@sema-agent/client-core 0.106.0 → 0.108.0

package/dist/engineNoticeCodes.js

@@ -3,20 +3,22 @@ import { displayUntrusted } from './displayUntrusted.js';
 import { CORE_ENGINE_NOTICE_CODES, CORE_MCP_INJECTION_DROP_REASONS, CORE_NOTICE_AUDIENCE, CORE_USER_INPUT_UNDRAINED_FAMILIES, } from './generated/engineNoticeTables.js';
 import { CORE_APPROVAL_REMEDY_KINDS, CORE_ASK_UNRESOLVABLE_CAUSES, CORE_DURABLE_MANDATE_SOURCES, CORE_PERMISSION_MODE_FOLD_REASONS, } from './generated/engineFactTables.js';
 import { msg, renderMessage } from './i18n/translate.js';
-import { readOwnDataValue } from './ownKey.js';
+import { ownDataField, readOwnDataValue } from './ownKey.js';
+import { slotReadOf } from './wireFailureShape.js';
 export const ENGINE_NOTICE_CODES = CORE_ENGINE_NOTICE_CODES;
 const CATALOG = new Set(ENGINE_NOTICE_CODES);
 function audienceRow(table, code) {
     return Object.hasOwn(table, code) ? table[code] : undefined;
 }
+const LEGACY_NOTICE_AUDIENCE = Object.freeze({ 'context.image_removed': 'user', 'session.records_skipped': 'user' });
 export function engineNoticeInCatalog(code) {
-    return typeof code === 'string' && CATALOG.has(code);
+    return typeof code === 'string' && (CATALOG.has(code) || Object.hasOwn(LEGACY_NOTICE_AUDIENCE, code));
 }
 export const ENGINE_NOTICE_AUDIENCE = CORE_NOTICE_AUDIENCE;
 export function noticeAudienceOf(code) {
     if (typeof code !== 'string')
         return 'operator';
-    return audienceRow(ENGINE_NOTICE_AUDIENCE, code) ?? 'operator';
+    return audienceRow(ENGINE_NOTICE_AUDIENCE, code) ?? audienceRow(LEGACY_NOTICE_AUDIENCE, code) ?? 'operator';
 }
 export const MCP_INJECTION_DROP_REASONS = CORE_MCP_INJECTION_DROP_REASONS;
 const DROP_REASONS = new Set(MCP_INJECTION_DROP_REASONS);
@@ -42,6 +44,46 @@ export function readMcpInjectionDrop(notice) {
     const field = typeof fieldIn === 'string' && fieldIn.length > 0 ? fieldIn : undefined;
     return { sessionId, server, reason, ...(field !== undefined ? { field } : {}) };
 }
+const LEG_SELF = Object.freeze({ kind: 'self' });
+const LEG_UNREADABLE = Object.freeze({ kind: 'unreadable' });
+function readNoticeLeg(detail) {
+    try {
+        const source = slotReadOf(detail, 'sourceSessionId');
+        const agent = slotReadOf(detail, 'agentId');
+        if (source.presence === 'absent')
+            return agent.presence === 'absent' ? LEG_SELF : LEG_UNREADABLE;
+        if (source.presence !== 'present' || typeof source.value !== 'string' || source.value.length === 0)
+            return LEG_UNREADABLE;
+        const agentId = agent.presence === 'present' && typeof agent.value === 'string' && agent.value.length > 0 ? agent.value : undefined;
+        return Object.freeze({ kind: 'delegated', sourceSessionId: source.value, ...(agentId !== undefined ? { agentId } : {}) });
+    }
+    catch {
+        return LEG_UNREADABLE;
+    }
+}
+export function noticeCallSessionOf(facts) {
+    const str = (o, key) => {
+        const s = slotReadOf(o, key);
+        return s.presence === 'present' && typeof s.value === 'string' && s.value.length > 0 ? s.value : undefined;
+    };
+    try {
+        if (typeof facts !== 'object' || facts === null)
+            return undefined;
+        const legSlot = slotReadOf(facts, 'leg');
+        const leg = legSlot.presence === 'present' ? legSlot.value : undefined;
+        if (typeof leg !== 'object' || leg === null)
+            return undefined;
+        const kind = str(leg, 'kind');
+        if (kind === 'delegated')
+            return str(leg, 'sourceSessionId');
+        if (kind !== 'self')
+            return undefined;
+        return str(facts, 'sessionId');
+    }
+    catch {
+        return undefined;
+    }
+}
 export const ASK_UNRESOLVABLE_CAUSES = CORE_ASK_UNRESOLVABLE_CAUSES;
 const ASK_UNRESOLVABLE_CAUSE_SET = new Set(ASK_UNRESOLVABLE_CAUSES);
 function optionalSeat(o, key) {
@@ -110,6 +152,9 @@ export function askUnresolvableRemedyContent(remedy, lang) {
     return renderMessage(msg('notice.askUnresolvable.remedy.permissionMode', { mode: displayUntrusted(r.value, { max: 64 }) }), lang);
 }
 export function readAskUnresolvable(notice) {
+    return guardedRead(notice, readAskUnresolvableOf);
+}
+function readAskUnresolvableOf(notice) {
     if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
         return undefined;
     const n = notice;
@@ -130,7 +175,7 @@ export function readAskUnresolvable(notice) {
     if (sessionId === undefined || toolName === undefined || toolCallId === undefined || cause === undefined) {
         return undefined;
     }
-    const parkIn = o.parkLaneExisted;
+    const parkIn = optionalSeat(o, 'parkLaneExisted');
     const remedyIn = optionalSeat(o, 'remedy');
     let remedies;
     try {
@@ -147,6 +192,7 @@ export function readAskUnresolvable(notice) {
         ...(typeof parkIn === 'boolean' ? { parkLaneExisted: parkIn } : {}),
         ...(typeof remedyIn === 'string' && remedyIn.length > 0 ? { remedy: remedyIn } : {}),
         ...(remedies !== undefined ? { remedies } : {}),
+        leg: readNoticeLeg(o),
     };
 }
 export const DURABLE_MANDATE_SOURCES = CORE_DURABLE_MANDATE_SOURCES;
@@ -432,6 +478,7 @@ function readClassifierUnavailableOf(notice) {
         disposition,
         ...(sessionId !== undefined ? { sessionId } : {}),
         ...(runId !== undefined ? { runId } : {}),
+        leg: readNoticeLeg(o),
     };
 }
 export const PERMISSION_MODE_FOLD_REASONS = CORE_PERMISSION_MODE_FOLD_REASONS;
@@ -494,6 +541,7 @@ function readAskReleasedByModeOf(notice) {
         firstToolCallId,
         ...(sessionId !== undefined ? { sessionId } : {}),
         ...(runId !== undefined ? { runId } : {}),
+        leg: readNoticeLeg(o),
     };
 }
 export function readReadDenyUnapplied(notice) {
@@ -520,7 +568,7 @@ function readReadDenyUnappliedOf(notice) {
         rowCount === undefined || sessionId === undefined || runId === undefined) {
         return undefined;
     }
-    return { mode, toolCallId, tiers, rows, rowCount, sessionId, runId };
+    return { mode, toolCallId, tiers, rows, rowCount, sessionId, runId, leg: readNoticeLeg(o) };
 }
 export function readToolTurnRepaired(notice) {
     return guardedRead(notice, readToolTurnRepairedOf);
@@ -536,6 +584,15 @@ function optionalOwnSeat(o, key) {
         return undefined;
     }
 }
+const UNREADABLE = Symbol('unreadable');
+function ownSeatOrUnreadable(o, key) {
+    try {
+        return ownSeat(o, key);
+    }
+    catch {
+        return UNREADABLE;
+    }
+}
 function readToolTurnRepairedOf(notice) {
     if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
         return undefined;
@@ -685,6 +742,9 @@ function optionalNonEmpty(o, key) {
         return undefined;
     }
 }
+function undrainedInputKindOf(v) {
+    return v === 'steer' || v === 'approval_feedback' ? v : undefined;
+}
 export function readUserInputUndrained(notice) {
     return guardedRead(notice, readUserInputUndrainedOf);
 }
@@ -716,7 +776,11 @@ function readUserInputUndrainedOf(notice) {
     const taskId = nonEmpty(optionalOwnSeat(o, 'taskId'));
     const sessionId = nonEmpty(optionalOwnSeat(o, 'sessionId'));
     const runId = nonEmpty(optionalOwnSeat(o, 'runId'));
-    const childSessionId = nonEmpty(optionalOwnSeat(o, 'childSessionId'));
+    const inputKind = kind === 'steer' ? undrainedInputKindOf(optionalOwnSeat(o, 'kind')) : undefined;
+    const childSeat = ownSeatOrUnreadable(o, 'childSessionId');
+    const childSessionId = nonEmpty(childSeat);
+    const childSeatProven = childSeat === undefined || childSessionId !== undefined;
+    const inputIds = childSeatProven ? exactInputIdList(optionalOwnSeat(o, 'inputIds'), count) : undefined;
     return {
         kind,
         count,
@@ -725,8 +789,97 @@ function readUserInputUndrainedOf(notice) {
         ...(sessionId !== undefined ? { sessionId } : {}),
         ...(runId !== undefined ? { runId } : {}),
         ...(childSessionId !== undefined ? { childSessionId } : {}),
+        ...(inputIds !== undefined ? { inputIds } : {}),
+        ...(inputKind !== undefined ? { inputKind } : {}),
     };
 }
+function exactInputIdList(v, count) {
+    try {
+        if (!Array.isArray(v) || ownDataField(v, 'length') !== count)
+            return undefined;
+        const out = [];
+        const seen = new Set();
+        for (let i = 0; i < count; i++) {
+            const d = Object.getOwnPropertyDescriptor(v, i);
+            const id = d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+            if (typeof id !== 'string' || id.length === 0 || seen.has(id))
+                return undefined;
+            seen.add(id);
+            out.push(id);
+        }
+        return Object.freeze(out);
+    }
+    catch {
+        return undefined;
+    }
+}
+function strictSeat(o, key) {
+    try {
+        return ownDataField(o, key);
+    }
+    catch {
+        return UNREADABLE;
+    }
+}
+function ledgerIdSet(ledger, key) {
+    const list = strictSeat(ledger, key);
+    if (list === undefined)
+        return new Set();
+    try {
+        if (!Array.isArray(list))
+            return UNREADABLE;
+        const out = new Set();
+        for (const k of Object.getOwnPropertyNames(list)) {
+            if (k === 'length' || String(Number(k) >>> 0) !== k || Number(k) === 4294967295)
+                continue;
+            const id = strictSeat(list, k);
+            if (id === UNREADABLE)
+                return UNREADABLE;
+            if (typeof id === 'string' && id.length > 0)
+                out.add(id);
+        }
+        return out;
+    }
+    catch {
+        return UNREADABLE;
+    }
+}
+export function undrainedInputsVerdict(facts, ledger) {
+    if (facts === null || typeof facts !== 'object')
+        return undefined;
+    try {
+        if (Array.isArray(facts))
+            return undefined;
+    }
+    catch {
+        return undefined;
+    }
+    const count = positiveInt(strictSeat(facts, 'count'));
+    if (count === undefined)
+        return undefined;
+    const nothing = Object.freeze({ redeliver: Object.freeze([]), askUser: Object.freeze([]), unattributed: count });
+    if (strictSeat(facts, 'cause') !== 'leg_end' || strictSeat(facts, 'childSessionId') !== undefined)
+        return nothing;
+    const ids = exactInputIdList(strictSeat(facts, 'inputIds'), count);
+    if (ids === undefined)
+        return nothing;
+    if (ledger !== null && ledger !== undefined && typeof ledger !== 'object')
+        return nothing;
+    const l = ledger ?? {};
+    const handed = ledgerIdSet(l, 'handed');
+    const redelivered = ledgerIdSet(l, 'redelivered');
+    if (handed === UNREADABLE || redelivered === UNREADABLE)
+        return nothing;
+    const redeliver = [];
+    const askUser = [];
+    for (const id of ids) {
+        if (redelivered.has(id))
+            askUser.push(id);
+        else if (handed.has(id))
+            redeliver.push(id);
+    }
+    return Object.freeze({ redeliver: Object.freeze(redeliver), askUser: Object.freeze(askUser), unattributed: count - redeliver.length - askUser.length });
+}
 const messagesPhrase = (n, noun) => `${n} ${noun}${n === 1 ? '' : 's'}`;
 const verbBe = (n) => (n === 1 ? 'was' : 'were');
 const itThem = (n) => (n === 1 ? 'it' : 'them');
@@ -748,11 +901,12 @@ const subagentFollowUpUndrainedSentence = (n) => `${messagesPhrase(n, 'follow-up
     `Send ${itThem(n)} again if you still need ${itThem(n)}.`;
 const unrecognizedUndrainedSentence = (n, kind) => `${kind === 'followUp' ? `${messagesPhrase(n, 'follow-up message')} you queued` : `${messagesPhrase(n, 'message')} you sent during a run`} may not have been used, ` +
     `and the reason was not reported in a form this version recognizes. Check the run's transcript before sending ${itThem(n)} again.`;
-export function userInputUndrainedNotice(facts) {
+export function userInputUndrainedNotice(facts, lang) {
     let kind;
     let count;
     let cause;
     let child;
+    let inputKind;
     try {
         if (facts === null || typeof facts !== 'object' || Array.isArray(facts))
             return undefined;
@@ -770,6 +924,12 @@ export function userInputUndrainedNotice(facts) {
         child = undefined;
     }
     const fromSubagent = typeof child === 'string' && child.length > 0;
+    try {
+        inputKind = Object.hasOwn(facts, 'inputKind') ? facts.inputKind : undefined;
+    }
+    catch {
+        inputKind = undefined;
+    }
     const n = positiveInt(count);
     if (n === undefined || !isUndrainedLane(kind))
         return undefined;
@@ -778,6 +938,9 @@ export function userInputUndrainedNotice(facts) {
             return fromSubagent ? subagentFollowUpUndrainedSentence(n) : followUpUndrainedSentence(n);
         return unrecognizedUndrainedSentence(n, kind);
     }
+    if (cause === 'leg_end' && inputKind === 'approval_feedback') {
+        return renderMessage(msg(n === 1 ? 'notice.userInputUndrained.approvalFeedback.one' : 'notice.userInputUndrained.approvalFeedback.other', { count: n }), lang);
+    }
     if (cause === 'leg_end' && fromSubagent)
         return subagentSteerUndrainedSentence(n);
     if (typeof cause === 'string' && Object.hasOwn(STEER_UNDRAINED_SENTENCE, cause)) {
@@ -904,18 +1067,27 @@ function readContextMediaRemovedOf(notice) {
     if (typeof notice !== 'object' || notice === null || Array.isArray(notice))
         return undefined;
     const n = notice;
-    if (ownSeat(n, 'code') !== 'context.media_removed')
+    const code = ownSeat(n, 'code');
+    if (code !== 'context.media_removed' && code !== 'context.image_removed')
         return undefined;
     const d = ownSeat(n, 'detail');
     if (typeof d !== 'object' || d === null || Array.isArray(d))
         return undefined;
     const o = d;
+    const count = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
+    if (code === 'context.image_removed') {
+        const legacyImages = ownSeat(o, 'images');
+        const legacySessionId = nonEmpty(ownSeat(o, 'sessionId'));
+        const legacyRunId = nonEmpty(ownSeat(o, 'runId'));
+        if (!count(legacyImages) || legacyImages < 1 || legacySessionId === undefined || legacyRunId === undefined)
+            return undefined;
+        return { reason: 'rejected_by_provider', images: legacyImages, documents: 0, sessionId: legacySessionId, runId: legacyRunId };
+    }
     const reason = nonEmpty(ownSeat(o, 'reason'));
     const images = ownSeat(o, 'images');
     const documents = ownSeat(o, 'documents');
     const sessionId = nonEmpty(ownSeat(o, 'sessionId'));
     const runId = nonEmpty(ownSeat(o, 'runId'));
-    const count = (v) => typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
     if (reason === undefined || !count(images) || !count(documents) || images + documents < 1 || sessionId === undefined || runId === undefined)
         return undefined;
     return { reason, images, documents, sessionId, runId };
@@ -1009,6 +1181,7 @@ export const ENGINE_NOTICE_FACT_READERS = Object.freeze({
     'route.stream_end_ignored': readStreamEndIgnored,
     'mcp.authorization_required': readMcpAuthorizationRequired,
     'context.media_removed': readContextMediaRemoved,
+    'context.image_removed': readContextMediaRemoved,
     'session.lineage_rerooted': readSessionLineageRerooted,
 });
 const _factReaderTablePin = true;

package/dist/engineTargetSeat.js

@@ -58,6 +58,7 @@ const REFUSAL_KEYS = {
     not_configured: 'config.engineTarget.notConfigured',
     not_signed_in: 'config.engineTarget.notSignedIn',
     probe_failed: 'config.engineTarget.probeFailed',
+    cloud_unreachable: 'config.engineTarget.cloudUnreachable',
     org_policy: 'config.engineTarget.orgPolicy',
     url_refused: 'config.engineTarget.urlRefused',
     login_failed: 'config.engineTarget.loginFailed',

package/dist/errorSupplementRoles.js

@@ -5,7 +5,8 @@ import { resumeReopenContent } from './hitl/suspendedReopen.js';
 import { idempotencyPayloadMismatchContent } from './engineErrorCodes.js';
 import { inheritEnvRefusalContent } from './inheritEnvWire.js';
 import { projectSeedRefusalContent } from './projectSeed.js';
-import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, } from './wireRefusalCopy.js';
+import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, sessionArchiveStampedContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, } from './wireRefusalCopy.js';
+import { catalogDefaultRefusalContent } from './model/catalogDefault.js';
 const ROLE_BY_READER = new Map([
     [corruptSessionContent, 'replacement'],
     [corruptStoredRowContent, 'replacement'],
@@ -19,9 +20,11 @@ const ROLE_BY_READER = new Map([
     [settingsPermissionBucketRefusalContent, 'replacement'],
     [fieldLimitRefusalContent, 'replacement'],
     [autonomyLaneRefusalContent, 'replacement'],
+    [sessionArchiveStampedContent, 'replacement'],
     [idempotencyPayloadMismatchContent, 'replacement'],
     [unsupportedRuleRefusalContent, 'replacement'],
     [projectSeedRefusalContent, 'replacement'],
+    [catalogDefaultRefusalContent, 'replacement'],
     [admissionWallRefusalContent, 'supplement'],
     [hostPostureRefusalContent, 'supplement'],
     [toolDeclarationRefusalContent, 'supplement'],

package/dist/eventLeg.js

@@ -21,7 +21,7 @@ function makeFrameStageDomains(domains) {
 }
 const FRAME_STAGE_DOMAINS = makeFrameStageDomains({
     bindRun: Object.freeze(['meta', 'done', 'failed']),
-    stampOwner: Object.freeze(['task_progress']),
+    stampOwner: Object.freeze(['task_progress', 'task_started']),
     hitlFrames: Object.freeze(['question', 'question_complete', 'elicitation', 'elicitation_complete', 'tool_approval', 'tool_approval_complete', 'approval_request', 'approval_complete', 'approval_revoke']),
 });
 const HITL_FRAMES_PROJECTED = Object.freeze(['human_input']);

package/dist/executionLaneCapability.js

@@ -2,6 +2,7 @@ import { capForDisplay } from './fleetTaskDesc.js';
 import { engineWireTargetBaseUrl } from './engineWireTarget.js';
 import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
+import { executionLaneWordIsNone } from './executionLaneWords.js';
 export function projectExecutionLaneCapability(caps) {
     try {
         if (caps === null || typeof caps !== 'object')
@@ -100,8 +101,8 @@ export function executionLaneDoctorDetail(reading) {
             if (reading.view.toolsOnThisHost) {
                 return `execution lane ${lane} — tools run on the engine host (same filesystem), so skills that have a directory of their own can carry a baseDir`;
             }
-            if (reading.view.provider === 'in-process') {
-                return 'no execution lane on this deployment (in-process) — the engine has no machine of its own for running tools here, so its built-in file and shell tools are not mounted and skill baseDir is never sent; whether a given run had tools is answered by its tool roster';
+            if (executionLaneWordIsNone(reading.view.provider)) {
+                return `no execution lane on this deployment (${lane}) — the engine has no machine of its own for running tools here, so its built-in file and shell tools are not mounted and skill baseDir is never sent; whether a given run had tools is answered by its tool roster`;
             }
             return `execution lane ${lane} — tools run on a different machine than the engine, so skill baseDir is never sent on this deployment`;
         }

package/dist/executionLaneWords.d.ts

@@ -0,0 +1 @@
+export declare function executionLaneWordIsNone(provider: string): boolean;

package/dist/executionLaneWords.js

@@ -0,0 +1,4 @@
+import { SETTINGS_NO_EXECUTION_TARGET_LANES } from './generated/settingsSchemaTables.js';
+export function executionLaneWordIsNone(provider) {
+    return SETTINGS_NO_EXECUTION_TARGET_LANES.some((w) => w === provider) || provider === 'in-process';
+}

package/dist/gateOutcome.d.ts

@@ -1,6 +1,6 @@
 import type { DeniedBy, Settlement } from '@sema-agent/sdk';
 import { type CcToolDenialKind } from './gateVocabulary.js';
-import { CORE_MODE_RELEASE_REASONS } from './generated/engineFactTables.js';
+import { CORE_MODE_RELEASE_REASONS, CORE_REFUSAL_ECHO_KINDS } from './generated/engineFactTables.js';
 export type GateDispositionView = {
     kind: 'allowed';
     classifier?: GateClassifierRoundView;
@@ -14,7 +14,16 @@ export type GateDispositionView = {
     deniedBy: DeniedBy | (string & {});
     cause?: string;
     extension?: string;
+    echoed?: readonly GateRefusalEchoView[];
 };
+export interface GateRefusalEchoView {
+    readonly kind: string;
+    readonly value: string;
+    readonly canonical?: string;
+}
+export declare const GATE_REFUSAL_ECHO_KIND_WORDS: readonly ["path", "command", "pattern"];
+export type GateRefusalEchoKindWord = (typeof CORE_REFUSAL_ECHO_KINDS)[number];
+export declare function isGateRefusalEchoKindWord(v: string): v is GateRefusalEchoKindWord;
 export interface GateClassifierRoundView {
     modelRequested: string;
     modelUsed: string;

package/dist/gateOutcome.js

@@ -1,10 +1,14 @@
 import { ccToolDenialKindForSettledBy, isCcToolDenialKind, isGateDeniedByWord } from './gateVocabulary.js';
 import { GATE_PARKED_ERROR_CODE } from './engineErrorCodes.js';
-import { CORE_MODE_RELEASE_REASONS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
+import { CORE_MODE_RELEASE_REASONS, CORE_REFUSAL_ECHO_KINDS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
 import { readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 function str(v) {
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
+export const GATE_REFUSAL_ECHO_KIND_WORDS = CORE_REFUSAL_ECHO_KINDS;
+export function isGateRefusalEchoKindWord(v) {
+    return typeof v === 'string' && CORE_REFUSAL_ECHO_KINDS.includes(v);
+}
 export const GATE_MODE_RELEASE_REASON_WORDS = CORE_MODE_RELEASE_REASONS;
 export function isGateModeReleaseReasonWord(v) {
     return typeof v === 'string' && CORE_MODE_RELEASE_REASONS.includes(v);
@@ -112,6 +116,46 @@ function nonEmptyStringList(v) {
     }
     return Object.freeze(out);
 }
+function ownDataOf(o, key) {
+    try {
+        const d = Object.getOwnPropertyDescriptor(o, key);
+        return d === undefined || !Object.hasOwn(d, 'value') ? { ok: false } : { ok: true, value: d.value };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+function readRefusalEchoes(raw) {
+    try {
+        if (!Array.isArray(raw))
+            return undefined;
+        const len = ownDataOf(raw, 'length');
+        if (!len.ok || typeof len.value !== 'number' || !Number.isInteger(len.value) || len.value <= 0)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < len.value; i += 1) {
+            const slot = ownDataOf(raw, String(i));
+            if (!slot.ok)
+                return undefined;
+            const e = slot.value;
+            if (typeof e !== 'object' || e === null || Array.isArray(e))
+                return undefined;
+            const kind = ownDataOf(e, 'kind');
+            const value = ownDataOf(e, 'value');
+            if (!kind.ok || typeof kind.value !== 'string' || kind.value.length === 0)
+                return undefined;
+            if (!value.ok || typeof value.value !== 'string' || value.value.length === 0)
+                return undefined;
+            const canonical = ownDataOf(e, 'canonical');
+            const canon = canonical.ok && typeof canonical.value === 'string' && canonical.value.length > 0 ? canonical.value : undefined;
+            out.push(Object.freeze({ kind: kind.value, value: value.value, ...(canon !== undefined ? { canonical: canon } : {}) }));
+        }
+        return Object.freeze(out);
+    }
+    catch {
+        return undefined;
+    }
+}
 function readModeRelease(raw) {
     if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
         return undefined;
@@ -198,6 +242,8 @@ function readGateRecord(frame) {
         const askClass = str(dr.askClass);
         const classes = nonEmptyStringList(dr.classes);
         const extension = str(dr.extension);
+        const echoedSeat = ownDataOf(dr, 'echoed');
+        const echoed = echoedSeat.ok ? readRefusalEchoes(echoedSeat.value) : undefined;
         disposition = {
             kind: 'denied',
             deniedBy,
@@ -207,6 +253,7 @@ function readGateRecord(frame) {
             ...(askClass !== undefined ? { askClass } : {}),
             ...(classes !== undefined ? { classes } : {}),
             ...(extension !== undefined ? { extension } : {}),
+            ...(echoed !== undefined ? { echoed } : {}),
         };
     }
     else {

package/dist/generated/engineFactTables.d.ts

@@ -73,3 +73,4 @@ export declare const CORE_USER_ATTACHMENTS_MAX: number;
 export declare const CORE_USER_ATTACHMENT_LABEL_MAX: number;
 export declare const CORE_PRESENT_PLAN_TOOL_NAME: "ExitPlanMode";
 export declare const CORE_WORKFLOW_AGENT_PARKED_ERROR_CODE: "workflow.agent_parked";
+export declare const CORE_REFUSAL_ECHO_KINDS: readonly ["path", "command", "pattern"];

package/dist/generated/engineFactTables.js

@@ -466,3 +466,8 @@ export const CORE_USER_ATTACHMENTS_MAX = 20;
 export const CORE_USER_ATTACHMENT_LABEL_MAX = 4096;
 export const CORE_PRESENT_PLAN_TOOL_NAME = "ExitPlanMode";
 export const CORE_WORKFLOW_AGENT_PARKED_ERROR_CODE = "workflow.agent_parked";
+export const CORE_REFUSAL_ECHO_KINDS = Object.freeze([
+    "path",
+    "command",
+    "pattern",
+]);

package/dist/generated/engineNoticeTables.js

@@ -51,6 +51,8 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "checkpoint.execution_outcome_unrecorded",
     "delegation.transcript_integrity",
     "delegation.ask_unresolvable",
+    "delegation.resume_lane_missing",
+    "delegation.delivery_discarded",
     "mcp.injection_dropped",
     "mcp.revocation_probe_failed",
     "mcp.server_redialed",
@@ -60,6 +62,8 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "workflow.agent_option_ignored",
     "memory.session_polluted",
     "memory.harvest_quarantined",
+    "memory.harvest_refused",
+    "memory.harvest_conflict",
     "memory.delegation_static_mark_waived",
     "memory.content_class_declared",
     "memory.hold_opened",
@@ -110,7 +114,6 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "fs.staging_file_swept",
     "session.lineage_rerooted",
     "instructions.source_changed",
-    "session.records_skipped",
     "memory.layer_locked_legacy",
     "server.model_unreachable",
     "permission.entry_mode_clamped",
@@ -168,6 +171,8 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "checkpoint.execution_outcome_unrecorded": "operator",
     "delegation.transcript_integrity": "operator",
     "delegation.ask_unresolvable": "user",
+    "delegation.resume_lane_missing": "operator",
+    "delegation.delivery_discarded": "operator",
     "mcp.injection_dropped": "user",
     "mcp.revocation_probe_failed": "operator",
     "mcp.server_redialed": "operator",
@@ -177,6 +182,8 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "workflow.agent_option_ignored": "operator",
     "memory.session_polluted": "user",
     "memory.harvest_quarantined": "user",
+    "memory.harvest_refused": "user",
+    "memory.harvest_conflict": "user",
     "memory.delegation_static_mark_waived": "user",
     "memory.content_class_declared": "operator",
     "memory.hold_opened": "user",
@@ -227,7 +234,6 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "fs.staging_file_swept": "operator",
     "session.lineage_rerooted": "user",
     "instructions.source_changed": "user",
-    "session.records_skipped": "user",
     "memory.layer_locked_legacy": "operator",
     "server.model_unreachable": "user",
     "permission.entry_mode_clamped": "user",
@@ -291,6 +297,8 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "checkpoint.execution_outcome_unrecorded": "engine",
     "delegation.transcript_integrity": "engine",
     "delegation.ask_unresolvable": "engine",
+    "delegation.resume_lane_missing": "engine",
+    "delegation.delivery_discarded": "engine",
     "mcp.injection_dropped": "engine",
     "mcp.revocation_probe_failed": "engine",
     "mcp.server_redialed": "engine",
@@ -300,6 +308,8 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "workflow.agent_option_ignored": "engine",
     "memory.session_polluted": "engine",
     "memory.harvest_quarantined": "engine",
+    "memory.harvest_refused": "engine",
+    "memory.harvest_conflict": "engine",
     "memory.delegation_static_mark_waived": "engine",
     "memory.content_class_declared": "engine",
     "memory.hold_opened": "engine",
@@ -350,7 +360,6 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "fs.staging_file_swept": "engine",
     "session.lineage_rerooted": "engine",
     "instructions.source_changed": "server",
-    "session.records_skipped": "server",
     "memory.layer_locked_legacy": "server",
     "server.model_unreachable": "server",
     "permission.entry_mode_clamped": "server",

package/dist/generated/settingsSchemaFns.d.ts

@@ -34,18 +34,20 @@ export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => ob
 export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
 export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
 export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
+export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
+export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
+export declare const SETTINGS_HAS_EDGE_WHITESPACE: (v: string) => boolean;
+export declare const SETTINGS_IS_RESERVED_MEMBER_NAME: (name: string) => boolean;
 export declare const SETTINGS_READ_REQUEST_MCP_TRANSPORT: (t: unknown) => RequestMcpTransportRead;
 export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<string, unknown>) => {
     principalHeader?: string;
     assertionHeader?: string;
 };
-export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_WIRE_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_USABLE_MCP_SERVER_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_CONTENT_ORIGIN_WORD: (v: unknown) => v is McpContentOrigin;
 export declare const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN: (v: unknown) => string;
-export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
 export declare const SETTINGS_URL_ALLOW_PATTERN_MATCHES: (url: string, pattern: string) => boolean;
 export declare const SETTINGS_IS_AT_LEAST: (layer: string, minTrust: string) => boolean;
 export declare const SETTINGS_MEMBER_ADMISSION: (category: string, member: string) => object;

package/dist/generated/settingsSchemaFns.js

@@ -4,6 +4,8 @@ import { SETTINGS_CALLER_TEXT_ECHO_CLOSURE } from './settingsSchemaCallerTextEch
 import { SETTINGS_PLAIN_JSON_OBJECT_CLOSURE } from './settingsSchemaPlainJsonObject.js';
 import { SETTINGS_OWN_KEY_READ_CLOSURE } from './settingsSchemaOwnKeyRead.js';
 import { SETTINGS_MCP_SERVER_NAME_CLOSURE } from './settingsSchemaMcpServerName.js';
+import { SETTINGS_WIRE_NAME_CLOSURE } from './settingsSchemaWireName.js';
+import { SETTINGS_RESERVED_MEMBER_NAME_CLOSURE } from './settingsSchemaReservedMemberName.js';
 import { SETTINGS_MCP_REQUEST_ENTRY_CLOSURE } from './settingsSchemaMcpRequestEntry.js';
 import { SETTINGS_MCP_CONTENT_ORIGINS } from './settingsSchemaTables.js';
 import { SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE } from './settingsSchemaUrlPattern.js';
@@ -167,16 +169,20 @@ const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
 export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
 export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
 export const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON = SETTINGS_MCP_SERVER_NAME.RESERVED_MCP_SERVER_NAME_REASON;
-const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON);
+const SETTINGS_WIRE_NAME = SETTINGS_WIRE_NAME_CLOSURE();
+export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_WIRE_NAME.isUsableWireName;
+export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_WIRE_NAME.TOOL_WIRE_NAME_MAX_CHARS;
+export const SETTINGS_HAS_EDGE_WHITESPACE = SETTINGS_WIRE_NAME.hasEdgeWhitespace;
+const SETTINGS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME_CLOSURE();
+export const SETTINGS_IS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME.isReservedMemberName;
+const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON, SETTINGS_TOOL_WIRE_NAME_MAX_CHARS, SETTINGS_HAS_EDGE_WHITESPACE, SETTINGS_IS_USABLE_WIRE_NAME, SETTINGS_IS_RESERVED_MEMBER_NAME);
 export const SETTINGS_READ_REQUEST_MCP_TRANSPORT = SETTINGS_MCP_REQUEST_ENTRY.readRequestMcpTransport;
 export const SETTINGS_READ_MCP_IDENTITY_HEADERS = SETTINGS_MCP_REQUEST_ENTRY.readMcpIdentityHeaders;
-export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableWireName;
 export const SETTINGS_DESCRIBE_BAD_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadWireName;
 export const SETTINGS_IS_USABLE_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableMcpServerName;
 export const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadMcpServerName;
 export const SETTINGS_IS_CONTENT_ORIGIN_WORD = SETTINGS_MCP_REQUEST_ENTRY.isContentOriginWord;
 export const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN = SETTINGS_MCP_REQUEST_ENTRY.describeBadContentOrigin;
-export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_MCP_REQUEST_ENTRY.TOOL_WIRE_NAME_MAX_CHARS;
 export const SETTINGS_URL_ALLOW_PATTERN_MATCHES = SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE();
 const SETTINGS_SAFETY_MERGE = SETTINGS_SAFETY_MERGE_CLOSURE(SETTINGS_MIN_TRUST_WORDS);
 export const SETTINGS_IS_AT_LEAST = SETTINGS_SAFETY_MERGE.isAtLeast;