@sema-agent/client-core 0.107.0 → 0.108.0

package/dist/generated/settingsSchemaFns.d.ts

@@ -34,18 +34,20 @@ export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => ob
 export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
 export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
 export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
+export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
+export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
+export declare const SETTINGS_HAS_EDGE_WHITESPACE: (v: string) => boolean;
+export declare const SETTINGS_IS_RESERVED_MEMBER_NAME: (name: string) => boolean;
 export declare const SETTINGS_READ_REQUEST_MCP_TRANSPORT: (t: unknown) => RequestMcpTransportRead;
 export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<string, unknown>) => {
     principalHeader?: string;
     assertionHeader?: string;
 };
-export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_WIRE_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_USABLE_MCP_SERVER_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_CONTENT_ORIGIN_WORD: (v: unknown) => v is McpContentOrigin;
 export declare const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN: (v: unknown) => string;
-export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
 export declare const SETTINGS_URL_ALLOW_PATTERN_MATCHES: (url: string, pattern: string) => boolean;
 export declare const SETTINGS_IS_AT_LEAST: (layer: string, minTrust: string) => boolean;
 export declare const SETTINGS_MEMBER_ADMISSION: (category: string, member: string) => object;

package/dist/generated/settingsSchemaFns.js

@@ -4,6 +4,8 @@ import { SETTINGS_CALLER_TEXT_ECHO_CLOSURE } from './settingsSchemaCallerTextEch
 import { SETTINGS_PLAIN_JSON_OBJECT_CLOSURE } from './settingsSchemaPlainJsonObject.js';
 import { SETTINGS_OWN_KEY_READ_CLOSURE } from './settingsSchemaOwnKeyRead.js';
 import { SETTINGS_MCP_SERVER_NAME_CLOSURE } from './settingsSchemaMcpServerName.js';
+import { SETTINGS_WIRE_NAME_CLOSURE } from './settingsSchemaWireName.js';
+import { SETTINGS_RESERVED_MEMBER_NAME_CLOSURE } from './settingsSchemaReservedMemberName.js';
 import { SETTINGS_MCP_REQUEST_ENTRY_CLOSURE } from './settingsSchemaMcpRequestEntry.js';
 import { SETTINGS_MCP_CONTENT_ORIGINS } from './settingsSchemaTables.js';
 import { SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE } from './settingsSchemaUrlPattern.js';
@@ -167,16 +169,20 @@ const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
 export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
 export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
 export const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON = SETTINGS_MCP_SERVER_NAME.RESERVED_MCP_SERVER_NAME_REASON;
-const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON);
+const SETTINGS_WIRE_NAME = SETTINGS_WIRE_NAME_CLOSURE();
+export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_WIRE_NAME.isUsableWireName;
+export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_WIRE_NAME.TOOL_WIRE_NAME_MAX_CHARS;
+export const SETTINGS_HAS_EDGE_WHITESPACE = SETTINGS_WIRE_NAME.hasEdgeWhitespace;
+const SETTINGS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME_CLOSURE();
+export const SETTINGS_IS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME.isReservedMemberName;
+const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON, SETTINGS_TOOL_WIRE_NAME_MAX_CHARS, SETTINGS_HAS_EDGE_WHITESPACE, SETTINGS_IS_USABLE_WIRE_NAME, SETTINGS_IS_RESERVED_MEMBER_NAME);
 export const SETTINGS_READ_REQUEST_MCP_TRANSPORT = SETTINGS_MCP_REQUEST_ENTRY.readRequestMcpTransport;
 export const SETTINGS_READ_MCP_IDENTITY_HEADERS = SETTINGS_MCP_REQUEST_ENTRY.readMcpIdentityHeaders;
-export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableWireName;
 export const SETTINGS_DESCRIBE_BAD_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadWireName;
 export const SETTINGS_IS_USABLE_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableMcpServerName;
 export const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadMcpServerName;
 export const SETTINGS_IS_CONTENT_ORIGIN_WORD = SETTINGS_MCP_REQUEST_ENTRY.isContentOriginWord;
 export const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN = SETTINGS_MCP_REQUEST_ENTRY.describeBadContentOrigin;
-export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_MCP_REQUEST_ENTRY.TOOL_WIRE_NAME_MAX_CHARS;
 export const SETTINGS_URL_ALLOW_PATTERN_MATCHES = SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE();
 const SETTINGS_SAFETY_MERGE = SETTINGS_SAFETY_MERGE_CLOSURE(SETTINGS_MIN_TRUST_WORDS);
 export const SETTINGS_IS_AT_LEAST = SETTINGS_SAFETY_MERGE.isAtLeast;

package/dist/generated/settingsSchemaMcpRequestEntry.d.ts

@@ -1 +1 @@
-export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers") => any;
+export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers", TOOL_WIRE_NAME_MAX_CHARS: 128, hasEdgeWhitespace: (v: string) => boolean, isUsableWireName: (v: unknown) => v is string, isReservedMemberName: (name: string) => boolean) => any;

package/dist/generated/settingsSchemaMcpRequestEntry.js

@@ -1,4 +1,4 @@
-export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWithHttpScheme, echoCallerText, UNINSPECTABLE, captureStringArray, dataDescriptor, inspect, ownFieldsOf, ownValueOf, readKey, isJsonArray, jsonShapeOf, isReservedMcpServerName, RESERVED_MCP_SERVER_NAME_REASON) => {
+export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWithHttpScheme, echoCallerText, UNINSPECTABLE, captureStringArray, dataDescriptor, inspect, ownFieldsOf, ownValueOf, readKey, isJsonArray, jsonShapeOf, isReservedMcpServerName, RESERVED_MCP_SERVER_NAME_REASON, TOOL_WIRE_NAME_MAX_CHARS, hasEdgeWhitespace, isUsableWireName, isReservedMemberName) => {
     function describeKindWord(v) {
         const shape = jsonShapeOf(v);
         switch (shape) {
@@ -46,11 +46,6 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
     function quotedCallerText(text) {
         return `"${echoCallerText(text)}"`;
     }
-    const TOOL_WIRE_NAME_MAX_CHARS = 128;
-    const hasEdgeWhitespace = (v) => v.trim() !== v;
-    function isUsableWireName(v) {
-        return typeof v === "string" && v.length > 0 && v.length <= TOOL_WIRE_NAME_MAX_CHARS && !hasEdgeWhitespace(v);
-    }
     function describeBadWireName(v) {
         if (typeof v !== "string")
             return describeKindWord(v);
@@ -202,8 +197,7 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
         }
         return { ok: true, value: { kind: "other", value: kind.value } };
     }
-    const PLAIN_STRING_RECORD_RESERVED_MEMBER = "__proto__";
-    const RESERVED_MEMBER_FAULT = `no member of a declaration may be named "${PLAIN_STRING_RECORD_RESERVED_MEMBER}"`;
+    const reservedMemberFault = (name) => `no member of a declaration may be named "${name}"`;
     function notPlainDetail(shape, v) {
         switch (shape) {
             case "null":
@@ -233,28 +227,25 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
             return { ok: false, fault: "not_plain_record", detail: `got ${namesRead.sentence}` };
         const names = namesRead.value;
         const members = Object.create(null);
-        let reservedMember = false;
+        const reservedMembers = names.filter(isReservedMemberName);
         for (const name of names) {
             const read = readKey(v, name);
             const unreadable = read.presence === "unreadable";
             const value = read.presence === "own" ? read.value : undefined;
             if (unreadable || typeof value !== "string") {
                 const valueFault = unreadable ? "could not be read (its getter threw)" : `must be a string — got ${describeValueShape(value)}`;
-                const reserved = name === PLAIN_STRING_RECORD_RESERVED_MEMBER;
-                const fault = reserved ? "member_name_reserved" : "member_not_string";
+                const fault = isReservedMemberName(name) ? "member_name_reserved" : "member_not_string";
                 return {
                     ok: false,
                     fault,
                     member: echoCallerText(name),
-                    detail: `its member "${echoCallerText(name)}" ${reserved ? `is not allowed (${RESERVED_MEMBER_FAULT}) and its value ${valueFault}` : valueFault}`,
+                    detail: `its member "${echoCallerText(name)}" ${isReservedMemberName(name) ? `is not allowed (${reservedMemberFault(name)}) and its value ${valueFault}` : valueFault}`,
                 };
             }
-            if (name === PLAIN_STRING_RECORD_RESERVED_MEMBER)
-                reservedMember = true;
-            else
+            if (!isReservedMemberName(name))
                 Object.defineProperty(members, name, dataDescriptor(value));
         }
-        return { ok: true, record: { ...members }, reservedMember };
+        return { ok: true, record: { ...members }, reservedMembers };
     }
     const issuesOf = (...candidates) => candidates.filter((c) => c !== undefined);
     function readTransportRecord(path, raw) {
@@ -269,8 +260,8 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
         }
         return {
             record: read.record,
-            issues: read.reservedMember ? [{ path: `${path}.${PLAIN_STRING_RECORD_RESERVED_MEMBER}`, reason: RESERVED_MEMBER_FAULT, member: PLAIN_STRING_RECORD_RESERVED_MEMBER, fault: "member_name_reserved" }] : [],
+            issues: read.reservedMembers.map((name) => ({ path: `${path}.${name}`, reason: reservedMemberFault(name), member: name, fault: "member_name_reserved" })),
         };
     }
-    return { readRequestMcpTransport, readMcpIdentityHeaders, isUsableWireName, describeBadWireName, isUsableMcpServerName, describeBadMcpServerName, isContentOriginWord, describeBadContentOrigin, TOOL_WIRE_NAME_MAX_CHARS };
+    return { readRequestMcpTransport, readMcpIdentityHeaders, describeBadWireName, isUsableMcpServerName, describeBadMcpServerName, isContentOriginWord, describeBadContentOrigin };
 };

package/dist/generated/settingsSchemaReservedMemberName.d.ts

@@ -0,0 +1 @@
+export declare const SETTINGS_RESERVED_MEMBER_NAME_CLOSURE: () => any;

package/dist/generated/settingsSchemaReservedMemberName.js

@@ -0,0 +1,7 @@
+export const SETTINGS_RESERVED_MEMBER_NAME_CLOSURE = () => {
+    const RESERVED_MEMBER_NAMES = ["__proto__", "constructor", "prototype"];
+    function isReservedMemberName(name) {
+        return RESERVED_MEMBER_NAMES.includes(name);
+    }
+    return { isReservedMemberName };
+};

package/dist/generated/settingsSchemaTables.d.ts

@@ -13,3 +13,5 @@ export declare const SETTINGS_UI_LANGUAGE_VALUES: readonly ["en", "zh"];
 export declare const SETTINGS_MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"];
 export declare const SETTINGS_MIN_TRUST_WORDS: readonly ["local", "session", "project", "global", "managed", "task"];
 export declare const SETTINGS_WORKSPACE_TRUST_STATES: readonly ["accepted", "declined", "no_trust_step"];
+export declare const SETTINGS_MODEL_PLANE_REFUSAL_CODES: readonly ["config.default_model_missing", "config.model_refused_name_minted", "config.model_route_endpoint_missing", "config.gateway_fallback_without_primary", "config.catalog_replaces_env_models"];
+export declare const SETTINGS_NO_EXECUTION_TARGET_LANES: readonly ["none"];

package/dist/generated/settingsSchemaTables.js

@@ -63,3 +63,13 @@ export const SETTINGS_WORKSPACE_TRUST_STATES = Object.freeze([
     "declined",
     "no_trust_step",
 ]);
+export const SETTINGS_MODEL_PLANE_REFUSAL_CODES = Object.freeze([
+    "config.default_model_missing",
+    "config.model_refused_name_minted",
+    "config.model_route_endpoint_missing",
+    "config.gateway_fallback_without_primary",
+    "config.catalog_replaces_env_models",
+]);
+export const SETTINGS_NO_EXECUTION_TARGET_LANES = Object.freeze([
+    "none",
+]);

package/dist/generated/settingsSchemaWireName.d.ts

@@ -0,0 +1 @@
+export declare const SETTINGS_WIRE_NAME_CLOSURE: () => any;

package/dist/generated/settingsSchemaWireName.js

@@ -0,0 +1,8 @@
+export const SETTINGS_WIRE_NAME_CLOSURE = () => {
+    const TOOL_WIRE_NAME_MAX_CHARS = 128;
+    const hasEdgeWhitespace = (v) => v.trim() !== v;
+    function isUsableWireName(v) {
+        return typeof v === "string" && v.length > 0 && v.length <= TOOL_WIRE_NAME_MAX_CHARS && !hasEdgeWhitespace(v);
+    }
+    return { isUsableWireName, TOOL_WIRE_NAME_MAX_CHARS, hasEdgeWhitespace };
+};

package/dist/headlessReconnectWire.js

@@ -53,7 +53,7 @@ export async function* withHeadlessR1Reconnect(live, deps) {
     let attempts = 0;
     let lastSeenSeq;
     const probe = deps.probeAlive ?? probeEngineAlive;
-    let isRecoverableTear;
+    let tearShape;
     const drains = createStreamDrainingLegs();
     let drainReopenAfterMs;
     let lastBreak;
@@ -62,6 +62,11 @@ export async function* withHeadlessR1Reconnect(live, deps) {
             registerRunNotFollowed(originalTearErr, fact);
         throw originalTearErr;
     };
+    const unboundHandle = (cause) => {
+        if (tearShape === 'transport')
+            throw originalTearErr;
+        return giveUp(mintRunNotFollowed(cause));
+    };
     const terminalFromRunRow = async (taskId) => {
         const row = await deps.getRun(taskId).catch(() => null);
         const terminal = terminalEventFromRunRow(row);
@@ -72,21 +77,21 @@ export async function* withHeadlessR1Reconnect(live, deps) {
     for (;;) {
         if (deps.signal?.aborted)
             throw originalTearErr;
-        if (isRecoverableTear === undefined)
-            isRecoverableTear = isSseIdleError(originalTearErr);
-        if (!isRecoverableTear)
+        if (tearShape === undefined)
+            tearShape = isSseIdleError(originalTearErr) ? 'idle' : guardedTransport(originalTearErr) ? 'transport' : 'other';
+        if (tearShape === 'other')
             throw originalTearErr;
         let handle;
         try {
             handle = deps.getTaskId();
         }
         catch {
-            return giveUp(mintRunNotFollowed('bad_input'));
+            return unboundHandle('bad_input');
         }
         if (handle === null || handle === undefined)
-            return giveUp(mintRunNotFollowed('no_run_id'));
+            return unboundHandle('no_run_id');
         if (typeof handle !== 'string' || handle === '')
-            return giveUp(mintRunNotFollowed('bad_input'));
+            return unboundHandle('bad_input');
         const taskId = handle;
         if (drainReopenAfterMs !== undefined) {
             const waitMs = drainReopenAfterMs;

package/dist/hitl/approvalAskers.d.ts

@@ -0,0 +1,13 @@
+export interface ApprovalAskReasonByHook {
+    readonly by: 'hook';
+    readonly cause: string;
+    readonly registration?: string;
+    readonly words?: string;
+}
+export interface ApprovalAskReasonByPolicy {
+    readonly by: string;
+    readonly words: string;
+}
+export type ApprovalAskReason = ApprovalAskReasonByHook | ApprovalAskReasonByPolicy;
+export declare function approvalAskReasonsOf(carrier: object | null | undefined): readonly ApprovalAskReason[] | undefined;
+export declare function approvalAgentIdOf(carrier: object | null | undefined): string | undefined;

package/dist/hitl/approvalAskers.js

@@ -0,0 +1,79 @@
+import { appendOwnElement } from '../ownKey.js';
+import { slotReadOf } from '../wireFailureShape.js';
+function ownNonEmptyText(o, key) {
+    const r = slotReadOf(o, key);
+    return r.presence === 'present' && typeof r.value === 'string' && r.value !== '' ? r.value : undefined;
+}
+function optionalText(o, key) {
+    const r = slotReadOf(o, key);
+    if (r.presence === 'absent')
+        return { state: 'absent' };
+    if (r.presence === 'present' && typeof r.value === 'string')
+        return { state: 'text', value: r.value };
+    return { state: 'bad' };
+}
+function askReasonOf(item) {
+    if (typeof item !== 'object' || item === null)
+        return undefined;
+    const by = ownNonEmptyText(item, 'by');
+    if (by === undefined)
+        return undefined;
+    const words = optionalText(item, 'words');
+    if (words.state === 'bad')
+        return undefined;
+    if (by === 'hook') {
+        const cause = ownNonEmptyText(item, 'cause');
+        if (cause === undefined)
+            return undefined;
+        const registration = optionalText(item, 'registration');
+        if (registration.state === 'bad')
+            return undefined;
+        return Object.freeze({
+            by: 'hook',
+            cause,
+            ...(registration.state === 'text' ? { registration: registration.value } : {}),
+            ...(words.state === 'text' ? { words: words.value } : {}),
+        });
+    }
+    if (words.state !== 'text')
+        return undefined;
+    return Object.freeze({ by, words: words.value });
+}
+export function approvalAskReasonsOf(carrier) {
+    try {
+        if (typeof carrier !== 'object' || carrier === null)
+            return undefined;
+        const slot = slotReadOf(carrier, 'askReasons');
+        if (slot.presence !== 'present')
+            return undefined;
+        const raw = slot.value;
+        if (typeof raw !== 'object' || raw === null || !Array.isArray(raw))
+            return undefined;
+        const len = slotReadOf(raw, 'length');
+        if (len.presence !== 'present' || typeof len.value !== 'number' || !Number.isSafeInteger(len.value) || len.value < 0)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < len.value; i++) {
+            const el = slotReadOf(raw, String(i));
+            if (el.presence !== 'present')
+                return undefined;
+            const reason = askReasonOf(el.value);
+            if (reason !== undefined)
+                appendOwnElement(out, reason);
+        }
+        return out.length === 0 ? undefined : Object.freeze(out);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function approvalAgentIdOf(carrier) {
+    try {
+        if (typeof carrier !== 'object' || carrier === null)
+            return undefined;
+        return ownNonEmptyText(carrier, 'agentId');
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/hitl/approvalResolution.d.ts

@@ -1,6 +1,7 @@
 import type { DecideReceiptView } from '../decideReceipt.js';
 import { type HitlSafetyCode } from './hitlBridge.js';
 import type { AskAnsweredOutput } from './gateLedger.js';
+import type { PolicyDenyCause } from './policyDenyCause.js';
 import type { ApprovalDenySettledBy, ToolApprovalRespondAckView, ToolApprovalRespondDecision, ToolApprovalRespondParkingView } from './toolApprovalWire.js';
 import { type DecisionRefusalReading, type RefusalRouteContext } from './decisionRefusal.js';
 import { type DeliveredReading, type LadderSafetyStop } from './attributionLadder.js';
@@ -14,6 +15,7 @@ export type ApprovalUnsettledCause = (typeof APPROVAL_UNSETTLED_CAUSES)[number];
 export interface ApprovalDenyFacts {
     readonly settledBy?: ApprovalDenySettledBy;
     readonly reason?: string;
+    readonly policyCause?: PolicyDenyCause;
     readonly attributionKey?: 'dropped' | 'renamed';
 }
 interface ApprovalResolutionBase {
@@ -53,6 +55,7 @@ export declare function approvalUnsettledCause(r: ApprovalResolution): ApprovalU
 export declare const APPROVAL_NOTE_RETRACTED_DETAIL = "the card was retracted (this host no longer has a decision port for it)";
 export declare const APPROVAL_NOTE_EDIT_REFUSED_DETAIL = "edits are not accepted on this card";
 export declare function approvalResolutionDetail(r: ApprovalResolution): string | undefined;
+export declare function approvalResolutionStatusTag(r: ApprovalResolution): string;
 export declare function unsettledCauseOfReading(reading: DecisionRefusalReading): 'engine_refused' | 'engine_error' | 'no_answer';
 export interface DecisionFailureMint {
     readonly lane: ApprovalResolutionLane;

package/dist/hitl/approvalResolution.js

@@ -1,11 +1,10 @@
 import { DecideTransportRetryExhaustedError, refusalCarrierOf, safetyStopHeadOf, safetyStopNamed } from './hitlBridge.js';
-import { mintDecisionRefusalReading } from './decisionRefusal.js';
+import { decisionStatusTag, mintDecisionRefusalReading } from './decisionRefusal.js';
 import { isSlotCarrier, thrownIsInstanceOf } from '../wireFailureShape.js';
 import { carrierReadOf, isLocalSafetyStop, localCodeReadOf, topCauseReadOf } from './attributionLadder.js';
 import { directFailureReadingOf, transportReadingOf } from './approvalDelivery.js';
 import { ownReadingSlot } from '../engineWireFor.js';
-import { CHECKPOINT_ROW_BAR_SENTENCE } from '../checkpointRowVerdict.js';
-import { msg, renderMessage } from '../i18n/translate.js';
+import { CHECKPOINT_ROW_BAR_SENTENCE, unboundWayOutContent } from '../checkpointRowVerdict.js';
 export const APPROVAL_RESOLUTION_LANES = Object.freeze(['respond', 'decide', 'ask']);
 export const APPROVAL_NOT_SENT_CAUSES = Object.freeze([
     'retracted',
@@ -95,7 +94,7 @@ export function approvalResolutionDetail(r) {
         const code = cause === 'safety_stop' ? ownStr(r, 'safetyCode') : undefined;
         if (code === undefined)
             return sentence;
-        return code === 'binding_missing' ? `${sentence} (${code}) · ${renderMessage(msg('approval.decide.unboundWayOut'))}` : `${sentence} (${code})`;
+        return code === 'binding_missing' ? `${sentence} (${code}) · ${unboundWayOutContent('unknown')}` : `${sentence} (${code})`;
     }
     if (kind !== 'unsettled')
         return undefined;
@@ -110,6 +109,25 @@ export function approvalResolutionDetail(r) {
     const parts = [ownStr(refusal, 'errorCode'), ownStr(r, 'detail') ?? ownStr(refusal, 'message')].filter((x) => x !== undefined);
     return parts.length > 0 ? parts.join(' · ') : undefined;
 }
+export function approvalResolutionStatusTag(r) {
+    try {
+        if (typeof r !== 'object' || r === null)
+            return '';
+        const kd = Object.getOwnPropertyDescriptor(r, 'kind');
+        if (kd === undefined || !Object.hasOwn(kd, 'value') || kd.value !== 'unsettled')
+            return '';
+        const rd = Object.getOwnPropertyDescriptor(r, 'refusal');
+        const refusal = rd !== undefined && Object.hasOwn(rd, 'value') ? rd.value : undefined;
+        if (typeof refusal !== 'object' || refusal === null)
+            return '';
+        const sd = Object.getOwnPropertyDescriptor(refusal, 'status');
+        const status = sd !== undefined && Object.hasOwn(sd, 'value') ? sd.value : undefined;
+        return typeof status === 'number' && Number.isInteger(status) && status >= 400 && status <= 599 ? decisionStatusTag(status) : '';
+    }
+    catch {
+        return '';
+    }
+}
 export function unsettledCauseOfReading(reading) {
     const standing = ownReadingSlot(reading, 'standing');
     if (standing === 'ambiguous')

package/dist/hitl/approvalsFeed.js

@@ -1,4 +1,5 @@
 import { hostLog } from '../host.js';
+import { invokeHostCallbackIsolated } from '../hostCallbackGuard.js';
 import { unrefTimer } from '../unrefTimer.js';
 import { readLivePendingRows } from './livePendingAsk.js';
 import { createStreamDrainingLegs } from '../streamDrainingLegs.js';
@@ -176,12 +177,7 @@ export function startApprovalsFeed(client, onSnapshot, opts) {
         const at = Date.now();
         blind = { why, at };
         stats.unknowns++;
-        try {
-            onSnapshot({ kind: 'unknown', why, at, mode: via });
-        }
-        catch (e) {
-            hostLog('debug', `approvalsFeed: subscriber threw on the unknown arm (swallowed): ${String(e)}`);
-        }
+        invokeHostCallbackIsolated('approvalsFeed: subscriber (unknown arm)', () => onSnapshot({ kind: 'unknown', why, at, mode: via }));
     }
     async function take(via, leg) {
         if (stopped)
@@ -293,12 +289,7 @@ export function startApprovalsFeed(client, onSnapshot, opts) {
         };
         last = snap;
         stats.snapshots++;
-        try {
-            onSnapshot(snap);
-        }
-        catch (e) {
-            hostLog('debug', `approvalsFeed: subscriber threw (swallowed): ${String(e)}`);
-        }
+        invokeHostCallbackIsolated('approvalsFeed: subscriber', () => onSnapshot(snap));
     }
     function schedulePoll() {
         if (stopped || ac.signal.aborted)

package/dist/hitl/askParkRowRouting.js

@@ -37,6 +37,7 @@ export function classifyAskParkRows(queueRows, taskId, deps) {
             kind: 'settled',
             reason: renderMessage(msg('approval.rowUnresumable.askNotSurfaced', { taskId: String(pending.taskId), sentence: checkpointRowBarSentence(bar) })),
             rowVerdict: bar,
+            rowTaskId: askParkRowTaskIdOf(taskId, pending),
         };
     }
     if (foreignKind !== null) {
@@ -50,8 +51,11 @@ export function classifyAskParkRows(queueRows, taskId, deps) {
 function askParkRowGateKind(row) {
     return typeof row.gateKind === 'string' && row.gateKind.length > 0 ? row.gateKind : null;
 }
+function askParkRowTaskIdOf(taskId, row) {
+    return typeof row.taskId === 'string' && row.taskId.length > 0 ? row.taskId : taskId;
+}
 export function askParkRowIdentity(taskId, row) {
-    const rowTaskId = typeof row.taskId === 'string' && row.taskId.length > 0 ? row.taskId : taskId;
+    const rowTaskId = askParkRowTaskIdOf(taskId, row);
     const gatedCallId = row.toolCallId ?? row.boundCallId ?? undefined;
     return { rowTaskId, gatedCallId, armedKey: approvalCallKey(gatedCallId, rowTaskId) };
 }

package/dist/hitl/decisionRefusal.d.ts

@@ -78,5 +78,6 @@ export interface UndeliverableDecisionFacts {
     readonly end: UndeliverableDecisionEnd;
     readonly runId?: string;
 }
+export declare function decisionStatusTag(status: number, errorCode?: string): string;
 export declare function undeliverableDecisionContent(facts: UndeliverableDecisionFacts): string;
 export declare function decideRowUnrevivableNotice(lang?: UiLanguage | (string & {})): string;

package/dist/hitl/decisionRefusal.js

@@ -314,9 +314,12 @@ export function decisionRefusalClosesOut(refusal, pending) {
         return false;
     return standing === 'ambiguous' || standing === 'refused-pending';
 }
+export function decisionStatusTag(status, errorCode) {
+    const code = typeof errorCode === 'string' && isDisplayableWireCode(errorCode) ? ` ${errorCode}` : '';
+    return `(HTTP ${String(status)}${code})`;
+}
 export function undeliverableDecisionContent(facts) {
-    const code = typeof facts.errorCode === 'string' && isDisplayableWireCode(facts.errorCode) ? ` ${facts.errorCode}` : '';
-    const head = `The engine refused the approval decision this client sent (HTTP ${String(facts.status)}${code}), so the call it asked about could not be answered from here and did not run`;
+    const head = `The engine refused the approval decision this client sent ${decisionStatusTag(facts.status, facts.errorCode)}, so the call it asked about could not be answered from here and did not run`;
     const runId = typeof facts.runId === 'string' && isDisplayableWireCode(facts.runId) ? ` ${facts.runId}` : '';
     switch (facts.end) {
         case 'run-stopped':

package/dist/hitl/decisionSend.js

@@ -1,5 +1,6 @@
 import { settleWithinDeadline } from '../abortableSleep.js';
 import { hostLog } from '../host.js';
+import { invokeHostCallbackIsolated } from '../hostCallbackGuard.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { askGoneFromError } from '../decideReceipt.js';
 import { appendOwnElement, guardedRead, readOwnDataNonEmptyString, readOwnDataValue } from '../ownKey.js';
@@ -343,12 +344,7 @@ function holdFits(handle, req) {
     }
 }
 function callHold(call) {
-    try {
-        call();
-    }
-    catch (e) {
-        hostLog('debug', `decisionSend.callHold: ${String(e).slice(0, 120)}`);
-    }
+    invokeHostCallbackIsolated('decisionSend: hold verb', call);
 }
 function hostField(holder, key) {
     if (typeof holder !== 'object' || holder === null)

package/dist/hitl/frameRouter.d.ts

@@ -1,8 +1,8 @@
 import type { AgentEvent } from '@sema-agent/sdk';
 import type { DecideOperationObserver, HitlClientLike } from './hitlBridge.js';
 import { type RespondToolApprovalFn, type ToolApprovalFrame, type ToolApprovalFrameLaneOpts } from './toolApprovalWire.js';
-import type { ApprovalResolution } from './approvalResolution.js';
-import type { GateLedger } from './gateLedger.js';
+import type { ApprovalDenyFacts, ApprovalResolution } from './approvalResolution.js';
+import type { GateLedger, GateDenyAttribution } from './gateLedger.js';
 import type { NoAllowCause } from './noAllowCause.js';
 import { type ReplayedApprovalDisposition } from './replayedApproval.js';
 import type { ReattachDrainingEvent } from '../runReattachPolicy.js';
@@ -17,6 +17,7 @@ export interface PolicyDenyReasonFacts {
     readonly budgetSetting?: string;
 }
 export declare function policyDenyReason(facts: PolicyDenyReasonFacts): string;
+export declare function denyAttributionOf(deny: ApprovalDenyFacts | undefined): GateDenyAttribution;
 export declare const HITL_INTERRUPT_MESSAGE_FOR_TOOL_USE = "[Request interrupted by user for tool use]";
 export declare const ENGINE_ABORT_TOOL_RESULT = "Operation aborted";
 export interface ParkReattachNotice {

package/dist/hitl/frameRouter.js

@@ -13,6 +13,8 @@ import { surfaceForCurrentSession, surfaceReplayedApprovalListUnreadable } from
 import { liveCardHoldOf, noteEngineClosedApproval, settleEngineClosedApproval } from './approvalHolds.js';
 import { approvalCompleteParked } from './approvalCompleteParked.js';
 import { liveFrameCallKey } from './gateIdentity.js';
+import { readPolicyDenyCause } from './policyDenyCause.js';
+import { msg, renderMessage } from '../i18n/translate.js';
 import { SEMA_DENIAL_KIND_KEY, hasLedgerPositionKey } from './gateLedger.js';
 import { replayedApprovalClosesCardFrame, replayedApprovalDisposition, settledApprovalDisposition } from './replayedApproval.js';
 import { settleWithinDeadline } from '../abortableSleep.js';
@@ -64,10 +66,33 @@ export function policyDenyReason(facts) {
 function denyOutputForRender(attribution) {
     if (attribution?.settledBy !== 'policy')
         return HITL_REJECT_MESSAGE;
+    const head = policyDenyHeadFor(readPolicyDenyCause(attribution));
     const reason = attribution.reason;
     return reason !== undefined && reason.trim() !== ''
-        ? `${HITL_POLICY_DENY_MESSAGE}\n${reason}`
-        : HITL_POLICY_DENY_MESSAGE;
+        ? `${head}\n${reason}`
+        : head;
+}
+function policyDenyHeadFor(cause) {
+    const tail = msg('approval.policyDeny.tail');
+    switch (cause) {
+        case 'dont_ask':
+            return renderMessage(msg('approval.policyDeny.dontAsk', { tail }));
+        case 'deny_rule':
+            return renderMessage(msg('approval.policyDeny.denyRule', { tail }));
+        case 'engine_floor':
+            return renderMessage(msg('approval.policyDeny.engineFloor', { tail }));
+        case 'no_approval_ui':
+        case undefined:
+            return HITL_POLICY_DENY_MESSAGE;
+    }
+}
+export function denyAttributionOf(deny) {
+    const policyCause = readPolicyDenyCause(deny);
+    return {
+        ...(deny?.settledBy !== undefined ? { settledBy: deny.settledBy } : {}),
+        ...(deny?.reason !== undefined ? { reason: deny.reason } : {}),
+        ...(policyCause !== undefined ? { policyCause } : {}),
+    };
 }
 function denialKindForTranscript(attribution) {
     return ccToolDenialKindForSettledBy(attribution?.settledBy);
@@ -354,10 +379,7 @@ function settleLiveCardOutcome(ev, outcome, ctx, fromSubagent, gatedCallId) {
         invokeHostCallbackIsolated('liveHitlAskWire: onToolApprovalOutcome', () => deps.onToolApprovalOutcome?.(ev, outcome));
     }
     if (outcome.kind === 'decided' && outcome.decision === 'deny' && !fromSubagent) {
-        const attribution = {
-            ...(outcome.deny?.settledBy !== undefined ? { settledBy: outcome.deny.settledBy } : {}),
-            ...(outcome.deny?.reason !== undefined ? { reason: outcome.deny.reason } : {}),
-        };
+        const attribution = denyAttributionOf(outcome.deny);
         if (gatedCallId !== undefined)
             led.markDenied(gatedCallId, attribution);
         else

package/dist/hitl/gateLedger.d.ts

@@ -1,9 +1,11 @@
 import type { AgentEvent } from '@sema-agent/sdk';
+import { type PolicyDenyCause } from './policyDenyCause.js';
 export declare const SEMA_COLLATERAL_ABORT_KEY = "_sema_collateral_abort";
 export declare const SEMA_DENIAL_KIND_KEY = "_sema_denial_kind";
 export interface GateDenyAttribution {
     settledBy?: 'human' | 'policy';
     reason?: string;
+    policyCause?: PolicyDenyCause;
 }
 export interface AskAnsweredOutput {
     type: 'ask-user-question';

package/dist/hitl/gateLedger.js

@@ -1,5 +1,6 @@
 import { parkedToolEndRoleOf } from '../engineRowRef.js';
 import { inheritFrameBinding } from '../frameBinding.js';
+import { readPolicyDenyCause } from './policyDenyCause.js';
 export const SEMA_COLLATERAL_ABORT_KEY = '_sema_collateral_abort';
 export const SEMA_DENIAL_KIND_KEY = '_sema_denial_kind';
 export function durableSeqOf(ev) {
@@ -27,9 +28,10 @@ function normalizeDenyAttribution(a) {
         return undefined;
     const settledBy = a.settledBy === 'human' || a.settledBy === 'policy' ? a.settledBy : undefined;
     const reason = typeof a.reason === 'string' && a.reason.trim() !== '' ? a.reason : undefined;
+    const policyCause = settledBy === 'policy' ? readPolicyDenyCause(a) : undefined;
     if (settledBy === undefined && reason === undefined)
         return undefined;
-    return { ...(settledBy !== undefined ? { settledBy } : {}), ...(reason !== undefined ? { reason } : {}) };
+    return { ...(settledBy !== undefined ? { settledBy } : {}), ...(reason !== undefined ? { reason } : {}), ...(policyCause !== undefined ? { policyCause } : {}) };
 }
 export function createGateLedger() {
     const startedCalls = new Set();