@sema-agent/client-core 0.107.0 → 0.109.0

package/dist/engineTargetSeat.js

@@ -58,6 +58,7 @@ const REFUSAL_KEYS = {
     not_configured: 'config.engineTarget.notConfigured',
     not_signed_in: 'config.engineTarget.notSignedIn',
     probe_failed: 'config.engineTarget.probeFailed',
+    cloud_unreachable: 'config.engineTarget.cloudUnreachable',
     org_policy: 'config.engineTarget.orgPolicy',
     url_refused: 'config.engineTarget.urlRefused',
     login_failed: 'config.engineTarget.loginFailed',

package/dist/errorSupplementRoles.js

@@ -5,7 +5,8 @@ import { resumeReopenContent } from './hitl/suspendedReopen.js';
 import { idempotencyPayloadMismatchContent } from './engineErrorCodes.js';
 import { inheritEnvRefusalContent } from './inheritEnvWire.js';
 import { projectSeedRefusalContent } from './projectSeed.js';
-import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, sessionArchiveStampedContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, } from './wireRefusalCopy.js';
+import { usageWindowExhaustedContent, fleetLeaseUnavailableContent, settingsPermissionBucketRefusalContent, fieldLimitRefusalContent, autonomyLaneRefusalContent, sessionArchiveStampedContent, unsupportedRuleRefusalContent, admissionWallRefusalContent, hostPostureRefusalContent, toolDeclarationRefusalContent, envCredentialRefusalContent, sessionIdRetiredContent, runConcurrencyCapContent, } from './wireRefusalCopy.js';
+import { catalogDefaultRefusalContent } from './model/catalogDefault.js';
 const ROLE_BY_READER = new Map([
     [corruptSessionContent, 'replacement'],
     [corruptStoredRowContent, 'replacement'],
@@ -23,6 +24,10 @@ const ROLE_BY_READER = new Map([
     [idempotencyPayloadMismatchContent, 'replacement'],
     [unsupportedRuleRefusalContent, 'replacement'],
     [projectSeedRefusalContent, 'replacement'],
+    [catalogDefaultRefusalContent, 'replacement'],
+    [envCredentialRefusalContent, 'replacement'],
+    [sessionIdRetiredContent, 'replacement'],
+    [runConcurrencyCapContent, 'replacement'],
     [admissionWallRefusalContent, 'supplement'],
     [hostPostureRefusalContent, 'supplement'],
     [toolDeclarationRefusalContent, 'supplement'],

package/dist/eventLeg.js

@@ -21,7 +21,7 @@ function makeFrameStageDomains(domains) {
 }
 const FRAME_STAGE_DOMAINS = makeFrameStageDomains({
     bindRun: Object.freeze(['meta', 'done', 'failed']),
-    stampOwner: Object.freeze(['task_progress']),
+    stampOwner: Object.freeze(['task_progress', 'task_started']),
     hitlFrames: Object.freeze(['question', 'question_complete', 'elicitation', 'elicitation_complete', 'tool_approval', 'tool_approval_complete', 'approval_request', 'approval_complete', 'approval_revoke']),
 });
 const HITL_FRAMES_PROJECTED = Object.freeze(['human_input']);

package/dist/executionLaneWords.js

@@ -1,3 +1,4 @@
+import { SETTINGS_NO_EXECUTION_TARGET_LANES } from './generated/settingsSchemaTables.js';
 export function executionLaneWordIsNone(provider) {
-    return provider === 'none' || provider === 'in-process';
+    return SETTINGS_NO_EXECUTION_TARGET_LANES.some((w) => w === provider) || provider === 'in-process';
 }

package/dist/fleetTaskDesc.js

@@ -1,12 +1,12 @@
-import { applyDisplayFace, ESCAPE_FACE, LABEL_FACE, paintAndCap } from './displayUntrusted.js';
+import { applyDisplayFace, displayUntrusted, ESCAPE_FACE } from './displayUntrusted.js';
 export function escapeDisplayControlChars(s) {
     return applyDisplayFace(s, ESCAPE_FACE);
 }
 export function capForDisplay(raw, max) {
-    return paintAndCap(raw, ESCAPE_FACE, typeof max === 'number' && max > 0 ? max : 0);
+    return displayUntrusted(raw, { foldLines: false, escapeBackslashes: 'auto', max: typeof max === 'number' && max > 0 ? max : 0 });
 }
 export function collapseLabel(s) {
-    return applyDisplayFace(s, LABEL_FACE);
+    return displayUntrusted(s, { escapeBackslashes: 'auto' });
 }
 export function taskDescFromName(name, agentType, agentName) {
     if (!name || !agentType)

package/dist/gateOutcome.d.ts

@@ -1,6 +1,6 @@
 import type { DeniedBy, Settlement } from '@sema-agent/sdk';
 import { type CcToolDenialKind } from './gateVocabulary.js';
-import { CORE_MODE_RELEASE_REASONS } from './generated/engineFactTables.js';
+import { CORE_MODE_RELEASE_REASONS, CORE_REFUSAL_ECHO_KINDS } from './generated/engineFactTables.js';
 export type GateDispositionView = {
     kind: 'allowed';
     classifier?: GateClassifierRoundView;
@@ -14,7 +14,16 @@ export type GateDispositionView = {
     deniedBy: DeniedBy | (string & {});
     cause?: string;
     extension?: string;
+    echoed?: readonly GateRefusalEchoView[];
 };
+export interface GateRefusalEchoView {
+    readonly kind: string;
+    readonly value: string;
+    readonly canonical?: string;
+}
+export declare const GATE_REFUSAL_ECHO_KIND_WORDS: readonly ["path", "command", "pattern"];
+export type GateRefusalEchoKindWord = (typeof CORE_REFUSAL_ECHO_KINDS)[number];
+export declare function isGateRefusalEchoKindWord(v: string): v is GateRefusalEchoKindWord;
 export interface GateClassifierRoundView {
     modelRequested: string;
     modelUsed: string;

package/dist/gateOutcome.js

@@ -1,10 +1,14 @@
 import { ccToolDenialKindForSettledBy, isCcToolDenialKind, isGateDeniedByWord } from './gateVocabulary.js';
 import { GATE_PARKED_ERROR_CODE } from './engineErrorCodes.js';
-import { CORE_MODE_RELEASE_REASONS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
+import { CORE_MODE_RELEASE_REASONS, CORE_REFUSAL_ECHO_KINDS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
 import { readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 function str(v) {
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
+export const GATE_REFUSAL_ECHO_KIND_WORDS = CORE_REFUSAL_ECHO_KINDS;
+export function isGateRefusalEchoKindWord(v) {
+    return typeof v === 'string' && CORE_REFUSAL_ECHO_KINDS.includes(v);
+}
 export const GATE_MODE_RELEASE_REASON_WORDS = CORE_MODE_RELEASE_REASONS;
 export function isGateModeReleaseReasonWord(v) {
     return typeof v === 'string' && CORE_MODE_RELEASE_REASONS.includes(v);
@@ -112,6 +116,46 @@ function nonEmptyStringList(v) {
     }
     return Object.freeze(out);
 }
+function ownDataOf(o, key) {
+    try {
+        const d = Object.getOwnPropertyDescriptor(o, key);
+        return d === undefined || !Object.hasOwn(d, 'value') ? { ok: false } : { ok: true, value: d.value };
+    }
+    catch {
+        return { ok: false };
+    }
+}
+function readRefusalEchoes(raw) {
+    try {
+        if (!Array.isArray(raw))
+            return undefined;
+        const len = ownDataOf(raw, 'length');
+        if (!len.ok || typeof len.value !== 'number' || !Number.isInteger(len.value) || len.value <= 0)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < len.value; i += 1) {
+            const slot = ownDataOf(raw, String(i));
+            if (!slot.ok)
+                return undefined;
+            const e = slot.value;
+            if (typeof e !== 'object' || e === null || Array.isArray(e))
+                return undefined;
+            const kind = ownDataOf(e, 'kind');
+            const value = ownDataOf(e, 'value');
+            if (!kind.ok || typeof kind.value !== 'string' || kind.value.length === 0)
+                return undefined;
+            if (!value.ok || typeof value.value !== 'string' || value.value.length === 0)
+                return undefined;
+            const canonical = ownDataOf(e, 'canonical');
+            const canon = canonical.ok && typeof canonical.value === 'string' && canonical.value.length > 0 ? canonical.value : undefined;
+            out.push(Object.freeze({ kind: kind.value, value: value.value, ...(canon !== undefined ? { canonical: canon } : {}) }));
+        }
+        return Object.freeze(out);
+    }
+    catch {
+        return undefined;
+    }
+}
 function readModeRelease(raw) {
     if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
         return undefined;
@@ -198,6 +242,8 @@ function readGateRecord(frame) {
         const askClass = str(dr.askClass);
         const classes = nonEmptyStringList(dr.classes);
         const extension = str(dr.extension);
+        const echoedSeat = ownDataOf(dr, 'echoed');
+        const echoed = echoedSeat.ok ? readRefusalEchoes(echoedSeat.value) : undefined;
         disposition = {
             kind: 'denied',
             deniedBy,
@@ -207,6 +253,7 @@ function readGateRecord(frame) {
             ...(askClass !== undefined ? { askClass } : {}),
             ...(classes !== undefined ? { classes } : {}),
             ...(extension !== undefined ? { extension } : {}),
+            ...(echoed !== undefined ? { echoed } : {}),
         };
     }
     else {

package/dist/generated/engineFactTables.d.ts

@@ -73,3 +73,5 @@ export declare const CORE_USER_ATTACHMENTS_MAX: number;
 export declare const CORE_USER_ATTACHMENT_LABEL_MAX: number;
 export declare const CORE_PRESENT_PLAN_TOOL_NAME: "ExitPlanMode";
 export declare const CORE_WORKFLOW_AGENT_PARKED_ERROR_CODE: "workflow.agent_parked";
+export declare const CORE_REFUSAL_ECHO_KINDS: readonly ["path", "command", "pattern"];
+export declare const CORE_DISCARDED_DELIVERY_PATHS: readonly ["live", "box", "drain", "notice"];

package/dist/generated/engineFactTables.js

@@ -466,3 +466,14 @@ export const CORE_USER_ATTACHMENTS_MAX = 20;
 export const CORE_USER_ATTACHMENT_LABEL_MAX = 4096;
 export const CORE_PRESENT_PLAN_TOOL_NAME = "ExitPlanMode";
 export const CORE_WORKFLOW_AGENT_PARKED_ERROR_CODE = "workflow.agent_parked";
+export const CORE_REFUSAL_ECHO_KINDS = Object.freeze([
+    "path",
+    "command",
+    "pattern",
+]);
+export const CORE_DISCARDED_DELIVERY_PATHS = Object.freeze([
+    "live",
+    "box",
+    "drain",
+    "notice",
+]);

package/dist/generated/engineNoticeTables.js

@@ -37,6 +37,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "permission.rule_store_unavailable",
     "permission.rule_row_dropped",
     "config.session_rules_earlier_grammar",
+    "config.legacy_tool_name",
     "permission.allowed_tool_not_granted",
     "mods.registration_refused",
     "peer.inbound_disposition",
@@ -52,6 +53,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "delegation.transcript_integrity",
     "delegation.ask_unresolvable",
     "delegation.resume_lane_missing",
+    "delegation.delivery_discarded",
     "mcp.injection_dropped",
     "mcp.revocation_probe_failed",
     "mcp.server_redialed",
@@ -156,6 +158,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "permission.rule_store_unavailable": "user",
     "permission.rule_row_dropped": "user",
     "config.session_rules_earlier_grammar": "user",
+    "config.legacy_tool_name": "user",
     "permission.allowed_tool_not_granted": "user",
     "mods.registration_refused": "user",
     "peer.inbound_disposition": "user",
@@ -171,6 +174,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "delegation.transcript_integrity": "operator",
     "delegation.ask_unresolvable": "user",
     "delegation.resume_lane_missing": "operator",
+    "delegation.delivery_discarded": "operator",
     "mcp.injection_dropped": "user",
     "mcp.revocation_probe_failed": "operator",
     "mcp.server_redialed": "operator",
@@ -281,6 +285,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "permission.rule_store_unavailable": "engine",
     "permission.rule_row_dropped": "engine",
     "config.session_rules_earlier_grammar": "engine",
+    "config.legacy_tool_name": "engine",
     "permission.allowed_tool_not_granted": "engine",
     "mods.registration_refused": "engine",
     "peer.inbound_disposition": "engine",
@@ -296,6 +301,7 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "delegation.transcript_integrity": "engine",
     "delegation.ask_unresolvable": "engine",
     "delegation.resume_lane_missing": "engine",
+    "delegation.delivery_discarded": "engine",
     "mcp.injection_dropped": "engine",
     "mcp.revocation_probe_failed": "engine",
     "mcp.server_redialed": "engine",

package/dist/generated/settingsSchemaFns.d.ts

@@ -34,18 +34,20 @@ export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => ob
 export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
 export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
 export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
+export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
+export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
+export declare const SETTINGS_HAS_EDGE_WHITESPACE: (v: string) => boolean;
+export declare const SETTINGS_IS_RESERVED_MEMBER_NAME: (name: string) => boolean;
 export declare const SETTINGS_READ_REQUEST_MCP_TRANSPORT: (t: unknown) => RequestMcpTransportRead;
 export declare const SETTINGS_READ_MCP_IDENTITY_HEADERS: (transport: Record<string, unknown>) => {
     principalHeader?: string;
     assertionHeader?: string;
 };
-export declare const SETTINGS_IS_USABLE_WIRE_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_WIRE_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_USABLE_MCP_SERVER_NAME: (v: unknown) => v is string;
 export declare const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME: (v: unknown) => string;
 export declare const SETTINGS_IS_CONTENT_ORIGIN_WORD: (v: unknown) => v is McpContentOrigin;
 export declare const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN: (v: unknown) => string;
-export declare const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS: 128;
 export declare const SETTINGS_URL_ALLOW_PATTERN_MATCHES: (url: string, pattern: string) => boolean;
 export declare const SETTINGS_IS_AT_LEAST: (layer: string, minTrust: string) => boolean;
 export declare const SETTINGS_MEMBER_ADMISSION: (category: string, member: string) => object;

package/dist/generated/settingsSchemaFns.js

@@ -4,6 +4,8 @@ import { SETTINGS_CALLER_TEXT_ECHO_CLOSURE } from './settingsSchemaCallerTextEch
 import { SETTINGS_PLAIN_JSON_OBJECT_CLOSURE } from './settingsSchemaPlainJsonObject.js';
 import { SETTINGS_OWN_KEY_READ_CLOSURE } from './settingsSchemaOwnKeyRead.js';
 import { SETTINGS_MCP_SERVER_NAME_CLOSURE } from './settingsSchemaMcpServerName.js';
+import { SETTINGS_WIRE_NAME_CLOSURE } from './settingsSchemaWireName.js';
+import { SETTINGS_RESERVED_MEMBER_NAME_CLOSURE } from './settingsSchemaReservedMemberName.js';
 import { SETTINGS_MCP_REQUEST_ENTRY_CLOSURE } from './settingsSchemaMcpRequestEntry.js';
 import { SETTINGS_MCP_CONTENT_ORIGINS } from './settingsSchemaTables.js';
 import { SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE } from './settingsSchemaUrlPattern.js';
@@ -167,16 +169,20 @@ const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
 export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
 export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
 export const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON = SETTINGS_MCP_SERVER_NAME.RESERVED_MCP_SERVER_NAME_REASON;
-const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON);
+const SETTINGS_WIRE_NAME = SETTINGS_WIRE_NAME_CLOSURE();
+export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_WIRE_NAME.isUsableWireName;
+export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_WIRE_NAME.TOOL_WIRE_NAME_MAX_CHARS;
+export const SETTINGS_HAS_EDGE_WHITESPACE = SETTINGS_WIRE_NAME.hasEdgeWhitespace;
+const SETTINGS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME_CLOSURE();
+export const SETTINGS_IS_RESERVED_MEMBER_NAME = SETTINGS_RESERVED_MEMBER_NAME.isReservedMemberName;
+const SETTINGS_MCP_REQUEST_ENTRY = SETTINGS_MCP_REQUEST_ENTRY_CLOSURE(SETTINGS_MCP_CONTENT_ORIGINS, SETTINGS_STARTS_WITH_HTTP_SCHEME, SETTINGS_ECHO_CALLER_TEXT, SETTINGS_UNINSPECTABLE, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_INSPECT, SETTINGS_OWN_FIELDS_OF, SETTINGS_OWN_VALUE_OF, SETTINGS_READ_KEY, SETTINGS_IS_JSON_ARRAY, SETTINGS_JSON_SHAPE_OF, SETTINGS_IS_RESERVED_MCP_SERVER_NAME, SETTINGS_RESERVED_MCP_SERVER_NAME_REASON, SETTINGS_TOOL_WIRE_NAME_MAX_CHARS, SETTINGS_HAS_EDGE_WHITESPACE, SETTINGS_IS_USABLE_WIRE_NAME, SETTINGS_IS_RESERVED_MEMBER_NAME);
 export const SETTINGS_READ_REQUEST_MCP_TRANSPORT = SETTINGS_MCP_REQUEST_ENTRY.readRequestMcpTransport;
 export const SETTINGS_READ_MCP_IDENTITY_HEADERS = SETTINGS_MCP_REQUEST_ENTRY.readMcpIdentityHeaders;
-export const SETTINGS_IS_USABLE_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableWireName;
 export const SETTINGS_DESCRIBE_BAD_WIRE_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadWireName;
 export const SETTINGS_IS_USABLE_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.isUsableMcpServerName;
 export const SETTINGS_DESCRIBE_BAD_MCP_SERVER_NAME = SETTINGS_MCP_REQUEST_ENTRY.describeBadMcpServerName;
 export const SETTINGS_IS_CONTENT_ORIGIN_WORD = SETTINGS_MCP_REQUEST_ENTRY.isContentOriginWord;
 export const SETTINGS_DESCRIBE_BAD_CONTENT_ORIGIN = SETTINGS_MCP_REQUEST_ENTRY.describeBadContentOrigin;
-export const SETTINGS_TOOL_WIRE_NAME_MAX_CHARS = SETTINGS_MCP_REQUEST_ENTRY.TOOL_WIRE_NAME_MAX_CHARS;
 export const SETTINGS_URL_ALLOW_PATTERN_MATCHES = SETTINGS_URL_ALLOW_PATTERN_MATCHES_CLOSURE();
 const SETTINGS_SAFETY_MERGE = SETTINGS_SAFETY_MERGE_CLOSURE(SETTINGS_MIN_TRUST_WORDS);
 export const SETTINGS_IS_AT_LEAST = SETTINGS_SAFETY_MERGE.isAtLeast;

package/dist/generated/settingsSchemaMcpRequestEntry.d.ts

@@ -1 +1 @@
-export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers") => any;
+export declare const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE: (MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"], startsWithHttpScheme: (raw: string) => boolean, echoCallerText: (text: string) => string, UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", captureStringArray: (v: unknown, classification: "strict" | "wide") => string[] | undefined, dataDescriptor: (value: unknown) => PropertyDescriptor, inspect: (read: () => unknown) => object, ownFieldsOf: (record: object, keys: readonly string[]) => object, ownValueOf: (record: object, key: string) => object, readKey: (record: object, key: PropertyKey) => object, isJsonArray: (v: unknown) => v is unknown[], jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable", isReservedMcpServerName: (name: string) => boolean, RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers", TOOL_WIRE_NAME_MAX_CHARS: 128, hasEdgeWhitespace: (v: string) => boolean, isUsableWireName: (v: unknown) => v is string, isReservedMemberName: (name: string) => boolean) => any;

package/dist/generated/settingsSchemaMcpRequestEntry.js

@@ -1,4 +1,4 @@
-export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWithHttpScheme, echoCallerText, UNINSPECTABLE, captureStringArray, dataDescriptor, inspect, ownFieldsOf, ownValueOf, readKey, isJsonArray, jsonShapeOf, isReservedMcpServerName, RESERVED_MCP_SERVER_NAME_REASON) => {
+export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWithHttpScheme, echoCallerText, UNINSPECTABLE, captureStringArray, dataDescriptor, inspect, ownFieldsOf, ownValueOf, readKey, isJsonArray, jsonShapeOf, isReservedMcpServerName, RESERVED_MCP_SERVER_NAME_REASON, TOOL_WIRE_NAME_MAX_CHARS, hasEdgeWhitespace, isUsableWireName, isReservedMemberName) => {
     function describeKindWord(v) {
         const shape = jsonShapeOf(v);
         switch (shape) {
@@ -46,11 +46,6 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
     function quotedCallerText(text) {
         return `"${echoCallerText(text)}"`;
     }
-    const TOOL_WIRE_NAME_MAX_CHARS = 128;
-    const hasEdgeWhitespace = (v) => v.trim() !== v;
-    function isUsableWireName(v) {
-        return typeof v === "string" && v.length > 0 && v.length <= TOOL_WIRE_NAME_MAX_CHARS && !hasEdgeWhitespace(v);
-    }
     function describeBadWireName(v) {
         if (typeof v !== "string")
             return describeKindWord(v);
@@ -202,8 +197,7 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
         }
         return { ok: true, value: { kind: "other", value: kind.value } };
     }
-    const PLAIN_STRING_RECORD_RESERVED_MEMBER = "__proto__";
-    const RESERVED_MEMBER_FAULT = `no member of a declaration may be named "${PLAIN_STRING_RECORD_RESERVED_MEMBER}"`;
+    const reservedMemberFault = (name) => `no member of a declaration may be named "${name}"`;
     function notPlainDetail(shape, v) {
         switch (shape) {
             case "null":
@@ -233,28 +227,25 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
             return { ok: false, fault: "not_plain_record", detail: `got ${namesRead.sentence}` };
         const names = namesRead.value;
         const members = Object.create(null);
-        let reservedMember = false;
+        const reservedMembers = names.filter(isReservedMemberName);
         for (const name of names) {
             const read = readKey(v, name);
             const unreadable = read.presence === "unreadable";
             const value = read.presence === "own" ? read.value : undefined;
             if (unreadable || typeof value !== "string") {
                 const valueFault = unreadable ? "could not be read (its getter threw)" : `must be a string — got ${describeValueShape(value)}`;
-                const reserved = name === PLAIN_STRING_RECORD_RESERVED_MEMBER;
-                const fault = reserved ? "member_name_reserved" : "member_not_string";
+                const fault = isReservedMemberName(name) ? "member_name_reserved" : "member_not_string";
                 return {
                     ok: false,
                     fault,
                     member: echoCallerText(name),
-                    detail: `its member "${echoCallerText(name)}" ${reserved ? `is not allowed (${RESERVED_MEMBER_FAULT}) and its value ${valueFault}` : valueFault}`,
+                    detail: `its member "${echoCallerText(name)}" ${isReservedMemberName(name) ? `is not allowed (${reservedMemberFault(name)}) and its value ${valueFault}` : valueFault}`,
                 };
             }
-            if (name === PLAIN_STRING_RECORD_RESERVED_MEMBER)
-                reservedMember = true;
-            else
+            if (!isReservedMemberName(name))
                 Object.defineProperty(members, name, dataDescriptor(value));
         }
-        return { ok: true, record: { ...members }, reservedMember };
+        return { ok: true, record: { ...members }, reservedMembers };
     }
     const issuesOf = (...candidates) => candidates.filter((c) => c !== undefined);
     function readTransportRecord(path, raw) {
@@ -269,8 +260,8 @@ export const SETTINGS_MCP_REQUEST_ENTRY_CLOSURE = (MCP_CONTENT_ORIGINS, startsWi
         }
         return {
             record: read.record,
-            issues: read.reservedMember ? [{ path: `${path}.${PLAIN_STRING_RECORD_RESERVED_MEMBER}`, reason: RESERVED_MEMBER_FAULT, member: PLAIN_STRING_RECORD_RESERVED_MEMBER, fault: "member_name_reserved" }] : [],
+            issues: read.reservedMembers.map((name) => ({ path: `${path}.${name}`, reason: reservedMemberFault(name), member: name, fault: "member_name_reserved" })),
         };
     }
-    return { readRequestMcpTransport, readMcpIdentityHeaders, isUsableWireName, describeBadWireName, isUsableMcpServerName, describeBadMcpServerName, isContentOriginWord, describeBadContentOrigin, TOOL_WIRE_NAME_MAX_CHARS };
+    return { readRequestMcpTransport, readMcpIdentityHeaders, describeBadWireName, isUsableMcpServerName, describeBadMcpServerName, isContentOriginWord, describeBadContentOrigin };
 };

package/dist/generated/settingsSchemaReservedMemberName.d.ts

@@ -0,0 +1 @@
+export declare const SETTINGS_RESERVED_MEMBER_NAME_CLOSURE: () => any;

package/dist/generated/settingsSchemaReservedMemberName.js

@@ -0,0 +1,7 @@
+export const SETTINGS_RESERVED_MEMBER_NAME_CLOSURE = () => {
+    const RESERVED_MEMBER_NAMES = ["__proto__", "constructor", "prototype"];
+    function isReservedMemberName(name) {
+        return RESERVED_MEMBER_NAMES.includes(name);
+    }
+    return { isReservedMemberName };
+};

package/dist/generated/settingsSchemaTables.d.ts

@@ -13,3 +13,5 @@ export declare const SETTINGS_UI_LANGUAGE_VALUES: readonly ["en", "zh"];
 export declare const SETTINGS_MCP_CONTENT_ORIGINS: readonly ["local", "execution", "external"];
 export declare const SETTINGS_MIN_TRUST_WORDS: readonly ["local", "session", "project", "global", "managed", "task"];
 export declare const SETTINGS_WORKSPACE_TRUST_STATES: readonly ["accepted", "declined", "no_trust_step"];
+export declare const SETTINGS_MODEL_PLANE_REFUSAL_CODES: readonly ["config.default_model_missing", "config.model_refused_name_minted", "config.model_route_endpoint_missing", "config.gateway_fallback_without_primary", "config.catalog_replaces_env_models"];
+export declare const SETTINGS_NO_EXECUTION_TARGET_LANES: readonly ["none"];

package/dist/generated/settingsSchemaTables.js

@@ -63,3 +63,13 @@ export const SETTINGS_WORKSPACE_TRUST_STATES = Object.freeze([
     "declined",
     "no_trust_step",
 ]);
+export const SETTINGS_MODEL_PLANE_REFUSAL_CODES = Object.freeze([
+    "config.default_model_missing",
+    "config.model_refused_name_minted",
+    "config.model_route_endpoint_missing",
+    "config.gateway_fallback_without_primary",
+    "config.catalog_replaces_env_models",
+]);
+export const SETTINGS_NO_EXECUTION_TARGET_LANES = Object.freeze([
+    "none",
+]);

package/dist/generated/settingsSchemaWireName.d.ts

@@ -0,0 +1 @@
+export declare const SETTINGS_WIRE_NAME_CLOSURE: () => any;

package/dist/generated/settingsSchemaWireName.js

@@ -0,0 +1,8 @@
+export const SETTINGS_WIRE_NAME_CLOSURE = () => {
+    const TOOL_WIRE_NAME_MAX_CHARS = 128;
+    const hasEdgeWhitespace = (v) => v.trim() !== v;
+    function isUsableWireName(v) {
+        return typeof v === "string" && v.length > 0 && v.length <= TOOL_WIRE_NAME_MAX_CHARS && !hasEdgeWhitespace(v);
+    }
+    return { isUsableWireName, TOOL_WIRE_NAME_MAX_CHARS, hasEdgeWhitespace };
+};

package/dist/headlessReconnectWire.js

@@ -53,7 +53,7 @@ export async function* withHeadlessR1Reconnect(live, deps) {
     let attempts = 0;
     let lastSeenSeq;
     const probe = deps.probeAlive ?? probeEngineAlive;
-    let isRecoverableTear;
+    let tearShape;
     const drains = createStreamDrainingLegs();
     let drainReopenAfterMs;
     let lastBreak;
@@ -62,6 +62,11 @@ export async function* withHeadlessR1Reconnect(live, deps) {
             registerRunNotFollowed(originalTearErr, fact);
         throw originalTearErr;
     };
+    const unboundHandle = (cause) => {
+        if (tearShape === 'transport')
+            throw originalTearErr;
+        return giveUp(mintRunNotFollowed(cause));
+    };
     const terminalFromRunRow = async (taskId) => {
         const row = await deps.getRun(taskId).catch(() => null);
         const terminal = terminalEventFromRunRow(row);
@@ -72,21 +77,21 @@ export async function* withHeadlessR1Reconnect(live, deps) {
     for (;;) {
         if (deps.signal?.aborted)
             throw originalTearErr;
-        if (isRecoverableTear === undefined)
-            isRecoverableTear = isSseIdleError(originalTearErr);
-        if (!isRecoverableTear)
+        if (tearShape === undefined)
+            tearShape = isSseIdleError(originalTearErr) ? 'idle' : guardedTransport(originalTearErr) ? 'transport' : 'other';
+        if (tearShape === 'other')
             throw originalTearErr;
         let handle;
         try {
             handle = deps.getTaskId();
         }
         catch {
-            return giveUp(mintRunNotFollowed('bad_input'));
+            return unboundHandle('bad_input');
         }
         if (handle === null || handle === undefined)
-            return giveUp(mintRunNotFollowed('no_run_id'));
+            return unboundHandle('no_run_id');
         if (typeof handle !== 'string' || handle === '')
-            return giveUp(mintRunNotFollowed('bad_input'));
+            return unboundHandle('bad_input');
         const taskId = handle;
         if (drainReopenAfterMs !== undefined) {
             const waitMs = drainReopenAfterMs;

package/dist/hitl/approvalAskers.d.ts

@@ -0,0 +1,13 @@
+export interface ApprovalAskReasonByHook {
+    readonly by: 'hook';
+    readonly cause: string;
+    readonly registration?: string;
+    readonly words?: string;
+}
+export interface ApprovalAskReasonByPolicy {
+    readonly by: string;
+    readonly words: string;
+}
+export type ApprovalAskReason = ApprovalAskReasonByHook | ApprovalAskReasonByPolicy;
+export declare function approvalAskReasonsOf(carrier: object | null | undefined): readonly ApprovalAskReason[] | undefined;
+export declare function approvalAgentIdOf(carrier: object | null | undefined): string | undefined;

package/dist/hitl/approvalAskers.js

@@ -0,0 +1,79 @@
+import { appendOwnElement } from '../ownKey.js';
+import { slotReadOf } from '../wireFailureShape.js';
+function ownNonEmptyText(o, key) {
+    const r = slotReadOf(o, key);
+    return r.presence === 'present' && typeof r.value === 'string' && r.value !== '' ? r.value : undefined;
+}
+function optionalText(o, key) {
+    const r = slotReadOf(o, key);
+    if (r.presence === 'absent')
+        return { state: 'absent' };
+    if (r.presence === 'present' && typeof r.value === 'string')
+        return { state: 'text', value: r.value };
+    return { state: 'bad' };
+}
+function askReasonOf(item) {
+    if (typeof item !== 'object' || item === null)
+        return undefined;
+    const by = ownNonEmptyText(item, 'by');
+    if (by === undefined)
+        return undefined;
+    const words = optionalText(item, 'words');
+    if (words.state === 'bad')
+        return undefined;
+    if (by === 'hook') {
+        const cause = ownNonEmptyText(item, 'cause');
+        if (cause === undefined)
+            return undefined;
+        const registration = optionalText(item, 'registration');
+        if (registration.state === 'bad')
+            return undefined;
+        return Object.freeze({
+            by: 'hook',
+            cause,
+            ...(registration.state === 'text' ? { registration: registration.value } : {}),
+            ...(words.state === 'text' ? { words: words.value } : {}),
+        });
+    }
+    if (words.state !== 'text')
+        return undefined;
+    return Object.freeze({ by, words: words.value });
+}
+export function approvalAskReasonsOf(carrier) {
+    try {
+        if (typeof carrier !== 'object' || carrier === null)
+            return undefined;
+        const slot = slotReadOf(carrier, 'askReasons');
+        if (slot.presence !== 'present')
+            return undefined;
+        const raw = slot.value;
+        if (typeof raw !== 'object' || raw === null || !Array.isArray(raw))
+            return undefined;
+        const len = slotReadOf(raw, 'length');
+        if (len.presence !== 'present' || typeof len.value !== 'number' || !Number.isSafeInteger(len.value) || len.value < 0)
+            return undefined;
+        const out = [];
+        for (let i = 0; i < len.value; i++) {
+            const el = slotReadOf(raw, String(i));
+            if (el.presence !== 'present')
+                return undefined;
+            const reason = askReasonOf(el.value);
+            if (reason !== undefined)
+                appendOwnElement(out, reason);
+        }
+        return out.length === 0 ? undefined : Object.freeze(out);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function approvalAgentIdOf(carrier) {
+    try {
+        if (typeof carrier !== 'object' || carrier === null)
+            return undefined;
+        return ownNonEmptyText(carrier, 'agentId');
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/hitl/approvalCardReasons.js

@@ -2,7 +2,9 @@ import { displayUntrusted } from '../displayUntrusted.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { approvalMandateDetail, askOriginNoteOf } from '../gateVocabulary.js';
 import { readAskOrigin, readOwnDataValue, guardedRead } from '../ownKey.js';
+import { elideMiddleForDisplay } from '../noticePresentation.js';
 import { allowRuleShadowSentence } from './allowRuleShadow.js';
+import { approvalUnreadableWhyWordOf } from './approvalRequestFrameReading.js';
 import { mandatedApprovalDetailOf } from './automaticAnswerVerdict.js';
 import { approvalBoundGrantsDetail, approvalIsMandated, approvalPriorCardsDetail, askProbeReasonDetail, classifierNoRulingDetail, readApprovalBoundGrants, readApprovalClassifierNoRuling, readApprovalMandate, readDenialLimitFallback, } from './toolApprovalWire.js';
 export const APPROVAL_CARD_REASON_SOURCES = Object.freeze([
@@ -21,8 +23,24 @@ export const APPROVAL_CARD_REASON_SOURCES = Object.freeze([
 ]);
 export const APPROVAL_CARD_REASONS_DEFAULT_MAX_LINES = 4;
 const MESSAGE_DISPLAY_MAX = 300;
-function payloadUnreadableDetail(lang) {
-    return renderMessage(msg('approval.card.payloadUnreadable'), lang);
+function engineMessageLine(engineMessage) {
+    const shown = displayUntrusted(engineMessage);
+    if (shown.length <= MESSAGE_DISPLAY_MAX)
+        return shown;
+    const settled = displayUntrusted(elideMiddleForDisplay(shown, MESSAGE_DISPLAY_MAX));
+    return settled.length <= MESSAGE_DISPLAY_MAX ? settled : displayUntrusted(engineMessage, { max: MESSAGE_DISPLAY_MAX });
+}
+function payloadUnreadableDetail(why, lang) {
+    switch (typeof why === 'string' ? approvalUnreadableWhyWordOf(why) : undefined) {
+        case 'version_unknown':
+            return renderMessage(msg('approval.card.payloadUnreadable.versionUnknown'), lang);
+        case 'kind_unknown':
+            return renderMessage(msg('approval.card.payloadUnreadable.partUnknown'), lang);
+        case 'unreadable_fields':
+            return renderMessage(msg('approval.card.payloadUnreadable.fieldsMalformed'), lang);
+        default:
+            return renderMessage(msg('approval.card.payloadUnreadable'), lang);
+    }
 }
 function moreDetail(n, lang) {
     return renderMessage(n === 1 ? msg('approval.card.more.one') : msg('approval.card.more.other', { count: n }), lang);
@@ -64,7 +82,7 @@ export function approvalCardReasons(card, opts, lang) {
     catch {
         denialLimitReadable = false;
     }
-    add('payload_unreadable', () => (ownData(card, 'cardPayloadUnreadable') === true ? payloadUnreadableDetail(lang) : undefined));
+    add('payload_unreadable', () => (ownData(card, 'cardPayloadUnreadable') === true ? payloadUnreadableDetail(ownData(card, 'cardPayloadUnreadableWhy'), lang) : undefined));
     add('prior_cards', () => approvalPriorCardsDetail(card, lang));
     add('message', () => {
         const engineMessage = ownData(card, 'message');
@@ -73,7 +91,7 @@ export function approvalCardReasons(card, opts, lang) {
         const tool = ownData(card, 'toolName');
         if (typeof tool === 'string' && engineMessage.trim() === `approval required for "${tool}"`)
             return undefined;
-        return displayUntrusted(engineMessage, { max: MESSAGE_DISPLAY_MAX });
+        return engineMessageLine(engineMessage);
     });
     add('mandated', () => (approvalIsMandated(card) ? mandatedApprovalDetailOf(card, lang) : undefined));
     add('mandate', () => {