@sema-agent/client-core 0.99.0 → 0.100.0

package/dist/ruleRefusalSentence.js

@@ -0,0 +1,58 @@
+import { capForDisplay } from './fleetTaskDesc.js';
+import { msg, renderMessage } from './i18n/translate.js';
+import { permissionRuleIssueDetail } from './permissionRuleIssue.js';
+const RULE_REFUSAL_NAMED_MAX = 5;
+const RULE_NAME_MAX = 120;
+const CLASS_OF_REASON = Object.freeze({
+    retired_tool_name: 'toolName',
+    unprefixed_namespaced_name: 'toolName',
+    incomplete_protocol_name: 'toolName',
+    home_relative_path: 'homePath',
+    compile_refused: 'compile',
+    paren_in_tool_name: 'compile',
+});
+function reasonOf(row, lang) {
+    const cls = typeof row.reason === 'string' && Object.hasOwn(CLASS_OF_REASON, row.reason) ? CLASS_OF_REASON[row.reason] : undefined;
+    if (cls === 'toolName')
+        return renderMessage(msg('rules.refusal.reason.toolName'), lang);
+    if (cls === 'homePath')
+        return renderMessage(msg('rules.refusal.reason.homePath'), lang);
+    if (cls === 'compile')
+        return permissionRuleIssueDetail(row.code, row.message, row.rule, lang);
+    return undefined;
+}
+function nameOf(rule) {
+    return `"${capForDisplay(rule, RULE_NAME_MAX)}"`;
+}
+export function ruleRefusalSentence(rows, lang) {
+    const seen = new Set();
+    const items = [];
+    try {
+        if (!Array.isArray(rows))
+            return undefined;
+        for (const row of rows) {
+            if (typeof row !== 'object' || row === null)
+                continue;
+            const rule = row.rule;
+            if (typeof rule !== 'string' || rule === '' || seen.has(rule))
+                continue;
+            const reason = reasonOf(row, lang);
+            if (reason === undefined)
+                continue;
+            seen.add(rule);
+            items.push({ rule, reason });
+        }
+    }
+    catch {
+        return undefined;
+    }
+    if (items.length === 0)
+        return undefined;
+    const shown = items.slice(0, RULE_REFUSAL_NAMED_MAX);
+    const separator = renderMessage(msg('rules.refusal.itemSeparator'), lang);
+    const named = shown.map((it) => renderMessage(msg('rules.refusal.item', { rule: nameOf(it.rule), reason: it.reason }), lang)).join(separator);
+    const rest = items.length - shown.length;
+    const list = rest > 0 ? msg('rules.refusal.list.more', { shown: named, count: rest }) : named;
+    const listText = typeof list === 'string' ? list : renderMessage(list, lang);
+    return renderMessage(items.length === 1 ? msg('rules.refusal.sentence.one', { list: listText }) : msg('rules.refusal.sentence.other', { count: items.length, list: listText }), lang);
+}

package/dist/sandboxWire.d.ts

@@ -1,3 +1,4 @@
+import type { TaskRequestLike } from './request/taskRequest.js';
 export type SandboxSelection = {
     mode: 'default';
 } | {
@@ -25,4 +26,4 @@ export declare const SANDBOX_NO_PUBLISHED_IMAGE_404_ANCHOR = "no published sandb
 export declare const SANDBOX_CASCADE_CONFLICT_400_ANCHOR = "not supported together with cascade/verify";
 export type SandboxHintHost = 'terminal' | 'web' | 'desktop';
 export declare const SANDBOX_HINT_HOSTS: readonly SandboxHintHost[];
-export declare function sandboxDegradeHint(err: unknown, host?: SandboxHintHost): string | undefined;
+export declare function sandboxDegradeHint(err: unknown, host?: SandboxHintHost, sentRequest?: TaskRequestLike): string | undefined;

package/dist/sandboxWire.js

@@ -1,5 +1,5 @@
 import { lastFlagValue } from './argvFlagValue.js';
-import { CAPABILITY_IMAGE_INDEX_REQUIRED } from './engineErrorCodes.js';
+import { CAPABILITY_IMAGE_INDEX_REQUIRED, CAPABILITY_K8S_LANE_REQUIRED, isStatusDerivedCoarseCode, NOT_FOUND_IMAGE, REQUEST_FIELD_CONFLICT, REQUEST_PRECONDITION_UNMET } from './engineErrorCodes.js';
 import { THROWN_SLOT_UNREADABLE, readThrownSlot } from './wireFailureShape.js';
 const MAX_PROFILE_LEN = 128;
 const USAGE_HINT = "sema: --sandbox expects a profile name or 'auto'.\n" +
@@ -49,15 +49,15 @@ export const SANDBOX_NO_PUBLISHED_IMAGE_404_ANCHOR = 'no published sandbox image
 export const SANDBOX_CASCADE_CONFLICT_400_ANCHOR = 'not supported together with cascade/verify';
 export const SANDBOX_HINT_HOSTS = Object.freeze(['terminal', 'web', 'desktop']);
 const SANDBOX_HINT_ARMS = Object.freeze({
-    imageIndexRequired501: {
-        fact: 'Cloud sandbox images are not available on this engine: its storage backend keeps no image index, so profiles cannot be listed or selected here.',
+    imageIndexRequired: {
+        fact: 'Cloud sandbox images are not available on this engine: it has no sandbox image index (its store keeps none, or no image catalog is attached from the sema-web-admin config center), so profiles cannot be listed or selected here.',
         sep: '\n',
         outlet: {
-            terminal: 'Use a worker backed by a SQL store (it has the image index), or re-run without --sandbox.',
-            graphical: 'Use a worker backed by a SQL store (it has the image index), or keep the default environment.',
+            terminal: 'Use a worker that has the image index (a SQL-backed store with the image catalog attached), or re-run without --sandbox.',
+            graphical: 'Use a worker that has the image index (a SQL-backed store with the image catalog attached), or keep the default environment.',
         },
     },
-    k8sLaneOnly400: {
+    k8sLaneOnly: {
         subject: { terminal: '--sandbox <profile>', graphical: 'The selected sandbox image profile' },
         fact: ' only applies on k8s-lane workers; this engine runs a host/e2b sandbox lane, so the request was honestly rejected.',
         sep: '\n',
@@ -66,12 +66,13 @@ const SANDBOX_HINT_ARMS = Object.freeze({
             graphical: 'Keep the default environment, or connect to a k8s-lane worker.',
         },
     },
-    noImageIndex400: {
-        fact: 'This worker has no sandbox image index configured (the sema-web-admin config center is not attached), so per-task profiles cannot resolve.',
+    sessionRequired: {
+        subject: { terminal: '--sandbox <profile>', graphical: 'The selected sandbox image profile' },
+        fact: ' is bound to a session, and this request resolved none, so the per-task image could not be registered.',
         sep: '\n',
         outlet: {
-            terminal: 'Re-run without --sandbox, or use a worker with the image index enabled.',
-            graphical: 'Keep the default environment, or use a worker with the image index enabled.',
+            terminal: 'Run it inside a session, or re-run without --sandbox.',
+            graphical: 'Start the work inside a session, or keep the default environment.',
         },
     },
     noPublishedImage404: {
@@ -104,21 +105,54 @@ function sandboxSlot(err, key) {
     const v = readThrownSlot(err, key, 'data');
     return v === THROWN_SLOT_UNREADABLE ? undefined : v;
 }
-export function sandboxDegradeHint(err, host) {
-    const status = sandboxSlot(err, 'status');
-    if (status === 501 && sandboxSlot(err, 'errorCode') === CAPABILITY_IMAGE_INDEX_REQUIRED)
-        return sandboxHintOf(SANDBOX_HINT_ARMS.imageIndexRequired501, host);
-    if (typeof err !== 'object' || err === null || typeof status !== 'number')
-        return undefined;
+function sentSandboxFacts(sentRequest) {
+    if (sentRequest === undefined || sentRequest === null || typeof sentRequest !== 'object')
+        return { profile: false, cascadeOrVerify: false, sessionOrDevice: false };
+    const profile = sandboxSlot(sentRequest, 'sandboxImageProfile');
+    const sent = (key) => {
+        const v = sandboxSlot(sentRequest, key);
+        return typeof v === 'string' && v.length > 0;
+    };
+    return {
+        profile: typeof profile === 'string' && profile.length > 0,
+        cascadeOrVerify: sandboxSlot(sentRequest, 'cascade') === true || sandboxSlot(sentRequest, 'verify') === true,
+        sessionOrDevice: sent('sessionId') || sent('deviceId'),
+    };
+}
+export function sandboxDegradeHint(err, host, sentRequest) {
     try {
+        if (typeof err !== 'object' || err === null)
+            return undefined;
+        const status = sandboxSlot(err, 'status');
+        const codeRaw = sandboxSlot(err, 'errorCode');
+        const code = typeof codeRaw === 'string' && codeRaw.length > 0 ? codeRaw : undefined;
+        if (status === 501 && code === CAPABILITY_K8S_LANE_REQUIRED)
+            return sandboxHintOf(SANDBOX_HINT_ARMS.k8sLaneOnly, host);
+        if (status === 501 && code === CAPABILITY_IMAGE_INDEX_REQUIRED)
+            return sandboxHintOf(SANDBOX_HINT_ARMS.imageIndexRequired, host);
+        if (status === 404 && code === NOT_FOUND_IMAGE)
+            return sandboxHintOf(SANDBOX_HINT_ARMS.noPublishedImage404, host);
+        if (status === 400 && code === REQUEST_PRECONDITION_UNMET) {
+            const sent = sentSandboxFacts(sentRequest);
+            return sent.profile && !sent.cascadeOrVerify && !sent.sessionOrDevice ? sandboxHintOf(SANDBOX_HINT_ARMS.sessionRequired, host) : undefined;
+        }
+        if (typeof status !== 'number')
+            return undefined;
+        const noCode = code === undefined || isStatusDerivedCoarseCode(code);
+        const cascadeCoded = code === REQUEST_FIELD_CONFLICT && (sentRequest === undefined || (() => {
+            const sent = sentSandboxFacts(sentRequest);
+            return sent.profile && sent.cascadeOrVerify;
+        })());
+        if (!noCode && !cascadeCoded)
+            return undefined;
         const msg = err.message;
         if (typeof msg !== 'string')
             return undefined;
-        if (status === 400 && msg.includes(SANDBOX_K8S_ONLY_400_ANCHOR))
-            return sandboxHintOf(SANDBOX_HINT_ARMS.k8sLaneOnly400, host);
-        if (status === 400 && msg.includes(SANDBOX_NO_IMAGE_INDEX_400_ANCHOR))
-            return sandboxHintOf(SANDBOX_HINT_ARMS.noImageIndex400, host);
-        if (status === 404 && msg.includes(SANDBOX_NO_PUBLISHED_IMAGE_404_ANCHOR))
+        if (noCode && status === 400 && msg.includes(SANDBOX_K8S_ONLY_400_ANCHOR))
+            return sandboxHintOf(SANDBOX_HINT_ARMS.k8sLaneOnly, host);
+        if (noCode && status === 400 && msg.includes(SANDBOX_NO_IMAGE_INDEX_400_ANCHOR))
+            return sandboxHintOf(SANDBOX_HINT_ARMS.imageIndexRequired, host);
+        if (noCode && status === 404 && msg.includes(SANDBOX_NO_PUBLISHED_IMAGE_404_ANCHOR))
             return sandboxHintOf(SANDBOX_HINT_ARMS.noPublishedImage404, host);
         if (status === 400 && msg.includes(SANDBOX_CASCADE_CONFLICT_400_ANCHOR))
             return sandboxHintOf(SANDBOX_HINT_ARMS.cascadeConflict400, host);

package/dist/scenarioRefusal.d.ts

@@ -1,3 +1,4 @@
+import type { UiLanguage } from './env/uiLanguage.js';
 export interface ScenarioRefusalReading {
     readonly errorCode?: string;
     readonly error?: string;
@@ -6,4 +7,4 @@ export interface ScenarioRefusalReading {
 }
 export declare function scenarioRefusalOf(body: object): ScenarioRefusalReading | undefined | null;
 export declare function scenarioRefusalFromError(err: {} | null | undefined): ScenarioRefusalReading | null;
-export declare function scenarioRefusalContent(reading: ScenarioRefusalReading): string;
+export declare function scenarioRefusalContent(reading: ScenarioRefusalReading, lang?: UiLanguage): string;

package/dist/scenarioRefusal.js

@@ -3,6 +3,7 @@ import { readOwnDataValue } from './ownKey.js';
 import { SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE } from './engineErrorCodes.js';
 import { readErrorRecord, readErrorString } from './wireFailureShape.js';
 import { effectiveWireErrorCode } from './wireErrorTriage.js';
+import { msg, renderMessage } from './i18n/translate.js';
 const SCENARIO_REFUSAL_ERROR_MAX = 200;
 function detailBits(detail) {
     if (detail === undefined)
@@ -86,7 +87,7 @@ export function scenarioRefusalFromError(err) {
         return null;
     }
 }
-export function scenarioRefusalContent(reading) {
+export function scenarioRefusalContent(reading, lang) {
     let code;
     let scenario;
     let source;
@@ -102,10 +103,9 @@ export function scenarioRefusalContent(reading) {
     }
     if (code === SCENARIO_ASSIGNMENT_UNKNOWN_ERROR_CODE) {
         const name = typeof scenario === 'string' && scenario.length > 0 ? ` ("${capForDisplay(scenario, 80)}")` : '';
-        const from = source === 'ruling' ? ', assigned to you by the configuration center,' : source === 'deployment' ? ", this deployment's default scenario," : '';
-        return (`This deployment cannot resolve your scenario: the scenario${name}${from} does not exist here, so it refuses whatever depends on your scenario — ` +
-            "new runs that do not name a scenario, and this session's list of MCP servers · Ask whoever operates the engine to fix the scenario assignment");
+        const from = source === 'ruling' ? msg('config.scenarioRefusal.source.ruling') : source === 'deployment' ? msg('config.scenarioRefusal.source.deployment') : '';
+        return renderMessage(msg('config.scenarioRefusal.dangling', { name, from }), lang);
     }
     const tail = typeof code === 'string' && code.length > 0 ? ` (${capForDisplay(code, 80)})` : '';
-    return `This deployment's scenario check refused to resolve your scenario${tail}, so whatever depends on your scenario is not available — this session's list of MCP servers is unknown`;
+    return renderMessage(msg('config.scenarioRefusal.generic', { tail }), lang);
 }

package/dist/seam.d.ts

@@ -1,7 +1,7 @@
 import type { ModelUsage, SDKMessage } from '@sema-agent/agent-types';
 import type { EngineTurnUsage } from './adapter/downstream/turnUsageToModelUsage.js';
 import type { RunCostReconcile } from './adapter/downstream/terminalToSdkResult.js';
-import type { WiringManifestAutoMode, WiringManifestModelGate, WiringManifestMcpEntryView, WiringManifestHookEntryView, WiringManifestLspSeamView, WiringManifestWriteProtectionView, WiringManifestAutoConsolidationView, WiringManifestReadDenyView, ContextUsageSectionView, PromptManifestSectionView, PromptManifestBlockView, PromptManifestToolView } from './adapter/downstream/eventToSdkMessage.js';
+import type { WiringManifestAutoMode, WiringManifestModelGate, WiringManifestMcpEntryView, WiringManifestHookEntryView, WiringManifestLspSeamView, WiringManifestWriteProtectionView, WiringManifestAutoConsolidationView, WiringManifestReadDenyView, WiringManifestModView, ContextUsageSectionView, PromptManifestSectionView, PromptManifestBlockView, PromptManifestToolView, PromptManifestIdentityView } from './adapter/downstream/eventToSdkMessage.js';
 import type { ToolRosterView, ToolRosterDeltaView, WiringManifestHandsView } from './toolRoster.js';
 import type { WiringManifestFleetView } from './adapter/downstream/wiringManifestView.js';
 import type { SuspendedReopenReading } from './hitl/suspendedReopen.js';
@@ -34,13 +34,6 @@ export interface AdapterContext {
         readonly toolName: string;
     }): ToolKillCause | undefined;
     coalesceIntervalMs?: number;
-    continuesPark?: ContinuesParkDeclaration;
-}
-export interface ContinuesParkDeclaration {
-    readonly toolCallId: string;
-    readonly checkpointId?: string;
-    readonly parkedTaskId?: string;
-    readonly continuationTaskId?: string;
 }
 export type ChromeEvent = {
     kind: 'retry_status';
@@ -167,7 +160,7 @@ export type ChromeEvent = {
 } | ({
     kind: 'run_cost_reconciled';
     laneProof: LaneProof;
-} & RunCostReconcile) | HumanInputChromeEvent | MessageCommittedChromeEvent | EngineNoticeChromeEvent | TextSegmentEndChromeEvent | ThinkingSegmentEndChromeEvent | ToolDisclosureChromeEvent | ToolProgressChromeEvent | ToolRosterDeltaChromeEvent | ContextUsageChromeEvent | CompactionOutcomeChromeEvent | SubagentStartedChromeEvent | PromptAssembledChromeEvent | MemorySavedChromeEvent | WiringManifestChromeEvent | ResultTextDivergedChromeEvent | ResultReplayedChromeEvent | ToolParkedChromeEvent | ApprovalRequestChromeEvent | ApprovalRevokeChromeEvent | {
+} & RunCostReconcile) | HumanInputChromeEvent | MessageCommittedChromeEvent | EngineNoticeChromeEvent | TextSegmentEndChromeEvent | ThinkingSegmentEndChromeEvent | ToolDisclosureChromeEvent | ToolProgressChromeEvent | ToolRosterDeltaChromeEvent | ContextUsageChromeEvent | CompactionOutcomeChromeEvent | CompactionStartedChromeEvent | SubagentStartedChromeEvent | PromptAssembledChromeEvent | MemorySavedChromeEvent | WiringManifestChromeEvent | ResultTextDivergedChromeEvent | ResultReplayedChromeEvent | ToolParkedChromeEvent | ApprovalRequestChromeEvent | ApprovalRevokeChromeEvent | {
     kind: 'suspended_reopened';
     laneProof: LaneProof;
     reopen: Extract<SuspendedReopenReading, {
@@ -195,6 +188,7 @@ export interface WiringManifestChromeEvent {
         readonly selected: readonly string[];
     };
     fleet?: WiringManifestFleetView;
+    mods?: readonly WiringManifestModView[];
     eventId?: string;
 }
 export interface TextSegmentCommittedRow {
@@ -235,6 +229,15 @@ export interface CompactionOutcomeChromeEvent {
     outcome: string;
     trigger?: string;
     reason?: string;
+    pass?: string;
+    eventId?: string;
+}
+export interface CompactionStartedChromeEvent {
+    kind: 'compaction_started';
+    laneProof: LaneProof;
+    pass: string;
+    trigger: string;
+    startedAt?: number;
     eventId?: string;
 }
 export interface SubagentStartedChromeEvent {
@@ -269,6 +272,7 @@ export interface PromptAssembledChromeEvent {
     blocks?: readonly PromptManifestBlockView[];
     sections?: readonly PromptManifestSectionView[];
     tools?: readonly PromptManifestToolView[];
+    identity?: PromptManifestIdentityView;
     eventId?: string;
 }
 export interface ToolDisclosureChromeEvent {
@@ -401,3 +405,14 @@ export declare function deriveTranscriptId(frame: {
     id?: unknown;
     toolCallId?: unknown;
 }, ctx: Pick<AdapterContext, 'uuid'>, suffix?: string): string;
+export declare const SEMA_TERMINAL_OWNER_KEY = "_sema_terminal_owner";
+export type TerminalOwner = {
+    readonly kind: 'request-not-sent';
+    readonly requestId?: string;
+    readonly heldBy?: string;
+} | {
+    readonly kind: 'followed-run';
+    readonly taskId: string;
+    readonly runId?: string;
+};
+export declare function terminalOwnerOf(row: {} | null | undefined): TerminalOwner | undefined;

package/dist/seam.js

@@ -76,6 +76,12 @@ const CHROME_ARM_TABLE = {
         duty: 'CC-89(0.75.0):一次压缩的非 compacted 结局(作废 / 失败等),给用户一条可见提示。`outcome` / `trigger` 是引擎开集原词,按成员渲染必带 default 臂、认不得照原词显示;' +
             '🔴 不是终态 —— 任务还在跑,别据它收 spinner;`laneProof.lane` 为 subagent = 子代的压缩结局,别渲成主会话的;成功压缩不走本臂(权威是转录的 compact_boundary)。不接 = 压缩失败对用户不可见。',
     },
+    compaction_started: {
+        required: false,
+        duty: '可选:一次压缩 pass 宣告开始(服务端 ≥ 7.132.0)—— 要显示「正在压缩」的宿主接它。🔴 别自己配对开 / 收:把本臂、`compaction_outcome` 臂与转录 `compact_boundary` 行喂给' +
+            ' `createCompactionStatusTracker()`(按 `pass` 开收、子代车道不点亮主车道、流结束收口),交互车道读它的 `reading()`,print 车道把它的变化转成 CC 同形 `system/status` 帧;' +
+            '`trigger` 开集原词(按成员渲染带 default 臂);`startedAt` 缺席 = 没报;本臂不是终态,`laneProof.lane` 为 subagent = 子代的压缩,别渲成主会话的。',
+    },
     subagent_started: {
         required: false,
         duty: '可选:委派子代每周期一帧的起跑事实(sdk `task_started`,服务端 ≥ 7.127.0)—— 要「起跑时就开子代行」的宿主接它(不接 = 首个 task_progress 才开行,与 0.98.0 同)。' +
@@ -167,13 +173,13 @@ const CHROME_ARM_TABLE = {
         duty: '🔴 引擎明报的 assistant 散文段边界 + **该段权威全文**(#323/core #447;server ≥7.75.3 起 content 经脱敏器、' +
             'text_delta 仍逐字 ⇒ 两者**可以不相等**)。①`diverged` 在场(never false)⇒ 你按增量拼出来的那一段是过期的,' +
             '必须用 content **重渲该段**并以它为该段 committed 文本,不许保留增量拼文;②`committedPrefixDiverged` 在场' +
-            '(never false)⇒ 这一段此前已 committed 上屏的正文**也**过期了,🔴 本包在这一形上**一个字节都不再交**' +
+            '(never false)⇒ 这一段此前已 committed 上屏的正文**也**过期了,🔴 本包在这一形上**一个字节都不再交**(唯一不同:本段已提交行的归属说不出 —— 上游两行同 uuid,`committedUuids` 整键缺席 —— 时本包一个字节不动,还押着的原始那截在本事件之后照旧作为本段末行交出)' +
             '(撤不回的那截拼不出 content)⇒ 把 committedPrefixLen 指的那一截换成 content,这一条**所有宿主都要做**;' +
             '缺席 ⇒ 本包交的是尾段,前缀+尾段=content,什么都不用丢;③`committedPrefixLen`(never 0)= 定位量,' +
             '🔴 **单位 = JS 字符串长度(UTF-16 代码单元),不是 UTF-8 字节、也不是几条消息**' +
-            '(按 UTF-8 字节截会在非 ASCII 正文上截错位置把凭据留在屏上;按消息丢会连合并在同一条消息里的上一段定稿一起删掉),' +
-            '照抄 `已committed正文.slice(0, 长度 - committedPrefixLen) + content`;按**增量拼文**计长、不是 content 上的偏移;④三键全缺席 ⇒ 照旧只当对账/定界,拿 content 再渲一行 = 同一段上屏两遍;⑤`segmentId`(恒在场)= 段身份,与本段已过境的 committed 文本行顶层 `_sema_segment_id` 同值 —— 换掉已提交那截时认行的钥匙是**两把**:行 uuid ∧ 段身份(按字节相等找行会被同后缀的独立行冒充)。' +
-            '🔴 缺席只表示「没报」,绝不等于「段没结束」——要退回自家启发式必须按整条流判、不按单帧判;⑥`committedUuids[]`(0.71.0 起,在场 = 本窗口已提交行按序、`[]` = 零行、整键缺席 = 本包说不出):`committedPrefixDiverged` ⇒ **按 `committedRows[]` 逐行写回正文**(包已算好:首行 = 前段定稿前缀 + content、其余行空;别整行换首行,提交行可能带上一段定稿),端不再自己数窗口里过境的行,也不再对多行段整发放弃;`committedUuid` = 末条兼容位;' +
+            '(按 UTF-8 字节截会在非 ASCII 正文上截错位置把凭据留在屏上;按消息丢会连同一条消息里别的段的正文一起删掉),' +
+            '照抄 `已committed正文.slice(0, 长度 - committedPrefixLen) + content`;按**增量拼文**计长、不是 content 上的偏移;④三键全缺席 ⇒ 照旧只当对账/定界,拿 content 再渲一行 = 同一段上屏两遍;⑤`segmentId`(恒在场)= 段身份,与本段**全部** committed 文本行顶层 `_sema_segment_id` 同值(一行恰属一个段;本事件之后紧跟本段末行;段只按这一位认,不按消息界 / 相邻猜)—— 换掉已提交那截时认行的钥匙是**两把**:行 uuid ∧ 段身份(按字节相等找行会被同后缀的独立行冒充)。' +
+            '🔴 缺席只表示「没报」,绝不等于「段没结束」——要退回自家启发式必须按整条流判、不按单帧判;⑥`committedUuids[]`(0.71.0 起,在场 = 本窗口已提交行按序、`[]` = 零行、整键缺席 = 本包说不出):`committedPrefixDiverged` ⇒ **按 `committedRows[]` 逐行写回正文**(包已算好:首行 = content、其余行空),端不再自己数窗口里过境的行,也不再对多行段整发放弃;`committedUuid` = 末条兼容位;' +
             '⑦序:该段尾部的活体增量(`stream_delta`)一律先于本事件到达,本事件之后不再有同段增量(下一条增量属于下一段)。',
     },
 };
@@ -189,3 +195,37 @@ export function deriveTranscriptId(frame, ctx, suffix) {
     }
     return ctx.uuid();
 }
+export const SEMA_TERMINAL_OWNER_KEY = '_sema_terminal_owner';
+export function terminalOwnerOf(row) {
+    try {
+        if (typeof row !== 'object' || row === null)
+            return undefined;
+        const d = Object.getOwnPropertyDescriptor(row, SEMA_TERMINAL_OWNER_KEY);
+        if (d === undefined || !('value' in d))
+            return undefined;
+        const v = d.value;
+        if (typeof v !== 'object' || v === null)
+            return undefined;
+        const own = (k) => {
+            const pd = Object.getOwnPropertyDescriptor(v, k);
+            return pd !== undefined && 'value' in pd && typeof pd.value === 'string' && pd.value.length > 0 ? pd.value : undefined;
+        };
+        const kind = own('kind');
+        if (kind === 'request-not-sent') {
+            const requestId = own('requestId');
+            const heldBy = own('heldBy');
+            return { kind, ...(requestId !== undefined ? { requestId } : {}), ...(heldBy !== undefined ? { heldBy } : {}) };
+        }
+        if (kind === 'followed-run') {
+            const taskId = own('taskId');
+            if (taskId === undefined)
+                return undefined;
+            const runId = own('runId');
+            return { kind, taskId, ...(runId !== undefined ? { runId } : {}) };
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/seatContract.d.ts

@@ -12,6 +12,7 @@ import { type ProbeVerdictWord } from "./modelCapabilityProbe.js";
 import type { SubagentContentEvent } from "./subagentContentStore.js";
 import type { DeviceEnrollTokenOutcome, DeviceListOutcome, DeviceRebindOutcome, DeviceRevokeOutcome, DeviceSessionBindingOutcome, DeviceTransport, DeviceUnarmed, DeviceUnreadable } from "./deviceRebind.js";
 import type { McpPanelView } from "./mcpPanel.js";
+import type { McpToolToggleKey } from "./mcpToolToggles.js";
 export interface SeatValidationFailure {
     reason: string;
     field?: string;
@@ -144,7 +145,7 @@ export type SeatStreamReading = {
 };
 export declare function seatStreamDeltaMessage(event: SeatStreamDeltaSource, ids: SeatStreamDeltaIds): SeatStreamEventMessage | undefined;
 export declare function readSeatStreamDelta(message: object): SeatStreamReading;
-export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard"];
+export declare const SEAT_CAPABILITY_NAMES: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles"];
 export type SeatCapabilityName = (typeof SEAT_CAPABILITY_NAMES)[number];
 export interface SeatCapabilitiesState {
     pickFolder?: boolean;
@@ -154,6 +155,7 @@ export interface SeatCapabilitiesState {
     devices?: boolean;
     engineTarget?: boolean;
     onboard?: boolean;
+    mcpToolToggles?: boolean;
 }
 export type SeatCapabilityReading = {
     readonly kind: "reported";
@@ -207,16 +209,16 @@ export declare const SEAT_TURN_SETTINGS_ORIGINS: Readonly<{
         carriedBy: "renderer";
     }>;
     webSearch: Readonly<{
-        hostSupplied: "联网检索的每请求配置来自宿主的设置源(可能带检索服务的凭据与私网地址);渲染端没有设置文件,也不该持有凭据";
+        hostSupplied: "settings.webSearch";
     }>;
     hooks: Readonly<{
-        hostSupplied: "hooks 表来自宿主的设置文件(宿主经设置端口与 hooksForWire 投影);渲染端没有设置文件、也不执行本机 hook";
+        hostSupplied: "settings.hooks";
     }>;
     resolved: Readonly<{
-        hostSupplied: "设置解析器的生效快照(hooks / env / model / 已解析权限)由宿主跑解析器得出;渲染端没有设置源可解析";
+        hostSupplied: "settings.resolved";
     }>;
     outputStyle: Readonly<{
-        hostSupplied: "输出风格正文由宿主的兜底层随请求带(风格文件在宿主);渲染端只选名字,不持正文";
+        hostSupplied: "settings.outputStyle";
     }>;
 }>;
 export interface SeatRewindIntent {
@@ -542,6 +544,10 @@ export interface OnboardProvidersResult {
 }
 export declare const checkOnboardEntryRequest: (v: unknown) => SeatValidation;
 export declare const checkOnboardApplyRequest: (v: unknown) => SeatValidation;
+export declare const checkMcpToolToggleKey: (v: unknown) => SeatValidation;
+export interface McpToolTogglesResult {
+    off: McpToolToggleKey[];
+}
 export interface LocalSessionsApi {
     start(opts?: StartSessionOptions): Promise<LocalSessionRecord>;
     sendMessage(req: SendMessageRequest): Promise<SendMessageAck>;
@@ -577,6 +583,8 @@ export interface LocalSessionsApi {
     probeOnboardEntry(req: OnboardEntryRequest): Promise<OnboardProbeResult>;
     applyOnboardEntry(req: OnboardApplyRequest): Promise<OnboardApplyResult>;
     readSessionMcpPanel(sessionId: string): Promise<McpPanelView | DeviceUnreadable | DeviceTransport | DeviceUnarmed>;
+    listMcpToolToggles(): Promise<McpToolTogglesResult>;
+    setMcpToolToggle(key: McpToolToggleKey, enabled: boolean): Promise<OkAck>;
     onEvent(cb: (ev: LocalSessionEvent) => void): () => void;
     onToolPermissionRequest(cb: (req: ToolPermissionRequest) => void): () => void;
     sessionsStateStore: EipcStoreClient<SessionsState>;
@@ -620,7 +628,7 @@ export declare const checkSessionRowPatchRequest: (v: unknown) => SeatValidation
 export declare function isSessionRowPatchRequest(v: unknown): v is SessionRowPatchRequest;
 export declare function isSendMessageAck(v: unknown): v is SendMessageAck;
 export declare const LOCAL_SESSIONS_SPEC: EipcServiceSpec;
-export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "readSessionMcpPanel", "onEvent", "onToolPermissionRequest"];
+export declare const SEAT_METHOD_NAMES: readonly ["start", "sendMessage", "interrupt", "stop", "respondToToolPermission", "cancelQueuedMessage", "reorderQueuedMessage", "promoteQueuedMessage", "setFocusedSession", "setModel", "getTranscript", "searchSessions", "uploadAttachment", "listModels", "applyModelConfig", "pickFolder", "listRecentFolders", "noteRecentFolder", "patchSession", "listDevices", "readSessionBinding", "rebindSession", "issueEnrollToken", "revokeDevice", "setEngineMode", "startCloudLogin", "cancelCloudLogin", "connectCloudEngine", "configureCloudEngine", "clearCloudEngine", "listOnboardProviders", "probeOnboardEntry", "applyOnboardEntry", "readSessionMcpPanel", "listMcpToolToggles", "setMcpToolToggle", "onEvent", "onToolPermissionRequest"];
 export declare const SEAT_STORE_PROPS: readonly ["sessionsStateStore", "focusedSessionStateStore", "settingsStateStore", "seatCapabilitiesStateStore", "engineTargetStateStore"];
 export declare const SEAT_EVENT_METHOD_NAMES: readonly ["onEvent", "onToolPermissionRequest"];
 export declare const LOCAL_SESSION_EVENT_KEYS: readonly ["type", "sessionId", "message", "error", "errorCategory", "code", "session", "userMessageUuid", "requestId", "outcome", "parked", "chrome", "_sema_turnFailure", "subagentContent"];
@@ -808,7 +816,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
     readonly SeatCapabilitiesState: {
         readonly check: (v: unknown) => SeatValidation;
-        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard"];
+        readonly validated: readonly ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles"];
         readonly unchecked: readonly [];
     };
     readonly RecentFoldersResult: {
@@ -848,7 +856,7 @@ export declare const SEAT_VALIDATOR_KEY_COVERAGE: {
     };
 };
 export declare const SEAT_VALIDATOR_COVERAGE_EXEMPT: readonly [...{
-    label: "DeviceListOutcome" | "DeviceSessionBindingOutcome" | "DeviceRebindOutcome" | "DeviceEnrollTokenOutcome" | "DeviceRevokeOutcome" | "SeatDeviceRebindRequest" | "SeatDeviceRevokeRequest" | "EngineTargetState" | "EngineTargetResult" | "CloudLoginStart" | "CloudLoginCancelAck" | "CloudConnectResult" | "CloudLoginRequest" | "CloudEngineConnectRequest" | "CloudEngineConfigureRequest" | "OnboardProvidersResult" | "OnboardProbeResult" | "OnboardApplyResult" | "OnboardEntryRequest" | "OnboardApplyRequest";
+    label: "DeviceListOutcome" | "DeviceSessionBindingOutcome" | "DeviceRebindOutcome" | "DeviceEnrollTokenOutcome" | "DeviceRevokeOutcome" | "SeatDeviceRebindRequest" | "SeatDeviceRevokeRequest" | "EngineTargetState" | "EngineTargetResult" | "CloudLoginStart" | "CloudLoginCancelAck" | "CloudConnectResult" | "CloudLoginRequest" | "CloudEngineConnectRequest" | "CloudEngineConfigureRequest" | "OnboardProvidersResult" | "OnboardProbeResult" | "OnboardApplyResult" | "OnboardEntryRequest" | "OnboardApplyRequest" | "McpToolTogglesResult" | "McpToolToggleKey";
     check: (v: unknown) => SeatValidation;
     why: string;
 }[], {

package/dist/seatContract.js

@@ -327,7 +327,7 @@ export function readSeatStreamDelta(message) {
         return Object.freeze({ kind: "malformed" });
     }
 }
-export const SEAT_CAPABILITY_NAMES = Object.freeze(["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard"]);
+export const SEAT_CAPABILITY_NAMES = Object.freeze(["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles"]);
 const notReported = () => Object.freeze({ kind: "not_reported" });
 const malformedReading = () => Object.freeze({ kind: "malformed" });
 const reported = (available) => Object.freeze({ kind: "reported", available });
@@ -402,6 +402,7 @@ const SEAT_CAPABILITY_PHRASES = Object.freeze({
     devices: Object.freeze({ action: "Managing devices", ability: "manage devices", support: "device support" }),
     engineTarget: Object.freeze({ action: "Switching engines", ability: "switch engines", support: "engine-switching support" }),
     onboard: Object.freeze({ action: "Model setup", ability: "add models", support: "model-setup support" }),
+    mcpToolToggles: Object.freeze({ action: "Per-tool switching", ability: "toggle tools", support: "per-tool switches" }),
 });
 export function seatCapabilityUnavailableDetail(name, reading) {
     const phrase = Object.hasOwn(SEAT_CAPABILITY_PHRASES, name)
@@ -520,10 +521,10 @@ export const SEAT_REASONING_EFFORTS = [...REASONING_EFFORT_WORDS];
 export const SEAT_TURN_SETTINGS_KEYS = ["ultracode"];
 export const SEAT_TURN_SETTINGS_ORIGINS = Object.freeze({
     ultracode: Object.freeze({ carriedBy: "renderer" }),
-    webSearch: Object.freeze({ hostSupplied: "联网检索的每请求配置来自宿主的设置源(可能带检索服务的凭据与私网地址);渲染端没有设置文件,也不该持有凭据" }),
-    hooks: Object.freeze({ hostSupplied: "hooks 表来自宿主的设置文件(宿主经设置端口与 hooksForWire 投影);渲染端没有设置文件、也不执行本机 hook" }),
-    resolved: Object.freeze({ hostSupplied: "设置解析器的生效快照(hooks / env / model / 已解析权限)由宿主跑解析器得出;渲染端没有设置源可解析" }),
-    outputStyle: Object.freeze({ hostSupplied: "输出风格正文由宿主的兜底层随请求带(风格文件在宿主);渲染端只选名字,不持正文" }),
+    webSearch: Object.freeze({ hostSupplied: "settings.webSearch" }),
+    hooks: Object.freeze({ hostSupplied: "settings.hooks" }),
+    resolved: Object.freeze({ hostSupplied: "settings.resolved" }),
+    outputStyle: Object.freeze({ hostSupplied: "settings.outputStyle" }),
 });
 export const SEAT_REWIND_INTENT_KEYS = ["mode", "targetMessageUuid"];
 export const ATTACHMENT_UPLOAD_REQUEST_KEYS = ["name", "mimeType", "bytes"];
@@ -902,6 +903,12 @@ const checkSessionMcpPanelResult = seatCheck((v) => {
         return checkSessionMcpPanelFailure(v);
     return Object.hasOwn(v, "scenarioRefusal") ? checkSessionMcpPanelRefusalView(v) : checkSessionMcpPanelServersView(v);
 });
+const MCP_TOOL_TOGGLE_KEY = shapeRule("toggle key", {
+    server: reqF(R_NONEMPTY),
+    tool: reqF(R_NONEMPTY),
+});
+export const checkMcpToolToggleKey = seatShapeCheck(MCP_TOOL_TOGGLE_KEY);
+const checkMcpToolTogglesResult = seatShapeCheck(shapeRule("toggles result", { off: reqF(arrayRule(MCP_TOOL_TOGGLE_KEY)) }));
 const checkLocalSessionRecord = seatCheck((s) => {
     if (!isPlainRecord(s))
         return bad("session record is not a plain object");
@@ -1571,6 +1578,8 @@ export const LOCAL_SESSIONS_SPEC = {
         probeOnboardEntry: { kind: "invoke", check: checkOnboardProbeResult },
         applyOnboardEntry: { kind: "invoke", check: checkOnboardApplyResult },
         readSessionMcpPanel: { kind: "invoke", check: checkSessionMcpPanelResult },
+        listMcpToolToggles: { kind: "invoke", check: checkMcpToolTogglesResult },
+        setMcpToolToggle: { kind: "invoke", check: checkOkAck },
         onEvent: { kind: "event", check: checkLocalSessionEvent },
         onToolPermissionRequest: { kind: "event", check: checkToolPermissionRequest },
     },
@@ -1616,6 +1625,8 @@ export const SEAT_METHOD_NAMES = [
     "probeOnboardEntry",
     "applyOnboardEntry",
     "readSessionMcpPanel",
+    "listMcpToolToggles",
+    "setMcpToolToggle",
     "onEvent",
     "onToolPermissionRequest",
 ];
@@ -1895,7 +1906,7 @@ export const SEAT_VALIDATOR_KEY_COVERAGE = {
     },
     SeatCapabilitiesState: {
         check: checkSeatCapabilitiesState,
-        validated: ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard"],
+        validated: ["pickFolder", "rewind", "recents", "patchSession", "devices", "engineTarget", "onboard", "mcpToolToggles"],
         unchecked: [],
     },
     RecentFoldersResult: {
@@ -1956,6 +1967,8 @@ export const SEAT_VALIDATOR_COVERAGE_EXEMPT = [
         ["OnboardApplyResult", checkOnboardApplyResult],
         ["OnboardEntryRequest", checkOnboardEntryRequest],
         ["OnboardApplyRequest", checkOnboardApplyRequest],
+        ["McpToolTogglesResult", checkMcpToolTogglesResult],
+        ["McpToolToggleKey", checkMcpToolToggleKey],
     ].map(([label, check]) => ({
         label,
         check,
@@ -2006,5 +2019,7 @@ const _seatContractPins = [
     true, true,
     true, true, true, true,
     true, true, true,
+    true,
+    true, true, true,
 ];
 void _seatContractPins;

package/dist/settingsCredentialKeyPaths.d.ts

@@ -0,0 +1,8 @@
+export interface CredentialKeyFinding {
+    readonly path: string;
+    readonly numericByNameOnly?: true;
+}
+export declare function credentialNameWords(name: string): string[];
+export declare function isCredentialEnvName(name: string): boolean;
+export declare function isCredentialConfigKey(name: string): boolean;
+export declare function settingsCredentialKeyPaths(doc: object | null | undefined): CredentialKeyFinding[];