@sema-agent/client-core 0.92.0 → 0.93.1

package/dist/adapt/arms.js

@@ -604,6 +604,7 @@ const taskProgressArm = function* (m, { ctx, cards, panel, inst }) {
         toolUses: usage.toolUses ?? null,
     }));
     const currentAction = typeof m.currentAction === 'string' && m.currentAction.length > 0 ? m.currentAction : undefined;
+    const model = typeof m.model === 'string' && m.model.length > 0 ? m.model : undefined;
     const spawnName = m.spawnName;
     if (cardId !== undefined) {
         yield chrome({
@@ -616,6 +617,7 @@ const taskProgressArm = function* (m, { ctx, cards, panel, inst }) {
                 totalTokens: typeof usage.totalTokens === 'number' ? usage.totalTokens : 0,
                 durationMs: typeof usage.durationMs === 'number' ? usage.durationMs : 0,
                 ...(currentAction !== undefined ? { currentAction } : {}),
+                ...(model !== undefined ? { model } : {}),
             },
         });
     }

package/dist/adapt/toolCards.js

@@ -1,5 +1,5 @@
 import { deriveTranscriptId } from '../seam.js';
-import { degradedToolResultBody, detectEngineBgShellReceipt, reportFindingsToolUseResult, structuredToToolUseResult, todoWriteToolUseResult, wireOutputToBody, } from '../toolResult.js';
+import { degradedToolResultBody, detectEngineBgShellDetach, detectEngineBgShellReceipt, reportFindingsToolUseResult, structuredToToolUseResult, todoWriteToolUseResult, wireOutputToBody, } from '../toolResult.js';
 import { chrome, mainLane, transcript } from './ids.js';
 import { flattenWireOutput } from './wireShapes.js';
 import { isCcToolDenialKind } from '../gateVocabulary.js';
@@ -34,9 +34,11 @@ export function createToolCardLedger(ctx, idOf) {
     let lastLiveTodos = [];
     function* buildToolResult(p, end) {
         const isError = end?.isError ?? false;
-        if ((p.name === 'Bash' || p.name === 'Monitor') && !isError && end?.output !== undefined) {
-            const reg = detectEngineBgShellReceipt(p.name, p.rawInput, flattenWireOutput(end.output));
-            if (reg) {
+        if ((p.name === 'Bash' || p.name === 'Monitor') && !isError) {
+            const outputText = end?.output !== undefined ? flattenWireOutput(end.output) : undefined;
+            const reg = detectEngineBgShellDetach(p.name, p.rawInput, end?.structured, outputText) ??
+                detectEngineBgShellReceipt(p.name, p.rawInput, outputText, end?.structured);
+            if (reg !== null) {
                 yield chrome({ kind: 'bgshell_register', laneProof: mainLane(), taskId: reg.taskId, registration: reg });
             }
         }

package/dist/adapt.d.ts

@@ -11,7 +11,7 @@ export declare const ADAPTER_COVERAGE: {
     readonly transcriptKinds: readonly ["assistant_text", "assistant_thinking", "assistant_tool_use", "user_tool_result_decision", "user_task_notification", "system_passthrough"];
     readonly b3: readonly ["T38 三清第三清 + T57 第五处断闸:prompt_suggestions(turn 开场作废 + 子流断闸)", "T40 IDLE-FLUSH 1.5s 竞速(需 ctx.setTimer;缺席=不启用)", "T58 手动 iterator 的 finally cleanup(early break/throw 都要关上游生成器)", "T59 abort 半场(ctx.signal;中断后不产终答)", "T60 无 result 收尾腿(泄尾增量 → 清 liveness → 尾思考 → 尾文本段)"];
     readonly b4: readonly ["A 层第 14 臂 task_progress:workflow lane 三级门 + 判据④ belt 回植 + C1 alias + bindTaskCard(显式父/FIFO/含糊即 unbound)+ inline stats + T50 双形读 + SubagentStart + #6 resident 台账 + 面板 tick", "settlePanelTasks 三处 sweep 全接线(tool_end 显式关卡带报告 / result 防御 sweep / turn 末 + abort sweep)", "P0-2 tool label 侧信道(sanitizeToolUseBlock 摘 label + engineToolLabelStore 登记;0.5.0 真缺口,label 会随 tool_use block 落转录 → /compact 直发 provider 400)", "task_notification 的两件宿主义务收回库内自持:dropQueuedNotificationsForRun + clearEnginePanelTaskResident;stop hook 的 if-started 门由库解", "T8 flattenWireOutput 提为独立导出(A 层 settle 报告与 B 层卡体同一份)"];
-    readonly b5: readonly ["B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用", "D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落", "E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息", "tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)", "task/task-list structured → chrome task_ledger_sync{source:\"structured\"}(判定归一在库、落盘留宿主)", "T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)"];
+    readonly b5: readonly ["B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用", "D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落", "E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息", "tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)", "task/task-list structured → chrome task_ledger_sync{source:\"structured\"}(判定归一在库、落盘留宿主)", "T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)"];
     readonly todo: readonly ["T13 的 **D 层** 半场(taskoutput block content)未随 structured 退位:退位会改 block content 形状(cli 那里是裸对象 = 件1 隐患),属行为面改动,无真实需求驱动 ⇒ 见 DIVERGENCE-8", "macrotask 让渡(cli 在提交前让出宏任务给 Ink;宿主渲染策略,不进库)"];
 };
 export declare const ADAPTER_DIVERGENCES: readonly [string, string, string, string, string, string, string, string, string, string, string, string];

package/dist/adapt.js

@@ -55,7 +55,7 @@ export const ADAPTER_COVERAGE = {
     b5: [
         'B 层 structuredToToolUseResult 14 case(ask-user-question/bash/edit/create/update/text/grep/glob/notebook-edit/cron-create/cron-delete/cron-list/agent/task-output)+ workflow-run 登记副作用',
         'D 层 wireOutputToBody 3 臂(bash / taskoutput / 泛化);structured 白名单在场时 T11+T14 正则退位,缺席保回落',
-        'E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息',
+        'E 层 4 臂:#117a bg Bash 回执 + #158 Monitor 回执(同臂按工具名分,registration.source 判别;判定在库→chrome bgshell_register)+ CC-331 交出后台的 Bash(结构化 detached 位同形登记,一张卡至多一条;结构化位自述登记失败时两臂都不铸)· TodoWrite oldTodos 富卡 · ReportFindings 按名认领 · Remember→memory_saved 系统消息',
         'tool_end_result → user tool_result 正常路径(卡本体);result 与 turn 末两处开卡兜底关闭(abort 不兜底,cli 同)',
         'task/task-list structured → chrome task_ledger_sync{source:"structured"}(判定归一在库、落盘留宿主)',
         'T7 诚实缺席(§8-4:不搬 mock 合成器,改 degraded 标记)· T20 diff hunks 进包(src/diff/patch.ts)',

package/dist/adapter/runStream.js

@@ -329,8 +329,10 @@ const DROPPED_WHY_SENTENCE = Object.freeze({
         'If the engine reuses an id across two DIFFERENT frames (server 7.77.0 does this for `reasoning_end`, fixed upstream in 7.78.1), the second one is lost here — this line is the only trace.',
     turn_end_usage_absent: "the engine declares `turn_end.usage` as always present (core >= 7.17.0), and this frame has none. " +
         'The turn is counted as UNKNOWN spend (the run total is reported as a lower bound), and the frame itself renders NOWHERE.',
+    unknown_arm: "this build's projector has no arm for this frame type, so it was dropped — the type is not one this build knows (an engine newer than this client can send such frames). It renders NOWHERE.",
+    malformed: "this build's projector has an arm for this frame type, but the frame did not pass that arm's shape check (a field it requires was not usable), so it was dropped. It renders NOWHERE.",
 });
-const DROPPED_WHY_SENTENCE_DEFAULT = "this build's projector has no arm for it (engine newer than the client, or a malformed frame). It renders NOWHERE.";
+const DROPPED_WHY_SENTENCE_DEFAULT = "this build's projector has no arm for it (engine newer than the client, or a malformed frame; this build cannot tell which). It renders NOWHERE.";
 export function droppedWhySentence(why) {
     const row = Object.hasOwn(DROPPED_WHY_SENTENCE, why) ? DROPPED_WHY_SENTENCE[why] : undefined;
     return typeof row === 'string' ? row : DROPPED_WHY_SENTENCE_DEFAULT;

package/dist/agentsWireCaps.js

@@ -249,7 +249,7 @@ async function runPrepare(cfg, projector, probe, generation) {
         const [caps, projected] = await Promise.all([probe, projector()]);
         if (caps === false) {
             if (projected.agents && preparedKey === cfg.baseUrl) {
-                warnOnce(`agents wire: this engine does not support per-task custom agents (capabilities.taskAgents absent/false — server <1.205 or multi-tenant) — ${projected.agents.length} custom agent definition(s) will NOT be sent`);
+                warnOnce(`agents wire: this engine does not support per-task custom agents (capabilities.taskAgents is not true: the engine does not report it, or this deployment turns it off, for example a multi-tenant one; this client cannot tell which) — ${projected.agents.length} custom agent definition(s) will NOT be sent`);
             }
             return;
         }

package/dist/approvalDecidedByCapability.d.ts

@@ -0,0 +1,16 @@
+export type ApprovalDecidedByReading = {
+    kind: 'unobserved';
+} | {
+    kind: 'not_reported';
+} | {
+    kind: 'present';
+    value: true;
+};
+export declare function projectApprovalDecidedByCapability(caps: unknown): ApprovalDecidedByReading | undefined;
+export declare function noteEngineCapsForApprovalDecidedBy(baseUrl: string, caps: unknown, opts?: {
+    generation?: number;
+}): void;
+export declare function observedApprovalDecidedBy(baseUrl?: string | undefined): ApprovalDecidedByReading;
+export declare function approvalDecidedByAdmitted(reading: ApprovalDecidedByReading | undefined): boolean;
+export declare function forgetApprovalDecidedByReading(baseUrl: string | undefined): void;
+export declare function __resetApprovalDecidedByReadingsForTests(): void;

package/dist/approvalDecidedByCapability.js

@@ -0,0 +1,47 @@
+import { engineWireTarget } from './engineWireTarget.js';
+import { createEngineCapReader } from './engineCapReader.js';
+import { readOwnDataValue } from './ownKey.js';
+export function projectApprovalDecidedByCapability(caps) {
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'approvalDecidedBy'))
+            return { kind: 'not_reported' };
+        const v = caps.approvalDecidedBy;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        return v === true ? { kind: 'present', value: true } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const reader = createEngineCapReader({
+    name: 'approvalDecidedBy',
+    project: projectApprovalDecidedByCapability,
+    makeUnobserved: () => ({ kind: 'unobserved' }),
+});
+export function noteEngineCapsForApprovalDecidedBy(baseUrl, caps, opts) {
+    reader.note(baseUrl, caps, opts);
+}
+export function observedApprovalDecidedBy(baseUrl = engineWireTarget()?.baseUrl) {
+    return reader.observed(baseUrl);
+}
+export function approvalDecidedByAdmitted(reading) {
+    try {
+        if (reading === null || reading === undefined || typeof reading !== 'object' || Array.isArray(reading))
+            return false;
+        if (readOwnDataValue(reading, 'kind') !== 'present')
+            return false;
+        return readOwnDataValue(reading, 'value') === true;
+    }
+    catch {
+        return false;
+    }
+}
+export function forgetApprovalDecidedByReading(baseUrl) {
+    reader.forget(baseUrl);
+}
+export function __resetApprovalDecidedByReadingsForTests() {
+    reader.__resetForTests();
+}

package/dist/approvalsStreamLiveCapability.js

@@ -31,13 +31,13 @@ export function livePendingNeedsReconcile(reading) {
 export function approvalsStreamLiveDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'live approval push not observed — the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, or the last one was unreadable), so suspended asks are pulled by the reconcile cadence';
+            return 'live approval push not observed — the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which), so suspended asks are pulled by the reconcile cadence';
         case 'not_reported':
-            return 'live approval push not reported by this engine — only newer engines advertise it; this does not say whether it pushes, so suspended asks are pulled by the reconcile cadence';
+            return 'live approval push not reported by this engine; this does not say whether it pushes, so suspended asks are pulled by the reconcile cadence';
         case 'present':
             return reading.live
                 ? 'live approval push on — the engine announces suspended asks on the approvals stream; the reconcile cadence is only a fallback'
-                : 'live approval push off on this deployment (no checkpoint store or tool approvals disabled) — suspended asks are only visible through the reconcile cadence, so the client polls for them';
+                : 'live approval push off on this deployment (no checkpoint store or tool approvals disabled; the engine reports one bit for both, so this client cannot tell which) — suspended asks are only visible through the reconcile cadence, so the client polls for them';
     }
 }
 export function forgetApprovalsStreamLiveReading(baseUrl) {

package/dist/askSurvivesStandingAnswer.d.ts

@@ -1,5 +1,5 @@
 import { type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy } from './hitl/automaticAnswerVerdict.js';
-export declare const MODE_ARBITRATION: Readonly<Record<"hook" | "write_protection" | "mode" | "rule_unreadable" | "content_question" | "ancestor" | "unverifiable_delete" | "transcript_write" | "org_rule" | "governance_unavailable" | "ask_rule" | "denial_limit_fallback" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "write_protection_unresolved" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", import("./generated/engineFactTables.js").CoreModeArbitrationRow>>;
+export declare const MODE_ARBITRATION: Readonly<Record<"hook" | "write_protection" | "mode" | "rule_unreadable" | "content_question" | "ancestor" | "unverifiable_delete" | "transcript_write" | "org_rule" | "governance_unavailable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "write_protection_unresolved" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", import("./generated/engineFactTables.js").CoreModeArbitrationRow>>;
 export type StandingAnswerVerdict = {
     readonly kind: 'must_ask';
     readonly by: string;

package/dist/centerWiringCapability.js

@@ -159,7 +159,7 @@ export function centerWiringDoctorDetail(reading) {
     const unobserved = 'center wiring not observed — the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it, so whether this engine is connected to a configuration center is unknown';
     const r = guarded(reading);
     if (r?.kind === 'not_reported') {
-        return 'center wiring not reported by this engine — only newer engines advertise it; this does not say whether the engine is connected to a configuration center';
+        return 'center wiring not reported by this engine; this does not say whether the engine is connected to a configuration center';
     }
     if (r?.kind === 'none') {
         return 'no configuration center on this deployment — the engine runs on its own local configuration; no quota lease or usage reporting goes through a center';

package/dist/cloudConfigWireCaps.js

@@ -489,6 +489,8 @@ export function projectEffectiveBody(body, skillBodies, env, rostersValue, opts)
 }
 const quoted = (s, fallback) => (s === undefined ? fallback : `the "${s}" settings`);
 const listOf = (xs, truncatedFrom) => xs === undefined ? '' : `: ${xs.join(', ')}${truncatedFrom === undefined ? '' : ` (${truncatedFrom} in total)`}`;
+const ENTRY_UNUSABLE_WHY = '(incomplete or invalid settings; this client cannot tell which)';
+const ENTRY_REJECTED = `is in the catalog, but its entry is one the local engine cannot use ${ENTRY_UNUSABLE_WHY}`;
 function warningNotice(w) {
     const where = quoted(w.domain, 'the configuration');
     switch (w.kind) {
@@ -512,12 +514,10 @@ function warningNotice(w) {
 }
 function droppedRefNotice(d) {
     const t = d.target;
-    const notServed = d.reason === 'rejected'
-        ? 'is in the catalog, but its entry is one the local engine cannot use (incomplete or invalid settings)'
-        : 'is not in the model catalog served to you';
+    const notServed = d.reason === 'rejected' ? ENTRY_REJECTED : 'is not in the model catalog served to you';
     switch (d.key) {
         case 'models':
-            return { level: 'warn', text: `cloud config: ${t === undefined ? 'a model entry' : `model "${t}"`} is in the catalog, but its entry is one the local engine cannot use (incomplete or invalid settings) — it was left out of the local catalog` };
+            return { level: 'warn', text: `cloud config: ${t === undefined ? 'a model entry' : `model "${t}"`} ${ENTRY_REJECTED} — it was left out of the local catalog` };
         case 'default':
             return { level: 'warn', text: `cloud config: ${t === undefined ? 'the default model setting could not be read' : `the default model "${t}" ${notServed}`}, so it was left out — the local engine picks its default from roles and tiers instead` };
         case 'roles':
@@ -599,7 +599,7 @@ export function cloudEffectiveNotices(p) {
         const shown = named.slice(0, 5).join(', ') + (named.length > 5 ? `, +${named.length - 5} more` : '');
         out.push({
             level: 'warn',
-            text: `cloud config: none of the model entries served to you${shown !== '' ? ` (${shown})` : ''} is one the local engine can use (incomplete or invalid settings) — ` +
+            text: `cloud config: none of the model entries served to you${shown !== '' ? ` (${shown})` : ''} is one the local engine can use ${ENTRY_UNUSABLE_WHY} — ` +
                 'the catalog is kept as sent, and a locally started engine rejects the cloud model settings: at startup it uses its own environment catalog instead, and on a later refresh it keeps the previous configuration',
         });
     }

package/dist/compensations.js

@@ -25,7 +25,7 @@ export const MIGRATED_COMPENSATIONS = [
         libraryHalf: 'adapt.ts fireSubagentStart()(类型恒记 + 一生一次去重 + if-started 门)',
         chromeArm: 'subagent_lifecycle',
         hostHalf: '真执行用户 hook 进程(浏览器宿主根本不能执行 ⇒ 这一半必须留端)',
-        retireOn: 'RL-32',
+        retireOn: null,
     },
     {
         id: 'T36',
@@ -34,7 +34,7 @@ export const MIGRATED_COMPENSATIONS = [
         libraryHalf: 'adapt.ts settlePanelTasks 的四个调用点(tool_end 关卡 / result / turn 末 / abort)',
         chromeArm: 'inline_task_stats',
         hostHalf: null,
-        retireOn: 'RL-33',
+        retireOn: null,
     },
     {
         id: 'T44',

package/dist/decideReceipt.d.ts

@@ -18,6 +18,8 @@ export declare function decideAcceptedNotResolved(receipt: DecideReceiptView | u
 export interface DecideRefusalDetail {
     code: string;
     runId?: string;
+    runIds?: readonly string[];
+    readableHolderRunId?: string;
     detail: string;
     resendable: boolean;
 }

package/dist/decideReceipt.js

@@ -1,8 +1,8 @@
 import { gateOutcomeOf } from './gateOutcome.js';
 import { resumeReopenFromError } from './hitl/suspendedReopen.js';
-import { ASK_GONE, ASK_GONE_DENIED_WORD, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, isDecideParkMovedCode, } from './engineErrorCodes.js';
+import { ASK_GONE, ASK_GONE_DENIED_WORD, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, isDecideParkMovedCode, } from './engineErrorCodes.js';
 import { effectiveWireErrorCode } from './wireErrorTriage.js';
-import { readErrorString } from './wireFailureShape.js';
+import { readErrorString, readErrorStrictStringList } from './wireFailureShape.js';
 import { isCrashConvergedCause } from './hitl/crashConverged.js';
 const STATUS_RESUMING = 'resuming';
 function str(v) {
@@ -57,25 +57,50 @@ export function decideAcceptedNotResolved(receipt) {
 const DECIDE_REFUSAL_SENTENCES = Object.freeze({
     [DECIDE_WORKFLOW_HOST_UNKNOWN]: 'no session is attached to this run to receive the decision, so re-sending the same decision cannot help; the approval is still pending and can be decided again once the run is reachable',
     [DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED]: 'this run cannot remember the decision for the session; re-send the same decision without the remember option — nothing was consumed by this refusal',
+    [DECIDE_WORKFLOW_PARKS_UNREADABLE]: "this approval cannot be matched to the run that is waiting on it, because that run's record was written by an earlier engine version or is damaged; nothing was delivered and the approval is still pending — try resuming that run, and if this approval is still refused afterwards, the record has to be repaired by whoever operates this deployment before it can be decided",
+    [DECIDE_WORKFLOW_PARK_FORKED]: 'the same run was resumed more than once and each resumed copy is waiting on this same approval, so there is no single run to hand the decision to; nothing was delivered and the approval is still pending — resume one of those runs, and if it reaches this approval again, decide here',
 });
 const DECIDE_RESENDABLE = Object.freeze({
     [DECIDE_WORKFLOW_HOST_UNKNOWN]: false,
     [DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED]: true,
+    [DECIDE_WORKFLOW_PARKS_UNREADABLE]: false,
+    [DECIDE_WORKFLOW_PARK_FORKED]: false,
 });
+function readTopOwn(e, key) {
+    try {
+        return e !== null && e !== undefined ? e[key] : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function readForkedRunIds(e) {
+    const list = readErrorStrictStringList(e, 'runIds');
+    if (list === undefined || list.length === 0)
+        return undefined;
+    for (const id of list)
+        if (id.length === 0)
+            return undefined;
+    return Object.freeze(list.slice());
+}
 export function decideRefusalFromError(e) {
-    const code = typeof e?.errorCode === 'string'
-        ? (e.errorCode)
-        : undefined;
+    const rawCode = readTopOwn(e, 'errorCode');
+    const code = typeof rawCode === 'string' ? rawCode : undefined;
     if (code === undefined || !DECIDE_WORKFLOW_LANE_CODES.includes(code))
         return null;
-    const rawRunId = e.runId;
+    const rawRunId = code === DECIDE_WORKFLOW_PARK_FORKED ? undefined : readTopOwn(e, 'runId');
     const runId = typeof rawRunId === 'string' && rawRunId.length > 0 ? rawRunId : undefined;
+    const runIds = code === DECIDE_WORKFLOW_PARK_FORKED ? readForkedRunIds(e) : undefined;
+    const holderRaw = code === DECIDE_WORKFLOW_PARKS_UNREADABLE ? readErrorString(e, 'readableHolderRunId') : undefined;
+    const readableHolderRunId = holderRaw !== undefined && holderRaw.length > 0 ? holderRaw : undefined;
     const detail = Object.hasOwn(DECIDE_REFUSAL_SENTENCES, code)
         ? DECIDE_REFUSAL_SENTENCES[code]
         : undefined;
     return {
         code,
         ...(runId !== undefined ? { runId } : {}),
+        ...(runIds !== undefined ? { runIds } : {}),
+        ...(readableHolderRunId !== undefined ? { readableHolderRunId } : {}),
         detail: detail ?? 'the engine refused this decision; the approval is still pending and can be decided again',
         resendable: Object.hasOwn(DECIDE_RESENDABLE, code) ? DECIDE_RESENDABLE[code] === true : false,
     };
@@ -88,9 +113,9 @@ export function decideParkMovedFromError(e) {
     return { code, ...(taskId !== undefined && taskId.length > 0 ? { taskId } : {}) };
 }
 const DECIDE_PARK_MOVED_WHAT = Object.freeze({
-    [DECIDE_NOT_PARKED]: 'This approval was no longer waiting when the decision arrived (the agent was stopped, the approval was decided elsewhere, or the session it belongs to was deleted)',
-    [DECIDE_GATE_MOVED]: 'This approval moved while the decision was on its way (it was parked again, or settled elsewhere)',
-    [DECIDE_CLAIM_LOST]: 'Another decision on this approval got there first, or an earlier attempt is still holding it until the engine clears that hold on its own',
+    [DECIDE_NOT_PARKED]: 'This approval was no longer waiting when the decision arrived (the agent was stopped, the approval was decided elsewhere, or the session it belongs to was deleted; this client cannot tell which)',
+    [DECIDE_GATE_MOVED]: 'This approval moved while the decision was on its way (it was parked again, or settled elsewhere; this client cannot tell which)',
+    [DECIDE_CLAIM_LOST]: 'Another decision on this approval got there first, or an earlier attempt is still holding it until the engine clears that hold on its own; this client cannot tell which',
 });
 export function decideParkMovedContent(detail) {
     let code;

package/dist/detachWire.d.ts

@@ -2,27 +2,15 @@ import { type EnvLike } from './hostEnv.js';
 import { type WireAuthTokenSource } from './engineWireSdk.js';
 export declare const DETACH_HEADER = "x-detach-on-disconnect";
 export declare const HEADLESS_DETACH_ENV = "SEMA_HEADLESS_DETACH";
-export declare const DETACH_WIRE_MIN_ENGINE: readonly [number, number, number];
-export declare const versionSupportsDetach: (v: string | undefined) => boolean;
 export declare function headlessDetachDisabledByEnv(env?: EnvLike): boolean;
-export type EngineDetachSupport = 'supported' | 'unsupported' | 'unknown';
-export declare function probeEngineDetachSupport(baseUrl: string, opts?: {
-    fetchImpl?: typeof fetch;
-    timeoutMs?: number;
-}): Promise<EngineDetachSupport>;
-export declare function detachSupportDisclosure(support: EngineDetachSupport): string | undefined;
-export declare function engineSupportsDetach(baseUrl: string, opts?: {
-    fetchImpl?: typeof fetch;
-    timeoutMs?: number;
-}): Promise<boolean>;
 export type DetachResolution = {
     on: true;
     reason: 'default-on';
 } | {
     on: false;
-    reason: 'env-off' | 'old-engine';
+    reason: 'env-off';
 };
-export declare function resolveHeadlessDetach(baseUrl: string, env?: EnvLike, opts?: {
+export declare function resolveHeadlessDetach(_baseUrl: string, env?: EnvLike, _opts?: {
     fetchImpl?: typeof fetch;
     timeoutMs?: number;
 }): Promise<DetachResolution>;

package/dist/detachWire.js

@@ -1,60 +1,14 @@
 import { hostEnv } from './hostEnv.js';
 import { envFlagOff } from './envFlag.js';
-import { versionSupportsLimits } from './limitsWire.js';
 import { resolveWireAuth } from './engineWireSdk.js';
 export const DETACH_HEADER = 'x-detach-on-disconnect';
 export const HEADLESS_DETACH_ENV = 'SEMA_HEADLESS_DETACH';
-export const DETACH_WIRE_MIN_ENGINE = [1, 196, 0];
-export const versionSupportsDetach = versionSupportsLimits;
 export function headlessDetachDisabledByEnv(env = hostEnv()) {
     return envFlagOff(env[HEADLESS_DETACH_ENV]);
 }
-export async function probeEngineDetachSupport(baseUrl, opts) {
-    const fetchImpl = opts?.fetchImpl ?? fetch;
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1500);
-    try {
-        const res = await fetchImpl(`${baseUrl.replace(/\/+$/, '')}/health`, {
-            method: 'GET',
-            signal: controller.signal,
-        });
-        if (!res.ok)
-            return 'unknown';
-        const body = await res.json();
-        if (body === null || typeof body !== 'object' || Array.isArray(body))
-            return 'unknown';
-        if (!('version' in body))
-            return 'unsupported';
-        const version = body.version;
-        if (typeof version !== 'string' || !/^\d+\.\d+\.\d+/.test(version))
-            return 'unknown';
-        if (versionSupportsDetach(version))
-            return 'supported';
-        return 'unsupported';
-    }
-    catch {
-        return 'unknown';
-    }
-    finally {
-        clearTimeout(timer);
-    }
-}
-export function detachSupportDisclosure(support) {
-    if (support !== 'unknown')
-        return undefined;
-    return 'could not confirm whether this engine supports detach (its /health did not answer usably); sending the detach header anyway — it is harmless on the wire, and a dead engine fails the request loudly';
-}
-export async function engineSupportsDetach(baseUrl, opts) {
-    return (await probeEngineDetachSupport(baseUrl, opts)) !== 'unsupported';
-}
-export async function resolveHeadlessDetach(baseUrl, env = hostEnv(), opts) {
+export async function resolveHeadlessDetach(_baseUrl, env = hostEnv(), _opts) {
     if (headlessDetachDisabledByEnv(env))
         return { on: false, reason: 'env-off' };
-    if (env.SEMA_ENGINE_URL) {
-        const ok = await engineSupportsDetach(baseUrl, opts);
-        if (!ok)
-            return { on: false, reason: 'old-engine' };
-    }
     return { on: true, reason: 'default-on' };
 }
 export const DETACH_DURABLE_OFF_400_ANCHOR = 'x-detach-on-disconnect requires a durable run';

package/dist/deviceExecutorManagementCapability.d.ts

@@ -2,12 +2,15 @@ export type DeviceExecutorManagementReading = {
     kind: 'unobserved';
 } | {
     kind: 'not_reported';
-    why: 'capability_absent' | 'management_absent';
+    why: 'capability_absent';
 } | {
     kind: 'lane_absent';
 } | {
     kind: 'present';
-    management: boolean;
+    management: 'present-true' | 'present-false' | 'absent';
+    protocolVersion?: number;
+    maxInflightPerDevice?: number;
+    wsPath?: string;
 };
 export declare function projectDeviceExecutorManagementCapability(caps: unknown): DeviceExecutorManagementReading | undefined;
 export declare function noteEngineCapsForDeviceExecutorManagement(baseUrl: string, caps: unknown, opts?: {
@@ -15,6 +18,7 @@ export declare function noteEngineCapsForDeviceExecutorManagement(baseUrl: strin
 }): void;
 export declare function observedDeviceExecutorManagement(baseUrl?: string | undefined): DeviceExecutorManagementReading;
 export declare function deviceManagementVerbsAvailable(reading: DeviceExecutorManagementReading): 'yes' | 'no' | 'unknown';
+export declare function deviceLaneOpen(reading: DeviceExecutorManagementReading): 'yes' | 'no' | 'unknown';
 export declare function deviceExecutorManagementDoctorDetail(reading: DeviceExecutorManagementReading): string;
 export declare function forgetDeviceExecutorManagementReading(baseUrl: string | undefined): void;
 export declare function __resetDeviceExecutorManagementReadingsForTests(): void;

package/dist/deviceExecutorManagementCapability.js

@@ -1,5 +1,9 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
+import { capForDisplay } from './fleetTaskDesc.js';
+function ownRead(o, key) {
+    return Object.hasOwn(o, key) ? o[key] : undefined;
+}
 export function projectDeviceExecutorManagementCapability(caps) {
     if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
         return undefined;
@@ -14,14 +18,28 @@ export function projectDeviceExecutorManagementCapability(caps) {
     if (d === null || typeof d !== 'object' || Array.isArray(d))
         return undefined;
     const o = d;
-    if (!Object.hasOwn(o, 'management'))
-        return { kind: 'not_reported', why: 'management_absent' };
-    const mgmt = o.management;
+    if (ownRead(o, 'enabled') !== true)
+        return undefined;
+    const mgmt = ownRead(o, 'management');
+    let management;
     if (mgmt === undefined)
-        return { kind: 'not_reported', why: 'management_absent' };
-    if (typeof mgmt !== 'boolean')
+        management = 'absent';
+    else if (mgmt === true)
+        management = 'present-true';
+    else if (mgmt === false)
+        management = 'present-false';
+    else
         return undefined;
-    return { kind: 'present', management: mgmt };
+    const pv = ownRead(o, 'protocolVersion');
+    const mi = ownRead(o, 'maxInflightPerDevice');
+    const ws = ownRead(o, 'wsPath');
+    return {
+        kind: 'present',
+        management,
+        ...(typeof pv === 'number' && Number.isFinite(pv) ? { protocolVersion: pv } : {}),
+        ...(typeof mi === 'number' && Number.isFinite(mi) && mi >= 0 ? { maxInflightPerDevice: mi } : {}),
+        ...(typeof ws === 'string' && ws.length > 0 ? { wsPath: ws } : {}),
+    };
 }
 const reader = createEngineCapReader({
     name: 'deviceExecutor.management',
@@ -35,26 +53,54 @@ export function observedDeviceExecutorManagement(baseUrl = engineWireTarget()?.b
     return reader.observed(baseUrl);
 }
 export function deviceManagementVerbsAvailable(reading) {
+    if (reading.kind === 'present') {
+        if (reading.management === 'present-true')
+            return 'yes';
+        if (reading.management === 'present-false')
+            return 'no';
+        return 'unknown';
+    }
+    if (reading.kind === 'lane_absent')
+        return 'no';
+    return 'unknown';
+}
+export function deviceLaneOpen(reading) {
     if (reading.kind === 'present')
-        return reading.management ? 'yes' : 'no';
+        return 'yes';
     if (reading.kind === 'lane_absent')
         return 'no';
     return 'unknown';
 }
+const WS_PATH_DETAIL_MAX = 64;
+function laneFactsSuffix(r) {
+    const parts = [];
+    if (r.protocolVersion !== undefined)
+        parts.push(`protocol ${r.protocolVersion}`);
+    if (r.maxInflightPerDevice !== undefined)
+        parts.push(`${r.maxInflightPerDevice} in flight per device`);
+    if (r.wsPath !== undefined)
+        parts.push(`ws path ${capForDisplay(r.wsPath, WS_PATH_DETAIL_MAX)}`);
+    return parts.length === 0 ? '' : ` (${parts.join(', ')})`;
+}
 export function deviceExecutorManagementDoctorDetail(reading) {
     switch (reading.kind) {
         case 'unobserved':
-            return 'device management face not observed — the engine reports it on /v1/capabilities (deviceExecutor.management); this process has no usable capabilities reading cached for it (none received, or the last one was unreadable)';
+            return 'device management face not observed — the engine reports it on /v1/capabilities (deviceExecutor.management); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':
-            return reading.why === 'management_absent'
-                ? 'device management face not reported by this engine — the device lane is advertised but only newer engines say whether the /v1/devices management verbs exist; this does not say whether they exist, probe them directly'
-                : 'device executor capability not reported by this engine — only newer engines advertise the device lane at all; this does not say whether it exists';
+            return 'device executor capability not reported by this engine; this does not say whether a device lane exists';
         case 'lane_absent':
             return 'no device lane on this deployment — the /v1/devices management verbs are unavailable (capability.device_lane_required)';
-        case 'present':
-            return reading.management
-                ? 'device management face on — the /v1/devices management verbs are available on this engine'
-                : 'device lane on but the /v1/devices management verbs are off on this deployment';
+        case 'present': {
+            const facts = laneFactsSuffix(reading);
+            switch (reading.management) {
+                case 'present-true':
+                    return `device management face on — the /v1/devices management verbs are available on this engine${facts}`;
+                case 'present-false':
+                    return `device lane on but the /v1/devices management verbs are off on this deployment${facts}`;
+                case 'absent':
+                    return `device lane on, but this engine does not report the /v1/devices management face; this does not say whether the management verbs exist, probe them directly${facts}`;
+            }
+        }
     }
 }
 export function forgetDeviceExecutorManagementReading(baseUrl) {

package/dist/engineConfigDrift.d.ts

@@ -0,0 +1,20 @@
+import type { HealthResponse } from './types/engineState.js';
+export interface EngineConfigApplyState {
+    readonly configTargetOrdinal: number;
+    readonly configAppliedOrdinal: number;
+    readonly configTargetVersion?: number;
+    readonly configAppliedVersion?: number;
+    readonly configApplyStaleMs?: number;
+}
+export declare function readEngineConfigApplyState(health: unknown): EngineConfigApplyState | null;
+export type ConfigDriftVerdict = 'skip' | 'in-sync' | 'ask' | 'advance-baseline';
+export interface ConfigDriftHealthView extends Pick<HealthResponse, 'configHash' | 'instanceId' | 'restartRequired'> {
+    configTargetOrdinal?: number | undefined;
+    configAppliedOrdinal?: number | undefined;
+}
+export interface ConfigDriftInput {
+    baselineConfigHash?: string | undefined;
+    baselineInstanceId?: string | undefined;
+    health?: ConfigDriftHealthView | undefined;
+}
+export declare function configDriftVerdict(input: ConfigDriftInput): ConfigDriftVerdict;