@sema-agent/client-core 0.84.1 → 0.85.1

package/dist/hitl/sessionPolicyWire.js

@@ -1,6 +1,7 @@
 import { wireFailureShapeOf } from '../wireFailureShape.js';
 import { hostLog } from '../host.js';
 import { isEngineRefusedToolName } from './sessionPolicyDeliverable.js';
+import { rosterMountedNames } from './rosterMountedNames.js';
 const RULE_FIELD_PRESENCE = {
     toolAllow: true,
     toolDeny: true,
@@ -307,44 +308,6 @@ export function sessionPolicyTightenNotice(outcome) {
             }
     }
 }
-function rosterMountedNames(roster) {
-    if (roster === undefined || roster === null)
-        return 'absent';
-    try {
-        if (typeof roster !== 'object' || Array.isArray(roster))
-            return 'unreadable';
-        const entries = roster.entries;
-        if (!Array.isArray(entries))
-            return 'unreadable';
-        const names = new Set();
-        const n = entries.length;
-        for (let i = 0; i < n; i++) {
-            if (!Object.hasOwn(entries, i))
-                return 'unreadable';
-            const row = entries[i];
-            if (typeof row !== 'object' || row === null)
-                return 'unreadable';
-            const name = row.name;
-            if (typeof name !== 'string' || name.length === 0)
-                return 'unreadable';
-            names.add(name);
-            const aliases = row.aliases;
-            if (aliases === undefined)
-                continue;
-            if (!Array.isArray(aliases))
-                return 'unreadable';
-            for (const a of aliases) {
-                if (typeof a !== 'string')
-                    return 'unreadable';
-                names.add(a);
-            }
-        }
-        return names;
-    }
-    catch {
-        return 'unreadable';
-    }
-}
 function withoutRefusedEntries(prior, mounted) {
     const REFUSABLE_NAME_FIELDS = ['toolDeny', 'toolAllow'];
     const isRefusable = (f) => REFUSABLE_NAME_FIELDS.includes(f);

package/dist/hitl/toolApprovalWire.d.ts

@@ -4,7 +4,7 @@ import { type ApprovalMandateWord } from '../gateVocabulary.js';
 import type { ToolPermissionRequest } from '../seatContract.js';
 import { type DenyAttributionRefusalDetail } from '../wireRefusalCopy.js';
 import { type DecideReceiptView } from '../decideReceipt.js';
-import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS } from '@sema-agent/sdk';
+import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS } from '@sema-agent/sdk';
 import type { RuleSuggestion, ToolApprovalRespondAck, PersistedRuleAnchor as SdkPersistedRuleAnchor, RuleOfferMatch as SdkRuleOfferMatch, RuleOfferBatchMember as SdkRuleOfferBatchMember, RuleOfferUncoveredDetail as SdkRuleOfferUncoveredDetail, RuleOfferUncoveredReason as SdkRuleOfferUncoveredReason, AskOrigin as SdkAskOrigin, RuleOffersAbsence as SdkRuleOffersAbsence, DenialLimitKind as SdkDenialLimitKind, DenialLimitFallback as SdkDenialLimitFallback } from '@sema-agent/sdk';
 export declare function isFsApprovalGate(gate: {
     kind?: unknown;
@@ -58,7 +58,9 @@ export type AskOrigin = SdkAskOrigin;
 export type RuleOffersAbsence = SdkRuleOffersAbsence;
 export type DenialLimitKind = SdkDenialLimitKind;
 export type DenialLimitFallback = SdkDenialLimitFallback;
-export { RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS };
+export { RULE_OFFERS_ABSENCE_REASONS };
+export declare const ASK_ORIGIN_WORDS: readonly string[];
+export declare const APPROVAL_MANDATE_WORDS: readonly ["operator_always", "tool_marks", "probe_mandate", "probe_unanswered", "write_protection", "write_protection_unresolved"];
 export type WireRuleOffer = {
     kind: 'single';
     rule: string;

package/dist/hitl/toolApprovalWire.js

@@ -11,7 +11,7 @@ import { isApprovalMandateWord } from '../gateVocabulary.js';
 import { denyAttributionRefusalFromError } from '../wireRefusalCopy.js';
 import { decideFailureNote } from '../decideFailureNote.js';
 import { readDecideReceipt } from '../decideReceipt.js';
-import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS, } from '@sema-agent/sdk';
+import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, ASK_ORIGINS, PERSISTED_RULE_MANDATES, } from '@sema-agent/sdk';
 export function isFsApprovalGate(gate) {
     if (!gate)
         return false;
@@ -52,7 +52,9 @@ export function structurallyEqual(a, b) {
     return ka.every(k => structurallyEqual(a[k], b[k]));
 }
 export { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS };
-export { RULE_OFFERS_ABSENCE_REASONS, DENIAL_LIMIT_KINDS };
+export { RULE_OFFERS_ABSENCE_REASONS };
+export const ASK_ORIGIN_WORDS = ASK_ORIGINS;
+export const APPROVAL_MANDATE_WORDS = PERSISTED_RULE_MANDATES;
 export const APPROVAL_DENY_SETTLED_BY_WORDS = Object.freeze(['human', 'policy']);
 export function readApprovalDenySettledBy(decision) {
     if (decision === null || typeof decision !== 'object')

package/dist/host.d.ts

@@ -56,7 +56,7 @@ export interface HostPorts {
 }
 export declare function installHost(ports: HostPorts): () => void;
 export declare function installHostFor(sessionKey: string, ports: Omit<HostPorts, 'queue'>): () => void;
-export declare function hostLog(level: AdapterLogLevel, msg: string, data?: unknown): void;
+export declare function hostLog(level: AdapterLogLevel, msg: string, data?: unknown): boolean;
 export declare function hostProbe(channel: string, line: string): void;
 export declare function hostSettings(): SettingsPort | undefined;
 export declare function hostSettingsFor(sessionKey: string): SettingsPort | undefined;

package/dist/host.js

@@ -46,11 +46,20 @@ export function installHostFor(sessionKey, ports) {
         slot.state = prev;
     };
 }
+function callDiagnosticPort(call) {
+    try {
+        call();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 export function hostLog(level, msg, data) {
-    hostSlot(DEFAULT_SESSION_KEY).state.log?.(level, msg, data);
+    return callDiagnosticPort(() => hostSlot(DEFAULT_SESSION_KEY).state.log?.(level, msg, data));
 }
 export function hostProbe(channel, line) {
-    hostSlot(DEFAULT_SESSION_KEY).state.probe?.(channel, line);
+    callDiagnosticPort(() => hostSlot(DEFAULT_SESSION_KEY).state.probe?.(channel, line));
 }
 export function hostSettings() {
     return hostSettingsFor(DEFAULT_SESSION_KEY);

package/dist/index.d.ts

@@ -22,7 +22,8 @@ export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay,
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export * from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
+export type { EngineCapState, EngineCapValueState, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -71,7 +72,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, SCENARIO_NOT_ALLOWED_ERROR_CODE, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
@@ -88,6 +89,7 @@ export * from './oneShotWireCaps.js';
 export * from './rewindWireCaps.js';
 export * from './rewindArchiveCapability.js';
 export * from './fileHistoryCaptureCapability.js';
+export * from './sealedKeyCapability.js';
 export * from './registryQuotaUsage.js';
 export * from './selfOrchestrationWireCaps.js';
 export * from './skillsWireCaps.js';
@@ -129,7 +131,7 @@ export * from './subagent/engineRowStopGate.js';
 export * from './subagent/engineSubagentOutput.js';
 export * from './subagent/engineSubagentSteer.js';
 export { __resetRetainWithoutWakeWarningForTests, auditRetainWithoutWake, classifySubagentResumeFailure, resolveOwnerRunId, resolveSubagentContinueTarget, resolveSubagentResumeContext, resumeSettledSubagent, SUBAGENT_RESUME_CAP, subagentResumeAvailable, } from './subagent/engineSubagentResume.js';
-export type { RetainWithoutWakeInput, RetainWithoutWakeVerdict, SubagentOwnerContext, SubagentResumeContext, SubagentResumeFacade, SubagentResumeFailureKind, SubagentResumeFailureVerdict, SubagentResumeOutcome, } from './subagent/engineSubagentResume.js';
+export type { RetainWithoutWakeInput, RetainWithoutWakeVerdict, SubagentOwnerContext, SubagentResumeContext, SubagentResumeFacade, SubagentResumeFailureKind, SubagentResumeFailureVerdict, SubagentResumeOutcome, SubagentResumeWire, SubagentResumeWireClient, } from './subagent/engineSubagentResume.js';
 export * from './subagent/engineTaskHandleWire.js';
 export * from './subagent/engineCompactWire.js';
 export * from './subagent/engineSubagentTail.js';
@@ -139,6 +141,8 @@ export { engineWireTarget, engineWireTargetFor, installEngineWireTarget, install
 export type { EngineWireTarget, } from './engineWireTarget.js';
 export * from './principalWire.js';
 export * from './wireErrorTriage.js';
+export * from './corruptSession.js';
+export * from './corruptSessionCopy.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './decideReceipt.js';
@@ -165,7 +169,7 @@ export * from './coreValuePorts.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
-export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
+export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, registerArmedGateFromQuestionIdFor, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
 export * from './hitl/parkOwnership.js';
 export * from './hitl/parkRowBirthWait.js';
 export * from './hitl/approvalDecisionNoteAudit.js';
@@ -187,6 +191,8 @@ export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readEngineAgentRegistry, isEngineAgentRegistryListingSuperseded } from './agentSession/engineAgentRegistryRead.js';
 export type { EngineAgentRegistryClient } from './agentSession/engineAgentRegistryRead.js';
+export { stopEngineSessionBackground, engineSessionBackgroundReceiptReadingOf, ENGINE_SESSION_BACKGROUND_RECEIPT_STATES, } from './agentSession/engineSessionBackgroundStop.js';
+export type { EngineSessionBackgroundStopClient, EngineSessionBackgroundStopWire, EngineSessionBackgroundStopOptions, EngineSessionBackgroundReceipt, EngineSessionBackgroundStopUnavailableWhy, EngineSessionBackgroundStopRefusedWhy, EngineSessionBackgroundStopResult, EngineSessionBackgroundReceiptState, EngineSessionBackgroundReceiptReading, } from './agentSession/engineSessionBackgroundStop.js';
 export * from './model/catalog.js';
 export * from './model/catalogLoader.js';
 export * from './model/providerAuth.js';

package/dist/index.js

@@ -18,7 +18,7 @@ export * from './fleetAgentPanelProjection.js';
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export * from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -65,7 +65,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, SCENARIO_NOT_ALLOWED_ERROR_CODE, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -81,6 +81,7 @@ export * from './oneShotWireCaps.js';
 export * from './rewindWireCaps.js';
 export * from './rewindArchiveCapability.js';
 export * from './fileHistoryCaptureCapability.js';
+export * from './sealedKeyCapability.js';
 export * from './registryQuotaUsage.js';
 export * from './selfOrchestrationWireCaps.js';
 export * from './skillsWireCaps.js';
@@ -128,6 +129,8 @@ export * from './engineSessionParam.js';
 export { engineWireTarget, engineWireTargetFor, installEngineWireTarget, installEngineWireTargetFor, } from './engineWireTarget.js';
 export * from './principalWire.js';
 export * from './wireErrorTriage.js';
+export * from './corruptSession.js';
+export * from './corruptSessionCopy.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './decideReceipt.js';
@@ -152,7 +155,7 @@ export * from './coreValuePorts.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
-export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
+export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, registerArmedGateFromQuestionIdFor, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
 export * from './hitl/parkOwnership.js';
 export * from './hitl/parkRowBirthWait.js';
 export * from './hitl/approvalDecisionNoteAudit.js';
@@ -173,6 +176,7 @@ export * from './seatContract.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readEngineAgentRegistry, isEngineAgentRegistryListingSuperseded } from './agentSession/engineAgentRegistryRead.js';
+export { stopEngineSessionBackground, engineSessionBackgroundReceiptReadingOf, ENGINE_SESSION_BACKGROUND_RECEIPT_STATES, } from './agentSession/engineSessionBackgroundStop.js';
 export * from './model/catalog.js';
 export * from './model/catalogLoader.js';
 export * from './model/providerAuth.js';

package/dist/permissionWireCaps.d.ts

@@ -1,4 +1,5 @@
-export type PermissionMode = 'default' | 'plan' | 'acceptEdits' | 'bypassPermissions' | 'auto';
+import { type TaskRequestPermissionMode } from './taskRequestWords.js';
+export type PermissionMode = TaskRequestPermissionMode;
 export interface PermissionModeField {
     permissionMode?: PermissionMode;
 }

package/dist/permissionWireCaps.js

@@ -1,10 +1,5 @@
-const KNOWN = new Set([
-    'default',
-    'plan',
-    'acceptEdits',
-    'bypassPermissions',
-    'auto',
-]);
+import { PERMISSION_MODE_WORDS } from './taskRequestWords.js';
+const KNOWN = new Set(PERMISSION_MODE_WORDS);
 export function permissionModeField(mode, opts) {
     if (typeof mode === 'string' && mode !== 'default' && KNOWN.has(mode)) {
         return { permissionMode: mode };

package/dist/request/taskRequest.d.ts

@@ -49,6 +49,7 @@ export interface TaskRequestInput {
     memoryCapture?: 'off';
     memory?: 'off';
     approverPosture?: NonNullable<TaskRequest['approverPosture']>;
+    fileHistory?: 'disabled';
     rewind?: Record<string, unknown>;
     repo?: string;
     council?: boolean;
@@ -70,6 +71,8 @@ export interface TaskRequestOmission {
     readonly cause: TaskRequestOmissionCause;
 }
 export declare function taskRequestOmissionCauseDetail(cause: unknown): string;
+export declare const TASK_REQUEST_OMISSION_CAUSE_NOTICES: Readonly<Record<TaskRequestOmissionCause, string>>;
+export declare function taskRequestOmissionCauseNotice(cause: unknown): string;
 export interface TaskRequestAssembly {
     readonly request: TaskRequestLike;
     readonly omitted: readonly TaskRequestOmission[];
@@ -102,6 +105,7 @@ export declare const APPROVER_POSTURE_BYPASS: "bypass";
 export declare function approverPostureDeclarationField(declared: boolean): {
     approverPosture: 'bypass';
 } | Record<string, never>;
+export declare const FILE_HISTORY_DISABLED: "disabled";
 export declare function memoryOffDeclared(input: {
     flag?: unknown;
     settingsMemory?: unknown;

package/dist/request/taskRequest.js

@@ -23,6 +23,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'memoryCapture', lanes: ['interactive', 'print', 'utility'], live: true, why: '本会话永远不进长期记忆的**声明形**(server §12.4 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryWrite:false 不是一个轴(那是「本 run 只读平面」)。⚠️ parked 续跑腿结构性拿不到声明(决策/续跑端点从持久 body 重建 spec),那是引擎侧事实,不是本层的漏', whyUtilityLane: '有座:side-channel 提交是壳自己的一次性问答,**绝不该**进用户的长期记忆 —— 这一位正是那句声明,且它是收紧方向,带上去只会更严' },
     { field: 'memory', lanes: ['interactive', 'print', 'utility'], live: true, why: '这一次运行不挂记忆面的**请求级**开关(server §12.7 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryCapture(采集面)不是一个轴、可并存;与 memoryWrite:false(只读平面)也不是一个轴', whyUtilityLane: '有座:side-channel 提交不需要挂记忆面(不挂记忆段 / 索引 / 三只记忆工具),省 token 且零记忆写入;与 memoryCapture 不是一个轴,两条都带' },
     { field: 'approverPosture', lanes: ['interactive', 'print'], live: true, why: '宿主对这个 run 的**审批姿态声明**(「这个 run 的审批卡由我自己自动答」;单成员闭集 `"bypass"`)。🔴 它不授权任何东西、也不是一只门:引擎只把这句声明**渲**给模型(它自己的标记块,首个回合),没有任何裁决腿读它 —— 与 `permissionMode` 的 `bypassPermissions`(选门的形状)**不是一回事**,两键在请求体上各自原样过境、**互不派生**:宿主完全可以一边留着缺省权限模式、一边自己自动答这个 run 的审批卡。🔴 **声明它的唯一条件是「宿主确实自己自动答这个 run 的审批卡」,不许据此推导或改动 `permissionMode`** —— 拿这一位当理由去把门放宽,是把一句只渲给模型看的话读成了授权。宿主并不自动答卡却声明了它 ⇒ 那是对模型说了一句与实际不符的话,修法是**别声明**,不是去动门。加座的理由是**一个事实一处铸点**:同样一句话,要么由引擎在它自己的标记块里说,要么由壳把提醒形文本拼进本 turn 的输入 —— 后者在模型眼里是一段**没有引擎标记**的提醒形副本,按标记声明它该当**数据**处理并报出来。所以壳从此停拼,交这一位。两条用户车道都是提交面 ⇒ 都能声明。坏词由引擎响亮拒(单成员闭集,打错字不许被折成缺席),本层同律在构造期就拒(见 `refuseBadApproverPosture`)。⚠️ 上游的**提交体**与**引擎规格**两层都真读这一键,而装着的 sdk 型面尚未镜像它 ⇒ 本层的字面按提交体的形声明,不从 sdk 取型', whyUtilityLane: '无座:审批姿态是**用户**对他自己那条会话的声明,而 side-channel 是壳自己的提交 —— 把用户的 bypass 姿态带进一条他没参与的提交,等于替他重申一句他没说过的话;况且零工具面根本产不出审批卡' },
+    { field: 'fileHistory', lanes: ['interactive', 'print'], live: true, why: '「这一次运行别捕获文件历史」的**请求级声明**(server 7.104.0 提交体键,单成员闭集 "disabled";`POST /v1/tasks` · `/v1/tasks/stream` · `/v1/runs` 同收,子代继承)。两条用户车道都是提交面、都跑在用户的文件上 ⇒ 都能声明;「本会话不捕获」= 每个提交都带(续跑腿重放同一个体)。🔴 只在能力读数 `on-optional` 时发(老 server 对表外键 400),值由片段口 `fileHistoryDeclarationField` 唯一铸出。与 rewind 还原键同交 ⇒ 上游 400 `request.field_conflict`', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),不会改任何文件 ⇒ 没有可捕获的东西;带上它只会在不认识这一键的老 server 上给这条提交多一种 400' },
     { field: 'finalVerification', lanes: ['print'], live: true, why: 'P1-1 终验:无人值守车道才需要引擎自证;交互 REPL 由人当场看结果。#106 裁 B(让位+告知)后交互面默认关', whyUtilityLane: '无座:终验让引擎再跑一轮自证,而 side-channel 要的是一次小提交的即时答案;「无人值守才需要引擎自证」这条理由在本车道上让位给「小预算优先」' },
     { field: 'limits', lanes: ['print', 'utility'], live: true, why: 'P2-3-b:`-p` 的预算护栏(--max-* flag 族),交互 REPL 由人随时 Esc', whyUtilityLane: '有座:side-channel 必须带预算护栏(墙钟 / 输出 token / 轮数)—— 它同样没有人看着,而且没有后续回合可以中断' },
     { field: 'interactiveTools', lanes: ['print', 'utility'], live: true, why: '[909]B 件3:无人值守 stamp false,从 roster 源头灭掉 AskUserQuestion/plan 门。交互车道 stamp false 等于自废武功', whyUtilityLane: '有座:side-channel 绝不该弹交互问答 / plan 门(没有人在看这条提交)。它与 excludeAllTools 是**两条独立**的收紧声明、在这条车道上**并存**(本车道强制带卸载声明,见 `refuseUtilityWithoutToolUnload`;这一位是它旁边那条「连问都别问」的声明,不是它的降级替身)' },
@@ -74,6 +75,18 @@ export function taskRequestOmissionCauseDetail(cause) {
     const word = typeof cause === 'string' && cause.length > 0 ? cause : '(none)';
     return `a cause this build does not know (${word}) — this build does not know this cause: receipt causes come from this build's own frozen vocabulary, so a word outside it was not produced here; check whatever supplied it`;
 }
+export const TASK_REQUEST_OMISSION_CAUSE_NOTICES = Object.freeze({
+    upstream_absent: 'Not sent with this request: this version has no way to send this setting in any request, so giving it or leaving it out makes no difference to what is sent.',
+    other_channel: 'Not sent from here: that part of the request belongs to a separate step, so what goes out for it, if anything, is decided there rather than by the value given here.',
+    off_lane: 'Not sent with this request: this kind of request does not carry this setting, so giving it or leaving it out makes no difference to what this request sends.',
+    not_live: 'Not sent with this request: the request was marked as not going to a live engine (for example an offline or test run), and this setting is only sent on requests that go to one.',
+});
+const TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_NOTICE = 'Not sent with this request, for a reason this version does not recognize.';
+export function taskRequestOmissionCauseNotice(cause) {
+    return typeof cause === 'string' && Object.hasOwn(TASK_REQUEST_OMISSION_CAUSE_NOTICES, cause)
+        ? TASK_REQUEST_OMISSION_CAUSE_NOTICES[cause]
+        : TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_NOTICE;
+}
 const row = (field) => ({ via: 'matrix', field });
 const INPUT_KEY_ROUTES = {
     objective: { via: 'always' },
@@ -125,6 +138,7 @@ const INPUT_KEY_ROUTES = {
     memoryCapture: row('memoryCapture'),
     memory: row('memory'),
     approverPosture: row('approverPosture'),
+    fileHistory: row('fileHistory'),
     rewind: row('resumeAt/resumeAtMode/restoreFiles/rewindFilesTo'),
     repo: row('repo'),
     council: row('council'),
@@ -197,6 +211,7 @@ const VALUE_LEVEL_IN_PLAY = Object.freeze({
     memoryCapture: (v) => v === 'off',
     memory: (v) => v === 'off',
     approverPosture: (v) => v === APPROVER_POSTURE_BYPASS,
+    fileHistory: (v) => v === FILE_HISTORY_DISABLED,
     rewind: (v) => typeof v === 'object' && v !== null && rewindSubKeys().some((k) => hasOwn(v, k) && present(v[k])),
 });
 const inPlay = (key, v) => present(v) && (VALUE_LEVEL_IN_PLAY[key]?.(v) ?? true);
@@ -377,6 +392,7 @@ void true;
 export function approverPostureDeclarationField(declared) {
     return declared ? { approverPosture: APPROVER_POSTURE_BYPASS } : {};
 }
+export const FILE_HISTORY_DISABLED = 'disabled';
 export function memoryOffDeclared(input) {
     if (typeof input !== 'object' || input === null)
         return false;
@@ -426,6 +442,15 @@ const refuseBadApproverPosture = (v) => {
         '**响亮拒**,刻意不把打错的词折回缺席。本层若静默删键,这一次提交的模型不会被告知姿态,而声明人不会知道。' +
         '错误文本只报形状,不回显值。');
 };
+const refuseBadFileHistory = (v) => {
+    if (v === undefined || v === null)
+        return;
+    if (v === FILE_HISTORY_DISABLED)
+        return;
+    throw new TypeError('buildTaskRequest: fileHistory 只接受字面量 `\'disabled\'` 或缺席(undefined/null)—— ' +
+        `收到 ${coarseShape(v)}。这一位是「这一次运行别捕获文件历史」的收紧声明,上游是**单成员闭集**(没有第二个词)且对坏值` +
+        '**响亮拒**。本层若静默删键,这一次运行照常捕获而声明人不会知道。错误文本只报形状,不回显值。');
+};
 const refuseBadMaxTokens = (v) => {
     if (v === undefined || v === null)
         return;
@@ -495,7 +520,7 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'approverPosture', 'maxTokens', 'outputRetries'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'approverPosture', 'maxTokens', 'outputRetries', 'fileHistory'];
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -563,6 +588,7 @@ export function assembleTaskRequest(input, lane) {
     const approverPostureIn = src.approverPosture;
     const maxTokensIn = src.maxTokens;
     const outputRetriesIn = src.outputRetries;
+    const fileHistoryIn = src.fileHistory;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -573,6 +599,7 @@ export function assembleTaskRequest(input, lane) {
         excludeAllTools: excludeAllToolsIn,
         approverPosture: approverPostureIn,
         outputRetries: outputRetriesIn,
+        fileHistory: fileHistoryIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -584,6 +611,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadApproverPosture(approverPostureIn);
     refuseBadMaxTokens(maxTokensIn);
     refuseBadOutputRetries(outputRetriesIn);
+    refuseBadFileHistory(fileHistoryIn);
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -733,6 +761,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('memoryCapture') ? { memoryCapture: 'off' } : {}),
         ...(on('memory') ? { memory: 'off' } : {}),
         ...(on('approverPosture') ? { approverPosture: APPROVER_POSTURE_BYPASS } : {}),
+        ...(on('fileHistory') ? { fileHistory: FILE_HISTORY_DISABLED } : {}),
         ...(Object.keys(settingsOut).length > 0 ? { settings: settingsOut } : {}),
     };
     return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]) });

package/dist/resumeRefusalCopy.js

@@ -1,5 +1,5 @@
 import { readErrorNumber, readErrorString } from './wireFailureShape.js';
-import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_ENV_FAILED, RESUME_TOOL_UNAVAILABLE, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, } from './engineErrorCodes.js';
+import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_ENV_FAILED, RESUME_TOOL_UNAVAILABLE, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, } from './engineErrorCodes.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 import { resumeRetryLaterFromError } from './wireErrorTriage.js';
 export const RESUME_REFUSAL_CODES = Object.freeze([
@@ -73,7 +73,9 @@ export function resumePolicyBlockFromError(err) {
 export function resumePolicyBlockContent(detail) {
     const b = detail.blockedBy;
     const reason = b.kind === 'named'
-        ? `The check that refused it: ${capForDisplay(b.code, 80)}`
+        ? isStatusDerivedCoarseCode(b.code)
+            ? `The refusal did not name a more specific check (it carried only the generic code for its HTTP status: ${b.code})`
+            : `The check that refused it: ${capForDisplay(b.code, 80)}`
         : b.kind === 'absent'
             ? 'The refusal did not name a more specific check'
             : 'The refusal carried a more specific reason that could not be read';

package/dist/runTerminal.js

@@ -32,6 +32,10 @@ export function readRunTerminal(result) {
         const kind = str(c.kind);
         if (kind === undefined)
             return { kind: 'unknown', plane: 'cause' };
+        const parkWord = str(r.status);
+        if (parkWord !== undefined && FLAT_PAUSED_STATUSES.includes(parkWord)) {
+            return { kind: 'paused', plane: 'cause', flatStatus: parkWord, ...(kind === 'paused' ? (pauseOf(c) ?? {}) : {}) };
+        }
         switch (kind) {
             case 'completed':
                 return { kind: 'completed', plane: 'cause' };

package/dist/sandboxWire.js

@@ -55,7 +55,7 @@ export function sandboxDegradeHint(err) {
             'Re-run without --sandbox (worker default image), or point the shell at a k8s-lane worker (sema cloud engine connect <url>).');
     }
     if (e.status === 400 && msg.includes(SANDBOX_NO_IMAGE_INDEX_400_ANCHOR)) {
-        return ('This worker has no sandbox image index configured (sema-registry backend absent), so per-task profiles cannot resolve.\n' +
+        return ('This worker has no sandbox image index configured (the sema-web-admin config center is not attached), so per-task profiles cannot resolve.\n' +
             'Re-run without --sandbox, or use a worker with the image index enabled.');
     }
     if (e.status === 404 && msg.includes(SANDBOX_NO_PUBLISHED_IMAGE_404_ANCHOR)) {

package/dist/sealedKeyCapability.d.ts

@@ -0,0 +1,17 @@
+export type SealedKeyReading = {
+    kind: 'unobserved';
+} | {
+    kind: 'not_reported';
+} | {
+    kind: 'present';
+    alg: string;
+    publicKeyId: string;
+    publicKey: string;
+};
+export declare function projectSealedKeyCapability(caps: unknown): SealedKeyReading | undefined;
+export declare function noteEngineCapsForSealedKey(baseUrl: string, caps: unknown, opts?: {
+    generation?: number;
+}): void;
+export declare function observedSealedKey(baseUrl?: string | undefined): SealedKeyReading;
+export declare function forgetSealedKeyReading(baseUrl: string | undefined): void;
+export declare function __resetSealedKeyReadingsForTests(): void;

package/dist/sealedKeyCapability.js

@@ -0,0 +1,42 @@
+import { engineWireTarget } from './engineWireTarget.js';
+import { createEngineCapReader } from './engineCapReader.js';
+function ownNonEmpty(seg, key) {
+    if (!Object.hasOwn(seg, key))
+        return undefined;
+    const v = seg[key];
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+export function projectSealedKeyCapability(caps) {
+    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+        return undefined;
+    if (!Object.hasOwn(caps, 'sealedKey'))
+        return { kind: 'not_reported' };
+    const seg = caps.sealedKey;
+    if (seg === undefined)
+        return { kind: 'not_reported' };
+    if (seg === null || typeof seg !== 'object' || Array.isArray(seg))
+        return undefined;
+    const alg = ownNonEmpty(seg, 'alg');
+    const publicKeyId = ownNonEmpty(seg, 'publicKeyId');
+    const publicKey = ownNonEmpty(seg, 'publicKey');
+    if (alg === undefined || publicKeyId === undefined || publicKey === undefined)
+        return undefined;
+    return { kind: 'present', alg, publicKeyId, publicKey };
+}
+const reader = createEngineCapReader({
+    name: 'sealedKey',
+    project: projectSealedKeyCapability,
+    makeUnobserved: () => ({ kind: 'unobserved' }),
+});
+export function noteEngineCapsForSealedKey(baseUrl, caps, opts) {
+    reader.note(baseUrl, caps, opts);
+}
+export function observedSealedKey(baseUrl = engineWireTarget()?.baseUrl) {
+    return reader.observed(baseUrl);
+}
+export function forgetSealedKeyReading(baseUrl) {
+    reader.forget(baseUrl);
+}
+export function __resetSealedKeyReadingsForTests() {
+    reader.__resetForTests();
+}

package/dist/seatContract.d.ts

@@ -1,4 +1,5 @@
 import type { ReasoningEffort } from "./effortWire.js";
+import type { PermissionMode } from "./permissionWireCaps.js";
 import type { LaneProof } from "./seam.js";
 import type { QuestionAnswer } from "./liveQuestionStore.js";
 import type { ToolApprovalDelegation } from "./hitl/toolApprovalWire.js";
@@ -101,7 +102,7 @@ export interface StartSessionOptions {
     cwd?: string;
     excludeTools?: string[];
 }
-export type PermissionModeIntent = "default" | "plan" | "acceptEdits" | "bypassPermissions" | "auto";
+export type PermissionModeIntent = PermissionMode;
 export declare const PERMISSION_MODE_INTENTS: readonly PermissionModeIntent[];
 export declare const ATTACHMENT_IDS_PER_TASK_CAP = 16;
 export declare const SEAT_REASONING_EFFORTS: readonly ReasoningEffort[];

package/dist/seatContract.js

@@ -1,3 +1,4 @@
+import { PERMISSION_MODE_WORDS, REASONING_EFFORT_WORDS } from "./taskRequestWords.js";
 const bad = (reason, field) => field === undefined ? { reason } : { reason, field };
 const nested = (prefix, verdict) => {
     const path = verdict.field === undefined
@@ -71,25 +72,9 @@ export const HITL_RESOLUTION_OUTCOMES = [
     "decline",
     "cancel",
 ];
-const PERMISSION_MODE_INTENT_TUPLE = [
-    "default",
-    "plan",
-    "acceptEdits",
-    "bypassPermissions",
-    "auto",
-];
-export const PERMISSION_MODE_INTENTS = PERMISSION_MODE_INTENT_TUPLE;
+export const PERMISSION_MODE_INTENTS = [...PERMISSION_MODE_WORDS];
 export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
-const SEAT_REASONING_EFFORT_TUPLE = [
-    "off",
-    "minimal",
-    "low",
-    "medium",
-    "high",
-    "xhigh",
-    "max",
-];
-export const SEAT_REASONING_EFFORTS = SEAT_REASONING_EFFORT_TUPLE;
+export const SEAT_REASONING_EFFORTS = [...REASONING_EFFORT_WORDS];
 export const SEAT_TURN_SETTINGS_KEYS = ["ultracode"];
 export const ATTACHMENT_UPLOAD_REQUEST_KEYS = ["name", "mimeType", "bytes"];
 export const SESSION_SEARCH_RESULT_KEYS = ["sessionId", "title", "matches"];
@@ -224,8 +209,8 @@ const checkLocalSessionEvent = (v) => {
     }
     if (!isAbsent(v.permissionMode)) {
         const mode = v.permissionMode;
-        if (typeof mode !== "string" || !inTuple(PERMISSION_MODE_INTENT_TUPLE, mode)) {
-            return bad(`permissionMode must be one of ${PERMISSION_MODE_INTENT_TUPLE.join("|")}`, "permissionMode");
+        if (typeof mode !== "string" || !inTuple(PERMISSION_MODE_INTENTS, mode)) {
+            return bad(`permissionMode must be one of ${PERMISSION_MODE_INTENTS.join("|")}`, "permissionMode");
         }
     }
     if (!isAbsent(v.session)) {
@@ -718,7 +703,6 @@ const _seatContractPins = [
     true, true,
     true, true,
     true, true, true, true,
-    true, true, true, true,
     true, true,
     true, true,
     true, true,

package/dist/subagent/engineCompactWire.d.ts

@@ -1,5 +1,16 @@
+import type { AgentClient } from '@sema-agent/sdk';
+import type { EngineWireInjection } from '../engineWireSdk.js';
+export type EngineCompactWireClient = {
+    capabilities: AgentClient['capabilities'];
+    runs: Pick<AgentClient['runs'], 'compact'>;
+};
+export type EngineCompactWire = EngineWireInjection<EngineCompactWireClient>;
 export declare function isEngineCompactPending(sessionKey?: string): boolean;
 export declare function resetManualCompactCapability(): void;
 export declare function __resetEngineCompactArmForTests(): void;
-export declare function requestEngineCompact(sessionKey?: string): 'fired' | 'armed' | 'offline' | 'unsupported';
-export declare function onEngineTaskBound(taskId: string, sessionKey?: string): void;
+export declare function requestEngineCompact(sessionKey?: string, opts?: {
+    wire?: EngineCompactWire;
+}): 'fired' | 'armed' | 'offline' | 'unsupported';
+export declare function onEngineTaskBound(taskId: string, sessionKey?: string, opts?: {
+    wire?: EngineCompactWire;
+}): void;