@sema-agent/client-core 0.95.0 → 0.97.0

package/dist/hookMatcherVerdict.js

@@ -1,5 +1,6 @@
 import { HOOK_TOOL_ALIASES } from './hookToolAliases.js';
 import { SETTINGS_TOOL_NAME_MATCHER_EVENTS } from './generated/settingsSchemaTables.js';
+import { SETTINGS_HOOK_MATCHER_FORM, SETTINGS_HOOK_MATCHER_SELECTS } from './generated/settingsSchemaFns.js';
 const TOOL_NAME_MATCHER_EVENTS = new Set(SETTINGS_TOOL_NAME_MATCHER_EVENTS);
 const MATCHER_MAX_CHARS = 8192;
 const PATTERN_WORK_BUDGET = 10_000_000;
@@ -14,30 +15,6 @@ function refused(reading, p) {
 function aliasPairs() {
     return Object.entries(HOOK_TOOL_ALIASES).map(([alias, canonical]) => ({ alias, canonical }));
 }
-function literalNames(matcher) {
-    const names = [];
-    let first = -1;
-    let last = -1;
-    for (let i = 0; i <= matcher.length; i++) {
-        const c = i < matcher.length ? matcher.charCodeAt(i) : 0x7c;
-        if (c === 0x7c || c === 0x2c) {
-            if (first !== -1)
-                names.push(matcher.slice(first, last + 1));
-            first = -1;
-            last = -1;
-            continue;
-        }
-        if (c === 0x20)
-            continue;
-        const nameChar = (c >= 0x30 && c <= 0x39) || (c >= 0x41 && c <= 0x5a) || (c >= 0x61 && c <= 0x7a) || c === 0x5f || c === 0x2d;
-        if (!nameChar)
-            return undefined;
-        if (first === -1)
-            first = i;
-        last = i;
-    }
-    return names;
-}
 const UNSUPPORTED = Symbol('unsupported');
 const SINGLE_CHAR_ESCAPES = 'dDwWsStnrfv^$\\.*+?()[]{}|/-';
 function patternBound(src, n) {
@@ -202,52 +179,35 @@ function patternBound(src, n) {
 export function hookMatcherVerdict(event, matcher) {
     if (typeof event !== 'string' || !TOOL_NAME_MATCHER_EVENTS.has(event))
         return unjudged('event_out_of_scope');
-    if (matcher === undefined)
-        return Object.freeze({ kind: 'matchesAll' });
-    if (typeof matcher !== 'string')
+    if (matcher !== undefined && typeof matcher !== 'string')
         return unjudged('not_a_string');
-    if (matcher.length > MATCHER_MAX_CHARS)
+    if (matcher !== undefined && matcher.length > MATCHER_MAX_CHARS)
         return unjudged('oversize');
-    if (matcher === '' || matcher === '*')
-        return Object.freeze({ kind: 'matchesAll' });
-    const pairs = aliasPairs();
-    const names = literalNames(matcher);
-    if (names !== undefined) {
-        const dead = pairs.find((p) => names.includes(p.alias) && !names.includes(p.canonical));
-        if (dead !== undefined)
-            return refused('names', dead);
-        return Object.freeze({
-            kind: 'accepted',
-            reading: 'names',
-            names: Object.freeze([...names]),
-            aliases: Object.freeze(pairs.filter((p) => names.includes(p.alias)).map((p) => Object.freeze({ ...p }))),
-        });
-    }
-    const src = `^(?:${matcher})$`;
-    let re;
-    try {
-        re = new RegExp(src);
-    }
-    catch {
+    const form = SETTINGS_HOOK_MATCHER_FORM(matcher);
+    if (form === 'invalid')
         return unjudged('invalid_pattern');
+    const pairs = aliasPairs();
+    if (form === 'regex' && matcher !== undefined) {
+        const subjects = pairs.flatMap((p) => [p.alias, p.canonical]);
+        const n = subjects.reduce((a, s) => Math.max(a, s.length), 0);
+        const bound = patternBound(matcher, n);
+        if (bound === undefined)
+            return unjudged('pattern_unsupported');
+        if (bound[0] * bound[1] * (n + 1) * subjects.length > PATTERN_WORK_BUDGET)
+            return unjudged('over_budget');
     }
-    const subjects = pairs.flatMap((p) => [p.alias, p.canonical]);
-    const n = subjects.reduce((a, s) => Math.max(a, s.length), 0);
-    const bound = patternBound(src, n);
-    if (bound === undefined)
-        return unjudged('pattern_unsupported');
-    if (bound[0] * bound[1] * (n + 1) * subjects.length > PATTERN_WORK_BUDGET)
-        return unjudged('over_budget');
     const selects = (name) => {
-        if (matcher === name)
-            return true;
         try {
-            return re.test(name);
+            const v = SETTINGS_HOOK_MATCHER_SELECTS(matcher, name);
+            return typeof v === 'boolean' ? v : undefined;
         }
         catch {
             return undefined;
         }
     };
+    if (form === 'literal' && selects('') === true)
+        return Object.freeze({ kind: 'matchesAll' });
+    const reading = form === 'regex' ? 'pattern' : 'names';
     const selected = [];
     for (const p of pairs) {
         const a = selects(p.alias);
@@ -259,8 +219,8 @@ export function hookMatcherVerdict(event, matcher) {
         if (c === undefined)
             return unjudged('invalid_pattern');
         if (!c)
-            return refused('pattern', p);
+            return refused(reading, p);
         selected.push(p);
     }
-    return Object.freeze({ kind: 'accepted', reading: 'pattern', aliases: Object.freeze(selected.map((p) => Object.freeze({ ...p }))) });
+    return Object.freeze({ kind: 'accepted', reading, aliases: Object.freeze(selected.map((p) => Object.freeze({ ...p }))) });
 }

package/dist/hooksWireCaps.js

@@ -1,6 +1,6 @@
 import { engineCapNestedTrue, engineCapState, engineCapValue } from './engineCapsCache.js';
 import { displayUntrusted } from './displayUntrusted.js';
-import { collapseLabel } from './fleetTaskDesc.js';
+import { capForDisplay, collapseLabel } from './fleetTaskDesc.js';
 import { hostLog, hostSettings } from './host.js';
 import { createSettingsHookJudge, decidePluginHooks, dedupeSettingsHookGroups, filterSettingsHookGroups, occupancyOf, settingsHookDropText, } from './pluginHooksWire.js';
 import { MAX_HOOK_NOTICE_TEXT_CHARS } from './notifications.js';
@@ -462,5 +462,5 @@ export function hookFailureNoticeText(n) {
     const name = collapseLabel(n.hookName);
     const tail = n.stderr !== undefined ? `: ${collapseLabel(n.stderr)}` : '';
     const line = `${HOOK_FAILURE_WARN_PREFIX}: ${name} (${code})${tail}`;
-    return line.length <= MAX_HOOK_NOTICE_TEXT_CHARS ? line : line.slice(0, MAX_HOOK_NOTICE_TEXT_CHARS);
+    return capForDisplay(line, MAX_HOOK_NOTICE_TEXT_CHARS);
 }

package/dist/hostCallbackGuard.d.ts

@@ -1 +1,2 @@
 export declare function invokeHostCallbackIsolated(label: string, call: () => void): void;
+export declare function reasonOfThrownWithSink(e: unknown, sink: (log: string) => void): string;

package/dist/hostCallbackGuard.js

@@ -1,4 +1,5 @@
 import { hostLog } from './host.js';
+import { wireFailureTextsOf } from './wireFailureShape.js';
 function faultText(e) {
     try {
         return String(e).slice(0, 160);
@@ -23,3 +24,8 @@ export function invokeHostCallbackIsolated(label, call) {
         reportHostCallbackFault(label, 'threw', e);
     }
 }
+export function reasonOfThrownWithSink(e, sink) {
+    const t = wireFailureTextsOf(e);
+    invokeHostCallbackIsolated('hostCallbackGuard: onFailure', () => sink(t.log));
+    return t.reason;
+}

package/dist/index.d.ts

@@ -13,7 +13,7 @@ export * from './adapt/textSegmentAuthority.js';
 export * from './engineHttpTools.js';
 export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordBgTerminalFacts, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
 export type { BgTerminalFacts, SubagentContentEvent, SubagentContentItem, SubagentContentSnapshot, SubagentContentStoreConfig, SubagentOwnerRecord, SubagentOwnerSessionConflict, SubagentViewSlot, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
@@ -24,8 +24,8 @@ export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay,
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
-export type { EngineCapState, EngineCapValueState, } from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export type { EngineCapState, EngineCapsLanding, EngineCapsProbeRotation, EngineCapValueState, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -46,9 +46,10 @@ export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
-export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_PARKED_RUN_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunParked, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
 export type { CcTaskTerminalStatus, CoreSemaTaskTerminalStatus, CoreTaskNotificationTerminalStatus, CoreTerminalCauseKind, SdkFleetTaskTerminalStatus, SdkRunTerminalStatus, } from './terminalStatuses.js';
-export type { ProviderRejectionResend } from './providerRejection.js';
+export type { ProviderRejectionResend, ProviderRejectionKind } from './providerRejection.js';
+export { PROVIDER_REJECTION_KINDS } from './providerRejection.js';
 export * from './runCancelContext.js';
 export * from './argvFlagValue.js';
 export * from './readFacePosture.js';
@@ -57,6 +58,7 @@ export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
 export * from './sessionSyncFileHistoryCapability.js';
+export * from './sessionSyncFileHistory.js';
 export * from './workflowsJournalCapability.js';
 export * from './userInvokedSkillsCapability.js';
 export * from './skillToolListsCapability.js';
@@ -82,7 +84,7 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
 export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntrustedMarked } from './displayUntrusted.js';
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
@@ -94,7 +96,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
@@ -121,6 +123,7 @@ export * from './sealedKeyCapability.js';
 export * from './storePostureCapability.js';
 export * from './centerWiringCapability.js';
 export * from './registryQuotaUsage.js';
+export * from './engineDirectory.js';
 export * from './selfOrchestrationWireCaps.js';
 export * from './skillsWireCaps.js';
 export * from './ultracodeWireCaps.js';
@@ -164,6 +167,7 @@ export * from './headlessReconnectWire.js';
 export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, projectDescription, projectTasks, projectWorkflows, wireResumable, wireRowUsage, } from './fleet/fleetProjection.js';
 export type { FleetRowUsage, FleetTaskStatus, FleetTaskView, FleetWorkflowView, NotProjectedEntry, ProjectTasksOptions, } from './fleet/fleetProjection.js';
 export * from './fleet/fleetLedger.js';
+export * from './fleet/bgSubagentRow.js';
 export * from './fleet/workflowSizeWarning.js';
 export * from './subagent/engineDelegatedPrompt.js';
 export * from './subagent/engineRowStopGate.js';
@@ -199,7 +203,7 @@ export type { AttachmentSeatReading } from './attachmentSeatCapability.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
-export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, coreVersionTier } from './supportFloor.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, engineSupportFloorEffective, coreVersionTier } from './supportFloor.js';
 export type { SupportFloor, SupportFloorComponent, EngineVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
@@ -221,12 +225,15 @@ export type { ActiveGate, ApprovalsResourceLike, AskAnswer, AssistantResourceLik
 export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
-export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
+export { toolEndOutputText } from './toolResultContent.js';
+export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export type { ClassifierDenyContext, HitlHostSurface, HitlNotice, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
+export { ruleToolNameVerdictOf } from './protocolSegment.js';
+export type { RuleToolNameReading } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
@@ -242,11 +249,12 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
-export { replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
+export { replayedApprovalClosesCardFrame, replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
 export type { ReplayedApprovalDisposition, ReplayPendingBasis } from './hitl/replayedApproval.js';
 export { hasLedgerPositionKey } from './hitl/gateLedger.js';
 export { MODE_ARBITRATION, automaticAnswerVerdict, mandatedApprovalDetailOf, permissionRequestHookScope, type AutomaticAnswerLane, type AutomaticAnswerAskFace, type AutomaticAnswerFacts, type AutomaticAnswerRoad, type AutomaticAnswerUnknownWhy, type AutomaticAnswerVerdict, type PermissionRequestHookScope, } from './hitl/automaticAnswerVerdict.js';
-export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, type DecisionRefusalStanding, type DecisionRefusalClassified, type DecisionRefusalConflict, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
+export { standingRowsOf, type StandingRows, type StandingRowsWhy, type StandingRowWhy, type StandingPersistentRow, type StandingRowsHostFacts, } from './hitl/standingRows.js';
+export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decisionRefusalAskReading, type DecisionRefusalAskReading, type DecisionRefusalStanding, type DecisionRefusalClassified, type DecisionRefusalConflict, type LiveAskPendingReading, type UndeliverableDecisionEnd, type UndeliverableDecisionFacts, } from './hitl/decisionRefusal.js';
 export { noAllowCauseOf, type NoAllowCause, type RuleLadderNoAllowFacts } from './hitl/noAllowCause.js';
 export { policyDenyReason, type PolicyDenyLane, type PolicyDenyReasonFacts } from './hitl/frameRouter.js';
 export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, allowRuleShadowSentence, type ApprovalAllowRuleShadow, type ApprovalAllowRuleShadowMember, type AllowRuleShadowedWireMember, } from './hitl/allowRuleShadow.js';
@@ -289,4 +297,10 @@ export type { PendingCheckpoint, RuleSuggestion } from '@sema-agent/sdk';
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';
+export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
+export type { CredentialAttachWord, CredentialConsent, CredentialFactName, CredentialFacts, CredentialProvenance, CredentialSidecarOwnership, CredentialTargetKind, CredentialTargetProvenance, } from './credentialProvenance.js';
 export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
+export type { CutForDisplayOptions, CutForDisplayResult, NoticePresentationAudience, NoticeOutlet, NoticeOccurrence, NoticeSeatClass, NoticeDeployment, NoticePresentationFacts, OutletKind, OutletReachability, OutletReachabilityContext, OutletRenderingPlan, NoticePrintCarrier, NoticePrintLineInput, NoticePrintLineResult, } from './noticePresentation.js';
+export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';
+export type { PrintPermissionOutcome, PrintPermissionOutcomeForm } from './printPermissionOutcome.js';

package/dist/index.js

@@ -11,7 +11,7 @@ export * from './adapt/textSegmentAuthority.js';
 export * from './engineHttpTools.js';
 export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordBgTerminalFacts, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
 export * from './fleetAgentPanelProjection.js';
@@ -19,7 +19,7 @@ export { reducePanelFrame, createPanelReduceState, PANEL_DELTA_OPS } from './pan
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -39,7 +39,8 @@ export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
-export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_PARKED_RUN_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunParked, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export { PROVIDER_REJECTION_KINDS } from './providerRejection.js';
 export * from './runCancelContext.js';
 export * from './argvFlagValue.js';
 export * from './readFacePosture.js';
@@ -48,6 +49,7 @@ export * from './mcpLiveness.js';
 export * from './mcpEngineLeg.js';
 export * from './mcpProbeCapability.js';
 export * from './sessionSyncFileHistoryCapability.js';
+export * from './sessionSyncFileHistory.js';
 export * from './workflowsJournalCapability.js';
 export * from './userInvokedSkillsCapability.js';
 export * from './skillToolListsCapability.js';
@@ -72,7 +74,7 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
 export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
@@ -82,7 +84,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_REFUSAL_CODES, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
@@ -106,6 +108,7 @@ export * from './sealedKeyCapability.js';
 export * from './storePostureCapability.js';
 export * from './centerWiringCapability.js';
 export * from './registryQuotaUsage.js';
+export * from './engineDirectory.js';
 export * from './selfOrchestrationWireCaps.js';
 export * from './skillsWireCaps.js';
 export * from './ultracodeWireCaps.js';
@@ -144,6 +147,7 @@ export * from './headlessPermissionModeWire.js';
 export * from './headlessReconnectWire.js';
 export { coerceTaskStatus, coerceWorkflowStatus, CONTROL_TOOL_VERBS, FLEET_TASK_ROW_KEYS_NOT_PROJECTED, FLEET_TASK_ROW_WIRE_KEYS, FLEET_TASK_VIEW_KEYS, FLEET_WORKFLOW_ROW_KEYS_NOT_PROJECTED, FLEET_WORKFLOW_ROW_WIRE_KEYS, FLEET_WORKFLOW_VIEW_KEYS, projectDescription, projectTasks, projectWorkflows, wireResumable, wireRowUsage, } from './fleet/fleetProjection.js';
 export * from './fleet/fleetLedger.js';
+export * from './fleet/bgSubagentRow.js';
 export * from './fleet/workflowSizeWarning.js';
 export * from './subagent/engineDelegatedPrompt.js';
 export * from './subagent/engineRowStopGate.js';
@@ -171,7 +175,7 @@ export { noteEngineCapsForAttachmentSeat, observedAttachmentSeat, __resetAttachm
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
-export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, coreVersionTier } from './supportFloor.js';
+export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, engineSupportFloorEffective, coreVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
 export * from './detachWire.js';
@@ -190,11 +194,13 @@ export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetr
 export * from './hitl/suspendedReopen.js';
 export * from './hitl/approvalOutcomeNote.js';
 export * from './hitl/approvalResolution.js';
-export { toolEndOutputText, ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
-export { _resetHitlHostSurfaceForTest, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
+export { toolEndOutputText } from './toolResultContent.js';
+export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
+export { ruleToolNameVerdictOf } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
@@ -210,10 +216,11 @@ export * from './hitl/sessionPolicyWire.js';
 export * from './hitl/sessionPolicyDeliverable.js';
 export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
-export { replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
+export { replayedApprovalClosesCardFrame, replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
 export { hasLedgerPositionKey } from './hitl/gateLedger.js';
 export { MODE_ARBITRATION, automaticAnswerVerdict, mandatedApprovalDetailOf, permissionRequestHookScope, } from './hitl/automaticAnswerVerdict.js';
-export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, } from './hitl/decisionRefusal.js';
+export { standingRowsOf, } from './hitl/standingRows.js';
+export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decisionRefusalAskReading, } from './hitl/decisionRefusal.js';
 export { noAllowCauseOf } from './hitl/noAllowCause.js';
 export { policyDenyReason } from './hitl/frameRouter.js';
 export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, allowRuleShadowSentence, } from './hitl/allowRuleShadow.js';
@@ -246,4 +253,7 @@ export * from './env/localeTag.js';
 export * from './env/uiLanguage.js';
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
+export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
 export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
+export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';

package/dist/liveModelCatalog.d.ts

@@ -21,6 +21,7 @@ export interface LiveModelCatalog {
         readonly name?: string;
     };
     droppedEntries?: readonly LiveModelDroppedEntry[];
+    candidateRejected?: unknown;
 }
 export declare function setLiveModelCatalog(next: LiveModelCatalog | null): void;
 export declare function setLiveModelCatalogRefresher(fn: (() => Promise<LiveModelCatalog | null>) | null): void;
@@ -69,6 +70,18 @@ export type ModelDroppedEntriesReading = {
     readonly why: 'no_catalog' | 'malformed' | 'unreadable';
 };
 export declare function droppedModelEntriesOf(catalog?: LiveModelCatalog | null): ModelDroppedEntriesReading;
+export type ModelCandidateRejectedReading = {
+    readonly kind: 'not_reported';
+} | {
+    readonly kind: 'rejected';
+    readonly domains: readonly string[];
+    readonly at: string;
+    readonly source: string;
+} | {
+    readonly kind: 'unreadable';
+};
+export declare function modelCandidateRejectedOf(catalog?: LiveModelCatalog | null): ModelCandidateRejectedReading;
+export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading): string | undefined;
 export interface RoutePairingVerdict {
     verdict: 'ok' | 'broken' | 'unknown';
     posture?: string;

package/dist/liveModelCatalog.js

@@ -228,6 +228,59 @@ export function droppedModelEntriesOf(catalog = getLiveModelCatalog()) {
         return unknownDropped('unreadable');
     }
 }
+export function modelCandidateRejectedOf(catalog = getLiveModelCatalog()) {
+    const unreadable = Object.freeze({ kind: 'unreadable' });
+    try {
+        if (catalog === null || typeof catalog !== 'object' || Array.isArray(catalog))
+            return Object.freeze({ kind: 'not_reported' });
+        if (!Object.hasOwn(catalog, 'candidateRejected'))
+            return Object.freeze({ kind: 'not_reported' });
+        const d = Object.getOwnPropertyDescriptor(catalog, 'candidateRejected');
+        if (d === undefined || !('value' in d))
+            return unreadable;
+        const v = d.value;
+        if (v === undefined)
+            return Object.freeze({ kind: 'not_reported' });
+        if (v === null || typeof v !== 'object' || Array.isArray(v))
+            return unreadable;
+        const own = (k) => {
+            const od = Object.getOwnPropertyDescriptor(v, k);
+            return od !== undefined && 'value' in od ? od.value : undefined;
+        };
+        const rawDomains = own('domains');
+        const at = own('at');
+        const source = own('source');
+        if (!Array.isArray(rawDomains) || typeof at !== 'string' || at.length === 0 || typeof source !== 'string' || source.length === 0)
+            return unreadable;
+        const n = Object.getOwnPropertyDescriptor(rawDomains, 'length')?.value;
+        if (typeof n !== 'number' || !Number.isSafeInteger(n) || n <= 0)
+            return unreadable;
+        const domains = [];
+        for (let i = 0; i < n; i += 1) {
+            const id = Object.getOwnPropertyDescriptor(rawDomains, String(i));
+            if (id === undefined || !('value' in id) || typeof id.value !== 'string' || id.value.length === 0)
+                return unreadable;
+            domains.push(id.value);
+        }
+        return Object.freeze({ kind: 'rejected', domains: Object.freeze(domains), at, source });
+    }
+    catch {
+        return unreadable;
+    }
+}
+const CONFIG_DOMAIN_WORD = /^[a-z][a-z0-9_.-]{0,63}$/;
+export function modelCandidateRejectedContent(reading) {
+    try {
+        if (reading === null || typeof reading !== 'object' || reading.kind !== 'rejected')
+            return undefined;
+        const named = reading.domains.filter((w) => CONFIG_DOMAIN_WORD.test(w));
+        const which = named.length > 0 && named.length === reading.domains.length ? ` (${named.join(', ')})` : '';
+        return `The deployment refused its most recent configuration change${which} and is still running on the configuration before it — models or settings added by that change are not in effect`;
+    }
+    catch {
+        return undefined;
+    }
+}
 const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:unpinned', 'ok:keyless']);
 const ROUTE_PAIRING_BROKEN = new Set(['broken:credential_mismatch', 'broken:credential_missing']);
 export function routePairingVerdict(v) {
@@ -256,6 +309,7 @@ export function readLiveModelCatalog(body) {
         const defaultKey = envelopeKey(body, 'default');
         const defaultModelKey = envelopeKey(body, 'defaultModel');
         const droppedKey = envelopeKey(body, 'droppedEntries');
+        const candidateKey = envelopeKey(body, 'candidateRejected');
         const raw = modelsKey.present ? modelsKey.value : undefined;
         if (!Array.isArray(raw))
             return unreadableCatalog('models_not_array');
@@ -292,6 +346,8 @@ export function readLiveModelCatalog(body) {
             const dropped = droppedEntriesCopy(droppedKey.value);
             out.droppedEntries = dropped;
         }
+        if (candidateKey.present && candidateKey.value !== undefined)
+            out.candidateRejected = frozenJsonCopyOf(candidateKey.value) ?? null;
         return Object.freeze({ kind: 'read', catalog: Object.freeze(out), unreadableRows, ...(defaultModelMalformed ? { defaultModelMalformed: true } : {}) });
     }
     catch {

package/dist/mcpProbeCapability.d.ts

@@ -1,5 +1,7 @@
 export type McpProbeReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {
@@ -8,10 +10,6 @@ export type McpProbeReading = {
     kind: 'present';
 };
 export declare function projectMcpProbeCapability(caps: unknown): McpProbeReading | undefined;
-export declare function noteEngineCapsForMcpProbe(baseUrl: string, caps: unknown, opts?: {
-    generation?: number;
-}): void;
 export declare function observedMcpProbe(baseUrl?: string | undefined): McpProbeReading;
 export declare function mcpProbeAvailable(reading: McpProbeReading): 'yes' | 'no' | 'unknown';
 export declare function mcpProbeDoctorDetail(reading: McpProbeReading): string;
-export declare function __resetMcpProbeReadingsForTests(): void;

package/dist/mcpProbeCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 export function projectMcpProbeCapability(caps) {
     try {
@@ -19,11 +19,7 @@ export function projectMcpProbeCapability(caps) {
 const reader = createEngineCapReader({
     name: 'mcpProbe',
     project: projectMcpProbeCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
-export function noteEngineCapsForMcpProbe(baseUrl, caps, opts) {
-    reader.note(baseUrl, caps, opts);
-}
 export function observedMcpProbe(baseUrl = engineWireTarget()?.baseUrl) {
     return reader.observed(baseUrl);
 }
@@ -36,6 +32,8 @@ export function mcpProbeAvailable(reading) {
 }
 export function mcpProbeDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('per-server MCP status face');
         case 'unobserved':
             return ('per-server MCP status face not observed — the engine reports whether it has one on /v1/capabilities; ' +
                 'this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)');
@@ -51,6 +49,3 @@ export function mcpProbeDoctorDetail(reading) {
                 'and a probe of caller-supplied declarations answers with the very same body shape');
     }
 }
-export function __resetMcpProbeReadingsForTests() {
-    reader.__resetForTests();
-}

package/dist/mcpWireCaps.d.ts

@@ -12,6 +12,7 @@ export interface McpConfigLike {
     headers?: Record<string, string>;
     allowTools?: string[];
     toolFaces?: unknown;
+    toolAxes?: unknown;
 }
 export declare function mcpConfigToSpec(name: string, c: McpConfigLike): McpServerSpec | null;
 export declare function mcpConfigsToSpecs(servers: Record<string, McpConfigLike> | undefined): McpServerSpec[];

package/dist/mcpWireCaps.js

@@ -1,6 +1,9 @@
 export const MCP_CAPS = { items: 32 };
 function transparentKeys(c) {
-    return c.toolFaces !== undefined ? { toolFaces: c.toolFaces } : {};
+    return {
+        ...(c.toolFaces !== undefined ? { toolFaces: c.toolFaces } : {}),
+        ...(c.toolAxes !== undefined ? { toolAxes: c.toolAxes } : {}),
+    };
 }
 export function mcpConfigToSpec(name, c) {
     const n = (name ?? '').trim();

package/dist/memoryComplianceCapability.d.ts

@@ -1,6 +1,8 @@
 export declare const MEMORY_ENGINE_REQUIRED_CODE = "capability.memory_engine_required";
 export type MemoryComplianceReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {
@@ -9,10 +11,6 @@ export type MemoryComplianceReading = {
     kind: 'present';
 };
 export declare function projectMemoryComplianceCapability(caps: unknown): MemoryComplianceReading | undefined;
-export declare function noteEngineCapsForMemoryCompliance(baseUrl: string, caps: unknown, opts?: {
-    generation?: number;
-}): void;
 export declare function observedMemoryCompliance(baseUrl?: string | undefined): MemoryComplianceReading;
 export declare function memoryComplianceVerbsAvailable(reading: MemoryComplianceReading): 'yes' | 'no' | 'unknown';
 export declare function memoryComplianceDoctorDetail(reading: MemoryComplianceReading): string;
-export declare function __resetMemoryComplianceReadingsForTests(): void;