@sema-agent/client-core 0.20.1 → 0.21.0

package/README.md

@@ -23,7 +23,7 @@ Renamed from **`@sema-agent/wire-cc-adapter`** (0.1.x, deprecated — see *Migra
 
 ## Scope
 
-**Version:** 0.20.1
+**Version:** 0.21.0
 
 - **Today** — the adapter seam, the whole `adapt()` pipeline (all 14 A-layer arms plus the
   B/D/E tool-card layers), the notification/caps/model families, the adapter kernel (stream driver

package/dist/seatContract.d.ts

@@ -75,6 +75,7 @@
 import type { ReasoningEffort } from "./effortWire.js";
 import type { LaneProof } from "./seam.js";
 import type { QuestionAnswer } from "./liveQuestionStore.js";
+import type { ToolApprovalDelegation } from "./hitl/toolApprovalWire.js";
 /** 一次门校验的失败说明。 */
 export interface SeatValidationFailure {
     /** 人可读的失败原因,恒在场且非空(宿主日志里那一行的正文)。 */
@@ -222,6 +223,18 @@ export interface ToolPermissionRequest {
      *  与转录里的引擎时间戳不可直接相减)。缺席 = wire 那一行没带时间(旧 server 的 durable 行)⇒
      *  消费端渲「刚刚」或不渲时间,**绝不**回落成 0(那会渲成 1970)。 */
     createdAtMs?: number;
+    /** 治理强制位([C130] 补键,2026-08-08;server ≥7.5.0,语义原样来自
+     *  `ApprovalCardRequest.governanceForced`):此门来自部署治理层,「permission-mode overrides
+     *  do not apply」。🔴 缺席 ≠ `false`:键**只在为真时在场**,缺席 = 无治理来源证据(真的非治理
+     *  ask 与 server 判据够不着的形共用缺席)⇒ 渲染端绝不渲「可用表态绕开」,也绝不合成治理徽标。
+     *  唯一合法供给 = 宿主(session-host)从已过 hitl wire 门的 `ApprovalCardRequest` **透传**,
+     *  绝不自铸;为 `false` 的值不该出现在座位面上(条件 stamp 纪律与 wire 门同款)。 */
+    governanceForced?: true;
+    /** 委派出处链([C130] 补键;core 5.9.0 W1,原样来自 `ApprovalCardRequest.delegation`,形 =
+     *  hitl 的命名类型,单一真源)。只读展示增强——卡说清这只 ask 从哪一层子代浮上来;`agentName`
+     *  UNTRUSTED-for-display(纯文本渲染,零注入面)。缺席 = 非子代 ask 或 wire 没给 ⇒ 不渲委派行。
+     *  坏形处置与 hitl wire 门同款纪律:**读坏形降缺席**,绝不因展示键拒掉整条审批行。 */
+    delegation?: ToolApprovalDelegation;
 }
 /**
  * 座位事件名的**闭集**(REF-CC-065):这是三端唯一的事件名真源。
@@ -451,6 +464,14 @@ export interface SendMessageRequest {
     /** Per-turn settings sub-object → `TaskRequest.settings`. Closed shape (`SeatTurnSettings`);
      *  today's only member is the `ultracode` preset boolean. */
     settings?: SeatTurnSettings;
+    /** 本轮 scenario 拨盘选择([C131] 补载体,2026-08-08)→ `TaskRequest.scenario`。**开集**(SDK
+     *  `Scenario = KnownScenario | (string & {})` 同姿态——部署可注册自有场景,座位面不替它闭集)。
+     *  缺席 = 不 stamp,由部署解析默认场景(assignment 链)。错误面是响亮的 typed 400:名字不在
+     *  部署词表 ⇒ `scenario_unknown`(body 带 live 词表 `known`);在词表但不在本 principal
+     *  allowlist ⇒ `scenario_not_allowed`(带 allowlist)——渲染端可据此渲有效选项,不猜不折叠。
+     *  此前的结构性缺席与 `reasoningEffort` 同款:闭集载体就是 lane 本身,不在集里 = 拨盘的选择
+     *  在座位 lane 上没有位置可放(web [C131]① 记账的九键无载体形)。 */
+    scenario?: string;
 }
 /** `uploadAttachment` 入参(REF-CC-074:此前是导出方法签名里的 3 成员内联匿名形,直接命中 B4)。 */
 export interface AttachmentUploadRequest {
@@ -665,9 +686,9 @@ export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedS
 /** 事件式(main→renderer push)的 verb —— SPEC 里 `kind: "event"` 的那一撮,门里逐元素对账。 */
 export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "messages", "error", "errorCategory", "code", "request", "data", "sources", "permissionMode", "session", "userMessageUuid", "hasPreClearSession", "requestId", "outcome", "chrome"];
-export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs"];
+export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs", "governanceForced", "delegation"];
 export declare const LOCAL_SESSION_RECORD_KEYS: readonly ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
-export declare const SEND_MESSAGE_REQUEST_KEYS: readonly ["sessionId", "text", "model", "userMessageUuid", "permissionMode", "attachmentIds", "reasoningEffort", "retainBackgroundProcesses", "settings"];
+export declare const SEND_MESSAGE_REQUEST_KEYS: readonly ["sessionId", "text", "model", "userMessageUuid", "permissionMode", "attachmentIds", "reasoningEffort", "retainBackgroundProcesses", "settings", "scenario"];
 export declare const TOOL_PERMISSION_DECISION_KEYS: readonly ["sessionId", "requestId", "decision", "answer", "updatedInput", "remember"];
 export declare const START_SESSION_OPTION_KEYS: readonly ["model", "title", "cwd", "excludeTools"];
 /**
@@ -707,6 +728,12 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
         readonly unchecked: readonly [{
             readonly key: "input";
             readonly why: "UNTRUSTED service-redacted 工具参数 / 问题载荷:形状由工具自己定(CC request-args 姿态),渲染端只读不回喂;缺席/畸形的渲染义务写在字段注释里。";
+        }, {
+            readonly key: "governanceForced";
+            readonly why: "展示增强位,权威门在 hitl wire 卡口(条件 stamp,false 不上 wire);座位门再裁一次=配对机制前提不共享的雷,且拒整条 request 会为一个徽标键把安全 ask 丢给引擎 TTL deny。消费端按 `=== true` 读,其余一律当缺席。";
+        }, {
+            readonly key: "delegation";
+            readonly why: "展示增强位,权威结构门在 hitl wire 卡口(结构读+仅子代 ask 在场,坏形降缺席);座位门同款理由不设第二判官。消费端坏形降缺席,绝不拒行。";
         }];
     };
     readonly LocalSessionEvent: {

package/dist/seatContract.js

@@ -657,6 +657,10 @@ export const TOOL_PERMISSION_REQUEST_KEYS = [
     "message",
     "toctouBinding",
     "createdAtMs",
+    // [C130] 补键(2026-08-08):治理徽标+委派行的座位载体——desktop 座位 lane 此前无键可透传,
+    // 「治理徽标可开工」只在浏览器 lane 成立(半场口径,[C130] 修正)。
+    "governanceForced",
+    "delegation",
 ];
 export const LOCAL_SESSION_RECORD_KEYS = [
     "sessionId",
@@ -681,6 +685,8 @@ export const SEND_MESSAGE_REQUEST_KEYS = [
     "reasoningEffort",
     "retainBackgroundProcesses",
     "settings",
+    // [C131] 补载体(2026-08-08):scenario 拨盘的座位 lane 席位(同上结构性缺席形)。
+    "scenario",
 ];
 export const TOOL_PERMISSION_DECISION_KEYS = [
     "sessionId",
@@ -730,6 +736,14 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
                 key: "input",
                 why: "UNTRUSTED service-redacted 工具参数 / 问题载荷:形状由工具自己定(CC request-args 姿态),渲染端只读不回喂;缺席/畸形的渲染义务写在字段注释里。",
             },
+            {
+                key: "governanceForced",
+                why: "展示增强位,权威门在 hitl wire 卡口(条件 stamp,false 不上 wire);座位门再裁一次=配对机制前提不共享的雷,且拒整条 request 会为一个徽标键把安全 ask 丢给引擎 TTL deny。消费端按 `=== true` 读,其余一律当缺席。",
+            },
+            {
+                key: "delegation",
+                why: "展示增强位,权威结构门在 hitl wire 卡口(结构读+仅子代 ask 在场,坏形降缺席);座位门同款理由不设第二判官。消费端坏形降缺席,绝不拒行。",
+            },
         ],
     },
     LocalSessionEvent: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/client-core",
-  "version": "0.20.1",
+  "version": "0.21.0",
   "description": "Client-side session runtime shared by every sema human client (TUI / web / desktop): sema wire frames (AgentEvent) -> CC session vocabulary (SDKMessage) with dual-plane output (transcript/chrome), deterministic transcript ids, lane discipline as a type, and the notification/dedup ledgers. Every CC-skin shape is collected here so the wire itself stays neutral. Blackboard [1832] design axioms; [1651]/[1652]/[1653] signed seam design. Renamed from @sema-agent/wire-cc-adapter (0.1.x).",
   "license": "MIT",
   "type": "module",