@sema-agent/client-core 0.12.2 → 0.14.0

package/dist/seatContract.js

@@ -12,10 +12,11 @@
  * 落点为什么是本包:desktop 与 web 都已经依赖 `@sema-agent/client-core`(0.11.5),而本文件是
  * **纯类型 + 常量 + 纯谓词**,零值级 import、零 Node 内建 ⇒ 不动本包的可移植闭包(portability 门的
  * `EXPECTED_PACKAGES_INDEX` 一个字不变)。
- * ⚠️ 唯一一条 `import type`(`./effortWire.js` 的 `ReasoningEffort`)是**类型边**:portability 门
- * 走值级传递闭包时按规则剥掉 type-only import(门里 `/^\s*type\b/` 那一跳),bundle 里一个字节都
- * 不多。写成 import 而不是就地复刻那七档,是因为「座位闭集」与「wire 投影闭集」必须是**同一套词**
- * ——复刻一份就等于埋一条只有真用户能发现的漂移(拨盘上的档在座位 lane 上静默到不了引擎)。
+ * ⚠️ 两条 `import type`(`./effortWire.js` 的 `ReasoningEffort`、`./seam.js` 的 `LaneProof`)都是
+ * **类型边**:portability 门走值级传递闭包时按规则剥掉 type-only import(门里 `/^\s*type\b/` 那一跳),
+ * bundle 里一个字节都不多。写成 import 而不是就地复刻,是因为「座位闭集」与「wire 投影闭集」必须是
+ * **同一套词**——复刻一份就等于埋一条只有真用户能发现的漂移(拨盘上的档在座位 lane 上静默到不了引擎;
+ * 车道证明在座位面变成一个「有位无证」的空对象)。
  *
  * ── 搬迁时按「真源为准」收敛的漂移(逐条,web 侧镜像 → 本文件)────────────────────────────
  *  🔴 D1 `LocalSessionEvent.outcome` —— web 镜像整位缺席 ⇒ `tool_permission_resolved` 只会清面,
@@ -24,7 +25,7 @@
  *      而宿主入站门 `requireOptionalPermissionMode` 是**会抛的闭集门**。今日两边词表逐字相等
  *      (web `ComposerMode` 五档 ≡ `PERMISSION_MODE_INTENTS` 五档,已核),所以是**潜伏**不是现症:
  *      ComposerMode 哪天加一档,裸 string 一路放行到宿主门口才抛。收敛成闭集后当天编译红。
- *  D3 `AttachmentUploadReceipt.sha256` / `ToolPermissionRequest.createdAt` / `StartSessionOptions.cwd`
+ *  D3 `AttachmentUploadReceipt.sha256` / `ToolPermissionRequest.createdAtMs` / `StartSessionOptions.cwd`
  *      / `.excludeTools` / `LocalSessionRecord.queuedMessages`·`model`·`engineSessionId` ——
  *      web 镜像缺位。都是「没接线」不是「接错线」(web 侧今日无消费点,已核),收敛后位在、待接。
  *  D4 `LocalSessionEvent.request` —— 真源有这个位,**宿主从不发**(session-host 零处写 `request:`);
@@ -37,6 +38,23 @@
  *    focusedSessionState / settingsState / `CHROME_EVENT_KINDS` / `ATTACHMENT_IDS_PER_TASK_CAP`。
  *    本文件导出后它们对 web 首次可见(接不接线是渲染面的决定)。
  *
+ * ── 🔴 wave2 卡E-seat 的**破坏性契约变更**(2026-08-02,REF-CC-064~070/072~074;发包说明点名)──
+ *  ① `EipcMethodSpec.validate` / `EipcStoreSpec.validate` → **改名 `check`**,返回形从 `boolean`
+ *     升成 `true | SeatValidationFailure`(REF-CC-069)。改名是**安全机制不是洁癖**:老消费点写的是
+ *     `if (m.validate && !m.validate(v))`,而失败**对象是真值** ⇒ 那一行会把「不合格」读成「合格」,
+ *     门从 fail-closed 静默变成 fail-open。改名让每个旧调用点在编译期红,而不是在运行期悄悄放行。
+ *  ② `ToolPermissionRequest.createdAt: number` → **`createdAtMs`**(REF-CC-067):同一文件里
+ *     `LocalSessionRecord.createdAt` 是 ISO 串,两个同名位两种域两种类型;epoch 单位入名(A4)。
+ *  ③ `ToolPermissionRequest.boundCallId` + `.boundInputHash` → **合成 `toctouBinding`**
+ *     (REF-CC-070):注释一直把它称作 pair,而类型/门此前各查各的,半个 pair 照样过门。
+ *  ④ `LocalSessionEvent.chrome.laneProof` **可选 → 必填**且升成命名类型 `LaneProof`(REF-CC-064)——
+ *     出站门本来就要求它在场,类型却说可以缺席:一个照着这份「单一真源」写的宿主编译全绿、
+ *     事件被整条丢掉、而门只回 boolean 说不出为什么。这条是本卡的 bug 修复位。
+ *  ⑤ `LocalSessionEvent.type` / `.chrome.kind` / `.permissionMode` 三个位闭集化(REF-CC-065)。
+ *  ⑥ `uploadAttachment` 入参、`getTranscript`/`searchSessions` 返回形、三个 store 状态形全部提成
+ *     具名 interface(REF-CC-072/073/074),SPEC 里 13 个内联匿名 validator 收成具名 `check*`。
+ *  三端消费坐标见本批 commit message 的「候提货单」节。
+ *
  * ── 沿革(以下正文自 sema-desktop/src/shared/localSessions.ts 逐字迁入)──────────────────────
  * LocalSessions — the desktop host's session service contract, FORM-ported from the CC desktop
  * app's `claude.web / LocalSessions` eipc interface (212 methods there; FIRST BATCH here = the four
@@ -54,6 +72,56 @@
  * neutral typed position. Our implementation体 differs (sema wire via @sema-agent/sdk +
  * @sema-agent/client-core), the contract shape does not.
  */
+const bad = (reason, field) => field === undefined ? { reason } : { reason, field };
+/** 存在性判定(§B10:`!!v` 那种真值判定会把空串/0 当缺席,对象位则会把 `{}` 当「有证」)。 */
+const isObject = (v) => typeof v === "object" && v !== null;
+const isAbsent = (v) => typeof v === "undefined";
+const optionalString = (v) => isAbsent(v) || typeof v === "string";
+const inTuple = (tuple, v) => tuple.includes(v);
+export const TOCTOU_BINDING_KEYS = ["callId", "inputHash"];
+/**
+ * 座位事件名的**闭集**(REF-CC-065):这是三端唯一的事件名真源。
+ *
+ * 方向判据(本文件 `PERMISSION_MODE_INTENTS` 头注立的那条):词由**我们自己的宿主**铸出、发往渲染端,
+ * 因此闭集 —— 拼错一个字母在编译期红,而不是变成一条谁也不认识、被 switch 默默丢掉的事件。
+ * 与 `outcome`(wire 铸词,开集)的区别正是「谁铸的词」,不是「字段像不像枚举」。
+ * 词表 = sema-desktop `session-host` 的 emit 面实测八词。
+ */
+const SEAT_EVENT_TYPE_TUPLE = [
+    "start",
+    "close",
+    "session_updated",
+    "message",
+    "stream_event",
+    "chrome_event",
+    "error",
+    "tool_permission_resolved",
+];
+export const SEAT_EVENT_TYPES = SEAT_EVENT_TYPE_TUPLE;
+/** Chrome arms wired to the renderer position (batch 4); other arms stay host-side on the ring. */
+const CHROME_EVENT_KIND_TUPLE = [
+    "panel_task",
+    "notification_terminal",
+    "prompt_suggestions",
+    "subagent_lifecycle",
+];
+/**
+ * 🔴 BREAKING(REF-CC-065,2026-08-02):公开面类型从 `readonly string[]` **收窄**成
+ * `readonly ChromeEventKind[]`。与 `PERMISSION_MODE_INTENTS` / `SEAT_REASONING_EFFORTS` 那两条
+ * **不同**:那两个本来就已经是闭集类型,加元组只是补「类型→常量」那半边、公开面一个字没变;
+ * 这一个的公开面**真的变了**,所以它是本批第四处破坏性契约变更,不是「同上理由」的搭车项。
+ *
+ * 谁受影响(实测消费坐标,提货单同条):`sema-desktop/src/main/session-host.ts:1752`
+ * `CHROME_EVENT_KINDS.includes(event.kind)` —— 那里的 `event: ChromeEvent` 是 seam.ts 的 17 词
+ * 判别式联合,收窄后 `includes()` 的入参类型只认这 4 个词 ⇒ TS2345,提货当天编译红。
+ * 迁移形:`(CHROME_EVENT_KINDS as readonly string[]).includes(event.kind)`,或先按 `ChromeEventKind`
+ * 做一次显式收窄再进这一支。sema-web-client / sema-cli 实测零命中。
+ */
+export const CHROME_EVENT_KINDS = CHROME_EVENT_KIND_TUPLE;
+/** `LaneProof` 的判别位词表 —— 与 `seam.ts` 的联合逐词对账(下方 `_seatContractPins` 双向钉:
+ *  seam 加一条车道而这里不跟 ⇒ 编译红,而不是运行期把新车道的 chrome 帧整条丢掉)。 */
+const LANE_PROOF_LANE_TUPLE = ["main", "subagent", "workflow"];
+export const SEAT_CHROME_ENVELOPE_KEYS = ["kind", "laneProof"];
 /**
  * The resolution words the host currently puts on `tool_permission_resolved.outcome` ([1947] 红③).
  * DOCUMENTARY + test anchor only — the gate does NOT enforce membership (see the field's doc: a
@@ -72,48 +140,6 @@ export const HITL_RESOLUTION_OUTCOMES = [
     "decline",
     "cancel",
 ];
-/**
- * 接缝记账 — what the HOST now guarantees vs what a RENDERER still owes ([1947] 红③/红④ split).
- *
- * The host half is done and pinned by desktop's `scripts/run-hitl-frame-transit-fence-test.mjs`:
- * every live ask family reaches `onToolPermissionRequest` with its own requestId domain, every
- * resolution reaches `onEvent` with an `outcome`, and every decision routes to the right wire verb.
- *
- * The renderer half is where these become VISIBLE, and until it lands the data is present but
- * unread (stating it plainly so nobody reads "the host emits it" as "the user sees it"):
- *  1. `tool_permission_resolved.outcome` — an `expired` / `denied` / `unanswered` resolution must
- *     leave a visible refusal trace. Today the seat transport clears the surface and drops the
- *     word, so a refusal is still indistinguishable from an approval on screen.
- *     🔴 B18(2026-07-29)查明这条一直不销账的**机制原因**:web 侧的镜像类型里连 `outcome` 这个
- *     位都没有,所以「没读」在两边都编译得过。本批把位收进真源 = 让它至少可见于类型面。
- *  2. `toolCallId` — now real (not null), so an approval can be anchored to the tool card that
- *     raised it instead of "the most recent tool_start" (an anchor that lands on the wrong card
- *     when a prior tool is still running).
- *  3. `question:` rows need NO new renderer code: they arrive as `toolName: "AskUserQuestion"` with
- *     `input.questions`, which is exactly what the seat's ask-user-question surface already reads,
- *     and its answer envelope is exactly what this host expects back.
- *  4. 座位 wire 补齐批 (2026-07-28) closed two entries that used to live here as "如实,未做":
- *     `permissionMode` now has a seat on `sendMessage` (was: the composer's Plan badge never
- *     crossed and the turn ran with the engine default), and the attachment BYTE channel exists
- *     (`uploadAttachment` + `sendMessage.attachmentIds`) — so a seat renderer no longer has to
- *     simulate "attachment ready" for a file nothing received. What is still NOT here, stated
- *     plainly: plan REVISE feedback text (the decide face has no `reason` seat, so revise maps to
- *     a bare deny) and a per-session `permissionMode` write (the wire's is per-TURN only).
- *  5. `elicit:` rows have no dedicated surface yet: they fall through to the generic approval card,
- *     which shows the MCP server's prompt and can accept/decline but CANNOT collect form values.
- *     A real form surface (built from `input.requestedSchema`) is the renderer's remaining piece;
- *     until then an approve carries no content — the host never invents form values. That generic
- *     card also offers "Always allow (this session)", which this domain has no concept of: the host
- *     ignores `remember` here rather than pretend, so the renderer should hide that control for
- *     `elicit:` rows (a button that changes nothing is the false-affordance family again).
- */
-/** Chrome arms wired to the renderer position (batch 4); other arms stay host-side on the ring. */
-export const CHROME_EVENT_KINDS = [
-    "panel_task",
-    "notification_terminal",
-    "prompt_suggestions",
-    "subagent_lifecycle",
-];
 /** The closed set the inbound gate checks. CLOSED deliberately, unlike `outcome` above: this word
  *  ORIGINATES in our own renderer and goes OUT to a wire that 400s on anything else, so an unknown
  *  value is a local bug we want reported at the door — not an unknown future wire word we must
@@ -149,186 +175,363 @@ const SEAT_REASONING_EFFORT_TUPLE = [
 ];
 export const SEAT_REASONING_EFFORTS = SEAT_REASONING_EFFORT_TUPLE;
 export const SEAT_TURN_SETTINGS_KEYS = ["ultracode"];
+export const ATTACHMENT_UPLOAD_REQUEST_KEYS = ["name", "mimeType", "bytes"];
+export const SESSION_SEARCH_RESULT_KEYS = ["sessionId", "title", "matches"];
+export const GET_TRANSCRIPT_RESULT_KEYS = ["sessionId", "messages"];
 // ───────────────────────────── validators (CC dual-gate posture) ─────────────────────────────
+//
+// 一种方言(REF-CC-072):每个载荷形恰有一个具名 `check*`(返回 `true | {reason, field?}`),
+// 需要类型收窄的地方再包一层 `is*` 谓词。SPEC 里不再有内联匿名 validator。
+// 「哪些键真被校验、哪些是刻意豁免」由 `SEAT_VALIDATOR_KEY_COVERAGE` 登记,门里逐位投毒对账
+// (REF-CC-068):说校验的位投毒必拒,说豁免的位投毒必过 —— 表和码不可能各说各话。
+const checkLocalSessionRecord = (s) => {
+    if (!isObject(s))
+        return bad("session record is not an object");
+    if (typeof s.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    if (!optionalString(s.engineSessionId))
+        return bad("engineSessionId must be a string when present", "engineSessionId");
+    if (!optionalString(s.model))
+        return bad("model must be a string when present", "model");
+    if (!optionalString(s.title))
+        return bad("title must be a string when present", "title");
+    if (typeof s.isRunning !== "boolean")
+        return bad("isRunning must be a boolean", "isRunning");
+    if (typeof s.createdAt !== "string")
+        return bad("createdAt must be an ISO-8601 string", "createdAt");
+    if (!optionalString(s.lastActivityAt))
+        return bad("lastActivityAt must be a string when present", "lastActivityAt");
+    if (!isAbsent(s.queuedMessages)) {
+        const q = s.queuedMessages;
+        const okQueue = Array.isArray(q) && q.every((row) => isObject(row) && typeof row.uuid === "string" && typeof row.text === "string");
+        if (!okQueue)
+            return bad("queuedMessages must be an array of {uuid,text}", "queuedMessages");
+    }
+    return true;
+};
 export function isLocalSessionRecord(s) {
-    const e = s;
-    return !(!e ||
-        typeof e !== "object" ||
-        typeof e.sessionId !== "string" ||
-        (typeof e.engineSessionId !== "undefined" && typeof e.engineSessionId !== "string") ||
-        (typeof e.model !== "undefined" && typeof e.model !== "string") ||
-        (typeof e.title !== "undefined" && typeof e.title !== "string") ||
-        typeof e.isRunning !== "boolean" ||
-        typeof e.createdAt !== "string" ||
-        (typeof e.lastActivityAt !== "undefined" && typeof e.lastActivityAt !== "string") ||
-        (typeof e.queuedMessages !== "undefined" &&
-            !(Array.isArray(e.queuedMessages) &&
-                e.queuedMessages.every((q) => !!q && typeof q.uuid === "string" && typeof q.text === "string"))));
+    return checkLocalSessionRecord(s) === true;
 }
+const checkToctouBinding = (v) => {
+    if (!isObject(v))
+        return bad("toctouBinding must be an object", "toctouBinding");
+    // 🔴 REF-CC-070:pair 的两半在同一个判据里 —— 只剩一半的绑定不是「降级」,是半个绑定。
+    if (typeof v.callId !== "string")
+        return bad("toctouBinding.callId must be a string", "toctouBinding.callId");
+    if (typeof v.inputHash !== "string")
+        return bad("toctouBinding.inputHash must be a string", "toctouBinding.inputHash");
+    return true;
+};
+const checkToolPermissionRequest = (r) => {
+    if (!isObject(r))
+        return bad("tool permission request is not an object");
+    if (typeof r.requestId !== "string")
+        return bad("requestId must be a string", "requestId");
+    if (typeof r.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    if (!isAbsent(r.toolName) && r.toolName !== null && typeof r.toolName !== "string") {
+        return bad("toolName must be a string or null when present", "toolName");
+    }
+    if (!isAbsent(r.toolCallId) && r.toolCallId !== null && typeof r.toolCallId !== "string") {
+        return bad("toolCallId must be a string or null when present", "toolCallId");
+    }
+    // `input` is the untrusted redacted payload — passthrough (render-only), like CC's request args.
+    if (!optionalString(r.message))
+        return bad("message must be a string when present", "message");
+    if (!isAbsent(r.toctouBinding)) {
+        const verdict = checkToctouBinding(r.toctouBinding);
+        if (verdict !== true)
+            return verdict;
+    }
+    if (!isAbsent(r.createdAtMs) && typeof r.createdAtMs !== "number") {
+        return bad("createdAtMs must be a number (epoch ms) when present", "createdAtMs");
+    }
+    return true;
+};
 export function isToolPermissionRequest(r) {
-    const e = r;
-    return !(!e ||
-        typeof e !== "object" ||
-        typeof e.requestId !== "string" ||
-        typeof e.sessionId !== "string" ||
-        (typeof e.toolName !== "undefined" && e.toolName !== null && typeof e.toolName !== "string") ||
-        (typeof e.toolCallId !== "undefined" && e.toolCallId !== null && typeof e.toolCallId !== "string") ||
-        // `input` is the untrusted redacted payload — passthrough (render-only), like CC's request args.
-        (typeof e.message !== "undefined" && typeof e.message !== "string") ||
-        (typeof e.boundCallId !== "undefined" && typeof e.boundCallId !== "string") ||
-        (typeof e.boundInputHash !== "undefined" && typeof e.boundInputHash !== "string") ||
-        (typeof e.createdAt !== "undefined" && typeof e.createdAt !== "number"));
+    return checkToolPermissionRequest(r) === true;
 }
+/** 车道证明的结构校验(REF-CC-064 的另一半):此前门写的是 `!!laneProof` —— 真值判定当存在性判定
+ *  (§B10),于是 `laneProof: {}` 这种「有位无证」的帧照样过门,而下游按 lane 分发时它谁也不是。 */
+const checkLaneProof = (v, field) => {
+    if (!isObject(v))
+        return bad("laneProof must be an object", field);
+    const lane = v.lane;
+    if (typeof lane !== "string" || !inTuple(LANE_PROOF_LANE_TUPLE, lane)) {
+        return bad(`laneProof.lane must be one of ${LANE_PROOF_LANE_TUPLE.join("|")}`, `${field}.lane`);
+    }
+    if (lane === "subagent" && typeof v.parentToolCallId !== "string") {
+        return bad("subagent laneProof needs parentToolCallId", `${field}.parentToolCallId`);
+    }
+    if (lane === "workflow" && (typeof v.via !== "string" || typeof v.key !== "string")) {
+        return bad("workflow laneProof needs via + key", `${field}.via`);
+    }
+    return true;
+};
+const checkSeatChromeEnvelope = (v, field) => {
+    if (!isObject(v))
+        return bad("chrome must be an object", field);
+    const kind = v.kind;
+    if (typeof kind !== "string")
+        return bad("chrome.kind must be a string", `${field}.kind`);
+    if (!inTuple(CHROME_EVENT_KIND_TUPLE, kind)) {
+        return bad(`chrome.kind is not a renderer-wired arm (${CHROME_EVENT_KIND_TUPLE.join("|")})`, `${field}.kind`);
+    }
+    return checkLaneProof(v.laneProof, `${field}.laneProof`);
+};
 /**
  * onEvent payload validator — line-for-line FORM port of CC's `fQe`
  * (`.vite/build/index.chunk-CnWKsyE_.js:369773`). Field-by-field mapping:
- *  - `type`/`sessionId`: required strings (same);
+ *  - `type`/`sessionId`: required strings (same);`type` 另加闭集成员校验(REF-CC-065,词由本宿主铸);
  *  - `message`: CC's minified source reads `typeof e.message<"u"` inside a comma expression whose
  *    value is discarded — i.e. NO validation, a deliberate transcript-plane passthrough. Same here.
  *  - `messages`: array-checked, elements `every(t=>!0)` (constant true) — array shape only. Same here.
  *  - `error`/`errorCategory`: optional strings (same); `code`: optional number (same);
- *  - `request`: CC gates with `S1` (ToolPermissionRequest schema) → our isToolPermissionRequest;
- *  - `session`: CC gates with `aM` (SessionRecord schema) → our isLocalSessionRecord;
- *  - `data`: optional string / `sources`: optional string[] / `permissionMode`: optional string /
+ *  - `request`: CC gates with `S1` (ToolPermissionRequest schema) → our checkToolPermissionRequest;
+ *  - `session`: CC gates with `aM` (SessionRecord schema) → our checkLocalSessionRecord;
+ *  - `data`: optional string / `sources`: optional string[] / `permissionMode`: 闭集成员 /
  *    `userMessageUuid`: optional string / `hasPreClearSession`: optional boolean (same);
  *  - CC fields we do not emit in this batch (`tccFolderKind`/`initializationStatus`/`fsFile`/
  *    `localMcpServers`/`refusalFallbackPrompt`) are not carried — their positions return when the
  *    corresponding service families are ported.
  */
+const checkLocalSessionEvent = (v) => {
+    if (!isObject(v))
+        return bad("event is not an object");
+    const type = v.type;
+    if (typeof type !== "string")
+        return bad("type must be a string", "type");
+    if (!inTuple(SEAT_EVENT_TYPE_TUPLE, type)) {
+        return bad(`type is not a registered seat event name (${SEAT_EVENT_TYPE_TUPLE.join("|")})`, "type");
+    }
+    if (typeof v.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    // `message`: intentionally unvalidated passthrough (see doc above — CC fQe does the same).
+    if (!isAbsent(v.messages) && !Array.isArray(v.messages))
+        return bad("messages must be an array", "messages");
+    if (!optionalString(v.error))
+        return bad("error must be a string when present", "error");
+    if (!optionalString(v.errorCategory))
+        return bad("errorCategory must be a string when present", "errorCategory");
+    if (!isAbsent(v.code) && typeof v.code !== "number")
+        return bad("code must be a number when present", "code");
+    if (!isAbsent(v.request)) {
+        const verdict = checkToolPermissionRequest(v.request);
+        if (verdict !== true)
+            return bad(`request: ${verdict.reason}`, "request");
+    }
+    if (!optionalString(v.data))
+        return bad("data must be a string when present", "data");
+    if (!isAbsent(v.sources)) {
+        const okSources = Array.isArray(v.sources) && v.sources.every((t) => typeof t === "string");
+        if (!okSources)
+            return bad("sources must be a string[]", "sources");
+    }
+    if (!isAbsent(v.permissionMode)) {
+        const mode = v.permissionMode;
+        if (typeof mode !== "string" || !inTuple(PERMISSION_MODE_INTENT_TUPLE, mode)) {
+            return bad(`permissionMode must be one of ${PERMISSION_MODE_INTENT_TUPLE.join("|")}`, "permissionMode");
+        }
+    }
+    if (!isAbsent(v.session)) {
+        const verdict = checkLocalSessionRecord(v.session);
+        if (verdict !== true)
+            return bad(`session: ${verdict.reason}`, "session");
+    }
+    if (!optionalString(v.userMessageUuid))
+        return bad("userMessageUuid must be a string when present", "userMessageUuid");
+    if (!isAbsent(v.hasPreClearSession) && typeof v.hasPreClearSession !== "boolean") {
+        return bad("hasPreClearSession must be a boolean when present", "hasPreClearSession");
+    }
+    if (!optionalString(v.requestId))
+        return bad("requestId must be a string when present", "requestId");
+    // `outcome`: type-checked only, NOT membership-checked (see the field doc — an unknown future
+    // wire word must reach the renderer as "settled, reason unknown", never take the event down).
+    if (!optionalString(v.outcome))
+        return bad("outcome must be a string when present", "outcome");
+    if (!isAbsent(v.chrome)) {
+        const verdict = checkSeatChromeEnvelope(v.chrome, "chrome");
+        if (verdict !== true)
+            return bad(verdict.reason, "chrome");
+    }
+    return true;
+};
 export function isLocalSessionEvent(v) {
-    const e = v;
-    return !(!e ||
-        typeof e !== "object" ||
-        typeof e.type !== "string" ||
-        typeof e.sessionId !== "string" ||
-        // `message`: intentionally unvalidated passthrough (see doc above — CC fQe does the same).
-        (typeof e.messages !== "undefined" && !Array.isArray(e.messages)) ||
-        (typeof e.error !== "undefined" && typeof e.error !== "string") ||
-        (typeof e.errorCategory !== "undefined" && typeof e.errorCategory !== "string") ||
-        (typeof e.code !== "undefined" && typeof e.code !== "number") ||
-        (typeof e.request !== "undefined" && !isToolPermissionRequest(e.request)) ||
-        (typeof e.data !== "undefined" && typeof e.data !== "string") ||
-        (typeof e.sources !== "undefined" &&
-            !(Array.isArray(e.sources) && e.sources.every((t) => typeof t === "string"))) ||
-        (typeof e.permissionMode !== "undefined" && typeof e.permissionMode !== "string") ||
-        (typeof e.session !== "undefined" && !isLocalSessionRecord(e.session)) ||
-        (typeof e.userMessageUuid !== "undefined" && typeof e.userMessageUuid !== "string") ||
-        (typeof e.hasPreClearSession !== "undefined" && typeof e.hasPreClearSession !== "boolean") ||
-        (typeof e.requestId !== "undefined" && typeof e.requestId !== "string") ||
-        // `outcome`: type-checked only, NOT membership-checked (see the field doc — an unknown future
-        // wire word must reach the renderer as "settled, reason unknown", never take the event down).
-        (typeof e.outcome !== "undefined" && typeof e.outcome !== "string") ||
-        (typeof e.chrome !== "undefined" &&
-            !(!!e.chrome &&
-                typeof e.chrome === "object" &&
-                typeof e.chrome.kind === "string" &&
-                CHROME_EVENT_KINDS.includes(e.chrome.kind) &&
-                // lane discipline first-class ([1617] family): a chrome arm always carries its LaneProof.
-                !!e.chrome.laneProof)));
+    return checkLocalSessionEvent(v) === true;
 }
+const checkAttachmentUploadReceipt = (v) => {
+    if (!isObject(v))
+        return bad("upload receipt is not an object");
+    if (typeof v.id !== "string")
+        return bad("id must be a string", "id");
+    if (typeof v.name !== "string")
+        return bad("name must be a string", "name");
+    if (typeof v.mime !== "string")
+        return bad("mime must be a string", "mime");
+    if (typeof v.sha256 !== "string")
+        return bad("sha256 must be a string", "sha256");
+    if (typeof v.sizeBytes !== "number")
+        return bad("sizeBytes must be a number", "sizeBytes");
+    return true;
+};
 export function isAttachmentUploadReceipt(v) {
-    const e = v;
-    return !(!e ||
-        typeof e !== "object" ||
-        typeof e.id !== "string" ||
-        typeof e.name !== "string" ||
-        typeof e.mime !== "string" ||
-        typeof e.sha256 !== "string" ||
-        typeof e.sizeBytes !== "number");
+    return checkAttachmentUploadReceipt(v) === true;
 }
+const checkSeatModelInfo = (m, index) => {
+    if (!isObject(m))
+        return bad(`models[${index}] is not an object`, "models");
+    if (typeof m.id !== "string")
+        return bad(`models[${index}].id must be a string`, "models");
+    if (!optionalString(m.name))
+        return bad(`models[${index}].name must be a string when present`, "models");
+    if (!optionalString(m.provider))
+        return bad(`models[${index}].provider must be a string when present`, "models");
+    if (!isAbsent(m.contextWindow) && typeof m.contextWindow !== "number") {
+        return bad(`models[${index}].contextWindow must be a number when present`, "models");
+    }
+    if (!isAbsent(m.maxOutputTokens) && typeof m.maxOutputTokens !== "number") {
+        return bad(`models[${index}].maxOutputTokens must be a number when present`, "models");
+    }
+    return true;
+};
+const checkSeatModelCatalog = (v) => {
+    if (!isObject(v))
+        return bad("model catalog is not an object");
+    const models = v.models;
+    if (!Array.isArray(models))
+        return bad("models must be an array", "models");
+    for (let i = 0; i < models.length; i += 1) {
+        const verdict = checkSeatModelInfo(models[i], i);
+        if (verdict !== true)
+            return verdict;
+    }
+    if (!optionalString(v.defaultId))
+        return bad("defaultId must be a string when present", "defaultId");
+    return true;
+};
 export function isSeatModelCatalog(v) {
-    const e = v;
-    return !(!e ||
-        typeof e !== "object" ||
-        !Array.isArray(e.models) ||
-        !e.models.every((m) => !!m &&
-            typeof m === "object" &&
-            typeof m.id === "string" &&
-            ["undefined", "string"].includes(typeof m.name) &&
-            ["undefined", "string"].includes(typeof m.provider) &&
-            ["undefined", "number"].includes(typeof m.contextWindow) &&
-            ["undefined", "number"].includes(typeof m.maxOutputTokens)) ||
-        (typeof e.defaultId !== "undefined" && typeof e.defaultId !== "string"));
+    return checkSeatModelCatalog(v) === true;
 }
+const checkSendMessageAck = (v) => {
+    if (!isObject(v))
+        return bad("sendMessage ack is not an object");
+    if (typeof v.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    if (typeof v.userMessageUuid !== "string")
+        return bad("userMessageUuid must be a string", "userMessageUuid");
+    if (!isAbsent(v.queued) && typeof v.queued !== "boolean")
+        return bad("queued must be a boolean when present", "queued");
+    return true;
+};
 export function isSendMessageAck(v) {
-    const e = v;
-    return !(!e ||
-        typeof e !== "object" ||
-        typeof e.sessionId !== "string" ||
-        typeof e.userMessageUuid !== "string" ||
-        (typeof e.queued !== "undefined" && typeof e.queued !== "boolean"));
+    return checkSendMessageAck(v) === true;
 }
+// ── REF-CC-072:SPEC 里此前 13 个内联匿名 validator 的具名化(同一方言,各配 interface + 键集钉)──
+const checkInterruptAck = (v) => isObject(v) && typeof v.interrupted === "boolean" ? true : bad("interrupt ack needs boolean `interrupted`", "interrupted");
+const checkStopAck = (v) => isObject(v) && typeof v.stopped === "boolean" ? true : bad("stop ack needs boolean `stopped`", "stopped");
+const checkOkAck = (v) => isObject(v) && typeof v.ok === "boolean" ? true : bad("ack needs boolean `ok`", "ok");
+/** Queue family + setModel — CC returns bare booleans (false = too-late/no-op), same here. */
+const checkBooleanAck = (v) => typeof v === "boolean" ? true : bad("expected a bare boolean result");
+const checkGetTranscriptResult = (v) => {
+    if (!isObject(v))
+        return bad("transcript envelope is not an object");
+    if (typeof v.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    // messages = the transcript-plane passthrough batch (fQe `messages` posture: array-checked,
+    // elements deliberately unvalidated — they are CC SDKMessage bodies).
+    if (!Array.isArray(v.messages))
+        return bad("messages must be an array", "messages");
+    return true;
+};
+/** 一行搜索命中(REF-CC-072 的同一方言:此前它是 envelope 校验器体内的一段内联判据 ⇒ 没有自己的
+ *  名字、没有覆盖表席位,给 `SessionSearchResult` 加一个必填位不会让任何门变红)。 */
+const checkSessionSearchResult = (v) => {
+    if (!isObject(v))
+        return bad("search result row is not an object");
+    if (typeof v.sessionId !== "string")
+        return bad("sessionId must be a string", "sessionId");
+    // REF-CC-073:`title` 此前从不被校 —— 一个非串 title 会一路走到渲染端。
+    if (!optionalString(v.title))
+        return bad("title must be a string when present", "title");
+    if (!Array.isArray(v.matches))
+        return bad("matches must be an array", "matches");
+    const okMatches = v.matches.every((m) => isObject(m) && typeof m.snippet === "string");
+    if (!okMatches)
+        return bad("matches must be {snippet:string}[]", "matches");
+    return true;
+};
+const checkSessionSearchEnvelope = (v) => {
+    if (!isObject(v))
+        return bad("search envelope is not an object");
+    const results = v.results;
+    if (!Array.isArray(results))
+        return bad("results must be an array", "results");
+    for (let i = 0; i < results.length; i += 1) {
+        const verdict = checkSessionSearchResult(results[i]);
+        if (verdict !== true)
+            return bad(`results[${i}]: ${verdict.reason}`, "results");
+    }
+    return true;
+};
+const checkSessionsState = (v) => {
+    if (!isObject(v))
+        return bad("sessions state is not an object");
+    const sessions = v.sessions;
+    if (!Array.isArray(sessions))
+        return bad("sessions must be an array", "sessions");
+    for (let i = 0; i < sessions.length; i += 1) {
+        const verdict = checkLocalSessionRecord(sessions[i]);
+        if (verdict !== true)
+            return bad(`sessions[${i}]: ${verdict.reason}`, "sessions");
+    }
+    return true;
+};
+const checkFocusedSessionState = (v) => {
+    if (!isObject(v))
+        return bad("focused session state is not an object");
+    if (v.sessionId !== null && typeof v.sessionId !== "string") {
+        return bad("sessionId must be a string or null", "sessionId");
+    }
+    return true;
+};
+const checkSettingsState = (v) => {
+    if (!isObject(v))
+        return bad("settings state is not an object");
+    if (v.defaultModel !== null && typeof v.defaultModel !== "string") {
+        return bad("defaultModel must be a string or null", "defaultModel");
+    }
+    if (!optionalString(v.engineVersion))
+        return bad("engineVersion must be a string when present", "engineVersion");
+    if (!optionalString(v.dataRoot))
+        return bad("dataRoot must be a string when present", "dataRoot");
+    return true;
+};
 // ───────────────────────────── service spec (eipc registration table) ─────────────────────────────
 export const LOCAL_SESSIONS_SPEC = {
     ns: "sema.web",
     service: "LocalSessions",
     methods: {
-        start: { kind: "invoke", validate: isLocalSessionRecord },
-        sendMessage: { kind: "invoke", validate: isSendMessageAck },
-        interrupt: {
-            kind: "invoke",
-            validate: (v) => !!v && typeof v.interrupted === "boolean",
-        },
-        stop: {
-            kind: "invoke",
-            validate: (v) => !!v && typeof v.stopped === "boolean",
-        },
-        respondToToolPermission: {
-            kind: "invoke",
-            validate: (v) => !!v && typeof v.ok === "boolean",
-        },
-        // Queue family — CC returns bare booleans (false = too-late/no-op), same here.
-        cancelQueuedMessage: { kind: "invoke", validate: (v) => typeof v === "boolean" },
-        reorderQueuedMessage: { kind: "invoke", validate: (v) => typeof v === "boolean" },
-        promoteQueuedMessage: { kind: "invoke", validate: (v) => typeof v === "boolean" },
-        setFocusedSession: {
-            kind: "invoke",
-            validate: (v) => !!v && typeof v.ok === "boolean",
-        },
-        setModel: { kind: "invoke", validate: (v) => typeof v === "boolean" },
-        getTranscript: {
-            kind: "invoke",
-            // messages = the transcript-plane passthrough batch (fQe `messages` posture: array-checked,
-            // elements deliberately unvalidated — they are CC SDKMessage bodies).
-            validate: (v) => !!v &&
-                typeof v.sessionId === "string" &&
-                Array.isArray(v.messages),
-        },
-        searchSessions: {
-            kind: "invoke",
-            validate: (v) => !!v &&
-                Array.isArray(v.results) &&
-                v.results.every((r) => !!r &&
-                    typeof r.sessionId === "string" &&
-                    Array.isArray(r.matches) &&
-                    r.matches.every((m) => !!m && typeof m.snippet === "string")),
-        },
-        uploadAttachment: { kind: "invoke", validate: isAttachmentUploadReceipt },
-        listModels: { kind: "invoke", validate: isSeatModelCatalog },
-        onEvent: { kind: "event", validate: isLocalSessionEvent },
-        onToolPermissionRequest: { kind: "event", validate: isToolPermissionRequest },
+        start: { kind: "invoke", check: checkLocalSessionRecord },
+        sendMessage: { kind: "invoke", check: checkSendMessageAck },
+        interrupt: { kind: "invoke", check: checkInterruptAck },
+        stop: { kind: "invoke", check: checkStopAck },
+        respondToToolPermission: { kind: "invoke", check: checkOkAck },
+        cancelQueuedMessage: { kind: "invoke", check: checkBooleanAck },
+        reorderQueuedMessage: { kind: "invoke", check: checkBooleanAck },
+        promoteQueuedMessage: { kind: "invoke", check: checkBooleanAck },
+        setFocusedSession: { kind: "invoke", check: checkOkAck },
+        setModel: { kind: "invoke", check: checkBooleanAck },
+        getTranscript: { kind: "invoke", check: checkGetTranscriptResult },
+        searchSessions: { kind: "invoke", check: checkSessionSearchEnvelope },
+        uploadAttachment: { kind: "invoke", check: checkAttachmentUploadReceipt },
+        listModels: { kind: "invoke", check: checkSeatModelCatalog },
+        onEvent: { kind: "event", check: checkLocalSessionEvent },
+        onToolPermissionRequest: { kind: "event", check: checkToolPermissionRequest },
     },
     stores: {
-        sessionsState: {
-            validate: (v) => !!v &&
-                Array.isArray(v.sessions) &&
-                v.sessions.every((s) => isLocalSessionRecord(s)),
-        },
-        focusedSessionState: {
-            validate: (v) => {
-                const s = v;
-                return !!v && (s.sessionId === null || typeof s.sessionId === "string");
-            },
-        },
-        settingsState: {
-            validate: (v) => {
-                const s = v;
-                return (!!v &&
-                    (s.defaultModel === null || typeof s.defaultModel === "string") &&
-                    (typeof s.engineVersion === "undefined" || typeof s.engineVersion === "string") &&
-                    (typeof s.dataRoot === "undefined" || typeof s.dataRoot === "string"));
-            },
-        },
+        sessionsState: { check: checkSessionsState },
+        focusedSessionState: { check: checkFocusedSessionState },
+        settingsState: { check: checkSettingsState },
     },
 };
 /** verb 名清单 = `LOCAL_SESSIONS_SPEC.methods` 应有的键集(逐元素相等,门里断言)。 */
@@ -378,6 +581,8 @@ export const LOCAL_SESSION_EVENT_KEYS = [
     "outcome",
     "chrome",
 ];
+// 🔴 REF-CC-067/070(BREAKING):`createdAt` → `createdAtMs`(epoch 单位入名);
+//    `boundCallId` + `boundInputHash` → `toctouBinding`(pair 一位承载)。三端消费坐标见 commit。
 export const TOOL_PERMISSION_REQUEST_KEYS = [
     "requestId",
     "sessionId",
@@ -385,9 +590,8 @@ export const TOOL_PERMISSION_REQUEST_KEYS = [
     "toolCallId",
     "input",
     "message",
-    "boundCallId",
-    "boundInputHash",
-    "createdAt",
+    "toctouBinding",
+    "createdAtMs",
 ];
 export const LOCAL_SESSION_RECORD_KEYS = [
     "sessionId",
@@ -421,10 +625,193 @@ export const TOOL_PERMISSION_DECISION_KEYS = [
     "remember",
 ];
 export const START_SESSION_OPTION_KEYS = ["model", "title", "cwd", "excludeTools"];
+/**
+ * 校验器覆盖表(REF-CC-068)—— 每个校验器**逐键**声明:哪些位真被校验、哪些位**刻意**不校验。
+ *
+ * 为什么需要它:`防再漂钉` 封的是「interface ↔ 名字常量 ↔ SPEC」两跳,**校验器这条链此前没人钉**。
+ * 给一个 interface 加一个必填位,门全绿,而新位从此不过校验(fail-closed 面出现缺口)。
+ * 正确做法不是「全键必查」—— 本文件有真正**刻意不查**的位(transcript 面直通),所以豁免必须显式登记
+ * 并带理由。门里对每个位投毒:说校验的必拒、说豁免的必过 ⇒ 这张表不可能变成一段过期的说明文字。
+ *
+ * 🔴 覆盖范围(wave2 回炉批 2026-08-02 补齐,首版只登了 6 个而发包说明写的是「每个校验器」——
+ * 那 8 个没登的恰好就是 REF-CC-072 本批新提名的那批 `check*`,实测「加一个必填位、全门照绿」在它们
+ * 身上仍然全开,即这张表自称堵死的失效形当时并没有被堵死):
+ *   · **SPEC 面 15 个具名 `check`,14 个对象形在本表登记**,余下 1 个(裸布尔回执)逐形豁免;
+ *   · 另加 4 个**嵌套**形(SeatModelInfo / SessionSearchResult / ToctouBinding /
+ *     SeatChromeEnvelopeBase)—— 它们不是 SPEC 面的直接 check,但父校验器的覆盖表只登记得到
+ *     `models` / `results` / `toctouBinding` / `chrome` 这一个顶层键,给**子形**加必填位同样全绿;
+ *   · 合计 **18 条**。两个不适用的形逐形写在 `SEAT_VALIDATOR_COVERAGE_EXEMPT` 里。
+ * 完备性不靠这段话:门里逐条比对 `LOCAL_SESSIONS_SPEC` 每个 method/store 的 `check` **函数引用**
+ * 必须落在「本表 ∪ 豁免表」里 —— 再加一条 verb 而不登记,门当场红。
+ *
+ * `check` 位存的是**函数引用本身**(不是名字):名字查表要靠一张 guards 映射,而那张映射漏一行
+ * 就是又一个没人看见的缺口;引用相等是机械的。`guard` 位只在该形另有公开面 `is*` 谓词时登记,
+ * 门里额外校「谓词与 check 判决一致」。
+ */
+export const SEAT_VALIDATOR_KEY_COVERAGE = {
+    LocalSessionRecord: {
+        guard: "isLocalSessionRecord",
+        check: checkLocalSessionRecord,
+        validated: ["sessionId", "engineSessionId", "model", "title", "isRunning", "createdAt", "lastActivityAt", "queuedMessages"],
+        unchecked: [],
+    },
+    ToolPermissionRequest: {
+        guard: "isToolPermissionRequest",
+        check: checkToolPermissionRequest,
+        validated: ["requestId", "sessionId", "toolName", "toolCallId", "message", "toctouBinding", "createdAtMs"],
+        unchecked: [
+            {
+                key: "input",
+                why: "UNTRUSTED service-redacted 工具参数 / 问题载荷:形状由工具自己定(CC request-args 姿态),渲染端只读不回喂;缺席/畸形的渲染义务写在字段注释里。",
+            },
+        ],
+    },
+    LocalSessionEvent: {
+        guard: "isLocalSessionEvent",
+        check: checkLocalSessionEvent,
+        validated: [
+            "type",
+            "sessionId",
+            "messages",
+            "error",
+            "errorCategory",
+            "code",
+            "request",
+            "data",
+            "sources",
+            "permissionMode",
+            "session",
+            "userMessageUuid",
+            "hasPreClearSession",
+            "requestId",
+            "outcome",
+            "chrome",
+        ],
+        unchecked: [
+            {
+                key: "message",
+                why: "transcript 面直通位(CC fQe 逐字姿态:SDKMessage 体不做 schema 校验)—— 校它 = 引擎加一种消息体的那天整条转录被门吃掉。",
+            },
+        ],
+    },
+    AttachmentUploadReceipt: {
+        guard: "isAttachmentUploadReceipt",
+        check: checkAttachmentUploadReceipt,
+        validated: ["id", "name", "mime", "sha256", "sizeBytes"],
+        unchecked: [],
+    },
+    SeatModelCatalog: {
+        guard: "isSeatModelCatalog",
+        check: checkSeatModelCatalog,
+        validated: ["models", "defaultId"],
+        unchecked: [],
+    },
+    SendMessageAck: {
+        guard: "isSendMessageAck",
+        check: checkSendMessageAck,
+        validated: ["sessionId", "userMessageUuid", "queued"],
+        unchecked: [],
+    },
+    // ── wave2 回炉批补齐:REF-CC-072 提名的 8 个 SPEC 面 check* ────────────────────────────────
+    InterruptAck: {
+        check: checkInterruptAck,
+        validated: ["interrupted"],
+        unchecked: [],
+    },
+    StopAck: {
+        check: checkStopAck,
+        validated: ["stopped"],
+        unchecked: [],
+    },
+    OkAck: {
+        check: checkOkAck,
+        validated: ["ok"],
+        unchecked: [],
+    },
+    GetTranscriptResult: {
+        check: checkGetTranscriptResult,
+        // `messages` 登在 validated:门校的是**数组形**这一层(与 `LocalSessionEvent.messages` 同口径)。
+        // 元素刻意不校(CC fQe 姿态,SDKMessage 体)—— 那是键**内**的粒度,覆盖表管的是键面,别把两者混谈。
+        validated: ["sessionId", "messages"],
+        unchecked: [],
+    },
+    SessionSearchEnvelope: {
+        check: checkSessionSearchEnvelope,
+        validated: ["results"],
+        unchecked: [],
+    },
+    SessionsState: {
+        check: checkSessionsState,
+        validated: ["sessions"],
+        unchecked: [],
+    },
+    FocusedSessionState: {
+        check: checkFocusedSessionState,
+        validated: ["sessionId"],
+        unchecked: [],
+    },
+    SettingsState: {
+        check: checkSettingsState,
+        validated: ["defaultModel", "engineVersion", "dataRoot"],
+        unchecked: [],
+    },
+    // ── wave2 回炉批补齐:父校验器只登记得到一个顶层键的 4 个嵌套形 ──────────────────────────
+    SeatModelInfo: {
+        check: (v) => checkSeatModelInfo(v, 0),
+        validated: ["id", "name", "provider", "contextWindow", "maxOutputTokens"],
+        unchecked: [],
+    },
+    SessionSearchResult: {
+        check: checkSessionSearchResult,
+        validated: ["sessionId", "title", "matches"],
+        unchecked: [],
+    },
+    ToctouBinding: {
+        check: checkToctouBinding,
+        validated: ["callId", "inputHash"],
+        unchecked: [],
+    },
+    SeatChromeEnvelopeBase: {
+        check: (v) => checkSeatChromeEnvelope(v, "chrome"),
+        validated: ["kind", "laneProof"],
+        unchecked: [],
+    },
+};
+/**
+ * 逐形豁免(REF-CC-068 的另一半):**不适用**覆盖表的具名校验器 —— 每条写清为什么,以及它的判别力
+ * 由谁承担。这张表存在的唯一理由是让「本表 ∪ 覆盖表 ⊇ SPEC 面全部 check」这条完备性钉能机械成立:
+ * 没有它,「某个 check 没登记」和「某个 check 不该登记」在门里长得一模一样。
+ */
+export const SEAT_VALIDATOR_COVERAGE_EXEMPT = [
+    {
+        label: "BooleanAck",
+        check: checkBooleanAck,
+        why: "载荷是**裸布尔**(queue 三件 + setModel 的 CC 形回执,false = too-late/no-op),没有键面 ⇒ `keyof` 覆盖表在它身上无从谈起。判别力由 J 段承担:认 true/false、拒非布尔(对象 / 字符串 'true' / null / undefined 四形逐一投毒)。",
+    },
+    {
+        label: "LaneProof",
+        check: (v) => checkLaneProof(v, "laneProof"),
+        why: "判别式联合:必填键面随 `lane` 臂而变(subagent 要 parentToolCallId、workflow 要 via+key),而覆盖表的方法是「一个最小合法体 + 逐键投毒」—— 那套方法在它身上没有判别力(main 臂对另外两臂的伴随位本来就不该拒,投毒过了不代表漏校)。判别力由 `LANE_PROOF_LANE_TUPLE` ⇄ seam.ts 车道联合的双向 `Covers` + F 段逐臂投毒(空对象 / 非对象 / 未登记车道词)承担。",
+    },
+];
+/** 双向覆盖钉:`Exclude` 两个方向都必须塌成 `never`,少一个键红、多一个键也红。
+ *  `Covers`(REF-CC-145/dup-12,P3 wave1 卡C-argv)改吃共用叶 typePins.ts——四份逐字重复钉之一。 */
 const _seatContractPins = [
     true, true, true, true, true, true, true, true, true,
     true, true, true, true, true, true, true, true,
     true, true,
     true, true, true, true,
+    true, true, true, true,
+    true, true,
+    true, true,
+    true, true,
+    true, true,
+    true, true, true, true,
+    true, true, true, true, true, true,
+    true, true, true, true, true, true, true, true, true, true, true, true,
+    // wave2 回炉批:覆盖表补齐的 12 个形 × 双向 = 24
+    true, true, true, true, true, true, true, true,
+    true, true, true, true, true, true, true, true,
+    true, true, true, true, true, true, true, true,
 ];
 void _seatContractPins;