@sema-agent/client-core 0.93.1 → 0.95.0

package/dist/permissionsDeclaration.js

@@ -1,8 +1,9 @@
-import { hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
-import { protocolSegmentOf } from './protocolSegment.js';
+import { compileAllowList, hasCoreValuePort, protocolOf, retiredToolNames, ruleToolGrammarOf } from './coreValuePorts.js';
+import { clientOwnedServerPrefix, protocolSegmentOf } from './protocolSegment.js';
 import { ruleCompileVerdict } from './ruleCompileVerdict.js';
-import { allowRulesGate } from './permissionsAllowGrantCapability.js';
-const RULE_TRUST_ORDER = [
+import { allowRulesGate, allowWireForm } from './permissionsAllowGrantCapability.js';
+import { THROWN_SLOT_UNREADABLE, readThrownSlot } from './wireFailureShape.js';
+export const WIRE_RULE_TRUST_ORDER = Object.freeze([
     'policySettings',
     'cliArg',
     'flagSettings',
@@ -10,7 +11,8 @@ const RULE_TRUST_ORDER = [
     'userSettings',
     'localSettings',
     'projectSettings',
-];
+]);
+const RULE_TRUST_ORDER = WIRE_RULE_TRUST_ORDER;
 export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'allow_capability_off',
     'settings_read_not_clean',
@@ -25,6 +27,7 @@ export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'content_form_not_grantable',
     'judge_failed',
     'duplicate',
+    'voids_allow_list',
 ]);
 function normalizeLegacyToolName(name) {
     switch (name) {
@@ -104,7 +107,7 @@ function sentFate(wire, toolName, unchecked) {
         ? { sent: true, wire, unchecked, unreachable: segment.minted !== undefined ? { minted: segment.minted } : {} }
         : { sent: true, wire, unchecked };
 }
-function judgeList(rules, behavior) {
+function judgeList(rules, behavior, allowForm = 'grant') {
     let portsChecked = false;
     return rules.map((rule) => {
         if (rule === '')
@@ -138,8 +141,16 @@ function judgeList(rules, behavior) {
             return kept(issue);
         if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))
             return kept('home_relative_path');
-        if (behavior === 'allow')
-            return kept('content_form_not_grantable');
+        if (behavior === 'allow') {
+            if (allowForm !== 'layer')
+                return kept('content_form_not_grantable');
+            const segment = protocolSegmentOf(parsed.toolName);
+            if (segment.kind === 'unminted')
+                return kept('unminted_protocol_segment');
+            if (segment.kind === 'unknown')
+                return kept('judge_failed');
+            return { sent: true, wire: rule, unchecked: false };
+        }
         const verdict = compileVerdict(rule, behavior);
         if (verdict === 'refused')
             return kept('compile_refused');
@@ -149,7 +160,50 @@ function judgeList(rules, behavior) {
 function outsideSettingsFiles(origin) {
     return origin === 'cliArg' || origin === 'session';
 }
-function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
+function allowListVoiders(sent) {
+    const roster = new Set();
+    try {
+        const inertOf = (list) => {
+            const r = compileAllowList(list, 'allow', roster);
+            if (r === undefined || !Array.isArray(r.inert))
+                return undefined;
+            const out = new Map();
+            for (const i of r.inert) {
+                if (i === null || typeof i !== 'object' || typeof i.entry !== 'string' || typeof i.reason !== 'string')
+                    return undefined;
+                if (!out.has(i.entry))
+                    out.set(i.entry, i.reason);
+            }
+            return out;
+        };
+        const whole = inertOf(sent);
+        if (whole === undefined)
+            return 'unknown';
+        const alone = new Map();
+        for (const e of sent) {
+            const one = inertOf([e]);
+            if (one === undefined)
+                return 'unknown';
+            alone.set(e, one.get(e));
+        }
+        const collateral = [...whole].filter(([e]) => alone.get(e) === undefined);
+        if (collateral.length === 0)
+            return new Set();
+        const reasons = new Set(collateral.map(([, r]) => r));
+        const culprits = new Set(sent.filter((e) => { const r = alone.get(e); return r !== undefined && reasons.has(r); }));
+        if (culprits.size === 0)
+            return 'unknown';
+        const rest = sent.filter((e) => !culprits.has(e));
+        const after = inertOf(rest);
+        if (after === undefined || [...after.keys()].some((e) => alone.get(e) === undefined))
+            return 'unknown';
+        return culprits;
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function judgeBucket(raw, behavior, originOf, cli, settingsGate, allowForm = 'grant', dropWire, owned = []) {
     const firstSlot = new Map();
     for (const s of raw)
         if (!firstSlot.has(s.rule))
@@ -171,6 +225,9 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
     const place = (slot, fate) => {
         if (!fate.sent)
             return fate;
+        const dropped = dropWire?.(fate.wire);
+        if (dropped !== undefined)
+            return kept(dropped);
         if (winnerOf.has(fate.wire))
             return kept('duplicate');
         winnerOf.set(fate.wire, slot);
@@ -179,7 +236,7 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
     };
     const appendGroup = (group, origin) => {
         const held = settingsGate !== undefined && !outsideSettingsFiles(origin);
-        const fates = held ? group.map(() => kept(settingsGate)) : judgeList(group, behavior);
+        const fates = held ? group.map(() => kept(settingsGate)) : judgeList(group, behavior, allowForm);
         group.forEach((r, k) => fateOfRule.set(r, place(firstSlot.get(r), fates[k])));
     };
     RULE_TRUST_ORDER.forEach((origin, rank) => {
@@ -187,6 +244,7 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
             cli.slots.forEach((s, k) => (cliFates[k] = place(s, cliFates[k])));
         appendGroup(groups[rank], origin);
     });
+    const ownedFates = owned.map((fate, k) => place({ rule: fate.sent ? fate.wire : '', list: 'allow', at: -1 - k }, fate));
     appendGroup(unknownOrigin, undefined);
     const fates = raw.map((s) => {
         const f = fateOfRule.get(s.rule);
@@ -194,7 +252,15 @@ function judgeBucket(raw, behavior, originOf, cli, settingsGate) {
             return f;
         return f.sent || f.reason === 'duplicate' ? kept('duplicate') : f;
     });
-    return { sent, fates: [...fates, ...cliFates], winnerOf };
+    return { sent, fates: [...fates, ...cliFates], winnerOf, ownedFates };
+}
+function clientOwnedFate(server) {
+    if (server.length === 0)
+        return kept('empty_rule');
+    const prefix = clientOwnedServerPrefix(server);
+    if (typeof prefix !== 'string' || prefix.length <= 2 || !prefix.endsWith('__'))
+        return kept('judge_failed');
+    return judgeList([`${prefix}*`], 'allow')[0];
 }
 const WHO = 'permissionsDeclaration';
 function ownField(obj, key, where) {
@@ -248,6 +314,7 @@ function assemble(input, caps) {
     const ask = ruleList(ownField(input, 'ask', ''), 'ask');
     const allow = ruleList(ownField(input, 'allow', ''), 'allow');
     const cliDeny = ruleList(ownField(input, 'cliDeny', ''), 'cliDeny');
+    const ownedServers = [...new Set(ruleList(ownField(input, 'clientOwnedServers', ''), 'clientOwnedServers') ?? [])];
     const originsRaw = ownField(input, 'origins', '');
     let origins = {};
     if (originsRaw !== undefined && originsRaw !== null) {
@@ -267,9 +334,18 @@ function assemble(input, caps) {
     const allowSlots = slotsOf(allow, 'allow');
     const denyJ = judgeBucket(denySlots, 'deny', origins.deny, cli);
     const askJ = judgeBucket(askSlots, 'ask', origins.ask, undefined);
-    const allowJ = gate === 'capability_off'
-        ? { sent: [], fates: allowSlots.map(() => kept('allow_capability_off')), winnerOf: new Map() }
-        : judgeBucket(allowSlots, 'allow', origins.allow, undefined, gate === 'settings_read_not_clean' ? 'settings_read_not_clean' : undefined);
+    const allowForm = allowWireForm(caps) === 'layer' ? 'layer' : 'grant';
+    const settingsGate = gate === 'settings_read_not_clean' ? 'settings_read_not_clean' : undefined;
+    let allowJ = gate === 'capability_off'
+        ? { sent: [], fates: allowSlots.map(() => kept('allow_capability_off')), winnerOf: new Map(), ownedFates: ownedServers.map(() => kept('allow_capability_off')) }
+        : judgeBucket(allowSlots, 'allow', origins.allow, undefined, settingsGate, allowForm, undefined, ownedServers.map(clientOwnedFate));
+    if (gate !== 'capability_off' && allowForm === 'layer' && allowJ.sent.length > 0) {
+        const voiders = allowListVoiders(allowJ.sent);
+        if (voiders === 'unknown' || voiders.size > 0) {
+            const drop = voiders === 'unknown' ? () => 'judge_failed' : (w) => (voiders.has(w) ? 'voids_allow_list' : undefined);
+            allowJ = judgeBucket(allowSlots, 'allow', origins.allow, undefined, settingsGate, allowForm, drop, ownedServers.map(clientOwnedFate));
+        }
+    }
     const buckets = {};
     if (denyJ.sent.length > 0)
         buckets.deny = [...denyJ.sent];
@@ -286,6 +362,11 @@ function assemble(input, caps) {
         ['ask', askSlots, askJ],
         ['allow', allowSlots, allowJ],
     ];
+    const clientOwned = ownedServers.map((server, k) => {
+        const f = allowJ.ownedFates[k];
+        const minted = f.sent ? f.wire : undefined;
+        return f.sent ? { server, rule: minted, sent: true } : { server, sent: false, reason: f.reason };
+    });
     for (const [bucket, slots, j] of rows) {
         slots.forEach((s, k) => {
             const f = j.fates[k];
@@ -294,6 +375,8 @@ function assemble(input, caps) {
         });
         for (const wire of j.sent) {
             const winner = j.winnerOf.get(wire);
+            if (winner.at < 0)
+                continue;
             if (winner.rule !== wire)
                 rewritten.push({ from: winner.rule, to: wire, bucket });
             const f = (winner.list === 'cliDeny' ? j.fates[denySlots.length + winner.at] : j.fates[winner.at]);
@@ -304,7 +387,7 @@ function assemble(input, caps) {
             }
         }
     }
-    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable } };
+    return { buckets, report: { kept: keptRows, rewritten, unchecked, unreachable, ...(clientOwned.length > 0 ? { clientOwned } : {}) } };
 }
 export function permissionsDeclaration(input, caps) {
     const { buckets } = assemble(input, caps);
@@ -314,3 +397,47 @@ export function permissionsDeclarationReport(input, caps) {
     const { buckets, report } = assemble(input, caps);
     return { ...(Object.keys(buckets).length > 0 ? { permissions: buckets } : {}), ...report };
 }
+const ALLOW_KEPT_ROWS_READ_MAX = 4096;
+function allowHeldBySettingsReadCount(report) {
+    if (typeof report !== 'object' || report === null)
+        return 0;
+    const kept = readThrownSlot(report, 'kept');
+    if (typeof kept !== 'object' || kept === null)
+        return 0;
+    const length = readThrownSlot(kept, 'length');
+    if (typeof length !== 'number' || !Number.isInteger(length) || length <= 0)
+        return 0;
+    let n = 0;
+    for (let i = 0; i < Math.min(length, ALLOW_KEPT_ROWS_READ_MAX); i++) {
+        const row = readThrownSlot(kept, String(i));
+        if (typeof row === 'object' && row !== null && readThrownSlot(row, 'reason') === 'settings_read_not_clean')
+            n++;
+    }
+    return n;
+}
+export function permissionsAllowKeptNotice(report, settingsRead, facts) {
+    const held = allowHeldBySettingsReadCount(report);
+    if (held <= 0)
+        return undefined;
+    const readFact = (key) => {
+        if (typeof facts !== 'object' || facts === null)
+            return undefined;
+        const v = readThrownSlot(facts, key);
+        return v === THROWN_SLOT_UNREADABLE ? undefined : v;
+    };
+    const rawCount = readFact('problemCount');
+    const rawWhere = readFact('where');
+    const managedPending = readFact('managedPolicyPending') === true;
+    const count = typeof rawCount === 'number' && Number.isInteger(rawCount) && rawCount >= 1 ? rawCount : undefined;
+    const where = typeof rawWhere === 'string' && rawWhere.length >= 1 && rawWhere.length <= 200 && !/\p{Cc}/u.test(rawWhere) ? rawWhere : undefined;
+    const head = `${String(held)} permissions.allow rule${held === 1 ? ' was' : 's were'} not sent to the engine for this run because `;
+    if (settingsRead === 'partial' && managedPending && count === 1) {
+        return (`${head}the managed policy for your account has not been received yet (sema keeps fetching it; allow rules apply once it arrives). ` +
+            'Run again once it has been received (deny and ask rules, and rules given with --allowedTools, are still sent).');
+    }
+    const why = settingsRead === 'partial'
+        ? `the settings read reported ${count === undefined ? 'problems' : `${String(count)} problem${count === 1 ? '' : 's'}`}${where === undefined ? '' : ` (${where})`}`
+        : 'the health of this settings read could not be checked';
+    return (`${head}${why}; an allow rule from a settings file is only sent from a settings read with no problems. Fix the reported settings, then run again ` +
+        '(deny and ask rules from this read, and rules given with --allowedTools, are still sent).');
+}

package/dist/printToolResultFrame.js

@@ -2,20 +2,12 @@ import { isCcToolDenialKind } from './gateVocabulary.js';
 export { flattenWireOutput as flattenToolOutput } from './adapt/wireShapes.js';
 import { flattenWireOutput } from './adapt/wireShapes.js';
 import { parseModelFacingBash } from './toolResult.js';
+import { bashExitOf, bashExitReadingFailed } from './bashExitReading.js';
 import { toolResultEnvelopeParts, toolResultOutcomeOf } from './adapt/toolCards.js';
 function bashExitCodeFailed(toolName, text, structured) {
     if (typeof toolName !== 'string' || toolName.toLowerCase() !== 'bash')
         return false;
-    const st = structured;
-    if (typeof st?.returnCodeInterpretation === 'string' && st.returnCodeInterpretation.length > 0)
-        return false;
-    const ec = st?.exitCode;
-    if (typeof ec === 'number')
-        return ec !== 0;
-    if (parseModelFacingBash(text)?.note !== undefined)
-        return false;
-    const m = /^exit code: (\d+)\b/.exec(text);
-    return m !== null && m[1] !== '0';
+    return bashExitReadingFailed(bashExitOf(structured, () => parseModelFacingBash(text)));
 }
 export function toolEndResultToUserFrame(arm) {
     if (typeof arm.toolCallId !== 'string' || arm.toolCallId.length === 0)

package/dist/promptDelivery.js

@@ -132,14 +132,6 @@ export function frameProvesDelivery(event) {
         const type = event.type;
         if (typeof type !== 'string' || type.length === 0 || PRE_RUN_FRAME_TYPES.has(type))
             return false;
-        if (type === 'done') {
-            const result = event.result;
-            if (typeof result === 'object' && result !== null && !Array.isArray(result) && result.status === undefined) {
-                const r = result;
-                if (activeRunBusySignal({ type: 'failed', errorCode: r.errorCode, activeTaskId: r.activeTaskId }) !== null)
-                    return false;
-            }
-        }
         return activeRunBusySignal(event) === null;
     }
     catch {

package/dist/protocolSegment.d.ts

@@ -9,3 +9,4 @@ export type ProtocolSegment = {
     readonly kind: 'unknown';
 };
 export declare function protocolSegmentOf(name: string): ProtocolSegment;
+export declare function clientOwnedServerPrefix(server: string): string | undefined;

package/dist/protocolSegment.js

@@ -1,4 +1,4 @@
-import { hasCoreValuePort, mintNamespacePrefix, protocolOf } from './coreValuePorts.js';
+import { hasCoreValuePort, mcpNamespace, mintNamespacePrefix, protocolOf } from './coreValuePorts.js';
 import { CORE_PROTOCOL_PREFIXES } from './generated/toolNameTables.js';
 export function protocolSegmentOf(name) {
     if (CORE_PROTOCOL_PREFIXES.some((prefix) => name.startsWith(prefix) && name.slice(prefix.length).split('__')[0] === ''))
@@ -29,3 +29,15 @@ export function protocolSegmentOf(name) {
         return { kind: 'unknown' };
     return minted === `${ns.prefix}${peer}__` ? { kind: 'ok' } : { kind: 'unminted', minted };
 }
+export function clientOwnedServerPrefix(server) {
+    try {
+        const ns = mcpNamespace();
+        if (ns === undefined)
+            return undefined;
+        const prefix = mintNamespacePrefix(ns, server);
+        return typeof prefix === 'string' ? prefix : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/request/taskRequest.d.ts

@@ -1,4 +1,6 @@
 import type { TaskRequest } from '@sema-agent/sdk';
+import { type OutputStyleSeatReading } from '../outputStyleSeatCapability.js';
+import { type ApprovalReachWord } from '../approvalReachWire.js';
 export type RequestLane = 'interactive' | 'print' | 'utility';
 export type TaskRequestLike = Record<string, unknown>;
 export interface RequestFieldSpec {
@@ -10,7 +12,7 @@ export interface RequestFieldSpec {
     whyUtilityLane: string;
 }
 export declare const REQUEST_FIELD_MATRIX: readonly RequestFieldSpec[];
-export declare const LIVE_DEFAULT_FIELDS: readonly ["cwd", "additionalDirectories", "additionalReadDirectories", "forwardSubagentEvents", "retainSubagentSessions", "agents", "appendSystemPrompt|settings.outputStyle", "suggestNextPrompts", "compactionModel", "sessionId(三态解析)"];
+export declare const LIVE_DEFAULT_FIELDS: readonly ["cwd", "additionalDirectories", "additionalReadDirectories", "forwardSubagentEvents", "retainSubagentSessions", "agents", "appendSystemPrompt|settings.outputStyle", "outputStyle(每轮一句座,见位才落)", "suggestNextPrompts", "compactionModel", "sessionId(三态解析)"];
 export interface TaskRequestInput {
     objective: string;
     sessionId: string;
@@ -38,6 +40,7 @@ export interface TaskRequestInput {
     limits?: Record<string, unknown>;
     interactiveTools?: false;
     oneShot?: true;
+    approvalReach?: ApprovalReachWord;
     excludeAllTools?: true;
     outputSchema?: NonNullable<TaskRequest['outputSchema']>;
     outputRetries?: number;
@@ -48,10 +51,10 @@ export interface TaskRequestInput {
     maxThinkingTokens?: number;
     memoryCapture?: 'off';
     memory?: 'off';
-    fileHistory?: 'disabled';
+    fileHistory?: TaskRequest['fileHistory'];
     inheritEnv?: InheritEnvWord;
     requireExistingSession?: TaskRequest['requireExistingSession'];
-    disableSkills?: true;
+    disableSkills?: TaskRequest['disableSkills'];
     rewind?: Record<string, unknown>;
     repo?: string;
     council?: boolean;
@@ -133,6 +136,11 @@ export interface LiveDefaultsInput {
         forAppend: string;
         forOutputStyle: string;
     };
+    outputStyleSeat?: {
+        name: string;
+        turnReminder?: string;
+    };
+    outputStyleSeatReading?: OutputStyleSeatReading;
     suggestNextPrompts?: boolean;
     compactionModel?: string;
     capturedSessionId?: string;

package/dist/request/taskRequest.js

@@ -1,6 +1,8 @@
 import { refuseBadDisableSkills, refuseDisableSkillsConflict } from '../disableSkillsWire.js';
 import { ATTACHMENTS_SPEC_KEYS, AttachmentsSpecRefused } from '../attachmentsWireCaps.js';
 import { retiredAttachmentsKeyOf } from '../taskRequestWords.js';
+import { outputStyleSeatAdmitted } from '../outputStyleSeatCapability.js';
+import { refuseBadApprovalReach } from '../approvalReachWire.js';
 export const REQUEST_FIELD_MATRIX = [
     { field: 'objective', lanes: ['interactive', 'print', 'utility'], live: false, why: '本 turn 的真实输入,每条车道都必需', whyUtilityLane: '恒座:三条车道都必须带上本次提交的模型面输入' },
     { field: 'sessionId', lanes: ['interactive', 'print', 'utility'], live: false, why: '单命名空间(TP-A Step 2):壳 id 即引擎 session id;print 在非 live 下保留 mock 常量', whyUtilityLane: '恒座:side-channel 提交走**独立**会话 id(壳另铸一个,绝不复用用户会话那一个 —— 复用会把这次提交的转录混进用户会话)' },
@@ -48,6 +50,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'resumeAt/resumeAtMode/restoreFiles/rewindFilesTo', lanes: ['interactive'], live: false, why: 'E18 `/rewind` 是交互命令;四键同生同灭(CC-145:core 6.0.0 起 both 臂发 restoreFiles;CC-223 起退役键 rewindFiles 不再有座 —— 交它按表外子键响亮拒;resumeAtMode 是 both/conversation 两臂恒带的排他截语义位)', whyUtilityLane: '无座:回退是交互命令,而 side-channel 是一次性的独立会话,没有可回退的历史' },
     { field: 'clientContext', lanes: ['interactive'], live: false, why: 'IANA 时区 + 可选邮箱 → core 本地化 `# Environment` 的 today;print 同样跑在用户机器上,缺席让引擎误标 (UTC)', gap: true, whyUtilityLane: '无座:本地化 today 的用途在用户会话的环境段,而 side-channel 的系统提示由壳整段给出 —— 这一列我判不准要不要(与本行 `gap` 同一条待办:要补先单独立项)' },
     { field: 'scratchpadDir', lanes: ['interactive'], live: true, why: '[816]③ per-session 暂存目录;print 也有 session,缺席让 `-p` 的工具写不进 exemptDir', gap: true, whyUtilityLane: '无座:per-session 暂存目录是给**工具**写的,零工具面上没人写' },
+    { field: 'approvalReach', lanes: ['print'], live: true, why: '「这条运行上没有人能答审批」的**逐运行声明**(服务端 7.118.0 提交体键,值闭集由引擎 `APPROVAL_REACH` 派生;声明在场 ⇒ 这条腿的问不发活卡、第一个要审批的调用停驻或拒)。只有无人值守车道有座:那里「审批函数在 ≠ 有人能答」;交互车道恒有人坐在对面能答,声明 none 会把能答的人挡在外面。🔴 只在能力读数为真时由片段口 `approvalReachDeclaration` 给值(老服务端对表外键整份 400)', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),没有门控调用、不会问审批 ⇒ 声明没有对象;带上它只会在不认识这一键的老服务端上给这条提交多一种 400' },
 ];
 export const LIVE_DEFAULT_FIELDS = Object.freeze([
     'cwd',
@@ -57,6 +60,7 @@ export const LIVE_DEFAULT_FIELDS = Object.freeze([
     'retainSubagentSessions',
     'agents',
     'appendSystemPrompt|settings.outputStyle',
+    'outputStyle(每轮一句座,见位才落)',
     'suggestNextPrompts',
     'compactionModel',
     'sessionId(三态解析)',
@@ -143,6 +147,7 @@ const INPUT_KEY_ROUTES = {
     limits: row('limits'),
     interactiveTools: row('interactiveTools'),
     oneShot: row('oneShot'),
+    approvalReach: row('approvalReach'),
     outputSchema: row('outputSchema'),
     outputRetries: row('outputRetries'),
     maxCostUsd: row('maxCostUsd'),
@@ -586,7 +591,7 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach'];
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -657,6 +662,7 @@ export function assembleTaskRequest(input, lane) {
     const inheritEnvIn = src.inheritEnv;
     const requireExistingSessionIn = src.requireExistingSession;
     const disableSkillsIn = src.disableSkills;
+    const approvalReachIn = src.approvalReach;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -670,6 +676,7 @@ export function assembleTaskRequest(input, lane) {
         inheritEnv: inheritEnvIn,
         requireExistingSession: requireExistingSessionIn,
         disableSkills: disableSkillsIn,
+        approvalReach: approvalReachIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -684,6 +691,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadInheritEnv(inheritEnvIn);
     refuseBadRequireExistingSession(requireExistingSessionIn);
     refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
+    refuseBadApprovalReach(approvalReachIn, 'buildTaskRequest');
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -839,6 +847,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('inheritEnv') ? { inheritEnv: inheritEnvIn } : {}),
         ...(on('requireExistingSession') ? { requireExistingSession: true } : {}),
         ...(on('disableSkills') ? { disableSkills: true } : {}),
+        ...(on('approvalReach') ? { approvalReach: approvalReachIn } : {}),
         ...(Object.keys(settingsOut).length > 0 ? { settings: settingsOut } : {}),
     };
     return Object.freeze({ request: out, omitted: Object.freeze([...omitted, ...lateOmitted]) });
@@ -875,6 +884,9 @@ export function applyLiveRequestDefaults(req, host) {
             out.settings = { ...settings, outputStyle: host.selfKnowledge.forOutputStyle };
         }
     }
+    if (out.outputStyle === undefined && host.outputStyleSeat !== undefined && outputStyleSeatAdmitted(host.outputStyleSeatReading)) {
+        out.outputStyle = { ...host.outputStyleSeat };
+    }
     if (out.suggestNextPrompts === undefined &&
         out.verify === undefined &&
         out.cascade === undefined &&

package/dist/resultFrameKeys.d.ts

@@ -0,0 +1,4 @@
+export declare function resultErrorCodeOf(frame: unknown): string | undefined;
+export declare function resultSelectedModelOf(frame: unknown): string | undefined;
+export declare function resultSalvagedResultOf(frame: unknown): string | undefined;
+export declare function resultParkFailedReasonOf(frame: unknown): string | undefined;

package/dist/resultFrameKeys.js

@@ -0,0 +1,13 @@
+import { readFrameStringKey } from './ownKey.js';
+export function resultErrorCodeOf(frame) {
+    return readFrameStringKey(frame, '_sema_error_code');
+}
+export function resultSelectedModelOf(frame) {
+    return readFrameStringKey(frame, '_sema_selected_model');
+}
+export function resultSalvagedResultOf(frame) {
+    return readFrameStringKey(frame, '_sema_salvaged_result');
+}
+export function resultParkFailedReasonOf(frame) {
+    return readFrameStringKey(frame, '_sema_park_failed_reason');
+}

package/dist/resumeRefusalCopy.d.ts

@@ -1,4 +1,4 @@
-import { RESUME_CONTEXT_UNAVAILABLE } from './engineErrorCodes.js';
+import { RESUME_CONTEXT_UNAVAILABLE, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED } from './engineErrorCodes.js';
 export declare const RESUME_REFUSAL_CODES: readonly string[];
 export interface ResumeRefusalDetail {
     code: string;
@@ -50,6 +50,8 @@ export declare function parkedResumeStartupContent(detail: ParkedResumeStartupDe
 export interface CheckpointUnsupportedVersionDetail {
     code: 'checkpoint.unsupported_version';
     retriable: true;
+    writerVersion?: string;
+    readerVersion?: string;
 }
 export declare function checkpointUnsupportedVersionFromError(err: unknown): CheckpointUnsupportedVersionDetail | null;
 export type CheckpointUnsupportedParkKind = 'tool_approval' | 'plan_review' | 'resource_park' | 'wake' | 'workflow_host';
@@ -58,3 +60,18 @@ export interface CheckpointUnsupportedVersionContext {
     readonly runId?: string;
 }
 export declare function checkpointUnsupportedVersionContent(detail: CheckpointUnsupportedVersionDetail, ctx?: CheckpointUnsupportedVersionContext): string;
+export type RefusedParkCode = typeof CHECKPOINT_UNSUPPORTED_VERSION | typeof CHECKPOINT_WALLTIME_AXIS_RETIRED | typeof CHECKPOINT_CONFIG_REFUSED;
+export interface RefusedParkFacts {
+    readonly code: RefusedParkCode;
+    readonly field?: string;
+    readonly stillPending?: boolean;
+}
+export declare function refusedParkFromError(failure: unknown): RefusedParkFacts | null;
+export interface RefusedParkContentInput {
+    readonly what: string;
+    readonly facts: RefusedParkFacts;
+    readonly lane: 'interactive' | 'print';
+    readonly runId?: string;
+}
+export declare function refusedParkContent(input: RefusedParkContentInput): string;
+export declare function refusedParkBlockedContent(taskId: string, lane?: 'interactive' | 'print'): string;