@sema-agent/client-core 0.89.0 → 0.90.0

package/dist/generated/engineNoticeTables.js

@@ -28,7 +28,6 @@ export const CORE_ENGINE_NOTICE_CODES = Object.freeze([
     "permission.ask_released_by_mode",
     "permission.read_deny_unapplied",
     "permission.rule_store_unavailable",
-    "resume.legacy_mode_seed_migrated",
     "peer.inbound_disposition",
     "peer.held_settled",
     "peer.idle_subscription",
@@ -116,7 +115,6 @@ export const CORE_NOTICE_AUDIENCE = Object.freeze({
     "permission.ask_released_by_mode": "user",
     "permission.read_deny_unapplied": "user",
     "permission.rule_store_unavailable": "user",
-    "resume.legacy_mode_seed_migrated": "operator",
     "peer.inbound_disposition": "user",
     "peer.held_settled": "user",
     "peer.idle_subscription": "user",
@@ -210,7 +208,6 @@ export const CORE_NOTICE_MINTER = Object.freeze({
     "permission.ask_released_by_mode": "engine",
     "permission.read_deny_unapplied": "engine",
     "permission.rule_store_unavailable": "engine",
-    "resume.legacy_mode_seed_migrated": "engine",
     "peer.inbound_disposition": "engine",
     "peer.held_settled": "engine",
     "peer.idle_subscription": "engine",

package/dist/hookToolAliases.d.ts

@@ -0,0 +1,3 @@
+export declare const HOOK_TOOL_ALIASES: Readonly<Record<string, string>>;
+export declare function hookToolAliasesOf(): Readonly<Record<string, string>>;
+export declare function canonicalHookToolName(name: string): string;

package/dist/hookToolAliases.js

@@ -0,0 +1,10 @@
+import { CORE_HOOK_TOOL_ALIASES } from './generated/engineFactTables.js';
+export const HOOK_TOOL_ALIASES = CORE_HOOK_TOOL_ALIASES;
+export function hookToolAliasesOf() {
+    return HOOK_TOOL_ALIASES;
+}
+export function canonicalHookToolName(name) {
+    if (typeof name !== 'string')
+        return name;
+    return Object.hasOwn(HOOK_TOOL_ALIASES, name) ? (HOOK_TOOL_ALIASES[name] ?? name) : name;
+}

package/dist/index.d.ts

@@ -31,6 +31,7 @@ export * from './executionLaneCapability.js';
 export * from './approvalsStreamLiveCapability.js';
 export * from './peerLaneCapability.js';
 export * from './permissionRulesWriteCapability.js';
+export * from './permissionsAllowGrantCapability.js';
 export * from './sessionPolicyCapability.js';
 export * from './memoryComplianceCapability.js';
 export * from './memoryOriginCapability.js';
@@ -90,6 +91,8 @@ export * from './oneShotWireCaps.js';
 export * from './rewindWireCaps.js';
 export * from './rewindArchiveCapability.js';
 export * from './fileHistoryCaptureCapability.js';
+export { FILE_HISTORY_LEG_VERDICTS, fileHistoryLegNoticeVerdict, fileHistoryLegNoticeSentence, fileHistoryDeclarationOfBody, createFileHistoryDeclarationLedger, } from './fileHistoryLegNotice.js';
+export type { FileHistoryDeclarationFact, FileHistoryLegNoticeVerdict, FileHistoryLegNoticeInput, FileHistoryDeclarationLedger } from './fileHistoryLegNotice.js';
 export * from './sealedKeyCapability.js';
 export * from './storePostureCapability.js';
 export * from './centerWiringCapability.js';
@@ -114,6 +117,8 @@ export * from './adapter/activeRunSelfHeal.js';
 export * from './request/taskRequest.js';
 export { disableSkillsDeclaration } from './disableSkillsWire.js';
 export type { DisableSkillsDeclaration } from './disableSkillsWire.js';
+export { permissionsDeclaration } from './permissionsDeclaration.js';
+export type { PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, WireRuleOrigin, WireRuleOrigins } from './permissionsDeclaration.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { DEFAULT_SESSION_KEY } from './sessionSlot.js';
@@ -156,6 +161,8 @@ export type { PromptDeliveryLedger, PromptDeliveryRecord } from './promptDeliver
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier } from './supportFloor.js';
+export type { SupportFloor, SupportFloorComponent, EngineVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
 export * from './detachWire.js';
@@ -163,6 +170,7 @@ export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
 export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, } from './pluginHooksWire.js';
+export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';

package/dist/index.js

@@ -26,6 +26,7 @@ export * from './executionLaneCapability.js';
 export * from './approvalsStreamLiveCapability.js';
 export * from './peerLaneCapability.js';
 export * from './permissionRulesWriteCapability.js';
+export * from './permissionsAllowGrantCapability.js';
 export * from './sessionPolicyCapability.js';
 export * from './memoryComplianceCapability.js';
 export * from './memoryOriginCapability.js';
@@ -82,6 +83,7 @@ export * from './oneShotWireCaps.js';
 export * from './rewindWireCaps.js';
 export * from './rewindArchiveCapability.js';
 export * from './fileHistoryCaptureCapability.js';
+export { FILE_HISTORY_LEG_VERDICTS, fileHistoryLegNoticeVerdict, fileHistoryLegNoticeSentence, fileHistoryDeclarationOfBody, createFileHistoryDeclarationLedger, } from './fileHistoryLegNotice.js';
 export * from './sealedKeyCapability.js';
 export * from './storePostureCapability.js';
 export * from './centerWiringCapability.js';
@@ -104,6 +106,7 @@ export * from './adapter/runStream.js';
 export * from './adapter/activeRunSelfHeal.js';
 export * from './request/taskRequest.js';
 export { disableSkillsDeclaration } from './disableSkillsWire.js';
+export { permissionsDeclaration } from './permissionsDeclaration.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { DEFAULT_SESSION_KEY } from './sessionSlot.js';
@@ -141,6 +144,7 @@ export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredP
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
 export * from './detachWire.js';
@@ -148,6 +152,7 @@ export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
 export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, } from './pluginHooksWire.js';
+export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';

package/dist/permissionsAllowGrantCapability.d.ts

@@ -0,0 +1,17 @@
+export type PermissionsAllowGrantReading = {
+    kind: 'unobserved';
+} | {
+    kind: 'not_reported';
+} | {
+    kind: 'present';
+    grants: boolean;
+};
+export declare function projectPermissionsAllowGrantCapability(caps: unknown): PermissionsAllowGrantReading | undefined;
+export declare function noteEngineCapsForPermissionsAllowGrant(baseUrl: string, caps: unknown, opts?: {
+    generation?: number;
+}): void;
+export declare function observedPermissionsAllowGrant(baseUrl?: string | undefined): PermissionsAllowGrantReading;
+export declare function permissionsAllowGrantAvailable(reading: PermissionsAllowGrantReading): boolean;
+export declare function permissionsAllowGrantDoctorDetail(reading: PermissionsAllowGrantReading): string;
+export declare function forgetPermissionsAllowGrantReading(baseUrl: string | undefined): void;
+export declare function __resetPermissionsAllowGrantReadingsForTests(): void;

package/dist/permissionsAllowGrantCapability.js

@@ -0,0 +1,75 @@
+import { engineWireTarget } from './engineWireTarget.js';
+import { createEngineCapReader } from './engineCapReader.js';
+const ALLOW_GRANT_CAP_PATH = ['settings', 'permissions', 'allowGrant'];
+export function projectPermissionsAllowGrantCapability(caps) {
+    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+        return undefined;
+    let node = caps;
+    for (let i = 0; i < ALLOW_GRANT_CAP_PATH.length; i++) {
+        const seg = ALLOW_GRANT_CAP_PATH[i];
+        if (!Object.hasOwn(node, seg))
+            return { kind: 'not_reported' };
+        const v = node[seg];
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        if (i === ALLOW_GRANT_CAP_PATH.length - 1) {
+            return typeof v === 'boolean' ? { kind: 'present', grants: v } : undefined;
+        }
+        if (v === null || typeof v !== 'object' || Array.isArray(v))
+            return undefined;
+        node = v;
+    }
+    return undefined;
+}
+const reader = createEngineCapReader({
+    name: ALLOW_GRANT_CAP_PATH.join('.'),
+    project: projectPermissionsAllowGrantCapability,
+    makeUnobserved: () => ({ kind: 'unobserved' }),
+});
+export function noteEngineCapsForPermissionsAllowGrant(baseUrl, caps, opts) {
+    reader.note(baseUrl, caps, opts);
+}
+export function observedPermissionsAllowGrant(baseUrl = engineWireTarget()?.baseUrl) {
+    return reader.observed(baseUrl);
+}
+export function permissionsAllowGrantAvailable(reading) {
+    try {
+        if (reading === null || typeof reading !== 'object' || Array.isArray(reading))
+            return false;
+        if (!Object.hasOwn(reading, 'kind') || !Object.hasOwn(reading, 'grants'))
+            return false;
+        return reading.kind === 'present' && reading.grants === true;
+    }
+    catch {
+        return false;
+    }
+}
+function ownReadingField(reading, key) {
+    try {
+        if (reading === null || typeof reading !== 'object' || Array.isArray(reading))
+            return undefined;
+        return Object.hasOwn(reading, key) ? reading[key] : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function permissionsAllowGrantDoctorDetail(reading) {
+    if (permissionsAllowGrantAvailable(reading)) {
+        return 'allow rules sent to the engine — it reads them as rules, not as an exclusive list: a matching call counts as answered for, and the engine still raises its own prompts where it requires them';
+    }
+    const kind = ownReadingField(reading, 'kind');
+    if (kind === 'present' && ownReadingField(reading, 'grants') === false) {
+        return 'allow rules kept on this side — this engine says it does not read allow rules as rules of that kind, so they are not sent and matching approvals are still answered here';
+    }
+    if (kind === 'not_reported') {
+        return 'allow rules kept on this side — this engine does not say how it reads allow rules; sending them to an engine that reads them as an exclusive list would block every tool not on it, so they are not sent and matching approvals are still answered here';
+    }
+    return 'allow rules kept on this side — no usable capabilities reading is cached for this engine (none received, or the last one was unreadable), so allow rules are not sent and matching approvals are still answered here';
+}
+export function forgetPermissionsAllowGrantReading(baseUrl) {
+    reader.forget(baseUrl);
+}
+export function __resetPermissionsAllowGrantReadingsForTests() {
+    reader.__resetForTests();
+}

package/dist/permissionsDeclaration.d.ts

@@ -0,0 +1,25 @@
+import { type PermissionsAllowGrantReading } from './permissionsAllowGrantCapability.js';
+declare const RULE_TRUST_ORDER: readonly ["policySettings", "cliArg", "flagSettings", "session", "userSettings", "localSettings", "projectSettings"];
+export type WireRuleOrigin = (typeof RULE_TRUST_ORDER)[number];
+export interface WireRuleOrigins {
+    readonly deny?: ReadonlyMap<string, WireRuleOrigin>;
+    readonly ask?: ReadonlyMap<string, WireRuleOrigin>;
+    readonly allow?: ReadonlyMap<string, WireRuleOrigin>;
+}
+export interface PermissionsDeclarationInput {
+    readonly deny: readonly string[];
+    readonly ask: readonly string[];
+    readonly allow: readonly string[];
+    readonly origins?: WireRuleOrigins;
+    readonly cliDeny?: readonly string[];
+}
+export interface PermissionsDeclarationBuckets {
+    deny?: string[];
+    ask?: string[];
+    allow?: string[];
+}
+export interface PermissionsDeclaration {
+    permissions?: PermissionsDeclarationBuckets;
+}
+export declare function permissionsDeclaration(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclaration;
+export {};

package/dist/permissionsDeclaration.js

@@ -0,0 +1,227 @@
+import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf, validatePermissionRules } from './coreValuePorts.js';
+import { permissionsAllowGrantAvailable } from './permissionsAllowGrantCapability.js';
+const RULE_TRUST_ORDER = [
+    'policySettings',
+    'cliArg',
+    'flagSettings',
+    'session',
+    'userSettings',
+    'localSettings',
+    'projectSettings',
+];
+function normalizeLegacyToolName(name) {
+    switch (name) {
+        case 'Task':
+            return 'Agent';
+        case 'KillShell':
+            return 'TaskStop';
+        case 'AgentOutputTool':
+        case 'BashOutputTool':
+            return 'TaskOutput';
+        default:
+            return name;
+    }
+}
+function unescapedIndex(str, char, fromEnd) {
+    for (let k = 0; k < str.length; k++) {
+        const i = fromEnd ? str.length - 1 - k : k;
+        if (str[i] !== char)
+            continue;
+        let backslashes = 0;
+        for (let j = i - 1; j >= 0 && str[j] === '\\'; j--)
+            backslashes++;
+        if (backslashes % 2 === 0)
+            return i;
+    }
+    return -1;
+}
+function unescapeRuleContent(content) {
+    return content.replace(/\\\(/g, '(').replace(/\\\)/g, ')').replace(/\\\\/g, '\\');
+}
+function parseRule(rule) {
+    const open = unescapedIndex(rule, '(', false);
+    if (open === -1)
+        return { toolName: normalizeLegacyToolName(rule) };
+    const close = unescapedIndex(rule, ')', true);
+    if (close === -1 || close <= open || close !== rule.length - 1)
+        return { toolName: normalizeLegacyToolName(rule) };
+    const toolName = rule.substring(0, open);
+    const rawContent = rule.substring(open + 1, close);
+    if (!toolName)
+        return { toolName: normalizeLegacyToolName(rule) };
+    if (rawContent === '' || rawContent === '*')
+        return { toolName: normalizeLegacyToolName(toolName) };
+    return { toolName: normalizeLegacyToolName(toolName), ruleContent: unescapeRuleContent(rawContent) };
+}
+function requireRulePorts() {
+    const required = ['MCP_NAMESPACE', 'RETIRED_TOOL_NAMES', 'protocolOf', 'ruleToolGrammarOf', 'validatePermissionRules'];
+    const missing = required.filter((p) => !hasCoreValuePort(p));
+    if (missing.length === 0)
+        return;
+    throw new Error(`permissionsDeclaration: 规则判据端口缺席(${missing.join(' / ')})—— 先用 installCoreValuePorts 装上 core 的同名实现。` +
+        '缺席不等于全部合格:不判就发会让整份请求被引擎拒收,不判就删会静默丢掉 deny 规则,所以这里拒绝装配。');
+}
+function engineWireSafe(name) {
+    if (name.includes('('))
+        return false;
+    if (retiredToolNames().has(name))
+        return false;
+    const ns = protocolOf(name);
+    if (ns === undefined)
+        return !name.includes('__');
+    return ns.parse(name) !== undefined;
+}
+function wholeServerRuleName(name) {
+    const read = name.trim();
+    const ns = protocolOf(read);
+    if (ns === undefined || !read.startsWith(ns.prefix))
+        return name;
+    const peer = read.slice(ns.prefix.length);
+    return peer !== '' && !peer.includes('__') && !peer.endsWith('_') ? `${read}__*` : name;
+}
+const RULE_ROOT = '/';
+function compileVerdict(rule, behavior) {
+    try {
+        const issues = validatePermissionRules([{ rule, behavior }], { pathBases: { root: RULE_ROOT } });
+        if (!Array.isArray(issues))
+            return 'unknown';
+        return issues.length === 0 ? 'compiles' : 'refused';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function wireSubset(rules, behavior) {
+    const out = new Set();
+    let portsChecked = false;
+    for (const rule of rules) {
+        if (typeof rule !== 'string' || rule === '')
+            continue;
+        if (!portsChecked) {
+            requireRulePorts();
+            portsChecked = true;
+        }
+        const parsed = parseRule(rule);
+        if (parsed.ruleContent === undefined) {
+            const name = wholeServerRuleName(parsed.toolName);
+            if (!engineWireSafe(name))
+                continue;
+            if (out.has(name))
+                continue;
+            const verdict = compileVerdict(name, behavior);
+            if (verdict === 'refused' || (verdict === 'unknown' && behavior === 'allow'))
+                continue;
+            out.add(name);
+            continue;
+        }
+        if (!engineWireSafe(parsed.toolName))
+            continue;
+        if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))
+            continue;
+        const verdict = compileVerdict(rule, behavior);
+        if (verdict === 'compiles' || (verdict === 'unknown' && behavior !== 'allow'))
+            out.add(rule);
+    }
+    return [...out];
+}
+function projectBucketByTrust(raw, behavior, originOf, cliRules) {
+    const present = new Set(raw);
+    const groups = RULE_TRUST_ORDER.map(() => []);
+    const rankOf = (origin) => RULE_TRUST_ORDER.indexOf(origin);
+    if (originOf !== undefined) {
+        for (const [r, origin] of originOf) {
+            const rank = rankOf(origin);
+            if (rank >= 0 && typeof r === 'string' && present.has(r))
+                groups[rank].push(r);
+        }
+    }
+    const unknownOrigin = [...present].filter((r) => originOf === undefined || rankOf(originOf.get(r)) < 0);
+    const out = new Set();
+    const append = (list) => {
+        for (const r of list)
+            out.add(r);
+    };
+    RULE_TRUST_ORDER.forEach((origin, rank) => {
+        if (origin === 'cliArg')
+            append(cliRules);
+        append(wireSubset(groups[rank], behavior));
+    });
+    append(wireSubset(unknownOrigin, behavior));
+    return [...out];
+}
+const WHO = 'permissionsDeclaration';
+function ownField(obj, key, where) {
+    if (Object.hasOwn(obj, key))
+        return obj[key];
+    if (key in obj)
+        throw new TypeError(`${WHO}: ${where}${key} 只在原型链上,不是自有字段 —— 拒绝读取(请交普通对象)。`);
+    return undefined;
+}
+function ruleList(v, key) {
+    if (v === undefined || v === null)
+        return undefined;
+    if (!Array.isArray(v))
+        throw new TypeError(`${WHO}: ${key} 必须是规则串数组或缺席 —— 收到 typeof=${typeof v}。`);
+    const out = [];
+    const n = v.length;
+    for (let i = 0; i < n; i++) {
+        if (!Object.hasOwn(v, i)) {
+            if (i in v)
+                throw new TypeError(`${WHO}: ${key}[${i}] 是空洞,而原型链上在这个下标有值 —— 拒绝读取(请交不带空洞的普通数组)。`);
+            continue;
+        }
+        const r = v[i];
+        if (typeof r === 'string')
+            out.push(r);
+    }
+    return out;
+}
+function originMap(v, key) {
+    if (v === undefined || v === null)
+        return undefined;
+    const ok = typeof v === 'object' &&
+        typeof v.get === 'function' &&
+        typeof v[Symbol.iterator] === 'function';
+    if (!ok)
+        throw new TypeError(`${WHO}: origins.${key} 必须是 Map(规则原串 → 来源)或缺席 —— 收到 typeof=${typeof v}。`);
+    const snap = new Map();
+    for (const entry of v) {
+        const [r, origin] = entry;
+        if (!snap.has(r))
+            snap.set(r, origin);
+    }
+    return snap;
+}
+export function permissionsDeclaration(input, caps) {
+    if (input === null || typeof input !== 'object' || Array.isArray(input)) {
+        throw new TypeError(`${WHO}: 入参必须是对象 —— 收到 ${input === null ? 'null' : Array.isArray(input) ? 'array' : `typeof=${typeof input}`}。`);
+    }
+    const deny = ruleList(ownField(input, 'deny', ''), 'deny');
+    const ask = ruleList(ownField(input, 'ask', ''), 'ask');
+    const allow = ruleList(ownField(input, 'allow', ''), 'allow');
+    const cliDeny = ruleList(ownField(input, 'cliDeny', ''), 'cliDeny');
+    const originsRaw = ownField(input, 'origins', '');
+    let origins = {};
+    if (originsRaw !== undefined && originsRaw !== null) {
+        if (typeof originsRaw !== 'object' || Array.isArray(originsRaw)) {
+            throw new TypeError(`${WHO}: origins 必须是 { deny?, ask?, allow? } 对象或缺席 —— 收到 typeof=${typeof originsRaw}。`);
+        }
+        const od = originMap(ownField(originsRaw, 'deny', 'origins.'), 'deny');
+        const oa = originMap(ownField(originsRaw, 'ask', 'origins.'), 'ask');
+        const ol = originMap(ownField(originsRaw, 'allow', 'origins.'), 'allow');
+        origins = { ...(od ? { deny: od } : {}), ...(oa ? { ask: oa } : {}), ...(ol ? { allow: ol } : {}) };
+    }
+    const allowOn = permissionsAllowGrantAvailable(caps);
+    const cliDenyWire = cliDeny === undefined ? [] : wireSubset(cliDeny, 'deny');
+    const denyOut = projectBucketByTrust(deny ?? [], 'deny', origins.deny, cliDenyWire);
+    const askOut = projectBucketByTrust(ask ?? [], 'ask', origins.ask, []);
+    const allowOut = allowOn && allow !== undefined ? projectBucketByTrust(allow, 'allow', origins.allow, []) : [];
+    const permissions = {};
+    if (denyOut.length > 0)
+        permissions.deny = denyOut;
+    if (askOut.length > 0)
+        permissions.ask = askOut;
+    if (allowOut.length > 0)
+        permissions.allow = allowOut;
+    return Object.keys(permissions).length > 0 ? { permissions } : {};
+}

package/dist/promptDelivery.d.ts

@@ -14,7 +14,10 @@ export interface PromptDeliveryLedger {
     batchOf(uuid: string): readonly string[] | undefined;
     toRecords(): readonly PromptDeliveryRecord[];
     fromRecords(records: readonly PromptDeliveryRecord[]): readonly PromptDeliveryRecord[];
+    knownUndeliveredMessage(message: object | null | undefined): boolean;
+    withoutUndelivered<T>(messages: readonly T[]): T[];
 }
+export declare function frameProvesDelivery(event: object | null | undefined): boolean;
 export declare function createPromptDeliveryLedger(): PromptDeliveryLedger;
-export declare function promptKnownUndelivered(ledger: PromptDeliveryLedger, message: object | null | undefined): boolean;
-export declare function withoutUndeliveredPrompts<T>(ledger: PromptDeliveryLedger, messages: readonly T[]): T[];
+export declare function promptKnownUndelivered(ledger: Pick<PromptDeliveryLedger, 'knownUndelivered'>, message: object | null | undefined): boolean;
+export declare function withoutUndeliveredPrompts<T>(ledger: Pick<PromptDeliveryLedger, 'knownUndelivered'>, messages: readonly T[]): T[];

package/dist/promptDelivery.js

@@ -32,10 +32,12 @@ function readRecord(rec) {
     }
 }
 const PRE_RUN_FRAME_TYPES = new Set(['meta', 'approval_request', 'approval_revoke']);
-function frameProvesDelivery(event) {
-    if (typeof event !== 'object' || event === null || Array.isArray(event))
+export function frameProvesDelivery(event) {
+    if (typeof event !== 'object' || event === null)
         return false;
     try {
+        if (Array.isArray(event))
+            return false;
         const type = event.type;
         if (typeof type !== 'string' || type.length === 0 || PRE_RUN_FRAME_TYPES.has(type))
             return false;
@@ -83,7 +85,7 @@ export function createPromptDeliveryLedger() {
             add(u, 'd', added);
         return Object.freeze(added);
     };
-    return Object.freeze({
+    const ledger = Object.freeze({
         attempted(batchUuids) {
             const batch = Object.freeze(cleanBatch(batchUuids));
             const added = [];
@@ -122,7 +124,10 @@ export function createPromptDeliveryLedger() {
             }
             return Object.freeze(added);
         },
+        knownUndeliveredMessage: (message) => promptKnownUndelivered(ledger, message),
+        withoutUndelivered: (messages) => withoutUndeliveredPrompts(ledger, messages),
     });
+    return ledger;
 }
 function uuidOfMessage(m) {
     if (typeof m !== 'object' || m === null)

package/dist/providerRejection.d.ts

@@ -1,6 +1,7 @@
 import { type RunTerminalFailureDetail } from './runTerminal.js';
+import { type ToolHistoryErrorCarrier } from './toolHistoryMismatch.js';
 export interface ProviderRejectionResend {
     resend: 'edit_and_resend' | 'not_by_editing';
     text: string;
 }
-export declare function providerRejectionResend(detail: RunTerminalFailureDetail | null | undefined): ProviderRejectionResend | undefined;
+export declare function providerRejectionResend(detail: RunTerminalFailureDetail | null | undefined, carrier?: ToolHistoryErrorCarrier | null): ProviderRejectionResend | undefined;

package/dist/providerRejection.js

@@ -1,4 +1,5 @@
 import { readRunTerminal } from './runTerminal.js';
+import { classifyToolHistoryMismatch } from './toolHistoryMismatch.js';
 const PROVIDER_STATUS_TIERS = Object.freeze([
     Object.freeze([400, 400, 'invalid_request']),
     Object.freeze([401, 401, 'authentication_failed']),
@@ -24,8 +25,11 @@ const NOT_BY_EDITING_TAIL = new Map([
     ['server_error', ': the provider reported an internal error — try again later.'],
     [UNTIERED, ' for a reason that editing it will not fix — check the provider account or try again later.'],
 ]);
+function toolHistoryMismatchCarrier(carrier) {
+    return carrier !== undefined && carrier !== null && classifyToolHistoryMismatch(carrier) !== null;
+}
 const PROVIDER_REJECTED = 'provider_rejected';
-export function providerRejectionResend(detail) {
+export function providerRejectionResend(detail, carrier) {
     let read;
     try {
         const r = readRunTerminal({ terminal: { kind: 'failed', detail } });
@@ -39,6 +43,8 @@ export function providerRejectionResend(detail) {
     const status = Object.hasOwn(read, 'status') ? read.status : undefined;
     if (status === undefined)
         return undefined;
+    if (toolHistoryMismatchCarrier(carrier))
+        return undefined;
     const tier = providerStatusTier(status);
     return tier === EDITABLE_TIER
         ? {

package/dist/request/taskRequest.js

@@ -1,4 +1,6 @@
 import { refuseBadDisableSkills, refuseDisableSkillsConflict } from '../disableSkillsWire.js';
+import { ATTACHMENTS_SPEC_KEYS, AttachmentsSpecRefused } from '../attachmentsWireCaps.js';
+import { retiredAttachmentsKeyWhy } from '../taskRequestWords.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
     { field: 'sessionId', lanes: ['interactive', 'print', 'utility'], live: false, why: '单命名空间(TP-A Step 2):壳 id 即引擎 session id;print 在非 live 下保留 mock 常量', whyUtilityLane: '恒座:side-channel 提交走**独立**会话 id(壳另铸一个,绝不复用用户会话那一个 —— 复用会把这次提交的转录混进用户会话)' },
@@ -451,6 +453,29 @@ const refuseBadMemoryOff = (v) => {
         '`"on"`,`{ enabled: false }` 对象形也不是 wire 拼法)且对坏拼写**响亮拒**(server 400 `request.field_invalid`)。' +
         '本层若静默删键,这一次运行会照常挂上记忆面而声明人不会知道 —— 与 memoryCapture 同一条纪律。错误文本只报形状,不回显值。');
 };
+const withoutRetiredAttachmentsKeys = (v) => {
+    if (typeof v !== 'object' || v === null)
+        return v;
+    let drop;
+    for (const key of Object.keys(v)) {
+        const why = retiredAttachmentsKeyWhy(key, 'key');
+        if (why === undefined)
+            continue;
+        const d = Object.getOwnPropertyDescriptor(v, key);
+        if (d !== undefined && Object.prototype.hasOwnProperty.call(d, 'value') && d.value === undefined) {
+            ;
+            (drop ??= []).push(key);
+            continue;
+        }
+        throw new AttachmentsSpecRefused(`buildTaskRequest: refusing attachments key ${JSON.stringify(key)} — ${why}`, { token: key, why, allowed: ATTACHMENTS_SPEC_KEYS, key });
+    }
+    if (drop === undefined)
+        return v;
+    const copy = { ...v };
+    for (const key of drop)
+        delete copy[key];
+    return copy;
+};
 const refuseBadExcludeAllTools = (v) => {
     if (v === undefined || v === null || v === true || v === false)
         return;
@@ -784,6 +809,7 @@ export function assembleTaskRequest(input, lane) {
         ...(onSetting('hooks') ? { hooks: s.hooks } : {}),
         ...(s.outputStyle !== undefined ? { outputStyle: s.outputStyle } : {}),
     };
+    const attachmentsForWire = on('attachments') ? withoutRetiredAttachmentsKeys(i.attachments) : undefined;
     const out = {
         objective: i.objective,
         sessionId: i.sessionId,
@@ -802,7 +828,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('retainBackgroundProcesses') ? { retainBackgroundProcesses: i.retainBackgroundProcesses } : {}),
         ...(on('promptProfile') ? { promptProfile: i.promptProfile } : {}),
         ...(on('enableFork') ? { enableFork: i.enableFork } : {}),
-        ...(on('attachments') ? { attachments: i.attachments } : {}),
+        ...(on('attachments') ? { attachments: attachmentsForWire } : {}),
         ...(on('repo') ? { repo: i.repo } : {}),
         ...(on('council') ? { council: true } : {}),
         ...(on('debate') ? { debate: true } : {}),

package/dist/sdkRegistryTransit.d.ts

@@ -2,5 +2,6 @@ export { RegistryClient } from '@sema-agent/sdk/registry';
 export { getMeConfig, getScopeConfigDraft, getEffective } from '@sema-agent/sdk/registry';
 export { probeRegistryHealth, postFeedback } from '@sema-agent/sdk/registry';
 export { REGISTRY_AUTH_PATHS, skillContentAddress } from '@sema-agent/sdk/registry';
+export { requestDeviceCode, pollUntilApproved, refreshTokens, listScopes, switchScope } from '@sema-agent/sdk/registry';
 export { RegistryApiError, OAuthFlowError } from '@sema-agent/sdk/registry';
 export type { RegistryTokens, TokenProvider, } from '@sema-agent/sdk/registry';

package/dist/sdkRegistryTransit.js

@@ -2,4 +2,5 @@ export { RegistryClient } from '@sema-agent/sdk/registry';
 export { getMeConfig, getScopeConfigDraft, getEffective } from '@sema-agent/sdk/registry';
 export { probeRegistryHealth, postFeedback } from '@sema-agent/sdk/registry';
 export { REGISTRY_AUTH_PATHS, skillContentAddress } from '@sema-agent/sdk/registry';
+export { requestDeviceCode, pollUntilApproved, refreshTokens, listScopes, switchScope } from '@sema-agent/sdk/registry';
 export { RegistryApiError, OAuthFlowError } from '@sema-agent/sdk/registry';

package/dist/supportFloor.d.ts

@@ -0,0 +1,10 @@
+export type SupportFloorComponent = 'server' | 'core' | 'sdk';
+export interface SupportFloor {
+    readonly server: string;
+    readonly core: string;
+    readonly sdk: string;
+}
+export declare const SUPPORT_FLOOR: Readonly<SupportFloor>;
+export declare function supportFloorOf(component: unknown): string | undefined;
+export type EngineVersionTier = 'engine' | 'legacy' | 'unknown';
+export declare function engineVersionTier(version: unknown, floor?: string): EngineVersionTier;