@sema-agent/client-core 0.88.0 → 0.90.0

package/dist/request/taskRequest.js

@@ -1,3 +1,6 @@
+import { refuseBadDisableSkills, refuseDisableSkillsConflict } from '../disableSkillsWire.js';
+import { ATTACHMENTS_SPEC_KEYS, AttachmentsSpecRefused } from '../attachmentsWireCaps.js';
+import { retiredAttachmentsKeyWhy } from '../taskRequestWords.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
     { field: 'sessionId', lanes: ['interactive', 'print', 'utility'], live: false, why: '单命名空间(TP-A Step 2):壳 id 即引擎 session id;print 在非 live 下保留 mock 常量', whyUtilityLane: '恒座:side-channel 提交走**独立**会话 id(壳另铸一个,绝不复用用户会话那一个 —— 复用会把这次提交的转录混进用户会话)' },
@@ -25,6 +28,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'fileHistory', lanes: ['interactive', 'print'], live: true, why: '「这一次运行别捕获文件历史」的**请求级声明**(server 7.104.0 提交体键,单成员闭集 "disabled";`POST /v1/tasks` · `/v1/tasks/stream` · `/v1/runs` 同收,子代继承)。两条用户车道都是提交面、都跑在用户的文件上 ⇒ 都能声明;「本会话不捕获」= 每个提交都带(续跑腿重放同一个体)。🔴 只在能力读数 `on-optional` 时发(老 server 对表外键 400),值由片段口 `fileHistoryDeclarationField` 唯一铸出。与 rewind 还原键同交 ⇒ 上游 400 `request.field_conflict`', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),不会改任何文件 ⇒ 没有可捕获的东西;带上它只会在不认识这一键的老 server 上给这条提交多一种 400' },
     { field: 'inheritEnv', lanes: ['interactive', 'print'], live: true, why: '模型驱动的宿主 shell「继承多少用户环境」的**请求级声明**(server 7.106.0 提交体键,两词闭集 "all" / "scrub";`POST /v1/tasks` · `/v1/tasks/stream` · `/v1/runs` 同收,续跑腿重放同判)。两条用户车道都是提交面、都可能在用户机器上跑 shell ⇒ 都能声明。本层两词原样透传、不按车道 / 部署预判(非 host 车道 × "all" 400、托管 × "all" 422 归上游判)。🔴 缺席 = 缺省清洗且清掉本会话上一条声明 ⇒ 要「本会话整份继承」就每个提交都带。🔴 只在服务端版本 ≥ 7.106.0 时发(老 server 对表外键整条 400),值由片段口 `inheritEnvDeclaration` 唯一铸出', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),没有模型驱动的 shell 去继承环境;带上它只会在不认这一键的老服务端上给这条提交多一种 400' },
     { field: 'requireExistingSession', lanes: ['interactive', 'print'], live: true, why: '「只续已有会话」的**请求级断言**(sdk `TaskRequest.requireExistingSession`):`true` 且会话不在 ⇒ 服务端在任何东西跑起来之前拒(会话不在 / 没给会话 id 两形),而**不是**静默新开一个同 id 的空会话;缺席 / `false` = 历史的「找不到就新开」。两条用户车道都有「续某个会话」的入口 ⇒ 都能声明。本层只认字面 `true`(`false` 与缺席同义、不发);非布尔坏值响亮拒(上游对它 400);`true` 而入参没有可续的会话 id ⇒ 装配期按名响亮拒,不留给上游。上游两形的拒绝经 `requireExistingSessionRefusalFromError` 归成一句', whyUtilityLane: '无座:side-channel 每一次提交都走壳另铸的**独立**会话 id(见 sessionId 那一行),从不续任何已有会话 ⇒「必须已存在」对它没有意义,带上去只会让每一次提交都被拒' },
+    { field: 'disableSkills', lanes: ['interactive', 'print'], live: true, why: '「这一发一只技能都不装」的**请求级声明**(出厂技能、调用方给的技能、子代定义里的技能一个都不进引擎;其余工具照挂 —— 与 excludeAllTools 是两件事,两键同带各自生效)。两条用户车道都是提交面 ⇒ 都能声明。本层只认字面 true(false 与缺席同义、不发);非布尔坏值响亮拒(上游对它 400);与非空 skills 或任一非空 agents[].skills 同在 ⇒ 装配期按名响亮拒(上游对这一组合 400),兜底层落 agents 之后同判。🔴 只在能力位读数为真时发(老服务端对表外键整条 400),值由片段口 disableSkillsDeclaration 唯一铸出', whyUtilityLane: '无座:同 skills 一行 —— side-channel 是零工具面,装不装技能都无从谈起' },
     { field: 'finalVerification', lanes: ['print'], live: true, why: 'P1-1 终验:无人值守车道才需要引擎自证;交互 REPL 由人当场看结果。#106 裁 B(让位+告知)后交互面默认关', whyUtilityLane: '无座:终验让引擎再跑一轮自证,而 side-channel 要的是一次小提交的即时答案;「无人值守才需要引擎自证」这条理由在本车道上让位给「小预算优先」' },
     { field: 'limits', lanes: ['print', 'utility'], live: true, why: 'P2-3-b:`-p` 的预算护栏(--max-* flag 族),交互 REPL 由人随时 Esc', whyUtilityLane: '有座:side-channel 必须带预算护栏(墙钟 / 输出 token / 轮数)—— 它同样没有人看着,而且没有后续回合可以中断' },
     { field: 'interactiveTools', lanes: ['print', 'utility'], live: true, why: '[909]B 件3:无人值守 stamp false,从 roster 源头灭掉 AskUserQuestion/plan 门。交互车道 stamp false 等于自废武功', whyUtilityLane: '有座:side-channel 绝不该弹交互问答 / plan 门(没有人在看这条提交)。它与 excludeAllTools 是**两条独立**的收紧声明、在这条车道上**并存**(本车道强制带卸载声明,见 `refuseUtilityWithoutToolUnload`;这一位是它旁边那条「连问都别问」的声明,不是它的降级替身)' },
@@ -76,18 +80,40 @@ export function taskRequestOmissionCauseDetail(cause) {
     const word = typeof cause === 'string' && cause.length > 0 ? cause : '(none)';
     return `a cause this build does not know (${word}) — this build does not know this cause: receipt causes come from this build's own frozen vocabulary, so a word outside it was not produced here; check whatever supplied it`;
 }
-export const TASK_REQUEST_OMISSION_CAUSE_NOTICES = Object.freeze({
-    upstream_absent: 'Not sent with this request: this version has no way to send this setting in any request, so giving it or leaving it out makes no difference to what is sent.',
-    other_channel: 'Not sent from here: that part of the request belongs to a separate step, so what goes out for it, if anything, is decided there rather than by the value given here.',
-    off_lane: 'Not sent with this request: this kind of request does not carry this setting, so giving it or leaving it out makes no difference to what this request sends.',
-    not_live: 'Not sent with this request: the request was marked as not going to a live engine (for example an offline or test run), and this setting is only sent on requests that go to one.',
+const TASK_REQUEST_OMISSION_CAUSE_NOTICE_PARTS = Object.freeze({
+    upstream_absent: {
+        lead: 'Not sent with this request',
+        reason: 'this version has no way to send this setting in any request, so giving it or leaving it out makes no difference to what is sent',
+    },
+    other_channel: {
+        lead: 'Not sent from here',
+        reason: 'that part of the request belongs to a separate step, so what goes out for it, if anything, is decided there rather than by the value given here',
+    },
+    off_lane: {
+        lead: 'Not sent with this request',
+        reason: 'this kind of request does not carry this setting, so giving it or leaving it out makes no difference to what this request sends',
+    },
+    not_live: {
+        lead: 'Not sent with this request',
+        reason: 'the request was marked as not going to a live engine (for example an offline or test run), and this setting is only sent on requests that go to one',
+    },
 });
-const TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_NOTICE = 'Not sent with this request, for a reason this version does not recognize.';
+const TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_LEAD = 'Not sent with this request';
+const TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_REASON = 'for a reason this version does not recognize';
+const wholeOmissionNotice = (p) => `${p.lead}: ${p.reason}.`;
+export const TASK_REQUEST_OMISSION_CAUSE_NOTICES = Object.freeze(Object.fromEntries(TASK_REQUEST_OMISSION_CAUSES.map((cause) => [cause, wholeOmissionNotice(TASK_REQUEST_OMISSION_CAUSE_NOTICE_PARTS[cause])])));
+const TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_NOTICE = `${TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_LEAD}, ${TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_REASON}.`;
+const omissionNoticePartsOf = (cause) => typeof cause === 'string' && Object.hasOwn(TASK_REQUEST_OMISSION_CAUSE_NOTICE_PARTS, cause)
+    ? TASK_REQUEST_OMISSION_CAUSE_NOTICE_PARTS[cause]
+    : undefined;
 export function taskRequestOmissionCauseNotice(cause) {
-    return typeof cause === 'string' && Object.hasOwn(TASK_REQUEST_OMISSION_CAUSE_NOTICES, cause)
+    return omissionNoticePartsOf(cause) !== undefined
         ? TASK_REQUEST_OMISSION_CAUSE_NOTICES[cause]
         : TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_NOTICE;
 }
+export function taskRequestOmissionCausePhrase(cause) {
+    return omissionNoticePartsOf(cause)?.reason ?? TASK_REQUEST_OMISSION_UNKNOWN_CAUSE_REASON;
+}
 const row = (field) => ({ via: 'matrix', field });
 const INPUT_KEY_ROUTES = {
     objective: { via: 'always' },
@@ -141,6 +167,7 @@ const INPUT_KEY_ROUTES = {
     fileHistory: row('fileHistory'),
     inheritEnv: row('inheritEnv'),
     requireExistingSession: row('requireExistingSession'),
+    disableSkills: row('disableSkills'),
     rewind: row('resumeAt/resumeAtMode/restoreFiles/rewindFilesTo'),
     repo: row('repo'),
     council: row('council'),
@@ -214,6 +241,7 @@ const VALUE_LEVEL_IN_PLAY = Object.freeze({
     memory: (v) => v === 'off',
     fileHistory: (v) => v === FILE_HISTORY_DISABLED,
     requireExistingSession: (v) => v === true,
+    disableSkills: (v) => v === true,
     rewind: (v) => typeof v === 'object' && v !== null && rewindSubKeys().some((k) => hasOwn(v, k) && present(v[k])),
 });
 const inPlay = (key, v) => present(v) && (VALUE_LEVEL_IN_PLAY[key]?.(v) ?? true);
@@ -425,6 +453,29 @@ const refuseBadMemoryOff = (v) => {
         '`"on"`,`{ enabled: false }` 对象形也不是 wire 拼法)且对坏拼写**响亮拒**(server 400 `request.field_invalid`)。' +
         '本层若静默删键,这一次运行会照常挂上记忆面而声明人不会知道 —— 与 memoryCapture 同一条纪律。错误文本只报形状,不回显值。');
 };
+const withoutRetiredAttachmentsKeys = (v) => {
+    if (typeof v !== 'object' || v === null)
+        return v;
+    let drop;
+    for (const key of Object.keys(v)) {
+        const why = retiredAttachmentsKeyWhy(key, 'key');
+        if (why === undefined)
+            continue;
+        const d = Object.getOwnPropertyDescriptor(v, key);
+        if (d !== undefined && Object.prototype.hasOwnProperty.call(d, 'value') && d.value === undefined) {
+            ;
+            (drop ??= []).push(key);
+            continue;
+        }
+        throw new AttachmentsSpecRefused(`buildTaskRequest: refusing attachments key ${JSON.stringify(key)} — ${why}`, { token: key, why, allowed: ATTACHMENTS_SPEC_KEYS, key });
+    }
+    if (drop === undefined)
+        return v;
+    const copy = { ...v };
+    for (const key of drop)
+        delete copy[key];
+    return copy;
+};
 const refuseBadExcludeAllTools = (v) => {
     if (v === undefined || v === null || v === true || v === false)
         return;
@@ -542,7 +593,7 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills'];
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -612,6 +663,7 @@ export function assembleTaskRequest(input, lane) {
     const fileHistoryIn = src.fileHistory;
     const inheritEnvIn = src.inheritEnv;
     const requireExistingSessionIn = src.requireExistingSession;
+    const disableSkillsIn = src.disableSkills;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -624,6 +676,7 @@ export function assembleTaskRequest(input, lane) {
         fileHistory: fileHistoryIn,
         inheritEnv: inheritEnvIn,
         requireExistingSession: requireExistingSessionIn,
+        disableSkills: disableSkillsIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -637,6 +690,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadFileHistory(fileHistoryIn);
     refuseBadInheritEnv(inheritEnvIn);
     refuseBadRequireExistingSession(requireExistingSessionIn);
+    refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -721,6 +775,7 @@ export function assembleTaskRequest(input, lane) {
             '错误文本只报键名,不回显值。');
     }
     refuseRequireExistingWithoutSession(requireExistingSessionIn, i.sessionId);
+    refuseDisableSkillsConflict(disableSkillsIn, i.skills, Reflect.get(src, 'agents'), 'buildTaskRequest');
     refuseUtilityWithoutToolUnload(lane, excludeAllToolsIn);
     const carries = (route, value, key) => {
         if (route.via === 'always')
@@ -754,6 +809,7 @@ export function assembleTaskRequest(input, lane) {
         ...(onSetting('hooks') ? { hooks: s.hooks } : {}),
         ...(s.outputStyle !== undefined ? { outputStyle: s.outputStyle } : {}),
     };
+    const attachmentsForWire = on('attachments') ? withoutRetiredAttachmentsKeys(i.attachments) : undefined;
     const out = {
         objective: i.objective,
         sessionId: i.sessionId,
@@ -772,7 +828,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('retainBackgroundProcesses') ? { retainBackgroundProcesses: i.retainBackgroundProcesses } : {}),
         ...(on('promptProfile') ? { promptProfile: i.promptProfile } : {}),
         ...(on('enableFork') ? { enableFork: i.enableFork } : {}),
-        ...(on('attachments') ? { attachments: i.attachments } : {}),
+        ...(on('attachments') ? { attachments: attachmentsForWire } : {}),
         ...(on('repo') ? { repo: i.repo } : {}),
         ...(on('council') ? { council: true } : {}),
         ...(on('debate') ? { debate: true } : {}),
@@ -796,6 +852,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('fileHistory') ? { fileHistory: FILE_HISTORY_DISABLED } : {}),
         ...(on('inheritEnv') ? { inheritEnv: inheritEnvIn } : {}),
         ...(on('requireExistingSession') ? { requireExistingSession: true } : {}),
+        ...(on('disableSkills') ? { disableSkills: true } : {}),
         ...(Object.keys(settingsOut).length > 0 ? { settings: settingsOut } : {}),
     };
     return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]) });
@@ -819,6 +876,7 @@ export function applyLiveRequestDefaults(req, host) {
         out.retainSubagentSessions = true;
     if (out.agents === undefined && host.agents !== undefined)
         out.agents = host.agents;
+    refuseDisableSkillsConflict(out.disableSkills, out.skills, out.agents, 'applyLiveRequestDefaults');
     if (typeof out.scenario === 'string' && host.mockScenarioKeys?.has(out.scenario)) {
         delete out.scenario;
     }

package/dist/runTerminal.d.ts

@@ -11,6 +11,11 @@ export interface RunTerminalPausedRead extends RunTerminalPause {
     code?: string;
     flatStatus?: string;
 }
+export interface RunTerminalFailureDetail {
+    kind: string;
+    status?: number;
+    code?: string;
+}
 export type RunTerminalRead = {
     kind: 'completed';
     plane: RunTerminalPlane;
@@ -20,6 +25,7 @@ export type RunTerminalRead = {
     code?: string;
     message?: string;
     nestedPause?: RunTerminalPause;
+    detail?: RunTerminalFailureDetail;
 } | {
     kind: 'blocked';
     plane: RunTerminalPlane;

package/dist/runTerminal.js

@@ -20,6 +20,27 @@ function pauseOf(v) {
         ...(restoreMode !== undefined ? { restoreMode } : {}),
     };
 }
+const PROVIDER_REJECTED_DETAIL_KIND = 'provider_rejected';
+function failureDetailOf(cause) {
+    try {
+        const own = (o, k) => (Object.prototype.hasOwnProperty.call(o, k) ? o[k] : undefined);
+        const v = own(cause, 'detail');
+        if (typeof v !== 'object' || v === null || Array.isArray(v))
+            return undefined;
+        const kind = str(own(v, 'kind'));
+        if (kind === undefined)
+            return undefined;
+        const rawStatus = own(v, 'status');
+        const status = typeof rawStatus === 'number' && Number.isInteger(rawStatus) && rawStatus >= 100 && rawStatus <= 599 ? rawStatus : undefined;
+        if (kind === PROVIDER_REJECTED_DETAIL_KIND && (status === undefined || status < 400))
+            return undefined;
+        const code = str(own(v, 'code'));
+        return { kind, ...(status !== undefined ? { status } : {}), ...(code !== undefined ? { code } : {}) };
+    }
+    catch {
+        return undefined;
+    }
+}
 const FLAT_PAUSED_STATUSES = ['suspended', 'needs_review'];
 export function readRunTerminal(result) {
     if (typeof result !== 'object' || result === null || Array.isArray(result))
@@ -44,12 +65,14 @@ export function readRunTerminal(result) {
                 const code = str(c.code);
                 const message = str(c.message);
                 const nestedPause = c.nestedPause !== undefined ? pauseOf(c.nestedPause) : undefined;
+                const detail = failureDetailOf(c);
                 return {
                     kind: 'failed',
                     plane: 'cause',
                     ...(code !== undefined ? { code } : {}),
                     ...(message !== undefined ? { message } : {}),
                     ...(nestedPause !== undefined ? { nestedPause } : {}),
+                    ...(detail !== undefined ? { detail } : {}),
                 };
             }
             case 'blocked': {

package/dist/sdkRegistryTransit.d.ts

@@ -2,5 +2,6 @@ export { RegistryClient } from '@sema-agent/sdk/registry';
 export { getMeConfig, getScopeConfigDraft, getEffective } from '@sema-agent/sdk/registry';
 export { probeRegistryHealth, postFeedback } from '@sema-agent/sdk/registry';
 export { REGISTRY_AUTH_PATHS, skillContentAddress } from '@sema-agent/sdk/registry';
+export { requestDeviceCode, pollUntilApproved, refreshTokens, listScopes, switchScope } from '@sema-agent/sdk/registry';
 export { RegistryApiError, OAuthFlowError } from '@sema-agent/sdk/registry';
 export type { RegistryTokens, TokenProvider, } from '@sema-agent/sdk/registry';

package/dist/sdkRegistryTransit.js

@@ -2,4 +2,5 @@ export { RegistryClient } from '@sema-agent/sdk/registry';
 export { getMeConfig, getScopeConfigDraft, getEffective } from '@sema-agent/sdk/registry';
 export { probeRegistryHealth, postFeedback } from '@sema-agent/sdk/registry';
 export { REGISTRY_AUTH_PATHS, skillContentAddress } from '@sema-agent/sdk/registry';
+export { requestDeviceCode, pollUntilApproved, refreshTokens, listScopes, switchScope } from '@sema-agent/sdk/registry';
 export { RegistryApiError, OAuthFlowError } from '@sema-agent/sdk/registry';

package/dist/seam.d.ts

@@ -174,6 +174,9 @@ export interface WiringManifestChromeEvent {
     readDeny?: WiringManifestReadDenyView;
     hands?: WiringManifestHandsView;
     fileHistory?: string;
+    instructions?: {
+        readonly selected: readonly string[];
+    };
     eventId?: string;
 }
 export interface TextSegmentCommittedRow {

package/dist/seatContract.d.ts

@@ -61,6 +61,8 @@ export interface ToolPermissionRequest {
     mandate?: ApprovalMandateWord;
     origin?: string;
     ruleOffersAbsence?: string;
+    askClass?: string;
+    classes?: readonly string[];
 }
 declare const SEAT_EVENT_TYPE_TUPLE: readonly ["start", "close", "session_updated", "message", "stream_event", "chrome_event", "error", "tool_permission_resolved"];
 export type SeatEventType = (typeof SEAT_EVENT_TYPE_TUPLE)[number];
@@ -261,7 +263,7 @@ export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "inter
 export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore"];
 export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "messages", "error", "errorCategory", "code", "request", "data", "sources", "permissionMode", "session", "userMessageUuid", "hasPreClearSession", "requestId", "outcome", "chrome"];
-export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs", "governanceForced", "delegation", "mandated", "mandate", "origin", "ruleOffersAbsence"];
+export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs", "governanceForced", "delegation", "mandated", "mandate", "origin", "ruleOffersAbsence", "askClass", "classes"];
 export declare const LOCAL_SESSION_RECORD_KEYS: readonly ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
 export declare const SEND_MESSAGE_REQUEST_KEYS: readonly ["sessionId", "text", "model", "userMessageUuid", "permissionMode", "attachmentIds", "reasoningEffort", "retainBackgroundProcesses", "forwardSubagentEvents", "retainSubagentSessions", "settings", "scenario"];
 export declare const SEAT_SEND_MESSAGE_KEY_ORIGINS: {
@@ -333,6 +335,12 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
         }, {
             readonly key: "origin";
             readonly why: "喂姿态谓词 askSurvivesPosture 的安全位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 宿主报了没命中时姿态谓词可答可以放(放宽方向:真出身若是必问词就丢了);表外串读成不认识的词 ⇒ 答 unknown,宿主退回自己的规则(不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。";
+        }, {
+            readonly key: "askClass";
+            readonly why: "展示位(CC-284),权威成对窄读在卡口与过境口 toolPermissionRequestAskBits(与 classes 同在同缺、首员等于 askClass、不判成员、不重排);座位门不设第二判官,理由同 mandated(为一个展示位拒掉整条 request = 把安全 ask 丢给引擎超时拒)。坏形读成缺席 ⇒ 卡上不显示问类,不改决断;缺席不是「普通问」。不经过境口自铸座位请求的宿主要自己按同一把成对窄读。";
+        }, {
+            readonly key: "classes";
+            readonly why: "与 askClass 同一对(CC-284),同在同缺、同一只成对窄读(非空、每员非空串、无重复、首员等于 askClass;开集、原样顺序);座位门不设第二判官,理由同 askClass。";
         }, {
             readonly key: "ruleOffersAbsence";
             readonly why: "喂强制判据口 approvalIsMandated 的位(CC-203;寄存行那条腿的强制只以缺席词 mandated 表达),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口,座位门不设第二判官,理由同 mandated。坏形读成缺席 ⇒ 这一路不判强制(放宽方向:寄存行上的强制就丢了;另两路 mandated / mandate 照判);表外串只是不等于 mandated。不经过境口自铸座位请求的宿主要自己按同一把窄读。";

package/dist/seatContract.js

@@ -478,6 +478,8 @@ export const TOOL_PERMISSION_REQUEST_KEYS = [
     "mandate",
     "origin",
     "ruleOffersAbsence",
+    "askClass",
+    "classes",
 ];
 export const LOCAL_SESSION_RECORD_KEYS = [
     "sessionId",
@@ -563,6 +565,14 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
                 key: "origin",
                 why: "喂姿态谓词 askSurvivesPosture 的安全位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 宿主报了没命中时姿态谓词可答可以放(放宽方向:真出身若是必问词就丢了);表外串读成不认识的词 ⇒ 答 unknown,宿主退回自己的规则(不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。",
             },
+            {
+                key: "askClass",
+                why: "展示位(CC-284),权威成对窄读在卡口与过境口 toolPermissionRequestAskBits(与 classes 同在同缺、首员等于 askClass、不判成员、不重排);座位门不设第二判官,理由同 mandated(为一个展示位拒掉整条 request = 把安全 ask 丢给引擎超时拒)。坏形读成缺席 ⇒ 卡上不显示问类,不改决断;缺席不是「普通问」。不经过境口自铸座位请求的宿主要自己按同一把成对窄读。",
+            },
+            {
+                key: "classes",
+                why: "与 askClass 同一对(CC-284),同在同缺、同一只成对窄读(非空、每员非空串、无重复、首员等于 askClass;开集、原样顺序);座位门不设第二判官,理由同 askClass。",
+            },
             {
                 key: "ruleOffersAbsence",
                 why: "喂强制判据口 approvalIsMandated 的位(CC-203;寄存行那条腿的强制只以缺席词 mandated 表达),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口,座位门不设第二判官,理由同 mandated。坏形读成缺席 ⇒ 这一路不判强制(放宽方向:寄存行上的强制就丢了;另两路 mandated / mandate 照判);表外串只是不等于 mandated。不经过境口自铸座位请求的宿主要自己按同一把窄读。",

package/dist/subagent/engineSubagentSteer.d.ts

@@ -4,10 +4,17 @@ export type SubagentSteerWireClient = {
     runs: Pick<AgentClient['runs'], 'steerSubagent'>;
 };
 export type SubagentSteerWire = EngineWireInjection<SubagentSteerWireClient>;
+export interface SubagentSteerNotDelivered {
+    ok: false;
+    reason: 'not-delivered';
+    safety: 'ledger_unavailable';
+    detail: string;
+}
 export type SubagentSteerOutcome = {
     ok: true;
     receipt: string;
-} | {
+    messageId?: string;
+} | SubagentSteerNotDelivered | {
     ok: false;
     reason: 'no-wire' | 'no-run' | 'not-running' | 'error';
     detail?: string;

package/dist/subagent/engineSubagentSteer.js

@@ -3,9 +3,21 @@ import { clientHasVerbs, engineWireFor, INJECTED_WIRE_SETTLE_MS, noAnswerDetailF
 import { engineSessionParamFor } from '../engineSessionParam.js';
 import { resolveOwnerContext, resolveOwnerRunId } from './engineSubagentResume.js';
 import { noteBgOwnerAbsence } from './subagentOwnerAbsence.js';
+import { errCodes, steeringRefusedBeforeEngine } from '../controlRouter.js';
 function usableSteerClient(client) {
     return clientHasVerbs(client, [['runs', 'steerSubagent']]);
 }
+function steerReceiptMessageId(body) {
+    try {
+        if (typeof body !== 'object' || body === null || !Object.hasOwn(body, 'messageId'))
+            return undefined;
+        const v = body.messageId;
+        return typeof v === 'string' && v.length > 0 ? v : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 export async function steerEngineSubagent(target, text, childTaskId, opts) {
     const named = typeof childTaskId === 'string' && childTaskId !== '' ? childTaskId : undefined;
     const { record: owner, key } = resolveOwnerContext(named);
@@ -36,13 +48,24 @@ export async function steerEngineSubagent(target, text, childTaskId, opts) {
         const copy = body?.note ?? body?.message;
         if (typeof copy === 'string' && copy.length > 0)
             receipt = copy;
-        return { ok: true, receipt };
+        const messageId = steerReceiptMessageId(body);
+        return messageId === undefined ? { ok: true, receipt } : { ok: true, receipt, messageId };
     }
     catch (e) {
-        const status = e?.status;
-        if (typeof status === 'number') {
+        let status;
+        try {
+            status = errCodes(e).status;
+        }
+        catch {
+            status = undefined;
+        }
+        if (status !== undefined) {
             const detail = e instanceof Error ? e.message : String(e);
             hostLog('debug', `engineSubagentSteer: ${status} ${detail.slice(0, 200)}`);
+            const refused = typeof e === 'object' && e !== null ? steeringRefusedBeforeEngine(e) : undefined;
+            if (refused !== undefined && refused.safety === 'ledger_unavailable') {
+                return { ok: false, reason: 'not-delivered', safety: refused.safety, detail: refused.advice };
+            }
             if (status === 409 || status === 404) {
                 return { ok: false, reason: 'not-running', detail };
             }

package/dist/supportFloor.d.ts

@@ -0,0 +1,10 @@
+export type SupportFloorComponent = 'server' | 'core' | 'sdk';
+export interface SupportFloor {
+    readonly server: string;
+    readonly core: string;
+    readonly sdk: string;
+}
+export declare const SUPPORT_FLOOR: Readonly<SupportFloor>;
+export declare function supportFloorOf(component: unknown): string | undefined;
+export type EngineVersionTier = 'engine' | 'legacy' | 'unknown';
+export declare function engineVersionTier(version: unknown, floor?: string): EngineVersionTier;

package/dist/supportFloor.js

@@ -0,0 +1,42 @@
+export const SUPPORT_FLOOR = Object.freeze({
+    server: '7.104.0',
+    core: '7.33.8',
+    sdk: '12.0.1',
+});
+export function supportFloorOf(component) {
+    if (component === 'server' || component === 'core' || component === 'sdk')
+        return SUPPORT_FLOOR[component];
+    return undefined;
+}
+function releaseTriple(v) {
+    if (typeof v !== 'string')
+        return undefined;
+    const m = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(v);
+    if (m === null)
+        return undefined;
+    return [Number(m[1]), Number(m[2]), Number(m[3])];
+}
+function compareTriple(a, b) {
+    for (let i = 0; i < 3; i++) {
+        const x = a[i];
+        const y = b[i];
+        if (x !== y)
+            return x < y ? -1 : 1;
+    }
+    return 0;
+}
+export function engineVersionTier(version, floor) {
+    let need = releaseTriple(SUPPORT_FLOOR.server);
+    if (floor !== undefined) {
+        const own = releaseTriple(floor);
+        if (own === undefined) {
+            throw new TypeError(`engineVersionTier: floor 只接受纯 x.y.z 版本串(整串、无前导零、无前后缀)或缺席 —— 收到 typeof=${floor === null ? 'null' : typeof floor}。错误文本只报形状,不回显值。`);
+        }
+        if (compareTriple(own, need) > 0)
+            need = own;
+    }
+    const got = releaseTriple(version);
+    if (got === undefined)
+        return 'unknown';
+    return compareTriple(got, need) >= 0 ? 'engine' : 'legacy';
+}

package/dist/taskRequestWords.d.ts

@@ -3,3 +3,4 @@ export type TaskRequestReasoningEffort = NonNullable<TaskRequest['reasoningEffor
 export declare const REASONING_EFFORT_WORDS: readonly ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 export type TaskRequestPermissionMode = NonNullable<TaskRequest['permissionMode']>;
 export declare const PERMISSION_MODE_WORDS: readonly ["default", "plan", "acceptEdits", "bypassPermissions", "auto"];
+export declare function retiredAttachmentsKeyWhy(nameOrToken: string, form?: 'token' | 'key'): string | undefined;

package/dist/taskRequestWords.js

@@ -2,3 +2,17 @@ export const REASONING_EFFORT_WORDS = ['off', 'minimal', 'low', 'medium', 'high'
 export const PERMISSION_MODE_WORDS = ['default', 'plan', 'acceptEdits', 'bypassPermissions', 'auto'];
 const _taskRequestWordPins = [true, true, true, true];
 void _taskRequestWordPins;
+export function retiredAttachmentsKeyWhy(nameOrToken, form = 'token') {
+    const lower = nameOrToken.trim().toLowerCase();
+    const eq = lower.indexOf('=');
+    const lhs = (eq < 0 ? lower : lower.slice(0, eq)).trim();
+    const bare = lhs.startsWith('+') || lhs.startsWith('-') ? lhs.slice(1).trim() : lhs;
+    if (bare !== 'planmodereminder')
+        return undefined;
+    const head = '"planModeReminder" was retired with core 7.39.0 / server 7.113.0 — the engine now states the plan posture itself whenever the permission mode is "plan"';
+    if (form === 'token')
+        return `${head}, and a request carrying the key is answered 400 request.field_invalid; remove the token (send permissionMode "plan" for the plan posture)`;
+    return nameOrToken === 'planModeReminder'
+        ? `${head}, and a request carrying this key is answered 400 request.field_invalid; remove the key (send permissionMode "plan" for the plan posture)`
+        : `${head}; the server ignores this spelling of it, but it is refused here so the retired key is not sent under any spelling; remove the key (send permissionMode "plan" for the plan posture)`;
+}