@sema-agent/client-core 0.91.0 → 0.93.0

package/dist/humanTurn.js

@@ -1,10 +1,9 @@
+import { CORE_MAX_PENDING_STEER_CHARS, CORE_MCP_IMAGE_MAX_BASE64 } from './generated/engineFactTables.js';
 import { mintEnvelopeOf, mintReferenceOf } from './userAttachmentEnvelope.js';
 import { readEncodingShares, readHumanTurnInput } from './humanTurnRead.js';
 const REQUEST_BODY_MAX_BYTES = 8 * 1024 * 1024;
 const IMAGE_SEAT_MAX_COUNT = 20;
-const IMAGE_MAX_BASE64_CHARS_EACH = 6 * 1024 * 1024;
 const IMAGE_SEAT_MAX_BASE64_CHARS_TOTAL = 6 * 1024 * 1024;
-const STEER_MAX_CHARS = 16000;
 const STEER_REMINDER_TAG = /<\s*\/?\s*system-reminder(?:\s[^>]*)?>/i;
 const STEER_CONTROL_CHARS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/;
 function utf8Length(s) {
@@ -46,7 +45,7 @@ function steerRefusal(text) {
         return 'reminder_tag';
     if (STEER_CONTROL_CHARS.test(text))
         return 'control_char';
-    if (text.length > STEER_MAX_CHARS)
+    if (text.length > CORE_MAX_PENDING_STEER_CHARS)
         return 'too_long';
     return undefined;
 }
@@ -148,7 +147,7 @@ function encodeObjective(v) {
     let count = 0;
     let total = 0;
     const seat = (len) => {
-        if (len > IMAGE_MAX_BASE64_CHARS_EACH)
+        if (len > CORE_MCP_IMAGE_MAX_BASE64)
             return 'image_too_large';
         if (count + 1 > IMAGE_SEAT_MAX_COUNT)
             return 'seat_count';

package/dist/index.d.ts

@@ -50,11 +50,21 @@ export * from './mcpPanel.js';
 export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
+export * from './sessionSyncFileHistoryCapability.js';
+export * from './workflowsJournalCapability.js';
+export * from './userInvokedSkillsCapability.js';
+export * from './skillToolListsCapability.js';
+export * from './steerPriorityCapability.js';
+export * from './permissionModesCapability.js';
+export * from './approvalDecidedByCapability.js';
 export * from './mcpProbeWire.js';
 export * from './effectiveFacts.js';
 export * from './gateOutcome.js';
 export * from './postureKnob.js';
 export * from './engineIdentity.js';
+export { transportFailureScene } from './engineWireFor.js';
+export type { EngineWireNoAnswerKind, TransportFailureChainEnd, TransportFailureLayer, TransportFailureScene, TransportFailureSocket } from './engineWireFor.js';
+export * from './engineConfigDrift.js';
 export * from './gateVocabulary.js';
 export * from './permissionRuleIssue.js';
 export * from './toolRoster.js';
@@ -69,14 +79,15 @@ export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntr
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type ControlClientLike, type ControlRouterOptions, type ControlSafetyCode, type ErrCodes, type QueuedCommand, type QueuePriority, type RunsResourceLike, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { readSteerReceipt, type SteerReceiptReading } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
-export type { DelegationCapDisposition, ModelFallbackReason, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -119,7 +130,7 @@ export * from './request/taskRequest.js';
 export { disableSkillsDeclaration, disableSkillsDeclarationSettled } from './disableSkillsWire.js';
 export type { DisableSkillsDeclaration } from './disableSkillsWire.js';
 export { PERMISSIONS_KEPT_REASONS, permissionsDeclaration, permissionsDeclarationReport } from './permissionsDeclaration.js';
-export type { PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
+export type { PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, PermissionsUnreachableRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { abortableSleep } from './abortableSleep.js';
@@ -171,7 +182,7 @@ export type { AttachmentSeatReading } from './attachmentSeatCapability.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
-export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier } from './supportFloor.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, coreVersionTier } from './supportFloor.js';
 export type { SupportFloor, SupportFloorComponent, EngineVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
@@ -195,7 +206,7 @@ export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
 export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export type { ClassifierDenyContext, HitlHostSurface, HitlNotice, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
@@ -215,7 +226,11 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
+export { replayedApprovalDisposition } from './hitl/replayedApproval.js';
+export type { ReplayedApprovalDisposition, ReplayPendingBasis } from './hitl/replayedApproval.js';
 export * from './hitl/askSurvivesPosture.js';
+export { automaticAnswerVerdict, type AutomaticAnswerLane, type AutomaticAnswerFacts, type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy, type AutomaticAnswerVerdict, } from './hitl/automaticAnswerVerdict.js';
+export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, type ApprovalAllowRuleShadow, type ApprovalAllowRuleShadowMember, type AllowRuleShadowedWireMember, } from './hitl/allowRuleShadow.js';
 export { projectCrashConverged } from './hitl/crashConverged.js';
 export type { ApprovalsListEnvelope, CrashConvergedOrphanState, CrashConvergedProjection, CrashConvergedRow } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';

package/dist/index.js

@@ -44,11 +44,20 @@ export * from './mcpPanel.js';
 export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
+export * from './sessionSyncFileHistoryCapability.js';
+export * from './workflowsJournalCapability.js';
+export * from './userInvokedSkillsCapability.js';
+export * from './skillToolListsCapability.js';
+export * from './steerPriorityCapability.js';
+export * from './permissionModesCapability.js';
+export * from './approvalDecidedByCapability.js';
 export * from './mcpProbeWire.js';
 export * from './effectiveFacts.js';
 export * from './gateOutcome.js';
 export * from './postureKnob.js';
 export * from './engineIdentity.js';
+export { transportFailureScene } from './engineWireFor.js';
+export * from './engineConfigDrift.js';
 export * from './gateVocabulary.js';
 export * from './permissionRuleIssue.js';
 export * from './toolRoster.js';
@@ -61,13 +70,14 @@ export * from './fleetTaskDesc.js';
 export { displayUntrusted, displayUntrustedMarks } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
+export { readSteerReceipt } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, asModelFallbackReason, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -149,7 +159,7 @@ export { noteEngineCapsForAttachmentSeat, observedAttachmentSeat, forgetAttachme
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
-export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier } from './supportFloor.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, coreVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
 export * from './detachWire.js';
@@ -170,7 +180,7 @@ export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
 export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
@@ -189,7 +199,10 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
+export { replayedApprovalDisposition } from './hitl/replayedApproval.js';
 export * from './hitl/askSurvivesPosture.js';
+export { automaticAnswerVerdict, } from './hitl/automaticAnswerVerdict.js';
+export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, } from './hitl/allowRuleShadow.js';
 export { projectCrashConverged } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';
 export * from './interactiveHalt.js';

package/dist/inheritEnvWire.d.ts

@@ -1,8 +1,5 @@
 import { type InheritEnvWord, type TaskRequestLike } from './request/taskRequest.js';
-export declare const INHERIT_ENV_MIN_SERVER: readonly [number, number, number];
-export type InheritEnvServerSupport = 'supported' | 'unsupported' | 'unknown';
-export declare function inheritEnvServerSupport(version: string | undefined): InheritEnvServerSupport;
-export type InheritEnvWithheldCause = 'server_version_unknown' | 'server_too_old';
+export type InheritEnvWithheldCause = 'server_version_unknown';
 export interface InheritEnvWithheld {
     readonly cause: InheritEnvWithheldCause;
     readonly word: InheritEnvWord;

package/dist/inheritEnvWire.js

@@ -1,19 +1,6 @@
 import { INHERIT_ENV_WORDS, isInheritEnvWord } from './request/taskRequest.js';
 import { settingsPermissionBucketRefusalFromError } from './wireRefusalCopy.js';
-export const INHERIT_ENV_MIN_SERVER = Object.freeze([7, 106, 0]);
-export function inheritEnvServerSupport(version) {
-    const mm = typeof version === 'string' ? /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.exec(version) : null;
-    if (!mm)
-        return 'unknown';
-    const got = [Number(mm[1]), Number(mm[2]), Number(mm[3])];
-    for (let i = 0; i < 3; i++) {
-        const g = got[i];
-        const need = INHERIT_ENV_MIN_SERVER[i];
-        if (g !== need)
-            return g > need ? 'supported' : 'unsupported';
-    }
-    return 'supported';
-}
+import { engineVersionTier } from './supportFloor.js';
 const EMPTY_DECLARATION = Object.freeze({ field: Object.freeze({}) });
 export function inheritEnvDeclaration(word, serverVersion) {
     if (word === undefined || word === null)
@@ -21,17 +8,11 @@ export function inheritEnvDeclaration(word, serverVersion) {
     if (!isInheritEnvWord(word)) {
         throw new TypeError(`inheritEnvDeclaration: inheritEnv 只接受 ${INHERIT_ENV_WORDS.map((w) => `'${w}'`).join(' / ')} 或缺席 —— 收到 ${Array.isArray(word) ? 'typeof=object / array' : `typeof=${typeof word}`}。坏词在版本判定之前就拒:「这一次不发」不许顺手吞掉一个打错字的声明。错误文本只报形状,不回显值。`);
     }
-    const support = inheritEnvServerSupport(serverVersion);
-    if (support === 'supported')
+    if (engineVersionTier(serverVersion) !== 'unknown')
         return Object.freeze({ field: Object.freeze({ inheritEnv: word }) });
-    const cause = support === 'unsupported' ? 'server_too_old' : 'server_version_unknown';
-    return Object.freeze({ field: Object.freeze({}), withheld: Object.freeze({ cause, word }) });
+    return Object.freeze({ field: Object.freeze({}), withheld: Object.freeze({ cause: 'server_version_unknown', word }) });
 }
 const WITHHELD_NOTICES = Object.freeze({
-    server_too_old: Object.freeze({
-        all: "Not sent with this request: this engine is too old to accept the setting that lets the shell inherit this machine's whole environment, so this run's shell gets the default environment, with credential-like variables removed.",
-        scrub: 'Not sent with this request: this engine is too old to accept the default-environment setting, so it was left out; that has the same effect, because the default environment (credential-like variables removed) is what this run gets anyway.',
-    }),
     server_version_unknown: Object.freeze({
         all: "Not sent with this request: the engine's version is not known yet, and an engine that does not know the setting that lets the shell inherit this machine's whole environment refuses the whole request, so it was held back; this run's shell gets the default environment, with credential-like variables removed, and on an engine that does know the setting, leaving it out also clears an earlier whole-environment choice for this session.",
         scrub: "Not sent with this request: the engine's version is not known yet, so the default-environment setting was left out; that has the same effect, because leaving it out also gives this run the default environment (credential-like variables removed).",

package/dist/limitsWire.d.ts

@@ -8,7 +8,6 @@ export declare const MAX_TURNS_MIN = 1;
 export declare const MAX_TURNS_MAX: number;
 export declare const MAX_TOKENS_MIN = 1;
 export declare const MAX_TOKENS_MAX: number;
-export declare const LIMITS_WIRE_MIN_ENGINE: readonly [number, number, number];
 export interface HeadlessLimits {
     maxWalltimeMs?: number;
     maxTurns?: number;
@@ -32,8 +31,3 @@ export type HeadlessEnvLimitsResult = {
 };
 export declare function headlessLimitsFromEnv(env?: EnvLike): HeadlessEnvLimitsResult;
 export declare function limitsForPrint(argv: string[], env?: EnvLike): LimitsParseResult;
-export declare function versionSupportsLimits(v: string | undefined): boolean;
-export declare function engineLimitsSupportWarning(baseUrl: string, flaggedFlags: string[], opts?: {
-    fetchImpl?: typeof fetch;
-    timeoutMs?: number;
-}): Promise<string | undefined>;

package/dist/limitsWire.js

@@ -10,7 +10,6 @@ export const MAX_TURNS_MAX = Number.MAX_SAFE_INTEGER;
 export const MAX_TOKENS_MIN = 1;
 export const MAX_TOKENS_MAX = Number.MAX_SAFE_INTEGER;
 const SEC_TO_MS = 1_000;
-export const LIMITS_WIRE_MIN_ENGINE = [1, 196, 0];
 const DEADLINE_USAGE = `sema: --deadline expects a whole number of seconds between ${DEADLINE_SEC_MIN} and ${DEADLINE_SEC_MAX}.\n` +
     '  --deadline <sec>     wall-clock budget for this run (sema superset — no upstream equivalent):\n' +
     '                       reaching it ends the run LOUDLY (failed / limits.max_walltime_exceeded)\n' +
@@ -112,40 +111,3 @@ export function limitsForPrint(argv, env = hostEnv()) {
     const merged = { ...(fromEnv.limits ?? {}), ...(parsed.limits ?? {}) };
     return { ok: true, ...(hasAnyLimit(merged) ? { limits: merged } : {}), flaggedFlags: parsed.flaggedFlags };
 }
-export function versionSupportsLimits(v) {
-    const m = v ? /^(\d+)\.(\d+)\.(\d+)/.exec(v) : null;
-    if (!m)
-        return false;
-    const [a, b, c] = [Number(m[1]), Number(m[2]), Number(m[3])];
-    const [ma, mb, mc] = LIMITS_WIRE_MIN_ENGINE;
-    if (a !== ma)
-        return a > ma;
-    if (b !== mb)
-        return b > mb;
-    return c >= mc;
-}
-export async function engineLimitsSupportWarning(baseUrl, flaggedFlags, opts) {
-    const fetchImpl = opts?.fetchImpl ?? fetch;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1500);
-    try {
-        const res = await fetchImpl(`${baseUrl.replace(/\/+$/, '')}/health`, {
-            method: 'GET',
-            signal: controller.signal,
-        });
-        if (!res.ok)
-            return undefined;
-        const body = (await res.json());
-        const version = typeof body?.version === 'string' ? body.version : undefined;
-        if (versionSupportsLimits(version))
-            return undefined;
-        const flags = flaggedFlags.length > 0 ? flaggedFlags.join('/') : '--deadline/--max-turns/--max-tokens';
-        return `[sema] engine ${version ?? '(unversioned, pre-1.96)'} does not support ${flags} (needs ≥1.196.0); the flag will be ignored by the engine`;
-    }
-    catch {
-        return undefined;
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}

package/dist/mcpLiveness.js

@@ -1,4 +1,5 @@
-export const MCP_LIVENESS_STATES = Object.freeze(['reachable', 'unreachable', 'unknown']);
+import { CORE_MCP_LIVENESS_STATES } from './generated/engineFactTables.js';
+export const MCP_LIVENESS_STATES = CORE_MCP_LIVENESS_STATES;
 void MCP_LIVENESS_STATES;
 void true;
 void true;

package/dist/mcpProbeCapability.js

@@ -34,7 +34,7 @@ export function mcpProbeDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
             return ('per-server MCP status face not observed — the engine reports whether it has one on /v1/capabilities; ' +
-                'this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)');
+                'this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)');
         case 'not_reported':
             return ('per-server MCP status face not reported by this engine — this binary predates the face, so that path is not expected to exist here ' +
                 '(asking it usually answers with a machine-readable route-not-found, though a timeout or an uncoded gateway answer still says nothing either way); ' +

package/dist/mcpProbeWire.js

@@ -111,32 +111,32 @@ function narrowProbeFace(body) {
     let servers;
     try {
         if (!plainObject(body))
-            return { ok: false, why: 'result_unreadable' };
+            return { ok: false, why: 'result_unreadable', what: 'the body is not a plain object' };
         probedAt = body.probedAt;
         ttlSec = body.ttlSec;
         servers = body.servers;
     }
     catch {
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the body threw when read' };
     }
     if (!nonEmptyString(probedAt))
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the reading time is missing or empty' };
     if (typeof ttlSec !== 'number' || !Number.isFinite(ttlSec) || ttlSec < 0)
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the reuse window is not a non-negative number' };
     const raw = snapshotArray(servers);
     if (raw === null)
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the per-server rows are not a readable list' };
     let rows;
     try {
         rows = projectMcpSection(raw);
     }
     catch {
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the per-server rows could not be read' };
     }
     if (rows === undefined)
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'none of the per-server rows could be read' };
     if (rows.length !== raw.length)
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'some of the per-server rows could not be read' };
     return { ok: true, face: { probedAt, ttlSec, servers: rows } };
 }
 const FACE_ABSENT_MESSAGE = 'this engine reports no per-server MCP status face on this deployment, so nothing was sent; ' +
@@ -172,8 +172,7 @@ export async function readMcpCapabilities(facade, call, opts) {
     }
     const narrowed = narrowProbeFace(res);
     if (!narrowed.ok) {
-        return unknownBy(narrowed.why, 'the per-server MCP status call answered 2xx with a body this client cannot stand behind ' +
-            '(the reading time, the reuse window, or the per-server rows) — refusing to present it as a reading, ' +
+        return unknownBy(narrowed.why, `the per-server MCP status call answered 2xx with a body this client cannot stand behind (${narrowed.what}) — refusing to present it as a reading, ` +
             'because a normal-looking empty list is exactly the false answer this face exists to remove');
     }
     return { status: 'face', face: narrowed.face };
@@ -206,8 +205,7 @@ export async function probeMcpServers(facade, call, opts) {
     }
     const narrowed = narrowProbeFace(res);
     if (!narrowed.ok) {
-        return unknownBy(narrowed.why, 'the declaration probe answered 2xx with a body this client cannot stand behind ' +
-            '(the reading time, the reuse window, or the per-server rows) — refusing to present it as a reading');
+        return unknownBy(narrowed.why, `the declaration probe answered 2xx with a body this client cannot stand behind (${narrowed.what}) — refusing to present it as a reading`);
     }
     if (narrowed.face.servers.length !== submitted.length) {
         return unknownBy('index_misaligned', `the declaration probe answered with ${narrowed.face.servers.length} row(s) for ${submitted.length} declaration(s) — ` +

package/dist/mcpReconnect.d.ts

@@ -1,5 +1,6 @@
 export declare const MCP_RECONNECT_OUTCOMES: readonly string[];
 export declare const MCP_RECONNECT_TRANSACTION_NOTICE: string;
+export declare const MCP_RECONNECT_UNSETTLED_NOTICE: string;
 export interface McpReconnectStatusView {
     name: string;
     status: string;
@@ -51,6 +52,10 @@ export type McpReconnectVerdict = {
     readonly reason: 'capability' | 'route' | 'feature';
 } | {
     readonly kind: 'not_found';
+} | {
+    readonly kind: 'unsettled';
+    readonly errorCode: 'state.mcp_reconnect_unsettled';
+    readonly error?: string;
 } | {
     readonly kind: 'failed';
     readonly error: unknown;

package/dist/mcpReconnect.js

@@ -2,6 +2,9 @@ import { capForDisplay } from './fleetTaskDesc.js';
 export const MCP_RECONNECT_OUTCOMES = Object.freeze(['accepted', 'refused', 'unsupported']);
 export const MCP_RECONNECT_TRANSACTION_NOTICE = 'Reconnecting closes the current connection before dialing again. On a healthy server this is a transaction, ' +
     'not a refresh: a failed re-dial leaves the server down and withdraws its tools from the model until a later re-dial succeeds.';
+export const MCP_RECONNECT_UNSETTLED_NOTICE = 'The MCP re-dial did not settle within the time this request waits, so there is no result yet: the re-dial was not cancelled and may still be running. ' +
+    "Check the server's state before re-dialing it again — a second request that arrives after the dial has settled closes the connection and dials once more.";
+const UNSETTLED_CODE = 'state.mcp_reconnect_unsettled';
 const RECONNECT_TEXT_MAX = 200;
 const RECONNECT_WORD_MAX = 40;
 const SERVER_NAME_MAX = 190;
@@ -88,6 +91,27 @@ export function projectMcpReconnectResult(body) {
     }
     return view;
 }
+function unsettledVerdict(carrier) {
+    let text;
+    try {
+        const r = carrier;
+        text = nonEmpty(r.error) ? r.error : r.message;
+    }
+    catch {
+        text = undefined;
+    }
+    return nonEmpty(text)
+        ? { kind: 'unsettled', errorCode: UNSETTLED_CODE, error: capForDisplay(text, RECONNECT_TEXT_MAX) }
+        : { kind: 'unsettled', errorCode: UNSETTLED_CODE };
+}
+function isUnsettledBody(raw) {
+    try {
+        return isRecord(raw) && !('outcome' in raw) && raw.errorCode === UNSETTLED_CODE;
+    }
+    catch {
+        return false;
+    }
+}
 export function classifyMcpReconnectFailure(e) {
     let code;
     try {
@@ -96,6 +120,8 @@ export function classifyMcpReconnectFailure(e) {
     catch {
         return { kind: 'failed', error: e };
     }
+    if (code === UNSETTLED_CODE)
+        return unsettledVerdict(e);
     if (code === 'steering.invalid_content')
         return { kind: 'invalid' };
     if (code === 'steering.not_running')
@@ -123,6 +149,8 @@ export async function reconnectMcpServer(client, sessionId, server, opts) {
             return { kind: 'failed', error: opts.signal.reason ?? new Error('mcpReconnect: aborted before the verb was called') };
         }
         const raw = await client.sessions.mcpReconnect(sessionId, { server }, opts?.signal ? { signal: opts.signal } : undefined);
+        if (isUnsettledBody(raw))
+            return unsettledVerdict(raw);
         const view = projectMcpReconnectResult(raw);
         if (view === undefined)
             return { kind: 'failed', error: new Error('mcpReconnect: malformed body') };

package/dist/memoryComplianceCapability.js

@@ -35,9 +35,9 @@ export function memoryComplianceVerbsAvailable(reading) {
 export function memoryComplianceDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'memory compliance face not observed — the engine reports it on /v1/capabilities (memoryCompliance); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)';
+            return 'memory compliance face not observed — the engine reports it on /v1/capabilities (memoryCompliance); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':
-            return 'memory compliance face not reported by this engine — only newer engines advertise it; this does not say whether the provenance and erasure endpoints exist, probe them directly';
+            return 'memory compliance face not reported by this engine; this does not say whether the provenance and erasure endpoints exist, probe them directly';
         case 'absent':
             return `memory compliance face off on this deployment — the entry-provenance and erasure endpoints are unavailable (${MEMORY_ENGINE_REQUIRED_CODE}); the engine does not say which half is missing (a memory backend that does not own the engine control plane, or an empty operator roster), so do not guess`;
         case 'present':

package/dist/memoryOriginCapability.js

@@ -35,9 +35,9 @@ export function memoryOriginVerbsAvailable(reading) {
 export function memoryOriginDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'external-origin face not observed — the engine reports it on /v1/capabilities (memoryOrigin); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)';
+            return 'external-origin face not observed — the engine reports it on /v1/capabilities (memoryOrigin); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':
-            return 'external-origin face not reported by this engine — only newer engines advertise it; this does not say whether the origin listing and clearance endpoints exist, probe them directly';
+            return 'external-origin face not reported by this engine; this does not say whether the origin listing and clearance endpoints exist, probe them directly';
         case 'absent':
             return `external-origin face off on this deployment — the origin listing and clearance endpoints are unavailable (${MEMORY_ENGINE_REQUIRED_CODE}); the engine does not say which half is missing (a memory backend that does not own the engine control plane, or an empty operator roster), so do not guess`;
         case 'present':

package/dist/memoryVerbsWire.d.ts

@@ -19,7 +19,7 @@ export interface MemoryFacade {
         signal?: AbortSignal;
     }): Promise<MemoryOriginClearReceipt>;
 }
-export declare const MEMORY_VERB_REFUSAL_CAUSES: readonly ["face_absent", "client_too_old", "unreadable_request", "store_absent", "operator_only", "unauthorized", "service_token_required", "id_invalid", "request_id_required", "body_shape", "query_invalid", "selector_invalid", "evidence_unavailable", "selector_mismatch", "census_incomplete", "clear_unattributed", "clear_invalid", "clear_not_marked", "clear_challenged", "clear_conflict", "clear_pending"];
+export declare const MEMORY_VERB_REFUSAL_CAUSES: readonly ["face_absent", "client_too_old", "unreadable_request", "store_absent", "operator_only", "operators_unconfigured", "unauthorized", "service_token_required", "id_invalid", "request_id_required", "body_shape", "query_invalid", "selector_invalid", "evidence_unavailable", "selector_mismatch", "census_incomplete", "clear_unattributed", "clear_invalid", "clear_not_marked", "clear_challenged", "clear_conflict", "clear_pending"];
 export type MemoryVerbRefusalCause = (typeof MEMORY_VERB_REFUSAL_CAUSES)[number];
 export declare const MEMORY_VERB_UNKNOWN_WHYS: readonly ["no_verdict", "server_fault", "control_plane_corrupt", "clear_unknown", "clear_failed", "result_unreadable", "unsupported_version", "identity_mismatch", "unclassified"];
 export type MemoryVerbUnknownWhy = (typeof MEMORY_VERB_UNKNOWN_WHYS)[number];

package/dist/memoryVerbsWire.js

@@ -8,6 +8,7 @@ export const MEMORY_VERB_REFUSAL_CAUSES = Object.freeze([
     'unreadable_request',
     'store_absent',
     'operator_only',
+    'operators_unconfigured',
     'unauthorized',
     'service_token_required',
     'id_invalid',
@@ -51,6 +52,8 @@ export function classifyMemoryFailure(e) {
             return refusedBy('unauthorized', message);
         case 'auth.operator_only':
             return refusedBy('operator_only', message);
+        case 'capability.operator_principals_required':
+            return refusedBy('operators_unconfigured', message);
         case 'auth.service_token_required':
             return refusedBy('service_token_required', message);
         case 'capability.memory_engine_required':
@@ -173,7 +176,7 @@ function narrowProvenanceAccount(body, entryId) {
     let exclusionCode;
     try {
         if (!plainObject(body))
-            return { ok: false, why: 'result_unreadable' };
+            return { ok: false, why: 'result_unreadable', what: 'the body is not a plain object' };
         v = body.v;
         id = body.id;
         binding = body.binding;
@@ -188,27 +191,28 @@ function narrowProvenanceAccount(body, entryId) {
         exclusionCode = plainObject(exclusion) ? exclusion.code : undefined;
     }
     catch {
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the body threw when read' };
     }
     if (typeof v !== 'number' || !Number.isFinite(v))
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the envelope version is missing or not a number' };
     if (v !== PROVENANCE_ACCOUNT_VERSION)
-        return { ok: false, why: 'unsupported_version' };
+        return { ok: false, why: 'unsupported_version', what: 'the envelope version is newer than this client knows' };
     if (!nonEmptyString(id))
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the entry id is missing or empty' };
     if (!plainObject(binding) || !nonEmptyString(bindingState))
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the binding is missing or has no usable state' };
     if (!plainObject(custody) || !nonEmptyString(custodyState) || !Array.isArray(custodyEvents)) {
-        return { ok: false, why: 'result_unreadable' };
-    }
-    if (!Array.isArray(contributors) || !nonEmptyString(contentState)) {
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the custody chain is missing or has no usable state or event list' };
     }
+    if (!Array.isArray(contributors))
+        return { ok: false, why: 'result_unreadable', what: 'the contributor list is missing or not a list' };
+    if (!nonEmptyString(contentState))
+        return { ok: false, why: 'result_unreadable', what: 'the content state is missing or empty' };
     if (hasExclusion && !(plainObject(exclusion) && nonEmptyString(exclusionCode))) {
-        return { ok: false, why: 'result_unreadable' };
+        return { ok: false, why: 'result_unreadable', what: 'the exclusion record is present but unreadable' };
     }
     if (id !== entryId)
-        return { ok: false, why: 'identity_mismatch' };
+        return { ok: false, why: 'identity_mismatch', what: 'the account is for a different entry id' };
     return { ok: true, account: body };
 }
 export async function readEntryProvenance(facade, call, opts) {
@@ -235,7 +239,7 @@ export async function readEntryProvenance(facade, call, opts) {
             ? 'the provenance account came back stamped with a newer envelope version than this client knows — refusing to reinterpret it; upgrade the client'
             : narrowed.why === 'identity_mismatch'
                 ? 'the provenance account came back for a different entry id than the one that was asked about — refusing to present it as this entry account'
-                : 'the provenance call answered 2xx with a body this client cannot branch on (envelope, entry id, binding or custody) — refusing to present it as an account');
+                : `the provenance call answered 2xx with a body this client cannot branch on (${narrowed.what}) — refusing to present it as an account`);
     }
     return { status: 'account', account: narrowed.account };
 }

package/dist/model/catalog.js

@@ -1,4 +1,5 @@
 import { PROVIDER_PRESETS } from './providerPresets.js';
+import { SETTINGS_MODEL_API_WORDS } from '../generated/settingsSchemaTables.js';
 export const CATALOG_SCHEMA_VERSION_MIN = 1;
 export const CATALOG_SCHEMA_VERSION_MAX = 1;
 export function isSupportedCatalogSchemaVersion(v) {
@@ -15,7 +16,7 @@ function isProviderRow(v) {
         r.id.length > 0 &&
         typeof r.name === 'string' &&
         typeof r.baseUrl === 'string' &&
-        (r.api === 'anthropic-messages' || r.api === 'openai-completions') &&
+        typeof r.api === 'string' && SETTINGS_MODEL_API_WORDS.includes(r.api) &&
         typeof r.authEnv === 'string' &&
         Array.isArray(r.models));
 }

package/dist/model/providerPresets.d.ts

@@ -1,3 +1,5 @@
+import type { SETTINGS_MODEL_API_WORDS } from '../generated/settingsSchemaTables.js';
+export type ModelApiWord = (typeof SETTINGS_MODEL_API_WORDS)[number];
 export type PresetModel = {
     id: string;
     contextWindow: number;
@@ -8,7 +10,7 @@ export type ProviderPreset = {
     id: string;
     name: string;
     baseUrl: string;
-    api: 'anthropic-messages' | 'openai-completions';
+    api: ModelApiWord;
     authEnv: string;
     models: PresetModel[];
     modelViaFamily?: boolean;

package/dist/model/tierVocabulary.d.ts

@@ -1,4 +1,5 @@
-export type Tier = 'ultra' | 'max' | 'pro' | 'flash' | 'lite';
+import { CORE_DEFAULT_TIER_ORDER } from '../generated/engineFactTables.js';
+export type Tier = (typeof CORE_DEFAULT_TIER_ORDER)[number];
 export declare const TIER_ORDER: readonly Tier[];
 export declare const SURFACED_TIERS: readonly Tier[];
 export declare const CC_TIER_ALIASES: Readonly<Record<string, Tier>>;