@sema-agent/client-core 0.94.0 → 0.96.0

package/dist/fleetAgentPanelProjection.js

@@ -1,212 +1,22 @@
-import { isStaleEngineAgentPanelEnd, publishEngineAgentPanelAbsence, publishEngineAgentPanelEvent } from './engineAgentPanelStore.js';
-import { __resetPanelRunningHistoryForTests, notePanelRowRunning, panelRowUnknownToConsumer, panelRowEndedIdentity, holdNewbornTerminalRow, peekHeldNewbornTerminalRow, dropHeldNewbornTerminalRow } from './panelRunningHistory.js';
-import { rowIdTail } from './workflow.js';
-import { TERMINAL_FLEET_TASK_STATUSES } from './fleet/fleetProjection.js';
+import { ABSENT_SETTLE_MS, panelPresenceSize } from './panelReduce.js';
+import { panelStateNow, stepEnginePanel } from './panelStateHolder.js';
 import { DEFAULT_SESSION_KEY } from './sessionSlot.js';
-import { isTerminalNotSuccess } from './runTerminal.js';
-export const ABSENT_SETTLE_MS = 30_000;
-const SETTLED_RETENTION_MS = ABSENT_SETTLE_MS * 4;
-function currentToolKeyOf(ct) {
-    if (!ct || typeof ct.toolName !== 'string' || ct.toolName.length === 0)
-        return undefined;
-    return `${ct.toolName}\u0000${ct.target ?? ''}`;
-}
-const seen = new Map();
-function seenFor(sessionKey) {
-    let m = seen.get(sessionKey);
-    if (!m) {
-        m = new Map();
-        seen.set(sessionKey, m);
-    }
-    return m;
-}
+export { ABSENT_SETTLE_MS };
 export function resetFleetAgentPanelProjection() {
-    seen.clear();
-    __resetPanelRunningHistoryForTests();
+    stepEnginePanel({ kind: 'fleet-rows-reset' });
 }
 export function resetFleetAgentPanelProjectionFor(sessionKey) {
-    seen.delete(sessionKey);
+    stepEnginePanel({ kind: 'fleet-rows-reset', sessionKey });
 }
 export function fleetAgentProjectionSize() {
     return fleetAgentProjectionSizeFor(DEFAULT_SESSION_KEY);
 }
 export function fleetAgentProjectionSizeFor(sessionKey) {
-    return seen.get(sessionKey)?.size ?? 0;
+    return panelPresenceSize(panelStateNow(), sessionKey);
 }
 export function projectFleetAgentRows(rows, nowMs = Date.now()) {
     projectFleetAgentRowsFor(DEFAULT_SESSION_KEY, rows, nowMs);
 }
 export function projectFleetAgentRowsFor(sessionKey, rows, nowMs = Date.now()) {
-    const seenMap = seenFor(sessionKey);
-    const present = new Set();
-    for (const row of rows) {
-        if (!row?.id)
-            continue;
-        const taskId = rowIdTail(row.id);
-        if (!taskId)
-            continue;
-        present.add(taskId);
-        const status = row.status ?? 'running';
-        const wireTokens = typeof row.tokens === 'number' && Number.isInteger(row.tokens) && row.tokens >= 0 ? row.tokens : undefined;
-        const tokens = wireTokens;
-        const toolUses = typeof row.toolUses === 'number' ? row.toolUses : undefined;
-        const transcriptId = row.transcriptId || undefined;
-        const parentToolCallId = typeof row.parentToolCallId === 'string' && row.parentToolCallId.length > 0 ? row.parentToolCallId : undefined;
-        const startedAt = typeof row.startedAt === 'number' && Number.isFinite(row.startedAt) && row.startedAt > 0 ? row.startedAt : undefined;
-        const cycleSeq = typeof row.cycleSeq === 'number' && Number.isInteger(row.cycleSeq) && row.cycleSeq >= 1 ? row.cycleSeq : undefined;
-        const currentTool = currentToolKeyOf(row.currentTool) !== undefined ? row.currentTool : undefined;
-        const currentToolKey = currentToolKeyOf(row.currentTool);
-        const prev = seenMap.get(taskId);
-        const rowIdentity = { ...(cycleSeq !== undefined ? { cycleSeq } : {}), ...(startedAt !== undefined ? { startedAt } : {}) };
-        const prevIdentity = prev !== undefined
-            ? { ...(prev.cycleSeq !== undefined ? { cycleSeq: prev.cycleSeq } : {}), ...(prev.startedAt !== undefined ? { startedAt: prev.startedAt } : {}) }
-            : undefined;
-        if (prev !== undefined && isStaleEngineAgentPanelEnd(rowIdentity, prevIdentity))
-            continue;
-        const rowNewerCycle = prev !== undefined && isStaleEngineAgentPanelEnd(prevIdentity, rowIdentity);
-        const sameCycle = prev !== undefined &&
-            !prev.settled &&
-            (startedAt === undefined || prev.startedAt === undefined || prev.startedAt === startedAt) &&
-            (cycleSeq === undefined || prev.cycleSeq === undefined || prev.cycleSeq === cycleSeq);
-        const knownTokens = tokens !== undefined ? tokens : sameCycle ? prev?.tokens : undefined;
-        const carryIdentity = prev !== undefined && !rowNewerCycle;
-        const knownStartedAt = startedAt !== undefined ? startedAt : carryIdentity ? prev.startedAt : undefined;
-        const knownCycleSeq = cycleSeq !== undefined ? cycleSeq : carryIdentity ? prev.cycleSeq : undefined;
-        if (TERMINAL_FLEET_TASK_STATUSES.has(status)) {
-            const newbornTerminal = prev === undefined && panelRowUnknownToConsumer(taskId);
-            const settledThisCycle = prev?.settled === true && !rowNewerCycle;
-            const endedRec = prev === undefined ? panelRowEndedIdentity(taskId) : undefined;
-            const frameCycle = { ...(cycleSeq !== undefined ? { cycleSeq } : {}), ...(startedAt !== undefined ? { startedAt } : {}) };
-            if (endedRec !== undefined && isStaleEngineAgentPanelEnd(frameCycle, endedRec))
-                continue;
-            const endedSameCycle = endedRec !== undefined && !isStaleEngineAgentPanelEnd(endedRec, frameCycle);
-            if (newbornTerminal) {
-                holdNewbornTerminalRow(taskId, {
-                    kind: 'fleet-row',
-                    taskId,
-                    ...(row.name ? { name: row.name } : {}),
-                    ...(row.description ? { description: row.description } : {}),
-                    ...(knownTokens !== undefined ? { totalTokens: knownTokens } : {}),
-                    ...(toolUses !== undefined ? { toolUses } : {}),
-                    ...(transcriptId !== undefined ? { transcriptId } : {}),
-                    ...(parentToolCallId !== undefined ? { parentToolCallId } : {}),
-                    ...(knownStartedAt !== undefined ? { startedAt: knownStartedAt } : {}),
-                    ...(knownCycleSeq !== undefined ? { cycleSeq: knownCycleSeq } : {}),
-                });
-            }
-            else if (!settledThisCycle) {
-                if (rowNewerCycle ||
-                    (cycleSeq !== undefined && prev?.cycleSeq !== cycleSeq) ||
-                    (tokens !== undefined && prev?.tokens !== tokens) ||
-                    (toolUses !== undefined && prev?.toolUses !== toolUses) ||
-                    (transcriptId !== undefined && prev?.transcriptId !== transcriptId) ||
-                    (parentToolCallId !== undefined && prev?.parentToolCallId !== parentToolCallId) ||
-                    (startedAt !== undefined && prev?.startedAt !== startedAt)) {
-                    publishEngineAgentPanelEvent({
-                        kind: 'fleet-row',
-                        taskId,
-                        ...(row.name ? { name: row.name } : {}),
-                        ...(row.description ? { description: row.description } : {}),
-                        ...(knownTokens !== undefined ? { totalTokens: knownTokens } : {}),
-                        ...(toolUses !== undefined ? { toolUses } : {}),
-                        ...(transcriptId !== undefined ? { transcriptId } : {}),
-                        ...(parentToolCallId !== undefined ? { parentToolCallId } : {}),
-                        ...(knownStartedAt !== undefined ? { startedAt: knownStartedAt } : {}),
-                        ...(knownCycleSeq !== undefined ? { cycleSeq: knownCycleSeq } : {}),
-                    });
-                }
-                if (!endedSameCycle)
-                    publishEngineAgentPanelEvent({
-                        kind: 'end',
-                        taskId,
-                        isError: isTerminalNotSuccess(status),
-                        ...(knownCycleSeq !== undefined ? { cycleSeq: knownCycleSeq } : {}),
-                        ...(knownStartedAt !== undefined ? { startedAt: knownStartedAt } : {}),
-                    });
-            }
-            seenMap.set(taskId, {
-                status,
-                tokens: knownTokens,
-                toolUses: toolUses !== undefined ? toolUses : prev?.toolUses,
-                transcriptId: transcriptId !== undefined ? transcriptId : prev?.transcriptId,
-                parentToolCallId: parentToolCallId !== undefined ? parentToolCallId : prev?.parentToolCallId,
-                startedAt: knownStartedAt,
-                cycleSeq: knownCycleSeq,
-                currentToolKey: currentToolKey !== undefined ? currentToolKey : prev?.currentToolKey,
-                lastSeenAt: nowMs,
-                settled: true,
-                settledAtMs: prev?.settled ? prev.settledAtMs : nowMs,
-                absentReportedAtMs: undefined,
-            });
-            continue;
-        }
-        const cycleComparable = (cycleSeq !== undefined && prev?.cycleSeq !== undefined) || (startedAt !== undefined && prev?.startedAt !== undefined);
-        const staleSnapshotOverHeldRow = prev !== undefined && prev.settled === true && cycleComparable && !rowNewerCycle && peekHeldNewbornTerminalRow(taskId) !== undefined;
-        if (staleSnapshotOverHeldRow)
-            continue;
-        if (!prev ||
-            prev.settled ||
-            prev.absentReportedAtMs !== undefined ||
-            prev.status !== status ||
-            prev.tokens !== knownTokens ||
-            (toolUses !== undefined && prev.toolUses !== toolUses) ||
-            (transcriptId !== undefined && prev.transcriptId !== transcriptId) ||
-            (parentToolCallId !== undefined && prev.parentToolCallId !== parentToolCallId) ||
-            (startedAt !== undefined && prev.startedAt !== startedAt) ||
-            (cycleSeq !== undefined && prev.cycleSeq !== cycleSeq) ||
-            (currentToolKey !== undefined && prev.currentToolKey !== currentToolKey)) {
-            notePanelRowRunning(taskId);
-            dropHeldNewbornTerminalRow(taskId);
-            publishEngineAgentPanelEvent({
-                kind: 'fleet-row',
-                taskId,
-                ...(row.name ? { name: row.name } : {}),
-                ...(row.description ? { description: row.description } : {}),
-                ...(knownTokens !== undefined ? { totalTokens: knownTokens } : {}),
-                ...(toolUses !== undefined ? { toolUses } : {}),
-                ...(transcriptId !== undefined ? { transcriptId } : {}),
-                ...(parentToolCallId !== undefined ? { parentToolCallId } : {}),
-                ...(knownStartedAt !== undefined ? { startedAt: knownStartedAt } : {}),
-                ...(knownCycleSeq !== undefined ? { cycleSeq: knownCycleSeq } : {}),
-                ...(currentTool !== undefined ? { currentTool } : {}),
-            });
-        }
-        seenMap.set(taskId, {
-            status,
-            tokens: knownTokens,
-            toolUses: toolUses !== undefined ? toolUses : prev?.toolUses,
-            transcriptId: transcriptId !== undefined ? transcriptId : prev?.transcriptId,
-            parentToolCallId: parentToolCallId !== undefined ? parentToolCallId : prev?.parentToolCallId,
-            startedAt: knownStartedAt,
-            cycleSeq: knownCycleSeq,
-            currentToolKey: currentToolKey !== undefined ? currentToolKey : prev?.currentToolKey,
-            lastSeenAt: nowMs,
-            settled: false,
-            settledAtMs: undefined,
-            absentReportedAtMs: undefined,
-        });
-    }
-    for (const [taskId, s] of seenMap) {
-        if (present.has(taskId) || s.settled || s.absentReportedAtMs !== undefined)
-            continue;
-        const absentForMs = nowMs - s.lastSeenAt;
-        if (absentForMs <= ABSENT_SETTLE_MS)
-            continue;
-        publishEngineAgentPanelAbsence({ taskId, lastSeenAtMs: s.lastSeenAt, absentForMs });
-        seenMap.set(taskId, { ...s, absentReportedAtMs: nowMs });
-    }
-    for (const [taskId, s] of seenMap) {
-        if (present.has(taskId))
-            continue;
-        if (s.settled) {
-            const settledAt = s.settledAtMs ?? s.lastSeenAt;
-            if (nowMs - settledAt > SETTLED_RETENTION_MS)
-                seenMap.delete(taskId);
-        }
-        else if (s.absentReportedAtMs !== undefined && nowMs - s.absentReportedAtMs > SETTLED_RETENTION_MS) {
-            seenMap.delete(taskId);
-        }
-    }
-    if (seenMap.size === 0)
-        seen.delete(sessionKey);
+    stepEnginePanel({ kind: 'fleet-rows', sessionKey, rows, nowMs });
 }

package/dist/fleetAgentRowLike.d.ts

@@ -0,0 +1,16 @@
+export interface FleetAgentRowLike {
+    id: string;
+    name?: string;
+    description?: string;
+    status?: string;
+    tokens?: number;
+    toolUses?: number;
+    transcriptId?: string;
+    currentTool?: {
+        toolName: string;
+        target?: string;
+    };
+    startedAt?: number;
+    cycleSeq?: number;
+    parentToolCallId?: string;
+}

package/dist/fleetAgentRowLike.js

@@ -0,0 +1 @@
+export {};

package/dist/fleetTaskDesc.js

@@ -1,25 +1,12 @@
-import { applyDisplayFace, LEGACY_ESCAPE_FACE, LEGACY_LABEL_FACE } from './displayUntrusted.js';
+import { applyDisplayFace, ESCAPE_FACE, LABEL_FACE, paintAndCap } from './displayUntrusted.js';
 export function escapeDisplayControlChars(s) {
-    return applyDisplayFace(s, LEGACY_ESCAPE_FACE);
+    return applyDisplayFace(s, ESCAPE_FACE);
 }
 export function capForDisplay(raw, max) {
-    const escaped = escapeDisplayControlChars(raw);
-    if (escaped.length <= max)
-        return escaped;
-    let cut = max;
-    const tokenStart = escaped.lastIndexOf('\\', cut - 1);
-    if (tokenStart >= 0 && tokenStart + 6 > cut && /^\\u[0-9A-F]{4}$/.test(escaped.slice(tokenStart, tokenStart + 6))) {
-        cut = tokenStart;
-    }
-    if (cut > 0) {
-        const code = escaped.charCodeAt(cut - 1);
-        if (code >= 0xd800 && code <= 0xdbff)
-            cut -= 1;
-    }
-    return cut > 0 ? escaped.slice(0, cut) : '';
+    return paintAndCap(raw, ESCAPE_FACE, typeof max === 'number' && max > 0 ? max : 0);
 }
 export function collapseLabel(s) {
-    return applyDisplayFace(s, LEGACY_LABEL_FACE);
+    return applyDisplayFace(s, LABEL_FACE);
 }
 export function taskDescFromName(name, agentType, agentName) {
     if (!name || !agentType)

package/dist/gateOutcome.d.ts

@@ -32,9 +32,20 @@ export interface GateModeReleaseView {
     mandate?: string;
     reason?: string;
 }
-export declare const GATE_MODE_RELEASE_REASON_WORDS: readonly ["rule_unreadable", "write_protection_unresolved"];
+export declare const GATE_MODE_RELEASE_REASON_WORDS: readonly ["rule_unreadable", "target_unresolved"];
 export type GateModeReleaseReasonWord = (typeof CORE_MODE_RELEASE_REASONS)[number];
 export declare function isGateModeReleaseReasonWord(v: unknown): v is GateModeReleaseReasonWord;
+export declare function modeReleaseReasonSentence(reason: string | null | undefined): string | undefined;
+export interface ReleaseDisclosureIdentity {
+    readonly toolCallId?: string;
+    readonly callKey?: string;
+    readonly epoch?: string | number;
+}
+export interface ReleaseDisclosureLedger {
+    readonly has: (identity: ReleaseDisclosureIdentity | null | undefined) => boolean;
+    readonly mark: (identity: ReleaseDisclosureIdentity | null | undefined) => void;
+}
+export declare function createReleaseDisclosureLedger(): ReleaseDisclosureLedger;
 export interface SettlementWhoView {
     party: string;
     approver?: string;

package/dist/gateOutcome.js

@@ -1,6 +1,8 @@
 import { ccToolDenialKindForSettledBy, isCcToolDenialKind, isGateDeniedByWord } from './gateVocabulary.js';
 import { GATE_PARKED_ERROR_CODE } from './engineErrorCodes.js';
 import { CORE_MODE_RELEASE_REASONS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
+import { currentEngineWord } from './engineWordRenames.js';
+import { readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 function str(v) {
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
@@ -8,6 +10,62 @@ export const GATE_MODE_RELEASE_REASON_WORDS = CORE_MODE_RELEASE_REASONS;
 export function isGateModeReleaseReasonWord(v) {
     return typeof v === 'string' && CORE_MODE_RELEASE_REASONS.includes(v);
 }
+const MODE_RELEASE_SENTENCE_BY_REASON = Object.freeze({
+    rule_unreadable: 'The permission mode let this call run without asking, even though it could not be checked against your saved permission rules.',
+    target_unresolved: 'The permission mode let this call run without asking, even though it could not be determined where its write lands on disk, so whether it lands on a guarded location is unknown.',
+});
+const MODE_RELEASE_UNRECOGNISED_SENTENCE = 'The permission mode let this call run without asking, for a reason this client does not recognise.';
+export function modeReleaseReasonSentence(reason) {
+    try {
+        if (typeof reason !== 'string' || reason === '')
+            return undefined;
+        const word = currentEngineWord(reason);
+        return Object.hasOwn(MODE_RELEASE_SENTENCE_BY_REASON, word)
+            ? MODE_RELEASE_SENTENCE_BY_REASON[word]
+            : MODE_RELEASE_UNRECOGNISED_SENTENCE;
+    }
+    catch {
+        return undefined;
+    }
+}
+const RELEASE_DISCLOSURE_LEDGER_MAX = 256;
+function releaseDisclosureKeyOf(identity) {
+    try {
+        if (typeof identity !== 'object' || identity === null)
+            return undefined;
+        const callId = readOwnDataNonEmptyString(identity, 'toolCallId');
+        if (callId !== undefined) {
+            const epoch = readOwnDataValue(identity, 'epoch');
+            const scope = typeof epoch === 'string' ? epoch : typeof epoch === 'number' && Number.isFinite(epoch) ? String(epoch) : '';
+            return JSON.stringify(['call', scope, callId]);
+        }
+        const cardKey = readOwnDataNonEmptyString(identity, 'callKey');
+        return cardKey !== undefined ? JSON.stringify(['card', cardKey]) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createReleaseDisclosureLedger() {
+    const said = new Set();
+    return Object.freeze({
+        has(identity) {
+            const key = releaseDisclosureKeyOf(identity);
+            return key !== undefined && said.has(key);
+        },
+        mark(identity) {
+            const key = releaseDisclosureKeyOf(identity);
+            if (key === undefined || said.has(key))
+                return;
+            said.add(key);
+            if (said.size > RELEASE_DISCLOSURE_LEDGER_MAX) {
+                const oldest = said.values().next();
+                if (oldest.done !== true)
+                    said.delete(oldest.value);
+            }
+        },
+    });
+}
 export const SETTLEMENT_KIND_WORDS = CORE_SETTLEMENT_KINDS;
 function readWho(v) {
     if (typeof v !== 'object' || v === null || Array.isArray(v))
@@ -32,7 +90,8 @@ function readSettlement(v) {
     const who = readWho(s.who);
     if (kind === undefined || who === undefined)
         return undefined;
-    const when = typeof s.when === 'number' && Number.isFinite(s.when) ? s.when : undefined;
+    const whenRaw = s.when;
+    const when = typeof whenRaw === 'number' && Number.isFinite(whenRaw) ? whenRaw : undefined;
     const note = str(s.note);
     return {
         kind,
@@ -62,7 +121,7 @@ function readModeRelease(raw) {
     const classes = nonEmptyStringList(r.classes);
     if (mode === undefined || askClass === undefined || classes === undefined)
         return undefined;
-    const origin = str(r.origin);
+    const origin = readAskOrigin(r);
     const mandate = str(r.mandate);
     const reason = str(r.reason);
     return {
@@ -94,7 +153,7 @@ function readClassifierRound(raw) {
     }
     return view;
 }
-export function gateOutcomeOf(frame) {
+function readGateRecord(frame) {
     if (typeof frame !== 'object' || frame === null || Array.isArray(frame))
         return undefined;
     const g = frame.gate;
@@ -107,7 +166,9 @@ export function gateOutcomeOf(frame) {
     const dr = d;
     const dk = str(dr.kind);
     let disposition;
-    const classifier = readClassifierRound(dr.classifier);
+    let causePresent = false;
+    const classifierRaw = dr.classifier;
+    const classifier = readClassifierRound(classifierRaw);
     if (dk === 'allowed') {
         const released = readModeRelease(dr.released);
         disposition = {
@@ -120,7 +181,9 @@ export function gateOutcomeOf(frame) {
         const deniedBy = str(dr.deniedBy);
         if (deniedBy === undefined)
             return undefined;
-        const cause = str(dr.cause);
+        const causeRaw = dr.cause;
+        causePresent = causeRaw !== undefined;
+        const cause = str(causeRaw);
         const mode = str(dr.mode);
         const askClass = str(dr.askClass);
         const classes = nonEmptyStringList(dr.classes);
@@ -137,14 +200,23 @@ export function gateOutcomeOf(frame) {
     else {
         return undefined;
     }
-    const settlement = readSettlement(raw.settlement);
-    const origin = str(raw.origin);
+    const settlementRaw = raw.settlement;
+    const settlement = readSettlement(settlementRaw);
+    const origin = readAskOrigin(raw);
     return {
-        disposition,
-        ...(settlement !== undefined ? { settlement } : {}),
-        ...(origin !== undefined ? { origin } : {}),
+        view: {
+            disposition,
+            ...(settlement !== undefined ? { settlement } : {}),
+            ...(origin !== undefined ? { origin } : {}),
+        },
+        settlementPresent: settlementRaw !== undefined,
+        causePresent,
+        classifierPresent: classifierRaw !== undefined,
     };
 }
+export function gateOutcomeOf(frame) {
+    return readGateRecord(frame)?.view;
+}
 export function isGateParkedToolEnd(frame) {
     if (typeof frame !== 'object' || frame === null || Array.isArray(frame))
         return false;
@@ -189,21 +261,19 @@ export function ccToolDenialKindForToolEnd(frame) {
         return stamped;
     if (frame._sema_denial_unclassified === true)
         return undefined;
-    const outcome = gateOutcomeOf(frame);
+    const record = readGateRecord(frame);
+    const outcome = record?.view;
     const kind = outcome?.settlement?.kind;
     if (kind === 'human_refused')
         return ccToolDenialKindForSettledBy('human');
     if (kind === 'policy_refused')
         return ccToolDenialKindForSettledBy('policy');
-    const rawGate = frame.gate;
-    const settlementAbsent = typeof rawGate === 'object' && rawGate !== null && rawGate.settlement === undefined;
-    if (outcome !== undefined && settlementAbsent && outcome.disposition.kind === 'denied') {
+    if (record !== undefined && outcome !== undefined && !record.settlementPresent && outcome.disposition.kind === 'denied') {
         const by = outcome.disposition.deniedBy;
         if (by === 'ask_resolution' || !isGateDeniedByWord(by))
             return undefined;
         if (DENIED_BY_MAY_CARRY_CAUSE.has(by)) {
-            const rawDisposition = rawKeyOf(rawGate, 'disposition');
-            if (rawKeyOf(rawDisposition, 'cause') !== undefined) {
+            if (record.causePresent) {
                 const cause = outcome.disposition.cause;
                 if (cause === 'unavailable')
                     return 'automode-unavailable';
@@ -213,14 +283,13 @@ export function ccToolDenialKindForToolEnd(frame) {
             }
             if (by === 'classifier')
                 return 'automode-blocked';
-            if (rawKeyOf(rawDisposition, 'classifier') !== undefined)
+            if (record.classifierPresent)
                 return undefined;
         }
         return ccToolDenialKindForSettledBy('policy');
     }
     return undefined;
 }
-const rawKeyOf = (holder, key) => typeof holder === 'object' && holder !== null ? holder[key] : undefined;
 const DENIED_BY_MAY_CARRY_CAUSE = new Set(['classifier', 'policy']);
 const _gateOutcomeShapePin = (w) => w;
 void _gateOutcomeShapePin;

package/dist/gateVocabulary.d.ts

@@ -1,5 +1,5 @@
-import { CORE_DENIED_BY_VALUES } from './generated/engineFactTables.js';
-import type { APPROVAL_MANDATE_WORDS } from './hitl/toolApprovalWire.js';
+import { CORE_DENIED_BY_VALUES, CORE_PERSISTED_RULE_MANDATES } from './generated/engineFactTables.js';
+import { PRIOR_ENGINE_WORD_RENAMES, type PriorEngineWord } from './engineWordRenames.js';
 export declare const CC_TOOL_DENIAL_KINDS: readonly ["user-rejected", "permission-rule", "automode-blocked", "automode-unavailable", "automode-parsing-error", "interrupted", "cancelled"];
 export type CcToolDenialKind = (typeof CC_TOOL_DENIAL_KINDS)[number];
 export declare function isCcToolDenialKind(v: unknown): v is CcToolDenialKind;
@@ -11,6 +11,11 @@ export declare function isGateDeniedByWord(v: unknown): v is GateDeniedByWord;
 export declare function gateDeniedByDetail(deniedBy: unknown): string;
 export declare function askOriginDetail(origin: unknown): string;
 export declare function mandatedApprovalDetail(): string;
+type RetiredMandateWord = {
+    [K in PriorEngineWord]: (typeof PRIOR_ENGINE_WORD_RENAMES)[K] extends (typeof CORE_PERSISTED_RULE_MANDATES)[number] ? K : never;
+}[PriorEngineWord];
+export declare const APPROVAL_MANDATE_WORDS: readonly ((typeof CORE_PERSISTED_RULE_MANDATES)[number] | RetiredMandateWord)[];
 export type ApprovalMandateWord = (typeof APPROVAL_MANDATE_WORDS)[number];
 export declare function isApprovalMandateWord(v: unknown): v is ApprovalMandateWord;
 export declare function approvalMandateDetail(word: ApprovalMandateWord): string;
+export {};

package/dist/gateVocabulary.js

@@ -1,4 +1,5 @@
-import { CORE_DENIED_BY_VALUES } from './generated/engineFactTables.js';
+import { CORE_DENIED_BY_VALUES, CORE_PERSISTED_RULE_MANDATES } from './generated/engineFactTables.js';
+import { PRIOR_ENGINE_WORD_RENAMES } from './engineWordRenames.js';
 export const CC_TOOL_DENIAL_KINDS = Object.freeze([
     'user-rejected',
     'permission-rule',
@@ -71,6 +72,8 @@ export function askOriginDetail(origin) {
 export function mandatedApprovalDetail() {
     return 'no saved allow rule and no remembered answer can retire this question; each call is settled on its own — by you here or by an automatic check the deployment runs — and an answer covers only that call';
 }
+const RETIRED_MANDATE_WORDS = Object.freeze(Object.keys(PRIOR_ENGINE_WORD_RENAMES).filter((k) => CORE_PERSISTED_RULE_MANDATES.includes(PRIOR_ENGINE_WORD_RENAMES[k])));
+export const APPROVAL_MANDATE_WORDS = Object.freeze([...CORE_PERSISTED_RULE_MANDATES, ...RETIRED_MANDATE_WORDS]);
 const _mandateWordsPin = true;
 void _mandateWordsPin;
 export function isApprovalMandateWord(v) {
@@ -82,6 +85,7 @@ const APPROVAL_MANDATE_SENTENCES = Object.freeze({
     probe_mandate: 'the check run on this call marked it as needing its own confirmation (the built-in shell check does so for a read outside the directories allowed for this session)',
     probe_unanswered: 'the check run on this call did not answer (it timed out or failed; this client cannot tell which), so whether the call stays inside the directories allowed for this session is unknown',
     write_protection: "this change lands on a protected location (the agent's own configuration), which is confirmed one change at a time",
+    target_unresolved: 'where this change lands on disk could not be determined (a link on the way could not be examined, or the target could not be resolved), so whether it lands on a guarded location is unknown',
     write_protection_unresolved: 'the protected-location check could not tell where this change lands, so whether it touches a protected location is unknown',
 });
 const APPROVAL_MANDATE_SET = new Set(Object.keys(APPROVAL_MANDATE_SENTENCES));

package/dist/generated/engineAskFaceTables.js

@@ -7,6 +7,6 @@ export const CORE_SHELL_FACE_TOOL_NAMES = Object.freeze([
     "Monitor",
 ]);
 export const CORE_RELEASABLE_ASK_CLASSES_BY_FACE = Object.freeze({
-    "shell": Object.freeze(["transcript_write", "rule_unreadable", "write_protection_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "shell": Object.freeze(["transcript_write", "rule_unreadable", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
     "other": Object.freeze(["transcript_write", "rule_unreadable", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
 });

package/dist/generated/engineFactTables.d.ts

@@ -8,7 +8,7 @@ export declare const CORE_DENIED_BY_VALUES: readonly ["policy", "hook", "org", "
 export declare const CORE_PERMISSION_MODE_FOLD_REASONS: readonly string[];
 export declare const CORE_ENGINE_CARD_TYPES: readonly string[];
 export declare const CORE_TOOL_DECLARATION_CODES: readonly string[];
-export declare const CORE_MODE_RELEASE_REASONS: readonly ["rule_unreadable", "write_protection_unresolved"];
+export declare const CORE_MODE_RELEASE_REASONS: readonly ["rule_unreadable", "target_unresolved"];
 export declare const CORE_HOOK_TOOL_ALIASES: Readonly<Record<string, string>>;
 export declare const CORE_ASK_EVIDENCE_ABSENCE_VALUES: readonly ["not_wired", "not_adjudicated", "unavailable", "no_match", "not_reported"];
 export declare const CORE_SYSTEM_INJECTION_PRIORITIES: readonly ["now", "next", "later"];
@@ -21,9 +21,9 @@ export interface CoreModeArbitrationRow {
     readonly ruleMayClear: boolean;
     readonly hookAskFloor: boolean;
 }
-export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "transcript_write" | "org_rule" | "governance_unavailable" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "write_protection_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "governance_unavailable" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
 export declare const CORE_SKILL_GRANT_ORIGINS: readonly ["model", "user", "inherited"];
-export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "path_pattern", "domain", "content_unsupported", "grammar", "tool_name", "near_miss"];
+export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "content_unsupported", "grammar", "tool_name", "near_miss"];
 export declare const CORE_ALLOW_RULE_MEMBERS: readonly ["hook", "deployment", "persisted", "skill", "request"];
 export declare const CORE_RULE_TOOL_NAME_VERDICTS: readonly ["current", "retired", "unprefixed_namespace", "unmintable_segment"];
 export declare const CORE_SETTLEMENT_KINDS: readonly ["human_allowed", "human_refused", "approval_window_expired", "denial_limit_window_expired", "park_sla_expired", "no_approver", "approver_unavailable", "approver_error", "approver_contract", "presentation_failed", "blanket_allow_refused", "policy_allowed", "policy_refused", "task_aborted"];
@@ -32,6 +32,7 @@ export declare const CORE_AUTO_MODE_UNAVAILABLE_CAUSES: readonly ["error", "time
 export declare const CORE_DEFAULT_TIER_ORDER: readonly ["ultra", "max", "pro", "flash", "lite"];
 export declare const CORE_CC_MODEL_TIER_ALIASES: Readonly<Record<"fable" | "mythos" | "opus" | "sonnet" | "haiku", (typeof CORE_DEFAULT_TIER_ORDER)[number]>>;
 export declare const CORE_DURABLE_AGENT_HANDLE_RE: RegExp;
+export declare const CORE_TASK_HANDLE_PREFIXES: Readonly<Record<"background_bash" | "workflow" | "background_agent" | "monitor", string>>;
 export declare const CORE_PERMISSION_MODE_CLASSES: readonly ["bypass", "prompting"];
 export declare const CORE_MCP_LIVENESS_STATES: readonly ["reachable", "unreachable", "unknown"];
 export declare const CORE_RULE_BEHAVIORS: readonly ["deny", "ask", "allow"];
@@ -40,3 +41,4 @@ export declare const CORE_MAX_PENDING_STEER_CHARS: number;
 export declare const CORE_PROMPT_BLOCK_CAUSES: readonly ["block", "crashed", "timeout", "cancelled"];
 export declare const CORE_PERMISSION_MODES: readonly ["default", "acceptEdits", "plan", "auto", "bypassPermissions", "dontAsk"];
 export declare const CORE_APPROVAL_REACH: readonly ["none"];
+export declare const CORE_PERSISTED_RULE_MANDATES: readonly ["operator_always", "tool_marks", "probe_mandate", "probe_unanswered", "write_protection", "target_unresolved"];

package/dist/generated/engineFactTables.js

@@ -113,7 +113,7 @@ export const CORE_TOOL_DECLARATION_CODES = Object.freeze([
 ]);
 export const CORE_MODE_RELEASE_REASONS = Object.freeze([
     "rule_unreadable",
-    "write_protection_unresolved",
+    "target_unresolved",
 ]);
 export const CORE_HOOK_TOOL_ALIASES = Object.freeze(Object.assign(Object.create(null), Object.fromEntries([
     ["ListPeers", "ListAgents"],
@@ -147,6 +147,7 @@ export const CORE_MODE_ARBITRATION = Object.freeze({
     "ancestor": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "dangerous_delete": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "unverifiable_delete": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
+    "unverifiable_shell_text": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "transcript_write": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "org_rule": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "governance_unavailable": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
@@ -157,7 +158,7 @@ export const CORE_MODE_ARBITRATION = Object.freeze({
     "requires_user_interaction": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "operator_forced": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
     "shell_floor": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
-    "write_protection_unresolved": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
+    "target_unresolved": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "probe": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "write_protection": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "tool_marks_mcp": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
@@ -176,8 +177,6 @@ export const CORE_SKILL_GRANT_ORIGINS = Object.freeze([
 export const CORE_ALLOW_ENTRY_INERT_REASONS = Object.freeze([
     "wildcard_all",
     "namespace_wildcard",
-    "path_pattern",
-    "domain",
     "content_unsupported",
     "grammar",
     "tool_name",
@@ -235,6 +234,12 @@ export const CORE_CC_MODEL_TIER_ALIASES = Object.freeze({
     "haiku": "lite",
 });
 export const CORE_DURABLE_AGENT_HANDLE_RE = Object.freeze(/^a[0-9a-f]{6,32}$/);
+export const CORE_TASK_HANDLE_PREFIXES = Object.freeze({
+    "background_bash": "b",
+    "workflow": "w",
+    "background_agent": "a",
+    "monitor": "m",
+});
 export const CORE_PERMISSION_MODE_CLASSES = Object.freeze([
     "bypass",
     "prompting",
@@ -268,3 +273,11 @@ export const CORE_PERMISSION_MODES = Object.freeze([
 export const CORE_APPROVAL_REACH = Object.freeze([
     "none",
 ]);
+export const CORE_PERSISTED_RULE_MANDATES = Object.freeze([
+    "operator_always",
+    "tool_marks",
+    "probe_mandate",
+    "probe_unanswered",
+    "write_protection",
+    "target_unresolved",
+]);