@sema-agent/client-core 0.87.0 → 0.89.0

package/dist/generated/engineNoticeTables.js

@@ -65,6 +65,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "route.base_url_changed_key_unchanged",
     "route.response_model_mismatch",
     "route.tool_call_id_folded",
+    "context.tool_turn_repaired",
     "task.user_steer_undrained",
     "task.user_followup_undrained",
     "steering.parked_input_blocked",
@@ -72,6 +73,7 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "task.halt_unconsumed",
     "task.late_approval",
     "task.interrupt_unconsumed",
+    "task.tool_turn_incomplete",
     "approval.read_root_granted",
     "approval.read_root_grant_rejected",
     "memory.capture_opted_out",
@@ -79,6 +81,10 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "skills.listing_truncated",
     "agents.listing_truncated",
     "tool_result.offload_put_failed",
+    "instructions.source_changed",
+    "session.records_skipped",
+    "memory.layer_locked_legacy",
+    "server.model_unreachable",
 ]);
 export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "config.autocompact_window_clamped": "operator",
@@ -147,6 +153,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "route.base_url_changed_key_unchanged": "operator",
     "route.response_model_mismatch": "operator",
     "route.tool_call_id_folded": "operator",
+    "context.tool_turn_repaired": "operator",
     "task.user_steer_undrained": "user",
     "task.user_followup_undrained": "user",
     "steering.parked_input_blocked": "user",
@@ -154,6 +161,7 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "task.halt_unconsumed": "user",
     "task.late_approval": "user",
     "task.interrupt_unconsumed": "user",
+    "task.tool_turn_incomplete": "user",
     "approval.read_root_granted": "user",
     "approval.read_root_grant_rejected": "user",
     "memory.capture_opted_out": "user",
@@ -161,6 +169,10 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "skills.listing_truncated": "operator",
     "agents.listing_truncated": "operator",
     "tool_result.offload_put_failed": "operator",
+    "instructions.source_changed": "user",
+    "session.records_skipped": "user",
+    "memory.layer_locked_legacy": "operator",
+    "server.model_unreachable": "user",
 });
 export const CORE_MCP_INJECTION_DROP_REASONS = Object.freeze([
     "malformed_entry",
@@ -168,3 +180,101 @@ export const CORE_MCP_INJECTION_DROP_REASONS = Object.freeze([
     "gate_closed",
     "over_cap",
 ]);
+export const CORE_NOTICE_MINTER = Object.freeze({
+    "config.autocompact_window_clamped": "engine",
+    "config.env_timeout_discarded": "engine",
+    "config.materialize_env_discarded": "engine",
+    "config.models_swapped": "engine",
+    "config.context_settings_swapped": "engine",
+    "config.read_face_swapped": "engine",
+    "config.read_face_deployment_clamped": "engine",
+    "config.write_face_swapped": "engine",
+    "config.write_face_deployment_clamped": "engine",
+    "config.tool_model_gate_removed": "engine",
+    "config.tool_model_gate_unknown_class": "engine",
+    "config.tool_model_gate_env_invalid": "engine",
+    "config.artifact_host_invalid": "engine",
+    "config.task_root_not_canonical": "engine",
+    "config.write_protection_target_view_absent": "engine",
+    "config.write_protection_unresolved": "engine",
+    "config.execution_env_capability_invalid": "engine",
+    "config.tool_card_undeclared": "engine",
+    "config.tool_face_undeclared": "engine",
+    "config.tool_face_invalid": "engine",
+    "config.forward_sink_failed": "engine",
+    "config.durable_gate_unavailable": "engine",
+    "config.peer_admission_out_of_range": "engine",
+    "config.peer_lane_unmounted": "engine",
+    "config.secret_env_scrubbed": "engine",
+    "config.permission_mode_unavailable": "engine",
+    "permission.ask_released_by_mode": "engine",
+    "permission.read_deny_unapplied": "engine",
+    "permission.rule_store_unavailable": "engine",
+    "resume.legacy_mode_seed_migrated": "engine",
+    "peer.inbound_disposition": "engine",
+    "peer.held_settled": "engine",
+    "peer.idle_subscription": "engine",
+    "classifier.denial_limit": "engine",
+    "classifier.fallback": "engine",
+    "classifier.role_defaulted": "engine",
+    "classifier.contract_broken": "engine",
+    "classifier.unavailable": "engine",
+    "checkpoint.execution_outcome_unrecorded": "engine",
+    "delegation.transcript_integrity": "engine",
+    "delegation.ask_unresolvable": "engine",
+    "mcp.injection_dropped": "engine",
+    "mcp.revocation_probe_failed": "engine",
+    "mcp.server_redialed": "engine",
+    "workflow.governance_key_stripped": "engine",
+    "workflow.agent_option_ignored": "engine",
+    "memory.session_polluted": "engine",
+    "memory.harvest_quarantined": "engine",
+    "memory.delegation_static_mark_waived": "engine",
+    "memory.content_class_declared": "engine",
+    "memory.hold_opened": "engine",
+    "memory.hold_released": "engine",
+    "memory.hold_disposed": "engine",
+    "memory.consolidation_recommended": "engine",
+    "memory.consolidation_committed": "engine",
+    "memory.consolidation_conflict": "engine",
+    "memory.consolidation_incomplete": "engine",
+    "memory.consolidation_refused": "engine",
+    "memory.consolidation_withheld": "engine",
+    "memory.restore_withheld": "engine",
+    "memory.project_scope_absent": "engine",
+    "route.fallback_to_primary": "engine",
+    "route.classifier_unroutable": "engine",
+    "route.base_url_changed_key_unchanged": "engine",
+    "route.response_model_mismatch": "engine",
+    "route.tool_call_id_folded": "engine",
+    "context.tool_turn_repaired": "engine",
+    "task.user_steer_undrained": "engine",
+    "task.user_followup_undrained": "engine",
+    "steering.parked_input_blocked": "engine",
+    "task.turn_interrupted": "engine",
+    "task.halt_unconsumed": "engine",
+    "task.late_approval": "engine",
+    "task.interrupt_unconsumed": "engine",
+    "task.tool_turn_incomplete": "engine",
+    "approval.read_root_granted": "engine",
+    "approval.read_root_grant_rejected": "engine",
+    "memory.capture_opted_out": "engine",
+    "memory.capture_optout_unpersisted": "engine",
+    "skills.listing_truncated": "engine",
+    "agents.listing_truncated": "engine",
+    "tool_result.offload_put_failed": "engine",
+    "instructions.source_changed": "server",
+    "session.records_skipped": "server",
+    "memory.layer_locked_legacy": "server",
+    "server.model_unreachable": "server",
+});
+export const CORE_USER_STEER_UNDRAINED_CAUSES = Object.freeze([
+    "leg_end",
+    "crashed",
+]);
+export const CORE_TOOL_TURN_INCOMPLETE_CAUSES = Object.freeze([
+    "truncated",
+    "unnamed",
+    "bad_frame",
+    "missing_result_synthesized",
+]);

package/dist/hitl/crashConverged.d.ts

@@ -8,7 +8,7 @@ export interface CrashConvergedRow {
     readonly ts: number;
     readonly expiresAtMs: number;
     readonly decision: 'denied';
-    readonly cause: 'crashed_before_park';
+    readonly cause: 'crashed_before_park' | 'shutdown_before_park';
     readonly orphanState: CrashConvergedOrphanState;
     readonly originalDecision?: 'approve';
     readonly decidedAtMs?: number;

package/dist/hitl/crashConverged.js

@@ -1,3 +1,8 @@
+const CRASH_CONVERGED_CAUSE_WORDS = Object.freeze({
+    crashed_before_park: true,
+    shutdown_before_park: true,
+});
+const isCrashConvergedCause = (v) => typeof v === 'string' && Object.hasOwn(CRASH_CONVERGED_CAUSE_WORDS, v);
 const isString = (v) => typeof v === 'string';
 const isNumber = (v) => typeof v === 'number';
 const nonEmptyString = (v) => typeof v === 'string' && v.length > 0;
@@ -45,7 +50,7 @@ function readCrashConvergedRow(v) {
             return null;
         if (o.decision !== 'denied')
             return null;
-        if (o.cause !== 'crashed_before_park')
+        if (!isCrashConvergedCause(o.cause))
             return null;
         if (o.orphanState !== 'pending' && o.orphanState !== 'decided')
             return null;

package/dist/hitl/planReviewWire.js

@@ -346,9 +346,11 @@ let decideDispatchSeq = 0;
 function planReviewOpsOf(taskId) {
     return planReviewDecisionOps.filter((op) => op.taskId === taskId);
 }
-function settlePlanReviewDecisionOp(op) {
-    if (op.settledAt === null)
-        op.settledAt = ++planReviewLedgerClock;
+function settlePlanReviewDecisionOp(op, by) {
+    if (op.settledAt !== null)
+        return;
+    op.settledAt = ++planReviewLedgerClock;
+    op.settler = by;
 }
 function pushPlanReviewDecisionOp(op) {
     planReviewDecisionOps.push(op);
@@ -366,18 +368,31 @@ function dropPlanReviewDecisionOp(op) {
     if (i >= 0)
         planReviewDecisionOps.splice(i, 1);
 }
+function claimablePlanReviewDecisionOp(taskId) {
+    const open = planReviewDecisionOps.find((o) => o.taskId === taskId && o.phase === 'handed' && o.settledAt === null);
+    if (open !== undefined)
+        return open;
+    let leftBehind;
+    for (const o of planReviewDecisionOps) {
+        if (o.taskId !== taskId || o.phase !== 'handed' || o.settler !== 'gate_left')
+            continue;
+        if (leftBehind === undefined || o.handedAt > leftBehind.handedAt)
+            leftBehind = o;
+    }
+    return leftBehind;
+}
 export function notePlanReviewDecisionHandedOver(taskId) {
     if (typeof taskId !== 'string' || taskId === '')
         return null;
     if (planReviewDecisionOps.some((op) => op.taskId === taskId && op.settledAt === null))
         return null;
-    const op = { taskId, handedAt: ++planReviewLedgerClock, settledAt: null, phase: 'handed', notApplied: false, ownCallOpen: false };
+    const op = { taskId, handedAt: ++planReviewLedgerClock, settledAt: null, settler: null, phase: 'handed', notApplied: false, ownCallOpen: false };
     pushPlanReviewDecisionOp(op);
     return {
         settle: () => {
             if (op.phase !== 'handed')
                 return;
-            settlePlanReviewDecisionOp(op);
+            settlePlanReviewDecisionOp(op, 'host');
         },
         revoke: () => {
             if (op.phase !== 'handed' || op.settledAt !== null)
@@ -412,7 +427,7 @@ export function notePlanReviewGateLeft(taskId) {
     if (typeof taskId !== 'string' || taskId === '')
         return;
     for (const op of planReviewOpsOf(taskId))
-        settlePlanReviewDecisionOp(op);
+        settlePlanReviewDecisionOp(op, 'gate_left');
 }
 export function latestPlanReviewDecisionMark(taskId) {
     if (typeof taskId !== 'string' || taskId === '')
@@ -434,12 +449,17 @@ async function decidePlanReviewFor(taskId, decision, permissionModeAfter, opts,
         hostLog('error', `planReviewWire: decidePlanReview(${decision}) for task ${taskId} REFUSED — a decision for this task is already in flight (duplicate delivery latched)`);
         return;
     }
-    let op = planReviewDecisionOps.find((o) => o.taskId === taskId && o.phase === 'handed' && o.settledAt === null);
+    let op = claimablePlanReviewDecisionOp(taskId);
     if (op === undefined) {
-        op = { taskId: typeof taskId === 'string' ? taskId : String(taskId), handedAt: ++planReviewLedgerClock, settledAt: null, phase: 'posting', notApplied: false, ownCallOpen: true };
+        op = { taskId: typeof taskId === 'string' ? taskId : String(taskId), handedAt: ++planReviewLedgerClock, settledAt: null, settler: null, phase: 'posting', notApplied: false, ownCallOpen: true };
         pushPlanReviewDecisionOp(op);
     }
     else {
+        if (op.settler === 'gate_left') {
+            op.settledAt = null;
+            op.settler = null;
+            op.notApplied = false;
+        }
         op.phase = 'posting';
         op.ownCallOpen = true;
     }
@@ -451,7 +471,7 @@ async function decidePlanReviewFor(taskId, decision, permissionModeAfter, opts,
     const settle = (notApplied) => {
         if (notApplied)
             mine.notApplied = true;
-        settlePlanReviewDecisionOp(mine);
+        settlePlanReviewDecisionOp(mine, 'package');
     };
     const dispatchNo = ++decideDispatchSeq;
     hostLog('debug', `planReviewWire: decidePlanReview dispatch #${dispatchNo} task=${taskId} decision=${decision} mode=${permissionModeAfter ?? '-'}`);
@@ -460,7 +480,7 @@ async function decidePlanReviewFor(taskId, decision, permissionModeAfter, opts,
     }
     finally {
         releaseLatch();
-        settlePlanReviewDecisionOp(mine);
+        settlePlanReviewDecisionOp(mine, 'package');
         mine.ownCallOpen = false;
     }
 }

package/dist/hitl/toolApprovalWire.d.ts

@@ -144,6 +144,8 @@ export interface ApprovalCardRequest {
     mandate?: ApprovalMandateWord;
     denialLimitFallback?: DenialLimitFallback;
     origin?: string;
+    askClass?: string;
+    classes?: readonly string[];
     ruleStoreUnreadable?: RuleStoreUnreadableKind;
 }
 export type ApprovalCardPort = (req: ApprovalCardRequest) => Promise<ApprovalCardDecision>;
@@ -183,6 +185,8 @@ export interface ToolApprovalFrame {
     mandated?: true;
     mandate?: string;
     origin?: string;
+    askClass?: string;
+    classes?: readonly string[];
     inputHasBidi?: true;
     parked?: true;
     expiresInMs?: number;
@@ -200,7 +204,7 @@ export interface ToolApprovalDelegation {
     depth: number;
     agentName?: string;
 }
-export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleSuggestions", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "ruleStoreUnreadable", "readRootCandidate", "mandated", "mandate", "origin", "inputHasBidi", "parked", "persistedRuleShadowed", "probeCause", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome"];
+export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleSuggestions", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "ruleStoreUnreadable", "readRootCandidate", "mandated", "mandate", "origin", "askClass", "classes", "inputHasBidi", "parked", "persistedRuleShadowed", "probeCause", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome"];
 export interface ApprovalMandatedFacts {
     readonly mandated?: true;
     readonly ruleOffersAbsence?: string;
@@ -210,7 +214,7 @@ export declare function approvalIsMandated(v: ApprovalMandatedFacts | undefined
 export declare function readApprovalMandate(v: {
     readonly mandate?: string;
 } | undefined | null): ApprovalMandateWord | undefined;
-export declare function toolPermissionRequestAskBits(card: object | null | undefined): Pick<ToolPermissionRequest, 'mandated' | 'mandate' | 'origin' | 'ruleOffersAbsence'>;
+export declare function toolPermissionRequestAskBits(card: object | null | undefined): Pick<ToolPermissionRequest, 'mandated' | 'mandate' | 'origin' | 'ruleOffersAbsence' | 'askClass' | 'classes'>;
 export declare function isFromSubagent(frame: ToolApprovalFrame): boolean;
 export type ToolApprovalRespondDecision = 'allow' | 'allow_session' | 'deny';
 export interface RespondToolApprovalOpts {

package/dist/hitl/toolApprovalWire.js

@@ -210,6 +210,7 @@ export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signa
         ...(hasOwnStrictTrue(pending, 'mandated') ? { mandated: true } : {}),
         ...((w) => (w !== undefined ? { mandate: w } : {}))(readApprovalMandate(pending)),
         ...((o) => (o !== undefined ? { origin: o } : {}))(readOwnNonEmptyString(pending, 'origin')),
+        ...(readAskClassPair(pending) ?? {}),
         ...(pending.gateKind === 'irreversible_ask' ? { irreversibleParkGate: true } : {}),
         ...(pending.hasBidiControls === true ? { hasBidiControls: true } : {}),
         ...(ruleOffersReadOnly !== undefined ? { ruleOffersReadOnly } : {}),
@@ -386,6 +387,8 @@ export const TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
     'mandated',
     'mandate',
     'origin',
+    'askClass',
+    'classes',
     'inputHasBidi',
     'parked',
     'persistedRuleShadowed',
@@ -425,13 +428,39 @@ export function toolPermissionRequestAskBits(card) {
     const mandate = readApprovalMandate(card);
     const origin = readOwnNonEmptyString(card, 'origin');
     const ruleOffersAbsence = readOwnNonEmptyString(card, 'ruleOffersAbsence');
+    const askClassPair = readAskClassPair(card);
     return {
         ...(mandated ? { mandated: true } : {}),
         ...(mandate !== undefined ? { mandate } : {}),
         ...(origin !== undefined ? { origin } : {}),
         ...(ruleOffersAbsence !== undefined ? { ruleOffersAbsence } : {}),
+        ...(askClassPair ?? {}),
     };
 }
+function readAskClassPair(v) {
+    if (typeof v !== 'object' || v === null)
+        return undefined;
+    const askClass = readOwnNonEmptyString(v, 'askClass');
+    if (askClass === undefined || !Object.hasOwn(v, 'classes'))
+        return undefined;
+    const raw = v.classes;
+    if (!Array.isArray(raw) || raw.length === 0)
+        return undefined;
+    const classes = [];
+    const seen = new Set();
+    for (let i = 0; i < raw.length; i++) {
+        if (!Object.hasOwn(raw, i))
+            return undefined;
+        const c = raw[i];
+        if (typeof c !== 'string' || c === '' || seen.has(c))
+            return undefined;
+        seen.add(c);
+        classes.push(c);
+    }
+    if (classes[0] !== askClass)
+        return undefined;
+    return { askClass, classes: Object.freeze(classes) };
+}
 function hasOwnStrictTrue(v, key) {
     return Object.hasOwn(v, key) && v[key] === true;
 }
@@ -870,6 +899,7 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
         ...(denialLimitFallback !== undefined ? { denialLimitFallback } : {}),
         ...((k) => (k !== undefined ? { ruleStoreUnreadable: k } : {}))(readRuleStoreUnreadable(frame.ruleStoreUnreadable)),
         ...((o) => (o !== undefined ? { origin: o } : {}))(readOwnNonEmptyString(frame, 'origin')),
+        ...(readAskClassPair(frame) ?? {}),
     });
     if (argsNotRealInput && card.kind === 'allow' && card.updatedInput !== undefined) {
         hostLog('error', `liveToolApprovalWire: ${approvalId} card returned an edited approval on a card whose arguments are not the tool's real input (${lane?.argsUnavailable === true ? 'args-unavailable ask' : 'arguments omitted or absent on the frame'}) — nothing sent (the ask stays pending)`);

package/dist/hooksWireCaps.js

@@ -1,8 +1,8 @@
-import { engineCapNestedTrue, engineCapState } from './engineCapsCache.js';
+import { engineCapNestedTrue, engineCapState, engineCapValue } from './engineCapsCache.js';
 import { displayUntrusted } from './displayUntrusted.js';
 import { collapseLabel } from './fleetTaskDesc.js';
 import { hostLog, hostSettings } from './host.js';
-import { decidePluginHooks, dedupeSettingsHookGroups, filterSettingsHookGroups, occupancyOf, settingsHookDropText, } from './pluginHooksWire.js';
+import { createSettingsHookJudge, decidePluginHooks, dedupeSettingsHookGroups, filterSettingsHookGroups, occupancyOf, settingsHookDropText, } from './pluginHooksWire.js';
 import { MAX_HOOK_NOTICE_TEXT_CHARS } from './notifications.js';
 import { goalStopHookMatcher, __resetGoalStopHookForTests } from './goalStopHook.js';
 export { GOAL_STOP_HOOK_WIRE_ENV, CC_STOP_SEMANTICS_MIN_SERVER, ccStopSemanticsFromVersion, engineCcStopSemantics, isGoalStopHookWireArmed, setWireSessionStopHook, getWireSessionStopHook, getWireSessionStopHookCcSemantics, buildGoalStopHookPrompt, } from './goalStopHook.js';
@@ -121,7 +121,7 @@ function readPluginHooks(settings, warnIfAbsent) {
     }
     return { state: 'absent' };
 }
-const NO_PLAN_ENGINE = { ownedByThisShell: null, pluginHooksCapable: null };
+const NO_PLAN_ENGINE = { ownedByThisShell: null, pluginHooksCapable: null, hooksCapable: null };
 export function hooksForWire(opts = {}) {
     const given = opts?.plan;
     if (isHooksWirePlan(given))
@@ -131,7 +131,7 @@ export function hooksForWire(opts = {}) {
     }
     if (isHooksWirePlan(opts))
         return opts.wire;
-    return buildHooksWirePlan(NO_PLAN_ENGINE, new Set(), false).wire;
+    return buildHooksWirePlan(NO_PLAN_ENGINE, () => false, false, true).wire;
 }
 function isHooksWirePlan(v) {
     try {
@@ -139,14 +139,17 @@ function isHooksWirePlan(v) {
             return false;
         const o = v;
         for (const k of PLAN_KEYS)
-            if (!Object.hasOwn(o, k))
+            if (!Object.hasOwn(o, k) && k !== 'settingsVerdicts' && k !== 'settingsExcluded')
                 return false;
         const reader = o.pluginReader;
         const engineFacts = o.engine;
         const wire = o.wire;
+        const arrayOrAbsent = (k) => !Object.hasOwn(o, k) || Array.isArray(o[k]);
         return (Array.isArray(o.verdicts) &&
             Array.isArray(o.excluded) &&
             Array.isArray(o.settingsDropped) &&
+            arrayOrAbsent('settingsVerdicts') &&
+            arrayOrAbsent('settingsExcluded') &&
             (reader === 'present' || reader === 'absent' || reader === 'failed') &&
             typeof engineFacts === 'object' &&
             engineFacts !== null &&
@@ -157,7 +160,7 @@ function isHooksWirePlan(v) {
         return false;
     }
 }
-const PLAN_KEYS = ['engine', 'pluginReader', 'verdicts', 'excluded', 'settingsDropped', 'wire'];
+const PLAN_KEYS = ['engine', 'pluginReader', 'verdicts', 'excluded', 'settingsDropped', 'settingsVerdicts', 'settingsExcluded', 'wire'];
 const _planKeysPin = [true, true];
 void _planKeysPin;
 export function hooksWirePlan(opts = {}) {
@@ -168,6 +171,7 @@ export function hooksWirePlan(opts = {}) {
         pluginHooksCapable: engineCapState(o.baseUrl, 'taskSettings') === 'unprobed'
             ? null
             : engineCapNestedTrue(o.baseUrl, 'taskSettings', 'pluginHooks'),
+        hooksCapable: taskHooksCapability(o.baseUrl),
     };
     const shellEvents = new Set();
     if (Array.isArray(o.shellHookEvents)) {
@@ -175,12 +179,72 @@ export function hooksWirePlan(opts = {}) {
             if (typeof e === 'string')
                 shellEvents.add(e);
     }
-    return buildHooksWirePlan(engine, shellEvents, true);
+    const typesByEvent = shellHookTypesOf(o);
+    const shellRuns = (event, type) => {
+        if (!shellEvents.has(event))
+            return false;
+        const types = typesByEvent?.get(event);
+        return types === undefined || (typeof type === 'string' && types.has(type));
+    };
+    const settingsShellRuns = typesByEvent !== undefined ? shellRuns : (event, type) => type !== 'prompt' && type !== 'agent' && shellRuns(event, type);
+    return buildHooksWirePlan(engine, shellRuns, true, promptAuthoredByUserOf(o), settingsShellRuns);
+}
+function taskHooksCapability(baseUrl) {
+    const v = engineCapValue(baseUrl, 'taskSettings');
+    if (v.kind !== 'value')
+        return null;
+    if (v.value === false)
+        return false;
+    if (typeof v.value !== 'object' || v.value === null || Array.isArray(v.value))
+        return null;
+    const hooks = v.value.hooks;
+    return hooks === true ? true : hooks === false ? false : null;
+}
+function shellHookTypesOf(o) {
+    let raw;
+    try {
+        raw = o.shellHookTypesByEvent;
+        if (raw === undefined)
+            return undefined;
+        if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+            throw new TypeError('not a plain object');
+        const out = new Map();
+        for (const key of Object.keys(raw)) {
+            const types = raw[key];
+            if (!Array.isArray(types) || !types.every((t) => typeof t === 'string'))
+                throw new TypeError(`value for one event is not an array of strings`);
+            out.set(key, new Set(types));
+        }
+        return out;
+    }
+    catch (err) {
+        hostLog('debug', `hooksWirePlan: shellHookTypesByEvent is malformed — treated as absent (command and http hooks count as running on every reported event; prompt and agent hooks from settings stay with the engine): ${String(err)}`);
+        return undefined;
+    }
+}
+function promptAuthoredByUserOf(o) {
+    let v;
+    try {
+        v = o.promptAuthoredByUser;
+    }
+    catch (err) {
+        hostLog('debug', `hooksWirePlan: promptAuthoredByUser threw while being read — treated as written by the user: ${String(err)}`);
+        return true;
+    }
+    if (v === false)
+        return false;
+    if (v !== undefined && v !== true) {
+        hostLog('debug', 'hooksWirePlan: promptAuthoredByUser is not a boolean — treated as written by the user');
+    }
+    return true;
 }
-function buildHooksWirePlan(engine, shellEvents, withPlugins) {
+function buildHooksWirePlan(engine, shellRuns, withPlugins, promptAuthoredByUser, settingsShellRuns = shellRuns) {
     const settingsDropped = [];
+    const settingsVerdicts = [];
+    const settingsExcluded = [];
+    const judge = withPlugins ? createSettingsHookJudge(engine, settingsShellRuns, promptAuthoredByUser) : undefined;
     let settingsStripped = 0;
-    const planOf = (pluginReader, wire, verdicts = [], excluded = []) => ({ engine, pluginReader, verdicts, excluded, settingsDropped, wire });
+    const planOf = (pluginReader, wire, verdicts = [], excluded = []) => ({ engine, pluginReader, verdicts, excluded, settingsDropped, settingsVerdicts, settingsExcluded, wire });
     const closedPlan = (settings, reason) => {
         if (!withPlugins)
             return planOf('absent', undefined);
@@ -193,7 +257,8 @@ function buildHooksWirePlan(engine, shellEvents, withPlugins) {
             exclusion: reason,
             managedOnly: false,
             engine,
-            shellHookEvents: shellEvents,
+            shellRuns,
+            promptAuthoredByUser,
             occupied: new Map(),
         }));
         if (d === undefined)
@@ -265,8 +330,10 @@ function buildHooksWirePlan(engine, shellEvents, withPlugins) {
         for (const [event, groups] of Object.entries(hooks)) {
             if (!Array.isArray(groups) || groups.length === 0)
                 continue;
-            const kept = filterSettingsHookGroups(source, event, groups, engine.pluginHooksCapable === true, shellEvents.has(event), !withPlugins);
+            const kept = filterSettingsHookGroups(source, event, groups, engine.pluginHooksCapable === true, (type) => shellRuns(event, type), !withPlugins, judge);
             settingsDropped.push(...kept.drops);
+            settingsVerdicts.push(...kept.verdicts);
+            settingsExcluded.push(...kept.excluded);
             settingsStripped += kept.stripped;
             if (kept.groups.length === 0)
                 continue;
@@ -334,7 +401,8 @@ function buildHooksWirePlan(engine, shellEvents, withPlugins) {
             exclusion: startup ? 'startup_mode' : undefined,
             managedOnly: managedOnlyPlugins,
             engine,
-            shellHookEvents: shellEvents,
+            shellRuns,
+            promptAuthoredByUser,
             occupied,
         });
     });

package/dist/index.d.ts

@@ -40,6 +40,7 @@ export * from './deviceExecutorManagementCapability.js';
 export * from './mcpReconnect.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
+export { providerRejectionResend, type ProviderRejectionResend } from './providerRejection.js';
 export * from './runCancelContext.js';
 export * from './argvFlagValue.js';
 export * from './readFacePosture.js';
@@ -66,7 +67,7 @@ export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntr
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export * from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, type ControlClientLike, type ControlRouterOptions, type ControlSafetyCode, type ErrCodes, type QueuedCommand, type QueuePriority, type RunsResourceLike, } from './controlRouter.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
@@ -111,6 +112,8 @@ export * from './adapter/downstream/terminalToSdkResult.js';
 export * from './adapter/runStream.js';
 export * from './adapter/activeRunSelfHeal.js';
 export * from './request/taskRequest.js';
+export { disableSkillsDeclaration } from './disableSkillsWire.js';
+export type { DisableSkillsDeclaration } from './disableSkillsWire.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { DEFAULT_SESSION_KEY } from './sessionSlot.js';
@@ -146,6 +149,10 @@ export * from './wireErrorTriage.js';
 export * from './corruptSession.js';
 export * from './corruptSessionCopy.js';
 export { classifyToolHistoryMismatch, resolveToolHistoryRewindTarget } from './toolHistoryMismatch.js';
+export { classifyRegistryConflict, isScopeGoneError } from './registryConflict.js';
+export type { RegistryConflictClass } from './registryConflict.js';
+export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredPrompts } from './promptDelivery.js';
+export type { PromptDeliveryLedger, PromptDeliveryRecord } from './promptDelivery.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
@@ -155,7 +162,7 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, } from './pluginHooksWire.js';
+export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, } from './pluginHooksWire.js';
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
@@ -193,11 +200,13 @@ export * from './request/printNotification.js';
 export * from './seatContract.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
-export { READ_CREDENTIAL_NOT_ACCEPTED_NOTICE } from './readCredentialRefusal.js';
+export { READ_CREDENTIAL_NOT_ACCEPTED_NOTICE, isReadCredentialRefusal } from './readCredentialRefusal.js';
 export { readEngineAgentRegistry, isEngineAgentRegistryListingSuperseded } from './agentSession/engineAgentRegistryRead.js';
 export type { EngineAgentRegistryClient } from './agentSession/engineAgentRegistryRead.js';
 export { stopEngineSessionBackground, engineSessionBackgroundReceiptReadingOf, ENGINE_SESSION_BACKGROUND_RECEIPT_STATES, } from './agentSession/engineSessionBackgroundStop.js';
 export type { EngineSessionBackgroundStopClient, EngineSessionBackgroundStopWire, EngineSessionBackgroundStopOptions, EngineSessionBackgroundReceipt, EngineSessionBackgroundStopUnavailableWhy, EngineSessionBackgroundStopRefusedWhy, EngineSessionBackgroundStopResult, EngineSessionBackgroundReceiptState, EngineSessionBackgroundReceiptReading, } from './agentSession/engineSessionBackgroundStop.js';
+export { eraseSessionMemory, sessionMemoryEraseOutcome, SESSION_MEMORY_ERASE_REFUSAL_REASONS, SESSION_MEMORY_ERASE_UNCONFIRMED_WHYS, SESSION_MEMORY_ERASE_RETRIES, } from './sessionMemoryErase.js';
+export type { SessionMemoryEraseWire, SessionMemoryEraseCall, SessionMemoryEraseOptions, SessionMemoryEraseSent, SessionMemoryEraseNotSentWhy, SessionMemoryEraseJson, SessionMemoryEraseAnswer, SessionMemoryEraseRefusalReason, SessionMemoryEraseUnconfirmedWhy, SessionMemoryEraseRetry, SessionMemoryEraseOutcome, } from './sessionMemoryErase.js';
 export * from './model/catalog.js';
 export * from './model/catalogLoader.js';
 export * from './model/providerAuth.js';