@sema-agent/client-core 0.112.0 → 0.113.0

package/dist/retryStatus.d.ts

@@ -15,6 +15,8 @@ export type RetryStatus = {
     sleptMs?: number;
     waitSegment?: BrainStatusWaitSegment | (string & {});
     seat?: BrainStatusSeat | (string & {});
+    providerMessage?: string;
+    toolCallId?: string;
     detail?: string;
 } | {
     kind: 'error';
@@ -33,6 +35,8 @@ export type RetryStatus = {
     sleptMs?: number;
     waitSegment?: BrainStatusWaitSegment | (string & {});
     seat?: BrainStatusSeat | (string & {});
+    providerMessage?: string;
+    toolCallId?: string;
 } | {
     kind: 'waiting';
     deadline: number;
@@ -48,6 +52,8 @@ export type RetryStatus = {
     sleptMs?: number;
     waitSegment?: BrainStatusWaitSegment | (string & {});
     seat?: BrainStatusSeat | (string & {});
+    providerMessage?: string;
+    toolCallId?: string;
     terminal?: never;
     error: RetryStatusErrorPayload;
 };
@@ -82,12 +88,14 @@ export interface BrainStatusPayload {
     sleptMs?: number;
     waitSegment?: BrainStatusWaitSegment | (string & {});
     seat?: BrainStatusSeat | (string & {});
+    providerMessage?: string;
+    toolCallId?: string;
 }
 export declare const BRAIN_STATUS_WAIT_SEGMENTS: readonly ["response_headers", "first_token"];
 export type BrainStatusWaitSegment = (typeof BRAIN_STATUS_WAIT_SEGMENTS)[number];
 export declare const BRAIN_STATUS_SEATS: readonly ["classifier"];
 type BrainStatusSeat = (typeof BRAIN_STATUS_SEATS)[number];
-export declare const BRAIN_STATUS_PAYLOAD_KEYS: readonly ["phase", "detail", "retryInSec", "retryInMs", "attempt", "maxRetries", "errClass", "retryAtMs", "errorStatus", "elapsedMs", "timeoutMs", "providerCondition", "providerConditionSource", "sleptMs", "waitSegment", "seat"];
+export declare const BRAIN_STATUS_PAYLOAD_KEYS: readonly ["phase", "detail", "retryInSec", "retryInMs", "attempt", "maxRetries", "errClass", "retryAtMs", "errorStatus", "elapsedMs", "timeoutMs", "providerCondition", "providerConditionSource", "sleptMs", "waitSegment", "seat", "providerMessage", "toolCallId"];
 export declare function mapBrainStatusToRetry(p: BrainStatusPayload, nowMs: number): RetryStatus | null;
 export interface RetryStatusArmLike {
     readonly phase?: string;
@@ -106,6 +114,8 @@ export interface RetryStatusArmLike {
     readonly sleptMs?: number;
     readonly waitSegment?: string;
     readonly seat?: string;
+    readonly providerMessage?: string;
+    readonly toolCallId?: string;
     readonly parentToolCallId?: string;
 }
 export declare function retryStatusFromArm(arm: RetryStatusArmLike | null | undefined, nowMs: number): RetryStatus | null | undefined;

package/dist/retryStatus.js

@@ -36,6 +36,8 @@ export const BRAIN_STATUS_PAYLOAD_KEYS = [
     'sleptMs',
     'waitSegment',
     'seat',
+    'providerMessage',
+    'toolCallId',
 ];
 const _brainStatusKeyPin = [true, true];
 void _brainStatusKeyPin;
@@ -73,10 +75,17 @@ export function mapBrainStatusToRetry(p, nowMs) {
         ...(typeof waitSegment === 'string' && waitSegment.length > 0 ? { waitSegment } : {}),
         ...(typeof seat === 'string' && seat.length > 0 ? { seat } : {}),
     };
+    const providerMessageRaw = p.providerMessage;
+    const providerShown = typeof providerMessageRaw === 'string' && providerMessageRaw.length > 0 ? displayUntrusted(providerMessageRaw) : '';
+    const judgedCall = p.toolCallId;
+    const callFacts = {
+        ...(providerShown.length > 0 ? { providerMessage: providerShown } : {}),
+        ...(typeof judgedCall === 'string' && judgedCall.length > 0 ? { toolCallId: judgedCall } : {}),
+    };
     const stalledShown = typeof p.detail === 'string' && p.detail.length > 0 ? displayUntrusted(p.detail) : '';
     const stalledDetail = stalledShown.length > 0 ? { detail: stalledShown } : {};
     const shown = (absent) => (typeof p.detail === 'string' ? displayUntrusted(p.detail) : absent);
-    const extra = { ...counts, ...cause, ...producerTiming, ...failureStatus, ...providerJudged, ...waitProgress, ...waitFacts };
+    const extra = { ...counts, ...cause, ...producerTiming, ...failureStatus, ...providerJudged, ...waitProgress, ...waitFacts, ...callFacts };
     switch (p.phase) {
         case 'recovered':
             return null;
@@ -98,7 +107,7 @@ export function mapBrainStatusToRetry(p, nowMs) {
         case 'retrying':
             return { kind: 'error', deadline, ...extra, error: { formatted: shown('') } };
         default:
-            return { kind: 'error', deadline, ...extra, error: { formatted: '' } };
+            return null;
     }
 }
 export function retryStatusFromArm(arm, nowMs) {
@@ -120,8 +129,8 @@ export function retryStatusFromArm(arm, nowMs) {
         const v = str(key);
         return v !== undefined && v.length > 0 ? v : undefined;
     };
-    const [detail, retryInSec, retryInMs, attempt, maxRetries, errClass, retryAtMs, errorStatus, elapsedMs, timeoutMs, providerCondition, providerConditionSource, sleptMs, waitSegment, seat] = [
-        str('detail'), num('retryInSec'), num('retryInMs'), num('attempt'), num('maxRetries'), str('errClass'), num('retryAtMs'), num('errorStatus'), num('elapsedMs'), num('timeoutMs'), word('providerCondition'), word('providerConditionSource'), num('sleptMs'), word('waitSegment'), word('seat'),
+    const [detail, retryInSec, retryInMs, attempt, maxRetries, errClass, retryAtMs, errorStatus, elapsedMs, timeoutMs, providerCondition, providerConditionSource, sleptMs, waitSegment, seat, providerMessage, toolCallId] = [
+        str('detail'), num('retryInSec'), num('retryInMs'), num('attempt'), num('maxRetries'), str('errClass'), num('retryAtMs'), num('errorStatus'), num('elapsedMs'), num('timeoutMs'), word('providerCondition'), word('providerConditionSource'), num('sleptMs'), word('waitSegment'), word('seat'), word('providerMessage'), word('toolCallId'),
     ];
     const phase = str('phase');
     if (phase === undefined)
@@ -143,6 +152,8 @@ export function retryStatusFromArm(arm, nowMs) {
         ...(sleptMs !== undefined ? { sleptMs } : {}),
         ...(waitSegment !== undefined ? { waitSegment } : {}),
         ...(seat !== undefined ? { seat } : {}),
+        ...(providerMessage !== undefined ? { providerMessage } : {}),
+        ...(toolCallId !== undefined ? { toolCallId } : {}),
     }, nowMs);
 }
 const WAIT_SWITCH_FRACTION = 0.5;

package/dist/runTerminal.d.ts

@@ -43,6 +43,7 @@ export interface RunTerminalProviderRejectedDetail {
     providerConditionSource?: string;
     providerResetAtMs?: number;
     route?: RunTerminalRequestRoute;
+    providerMessage?: string;
 }
 export interface RunTerminalRequestRoute {
     credentialSource: string;

package/dist/runTerminal.js

@@ -2,7 +2,7 @@ import { CORE_PROMPT_BLOCK_CAUSES } from './generated/engineFactTables.js';
 import { isSdkRunParked } from './terminalStatuses.js';
 import { runRowSentenceOf, terminalLayerOf } from './replayBody.js';
 import { readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
-import { washCredentials } from './displayUntrusted.js';
+import { displayUntrusted, washCredentials } from './displayUntrusted.js';
 export const PROMPT_BLOCK_CAUSES = CORE_PROMPT_BLOCK_CAUSES;
 const _promptBlockTablePin = true;
 void _promptBlockTablePin;
@@ -213,6 +213,7 @@ function failureDetailOf(cause) {
             const code = str(own(v, 'code'));
             const providerCondition = optionalDetailString(v, 'providerCondition');
             const providerConditionSource = optionalDetailString(v, 'providerConditionSource');
+            const providerMessage = providerMessageOf(v);
             let providerResetAtMs;
             try {
                 const r = ownData(v, 'providerResetAtMs');
@@ -229,6 +230,7 @@ function failureDetailOf(cause) {
                 ...(providerCondition !== undefined ? { providerCondition } : {}),
                 ...(providerConditionSource !== undefined ? { providerConditionSource } : {}),
                 ...(providerResetAtMs !== undefined ? { providerResetAtMs } : {}),
+                ...(providerMessage !== undefined ? { providerMessage } : {}),
                 ...(route !== undefined ? { route } : {}),
             };
         }
@@ -258,6 +260,18 @@ function optionalDetailString(d, key) {
         return undefined;
     }
 }
+function providerMessageOf(d) {
+    try {
+        const raw = optionalDetailString(d, 'providerMessage');
+        if (raw === undefined)
+            return undefined;
+        const shown = displayUntrusted(raw);
+        return shown.length > 0 ? shown : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 const FINISH_REASON_UNKNOWN_DETAIL_KIND = 'finish_reason_unknown';
 function completedDetailOf(cause) {
     try {

package/dist/sdkWireTransit.d.ts

@@ -2,4 +2,4 @@ export { AgentClient } from '@sema-agent/sdk';
 export { isApprovalRequestFrameV1, isApprovalRevokeFrameV1 } from '@sema-agent/sdk';
 export { pushSessionBundle, pullSessionBundle, importSessionBundle, APIError } from '@sema-agent/sdk';
 export { APPROVAL_DECIDE_GATE_KINDS, PLAN_REVIEW_GATE_KINDS } from '@sema-agent/sdk';
-export type { TaskRequest, SessionPermissionRules, SemaSettings, SkillSpec, AgentEvent, RunReceipt, CancelAck, RunRecord, ToolApprovalRespondAck, FleetTaskRow, FleetWorkflowRow, ApprovalCard, ApprovalRequestFrame, ApprovalRiskAxes, AskDecisionAck, AskDecisionBody, PolicyInfo, CcImportLayer, CcImportPrepareResult, CcImportSettingsLayer, CcImportSkippedRule, PersistedRule, RuleRevokeRequest, RuleRevokeResult, ApprovalDecideGateKind, PlanReviewGateKind, } from '@sema-agent/sdk';
+export type { TaskRequest, SessionPermissionRules, SemaSettings, SkillSpec, AgentEvent, RunReceipt, CancelAck, RunRecord, FleetTaskRow, FleetWorkflowRow, ApprovalCard, ApprovalRequestFrame, ApprovalRiskAxes, AskDecisionAck, AskDecisionBody, PolicyInfo, CcImportLayer, CcImportPrepareResult, CcImportSettingsLayer, CcImportSkippedRule, PersistedRule, RuleRevokeRequest, RuleRevokeResult, ApprovalDecideGateKind, PlanReviewGateKind, } from '@sema-agent/sdk';

package/dist/seatContract.d.ts

@@ -231,7 +231,7 @@ export type SeatStreamReading = {
 };
 export declare function seatStreamDeltaMessage(event: SeatStreamDeltaSource, ids: SeatStreamDeltaIds): SeatStreamEventMessage | undefined;
 export declare function readSeatStreamDelta(message: object): SeatStreamReading;
-export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit"];
+export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit", "pickFile"];
 export type SeatCapabilityName = (typeof SEAT_CAPABILITY_NAMES)[number];
 export interface SeatCapabilitiesState {
     pickFolder?: boolean;
@@ -256,6 +256,7 @@ export interface SeatCapabilitiesState {
     skillsEdit?: boolean;
     modelPool?: boolean;
     modelPoolEdit?: boolean;
+    pickFile?: boolean;
 }
 export type SeatCapabilityReading = {
     readonly kind: "reported";
@@ -841,6 +842,9 @@ export type SessionHooksRosterLayer = {
 } | {
     readonly source: HookSettingsSource;
     readonly state: "trust_withheld";
+} | {
+    readonly source: HookSettingsSource;
+    readonly state: "layer_degraded";
 };
 export interface SessionHooksRosterHttpRow {
     readonly source: HookSettingsSource;
@@ -1003,6 +1007,7 @@ export interface LocalSessionsApi {
     listModels(scope?: SeatResourceScope): Promise<LiveModelCatalog>;
     applyModelConfig(req: ApplyModelConfigRequest): Promise<ApplyModelConfigResult>;
     pickFolder(): Promise<string | null>;
+    pickFile(): Promise<string | null>;
     listRecentFolders(): Promise<RecentFoldersResult>;
     noteRecentFolder(path: string): Promise<OkAck>;
     patchSession(req: SessionRowPatchRequest): Promise<LocalSessionRecord>;
@@ -1105,7 +1110,7 @@ export declare function isSendMessageAck(v: unknown): v is SendMessageAck;
 export declare function readToolPermissionSettledElsewhere(ack: object | null | undefined): ToolPermissionSettledElsewhere | undefined;
 export declare function readToolPermissionAckState(ack: ToolPermissionAck | null | undefined): ToolPermissionAckState | undefined;
 export declare const LOCAL_SESSIONS_SPEC: EipcServiceSpec;
-export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "answerEngineSwap", "beginSelfUpgrade", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "listModelPool", "editModelPool", "discoverModels", "readSessionMcpPanel", "listMcpToolToggles", "setMcpToolToggle", "setThinkingLatch", "getComputerUse", "setComputerUse", "getNotificationLevels", "setNotificationLevel", "getQuickEntryShortcut", "setQuickEntryShortcut", "claimSeatActions", "readSessionMods", "readSessionHooksRoster", "listMcpServers", "probeMcpServerEntry", "editMcpServer", "listSkills", "editSkills", "onEvent", "onToolPermissionRequest", "onSeatAction"];
+export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "pickFile", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "answerEngineSwap", "beginSelfUpgrade", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "listModelPool", "editModelPool", "discoverModels", "readSessionMcpPanel", "listMcpToolToggles", "setMcpToolToggle", "setThinkingLatch", "getComputerUse", "setComputerUse", "getNotificationLevels", "setNotificationLevel", "getQuickEntryShortcut", "setQuickEntryShortcut", "claimSeatActions", "readSessionMods", "readSessionHooksRoster", "listMcpServers", "probeMcpServerEntry", "editMcpServer", "listSkills", "editSkills", "onEvent", "onToolPermissionRequest", "onSeatAction"];
 export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore", "seatCapabilitiesStateStore", "engineTargetStateStore"];
 export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest", "onSeatAction"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "error", "errorCategory", "code", "session", "userMessageUuid", "requestId", "outcome", "parked", "chrome", "_sema_turnFailure", "subagentContent"];
@@ -1346,7 +1351,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
     readonly SeatCapabilitiesState: {
         readonly check: (v: unknown) => SeatValidation;
-        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit"];
+        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit", "pickFile"];
         readonly unchecked: readonly [];
     };
     readonly RecentFoldersResult: {
@@ -1393,6 +1398,10 @@ export declare const SEAT_VALIDATOR_COVERAGE_EXEMPT: readonly [...{
     readonly label: "PickFolderResult";
     readonly check: (v: unknown) => SeatValidation;
     readonly why: "载荷是**串或 null**(选中的路径 / 用户取消,CC-469),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由对应的座位契约测试套承担:认 null 与非空串、拒空串 / 数 / undefined / 对象 / 布尔五形。";
+}, {
+    readonly label: "PickFileResult";
+    readonly check: (v: unknown) => SeatValidation;
+    readonly why: "载荷是**串或 null**(选中的文件路径 / 用户取消,CC-575),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起;与 `PickFolderResult` 同形、路径判据同一只。判别力由座位契约测试套承担(run-seat-wave2-test.mjs ST7):认 null 与非空串(原文字节)、拒空串 / 数 / 零 / undefined / 对象 / 布尔 / 数组,拒句点名 pickFile,且与 pickFolder 的回执出站门在同一批输入上放行 / 拒绝一致。";
 }, {
     readonly label: "BooleanAck";
     readonly check: (v: unknown) => SeatValidation;

package/dist/seatContract.js

@@ -4,13 +4,14 @@ import { liveDefaultModelCopy, liveModelRowCopy } from "./model/liveCatalogShape
 import { REWIND_MODES } from "./rewindWireCaps.js";
 import { SETTINGS_MODEL_API_WORDS } from "./generated/settingsSchemaTables.js";
 import { PROBE_VERDICTS } from "./modelCapabilityProbe.js";
-import { MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES } from "./localConfig/modelPoolWords.js";
+import { MODEL_POOL_CHANNEL_SOURCES, MODEL_POOL_COMPLETENESS, MODEL_POOL_MAX_BATCH, MODEL_POOL_PROBE_STATES, MODEL_POOL_READINGS } from "./localConfig/modelPoolWords.js";
 import { LOCAL_CONFIG_REFUSALS } from "./localConfig/kernel.js";
 import { localConfigDisclosureShapeOf, localConfigReceiptShapeOf, localConfigUnavailableShapeOf } from "./localConfig/receiptShape.js";
 import { TIER_ORDER } from "./model/tierVocabulary.js";
 import { guardedRead, ownDataField, ownDataRefusalKeyOf, ownSendableField, readOwnDataValue } from "./ownKey.js";
 import { isPlainRecord as isJsonPlainRecord } from "./jsonFaithful.js";
 import { displayUntrustedMarks, quoteUntrustedForSentence } from "./displayUntrusted.js";
+import { carriesNoCredentialSlots, tupleOriginUrlOf } from "./engineAddress.js";
 import { MCP_LIVENESS_STATES } from "./mcpLiveness.js";
 import { checkMcpServerReportView, checkMcpServerEditOutcomeView, checkMcpServerProbeView } from "./localConfig/mcp/views.js";
 import { THINKING_LATCH_EVENTS, THINKING_LATCH_ROW_WORDS } from "./thinkingLatchWords.js";
@@ -413,7 +414,7 @@ export function readSeatStreamDelta(message) {
         return Object.freeze({ kind: "malformed" });
     }
 }
-export const SEAT_CAPABILITY_NAMES = Object.freeze(["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit"]);
+export const SEAT_CAPABILITY_NAMES = Object.freeze(["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit", "pickFile"]);
 const notReported = () => Object.freeze({ kind: "not_reported" });
 const malformedReading = () => Object.freeze({ kind: "malformed" });
 const reported = (available) => Object.freeze({ kind: "reported", available });
@@ -503,6 +504,7 @@ const SEAT_CAPABILITY_PHRASES = Object.freeze({
     skillsEdit: Object.freeze({ action: "Changing skills", ability: "change skills", support: "skill editing support" }),
     modelPool: Object.freeze({ action: "Showing your models", ability: "show your models", support: "model list support" }),
     modelPoolEdit: Object.freeze({ action: "Editing your models", ability: "edit your models", support: "model editing support" }),
+    pickFile: Object.freeze({ action: "Adding a file", ability: "show a file picker", support: "file picker support" }),
 });
 export function seatCapabilityUnavailableDetail(name, reading) {
     const phrase = Object.hasOwn(SEAT_CAPABILITY_PHRASES, name)
@@ -748,14 +750,8 @@ const R_LOGIN_FAILURE = oneOfRule("login failure", CLOUD_LOGIN_FAILURES);
 const R_DISPLAY_URL = ruleOf("display url", (v) => {
     if (typeof v !== "string" || v.length === 0)
         return false;
-    let u;
-    try {
-        u = new URL(v);
-    }
-    catch {
-        return false;
-    }
-    return (u.protocol === "https:" || u.protocol === "http:") && u.username === "" && u.password === "" && u.search === "" && u.hash === "";
+    const u = tupleOriginUrlOf(v);
+    return u !== undefined && (u.protocol === "https:" || u.protocol === "http:") && carriesNoCredentialSlots(v);
 });
 const R_VERIFICATION_URI_COMPLETE = ruleOf("verification uri", (v) => {
     if (typeof v !== "string" || v.length === 0)
@@ -1156,6 +1152,8 @@ const R_POOL_VIEW = shapeRule("pool view", {
     legacyTierSettings: reqF(R_BOOL),
     orphanKeySlots: reqF(R_INT0),
     envModels: reqF(arrayRule(R_NONEMPTY)),
+    effectiveEnv: optF(oneOfRule("effectiveEnv", MODEL_POOL_READINGS)),
+    userSettings: optF(oneOfRule("userSettings", MODEL_POOL_READINGS)),
     providers: reqF(arrayRule(shapeRule("pool provider", {
         id: reqF(R_NONEMPTY),
         name: reqF(R_NONEMPTY),
@@ -1315,6 +1313,7 @@ const HOOKS_ROSTER_LAYER = armsRule("hooks roster layer", "state", {
     "loaded-partial": { source: reqF(R_HOOK_SOURCE), codes: reqF(arrayRule(oneOfRule("hooks drop code", SETTINGS_HOOKS_DROPPED_PIECE_CODES), true)) },
     rejected: { source: reqF(R_HOOK_SOURCE), codes: reqF(arrayRule(oneOfRule("hooks rejection code", SETTINGS_HOOKS_REJECTION_CODES), true)) },
     trust_withheld: { source: reqF(R_HOOK_SOURCE) },
+    layer_degraded: { source: reqF(R_HOOK_SOURCE) },
 });
 const HOOKS_ROSTER_HTTP_ROW = shapeRule("hooks roster http row", {
     source: reqF(R_HOOK_SOURCE),
@@ -1957,6 +1956,8 @@ const RETRY_COMMON_SPEC = {
     sleptMs: optF(R_NUM0),
     waitSegment: optF(R_NONEMPTY),
     seat: optF(R_NONEMPTY),
+    providerMessage: optF(R_NONEMPTY),
+    toolCallId: optF(R_NONEMPTY),
 };
 const RETRY_STATUS = armsRule("retry status", "kind", {
     stalled: { ...RETRY_COMMON_SPEC, detail: optF(R_STR) },
@@ -2519,9 +2520,11 @@ const checkSettingsState = seatCheck((v) => {
         return bad("dataRoot must be a string when present", "dataRoot");
     return true;
 });
-const checkPickFolderResult = (v) => v === null || isFolderPath(v)
+const pickedPathResultCheck = (verb) => (v) => v === null || isFolderPath(v)
     ? true
-    : bad("pickFolder result must be null (cancelled) or a non-empty path string");
+    : bad(`${verb} result must be null (cancelled) or a non-empty path string`);
+const checkPickFolderResult = pickedPathResultCheck("pickFolder");
+const checkPickFileResult = pickedPathResultCheck("pickFile");
 const checkRecentFolderRow = seatCheck((v) => {
     if (!isPlainRecord(v))
         return bad("recent folder row is not a plain object");
@@ -2579,6 +2582,7 @@ export const LOCAL_SESSIONS_SPEC = {
         listModels: { kind: "invoke", check: checkLiveModelCatalog },
         applyModelConfig: { kind: "invoke", check: checkApplyModelConfigResult },
         pickFolder: { kind: "invoke", check: checkPickFolderResult },
+        pickFile: { kind: "invoke", check: checkPickFileResult },
         listRecentFolders: { kind: "invoke", check: checkRecentFoldersResult },
         noteRecentFolder: { kind: "invoke", check: checkOkAck }, patchSession: { kind: "invoke", check: checkLocalSessionRecord },
         listDevices: { kind: "invoke", check: checkDeviceListOutcome },
@@ -2647,6 +2651,7 @@ export const SEAT_METHOD_NAMES = [
     "listModels",
     "applyModelConfig",
     "pickFolder",
+    "pickFile",
     "listRecentFolders",
     "noteRecentFolder", "patchSession",
     "listDevices",
@@ -3041,7 +3046,7 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
     },
     SeatCapabilitiesState: {
         check: checkSeatCapabilitiesState,
-        validated: ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit"],
+        validated: ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles", "thinkingLatch", "computerUseSwitch", "engineModeDefaultOnly", "seatActions", "notificationLevels", "modsView", "quickEntryShortcut", "hooksRoster", "mcpServers", "mcpServerEdit", "skills", "skillsEdit", "modelPool", "modelPoolEdit", "pickFile"],
         unchecked: [],
     },
     RecentFoldersResult: {
@@ -3136,6 +3141,11 @@ export const SEAT_VALIDATOR_COVERAGE_EXEMPT = [
         check: checkPickFolderResult,
         why: "载荷是**串或 null**(选中的路径 / 用户取消,CC-469),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由对应的座位契约测试套承担:认 null 与非空串、拒空串 / 数 / undefined / 对象 / 布尔五形。",
     },
+    {
+        label: "PickFileResult",
+        check: checkPickFileResult,
+        why: "载荷是**串或 null**(选中的文件路径 / 用户取消,CC-575),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起;与 `PickFolderResult` 同形、路径判据同一只。判别力由座位契约测试套承担(run-seat-wave2-test.mjs ST7):认 null 与非空串(原文字节)、拒空串 / 数 / 零 / undefined / 对象 / 布尔 / 数组,拒句点名 pickFile,且与 pickFolder 的回执出站门在同一批输入上放行 / 拒绝一致。",
+    },
     {
         label: "BooleanAck",
         check: checkBooleanAck,
@@ -3177,6 +3187,7 @@ const _seatContractPins = [
     true, true, true, true,
     true, true, true,
     true, true, true, true,
+    true, true,
     true,
     true, true, true,
     true, true, true, true, true, true,

package/dist/sessionEngine.js

@@ -52,7 +52,7 @@ function declaredBinding(center, scope, name, viaCenter) {
 }
 function addressBinding(raw) {
     const u = tupleOriginUrlOf(raw);
-    if (u === undefined || !carriesNoCredentialSlots(u))
+    if (u === undefined || !carriesNoCredentialSlots(raw))
         return fail('address-invalid');
     const address = engineNamespaceKeyFor(raw);
     return Object.freeze({

package/dist/sessionHooksRoster.js

@@ -1,4 +1,4 @@
-import { HOOK_ENTRY_TYPE_WORDS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_EXCLUSION_REASONS, PLUGIN_HOOK_REASONS, SETTINGS_HOOK_DROP_REASONS, hooksWirePlanShapeOf, isEngineFiredHookEvent, } from './pluginHooksWire.js';
+import { HOOK_ENTRY_TYPE_WORDS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_EXCLUSION_REASONS, PLUGIN_HOOK_REASONS, SETTINGS_HOOK_DROP_REASONS, engineLaneOf, hooksWirePlanShapeOf, planSettingsContractOf, } from './pluginHooksWire.js';
 import { HTTP_POLICY_DROP_REASONS } from './httpHookPolicy.js';
 import { HOOK_SETTINGS_SOURCE_TEXT } from './settingsHooksSalvage.js';
 import { SETTINGS_HOOK_EVENTS, SETTINGS_HOOKS_DROPPED_PIECE_CODES, SETTINGS_HOOKS_REJECTION_CODES } from './generated/settingsSchemaFns.js';
@@ -37,10 +37,10 @@ function coordOf(row) {
     }
     return { source, event, groupIndex, hookIndex, ...typed };
 }
-function droppedStatusOf(event, notRun) {
+function droppedStatusOf(event, notRun, engineEvent) {
     if (notRun)
         return 'not_run';
-    return isEngineFiredHookEvent(event) ? 'shell' : undefined;
+    return engineEvent(event) ? 'shell' : undefined;
 }
 const rosterUnreadable = () => Object.freeze({ kind: 'unreadable', why: renderMessage(msg('config.hooks.roster.unreadable')) });
 export function sessionHooksRosterOf(plan) {
@@ -61,11 +61,12 @@ export function sessionHooksRosterOf(plan) {
             const reason = field(r, 'reason');
             addRow(at !== undefined && inWords(PLUGIN_HOOK_DISPOSITIONS, disposition) && inWords(PLUGIN_HOOK_REASONS, reason) ? { ...at, status: disposition, reason } : undefined);
         }
+        const engineEvent = engineLaneOf(planSettingsContractOf(plan));
         for (const r of ownRowsOf(plan, 'settingsDropped') ?? []) {
             const at = coordOf(r);
             const reason = field(r, 'reason');
             const notRun = field(r, 'notRun');
-            const status = at !== undefined && typeof notRun === 'boolean' ? droppedStatusOf(at.event, notRun) : undefined;
+            const status = at !== undefined && typeof notRun === 'boolean' ? droppedStatusOf(at.event, notRun, engineEvent) : undefined;
             addRow(at !== undefined && status !== undefined && inWords(SETTINGS_HOOK_DROP_REASONS, reason) ? { ...at, status, reason } : undefined);
         }
         for (const r of ownRowsOf(plan, 'settingsExcluded') ?? []) {
@@ -83,8 +84,9 @@ export function sessionHooksRosterOf(plan) {
         }
         for (const r of ownRowsOf(plan, 'settingsWithheld') ?? []) {
             const source = field(r, 'source');
-            if (isSource(source) && field(r, 'cause') === 'trust_withheld')
-                appendOwnElement(layers, Object.freeze({ source, state: 'trust_withheld' }));
+            const cause = field(r, 'cause');
+            if (isSource(source) && (cause === 'trust_withheld' || cause === 'layer_degraded'))
+                appendOwnElement(layers, Object.freeze({ source, state: cause }));
             else
                 unlisted += 1;
         }

package/dist/sessionIdSegment.d.ts

@@ -1,4 +1,3 @@
-export declare function isDotSegment(seg: string): boolean;
 export declare function isSessionIdPathSegment(id: unknown): id is string;
 export type SessionIdRefusalWhy = 'not_string' | 'bad_shape' | 'bad_version' | 'bad_variant';
 export interface SessionIdRefusal {

package/dist/sessionIdSegment.js

@@ -1,6 +1,4 @@
-export function isDotSegment(seg) {
-    return seg === '.' || seg === '..';
-}
+import { isDotSegment } from './pathShape.js';
 export function isSessionIdPathSegment(id) {
     if (typeof id !== 'string' || id === '' || isDotSegment(id))
         return false;

package/dist/sessionMemoryErase.js

@@ -2,7 +2,7 @@ import { isLoopbackWireUrl, resolveWireAuth } from './engineWireSdk.js';
 import { INJECTED_WIRE_SETTLE_MS, connectionLostDetail, noAnswerDetailFrom, noAnswerKindOf, provablyNotSent, settleInjected } from './engineWireFor.js';
 import { memoryEraseReplayPosture, readMemoryEraseReceipt } from './memoryEntriesWire.js';
 import { normalizeWirePrincipal } from './principalWire.js';
-import { MEMORY_CONTROL_PLANE_CORRUPT } from './engineErrorCodes.js';
+import { MEMORY_CONTROL_PLANE_CORRUPT, ROUTE_NOT_FOUND } from './engineErrorCodes.js';
 import { isSessionIdPathSegment } from './sessionIdSegment.js';
 import { msg, renderMessage } from './i18n/translate.js';
 const PRINCIPAL_HEADER = 'x-agent-principal';
@@ -340,7 +340,7 @@ function bandOfCode(code) {
             return { refused: 'memory_engine_absent' };
         case 'not_found.session':
             return { refused: 'session_not_found' };
-        case 'not_found.route':
+        case ROUTE_NOT_FOUND:
             return { refused: 'route_absent' };
         case 'request.path_malformed':
         case 'request.body_shape':

package/dist/sessionMemoryStatus.js

@@ -2,6 +2,7 @@ import { isSessionIdPathSegment } from './sessionIdSegment.js';
 import { readThrownSlot, THROWN_SLOT_UNREADABLE } from './wireFailureShape.js';
 import { isUiLanguage } from './env/uiLanguage.js';
 import { msg, renderLanguageOf, renderMessage } from './i18n/translate.js';
+import { ROUTE_NOT_FOUND } from './engineErrorCodes.js';
 export const MEMORY_SYNC_WAY_OUT_DELETE_CURSOR = 'delete_cursor';
 const MEMORY_SYNC_PARKED_READ_MAX = 256;
 export function classifyMemoryStatusFailure(e) {
@@ -16,7 +17,7 @@ export function classifyMemoryStatusFailure(e) {
             return { kind: 'unsupported', reason: 'capability' };
         if (code.startsWith('feature.'))
             return { kind: 'unsupported', reason: 'feature' };
-        if (code === 'not_found.route')
+        if (code === ROUTE_NOT_FOUND)
             return { kind: 'unsupported', reason: 'route' };
         if (code === 'not_found.session')
             return { kind: 'not_found' };

package/dist/sessionOccupant.d.ts

@@ -0,0 +1,29 @@
+import type { UiLanguage } from './env/uiLanguage.js';
+export interface ActiveRunPendingGate {
+    readonly kind: string | null;
+    readonly decidePath: string | null;
+    readonly governanceForced?: true;
+    readonly checkpointId?: string;
+}
+export type SessionOccupant = 'running' | 'parked' | 'unreadable' | 'released';
+export declare function sessionOccupantOf(activeTaskId: string | null | undefined, activeTaskStatus: string | undefined, stale: boolean): SessionOccupant;
+export interface ActiveRunBusySignal {
+    readonly activeTaskId: string | null;
+    readonly activeTaskStatus: string | null;
+    readonly pendingGate: ActiveRunPendingGate | null;
+    readonly occupancy?: SessionOccupant;
+    readonly msSinceLastActivity?: number;
+}
+export type BusyRowFace = 'interactive' | 'scripted';
+export interface BusyRowSlots {
+    readonly endRun?: string;
+    readonly freshSession?: string;
+}
+export declare function gateKindPhraseOf(kind: string | null | undefined, lang?: UiLanguage): string;
+export declare function endRunClauseOf(copy: BusyRowSlots | undefined, taskId: string | null | undefined, lang?: UiLanguage, face?: BusyRowFace): string;
+export declare function governanceOriginClauseOf(signal: {
+    readonly pendingGate?: {
+        readonly governanceForced?: true;
+    } | null;
+} | null | undefined, lang?: UiLanguage): string;
+export declare function sessionBusyRowOf(signal: ActiveRunBusySignal, face: BusyRowFace, copy?: BusyRowSlots, lang?: UiLanguage): string;

package/dist/sessionOccupant.js

@@ -0,0 +1,78 @@
+import { displayUntrusted } from './displayUntrusted.js';
+import { guardedRead } from './ownKey.js';
+import { msg, renderMessage } from './i18n/translate.js';
+import { isSdkRunParked } from './terminalStatuses.js';
+export function sessionOccupantOf(activeTaskId, activeTaskStatus, stale) {
+    if (activeTaskId === null)
+        return 'released';
+    if (typeof activeTaskId !== 'string' || activeTaskId.length === 0)
+        return 'unreadable';
+    if (stale === true)
+        return 'unreadable';
+    if (activeTaskStatus === 'running')
+        return 'running';
+    return isSdkRunParked(activeTaskStatus) ? 'parked' : 'unreadable';
+}
+const sayOf = (lang, key, params) => renderMessage(msg(key, params), lang);
+const BUSY_WORD_SHOWN_MAX = 120;
+function shownOf(raw, max) {
+    return typeof raw === 'string' ? displayUntrusted(raw, max === undefined ? {} : { max }) : '';
+}
+export function gateKindPhraseOf(kind, lang) {
+    return kind ? sayOf(lang, 'session.selfHeal.gate.kind', { kind }) : sayOf(lang, 'session.selfHeal.gate.generic');
+}
+export function endRunClauseOf(copy, taskId, lang, face = 'scripted') {
+    let host;
+    try {
+        host = copy?.endRun;
+    }
+    catch {
+        host = undefined;
+    }
+    const phrase = typeof host === 'string' ? host.trim().replace(/[\s.;。；!！?？]+$/u, '') : '';
+    if (/[\p{L}\p{N}]/u.test(phrase))
+        return phrase;
+    if (face === 'interactive') {
+        return taskId ? sayOf(lang, 'session.selfHeal.endRun.engineInteractive', { taskId }) : sayOf(lang, 'session.selfHeal.endRun.engineInteractive.noId');
+    }
+    return sayOf(lang, 'session.selfHeal.endRun.engine', { cancelPath: `POST /v1/runs/${taskId ? taskId : '<id>'}/cancel` });
+}
+export function governanceOriginClauseOf(signal, lang) {
+    return signal?.pendingGate?.governanceForced === true ? sayOf(lang, 'session.selfHeal.governanceOrigin') : '';
+}
+export function sessionBusyRowOf(signal, face, copy, lang) {
+    const raw = guardedRead(() => signal.occupancy);
+    const occupancy = raw === 'running' || raw === 'parked' || raw === 'released' ? raw : 'unreadable';
+    if (occupancy === 'released')
+        return sayOf(lang, 'session.busy.released');
+    const activeTaskId = signal.activeTaskId;
+    const handle = activeTaskId ? msg('session.selfHeal.handle.run', { taskId: activeTaskId }) : '';
+    const endRun = endRunClauseOf(copy, activeTaskId, lang, face);
+    let hostFresh;
+    try {
+        hostFresh = copy?.freshSession;
+    }
+    catch {
+        hostFresh = undefined;
+    }
+    const freshSession = typeof hostFresh === 'string' ? hostFresh : sayOf(lang, face === 'interactive' ? 'session.busy.freshSession.interactive' : 'session.selfHeal.freshSession.default');
+    if (occupancy === 'running')
+        return sayOf(lang, 'session.busy.running', { handle, endRun, freshSession });
+    if (occupancy === 'parked') {
+        const decidePath = signal.pendingGate?.decidePath ?? null;
+        if (face === 'scripted' && decidePath) {
+            const status = shownOf(signal.activeTaskStatus, BUSY_WORD_SHOWN_MAX);
+            return sayOf(lang, 'session.busy.parkedDecide', {
+                handle,
+                status: status !== '' ? msg('session.selfHeal.headless.status', { status }) : '',
+                gate: gateKindPhraseOf(shownOf(signal.pendingGate?.kind, BUSY_WORD_SHOWN_MAX), lang),
+                decidePath: shownOf(decidePath),
+                endRun,
+                freshSession,
+                governance: governanceOriginClauseOf(signal, lang),
+            });
+        }
+        return sayOf(lang, 'session.busy.parked', { handle, endRun, freshSession });
+    }
+    return sayOf(lang, 'session.busy.unreadable', { handle, endRun, freshSession });
+}

package/dist/settingsHooksSalvage.d.ts

@@ -1,5 +1,6 @@
 import type { WireHooksConfig } from './finalVerifyWire.js';
 import type { SettingsDocument } from './host.js';
+import type { HooksEntryKeyReader } from './hooksReaderGenerations.js';
 import type { HookSettingsSource } from './pluginHooksWire.js';
 export type HooksSalvageOutcome = 'loaded' | 'loaded-partial' | 'rejected';
 export type HooksSalvageDropCode = 'hooks-not-object' | 'unknown-event' | 'event-not-array' | 'matcher-invalid' | 'entry-invalid';
@@ -43,7 +44,9 @@ export declare function salvageSettingsHooksEntries(doc: SettingsDocument | null
 export declare function hooksGroupUnreadKeys(event: string, group: object): readonly string[] | undefined;
 export type HooksGroupAuthoredSource = 'absent' | 'present' | 'unreadable';
 export declare function hooksGroupAuthoredSource(group: object): HooksGroupAuthoredSource;
-export declare function hooksEntryUnreadKeys(event: string, entry: object, notRead: readonly string[]): readonly string[] | undefined;
+export declare function hooksEntryContractView(event: string, entry: object): object | undefined;
+export declare function hooksEntryUnreadKeys(event: string, entry: object, reader: HooksEntryKeyReader): readonly string[] | undefined;
+export declare function isGuardHookEvent(event: string): boolean;
 export declare function hooksKeyCoordinateText(path: readonly (string | number)[]): string;
 export declare const HOOK_SETTINGS_SOURCE_TEXT: Readonly<Record<HookSettingsSource, string>>;
 export declare function layerNotAppliedRefusesTurn(source: HookSettingsSource): boolean;