@sema-agent/client-core 0.109.0 → 0.110.0

package/dist/peerFrames.js

@@ -1,4 +1,5 @@
-import { applyDisplayFace, PEER_NAME_FACE } from './displayUntrusted.js';
+import { applyDisplayFace, displayUntrusted, PEER_NAME_FACE } from './displayUntrusted.js';
+import { msg, renderMessage } from './i18n/translate.js';
 import { ownSnapshotRecord } from './ownKey.js';
 import { CORE_ENGINE_AUTHORITY_ENVELOPE_TAGS, CORE_PERMISSION_MODE_CLASSES } from './generated/engineFactTables.js';
 const WIRE_KEY_FROM = 'from';
@@ -12,6 +13,20 @@ const WIRE_KEY_AGENT_TYPE = 'agentType';
 const WIRE_KEY_AGENT_MESSAGE = 'agentMessage';
 const WIRE_KEY_CROSS_SESSION_MESSAGE = 'crossSessionMessage';
 const WIRE_KEY_CROSS_SESSION_NOTICE = 'crossSessionNotice';
+const WIRE_KEY_INBOX_NOTICE = 'inboxNotice';
+const WIRE_KEY_PENDING = 'pending';
+const WIRE_KEY_DELIVERED = 'delivered';
+const WIRE_KEY_URGENT = 'urgent';
+const WIRE_KEY_RESUPPLIED = 'resupplied';
+const WIRE_KEY_PEER_META = 'peerMeta';
+const WIRE_KEY_NOTICE = 'notice';
+const WIRE_KEY_STATE = 'state';
+const WIRE_KEY_REF_SEQ = 'refSeq';
+const WIRE_KEY_RECIPIENT = 'recipient';
+const WIRE_KEY_TARGET = 'target';
+const WIRE_KEY_DETAIL = 'detail';
+const WIRE_KEY_DROP_REASON = 'dropReason';
+const WIRE_KEY_FINISHED_AT = 'finishedAt';
 const WIRE_KEY_PROVENANCE = '_sema_provenance';
 const WIRE_KEY_FROM_SESSION = 'fromSession';
 const WIRE_KEY_FROM_NAME = 'fromName';
@@ -20,7 +35,7 @@ const WIRE_KEY_FROM_SCOPE = 'fromScope';
 const FROM_ATTR = WIRE_KEY_FROM;
 export const AGENT_MESSAGE_TAG = 'agent-message';
 export const CROSS_SESSION_MESSAGE_TAG = 'cross-session-message';
-export const PEER_FRAME_LANES = Object.freeze(['agent_message', 'cross_session_message', 'cross_session_notice']);
+export const PEER_FRAME_LANES = Object.freeze(['agent_message', 'cross_session_message', 'cross_session_notice', 'inbox_notice']);
 export const CROSS_SESSION_NOTICE_KINDS = Object.freeze(['delivery_notice', 'idle_notice']);
 export const PEER_MODE_CLASSES = CORE_PERMISSION_MODE_CLASSES;
 function dataProp(o, key) {
@@ -43,6 +58,40 @@ function nonEmptyString(v) {
 function finiteNumber(v) {
     return typeof v === 'number' && Number.isFinite(v) ? v : undefined;
 }
+function countOf(v) {
+    return typeof v === 'number' && Number.isSafeInteger(v) && v >= 0 ? v : undefined;
+}
+function shownLabel(v, max) {
+    if (typeof v !== 'string')
+        return undefined;
+    const s = displayUntrusted(v, { blanks: true, max });
+    return s.length > 0 ? s : undefined;
+}
+const NOTICE_LABEL_MAX = 64;
+const NOTICE_TEXT_MAX = 200;
+function peerNoticeOf(n) {
+    const notice = dataProp(dataProp(dataProp(n, WIRE_KEY_PROVENANCE), WIRE_KEY_PEER_META), WIRE_KEY_NOTICE);
+    if (notice === null || typeof notice !== 'object')
+        return undefined;
+    const state = nonEmptyString(dataProp(notice, WIRE_KEY_STATE));
+    if (state === undefined)
+        return undefined;
+    const recipient = shownLabel(dataProp(notice, WIRE_KEY_RECIPIENT), NOTICE_LABEL_MAX);
+    const target = shownLabel(dataProp(notice, WIRE_KEY_TARGET), NOTICE_LABEL_MAX);
+    const detail = shownLabel(dataProp(notice, WIRE_KEY_DETAIL), NOTICE_TEXT_MAX);
+    const dropReason = shownLabel(dataProp(notice, WIRE_KEY_DROP_REASON), NOTICE_TEXT_MAX);
+    const refSeq = countOf(dataProp(notice, WIRE_KEY_REF_SEQ));
+    const finishedAt = countOf(dataProp(notice, WIRE_KEY_FINISHED_AT));
+    return {
+        state,
+        ...(recipient !== undefined ? { recipient } : {}),
+        ...(target !== undefined ? { target } : {}),
+        ...(detail !== undefined ? { detail } : {}),
+        ...(dropReason !== undefined ? { dropReason } : {}),
+        ...(refSeq !== undefined ? { refSeq } : {}),
+        ...(finishedAt !== undefined ? { finishedAt } : {}),
+    };
+}
 function provenanceAgrees(n, lane, carrierFromRaw) {
     const prov = dataProp(n, WIRE_KEY_PROVENANCE);
     if (prov === null || typeof prov !== 'object')
@@ -112,7 +161,24 @@ export function classifyPeerNotification(raw) {
         const text = nonEmptyString(dataProp(crossSessionNotice, WIRE_KEY_TEXT));
         if (kind === undefined || text === undefined || !provenanceAgrees(n, 'cross_session_notice'))
             return null;
-        return { lane: 'cross_session_notice', kind, text };
+        const notice = peerNoticeOf(n);
+        return { lane: 'cross_session_notice', kind, text, ...(notice !== undefined ? { notice } : {}) };
+    }
+    const inboxNotice = dataProp(n, WIRE_KEY_INBOX_NOTICE);
+    if (inboxNotice !== undefined) {
+        const pending = countOf(dataProp(inboxNotice, WIRE_KEY_PENDING));
+        const delivered = countOf(dataProp(inboxNotice, WIRE_KEY_DELIVERED));
+        if (pending === undefined || delivered === undefined || !provenanceAgrees(n, 'inbox_notice'))
+            return null;
+        const urgent = countOf(dataProp(inboxNotice, WIRE_KEY_URGENT));
+        const resupplied = countOf(dataProp(inboxNotice, WIRE_KEY_RESUPPLIED));
+        return {
+            lane: 'inbox_notice',
+            pending,
+            delivered,
+            ...(urgent !== undefined ? { urgent } : {}),
+            ...(resupplied !== undefined ? { resupplied } : {}),
+        };
     }
     return null;
 }
@@ -140,9 +206,98 @@ function attr(v) {
 function unattr(v) {
     return v.replace(/&quot;/g, '"').replace(/&lt;/g, '<').replace(/&gt;/g, '>').replace(/&amp;/g, '&');
 }
+const DELIVERY_SENTENCE_KEYS = Object.freeze({
+    delivered: 'notice.sessionBox.delivery.delivered',
+    held: 'notice.sessionBox.delivery.held',
+    held_by_policy: 'notice.sessionBox.delivery.heldByPolicy',
+    denied: 'notice.sessionBox.delivery.denied',
+    refused: 'notice.sessionBox.delivery.refused',
+    expired: 'notice.sessionBox.delivery.expired',
+});
+const IDLE_SENTENCE_KEYS = Object.freeze({
+    exited: 'notice.sessionBox.idle.exited',
+    unavailable: 'notice.sessionBox.idle.unavailable',
+    expired: 'notice.sessionBox.idle.expired',
+});
+function sentenceKeyOf(table, word) {
+    return Object.hasOwn(table, word) ? table[word] : undefined;
+}
+function joinParts(parts, lang) {
+    return parts.join(lang === 'zh' ? '' : ' ');
+}
+function inboxLine(pending, urgent, resupplied, lang) {
+    const parts = [renderMessage(pending === 1 ? msg('notice.sessionBox.inbox.one') : msg('notice.sessionBox.inbox.many', { pending }), lang)];
+    if (urgent !== undefined)
+        parts.push(renderMessage(msg('notice.sessionBox.inbox.urgent', { urgent }), lang));
+    if (resupplied !== undefined)
+        parts.push(renderMessage(msg('notice.sessionBox.inbox.resupplied', { resupplied }), lang));
+    return joinParts(parts, lang);
+}
+export function sessionBoxNoticeSentence(facts, lang) {
+    try {
+        const noticeKind = dataProp(facts, 'noticeKind');
+        if (noticeKind === 'inbox') {
+            const pending = countOf(dataProp(facts, WIRE_KEY_PENDING));
+            if (pending === undefined)
+                return undefined;
+            return inboxLine(pending, countOf(dataProp(facts, WIRE_KEY_URGENT)), countOf(dataProp(facts, WIRE_KEY_RESUPPLIED)), lang);
+        }
+        if (noticeKind !== 'delivery' && noticeKind !== 'idle')
+            return undefined;
+        const state = nonEmptyString(dataProp(facts, WIRE_KEY_STATE));
+        if (state === undefined)
+            return undefined;
+        const label = shownLabel(dataProp(facts, 'peerLabel'), NOTICE_LABEL_MAX);
+        const detail = shownLabel(dataProp(facts, WIRE_KEY_DETAIL), NOTICE_TEXT_MAX);
+        const dropReason = shownLabel(dataProp(facts, WIRE_KEY_DROP_REASON), NOTICE_TEXT_MAX);
+        if (noticeKind === 'delivery') {
+            const peer = label ?? renderMessage(msg('notice.sessionBox.peer.another'), lang);
+            if (state === 'dropped')
+                return renderMessage(dropReason !== undefined ? msg('notice.sessionBox.delivery.dropped', { peer, reason: dropReason }) : msg('notice.sessionBox.delivery.droppedPlain', { peer }), lang);
+            return renderMessage(msg(sentenceKeyOf(DELIVERY_SENTENCE_KEYS, state) ?? 'notice.sessionBox.delivery.other', { peer }), lang);
+        }
+        const peer = label ?? renderMessage(msg('notice.sessionBox.peer.anotherStart'), lang);
+        if (state === 'idle')
+            return renderMessage(detail !== undefined ? msg('notice.sessionBox.idle.finishedDetail', { peer, detail }) : msg('notice.sessionBox.idle.finished', { peer }), lang);
+        return renderMessage(msg(sentenceKeyOf(IDLE_SENTENCE_KEYS, state) ?? 'notice.sessionBox.idle.other', { peer }), lang);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function sessionBoxNoticeOf(p) {
+    if (p.lane === 'inbox_notice') {
+        const facts = {
+            noticeKind: 'inbox',
+            pending: p.pending,
+            delivered: p.delivered,
+            ...(p.urgent !== undefined ? { urgent: p.urgent } : {}),
+            ...(p.resupplied !== undefined ? { resupplied: p.resupplied } : {}),
+        };
+        const text = sessionBoxNoticeSentence(facts);
+        return text === undefined ? undefined : { ...facts, text };
+    }
+    if (p.lane !== 'cross_session_notice' || p.notice === undefined)
+        return undefined;
+    const delivery = p.kind === 'delivery_notice';
+    const peerLabel = delivery ? (p.notice.recipient ?? p.notice.target) : (p.notice.target ?? p.notice.recipient);
+    const facts = {
+        noticeKind: delivery ? 'delivery' : 'idle',
+        state: p.notice.state,
+        ...(peerLabel !== undefined ? { peerLabel } : {}),
+        ...(p.notice.detail !== undefined ? { detail: p.notice.detail } : {}),
+        ...(p.notice.dropReason !== undefined ? { dropReason: p.notice.dropReason } : {}),
+        ...(p.notice.refSeq !== undefined ? { refSeq: p.notice.refSeq } : {}),
+        ...(p.notice.finishedAt !== undefined ? { finishedAt: p.notice.finishedAt } : {}),
+    };
+    const text = sessionBoxNoticeSentence(facts);
+    return text === undefined ? undefined : { ...facts, text };
+}
 export function renderPeerFrameTranscriptText(p) {
     if (p.lane === 'cross_session_notice')
         return escapeEnvelopeTag(CROSS_SESSION_MESSAGE_TAG, escapeEnvelopeTag(AGENT_MESSAGE_TAG, neutralizeAuthorityTags(p.text)));
+    if (p.lane === 'inbox_notice')
+        return inboxLine(p.pending, p.urgent, p.resupplied, undefined);
     if (p.lane === 'agent_message') {
         const body = escapeEnvelopeTag(AGENT_MESSAGE_TAG, neutralizeAuthorityTags(p.body));
         return `<${AGENT_MESSAGE_TAG} ${FROM_ATTR}="${attr(p.from)}">\n${body}\n</${AGENT_MESSAGE_TAG}>`;

package/dist/pluginHooksWire.d.ts

@@ -12,7 +12,7 @@ export declare const PLUGIN_HOOK_REASONS: readonly ["projected", "shell_event",
 export type PluginHookReason = (typeof PLUGIN_HOOK_REASONS)[number];
 export declare const PLUGIN_HOOK_EXCLUSION_REASONS: readonly ["workspace_untrusted", "governance_unreadable", "policy_disable_all", "startup_mode", "managed_plugins_only", "prompt_not_user_authored"];
 export type PluginHookExclusionReason = (typeof PLUGIN_HOOK_EXCLUSION_REASONS)[number];
-export declare const SETTINGS_HOOK_DROP_REASONS: readonly ["exec_form_unsupported", "mcp_tool_unsupported", "key_not_read", "source_not_authored"];
+export declare const SETTINGS_HOOK_DROP_REASONS: readonly ["exec_form_unsupported", "mcp_tool_unsupported", "key_not_read", "source_not_authored", "workspace_untrusted", "governance_unreadable", "policy_disable_all"];
 export type SettingsHookDropReason = (typeof SETTINGS_HOOK_DROP_REASONS)[number];
 export type HookSettingsSource = 'policySettings' | 'userSettings' | 'projectSettings' | 'localSettings' | 'flagSettings';
 export interface PluginHookKey {
@@ -196,6 +196,7 @@ export interface SettingsHooksLocalGroup<T> {
 export declare function settingsHooksKeptLocally<T>(plan: HooksWirePlan, event: string, group: SettingsHooksLocalGroup<T>, opts?: {
     readonly engineCompaction?: 'performed' | 'not_performed';
 }): readonly T[];
+export declare function pluginHooksKeptLocally<T>(plan: HooksWirePlan, pluginId: string, event: string, groupIndex: number, hooks: readonly T[]): readonly T[];
 export declare function pluginHookReasonText(reason: PluginHookReason): string;
 export declare function settingsHookDropText(reason: SettingsHookDropReason): string;
 export declare function pluginHookExecutorLabel(v: PluginHookVerdict): string;

package/dist/pluginHooksWire.js

@@ -1,5 +1,6 @@
 import { displayUntrusted } from './displayUntrusted.js';
 import { appendOwnElement, readOwnDataValue } from './ownKey.js';
+import { inSlotReadOf } from './wireFailureShape.js';
 import { msg, renderMessage } from './i18n/translate.js';
 import { SETTINGS_ENGINE_OWNED_HOOK_EVENTS } from './generated/settingsSchemaTables.js';
 import { HOOK_SETTINGS_SOURCE_TEXT, hooksEntryUnreadKeys, hooksGroupAuthoredSource, hooksGroupUnreadKeys, hooksKeyCoordinateText, hooksSalvageMaskOf, salvageSettingsHooksEntries, } from './settingsHooksSalvage.js';
@@ -40,7 +41,15 @@ export const PLUGIN_HOOK_EXCLUSION_REASONS = [
     'managed_plugins_only',
     'prompt_not_user_authored',
 ];
-export const SETTINGS_HOOK_DROP_REASONS = ['exec_form_unsupported', 'mcp_tool_unsupported', 'key_not_read', 'source_not_authored'];
+export const SETTINGS_HOOK_DROP_REASONS = [
+    'exec_form_unsupported',
+    'mcp_tool_unsupported',
+    'key_not_read',
+    'source_not_authored',
+    'workspace_untrusted',
+    'governance_unreadable',
+    'policy_disable_all',
+];
 export function hooksWirePlanShapeOf(v) {
     try {
         if (typeof v !== 'object' || v === null || Array.isArray(v))
@@ -729,6 +738,8 @@ function skipMatcherKey(matcher) {
     return matcher === undefined || matcher === null || matcher === '' || matcher === '*' ? 'null' : JSON.stringify(matcher);
 }
 export function settingsHooksKeptLocally(plan, event, group, opts) {
+    if (planClosedLocally(plan))
+        return [];
     let raw;
     try {
         raw = group?.hooks;
@@ -802,6 +813,42 @@ export function settingsHooksKeptLocally(plan, event, group, opts) {
         return hooks;
     }
 }
+function planClosedLocally(plan) {
+    if (typeof plan !== 'object' || plan === null)
+        return false;
+    let slot;
+    try {
+        slot = inSlotReadOf(plan, 'closedBy');
+    }
+    catch {
+        return true;
+    }
+    if (slot.state === 'absent')
+        return false;
+    if (slot.state !== 'present')
+        return true;
+    return slot.value !== null && slot.value !== undefined;
+}
+export function pluginHooksKeptLocally(plan, pluginId, event, groupIndex, hooks) {
+    if (planClosedLocally(plan))
+        return [];
+    if (!Array.isArray(hooks))
+        return hooks;
+    try {
+        let kept = null;
+        hooks.forEach((h, i) => {
+            const engineRuns = pluginHookVerdictOf(plan, pluginId, event, groupIndex, i)?.disposition === 'engine';
+            if (engineRuns)
+                kept ??= hooks.slice(0, i);
+            else if (kept !== null)
+                appendOwnElement(kept, h);
+        });
+        return kept ?? hooks;
+    }
+    catch {
+        return hooks;
+    }
+}
 function settingsRowBaseOf(v) {
     if (!isRecord(v))
         return undefined;
@@ -881,6 +928,9 @@ const DROP_TEXT = {
     mcp_tool_unsupported: 'MCP tool hooks are not supported by the engine',
     key_not_read: REASON_TEXT.key_not_read,
     source_not_authored: REASON_TEXT.source_not_authored,
+    workspace_untrusted: renderMessage(msg('config.hooks.plan.reason.closedUntrusted')),
+    governance_unreadable: renderMessage(msg('config.hooks.plan.reason.closedGovernanceUnreadable')),
+    policy_disable_all: renderMessage(msg('config.hooks.plan.reason.closedDisableAll')),
 };
 const SOURCE_TEXT = HOOK_SETTINGS_SOURCE_TEXT;
 export function pluginHookReasonText(reason) {
@@ -958,6 +1008,9 @@ function namedPathsOfRow(d) {
             return typeof d.event === 'string' && Number.isInteger(d.groupIndex) && d.groupIndex >= 0 ? [['hooks', d.event, d.groupIndex, 'source']] : [];
         case 'exec_form_unsupported':
         case 'mcp_tool_unsupported':
+        case 'workspace_untrusted':
+        case 'governance_unreadable':
+        case 'policy_disable_all':
             return [];
     }
 }
@@ -1009,6 +1062,8 @@ export function hooksNotRunNotice(plan) {
     for (const d of plan.settingsDropped) {
         if (!d.notRun)
             continue;
+        if (d.reason === 'workspace_untrusted' || d.reason === 'policy_disable_all')
+            continue;
         const named = d.reason === 'key_not_read' || d.reason === 'source_not_authored' ? namedPathsOfRow(d) : [];
         if (named.length > 0 && (d.reason === 'key_not_read' || d.reason === 'source_not_authored')) {
             const nk = `${d.source}\u0000${d.reason}`;

package/dist/replayBody.js

@@ -62,8 +62,16 @@ export function runRowSentenceOf(carrier) {
         return undefined;
     }
 }
+function isPlainObjectLike(v) {
+    try {
+        return typeof v === 'object' && v !== null && !Array.isArray(v);
+    }
+    catch {
+        return false;
+    }
+}
 export function doneResultView(result) {
-    if (typeof result !== 'object' || result === null || Array.isArray(result))
+    if (!isPlainObjectLike(result))
         return { replay: false, receipt: false, body: result };
     const replay = guarded(result, 'replay') === true;
     const engine = engineResultLayerOf(result);
@@ -80,7 +88,7 @@ export function doneResultView(result) {
     return { replay, receipt: true, body: Object.freeze(view) };
 }
 export function isReplayedTerminal(frame) {
-    if (frame === null || typeof frame !== 'object' || Array.isArray(frame))
+    if (!isPlainObjectLike(frame))
         return false;
     if (guarded(frame, 'type') !== 'done')
         return false;

package/dist/request/taskRequest.d.ts

@@ -179,5 +179,10 @@ export interface LiveDefaultsInput {
     mockScenarioKeys?: ReadonlySet<string>;
 }
 export declare function applyLiveRequestDefaults(req: TaskRequestLike, host: LiveDefaultsInput): TaskRequestLike;
+export interface LiveRequestDefaultsResult {
+    readonly request: TaskRequestLike;
+    readonly notices: readonly HostSettingNotice[];
+}
+export declare function applyLiveRequestDefaultsWithNotices(req: TaskRequestLike, host: LiveDefaultsInput): LiveRequestDefaultsResult;
 export type BuiltTaskRequest = TaskRequest;
 export declare function unregisteredRequestKeys(req: TaskRequestLike, lane: RequestLane): string[];

package/dist/request/taskRequest.js

@@ -8,9 +8,9 @@ import { PROJECT_MEMORY_DISABLED } from '../projectMemory.js';
 import { frameFamiliesJudgementOf } from '../approvalFrameFamilies.js';
 import { outputStyleSeatAdmitted } from '../outputStyleSeatCapability.js';
 import { refuseBadApprovalReach } from '../approvalReachWire.js';
-import { HOST_SUPPLIED_KEYS, UNWIRED_HOST_TURN_SETTINGS, buildHostTurnSettings, hostIntakeSnapshotOf, hostFileHistoryRestoreNotice, hostProjectionNotice, hostTurnSettingsOf, intersectHostHooks, rethrowHostResolvedDeferred, hostSettingsRefusedError, } from '../hostTurnSettings.js';
+import { HOST_SUPPLIED_KEYS, UNWIRED_HOST_TURN_SETTINGS, buildHostTurnSettings, hostIntakeSnapshotOf, hostFileHistoryRestoreNotice, hostProjectionNotice, hostStyleNotAppliedNotice, hostTurnSettingsOf, hookEnvNamesOf, intersectHostHooks, rethrowHostResolvedDeferred, hostSettingsRefusedError, } from '../hostTurnSettings.js';
 import { SUBMISSION_ORIGINS, SUBMISSION_SURFACES, SUBMISSION_TOOLS, submissionAxesOf, } from './submissionIdentity.js';
-import { withAssemblyRefusal } from '../wireFailureShape.js';
+import { slotReadOf, withAssemblyRefusal } from '../wireFailureShape.js';
 import { isPlainRecord, materializeJsonFaithful, shapeTag } from '../jsonFaithful.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
@@ -29,6 +29,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'mcpServers', lanes: ['interactive', 'print'], live: true, why: '本地 .mcp.json 投影;service 单用户门决定是否兑现', whyUtilityLane: '无座:MCP 服务挂的是工具,与零工具面矛盾' },
     { field: 'settings.webSearch', lanes: ['interactive', 'print'], live: true, why: 'SEMA_WEBSEARCH_* / settings.json;per-request 配置赢过部署 env', whyUtilityLane: '无座:联网检索是一只工具,与零工具面矛盾' },
     { field: 'settings.hooks', lanes: ['interactive', 'print'], live: true, why: '[495]① 用户 settings 文件 hooks 逐字上 wire', whyUtilityLane: '无座:hook 挂在工具门上(零工具面没有门),而且 side-channel 是壳自己的提交,不该继承用户那份 hook 表' },
+    { field: 'settings.env', lanes: ['interactive', 'print'], live: true, why: '交引擎执行的 http hook 头 `$NAME` 插值的那一层环境(服务端 `settings.env`:引擎 hook 环境 = 十二名基础名单 + 本键;同一份也进引擎命令 hook 与单用户宿主车道的会话 shell 环境 —— 服务端的设计)。两条用户车道都把 hooks 交给引擎执行 ⇒ 都有座,与 settings.hooks 同座。值只由宿主自供项入口按 hooks 那一行算出:名集 = 这一发请求体 hooks 里引擎点亮的事件下 http 条目 allowedEnvVars 之并 ∩ 宿主环境在场,值 = 环境原值,名集空 ⇒ 键缺席;不按凭据名预筛(凭据判官只在服务端:400 request.env_credential_refused)', whyUtilityLane: '无座:与 settings.hooks 同理由 —— side-channel 不带用户的 hook 表,就没有要插值的 http 头;带上它只会把宿主环境里的值交给一条零工具面的提交' },
     { field: 'settings.approvalFrameFamilies', lanes: ['interactive', 'print'], live: true, why: '这条运行的客户端渲得了哪些审批开卡帧族的**逐运行声明**(服务端提交体 `settings.approvalFrameFamilies`:词数组,值族闭集 tool_approval / approval_request;一条运行只在声明含服务端呈的那一族时才开审批卡,不含 ⇒ 问当场交无人值守政策口、不出卡)。两条用户车道都有审批腿(交互面出卡答人;`-p` 面交宿主的审批口),都得声明;🔴 只在能力读数 confirmed(受理位 `taskSettings.approvalFrameFamilies` 恒真 ∧ 值族位合格)时由装配口自己铸,老服务端(受理位缺席)对表外 settings 子键整条 400', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),没有门控调用、不会问审批 ⇒ 声明没有对象;带上它只会在不认识这一键的老服务端上给这条提交多一种 400' },
     { field: 'settings.<resolved>', lanes: ['interactive', 'print'], live: true, why: 'settings resolver 的 effective 快照(hooks/env/model + 已解析权限投影)。两条车道同源:交互面 replEntry / print 面 printModeEngine 各跑一遍同一个 resolver,产物经同一个 buildWireSettingsStamp 投影。开放集(子键不可枚举)⇒ unregisteredRequestKeys 放行本车道 settings 的**表外**子键,但表内异车道子键仍点名', whyUtilityLane: '无座:这一位是**开放集 spread**(子键原样即 wire 键),摊开的是用户 settings 的已解析面(权限 / env / 模型)。side-channel 是壳自己的提交:摊上去既无用(零工具面没有工具门求值权限)又把用户的配置面带进了一条他没参与的提交。🔴 无座 ⇒ 本车道整只快照不产。🔴 **本行无座的前提由构造期校验兜住**:剥掉的是用户显式的 deny / ask,所以 `refuseUtilityWithoutToolUnload` 强制这条车道必须带字面 `excludeAllTools: true` —— 否则产出会是一条「既没卸工具、又没带用户 deny」的请求(比无人值守车道同一份输入更宽)' },
     { field: 'repo', lanes: ['interactive', 'print'], live: true, why: 'scan/code-review 场景的仓库坐标(passthrough;server 是权威校验方,本层不铸第二判官)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
@@ -217,6 +218,7 @@ const SETTINGS_KEY_ROUTES = {
     webSearch: row('settings.webSearch'),
     ultracode: row('settings.ultracode'),
     hooks: row('settings.hooks'),
+    env: row('settings.env'),
     approvalFrameFamilies: row('settings.approvalFrameFamilies'),
     outputStyle: { via: 'always' },
 };
@@ -520,27 +522,59 @@ export function refilterHostSettings(request, fresh, lane) {
     const base = tight.request;
     const tightened = tight.tightened;
     const settings = base.settings;
-    if (!isPlainRecord(settings) || !Object.hasOwn(settings, 'hooks'))
+    if (!isPlainRecord(settings))
         return Object.freeze({ kind: 'send', request: base, hooksDropped: 0, tightened });
-    const disposition = intake.dispositions['settings.hooks'];
-    if (disposition === 'unwired')
-        return Object.freeze({ kind: 'send', request: base, hooksDropped: 0, tightened });
-    const now = intake.carried.hooks;
-    const sentHooks = settings.hooks;
-    if (!isPlainRecord(sentHooks))
-        return Object.freeze({ kind: 'refuse', notice: refuseNotice() });
-    const cut = intersectHostHooks(sentHooks, now);
-    if (!cut.judged)
-        return Object.freeze({ kind: 'refuse', notice: refuseNotice() });
-    if (cut.dropped === 0)
+    const unjudged = () => Object.freeze({ kind: 'refuse', notice: refuseNotice() });
+    let nextSettings = settings;
+    let hooksDropped = 0;
+    let finalHooks;
+    if (Object.hasOwn(settings, 'hooks')) {
+        const sentHooks = settings.hooks;
+        if (intake.dispositions['settings.hooks'] === 'unwired')
+            finalHooks = sentHooks;
+        else {
+            const now = intake.carried.hooks;
+            if (!isPlainRecord(sentHooks))
+                return unjudged();
+            const cut = intersectHostHooks(sentHooks, now);
+            if (!cut.judged)
+                return unjudged();
+            finalHooks = cut.hooks;
+            if (cut.dropped > 0) {
+                const { hooks: _sentHooks, ...restSettings } = settings;
+                void _sentHooks;
+                nextSettings = cut.hooks === undefined ? restSettings : { ...restSettings, hooks: cut.hooks };
+                hooksDropped = cut.dropped;
+            }
+        }
+    }
+    if (Object.hasOwn(nextSettings, 'env')) {
+        const sentEnv = nextSettings.env;
+        if (!isPlainRecord(sentEnv))
+            return unjudged();
+        let names;
+        try {
+            names = hookEnvNamesOf(finalHooks);
+        }
+        catch {
+            return unjudged();
+        }
+        const nowEnv = intake.carried.env;
+        const envUnwired = intake.dispositions['settings.env'] === 'unwired';
+        const sentKeys = Object.keys(sentEnv);
+        const kept = sentKeys.filter((k) => names.includes(k) && (envUnwired || (nowEnv !== undefined && Object.hasOwn(nowEnv, k))));
+        if (kept.length !== sentKeys.length) {
+            const { env: _sentEnv, ...restSettings } = nextSettings;
+            void _sentEnv;
+            nextSettings = kept.length === 0 ? restSettings : { ...restSettings, env: Object.fromEntries(kept.map((k) => [k, sentEnv[k]])) };
+        }
+    }
+    if (nextSettings === settings)
         return Object.freeze({ kind: 'send', request: base, hooksDropped: 0, tightened });
-    const { hooks: _sentHooks, ...restSettings } = settings;
-    void _sentHooks;
-    const nextSettings = cut.hooks === undefined ? restSettings : { ...restSettings, hooks: cut.hooks };
     const { settings: _sentSettings, ...restRequest } = base;
     void _sentSettings;
     const next = Object.keys(nextSettings).length > 0 ? { ...restRequest, settings: nextSettings } : restRequest;
-    return Object.freeze({ kind: 'send', request: next, hooksDropped: cut.dropped, tightened });
+    return Object.freeze({ kind: 'send', request: next, hooksDropped, tightened });
 }
 export const MEMORY_CAPTURE_OFF = 'off';
 export function memoryCaptureDeclarationField(declared) {
@@ -924,6 +958,7 @@ export function assembleTaskRequest(input, laneOrIdentity) {
         hooks: intake.carried.hooks,
         outputStyle: intake.carried.outputStyle,
         approvalFrameFamilies: approvalFamilies,
+        env: intake.carried.env,
     };
     refuseBadMemoryCapture(memoryCaptureIn);
     refuseBadMaxCostUsd(maxCostUsdIn);
@@ -1080,6 +1115,7 @@ export function assembleTaskRequest(input, laneOrIdentity) {
         ...(onSetting('webSearch') ? { webSearch: s.webSearch } : {}),
         ...(onSetting('ultracode') ? { ultracode: s.ultracode } : {}),
         ...(onSetting('hooks') ? { hooks: s.hooks } : {}),
+        ...(onSetting('env') ? { env: { ...s.env } } : {}),
         ...(s.outputStyle !== undefined ? { outputStyle: s.outputStyle } : {}),
         ...(onSetting('approvalFrameFamilies') ? { approvalFrameFamilies: [...(s.approvalFrameFamilies ?? [])] } : {}),
     };
@@ -1228,6 +1264,74 @@ export function thinkingTurnProjection(input) {
     return projectThinkingCore({ lane, latch, strength, floor, ultracodeStamped: seated && inPlay('settings.ultracode', ultracode) && ultracode === true });
 }
 export function applyLiveRequestDefaults(req, host) {
+    return liveRequestDefaultsOf(req, host).request;
+}
+export function applyLiveRequestDefaultsWithNotices(req, host) {
+    return liveRequestDefaultsOf(req, host);
+}
+const SELF_KNOWLEDGE_JOIN = '\n\n';
+const OUTPUT_STYLE_MAX_CHARS = 16384;
+function selfKnowledgeSeatOf(block, readBody) {
+    if (typeof block !== 'string')
+        return { kind: 'set', value: block };
+    let body;
+    const read = readBody();
+    if (read !== undefined) {
+        if (read.presence === 'unreadable')
+            return { kind: 'set', value: block, notice: hostStyleNotAppliedNotice('unreadable', OUTPUT_STYLE_MAX_CHARS) };
+        if (read.presence === 'present' && read.value !== undefined && read.value !== null) {
+            if (typeof read.value !== 'string')
+                return { kind: 'set', value: block, notice: hostStyleNotAppliedNotice('unreadable', OUTPUT_STYLE_MAX_CHARS) };
+            if (read.value.trim() !== '')
+                body = read.value;
+        }
+    }
+    if (body === undefined)
+        return { kind: 'set', value: block };
+    let merged;
+    let separable = false;
+    if (block.trim() === '' || body === block || body.startsWith(block + SELF_KNOWLEDGE_JOIN)) {
+        merged = body;
+    }
+    else if (block.endsWith(SELF_KNOWLEDGE_JOIN + body)) {
+        merged = block;
+    }
+    else {
+        merged = block + SELF_KNOWLEDGE_JOIN + body;
+        separable = true;
+    }
+    if (merged.length <= OUTPUT_STYLE_MAX_CHARS)
+        return { kind: 'set', value: merged };
+    const notice = hostStyleNotAppliedNotice('oversize', OUTPUT_STYLE_MAX_CHARS);
+    return separable && block.length <= OUTPUT_STYLE_MAX_CHARS ? { kind: 'set', value: block, notice } : { kind: 'omit', notice };
+}
+const styleBodyReadOf = (settings) => () => typeof settings === 'object' && settings !== null ? slotReadOf(settings, 'outputStyle') : undefined;
+const appendBodyReadOf = (req) => () => typeof req === 'object' && req !== null ? slotReadOf(req, 'appendSystemPrompt') : undefined;
+function settingsWithStyleSeat(settings, seat) {
+    const next = {};
+    const put = (key, value) => {
+        Object.defineProperty(next, key, { value, writable: true, enumerable: true, configurable: true });
+    };
+    const src = Object(settings);
+    let placed = false;
+    for (const key of Reflect.ownKeys(src)) {
+        const d = Object.getOwnPropertyDescriptor(src, key);
+        if (d === undefined || d.enumerable !== true)
+            continue;
+        if (key === 'outputStyle') {
+            if (seat.kind === 'set')
+                put(key, seat.value);
+            placed = true;
+            continue;
+        }
+        put(key, src[key]);
+    }
+    if (!placed && seat.kind === 'set')
+        put('outputStyle', seat.value);
+    return Reflect.ownKeys(next).length > 0 ? next : undefined;
+}
+function liveRequestDefaultsOf(req, host) {
+    const notices = [];
     const out = { ...req };
     if (out.cwd == null && host.cwd !== undefined)
         out.cwd = host.cwd;
@@ -1249,11 +1353,24 @@ export function applyLiveRequestDefaults(req, host) {
     }
     if (host.selfKnowledge !== undefined) {
         if (host.appendSystemPromptCapable) {
-            out.appendSystemPrompt = host.selfKnowledge.forAppend;
+            const seat = selfKnowledgeSeatOf(host.selfKnowledge.forAppend, appendBodyReadOf(req));
+            if (seat.notice !== undefined)
+                appendOwnElement(notices, seat.notice);
+            if (seat.kind === 'set')
+                out.appendSystemPrompt = seat.value;
+            else
+                delete out.appendSystemPrompt;
         }
         else {
             const settings = (out.settings ?? {});
-            out.settings = { ...settings, outputStyle: host.selfKnowledge.forOutputStyle };
+            const seat = selfKnowledgeSeatOf(host.selfKnowledge.forOutputStyle, styleBodyReadOf(settings));
+            if (seat.notice !== undefined)
+                appendOwnElement(notices, seat.notice);
+            const next = settingsWithStyleSeat(settings, seat);
+            if (next !== undefined)
+                out.settings = next;
+            else
+                delete out.settings;
         }
     }
     if (out.outputStyle === undefined && host.outputStyleSeat !== undefined && outputStyleSeatAdmitted(host.outputStyleSeatReading)) {
@@ -1276,7 +1393,7 @@ export function applyLiveRequestDefaults(req, host) {
         delete out.sessionId;
     }
     refuseRequireExistingWithoutSession(out.requireExistingSession, out.sessionId, 'applyLiveRequestDefaults');
-    return out;
+    return Object.freeze({ request: out, notices: Object.freeze(notices) });
 }
 export function unregisteredRequestKeys(req, lane) {
     const liveDefaults = liveDefaultKeyNames();

package/dist/resumeRefusalCopy.d.ts

@@ -43,12 +43,10 @@ export interface ParkedResumeStartupDetail {
     code: string;
     cause: ParkedResumeStartupCause;
     taskId?: string;
-    startupCause?: ResumeStartupCause | ResumeCauseCoreAhead;
+    startupCause?: ResumeStartupCause;
     resendable: false;
     denyStaysOpen: true;
 }
-declare const RESUME_CAUSE_CORE_AHEAD: readonly ["transcript_corrupt"];
-type ResumeCauseCoreAhead = Exclude<(typeof RESUME_CAUSE_CORE_AHEAD)[number], ResumeStartupCause>;
 export declare function parkedResumeStartupFromError(err: unknown, decision?: ParkedResumeStartupDecision): ParkedResumeStartupDetail | null;
 export declare function parkedResumeStartupContent(detail: ParkedResumeStartupDetail, lang?: UiLanguage): string;
 export interface CheckpointUnsupportedVersionDetail {

package/dist/resumeRefusalCopy.js

@@ -132,7 +132,6 @@ function parkedResumeStartupCauseWord(err) {
 function isResumeStartupCause(v) {
     return typeof v === 'string' && CORE_RESUME_STARTUP_CAUSES.includes(v);
 }
-const RESUME_CAUSE_CORE_AHEAD = Object.freeze(['transcript_corrupt']);
 const _startupCausePin = true;
 void _startupCausePin;
 export function parkedResumeStartupFromError(err, decision) {
@@ -349,3 +348,5 @@ export function refusedParkBlockedContent(taskId, lane = 'interactive', lang) {
         return renderMessage(msg('resume.refusal.park.blockedPrint', { run, cancel: `POST /v1/runs/${runId ?? '<run id>'}/cancel` }), lang);
     return renderMessage(msg('resume.refusal.park.blockedInteractive', { run }), lang);
 }
+const _pinRefusedPark = [true, true, true];
+void _pinRefusedPark;

package/dist/retryStatus.d.ts

@@ -1,3 +1,4 @@
+import type { BrainStatusPhase } from '@sema-agent/sdk';
 import type { UiLanguage } from './env/uiLanguage.js';
 export type RetryStatus = {
     kind: 'stalled';
@@ -62,7 +63,7 @@ interface RetryStatusErrorPayload {
     } | null;
 }
 export declare const BRAIN_STATUS_PHASES: readonly ["rate_limited", "retrying", "reconnecting", "circuit_open", "recovered", "gave_up", "waiting_first_token"];
-export type BrainStatusPhase = (typeof BRAIN_STATUS_PHASES)[number];
+export type { BrainStatusPhase };
 export type BrainRetryErrClass = 'connect_refused' | 'transport' | 'stall' | 'rate_limit' | 'server' | 'http' | 'output_cap';
 export interface BrainStatusPayload {
     phase: BrainStatusPhase | (string & {});
@@ -161,4 +162,3 @@ export interface ResultWayOut {
 }
 export declare function resultWayOutOf(frame: object | null | undefined): ResultWayOut | undefined;
 export declare function wayOutSentence(wayOut: ResultWayOut | null | undefined, lang?: UiLanguage): string | undefined;
-export {};

package/dist/retryStatus.js

@@ -11,6 +11,8 @@ export const BRAIN_STATUS_PHASES = [
     'gave_up',
     'waiting_first_token',
 ];
+const _brainStatusPhasePin = [true, true];
+void _brainStatusPhasePin;
 export const BRAIN_STATUS_WAIT_SEGMENTS = Object.freeze(['response_headers', 'first_token']);
 void true;
 void true;