@sema-agent/client-core 0.91.0 → 0.93.0

package/dist/model/tierVocabulary.js

@@ -1,12 +1,7 @@
-export const TIER_ORDER = Object.freeze(['ultra', 'max', 'pro', 'flash', 'lite']);
+import { CORE_CC_MODEL_TIER_ALIASES, CORE_DEFAULT_TIER_ORDER } from '../generated/engineFactTables.js';
+export const TIER_ORDER = CORE_DEFAULT_TIER_ORDER;
 export const SURFACED_TIERS = ['max', 'pro', 'flash', 'lite'];
-export const CC_TIER_ALIASES = {
-    fable: 'max',
-    mythos: 'max',
-    opus: 'pro',
-    sonnet: 'flash',
-    haiku: 'lite',
-};
+export const CC_TIER_ALIASES = CORE_CC_MODEL_TIER_ALIASES;
 export const DEFAULT_TIER = 'pro';
 export const TIER_BLURBS = {
     ultra: 'reserved above max — binds when a stronger model lands',

package/dist/ownKey.d.ts

@@ -1,2 +1,4 @@
 export declare function putOwnKey<T>(table: Record<string, T>, key: string, value: T): void;
 export declare function readOwnNonEmptyString(v: object | null | undefined, key: string): string | undefined;
+export declare function readOwnDataNonEmptyString(v: object | null | undefined, key: string): string | undefined;
+export declare function readOwnDataValue<T>(v: object | null | undefined, key: string): T | undefined;

package/dist/ownKey.js

@@ -7,3 +7,18 @@ export function readOwnNonEmptyString(v, key) {
     const raw = v[key];
     return typeof raw === 'string' && raw !== '' ? raw : undefined;
 }
+export function readOwnDataNonEmptyString(v, key) {
+    if (typeof v !== 'object' || v === null)
+        return undefined;
+    const d = Object.getOwnPropertyDescriptor(v, key);
+    if (d === undefined || !Object.hasOwn(d, 'value'))
+        return undefined;
+    const raw = d.value;
+    return typeof raw === 'string' && raw !== '' ? raw : undefined;
+}
+export function readOwnDataValue(v, key) {
+    if (typeof v !== 'object' || v === null)
+        return undefined;
+    const d = Object.getOwnPropertyDescriptor(v, key);
+    return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+}

package/dist/peerFrames.js

@@ -1,5 +1,5 @@
 import { applyDisplayFace, LEGACY_NAME_FACE } from './displayUntrusted.js';
-import { CORE_ENGINE_AUTHORITY_ENVELOPE_TAGS } from './generated/engineFactTables.js';
+import { CORE_ENGINE_AUTHORITY_ENVELOPE_TAGS, CORE_PERMISSION_MODE_CLASSES } from './generated/engineFactTables.js';
 const WIRE_KEY_FROM = 'from';
 const WIRE_KEY_BODY = 'body';
 const WIRE_KEY_KIND = 'kind';
@@ -21,7 +21,7 @@ export const AGENT_MESSAGE_TAG = 'agent-message';
 export const CROSS_SESSION_MESSAGE_TAG = 'cross-session-message';
 export const PEER_FRAME_LANES = Object.freeze(['agent_message', 'cross_session_message', 'cross_session_notice']);
 export const CROSS_SESSION_NOTICE_KINDS = Object.freeze(['delivery_notice', 'idle_notice']);
-export const PEER_MODE_CLASSES = Object.freeze(['bypass', 'prompting']);
+export const PEER_MODE_CLASSES = CORE_PERMISSION_MODE_CLASSES;
 function dataProp(o, key) {
     if (o === null || typeof o !== 'object')
         return undefined;

package/dist/peerLaneCapability.js

@@ -35,9 +35,9 @@ export function peerLaneAvailable(reading) {
 export function peerLaneDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'cross-session lane not observed — the engine reports it on /v1/capabilities (peerLane); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)';
+            return 'cross-session lane not observed — the engine reports it on /v1/capabilities (peerLane); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':
-            return 'cross-session lane not reported by this engine — the engine predates the lane, so this deployment has no cross-session discovery or delivery (the key itself is the version signal; addressing another session by id is refused as unknown)';
+            return 'cross-session lane not reported by this engine — its capabilities reading carries no entry for the lane, so whether this deployment has cross-session discovery or delivery is unknown to this client';
         case 'absent':
             return 'no cross-session lane on this deployment — cross-session discovery and delivery (listing other sessions, addressing one by id) are unavailable';
         case 'present':

package/dist/permissionModesCapability.d.ts

@@ -0,0 +1,16 @@
+export type PermissionModesReading = {
+    kind: 'unobserved';
+} | {
+    kind: 'not_reported';
+} | {
+    kind: 'present';
+    modes: readonly string[];
+};
+export declare function projectPermissionModesCapability(caps: unknown): PermissionModesReading | undefined;
+export declare function noteEngineCapsForPermissionModes(baseUrl: string, caps: unknown, opts?: {
+    generation?: number;
+}): void;
+export declare function observedPermissionModes(baseUrl?: string | undefined): PermissionModesReading;
+export declare function permissionModeAdmitted(reading: PermissionModesReading | undefined, mode: string): boolean;
+export declare function forgetPermissionModesReading(baseUrl: string | undefined): void;
+export declare function __resetPermissionModesReadingsForTests(): void;

package/dist/permissionModesCapability.js

@@ -0,0 +1,71 @@
+import { engineWireTarget } from './engineWireTarget.js';
+import { createEngineCapReader } from './engineCapReader.js';
+import { readOwnDataValue } from './ownKey.js';
+function readModesStrict(v) {
+    try {
+        if (!Array.isArray(v))
+            return undefined;
+        const length = v.length;
+        if (length === 0)
+            return undefined;
+        const modes = [];
+        for (let i = 0; i < length; i++) {
+            const item = readOwnDataValue(v, String(i));
+            if (typeof item !== 'string' || item.length === 0)
+                return undefined;
+            modes.push(item);
+        }
+        return modes;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function projectPermissionModesCapability(caps) {
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'permissionModes'))
+            return { kind: 'not_reported' };
+        const v = caps.permissionModes;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        const modes = readModesStrict(v);
+        return modes === undefined ? undefined : { kind: 'present', modes };
+    }
+    catch {
+        return undefined;
+    }
+}
+const reader = createEngineCapReader({
+    name: 'permissionModes',
+    project: projectPermissionModesCapability,
+    makeUnobserved: () => ({ kind: 'unobserved' }),
+});
+export function noteEngineCapsForPermissionModes(baseUrl, caps, opts) {
+    reader.note(baseUrl, caps, opts);
+}
+export function observedPermissionModes(baseUrl = engineWireTarget()?.baseUrl) {
+    return reader.observed(baseUrl);
+}
+export function permissionModeAdmitted(reading, mode) {
+    try {
+        if (typeof mode !== 'string' || mode.length === 0)
+            return false;
+        if (reading === null || reading === undefined || typeof reading !== 'object' || Array.isArray(reading))
+            return false;
+        if (readOwnDataValue(reading, 'kind') !== 'present')
+            return false;
+        const modes = readModesStrict(readOwnDataValue(reading, 'modes'));
+        return modes !== undefined && modes.includes(mode);
+    }
+    catch {
+        return false;
+    }
+}
+export function forgetPermissionModesReading(baseUrl) {
+    reader.forget(baseUrl);
+}
+export function __resetPermissionModesReadingsForTests() {
+    reader.__resetForTests();
+}

package/dist/permissionRuleIssue.js

@@ -3,15 +3,15 @@ export const PERMISSION_RULE_ISSUE_CODES = Object.freeze([
     'invalid.empty_tool',
     'invalid.paren',
     'invalid.param_split',
-    'invalid.allow_param_rule',
     'invalid.primary_field',
     'invalid.cap_exceeded',
-    'unsupported.bash_prefix',
+    'unsupported.allow',
+    'invalid.behavior',
     'invalid.command_rule',
+    'invalid.entry_type',
     'unsupported.param_unknown',
     'unsupported.param_non_scalar',
     'unsupported.tool_unknown',
-    'unsupported.file_glob',
     'unsupported.path_base',
     'unsupported.mcp_paren',
     'unsupported.covering_paren',
@@ -22,18 +22,21 @@ const ISSUE_SENTENCES = Object.freeze({
     'invalid.empty_tool': 'this rule is invalid: it names no tool',
     'invalid.paren': 'this rule is invalid: its parentheses do not parse (escape a literal one as \\( or \\))',
     'invalid.param_split': 'this rule is invalid: its parentheses do not hold a parameter rule written name:pattern',
-    'invalid.allow_param_rule': 'this rule is invalid: an allow rule cannot carry a parameter pattern — only bare tool rules auto-allow',
     'invalid.primary_field': "this rule is invalid: it patterns the tool's primary field, which matches the whole trimmed string rather than a prefix",
-    'invalid.cap_exceeded': 'this rule set is invalid: it is over one of the deployment caps (rule count, rule length, pattern length, or star count)',
+    'invalid.cap_exceeded': 'this rule set is invalid: it is over one of the deployment caps (rule count, rule length, pattern length, or star count); this client cannot tell which from the code alone',
+    'invalid.behavior': 'this rule is invalid: its behavior is neither deny nor ask, so it would never fire',
     'invalid.command_rule': 'this rule is invalid: the command pattern was rejected by the command-rule validator',
-    'unsupported.bash_prefix': 'a standing approval for a command belongs in the persisted-rule store, so this allow rule is not supported here (deny and ask rules with the same shape do compile)',
+    'invalid.entry_type': 'this allow list is invalid: it must be a list of rule strings, and it or one of its entries is not a string',
+    'unsupported.allow': 'an allow rule is not supported in a rule set that only says deny or ask — a standing approval belongs on the allow list instead',
     'unsupported.param_unknown': 'this parameter rule is not supported: the tool carries no such parameter, so it could never match',
     'unsupported.param_non_scalar': 'this parameter rule is not supported: that parameter holds an object or an array, so it could never match',
     'unsupported.tool_unknown': "this rule is not supported on this leg: the resolver it supplied does not know the tool, so the rule's face cannot be checked",
-    'unsupported.file_glob': 'a standing approval by path belongs in the consent store, so this allow rule is not supported here (deny and ask path rules do compile)',
     'unsupported.path_base': 'this path rule is not supported as spelled: it needs a base this policy was not given, so it would reach nothing and is refused rather than compiled',
     'unsupported.mcp_paren': 'a parenthesised parameter rule is not supported on an MCP tool name',
     'unsupported.covering_paren': 'a parenthesised parameter rule is not supported on a covering protocol name — the parameter grammar is keyed by an exact tool name, so no mounted tool could ever bear it',
+    'invalid.allow_param_rule': 'this rule is invalid: an allow rule cannot carry a parameter pattern — only bare tool rules auto-allow',
+    'unsupported.bash_prefix': 'a standing approval for a command belongs in the persisted-rule store, so this allow rule is not supported here (deny and ask rules with the same shape do compile)',
+    'unsupported.file_glob': 'a standing approval by path belongs in the consent store, so this allow rule is not supported here (deny and ask path rules do compile)',
 });
 const PARAM_SPLIT_WITH_COLON = 'this rule is invalid: a parameter rule is written name:pattern, and the name before the colon or the pattern after it is empty';
 const PARAM_SPLIT_NO_COLON = 'this rule is invalid: there is no colon inside the parentheses, so this is not a parameter rule (a parameter rule is written name:pattern)';

package/dist/permissionRulesWriteCapability.js

@@ -31,11 +31,11 @@ export function permissionRulesWriteAvailable(reading) {
 export function permissionRulesWriteDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'permission-rule write entry not observed — the engine reports it on /v1/capabilities (permissionRulesWrite); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)';
+            return 'permission-rule write entry not observed — the engine reports it on /v1/capabilities (permissionRulesWrite); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':
             return 'permission-rule write entry not reported by this engine — this binary predates the entry itself; hide it rather than calling it';
         case 'absent':
-            return 'permission-rule write entry unreachable for this call — either the rules lane is not open on this deployment, or this call cannot bring a verifiable identity';
+            return 'permission-rule write entry unreachable for this call — either the rules lane is not open on this deployment, or this call cannot bring a verifiable identity; the engine reports one bit for both, so this client cannot tell which';
         case 'present':
             return 'permission-rule write entry reachable for this call — a per-call attempt still answers for itself whether the direction, text, and scope are accepted';
     }

package/dist/permissionWireCaps.d.ts

@@ -1,8 +1,10 @@
 import { type TaskRequestPermissionMode } from './taskRequestWords.js';
+import { type PermissionModesReading } from './permissionModesCapability.js';
 export type PermissionMode = TaskRequestPermissionMode;
 export interface PermissionModeField {
     permissionMode?: PermissionMode;
 }
 export declare function permissionModeField(mode: string | undefined, opts?: {
     stampDefault?: boolean;
+    permissionModes?: PermissionModesReading | undefined;
 }): PermissionModeField;

package/dist/permissionWireCaps.js

@@ -1,9 +1,16 @@
 import { PERMISSION_MODE_WORDS } from './taskRequestWords.js';
-const KNOWN = new Set(PERMISSION_MODE_WORDS);
+import { permissionModeAdmitted } from './permissionModesCapability.js';
+const BIT_GATED_MODE = 'dontAsk';
+const KNOWN = new Set(PERMISSION_MODE_WORDS.filter((w) => w !== BIT_GATED_MODE));
 export function permissionModeField(mode, opts) {
     if (typeof mode === 'string' && mode !== 'default' && KNOWN.has(mode)) {
         return { permissionMode: mode };
     }
+    if (mode === BIT_GATED_MODE) {
+        if (permissionModeAdmitted(opts?.permissionModes, mode))
+            return { permissionMode: mode };
+        return opts?.stampDefault === true ? { permissionMode: 'default' } : {};
+    }
     if (opts?.stampDefault === true && (mode === undefined || mode === 'default')) {
         return { permissionMode: 'default' };
     }

package/dist/permissionsAllowGrantCapability.js

@@ -65,7 +65,12 @@ export function permissionsAllowGrantDoctorDetail(reading, settingsRead) {
         return 'allow rules sent to the engine — it reads them as rules, not as an exclusive list: a matching call counts as answered for, and the engine still raises its own prompts where it requires them';
     }
     if (gate === 'settings_read_not_clean') {
-        return 'allow rules from settings files kept on this side — this engine reads allow rules as rules, but the settings read that produced them was not reported clean (a settings file was unreadable or had a problem, or no read health was given), so they are not sent; command-line and session allow rules are still sent, and matching approvals are still answered here';
+        const why = settingsRead === 'partial'
+            ? 'was reported partial (at least one settings file carried a bad field)'
+            : settingsRead === 'unreadable'
+                ? 'was reported unreadable (at least one settings file could not be read)'
+                : 'came with no recognized read health';
+        return `allow rules from settings files kept on this side — this engine reads allow rules as rules, but the settings read that produced them ${why}, so they are not sent; command-line and session allow rules are still sent, and matching approvals are still answered here`;
     }
     const kind = ownReadingField(reading, 'kind');
     if (kind === 'present' && ownReadingField(reading, 'grants') === false) {
@@ -74,7 +79,7 @@ export function permissionsAllowGrantDoctorDetail(reading, settingsRead) {
     if (kind === 'not_reported') {
         return 'allow rules kept on this side — this engine does not say how it reads allow rules; sending them to an engine that reads them as an exclusive list would block every tool not on it, so they are not sent and matching approvals are still answered here';
     }
-    return 'allow rules kept on this side — no usable capabilities reading is cached for this engine (none received, or the last one was unreadable), so allow rules are not sent and matching approvals are still answered here';
+    return 'allow rules kept on this side — no usable capabilities reading is cached for this engine (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which), so allow rules are not sent and matching approvals are still answered here';
 }
 export function forgetPermissionsAllowGrantReading(baseUrl) {
     reader.forget(baseUrl);

package/dist/permissionsDeclaration.d.ts

@@ -22,7 +22,7 @@ export interface PermissionsDeclarationBuckets {
 export interface PermissionsDeclaration {
     permissions?: PermissionsDeclarationBuckets;
 }
-export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate"];
+export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "unminted_protocol_segment", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate"];
 export type PermissionsKeptReason = (typeof PERMISSIONS_KEPT_REASONS)[number];
 export interface PermissionsKeptRule {
     rule: string;
@@ -38,10 +38,16 @@ export interface PermissionsUncheckedRule {
     rule: string;
     bucket: 'deny' | 'ask';
 }
+export interface PermissionsUnreachableRule {
+    rule: string;
+    bucket: 'deny' | 'ask';
+    mintedPrefix?: string;
+}
 export interface PermissionsDeclarationReport extends PermissionsDeclaration {
     kept: PermissionsKeptRule[];
     rewritten: PermissionsRewrittenRule[];
     unchecked: PermissionsUncheckedRule[];
+    unreachable: PermissionsUnreachableRule[];
 }
 export declare function permissionsDeclaration(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclaration;
 export declare function permissionsDeclarationReport(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclarationReport;

package/dist/permissionsDeclaration.js

@@ -1,4 +1,6 @@
-import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf, validatePermissionRules } from './coreValuePorts.js';
+import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
+import { protocolSegmentOf } from './protocolSegment.js';
+import { ruleCompileVerdict } from './ruleCompileVerdict.js';
 import { allowRulesGate } from './permissionsAllowGrantCapability.js';
 const RULE_TRUST_ORDER = [
     'policySettings',
@@ -17,6 +19,7 @@ export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'retired_tool_name',
     'unprefixed_namespaced_name',
     'incomplete_protocol_name',
+    'unminted_protocol_segment',
     'home_relative_path',
     'compile_refused',
     'content_form_not_grantable',
@@ -93,19 +96,14 @@ function wholeServerRuleName(name) {
     const peer = read.slice(ns.prefix.length);
     return peer !== '' && !peer.includes('__') && !peer.endsWith('_') ? `${read}__*` : name;
 }
-const RULE_ROOT = '/';
-function compileVerdict(rule, behavior) {
-    try {
-        const issues = validatePermissionRules([{ rule, behavior }], { pathBases: { root: RULE_ROOT } });
-        if (!Array.isArray(issues))
-            return 'unknown';
-        return issues.length === 0 ? 'compiles' : 'refused';
-    }
-    catch {
-        return 'unknown';
-    }
-}
+const compileVerdict = ruleCompileVerdict;
 const kept = (reason) => ({ sent: false, reason });
+function sentFate(wire, toolName, unchecked) {
+    const segment = protocolSegmentOf(toolName);
+    return segment.kind === 'unminted'
+        ? { sent: true, wire, unchecked, unreachable: segment.minted !== undefined ? { minted: segment.minted } : {} }
+        : { sent: true, wire, unchecked };
+}
 function judgeList(rules, behavior) {
     let portsChecked = false;
     return rules.map((rule) => {
@@ -121,24 +119,31 @@ function judgeList(rules, behavior) {
             const issue = wireIssue(name);
             if (issue !== undefined)
                 return kept(issue);
-            const verdict = compileVerdict(name, behavior);
+            if (behavior === 'allow') {
+                const segment = protocolSegmentOf(name);
+                if (segment.kind === 'unminted')
+                    return kept('unminted_protocol_segment');
+                if (segment.kind === 'unknown')
+                    return kept('judge_failed');
+            }
+            const verdict = compileVerdict(name, behavior === 'ask' ? 'ask' : 'deny');
             if (verdict === 'refused')
                 return kept('compile_refused');
             if (verdict === 'unknown' && behavior === 'allow')
                 return kept('judge_failed');
-            return { sent: true, wire: name, unchecked: verdict === 'unknown' };
+            return behavior === 'allow' ? { sent: true, wire: name, unchecked: false } : sentFate(name, name, verdict === 'unknown');
         }
         const issue = wireIssue(parsed.toolName);
         if (issue !== undefined)
             return kept(issue);
         if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))
             return kept('home_relative_path');
+        if (behavior === 'allow')
+            return kept('content_form_not_grantable');
         const verdict = compileVerdict(rule, behavior);
         if (verdict === 'refused')
-            return kept(behavior === 'allow' ? 'content_form_not_grantable' : 'compile_refused');
-        if (verdict === 'unknown' && behavior === 'allow')
-            return kept('judge_failed');
-        return { sent: true, wire: rule, unchecked: verdict === 'unknown' };
+            return kept('compile_refused');
+        return sentFate(rule, parsed.toolName, verdict === 'unknown');
     });
 }
 function outsideSettingsFiles(origin) {
@@ -275,6 +280,7 @@ function assemble(input, caps) {
     const keptRows = [];
     const rewritten = [];
     const unchecked = [];
+    const unreachable = [];
     const rows = [
         ['deny', [...denySlots, ...cliSlots], denyJ],
         ['ask', askSlots, askJ],
@@ -293,9 +299,12 @@ function assemble(input, caps) {
             const f = (winner.list === 'cliDeny' ? j.fates[denySlots.length + winner.at] : j.fates[winner.at]);
             if (f.sent && f.unchecked && bucket !== 'allow')
                 unchecked.push({ rule: wire, bucket });
+            if (f.sent && f.unreachable !== undefined && bucket !== 'allow') {
+                unreachable.push({ rule: wire, bucket, ...(f.unreachable.minted !== undefined ? { mintedPrefix: f.unreachable.minted } : {}) });
+            }
         }
     }
-    return { buckets, report: { kept: keptRows, rewritten, unchecked } };
+    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable } };
 }
 export function permissionsDeclaration(input, caps) {
     const { buckets } = assemble(input, caps);

package/dist/pluginHooksWire.js

@@ -1,15 +1,6 @@
 import { displayUntrusted } from './displayUntrusted.js';
-export const ENGINE_FIRED_HOOK_EVENTS = [
-    'PreToolUse',
-    'PostToolUse',
-    'PostToolUseFailure',
-    'PostToolBatch',
-    'PreCompact',
-    'PostCompact',
-    'Stop',
-    'StopFailure',
-    'UserPromptSubmit',
-];
+import { SETTINGS_ENGINE_OWNED_HOOK_EVENTS } from './generated/settingsSchemaTables.js';
+export const ENGINE_FIRED_HOOK_EVENTS = SETTINGS_ENGINE_OWNED_HOOK_EVENTS;
 export const PLUGIN_HOOK_DISPOSITIONS = ['engine', 'shell', 'not_run'];
 export const PLUGIN_HOOK_REASONS = [
     'projected',

package/dist/postureKnob.js

@@ -87,7 +87,7 @@ export function postureKnobDetail(knob, opts) {
             ? `${label} ${word} (source: ${source} — ${note})`
             : `${label} ${word} (source: ${source})`;
     }
-    return `${label} not reported by this engine (an engine below 7.67.0, or a response this end could not parse)`;
+    return `${label} not reported by this engine (this end found no usable reading for it: the engine does not send one, or what it sent could not be parsed here; this end cannot tell which)`;
 }
 const _postureKnobShapePin = (w) => w;
 void _postureKnobShapePin;

package/dist/promptProfileWireCaps.d.ts

@@ -1,3 +1,4 @@
+import type { TaskRequest } from '@sema-agent/sdk';
 import { type EnvLike } from './hostEnv.js';
-export type PromptProfile = 'simple' | 'classic';
+export type PromptProfile = NonNullable<TaskRequest['promptProfile']>;
 export declare function promptProfileFromEnv(env?: EnvLike): PromptProfile | undefined;

package/dist/protocolSegment.d.ts

@@ -0,0 +1,11 @@
+export type ProtocolSegment = {
+    readonly kind: 'ok';
+} | {
+    readonly kind: 'empty';
+} | {
+    readonly kind: 'unminted';
+    readonly minted?: string;
+} | {
+    readonly kind: 'unknown';
+};
+export declare function protocolSegmentOf(name: string): ProtocolSegment;

package/dist/protocolSegment.js

@@ -0,0 +1,31 @@
+import { hasCoreValuePort, mintNamespacePrefix, protocolOf } from './coreValuePorts.js';
+import { CORE_PROTOCOL_PREFIXES } from './generated/toolNameTables.js';
+export function protocolSegmentOf(name) {
+    if (CORE_PROTOCOL_PREFIXES.some((prefix) => name.startsWith(prefix) && name.slice(prefix.length).split('__')[0] === ''))
+        return { kind: 'empty' };
+    const ns = protocolOf(name);
+    if (ns === undefined)
+        return hasCoreValuePort('protocolOf') ? { kind: 'ok' } : { kind: 'unknown' };
+    let parsed;
+    try {
+        parsed = ns.parse(name);
+    }
+    catch {
+        return { kind: 'unknown' };
+    }
+    const peer = parsed?.peer;
+    if (typeof peer !== 'string')
+        return { kind: 'ok' };
+    if (peer.includes('*'))
+        return { kind: 'unminted' };
+    let minted;
+    try {
+        minted = mintNamespacePrefix(ns, peer);
+    }
+    catch {
+        return { kind: 'unknown' };
+    }
+    if (typeof minted !== 'string')
+        return { kind: 'unknown' };
+    return minted === `${ns.prefix}${peer}__` ? { kind: 'ok' } : { kind: 'unminted', minted };
+}

package/dist/readFacePosture.js

@@ -30,7 +30,7 @@ export function readFacePostureDetail(view, opts) {
     if (!opts.reachable) {
         return "read face not observed (this end could not read the engine's diagnostics)";
     }
-    return 'read face not reported by this engine (an engine below 7.65.0, or a response this end could not parse)';
+    return 'read face not reported by this engine (this end found no usable reading for it: the engine does not send one, or what it sent could not be parsed here; this end cannot tell which)';
 }
 export function readFaceDisagreement(capFace, posture) {
     if (posture === undefined)

package/dist/request/taskRequest.js

@@ -44,7 +44,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'systemPrompt', lanes: ['interactive', 'print', 'utility'], live: false, why: '整段替换系统提示(sdk `TaskRequest.systemPrompt`;上游字符数超限 400 响亮拒,本层原样透传)。三条车道都有来源:交互面 = CC QueryParams.systemPrompt,无人值守面 = `--system-prompt[-file]` 一类旗,side-channel 面 = 壳整段给出的那一份。与追加位 `appendSystemPrompt` 不是一个位(那一位归 live 兜底层,见 `LIVE_DEFAULT_FIELDS`)', whyUtilityLane: '有座:side-channel 提交的系统提示由壳整段给出 —— 它不是用户会话的续谈,不该继承用户那一份' },
     { field: 'reasoningEffort', lanes: ['interactive', 'print', 'utility'], live: false, why: '思考档位(sdk `TaskRequest.reasoningEffort` 七词闭集;上游对表外词 400 响亮拒 ⇒ 本层不预铸第二判官)。档位是请求级的位、与车道无关:交互面 = `/effort` 拨盘,无人值守面 = 档位旗。🔴 端交的必须是**档位词**:「思考 token 数」今天没有上游对位(见 `UPSTREAM_ABSENT_REQUEST_INTENTS` 的 `maxThinkingTokens`),别把一个数字折成档位词发出去', whyUtilityLane: '有座:side-channel 该用显式低档(省钱省时);与 model 同一条理由 —— 本车道上这两位都由壳显式给,不跟用户会话的拨盘走' },
     { field: 'model', lanes: ['interactive', 'print', 'utility'], live: false, why: '模型选择(sdk `TaskRequest.model`;交互面 = `/model` 中途换模型的拨盘,无人值守面 = 模型旗 / 部署缺省那一路,side-channel 面 = 壳显式挑的那一只)。三条车道都有来源、都是提交面。🔴 0.79.0 改口:修前「print 的模型走另一条路」这句理由被用户面实测证伪 —— 无人值守车道传了模型名却整键不上请求体,于是同一个坏名字在交互态被引擎 400 点名、在无人值守态却安静换成部署缺省并在首帧回显一个没生效的名字。一个**选择**类声明被静默丢掉,后果与收紧类声明被静默丢掉同形(端不读回执就以为生效)—— 与 `excludeTools` 补 print 座同律。本层原样透传、不预判模型名(名字的合法性归引擎,本层不铸第二判官)', whyUtilityLane: '有座:side-channel 显式挑便宜的那只模型(不跟用户会话的 `/model` 拨盘走)' },
-    { field: 'images', lanes: ['interactive'], live: false, why: '贴图提交是交互动作,`-p` 的 stdin 没有图片块', whyUtilityLane: '无座:贴图是交互动作,side-channel 的提交体里没有图片块' },
+    { field: 'images', lanes: ['interactive', 'print'], live: false, why: '图片输入(sdk `TaskRequest.images`;base64 / url 两形,原样透传)。两条用户车道都是提交面、都有来源:交互面 = 粘贴图与 `@` 图片像素,一次性车道 = 结构化输入里的图片块。张数、单张与合计的座位判定归人类提交装配口 `encodeHumanTurn`(两条车道同一份判定,本表不另判);请求体与图片张数的上限归上游判', whyUtilityLane: '无座:贴图是交互动作,side-channel 的提交体里没有图片块' },
     { field: 'resumeAt/resumeAtMode/restoreFiles/rewindFilesTo', lanes: ['interactive'], live: false, why: 'E18 `/rewind` 是交互命令;四键同生同灭(CC-145:core 6.0.0 起 both 臂发 restoreFiles;CC-223 起退役键 rewindFiles 不再有座 —— 交它按表外子键响亮拒;resumeAtMode 是 both/conversation 两臂恒带的排他截语义位)', whyUtilityLane: '无座:回退是交互命令,而 side-channel 是一次性的独立会话,没有可回退的历史' },
     { field: 'clientContext', lanes: ['interactive'], live: false, why: 'IANA 时区 + 可选邮箱 → core 本地化 `# Environment` 的 today;print 同样跑在用户机器上,缺席让引擎误标 (UTC)', gap: true, whyUtilityLane: '无座:本地化 today 的用途在用户会话的环境段,而 side-channel 的系统提示由壳整段给出 —— 这一列我判不准要不要(与本行 `gap` 同一条待办:要补先单独立项)' },
     { field: 'scratchpadDir', lanes: ['interactive'], live: true, why: '[816]③ per-session 暂存目录;print 也有 session,缺席让 `-p` 的工具写不进 exemptDir', gap: true, whyUtilityLane: '无座:per-session 暂存目录是给**工具**写的,零工具面上没人写' },
@@ -483,13 +483,6 @@ const refuseBadExcludeAllTools = (v) => {
         `收到 ${coarseShape(v)}。这一位是**整只工具面卸载**的收紧声明:本层若把坏值静默删键,这一次运行会挂上声明人以为已经卸掉的全部工具。` +
         '错误文本只报形状,不回显值。');
 };
-const RETIRED_APPROVER_POSTURE_KEY = 'approverPosture';
-const refuseRetiredApproverPosture = () => {
-    throw new TypeError('buildTaskRequest: "approverPosture" 是退役键(引擎 core 7.34.0 起在任务规格入口按名拒收;服务端 7.106.0 起提交体带它整条 400 ' +
-        'request.body_shape,unknownKeys 点名它)。它只是一句渲给模型看的审批姿态声明,从不授权任何东西 —— 删掉它不改变这一次运行被允许做什么。' +
-        '本包在装配前拒:在场即拒,任何值同判(undefined / null = 缺席)。处置:删掉这个键,不要改发别的键来顶替它;' +
-        '若确实要引擎侧放行审批,那是另一件事:显式给权限模式 permissionMode(那是一项授权,受部署策略管)。错误文本只报键名,不回显值。');
-};
 const refuseBadFileHistory = (v) => {
     if (v === undefined || v === null)
         return;
@@ -715,17 +708,12 @@ export function assembleTaskRequest(input, lane) {
     };
     const unknownKeys = [];
     const lateOmitted = [];
-    let retiredApproverPosture = false;
     for (const key of Object.keys(src)) {
         if (hasOwn(INPUT_KEY_ROUTES, key))
             continue;
         const stray = Reflect.get(src, key);
         if (!present(stray))
             continue;
-        if (key === RETIRED_APPROVER_POSTURE_KEY) {
-            retiredApproverPosture = true;
-            continue;
-        }
         const route = routeOfTopLevelKey(key);
         if (route === undefined) {
             unknownKeys.push(key);
@@ -756,8 +744,6 @@ export function assembleTaskRequest(input, lane) {
             retiredRewindFiles = true;
         unknownKeys.push(`rewind.${sub}`);
     }
-    if (retiredApproverPosture)
-        refuseRetiredApproverPosture();
     if (retiredRewindFiles) {
         throw new TypeError('buildTaskRequest: "rewind.rewindFiles" 是退役键(引擎 core 6.0.0 起退役:「逐轮捕获」那一义被引擎忽略 —— 文件首触追踪恒开,' +
             '无需请求;「回退时一并还原文件」那一义被引擎拒收、改名为 restoreFiles)。本包在装配前拒:在场即拒,true / false 同判。' +

package/dist/resumeRefusalCopy.d.ts

@@ -41,6 +41,7 @@ export interface ParkedResumeStartupDetail {
     code: string;
     cause: ParkedResumeStartupCause;
     taskId?: string;
+    startupCause?: string;
     resendable: false;
     denyStaysOpen: true;
 }