@sema-agent/client-core 0.102.0 → 0.104.0

package/dist/hitl/toolApprovalWire.js

@@ -3,6 +3,7 @@ import { askParkRowArm } from './askParkRowRouting.js';
 import { parkGateArmOf } from './frameRouter.js';
 import { seatSessionRowOf } from './standingRows.js';
 import { hostLog } from '../host.js';
+import { trimEditedRuleText } from './editedRuleTextPrecheck.js';
 import { appendOwnElement, guardedRead, readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue, readOwnNonEmptyString } from '../ownKey.js';
 import { ownReadingSlot } from '../engineWireFor.js';
 import { DEPLOYMENT_LIST_ASK_CLASSES, readAskClassPair } from './askClassPair.js';
@@ -12,7 +13,7 @@ import { readAllowRuleShadowFromWire, retiredAllowRuleShadowKeyPresent, RETIRED_
 import { createSessionSlot, DEFAULT_SESSION_KEY } from '../sessionSlot.js';
 import { readEngineActiveBgTasks } from '../fleet/fleetLedger.js';
 import { CORE_SKILL_TOOL_NAME } from '../generated/toolNameTables.js';
-import { CORE_ALLOW_ENTRY_INERT_REASONS } from '../generated/engineFactTables.js';
+import { CORE_ALLOW_ENTRY_INERT_REASONS, CORE_PERSISTED_RULE_MATCHES } from '../generated/engineFactTables.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { INTERRUPT_DENY_REASON, observeCancelByDeny, surfaceApprovalParking, surfaceRememberNotApplied, surfaceEditNotForwarded, surfaceEditRefusedOnBlindAsk, surfaceRuleArmNotSent, surfaceRuleArmRejected } from './hitlHostSurface.js';
 import { approvalCallKey, liveFrameCallKey } from './gateIdentity.js';
@@ -27,6 +28,7 @@ import { isApprovalMandateWord } from '../gateVocabulary.js';
 import { approvalDecidedByAdmitted } from '../approvalDecidedByCapability.js';
 import { decideFailureNote } from '../decideFailureNote.js';
 import { slotPresenceOf, wireFailureTextsOf } from '../wireFailureShape.js';
+import { isPlainRecord } from '../jsonFaithful.js';
 import { DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED } from '../engineErrorCodes.js';
 import { readDecideReceipt } from '../decideReceipt.js';
 import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, ASK_ORIGINS, } from '@sema-agent/sdk';
@@ -67,6 +69,8 @@ export function structurallyEqual(a, b) {
     return ka.every(k => structurallyEqual(a[k], b[k]));
 }
 export { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS };
+const _sdkRuleOfferMatchWithinEngine = true;
+void _sdkRuleOfferMatchWithinEngine;
 export { RULE_OFFERS_ABSENCE_REASONS };
 export const ASK_ORIGIN_WORDS = ASK_ORIGINS;
 export const APPROVAL_DENY_SETTLED_BY_WORDS = Object.freeze(['human', 'policy']);
@@ -190,6 +194,11 @@ const PARK_ROW_ARGS_ABSENT_NOTE = "this request's tool arguments are not availab
 const PARK_ROW_ARGS_TRUNCATED_NOTE = "this request's tool arguments were too large to keep on the pending approval record and were replaced by a size marker, " +
     'so you are deciding without seeing them; deny it if you are not sure what it will do. ' +
     'Edits are not accepted on this card: there is no original input to edit';
+const ARGS_REWRITTEN_NOTE = "this request's tool arguments were changed after the model made the call (for example by a hook) — " +
+    'the arguments shown here are the changed ones recorded for this approval, and they differ from the call shown in the conversation';
+const ARGS_FROM_MODEL_CALL_NOTE = 'this approval request did not carry usable tool arguments (for example because they were too large to include), ' +
+    "so the arguments shown are the model's original call from the conversation — " +
+    'if they were changed after that call (for example by a hook), what runs differs from what is shown';
 const PARK_EDIT_REFUSED_REASON = "the card returned an edited approval, but this request's tool arguments are not available on this surface " +
     '(missing, or replaced by a size marker on the pending approval record), so the edit cannot be applied — nothing was sent; ' +
     'approve or deny it as it is';
@@ -202,6 +211,139 @@ function isParkRowInputSizeMarker(v) {
     const o = v;
     return o.truncated === true && typeof o.bytes === 'number' && Number.isFinite(o.bytes) && o.bytes >= 0;
 }
+function recordedInputShapeOf(v) {
+    if (v === undefined || v === null)
+        return 'absent';
+    try {
+        if (typeof v !== 'object' || !isPlainRecord(v))
+            return 'other';
+        return isParkRowInputSizeMarker(v) ? 'size_marker' : 'input';
+    }
+    catch {
+        return 'other';
+    }
+}
+function argsProvablyDiffer(recorded, streamArgs) {
+    try {
+        if (typeof streamArgs !== 'object' || streamArgs === null || Array.isArray(streamArgs))
+            return false;
+        return jsonValuesDiffer(recorded, streamArgs, 0, { nodes: 0 }) === true;
+    }
+    catch {
+        return false;
+    }
+}
+function cardInputOf(recorded, stream) {
+    const shape = recordedInputShapeOf(recorded);
+    const streamPresent = stream !== undefined && stream !== null;
+    if (shape === 'input')
+        return { from: 'recorded', args: recorded, rewritten: streamPresent && argsProvablyDiffer(recorded, stream) };
+    if (streamPresent)
+        return { from: 'stream', args: stream, shape };
+    return { from: 'none', shape, recorded };
+}
+const CARD_ARGS_COMPARE_MAX_NODES = 20_000;
+const CARD_ARGS_COMPARE_MAX_DEPTH = 256;
+const NOT_COMPARABLE = Symbol('not comparable');
+function ownDataForCompare(o, k) {
+    const d = Object.getOwnPropertyDescriptor(o, k);
+    return d !== undefined && Object.hasOwn(d, 'value') ? d.value : NOT_COMPARABLE;
+}
+const TO_JSON_CHAIN_MAX = 32;
+function hasToJsonHook(o) {
+    let at = o;
+    for (let depth = 0; at !== null; depth++) {
+        if (depth >= TO_JSON_CHAIN_MAX)
+            return true;
+        const d = Object.getOwnPropertyDescriptor(at, 'toJSON');
+        if (d !== undefined)
+            return !Object.hasOwn(d, 'value') || typeof d.value === 'function';
+        at = Object.getPrototypeOf(at);
+    }
+    return false;
+}
+function jsonValueKindOf(v) {
+    if (v === null)
+        return 'null';
+    switch (typeof v) {
+        case 'boolean':
+            return 'boolean';
+        case 'string':
+            return 'string';
+        case 'number':
+            return Number.isFinite(v) ? 'number' : undefined;
+        case 'object':
+            if (Array.isArray(v))
+                return hasToJsonHook(v) ? undefined : 'array';
+            return isPlainRecord(v) && !hasToJsonHook(v) ? 'object' : undefined;
+        default:
+            return undefined;
+    }
+}
+function jsonValuesDiffer(a, b, depth, budget) {
+    if (++budget.nodes > CARD_ARGS_COMPARE_MAX_NODES || depth > CARD_ARGS_COMPARE_MAX_DEPTH)
+        return undefined;
+    const ka = jsonValueKindOf(a);
+    const kb = jsonValueKindOf(b);
+    if (ka === undefined || kb === undefined)
+        return undefined;
+    if (ka !== kb)
+        return true;
+    if (ka === 'array') {
+        const xa = a;
+        const xb = b;
+        const la = ownDataForCompare(xa, 'length');
+        const lb = ownDataForCompare(xb, 'length');
+        if (typeof la !== 'number' || typeof lb !== 'number')
+            return undefined;
+        if (la !== lb)
+            return true;
+        for (let i = 0; i < la; i++) {
+            const va = ownDataForCompare(xa, String(i));
+            const vb = ownDataForCompare(xb, String(i));
+            if (va === NOT_COMPARABLE || vb === NOT_COMPARABLE)
+                return undefined;
+            const d = jsonValuesDiffer(va, vb, depth + 1, budget);
+            if (d !== false)
+                return d;
+        }
+        return false;
+    }
+    if (ka === 'object') {
+        const ra = a;
+        const rb = b;
+        const keysA = Object.keys(ra);
+        const keysB = Object.keys(rb);
+        budget.nodes += keysA.length + keysB.length;
+        if (budget.nodes > CARD_ARGS_COMPARE_MAX_NODES)
+            return undefined;
+        const inA = new Set(keysA);
+        const inB = new Set(keysB);
+        for (const k of keysA) {
+            const va = ownDataForCompare(ra, k);
+            if (va === NOT_COMPARABLE)
+                return undefined;
+            if (!inB.has(k))
+                return jsonValueKindOf(va) === undefined ? undefined : true;
+            const vb = ownDataForCompare(rb, k);
+            if (vb === NOT_COMPARABLE)
+                return undefined;
+            const d = jsonValuesDiffer(va, vb, depth + 1, budget);
+            if (d !== false)
+                return d;
+        }
+        for (const k of keysB) {
+            if (inA.has(k))
+                continue;
+            const vb = ownDataForCompare(rb, k);
+            if (vb === NOT_COMPARABLE)
+                return undefined;
+            return jsonValueKindOf(vb) === undefined ? undefined : true;
+        }
+        return false;
+    }
+    return a === b ? false : true;
+}
 function durableHoldKey(row, callKey) {
     const createdAt = typeof row.createdAt === 'number' && Number.isFinite(row.createdAt) ? row.createdAt : null;
     return JSON.stringify([typeof row.sessionId === 'string' ? row.sessionId : null, typeof row.taskId === 'string' ? row.taskId : null, callKey, createdAt]);
@@ -341,15 +483,10 @@ async function presentFsApprovalAndDecide(deps, taskId, argsByCall, signal, foun
     const at = { lane: 'decide', ...(gatedCallId !== undefined ? { gatedCallId } : {}) };
     const toolName = typeof pending.toolName === 'string' ? pending.toolName : '';
     const streamArgs = gatedCallId !== undefined ? argsByCall.get(gatedCallId) : undefined;
-    const rowInput = pending.input;
-    const rowArgsGap = streamArgs !== undefined && streamArgs !== null
-        ? undefined
-        : rowInput === undefined || rowInput === null
-            ? 'absent'
-            : isParkRowInputSizeMarker(rowInput)
-                ? 'truncated'
-                : undefined;
-    const args = streamArgs !== undefined && streamArgs !== null ? streamArgs : rowArgsGap !== undefined ? {} : rowInput;
+    const reading = cardInputOf(pending.input, streamArgs);
+    const rowArgsGap = reading.from !== 'none' ? undefined : reading.shape === 'absent' ? 'absent' : reading.shape === 'size_marker' ? 'truncated' : undefined;
+    const args = reading.from !== 'none' ? reading.args : rowArgsGap !== undefined ? {} : reading.recorded;
+    const argsRewritten = reading.from === 'recorded' && reading.rewritten;
     if (typeof args !== 'object' || args === null) {
         return { kind: 'not_sent', ...at, cause: 'no_input', detail: 'gate has no tool input payload' };
     }
@@ -372,6 +509,7 @@ async function presentFsApprovalAndDecide(deps, taskId, argsByCall, signal, foun
                 wireNote: rowArgsGap === 'truncated' ? PARK_ROW_ARGS_TRUNCATED_NOTE : PARK_ROW_ARGS_ABSENT_NOTE,
             }
             : {}),
+        ...(argsRewritten ? { argsRewritten: true, wireNote: ARGS_REWRITTEN_NOTE } : {}),
         ...(pending.governanceForced === true ? { governanceForced: true } : {}),
         ...(readRequiresRealApproval(pending) ? { requiresRealApproval: true } : {}),
         ...(hasOwnStrictTrue(pending, 'mandated') ? { mandated: true } : {}),
@@ -580,6 +718,7 @@ export const TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
     'delegation',
     'outcome',
     'cause',
+    'requestedBy',
 ];
 const _mirrorPin = [true];
 void _mirrorPin;
@@ -1085,7 +1224,7 @@ const UNREADABLE_EVIDENCE_KEYS = Object.freeze({
     ]),
     generic: Object.freeze([['ruleOffersAbsence', 'ruleOffersAbsence'], ['askClass', 'askClass'], ['classes', 'classes']]),
 });
-function v1RiskUnreadable(card) {
+function riskSubtreeUnreadable(card) {
     if (slotPresenceOf(card, 'risk') === 'absent')
         return false;
     try {
@@ -1112,7 +1251,7 @@ function withUnreadableEvidence(carrier, leg, req, reported = []) {
         if (retiredAllowRuleShadowKeyPresent(carrier, shadowLeg))
             keys.add(RETIRED_SHADOW_EVIDENCE_LABEL[shadowLeg]);
     }
-    if (leg === 'v1' && v1RiskUnreadable(carrier))
+    if ((leg === 'v1' || leg === 'frame') && riskSubtreeUnreadable(carrier))
         keys.add('risk');
     return keys.size === 0 ? req : { ...req, unreadableEvidence: Object.freeze([...keys].sort()) };
 }
@@ -1336,7 +1475,7 @@ export function readDenialLimitFallback(v) {
     };
 }
 function isRuleOfferMatch(v) {
-    return typeof v === 'string' && RULE_OFFER_MATCHES.includes(v);
+    return typeof v === 'string' && CORE_PERSISTED_RULE_MATCHES.includes(v);
 }
 function readRuleTriple(v) {
     if (v === null || typeof v !== 'object')
@@ -1346,7 +1485,7 @@ function readRuleTriple(v) {
         return undefined;
     if (!isRuleOfferMatch(o.match))
         return undefined;
-    if (typeof o.command !== 'string' || o.command === '')
+    if (typeof o.command !== 'string')
         return undefined;
     return { rule: o.rule, match: o.match, command: o.command };
 }
@@ -1506,10 +1645,19 @@ function cardFactsOf(carrier, leg, opts) {
                 stream = opts.streamArgs;
                 blind = opts.argsUnavailable === true;
             }
-            const raw = stream !== undefined && stream !== null ? stream : c.args !== undefined && c.args !== null ? c.args : undefined;
-            if (typeof raw === 'object' && raw !== null)
-                return blind ? { args: raw, argsUnavailable: true } : { args: raw };
-            const fallback = argsFallbackOf(c.message, c.argsOmitted);
+            const reading = cardInputOf(c.args, stream);
+            if (reading.from === 'recorded') {
+                if (blind)
+                    return { args: reading.args, argsUnavailable: true };
+                return reading.rewritten ? { args: reading.args, argsRewritten: true, wireNote: ARGS_REWRITTEN_NOTE } : { args: reading.args };
+            }
+            if (reading.from === 'stream' && typeof reading.args === 'object' && reading.args !== null) {
+                if (blind)
+                    return { args: reading.args, argsUnavailable: true };
+                return { args: reading.args, wireNote: ARGS_FROM_MODEL_CALL_NOTE };
+            }
+            const omitted = c.argsOmitted === true || reading.shape === 'size_marker';
+            const fallback = argsFallbackOf(c.message, omitted);
             const note = blind ? SUSPENDED_ASK_ARGS_NOTE : fallback.omittedNote;
             return { args: fallback.args, argsUnavailable: true, ...(note !== undefined ? { wireNote: note } : {}) };
         }
@@ -1535,6 +1683,8 @@ function cardFactsOf(carrier, leg, opts) {
         out.wireNote = argsPart.wireNote;
     if (argsPart.argsUnavailable === true)
         out.argsUnavailable = true;
+    if (argsPart.argsRewritten === true)
+        out.argsRewritten = true;
     if (full) {
         v1Bit(() => {
             if (c.governanceForced === true)
@@ -1624,6 +1774,8 @@ function cardFactsOf(carrier, leg, opts) {
             if (o !== undefined)
                 out.origin = o;
         });
+    }
+    if (leg !== 'generic') {
         v1Bit(() => {
             const w = readApprovalCardWord(carrier);
             if (w !== undefined)
@@ -1899,7 +2051,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
             const edited = card.persistRuleEdited === true;
             if (edited) {
                 if (lane?.respondFreeFormRulesCapable === true) {
-                    persistRule = card.persistRule;
+                    persistRule = trimEditedRuleText(card.persistRule);
                     persistRuleEdited = true;
                 }
                 else {

package/dist/host.d.ts

@@ -3,9 +3,6 @@ import type { WireHooksConfig } from './finalVerifyWire.js';
 import { type NotificationQueuePort } from './notifications.js';
 export type SettingsDocument = Record<string, unknown>;
 export type ManagedPolicyState = 'absent' | 'in-effect' | 'in-effect-pieces' | 'unreadable-covered' | 'unreadable-uncovered' | 'remote-unknown';
-export interface ManagedPolicyReading {
-    readonly state: ManagedPolicyState;
-}
 export type HooksStartupMode = 'safe' | 'bare';
 export type PluginHookOptionValue = string | number | boolean;
 export interface PluginHookSensitiveOption {

package/dist/hostTurnSettings.js

@@ -454,8 +454,10 @@ function permissionsArm(src, side, adoption) {
             appendOwnElement(buckets[bucket], rule);
             origins[bucket].set(rule, origin);
         }
-        else if (rank(origin) < rank(prev))
+        else if (rank(origin) < rank(prev)) {
+            origins[bucket].delete(rule);
             origins[bucket].set(rule, origin);
+        }
     };
     let projectionError;
     const portsProjection = newRulePortsProjection();

package/dist/humanTurn.js

@@ -1,4 +1,4 @@
-import { CORE_MAX_PENDING_STEER_CHARS, CORE_MCP_IMAGE_MAX_BASE64, CORE_USER_ATTACHMENT_LABEL_MAX } from './generated/engineFactTables.js';
+import { CORE_IMAGE_ADMISSION_HARD_IMAGE_BASE64_CHARS, CORE_MAX_PENDING_STEER_CHARS, CORE_USER_ATTACHMENT_LABEL_MAX } from './generated/engineFactTables.js';
 import { mintEnvelopeOf, mintReferenceOf, seatTextOf } from './userAttachmentEnvelope.js';
 import { readEncodingShares, readHumanTurnInput } from './humanTurnRead.js';
 import { putOwnKey } from './ownKey.js';
@@ -224,7 +224,7 @@ function encodeObjective(v) {
     let count = 0;
     let total = 0;
     const seat = (len) => {
-        if (len > CORE_MCP_IMAGE_MAX_BASE64)
+        if (len > CORE_IMAGE_ADMISSION_HARD_IMAGE_BASE64_CHARS)
             return 'image_too_large';
         if (count + 1 > IMAGE_SEAT_MAX_COUNT)
             return 'seat_count';

package/dist/i18n/messages.en.d.ts

@@ -184,6 +184,7 @@ declare const EN: {
     'config.mcp.nameEdgeWhitespace': string;
     'config.mcp.nameCollides': string;
     'config.mcp.nameTooLong': string;
+    'config.mcp.nameReserved': string;
     'config.mcp.identityHeadersBothSet': string;
     'config.mcp.transportUnreadable': string;
     'config.mcp.transportInvalid': string;
@@ -584,6 +585,8 @@ declare const EN: {
     'notice.wayOut.switchModel': string;
     'notice.wayOut.wait': string;
     'notice.wayOut.fixRequest': string;
+    'notice.askUnresolvable.remedy.approver': string;
+    'notice.askUnresolvable.remedy.permissionMode': string;
     'rules.refusal.sentence.one': string;
     'rules.refusal.sentence.other': string;
     'rules.refusal.item': string;
@@ -780,6 +783,7 @@ declare const EN: {
     'rules.match.host': string;
     'rules.match.subdomain': string;
     'rules.match.pattern': string;
+    'rules.match.tool': string;
     'rules.match.unreported': string;
     'rules.match.unknown': string;
     'model.tier.blurb.ultra': string;
@@ -1048,6 +1052,7 @@ declare const EN: {
     'config.mods.loader.failedNoReason': string;
     'config.mods.refusal.by': string;
     'config.mods.rewrite.resultInPlace': string;
+    'config.mods.rewrite.inputBy': string;
 };
 export declare const EN_MESSAGES: Readonly<typeof EN>;
 export type MessageKey = keyof typeof EN;

package/dist/i18n/messages.en.js

@@ -184,6 +184,7 @@ const EN = {
     'config.mcp.nameEdgeWhitespace': 'MCP server name {name}{where} cannot be used as written, so the server was not started: it would not match the same name in other settings (for example a list of disabled servers). Remove the extra whitespace from the name.',
     'config.mcp.nameCollides': 'MCP server name {name}{where} cannot be used as written, so the server was not started: without its leading or trailing whitespace it would be the same name as another MCP server entry. Remove the extra whitespace from the name, or delete the duplicate entry.',
     'config.mcp.nameTooLong': 'MCP server name {name}{where} cannot be used, so the server was not started: server names are limited to 128 characters. Shorten the name.',
+    'config.mcp.nameReserved': 'MCP server name {name}{where} cannot be used, so the server was not started: names starting with "remote-" are kept for the MCP servers a connected device offers. Rename the server.',
     'config.mcp.identityHeadersBothSet': 'MCP server {name}{where} was not started: it sets both principalHeader and assertionHeader, which name the same identity header — keep only one of the two. The other MCP servers are unaffected.',
     'config.mcp.transportUnreadable': 'could not be read (a getter or proxy trap on the declaration threw)',
     'config.mcp.transportInvalid': 'MCP server {name}{where} was not started: its transport setting cannot be used — {path} {problem}. Fix that setting for this server (or remove the server); the other MCP servers are unaffected.',
@@ -302,7 +303,7 @@ const EN = {
     'session.inheritEnv.withheld.scrub': "Not sent with this request: the engine's version is not known yet, so the default-environment setting was left out; that has the same effect, because leaving it out also gives this run the default environment (credential-like variables removed).",
     'session.inheritEnv.withheld.unknown': 'Not sent with this request: the shell-environment setting was held back for a reason this version does not recognize.',
     'session.inheritEnv.refusal': "The engine refused this request as invalid, under a refusal code that many different request fields share · This request asked for the shell to inherit this machine's whole environment, which the engine accepts only when tools run directly on its own machine and the request belongs to a session; if that is what it refused, send it again without that setting (or with the default)",
-    'session.inheritEnv.refusalNamed': "The engine refused the setting that lets the shell inherit this machine's whole environment, which it accepts only when tools run directly on its own machine and the request belongs to a session · Send the request again without that setting (or with the default)",
+    'session.inheritEnv.refusalNamed': "The engine refused this request's shell-environment setting: it accepts only the default or this machine's whole environment, and the whole environment only when tools run directly on its own machine and the request belongs to a session · Send the request again without that setting (or with the default)",
     'session.projectMemory.withheld.absent': 'Not sent with this request: this engine does not declare support for the setting that stops project instruction files from being read, and an engine that does not know it refuses the whole request, so it was held back; those files are still sent to the model.',
     'session.projectMemory.withheld.declined': 'Not sent with this request: this engine declares that it does not support the setting that stops project instruction files from being read, so it was held back; those files are still sent to the model.',
     'session.projectMemory.withheld.unreadable': "Not sent with this request: the engine's capabilities could not be read, so it is not known whether it supports the setting that stops project instruction files from being read, and an engine that does not know it refuses the whole request, so it was held back; those files are still sent to the model.",
@@ -584,6 +585,8 @@ const EN = {
     'notice.wayOut.switchModel': 'The model service cannot serve this request right now — try another model',
     'notice.wayOut.wait': 'The model service is still working on this request — wait a moment, then try again',
     'notice.wayOut.fixRequest': 'The model service refused this request — change the request before sending it again; sending it as it is will not help',
+    'notice.askUnresolvable.remedy.approver': 'Way out: connect an approver who can answer requests like this one, or make the connected approver reachable, then try again',
+    'notice.askUnresolvable.remedy.permissionMode': 'Another way out, if this deployment allows it: the {mode} permission mode lets requests like this one through without anyone answering them, and each request let through this way is marked on the tool call it applied to',
     'rules.refusal.sentence.one': 'permissions: 1 rule will not be enforced — {list}',
     'rules.refusal.sentence.other': 'permissions: {count} rules will not be enforced — {list}',
     'rules.refusal.item': '{rule} ({reason})',
@@ -780,6 +783,7 @@ const EN = {
     'rules.match.host': 'web domain match (one host)',
     'rules.match.subdomain': 'web domain match (every host under the domain)',
     'rules.match.pattern': 'command pattern match (a star placed anywhere in the command)',
+    'rules.match.tool': 'whole-tool match (every call to the tool)',
     'rules.match.unreported': 'an unreported match form',
     'rules.match.unknown': 'a match form this build does not know',
     'model.tier.blurb.ultra': 'reserved above max — binds when a stronger model lands',
@@ -1048,5 +1052,6 @@ const EN = {
     'config.mods.loader.failedNoReason': '{name} could not be loaded',
     'config.mods.refusal.by': 'Refused by {by}',
     'config.mods.rewrite.resultInPlace': 'Answered by {by} in place of the tool',
+    'config.mods.rewrite.inputBy': 'Arguments changed by {by} before the call was let through',
 };
 export const EN_MESSAGES = Object.freeze(EN);

package/dist/i18n/messages.zh.js

@@ -184,6 +184,7 @@ const ZH = {
     'config.mcp.nameEdgeWhitespace': 'MCP 服务器名 {name}{where} 不能照原样使用,所以没有启动:它与其他设置里的同名对不上(例如禁用服务器列表)。请去掉名字里多余的空白。',
     'config.mcp.nameCollides': 'MCP 服务器名 {name}{where} 不能照原样使用,所以没有启动:去掉首尾空白后会与另一条 MCP 服务器重名。请去掉名字里多余的空白,或删掉重复的一条。',
     'config.mcp.nameTooLong': 'MCP 服务器名 {name}{where} 不可用,所以没有启动:服务器名最长 128 个字符。请缩短名字。',
+    'config.mcp.nameReserved': 'MCP 服务器名 {name}{where} 不可用,所以没有启动:以 "remote-" 开头的名字留给已连接设备提供的 MCP 服务器。请给这台服务器换个名字。',
     'config.mcp.identityHeadersBothSet': 'MCP 服务器 {name}{where} 没有启动:它同时设置了 principalHeader 和 assertionHeader,而这两项指的是同一个身份头 —— 只保留其中一项。其他 MCP 服务器不受影响。',
     'config.mcp.transportUnreadable': '读不出(声明上的取值器或代理陷阱抛了错)',
     'config.mcp.transportInvalid': 'MCP 服务器 {name}{where} 没有启动:它的传输设置不可用 —— {path} {problem}。请修正这台服务器的这项设置(或删掉这台服务器);其他 MCP 服务器不受影响。',
@@ -302,7 +303,7 @@ const ZH = {
     'session.inheritEnv.withheld.scrub': '这次请求没有带上它:引擎的版本还不知道,所以缺省环境这项设置没有带;效果相同,因为不带它同样让这次 run 拿到缺省环境(看着像凭据的变量已去掉)。',
     'session.inheritEnv.withheld.unknown': '这次请求没有带上它:shell 环境这项设置因为一个这个版本不认识的原因被扣下了。',
     'session.inheritEnv.refusal': '引擎把这次请求当作无效拒掉了,用的是许多不同请求字段共用的一个拒绝码 · 这次请求要求 shell 继承本机的整份环境,而引擎只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受这一项;如果它拒的正是这一项,请去掉这项设置(或改用缺省)再发一次',
-    'session.inheritEnv.refusalNamed': '引擎拒掉了「让 shell 继承本机整份环境」这项设置,它只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受这一项 · 请去掉这项设置(或改用缺省)再发一次',
+    'session.inheritEnv.refusalNamed': '引擎拒掉了这次请求里的 shell 环境设置:这一项只收缺省或本机整份环境两种取值,而整份环境只有在工具直接跑在它自己那台机器上、且请求属于某个会话时才接受 · 请去掉这项设置(或改用缺省)再发一次',
     'session.projectMemory.withheld.absent': '这次请求没有带上它:这台引擎没有声明支持「别读项目指令文件」这项设置,而不认识它的引擎会拒掉整个请求,所以先扣下了;项目指令文件仍会发给模型。',
     'session.projectMemory.withheld.declined': '这次请求没有带上它:这台引擎声明了不支持「别读项目指令文件」这项设置,所以先扣下了;项目指令文件仍会发给模型。',
     'session.projectMemory.withheld.unreadable': '这次请求没有带上它:引擎的能力声明没读到,所以不知道它是否支持「别读项目指令文件」这项设置,而不认识它的引擎会拒掉整个请求,所以先扣下了;项目指令文件仍会发给模型。',
@@ -584,6 +585,8 @@ const ZH = {
     'notice.wayOut.switchModel': '模型服务此刻无法处理这个请求 —— 请换一个模型试试',
     'notice.wayOut.wait': '模型服务仍在处理这个请求 —— 请稍等片刻后重试',
     'notice.wayOut.fixRequest': '模型服务拒绝了这个请求 —— 请修改请求后再发送;原样重发不会有变化',
+    'notice.askUnresolvable.remedy.approver': '出路:接一个能答这类请求的审批人,或让已接的审批人可达,然后重试',
+    'notice.askUnresolvable.remedy.permissionMode': '另一条出路(须本部署允许):{mode} 权限模式会不经人作答就放行这类请求,每一次这样放行都会标在它所放行的那次工具调用上',
     'rules.refusal.sentence.one': '权限:有 1 条规则不会被执行 —— {list}',
     'rules.refusal.sentence.other': '权限:有 {count} 条规则不会被执行 —— {list}',
     'rules.refusal.item': '{rule}({reason})',
@@ -780,6 +783,7 @@ const ZH = {
     'rules.match.host': '网站域名匹配(单个主机)',
     'rules.match.subdomain': '网站域名匹配(该域名下的每个主机)',
     'rules.match.pattern': '命令模式匹配(命令里带星号)',
+    'rules.match.tool': '整个工具匹配(这个工具的每一次调用)',
     'rules.match.unreported': '没有报告匹配形式',
     'rules.match.unknown': '这个版本不认识的匹配形式',
     'model.tier.blurb.ultra': '预留在 max 之上 —— 等更强的模型出现时再绑定',
@@ -1048,6 +1052,7 @@ const ZH = {
     'config.mods.loader.failedNoReason': '{name} 装载失败',
     'config.mods.refusal.by': '被 {by} 拒绝',
     'config.mods.rewrite.resultInPlace': '由 {by} 代替工具作答',
+    'config.mods.rewrite.inputBy': '参数在放行前被 {by} 改过',
 };
 export const ZH_MESSAGES = Object.freeze(ZH);
 export const TERM_SLOTS = Object.freeze({

package/dist/index.d.ts

@@ -50,6 +50,7 @@ export * from './memoryOriginCapability.js';
 export * from './memoryEntriesWire.js';
 export * from './memoryVerbsWire.js';
 export * from './deviceExecutorManagementCapability.js';
+export * from './credentialPlaneCapability.js';
 export * from './mcpReconnect.js';
 export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
@@ -118,7 +119,7 @@ export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminde
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
 export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MCP_SERVER_NAME_COLLISION, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_ROW_UNREVIVABLE, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MCP_TOOL_DECLARATION_CHANGED, MCP_TOOL_LISTING_UNREACHED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
-export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf, type PrepareRefusalCode, type PrepareRefusalNoteFacts } from './prepareRefusal.js';
+export { prepareRefusalCodeOf, prepareRefusalNoteOf, type PrepareRefusalCode, type PrepareRefusalNoteFacts } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export type { EngineToolDirectory, EngineToolDirectorySource } from './engineToolDirectory.js';
@@ -360,13 +361,16 @@ export { BACKGROUND_HANDOFF_ABORT_REASON, handoffInteractiveRun, handedOffRunsOf
 export type { BackgroundHandoffRequest, BackgroundHandoffOutcome, BackgroundRun, BackgroundRunSettlement, HandedOffRunRow, HandedOffRunsReading, } from './sessionBackgroundHandoff.js';
 export { listDevices, readSessionBinding, rebindSession, reconcileRebindOutcome, rebindProvesRequestNotApplied } from './deviceRebind.js';
 export { issueEnrollToken, enrollDevice, revokeDevice, deviceIdentityMismatchOf, deviceIdentityMismatchLine, deviceRegistrationOutcomeLine } from './deviceRebind.js';
-export type { DeviceSummary, DeviceListResult, DeviceBinding, DeviceSessionBinding, DeviceRebindRequest, DeviceRevokeRequest, DeviceRebindResult, DeviceEnrollToken, DeviceEnrollRequest, DeviceEnrollResult, DeviceRevokeResult, } from '@sema-agent/sdk';
-export type { DeviceListVerb, DeviceSessionBindingVerb, DeviceRebindVerb, DeviceRosterRow, DeviceBindingReading, DeviceRefused, DeviceLaneAbsent, DeviceTransport, DeviceUnreadable, DeviceUnarmed, DeviceListOutcome, DeviceSessionBindingOutcome, DeviceRebindInput, DeviceRebindUnconfirmed, DeviceRebindOutcome, DeviceRebindReconcileVerdict, DeviceIssueEnrollTokenVerb, DeviceEnrollVerb, DeviceRevokeVerb, DeviceEnrollOptions, DeviceRateLimited, DeviceEnrollTokenOutcome, DeviceEnrollOutcome, DeviceRevokeOutcome, DeviceRegistrationVerb, DeviceIdentityMismatch, } from './deviceRebind.js';
+export type { DeviceSummary, DeviceListResult, DeviceRebindRequest, DeviceRevokeRequest, DeviceRebindResult, DeviceEnrollToken, DeviceEnrollRequest, DeviceEnrollResult, DeviceRevokeResult, } from '@sema-agent/sdk';
+export type { ExecutionPlacementRole } from './executionPlacementWords.js';
+export type { DeviceListVerb, SessionExecutionPlacementVerb, DeviceFaceUnsupported, DeviceRebindVerb, DeviceRosterRow, DeviceBindingReading, DeviceRefused, DeviceLaneAbsent, DeviceTransport, DeviceUnreadable, DeviceUnarmed, DeviceListOutcome, DeviceSessionBindingOutcome, DeviceRebindInput, DeviceRebindUnconfirmed, DeviceRebindOutcome, DeviceRebindReconcileVerdict, DeviceIssueEnrollTokenVerb, DeviceEnrollVerb, DeviceRevokeVerb, DeviceEnrollOptions, DeviceRateLimited, DeviceEnrollTokenOutcome, DeviceEnrollOutcome, DeviceRevokeOutcome, DeviceRegistrationVerb, DeviceIdentityMismatch, } from './deviceRebind.js';
 export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js';
 export type { EngineEnvView, EngineEnvGroupDecl, EngineEnvSourcingInput, EngineEnvTouchedKey, EngineEnvGroupReading, EngineEnvKeyReason, EngineEnvSourcingVerdict, } from './engineEnvSourcing.js';
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { sessionRowTagOf, sessionRowPatchRefusalOf } from './sessionRowTag.js';
+export type { SessionRowCurrentReading, SessionRowPatchRefusal } from './sessionRowTag.js';
 export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
 export type { McpToolToggleKey, McpMountedServers } from './mcpToolToggles.js';
 export { readThinkingLatch, writeThinkingLatch, thinkingLatchView, thinkingLatchSentence, thinkingLatchRowWordOf, readSeatThinkingLatch } from './thinkingLatch.js';
@@ -403,7 +407,7 @@ export * from './env/uiLanguage.js';
 export { EN_MESSAGES, type MessageKey } from './i18n/messages.en.js';
 export { ZH_MESSAGES } from './i18n/messages.zh.js';
 export { createMissLedger, createTranslator, DATA_FACE_LANGUAGE, msg, renderMessage, translate, uiMissLedger, type MessageParam, type MessageParams, type MessageRef, type MissLedger, type Translator, } from './i18n/translate.js';
-export type { PendingCheckpoint, RuleSuggestion } from '@sema-agent/sdk';
+export type { PendingCheckpoint } from '@sema-agent/sdk';
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';

package/dist/index.js

@@ -41,6 +41,7 @@ export * from './memoryOriginCapability.js';
 export * from './memoryEntriesWire.js';
 export * from './memoryVerbsWire.js';
 export * from './deviceExecutorManagementCapability.js';
+export * from './credentialPlaneCapability.js';
 export * from './mcpReconnect.js';
 export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
@@ -99,7 +100,7 @@ export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
 export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MCP_SERVER_NAME_COLLISION, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_ROW_UNREVIVABLE, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MCP_TOOL_DECLARATION_CHANGED, MCP_TOOL_LISTING_UNREACHED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
-export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
+export { prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
@@ -298,6 +299,7 @@ export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js'
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { sessionRowTagOf, sessionRowPatchRefusalOf } from './sessionRowTag.js';
 export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
 export { readThinkingLatch, writeThinkingLatch, thinkingLatchView, thinkingLatchSentence, thinkingLatchRowWordOf, readSeatThinkingLatch } from './thinkingLatch.js';
 export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';

package/dist/inheritEnvWire.d.ts

@@ -16,6 +16,7 @@ export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld, l
 export interface InheritEnvRefusalDetail {
     readonly code: string;
     readonly field?: 'inheritEnv';
+    readonly reason?: string;
 }
 export declare function inheritEnvRefusalFromError(err: unknown, sentRequest: TaskRequestLike | undefined): InheritEnvRefusalDetail | null;
 export declare function inheritEnvRefusalContent(detail: InheritEnvRefusalDetail, lang?: UiLanguage): string;

package/dist/inheritEnvWire.js

@@ -1,6 +1,6 @@
 import { msg, renderMessage } from './i18n/translate.js';
 import { INHERIT_ENV_WORDS, isInheritEnvWord } from './request/taskRequest.js';
-import { readRefusalNamedFields } from './wireFailureShape.js';
+import { readRefusalNamedFields, readRefusalSlots } from './wireFailureShape.js';
 import { engineVersionTier } from './supportFloor.js';
 import { guardedRead, readOwnDataValue } from './ownKey.js';
 const EMPTY_DECLARATION = Object.freeze({ field: Object.freeze({}) });
@@ -47,7 +47,8 @@ function readGuarded(o, key) {
 }
 export function inheritEnvRefusalFromError(err, sentRequest) {
     try {
-        if (readGuarded(sentRequest, 'inheritEnv') !== 'all')
+        const sent = readGuarded(sentRequest, 'inheritEnv');
+        if (sent === undefined)
             return null;
         if (readGuarded(err, 'errorCode') !== FIELD_INVALID)
             return null;
@@ -55,9 +56,11 @@ export function inheritEnvRefusalFromError(err, sentRequest) {
             return null;
         const named = readRefusalNamedFields(err);
         if (named.length === 0)
-            return Object.freeze({ code: FIELD_INVALID });
-        if (named.includes(INHERIT_ENV_FIELD))
-            return Object.freeze({ code: FIELD_INVALID, field: INHERIT_ENV_FIELD });
+            return sent === 'all' ? Object.freeze({ code: FIELD_INVALID }) : null;
+        if (named.includes(INHERIT_ENV_FIELD)) {
+            const reason = guardedRead(() => readRefusalSlots(err, ['reason']).reason.word);
+            return Object.freeze({ code: FIELD_INVALID, field: INHERIT_ENV_FIELD, ...(typeof reason === 'string' && reason.length > 0 ? { reason } : {}) });
+        }
         return null;
     }
     catch {

package/dist/jsonFaithful.js

@@ -19,14 +19,16 @@ export const isPlainRecord = (v) => {
         return true;
     if (typeof proto !== 'object')
         return false;
-    if (!Object.prototype.hasOwnProperty.call(proto, 'constructor'))
+    const ctorDesc = Object.getOwnPropertyDescriptor(proto, 'constructor');
+    if (ctorDesc === undefined || !Object.hasOwn(ctorDesc, 'value'))
         return false;
-    const ctor = proto.constructor;
+    const ctor = ctorDesc.value;
     if (typeof ctor !== 'function')
         return false;
     if (Function.prototype.toString.call(ctor) !== Function.prototype.toString.call(Object))
         return false;
-    return ctor.prototype === proto;
+    const protoDesc = Object.getOwnPropertyDescriptor(ctor, 'prototype');
+    return protoDesc !== undefined && Object.hasOwn(protoDesc, 'value') && protoDesc.value === proto;
 };
 export const materializeJsonFaithful = (v, path, seen = new Set(), opts = {}) => {
     const guard = opts.guard;

package/dist/mcpEngineLeg.d.ts

@@ -1,4 +1,5 @@
 import type { WiringManifestMcpEntryView } from './adapter/downstream/eventToSdkMessage.js';
+import { type McpAuthorizationView } from './mcpLiveness.js';
 export type McpEngineLegLiveness = {
     kind: 'unobserved';
 } | {
@@ -24,6 +25,8 @@ export type McpEngineLegConnection = {
     errorCode?: string;
     delivered?: string;
     httpStatus?: number;
+    authorization?: McpAuthorizationView;
+    authorizationUnreadable?: true;
 } | {
     state: 'not_connected';
     cause: 'skipped' | 'not_listed';