@sema-agent/client-core 0.95.0 → 0.96.0

package/dist/fleet/fleetLedger.js

@@ -13,6 +13,10 @@ import { projectTasks, projectWorkflows, wireCycleSeq, wireParentId, } from './f
 import { isInStreamDrainingEnd } from '../wireErrorTriage.js';
 import { cycleSeqOrder, cycleSeqValue } from '../cycleOrder.js';
 export const TERMINAL_RETAIN_MS = 60_000;
+function hasRowId(row) {
+    const id = row?.id;
+    return typeof id === 'string' && id.length > 0;
+}
 const liveBgViews = new Map();
 function viewsFor(sessionKey) {
     return liveBgViews.get(sessionKey) ?? new Set();
@@ -111,6 +115,25 @@ export function createFleetLedger(hooks = {}, opts = {}) {
         }
         cycleWatermark.set(tail, gen);
     }
+    const settledTerminal = new Map();
+    const SETTLED_TERMINAL_MAX = 512;
+    function noteSettledTerminal(tail, row) {
+        if (tail.length === 0 || typeof row.status !== 'string')
+            return;
+        const gen = wireCycleSeq(row);
+        const recordedGen = settledTerminal.get(tail)?.cycleSeq;
+        if (cycleSeqOrder(gen, recordedGen) === 'before')
+            return;
+        if (cycleSeqOrder(gen, cycleWatermark.get(tail)) === 'before')
+            return;
+        settledTerminal.delete(tail);
+        if (settledTerminal.size >= SETTLED_TERMINAL_MAX) {
+            const oldest = settledTerminal.keys().next().value;
+            if (oldest !== undefined)
+                settledTerminal.delete(oldest);
+        }
+        settledTerminal.set(tail, { status: row.status, cycleSeq: gen });
+    }
     let droppedMalformed = 0;
     let droppedUnknownFrame = 0;
     let droppedForeignBgNotification = 0;
@@ -140,28 +163,48 @@ export function createFleetLedger(hooks = {}, opts = {}) {
             ...(typeof r.name === 'string' && r.name.length > 0 ? { name: r.name } : {}),
             status: r.status ?? 'unknown',
             ...(parentId !== undefined ? { parentId } : {}),
+            ...(typeof r.sourceLane === 'string' && r.sourceLane.length > 0 ? { sourceLane: r.sourceLane } : {}),
             ...(retired ? { retiredByNotification: true } : {}),
         };
     };
+    function settleTerminalRow(row, receivedAtMs) {
+        taskMap.delete(row.id);
+        rowMeta.delete(row.id);
+        retained.set(row.id, { row, expireAt: receivedAtMs + TERMINAL_RETAIN_MS });
+        const tail = rowIdTail(row.id);
+        for (const id of [...retained.keys()]) {
+            if (id !== row.id && rowIdTail(id) === tail)
+                retained.delete(id);
+        }
+        noteSettledTerminal(tail, row);
+    }
+    function admitRow(row, receivedAtMs) {
+        if (isSdkFleetTaskTerminal(row.status)) {
+            settleTerminalRow(row, receivedAtMs);
+            return;
+        }
+        taskMap.set(row.id, row);
+        rowMeta.set(row.id, { receivedAtMs });
+        const tail = rowIdTail(row.id);
+        for (const id of [...retained.keys()]) {
+            if (rowIdTail(id) === tail)
+                retained.delete(id);
+        }
+        settledTerminal.delete(tail);
+        clearBgTerminalFacts(tail);
+    }
     function forgetSettledTerminalRowOf(id) {
-        const live = taskMap.get(id);
-        if (live !== undefined && !isSdkFleetTaskTerminal(live.status))
+        if (taskMap.has(id))
             return false;
         const pooled = retained.get(id);
-        if (pooled?.retiredByNotification === true)
+        if (pooled === undefined || pooled.retiredByNotification === true)
             return false;
-        if (live === undefined && pooled === undefined)
-            return false;
-        taskMap.delete(id);
-        rowMeta.delete(id);
         retained.delete(id);
         return true;
     }
     const bgView = {
         read: () => {
-            const rows = [...taskMap.values()]
-                .filter(r => !isSdkFleetTaskTerminal(r.status))
-                .map(r => toBgTask(r, false));
+            const rows = [...taskMap.values()].map(r => toBgTask(r, false));
             const nowMs = nowFn();
             for (const [id, r] of retained) {
                 if (r.retiredByNotification !== true)
@@ -204,33 +247,35 @@ export function createFleetLedger(hooks = {}, opts = {}) {
                 wfMap.clear();
                 rowMeta.clear();
                 const receivedAtMs = nowFn();
+                const rows = [];
                 for (const row of frame.tasks) {
-                    taskMap.set(row.id, row);
-                    rowMeta.set(row.id, { receivedAtMs });
-                    if (!isSdkFleetTaskTerminal(row.status)) {
-                        const tail = rowIdTail(row.id);
-                        for (const id of [...retained.keys()]) {
-                            if (rowIdTail(id) === tail)
-                                retained.delete(id);
-                        }
-                        clearBgTerminalFacts(tail);
+                    if (!hasRowId(row)) {
+                        droppedMalformed++;
+                        debug('[fleet-frame] MALFORMED snapshot task row dropped(row 或 row.id 缺席 / 非串)');
+                        continue;
                     }
+                    rows.push(row);
                 }
+                for (const row of rows)
+                    if (isSdkFleetTaskTerminal(row.status))
+                        admitRow(row, receivedAtMs);
+                for (const row of rows)
+                    if (!isSdkFleetTaskTerminal(row.status))
+                        admitRow(row, receivedAtMs);
                 for (const row of frame.workflows)
                     wfMap.set(row.id, row);
                 break;
             }
             case 'task': {
                 const row = frame.row;
-                if (!row?.id) {
+                if (!hasRowId(row)) {
                     droppedMalformed++;
-                    debug('[fleet-frame] MALFORMED task frame dropped(row 或 row.id 缺席)');
+                    debug('[fleet-frame] MALFORMED task frame dropped(row 或 row.id 缺席 / 非串)');
                     break;
                 }
                 const receivedAtMs = nowFn();
-                taskMap.set(row.id, row);
+                admitRow(row, receivedAtMs);
                 raiseCycleWatermark(rowIdTail(row.id), wireCycleSeq(row));
-                rowMeta.set(row.id, { receivedAtMs });
                 debug(`[fleet-row] id=${row.id} parent=${row.parentId ?? '-'} agentType=${row.agentType ?? '-'}` +
                     ` agentName=${row.agentName ?? '-'} name=${row.name ?? '-'} status=${row.status ?? '-'}` +
                     ` tokens=${row.tokens ?? '-'} parentToolCallId=${row.parentToolCallId ?? '-'}`);
@@ -252,29 +297,13 @@ export function createFleetLedger(hooks = {}, opts = {}) {
                     recordEngineTranscriptId(rowIdTail(row.id), row.transcriptId);
                 }
                 recordFleetRowAgentType(rowIdTail(row.id), row.agentType);
-                if (isSdkFleetTaskTerminal(row.status)) {
-                    retained.set(row.id, { row, expireAt: receivedAtMs + TERMINAL_RETAIN_MS });
-                    const tailT = rowIdTail(row.id);
-                    for (const id of [...retained.keys()]) {
-                        if (id !== row.id && rowIdTail(id) === tailT)
-                            retained.delete(id);
-                    }
-                }
-                else {
-                    retained.delete(row.id);
-                    const tail = rowIdTail(row.id);
-                    for (const id of [...retained.keys()]) {
-                        if (id !== row.id && rowIdTail(id) === tail)
-                            retained.delete(id);
-                    }
-                    clearBgTerminalFacts(tail);
-                }
                 break;
             }
             case 'task_remove': {
                 const fr = frame;
                 const removedGen = cycleSeqValue(fr.cycleSeq);
-                const held = taskMap.get(frame.id);
+                const pooledHeld = retained.get(frame.id);
+                const held = taskMap.get(frame.id) ?? (pooledHeld !== undefined && pooledHeld.retiredByNotification !== true ? pooledHeld.row : undefined);
                 const heldGen = held !== undefined ? wireCycleSeq(held) : undefined;
                 const stale = cycleSeqOrder(removedGen, heldGen) === 'before';
                 const reason = typeof fr.removeReason === 'string' && fr.removeReason.length > 0 ? fr.removeReason : undefined;
@@ -410,43 +439,26 @@ export function createFleetLedger(hooks = {}, opts = {}) {
                     debug(`[fleet-frame] bg_notification stale-cycle ignored(row=${id} row-cycle=${heldGen} notif-seq=${notifSeq})`);
                     continue;
                 }
-                const rowStatus = known.status ?? '';
-                if (isSdkFleetTaskTerminal(rowStatus)) {
-                    if (isWashGreen(rowStatus, n.status)) {
-                        washBlocked = true;
-                        debug(`[fleet-frame] bg_notification WASH-GREEN blocked(row=${id} row-status=${rowStatus} notif=${n.status})`);
-                        continue;
-                    }
-                    if (rowStatus !== n.status) {
-                        const upgraded = { ...known, status: coerced };
-                        retained.set(id, { row: upgraded, expireAt: nowMs + TERMINAL_RETAIN_MS });
-                        taskMap.set(id, upgraded);
-                    }
-                    writtenIds.add(id);
-                    applied = true;
-                }
-                else {
-                    const started = known.startedAt;
-                    const meta = rowMeta.get(id);
-                    const frozenElapsed = typeof started === 'number' && started > 0 && started <= nowMs
-                        ? nowMs - started
-                        : meta !== undefined && isElapsedBase(known.elapsedMs)
-                            ? known.elapsedMs + Math.max(0, nowMs - meta.receivedAtMs)
-                            : known.elapsedMs;
-                    taskMap.delete(id);
-                    rowMeta.delete(id);
-                    retained.set(id, {
-                        row: {
-                            ...known,
-                            status: coerced,
-                            ...(typeof frozenElapsed === 'number' ? { elapsedMs: frozenElapsed } : {}),
-                        },
-                        expireAt: nowMs + TERMINAL_RETAIN_MS,
-                        retiredByNotification: true,
-                    });
-                    writtenIds.add(id);
-                    applied = true;
-                }
+                const started = known.startedAt;
+                const meta = rowMeta.get(id);
+                const frozenElapsed = typeof started === 'number' && started > 0 && started <= nowMs
+                    ? nowMs - started
+                    : meta !== undefined && isElapsedBase(known.elapsedMs)
+                        ? known.elapsedMs + Math.max(0, nowMs - meta.receivedAtMs)
+                        : known.elapsedMs;
+                taskMap.delete(id);
+                rowMeta.delete(id);
+                retained.set(id, {
+                    row: {
+                        ...known,
+                        status: coerced,
+                        ...(typeof frozenElapsed === 'number' ? { elapsedMs: frozenElapsed } : {}),
+                    },
+                    expireAt: nowMs + TERMINAL_RETAIN_MS,
+                    retiredByNotification: true,
+                });
+                writtenIds.add(id);
+                applied = true;
             }
             for (const [id, entry] of retained) {
                 if (writtenIds.has(id))
@@ -480,15 +492,18 @@ export function createFleetLedger(hooks = {}, opts = {}) {
                 (applied ||
                     (!washBlocked &&
                         (() => {
-                            const prior = getBgTerminalFacts(n.taskId);
-                            if (prior === undefined)
-                                return true;
-                            const order = cycleSeqOrder(notifSeq, prior.cycleSeq);
-                            if (order === 'before')
-                                return false;
-                            if (order === 'after')
-                                return true;
-                            return !isWashGreen(prior.status, n.status);
+                            for (const prior of [getBgTerminalFacts(n.taskId), settledTerminal.get(notifTail)]) {
+                                if (prior === undefined)
+                                    continue;
+                                const order = cycleSeqOrder(notifSeq, prior.cycleSeq);
+                                if (order === 'before')
+                                    return false;
+                                if (order === 'after')
+                                    continue;
+                                if (isWashGreen(prior.status, n.status))
+                                    return false;
+                            }
+                            return true;
                         })()));
             if (factsAccepted)
                 raiseCycleWatermark(n.taskId, notifSeq);
@@ -525,8 +540,6 @@ export function createFleetLedger(hooks = {}, opts = {}) {
     function project(nowMs, opts) {
         const viewingTaskId = opts.viewingTaskId;
         const liveRows = [...taskMap.values()].map(r => {
-            if (isSdkFleetTaskTerminal(r.status))
-                return r;
             const started = r.startedAt;
             if (typeof started === 'number' && started > 0 && started <= nowMs) {
                 return { ...r, elapsedMs: nowMs - started };
@@ -620,6 +633,7 @@ export function createFleetLedger(hooks = {}, opts = {}) {
         wfMap.clear();
         rowMeta.clear();
         retained.clear();
+        settledTerminal.clear();
         contentAnchorSet = false;
         contentAnchor = undefined;
         debug(`[fleet-frame] 会话锚变更(${from ?? '-'} → ${to ?? '-'})⇒ 清上一会话的行/留存` +

package/dist/fleet/fleetProjection.d.ts

@@ -30,6 +30,7 @@ export interface FleetTaskView {
     }>;
     cycleSeq?: number;
     retiredBy?: string;
+    workspaceSnapshot?: 'failed';
 }
 export interface FleetRowUsage {
     totalTokens?: number;

package/dist/fleet/fleetProjection.js

@@ -132,6 +132,9 @@ function wireRetiredBy(r) {
     const v = r.retiredBy;
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
+function wireWorkspaceSnapshot(r) {
+    return r.workspaceSnapshot === 'failed' ? 'failed' : undefined;
+}
 export function wireResumable(r) {
     return typeof r.resumable === 'boolean' ? r.resumable : undefined;
 }
@@ -167,6 +170,7 @@ export function projectTasks(allRows, opts) {
         const editedFiles = wireEditedFiles(r);
         const cycleSeq = wireCycleSeq(r);
         const retiredBy = wireRetiredBy(r);
+        const workspaceSnapshot = wireWorkspaceSnapshot(r);
         const task = {
             id: r.id,
             name: deriveAgentLabel(r.agentType, r.agentName, r.name, r.id),
@@ -191,6 +195,7 @@ export function projectTasks(allRows, opts) {
             ...(editedFiles !== undefined ? { editedFiles } : {}),
             ...(cycleSeq !== undefined ? { cycleSeq } : {}),
             ...(retiredBy !== undefined ? { retiredBy } : {}),
+            ...(workspaceSnapshot !== undefined ? { workspaceSnapshot } : {}),
         };
         return task;
     });
@@ -245,6 +250,7 @@ const FLEET_TASK_VIEW_KEY_TUPLE = [
     'editedFiles',
     'cycleSeq',
     'retiredBy',
+    'workspaceSnapshot',
 ];
 export const FLEET_TASK_VIEW_KEYS = FLEET_TASK_VIEW_KEY_TUPLE;
 const FLEET_WORKFLOW_VIEW_KEY_TUPLE = [
@@ -286,6 +292,7 @@ const FLEET_TASK_ROW_WIRE_KEY_TUPLE = [
     'editedFiles',
     'cycleSeq',
     'retiredBy',
+    'workspaceSnapshot',
 ];
 export const FLEET_TASK_ROW_WIRE_KEYS = FLEET_TASK_ROW_WIRE_KEY_TUPLE;
 const FLEET_WORKFLOW_ROW_WIRE_KEY_TUPLE = [
@@ -305,9 +312,9 @@ export const FLEET_TASK_ROW_KEYS_NOT_PROJECTED = {
     sourceLane: {
         kind: 'by-design',
         owner: 'client-core 规范重构轮',
-        reason: 'SDK 3.0.0 新键([2070]① 让位半场:前台 delegation 复合 id 行带 "run-leg" 标)。两仓现零消费面 ——' +
-            '#95 纪律:没人读的键不盲投。已知潜在消费方=壳 wf-panel 的双生行过滤(现走 taskId 台账补偿),' +
-            '若迁到本键判别则届时投影并删本条(那是行为改动,单独批)。',
+        reason: 'SDK 3.0.0 新键([2070]① 让位半场:前台 delegation 复合 id 行带 "run-leg" 标)。**渲染视图**(FleetTaskView)不投 —— 渲染面没有按车道分支的需求,' +
+            '#95 纪律:没人读的键不盲投。🆕 0.96.0 CC-643 起它有了消费者,但住在另一张读面:在飞 bg 读面行(EngineActiveBgTask)投了它,' +
+            '「这一行是不是后台子代」的单一判定口 isBackgroundSubagentRow 读它(见 fleet/bgSubagentRow.ts);视图不投的理由不变,不是第二份真源。',
     },
     agentType: {
         kind: 'by-design',

package/dist/fleetTaskDesc.js

@@ -1,25 +1,12 @@
-import { applyDisplayFace, LEGACY_ESCAPE_FACE, LEGACY_LABEL_FACE } from './displayUntrusted.js';
+import { applyDisplayFace, ESCAPE_FACE, LABEL_FACE, paintAndCap } from './displayUntrusted.js';
 export function escapeDisplayControlChars(s) {
-    return applyDisplayFace(s, LEGACY_ESCAPE_FACE);
+    return applyDisplayFace(s, ESCAPE_FACE);
 }
 export function capForDisplay(raw, max) {
-    const escaped = escapeDisplayControlChars(raw);
-    if (escaped.length <= max)
-        return escaped;
-    let cut = max;
-    const tokenStart = escaped.lastIndexOf('\\', cut - 1);
-    if (tokenStart >= 0 && tokenStart + 6 > cut && /^\\u[0-9A-F]{4}$/.test(escaped.slice(tokenStart, tokenStart + 6))) {
-        cut = tokenStart;
-    }
-    if (cut > 0) {
-        const code = escaped.charCodeAt(cut - 1);
-        if (code >= 0xd800 && code <= 0xdbff)
-            cut -= 1;
-    }
-    return cut > 0 ? escaped.slice(0, cut) : '';
+    return paintAndCap(raw, ESCAPE_FACE, typeof max === 'number' && max > 0 ? max : 0);
 }
 export function collapseLabel(s) {
-    return applyDisplayFace(s, LEGACY_LABEL_FACE);
+    return applyDisplayFace(s, LABEL_FACE);
 }
 export function taskDescFromName(name, agentType, agentName) {
     if (!name || !agentType)

package/dist/gateOutcome.d.ts

@@ -32,9 +32,20 @@ export interface GateModeReleaseView {
     mandate?: string;
     reason?: string;
 }
-export declare const GATE_MODE_RELEASE_REASON_WORDS: readonly ["rule_unreadable", "write_protection_unresolved"];
+export declare const GATE_MODE_RELEASE_REASON_WORDS: readonly ["rule_unreadable", "target_unresolved"];
 export type GateModeReleaseReasonWord = (typeof CORE_MODE_RELEASE_REASONS)[number];
 export declare function isGateModeReleaseReasonWord(v: unknown): v is GateModeReleaseReasonWord;
+export declare function modeReleaseReasonSentence(reason: string | null | undefined): string | undefined;
+export interface ReleaseDisclosureIdentity {
+    readonly toolCallId?: string;
+    readonly callKey?: string;
+    readonly epoch?: string | number;
+}
+export interface ReleaseDisclosureLedger {
+    readonly has: (identity: ReleaseDisclosureIdentity | null | undefined) => boolean;
+    readonly mark: (identity: ReleaseDisclosureIdentity | null | undefined) => void;
+}
+export declare function createReleaseDisclosureLedger(): ReleaseDisclosureLedger;
 export interface SettlementWhoView {
     party: string;
     approver?: string;

package/dist/gateOutcome.js

@@ -1,7 +1,8 @@
 import { ccToolDenialKindForSettledBy, isCcToolDenialKind, isGateDeniedByWord } from './gateVocabulary.js';
 import { GATE_PARKED_ERROR_CODE } from './engineErrorCodes.js';
 import { CORE_MODE_RELEASE_REASONS, CORE_SETTLEMENT_KINDS } from './generated/engineFactTables.js';
-import { readAskOrigin } from './ownKey.js';
+import { currentEngineWord } from './engineWordRenames.js';
+import { readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 function str(v) {
     return typeof v === 'string' && v.length > 0 ? v : undefined;
 }
@@ -9,6 +10,62 @@ export const GATE_MODE_RELEASE_REASON_WORDS = CORE_MODE_RELEASE_REASONS;
 export function isGateModeReleaseReasonWord(v) {
     return typeof v === 'string' && CORE_MODE_RELEASE_REASONS.includes(v);
 }
+const MODE_RELEASE_SENTENCE_BY_REASON = Object.freeze({
+    rule_unreadable: 'The permission mode let this call run without asking, even though it could not be checked against your saved permission rules.',
+    target_unresolved: 'The permission mode let this call run without asking, even though it could not be determined where its write lands on disk, so whether it lands on a guarded location is unknown.',
+});
+const MODE_RELEASE_UNRECOGNISED_SENTENCE = 'The permission mode let this call run without asking, for a reason this client does not recognise.';
+export function modeReleaseReasonSentence(reason) {
+    try {
+        if (typeof reason !== 'string' || reason === '')
+            return undefined;
+        const word = currentEngineWord(reason);
+        return Object.hasOwn(MODE_RELEASE_SENTENCE_BY_REASON, word)
+            ? MODE_RELEASE_SENTENCE_BY_REASON[word]
+            : MODE_RELEASE_UNRECOGNISED_SENTENCE;
+    }
+    catch {
+        return undefined;
+    }
+}
+const RELEASE_DISCLOSURE_LEDGER_MAX = 256;
+function releaseDisclosureKeyOf(identity) {
+    try {
+        if (typeof identity !== 'object' || identity === null)
+            return undefined;
+        const callId = readOwnDataNonEmptyString(identity, 'toolCallId');
+        if (callId !== undefined) {
+            const epoch = readOwnDataValue(identity, 'epoch');
+            const scope = typeof epoch === 'string' ? epoch : typeof epoch === 'number' && Number.isFinite(epoch) ? String(epoch) : '';
+            return JSON.stringify(['call', scope, callId]);
+        }
+        const cardKey = readOwnDataNonEmptyString(identity, 'callKey');
+        return cardKey !== undefined ? JSON.stringify(['card', cardKey]) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function createReleaseDisclosureLedger() {
+    const said = new Set();
+    return Object.freeze({
+        has(identity) {
+            const key = releaseDisclosureKeyOf(identity);
+            return key !== undefined && said.has(key);
+        },
+        mark(identity) {
+            const key = releaseDisclosureKeyOf(identity);
+            if (key === undefined || said.has(key))
+                return;
+            said.add(key);
+            if (said.size > RELEASE_DISCLOSURE_LEDGER_MAX) {
+                const oldest = said.values().next();
+                if (oldest.done !== true)
+                    said.delete(oldest.value);
+            }
+        },
+    });
+}
 export const SETTLEMENT_KIND_WORDS = CORE_SETTLEMENT_KINDS;
 function readWho(v) {
     if (typeof v !== 'object' || v === null || Array.isArray(v))

package/dist/gateVocabulary.d.ts

@@ -1,5 +1,5 @@
-import { CORE_DENIED_BY_VALUES } from './generated/engineFactTables.js';
-import type { APPROVAL_MANDATE_WORDS } from './hitl/toolApprovalWire.js';
+import { CORE_DENIED_BY_VALUES, CORE_PERSISTED_RULE_MANDATES } from './generated/engineFactTables.js';
+import { PRIOR_ENGINE_WORD_RENAMES, type PriorEngineWord } from './engineWordRenames.js';
 export declare const CC_TOOL_DENIAL_KINDS: readonly ["user-rejected", "permission-rule", "automode-blocked", "automode-unavailable", "automode-parsing-error", "interrupted", "cancelled"];
 export type CcToolDenialKind = (typeof CC_TOOL_DENIAL_KINDS)[number];
 export declare function isCcToolDenialKind(v: unknown): v is CcToolDenialKind;
@@ -11,6 +11,11 @@ export declare function isGateDeniedByWord(v: unknown): v is GateDeniedByWord;
 export declare function gateDeniedByDetail(deniedBy: unknown): string;
 export declare function askOriginDetail(origin: unknown): string;
 export declare function mandatedApprovalDetail(): string;
+type RetiredMandateWord = {
+    [K in PriorEngineWord]: (typeof PRIOR_ENGINE_WORD_RENAMES)[K] extends (typeof CORE_PERSISTED_RULE_MANDATES)[number] ? K : never;
+}[PriorEngineWord];
+export declare const APPROVAL_MANDATE_WORDS: readonly ((typeof CORE_PERSISTED_RULE_MANDATES)[number] | RetiredMandateWord)[];
 export type ApprovalMandateWord = (typeof APPROVAL_MANDATE_WORDS)[number];
 export declare function isApprovalMandateWord(v: unknown): v is ApprovalMandateWord;
 export declare function approvalMandateDetail(word: ApprovalMandateWord): string;
+export {};

package/dist/gateVocabulary.js

@@ -1,4 +1,5 @@
-import { CORE_DENIED_BY_VALUES } from './generated/engineFactTables.js';
+import { CORE_DENIED_BY_VALUES, CORE_PERSISTED_RULE_MANDATES } from './generated/engineFactTables.js';
+import { PRIOR_ENGINE_WORD_RENAMES } from './engineWordRenames.js';
 export const CC_TOOL_DENIAL_KINDS = Object.freeze([
     'user-rejected',
     'permission-rule',
@@ -71,6 +72,8 @@ export function askOriginDetail(origin) {
 export function mandatedApprovalDetail() {
     return 'no saved allow rule and no remembered answer can retire this question; each call is settled on its own — by you here or by an automatic check the deployment runs — and an answer covers only that call';
 }
+const RETIRED_MANDATE_WORDS = Object.freeze(Object.keys(PRIOR_ENGINE_WORD_RENAMES).filter((k) => CORE_PERSISTED_RULE_MANDATES.includes(PRIOR_ENGINE_WORD_RENAMES[k])));
+export const APPROVAL_MANDATE_WORDS = Object.freeze([...CORE_PERSISTED_RULE_MANDATES, ...RETIRED_MANDATE_WORDS]);
 const _mandateWordsPin = true;
 void _mandateWordsPin;
 export function isApprovalMandateWord(v) {
@@ -82,6 +85,7 @@ const APPROVAL_MANDATE_SENTENCES = Object.freeze({
     probe_mandate: 'the check run on this call marked it as needing its own confirmation (the built-in shell check does so for a read outside the directories allowed for this session)',
     probe_unanswered: 'the check run on this call did not answer (it timed out or failed; this client cannot tell which), so whether the call stays inside the directories allowed for this session is unknown',
     write_protection: "this change lands on a protected location (the agent's own configuration), which is confirmed one change at a time",
+    target_unresolved: 'where this change lands on disk could not be determined (a link on the way could not be examined, or the target could not be resolved), so whether it lands on a guarded location is unknown',
     write_protection_unresolved: 'the protected-location check could not tell where this change lands, so whether it touches a protected location is unknown',
 });
 const APPROVAL_MANDATE_SET = new Set(Object.keys(APPROVAL_MANDATE_SENTENCES));

package/dist/generated/engineAskFaceTables.js

@@ -7,6 +7,6 @@ export const CORE_SHELL_FACE_TOOL_NAMES = Object.freeze([
     "Monitor",
 ]);
 export const CORE_RELEASABLE_ASK_CLASSES_BY_FACE = Object.freeze({
-    "shell": Object.freeze(["transcript_write", "rule_unreadable", "write_protection_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
+    "shell": Object.freeze(["transcript_write", "rule_unreadable", "target_unresolved", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
     "other": Object.freeze(["transcript_write", "rule_unreadable", "probe", "write_protection", "tool_marks_mcp", "tool_marks_a2a", "artifact_shared_read", "mode", "unstated", "ordinary"]),
 });

package/dist/generated/engineFactTables.d.ts

@@ -8,7 +8,7 @@ export declare const CORE_DENIED_BY_VALUES: readonly ["policy", "hook", "org", "
 export declare const CORE_PERMISSION_MODE_FOLD_REASONS: readonly string[];
 export declare const CORE_ENGINE_CARD_TYPES: readonly string[];
 export declare const CORE_TOOL_DECLARATION_CODES: readonly string[];
-export declare const CORE_MODE_RELEASE_REASONS: readonly ["rule_unreadable", "write_protection_unresolved"];
+export declare const CORE_MODE_RELEASE_REASONS: readonly ["rule_unreadable", "target_unresolved"];
 export declare const CORE_HOOK_TOOL_ALIASES: Readonly<Record<string, string>>;
 export declare const CORE_ASK_EVIDENCE_ABSENCE_VALUES: readonly ["not_wired", "not_adjudicated", "unavailable", "no_match", "not_reported"];
 export declare const CORE_SYSTEM_INJECTION_PRIORITIES: readonly ["now", "next", "later"];
@@ -21,9 +21,9 @@ export interface CoreModeArbitrationRow {
     readonly ruleMayClear: boolean;
     readonly hookAskFloor: boolean;
 }
-export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "transcript_write" | "org_rule" | "governance_unavailable" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "write_protection_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
+export declare const CORE_MODE_ARBITRATION: Readonly<Record<"content_question" | "hook" | "ancestor" | "dangerous_delete" | "unverifiable_delete" | "unverifiable_shell_text" | "transcript_write" | "org_rule" | "governance_unavailable" | "rule_unreadable" | "ask_rule" | "denial_limit_fallback" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "target_unresolved" | "probe" | "write_protection" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "mode" | "unstated" | "ordinary", CoreModeArbitrationRow>>;
 export declare const CORE_SKILL_GRANT_ORIGINS: readonly ["model", "user", "inherited"];
-export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "path_pattern", "domain", "content_unsupported", "grammar", "tool_name", "near_miss"];
+export declare const CORE_ALLOW_ENTRY_INERT_REASONS: readonly ["wildcard_all", "namespace_wildcard", "content_unsupported", "grammar", "tool_name", "near_miss"];
 export declare const CORE_ALLOW_RULE_MEMBERS: readonly ["hook", "deployment", "persisted", "skill", "request"];
 export declare const CORE_RULE_TOOL_NAME_VERDICTS: readonly ["current", "retired", "unprefixed_namespace", "unmintable_segment"];
 export declare const CORE_SETTLEMENT_KINDS: readonly ["human_allowed", "human_refused", "approval_window_expired", "denial_limit_window_expired", "park_sla_expired", "no_approver", "approver_unavailable", "approver_error", "approver_contract", "presentation_failed", "blanket_allow_refused", "policy_allowed", "policy_refused", "task_aborted"];
@@ -32,6 +32,7 @@ export declare const CORE_AUTO_MODE_UNAVAILABLE_CAUSES: readonly ["error", "time
 export declare const CORE_DEFAULT_TIER_ORDER: readonly ["ultra", "max", "pro", "flash", "lite"];
 export declare const CORE_CC_MODEL_TIER_ALIASES: Readonly<Record<"fable" | "mythos" | "opus" | "sonnet" | "haiku", (typeof CORE_DEFAULT_TIER_ORDER)[number]>>;
 export declare const CORE_DURABLE_AGENT_HANDLE_RE: RegExp;
+export declare const CORE_TASK_HANDLE_PREFIXES: Readonly<Record<"background_bash" | "workflow" | "background_agent" | "monitor", string>>;
 export declare const CORE_PERMISSION_MODE_CLASSES: readonly ["bypass", "prompting"];
 export declare const CORE_MCP_LIVENESS_STATES: readonly ["reachable", "unreachable", "unknown"];
 export declare const CORE_RULE_BEHAVIORS: readonly ["deny", "ask", "allow"];
@@ -40,3 +41,4 @@ export declare const CORE_MAX_PENDING_STEER_CHARS: number;
 export declare const CORE_PROMPT_BLOCK_CAUSES: readonly ["block", "crashed", "timeout", "cancelled"];
 export declare const CORE_PERMISSION_MODES: readonly ["default", "acceptEdits", "plan", "auto", "bypassPermissions", "dontAsk"];
 export declare const CORE_APPROVAL_REACH: readonly ["none"];
+export declare const CORE_PERSISTED_RULE_MANDATES: readonly ["operator_always", "tool_marks", "probe_mandate", "probe_unanswered", "write_protection", "target_unresolved"];

package/dist/generated/engineFactTables.js

@@ -113,7 +113,7 @@ export const CORE_TOOL_DECLARATION_CODES = Object.freeze([
 ]);
 export const CORE_MODE_RELEASE_REASONS = Object.freeze([
     "rule_unreadable",
-    "write_protection_unresolved",
+    "target_unresolved",
 ]);
 export const CORE_HOOK_TOOL_ALIASES = Object.freeze(Object.assign(Object.create(null), Object.fromEntries([
     ["ListPeers", "ListAgents"],
@@ -147,6 +147,7 @@ export const CORE_MODE_ARBITRATION = Object.freeze({
     "ancestor": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "dangerous_delete": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "unverifiable_delete": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
+    "unverifiable_shell_text": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "transcript_write": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "org_rule": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "governance_unavailable": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
@@ -157,7 +158,7 @@ export const CORE_MODE_ARBITRATION = Object.freeze({
     "requires_user_interaction": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: true }),
     "operator_forced": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
     "shell_floor": Object.freeze({ bypassImmune: true, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
-    "write_protection_unresolved": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
+    "target_unresolved": Object.freeze({ bypassImmune: true, classifierEligible: false, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "probe": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: false, ruleMayClear: false, hookAskFloor: false }),
     "write_protection": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: true }),
     "tool_marks_mcp": Object.freeze({ bypassImmune: false, classifierEligible: true, sandboxAdmission: true, ruleMayClear: false, hookAskFloor: false }),
@@ -176,8 +177,6 @@ export const CORE_SKILL_GRANT_ORIGINS = Object.freeze([
 export const CORE_ALLOW_ENTRY_INERT_REASONS = Object.freeze([
     "wildcard_all",
     "namespace_wildcard",
-    "path_pattern",
-    "domain",
     "content_unsupported",
     "grammar",
     "tool_name",
@@ -235,6 +234,12 @@ export const CORE_CC_MODEL_TIER_ALIASES = Object.freeze({
     "haiku": "lite",
 });
 export const CORE_DURABLE_AGENT_HANDLE_RE = Object.freeze(/^a[0-9a-f]{6,32}$/);
+export const CORE_TASK_HANDLE_PREFIXES = Object.freeze({
+    "background_bash": "b",
+    "workflow": "w",
+    "background_agent": "a",
+    "monitor": "m",
+});
 export const CORE_PERMISSION_MODE_CLASSES = Object.freeze([
     "bypass",
     "prompting",
@@ -268,3 +273,11 @@ export const CORE_PERMISSION_MODES = Object.freeze([
 export const CORE_APPROVAL_REACH = Object.freeze([
     "none",
 ]);
+export const CORE_PERSISTED_RULE_MANDATES = Object.freeze([
+    "operator_always",
+    "tool_marks",
+    "probe_mandate",
+    "probe_unanswered",
+    "write_protection",
+    "target_unresolved",
+]);