@sema-agent/client-core 0.101.0 → 0.103.0

package/dist/adapt/toolCards.d.ts

@@ -2,7 +2,7 @@ import type { AdapterContext, AdapterOutput } from '../seam.js';
 import { structuredToToolUseResult, type ToolKillCause, type ToolResultBody } from '../toolResult.js';
 import { type Frame, type IdOf } from './ids.js';
 import type { EngineRowRef } from '../engineRowRef.js';
-import { type GateOutcomeView } from '../gateOutcome.js';
+import { type GateOutcomeView, type ToolInputRewriteView } from '../gateOutcome.js';
 type RichToolUseResult = NonNullable<ReturnType<typeof structuredToToolUseResult>>;
 export interface ToolResultOutcome {
     readonly body: ToolResultBody;
@@ -37,8 +37,10 @@ export interface ToolResultRowFlagParts {
     readonly _sema_interrupted_never_started?: true;
     readonly _sema_approval_window_expired?: true;
     readonly _sema_denial_limit_window_expired?: true;
+    readonly _sema_answered_by?: string;
+    readonly _sema_rewrite?: ToolInputRewriteView;
 }
-export declare function toolResultRowFlagParts(arm: object | null | undefined): ToolResultRowFlagParts;
+export declare function toolResultRowFlagParts(arm: object | null | undefined, gate: GateOutcomeView | undefined): ToolResultRowFlagParts;
 interface ToolEndPayload {
     output?: unknown;
     structured?: unknown;

package/dist/adapt/toolCards.js

@@ -5,8 +5,8 @@ import { flattenWireOutput } from './wireShapes.js';
 import { toolResultBlocksOf } from '../toolResultContent.js';
 import { bashExitOf, bashExitReadingFailed } from '../bashExitReading.js';
 import { isCcToolDenialKind } from '../gateVocabulary.js';
-import { guardedRead, ownSnapshotWhenTyped, readFrameStringKey, readFrameTrueMark } from '../ownKey.js';
-import { gateOutcomeOf, isApprovalWindowExpiredGate, isDenialLimitAutoDeniedGate } from '../gateOutcome.js';
+import { guardedRead, ownSnapshotWhenTyped, readFrameStringKey, readFrameTrueMark, readOwnDataValue } from '../ownKey.js';
+import { gateDeniedBy, isApprovalWindowExpiredGate, isDeniedGate, isDenialLimitAutoDeniedGate, toolInputRewriteOf } from '../gateOutcome.js';
 import { TOOL_END_INTERRUPTED_NEVER_STARTED } from '../engineErrorCodes.js';
 function toolUseResultParts(v) {
     return v !== undefined ? { tool_use_result: v } : {};
@@ -53,18 +53,34 @@ export function toolResultRowIdentity(sources, toolCallId, ctx) {
     }
     return { uuid: deriveTranscriptId({ toolCallId }, ctx) };
 }
-export function toolResultRowFlagParts(arm) {
+export function toolResultRowFlagParts(arm, gate) {
     if (arm === null || arm === undefined)
         return {};
-    const gate = guardedRead(() => gateOutcomeOf(arm));
+    const notExecuted = readFrameTrueMark(arm, 'notExecuted');
+    const answeredBy = modAnsweredByOf(arm, notExecuted, gate);
+    const rewrite = toolInputRewriteOf(arm);
     return {
-        ...(readFrameTrueMark(arm, 'notExecuted') ? { _sema_not_executed: true } : {}),
+        ...(notExecuted ? { _sema_not_executed: true } : {}),
         ...(readFrameTrueMark(arm, '_sema_collateral_abort') ? { _sema_collateral_abort: true } : {}),
         ...(readFrameStringKey(arm, 'errorCode') === TOOL_END_INTERRUPTED_NEVER_STARTED ? { _sema_interrupted_never_started: true } : {}),
         ...(isApprovalWindowExpiredGate(gate) ? { _sema_approval_window_expired: true } : {}),
         ...(isDenialLimitAutoDeniedGate(gate) ? { _sema_denial_limit_window_expired: true } : {}),
+        ...(answeredBy !== undefined ? { _sema_answered_by: answeredBy } : {}),
+        ...(rewrite !== undefined ? { _sema_rewrite: rewrite } : {}),
     };
 }
+const MOD_ENGINE_ORIGIN = 'engine';
+function modAnsweredByOf(arm, notExecuted, gate) {
+    const by = readFrameStringKey(arm, 'answeredBy');
+    if (by === undefined || by === MOD_ENGINE_ORIGIN || !notExecuted)
+        return undefined;
+    if (gate !== undefined && gate.unreadable !== undefined && gate.unreadable.length > 0)
+        return undefined;
+    const isErrorRaw = guardedRead(() => readOwnDataValue(arm, 'isError'));
+    if (isDeniedGate(gate))
+        return gateDeniedBy(gate) === 'hook' && isErrorRaw === true ? by : undefined;
+    return isErrorRaw === false ? by : undefined;
+}
 export function createToolCardLedger(ctx, idOf) {
     const pending = new Map();
     let assistantResponseId = null;
@@ -110,7 +126,7 @@ export function createToolCardLedger(ctx, idOf) {
             ...toolResultEnvelopeParts(outcome),
             ...(isCcToolDenialKind(end?.denialKind) ? { _sema_denial_kind: end.denialKind } : {}),
             ...(end?.gate !== undefined ? { _sema_gate: end.gate } : {}),
-            ...toolResultRowFlagParts(end?.closeArm),
+            ...toolResultRowFlagParts(end?.closeArm, end?.gate),
         }, ctx.now());
     }
     function* closeCard(p, end) {

package/dist/adapt.d.ts

@@ -13,7 +13,7 @@ export declare const ADAPTER_COVERAGE: {
     readonly transcriptKinds: readonly ["assistant_text", "assistant_thinking", "assistant_tool_use", "user_tool_result_decision", "user_task_notification", "system_passthrough"];
     readonly b3: readonly ["T38 三清第三清 + T57 第五处断闸:prompt_suggestions(turn 开场作废 + 子流断闸)", "T40 IDLE-FLUSH 1.5s 竞速(需 ctx.setTimer;缺席=不启用)", "T58 手动 iterator 的 finally cleanup(early break/throw 都要关上游生成器)", "T59 abort 半场(ctx.signal;中断后不产终答)", "T60 无 result 收尾腿(泄尾增量 → 清 liveness → 尾思考 → 尾文本段)"];
     readonly b4: readonly ["A 层第 14 臂 task_progress:workflow lane 三级门 + 判据④ belt 回植 + C1 alias + bindTaskCard(显式父/FIFO/含糊即 unbound)+ inline stats + T50 双形读 + SubagentStart + #6 resident 台账 + 面板 tick", "settlePanelTasks 三处 sweep 全接线(tool_end 显式关卡带报告 / result 防御 sweep / turn 末 + abort sweep)", "P0-2 tool label 侧信道(sanitizeToolUseBlock 摘 label + engineToolLabelStore 登记;0.5.0 真缺口,label 会随 tool_use block 落转录 → /compact 直发 provider 400)", "task_notification 的两件宿主义务收回库内自持:dropQueuedNotificationsForRun + clearEnginePanelTaskResident;stop hook 的 if-started 门由库解", "T8 flattenWireOutput 提为独立导出(A 层 settle 报告与 B 层卡体同一份)"];
-    readonly b5: readonly ["B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用", "D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落", "E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息", "tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)", "task/task-list structured → chrome task_ledger_sync{source:\"structured\"}(判定归一在库、落盘留宿主)", "T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)"];
+    readonly b5: readonly ["B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用", "D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落", "E 层 4 臂:bg Bash 回执 + Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息", "tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)", "task/task-list structured → chrome task_ledger_sync{source:\"structured\"}(判定归一在库、落盘留宿主)", "T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)"];
     readonly todo: readonly ["T13 的 **D 层** 半场(taskoutput block content)未随 structured 退位:退位会改 block content 形状(cli 那里是裸对象 = 件1 隐患),属行为面改动,无真实需求驱动 ⇒ 见 DIVERGENCE-8", "macrotask 让渡(cli 在提交前让出宏任务给 Ink;宿主渲染策略,不进库)"];
 };
 export declare const ADAPTER_DIVERGENCES: readonly [string, string, string, string, string, string, string, string, string, string, string, string];

package/dist/adapt.js

@@ -56,7 +56,7 @@ export const ADAPTER_COVERAGE = {
     b5: [
         'B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用',
         'D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落',
-        'E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息',
+        'E 层 4 臂:bg Bash 回执 + Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息',
         'tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)',
         'task/task-list structured → chrome task_ledger_sync{source:"structured"}(判定归一在库、落盘留宿主)',
         'T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)',

package/dist/adapter/downstream/eventToSdkMessage.d.ts

@@ -1,7 +1,7 @@
 import type { AgentEvent, CheckpointGate, TaskResult } from '@sema-agent/sdk';
 import { type WiringManifestView } from './wiringManifestView.js';
 import { type SDKMessage, type EmitContext, type ModelUsage } from '../types.js';
-import { type McpLivenessView } from '../../mcpLiveness.js';
+import { type McpAuthorizationView, type McpLivenessView } from '../../mcpLiveness.js';
 import { type ContextUsageSectionRow, type PromptIdentityLayersRow, type PromptManifestIdentityRow, type PromptManifestSectionRow } from '../../ownKey.js';
 export declare const INTERNAL_SDK_ARM_TYPES: ReadonlySet<string>;
 export type EventProjectionNoneReason = 'usage_only' | 'terminal_delegated' | 'hitl_out_of_slice' | 'not_in_slice' | 'empty_payload';
@@ -38,6 +38,8 @@ export interface WiringManifestMcpEntryView {
     httpStatus?: number;
     liveness?: McpLivenessView;
     livenessUnreadable?: true;
+    authorization?: McpAuthorizationView;
+    authorizationUnreadable?: true;
 }
 export declare function projectMcpSection(raw: unknown): WiringManifestMcpEntryView[] | undefined;
 export type SubmitWiringManifestReading = {
@@ -76,6 +78,7 @@ export interface WiringManifestModMountedView {
     readonly name: string;
     readonly seat: string;
     readonly tier: string;
+    readonly provenance?: string;
     readonly events: readonly string[];
     readonly observe?: readonly string[];
     readonly skipped?: readonly WiringManifestModSkipView[];
@@ -84,6 +87,7 @@ export interface WiringManifestModRefusedView {
     readonly name: string;
     readonly seat: string;
     readonly tier: string;
+    readonly provenance?: string;
     readonly refusedBy: string;
     readonly reason: string;
 }

package/dist/adapter/downstream/eventToSdkMessage.js

@@ -1,11 +1,11 @@
-import { readFleetSegment, readInstructionsSegment, wiringManifestViewOf } from './wiringManifestView.js';
+import { modRowsOf, readFleetSegment, readInstructionsSegment, wiringManifestViewOf } from './wiringManifestView.js';
 import { stamp, snapshotSegmentIdentity, } from '../types.js';
 import { turnUsageToModelUsage } from './turnUsageToModelUsage.js';
-import { ccToolDenialKindForToolEnd, gateOutcomeOf } from '../../gateOutcome.js';
+import { ccToolDenialKindForToolEnd, gateOutcomeOf, toolInputRewriteOf } from '../../gateOutcome.js';
 import { projectToolRoster, projectToolRosterDelta } from '../../toolRoster.js';
 import { projectHandsSection } from '../../handsSeam.js';
-import { readMcpLiveness } from '../../mcpLiveness.js';
-import { contextUsageReadingOf, humanInputAttachmentsOf, guardedRead, markMcpSectionDroppedNamedRows, ownSnapshotTyped, promptManifestIdentityOfFrame, promptManifestSectionViewOf, readFrameTrueMark, readOwnDataNonEmptyString } from '../../ownKey.js';
+import { readMcpAuthorization, readMcpLiveness } from '../../mcpLiveness.js';
+import { contextUsageReadingOf, humanInputAttachmentsOf, guardedRead, markMcpSectionDroppedNamedRows, ownSnapshotTyped, promptManifestIdentityOfFrame, promptManifestSectionViewOf, readFrameStringKey, readFrameTrueMark, readOwnDataFiniteNumber, readOwnDataNonEmptyString } from '../../ownKey.js';
 import { SEGMENT_END_IDENTITY_KEYS, eventSeq, stripToolUseSideChannels } from '../types.js';
 import { frozenSet } from '../../frozenSet.js';
 import { isCoreWorkflowRunTerminal } from '../../terminalStatuses.js';
@@ -73,6 +73,11 @@ const dropped = (why, type) => ({ kind: 'dropped', why, type });
 function isCompactionStartedFrame(ev) {
     return ev.type === 'compaction_started';
 }
+const BEYOND_FLOOR_ARMS = Object.freeze(['cross_boundary_taint', 'approval_complete', 'session_titled']);
+function isBeyondFloorArm(ev) {
+    const word = ev.type;
+    return typeof word === 'string' && BEYOND_FLOOR_ARMS.includes(word);
+}
 function assertNeverArm(_ev) {
 }
 export function eventToSdkMessage(ev, ctx) {
@@ -106,6 +111,10 @@ function withEngineIdentity(p, ev, ctx, identityFrame = ev) {
 function projectEvent(ev, ctx) {
     if (isCompactionStartedFrame(ev))
         return compactionStartedProjection(ev, ctx);
+    if (isBeyondFloorArm(ev)) {
+        const word = ev.type;
+        return word === 'cross_boundary_taint' ? nothing('not_in_slice') : dropped('unsupported_arm', word);
+    }
     switch (ev.type) {
         case 'task_started':
             return taskStartedProjection(ev, ctx);
@@ -229,6 +238,8 @@ function projectEvent(ev, ctx) {
             const collateralAbort = ev._sema_collateral_abort;
             const denialKind = ccToolDenialKindForToolEnd(ev);
             const toolEndNotExecuted = readFrameTrueMark(ev, 'notExecuted');
+            const toolEndAnsweredBy = readFrameStringKey(ev, 'answeredBy');
+            const toolEndRewrite = toolInputRewriteOf(ev);
             return projected(stamp(ctx, armBody({
                 type: 'tool_end_result',
                 toolCallId: ev.toolCallId,
@@ -251,6 +262,8 @@ function projectEvent(ev, ctx) {
                 ...(collateralAbort === true ? { _sema_collateral_abort: true } : {}),
                 ...(denialKind !== undefined ? { _sema_denial_kind: denialKind } : {}),
                 ...(toolEndNotExecuted ? { notExecuted: true } : {}),
+                ...(toolEndAnsweredBy !== undefined ? { answeredBy: toolEndAnsweredBy } : {}),
+                ...(toolEndRewrite !== undefined ? { rewrite: toolEndRewrite } : {}),
                 ...(ev.eventId !== undefined ? { eventId: ev.eventId } : {}),
                 ...(ev.parentToolCallId !== undefined
                     ? { parentToolCallId: ev.parentToolCallId }
@@ -270,6 +283,10 @@ function projectEvent(ev, ctx) {
             const nonEmptyStr = (v) => (typeof v === 'string' && v.length > 0 ? v : undefined);
             const providerCondition = nonEmptyStr(ev.providerCondition);
             const providerConditionSource = nonEmptyStr(ev.providerConditionSource);
+            const stWait = ev;
+            const sleptMsRaw = guardedRead(() => readOwnDataFiniteNumber(stWait, 'sleptMs'));
+            const sleptMs = sleptMsRaw !== undefined && sleptMsRaw >= 0 ? sleptMsRaw : undefined;
+            const waitSegment = readFrameStringKey(stWait, 'waitSegment');
             return projected(stamp(ctx, armBody({
                 type: 'retry_status',
                 phase: ev.phase,
@@ -285,6 +302,8 @@ function projectEvent(ev, ctx) {
                 ...(timeoutMs !== undefined ? { timeoutMs } : {}),
                 ...(providerCondition !== undefined ? { providerCondition } : {}),
                 ...(providerConditionSource !== undefined ? { providerConditionSource } : {}),
+                ...(sleptMs !== undefined ? { sleptMs } : {}),
+                ...(waitSegment !== undefined ? { waitSegment } : {}),
                 ...(typeof ev.eventId === 'string' ? { eventId: ev.eventId } : {}),
                 ...(typeof ev.parentToolCallId === 'string' ? { parentToolCallId: ev.parentToolCallId } : {}),
             })));
@@ -553,6 +572,7 @@ export function projectMcpSection(raw) {
             ...(typeof r.delivered === 'string' && r.delivered.length > 0 ? { delivered: r.delivered } : {}),
             ...(typeof r.httpStatus === 'number' && Number.isFinite(r.httpStatus) ? { httpStatus: r.httpStatus } : {}),
             ...((cell) => cell.kind === 'observation' ? { liveness: cell.liveness } : cell.kind === 'unreadable' ? { livenessUnreadable: true } : {})(readMcpLiveness(r)),
+            ...((cell) => cell.kind === 'record' ? { authorization: cell.authorization } : cell.kind === 'unreadable' ? { authorizationUnreadable: true } : {})(readMcpAuthorization(r)),
         });
     }
     if (raw.length > 0 && rows.length === 0)
@@ -681,72 +701,8 @@ function projectModsSection(holder) {
     try {
         if (!Object.hasOwn(holder, 'mods'))
             return undefined;
-        const raw = holder.mods;
-        if (!Array.isArray(raw))
-            return undefined;
-        const rows = [];
-        for (const r of raw) {
-            const row = modRowOf(r);
-            if (row !== undefined)
-                rows.push(row);
-        }
-        if (raw.length > 0 && rows.length === 0)
-            return undefined;
-        return rows;
-    }
-    catch {
-        return undefined;
-    }
-}
-function modRowOf(r) {
-    try {
-        if (typeof r !== 'object' || r === null || Array.isArray(r))
-            return undefined;
-        const str = (v) => (typeof v === 'string' && v.length > 0 ? v : undefined);
-        const strList = (v) => (Array.isArray(v) && v.every((x) => typeof x === 'string') ? [...v] : undefined);
-        const o = r;
-        const name = str(o.name);
-        const seat = str(o.seat);
-        const tier = str(o.tier);
-        if (name === undefined || seat === undefined || tier === undefined)
-            return undefined;
-        const eventsRaw = o.events;
-        const observeRaw = o.observe;
-        const skippedRaw = o.skipped;
-        const refusedByRaw = o.refusedBy;
-        const reasonRaw = o.reason;
-        const hasMountedKey = eventsRaw !== undefined || observeRaw !== undefined || skippedRaw !== undefined;
-        const hasRefusedKey = refusedByRaw !== undefined || reasonRaw !== undefined;
-        if (hasMountedKey && hasRefusedKey)
-            return undefined;
-        if (hasRefusedKey) {
-            const refusedBy = str(refusedByRaw);
-            const reason = str(reasonRaw);
-            return refusedBy === undefined || reason === undefined ? undefined : { name, seat, tier, refusedBy, reason };
-        }
-        const events = strList(eventsRaw);
-        if (events === undefined)
-            return undefined;
-        const observe = observeRaw === undefined ? undefined : strList(observeRaw);
-        const skipped = Array.isArray(skippedRaw)
-            ? skippedRaw.flatMap((x) => {
-                if (typeof x !== 'object' || x === null || Array.isArray(x))
-                    return [];
-                const k = x;
-                const registration = str(k.registration);
-                const cause = str(k.cause);
-                const why = str(k.reason);
-                return registration === undefined || cause === undefined || why === undefined ? [] : [{ registration, cause, reason: why }];
-            })
-            : undefined;
-        return {
-            name,
-            seat,
-            tier,
-            events,
-            ...(observe !== undefined ? { observe } : {}),
-            ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}),
-        };
+        const rows = modRowsOf(holder.mods);
+        return rows === undefined ? undefined : rows.slice();
     }
     catch {
         return undefined;

package/dist/adapter/downstream/terminalToSdkResult.js

@@ -654,7 +654,6 @@ function errorResult(ctx, parts) {
             subtype: 'success',
             ...head,
             result,
-            errors,
             ...tail,
         });
     }

package/dist/adapter/downstream/wiringManifestView.d.ts

@@ -46,3 +46,4 @@ export declare function readInstructionsSegment(holder: object, key: 'instructio
 } | undefined;
 export declare function readFleetSegment(holder: object, key: 'fleet' | '_sema_fleet'): WiringManifestFleetView | undefined;
 export declare function wiringManifestViewOf(s: WiringManifestSections): WiringManifestView | undefined;
+export declare function modRowsOf(records: unknown): readonly WiringManifestModView[] | undefined;

package/dist/adapter/downstream/wiringManifestView.js

@@ -1,3 +1,4 @@
+import { appendOwnElement } from '../../ownKey.js';
 const _viewPin = true;
 void _viewPin;
 const _viewKeysPin = true;
@@ -67,3 +68,143 @@ export function wiringManifestViewOf(s) {
         view.eventId = s.eventId;
     return view;
 }
+const isModRecordObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+function ownSlot(o, key) {
+    try {
+        const d = Object.getOwnPropertyDescriptor(o, key);
+        if (d === undefined)
+            return { state: 'absent' };
+        if (!Object.hasOwn(d, 'value'))
+            return { state: 'unreadable' };
+        return d.value === undefined ? { state: 'absent' } : { state: 'value', value: d.value };
+    }
+    catch {
+        return { state: 'unreadable' };
+    }
+}
+function ownLength(v) {
+    const s = ownSlot(v, 'length');
+    return s.state === 'value' && typeof s.value === 'number' && Number.isSafeInteger(s.value) && s.value >= 0 ? s.value : undefined;
+}
+const nonEmpty = (s) => (s.state === 'value' && typeof s.value === 'string' && s.value.length > 0 ? s.value : undefined);
+function ownStringList(v) {
+    try {
+        if (!Array.isArray(v))
+            return undefined;
+        const n = ownLength(v);
+        if (n === undefined)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < n; i++) {
+            const x = ownSlot(v, String(i));
+            if (x.state !== 'value' || typeof x.value !== 'string')
+                return undefined;
+            appendOwnElement(out, x.value);
+        }
+        return out;
+    }
+    catch {
+        return undefined;
+    }
+}
+function skipOf(x) {
+    try {
+        if (!isModRecordObject(x))
+            return undefined;
+        const registration = nonEmpty(ownSlot(x, 'registration'));
+        const cause = nonEmpty(ownSlot(x, 'cause'));
+        const reason = nonEmpty(ownSlot(x, 'reason'));
+        return registration === undefined || cause === undefined || reason === undefined ? undefined : { registration, cause, reason };
+    }
+    catch {
+        return undefined;
+    }
+}
+function modRowOf(r) {
+    try {
+        if (!isModRecordObject(r))
+            return undefined;
+        const name = nonEmpty(ownSlot(r, 'name'));
+        const seat = nonEmpty(ownSlot(r, 'seat'));
+        const tier = nonEmpty(ownSlot(r, 'tier'));
+        const provenance = nonEmpty(ownSlot(r, 'provenance'));
+        const provenancePart = provenance !== undefined ? { provenance } : {};
+        if (name === undefined || seat === undefined || tier === undefined)
+            return undefined;
+        const events = ownSlot(r, 'events');
+        const observe = ownSlot(r, 'observe');
+        const skipped = ownSlot(r, 'skipped');
+        const refusedBy = ownSlot(r, 'refusedBy');
+        const reason = ownSlot(r, 'reason');
+        const hasMountedKey = events.state !== 'absent' || observe.state !== 'absent' || skipped.state !== 'absent';
+        const hasRefusedKey = refusedBy.state !== 'absent' || reason.state !== 'absent';
+        if (hasMountedKey && hasRefusedKey)
+            return undefined;
+        if (hasRefusedKey) {
+            const by = nonEmpty(refusedBy);
+            const why = nonEmpty(reason);
+            if (by === undefined || why === undefined)
+                return undefined;
+            const refused = { name, seat, tier, ...provenancePart, refusedBy: by, reason: why };
+            return refused;
+        }
+        const eventList = events.state === 'value' ? ownStringList(events.value) : undefined;
+        if (eventList === undefined)
+            return undefined;
+        const observeList = observe.state === 'value' ? ownStringList(observe.value) : undefined;
+        const skipList = skipped.state === 'value' ? skipListOf(skipped.value) : undefined;
+        const mounted = {
+            name,
+            seat,
+            tier,
+            ...provenancePart,
+            events: eventList,
+            ...(observeList !== undefined ? { observe: observeList } : {}),
+            ...(skipList !== undefined && skipList.length > 0 ? { skipped: skipList } : {}),
+        };
+        return mounted;
+    }
+    catch {
+        return undefined;
+    }
+}
+function skipListOf(v) {
+    try {
+        if (!Array.isArray(v))
+            return undefined;
+        const n = ownLength(v);
+        if (n === undefined)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < n; i++) {
+            const x = ownSlot(v, String(i));
+            const s = x.state === 'value' ? skipOf(x.value) : undefined;
+            if (s !== undefined)
+                appendOwnElement(out, s);
+        }
+        return out;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function modRowsOf(records) {
+    try {
+        if (!Array.isArray(records))
+            return undefined;
+        const n = ownLength(records);
+        if (n === undefined)
+            return undefined;
+        const rows = [];
+        for (let i = 0; i < n; i++) {
+            const x = ownSlot(records, String(i));
+            const row = x.state === 'value' ? modRowOf(x.value) : undefined;
+            if (row !== undefined)
+                appendOwnElement(rows, row);
+        }
+        return n > 0 && rows.length === 0 ? undefined : rows;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/cloudConfigWireCaps.js

@@ -1,6 +1,6 @@
 import { mcpAllowToolsVerdict, mcpAssertionHeaderNotSentNotice, mcpElicitationVerdict, mcpToolAxesVerdict, mcpToolFacesVerdict, readMcpHttpIdentityHeaders } from './mcpWireCaps.js';
 import { skillToolListsVerdict, toCappedSpec } from './skillsWireCaps.js';
-import { SETTINGS_DESCRIBE_BAD_WIRE_NAME, SETTINGS_IS_USABLE_WIRE_NAME, SETTINGS_READ_REQUEST_MCP_TRANSPORT } from './generated/settingsSchemaFns.js';
+import { SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME, SETTINGS_IS_USABLE_MCP_SERVER_NAME, SETTINGS_READ_REQUEST_MCP_TRANSPORT } from './generated/settingsSchemaFns.js';
 import { snapshotArgs, wireTransportOf } from './mcpWireTransport.js';
 import { msg, renderMessage } from './i18n/translate.js';
 import { TIER_ORDER } from './model/tierVocabulary.js';
@@ -66,7 +66,7 @@ export function cloudMcpToSpecs(servers, env) {
             recordDrop(name, 'missing-field');
             continue;
         }
-        if (!SETTINGS_IS_USABLE_WIRE_NAME(name)) {
+        if (!SETTINGS_IS_USABLE_MCP_SERVER_NAME(name)) {
             recordDrop(name, 'name-unusable');
             continue;
         }
@@ -148,10 +148,12 @@ export function cloudMcpToSpecs(servers, env) {
         let axesDeclared;
         let elicitationDeclared;
         let allowDeclared;
+        let startupDeclared;
         try {
             axesDeclared = s.toolAxes;
             elicitationDeclared = s.elicitation;
             allowDeclared = s.allowTools;
+            startupDeclared = s.startupTimeoutMs;
         }
         catch {
             recordDrop(name, 'entry-unreadable');
@@ -199,6 +201,7 @@ export function cloudMcpToSpecs(servers, env) {
             ...(elVerdict.elicitation !== undefined ? { elicitation: elVerdict.elicitation } : {}),
             ...(facesShipped !== undefined ? { toolFaces: facesShipped } : {}),
             ...(axesShipped !== undefined ? { toolAxes: axesShipped } : {}),
+            ...(startupDeclared !== undefined ? { startupTimeoutMs: startupDeclared } : {}),
         });
     }
     return { specs, missingEnv: [...new Set(missingEnv)], droppedServers, degradedServers };
@@ -859,7 +862,7 @@ function droppedMcpNotices(carrier) {
         const label = name === undefined
             ? undefined
             : reason === 'name-unusable'
-                ? SETTINGS_DESCRIBE_BAD_WIRE_NAME(name)
+                ? SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME(name)
                 : reason === 'transport-invalid' || reason === 'allow-tools-invalid' || reason === 'entry-unreadable'
                     ? `"${capForDisplay(name, DEGRADED_NAME_SHOWN)}"${pathLabel}`
                     : `"${name}"${pathLabel}`;

package/dist/compensations.js

@@ -87,7 +87,7 @@ export const MIGRATED_COMPENSATIONS = [
     {
         id: 'T3',
         what: '从落盘转录的 `<task-notification>` XML 反解回植去重键 —— 去重面纯内存,重启即蒸发,' +
-            '「通知 user-turn 已落盘、ack 未落」的 crash 窗口会二次喂模型(#63)',
+            '「通知 user-turn 已落盘、ack 未落」的 crash 窗口会二次喂模型',
         disposition: 'in-library',
         libraryHalf: 'notifications.ts parseTranscriptNotificationSeeds(**唯一一份**解析;0.98.0 起逐块解析归线性块解析器,单条口 readTaskNotificationXml 读同一只)+ ' +
             'adapt.ts importLedgerFromTranscript(消费口)',

package/dist/credentialPlaneCapability.d.ts

@@ -0,0 +1,22 @@
+export type SandboxGitCredentialOriginView = {
+    readonly origin: string;
+    readonly delivers: true;
+} | {
+    readonly origin: string;
+    readonly delivers: false;
+    readonly reason: string;
+};
+export type SandboxGitCredentialPlaneReading = {
+    readonly kind: 'unobserved';
+} | {
+    readonly kind: 'not_reported';
+} | {
+    readonly kind: 'unreadable';
+} | {
+    readonly kind: 'off';
+    readonly reason: string;
+} | {
+    readonly kind: 'on';
+    readonly origins: readonly SandboxGitCredentialOriginView[];
+};
+export declare function observedSandboxGitCredentialPlane(baseUrl?: string | undefined): SandboxGitCredentialPlaneReading;

package/dist/credentialPlaneCapability.js

@@ -0,0 +1,75 @@
+import { engineCapValue } from './engineCapsCache.js';
+import { engineWireTargetBaseUrl } from './engineWireTarget.js';
+import { ownDataField } from './ownKey.js';
+const UNOBSERVED = Object.freeze({ kind: 'unobserved' });
+const NOT_REPORTED = Object.freeze({ kind: 'not_reported' });
+const UNREADABLE = Object.freeze({ kind: 'unreadable' });
+const isRecord = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const nonEmpty = (v) => typeof v === 'string' && v.length > 0;
+function readOrigin(v) {
+    if (!isRecord(v))
+        return undefined;
+    const origin = ownDataField(v, 'origin');
+    const delivers = ownDataField(v, 'delivers');
+    if (!nonEmpty(origin))
+        return undefined;
+    if (delivers === true)
+        return Object.freeze({ origin, delivers: true });
+    if (delivers !== false)
+        return undefined;
+    const reason = ownDataField(v, 'reason');
+    return nonEmpty(reason) ? Object.freeze({ origin, delivers: false, reason }) : undefined;
+}
+function projectSandboxGit(plane) {
+    try {
+        if (!isRecord(plane))
+            return UNREADABLE;
+        const sg = ownDataField(plane, 'sandboxGit');
+        if (sg === undefined)
+            return NOT_REPORTED;
+        if (!isRecord(sg))
+            return UNREADABLE;
+        const state = ownDataField(sg, 'state');
+        if (state === 'off') {
+            const reason = ownDataField(sg, 'reason');
+            return nonEmpty(reason) ? Object.freeze({ kind: 'off', reason }) : UNREADABLE;
+        }
+        if (state !== 'on')
+            return UNREADABLE;
+        const list = ownDataField(sg, 'origins');
+        if (!Array.isArray(list))
+            return UNREADABLE;
+        const n = ownDataField(list, 'length');
+        if (typeof n !== 'number' || !Number.isInteger(n) || n < 0)
+            return UNREADABLE;
+        const origins = [];
+        for (let i = 0; i < n; i += 1) {
+            const row = readOrigin(ownDataField(list, String(i)));
+            if (row === undefined)
+                return UNREADABLE;
+            origins.push(row);
+        }
+        return Object.freeze({ kind: 'on', origins: Object.freeze(origins) });
+    }
+    catch {
+        return UNREADABLE;
+    }
+}
+export function observedSandboxGitCredentialPlane(baseUrl = engineWireTargetBaseUrl()) {
+    try {
+        const slot = engineCapValue(typeof baseUrl === 'string' && baseUrl.length > 0 ? baseUrl : undefined, 'credentialPlane');
+        switch (slot.kind) {
+            case 'unobserved':
+                return UNOBSERVED;
+            case 'not_reported':
+                return NOT_REPORTED;
+            case 'value':
+                return projectSandboxGit(slot.value);
+            default:
+                return UNREADABLE;
+        }
+    }
+    catch {
+        return UNOBSERVED;
+    }
+}

package/dist/deviceExecutorManagementCapability.d.ts

@@ -13,6 +13,7 @@ export type DeviceExecutorManagementReading = {
     protocolVersion?: number;
     maxInflightPerDevice?: number;
     wsPath?: string;
+    relayUrl?: string;
 };
 export declare function projectDeviceExecutorManagementCapability(caps: unknown): DeviceExecutorManagementReading | undefined;
 export declare function observedDeviceExecutorManagement(baseUrl?: string | undefined): DeviceExecutorManagementReading;

package/dist/deviceExecutorManagementCapability.js

@@ -1,6 +1,6 @@
 import { engineWireTargetBaseUrl } from './engineWireTarget.js';
 import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
-import { ownDataField } from './ownKey.js';
+import { guardedRead, ownDataField } from './ownKey.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 export function projectDeviceExecutorManagementCapability(caps) {
     try {
@@ -28,12 +28,14 @@ export function projectDeviceExecutorManagementCapability(caps) {
         const pv = ownDataField(d, 'protocolVersion');
         const mi = ownDataField(d, 'maxInflightPerDevice');
         const ws = ownDataField(d, 'wsPath');
+        const relay = guardedRead(() => ownDataField(d, 'relayUrl'));
         return {
             kind: 'present',
             management,
             ...(typeof pv === 'number' && Number.isFinite(pv) ? { protocolVersion: pv } : {}),
             ...(typeof mi === 'number' && Number.isFinite(mi) && mi >= 0 ? { maxInflightPerDevice: mi } : {}),
             ...(typeof ws === 'string' && ws.length > 0 ? { wsPath: ws } : {}),
+            ...(typeof relay === 'string' && relay.length > 0 ? { relayUrl: relay } : {}),
         };
     }
     catch {