skillscript-runtime 0.8.0 → 0.9.6

package/dist/runtime.d.ts

@@ -62,8 +62,11 @@ export interface ExecuteContext {
     /** Persistence backend for trace records. Wires alongside `trace`. */
     traceStore?: TraceStore;
     /**
-     * Trigger context for trace identity + sampling. Scheduler passes the
-     * fired trigger's metadata; direct callers can synthesize.
+     * Trigger context for trace identity + sampling + DeliveryMeta.origin.
+     * Scheduler passes the fired trigger's metadata; direct callers can
+     * synthesize. v0.9.6 — `source` values are constrained to the Q8 enum
+     * (cron / session / webhook / agent / cli / dashboard / inline) when
+     * the value flows into DeliveryMeta.origin.trigger_kind.
      */
     triggerCtx?: {
         source: string;
@@ -71,6 +74,23 @@ export interface ExecuteContext {
         fired_at_ms: number;
         trigger_id?: string;
     };
+    /**
+     * v0.9.6 — root entry-point skill name for composition chains. When
+     * skill A inlines B via `&`, A's execution sets this; B's nested
+     * execute() inherits it; B's deliver()-time meta gets
+     * `entry_skill_name = A`. Undefined for top-level execution (the
+     * emitter IS the entry skill).
+     */
+    entrySkillName?: string;
+    /**
+     * v0.9.6 — current skill's name + frontmatter eventType, stashed by
+     * `execute()` at the top of the per-skill run so deep-stack op
+     * handlers (notify(), etc.) can build DeliveryMeta without threading
+     * `parsed` through every call hop. Internal-use; do not set from
+     * outside execute().
+     */
+    _currentSkillName?: string;
+    _currentSkillEventType?: string | null;
     /** Skill identity for trace records. Optional — falls back to parsed.name + version inference. */
     skillVersion?: string;
     /**
@@ -100,11 +120,29 @@ export interface ExecutionError {
     remediation?: string;
     innerCause?: string;
 }
+/**
+ * v0.9.2 — fallback-fire record per P1.4. When an op's `(fallback: ...)`
+ * trailer absorbs a dispatch failure, the runtime appends one record so
+ * callers can distinguish "real success" from "fallback substituted."
+ * Previously the caller saw `errors: []` either way and couldn't tell.
+ */
+export interface FallbackRecord {
+    target: string;
+    opKind: string;
+    value: unknown;
+    reason: string;
+}
 export interface ExecuteResult {
     finalVars: Record<string, unknown>;
     emissions: string[];
     outputs: Record<string, unknown>;
     errors: ExecutionError[];
+    /**
+     * v0.9.2 — fallback events. Populated when an op's `(fallback: ...)`
+     * trailer caught a dispatch failure. Empty array when no fallbacks
+     * fired. Inspect `length > 0` to detect partial-success runs.
+     */
+    fallbacks: FallbackRecord[];
     targetOrder: string[];
     /**
      * Delivery receipts from `AgentConnector.deliver` calls fired after the
@@ -121,6 +159,17 @@ export interface AgentDeliveryReceiptRecord {
     agent_id: string;
     output_kind: "agent" | "template";
     receipt: DeliveryReceipt;
+    /**
+     * v0.9.2 — true when no real AgentConnector was wired and the
+     * NoOpAgentConnector fallback "handled" the dispatch (i.e. accepted
+     * the payload without delivering it anywhere). Cold authors writing
+     * `# Output: agent: oncall` skills against a runtime without an
+     * AgentConnector get a clear signal that the delivery didn't happen.
+     * Per P1.1 finding in `dec3ca8a`.
+     */
+    delivery_skipped?: boolean;
+    /** Human-readable reason when `delivery_skipped: true`. */
+    reason?: string;
 }
 /**
  * Execute a parsed skill against the live variable state. Walks targets in

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAuB,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAqB,MAAM,uBAAuB,CAAC;AAIhF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAezD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+HAA+H;IAC/H,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,qGAAqG;IACrG,qBAAqB,CAAC,EAAE,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,8FAA8F;IAC9F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;OAQG;IACH,qBAAqB,EAAE,0BAA0B,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,GAAG,UAAU,CAAC;IAClC,OAAO,EAAE,eAAe,CAAC;CAC1B;AAOD;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,KAAK,EAAE,MAAM,EAAE,EACf,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,aAAa,CAAC,CAkMxB;AAu/BD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAoClF;AAmCD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAY3E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAMjD;AAsHD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAsB/E"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAuB,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAgB,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAK3E,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAgBzD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE1D;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,QAAQ,CAAC;IACnB,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+HAA+H;IAC/H,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF,qGAAqG;IACrG,qBAAqB,CAAC,EAAE,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC1B,OAAO,CAAC,aAAa,CAAC,CAAC;IAC5B,8FAA8F;IAC9F,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,sEAAsE;IACtE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,kGAAkG;IAClG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB;;;;OAIG;IACH,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;OAQG;IACH,qBAAqB,EAAE,0BAA0B,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,OAAO,GAAG,UAAU,CAAC;IAClC,OAAO,EAAE,eAAe,CAAC;IACzB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoDD;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,WAAW,EACnB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACpC,KAAK,EAAE,MAAM,EAAE,EACf,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,aAAa,CAAC,CA8MxB;AAoiCD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAYxF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAoClF;AAmCD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAY3E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAMjD;AAsHD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAsB/E"}

package/dist/runtime.js

@@ -1,11 +1,52 @@
+import { randomUUID } from "node:crypto";
 import { tokenizeKeywordArgs } from "./parser.js";
 import { applyFilter, parseFilterChain } from "./filters.js";
 import { dispatchExecuteSkillIntercept } from "./composition.js";
+import { validateQualifiedDispatch } from "./dispatch-validate.js";
 import { spawn } from "node:child_process";
 import { readFile as fsReadFile, writeFile as fsWriteFile, mkdir as fsMkdir } from "node:fs/promises";
 import { dirname as pathDirname } from "node:path";
 import { OpError, ConnectorNotFoundError, OpTimeoutError, InteractiveOpInAutonomousModeError, UnsafeShellDisabledError, UnresolvedVariableError, TypeMismatchError, MissingSkillReferenceError, } from "./errors.js";
 import { TraceBuilder, shouldTraceFire } from "./trace.js";
+/**
+ * v0.9.6 audit Q8 — build the `DeliveryMeta` envelope for an `AgentConnector.deliver()`
+ * call. Runtime is the sole producer of meta; adopters consume but never construct.
+ *
+ * - `dispatch_id` is one UUID per call to this helper. Lifecycle hook callers and
+ *   notify() callers each call it once per emit; multi-connector broadcast (one
+ *   notify(), N wired connectors) shares the same id across all N deliver() calls
+ *   because we hold the same `meta` reference across the loop.
+ * - `sent_at` is the runtime emit-clock (NOT the substrate's delivered_at).
+ * - `origin.trigger_kind` maps from `ctx.triggerCtx.source` per Q8 enum.
+ *   `inline` is the fallback when no triggerCtx is set.
+ * - `origin.entry_skill_name` propagates from `ctx.entrySkillName` (set when
+ *   composition runs an inner skill).
+ * - `origin.caller_agent_id` propagates from `ctx.agentId` when the chain was
+ *   started by an agent (cron/cli/dashboard/inline triggers leave it undefined).
+ * - `event_type` precedence: opOverrides.event_type ?? parsed.eventType ?? undefined.
+ *   `notify(event_type=...)` kwarg wins; `# Event-type:` frontmatter is the fallback.
+ * - `correlation_id` only set when explicitly passed via opOverrides (notify()
+ *   kwarg). Lifecycle hooks always emit with correlation_id undefined per Q8.
+ */
+function buildLifecycleMeta(skillName, frontmatterEventType, ctx, opOverrides) {
+    const triggerKind = (ctx.triggerCtx?.source ?? "inline");
+    const eventType = opOverrides?.event_type ?? frontmatterEventType ?? undefined;
+    const name = skillName ?? "(unnamed)";
+    return {
+        dispatch_id: randomUUID(),
+        sent_at: Date.now(),
+        origin: {
+            skill_name: name,
+            ...(ctx.entrySkillName !== undefined && ctx.entrySkillName !== name
+                ? { entry_skill_name: ctx.entrySkillName }
+                : {}),
+            trigger_kind: triggerKind,
+            ...(ctx.agentId !== undefined ? { caller_agent_id: ctx.agentId } : {}),
+        },
+        ...(eventType !== undefined ? { event_type: eventType } : {}),
+        ...(opOverrides?.correlation_id !== undefined ? { correlation_id: opOverrides.correlation_id } : {}),
+    };
+}
 /**
  * Execute a parsed skill against the live variable state. Walks targets in
  * the provided order. Each target's ops run sequentially; on failure the
@@ -28,7 +69,9 @@ export async function execute(parsed, initialVars, order, ctx) {
     vars.set("NOW", new Date(nowMs).toISOString());
     vars.set("USER", ctx.agentId ?? "unknown");
     vars.set("SESSION_CONTEXT", "");
-    vars.set("TRIGGER_TYPE", "manual");
+    // v0.9.6 — "manual" enum value dropped per audit Q12; "inline" is the
+    // fallback for runtime-direct callers without explicit trigger context.
+    vars.set("TRIGGER_TYPE", "inline");
     vars.set("TRIGGER_PAYLOAD", "");
     vars.set("EVENT.fired_at", nowMs);
     vars.set("EVENT.fired_at_unix", nowSec);
@@ -44,14 +87,21 @@ export async function execute(parsed, initialVars, order, ctx) {
     }
     const emissions = [];
     const errors = [];
+    const fallbacks = [];
     let lastBoundVar = null;
     const absoluteTimeoutMs = ctx.absoluteTimeoutMs ?? DEFAULT_RUNTIME_ABSOLUTE_TIMEOUT_MS;
     // Trace recording (per ERD §8). Build when shouldTraceFire returns true;
     // skip entirely when off (the NFR-11 floor — errors still surface via
     // `result.errors[]`).
-    const triggerCtx = ctx.triggerCtx ?? { source: "manual", name: "", fired_at_ms: nowMs };
+    // v0.9.6 — "manual" enum value dropped per audit Q12; "inline" is the
+    // fallback for callers without explicit trigger context.
+    const triggerCtx = ctx.triggerCtx ?? { source: "inline", name: "", fired_at_ms: nowMs };
     const triggerId = triggerCtx.trigger_id ?? `${triggerCtx.source}:${triggerCtx.name}`;
     const skillName = parsed.name ?? "(anonymous)";
+    // v0.9.6 — stash skill identity onto ctx so deep-stack op handlers
+    // (notify()) can read for DeliveryMeta without threading `parsed`
+    // through every call hop. Internal convention; do not set from outside.
+    ctx = { ...ctx, _currentSkillName: skillName, _currentSkillEventType: parsed.eventType };
     const traceBuilder = shouldTraceFire(ctx.trace, triggerId, skillName)
         ? new TraceBuilder(skillName, ctx.skillVersion ?? "unknown", triggerCtx, { agent_id: ctx.agentId })
         : null;
@@ -62,7 +112,7 @@ export async function execute(parsed, initialVars, order, ctx) {
         let targetLastBound = null;
         let targetLastValue = undefined;
         try {
-            const r = await execOps(target.ops, vars, emissions, ctx, targetName, parsed.timeout, absoluteTimeoutMs, traceBuilder);
+            const r = await execOps(target.ops, vars, emissions, fallbacks, ctx, targetName, parsed.timeout, absoluteTimeoutMs, traceBuilder);
             targetLastBound = r.lastBoundVar;
             targetLastValue = r.lastBoundVar !== null ? vars.get(r.lastBoundVar) : r.lastValue;
         }
@@ -70,7 +120,7 @@ export async function execute(parsed, initialVars, order, ctx) {
             errors.push(buildExecutionError(err, targetName));
             if (target.elseBlock !== undefined) {
                 try {
-                    const r = await execOps(target.elseBlock, vars, emissions, ctx, targetName, parsed.timeout, absoluteTimeoutMs, traceBuilder);
+                    const r = await execOps(target.elseBlock, vars, emissions, fallbacks, ctx, targetName, parsed.timeout, absoluteTimeoutMs, traceBuilder);
                     targetLastBound = r.lastBoundVar;
                     targetLastValue = r.lastBoundVar !== null ? vars.get(r.lastBoundVar) : r.lastValue;
                 }
@@ -153,28 +203,31 @@ export async function execute(parsed, initialVars, order, ctx) {
             const key = `${decl.kind}:${decl.target}`;
             const body = String(outputs[key] ?? emissions.join("\n"));
             const agent = ctx.registry.getAgentConnector();
-            // Common provenance + augmenting-context fields populated alongside
-            // every delivery (v0.2.6). source_skill identifies the authoring
-            // skill; triggered_by lets the receiver disambiguate cron vs manual
-            // vs session-boundary fires; delivery_context + templates surface the
-            // optional `# Delivery-context:` and `# Templates:` frontmatter.
-            const common = {
-                ...(parsed.name !== null ? { source_skill: parsed.name } : {}),
-                ...(ctx.triggerCtx !== undefined ? {
-                    triggered_by: {
-                        source: ctx.triggerCtx.source,
-                        name: ctx.triggerCtx.name,
-                        fired_at_ms: ctx.triggerCtx.fired_at_ms,
-                    },
-                } : {}),
-                ...(parsed.deliveryContext !== null ? { delivery_context: parsed.deliveryContext } : {}),
-                ...(parsed.templates.length > 0 ? { templates: parsed.templates } : {}),
-            };
+            // v0.9.6 audit Q8 — build DeliveryMeta per the locked v1.0 shape.
+            // Runtime auto-fills dispatch_id, sent_at, origin; threads optional
+            // event_type from frontmatter (`# Event-type:` fallback per Q9).
+            // Lifecycle hook deliveries carry no correlation_id (Q8 design
+            // boundary — that's notify()-kwarg territory).
+            const meta = buildLifecycleMeta(parsed.name, parsed.eventType, ctx);
+            // v0.9.2 — P1.1 flag the no-op dispatch case. When no real
+            // AgentConnector is wired, the NoOp fallback accepts the deliver
+            // call without doing anything; cold authors get a clear signal.
+            const hasRealConnector = ctx.registry.hasAgentConnector();
             try {
                 const receipt = decl.kind === "agent"
-                    ? await agent.deliver(decl.target, { kind: "augment", content: body, ...common })
-                    : await agent.deliver(decl.target, { kind: "template", prompt: body, ...common });
-                agentDeliveryReceipts.push({ agent_id: decl.target, output_kind: decl.kind, receipt });
+                    ? await agent.deliver(decl.target, { kind: "augment", content: body, meta })
+                    : await agent.deliver(decl.target, { kind: "template", prompt: body, meta });
+                const record = { agent_id: decl.target, output_kind: decl.kind, receipt };
+                if (!hasRealConnector) {
+                    record.delivery_skipped = true;
+                    record.reason = `No AgentConnector wired for runtime; NoOpAgentConnector accepted but didn't deliver. Wire an AgentConnector via registry.registerAgentConnector('primary', <YourImpl>) to enable real delivery.`;
+                }
+                else if (receipt.delivery_skipped === true) {
+                    // v0.9.6 Q7 — connector signaled accept-but-not-pushed (offline,
+                    // rate-limit drop, etc.). Honor the contract-level signal.
+                    record.delivery_skipped = true;
+                }
+                agentDeliveryReceipts.push(record);
             }
             catch (err) {
                 // Delivery failure is non-fatal — record alongside other errors so
@@ -203,15 +256,16 @@ export async function execute(parsed, initialVars, order, ctx) {
         emissions,
         outputs,
         errors,
+        fallbacks,
         targetOrder: order,
         agentDeliveryReceipts,
     };
 }
-async function execOps(ops, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
+async function execOps(ops, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
     let lastBoundVar = null;
     let lastValue = undefined;
     for (const op of ops) {
-        const r = await execOp(op, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
+        const r = await execOp(op, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
         if (r.lastBoundVar !== null) {
             lastBoundVar = r.lastBoundVar;
             lastValue = r.lastValue;
@@ -222,11 +276,11 @@ async function execOps(ops, vars, emissions, ctx, targetName, skillTimeoutSec, a
     }
     return { lastBoundVar, lastValue };
 }
-async function execOp(op, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
+async function execOp(op, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
     const startMs = traceBuilder !== null ? Date.now() : 0;
     let errored = false;
     try {
-        return await execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
+        return await execOpInner(op, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
     }
     catch (err) {
         errored = true;
@@ -261,7 +315,7 @@ function extractOpConnector(op) {
         default: return undefined;
     }
 }
-async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
+async function execOpInner(op, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder) {
     switch (op.kind) {
         case "$set": {
             // v0.5.0 item 3 — `$set X = "...$(REF)..."` now resolves $(REF) at
@@ -429,6 +483,14 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
                     vars.set(flatKey, fallbackValue);
                     if (op.outputVar !== undefined)
                         vars.set(op.outputVar, fallbackValue);
+                    // v0.9.2 — P1.4 record fallback firing so callers can distinguish
+                    // "read succeeded" from "fallback substituted."
+                    fallbacks.push({
+                        target: targetName,
+                        opKind: "file_read",
+                        value: fallbackValue,
+                        reason: `file_read failed: ${err.message}`,
+                    });
                     return { lastBoundVar: op.outputVar ?? flatKey, lastValue: fallbackValue };
                 }
                 throw makeOpError("file_read", `\`file_read(path="${path}")\` in target '${targetName}' failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -456,6 +518,9 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
             catch (err) {
                 throw makeOpError("file_write", `\`file_write(path="${path}")\` in target '${targetName}' failed: ${err instanceof Error ? err.message : String(err)}`);
             }
+            // v0.9.2 — P2.5 transcript line on successful write so cold authors
+            // can confirm side effects landed without reading the file back.
+            emissions.push(`[file_write] wrote ${Buffer.byteLength(content, "utf8")} bytes to ${path}`);
             return { lastBoundVar: null, lastValue: undefined };
         }
         case "notify": {
@@ -486,6 +551,15 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
             // connector failures are recorded in the ACK but don't propagate.
             const allConnectors = ctx.registry.listAgentConnectors();
             const dispatched = [];
+            // v0.9.6 audit Q8 — ONE notify() op invocation = ONE dispatch_id across
+            // every wired connector that gets the deliver() call. Same payload + meta
+            // for the whole fanout; receivers dedupe substrate retries by dispatch_id.
+            // event_type / correlation_id come from the notify() kwargs (per-emit
+            // override of any frontmatter fallback).
+            const notifyMeta = buildLifecycleMeta(ctx._currentSkillName ?? null, ctx._currentSkillEventType ?? null, ctx, {
+                event_type: op.notifyParams?.event_type,
+                correlation_id: op.notifyParams?.correlation_id,
+            });
             for (const entry of allConnectors) {
                 if (restrictConnectors !== undefined && !restrictConnectors.includes(entry.name))
                     continue;
@@ -504,6 +578,7 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
                     await entry.instance.deliver(agent, {
                         kind: "augment",
                         content: message,
+                        meta: notifyMeta,
                     });
                     dispatched.push({ connector: entry.name, ok: true });
                 }
@@ -606,10 +681,19 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
             // an explicit connector name is set (op.mcpConnector !== undefined)
             // — the implicit "primary" path is for embedder-wired connectors
             // that don't go through connectors.json.
+            //
+            // v0.9.1 — extended to call the shared `validateQualifiedDispatch`
+            // helper so runtime and lint use the SAME source of truth. Catches
+            // unknown-tool-on-connector at runtime when lint was skipped.
             if (op.mcpConnector !== undefined && ctx.registry.hasMcpConnector(connectorName)) {
-                const allowed = ctx.registry.getMcpConnectorAllowedTools(connectorName);
-                if (allowed !== undefined && !allowed.includes(toolName)) {
-                    throw makeOpError("$", `\`$ ${connectorName}.${toolName}\` is not in the allowlist for connector '${connectorName}'. ${allowed.length === 0 ? "Allowlist is empty (no tools permitted)." : `Allowed: ${allowed.join(", ")}.`} (Defense-in-depth: lint should have caught this earlier.)`);
+                const diagnostics = validateQualifiedDispatch({
+                    toolName,
+                    qualifiedConnector: connectorName,
+                    registry: ctx.registry,
+                });
+                const blocking = diagnostics.find((d) => d.severity === "error");
+                if (blocking !== undefined) {
+                    throw makeOpError("$", `${blocking.message} (Defense-in-depth: lint should have caught this earlier.)`);
                 }
             }
             let rawResult;
@@ -644,6 +728,13 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
                     vars.set(flatKey, dollarFallback);
                     if (op.outputVar !== undefined)
                         vars.set(op.outputVar, dollarFallback);
+                    // v0.9.2 — P1.4 record the fallback substitution
+                    fallbacks.push({
+                        target: targetName,
+                        opKind: "$",
+                        value: dollarFallback,
+                        reason: `$ ${connectorLabel}${toolName} failed: ${err.message}`,
+                    });
                     return { lastBoundVar: op.outputVar ?? flatKey, lastValue: dollarFallback };
                 }
                 throw err;
@@ -781,7 +872,7 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
             let last = { lastBoundVar: null, lastValue: undefined };
             for (const item of listVal) {
                 vars.set(iterName, item);
-                last = await execOps(op.foreachBody, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
+                last = await execOps(op.foreachBody, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
             }
             for (const k of Array.from(vars.keys())) {
                 if (!before.has(k))
@@ -792,11 +883,11 @@ async function execOpInner(op, vars, emissions, ctx, targetName, skillTimeoutSec
         case "if": {
             for (const branch of op.ifBranches) {
                 if (evalCondition(branch.cond, vars)) {
-                    return execOps(branch.body, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
+                    return execOps(branch.body, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
                 }
             }
             if (op.ifElseBody !== undefined) {
-                return execOps(op.ifElseBody, vars, emissions, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
+                return execOps(op.ifElseBody, vars, emissions, fallbacks, ctx, targetName, skillTimeoutSec, absoluteTimeoutMs, traceBuilder);
             }
             return { lastBoundVar: null, lastValue: undefined };
         }