@sema-agent/client-core 0.97.0 → 0.98.0

package/dist/index.js

@@ -1,6 +1,6 @@
 export * from './seam.js';
 export * from './workflow.js';
-export { _resetEngineTaskNotificationForTest, _resetNotificationQueuePortForTest, _setWatcherTimingForTest, _tickWatchOnceForTest, classifyHookFailureFrame, classifyHookNoticeFrame, deriveNotificationResidualLines, dropQueuedNotificationsForRun, enqueueBgChildNotification, enqueueEngineWorkflowNotification, enqueuePlanReviewOutcome, HOOK_NOTICE_WARN_PREFIX, hookNoticeLastCheckText, installBgTaskStatusProbe, installNotificationQueuePort, installWorkflowStatusProbe, isEngineWorkflowNotified, isHookNoticeFrame, isOwnWorkflowRun, isTaskNotificationObjective, isWorkflowCompletionCardEnqueued, listOwnWorkflowRuns, markEngineWorkflowNotified, normalizeTaskNotification, noteOwnWorkflowRun, noteWorkflowCompletionCardEnqueued, notificationDropCounters, notificationQueuePortMisses, outstandingAbandonedCount, outstandingBgTaskPrompt, outstandingDeliverableWorkflowCount, outstandingWorkflowCount, parseTranscriptNotificationSeeds, registerOutstandingBgTask, registerOutstandingWorkflowRun, renderTaskNotificationXml, splitApiErrorSupplement, subscribeOutstandingWorkflows, taskNotificationDedupKey, taskNotificationDedupKeyFromWire, taskNotificationDeliverySupplement, } from './notifications.js';
+export { _resetEngineTaskNotificationForTest, _resetNotificationQueuePortForTest, _setWatcherTimingForTest, _tickWatchOnceForTest, classifyHookFailureFrame, classifyHookNoticeFrame, deriveNotificationResidualLines, dropQueuedNotificationsForRun, enqueueBgChildNotification, enqueueEngineWorkflowNotification, enqueuePlanReviewOutcome, HOOK_NOTICE_WARN_PREFIX, hookNoticeLastCheckText, installBgTaskStatusProbe, installNotificationQueuePort, installWorkflowStatusProbe, isEngineWorkflowNotified, isHookNoticeFrame, isOwnWorkflowRun, isTaskNotificationObjective, isWorkflowCompletionCardEnqueued, listOwnWorkflowRuns, markEngineWorkflowNotified, normalizeTaskNotification, noteOwnWorkflowRun, noteWorkflowCompletionCardEnqueued, notificationDropCounters, notificationQueuePortMisses, outstandingAbandonedCount, outstandingBgTaskPrompt, outstandingDeliverableWorkflowCount, outstandingWorkflowCount, parseTranscriptNotificationSeeds, readTaskNotificationXml, registerOutstandingBgTask, registerOutstandingWorkflowRun, renderTaskNotificationXml, splitApiErrorSupplement, subscribeOutstandingWorkflows, taskNotificationDedupKey, taskNotificationDedupKeyFromWire, taskNotificationDeliverySupplement, } from './notifications.js';
 export * from './peerFrames.js';
 export * from './steering.js';
 export * from './retryStatus.js';
@@ -11,6 +11,10 @@ export * from './adapt/textSegmentAuthority.js';
 export * from './engineHttpTools.js';
 export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
+export { engineRefOf, sameEngineRef, TRANSCRIPT_ROW_SIDECAR_KEYS } from './engineRowRef.js';
+export { isReplayMarked } from './replayBody.js';
+export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE } from './eventLeg.js';
+export { frameBindingOf, inheritFrameBinding } from './frameBinding.js';
 export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
@@ -27,7 +31,7 @@ export * from './executionLaneCapability.js';
 export * from './approvalsStreamLiveCapability.js';
 export * from './peerLaneCapability.js';
 export * from './permissionRulesWriteCapability.js';
-export { __resetPermissionsAllowGrantReadingsForTests, noteEngineCapsForPermissionsAllowGrant, observedPermissionsAllowGrant, permissionsAllowGrantAvailable, permissionsAllowGrantDoctorDetail, projectPermissionsAllowGrantCapability, } from './permissionsAllowGrantCapability.js';
+export { observedPermissionsAllowGrant, permissionsAllowGrantAvailable, permissionsAllowGrantDoctorDetail, projectPermissionsAllowGrantCapability, } from './permissionsAllowGrantCapability.js';
 export * from './sessionPolicyCapability.js';
 export * from './memoryComplianceCapability.js';
 export * from './memoryOriginCapability.js';
@@ -56,14 +60,17 @@ export * from './skillToolListsCapability.js';
 export * from './steerPriorityCapability.js';
 export * from './permissionModesCapability.js';
 export * from './approvalDecidedByCapability.js';
-export * from './sessionReadRedactionCapability.js';
 export * from './outputStyleSeatCapability.js';
 export * from './mcpProbeWire.js';
+export * from './connectorStatus.js';
 export * from './effectiveFacts.js';
 export * from './gateOutcome.js';
 export * from './postureKnob.js';
 export * from './engineIdentity.js';
 export { transportFailureScene } from './engineWireFor.js';
+export { engineUrlTransportVerdict, normalizeEngineBaseUrl } from './engineUrl.js';
+export { submitStreamWithBoundedReopen } from './submitReopen.js';
+export { createStreamDrainingLegs } from './streamDrainingLegs.js';
 export * from './engineConfigDrift.js';
 export * from './gateVocabulary.js';
 export * from './permissionRuleIssue.js';
@@ -75,17 +82,20 @@ export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
 export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
+export { isDiagnosticValueWord } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
 export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, } from './controlRouter.js';
+export { preemptReceiptLine } from './preemptWire.js';
 export { readSteerReceipt } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
 export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RULES_LEGACY_TOOL_NAME, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
+export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
 export * from './clientContextWireCaps.js';
 export * from './cloudConfigWireCaps.js';
@@ -131,6 +141,7 @@ export * from './request/taskRequest.js';
 export { disableSkillsDeclaration, disableSkillsDeclarationSettled } from './disableSkillsWire.js';
 export { approvalReachDeclaration, approvalReachDeclarationSettled } from './approvalReachWire.js';
 export { PERMISSIONS_KEPT_REASONS, WIRE_RULE_TRUST_ORDER, permissionsAllowKeptNotice, permissionsDeclaration, permissionsDeclarationReport } from './permissionsDeclaration.js';
+export { ASSEMBLY_REFUSAL_CAUSES, assemblyRefusalOf } from './wireFailureShape.js';
 export * from './clientSlice.js';
 export * from './host.js';
 export { abortableSleep } from './abortableSleep.js';
@@ -163,6 +174,12 @@ export * from './engineSessionParam.js';
 export { engineWireTarget, engineWireTargetFor, installEngineWireTarget, installEngineWireTargetFor, } from './engineWireTarget.js';
 export * from './principalWire.js';
 export * from './wireErrorTriage.js';
+export { WIRE_FAILURE_UNRENDERABLE_TEXT, wireFailureCoreOf, wireFailureTextsOf } from './wireFailureShape.js';
+export { guardedRead, readOwnDataFiniteNumber, readOwnDataNonEmptyString } from './ownKey.js';
+export { contextUsageReadingOf } from './ownKey.js';
+export { TURN_FAILURE_CATEGORIES, turnFailurePresentation } from './turnFailurePresentation.js';
+export { readSeatTurnFailure, seatTurnFailureOf } from './turnFailurePresentation.js';
+export { REATTACH_BUDGET_FRESH, REATTACH_MAX_TRIES, runReattachPolicy, } from './runReattachPolicy.js';
 export * from './corruptSession.js';
 export * from './corruptSessionCopy.js';
 export { classifyToolHistoryMismatch, readToolHistoryMismatchKey, resolveToolHistoryRewindTarget } from './toolHistoryMismatch.js';
@@ -171,10 +188,11 @@ export { deviceFlowPollingPlan } from './deviceFlowPolling.js';
 export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredPrompts } from './promptDelivery.js';
 export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
 export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
-export { noteEngineCapsForAttachmentSeat, observedAttachmentSeat, __resetAttachmentSeatReadingsForTests, } from './attachmentSeatCapability.js';
+export { projectEngineSessionMessages } from './engineSessionMessages.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
 export * from './inheritEnvWire.js';
+export * from './inheritEnvCapability.js';
 export { SUPPORT_FLOOR, supportFloorOf, engineVersionTier, engineSupportFloorEffective, coreVersionTier } from './supportFloor.js';
 export * from './decideReceipt.js';
 export * from './sessionMap.js';
@@ -186,18 +204,20 @@ export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS
 export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export { hookMatcherVerdict } from './hookMatcherVerdict.js';
 export { ASK_EVIDENCE_ABSENCE_VALUES, SYSTEM_INJECTION_PRIORITIES } from './engineClosedSets.js';
+export { BUILTIN_SUBAGENT_TYPES } from './engineClosedSets.js';
 export { READ_DENY_BUILTIN_TIERS, READ_DENY_DEFAULT_TIERS, parseReadDenyBuiltinTiers } from './readDenyTiers.js';
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
 export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
 export * from './hitl/suspendedReopen.js';
-export * from './hitl/approvalOutcomeNote.js';
-export * from './hitl/approvalResolution.js';
+export { APPROVAL_RESOLUTION_LANES, APPROVAL_NOT_SENT_CAUSES, APPROVAL_UNSETTLED_CAUSES, APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, isApprovalDecided, approvalNotSentCause, approvalUnsettledCause, approvalResolutionDetail, } from './hitl/approvalResolution.js';
 export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
 export { toolEndOutputText } from './toolResultContent.js';
-export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
+export { _resetHitlHostSurfaceForTest, APPROVAL_PARKING_WARN_TEXT, approvalParkingNoticeText, CANCEL_DENY_BUDGET_MS, CANCEL_DENY_WARN_TEXT, EDIT_NOT_FORWARDED_WARN_TEXT, EDIT_REFUSED_ON_BLIND_ASK_WARN_TEXT, hitlHostSurfaceFor, hitlHostSurfaceMisses, hitlHostSurfaceMissesFor, installHitlHostSurface, installHitlHostSurfaceFor, observeCancelByDeny, REMEMBER_NOT_APPLIED_WARN_TEXT, REPLAYED_APPROVAL_LIST_UNREADABLE_WARN_TEXT, RULE_NOT_SENT_REJECTED_WARN_TEXT, RULE_NOT_SENT_WARN_TEXT, surfaceEditRefusedOnBlindAsk, surfaceForCurrentSession, surfaceRememberNotApplied, } from './hitl/hitlHostSurface.js';
 export * from './hitl/toolApprovalWire.js';
+export * from './hitl/approvalCardReading.js';
+export * from './hitl/approvalCardReasons.js';
 export * from './hitl/editedRuleTextPrecheck.js';
 export * from './coreValuePorts.js';
 export { ruleToolNameVerdictOf } from './protocolSegment.js';
@@ -218,9 +238,10 @@ export * from './hitl/approvalsFeed.js';
 export * from './hitl/livePendingAsk.js';
 export { replayedApprovalClosesCardFrame, replayedApprovalDisposition, replayedApprovalSentence } from './hitl/replayedApproval.js';
 export { hasLedgerPositionKey } from './hitl/gateLedger.js';
+export { durableSeqOf } from './hitl/gateLedger.js';
 export { MODE_ARBITRATION, automaticAnswerVerdict, mandatedApprovalDetailOf, permissionRequestHookScope, } from './hitl/automaticAnswerVerdict.js';
-export { standingRowsOf, } from './hitl/standingRows.js';
-export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decisionRefusalAskReading, } from './hitl/decisionRefusal.js';
+export { standingRowsOf, rememberOfferable, localAllowRuleEnforceable, } from './hitl/standingRows.js';
+export { classifyDecisionRefusal, liveAskPendingReading, decisionRefusalClosesOut, undeliverableDecisionContent, decisionRefusalAskReading, readDecisionRefusalReading, } from './hitl/decisionRefusal.js';
 export { noAllowCauseOf } from './hitl/noAllowCause.js';
 export { policyDenyReason } from './hitl/frameRouter.js';
 export { readApprovalAllowRuleShadow, approvalAllowRuleShadowed, allowRuleShadowSentence, } from './hitl/allowRuleShadow.js';
@@ -228,15 +249,18 @@ export { projectCrashConverged } from './hitl/crashConverged.js';
 export * from './hitl/crashConvergedNotice.js';
 export { approvalCompleteParked } from './hitl/approvalCompleteParked.js';
 export { approvalCompleteCauseOf } from './hitl/approvalEndingCause.js';
+export * from './hitl/askSettlementLine.js';
 export * from './interactiveHalt.js';
 export { fireInteractiveInterrupt } from './interactiveInterrupt.js';
 export { listDevices, readSessionBinding, rebindSession, reconcileRebindOutcome, rebindProvesRequestNotApplied } from './deviceRebind.js';
+export { issueEnrollToken, enrollDevice, revokeDevice, deviceIdentityMismatchOf, deviceIdentityMismatchLine, deviceRegistrationOutcomeLine } from './deviceRebind.js';
 export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js';
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
+export { readAssistantInbox } from './assistantInbox.js';
 export { READ_CREDENTIAL_NOT_ACCEPTED_NOTICE, isReadCredentialRefusal } from './readCredentialRefusal.js';
 export { readEngineAgentRegistry, isEngineAgentRegistryListingSuperseded } from './agentSession/engineAgentRegistryRead.js';
 export { stopEngineSessionBackground, engineSessionBackgroundReceiptReadingOf, ENGINE_SESSION_BACKGROUND_RECEIPT_STATES, } from './agentSession/engineSessionBackgroundStop.js';
@@ -246,11 +270,15 @@ export * from './model/catalogLoader.js';
 export * from './model/providerAuth.js';
 export * from './model/providerCatalog.js';
 export * from './model/tierVocabulary.js';
+export { resolveSubagentModelWord, subagentModelWordProblemLine, } from './model/subagentModelWord.js';
 export * from './model/modelSupplyRules.js';
 export * from './websearch/searchProviderPresets.js';
 export * from './env/localeGeo.js';
 export * from './env/localeTag.js';
 export * from './env/uiLanguage.js';
+export { EN_MESSAGES } from './i18n/messages.en.js';
+export { ZH_MESSAGES } from './i18n/messages.zh.js';
+export { createMissLedger, createTranslator, DATA_FACE_LANGUAGE, msg, renderMessage, translate, uiMissLedger, } from './i18n/translate.js';
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';

package/dist/inheritEnvCapability.d.ts

@@ -0,0 +1,31 @@
+import type { RequestLane } from './request/taskRequest.js';
+export type InheritEnvValueShape = 'false' | 'string' | 'number' | 'null' | 'array' | 'object' | 'other';
+export type InheritEnvOwnCredentialsReading = {
+    readonly kind: 'confirmed';
+} | {
+    readonly kind: 'absent';
+} | {
+    readonly kind: 'declined';
+    readonly valueShape: InheritEnvValueShape;
+} | {
+    readonly kind: 'unreadable';
+} | {
+    readonly kind: 'unobserved';
+};
+export declare function observedInheritEnvOwnCredentialsWithheld(baseUrl?: string | undefined): InheritEnvOwnCredentialsReading;
+export type InheritEnvOmitReason = 'lane' | 'project_context' | 'capability_absent' | 'capability_declined' | 'capability_unreadable' | 'identity_unverified';
+export type InheritEnvIntent = {
+    readonly send: 'all';
+} | {
+    readonly send: 'omit';
+    readonly reason: InheritEnvOmitReason;
+};
+export interface InheritEnvIntentInput {
+    readonly lane: RequestLane | undefined;
+    readonly projectContextConfirmed: boolean;
+    readonly ownCredentialsWithheld: InheritEnvOwnCredentialsReading;
+    readonly serviceIdentityVerified: boolean;
+}
+export declare function inheritEnvIntentOf(input: InheritEnvIntentInput): InheritEnvIntent;
+export declare function inheritEnvNotConfirmedNotice(lang?: string): string;
+export declare function inheritEnvNoticeOf(intent: InheritEnvIntent, lang?: string): string | undefined;

package/dist/inheritEnvCapability.js

@@ -0,0 +1,104 @@
+import { engineCapValue } from './engineCapsCache.js';
+import { engineWireTarget } from './engineWireTarget.js';
+const OWN_CREDENTIALS_WITHHELD_KEY = 'inherit_env.own_credentials_withheld';
+const CONFIRMED = Object.freeze({ kind: 'confirmed' });
+const ABSENT = Object.freeze({ kind: 'absent' });
+const UNREADABLE = Object.freeze({ kind: 'unreadable' });
+const UNOBSERVED = Object.freeze({ kind: 'unobserved' });
+function shapeOf(v) {
+    if (v === false)
+        return 'false';
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'array';
+    switch (typeof v) {
+        case 'string':
+            return 'string';
+        case 'number':
+            return 'number';
+        case 'object':
+            return 'object';
+        default:
+            return 'other';
+    }
+}
+export function observedInheritEnvOwnCredentialsWithheld(baseUrl = engineWireTarget()?.baseUrl) {
+    try {
+        const slot = engineCapValue(typeof baseUrl === 'string' ? baseUrl : undefined, OWN_CREDENTIALS_WITHHELD_KEY);
+        switch (slot.kind) {
+            case 'unobserved':
+                return UNOBSERVED;
+            case 'not_reported':
+                return ABSENT;
+            case 'unreadable':
+                return UNREADABLE;
+            case 'null':
+                return Object.freeze({ kind: 'declined', valueShape: 'null' });
+            case 'value':
+                return slot.value === true ? CONFIRMED : Object.freeze({ kind: 'declined', valueShape: shapeOf(slot.value) });
+        }
+    }
+    catch {
+        return UNOBSERVED;
+    }
+}
+const ALL = Object.freeze({ send: 'all' });
+const omit = (reason) => Object.freeze({ send: 'omit', reason });
+function fieldOf(input, key) {
+    try {
+        return input[key];
+    }
+    catch {
+        return undefined;
+    }
+}
+function capabilityReasonOf(reading) {
+    try {
+        if (typeof reading !== 'object' || reading === null)
+            return 'capability_unreadable';
+        const kind = reading.kind;
+        if (kind === 'confirmed')
+            return undefined;
+        if (kind === 'absent')
+            return 'capability_absent';
+        if (kind === 'declined')
+            return 'capability_declined';
+        return 'capability_unreadable';
+    }
+    catch {
+        return 'capability_unreadable';
+    }
+}
+export function inheritEnvIntentOf(input) {
+    if (typeof input !== 'object' || input === null || Array.isArray(input))
+        return omit('lane');
+    if (fieldOf(input, 'lane') !== 'interactive')
+        return omit('lane');
+    if (fieldOf(input, 'projectContextConfirmed') !== true)
+        return omit('project_context');
+    const cap = capabilityReasonOf(fieldOf(input, 'ownCredentialsWithheld'));
+    if (cap !== undefined)
+        return omit(cap);
+    if (fieldOf(input, 'serviceIdentityVerified') !== true)
+        return omit('identity_unverified');
+    return ALL;
+}
+const NOT_CONFIRMED_SENTENCE_EN = 'The engine has not confirmed that it withholds its own credentials from tool shells, so the tool shell gets a filtered environment (credential-looking variables such as GH_TOKEN are omitted) until the engine is upgraded.';
+export function inheritEnvNotConfirmedNotice(lang) {
+    void lang;
+    return NOT_CONFIRMED_SENTENCE_EN;
+}
+export function inheritEnvNoticeOf(intent, lang) {
+    try {
+        if (typeof intent !== 'object' || intent === null || intent.send !== 'omit')
+            return undefined;
+        const reason = intent.reason;
+        return reason === 'capability_absent' || reason === 'capability_declined' || reason === 'capability_unreadable'
+            ? inheritEnvNotConfirmedNotice(lang)
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/liveModelCatalog.d.ts

@@ -15,7 +15,6 @@ export interface LiveModelInfo {
 }
 export interface LiveModelCatalog {
     models: LiveModelInfo[];
-    default: string;
     defaultModel?: {
         readonly id: string;
         readonly name?: string;
@@ -94,7 +93,7 @@ export type LiveModelCatalogReading = {
     readonly defaultModelMalformed?: true;
 } | {
     readonly kind: 'unreadable';
-    readonly why: 'not_an_object' | 'models_not_array' | 'default_missing' | 'unreadable';
+    readonly why: 'not_an_object' | 'models_not_array' | 'unreadable';
 };
 export declare function readLiveModelCatalog(body: unknown): LiveModelCatalogReading;
 export type LiveDefaultModelReading = {

package/dist/liveModelCatalog.js

@@ -281,7 +281,7 @@ export function modelCandidateRejectedContent(reading) {
         return undefined;
     }
 }
-const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:unpinned', 'ok:keyless']);
+const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:keyless']);
 const ROUTE_PAIRING_BROKEN = new Set(['broken:credential_mismatch', 'broken:credential_missing']);
 export function routePairingVerdict(v) {
     if (typeof v !== 'string' || v.length === 0)
@@ -306,16 +306,12 @@ export function readLiveModelCatalog(body) {
         if (body === null || typeof body !== 'object' || Array.isArray(body))
             return unreadableCatalog('not_an_object');
         const modelsKey = envelopeKey(body, 'models');
-        const defaultKey = envelopeKey(body, 'default');
         const defaultModelKey = envelopeKey(body, 'defaultModel');
         const droppedKey = envelopeKey(body, 'droppedEntries');
         const candidateKey = envelopeKey(body, 'candidateRejected');
         const raw = modelsKey.present ? modelsKey.value : undefined;
         if (!Array.isArray(raw))
             return unreadableCatalog('models_not_array');
-        const def = defaultKey.present ? defaultKey.value : undefined;
-        if (typeof def !== 'string' || def.length === 0)
-            return unreadableCatalog('default_missing');
         const n = envelopeKey(raw, 'length');
         const len = n.present ? n.value : undefined;
         if (typeof len !== 'number' || !Number.isSafeInteger(len) || len < 0)
@@ -333,7 +329,7 @@ export function readLiveModelCatalog(body) {
             names.add(row.name);
             models.push(row);
         }
-        const out = { models: Object.freeze(models), default: def };
+        const out = { models: Object.freeze(models) };
         let defaultModelMalformed = false;
         if (defaultModelKey.present && defaultModelKey.value !== undefined) {
             const dm = liveDefaultModelCopy(defaultModelKey.value);

package/dist/liveQuestionStore.d.ts

@@ -1,23 +1,5 @@
-import type { AskAnswer } from './hitl/hitlBridge.js';
-export interface AskQuestionOption {
-    label: string;
-    description?: string;
-}
-export interface AskQuestion {
-    question: string;
-    header: string;
-    options: AskQuestionOption[];
-    multiSelect: boolean;
-}
-export interface QuestionFrame {
-    type: 'question' | 'question_complete';
-    questionId: string;
-    questions?: AskQuestion[];
-    outcome?: string;
-}
-export interface QuestionAnswer {
-    answers: AskAnswer[];
-}
+import type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame } from '@sema-agent/sdk';
+export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame };
 type QuestionFrameHandler = (frame: QuestionFrame) => void;
 type RespondFn = (id: string, answer: QuestionAnswer, opts?: {
     signal?: AbortSignal;
@@ -36,4 +18,3 @@ export declare function respondToQuestion(id: string, answer: QuestionAnswer, op
     signal?: AbortSignal;
 }): Promise<unknown>;
 export declare function _resetLiveQuestionStore(): void;
-export {};

package/dist/mcpLiveness.d.ts

@@ -1,5 +1,6 @@
+import type { McpLivenessState } from '@sema-agent/sdk';
 export declare const MCP_LIVENESS_STATES: readonly ["reachable", "unreachable", "unknown"];
-export type McpLivenessState = (typeof MCP_LIVENESS_STATES)[number];
+export type { McpLivenessState };
 export declare const isMcpLivenessState: (v: unknown) => v is McpLivenessState;
 export interface McpLivenessView {
     state: McpLivenessState;

package/dist/mcpProbeWire.d.ts

@@ -35,13 +35,18 @@ export type McpProbeOutcome = {
     status: 'face';
     face: McpProbeFaceView;
 } | McpProbeRefused | McpProbeUnknown;
+export type McpDeploymentOutcome = {
+    status: 'face';
+    face: McpProbeFaceView;
+    declaredBy: 'deployment';
+} | McpProbeRefused | McpProbeUnknown;
 export declare function classifyMcpProbeFailure(e: unknown): McpProbeFailure;
 export interface McpCapabilitiesCall {
     capability: McpProbeReading;
 }
 export declare function readMcpCapabilities(facade: McpProbeFacade, call: McpCapabilitiesCall, opts?: {
     signal?: AbortSignal;
-}): Promise<McpProbeOutcome>;
+}): Promise<McpDeploymentOutcome>;
 export interface McpProbeServersCall {
     specs: McpServerSpec[];
     capability: McpProbeReading;

package/dist/mcpProbeWire.js

@@ -175,7 +175,7 @@ export async function readMcpCapabilities(facade, call, opts) {
         return unknownBy(narrowed.why, `the per-server MCP status call answered 2xx with a body this client cannot stand behind (${narrowed.what}) — refusing to present it as a reading, ` +
             'because a normal-looking empty list is exactly the false answer this face exists to remove');
     }
-    return { status: 'face', face: narrowed.face };
+    return { status: 'face', face: narrowed.face, declaredBy: 'deployment' };
 }
 export async function probeMcpServers(facade, call, opts) {
     if (typeof facade?.probeMcp !== 'function') {

package/dist/mcpWireCaps.d.ts

@@ -1,5 +1,5 @@
-import type { TaskRequest } from '@sema-agent/sdk';
-export type McpServerSpec = NonNullable<TaskRequest['mcpServers']>[number];
+import type { McpServerSpec } from '@sema-agent/sdk';
+export type { McpServerSpec };
 export declare const MCP_CAPS: {
     readonly items: 32;
 };
@@ -10,9 +10,20 @@ export interface McpConfigLike {
     env?: Record<string, string>;
     url?: string;
     headers?: Record<string, string>;
+    principalHeader?: string;
+    assertionHeader?: string;
     allowTools?: string[];
     toolFaces?: unknown;
     toolAxes?: unknown;
 }
+export type McpHttpIdentityHeaders = {
+    readonly kind: 'ok';
+    readonly principalHeader?: string;
+    readonly assertionHeader?: string;
+} | {
+    readonly kind: 'both_set';
+};
+export declare function readMcpHttpIdentityHeaders(transport: object): McpHttpIdentityHeaders;
 export declare function mcpConfigToSpec(name: string, c: McpConfigLike): McpServerSpec | null;
 export declare function mcpConfigsToSpecs(servers: Record<string, McpConfigLike> | undefined): McpServerSpec[];
+export declare function mcpAssertionHeaderNotSentNotice(specs: readonly McpServerSpec[]): string | undefined;

package/dist/mcpWireCaps.js

@@ -1,3 +1,6 @@
+import { guardedRead } from './ownKey.js';
+const _mcpServerSpecPin = true;
+void _mcpServerSpecPin;
 export const MCP_CAPS = { items: 32 };
 function transparentKeys(c) {
     return {
@@ -5,6 +8,21 @@ function transparentKeys(c) {
         ...(c.toolAxes !== undefined ? { toolAxes: c.toolAxes } : {}),
     };
 }
+function presentHeaderName(v) {
+    return typeof v === 'string' && v.length > 0 ? v : undefined;
+}
+export function readMcpHttpIdentityHeaders(transport) {
+    const t = transport;
+    const principalHeader = presentHeaderName(t.principalHeader);
+    const assertionHeader = presentHeaderName(t.assertionHeader);
+    if (principalHeader !== undefined && assertionHeader !== undefined)
+        return { kind: 'both_set' };
+    return {
+        kind: 'ok',
+        ...(principalHeader !== undefined ? { principalHeader } : {}),
+        ...(assertionHeader !== undefined ? { assertionHeader } : {}),
+    };
+}
 export function mcpConfigToSpec(name, c) {
     const n = (name ?? '').trim();
     if (!n)
@@ -28,12 +46,17 @@ export function mcpConfigToSpec(name, c) {
     if (kind === 'http') {
         if (!c.url)
             return null;
+        const id = readMcpHttpIdentityHeaders(c);
+        if (id.kind === 'both_set')
+            return null;
         return {
             name: n,
             transport: {
                 kind: 'http',
                 url: c.url,
                 ...(c.headers ? { headers: c.headers } : {}),
+                ...(id.principalHeader !== undefined ? { principalHeader: id.principalHeader } : {}),
+                ...(id.assertionHeader !== undefined ? { assertionHeader: id.assertionHeader } : {}),
             },
             ...(c.allowTools && c.allowTools.length > 0 ? { allowTools: c.allowTools } : {}),
             ...transparentKeys(c),
@@ -52,3 +75,28 @@ export function mcpConfigsToSpecs(servers) {
     }
     return out;
 }
+function assertionDeclaringServerName(spec) {
+    const t = spec?.transport;
+    if (t?.kind !== 'http')
+        return undefined;
+    const declared = t.assertionHeader;
+    return typeof declared === 'string' && declared.length > 0 && typeof spec?.name === 'string' ? spec.name : undefined;
+}
+const ASSERTION_NOTICE_NAMES_SHOWN = 5;
+export function mcpAssertionHeaderNotSentNotice(specs) {
+    const count = guardedRead(() => (Array.isArray(specs) ? specs.length : 0)) ?? 0;
+    const names = [];
+    for (let i = 0; i < count; i++) {
+        const name = guardedRead(() => assertionDeclaringServerName(specs[i]));
+        if (name !== undefined)
+            names.push(name);
+    }
+    if (names.length === 0)
+        return undefined;
+    const distinct = [...new Set(names)];
+    const parts = distinct.slice(0, ASSERTION_NOTICE_NAMES_SHOWN).map((x) => `"${x}"`);
+    if (distinct.length > ASSERTION_NOTICE_NAMES_SHOWN)
+        parts.push(`+${distinct.length - ASSERTION_NOTICE_NAMES_SHOWN} more`);
+    return (`MCP servers that declare an assertion header (assertionHeader): ${parts.join(', ')} — server versions up to 7.129.1 accept this setting but do not send the header, ` +
+        'and this client cannot tell whether the engine it uses sends it; a connector that requires the header will refuse requests from these servers');
+}

package/dist/memoryEntriesWire.d.ts

@@ -1,10 +1,11 @@
-export type MemoryEntryOriginMark = 'marked' | 'unmarked' | 'undecidable';
+import type { MemoryErasedBinding } from '@sema-agent/sdk';
+export type MemoryEntryOriginMarkReading = 'marked' | 'unmarked' | 'undecidable';
 export interface MemoryExportEntryRow {
     id: string;
     slug: string;
     scope: string;
     rev: string;
-    originMark: MemoryEntryOriginMark;
+    originMark: MemoryEntryOriginMarkReading;
 }
 export type MemoryExportUnreadableCause = 'body_unreadable' | 'envelope_absent' | 'envelope_unreadable' | 'too_many_rows' | 'rows_unreadable';
 export type MemoryExportReading = {
@@ -36,13 +37,7 @@ export type ScopeExternalOriginVerdict = {
 export declare function scopeExternalOriginVerdict(reading: MemoryExportReading, asked: {
     originAware: boolean;
 }): ScopeExternalOriginVerdict;
-export type MemoryErasedBinding = {
-    state: 'bound';
-    scope: string;
-    slug: string;
-} | {
-    state: 'unbound';
-};
+export type { MemoryErasedBinding };
 export interface MemoryErasedRow {
     id: string;
     rev: string;

package/dist/model/modelSupplyRules.d.ts

@@ -25,7 +25,6 @@ export interface TierGroupsView {
 export interface DeleteWarningsInput {
     id: string;
     doc: {
-        atModelAllowlist?: unknown;
         atMention?: unknown;
         tierGroups?: unknown;
     } | null;
@@ -35,7 +34,6 @@ export interface DeleteWarningsInput {
 export interface DeleteBlockersInput {
     id: string;
     doc: {
-        default?: unknown;
         roles?: unknown;
     } | null;
     rosters: {

package/dist/model/modelSupplyRules.js

@@ -22,9 +22,7 @@ export function computeDeleteWarnings(input) {
         if (before.mode === 'only' && after.mode === 'none') {
             out.push({
                 kind: 'allowlist-empties',
-                consequence: am.from === 'atModelAllowlist'
-                    ? 'it is the last usable model on your @-mention allowlist — deleting it empties the list, which means EVERY enabled model becomes @-mentionable'
-                    : 'it is the last usable model on your @-mention allowlist — deleting it leaves no model that can be @-mentioned',
+                consequence: 'it is the last usable model on your @-mention allowlist — deleting it leaves no model that can be @-mentioned',
             });
         }
     }
@@ -58,24 +56,17 @@ export function computeDeleteBlockers(input) {
             fix: 'fix or re-save models.json so it can be read, then delete this model',
         });
     }
-    if (policy.defaultUnreadable) {
-        out.push({
-            kind: 'unreadable',
-            where: 'models.json `default` (the default model could not be read)',
-            fix: 'fix or re-save models.json so its default model can be read, then delete this model',
-        });
-    }
     const dm = policy.defaultModel;
     if (dm !== undefined && dm.name === id) {
         out.push({
             kind: 'default',
-            where: dm.from === 'default' ? 'models.json `default`' : 'models.json roles.default',
+            where: 'models.json roles.default',
             fix: 'point another model at the default first (Model Hub: select it and press u), then delete this one',
         });
     }
     if (doc && isPlainObject(doc.roles)) {
         for (const [role, target] of Object.entries(doc.roles)) {
-            if (role === 'default' && dm?.from === 'roles.default')
+            if (role === 'default' && dm !== undefined)
                 continue;
             if (!isPlainObject(target) || typeof target.model !== 'string')
                 continue;