@sema-agent/client-core 0.92.0 → 0.93.1

package/dist/hitl/sessionPolicyWire.d.ts

@@ -115,6 +115,8 @@ export declare function sessionPolicyReadNotice(outcome: Exclude<SessionPolicyRe
     kind: 'present';
 }> | {
     kind: 'no_target';
+} | {
+    kind: 'not_started';
 }): string;
 export interface SessionPolicyRemovedEntry {
     readonly field: 'toolDeny' | 'toolAllow';

package/dist/hitl/sessionPolicyWire.js

@@ -328,7 +328,7 @@ export function sessionPolicyTightenNotice(outcome) {
                 case 'face_unavailable':
                     return 'This deployment does not keep per-session tool rules, so nothing was written.';
                 case 'session_not_found':
-                    return 'This session is not readable from here — it may not exist, or it may belong to someone else; nothing was written.';
+                    return 'This session is not readable from here — it may not exist, or it may belong to someone else (the engine answers both the same way, so this client cannot tell which); nothing was written.';
                 case 'session_ownerless':
                     return 'This session has no owner, so a rule written for it could never be read back; nothing was written. Attach an identity to the session and try again.';
                 case 'unauthorized':
@@ -354,6 +354,7 @@ export function sessionPolicyTightenNotice(outcome) {
 }
 const READ_NOTICE_GENERIC = 'This session’s rule record could not be shown, so what it holds is not known. Try reading it again.';
 const READ_NOTICE_NO_TARGET = 'There is no engine connection for this session, so its rule record cannot be read and what it holds is not known. Look again once it is connected.';
+const READ_NOTICE_NOT_STARTED = 'This session has not begun on the engine yet — nothing has been sent in it — so it has no rule record to read. Send a first message, then look again.';
 function readFailureSentence(kind) {
     switch (kind) {
         case 'face-unavailable':
@@ -367,7 +368,7 @@ function readFailureSentence(kind) {
         case 'session-ownerless':
             return 'This session has no owner, so it has no rule record to read.';
         case 'session-not-found':
-            return 'This session is not readable from here — it may not exist, or it may belong to someone else — so its rule record cannot be shown. Check that you are connected to the engine and the session you meant, or continue in a new session.';
+            return 'This session is not readable from here — it may not exist, or it may belong to someone else (the engine answers both the same way, so this client cannot tell which) — so its rule record cannot be shown. Check that you are connected to the engine and the session you meant, or continue in a new session.';
         case 'request-rejected':
             return 'The engine rejected the request to read this session’s rule record as malformed, so it could not be read. Sending the same request again will not change that; check which session was asked for.';
         case 'legacy-tool-name':
@@ -409,6 +410,8 @@ export function sessionPolicyReadNotice(outcome) {
             return readMalformedSentence(ownRead(outcome, 'why')) ?? READ_NOTICE_GENERIC;
         if (arm === 'no_target')
             return READ_NOTICE_NO_TARGET;
+        if (arm === 'not_started')
+            return READ_NOTICE_NOT_STARTED;
         return READ_NOTICE_GENERIC;
     }
     catch {
@@ -569,7 +572,7 @@ export function sessionPolicyRemovalNotice(outcome) {
                 case 'face_unavailable':
                     return 'This deployment does not keep per-session tool rules, so there is no session rule record to remove entries from — nothing was changed.';
                 case 'session_not_found':
-                    return 'This session is not readable from here — it may not exist, or it may belong to someone else; nothing was changed.';
+                    return 'This session is not readable from here — it may not exist, or it may belong to someone else (the engine answers both the same way, so this client cannot tell which); nothing was changed.';
                 case 'session_ownerless':
                     return 'This session has no owner, so it has no session rule record to change; nothing was changed.';
                 case 'unauthorized':
@@ -586,7 +589,7 @@ export function sessionPolicyRemovalNotice(outcome) {
                 case 'store_corrupt':
                     return 'The engine could not establish which version this session’s rules are at and refused to stamp a new one, so nothing was changed. This needs an operator to look at the rule store.';
                 case 'session_not_found':
-                    return 'This session is not writable from here — it may not exist, or it may belong to someone else; nothing was changed.';
+                    return 'This session is not writable from here — it may not exist, or it may belong to someone else (the engine answers both the same way, so this client cannot tell which); nothing was changed.';
                 case 'unauthorized':
                     return 'This call could not present a verifiable identity, so nothing was changed.';
                 default:

package/dist/hitl/toolApprovalWire.d.ts

@@ -1,12 +1,12 @@
 import { type GateCurrentPending, type HitlFailureStage, type HitlSafetyCode, type HitlClientLike, type DecideOperationObserver } from './hitlBridge.js';
 import { type AllowRuleShadowedWireMember, type ApprovalAllowRuleShadow } from './allowRuleShadow.js';
-import { type RuleStoreUnreadableKind } from '../gateVocabulary.js';
 import { type ApprovalMandateWord } from '../gateVocabulary.js';
 import type { ToolPermissionRequest } from '../seatContract.js';
 import { type DenyAttributionRefusalDetail } from '../wireRefusalCopy.js';
+import { type ApprovalDecidedByReading } from '../approvalDecidedByCapability.js';
 import { type DecideReceiptView } from '../decideReceipt.js';
 import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS } from '@sema-agent/sdk';
-import type { RuleSuggestion, ToolApprovalRespondAck, PersistedRuleAnchor as SdkPersistedRuleAnchor, RuleOfferMatch as SdkRuleOfferMatch, RuleOfferBatchMember as SdkRuleOfferBatchMember, RuleOfferUncoveredDetail as SdkRuleOfferUncoveredDetail, RuleOfferUncoveredReason as SdkRuleOfferUncoveredReason, AskOrigin as SdkAskOrigin, RuleOffersAbsence as SdkRuleOffersAbsence, DenialLimitKind as SdkDenialLimitKind, DenialLimitFallback as SdkDenialLimitFallback } from '@sema-agent/sdk';
+import type { ToolApprovalRespondAck, PersistedRuleAnchor as SdkPersistedRuleAnchor, RuleOfferMatch as SdkRuleOfferMatch, RuleOfferBatchMember as SdkRuleOfferBatchMember, RuleOfferUncoveredDetail as SdkRuleOfferUncoveredDetail, RuleOfferUncoveredReason as SdkRuleOfferUncoveredReason, AskOrigin as SdkAskOrigin, RuleOffersAbsence as SdkRuleOffersAbsence, DenialLimitKind as SdkDenialLimitKind, DenialLimitFallback as SdkDenialLimitFallback } from '@sema-agent/sdk';
 export declare function isFsApprovalGate(gate: {
     kind?: unknown;
     toolName?: unknown;
@@ -24,13 +24,17 @@ export type FsApprovalOutcome = {
     denySettledBy?: ApprovalDenySettledBy | undefined;
     denyReason?: string | undefined;
     denyAttributionDropped?: true;
+    denyAttributionRenamed?: true;
     receipt?: DecideReceiptView | undefined;
+    joinedInFlight?: true;
 } | {
     kind: 'aborted';
     gatedCallId?: string | undefined;
+    joinedInFlight?: true;
 } | {
     kind: 'retracted';
     gatedCallId?: string | undefined;
+    joinedInFlight?: true;
 } | {
     kind: 'failed';
     stage: HitlFailureStage;
@@ -44,11 +48,13 @@ export type FsApprovalOutcome = {
     currentPending?: GateCurrentPending | undefined;
     denyAttributionRefusal?: DenyAttributionRefusalDetail | undefined;
     editRefused?: true;
+    joinedInFlight?: true;
 };
 export interface FsApprovalWireDeps {
     client: HitlClientLike;
     onPresented?: () => void;
     onDecideOperation?: DecideOperationObserver;
+    approvalDecidedBy?: ApprovalDecidedByReading | undefined;
 }
 export declare function structurallyEqual(a: unknown, b: unknown): boolean;
 export type RuleOfferMatch = SdkRuleOfferMatch;
@@ -151,7 +157,6 @@ export interface ApprovalCardRequest {
     origin?: string;
     askClass?: string;
     classes?: readonly string[];
-    ruleStoreUnreadable?: RuleStoreUnreadableKind;
 }
 export type ApprovalCardPort = (req: ApprovalCardRequest) => Promise<ApprovalCardDecision>;
 export declare function installApprovalCardPort(port: ApprovalCardPort | null): () => void;
@@ -164,6 +169,11 @@ export declare function approvalCardPortFor(sessionKey: string): ApprovalCardPor
 export declare function _resetApprovalCardPortForTest(): void;
 export declare function surfaceApprovalCard(req: ApprovalCardRequest): Promise<ApprovalCardDecision>;
 export declare function surfaceFsApprovalAndDecide(deps: FsApprovalWireDeps, taskId: string, argsByCall: Map<string, unknown>, signal?: AbortSignal, parkGatedCallId?: string): Promise<FsApprovalOutcome>;
+export interface BoundSkillGrantsWire {
+    readonly skill: string | null;
+    readonly allowedTools: readonly string[];
+    readonly disallowedTools: readonly string[];
+}
 export interface ToolApprovalFrame {
     type: 'tool_approval' | 'tool_approval_complete';
     approvalId: string;
@@ -178,13 +188,14 @@ export interface ToolApprovalFrame {
     sourceAgentName?: string;
     governanceForced?: true;
     delegation?: ToolApprovalDelegation;
-    ruleSuggestions?: RuleSuggestion[];
     ruleOffers?: readonly WireRuleOffer[];
     ruleOffersAbsence?: string;
     denialLimitFallback?: DenialLimitFallback;
-    ruleStoreUnreadable?: string;
     persistedRuleShadowed?: string;
     allowRuleShadowed?: readonly AllowRuleShadowedWireMember[];
+    boundGrantDigest?: string;
+    boundGrants?: BoundSkillGrantsWire;
+    classifierNoRuling?: string;
     probeCause?: unknown;
     probeReason?: string;
     rememberRefused?: true;
@@ -212,7 +223,7 @@ export interface ToolApprovalDelegation {
     depth: number;
     agentName?: string;
 }
-export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleSuggestions", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "ruleStoreUnreadable", "readRootCandidate", "mandated", "mandate", "origin", "askClass", "classes", "inputHasBidi", "parked", "persistedRuleShadowed", "allowRuleShadowed", "probeCause", "probeReason", "rememberRefused", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome"];
+export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "readRootCandidate", "mandated", "mandate", "origin", "askClass", "classes", "inputHasBidi", "parked", "persistedRuleShadowed", "allowRuleShadowed", "probeCause", "probeReason", "rememberRefused", "boundGrantDigest", "boundGrants", "classifierNoRuling", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome"];
 export interface ApprovalMandatedFacts {
     readonly mandated?: true;
     readonly ruleOffersAbsence?: string;
@@ -233,11 +244,22 @@ export interface RespondToolApprovalOpts {
     persistRuleBatchOfferIndex?: number;
     note?: string;
     settledBy?: 'policy';
+    decidedBy?: 'policy';
 }
 export type RespondToolApprovalFn = (approvalId: string, decision: ToolApprovalRespondDecision, opts?: RespondToolApprovalOpts) => Promise<ToolApprovalRespondAck | void>;
 export type ToolApprovalRespondAckView = ToolApprovalRespondAck;
 export type PersistedRuleAnchor = SdkPersistedRuleAnchor;
 export declare function readToolApprovalRespondAck(v: unknown): ToolApprovalRespondAckView | undefined;
+export interface ToolApprovalRespondParkingView {
+    readonly approvalId: string;
+    readonly retryAfterMs?: number;
+    readonly decidePath?: string;
+}
+export declare function decisionAttributionKeyOf(reading: ApprovalDecidedByReading | undefined, denySettledBy: ApprovalDenySettledBy | undefined): {
+    decidedBy: 'policy';
+} | {
+    settledBy: 'policy';
+} | Record<never, never>;
 export interface ToolApprovalFrameOutcome {
     decision: ToolApprovalRespondDecision | 'unresolved';
     ack?: ToolApprovalRespondAckView;
@@ -248,6 +270,8 @@ export interface ToolApprovalFrameOutcome {
     denyReason?: string;
     denyAttributionRefusal?: DenyAttributionRefusalDetail;
     denyAttributionDropped?: true;
+    denyAttributionRenamed?: true;
+    parking?: ToolApprovalRespondParkingView;
 }
 interface ToolApprovalRespondRefusalFields {
     status?: number;
@@ -265,11 +289,12 @@ export declare function readToolApprovalRespondRefusal(err: unknown): ToolApprov
 export declare function isToolApprovalFrame(ev: unknown): ev is ToolApprovalFrame;
 export declare function readDenialLimitFallback(v: unknown): DenialLimitFallback | undefined;
 export declare function readRuleOffers(v: unknown): RuleOffer[] | undefined;
-export declare function readRuleOfferSupply(offers: unknown, legacy: unknown): RuleOffer[] | undefined;
+export declare function readRuleOfferSupply(offers: unknown): RuleOffer[] | undefined;
 export interface ToolApprovalFrameLaneOpts {
     approvalDecisionNoteCapable?: boolean;
     respondFreeFormRulesCapable?: boolean;
     respondBatchRuleOffersCapable?: boolean;
+    approvalDecidedBy?: ApprovalDecidedByReading | undefined;
     windowIsCurrent?: boolean;
     argsUnavailable?: true;
 }