@sema-agent/client-core 0.98.0 → 0.99.0

package/dist/index.d.ts

@@ -16,10 +16,10 @@ export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
 export { engineRefOf, sameEngineRef, TRANSCRIPT_ROW_SIDECAR_KEYS } from './engineRowRef.js';
 export type { EngineRowRef, SameEngineRefVerdict, EngineBoundRun } from './engineRowRef.js';
 export { isReplayMarked } from './replayBody.js';
-export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE } from './eventLeg.js';
-export type { EventLeg, EventLegBindCause, EventLegBoundInfo, EventLegElicitationFrame, EventLegFrameInfo, EventLegHitlEnvelope, EventLegHitlPorts, EventLegIdleTriagePorts, EventLegKind, EventLegLiveSpec, EventLegOwnerPorts, EventLegPortName, EventLegPorts, EventLegQuestionFrame, EventLegRefusal, EventLegReport, EventLegRow, EventLegRunPorts, EventLegRunSpec, EventLegSpec, EventLegStage, EventLegStreamContext, EventLegStreamDecorator, EventLegTap, EventLegToolApprovalFrame, } from './eventLeg.js';
+export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE, approvalFrameContextOf } from './eventLeg.js';
+export type { ApprovalFrameContext, EventLeg, EventLegBindCause, EventLegBoundInfo, EventLegElicitationFrame, EventLegFrameInfo, EventLegHitlEnvelope, EventLegHitlPorts, EventLegIdleTriagePorts, EventLegKind, EventLegLiveSpec, EventLegOwnerPorts, EventLegPortName, EventLegPorts, EventLegQuestionFrame, EventLegRefusal, EventLegReport, EventLegRow, EventLegRunPorts, EventLegRunSpec, EventLegSpec, EventLegStage, EventLegStreamContext, EventLegStreamDecorator, EventLegTap, EventLegToolApprovalFrame, } from './eventLeg.js';
 export { frameBindingOf, inheritFrameBinding } from './frameBinding.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, subagentContentEventOf, } from './subagentContentStore.js';
 export type { BgTerminalFacts, SubagentContentEvent, SubagentContentItem, SubagentContentSnapshot, SubagentContentStoreConfig, SubagentOwnerRecord, SubagentOwnerSessionConflict, SubagentViewSlot, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
@@ -30,8 +30,10 @@ export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay,
 export type { AskQuestion, AskQuestionOption, QuestionAnswer, QuestionFrame, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
-export type { EngineCapState, EngineCapsLanding, EngineCapsProbeRotation, EngineCapValueState, } from './engineCapsCache.js';
+export * from './printModelStatus.js';
+export { __resetEngineCapsCacheForTests, engineCapNestedValue, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, invalidateEngineCapsAndReprobe, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export { onEngineCapsChange } from './engineCapsChange.js';
+export type { EngineCapState, EngineCapsChange, EngineCapsLanding, EngineCapsProbeRotation, EngineCapsReprobe, EngineCapValueState, } from './engineCapsCache.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -96,13 +98,13 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential, cleanUntrustedScalar } from './displayUntrusted.js';
 export type { DisplayUntrustedOptions, DisplayMark, DisplayMarkSpan, DisplayUntrustedMarked } from './displayUntrusted.js';
 export { isDiagnosticValueWord } from './displayUntrusted.js';
 export type * from './types/engineState.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
-export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type AssistantPreemptLike, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type PreemptOptions, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
+export { ControlRouter, ControlSafetyError, errCodes, steerBodyOf, steerRefusalAdviceOf, steeringRefusedBeforeEngine, type AssistantPreemptLike, type ControlClientLike, type ControlRouterOptions, type ControlRouterSteerOptions, type ControlSafetyCode, type ErrCodes, type PreemptOptions, type RunsResourceLike, type SteerBody, type SteerBodyInput, type SteerHostQueueFact, type SteerRefusalAdvice, type SteeringRefusedBeforeEngine, } from './controlRouter.js';
 export { preemptReceiptLine, type PreemptOutcome, type PreemptParkedStatus } from './preemptWire.js';
 export { readSteerReceipt, type SteerReceiptReading } from './steerReceipt.js';
 export * from './sseIdleTriage.js';
@@ -110,7 +112,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag, type SystemReminderOpenTagSpan } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export type { DelegationCapDisposition, ModelFallbackReason, OperatorGateRefusal, RunDeathVerdictCode, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
@@ -219,8 +221,13 @@ export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredP
 export type { PromptDeliveryLedger, PromptDeliveryRecord } from './promptDelivery.js';
 export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
 export type { UserAttachmentDescriptor, UserAttachmentNotebookCell } from './userAttachmentEnvelope.js';
-export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
-export type { HumanTurnInput, HumanTurnItem, HumanTurnAttachment, HumanTurnRider, HumanTurnMissing, HumanTurnCaps, HumanTurnEncoding, HumanTurnShare, HumanTurnSharePart, HumanTurnDegraded, HumanTurnDelivered, } from './humanTurn.js';
+export { encodeHumanTurn, deliveredUuidsOf, imageSentOnUnknownVision } from './humanTurn.js';
+export type { HumanTurnInput, HumanTurnItem, HumanTurnAttachment, HumanTurnRider, HumanTurnMissing, HumanTurnCaps, HumanTurnEncoding, HumanTurnShare, HumanTurnSharePart, HumanTurnDegraded, HumanTurnDelivered, HumanTurnNotice, } from './humanTurn.js';
+export type { UserAttachment } from '@sema-agent/sdk';
+export { observedUserAttachmentSeat, projectUserAttachmentSeatCapability, userAttachmentSeatAdmits } from './userAttachmentSeat.js';
+export type { UserAttachmentSeatReading, UserAttachmentSeatPresent, UserAttachmentSeatLimits } from './userAttachmentSeat.js';
+export { scenarioRefusalFromError, scenarioRefusalContent } from './scenarioRefusal.js';
+export type { ScenarioRefusalReading } from './scenarioRefusal.js';
 export { projectEngineSessionMessages } from './engineSessionMessages.js';
 export type { EngineHistoryProjection, EngineHistoryProjectionOpts, EngineHistoryMessage, EngineHistoryMessageBody, EngineHistoryBlock, EngineHistoryTextBlock, EngineHistoryThinkingBlock, EngineHistoryToolUseBlock, EngineHistoryToolResultBlock, EngineHistoryMediaBlock, EngineHistoryOpaqueBlock, EngineHistoryBase64Source, EngineHistoryJson, EngineHistorySkipped, } from './engineSessionMessages.js';
 export * from './resumeRefusalCopy.js';
@@ -235,7 +242,9 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, } from './pluginHooksWire.js';
+export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, userPromptSubmitExecutorOf, type EngineFiredHookEvent, type PluginHookDisposition, type PluginHookReason, type PluginHookExclusionReason, type SettingsHookDropReason, type HookSettingsSource, type PluginHookKey, type PluginHookVerdict, type PluginHookExclusion, type SettingsHookDrop, type SettingsHookVerdict, type SettingsHookExclusion, type HooksWireEngineFacts, type PluginHookReaderState, type HooksWirePlan, type HooksWirePlanOptions, type SettingsHooksSalvageRow, type PluginHookModuleVerdict, type SessionHookVerdict, } from './pluginHooksWire.js';
+export { salvageSettingsHooksEntries, settingsHooksSalvageNotice, type HooksSalvage, type HooksSalvageDrop, type HooksSalvageRejection, type HooksSalvageOutcome, type HooksSalvageDropCode, type HooksSalvageRejectionCode, } from './settingsHooksSalvage.js';
+export { hostSettingsSelfCheck, HostSettingsRefused, HOST_SUPPLIED_KEYS, HOST_SETTING_CAUSES, HOST_SETTING_DISPOSITIONS, type HostSuppliedKey, type HostSettingCause, type HostSettingDisposition, type HostSettingPlane, type HostSettingNoticeId, type HostSettingRow, type HostSettingNotice, type HostTurnVerdict, type HostTurnSettingsSources, type HostTurnSettingsInput, type HostSettingsCarried, type HostTurnSettings, } from './hostTurnSettings.js';
 export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export { hookMatcherVerdict } from './hookMatcherVerdict.js';
 export type { HookMatcherVerdict, HookMatcherUnjudgedReason, HookMatcherRefusedReason } from './hookMatcherVerdict.js';
@@ -245,7 +254,7 @@ export { READ_DENY_BUILTIN_TIERS, READ_DENY_DEFAULT_TIERS, parseReadDenyBuiltinT
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
-export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
+export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
 export type { ActiveGate, ApprovalsResourceLike, AskAnswer, AssistantResourceLike, DecideOperationEnd, DecideOperationEvent, DecideOperationIdentity, DecideOperationObserver, DecideOperationSpan, DecideOperationStart, FindPendingOutcome, GateCurrentPending, GatePrompt, HitlBackendDenyDecision, HitlBridgeOptions, HitlCanUseToolFn, HitlClientLike, HitlDecideDenyOutcome, HitlPermissionDecisionLike, HitlSafetyCode, PlanReviewModeAfter, PlanReviewOutcome, } from './hitl/hitlBridge.js';
 export * from './hitl/suspendedReopen.js';
 export { APPROVAL_RESOLUTION_LANES, APPROVAL_NOT_SENT_CAUSES, APPROVAL_UNSETTLED_CAUSES, APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, isApprovalDecided, approvalNotSentCause, approvalUnsettledCause, approvalResolutionDetail, type ApprovalResolution, type ApprovalResolutionDecided, type ApprovalResolutionNotSent, type ApprovalResolutionUnsettled, type ApprovalResolutionLane, type ApprovalNotSentCause, type ApprovalUnsettledCause, type ApprovalDenyFacts, } from './hitl/approvalResolution.js';
@@ -303,6 +312,12 @@ export type { EngineEnvView, EngineEnvGroupDecl, EngineEnvSourcingInput, EngineE
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
+export type { DevicesFace, DevicesFaceInput, DevicesFaceUnavailableWhy } from './devicesFace.js';
+export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
+export type { CloudLoginFailureContext, EngineTargetReading, EngineTargetWatch } from './engineTargetSeat.js';
+export { keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
+export type { OnboardJsonObject, OnboardPlanEntry, OnboardProbeBodyReader, OnboardProbeDeps, OnboardProbeFetch, OnboardProbeRequestInit, OnboardProbeResponse, OnboardProbeTarget, OnboardWritePlan, OnboardWritePlanInput, OnboardWriteVerdict, } from './model/onboardJudgement.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
@@ -334,7 +349,8 @@ export { engineCredentialRequirementOf } from './engineCredentialRequirement.js'
 export type { EngineProbeAnswer, EngineCredentialNeed } from './engineCredentialRequirement.js';
 export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
 export type { CredentialAttachWord, CredentialConsent, CredentialFactName, CredentialFacts, CredentialProvenance, CredentialSidecarOwnership, CredentialTargetKind, CredentialTargetProvenance, } from './credentialProvenance.js';
-export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { canonicalSessionIdOf, isSessionIdPathSegment, sessionIdRefusalOf } from './sessionIdSegment.js';
+export type { SessionIdRefusal, SessionIdRefusalWhy } from './sessionIdSegment.js';
 export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
 export type { CutForDisplayOptions, CutForDisplayResult, NoticePresentationAudience, NoticeOutlet, NoticeOccurrence, NoticeSeatClass, NoticeDeployment, NoticePresentationFacts, OutletKind, OutletReachability, OutletReachabilityContext, OutletRenderingPlan, NoticePrintCarrier, NoticePrintLineInput, NoticePrintLineResult, } from './noticePresentation.js';
 export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';

package/dist/index.js

@@ -13,9 +13,9 @@ export * from './sdkWireTransit.js';
 export { SEMA_SEGMENT_ID_KEY } from './adapt/textStream.js';
 export { engineRefOf, sameEngineRef, TRANSCRIPT_ROW_SIDECAR_KEYS } from './engineRowRef.js';
 export { isReplayMarked } from './replayBody.js';
-export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE } from './eventLeg.js';
+export { composeEventLeg, EVENT_LEG_KINDS, EVENT_LEG_TABLE, approvalFrameContextOf } from './eventLeg.js';
 export { frameBindingOf, inheritFrameBinding } from './frameBinding.js';
-export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, } from './subagentContentStore.js';
+export { __resetSubagentContentStoreConfigForTests, __resetSubagentOwnerLedgerForTests, clearSubagentContent, coerceOutput, configureSubagentContentStore, getBgParentRun, getBgParentRunOwner, getBgTerminalFacts, getSubagentContentSnapshot, isOwnEngineRun, parentToolCallIdOf, planSubagentViewSlots, publishSubagentContentEvent, pushSubagentLocalEcho, recordBgParentRun, recordOwnEngineRun, recordSubagentOwner, recordSubagentOwnerFromProgress, registerSubagentAlias, settleSubagentContent, SUBAGENT_CONTENT_STORE_DEFAULTS, subagentContentStoreConfig, subagentOwnerSessionConflicts, subscribeSubagentContent, subagentContentEventOf, } from './subagentContentStore.js';
 export * from './engineAgentPanelStore.js';
 export * from './engineAgentAbsence.js';
 export * from './fleetAgentPanelProjection.js';
@@ -23,7 +23,9 @@ export { reducePanelFrame, createPanelReduceState, PANEL_DELTA_OPS } from './pan
 export { _resetLiveQuestionStore, hasLocalQuestionResponder, hasQuestionOverlay, hasQuestionOverlayFor, onQuestionFrame, onQuestionFrameFor, publishQuestionFrame, publishQuestionFrameFor, registerLocalQuestionResponder, respondToQuestion, setQuestionRespond, } from './liveQuestionStore.js';
 export * from './engineInlineTaskStats.js';
 export * from './printToolResultFrame.js';
-export { __resetEngineCapsCacheForTests, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export * from './printModelStatus.js';
+export { __resetEngineCapsCacheForTests, engineCapNestedValue, engineCapState, engineCapString, engineCapsGeneration, engineCapsLandingOf, engineCapsSettled, engineCapTrue, engineCapValue, invalidateEngineCaps, invalidateEngineCapsAndReprobe, kickEngineCapsProbe, rotateEngineCapsProbe, } from './engineCapsCache.js';
+export { onEngineCapsChange } from './engineCapsChange.js';
 export * from './sqlEngineCapability.js';
 export * from './writeProtectionCapability.js';
 export * from './webSearchBackendCapability.js';
@@ -81,7 +83,7 @@ export * from './modelCapabilityProbe.js';
 export * from './classifierStatus.js';
 export * from './engineToolLabelStore.js';
 export * from './fleetTaskDesc.js';
-export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential } from './displayUntrusted.js';
+export { displayUntrusted, displayUntrustedMarks, displayConfiguredUrl, queryCarriesCredential, cleanUntrustedScalar } from './displayUntrusted.js';
 export { isDiagnosticValueWord } from './displayUntrusted.js';
 export * from './hostEnv.js';
 export * from './unrefTimer.js';
@@ -93,7 +95,7 @@ export * from './engineWireSdk.js';
 export * from './classifierVerdictWire.js';
 export { stripSystemReminderBlocks, unwrapSystemReminder } from './systemReminderTag.js';
 export { findSystemReminderOpenTag } from './systemReminderTag.js';
-export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STOP_CONFLICT_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
+export { ACTIVE_RUN_BUSY_ERROR_CODE, APPROVAL_EXPIRED, ASK_GONE, asModelFallbackReason, CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_OPERATOR_PRINCIPALS_REQUIRED, CAPABILITY_SELF_ORCHESTRATION_REQUIRED, CONFIG_AGENT_UNKNOWN_TOOL, CONFIG_DELEGATION_ENTRY_CAPS, CONFIG_IMAGE_INVALID, CONFIG_LEGACY_TOOL_NAME, CONFIG_LIMIT_INVALID, CONFIG_LIMIT_UNKNOWN_KEY, CONFIG_MEMORY_PROJECT_KEY_SPELLING, CONFIG_MEMORY_WRITE_SCOPE_MISMATCH, CONFIG_OUTPUT_STYLE_INVALID, CONFIG_STRATEGY_FIND_LIMIT_INVALID, CONFIG_STRATEGY_MAX_SIZE_INVALID, CONFLICT_IDEMPOTENCY_PAYLOAD_MISMATCH, CORRUPT_SESSION_ERROR_CODE, DECIDE_CLAIM_LOST, DECIDE_GATE_MOVED, DECIDE_NOT_PARKED, DECIDE_PARK_MOVED_CODES, DECIDE_WORKFLOW_HOST_UNKNOWN, DECIDE_WORKFLOW_LANE_CODES, DECIDE_WORKFLOW_PARK_FORKED, DECIDE_WORKFLOW_PARKS_UNREADABLE, DECIDE_WORKFLOW_REMEMBER_UNSUPPORTED, DELEGATION_CAP_CODES, DELEGATION_CONCURRENCY_CAP, DELEGATION_SESSION_CAP, delegationCapDispositionOf, DRAINING_ERROR_CODE, ENGINE_STOP_REASONS, engineStopReasonToCc, ENV_LIFETIME_EXPIRED, FLEET_LEASE_UNAVAILABLE, GATE_PARKED_ERROR_CODE, idempotencyPayloadMismatchContent, imageInvalidFailureNoteOf, isConfigRefusalCode, isCorruptSessionCode, isDecideParkMovedCode, isDelegationCapCode, isIdempotencyPayloadMismatchCode, isInterruptedToolEndCode, isLimitsExceededCode, isRewindFamilyCode, isRulesRefusalCode, isStatusDerivedCoarseCode, isWorkflowParkRefusalCode, LIMITS_MAX_COST_EXCEEDED, LIMITS_MAX_TOKENS_EXCEEDED, LIMITS_MAX_TURNS_EXCEEDED, LIMITS_MAX_WALLTIME_EXCEEDED, MCP_SERVER_REVOKED, MODEL_FALLBACK_INHERIT_NO_TIER_BINDING, operatorGateRefusalContent, OUTPUT_INVALID, PARKED_RESUME_STARTUP_FAILED, REQUEST_AUTONOMY_LANE_REFUSED, RESUME_AT_ERROR_CODE_PREFIX, RESUME_CONTEXT_UNAVAILABLE, RESUME_ENV_FAILED, RESUME_PLACEMENT_MISMATCH, RESUME_POLICY_FOLD_CODE, RESUME_PREFLIGHT_REJECTED, RESUME_REOPEN_CODES, RESUME_RETRY_LATER_CODES, RESUME_TOOL_CONTRACT_MISMATCH, RESUME_TOOL_UNAVAILABLE, RESUME_USAGE_WINDOW_EXHAUSTED, REWIND_ERROR_CODE_PREFIXES, RUN_DEATH_VERDICT_CODES, RUN_ORPHANED, RUN_STALLED, runDeathVerdictNoteOf, SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE, SCENARIO_NOT_ALLOWED_ERROR_CODE, STATUS_DERIVED_COARSE_CODES, STREAM_MAX_DURATION, TOOL_END_INTERRUPTED_NEVER_STARTED, TOOL_END_INTERRUPTED_OUTCOME_UNKNOWN, USAGE_WINDOW_EXHAUSTED, USER_ATTACHMENT_INVALID_ERROR_CODE, USER_INVOKED_SKILL_UNKNOWN_ERROR_CODE, WORKFLOW_PARK_REFUSAL_CODES, } from './engineErrorCodes.js';
 export * from './agentsWireCaps.js';
 export { engineToolDirectoryOf } from './engineToolDirectory.js';
 export * from './attachmentsWireCaps.js';
@@ -187,7 +189,9 @@ export { toolHistoryBadTurnSentence } from './toolHistoryBadTurn.js';
 export { deviceFlowPollingPlan } from './deviceFlowPolling.js';
 export { createPromptDeliveryLedger, promptKnownUndelivered, withoutUndeliveredPrompts } from './promptDelivery.js';
 export { mintUserAttachmentEnvelope } from './userAttachmentEnvelope.js';
-export { encodeHumanTurn, deliveredUuidsOf } from './humanTurn.js';
+export { encodeHumanTurn, deliveredUuidsOf, imageSentOnUnknownVision } from './humanTurn.js';
+export { observedUserAttachmentSeat, projectUserAttachmentSeatCapability, userAttachmentSeatAdmits } from './userAttachmentSeat.js';
+export { scenarioRefusalFromError, scenarioRefusalContent } from './scenarioRefusal.js';
 export { projectEngineSessionMessages } from './engineSessionMessages.js';
 export * from './resumeRefusalCopy.js';
 export * from './wireRefusalCopy.js';
@@ -200,7 +204,9 @@ export * from './detachWire.js';
 export * from './workflowMonitor.js';
 export * from './workflowClient.js';
 export * from './hooksWireCaps.js';
-export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, } from './pluginHooksWire.js';
+export { ENGINE_FIRED_HOOK_EVENTS, PLUGIN_HOOK_DISPOSITIONS, PLUGIN_HOOK_REASONS, PLUGIN_HOOK_EXCLUSION_REASONS, SETTINGS_HOOK_DROP_REASONS, isEngineFiredHookEvent, pluginHookVerdictOf, pluginHookReasonText, settingsHookDropText, pluginHookExecutorLabel, hooksNotRunNotice, settingsHooksKeptLocally, userPromptSubmitExecutorOf, } from './pluginHooksWire.js';
+export { salvageSettingsHooksEntries, settingsHooksSalvageNotice, } from './settingsHooksSalvage.js';
+export { hostSettingsSelfCheck, HostSettingsRefused, HOST_SUPPLIED_KEYS, HOST_SETTING_CAUSES, HOST_SETTING_DISPOSITIONS, } from './hostTurnSettings.js';
 export { hookToolAliasesOf, canonicalHookToolName } from './hookToolAliases.js';
 export { hookMatcherVerdict } from './hookMatcherVerdict.js';
 export { ASK_EVIDENCE_ABSENCE_VALUES, SYSTEM_INJECTION_PRIORITIES } from './engineClosedSets.js';
@@ -209,7 +215,7 @@ export { READ_DENY_BUILTIN_TIERS, READ_DENY_DEFAULT_TIERS, parseReadDenyBuiltinT
 export * from './liveInitToolFace.js';
 export * from './printInitToolFace.js';
 export * from './model/providerPresets.js';
-export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
+export { __setDecideTimeoutRetryBudgetForTests, backendDeny, DecideTransportRetryExhaustedError, findPendingForTask, HitlBridge, HitlSafetyError, isPlanReviewModeAfter, makeHitlCanUseTool, MAX_DENY_REASON_CHARS, PLAN_REVIEW_MODE_AFTER_WORDS, readDecideCurrentPending, readWireErrorCode, } from './hitl/hitlBridge.js';
 export * from './hitl/suspendedReopen.js';
 export { APPROVAL_RESOLUTION_LANES, APPROVAL_NOT_SENT_CAUSES, APPROVAL_UNSETTLED_CAUSES, APPROVAL_NOTE_RETRACTED_DETAIL, APPROVAL_NOTE_EDIT_REFUSED_DETAIL, isApprovalDecided, approvalNotSentCause, approvalUnsettledCause, approvalResolutionDetail, } from './hitl/approvalResolution.js';
 export { ENGINE_ABORT_TOOL_RESULT } from './hitl/frameRouter.js';
@@ -258,6 +264,9 @@ export { resolveEngineEnvSourcing, engineEnvView } from './engineEnvSourcing.js'
 export * from './compensations.js';
 export * from './request/printNotification.js';
 export * from './seatContract.js';
+export { devicesFaceOf, devicesWritesAllowed, devicesFaceDetail } from './devicesFace.js';
+export { cloudLoginFailureOf, cloudLoginFailureText, engineTargetRefusalText, seatMcpReadingOf, watchEngineTarget } from './engineTargetSeat.js';
+export { keyEnvNameForEntry, onboardBaseUrlProblem, onboardRefusalText, onboardWritePlan, onboardWriteVerdict, poolEntryNameOf, probeModelEndpoint, } from './model/onboardJudgement.js';
 export * from './agentSession/contract.js';
 export * from './agentSession/backgroundView.js';
 export { readAssistantInbox } from './assistantInbox.js';
@@ -282,6 +291,6 @@ export { createMissLedger, createTranslator, DATA_FACE_LANGUAGE, msg, renderMess
 export * from './ruleRemovalConsequence.js';
 export { engineCredentialRequirementOf } from './engineCredentialRequirement.js';
 export { credentialProvenance, CREDENTIAL_ATTACH_WORDS } from './credentialProvenance.js';
-export { isSessionIdPathSegment } from './sessionIdSegment.js';
+export { canonicalSessionIdOf, isSessionIdPathSegment, sessionIdRefusalOf } from './sessionIdSegment.js';
 export { cutForDisplay, noticePresentationFacts, NOTICE_SEAT_CLASS, noticeSeatClassOf, OUTLET_KINDS, outletReachable, planOutletRendering, NOTICE_FULL_TEXT_CAP, noticePrintLine, } from './noticePresentation.js';
 export { printPermissionOutcomeOf, PRINT_PERMISSION_OUTCOME_FORMS } from './printPermissionOutcome.js';

package/dist/inheritEnvCapability.d.ts

@@ -1,3 +1,4 @@
+import { type UiLanguage } from './env/uiLanguage.js';
 import type { RequestLane } from './request/taskRequest.js';
 export type InheritEnvValueShape = 'false' | 'string' | 'number' | 'null' | 'array' | 'object' | 'other';
 export type InheritEnvOwnCredentialsReading = {
@@ -27,5 +28,5 @@ export interface InheritEnvIntentInput {
     readonly serviceIdentityVerified: boolean;
 }
 export declare function inheritEnvIntentOf(input: InheritEnvIntentInput): InheritEnvIntent;
-export declare function inheritEnvNotConfirmedNotice(lang?: string): string;
-export declare function inheritEnvNoticeOf(intent: InheritEnvIntent, lang?: string): string | undefined;
+export declare function inheritEnvNotConfirmedNotice(lang?: UiLanguage | (string & {})): string;
+export declare function inheritEnvNoticeOf(intent: InheritEnvIntent, lang?: UiLanguage | (string & {})): string | undefined;

package/dist/inheritEnvCapability.js

@@ -1,5 +1,7 @@
 import { engineCapValue } from './engineCapsCache.js';
+import { isUiLanguage } from './env/uiLanguage.js';
 import { engineWireTarget } from './engineWireTarget.js';
+import { msg, renderMessage } from './i18n/translate.js';
 const OWN_CREDENTIALS_WITHHELD_KEY = 'inherit_env.own_credentials_withheld';
 const CONFIRMED = Object.freeze({ kind: 'confirmed' });
 const ABSENT = Object.freeze({ kind: 'absent' });
@@ -84,10 +86,8 @@ export function inheritEnvIntentOf(input) {
         return omit('identity_unverified');
     return ALL;
 }
-const NOT_CONFIRMED_SENTENCE_EN = 'The engine has not confirmed that it withholds its own credentials from tool shells, so the tool shell gets a filtered environment (credential-looking variables such as GH_TOKEN are omitted) until the engine is upgraded.';
 export function inheritEnvNotConfirmedNotice(lang) {
-    void lang;
-    return NOT_CONFIRMED_SENTENCE_EN;
+    return renderMessage(msg('session.inheritEnv.notConfirmed'), isUiLanguage(lang) ? lang : undefined);
 }
 export function inheritEnvNoticeOf(intent, lang) {
     try {

package/dist/inheritEnvWire.d.ts

@@ -1,3 +1,4 @@
+import type { UiLanguage } from './env/uiLanguage.js';
 import { type InheritEnvWord, type TaskRequestLike } from './request/taskRequest.js';
 export type InheritEnvWithheldCause = 'server_version_unknown';
 export interface InheritEnvWithheld {
@@ -11,9 +12,9 @@ export interface InheritEnvDeclaration {
     readonly withheld?: InheritEnvWithheld;
 }
 export declare function inheritEnvDeclaration(word: unknown, serverVersion: string | undefined): InheritEnvDeclaration;
-export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld): string;
+export declare function inheritEnvWithheldNotice(withheld: InheritEnvWithheld, lang?: UiLanguage): string;
 export interface InheritEnvRefusalDetail {
     readonly code: string;
 }
 export declare function inheritEnvRefusalFromError(err: unknown, sentRequest: TaskRequestLike | undefined): InheritEnvRefusalDetail | null;
-export declare function inheritEnvRefusalContent(_detail: InheritEnvRefusalDetail): string;
+export declare function inheritEnvRefusalContent(_detail: InheritEnvRefusalDetail, lang?: UiLanguage): string;

package/dist/inheritEnvWire.js

@@ -1,6 +1,8 @@
+import { msg, renderMessage } from './i18n/translate.js';
 import { INHERIT_ENV_WORDS, isInheritEnvWord } from './request/taskRequest.js';
 import { settingsPermissionBucketRefusalFromError } from './wireRefusalCopy.js';
 import { engineVersionTier } from './supportFloor.js';
+import { guardedRead, readOwnDataValue } from './ownKey.js';
 const EMPTY_DECLARATION = Object.freeze({ field: Object.freeze({}) });
 export function inheritEnvDeclaration(word, serverVersion) {
     if (word === undefined || word === null)
@@ -14,12 +16,15 @@ export function inheritEnvDeclaration(word, serverVersion) {
 }
 const WITHHELD_NOTICES = Object.freeze({
     server_version_unknown: Object.freeze({
-        all: "Not sent with this request: the engine's version is not known yet, and an engine that does not know the setting that lets the shell inherit this machine's whole environment refuses the whole request, so it was held back; this run's shell gets the default environment, with credential-like variables removed, and on an engine that does know the setting, leaving it out also clears an earlier whole-environment choice for this session.",
-        scrub: "Not sent with this request: the engine's version is not known yet, so the default-environment setting was left out; that has the same effect, because leaving it out also gives this run the default environment (credential-like variables removed).",
+        all: 'session.inheritEnv.withheld.all',
+        scrub: 'session.inheritEnv.withheld.scrub',
     }),
 });
-const WITHHELD_UNKNOWN_NOTICE = 'Not sent with this request: the shell-environment setting was held back for a reason this version does not recognize.';
-export function inheritEnvWithheldNotice(withheld) {
+const WITHHELD_UNKNOWN_NOTICE = 'session.inheritEnv.withheld.unknown';
+export function inheritEnvWithheldNotice(withheld, lang) {
+    return renderMessage(msg(inheritEnvWithheldKey(withheld)), lang);
+}
+function inheritEnvWithheldKey(withheld) {
     try {
         if (typeof withheld !== 'object' || withheld === null)
             return WITHHELD_UNKNOWN_NOTICE;
@@ -37,12 +42,7 @@ const FIELD_INVALID = 'request.field_invalid';
 function readGuarded(o, key) {
     if (typeof o !== 'object' || o === null)
         return undefined;
-    try {
-        return o[key];
-    }
-    catch {
-        return undefined;
-    }
+    return guardedRead(() => readOwnDataValue(o, key));
 }
 export function inheritEnvRefusalFromError(err, sentRequest) {
     try {
@@ -58,8 +58,6 @@ export function inheritEnvRefusalFromError(err, sentRequest) {
         return null;
     }
 }
-const REFUSAL_NOT_ACCEPTED = 'The engine refused this request as invalid, under a refusal code that many different request fields share · ' +
-    "This request asked for the shell to inherit this machine's whole environment, which the engine accepts only when tools run directly on its own machine and the request belongs to a session; if that is what it refused, send it again without that setting (or with the default)";
-export function inheritEnvRefusalContent(_detail) {
-    return REFUSAL_NOT_ACCEPTED;
+export function inheritEnvRefusalContent(_detail, lang) {
+    return renderMessage(msg('session.inheritEnv.refusal'), lang);
 }

package/dist/interactiveHalt.js

@@ -3,17 +3,28 @@ export const RUN_LEVEL_STOP_ERROR_CODES = Object.freeze([
 ]);
 const RUN_LEVEL_STOP_STATUS = 409;
 function enginePointsToRunLevelStop(outcome) {
-    const o = outcome;
-    return (o?.kind === 'refused' &&
-        o.status === RUN_LEVEL_STOP_STATUS &&
-        typeof o.errorCode === 'string' &&
-        RUN_LEVEL_STOP_ERROR_CODES.includes(o.errorCode));
+    const code = ownDataSlot(outcome, 'errorCode');
+    return (ownDataSlot(outcome, 'kind') === 'refused' &&
+        ownDataSlot(outcome, 'status') === RUN_LEVEL_STOP_STATUS &&
+        typeof code === 'string' &&
+        RUN_LEVEL_STOP_ERROR_CODES.includes(code));
+}
+function ownDataSlot(o, key) {
+    try {
+        if (typeof o !== 'object' || o === null)
+            return undefined;
+        const d = Object.getOwnPropertyDescriptor(o, key);
+        return d !== undefined && Object.hasOwn(d, 'value') ? d.value : undefined;
+    }
+    catch {
+        return undefined;
+    }
 }
 export function planInteractiveHalt(input) {
     const outcome = input.interruptOutcome;
     if (outcome === undefined || outcome === null)
         return { action: 'interrupt', reason: 'first-shot' };
-    const kind = outcome.kind;
+    const kind = ownDataSlot(outcome, 'kind');
     if (kind === 'halted')
         return { action: 'none', reason: 'halted' };
     if (kind === 'refused') {

package/dist/liveModelCatalog.d.ts

@@ -1,4 +1,5 @@
 import type { AgentClient } from '@sema-agent/sdk';
+import type { UiLanguage } from './env/uiLanguage.js';
 export interface LiveModelInfo {
     name: string;
     id?: string;
@@ -80,7 +81,7 @@ export type ModelCandidateRejectedReading = {
     readonly kind: 'unreadable';
 };
 export declare function modelCandidateRejectedOf(catalog?: LiveModelCatalog | null): ModelCandidateRejectedReading;
-export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading): string | undefined;
+export declare function modelCandidateRejectedContent(reading: ModelCandidateRejectedReading, lang?: UiLanguage): string | undefined;
 export interface RoutePairingVerdict {
     verdict: 'ok' | 'broken' | 'unknown';
     posture?: string;

package/dist/liveModelCatalog.js

@@ -1,4 +1,5 @@
 import { frozenJsonCopyOf, liveDefaultModelCopy, liveModelRowCopy } from './model/liveCatalogShape.js';
+import { msg, renderMessage } from './i18n/translate.js';
 let catalog = null;
 let refresher = null;
 export function setLiveModelCatalog(next) {
@@ -269,27 +270,32 @@ export function modelCandidateRejectedOf(catalog = getLiveModelCatalog()) {
     }
 }
 const CONFIG_DOMAIN_WORD = /^[a-z][a-z0-9_.-]{0,63}$/;
-export function modelCandidateRejectedContent(reading) {
+export function modelCandidateRejectedContent(reading, lang) {
     try {
         if (reading === null || typeof reading !== 'object' || reading.kind !== 'rejected')
             return undefined;
         const named = reading.domains.filter((w) => CONFIG_DOMAIN_WORD.test(w));
         const which = named.length > 0 && named.length === reading.domains.length ? ` (${named.join(', ')})` : '';
-        return `The deployment refused its most recent configuration change${which} and is still running on the configuration before it — models or settings added by that change are not in effect`;
+        return renderMessage(msg('model.catalog.candidateRejected', { which }), lang);
     }
     catch {
         return undefined;
     }
 }
-const ROUTE_PAIRING_OK = new Set(['ok:per-model', 'ok:paired', 'ok:keyless']);
-const ROUTE_PAIRING_BROKEN = new Set(['broken:credential_mismatch', 'broken:credential_missing']);
+const ROUTE_PAIRING_VERDICTS = Object.freeze({
+    'ok:per-model': 'ok',
+    'ok:paired': 'ok',
+    'ok:keyless': 'ok',
+    'broken:credential_mismatch': 'broken',
+    'broken:credential_missing': 'broken',
+    'broken:credential_origin_mismatch': 'broken',
+    'broken:credential_answer_conflict': 'broken',
+});
 export function routePairingVerdict(v) {
     if (typeof v !== 'string' || v.length === 0)
         return { verdict: 'unknown' };
-    if (ROUTE_PAIRING_OK.has(v))
-        return { verdict: 'ok', posture: v };
-    if (ROUTE_PAIRING_BROKEN.has(v))
-        return { verdict: 'broken', posture: v };
+    if (Object.hasOwn(ROUTE_PAIRING_VERDICTS, v))
+        return { verdict: ROUTE_PAIRING_VERDICTS[v], posture: v };
     return { verdict: 'unknown', posture: v };
 }
 const unreadableCatalog = (why) => Object.freeze({ kind: 'unreadable', why });

package/dist/mcpPanel.d.ts

@@ -1,6 +1,7 @@
 import type { AgentClient } from '@sema-agent/sdk';
 import { type WiringManifestMcpEntryView } from './adapter/downstream/eventToSdkMessage.js';
 import { type McpEngineLegHealth } from './mcpLiveness.js';
+import { type ScenarioRefusalReading } from './scenarioRefusal.js';
 export interface McpPanelServerView {
     name: string;
     status: string;
@@ -16,14 +17,22 @@ export interface McpPanelLastLegView {
     at: string;
     mcp: WiringManifestMcpEntryView[];
 }
-export interface McpPanelView {
+export interface McpPanelServersView {
     asOf: string;
+    lastLegMcp?: McpPanelLastLegView;
+    lastLegMcpUnreadable?: true;
     servers: McpPanelServerView[];
     degraded?: true;
+}
+export interface McpPanelRefusalView {
+    asOf: string;
     lastLegMcp?: McpPanelLastLegView;
     lastLegMcpUnreadable?: true;
+    scenarioRefusal: ScenarioRefusalReading;
 }
+export type McpPanelView = McpPanelServersView | McpPanelRefusalView;
 export declare function projectMcpPanel(body: unknown): McpPanelView | undefined;
+export declare function mcpPanelRefusalOf(view: McpPanelView | undefined): ScenarioRefusalReading | undefined;
 export declare function fetchMcpPanel(client: Pick<AgentClient, 'sessions'>, sessionId: string, opts?: {
     signal?: AbortSignal;
 }): Promise<McpPanelView | undefined>;

package/dist/mcpPanel.js

@@ -3,6 +3,7 @@ import { isSessionIdPathSegment } from './sessionIdSegment.js';
 import { projectMcpSection } from './adapter/downstream/eventToSdkMessage.js';
 import { capForDisplay } from './fleetTaskDesc.js';
 import { mcpLivenessRollupOf } from './mcpLiveness.js';
+import { scenarioRefusalOf } from './scenarioRefusal.js';
 const MCP_PANEL_ERROR_MAX = 200;
 const MCP_PANEL_WORD_MAX = 40;
 const MCP_PANEL_NAMES_MAX = 8;
@@ -40,19 +41,29 @@ export function projectMcpPanel(body) {
         return undefined;
     if (!nonEmpty(body.asOf))
         return undefined;
-    if (!Array.isArray(body.servers))
+    const refusal = scenarioRefusalOf(body);
+    if (refusal === null)
         return undefined;
-    const servers = [];
-    for (const r of body.servers) {
-        const row = projectServerRow(r);
-        if (row !== undefined)
-            servers.push(row);
+    let view;
+    if (refusal !== undefined) {
+        view = { asOf: body.asOf, scenarioRefusal: refusal };
+    }
+    else {
+        if (!Array.isArray(body.servers))
+            return undefined;
+        const servers = [];
+        for (const r of body.servers) {
+            const row = projectServerRow(r);
+            if (row !== undefined)
+                servers.push(row);
+        }
+        if (body.servers.length > 0 && servers.length === 0)
+            return undefined;
+        const sv = { asOf: body.asOf, servers };
+        if (body.degraded === true)
+            sv.degraded = true;
+        view = sv;
     }
-    if (body.servers.length > 0 && servers.length === 0)
-        return undefined;
-    const view = { asOf: body.asOf, servers };
-    if (body.degraded === true)
-        view.degraded = true;
     if ('lastLegMcp' in body) {
         const leg = projectLastLeg(body.lastLegMcp);
         if (leg !== undefined)
@@ -62,6 +73,20 @@ export function projectMcpPanel(body) {
     }
     return view;
 }
+export function mcpPanelRefusalOf(view) {
+    try {
+        if (view === null || typeof view !== 'object')
+            return undefined;
+        const d = Object.getOwnPropertyDescriptor(view, 'scenarioRefusal');
+        if (d === undefined || !('value' in d))
+            return undefined;
+        const r = d.value;
+        return r !== null && typeof r === 'object' && !Array.isArray(r) ? r : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
 export async function fetchMcpPanel(client, sessionId, opts) {
     if (!isSessionIdPathSegment(sessionId))
         return undefined;
@@ -98,12 +123,14 @@ void _mcpPanelShapePin;
 export function mcpEngineLegPresence(view) {
     if (view === undefined)
         return 'unknown';
-    if (view.servers.length > 0)
-        return 'present';
     if (view.lastLegMcp !== undefined)
         return 'present';
     if (view.lastLegMcpUnreadable === true)
         return 'present';
+    if (!('servers' in view))
+        return 'unknown';
+    if (view.servers.length > 0)
+        return 'present';
     if (view.degraded === true)
         return 'present';
     return 'absent';

package/dist/mcpProbeCapability.d.ts

@@ -1,3 +1,4 @@
+import type { UiLanguage } from './env/uiLanguage.js';
 export type McpProbeReading = {
     kind: 'unobserved';
 } | {
@@ -12,4 +13,4 @@ export type McpProbeReading = {
 export declare function projectMcpProbeCapability(caps: unknown): McpProbeReading | undefined;
 export declare function observedMcpProbe(baseUrl?: string | undefined): McpProbeReading;
 export declare function mcpProbeAvailable(reading: McpProbeReading): 'yes' | 'no' | 'unknown';
-export declare function mcpProbeDoctorDetail(reading: McpProbeReading): string;
+export declare function mcpProbeDoctorDetail(reading: McpProbeReading, lang?: UiLanguage): string;

package/dist/mcpProbeCapability.js

@@ -1,5 +1,6 @@
 import { engineWireTarget } from './engineWireTarget.js';
 import { createEngineCapReader, unreadableReadingDetail } from './engineCapReader.js';
+import { msg, renderMessage } from './i18n/translate.js';
 import { ownDataField } from './ownKey.js';
 export function projectMcpProbeCapability(caps) {
     try {
@@ -30,22 +31,17 @@ export function mcpProbeAvailable(reading) {
         return 'no';
     return 'unknown';
 }
-export function mcpProbeDoctorDetail(reading) {
+export function mcpProbeDoctorDetail(reading, lang) {
     switch (reading.kind) {
         case 'unreadable':
-            return unreadableReadingDetail('per-server MCP status face');
+            return unreadableReadingDetail(renderMessage(msg('notice.capability.subject.mcpProbe'), lang), lang);
         case 'unobserved':
-            return ('per-server MCP status face not observed — the engine reports whether it has one on /v1/capabilities; ' +
-                'this process has no usable capabilities reading cached for it (none received, the last one was unreadable, or the last one was discarded when the engine connection was reset; this process cannot tell which)');
+            return renderMessage(msg('notice.capability.mcpProbe.unobserved'), lang);
         case 'not_reported':
-            return ('per-server MCP status face not reported by this engine — this binary predates the face, so that path is not expected to exist here ' +
-                '(asking it usually answers with a machine-readable route-not-found, though a timeout or an uncoded gateway answer still says nothing either way); ' +
-                'prefer the session panel last-leg roster where that panel carries one, and otherwise show this reason rather than an entry that cannot answer');
+            return renderMessage(msg('notice.capability.mcpProbe.notReported'), lang);
         case 'absent':
-            return ('per-server MCP status face reported off on this deployment — this engine answers no readings there; ' +
-                'this client does not guess why, and whether caller-supplied declarations are honored is a separate position with its own answer');
+            return renderMessage(msg('notice.capability.mcpProbe.absent'), lang);
         case 'present':
-            return ('per-server MCP status face on — this engine dials its own declared MCP servers on request, with no run, ' +
-                'and a probe of caller-supplied declarations answers with the very same body shape');
+            return renderMessage(msg('notice.capability.mcpProbe.present'), lang);
     }
 }