@sema-agent/client-core 0.102.0 → 0.103.0

package/dist/generated/settingsSchemaTypes.d.ts

@@ -118,7 +118,7 @@ export interface McpEntryKeyIssue {
     readonly path: string;
     readonly reason: string;
     readonly member?: string;
-    readonly fault?: "not_plain_record" | "member_not_string" | "member_name_reserved";
+    readonly fault?: PlainStringRecordFault;
 }
 export type RequestMcpTransportRead = {
     ok: true;
@@ -128,6 +128,8 @@ export type RequestMcpTransportRead = {
     ok: false;
     issue: McpEntryKeyIssue;
 };
+declare const PLAIN_STRING_RECORD_FAULTS: readonly ["not_plain_record", "member_not_string", "member_name_reserved"];
+export type PlainStringRecordFault = (typeof PLAIN_STRING_RECORD_FAULTS)[number];
 declare const MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"];
 export type McpContentOrigin = (typeof MCP_CONTENT_ORIGINS)[number];
 export {};

package/dist/hitl/automaticAnswerVerdict.d.ts

@@ -20,7 +20,7 @@ export type AutomaticAnswerVerdict = {
     readonly kind: 'unknown';
     readonly why: AutomaticAnswerUnknownWhy;
 };
-export declare const MODE_ARBITRATION: Readonly<Record<"hook" | "write_protection" | "mode" | "target_unresolved" | "content_question" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const MODE_ARBITRATION: Readonly<Record<"hook" | "write_protection" | "mode" | "target_unresolved" | "content_question" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "probe" | "write_protection_on_disk" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
 export declare function foldModeArbitrationRow(classes: Iterable<string>, askFace?: AutomaticAnswerAskFace): CoreModeArbitrationRow;
 export declare function automaticAnswerVerdict(card: object | null | undefined, lane: AutomaticAnswerLane, facts?: AutomaticAnswerFacts | null): AutomaticAnswerVerdict;
 export declare function mandatedApprovalDetailOf(card: object | null | undefined, lang?: UiLanguage): string;

package/dist/hitl/decisionConflict.js

@@ -1,9 +1,10 @@
 import { APPROVAL_BINDING_MISMATCH, CHECKPOINT_UNSUPPORTED_VERSION, RESUME_OUTCOME_INVALID } from '../engineErrorCodes.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { ownDataField } from '../ownKey.js';
-import { isSlotCarrier, PROTOCOL_ERROR_NAME, protocolErrorNameOf, readRefusalField } from '../wireFailureShape.js';
+import { isSlotCarrier, PROTOCOL_ERROR_NAME, protocolErrorNameReading, readRefusalSlots, readThrownExtraSnapshot } from '../wireFailureShape.js';
 const BINDING_SEAT_FIELDS = new Set(['boundCallId', 'boundInputHash']);
 const ANSWER_FIELD = 'answer';
+const REFUSAL_WORD_KEYS = Object.freeze(['field', 'reason']);
 const GRANT_DIGEST_FIELD = 'boundGrantDigest';
 function namedProtocolOf(r) {
     return r.state === 'named' ? r.name : undefined;
@@ -11,6 +12,7 @@ function namedProtocolOf(r) {
 export function decisionConflictOf(err, captured, protocolNameRead) {
     if (!isSlotCarrier(err))
         return undefined;
+    const extra = readThrownExtraSnapshot(err);
     let code;
     if (captured !== undefined) {
         if (captured.state !== 'read')
@@ -25,23 +27,21 @@ export function decisionConflictOf(err, captured, protocolNameRead) {
             return undefined;
         }
     }
-    const protocolName = protocolNameRead !== undefined ? namedProtocolOf(protocolNameRead) : protocolErrorNameOf(err);
+    const protocolName = namedProtocolOf(protocolNameRead ?? protocolErrorNameReading(err, extra));
     if (code === CHECKPOINT_UNSUPPORTED_VERSION)
         return 'format_version';
     const bindingFamily = code === APPROVAL_BINDING_MISMATCH || (code === undefined && protocolName === PROTOCOL_ERROR_NAME.ApprovalBindingMismatchError);
     if (!bindingFamily && code !== RESUME_OUTCOME_INVALID)
         return undefined;
-    let field;
-    try {
-        field = readRefusalField(err);
-    }
-    catch {
-        field = undefined;
-    }
+    const slots = readRefusalSlots(err, REFUSAL_WORD_KEYS, extra.bag);
+    const field = slots.field.word;
     if (code === RESUME_OUTCOME_INVALID)
         return field === ANSWER_FIELD ? 'answer_invalid' : field === GRANT_DIGEST_FIELD ? 'grant_changed' : undefined;
-    if (field === undefined)
-        return 'row_integrity';
+    if (field === undefined) {
+        if (slots.field.present)
+            return undefined;
+        return slots.reason.word !== undefined ? 'row_integrity' : undefined;
+    }
     return BINDING_SEAT_FIELDS.has(field) ? 'binding_mismatch' : undefined;
 }
 export const DECISION_ANSWER_INVALID_CONTENT = 'The engine rejected the answer itself because it does not fit the question that was asked · Nothing was decided and the question is still waiting · Correct the answer and send it again';

package/dist/hitl/decisionRefusal.d.ts

@@ -54,6 +54,7 @@ export interface DecisionRefusalReading {
     readonly transient?: true;
     readonly conflict?: DecisionRefusalConflict;
     readonly unrecoverable?: true;
+    readonly acceptableForm?: {} | null;
 }
 export declare function mintDecisionRefusalReading(err: {} | null | undefined, context?: RefusalRouteContext, attributionCarried?: boolean, delivered?: DeliveredReading, carried?: RefusalCarrier): DecisionRefusalReading;
 export declare function readDecisionRefusalReading(err: {} | null | undefined, context?: RefusalRouteContext): DecisionRefusalReading;

package/dist/hitl/decisionRefusal.js

@@ -1,4 +1,4 @@
-import { ASK_GONE, ASK_GONE_PARKED, RESUME_PREFLIGHT_REJECTED, isDecideAlreadyResolvedCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, refusalRetriableReading, refusalSaysStillPending } from '../engineErrorCodes.js';
+import { ASK_GONE, ASK_GONE_PARKED, RESUME_CONSTRAINT_REJECTED, RESUME_PREFLIGHT_REJECTED, isDecideAlreadyResolvedCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, refusalRetriableReading, refusalSaysStillPending } from '../engineErrorCodes.js';
 import { isUiLanguage } from '../env/uiLanguage.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { notPendingCauseReading, refusalCauseWordOf } from './approvalEndingCause.js';
@@ -7,7 +7,7 @@ import { isAlreadyResolvedGateReason, isCodeClassifiedGateFailure } from './park
 import { decisionConflictOf } from './decisionConflict.js';
 import { readLivePendingRows } from './livePendingAsk.js';
 import { guardedRead, ownDataField, readOwnDataValue } from '../ownKey.js';
-import { PROTOCOL_ERROR_NAME, THROWN_SLOT_UNREADABLE, isDisplayableWireCode, isSlotCarrier, ownFoldedCodeBitsOf, protocolErrorNameReading, readErrorRecord, readRefusalField, readThrownSlot } from '../wireFailureShape.js';
+import { PROTOCOL_ERROR_NAME, THROWN_SLOT_UNREADABLE, isDisplayableWireCode, isSlotCarrier, ownFoldedCodeBitsOf, protocolErrorNameReading, readErrorPresent, readErrorRecord, readRefusalField, readThrownSlot } from '../wireFailureShape.js';
 import { attributionRefusalOf, carrierReadOf } from './attributionLadder.js';
 import { CODE_UNREADABLE, ownReadingSlot } from '../engineWireFor.js';
 export const ASK_DECIDED_CODE = 'conflict.ask_decided';
@@ -223,6 +223,7 @@ export function mintDecisionRefusalReading(err, context, attributionCarried, del
     const inRange = standing !== undefined && status !== undefined;
     const conflict = inRange && status === 409 && obj !== undefined ? isolated(() => decisionConflictOf(obj, captured, pn)) : undefined;
     const unrecoverable = inRange && status !== undefined && Number.isInteger(status) && status >= 400 && status <= 599 && isDecideRowUnrevivableCode(errorCode);
+    const acceptableForm = errorCode === RESUME_CONSTRAINT_REJECTED && obj !== undefined ? isolated(() => readErrorPresent(obj, 'acceptableForm')) : undefined;
     const transient = inRange &&
         conflict !== 'grant_changed' &&
         !unrecoverable &&
@@ -244,6 +245,7 @@ export function mintDecisionRefusalReading(err, context, attributionCarried, del
         ...(transient ? { transient: true } : {}),
         ...(conflict !== undefined ? { conflict } : {}),
         ...(unrecoverable ? { unrecoverable: true } : {}),
+        ...(acceptableForm !== undefined ? { acceptableForm } : {}),
     });
 }
 export function readDecisionRefusalReading(err, context) {

package/dist/hitl/editedRuleTextPrecheck.d.ts

@@ -12,6 +12,7 @@ export type EditedRuleTextPrecheck = {
     message: string;
 };
 export type EditedRuleTextPrechecker = (text: string, command: string) => EditedRuleTextPrecheck;
+export declare function trimEditedRuleText(text: string): string;
 export declare function installEditedRuleTextPrechecker(fn: EditedRuleTextPrechecker | null): () => void;
 export declare function hasEditedRuleTextPrechecker(): boolean;
 export declare function precheckEditedRuleText(text: string, command: string): EditedRuleTextPrecheck | undefined;

package/dist/hitl/editedRuleTextPrecheck.js

@@ -1,4 +1,29 @@
 let installed = null;
+function escapedAt(s, i) {
+    let n = 0;
+    for (let j = i - 1; j >= 0 && s[j] === '\\'; j -= 1)
+        n += 1;
+    return n % 2 === 1;
+}
+export function trimEditedRuleText(text) {
+    if (typeof text !== 'string')
+        return text;
+    const outer = text.trim();
+    let open = -1;
+    for (let i = 0; i < outer.length; i += 1) {
+        if (outer[i] === '(' && !escapedAt(outer, i)) {
+            open = i;
+            break;
+        }
+    }
+    if (open <= 0)
+        return outer;
+    const head = outer.slice(0, open);
+    const name = head.trimEnd();
+    if (name === head || name.length === 0 || name.endsWith('\\'))
+        return outer;
+    return name + outer.slice(open);
+}
 export function installEditedRuleTextPrechecker(fn) {
     const prev = installed;
     installed = fn;
@@ -13,7 +38,7 @@ export function precheckEditedRuleText(text, command) {
     const fn = installed;
     if (fn === null)
         return undefined;
-    return fn(text, command);
+    return fn(trimEditedRuleText(text), command);
 }
 export function _resetEditedRuleTextPrecheckerForTest() {
     installed = null;

package/dist/hitl/persistedRulesWire.js

@@ -208,6 +208,7 @@ const PERSISTED_RULE_MATCH_KEYS = Object.freeze({
     host: 'rules.match.host',
     subdomain: 'rules.match.subdomain',
     pattern: 'rules.match.pattern',
+    tool: 'rules.match.tool',
 });
 export function persistedRuleMatchLabel(ruleOrMatch, lang) {
     const word = typeof ruleOrMatch === 'string' ? ruleOrMatch : ownSlot(ruleOrMatch, 'match');

package/dist/hitl/planReviewWire.d.ts

@@ -1,4 +1,5 @@
 import { type QuestionAnswer } from '../liveQuestionStore.js';
+import type { EngineWireInjection } from '../engineWireSdk.js';
 import { type PlanReviewModeAfter } from './hitlBridge.js';
 import type { AgentClient } from '@sema-agent/sdk';
 import type { ReopenCardVerdict } from '../adapter/activeRunSelfHeal.js';
@@ -66,7 +67,7 @@ export type PlanReviewWireClient = {
     assistant: Pick<AgentClient['assistant'], 'planReview'>;
     runs: Pick<AgentClient['runs'], 'get'>;
 };
-export interface PlanReviewWire {
+export interface PlanReviewWire extends EngineWireInjection<PlanReviewWireClient> {
     client: PlanReviewWireClient;
 }
 export interface PlanReviewDecisionOutcome extends PlanReviewOutcomeMeta {

package/dist/hitl/planReviewWire.js

@@ -2,6 +2,7 @@ import { publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionRes
 import { hostLog } from '../host.js';
 import { abortableSleep, settleWithinDeadline } from '../abortableSleep.js';
 import { clientHasVerbs, engineWireFor, noAnswerKindOf, sendOnce } from '../engineWireFor.js';
+import { engineCapTrue } from '../engineCapsCache.js';
 import { engineWireTarget } from '../engineWireTarget.js';
 import { enqueuePlanReviewOutcome } from '../notifications.js';
 import { corruptStoredRowContent, corruptStoredRowWhere } from '../wireErrorTriage.js';
@@ -370,7 +371,7 @@ export function armPlanReviewApproval(result, sessionKey, opts) {
         }
         const wire = opts?.wire;
         if (wire !== undefined) {
-            if (!usablePlanReviewWireClient(wire.client)) {
+            if (engineWireFor(wire, DEFAULT_SESSION_KEY, usablePlanReviewWireClient).kind !== 'injected') {
                 hostLog('error', 'planReviewWire: plan_review card NOT armed — the engine client supplied by the host is not usable (needs assistant.planReview and runs.get)');
                 return false;
             }
@@ -454,15 +455,6 @@ export function planReviewOutcomeTail(taskId, decision, effect, cause) {
             return `Do not state the result as fact: tell the user the ${decision} was submitted but its effect could not be confirmed; TaskOutput("${taskId}") shows where the task stands.`;
     }
 }
-function clientOnlyView(wire) {
-    if (wire === undefined || wire === null || typeof wire !== 'object')
-        return wire;
-    return {
-        get client() {
-            return wire.client;
-        },
-    };
-}
 function planReviewDecisionTimedOutOutcome(decision) {
     return (`The plan_review ${decision} was sent, but no answer came back from the engine within the time limit this host allows for it — ` +
         `it may have taken effect (${decision === 'approve' ? 'an approval keeps the engine busy until the resumed work finishes' : 'the engine may still be applying it'}).`);
@@ -654,7 +646,7 @@ async function decidePlanReviewInner(taskId, decision, permissionModeAfter, disp
     let stillParkedCause;
     let statusSeen;
     const wire = opts?.wire;
-    const resolved = engineWireFor(clientOnlyView(wire), DEFAULT_SESSION_KEY, usablePlanReviewWireClient);
+    const resolved = engineWireFor(wire, DEFAULT_SESSION_KEY, usablePlanReviewWireClient);
     const badMode = permissionModeAfter !== undefined && !isPlanReviewModeAfter(permissionModeAfter);
     if (badMode) {
         hostLog('error', `planReviewWire: ${decision} NOT sent — permissionModeAfter must be "default" or "acceptEdits"`);
@@ -683,11 +675,15 @@ async function decidePlanReviewInner(taskId, decision, permissionModeAfter, disp
             try {
                 const mode = isPlanReviewModeAfter(permissionModeAfter) ? permissionModeAfter : undefined;
                 const reason = denyReasonForWire(opts?.reason, `plan-review ${taskId}`);
+                const capsBase = resolved.kind === 'target' ? resolved.target.baseUrl : resolved.capsBaseUrl;
+                const checkpointId = gateBefore !== undefined && engineCapTrue(capsBase, 'planReviewCheckpointId') ? gateBefore : undefined;
                 const reqBody = { decision };
                 if (reason !== undefined)
                     reqBody.reason = reason;
                 if (mode !== undefined)
                     reqBody.permissionModeAfter = mode;
+                if (checkpointId !== undefined)
+                    reqBody.checkpointId = checkpointId;
                 let body;
                 try {
                     body = await sendOnce(undefined, () => client.assistant.planReview(taskId, reqBody));
@@ -697,7 +693,7 @@ async function decidePlanReviewInner(taskId, decision, permissionModeAfter, disp
                     const defaultConflict = mode === 'default' && conflict?.status === 400 && conflict?.errorCode === REQUEST_FIELD_CONFLICT;
                     if (defaultConflict && !directFailureVerdictOf(e1, directSafetyStopOf(e1)).yields) {
                         hostLog('debug', 'planReviewWire: permissionModeAfter "default" refused as not applicable — re-sending the approval without the key (same meaning)');
-                        body = await sendOnce(undefined, () => client.assistant.planReview(taskId, reason !== undefined ? { decision, reason } : { decision }));
+                        body = await sendOnce(undefined, () => client.assistant.planReview(taskId, { decision, ...(reason !== undefined ? { reason } : {}), ...(checkpointId !== undefined ? { checkpointId } : {}) }));
                     }
                     else {
                         throw e1;

package/dist/hitl/sessionPolicyDeliverable.d.ts

@@ -22,4 +22,3 @@ export interface SessionPolicyDeliverableOptions {
 }
 export declare function sessionPolicyDeliverable(behavior: 'deny' | 'ask', rules: readonly string[], opts?: SessionPolicyDeliverableOptions): SessionPolicyDeliverability;
 export declare function sessionPolicyWithheldNotice(why: SessionPolicyWithheldWhy, lang?: UiLanguage): string;
-export declare function legacyToolNameFailureNoteOf(code: string | undefined): string | undefined;

package/dist/hitl/sessionPolicyDeliverable.js

@@ -1,11 +1,9 @@
-import { CONFIG_LEGACY_TOOL_NAME } from '../engineErrorCodes.js';
 import { rosterMountedNames } from '../rosterMountedNames.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { readOwnDataValue } from '../ownKey.js';
 import { denyEntryReading, ruleCompileVerdict } from '../ruleCompileVerdict.js';
 import { ruleToolNameVerdictOf } from '../protocolSegment.js';
 import { PREFIXES_IN_PROSE, REFUSED_NAME_FIX } from './refusedToolNameProse.js';
-import { prepareRefusalNoteOf } from '../prepareRefusal.js';
 import { CORE_PROTOCOL_PREFIXES } from '../generated/toolNameTables.js';
 const COVERING_NAMESPACE_PREFIXES = CORE_PROTOCOL_PREFIXES;
 const WITHHELD_NOTICE = {
@@ -204,6 +202,3 @@ export function sessionPolicyWithheldNotice(why, lang) {
     }
     return 'Not written to this session’s rule record.';
 }
-export function legacyToolNameFailureNoteOf(code) {
-    return code === CONFIG_LEGACY_TOOL_NAME ? prepareRefusalNoteOf(code) : undefined;
-}

package/dist/hitl/sessionPolicyWire.js

@@ -21,7 +21,7 @@ const RULE_FIELD_PRESENCE = {
     toolDeny: true,
     allowDirs: true,
 };
-const RECORD_META_KEYS = Object.freeze(['rev', 'gen', 'grammar']);
+const RECORD_META_KEYS = Object.freeze(['rev', 'gen', 'grammar', 'operatorRules']);
 const _metaKeysPin = true;
 void _metaKeysPin;
 export const SESSION_POLICY_RULE_FIELDS = Object.freeze(Object.keys(RULE_FIELD_PRESENCE));

package/dist/hitl/toolApprovalWire.d.ts

@@ -1,6 +1,7 @@
 import { type HitlClientLike, type DecideOperationObserver } from './hitlBridge.js';
 import { readApprovalCardWord, type ApprovalCardWord } from './approvalCardReading.js';
 import { type ApprovalAllowRuleShadow } from './allowRuleShadow.js';
+import { CORE_PERSISTED_RULE_MATCHES } from '../generated/engineFactTables.js';
 import type { UiLanguage } from '../env/uiLanguage.js';
 import type { SessionRuleInertReason } from './sessionPolicyWire.js';
 import { type ApprovalCardClaim } from './approvalHolds.js';
@@ -30,22 +31,33 @@ export type { RuleOfferBatchMember };
 export type { RuleOfferUncoveredDetail };
 export type { RuleOfferUncoveredReason };
 export { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS };
+type RuleOfferMatchWord = (typeof CORE_PERSISTED_RULE_MATCHES)[number];
+type RuleOfferBatchMemberReading = Exclude<RuleOfferBatchMember, {
+    kind: 'command';
+}> | (Omit<Extract<RuleOfferBatchMember, {
+    kind: 'command';
+}>, 'match'> & {
+    match: RuleOfferMatchWord;
+});
 export type { AskOrigin };
 export type { RuleOffersAbsence };
 export type { DenialLimitKind };
 export type { DenialLimitFallback };
 export { RULE_OFFERS_ABSENCE_REASONS };
 export declare const ASK_ORIGIN_WORDS: readonly string[];
-export type RuleOfferReading = (Extract<SdkRuleOffer, {
+export type RuleOfferReading = (Omit<Extract<SdkRuleOffer, {
     kind: 'single';
-}> & {
+}>, 'match'> & {
+    match: RuleOfferMatchWord;
     offerIndex: number;
 }) | (Omit<Extract<SdkRuleOffer, {
     kind: 'batch';
-}>, 'uncoveredDetail'> & {
+}>, 'uncoveredDetail' | 'rules'> & RuleOfferBatchReadingSeats);
+interface RuleOfferBatchReadingSeats {
+    rules: RuleOfferBatchMemberReading[];
     offerIndex: number;
     uncoveredDetail?: readonly RuleOfferUncoveredDetail[];
-});
+}
 export interface ApprovalCardAllowDecision {
     kind: 'allow';
     allowSession: boolean;
@@ -263,8 +275,8 @@ export declare function approvalSupersedesDetail(card: Pick<ApprovalCardRequest,
 export declare function readDenialLimitFallback(v: unknown): DenialLimitFallback | undefined;
 export declare function readRuleOffers(v: unknown): RuleOfferReading[] | undefined;
 export declare function readRuleOfferSupply(offers: unknown): RuleOfferReading[] | undefined;
-export type ApprovalCardV1Facts = Pick<ApprovalCardRequest, 'toolName' | 'args'> & Pick<ApprovalCardRequest, 'toolCallId' | 'workerBadge' | 'wireNote' | 'argsUnavailable' | 'governanceForced' | 'delegation' | 'ruleOffersReadOnly' | 'inputHasBidi' | 'allowRuleShadow' | 'probeCause' | 'rememberRefused' | 'ruleEvidence' | 'requiresRealApproval' | 'ruleOffersAbsence' | 'denialLimitFallback' | 'askClass' | 'classes' | 'grantBinding' | 'unreadableEvidence' | 'message'>;
-export type ApprovalCardFacts = ApprovalCardV1Facts & Pick<ApprovalCardRequest, 'ruleOffers' | 'probeReason' | 'mandated' | 'mandate' | 'readRootCandidate' | 'origin' | 'approvalCard' | 'boundGrants' | 'classifierNoRuling' | 'allowSessionCarried' | 'cardPayloadUnreadable'>;
+export type ApprovalCardV1Facts = Pick<ApprovalCardRequest, 'toolName' | 'args'> & Pick<ApprovalCardRequest, 'toolCallId' | 'workerBadge' | 'wireNote' | 'argsUnavailable' | 'governanceForced' | 'delegation' | 'ruleOffersReadOnly' | 'inputHasBidi' | 'allowRuleShadow' | 'probeCause' | 'rememberRefused' | 'ruleEvidence' | 'requiresRealApproval' | 'ruleOffersAbsence' | 'denialLimitFallback' | 'askClass' | 'classes' | 'grantBinding' | 'unreadableEvidence' | 'message' | 'approvalCard'>;
+export type ApprovalCardFacts = ApprovalCardV1Facts & Pick<ApprovalCardRequest, 'ruleOffers' | 'probeReason' | 'mandated' | 'mandate' | 'readRootCandidate' | 'origin' | 'boundGrants' | 'classifierNoRuling' | 'allowSessionCarried' | 'cardPayloadUnreadable'>;
 export interface ApprovalCardFrameFactsOptions {
     readonly streamArgs?: object;
     readonly argsUnavailable?: true;

package/dist/hitl/toolApprovalWire.js

@@ -3,6 +3,7 @@ import { askParkRowArm } from './askParkRowRouting.js';
 import { parkGateArmOf } from './frameRouter.js';
 import { seatSessionRowOf } from './standingRows.js';
 import { hostLog } from '../host.js';
+import { trimEditedRuleText } from './editedRuleTextPrecheck.js';
 import { appendOwnElement, guardedRead, readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue, readOwnNonEmptyString } from '../ownKey.js';
 import { ownReadingSlot } from '../engineWireFor.js';
 import { DEPLOYMENT_LIST_ASK_CLASSES, readAskClassPair } from './askClassPair.js';
@@ -12,7 +13,7 @@ import { readAllowRuleShadowFromWire, retiredAllowRuleShadowKeyPresent, RETIRED_
 import { createSessionSlot, DEFAULT_SESSION_KEY } from '../sessionSlot.js';
 import { readEngineActiveBgTasks } from '../fleet/fleetLedger.js';
 import { CORE_SKILL_TOOL_NAME } from '../generated/toolNameTables.js';
-import { CORE_ALLOW_ENTRY_INERT_REASONS } from '../generated/engineFactTables.js';
+import { CORE_ALLOW_ENTRY_INERT_REASONS, CORE_PERSISTED_RULE_MATCHES } from '../generated/engineFactTables.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { INTERRUPT_DENY_REASON, observeCancelByDeny, surfaceApprovalParking, surfaceRememberNotApplied, surfaceEditNotForwarded, surfaceEditRefusedOnBlindAsk, surfaceRuleArmNotSent, surfaceRuleArmRejected } from './hitlHostSurface.js';
 import { approvalCallKey, liveFrameCallKey } from './gateIdentity.js';
@@ -67,6 +68,8 @@ export function structurallyEqual(a, b) {
     return ka.every(k => structurallyEqual(a[k], b[k]));
 }
 export { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS };
+const _sdkRuleOfferMatchWithinEngine = true;
+void _sdkRuleOfferMatchWithinEngine;
 export { RULE_OFFERS_ABSENCE_REASONS };
 export const ASK_ORIGIN_WORDS = ASK_ORIGINS;
 export const APPROVAL_DENY_SETTLED_BY_WORDS = Object.freeze(['human', 'policy']);
@@ -1336,7 +1339,7 @@ export function readDenialLimitFallback(v) {
     };
 }
 function isRuleOfferMatch(v) {
-    return typeof v === 'string' && RULE_OFFER_MATCHES.includes(v);
+    return typeof v === 'string' && CORE_PERSISTED_RULE_MATCHES.includes(v);
 }
 function readRuleTriple(v) {
     if (v === null || typeof v !== 'object')
@@ -1346,7 +1349,7 @@ function readRuleTriple(v) {
         return undefined;
     if (!isRuleOfferMatch(o.match))
         return undefined;
-    if (typeof o.command !== 'string' || o.command === '')
+    if (typeof o.command !== 'string')
         return undefined;
     return { rule: o.rule, match: o.match, command: o.command };
 }
@@ -1624,6 +1627,8 @@ function cardFactsOf(carrier, leg, opts) {
             if (o !== undefined)
                 out.origin = o;
         });
+    }
+    if (leg !== 'generic') {
         v1Bit(() => {
             const w = readApprovalCardWord(carrier);
             if (w !== undefined)
@@ -1899,7 +1904,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
             const edited = card.persistRuleEdited === true;
             if (edited) {
                 if (lane?.respondFreeFormRulesCapable === true) {
-                    persistRule = card.persistRule;
+                    persistRule = trimEditedRuleText(card.persistRule);
                     persistRuleEdited = true;
                 }
                 else {

package/dist/i18n/messages.en.d.ts

@@ -184,6 +184,7 @@ declare const EN: {
     'config.mcp.nameEdgeWhitespace': string;
     'config.mcp.nameCollides': string;
     'config.mcp.nameTooLong': string;
+    'config.mcp.nameReserved': string;
     'config.mcp.identityHeadersBothSet': string;
     'config.mcp.transportUnreadable': string;
     'config.mcp.transportInvalid': string;
@@ -584,6 +585,8 @@ declare const EN: {
     'notice.wayOut.switchModel': string;
     'notice.wayOut.wait': string;
     'notice.wayOut.fixRequest': string;
+    'notice.askUnresolvable.remedy.approver': string;
+    'notice.askUnresolvable.remedy.permissionMode': string;
     'rules.refusal.sentence.one': string;
     'rules.refusal.sentence.other': string;
     'rules.refusal.item': string;
@@ -780,6 +783,7 @@ declare const EN: {
     'rules.match.host': string;
     'rules.match.subdomain': string;
     'rules.match.pattern': string;
+    'rules.match.tool': string;
     'rules.match.unreported': string;
     'rules.match.unknown': string;
     'model.tier.blurb.ultra': string;
@@ -1048,6 +1052,7 @@ declare const EN: {
     'config.mods.loader.failedNoReason': string;
     'config.mods.refusal.by': string;
     'config.mods.rewrite.resultInPlace': string;
+    'config.mods.rewrite.inputBy': string;
 };
 export declare const EN_MESSAGES: Readonly<typeof EN>;
 export type MessageKey = keyof typeof EN;

package/dist/i18n/messages.en.js

@@ -184,6 +184,7 @@ const EN = {
     'config.mcp.nameEdgeWhitespace': 'MCP server name {name}{where} cannot be used as written, so the server was not started: it would not match the same name in other settings (for example a list of disabled servers). Remove the extra whitespace from the name.',
     'config.mcp.nameCollides': 'MCP server name {name}{where} cannot be used as written, so the server was not started: without its leading or trailing whitespace it would be the same name as another MCP server entry. Remove the extra whitespace from the name, or delete the duplicate entry.',
     'config.mcp.nameTooLong': 'MCP server name {name}{where} cannot be used, so the server was not started: server names are limited to 128 characters. Shorten the name.',
+    'config.mcp.nameReserved': 'MCP server name {name}{where} cannot be used, so the server was not started: names starting with "remote-" are kept for the MCP servers a connected device offers. Rename the server.',
     'config.mcp.identityHeadersBothSet': 'MCP server {name}{where} was not started: it sets both principalHeader and assertionHeader, which name the same identity header — keep only one of the two. The other MCP servers are unaffected.',
     'config.mcp.transportUnreadable': 'could not be read (a getter or proxy trap on the declaration threw)',
     'config.mcp.transportInvalid': 'MCP server {name}{where} was not started: its transport setting cannot be used — {path} {problem}. Fix that setting for this server (or remove the server); the other MCP servers are unaffected.',
@@ -302,7 +303,7 @@ const EN = {
     'session.inheritEnv.withheld.scrub': "Not sent with this request: the engine's version is not known yet, so the default-environment setting was left out; that has the same effect, because leaving it out also gives this run the default environment (credential-like variables removed).",
     'session.inheritEnv.withheld.unknown': 'Not sent with this request: the shell-environment setting was held back for a reason this version does not recognize.',
     'session.inheritEnv.refusal': "The engine refused this request as invalid, under a refusal code that many different request fields share · This request asked for the shell to inherit this machine's whole environment, which the engine accepts only when tools run directly on its own machine and the request belongs to a session; if that is what it refused, send it again without that setting (or with the default)",
-    'session.inheritEnv.refusalNamed': "The engine refused the setting that lets the shell inherit this machine's whole environment, which it accepts only when tools run directly on its own machine and the request belongs to a session · Send the request again without that setting (or with the default)",
+    'session.inheritEnv.refusalNamed': "The engine refused this request's shell-environment setting: it accepts only the default or this machine's whole environment, and the whole environment only when tools run directly on its own machine and the request belongs to a session · Send the request again without that setting (or with the default)",
     'session.projectMemory.withheld.absent': 'Not sent with this request: this engine does not declare support for the setting that stops project instruction files from being read, and an engine that does not know it refuses the whole request, so it was held back; those files are still sent to the model.',
     'session.projectMemory.withheld.declined': 'Not sent with this request: this engine declares that it does not support the setting that stops project instruction files from being read, so it was held back; those files are still sent to the model.',
     'session.projectMemory.withheld.unreadable': "Not sent with this request: the engine's capabilities could not be read, so it is not known whether it supports the setting that stops project instruction files from being read, and an engine that does not know it refuses the whole request, so it was held back; those files are still sent to the model.",
@@ -584,6 +585,8 @@ const EN = {
     'notice.wayOut.switchModel': 'The model service cannot serve this request right now — try another model',
     'notice.wayOut.wait': 'The model service is still working on this request — wait a moment, then try again',
     'notice.wayOut.fixRequest': 'The model service refused this request — change the request before sending it again; sending it as it is will not help',
+    'notice.askUnresolvable.remedy.approver': 'Way out: connect an approver who can answer requests like this one, or make the connected approver reachable, then try again',
+    'notice.askUnresolvable.remedy.permissionMode': 'Another way out, if this deployment allows it: the {mode} permission mode lets requests like this one through without anyone answering them, and each request let through this way is marked on the tool call it applied to',
     'rules.refusal.sentence.one': 'permissions: 1 rule will not be enforced — {list}',
     'rules.refusal.sentence.other': 'permissions: {count} rules will not be enforced — {list}',
     'rules.refusal.item': '{rule} ({reason})',
@@ -780,6 +783,7 @@ const EN = {
     'rules.match.host': 'web domain match (one host)',
     'rules.match.subdomain': 'web domain match (every host under the domain)',
     'rules.match.pattern': 'command pattern match (a star placed anywhere in the command)',
+    'rules.match.tool': 'whole-tool match (every call to the tool)',
     'rules.match.unreported': 'an unreported match form',
     'rules.match.unknown': 'a match form this build does not know',
     'model.tier.blurb.ultra': 'reserved above max — binds when a stronger model lands',
@@ -1048,5 +1052,6 @@ const EN = {
     'config.mods.loader.failedNoReason': '{name} could not be loaded',
     'config.mods.refusal.by': 'Refused by {by}',
     'config.mods.rewrite.resultInPlace': 'Answered by {by} in place of the tool',
+    'config.mods.rewrite.inputBy': 'Arguments changed by {by} before the call was let through',
 };
 export const EN_MESSAGES = Object.freeze(EN);

package/dist/i18n/messages.zh.js

@@ -184,6 +184,7 @@ const ZH = {
     'config.mcp.nameEdgeWhitespace': 'MCP 服务器名 {name}{where} 不能照原样使用,所以没有启动:它与其他设置里的同名对不上(例如禁用服务器列表)。请去掉名字里多余的空白。',
     'config.mcp.nameCollides': 'MCP 服务器名 {name}{where} 不能照原样使用,所以没有启动:去掉首尾空白后会与另一条 MCP 服务器重名。请去掉名字里多余的空白,或删掉重复的一条。',
     'config.mcp.nameTooLong': 'MCP 服务器名 {name}{where} 不可用,所以没有启动:服务器名最长 128 个字符。请缩短名字。',
+    'config.mcp.nameReserved': 'MCP 服务器名 {name}{where} 不可用,所以没有启动:以 "remote-" 开头的名字留给已连接设备提供的 MCP 服务器。请给这台服务器换个名字。',
     'config.mcp.identityHeadersBothSet': 'MCP 服务器 {name}{where} 没有启动:它同时设置了 principalHeader 和 assertionHeader,而这两项指的是同一个身份头 —— 只保留其中一项。其他 MCP 服务器不受影响。',
     'config.mcp.transportUnreadable': '读不出(声明上的取值器或代理陷阱抛了错)',
     'config.mcp.transportInvalid': 'MCP 服务器 {name}{where} 没有启动:它的传输设置不可用 —— {path} {problem}。请修正这台服务器的这项设置(或删掉这台服务器);其他 MCP 服务器不受影响。',
@@ -302,7 +303,7 @@ const ZH = {
     'session.inheritEnv.withheld.scrub': '这次请求没有带上它:引擎的版本还不知道,所以缺省环境这项设置没有带;效果相同,因为不带它同样让这次 run 拿到缺省环境(看着像凭据的变量已去掉)。',
     'session.inheritEnv.withheld.unknown': '这次请求没有带上它:shell 环境这项设置因为一个这个版本不认识的原因被扣下了。',
     'session.inheritEnv.refusal': '引擎把这次请求当作无效拒掉了,用的是许多不同请求字段共用的一个拒绝码 · 这次请求要求 shell 继承本机的整份环境,而引擎只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受这一项;如果它拒的正是这一项,请去掉这项设置(或改用缺省)再发一次',
-    'session.inheritEnv.refusalNamed': '引擎拒掉了「让 shell 继承本机整份环境」这项设置,它只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受这一项 · 请去掉这项设置(或改用缺省)再发一次',
+    'session.inheritEnv.refusalNamed': '引擎拒掉了这次请求里的 shell 环境设置:这一项只收缺省或本机整份环境两种取值,而整份环境只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受 · 请去掉这项设置(或改用缺省)再发一次',
     'session.projectMemory.withheld.absent': '这次请求没有带上它:这台引擎没有声明支持「别读项目指令文件」这项设置,而不认识它的引擎会拒掉整个请求,所以先扣下了;项目指令文件仍会发给模型。',
     'session.projectMemory.withheld.declined': '这次请求没有带上它:这台引擎声明了不支持「别读项目指令文件」这项设置,所以先扣下了;项目指令文件仍会发给模型。',
     'session.projectMemory.withheld.unreadable': '这次请求没有带上它:引擎的能力声明没读到,所以不知道它是否支持「别读项目指令文件」这项设置,而不认识它的引擎会拒掉整个请求,所以先扣下了;项目指令文件仍会发给模型。',
@@ -584,6 +585,8 @@ const ZH = {
     'notice.wayOut.switchModel': '模型服务此刻无法处理这个请求 —— 请换一个模型试试',
     'notice.wayOut.wait': '模型服务仍在处理这个请求 —— 请稍等片刻后重试',
     'notice.wayOut.fixRequest': '模型服务拒绝了这个请求 —— 请修改请求后再发送;原样重发不会有变化',
+    'notice.askUnresolvable.remedy.approver': '出路:接一个能答这类请求的审批人,或让已接的审批人可达,然后重试',
+    'notice.askUnresolvable.remedy.permissionMode': '另一条出路(须本部署允许):{mode} 权限模式会不经人作答就放行这类请求,每一次这样放行都会标在它所放行的那次工具调用上',
     'rules.refusal.sentence.one': '权限:有 1 条规则不会被执行 —— {list}',
     'rules.refusal.sentence.other': '权限:有 {count} 条规则不会被执行 —— {list}',
     'rules.refusal.item': '{rule}({reason})',
@@ -780,6 +783,7 @@ const ZH = {
     'rules.match.host': '网站域名匹配(单个主机)',
     'rules.match.subdomain': '网站域名匹配(该域名下的每个主机)',
     'rules.match.pattern': '命令模式匹配(命令里带星号)',
+    'rules.match.tool': '整个工具匹配(这个工具的每一次调用)',
     'rules.match.unreported': '没有报告匹配形式',
     'rules.match.unknown': '这个版本不认识的匹配形式',
     'model.tier.blurb.ultra': '预留在 max 之上 —— 等更强的模型出现时再绑定',
@@ -1048,6 +1052,7 @@ const ZH = {
     'config.mods.loader.failedNoReason': '{name} 装载失败',
     'config.mods.refusal.by': '被 {by} 拒绝',
     'config.mods.rewrite.resultInPlace': '由 {by} 代替工具作答',
+    'config.mods.rewrite.inputBy': '参数在放行前被 {by} 改过',
 };
 export const ZH_MESSAGES = Object.freeze(ZH);
 export const TERM_SLOTS = Object.freeze({

package/dist/index.d.ts

@@ -50,6 +50,7 @@ export * from './memoryOriginCapability.js';
 export * from './memoryEntriesWire.js';
 export * from './memoryVerbsWire.js';
 export * from './deviceExecutorManagementCapability.js';
+export * from './credentialPlaneCapability.js';
 export * from './mcpReconnect.js';
 export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
@@ -118,7 +119,7 @@ export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminde
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
 export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MCP_SERVER_NAME_COLLISION, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_ROW_UNREVIVABLE, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MCP_TOOL_DECLARATION_CHANGED, MCP_TOOL_LISTING_UNREACHED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
-export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf, type PrepareRefusalCode, type PrepareRefusalNoteFacts } from './prepareRefusal.js';
+export { prepareRefusalCodeOf, prepareRefusalNoteOf, type PrepareRefusalCode, type PrepareRefusalNoteFacts } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export type { EngineToolDirectory, EngineToolDirectorySource } from './engineToolDirectory.js';
@@ -403,7 +404,7 @@ export * from './env/uiLanguage.js';
 export { EN_MESSAGES, type MessageKey } from './i18n/messages.en.js';
 export { ZH_MESSAGES } from './i18n/messages.zh.js';
 export { createMissLedger, createTranslator, DATA_FACE_LANGUAGE, msg, renderMessage, translate, uiMissLedger, type MessageParam, type MessageParams, type MessageRef, type MissLedger, type Translator, } from './i18n/translate.js';
-export type { PendingCheckpoint, RuleSuggestion } from '@sema-agent/sdk';
+export type { PendingCheckpoint } from '@sema-agent/sdk';
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';

package/dist/index.js

@@ -41,6 +41,7 @@ export * from './memoryOriginCapability.js';
 export * from './memoryEntriesWire.js';
 export * from './memoryVerbsWire.js';
 export * from './deviceExecutorManagementCapability.js';
+export * from './credentialPlaneCapability.js';
 export * from './mcpReconnect.js';
 export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
@@ -99,7 +100,7 @@ export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
 export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MCP_SERVER_NAME_COLLISION, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_ROW_UNREVIVABLE, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MCP_TOOL_DECLARATION_CHANGED, MCP_TOOL_LISTING_UNREACHED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
-export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
+export { prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';

package/dist/inheritEnvWire.d.ts

@@ -16,6 +16,7 @@ export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld, l
 export interface InheritEnvRefusalDetail {
     readonly code: string;
     readonly field?: 'inheritEnv';
+    readonly reason?: string;
 }
 export declare function inheritEnvRefusalFromError(err: unknown, sentRequest: TaskRequestLike | undefined): InheritEnvRefusalDetail | null;
 export declare function inheritEnvRefusalContent(detail: InheritEnvRefusalDetail, lang?: UiLanguage): string;