@sema-agent/client-core 0.112.0 → 0.113.0

package/dist/index.js

@@ -87,7 +87,7 @@ export { readModsDeploymentPackages } from './engineHealthFacts.js';
 export { localEngineAnchorOf, localEnginePlanDriftOf, judgeLocalEngine, localEngineLaneOf, localEngineVerdictSentence } from './localEngineJudge.js';
 export { countClientRegistry, fleetBackgroundLiveOf, localEngineSelfOf, localEngineRegistryStatusOf, localEngineIdle, localEngineDemandOf, localEngineExitFate, localEngineExitFateSentence, } from './localEngineOccupancy.js';
 export { LOCAL_ENGINE_SWAP_CAUSES, localEngineSwapAutoable, engineSwapCardOf, engineSwapCardText } from './localEngineSwapCard.js';
-export { LOCAL_ENGINE_SPAWN_ENV, LOCAL_ENGINE_HOST_BITS, LOCAL_ENGINE_SPAWN_SHAPE, localEngineOperatorSingleUserOf, localEngineSpawnEnv, localEngineSeedEnv, localEnginePrincipalOf, localEnginePrincipalSentence, localEngineFirstShareSentence, } from './localEngineSpawn.js';
+export { LOCAL_ENGINE_SPAWN_ENV, LOCAL_ENGINE_HOST_BITS, LOCAL_ENGINE_SPAWN_SHAPE, localEngineOperatorSingleUserOf, localEngineSpawnEnv, localEngineSeedEnv, localEnginePrincipalOf, localEnginePrincipalSentence, localEngineFirstShareSentence, LOCAL_ENGINE_SEED_REFUSALS, LOCAL_ENGINE_BIND_DISCLOSURES, localEngineSeedRefusalCodeOf, localEngineBindGateOf, localEngineBindSentence, } from './localEngineSpawn.js';
 export { ENGINE_UNAVAILABLE_REASONS, ENGINE_INSTALL_SHAPES, ENGINE_BOOT_REFUSAL_CODES, engineBootRefusalOf, engineBootRefusalSentence, engineUnavailableLine, } from './engineUnavailable.js';
 export { LOCAL_ENGINE_STOP_LADDER, stopLadderStep } from './localEngineStopLadder.js';
 export { LOCAL_ENGINE_INITIAL_STATE, LOCAL_ENGINE_FAIL_CODES, localEngineStep, engineSwapAnswerOutcomeOf } from './localEngineStep.js';
@@ -124,6 +124,7 @@ export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminde
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
 export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MCP_SERVER_NAME_COLLISION, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_ROW_UNREVIVABLE, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDecideRowUnrevivableCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MCP_TOOL_DECLARATION_CHANGED, MCP_TOOL_LISTING_UNREACHED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, ATTACHMENT_BOUND_ELSEWHERE, ATTACHMENT_BUNDLE_INVALID, ATTACHMENT_BUNDLE_LANE_NOT_ISOLATED, ATTACHMENT_BUNDLE_SEED_FIXED, CONFLICT_SESSION_MEMORY_UNOBSERVED, CONFLICT_SESSION_ARCHIVE_STAMPED, ENV_HOME_UNCONFIRMED, REQUEST_ENV_CREDENTIAL_REFUSED, CONFLICT_SESSION_ID_RETIRED, } from './engineErrorCodes.js';
 export { prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
+export { attachmentOutcomesOf, attachmentOutcomeText, ATTACHMENT_OUTCOMES } from './attachmentOutcome.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
@@ -188,6 +189,7 @@ export { abortableSleep } from './abortableSleep.js';
 export { DEFAULT_SESSION_KEY } from './sessionSlot.js';
 export * from './scratchpadWireCaps.js';
 export * from './toolResult.js';
+export { subagentEditOutcomesOf, subagentEditOutcomesSentence } from './subagentEditOutcomes.js';
 export * from './diff/patch.js';
 export * from './sandboxWire.js';
 export * from './scenarioWire.js';
@@ -196,7 +198,7 @@ export * from './limitsWire.js';
 export * from './interactiveToolsWire.js';
 export * from './headlessPermissionModeWire.js';
 export * from './headlessReconnectWire.js';
-export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, projectDescription, projectTasks, projectWorkflows, wireResumable, wireRowUsage, workflowRunDisplayStatusOf, } from './fleet/fleetProjection.js';
+export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_LEDGER_TASK_VIEW_EXTRA_KEYS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, fleetTaskShownStatus, projectDescription, projectTasks, projectWorkflows, wireResumable, wireRowUsage, workflowRunDisplayStatusOf, } from './fleet/fleetProjection.js';
 export * from './fleet/fleetLedger.js';
 export * from './fleet/bgSubagentRow.js';
 export * from './fleet/workflowSizeWarning.js';
@@ -231,11 +233,14 @@ export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredP
 export { mintUserAttachmentEnvelope, showAttachmentName } from './userAttachmentEnvelope.js';
 export { showAttachmentNameCc } from './userAttachmentEnvelope.js';
 export { encodeHumanTurn, deliveredUuidsOf, imageSentOnUnknownVision, otherBodyBytesOf } from './humanTurn.js';
+export { attachmentPathOverflowText } from './attachmentPathPlan.js';
+export { attachmentRoutePlanOf } from './attachmentPathPlan.js';
 export { batchCompatible, planQueuedDelivery, humanTurnCapsOf, humanTextForKeywordScan, selfHealSteerEligible } from './queuedDelivery.js';
 export { SUBMISSION_SURFACES, SUBMISSION_ORIGINS, SUBMISSION_TOOLS, SUBMISSION_KINDS, submissionProvenanceOf, submissionIdentityOf, requestLaneOf, submissionOriginOf, } from './request/submissionIdentity.js';
 export { taskNotificationOf, taskNotificationQueueCommand } from './notifications.js';
 export { taskNotificationAdmissionOf } from './taskNotificationAdmission.js';
 export { resultErrorCodeInTextOf } from './resultFrameKeys.js';
+export { resultTurnAbortedByOf } from './resultFrameKeys.js';
 export { humanTurnRefusalSentence, humanTurnDegradedSentence, printImageVisionSentence } from './humanTurnSentences.js';
 export { observedUserAttachmentSeat, projectUserAttachmentSeatCapability, userAttachmentSeatAdmits } from './userAttachmentSeat.js';
 export { attachmentRouteOf, attachmentWithheldReasonText, attachmentLocalCopyNote, ATTACHMENT_ROUTE_LEGS, TOOLS_LOCATIONS } from './attachmentRoute.js';
@@ -258,10 +263,10 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, pluginHooksKeptLocally, userPromptSubmitExecutorOf, HOOK_ENTRY_TYPE_WORDS, } from './pluginHooksWire.js';
+export { SUPPORT_FLOOR_SETTINGS_CONTRACT, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, pluginHooksKeptLocally, userPromptSubmitExecutorOf, HOOK_ENTRY_TYPE_WORDS, } from './pluginHooksWire.js';
 export { sessionHooksRosterOf } from './sessionHooksRoster.js';
 export { HTTP_POLICY_DROP_REASONS } from './httpHookPolicy.js';
-export { salvageSettingsHooksEntries, settingsHooksSalvageNotice, } from './settingsHooksSalvage.js';
+export { isGuardHookEvent, salvageSettingsHooksEntries, settingsHooksSalvageNotice, } from './settingsHooksSalvage.js';
 export { hostSettingNoticeEventsOf } from './hostSettingNoticeArm.js';
 export { hostSettingsSelfCheck, HostSettingsRefused, HOST_SUPPLIED_KEYS, HOST_SETTING_CAUSES, HOST_SETTING_DISPOSITIONS, hostSettingsConsent, hostSettingsAcceptCurrent, } from './hostTurnSettings.js';
 export { hostSettingsSessionFollows, } from './hostSettingsSource.js';
@@ -282,23 +287,25 @@ export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
 export { toolEndOutputText } from './toolResultContent.js';
 export { toolOutputMediaAbsenceOf, toolOutputMediaAbsenceSentence } from './toolResultContent.js';
 export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, approvalParkingNoticeText, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
-export { APPROVAL_DENY_SETTLED_BY_WORDS, ASK_ORIGIN_WORDS, RESPOND_DECISIONS, RETRACTED_CARD_DECISION_KIND, RULE_OFFERS_ABSENCE_REASONS, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_MATCHES, RULE_OFFER_UNCOVERED_REASONS, TOOL_APPROVAL_FRAME_KEYS_MIRROR, WITHDRAWN_CARD_DECISION_KIND, __resetSettledApprovalsForTests, _resetApprovalCardPortForTest, allowNoteNotCarriedSentence, answerCarriage, answerPayloadFor, approvalBoundGrantsDetail, approvalCardFactsOfFrame, approvalCardFactsOfGeneric, approvalCardFactsOfV1, approvalCardFactsOfV1Frame, approvalCardPortFor, approvalCardPortMisses, approvalCardPortMissesFor, approvalCardRequestOf, approvalIsMandated, approvalPriorCardsDetail, approvalSupersedesDetail, askProbeReasonDetail, claimApprovalCard, classifierNoRulingDetail, decisionAttributionKeyOf, hasApprovalCardPort, hasApprovalCardPortFor, installApprovalCardPort, installApprovalCardPortFor, isFromSubagent, isToolApprovalFrame, isToolApprovalGate, isToolApprovalRespondParkedRedeemed, isToolApprovalRespondReplayed, joinApprovalHolder, observeApprovalAnswerCommitted, readApprovalBoundGrants, readApprovalCardWord, readApprovalClassifierNoRuling, readApprovalDenySettledBy, readApprovalMandate, readApprovalRememberRefused, readBoundGrantEntry, readDenialLimitFallback, readRuleOfferSupply, readRuleOffers, readToolApprovalRespondAck, readToolApprovalRespondParking, rememberRefusalOf, structurallyEqual, surfaceApprovalCard, surfaceFsApprovalAndDecide, surfaceToolApprovalFrameAndRespond, toolApprovalReplayVerdictOf, toolNameIsFsWrite, toolNameIsShellExec, toolPermissionRequestAskBits } from './hitl/toolApprovalWire.js';
+export { APPROVAL_DENY_SETTLED_BY_WORDS, ASK_ORIGIN_WORDS, FEEDBACK_REFUSAL_CODES, RESPOND_DECISIONS, RETRACTED_CARD_DECISION_KIND, RULE_OFFERS_ABSENCE_REASONS, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_MATCHES, RULE_OFFER_UNCOVERED_REASONS, TOOL_APPROVAL_FRAME_KEYS_MIRROR, WITHDRAWN_CARD_DECISION_KIND, __resetSettledApprovalsForTests, _resetApprovalCardPortForTest, allowNoteNotCarriedSentence, answerCarriage, answerPayloadFor, approvalBoundGrantsDetail, approvalCardFactsOfFrame, approvalCardFactsOfGeneric, approvalCardFactsOfV1, approvalCardFactsOfV1Frame, approvalCardPortFor, approvalCardPortMisses, approvalCardPortMissesFor, approvalCardRequestOf, approvalIsMandated, approvalPriorCardsDetail, approvalSupersedesDetail, askProbeReasonDetail, claimApprovalCard, classifierNoRulingDetail, decisionAttributionKeyOf, feedbackRefusalOf, hasApprovalCardPort, hasApprovalCardPortFor, installApprovalCardPort, installApprovalCardPortFor, isFromSubagent, isToolApprovalFrame, isToolApprovalGate, isToolApprovalRespondParkedRedeemed, isToolApprovalRespondReplayed, joinApprovalHolder, observeApprovalAnswerCommitted, readApprovalBoundGrants, readApprovalCardWord, readApprovalClassifierNoRuling, readApprovalDenySettledBy, readApprovalMandate, readApprovalRememberRefused, readBoundGrantEntry, readDenialLimitFallback, readRuleOfferSupply, readRuleOffers, readToolApprovalRespondAck, readToolApprovalRespondParking, rememberRefusalOf, structurallyEqual, subagentBadgeFor, surfaceApprovalCard, surfaceFsApprovalAndDecide, surfaceToolApprovalFrameAndRespond, toolApprovalReplayVerdictOf, toolNameIsFsWrite, toolNameIsShellExec, toolPermissionRequestAskBits } from './hitl/toolApprovalWire.js';
 export * from './hitl/approvalCardReading.js';
 export * from './hitl/approvalCardReasons.js';
 export { approvalRequestFrameReadingOf, APPROVAL_REQUEST_FRAME_UNREADABLE_WHYS } from './hitl/approvalRequestFrameReading.js';
-export { approvalAskReasonsOf } from './hitl/approvalAskers.js';
+export { approvalAgentIdOf, approvalAskReasonsOf } from './hitl/approvalAskers.js';
 export { askClassReasonOf, askClassReasonsOf } from './hitl/askClassPair.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
 export { ruleToolNameVerdictOf } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
-export { planReviewBodyOf } from './planReviewCardFacts.js';
+export { planReviewBodyOf, mintPlanReviewCardFacts, registeredPlanReviewCardFacts, currentPlanReviewGateOf, samePlanReviewCardFacts } from './planReviewCardFacts.js';
 export { planReviewCardNote } from './hitl/planReviewCard.js';
+export { planReviewOutcomeNotice } from './hitl/planReviewCard.js';
 export { readRunLedgerSnapshot } from './runLedgerSnapshot.js';
 export { decisionInFlightOf, decisionReadMark } from './hitl/decisionLedger.js';
 export { ASK_PARK_AUTO_REOPEN_BLOCKS, askParkAutoReopenBlockedContent, askParkAutoReopenBlockOf, askParkRefusalBlockOf, claimAskParkAutoReopenBlockNotice, clearAskParkAutoReopenBlocks, } from './hitl/askParkAutoReopenBlock.js';
 export { HITL_DECISION_FAMILIES, HITL_DECISION_NOT_APPLIED_CAUSES, HITL_DECISION_NOT_SENT_CAUSES, HITL_DECISION_UNCONFIRMED_CAUSES, sendHitlDecision, hitlDecisionOutcomeContent, toolPermissionSettledLine, toolPermissionUnconfirmedOf, toolPermissionUnconfirmedLine, } from './hitl/decisionSend.js';
+export { APPROVAL_DECISION_DOORS, approvalDecisionDoorOf, approvalDecisionDoorSource } from './hitl/approvalDecisionDoor.js';
 export { elicitationRefusedLine } from './hitl/elicitationRefusal.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, SCREEN_CARD_ORIGINS, questionCardOriginOf, hostReopenQuestionId, hostRunChoiceQuestionId, } from './hitl/gateIdentity.js';
 export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, registerArmedGateFromQuestionIdFor, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
@@ -357,10 +364,11 @@ export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
 export { readThinkingLatch, writeThinkingLatch, thinkingLatchView, thinkingLatchSentence, thinkingLatchRowWordOf, readSeatThinkingLatch } from './thinkingLatch.js';
 export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
 export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
-export { KEY_SLOT_PREFIX, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, discoverEndpointModels, } from './model/onboardJudgement.js';
+export { KEY_SLOT_PREFIX, ONBOARD_PROBE_BUDGETS, keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, discoverEndpointModels, } from './model/onboardJudgement.js';
+export { ONBOARD_STEPS, ONBOARD_STEP_STATES, ONBOARD_STEP_REASONS, onboardStepPlanOf } from './model/onboardSteps.js';
 export { LOCAL_CONFIG_DOCUMENTS, globalStateFilePathOf } from './localConfig/documents.js';
 export { LOCAL_CONFIG_UNREADABLE_CAUSES, LOCAL_CONFIG_REFUSALS, LOCAL_CONFIG_NOT_WRITTEN_CAUSES, LOCAL_CONFIG_UNAVAILABLE_CAUSES, LOCAL_CONFIG_UNKNOWN_CAUSES, LOCAL_CONFIG_APPLIES_ON, LOCAL_CONFIG_RESIDUES, LOCAL_CONFIG_STEP_ROLES, LOCAL_CONFIG_WRITE_PRECONDITIONS, LOCAL_CONFIG_DISCLOSURE_KINDS, localConfigAccess, applyLocalConfigIntent, previewLocalConfigIntent, localConfigReceiptSentence, localConfigResidueSentence, localConfigDisclosureSentence, } from './localConfig/kernel.js';
-export { MODEL_POOL_EDIT_KINDS, MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_CREDENTIAL_KINDS, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_DEFAULT_KEEP_REASONS, poolWritePlan, modelPoolIntentOf, editModelPoolWith, modelPoolViewOf, effectiveDefaultModelOf, defaultModelChoiceOf, modelPoolRowEditOf, channelProfilesOf, modelPoolEditOfSeat, onboardWritePlan, } from './localConfig/modelPool.js';
+export { MODEL_POOL_EDIT_KINDS, MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_CREDENTIAL_KINDS, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_DEFAULT_KEEP_REASONS, poolWritePlan, modelPoolIntentOf, editModelPoolWith, modelPoolViewOf, modelPoolEnvReadingOf, effectiveDefaultModelOf, defaultModelChoiceOf, modelPoolRowEditOf, channelProfilesOf, modelPoolEditOfSeat, onboardWritePlan, } from './localConfig/modelPool.js';
 export { LOCAL_CONFIG_WRITE_INTENTS, SETTINGS_WRITE_KEYS, settingsWritePlan, settingsWriteStep } from './localConfig/settingsWrite.js';
 export { MCP_SERVER_SCOPES, MCP_SERVER_ROW_STATES, MCP_SERVER_WITHHELD_CAUSES, mcpProjectChainOf, mcpPathWithinFence, expandMcpServerEntry, mcpServersReport } from './localConfig/mcp/servers.js';
 export { MCP_SERVER_EDIT_OPS, applyMcpServerEdit } from './localConfig/mcp/edit.js';

package/dist/liveModelCatalog.js

@@ -543,6 +543,7 @@ const ROUTE_PAIRING_VERDICTS = Object.freeze({
     'broken:credential_missing': 'broken',
     'broken:credential_origin_mismatch': 'broken',
     'broken:credential_answer_conflict': 'broken',
+    'broken:protocol_plaintext_credentials': 'broken',
 });
 export function routePairingVerdict(v) {
     if (typeof v !== 'string' || v.length === 0)

package/dist/liveQuestionStore.d.ts

@@ -11,6 +11,8 @@ export declare function takeLocalQuestionWithdrawHook(id: string): WithdrawHook
 export declare function unregisterLocalQuestionResponder(id: string): boolean;
 export declare function hasLocalQuestionResponder(id: string): boolean;
 export declare function publishQuestionFrame(frame: QuestionFrame): void;
+export type QuestionFrameDelivery = 'delivered' | 'no_surface' | 'handler_threw';
+export declare function deliverQuestionFrameFor(sessionKey: string, frame: QuestionFrame): QuestionFrameDelivery;
 export declare function publishQuestionFrameFor(sessionKey: string, frame: QuestionFrame): void;
 export declare function hasQuestionOverlay(): boolean;
 export declare function hasQuestionOverlayFor(sessionKey: string): boolean;

package/dist/liveQuestionStore.js

@@ -26,16 +26,21 @@ export function hasLocalQuestionResponder(id) {
 export function publishQuestionFrame(frame) {
     publishQuestionFrameFor(DEFAULT_SESSION_KEY, frame);
 }
-export function publishQuestionFrameFor(sessionKey, frame) {
+export function deliverQuestionFrameFor(sessionKey, frame) {
     const frameHandler = frameHandlerByKey.get(sessionKey);
     if (!frameHandler)
-        return;
+        return 'no_surface';
     try {
         frameHandler(frame);
+        return 'delivered';
     }
     catch {
+        return 'handler_threw';
     }
 }
+export function publishQuestionFrameFor(sessionKey, frame) {
+    deliverQuestionFrameFor(sessionKey, frame);
+}
 export function hasQuestionOverlay() {
     return hasQuestionOverlayFor(DEFAULT_SESSION_KEY);
 }

package/dist/localConfig/kernel.d.ts

@@ -30,7 +30,7 @@ export declare const LOCAL_CONFIG_APPLIES_ON: readonly ["next_turn", "engine_rel
 export type LocalConfigAppliesOn = (typeof LOCAL_CONFIG_APPLIES_ON)[number];
 export declare const LOCAL_CONFIG_RESIDUES: readonly ["orphan_key_slot", "legacy_tier_groups_left"];
 export type LocalConfigResidue = (typeof LOCAL_CONFIG_RESIDUES)[number];
-export declare const LOCAL_CONFIG_DISCLOSURE_KINDS: readonly ["decided_by", "shadowed_by", "tier_group_overridden"];
+export declare const LOCAL_CONFIG_DISCLOSURE_KINDS: readonly ["decided_by", "shadowed_by", "tier_group_overridden", "shadow_unknown"];
 export type LocalConfigDisclosureKind = (typeof LOCAL_CONFIG_DISCLOSURE_KINDS)[number];
 export interface LocalConfigDisclosure {
     readonly kind: LocalConfigDisclosureKind;
@@ -142,6 +142,7 @@ export interface LocalConfigIntent {
     readonly appliesOn: LocalConfigAppliesOn;
     readonly steps: readonly LocalConfigStep[];
 }
+export declare function localConfigLaneDocsOf(steps: readonly Pick<LocalConfigStep, 'doc' | 'lock'>[]): readonly LocalConfigWritableDocumentName[];
 export declare function applyLocalConfigIntent(intent: LocalConfigIntent, store: LocalConfigStorePort, facts: LocalConfigHostFacts): Promise<LocalConfigReceipt>;
 export declare function previewLocalConfigIntent(intent: LocalConfigIntent, store: LocalConfigStorePort, facts: LocalConfigHostFacts): Promise<LocalConfigPreview>;
 export declare function localConfigReceiptSentence(receipt: LocalConfigReceipt | LocalConfigPreview, lang?: UiLanguage): string;

package/dist/localConfig/kernel.js

@@ -1,5 +1,5 @@
 import { SETTINGS_ROOT_DOCUMENT_UNREADABLE_REASONS } from '../generated/settingsSchemaTables.js';
-import { ownSnapshotRecord, ownSnapshotRecordFaithful, readOwnDataValue, appendOwnElement } from '../ownKey.js';
+import { ownSnapshotRecord, ownSnapshotRecordFaithful, readOwnDataValue, appendOwnElement, sameJson } from '../ownKey.js';
 import { capForDisplay } from '../fleetTaskDesc.js';
 import { msg, renderMessage } from '../i18n/translate.js';
 import { isWritableLocalConfigDocument, localConfigDocumentOf } from './documents.js';
@@ -38,7 +38,7 @@ export const LOCAL_CONFIG_UNAVAILABLE_CAUSES = Object.freeze(['engine_is_remote'
 export const LOCAL_CONFIG_UNKNOWN_CAUSES = Object.freeze(['commit_unconfirmed', 'report_unreadable']);
 export const LOCAL_CONFIG_APPLIES_ON = Object.freeze(['next_turn', 'engine_reload', 'next_engine_start']);
 export const LOCAL_CONFIG_RESIDUES = Object.freeze(['orphan_key_slot', 'legacy_tier_groups_left']);
-export const LOCAL_CONFIG_DISCLOSURE_KINDS = Object.freeze(['decided_by', 'shadowed_by', 'tier_group_overridden']);
+export const LOCAL_CONFIG_DISCLOSURE_KINDS = Object.freeze(['decided_by', 'shadowed_by', 'tier_group_overridden', 'shadow_unknown']);
 export const LOCAL_CONFIG_STEP_ROLES = Object.freeze(['prepare', 'effect', 'cleanup']);
 export const LOCAL_CONFIG_WRITE_PRECONDITIONS = Object.freeze([
     'shared_path_lock',
@@ -135,6 +135,14 @@ export function localConfigAccess(facts, request) {
         return blocked('domain_not_hosted');
     }
 }
+export function localConfigLaneDocsOf(steps) {
+    const out = [];
+    for (const s of steps)
+        for (const d of [s.doc, ...(s.lock ?? [])])
+            if (!out.includes(d))
+                out.push(d);
+    return Object.freeze(out);
+}
 const MAX_STEPS = 8;
 const DETAIL_MAX = 240;
 function docListOf(v, writable) {
@@ -201,7 +209,7 @@ function shapeIntent(intent) {
     }
     if (phase !== 1)
         return undefined;
-    return { appliesOn: when, steps, docs: Object.freeze(steps.map((s) => s.doc)) };
+    return { appliesOn: when, steps, docs: localConfigLaneDocsOf(steps) };
 }
 const UNREADABLE_IO = Object.freeze({ status: 'unreadable', cause: 'io' });
 const ABSENT = Object.freeze({ status: 'absent' });
@@ -283,21 +291,6 @@ function planVerdictOf(v) {
     }
     return refuseVerdict('invalid_request');
 }
-function sameJson(a, b) {
-    if (a === b)
-        return true;
-    if (typeof a !== 'object' || typeof b !== 'object' || a === null || b === null)
-        return false;
-    if (Array.isArray(a) !== Array.isArray(b))
-        return false;
-    if (Array.isArray(a) && Array.isArray(b))
-        return a.length === b.length && a.every((x, i) => sameJson(x, b[i]));
-    const ka = Object.keys(a);
-    const kb = Object.keys(b);
-    if (ka.length !== kb.length)
-        return false;
-    return ka.every((k) => Object.hasOwn(b, k) && sameJson(a[k], b[k]));
-}
 function planStep(step, fresh, carried, mode) {
     const target = fresh[step.doc];
     if (target === undefined || target.status === 'unreadable')
@@ -532,6 +525,7 @@ const DISCLOSURE_KEYS = {
     decided_by: 'config.localConfig.disclosure.decidedBy',
     shadowed_by: 'config.localConfig.disclosure.shadowed',
     tier_group_overridden: 'config.localConfig.disclosure.tierGroupOverridden',
+    shadow_unknown: 'config.localConfig.disclosure.shadowUnknown',
 };
 const DISCLOSURE_NAMED_KEYS = {
     tier_group_overridden: 'config.localConfig.disclosure.tierGroupOverriddenNamed',

package/dist/localConfig/mcp/edit.js

@@ -1,4 +1,4 @@
-import { applyLocalConfigIntent, previewLocalConfigIntent, localConfigAccess, } from '../kernel.js';
+import { applyLocalConfigIntent, previewLocalConfigIntent, localConfigAccess, localConfigLaneDocsOf, } from '../kernel.js';
 import { mcpServerNameVerdict } from '../../mcpWireCaps.js';
 import { readHostSettingsOnce } from '../../hostSettingsSource.js';
 import { settingsWriteStep } from '../settingsWrite.js';
@@ -84,10 +84,20 @@ function tableWith(table, name, value) {
 const docOf = (fresh, d) => documentOf(fresh[d]);
 function placeOf(scope, projectKey) {
     if (scope === 'user')
-        return { doc: 'globalConfig', path: USER_SCOPE_PATH };
+        return { doc: docOfScope(scope), path: USER_SCOPE_PATH };
     if (scope === 'project')
-        return { doc: 'projectMcp', path: PROJECT_FILE_PATH };
-    return projectKey === undefined ? undefined : { doc: 'globalConfig', path: localScopePath(projectKey) };
+        return { doc: docOfScope(scope), path: PROJECT_FILE_PATH };
+    return projectKey === undefined ? undefined : { doc: docOfScope(scope), path: localScopePath(projectKey) };
+}
+function docOfScope(scope) {
+    return scope === 'project' ? 'projectMcp' : 'globalConfig';
+}
+function docOfOp(op) {
+    return op === 'setEnabled' ? 'globalConfig' : 'localSettings';
+}
+const siblingMcpDoc = (doc) => (doc === 'globalConfig' ? 'projectMcp' : 'globalConfig');
+function stepFrameOf(doc, paired) {
+    return paired ? { doc, lock: [siblingMcpDoc(doc)] } : { doc };
 }
 export const mcpRowBaseOf = (revision) => (revision === null ? null : `rev:${revision}`);
 const ADD_KEYS = Object.freeze(['op', 'name', 'entry', 'scope', 'onNameTaken']);
@@ -494,20 +504,12 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
         const f = editFactsOf(ctx);
         const { c, host, reserved, projectKey } = f;
         const dry = isRecord(opts) && opts.dryRun === true;
-        const docsFor = () => {
-            if (e.op === 'setEnabled')
-                return ['globalConfig'];
-            if (e.op === 'setProjectApproval')
-                return ['localSettings'];
-            if (e.op === 'remove' && e.scope === undefined)
-                return ['globalConfig', 'projectMcp'];
-            if (e.op === 'add' && e.onNameTaken === 'rename')
-                return ['globalConfig', 'projectMcp'];
-            if (e.op === 'importFromSibling')
-                return ['globalConfig', 'projectMcp'];
-            return [e.scope === 'project' ? 'projectMcp' : 'globalConfig'];
-        };
-        const access = localConfigAccess(c.lane, { access: 'write', docs: docsFor() });
+        const earlyFrame = e.op === 'setEnabled' || e.op === 'setProjectApproval'
+            ? stepFrameOf(docOfOp(e.op), false)
+            : e.op === 'remove' && e.scope === undefined
+                ? stepFrameOf('globalConfig', true)
+                : stepFrameOf(docOfScope(e.scope), (e.op === 'add' && e.onNameTaken === 'rename') || e.op === 'importFromSibling');
+        const access = localConfigAccess(c.lane, { access: 'write', docs: localConfigLaneDocsOf([earlyFrame]) });
         if (!access.ok)
             return Object.freeze({ receipt: Object.freeze({ kind: 'unavailable', cause: access.cause }), notices: Object.freeze([]) });
         const pre = preGatesOf(e, f);
@@ -525,13 +527,11 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
             notices = await noticesFor(e.name, e.scope, e.entry, store, c, ev.missing);
             box.probe = entryProbeOf(ev.spec);
             const place = placeOf(e.scope, projectKey);
-            const otherDoc = place.doc === 'globalConfig' ? 'projectMcp' : 'globalConfig';
             const mode = e.onNameTaken ?? 'refuse';
             const entryCopy = copyLayer(e.entry);
             step = {
-                doc: place.doc,
+                ...stepFrameOf(place.doc, mode === 'rename'),
                 role: 'effect',
-                ...(mode === 'rename' ? { lock: [otherDoc] } : {}),
                 plan: ({ fresh }) => {
                     const cur = docOf(fresh, place.doc);
                     const t = subTableOf(cur, place.path);
@@ -635,9 +635,8 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
             const place = placeOf(target, projectKey);
             const unscoped = e.scope === undefined;
             step = {
-                doc: place.doc,
+                ...stepFrameOf(place.doc, unscoped),
                 role: 'effect',
-                ...(unscoped ? { lock: [place.doc === 'globalConfig' ? 'projectMcp' : 'globalConfig'] } : {}),
                 plan: ({ fresh }) => {
                     if (unscoped) {
                         const cand = candidatesIn(fresh);
@@ -672,7 +671,7 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
             box.probe = fixedProbeOf(e);
             const projPath = ['projects', projectKey];
             step = {
-                doc: 'globalConfig',
+                doc: docOfOp('setEnabled'),
                 role: 'effect',
                 plan: ({ fresh }) => {
                     const cur = docOf(fresh, 'globalConfig');
@@ -721,7 +720,7 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
             const WANT = { approve: ['set', 'delete'], reject: ['delete', 'set'], clear: ['delete', 'delete'] };
             const want = WANT[e.approval];
             const edit1 = (intent, op) => (op === 'set' ? { intent, member: e.name, op, value: e.name } : { intent, member: e.name, op });
-            const inner = settingsWriteStep({ doc: 'localSettings', trust: approvalTrust(c), edits: [edit1('mcpJsonEnabled', want[0]), edit1('mcpJsonDisabled', want[1])] });
+            const inner = settingsWriteStep({ doc: docOfOp('setProjectApproval'), trust: approvalTrust(c), edits: [edit1('mcpJsonEnabled', want[0]), edit1('mcpJsonDisabled', want[1])] });
             step = {
                 ...inner,
                 plan: (input) => {
@@ -742,9 +741,8 @@ export async function applyMcpServerEdit(edit, store, ctx, opts) {
             const skipped = pre.skipped ?? [];
             box.probe = fixedProbeOf(e);
             step = {
-                doc: place.doc,
+                ...stepFrameOf(place.doc, true),
                 role: 'effect',
-                lock: [place.doc === 'globalConfig' ? 'projectMcp' : 'globalConfig'],
                 plan: ({ fresh }) => {
                     const cur = docOf(fresh, place.doc);
                     const t = subTableOf(cur, place.path);

package/dist/localConfig/mcp/servers.js

@@ -2,6 +2,7 @@ import { LOCAL_CONFIG_WRITE_INTENTS } from '../settingsWrite.js';
 import { projectMcpConfigs, mcpTransportVerdict } from '../../mcpWireCaps.js';
 import { readHostSettingsOnce, CC_MERGE_ORDER } from '../../hostSettingsSource.js';
 import { layerAdmissionWord } from '../../settingsLayerAdmission.js';
+import { pathShapeOf } from '../../pathShape.js';
 import { msg, renderMessage } from '../../i18n/translate.js';
 export const MCP_SERVER_SCOPES = Object.freeze(['user', 'project', 'local']);
 export const MCP_SERVER_ROW_STATES = Object.freeze(['active', 'pending_approval', 'rejected', 'disabled', 'withheld', 'unusable']);
@@ -155,15 +156,11 @@ export const localScopePath = (projectKey) => Object.freeze(['projects', project
 export const USER_SCOPE_PATH = Object.freeze(['mcpServers']);
 export const PROJECT_FILE_PATH = Object.freeze(['mcpServers']);
 function splitPath(p, sep) {
-    if (sep === '/') {
-        if (!p.startsWith('/'))
-            return undefined;
-        return { root: '/', parts: p.split('/').filter((s) => s !== '') };
-    }
-    const m = /^([A-Za-z]:)\\/.exec(p);
-    if (m === null)
+    const shape = pathShapeOf(p, sep === '/' ? '/' : '\\');
+    if (shape === undefined || shape.hasDotSegment)
         return undefined;
-    return { root: `${m[1]}\\`, parts: p.slice(m[0].length).split('\\').filter((s) => s !== '') };
+    const rooted = sep === '/' ? shape.kind === 'posix' : shape.kind === 'drive' && shape.root.endsWith('\\');
+    return rooted ? { root: shape.root, parts: [...shape.names] } : undefined;
 }
 const joinPath = (root, parts, sep) => root + parts.join(sep);
 export function mcpProjectChainOf(startDir, sep, fence) {

package/dist/localConfig/modelPool.d.ts

@@ -7,7 +7,7 @@ import { type ModelProbeResult, type ProbeVerdictWord } from '../modelCapability
 import { type OnboardWritePlan, type OnboardWritePlanInput } from '../model/onboardJudgement.js';
 import type { OnboardCatalogIssue, SeatModelPoolEdit } from '../seatContract.js';
 import type { LocalConfigDisclosure, LocalConfigFileReading, LocalConfigHostFacts, LocalConfigIntent, LocalConfigPreview, LocalConfigReceipt, LocalConfigRefusal, LocalConfigStorePort } from './kernel.js';
-import { type ModelPoolChannelSource, type ModelPoolCompleteness, type ModelPoolDefaultKeepReason, type ModelPoolProbeState } from './modelPoolWords.js';
+import { type ModelPoolChannelSource, type ModelPoolCompleteness, type ModelPoolDefaultKeepReason, type ModelPoolProbeState, type ModelPoolViewReading } from './modelPoolWords.js';
 export { MODEL_POOL_EDIT_KINDS, MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_CREDENTIAL_KINDS, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_DEFAULT_KEEP_REASONS } from './modelPoolWords.js';
 export type { ModelPoolEditKind, ModelPoolChannelSource, ModelPoolCredentialKind, ModelPoolCompleteness, ModelPoolProbeState, ModelPoolDefaultKeepReason } from './modelPoolWords.js';
 export interface ModelPoolEntrySpec {
@@ -144,6 +144,7 @@ export type EffectiveDefaultModel = {
 export interface EffectiveDefaultModelInput {
     readonly modelsDoc: SettingsDocument | null | undefined;
     readonly userSettings: SettingsDocument | null | undefined;
+    readonly userSettingsReading?: ModelPoolViewReading;
 }
 export declare function effectiveDefaultModelOf(input: EffectiveDefaultModelInput): EffectiveDefaultModel;
 export interface DefaultModelBatchRow {
@@ -251,12 +252,16 @@ export interface ModelPoolView {
     readonly legacyTierSettings: boolean;
     readonly orphanKeySlots: number;
     readonly envModels: readonly string[];
+    readonly effectiveEnv?: ModelPoolViewReading;
+    readonly userSettings?: ModelPoolViewReading;
     readonly providers: readonly ModelPoolProvider[];
 }
+export type ModelPoolEnvReading = ModelPoolViewReading | 'not_reported';
 export interface ModelPoolReadings {
     readonly models: LocalConfigFileReading | undefined;
     readonly userSettings: LocalConfigFileReading | undefined;
     readonly effectiveEnv?: Readonly<Record<string, string | undefined>>;
 }
+export declare function modelPoolEnvReadingOf(view: {} | null | undefined): ModelPoolEnvReading;
 export declare function modelPoolViewOf(readings: ModelPoolReadings): ModelPoolView;
 export declare function modelPoolRowEditOf(row: ModelPoolViewEntry, action: ModelPoolRowAction): ModelPoolEdit | undefined;