@sema-agent/core 7.51.2 → 7.53.0

package/dist/core/gate-outcome.d.ts

@@ -336,12 +336,17 @@ export type CauseTableCoversEveryDeniedBy = AssertAllKeysHandled<Exclude<DeniedB
  *  allow or deny) and from BOTH stations (this gate's own classifier step, and an ANCESTOR's frozen
  *  classifier reached through the inherited policy chain, whose allow and deny carry it out on the same seat
  *  that carries the FORM): which model it was for, which one answered, and — only when the ladder moved —
- *  the rung it left and why. ABSENT reads UNKNOWN, never "the seat answered" (that is `fallback` absent WITH
- *  the member present), and a consumer cannot tell its two causes apart from the record alone: no
- *  classification happened, or one ran on a decider given no candidate ladder and can name no model (a
- *  hand-built decider; a parked ancestor's cross-process rebuild, whose single fresh leg has none). A block
- *  at the DENIAL-LIMIT bound reaches no attribution seat: it becomes an ask, and the disposition names that
- *  resolution. Additive. Invariant I6 ({@link screenGateOutcome}) screens its shape. */
+ *  the rung it left and why. It is the classification's account, not the settlement's: a classification that
+ *  RULED keeps it whoever then decided the call — a call whose question a person then answered (an ask a
+ *  station after the classifier raised, or a block at the DENIAL-LIMIT bound, which becomes an ask) carries
+ *  it beside that person's settlement on {@link GateOutcome}; who decided is read from the settlement
+ *  (`human_allowed`, `policy_allowed`, …), never from this member's presence. ABSENT reads UNKNOWN, never
+ *  "the seat answered" (that is `fallback` absent WITH the member present), and a consumer cannot tell its
+ *  three causes apart from the record alone: no classification happened; one ran on a decider given no
+ *  candidate ladder and can name no model (a hand-built decider; a parked ancestor's cross-process rebuild,
+ *  whose single fresh leg has none); or one did not rule (it could not run, or replied with no verdict) and
+ *  handed the question to the approval seat, whose settlement then names the resolution that ask reached.
+ *  Additive. Invariant I6 ({@link screenGateOutcome}) screens its shape. */
 export type GateDisposition = {
     kind: "allowed";
     classifier?: AutoModeClassifierRound;

package/dist/core/governance-codes.d.ts

@@ -49,7 +49,8 @@ export declare function governanceRetryClass(code: string): GovernanceRetryClass
  * member over a roster row's wire bound (`config.tool_roster_bound` / `config.tool_name_too_long` /
  * `config.tool_contract_too_long`), a schema over the row's key bounds (`config.tool_schema_bound`), a
  * declared face or result card the schema / namespace cannot carry (`config.tool_face_invalid`), a name or
- * alias in the engine's protocol namespace (`config.tool_name_invalid`), an egress tool declared other than
+ * alias outside the caller tool name contract — one no rule can name, or one carrying the protocol namespace separator
+ * (`config.tool_name_invalid`), an egress tool declared other than
  * `write` (`config.egress_requires_write_effect` — also minted, same meaning, for a protocol tool's resolved
  * axes), a name the run reserves for a tool the engine injects (`config.reserved_tool_name` — structured output,
  * the skill tool, tool search, the offload reader, an injected protocol tool; `runGoal`'s completion tool, which
@@ -137,7 +138,7 @@ export type NoticeAudience = "user" | "operator";
  * the union's catalog ({@link EngineNotice.code}). The groups below say only which family a row joins,
  * so the catalog is not written a second time here and the two cannot drift.
  */
-export declare const ENGINE_NOTICE_CODES: readonly ["config.autocompact_window_clamped", "config.env_timeout_discarded", "config.materialize_env_discarded", "config.models_swapped", "config.context_settings_swapped", "config.read_face_swapped", "config.read_face_deployment_clamped", "config.write_face_swapped", "config.write_face_deployment_clamped", "config.read_deny_swapped", "config.tool_model_gate_removed", "config.tool_model_gate_unknown_class", "config.tool_model_gate_env_invalid", "config.artifact_host_invalid", "config.task_root_not_canonical", "config.write_protection_target_view_absent", "config.path_view_unresolved", "config.execution_env_capability_invalid", "config.tool_card_undeclared", "config.tool_face_undeclared", "config.tool_face_invalid", "config.forward_sink_failed", "config.durable_gate_unavailable", "config.peer_admission_out_of_range", "config.peer_lane_unmounted", "config.secret_env_scrubbed", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "classifier.fallback", "classifier.role_defaulted", "classifier.contract_broken", "classifier.unavailable", "checkpoint.execution_outcome_unrecorded", "delegation.transcript_integrity", "delegation.ask_unresolvable", "mcp.injection_dropped", "mcp.revocation_probe_failed", "mcp.server_redialed", "workflow.governance_key_stripped", "workflow.agent_option_ignored", "memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.content_class_declared", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "memory.consolidation_recommended", "memory.consolidation_committed", "memory.consolidation_conflict", "memory.consolidation_incomplete", "memory.consolidation_refused", "memory.consolidation_withheld", "memory.restore_withheld", "memory.project_scope_absent", "route.fallback_to_primary", "route.classifier_unroutable", "route.base_url_changed_key_unchanged", "route.response_model_mismatch", "route.tool_call_id_folded", "route.finish_reason_unknown", "route.stream_end_ignored", "route.extra_body_reserved_dropped", "context.tool_turn_repaired", "task.user_steer_undrained", "task.user_followup_undrained", "steering.parked_input_blocked", "task.turn_interrupted", "task.halt_unconsumed", "task.late_approval", "task.interrupt_unconsumed", "task.tool_turn_incomplete", "approval.read_root_granted", "approval.read_root_grant_rejected", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "skills.listing_truncated", "agents.listing_truncated", "tool_result.offload_put_failed", "tool_result.media_refused", "instructions.source_changed", "session.records_skipped", "memory.layer_locked_legacy", "server.model_unreachable", "permission.entry_mode_clamped"];
+export declare const ENGINE_NOTICE_CODES: readonly ["config.autocompact_window_clamped", "config.env_timeout_discarded", "config.materialize_env_discarded", "config.models_swapped", "config.context_settings_swapped", "config.read_face_swapped", "config.read_face_deployment_clamped", "config.write_face_swapped", "config.write_face_deployment_clamped", "config.read_deny_swapped", "config.tool_model_gate_removed", "config.tool_model_gate_unknown_class", "config.tool_model_gate_env_invalid", "config.artifact_host_invalid", "config.task_root_not_canonical", "config.write_protection_target_view_absent", "config.path_view_unresolved", "config.execution_env_capability_invalid", "config.tool_card_undeclared", "config.tool_face_undeclared", "config.tool_face_invalid", "config.forward_sink_failed", "config.durable_gate_unavailable", "config.peer_admission_out_of_range", "config.peer_lane_unmounted", "config.secret_env_scrubbed", "config.credential_not_withheld", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "config.session_rules_earlier_grammar", "permission.allowed_tool_not_granted", "mods.registration_refused", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "classifier.fallback", "classifier.role_defaulted", "classifier.contract_broken", "classifier.unavailable", "checkpoint.execution_outcome_unrecorded", "delegation.transcript_integrity", "delegation.ask_unresolvable", "mcp.injection_dropped", "mcp.revocation_probe_failed", "mcp.server_redialed", "workflow.governance_key_stripped", "workflow.agent_option_ignored", "memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.content_class_declared", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "memory.consolidation_recommended", "memory.consolidation_committed", "memory.consolidation_conflict", "memory.consolidation_incomplete", "memory.consolidation_refused", "memory.consolidation_withheld", "memory.restore_withheld", "memory.project_scope_absent", "route.fallback_to_primary", "route.classifier_unroutable", "route.credential_origin_mismatch", "route.response_model_mismatch", "route.tool_call_id_folded", "route.finish_reason_unknown", "route.stream_end_ignored", "route.extra_body_reserved_dropped", "context.tool_turn_repaired", "task.user_steer_undrained", "task.user_followup_undrained", "steering.parked_input_blocked", "task.turn_interrupted", "task.halt_unconsumed", "task.late_approval", "task.interrupt_unconsumed", "task.tool_turn_incomplete", "approval.read_root_granted", "approval.read_root_grant_rejected", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "skills.listing_truncated", "agents.listing_truncated", "tool_result.offload_put_failed", "tool_result.media_refused", "instructions.source_changed", "session.records_skipped", "memory.layer_locked_legacy", "server.model_unreachable", "permission.entry_mode_clamped"];
 /** A catalogued code (see {@link ENGINE_NOTICE_CODES}); {@link NOTICE_MINTER} says who mints it. NOT the type of
  *  `EngineNotice.code`, which stays `string` — a host forwarding its own notices through the same
  *  sink is a supported shape, and narrowing that field would break it. */
@@ -177,6 +178,7 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "task.tool_turn_incomplete": "user";
     readonly "route.finish_reason_unknown": "user";
     readonly "route.stream_end_ignored": "user";
+    readonly "route.credential_origin_mismatch": "user";
     readonly "approval.read_root_granted": "user";
     readonly "approval.read_root_grant_rejected": "user";
     readonly "config.durable_gate_unavailable": "user";
@@ -185,7 +187,9 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "permission.read_deny_unapplied": "user";
     readonly "permission.rule_store_unavailable": "user";
     readonly "permission.rule_row_dropped": "user";
+    readonly "config.session_rules_earlier_grammar": "user";
     readonly "permission.allowed_tool_not_granted": "user";
+    readonly "mods.registration_refused": "user";
     readonly "memory.capture_opted_out": "user";
     readonly "memory.capture_optout_unpersisted": "user";
     readonly "memory.consolidation_withheld": "operator";
@@ -214,6 +218,7 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "config.peer_lane_unmounted": "operator";
     readonly "config.peer_admission_out_of_range": "operator";
     readonly "config.secret_env_scrubbed": "operator";
+    readonly "config.credential_not_withheld": "operator";
     readonly "peer.inbound_disposition": "user";
     readonly "peer.held_settled": "user";
     readonly "peer.idle_subscription": "user";
@@ -234,7 +239,6 @@ declare const NOTICE_AUDIENCE_TABLE: {
     readonly "memory.project_scope_absent": "operator";
     readonly "route.fallback_to_primary": "operator";
     readonly "route.classifier_unroutable": "operator";
-    readonly "route.base_url_changed_key_unchanged": "operator";
     readonly "route.response_model_mismatch": "operator";
     readonly "route.tool_call_id_folded": "operator";
     readonly "route.extra_body_reserved_dropped": "operator";
@@ -300,12 +304,15 @@ declare const NOTICE_MINTER_TABLE: {
     readonly "config.peer_admission_out_of_range": "engine";
     readonly "config.peer_lane_unmounted": "engine";
     readonly "config.secret_env_scrubbed": "engine";
+    readonly "config.credential_not_withheld": "engine";
     readonly "config.permission_mode_unavailable": "engine";
     readonly "permission.ask_released_by_mode": "engine";
     readonly "permission.read_deny_unapplied": "engine";
     readonly "permission.rule_store_unavailable": "engine";
     readonly "permission.rule_row_dropped": "engine";
+    readonly "config.session_rules_earlier_grammar": "engine";
     readonly "permission.allowed_tool_not_granted": "engine";
+    readonly "mods.registration_refused": "engine";
     readonly "peer.inbound_disposition": "engine";
     readonly "peer.held_settled": "engine";
     readonly "peer.idle_subscription": "engine";
@@ -339,7 +346,7 @@ declare const NOTICE_MINTER_TABLE: {
     readonly "memory.project_scope_absent": "engine";
     readonly "route.fallback_to_primary": "engine";
     readonly "route.classifier_unroutable": "engine";
-    readonly "route.base_url_changed_key_unchanged": "engine";
+    readonly "route.credential_origin_mismatch": "engine";
     readonly "route.response_model_mismatch": "engine";
     readonly "route.tool_call_id_folded": "engine";
     readonly "route.finish_reason_unknown": "engine";

package/dist/core/governance-codes.js

@@ -145,12 +145,15 @@ export const ENGINE_NOTICE_CODES = Object.freeze([
     "config.peer_admission_out_of_range",
     "config.peer_lane_unmounted",
     "config.secret_env_scrubbed",
+    "config.credential_not_withheld",
     "config.permission_mode_unavailable",
     "permission.ask_released_by_mode",
     "permission.read_deny_unapplied",
     "permission.rule_store_unavailable",
     "permission.rule_row_dropped",
+    "config.session_rules_earlier_grammar",
     "permission.allowed_tool_not_granted",
+    "mods.registration_refused",
     "peer.inbound_disposition",
     "peer.held_settled",
     "peer.idle_subscription",
@@ -184,7 +187,7 @@ export const ENGINE_NOTICE_CODES = Object.freeze([
     "memory.project_scope_absent",
     "route.fallback_to_primary",
     "route.classifier_unroutable",
-    "route.base_url_changed_key_unchanged",
+    "route.credential_origin_mismatch",
     "route.response_model_mismatch",
     "route.tool_call_id_folded",
     "route.finish_reason_unknown",
@@ -235,6 +238,7 @@ const NOTICE_AUDIENCE_TABLE = {
     "task.tool_turn_incomplete": "user",
     "route.finish_reason_unknown": "user",
     "route.stream_end_ignored": "user",
+    "route.credential_origin_mismatch": "user",
     "approval.read_root_granted": "user",
     "approval.read_root_grant_rejected": "user",
     "config.durable_gate_unavailable": "user",
@@ -243,7 +247,9 @@ const NOTICE_AUDIENCE_TABLE = {
     "permission.read_deny_unapplied": "user",
     "permission.rule_store_unavailable": "user",
     "permission.rule_row_dropped": "user",
+    "config.session_rules_earlier_grammar": "user",
     "permission.allowed_tool_not_granted": "user",
+    "mods.registration_refused": "user",
     "memory.capture_opted_out": "user",
     "memory.capture_optout_unpersisted": "user",
     "memory.consolidation_withheld": "operator",
@@ -272,6 +278,7 @@ const NOTICE_AUDIENCE_TABLE = {
     "config.peer_lane_unmounted": "operator",
     "config.peer_admission_out_of_range": "operator",
     "config.secret_env_scrubbed": "operator",
+    "config.credential_not_withheld": "operator",
     "peer.inbound_disposition": "user",
     "peer.held_settled": "user",
     "peer.idle_subscription": "user",
@@ -292,7 +299,6 @@ const NOTICE_AUDIENCE_TABLE = {
     "memory.project_scope_absent": "operator",
     "route.fallback_to_primary": "operator",
     "route.classifier_unroutable": "operator",
-    "route.base_url_changed_key_unchanged": "operator",
     "route.response_model_mismatch": "operator",
     "route.tool_call_id_folded": "operator",
     "route.extra_body_reserved_dropped": "operator",
@@ -339,12 +345,15 @@ const NOTICE_MINTER_TABLE = {
     "config.peer_admission_out_of_range": "engine",
     "config.peer_lane_unmounted": "engine",
     "config.secret_env_scrubbed": "engine",
+    "config.credential_not_withheld": "engine",
     "config.permission_mode_unavailable": "engine",
     "permission.ask_released_by_mode": "engine",
     "permission.read_deny_unapplied": "engine",
     "permission.rule_store_unavailable": "engine",
     "permission.rule_row_dropped": "engine",
+    "config.session_rules_earlier_grammar": "engine",
     "permission.allowed_tool_not_granted": "engine",
+    "mods.registration_refused": "engine",
     "peer.inbound_disposition": "engine",
     "peer.held_settled": "engine",
     "peer.idle_subscription": "engine",
@@ -378,7 +387,7 @@ const NOTICE_MINTER_TABLE = {
     "memory.project_scope_absent": "engine",
     "route.fallback_to_primary": "engine",
     "route.classifier_unroutable": "engine",
-    "route.base_url_changed_key_unchanged": "engine",
+    "route.credential_origin_mismatch": "engine",
     "route.response_model_mismatch": "engine",
     "route.tool_call_id_folded": "engine",
     "route.finish_reason_unknown": "engine",

package/dist/core/hands-band-screen.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Total over what a deployment can hand the seat: absent passes; a value that is not a plain record, a member the record does not
+ * have, or a member holding a value it does not take refuses by name (`config.invalid_argument`, `detail.field` = `RunnerDeps.hands`
+ * or `RunnerDeps.hands.<member>`) — a band setting the engine cannot read is never run as if it were absent. A member holding
+ * `undefined` is absence, as on every optional seat.
+ */
+export declare function screenHandsBandOptions(value: unknown): void;

package/dist/core/hands-band-screen.js

@@ -0,0 +1,32 @@
+const HANDS_BAND_MEMBERS = {
+    bashReadonlyAllow: { takes: "a list of command-name strings", ok: (v) => Array.isArray(v) && v.every((c) => typeof c === "string") },
+    commitCoAuthor: { takes: "a string or false", ok: (v) => typeof v === "string" || v === false },
+    readImageDownsampler: { takes: "a function or false", ok: (v) => typeof v === "function" || v === false },
+    beforeWrite: { takes: "a function", ok: (v) => typeof v === "function" },
+    autoBackgroundOnTimeout: { takes: "a boolean", ok: (v) => typeof v === "boolean" },
+};
+const kindOf = (v) => (v === null ? "null" : Array.isArray(v) ? "an array" : typeof v);
+export function screenHandsBandOptions(value) {
+    if (value === undefined)
+        return;
+    const refuse = (field, problem) => {
+        const e = new Error(`${field} ${problem} — a hands band setting the engine cannot read is refused rather than ignored.`);
+        e.code = "config.invalid_argument";
+        e.detail = { field };
+        throw e;
+    };
+    const proto = typeof value === "object" && value !== null ? Object.getPrototypeOf(value) : undefined;
+    if (typeof value !== "object" || value === null || Array.isArray(value) || (proto !== Object.prototype && proto !== null)) {
+        refuse("RunnerDeps.hands", `must be a plain record of hands band settings (got ${kindOf(value)})`);
+    }
+    for (const key of Object.keys(value)) {
+        const v = value[key];
+        if (v === undefined)
+            continue;
+        if (!Object.hasOwn(HANDS_BAND_MEMBERS, key))
+            refuse(`RunnerDeps.hands.${key}`, `is not a hands band setting (the settings: ${Object.keys(HANDS_BAND_MEMBERS).join(", ")})`);
+        const member = HANDS_BAND_MEMBERS[key];
+        if (!member.ok(v))
+            refuse(`RunnerDeps.hands.${key}`, `must be ${member.takes} (got ${kindOf(v)})`);
+    }
+}