@sema-agent/client-core 0.96.0 → 0.97.1

package/dist/hitl/sessionPolicyWire.js

@@ -1,6 +1,6 @@
 import { wireFailureShapeOf } from '../wireFailureShape.js';
 import { hostLog } from '../host.js';
-import { isEngineRefusedToolName } from './sessionPolicyDeliverable.js';
+import { ruleToolNameVerdictOf } from '../protocolSegment.js';
 import { RULES_LEGACY_TOOL_NAME_WRITE_NOTE } from './refusedToolNameProse.js';
 import { RULES_LEGACY_TOOL_NAME, isRulesRefusalCode } from '../engineErrorCodes.js';
 import { rosterMountedNames } from '../rosterMountedNames.js';
@@ -434,7 +434,14 @@ function withoutRefusedEntries(prior, mounted) {
         const kept = [];
         const seen = new Set();
         for (const x of list) {
-            if (!isEngineRefusedToolName(x) || mounted.has(x)) {
+            if (mounted.has(x)) {
+                kept.push(x);
+                continue;
+            }
+            const kind = ruleToolNameVerdictOf(x).kind;
+            if (kind === 'unknown')
+                return 'judge_failed';
+            if (kind === 'current') {
                 kept.push(x);
                 continue;
             }
@@ -479,7 +486,10 @@ async function attemptRemoval(facade, sessionId, mounted, opts) {
         return { done: removalFailed(read.failure, 'read') };
     if (read.kind === 'malformed')
         return { done: { kind: 'read_failed', why: 'read_unreadable', message: read.detail } };
-    const { next, removed } = withoutRefusedEntries(read.rules, mounted);
+    const judged = withoutRefusedEntries(read.rules, mounted);
+    if (judged === 'judge_failed')
+        return { done: { kind: 'judge_failed' } };
+    const { next, removed } = judged;
     if (removed.length === 0)
         return { done: { kind: 'nothing_to_remove', rev: read.rev } };
     let receipt;
@@ -563,6 +573,8 @@ export function sessionPolicyRemovalNotice(outcome) {
         }
         case 'nothing_to_remove':
             return 'This session’s rule record holds no entry naming a tool the engine refuses that the supplied roster does not mount, so nothing was changed. If runs still fail at startup over a refused tool name, that entry is set somewhere this record does not cover — the settings sent with the run, a parent session’s rule record, or the deployment’s own tool rules — or it is a name the engine refuses that this version does not yet recognise, or the failing run does not mount a tool the supplied roster has under that name.';
+        case 'judge_failed':
+            return 'Nothing was changed: this client could not check which entries in this session’s rule record name a tool the engine refuses (its copy of the engine’s tool-name check is unavailable or gave no clear answer), so it removed none rather than guess. Removing them needs that check available in this client.';
         case 'loosen_forbidden':
             return 'The engine refused to take these entries out of this session’s rule record: on this engine only an operator can remove entries from it, so the record is unchanged. Ask an operator to remove them, or continue in a new session.';
         case 'conflict':

package/dist/hitl/standingRows.d.ts

@@ -16,3 +16,4 @@ export interface StandingRowsHostFacts {
     readonly wholeToolRuleSent?: boolean;
 }
 export declare function standingRowsOf(card: object | null | undefined, host?: StandingRowsHostFacts | null): StandingRows;
+export declare function seatSessionRowOf(card: object | null | undefined, requestId: string | undefined): boolean;

package/dist/hitl/standingRows.js

@@ -1,6 +1,7 @@
 import { readAskClassPairState } from './askClassPair.js';
 import { automaticAnswerVerdict } from './automaticAnswerVerdict.js';
 import { readRuleOffers } from './toolApprovalWire.js';
+import { toolPermissionRequestIdDomain } from '../seatContract.js';
 const DEPLOYMENT_LIST_ASK_CLASSES = Object.freeze(['ask_rule']);
 const UNREADABLE = Symbol('unreadable');
 function ownData(v, key) {
@@ -80,27 +81,32 @@ function persistentRowOf(card, host, evidenceUnreadable) {
         return { row: 'none', why: 'rule_not_sent' };
     return { row: 'local_whole_tool', why: 'given' };
 }
+function enginePremiseOf(card) {
+    const refused = present(card, 'rememberRefused');
+    if (refused === UNREADABLE)
+        return 'card_unreadable';
+    if (refused.inCard)
+        return refused.value === true ? 'remember_refused' : 'remember_unreadable';
+    const evidence = present(card, 'unreadableEvidence');
+    if (evidence === UNREADABLE)
+        return 'card_unreadable';
+    if (!evidence.inCard)
+        return { evidenceUnreadable: false };
+    const list = ownData(card, 'unreadableEvidence');
+    if (!Array.isArray(list) || !list.every((k) => typeof k === 'string'))
+        return 'card_unreadable';
+    if (list.includes('rememberRefused'))
+        return 'remember_unreadable';
+    return { evidenceUnreadable: list.length > 0 };
+}
 export function standingRowsOf(card, host) {
     if (typeof card !== 'object' || card === null)
         return allClosed('card_unreadable');
     try {
-        const refused = present(card, 'rememberRefused');
-        if (refused === UNREADABLE)
-            return allClosed('card_unreadable');
-        if (refused.inCard)
-            return allClosed(refused.value === true ? 'remember_refused' : 'remember_unreadable');
-        const evidence = present(card, 'unreadableEvidence');
-        if (evidence === UNREADABLE)
-            return allClosed('card_unreadable');
-        let evidenceUnreadable = false;
-        if (evidence.inCard) {
-            const list = ownData(card, 'unreadableEvidence');
-            if (!Array.isArray(list) || !list.every((k) => typeof k === 'string'))
-                return allClosed('card_unreadable');
-            if (list.includes('rememberRefused'))
-                return allClosed('remember_unreadable');
-            evidenceUnreadable = list.length > 0;
-        }
+        const premise = enginePremiseOf(card);
+        if (typeof premise === 'string')
+            return allClosed(premise);
+        const evidenceUnreadable = premise.evidenceUnreadable;
         const sessionRow = ownData(card, 'allowSessionCarried') === true;
         const sessionWhy = sessionRow ? 'given' : 'route_cannot_carry';
         let deploymentList;
@@ -125,3 +131,18 @@ export function standingRowsOf(card, host) {
         return allClosed('card_unreadable');
     }
 }
+export function seatSessionRowOf(card, requestId) {
+    if (typeof card !== 'object' || card === null)
+        return false;
+    try {
+        if (Object.hasOwn(card, 'requestId'))
+            return false;
+        const domain = toolPermissionRequestIdDomain(requestId);
+        if (domain !== 'live:' && domain !== 'durable:')
+            return false;
+        return typeof enginePremiseOf(card) !== 'string';
+    }
+    catch {
+        return false;
+    }
+}

package/dist/hitl/suspendedReopen.js

@@ -1,4 +1,5 @@
 import { RESUME_REOPEN_CODES, RESUME_ENV_FAILED, RESUME_TOOL_UNAVAILABLE, refusalSaysStillPending } from '../engineErrorCodes.js';
+import { guardedRead, ownDataField } from '../ownKey.js';
 const UNSTATED = Object.freeze({ kind: 'unstated' });
 const NOT_REOPENED = Object.freeze({ kind: 'not_reopened' });
 export function suspendedReopenOf(ev) {
@@ -22,7 +23,7 @@ export function suspendedReopenOf(ev) {
 export function resumeReopenFromError(err) {
     if (typeof err !== 'object' || err === null)
         return null;
-    const code = err.errorCode;
+    const code = guardedRead(() => ownDataField(err, 'errorCode'));
     if (typeof code !== 'string' || !RESUME_REOPEN_CODES.includes(code))
         return null;
     if (!refusalSaysStillPending(err))

package/dist/hitl/toolApprovalWire.d.ts

@@ -6,11 +6,7 @@ import { type DenyAttributionRefusalDetail } from '../wireRefusalCopy.js';
 import { type ApprovalDecidedByReading } from '../approvalDecidedByCapability.js';
 import { type DecideReceiptView } from '../decideReceipt.js';
 import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS } from '@sema-agent/sdk';
-import type { ApprovalDecidedBy, ApprovalSettleCause, ToolApprovalRespondAck, PersistedRuleAnchor as SdkPersistedRuleAnchor, RuleOfferMatch as SdkRuleOfferMatch, RuleOfferBatchMember as SdkRuleOfferBatchMember, RuleOfferUncoveredDetail as SdkRuleOfferUncoveredDetail, RuleOfferUncoveredReason as SdkRuleOfferUncoveredReason, AskOrigin as SdkAskOrigin, RuleOffersAbsence as SdkRuleOffersAbsence, DenialLimitKind as SdkDenialLimitKind, DenialLimitFallback as SdkDenialLimitFallback } from '@sema-agent/sdk';
-export declare function isFsApprovalGate(gate: {
-    kind?: unknown;
-    toolName?: unknown;
-} | undefined | null): boolean;
+import type { ApprovalDecidedBy, ApprovalSettleCause, ToolApprovalRespondAck, PersistedRuleAnchor as SdkPersistedRuleAnchor, RuleOfferMatch as SdkRuleOfferMatch, RuleOfferBatchMember as SdkRuleOfferBatchMember, RuleOfferUncoveredDetail as SdkRuleOfferUncoveredDetail, RuleOfferUncoveredReason as SdkRuleOfferUncoveredReason, AskOrigin as SdkAskOrigin, RuleOffersAbsence as SdkRuleOffersAbsence, DenialLimitKind as SdkDenialLimitKind, DenialLimitFallback as SdkDenialLimitFallback, ToolApprovalCardWord } from '@sema-agent/sdk';
 export declare function toolNameIsFsWrite(name: string): boolean;
 export declare function toolNameIsShellExec(name: string): boolean;
 export declare function isToolApprovalGate(gate: {
@@ -155,6 +151,7 @@ export interface ApprovalCardRequest {
     mandate?: ApprovalMandateWord;
     denialLimitFallback?: DenialLimitFallback;
     origin?: string;
+    approvalCard?: ToolApprovalCardWord;
     askClass?: string;
     classes?: readonly string[];
     boundGrants?: BoundSkillGrantsWire;
@@ -177,12 +174,13 @@ export declare function approvalCardPortMissesFor(sessionKey: string): number;
 export declare function hasApprovalCardPort(): boolean;
 export declare function hasApprovalCardPortFor(sessionKey: string): boolean;
 export declare function approvalCardPortFor(sessionKey: string): ApprovalCardPort | null;
+export declare function __resetSettledApprovalsForTests(): void;
 export declare function _resetApprovalCardPortForTest(): void;
 export declare function surfaceApprovalCard(req: ApprovalCardRequest): Promise<ApprovalCardDecision>;
 declare const REMEMBER_REFUSAL_CODES: readonly ["remember_not_in_proof", "remember_requires_binding", "capability.store_required", "decide.workflow_remember_unsupported", "decide.parked_remember_unsupported"];
 export type RememberRefusalCode = (typeof REMEMBER_REFUSAL_CODES)[number];
 export declare function rememberRefusalOf(error: unknown): RememberRefusalCode | undefined;
-export declare function surfaceFsApprovalAndDecide(deps: FsApprovalWireDeps, taskId: string, argsByCall: Map<string, unknown>, signal?: AbortSignal, parkGatedCallId?: string): Promise<FsApprovalOutcome>;
+export declare function surfaceFsApprovalAndDecide(deps: FsApprovalWireDeps, taskId: string, argsByCall: Map<string, unknown>, signal?: AbortSignal, parkGatedCallId?: string, parkToolName?: string): Promise<FsApprovalOutcome>;
 export interface BoundSkillGrantsWire {
     readonly skill: string | null;
     readonly allowedTools: readonly string[];
@@ -219,6 +217,7 @@ export interface ToolApprovalFrame {
     mandated?: true;
     mandate?: string;
     origin?: string;
+    approvalCard?: string;
     askClass?: string;
     classes?: readonly string[];
     inputHasBidi?: true;
@@ -238,7 +237,7 @@ export interface ToolApprovalDelegation {
     depth: number;
     agentName?: string;
 }
-export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "readRootCandidate", "mandated", "mandate", "origin", "askClass", "classes", "inputHasBidi", "parked", "persistedRuleShadowed", "allowRuleShadowed", "probeCause", "probeReason", "rememberRefused", "boundGrantDigest", "boundGrants", "classifierNoRuling", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome", "cause"];
+export declare const TOOL_APPROVAL_FRAME_KEYS_MIRROR: readonly ["type", "approvalId", "toolCallId", "toolName", "sourceTaskId", "fromSubagent", "sourceAgentName", "message", "args", "argsOmitted", "governanceForced", "ruleOffers", "ruleOffersAbsence", "denialLimitFallback", "readRootCandidate", "mandated", "mandate", "origin", "approvalCard", "askClass", "classes", "inputHasBidi", "parked", "persistedRuleShadowed", "allowRuleShadowed", "probeCause", "probeReason", "rememberRefused", "boundGrantDigest", "boundGrants", "classifierNoRuling", "ruleEvidence", "requiresRealApproval", "expiresInMs", "expiresAtMs", "serverNowMs", "delegation", "outcome", "cause"];
 export interface ApprovalMandatedFacts {
     readonly mandated?: true;
     readonly ruleOffersAbsence?: string;
@@ -248,7 +247,8 @@ export declare function approvalIsMandated(v: ApprovalMandatedFacts | undefined
 export declare function readApprovalMandate(v: {
     readonly mandate?: string;
 } | undefined | null): ApprovalMandateWord | undefined;
-export declare function toolPermissionRequestAskBits(card: object | null | undefined): Pick<ToolPermissionRequest, 'mandated' | 'mandate' | 'origin' | 'ruleOffersAbsence' | 'askClass' | 'classes' | 'rememberRefused'>;
+export declare function readApprovalCardWord(carrier: unknown): ToolApprovalCardWord | undefined;
+export declare function toolPermissionRequestAskBits(card: object | null | undefined, requestId?: string): Pick<ToolPermissionRequest, 'mandated' | 'mandate' | 'origin' | 'ruleOffersAbsence' | 'askClass' | 'classes' | 'sessionRow'>;
 export declare function isFromSubagent(frame: ToolApprovalFrame): boolean;
 export type ToolApprovalRespondDecision = 'allow' | 'allow_session' | 'deny';
 export interface RespondToolApprovalOpts {

package/dist/hitl/toolApprovalWire.js

@@ -1,7 +1,9 @@
 import { APPROVAL_CARD_PORT_KEY_MISMATCH_REASON, DEFAULT_DENY_REASON, DecideTransportRetryExhaustedError, HitlBridge, NO_APPROVAL_CARD_PORT_REASON, denyReasonForWire, findPendingForTask, hitlSafetyCodeOf, readDecideCurrentPending, readWireCodes, readWireErrorCodeReading, } from './hitlBridge.js';
 import { askParkRowArm } from './askParkRowRouting.js';
+import { parkGateArmOf } from './frameRouter.js';
+import { seatSessionRowOf } from './standingRows.js';
 import { hostLog } from '../host.js';
-import { readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue, readOwnNonEmptyString } from '../ownKey.js';
+import { guardedRead, readAskOrigin, readOwnDataNonEmptyString, readOwnDataValue, readOwnNonEmptyString } from '../ownKey.js';
 import { readAskClassPair } from './askClassPair.js';
 import { readAllowRuleShadowFromWire } from './allowRuleShadow.js';
 import { createSessionSlot, DEFAULT_SESSION_KEY } from '../sessionSlot.js';
@@ -10,7 +12,7 @@ import { CORE_SKILL_TOOL_NAME } from '../generated/toolNameTables.js';
 import { INTERRUPT_DENY_REASON, observeCancelByDeny, surfaceApprovalParking, surfaceRememberNotApplied, surfaceEditNotForwarded, surfaceEditRefusedOnBlindAsk, surfaceRuleArmNotSent, surfaceRuleArmRejected } from './hitlHostSurface.js';
 import { approvalCallKey, liveFrameCallKey } from './gateIdentity.js';
 import { displayUntrusted } from '../displayUntrusted.js';
-import { approvalDecisionHolds, awaitLiveCardHolder, holdLiveCard, joinLiveCard, liveCardHoldFor, liveCardHoldOf } from './approvalHolds.js';
+import { approvalDecisionHolds, awaitLiveCardHolder, holdLiveCard, joinLiveCard, liveCardHoldFor, liveCardHoldOf, clearSettledApprovals, settledApprovalOf, settledForDurableLane, settledLiveCardOutcome } from './approvalHolds.js';
 import { approvalResolutionOf } from './approvalResolution.js';
 import { isApprovalMandateWord } from '../gateVocabulary.js';
 import { denyAttributionRefusalFromError } from '../wireRefusalCopy.js';
@@ -21,14 +23,7 @@ import { refusalCauseWordOf } from './approvalEndingCause.js';
 import { readDecisionRefusalAsk } from './decisionRefusal.js';
 import { DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, refusalSaysStillPending } from '../engineErrorCodes.js';
 import { readDecideReceipt } from '../decideReceipt.js';
-import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, ASK_ORIGINS, } from '@sema-agent/sdk';
-export function isFsApprovalGate(gate) {
-    if (!gate)
-        return false;
-    if (gate.kind === 'tool_approval')
-        return true;
-    return typeof gate.toolName === 'string' && toolNameIsFsWrite(gate.toolName);
-}
+import { RULE_OFFER_MATCHES, RULE_OFFER_BATCH_MEMBER_KINDS, RULE_OFFER_UNCOVERED_REASONS, RULE_OFFERS_ABSENCE_REASONS, ASK_ORIGINS, TOOL_APPROVAL_CARD_WORDS, } from '@sema-agent/sdk';
 export function toolNameIsFsWrite(name) {
     const n = name.replace(/[\s_-]+/g, '').toLowerCase();
     return (n === 'write' || n === 'filewrite' || n === 'edit' || n === 'fileedit' || n === 'multiedit' || n === 'notebookedit');
@@ -37,9 +32,13 @@ export function toolNameIsShellExec(name) {
     return name.replace(/[\s_-]+/g, '').toLowerCase() === 'bash';
 }
 export function isToolApprovalGate(gate) {
-    if (isFsApprovalGate(gate))
-        return true;
-    return typeof gate?.toolName === 'string' && toolNameIsShellExec(gate.toolName);
+    return parkGateArmOf(gate) === 'fs';
+}
+function fallbackRowMatcherFor(parkToolName) {
+    const family = (toolName) => toolName !== undefined && (toolNameIsFsWrite(toolName) || toolNameIsShellExec(toolName));
+    if (parkToolName === undefined || parkToolName === '' || family(parkToolName))
+        return family;
+    return (toolName) => toolName === parkToolName;
 }
 export function structurallyEqual(a, b) {
     if (a === b)
@@ -113,6 +112,9 @@ export function hasApprovalCardPortFor(sessionKey) {
 export function approvalCardPortFor(sessionKey) {
     return cardPortByKey.get(sessionKey) ?? null;
 }
+export function __resetSettledApprovalsForTests() {
+    clearSettledApprovals();
+}
 export function _resetApprovalCardPortForTest() {
     cardPortByKey.clear();
     cardPortMissesByKey.clear();
@@ -283,13 +285,13 @@ async function joinDurableDecision(hold, deps, signal) {
     }
     return { ...o, joinedInFlight: true };
 }
-export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signal, parkGatedCallId) {
+export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signal, parkGatedCallId, parkToolName) {
     const decidedByReading = decidedByReadingSnapshotOf(deps);
     const readMark = openDurableRead();
     let found;
     let held;
     try {
-        found = await findPendingForTask(deps.client, taskId, (toolName) => toolName !== undefined && (toolNameIsFsWrite(toolName) || toolNameIsShellExec(toolName)), signal ? { signal } : undefined, parkGatedCallId, (row) => askParkRowArm(row) === 'tool-gate');
+        found = await findPendingForTask(deps.client, taskId, fallbackRowMatcherFor(parkToolName), signal ? { signal } : undefined, parkGatedCallId, (row) => askParkRowArm(row) === 'tool-gate');
         if (found.ok)
             held = heldDurableDecision(durableHoldKey(found.pending, approvalCallKey(found.gatedCallId, taskId)), readMark);
     }
@@ -305,7 +307,7 @@ export async function surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signa
         const joined = await awaitLiveCardHolder(liveHolder, signal);
         if (joined !== undefined)
             return fsOutcomeOfJoinedLiveCard(joined, found.gatedCallId);
-        return surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signal, parkGatedCallId);
+        return surfaceFsApprovalAndDecide(deps, taskId, argsByCall, signal, parkGatedCallId, parkToolName);
     }
     const callKey = approvalCallKey(found.gatedCallId, taskId);
     const fetched = found;
@@ -383,6 +385,7 @@ async function presentFsApprovalAndDecide(deps, taskId, argsByCall, signal, foun
         ...(hasOwnStrictTrue(pending, 'mandated') ? { mandated: true } : {}),
         ...((w) => (w !== undefined ? { mandate: w } : {}))(readApprovalMandate(pending)),
         ...((o) => (o !== undefined ? { origin: o } : {}))(readAskOrigin(pending)),
+        ...((w) => (w !== undefined ? { approvalCard: w } : {}))(readApprovalCardWord(pending)),
         ...(readAskClassPair(pending) ?? {}),
         ...(pending.gateKind === 'irreversible_ask' ? { irreversibleParkGate: true } : {}),
         ...(pending.hasBidiControls === true ? { hasBidiControls: true } : {}),
@@ -596,6 +599,7 @@ export const TOOL_APPROVAL_FRAME_KEYS_MIRROR = [
     'mandated',
     'mandate',
     'origin',
+    'approvalCard',
     'askClass',
     'classes',
     'inputHasBidi',
@@ -637,7 +641,21 @@ export function readApprovalMandate(v) {
     const raw = v.mandate;
     return isApprovalMandateWord(raw) ? raw : undefined;
 }
-export function toolPermissionRequestAskBits(card) {
+const APPROVAL_CARD_WORD_SET = new Set(TOOL_APPROVAL_CARD_WORDS);
+export function readApprovalCardWord(carrier) {
+    try {
+        if (typeof carrier !== 'object' || carrier === null)
+            return undefined;
+        const d = Object.getOwnPropertyDescriptor(carrier, 'approvalCard');
+        if (d === undefined || !('value' in d))
+            return undefined;
+        return APPROVAL_CARD_WORD_SET.has(d.value) ? d.value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function toolPermissionRequestAskBits(card, requestId) {
     if (typeof card !== 'object' || card === null)
         return {};
     const mandated = hasOwnStrictTrue(card, 'mandated');
@@ -651,7 +669,7 @@ export function toolPermissionRequestAskBits(card) {
         ...(origin !== undefined ? { origin } : {}),
         ...(ruleOffersAbsence !== undefined ? { ruleOffersAbsence } : {}),
         ...(askClassPair ?? {}),
-        ...(readApprovalRememberRefused(card) ? { rememberRefused: true } : {}),
+        ...(seatSessionRowOf(card, requestId) ? { sessionRow: true } : {}),
     };
 }
 function hasOwnStrictTrue(v, key) {
@@ -843,8 +861,9 @@ export function readToolApprovalRespondRefusal(err) {
             return undefined;
         }
     };
-    const rawStatus = pick('status');
-    const rawCode = pick('errorCode');
+    const pickMachine = (key) => guardedRead(() => (typeof err === 'object' && err !== null ? readOwnDataValue(err, key) : undefined));
+    const rawStatus = pickMachine('status');
+    const rawCode = pickMachine('errorCode');
     const status = typeof rawStatus === 'number' && Number.isFinite(rawStatus) ? rawStatus : undefined;
     const errorCode = typeof rawCode === 'string' && rawCode.length > 0 ? rawCode : undefined;
     const message = refusalTextOf(err, pick('message'));
@@ -1466,6 +1485,9 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
     const held = liveCardHoldOf(liveFrameCallKey(approvalId));
     if (held !== undefined)
         return joinLiveCard(held, signal);
+    const settled = settledLiveCardOutcome(approvalId);
+    if (settled !== undefined)
+        return Promise.resolve(settled);
     return holdLiveCard(liveCardIdentityOf(approvalId, frame, run), signal, async (hold) => {
         const slot = {};
         const out = await presentToolApprovalFrameAndRespond(frame, approvalId, respond, streamArgs, signal, lane, hold, slot);
@@ -1504,9 +1526,12 @@ function readApprovalHolderIdentity(v) {
     return out;
 }
 export async function joinApprovalHolder(identity, signal) {
-    const hold = liveCardHoldFor(readApprovalHolderIdentity(identity));
-    if (hold === undefined)
-        return { kind: 'free' };
+    const who = readApprovalHolderIdentity(identity);
+    const hold = liveCardHoldFor(who);
+    if (hold === undefined) {
+        const entry = settledApprovalOf(who.approvalId);
+        return settledForDurableLane(entry) && entry !== undefined ? { kind: 'joined', outcome: { ...entry.outcome, joinedInFlight: true } } : { kind: 'free' };
+    }
     const joined = await awaitLiveCardHolder(hold, signal);
     return joined !== undefined ? { kind: 'joined', outcome: joined } : { kind: 'free' };
 }
@@ -1581,6 +1606,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
             : {}),
         ...(denialLimitFallback !== undefined ? { denialLimitFallback } : {}),
         ...((o) => (o !== undefined ? { origin: o } : {}))(readAskOrigin(frame)),
+        ...((w) => (w !== undefined ? { approvalCard: w } : {}))(readApprovalCardWord(frame)),
         ...(readAskClassPair(frame) ?? {}),
         ...((g) => (g !== undefined ? { boundGrants: g } : {}))(readApprovalBoundGrants(frame)),
         ...((w) => (w !== undefined ? { classifierNoRuling: w } : {}))(readApprovalClassifierNoRuling(frame)),
@@ -1613,7 +1639,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
         catch (e) {
             interruptDeny = Promise.reject(e);
         }
-        hold.trailing = interruptDeny.then(() => undefined, () => undefined);
+        hold.trailing = interruptDeny.then((body) => readToolApprovalRespondParking(body) === undefined, () => false);
         observeCancelByDeny(interruptDeny, approvalId);
         hostLog('debug', `liveToolApprovalWire: ${approvalId} card aborted — one tool-level deny issued to settle the pending ask`);
         return { decision: 'unresolved', aborted: true };

package/dist/index.d.ts

@@ -24,8 +24,8 @@ export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay,
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
-export type { EngineCapState, EngineCapValueState, } from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export type { EngineCapState, EngineCapsLanding, EngineCapsProbeRotation, EngineCapValueState, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -46,7 +46,7 @@ export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
-export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_PARKED_RUN_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunParked, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
 export type { CcTaskTerminalStatus, CoreSemaTaskTerminalStatus, CoreTaskNotificationTerminalStatus, CoreTerminalCauseKind, SdkFleetTaskTerminalStatus, SdkRunTerminalStatus, } from './terminalStatuses.js';
 export type { ProviderRejectionResend, ProviderRejectionKind } from './providerRejection.js';
 export { PROVIDER_REJECTION_KINDS } from './providerRejection.js';
@@ -96,9 +96,11 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
+export { engineToolDirectoryOf, excludeToolsAgainstDirectory } from './engineToolDirectory.js';
+export type { EngineToolDirectory, EngineToolDirectorySource, ExcludeToolsAgainstDirectory } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
 export * from './cloudConfigWireCaps.js';
@@ -232,6 +234,8 @@ export type { ClassifierDenyContext, HitlHostSurface, HitlNotice, } from './hitl
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
+export { ruleToolNameVerdictOf } from './protocolSegment.js';
+export type { RuleToolNameReading } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';

package/dist/index.js

@@ -19,7 +19,7 @@ export { reducePanelFrame, createPanelReduceState, PANEL_DELTA_OPS } from './pan
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, } from './engineCapsCache.js';
+export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -39,7 +39,7 @@ export * from './hitl/parkExpiryJudgements.js';
 export * from './usageAnalytics.js';
 export * from './leaderConflict.js';
 export * from './runTerminal.js';
-export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
+export { CORE_SEMA_TASK_TERMINAL_STATUSES, CORE_TASK_NOTIFICATION_TERMINAL_STATUSES, CORE_TERMINAL_CAUSE_KINDS, SDK_FLEET_TASK_TERMINAL_STATUSES, SDK_PARKED_RUN_STATUSES, SDK_RUN_TERMINAL_STATUSES, ccTaskTerminalStatusOf, isCoreSemaTaskTerminal, isCoreTaskNotificationTerminal, isCoreTaskNotificationTerminalNotSuccess, isCoreTerminalCauseKind, isSdkFleetTaskTerminal, isSdkFleetTaskTerminalNotSuccess, isSdkRunParked, isSdkRunTerminal, isSdkRunTerminalNotSuccess, } from './terminalStatuses.js';
 export { PROVIDER_REJECTION_KINDS } from './providerRejection.js';
 export * from './runCancelContext.js';
 export * from './argvFlagValue.js';
@@ -84,8 +84,9 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
+export { engineToolDirectoryOf, excludeToolsAgainstDirectory } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
 export * from './cloudConfigWireCaps.js';
@@ -200,6 +201,7 @@ export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, CANCEL_DENY_B
 export * from './hitl/toolApprovalWire.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
+export { ruleToolNameVerdictOf } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';

package/dist/liveModelCatalog.d.ts

@@ -21,6 +21,7 @@ export interface LiveModelCatalog {
         readonly name?: string;
     };
     droppedEntries?: readonly LiveModelDroppedEntry[];
+    candidateRejected?: unknown;
 }
 export declare function setLiveModelCatalog(next: LiveModelCatalog | null): void;
 export declare function setLiveModelCatalogRefresher(fn: (() => Promise<LiveModelCatalog | null>) | null): void;
@@ -69,6 +70,18 @@ export type ModelDroppedEntriesReading = {
     readonly why: 'no_catalog' | 'malformed' | 'unreadable';
 };
 export declare function droppedModelEntriesOf(catalog?: LiveModelCatalog | null): ModelDroppedEntriesReading;
+export type ModelCandidateRejectedReading = {
+    readonly kind: 'not_reported';
+} | {
+    readonly kind: 'rejected';
+    readonly domains: readonly string[];
+    readonly at: string;
+    readonly source: string;
+} | {
+    readonly kind: 'unreadable';
+};
+export declare function modelCandidateRejectedOf(catalog?: LiveModelCatalog | null): ModelCandidateRejectedReading;
+export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading): string | undefined;
 export interface RoutePairingVerdict {
     verdict: 'ok' | 'broken' | 'unknown';
     posture?: string;

package/dist/liveModelCatalog.js

@@ -228,6 +228,59 @@ export function droppedModelEntriesOf(catalog = getLiveModelCatalog()) {
         return unknownDropped('unreadable');
     }
 }
+export function modelCandidateRejectedOf(catalog = getLiveModelCatalog()) {
+    const unreadable = Object.freeze({ kind: 'unreadable' });
+    try {
+        if (catalog === null || typeof catalog !== 'object' || Array.isArray(catalog))
+            return Object.freeze({ kind: 'not_reported' });
+        if (!Object.hasOwn(catalog, 'candidateRejected'))
+            return Object.freeze({ kind: 'not_reported' });
+        const d = Object.getOwnPropertyDescriptor(catalog, 'candidateRejected');
+        if (d === undefined || !('value' in d))
+            return unreadable;
+        const v = d.value;
+        if (v === undefined)
+            return Object.freeze({ kind: 'not_reported' });
+        if (v === null || typeof v !== 'object' || Array.isArray(v))
+            return unreadable;
+        const own = (k) => {
+            const od = Object.getOwnPropertyDescriptor(v, k);
+            return od !== undefined && 'value' in od ? od.value : undefined;
+        };
+        const rawDomains = own('domains');
+        const at = own('at');
+        const source = own('source');
+        if (!Array.isArray(rawDomains) || typeof at !== 'string' || at.length === 0 || typeof source !== 'string' || source.length === 0)
+            return unreadable;
+        const n = Object.getOwnPropertyDescriptor(rawDomains, 'length')?.value;
+        if (typeof n !== 'number' || !Number.isSafeInteger(n) || n <= 0)
+            return unreadable;
+        const domains = [];
+        for (let i = 0; i < n; i += 1) {
+            const id = Object.getOwnPropertyDescriptor(rawDomains, String(i));
+            if (id === undefined || !('value' in id) || typeof id.value !== 'string' || id.value.length === 0)
+                return unreadable;
+            domains.push(id.value);
+        }
+        return Object.freeze({ kind: 'rejected', domains: Object.freeze(domains), at, source });
+    }
+    catch {
+        return unreadable;
+    }
+}
+const CONFIG_DOMAIN_WORD = /^[a-z][a-z0-9_.-]{0,63}$/;
+export function modelCandidateRejectedContent(reading) {
+    try {
+        if (reading === null || typeof reading !== 'object' || reading.kind !== 'rejected')
+            return undefined;
+        const named = reading.domains.filter((w) => CONFIG_DOMAIN_WORD.test(w));
+        const which = named.length > 0 && named.length === reading.domains.length ? ` (${named.join(', ')})` : '';
+        return `The deployment refused its most recent configuration change${which} and is still running on the configuration before it — models or settings added by that change are not in effect`;
+    }
+    catch {
+        return undefined;
+    }
+}
 const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:unpinned', 'ok:keyless']);
 const ROUTE_PAIRING_BROKEN = new Set(['broken:credential_mismatch', 'broken:credential_missing']);
 export function routePairingVerdict(v) {
@@ -256,6 +309,7 @@ export function readLiveModelCatalog(body) {
         const defaultKey = envelopeKey(body, 'default');
         const defaultModelKey = envelopeKey(body, 'defaultModel');
         const droppedKey = envelopeKey(body, 'droppedEntries');
+        const candidateKey = envelopeKey(body, 'candidateRejected');
         const raw = modelsKey.present ? modelsKey.value : undefined;
         if (!Array.isArray(raw))
             return unreadableCatalog('models_not_array');
@@ -292,6 +346,8 @@ export function readLiveModelCatalog(body) {
             const dropped = droppedEntriesCopy(droppedKey.value);
             out.droppedEntries = dropped;
         }
+        if (candidateKey.present && candidateKey.value !== undefined)
+            out.candidateRejected = frozenJsonCopyOf(candidateKey.value) ?? null;
         return Object.freeze({ kind: 'read', catalog: Object.freeze(out), unreadableRows, ...(defaultModelMalformed ? { defaultModelMalformed: true } : {}) });
     }
     catch {

package/dist/mcpProbeCapability.d.ts

@@ -1,5 +1,7 @@
 export type McpProbeReading = {
     kind: 'unobserved';
+} | {
+    kind: 'unreadable';
 } | {
     kind: 'not_reported';
 } | {

package/dist/mcpProbeCapability.js

@@ -1,5 +1,5 @@
 import { engineWireTarget } from './engineWireTarget.js';
-import { createEngineCapReader } from './engineCapReader.js';
+import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
 import { ownDataField } from './ownKey.js';
 export function projectMcpProbeCapability(caps) {
     try {
@@ -19,7 +19,6 @@ export function projectMcpProbeCapability(caps) {
 const reader = createEngineCapReader({
     name: 'mcpProbe',
     project: projectMcpProbeCapability,
-    makeUnobserved: () => ({ kind: 'unobserved' }),
 });
 export function observedMcpProbe(baseUrl = engineWireTarget()?.baseUrl) {
     return reader.observed(baseUrl);
@@ -33,6 +32,8 @@ export function mcpProbeAvailable(reading) {
 }
 export function mcpProbeDoctorDetail(reading) {
     switch (reading.kind) {
+        case 'unreadable':
+            return unreadableReadingDetail('per-server MCP status face');
         case 'unobserved':
             return ('per-server MCP status face not observed — the engine reports whether it has one on /v1/capabilities; ' +
                 'this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)');