@sema-agent/client-core 0.95.0 → 0.97.0

package/dist/providerRejection.js

@@ -18,6 +18,28 @@ function providerStatusTier(status) {
     return UNTIERED;
 }
 const EDITABLE_TIER = 'invalid_request';
+export const PROVIDER_REJECTION_KINDS = Object.freeze(['schema_invalid', 'auth', 'rate_limited', 'resend_eligible', 'unknown']);
+const SCHEMA_INVALID_CODES = new Set([
+    'invalid_type',
+    'missing_required_parameter',
+    'unknown_parameter',
+    'unsupported_parameter',
+    'invalid_function_parameters',
+    'invalid_json_schema',
+]);
+function schemaTierStatus(status) {
+    return status === 400 || status === 422;
+}
+function kindOfStatus(status, code) {
+    const tier = providerStatusTier(status);
+    if (tier === 'authentication_failed')
+        return 'auth';
+    if (tier === 'rate_limit')
+        return 'rate_limited';
+    if (tier === EDITABLE_TIER)
+        return code !== undefined && schemaTierStatus(status) && SCHEMA_INVALID_CODES.has(code) ? 'schema_invalid' : 'resend_eligible';
+    return 'unknown';
+}
 const NOT_BY_EDITING_TAIL = new Map([
     ['authentication_failed', ': check the provider credentials or access for this account.'],
     ['model_not_found', ': the model is not available from this provider — choose another model.'],
@@ -30,26 +52,40 @@ function toolHistoryMismatchCarrier(carrier) {
 }
 const PROVIDER_REJECTED = 'provider_rejected';
 const RESEND_TEXT_STATUS = /\(HTTP (\d{3})\)/;
+function ownDataOf(o, key) {
+    const d = Object.getOwnPropertyDescriptor(o, key);
+    return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+}
 export function readProviderRejectionResendKey(v) {
     try {
         if (typeof v !== 'object' || v === null || Array.isArray(v))
             return undefined;
-        const got = v;
-        const resend = got.resend;
-        const text = got.text;
+        const resend = ownDataOf(v, 'resend');
+        const text = ownDataOf(v, 'text');
+        const kind = ownDataOf(v, 'kind');
         if (typeof text !== 'string' || (resend !== 'edit_and_resend' && resend !== 'not_by_editing'))
             return undefined;
         const hit = RESEND_TEXT_STATUS.exec(text);
         if (hit === null || hit[1] === undefined)
             return undefined;
-        const again = providerRejectionResend({ kind: PROVIDER_REJECTED, status: Number(hit[1]) });
-        return again !== undefined && again.resend === resend && again.text === text ? { resend: again.resend, text: again.text } : undefined;
+        const rej = readRejection({ kind: PROVIDER_REJECTED, status: Number(hit[1]) });
+        if (rej === undefined)
+            return undefined;
+        let wanted;
+        if (kind === undefined)
+            wanted = kindOfStatus(rej.status, undefined);
+        else if (typeof kind === 'string' && PROVIDER_REJECTION_KINDS.includes(kind))
+            wanted = kind;
+        else
+            return undefined;
+        const again = verdictOf(rej.status, wanted);
+        return again !== undefined && again.resend === resend && again.text === text ? { resend: again.resend, text: again.text, kind: again.kind } : undefined;
     }
     catch {
         return undefined;
     }
 }
-export function providerRejectionResend(detail, carrier) {
+function readRejection(detail) {
     let read;
     try {
         const r = readRunTerminal({ terminal: { kind: 'failed', detail } });
@@ -63,16 +99,41 @@ export function providerRejectionResend(detail, carrier) {
     const status = Object.hasOwn(read, 'status') ? read.status : undefined;
     if (status === undefined)
         return undefined;
-    if (toolHistoryMismatchCarrier(carrier))
+    return { status, code: Object.hasOwn(read, 'code') ? read.code : undefined };
+}
+function schemaInvalidText(status) {
+    return `The model provider rejected the structure of this request (HTTP ${status}) — rewording the message will not fix this. Check that the configured model and endpoint accept this kind of request, or report the problem to whoever runs the engine.`;
+}
+function verdictOf(status, kind) {
+    if (kind === 'schema_invalid') {
+        if (providerStatusTier(status) !== EDITABLE_TIER || !schemaTierStatus(status))
+            return undefined;
+        return { resend: 'not_by_editing', text: schemaInvalidText(status), kind };
+    }
+    if (kind !== kindOfStatus(status, undefined))
         return undefined;
-    const tier = providerStatusTier(status);
-    return tier === EDITABLE_TIER
-        ? {
+    if (kind === 'resend_eligible') {
+        return {
             resend: 'edit_and_resend',
             text: `The model provider rejected this request as sent (HTTP ${status}). Change it — for example shorten it or remove an attachment — and send it again.`,
-        }
-        : {
-            resend: 'not_by_editing',
-            text: `The model provider refused this request (HTTP ${status})${NOT_BY_EDITING_TAIL.get(tier) ?? NOT_BY_EDITING_TAIL.get(UNTIERED) ?? ''}`,
+            kind,
         };
+    }
+    return {
+        resend: 'not_by_editing',
+        text: `The model provider refused this request (HTTP ${status})${NOT_BY_EDITING_TAIL.get(providerStatusTier(status)) ?? NOT_BY_EDITING_TAIL.get(UNTIERED) ?? ''}`,
+        kind,
+    };
+}
+export function providerRejectionResend(detail, carrier) {
+    const r = readRejection(detail);
+    if (r === undefined)
+        return undefined;
+    if (toolHistoryMismatchCarrier(carrier))
+        return undefined;
+    return verdictOf(r.status, kindOfStatus(r.status, r.code));
+}
+export function providerRejectionKind(detail) {
+    const r = readRejection(detail);
+    return r === undefined ? 'unknown' : kindOfStatus(r.status, r.code);
 }

package/dist/replayBody.d.ts

@@ -0,0 +1,12 @@
+export interface ReplayRowView {
+    readonly status?: string;
+    readonly errorCode?: string;
+    readonly error?: string;
+    readonly sessionId?: string;
+}
+export interface DoneResultView {
+    readonly replay: boolean;
+    readonly engine: unknown;
+    readonly row?: ReplayRowView;
+}
+export declare function doneResultView(result: unknown): DoneResultView;

package/dist/replayBody.js

@@ -0,0 +1,25 @@
+function guarded(o, k) {
+    try {
+        return o[k];
+    }
+    catch {
+        return undefined;
+    }
+}
+function guardedString(o, k) {
+    const v = guarded(o, k);
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+export function doneResultView(result) {
+    if (typeof result !== 'object' || result === null || Array.isArray(result))
+        return { replay: false, engine: result };
+    if (guarded(result, 'replay') !== true)
+        return { replay: false, engine: result };
+    const row = {};
+    for (const k of ['status', 'errorCode', 'error', 'sessionId']) {
+        const v = guardedString(result, k);
+        if (v !== undefined)
+            row[k] = v;
+    }
+    return { replay: true, engine: guarded(result, 'result'), row };
+}

package/dist/request/taskRequest.d.ts

@@ -36,6 +36,7 @@ export interface TaskRequestInput {
     attachments?: Record<string, unknown>;
     attachmentIds?: readonly string[];
     excludeTools?: readonly string[];
+    allowTools?: readonly string[];
     finalVerification?: boolean;
     limits?: Record<string, unknown>;
     interactiveTools?: false;
@@ -57,10 +58,6 @@ export interface TaskRequestInput {
     disableSkills?: TaskRequest['disableSkills'];
     rewind?: Record<string, unknown>;
     repo?: string;
-    council?: boolean;
-    debate?: boolean;
-    rounds?: number;
-    lenses?: readonly string[];
     settings?: {
         resolved?: Record<string, unknown>;
         webSearch?: Record<string, unknown>;

package/dist/request/taskRequest.js

@@ -21,10 +21,6 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'settings.hooks', lanes: ['interactive', 'print'], live: true, why: '[495]① 用户 settings 文件 hooks 逐字上 wire', whyUtilityLane: '无座:hook 挂在工具门上(零工具面没有门),而且 side-channel 是壳自己的提交,不该继承用户那份 hook 表' },
     { field: 'settings.<resolved>', lanes: ['interactive', 'print'], live: true, why: 'settings resolver 的 effective 快照(hooks/env/model + 已解析权限投影)。两条车道同源:交互面 replEntry / print 面 printModeEngine 各跑一遍同一个 resolver,产物经同一个 buildWireSettingsStamp 投影。开放集(子键不可枚举)⇒ unregisteredRequestKeys 放行本车道 settings 的**表外**子键,但表内异车道子键仍点名', whyUtilityLane: '无座:这一位是**开放集 spread**(子键原样即 wire 键),摊开的是用户 settings 的已解析面(权限 / env / 模型)。side-channel 是壳自己的提交:摊上去既无用(零工具面没有工具门求值权限)又把用户的配置面带进了一条他没参与的提交。🔴 无座 ⇒ 本车道整只快照不产。🔴 **本行无座的前提由构造期校验兜住**:剥掉的是用户显式的 deny / ask,所以 `refuseUtilityWithoutToolUnload` 强制这条车道必须带字面 `excludeAllTools: true` —— 否则产出会是一条「既没卸工具、又没带用户 deny」的请求(比无人值守车道同一份输入更宽)' },
     { field: 'repo', lanes: ['interactive', 'print'], live: true, why: 'scan/code-review 场景的仓库坐标(passthrough;server 是权威校验方,本层不铸第二判官)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'council', lanes: ['interactive', 'print'], live: true, why: 'code-review council 形开关(server 读 `=== true`;非 true 不 stamp=与缺席同义,发小的那个)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'debate', lanes: ['interactive', 'print'], live: true, why: 'council 的 debate 变体开关(server 读 `=== true`)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'rounds', lanes: ['interactive', 'print'], live: true, why: 'debate 轮数(server clamp [1,3],非有限数被 server 归 undefined——本层原样透传不预 clamp)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'lenses', lanes: ['interactive', 'print'], live: true, why: 'code-review 镜头数(server 场景按数字读、非数字回 400;本层型面仍按旧形声明为字符串数组 —— 已知不一致,随该族退役处理)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
     { field: 'memoryCapture', lanes: ['interactive', 'print', 'utility'], live: true, why: '本会话永远不进长期记忆的**声明形**(server §12.4 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryWrite:false 不是一个轴(那是「本 run 只读平面」)。⚠️ parked 续跑腿结构性拿不到声明(决策/续跑端点从持久 body 重建 spec),那是引擎侧事实,不是本层的漏', whyUtilityLane: '有座:side-channel 提交是壳自己的一次性问答,**绝不该**进用户的长期记忆 —— 这一位正是那句声明,且它是收紧方向,带上去只会更严' },
     { field: 'memory', lanes: ['interactive', 'print', 'utility'], live: true, why: '这一次运行不挂记忆面的**请求级**开关(server §12.7 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryCapture(采集面)不是一个轴、可并存;与 memoryWrite:false(只读平面)也不是一个轴', whyUtilityLane: '有座:side-channel 提交不需要挂记忆面(不挂记忆段 / 索引 / 三只记忆工具),省 token 且零记忆写入;与 memoryCapture 不是一个轴,两条都带' },
     { field: 'fileHistory', lanes: ['interactive', 'print'], live: true, why: '「这一次运行别捕获文件历史」的**请求级声明**(server 7.104.0 提交体键,单成员闭集 "disabled";`POST /v1/tasks` · `/v1/tasks/stream` · `/v1/runs` 同收,子代继承)。两条用户车道都是提交面、都跑在用户的文件上 ⇒ 都能声明;「本会话不捕获」= 每个提交都带(续跑腿重放同一个体)。🔴 只在能力读数 `on-optional` 时发(老 server 对表外键 400),值由片段口 `fileHistoryDeclarationField` 唯一铸出。与 rewind 还原键同交 ⇒ 上游 400 `request.field_conflict`', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),不会改任何文件 ⇒ 没有可捕获的东西;带上它只会在不认识这一键的老 server 上给这条提交多一种 400' },
@@ -41,6 +37,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'maxTokens', lanes: ['print', 'utility'], live: true, why: '整任务 token 预算上限声明(sdk `TaskRequest.maxTokens`,请求体**顶层**位,与 `maxCostUsd` 同属上游那一族「调用方要求的上限」:向下夹到部署上限 —— 只许要得更少)。🔴 座位集与 `maxCostUsd` 那一行**逐字相同**:同一条预算轴的两种计价单位,分开定座就是让其中一条静默漂。🔴 坏值(非数 / 非有限 / 非正 / 非整)在本层**响亮拒**:上游对这一位的坏值是安静按「调用方没给」处理并回落部署上限,不是 4xx —— 部署没设上限时这一次运行就没有 token 闸,而声明人不会知道(见 `refuseBadMaxTokens`)', whyUtilityLane: '有座:与 maxCostUsd 同轴孪生 —— 小预算是本车道的定义之一,两种计价单位都该能声明' },
     { field: 'attachmentIds', lanes: ['interactive'], live: true, why: '附件**字节通道**(uploadAttachment 回执 id;server ≥1.289 绑定会话并把文件物化进 run 的 attachments/)。有上传入口的端才有 id 可引用:web/desktop 有,壳走 images / 本地文件路径,`-p` 车道连 uploadAttachment 都没有 ⇒ print 缺席是**没有来源**,不是漏。🔴 与上面的 `attachments` 同名不同物(那是 turn 边界的配置键),两条永远不许合并', whyUtilityLane: '无座:预上传附件句柄要先有上传入口才有 id 可引用,而 side-channel 没有上传面' },
     { field: 'excludeTools', lanes: ['interactive', 'print', 'utility'], live: true, why: 'design/161 W3(2026-07-30):真 wire 键(SDK types `excludeTools`)且早在 seatContract `START_SESSION_OPTION_KEYS` 里,却是 desktop 手写 taskReq 的第 9 键、矩阵外——而 stamp 门对未登记键**静默丢弃**,真实危险形=「用户显式排除的工具被静默放回」(权限方向回归,类型层不报)。今天只有 desktop 在发;壳的工具面走 roster/interactiveTools 另一条路。0.77.0 补 print 座(三问:① wire 位与车道无关 —— sdk 具名位、提交体真收 `body.excludeTools`;② 来源 —— print 今天没有排除入口,但这是**收紧方向**的声明,传了只进回执 = 端不读回执就把用户排除的工具放回;③ 口径 —— 仍是 live 门后的位,与交互面同一行)', whyUtilityLane: '有座:逐名排除是卸载声明旁边的第二条收紧声明(两键同带各自生效)。⚠️ 它**不是** excludeAllTools 的降级替身 —— 本车道强制带卸载声明(见 `refuseUtilityWithoutToolUnload`),不认那一键的上游会把整条提交拒掉,那时正解是换车道或不发' },
+    { field: 'allowTools', lanes: ['interactive', 'print'], live: true, why: '引擎的可用性选择器(收紧方向的声明:只给点名的工具;`[]` = 什么都不给,照发)。两条用户车道都是提交面、都有「只给这几只工具」的用户入口(终端 `--tools`)⇒ 都有座;坏形(不是串数组)在装配期响亮拒,不静默删键', whyUtilityLane: '无座:side-channel 恒带 excludeAllTools(零工具面),可用性选择器在零工具面上没有可选的东西' },
     { field: 'excludeAllTools', lanes: ['interactive', 'print', 'utility'], live: true, why: '0.78.0(sdk 11.x 具名位 `excludeAllTools`,server ≥7.90.0 请求面):整只工具面卸载 —— 调用方工具 / 脚手架 / 手 / MCP / A2A / skills 一个都不挂,终局必然纯文本(wire 上 `wiring_manifest.tools.count === 0`,整条流零 tool_start / tool_end / tool_disclosure)。与 excludeTools 是两种语义、刻意不折叠(`"*"` 是一个合法的工具名,「卸全部」不能写成 `excludeTools:["*"]`);两键同带各自生效。类型只收字面 `true`(server 只把 literal true 写上任务规格,`false` = 替引擎重申它自己的缺省 ⇒ 不发、与缺席同义、不进回执);坏值响亮拒(收紧方向的声明不许被打字错误安静丢掉)。每条车道都是提交面 ⇒ 都能声明。探测靠键闭集、没有能力位:没接线的 server(≤7.89.x)400 `request.body_shape` 并在 `unknownKeys` 里逐字点名,本层不替它猜;A2A 入站面不承载本键(零工具面走 skill 路由)', whyUtilityLane: '有座,而且**本车道强制**:零工具面就是这条车道的定义 —— side-channel 提交整只工具面卸载,终局必然纯文本。🔴 缺这一位(或给 `false`)⇒ 构造期响亮拒(`refuseUtilityWithoutToolUnload`):本车道上一整片「无座」的理由都压在这个前提上,其中 `settings.<resolved>` 那一行剥掉的是用户显式的 deny / ask ——前提不成立时产出会是一条「既没卸工具、又没带用户 deny」的请求' },
     { field: 'settings.ultracode', lanes: ['interactive'], live: true, why: 'design/111:sticky `/effort ultracode` 拨盘 + 当轮关键词嗅探,两个来源都只在交互面存在', gap: true, whyUtilityLane: '无座:sticky 拨盘与当轮关键词嗅探两个来源都只在交互面' },
     { field: 'systemPrompt', lanes: ['interactive', 'print', 'utility'], live: false, why: '整段替换系统提示(sdk `TaskRequest.systemPrompt`;上游字符数超限 400 响亮拒,本层原样透传)。三条车道都有来源:交互面 = CC QueryParams.systemPrompt,无人值守面 = `--system-prompt[-file]` 一类旗,side-channel 面 = 壳整段给出的那一份。与追加位 `appendSystemPrompt` 不是一个位(那一位归 live 兜底层,见 `LIVE_DEFAULT_FIELDS`)', whyUtilityLane: '有座:side-channel 提交的系统提示由壳整段给出 —— 它不是用户会话的续谈,不该继承用户那一份' },
@@ -175,10 +172,7 @@ const INPUT_KEY_ROUTES = {
     disableSkills: row('disableSkills'),
     rewind: row('resumeAt/resumeAtMode/restoreFiles/rewindFilesTo'),
     repo: row('repo'),
-    council: row('council'),
-    debate: row('debate'),
-    rounds: row('rounds'),
-    lenses: row('lenses'),
+    allowTools: row('allowTools'),
     settings: { via: 'settings' },
 };
 const SETTINGS_KEY_ROUTES = {
@@ -234,8 +228,6 @@ const rewindSubKeys = () => {
     return r.via === 'matrix' ? r.field.split('/') : [];
 };
 const VALUE_LEVEL_IN_PLAY = Object.freeze({
-    council: (v) => v === true,
-    debate: (v) => v === true,
     oneShot: (v) => v === true,
     interactiveTools: (v) => v === false,
     images: (v) => Array.isArray(v) && v.length > 0,
@@ -481,6 +473,66 @@ const withoutRetiredAttachmentsKeys = (v) => {
         delete copy[key];
     return copy;
 };
+const ALLOW_TOOLS_MAX_LENGTH = 65_536;
+const ALLOW_TOOLS_UNREADABLE_ITEM = Symbol('allowTools-unreadable-item');
+function allowToolsSnapshot(v) {
+    if (!Array.isArray(v))
+        return v;
+    let n;
+    try {
+        n = Object.getOwnPropertyDescriptor(v, 'length')?.value;
+    }
+    catch {
+        return ALLOW_TOOLS_UNREADABLE_ITEM;
+    }
+    if (typeof n !== 'number' || !Number.isSafeInteger(n) || n < 0 || n > ALLOW_TOOLS_MAX_LENGTH)
+        return ALLOW_TOOLS_UNREADABLE_ITEM;
+    const out = new Array(n);
+    for (let k = 0; k < n; k += 1) {
+        let d;
+        try {
+            d = Object.getOwnPropertyDescriptor(v, k);
+        }
+        catch {
+            out[k] = ALLOW_TOOLS_UNREADABLE_ITEM;
+            continue;
+        }
+        if (d === undefined)
+            continue;
+        out[k] = 'value' in d ? d.value : ALLOW_TOOLS_UNREADABLE_ITEM;
+    }
+    return Object.freeze(out);
+}
+const allowToolsCopy = (v) => {
+    if (!Array.isArray(v))
+        return [];
+    const out = [];
+    for (let k = 0; k < v.length; k += 1) {
+        const d = Object.getOwnPropertyDescriptor(v, k);
+        if (d !== undefined && 'value' in d && typeof d.value === 'string')
+            out.push(d.value);
+    }
+    return out;
+};
+const refuseBadAllowTools = (v) => {
+    if (v === undefined || v === null)
+        return;
+    if (Array.isArray(v)) {
+        let ok = true;
+        for (let k = 0; k < v.length; k += 1) {
+            const d = Object.getOwnPropertyDescriptor(v, k);
+            if (d === undefined || !('value' in d) || typeof d.value !== 'string') {
+                ok = false;
+                break;
+            }
+        }
+        if (ok)
+            return;
+    }
+    throw new TypeError('buildTaskRequest: allowTools 只接受字符串数组(`[]` = 什么都不给;缺席 = 不选择)—— ' +
+        `收到 ${coarseShape(v)}。这一位是**可用性选择器**(收紧声明):本层若把坏形静默删键,这一次运行会挂上声明人以为已经收窄掉的全部工具。` +
+        '错误文本只报形状,不回显值。');
+};
 const refuseBadExcludeAllTools = (v) => {
     if (v === undefined || v === null || v === true || v === false)
         return;
@@ -591,7 +643,8 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach', 'allowTools'];
+const MATERIALIZE_AT_READ = Object.freeze({ allowTools: (v) => allowToolsSnapshot(v) });
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -604,10 +657,10 @@ function dataFirstSnapshot(input, afterData) {
     const accessors = [];
     for (const k of Object.keys(descs)) {
         const d = descs[k];
-        if (d === undefined || d.enumerable !== true)
+        if (d === undefined || (d.enumerable !== true && routeOfTopLevelKey(k) === undefined))
             continue;
         if ('value' in d)
-            bag[k] = d.value;
+            bag[k] = Object.hasOwn(MATERIALIZE_AT_READ, k) ? MATERIALIZE_AT_READ[k](d.value) : d.value;
         else
             accessors.push(k);
     }
@@ -616,8 +669,10 @@ function dataFirstSnapshot(input, afterData) {
         ...ACCESSOR_READ_ORDER.filter((k) => accessors.includes(k)),
         ...accessors.filter((k) => !ACCESSOR_READ_ORDER.includes(k)),
     ];
-    for (const k of ordered)
-        bag[k] = Reflect.get(input, k);
+    for (const k of ordered) {
+        const v = Reflect.get(input, k);
+        bag[k] = Object.hasOwn(MATERIALIZE_AT_READ, k) ? MATERIALIZE_AT_READ[k](v) : v;
+    }
     return bag;
 }
 export function assembleTaskRequest(input, lane) {
@@ -663,6 +718,7 @@ export function assembleTaskRequest(input, lane) {
     const requireExistingSessionIn = src.requireExistingSession;
     const disableSkillsIn = src.disableSkills;
     const approvalReachIn = src.approvalReach;
+    const allowToolsIn = src.allowTools;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -677,6 +733,7 @@ export function assembleTaskRequest(input, lane) {
         requireExistingSession: requireExistingSessionIn,
         disableSkills: disableSkillsIn,
         approvalReach: approvalReachIn,
+        allowTools: allowToolsIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -692,6 +749,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadRequireExistingSession(requireExistingSessionIn);
     refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
     refuseBadApprovalReach(approvalReachIn, 'buildTaskRequest');
+    refuseBadAllowTools(allowToolsIn);
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -824,10 +882,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('enableFork') ? { enableFork: i.enableFork } : {}),
         ...(on('attachments') ? { attachments: attachmentsForWire } : {}),
         ...(on('repo') ? { repo: i.repo } : {}),
-        ...(on('council') ? { council: true } : {}),
-        ...(on('debate') ? { debate: true } : {}),
-        ...(on('rounds') ? { rounds: i.rounds } : {}),
-        ...(on('lenses') ? { lenses: i.lenses } : {}),
+        ...(on('allowTools') ? { allowTools: allowToolsCopy(i.allowTools) } : {}),
         ...(on('attachmentIds') ? { attachmentIds: [...(i.attachmentIds ?? [])] } : {}),
         ...(on('excludeTools') ? { excludeTools: [...(i.excludeTools ?? [])] } : {}),
         ...(on('excludeAllTools') ? { excludeAllTools: true } : {}),

package/dist/resumeRefusalCopy.js

@@ -1,6 +1,6 @@
-import { readErrorNumber, readErrorString } from './wireFailureShape.js';
-import { readOwnDataNonEmptyString } from './ownKey.js';
-import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, RESUME_SESSION_NOT_FOUND, REQUEST_FIELD_CONFLICT, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED, refusalSaysStillPending, refusalRetriableReading, } from './engineErrorCodes.js';
+import { readBlockedBy, readErrorNumber, readErrorString } from './wireFailureShape.js';
+import { guardedRead, ownDataField, readOwnDataNonEmptyString } from './ownKey.js';
+import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, RESUME_SESSION_NOT_FOUND, REQUEST_FIELD_CONFLICT, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED, isRefusedParkCode, refusalSaysStillPending, refusalRetriableReading, } from './engineErrorCodes.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 import { engineVersionTier } from './supportFloor.js';
 import { resumeRetryLaterFromError } from './wireErrorTriage.js';
@@ -11,7 +11,7 @@ export const RESUME_REFUSAL_CODES = Object.freeze([
 export function resumeRefusalFromError(err) {
     if (typeof err !== 'object' || err === null)
         return null;
-    const code = err.errorCode;
+    const code = guardedRead(() => ownDataField(err, 'errorCode'));
     if (typeof code !== 'string' || !RESUME_REFUSAL_CODES.includes(code))
         return null;
     if (code === RESUME_PLACEMENT_MISMATCH) {
@@ -55,22 +55,7 @@ export function resumePolicyBlockFromError(err) {
     }
     if (outer !== RESUME_POLICY_FOLD_CODE)
         return null;
-    const judge = (v) => ({
-        blockedBy: typeof v === 'string' && v.length > 0 ? { kind: 'named', code: v } : { kind: 'unreadable' },
-    });
-    try {
-        const top = o['blockedBy'];
-        if (top !== undefined)
-            return judge(top);
-        const extra = o['extra'];
-        if (typeof extra === 'object' && extra !== null && !Array.isArray(extra) && Object.hasOwn(extra, 'blockedBy')) {
-            return judge(extra['blockedBy']);
-        }
-        return { blockedBy: { kind: 'absent' } };
-    }
-    catch {
-        return { blockedBy: { kind: 'unreadable' } };
-    }
+    return { blockedBy: readBlockedBy(o) };
 }
 export function resumePolicyBlockContent(detail) {
     const b = detail.blockedBy;
@@ -282,7 +267,6 @@ export function checkpointUnsupportedVersionContent(detail, ctx) {
     }
     return [CHECKPOINT_UNSUPPORTED_WHAT, CHECKPOINT_UNSUPPORTED_STILL_WAITING, outlet + CHECKPOINT_UNSUPPORTED_DRAIN].join(' · ');
 }
-const REFUSED_PARK_CODES = new Set([CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED]);
 const REFUSED_PARK_FIELD_TOKEN = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
 export function refusedParkFromError(failure) {
     if (typeof failure !== 'object' || failure === null)
@@ -290,13 +274,13 @@ export function refusedParkFromError(failure) {
     let code;
     let status;
     try {
-        code = failure.errorCode;
-        status = failure.status;
+        code = ownDataField(failure, 'errorCode');
+        status = ownDataField(failure, 'status');
     }
     catch {
         return null;
     }
-    if (typeof code !== 'string' || !REFUSED_PARK_CODES.has(code))
+    if (typeof code !== 'string' || !isRefusedParkCode(code))
         return null;
     if (status !== undefined && status !== 409)
         return null;
@@ -305,7 +289,7 @@ export function refusedParkFromError(failure) {
     const rawField = code === CHECKPOINT_CONFIG_REFUSED ? readErrorString(failure, 'field') : undefined;
     const field = rawField !== undefined && REFUSED_PARK_FIELD_TOKEN.test(rawField) ? rawField : undefined;
     return Object.freeze({
-        code: code,
+        code,
         ...(field !== undefined ? { field } : {}),
         ...(stillPending !== undefined ? { stillPending } : {}),
     });

package/dist/retryStatus.d.ts

@@ -6,6 +6,8 @@ export type RetryStatus = {
     errClass?: BrainRetryErrClass | (string & {});
     retryAtMs?: number;
     errorStatus?: number;
+    providerCondition?: string;
+    providerConditionSource?: string;
     elapsedMs?: number;
     timeoutMs?: number;
     detail?: string;
@@ -17,6 +19,8 @@ export type RetryStatus = {
     errClass?: BrainRetryErrClass | (string & {});
     retryAtMs?: number;
     errorStatus?: number;
+    providerCondition?: string;
+    providerConditionSource?: string;
     terminal?: true;
     error: RetryStatusErrorPayload;
     elapsedMs?: number;
@@ -29,6 +33,8 @@ export type RetryStatus = {
     errClass?: BrainRetryErrClass | (string & {});
     retryAtMs?: number;
     errorStatus?: number;
+    providerCondition?: string;
+    providerConditionSource?: string;
     elapsedMs?: number;
     timeoutMs?: number;
     terminal?: never;
@@ -60,7 +66,9 @@ export interface BrainStatusPayload {
     errClass?: BrainRetryErrClass | (string & {});
     elapsedMs?: number;
     timeoutMs?: number;
+    providerCondition?: string;
+    providerConditionSource?: string;
 }
-export declare const BRAIN_STATUS_PAYLOAD_KEYS: readonly ["phase", "detail", "retryInSec", "retryInMs", "attempt", "maxRetries", "errClass", "retryAtMs", "errorStatus", "elapsedMs", "timeoutMs"];
+export declare const BRAIN_STATUS_PAYLOAD_KEYS: readonly ["phase", "detail", "retryInSec", "retryInMs", "attempt", "maxRetries", "errClass", "retryAtMs", "errorStatus", "elapsedMs", "timeoutMs", "providerCondition", "providerConditionSource"];
 export declare function mapBrainStatusToRetry(p: BrainStatusPayload, nowMs: number): RetryStatus | null;
 export {};

package/dist/retryStatus.js

@@ -20,6 +20,8 @@ export const BRAIN_STATUS_PAYLOAD_KEYS = [
     'errorStatus',
     'elapsedMs',
     'timeoutMs',
+    'providerCondition',
+    'providerConditionSource',
 ];
 const _brainStatusKeyPin = [true, true];
 void _brainStatusKeyPin;
@@ -33,6 +35,10 @@ export function mapBrainStatusToRetry(p, nowMs) {
     const cause = typeof p.errClass === 'string' && p.errClass.length > 0 ? { errClass: p.errClass } : {};
     const producerTiming = typeof p.retryAtMs === 'number' ? { retryAtMs: p.retryAtMs } : {};
     const failureStatus = typeof p.errorStatus === 'number' ? { errorStatus: p.errorStatus } : {};
+    const providerJudged = {
+        ...(typeof p.providerCondition === 'string' && p.providerCondition.length > 0 ? { providerCondition: p.providerCondition } : {}),
+        ...(typeof p.providerConditionSource === 'string' && p.providerConditionSource.length > 0 ? { providerConditionSource: p.providerConditionSource } : {}),
+    };
     const saneMs = (v) => typeof v === 'number' && Number.isFinite(v) && v >= 0 ? v : undefined;
     const elapsedMs = saneMs(p.elapsedMs);
     const timeoutMs = saneMs(p.timeoutMs);
@@ -40,9 +46,10 @@ export function mapBrainStatusToRetry(p, nowMs) {
         ...(elapsedMs !== undefined ? { elapsedMs } : {}),
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
     };
-    const stalledDetail = typeof p.detail === 'string' && p.detail.length > 0 ? { detail: p.detail } : {};
+    const stalledShown = typeof p.detail === 'string' && p.detail.length > 0 ? displayUntrusted(p.detail) : '';
+    const stalledDetail = stalledShown.length > 0 ? { detail: stalledShown } : {};
     const shown = (absent) => (typeof p.detail === 'string' ? displayUntrusted(p.detail) : absent);
-    const extra = { ...counts, ...cause, ...producerTiming, ...failureStatus, ...waitProgress };
+    const extra = { ...counts, ...cause, ...producerTiming, ...failureStatus, ...providerJudged, ...waitProgress };
     switch (p.phase) {
         case 'recovered':
             return null;

package/dist/rewindArchiveCapability.d.ts

@@ -1,24 +1,14 @@
+import { type RewindArchiveReading, type RewindCodeArchive } from './rewindArchiveReading.js';
 import type { RewindMode } from './rewindWireCaps.js';
-export type RewindArchiveBit = 'on' | 'off' | 'not_reported' | 'malformed';
-export type RewindArchiveReading = {
-    kind: 'unobserved';
-} | {
-    kind: 'present';
-    conversationAnchor: RewindArchiveBit;
-    forkRestore: RewindArchiveBit;
-    codeOnly: RewindArchiveBit;
-    restoreFilesEpoch: RewindArchiveBit;
-};
+export { projectRewindArchiveCapability, rewindConversationAvailability } from './rewindArchiveReading.js';
+export type { RewindArchiveBit, RewindArchiveReading, RewindCodeArchive } from './rewindArchiveReading.js';
 export type RewindArchiveMode = 'both' | 'code';
-export type RewindCodeArchive = 'available' | 'unavailable' | 'unknown';
-export declare function projectRewindArchiveCapability(caps: unknown): RewindArchiveReading | undefined;
 export declare function noteEngineCapsForRewindArchive(baseUrl: string, caps: unknown, opts?: {
     generation?: number;
 }): void;
 export declare function observedRewindArchive(baseUrl?: string | undefined): RewindArchiveReading;
 export declare function rewindCodeArchiveAvailability(reading: RewindArchiveReading, mode: RewindArchiveMode): RewindCodeArchive;
 export declare function rewindArchiveDoctorDetail(reading: RewindArchiveReading, mode: RewindArchiveMode): string;
-export declare function rewindConversationAvailability(reading: RewindArchiveReading): RewindCodeArchive;
 export declare function engineRewindRefusedNow(option: RewindMode, reading?: RewindArchiveReading): boolean;
 export declare function rewindConversationDoctorDetail(reading: RewindArchiveReading): string;
 export declare function rewindRestoreFilesEpochDetail(reading: RewindArchiveReading): string;

package/dist/rewindArchiveCapability.js

@@ -1,55 +1,14 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
-import { ownDataField } from './ownKey.js';
-import { _wireConversationRewindJudge } from './toolHistoryMismatch.js';
-const CAPS_KEYS = {
-    conversationAnchor: 'resumeAt',
-    forkRestore: 'rewindFiles',
-    codeOnly: 'rewindFilesTo',
-    restoreFilesEpoch: 'restoreFiles',
-};
-const _capsKeyPin = true;
-void _capsKeyPin;
-function bitOf(caps, key) {
-    const v = ownDataField(caps, key);
-    if (v === undefined)
-        return 'not_reported';
-    if (v === true)
-        return 'on';
-    if (v === false)
-        return 'off';
-    return 'malformed';
-}
-export function projectRewindArchiveCapability(caps) {
-    try {
-        if (caps === null || typeof caps !== 'object' || Array.isArray(caps))
-            return undefined;
-        return {
-            kind: 'present',
-            conversationAnchor: bitOf(caps, CAPS_KEYS.conversationAnchor),
-            forkRestore: bitOf(caps, CAPS_KEYS.forkRestore),
-            codeOnly: bitOf(caps, CAPS_KEYS.codeOnly),
-            restoreFilesEpoch: bitOf(caps, CAPS_KEYS.restoreFilesEpoch),
-        };
-    }
-    catch {
-        return undefined;
-    }
-}
-const reader = createEngineCapReader({
-    name: 'rewindArchive',
-    project: projectRewindArchiveCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
-});
+import { resetRewindArchiveReader, rewindArchiveReadingAt, rewindConversationAvailability, } from './rewindArchiveReading.js';
+import { unreadableReadingDetail } from './engineCapReader.js';
+export { projectRewindArchiveCapability, rewindConversationAvailability } from './rewindArchiveReading.js';
 export function noteEngineCapsForRewindArchive(baseUrl, caps, opts) {
-    reader.note(baseUrl, caps, opts);
-}
-function conversationRewindJudge(engineBaseUrl) {
-    return rewindConversationAvailability(observedRewindArchive(engineBaseUrl));
+    void baseUrl;
+    void caps;
+    void opts;
 }
-_wireConversationRewindJudge(conversationRewindJudge);
 export function observedRewindArchive(baseUrl = engineWireTarget()?.baseUrl) {
-    return reader.observed(baseUrl);
+    return rewindArchiveReadingAt(baseUrl);
 }
 export function rewindCodeArchiveAvailability(reading, mode) {
     if (reading.kind !== 'present')
@@ -63,6 +22,8 @@ export function rewindCodeArchiveAvailability(reading, mode) {
 }
 export function rewindArchiveDoctorDetail(reading, mode) {
     const lane = mode === 'both' ? 'rewind with code restore' : 'code-only rewind';
+    if (reading.kind === 'unreadable')
+        return unreadableReadingDetail(lane);
     if (reading.kind !== 'present') {
         return `${lane} not observed — the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it, so whether the code archive can be restored is unknown`;
     }
@@ -86,15 +47,6 @@ export function rewindArchiveDoctorDetail(reading, mode) {
             return `${lane} reported in a shape this reader cannot read — the value is neither true nor false, so the answer is unknown, not "no"`;
     }
 }
-export function rewindConversationAvailability(reading) {
-    if (reading.kind !== 'present')
-        return 'unknown';
-    if (reading.conversationAnchor === 'on')
-        return 'available';
-    if (reading.conversationAnchor === 'off')
-        return 'unavailable';
-    return 'unknown';
-}
 export function engineRewindRefusedNow(option, reading = observedRewindArchive()) {
     switch (option) {
         case 'both':
@@ -109,6 +61,8 @@ export function engineRewindRefusedNow(option, reading = observedRewindArchive()
 }
 export function rewindConversationDoctorDetail(reading) {
     const lane = 'rewind to a message';
+    if (reading.kind === 'unreadable')
+        return unreadableReadingDetail(lane);
     if (reading.kind !== 'present') {
         return `${lane} not observed — the engine reports conversation anchors on /v1/capabilities; this process has no usable capabilities reading cached for it, so whether the conversation can be rewound is unknown`;
     }
@@ -139,5 +93,5 @@ export function rewindRestoreFilesEpochDetail(reading) {
     }
 }
 export function __resetRewindArchiveReadingsForTests() {
-    reader.__resetForTests();
+    resetRewindArchiveReader();
 }