@sema-agent/client-core 0.93.0 → 0.94.0

package/dist/resumeRefusalCopy.js

@@ -149,13 +149,13 @@ export function resumeContextUnavailableFromError(err) {
 }
 export function resumeContextUnavailableContent(d) {
     const sec = d.staleAfterSec;
-    const retention = typeof sec === 'number' && Number.isSafeInteger(sec) && sec >= 1 ? `(本部署的会话保留时长为 ${sec} 秒)` : '';
+    const retention = typeof sec === 'number' && Number.isSafeInteger(sec) && sec >= 1 ? ` (this deployment keeps conversations for ${sec} seconds)` : '';
     const third = (d.runId !== undefined
-        ? '错误里带了这条运行的 id,请用它自己恢复这条运行再决;调大会话保留时长只能避免以后再发生,救不回这一次'
-        : '错误里没有带运行 id,请回到运行列表找到这条运行自己恢复它再决;调大会话保留时长只能避免以后再发生,救不回这一次') + retention;
+        ? "The error carries this run's id: use it to recover the run yourself, then decide again; raising the conversation retention time only prevents this from happening again and cannot rescue this one"
+        : 'The error carries no run id: go back to the run list, find this run and recover it yourself, then decide again; raising the conversation retention time only prevents this from happening again and cannot rescue this one') + retention;
     return [
-        '这个批准无处投递:发起这次运行的会话当前没有可用的上下文来继续它',
-        '什么都没有被决定,你的决定没有被消费,这张卡仍在等待',
+        'This approval has nowhere to be delivered: the conversation that started this run has no usable context to continue it right now',
+        'Nothing was decided and your decision was not consumed; this card is still waiting',
         third,
     ].join(' · ');
 }
@@ -167,17 +167,7 @@ function parkedResumeStartupCauseWord(err) {
     catch {
         named = undefined;
     }
-    if (named !== undefined)
-        return named;
-    try {
-        const extra = err.extra;
-        if (typeof extra !== 'object' || extra === null || Array.isArray(extra))
-            return undefined;
-        return readOwnDataNonEmptyString(extra, 'cause');
-    }
-    catch {
-        return undefined;
-    }
+    return named;
 }
 export function parkedResumeStartupFromError(err, decision) {
     if (typeof err !== 'object' || err === null)

package/dist/retryStatus.js

@@ -1,3 +1,4 @@
+import { displayUntrusted } from './displayUntrusted.js';
 export const BRAIN_STATUS_PHASES = [
     'rate_limited',
     'retrying',
@@ -40,6 +41,7 @@ export function mapBrainStatusToRetry(p, nowMs) {
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
     };
     const stalledDetail = typeof p.detail === 'string' && p.detail.length > 0 ? { detail: p.detail } : {};
+    const shown = (absent) => (typeof p.detail === 'string' ? displayUntrusted(p.detail) : absent);
     const extra = { ...counts, ...cause, ...producerTiming, ...failureStatus, ...waitProgress };
     switch (p.phase) {
         case 'recovered':
@@ -47,20 +49,20 @@ export function mapBrainStatusToRetry(p, nowMs) {
         case 'reconnecting':
             return { kind: 'stalled', deadline, ...extra, ...stalledDetail };
         case 'rate_limited':
-            return { kind: 'error', deadline, ...extra, error: { formatted: p.detail ?? '', rateLimits: null } };
+            return { kind: 'error', deadline, ...extra, error: { formatted: shown(''), rateLimits: null } };
         case 'circuit_open':
             return {
                 kind: 'error',
                 deadline,
                 ...extra,
-                error: { formatted: p.detail ?? 'Service temporarily unavailable', isNetworkDown: true },
+                error: { formatted: shown('Service temporarily unavailable'), isNetworkDown: true },
             };
         case 'gave_up':
-            return { kind: 'error', deadline, terminal: true, ...extra, error: { formatted: p.detail ?? '' } };
+            return { kind: 'error', deadline, terminal: true, ...extra, error: { formatted: shown('') } };
         case 'waiting_first_token':
             return { kind: 'waiting', deadline, ...extra, error: { formatted: '' } };
         case 'retrying':
-            return { kind: 'error', deadline, ...extra, error: { formatted: p.detail ?? '' } };
+            return { kind: 'error', deadline, ...extra, error: { formatted: shown('') } };
         default:
             return { kind: 'error', deadline, ...extra, error: { formatted: '' } };
     }

package/dist/rewindArchiveCapability.js

@@ -22,15 +22,20 @@ function bitOf(caps, key) {
     return 'malformed';
 }
 export function projectRewindArchiveCapability(caps) {
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        return {
+            kind: 'present',
+            conversationAnchor: bitOf(caps, CAPS_KEYS.conversationAnchor),
+            forkRestore: bitOf(caps, CAPS_KEYS.forkRestore),
+            codeOnly: bitOf(caps, CAPS_KEYS.codeOnly),
+            restoreFilesEpoch: bitOf(caps, CAPS_KEYS.restoreFilesEpoch),
+        };
+    }
+    catch {
         return undefined;
-    return {
-        kind: 'present',
-        conversationAnchor: bitOf(caps, CAPS_KEYS.conversationAnchor),
-        forkRestore: bitOf(caps, CAPS_KEYS.forkRestore),
-        codeOnly: bitOf(caps, CAPS_KEYS.codeOnly),
-        restoreFilesEpoch: bitOf(caps, CAPS_KEYS.restoreFilesEpoch),
-    };
+    }
 }
 const reader = createEngineCapReader({
     name: 'rewindArchive',

package/dist/{hitl/rosterMountedNames.d.ts → rosterMountedNames.d.ts}

@@ -1,2 +1,2 @@
-import type { ToolRosterView } from '../toolRoster.js';
+import type { ToolRosterView } from './toolRoster.js';
 export declare function rosterMountedNames(roster: ToolRosterView | null | undefined): ReadonlySet<string> | 'absent' | 'unreadable';

package/dist/runCancelContext.js

@@ -34,6 +34,7 @@ export function readRunCancelContext(record) {
     };
 }
 import { readRunTerminal } from './runTerminal.js';
+import { SDK_ABORT_CAUSES } from './generated/sdkFactTables.js';
 export const RUN_CANCELLED_CODE = 'cancelled';
 const LIVE_STATUSES = new Set(['running', 'queued', 'suspended', 'needs_review']);
 export function classifyRunAbortCause(record) {
@@ -56,7 +57,7 @@ export function classifyRunAbortCause(record) {
         return { kind: 'run_still_live', status };
     return { kind: 'unknown', ...(read !== null ? { terminal: read.kind } : {}) };
 }
-export const ABORT_CAUSES = Object.freeze(['client_disconnected', 'ask_park_grace_exhausted', 'cancel_verb']);
+export const ABORT_CAUSES = SDK_ABORT_CAUSES;
 function ownDataOf(o, key) {
     const d = Object.getOwnPropertyDescriptor(o, key);
     return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;

package/dist/sealedKeyCapability.js

@@ -7,21 +7,26 @@ function ownNonEmpty(seg, key) {
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
 export function projectSealedKeyCapability(caps) {
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'sealedKey'))
+            return { kind: 'not_reported' };
+        const seg = caps.sealedKey;
+        if (seg === undefined)
+            return { kind: 'not_reported' };
+        if (seg === null || typeof seg !== 'object' || Array.isArray(seg))
+            return undefined;
+        const alg = ownNonEmpty(seg, 'alg');
+        const publicKeyId = ownNonEmpty(seg, 'publicKeyId');
+        const publicKey = ownNonEmpty(seg, 'publicKey');
+        if (alg === undefined || publicKeyId === undefined || publicKey === undefined)
+            return undefined;
+        return { kind: 'present', alg, publicKeyId, publicKey };
+    }
+    catch {
         return undefined;
-    if (!Object.hasOwn(caps, 'sealedKey'))
-        return { kind: 'not_reported' };
-    const seg = caps.sealedKey;
-    if (seg === undefined)
-        return { kind: 'not_reported' };
-    if (seg === null || typeof seg !== 'object' || Array.isArray(seg))
-        return undefined;
-    const alg = ownNonEmpty(seg, 'alg');
-    const publicKeyId = ownNonEmpty(seg, 'publicKeyId');
-    const publicKey = ownNonEmpty(seg, 'publicKey');
-    if (alg === undefined || publicKeyId === undefined || publicKey === undefined)
-        return undefined;
-    return { kind: 'present', alg, publicKeyId, publicKey };
+    }
 }
 const reader = createEngineCapReader({
     name: 'sealedKey',

package/dist/seatContract.d.ts

@@ -29,6 +29,7 @@ export interface LocalSessionRecord {
     engineSessionId?: string;
     model?: string;
     title?: string;
+    cwd?: string;
     isRunning: boolean;
     createdAt: string;
     lastActivityAt?: string;
@@ -99,6 +100,22 @@ export interface LocalSessionEvent {
     chrome?: SeatChromeEnvelope;
 }
 export declare const HITL_RESOLUTION_OUTCOMES: readonly string[];
+export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder"];
+export type SeatCapabilityName = (typeof SEAT_CAPABILITY_NAMES)[number];
+export interface SeatCapabilitiesState {
+    pickFolder?: boolean;
+}
+export type SeatCapabilityReading = {
+    readonly kind: "reported";
+    readonly available: boolean;
+} | {
+    readonly kind: "not_reported";
+} | {
+    readonly kind: "malformed";
+};
+export declare function seatCapability(state: unknown, name: SeatCapabilityName): SeatCapabilityReading;
+export declare function watchSeatCapability(store: EipcStoreClient<SeatCapabilitiesState> | undefined, name: SeatCapabilityName, onReading: (reading: SeatCapabilityReading) => void): () => void;
+export declare function seatCapabilityUnavailableDetail(name: SeatCapabilityName, reading: SeatCapabilityReading): string | undefined;
 export interface StartSessionOptions {
     model?: string;
     title?: string;
@@ -227,11 +244,13 @@ export interface LocalSessionsApi {
     uploadAttachment(req: AttachmentUploadRequest): Promise<AttachmentUploadReceipt>;
     listModels(): Promise<SeatModelCatalog>;
     applyModelConfig(req: ApplyModelConfigRequest): Promise<ApplyModelConfigResult>;
+    pickFolder(): Promise<string | null>;
     onEvent(cb: (ev: LocalSessionEvent) => void): () => void;
     onToolPermissionRequest(cb: (req: ToolPermissionRequest) => void): () => void;
     sessionsStateStore: EipcStoreClient<SessionsState>;
     focusedSessionStateStore: EipcStoreClient<FocusedSessionState>;
     settingsStateStore: EipcStoreClient<SettingsState>;
+    seatCapabilitiesStateStore: EipcStoreClient<SeatCapabilitiesState>;
 }
 export declare function isLocalSessionRecord(s: unknown): s is LocalSessionRecord;
 export declare function isToolPermissionRequest(r: unknown): r is ToolPermissionRequest;
@@ -260,12 +279,12 @@ export interface ApplyModelConfigResult {
 export declare function isSeatModelCatalog(v: unknown): v is SeatModelCatalog;
 export declare function isSendMessageAck(v: unknown): v is SendMessageAck;
 export declare const LOCAL_SESSIONS_SPEC: EipcServiceSpec;
-export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "onEvent", "onToolPermissionRequest"];
-export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore"];
+export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "onEvent", "onToolPermissionRequest"];
+export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore", "seatCapabilitiesStateStore"];
 export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "messages", "error", "errorCategory", "code", "request", "data", "sources", "permissionMode", "session", "userMessageUuid", "hasPreClearSession", "requestId", "outcome", "chrome"];
 export declare const TOOL_PERMISSION_REQUEST_KEYS: readonly ["requestId", "sessionId", "toolName", "toolCallId", "input", "message", "toctouBinding", "createdAtMs", "governanceForced", "delegation", "mandated", "mandate", "origin", "ruleOffersAbsence", "askClass", "classes"];
-export declare const LOCAL_SESSION_RECORD_KEYS: readonly ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
+export declare const LOCAL_SESSION_RECORD_KEYS: readonly ["sessionId", "engineSessionId", "model", "title", "cwd", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
 export declare const SEND_MESSAGE_REQUEST_KEYS: readonly ["sessionId", "text", "model", "userMessageUuid", "permissionMode", "attachmentIds", "reasoningEffort", "retainBackgroundProcesses", "forwardSubagentEvents", "retainSubagentSessions", "settings", "scenario"];
 export declare const SEAT_SEND_MESSAGE_KEY_ORIGINS: {
     readonly sessionId: {
@@ -311,7 +330,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     readonly LocalSessionRecord: {
         readonly guard: "isLocalSessionRecord";
         readonly check: (s: unknown) => SeatValidation;
-        readonly validated: readonly ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
+        readonly validated: readonly ["sessionId", "engineSessionId", "model", "title", "cwd", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"];
         readonly unchecked: readonly [];
     };
     readonly ToolPermissionRequest: {
@@ -335,7 +354,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
             readonly why: "展示增强位(CC-203),权威窄读在卡口与过境口(闭集六词精确字节,表外不上座);座位门不设第二判官,理由同 mandated。消费端经 readApprovalMandate 读,表外值读成缺席。";
         }, {
             readonly key: "origin";
-            readonly why: "喂姿态谓词 askSurvivesPosture 的安全位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 宿主报了没命中时姿态谓词可答可以放(放宽方向:真出身若是必问词就丢了);表外串读成不认识的词 ⇒ 答 unknown,宿主退回自己的规则(不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。";
+            readonly why: "喂自动车道单一判定 automaticAnswerVerdict 的出身位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 判定少一路必问证据(放宽方向:真出身若是收词、而卡上的类集恰没带它对应的类,这一路就丢了);表外串 ⇒ 不是收词,出身这一路不起作用(类集照读,不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。";
         }, {
             readonly key: "askClass";
             readonly why: "展示位(CC-284),权威成对窄读在卡口与过境口 toolPermissionRequestAskBits(与 classes 同在同缺、首员等于 askClass、不判成员、不重排);座位门不设第二判官,理由同 mandated(为一个展示位拒掉整条 request = 把安全 ask 丢给引擎超时拒)。坏形读成缺席 ⇒ 卡上不显示问类,不改决断;缺席不是「普通问」。不经过境口自铸座位请求的宿主要自己按同一把成对窄读。";
@@ -419,6 +438,11 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
         readonly validated: readonly ["defaultModel", "engineVersion", "dataRoot"];
         readonly unchecked: readonly [];
     };
+    readonly SeatCapabilitiesState: {
+        readonly check: (v: unknown) => SeatValidation;
+        readonly validated: readonly ["pickFolder"];
+        readonly unchecked: readonly [];
+    };
     readonly SeatModelInfo: {
         readonly check: (v: unknown) => SeatValidation;
         readonly validated: readonly ["id", "name", "provider", "contextWindow", "maxOutputTokens"];
@@ -441,6 +465,10 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
 };
 export declare const SEAT_VALIDATOR_COVERAGE_EXEMPT: readonly [{
+    readonly label: "PickFolderResult";
+    readonly check: (v: unknown) => SeatValidation;
+    readonly why: "载荷是**串或 null**(选中的路径 / 用户取消,CC-469),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由 run-seat-wave2-test.mjs ST1-1 承担:认 null 与非空串、拒空串 / 数 / undefined / 对象 / 布尔五形。";
+}, {
     readonly label: "BooleanAck";
     readonly check: (v: unknown) => SeatValidation;
     readonly why: "载荷是**裸布尔**(queue 三件 + setModel 的 CC 形回执,false = too-late/no-op),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由 J 段承担:认 true/false、拒非布尔(对象 / 字符串 'true' / null / undefined 四形逐一投毒)。";

package/dist/seatContract.js

@@ -72,6 +72,101 @@ export const HITL_RESOLUTION_OUTCOMES = [
     "decline",
     "cancel",
 ];
+export const SEAT_CAPABILITY_NAMES = Object.freeze(["pickFolder"]);
+const notReported = () => Object.freeze({ kind: "not_reported" });
+const malformedReading = () => Object.freeze({ kind: "malformed" });
+const reported = (available) => Object.freeze({ kind: "reported", available });
+export function seatCapability(state, name) {
+    if (state === undefined)
+        return notReported();
+    try {
+        if (typeof state !== "object" || state === null || Array.isArray(state))
+            return malformedReading();
+        const proto = Object.getPrototypeOf(state);
+        if (proto !== Object.prototype && proto !== null)
+            return malformedReading();
+        const desc = Object.getOwnPropertyDescriptor(state, name);
+        if (desc === undefined)
+            return notReported();
+        if (!("value" in desc))
+            return malformedReading();
+        const v = desc.value;
+        if (v === undefined)
+            return notReported();
+        if (typeof v === "boolean")
+            return reported(v);
+        return malformedReading();
+    }
+    catch {
+        return malformedReading();
+    }
+}
+export function watchSeatCapability(store, name, onReading) {
+    if (store === undefined || store === null) {
+        onReading(notReported());
+        return () => { };
+    }
+    let active = true;
+    let off;
+    try {
+        if (typeof store !== "object" || typeof store.onStateChange !== "function" || typeof store.getStateSync !== "function") {
+            onReading(malformedReading());
+            return () => { };
+        }
+        off = store.onStateChange((state) => {
+            if (active)
+                onReading(seatCapability(state, name));
+        });
+    }
+    catch {
+        onReading(malformedReading());
+        return () => { };
+    }
+    let current;
+    try {
+        current = seatCapability(store.getStateSync(), name);
+    }
+    catch {
+        current = malformedReading();
+    }
+    if (active)
+        onReading(current);
+    return () => {
+        if (!active)
+            return;
+        active = false;
+        try {
+            if (typeof off === "function")
+                off();
+        }
+        catch {
+        }
+    };
+}
+const SEAT_CAPABILITY_PHRASES = Object.freeze({
+    pickFolder: Object.freeze({ action: "Opening a folder", ability: "show a folder picker", support: "folder picker support" }),
+});
+export function seatCapabilityUnavailableDetail(name, reading) {
+    const phrase = Object.hasOwn(SEAT_CAPABILITY_PHRASES, name)
+        ? SEAT_CAPABILITY_PHRASES[name]
+        : { action: "This action", ability: "do this", support: "support for it" };
+    let kind;
+    let available;
+    try {
+        kind = reading?.kind;
+        available = reading?.available;
+    }
+    catch {
+        kind = undefined;
+    }
+    if (kind === "reported" && available === true)
+        return undefined;
+    if (kind === "reported" && available === false)
+        return `${phrase.action} isn't available: this app reports it can't ${phrase.ability}.`;
+    if (kind === "not_reported")
+        return `${phrase.action} isn't available: this app hasn't reported ${phrase.support}.`;
+    return `${phrase.action} isn't available: this app's support report couldn't be read.`;
+}
 export const PERMISSION_MODE_INTENTS = [...PERMISSION_MODE_WORDS];
 export const ATTACHMENT_IDS_PER_TASK_CAP = 16;
 export const SEAT_REASONING_EFFORTS = [...REASONING_EFFORT_WORDS];
@@ -90,6 +185,9 @@ const checkLocalSessionRecord = (s) => {
         return bad("model must be a string when present", "model");
     if (!optionalString(s.title))
         return bad("title must be a string when present", "title");
+    if (!isAbsent(s.cwd) && (typeof s.cwd !== "string" || s.cwd.length === 0)) {
+        return bad("cwd must be a non-empty path string when present (absent = no folder chosen)", "cwd");
+    }
     if (typeof s.isRunning !== "boolean")
         return bad("isRunning must be a boolean", "isRunning");
     if (typeof s.createdAt !== "string")
@@ -391,6 +489,33 @@ const checkSettingsState = (v) => {
         return bad("dataRoot must be a string when present", "dataRoot");
     return true;
 };
+const checkPickFolderResult = (v) => v === null || (typeof v === "string" && v.length > 0)
+    ? true
+    : bad("pickFolder result must be null (cancelled) or a non-empty path string");
+const checkSeatCapabilitiesState = (v) => {
+    try {
+        if (!isObject(v) || Array.isArray(v))
+            return bad("seat capabilities state is not an object");
+        const proto = Object.getPrototypeOf(v);
+        if (proto !== Object.prototype && proto !== null)
+            return bad("seat capabilities state is not a plain object");
+        for (const k of Reflect.ownKeys(v)) {
+            const name = typeof k === "string" ? k : String(k);
+            if (typeof k !== "string" || !inTuple(SEAT_CAPABILITY_NAMES, k)) {
+                return bad(`${name} is not a registered seat capability (${SEAT_CAPABILITY_NAMES.join("|")})`, name);
+            }
+            const desc = Object.getOwnPropertyDescriptor(v, k);
+            if (desc === undefined || !("value" in desc))
+                return bad(`${k} must be a plain data property (accessors are refused)`, k);
+            if (!isAbsent(desc.value) && typeof desc.value !== "boolean")
+                return bad(`${k} must be a boolean when present`, k);
+        }
+        return true;
+    }
+    catch {
+        return bad("seat capabilities state could not be read");
+    }
+};
 export const LOCAL_SESSIONS_SPEC = {
     ns: "sema.web",
     service: "LocalSessions",
@@ -410,6 +535,7 @@ export const LOCAL_SESSIONS_SPEC = {
         uploadAttachment: { kind: "invoke", check: checkAttachmentUploadReceipt },
         listModels: { kind: "invoke", check: checkSeatModelCatalog },
         applyModelConfig: { kind: "invoke", check: checkApplyModelConfigResult },
+        pickFolder: { kind: "invoke", check: checkPickFolderResult },
         onEvent: { kind: "event", check: checkLocalSessionEvent },
         onToolPermissionRequest: { kind: "event", check: checkToolPermissionRequest },
     },
@@ -417,6 +543,7 @@ export const LOCAL_SESSIONS_SPEC = {
         sessionsState: { check: checkSessionsState },
         focusedSessionState: { check: checkFocusedSessionState },
         settingsState: { check: checkSettingsState },
+        seatCapabilitiesState: { check: checkSeatCapabilitiesState },
     },
 };
 export const SEAT_METHOD_NAMES = [
@@ -435,6 +562,7 @@ export const SEAT_METHOD_NAMES = [
     "uploadAttachment",
     "listModels",
     "applyModelConfig",
+    "pickFolder",
     "onEvent",
     "onToolPermissionRequest",
 ];
@@ -442,6 +570,7 @@ export const SEAT_STORE_PROPS = [
     "sessionsStateStore",
     "focusedSessionStateStore",
     "settingsStateStore",
+    "seatCapabilitiesStateStore",
 ];
 export const SEAT_EVENT_METHOD_NAMES = ["onEvent", "onToolPermissionRequest"];
 export const LOCAL_SESSION_EVENT_KEYS = [
@@ -486,6 +615,7 @@ export const LOCAL_SESSION_RECORD_KEYS = [
     "engineSessionId",
     "model",
     "title",
+    "cwd",
     "isRunning",
     "createdAt",
     "lastActivityAt",
@@ -533,7 +663,7 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
     LocalSessionRecord: {
         guard: "isLocalSessionRecord",
         check: checkLocalSessionRecord,
-        validated: ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"],
+        validated: ["sessionId", "engineSessionId", "model", "title", "cwd", "isRunning", "createdAt", "lastActivityAt", "queuedMessages", "parked"],
         unchecked: [],
     },
     ToolPermissionRequest: {
@@ -563,7 +693,7 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
             },
             {
                 key: "origin",
-                why: "喂姿态谓词 askSurvivesPosture 的安全位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 宿主报了没命中时姿态谓词可答可以放(放宽方向:真出身若是必问词就丢了);表外串读成不认识的词 ⇒ 答 unknown,宿主退回自己的规则(不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。",
+                why: "喂自动车道单一判定 automaticAnswerVerdict 的出身位(CC-203),按开集读(非空串原文字节、词表不校);权威窄读在卡口与过境口 toolPermissionRequestAskBits,座位门不设第二判官(为一个位拒掉整条 request = 把安全 ask 丢给引擎 TTL deny)。坏形的两种失效方向:非串 / 空串读成缺席 ⇒ 判定少一路必问证据(放宽方向:真出身若是收词、而卡上的类集恰没带它对应的类,这一路就丢了);表外串 ⇒ 不是收词,出身这一路不起作用(类集照读,不放宽)。不经过境口自铸座位请求的宿主要自己按同一把窄读。",
             },
             {
                 key: "askClass",
@@ -670,6 +800,11 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
         validated: ["defaultModel", "engineVersion", "dataRoot"],
         unchecked: [],
     },
+    SeatCapabilitiesState: {
+        check: checkSeatCapabilitiesState,
+        validated: ["pickFolder"],
+        unchecked: [],
+    },
     SeatModelInfo: {
         check: (v) => checkSeatModelInfo(v, 0),
         validated: ["id", "name", "provider", "contextWindow", "maxOutputTokens"],
@@ -692,6 +827,11 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
     },
 };
 export const SEAT_VALIDATOR_COVERAGE_EXEMPT = [
+    {
+        label: "PickFolderResult",
+        check: checkPickFolderResult,
+        why: "载荷是**串或 null**(选中的路径 / 用户取消,CC-469),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由 run-seat-wave2-test.mjs ST1-1 承担:认 null 与非空串、拒空串 / 数 / undefined / 对象 / 布尔五形。",
+    },
     {
         label: "BooleanAck",
         check: checkBooleanAck,
@@ -723,5 +863,6 @@ const _seatContractPins = [
     true, true, true, true, true, true, true, true,
     true, true, true, true, true, true, true, true,
     true, true, true, true, true, true, true, true,
+    true, true, true, true, true,
 ];
 void _seatContractPins;

package/dist/sessionPolicyCapability.js

@@ -1,17 +1,22 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
 export function projectSessionPolicyCapability(caps) {
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-        return undefined;
-    const c = caps;
-    if (!Object.hasOwn(c, 'sessionPolicy'))
-        return { kind: 'not_reported' };
-    const v = c.sessionPolicy;
-    if (v === undefined)
-        return { kind: 'not_reported' };
-    if (typeof v !== 'boolean')
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        const c = caps;
+        if (!Object.hasOwn(c, 'sessionPolicy'))
+            return { kind: 'not_reported' };
+        const v = c.sessionPolicy;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        if (typeof v !== 'boolean')
+            return undefined;
+        return v ? { kind: 'present' } : { kind: 'absent' };
+    }
+    catch {
         return undefined;
-    return v ? { kind: 'present' } : { kind: 'absent' };
+    }
 }
 const reader = createEngineCapReader({
     name: 'sessionPolicy',

package/dist/sessionReadRedactionCapability.d.ts

@@ -0,0 +1,16 @@
+export type SessionReadRedactionReading = {
+    kind: 'unobserved';
+} | {
+    kind: 'not_reported';
+} | {
+    kind: 'present';
+    value: true;
+};
+export declare function projectSessionReadRedactionCapability(caps: unknown): SessionReadRedactionReading | undefined;
+export declare function noteEngineCapsForSessionReadRedaction(baseUrl: string, caps: unknown, opts?: {
+    generation?: number;
+}): void;
+export declare function observedSessionReadRedaction(baseUrl?: string | undefined): SessionReadRedactionReading;
+export declare function sessionReadRedactionAdmitted(reading: SessionReadRedactionReading | undefined): boolean;
+export declare function forgetSessionReadRedactionReading(baseUrl: string | undefined): void;
+export declare function __resetSessionReadRedactionReadingsForTests(): void;

package/dist/sessionReadRedactionCapability.js

@@ -0,0 +1,47 @@
+import { engineWireTarget } from './engineWireTarget.js';
+import { createEngineCapReader } from './engineCapReader.js';
+import { readOwnDataValue } from './ownKey.js';
+export function projectSessionReadRedactionCapability(caps) {
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'sessionReadRedaction'))
+            return { kind: 'not_reported' };
+        const v = caps.sessionReadRedaction;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        return v === true ? { kind: 'present', value: true } : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const reader = createEngineCapReader({
+    name: 'sessionReadRedaction',
+    project: projectSessionReadRedactionCapability,
+    makeUnobserved: () => ({ kind: 'unobserved' }),
+});
+export function noteEngineCapsForSessionReadRedaction(baseUrl, caps, opts) {
+    reader.note(baseUrl, caps, opts);
+}
+export function observedSessionReadRedaction(baseUrl = engineWireTarget()?.baseUrl) {
+    return reader.observed(baseUrl);
+}
+export function sessionReadRedactionAdmitted(reading) {
+    try {
+        if (reading === null || reading === undefined || typeof reading !== 'object' || Array.isArray(reading))
+            return false;
+        if (readOwnDataValue(reading, 'kind') !== 'present')
+            return false;
+        return readOwnDataValue(reading, 'value') === true;
+    }
+    catch {
+        return false;
+    }
+}
+export function forgetSessionReadRedactionReading(baseUrl) {
+    reader.forget(baseUrl);
+}
+export function __resetSessionReadRedactionReadingsForTests() {
+    reader.__resetForTests();
+}

package/dist/sessionSyncFileHistoryCapability.js

@@ -1,16 +1,21 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
 export function projectSessionSyncFileHistoryCapability(caps) {
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-        return undefined;
-    if (!Object.hasOwn(caps, 'sessionSyncFileHistory'))
-        return { kind: 'not_reported' };
-    const v = caps.sessionSyncFileHistory;
-    if (v === undefined)
-        return { kind: 'not_reported' };
-    if (typeof v !== 'boolean')
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'sessionSyncFileHistory'))
+            return { kind: 'not_reported' };
+        const v = caps.sessionSyncFileHistory;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        if (typeof v !== 'boolean')
+            return undefined;
+        return v ? { kind: 'present' } : { kind: 'absent' };
+    }
+    catch {
         return undefined;
-    return v ? { kind: 'present' } : { kind: 'absent' };
+    }
 }
 const reader = createEngineCapReader({
     name: 'sessionSyncFileHistory',