@sema-agent/client-core 0.98.0 → 0.100.0

package/dist/hitl/toolApprovalWire.js

@@ -11,15 +11,17 @@ import { readAllowRuleShadowFromWire, retiredAllowRuleShadowKeyPresent, RETIRED_
 import { createSessionSlot, DEFAULT_SESSION_KEY } from '../sessionSlot.js';
 import { readEngineActiveBgTasks } from '../fleet/fleetLedger.js';
 import { CORE_SKILL_TOOL_NAME } from '../generated/toolNameTables.js';
+import { CORE_ALLOW_ENTRY_INERT_REASONS } from '../generated/engineFactTables.js';
+import { msg, renderMessage } from '../i18n/translate.js';
 import { INTERRUPT_DENY_REASON, observeCancelByDeny, surfaceApprovalParking, surfaceRememberNotApplied, surfaceEditNotForwarded, surfaceEditRefusedOnBlindAsk, surfaceRuleArmNotSent, surfaceRuleArmRejected } from './hitlHostSurface.js';
 import { approvalCallKey, liveFrameCallKey } from './gateIdentity.js';
 import { displayUntrusted } from '../displayUntrusted.js';
 import { frameBindingOf } from '../frameBinding.js';
-import { approvalDecisionHolds, approvalHoldFor, awaitApprovalHolder, claimApprovalCardFor, holdLiveCard, joinLiveCard, liveCardHoldOf, clearSettledApprovals, noteHolderSettledApproval, settledApprovalOf, settledForDurableLane, settledLiveCardOutcome } from './approvalHolds.js';
+import { carriesAttributionKey, deliverWithAttributionLadder } from './attributionLadder.js';
+import { approvalDecisionHolds, approvalHoldFor, awaitApprovalHolder, claimApprovalCardFor, enterLiveRespondPhase, holdLiveCard, joinLiveCard, liveCardHoldOf, clearSettledApprovals, noteHolderSettledApproval, settledApprovalOf, settledForDurableLane, settledLiveCardOutcome } from './approvalHolds.js';
 import { joinedResolution, resolutionOfDecisionFailure } from './approvalResolution.js';
 import { parkRowDeadlineState } from './parkExpiryJudgements.js';
 import { isApprovalMandateWord } from '../gateVocabulary.js';
-import { denyAttributionRefusalFromError } from '../wireRefusalCopy.js';
 import { approvalDecidedByAdmitted } from '../approvalDecidedByCapability.js';
 import { decideFailureNote } from '../decideFailureNote.js';
 import { wireFailureTextsOf } from '../wireFailureShape.js';
@@ -460,49 +462,30 @@ async function presentFsApprovalAndDecide(deps, taskId, argsByCall, signal, foun
                 try {
                     const denyPayload = { decision: 'deny', reason: answerPayloadFor({ kind: 'deny', ...(denyReasonSnapshot !== undefined ? { reason: denyReasonSnapshot } : {}) }, 'decide').reason };
                     const denyBody = { ...denyPayload, ...attributionKeys };
-                    let attributionDropped = false;
-                    let attributionRenamed = false;
+                    const ladder = { lastCarried: carriesAttributionKey(attributionKeys), dropped: false, renamed: false };
                     let raw;
-                    lastSendCarriedAttribution = carriesAttributionKey(attributionKeys);
+                    lastSendCarriedAttribution = ladder.lastCarried;
                     emitAnswerCommitted(callKey, 'decide', card, denyPayload);
                     try {
-                        raw = await bridge.decideTool(denyBody, gatedCallId, decideOpts, pending);
+                        raw = await deliverWithAttributionLadder(denyBody, (b) => bridge.decideTool(b, gatedCallId, decideOpts, pending), signal, ladder, (step) => {
+                            hostLog('debug', step === 'renamed'
+                                ? `liveToolApprovalWire: decide(deny) for task ${taskId} was refused because the settlement note was sent under a name ` +
+                                    'this engine has retired — re-sending the SAME decision exactly once with that one key renamed to the name the refusal points to ' +
+                                    '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)'
+                                : step === 'dropped'
+                                    ? `liveToolApprovalWire: decide(deny) for task ${taskId} was refused because the settlement note is not part of ` +
+                                        'what this deployment signs — re-sending the SAME decision exactly once with that one key removed ' +
+                                        '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)'
+                                    : `liveToolApprovalWire: decide(deny) for task ${taskId} was refused again because the settlement note is not part of ` +
+                                        'what this deployment signs — re-sending the SAME decision exactly once more with that key removed ' +
+                                        '(still before the approval was judged)');
+                        });
                     }
-                    catch (first) {
-                        if (shouldResendWithoutAttribution(first, lastSendCarriedAttribution, signal)) {
-                            const withoutAttribution = withoutAttributionKey(denyBody);
-                            lastSendCarriedAttribution = false;
-                            hostLog('debug', `liveToolApprovalWire: decide(deny) for task ${taskId} was refused because the settlement note is not part of ` +
-                                'what this deployment signs — re-sending the SAME decision exactly once with that one key removed ' +
-                                '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)');
-                            raw = await bridge.decideTool(withoutAttribution, gatedCallId, decideOpts, pending);
-                            attributionDropped = true;
-                        }
-                        else if (shouldResendUnderSuccessorKey(first, Object.hasOwn(denyBody, 'settledBy'), signal)) {
-                            const renamed = withAttributionKeyRenamed(denyBody);
-                            hostLog('debug', `liveToolApprovalWire: decide(deny) for task ${taskId} was refused because the settlement note was sent under a name ` +
-                                'this engine has retired — re-sending the SAME decision exactly once with that one key renamed to the name the refusal points to ' +
-                                '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)');
-                            try {
-                                raw = await bridge.decideTool(renamed, gatedCallId, decideOpts, pending);
-                                attributionRenamed = true;
-                            }
-                            catch (second) {
-                                if (!shouldResendWithoutAttribution(second, true, signal))
-                                    throw second;
-                                const renamedWithoutAttribution = withoutAttributionKey(renamed);
-                                lastSendCarriedAttribution = false;
-                                hostLog('debug', `liveToolApprovalWire: decide(deny) for task ${taskId} was refused again because the settlement note is not part of ` +
-                                    'what this deployment signs — re-sending the SAME decision exactly once more with that key removed ' +
-                                    '(still before the approval was judged)');
-                                raw = await bridge.decideTool(renamedWithoutAttribution, gatedCallId, decideOpts, pending);
-                                attributionDropped = true;
-                            }
-                        }
-                        else {
-                            throw first;
-                        }
+                    finally {
+                        lastSendCarriedAttribution = ladder.lastCarried;
                     }
+                    const attributionDropped = ladder.dropped;
+                    const attributionRenamed = ladder.renamed;
                     const receipt = readDecideReceipt(raw);
                     const deny = denyFactsOf(denySettledByForWire, denyReasonSnapshot, attributionDropped, attributionRenamed);
                     return {
@@ -870,39 +853,11 @@ function readPersistedRuleAnchors(v) {
 function isNonNegativeSafeInt(v) {
     return typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
 }
-function shouldResendWithoutAttribution(e, sentAttributionKey, signal) {
-    if (!sentAttributionKey)
-        return false;
-    if (signal?.aborted === true)
-        return false;
-    return denyAttributionRefusalFromError(e, true)?.kind === 'not_in_proof';
-}
-function shouldResendUnderSuccessorKey(e, lastSendCarriedRetiredKey, signal) {
-    if (!lastSendCarriedRetiredKey)
-        return false;
-    if (signal?.aborted === true)
-        return false;
-    return denyAttributionRefusalFromError(e, true)?.kind === 'retired_key';
-}
 export function decisionAttributionKeyOf(reading, denySettledBy) {
     if (denySettledBy !== 'policy')
         return {};
     return approvalDecidedByAdmitted(reading) ? { decidedBy: 'policy' } : { settledBy: 'policy' };
 }
-function carriesAttributionKey(body) {
-    return Object.hasOwn(body, 'settledBy') || Object.hasOwn(body, 'decidedBy');
-}
-function withoutAttributionKey(body) {
-    const { settledBy: _droppedSettledBy, decidedBy: _droppedDecidedBy, ...rest } = body;
-    void _droppedSettledBy;
-    void _droppedDecidedBy;
-    return rest;
-}
-function withAttributionKeyRenamed(body) {
-    const { settledBy, decidedBy: _replaced, ...rest } = body;
-    void _replaced;
-    return settledBy === undefined ? rest : { ...rest, decidedBy: settledBy };
-}
 function readDecidedByReadingOf(holder) {
     try {
         return readOwnDataValue(holder, 'approvalDecidedBy');
@@ -967,23 +922,24 @@ function usableProbeReason(raw) {
     return typeof raw === 'string' && raw.trim() !== '' ? raw : undefined;
 }
 const PROBE_CAUSE_CODE_WORD = /^[a-z][a-z0-9_]{0,31}(?:\.[a-z][a-z0-9_]{0,31}){1,3}$/;
-export function askProbeReasonDetail(card) {
+export function askProbeReasonDetail(card, lang) {
     const prose = usableProbeReason(ownDataValue(card, 'probeReason'));
     const shown = prose === undefined ? '' : displayUntrusted(prose);
-    const sentence = probeCauseSentence(ownDataValue(card, 'probeCause'), shown !== '');
+    const sentence = probeCauseSentence(ownDataValue(card, 'probeCause'), shown !== '', lang);
     if (sentence === undefined)
         return shown === '' ? undefined : shown;
-    return shown === '' ? sentence : `${sentence} ${shown}`;
+    return shown === '' ? sentence : renderMessage(msg('approval.probe.proseJoin', { sentence, prose: shown }), lang);
 }
-function probeCauseSentence(cause, withProse) {
+function probeCauseSentence(cause, withProse, lang) {
     try {
         if (!isWireRecordCarrier(cause))
             return undefined;
         const code = ownDataValue(cause, 'code');
-        const head = withProse
-            ? 'An automatic check could not clear this call, so it is asking you'
-            : 'An automatic check could not clear this call, so it is asking you; the engine did not say the specific reason';
-        return typeof code === 'string' && PROBE_CAUSE_CODE_WORD.test(code) ? `${head} (check code: ${code}).` : `${head}.`;
+        const withCode = typeof code === 'string' && PROBE_CAUSE_CODE_WORD.test(code);
+        const key = withProse
+            ? withCode ? 'approval.probe.withProseCode' : 'approval.probe.withProse'
+            : withCode ? 'approval.probe.noProseCode' : 'approval.probe.noProse';
+        return renderMessage(withCode ? msg(key, { code: displayUntrusted(code) }) : msg(key), lang);
     }
     catch {
         return undefined;
@@ -1041,6 +997,21 @@ export function readApprovalBoundGrants(v) {
         return undefined;
     return Object.freeze({ skill, allowedTools, disallowedTools });
 }
+const READS_AS_NOTHING_HEAD = '<reads as nothing (';
+export function readBoundGrantEntry(entry) {
+    if (typeof entry !== 'string' || entry === '')
+        return undefined;
+    if (!entry.startsWith('<'))
+        return Object.freeze({ kind: 'rule' });
+    if (entry.startsWith(READS_AS_NOTHING_HEAD)) {
+        const close = entry.indexOf('): ', READS_AS_NOTHING_HEAD.length);
+        const word = close > 0 ? entry.slice(READS_AS_NOTHING_HEAD.length, close) : undefined;
+        if (word !== undefined && CORE_ALLOW_ENTRY_INERT_REASONS.includes(word)) {
+            return Object.freeze({ kind: 'reads_as_nothing', reason: word });
+        }
+    }
+    return Object.freeze({ kind: 'reads_as_nothing' });
+}
 const BOUND_GRANT_NOT_BINDABLE = 'not_bindable';
 const SERVER_CLASS_READ_CAP = 64;
 function readApprovalGrantBinding(carrier) {
@@ -1161,34 +1132,45 @@ export function readApprovalClassifierNoRuling(v) {
     return typeof w === 'string' && CAUSE_WORD.test(w) ? w : undefined;
 }
 const CLASSIFIER_NO_RULING_REASONS = Object.freeze({
-    error: 'could not run for this call (it failed)',
-    timeout: 'could not run for this call (it timed out)',
-    parse_error: 'answered for this call but gave no verdict it could use',
+    error: 'approval.classifier.noRulingError',
+    timeout: 'approval.classifier.noRulingTimeout',
+    parse_error: 'approval.classifier.noRulingParseError',
 });
 const _noRulingPin = [true, true];
 void _noRulingPin;
-export function classifierNoRulingDetail(word) {
+export function classifierNoRulingDetail(word, lang) {
     if (typeof word === 'string' && Object.hasOwn(CLASSIFIER_NO_RULING_REASONS, word)) {
-        return `The auto-mode classifier ${CLASSIFIER_NO_RULING_REASONS[word]}, so it is asking you instead.`;
+        return renderMessage(msg(CLASSIFIER_NO_RULING_REASONS[word]), lang);
     }
     if (typeof word === 'string' && CAUSE_WORD.test(word))
-        return `The auto-mode classifier did not rule on this call (reason: ${word}), so it is asking you instead.`;
-    return 'The auto-mode classifier did not rule on this call, so it is asking you instead.';
+        return renderMessage(msg('approval.classifier.noRulingOther', { reason: displayUntrusted(word) }), lang);
+    return renderMessage(msg('approval.classifier.noRulingBare'), lang);
 }
-const entries = (n) => (n === 1 ? '1 tool entry' : `${String(n)} tool entries`);
-export function approvalBoundGrantsDetail(grants) {
+export function approvalBoundGrantsDetail(grants, lang) {
     const g = readApprovalBoundGrants({ boundGrants: grants });
     if (g === undefined)
         return undefined;
     if (g.skill === null)
-        return 'This call names no loaded skill, so approving it grants nothing beyond this call.';
-    const a = g.allowedTools.length;
-    const d = g.disallowedTools.length;
-    if (a === 0 && d === 0)
-        return 'Approving this activates the skill shown on the card; it lists no tools to run without asking and none to refuse.';
-    const allow = `${entries(a)} it lists ${a === 1 ? 'runs' : 'run'} without asking once it is active`;
-    const deny = `${entries(d)} ${d === 1 ? 'is' : 'are'} refused for the rest of this run`;
-    return `Approving this activates the skill shown on the card: ${allow}, and ${deny}.`;
+        return renderMessage(msg('approval.boundGrants.noSkill'), lang);
+    const isRule = (e) => readBoundGrantEntry(e)?.kind === 'rule';
+    const a = g.allowedTools.filter(isRule).length;
+    const d = g.disallowedTools.filter(isRule).length;
+    const allowNothing = g.allowedTools.length - a;
+    const denyNothing = g.disallowedTools.length - d;
+    if (denyNothing > 0) {
+        return renderMessage(denyNothing === 1 ? msg('approval.boundGrants.notActivated.one') : msg('approval.boundGrants.notActivated.other', { count: String(denyNothing) }), lang);
+    }
+    if (a === 0 && d === 0) {
+        if (allowNothing > 0)
+            return renderMessage(allowNothing === 1 ? msg('approval.boundGrants.listsNoToolsWithNothing.one') : msg('approval.boundGrants.listsNoToolsWithNothing.other', { count: String(allowNothing) }), lang);
+        return renderMessage(msg('approval.boundGrants.listsNoTools'), lang);
+    }
+    const allow = a === 1 ? msg('approval.boundGrants.allowPart.one') : msg('approval.boundGrants.allowPart.other', { count: a });
+    const deny = d === 1 ? msg('approval.boundGrants.denyPart.one') : msg('approval.boundGrants.denyPart.other', { count: d });
+    if (allowNothing > 0) {
+        return renderMessage(allowNothing === 1 ? msg('approval.boundGrants.activatesWithNothing.one', { allow, deny }) : msg('approval.boundGrants.activatesWithNothing.other', { allow, deny, count: String(allowNothing) }), lang);
+    }
+    return renderMessage(msg('approval.boundGrants.activates', { allow, deny }), lang);
 }
 const CALL_LEDGER_MAX_CALLS = 256;
 const CALL_LEDGER_MAX_ASKS_PER_CALL = 8;
@@ -1289,7 +1271,7 @@ function noteCallOutcome(slot, r) {
     const fateRank = { not_sent: 0, not_accepted: 1, unconfirmed: 2 };
     entry.answerFate = entry.answerFate !== undefined && fateRank[entry.answerFate] > fateRank[next] ? entry.answerFate : next;
 }
-export function approvalPriorCardsDetail(card) {
+export function approvalPriorCardsDetail(card, lang) {
     const prior = ownDataValue(card, 'priorCardsForCall');
     let isList = false;
     try {
@@ -1307,13 +1289,12 @@ export function approvalPriorCardsDetail(card) {
     for (let i = 0; i < length; i++)
         items.push(ownDataValue(prior, String(i)));
     const outcome = ownDataValue(items[length - 1], 'outcome');
-    const earlier = outcome === 'allowed' ? 'you already approved an earlier one' : outcome === 'denied' ? 'an earlier one was denied' : 'an earlier one was shown first';
+    const earlier = msg(outcome === 'allowed' ? 'approval.priorCard.earlier.allowed' : outcome === 'denied' ? 'approval.priorCard.earlier.denied' : 'approval.priorCard.earlier.shown');
     const fromRule = items.some((p) => ownDataValue(p, 'origin') === 'ask_rule');
     const thisFromRule = ownDataValue(card, 'origin') === 'ask_rule';
-    if (fromRule && !thisFromRule) {
-        return `This is a second approval for the same call: ${earlier}, which your ask rule asked for. This one is a separate check, not from your ask rule, and needs its own answer.`;
-    }
-    return `This is a second approval for the same call: ${earlier}. This one is a separate check and needs its own answer.`;
+    if (fromRule && !thisFromRule)
+        return renderMessage(msg('approval.priorCard.fromRule', { earlier }), lang);
+    return renderMessage(msg('approval.priorCard.plain', { earlier }), lang);
 }
 const PRIOR_ANSWER_PHRASE = Object.freeze({
     allow: 'Yes',
@@ -1710,10 +1691,9 @@ export async function surfaceToolApprovalFrameAndRespond(frame, respond, streamA
     const receivedAtMs = Date.now();
     const approvalId = frame.approvalId;
     const entry = { frame, approvalId, identity: liveCardIdentityOf(approvalId, frame, run), respond, streamArgs, signal, lane, receivedAtMs };
-    return enterLiveCard(entry, 0);
+    return enterLiveCard(entry);
 }
-const LIVE_ENTRY_MAX_ROUNDS = 8;
-function enterLiveCard(e, round) {
+function enterLiveCard(e) {
     const { approvalId, signal } = e;
     const held = liveCardHoldOf(liveFrameCallKey(approvalId));
     if (held !== undefined)
@@ -1721,9 +1701,9 @@ function enterLiveCard(e, round) {
     const settled = settledLiveCardOutcome(approvalId);
     if (settled !== undefined)
         return Promise.resolve(settled);
-    const other = round < LIVE_ENTRY_MAX_ROUNDS ? approvalHoldFor(e.identity, (h) => h.lane === 'live') : undefined;
+    const other = approvalHoldFor(e.identity, (h) => h.lane === 'live');
     if (other !== undefined)
-        return joinOtherLaneHolder(e, other, round);
+        return joinOtherLaneHolder(e, other);
     return holdLiveCard(e.identity, signal, async (hold) => {
         const slot = {};
         const out = await presentToolApprovalFrameAndRespond(e.frame, approvalId, e.respond, e.streamArgs, signal, e.lane, hold, slot, e.receivedAtMs);
@@ -1731,7 +1711,7 @@ function enterLiveCard(e, round) {
         return out;
     });
 }
-async function joinOtherLaneHolder(e, other, round) {
+async function joinOtherLaneHolder(e, other) {
     const wait = await awaitApprovalHolder(other, e.signal, 'respond');
     if (wait.kind === 'settled') {
         noteHolderSettledApproval(e.approvalId, wait.how, wait.outcome);
@@ -1739,7 +1719,7 @@ async function joinOtherLaneHolder(e, other, round) {
     }
     if (wait.kind === 'left')
         return { kind: 'not_sent', lane: 'respond', cause: 'retracted', joinedInFlight: true };
-    return enterLiveCard(e, round + 1);
+    return enterLiveCard(e);
 }
 function liveCardIdentityOf(approvalId, frame, run) {
     const toolCallId = typeof frame.toolCallId === 'string' && frame.toolCallId !== '' ? frame.toolCallId : undefined;
@@ -1789,8 +1769,20 @@ export async function joinApprovalHolder(identity, signal) {
         return { kind: 'joined', outcome: { kind: 'not_sent', lane: 'decide', cause: 'retracted', joinedInFlight: true } };
     return { kind: 'free' };
 }
-export function claimApprovalCard(identity, signal) {
-    return claimApprovalCardFor(readApprovalHolderIdentity(identity), signal);
+function readApprovalCardClaimSignal(v) {
+    if (typeof v !== 'object' || v === null)
+        return undefined;
+    try {
+        const d = Object.getOwnPropertyDescriptor(v, 'signal');
+        const x = d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+        return typeof x === 'object' && x !== null ? x : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function claimApprovalCard(identity, options) {
+    return claimApprovalCardFor(readApprovalHolderIdentity(identity), readApprovalCardClaimSignal(options));
 }
 async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, streamArgs, signal, lane, hold, ledgerSlot, receivedAtMs) {
     const frameToolCallId = typeof frame.toolCallId === 'string' && frame.toolCallId !== '' ? frame.toolCallId : undefined;
@@ -1824,7 +1816,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
         return { kind: 'not_sent', lane: 'respond', cause: 'retracted' };
     }
     if (card.kind === 'aborted') {
-        hold.phase = 'respond';
+        enterLiveRespondPhase(hold);
         const interruptOpts = lane?.approvalDecisionNoteCapable === true ? { note: INTERRUPT_DENY_REASON } : {};
         let interruptDeny;
         try {
@@ -1838,7 +1830,7 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
         hostLog('debug', `liveToolApprovalWire: ${approvalId} card aborted — one tool-level deny issued to settle the pending ask`);
         return { kind: 'unsettled', lane: 'respond', cause: 'interrupted' };
     }
-    hold.phase = 'respond';
+    enterLiveRespondPhase(hold);
     const noteCapable = lane?.approvalDecisionNoteCapable === true;
     const denyReasonRead = card.kind === 'deny' ? ((r) => (typeof r === 'string' ? r : undefined))(card.reason) : undefined;
     const answerSnapshot = card.kind === 'deny'
@@ -1943,49 +1935,30 @@ async function presentToolApprovalFrameAndRespond(frame, approvalId, respond, st
             ...(note !== undefined ? { note } : {}),
             ...attributionKeys,
         };
-        let attributionDropped = false;
-        let attributionRenamed = false;
+        const ladder = { lastCarried: lastSendCarriedAttribution, dropped: false, renamed: false };
         let raw;
         if (basePayload !== undefined)
             emitAnswerCommitted(liveFrameCallKey(approvalId), 'respond', answerSnapshot, basePayload);
         try {
-            raw = await respond(approvalId, decision, respondOpts);
+            raw = await deliverWithAttributionLadder(respondOpts, (o) => respond(approvalId, decision, o), signal, ladder, (step) => {
+                hostLog('debug', step === 'renamed'
+                    ? `liveToolApprovalWire: respond(deny) for ${approvalId} was refused because the settlement note was sent under a name ` +
+                        'this engine has retired — re-sending the SAME decision exactly once with that one key renamed to the name the refusal points to ' +
+                        '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)'
+                    : step === 'dropped'
+                        ? `liveToolApprovalWire: respond(deny) for ${approvalId} was refused because the settlement note is not part of ` +
+                            'what this deployment signs — re-sending the SAME decision exactly once with that one key removed ' +
+                            '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)'
+                        : `liveToolApprovalWire: respond(deny) for ${approvalId} was refused again because the settlement note is not part of ` +
+                            'what this deployment signs — re-sending the SAME decision exactly once more with that key removed ' +
+                            '(still before the approval was judged)');
+            });
         }
-        catch (first) {
-            if (shouldResendWithoutAttribution(first, lastSendCarriedAttribution, signal)) {
-                const withoutAttribution = withoutAttributionKey(respondOpts);
-                lastSendCarriedAttribution = false;
-                hostLog('debug', `liveToolApprovalWire: respond(deny) for ${approvalId} was refused because the settlement note is not part of ` +
-                    'what this deployment signs — re-sending the SAME decision exactly once with that one key removed ' +
-                    '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)');
-                raw = await respond(approvalId, decision, withoutAttribution);
-                attributionDropped = true;
-            }
-            else if (shouldResendUnderSuccessorKey(first, Object.hasOwn(respondOpts, 'settledBy'), signal)) {
-                const renamed = withAttributionKeyRenamed(respondOpts);
-                hostLog('debug', `liveToolApprovalWire: respond(deny) for ${approvalId} was refused because the settlement note was sent under a name ` +
-                    'this engine has retired — re-sending the SAME decision exactly once with that one key renamed to the name the refusal points to ' +
-                    '(the refusal happened before the approval was judged, so nothing was consumed and this is a re-delivery, not a second act)');
-                try {
-                    raw = await respond(approvalId, decision, renamed);
-                    attributionRenamed = true;
-                }
-                catch (second) {
-                    if (!shouldResendWithoutAttribution(second, true, signal))
-                        throw second;
-                    const renamedWithoutAttribution = withoutAttributionKey(renamed);
-                    lastSendCarriedAttribution = false;
-                    hostLog('debug', `liveToolApprovalWire: respond(deny) for ${approvalId} was refused again because the settlement note is not part of ` +
-                        'what this deployment signs — re-sending the SAME decision exactly once more with that key removed ' +
-                        '(still before the approval was judged)');
-                    raw = await respond(approvalId, decision, renamedWithoutAttribution);
-                    attributionDropped = true;
-                }
-            }
-            else {
-                throw first;
-            }
+        finally {
+            lastSendCarriedAttribution = ladder.lastCarried;
         }
+        const attributionDropped = ladder.dropped;
+        const attributionRenamed = ladder.renamed;
         const parkingBody = readToolApprovalRespondParking(raw);
         if (parkingBody !== undefined) {
             const parking = parkingBody.kind === 'parking' && parkingBody.view.approvalId === approvalId ? parkingBody.view : undefined;