@sema-agent/client-core 0.98.0 → 0.100.0

package/dist/index.d.ts

@@ -16,10 +16,10 @@ export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
 export { engineRefOf, sameEngineRef, TRANSCRIPT_ROW_SIDECAR_KEYS } from './engineRowRef.js';
 export type { EngineRowRef, SameEngineRefVerdict, EngineBoundRun } from './engineRowRef.js';
 export { isReplayMarked } from './replayBody.js';
-export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE } from './eventLeg.js';
-export type { EventLeg, EventLegBindCause, EventLegBoundInfo, EventLegElicitationFrame, EventLegFrameInfo, EventLegHitlEnvelope, EventLegHitlPorts, EventLegIdleTriagePorts, EventLegKind, EventLegLiveSpec, EventLegOwnerPorts, EventLegPortName, EventLegPorts, EventLegQuestionFrame, EventLegRefusal, EventLegReport, EventLegRow, EventLegRunPorts, EventLegRunSpec, EventLegSpec, EventLegStage, EventLegStreamContext, EventLegStreamDecorator, EventLegTap, EventLegToolApprovalFrame, } from './eventLeg.js';
+export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE, approvalFrameContextOf } from './eventLeg.js';
+export type { ApprovalFrameContext, EventLeg, EventLegBindCause, EventLegBoundInfo, EventLegElicitationFrame, EventLegFrameInfo, EventLegHitlEnvelope, EventLegHitlPorts, EventLegIdleTriagePorts, EventLegKind, EventLegLiveSpec, EventLegOwnerPorts, EventLegPortName, EventLegPorts, EventLegQuestionFrame, EventLegRefusal, EventLegReport, EventLegRow, EventLegRunPorts, EventLegRunSpec, EventLegSpec, EventLegStage, EventLegTap, EventLegToolApprovalFrame, } from './eventLeg.js';
 export { frameBindingOf, inheritFrameBinding } from './frameBinding.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, subagentContentEventOf, } from './subagentContentStore.js';
 export type { BgTerminalFacts, SubagentContentEvent, SubagentContentItem, SubagentContentSnapshot, SubagentContentStoreConfig, SubagentOwnerRecord, SubagentOwnerSessionConflict, SubagentViewSlot, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
@@ -30,8 +30,11 @@ export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay,
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
-export type { EngineCapState, EngineCapsLanding, EngineCapsProbeRotation, EngineCapValueState, } from './engineCapsCache.js';
+export * from './printModelStatus.js';
+export * from './compactionStatus.js';
+export { __resetEngineCapsCacheForTests, engineCapNestedValue, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, invalidateEngineCapsAndReprobe, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export { onEngineCapsChange } from './engineCapsChange.js';
+export type { EngineCapState, EngineCapsChange, EngineCapsLanding, EngineCapsProbeRotation, EngineCapsReprobe, EngineCapValueState, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -96,13 +99,13 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential, cleanUntrustedScalar } from './displayUntrusted.js';
 export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntrustedMarked } from './displayUntrusted.js';
 export { isDiagnosticValueWord } from './displayUntrusted.js';
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type AssistantPreemptLike, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type PreemptOptions, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type AssistantPreemptLike, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type PreemptOptions, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerHostQueueFact, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
 export { preemptReceiptLine, type PreemptOutcome, type PreemptParkedStatus } from './preemptWire.js';
 export { readSteerReceipt, type SteerReceiptReading } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
@@ -110,8 +113,9 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
+export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf, type PrepareRefusalCode, type PrepareRefusalNoteFacts } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export type { EngineToolDirectory, EngineToolDirectorySource } from './engineToolDirectory.js';
@@ -219,8 +223,13 @@ export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredP
 export type { PromptDeliveryLedger, PromptDeliveryRecord } from './promptDelivery.js';
 export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
 export type { UserAttachmentDescriptor, UserAttachmentNotebookCell } from './userAttachmentEnvelope.js';
-export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
-export type { HumanTurnInput, HumanTurnItem, HumanTurnAttachment, HumanTurnRider, HumanTurnMissing, HumanTurnCaps, HumanTurnEncoding, HumanTurnShare, HumanTurnSharePart, HumanTurnDegraded, HumanTurnDelivered, } from './humanTurn.js';
+export { encodeHumanTurn, deliveredUuidsOf, imageSentOnUnknownVision } from './humanTurn.js';
+export type { HumanTurnInput, HumanTurnItem, HumanTurnAttachment, HumanTurnRider, HumanTurnMissing, HumanTurnCaps, HumanTurnEncoding, HumanTurnShare, HumanTurnSharePart, HumanTurnDegraded, HumanTurnDelivered, HumanTurnNotice, } from './humanTurn.js';
+export type { UserAttachment } from '@sema-agent/sdk';
+export { observedUserAttachmentSeat, projectUserAttachmentSeatCapability, userAttachmentSeatAdmits } from './userAttachmentSeat.js';
+export type { UserAttachmentSeatReading, UserAttachmentSeatPresent, UserAttachmentSeatLimits } from './userAttachmentSeat.js';
+export { scenarioRefusalFromError, scenarioRefusalContent } from './scenarioRefusal.js';
+export type { ScenarioRefusalReading } from './scenarioRefusal.js';
 export { projectEngineSessionMessages } from './engineSessionMessages.js';
 export type { EngineHistoryProjection, EngineHistoryProjectionOpts, EngineHistoryMessage, EngineHistoryMessageBody, EngineHistoryBlock, EngineHistoryTextBlock, EngineHistoryThinkingBlock, EngineHistoryToolUseBlock, EngineHistoryToolResultBlock, EngineHistoryMediaBlock, EngineHistoryOpaqueBlock, EngineHistoryBase64Source, EngineHistoryJson, EngineHistorySkipped, } from './engineSessionMessages.js';
 export * from './resumeRefusalCopy.js';
@@ -235,7 +244,9 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, } from './pluginHooksWire.js';
+export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, userPromptSubmitExecutorOf, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, type SettingsHooksSalvageRow, type PluginHookModuleVerdict, type SessionHookVerdict, } from './pluginHooksWire.js';
+export { salvageSettingsHooksEntries, settingsHooksSalvageNotice, type HooksSalvage, type HooksSalvageDrop, type HooksSalvageRejection, type HooksSalvageOutcome, type HooksSalvageDropCode, type HooksSalvageRejectionCode, } from './settingsHooksSalvage.js';
+export { hostSettingsSelfCheck, HostSettingsRefused, HOST_SUPPLIED_KEYS, HOST_SETTING_CAUSES, HOST_SETTING_DISPOSITIONS, type HostSuppliedKey, type HostSettingCause, type HostSettingDisposition, type HostSettingPlane, type HostSettingNoticeId, type HostSettingRow, type HostSettingNotice, type HostTurnVerdict, type HostTurnSettingsSources, type HostTurnSettingsInput, type HostSettingsCarried, type HostTurnSettings, } from './hostTurnSettings.js';
 export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export { hookMatcherVerdict } from './hookMatcherVerdict.js';
 export type { HookMatcherVerdict, HookMatcherUnjudgedReason, HookMatcherRefusedReason } from './hookMatcherVerdict.js';
@@ -245,7 +256,7 @@ export { READ_DENY_BUILTIN_TIERS, READ_DENY_DEFAULT_TIERS, parseReadDenyBuiltinT
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
-export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
+export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
 export type { ActiveGate, ApprovalsResourceLike, AskAnswer, AssistantResourceLike, DecideOperationEnd, DecideOperationEvent, DecideOperationIdentity, DecideOperationObserver, DecideOperationSpan, DecideOperationStart, FindPendingOutcome, GateCurrentPending, GatePrompt, HitlBackendDenyDecision, HitlBridgeOptions, HitlCanUseToolFn, HitlClientLike, HitlDecideDenyOutcome, HitlPermissionDecisionLike, HitlSafetyCode, PlanReviewModeAfter, PlanReviewOutcome, } from './hitl/hitlBridge.js';
 export * from './hitl/suspendedReopen.js';
 export { APPROVAL_RESOLUTION_LANES, APPROVAL_NOT_SENT_CAUSES, APPROVAL_UNSETTLED_CAUSES, APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, isApprovalDecided, approvalNotSentCause, approvalUnsettledCause, approvalResolutionDetail, type ApprovalResolution, type ApprovalResolutionDecided, type ApprovalResolutionNotSent, type ApprovalResolutionUnsettled, type ApprovalResolutionLane, type ApprovalNotSentCause, type ApprovalUnsettledCause, type ApprovalDenyFacts, } from './hitl/approvalResolution.js';
@@ -262,6 +273,10 @@ export { ruleToolNameVerdictOf } from './protocolSegment.js';
 export type { RuleToolNameReading } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
+export { decisionInFlightOf, decisionReadMark } from './hitl/decisionLedger.js';
+export type { DecisionIdentity } from './hitl/decisionLedger.js';
+export { HITL_DECISION_FAMILIES, HITL_DECISION_NOT_APPLIED_CAUSES, HITL_DECISION_NOT_SENT_CAUSES, HITL_DECISION_UNCONFIRMED_CAUSES, sendHitlDecision, } from './hitl/decisionSend.js';
+export type { HitlApprovalDecisionRequest, HitlAskDecisionRequest, HitlDecisionApplied, HitlDecisionFamily, HitlDecisionGate, HitlDecisionNotApplied, HitlDecisionNotAppliedCause, HitlDecisionNotSent, HitlDecisionNotSentCause, HitlDecisionSendClient, HitlDecisionSendDeps, HitlDecisionSendOutcome, HitlDecisionSendRequest, HitlDecisionSettledElsewhere, HitlDecisionUnconfirmed, HitlDecisionUnconfirmedCause, HitlElicitationDecisionRequest, } from './hitl/decisionSend.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
 export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, registerArmedGateFromQuestionIdFor, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
 export * from './hitl/parkOwnership.js';
@@ -303,6 +318,14 @@ export type { EngineEnvView, EngineEnvGroupDecl, EngineEnvSourcingInput, EngineE
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
+export type { McpToolToggleKey, McpMountedServers } from './mcpToolToggles.js';
+export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
+export type { DevicesFace, DevicesFaceInput, DevicesFaceUnavailableWhy } from './devicesFace.js';
+export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
+export type { CloudLoginFailureContext, EngineTargetReading, EngineTargetWatch } from './engineTargetSeat.js';
+export { keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
+export type { OnboardJsonObject, OnboardPlanEntry, OnboardProbeBodyReader, OnboardProbeDeps, OnboardProbeFetch, OnboardProbeRequestInit, OnboardProbeResponse, OnboardProbeTarget, OnboardWritePlan, OnboardWritePlanInput, OnboardWriteVerdict, } from './model/onboardJudgement.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
@@ -334,8 +357,17 @@ export { engineCredentialRequirementOf } from './engineCredentialRequirement.js'
 export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';
 export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
 export type { CredentialAttachWord, CredentialConsent, CredentialFactName, CredentialFacts, CredentialProvenance, CredentialSidecarOwnership, CredentialTargetKind, CredentialTargetProvenance, } from './credentialProvenance.js';
-export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { canonicalSessionIdOf, isSessionIdPathSegment, sessionIdRefusalOf } from './sessionIdSegment.js';
+export type { SessionIdRefusal, SessionIdRefusalWhy } from './sessionIdSegment.js';
 export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
 export type { CutForDisplayOptions, CutForDisplayResult, NoticePresentationAudience, NoticeOutlet, NoticeOccurrence, NoticeSeatClass, NoticeDeployment, NoticePresentationFacts, OutletKind, OutletReachability, OutletReachabilityContext, OutletRenderingPlan, NoticePrintCarrier, NoticePrintLineInput, NoticePrintLineResult, } from './noticePresentation.js';
 export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';
 export type { PrintPermissionOutcome, PrintPermissionOutcomeForm } from './printPermissionOutcome.js';
+export { settingsCredentialKeyPaths, isCredentialEnvName, isCredentialConfigKey, credentialNameWords } from './settingsCredentialKeyPaths.js';
+export type { CredentialKeyFinding } from './settingsCredentialKeyPaths.js';
+export { injectionLaneNotice, INJECTION_SOURCES } from './injectionLaneNotice.js';
+export type { InjectionSource } from './injectionLaneNotice.js';
+export { ruleRefusalSentence } from './ruleRefusalSentence.js';
+export type { RuleRefusalRow } from './ruleRefusalSentence.js';
+export { parseToolsFlagNames } from './toolsFlagNames.js';
+export type { ToolsFlagNames } from './toolsFlagNames.js';

package/dist/index.js

@@ -13,9 +13,9 @@ export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
 export { engineRefOf, sameEngineRef, TRANSCRIPT_ROW_SIDECAR_KEYS } from './engineRowRef.js';
 export { isReplayMarked } from './replayBody.js';
-export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE } from './eventLeg.js';
+export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE, approvalFrameContextOf } from './eventLeg.js';
 export { frameBindingOf, inheritFrameBinding } from './frameBinding.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, subagentContentEventOf, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
 export * from './fleetAgentPanelProjection.js';
@@ -23,7 +23,10 @@ export { reducePanelFrame, createPanelReduceState, PANEL_DELTA_OPS } from './pan
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export * from './printModelStatus.js';
+export * from './compactionStatus.js';
+export { __resetEngineCapsCacheForTests, engineCapNestedValue, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, invalidateEngineCapsAndReprobe, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export { onEngineCapsChange } from './engineCapsChange.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -81,7 +84,7 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential, cleanUntrustedScalar } from './displayUntrusted.js';
 export { isDiagnosticValueWord } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
@@ -93,7 +96,8 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFIG_TOOL_FACE_CONTROL, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, PROMPT_ASSEMBLED_ROLE_REFUSED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { imageInvalidFailureNoteOf, prepareRefusalCodeOf, prepareRefusalNoteOf } from './prepareRefusal.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
@@ -187,7 +191,9 @@ export { toolHistoryBadTurnSentence } from './toolHistoryBadTurn.js';
 export { deviceFlowPollingPlan } from './deviceFlowPolling.js';
 export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredPrompts } from './promptDelivery.js';
 export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
-export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
+export { encodeHumanTurn, deliveredUuidsOf, imageSentOnUnknownVision } from './humanTurn.js';
+export { observedUserAttachmentSeat, projectUserAttachmentSeatCapability, userAttachmentSeatAdmits } from './userAttachmentSeat.js';
+export { scenarioRefusalFromError, scenarioRefusalContent } from './scenarioRefusal.js';
 export { projectEngineSessionMessages } from './engineSessionMessages.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
@@ -200,7 +206,9 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, } from './pluginHooksWire.js';
+export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, userPromptSubmitExecutorOf, } from './pluginHooksWire.js';
+export { salvageSettingsHooksEntries, settingsHooksSalvageNotice, } from './settingsHooksSalvage.js';
+export { hostSettingsSelfCheck, HostSettingsRefused, HOST_SUPPLIED_KEYS, HOST_SETTING_CAUSES, HOST_SETTING_DISPOSITIONS, } from './hostTurnSettings.js';
 export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export { hookMatcherVerdict } from './hookMatcherVerdict.js';
 export { ASK_EVIDENCE_ABSENCE_VALUES, SYSTEM_INJECTION_PRIORITIES } from './engineClosedSets.js';
@@ -209,7 +217,7 @@ export { READ_DENY_BUILTIN_TIERS, READ_DENY_DEFAULT_TIERS, parseReadDenyBuiltinT
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
-export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
+export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
 export * from './hitl/suspendedReopen.js';
 export { APPROVAL_RESOLUTION_LANES, APPROVAL_NOT_SENT_CAUSES, APPROVAL_UNSETTLED_CAUSES, APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, isApprovalDecided, approvalNotSentCause, approvalUnsettledCause, approvalResolutionDetail, } from './hitl/approvalResolution.js';
 export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
@@ -223,6 +231,8 @@ export * from './coreValuePorts.js';
 export { ruleToolNameVerdictOf } from './protocolSegment.js';
 export * from './hitl/askGateWire.js';
 export * from './hitl/planReviewWire.js';
+export { decisionInFlightOf, decisionReadMark } from './hitl/decisionLedger.js';
+export { HITL_DECISION_FAMILIES, HITL_DECISION_NOT_APPLIED_CAUSES, HITL_DECISION_NOT_SENT_CAUSES, HITL_DECISION_UNCONFIRMED_CAUSES, sendHitlDecision, } from './hitl/decisionSend.js';
 export { PLAN_REVIEW_QUESTION_ID_PREFIX, REOPEN_ID_TAIL, approvalCallKey, askGateQuestionId, planReviewQuestionId, liveFrameCallKey, armedKeyFromQuestionId, } from './hitl/gateIdentity.js';
 export { _resetArmedGateRegistryForTest, _setGateArmedWaitMsForTest, clearArmedGate, gateArmedWaitMs, notePlanReviewAnswered, onGateArmed, planReviewArmedKey, registerArmedGate, registerArmedGateFor, registerArmedGateFromQuestionId, registerArmedGateFromQuestionIdFor, waitForGateArmed, wasGateArmed, wasGateArmedFor, } from './hitl/armedGateRegistry.js';
 export * from './hitl/parkOwnership.js';
@@ -258,6 +268,10 @@ export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js'
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { mcpToolTogglesToExcludeTools } from './mcpToolToggles.js';
+export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
+export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
+export { keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
@@ -282,6 +296,10 @@ export { createMissLedger, createTranslator, DATA_FACE_LANGUAGE, msg, renderMess
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
-export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { canonicalSessionIdOf, isSessionIdPathSegment, sessionIdRefusalOf } from './sessionIdSegment.js';
 export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
 export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';
+export { settingsCredentialKeyPaths, isCredentialEnvName, isCredentialConfigKey, credentialNameWords } from './settingsCredentialKeyPaths.js';
+export { injectionLaneNotice, INJECTION_SOURCES } from './injectionLaneNotice.js';
+export { ruleRefusalSentence } from './ruleRefusalSentence.js';
+export { parseToolsFlagNames } from './toolsFlagNames.js';

package/dist/inheritEnvCapability.d.ts

@@ -1,3 +1,4 @@
+import { type UiLanguage } from './env/uiLanguage.js';
 import type { RequestLane } from './request/taskRequest.js';
 export type InheritEnvValueShape = 'false' | 'string' | 'number' | 'null' | 'array' | 'object' | 'other';
 export type InheritEnvOwnCredentialsReading = {
@@ -13,6 +14,7 @@ export type InheritEnvOwnCredentialsReading = {
     readonly kind: 'unobserved';
 };
 export declare function observedInheritEnvOwnCredentialsWithheld(baseUrl?: string | undefined): InheritEnvOwnCredentialsReading;
+export declare function observedInheritEnvOwnCredentialValuesWithheld(baseUrl?: string | undefined): InheritEnvOwnCredentialsReading;
 export type InheritEnvOmitReason = 'lane' | 'project_context' | 'capability_absent' | 'capability_declined' | 'capability_unreadable' | 'identity_unverified';
 export type InheritEnvIntent = {
     readonly send: 'all';
@@ -27,5 +29,5 @@ export interface InheritEnvIntentInput {
     readonly serviceIdentityVerified: boolean;
 }
 export declare function inheritEnvIntentOf(input: InheritEnvIntentInput): InheritEnvIntent;
-export declare function inheritEnvNotConfirmedNotice(lang?: string): string;
-export declare function inheritEnvNoticeOf(intent: InheritEnvIntent, lang?: string): string | undefined;
+export declare function inheritEnvNotConfirmedNotice(lang?: UiLanguage | (string & {})): string;
+export declare function inheritEnvNoticeOf(intent: InheritEnvIntent, lang?: UiLanguage | (string & {})): string | undefined;

package/dist/inheritEnvCapability.js

@@ -1,6 +1,9 @@
 import { engineCapValue } from './engineCapsCache.js';
+import { isUiLanguage } from './env/uiLanguage.js';
 import { engineWireTarget } from './engineWireTarget.js';
+import { msg, renderMessage } from './i18n/translate.js';
 const OWN_CREDENTIALS_WITHHELD_KEY = 'inherit_env.own_credentials_withheld';
+const OWN_CREDENTIAL_VALUES_WITHHELD_KEY = 'inherit_env.own_credential_values_withheld';
 const CONFIRMED = Object.freeze({ kind: 'confirmed' });
 const ABSENT = Object.freeze({ kind: 'absent' });
 const UNREADABLE = Object.freeze({ kind: 'unreadable' });
@@ -23,9 +26,9 @@ function shapeOf(v) {
             return 'other';
     }
 }
-export function observedInheritEnvOwnCredentialsWithheld(baseUrl = engineWireTarget()?.baseUrl) {
+function inheritEnvWordReading(baseUrl, key) {
     try {
-        const slot = engineCapValue(typeof baseUrl === 'string' ? baseUrl : undefined, OWN_CREDENTIALS_WITHHELD_KEY);
+        const slot = engineCapValue(typeof baseUrl === 'string' ? baseUrl : undefined, key);
         switch (slot.kind) {
             case 'unobserved':
                 return UNOBSERVED;
@@ -43,6 +46,12 @@ export function observedInheritEnvOwnCredentialsWithheld(baseUrl = engineWireTar
         return UNOBSERVED;
     }
 }
+export function observedInheritEnvOwnCredentialsWithheld(baseUrl = engineWireTarget()?.baseUrl) {
+    return inheritEnvWordReading(baseUrl, OWN_CREDENTIALS_WITHHELD_KEY);
+}
+export function observedInheritEnvOwnCredentialValuesWithheld(baseUrl = engineWireTarget()?.baseUrl) {
+    return inheritEnvWordReading(baseUrl, OWN_CREDENTIAL_VALUES_WITHHELD_KEY);
+}
 const ALL = Object.freeze({ send: 'all' });
 const omit = (reason) => Object.freeze({ send: 'omit', reason });
 function fieldOf(input, key) {
@@ -84,10 +93,8 @@ export function inheritEnvIntentOf(input) {
         return omit('identity_unverified');
     return ALL;
 }
-const NOT_CONFIRMED_SENTENCE_EN = 'The engine has not confirmed that it withholds its own credentials from tool shells, so the tool shell gets a filtered environment (credential-looking variables such as GH_TOKEN are omitted) until the engine is upgraded.';
 export function inheritEnvNotConfirmedNotice(lang) {
-    void lang;
-    return NOT_CONFIRMED_SENTENCE_EN;
+    return renderMessage(msg('session.inheritEnv.notConfirmed'), isUiLanguage(lang) ? lang : undefined);
 }
 export function inheritEnvNoticeOf(intent, lang) {
     try {

package/dist/inheritEnvWire.d.ts

@@ -1,3 +1,4 @@
+import type { UiLanguage } from './env/uiLanguage.js';
 import { type InheritEnvWord, type TaskRequestLike } from './request/taskRequest.js';
 export type InheritEnvWithheldCause = 'server_version_unknown';
 export interface InheritEnvWithheld {
@@ -11,9 +12,9 @@ export interface InheritEnvDeclaration {
     readonly withheld?: InheritEnvWithheld;
 }
 export declare function inheritEnvDeclaration(word: unknown, serverVersion: string | undefined): InheritEnvDeclaration;
-export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld): string;
+export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld, lang?: UiLanguage): string;
 export interface InheritEnvRefusalDetail {
     readonly code: string;
 }
 export declare function inheritEnvRefusalFromError(err: unknown, sentRequest: TaskRequestLike | undefined): InheritEnvRefusalDetail | null;
-export declare function inheritEnvRefusalContent(_detail: InheritEnvRefusalDetail): string;
+export declare function inheritEnvRefusalContent(_detail: InheritEnvRefusalDetail, lang?: UiLanguage): string;

package/dist/inheritEnvWire.js

@@ -1,6 +1,8 @@
+import { msg, renderMessage } from './i18n/translate.js';
 import { INHERIT_ENV_WORDS, isInheritEnvWord } from './request/taskRequest.js';
-import { settingsPermissionBucketRefusalFromError } from './wireRefusalCopy.js';
+import { fieldLimitRefusalFromError } from './wireRefusalCopy.js';
 import { engineVersionTier } from './supportFloor.js';
+import { guardedRead, readOwnDataValue } from './ownKey.js';
 const EMPTY_DECLARATION = Object.freeze({ field: Object.freeze({}) });
 export function inheritEnvDeclaration(word, serverVersion) {
     if (word === undefined || word === null)
@@ -14,12 +16,15 @@ export function inheritEnvDeclaration(word, serverVersion) {
 }
 const WITHHELD_NOTICES = Object.freeze({
     server_version_unknown: Object.freeze({
-        all: "Not sent with this request: the engine's version is not known yet, and an engine that does not know the setting that lets the shell inherit this machine's whole environment refuses the whole request, so it was held back; this run's shell gets the default environment, with credential-like variables removed, and on an engine that does know the setting, leaving it out also clears an earlier whole-environment choice for this session.",
-        scrub: "Not sent with this request: the engine's version is not known yet, so the default-environment setting was left out; that has the same effect, because leaving it out also gives this run the default environment (credential-like variables removed).",
+        all: 'session.inheritEnv.withheld.all',
+        scrub: 'session.inheritEnv.withheld.scrub',
     }),
 });
-const WITHHELD_UNKNOWN_NOTICE = 'Not sent with this request: the shell-environment setting was held back for a reason this version does not recognize.';
-export function inheritEnvWithheldNotice(withheld) {
+const WITHHELD_UNKNOWN_NOTICE = 'session.inheritEnv.withheld.unknown';
+export function inheritEnvWithheldNotice(withheld, lang) {
+    return renderMessage(msg(inheritEnvWithheldKey(withheld)), lang);
+}
+function inheritEnvWithheldKey(withheld) {
     try {
         if (typeof withheld !== 'object' || withheld === null)
             return WITHHELD_UNKNOWN_NOTICE;
@@ -37,12 +42,7 @@ const FIELD_INVALID = 'request.field_invalid';
 function readGuarded(o, key) {
     if (typeof o !== 'object' || o === null)
         return undefined;
-    try {
-        return o[key];
-    }
-    catch {
-        return undefined;
-    }
+    return guardedRead(() => readOwnDataValue(o, key));
 }
 export function inheritEnvRefusalFromError(err, sentRequest) {
     try {
@@ -50,7 +50,7 @@ export function inheritEnvRefusalFromError(err, sentRequest) {
             return null;
         if (readGuarded(err, 'errorCode') !== FIELD_INVALID)
             return null;
-        if (settingsPermissionBucketRefusalFromError(err) !== null)
+        if (fieldLimitRefusalFromError(err) !== null)
             return null;
         return Object.freeze({ code: FIELD_INVALID });
     }
@@ -58,8 +58,6 @@ export function inheritEnvRefusalFromError(err, sentRequest) {
         return null;
     }
 }
-const REFUSAL_NOT_ACCEPTED = 'The engine refused this request as invalid, under a refusal code that many different request fields share · ' +
-    "This request asked for the shell to inherit this machine's whole environment, which the engine accepts only when tools run directly on its own machine and the request belongs to a session; if that is what it refused, send it again without that setting (or with the default)";
-export function inheritEnvRefusalContent(_detail) {
-    return REFUSAL_NOT_ACCEPTED;
+export function inheritEnvRefusalContent(_detail, lang) {
+    return renderMessage(msg('session.inheritEnv.refusal'), lang);
 }

package/dist/injectionLaneNotice.d.ts

@@ -0,0 +1,5 @@
+import type { UiLanguage } from './env/uiLanguage.js';
+import type { ExecutionLaneReading } from './executionLaneCapability.js';
+export declare const INJECTION_SOURCES: readonly ["stdio_mcp", "credentialed_mcp", "task_hooks"];
+export type InjectionSource = (typeof INJECTION_SOURCES)[number];
+export declare function injectionLaneNotice(lane: ExecutionLaneReading, sources: readonly InjectionSource[], lang?: UiLanguage): string | undefined;

package/dist/injectionLaneNotice.js

@@ -0,0 +1,46 @@
+import { capForDisplay } from './fleetTaskDesc.js';
+import { msg, renderMessage } from './i18n/translate.js';
+export const INJECTION_SOURCES = Object.freeze(['stdio_mcp', 'credentialed_mcp', 'task_hooks']);
+const LANE_WORD_MAX = 40;
+const ITEM_KEYS = Object.freeze({
+    stdio_mcp: 'notice.injectionLane.item.stdioMcp',
+    credentialed_mcp: 'notice.injectionLane.item.credentialedMcp',
+    task_hooks: 'notice.injectionLane.item.taskHooks',
+});
+function remoteLaneWordOf(lane) {
+    try {
+        if (typeof lane !== 'object' || lane === null || lane.kind !== 'present')
+            return undefined;
+        const view = lane.view;
+        if (typeof view !== 'object' || view === null)
+            return undefined;
+        if (view.toolsOnThisHost !== false)
+            return undefined;
+        if (view.isolatedAbsent === 'no_hands' || view.provider === 'in-process')
+            return undefined;
+        if (typeof view.provider !== 'string' || view.provider === '')
+            return undefined;
+        return capForDisplay(view.provider, LANE_WORD_MAX);
+    }
+    catch {
+        return undefined;
+    }
+}
+export function injectionLaneNotice(lane, sources, lang) {
+    const word = remoteLaneWordOf(lane);
+    if (word === undefined)
+        return undefined;
+    let present;
+    try {
+        present = new Set(Array.isArray(sources) ? sources : []);
+    }
+    catch {
+        return undefined;
+    }
+    const items = INJECTION_SOURCES.filter((s) => present.has(s));
+    if (items.length === 0)
+        return undefined;
+    const separator = renderMessage(msg('notice.injectionLane.itemSeparator'), lang);
+    const list = items.map((s) => renderMessage(msg(ITEM_KEYS[s]), lang)).join(separator);
+    return renderMessage(msg('notice.injectionLane.sentence', { lane: word, items: list }), lang);
+}

package/dist/interactiveHalt.js

@@ -3,17 +3,28 @@ export const RUN_LEVEL_STOP_ERROR_CODES = Object.freeze([
 ]);
 const RUN_LEVEL_STOP_STATUS = 409;
 function enginePointsToRunLevelStop(outcome) {
-    const o = outcome;
-    return (o?.kind === 'refused' &&
-        o.status === RUN_LEVEL_STOP_STATUS &&
-        typeof o.errorCode === 'string' &&
-        RUN_LEVEL_STOP_ERROR_CODES.includes(o.errorCode));
+    const code = ownDataSlot(outcome, 'errorCode');
+    return (ownDataSlot(outcome, 'kind') === 'refused' &&
+        ownDataSlot(outcome, 'status') === RUN_LEVEL_STOP_STATUS &&
+        typeof code === 'string' &&
+        RUN_LEVEL_STOP_ERROR_CODES.includes(code));
+}
+function ownDataSlot(o, key) {
+    try {
+        if (typeof o !== 'object' || o === null)
+            return undefined;
+        const d = Object.getOwnPropertyDescriptor(o, key);
+        return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 export function planInteractiveHalt(input) {
     const outcome = input.interruptOutcome;
     if (outcome === undefined || outcome === null)
         return { action: 'interrupt', reason: 'first-shot' };
-    const kind = outcome.kind;
+    const kind = ownDataSlot(outcome, 'kind');
     if (kind === 'halted')
         return { action: 'none', reason: 'halted' };
     if (kind === 'refused') {

package/dist/liveModelCatalog.d.ts

@@ -1,4 +1,5 @@
 import type { AgentClient } from '@sema-agent/sdk';
+import type { UiLanguage } from './env/uiLanguage.js';
 export interface LiveModelInfo {
     name: string;
     id?: string;
@@ -80,7 +81,7 @@ export type ModelCandidateRejectedReading = {
     readonly kind: 'unreadable';
 };
 export declare function modelCandidateRejectedOf(catalog?: LiveModelCatalog | null): ModelCandidateRejectedReading;
-export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading): string | undefined;
+export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading, lang?: UiLanguage): string | undefined;
 export interface RoutePairingVerdict {
     verdict: 'ok' | 'broken' | 'unknown';
     posture?: string;

package/dist/liveModelCatalog.js

@@ -1,4 +1,5 @@
 import { frozenJsonCopyOf, liveDefaultModelCopy, liveModelRowCopy } from './model/liveCatalogShape.js';
+import { msg, renderMessage } from './i18n/translate.js';
 let catalog = null;
 let refresher = null;
 export function setLiveModelCatalog(next) {
@@ -269,27 +270,32 @@ export function modelCandidateRejectedOf(catalog = getLiveModelCatalog()) {
     }
 }
 const CONFIG_DOMAIN_WORD = /^[a-z][a-z0-9_.-]{0,63}$/;
-export function modelCandidateRejectedContent(reading) {
+export function modelCandidateRejectedContent(reading, lang) {
     try {
         if (reading === null || typeof reading !== 'object' || reading.kind !== 'rejected')
             return undefined;
         const named = reading.domains.filter((w) => CONFIG_DOMAIN_WORD.test(w));
         const which = named.length > 0 && named.length === reading.domains.length ? ` (${named.join(', ')})` : '';
-        return `The deployment refused its most recent configuration change${which} and is still running on the configuration before it — models or settings added by that change are not in effect`;
+        return renderMessage(msg('model.catalog.candidateRejected', { which }), lang);
     }
     catch {
         return undefined;
     }
 }
-const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:keyless']);
-const ROUTE_PAIRING_BROKEN = new Set(['broken:credential_mismatch', 'broken:credential_missing']);
+const ROUTE_PAIRING_VERDICTS = Object.freeze({
+    'ok:per-model': 'ok',
+    'ok:paired': 'ok',
+    'ok:keyless': 'ok',
+    'broken:credential_mismatch': 'broken',
+    'broken:credential_missing': 'broken',
+    'broken:credential_origin_mismatch': 'broken',
+    'broken:credential_answer_conflict': 'broken',
+});
 export function routePairingVerdict(v) {
     if (typeof v !== 'string' || v.length === 0)
         return { verdict: 'unknown' };
-    if (ROUTE_PAIRING_OK.has(v))
-        return { verdict: 'ok', posture: v };
-    if (ROUTE_PAIRING_BROKEN.has(v))
-        return { verdict: 'broken', posture: v };
+    if (Object.hasOwn(ROUTE_PAIRING_VERDICTS, v))
+        return { verdict: ROUTE_PAIRING_VERDICTS[v], posture: v };
     return { verdict: 'unknown', posture: v };
 }
 const unreadableCatalog = (why) => Object.freeze({ kind: 'unreadable', why });

package/dist/mcpPanel.d.ts

@@ -1,6 +1,7 @@
 import type { AgentClient } from '@sema-agent/sdk';
 import { type WiringManifestMcpEntryView } from './adapter/downstream/eventToSdkMessage.js';
 import { type McpEngineLegHealth } from './mcpLiveness.js';
+import { type ScenarioRefusalReading } from './scenarioRefusal.js';
 export interface McpPanelServerView {
     name: string;
     status: string;
@@ -16,14 +17,22 @@ export interface McpPanelLastLegView {
     at: string;
     mcp: WiringManifestMcpEntryView[];
 }
-export interface McpPanelView {
+export interface McpPanelServersView {
     asOf: string;
+    lastLegMcp?: McpPanelLastLegView;
+    lastLegMcpUnreadable?: true;
     servers: McpPanelServerView[];
     degraded?: true;
+}
+export interface McpPanelRefusalView {
+    asOf: string;
     lastLegMcp?: McpPanelLastLegView;
     lastLegMcpUnreadable?: true;
+    scenarioRefusal: ScenarioRefusalReading;
 }
+export type McpPanelView = McpPanelServersView | McpPanelRefusalView;
 export declare function projectMcpPanel(body: unknown): McpPanelView | undefined;
+export declare function mcpPanelRefusalOf(view: McpPanelView | undefined): ScenarioRefusalReading | undefined;
 export declare function fetchMcpPanel(client: Pick<AgentClient, 'sessions'>, sessionId: string, opts?: {
     signal?: AbortSignal;
 }): Promise<McpPanelView | undefined>;