@sema-agent/client-core 0.111.0 → 0.112.1

package/dist/i18n/messages.zh.js

@@ -211,6 +211,20 @@ const ZH = {
     'onboard.plan.envNotObject': '设置文件里的 "env" 不是对象 —— 不改写它。',
     'onboard.plan.envCatalogPresent': '引擎正按环境变量供模型 "{model}",目录里没有启用的模型;写下第一条目录模型会替换掉环境里的那几只。请先把它们放进目录。',
     'onboard.input.keyInFields': '模型 ID / 根地址里含着 API 钥匙 —— 请检查这几栏。',
+    'model.pool.add.duplicate': '「{model}」在这一批里以同一个地址出现了两次 —— 只加一次。',
+    'model.pool.add.probeFailed': '供应商拒绝了「{model}」(钥匙、模型名或应答格式不对)—— 改好后再核对一次。',
+    'model.pool.add.probeUnverified': '「{model}」还没跟供应商核对过(或核对没做完)—— 请再核对一次,或按「未验证」保存。',
+    'model.pool.add.pinMoved': '保存「{name}」时模型列表被改了(它的名字或存的钥匙变了)—— 什么都没加。请再试一次。',
+    'model.pool.notFound': '模型列表里没有叫「{name}」的模型。',
+    'model.pool.importEnv.notYet': '引擎正在用环境设置里的「{model}」。本应用暂时还不能把环境模型复制进模型列表 —— 请先手动把它们加进来(地址和钥匙),再加别的。',
+    'model.pool.tier.badGroup': '档位组名要以字母或数字开头,只能用字母、数字、「.」「_」「-」。',
+    'model.pool.tier.noGroup': '没有叫「{group}」的档位组。',
+    'model.pool.tier.groupExists': '已经有叫「{group}」的档位组了。',
+    'model.pool.channel.badPick': '在本应用从那个来源读到的内容里找不到选中的档案或模型。',
+    'model.pool.discover.status': '拉模型列表的请求答了 HTTP {status}。',
+    'model.pool.discover.notList': '端点没有答一份模型列表。',
+    'model.pool.discover.timeout': '拉模型列表的请求超时了。',
+    'model.pool.discover.unreachable': '连不上端点:{cause}',
     'onboard.refusal.input': '模型接入信息不全或形状不对 —— 什么都没保存。',
     'onboard.refusal.probeFailed': '供应商没有接受这套配置 —— 什么都没保存。',
     'onboard.refusal.probeUnverified': '查不了供应商,所以什么都没保存 —— 请重试,或按「未验证」保存。',
@@ -291,6 +305,7 @@ const ZH = {
     'approval.rowUnresumable.askNotSurfaced': '这条待决行(任务 {taskId})这台引擎续不了,所以没有呈成可作答的卡:{sentence}',
     'approval.park.stillParked': '{gate} 这道门没能作答:{reason} —— 这一跑仍停在这条审批上。',
     'approval.park.refusedNotResumable': '{gate} 这道门没能作答:{reason} —— 这台引擎目前续不了这条审批;若这一跑仍停着,请取消它。',
+    'approval.park.newerWorker': '{gate} 这道门没能作答:{reason} —— 这一跑仍停在这条审批上,但{wayOut}。',
     'approval.park.resume.card': '{gate} 这道门没能作答:{reason} —— 这一跑仍停在这条审批上:卡再次出现时在卡上决,或取消这一跑。',
     'approval.park.resume.speak': '{gate} 这道门没能作答:{reason} —— 这一跑仍停在这条审批上:发一句话把这张卡重新打开,再在卡上决,或取消这一跑。',
     'approval.park.argsFromModelCall': '这条待决审批的记录里没有将执行的工具入参,下面显示的是对话里模型的原始调用 —— 若它在那之后被改写过(例如被钩子),实际执行的会与所见不同。这张卡不接受编辑后批准:所见入参不是将执行的那一份',
@@ -433,6 +448,9 @@ const ZH = {
     'resume.refusal.park.printHolds': '{head}{configMayReturn}parked 的那条 run 仍占着这个会话({code}):请取消它({cancel}),再把这项工作作为新任务重新提交。{blocked}',
     'resume.refusal.park.interactiveEnded': '{head}引擎已结束那条 parked 的 run,所以这段对话空出来了:请把这项工作作为新消息重新发一次。',
     'resume.refusal.park.interactiveBusy': '{head}{configMayReturn}parked 的那条 run 会一直占着这段对话,直到它被取消。',
+    'resume.refusal.park.whyNewerEngine': '它是由比这一版更新的引擎版本 parked 的',
+    'resume.refusal.park.interactiveNewerWorker': '{head}{configMayReturn}parked 的那条 run 仍占着这段对话,但{wayOut}。',
+    'resume.refusal.park.printNewerWorker': '{head}{configMayReturn}parked 的那条 run 仍占着这个会话({code}),但{wayOut}({cancel})。{blocked}',
     'resume.refusal.park.blockedPrint': 'sema 不会自己把 run {run} 的卡放回屏幕:这一版引擎拒绝续跑它。请取消这条 run({cancel}),再把这项工作作为新任务重新提交。',
     'resume.refusal.park.blockedInteractive': 'sema 不会自己把 run {run} 的卡放回屏幕:这一版引擎拒绝续跑它。要空出这段对话,请发一条消息 —— sema 随后会提出取消那条 run(若卡反而回来了,先作答),之后你就可以把这项工作作为新消息重新发一次。',
     'session.selfHeal.wayOut.interactive': '运行 /clear,在全新会话里继续工作',
@@ -687,6 +705,21 @@ const ZH = {
     'session.hostSettings.styleSafeMode': '安全模式已开启,设置里的输出风格不套用。',
     'session.hostSettings.styleOversize': '你的输出风格这一次请求没有套用:加上内置的产品背景说明后超过了 {limit} 个字符的上限。请缩短风格正文后再用。',
     'session.hostSettings.styleUnreadable': '输出风格的正文读不成文本,这一次请求不套用它。',
+    'session.hostSettings.allowKept.managed.inProgress.one': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到(sema 会继续拉取;收到后 allow 规则就会生效)。请等它收到后再运行一次(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.managed.inProgress.other': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到(sema 会继续拉取;收到后 allow 规则就会生效)。请等它收到后再运行一次(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.managed.failed.one': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到(这一次运行不会再拉取;下一次运行会重试)。请再运行一次以重新拉取(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.managed.failed.other': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到(这一次运行不会再拉取;下一次运行会重试)。请再运行一次以重新拉取(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.managed.unknown.one': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到。请等它收到后再运行一次(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.managed.unknown.other': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是你账号的托管策略还没有收到。请等它收到后再运行一次(deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.generic.one': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是{why};设置文件里的 allow 规则只有在设置读取没有任何问题时才会发出。请先修好报告的设置,再运行一次(这次读取里的 deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.generic.other': '这一次运行有 {held} 条 permissions.allow 规则没有发给引擎,原因是{why};设置文件里的 allow 规则只有在设置读取没有任何问题时才会发出。请先修好报告的设置,再运行一次(这次读取里的 deny 与 ask 规则,以及用 --allowedTools 给的规则,仍然照常发出)。',
+    'session.hostSettings.allowKept.why.problems': '设置读取报告了问题',
+    'session.hostSettings.allowKept.why.problemsWhere': '设置读取报告了问题({where})',
+    'session.hostSettings.allowKept.why.counted.one': '设置读取报告了 {count} 个问题',
+    'session.hostSettings.allowKept.why.counted.other': '设置读取报告了 {count} 个问题',
+    'session.hostSettings.allowKept.why.countedWhere.one': '设置读取报告了 {count} 个问题({where})',
+    'session.hostSettings.allowKept.why.countedWhere.other': '设置读取报告了 {count} 个问题({where})',
+    'session.hostSettings.allowKept.why.unreadable': '没法检查这一次设置读取是否健康',
     'model.identity.lane.processEnv': '本客户端启动时的环境',
     'model.identity.lane.settingsEnv': '本客户端的设置文件',
     'model.identity.lane.modelCatalogFile': '本地模型目录文件',
@@ -698,6 +731,24 @@ const ZH = {
     'model.identity.catalogAdoption.refused': '{lane}里列了模型,但据报引擎会把这份目录按现状整个拒掉,所以其中任何一个都当不了缺省模型',
     'model.identity.catalogAdoption.notResolvable': '本机引擎没有配置可用来启动的模型名 —— {clause},而且引擎没有模型名就不会启动',
     'model.identity.catalogAdoption.notResolvableWithPartial': '本机引擎没有配置可用来启动的模型名 —— {clause};另外{partial},而且引擎没有模型名就不会启动',
+    'model.configGap.head.model': '还没有配置模型',
+    'model.configGap.head.gatewayUrl': '没有配置模型网关地址',
+    'model.configGap.head.apiKey': '没有配置 API 钥匙',
+    'model.configGap.head.anthropicKey': '没有配置 Anthropic 钥匙(ANTHROPIC_API_KEY 或 ANTHROPIC_AUTH_TOKEN)',
+    'model.configGap.head.incomplete': '模型配置不完整',
+    'model.configGap.item.model': '模型名(MODEL_ID)',
+    'model.configGap.item.gatewayUrl': '网关地址(MODEL_GATEWAY_BASEURL)',
+    'model.configGap.item.apiKey': '钥匙(MODEL_API_KEY)',
+    'model.configGap.item.anthropicKey': '用于 Anthropic 的钥匙(ANTHROPIC_API_KEY 或 ANTHROPIC_AUTH_TOKEN)',
+    'model.configGap.lead.one': '{a}还没有配置',
+    'model.configGap.lead.two': '{a}和{b}都还没有配置',
+    'model.configGap.lead.three': '{a}、{b}和{c}都还没有配置',
+    'model.configGap.reason.noModel': '没有模型名,引擎就不会启动',
+    'model.configGap.reason.anthropicCatalog.one': '模型目录里唯一启用的条目走 anthropic 通道,所以引擎无法使用它',
+    'model.configGap.reason.anthropicCatalog.other': '模型目录里启用的 {count} 个条目都走 anthropic 通道,所以引擎一个也用不了',
+    'model.configGap.reason.gatewayCatalog.one': '模型目录里唯一启用的条目没有自己的根地址,所以引擎无法使用它',
+    'model.configGap.reason.gatewayCatalog.other': '模型目录里启用的 {count} 个条目都没有自己的根地址,所以引擎一个也用不了',
+    'model.configGap.detail.withReason': '{missing} —— {reason}',
     'notice.injectionLane.sentence': '在这台引擎的 {lane} 车道上,工具跑在与引擎不同的机器上,所以随任务发送的{items}也在那里运行、而不是在本机 —— 依赖本机程序或凭据的会在那里失败',
     'notice.injectionLane.item.stdioMcp': '本机 stdio MCP 服务器',
     'notice.injectionLane.item.credentialedMcp': '使用本机凭据的 MCP 服务器',
@@ -1344,6 +1395,77 @@ const ZH = {
     'config.mods.session.unarmed': '这个对话在当前引擎上运行过之后，这里会显示 mod',
     'config.hooks.roster.unreadable': '读不出这个对话的 hooks 计划',
     'config.hooks.roster.unarmed': '这个应用打开这个对话之后，这里会显示 hooks',
+    'config.localConfig.refused.invalidRequest': '这次改动读不成有效的请求 —— 什么都没保存。',
+    'config.localConfig.refused.scopeUnreadable': '配置文件读不出,所以没有覆盖它 —— 什么都没保存。',
+    'config.localConfig.refused.scopeUnwritable': '这项设置不能存进那个文件 —— 存进去也不会生效。什么都没保存。',
+    'config.localConfig.refused.untrustedFolder': '这个文件夹未被信任,它的设置文件带不了这项设置 —— 什么都没保存。',
+    'config.localConfig.refused.policyDenied': '组织的托管设置不允许这次改动 —— 什么都没保存。',
+    'config.localConfig.refused.notFound': '要改的那一项不存在 —— 什么都没保存。',
+    'config.localConfig.refused.alreadyExists': '那一项已经存在 —— 什么都没保存。',
+    'config.localConfig.refused.lockBusy': '另一个程序正在改这份配置 —— 什么都没保存。请稍后再试。',
+    'config.localConfig.refused.lockFailed': '拿不到这份配置文件的写锁(权限或目录问题)—— 文件没有改动。',
+    'config.localConfig.refused.changedDuringWrite': '保存时这份配置被别的程序改了 —— 什么都没保存。请再试一次。',
+    'config.localConfig.refused.writeFailed': '配置文件写不进去 —— 文件没有改动。',
+    'config.localConfig.refused.notWritten': '这次改动没有保存。',
+    'config.localConfig.refused.skillLockedByHigherLayer': '更高优先级的配置定了这个技能的状态;这里改不了。',
+    'config.localConfig.refused.skillManagedByPlugin': '插件技能随插件管理,不在这里改。',
+    'config.localConfig.refused.skillLockedByAuthor': '这个技能自己的文件关掉了模型调用;它的状态在这里改不了。',
+    'config.localConfig.refused.skillNameUnstorable': '设置里存不下这个技能的名字;给它的文件夹或文件改个名再来配置。',
+    'config.localConfig.refused.entryInUse': '这个模型还在被使用(作缺省模型、被某个角色指着,或在旧档位设置里)—— 先把它们改指别的模型。什么都没保存。',
+    'config.localConfig.refused.credentialUnpaired': '这个模型用它现有的钥匙或地址连不上 —— 什么都没保存。',
+    'config.localConfig.refused.envCatalogPresent': '引擎正在用环境里设的模型;在这里加一条会让那几只退出使用。请先导入环境模型 —— 什么都没保存。',
+    'config.localConfig.refused.probeFailed': '供应商表明这次改动里有模型配错了(钥匙、模型名或应答格式)—— 什么都没保存。',
+    'config.localConfig.refused.probeUnverified': '这次改动里有模型还没跟供应商核对过(或核对没做完)—— 什么都没保存。请再核对一次,或按「未验证」保存。',
+    'config.localConfig.unavailable.engineIsRemote': '正在用 Cloud 引擎 —— 本机配置对它不起作用。请先切回本机引擎。',
+    'config.localConfig.unavailable.notSingleUser': '无法确认这台引擎只为你一个人服务,所以不对它使用本机配置。',
+    'config.localConfig.unavailable.configHomeUnpinned': '应用还没有确定用哪个配置目录,所以本机配置既不显示也不修改。',
+    'config.localConfig.unavailable.domainNotHosted': '这台设备上的应用暂时还不提供这类配置修改。',
+    'config.localConfig.unknown.commitUnconfirmed': '不确定这次改动有没有保存 —— 请刷新核对。',
+    'config.localConfig.unknown.reportUnreadable': '保存后应用的回答读不懂,不确定这次改动有没有保存 —— 请刷新核对。',
+    'config.localConfig.applied.nextTurn': '已保存。从下一轮起生效。',
+    'config.localConfig.applied.engineReload': '已保存。引擎下次重读配置时生效,通常在一分钟内。',
+    'config.localConfig.applied.nextEngineStart': '已保存。本机引擎下次启动时生效。',
+    'config.localConfig.applied.unchanged': '本来就是这样 —— 不需要改动。',
+    'config.localConfig.preview.nextTurn': '还没保存。保存后从下一轮起生效。',
+    'config.localConfig.preview.engineReload': '还没保存。保存后,引擎下次重读配置时生效。',
+    'config.localConfig.preview.nextEngineStart': '还没保存。保存后,本机引擎下次启动时生效。',
+    'config.localConfig.preview.unchanged': '本来就是这样 —— 保存也不会改动什么。',
+    'config.localConfig.residue.orphanKeySlot': '留下了一个没有模型使用的钥匙槽;它不起作用。',
+    'config.localConfig.residue.legacyTierGroupsLeft': '旧的档位设置还留在设置文件里;它们已不再被使用。',
+    'config.localConfig.disclosure.decidedBy': '生效的设置来自{layer}。',
+    'config.localConfig.disclosure.shadowed': '这项设置被{layer}盖住了,所以暂时不生效。',
+    'config.localConfig.disclosure.tierGroupOverridden': '旧设置里有几个档位组与{layer}里已有的组重名;已保留{layer}里的,旧的没有拷过去。',
+    'config.localConfig.disclosure.tierGroupOverriddenNamed': '旧设置里这几个档位组与{layer}里已有的组重名;已保留{layer}里的,旧的没有拷过去:{names}。',
+    'config.localConfig.layer.userSettings': '你的用户设置',
+    'config.localConfig.layer.projectSettings': '这个项目的共享设置',
+    'config.localConfig.layer.localSettings': '这个项目的本地设置',
+    'config.localConfig.layer.globalConfig': '应用的状态文件',
+    'config.localConfig.layer.projectMcp': '这个项目的 MCP 服务器文件',
+    'config.localConfig.layer.models': '模型目录',
+    'config.localConfig.layer.deploymentMcp': '引擎的 MCP 服务器声明',
+    'config.localConfig.layer.policySettings': '组织的托管设置',
+    'config.localConfig.layer.other': '另一个设置文件',
+    'config.localConfig.refused.nameUnusable': '这个服务器名不能用——没有保存。',
+    'config.localConfig.refused.nameReserved': '这个服务器名被本应用自带的内置服务器占用——没有保存。',
+    'config.localConfig.refused.mcpEntryInvalid': '这条服务器配置有会让它挂不上的问题——没有保存。',
+    'config.localConfig.refused.ambiguousScope': '同名服务器配置在不止一处;请选定要改哪一处——没有保存。',
+    'config.localConfig.refused.credentialsNeedReentry': '服务器的地址或命令改了,为它存的密钥要重新填写或删除——没有保存。',
+    'config.localConfig.refused.baseConflict': '这台服务器的配置在显示之后被改过——没有保存。请刷新后再试。',
+    'config.mcpServers.notice.shadowed': '{scope} 配置里的同名服务器优先于这一台。',
+    'config.mcpServers.notice.endpointDiffers': '{scope} 配置里的同名服务器指向别处。',
+    'config.mcpServers.notice.deploymentWins': '引擎所在部署自己声明了同名服务器;实际用的是部署那一台。',
+    'config.mcpServers.notice.envMissing': '这些变量没有设置,原样保留:{names}。',
+    'config.mcpServers.notice.narrowingWouldConflict': '其它位置({scopes})为这个名字声明了不同的工具清单;各处一致之前这台服务器不会挂载。',
+    'config.mcpServers.withheld.narrowingConflict': '未挂载:配置这台服务器的几处对工具清单的声明不一致。',
+    'config.mcpServers.withheld.narrowingInvalid': '未挂载:配置这台服务器的某一处把工具清单写坏了。',
+    'config.mcpServers.withheld.layerUnreadable': '未挂载:一份能添加或限制 MCP 服务器的配置文件读不出,修好之前不挂载任何 MCP 服务器。',
+    'config.mcpServers.withheld.policyLocked': '未挂载:组织的托管设置只允许它提供的 MCP 服务器。',
+    'config.mcpServers.problem.nameReserved': '这个名字属于本应用自带的内置服务器。',
+    'config.mcpServers.approvalsWithheld': '{layer} 里写的 MCP 批准不生效,因为这个文件夹未被信任。',
+    'config.mcpServers.probe.removed': '无需测试:这次改动会删除这台服务器。',
+    'config.mcpServers.probe.notActive': '无需测试:改动之后这台服务器不会处于启用状态。',
+    'config.mcpServers.probe.envMissing': '未测试:这台服务器用到的部分变量没有设置。',
+    'config.mcpServers.probe.editRefusal': '未测试:这次改动本身没有被接受。',
     'follow.notFollowed.headRun': '这块屏已不再跟着 run {taskId}{reason}{ending}{exit}',
     'follow.notFollowed.headTurn': '这块屏已不再跟着这一轮的 run{reason}{ending}{exit}',
     'follow.notFollowed.reason.exhaustedDraining': ':服务它的那台引擎实例在它最后一条事件流关闭时正在下线,而这个客户端的重新附着次数已经用完。',
@@ -1375,7 +1497,9 @@ const ZH = {
     'approval.planReview.decision.refused': '这次 {decision} 没有生效：引擎拒了它，什么都没改。',
     'approval.planReview.decision.cardMissing': '批准一份计划需要附上呈出它的那张卡，这次批准没有附卡。',
     'approval.planReview.decision.gateMoved': '这张卡上的计划已不是在等批的那份。',
-    'approval.planReview.decision.gateUntrusted': '引擎认不出这道审阅门的编号（服务端那一行记录看起来坏了，请运维检查）。卡上就是当前在等批的计划：再答一次将不带门编号提交，那一次没有「计划已换」的保护。',
+    'approval.planReview.decision.gateUntrusted': '引擎认不出这道审阅门的编号（服务端那一行记录看起来坏了，请运维检查）。修好之前，在这里批准会被同样拒掉、什么都不改。拒绝或要求重新出计划将不带门编号提交：它不批准任何东西，但计划若在此期间已换，它会作用在那时在等的那份计划上，那份可能还没人看过。也可以取消这项任务。',
+    'approval.planReview.decision.sentWithoutGateId': '这次回答发出时没带门编号。若它生效，作用的是它到达时引擎正在等的那份审阅，不一定是这张卡上的计划。',
+    'approval.planReview.bridge.gateIdMissing': '批准或改写计划需要带上用户看过的那张审阅卡的门编号，这次决断没有带，所以什么都没发。请从审阅卡上决断（卡上带着门编号），或改为拒绝这份计划，或取消这项任务。',
     'approval.planReview.option.askAgain.label': '不，要模型重新呈上计划',
     'approval.planReview.option.askAgain.description': '不批准；要模型重新呈上计划',
     'localEngine.behind.cliUpdate': '本机引擎(版本 {running})比这个 Sema({own})新,这个 Sema 不能在它上面开始新的工作。请先运行 `sema update`,再重新打开这个会话。',
@@ -1549,6 +1673,47 @@ const ZH = {
     'localEngine.health.answer.ok': '应答了,状态为 "ok"',
     'localEngine.health.answer.notOkHttp': '应答了 HTTP {http}',
     'localEngine.health.answer.notOkStatus': '应答了 HTTP {http},但状态不是 "ok"',
+    'centerTrust.refusal.badInput': '这道检查收到了读不出的入参;这是客户端的缺陷,不是你输入的问题。',
+    'centerTrust.refusal.empty': '没有给出地址。',
+    'centerTrust.refusal.tooLong': '地址太长(至多 {addressMax} 个字符,主机部分至多 {authorityMax} 个)。',
+    'centerTrust.refusal.unsafeCharacter': '地址里有空白、控制字符或反斜杠。',
+    'centerTrust.refusal.scheme': '地址必须写全:邀请链接以 `https://` 起头,中心地址以 `http://` 或 `https://` 起头。',
+    'centerTrust.refusal.userinfo': '地址的主机前不许带用户名或密码。',
+    'centerTrust.refusal.percentInHost': '地址的主机部分不许含百分号编码。',
+    'centerTrust.refusal.unparseable': '地址不是能解析的 http(s) URL。',
+    'centerTrust.refusal.query': '地址不许带查询串(`?`)。',
+    'centerTrust.refusal.fragment': '地址不许带片段(`#`);只有邀请链接可以以 `#ca=` 指纹列表结尾。',
+    'centerTrust.refusal.trailingDot': '主机名不许以点结尾。',
+    'centerTrust.refusal.ipNotCanonical': 'IP 地址必须用标准写法(例如 `127.0.0.1`,不用缩写或十六进制写法)。',
+    'centerTrust.refusal.plaintextRemote': '明文 `http://` 只许用于本机;远端中心必须用 `https://`。',
+    'centerTrust.refusal.path': '地址路径不合规:邀请链接不带路径,中心地址的路径不许以 `//` 起头,也不许含 `.` 或 `..` 段。',
+    'centerTrust.refusal.fingerprint': '指纹必须是 `sha256:` 后接 64 位十六进制数字(邀请链接里只收小写)。',
+    'centerTrust.refusal.tooManyFingerprints': '至多给 {fingerprintsMax} 个指纹。',
+    'centerTrust.refusal.prefix': '指纹必须以 `sha256:` 起头。',
+    'centerTrust.refusal.parserUnavailable': '这个客户端在当前平台上读不了证书,所以钉不住中心的证书。',
+    'centerTrust.refusal.bodyTooLarge': '中心的证书应答超过 {bodyMax} 字节。',
+    'centerTrust.refusal.bodyNotJson': '中心的证书应答不是有效的 UTF-8 JSON。',
+    'centerTrust.refusal.bodyShape': '中心的证书应答形状不对。',
+    'centerTrust.refusal.servedCount': '中心必须给出 1 至 {servedMax} 张证书。',
+    'centerTrust.refusal.certificateTooLarge': '中心给出的一张证书超过 {pemMax} 个字符。',
+    'centerTrust.refusal.certificateNotCanonical': '中心给出的一张证书不是恰一张、标准 PEM 形(每行 64 字符、LF 换行)且 DER 长度规范的证书。',
+    'centerTrust.refusal.certificateUnparseable': '中心给出的一张证书在本平台上读不出。',
+    'centerTrust.refusal.servedDuplicate': '中心把同一张证书给了不止一次。',
+    'centerTrust.refusal.namedNotServed': '你给的一个指纹与中心给出的证书都对不上。',
+    'centerTrust.refusal.anchorNotSelfSigned': '你点名的一张证书不是自签的,不能作信任锚钉住。',
+    'centerTrust.refusal.unconfiguredWithFingerprints': '你给了指纹,但中心说它没有配置证书颁发机构。',
+    'centerTrust.refusal.cancelled': '取中心证书已取消。',
+    'centerTrust.refusal.timedOut': '取中心证书超时(每次尝试至多等 {roundSec} 秒)。',
+    'centerTrust.refusal.transportFailed': '连不上中心,取不到它的证书。',
+    'centerTrust.refusal.contentType': '中心的证书应答不是 JSON(内容类型不对)。',
+    'centerTrust.refusal.caUnavailable': '中心报告它的证书颁发机构暂时不可用。',
+    'centerTrust.refusal.endpointMissing': '中心没有提供可钉的证书(可能是较旧的版本)。',
+    'centerTrust.refusal.unexpectedStatus': '中心对证书请求给了意料之外的状态。',
+    'centerTrust.refusal.retryAfterUnusable': '中心要求稍后再试但没给可用的等待时长,客户端已停止。',
+    'centerTrust.refusal.retryAfterTooLong': '中心要求等待超过 {waitCapSec} 秒再试,客户端已停止;请稍后再试。',
+    'centerTrust.refusal.retriesExhausted': '中心一直要求重试;客户端在 {attemptsMax} 次尝试后停止。',
+    'centerTrust.refusal.budgetExhausted': '取中心证书用完了 {budgetSec} 秒的时间预算。',
+    'centerTrust.refusal.unknown': '中心的证书核验没有通过。',
 };
 export const ZH_MESSAGES = Object.freeze(ZH);
 export const TERM_SLOTS = Object.freeze({
@@ -1619,6 +1784,9 @@ export const TERM_SLOTS = Object.freeze({
     'resume.refusal.park.printHolds': ['parked', 'run'],
     'resume.refusal.park.interactiveEnded': ['parked', 'run'],
     'resume.refusal.park.interactiveBusy': ['parked', 'run'],
+    'resume.refusal.park.whyNewerEngine': ['parked'],
+    'resume.refusal.park.interactiveNewerWorker': ['parked', 'run'],
+    'resume.refusal.park.printNewerWorker': ['parked', 'run'],
     'resume.refusal.park.blockedPrint': ['run'],
     'resume.refusal.park.blockedInteractive': ['run'],
     'approval.askPark.autoReopenBlocked.policyInteractive': ['run'],
@@ -1730,4 +1898,12 @@ export const TERM_SLOTS = Object.freeze({
     'notice.failure.settings.safety': ['turn'],
     'notice.wireRefusal.hostPosture.writeFace': ['bypassPermissions'],
     'notice.wireRefusal.hostPosture.both': ['bypassPermissions'],
+    'session.hostSettings.allowKept.managed.inProgress.one': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.managed.inProgress.other': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.managed.failed.one': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.managed.failed.other': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.managed.unknown.one': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.managed.unknown.other': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.generic.one': ['permissions.allow', '--allowedTools'],
+    'session.hostSettings.allowKept.generic.other': ['permissions.allow', '--allowedTools'],
 });

package/dist/index.d.ts

@@ -100,7 +100,6 @@ export * from './postureKnob.js';
 export * from './engineIdentity.js';
 export { readEngineHealthFacts } from './engineHealthFacts.js';
 export { readModsDeploymentPackages, type ModsDeploymentPackagesReading } from './engineHealthFacts.js';
-export { readEngineHealthStore, type EngineHealthStoreReading } from './engineHealthFacts.js';
 export type { EngineHealthFacts, EngineHealthCenterFacts, EngineHealthAuthFacts, EngineHealthDrainingFacts, EngineHealthLeaseFacts, EngineHealthFirstAttachFacts, EngineHealthInflightFacts } from './engineHealthFacts.js';
 export { localEngineAnchorOf, localEnginePlanDriftOf, judgeLocalEngine, localEngineLaneOf, localEngineVerdictSentence } from './localEngineJudge.js';
 export type { LocalEngineAnchorReading, LocalEnginePlanFingerprint, LocalEnginePlanDrift, LocalEngineAnchorPidState, LocalEngineDataRootRelation, LocalEngineJudgeInput, LocalEngineRef, LocalEngineAnchoredProcess, LocalEngineVerdict, LocalEngineUpgradePath, } from './localEngineJudge.js';
@@ -151,6 +150,8 @@ export { preemptReceiptLine, type PreemptOutcome, type PreemptParkedStatus } fro
 export { readSteerReceipt, type SteerReceiptReading } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
+export { engineCredentialReleaseVerdictOf, makeLocalEngineWireClient, ENGINE_CREDENTIAL_WITHHOLD_REASONS } from './engineCredentialRelease.js';
+export type { LocalEngineIdentityVerdict, EngineCredentialTransport, EngineCredentialReleaseInput, EngineCredentialWithholdReason, EngineCredentialReleaseVerdict, LocalEngineWireClientConfig, LocalEngineWireClient, } from './engineCredentialRelease.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
@@ -194,6 +195,7 @@ export * from './webSearchWireCaps.js';
 export * from './liveModelCatalog.js';
 export * from './modelBudgetRule.js';
 export * from './modelIdentityResolvability.js';
+export * from './modelConfigGapNotice.js';
 export * from './sessionModelLatch.js';
 export * from './modelSwitchFallback.js';
 export * from './effortWire.js';
@@ -396,7 +398,7 @@ export * from './mcpStatusSupersetKeys.js';
 export type { ErrorSupplementRole, ErrorSupplementReader } from './errorSupplementRoles.js';
 export * from './hitl/persistedRulesWire.js';
 export * from './hitl/localAllowRule.js';
-export { LOCAL_ALLOW_NOT_REDEEMABLE_REASONS, LOCAL_ALLOW_UNKNOWN_CAUSES, LOCAL_ALLOW_REDEMPTION_REFUSALS, LOCAL_ALLOW_REDEMPTION_UNAVAILABLE_CAUSES, LOCAL_ALLOW_REDEMPTION_UNKNOWN_CAUSES, localAllowRedeemability, redeemReadOnlyRuleOffer, type LocalAllowNotRedeemableReason, type LocalAllowUnknownCause, type LocalAllowRedeemability, type LocalAllowOfferedFacts, type LocalAllowRedeemabilityInput, type LocalAllowRedemptionRefusal, type LocalAllowRedemptionUnavailableCause, type LocalAllowRedemptionUnknownCause, type LocalAllowRedemptionReceipt, type LocalAllowRedemptionFacade, type ReadOnlyRuleOfferRedemption, } from './hitl/localAllowRedemption.js';
+export { LOCAL_ALLOW_NOT_REDEEMABLE_REASONS, LOCAL_ALLOW_UNKNOWN_CAUSES, LOCAL_ALLOW_REDEMPTION_REFUSALS, LOCAL_ALLOW_REDEMPTION_UNAVAILABLE_CAUSES, LOCAL_ALLOW_REDEMPTION_UNKNOWN_CAUSES, localAllowRedeemability, redeemReadOnlyRuleOffer, type LocalAllowNotRedeemableReason, type LocalAllowUnknownCause, type LocalAllowRedeemability, type LocalAllowOfferedFacts, type LocalAllowDeclaredFacts, type LocalAllowRedeemabilityInput, type LocalAllowRedemptionRefusal, type LocalAllowRedemptionUnavailableCause, type LocalAllowRedemptionUnknownCause, type LocalAllowRedemptionReceipt, type LocalAllowRedemptionFacade, type ReadOnlyRuleOfferRedemption, } from './hitl/localAllowRedemption.js';
 export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export { observedSessionRulesNamespaceForms } from './sessionRulesNamespaceFormsCapability.js';
@@ -409,7 +411,7 @@ export { hasLedgerPositionKey } from './hitl/gateLedger.js';
 export { durableSeqOf } from './hitl/gateLedger.js';
 export { MODE_ARBITRATION, automaticAnswerVerdict, mandatedApprovalDetailOf, crossBoundaryTaintOf, crossBoundaryTaintWayOutOf, permissionRequestHookScope, type CrossBoundaryTaintReading, type AutomaticAnswerLane, type AutomaticAnswerAskFace, type AutomaticAnswerFacts, type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy, type AutomaticAnswerVerdict, type PermissionRequestHookScope, } from './hitl/automaticAnswerVerdict.js';
 export { standingRowsOf, type StandingRows, type StandingRowsWhy, type StandingRowWhy, type StandingPersistentRow, type StandingRowsHostFacts, rememberOfferable, localAllowRuleEnforceable, type RememberOffer, type RememberOfferable, type LocalAllowRuleEnforcement, } from './hitl/standingRows.js';
-export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decideRowUnrevivableNotice, decisionRefusalAskReading, readDecisionRefusalReading, type DecisionRefusalReading, type RefusalRouteContext, type DecisionRefusalAskReading, type DecisionRefusalStanding, type DecisionRefusalClassified, type DecisionRefusalConflict, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
+export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decideRowUnrevivableNotice, type DecisionRefusalWayOut, decisionRefusalAskReading, readDecisionRefusalReading, type DecisionRefusalReading, type RefusalRouteContext, type DecisionRefusalAskReading, type DecisionRefusalStanding, type DecisionRefusalClassified, type DecisionRefusalConflict, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
 export { decisionGrantChangedContent } from './hitl/decisionConflict.js';
 export { decideFailureNote } from './decideFailureNote.js';
 export { decisionAnswerInvalidContent } from './hitl/decisionConflict.js';
@@ -460,8 +462,28 @@ export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './device
 export type { DevicesFace, DevicesFaceInput, DevicesFaceUnavailableWhy } from './devicesFace.js';
 export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
 export type { CloudLoginFailureContext, EngineTargetReading, EngineTargetWatch } from './engineTargetSeat.js';
-export { KEY_SLOT_PREFIX, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
-export type { OnboardJsonObject, OnboardPlanEntry, OnboardProbeBodyReader, OnboardProbeDeps, OnboardProbeFetch, OnboardProbeRequestInit, OnboardProbeResponse, OnboardProbeTarget, OnboardWritePlan, OnboardWritePlanInput, OnboardWriteVerdict, } from './model/onboardJudgement.js';
+export { KEY_SLOT_PREFIX, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, discoverEndpointModels, } from './model/onboardJudgement.js';
+export type { OnboardJsonObject, OnboardPlanEntry, OnboardProbeBodyReader, OnboardProbeDeps, OnboardProbeFetch, OnboardProbeRequestInit, OnboardProbeResponse, OnboardProbeTarget, OnboardWritePlan, OnboardWritePlanInput, OnboardWriteVerdict, OnboardDiscoveryTarget, } from './model/onboardJudgement.js';
+export { LOCAL_CONFIG_DOCUMENTS, globalStateFilePathOf } from './localConfig/documents.js';
+export type { LocalConfigDocument, LocalConfigDocumentName, LocalConfigWritableDocumentName, GlobalStateFilePlace } from './localConfig/documents.js';
+export { LOCAL_CONFIG_UNREADABLE_CAUSES, LOCAL_CONFIG_REFUSALS, LOCAL_CONFIG_NOT_WRITTEN_CAUSES, LOCAL_CONFIG_UNAVAILABLE_CAUSES, LOCAL_CONFIG_UNKNOWN_CAUSES, LOCAL_CONFIG_APPLIES_ON, LOCAL_CONFIG_RESIDUES, LOCAL_CONFIG_STEP_ROLES, LOCAL_CONFIG_WRITE_PRECONDITIONS, LOCAL_CONFIG_DISCLOSURE_KINDS, localConfigAccess, applyLocalConfigIntent, previewLocalConfigIntent, localConfigReceiptSentence, localConfigResidueSentence, localConfigDisclosureSentence, } from './localConfig/kernel.js';
+export type { LocalConfigUnreadableCause, LocalConfigFileReading, LocalConfigFilesReading, LocalConfigRefusal, LocalConfigNotWrittenCause, LocalConfigUnavailableCause, LocalConfigUnknownCause, LocalConfigAppliesOn, LocalConfigResidue, LocalConfigStepRole, LocalConfigReceipt, LocalConfigPreview, LocalConfigWritePrecondition, LocalConfigDisclosureKind, LocalConfigDisclosure, LocalConfigHostFacts, LocalConfigAccessRequest, LocalConfigAccess, LocalConfigTransactStep, LocalConfigFileWrite, LocalConfigCommitReport, LocalConfigStorePort, LocalConfigStepInput, LocalConfigStepPlan, LocalConfigStep, LocalConfigIntent, } from './localConfig/kernel.js';
+export { MODEL_POOL_EDIT_KINDS, MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_CREDENTIAL_KINDS, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_DEFAULT_KEEP_REASONS, poolWritePlan, modelPoolIntentOf, editModelPoolWith, modelPoolViewOf, effectiveDefaultModelOf, defaultModelChoiceOf, modelPoolRowEditOf, channelProfilesOf, modelPoolEditOfSeat, onboardWritePlan, } from './localConfig/modelPool.js';
+export type { ModelPoolEditKind, ModelPoolChannelSource, ModelPoolCredentialKind, ModelPoolCompleteness, ModelPoolProbeState, ModelPoolDefaultKeepReason, DefaultModelBatchRow, DefaultModelChoice, ModelPoolProbeReading, ModelPoolEntrySpec, ModelPoolChannelProfile, ModelPoolChannelData, ModelPoolModelRow, ModelPoolRoleRow, ModelPoolRowAction, ModelPoolEdit, ModelPoolProblem, ModelPoolPlannedEntry, ModelPoolPlan, EffectiveDefaultModel, EffectiveDefaultModelInput, ModelPoolIntentProbe, ModelPoolEditOutcome, ModelPoolViewEntry, ModelPoolViewTierGroup, ModelPoolProvider, ModelPoolView, ModelPoolReadings, } from './localConfig/modelPool.js';
+export { LOCAL_CONFIG_WRITE_INTENTS, SETTINGS_WRITE_KEYS, settingsWritePlan, settingsWriteStep } from './localConfig/settingsWrite.js';
+export type { LocalConfigWriteIntentRow, LocalConfigWriteIntent, SettingsWriteIntent, SettingsWriteEdit, SettingsWritePlanInput, SettingsWritePlan, SettingsWriteStepInput, } from './localConfig/settingsWrite.js';
+export { MCP_SERVER_SCOPES, MCP_SERVER_ROW_STATES, MCP_SERVER_WITHHELD_CAUSES, mcpProjectChainOf, mcpPathWithinFence, expandMcpServerEntry, mcpServersReport } from './localConfig/mcp/servers.js';
+export type { McpServerScope, McpServerFileReading, McpServerFilesReading, McpServerEnvFacts, McpServerHostFacts, McpSupplementarySlot, McpServerSupplementarySources, McpServerRowScope, McpServerRowState, McpServerWithheldCause, McpServerApprovedBy, McpServerSourceFile, McpServerProblem, McpServerRow, McpDeploymentRows, McpServersReport, McpExpansion, } from './localConfig/mcp/servers.js';
+export { MCP_SERVER_EDIT_OPS, applyMcpServerEdit } from './localConfig/mcp/edit.js';
+export type { McpSecretMapEdit, McpSecretKeep, McpServerEdit, McpServerEditOp, McpServerEditContext, McpServerRefusalDetail, McpServerRefusalWord, McpServerEditPlan, McpServerEditNotice, McpServerProbeTarget, McpServerEditOutcome, } from './localConfig/mcp/edit.js';
+export { mcpServerReportView, mcpServerEditOutcomeView, mcpServerEditSentence, probeMcpServerEdit, checkMcpServerEditRequest, checkMcpServerReportView, checkMcpServerEditOutcomeView, checkMcpServerProbeView, } from './localConfig/mcp/views.js';
+export type { McpArgView, McpSecretMemberView, McpServerEntryView, McpServerProblemView, McpServerRowView, McpServerReportView, McpServerRefusalDetailView, McpServerEditPlanView, McpServerEditNoticeView, McpServerEditOutcomeView, McpServerProbeView, McpViewCheck, McpApprovalWithheldView, McpImportedView, McpSkippedView, McpProbeServerRowView, } from './localConfig/mcp/views.js';
+export { SKILL_OVERRIDE_STATES, SKILL_ORIGINS, SKILL_OVERRIDE_LAYERS, SKILL_OVERRIDE_DECIDERS, SKILL_OVERRIDE_LOCK_SOURCES, skillOverrideEffectiveOf, skillOverrideLockOf, } from './skillOverrideChain.js';
+export type { SkillOverrideState, SkillOrigin, SkillOverrideLayer, SkillOverrideDecider, SkillOverrideLockSource, SkillSyncedName, SkillOverrideSubject, SkillOverrideLayers, SkillOverrideEffective, SkillOverrideLock, } from './skillOverrideChain.js';
+export { SKILL_ROOT_LAYERS, SKILL_ROOT_KINDS, SKILLS_VIEW_EXCLUDED_REASONS, SKILLS_VIEW_LAYERS, SKILL_OVERRIDE_SCOPES } from './localConfig/skillsWords.js';
+export type { SkillRootLayer, SkillRootKind, SkillsViewExcludedReason, SkillsViewLayer, SkillOverrideScope } from './localConfig/skillsWords.js';
+export { skillRootsOf, skillsViewOf, skillsSetEditOf, skillsClearEditOf, skillOverrideWritePlan, skillCreatePlan, skillRemovePlan, } from './localConfig/skills.js';
+export type { SkillRootHostFacts, SkillRoot, SkillRootsTable, SkillListing, SkillFrontmatter, SkillsViewEditable, SkillsViewEntryBase, SkillsViewAppliedEntry, SkillsViewExcludedEntry, SkillsViewEntry, SkillsView, SkillsEdit, SkillOverrideWriteContext, SkillOverrideWritePlan, SkillCreateIntent, SkillRemoveIntent, SkillFileEditPlan, } from './localConfig/skills.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
@@ -469,6 +491,7 @@ export type { AssistantInboxVerb, AssistantInboxEntry, AssistantInboxReading, As
 export { checkpointRowVerdictOf } from './checkpointRowVerdict.js';
 export type { CheckpointRowVerdictReading } from './checkpointRowVerdict.js';
 export { checkpointRowBarOf, checkpointRowBarSentence } from './checkpointRowVerdict.js';
+export { decisionRefusalWayOutContent } from './checkpointRowVerdict.js';
 export type { CheckpointRowBar } from './checkpointRowVerdict.js';
 export { parkedUnresumableRowsOf, parkedUnresumableLine } from './hitl/parkedUnresumable.js';
 export type { ParkedUnresumableRow } from './hitl/parkedUnresumable.js';
@@ -536,3 +559,5 @@ export type { SessionEngineRepointResult } from './sessionEngine.js';
 export { PENDING_USER_ROW_ID_PREFIX, pendingUserRowIdOf, pendingUserRowUuidOf, isPendingUserRowId } from './pendingUserRow.js';
 export { BUILTIN_OUTPUT_STYLES, builtinOutputStyleOf } from './builtinOutputStyles.js';
 export type { BuiltinOutputStyle, BuiltinOutputStyleName } from './builtinOutputStyles.js';
+export { CA_PIN_LIMITS, readCenterAddress, trustOriginOf, caFingerprintsOf, caFingerprintOfDer, caFingerprintDisplay, readCaBootstrapBody, caBootstrapOpen, caBootstrapStep, caPinRefusalSentence, } from './consoleCaPin.js';
+export type { CenterAddressSeat, CenterAddressRefusal, CenterAddressReading, TrustOriginRefusal, TrustOriginReading, CaFingerprintsRefusal, CaFingerprintsReading, CaCertificateParser, CaCertificateFacts, CaBootstrapRequest, CaServedCertificate, CaBootstrapRefusal, CaBootstrapReading, CaBootstrapPhase, CaBootstrapStopReason, CaBootstrapStop, CaBootstrapDecision, CaBootstrapState, CaBootstrapEvent, CaBootstrapStep, CaPinRefusal, } from './consoleCaPin.js';

package/dist/index.js

@@ -84,7 +84,6 @@ export * from './postureKnob.js';
 export * from './engineIdentity.js';
 export { readEngineHealthFacts } from './engineHealthFacts.js';
 export { readModsDeploymentPackages } from './engineHealthFacts.js';
-export { readEngineHealthStore } from './engineHealthFacts.js';
 export { localEngineAnchorOf, localEnginePlanDriftOf, judgeLocalEngine, localEngineLaneOf, localEngineVerdictSentence } from './localEngineJudge.js';
 export { countClientRegistry, fleetBackgroundLiveOf, localEngineSelfOf, localEngineRegistryStatusOf, localEngineIdle, localEngineDemandOf, localEngineExitFate, localEngineExitFateSentence, } from './localEngineOccupancy.js';
 export { LOCAL_ENGINE_SWAP_CAUSES, localEngineSwapAutoable, engineSwapCardOf, engineSwapCardText } from './localEngineSwapCard.js';
@@ -119,6 +118,7 @@ export { preemptReceiptLine } from './preemptWire.js';
 export { readSteerReceipt } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
+export { engineCredentialReleaseVerdictOf, makeLocalEngineWireClient, ENGINE_CREDENTIAL_WITHHOLD_REASONS } from './engineCredentialRelease.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
@@ -157,6 +157,7 @@ export * from './webSearchWireCaps.js';
 export * from './liveModelCatalog.js';
 export * from './modelBudgetRule.js';
 export * from './modelIdentityResolvability.js';
+export * from './modelConfigGapNotice.js';
 export * from './sessionModelLatch.js';
 export * from './modelSwitchFallback.js';
 export * from './effortWire.js';
@@ -356,12 +357,23 @@ export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
 export { readThinkingLatch, writeThinkingLatch, thinkingLatchView, thinkingLatchSentence, thinkingLatchRowWordOf, readSeatThinkingLatch } from './thinkingLatch.js';
 export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
 export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
-export { KEY_SLOT_PREFIX, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
+export { KEY_SLOT_PREFIX, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, discoverEndpointModels, } from './model/onboardJudgement.js';
+export { LOCAL_CONFIG_DOCUMENTS, globalStateFilePathOf } from './localConfig/documents.js';
+export { LOCAL_CONFIG_UNREADABLE_CAUSES, LOCAL_CONFIG_REFUSALS, LOCAL_CONFIG_NOT_WRITTEN_CAUSES, LOCAL_CONFIG_UNAVAILABLE_CAUSES, LOCAL_CONFIG_UNKNOWN_CAUSES, LOCAL_CONFIG_APPLIES_ON, LOCAL_CONFIG_RESIDUES, LOCAL_CONFIG_STEP_ROLES, LOCAL_CONFIG_WRITE_PRECONDITIONS, LOCAL_CONFIG_DISCLOSURE_KINDS, localConfigAccess, applyLocalConfigIntent, previewLocalConfigIntent, localConfigReceiptSentence, localConfigResidueSentence, localConfigDisclosureSentence, } from './localConfig/kernel.js';
+export { MODEL_POOL_EDIT_KINDS, MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_CREDENTIAL_KINDS, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_DEFAULT_KEEP_REASONS, poolWritePlan, modelPoolIntentOf, editModelPoolWith, modelPoolViewOf, effectiveDefaultModelOf, defaultModelChoiceOf, modelPoolRowEditOf, channelProfilesOf, modelPoolEditOfSeat, onboardWritePlan, } from './localConfig/modelPool.js';
+export { LOCAL_CONFIG_WRITE_INTENTS, SETTINGS_WRITE_KEYS, settingsWritePlan, settingsWriteStep } from './localConfig/settingsWrite.js';
+export { MCP_SERVER_SCOPES, MCP_SERVER_ROW_STATES, MCP_SERVER_WITHHELD_CAUSES, mcpProjectChainOf, mcpPathWithinFence, expandMcpServerEntry, mcpServersReport } from './localConfig/mcp/servers.js';
+export { MCP_SERVER_EDIT_OPS, applyMcpServerEdit } from './localConfig/mcp/edit.js';
+export { mcpServerReportView, mcpServerEditOutcomeView, mcpServerEditSentence, probeMcpServerEdit, checkMcpServerEditRequest, checkMcpServerReportView, checkMcpServerEditOutcomeView, checkMcpServerProbeView, } from './localConfig/mcp/views.js';
+export { SKILL_OVERRIDE_STATES, SKILL_ORIGINS, SKILL_OVERRIDE_LAYERS, SKILL_OVERRIDE_DECIDERS, SKILL_OVERRIDE_LOCK_SOURCES, skillOverrideEffectiveOf, skillOverrideLockOf, } from './skillOverrideChain.js';
+export { SKILL_ROOT_LAYERS, SKILL_ROOT_KINDS, SKILLS_VIEW_EXCLUDED_REASONS, SKILLS_VIEW_LAYERS, SKILL_OVERRIDE_SCOPES } from './localConfig/skillsWords.js';
+export { skillRootsOf, skillsViewOf, skillsSetEditOf, skillsClearEditOf, skillOverrideWritePlan, skillCreatePlan, skillRemovePlan, } from './localConfig/skills.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
 export { checkpointRowVerdictOf } from './checkpointRowVerdict.js';
 export { checkpointRowBarOf, checkpointRowBarSentence } from './checkpointRowVerdict.js';
+export { decisionRefusalWayOutContent } from './checkpointRowVerdict.js';
 export { parkedUnresumableRowsOf, parkedUnresumableLine } from './hitl/parkedUnresumable.js';
 export { checkpointRequirementsDamagedOf } from './checkpointRowVerdict.js';
 export { READ_CREDENTIAL_NOT_ACCEPTED_NOTICE, isReadCredentialRefusal } from './readCredentialRefusal.js';
@@ -403,3 +415,4 @@ export { repointEngine, deviceHelloReadingOf, engineRepointVerdictOf, engineRepo
 export { repointSessionEngine } from './sessionEngine.js';
 export { PENDING_USER_ROW_ID_PREFIX, pendingUserRowIdOf, pendingUserRowUuidOf, isPendingUserRowId } from './pendingUserRow.js';
 export { BUILTIN_OUTPUT_STYLES, builtinOutputStyleOf } from './builtinOutputStyles.js';
+export { CA_PIN_LIMITS, readCenterAddress, trustOriginOf, caFingerprintsOf, caFingerprintOfDer, caFingerprintDisplay, readCaBootstrapBody, caBootstrapOpen, caBootstrapStep, caPinRefusalSentence, } from './consoleCaPin.js';

package/dist/liveModelCatalog.d.ts

@@ -9,6 +9,7 @@ export interface LiveModelInfo {
     routePairing?: string;
     supportedEffortLevels?: string[];
     contextWindow?: number;
+    contextWindowSource?: string;
     maxOutputTokens?: number;
     atMentionable?: boolean;
     compat?: LiveModelCompat;
@@ -24,6 +25,7 @@ export interface LiveModelCatalog {
     candidateRejected?: unknown;
     modelPlane?: {} | null;
     aliases?: {} | null;
+    unreadableRows?: number;
 }
 export declare function setLiveModelCatalog(next: LiveModelCatalog | null): void;
 export declare function setLiveModelCatalogRefresher(fn: (() => Promise<LiveModelCatalog | null>) | null): void;
@@ -177,6 +179,7 @@ export interface LiveModelRowView {
     readonly provider?: string;
     readonly reasoning?: boolean;
     readonly contextWindow?: number;
+    readonly contextWindowSource?: ContextWindowSource;
     readonly maxOutputTokens?: number;
     readonly isDefault: boolean;
     readonly vision: ImageVision;
@@ -185,5 +188,6 @@ export interface LiveModelRowView {
     readonly atMention: AtMentionReading;
     readonly compat: ModelCompatReading;
 }
+export type ContextWindowSource = 'declared' | 'assumed' | 'unknown';
 export declare function liveModelRowsOf(catalog?: LiveModelCatalog | null): readonly LiveModelRowView[] | null;
 export {};

package/dist/liveModelCatalog.js

@@ -179,6 +179,9 @@ function droppedDisabledNamed(dropped, name) {
     return dropped.entries.some((e) => e.identity !== undefined && e.identity.enabled === false && (e.identity.name === name || e.identity.id === name));
 }
 function catalogIncomplete(cat, rows, dropped) {
+    const carried = ownDataOf(cat, 'unreadableRows');
+    if (typeof carried === 'number' && Number.isFinite(carried) && carried > 0)
+        return true;
     const models = ownDataOf(cat, 'models');
     const n = Array.isArray(models) ? ownDataOf(models, 'length') : undefined;
     if (typeof n === 'number' && Number.isSafeInteger(n) && n > rows.length)
@@ -588,6 +591,8 @@ export function readLiveModelCatalog(body) {
             models.push(row);
         }
         const out = { models: Object.freeze(models) };
+        if (unreadableRows > 0)
+            out.unreadableRows = unreadableRows;
         let defaultModelMalformed = false;
         if (defaultModelKey.present && defaultModelKey.value !== undefined) {
             const dm = liveDefaultModelCopy(defaultModelKey.value);
@@ -744,6 +749,10 @@ export function modelCompatOf(model, catalog = getLiveModelCatalog()) {
     }
 }
 const positiveFinite = (v) => (typeof v === 'number' && Number.isFinite(v) && v > 0 ? v : undefined);
+function contextWindowSourceOfRow(row) {
+    const v = ownDataOf(row, 'contextWindowSource');
+    return v === 'declared' || v === 'assumed' ? v : 'unknown';
+}
 export function liveModelRowsOf(catalog = getLiveModelCatalog()) {
     try {
         if (catalog === null || typeof catalog !== 'object' || Array.isArray(catalog))
@@ -769,7 +778,7 @@ export function liveModelRowsOf(catalog = getLiveModelCatalog()) {
                 ...(id !== undefined ? { id } : {}),
                 ...(provider !== undefined ? { provider } : {}),
                 ...(reasoning !== 'unknown' ? { reasoning: reasoning === 'yes' } : {}),
-                ...(contextWindow !== undefined ? { contextWindow } : {}),
+                ...(contextWindow !== undefined ? { contextWindow, contextWindowSource: contextWindowSourceOfRow(row) } : {}),
                 ...(maxOutputTokens !== undefined ? { maxOutputTokens } : {}),
                 isDefault: def.kind === 'listed' && def.name === name,
                 vision: imageVisionOf(name, catalog),

package/dist/localConfig/documents.d.ts

@@ -0,0 +1,61 @@
+export declare const LOCAL_CONFIG_DOCUMENTS: readonly [Readonly<{
+    readonly name: "userSettings";
+    readonly template: "{configHome}/settings.json";
+    readonly schema: "units";
+    readonly lockRank: "userSettings";
+    readonly heat: "hot";
+}>, Readonly<{
+    readonly name: "projectSettings";
+    readonly template: "{project}/.sema/settings.json";
+    readonly schema: "units";
+    readonly lockRank: "projectSettings";
+    readonly heat: "cold";
+}>, Readonly<{
+    readonly name: "localSettings";
+    readonly template: "{project}/.sema/settings.local.json";
+    readonly schema: "units";
+    readonly lockRank: "localSettings";
+    readonly heat: "hot";
+}>, Readonly<{
+    readonly name: "globalConfig";
+    readonly template: "{configHome}/.sema{oauthSuffix}.json";
+    readonly schema: "requested";
+    readonly lockRank: "globalConfig";
+    readonly heat: "hot";
+}>, Readonly<{
+    readonly name: "projectMcp";
+    readonly template: "{project}/.mcp.json";
+    readonly schema: "requested";
+    readonly lockRank: "projectMcp";
+    readonly heat: "cold";
+}>, Readonly<{
+    readonly name: "models";
+    readonly template: "{configHome}/config.d/models.json";
+    readonly schema: "whole";
+    readonly lockRank: "models";
+    readonly heat: "cold";
+}>, Readonly<{
+    readonly name: "deploymentMcp";
+    readonly template: "{configHome}/config.d/mcp.json";
+    readonly schema: "whole";
+    readonly lockRank: null;
+    readonly heat: "cold";
+}>, Readonly<{
+    readonly name: "policySettings";
+    readonly template: "{managed}/managed-settings.json";
+    readonly schema: "units";
+    readonly lockRank: null;
+    readonly heat: "cold";
+}>];
+export type LocalConfigDocument = (typeof LOCAL_CONFIG_DOCUMENTS)[number];
+export type LocalConfigDocumentName = LocalConfigDocument['name'];
+export type LocalConfigWritableDocumentName = Extract<LocalConfigDocument, {
+    readonly lockRank: string;
+}>['name'];
+export declare function localConfigDocumentOf<V>(name: V): LocalConfigDocument | undefined;
+export declare function isWritableLocalConfigDocument<V>(name: V): name is V & LocalConfigWritableDocumentName;
+export interface GlobalStateFilePlace {
+    readonly configHome: string;
+    readonly oauthSuffix?: string;
+}
+export declare function globalStateFilePathOf(place: GlobalStateFilePlace): string | undefined;

package/dist/localConfig/documents.js

@@ -0,0 +1,51 @@
+export const LOCAL_CONFIG_DOCUMENTS = Object.freeze([
+    Object.freeze({ name: 'userSettings', template: '{configHome}/settings.json', schema: 'units', lockRank: 'userSettings', heat: 'hot' }),
+    Object.freeze({ name: 'projectSettings', template: '{project}/.sema/settings.json', schema: 'units', lockRank: 'projectSettings', heat: 'cold' }),
+    Object.freeze({ name: 'localSettings', template: '{project}/.sema/settings.local.json', schema: 'units', lockRank: 'localSettings', heat: 'hot' }),
+    Object.freeze({ name: 'globalConfig', template: '{configHome}/.sema{oauthSuffix}.json', schema: 'requested', lockRank: 'globalConfig', heat: 'hot' }),
+    Object.freeze({ name: 'projectMcp', template: '{project}/.mcp.json', schema: 'requested', lockRank: 'projectMcp', heat: 'cold' }),
+    Object.freeze({ name: 'models', template: '{configHome}/config.d/models.json', schema: 'whole', lockRank: 'models', heat: 'cold' }),
+    Object.freeze({ name: 'deploymentMcp', template: '{configHome}/config.d/mcp.json', schema: 'whole', lockRank: null, heat: 'cold' }),
+    Object.freeze({ name: 'policySettings', template: '{managed}/managed-settings.json', schema: 'units', lockRank: null, heat: 'cold' }),
+]);
+export function localConfigDocumentOf(name) {
+    if (typeof name !== 'string')
+        return undefined;
+    return LOCAL_CONFIG_DOCUMENTS.find((d) => d.name === name);
+}
+export function isWritableLocalConfigDocument(name) {
+    const row = localConfigDocumentOf(name);
+    return row !== undefined && row.lockRank !== null;
+}
+const OAUTH_SUFFIX_RE = /^(?:-[a-z0-9]+)*$/;
+export function globalStateFilePathOf(place) {
+    try {
+        if (typeof place !== 'object' || place === null)
+            return undefined;
+        const homeDesc = Object.getOwnPropertyDescriptor(place, 'configHome');
+        const home = homeDesc !== undefined && Object.hasOwn(homeDesc, 'value') ? homeDesc.value : undefined;
+        if (typeof home !== 'string' || home.length === 0 || home.includes('\u0000'))
+            return undefined;
+        const suffixDesc = Object.getOwnPropertyDescriptor(place, 'oauthSuffix');
+        if (suffixDesc !== undefined && !Object.hasOwn(suffixDesc, 'value'))
+            return undefined;
+        const suffix = suffixDesc === undefined || suffixDesc.value === undefined ? '' : suffixDesc.value;
+        if (typeof suffix !== 'string' || !OAUTH_SUFFIX_RE.test(suffix))
+            return undefined;
+        const sep = home.includes('\\') && !home.includes('/') ? '\\' : '/';
+        const row = LOCAL_CONFIG_DOCUMENTS.find((d) => d.name === 'globalConfig');
+        if (row === undefined)
+            return undefined;
+        const slot = '{configHome}/';
+        if (!row.template.startsWith(slot))
+            return undefined;
+        const rest = row.template.slice(slot.length).replace('{oauthSuffix}', suffix);
+        let base = home;
+        while (base.length > 1 && (base.endsWith('/') || base.endsWith('\\')))
+            base = base.slice(0, -1);
+        return base === '/' || base === '\\' ? `${base}${rest}` : `${base}${sep}${rest}`;
+    }
+    catch {
+        return undefined;
+    }
+}