@sema-agent/client-core 0.11.8 → 0.11.9

package/README.md

@@ -23,7 +23,9 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Scope
 
-- **Today (0.10.0)** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
+**Version:** 0.11.9
+
+- **Today** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
   B/D/E tool-card layers), the notification/caps/model families, the adapter kernel (stream driver
   + downstream projectors), the request-shaping surface **for both lanes** (interactive and the
   headless `-p` print lane), the fleet/panel projections and the subagent wire family, the workflow
@@ -39,9 +41,22 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Dependencies
 
-- **Zero runtime dependencies** (`"dependencies": {}`), `sideEffects: false`.
-- **Peer / type-only**: `@sema-agent/agent-types` owns the CC session vocabulary (today's only
-  import — `SDKMessage`, type-only), `@sema-agent/sdk` owns the wire contract.
+- **Runtime dependencies:** `diff` (jsdiff 9 — zero transitive deps, pure JS, browser-safe). It is
+  the T20 client-side hunk computation; core ruled that hunks belong to the client, so keeping it
+  out of this package would mean three re-implementations (TUI / web / desktop). The portability
+  guard pins the runtime dependency set with an *equality* check, so this list cannot drift.
+  `sideEffects: false`.
+- **Peers:**
+  - `@sema-agent/agent-types` — the CC session vocabulary (`SDKMessage` and friends). **Type-only**:
+    it ships no runtime code at all.
+  - `@sema-agent/sdk` — the wire contract. **Value-level, not type-only**: `AgentClient`,
+    `SseIdleError`, `probeHealth`, `APIError` and `TaskStopConflictError` are imported as values in
+    five modules, and the browser bundle really bundles the SDK through (the portability guard would
+    exit 3 rather than quietly mark it external).
+  - The declared floor is `>=0.1.9`, and it is *witnessed*: the guard checks that an actually
+    installed SDK at that line still exports every value-level symbol this package imports and still
+    declares `TaskStats.costMicroUsd` (the key `costOrNull` reads). A floor nobody ever ran is a
+    promise, not a contract.
 - The direction is constitutional: **sdk (wire) + agent-types (vocabulary) → this package**,
   and neither depends back.
 
@@ -181,13 +196,30 @@ both sides — what it records is why a compensation exists and when it can be d
 
 ```bash
 npm install
-node scripts/run-client-core-pure-test.mjs         # 1058 consumer-view checks (22 + 140 + 208 + 59 + 101 + 96 + 241 + 163 + 28); no CLI tree needed
-node scripts/run-client-core-portability-test.mjs  # 39 checks: kernel + A-layer + index closures, browser bundle
-node scripts/run-client-core-diff-test.mjs         # 1397 checks: differential + replay-id + ledger
+npm test   # = node scripts/run-client-core-all-gates.mjs — runs every suite below
 ```
 
+`npm test` is a **collecting** runner, not a `&&` chain: a suite that exits 3 (SKIP, its material is
+absent) does not short-circuit the ones after it, and the runner prints the three-part verdict
+itself (FAILED names + skipped names + arithmetic reconciliation). All-SKIP reports exit 3, never 0.
+
+| Suite | What it guards |
+|---|---|
+| `scripts/run-client-core-pure-test.mjs` | Consumer-view behaviour of every moved-in module; segment floors (B1–B8 + C) that only move up |
+| `scripts/run-client-core-portability-test.mjs` | Kernel / A-layer / index import closures, the runtime-dependency equality gate, barrel reachability, and a real esbuild `--platform=browser` bundle |
+| `scripts/run-client-core-diff-test.mjs` | Differential equivalence against the CLI reference bridge + replay-id invariant + ledger round-trip |
+| `scripts/run-seat-contract-keys-test.mjs` | The seat IPC contract: verb list ↔ SPEC ↔ types, element-wise |
+| `scripts/run-approval-frame-keys-test.mjs` | The tool-approval frame key mirror, element-wise against the SDK's runtime anchor |
+| `scripts/run-print-bash-iserror-test.mjs` | The print lane's Bash `is_error` authority (structured over regex) |
+| `scripts/run-sdk-floor-test.mjs` | The SDK version floor — and, more to the point, that the *installed* type declarations still carry the keys this package reads |
+| `scripts/run-engine-vocab-floor-test.mjs` | Engine-mirrored vocabularies (structured card whitelist, self-reported tool face, control verbs, recogniser sets) against the *installed* `@sema-agent/core` |
+| `scripts/run-public-surface-test.mjs` | The outward promises: the npm export surface baseline, the peer floor witness, and this README's claims |
+
 Each suite carries a floor that only moves up — a refactor that stops executing a group of
-assertions is a failure, not a quieter pass.
+assertions is a failure, not a quieter pass. Guards anchor on the **installed artefact's content**
+rather than on a version number, a directory name or a count: a version string can lie, a type
+declaration cannot, and a count has no discriminating power when the content changes but the
+cardinality does not.
 
 The portability guard walks the value-level import closure of the stream driver (asserting zero
 Node builtins, zero react, zero shell debug edge, closure size under its ceiling) and then really

package/dist/effortWire.js

@@ -19,15 +19,10 @@
  * is a ThinkingLevel (off|minimal|low|medium|high|xhigh|max); `auto` (let engine default), `ultracode` (a
  * separate mode, future slice), numeric and unset all OMIT — the engine then uses its own default.
  */
-const REASONING_EFFORTS = new Set([
-    'off',
-    'minimal',
-    'low',
-    'medium',
-    'high',
-    'xhigh',
-    'max',
-]);
+const REASONING_EFFORT_TUPLE = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'];
+const _effortPins = [true, true];
+void _effortPins;
+const REASONING_EFFORTS = new Set(REASONING_EFFORT_TUPLE);
 /**
  * Project a picked `EffortValue` (string level | number | undefined) → the wire `reasoningEffort`, or
  * undefined to OMIT. Returns the value verbatim iff it is a core ThinkingLevel; everything else (auto,

package/dist/fleet/fleetProjection.d.ts

@@ -130,6 +130,14 @@ export declare function deriveAgentLabel(agentType: string | undefined, agentNam
  *
  * 集合 = core `RESERVED_AGENT_NAMES`(subagent.ts)的 CC-parity PascalCase 形 + goal 模式的
  * `DeclareDone`。引擎 ≥ core 1.176 经 `canonicalToolName` 发 PascalCase。
+ *
+ * 🔴 [2006] A-CC-4(2026-07-29):此表此前**零门看守**,而 core 早已把子代委派工具改名成
+ *    `Agent`(`DEFAULT_SUBAGENT_TOOL_NAME`;`Task`/`Fork` 退成 `OLD_TO_NEW` 旧名,`Fork` 还进了
+ *    `TOMBSTONED_TOOLS`)。表里缺 `Agent` ⇒ 今天绝大多数 fleet 行的 description(引擎发的正是
+ *    canonical 形 `Agent`)**压制不掉**,控制面动词照样泄漏进行正文 —— 正是本函数存在的理由被
+ *    静默架空。看守从此是 engine-vocab 门对**实装 core** `RESERVED_AGENT_NAMES` 的等值门;
+ *    `Fork` 作为**登记旧名**保留(老引擎仍可能发;压制集多一个只多压制、不误伤真工具),
+ *    而"登记"本身要过门 —— 登记项必须是 core 认过的改名/墓碑词。
  */
 export declare const CONTROL_TOOL_VERBS: ReadonlySet<string>;
 /** 行的活动正文:控制面动词 ⇒ 空(187 从不显示它),否则原样。 */

package/dist/fleet/fleetProjection.js

@@ -82,8 +82,17 @@ export function deriveAgentLabel(agentType, agentName, name, id) {
  *
  * 集合 = core `RESERVED_AGENT_NAMES`(subagent.ts)的 CC-parity PascalCase 形 + goal 模式的
  * `DeclareDone`。引擎 ≥ core 1.176 经 `canonicalToolName` 发 PascalCase。
+ *
+ * 🔴 [2006] A-CC-4(2026-07-29):此表此前**零门看守**,而 core 早已把子代委派工具改名成
+ *    `Agent`(`DEFAULT_SUBAGENT_TOOL_NAME`;`Task`/`Fork` 退成 `OLD_TO_NEW` 旧名,`Fork` 还进了
+ *    `TOMBSTONED_TOOLS`)。表里缺 `Agent` ⇒ 今天绝大多数 fleet 行的 description(引擎发的正是
+ *    canonical 形 `Agent`)**压制不掉**,控制面动词照样泄漏进行正文 —— 正是本函数存在的理由被
+ *    静默架空。看守从此是 engine-vocab 门对**实装 core** `RESERVED_AGENT_NAMES` 的等值门;
+ *    `Fork` 作为**登记旧名**保留(老引擎仍可能发;压制集多一个只多压制、不误伤真工具),
+ *    而"登记"本身要过门 —— 登记项必须是 core 认过的改名/墓碑词。
  */
 export const CONTROL_TOOL_VERBS = new Set([
+    'Agent',
     'Task',
     'Fork',
     'StructuredOutput',

package/dist/headlessPermissionModeWire.d.ts

@@ -30,8 +30,6 @@ import { type PermissionMode, type PermissionModeField } from './permissionWireC
 import { type EnvLike } from './hostEnv.js';
 /** 部署旋钮 env 键名(settings.json env 块 → 1a-envseed → process.env 同车道)。 */
 export declare const HEADLESS_PERMISSION_MODE_ENV = "SEMA_HEADLESS_PERMISSION_MODE";
-/** wire 词表(permissionWireCaps.PermissionMode 的运行时镜像;大小写敏感——与 CC flag choices 一致)。
- *  'auto'(分类器批3,[907]):server ≥1.209 五模式表认;老 server coerce 未知词 → "default" 只紧不松。 */
 export declare const HEADLESS_PERMISSION_WIRE_MODES: readonly PermissionMode[];
 export type HeadlessPermissionResolution = {
     /** 直接展开进 TaskRequest 的字段({} = 不 stamp,现状 absent-mode)。 */

package/dist/headlessPermissionModeWire.js

@@ -32,13 +32,10 @@ import { hostEnv } from './hostEnv.js';
 export const HEADLESS_PERMISSION_MODE_ENV = 'SEMA_HEADLESS_PERMISSION_MODE';
 /** wire 词表(permissionWireCaps.PermissionMode 的运行时镜像;大小写敏感——与 CC flag choices 一致)。
  *  'auto'(分类器批3,[907]):server ≥1.209 五模式表认;老 server coerce 未知词 → "default" 只紧不松。 */
-export const HEADLESS_PERMISSION_WIRE_MODES = [
-    'default',
-    'plan',
-    'acceptEdits',
-    'bypassPermissions',
-    'auto',
-];
+const HEADLESS_PERMISSION_WIRE_MODE_TUPLE = ['default', 'plan', 'acceptEdits', 'bypassPermissions', 'auto'];
+const _headlessPermissionModePins = [true, true];
+void _headlessPermissionModePins;
+export const HEADLESS_PERMISSION_WIRE_MODES = HEADLESS_PERMISSION_WIRE_MODE_TUPLE;
 /**
  * argv 里的 `--permission-mode <v>` / `--permission-mode=<v>`(后者/后出现者赢,commander 同语义)与
  * `--dangerously-skip-permissions`(= bypassPermissions;`--permission-mode` 在场时让位)。

package/dist/seatContract.d.ts

@@ -255,23 +255,10 @@ export interface StartSessionOptions {
  * ComposerMode 加一档而宿主闭集门不认的那天,红在编译期而不是用户提交那一刻。
  */
 export type PermissionModeIntent = "default" | "plan" | "acceptEdits" | "bypassPermissions" | "auto";
-/** The closed set the inbound gate checks. CLOSED deliberately, unlike `outcome` above: this word
- *  ORIGINATES in our own renderer and goes OUT to a wire that 400s on anything else, so an unknown
- *  value is a local bug we want reported at the door — not an unknown future wire word we must
- *  tolerate. (The direction of travel is what decides open vs closed, not the field's shape.) */
 export declare const PERMISSION_MODE_INTENTS: readonly PermissionModeIntent[];
 /** Per-task attachment cap — the server's own limit (`attachmentIds` > 16 ⇒ 400). Gated here so the
  *  seat gets a precise local error instead of a wire 400 halfway through a turn. */
 export declare const ATTACHMENT_IDS_PER_TASK_CAP = 16;
-/** The per-turn `reasoningEffort` accept-set — core's ThinkingLevel tiers, re-exported from the
- *  package's own wire projection (`effortWire.ReasoningEffort`) rather than re-typed here.
- *
- *  CLOSED for the same reason `PERMISSION_MODE_INTENTS` is: the word ORIGINATES in our own composer
- *  and travels OUT to a wire that 400s (fail-loud) on an unknown tier — so an unknown value is a
- *  local bug we want reported at the seat's door, not a future wire word to tolerate. `ultracode` is
- *  deliberately NOT a tier here: in CC it is a standalone `settings.ultracode` preset boolean that
- *  COEXISTS with `xhigh` (see `SeatTurnSettings`), and folding it into this axis is exactly how the
- *  orchestration axis gets eaten by the reasoning axis. */
 export declare const SEAT_REASONING_EFFORTS: readonly ReasoningEffort[];
 /** The `settings` sub-object a seat turn may carry. A CLOSED set with its own name list + pin,
  *  exactly like the top-level request: `SEND_MESSAGE_REQUEST_KEYS` checks `keyof SendMessageRequest`

package/dist/seatContract.js

@@ -118,13 +118,14 @@ export const CHROME_EVENT_KINDS = [
  *  ORIGINATES in our own renderer and goes OUT to a wire that 400s on anything else, so an unknown
  *  value is a local bug we want reported at the door — not an unknown future wire word we must
  *  tolerate. (The direction of travel is what decides open vs closed, not the field's shape.) */
-export const PERMISSION_MODE_INTENTS = [
+const PERMISSION_MODE_INTENT_TUPLE = [
     "default",
     "plan",
     "acceptEdits",
     "bypassPermissions",
     "auto",
 ];
+export const PERMISSION_MODE_INTENTS = PERMISSION_MODE_INTENT_TUPLE;
 /** Per-task attachment cap — the server's own limit (`attachmentIds` > 16 ⇒ 400). Gated here so the
  *  seat gets a precise local error instead of a wire 400 halfway through a turn. */
 export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
@@ -137,7 +138,7 @@ export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
  *  deliberately NOT a tier here: in CC it is a standalone `settings.ultracode` preset boolean that
  *  COEXISTS with `xhigh` (see `SeatTurnSettings`), and folding it into this axis is exactly how the
  *  orchestration axis gets eaten by the reasoning axis. */
-export const SEAT_REASONING_EFFORTS = [
+const SEAT_REASONING_EFFORT_TUPLE = [
     "off",
     "minimal",
     "low",
@@ -146,6 +147,7 @@ export const SEAT_REASONING_EFFORTS = [
     "xhigh",
     "max",
 ];
+export const SEAT_REASONING_EFFORTS = SEAT_REASONING_EFFORT_TUPLE;
 export const SEAT_TURN_SETTINGS_KEYS = ["ultracode"];
 // ───────────────────────────── validators (CC dual-gate posture) ─────────────────────────────
 export function isLocalSessionRecord(s) {
@@ -423,5 +425,6 @@ const _seatContractPins = [
     true, true, true, true, true, true, true, true, true,
     true, true, true, true, true, true, true, true,
     true, true,
+    true, true, true, true,
 ];
 void _seatContractPins;

package/dist/toolResult.js

@@ -46,6 +46,11 @@ export const STRUCTURED_DETAIL_TYPES = new Set([
     'update',
     'bash',
     'notebook-edit',
+    // 🔴 [2006] A-CC-3(2026-07-29):`notebook` = Read 读 .ipynb 的投影卡(core RB-227,filePath +
+    //    projected cells)。此前本表漏它而 core 照发 `tool_end.structured` ⇒ `structuredDetailType()`
+    //    返 undefined ⇒ 那张卡退回**正则解模型面文本**([assert-absence-check-fallback-layers] 同族)。
+    //    看守从「size===30 计数钉」换成对**实装 core** `CC_DETAIL_TYPES` 的等值门(engine-vocab 门)。
+    'notebook',
     'text',
     'grep',
     'glob',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/client-core",
-  "version": "0.11.8",
+  "version": "0.11.9",
   "description": "Client-side session runtime shared by every sema human client (TUI / web / desktop): sema wire frames (AgentEvent) -> CC session vocabulary (SDKMessage) with dual-plane output (transcript/chrome), deterministic transcript ids, lane discipline as a type, and the notification/dedup ledgers. Every CC-skin shape is collected here so the wire itself stays neutral. Blackboard [1832] design axioms; [1651]/[1652]/[1653] signed seam design. Renamed from @sema-agent/wire-cc-adapter (0.1.x).",
   "license": "MIT",
   "type": "module",
@@ -20,6 +20,7 @@
   "sideEffects": false,
   "scripts": {
     "build": "tsc -p tsconfig.json",
+    "prepare": "npm run build",
     "test": "node scripts/run-client-core-all-gates.mjs"
   },
   "dependencies": {
@@ -27,7 +28,7 @@
   },
   "peerDependencies": {
     "@sema-agent/agent-types": ">=0.2.0",
-    "@sema-agent/sdk": ">=0.1.0"
+    "@sema-agent/sdk": ">=0.1.9"
   },
   "devDependencies": {
     "@sema-agent/agent-types": "^0.2.0",