@sema-agent/client-core 0.106.0 → 0.108.0

package/dist/pluginHooksWire.js

@@ -1,8 +1,8 @@
 import { displayUntrusted } from './displayUntrusted.js';
-import { appendOwnElement } from './ownKey.js';
+import { appendOwnElement, readOwnDataValue } from './ownKey.js';
 import { msg, renderMessage } from './i18n/translate.js';
 import { SETTINGS_ENGINE_OWNED_HOOK_EVENTS } from './generated/settingsSchemaTables.js';
-import { HOOK_SETTINGS_SOURCE_TEXT, hooksSalvageMaskOf, salvageSettingsHooksEntries, } from './settingsHooksSalvage.js';
+import { HOOK_SETTINGS_SOURCE_TEXT, hooksEntryUnreadKeys, hooksGroupAuthoredSource, hooksGroupUnreadKeys, hooksKeyCoordinateText, hooksSalvageMaskOf, salvageSettingsHooksEntries, } from './settingsHooksSalvage.js';
 export const ENGINE_FIRED_HOOK_EVENTS = SETTINGS_ENGINE_OWNED_HOOK_EVENTS;
 export const PLUGIN_HOOK_DISPOSITIONS = ['engine', 'shell', 'not_run'];
 export const PLUGIN_HOOK_REASONS = [
@@ -29,6 +29,8 @@ export const PLUGIN_HOOK_REASONS = [
     'scope_unsupported',
     'source_incomplete',
     'compaction_local_fallback',
+    'key_not_read',
+    'source_not_authored',
 ];
 export const PLUGIN_HOOK_EXCLUSION_REASONS = [
     'workspace_untrusted',
@@ -38,7 +40,7 @@ export const PLUGIN_HOOK_EXCLUSION_REASONS = [
     'managed_plugins_only',
     'prompt_not_user_authored',
 ];
-export const SETTINGS_HOOK_DROP_REASONS = ['exec_form_unsupported', 'mcp_tool_unsupported'];
+export const SETTINGS_HOOK_DROP_REASONS = ['exec_form_unsupported', 'mcp_tool_unsupported', 'key_not_read', 'source_not_authored'];
 export function hooksWirePlanShapeOf(v) {
     try {
         if (typeof v !== 'object' || v === null || Array.isArray(v))
@@ -257,7 +259,9 @@ export function decidePluginHooks(input) {
                     unreadable++;
                     return;
                 }
-                ;
+                const authored = hooksGroupAuthoredSource(group);
+                const groupUnread = authored === 'unreadable' ? undefined : hooksGroupUnreadKeys(event, group);
+                const groupSourceAuthored = authored === 'unreadable' || (authored === 'present' && groupUnread !== undefined);
                 group.hooks.forEach((entry, hookIndex) => {
                     const key = { pluginId, pluginName, event, groupIndex, hookIndex };
                     if (input.exclusion !== undefined) {
@@ -317,6 +321,15 @@ export function decidePluginHooks(input) {
                         appendOwnElement(verdicts, { ...key, disposition: ex.disposition, reason: ex.reason });
                         return;
                     }
+                    const entryUnread = isRecord(entry) ? hooksEntryUnreadKeys(event, entry, input.readerNotRead) : undefined;
+                    if (groupSourceAuthored && (authored === 'unreadable' || entryUnread !== undefined)) {
+                        appendOwnElement(verdicts, { ...key, ...fallback(event, entryType, 'source_not_authored') });
+                        return;
+                    }
+                    if (entryUnread !== undefined && ((groupUnread?.length ?? 0) > 0 || entryUnread.length > 0)) {
+                        appendOwnElement(verdicts, { ...key, ...fallback(event, entryType, 'key_not_read') });
+                        return;
+                    }
                     const plugin = { name: src.name, root: src.root, dataDir: src.dataDir };
                     const options = projectedOptions(src.options);
                     if (options !== undefined)
@@ -454,7 +467,18 @@ function carriesArgs(entry) {
     }
     return true;
 }
-export function filterSettingsHookGroups(source, event, groups, execFormCapable, shellRunsType, judge, mask) {
+function unreadKeyPathsOf(event, groupIndex, hookIndex, groupUnread, entryUnread) {
+    if (entryUnread === undefined)
+        return Object.freeze([]);
+    const out = [];
+    for (const k of groupUnread)
+        appendOwnElement(out, Object.freeze(['hooks', event, groupIndex, k]));
+    for (const k of entryUnread)
+        if (k !== 'plugin')
+            appendOwnElement(out, Object.freeze(['hooks', event, groupIndex, 'hooks', hookIndex, k]));
+    return Object.freeze(out);
+}
+export function filterSettingsHookGroups(source, event, groups, execFormCapable, shellRunsType, judge, readerNotRead, mask) {
     const drops = [];
     const verdicts = [];
     const excluded = [];
@@ -470,20 +494,35 @@ export function filterSettingsHookGroups(source, event, groups, execFormCapable,
         }
         const kept = [];
         let changed = false;
+        const authored = hooksGroupAuthoredSource(group);
+        const groupUnread = authored === 'unreadable' ? undefined : hooksGroupUnreadKeys(event, group);
+        const groupSourceAuthored = authored === 'unreadable' || (authored === 'present' && groupUnread !== undefined);
         group.hooks.forEach((entry, hookIndex) => {
             if (mask !== undefined && mask.entryDropped(event, groupIndex, hookIndex)) {
                 changed = true;
                 return;
             }
-            const reason = !isRecord(entry)
+            const earlier = !isRecord(entry)
                 ? undefined
                 : entry.type === 'mcp_tool'
                     ? 'mcp_tool_unsupported'
                     : entry.type === 'command' && carriesArgs(entry) && !execFormCapable
                         ? 'exec_form_unsupported'
                         : undefined;
+            const entryUnread = earlier === undefined && isRecord(entry) ? hooksEntryUnreadKeys(event, entry, readerNotRead) : undefined;
+            const sourceNotAuthored = earlier === undefined && groupSourceAuthored && (authored === 'unreadable' || entryUnread !== undefined);
+            const unreadKeys = earlier === undefined && !sourceNotAuthored ? unreadKeyPathsOf(event, groupIndex, hookIndex, groupUnread ?? [], entryUnread) : [];
+            const reason = earlier ?? (sourceNotAuthored ? 'source_not_authored' : unreadKeys.length > 0 ? 'key_not_read' : undefined);
             if (reason !== undefined) {
-                appendOwnElement(drops, { source, event, groupIndex, hookIndex, reason, notRun: engineEvent && !shellRunsType(isRecord(entry) && typeof entry.type === 'string' ? entry.type : undefined) });
+                appendOwnElement(drops, {
+                    source,
+                    event,
+                    groupIndex,
+                    hookIndex,
+                    reason,
+                    notRun: engineEvent && !shellRunsType(isRecord(entry) && typeof entry.type === 'string' ? entry.type : undefined),
+                    ...(reason === 'key_not_read' ? { unreadKeys } : {}),
+                });
                 changed = true;
                 return;
             }
@@ -510,6 +549,8 @@ export function filterSettingsHookGroups(source, event, groups, execFormCapable,
             }
             appendOwnElement(kept, entry);
         });
+        if (((groupUnread?.length ?? 0) > 0 || groupSourceAuthored) && kept.length === 0)
+            changed = true;
         if (!changed)
             appendOwnElement(out, group);
         else if (kept.length > 0)
@@ -832,10 +873,14 @@ const REASON_TEXT = {
     scope_unsupported: 'hooks registered for a skill, an agent or by the host application are not sent to the engine, and this client does not run this event',
     source_incomplete: 'the plugin was reported without its id, name, root folder or data folder',
     compaction_local_fallback: renderMessage(msg('config.hooks.plan.reason.compactionLocalFallback')),
+    key_not_read: renderMessage(msg('config.hooks.plan.reason.keyNotRead')),
+    source_not_authored: renderMessage(msg('config.hooks.plan.reason.sourceNotAuthored')),
 };
 const DROP_TEXT = {
     exec_form_unsupported: 'exec-form hooks (with "args") are sent to the engine only once it reports support for them',
     mcp_tool_unsupported: 'MCP tool hooks are not supported by the engine',
+    key_not_read: REASON_TEXT.key_not_read,
+    source_not_authored: REASON_TEXT.source_not_authored,
 };
 const SOURCE_TEXT = HOOK_SETTINGS_SOURCE_TEXT;
 export function pluginHookReasonText(reason) {
@@ -898,8 +943,52 @@ function capNoticeLabel(s) {
     }
     return `${s.slice(0, end)}…`;
 }
+const KEY_NOT_READ_SHOWN = 3;
+function unreadPathsOfRow(d) {
+    const raw = d.unreadKeys;
+    if (!Array.isArray(raw))
+        return [];
+    return raw.filter((p) => Array.isArray(p) && p.length > 0 && p.every((x) => typeof x === 'string' || typeof x === 'number'));
+}
+function namedPathsOfRow(d) {
+    switch (d.reason) {
+        case 'key_not_read':
+            return unreadPathsOfRow(d);
+        case 'source_not_authored':
+            return typeof d.event === 'string' && Number.isInteger(d.groupIndex) && d.groupIndex >= 0 ? [['hooks', d.event, d.groupIndex, 'source']] : [];
+        case 'exec_form_unsupported':
+        case 'mcp_tool_unsupported':
+            return [];
+    }
+}
+function namedCoordinatesText(coordinates) {
+    const shown = coordinates.slice(0, KEY_NOT_READ_SHOWN).join(', ');
+    return coordinates.length > KEY_NOT_READ_SHOWN ? renderMessage(msg('config.hooks.plan.keyNotRead.more', { shown, rest: coordinates.length - KEY_NOT_READ_SHOWN })) : shown;
+}
+function keyNotReadLine(source, row) {
+    const events = row.events.map((e) => noticeLabel(e)).join(', ');
+    const hooks = `${row.count} ${events} ${row.count === 1 ? 'hook' : 'hooks'}`;
+    const coordinates = namedCoordinatesText(row.coordinates);
+    const line = renderMessage(msg(row.coordinates.length === 1 ? 'config.hooks.plan.keyNotRead.oneKey' : 'config.hooks.plan.keyNotRead.manyKeys', { layer: SOURCE_TEXT[source], hooks, coordinates }));
+    return row.onFailure ? renderMessage(msg('config.hooks.plan.keyNotRead.withOnFailure', { line })) : line;
+}
+function sourceNotAuthoredLine(source, row) {
+    const events = row.events.map((e) => noticeLabel(e)).join(', ');
+    const hooks = `${row.count} ${events} ${row.count === 1 ? 'hook' : 'hooks'}`;
+    const coordinates = namedCoordinatesText(row.coordinates);
+    return renderMessage(msg(row.coordinates.length === 1 ? 'config.hooks.plan.sourceNotAuthored.oneKey' : 'config.hooks.plan.sourceNotAuthored.manyKeys', { layer: SOURCE_TEXT[source], hooks, coordinates }));
+}
 export function hooksNotRunNotice(plan) {
     const lines = [];
+    let closedBy;
+    try {
+        closedBy = isRecord(plan) ? readOwnDataValue(plan, 'closedBy') : undefined;
+    }
+    catch {
+        closedBy = undefined;
+    }
+    if (closedBy === 'policy_disable_all')
+        appendOwnElement(lines, renderMessage(msg('config.hooks.plan.disableAllHooks')));
     const byPlugin = new Map();
     for (const v of plan.verdicts) {
         if (v.disposition !== 'not_run')
@@ -916,9 +1005,27 @@ export function hooksNotRunNotice(plan) {
         appendOwnElement(lines, `Plugin "${noticeLabel(row.name) || '(unnamed)'}": ${events} ${row.count === 1 ? 'hook' : 'hooks'} will not run — ${pluginHookReasonText(row.reason)}.`);
     }
     const bySource = new Map();
+    const namedBySource = new Map();
     for (const d of plan.settingsDropped) {
         if (!d.notRun)
             continue;
+        const named = d.reason === 'key_not_read' || d.reason === 'source_not_authored' ? namedPathsOfRow(d) : [];
+        if (named.length > 0 && (d.reason === 'key_not_read' || d.reason === 'source_not_authored')) {
+            const nk = `${d.source}\u0000${d.reason}`;
+            const row = namedBySource.get(nk) ?? { source: d.source, reason: d.reason, events: [], count: 0, coordinates: [], onFailure: false };
+            if (!row.events.includes(d.event))
+                appendOwnElement(row.events, d.event);
+            row.count++;
+            for (const path of named) {
+                const c = hooksKeyCoordinateText(path);
+                if (!row.coordinates.includes(c))
+                    appendOwnElement(row.coordinates, c);
+                if (d.reason === 'key_not_read' && path[path.length - 1] === 'onFailure')
+                    row.onFailure = true;
+            }
+            namedBySource.set(nk, row);
+            continue;
+        }
         const k = `${d.source}\u0000${d.reason}`;
         const row = bySource.get(k) ?? { source: d.source, reason: d.reason, events: [], count: 0 };
         if (!row.events.includes(d.event))
@@ -930,6 +1037,8 @@ export function hooksNotRunNotice(plan) {
         const events = row.events.map((e) => noticeLabel(e)).join(', ');
         appendOwnElement(lines, `${SOURCE_TEXT[row.source]}: ${events} ${row.count === 1 ? 'hook' : 'hooks'} will not run — ${settingsHookDropText(row.reason)}.`);
     }
+    for (const row of namedBySource.values())
+        appendOwnElement(lines, row.reason === 'key_not_read' ? keyNotReadLine(row.source, row) : sourceNotAuthoredLine(row.source, row));
     const settingsVerdicts = plan.settingsVerdicts;
     const byVerdict = new Map();
     for (const raw of Array.isArray(settingsVerdicts) ? settingsVerdicts : []) {

package/dist/queuedDelivery.d.ts

@@ -15,6 +15,7 @@ export interface QueueEntry {
     readonly intentKey?: string;
     readonly screening?: 'pending' | 'result';
     readonly upsExecutor?: 'shell' | 'engine' | 'unknown' | 'none';
+    readonly _sema_task_notification?: {} | null | undefined;
 }
 export type QueuedHoldReason = 'barrier' | 'share_incomplete' | 'not_steerable' | 'in_flight' | 'attempted' | 'no_run';
 export interface QueuedDeliveryPlan {

package/dist/queuedDelivery.js

@@ -3,6 +3,7 @@ import { imageVisionOf } from './liveModelCatalog.js';
 import { userPromptSubmitExecutorOf } from './pluginHooksWire.js';
 import { observedUserAttachmentSeat } from './userAttachmentSeat.js';
 import { guardedRead, readOwnDataValue } from './ownKey.js';
+import { taskNotificationOf } from './notifications.js';
 const own = (o, key) => guardedRead(() => readOwnDataValue(o, key));
 const str = (o, key) => {
     const v = own(o, key);
@@ -43,6 +44,8 @@ export function batchCompatible(head, follower, plan) {
             return false;
         if (typeof head !== 'object' || head === null || typeof follower !== 'object' || follower === null)
             return false;
+        if (carriesCompletionIdentity(head) || carriesCompletionIdentity(follower))
+            return false;
         const executor = userPromptSubmitExecutorOf(plan);
         if (executor === 'engine' || executor === 'unknown')
             return false;
@@ -84,6 +87,15 @@ export function batchCompatible(head, follower, plan) {
         return false;
     }
 }
+function carriesCompletionIdentity(e) {
+    const slot = peek(e, '_sema_task_notification');
+    if (slot === undefined || slot === null)
+        return false;
+    if (slot === UNREADABLE)
+        return true;
+    const fact = taskNotificationOf({ _sema_task_notification: slot });
+    return fact === undefined || fact.completionId !== undefined;
+}
 function upsExecutorWordOk(v) {
     return v === undefined || v === 'shell' || v === 'engine' || v === 'unknown' || v === 'none';
 }

package/dist/resultFrameKeys.js

@@ -1,4 +1,4 @@
-import { readFrameStringKey, readFrameTrueMark } from './ownKey.js';
+import { guardedRead, readFrameStringKey, readFrameTrueMark, readOwnDataValue } from './ownKey.js';
 export function resultErrorCodeOf(frame) {
     return readFrameStringKey(frame, '_sema_error_code');
 }
@@ -12,5 +12,7 @@ export function resultParkFailedReasonOf(frame) {
     return readFrameStringKey(frame, '_sema_park_failed_reason');
 }
 export function resultErrorCodeInTextOf(frame) {
-    return readFrameTrueMark(frame, '_sema_error_code_in_text') ? true : undefined;
+    if (!readFrameTrueMark(frame, '_sema_error_code_in_text'))
+        return undefined;
+    return guardedRead(() => (Array.isArray(readOwnDataValue(frame, 'errors')) ? true : undefined));
 }

package/dist/resumeRefusalCopy.js

@@ -2,21 +2,27 @@ import { msg, renderMessage } from './i18n/translate.js';
 import { readBlockedBy, readErrorNumber, readErrorString, readThrownSlot } from './wireFailureShape.js';
 import { guardedRead, ownDataField, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 import { CORE_RESUME_STARTUP_CAUSES } from './generated/engineFactTables.js';
-import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, RESUME_SESSION_NOT_FOUND, REQUEST_FIELD_CONFLICT, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED, isRefusedParkCode, refusalSaysStillPending, refusalRetriableReading, } from './engineErrorCodes.js';
+import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_PRINCIPAL_MISMATCH, RESUME_COMPOSITION_MISMATCH, RESUME_PARENT_CONSTRAINT_MISSING, RESUME_PARENT_CONSTRAINT_MISMATCH, RESUME_CONSTRAINT_UNPROJECTABLE, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, RESUME_SESSION_NOT_FOUND, REQUEST_FIELD_CONFLICT, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED, isRefusedParkCode, refusalSaysStillPending, refusalRetriableReading, } from './engineErrorCodes.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 import { engineVersionTier } from './supportFloor.js';
 import { resumeRetryLaterFromError } from './wireErrorTriage.js';
-export const RESUME_REFUSAL_CODES = Object.freeze([
-    RESUME_PLACEMENT_MISMATCH,
-    RESUME_PREFLIGHT_REJECTED,
-]);
+const REFUSAL_COPY_KEYS = Object.freeze({
+    [RESUME_PLACEMENT_MISMATCH]: 'resume.refusal.placementMismatch',
+    [RESUME_PREFLIGHT_REJECTED]: null,
+    [RESUME_PRINCIPAL_MISMATCH]: 'resume.refusal.principalMismatch',
+    [RESUME_COMPOSITION_MISMATCH]: 'resume.refusal.compositionMismatch',
+    [RESUME_PARENT_CONSTRAINT_MISSING]: 'resume.refusal.parentConstraintMissing',
+    [RESUME_PARENT_CONSTRAINT_MISMATCH]: 'resume.refusal.parentConstraintMismatch',
+    [RESUME_CONSTRAINT_UNPROJECTABLE]: 'resume.refusal.constraintUnprojectable',
+});
+export const RESUME_REFUSAL_CODES = Object.freeze(Object.keys(REFUSAL_COPY_KEYS));
 export function resumeRefusalFromError(err) {
     if (typeof err !== 'object' || err === null)
         return null;
     const code = guardedRead(() => ownDataField(err, 'errorCode'));
     if (typeof code !== 'string' || !RESUME_REFUSAL_CODES.includes(code))
         return null;
-    if (code === RESUME_PLACEMENT_MISMATCH) {
+    if (code !== RESUME_PREFLIGHT_REJECTED) {
         return { code, waitable: false };
     }
     const timed = resumeRetryLaterFromError(err);
@@ -29,8 +35,9 @@ export function resumeRefusalFromError(err) {
     };
 }
 export function resumeRefusalContent(detail, lang) {
-    if (detail.code === RESUME_PLACEMENT_MISMATCH)
-        return renderMessage(msg('resume.refusal.placementMismatch'), lang);
+    const copyKey = typeof detail.code === 'string' && Object.hasOwn(REFUSAL_COPY_KEYS, detail.code) ? REFUSAL_COPY_KEYS[detail.code] : null;
+    if (copyKey !== null && copyKey !== undefined)
+        return renderMessage(msg(copyKey, { safe: msg('resume.refusal.untouched') }), lang);
     return renderMessage(msg(detail.waitable ? 'resume.refusal.preflightWaitable' : 'resume.refusal.preflightNoWait'), lang);
 }
 export function resumePolicyBlockFromError(err) {

package/dist/runPermissionModeSwitch.d.ts

@@ -2,7 +2,7 @@ import type { UiLanguage } from './env/uiLanguage.js';
 import { type PermissionModeReceiptView } from './adapter/downstream/wiringManifestView.js';
 import { SDK_PERMISSION_MODE_ADMISSION_FOLDS, SDK_PERMISSION_MODE_PERSIST_MISSES } from './generated/sdkFactTables.js';
 import { type PermissionModeWriteReading } from './permissionModeWriteCapability.js';
-import type { PermissionMode } from './permissionWireCaps.js';
+import { type PermissionMode } from './permissionWireCaps.js';
 export type { PermissionModeReceiptView };
 type AdmissionFold = (typeof SDK_PERMISSION_MODE_ADMISSION_FOLDS)[number];
 type PersistMiss = (typeof SDK_PERMISSION_MODE_PERSIST_MISSES)[number];
@@ -40,6 +40,7 @@ export type RunPermissionModeSwitchOutcome = {
     readonly status?: number;
 } | {
     readonly kind: 'unavailable';
+    readonly code?: string;
 };
 export interface RunPermissionModeSwitchRuns {
     setPermissionMode(taskId: string, mode: PermissionMode, opts?: {

package/dist/runPermissionModeSwitch.js

@@ -3,8 +3,9 @@ import { readPermissionModeReceiptSegment } from './adapter/downstream/wiringMan
 import { displayUntrusted } from './displayUntrusted.js';
 import { SDK_PERMISSION_MODE_ADMISSION_FOLDS, SDK_PERMISSION_MODE_PERSIST_MISSES } from './generated/sdkFactTables.js';
 import { msg, renderMessage } from './i18n/translate.js';
-import { ownDataField } from './ownKey.js';
+import { ownDataField, readOwnDataValue } from './ownKey.js';
 import { permissionModeWriteAvailable } from './permissionModeWriteCapability.js';
+import { permissionModeTitle } from './permissionWireCaps.js';
 import { isDisplayableWireCode } from './wireFailureShape.js';
 export const PERMISSION_MODE_SWITCH_RESULT_KEYS = Object.freeze(['taskId', 'sessionId', 'status', 'permissionMode', 'admission', 'persisted', 'persistMiss']);
 const NOT_RUNNING_CODE = 'steering.not_running';
@@ -19,7 +20,9 @@ function guardedSlot(o, key) {
         return undefined;
     }
 }
-const unavailable = () => Object.freeze({ kind: 'unavailable' });
+const unavailable = (code) => Object.freeze(code !== undefined ? { kind: 'unavailable', code } : { kind: 'unavailable' });
+const RUN_STORE_REQUIRED_CODE = 'capability.run_store_required';
+const CHECKPOINT_STORE_REQUIRED_CODE = 'capability.checkpoint_store_required';
 const unreadableAnswer = () => Object.freeze({ kind: 'unconfirmed', why: 'unreadable-answer' });
 function admissionOf(raw) {
     if (raw === null || typeof raw !== 'object' || Array.isArray(raw))
@@ -72,7 +75,7 @@ function switchOutcomeOf(taskId, sent, body) {
 function failureOutcomeOf(e) {
     const v = atMostOnceVerdictOf(e);
     if (v.status === 501)
-        return unavailable();
+        return unavailable(v.code);
     if (v.delivery === 'rejected' && v.status !== undefined) {
         if (v.status === 404)
             return Object.freeze({ kind: 'not-found' });
@@ -110,7 +113,8 @@ export async function setRunPermissionMode(runs, taskId, mode, opts = {}) {
 export function runPermissionModeSwitchLine(outcome, lang) {
     switch (outcome.kind) {
         case 'switched': {
-            const mode = displayUntrusted(outcome.permissionMode.effective, { max: 64 });
+            const effective = outcome.permissionMode.effective;
+            const mode = permissionModeTitle(effective) ?? displayUntrusted(effective, { max: 64 });
             const reason = outcome.admission !== undefined
                 ? msg(outcome.admission.foldedBy === 'entry_floor' ? 'session.permissionModeSwitch.reason.entryFloor' : 'session.permissionModeSwitch.reason.disableAutoMode')
                 : outcome.permissionMode.foldedBy !== undefined
@@ -129,7 +133,13 @@ export function runPermissionModeSwitchLine(outcome, lang) {
                 : renderMessage(msg('session.permissionModeSwitch.refused', { status: String(outcome.status) }), lang);
         case 'unconfirmed':
             return renderMessage(msg('session.permissionModeSwitch.unconfirmed'), lang);
-        case 'unavailable':
-            return renderMessage(msg('session.permissionModeSwitch.unavailable'), lang);
+        case 'unavailable': {
+            const code = readOwnDataValue(outcome, 'code');
+            return renderMessage(msg(code === RUN_STORE_REQUIRED_CODE
+                ? 'session.permissionModeSwitch.unavailableRunStore'
+                : code === CHECKPOINT_STORE_REQUIRED_CODE
+                    ? 'session.permissionModeSwitch.unavailableCheckpointStore'
+                    : 'session.permissionModeSwitch.unavailable'), lang);
+        }
     }
 }

package/dist/sdkWireTransit.d.ts

@@ -2,4 +2,4 @@ export { AgentClient } from '@sema-agent/sdk';
 export { isApprovalRequestFrameV1, isApprovalRevokeFrameV1 } from '@sema-agent/sdk';
 export { pushSessionBundle, pullSessionBundle, importSessionBundle, APIError } from '@sema-agent/sdk';
 export { APPROVAL_DECIDE_GATE_KINDS, PLAN_REVIEW_GATE_KINDS } from '@sema-agent/sdk';
-export type { TaskRequest, SessionPermissionRules, SemaSettings, SkillSpec, AgentEvent, RunReceipt, CancelAck, RunRecord, ToolApprovalRespondAck, FleetTaskRow, FleetWorkflowRow, ApprovalCard, ApprovalRequestFrame, ApprovalRiskAxes, AskDecisionAck, AskDecisionBody, PolicyInfo, CcImportLayer, CcImportPrepareResult, CcImportRedeemResult, CcImportSettingsLayer, CcImportSkippedRule, PersistedRule, RuleRevokeRequest, RuleRevokeResult, ApprovalDecideGateKind, PlanReviewGateKind, } from '@sema-agent/sdk';
+export type { TaskRequest, SessionPermissionRules, SemaSettings, SkillSpec, AgentEvent, RunReceipt, CancelAck, RunRecord, ToolApprovalRespondAck, FleetTaskRow, FleetWorkflowRow, ApprovalCard, ApprovalRequestFrame, ApprovalRiskAxes, AskDecisionAck, AskDecisionBody, PolicyInfo, CcImportLayer, CcImportPrepareResult, CcImportSettingsLayer, CcImportSkippedRule, PersistedRule, RuleRevokeRequest, RuleRevokeResult, ApprovalDecideGateKind, PlanReviewGateKind, } from '@sema-agent/sdk';

package/dist/seatContract.d.ts

@@ -15,12 +15,13 @@ import type { McpPanelView } from "./mcpPanel.js";
 import type { McpToolToggleKey } from "./mcpToolToggles.js";
 import { type ThinkingLatchEvent, type ThinkingLatchRowWord } from "./thinkingLatchWords.js";
 import type { SessionRowPatchFields, SessionRowUnreadable } from "./sessionRowTag.js";
-import { type SessionEngineView } from "./sessionEngine.js";
+import { type SessionEngineKind, type SessionEngineView } from "./sessionEngine.js";
 export interface SeatValidationFailure {
     reason: string;
     field?: string;
 }
 export type SeatValidation = true | SeatValidationFailure;
+export declare const isSecretKeyName: (k: string) => boolean;
 export type EipcMethodKind = "invoke" | "event";
 export interface EipcMethodSpec {
     kind: EipcMethodKind;
@@ -200,7 +201,7 @@ export type SeatStreamReading = {
 };
 export declare function seatStreamDeltaMessage(event: SeatStreamDeltaSource, ids: SeatStreamDeltaIds): SeatStreamEventMessage | undefined;
 export declare function readSeatStreamDelta(message: object): SeatStreamReading;
-export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly"];
+export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions"];
 export type SeatCapabilityName = (typeof SEAT_CAPABILITY_NAMES)[number];
 export interface SeatCapabilitiesState {
     pickFolder?: boolean;
@@ -214,6 +215,7 @@ export interface SeatCapabilitiesState {
     thinkingLatch?: boolean;
     computerUseSwitch?: boolean;
     engineModeDefaultOnly?: boolean;
+    seatActions?: boolean;
 }
 export type SeatCapabilityReading = {
     readonly kind: "reported";
@@ -253,6 +255,7 @@ export interface StartSessionOptions {
     title?: string;
     cwd?: string;
     excludeTools?: string[];
+    engine?: SessionEngineKind;
 }
 export type PermissionModeIntent = PermissionMode;
 export declare const PERMISSION_MODE_INTENTS: readonly PermissionModeIntent[];
@@ -311,6 +314,9 @@ export declare const ATTACHMENT_UPLOAD_REQUEST_KEYS: readonly ["name", "mimeType
 export interface SessionScopedRequest {
     sessionId: string;
 }
+export interface SeatResourceScope {
+    sessionId: string;
+}
 export interface SessionRowPatchRequest extends SessionRowPatchFields {
     sessionId: string;
 }
@@ -398,7 +404,7 @@ export interface SeatDeviceRevokeRequest {
 }
 export declare const checkSeatDeviceRebindRequest: (v: unknown) => SeatValidation;
 export declare const checkSeatDeviceRevokeRequest: (v: unknown) => SeatValidation;
-export declare const ENGINE_TARGET_REFUSALS: readonly ["busy", "switching", "not_configured", "not_signed_in", "probe_failed", "org_policy", "url_refused", "login_failed", "storage_unavailable", "no_local_runtime", "input"];
+export declare const ENGINE_TARGET_REFUSALS: readonly ["busy", "switching", "not_configured", "not_signed_in", "probe_failed", "cloud_unreachable", "org_policy", "url_refused", "login_failed", "storage_unavailable", "no_local_runtime", "input"];
 export type EngineTargetRefusal = (typeof ENGINE_TARGET_REFUSALS)[number];
 export declare const CLOUD_LOGIN_FAILURES: readonly ["access_denied", "expired_token", "invalid_grant", "cancelled", "transport", "refused", "no_tokens", "other"];
 export type CloudLoginFailure = (typeof CLOUD_LOGIN_FAILURES)[number];
@@ -645,6 +651,32 @@ export type SetComputerUsePlan = {
     readonly reason: Exclude<ComputerUseRefusalReason, "write-failed">;
 };
 export declare function planSetComputerUse(request: {} | null | undefined, lockedByEnv: boolean): SetComputerUsePlan;
+export declare const SEAT_ACTION_NAMES: readonly ["new-project", "prefill-composer"];
+export type SeatActionName = (typeof SEAT_ACTION_NAMES)[number];
+export type SeatAction = {
+    readonly action: "new-project";
+} | {
+    readonly action: "prefill-composer";
+    readonly text: string;
+    readonly cwd?: string;
+};
+export interface SeatActionsClaim {
+    readonly actions: readonly string[];
+}
+export declare const checkSeatAction: (v: unknown) => SeatValidation;
+export type SeatActionReading = {
+    readonly kind: "action";
+    readonly action: SeatAction;
+} | {
+    readonly kind: "unknown";
+    readonly name: string;
+} | {
+    readonly kind: "malformed";
+    readonly reason: string;
+};
+export declare function readSeatAction(ev: unknown): SeatActionReading;
+export declare const checkSeatActionsClaim: (v: unknown) => SeatValidation;
+export declare function claimedSeatActionsOf(claim: unknown): readonly SeatActionName[];
 export interface LocalSessionsApi {
     start(opts?: StartSessionOptions): Promise<LocalSessionRecord>;
     sendMessage(req: SendMessageRequest): Promise<SendMessageAck>;
@@ -658,8 +690,8 @@ export interface LocalSessionsApi {
     setModel(sessionId: string, model: string): Promise<boolean>;
     getTranscript(sessionId: string): Promise<GetTranscriptResult>;
     searchSessions(query: string): Promise<SessionSearchEnvelope>;
-    uploadAttachment(req: AttachmentUploadRequest): Promise<AttachmentUploadReceipt>;
-    listModels(): Promise<LiveModelCatalog>;
+    uploadAttachment(req: AttachmentUploadRequest, scope?: SeatResourceScope): Promise<AttachmentUploadReceipt>;
+    listModels(scope?: SeatResourceScope): Promise<LiveModelCatalog>;
     applyModelConfig(req: ApplyModelConfigRequest): Promise<ApplyModelConfigResult>;
     pickFolder(): Promise<string | null>;
     listRecentFolders(): Promise<RecentFoldersResult>;
@@ -685,8 +717,10 @@ export interface LocalSessionsApi {
     setThinkingLatch(req: SetThinkingLatchRequest): Promise<OkAck>;
     getComputerUse(): Promise<ComputerUseState>;
     setComputerUse(req: SetComputerUseRequest): Promise<SetComputerUseResult>;
+    claimSeatActions(req: SeatActionsClaim): Promise<OkAck>;
     onEvent(cb: (ev: LocalSessionEvent) => void): () => void;
     onToolPermissionRequest(cb: (req: ToolPermissionRequest) => void): () => void;
+    onSeatAction(cb: (action: SeatAction) => void): () => void;
     sessionsStateStore: EipcStoreClient<SessionsState>;
     focusedSessionStateStore: EipcStoreClient<FocusedSessionState>;
     settingsStateStore: EipcStoreClient<SettingsState>;
@@ -728,11 +762,13 @@ export declare const checkSessionRowPatchRequest: (v: unknown) => SeatValidation
 export declare function isSessionRowPatchRequest(v: unknown): v is SessionRowPatchRequest;
 export declare const checkSetThinkingLatchRequest: (v: unknown) => SeatValidation;
 export declare function isSetThinkingLatchRequest(v: unknown): v is SetThinkingLatchRequest;
+export declare const checkStartSessionOptions: (v: unknown) => SeatValidation;
+export declare const checkSeatResourceScope: (v: unknown) => SeatValidation;
 export declare function isSendMessageAck(v: unknown): v is SendMessageAck;
 export declare const LOCAL_SESSIONS_SPEC: EipcServiceSpec;
-export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "readSessionMcpPanel", "listMcpToolToggles", "setMcpToolToggle", "setThinkingLatch", "getComputerUse", "setComputerUse", "onEvent", "onToolPermissionRequest"];
+export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "readSessionMcpPanel", "listMcpToolToggles", "setMcpToolToggle", "setThinkingLatch", "getComputerUse", "setComputerUse", "claimSeatActions", "onEvent", "onToolPermissionRequest", "onSeatAction"];
 export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore", "seatCapabilitiesStateStore", "engineTargetStateStore"];
-export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest"];
+export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest", "onSeatAction"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "error", "errorCategory", "code", "session", "userMessageUuid", "requestId", "outcome", "parked", "chrome", "_sema_turnFailure", "subagentContent"];
 export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs", "governanceForced", "delegation", "mandated", "mandate", "origin", "ruleOffersAbsence", "askClass", "classes", "sessionRow"];
 export declare const LOCAL_SESSION_RECORD_KEYS: readonly ["sessionId", "engineSessionId", "model", "title", "cwd", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked", "pinned", "rowTag", "unreadable", "thinkingLatch", "engine", "executionLane"];
@@ -780,7 +816,7 @@ export declare const SEAT_SEND_MESSAGE_KEY_ORIGINS: {
     };
 };
 export declare const TOOL_PERMISSION_DECISION_KEYS: readonly ["sessionId", "requestId", "decision", "answer", "updatedInput", "remember"];
-export declare const START_SESSION_OPTION_KEYS: readonly ["model", "title", "cwd", "excludeTools"];
+export declare const START_SESSION_OPTION_KEYS: readonly ["model", "title", "cwd", "excludeTools", "engine"];
 export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     readonly LocalSessionRecord: {
         readonly guard: "isLocalSessionRecord";
@@ -854,6 +890,9 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
         }, {
             readonly key: "modelPlane";
             readonly why: "诊断面(0.106.0 CC-1156;这台引擎服务的是哪张模型表 / 最近一份目录候选的结局),三态读法归 modelPlaneOf(含坏形 unreadable、表外词整位不给);出站门为它拒掉整份目录 = 选单为一行诊断整个消失。";
+        }, {
+            readonly key: "aliases";
+            readonly why: "受理面(0.108.0 CC-944;除行名之外引擎还认的模型词),读法归 modelAcceptanceOf(缺席 = 更早的服务端,照旧判;在场而坏形 ⇒ 没找到行的词读 catalog_unreadable);出站门为它拒掉整份目录 = 选单为一份受理数据整个消失。";
         }];
     };
     readonly SendMessageRequest: {
@@ -874,6 +913,21 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
         readonly validated: readonly ["sessionId", "event"];
         readonly unchecked: readonly [];
     };
+    readonly StartSessionOptions: {
+        readonly check: (v: unknown) => SeatValidation;
+        readonly validated: readonly ["model", "title", "cwd", "excludeTools", "engine"];
+        readonly unchecked: readonly [];
+    };
+    readonly SeatResourceScope: {
+        readonly check: (v: unknown) => SeatValidation;
+        readonly validated: readonly ["sessionId"];
+        readonly unchecked: readonly [];
+    };
+    readonly SeatActionsClaim: {
+        readonly check: (v: unknown) => SeatValidation;
+        readonly validated: readonly ["actions"];
+        readonly unchecked: readonly [];
+    };
     readonly ApplyModelConfigResult: {
         readonly check: (v: unknown) => SeatValidation;
         readonly validated: readonly ["ok", "requiresRestart", "reason", "detail"];
@@ -927,7 +981,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
     readonly SeatCapabilitiesState: {
         readonly check: (v: unknown) => SeatValidation;
-        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly"];
+        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions"];
         readonly unchecked: readonly [];
     };
     readonly RecentFoldersResult: {
@@ -967,7 +1021,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
 };
 export declare const SEAT_VALIDATOR_COVERAGE_EXEMPT: readonly [...{
-    label: "DeviceListOutcome" | "DeviceSessionBindingOutcome" | "DeviceRebindOutcome" | "DeviceEnrollTokenOutcome" | "DeviceRevokeOutcome" | "SeatDeviceRebindRequest" | "SeatDeviceRevokeRequest" | "EngineTargetState" | "EngineTargetResult" | "CloudLoginStart" | "CloudLoginCancelAck" | "CloudConnectResult" | "CloudLoginRequest" | "CloudEngineConnectRequest" | "CloudEngineConfigureRequest" | "OnboardProvidersResult" | "OnboardProbeResult" | "OnboardApplyResult" | "OnboardEntryRequest" | "OnboardApplyRequest" | "McpToolTogglesResult" | "McpToolToggleKey" | "ComputerUseState" | "SetComputerUseResult" | "SetComputerUseRequest";
+    label: "DeviceListOutcome" | "DeviceSessionBindingOutcome" | "DeviceRebindOutcome" | "DeviceEnrollTokenOutcome" | "DeviceRevokeOutcome" | "SeatDeviceRebindRequest" | "SeatDeviceRevokeRequest" | "EngineTargetState" | "EngineTargetResult" | "CloudLoginStart" | "CloudLoginCancelAck" | "CloudConnectResult" | "CloudLoginRequest" | "CloudEngineConnectRequest" | "CloudEngineConfigureRequest" | "OnboardProvidersResult" | "OnboardProbeResult" | "OnboardApplyResult" | "OnboardEntryRequest" | "OnboardApplyRequest" | "McpToolTogglesResult" | "McpToolToggleKey" | "ComputerUseState" | "SetComputerUseResult" | "SetComputerUseRequest" | "SeatAction";
     check: (v: unknown) => SeatValidation;
     why: string;
 }[], {