@sema-agent/client-core 0.91.0 → 0.92.0

package/dist/hitl/toolApprovalWire.js

@@ -2,11 +2,12 @@ import { APPROVAL_CARD_PORT_KEY_MISMATCH_REASON, DEFAULT_DENY_REASON, DecideTran
 import { askParkRowArm } from './askParkRowRouting.js';
 import { hostLog } from '../host.js';
 import { readOwnNonEmptyString } from '../ownKey.js';
+import { readAskClassPair } from './askClassPair.js';
+import { legacyShadowedRuleTextOf, readAllowRuleShadowFromWire } from './allowRuleShadow.js';
 import { createSessionSlot, DEFAULT_SESSION_KEY } from '../sessionSlot.js';
 import { readEngineActiveBgTasks } from '../fleet/fleetLedger.js';
 import { observeCancelByDeny, surfaceRememberNotApplied, surfaceEditNotForwarded, surfaceEditRefusedOnBlindAsk, surfaceRuleArmNotSent, surfaceRuleArmRejected } from './hitlHostSurface.js';
 import { approvalCallKey, liveFrameCallKey } from './gateIdentity.js';
-import { isRuleStoreUnreadableKind } from '../gateVocabulary.js';
 import { isApprovalMandateWord } from '../gateVocabulary.js';
 import { denyAttributionRefusalFromError } from '../wireRefusalCopy.js';
 import { decideFailureNote } from '../decideFailureNote.js';
@@ -192,9 +193,8 @@ export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signa
     const ruleOffersReadOnly = readRuleOfferSupply(pending.ruleOffers, pending.ruleSuggestions);
     const durableProbeCause = pending.riskDescriptor?.probeCause;
     const durableProbeReason = readProbeReason(pending.riskDescriptor);
-    const durableShadowedRule = pending.riskDescriptor?.shadowedRule;
+    const durableShadow = readAllowRuleShadowFromWire(pending, 'row');
     const durableRuleOffersAbsence = pending.ruleOffersAbsence;
-    const durableRuleStoreUnreadable = readRuleStoreUnreadable(pending.ruleStoreUnreadable);
     deps.onPresented?.();
     const card = await surfaceApprovalCard({
         toolName,
@@ -218,12 +218,9 @@ export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signa
         ...(ruleOffersReadOnly !== undefined ? { ruleOffersReadOnly } : {}),
         ...(isWireRecordCarrier(durableProbeCause) ? { probeCause: durableProbeCause } : {}),
         ...(durableProbeReason !== undefined ? { probeReason: durableProbeReason } : {}),
-        ...(durableRuleStoreUnreadable !== undefined
-            ? { ruleStoreUnreadable: durableRuleStoreUnreadable }
-            : {}),
-        ...(typeof durableShadowedRule === 'string' && durableShadowedRule.trim() !== ''
-            ? { persistedRuleShadowed: durableShadowedRule }
-            : {}),
+        ...(readRememberRefused(pending) ? { rememberRefused: true } : {}),
+        ...(durableShadow !== undefined ? { allowRuleShadow: durableShadow } : {}),
+        ...((t) => (t !== undefined ? { persistedRuleShadowed: t } : {}))(legacyShadowedRuleTextOf(durableShadow)),
         ...(typeof durableRuleOffersAbsence === 'string' && durableRuleOffersAbsence !== ''
             ? { ruleOffersAbsence: durableRuleOffersAbsence }
             : {}),
@@ -399,8 +396,10 @@ export const TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
     'inputHasBidi',
     'parked',
     'persistedRuleShadowed',
+    'allowRuleShadowed',
     'probeCause',
     'probeReason',
+    'rememberRefused',
     'ruleEvidence',
     'requiresRealApproval',
     'expiresInMs',
@@ -445,30 +444,6 @@ export function toolPermissionRequestAskBits(card) {
         ...(askClassPair ?? {}),
     };
 }
-function readAskClassPair(v) {
-    if (typeof v !== 'object' || v === null)
-        return undefined;
-    const askClass = readOwnNonEmptyString(v, 'askClass');
-    if (askClass === undefined || !Object.hasOwn(v, 'classes'))
-        return undefined;
-    const raw = v.classes;
-    if (!Array.isArray(raw) || raw.length === 0)
-        return undefined;
-    const classes = [];
-    const seen = new Set();
-    for (let i = 0; i < raw.length; i++) {
-        if (!Object.hasOwn(raw, i))
-            return undefined;
-        const c = raw[i];
-        if (typeof c !== 'string' || c === '' || seen.has(c))
-            return undefined;
-        seen.add(c);
-        classes.push(c);
-    }
-    if (classes[0] !== askClass)
-        return undefined;
-    return { askClass, classes: Object.freeze(classes) };
-}
 function hasOwnStrictTrue(v, key) {
     return Object.hasOwn(v, key) && v[key] === true;
 }
@@ -663,6 +638,14 @@ function readProbeReason(v) {
         return undefined;
     }
 }
+function readRememberRefused(v) {
+    try {
+        return typeof v === 'object' && v !== null && Object.hasOwn(v, 'rememberRefused') && v.rememberRefused === true;
+    }
+    catch {
+        return false;
+    }
+}
 function isNonNegativeFinite(v) {
     return typeof v === 'number' && Number.isFinite(v) && v >= 0;
 }
@@ -688,9 +671,6 @@ export function readDenialLimitFallback(v) {
         autoDenyAfterMs: d.autoDenyAfterMs,
     };
 }
-function readRuleStoreUnreadable(v) {
-    return isRuleStoreUnreadableKind(v) ? v : undefined;
-}
 function isRuleOfferMatch(v) {
     return typeof v === 'string' && RULE_OFFER_MATCHES.includes(v);
 }
@@ -876,6 +856,7 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
     const argsNotRealInput = argsFallback || lane?.argsUnavailable === true;
     const ruleOffers = readRuleOfferSupply(frame.ruleOffers, frame.ruleSuggestions);
     const denialLimitFallback = readDenialLimitFallback(frame.denialLimitFallback);
+    const frameShadow = readAllowRuleShadowFromWire(frame, 'frame');
     const card = await surfaceApprovalCard({
         toolName,
         args: args,
@@ -902,11 +883,11 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
             ? { delegation: frame.delegation }
             : {}),
         ...(ruleOffers !== undefined ? { ruleOffers } : {}),
-        ...(typeof frame.persistedRuleShadowed === 'string' && frame.persistedRuleShadowed.trim() !== ''
-            ? { persistedRuleShadowed: frame.persistedRuleShadowed }
-            : {}),
+        ...((sh) => (sh !== undefined ? { allowRuleShadow: sh } : {}))(frameShadow),
+        ...((t) => (t !== undefined ? { persistedRuleShadowed: t } : {}))(legacyShadowedRuleTextOf(frameShadow)),
         ...(isWireRecordCarrier(frame.probeCause) ? { probeCause: frame.probeCause } : {}),
         ...((r) => (r !== undefined ? { probeReason: r } : {}))(readProbeReason(frame)),
+        ...(readRememberRefused(frame) ? { rememberRefused: true } : {}),
         ...(isWireRecordCarrier(frame.ruleEvidence) ? { ruleEvidence: frame.ruleEvidence } : {}),
         ...(frame.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
         ...(hasOwnStrictTrue(frame, 'mandated') ? { mandated: true } : {}),
@@ -917,7 +898,6 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
             ? { ruleOffersAbsence: frame.ruleOffersAbsence }
             : {}),
         ...(denialLimitFallback !== undefined ? { denialLimitFallback } : {}),
-        ...((k) => (k !== undefined ? { ruleStoreUnreadable: k } : {}))(readRuleStoreUnreadable(frame.ruleStoreUnreadable)),
         ...((o) => (o !== undefined ? { origin: o } : {}))(readOwnNonEmptyString(frame, 'origin')),
         ...(readAskClassPair(frame) ?? {}),
     });

package/dist/hookMatcherVerdict.js

@@ -1,5 +1,6 @@
 import { HOOK_TOOL_ALIASES } from './hookToolAliases.js';
-const TOOL_NAME_MATCHER_EVENTS = new Set(['PreToolUse', 'PostToolUse', 'PostToolUseFailure']);
+import { SETTINGS_TOOL_NAME_MATCHER_EVENTS } from './generated/settingsSchemaTables.js';
+const TOOL_NAME_MATCHER_EVENTS = new Set(SETTINGS_TOOL_NAME_MATCHER_EVENTS);
 const MATCHER_MAX_CHARS = 8192;
 const PATTERN_WORK_BUDGET = 10_000_000;
 const PATTERN_MAX_DEPTH = 32;

package/dist/humanTurn.js

@@ -1,10 +1,9 @@
+import { CORE_MAX_PENDING_STEER_CHARS, CORE_MCP_IMAGE_MAX_BASE64 } from './generated/engineFactTables.js';
 import { mintEnvelopeOf, mintReferenceOf } from './userAttachmentEnvelope.js';
 import { readEncodingShares, readHumanTurnInput } from './humanTurnRead.js';
 const REQUEST_BODY_MAX_BYTES = 8 * 1024 * 1024;
 const IMAGE_SEAT_MAX_COUNT = 20;
-const IMAGE_MAX_BASE64_CHARS_EACH = 6 * 1024 * 1024;
 const IMAGE_SEAT_MAX_BASE64_CHARS_TOTAL = 6 * 1024 * 1024;
-const STEER_MAX_CHARS = 16000;
 const STEER_REMINDER_TAG = /<\s*\/?\s*system-reminder(?:\s[^>]*)?>/i;
 const STEER_CONTROL_CHARS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/;
 function utf8Length(s) {
@@ -46,7 +45,7 @@ function steerRefusal(text) {
         return 'reminder_tag';
     if (STEER_CONTROL_CHARS.test(text))
         return 'control_char';
-    if (text.length > STEER_MAX_CHARS)
+    if (text.length > CORE_MAX_PENDING_STEER_CHARS)
         return 'too_long';
     return undefined;
 }
@@ -148,7 +147,7 @@ function encodeObjective(v) {
     let count = 0;
     let total = 0;
     const seat = (len) => {
-        if (len > IMAGE_MAX_BASE64_CHARS_EACH)
+        if (len > CORE_MCP_IMAGE_MAX_BASE64)
             return 'image_too_large';
         if (count + 1 > IMAGE_SEAT_MAX_COUNT)
             return 'seat_count';

package/dist/index.d.ts

@@ -50,6 +50,11 @@ export * from './mcpPanel.js';
 export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
+export * from './sessionSyncFileHistoryCapability.js';
+export * from './workflowsJournalCapability.js';
+export * from './userInvokedSkillsCapability.js';
+export * from './skillToolListsCapability.js';
+export * from './steerPriorityCapability.js';
 export * from './mcpProbeWire.js';
 export * from './effectiveFacts.js';
 export * from './gateOutcome.js';
@@ -69,14 +74,15 @@ export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntr
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type ControlClientLike, type ControlRouterOptions, type ControlSafetyCode, type ErrCodes, type QueuedCommand, type QueuePriority, type RunsResourceLike, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { readSteerReceipt, type SteerReceiptReading } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
-export type { DelegationCapDisposition, ModelFallbackReason, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -119,7 +125,7 @@ export * from './request/taskRequest.js';
 export { disableSkillsDeclaration, disableSkillsDeclarationSettled } from './disableSkillsWire.js';
 export type { DisableSkillsDeclaration } from './disableSkillsWire.js';
 export { PERMISSIONS_KEPT_REASONS, permissionsDeclaration, permissionsDeclarationReport } from './permissionsDeclaration.js';
-export type { PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
+export type { PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, PermissionsUnreachableRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { abortableSleep } from './abortableSleep.js';
@@ -195,7 +201,7 @@ export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
 export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export type { ClassifierDenyContext, HitlHostSurface, HitlNotice, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
@@ -215,7 +221,11 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
+export { replayedApprovalDisposition } from './hitl/replayedApproval.js';
+export type { ReplayedApprovalDisposition, ReplayPendingBasis } from './hitl/replayedApproval.js';
 export * from './hitl/askSurvivesPosture.js';
+export { automaticAnswerVerdict, type AutomaticAnswerLane, type AutomaticAnswerFacts, type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy, type AutomaticAnswerVerdict, } from './hitl/automaticAnswerVerdict.js';
+export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, type ApprovalAllowRuleShadow, type ApprovalAllowRuleShadowMember, type AllowRuleShadowedWireMember, } from './hitl/allowRuleShadow.js';
 export { projectCrashConverged } from './hitl/crashConverged.js';
 export type { ApprovalsListEnvelope, CrashConvergedOrphanState, CrashConvergedProjection, CrashConvergedRow } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';

package/dist/index.js

@@ -44,6 +44,11 @@ export * from './mcpPanel.js';
 export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
+export * from './sessionSyncFileHistoryCapability.js';
+export * from './workflowsJournalCapability.js';
+export * from './userInvokedSkillsCapability.js';
+export * from './skillToolListsCapability.js';
+export * from './steerPriorityCapability.js';
 export * from './mcpProbeWire.js';
 export * from './effectiveFacts.js';
 export * from './gateOutcome.js';
@@ -61,13 +66,14 @@ export * from './fleetTaskDesc.js';
 export { displayUntrusted, displayUntrustedMarks } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
+export { readSteerReceipt } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -170,7 +176,7 @@ export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
 export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
@@ -189,7 +195,10 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
+export { replayedApprovalDisposition } from './hitl/replayedApproval.js';
 export * from './hitl/askSurvivesPosture.js';
+export { automaticAnswerVerdict, } from './hitl/automaticAnswerVerdict.js';
+export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, } from './hitl/allowRuleShadow.js';
 export { projectCrashConverged } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';
 export * from './interactiveHalt.js';

package/dist/inheritEnvWire.js

@@ -1,5 +1,6 @@
 import { INHERIT_ENV_WORDS, isInheritEnvWord } from './request/taskRequest.js';
 import { settingsPermissionBucketRefusalFromError } from './wireRefusalCopy.js';
+import { engineVersionTier } from './supportFloor.js';
 export const INHERIT_ENV_MIN_SERVER = Object.freeze([7, 106, 0]);
 export function inheritEnvServerSupport(version) {
     const mm = typeof version === 'string' ? /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(version) : null;
@@ -21,11 +22,9 @@ export function inheritEnvDeclaration(word, serverVersion) {
     if (!isInheritEnvWord(word)) {
         throw new TypeError(`inheritEnvDeclaration: inheritEnv 只接受 ${INHERIT_ENV_WORDS.map((w) => `'${w}'`).join(' / ')} 或缺席 —— 收到 ${Array.isArray(word) ? 'typeof=object / array' : `typeof=${typeof word}`}。坏词在版本判定之前就拒:「这一次不发」不许顺手吞掉一个打错字的声明。错误文本只报形状,不回显值。`);
     }
-    const support = inheritEnvServerSupport(serverVersion);
-    if (support === 'supported')
+    if (engineVersionTier(serverVersion) !== 'unknown')
         return Object.freeze({ field: Object.freeze({ inheritEnv: word }) });
-    const cause = support === 'unsupported' ? 'server_too_old' : 'server_version_unknown';
-    return Object.freeze({ field: Object.freeze({}), withheld: Object.freeze({ cause, word }) });
+    return Object.freeze({ field: Object.freeze({}), withheld: Object.freeze({ cause: 'server_version_unknown', word }) });
 }
 const WITHHELD_NOTICES = Object.freeze({
     server_too_old: Object.freeze({

package/dist/mcpLiveness.js

@@ -1,4 +1,5 @@
-export const MCP_LIVENESS_STATES = Object.freeze(['reachable', 'unreachable', 'unknown']);
+import { CORE_MCP_LIVENESS_STATES } from './generated/engineFactTables.js';
+export const MCP_LIVENESS_STATES = CORE_MCP_LIVENESS_STATES;
 void MCP_LIVENESS_STATES;
 void true;
 void true;

package/dist/memoryVerbsWire.d.ts

@@ -19,7 +19,7 @@ export interface MemoryFacade {
         signal?: AbortSignal;
     }): Promise<MemoryOriginClearReceipt>;
 }
-export declare const MEMORY_VERB_REFUSAL_CAUSES: readonly ["face_absent", "client_too_old", "unreadable_request", "store_absent", "operator_only", "unauthorized", "service_token_required", "id_invalid", "request_id_required", "body_shape", "query_invalid", "selector_invalid", "evidence_unavailable", "selector_mismatch", "census_incomplete", "clear_unattributed", "clear_invalid", "clear_not_marked", "clear_challenged", "clear_conflict", "clear_pending"];
+export declare const MEMORY_VERB_REFUSAL_CAUSES: readonly ["face_absent", "client_too_old", "unreadable_request", "store_absent", "operator_only", "operators_unconfigured", "unauthorized", "service_token_required", "id_invalid", "request_id_required", "body_shape", "query_invalid", "selector_invalid", "evidence_unavailable", "selector_mismatch", "census_incomplete", "clear_unattributed", "clear_invalid", "clear_not_marked", "clear_challenged", "clear_conflict", "clear_pending"];
 export type MemoryVerbRefusalCause = (typeof MEMORY_VERB_REFUSAL_CAUSES)[number];
 export declare const MEMORY_VERB_UNKNOWN_WHYS: readonly ["no_verdict", "server_fault", "control_plane_corrupt", "clear_unknown", "clear_failed", "result_unreadable", "unsupported_version", "identity_mismatch", "unclassified"];
 export type MemoryVerbUnknownWhy = (typeof MEMORY_VERB_UNKNOWN_WHYS)[number];

package/dist/memoryVerbsWire.js

@@ -8,6 +8,7 @@ export const MEMORY_VERB_REFUSAL_CAUSES = Object.freeze([
     'unreadable_request',
     'store_absent',
     'operator_only',
+    'operators_unconfigured',
     'unauthorized',
     'service_token_required',
     'id_invalid',
@@ -51,6 +52,8 @@ export function classifyMemoryFailure(e) {
             return refusedBy('unauthorized', message);
         case 'auth.operator_only':
             return refusedBy('operator_only', message);
+        case 'capability.operator_principals_required':
+            return refusedBy('operators_unconfigured', message);
         case 'auth.service_token_required':
             return refusedBy('service_token_required', message);
         case 'capability.memory_engine_required':

package/dist/model/catalog.js

@@ -1,4 +1,5 @@
 import { PROVIDER_PRESETS } from './providerPresets.js';
+import { SETTINGS_MODEL_API_WORDS } from '../generated/settingsSchemaTables.js';
 export const CATALOG_SCHEMA_VERSION_MIN = 1;
 export const CATALOG_SCHEMA_VERSION_MAX = 1;
 export function isSupportedCatalogSchemaVersion(v) {
@@ -15,7 +16,7 @@ function isProviderRow(v) {
         r.id.length > 0 &&
         typeof r.name === 'string' &&
         typeof r.baseUrl === 'string' &&
-        (r.api === 'anthropic-messages' || r.api === 'openai-completions') &&
+        typeof r.api === 'string' && SETTINGS_MODEL_API_WORDS.includes(r.api) &&
         typeof r.authEnv === 'string' &&
         Array.isArray(r.models));
 }

package/dist/model/providerPresets.d.ts

@@ -1,3 +1,5 @@
+import type { SETTINGS_MODEL_API_WORDS } from '../generated/settingsSchemaTables.js';
+export type ModelApiWord = (typeof SETTINGS_MODEL_API_WORDS)[number];
 export type PresetModel = {
     id: string;
     contextWindow: number;
@@ -8,7 +10,7 @@ export type ProviderPreset = {
     id: string;
     name: string;
     baseUrl: string;
-    api: 'anthropic-messages' | 'openai-completions';
+    api: ModelApiWord;
     authEnv: string;
     models: PresetModel[];
     modelViaFamily?: boolean;

package/dist/model/tierVocabulary.d.ts

@@ -1,4 +1,5 @@
-export type Tier = 'ultra' | 'max' | 'pro' | 'flash' | 'lite';
+import { CORE_DEFAULT_TIER_ORDER } from '../generated/engineFactTables.js';
+export type Tier = (typeof CORE_DEFAULT_TIER_ORDER)[number];
 export declare const TIER_ORDER: readonly Tier[];
 export declare const SURFACED_TIERS: readonly Tier[];
 export declare const CC_TIER_ALIASES: Readonly<Record<string, Tier>>;

package/dist/model/tierVocabulary.js

@@ -1,12 +1,7 @@
-export const TIER_ORDER = Object.freeze(['ultra', 'max', 'pro', 'flash', 'lite']);
+import { CORE_CC_MODEL_TIER_ALIASES, CORE_DEFAULT_TIER_ORDER } from '../generated/engineFactTables.js';
+export const TIER_ORDER = CORE_DEFAULT_TIER_ORDER;
 export const SURFACED_TIERS = ['max', 'pro', 'flash', 'lite'];
-export const CC_TIER_ALIASES = {
-    fable: 'max',
-    mythos: 'max',
-    opus: 'pro',
-    sonnet: 'flash',
-    haiku: 'lite',
-};
+export const CC_TIER_ALIASES = CORE_CC_MODEL_TIER_ALIASES;
 export const DEFAULT_TIER = 'pro';
 export const TIER_BLURBS = {
     ultra: 'reserved above max — binds when a stronger model lands',

package/dist/peerFrames.js

@@ -1,5 +1,5 @@
 import { applyDisplayFace, LEGACY_NAME_FACE } from './displayUntrusted.js';
-import { CORE_ENGINE_AUTHORITY_ENVELOPE_TAGS } from './generated/engineFactTables.js';
+import { CORE_ENGINE_AUTHORITY_ENVELOPE_TAGS, CORE_PERMISSION_MODE_CLASSES } from './generated/engineFactTables.js';
 const WIRE_KEY_FROM = 'from';
 const WIRE_KEY_BODY = 'body';
 const WIRE_KEY_KIND = 'kind';
@@ -21,7 +21,7 @@ export const AGENT_MESSAGE_TAG = 'agent-message';
 export const CROSS_SESSION_MESSAGE_TAG = 'cross-session-message';
 export const PEER_FRAME_LANES = Object.freeze(['agent_message', 'cross_session_message', 'cross_session_notice']);
 export const CROSS_SESSION_NOTICE_KINDS = Object.freeze(['delivery_notice', 'idle_notice']);
-export const PEER_MODE_CLASSES = Object.freeze(['bypass', 'prompting']);
+export const PEER_MODE_CLASSES = CORE_PERMISSION_MODE_CLASSES;
 function dataProp(o, key) {
     if (o === null || typeof o !== 'object')
         return undefined;

package/dist/permissionRuleIssue.js

@@ -3,15 +3,15 @@ export const PERMISSION_RULE_ISSUE_CODES = Object.freeze([
     'invalid.empty_tool',
     'invalid.paren',
     'invalid.param_split',
-    'invalid.allow_param_rule',
     'invalid.primary_field',
     'invalid.cap_exceeded',
-    'unsupported.bash_prefix',
+    'unsupported.allow',
+    'invalid.behavior',
     'invalid.command_rule',
+    'invalid.entry_type',
     'unsupported.param_unknown',
     'unsupported.param_non_scalar',
     'unsupported.tool_unknown',
-    'unsupported.file_glob',
     'unsupported.path_base',
     'unsupported.mcp_paren',
     'unsupported.covering_paren',
@@ -22,18 +22,21 @@ const ISSUE_SENTENCES = Object.freeze({
     'invalid.empty_tool': 'this rule is invalid: it names no tool',
     'invalid.paren': 'this rule is invalid: its parentheses do not parse (escape a literal one as \\( or \\))',
     'invalid.param_split': 'this rule is invalid: its parentheses do not hold a parameter rule written name:pattern',
-    'invalid.allow_param_rule': 'this rule is invalid: an allow rule cannot carry a parameter pattern — only bare tool rules auto-allow',
     'invalid.primary_field': "this rule is invalid: it patterns the tool's primary field, which matches the whole trimmed string rather than a prefix",
     'invalid.cap_exceeded': 'this rule set is invalid: it is over one of the deployment caps (rule count, rule length, pattern length, or star count)',
+    'invalid.behavior': 'this rule is invalid: its behavior is neither deny nor ask, so it would never fire',
     'invalid.command_rule': 'this rule is invalid: the command pattern was rejected by the command-rule validator',
-    'unsupported.bash_prefix': 'a standing approval for a command belongs in the persisted-rule store, so this allow rule is not supported here (deny and ask rules with the same shape do compile)',
+    'invalid.entry_type': 'this allow list is invalid: it must be a list of rule strings, and it or one of its entries is not a string',
+    'unsupported.allow': 'an allow rule is not supported in a rule set that only says deny or ask — a standing approval belongs on the allow list instead',
     'unsupported.param_unknown': 'this parameter rule is not supported: the tool carries no such parameter, so it could never match',
     'unsupported.param_non_scalar': 'this parameter rule is not supported: that parameter holds an object or an array, so it could never match',
     'unsupported.tool_unknown': "this rule is not supported on this leg: the resolver it supplied does not know the tool, so the rule's face cannot be checked",
-    'unsupported.file_glob': 'a standing approval by path belongs in the consent store, so this allow rule is not supported here (deny and ask path rules do compile)',
     'unsupported.path_base': 'this path rule is not supported as spelled: it needs a base this policy was not given, so it would reach nothing and is refused rather than compiled',
     'unsupported.mcp_paren': 'a parenthesised parameter rule is not supported on an MCP tool name',
     'unsupported.covering_paren': 'a parenthesised parameter rule is not supported on a covering protocol name — the parameter grammar is keyed by an exact tool name, so no mounted tool could ever bear it',
+    'invalid.allow_param_rule': 'this rule is invalid: an allow rule cannot carry a parameter pattern — only bare tool rules auto-allow',
+    'unsupported.bash_prefix': 'a standing approval for a command belongs in the persisted-rule store, so this allow rule is not supported here (deny and ask rules with the same shape do compile)',
+    'unsupported.file_glob': 'a standing approval by path belongs in the consent store, so this allow rule is not supported here (deny and ask path rules do compile)',
 });
 const PARAM_SPLIT_WITH_COLON = 'this rule is invalid: a parameter rule is written name:pattern, and the name before the colon or the pattern after it is empty';
 const PARAM_SPLIT_NO_COLON = 'this rule is invalid: there is no colon inside the parentheses, so this is not a parameter rule (a parameter rule is written name:pattern)';

package/dist/permissionsDeclaration.d.ts

@@ -22,7 +22,7 @@ export interface PermissionsDeclarationBuckets {
 export interface PermissionsDeclaration {
     permissions?: PermissionsDeclarationBuckets;
 }
-export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate"];
+export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "unminted_protocol_segment", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate"];
 export type PermissionsKeptReason = (typeof PERMISSIONS_KEPT_REASONS)[number];
 export interface PermissionsKeptRule {
     rule: string;
@@ -38,10 +38,16 @@ export interface PermissionsUncheckedRule {
     rule: string;
     bucket: 'deny' | 'ask';
 }
+export interface PermissionsUnreachableRule {
+    rule: string;
+    bucket: 'deny' | 'ask';
+    mintedPrefix?: string;
+}
 export interface PermissionsDeclarationReport extends PermissionsDeclaration {
     kept: PermissionsKeptRule[];
     rewritten: PermissionsRewrittenRule[];
     unchecked: PermissionsUncheckedRule[];
+    unreachable: PermissionsUnreachableRule[];
 }
 export declare function permissionsDeclaration(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclaration;
 export declare function permissionsDeclarationReport(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclarationReport;

package/dist/permissionsDeclaration.js

@@ -1,4 +1,6 @@
-import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf, validatePermissionRules } from './coreValuePorts.js';
+import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
+import { protocolSegmentOf } from './protocolSegment.js';
+import { ruleCompileVerdict } from './ruleCompileVerdict.js';
 import { allowRulesGate } from './permissionsAllowGrantCapability.js';
 const RULE_TRUST_ORDER = [
     'policySettings',
@@ -17,6 +19,7 @@ export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'retired_tool_name',
     'unprefixed_namespaced_name',
     'incomplete_protocol_name',
+    'unminted_protocol_segment',
     'home_relative_path',
     'compile_refused',
     'content_form_not_grantable',
@@ -93,19 +96,14 @@ function wholeServerRuleName(name) {
     const peer = read.slice(ns.prefix.length);
     return peer !== '' && !peer.includes('__') && !peer.endsWith('_') ? `${read}__*` : name;
 }
-const RULE_ROOT = '/';
-function compileVerdict(rule, behavior) {
-    try {
-        const issues = validatePermissionRules([{ rule, behavior }], { pathBases: { root: RULE_ROOT } });
-        if (!Array.isArray(issues))
-            return 'unknown';
-        return issues.length === 0 ? 'compiles' : 'refused';
-    }
-    catch {
-        return 'unknown';
-    }
-}
+const compileVerdict = ruleCompileVerdict;
 const kept = (reason) => ({ sent: false, reason });
+function sentFate(wire, toolName, unchecked) {
+    const segment = protocolSegmentOf(toolName);
+    return segment.kind === 'unminted'
+        ? { sent: true, wire, unchecked, unreachable: segment.minted !== undefined ? { minted: segment.minted } : {} }
+        : { sent: true, wire, unchecked };
+}
 function judgeList(rules, behavior) {
     let portsChecked = false;
     return rules.map((rule) => {
@@ -121,24 +119,31 @@ function judgeList(rules, behavior) {
             const issue = wireIssue(name);
             if (issue !== undefined)
                 return kept(issue);
-            const verdict = compileVerdict(name, behavior);
+            if (behavior === 'allow') {
+                const segment = protocolSegmentOf(name);
+                if (segment.kind === 'unminted')
+                    return kept('unminted_protocol_segment');
+                if (segment.kind === 'unknown')
+                    return kept('judge_failed');
+            }
+            const verdict = compileVerdict(name, behavior === 'ask' ? 'ask' : 'deny');
             if (verdict === 'refused')
                 return kept('compile_refused');
             if (verdict === 'unknown' && behavior === 'allow')
                 return kept('judge_failed');
-            return { sent: true, wire: name, unchecked: verdict === 'unknown' };
+            return behavior === 'allow' ? { sent: true, wire: name, unchecked: false } : sentFate(name, name, verdict === 'unknown');
         }
         const issue = wireIssue(parsed.toolName);
         if (issue !== undefined)
             return kept(issue);
         if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))
             return kept('home_relative_path');
+        if (behavior === 'allow')
+            return kept('content_form_not_grantable');
         const verdict = compileVerdict(rule, behavior);
         if (verdict === 'refused')
-            return kept(behavior === 'allow' ? 'content_form_not_grantable' : 'compile_refused');
-        if (verdict === 'unknown' && behavior === 'allow')
-            return kept('judge_failed');
-        return { sent: true, wire: rule, unchecked: verdict === 'unknown' };
+            return kept('compile_refused');
+        return sentFate(rule, parsed.toolName, verdict === 'unknown');
     });
 }
 function outsideSettingsFiles(origin) {
@@ -275,6 +280,7 @@ function assemble(input, caps) {
     const keptRows = [];
     const rewritten = [];
     const unchecked = [];
+    const unreachable = [];
     const rows = [
         ['deny', [...denySlots, ...cliSlots], denyJ],
         ['ask', askSlots, askJ],
@@ -293,9 +299,12 @@ function assemble(input, caps) {
             const f = (winner.list === 'cliDeny' ? j.fates[denySlots.length + winner.at] : j.fates[winner.at]);
             if (f.sent && f.unchecked && bucket !== 'allow')
                 unchecked.push({ rule: wire, bucket });
+            if (f.sent && f.unreachable !== undefined && bucket !== 'allow') {
+                unreachable.push({ rule: wire, bucket, ...(f.unreachable.minted !== undefined ? { mintedPrefix: f.unreachable.minted } : {}) });
+            }
         }
     }
-    return { buckets, report: { kept: keptRows, rewritten, unchecked } };
+    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable } };
 }
 export function permissionsDeclaration(input, caps) {
     const { buckets } = assemble(input, caps);