@sema-agent/client-core 0.102.0 → 0.104.0

package/dist/engineErrorCodes.js

@@ -104,8 +104,10 @@ export function activeRunBusyCarrierOf(ev) {
 export const CORRUPT_SESSION_ERROR_CODE = 'corrupt_session';
 export const CORRUPT_ROW_ERROR_CODE = 'corrupt';
 export const MEMORY_CONTROL_PLANE_CORRUPT = 'internal.memory_control_plane_corrupt';
+const INVALID_SESSION_ERROR_CODE = 'invalid_session';
+export const RESUME_CONSTRAINT_REJECTED = 'resume.constraint_rejected';
 export function isCorruptSessionCode(code) {
-    return code === CORRUPT_SESSION_ERROR_CODE;
+    return code === CORRUPT_SESSION_ERROR_CODE || code === INVALID_SESSION_ERROR_CODE;
 }
 export const STOP_PARK_ARBITER_UNREACHABLE = 'stop.park_arbiter_unreachable';
 export const STOP_PARK_RESUME_WON = 'stop.park_resume_won';

package/dist/engineNoticeCodes.d.ts

@@ -1,5 +1,6 @@
 import type { FinishReasonUnknownDetail } from '@sema-agent/sdk';
 import { CORE_TOOL_TURN_INCOMPLETE_CAUSES, CORE_USER_INPUT_UNDRAINED_CAUSES, CORE_USER_INPUT_UNDRAINED_FAMILIES } from './generated/engineNoticeTables.js';
+import type { UiLanguage } from './env/uiLanguage.js';
 export type NoticeAudience = 'user' | 'operator';
 export declare const ENGINE_NOTICE_CODES: readonly string[];
 export declare function engineNoticeInCatalog(code: unknown): boolean;
@@ -21,7 +22,16 @@ export interface AskUnresolvableFactsView {
     cause: string;
     parkLaneExisted?: boolean;
     remedy?: string;
+    remedies?: readonly AskUnresolvableRemedyView[];
 }
+export type AskUnresolvableRemedyView = {
+    readonly kind: 'approver';
+} | {
+    readonly kind: 'permission_mode';
+    readonly value: string;
+    readonly disclosedOn: string;
+};
+export declare function askUnresolvableRemedyContent(remedy: AskUnresolvableRemedyView, lang?: UiLanguage): string | undefined;
 export declare function readAskUnresolvable(notice: unknown): AskUnresolvableFactsView | undefined;
 export declare const DURABLE_MANDATE_SOURCES: readonly string[];
 export interface DurableGateUnavailableFactsView {
@@ -213,6 +223,20 @@ export interface StreamEndIgnoredFactsView {
     runId: string;
 }
 export declare function readStreamEndIgnored(notice: unknown): StreamEndIgnoredFactsView | undefined;
+export interface ContextImageRemovedFactsView {
+    images: number;
+    sessionId: string;
+    runId: string;
+}
+export declare function readContextImageRemoved(notice: {} | null | undefined): ContextImageRemovedFactsView | undefined;
+export interface McpAuthorizationRequiredFactsView {
+    server: string;
+    reason: string;
+    authorizeUrl?: string;
+    sessionId: string;
+    runId: string;
+}
+export declare function readMcpAuthorizationRequired(notice: {} | null | undefined): McpAuthorizationRequiredFactsView | undefined;
 export declare const ENGINE_NOTICE_FACT_READERS: Readonly<{
     readonly 'mcp.injection_dropped': typeof readMcpInjectionDrop;
     readonly 'delegation.ask_unresolvable': typeof readAskUnresolvable;
@@ -237,6 +261,8 @@ export declare const ENGINE_NOTICE_FACT_READERS: Readonly<{
     readonly 'task.turn_interrupted': typeof readTurnInterrupted;
     readonly 'route.finish_reason_unknown': typeof readFinishReasonUnknown;
     readonly 'route.stream_end_ignored': typeof readStreamEndIgnored;
+    readonly 'context.image_removed': typeof readContextImageRemoved;
+    readonly 'mcp.authorization_required': typeof readMcpAuthorizationRequired;
 }>;
 type FactReaderTable = typeof ENGINE_NOTICE_FACT_READERS;
 export type EngineNoticeFactsCode = keyof FactReaderTable;

package/dist/engineNoticeCodes.js

@@ -1,7 +1,9 @@
 import { AUTO_MODE_UNAVAILABLE_CAUSES } from './autoModeUnavailable.js';
 import { displayUntrusted } from './displayUntrusted.js';
 import { CORE_ENGINE_NOTICE_CODES, CORE_MCP_INJECTION_DROP_REASONS, CORE_NOTICE_AUDIENCE, CORE_USER_INPUT_UNDRAINED_FAMILIES, } from './generated/engineNoticeTables.js';
-import { CORE_ASK_UNRESOLVABLE_CAUSES, CORE_DURABLE_MANDATE_SOURCES, CORE_PERMISSION_MODE_FOLD_REASONS, } from './generated/engineFactTables.js';
+import { CORE_APPROVAL_REMEDY_KINDS, CORE_ASK_UNRESOLVABLE_CAUSES, CORE_DURABLE_MANDATE_SOURCES, CORE_PERMISSION_MODE_FOLD_REASONS, } from './generated/engineFactTables.js';
+import { msg, renderMessage } from './i18n/translate.js';
+import { readOwnDataValue } from './ownKey.js';
 export const ENGINE_NOTICE_CODES = CORE_ENGINE_NOTICE_CODES;
 const CATALOG = new Set(ENGINE_NOTICE_CODES);
 function audienceRow(table, code) {
@@ -50,6 +52,63 @@ function optionalSeat(o, key) {
         return undefined;
     }
 }
+const _approvalRemedyKindPin = true;
+void _approvalRemedyKindPin;
+const APPROVAL_REMEDY_KIND_SET = new Set(CORE_APPROVAL_REMEDY_KINDS);
+function readRemedyMember(v) {
+    try {
+        if (typeof v !== 'object' || v === null || Array.isArray(v))
+            return undefined;
+        const kind = readOwnDataValue(v, 'kind');
+        if (typeof kind !== 'string' || !APPROVAL_REMEDY_KIND_SET.has(kind))
+            return undefined;
+        if (kind === 'approver')
+            return Object.freeze({ kind: 'approver' });
+        const value = readOwnDataValue(v, 'value');
+        const disclosedOn = readOwnDataValue(v, 'disclosedOn');
+        if (typeof value !== 'string' || value.length === 0 || typeof disclosedOn !== 'string' || disclosedOn.length === 0)
+            return undefined;
+        return Object.freeze({ kind: 'permission_mode', value, disclosedOn });
+    }
+    catch {
+        return undefined;
+    }
+}
+function remedyAt(list, i) {
+    try {
+        return readOwnDataValue(list, String(i));
+    }
+    catch {
+        return undefined;
+    }
+}
+function readRemedyList(v) {
+    try {
+        if (!Array.isArray(v))
+            return undefined;
+        const n = readOwnDataValue(v, 'length');
+        if (typeof n !== 'number' || !Number.isInteger(n) || n <= 0)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < n; i += 1) {
+            const r = readRemedyMember(remedyAt(v, i));
+            if (r !== undefined)
+                out.push(r);
+        }
+        return out.length > 0 ? Object.freeze(out) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function askUnresolvableRemedyContent(remedy, lang) {
+    const r = readRemedyMember(remedy);
+    if (r === undefined)
+        return undefined;
+    if (r.kind === 'approver')
+        return renderMessage(msg('notice.askUnresolvable.remedy.approver'), lang);
+    return renderMessage(msg('notice.askUnresolvable.remedy.permissionMode', { mode: displayUntrusted(r.value, { max: 64 }) }), lang);
+}
 export function readAskUnresolvable(notice) {
     if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
         return undefined;
@@ -73,6 +132,13 @@ export function readAskUnresolvable(notice) {
     }
     const parkIn = o.parkLaneExisted;
     const remedyIn = optionalSeat(o, 'remedy');
+    let remedies;
+    try {
+        remedies = readRemedyList(readOwnDataValue(o, 'remedies'));
+    }
+    catch {
+        remedies = undefined;
+    }
     return {
         sessionId,
         toolName,
@@ -80,6 +146,7 @@ export function readAskUnresolvable(notice) {
         cause,
         ...(typeof parkIn === 'boolean' ? { parkLaneExisted: parkIn } : {}),
         ...(typeof remedyIn === 'string' && remedyIn.length > 0 ? { remedy: remedyIn } : {}),
+        ...(remedies !== undefined ? { remedies } : {}),
     };
 }
 export const DURABLE_MANDATE_SOURCES = CORE_DURABLE_MANDATE_SOURCES;
@@ -830,6 +897,48 @@ function readStreamEndIgnoredOf(notice) {
         return undefined;
     return { statement, word, frames, sessionId, runId };
 }
+export function readContextImageRemoved(notice) {
+    return guardedRead(notice, readContextImageRemovedOf);
+}
+function readContextImageRemovedOf(notice) {
+    if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
+        return undefined;
+    const n = notice;
+    if (ownSeat(n, 'code') !== 'context.image_removed')
+        return undefined;
+    const d = ownSeat(n, 'detail');
+    if (typeof d !== 'object' || d === null || Array.isArray(d))
+        return undefined;
+    const o = d;
+    const images = ownSeat(o, 'images');
+    const sessionId = nonEmpty(ownSeat(o, 'sessionId'));
+    const runId = nonEmpty(ownSeat(o, 'runId'));
+    if (typeof images !== 'number' || !Number.isSafeInteger(images) || images < 1 || sessionId === undefined || runId === undefined)
+        return undefined;
+    return { images, sessionId, runId };
+}
+export function readMcpAuthorizationRequired(notice) {
+    return guardedRead(notice, readMcpAuthorizationRequiredOf);
+}
+function readMcpAuthorizationRequiredOf(notice) {
+    if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
+        return undefined;
+    const n = notice;
+    if (ownSeat(n, 'code') !== 'mcp.authorization_required')
+        return undefined;
+    const d = ownSeat(n, 'detail');
+    if (typeof d !== 'object' || d === null || Array.isArray(d))
+        return undefined;
+    const o = d;
+    const server = nonEmpty(ownSeat(o, 'server'));
+    const reason = nonEmpty(ownSeat(o, 'reason'));
+    const sessionId = nonEmpty(ownSeat(o, 'sessionId'));
+    const runId = nonEmpty(ownSeat(o, 'runId'));
+    if (server === undefined || reason === undefined || sessionId === undefined || runId === undefined)
+        return undefined;
+    const authorizeUrl = nonEmpty(optionalOwnSeat(o, 'authorizeUrl'));
+    return { server, reason, ...(authorizeUrl !== undefined ? { authorizeUrl } : {}), sessionId, runId };
+}
 export const ENGINE_NOTICE_FACT_READERS = Object.freeze({
     'mcp.injection_dropped': readMcpInjectionDrop,
     'delegation.ask_unresolvable': readAskUnresolvable,
@@ -854,26 +963,26 @@ export const ENGINE_NOTICE_FACT_READERS = Object.freeze({
     'task.turn_interrupted': readTurnInterrupted,
     'route.finish_reason_unknown': readFinishReasonUnknown,
     'route.stream_end_ignored': readStreamEndIgnored,
+    'context.image_removed': readContextImageRemoved,
+    'mcp.authorization_required': readMcpAuthorizationRequired,
 });
 const _factReaderTablePin = true;
 void _factReaderTablePin;
 export function readEngineNoticeFacts(notice) {
-    if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
-        return undefined;
-    let code;
-    let detail;
     try {
-        code = ownSeat(notice, 'code');
+        if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
+            return undefined;
+        const code = ownSeat(notice, 'code');
         if (typeof code !== 'string' || !Object.hasOwn(ENGINE_NOTICE_FACT_READERS, code))
             return undefined;
-        detail = ownSeat(notice, 'detail');
+        const detail = ownSeat(notice, 'detail');
+        const k = code;
+        const facts = ENGINE_NOTICE_FACT_READERS[k]({ code: k, detail });
+        if (facts === undefined)
+            return undefined;
+        return { code: k, audience: noticeAudienceOf(k), facts };
     }
     catch {
         return undefined;
     }
-    const k = code;
-    const facts = ENGINE_NOTICE_FACT_READERS[k]({ code: k, detail });
-    if (facts === undefined)
-        return undefined;
-    return { code: k, audience: noticeAudienceOf(k), facts };
 }

package/dist/engineRowRef.js

@@ -101,6 +101,7 @@ export const TRANSCRIPT_ROW_SIDECAR_KEYS = Object.freeze([
     '_sema_coded_detail',
     '_sema_task_notification',
     '_sema_answered_by',
+    '_sema_rewrite',
 ]);
 export function parkHeldCallIdOf(carrier) {
     return readFrameStringKey(carrier, 'toolCallId');

package/dist/errorSupplementRoles.js

@@ -4,7 +4,7 @@ import { resumeRefusalContent, resumeContextUnavailableContent, requireExistingS
 import { resumeReopenContent } from './hitl/suspendedReopen.js';
 import { idempotencyPayloadMismatchContent } from './engineErrorCodes.js';
 import { inheritEnvRefusalContent } from './inheritEnvWire.js';
-import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, userAttachmentRefusalContent, userInvokedSkillRefusalContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, } from './wireRefusalCopy.js';
+import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, } from './wireRefusalCopy.js';
 const ROLE_BY_READER = new Map([
     [corruptSessionContent, 'replacement'],
     [corruptStoredRowContent, 'replacement'],
@@ -19,8 +19,6 @@ const ROLE_BY_READER = new Map([
     [fieldLimitRefusalContent, 'replacement'],
     [autonomyLaneRefusalContent, 'replacement'],
     [idempotencyPayloadMismatchContent, 'replacement'],
-    [userAttachmentRefusalContent, 'replacement'],
-    [userInvokedSkillRefusalContent, 'replacement'],
     [unsupportedRuleRefusalContent, 'replacement'],
     [admissionWallRefusalContent, 'supplement'],
     [hostPostureRefusalContent, 'supplement'],

package/dist/eventLeg.js

@@ -20,7 +20,7 @@ function makeFrameStageDomains(domains) {
 const FRAME_STAGE_DOMAINS = makeFrameStageDomains({
     bindRun: Object.freeze(['meta', 'done', 'failed']),
     stampOwner: Object.freeze(['task_progress']),
-    hitlFrames: Object.freeze(['question', 'question_complete', 'elicitation', 'elicitation_complete', 'tool_approval', 'tool_approval_complete', 'approval_request', 'approval_revoke']),
+    hitlFrames: Object.freeze(['question', 'question_complete', 'elicitation', 'elicitation_complete', 'tool_approval', 'tool_approval_complete', 'approval_request', 'approval_complete', 'approval_revoke']),
 });
 const HITL_FRAMES_PROJECTED = Object.freeze(['human_input']);
 const _hitlFrameTypesPin = [true, true];
@@ -36,6 +36,7 @@ const HITL_PORT_OF = Object.freeze({
     tool_approval: 'toolApproval',
     tool_approval_complete: 'toolApproval',
     approval_request: 'register',
+    approval_complete: 'register',
     approval_revoke: 'register',
 });
 const inDomain = (stage, frameType) => FRAME_STAGE_DOMAINS[stage].includes(frameType);

package/dist/executionPlacementWords.d.ts

@@ -0,0 +1,3 @@
+export declare const EXECUTION_PLACEMENT_ROLES: readonly ["absent", "writer", "mirror", "forking"];
+export type ExecutionPlacementRole = (typeof EXECUTION_PLACEMENT_ROLES)[number];
+export declare const EXECUTION_PLACEMENT_DEVICE_LANE = "device";

package/dist/executionPlacementWords.js

@@ -0,0 +1,2 @@
+export const EXECUTION_PLACEMENT_ROLES = Object.freeze(['absent', 'writer', 'mirror', 'forking']);
+export const EXECUTION_PLACEMENT_DEVICE_LANE = 'device';

package/dist/fleet/fleetProjection.js

@@ -295,7 +295,6 @@ const FLEET_TASK_ROW_WIRE_KEY_TUPLE = [
     'startedAt',
     'elapsedMs',
     'tokens',
-    'queuedCount',
     'awaitingPlanApproval',
     'currentAction',
     'currentTool',
@@ -321,6 +320,8 @@ const FLEET_WORKFLOW_ROW_WIRE_KEY_TUPLE = [
     'startedCount',
     'elapsedMs',
     'tokens',
+    'errorCode',
+    'parked',
 ];
 export const FLEET_WORKFLOW_ROW_WIRE_KEYS = FLEET_WORKFLOW_ROW_WIRE_KEY_TUPLE;
 export const FLEET_TASK_ROW_KEYS_NOT_PROJECTED = {
@@ -345,13 +346,6 @@ export const FLEET_TASK_ROW_KEYS_NOT_PROJECTED = {
         owner: 'client-core 规范重构轮',
         reason: '同 agentType:两位在本层合成一个身份 label,分开带出去等于把 187 的 tjl 规则推给每个消费端各写一遍。',
     },
-    queuedCount: {
-        kind: 'by-design',
-        owner: 'client-core 0.95.0 CC-388',
-        reason: '幻影键:sdk 行型仍声明它,但任何 server 版本都不发(生产侧已整只删除,零生产者,契约里也从没列过)。' +
-            '投影一个永远缺席的可选位 = 假线索(读者以为「队列深度已经报了」),所以视图上不留位。' +
-            'sdk 在下一个 major 删掉这条声明的同批,本条与 `FLEET_TASK_ROW_WIRE_KEYS` 的 `queuedCount` 一起删;真要队列深度 = 带生产者的新键,不是复活这一个。',
-    },
     workflowRunId: {
         kind: 'by-design',
         owner: 'client-core 规范重构轮',
@@ -364,6 +358,18 @@ export const FLEET_TASK_ROW_KEYS_NOT_PROJECTED = {
         reason: '结构化同源体 `currentTool` 已投影(SDK 注:currentAction 是它的**文本回落**)。🔴 诚实记账:旧端(server <1.288)只发 currentAction ⇒ 那一档上本视图今天确实拿不到活动文本,这是**已知缺口**不是设计取舍;补它 = 加 `currentAction?: string` 进本视图 + 端侧回落渲染。',
     },
 };
-export const FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED = {};
+export const FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED = {
+    errorCode: {
+        kind: 'by-design',
+        owner: 'client-core 0.103.0 提货',
+        reason: '折进 status:只有停驻终态码 workflow.agent_parked 改显示状态(awaiting approval,停驻不是失败),读法唯一处 workflowRunDisplayStatusOf;' +
+            '0.95.0 CC-388 把它从视图退出时服务端还不铸,现在铸了也不回到视图 —— run 级别的其它码走 workflow 读面。',
+    },
+    parked: {
+        kind: 'by-design',
+        owner: 'client-core 0.103.0 提货',
+        reason: '折进 status:恒字面 true 的「有 agent 停在审批门上」位 ⇒ 显示状态 awaiting approval(workflowRunDisplayStatusOf 唯一读处);缺席不读作「没停」以外的任何事。',
+    },
+};
 const _fleetViewKeyPins = [true, true, true, true, true, true, true, true];
 void _fleetViewKeyPins;

package/dist/gateOutcome.d.ts

@@ -13,6 +13,7 @@ export type GateDispositionView = {
     classes?: readonly string[];
     deniedBy: DeniedBy | (string & {});
     cause?: string;
+    extension?: string;
 };
 export interface GateClassifierRoundView {
     modelRequested: string;
@@ -78,3 +79,22 @@ export declare function isApproverUnavailableGate(g: GateOutcomeView | undefined
 export declare function isHumanSettledGate(g: GateOutcomeView | undefined): boolean;
 export declare function isPolicyRefusedGate(g: GateOutcomeView | undefined): boolean;
 export declare function ccToolDenialKindForToolEnd(frame: unknown): CcToolDenialKind | undefined;
+export type ToolInputRewriteAuthorView = {
+    readonly kind: 'extension';
+    readonly name: string;
+} | {
+    readonly kind: 'policy';
+} | {
+    readonly kind: 'approver';
+} | {
+    readonly kind: string & {};
+};
+export type ToolInputRewriteValue = null | boolean | number | string | readonly ToolInputRewriteValue[] | {
+    readonly [key: string]: ToolInputRewriteValue;
+};
+export interface ToolInputRewriteView {
+    readonly by: readonly ToolInputRewriteAuthorView[];
+    readonly input?: ToolInputRewriteValue;
+}
+export declare function toolInputRewriteOf(frame: {} | null | undefined): ToolInputRewriteView | undefined;
+export declare function rewriteExtensionNamesOf(rewrite: ToolInputRewriteView | undefined): readonly string[];

package/dist/gateOutcome.js

@@ -197,6 +197,7 @@ function readGateRecord(frame) {
         const mode = str(dr.mode);
         const askClass = str(dr.askClass);
         const classes = nonEmptyStringList(dr.classes);
+        const extension = str(dr.extension);
         disposition = {
             kind: 'denied',
             deniedBy,
@@ -205,6 +206,7 @@ function readGateRecord(frame) {
             ...(mode !== undefined ? { mode } : {}),
             ...(askClass !== undefined ? { askClass } : {}),
             ...(classes !== undefined ? { classes } : {}),
+            ...(extension !== undefined ? { extension } : {}),
         };
     }
     else {
@@ -328,3 +330,90 @@ const _settlementWordMirrorPin = SETTLEMENT_KIND_WORDS;
 void _settlementWordMirrorPin;
 const _settlementWordsCoveredPin = true;
 void _settlementWordsCoveredPin;
+const REWRITE_INPUT_MAX_DEPTH = 256;
+function ownDataSeat(o, key) {
+    const d = Object.getOwnPropertyDescriptor(o, key);
+    if (d === undefined || !Object.hasOwn(d, 'value'))
+        return { ok: false };
+    return { ok: true, value: d.value };
+}
+function isPlainJsonData(v, depth) {
+    if (v === null || typeof v === 'string' || typeof v === 'boolean')
+        return true;
+    if (typeof v === 'number')
+        return Number.isFinite(v);
+    if (typeof v !== 'object' || depth >= REWRITE_INPUT_MAX_DEPTH)
+        return false;
+    if (Array.isArray(v)) {
+        for (let i = 0; i < v.length; i++) {
+            const seat = ownDataSeat(v, String(i));
+            if (!seat.ok || !isPlainJsonData(seat.value, depth + 1))
+                return false;
+        }
+        return true;
+    }
+    const proto = Object.getPrototypeOf(v);
+    if (proto !== null && proto !== Object.prototype)
+        return false;
+    for (const key of Reflect.ownKeys(v)) {
+        if (typeof key !== 'string')
+            return false;
+        const seat = ownDataSeat(v, key);
+        if (!seat.ok || !isPlainJsonData(seat.value, depth + 1))
+            return false;
+    }
+    return true;
+}
+function readRewriteAuthor(v) {
+    if (typeof v !== 'object' || v === null || Array.isArray(v))
+        return undefined;
+    const kind = readOwnDataNonEmptyString(v, 'kind');
+    if (kind === undefined)
+        return undefined;
+    if (kind === 'extension') {
+        const name = readOwnDataNonEmptyString(v, 'name');
+        return name === undefined ? undefined : Object.freeze({ kind: 'extension', name });
+    }
+    return Object.freeze({ kind });
+}
+export function toolInputRewriteOf(frame) {
+    try {
+        if (typeof frame !== 'object' || frame === null || Array.isArray(frame))
+            return undefined;
+        const raw = readOwnDataValue(frame, 'rewrite');
+        if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+            return undefined;
+        const byRaw = readOwnDataValue(raw, 'by');
+        if (!Array.isArray(byRaw) || byRaw.length === 0)
+            return undefined;
+        const by = [];
+        for (let i = 0; i < byRaw.length; i++) {
+            const seat = ownDataSeat(byRaw, String(i));
+            const author = seat.ok ? readRewriteAuthor(seat.value) : undefined;
+            if (author === undefined)
+                return undefined;
+            by.push(author);
+        }
+        let input;
+        try {
+            const inputSeat = ownDataSeat(raw, 'input');
+            input = inputSeat.ok && isPlainJsonData(inputSeat.value, 0) ? inputSeat.value : undefined;
+        }
+        catch {
+            input = undefined;
+        }
+        return Object.freeze({ by: Object.freeze(by), ...(input !== undefined ? { input } : {}) });
+    }
+    catch {
+        return undefined;
+    }
+}
+export function rewriteExtensionNamesOf(rewrite) {
+    if (rewrite === undefined)
+        return Object.freeze([]);
+    const names = [];
+    for (const a of rewrite.by)
+        if (a.kind === 'extension' && 'name' in a && !names.includes(a.name))
+            names.push(a.name);
+    return Object.freeze(names);
+}

package/dist/generated/engineAskFaceTables.js

@@ -7,6 +7,6 @@ export const CORE_SHELL_FACE_TOOL_NAMES = Object.freeze([
     "Monitor",
 ]);
 export const CORE_RELEASABLE_ASK_CLASSES_BY_FACE = Object.freeze({
-    "shell": Object.freeze(["transcript_write", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
-    "other": Object.freeze(["transcript_write", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "shell": Object.freeze(["transcript_write", "target_unresolved", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "other": Object.freeze(["transcript_write", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
 });

package/dist/generated/engineFactTables.d.ts

@@ -14,7 +14,7 @@ export declare const CORE_ASK_EVIDENCE_ABSENCE_VALUES: readonly ["not_wired", "n
 export declare const CORE_SYSTEM_INJECTION_PRIORITIES: readonly ["now", "next", "later"];
 export declare const CORE_READ_DENY_BUILTIN_TIERS: readonly ["credentials", "shell-history", "browser", "wallet", "agent-config"];
 export declare const CORE_READ_DENY_DEFAULT_TIERS: readonly ["credentials", "agent-config"];
-export declare const CORE_ASK_CLASSES: readonly ["content_question", "hook", "ancestor", "dangerous_delete", "unverifiable_delete", "unverifiable_shell_text", "transcript_write", "org_rule", "rule_unreadable", "ask_rule", "denial_limit_fallback", "classifier_no_ruling", "requires_user_interaction", "cross_boundary", "operator_forced", "shell_floor", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "policy_rra", "artifact_shared_read", "mode", "unstated", "ordinary"];
+export declare const CORE_ASK_CLASSES: readonly ["content_question", "hook", "ancestor", "dangerous_delete", "unverifiable_delete", "unverifiable_shell_text", "transcript_write", "org_rule", "rule_unreadable", "ask_rule", "denial_limit_fallback", "classifier_no_ruling", "requires_user_interaction", "cross_boundary", "operator_forced", "shell_floor", "target_unresolved", "probe", "write_protection_on_disk", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "policy_rra", "artifact_shared_read", "mode", "unstated", "ordinary"];
 export interface CoreModeArbitrationRow {
     readonly bypassImmune: boolean;
     readonly classifierEligible: boolean;
@@ -22,7 +22,8 @@ export interface CoreModeArbitrationRow {
     readonly ruleMayClear: boolean;
     readonly hookAskFloor: boolean;
 }
-export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "cross_boundary" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection_on_disk" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const CORE_REAL_APPROVAL_ASK_CLASSES: readonly ["ancestor", "dangerous_delete", "unverifiable_delete", "unverifiable_shell_text", "transcript_write", "org_rule", "rule_unreadable", "denial_limit_fallback", "classifier_no_ruling", "requires_user_interaction", "cross_boundary", "policy_rra", "artifact_shared_read"];
 export declare const CORE_SKILL_GRANT_ORIGINS: readonly ["model", "user", "inherited"];
 export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "content_unsupported", "grammar", "tool_name", "near_miss", "earlier_grammar"];
 export declare const CORE_ALLOW_RULE_MEMBERS: readonly ["hook", "deployment", "persisted", "skill", "request"];
@@ -37,7 +38,7 @@ export declare const CORE_TASK_HANDLE_PREFIXES: Readonly<Record<"background_bash
 export declare const CORE_PERMISSION_MODE_CLASSES: readonly ["bypass", "prompting"];
 export declare const CORE_MCP_LIVENESS_STATES: readonly ["reachable", "unreachable", "unknown"];
 export declare const CORE_RULE_BEHAVIORS: readonly ["deny", "ask", "allow"];
-export declare const CORE_MCP_IMAGE_MAX_BASE64: number;
+export declare const CORE_IMAGE_ADMISSION_HARD_IMAGE_BASE64_CHARS: number;
 export declare const CORE_MAX_PENDING_STEER_CHARS: number;
 export declare const CORE_PROMPT_BLOCK_CAUSES: readonly ["block", "crashed", "timeout", "cancelled"];
 export declare const CORE_PERMISSION_MODES: readonly ["default", "acceptEdits", "plan", "auto", "bypassPermissions", "dontAsk"];
@@ -48,6 +49,10 @@ export declare const CORE_RESUME_STARTUP_CAUSES: readonly ["environment", "sessi
 export declare const CORE_BUILTIN_SUBAGENT_TYPES: readonly ["Explore", "Plan", "fork", "general-purpose"];
 export declare const CORE_RULE_OFFERS_ABSENCES: readonly ["mandated", "allow_outranked", "ask_rule_matched", "lane_cannot_speak"];
 export declare const CORE_TOOL_APPROVAL_CARDS: readonly ["file-edit", "file-write", "notebook-edit", "shell", "fetch", "skill", "workflow", "plan", "question", "generic"];
+export declare const CORE_MCP_FAILURE_KINDS: readonly ["connect_refused", "connection_failed", "connection_closed", "unauthorized", "http_status", "not_mcp_response", "spawn_failed", "timeout", "protocol", "invalid_config", "credential_unavailable", "host_refused", "unknown"];
+export declare const CORE_MCP_AUTHORIZATION_REASONS: readonly ["rejected", "scope", "none"];
+export declare const CORE_PERSISTED_RULE_MATCHES: readonly ["exact", "prefix", "wildcard", "pattern", "subpath", "path", "name", "name_prefix", "host", "subdomain", "tool"];
+export declare const CORE_APPROVAL_REMEDY_KINDS: readonly ["approver", "permission_mode"];
 export declare const CORE_ASK_CLASSES_WITHOUT_REASON_ROW: readonly ["probe"];
 export declare const CORE_ASK_CLASS_REASONS: Readonly<Record<Exclude<(typeof CORE_ASK_CLASSES)[number], (typeof CORE_ASK_CLASSES_WITHOUT_REASON_ROW)[number]>, string>>;
 export declare const CORE_USER_ATTACHMENT_KINDS: readonly ["text", "notebook", "image", "pdf", "directory", "client_text", "client_image"];