@sema-agent/client-core 0.104.1 → 0.105.0

package/dist/adapter/runStream.js

@@ -20,6 +20,7 @@ import { MODEL_OUTPUT_ERROR_PREFIX, OUTCOME_UNKNOWN_ROW_PREFIX, RUN_BLOCKED_MESS
 export { MODEL_OUTPUT_ERROR_PREFIX, OUTCOME_UNKNOWN_ROW_PREFIX, RUN_BLOCKED_MESSAGE_PREFIX, RUN_STOPPED_MESSAGE_PREFIX };
 import { ccToolDenialKindForToolEnd, gateDeniedBy, gateOutcomeOf } from '../gateOutcome.js';
 import { resumeReopenContent, resumeReopenFromError, suspendedReopenOf } from '../hitl/suspendedReopen.js';
+import { openPlanBodyClaimLeg, planReviewParkFacts, stepPlanBodyClaim } from '../planReviewCardFacts.js';
 import { isCcToolDenialKind, isCcToolDenialKindADenial, isGateDeniedByWord } from '../gateVocabulary.js';
 const ENGINE_TURN_USAGE_KEYS = Object.freeze(['inputTokens', 'totalInputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens', 'costMicroUsd']);
 const _engineTurnUsageKeysPin = true;
@@ -578,6 +579,7 @@ async function* runStreamInner(events, ctx, handle = {}) {
             return false;
         }
     };
+    const planLeg = openPlanBodyClaimLeg();
     for await (const rawEv of events) {
         const ev = withStringFailureFields(rawEv);
         const wireSubFlow = wireFrameIsSubFlow(ev);
@@ -591,6 +593,7 @@ async function* runStreamInner(events, ctx, handle = {}) {
             }
             seen.add(seq);
         }
+        stepPlanBodyClaim(planLeg, ev, wireSubFlow);
         if (ev.type === 'tool_start') {
             const callId = ev.toolCallId;
             if (typeof callId === 'string' && callId.length > 0 && !toolInputAmbiguous.has(callId)) {
@@ -853,9 +856,10 @@ async function* runStreamInner(events, ctx, handle = {}) {
                     accepted: ev.type === 'done' && (doneTerminal?.kind === 'completed' || doneTerminal?.kind === 'paused'),
                 }).acceptedSinceMismatch;
             }
+            const planReview = ev.type === 'done' ? planReviewParkFacts(planLeg, engineResultOf(ev.result)) : undefined;
             if (ev.type === 'done' && isReviewPark(doneTerminal) && ctx.emitChrome) {
                 try {
-                    await ctx.emitChrome({ kind: 'plan_review_park', laneProof: mainLane(), result: ev.result });
+                    await ctx.emitChrome({ kind: 'plan_review_park', laneProof: mainLane(), result: ev.result, ...(planReview !== undefined ? { planReview } : {}) });
                 }
                 catch { }
             }

package/dist/cloudConfigWireCaps.js

@@ -149,11 +149,13 @@ export function cloudMcpToSpecs(servers, env) {
         let elicitationDeclared;
         let allowDeclared;
         let startupDeclared;
+        let sessionMetaKeyDeclared;
         try {
             axesDeclared = s.toolAxes;
             elicitationDeclared = s.elicitation;
             allowDeclared = s.allowTools;
             startupDeclared = s.startupTimeoutMs;
+            sessionMetaKeyDeclared = s.sessionMetaKey;
         }
         catch {
             recordDrop(name, 'entry-unreadable');
@@ -202,6 +204,7 @@ export function cloudMcpToSpecs(servers, env) {
             ...(facesShipped !== undefined ? { toolFaces: facesShipped } : {}),
             ...(axesShipped !== undefined ? { toolAxes: axesShipped } : {}),
             ...(startupDeclared !== undefined ? { startupTimeoutMs: startupDeclared } : {}),
+            ...(sessionMetaKeyDeclared !== undefined ? { sessionMetaKey: sessionMetaKeyDeclared } : {}),
         });
     }
     return { specs, missingEnv: [...new Set(missingEnv)], droppedServers, degradedServers };

package/dist/compensations.js

@@ -77,12 +77,12 @@ export const MIGRATED_COMPENSATIONS = [
     },
     {
         id: 'T2',
-        what: '去重键客户端重算(`[external:]taskId:status[:seq]`)—— wire 上没有「这次完成的唯一 id」',
+        what: '渲染去重的身份 —— 自算键(`[external:]taskId:status[:seq]`)恒在;终态、非 external 且带完成 id 的通知再加一把 `completion:<id>`;只有完成键见过的同一次完成不渲第二行,其余义务照做',
         disposition: 'in-library',
-        libraryHalf: 'notifications.ts taskNotificationDedupKey + taskNotificationDedupKeyFromWire(裸 wire 入口)',
+        libraryHalf: 'notifications.ts taskNotificationRenderKeys(身份全集,适配器渲染去重读它)+ taskNotificationDedupKey / taskNotificationDedupKeyFromWire(自算键;裸 wire 入口)',
         chromeArm: null,
         hostHalf: null,
-        retireOn: 'RL-36',
+        retireOn: null,
     },
     {
         id: 'T3',
@@ -103,16 +103,16 @@ export const MIGRATED_COMPENSATIONS = [
         libraryHalf: 'toolResult.ts 终态轮询卡臂的预 seed + notifications.markEngineWorkflowNotified',
         chromeArm: null,
         hostHalf: null,
-        retireOn: 'RL-38',
+        retireOn: null,
     },
     {
         id: 'T53',
-        what: '同一次完成四通道扇出 ⇒ 四道去重(设计稿列为最贵 #4)',
+        what: '同一次完成四通道扇出 ⇒ 四道去重(四通道扇出里最贵的一道;第四道是队列撤单,不是去重)',
         disposition: 'in-library',
         libraryHalf: 'adapt.ts task_notification / workflow_complete 两臂的四道门(逐道说明见本行上方注释)',
         chromeArm: null,
         hostHalf: null,
-        retireOn: 'RL-39',
+        retireOn: null,
     },
     {
         id: 'T49',

package/dist/coreValuePorts.d.ts

@@ -150,8 +150,9 @@ export interface CoreValuePorts {
     ANTHROPIC_DEFAULT_BASE_URL: string;
     readToolFaces(declared: {} | null | undefined): McpToolFacesReadView;
     ruleNameCovers: (ruleName: string, toolName: string) => boolean;
+    IMPORTED_SETTINGS_LAYERS: readonly ['userSettings', 'projectSettings', 'localSettings'];
 }
-export declare const CORE_VALUE_PORT_NAMES: readonly ["resolveAutonomousLoopPrompt", "loosenReasons", "combinePolicies", "createAllowDenyPolicy", "MCP_NAMESPACE", "protocolOf", "ruleToolGrammarOf", "validatePermissionRules", "mintNamespacePrefix", "compileAllowList", "routeKeyOf", "joinRequestUrl", "resolveRouteCredential", "adjudicateModelRoute", "routePairingStatus", "judgeRuleToolName", "readRuleEntry", "readMcpToolAxes", "ANTHROPIC_DEFAULT_BASE_URL", "readToolFaces", "ruleNameCovers"];
+export declare const CORE_VALUE_PORT_NAMES: readonly ["resolveAutonomousLoopPrompt", "loosenReasons", "combinePolicies", "createAllowDenyPolicy", "MCP_NAMESPACE", "protocolOf", "ruleToolGrammarOf", "validatePermissionRules", "mintNamespacePrefix", "compileAllowList", "routeKeyOf", "joinRequestUrl", "resolveRouteCredential", "adjudicateModelRoute", "routePairingStatus", "judgeRuleToolName", "readRuleEntry", "readMcpToolAxes", "ANTHROPIC_DEFAULT_BASE_URL", "readToolFaces", "ruleNameCovers", "IMPORTED_SETTINGS_LAYERS"];
 export type CoreValuePortName = (typeof CORE_VALUE_PORT_NAMES)[number];
 export declare function installCoreValuePorts(ports: Partial<CoreValuePorts> | null): () => void;
 export declare function hasCoreValuePorts(): boolean;
@@ -182,3 +183,4 @@ export declare function readMcpToolAxes(declared: {} | null | undefined): McpToo
 export declare function anthropicDefaultBaseUrl(): string | undefined;
 export declare function readToolFaces(declared: {} | null | undefined): McpToolFacesReadView | undefined;
 export declare function ruleNameCovers(ruleName: string, toolName: string): boolean | undefined;
+export declare function importedSettingsLayers(): CoreValuePorts['IMPORTED_SETTINGS_LAYERS'] | undefined;

package/dist/coreValuePorts.js

@@ -20,6 +20,7 @@ export const CORE_VALUE_PORT_NAMES = Object.freeze([
     'ANTHROPIC_DEFAULT_BASE_URL',
     'readToolFaces',
     'ruleNameCovers',
+    'IMPORTED_SETTINGS_LAYERS',
 ]);
 let installed = null;
 export function installCoreValuePorts(ports) {
@@ -123,3 +124,6 @@ export function ruleNameCovers(ruleName, toolName) {
     const fn = port('ruleNameCovers');
     return fn === undefined ? undefined : fn(ruleName, toolName);
 }
+export function importedSettingsLayers() {
+    return port('IMPORTED_SETTINGS_LAYERS');
+}

package/dist/displayUntrusted.d.ts

@@ -14,6 +14,7 @@ export interface DisplayFace {
     readonly fold: boolean;
     readonly mark: DisplayMark;
     readonly keepBlanks?: boolean;
+    readonly keepCrlf?: boolean;
 }
 export declare function applyDisplayFace(text: string, face: DisplayFace): string;
 export interface DisplayUntrustedOptions {
@@ -22,11 +23,11 @@ export interface DisplayUntrustedOptions {
     readonly controls?: boolean;
     readonly bidi?: boolean;
     readonly foldLines?: boolean;
-    readonly keepLayout?: boolean;
+    readonly keepLayout?: boolean | 'crlf';
     readonly mark?: DisplayMark;
     readonly max?: number;
     readonly escapeBackslashes?: boolean;
-    readonly blanks?: boolean;
+    readonly blanks?: boolean | 'fillers';
 }
 export interface DisplayMarkSpan {
     readonly start: number;
@@ -37,6 +38,7 @@ export interface DisplayUntrustedMarked {
     readonly text: string;
     readonly marks: readonly DisplayMarkSpan[];
 }
+export declare const DISPLAY_DECISION_BODY: Readonly<DisplayUntrustedOptions>;
 export declare const ESCAPE_FACE: DisplayFace;
 export declare const LABEL_FACE: DisplayFace;
 export declare const PEER_NAME_FACE: DisplayFace;

package/dist/displayUntrusted.js

@@ -3618,6 +3618,8 @@ class SequenceReader {
         if (this.atomicBlanks === 'none')
             return false;
         const cp = nameBlankTokenAt(this.text, at);
+        if (this.atomicBlanks === 'fillers')
+            return cp !== -1 && !isFoldedBlank(cp);
         return this.atomicBlanks === 'all' ? cp !== -1 : isFoldedBlank(cp);
     }
     intermediateAt(at) {
@@ -3735,6 +3737,9 @@ function nameBlankTokenAt(text, at) {
     const cp = Number.parseInt(hit[1] ?? '', 16);
     return isNameBlank(cp) ? cp : -1;
 }
+function isMarkedNameBlank(net, c) {
+    return net === 1 ? isNameBlank(c) : net === 2 ? isNameBlank(c) && !isRegexSpace(c) : false;
+}
 function buildScanView(text, o) {
     const chars = [];
     const starts = [];
@@ -3743,7 +3748,7 @@ function buildScanView(text, o) {
     const dropped = [];
     const spaceUnits = [];
     const contents = [];
-    const seq = new SequenceReader(text, o.blanks ? 'all' : 'none', o.blanks || o.fold, o.fold);
+    const seq = new SequenceReader(text, o.blanks === 1 ? 'all' : o.blanks === 2 ? 'fillers' : 'none', o.blanks === 1 || o.fold, o.fold);
     const keep = (ch, s, e, unit = UNIT_NONE) => {
         chars.push(ch);
         starts.push(s);
@@ -3814,7 +3819,7 @@ function buildScanView(text, o) {
                 continue;
             }
         }
-        if (o.blanks && isNameBlank(c)) {
+        if (isMarkedNameBlank(o.blanks, c)) {
             drop(i, i + 1);
             i++;
             continue;
@@ -3984,7 +3989,7 @@ function screenSurfaces(text, o) {
             i = j;
             continue;
         }
-        else if (unsafe !== null && unsafe.test(ch) && !faceHitKept(ch, i, text)) {
+        else if (unsafe !== null && unsafe.test(ch) && !faceHitKept(ch, i, text, face.keepCrlf === true)) {
             form = markOf(ch, face.mark);
             dotted = face.mark !== 'escape';
         }
@@ -4636,13 +4641,16 @@ function scanAndMask(text, o, trace, stats, phaseOut) {
     }
     return cur;
 }
-const WASH_OPTIONS = Object.freeze({ urls: true, words: true, blanks: false, fold: false, face: null, escapeSpaces: null });
+const WASH_OPTIONS = Object.freeze({ urls: true, words: true, blanks: 0, fold: false, face: null, escapeSpaces: null });
 export function washCredentials(text) {
     if (typeof text !== 'string')
         return text;
     return scanAndMask(text, WASH_OPTIONS, false).text;
 }
 const NAME_BLANKS = NAME_BLANK_RANGES.map(([a, b]) => (a === b ? classEscape(a) : `${classEscape(a)}-${classEscape(b)}`)).join('');
+const NAME_FILLERS = NAME_BLANK_RANGES.filter(([a, b]) => !isRegexSpace(a) && !isRegexSpace(b))
+    .map(([a, b]) => (a === b ? classEscape(a) : `${classEscape(a)}-${classEscape(b)}`))
+    .join('');
 function classEscape(cp) {
     return `\\u${cp.toString(16).toUpperCase().padStart(4, '0')}`;
 }
@@ -4740,10 +4748,12 @@ function joinerKept(text, at, zwj) {
 function emojiPresented(cp, after) {
     return isPictograph(cp) && (isEmojiPresentation(cp) || after === 0xfe0f || (after !== -1 && isEmojiModifier(after)));
 }
-function faceHitKept(ch, at, text) {
+function faceHitKept(ch, at, text, crlf = false) {
     if (ch.length > 2)
         return true;
     const c = ch.charCodeAt(0);
+    if (crlf && c === 0x0d && ch.length === 1)
+        return text.charCodeAt(at + 1) === 0x0a;
     return ch.length === 1 && (c === 0x200d || c === 0x200c) && joinerKept(text, at, c === 0x200d);
 }
 const RGI_TAG_FLAG = '\\u{1F3F4}\\u{E0067}\\u{E0062}(?:\\u{E0065}\\u{E006E}\\u{E0067}|\\u{E0073}\\u{E0063}\\u{E0074}|\\u{E0077}\\u{E006C}\\u{E0073})\\u{E007F}';
@@ -4771,7 +4781,7 @@ const FOLD_RUN_KEEPING_BLANKS = new RegExp(`[^\\S${NAME_BLANKS}]+`, 'g');
 const EDGE_SPACE = /^ | $/g;
 const foldWhitespace = (s, keepBlanks = false) => keepBlanks ? s.replace(FOLD_RUN_KEEPING_BLANKS, ' ').replace(EDGE_SPACE, '') : s.replace(FOLD_RUN, ' ').trim();
 export function applyDisplayFace(text, face) {
-    const markAll = (s) => face.unsafe === null ? s : s.replace(face.unsafe, (ch, at, whole) => (faceHitKept(ch, at, whole) ? ch : markOf(ch, face.mark)));
+    const markAll = (s) => face.unsafe === null ? s : s.replace(face.unsafe, (ch, at, whole) => (faceHitKept(ch, at, whole, face.keepCrlf === true) ? ch : markOf(ch, face.mark)));
     const keepBlanks = face.keepBlanks === true;
     if (face.mark === 'space') {
         const marked = markAll(text);
@@ -4779,7 +4789,7 @@ export function applyDisplayFace(text, face) {
     }
     return markAll(face.fold ? foldWhitespace(text, keepBlanks) : text);
 }
-function markTracked(t, re, mark, ledger) {
+function markTracked(t, re, mark, ledger, crlf = false) {
     const parts = [];
     const ids = [];
     const keep = (a, b) => {
@@ -4792,7 +4802,7 @@ function markTracked(t, re, mark, ledger) {
         const at = hit.index ?? 0;
         const ch = hit[0];
         keep(cursor, at);
-        if (faceHitKept(ch, at, t.text))
+        if (faceHitKept(ch, at, t.text, crlf))
             keep(at, at + ch.length);
         else {
             const form = markOf(ch, mark);
@@ -4841,7 +4851,7 @@ function foldTracked(t, keepBlanks) {
 function faceTracked(t, face, ledger) {
     const keepBlanks = face.keepBlanks === true;
     const unsafe = face.unsafe;
-    const markAll = (x) => (unsafe === null ? x : markTracked(x, unsafe, face.mark, ledger));
+    const markAll = (x) => (unsafe === null ? x : markTracked(x, unsafe, face.mark, ledger, face.keepCrlf === true));
     if (face.mark === 'space') {
         const marked = markAll(t);
         return face.fold ? foldTracked(marked, keepBlanks) : marked;
@@ -4920,20 +4930,33 @@ function collectMarks(t, ledger) {
     }
     return out;
 }
-const PUBLIC_UNSAFE_BY_NETS = Object.freeze(Array.from({ length: 16 }, (_, i) => {
-    const controls = (i & 8) !== 0;
-    const bidi = (i & 4) !== 0;
-    const keep = (i & 2) !== 0;
-    const blanks = (i & 1) !== 0;
-    const members = `${controls ? `${keep ? C0_KEEP_LAYOUT : C0_ALL}${DEL_C1}${LONE_SURROGATE}` : ''}${bidi ? LINE_SEPARATORS : ''}${blanks ? NAME_BLANKS : ''}`;
+export const DISPLAY_DECISION_BODY = Object.freeze({
+    foldLines: false,
+    keepLayout: 'crlf',
+    blanks: 'fillers',
+    mark: 'escape',
+});
+const PUBLIC_UNSAFE_BY_NETS = Object.freeze(Array.from({ length: 24 }, (_, i) => {
+    const net = i % 3;
+    const rest = (i - net) / 3;
+    const controls = (rest & 4) !== 0;
+    const bidi = (rest & 2) !== 0;
+    const keep = (rest & 1) !== 0;
+    const blanks = net === 1 ? NAME_BLANKS : net === 2 ? NAME_FILLERS : '';
+    const members = `${controls ? `${keep ? C0_KEEP_LAYOUT : C0_ALL}${DEL_C1}${LONE_SURROGATE}` : ''}${bidi ? LINE_SEPARATORS : ''}${blanks}`;
     return unsafeClass(members, bidi);
 }));
+function blankNetOf(opts) {
+    return opts.blanks === true ? 1 : opts.blanks === 'fillers' ? 2 : 0;
+}
+const keepsLayout = (opts) => opts.keepLayout === true || opts.keepLayout === 'crlf';
 function publicFace(opts) {
     const fold = opts.foldLines !== false;
-    const keep = !fold && opts.keepLayout === true;
-    const blanks = opts.blanks === true;
-    const index = (opts.controls !== false ? 8 : 0) + (opts.bidi !== false ? 4 : 0) + (keep ? 2 : 0) + (blanks ? 1 : 0);
-    return { unsafe: PUBLIC_UNSAFE_BY_NETS[index] ?? null, fold, mark: opts.mark ?? 'escape', keepBlanks: blanks };
+    const keep = !fold && keepsLayout(opts);
+    const net = blankNetOf(opts);
+    const index = ((opts.controls !== false ? 4 : 0) + (opts.bidi !== false ? 2 : 0) + (keep ? 1 : 0)) * 3 + net;
+    const face = { unsafe: PUBLIC_UNSAFE_BY_NETS[index] ?? null, fold, mark: opts.mark ?? 'escape', keepBlanks: net === 1 };
+    return keep && opts.keepLayout === 'crlf' && opts.controls !== false ? { ...face, keepCrlf: true } : face;
 }
 export const ESCAPE_FACE = Object.freeze({ ...publicFace({ foldLines: false }) });
 export const LABEL_FACE = Object.freeze({ ...publicFace({}) });
@@ -5007,7 +5030,7 @@ function escapeSpacesFor(o, face) {
     if (o.controls !== false) {
         for (const c of [0x09, 0x0a, 0x0b, 0x0c, 0x0d])
             set.add(c);
-        if (o.keepLayout === true) {
+        if (keepsLayout(o)) {
             set.delete(0x09);
             set.delete(0x0a);
         }
@@ -5024,7 +5047,7 @@ function scanOptionsOf(o, face, queryByShape = false, wholeAddress = false) {
         queryByShape,
         wholeAddress,
         words: o.credentialWords !== false,
-        blanks: face.keepBlanks === true,
+        blanks: blankNetOf(o),
         fold: face.fold,
         face,
         escapeSpaces: escapeSpacesFor(o, face),
@@ -5321,7 +5344,7 @@ function queryPartPhases(key, value, relax) {
     return hit;
 }
 const UPLOAD_PROBE_PREFIX = 'https://q.invalid/?';
-const UPLOAD_SCAN_OPTIONS = Object.freeze({ urls: true, queryByShape: 'strict', wholeAddress: true, words: true, blanks: false, fold: false, face: null, escapeSpaces: null });
+const UPLOAD_SCAN_OPTIONS = Object.freeze({ urls: true, queryByShape: 'strict', wholeAddress: true, words: true, blanks: 0, fold: false, face: null, escapeSpaces: null });
 export function queryCarriesCredential(query) {
     if (typeof query !== 'string' || query.length === 0)
         return false;

package/dist/engineGenerationPort.d.ts

@@ -19,7 +19,9 @@ export interface EngineGenerationPort {
     endedMaterials: () => Promise<EndedGenerationMaterials>;
     replacementInFlight?: () => boolean;
     awaitEngineInstalled?: (signal: AbortSignal, maxMs: number) => Promise<boolean>;
+    endedBy?: (generation: number) => EngineGenerationEndFact | undefined;
 }
+export type EngineGenerationEndFact = 'own-supervision' | 'external-replacement';
 export type EngineGenerationReading = {
     readonly known: true;
     readonly generation: number;
@@ -42,11 +44,18 @@ export interface ApprovalFrameGenerationFacts {
 export declare function approvalFrameGenerationVerdict(facts: ApprovalFrameGenerationFacts): 'admit' | 'drop';
 export declare const REATTACH_AWAIT_NEXT_ENGINE_MS = 245000;
 export declare function unreachableForSettle(liveness: ReattachLivenessReading): boolean;
-export type EndedGenerationSettleStep = 'await-next-engine' | 'refresh-credentials' | 'credentials-rejected' | 'hand-over-terminal' | 'parked' | 'engine-stopped';
+export type EndedGenerationSettleStep = 'await-next-engine' | 'refresh-credentials' | 'credentials-rejected' | 'hand-over-terminal' | 'parked' | 'engine-stopped' | 'window-exhausted';
+export interface EndedGenerationWaitReading {
+    readonly replacing: boolean;
+    readonly installed: boolean;
+    readonly generationBefore?: EngineGenerationReading;
+    readonly generationAfter?: EngineGenerationReading;
+    readonly replacingAfter?: boolean;
+}
 export interface EndedGenerationSettleFacts {
     readonly liveness: ReattachLivenessReading;
     readonly canAwaitNextEngine: boolean;
-    readonly awaitedNextEngine: boolean;
+    readonly waits?: readonly EndedGenerationWaitReading[];
     readonly refreshedCredentials: boolean | null;
     readonly terminalReadable?: boolean;
 }

package/dist/engineGenerationPort.js

@@ -60,25 +60,79 @@ export function unreachableForSettle(liveness) {
         return false;
     }
 }
+const SETTLE_WAIT_ROUNDS_MAX = 8;
+function waitSnapshotsOf(raw) {
+    if (raw === undefined)
+        return [];
+    if (!Array.isArray(raw))
+        return null;
+    const out = [];
+    const n = raw.length;
+    for (let i = 0; i < n; i++) {
+        const item = raw[i];
+        if (typeof item !== 'object' || item === null)
+            return null;
+        const o = item;
+        const replacing = o.replacing;
+        const installed = o.installed;
+        const replacingAfter = o.replacingAfter;
+        if (typeof replacing !== 'boolean' || typeof installed !== 'boolean')
+            return null;
+        if (replacingAfter !== undefined && typeof replacingAfter !== 'boolean')
+            return null;
+        out.push({ replacing, installed, generationBefore: o.generationBefore, generationAfter: o.generationAfter, replacingAfter });
+    }
+    return out;
+}
 export function endedGenerationSettleStep(facts) {
     try {
         const liveness = facts.liveness;
-        if (typeof liveness !== 'object' || liveness === null || !REATTACH_RUN_STATES.includes(liveness.state))
-            return 'engine-stopped';
-        if (facts.canAwaitNextEngine === true && facts.awaitedNextEngine !== true && unreachableForSettle(liveness))
+        const canAwait = facts.canAwaitNextEngine;
+        const rawWaits = facts.waits;
+        const refreshed = facts.refreshedCredentials;
+        const terminalReadable = facts.terminalReadable;
+        if (typeof liveness !== 'object' || liveness === null)
+            return 'window-exhausted';
+        const state = liveness.state;
+        const notFound = liveness.notFound;
+        if (!REATTACH_RUN_STATES.includes(state))
+            return 'window-exhausted';
+        if (!(refreshed === null || typeof refreshed === 'boolean'))
+            return 'window-exhausted';
+        const waits = waitSnapshotsOf(rawWaits);
+        if (waits === null)
+            return 'window-exhausted';
+        const reading = notFound === true ? { state: state, notFound: true } : { state: state };
+        const unreachable = unreachableForSettle(reading);
+        const k = waits.length;
+        const w = k === 0 ? undefined : waits[k - 1];
+        const unstable = w !== undefined &&
+            w.installed &&
+            (engineGenerationEnded({ run: knownOrUnknown(w.generationBefore), current: knownOrUnknown(w.generationAfter) }) || w.replacingAfter === true);
+        if (refreshed === null && canAwait === true && (unreachable || state === 'unauthorized') && (k === 0 || (unstable && k < SETTLE_WAIT_ROUNDS_MAX)))
             return 'await-next-engine';
-        if (liveness.state === 'unauthorized')
-            return facts.refreshedCredentials === null ? 'refresh-credentials' : 'credentials-rejected';
-        if (liveness.state === 'done')
-            return facts.terminalReadable === false ? 'engine-stopped' : 'hand-over-terminal';
-        if (liveness.state === 'parked')
+        const answered401 = refreshed !== null || state === 'unauthorized';
+        const outcomeUnknown = w !== undefined && answered401 && ((!w.installed && w.replacing) || (unstable && k >= SETTLE_WAIT_ROUNDS_MAX));
+        if (state === 'unauthorized') {
+            if (refreshed === null)
+                return 'refresh-credentials';
+            return outcomeUnknown ? 'window-exhausted' : 'credentials-rejected';
+        }
+        if (outcomeUnknown && unreachable)
+            return 'window-exhausted';
+        if (state === 'done')
+            return terminalReadable === false ? 'engine-stopped' : 'hand-over-terminal';
+        if (state === 'parked')
             return 'parked';
         return 'engine-stopped';
     }
     catch {
-        return 'engine-stopped';
+        return 'window-exhausted';
     }
 }
+function knownOrUnknown(reading) {
+    return typeof reading === 'object' && reading !== null ? reading : UNKNOWN;
+}
 export const AWAIT_ENGINE_INSTALL_POLL_MS = 200;
 export function awaitNextEngineInstalled(signal, maxMs, deps) {
     const clock = typeof deps.now === 'function' ? deps.now : () => performance.now();

package/dist/engineHealthFacts.d.ts

@@ -14,10 +14,15 @@ export interface EngineHealthDrainingFacts {
     readonly since: number;
     readonly deadlineAt: number;
 }
+export interface EngineHealthLeaseFacts {
+    readonly lingerMs: number;
+    readonly tickMs: number;
+}
 export interface EngineHealthFacts {
     readonly center?: EngineHealthCenterFacts;
     readonly auth?: EngineHealthAuthFacts;
     readonly operator?: 'present' | 'absent';
     readonly draining?: EngineHealthDrainingFacts;
+    readonly engineLease?: EngineHealthLeaseFacts;
 }
 export declare function readEngineHealthFacts(health: object | null | undefined): EngineHealthFacts;

package/dist/engineHealthFacts.js

@@ -67,6 +67,15 @@ function drainingOf(health) {
         return undefined;
     return Object.freeze({ actionId, since, deadlineAt });
 }
+function leaseOf(raw) {
+    if (!isObject(raw))
+        return undefined;
+    const lingerMs = epochMs(readOwnDataValue(raw, 'lingerMs'));
+    const tickMs = epochMs(readOwnDataValue(raw, 'tickMs'));
+    if (lingerMs === undefined || tickMs === undefined)
+        return undefined;
+    return Object.freeze({ lingerMs, tickMs });
+}
 function guarded(read) {
     try {
         return read();
@@ -83,10 +92,12 @@ export function readEngineHealthFacts(health) {
     const operatorRaw = guarded(() => readOwnDataValue(health, 'operator'));
     const operator = operatorRaw === 'present' || operatorRaw === 'absent' ? operatorRaw : undefined;
     const draining = guarded(() => drainingOf(health));
+    const engineLease = guarded(() => leaseOf(readOwnDataValue(health, 'engineLease')));
     return Object.freeze({
         ...(center !== undefined ? { center } : {}),
         ...(auth !== undefined ? { auth } : {}),
         ...(operator !== undefined ? { operator } : {}),
         ...(draining !== undefined ? { draining } : {}),
+        ...(engineLease !== undefined ? { engineLease } : {}),
     });
 }

package/dist/eventLeg.d.ts

@@ -81,7 +81,7 @@ export interface EventLegPorts {
     readonly signal?: AbortSignal;
     readonly taps?: readonly EventLegTap[];
 }
-export type EventLegPortName = 'run.headerRunId' | 'run.onBound' | 'run.onRefused' | 'run.onTerminal' | 'run.isCurrent' | 'hitl.question' | 'hitl.elicitation' | 'hitl.toolApproval' | 'askBridge.respondToolApproval' | 'taps';
+export type EventLegPortName = 'run.headerRunId' | 'run.onBound' | 'run.onRefused' | 'run.onTerminal' | 'run.isCurrent' | 'hitl.question' | 'hitl.elicitation' | 'hitl.toolApproval' | 'askBridge.respondToolApproval' | 'askBridge.onBreak' | 'taps';
 export interface EventLegReport {
     readonly missingPorts: readonly EventLegPortName[];
     readonly portFaults: Readonly<Partial<Record<EventLegPortName, number>>>;

package/dist/eventLeg.js

@@ -3,11 +3,12 @@ import { bridgeAskUserQuestionGates } from './hitl/askGateWire.js';
 import { diagnoseSseIdleTear } from './sseIdleTriage.js';
 import { recordSubagentOwnerFromProgress } from './subagentContentStore.js';
 import { activeRunBusySignal } from './adapter/runStream.js';
-import { invokeHostCallbackIsolated } from './hostCallbackGuard.js';
+import { faultText, invokeHostCallbackIsolated } from './hostCallbackGuard.js';
 import { hostLog } from './host.js';
 import { guardedRead, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 import { settleEngineClosedApproval } from './hitl/approvalHolds.js';
 import { approvalCompleteParked } from './hitl/approvalCompleteParked.js';
+import { setBridgeRunHandleFallback } from './hitl/frameRouter.js';
 export const EVENT_LEG_KINDS = Object.freeze(['live', 'durable', 'continuation']);
 export const EVENT_LEG_TABLE = Object.freeze({
     live: Object.freeze({ stages: Object.freeze(['bindRun', 'stampOwner', 'hitlFrames', 'askBridge', 'idleTriage']), windowIsCurrent: true }),
@@ -108,7 +109,7 @@ export function composeEventLeg(source, leg, ports) {
             return port.call(runPorts) === true;
         }
         catch (e) {
-            fault('run.isCurrent', String(e));
+            fault('run.isCurrent', faultText(e));
             return false;
         }
     };
@@ -131,7 +132,7 @@ export function composeEventLeg(source, leg, ports) {
             return undefined;
         }
         catch (e) {
-            fault('run.headerRunId', String(e));
+            fault('run.headerRunId', faultText(e));
             return undefined;
         }
     };
@@ -232,13 +233,32 @@ export function composeEventLeg(source, leg, ports) {
             windowOpen = false;
             return streamOf(hostBridge.runsEvents(taskId, opts), 'continuation', taskId);
         };
+        const onBreak = (event) => {
+            if (!isCurrentNow())
+                return;
+            let port;
+            try {
+                port = hostBridge.onBreak;
+            }
+            catch (e) {
+                fault('askBridge.onBreak', faultText(e));
+                port = undefined;
+            }
+            if (typeof port !== 'function')
+                return;
+            if (!isCurrentNow() || ports.signal?.aborted === true)
+                return;
+            callPort('askBridge.onBreak', () => port.call(hostBridge, event));
+        };
         const deps = hostView(hostBridge, {
             runsEvents: () => runsEvents,
             approvalLane: () => {
                 const lane = hostBridge.approvalLane;
                 return typeof lane === 'object' && lane !== null ? hostView(lane, { windowIsCurrent: () => windowOpen }) : Object.freeze({ windowIsCurrent: windowOpen });
             },
+            onBreak: () => onBreak,
         });
+        setBridgeRunHandleFallback(deps, () => lastBound?.taskId);
         inner = bridgeAskUserQuestionGates(inner, deps, { ...(ports.signal !== undefined ? { signal: ports.signal } : {}), ...(legRunId !== undefined ? { taskId: legRunId } : {}) });
     }
     const baseUrl = ports.idleTriage?.baseUrl;

package/dist/generated/engineFactTables.d.ts

@@ -71,3 +71,4 @@ export interface CoreUserAttachmentSeat {
 export declare const CORE_USER_ATTACHMENT_SEAT: CoreUserAttachmentSeat;
 export declare const CORE_USER_ATTACHMENTS_MAX: number;
 export declare const CORE_USER_ATTACHMENT_LABEL_MAX: number;
+export declare const CORE_PRESENT_PLAN_TOOL_NAME: "ExitPlanMode";

package/dist/generated/engineFactTables.js

@@ -463,3 +463,4 @@ export const CORE_USER_ATTACHMENT_SEAT = Object.freeze({
 });
 export const CORE_USER_ATTACHMENTS_MAX = 20;
 export const CORE_USER_ATTACHMENT_LABEL_MAX = 4096;
+export const CORE_PRESENT_PLAN_TOOL_NAME = "ExitPlanMode";

package/dist/generated/sdkFactTables.d.ts

@@ -5,3 +5,5 @@ export declare const SDK_ASK_ROW_ENDING_CAUSES: readonly ["routing_failure_fail_
 export declare const SDK_RUN_DEATH_VERDICT_CODES: readonly ["run.stalled", "run.orphaned", "approval.expired"];
 export declare const SDK_APPROVAL_DECIDE_GATE_KINDS: readonly ["human", "irreversible_ask"];
 export declare const SDK_PLAN_REVIEW_GATE_KINDS: readonly ["plan_review"];
+export declare const SDK_PERMISSION_MODE_ADMISSION_FOLDS: readonly ["entry_floor", "disable_auto_mode"];
+export declare const SDK_PERMISSION_MODE_PERSIST_MISSES: readonly ["claim_released", "context_absent", "store_failed"];

package/dist/generated/sdkFactTables.js

@@ -39,3 +39,12 @@ export const SDK_APPROVAL_DECIDE_GATE_KINDS = Object.freeze([
 export const SDK_PLAN_REVIEW_GATE_KINDS = Object.freeze([
     "plan_review",
 ]);
+export const SDK_PERMISSION_MODE_ADMISSION_FOLDS = Object.freeze([
+    "entry_floor",
+    "disable_auto_mode",
+]);
+export const SDK_PERMISSION_MODE_PERSIST_MISSES = Object.freeze([
+    "claim_released",
+    "context_absent",
+    "store_failed",
+]);