@sema-agent/server 7.127.2 → 7.129.0

package/dist/standing-answer-grant.d.ts

@@ -1,9 +1,13 @@
-/** 读口的入参:任何一种载着「这一问」的形(活的 `AskRequest`、`ToolCallRequest`、停驻行的 `tool_approval` 臂)都结构上满足。 */
-export interface StandingAnswerGrantCarrier {
-    readonly toolName?: unknown;
+/** 卡载体:引擎铸的问 / 停驻行 / 它们的投影行(活的 `AskRequest`、停驻行的 `tool_approval` 臂、运维队列行都结构上满足)。 */
+export interface StandingAnswerCard {
     readonly boundGrantDigest?: unknown;
+    readonly boundGrantAbsence?: unknown;
+}
+/** 调用载体:策略层的 `ToolCallRequest`、豁免店的行(只有工具名)。 */
+export interface StandingAnswerCall {
+    readonly toolName?: unknown;
 }
-/** 一问的授予绑定(闭集):`none` = 应答只覆盖这一次调用;`bound` = 授予、绑定可读;`unreadable` = 授予、绑定读不出。 */
+/** 一问的授予绑定(闭集):`none` = 应答只覆盖这一次调用;`bound` = 授予、绑定可读;`unreadable` = 授予或说不清、绑定读不出。 */
 export type GrantBinding = {
     readonly kind: "none";
 } | {
@@ -12,9 +16,13 @@ export type GrantBinding = {
 } | {
     readonly kind: "unreadable";
 };
-/** 这一问的授予绑定(读法见文件头注)。 */
-export declare function grantBindingOf(carrier: StandingAnswerGrantCarrier): GrantBinding;
-/** 这一问的应答是否授予这一次调用之外的东西(= 绑定不是 `none`)。**按工具名记**的读者(耐久豁免店的读写口、豁免列表)据它不碰这类问:
- *  它们的键没有绑定这一维,记下 / 代答都会越过绑定。 */
-export declare function answerGrantsBeyondCall(carrier: StandingAnswerGrantCarrier): boolean;
+/** 卡上的授予绑定 —— 只读引擎的词(读法见文件头注):摘要是串 ⇒ bound;摘要不在且词是 `not_bindable` ⇒ none;其余 ⇒ unreadable。 */
+export declare function grantBindingOf(card: StandingAnswerCard): GrantBinding;
+/** 调用上的授予绑定 —— 调用上没有引擎的词,读引擎绑定工厂的那一条规则(见文件头注;🚧 引擎在调用上盖词之后退役)。 */
+export declare function callGrantBindingOf(call: StandingAnswerCall): GrantBinding;
+/**
+ * 一问的授予绑定的**唯一折点**:读哪个载体由**问的属主**定 —— 名单自己的问(`deploymentListQuestion`,即 `standingAnswerHome` 的 `server_store` 家)读调用口,
+ * 引擎铸的问读卡口(载体与理由见文件头注)。所有把「一张卡」折成 {@link StandingAnswerFacts} 的读者(活的问、待决条目、停驻行、运维队列行)经它取绑定,不各自选口。
+ */
+export declare function questionGrantBindingOf(carrier: StandingAnswerCard & StandingAnswerCall, deploymentListQuestion: boolean): GrantBinding;
 //# sourceMappingURL=standing-answer-grant.d.ts.map

package/dist/standing-answer-grant.js

@@ -1,12 +1,15 @@
 import { SKILL_TOOL_NAME } from "@sema-agent/core";
-export function grantBindingOf(carrier) {
-    if (Object.hasOwn(carrier, "boundGrantDigest")) {
-        const d = carrier.boundGrantDigest;
-        return typeof d === "string" && d.length > 0 ? { kind: "bound", digest: d } : { kind: "unreadable" };
-    }
-    return carrier.toolName === SKILL_TOOL_NAME ? { kind: "unreadable" } : { kind: "none" };
+const NOT_BINDABLE = "not_bindable";
+export function grantBindingOf(card) {
+    const digest = card.boundGrantDigest;
+    if (typeof digest === "string")
+        return { kind: "bound", digest };
+    return digest === undefined && card.boundGrantAbsence === NOT_BINDABLE ? { kind: "none" } : { kind: "unreadable" };
 }
-export function answerGrantsBeyondCall(carrier) {
-    return grantBindingOf(carrier).kind !== "none";
+export function callGrantBindingOf(call) {
+    return call.toolName === SKILL_TOOL_NAME ? { kind: "unreadable" } : { kind: "none" };
+}
+export function questionGrantBindingOf(carrier, deploymentListQuestion) {
+    return deploymentListQuestion ? callGrantBindingOf(carrier) : grantBindingOf(carrier);
 }
 //# sourceMappingURL=standing-answer-grant.js.map

package/dist/task-mcp.d.ts

@@ -23,6 +23,7 @@
  * When the gate is closed, a sent `mcpServers` is IGNORED (advertised via `capabilities.mcpInjection`).
  */
 import { type CompliancePosture, type EngineNotice, type LockedKey, type McpInjectionDropReason, type McpServerSpec } from "@sema-agent/core";
+import { type McpIdentityHeadersIssue, type RequestMcpServerSpec } from "./mcp-assertion-header.js";
 /** Bound on caller-supplied servers (anti-DoS; a real local `.mcp.json` has a handful). */
 export declare const MAX_REQUEST_MCP_SERVERS = 32;
 /**
@@ -53,6 +54,8 @@ export declare const MAX_REQUEST_MCP_DROP_NAMES = 32;
  * ## 🔴 两向钉在 core 的 `McpServerSpec` 上(不是手抄)
  * 下面六道编译期门:型上多一个键而表没跟 ⇒ 红;表里写一个型上没有的词(改名 / 拼错 / 删键后的残条目)
  * ⇒ 也红。于是这三张表是从 core 的型**派生**出来的数据,而不是誰记得去同步的清单。
+ * (唯一一格不在 core 型上的键 = http 传输的 `assertionHeader`:引擎尚无座,本仓承载 —— 那一支的门钉在
+ * `mcp-assertion-header.ts` 的 {@link RequestMcpServerSpec} 上,引擎一旦长出同名座,那里的退役门当场红。)
  *
  * ## 两个消费点的处置**刻意不同**(同一张表,不同的门)
  *  · 提交腿({@link normalizeServer})对词表外的键**宽容**(读不认识的键就当没有)—— 那条腿要能安全地
@@ -64,8 +67,9 @@ export declare const MAX_REQUEST_MCP_DROP_NAMES = 32;
 export declare const MCP_SERVER_ENTRY_KEYS: readonly ["allowTools", "contentOrigin", "elicitation", "name", "source", "toolAxes", "toolFaces", "transport"];
 /** `transport.kind:"stdio"` 的键闭集(两向钉在 core 那一支上)。 */
 export declare const STDIO_MCP_TRANSPORT_KEYS: readonly ["args", "command", "env", "kind"];
-/** `transport.kind:"http"` 的键闭集(同上)。 */
-export declare const HTTP_MCP_TRANSPORT_KEYS: readonly ["headers", "kind", "principalHeader", "url"];
+/** `transport.kind:"http"` 的键闭集(同上)。`assertionHeader` 是本仓承载、引擎尚无座的一格(见 {@link RequestMcpServerSpec}):
+ *  表两向钉在**请求面的 http 传输型**上 = 引擎的键 ∪ 这一格;引擎一旦长出同名座,`mcp-assertion-header.ts` 的退役门当场红。 */
+export declare const HTTP_MCP_TRANSPORT_KEYS: readonly ["assertionHeader", "headers", "kind", "principalHeader", "url"];
 /** 条目层:`{}` 与缺席等价的可选 Record 键。 */
 export declare const MCP_ENTRY_EMPTY_RECORD_KEYS: readonly ["toolAxes", "toolFaces"];
 /** 条目层:`[]` 与缺席等价的可选数组键。 */
@@ -113,7 +117,7 @@ export interface McpInjectionDropSeat {
  */
 export declare function validateRequestMcp(raw: unknown): ValidatedRequestMcp | null;
 type ValidatedRequestMcp = {
-    ok: McpServerSpec[];
+    ok: RequestMcpServerSpec[];
     dropped: McpInjectionDrop[];
     droppedTotal: number;
     badContentOrigin: Array<{
@@ -180,6 +184,30 @@ export declare function assertRequestMcpUnlocked(bodyMcp: unknown, lockedKeys: R
  * 形不合(非数组 / 条目非对象)**不归本门**——那是 `validateRequestMcp` 的既有宽容形,本门不抢裁决。
  */
 export declare function assertRequestMcpContentOrigin(bodyMcp: unknown): void;
+/**
+ * S-1515 —— `mcpServers[].transport`(http)上两个身份头的**值域门**(fresh 腿限定,同步 400):`principalHeader` 与 `assertionHeader`
+ * **同设**(`request.body_shape`),或 `assertionHeader` 在场而**不是字符串**(`request.field_invalid`)。
+ *
+ * 前者:两个键回答同一个问题(「这台 http 服务器的请求上用哪个头送身份」),同设 = 两个答案。settings 面由契约包在解析期判拒;
+ * 请求面在这里判拒 —— **同一条规则、两处执行者**,判据与拒句单点在 `mcp-assertion-header.ts`(对契约包原句逐字,差分钉守)。
+ * 后者:契约包的 zod 类型拒它;请求面若把它读成"没写过",一条鉴权声明就无声消失、server 却照常挂上去连。
+ *
+ * ## 位置与 leg 分流(与 {@link assertRequestMcpContentOrigin} 同款理由,不发明第二套)
+ * 排在腿首、任何副作用之前;**只在 fresh 腿**:`checkpoint_ctx` 存的是原始 `TaskRequestBody`,耐久 resume 逐字重放它,
+ * 从这里逃出去的 `HttpError` 会被折成 `409 resume_blocked_by_policy`,把一条 park 任务永久砖死。resume 腿走读器
+ * ({@link normalizeServer}):**降级到升级前的读法**(server 照挂、`principalHeader` 胜、`assertionHeader` 不生效)+ `classifyHonored` 一行 warn ——
+ * 不拒、也不摘 server。判据是纯值域、与租户车道无关(多租户腿本来就忽略整只数组,告诉调用方「你这条写错了」只多不少)。
+ */
+export declare function assertRequestMcpIdentityHeaders(bodyMcp: unknown): void;
+/** 一条**原始**请求条目上两个身份头的问题类(没有问题 / 不是对象 / 不是 http 传输 ⇒ `undefined`)—— 提交腿的门、探测口、重放腿的披露三处共读,
+ *  判据本体在 `mcp-assertion-header.ts`;这里只负责把「条目 → 传输对象」那一步读出来。 */
+export declare function requestEntryIdentityIssue(entry: unknown): McpIdentityHeadersIssue | undefined;
+/** 问题类 → wire 拒面(码 + 句子):两扇拒绝门(提交腿 / 探测口)同一份。条目名进句子,过唯一的回显清洗(剥控制 / 双向字符 + 截长);
+ *  读不出名字的条目用与丢弃点同一个占位。 */
+export declare function requestEntryIdentityRefusal(entry: unknown): {
+    errorCode: "request.body_shape" | "request.field_invalid";
+    message: string;
+} | undefined;
 /**
  * The ONE predicate for "this MCP server name belongs to the deployment": the scenario baseline (what mounted for
  * this scenario) ∪ every name the deployment DECLARED (`CenterMcp.reservedNames` — mounted or not, any scenario).

package/dist/task-mcp.js

@@ -1,16 +1,18 @@
 import { mcpInjectionDroppedNotice, resolveComplianceDenies } from "@sema-agent/core";
 import { isUsableWireName } from "./wire-name-bound.js";
-import { HttpError } from "./security.js";
+import { HttpError, createCodedHttpError } from "./security.js";
 import { GOVERNANCE_HTTP_STATUS } from "./governance-http-status.js";
 import { CONTENT_ORIGIN_WORDS, describeBadContentOrigin, isContentOriginWord } from "./mcp-content-origin.js";
 import { readMcpSourceLabel } from "./mcp-source-label.js";
+import { declaresMcpAssertionHeader, describeMcpAssertionHeaderNotAString, describeMcpIdentityHeadersConflict, mcpIdentityHeadersIssue, noteMcpAssertionHeaderIgnored, noteMcpAssertionHeaderNotSent, readMcpIdentityHeaders, toCoreMcpServerSpec } from "./mcp-assertion-header.js";
+import { echoKeyName } from "./request-key-closure.js";
 import { readMcpToolFaces } from "./mcp-tool-faces.js";
 import { isToolAxisIrreversibility, isToolEffect } from "./tool-axis-words.js";
 export const MAX_REQUEST_MCP_SERVERS = 32;
 export const MAX_REQUEST_MCP_DROP_NAMES = MAX_REQUEST_MCP_SERVERS;
 export const MCP_SERVER_ENTRY_KEYS = ["allowTools", "contentOrigin", "elicitation", "name", "source", "toolAxes", "toolFaces", "transport"];
 export const STDIO_MCP_TRANSPORT_KEYS = ["args", "command", "env", "kind"];
-export const HTTP_MCP_TRANSPORT_KEYS = ["headers", "kind", "principalHeader", "url"];
+export const HTTP_MCP_TRANSPORT_KEYS = ["assertionHeader", "headers", "kind", "principalHeader", "url"];
 export const MCP_ENTRY_EMPTY_RECORD_KEYS = ["toolAxes", "toolFaces"];
 export const MCP_ENTRY_EMPTY_ARRAY_KEYS = ["allowTools"];
 export const MCP_TRANSPORT_EMPTY_RECORD_KEYS = ["env", "headers"];
@@ -60,7 +62,7 @@ function normalizeServer(e, noteBadOrigin) {
             kind: "http",
             url: tr.url,
             ...(isStringRecord(tr.headers) ? { headers: tr.headers } : {}),
-            ...(typeof tr.principalHeader === "string" ? { principalHeader: tr.principalHeader } : {}),
+            ...readMcpIdentityHeaders(tr),
         };
     }
     else {
@@ -151,6 +153,33 @@ export function assertRequestMcpContentOrigin(bodyMcp) {
             ` (omit the key entirely for the default: this server's tools classify as external content)`, { code: "request.field_invalid" });
     }
 }
+export function assertRequestMcpIdentityHeaders(bodyMcp) {
+    if (!Array.isArray(bodyMcp))
+        return;
+    for (const e of bodyMcp) {
+        const refusal = requestEntryIdentityRefusal(e);
+        if (refusal !== undefined)
+            throw createCodedHttpError(400, refusal.errorCode, refusal.message);
+    }
+}
+export function requestEntryIdentityIssue(entry) {
+    if (!entry || typeof entry !== "object" || Array.isArray(entry))
+        return undefined;
+    const t = entry.transport;
+    if (!t || typeof t !== "object" || Array.isArray(t))
+        return undefined;
+    return mcpIdentityHeadersIssue(t);
+}
+export function requestEntryIdentityRefusal(entry) {
+    const issue = requestEntryIdentityIssue(entry);
+    if (issue === undefined)
+        return undefined;
+    const name = echoKeyName("", declaredName(entry));
+    if (issue === "both_set")
+        return { errorCode: "request.body_shape", message: describeMcpIdentityHeadersConflict(name) };
+    const value = (entry.transport).assertionHeader;
+    return { errorCode: "request.field_invalid", message: describeMcpAssertionHeaderNotAString(name, value) };
+}
 export function deploymentClosedMcpNames(baseline, reservedNames) {
     return new Set([...(baseline ?? []).map((s) => s.name), ...reservedNames]);
 }
@@ -198,8 +227,17 @@ function classifyHonored(baseline, entries, config, logger) {
     const reservedNames = config.mcpServers?.reservedNames ?? [];
     const closed = deploymentClosedMcpNames(baseline, reservedNames);
     const blocked = v.ok.filter((s) => closed.has(s.name)).map((s) => s.name);
+    for (const s of v.ok)
+        if (declaresMcpAssertionHeader(s) && !closed.has(s.name))
+            noteMcpAssertionHeaderNotSent(logger, s.name);
+    const mounted = new Set(v.ok.filter((s) => !closed.has(s.name)).map((s) => s.name));
+    for (const e of entries.slice(0, MAX_REQUEST_MCP_SERVERS)) {
+        const issue = requestEntryIdentityIssue(e);
+        if (issue !== undefined && mounted.has(declaredName(e)))
+            noteMcpAssertionHeaderIgnored(logger, declaredName(e), issue);
+    }
     return {
-        mcp: mergeRequestMcp(baseline, v.ok, reservedNames),
+        mcp: mergeRequestMcp(baseline, v.ok.map(toCoreMcpServerSpec), reservedNames),
         drops: [...v.dropped, ...blocked.map((server) => ({ server, reason: "name_reserved_by_deployment" }))],
         droppedTotal: v.droppedTotal + blocked.length,
     };

package/dist/task-settings.d.ts

@@ -50,6 +50,7 @@
 import { type ExecutionEnv, type TaskSpec, type ThinkingLevel, type ToolPolicy, type PromptProvider, type PermissionMode } from "@sema-agent/core";
 import type { HooksConfig } from "@sema-agent/settings-schema/hooks";
 import { type KeyClosureIssue } from "./request-key-closure.js";
+import { type EntryPermissionMode } from "./runtime-governance.js";
 /**
  * 请求面 `permissionMode` 的闭集 = core `PERMISSION_MODES` **全集**(顶层 `permissionMode` / `settings.permissions.defaultMode` /
  * `?permissionMode=` 查询串三处同读)。本仓不持有第二份词表,也不持有「收 / 不收」的表态:判据 = core 的 `isPermissionMode`,型 = core 的
@@ -111,6 +112,7 @@ export declare function planReviewDecisionExitsPlan(decision: "approve" | "edit"
  * 入口词 = `runtime-governance.ts` `entryPermissionMode(体的生效词, 地板).effective`(「词在地板下变成什么」的唯一一只函数;秩是 core 的)。本函数只加
  * 「写进体」这一半:地板缺席 ⇒ 体**原物**交回(零字节变化);地板在场 ⇒ 新体 `{ ...body, permissionMode: 入口词 }`,调用方的对象不改;bundle 的
  * `settings.permissions.defaultMode` 不动 —— 顶层赢过它({@link effectivePermissionMode} 的优先序),再改它就是同一语义的第二个写者。
+ * 同时交回**这一次求值的读数**(`entry`:请求词 / 地板 / 生效词 / 折没折)—— 披露这一折的通告(`entry-mode-clamp-notice.ts`)读它,不另判一遍。
  *
  * 调用点一个:提交入口(`http/admission.ts` 的 `prepareSpec`:值形门全部判完之后、`resolveSpec` 之前)。那一份体就是首跑装配读的体,也是
  * `buildCheckpointCtx` 持久化的体 ⇒ 一处盖章同时覆盖首跑与每一次续跑重建;装配腿与续跑腿都不读地板(两处读 = 两个源)。
@@ -120,7 +122,10 @@ export declare function planReviewDecisionExitsPlan(decision: "approve" | "edit"
 export declare function stampEntryPermissionMode<B extends {
     permissionMode?: unknown;
     settings?: unknown;
-}>(body: B, floor: PermissionMode | undefined): B;
+}>(body: B, floor: PermissionMode | undefined): {
+    readonly body: B;
+    readonly entry: EntryPermissionMode;
+};
 /**
  * S-433 —— **一条已持久化的提交体的生效 permission mode**,单点。
  *

package/dist/task-settings.js

@@ -35,7 +35,7 @@ export function planReviewDecisionExitsPlan(decision) {
 }
 export function stampEntryPermissionMode(body, floor) {
     const entry = entryPermissionMode(storedBodyPermissionMode(body), floor);
-    return entry.floor === undefined ? body : { ...body, permissionMode: entry.effective };
+    return { body: entry.floor === undefined ? body : { ...body, permissionMode: entry.effective }, entry };
 }
 export function storedBodyPermissionMode(body) {
     return effectivePermissionMode(body, parseTaskSettings(body.settings).settings);

package/dist/tool-approval.d.ts

@@ -58,7 +58,7 @@
 import { type ParkedGateFace } from "./approval-content-kind.js";
 import { type ApprovalDecidedBy, type HostSettledBy, type RetiredDecisionKeyFacts } from "./host-decision.js";
 import type { IncomingMessage } from "node:http";
-import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundSkillGrants, type ToolApprovalCard } from "@sema-agent/core";
+import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundGrantAbsence, type BoundSkillGrants, type ToolApprovalCard } from "@sema-agent/core";
 import { type CardRulePersisted, type RuleConsentLane } from "./rules-consent.js";
 import { type AllowRuleShadowProjection, type DenialLimitFallback, type RuleOffersAbsence, type ApprovalRequestFrame, type ApprovalRevokeFrame, type RuleEvidenceProjection } from "./approval-card.js";
 import { type ApprovalAskStore, type AskRow } from "./plugins/approval-ask-store-sql.js";
@@ -67,7 +67,7 @@ import { type AskRowEndingCause, type SettleCause, type SettleOutcome } from "./
 import type { ParkCommitWatch } from "./plugins/park-commit-watch.js";
 import { type GovernanceAskMarks } from "./governance-ask-marks.js";
 import { type GovernancePosture } from "./runtime-governance.js";
-import { type GrantBinding, type StandingAnswerGrantCarrier } from "./standing-answer-grant.js";
+import { type GrantBinding, type StandingAnswerCall } from "./standing-answer-grant.js";
 import { type ApprovalExemptionStore } from "./plugins/approval-exemption-store.js";
 /** [ref]:审批 gate kind 闭集(core gateMatch 的 `human`/`irreversible_ask` ↔ outcome.gate "policy_ask")。
  *  此前 7 份手写副本散在两只 checkpoint store 的数组/SQL 字面与 /decide 守卫——core 加审批味 kind 时
@@ -192,9 +192,10 @@ export declare function carriesDeploymentListQuestion(deploymentListAsks: boolea
  * (`task-settings.ts`,`false`)—— 它们在交出这一问之前先读按工具名记的耐久豁免店(「本会话不再询问」在本层兑现,继承链上的同一问才够得着;审批席依约不退役
  * 继承问),而**能不能读**与审批席 / 回决写侧是同一只判据({@link standingAnswerDurablyRecordable}):记得下的才代答,记不下的(带授予绑定的问 ……)不代答,
  * 存量行也不例外 —— 一事一读。事实取自**这一问本身**:类集经 core 包根唯一的类派生 `classifyAsk`({@link NO_GATE_FACTS});`requiresRealApproval` /
- * `mandated` 读这一问自报的成员;治理位恒假(本层不是治理层);授予绑定读调用(`grantBindingOf`)。
+ * `mandated` 读这一问自报的成员;治理位恒假(本层不是治理层);授予绑定读**调用**(`callGrantBindingOf` —— 本层手里还没有引擎铸的卡,core 7.51.0 不在
+ * `ToolCallRequest` 上盖绑定词,S-1493 载体问题见 `standing-answer-grant.ts` 头注)。
  */
-export declare function policyAskStandingAnswerFacts(req: StandingAnswerGrantCarrier, ask: Extract<PermissionResult, {
+export declare function policyAskStandingAnswerFacts(req: StandingAnswerCall, ask: Extract<PermissionResult, {
     action: "ask";
 }>, deploymentListQuestion: boolean): StandingAnswerFacts;
 /**
@@ -216,7 +217,8 @@ export interface StandingAnswerFacts {
     readonly mandated: boolean;
     /** 这一问的应答**授不授予**这一次调用之外的东西、授予的话绑定是什么(批准引擎的 `Skill` = 激活技能 + 本 run 内清单免问)。
      *  `bound` ⇒ 站着的答案按「工具 + 绑定」记、只代答绑定相同的问(core 7.43.0 #1348 / #1357:活的问与停驻行同带 `boundGrantDigest`);
-     *  `unreadable` ⇒ 不可记、不被代答(fail-closed)。读者一律经 `standing-answer-grant.ts` 的 `grantBindingOf`(唯一读口)折这一位。 */
+     *  `unreadable` ⇒ 不可记、不被代答(fail-closed)。读者一律经 `standing-answer-grant.ts` 折这一位:载体由问的属主定(`questionGrantBindingOf`)——
+     *  引擎铸的问读卡上引擎的词(`grantBindingOf`),部署名单自己的问与策略层的调用读 `callGrantBindingOf`(S-1493)。 */
     readonly grantBinding: GrantBinding;
     /** 引擎盖在这一问上的**类集**(`AskRequest.classes` / 停驻行孪生座;经 core 的屏 `screenAskClassMembers` 读)。`undefined` = 卡上没有类
      *  (老引擎 / 不盖类的站)或屏拒 —— 读不出的类不是「无类」。 */
@@ -275,7 +277,7 @@ export declare function standingAnswerHome(facts: StandingAnswerFacts): Standing
  * `seat` 还得没有授予绑定 —— 耐久店按 `(会话, 工具名)` 记,没有绑定这一维,记下一张带绑定的答案就会代答同名工具的每一种绑定
  * (`plugins/approval-exemption-store.ts`);`none` 记不住。读者:耐久 `/decide` 腿的 remember 可记性(`http/resume-legs.ts`)与运维队列行的
  * `rememberRefused`(`http/routes/approvals-assistant.ts`)—— 两处同答;策略层的豁免读面(部署名单门、workflow 问句门)经本函数 + {@link policyAskStandingAnswerFacts}
- * 决定读不读店。读侧同理:耐久店不代答带绑定的问(`standingGrantSettles` 经 `answerGrantsBeyondCall`)。
+ * 决定读不读店。读侧同理:耐久店不代答带绑定的问(`standingGrantSettles` 读这一问的 `grantBinding`,不是 `none` 就不读店)。
  */
 export declare function standingAnswerDurablyRecordable(facts: StandingAnswerFacts): boolean;
 /**
@@ -306,7 +308,7 @@ export declare function standingAnswerDurablyRecordable(facts: StandingAnswerFac
  *    (`SENSITIVE_WRITE_PATTERNS`)、`commandPolicy`、`AUTONOMY` 内层策略产的门与 shellGate `classify` 档,park 行上没有取证格
  *    (live 腿靠进程内标记表,跨副本 / 重启后够不着),本折法读不到它们的治理出身。
  */
-export declare function parkRowStandingAnswerFacts(pending: Extract<PendingAction, {
+export declare function parkRowStandingAnswerFacts(stored: Extract<PendingAction, {
     kind: "tool_approval";
 }>, gate: CheckpointGate, governance: GovernancePosture | undefined, 
 /** 部署名单门对这一行的调用出不出它自己的问(`approval.ts` 的 `deploymentListAsks`,调用方现读活配置;停驻行上只有 wire 名)。 */
@@ -467,6 +469,11 @@ export interface ToolApprovalFrame {
     /** 上一位哈希的那一份值:`{ skill, allowedTools, disallowedTools }`(`skill: null` = 调用没点名任何已载技能)。与摘要同在同缺;**部署文本**,
      *  壳按上下文转义渲染(core:display metadata)。逐字过境。 */
     boundGrants?: BoundSkillGrants;
+    /** S-1493(core 7.51.0 #1688,**ADDITIVE**,`"tool_approval"` only):这张卡为什么没有 {@link boundGrantDigest} —— 引擎铸的每张卡恰带两者之一:
+     *  `not_bindable`(这一问不是引擎 `Skill` 工具的激活,不绑任何授予 ⇒ 应答可按工具记)/ `unreadable`(绑着却读不出;活卡上引擎恒给摘要,这一词
+     *  只出现在读存量行的面上)。闭集经 `readClosedWordSeat(req, "boundGrantAbsence")` 窄读(筛 = core `BOUND_GRANT_ABSENCES`),集外 ⇒ 缺席 + 计一次。
+     *  与停驻行 / 运维队列行 / inbox 行的同名位同值;站着的答案的授予绑定(引擎铸的问那一家;部署名单自己的问读调用口)读它(`standing-answer-grant.ts` `grantBindingOf`)。display。 */
+    boundGrantAbsence?: BoundGrantAbsence;
     /** core 7.43.0 #1353:分类器没给判词的成因词(`error` / `timeout` / `parse_error`;只在类 `classifier_no_ruling` 的卡上)。闭集经 core 的
      *  `readClosedWordSeat(req, "classifierNoRuling")` 窄读(筛 = core `isAutoModeFallbackCause`),集外 ⇒ 缺席 + 计一次。display:本仓不按它裁决。 */
     classifierNoRuling?: AutoModeFallbackCause;

package/dist/tool-approval.js

@@ -9,13 +9,13 @@ import { approvalPayloadFingerprint } from "./plugins/approval-payload-fingerpri
 import { createLogger } from "./observability/logger.js";
 import { recordFailOpen } from "./observability/fail-open.js";
 import { deriveAskId, deriveAskScopedBatchId, deriveBatchId, MAX_DECISION_NOTE_CHARS } from "./approval-ask-machine.js";
-import { ApprovalCardEnvelopeSchema, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readProbeReason, readReadRootCandidate, readRuleEvidence, readAllowRuleShadowed, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readClosedWordSeat, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
+import { currentParkArm, MAX_RULE_OFFERS, buildApprovalCard, buildApprovalCardEnvelope, buildApprovalRequestFrame, buildRevokeFrame, readDenialLimitFallback, readProbeCause, readProbeReason, readReadRootCandidate, readStoredCardEnvelope, readRuleEvidence, readAllowRuleShadowed, readRuleOffersAbsence, readRuleOffersAbsenceSeat, readParkRowTrueSeat, readAskClassPair, readClosedWordSeat, RuleOfferRawSchema, backfillLegacyBatchMemberKind, screenUncoveredDetailSeat, } from "./approval-card.js";
 import { POLICY_REFUSAL_DECISION, projectAskTerminalClaimTruth } from "./plugins/approval-ask-store-sql.js";
 import { APPROVAL_ENDING_CAUSES, SETTLE_OUTCOME, causeOfAskRow } from "./approval-deny-reasons.js";
 import { settleByPolicy } from "./approval-policy-settlement.js";
 import { governanceAskMarksFor, runWithGovernanceAskScope } from "./governance-ask-marks.js";
 import { governanceOriginOf } from "./runtime-governance.js";
-import { answerGrantsBeyondCall, grantBindingOf } from "./standing-answer-grant.js";
+import { callGrantBindingOf, questionGrantBindingOf } from "./standing-answer-grant.js";
 import { operatorAsk } from "./operator-ask.js";
 import { APPROVAL_EXEMPTED_EVENT } from "./plugins/approval-exemption-store.js";
 const defaultLogger = createLogger();
@@ -99,13 +99,14 @@ function sessionAllowKey(owner, sessionId, category, binding) {
 }
 function askStandingAnswerFacts(req, governanceForced, deploymentListAsks) {
     const classes = screenAskClassMembers(req.askClass, req.classes)?.classes;
+    const deploymentListQuestion = carriesDeploymentListQuestion(deploymentListAsks, classes);
     return {
         governanceForced,
         requiresRealApproval: req.requiresRealApproval === true,
         mandated: req.mandated === true,
-        grantBinding: grantBindingOf(req),
+        grantBinding: questionGrantBindingOf(req, deploymentListQuestion),
         classes,
-        deploymentListQuestion: carriesDeploymentListQuestion(deploymentListAsks, classes),
+        deploymentListQuestion,
     };
 }
 const NO_GATE_FACTS = { contentQuestion: false, markedUnresolvable: false, org: undefined, tightened: undefined, mandateMarks: {} };
@@ -118,7 +119,7 @@ export function policyAskStandingAnswerFacts(req, ask, deploymentListQuestion) {
         governanceForced: false,
         requiresRealApproval: ask.requiresRealApproval === true,
         mandated: ask.mandated === true,
-        grantBinding: grantBindingOf(req),
+        grantBinding: callGrantBindingOf(req),
         classes: [...classifyAsk(ask, NO_GATE_FACTS).classes],
         deploymentListQuestion,
     };
@@ -146,16 +147,18 @@ export function standingAnswerDurablyRecordable(facts) {
         }
     }
 }
-export function parkRowStandingAnswerFacts(pending, gate, governance, deploymentListAsks) {
+export function parkRowStandingAnswerFacts(stored, gate, governance, deploymentListAsks) {
     const riskDescriptor = "riskDescriptor" in gate ? gate.riskDescriptor : undefined;
+    const pending = currentParkArm(stored);
     const classes = screenAskClassMembers(pending.askClass, pending.classes)?.classes;
+    const deploymentListQuestion = carriesDeploymentListQuestion(deploymentListAsks, classes);
     return {
         governanceForced: governanceOriginOf({ riskDescriptor }, governance) === true,
         requiresRealApproval: readParkRowTrueSeat(pending, "requiresRealApproval"),
         mandated: readParkRowTrueSeat(pending, "mandated") || mandatedFromSeat(readRuleOffersAbsenceSeat(pending)),
-        grantBinding: grantBindingOf(pending),
+        grantBinding: questionGrantBindingOf(pending, deploymentListQuestion),
         classes,
-        deploymentListQuestion: carriesDeploymentListQuestion(deploymentListAsks, classes),
+        deploymentListQuestion,
     };
 }
 function pendingEntryStandingAnswerFacts(entry) {
@@ -831,7 +834,7 @@ export class ToolApprovalCoordinator {
         if (!sessionId)
             return false;
         const live = this.allowAllSessions.has(sessionAllowKey(origin.owner, sessionId, sessionAllowCategory(req.toolName), facts.grantBinding));
-        const durable = !live && !answerGrantsBeyondCall(req) && (await this.durableGrantHas(sessionId, req.toolName));
+        const durable = !live && facts.grantBinding.kind === "none" && (await this.durableGrantHas(sessionId, req.toolName));
         if (!live && !durable)
             return false;
         if (!(await this.sessionGrantUncontestedByRow(origin, req)))
@@ -1154,6 +1157,7 @@ export class ToolApprovalCoordinator {
         let ruleLaneMaterial = this.buildRuleLaneMaterial(req, origin.owner, governanceForced, origin.sessionId);
         const mandateWord = readClosedWordSeat(req, "mandate");
         const noRulingCause = readClosedWordSeat(req, "classifierNoRuling");
+        const grantAbsence = readClosedWordSeat(req, "boundGrantAbsence");
         const cardWord = readApprovalCard(req.approvalCard);
         const originWord = typeof req.origin === "string" && req.origin.length > 0 ? req.origin : undefined;
         const askClassPair = readAskClassPair(req);
@@ -1185,6 +1189,7 @@ export class ToolApprovalCoordinator {
             ...(standingAnswerHome(askStandingAnswerFacts(req, governanceForced, deploymentListAsks)) === "none" ? { rememberRefused: true } : {}),
             ...(typeof req.boundGrantDigest === "string" ? { boundGrantDigest: req.boundGrantDigest, ...(req.boundGrants !== undefined ? { boundGrants: req.boundGrants } : {}) } : {}),
             ...(noRulingCause !== undefined ? { classifierNoRuling: noRulingCause } : {}),
+            ...(grantAbsence !== undefined ? { boundGrantAbsence: grantAbsence } : {}),
             ...(cardWord !== undefined ? { approvalCard: cardWord } : {}),
             ...(mandateWord !== undefined ? { mandate: mandateWord } : {}),
             ...(originWord !== undefined ? { origin: originWord } : {}),
@@ -1273,20 +1278,20 @@ export class ToolApprovalCoordinator {
                     releaseAdmission();
                     return replayTerminalRow(existingOrCreated.row);
                 }
-                const persistedEnvelope = ApprovalCardEnvelopeSchema.safeParse(existingOrCreated.row.cardJson);
+                const persistedEnvelope = readStoredCardEnvelope(existingOrCreated.row.cardJson);
                 const maxMintableWindowMs = Math.max(effectiveWindowMs, this.unreachedTtlMs);
                 const sanePersistedDeadline = Number.isFinite(existingOrCreated.row.expiresAtMs) && existingOrCreated.row.expiresAtMs <= Date.now() + maxMintableWindowMs + DURABLE_CALL_TIMEOUT_MS;
-                if (!persistedEnvelope.success || !sanePersistedDeadline) {
-                    this.noteStoreError(new Error(`persisted approval row is unusable (envelopeOk=${persistedEnvelope.success}, deadlineOk=${sanePersistedDeadline}, ` +
+                if (persistedEnvelope === undefined || !sanePersistedDeadline) {
+                    this.noteStoreError(new Error(`persisted approval row is unusable (envelopeOk=${persistedEnvelope !== undefined}, deadlineOk=${sanePersistedDeadline}, ` +
                         `origin=${existingOrCreated.inserted ? "row-this-call-just-inserted" : "row-hit-idempotently"})`), "ensureAsk(persisted-row-unusable)");
                     releaseAdmission();
                     const unattended = this.unattendedOutcome({ arm: "persisted_row_unusable", taskId: origin.taskId, ...(origin.owner !== null ? { owner: origin.owner } : {}), toolName: req.toolName, reachability });
                     return existingOrCreated.inserted ? this.landUnattendedOutcome(unattended, existingOrCreated.row) : unattended;
                 }
                 persistedExpiresAtMs = existingOrCreated.row.expiresAtMs;
-                wireApprovalId = persistedEnvelope.data.approvalId;
+                wireApprovalId = persistedEnvelope.approvalId;
                 frame.approvalId = wireApprovalId;
-                cardForFrame = persistedEnvelope.data.card;
+                cardForFrame = persistedEnvelope.card;
                 if (cardForFrame.governanceForced === true)
                     frame.governanceForced = true;
                 else
@@ -1726,9 +1731,9 @@ export class ToolApprovalCoordinator {
                 return shapeOutcome(await allowedP);
             }
         }
-        const entryGrantBinding = grantBindingOf(req);
         const entryClasses = askClassPair?.classes;
         const entryDeploymentListQuestion = carriesDeploymentListQuestion(deploymentListAsks, entryClasses);
+        const entryGrantBinding = questionGrantBindingOf(req, entryDeploymentListQuestion);
         const rememberRefused = standingAnswerHome(pendingEntryStandingAnswerFacts({
             ...(effectiveGovernanceForced ? { governanceForced: true } : {}),
             ...(req.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
@@ -2145,10 +2150,10 @@ export class ToolApprovalCoordinator {
         if (lane === undefined || row.owner === null)
             return flag(false, "rule_lane_unavailable");
         const owner = row.owner;
-        const envelope = ApprovalCardEnvelopeSchema.safeParse(row.cardJson);
-        if (!envelope.success)
+        const envelope = readStoredCardEnvelope(row.cardJson);
+        if (envelope === undefined)
             return flag(false, "rule_material_absent");
-        const card = envelope.data.card;
+        const card = envelope.card;
         if (card.governanceForced === true)
             return flag(false, "rule_governance_forced");
         const command = row.ruleCommand;

package/dist/trace/core-keyset-guard.d.ts

@@ -36,14 +36,14 @@ type _GuardProvenanceReverse = AssertAllKeysHandled<Exclude<ProvenanceProjected
 type AgentMessageProjected = "from" | "body";
 type _GuardAgentMessage = AssertAllKeysHandled<Exclude<keyof NonNullable<TaskNotificationPayload["agentMessage"]>, AgentMessageProjected>>;
 type _GuardAgentMessageReverse = AssertAllKeysHandled<Exclude<AgentMessageProjected, keyof NonNullable<TaskNotificationPayload["agentMessage"]>>>;
-type BgNotifProjected = "taskId" | "sessionId" | "seq" | "status" | "summary" | "stoppedBy" | "resumable" | "recentSteps" | "editedFiles" | "usage" | "transcriptId" | "rootSessionId" | "parentTaskId" | "parentToolCallId" | "completionId" | "spawnName";
+type BgNotifProjected = "taskId" | "sessionId" | "seq" | "status" | "summary" | "stoppedBy" | "resumable" | "recentSteps" | "editedFiles" | "usage" | "transcriptId" | "rootSessionId" | "parentTaskId" | "parentToolCallId" | "completionId" | "spawnName" | "result";
 type BgNotifExcluded = "kind" | "sessionScoped" | "owner" | "scope" | "description" | "agentType" | "name" | "currentAction" | "currentTool" | "parentSessionId" | "startedAt" | "workflowRunId" | "progressTaskId" | "progressParentTaskId" | "model";
 type _GuardBgNotif = AssertAllKeysHandled<Exclude<keyof BackgroundChildEvent, BgNotifProjected | BgNotifExcluded>>;
 type _GuardBgNotifReverse = AssertAllKeysHandled<Exclude<BgNotifProjected | BgNotifExcluded, keyof BackgroundChildEvent>>;
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type _GuardRosterReverse = AssertAllKeysHandled<Exclude<RosterProjected, keyof RosterEntry>>;
-type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "allowRuleShadowed" | "probeCause" | "probeReason" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling" | "approvalCard";
+type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "allowRuleShadowed" | "probeCause" | "probeReason" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling" | "approvalCard" | "boundGrantAbsence";
 type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
@@ -136,7 +136,7 @@ type _GuardPermissionTraceReverse = AssertAllKeysHandled<Exclude<PermissionTrace
 /** `T` 非 `never` 时收敛到 `never`(空集 ⇒ 残留 `"EMPTY"` ⇒ tsc 红)。 */
 type AssertNonEmpty<T> = [T] extends [never] ? "EMPTY" : never;
 type _GuardPermissionTraceNonEmpty = AssertAllKeysHandled<AssertNonEmpty<PermissionTraceKind>>;
-type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "mandated" | "mandate" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling";
+type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "mandated" | "mandate" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling" | "boundGrantAbsence";
 type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "approvalCard" | "restoreMode" | "checkpointId" | "previewWithheld" | "authoredBy";
 type _GuardInboxSummary = AssertAllKeysHandled<Exclude<keyof CheckpointSummary, SummaryProjected | SummaryExcluded>>;
 type _GuardInboxSummaryReverse = AssertAllKeysHandled<Exclude<SummaryProjected | SummaryExcluded, keyof CheckpointSummary>>;

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "permission.entry_mode_clamped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;

package/dist/trace/engine-notice-wire.js

@@ -29,6 +29,7 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "instructions.source_changed",
     "session.records_skipped",
     "server.model_unreachable",
+    "permission.entry_mode_clamped",
     "classifier.unavailable",
     "config.permission_mode_unavailable",
     "permission.ask_released_by_mode",

package/dist/trace/project.d.ts

@@ -167,7 +167,8 @@ export declare function toolStartEventData(ev: {
  * `done` 永远到不了、重连恒复现同一处),而 `gate-outcome-defective` 那一格还不涨。
  *
  * ⇒ 兑现方式从「枚举」换成**结构**:任何逃出投影的异常同走既有的那一口 report + withhold。规则因此变少
- * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」),上面那几道具名形门留着只为**诊断串更准**。
+ * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」)。core 7.51.0 起筛本身对任意 JSON 形不抛(KL-1731-a:只覆盖 JSON ——
+ * 访问器 / Proxy 这类非 JSON 值仍可能抛),本仓此前叠在筛前的具名形门与成员门(第二读法)随之退役,诊断串就是筛给的缺陷句。
  * ⛔ **刻意不动**「先脱敏后截断」的次序:截断在前会把跨界的密钥切成半截明文留在输出里,而且它只治
  * `note` 一条叶(`approver` 同病)—— 那是给一个类打两个特判,正是本仓要消掉的形。
  */
@@ -188,11 +189,13 @@ export declare function screenedGate(v: unknown): GateOutcome | undefined;
  * 一律过 {@link screenedGate},零例外」。它按**型**分派而不是按调用点,所以将来第二个携带
  * `GateOutcome` 的账本型只需把 {@link GATE_BEARING_LEDGER_EVENT_TYPE} 扩成词表,读腿一行都不用改。
  *
- * ## 读腿与写腿现在是**同一只**筛(7.74.0 起,零双读)
+ * ## 读腿与写腿现在是**同一只**筛(零双读)
  * 7.72.0–7.73.0 期间读腿多一步「认本服务上一版写下的退役词旧拼法」(`unresolvable` → `ancestor_marked`),
  * 那是一条**长期双读臂**:同一份字节在写腿与读腿上有两种理解,而且没有到期日。7.74.0 把它换成**一次性
- * 迁移**(启动期把存量字节原地改名;窗关后已删码)⇒ 读腿退回写腿那只严格筛子,集外词一律整条 withhold + 计数,
- * 不再有第二种读法 —— 残留旧拼法的字节(local 车道引擎 File 店里不可改写的已决行)同走这一只筛,响亮不静默。
+ * 迁移**(启动期把存量字节原地改名;窗关后已删码)。S-1542(core 7.51.0 #1731)起这只筛是 core `screenGateOutcome(g)` 缺省的**档案读法**
+ * (每个闭集 = 今日成员 ∪ core `RETIRED_MEMBERS`),读腿与写腿同走它:残留旧拼法的字节(local 车道引擎 File 店里不可改写的已决行)
+ * **整条读回、原词上帧、计数 0**(档案词是当年合法铸下的事实,不是缺陷,不改写成今天的词);整条 withhold + 计数的只有真缺陷
+ * (集外且不在退役表的词、破不变量、形坏)。读法只有一种。
  *
  * ## 与写腿脱敏汇点的关系(别再走回头路)
  * 写腿的对偶是 `redactLedgerEventData`(三孪生 store 的 `appendEvent` 落库前),它管的是脱敏、不是判形;