@sema-agent/client-core 0.11.7 → 0.11.9

package/README.md

@@ -23,7 +23,9 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Scope
 
-- **Today (0.10.0)** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
+**Version:** 0.11.9
+
+- **Today** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
   B/D/E tool-card layers), the notification/caps/model families, the adapter kernel (stream driver
   + downstream projectors), the request-shaping surface **for both lanes** (interactive and the
   headless `-p` print lane), the fleet/panel projections and the subagent wire family, the workflow
@@ -39,9 +41,22 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Dependencies
 
-- **Zero runtime dependencies** (`"dependencies": {}`), `sideEffects: false`.
-- **Peer / type-only**: `@sema-agent/agent-types` owns the CC session vocabulary (today's only
-  import — `SDKMessage`, type-only), `@sema-agent/sdk` owns the wire contract.
+- **Runtime dependencies:** `diff` (jsdiff 9 — zero transitive deps, pure JS, browser-safe). It is
+  the T20 client-side hunk computation; core ruled that hunks belong to the client, so keeping it
+  out of this package would mean three re-implementations (TUI / web / desktop). The portability
+  guard pins the runtime dependency set with an *equality* check, so this list cannot drift.
+  `sideEffects: false`.
+- **Peers:**
+  - `@sema-agent/agent-types` — the CC session vocabulary (`SDKMessage` and friends). **Type-only**:
+    it ships no runtime code at all.
+  - `@sema-agent/sdk` — the wire contract. **Value-level, not type-only**: `AgentClient`,
+    `SseIdleError`, `probeHealth`, `APIError` and `TaskStopConflictError` are imported as values in
+    five modules, and the browser bundle really bundles the SDK through (the portability guard would
+    exit 3 rather than quietly mark it external).
+  - The declared floor is `>=0.1.9`, and it is *witnessed*: the guard checks that an actually
+    installed SDK at that line still exports every value-level symbol this package imports and still
+    declares `TaskStats.costMicroUsd` (the key `costOrNull` reads). A floor nobody ever ran is a
+    promise, not a contract.
 - The direction is constitutional: **sdk (wire) + agent-types (vocabulary) → this package**,
   and neither depends back.
 
@@ -181,13 +196,30 @@ both sides — what it records is why a compensation exists and when it can be d
 
 ```bash
 npm install
-node scripts/run-client-core-pure-test.mjs         # 1058 consumer-view checks (22 + 140 + 208 + 59 + 101 + 96 + 241 + 163 + 28); no CLI tree needed
-node scripts/run-client-core-portability-test.mjs  # 39 checks: kernel + A-layer + index closures, browser bundle
-node scripts/run-client-core-diff-test.mjs         # 1397 checks: differential + replay-id + ledger
+npm test   # = node scripts/run-client-core-all-gates.mjs — runs every suite below
 ```
 
+`npm test` is a **collecting** runner, not a `&&` chain: a suite that exits 3 (SKIP, its material is
+absent) does not short-circuit the ones after it, and the runner prints the three-part verdict
+itself (FAILED names + skipped names + arithmetic reconciliation). All-SKIP reports exit 3, never 0.
+
+| Suite | What it guards |
+|---|---|
+| `scripts/run-client-core-pure-test.mjs` | Consumer-view behaviour of every moved-in module; segment floors (B1–B8 + C) that only move up |
+| `scripts/run-client-core-portability-test.mjs` | Kernel / A-layer / index import closures, the runtime-dependency equality gate, barrel reachability, and a real esbuild `--platform=browser` bundle |
+| `scripts/run-client-core-diff-test.mjs` | Differential equivalence against the CLI reference bridge + replay-id invariant + ledger round-trip |
+| `scripts/run-seat-contract-keys-test.mjs` | The seat IPC contract: verb list ↔ SPEC ↔ types, element-wise |
+| `scripts/run-approval-frame-keys-test.mjs` | The tool-approval frame key mirror, element-wise against the SDK's runtime anchor |
+| `scripts/run-print-bash-iserror-test.mjs` | The print lane's Bash `is_error` authority (structured over regex) |
+| `scripts/run-sdk-floor-test.mjs` | The SDK version floor — and, more to the point, that the *installed* type declarations still carry the keys this package reads |
+| `scripts/run-engine-vocab-floor-test.mjs` | Engine-mirrored vocabularies (structured card whitelist, self-reported tool face, control verbs, recogniser sets) against the *installed* `@sema-agent/core` |
+| `scripts/run-public-surface-test.mjs` | The outward promises: the npm export surface baseline, the peer floor witness, and this README's claims |
+
 Each suite carries a floor that only moves up — a refactor that stops executing a group of
-assertions is a failure, not a quieter pass.
+assertions is a failure, not a quieter pass. Guards anchor on the **installed artefact's content**
+rather than on a version number, a directory name or a count: a version string can lie, a type
+declaration cannot, and a count has no discriminating power when the content changes but the
+cardinality does not.
 
 The portability guard walks the value-level import closure of the stream driver (asserting zero
 Node builtins, zero react, zero shell debug edge, closure size under its ceiling) and then really

package/dist/adapter/downstream/terminalToSdkResult.d.ts

@@ -49,9 +49,11 @@
  * timeout salvage:写出窗兑现的 r.result(非空)骑 additive `result` 字段——CC error 帧无
  * result,但把引擎已救回的最终文本静默丢弃对 -p 消费者是净损失。
  *
- * costUsd === 0 is AMBIGUOUS (free vs. no MODEL_COST_* configured): disambiguate
- * upstream via Capabilities.pricingConfigured (contract 02 §2.10 VERIFY); this
- * projector passes the number through verbatim.
+ * 成本取数 = `TaskStats.costMicroUsd`(整数 micro-USD 单轨,SDK 1.0.0 / server 1.319.0 /
+ * core 2.0.0 起;legacy float `costUsd` 已删,见 costOrNull 头注)。零成本 is AMBIGUOUS
+ * (free vs. no MODEL_COST_* configured): disambiguate upstream via
+ * Capabilities.pricingConfigured (contract 02 §2.10 VERIFY); this projector converts
+ * the integer to USD (/1e6) and passes it through verbatim otherwise.
  */
 import type { AgentEvent } from '@sema-agent/sdk';
 import { type SDKMessage, type EmitContext } from '../types.js';

package/dist/adapter/downstream/terminalToSdkResult.js

@@ -21,14 +21,41 @@ function elapsedMs(ctx) {
     return typeof ctx.startedAtMs === 'number' ? Math.max(0, Date.now() - ctx.startedAtMs) : 0;
 }
 /**
- * P1-5 — `total_cost_usd` truthfulness: `costUsd === 0` is AMBIGUOUS (free vs. no MODEL_COST_* configured
+ * micro-USD → USD。引擎账面的成本单位是 **micro-USD**(百万分之一美元,整数轨:1e6 micro = 1 USD;
+ * 整数是为了不吃 FP 漂移)。CC 的输出面字段 `total_cost_usd` / `costUSD` 单位是 **USD**(字段名即
+ * 单位),所以出口一律 `/1e6`。非有限值(NaN/Infinity)不上账 —— Infinity 比 undefined 更糟,它会被
+ * 当成真数字参与求和,把一条离谱账悄悄摊进总计(与 SDK `taskCostMicroUsd()` 的规约逐条同义;
+ * `mapModelUsage()` 里的 `costMicroUsd / 1e6` 是同一换算的既有用法,两处此后共用本函数)。
+ *
+ * 为什么不直接调 SDK 的 `taskCostMicroUsd()`:本文件在 `runStream` **可移植闭包**内,portability 门
+ * 对该闭包断言「值级外部包 = 空集」(EXPECTED_PACKAGES_KERNEL),值级 import SDK 会当场红。故就地
+ * 复刻规约,单一真源以 SDK 那份注释为准。
+ */
+function microUsdToUsd(micro) {
+    return typeof micro === 'number' && Number.isFinite(micro) ? micro / 1e6 : null;
+}
+/**
+ * P1-5 — `total_cost_usd` truthfulness: 成本 `0` is AMBIGUOUS (free vs. no MODEL_COST_* configured
  * on the worker — the local TOC engine ships unconfigured, so `-p --output-format json` was reporting a
  * fake `0`). Emit the number only when it is a REAL positive cost; otherwise `null` (JSON consumers see
  * "unknown", never a fabricated zero). CC's schema field is numeric — number-guarded readers
  * (replEntry cost fold) already treat non-number as absent.
+ *
+ * 🔴 键迁移([2006] cli 自查最重命中,2026-07-29):取数源从 legacy float `TaskStats.costUsd` 换成
+ * 整数 `TaskStats.costMicroUsd`。`costUsd` 已被 **core 2.0.0 / server 1.319.0 / SDK 1.0.0 同批删除**
+ * (发端、适配、类型三层),对 core 2.0.0+ 引擎该键恒 undefined ⇒ 本函数恒 null ⇒ `sema -p
+ * --output-format json` 的 `total_cost_usd` **恒 null**,而账其实一直在 `costMicroUsd` 上
+ * (本文件 `mapModelUsage()` 早就在读它 = 两代键并存的实锤)。devDep 此前钉 SDK `^0.1.7`(0.x 的 caret 是精确锁)
+ * ⇒ 类型层看到的还是「两轨都在」的旧声明,对 1.0.0 才报 TS2345 —— 校旧物的门抓不住这类断链,故
+ * 另有 `run-sdk-floor-test.mjs` 断言实装 SDK 地板 ≥ 1.1。
+ *
+ * 老引擎只发 float `costUsd` 时**不做兼容换算**:单轨之后读到 undefined(当场可见「不知道」)好过
+ * 把一笔来源可疑的账静默吸收成看起来正常的数字(SDK normalize.ts 的 BREAKING 留档同款裁定;
+ * 本仓 [clean-cut-no-legacy-compat])。
  */
-function costOrNull(costUsd) {
-    return typeof costUsd === 'number' && costUsd > 0 ? costUsd : null;
+function costOrNull(stats) {
+    const usd = microUsdToUsd(stats?.costMicroUsd);
+    return usd !== null && usd > 0 ? usd : null;
 }
 // 件2a(中断事故修复批 G,2026-07-15,症状2 第一环):参数放宽 TaskStats | undefined + 全链守卫。
 // 409 active-run 拒绝时引擎的 done 帧本体是 {status:'failed', errorMessage, activeTaskId} —— NO stats
@@ -51,7 +78,7 @@ function mapModelUsage(stats) {
             cacheReadInputTokens: num(m.cacheReadTokens),
             cacheCreationInputTokens: num(m.cacheWriteTokens),
             webSearchRequests: 0,
-            costUSD: num(m.costMicroUsd) / 1e6,
+            costUSD: microUsdToUsd(m.costMicroUsd) ?? 0, // ⇐ 与 costOrNull 同一个换算口(旧写法 num(...)/1e6 逐值等价)
             contextWindow: 0,
             maxOutputTokens: 0,
         };
@@ -79,7 +106,11 @@ export function doneToSdkResult(ev, ctx) {
         modelUsage = {
             [r.model]: {
                 ...usage,
-                costUSD: typeof stats?.costUsd === 'number' ? stats.costUsd : 0,
+                // 键迁移(见 costOrNull 头注):legacy float `costUsd` → 整数 `costMicroUsd`(/1e6 → USD)。
+                // ⚠️ 这一处**类型门抓不到**:TaskStats 带 `[key: string]: unknown` 开集索引,`typeof
+                // stats?.costUsd === 'number'` 的旧写法在 SDK 1.x 下照样编译得过,只是恒假 ⇒ 合成行的
+                // costUSD 静默恒 0(比报错更隐蔽)。tsc 只红了 6 处直传,这处靠人核。
+                costUSD: microUsdToUsd(stats?.costMicroUsd) ?? 0,
                 contextWindow: 0,
                 maxOutputTokens: 0,
             },
@@ -129,7 +160,7 @@ export function doneToSdkResult(ev, ctx) {
             is_error: true,
             num_turns: stats?.turns ?? 0,
             stop_reason: null,
-            total_cost_usd: costOrNull(stats?.costUsd), // P1-5: null when unknown, never a fake 0
+            total_cost_usd: costOrNull(stats), // P1-5: null when unknown, never a fake 0
             usage,
             modelUsage,
             permission_denials: [],
@@ -178,7 +209,7 @@ export function doneToSdkResult(ev, ctx) {
             is_error: true,
             num_turns: stats?.turns ?? 0,
             stop_reason: null,
-            total_cost_usd: costOrNull(stats?.costUsd),
+            total_cost_usd: costOrNull(stats),
             usage,
             modelUsage,
             permission_denials: [],
@@ -207,7 +238,7 @@ export function doneToSdkResult(ev, ctx) {
             is_error: true,
             num_turns: stats?.turns ?? 0,
             stop_reason: null,
-            total_cost_usd: costOrNull(stats?.costUsd),
+            total_cost_usd: costOrNull(stats),
             usage,
             modelUsage,
             permission_denials: [],
@@ -256,7 +287,7 @@ export function doneToSdkResult(ev, ctx) {
             is_error: true,
             num_turns: stats?.turns ?? 0, // 件2a 同款守卫 —— park 帧多数不带 stats,不炸
             stop_reason: null,
-            total_cost_usd: costOrNull(stats?.costUsd),
+            total_cost_usd: costOrNull(stats),
             usage,
             modelUsage,
             permission_denials: [],
@@ -280,7 +311,7 @@ export function doneToSdkResult(ev, ctx) {
             is_error: true,
             num_turns: stats?.turns ?? 0,
             stop_reason: null,
-            total_cost_usd: costOrNull(stats?.costUsd),
+            total_cost_usd: costOrNull(stats),
             usage,
             modelUsage,
             permission_denials: [],
@@ -308,7 +339,7 @@ export function doneToSdkResult(ev, ctx) {
         })(),
         ...degradedField,
         stop_reason: null, // dropped (contract 02 §2.10)
-        total_cost_usd: costOrNull(stats?.costUsd), // P1-5: costUsd===0 is "unconfigured pricing" → null, never a fake 0
+        total_cost_usd: costOrNull(stats), // P1-5: 零成本 = "unconfigured pricing" → null, never a fake 0
         usage,
         // MF-25/P1-5 — the per-model usage split (wire `stats.modelUsage`, or the synthesized current-model row).
         modelUsage,

package/dist/effortWire.js

@@ -19,15 +19,10 @@
  * is a ThinkingLevel (off|minimal|low|medium|high|xhigh|max); `auto` (let engine default), `ultracode` (a
  * separate mode, future slice), numeric and unset all OMIT — the engine then uses its own default.
  */
-const REASONING_EFFORTS = new Set([
-    'off',
-    'minimal',
-    'low',
-    'medium',
-    'high',
-    'xhigh',
-    'max',
-]);
+const REASONING_EFFORT_TUPLE = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
+const _effortPins = [true, true];
+void _effortPins;
+const REASONING_EFFORTS = new Set(REASONING_EFFORT_TUPLE);
 /**
  * Project a picked `EffortValue` (string level | number | undefined) → the wire `reasoningEffort`, or
  * undefined to OMIT. Returns the value verbatim iff it is a core ThinkingLevel; everything else (auto,

package/dist/fleet/fleetProjection.d.ts

@@ -130,6 +130,14 @@ export declare function deriveAgentLabel(agentType: string | undefined, agentNam
  *
  * 集合 = core `RESERVED_AGENT_NAMES`(subagent.ts)的 CC-parity PascalCase 形 + goal 模式的
  * `DeclareDone`。引擎 ≥ core 1.176 经 `canonicalToolName` 发 PascalCase。
+ *
+ * 🔴 [2006] A-CC-4(2026-07-29):此表此前**零门看守**,而 core 早已把子代委派工具改名成
+ *    `Agent`(`DEFAULT_SUBAGENT_TOOL_NAME`;`Task`/`Fork` 退成 `OLD_TO_NEW` 旧名,`Fork` 还进了
+ *    `TOMBSTONED_TOOLS`)。表里缺 `Agent` ⇒ 今天绝大多数 fleet 行的 description(引擎发的正是
+ *    canonical 形 `Agent`)**压制不掉**,控制面动词照样泄漏进行正文 —— 正是本函数存在的理由被
+ *    静默架空。看守从此是 engine-vocab 门对**实装 core** `RESERVED_AGENT_NAMES` 的等值门;
+ *    `Fork` 作为**登记旧名**保留(老引擎仍可能发;压制集多一个只多压制、不误伤真工具),
+ *    而"登记"本身要过门 —— 登记项必须是 core 认过的改名/墓碑词。
  */
 export declare const CONTROL_TOOL_VERBS: ReadonlySet<string>;
 /** 行的活动正文:控制面动词 ⇒ 空(187 从不显示它),否则原样。 */

package/dist/fleet/fleetProjection.js

@@ -82,8 +82,17 @@ export function deriveAgentLabel(agentType, agentName, name, id) {
  *
  * 集合 = core `RESERVED_AGENT_NAMES`(subagent.ts)的 CC-parity PascalCase 形 + goal 模式的
  * `DeclareDone`。引擎 ≥ core 1.176 经 `canonicalToolName` 发 PascalCase。
+ *
+ * 🔴 [2006] A-CC-4(2026-07-29):此表此前**零门看守**,而 core 早已把子代委派工具改名成
+ *    `Agent`(`DEFAULT_SUBAGENT_TOOL_NAME`;`Task`/`Fork` 退成 `OLD_TO_NEW` 旧名,`Fork` 还进了
+ *    `TOMBSTONED_TOOLS`)。表里缺 `Agent` ⇒ 今天绝大多数 fleet 行的 description(引擎发的正是
+ *    canonical 形 `Agent`)**压制不掉**,控制面动词照样泄漏进行正文 —— 正是本函数存在的理由被
+ *    静默架空。看守从此是 engine-vocab 门对**实装 core** `RESERVED_AGENT_NAMES` 的等值门;
+ *    `Fork` 作为**登记旧名**保留(老引擎仍可能发;压制集多一个只多压制、不误伤真工具),
+ *    而"登记"本身要过门 —— 登记项必须是 core 认过的改名/墓碑词。
  */
 export const CONTROL_TOOL_VERBS = new Set([
+    'Agent',
     'Task',
     'Fork',
     'StructuredOutput',

package/dist/headlessPermissionModeWire.d.ts

@@ -30,8 +30,6 @@ import { type PermissionMode, type PermissionModeField } from './permissionWireC
 import { type EnvLike } from './hostEnv.js';
 /** 部署旋钮 env 键名(settings.json env 块 → 1a-envseed → process.env 同车道)。 */
 export declare const HEADLESS_PERMISSION_MODE_ENV = "SEMA_HEADLESS_PERMISSION_MODE";
-/** wire 词表(permissionWireCaps.PermissionMode 的运行时镜像;大小写敏感——与 CC flag choices 一致)。
- *  'auto'(分类器批3,[907]):server ≥1.209 五模式表认;老 server coerce 未知词 → "default" 只紧不松。 */
 export declare const HEADLESS_PERMISSION_WIRE_MODES: readonly PermissionMode[];
 export type HeadlessPermissionResolution = {
     /** 直接展开进 TaskRequest 的字段({} = 不 stamp,现状 absent-mode)。 */

package/dist/headlessPermissionModeWire.js

@@ -32,13 +32,10 @@ import { hostEnv } from './hostEnv.js';
 export const HEADLESS_PERMISSION_MODE_ENV = 'SEMA_HEADLESS_PERMISSION_MODE';
 /** wire 词表(permissionWireCaps.PermissionMode 的运行时镜像;大小写敏感——与 CC flag choices 一致)。
  *  'auto'(分类器批3,[907]):server ≥1.209 五模式表认;老 server coerce 未知词 → "default" 只紧不松。 */
-export const HEADLESS_PERMISSION_WIRE_MODES = [
-    'default',
-    'plan',
-    'acceptEdits',
-    'bypassPermissions',
-    'auto',
-];
+const HEADLESS_PERMISSION_WIRE_MODE_TUPLE = ['default', 'plan', 'acceptEdits', 'bypassPermissions', 'auto'];
+const _headlessPermissionModePins = [true, true];
+void _headlessPermissionModePins;
+export const HEADLESS_PERMISSION_WIRE_MODES = HEADLESS_PERMISSION_WIRE_MODE_TUPLE;
 /**
  * argv 里的 `--permission-mode <v>` / `--permission-mode=<v>`(后者/后出现者赢,commander 同语义)与
  * `--dangerously-skip-permissions`(= bypassPermissions;`--permission-mode` 在场时让位)。

package/dist/seatContract.d.ts

@@ -255,23 +255,10 @@ export interface StartSessionOptions {
  * ComposerMode 加一档而宿主闭集门不认的那天,红在编译期而不是用户提交那一刻。
  */
 export type PermissionModeIntent = "default" | "plan" | "acceptEdits" | "bypassPermissions" | "auto";
-/** The closed set the inbound gate checks. CLOSED deliberately, unlike `outcome` above: this word
- *  ORIGINATES in our own renderer and goes OUT to a wire that 400s on anything else, so an unknown
- *  value is a local bug we want reported at the door — not an unknown future wire word we must
- *  tolerate. (The direction of travel is what decides open vs closed, not the field's shape.) */
 export declare const PERMISSION_MODE_INTENTS: readonly PermissionModeIntent[];
 /** Per-task attachment cap — the server's own limit (`attachmentIds` > 16 ⇒ 400). Gated here so the
  *  seat gets a precise local error instead of a wire 400 halfway through a turn. */
 export declare const ATTACHMENT_IDS_PER_TASK_CAP = 16;
-/** The per-turn `reasoningEffort` accept-set — core's ThinkingLevel tiers, re-exported from the
- *  package's own wire projection (`effortWire.ReasoningEffort`) rather than re-typed here.
- *
- *  CLOSED for the same reason `PERMISSION_MODE_INTENTS` is: the word ORIGINATES in our own composer
- *  and travels OUT to a wire that 400s (fail-loud) on an unknown tier — so an unknown value is a
- *  local bug we want reported at the seat's door, not a future wire word to tolerate. `ultracode` is
- *  deliberately NOT a tier here: in CC it is a standalone `settings.ultracode` preset boolean that
- *  COEXISTS with `xhigh` (see `SeatTurnSettings`), and folding it into this axis is exactly how the
- *  orchestration axis gets eaten by the reasoning axis. */
 export declare const SEAT_REASONING_EFFORTS: readonly ReasoningEffort[];
 /** The `settings` sub-object a seat turn may carry. A CLOSED set with its own name list + pin,
  *  exactly like the top-level request: `SEND_MESSAGE_REQUEST_KEYS` checks `keyof SendMessageRequest`

package/dist/seatContract.js

@@ -118,13 +118,14 @@ export const CHROME_EVENT_KINDS = [
  *  ORIGINATES in our own renderer and goes OUT to a wire that 400s on anything else, so an unknown
  *  value is a local bug we want reported at the door — not an unknown future wire word we must
  *  tolerate. (The direction of travel is what decides open vs closed, not the field's shape.) */
-export const PERMISSION_MODE_INTENTS = [
+const PERMISSION_MODE_INTENT_TUPLE = [
     "default",
     "plan",
     "acceptEdits",
     "bypassPermissions",
     "auto",
 ];
+export const PERMISSION_MODE_INTENTS = PERMISSION_MODE_INTENT_TUPLE;
 /** Per-task attachment cap — the server's own limit (`attachmentIds` > 16 ⇒ 400). Gated here so the
  *  seat gets a precise local error instead of a wire 400 halfway through a turn. */
 export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
@@ -137,7 +138,7 @@ export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
  *  deliberately NOT a tier here: in CC it is a standalone `settings.ultracode` preset boolean that
  *  COEXISTS with `xhigh` (see `SeatTurnSettings`), and folding it into this axis is exactly how the
  *  orchestration axis gets eaten by the reasoning axis. */
-export const SEAT_REASONING_EFFORTS = [
+const SEAT_REASONING_EFFORT_TUPLE = [
     "off",
     "minimal",
     "low",
@@ -146,6 +147,7 @@ export const SEAT_REASONING_EFFORTS = [
     "xhigh",
     "max",
 ];
+export const SEAT_REASONING_EFFORTS = SEAT_REASONING_EFFORT_TUPLE;
 export const SEAT_TURN_SETTINGS_KEYS = ["ultracode"];
 // ───────────────────────────── validators (CC dual-gate posture) ─────────────────────────────
 export function isLocalSessionRecord(s) {
@@ -423,5 +425,6 @@ const _seatContractPins = [
     true, true, true, true, true, true, true, true, true,
     true, true, true, true, true, true, true, true,
     true, true,
+    true, true, true, true,
 ];
 void _seatContractPins;

package/dist/toolResult.js

@@ -46,6 +46,11 @@ export const STRUCTURED_DETAIL_TYPES = new Set([
     'update',
     'bash',
     'notebook-edit',
+    // 🔴 [2006] A-CC-3(2026-07-29):`notebook` = Read 读 .ipynb 的投影卡(core RB-227,filePath +
+    //    projected cells)。此前本表漏它而 core 照发 `tool_end.structured` ⇒ `structuredDetailType()`
+    //    返 undefined ⇒ 那张卡退回**正则解模型面文本**([assert-absence-check-fallback-layers] 同族)。
+    //    看守从「size===30 计数钉」换成对**实装 core** `CC_DETAIL_TYPES` 的等值门(engine-vocab 门)。
+    'notebook',
     'text',
     'grep',
     'glob',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/client-core",
-  "version": "0.11.7",
+  "version": "0.11.9",
   "description": "Client-side session runtime shared by every sema human client (TUI / web / desktop): sema wire frames (AgentEvent) -> CC session vocabulary (SDKMessage) with dual-plane output (transcript/chrome), deterministic transcript ids, lane discipline as a type, and the notification/dedup ledgers. Every CC-skin shape is collected here so the wire itself stays neutral. Blackboard [1832] design axioms; [1651]/[1652]/[1653] signed seam design. Renamed from @sema-agent/wire-cc-adapter (0.1.x).",
   "license": "MIT",
   "type": "module",
@@ -20,6 +20,7 @@
   "sideEffects": false,
   "scripts": {
     "build": "tsc -p tsconfig.json",
+    "prepare": "npm run build",
     "test": "node scripts/run-client-core-all-gates.mjs"
   },
   "dependencies": {
@@ -27,11 +28,11 @@
   },
   "peerDependencies": {
     "@sema-agent/agent-types": ">=0.2.0",
-    "@sema-agent/sdk": ">=0.1.0"
+    "@sema-agent/sdk": ">=0.1.9"
   },
   "devDependencies": {
     "@sema-agent/agent-types": "^0.2.0",
-    "@sema-agent/sdk": "^0.1.7",
+    "@sema-agent/sdk": "^1.1.0",
     "esbuild": "^0.27.4",
     "typescript": "^6.0.2"
   }