@sema-agent/client-core 0.94.0 → 0.96.0

package/dist/hookMatcherVerdict.js

@@ -1,5 +1,6 @@
 import { HOOK_TOOL_ALIASES } from './hookToolAliases.js';
 import { SETTINGS_TOOL_NAME_MATCHER_EVENTS } from './generated/settingsSchemaTables.js';
+import { SETTINGS_HOOK_MATCHER_FORM, SETTINGS_HOOK_MATCHER_SELECTS } from './generated/settingsSchemaFns.js';
 const TOOL_NAME_MATCHER_EVENTS = new Set(SETTINGS_TOOL_NAME_MATCHER_EVENTS);
 const MATCHER_MAX_CHARS = 8192;
 const PATTERN_WORK_BUDGET = 10_000_000;
@@ -14,30 +15,6 @@ function refused(reading, p) {
 function aliasPairs() {
     return Object.entries(HOOK_TOOL_ALIASES).map(([alias, canonical]) => ({ alias, canonical }));
 }
-function literalNames(matcher) {
-    const names = [];
-    let first = -1;
-    let last = -1;
-    for (let i = 0; i <= matcher.length; i++) {
-        const c = i < matcher.length ? matcher.charCodeAt(i) : 0x7c;
-        if (c === 0x7c || c === 0x2c) {
-            if (first !== -1)
-                names.push(matcher.slice(first, last + 1));
-            first = -1;
-            last = -1;
-            continue;
-        }
-        if (c === 0x20)
-            continue;
-        const nameChar = (c >= 0x30 && c <= 0x39) || (c >= 0x41 && c <= 0x5a) || (c >= 0x61 && c <= 0x7a) || c === 0x5f || c === 0x2d;
-        if (!nameChar)
-            return undefined;
-        if (first === -1)
-            first = i;
-        last = i;
-    }
-    return names;
-}
 const UNSUPPORTED = Symbol('unsupported');
 const SINGLE_CHAR_ESCAPES = 'dDwWsStnrfv^$\\.*+?()[]{}|/-';
 function patternBound(src, n) {
@@ -202,52 +179,35 @@ function patternBound(src, n) {
 export function hookMatcherVerdict(event, matcher) {
     if (typeof event !== 'string' || !TOOL_NAME_MATCHER_EVENTS.has(event))
         return unjudged('event_out_of_scope');
-    if (matcher === undefined)
-        return Object.freeze({ kind: 'matchesAll' });
-    if (typeof matcher !== 'string')
+    if (matcher !== undefined && typeof matcher !== 'string')
         return unjudged('not_a_string');
-    if (matcher.length > MATCHER_MAX_CHARS)
+    if (matcher !== undefined && matcher.length > MATCHER_MAX_CHARS)
         return unjudged('oversize');
-    if (matcher === '' || matcher === '*')
-        return Object.freeze({ kind: 'matchesAll' });
-    const pairs = aliasPairs();
-    const names = literalNames(matcher);
-    if (names !== undefined) {
-        const dead = pairs.find((p) => names.includes(p.alias) && !names.includes(p.canonical));
-        if (dead !== undefined)
-            return refused('names', dead);
-        return Object.freeze({
-            kind: 'accepted',
-            reading: 'names',
-            names: Object.freeze([...names]),
-            aliases: Object.freeze(pairs.filter((p) => names.includes(p.alias)).map((p) => Object.freeze({ ...p }))),
-        });
-    }
-    const src = `^(?:${matcher})$`;
-    let re;
-    try {
-        re = new RegExp(src);
-    }
-    catch {
+    const form = SETTINGS_HOOK_MATCHER_FORM(matcher);
+    if (form === 'invalid')
         return unjudged('invalid_pattern');
+    const pairs = aliasPairs();
+    if (form === 'regex' && matcher !== undefined) {
+        const subjects = pairs.flatMap((p) => [p.alias, p.canonical]);
+        const n = subjects.reduce((a, s) => Math.max(a, s.length), 0);
+        const bound = patternBound(matcher, n);
+        if (bound === undefined)
+            return unjudged('pattern_unsupported');
+        if (bound[0] * bound[1] * (n + 1) * subjects.length > PATTERN_WORK_BUDGET)
+            return unjudged('over_budget');
     }
-    const subjects = pairs.flatMap((p) => [p.alias, p.canonical]);
-    const n = subjects.reduce((a, s) => Math.max(a, s.length), 0);
-    const bound = patternBound(src, n);
-    if (bound === undefined)
-        return unjudged('pattern_unsupported');
-    if (bound[0] * bound[1] * (n + 1) * subjects.length > PATTERN_WORK_BUDGET)
-        return unjudged('over_budget');
     const selects = (name) => {
-        if (matcher === name)
-            return true;
         try {
-            return re.test(name);
+            const v = SETTINGS_HOOK_MATCHER_SELECTS(matcher, name);
+            return typeof v === 'boolean' ? v : undefined;
         }
         catch {
             return undefined;
         }
     };
+    if (form === 'literal' && selects('') === true)
+        return Object.freeze({ kind: 'matchesAll' });
+    const reading = form === 'regex' ? 'pattern' : 'names';
     const selected = [];
     for (const p of pairs) {
         const a = selects(p.alias);
@@ -259,8 +219,8 @@ export function hookMatcherVerdict(event, matcher) {
         if (c === undefined)
             return unjudged('invalid_pattern');
         if (!c)
-            return refused('pattern', p);
+            return refused(reading, p);
         selected.push(p);
     }
-    return Object.freeze({ kind: 'accepted', reading: 'pattern', aliases: Object.freeze(selected.map((p) => Object.freeze({ ...p }))) });
+    return Object.freeze({ kind: 'accepted', reading, aliases: Object.freeze(selected.map((p) => Object.freeze({ ...p }))) });
 }

package/dist/hooksWireCaps.js

@@ -1,6 +1,6 @@
 import { engineCapNestedTrue, engineCapState, engineCapValue } from './engineCapsCache.js';
 import { displayUntrusted } from './displayUntrusted.js';
-import { collapseLabel } from './fleetTaskDesc.js';
+import { capForDisplay, collapseLabel } from './fleetTaskDesc.js';
 import { hostLog, hostSettings } from './host.js';
 import { createSettingsHookJudge, decidePluginHooks, dedupeSettingsHookGroups, filterSettingsHookGroups, occupancyOf, settingsHookDropText, } from './pluginHooksWire.js';
 import { MAX_HOOK_NOTICE_TEXT_CHARS } from './notifications.js';
@@ -71,6 +71,35 @@ function startupModeWord(settings) {
     hostLog('debug', `hooksWireCaps: hooksStartupMode() returned ${describeStartupModeValue(v)}, which is neither 'safe' nor 'bare' — treated as neither mode (settings hooks not narrowed)`);
     return undefined;
 }
+const MANAGED_POLICY_STATES = ['absent', 'in-effect', 'unreadable'];
+const _managedPolicyStatesPin = [true, true];
+void _managedPolicyStatesPin;
+function managedPolicyUnreadable(settings) {
+    try {
+        const member = settings.managedPolicyReading;
+        if (member === undefined)
+            return false;
+        if (typeof member !== 'function') {
+            hostLog('debug', `hooksWireCaps: managedPolicyReading is ${describeStartupModeValue(member)}, not a method — fail-closed (no hooks projected to the engine)`);
+            return true;
+        }
+        const r = member.call(settings);
+        const state = typeof r === 'object' && r !== null && !Array.isArray(r) ? r.state : undefined;
+        const word = MANAGED_POLICY_STATES.find((w) => w === state);
+        if (word === 'absent' || word === 'in-effect')
+            return false;
+        if (word === 'unreadable') {
+            hostLog('debug', 'hooksWireCaps: managed policy layer reported unreadable — fail-closed (no hooks projected to the engine)');
+            return true;
+        }
+        hostLog('debug', `hooksWireCaps: managedPolicyReading() returned ${describeStartupModeValue(state)} as its state, which is none of 'absent' / 'in-effect' / 'unreadable' — fail-closed (no hooks projected to the engine)`);
+        return true;
+    }
+    catch (err) {
+        hostLog('debug', `hooksWireCaps: managedPolicyReading() threw — fail-closed (no hooks projected to the engine): ${String(err)}`);
+        return true;
+    }
+}
 function hooksOfSource(source) {
     try {
         const s = hostSettings()?.getSettingsForSource(source);
@@ -183,11 +212,12 @@ export function hooksWirePlan(opts = {}) {
     const shellRuns = (event, type) => {
         if (!shellEvents.has(event))
             return false;
-        const types = typesByEvent?.get(event);
+        if (typesByEvent === undefined)
+            return type !== 'prompt' && type !== 'agent';
+        const types = typesByEvent.get(event);
         return types === undefined || (typeof type === 'string' && types.has(type));
     };
-    const settingsShellRuns = typesByEvent !== undefined ? shellRuns : (event, type) => type !== 'prompt' && type !== 'agent' && shellRuns(event, type);
-    return buildHooksWirePlan(engine, shellRuns, true, promptAuthoredByUserOf(o), settingsShellRuns);
+    return buildHooksWirePlan(engine, shellRuns, true, promptAuthoredByUserOf(o));
 }
 function taskHooksCapability(baseUrl) {
     const v = engineCapValue(baseUrl, 'taskSettings');
@@ -218,7 +248,7 @@ function shellHookTypesOf(o) {
         return out;
     }
     catch (err) {
-        hostLog('debug', `hooksWirePlan: shellHookTypesByEvent is malformed — treated as absent (command and http hooks count as running on every reported event; prompt and agent hooks from settings stay with the engine): ${String(err)}`);
+        hostLog('debug', `hooksWirePlan: shellHookTypesByEvent is malformed — treated as absent (command and http hooks count as running on every reported event; prompt and agent hooks are not counted as running locally): ${String(err)}`);
         return undefined;
     }
 }
@@ -238,11 +268,11 @@ function promptAuthoredByUserOf(o) {
     }
     return true;
 }
-function buildHooksWirePlan(engine, shellRuns, withPlugins, promptAuthoredByUser, settingsShellRuns = shellRuns) {
+function buildHooksWirePlan(engine, shellRuns, withPlugins, promptAuthoredByUser) {
     const settingsDropped = [];
     const settingsVerdicts = [];
     const settingsExcluded = [];
-    const judge = withPlugins ? createSettingsHookJudge(engine, settingsShellRuns, promptAuthoredByUser) : undefined;
+    const judge = withPlugins ? createSettingsHookJudge(engine, shellRuns, promptAuthoredByUser) : undefined;
     let settingsStripped = 0;
     const planOf = (pluginReader, wire, verdicts = [], excluded = []) => ({ engine, pluginReader, verdicts, excluded, settingsDropped, settingsVerdicts, settingsExcluded, wire });
     const closedPlan = (settings, reason) => {
@@ -278,6 +308,8 @@ function buildHooksWirePlan(engine, shellRuns, withPlugins, promptAuthoredByUser
         hostLog('debug', `hooksWireCaps: workspace trust check threw — fail-closed (no hooks projected to the engine): ${String(err)}`);
         return closedPlan(settings, 'governance_unreadable');
     }
+    if (managedPolicyUnreadable(settings))
+        return closedPlan(settings, 'governance_unreadable');
     let policy = null;
     try {
         policy = settings.getSettingsForSource('policySettings');
@@ -430,5 +462,5 @@ export function hookFailureNoticeText(n) {
     const name = collapseLabel(n.hookName);
     const tail = n.stderr !== undefined ? `: ${collapseLabel(n.stderr)}` : '';
     const line = `${HOOK_FAILURE_WARN_PREFIX}: ${name} (${code})${tail}`;
-    return line.length <= MAX_HOOK_NOTICE_TEXT_CHARS ? line : line.slice(0, MAX_HOOK_NOTICE_TEXT_CHARS);
+    return capForDisplay(line, MAX_HOOK_NOTICE_TEXT_CHARS);
 }

package/dist/host.d.ts

@@ -8,6 +8,11 @@ export interface SettingsPort {
     mergedDisableAllHooks?(): boolean | undefined;
     enabledPluginHooks?(): PluginHooksReading;
     hooksStartupMode?(): HooksStartupMode | undefined;
+    managedPolicyReading?(): ManagedPolicyReading;
+}
+export type ManagedPolicyState = 'absent' | 'in-effect' | 'unreadable';
+export interface ManagedPolicyReading {
+    readonly state: ManagedPolicyState;
 }
 export type HooksStartupMode = 'safe' | 'bare';
 export type PluginHookOptionValue = string | number | boolean;

package/dist/host.js

@@ -48,7 +48,9 @@ export function installHostFor(sessionKey, ports) {
 }
 function callDiagnosticPort(call) {
     try {
-        call();
+        const out = call();
+        if (out !== undefined && out !== null)
+            void Promise.resolve(out).then(undefined, () => undefined);
         return true;
     }
     catch {

package/dist/hostCallbackGuard.d.ts

@@ -0,0 +1,2 @@
+export declare function invokeHostCallbackIsolated(label: string, call: () => void): void;
+export declare function reasonOfThrownWithSink(e: unknown, sink: (log: string) => void): string;

package/dist/hostCallbackGuard.js

@@ -0,0 +1,31 @@
+import { hostLog } from './host.js';
+import { wireFailureTextsOf } from './wireFailureShape.js';
+function faultText(e) {
+    try {
+        return String(e).slice(0, 160);
+    }
+    catch {
+        return '(unprintable)';
+    }
+}
+function reportHostCallbackFault(label, what, e) {
+    hostLog('debug', `${label} ${what}: ${faultText(e)}`);
+}
+export function invokeHostCallbackIsolated(label, call) {
+    try {
+        const out = call();
+        if (out && typeof out.then === 'function') {
+            void Promise.resolve(out).then(undefined, (e) => {
+                reportHostCallbackFault(label, 'rejected', e);
+            });
+        }
+    }
+    catch (e) {
+        reportHostCallbackFault(label, 'threw', e);
+    }
+}
+export function reasonOfThrownWithSink(e, sink) {
+    const t = wireFailureTextsOf(e);
+    invokeHostCallbackIsolated('hostCallbackGuard: onFailure', () => sink(t.log));
+    return t.reason;
+}

package/dist/index.d.ts

@@ -13,11 +13,13 @@ export * from './adapt/textSegmentAuthority.js';
 export * from './engineHttpTools.js';
 export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordBgTerminalFacts, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
 export type { BgTerminalFacts, SubagentContentEvent, SubagentContentItem, SubagentContentSnapshot, SubagentContentStoreConfig, SubagentOwnerRecord, SubagentOwnerSessionConflict, SubagentViewSlot, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
 export * from './fleetAgentPanelProjection.js';
+export { reducePanelFrame, createPanelReduceState, PANEL_DELTA_OPS } from './panelReduce.js';
+export type { PanelFrame, PanelDelta, PanelRowFields, PanelReduceState } from './panelReduce.js';
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
@@ -31,7 +33,7 @@ export * from './executionLaneCapability.js';
 export * from './approvalsStreamLiveCapability.js';
 export * from './peerLaneCapability.js';
 export * from './permissionRulesWriteCapability.js';
-export { __resetPermissionsAllowGrantReadingsForTests, forgetPermissionsAllowGrantReading, noteEngineCapsForPermissionsAllowGrant, observedPermissionsAllowGrant, permissionsAllowGrantAvailable, permissionsAllowGrantDoctorDetail, projectPermissionsAllowGrantCapability, } from './permissionsAllowGrantCapability.js';
+export { __resetPermissionsAllowGrantReadingsForTests, noteEngineCapsForPermissionsAllowGrant, observedPermissionsAllowGrant, permissionsAllowGrantAvailable, permissionsAllowGrantDoctorDetail, projectPermissionsAllowGrantCapability, } from './permissionsAllowGrantCapability.js';
 export type { PermissionsAllowGrantReading } from './permissionsAllowGrantCapability.js';
 export * from './sessionPolicyCapability.js';
 export * from './memoryComplianceCapability.js';
@@ -40,9 +42,14 @@ export * from './memoryEntriesWire.js';
 export * from './memoryVerbsWire.js';
 export * from './deviceExecutorManagementCapability.js';
 export * from './mcpReconnect.js';
+export * from './hitl/parkExpiryJudgements.js';
+export * from './usageAnalytics.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
-export { providerRejectionResend, type ProviderRejectionResend } from './providerRejection.js';
+export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export type { CcTaskTerminalStatus, CoreSemaTaskTerminalStatus, CoreTaskNotificationTerminalStatus, CoreTerminalCauseKind, SdkFleetTaskTerminalStatus, SdkRunTerminalStatus, } from './terminalStatuses.js';
+export type { ProviderRejectionResend, ProviderRejectionKind } from './providerRejection.js';
+export { PROVIDER_REJECTION_KINDS } from './providerRejection.js';
 export * from './runCancelContext.js';
 export * from './argvFlagValue.js';
 export * from './readFacePosture.js';
@@ -51,6 +58,7 @@ export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
 export * from './sessionSyncFileHistoryCapability.js';
+export * from './sessionSyncFileHistory.js';
 export * from './workflowsJournalCapability.js';
 export * from './userInvokedSkillsCapability.js';
 export * from './skillToolListsCapability.js';
@@ -76,7 +84,7 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
 export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntrustedMarked } from './displayUntrusted.js';
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
@@ -88,7 +96,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
@@ -104,6 +112,7 @@ export * from './retainBackgroundWireCaps.js';
 export * from './oneShotWireCaps.js';
 export * from './rewindWireCaps.js';
 export * from './rewindArchiveCapability.js';
+export * from './rewindEngineAction.js';
 export * from './fileHistoryCaptureCapability.js';
 export { FILE_HISTORY_LEG_VERDICTS, fileHistoryLegNoticeVerdict, fileHistoryLegNoticeSentence, fileHistoryDeclarationOfBody, createFileHistoryDeclarationLedger, } from './fileHistoryLegNotice.js';
 export type { FileHistoryDeclarationFact, FileHistoryLegNoticeVerdict, FileHistoryLegNoticeInput, FileHistoryDeclarationLedger } from './fileHistoryLegNotice.js';
@@ -114,6 +123,7 @@ export * from './sealedKeyCapability.js';
 export * from './storePostureCapability.js';
 export * from './centerWiringCapability.js';
 export * from './registryQuotaUsage.js';
+export * from './engineDirectory.js';
 export * from './selfOrchestrationWireCaps.js';
 export * from './skillsWireCaps.js';
 export * from './ultracodeWireCaps.js';
@@ -123,6 +133,7 @@ export * from './liveModelCatalog.js';
 export * from './modelBudgetRule.js';
 export * from './modelIdentityResolvability.js';
 export * from './sessionModelLatch.js';
+export * from './modelSwitchFallback.js';
 export * from './effortWire.js';
 export * from './adapter/types.js';
 export * from './adapter/downstream/turnUsageToModelUsage.js';
@@ -137,8 +148,8 @@ export { disableSkillsDeclaration, disableSkillsDeclarationSettled } from './dis
 export { approvalReachDeclaration, approvalReachDeclarationSettled } from './approvalReachWire.js';
 export type { ApprovalReachDeclaration, ApprovalReachWithheldCause, ApprovalReachWord } from './approvalReachWire.js';
 export type { DisableSkillsDeclaration } from './disableSkillsWire.js';
-export { PERMISSIONS_KEPT_REASONS, WIRE_RULE_TRUST_ORDER, permissionsDeclaration, permissionsDeclarationReport } from './permissionsDeclaration.js';
-export type { PermissionsClientOwnedStatement, PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, PermissionsUnreachableRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
+export { PERMISSIONS_KEPT_REASONS, WIRE_RULE_TRUST_ORDER, permissionsAllowKeptNotice, permissionsDeclaration, permissionsDeclarationReport } from './permissionsDeclaration.js';
+export type { PermissionsAllowKeptFacts, PermissionsClientOwnedStatement, PermissionsDeclaration, PermissionsDeclarationBuckets, PermissionsDeclarationInput, PermissionsDeclarationReport, PermissionsKeptReason, PermissionsKeptRule, PermissionsRewrittenRule, PermissionsUncheckedRule, PermissionsUnreachableRule, WireRuleOrigin, WireRuleOrigins, } from './permissionsDeclaration.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { abortableSleep } from './abortableSleep.js';
@@ -153,9 +164,10 @@ export * from './limitsWire.js';
 export * from './interactiveToolsWire.js';
 export * from './headlessPermissionModeWire.js';
 export * from './headlessReconnectWire.js';
-export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, projectDescription, projectTasks, projectWorkflows, TERMINAL_FLEET_TASK_STATUSES, wireResumable, wireRowUsage, } from './fleet/fleetProjection.js';
+export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, projectDescription, projectTasks, projectWorkflows, wireResumable, wireRowUsage, } from './fleet/fleetProjection.js';
 export type { FleetRowUsage, FleetTaskStatus, FleetTaskView, FleetWorkflowView, NotProjectedEntry, ProjectTasksOptions, } from './fleet/fleetProjection.js';
 export * from './fleet/fleetLedger.js';
+export * from './fleet/bgSubagentRow.js';
 export * from './fleet/workflowSizeWarning.js';
 export * from './subagent/engineDelegatedPrompt.js';
 export * from './subagent/engineRowStopGate.js';
@@ -178,8 +190,6 @@ export * from './corruptSessionCopy.js';
 export { classifyToolHistoryMismatch, readToolHistoryMismatchKey, resolveToolHistoryRewindTarget } from './toolHistoryMismatch.js';
 export type { ToolHistoryMismatchRowKey } from './toolHistoryMismatch.js';
 export { toolHistoryBadTurnSentence } from './toolHistoryBadTurn.js';
-export { classifyRegistryConflict, isScopeGoneError } from './registryConflict.js';
-export type { RegistryConflictClass } from './registryConflict.js';
 export { deviceFlowPollingPlan } from './deviceFlowPolling.js';
 export type { DeviceFlowPollingPlan } from './deviceFlowPolling.js';
 export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredPrompts } from './promptDelivery.js';
@@ -188,12 +198,12 @@ export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
 export type { UserAttachmentDescriptor, UserAttachmentNotebookCell } from './userAttachmentEnvelope.js';
 export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
 export type { HumanTurnInput, HumanTurnItem, HumanTurnAttachment, HumanTurnRider, HumanTurnMissing, HumanTurnCaps, HumanTurnEncoding, HumanTurnShare, HumanTurnSharePart, HumanTurnDegraded, HumanTurnDelivered, } from './humanTurn.js';
-export { noteEngineCapsForAttachmentSeat, observedAttachmentSeat, forgetAttachmentSeatReading, __resetAttachmentSeatReadingsForTests, } from './attachmentSeatCapability.js';
+export { noteEngineCapsForAttachmentSeat, observedAttachmentSeat, __resetAttachmentSeatReadingsForTests, } from './attachmentSeatCapability.js';
 export type { AttachmentSeatReading } from './attachmentSeatCapability.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
-export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, coreVersionTier } from './supportFloor.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, engineSupportFloorEffective, coreVersionTier } from './supportFloor.js';
 export type { SupportFloor, SupportFloorComponent, EngineVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
@@ -215,8 +225,9 @@ export type { ActiveGate, ApprovalsResourceLike, AskAnswer, AssistantResourceLik
 export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
-export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
+export { toolEndOutputText } from './toolResultContent.js';
+export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export type { ClassifierDenyContext, HitlHostSurface, HitlNotice, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
@@ -236,17 +247,28 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
-export { replayedApprovalDisposition } from './hitl/replayedApproval.js';
+export { replayedApprovalClosesCardFrame, replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
 export type { ReplayedApprovalDisposition, ReplayPendingBasis } from './hitl/replayedApproval.js';
+export { hasLedgerPositionKey } from './hitl/gateLedger.js';
 export { MODE_ARBITRATION, automaticAnswerVerdict, mandatedApprovalDetailOf, permissionRequestHookScope, type AutomaticAnswerLane, type AutomaticAnswerAskFace, type AutomaticAnswerFacts, type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy, type AutomaticAnswerVerdict, type PermissionRequestHookScope, } from './hitl/automaticAnswerVerdict.js';
-export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, type DecisionRefusalStanding, type DecisionRefusalClassified, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
+export { standingRowsOf, type StandingRows, type StandingRowsWhy, type StandingRowWhy, type StandingPersistentRow, type StandingRowsHostFacts, } from './hitl/standingRows.js';
+export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decisionRefusalAskReading, type DecisionRefusalAskReading, type DecisionRefusalStanding, type DecisionRefusalClassified, type DecisionRefusalConflict, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
 export { noAllowCauseOf, type NoAllowCause, type RuleLadderNoAllowFacts } from './hitl/noAllowCause.js';
 export { policyDenyReason, type PolicyDenyLane, type PolicyDenyReasonFacts } from './hitl/frameRouter.js';
-export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, type ApprovalAllowRuleShadow, type ApprovalAllowRuleShadowMember, type AllowRuleShadowedWireMember, } from './hitl/allowRuleShadow.js';
+export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, allowRuleShadowSentence, type ApprovalAllowRuleShadow, type ApprovalAllowRuleShadowMember, type AllowRuleShadowedWireMember, } from './hitl/allowRuleShadow.js';
 export { projectCrashConverged } from './hitl/crashConverged.js';
 export type { ApprovalsListEnvelope, CrashConvergedOrphanState, CrashConvergedProjection, CrashConvergedRow } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';
+export { approvalCompleteParked } from './hitl/approvalCompleteParked.js';
+export { approvalCompleteCauseOf } from './hitl/approvalEndingCause.js';
 export * from './interactiveHalt.js';
+export { fireInteractiveInterrupt } from './interactiveInterrupt.js';
+export type { InteractiveInterruptRuns, InteractiveInterruptOptions } from './interactiveInterrupt.js';
+export { listDevices, readSessionBinding, rebindSession, reconcileRebindOutcome, rebindProvesRequestNotApplied } from './deviceRebind.js';
+export type { DeviceSummary, DeviceListResult, DeviceBinding, DeviceSessionBinding, DeviceRebindRequest, DeviceRevokeRequest, DeviceRebindResult, DeviceEnrollToken, DeviceEnrollRequest, DeviceEnrollResult, DeviceRevokeResult, } from '@sema-agent/sdk';
+export type { DeviceListVerb, DeviceSessionBindingVerb, DeviceRebindVerb, DeviceRosterRow, DeviceBindingReading, DeviceRefused, DeviceLaneAbsent, DeviceTransport, DeviceUnreadable, DeviceUnarmed, DeviceListOutcome, DeviceSessionBindingOutcome, DeviceRebindInput, DeviceRebindUnconfirmed, DeviceRebindOutcome, DeviceRebindReconcileVerdict, } from './deviceRebind.js';
+export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js';
+export type { EngineEnvView, EngineEnvGroupDecl, EngineEnvSourcingInput, EngineEnvTouchedKey, EngineEnvGroupReading, EngineEnvKeyReason, EngineEnvSourcingVerdict, } from './engineEnvSourcing.js';
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
@@ -271,3 +293,12 @@ export * from './env/localeTag.js';
 export * from './env/uiLanguage.js';
 export type { PendingCheckpoint, RuleSuggestion } from '@sema-agent/sdk';
 export * from './ruleRemovalConsequence.js';
+export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
+export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';
+export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
+export type { CredentialAttachWord, CredentialConsent, CredentialFactName, CredentialFacts, CredentialProvenance, CredentialSidecarOwnership, CredentialTargetKind, CredentialTargetProvenance, } from './credentialProvenance.js';
+export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
+export type { CutForDisplayOptions, CutForDisplayResult, NoticePresentationAudience, NoticeOutlet, NoticeOccurrence, NoticeSeatClass, NoticeDeployment, NoticePresentationFacts, OutletKind, OutletReachability, OutletReachabilityContext, OutletRenderingPlan, NoticePrintCarrier, NoticePrintLineInput, NoticePrintLineResult, } from './noticePresentation.js';
+export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';
+export type { PrintPermissionOutcome, PrintPermissionOutcomeForm } from './printPermissionOutcome.js';