@sema-agent/client-core 0.93.1 → 0.94.0

package/dist/ownKey.js

@@ -22,3 +22,13 @@ export function readOwnDataValue(v, key) {
     const d = Object.getOwnPropertyDescriptor(v, key);
     return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
 }
+export function readFrameStringKey(frame, key) {
+    try {
+        if (frame === null || typeof frame !== 'object' || Array.isArray(frame))
+            return undefined;
+        return readOwnDataNonEmptyString(frame, key);
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/peerLaneCapability.js

@@ -1,18 +1,23 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
 export function projectPeerLaneCapability(caps) {
-    if (caps === null || typeof caps !== 'object')
-        return undefined;
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-        return undefined;
-    if (!Object.hasOwn(caps, 'peerLane'))
-        return { kind: 'not_reported' };
-    const v = caps.peerLane;
-    if (v === undefined)
-        return { kind: 'not_reported' };
-    if (typeof v !== 'boolean')
+    try {
+        if (caps === null || typeof caps !== 'object')
+            return undefined;
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'peerLane'))
+            return { kind: 'not_reported' };
+        const v = caps.peerLane;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        if (typeof v !== 'boolean')
+            return undefined;
+        return v ? { kind: 'present' } : { kind: 'absent' };
+    }
+    catch {
         return undefined;
-    return v ? { kind: 'present' } : { kind: 'absent' };
+    }
 }
 const reader = createEngineCapReader({
     name: 'peerLane',

package/dist/permissionRuleIssue.js

@@ -31,7 +31,7 @@ const ISSUE_SENTENCES = Object.freeze({
     'unsupported.param_unknown': 'this parameter rule is not supported: the tool carries no such parameter, so it could never match',
     'unsupported.param_non_scalar': 'this parameter rule is not supported: that parameter holds an object or an array, so it could never match',
     'unsupported.tool_unknown': "this rule is not supported on this leg: the resolver it supplied does not know the tool, so the rule's face cannot be checked",
-    'unsupported.path_base': 'this path rule is not supported as spelled: it needs a base this policy was not given, so it would reach nothing and is refused rather than compiled',
+    'unsupported.path_base': 'this path rule is not supported as spelled: the base it is relative to is missing or is not a usable absolute path, so it would reach nothing and is refused rather than compiled',
     'unsupported.mcp_paren': 'a parenthesised parameter rule is not supported on an MCP tool name',
     'unsupported.covering_paren': 'a parenthesised parameter rule is not supported on a covering protocol name — the parameter grammar is keyed by an exact tool name, so no mounted tool could ever bear it',
     'invalid.allow_param_rule': 'this rule is invalid: an allow rule cannot carry a parameter pattern — only bare tool rules auto-allow',

package/dist/permissionRulesWriteCapability.js

@@ -1,18 +1,23 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
 export function projectPermissionRulesWriteCapability(caps) {
-    if (caps === null || typeof caps !== 'object')
-        return undefined;
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-        return undefined;
-    if (!Object.hasOwn(caps, 'permissionRulesWrite'))
-        return { kind: 'not_reported' };
-    const v = caps.permissionRulesWrite;
-    if (v === undefined)
-        return { kind: 'not_reported' };
-    if (typeof v !== 'boolean')
+    try {
+        if (caps === null || typeof caps !== 'object')
+            return undefined;
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
+            return undefined;
+        if (!Object.hasOwn(caps, 'permissionRulesWrite'))
+            return { kind: 'not_reported' };
+        const v = caps.permissionRulesWrite;
+        if (v === undefined)
+            return { kind: 'not_reported' };
+        if (typeof v !== 'boolean')
+            return undefined;
+        return v ? { kind: 'present' } : { kind: 'absent' };
+    }
+    catch {
         return undefined;
-    return v ? { kind: 'present' } : { kind: 'absent' };
+    }
 }
 const reader = createEngineCapReader({
     name: 'permissionRulesWrite',

package/dist/permissionsAllowGrantCapability.d.ts

@@ -5,6 +5,7 @@ export type PermissionsAllowGrantReading = {
 } | {
     kind: 'present';
     grants: boolean;
+    layer?: boolean;
 };
 export declare function projectPermissionsAllowGrantCapability(caps: unknown): PermissionsAllowGrantReading | undefined;
 export declare function noteEngineCapsForPermissionsAllowGrant(baseUrl: string, caps: unknown, opts?: {
@@ -12,6 +13,7 @@ export declare function noteEngineCapsForPermissionsAllowGrant(baseUrl: string,
 }): void;
 export declare function observedPermissionsAllowGrant(baseUrl?: string | undefined): PermissionsAllowGrantReading;
 export declare function permissionsAllowGrantAvailable(reading: PermissionsAllowGrantReading): boolean;
+export declare function allowWireForm(reading: PermissionsAllowGrantReading): 'layer' | 'grant' | 'off';
 export declare function allowRulesGate(reading: PermissionsAllowGrantReading, settingsRead: 'clean' | 'partial' | 'unreadable' | undefined): 'open' | 'capability_off' | 'settings_read_not_clean';
 export declare function permissionsAllowGrantDoctorDetail(reading: PermissionsAllowGrantReading, settingsRead?: 'clean' | 'partial' | 'unreadable'): string;
 export declare function forgetPermissionsAllowGrantReading(baseUrl: string | undefined): void;

package/dist/permissionsAllowGrantCapability.js

@@ -1,25 +1,39 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader } from './engineCapReader.js';
+import { hasCoreValuePort } from './coreValuePorts.js';
 const ALLOW_GRANT_CAP_PATH = ['settings', 'permissions', 'allowGrant'];
+const ALLOW_LAYER_CAP_LEAF = 'allowLayer';
 export function projectPermissionsAllowGrantCapability(caps) {
-    if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-        return undefined;
-    let node = caps;
-    for (let i = 0; i < ALLOW_GRANT_CAP_PATH.length; i++) {
-        const seg = ALLOW_GRANT_CAP_PATH[i];
-        if (!Object.hasOwn(node, seg))
-            return { kind: 'not_reported' };
-        const v = node[seg];
-        if (v === undefined)
-            return { kind: 'not_reported' };
-        if (i === ALLOW_GRANT_CAP_PATH.length - 1) {
-            return typeof v === 'boolean' ? { kind: 'present', grants: v } : undefined;
-        }
-        if (v === null || typeof v !== 'object' || Array.isArray(v))
+    try {
+        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
             return undefined;
-        node = v;
+        let node = caps;
+        for (let i = 0; i < ALLOW_GRANT_CAP_PATH.length; i++) {
+            const seg = ALLOW_GRANT_CAP_PATH[i];
+            if (!Object.hasOwn(node, seg))
+                return { kind: 'not_reported' };
+            const v = node[seg];
+            if (v === undefined)
+                return { kind: 'not_reported' };
+            if (i === ALLOW_GRANT_CAP_PATH.length - 1) {
+                if (typeof v !== 'boolean')
+                    return undefined;
+                if (!Object.hasOwn(node, ALLOW_LAYER_CAP_LEAF))
+                    return { kind: 'present', grants: v };
+                const layer = node[ALLOW_LAYER_CAP_LEAF];
+                if (layer === undefined)
+                    return { kind: 'present', grants: v };
+                return typeof layer === 'boolean' ? { kind: 'present', grants: v, layer } : undefined;
+            }
+            if (v === null || typeof v !== 'object' || Array.isArray(v))
+                return undefined;
+            node = v;
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
     }
-    return undefined;
 }
 const reader = createEngineCapReader({
     name: ALLOW_GRANT_CAP_PATH.join('.'),
@@ -44,6 +58,11 @@ export function permissionsAllowGrantAvailable(reading) {
         return false;
     }
 }
+export function allowWireForm(reading) {
+    if (!permissionsAllowGrantAvailable(reading))
+        return 'off';
+    return ownReadingField(reading, 'layer') === true && hasCoreValuePort('compileAllowList') ? 'layer' : 'grant';
+}
 export function allowRulesGate(reading, settingsRead) {
     if (!permissionsAllowGrantAvailable(reading))
         return 'capability_off';
@@ -62,6 +81,9 @@ function ownReadingField(reading, key) {
 export function permissionsAllowGrantDoctorDetail(reading, settingsRead) {
     const gate = allowRulesGate(reading, settingsRead);
     if (gate === 'open') {
+        if (allowWireForm(reading) === 'layer') {
+            return 'allow rules sent to the engine, content forms included — a matching call is not asked, except for the kinds of question the engine always puts to a person, and an entry the engine reads as granting nothing is reported when the run starts';
+        }
         return 'allow rules sent to the engine — it reads them as rules, not as an exclusive list: a matching call counts as answered for, and the engine still raises its own prompts where it requires them';
     }
     if (gate === 'settings_read_not_clean') {

package/dist/permissionsDeclaration.d.ts

@@ -1,4 +1,5 @@
 import { type PermissionsAllowGrantReading } from './permissionsAllowGrantCapability.js';
+export declare const WIRE_RULE_TRUST_ORDER: readonly ["policySettings", "cliArg", "flagSettings", "session", "userSettings", "localSettings", "projectSettings"];
 declare const RULE_TRUST_ORDER: readonly ["policySettings", "cliArg", "flagSettings", "session", "userSettings", "localSettings", "projectSettings"];
 export type WireRuleOrigin = (typeof RULE_TRUST_ORDER)[number];
 export interface WireRuleOrigins {
@@ -13,6 +14,7 @@ export interface PermissionsDeclarationInput {
     readonly origins?: WireRuleOrigins;
     readonly cliDeny?: readonly string[];
     readonly settingsRead: 'clean' | 'partial' | 'unreadable';
+    readonly clientOwnedServers?: readonly string[];
 }
 export interface PermissionsDeclarationBuckets {
     deny?: string[];
@@ -22,7 +24,7 @@ export interface PermissionsDeclarationBuckets {
 export interface PermissionsDeclaration {
     permissions?: PermissionsDeclarationBuckets;
 }
-export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "unminted_protocol_segment", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate"];
+export declare const PERMISSIONS_KEPT_REASONS: readonly ["allow_capability_off", "settings_read_not_clean", "empty_rule", "paren_in_tool_name", "retired_tool_name", "unprefixed_namespaced_name", "incomplete_protocol_name", "unminted_protocol_segment", "home_relative_path", "compile_refused", "content_form_not_grantable", "judge_failed", "duplicate", "voids_allow_list"];
 export type PermissionsKeptReason = (typeof PERMISSIONS_KEPT_REASONS)[number];
 export interface PermissionsKeptRule {
     rule: string;
@@ -48,6 +50,13 @@ export interface PermissionsDeclarationReport extends PermissionsDeclaration {
     rewritten: PermissionsRewrittenRule[];
     unchecked: PermissionsUncheckedRule[];
     unreachable: PermissionsUnreachableRule[];
+    clientOwned?: PermissionsClientOwnedStatement[];
+}
+export interface PermissionsClientOwnedStatement {
+    server: string;
+    rule?: string;
+    sent: boolean;
+    reason?: PermissionsKeptReason;
 }
 export declare function permissionsDeclaration(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclaration;
 export declare function permissionsDeclarationReport(input: PermissionsDeclarationInput, caps: PermissionsAllowGrantReading): PermissionsDeclarationReport;

package/dist/permissionsDeclaration.js

@@ -1,8 +1,8 @@
-import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
-import { protocolSegmentOf } from './protocolSegment.js';
+import { compileAllowList, hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
+import { clientOwnedServerPrefix, protocolSegmentOf } from './protocolSegment.js';
 import { ruleCompileVerdict } from './ruleCompileVerdict.js';
-import { allowRulesGate } from './permissionsAllowGrantCapability.js';
-const RULE_TRUST_ORDER = [
+import { allowRulesGate, allowWireForm } from './permissionsAllowGrantCapability.js';
+export const WIRE_RULE_TRUST_ORDER = Object.freeze([
     'policySettings',
     'cliArg',
     'flagSettings',
@@ -10,7 +10,8 @@ const RULE_TRUST_ORDER = [
     'userSettings',
     'localSettings',
     'projectSettings',
-];
+]);
+const RULE_TRUST_ORDER = WIRE_RULE_TRUST_ORDER;
 export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'allow_capability_off',
     'settings_read_not_clean',
@@ -25,6 +26,7 @@ export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'content_form_not_grantable',
     'judge_failed',
     'duplicate',
+    'voids_allow_list',
 ]);
 function normalizeLegacyToolName(name) {
     switch (name) {
@@ -104,7 +106,7 @@ function sentFate(wire, toolName, unchecked) {
         ? { sent: true, wire, unchecked, unreachable: segment.minted !== undefined ? { minted: segment.minted } : {} }
         : { sent: true, wire, unchecked };
 }
-function judgeList(rules, behavior) {
+function judgeList(rules, behavior, allowForm = 'grant') {
     let portsChecked = false;
     return rules.map((rule) => {
         if (rule === '')
@@ -138,8 +140,16 @@ function judgeList(rules, behavior) {
             return kept(issue);
         if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))
             return kept('home_relative_path');
-        if (behavior === 'allow')
-            return kept('content_form_not_grantable');
+        if (behavior === 'allow') {
+            if (allowForm !== 'layer')
+                return kept('content_form_not_grantable');
+            const segment = protocolSegmentOf(parsed.toolName);
+            if (segment.kind === 'unminted')
+                return kept('unminted_protocol_segment');
+            if (segment.kind === 'unknown')
+                return kept('judge_failed');
+            return { sent: true, wire: rule, unchecked: false };
+        }
         const verdict = compileVerdict(rule, behavior);
         if (verdict === 'refused')
             return kept('compile_refused');
@@ -149,7 +159,50 @@ function judgeList(rules, behavior) {
 function outsideSettingsFiles(origin) {
     return origin === 'cliArg' || origin === 'session';
 }
-function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
+function allowListVoiders(sent) {
+    const roster = new Set();
+    try {
+        const inertOf = (list) => {
+            const r = compileAllowList(list, 'allow', roster);
+            if (r === undefined || !Array.isArray(r.inert))
+                return undefined;
+            const out = new Map();
+            for (const i of r.inert) {
+                if (i === null || typeof i !== 'object' || typeof i.entry !== 'string' || typeof i.reason !== 'string')
+                    return undefined;
+                if (!out.has(i.entry))
+                    out.set(i.entry, i.reason);
+            }
+            return out;
+        };
+        const whole = inertOf(sent);
+        if (whole === undefined)
+            return 'unknown';
+        const alone = new Map();
+        for (const e of sent) {
+            const one = inertOf([e]);
+            if (one === undefined)
+                return 'unknown';
+            alone.set(e, one.get(e));
+        }
+        const collateral = [...whole].filter(([e]) => alone.get(e) === undefined);
+        if (collateral.length === 0)
+            return new Set();
+        const reasons = new Set(collateral.map(([, r]) => r));
+        const culprits = new Set(sent.filter((e) => { const r = alone.get(e); return r !== undefined && reasons.has(r); }));
+        if (culprits.size === 0)
+            return 'unknown';
+        const rest = sent.filter((e) => !culprits.has(e));
+        const after = inertOf(rest);
+        if (after === undefined || [...after.keys()].some((e) => alone.get(e) === undefined))
+            return 'unknown';
+        return culprits;
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function judgeBucket(raw, behavior, originOf, cli, settingsGate, allowForm = 'grant', dropWire, owned = []) {
     const firstSlot = new Map();
     for (const s of raw)
         if (!firstSlot.has(s.rule))
@@ -171,6 +224,9 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
     const place = (slot, fate) => {
         if (!fate.sent)
             return fate;
+        const dropped = dropWire?.(fate.wire);
+        if (dropped !== undefined)
+            return kept(dropped);
         if (winnerOf.has(fate.wire))
             return kept('duplicate');
         winnerOf.set(fate.wire, slot);
@@ -179,7 +235,7 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
     };
     const appendGroup = (group, origin) => {
         const held = settingsGate !== undefined && !outsideSettingsFiles(origin);
-        const fates = held ? group.map(() => kept(settingsGate)) : judgeList(group, behavior);
+        const fates = held ? group.map(() => kept(settingsGate)) : judgeList(group, behavior, allowForm);
         group.forEach((r, k) => fateOfRule.set(r, place(firstSlot.get(r), fates[k])));
     };
     RULE_TRUST_ORDER.forEach((origin, rank) => {
@@ -187,6 +243,7 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
             cli.slots.forEach((s, k) => (cliFates[k] = place(s, cliFates[k])));
         appendGroup(groups[rank], origin);
     });
+    const ownedFates = owned.map((fate, k) => place({ rule: fate.sent ? fate.wire : '', list: 'allow', at: -1 - k }, fate));
     appendGroup(unknownOrigin, undefined);
     const fates = raw.map((s) => {
         const f = fateOfRule.get(s.rule);
@@ -194,7 +251,15 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
             return f;
         return f.sent || f.reason === 'duplicate' ? kept('duplicate') : f;
     });
-    return { sent, fates: [...fates, ...cliFates], winnerOf };
+    return { sent, fates: [...fates, ...cliFates], winnerOf, ownedFates };
+}
+function clientOwnedFate(server) {
+    if (server.length === 0)
+        return kept('empty_rule');
+    const prefix = clientOwnedServerPrefix(server);
+    if (typeof prefix !== 'string' || prefix.length <= 2 || !prefix.endsWith('__'))
+        return kept('judge_failed');
+    return judgeList([`${prefix}*`], 'allow')[0];
 }
 const WHO = 'permissionsDeclaration';
 function ownField(obj, key, where) {
@@ -248,6 +313,7 @@ function assemble(input, caps) {
     const ask = ruleList(ownField(input, 'ask', ''), 'ask');
     const allow = ruleList(ownField(input, 'allow', ''), 'allow');
     const cliDeny = ruleList(ownField(input, 'cliDeny', ''), 'cliDeny');
+    const ownedServers = [...new Set(ruleList(ownField(input, 'clientOwnedServers', ''), 'clientOwnedServers') ?? [])];
     const originsRaw = ownField(input, 'origins', '');
     let origins = {};
     if (originsRaw !== undefined && originsRaw !== null) {
@@ -267,9 +333,18 @@ function assemble(input, caps) {
     const allowSlots = slotsOf(allow, 'allow');
     const denyJ = judgeBucket(denySlots, 'deny', origins.deny, cli);
     const askJ = judgeBucket(askSlots, 'ask', origins.ask, undefined);
-    const allowJ = gate === 'capability_off'
-        ? { sent: [], fates: allowSlots.map(() => kept('allow_capability_off')), winnerOf: new Map() }
-        : judgeBucket(allowSlots, 'allow', origins.allow, undefined, gate === 'settings_read_not_clean' ? 'settings_read_not_clean' : undefined);
+    const allowForm = allowWireForm(caps) === 'layer' ? 'layer' : 'grant';
+    const settingsGate = gate === 'settings_read_not_clean' ? 'settings_read_not_clean' : undefined;
+    let allowJ = gate === 'capability_off'
+        ? { sent: [], fates: allowSlots.map(() => kept('allow_capability_off')), winnerOf: new Map(), ownedFates: ownedServers.map(() => kept('allow_capability_off')) }
+        : judgeBucket(allowSlots, 'allow', origins.allow, undefined, settingsGate, allowForm, undefined, ownedServers.map(clientOwnedFate));
+    if (gate !== 'capability_off' && allowForm === 'layer' && allowJ.sent.length > 0) {
+        const voiders = allowListVoiders(allowJ.sent);
+        if (voiders === 'unknown' || voiders.size > 0) {
+            const drop = voiders === 'unknown' ? () => 'judge_failed' : (w) => (voiders.has(w) ? 'voids_allow_list' : undefined);
+            allowJ = judgeBucket(allowSlots, 'allow', origins.allow, undefined, settingsGate, allowForm, drop, ownedServers.map(clientOwnedFate));
+        }
+    }
     const buckets = {};
     if (denyJ.sent.length > 0)
         buckets.deny = [...denyJ.sent];
@@ -286,6 +361,11 @@ function assemble(input, caps) {
         ['ask', askSlots, askJ],
         ['allow', allowSlots, allowJ],
     ];
+    const clientOwned = ownedServers.map((server, k) => {
+        const f = allowJ.ownedFates[k];
+        const minted = f.sent ? f.wire : undefined;
+        return f.sent ? { server, rule: minted, sent: true } : { server, sent: false, reason: f.reason };
+    });
     for (const [bucket, slots, j] of rows) {
         slots.forEach((s, k) => {
             const f = j.fates[k];
@@ -294,6 +374,8 @@ function assemble(input, caps) {
         });
         for (const wire of j.sent) {
             const winner = j.winnerOf.get(wire);
+            if (winner.at < 0)
+                continue;
             if (winner.rule !== wire)
                 rewritten.push({ from: winner.rule, to: wire, bucket });
             const f = (winner.list === 'cliDeny' ? j.fates[denySlots.length + winner.at] : j.fates[winner.at]);
@@ -304,7 +386,7 @@ function assemble(input, caps) {
             }
         }
     }
-    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable } };
+    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable, ...(clientOwned.length > 0 ? { clientOwned } : {}) } };
 }
 export function permissionsDeclaration(input, caps) {
     const { buckets } = assemble(input, caps);

package/dist/protocolSegment.d.ts

@@ -9,3 +9,4 @@ export type ProtocolSegment = {
     readonly kind: 'unknown';
 };
 export declare function protocolSegmentOf(name: string): ProtocolSegment;
+export declare function clientOwnedServerPrefix(server: string): string | undefined;

package/dist/protocolSegment.js

@@ -1,4 +1,4 @@
-import { hasCoreValuePort, mintNamespacePrefix, protocolOf } from './coreValuePorts.js';
+import { hasCoreValuePort, mcpNamespace, mintNamespacePrefix, protocolOf } from './coreValuePorts.js';
 import { CORE_PROTOCOL_PREFIXES } from './generated/toolNameTables.js';
 export function protocolSegmentOf(name) {
     if (CORE_PROTOCOL_PREFIXES.some((prefix) => name.startsWith(prefix) && name.slice(prefix.length).split('__')[0] === ''))
@@ -29,3 +29,15 @@ export function protocolSegmentOf(name) {
         return { kind: 'unknown' };
     return minted === `${ns.prefix}${peer}__` ? { kind: 'ok' } : { kind: 'unminted', minted };
 }
+export function clientOwnedServerPrefix(server) {
+    try {
+        const ns = mcpNamespace();
+        if (ns === undefined)
+            return undefined;
+        const prefix = mintNamespacePrefix(ns, server);
+        return typeof prefix === 'string' ? prefix : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/request/taskRequest.d.ts

@@ -1,4 +1,6 @@
 import type { TaskRequest } from '@sema-agent/sdk';
+import { type OutputStyleSeatReading } from '../outputStyleSeatCapability.js';
+import { type ApprovalReachWord } from '../approvalReachWire.js';
 export type RequestLane = 'interactive' | 'print' | 'utility';
 export type TaskRequestLike = Record<string, unknown>;
 export interface RequestFieldSpec {
@@ -10,7 +12,7 @@ export interface RequestFieldSpec {
     whyUtilityLane: string;
 }
 export declare const REQUEST_FIELD_MATRIX: readonly RequestFieldSpec[];
-export declare const LIVE_DEFAULT_FIELDS: readonly ["cwd", "additionalDirectories", "additionalReadDirectories", "forwardSubagentEvents", "retainSubagentSessions", "agents", "appendSystemPrompt|settings.outputStyle", "suggestNextPrompts", "compactionModel", "sessionId(三态解析)"];
+export declare const LIVE_DEFAULT_FIELDS: readonly ["cwd", "additionalDirectories", "additionalReadDirectories", "forwardSubagentEvents", "retainSubagentSessions", "agents", "appendSystemPrompt|settings.outputStyle", "outputStyle(每轮一句座,见位才落)", "suggestNextPrompts", "compactionModel", "sessionId(三态解析)"];
 export interface TaskRequestInput {
     objective: string;
     sessionId: string;
@@ -38,6 +40,7 @@ export interface TaskRequestInput {
     limits?: Record<string, unknown>;
     interactiveTools?: false;
     oneShot?: true;
+    approvalReach?: ApprovalReachWord;
     excludeAllTools?: true;
     outputSchema?: NonNullable<TaskRequest['outputSchema']>;
     outputRetries?: number;
@@ -48,10 +51,10 @@ export interface TaskRequestInput {
     maxThinkingTokens?: number;
     memoryCapture?: 'off';
     memory?: 'off';
-    fileHistory?: 'disabled';
+    fileHistory?: TaskRequest['fileHistory'];
     inheritEnv?: InheritEnvWord;
     requireExistingSession?: TaskRequest['requireExistingSession'];
-    disableSkills?: true;
+    disableSkills?: TaskRequest['disableSkills'];
     rewind?: Record<string, unknown>;
     repo?: string;
     council?: boolean;
@@ -133,6 +136,11 @@ export interface LiveDefaultsInput {
         forAppend: string;
         forOutputStyle: string;
     };
+    outputStyleSeat?: {
+        name: string;
+        turnReminder?: string;
+    };
+    outputStyleSeatReading?: OutputStyleSeatReading;
     suggestNextPrompts?: boolean;
     compactionModel?: string;
     capturedSessionId?: string;

package/dist/request/taskRequest.js

@@ -1,6 +1,8 @@
 import { refuseBadDisableSkills, refuseDisableSkillsConflict } from '../disableSkillsWire.js';
 import { ATTACHMENTS_SPEC_KEYS, AttachmentsSpecRefused } from '../attachmentsWireCaps.js';
 import { retiredAttachmentsKeyOf } from '../taskRequestWords.js';
+import { outputStyleSeatAdmitted } from '../outputStyleSeatCapability.js';
+import { refuseBadApprovalReach } from '../approvalReachWire.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
     { field: 'sessionId', lanes: ['interactive', 'print', 'utility'], live: false, why: '单命名空间(TP-A Step 2):壳 id 即引擎 session id;print 在非 live 下保留 mock 常量', whyUtilityLane: '恒座:side-channel 提交走**独立**会话 id(壳另铸一个,绝不复用用户会话那一个 —— 复用会把这次提交的转录混进用户会话)' },
@@ -48,6 +50,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'resumeAt/resumeAtMode/restoreFiles/rewindFilesTo', lanes: ['interactive'], live: false, why: 'E18 `/rewind` 是交互命令;四键同生同灭(CC-145:core 6.0.0 起 both 臂发 restoreFiles;CC-223 起退役键 rewindFiles 不再有座 —— 交它按表外子键响亮拒;resumeAtMode 是 both/conversation 两臂恒带的排他截语义位)', whyUtilityLane: '无座:回退是交互命令,而 side-channel 是一次性的独立会话,没有可回退的历史' },
     { field: 'clientContext', lanes: ['interactive'], live: false, why: 'IANA 时区 + 可选邮箱 → core 本地化 `# Environment` 的 today;print 同样跑在用户机器上,缺席让引擎误标 (UTC)', gap: true, whyUtilityLane: '无座:本地化 today 的用途在用户会话的环境段,而 side-channel 的系统提示由壳整段给出 —— 这一列我判不准要不要(与本行 `gap` 同一条待办:要补先单独立项)' },
     { field: 'scratchpadDir', lanes: ['interactive'], live: true, why: '[816]③ per-session 暂存目录;print 也有 session,缺席让 `-p` 的工具写不进 exemptDir', gap: true, whyUtilityLane: '无座:per-session 暂存目录是给**工具**写的,零工具面上没人写' },
+    { field: 'approvalReach', lanes: ['print'], live: true, why: '「这条运行上没有人能答审批」的**逐运行声明**(服务端 7.118.0 提交体键,值闭集由引擎 `APPROVAL_REACH` 派生;声明在场 ⇒ 这条腿的问不发活卡、第一个要审批的调用停驻或拒)。只有无人值守车道有座:那里「审批函数在 ≠ 有人能答」;交互车道恒有人坐在对面能答,声明 none 会把能答的人挡在外面。🔴 只在能力读数为真时由片段口 `approvalReachDeclaration` 给值(老服务端对表外键整份 400)', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),没有门控调用、不会问审批 ⇒ 声明没有对象;带上它只会在不认识这一键的老服务端上给这条提交多一种 400' },
 ];
 export const LIVE_DEFAULT_FIELDS = Object.freeze([
     'cwd',
@@ -57,6 +60,7 @@ export const LIVE_DEFAULT_FIELDS = Object.freeze([
     'retainSubagentSessions',
     'agents',
     'appendSystemPrompt|settings.outputStyle',
+    'outputStyle(每轮一句座,见位才落)',
     'suggestNextPrompts',
     'compactionModel',
     'sessionId(三态解析)',
@@ -143,6 +147,7 @@ const INPUT_KEY_ROUTES = {
     limits: row('limits'),
     interactiveTools: row('interactiveTools'),
     oneShot: row('oneShot'),
+    approvalReach: row('approvalReach'),
     outputSchema: row('outputSchema'),
     outputRetries: row('outputRetries'),
     maxCostUsd: row('maxCostUsd'),
@@ -586,7 +591,7 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach'];
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -657,6 +662,7 @@ export function assembleTaskRequest(input, lane) {
     const inheritEnvIn = src.inheritEnv;
     const requireExistingSessionIn = src.requireExistingSession;
     const disableSkillsIn = src.disableSkills;
+    const approvalReachIn = src.approvalReach;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -670,6 +676,7 @@ export function assembleTaskRequest(input, lane) {
         inheritEnv: inheritEnvIn,
         requireExistingSession: requireExistingSessionIn,
         disableSkills: disableSkillsIn,
+        approvalReach: approvalReachIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -684,6 +691,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadInheritEnv(inheritEnvIn);
     refuseBadRequireExistingSession(requireExistingSessionIn);
     refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
+    refuseBadApprovalReach(approvalReachIn, 'buildTaskRequest');
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -839,6 +847,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('inheritEnv') ? { inheritEnv: inheritEnvIn } : {}),
         ...(on('requireExistingSession') ? { requireExistingSession: true } : {}),
         ...(on('disableSkills') ? { disableSkills: true } : {}),
+        ...(on('approvalReach') ? { approvalReach: approvalReachIn } : {}),
         ...(Object.keys(settingsOut).length > 0 ? { settings: settingsOut } : {}),
     };
     return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]) });
@@ -875,6 +884,9 @@ export function applyLiveRequestDefaults(req, host) {
             out.settings = { ...settings, outputStyle: host.selfKnowledge.forOutputStyle };
         }
     }
+    if (out.outputStyle === undefined && host.outputStyleSeat !== undefined && outputStyleSeatAdmitted(host.outputStyleSeatReading)) {
+        out.outputStyle = { ...host.outputStyleSeat };
+    }
     if (out.suggestNextPrompts === undefined &&
         out.verify === undefined &&
         out.cascade === undefined &&

package/dist/resultFrameKeys.d.ts

@@ -0,0 +1,4 @@
+export declare function resultErrorCodeOf(frame: unknown): string | undefined;
+export declare function resultSelectedModelOf(frame: unknown): string | undefined;
+export declare function resultSalvagedResultOf(frame: unknown): string | undefined;
+export declare function resultParkFailedReasonOf(frame: unknown): string | undefined;

package/dist/resultFrameKeys.js

@@ -0,0 +1,13 @@
+import { readFrameStringKey } from './ownKey.js';
+export function resultErrorCodeOf(frame) {
+    return readFrameStringKey(frame, '_sema_error_code');
+}
+export function resultSelectedModelOf(frame) {
+    return readFrameStringKey(frame, '_sema_selected_model');
+}
+export function resultSalvagedResultOf(frame) {
+    return readFrameStringKey(frame, '_sema_salvaged_result');
+}
+export function resultParkFailedReasonOf(frame) {
+    return readFrameStringKey(frame, '_sema_park_failed_reason');
+}