0CA2EC"}

package/dist/artifacts/wants.js

@@ -136,13 +136,28 @@ function describeSpokenValue(spoken) {
         return 'an empty string';
     return `a ${typeof spoken}`;
 }
-/** The correcting clause: what CAN resolve, or the honest "nothing can". */
+/** The correcting clause: what CAN resolve, or the honest "nothing can".
+ *
+ *  BOTH arms are PAST TENSE and bound to the refused call, because this clause
+ *  rides a TOOL RESULT — `resolveToolWants`'s combined refusal, which opens
+ *  "Tool 'X' was not executed" and is then re-read on every later call of the
+ *  turn. "No live artifacts exist … right now" was a forecast: the model mints
+ *  one two calls later and re-reads a sentence saying its data is not there. A
+ *  fact about the moment that call was refused cannot go stale.
+ *
+ *  The LISTING arm carries the same defect pointing the other way, and kept it
+ *  three lines from the fix until the checker grew a rule for a census: "Live
+ *  '<kind>' refs in scope: …" is read as the scope, and by the time it is
+ *  re-read a ref it names may have been swept and a ref minted since is
+ *  missing from it. The model cannot see either error — a list looks like a
+ *  list. So the list says WHEN it was taken, and "Pass one of these" stays
+ *  useful because a swept ref refuses again with a fresher list. */
 function liveRefsClause(kind, live) {
     if (live.length === 0) {
-        return (`No live '${kind}' artifacts exist in this run's scope right now — produce one first ` +
-            `(a tool that stores '${kind}', or re-run the step that minted it).`);
+        return (`No live '${kind}' artifacts were in this run's scope when that call was refused — ` +
+            `produce one first (a tool that stores '${kind}', or re-run the step that minted it).`);
     }
-    return `Live '${kind}' refs in scope: ${live
+    return `These '${kind}' refs were live in this run's scope when that call was refused: ${live
         .map(describeLiveRef)
         .join(', ')}. Pass one of these.`;
 }

package/dist/artifacts/wants.js.map

@@ -1 +1 @@
-{"version":3,"file":"wants.js","sourceRoot":"","sources":["../../src/artifacts/wants.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAEH,yCAAoD;AAWpD;;;;;;;;;;;GAWG;AACH,SAAgB,eAAe,CAC7B,QAAgB,EAChB,KAA4B,EAC5B,WAA0D;IAE1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,uDAAuD;YAClF,iEAAiE;YACjE,iFAAiF;YACjF,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,WAAW,KAAK,SAAS;QACzB,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ;QAC1C,WAAW,CAAC,UAAU,KAAK,IAAI;QAC7B,CAAC,CAAE,WAAW,CAAC,UAAgD;QAC/D,CAAC,CAAC,SAAS,CAAC;IAChB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;gBACpF,mFAAmF;gBACnF,gEAAgE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,+BAA+B;gBACrF,WAAW,OAAO,gEAAgE;gBAClF,mFAAmF;gBACnF,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,YAAY,GAChB,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAC/C,CAAC,CAAE,QAA+B,CAAC,IAAI;YACvC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,6BAA6B;gBACnF,0BAA0B,MAAM,CAAC,YAAY,CAAC,uCAAuC;gBACrF,yEAAyE;gBACzE,qBAAqB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAnDD,0CAmDC;AAuCD;4EAC4E;AAC5E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,WAA0D;IAE1D,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;4EAC4E;AAC5E,KAAK,UAAU,cAAc,CAC3B,KAAoB,EACpB,KAAoB,EACpB,IAAY;IAEZ,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,0EAA0E;IAC1E,4EAA4E;IAC5E,4DAA4D;IAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,IAAI,OAAO,IAAI,mBAAmB;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1D,KAAK,IAAI,CAAC,CAAC;IACb,CAAC,QAAQ,MAAM,KAAK,SAAS,IAAI,KAAK,GAAG,EAAE,EAAE;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,eAAe,CAAC,IAAkB;IACzC,OAAO,GAAG,IAAI,CAAC,GAAG,GAChB,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,SACxF,EAAE,CAAC;AACL,CAAC;AAED;;2DAE2D;AAC3D,SAAS,mBAAmB,CAAC,MAAe;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACzD,OAAO,KAAK,OAAO,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,IAAY,EAAE,IAA6B;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,YAAY,IAAI,sEAAsE;YACtF,wBAAwB,IAAI,wCAAwC,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,IAAI,oBAAoB,IAAI;SACzC,GAAG,CAAC,eAAe,CAAC;SACpB,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACI,KAAK,UAAU,gBAAgB,CACpC,KAAoB,EACpB,KAAoB,EACpB,QAAgB,EAChB,KAAgB,EAChB,IAAuC,EACvC,WAA+C;IAE/C,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,MAAM,YAAY,GAAmD,EAAE,CAAC;IACxE,MAAM,QAAQ,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACtD,qEAAqE;YACrE,6BAA6B;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACrC,oEAAoE;YACpE,mEAAmE;YACnE,uEAAuE;YACvE,uEAAuE;YACvE,mBAAmB;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,MAAM,EACJ,IAAI,OAAO,wEAAwE;oBACnF,IAAI,IAAI,6EAA6E;oBACrF,oEAAoE,OAAO,KAAK;oBAChF,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,MAAM,EACJ,IAAI,OAAO,0DAA0D;oBACrE,GAAG,mBAAmB,CAAC,MAAM,CAAC,wBAAwB;oBACtD,aAAa,IAAI,mEAAmE;oBACpF,aAAa,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAC5C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iCAAsB,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO;oBACP,IAAI;oBACJ,MAAM,EAAE,iBAAiB;oBACzB,GAAG,EAAE,MAAM;oBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,yDAAyD;wBACjF,6EAA6E;wBAC7E,uEAAuE;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,oBAAoB;gBAC5B,GAAG,EAAE,MAAM;gBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,0DAA0D;oBAClF,yBAAyB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,GAAG,EAAE,MAAM;gBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa;oBAC9E,mBAAmB,IAAI,+CAA+C;oBACtE,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ;YACR,OAAO,EACL,SAAS,QAAQ,qDAAqD;gBACtE,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB;gBACrD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC;AAlHD,4CAkHC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,KAAgB;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,CACL,SAAS,QAAQ,2CAA2C,QAAQ,sBAAsB;QAC1F,wFAAwF;QACxF,gEAAgE;QAChE,yFAAyF;QACzF,+EAA+E,CAChF,CAAC;AACJ,CAAC;AAXD,wDAWC"}
+{"version":3,"file":"wants.js","sourceRoot":"","sources":["../../src/artifacts/wants.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAEH,yCAAoD;AAWpD;;;;;;;;;;;GAWG;AACH,SAAgB,eAAe,CAC7B,QAAgB,EAChB,KAA4B,EAC5B,WAA0D;IAE1D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,uDAAuD;YAClF,iEAAiE;YACjE,iFAAiF;YACjF,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,WAAW,KAAK,SAAS;QACzB,OAAO,WAAW,CAAC,UAAU,KAAK,QAAQ;QAC1C,WAAW,CAAC,UAAU,KAAK,IAAI;QAC7B,CAAC,CAAE,WAAW,CAAC,UAAgD;QAC/D,CAAC,CAAC,SAAS,CAAC;IAChB,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;gBACpF,mFAAmF;gBACnF,gEAAgE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,+BAA+B;gBACrF,WAAW,OAAO,gEAAgE;gBAClF,mFAAmF;gBACnF,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,YAAY,GAChB,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAC/C,CAAC,CAAE,QAA+B,CAAC,IAAI;YACvC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,qBAAqB,QAAQ,oBAAoB,OAAO,6BAA6B;gBACnF,0BAA0B,MAAM,CAAC,YAAY,CAAC,uCAAuC;gBACrF,yEAAyE;gBACzE,qBAAqB,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAnDD,0CAmDC;AAuCD;4EAC4E;AAC5E,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CACvB,WAA0D;IAE1D,MAAM,QAAQ,GAAG,WAAW,EAAE,QAAQ,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC/C,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;4EAC4E;AAC5E,KAAK,UAAU,cAAc,CAC3B,KAAoB,EACpB,KAAoB,EACpB,IAAY;IAEZ,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,0EAA0E;IAC1E,4EAA4E;IAC5E,4DAA4D;IAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,GAAG,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM,IAAI,mBAAmB,IAAI,OAAO,IAAI,mBAAmB;gBAAE,OAAO,KAAK,CAAC;QAC1F,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1D,KAAK,IAAI,CAAC,CAAC;IACb,CAAC,QAAQ,MAAM,KAAK,SAAS,IAAI,KAAK,GAAG,EAAE,EAAE;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,SAAS,eAAe,CAAC,IAAkB;IACzC,OAAO,GAAG,IAAI,CAAC,GAAG,GAChB,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,SACxF,EAAE,CAAC;AACL,CAAC;AAED;;2DAE2D;AAC3D,SAAS,mBAAmB,CAAC,MAAe;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,iBAAiB,CAAC;IACzD,OAAO,KAAK,OAAO,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;oEAeoE;AACpE,SAAS,cAAc,CAAC,IAAY,EAAE,IAA6B;IACjE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CACL,YAAY,IAAI,oEAAoE;YACpF,0CAA0C,IAAI,wCAAwC,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,IAAI,oEAAoE,IAAI;SAC1F,GAAG,CAAC,eAAe,CAAC;SACpB,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACI,KAAK,UAAU,gBAAgB,CACpC,KAAoB,EACpB,KAAoB,EACpB,QAAgB,EAChB,KAAgB,EAChB,IAAuC,EACvC,WAA+C;IAE/C,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,MAAM,YAAY,GAAmD,EAAE,CAAC;IACxE,MAAM,QAAQ,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAE/C,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACtD,qEAAqE;YACrE,6BAA6B;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACrC,oEAAoE;YACpE,mEAAmE;YACnE,uEAAuE;YACvE,uEAAuE;YACvE,mBAAmB;YACnB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,MAAM,EACJ,IAAI,OAAO,wEAAwE;oBACnF,IAAI,IAAI,6EAA6E;oBACrF,oEAAoE,OAAO,KAAK;oBAChF,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,MAAM,EACJ,IAAI,OAAO,0DAA0D;oBACrE,GAAG,mBAAmB,CAAC,MAAM,CAAC,wBAAwB;oBACtD,aAAa,IAAI,mEAAmE;oBACpF,aAAa,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAC5C,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iCAAsB,EAAE,CAAC;gBAC1C,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO;oBACP,IAAI;oBACJ,MAAM,EAAE,iBAAiB;oBACzB,GAAG,EAAE,MAAM;oBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,yDAAyD;wBACjF,6EAA6E;wBAC7E,uEAAuE;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,oBAAoB;gBAC5B,GAAG,EAAE,MAAM;gBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,0DAA0D;oBAClF,yBAAyB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC;gBACZ,OAAO;gBACP,IAAI;gBACJ,MAAM,EAAE,eAAe;gBACvB,GAAG,EAAE,MAAM;gBACX,MAAM,EACJ,IAAI,OAAO,OAAO,MAAM,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,aAAa;oBAC9E,mBAAmB,IAAI,+CAA+C;oBACtE,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;aAClC,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,QAAQ;YACR,OAAO,EACL,SAAS,QAAQ,qDAAqD;gBACtE,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB;gBACrD,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACtE,CAAC;AAlHD,4CAkHC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CAAC,QAAgB,EAAE,KAAgB;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,IAAI,GAAG,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,CACL,SAAS,QAAQ,2CAA2C,QAAQ,sBAAsB;QAC1F,wFAAwF;QACxF,gEAAgE;QAChE,yFAAyF;QACzF,+EAA+E,CAChF,CAAC;AACJ,CAAC;AAXD,wDAWC"}

package/dist/core/Agent.js

@@ -2039,12 +2039,17 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         }
         const open = this.openSkillIds();
         const reachable = graphMenu;
+        // A decision `tree()` keeps no cursor, so every routing pick is refused by
+        // construction (9.86.0). The descriptor withholds the tool entirely when
+        // nothing is left to open, and explains the tree when something is.
+        const treeRouted = reachable !== undefined && this.skillGraphIsTree;
         return (args) => {
             const grantable = reachable
                 ? [...new Set([...reachable(args.currentSkillId), ...open])]
                 : undefined;
-            // Non-null: `skills` is non-empty, so the builder always returns a tool.
-            // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+            // `undefined` when the offer is WITHHELD — the tools slot then drops the
+            // schema from the request. (`skills` is non-empty, so an empty catalog is
+            // not one of the ways this can be undefined.)
             return (0, skillTools_js_1.buildReadSkillTool)(skills, {
                 ...(grantable !== undefined && { grantable }),
                 ...(args.hiddenSkillIds !== undefined && { hiddenIds: args.hiddenSkillIds }),
@@ -2054,7 +2059,8 @@ class Agent extends RunnerBase_js_1.RunnerBase {
                 // The turn-start menu (SG-C) — the tools slot passes it only while the
                 // verdict is outstanding; describeOffer leads with it.
                 ...(args.menu !== undefined && { menu: args.menu }),
-            }).schema;
+                ...(treeRouted && { treeRouted: true }),
+            })?.schema;
         };
     }
     /**
@@ -2945,7 +2951,7 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // auto-attached `present` tool when a store is attached, 9.22.0) +
         // skill-supplied tools (with autoActivate scoping); validates
         // name uniqueness; produces the dispatch map.
-        const { registryByName, toolSchemas } = (0, buildToolRegistry_js_1.buildToolRegistry)(registry, this.injections, {
+        const { registryByName, toolSchemas, toolDeclaringSkills } = (0, buildToolRegistry_js_1.buildToolRegistry)(registry, this.injections, {
             hasArtifactStore: artifactStore !== undefined,
         });
         // A statically registered tool that declares `wants` on an agent with no
@@ -3313,6 +3319,11 @@ class Agent extends RunnerBase_js_1.RunnerBase {
         // toolCallsHandler extracted to ./agent/stages/toolCalls.ts (v2.11.2).
         const toolCallsHandler = (0, toolCalls_js_1.buildToolCallsHandler)({
             registryByName,
+            // WHICH SKILLS DECLARE EACH TOOL NAME (9.86.0) — read by the unknown-tool
+            // roster so a role that may not see a skill is not told the names of the
+            // tools that skill brought. Value-conditional: an agent whose skills carry
+            // no tools hands the handler exactly the deps object it always did.
+            ...(toolDeclaringSkills.size > 0 && { toolDeclaringSkills }),
             // The claim ledger accumulates only for an agent that declared a
             // contract to read it (9.61.0) — value-conditional, so every other
             // agent commits exactly what it always did.