@sema-agent/client-core 0.96.0 → 0.97.0

package/dist/mcpWireCaps.d.ts

@@ -12,6 +12,7 @@ export interface McpConfigLike {
     headers?: Record<string, string>;
     allowTools?: string[];
     toolFaces?: unknown;
+    toolAxes?: unknown;
 }
 export declare function mcpConfigToSpec(name: string, c: McpConfigLike): McpServerSpec | null;
 export declare function mcpConfigsToSpecs(servers: Record<string, McpConfigLike> | undefined): McpServerSpec[];

package/dist/mcpWireCaps.js

@@ -1,6 +1,9 @@
 export const MCP_CAPS = { items: 32 };
 function transparentKeys(c) {
-    return c.toolFaces !== undefined ? { toolFaces: c.toolFaces } : {};
+    return {
+        ...(c.toolFaces !== undefined ? { toolFaces: c.toolFaces } : {}),
+        ...(c.toolAxes !== undefined ? { toolAxes: c.toolAxes } : {}),
+    };
 }
 export function mcpConfigToSpec(name, c) {
     const n = (name ?? '').trim();

package/dist/memoryComplianceCapability.d.ts

@@ -1,6 +1,8 @@
 export declare const MEMORY_ENGINE_REQUIRED_CODE = "capability.memory_engine_required";
 export type MemoryComplianceReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/memoryComplianceCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 export const MEMORY_ENGINE_REQUIRED_CODE = 'capability.memory_engine_required';
 export function projectMemoryComplianceCapability(caps) {
@@ -21,7 +21,6 @@ export function projectMemoryComplianceCapability(caps) {
 const reader = createEngineCapReader({
     name: 'memoryCompliance',
     project: projectMemoryComplianceCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function observedMemoryCompliance(baseUrl = engineWireTarget()?.baseUrl) {
     return reader.observed(baseUrl);
@@ -35,6 +34,8 @@ export function memoryComplianceVerbsAvailable(reading) {
 }
 export function memoryComplianceDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('memory compliance face');
         case 'unobserved':
             return 'memory compliance face not observed — the engine reports it on /v1/capabilities (memoryCompliance); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':

package/dist/memoryOriginCapability.d.ts

@@ -1,5 +1,7 @@
 export type MemoryOriginReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/memoryOriginCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 import { MEMORY_ENGINE_REQUIRED_CODE } from './memoryComplianceCapability.js';
 export function projectMemoryOriginCapability(caps) {
@@ -21,7 +21,6 @@ export function projectMemoryOriginCapability(caps) {
 const reader = createEngineCapReader({
     name: 'memoryOrigin',
     project: projectMemoryOriginCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function observedMemoryOrigin(baseUrl = engineWireTarget()?.baseUrl) {
     return reader.observed(baseUrl);
@@ -35,6 +34,8 @@ export function memoryOriginVerbsAvailable(reading) {
 }
 export function memoryOriginDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('external-origin face');
         case 'unobserved':
             return 'external-origin face not observed — the engine reports it on /v1/capabilities (memoryOrigin); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':

package/dist/modelIdentityResolvability.js

@@ -1,4 +1,4 @@
-import { engineCapValue } from './engineCapsCache.js';
+import { engineCapsLandingOf } from './engineCapsCache.js';
 import { engineWireTarget } from './engineWireTarget.js';
 function laneOrder() {
     return ['processEnv', 'settingsEnv', 'modelCatalogFile', 'followedSettingsFile', 'followedProviderEnv'];
@@ -212,5 +212,5 @@ export function modelSetupNotice(decision) {
     }
 }
 export function observedEngineAnswer(baseUrl = engineWireTarget()?.baseUrl) {
-    return engineCapValue(baseUrl, 'version').kind === 'unobserved' ? 'not_observed' : 'answered';
+    return engineCapsLandingOf(baseUrl).kind === 'not_landed' ? 'not_observed' : 'answered';
 }

package/dist/noticePresentation.js

@@ -1,4 +1,4 @@
-import { capDisplay, displayUntrusted } from './displayUntrusted.js';
+import { capDisplay, DISPLAY_CAP_BACKOFF_MAX, displayUntrusted } from './displayUntrusted.js';
 import { engineNoticeInCatalog, noticeAudienceOf } from './engineNoticeCodes.js';
 import { guardedRead, readOwnDataNonEmptyString, readOwnDataValue } from './ownKey.js';
 const DEFAULT_CUT_MARK = '…';
@@ -210,7 +210,7 @@ const PRINT_BUDGET_OPERATOR = 160;
 const PRINT_PREFIX = '[sema] ';
 const NO_TEXT_SENTENCE = 'Engine notice (no message text)';
 const PRINT_CODE_MAX = 160;
-const PRE_CAP_SLACK = 2;
+const PRE_CAP_SLACK = DISPLAY_CAP_BACKOFF_MAX + 1;
 const PRINT_SESSION_MAX = 128;
 function lineFace(max) {
     return max === undefined ? { foldLines: false, mark: 'dot' } : { foldLines: false, mark: 'dot', max };

package/dist/outputStyleSeatCapability.d.ts

@@ -1,5 +1,7 @@
 export type OutputStyleSeatReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/outputStyleSeatCapability.js

@@ -17,7 +17,6 @@ export function projectOutputStyleSeatCapability(caps) {
 const reader = createEngineCapReader({
     name: 'outputStyleSeat',
     project: projectOutputStyleSeatCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function noteEngineCapsForOutputStyleSeat(baseUrl, caps, opts) {
     reader.note(baseUrl, caps, opts);

package/dist/peerLaneCapability.d.ts

@@ -1,5 +1,7 @@
 export type PeerLaneReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/peerLaneCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 export function projectPeerLaneCapability(caps) {
     try {
@@ -21,7 +21,6 @@ export function projectPeerLaneCapability(caps) {
 const reader = createEngineCapReader({
     name: 'peerLane',
     project: projectPeerLaneCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function noteEngineCapsForPeerLane(baseUrl, caps, opts) {
     reader.note(baseUrl, caps, opts);
@@ -38,6 +37,8 @@ export function peerLaneAvailable(reading) {
 }
 export function peerLaneDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('cross-session lane');
         case 'unobserved':
             return 'cross-session lane not observed — the engine reports it on /v1/capabilities (peerLane); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':

package/dist/permissionModesCapability.d.ts

@@ -1,5 +1,7 @@
 export type PermissionModesReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/permissionModesCapability.js

@@ -38,7 +38,6 @@ export function projectPermissionModesCapability(caps) {
 const reader = createEngineCapReader({
     name: 'permissionModes',
     project: projectPermissionModesCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function observedPermissionModes(baseUrl = engineWireTarget()?.baseUrl) {
     return reader.observed(baseUrl);

package/dist/permissionRulesWriteCapability.d.ts

@@ -1,5 +1,7 @@
 export type PermissionRulesWriteReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/permissionRulesWriteCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 export function projectPermissionRulesWriteCapability(caps) {
     try {
@@ -21,7 +21,6 @@ export function projectPermissionRulesWriteCapability(caps) {
 const reader = createEngineCapReader({
     name: 'permissionRulesWrite',
     project: projectPermissionRulesWriteCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function noteEngineCapsForPermissionRulesWrite(baseUrl, caps, opts) {
     reader.note(baseUrl, caps, opts);
@@ -34,6 +33,8 @@ export function permissionRulesWriteAvailable(reading) {
 }
 export function permissionRulesWriteDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('permission-rule write entry');
         case 'unobserved':
             return 'permission-rule write entry not observed — the engine reports it on /v1/capabilities (permissionRulesWrite); this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)';
         case 'not_reported':

package/dist/permissionsAllowGrantCapability.d.ts

@@ -1,5 +1,7 @@
 export type PermissionsAllowGrantReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/permissionsAllowGrantCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 import { hasCoreValuePort } from './coreValuePorts.js';
 const ALLOW_GRANT_CAP_PATH = ['settings', 'permissions', 'allowGrant'];
@@ -35,7 +35,6 @@ export function projectPermissionsAllowGrantCapability(caps) {
 const reader = createEngineCapReader({
     name: ALLOW_GRANT_CAP_PATH.join('.'),
     project: projectPermissionsAllowGrantCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function noteEngineCapsForPermissionsAllowGrant(baseUrl, caps, opts) {
     reader.note(baseUrl, caps, opts);
@@ -95,6 +94,9 @@ export function permissionsAllowGrantDoctorDetail(reading, settingsRead) {
     if (kind === 'present' && ownReadingField(reading, 'grants') === false) {
         return 'allow rules kept on this side — this engine says it does not read allow rules as rules of that kind, so they are not sent and matching approvals are still answered here';
     }
+    if (kind === 'unreadable') {
+        return `${unreadableReadingDetail('how this engine reads allow rules')}; allow rules are kept on this side (not sent), and matching approvals are still answered here`;
+    }
     if (kind === 'not_reported') {
         return 'allow rules kept on this side — this engine does not say how it reads allow rules; sending them to an engine that reads them as an exclusive list would block every tool not on it, so they are not sent and matching approvals are still answered here';
     }

package/dist/permissionsDeclaration.js

@@ -29,19 +29,6 @@ export const PERMISSIONS_KEPT_REASONS = Object.freeze([
     'duplicate',
     'voids_allow_list',
 ]);
-function normalizeLegacyToolName(name) {
-    switch (name) {
-        case 'Task':
-            return 'Agent';
-        case 'KillShell':
-            return 'TaskStop';
-        case 'AgentOutputTool':
-        case 'BashOutputTool':
-            return 'TaskOutput';
-        default:
-            return name;
-    }
-}
 function unescapedIndex(str, char, fromEnd) {
     for (let k = 0; k < str.length; k++) {
         const i = fromEnd ? str.length - 1 - k : k;
@@ -61,17 +48,17 @@ function unescapeRuleContent(content) {
 function parseRule(rule) {
     const open = unescapedIndex(rule, '(', false);
     if (open === -1)
-        return { toolName: normalizeLegacyToolName(rule) };
+        return { toolName: rule };
     const close = unescapedIndex(rule, ')', true);
     if (close === -1 || close <= open || close !== rule.length - 1)
-        return { toolName: normalizeLegacyToolName(rule) };
+        return { toolName: rule };
     const toolName = rule.substring(0, open);
     const rawContent = rule.substring(open + 1, close);
     if (!toolName)
-        return { toolName: normalizeLegacyToolName(rule) };
+        return { toolName: rule };
     if (rawContent === '' || rawContent === '*')
-        return { toolName: normalizeLegacyToolName(toolName) };
-    return { toolName: normalizeLegacyToolName(toolName), ruleContent: unescapeRuleContent(rawContent) };
+        return { toolName };
+    return { toolName, ruleContent: unescapeRuleContent(rawContent) };
 }
 function requireRulePorts() {
     const required = ['MCP_NAMESPACE', 'judgeRuleToolName', 'protocolOf', 'ruleToolGrammarOf', 'validatePermissionRules'];
@@ -90,7 +77,7 @@ function nameCheck(name) {
             '装的必须是 core 的同名实现、原样装。判不出不等于够得着:不判就发会让整份请求被引擎拒收,不判就删会静默丢掉 deny 规则,所以这里拒绝装配。');
     }
     if (verdict.kind === 'retired')
-        return { issue: 'retired_tool_name' };
+        return { retired: verdict.currentName !== undefined ? { currentName: verdict.currentName } : {} };
     if (verdict.kind === 'unprefixed_namespace')
         return { issue: 'unprefixed_namespaced_name' };
     const ns = protocolOf(name);
@@ -134,8 +121,17 @@ function judgeList(rules, behavior, allowForm = 'grant') {
         }
         const parsed = parseRule(rule);
         if (parsed.ruleContent === undefined) {
-            const name = wholeServerRuleName(parsed.toolName);
-            const check = nameCheck(name);
+            let name = wholeServerRuleName(parsed.toolName);
+            let check = nameCheck(name);
+            if ('retired' in check) {
+                const successor = check.retired.currentName;
+                if (behavior === 'allow' || successor === undefined)
+                    return kept('retired_tool_name');
+                name = successor;
+                check = nameCheck(name);
+                if ('retired' in check)
+                    return kept('retired_tool_name');
+            }
             if ('issue' in check)
                 return kept(check.issue);
             if (behavior === 'allow' && 'unminted' in check)
@@ -148,6 +144,8 @@ function judgeList(rules, behavior, allowForm = 'grant') {
             return behavior === 'allow' ? { sent: true, wire: name, unchecked: false } : sentFate(name, check, verdict.kind === 'unknown');
         }
         const check = nameCheck(parsed.toolName);
+        if ('retired' in check)
+            return kept('retired_tool_name');
         if ('issue' in check)
             return kept(check.issue);
         if (ruleToolGrammarOf(parsed.toolName) === 'path' && parsed.ruleContent.startsWith('~/'))

package/dist/request/taskRequest.d.ts

@@ -36,6 +36,7 @@ export interface TaskRequestInput {
     attachments?: Record<string, unknown>;
     attachmentIds?: readonly string[];
     excludeTools?: readonly string[];
+    allowTools?: readonly string[];
     finalVerification?: boolean;
     limits?: Record<string, unknown>;
     interactiveTools?: false;
@@ -57,10 +58,6 @@ export interface TaskRequestInput {
     disableSkills?: TaskRequest['disableSkills'];
     rewind?: Record<string, unknown>;
     repo?: string;
-    council?: boolean;
-    debate?: boolean;
-    rounds?: number;
-    lenses?: readonly string[];
     settings?: {
         resolved?: Record<string, unknown>;
         webSearch?: Record<string, unknown>;

package/dist/request/taskRequest.js

@@ -21,10 +21,6 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'settings.hooks', lanes: ['interactive', 'print'], live: true, why: '[495]① 用户 settings 文件 hooks 逐字上 wire', whyUtilityLane: '无座:hook 挂在工具门上(零工具面没有门),而且 side-channel 是壳自己的提交,不该继承用户那份 hook 表' },
     { field: 'settings.<resolved>', lanes: ['interactive', 'print'], live: true, why: 'settings resolver 的 effective 快照(hooks/env/model + 已解析权限投影)。两条车道同源:交互面 replEntry / print 面 printModeEngine 各跑一遍同一个 resolver,产物经同一个 buildWireSettingsStamp 投影。开放集(子键不可枚举)⇒ unregisteredRequestKeys 放行本车道 settings 的**表外**子键,但表内异车道子键仍点名', whyUtilityLane: '无座:这一位是**开放集 spread**(子键原样即 wire 键),摊开的是用户 settings 的已解析面(权限 / env / 模型)。side-channel 是壳自己的提交:摊上去既无用(零工具面没有工具门求值权限)又把用户的配置面带进了一条他没参与的提交。🔴 无座 ⇒ 本车道整只快照不产。🔴 **本行无座的前提由构造期校验兜住**:剥掉的是用户显式的 deny / ask,所以 `refuseUtilityWithoutToolUnload` 强制这条车道必须带字面 `excludeAllTools: true` —— 否则产出会是一条「既没卸工具、又没带用户 deny」的请求(比无人值守车道同一份输入更宽)' },
     { field: 'repo', lanes: ['interactive', 'print'], live: true, why: 'scan/code-review 场景的仓库坐标(passthrough;server 是权威校验方,本层不铸第二判官)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'council', lanes: ['interactive', 'print'], live: true, why: 'code-review council 形开关(server 读 `=== true`;非 true 不 stamp=与缺席同义,发小的那个)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'debate', lanes: ['interactive', 'print'], live: true, why: 'council 的 debate 变体开关(server 读 `=== true`)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'rounds', lanes: ['interactive', 'print'], live: true, why: 'debate 轮数(server clamp [1,3],非有限数被 server 归 undefined——本层原样透传不预 clamp)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
-    { field: 'lenses', lanes: ['interactive', 'print'], live: true, why: 'code-review 镜头数(server 场景按数字读、非数字回 400;本层型面仍按旧形声明为字符串数组 —— 已知不一致,随该族退役处理)', whyUtilityLane: '无座:场景键;side-channel 不走场景' },
     { field: 'memoryCapture', lanes: ['interactive', 'print', 'utility'], live: true, why: '本会话永远不进长期记忆的**声明形**(server §12.4 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryWrite:false 不是一个轴(那是「本 run 只读平面」)。⚠️ parked 续跑腿结构性拿不到声明(决策/续跑端点从持久 body 重建 spec),那是引擎侧事实,不是本层的漏', whyUtilityLane: '有座:side-channel 提交是壳自己的一次性问答,**绝不该**进用户的长期记忆 —— 这一位正是那句声明,且它是收紧方向,带上去只会更严' },
     { field: 'memory', lanes: ['interactive', 'print', 'utility'], live: true, why: '这一次运行不挂记忆面的**请求级**开关(server §12.7 body 键,单成员闭集 "off");每条车道都是提交面 ⇒ 都能声明。与 memoryCapture(采集面)不是一个轴、可并存;与 memoryWrite:false(只读平面)也不是一个轴', whyUtilityLane: '有座:side-channel 提交不需要挂记忆面(不挂记忆段 / 索引 / 三只记忆工具),省 token 且零记忆写入;与 memoryCapture 不是一个轴,两条都带' },
     { field: 'fileHistory', lanes: ['interactive', 'print'], live: true, why: '「这一次运行别捕获文件历史」的**请求级声明**(server 7.104.0 提交体键,单成员闭集 "disabled";`POST /v1/tasks` · `/v1/tasks/stream` · `/v1/runs` 同收,子代继承)。两条用户车道都是提交面、都跑在用户的文件上 ⇒ 都能声明;「本会话不捕获」= 每个提交都带(续跑腿重放同一个体)。🔴 只在能力读数 `on-optional` 时发(老 server 对表外键 400),值由片段口 `fileHistoryDeclarationField` 唯一铸出。与 rewind 还原键同交 ⇒ 上游 400 `request.field_conflict`', whyUtilityLane: '无座:side-channel 强制零工具面(`excludeAllTools`),不会改任何文件 ⇒ 没有可捕获的东西;带上它只会在不认识这一键的老 server 上给这条提交多一种 400' },
@@ -41,6 +37,7 @@ export const REQUEST_FIELD_MATRIX = [
     { field: 'maxTokens', lanes: ['print', 'utility'], live: true, why: '整任务 token 预算上限声明(sdk `TaskRequest.maxTokens`,请求体**顶层**位,与 `maxCostUsd` 同属上游那一族「调用方要求的上限」:向下夹到部署上限 —— 只许要得更少)。🔴 座位集与 `maxCostUsd` 那一行**逐字相同**:同一条预算轴的两种计价单位,分开定座就是让其中一条静默漂。🔴 坏值(非数 / 非有限 / 非正 / 非整)在本层**响亮拒**:上游对这一位的坏值是安静按「调用方没给」处理并回落部署上限,不是 4xx —— 部署没设上限时这一次运行就没有 token 闸,而声明人不会知道(见 `refuseBadMaxTokens`)', whyUtilityLane: '有座:与 maxCostUsd 同轴孪生 —— 小预算是本车道的定义之一,两种计价单位都该能声明' },
     { field: 'attachmentIds', lanes: ['interactive'], live: true, why: '附件**字节通道**(uploadAttachment 回执 id;server ≥1.289 绑定会话并把文件物化进 run 的 attachments/)。有上传入口的端才有 id 可引用:web/desktop 有,壳走 images / 本地文件路径,`-p` 车道连 uploadAttachment 都没有 ⇒ print 缺席是**没有来源**,不是漏。🔴 与上面的 `attachments` 同名不同物(那是 turn 边界的配置键),两条永远不许合并', whyUtilityLane: '无座:预上传附件句柄要先有上传入口才有 id 可引用,而 side-channel 没有上传面' },
     { field: 'excludeTools', lanes: ['interactive', 'print', 'utility'], live: true, why: 'design/161 W3(2026-07-30):真 wire 键(SDK types `excludeTools`)且早在 seatContract `START_SESSION_OPTION_KEYS` 里,却是 desktop 手写 taskReq 的第 9 键、矩阵外——而 stamp 门对未登记键**静默丢弃**,真实危险形=「用户显式排除的工具被静默放回」(权限方向回归,类型层不报)。今天只有 desktop 在发;壳的工具面走 roster/interactiveTools 另一条路。0.77.0 补 print 座(三问:① wire 位与车道无关 —— sdk 具名位、提交体真收 `body.excludeTools`;② 来源 —— print 今天没有排除入口,但这是**收紧方向**的声明,传了只进回执 = 端不读回执就把用户排除的工具放回;③ 口径 —— 仍是 live 门后的位,与交互面同一行)', whyUtilityLane: '有座:逐名排除是卸载声明旁边的第二条收紧声明(两键同带各自生效)。⚠️ 它**不是** excludeAllTools 的降级替身 —— 本车道强制带卸载声明(见 `refuseUtilityWithoutToolUnload`),不认那一键的上游会把整条提交拒掉,那时正解是换车道或不发' },
+    { field: 'allowTools', lanes: ['interactive', 'print'], live: true, why: '引擎的可用性选择器(收紧方向的声明:只给点名的工具;`[]` = 什么都不给,照发)。两条用户车道都是提交面、都有「只给这几只工具」的用户入口(终端 `--tools`)⇒ 都有座;坏形(不是串数组)在装配期响亮拒,不静默删键', whyUtilityLane: '无座:side-channel 恒带 excludeAllTools(零工具面),可用性选择器在零工具面上没有可选的东西' },
     { field: 'excludeAllTools', lanes: ['interactive', 'print', 'utility'], live: true, why: '0.78.0(sdk 11.x 具名位 `excludeAllTools`,server ≥7.90.0 请求面):整只工具面卸载 —— 调用方工具 / 脚手架 / 手 / MCP / A2A / skills 一个都不挂,终局必然纯文本(wire 上 `wiring_manifest.tools.count === 0`,整条流零 tool_start / tool_end / tool_disclosure)。与 excludeTools 是两种语义、刻意不折叠(`"*"` 是一个合法的工具名,「卸全部」不能写成 `excludeTools:["*"]`);两键同带各自生效。类型只收字面 `true`(server 只把 literal true 写上任务规格,`false` = 替引擎重申它自己的缺省 ⇒ 不发、与缺席同义、不进回执);坏值响亮拒(收紧方向的声明不许被打字错误安静丢掉)。每条车道都是提交面 ⇒ 都能声明。探测靠键闭集、没有能力位:没接线的 server(≤7.89.x)400 `request.body_shape` 并在 `unknownKeys` 里逐字点名,本层不替它猜;A2A 入站面不承载本键(零工具面走 skill 路由)', whyUtilityLane: '有座,而且**本车道强制**:零工具面就是这条车道的定义 —— side-channel 提交整只工具面卸载,终局必然纯文本。🔴 缺这一位(或给 `false`)⇒ 构造期响亮拒(`refuseUtilityWithoutToolUnload`):本车道上一整片「无座」的理由都压在这个前提上,其中 `settings.<resolved>` 那一行剥掉的是用户显式的 deny / ask ——前提不成立时产出会是一条「既没卸工具、又没带用户 deny」的请求' },
     { field: 'settings.ultracode', lanes: ['interactive'], live: true, why: 'design/111:sticky `/effort ultracode` 拨盘 + 当轮关键词嗅探,两个来源都只在交互面存在', gap: true, whyUtilityLane: '无座:sticky 拨盘与当轮关键词嗅探两个来源都只在交互面' },
     { field: 'systemPrompt', lanes: ['interactive', 'print', 'utility'], live: false, why: '整段替换系统提示(sdk `TaskRequest.systemPrompt`;上游字符数超限 400 响亮拒,本层原样透传)。三条车道都有来源:交互面 = CC QueryParams.systemPrompt,无人值守面 = `--system-prompt[-file]` 一类旗,side-channel 面 = 壳整段给出的那一份。与追加位 `appendSystemPrompt` 不是一个位(那一位归 live 兜底层,见 `LIVE_DEFAULT_FIELDS`)', whyUtilityLane: '有座:side-channel 提交的系统提示由壳整段给出 —— 它不是用户会话的续谈,不该继承用户那一份' },
@@ -175,10 +172,7 @@ const INPUT_KEY_ROUTES = {
     disableSkills: row('disableSkills'),
     rewind: row('resumeAt/resumeAtMode/restoreFiles/rewindFilesTo'),
     repo: row('repo'),
-    council: row('council'),
-    debate: row('debate'),
-    rounds: row('rounds'),
-    lenses: row('lenses'),
+    allowTools: row('allowTools'),
     settings: { via: 'settings' },
 };
 const SETTINGS_KEY_ROUTES = {
@@ -234,8 +228,6 @@ const rewindSubKeys = () => {
     return r.via === 'matrix' ? r.field.split('/') : [];
 };
 const VALUE_LEVEL_IN_PLAY = Object.freeze({
-    council: (v) => v === true,
-    debate: (v) => v === true,
     oneShot: (v) => v === true,
     interactiveTools: (v) => v === false,
     images: (v) => Array.isArray(v) && v.length > 0,
@@ -481,6 +473,66 @@ const withoutRetiredAttachmentsKeys = (v) => {
         delete copy[key];
     return copy;
 };
+const ALLOW_TOOLS_MAX_LENGTH = 65_536;
+const ALLOW_TOOLS_UNREADABLE_ITEM = Symbol('allowTools-unreadable-item');
+function allowToolsSnapshot(v) {
+    if (!Array.isArray(v))
+        return v;
+    let n;
+    try {
+        n = Object.getOwnPropertyDescriptor(v, 'length')?.value;
+    }
+    catch {
+        return ALLOW_TOOLS_UNREADABLE_ITEM;
+    }
+    if (typeof n !== 'number' || !Number.isSafeInteger(n) || n < 0 || n > ALLOW_TOOLS_MAX_LENGTH)
+        return ALLOW_TOOLS_UNREADABLE_ITEM;
+    const out = new Array(n);
+    for (let k = 0; k < n; k += 1) {
+        let d;
+        try {
+            d = Object.getOwnPropertyDescriptor(v, k);
+        }
+        catch {
+            out[k] = ALLOW_TOOLS_UNREADABLE_ITEM;
+            continue;
+        }
+        if (d === undefined)
+            continue;
+        out[k] = 'value' in d ? d.value : ALLOW_TOOLS_UNREADABLE_ITEM;
+    }
+    return Object.freeze(out);
+}
+const allowToolsCopy = (v) => {
+    if (!Array.isArray(v))
+        return [];
+    const out = [];
+    for (let k = 0; k < v.length; k += 1) {
+        const d = Object.getOwnPropertyDescriptor(v, k);
+        if (d !== undefined && 'value' in d && typeof d.value === 'string')
+            out.push(d.value);
+    }
+    return out;
+};
+const refuseBadAllowTools = (v) => {
+    if (v === undefined || v === null)
+        return;
+    if (Array.isArray(v)) {
+        let ok = true;
+        for (let k = 0; k < v.length; k += 1) {
+            const d = Object.getOwnPropertyDescriptor(v, k);
+            if (d === undefined || !('value' in d) || typeof d.value !== 'string') {
+                ok = false;
+                break;
+            }
+        }
+        if (ok)
+            return;
+    }
+    throw new TypeError('buildTaskRequest: allowTools 只接受字符串数组(`[]` = 什么都不给;缺席 = 不选择)—— ' +
+        `收到 ${coarseShape(v)}。这一位是**可用性选择器**(收紧声明):本层若把坏形静默删键,这一次运行会挂上声明人以为已经收窄掉的全部工具。` +
+        '错误文本只报形状,不回显值。');
+};
 const refuseBadExcludeAllTools = (v) => {
     if (v === undefined || v === null || v === true || v === false)
         return;
@@ -591,7 +643,8 @@ export function parseMaxCostUsd(text) {
         return { ok: false, why: 'not_positive' };
     return { ok: true, value };
 }
-const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach'];
+const ACCESSOR_READ_ORDER = ['live', 'memoryCapture', 'memory', 'settings', 'maxCostUsd', 'excludeAllTools', 'maxTokens', 'outputRetries', 'fileHistory', 'inheritEnv', 'requireExistingSession', 'disableSkills', 'approvalReach', 'allowTools'];
+const MATERIALIZE_AT_READ = Object.freeze({ allowTools: (v) => allowToolsSnapshot(v) });
 function dataFirstSnapshot(input, afterData) {
     let descs;
     try {
@@ -604,10 +657,10 @@ function dataFirstSnapshot(input, afterData) {
     const accessors = [];
     for (const k of Object.keys(descs)) {
         const d = descs[k];
-        if (d === undefined || d.enumerable !== true)
+        if (d === undefined || (d.enumerable !== true && routeOfTopLevelKey(k) === undefined))
             continue;
         if ('value' in d)
-            bag[k] = d.value;
+            bag[k] = Object.hasOwn(MATERIALIZE_AT_READ, k) ? MATERIALIZE_AT_READ[k](d.value) : d.value;
         else
             accessors.push(k);
     }
@@ -616,8 +669,10 @@ function dataFirstSnapshot(input, afterData) {
         ...ACCESSOR_READ_ORDER.filter((k) => accessors.includes(k)),
         ...accessors.filter((k) => !ACCESSOR_READ_ORDER.includes(k)),
     ];
-    for (const k of ordered)
-        bag[k] = Reflect.get(input, k);
+    for (const k of ordered) {
+        const v = Reflect.get(input, k);
+        bag[k] = Object.hasOwn(MATERIALIZE_AT_READ, k) ? MATERIALIZE_AT_READ[k](v) : v;
+    }
     return bag;
 }
 export function assembleTaskRequest(input, lane) {
@@ -663,6 +718,7 @@ export function assembleTaskRequest(input, lane) {
     const requireExistingSessionIn = src.requireExistingSession;
     const disableSkillsIn = src.disableSkills;
     const approvalReachIn = src.approvalReach;
+    const allowToolsIn = src.allowTools;
     const INPUT_KEYS = Object.keys(INPUT_KEY_ROUTES);
     const i = snapshotByName(src, INPUT_KEYS, {
         live,
@@ -677,6 +733,7 @@ export function assembleTaskRequest(input, lane) {
         requireExistingSession: requireExistingSessionIn,
         disableSkills: disableSkillsIn,
         approvalReach: approvalReachIn,
+        allowTools: allowToolsIn,
         settings: settingsIn,
     });
     const SETTINGS_KEYS = Object.keys(SETTINGS_KEY_ROUTES);
@@ -692,6 +749,7 @@ export function assembleTaskRequest(input, lane) {
     refuseBadRequireExistingSession(requireExistingSessionIn);
     refuseBadDisableSkills(disableSkillsIn, 'buildTaskRequest');
     refuseBadApprovalReach(approvalReachIn, 'buildTaskRequest');
+    refuseBadAllowTools(allowToolsIn);
     const rewindRoute = INPUT_KEY_ROUTES.rewind;
     const RETIRED_REWIND_FILES_KEY = 'rewindFiles';
     const REWIND_KEYS = rewindRoute.via === 'matrix' ? rewindRoute.field.split('/') : [];
@@ -824,10 +882,7 @@ export function assembleTaskRequest(input, lane) {
         ...(on('enableFork') ? { enableFork: i.enableFork } : {}),
         ...(on('attachments') ? { attachments: attachmentsForWire } : {}),
         ...(on('repo') ? { repo: i.repo } : {}),
-        ...(on('council') ? { council: true } : {}),
-        ...(on('debate') ? { debate: true } : {}),
-        ...(on('rounds') ? { rounds: i.rounds } : {}),
-        ...(on('lenses') ? { lenses: i.lenses } : {}),
+        ...(on('allowTools') ? { allowTools: allowToolsCopy(i.allowTools) } : {}),
         ...(on('attachmentIds') ? { attachmentIds: [...(i.attachmentIds ?? [])] } : {}),
         ...(on('excludeTools') ? { excludeTools: [...(i.excludeTools ?? [])] } : {}),
         ...(on('excludeAllTools') ? { excludeAllTools: true } : {}),

package/dist/resumeRefusalCopy.js

@@ -1,5 +1,5 @@
 import { readBlockedBy, readErrorNumber, readErrorString } from './wireFailureShape.js';
-import { readOwnDataNonEmptyString } from './ownKey.js';
+import { guardedRead, ownDataField, readOwnDataNonEmptyString } from './ownKey.js';
 import { RESUME_CONTEXT_UNAVAILABLE, RESUME_PLACEMENT_MISMATCH, RESUME_PREFLIGHT_REJECTED, RESUME_POLICY_FOLD_CODE, PARKED_RESUME_STARTUP_FAILED, isStatusDerivedCoarseCode, RESUME_SESSION_NOT_FOUND, REQUEST_FIELD_CONFLICT, CHECKPOINT_UNSUPPORTED_VERSION, CHECKPOINT_WALLTIME_AXIS_RETIRED, CHECKPOINT_CONFIG_REFUSED, isRefusedParkCode, refusalSaysStillPending, refusalRetriableReading, } from './engineErrorCodes.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 import { engineVersionTier } from './supportFloor.js';
@@ -11,7 +11,7 @@ export const RESUME_REFUSAL_CODES = Object.freeze([
 export function resumeRefusalFromError(err) {
     if (typeof err !== 'object' || err === null)
         return null;
-    const code = err.errorCode;
+    const code = guardedRead(() => ownDataField(err, 'errorCode'));
     if (typeof code !== 'string' || !RESUME_REFUSAL_CODES.includes(code))
         return null;
     if (code === RESUME_PLACEMENT_MISMATCH) {
@@ -274,8 +274,8 @@ export function refusedParkFromError(failure) {
     let code;
     let status;
     try {
-        code = failure.errorCode;
-        status = failure.status;
+        code = ownDataField(failure, 'errorCode');
+        status = ownDataField(failure, 'status');
     }
     catch {
         return null;

package/dist/rewindArchiveCapability.js

@@ -1,5 +1,6 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { resetRewindArchiveReader, rewindArchiveReadingAt, rewindConversationAvailability, } from './rewindArchiveReading.js';
+import { unreadableReadingDetail } from './engineCapReader.js';
 export { projectRewindArchiveCapability, rewindConversationAvailability } from './rewindArchiveReading.js';
 export function noteEngineCapsForRewindArchive(baseUrl, caps, opts) {
     void baseUrl;
@@ -21,6 +22,8 @@ export function rewindCodeArchiveAvailability(reading, mode) {
 }
 export function rewindArchiveDoctorDetail(reading, mode) {
     const lane = mode === 'both' ? 'rewind with code restore' : 'code-only rewind';
+    if (reading.kind === 'unreadable')
+        return unreadableReadingDetail(lane);
     if (reading.kind !== 'present') {
         return `${lane} not observed — the engine reports it on /v1/capabilities; this process has no usable capabilities reading cached for it, so whether the code archive can be restored is unknown`;
     }
@@ -58,6 +61,8 @@ export function engineRewindRefusedNow(option, reading = observedRewindArchive()
 }
 export function rewindConversationDoctorDetail(reading) {
     const lane = 'rewind to a message';
+    if (reading.kind === 'unreadable')
+        return unreadableReadingDetail(lane);
     if (reading.kind !== 'present') {
         return `${lane} not observed — the engine reports conversation anchors on /v1/capabilities; this process has no usable capabilities reading cached for it, so whether the conversation can be rewound is unknown`;
     }

package/dist/rewindArchiveReading.d.ts

@@ -1,6 +1,8 @@
 export type RewindArchiveBit = 'on' | 'off' | 'not_reported' | 'malformed';
 export type RewindArchiveReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'present';
     conversationAnchor: RewindArchiveBit;

package/dist/rewindArchiveReading.js

@@ -37,7 +37,6 @@ export function projectRewindArchiveCapability(caps) {
 const reader = createEngineCapReader({
     name: 'rewindArchive',
     project: projectRewindArchiveCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function rewindArchiveReadingAt(baseUrl) {
     return reader.observed(baseUrl);