@sema-agent/server 7.135.0 → 7.136.0

package/wire-changes/server@7.136.0.json

@@ -0,0 +1,448 @@
+{
+  "repo": "server",
+  "version": "7.136.0",
+  "from": "v7.135.0",
+  "fromCommit": "e1ea5bd2c52cc6359ca0318bb1f6545592e8b7f5",
+  "to": "v7.136.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "selfMinted.approvalQueuePendingKey",
+      "member": "boundGrantDigest",
+      "text": "自铸 GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影) 新增 `boundGrantDigest`(属性 present-iff;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A2",
+      "source": "selfMinted.approvalQueuePendingKey",
+      "member": "boundGrants",
+      "text": "自铸 GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影) 新增 `boundGrants`(属性 present-iff;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A3",
+      "source": "selfMinted.approvalQueuePendingKey",
+      "member": "classifierNoRuling",
+      "text": "自铸 GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影) 新增 `classifierNoRuling`(属性 present-iff;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A4",
+      "source": "selfMinted.approvalRequestCardKey",
+      "member": "approvalCard",
+      "text": "自铸 approval_request 帧 card.<键>(活铸帧的 card · 落库的卡信封 card_json · 断连重放帧的 card) 新增 `approvalCard`(属性 present-iff;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A5",
+      "source": "selfMinted.configCatalogRow",
+      "member": "SEALED_KEY_DIR",
+      "text": "自铸 GET /v1/config/catalog rows[](<行名> → 域;只登本版新增的行) 新增 `SEALED_KEY_DIR`(属性 store;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)`(属性 401;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)`(属性 500;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A8",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)`(属性 503;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)`(属性 503;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)`(属性 503;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)`(属性 404;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)`(属性 500;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide#deny(复活不了的停驻行:无 agent 名 / 无根会话锚;体 { taskId, status: failed, decision: deny })",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/approvals/:sessionId/decide#deny(复活不了的停驻行:无 agent 名 / 无根会话锚;体 { taskId, status: failed, decision: deny })`(属性 200;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A15",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)`(属性 422;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A16",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A17",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))`(属性 409;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A18",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A19",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A20",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A21",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)`(属性 400;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A22",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)`(属性 200;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A23",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.body_shape#a2aPeers[i].unknown_key",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.body_shape#a2aPeers[i].unknown_key`(属性 body: unrecognized key(s) on an A2A peer declaration — refused rather than dropped …; Accepted per entry: <keys>;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A24",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#a2aPeers.not_array",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#a2aPeers.not_array`(属性 head: a2aPeers is <shape>, not an array of A2A peer declarations;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A25",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#a2aPeers.over_cap",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#a2aPeers.over_cap`(属性 tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal);since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A26",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)`(属性 <field> (peer <name>) is not a usable declaration — <rule> …;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A27",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#a2aPeers[i].not_object",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#a2aPeers[i].not_object`(属性 head: a2aPeers[i] is <shape>, not an A2A peer declaration (an object);since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A28",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#a2aPeers[i].url|cardUrl.credential`(属性 <field> (peer <name>) is not a usable declaration — <rule> …;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A29",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#images[i].url.credential",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#images[i].url.credential`(属性 <field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A30",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)`(属性 head: <field> has <count> entries — at most <cap> are accepted;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A31",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)`(属性 title must contain at least one visible character;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A32",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)`(属性 slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A33",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)`(属性 slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A34",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 decide.row_unrevivable#no_agent_name",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 decide.row_unrevivable#no_agent_name`(属性 ends: deny it to close the card (the agent then ends as failed);since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A35",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 decide.row_unrevivable#no_root_anchor",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 decide.row_unrevivable#no_root_anchor`(属性 ends: deny it to close the card (the agent then ends as failed);since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A36",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)`(属性 this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A37",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)`(属性 workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A38",
+      "source": "selfMinted.storeFaultPermanence",
+      "member": "transient",
+      "text": "自铸 文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable) 新增 `transient`(属性 present-iff;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A39",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/assistant/inbox#objective",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/assistant/inbox#objective`(属性 runRowObjectivePreview;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A40",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics`(属性 x-api-key-only;mutually-exclusive;both-set-refuses-boot;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A41",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics`(属性 bearer-only;mutually-exclusive;both-set-refuses-boot;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A42",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_CONCURRENT].derivedDefaultNote",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_CONCURRENT].derivedDefaultNote`(属性 default-window-source:server;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A43",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_TOTAL].derivedDefaultNote",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_TOTAL].derivedDefaultNote`(属性 default-window-source:server;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A44",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[MCP_ELICITATION_MIN_INTERVAL_MS].derivedDefaultNote",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[MCP_ELICITATION_MIN_INTERVAL_MS].derivedDefaultNote`(属性 default-window-source:server;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A45",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote`(属性 default-window-source:server;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A46",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics`(属性 boot-checks-bucket;runtime-latest-no-such-bucket-fails-run;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A47",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote`(属性 absent=>kata;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A48",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics`(属性 multi-segment-prefix;bad-segment-refuses-boot;since 7.136.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A49",
+      "source": "selfMinted.wireValueRule",
+      "member": "SSE elicitation_complete#action(没人应答的释放)",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `SSE elicitation_complete#action(没人应答的释放)`(属性 cancel-not-decline;since 7.136.0 = 本版新上 wire)"
+    }
+  ],
+  "registered": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "selfMinted.approvalQueuePendingKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#approvalQueuePendingKey"
+      ],
+      "added": [
+        "boundGrantDigest",
+        "boundGrants",
+        "classifierNoRuling"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.approvalRequestCardKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#approvalRequestCardKey"
+      ],
+      "added": [
+        "approvalCard"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.configCatalogRow",
+      "at": [
+        "src/trace/self-minted-wire.ts#configCatalogRow"
+      ],
+      "added": [
+        "SEALED_KEY_DIR"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)",
+        "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)",
+        "GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)",
+        "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)",
+        "GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)",
+        "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)",
+        "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)",
+        "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)",
+        "POST /v1/approvals/:sessionId/decide#deny(复活不了的停驻行:无 agent 名 / 无根会话锚;体 { taskId, status: failed, decision: deny })",
+        "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)",
+        "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)",
+        "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)",
+        "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)",
+        "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.refusalSentenceForm",
+      "at": [
+        "src/trace/self-minted-wire.ts#refusalSentenceForm"
+      ],
+      "added": [
+        "400 request.body_shape#a2aPeers[i].unknown_key",
+        "400 request.field_invalid#a2aPeers.not_array",
+        "400 request.field_invalid#a2aPeers.over_cap",
+        "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)",
+        "400 request.field_invalid#a2aPeers[i].not_object",
+        "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential",
+        "400 request.field_invalid#images[i].url.credential",
+        "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)",
+        "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)",
+        "409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)",
+        "409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)",
+        "409 decide.row_unrevivable#no_agent_name",
+        "409 decide.row_unrevivable#no_root_anchor",
+        "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)",
+        "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.storeFaultPermanence",
+      "at": [
+        "src/trace/self-minted-wire.ts#storeFaultPermanence"
+      ],
+      "added": [
+        "transient"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/assistant/inbox#objective",
+        "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics",
+        "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics",
+        "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_CONCURRENT].derivedDefaultNote",
+        "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_TOTAL].derivedDefaultNote",
+        "GET /v1/config/catalog#rows[MCP_ELICITATION_MIN_INTERVAL_MS].derivedDefaultNote",
+        "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote",
+        "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics",
+        "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote",
+        "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics",
+        "SSE elicitation_complete#action(没人应答的释放)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}

package/dist/url-credential.d.ts

@@ -1,52 +0,0 @@
-/** 拒因词(闭集;判序 = 本数组序)。wire 上即 `request.field_invalid` 拒体的 `reason`。 */
-export declare const URL_CREDENTIAL_REASONS: readonly ["url_userinfo", "url_credential_param"];
-export type UrlCredentialReason = (typeof URL_CREDENTIAL_REASONS)[number];
-/** 一处命中:`url_userinfo`,或 `url_credential_param` + 它在哪一段、表里的哪个词(小写;不是调用方的原字节)。 */
-export type UrlCredential = {
-    readonly reason: "url_userinfo";
-} | {
-    readonly reason: "url_credential_param";
-    readonly at: "query" | "fragment";
-    readonly name: string;
-};
-/**
- * 判:这个值作为 URL 读出来(WHATWG),带不带 **userinfo**(判官的第一问,也是 {@link findUrlCredential} 的第一步)。只问这一件的座位 —— 运行时本就拒带 userinfo 的 URL、
- * 而凭据名参数不由它拒的载体(搜索后端的部署 env 与续跑重放读法)—— 问这一只,不在座位里另写一份 userinfo 谓词。纯函数。
- */
-export declare function findUrlUserinfo(raw: string): Extract<UrlCredential, {
-    readonly reason: "url_userinfo";
-}> | undefined;
-/**
- * 判:这个值作为 URL 读出来(WHATWG),带不带凭据。首个命中;没有(含不透明 / 解析不了的值)⇒ `undefined`。纯函数。
- */
-export declare function findUrlCredential(raw: string): UrlCredential | undefined;
-/** 一处命中的规则句(穷举;新拒因词不补 = 编译红)。只说规则与表词,不含值。 */
-export declare function urlCredentialRule(c: UrlCredential): string;
-/** 拒体上的机读位(加性键:直接当 `request.field_invalid` 的附加键用)。 */
-export type UrlCredentialFacts = {
-    readonly field: string;
-    readonly reason: UrlCredentialReason;
-};
-/** 机读位的唯一铸点:`field` 是座位给的体内全坐标,`reason` 是判官的拒因词(不另造)。 */
-export declare function urlCredentialFacts(field: string, credential: UrlCredential): UrlCredentialFacts;
-/**
- * 出路句(停驻封签的位是请求头):凭据改写进这一条的 `headers`(停驻任务的续跑上下文里只以封签存在)。MCP `transport.headers` · A2A 对端 `headers` ·
- * http 钩子条目 `headers` 三座同一句骨架,`place` 是那一条的 `headers` 在请求体里的坐标。
- */
-export declare function urlCredentialHeaderExit(place: string): string;
-/**
- * 原因句骨架(四座同一句,值不回显):规则句 + 「URL 原样存」的事实 + 出路。`exit` 是座位给的出路句(`urlCredentialHeaderExit` 或座位自己的)。
- * 为什么说「原样存」:封签闭集刻意不收 URL 一类自由文本,所以 URL 照原样进停驻上下文、日志与读面 —— 凭据只许走为它设的座。
- */
-export declare function urlCredentialRefusalReason(credential: UrlCredential, exit: string): string;
-/** 一处请求面拒的整句 + 机读位({@link buildRequestUrlCredentialRefusal} 的产物)。 */
-export interface UrlCredentialRefusal {
-    readonly message: string;
-    readonly facts: UrlCredentialFacts;
-}
-/**
- * 请求面 URL 座位的拒(整句 + 机读位),`<field>[ (<subject>)] <原因句>`。`subject` 是座位给的条目指认(MCP 的 server 名 / A2A 的 peer 名;坐标本身唯一的座位不带)。
- * MCP 座的整句要接它自己的条目键律尾句,所以 MCP 直接取 {@link urlCredentialRefusalReason} + {@link urlCredentialFacts},另三座走这一只。
- */
-export declare function buildRequestUrlCredentialRefusal(field: string, credential: UrlCredential, exit: string, subject?: string): UrlCredentialRefusal;
-//# sourceMappingURL=url-credential.d.ts.map

package/dist/url-credential.js

@@ -1,49 +0,0 @@
-import { httpUrlFlaws, httpUrlRule, isHierarchicalUrl } from "@sema-agent/settings-schema";
-import { isCredentialParamName } from "./trace/redact.js";
-export const URL_CREDENTIAL_REASONS = ["url_userinfo", "url_credential_param"];
-function credentialParamIn(params) {
-    for (const name of new URLSearchParams(params).keys()) {
-        if (isCredentialParamName(name))
-            return name.replace(/[A-Z]/g, (c) => c.toLowerCase());
-    }
-    return undefined;
-}
-export function findUrlUserinfo(raw) {
-    return isHierarchicalUrl(raw) && httpUrlFlaws(raw, ["userinfo"]).includes("userinfo") ? { reason: "url_userinfo" } : undefined;
-}
-export function findUrlCredential(raw) {
-    if (!isHierarchicalUrl(raw))
-        return undefined;
-    const userinfo = findUrlUserinfo(raw);
-    if (userinfo !== undefined)
-        return userinfo;
-    const u = new URL(raw);
-    const inQuery = credentialParamIn(u.search);
-    if (inQuery !== undefined)
-        return { reason: "url_credential_param", at: "query", name: inQuery };
-    const inFragment = credentialParamIn(u.hash.slice(1));
-    if (inFragment !== undefined)
-        return { reason: "url_credential_param", at: "fragment", name: inFragment };
-    return undefined;
-}
-export function urlCredentialRule(c) {
-    switch (c.reason) {
-        case "url_userinfo":
-            return httpUrlRule("userinfo");
-        case "url_credential_param":
-            return `must not carry a credential parameter (the ${c.at} names "${c.name}", a name the service's log redactor treats as a credential)`;
-    }
-}
-export function urlCredentialFacts(field, credential) {
-    return { field, reason: credential.reason };
-}
-export function urlCredentialHeaderExit(place) {
-    return `${place} is stored sealed: send the credential as a header in ${place} (for example "Authorization": "Bearer …")`;
-}
-export function urlCredentialRefusalReason(credential, exit) {
-    return `${urlCredentialRule(credential)} — the URL is kept as written (a parked task's resume context, logs), while ${exit}`;
-}
-export function buildRequestUrlCredentialRefusal(field, credential, exit, subject) {
-    return { message: `${field}${subject === undefined ? "" : ` (${subject})`} ${urlCredentialRefusalReason(credential, exit)}`, facts: urlCredentialFacts(field, credential) };
-}
-//# sourceMappingURL=url-credential.js.map