veryfront 0.1.1213 → 0.1.1215

package/esm/src/agent/runtime/load-skill-tool.js

@@ -1,8 +1,7 @@
 import { defineSchema, lazySchema } from "../../schemas/index.js";
 import { INPUT_VALIDATION_FAILED } from "../../errors/index.js";
-import { matchesAllowedTool } from "../../skill/allowed-tools.js";
 import { zodToJsonSchema } from "../../tool/schema/zod-json-schema.js";
-import { LOAD_SKILL_CONTINUE_SAME_TURN, LOAD_SKILL_DELEGATION_THRESHOLD, LOAD_SKILL_OVERRIDE_FORWARDING, LOAD_SKILL_ROOT_OWNERSHIP, LOAD_SKILL_TOOL_INTERSECTION, } from "../conversation/delegation-policy.js";
+import { LOAD_SKILL_CONTINUE_SAME_TURN, LOAD_SKILL_DELEGATION_THRESHOLD, LOAD_SKILL_OVERRIDE_FORWARDING, LOAD_SKILL_ROOT_OWNERSHIP, } from "../conversation/delegation-policy.js";
 import { listRuntimeBuiltinSkillReferencesWithinLimit, readRuntimeBuiltinSkillReferenceWithinLimit, readRuntimeBuiltinSkillWithinLimit, } from "./builtin-skill-files.js";
 import { createSkillOperationBudget, } from "../../skill/operation-budget.js";
 import { SKILL_ALLOWED_TOOL_MAX_PATTERNS, SKILL_ALLOWED_TOOL_PATTERN_MAX_LENGTH, SKILL_DOCUMENT_MAX_CHARACTERS, SKILL_FILE_OPERATION_TIMEOUT_MS, SKILL_ID_MAX_LENGTH, SKILL_LOADABLE_REFERENCE_MAX_ENTRIES, SKILL_RELATIVE_PATH_MAX_LENGTH, SKILL_RUNTIME_AVAILABLE_TOOL_MAX_ENTRIES, SKILL_RUNTIME_LOADED_REFERENCE_CACHE_MAX_ENTRIES, SKILL_RUNTIME_LOADED_SKILL_CACHE_MAX_ENTRIES, } from "../../skill/limits.js";
@@ -23,13 +22,10 @@ function isRuntimeLoadSkillArray(value) {
     }
 }
 /** Fail-closed continuation note used when no delegation tool is known available. */
-export const RUNTIME_LOAD_SKILL_CONTINUATION_NOTE = `IMPORTANT: load_skill only loads instructions. It does not perform the task or finish the turn. ${LOAD_SKILL_CONTINUE_SAME_TURN} ${LOAD_SKILL_ROOT_OWNERSHIP} ${LOAD_SKILL_TOOL_INTERSECTION}`;
+export const RUNTIME_LOAD_SKILL_CONTINUATION_NOTE = `IMPORTANT: load_skill only loads instructions. It does not perform the task or finish the turn. ${LOAD_SKILL_CONTINUE_SAME_TURN} ${LOAD_SKILL_ROOT_OWNERSHIP}`;
 /** Shared runtime load skill description value. */
-export const RUNTIME_LOAD_SKILL_DESCRIPTION = `Load the full instructions for a skill. Use this when you need detailed guidance for a specific task type. If the skill specifies allowed-tools, you MUST only use those tools while following this skill. load_skill does not perform the task by itself. ${LOAD_SKILL_CONTINUE_SAME_TURN} ${LOAD_SKILL_ROOT_OWNERSHIP} ${LOAD_SKILL_DELEGATION_THRESHOLD} First call load_skill with only skillId. Use the optional \`file\` parameter only after the skill is loaded and only for a reference file listed by that loaded skill.`;
+export const RUNTIME_LOAD_SKILL_DESCRIPTION = `Load the full instructions for a skill. Use this when you need detailed guidance for a specific task type. load_skill does not perform the task by itself. ${LOAD_SKILL_CONTINUE_SAME_TURN} ${LOAD_SKILL_ROOT_OWNERSHIP} ${LOAD_SKILL_DELEGATION_THRESHOLD} First call load_skill with only skillId. Use the optional \`file\` parameter only after the skill is loaded and only for a reference file listed by that loaded skill.`;
 const DEFAULT_RUNTIME_LOAD_SKILL_RESPONSE_MESSAGES = {
-    allowedToolsNote: "IMPORTANT: While following this skill, you MUST only use the tools listed in allowedTools.",
-    noCurrentRunToolsNote: "IMPORTANT: While following this skill, no direct-execution tools from this skill are available in the current run. allowedTools is intentionally empty; do not attempt direct tool execution in this run.",
-    unavailableCurrentRunToolsDelegationNote: "IMPORTANT: Some tools required by this skill are not available in the current run. Use an available scoped agent_<id> delegation tool for the isolated work, or invoke_agent only when that exact legacy tool is present.",
     overrideNote: LOAD_SKILL_OVERRIDE_FORWARDING,
     referenceNote: "After this skill is loaded, use load_skill with the `file` parameter only for one of these listed reference files.",
 };
@@ -40,15 +36,15 @@ function getAvailableScopedDelegateToolNames(availableToolNames) {
 }
 function buildRuntimeLoadSkillDelegationAdvice(availableToolNames) {
     if (availableToolNames === undefined) {
-        return `For multi-step or isolated work, call invoke_agent; otherwise keep working directly with the allowed tools. ${LOAD_SKILL_DELEGATION_THRESHOLD} ${LOAD_SKILL_OVERRIDE_FORWARDING}`;
+        return `For multi-step or isolated work, call invoke_agent; otherwise keep working directly with the available tools. ${LOAD_SKILL_DELEGATION_THRESHOLD} ${LOAD_SKILL_OVERRIDE_FORWARDING}`;
     }
     const scopedDelegateToolNames = getAvailableScopedDelegateToolNames(availableToolNames);
     if (scopedDelegateToolNames.length > 0) {
         const tools = scopedDelegateToolNames.map((toolName) => `\`${toolName}\``).join(", ");
-        return `For multi-step or isolated work, use only these available scoped delegation tools: ${tools}; otherwise keep working directly with the allowed tools. ${LOAD_SKILL_DELEGATION_THRESHOLD}`;
+        return `For multi-step or isolated work, use only these available scoped delegation tools: ${tools}; otherwise keep working directly with the available tools. ${LOAD_SKILL_DELEGATION_THRESHOLD}`;
     }
     if (availableToolNames.includes("invoke_agent")) {
-        return `For multi-step or isolated work, call the available legacy invoke_agent tool; otherwise keep working directly with the allowed tools. ${LOAD_SKILL_DELEGATION_THRESHOLD} ${LOAD_SKILL_OVERRIDE_FORWARDING}`;
+        return `For multi-step or isolated work, call the available legacy invoke_agent tool; otherwise keep working directly with the available tools. ${LOAD_SKILL_DELEGATION_THRESHOLD} ${LOAD_SKILL_OVERRIDE_FORWARDING}`;
     }
     return "";
 }
@@ -59,31 +55,8 @@ function buildRuntimeLoadSkillContinuationNote(availableToolNames) {
         LOAD_SKILL_CONTINUE_SAME_TURN,
         LOAD_SKILL_ROOT_OWNERSHIP,
         delegationAdvice,
-        LOAD_SKILL_TOOL_INTERSECTION,
     ].filter((part) => part.length > 0).join(" ");
 }
-function buildUnavailableCurrentRunToolsDelegationNote(availableToolNames) {
-    if (availableToolNames === undefined) {
-        return DEFAULT_RUNTIME_LOAD_SKILL_RESPONSE_MESSAGES.unavailableCurrentRunToolsDelegationNote;
-    }
-    const scopedDelegateToolNames = getAvailableScopedDelegateToolNames(availableToolNames);
-    if (scopedDelegateToolNames.length > 0) {
-        const tools = scopedDelegateToolNames.map((toolName) => `\`${toolName}\``).join(", ");
-        return `IMPORTANT: Some tools required by this skill are not available in the current run. Use only these available scoped delegation tools for isolated work: ${tools}.`;
-    }
-    if (availableToolNames.includes("invoke_agent")) {
-        return "IMPORTANT: Some tools required by this skill are not available in the current run. Use the available legacy invoke_agent tool for isolated work.";
-    }
-    return "";
-}
-function getEffectiveAvailableToolNames(response, availableToolNames) {
-    const allowedTools = response.allowedTools;
-    if (availableToolNames === undefined)
-        return [];
-    if (allowedTools === undefined)
-        return [...availableToolNames];
-    return availableToolNames.filter((toolName) => allowedTools.some((pattern) => matchesAllowedTool(toolName, pattern)));
-}
 function rememberBoundedRecordValue(record, key, value, maxEntries) {
     const keys = Object.keys(record);
     const keyIsEnumerable = keys.includes(key);
@@ -246,19 +219,10 @@ function snapshotRuntimeLoadSkillAvailableToolNames(value) {
         },
     });
 }
-function snapshotRuntimeLoadSkillResponseMessages(messages, availableToolNames) {
+function snapshotRuntimeLoadSkillResponseMessages(messages) {
     if (messages !== undefined && (!messages || typeof messages !== "object")) {
         throw new TypeError("Runtime load skill messages must be an object");
     }
-    const allowedToolsNote = messages === undefined
-        ? undefined
-        : readRuntimeLoadSkillDataProperty(messages, "allowedToolsNote", "Runtime load skill messages");
-    const noCurrentRunToolsNote = messages === undefined
-        ? undefined
-        : readRuntimeLoadSkillDataProperty(messages, "noCurrentRunToolsNote", "Runtime load skill messages");
-    const configuredDelegationNote = messages === undefined
-        ? undefined
-        : readRuntimeLoadSkillDataProperty(messages, "unavailableCurrentRunToolsDelegationNote", "Runtime load skill messages");
     const overrideNote = messages === undefined
         ? undefined
         : readRuntimeLoadSkillDataProperty(messages, "overrideNote", "Runtime load skill messages");
@@ -266,14 +230,7 @@ function snapshotRuntimeLoadSkillResponseMessages(messages, availableToolNames)
         ? undefined
         : readRuntimeLoadSkillDataProperty(messages, "referenceNote", "Runtime load skill messages");
     return {
-        configuredDelegationNote: configuredDelegationNote,
         messages: {
-            allowedToolsNote: allowedToolsNote ??
-                DEFAULT_RUNTIME_LOAD_SKILL_RESPONSE_MESSAGES.allowedToolsNote,
-            noCurrentRunToolsNote: noCurrentRunToolsNote ??
-                DEFAULT_RUNTIME_LOAD_SKILL_RESPONSE_MESSAGES.noCurrentRunToolsNote,
-            unavailableCurrentRunToolsDelegationNote: configuredDelegationNote ??
-                buildUnavailableCurrentRunToolsDelegationNote(availableToolNames),
             overrideNote: overrideNote ??
                 DEFAULT_RUNTIME_LOAD_SKILL_RESPONSE_MESSAGES.overrideNote,
             referenceNote: referenceNote ??
@@ -288,29 +245,16 @@ function buildLoadedSkillResponse(input) {
     const availableToolNames = snapshotRuntimeLoadSkillAvailableToolNames(readRuntimeLoadSkillDataProperty(input.options.context, "availableToolNames", "Runtime load skill context"));
     const logger = readRuntimeLoadSkillDataProperty(input.options, "logger", "Runtime load skill options");
     const skillDocumentParserProvider = readRuntimeLoadSkillDataProperty(input.options, "skillDocumentParserProvider", "Runtime load skill options");
-    const { configuredDelegationNote, messages: responseMessages } = snapshotRuntimeLoadSkillResponseMessages(messagesInput, availableToolNames);
-    const preliminaryResponse = buildStrictRuntimeLoadedSkillResponse({
-        skillId: input.skillId,
-        instructions: input.instructions,
-        nextStep: configuredNextStep ?? "",
-        messages: responseMessages,
-        references: input.references,
-        availableToolNames,
-        skillDocumentParserProvider,
-    });
-    const effectiveAvailableToolNames = getEffectiveAvailableToolNames(preliminaryResponse, availableToolNames);
+    const { messages: responseMessages } = snapshotRuntimeLoadSkillResponseMessages(messagesInput);
+    // Fail closed on an unknown tool inventory: an undefined list must not be
+    // read as "every delegate tool is present".
     const nextStep = configuredNextStep ??
-        buildRuntimeLoadSkillContinuationNote(effectiveAvailableToolNames);
-    const generatedDelegationNote = buildUnavailableCurrentRunToolsDelegationNote(effectiveAvailableToolNames);
+        buildRuntimeLoadSkillContinuationNote(availableToolNames ?? []);
     const response = buildStrictRuntimeLoadedSkillResponse({
         skillId: input.skillId,
         instructions: input.instructions,
         nextStep,
-        messages: {
-            ...responseMessages,
-            unavailableCurrentRunToolsDelegationNote: configuredDelegationNote ??
-                generatedDelegationNote,
-        },
+        messages: responseMessages,
         references: input.references,
         availableToolNames,
         logger,

package/esm/src/agent/runtime/project-skill-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"project-skill-catalog.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/project-skill-catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,4BAA4B,EAC5B,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC9B,MAAM,2BAA2B,CAAC;AASnC,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAgBzC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AA8FpG,+DAA+D;AAC/D,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,yDAAyD;AACzD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC9F,eAAe,EAAE,CACf,OAAO,EAAE,6BAA6B,KACnC,OAAO,CAAC,SAAS,0BAA0B,EAAE,GAAG,IAAI,CAAC,CAAC;IAC3D,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC9F,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IAC3D,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC,CAAC;AAwYF,2CAA2C;AAC3C,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,GAAG,sBAAsB,EAAE,CAqD3B;AAED,2CAA2C;AAC3C,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,4BAA4B,GAAG,iCAAiC,GACtE,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED,4CAA4C;AAC5C,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,4BAA4B,GAAG,iCAAiC,GACtE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CA+MnC"}
+{"version":3,"file":"project-skill-catalog.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/project-skill-catalog.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EACV,4BAA4B,EAC5B,kBAAkB,EAClB,0BAA0B,EAC1B,6BAA6B,EAC9B,MAAM,2BAA2B,CAAC;AASnC,OAAO,EAIL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAChC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,iCAAiC,CAAC;AAgBzC,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,kDAAkD,CAAC;AA8FpG,+DAA+D;AAC/D,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,yDAAyD;AACzD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC9F,eAAe,EAAE,CACf,OAAO,EAAE,6BAA6B,KACnC,OAAO,CAAC,SAAS,0BAA0B,EAAE,GAAG,IAAI,CAAC,CAAC;IAC3D,aAAa,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACjD,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,eAAe,CAAC,EAAE,oBAAoB,CAAC;IACvC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAEF,wDAAwD;AACxD,MAAM,MAAM,iCAAiC,GAAG;IAC9C,cAAc,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC9F,aAAa,CAAC,EAAE,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IAC3D,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC,CAAC;AA8XF,2CAA2C;AAC3C,wBAAgB,8BAA8B,CAAC,KAAK,EAAE;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,GAAG,sBAAsB,EAAE,CAqD3B;AAED,2CAA2C;AAC3C,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,4BAA4B,GAAG,iCAAiC,GACtE,OAAO,CAAC,MAAM,CAAC,CA8BjB;AAED,4CAA4C;AAC5C,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,4BAA4B,GAAG,iCAAiC,GACtE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CA+MnC"}

package/esm/src/agent/runtime/project-skill-catalog.js

@@ -67,7 +67,7 @@ function getRetainedMetadataCharacters(definition) {
     ]) {
         total += value?.length ?? 0;
     }
-    for (const value of definition.allowedTools)
+    for (const value of definition.allowedTools ?? [])
         total += value.length;
     for (const value of definition.references ?? [])
         total += value.length;
@@ -182,10 +182,6 @@ function snapshotBuiltinSkillDefinition(value, index) {
     const metadata = rawMetadata === undefined
         ? undefined
         : snapshotBuiltinMetadata(rawMetadata, index);
-    const allowedToolsDeclared = readOwnDataProperty(value, "allowedToolsDeclared", label, false);
-    if (allowedToolsDeclared !== undefined && typeof allowedToolsDeclared !== "boolean") {
-        throw new TypeError(`${label}.allowedToolsDeclared must be a boolean`);
-    }
     const thinking = readOwnDataProperty(value, "thinking", label, false);
     if (thinking !== undefined &&
         thinking !== false &&
@@ -203,7 +199,6 @@ function snapshotBuiltinSkillDefinition(value, index) {
         description: requireBuiltinString(value, "description", index, true),
         instructions: requireBuiltinString(value, "instructions", index, true),
         allowedTools: allowedTools,
-        ...(allowedToolsDeclared === undefined ? {} : { allowedToolsDeclared }),
         ...(metadata === undefined ? {} : { metadata: metadata }),
         ...(thinking === undefined ? {} : { thinking: thinking }),
         ...(maxSteps === undefined ? {} : { maxSteps }),

package/esm/src/agent/runtime/skill-metadata.d.ts

@@ -31,14 +31,12 @@ export type RuntimeSkillDefinition = {
     displayName?: string;
     description: string;
     instructions: string;
-    allowedTools: string[];
     /**
-     * Serializable discriminator used by strict runtime catalogs to distinguish
-     * an omitted policy from an explicitly empty deny-all policy. Legacy/public
-     * definitions may omit it; a non-empty allowedTools array still implies a
-     * declared policy.
+     * `allowed-tools` frontmatter, recorded verbatim. The Agent Skills spec
+     * defines this as pre-approval metadata, so the runtime carries it but never
+     * enforces it. See veryfront/veryfront-issue-inbox#406.
      */
-    allowedToolsDeclared?: boolean;
+    allowedTools?: string[];
     metadata?: Record<string, string>;
     model?: string;
     thinking?: false | number;
@@ -57,15 +55,6 @@ export type RuntimeSkillDefinition = {
      */
     sourcePath?: string;
 };
-/**
- * Catalog-policy check that preserves the legacy public definition contract.
- *
- * Non-empty arrays always describe a policy. Strict builders persist the
- * omitted-versus-empty distinction in an additive serializable discriminator;
- * legacy definitions without it retain their historical empty-array
- * interpretation until their instructions are loaded and parsed.
- */
-export declare function hasRuntimeSkillAllowedToolsPolicy(definition: RuntimeSkillDefinition): boolean;
 /**
  * Whether a runtime skill definition is visible to the caller identified by
  * the scope — the same owner-aware rule as the local skill registry: unowned
@@ -99,9 +88,6 @@ export declare function resolveRuntimeSkillSelectorForAgent(input: {
 }): ResolvedSkillSelectorSnapshot<RuntimeSkillDefinition>;
 /** Public API contract for runtime loaded skill response messages. */
 export type RuntimeLoadedSkillResponseMessages = {
-    allowedToolsNote: string;
-    noCurrentRunToolsNote: string;
-    unavailableCurrentRunToolsDelegationNote: string;
     overrideNote: string;
     referenceNote: string;
 };

package/esm/src/agent/runtime/skill-metadata.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-metadata.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-metadata.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,2BAA2B,EAGjC,MAAM,kDAAkD,CAAC;AAuB1D,OAAO,EAEL,KAAK,6BAA6B,EAEnC,MAAM,yBAAyB,CAAC;AA+BjC,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,2EAA2E;AAC3E,eAAO,MAAM,iCAAiC,UAAY,CAAC;AAC3D,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAM7C,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOxE;AAgFD,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,mEAAmE;AACnE,eAAO,MAAM,gCAAgC,iFA+E3C,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,6BAA6B,2EAEzC,CAAC;AAEF,oCAAoC;AACpC,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAGT;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,EACxD,KAAK,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACxD,GAAG,sBAAsB,EAAE,CA2B3B;AAED,oGAAoG;AACpG,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAUxD;AAED,2FAA2F;AAC3F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAIxD;AAED,sEAAsE;AACtE,MAAM,MAAM,kCAAkC,GAAG;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,wCAAwC,EAAE,MAAM,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,uFAAuF;IACvF,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAuFF,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AA2GF,6EAA6E;AAC7E,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAOT;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,0BAA0B,GAAG,IAAI,CAEnC;AAED,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,uBAAuB,GAAG,IAAI,CAEhC;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,0BAA0B,GAAG,IAAI,CAEnC;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,uBAAuB,GAAG,IAAI,CAEhC;AAED,KAAK,gCAAgC,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAwUF,2DAA2D;AAC3D,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAU/B;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAM/B;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAU/B;AAiBD,oFAAoF;AACpF,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgCpF;AAED,qEAAqE;AACrE,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE9E;AAED,KAAK,oCAAoC,GAAG;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AA+FF,uFAAuF;AACvF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC,GAC1C,0BAA0B,CAuF5B;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oCAAoC,GAC1C,0BAA0B,CAE5B"}
+{"version":3,"file":"skill-metadata.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-metadata.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,2BAA2B,EAGjC,MAAM,kDAAkD,CAAC;AAkB1D,OAAO,EAEL,KAAK,6BAA6B,EAEnC,MAAM,yBAAyB,CAAC;AA+BjC,2EAA2E;AAC3E,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,2EAA2E;AAC3E,eAAO,MAAM,iCAAiC,UAAY,CAAC;AAC3D,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,OAAQ,CAAC;AAM7C,gFAAgF;AAChF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAOxE;AAiGD,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,mEAAmE;AACnE,eAAO,MAAM,gCAAgC,iFA+E3C,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,6BAA6B,2EAEzC,CAAC;AAEF,oCAAoC;AACpC,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,IAAI,CAAC,sBAAsB,EAAE,cAAc,CAAC,EACxD,KAAK,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC3B,OAAO,CAET;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,KAAK,EAAE;IAClD,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CACxD,GAAG,sBAAsB,EAAE,CA2B3B;AAED,oGAAoG;AACpG,wBAAgB,2CAA2C,CAAC,KAAK,EAAE;IACjE,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAUxD;AAED,2FAA2F;AAC3F,wBAAgB,mCAAmC,CAAC,KAAK,EAAE;IACzD,MAAM,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,IAAI,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;CAChD,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAIxD;AAED,sEAAsE;AACtE,MAAM,MAAM,kCAAkC,GAAG;IAC/C,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,0BAA0B,GAAG;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACvE,CAAC;AAEF,0EAA0E;AAC1E,MAAM,MAAM,gCAAgC,GAAG;IAC7C,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,uFAAuF;IACvF,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;IAC1D,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAqDF,6DAA6D;AAC7D,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,EAAE,uBAAuB,CAAC;IAClC,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AA2GF,6EAA6E;AAC7E,wBAAgB,qCAAqC,CACnD,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,gCAAqC,GAC7C,OAAO,CAOT;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,0BAA0B,GAAG,IAAI,CAEnC;AAED,+EAA+E;AAC/E,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,uBAAuB,GAAG,IAAI,CAEhC;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,0BAA0B,GAAG,IAAI,CAEnC;AAED,+EAA+E;AAC/E,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,gCAAqC,GAC7C,uBAAuB,GAAG,IAAI,CAEhC;AAED,KAAK,gCAAgC,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AAuUF,2DAA2D;AAC3D,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAU/B;AAED,iFAAiF;AACjF,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAM/B;AAED;;;;;;;GAOG;AACH,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,GAAG,IAAI,CAU/B;AAiBD,oFAAoF;AACpF,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgCpF;AAED,qEAAqE;AACrE,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE9E;AAED,KAAK,oCAAoC,GAAG;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,kCAAkC,CAAC;IAC7C,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,0BAA0B,CAAC;IACpC,2BAA2B,CAAC,EAAE,2BAA2B,CAAC;CAC3D,CAAC;AA4FF,uFAAuF;AACvF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC,GAC1C,0BAA0B,CA6C5B;AAED,iFAAiF;AACjF,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oCAAoC,GAC1C,0BAA0B,CAE5B"}

package/esm/src/agent/runtime/skill-metadata.js

@@ -4,7 +4,6 @@ import { snapshotVeryfrontError } from "../../errors/types.js";
 import { tryResolve } from "../../extensions/contracts.js";
 import { SkillDocumentParserProviderName, snapshotSkillDocumentParserProvider, } from "../../extensions/parser/skill-document-parser.js";
 import { loadDefaultSkillDocumentParserProvider } from "../../extensions/parser/skill-defaults.js";
-import { matchesAllowedTool, snapshotAllowedToolPatterns, validateStrictAllowedToolPatterns, } from "../../skill/allowed-tools.js";
 import { SKILL_ALLOWED_TOOL_MAX_PATTERNS, SKILL_ALLOWED_TOOL_PATTERN_MAX_LENGTH, SKILL_DOCUMENT_MAX_CHARACTERS, SKILL_ID_MAX_LENGTH, SKILL_LOADABLE_REFERENCE_MAX_ENTRIES, SKILL_PATH_SEGMENT_MAX_LENGTH, SKILL_RELATIVE_PATH_MAX_LENGTH, SKILL_RUNTIME_AVAILABLE_TOOL_MAX_ENTRIES, SKILL_SUBDIR_MAX_ENTRIES, } from "../../skill/limits.js";
 import { parseBoundedSkillDocument, } from "../../skill/document-parser.js";
 import { validateSkillFileMetadata } from "../../skill/parser.js";
@@ -55,7 +54,20 @@ function normalizeStrictAllowedTools(value) {
     if (ArrayIsArray(value) && patterns.some((entry) => entry.length === 0)) {
         throw new TypeError("Allowed-tools patterns must not be empty");
     }
-    return validateStrictAllowedToolPatterns(patterns.filter((entry) => entry.length > 0));
+    const kept = patterns.filter((entry) => entry.length > 0);
+    // Bounded but not grammar-checked: `allowed-tools` is spec pre-approval
+    // metadata the runtime never enforces, so any spec-conformant value must
+    // parse (including `Bash(git:*)`). Bounds still apply because the value
+    // comes from untrusted frontmatter.
+    if (kept.length > SKILL_ALLOWED_TOOL_MAX_PATTERNS) {
+        throw new RangeError(`Allowed-tools accepts at most ${SKILL_ALLOWED_TOOL_MAX_PATTERNS} patterns`);
+    }
+    for (const entry of kept) {
+        if (entry.length > SKILL_ALLOWED_TOOL_PATTERN_MAX_LENGTH) {
+            throw new RangeError(`Allowed-tools patterns must be at most ${SKILL_ALLOWED_TOOL_PATTERN_MAX_LENGTH} characters`);
+        }
+    }
+    return kept;
 }
 function normalizeStrictMetadata(value) {
     if (value === undefined)
@@ -189,19 +201,6 @@ export const getRuntimeSkillFrontmatterSchema = defineSchema((v) => {
  * @deprecated Use {@link getRuntimeSkillFrontmatterSchema}.
  */
 export const RuntimeSkillFrontmatterSchema = lazySchema(getRuntimeSkillFrontmatterSchema);
-/**
- * Catalog-policy check that preserves the legacy public definition contract.
- *
- * Non-empty arrays always describe a policy. Strict builders persist the
- * omitted-versus-empty distinction in an additive serializable discriminator;
- * legacy definitions without it retain their historical empty-array
- * interpretation until their instructions are loaded and parsed.
- */
-export function hasRuntimeSkillAllowedToolsPolicy(definition) {
-    if (definition.allowedTools.length > 0)
-        return true;
-    return definition.allowedToolsDeclared === true;
-}
 /**
  * Whether a runtime skill definition is visible to the caller identified by
  * the scope — the same owner-aware rule as the local skill registry: unowned
@@ -258,24 +257,6 @@ export function resolveRuntimeSkillSelectorForAgent(input) {
 function canUseLegacyInvokeAgent(availableToolNameSet) {
     return availableToolNameSet?.has("invoke_agent") === true;
 }
-function isDelegationToolName(toolName) {
-    return toolName === "invoke_agent" || toolName.startsWith("agent_");
-}
-function isToolAllowedByResolvedPolicy(toolName, declaredAllowedTools, hasDeclaredAllowedTools) {
-    return !hasDeclaredAllowedTools ||
-        declaredAllowedTools.some((pattern) => matchesAllowedTool(toolName, pattern));
-}
-function hasAllowedAvailableDelegationTool(availableToolNameSet, declaredAllowedTools, hasDeclaredAllowedTools) {
-    if (availableToolNameSet === null)
-        return false;
-    for (const toolName of availableToolNameSet) {
-        if (isDelegationToolName(toolName) &&
-            isToolAllowedByResolvedPolicy(toolName, declaredAllowedTools, hasDeclaredAllowedTools)) {
-            return true;
-        }
-    }
-    return false;
-}
 function snapshotAvailableRuntimeToolNames(value) {
     if (value === undefined)
         return null;
@@ -566,9 +547,7 @@ function parseRuntimeSkillDirectoryDocument(content, input, logger) {
                 ...source.document.metadata,
                 name: metadata.name,
                 description: metadata.description,
-                allowedTools: metadata.allowedTools === undefined
-                    ? []
-                    : snapshotAllowedToolPatterns(metadata.allowedTools),
+                allowedTools: Object.freeze(metadata.allowedTools === undefined ? [] : [...metadata.allowedTools]),
                 metadata: metadata.metadata === undefined
                     ? undefined
                     : Object.freeze({ ...metadata.metadata }),
@@ -618,8 +597,7 @@ function buildRuntimeSkillDefinitionFromDocument(input, parsed) {
         ...(displayName === undefined ? {} : { displayName }),
         description: metadata.description ?? extractDescriptionFromMarkdown(body, input.id),
         instructions: input.content,
-        allowedTools: snapshotAllowedToolPatterns(metadata.allowedTools),
-        allowedToolsDeclared: parsed.allowedToolsDeclared,
+        allowedTools: Object.freeze([...metadata.allowedTools]),
         ...(metadataSnapshot === undefined ? {} : { metadata: metadataSnapshot }),
         ...(metadata.model ? { model: metadata.model } : {}),
         ...(metadata.thinking !== undefined ? { thinking: metadata.thinking } : {}),
@@ -704,9 +682,6 @@ export function normalizeRuntimeSkillReferencePath(path) {
     return normalizeStrictRuntimeSkillReferencePath(path);
 }
 const RUNTIME_LOADED_SKILL_MESSAGE_FIELDS = [
-    "allowedToolsNote",
-    "noCurrentRunToolsNote",
-    "unavailableCurrentRunToolsDelegationNote",
     "overrideNote",
     "referenceNote",
 ];
@@ -757,53 +732,17 @@ export function buildStrictRuntimeLoadedSkillResponse(input) {
         skillDocumentParserProvider: snapshot.skillDocumentParserProvider,
     });
     const metadata = parsedSource?.document.metadata ?? null;
-    const invalidMetadata = parsedSource === null;
-    const declaredAllowedTools = metadata?.allowedTools ?? [];
     const availableToolNameSet = snapshotAvailableRuntimeToolNames(snapshot.availableToolNames);
-    const isAvailableAllowedToolPattern = (pattern) => {
-        if (availableToolNameSet === null)
-            return false;
-        for (const toolName of availableToolNameSet) {
-            if (matchesAllowedTool(toolName, pattern))
-                return true;
-        }
-        return false;
-    };
-    const currentRunAllowedTools = availableToolNameSet
-        ? declaredAllowedTools.filter(isAvailableAllowedToolPattern)
-        : declaredAllowedTools;
-    const unavailableCurrentRunTools = availableToolNameSet && declaredAllowedTools.length > 0
-        ? declaredAllowedTools.filter((pattern) => !isAvailableAllowedToolPattern(pattern))
-        : [];
     const hasOverrides = metadata?.model !== undefined || metadata?.thinking !== undefined ||
         metadata?.maxSteps !== undefined;
-    const hasDeclaredAllowedTools = invalidMetadata || parsedSource.allowedToolsDeclared;
     return {
         skillId: snapshot.skillId,
         instructions: snapshot.instructions,
         nextStep: snapshot.nextStep,
-        ...(hasDeclaredAllowedTools
-            ? {
-                allowedTools: currentRunAllowedTools,
-                note: currentRunAllowedTools.length > 0
-                    ? snapshot.messages.allowedToolsNote
-                    : snapshot.messages.noCurrentRunToolsNote,
-            }
-            : {}),
-        ...(hasDeclaredAllowedTools ? { delegationTools: declaredAllowedTools } : {}),
-        ...(unavailableCurrentRunTools.length > 0
-            ? {
-                unavailableCurrentRunTools,
-                ...(hasAllowedAvailableDelegationTool(availableToolNameSet, declaredAllowedTools, hasDeclaredAllowedTools)
-                    ? { delegationNote: snapshot.messages.unavailableCurrentRunToolsDelegationNote }
-                    : {}),
-            }
-            : {}),
         ...(metadata?.model ? { model: metadata.model } : {}),
         ...(metadata?.thinking !== undefined ? { thinking: metadata.thinking } : {}),
         ...(metadata?.maxSteps !== undefined ? { maxSteps: metadata.maxSteps } : {}),
-        ...(hasOverrides && canUseLegacyInvokeAgent(availableToolNameSet) &&
-            isToolAllowedByResolvedPolicy("invoke_agent", declaredAllowedTools, hasDeclaredAllowedTools)
+        ...(hasOverrides && canUseLegacyInvokeAgent(availableToolNameSet)
             ? {
                 overrideNote: snapshot.messages.overrideNote,
             }

package/esm/src/agent/runtime/skill-policy-enforcement.d.ts

@@ -9,13 +9,11 @@ export declare const SUBMITTED_FORM_INPUT_CONTEXT_KEY = "hasSubmittedFormInputRe
 export declare const INACTIVE_SKILL_TOOL_AVAILABILITY: SkillToolAvailability;
 export type ActiveSkillState = {
     activeSkillId: string | undefined;
-    activeSkillPolicy: string[] | undefined;
     activeSkillToolAvailability: SkillToolAvailability;
     activeSkillDelegationOverrides: SkillDelegationOverrides | undefined;
 };
 export declare function hydrateActiveSkillStateFromMessages(messages: readonly Message[]): ActiveSkillState;
 export declare function extractSkillId(result: unknown): string | undefined;
-export declare function extractSkillPolicy(result: unknown): string[] | undefined;
 export declare function extractSkillToolAvailability(result: unknown): SkillToolAvailability | undefined;
 /** Apply only a validated body-load response; reference/error results preserve state. */
 export declare function applySkillActivationResult(current: ActiveSkillState, result: unknown): ActiveSkillState;
@@ -25,8 +23,6 @@ export declare function filterToolsAfterSubmittedFormInput(tools: readonly ToolD
     id?: string;
     toolAvailability?: SkillToolAvailability;
 }): ToolDefinition[];
-export declare function removeFormInputAfterSubmission(toolName: string, result: unknown, activeSkillPolicy: string[] | undefined): string[] | undefined;
-export declare function narrowPolicyAfterSubmittedForm(activeSkillPolicy: string[] | undefined): string[] | undefined;
 export type SkillPolicyResult = {
     allowed: true;
 } | {
@@ -41,5 +37,5 @@ export type SkillPolicyOptions = {
 };
 /** Identify a valid skill-body activation call without confusing reference reads for activation. */
 export declare function isSkillBodyLoadRequest(toolName: string, input: unknown): boolean;
-export declare function enforceSkillPolicy(toolName: string, activeSkillPolicy: string[] | undefined, mustLoadSkillFirst: boolean, options?: SkillPolicyOptions): SkillPolicyResult;
+export declare function enforceSkillPolicy(toolName: string, options?: SkillPolicyOptions): SkillPolicyResult;
 //# sourceMappingURL=skill-policy-enforcement.d.ts.map

package/esm/src/agent/runtime/skill-policy-enforcement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-policy-enforcement.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-policy-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAEL,KAAK,qBAAqB,EAE3B,MAAM,8BAA8B,CAAC;AAiBtC,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iCAAiC,CAAC;AAKzC,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AACnD,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAI9E,eAAO,MAAM,gCAAgC,EAAE,qBAI7C,CAAC;AAgFH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IACxC,2BAA2B,EAAE,qBAAqB,CAAC;IACnD,8BAA8B,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACtE,CAAC;AAOF,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,gBAAgB,CAgBlB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIlE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,SAAS,CAiCxE;AAiCD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,GACd,qBAAqB,GAAG,SAAS,CAkBnC;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,OAAO,GACd,gBAAgB,CAiBlB;AAUD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAgBnE;AAYD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAUjF;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,WAAW,CAAC,EAAE;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GACA,cAAc,EAAE,CAkClB;AAED,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CAStB;AAED,wBAAgB,8BAA8B,CAC5C,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,GACtC,MAAM,EAAE,GAAG,SAAS,CAMtB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AA2BF,oGAAoG;AACpG,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAKhF;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,MAAM,EAAE,GAAG,SAAS,EACvC,kBAAkB,EAAE,OAAO,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAwCnB"}
+{"version":3,"file":"skill-policy-enforcement.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-policy-enforcement.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,8BAA8B,CAAC;AAgBtC,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iCAAiC,CAAC;AAKzC,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AACnD,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAI9E,eAAO,MAAM,gCAAgC,EAAE,qBAI7C,CAAC;AAgFH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,2BAA2B,EAAE,qBAAqB,CAAC;IACnD,8BAA8B,EAAE,wBAAwB,GAAG,SAAS,CAAC;CACtE,CAAC;AAEF,wBAAgB,mCAAmC,CACjD,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,gBAAgB,CAelB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIlE;AAiCD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,OAAO,GACd,qBAAqB,GAAG,SAAS,CAkBnC;AAED,yFAAyF;AACzF,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,OAAO,GACd,gBAAgB,CAgBlB;AAUD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAgBnE;AAYD,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAUjF;AAED,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,SAAS,cAAc,EAAE,EAChC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACxC,WAAW,CAAC,EAAE;IACZ,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;CAC1C,GACA,cAAc,EAAE,CAkClB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AA2BF,oGAAoG;AACpG,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAKhF;AAED,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,kBAAuB,GAC/B,iBAAiB,CAuCnB"}

package/esm/src/agent/runtime/skill-policy-enforcement.js

@@ -1,6 +1,6 @@
 import { serverLogger } from "../../utils/index.js";
-import { isToolAllowedBySkill, snapshotAllowedToolPatterns, } from "../../skill/allowed-tools.js";
-import { SKILL_ALLOWED_TOOL_MAX_PATTERNS, SKILL_DOCUMENT_MAX_CHARACTERS, SKILL_ID_MAX_LENGTH, SKILL_LOADABLE_REFERENCE_MAX_ENTRIES, SKILL_SUBDIR_MAX_ENTRIES, } from "../../skill/limits.js";
+import { isSkillToolAvailable, } from "../../skill/allowed-tools.js";
+import { SKILL_DOCUMENT_MAX_CHARACTERS, SKILL_ID_MAX_LENGTH, SKILL_LOADABLE_REFERENCE_MAX_ENTRIES, SKILL_SUBDIR_MAX_ENTRIES, } from "../../skill/limits.js";
 import { SKILL_READABLE_DIRS } from "../../skill/types.js";
 import { hasControlCharacters, isWellFormedUtf16 } from "../../skill/string-safety.js";
 import { hasToolExecutionErrorMarker, readToolResultOwnDataProperty, UNREADABLE_TOOL_RESULT_PROPERTY, } from "../../tool/result.js";
@@ -86,14 +86,9 @@ function isSkillActivationResult(result) {
         instructions.length <= SKILL_DOCUMENT_MAX_CHARACTERS &&
         isWellFormedUtf16(instructions);
 }
-function getSkillActivationRequiredError(toolName) {
-    return `Tool "${toolName}" cannot run before load_skill succeeds in the same step. ` +
-        `Call "${LOAD_SKILL_TOOL_ID}" first to establish the active skill context.`;
-}
 export function hydrateActiveSkillStateFromMessages(messages) {
     let state = {
         activeSkillId: undefined,
-        activeSkillPolicy: undefined,
         activeSkillToolAvailability: INACTIVE_SKILL_TOOL_AVAILABILITY,
         activeSkillDelegationOverrides: undefined,
     };
@@ -112,34 +107,6 @@ export function extractSkillId(result) {
     const skillId = readToolResultOwnDataProperty(result, "skillId");
     return typeof skillId === "string" ? skillId : undefined;
 }
-export function extractSkillPolicy(result) {
-    if (!isRecord(result))
-        return undefined;
-    const field = readToolResultOwnDataProperty(result, "allowedTools");
-    if (field === undefined)
-        return undefined;
-    const patternCount = getBoundedArrayLength(field, SKILL_ALLOWED_TOOL_MAX_PATTERNS);
-    if (field === UNREADABLE_TOOL_RESULT_PROPERTY || patternCount === null) {
-        logger.warn("load_skill returned invalid allowedTools; falling back to empty policy (no tools)");
-        return [];
-    }
-    const patterns = [];
-    for (let index = 0; index < patternCount; index += 1) {
-        const pattern = readToolResultOwnDataProperty(field, index);
-        if (typeof pattern !== "string") {
-            logger.warn("load_skill returned invalid allowedTools; falling back to empty policy (no tools)");
-            return [];
-        }
-        patterns.push(pattern);
-    }
-    try {
-        return snapshotAllowedToolPatterns(patterns);
-    }
-    catch (error) {
-        logger.warn("load_skill returned invalid tool patterns; falling back to empty policy (no tools)", { error });
-        return [];
-    }
-}
 function extractStringArrayField(result, field, allowedDirectories, maxEntries) {
     const raw = readToolResultOwnDataProperty(result, field);
     const entryCount = getBoundedArrayLength(raw, maxEntries);
@@ -178,14 +145,13 @@ export function applySkillActivationResult(current, result) {
     try {
         return {
             activeSkillId: extractSkillId(result),
-            activeSkillPolicy: extractSkillPolicy(result),
             activeSkillToolAvailability: extractSkillToolAvailability(result) ??
                 INACTIVE_SKILL_TOOL_AVAILABILITY,
             activeSkillDelegationOverrides: extractSkillDelegationOverrides(result),
         };
     }
     catch (error) {
-        logger.warn("load_skill returned an unreadable activation result; preserving prior policy", {
+        logger.warn("load_skill returned an unreadable activation result; preserving prior state", {
             error,
         });
         return current;
@@ -264,18 +230,6 @@ export function filterToolsAfterSubmittedFormInput(tools, messages, runtimeConte
             }];
     });
 }
-export function removeFormInputAfterSubmission(toolName, result, activeSkillPolicy) {
-    if (toolName !== FORM_INPUT_TOOL_ID || !isSubmittedFormInputResult(result) ||
-        activeSkillPolicy === undefined) {
-        return activeSkillPolicy;
-    }
-    return narrowPolicyAfterSubmittedForm(activeSkillPolicy);
-}
-export function narrowPolicyAfterSubmittedForm(activeSkillPolicy) {
-    if (activeSkillPolicy === undefined)
-        return undefined;
-    return snapshotAllowedToolPatterns(activeSkillPolicy.filter((allowedToolName) => allowedToolName !== FORM_INPUT_TOOL_ID));
-}
 function isActiveSkillReferenceLoad(options) {
     if (!options.activeSkillId ||
         !isRecord(options.toolInput) ||
@@ -300,10 +254,7 @@ export function isSkillBodyLoadRequest(toolName, input) {
     const file = readToolResultOwnDataProperty(input, "file");
     return typeof skillId === "string" && skillId.length > 0 && file === undefined;
 }
-export function enforceSkillPolicy(toolName, activeSkillPolicy, mustLoadSkillFirst, options = {}) {
-    if (mustLoadSkillFirst && toolName !== LOAD_SKILL_TOOL_ID) {
-        return { allowed: false, error: getSkillActivationRequiredError(toolName) };
-    }
+export function enforceSkillPolicy(toolName, options = {}) {
     if (options.hasSubmittedFormInput === true &&
         POST_SUBMITTED_FORM_INPUT_BLOCKED_TOOL_IDS.has(toolName)) {
         return {
@@ -319,10 +270,16 @@ export function enforceSkillPolicy(toolName, activeSkillPolicy, mustLoadSkillFir
             error: `Tool "${toolName}" cannot load or switch skill bodies after form_input was submitted. Only an advertised reference file from the active skill may be loaded.`,
         };
     }
-    if (!isToolAllowedBySkill(toolName, activeSkillPolicy, options.skillToolAvailability)) {
+    if (!isSkillToolAvailable(toolName, options.skillToolAvailability)) {
+        // The two cases need different remedies and the model acts on this text: with
+        // no skill loaded it should call load_skill, while a loaded skill that
+        // advertises no matching file cannot be fixed by retrying.
+        const hasActiveSkill = readToolResultOwnDataProperty(options.skillToolAvailability, "hasActiveSkill") === true;
         return {
             allowed: false,
-            error: `Tool "${toolName}" is not allowed by the active skill policy. Allowed: ${activeSkillPolicy?.join(", ") ?? "none"}`,
+            error: hasActiveSkill
+                ? `Tool "${toolName}" is unavailable because the active skill advertises no matching file.`
+                : `Tool "${toolName}" is unavailable because no skill is loaded. Call load_skill first.`,
         };
     }
     return { allowed: true };

package/esm/src/agent/runtime/skill-prompt.d.ts

@@ -5,9 +5,9 @@ export declare const MAX_RUNTIME_SKILL_PROMPT_ENTRIES = 30;
 /** Maximum runtime tool-name surface accepted while constructing a skill prompt. */
 export declare const MAX_RUNTIME_SKILL_AVAILABLE_TOOL_NAMES = 1000;
 /** Formats bounded runtime skill metadata for prompt use. */
-export declare function formatStrictRuntimeSkillMetadata(skill: RuntimeSkillDefinition, availableToolNames?: readonly string[]): string;
+export declare function formatStrictRuntimeSkillMetadata(skill: RuntimeSkillDefinition): string;
 /** Formats bounded runtime skill metadata for prompt use. */
-export declare function formatRuntimeSkillMetadata(skill: RuntimeSkillDefinition, availableToolNames?: readonly string[]): string;
+export declare function formatRuntimeSkillMetadata(skill: RuntimeSkillDefinition): string;
 type RuntimeSkillPromptOptions = {
     availableToolNames?: readonly string[];
     includeSkillToolUsage?: boolean;

package/esm/src/agent/runtime/skill-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skill-prompt.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-prompt.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,KAAK,KAAK,EAAgC,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAML,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAC;AAE7B,sDAAsD;AACtD,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,OAA2C,CAAC;AA+X/F,6DAA6D;AAC7D,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,sBAAsB,EAC7B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GACrC,MAAM,CAoDR;AAED,6DAA6D;AAC7D,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,sBAAsB,EAC7B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GACrC,MAAM,CAER;AAsFD,KAAK,yBAAyB,GAAG;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,4CAA4C,CAC1D,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAwDR;AAED,wEAAwE;AACxE,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER;AAqID;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAM3E"}
+{"version":3,"file":"skill-prompt.d.ts","sourceRoot":"","sources":["../../../../src/src/agent/runtime/skill-prompt.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,KAAK,KAAK,EAAgC,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,qBAAqB,CAAC;AAE7B,sDAAsD;AACtD,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,oFAAoF;AACpF,eAAO,MAAM,sCAAsC,OAA2C,CAAC;AAiW/F,6DAA6D;AAC7D,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAuCtF;AAED,6DAA6D;AAC7D,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,sBAAsB,GAAG,MAAM,CAEhF;AAoED,KAAK,yBAAyB,GAAG;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC,CAAC;AAEF,iFAAiF;AACjF,wBAAgB,4CAA4C,CAC1D,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAmDR;AAED,wEAAwE;AACxE,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,SAAS,sBAAsB,EAAE,EACzC,OAAO,GAAE,yBAA8B,GACtC,MAAM,CAER;AAoID;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM,CAM3E"}