@sema-agent/client-core 0.112.1 → 0.113.0

package/dist/gateVocabulary.js

@@ -1,5 +1,5 @@
 import { CORE_DENIED_BY_VALUES, CORE_PERSISTED_RULE_MANDATES } from './generated/engineFactTables.js';
-import { guardedRead, readOwnDataValue } from './ownKey.js';
+import { guardedRead, readAskOrigin, readOwnDataValue } from './ownKey.js';
 import { msg, renderMessage } from './i18n/translate.js';
 export const CC_TOOL_DENIAL_KINDS = Object.freeze([
     'user-rejected',
@@ -48,23 +48,25 @@ export function gateDeniedByDetail(deniedBy, lang) {
     const word = typeof deniedBy === 'string' && deniedBy.length > 0 ? deniedBy : msg('approval.card.noWord');
     return renderMessage(msg('approval.deniedBy.unknown', { word }), lang);
 }
+const askOriginLayers = (headline, detail) => Object.freeze({ headline, detail });
 const ASK_ORIGIN_KEYS = Object.freeze({
-    content_question: 'approval.origin.contentQuestion',
-    plan_review: 'approval.origin.planReview',
-    ancestor_marked: 'approval.origin.ancestorMarked',
-    org_unavailable: 'approval.origin.orgUnavailable',
-    org_rule: 'approval.origin.orgRule',
-    rule_store_unavailable: 'approval.origin.ruleStoreUnavailable',
-    hook: 'approval.origin.hook',
-    ask_rule: 'approval.origin.askRule',
-    denial_limit_fallback: 'approval.origin.denialLimitFallback',
-    shell_gate_tighten: 'approval.origin.shellGateTighten',
-    safety_tighten: 'approval.origin.safetyTighten',
-    policy: 'approval.origin.policy',
+    content_question: askOriginLayers(null, 'approval.origin.contentQuestion'),
+    plan_review: askOriginLayers(null, 'approval.origin.planReview'),
+    ancestor_marked: askOriginLayers('approval.originHeadline.ancestorMarked', 'approval.origin.ancestorMarked'),
+    org_unavailable: askOriginLayers('approval.originHeadline.orgUnavailable', 'approval.origin.orgUnavailable'),
+    org_rule: askOriginLayers('approval.originHeadline.orgRule', 'approval.origin.orgRule'),
+    rule_store_unavailable: askOriginLayers('approval.originHeadline.ruleStoreUnavailable', 'approval.origin.ruleStoreUnavailable'),
+    hook: askOriginLayers('approval.originHeadline.hook', 'approval.origin.hook'),
+    ask_rule: askOriginLayers(null, 'approval.origin.askRule'),
+    denial_limit_fallback: askOriginLayers('approval.originHeadline.denialLimitFallback', 'approval.origin.denialLimitFallback'),
+    integrity_guard: askOriginLayers('approval.originHeadline.integrityGuard', 'approval.origin.integrityGuard'),
+    shell_gate_tighten: askOriginLayers('approval.originHeadline.shellGateTighten', 'approval.origin.shellGateTighten'),
+    safety_tighten: askOriginLayers('approval.originHeadline.safetyTighten', 'approval.origin.safetyTighten'),
+    policy: askOriginLayers(null, 'approval.origin.policy'),
 });
 export function askOriginDetail(origin, lang) {
     const known = typeof origin === 'string' && Object.hasOwn(ASK_ORIGIN_KEYS, origin)
-        ? ASK_ORIGIN_KEYS[origin]
+        ? ASK_ORIGIN_KEYS[origin]?.detail
         : undefined;
     if (known !== undefined)
         return renderMessage(msg(known), lang);
@@ -84,6 +86,7 @@ const ASK_ORIGIN_QUIET = Object.freeze({
     hook: false,
     ask_rule: true,
     denial_limit_fallback: false,
+    integrity_guard: false,
     shell_gate_tighten: false,
     safety_tighten: false,
     policy: true,
@@ -96,6 +99,29 @@ export function askOriginNoteOf(origin, lang) {
     }
     return renderMessage(unknownAskOriginSentence(undefined), lang);
 }
+function askOriginHeadlineOf(origin, lang) {
+    const layers = Object.hasOwn(ASK_ORIGIN_KEYS, origin) ? ASK_ORIGIN_KEYS[origin] : undefined;
+    if (layers === undefined)
+        return renderMessage(msg('approval.originHeadline.unknown'), lang);
+    return layers.headline === null ? undefined : renderMessage(msg(layers.headline), lang);
+}
+export const APPROVAL_CARD_HEADLINE_SOURCES = Object.freeze(['origin']);
+export function approvalCardHeadlineOf(card, lang) {
+    if (typeof card !== 'object' || card === null)
+        return undefined;
+    try {
+        const origin = readAskOrigin(card);
+        if (origin === undefined)
+            return undefined;
+        const text = askOriginHeadlineOf(origin, lang);
+        if (text === undefined || text.trim() === '')
+            return undefined;
+        return Object.freeze({ source: 'origin', text });
+    }
+    catch {
+        return undefined;
+    }
+}
 const RULE_OFFERS_ABSENCE_KEYS = Object.freeze({
     mandated: { line: null },
     allow_outranked: { line: 'approval.ruleOffer.absence.allowOutranked' },

package/dist/generated/engineFactTables.d.ts

@@ -49,7 +49,7 @@ export declare const CORE_RESUME_STARTUP_CAUSES: readonly ["environment", "sessi
 export declare const CORE_BUILTIN_SUBAGENT_TYPES: readonly ["Explore", "Plan", "fork", "general-purpose"];
 export declare const CORE_RULE_OFFERS_ABSENCES: readonly ["mandated", "allow_outranked", "ask_rule_matched", "lane_cannot_speak"];
 export declare const CORE_TOOL_APPROVAL_CARDS: readonly ["file-edit", "file-write", "notebook-edit", "shell", "fetch", "skill", "workflow", "plan", "question", "generic", "computer-access", "computer-control"];
-export declare const CORE_MCP_FAILURE_KINDS: readonly ["connect_refused", "connection_failed", "connection_closed", "unauthorized", "http_status", "not_mcp_response", "spawn_failed", "timeout", "protocol", "invalid_config", "credential_unavailable", "host_refused", "unknown"];
+export declare const CORE_MCP_FAILURE_KINDS: readonly ["connect_refused", "connection_failed", "connection_closed", "unauthorized", "http_status", "not_mcp_response", "spawn_failed", "timeout", "protocol", "invalid_config", "credential_unavailable", "host_refused", "revoked", "unknown"];
 export declare const CORE_MCP_AUTHORIZATION_REASONS: readonly ["rejected", "scope", "none"];
 export declare const CORE_PERSISTED_RULE_MATCHES: readonly ["exact", "prefix", "wildcard", "pattern", "subpath", "path", "name", "name_prefix", "host", "subdomain", "tool"];
 export declare const CORE_APPROVAL_REMEDY_KINDS: readonly ["approver", "permission_mode"];
@@ -57,7 +57,7 @@ export declare const CORE_ASK_CLASSES_WITHOUT_REASON_ROW: readonly ["probe"];
 export declare const CORE_ASK_CLASS_REASONS: Readonly<Record<Exclude<(typeof CORE_ASK_CLASSES)[number], (typeof CORE_ASK_CLASSES_WITHOUT_REASON_ROW)[number]>, string>>;
 export declare const CORE_USER_ATTACHMENT_KINDS: readonly ["text", "notebook", "image", "pdf", "directory", "client_text", "client_image"];
 export declare const CORE_USER_ATTACHMENT_SUPPLIES: readonly ["path", "content_text", "content_image"];
-export declare const CORE_USER_ATTACHMENT_OUTCOMES: readonly ["attached", "partial", "unchanged", "not_attached"];
+export declare const CORE_USER_ATTACHMENT_OUTCOMES: readonly ["attached", "partial", "not_attached"];
 export interface CoreUserAttachmentSeatLimits {
     readonly maxEntries: number;
     readonly maxRenderedTextChars: number;
@@ -77,3 +77,5 @@ export declare const CORE_REFUSAL_ECHO_KINDS: readonly ["path", "command", "patt
 export declare const CORE_DISCARDED_DELIVERY_PATHS: readonly ["live", "box", "drain", "notice"];
 export declare const CORE_INPUT_AUTHORS: readonly ["operator", "parent_model", "workflow", "peer", "observer", "engine", "extension"];
 export declare const CORE_RUN_ORIGINS: readonly ["scheduled"];
+export declare const CORE_SESSION_RULES_GRAMMAR: number;
+export declare const CORE_CONFIG_REFUSAL_CODES: readonly ["config.a2a_peer_name_collision", "config.advisor_model_invalid", "config.advisor_tool_invalid", "config.agent.duplicate", "config.agent.invalid", "config.agent.reserved_name", "config.agent.unknown_model", "config.agent.unknown_tool", "config.agent_config_dir_invalid", "config.agents.no_delegation_tool", "config.approval_reach_invalid", "config.attachment_invalid", "config.auto_consolidation", "config.auto_mode_classifier_fallback_invalid", "config.auto_mode_denial_limit_invalid", "config.auto_mode_rate_limit_break_invalid", "config.auto_mode_timeout_invalid", "config.brain_call_guardrail_invalid", "config.cascade_invalid", "config.circuit_breaker_invalid", "config.command_sandbox_unavailable", "config.compliance_denied", "config.compliance_posture", "config.compliance_required", "config.context_settings_unknown_word", "config.credential_in_declaration", "config.credential_ref_invalid", "config.cross_boundary_posture", "config.cwd_conflicts_restore", "config.cwd_not_honored", "config.cwd_outside_root", "config.cwd_unsupported", "config.defer_mode_invalid", "config.delegation_entry_caps", "config.deps_retired_key", "config.egress_requires_write_effect", "config.empty_objective", "config.env_lifetime_invalid", "config.execution_env_home_dir_invalid", "config.extra_body_output_cap", "config.extra_tool_names", "config.host_floor_invalid", "config.host_floor_refused", "config.image_invalid", "config.interaction_posture", "config.interaction_wiring", "config.invalid_argument", "config.invalid_checkpoint_store", "config.invalid_file_history_capture", "config.invalid_file_history_store", "config.invalid_governance_baseline", "config.invalid_on_track_failure", "config.invalid_output_schema", "config.invalid_permission_rules", "config.invalid_task_registry", "config.invalid_tool_name_set", "config.language_invalid", "config.legacy_tool_name", "config.limit_invalid", "config.limit_unknown_key", "config.locked_key", "config.locked_registry", "config.mcp_content_class", "config.mcp_dialable_failed", "config.mcp_fingerprint_invalid", "config.mcp_host_seat_missing", "config.mcp_host_seat_undeclared", "config.mcp_pool_foreign_connection", "config.mcp_probe_option", "config.mcp_server_name_collision", "config.mcp_startup_timeout_invalid", "config.memory_capture_policy", "config.memory_capture_spelling", "config.memory_capture_unsupported", "config.memory_challenge_request", "config.memory_consolidation", "config.memory_consolidation_driver", "config.memory_consolidation_lease_required", "config.memory_consolidation_provenance_off", "config.memory_consolidation_replica_local", "config.memory_consolidation_write_gate", "config.memory_delegation_evidence", "config.memory_dir_not_backend_root", "config.memory_distiller_purity_contract", "config.memory_dual_root_overlap", "config.memory_erasure_request", "config.memory_erasure_scope", "config.memory_export_request", "config.memory_hold_timeout", "config.memory_import_request", "config.memory_persistence_invalid", "config.memory_project_identity", "config.memory_project_key_spelling", "config.memory_project_marker", "config.memory_project_marker_nested", "config.memory_provenance", "config.memory_reanchor", "config.memory_rebuild_reason", "config.memory_scope_key", "config.memory_scope_placement", "config.memory_scope_spelling", "config.memory_sync_cursor_mismatch", "config.memory_sync_store", "config.memory_sync_target_mismatch", "config.memory_write_scope_mismatch", "config.microcompact_invalid", "config.missing_scope", "config.model_fallback_invalid", "config.mods_invalid", "config.nothing_to_wake", "config.output_style_invalid", "config.parent_spec_seat_missing", "config.peer_answer_invalid", "config.peer_presence_invalid", "config.peer_seat_missing", "config.permission_mode_invalid", "config.placement_not_honored", "config.placement_root_invalid", "config.plan_file_invalid", "config.principal_inbox_consumer_invalid", "config.project_id_invalid", "config.project_identity_mismatch", "config.prompt_selector_invalid", "config.prompt_trait_unknown", "config.protocol_endpoint_unbound", "config.protocol_header_collision", "config.protocol_plaintext_credentials", "config.read_deny_floor_unkept", "config.read_face_invalid", "config.read_face_org_task_escalation", "config.read_face_readonly_conflict", "config.read_face_seat", "config.registry_scope_mismatch", "config.reserved_tool_name", "config.retention_capability", "config.retention_policy", "config.retention_policy_invalid", "config.run_origin_invalid", "config.safe_vars_reserved_name", "config.sandbox_admission_unavailable", "config.sandbox_settings_invalid", "config.session_rules_unreadable", "config.session_workspace_changed", "config.session_workspace_invalid", "config.shell_gate_value_retired", "config.skill_base_dir_invalid", "config.skill_deny_unreadable", "config.skill_listing_budget_invalid", "config.spec_member_unreadable", "config.spec_retired_key", "config.spec_unknown_key", "config.stale_tool_result_offload_invalid", "config.stall_timeout_invalid", "config.stall_timeout_retired", "config.store_durability_invalid", "config.store_fidelity_invalid", "config.tool_contract_too_long", "config.tool_face_control", "config.tool_face_invalid", "config.tool_materialize_invalid", "config.tool_materialize_unreachable", "config.tool_model_gate_env_invalid", "config.tool_model_gate_invalid", "config.tool_mount_denied", "config.tool_name_invalid", "config.tool_name_too_long", "config.tool_roster_bound", "config.tool_roster_mount_tag", "config.tool_roster_origin", "config.tool_schema_bound", "config.tool_search_invalid", "config.toolpolicy.unmatched_names", "config.unknown_role", "config.usage_window_invalid", "config.usage_window_unpriced", "config.user_attachment_invalid", "config.user_invoked_skill_unknown", "config.verify_internals_invalid", "config.web_max_bytes_invalid", "config.web_search_max_results_invalid", "config.web_summary_max_content_invalid", "config.web_timeout_invalid", "config.write_exempt_dir_covers_root", "config.write_face_invalid", "config.write_face_org_task_escalation", "config.write_face_readonly_conflict", "resume_at.before_root_unsupported", "resume_at.before_target_not_user", "resume_at.conflicts_resume", "resume_at.invalid_mode", "resume_at.mode_without_target", "resume_at.no_session", "resume_at.not_a_message", "resume_at.not_found"];

package/dist/generated/engineFactTables.js

@@ -62,7 +62,6 @@ export const CORE_ENGINE_CARD_TYPES = Object.freeze([
     "bash_self_kill_refused",
     "text",
     "notebook",
-    "file_unchanged",
     "image",
     "document",
     "edit",
@@ -381,6 +380,7 @@ export const CORE_MCP_FAILURE_KINDS = Object.freeze([
     "invalid_config",
     "credential_unavailable",
     "host_refused",
+    "revoked",
     "unknown",
 ]);
 export const CORE_MCP_AUTHORIZATION_REASONS = Object.freeze([
@@ -453,7 +453,6 @@ export const CORE_USER_ATTACHMENT_SUPPLIES = Object.freeze([
 export const CORE_USER_ATTACHMENT_OUTCOMES = Object.freeze([
     "attached",
     "partial",
-    "unchanged",
     "not_attached",
 ]);
 export const CORE_USER_ATTACHMENT_SEAT = Object.freeze({
@@ -489,3 +488,200 @@ export const CORE_INPUT_AUTHORS = Object.freeze([
 export const CORE_RUN_ORIGINS = Object.freeze([
     "scheduled",
 ]);
+export const CORE_SESSION_RULES_GRAMMAR = 7;
+export const CORE_CONFIG_REFUSAL_CODES = Object.freeze([
+    "config.a2a_peer_name_collision",
+    "config.advisor_model_invalid",
+    "config.advisor_tool_invalid",
+    "config.agent.duplicate",
+    "config.agent.invalid",
+    "config.agent.reserved_name",
+    "config.agent.unknown_model",
+    "config.agent.unknown_tool",
+    "config.agent_config_dir_invalid",
+    "config.agents.no_delegation_tool",
+    "config.approval_reach_invalid",
+    "config.attachment_invalid",
+    "config.auto_consolidation",
+    "config.auto_mode_classifier_fallback_invalid",
+    "config.auto_mode_denial_limit_invalid",
+    "config.auto_mode_rate_limit_break_invalid",
+    "config.auto_mode_timeout_invalid",
+    "config.brain_call_guardrail_invalid",
+    "config.cascade_invalid",
+    "config.circuit_breaker_invalid",
+    "config.command_sandbox_unavailable",
+    "config.compliance_denied",
+    "config.compliance_posture",
+    "config.compliance_required",
+    "config.context_settings_unknown_word",
+    "config.credential_in_declaration",
+    "config.credential_ref_invalid",
+    "config.cross_boundary_posture",
+    "config.cwd_conflicts_restore",
+    "config.cwd_not_honored",
+    "config.cwd_outside_root",
+    "config.cwd_unsupported",
+    "config.defer_mode_invalid",
+    "config.delegation_entry_caps",
+    "config.deps_retired_key",
+    "config.egress_requires_write_effect",
+    "config.empty_objective",
+    "config.env_lifetime_invalid",
+    "config.execution_env_home_dir_invalid",
+    "config.extra_body_output_cap",
+    "config.extra_tool_names",
+    "config.host_floor_invalid",
+    "config.host_floor_refused",
+    "config.image_invalid",
+    "config.interaction_posture",
+    "config.interaction_wiring",
+    "config.invalid_argument",
+    "config.invalid_checkpoint_store",
+    "config.invalid_file_history_capture",
+    "config.invalid_file_history_store",
+    "config.invalid_governance_baseline",
+    "config.invalid_on_track_failure",
+    "config.invalid_output_schema",
+    "config.invalid_permission_rules",
+    "config.invalid_task_registry",
+    "config.invalid_tool_name_set",
+    "config.language_invalid",
+    "config.legacy_tool_name",
+    "config.limit_invalid",
+    "config.limit_unknown_key",
+    "config.locked_key",
+    "config.locked_registry",
+    "config.mcp_content_class",
+    "config.mcp_dialable_failed",
+    "config.mcp_fingerprint_invalid",
+    "config.mcp_host_seat_missing",
+    "config.mcp_host_seat_undeclared",
+    "config.mcp_pool_foreign_connection",
+    "config.mcp_probe_option",
+    "config.mcp_server_name_collision",
+    "config.mcp_startup_timeout_invalid",
+    "config.memory_capture_policy",
+    "config.memory_capture_spelling",
+    "config.memory_capture_unsupported",
+    "config.memory_challenge_request",
+    "config.memory_consolidation",
+    "config.memory_consolidation_driver",
+    "config.memory_consolidation_lease_required",
+    "config.memory_consolidation_provenance_off",
+    "config.memory_consolidation_replica_local",
+    "config.memory_consolidation_write_gate",
+    "config.memory_delegation_evidence",
+    "config.memory_dir_not_backend_root",
+    "config.memory_distiller_purity_contract",
+    "config.memory_dual_root_overlap",
+    "config.memory_erasure_request",
+    "config.memory_erasure_scope",
+    "config.memory_export_request",
+    "config.memory_hold_timeout",
+    "config.memory_import_request",
+    "config.memory_persistence_invalid",
+    "config.memory_project_identity",
+    "config.memory_project_key_spelling",
+    "config.memory_project_marker",
+    "config.memory_project_marker_nested",
+    "config.memory_provenance",
+    "config.memory_reanchor",
+    "config.memory_rebuild_reason",
+    "config.memory_scope_key",
+    "config.memory_scope_placement",
+    "config.memory_scope_spelling",
+    "config.memory_sync_cursor_mismatch",
+    "config.memory_sync_store",
+    "config.memory_sync_target_mismatch",
+    "config.memory_write_scope_mismatch",
+    "config.microcompact_invalid",
+    "config.missing_scope",
+    "config.model_fallback_invalid",
+    "config.mods_invalid",
+    "config.nothing_to_wake",
+    "config.output_style_invalid",
+    "config.parent_spec_seat_missing",
+    "config.peer_answer_invalid",
+    "config.peer_presence_invalid",
+    "config.peer_seat_missing",
+    "config.permission_mode_invalid",
+    "config.placement_not_honored",
+    "config.placement_root_invalid",
+    "config.plan_file_invalid",
+    "config.principal_inbox_consumer_invalid",
+    "config.project_id_invalid",
+    "config.project_identity_mismatch",
+    "config.prompt_selector_invalid",
+    "config.prompt_trait_unknown",
+    "config.protocol_endpoint_unbound",
+    "config.protocol_header_collision",
+    "config.protocol_plaintext_credentials",
+    "config.read_deny_floor_unkept",
+    "config.read_face_invalid",
+    "config.read_face_org_task_escalation",
+    "config.read_face_readonly_conflict",
+    "config.read_face_seat",
+    "config.registry_scope_mismatch",
+    "config.reserved_tool_name",
+    "config.retention_capability",
+    "config.retention_policy",
+    "config.retention_policy_invalid",
+    "config.run_origin_invalid",
+    "config.safe_vars_reserved_name",
+    "config.sandbox_admission_unavailable",
+    "config.sandbox_settings_invalid",
+    "config.session_rules_unreadable",
+    "config.session_workspace_changed",
+    "config.session_workspace_invalid",
+    "config.shell_gate_value_retired",
+    "config.skill_base_dir_invalid",
+    "config.skill_deny_unreadable",
+    "config.skill_listing_budget_invalid",
+    "config.spec_member_unreadable",
+    "config.spec_retired_key",
+    "config.spec_unknown_key",
+    "config.stale_tool_result_offload_invalid",
+    "config.stall_timeout_invalid",
+    "config.stall_timeout_retired",
+    "config.store_durability_invalid",
+    "config.store_fidelity_invalid",
+    "config.tool_contract_too_long",
+    "config.tool_face_control",
+    "config.tool_face_invalid",
+    "config.tool_materialize_invalid",
+    "config.tool_materialize_unreachable",
+    "config.tool_model_gate_env_invalid",
+    "config.tool_model_gate_invalid",
+    "config.tool_mount_denied",
+    "config.tool_name_invalid",
+    "config.tool_name_too_long",
+    "config.tool_roster_bound",
+    "config.tool_roster_mount_tag",
+    "config.tool_roster_origin",
+    "config.tool_schema_bound",
+    "config.tool_search_invalid",
+    "config.toolpolicy.unmatched_names",
+    "config.unknown_role",
+    "config.usage_window_invalid",
+    "config.usage_window_unpriced",
+    "config.user_attachment_invalid",
+    "config.user_invoked_skill_unknown",
+    "config.verify_internals_invalid",
+    "config.web_max_bytes_invalid",
+    "config.web_search_max_results_invalid",
+    "config.web_summary_max_content_invalid",
+    "config.web_timeout_invalid",
+    "config.write_exempt_dir_covers_root",
+    "config.write_face_invalid",
+    "config.write_face_org_task_escalation",
+    "config.write_face_readonly_conflict",
+    "resume_at.before_root_unsupported",
+    "resume_at.before_target_not_user",
+    "resume_at.conflicts_resume",
+    "resume_at.invalid_mode",
+    "resume_at.mode_without_target",
+    "resume_at.no_session",
+    "resume_at.not_a_message",
+    "resume_at.not_found",
+]);

package/dist/generated/engineNoticeTables.js

@@ -19,6 +19,8 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "config.execution_env_capability_invalid",
     "config.read_deny_floor_unkept",
     "config.read_floor_confinement_unavailable",
+    "config.inherit_env_declared_late",
+    "config.command_sandbox_unavailable",
     "config.tool_card_undeclared",
     "config.tool_face_undeclared",
     "config.tool_face_invalid",
@@ -38,8 +40,12 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "permission.rule_row_dropped",
     "config.session_rules_earlier_grammar",
     "config.legacy_tool_name",
+    "config.toolpolicy.unmatched_names",
+    "config.agent.unknown_tool",
     "permission.allowed_tool_not_granted",
     "mods.registration_refused",
+    "mods.display_withheld",
+    "mods.stop_ended",
     "peer.inbound_disposition",
     "peer.held_settled",
     "peer.idle_subscription",
@@ -55,9 +61,10 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "delegation.resume_lane_missing",
     "delegation.delivery_discarded",
     "mcp.injection_dropped",
-    "mcp.revocation_probe_failed",
+    "protocol.revocation_probe_failed",
     "mcp.server_redialed",
     "mcp.authorization_required",
+    "mcp.server_unavailable",
     "mcp.credential_echoed",
     "workflow.governance_key_stripped",
     "workflow.agent_option_ignored",
@@ -91,9 +98,12 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "route.extra_body_reserved_dropped",
     "model.capability_downgraded",
     "model.role_defaulted",
+    "model.fallback",
     "context.tool_turn_repaired",
     "context.media_removed",
     "context.tool_schema_removed",
+    "context.messages_omitted",
+    "instructions.withheld",
     "task.user_steer_undrained",
     "task.user_followup_undrained",
     "steering.parked_input_blocked",
@@ -104,20 +114,26 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "task.tool_turn_incomplete",
     "approval.read_root_granted",
     "approval.read_root_grant_rejected",
+    "approval.approver_defect",
     "memory.capture_opted_out",
     "memory.capture_optout_unpersisted",
+    "memory.mount_failed",
     "skills.listing_truncated",
     "agents.listing_truncated",
     "tool_result.offload_put_failed",
     "tool_result.media_refused",
+    "tool_result.media_persisted",
     "config.image_processor_unavailable",
     "fs.staging_file_left",
     "fs.staging_file_swept",
     "session.lineage_rerooted",
-    "instructions.source_changed",
+    "rewind.boundary_unrecorded",
+    "verify.verifier_is_implementer",
     "memory.layer_locked_legacy",
     "server.model_unreachable",
     "permission.entry_mode_clamped",
+    "model.context_window_assumed",
+    "config.store_ephemeral",
 ]);
 export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "config.autocompact_window_clamped": "operator",
@@ -138,8 +154,10 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "config.write_protection_target_view_absent": "operator",
     "config.path_view_unresolved": "operator",
     "config.execution_env_capability_invalid": "operator",
-    "config.read_deny_floor_unkept": "operator",
+    "config.read_deny_floor_unkept": "user",
     "config.read_floor_confinement_unavailable": "operator",
+    "config.inherit_env_declared_late": "operator",
+    "config.command_sandbox_unavailable": "user",
     "config.tool_card_undeclared": "operator",
     "config.tool_face_undeclared": "operator",
     "config.tool_face_invalid": "operator",
@@ -159,8 +177,12 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "permission.rule_row_dropped": "user",
     "config.session_rules_earlier_grammar": "user",
     "config.legacy_tool_name": "user",
+    "config.toolpolicy.unmatched_names": "user",
+    "config.agent.unknown_tool": "user",
     "permission.allowed_tool_not_granted": "user",
     "mods.registration_refused": "user",
+    "mods.display_withheld": "user",
+    "mods.stop_ended": "user",
     "peer.inbound_disposition": "user",
     "peer.held_settled": "user",
     "peer.idle_subscription": "user",
@@ -176,9 +198,10 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "delegation.resume_lane_missing": "operator",
     "delegation.delivery_discarded": "operator",
     "mcp.injection_dropped": "user",
-    "mcp.revocation_probe_failed": "operator",
+    "protocol.revocation_probe_failed": "operator",
     "mcp.server_redialed": "operator",
     "mcp.authorization_required": "user",
+    "mcp.server_unavailable": "user",
     "mcp.credential_echoed": "operator",
     "workflow.governance_key_stripped": "operator",
     "workflow.agent_option_ignored": "operator",
@@ -211,10 +234,13 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "route.stream_end_ignored": "user",
     "route.extra_body_reserved_dropped": "operator",
     "model.capability_downgraded": "user",
-    "model.role_defaulted": "operator",
+    "model.role_defaulted": "user",
+    "model.fallback": "user",
     "context.tool_turn_repaired": "operator",
     "context.media_removed": "user",
     "context.tool_schema_removed": "user",
+    "context.messages_omitted": "user",
+    "instructions.withheld": "user",
     "task.user_steer_undrained": "user",
     "task.user_followup_undrained": "user",
     "steering.parked_input_blocked": "user",
@@ -225,20 +251,26 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "task.tool_turn_incomplete": "user",
     "approval.read_root_granted": "user",
     "approval.read_root_grant_rejected": "user",
+    "approval.approver_defect": "operator",
     "memory.capture_opted_out": "user",
     "memory.capture_optout_unpersisted": "user",
+    "memory.mount_failed": "user",
     "skills.listing_truncated": "operator",
     "agents.listing_truncated": "operator",
     "tool_result.offload_put_failed": "operator",
     "tool_result.media_refused": "operator",
+    "tool_result.media_persisted": "operator",
     "config.image_processor_unavailable": "operator",
     "fs.staging_file_left": "operator",
     "fs.staging_file_swept": "operator",
     "session.lineage_rerooted": "user",
-    "instructions.source_changed": "user",
+    "rewind.boundary_unrecorded": "user",
+    "verify.verifier_is_implementer": "user",
     "memory.layer_locked_legacy": "operator",
     "server.model_unreachable": "user",
     "permission.entry_mode_clamped": "user",
+    "model.context_window_assumed": "user",
+    "config.store_ephemeral": "user",
 });
 export const CORE_MCP_INJECTION_DROP_REASONS = Object.freeze([
     "malformed_entry",
@@ -267,6 +299,8 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "config.execution_env_capability_invalid": "engine",
     "config.read_deny_floor_unkept": "engine",
     "config.read_floor_confinement_unavailable": "engine",
+    "config.inherit_env_declared_late": "engine",
+    "config.command_sandbox_unavailable": "engine",
     "config.tool_card_undeclared": "engine",
     "config.tool_face_undeclared": "engine",
     "config.tool_face_invalid": "engine",
@@ -286,8 +320,12 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "permission.rule_row_dropped": "engine",
     "config.session_rules_earlier_grammar": "engine",
     "config.legacy_tool_name": "engine",
+    "config.toolpolicy.unmatched_names": "engine",
+    "config.agent.unknown_tool": "engine",
     "permission.allowed_tool_not_granted": "engine",
     "mods.registration_refused": "engine",
+    "mods.display_withheld": "engine",
+    "mods.stop_ended": "engine",
     "peer.inbound_disposition": "engine",
     "peer.held_settled": "engine",
     "peer.idle_subscription": "engine",
@@ -303,9 +341,10 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "delegation.resume_lane_missing": "engine",
     "delegation.delivery_discarded": "engine",
     "mcp.injection_dropped": "engine",
-    "mcp.revocation_probe_failed": "engine",
+    "protocol.revocation_probe_failed": "engine",
     "mcp.server_redialed": "engine",
     "mcp.authorization_required": "engine",
+    "mcp.server_unavailable": "engine",
     "mcp.credential_echoed": "engine",
     "workflow.governance_key_stripped": "engine",
     "workflow.agent_option_ignored": "engine",
@@ -339,9 +378,12 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "route.extra_body_reserved_dropped": "engine",
     "model.capability_downgraded": "engine",
     "model.role_defaulted": "engine",
+    "model.fallback": "engine",
     "context.tool_turn_repaired": "engine",
     "context.media_removed": "engine",
     "context.tool_schema_removed": "engine",
+    "context.messages_omitted": "engine",
+    "instructions.withheld": "engine",
     "task.user_steer_undrained": "engine",
     "task.user_followup_undrained": "engine",
     "steering.parked_input_blocked": "engine",
@@ -352,20 +394,26 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "task.tool_turn_incomplete": "engine",
     "approval.read_root_granted": "engine",
     "approval.read_root_grant_rejected": "engine",
+    "approval.approver_defect": "engine",
     "memory.capture_opted_out": "engine",
     "memory.capture_optout_unpersisted": "engine",
+    "memory.mount_failed": "engine",
     "skills.listing_truncated": "engine",
     "agents.listing_truncated": "engine",
     "tool_result.offload_put_failed": "engine",
     "tool_result.media_refused": "engine",
+    "tool_result.media_persisted": "engine",
     "config.image_processor_unavailable": "engine",
     "fs.staging_file_left": "engine",
     "fs.staging_file_swept": "engine",
     "session.lineage_rerooted": "engine",
-    "instructions.source_changed": "server",
+    "rewind.boundary_unrecorded": "engine",
+    "verify.verifier_is_implementer": "engine",
     "memory.layer_locked_legacy": "server",
     "server.model_unreachable": "server",
     "permission.entry_mode_clamped": "server",
+    "model.context_window_assumed": "server",
+    "config.store_ephemeral": "server",
 });
 export const CORE_USER_INPUT_UNDRAINED_CAUSES = Object.freeze([
     "leg_end",

package/dist/generated/settingsSchemaFns.d.ts

@@ -31,6 +31,10 @@ export declare const SETTINGS_INSPECT: (read: () => unknown) => object;
 export declare const SETTINGS_OWN_FIELDS_OF: (record: object, keys: readonly string[]) => object;
 export declare const SETTINGS_OWN_VALUE_OF: (record: object, key: string) => object;
 export declare const SETTINGS_READ_KEY: (record: object, key: PropertyKey) => object;
+export declare const SETTINGS_CONTAINER_VIEW: (record: object, isArray: boolean, classification: "strict" | "wide") => object;
+export declare const SETTINGS_VALUE_OF_DESCRIPTOR: (record: object, d: PropertyDescriptor) => unknown;
+export declare const SETTINGS_IS_ACCESSOR_DESCRIPTOR: (d: PropertyDescriptor) => boolean;
+export declare const SETTINGS_ISOLATED_OBJECT: () => object;
 export declare const SETTINGS_IS_RESERVED_MCP_SERVER_NAME: (name: string) => boolean;
 export declare const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX: "remote-";
 export declare const SETTINGS_RESERVED_MCP_SERVER_NAME_REASON: "the \"remote-\" prefix is reserved for the remote MCP servers a device executor offers";
@@ -112,3 +116,6 @@ export declare const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL: (models: {
 };
 export declare const SETTINGS_DEFAULT_ROLE_TIER_LADDER: readonly ["pro", "flash", "lite"];
 export declare const SETTINGS_HTTP_URL_FLAWS: (raw: string, forbid: readonly ("userinfo" | "query" | "fragment")[]) => readonly ("not-http-url" | "userinfo" | "query" | "fragment")[];
+export declare const SETTINGS_STABLE_STRINGIFY: (v: unknown, depth?: number) => string;
+export declare const SETTINGS_MAX_HASH_DEPTH: number;
+export declare const SETTINGS_TIGHTEN_VERDICT: (rule: object, existing: string, candidate: string) => "equal" | "stricter" | "looser" | "unordered" | "unreadable";

package/dist/generated/settingsSchemaFns.js

@@ -16,6 +16,8 @@ import { SETTINGS_ACTIVE_TIERS_CLOSURE } from './settingsSchemaActiveTiers.js';
 import { SETTINGS_TIER_WORDS_CLOSURE } from './settingsSchemaTierWords.js';
 import { SETTINGS_DEFAULT_MODEL_CLOSURE } from './settingsSchemaDefaultModel.js';
 import { SETTINGS_URL_SHAPE_CLOSURE } from './settingsSchemaUrlShape.js';
+import { SETTINGS_HASH_CLOSURE } from './settingsSchemaHash.js';
+import { SETTINGS_TIGHTEN_CLOSURE } from './settingsSchemaTightenVerdict.js';
 export const SETTINGS_AT_MENTION_MODES = Object.freeze([
     "all",
     "none",
@@ -166,6 +168,10 @@ export const SETTINGS_INSPECT = SETTINGS_OWN_KEY_READ.inspect;
 export const SETTINGS_OWN_FIELDS_OF = SETTINGS_OWN_KEY_READ.ownFieldsOf;
 export const SETTINGS_OWN_VALUE_OF = SETTINGS_OWN_KEY_READ.ownValueOf;
 export const SETTINGS_READ_KEY = SETTINGS_OWN_KEY_READ.readKey;
+export const SETTINGS_CONTAINER_VIEW = SETTINGS_OWN_KEY_READ.containerView;
+export const SETTINGS_VALUE_OF_DESCRIPTOR = SETTINGS_OWN_KEY_READ.valueOfDescriptor;
+export const SETTINGS_IS_ACCESSOR_DESCRIPTOR = SETTINGS_OWN_KEY_READ.isAccessorDescriptor;
+export const SETTINGS_ISOLATED_OBJECT = SETTINGS_OWN_KEY_READ.isolatedObject;
 const SETTINGS_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME_CLOSURE();
 export const SETTINGS_IS_RESERVED_MCP_SERVER_NAME = SETTINGS_MCP_SERVER_NAME.isReservedMcpServerName;
 export const SETTINGS_REMOTE_MCP_SERVER_NAME_PREFIX = SETTINGS_MCP_SERVER_NAME.REMOTE_MCP_SERVER_NAME_PREFIX;
@@ -201,3 +207,8 @@ export const SETTINGS_RESOLVE_CATALOG_DEFAULT_MODEL = SETTINGS_DEFAULT_MODEL.res
 export const SETTINGS_DEFAULT_ROLE_TIER_LADDER = SETTINGS_DEFAULT_MODEL.DEFAULT_ROLE_TIER_LADDER;
 const SETTINGS_URL_SHAPE = SETTINGS_URL_SHAPE_CLOSURE(SETTINGS_IS_HIERARCHICAL_URL);
 export const SETTINGS_HTTP_URL_FLAWS = SETTINGS_URL_SHAPE.httpUrlFlaws;
+const SETTINGS_HASH = SETTINGS_HASH_CLOSURE(SETTINGS_UNINSPECTABLE, SETTINGS_CONTAINER_VIEW, SETTINGS_INSPECT, SETTINGS_VALUE_OF_DESCRIPTOR, SETTINGS_JSON_SHAPE_OF);
+export const SETTINGS_STABLE_STRINGIFY = SETTINGS_HASH.stableStringify;
+export const SETTINGS_MAX_HASH_DEPTH = SETTINGS_HASH.MAX_HASH_DEPTH;
+const SETTINGS_TIGHTEN = SETTINGS_TIGHTEN_CLOSURE(SETTINGS_MAX_HASH_DEPTH, SETTINGS_STABLE_STRINGIFY, SETTINGS_CAPTURE_STRING_ARRAY, SETTINGS_DATA_DESCRIPTOR, SETTINGS_IS_ACCESSOR_DESCRIPTOR, SETTINGS_ISOLATED_OBJECT, SETTINGS_JSON_SHAPE_OF);
+export const SETTINGS_TIGHTEN_VERDICT = SETTINGS_TIGHTEN.tightenVerdict;

package/dist/generated/settingsSchemaHash.d.ts

@@ -0,0 +1 @@
+export declare const SETTINGS_HASH_CLOSURE: (UNINSPECTABLE: "an object that could not be inspected (a proxy trap threw)", containerView: (record: object, isArray: boolean, classification: 'strict' | 'wide') => object, inspect: (read: () => unknown) => object, valueOfDescriptor: (record: object, d: PropertyDescriptor) => unknown, jsonShapeOf: (v: unknown) => "plain" | "non_plain_object" | "array" | "null" | "primitive" | "uninspectable") => any;