@zq-silk/yui 2.20.0 → 2.22.0

package/README.md

@@ -459,6 +459,11 @@ manage global installations; do not use the global `yui` to validate local chang
 Live-model, paid or shared-resource
 tests require an explicit request for those resources.
 
+For topic-specific evaluation and shared evidence tools, see
+[evaluation tooling](scripts/eval/README.md).
+`npm run eval:check` is fast and offline; `eval:context:wiring` is an explicit isolated
+fake-Provider check, outside the default core gate. It is not model validation.
+
 ## Community and support
 
 - Questions, bugs and feature requests: open a

package/dist/cli/commandCatalog.js

@@ -1,4 +1,5 @@
 import { supportedAgentAdapterIds } from "../agent/adapterCatalog.js";
+import { CONTEXT_FAMILIES } from "../context/contextFamilies.js";
 import { supportedAgentExecutionComponentIds } from "../agent/executionComponents.js";
 import { productConfigurationOptions } from "../nativeAgent/product/config.js";
 import { catalogCommands, catalogCommandOptions } from "../nativeAgent/product/catalog.js";
@@ -142,6 +143,7 @@ const roleProfileOptions = [
 ];
 const roleAgentOptions = [
     "--model", "--effort", "--permission-strategy", "--sandbox", "--approval", "--permission-mode",
+    "--exclude-tmpdir-env-var", "--exclude-slash-tmp",
     "--allowed-tool", "--disallowed-tool", "--search"
 ];
 const roleProfileClearOptions = [
@@ -151,7 +153,7 @@ const roleProfileClearOptions = [
 ];
 const roleAgentClearOptions = [
     "--clear-model", "--clear-effort", "--clear-allowed-tools", "--clear-disallowed-tools",
-    "--clear-search", "--clear-agent-config"
+    "--clear-search", "--clear-agent-config", "--clear-exclude-tmpdir-env-var", "--clear-exclude-slash-tmp"
 ];
 const agentProfileOptions = [
     "--description", "--instructions", "--skill",
@@ -164,6 +166,8 @@ const agentProfileClearOptions = [
 const roleAgentOptionValues = {
     "--sandbox": ["read-only", "workspace-write", "danger-full-access"],
     "--approval": ["untrusted", "on-request", "never"],
+    "--exclude-tmpdir-env-var": ["true", "false"],
+    "--exclude-slash-tmp": ["true", "false"],
     "--permission-strategy": ["default", "bypass", "configured"],
     "--search": ["true"]
 };
@@ -234,7 +238,8 @@ const globalSessionChildren = [
     {
         name: "retry", discovery: { surface: "public", audiences: ["public", "operator"] },
         summary: "Inspect or control bounded Provider recovery for this Global Session.",
-        usage: "yui session retry <role> [show|cancel|disable|enable]"
+        usage: "yui session retry <role> [show|cancel|disable|enable] [--cursor <cursor> (show only)]",
+        options: ["--cursor"]
     }
 ];
 const profileChildren = [
@@ -401,19 +406,19 @@ const taskChildren = [
         fileOptions: ["--summary-file"]
     },
     {
-        name: "list", discovery: { surface: "public", audiences: ["public", "operator", "leader"] },
+        name: "list", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment"] },
         summary: "Discover Tasks through a bounded, filterable catalog.",
         usage: "yui task list [--all] [--source <ordinary|job>] [--status <status>] [--project <id>] [--search <text>] [--attention <category>] [--limit <1..100>] [--cursor <cursor>]",
         options: ["--all", "--source", "--status", "--project", "--search", "--attention", "--limit", "--cursor"]
     },
     {
-        name: "search", discovery: { surface: "public", audiences: ["public", "operator", "leader"] },
+        name: "search", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment"] },
         summary: "Search authorized Task bodies and return exact, reference-only source citations.",
         usage: "yui task search <query> [--task <id>] [--kind <brief|message|decision|result|completion>] [--limit <1..100>] [--cursor <cursor>]",
         options: ["--task", "--kind", "--limit", "--cursor"]
     },
     { name: "show", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment"] }, summary: "Show Task metadata and counts; long details use contentPage.", usage: "yui task show <id> [--cursor <cursor>]", options: ["--cursor"] },
-    { name: "usage", discovery: { surface: "public", audiences: ["public", "operator", "leader"] }, summary: "Read bounded Task usage and sourced costs; request detail pages explicitly.", usage: "yui task usage <task> [--limit <0..50>] [--offset <n>]", options: ["--limit", "--offset"] },
+    { name: "usage", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment"] }, summary: "Read bounded Task usage and sourced costs; request detail pages explicitly.", usage: "yui task usage <task> [--limit <0..50>] [--offset <n>]", options: ["--limit", "--offset"] },
     {
         name: "artifact", discovery: { surface: "managed", audiences: ["operator", "leader"] },
         summary: "Save Task files in local Git and read current or commit-pinned content.",
@@ -426,10 +431,41 @@ const taskChildren = [
     },
     {
         name: "context", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "unbound"] },
-        summary: "Read compact authorized facts, fixed-bound delta, or inspect a Context reference.",
-        usage: "yui task context [read|list|delta|inspect] <task> [--after <cursor>] [--continuation <cursor>] [--cursor <cursor>] [--limit <n>] [--store <store> --ref <id>] [--digest <digest>] [--view <current|all>]",
-        options: ["--after", "--continuation", "--cursor", "--limit", "--store", "--ref", "--digest", "--status", "--work-item", "--view"],
-        optionValues: { "--view": ["current", "all"] }
+        summary: "Read current authorized facts; discover references or inspect complete originals with a focused subcommand.",
+        executable: true,
+        usage: "yui task context <task>",
+        sections: [{ id: "read", title: "Context reads", entries: ["read", "list", "inspect", "delta"] }],
+        children: [
+            {
+                name: "read", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "unbound"] },
+                summary: "Read the current bounded Task index, equivalent to task context <task>.",
+                usage: "yui task context read <task>"
+            },
+            {
+                name: "list", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "unbound"] },
+                summary: "Discover one authorized family. --after filters creation time, not later edits; current excludes explicit ACK/retirement.",
+                usage: "yui task context list <task> --store <store> [--cursor <cursor>] [--limit <1..100>] [--view current|all] [--status <status>] [--after <timestamp>] [--work-item <id>]",
+                options: ["--store", "--cursor", "--limit", "--view", "--status", "--after", "--work-item"],
+                optionValues: { "--view": ["current", "all"], "--store": CONTEXT_FAMILIES }
+            },
+            {
+                name: "inspect", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "unbound"] },
+                summary: "Read complete originals. Choose one single-ref or 1–8-ref batch form; finish contentPage using the same selection and cursor.",
+                usage: [
+                    "yui task context inspect <task> --store <store> --ref <id> [--digest <digest>] [--cursor <cursor>]",
+                    "yui task context inspect <task> --context-ref <store/refId@digest> ... [--cursor <cursor>]",
+                    "yui task context inspect <task> --refs <JSON-array-of-store-refId-digest> [--cursor <cursor>]"
+                ],
+                options: ["--store", "--ref", "--digest", "--context-ref", "--refs", "--cursor"],
+                optionValues: { "--store": CONTEXT_FAMILIES }
+            },
+            {
+                name: "delta", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "unbound"] },
+                summary: "Read fixed-bound event history after coreCursor, not current record bodies. Use throughCursor for the next window.",
+                usage: "yui task context delta <task> --after <cursor> [--continuation <cursor>] [--limit <1..100>]",
+                options: ["--after", "--continuation", "--limit"]
+            }
+        ]
     },
     {
         name: "next-action", discovery: { surface: "managed", audiences: ["operator", "leader"] },
@@ -708,11 +744,11 @@ const taskChildren = [
             { name: "list", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Discover recorded Role health; Host is unchecked until role status.", usage: "yui task role list <task> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
             {
                 name: "status", discovery: { surface: "managed", audiences: ["operator", "leader"] },
-                summary: "Show persisted and live runtime state for one Task Role.",
-                usage: "yui task role status <task> <role> [--cursor <cursor>]",
-                options: ["--cursor"]
+                summary: "Show current execution observations; full includes nested original records.",
+                usage: "yui task role status <task> <role> [--view current|full] [--cursor <cursor>]",
+                options: ["--view", "--cursor"], optionValues: { "--view": ["current", "full"] }
             },
-            { name: "show", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Show one Task Role.", usage: "yui task role show <task> <role> [--cursor <cursor>]", options: ["--cursor"] },
+            { name: "show", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Show current Role configuration; full adds Session and Run history.", usage: "yui task role show <task> <role> [--view current|full] [--cursor <cursor>]", options: ["--view", "--cursor"], optionValues: { "--view": ["current", "full"] } },
             { name: "enable", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Enable this Task Role; does not change Task execution authority.", usage: "yui task role enable <task> <role>" },
             { name: "disable", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Block new execution of this Task Role without stopping its current Run.", usage: "yui task role disable <task> <role>" },
             { name: "capabilities", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Read native options using this Role's desired or exact failed launch configuration.",
@@ -738,7 +774,8 @@ const taskChildren = [
                     {
                         name: "retry", discovery: { surface: "managed", audiences: ["operator", "leader"] },
                         summary: "Inspect or control Provider recovery without stopping an admitted Turn.",
-                        usage: "yui task role session retry <task> <role> [show|cancel|disable|enable]"
+                        usage: "yui task role session retry <task> <role> [show|cancel|disable|enable] [--cursor <cursor> (show only)]",
+                        options: ["--cursor"]
                     },
                     {
                         name: "inspect", discovery: { surface: "managed", audiences: ["operator", "leader"] },
@@ -912,9 +949,9 @@ const taskChildren = [
             { name: "list", discovery: { surface: "managed", audiences: ["operator", "leader", "assignment"] }, summary: "Discover AgentRuns for a Task or one WorkItem.", usage: "yui task run list <task|task/work> [--limit <1..100>] [--cursor <cursor>]", options: ["--limit", "--cursor"] },
             {
                 name: "show", discovery: { surface: "managed", audiences: ["operator", "leader", "assignment"] },
-                summary: "Show one AgentRun and its retained audit evidence.",
-                usage: "yui task run show <task>/<run> [--cursor <cursor>] [--json]",
-                options: ["--cursor", "--json"]
+                summary: "Read full audit evidence, current status, or the complete original result without input/configuration bodies.",
+                usage: "yui task run show <task>/<run> [--view full|status|result] [--cursor <cursor>] [--json]",
+                options: ["--view", "--cursor", "--json"]
             },
             {
                 name: "retry", discovery: { surface: "managed", audiences: ["operator", "leader"] },
@@ -937,9 +974,12 @@ const taskChildren = [
                 children: [
                     {
                         name: "expand", discovery: { surface: "managed", audiences: ["operator", "leader", "assignment"] },
-                        summary: "Expand one authorized AgentRun context reference.",
-                        usage: "yui task run context expand <task>/<run> <ref-id> --store <store> [--mode full] [--cursor <cursor>]",
-                        options: ["--store", "--mode", "--cursor"]
+                        summary: "Read one frozen original or 1–8 explicitly selected originals from the same authorized Run.",
+                        usage: [
+                            "yui task run context expand <task>/<run> <ref-id> --store <store> [--mode full] [--cursor <cursor>]",
+                            "yui task run context expand <task>/<run> --context-ref <store/refId[@digest]> ... [--cursor <cursor>]"
+                        ],
+                        options: ["--store", "--context-ref", "--mode", "--cursor"]
                     },
                     {
                         name: "delta", discovery: { surface: "managed", audiences: ["operator", "leader", "assignment"] },
@@ -1122,7 +1162,7 @@ const taskChildren = [
             { name: "show", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Show fixed wake inputs/results; expand diagnostics with --history.", usage: "yui task wake show <task> <wake> [--history] [--cursor <cursor>]", options: ["--history", "--cursor"] },
             { name: "retry", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Retry a rejected notification after correcting its cause; preserve original input.",
                 usage: "yui task wake retry <task> <wake> --reason <correction>", options: ["--reason"] },
-            { name: "resolve", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Release an unknown notification claim after explicit quiescence evidence, without replay.",
+            { name: "resolve", discovery: { surface: "managed", audiences: ["operator", "leader"] }, summary: "Release an unknown or rejected notification for explicit handling after quiescence evidence, without replay.",
                 usage: "yui task wake resolve <task> <wake> --reason <quiescence-evidence>", options: ["--reason"] }
         ]
     },
@@ -1239,7 +1279,12 @@ export const ROOT_COMMAND = buildNode({
                 }
             ]
         },
-        { name: "help", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "global", "unbound"] }, summary: "Show root or scoped command help.", usage: "yui help [command ...]", commandPathArguments: true },
+        {
+            name: "help", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "global", "unbound"] },
+            summary: "Show root or scoped command help; JSON defaults to immediate child summaries.",
+            usage: ["yui help [command ...]", "yui --json help [command ...] --recursive"],
+            options: ["--recursive"], commandPathArguments: true
+        },
         { name: "version", discovery: { surface: "public", audiences: ["public", "operator", "leader", "assignment", "global", "unbound"] }, summary: "Print the installed Yui version." },
         {
             name: "update", discovery: { surface: "public", audiences: ["public", "operator"] },
@@ -1811,8 +1856,7 @@ export function findCommandNode(path, root = ROOT_COMMAND) {
     return node;
 }
 export const findCommand = findCommandNode;
-/** Structured help projection consumed by `config describe --json` and Operator. */
-export function describeCommandTree(node) {
+function describeCommand(node) {
     return {
         path: node.path.slice(1).join(" "),
         summary: node.summary,
@@ -1821,8 +1865,25 @@ export function describeCommandTree(node) {
         options: node.options,
         optionValues: node.optionValues,
         argumentValues: node.argumentValues,
-        values: node.values,
-        children: visibleChildren(node).map(describeCommandTree)
+        values: node.values
+    };
+}
+/** Complete caller-filtered tree for explicit recursive help and offline tools. */
+export function describeCommandTree(node) {
+    return { ...describeCommand(node), children: visibleChildren(node).map(describeCommandTree) };
+}
+/** Complete current-command details; descendants require explicit navigation. */
+export function describeCommandHelp(node) {
+    return {
+        ...describeCommand(node),
+        children: visibleChildren(node).map(child => ({
+            path: child.path.slice(1).join(" "), summary: child.summary
+        })),
+        discovery: {
+            children: "complete-immediate-summaries",
+            details: "yui --json help <command ...>",
+            tree: "yui --json help [command ...] --recursive"
+        }
     };
 }
 export function validateCommandCatalog(root) {
@@ -1857,7 +1918,6 @@ export function validateCommandCatalog(root) {
                 || node.children.length > 0
                 || node.values.length > 0
                 || node.sections.length > 0
-                || node.options.length > 0
                 || node.hiddenOptions.length > 0
                 || Object.keys(node.optionValues).length > 0
                 || Object.keys(node.argumentValues).length > 0
@@ -1865,7 +1925,7 @@ export function validateCommandCatalog(root) {
                 || node.fileArguments.length > 0
                 || node.executableOptions.length > 0;
             if (ownsOtherCompletionMetadata) {
-                throw new Error(`Command-path provider must be a visible metadata-free leaf: ${node.path.join(" ")}`);
+                throw new Error(`Command-path provider must be a visible leaf with only flag options: ${node.path.join(" ")}`);
             }
         }
         const immediate = new Set();

package/dist/cli/dynamicCompletion.js

@@ -8,7 +8,10 @@ export async function resolveCompletionCandidates(input) {
     const root = input.root ?? ROOT_COMMAND;
     if (words[0] === "help") {
         const { node, consumed } = resolveCommand(words.slice(1), root);
-        return consumed === words.length - 1 ? prefix(visibleChildren(node).map(child => child.name), input.current) : [];
+        if (consumed !== words.length - 1)
+            return [];
+        return prefix(input.current.startsWith("-") ? findChild(root, "help")?.options ?? []
+            : visibleChildren(node).map(child => child.name), input.current);
     }
     const { node, consumed } = resolveCommand(words, root);
     if (node.kind === "group" && consumed < words.length)

package/dist/cli/helpRenderer.js

@@ -1,4 +1,14 @@
-import { visibleCommandSections } from "./commandCatalog.js";
+import { orderedImmediateTokens, visibleCommandSections } from "./commandCatalog.js";
+/** A path error needs nearby choices, not another complete help document.
+ * The caller supplies the already-filtered discovery node. */
+export function renderCommandPathHint(node) {
+    const choices = orderedImmediateTokens(node);
+    const path = node.path.slice(1).join(" ");
+    return [
+        ...(choices.length === 0 ? [] : [`Visible choices here: ${choices.join(", ")}`]),
+        `Full help: yui --json help${path ? ` ${path}` : ""}`
+    ].join("\n") + "\n";
+}
 export function renderCommandHelp(node, version) {
     const title = node.path.length === 1
         ? `Yui ${version}`
@@ -30,6 +40,7 @@ function describeOption(option) {
         "--detach": "Return after Controller starts Web; use --status / --stop. Operator and --json starts always return.",
         "--port": "Set the local listen port.",
         "--json": "Emit machine-readable JSON.",
+        "--recursive": "Expand the complete caller-filtered command tree (requires --json).",
         "--project": "Select a Project.",
         "--role": "Select a Task role.",
         "--summary": "Set summary text.",

package/dist/cli/interactionPolicy.js

@@ -88,6 +88,7 @@ export const INTERACTION_POLICIES = Object.freeze([
             "--responsibility": "value", "--constraint": "value", "--expected-output": "value",
             "--system-prompt": "value", "--skill": "value", "--model": "value",
             "--effort": "value", "--permission-strategy": "value", "--sandbox": "value", "--approval": "value",
+            "--exclude-tmpdir-env-var": "value", "--exclude-slash-tmp": "value",
             "--permission-mode": "value", "--allowed-tool": "value", "--disallowed-tool": "value",
             "--search": "value"
         }
@@ -374,6 +375,7 @@ export const INTERACTION_POLICIES = Object.freeze([
             "--constraint": "value", "--expected-output": "value", "--system-prompt": "value",
             "--skill": "value", "--model": "value", "--effort": "value",
             "--permission-strategy": "value", "--sandbox": "value", "--approval": "value", "--permission-mode": "value",
+            "--exclude-tmpdir-env-var": "value", "--exclude-slash-tmp": "value",
             "--allowed-tool": "value", "--disallowed-tool": "value", "--search": "value"
         }
     },

package/dist/cli/invocationAuthority.js

@@ -4,7 +4,7 @@ import { requireManagedGlobalCaller } from "../runtime/managedCaller.js";
 import { routeInvocation } from "./invocationRouter.js";
 import { findInteractionPolicy } from "./interactionPolicy.js";
 import { TASK_RECORD_ID_PREFIXES } from "../task/taskRecordReference.js";
-import { taskDiagnosticTarget } from "./managedDiagnostics.js";
+import { isTaskReadCommand } from "./managedDiagnostics.js";
 /** Configuration reads remain available; every Home configuration mutation
  * has one owner, irrespective of which config subcommand parses its flags. */
 export function assertConfigurationAuthority(args, store, env) {
@@ -37,12 +37,8 @@ export function assertTaskInvocationScope(args, env) {
     }
     if (args[0] !== "task" || ["list", "search"].includes(args[1] ?? ""))
         return;
-    const diagnostic = taskDiagnosticTarget(args);
-    if (diagnostic !== undefined) {
-        if (diagnostic !== env.YUI_TASK_ID)
-            throw usageError("Command target is outside the caller's Task.");
+    if (isTaskReadCommand(args))
         return;
-    }
     const invocation = routeInvocation([...args]);
     if (invocation.kind !== "execute")
         return;

package/dist/cli/invocationRouter.js

@@ -18,20 +18,20 @@ export function routeInvocation(args, discoveryRoot = ROOT_COMMAND) {
     return { ...result, helpNode };
 }
 function resolveHelpPath(path, root) {
-    if (path.length === 0)
-        return { kind: "help", node: root };
+    const recursive = path.at(-1) === "--recursive";
+    const segments = recursive ? path.slice(0, -1) : path;
     let node = root;
     let nearestGroup = root;
-    for (const segment of path) {
+    for (const segment of segments) {
         const child = findChild(node, segment);
         if (child === undefined || child.hidden) {
-            return { kind: "path-error", typedPath: path.join(" "), helpNode: nearestGroup };
+            return { kind: "path-error", typedPath: path.join(" "), helpNode: nearestGroup, discoveryOnly: true };
         }
         node = child;
         if (node.kind !== "leaf")
             nearestGroup = node;
     }
-    return { kind: "help", node };
+    return { kind: "help", node, recursive };
 }
 function resolveExecutionPath(args) {
     let node = ROOT_COMMAND;

package/dist/cli/managedDiagnostics.js

@@ -1,20 +1,28 @@
-/** Read/repair routing, not an alternative grant. Callers still prove their
- * Home and Role identity; writes still require current Session authority. */
-export function taskDiagnosticTarget(args) {
+/** Explicit effect classification, not a verb-name heuristic. Ordinary reads
+ * authenticate the caller but do not borrow the target Task's authority.
+ * Mixed commands (retry, base status) stay mutating unless this exact form is
+ * read-only. Domain parsers still reject unknown flags and malformed targets. */
+export function isTaskReadCommand(args) {
     if (args[0] !== "task")
-        return undefined;
-    if (["show", "context", "next-action", "archive-preflight"].includes(args[1] ?? "")) {
-        return args[1] === "context" && ["read", "list", "inspect", "delta"].includes(args[2] ?? "")
-            ? args[3] : args[2];
-    }
-    if (args[1] === "role" && ["list", "status", "show"].includes(args[2] ?? ""))
-        return args[3];
-    if (args[1] === "role" && args[2] === "session" && args[3] === "inspect")
-        return args[4];
-    if (["message", "run", "wake", "input"].includes(args[1] ?? "")
+        return false;
+    if (["list", "search", "show", "usage", "next-action", "remote-delivery", "archive-preflight"].includes(args[1] ?? ""))
+        return true;
+    if (args[1] === "context")
+        return true;
+    if (["brief", "decision", "milestone", "event", "message", "run", "wake", "input", "work", "publication"].includes(args[1] ?? "")
         && ["list", "show"].includes(args[2] ?? ""))
-        return args[3]?.split("/")[0];
-    return undefined;
+        return true;
+    if (args[1] === "artifact" && ["list", "read"].includes(args[2] ?? ""))
+        return true;
+    if (args[1] === "run" && args[2] === "context")
+        return true;
+    if (args[1] === "role" && ["list", "status", "show"].includes(args[2] ?? ""))
+        return true;
+    if (args[1] === "role" && args[2] === "session") {
+        return args[3] === "inspect"
+            || args[3] === "retry" && (args.length === 6 || args.length === 7 && args[6] === "show");
+    }
+    return false;
 }
 export function operatorOfflineCommand(args) {
     return (args[0] === "controller"
@@ -25,5 +33,5 @@ export function operatorOfflineCommand(args) {
         || (args[0] === "session" && ["context", "reconcile"].includes(args[1] ?? ""))
         || (args[0] === "role" && args[1] === "message" && ["list", "show"].includes(args[2] ?? ""))
         || (args[0] === "task" && args[1] === "list")
-        || taskDiagnosticTarget(args) !== undefined;
+        || isTaskReadCommand(args);
 }

package/dist/cli/roleWizard.js

@@ -459,7 +459,11 @@ function agentFields(binding, catalog) {
         agentField("permission-strategy", "Permission strategy", permission.strategy, "--permission-strategy", ["--permission-strategy", "default"], catalogField(catalog, "permission.strategy")),
         ...(binding.adapterId === "codex" && permission.strategy === "configured" ? [
             agentField("sandbox", "Sandbox", permission.sandbox, "--sandbox", ["--permission-strategy", "default"], catalogField(catalog, "permission.sandbox")),
-            agentField("approval", "Approval", permission.approval, "--approval", ["--permission-strategy", "default"], catalogField(catalog, "permission.approval"))
+            agentField("approval", "Approval", permission.approval, "--approval", ["--permission-strategy", "default"], catalogField(catalog, "permission.approval")),
+            ...(permission.sandbox === "workspace-write" ? [
+                agentField("exclude-tmpdir-env-var", "Exclude TMPDIR write access", permission.excludeTmpdirEnvVar, "--exclude-tmpdir-env-var", ["--clear-exclude-tmpdir-env-var"], catalogField(catalog, "permission.excludeTmpdirEnvVar")),
+                agentField("exclude-slash-tmp", "Exclude /tmp write access", permission.excludeSlashTmp, "--exclude-slash-tmp", ["--clear-exclude-slash-tmp"], catalogField(catalog, "permission.excludeSlashTmp"))
+            ] : [])
         ] : []),
         ...(binding.adapterId === "codex" ? [
             agentField("search", "Web search", config.search, "--search", ["--clear-search"], catalogField(catalog, "search"))

package/dist/commands/durableJobCommands.js

@@ -2,7 +2,7 @@ import { usageError } from "../errors/cliError.js";
 import { ensureFileTaskController } from "../controller/clientRuntime.js";
 import { callFileTaskController } from "../controller/clientRuntime.js";
 import { acknowledgeDurableJob, cancelDurableJob, getDurableJob, startDurableJob } from "../controller/jobClient.js";
-import { resolveJobCaller, taskLocalActor } from "../task/taskAuthority.js";
+import { resolveJobCaller, resolveJobReadCaller, taskLocalActor } from "../task/taskAuthority.js";
 import { boundedJobArtifactPayload } from "../artifacts/jobArtifactTransport.js";
 import { readFileSync, statSync } from "node:fs";
 /**
@@ -177,8 +177,7 @@ async function startJob(args, options) {
 }
 async function getJob(args, options) {
     const ref = parseRefArgs(args, "get");
-    const caller = resolveJobCaller(options.environment, ref.taskId);
-    await ensureFileTaskController(options.home, { environment: options.environment });
+    const caller = resolveJobReadCaller(options.environment, ref.taskId);
     const job = await getDurableJob(options.home, ref.taskId, ref.jobId, caller);
     if (options.json === true)
         return `${JSON.stringify(job, null, 2)}\n`;

package/dist/commands/globalRoleCommands.js

@@ -151,6 +151,21 @@ function roleContext(args, store, options) {
         historyRead: "yui inbox list --view history --json",
         note: "Historical absence of handling evidence is not new work or permission to replay effects."
     });
+    // Only the managed Turn's exact inputs, not the available queue or history.
+    // Keep pending's cursor lineage unchanged; oversized originals retain their
+    // existing exact detail read. No delivery/claim/ACK is performed here.
+    let originalBudget = 8 * 1024;
+    const visibleIds = new Set(pending.items.map(message => message.id));
+    const category = globalInboxCategory(name, sessions);
+    const currentOriginals = selfRead ? current.filter(message => {
+        if (!visibleIds.has(message.id) || category(message) !== "current")
+            return false;
+        const bytes = Buffer.byteLength(JSON.stringify(message));
+        if (bytes > 4 * 1024 || bytes > originalBudget)
+            return false;
+        originalBudget -= bytes;
+        return true;
+    }) : [];
     const observedAt = new Date();
     const { oldestAgeMs, messages: _backlogMessages, ...backlog } = globalInputBacklog(queued, sessions, observedAt, {
         attention: name === "operator" ? store.getWorkMailbox({ kind: "operator" }) : null,
@@ -191,6 +206,7 @@ function roleContext(args, store, options) {
         },
         // Reading pending input is neither delivery nor implementation.
         pending,
+        currentOriginals,
         backlog,
         reads: {
             ownInbox: "yui inbox list --view current --json",
@@ -233,13 +249,16 @@ function roleContext(args, store, options) {
             ""
         ].join("\n") };
 }
-function currentGlobalInboxMessages(messages, name, sessions) {
+function globalInboxCategory(name, sessions) {
     const actor = { scope: "global", roleName: name, agentId: sessions?.activeAgentId ?? "",
         nativeSessionId: sessions?.sessions[sessions.activeAgentId]?.nativeSessionId ?? "" };
     const binding = sessions?.providerBinding;
     const turn = binding?.conversations.find(c => c.epoch === binding.currentConversationEpoch)?.conversationId === actor.nativeSessionId
         ? binding?.run : undefined;
-    const category = (message) => inboxEntryCategory(message, actor, turn);
+    return (message) => inboxEntryCategory(message, actor, turn);
+}
+function currentGlobalInboxMessages(messages, name, sessions) {
+    const category = globalInboxCategory(name, sessions);
     return pendingGlobalInboxMessages(messages).filter(message => category(message) !== "history")
         .sort((a, b) => Number(category(b) === "current") - Number(category(a) === "current"));
 }
@@ -506,11 +525,14 @@ function roleSession(args, store, options) {
     const [command, rawName, ...tail] = args;
     if (command === "retry") {
         const name = roleName(rawName);
-        const [action = "show", ...extra] = tail;
+        const parsed = readOptions(tail, ["--cursor"]);
+        const [action = "show", ...extra] = parsed.positionals;
         if (extra.length > 0 || !["show", "cancel", "disable", "enable"].includes(action)) {
             throw usageError("Usage: yui session retry <role> [show|cancel|disable|enable]");
         }
-        return store.transaction(tx => {
+        if (action !== "show" && parsed.cursor !== undefined)
+            throw usageError("Only retry show accepts --cursor.");
+        return store[action === "show" ? "readTransaction" : "transaction"](tx => {
             const role = requireRole(name, tx);
             const sessions = tx.getGlobalRoleSessionSet(name);
             let binding = sessions?.providerBinding ?? null;
@@ -523,12 +545,15 @@ function roleSession(args, store, options) {
             }
             const health = globalSessionHealth(role, sessions);
             const historical = binding?.retry !== undefined && health.retry === null;
-            return options.jsonOutput ? JSON.stringify({
+            const detail = {
                 roleName: name, retry: providerRetryProjection(binding), disabled: binding?.retryDisabled ?? false,
                 selectedNativeSessionId: health.nativeSessionId,
                 retryScope: historical ? "historical-session" : "current-session"
-            }) + "\n" : (historical ? "Historical Session evidence (not the selected Session's current failure): " : "")
-                + renderProviderRetry(binding) + "\n";
+            };
+            return options.jsonOutput ? JSON.stringify(action === "show"
+                ? boundedDocument(detail, `global:${name}/retry`, parsed.cursor) : detail) + "\n"
+                : (historical ? "Historical Session evidence (not the selected Session's current failure): " : "")
+                    + renderProviderRetry(binding) + "\n";
         });
     }
     if (command !== "record" && command !== "replace") {
@@ -715,7 +740,7 @@ function globalRoleMessage(args, store, options) {
         ["--request-id", false],
         ...(action === "steer" ? [["--expected-target", false]] : [])
     ]));
-    const body = readCommandText(positionalBody, parsed.one("--body-file"), "--body", usage);
+    const body = readCommandText(positionalBody, parsed.one("--body-file"), "--body", usage, { preserveFileWhitespace: true });
     const requestId = required(parsed.one("--request-id"), "--request-id");
     const expectedTarget = action === "steer"
         ? required(parsed.one("--expected-target"), "--expected-target")