@sema-agent/server 7.135.0 → 7.137.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (342) hide show
  1. package/MIGRATION.md +237 -2
  2. package/USAGE.md +146 -41
  3. package/deploy/sema-up/README.md +15 -1
  4. package/deploy/sema-up/chart/templates/NOTES.txt +1 -1
  5. package/deploy/sema-up/chart/templates/sandbox-rbac.yaml +7 -1
  6. package/deploy/sema-up/chart/values.yaml +1 -1
  7. package/deploy/sema-up/stack/sema-stack-cluster.yaml +7 -1
  8. package/dist/approval-card.d.ts +60 -4
  9. package/dist/approval-card.js +18 -1
  10. package/dist/approval-content-kind.d.ts +7 -0
  11. package/dist/approval-content-kind.js +8 -1
  12. package/dist/approval-gate-currency.d.ts +48 -6
  13. package/dist/approval-gate-currency.js +16 -9
  14. package/dist/approval-hmac.d.ts +13 -1
  15. package/dist/approval-hmac.js +1 -1
  16. package/dist/approval.js +3 -3
  17. package/dist/auth-bridge.d.ts +34 -5
  18. package/dist/auth-bridge.js +22 -5
  19. package/dist/boot/budget-tracing.d.ts +1 -2
  20. package/dist/boot/budget-tracing.js +2 -2
  21. package/dist/boot/execution-env.d.ts +24 -1
  22. package/dist/boot/execution-env.js +69 -6
  23. package/dist/boot/org-memory.js +1 -1
  24. package/dist/boot/reapers.d.ts +3 -0
  25. package/dist/boot/reapers.js +15 -1
  26. package/dist/boot/resolve-spec.d.ts +4 -0
  27. package/dist/boot/resolve-spec.js +24 -22
  28. package/dist/boot/runner-deps.js +4 -2
  29. package/dist/boot/stage-03-store-backend.d.ts +1 -1
  30. package/dist/boot/stage-04-stores.d.ts +2 -2
  31. package/dist/boot/stage-05-execution-env.d.ts +4 -2
  32. package/dist/boot/stage-05-execution-env.js +11 -2
  33. package/dist/boot/stage-06-runners.d.ts +4 -2
  34. package/dist/boot/stage-06-runners.js +5 -1
  35. package/dist/boot/stage-07-capability-layer.d.ts +5 -2
  36. package/dist/boot/stage-07-capability-layer.js +1 -1
  37. package/dist/boot/stage-08-reapers.d.ts +5 -2
  38. package/dist/boot/stage-08-reapers.js +2 -1
  39. package/dist/boot/stage-09-leader.d.ts +5 -2
  40. package/dist/boot/stage-10-http-server.d.ts +5 -2
  41. package/dist/boot/stage-10-http-server.js +3 -2
  42. package/dist/boot/stores.d.ts +1 -1
  43. package/dist/boot/stores.js +2 -3
  44. package/dist/boot/web-admin.js +10 -17
  45. package/dist/brain.js +12 -3
  46. package/dist/broker/broker.d.ts +89 -0
  47. package/dist/broker/broker.js +287 -0
  48. package/dist/broker/constants.d.ts +39 -0
  49. package/dist/broker/constants.js +15 -0
  50. package/dist/broker/http1.d.ts +111 -0
  51. package/dist/broker/http1.js +256 -0
  52. package/dist/broker/lease-book.d.ts +87 -0
  53. package/dist/broker/lease-book.js +142 -0
  54. package/dist/broker/lease-file.d.ts +60 -0
  55. package/dist/broker/lease-file.js +127 -0
  56. package/dist/broker/main.d.ts +2 -0
  57. package/dist/broker/main.js +20 -0
  58. package/dist/budget.d.ts +3 -3
  59. package/dist/budget.js +4 -0
  60. package/dist/capabilities/composite-members.d.ts +2 -1
  61. package/dist/capabilities/composite-members.js +2 -1
  62. package/dist/capabilities/engine-capabilities.js +1 -0
  63. package/dist/capabilities/mcp-probe.d.ts +5 -4
  64. package/dist/capabilities/scenarios.d.ts +23 -8
  65. package/dist/capabilities/scenarios.js +13 -8
  66. package/dist/capabilities/skills.d.ts +28 -5
  67. package/dist/capabilities/skills.js +8 -0
  68. package/dist/capability-facts.d.ts +3 -7
  69. package/dist/capability-facts.js +3 -5
  70. package/dist/center-credential-renewer.js +5 -1
  71. package/dist/center-credential.d.ts +18 -4
  72. package/dist/center-credential.js +18 -3
  73. package/dist/checkpoint-ctx-seal-m28.d.ts +3 -10
  74. package/dist/checkpoint-ctx-seal-m28.js +1 -1
  75. package/dist/checkpoint-identity.d.ts +3 -3
  76. package/dist/config-catalog.js +21 -16
  77. package/dist/config-d-migration.js +1 -1
  78. package/dist/config-invariants.d.ts +1 -1
  79. package/dist/config-invariants.js +8 -0
  80. package/dist/config-lkg.d.ts +0 -38
  81. package/dist/config-lkg.js +1 -83
  82. package/dist/config-types.d.ts +21 -4
  83. package/dist/config.d.ts +1 -1
  84. package/dist/config.js +60 -16
  85. package/dist/deployment-governance.d.ts +2 -2
  86. package/dist/deployment-governance.js +7 -9
  87. package/dist/deployment-shape.d.ts +1 -1
  88. package/dist/device-ws-protocol.d.ts +1 -0
  89. package/dist/device-ws-protocol.js +2 -1
  90. package/dist/elicitation.d.ts +8 -7
  91. package/dist/elicitation.js +9 -8
  92. package/dist/file-history-disclosure.d.ts +8 -4
  93. package/dist/file-history-disclosure.js +24 -6
  94. package/dist/fleet-client.d.ts +32 -1
  95. package/dist/fleet-client.js +24 -4
  96. package/dist/fleet-lease.d.ts +7 -3
  97. package/dist/fleet-lease.js +31 -23
  98. package/dist/hooks/classic-stations.d.ts +11 -54
  99. package/dist/hooks/hook-llm.js +14 -8
  100. package/dist/hooks/hook-runner.d.ts +4 -4
  101. package/dist/hooks/hook-runner.js +2 -2
  102. package/dist/http/admission.js +10 -7
  103. package/dist/http/approval-sweeps.js +4 -3
  104. package/dist/http/caller-trust.d.ts +2 -1
  105. package/dist/http/caller-trust.js +1 -3
  106. package/dist/http/checkpoint-ctx.d.ts +76 -16
  107. package/dist/http/checkpoint-ctx.js +45 -1
  108. package/dist/http/dispatch.js +24 -19
  109. package/dist/http/durable-run-leg.d.ts +5 -1
  110. package/dist/http/durable-run-leg.js +1 -1
  111. package/dist/http/health-self-report.d.ts +2 -2
  112. package/dist/http/mcp-remote-text.d.ts +5 -0
  113. package/dist/http/mcp-remote-text.js +7 -0
  114. package/dist/http/principal-gate.d.ts +15 -10
  115. package/dist/http/principal-gate.js +48 -9
  116. package/dist/http/resume-ctx-read.d.ts +2 -16
  117. package/dist/http/resume-ctx-read.js +2 -3
  118. package/dist/http/resume-legs.d.ts +2 -20
  119. package/dist/http/resume-legs.js +52 -38
  120. package/dist/http/route-ctx.d.ts +8 -2
  121. package/dist/http/routes/approvals-assistant.d.ts +0 -2
  122. package/dist/http/routes/approvals-assistant.js +65 -16
  123. package/dist/http/routes/capabilities.js +11 -1
  124. package/dist/http/routes/mcp-reconnect.d.ts +1 -1
  125. package/dist/http/routes/mcp-reconnect.js +5 -7
  126. package/dist/http/routes/runs.js +4 -3
  127. package/dist/http/routes/session-sync.js +70 -12
  128. package/dist/http/routes/sessions.js +20 -15
  129. package/dist/http/routes/tasks.js +8 -6
  130. package/dist/http/server.d.ts +4 -0
  131. package/dist/http/stored-body-replay.d.ts +3 -3
  132. package/dist/http/stored-body-replay.js +6 -1
  133. package/dist/http/submit-ctx.js +1 -1
  134. package/dist/http/wire-types.d.ts +57 -30
  135. package/dist/identity-source.d.ts +65 -0
  136. package/dist/identity-source.js +45 -0
  137. package/dist/index.d.ts +1 -0
  138. package/dist/index.js +1 -0
  139. package/dist/memory-store-refusal.d.ts +3 -3
  140. package/dist/model-entry-refusal.d.ts +2 -0
  141. package/dist/model-entry-refusal.js +11 -0
  142. package/dist/model-route-gap.d.ts +49 -4
  143. package/dist/model-route-gap.js +34 -1
  144. package/dist/model-select.d.ts +6 -17
  145. package/dist/model-select.js +0 -3
  146. package/dist/namespaced-rule-name.d.ts +1 -1
  147. package/dist/object-store-buckets.d.ts +13 -0
  148. package/dist/object-store-buckets.js +3 -0
  149. package/dist/observability/fail-open.d.ts +19 -7
  150. package/dist/observability/fail-open.js +19 -7
  151. package/dist/observability/metrics.js +2 -2
  152. package/dist/observability/principal-context.d.ts +4 -1
  153. package/dist/observability/principal-context.js +6 -1
  154. package/dist/observability/run-terminal.js +1 -0
  155. package/dist/operator-ask.d.ts +2 -2
  156. package/dist/org-delivery-gate.js +1 -1
  157. package/dist/org-memory-admission.d.ts +2 -2
  158. package/dist/org-memory-admission.js +39 -2
  159. package/dist/parked-decide.d.ts +4 -3
  160. package/dist/parked-decide.js +29 -9
  161. package/dist/peer-directory.d.ts +2 -1
  162. package/dist/peer-directory.js +7 -5
  163. package/dist/permission-rule-list.d.ts +2 -2
  164. package/dist/plugins/approval-ask-store-sql.d.ts +8 -0
  165. package/dist/plugins/approval-ask-store-sql.js +3 -0
  166. package/dist/plugins/blob-backend.js +2 -1
  167. package/dist/plugins/checkpoint-index-columns.d.ts +50 -1
  168. package/dist/plugins/checkpoint-index-columns.js +28 -0
  169. package/dist/plugins/checkpoint-store-sql.d.ts +46 -12
  170. package/dist/plugins/checkpoint-store-sql.js +64 -35
  171. package/dist/plugins/file-history-store-sql.d.ts +6 -0
  172. package/dist/plugins/file-history-store-sql.js +37 -37
  173. package/dist/plugins/file-run-store.js +8 -2
  174. package/dist/plugins/k8s-exec-protocol.d.ts +69 -13
  175. package/dist/plugins/k8s-exec-protocol.js +116 -28
  176. package/dist/plugins/k8s-pod-delete-failure.d.ts +25 -0
  177. package/dist/plugins/k8s-pod-delete-failure.js +17 -0
  178. package/dist/plugins/k8s-pod-reaper.d.ts +112 -0
  179. package/dist/plugins/k8s-pod-reaper.js +122 -0
  180. package/dist/plugins/local-checkpoint-store.d.ts +3 -6
  181. package/dist/plugins/local-checkpoint-store.js +7 -6
  182. package/dist/plugins/memory-run-store.js +2 -0
  183. package/dist/plugins/one-time-migrations.d.ts +49 -37
  184. package/dist/plugins/one-time-migrations.js +87 -128
  185. package/dist/plugins/permission-rule-store-file.js +2 -2
  186. package/dist/plugins/permission-rule-store-sql.d.ts +17 -17
  187. package/dist/plugins/permission-rule-store-sql.js +16 -17
  188. package/dist/plugins/pg-pool.js +4 -0
  189. package/dist/plugins/pg-session-storage.js +2 -2
  190. package/dist/plugins/remote-env-adb.d.ts +3 -0
  191. package/dist/plugins/remote-env-adb.js +1 -0
  192. package/dist/plugins/remote-env-device.d.ts +3 -0
  193. package/dist/plugins/remote-env-device.js +4 -0
  194. package/dist/plugins/remote-env-e2b.d.ts +3 -0
  195. package/dist/plugins/remote-env-e2b.js +1 -0
  196. package/dist/plugins/remote-env-file-error.d.ts +8 -1
  197. package/dist/plugins/remote-env-file-error.js +7 -1
  198. package/dist/plugins/remote-env-host.d.ts +7 -1
  199. package/dist/plugins/remote-env-host.js +7 -1
  200. package/dist/plugins/remote-env-k8s.d.ts +154 -14
  201. package/dist/plugins/remote-env-k8s.js +300 -21
  202. package/dist/plugins/remote-env-local-docker.d.ts +3 -0
  203. package/dist/plugins/remote-env-local-docker.js +1 -0
  204. package/dist/plugins/remote-env-ssh.d.ts +3 -0
  205. package/dist/plugins/remote-env-ssh.js +1 -0
  206. package/dist/plugins/run-store-sql.js +10 -4
  207. package/dist/plugins/s3-answer.d.ts +15 -0
  208. package/dist/plugins/s3-answer.js +5 -0
  209. package/dist/plugins/session-ownership.d.ts +17 -3
  210. package/dist/plugins/session-ownership.js +19 -5
  211. package/dist/plugins/snapshot-bucket-presence.d.ts +39 -4
  212. package/dist/plugins/snapshot-bucket-presence.js +35 -7
  213. package/dist/plugins/sql-errors.d.ts +60 -0
  214. package/dist/plugins/sql-errors.js +64 -1
  215. package/dist/plugins/store-contracts.d.ts +10 -1
  216. package/dist/plugins/store-fault.d.ts +4 -0
  217. package/dist/plugins/store-fault.js +10 -0
  218. package/dist/plugins/tidb-pool.js +8 -1
  219. package/dist/plugins/tidb-session-store.js +2 -2
  220. package/dist/plugins/web-search.d.ts +1 -1
  221. package/dist/plugins/web-search.js +2 -2
  222. package/dist/request-declaration-refusal.d.ts +94 -0
  223. package/dist/request-declaration-refusal.js +78 -0
  224. package/dist/request-image-urls.d.ts +6 -0
  225. package/dist/request-image-urls.js +27 -0
  226. package/dist/request-key-closure.d.ts +5 -0
  227. package/dist/request-key-closure.js +5 -2
  228. package/dist/request-value-closure.d.ts +31 -2
  229. package/dist/request-value-closure.js +7 -1
  230. package/dist/rule-entry-list.d.ts +3 -2
  231. package/dist/rule-entry-list.js +2 -2
  232. package/dist/rules-consent.js +7 -4
  233. package/dist/run-local.d.ts +2 -2
  234. package/dist/runs.js +2 -1
  235. package/dist/runtime-caps-resolver.js +1 -1
  236. package/dist/runtime-governance.d.ts +5 -5
  237. package/dist/sandbox-git-lease.d.ts +49 -0
  238. package/dist/sandbox-git-lease.js +60 -0
  239. package/dist/sandbox-git-plane.d.ts +84 -0
  240. package/dist/sandbox-git-plane.js +105 -0
  241. package/dist/sandbox-pkg-source.d.ts +28 -1
  242. package/dist/sandbox-pkg-source.js +1 -2
  243. package/dist/sealed-key.d.ts +19 -0
  244. package/dist/sealed-key.js +47 -4
  245. package/dist/security.d.ts +16 -4
  246. package/dist/security.js +8 -3
  247. package/dist/server-secret-env.d.ts +6 -0
  248. package/dist/server-secret-env.js +14 -0
  249. package/dist/session-error-wire.d.ts +14 -6
  250. package/dist/session-error-wire.js +2 -1
  251. package/dist/session-incarnation.d.ts +16 -5
  252. package/dist/session-incarnation.js +7 -4
  253. package/dist/session-policy-wire.d.ts +1 -1
  254. package/dist/session-policy-wire.js +2 -2
  255. package/dist/session-row.d.ts +3 -17
  256. package/dist/session-row.js +4 -0
  257. package/dist/session-sync.d.ts +15 -3
  258. package/dist/session-sync.js +5 -2
  259. package/dist/spec-fields.d.ts +43 -13
  260. package/dist/spec-fields.js +33 -12
  261. package/dist/stored-request-prompt-profile-m30.d.ts +49 -0
  262. package/dist/stored-request-prompt-profile-m30.js +25 -0
  263. package/dist/task-a2a.d.ts +52 -81
  264. package/dist/task-a2a.js +219 -89
  265. package/dist/task-mcp.d.ts +7 -15
  266. package/dist/task-mcp.js +16 -51
  267. package/dist/task-settings.d.ts +2 -2
  268. package/dist/tool-approval.d.ts +35 -12
  269. package/dist/tool-approval.js +59 -39
  270. package/dist/tool-rule-names.d.ts +5 -0
  271. package/dist/trace/core-keyset-guard.d.ts +5 -5
  272. package/dist/trace/engine-notice-wire.d.ts +1 -1
  273. package/dist/trace/engine-notice-wire.js +2 -0
  274. package/dist/trace/exit-seat.js +37 -13
  275. package/dist/trace/ledger-sink.d.ts +4 -5
  276. package/dist/trace/ledger-sink.js +3 -7
  277. package/dist/trace/project.d.ts +37 -3
  278. package/dist/trace/project.js +20 -6
  279. package/dist/trace/redact.d.ts +40 -12
  280. package/dist/trace/redact.js +332 -128
  281. package/dist/trace/self-minted-wire.d.ts +641 -0
  282. package/dist/trace/self-minted-wire.js +201 -0
  283. package/dist/trace/wire-projection-faces.d.ts +5 -3
  284. package/dist/trace/wire-projection-faces.js +7 -3
  285. package/dist/url-credential-refusal.d.ts +52 -0
  286. package/dist/url-credential-refusal.js +14 -0
  287. package/dist/url-refusal.d.ts +13 -4
  288. package/dist/url-refusal.js +8 -2
  289. package/dist/web-admin-client/apply-effective.js +0 -1
  290. package/dist/web-admin-client/center-request.d.ts +20 -2
  291. package/dist/web-admin-client/center-request.js +40 -5
  292. package/dist/web-admin-client/http-client.js +6 -6
  293. package/dist/web-admin-client/types.d.ts +5 -5
  294. package/dist/workspace-space.d.ts +27 -0
  295. package/dist/workspace-space.js +26 -0
  296. package/docs/DEVICE-EXECUTOR-PROTOCOL.md +11 -5
  297. package/package.json +4 -3
  298. package/scripts/drain-check-local.mjs +2 -1
  299. package/scripts/drain-check.mysql.sql +3 -1
  300. package/scripts/drain-check.pg.sql +3 -1
  301. package/skills/schedule.md +1 -1
  302. package/wire-changes/server@7.104.0.json +134 -0
  303. package/wire-changes/server@7.105.0.json +53 -0
  304. package/wire-changes/server@7.106.0.json +475 -0
  305. package/wire-changes/server@7.107.0.json +64 -0
  306. package/wire-changes/server@7.108.0.json +153 -0
  307. package/wire-changes/server@7.109.0.json +46 -0
  308. package/wire-changes/server@7.110.0.json +90 -0
  309. package/wire-changes/server@7.111.0.json +86 -0
  310. package/wire-changes/server@7.112.0.json +60 -0
  311. package/wire-changes/server@7.113.0.json +26 -0
  312. package/wire-changes/server@7.114.0.json +26 -0
  313. package/wire-changes/server@7.115.0.json +97 -0
  314. package/wire-changes/server@7.116.0.json +218 -0
  315. package/wire-changes/server@7.116.1.json +26 -0
  316. package/wire-changes/server@7.117.0.json +65 -0
  317. package/wire-changes/server@7.118.0.json +129 -0
  318. package/wire-changes/server@7.119.0.json +65 -0
  319. package/wire-changes/server@7.120.0.json +89 -0
  320. package/wire-changes/server@7.121.0.json +219 -0
  321. package/wire-changes/server@7.122.0.json +54 -0
  322. package/wire-changes/server@7.123.0.json +26 -0
  323. package/wire-changes/server@7.124.0.json +336 -0
  324. package/wire-changes/server@7.124.1.json +26 -0
  325. package/wire-changes/server@7.125.0.json +111 -0
  326. package/wire-changes/server@7.126.0.json +285 -0
  327. package/wire-changes/server@7.127.0.json +77 -0
  328. package/wire-changes/server@7.127.1.json +26 -0
  329. package/wire-changes/server@7.127.2.json +53 -0
  330. package/wire-changes/server@7.128.0.json +26 -0
  331. package/wire-changes/server@7.129.0.json +106 -0
  332. package/wire-changes/server@7.129.1.json +26 -0
  333. package/wire-changes/server@7.130.0.json +26 -0
  334. package/wire-changes/server@7.131.0.json +118 -0
  335. package/wire-changes/server@7.132.0.json +226 -0
  336. package/wire-changes/server@7.133.0.json +1155 -0
  337. package/wire-changes/server@7.134.0.json +107 -0
  338. package/wire-changes/server@7.135.0.json +174 -0
  339. package/wire-changes/server@7.136.0.json +448 -0
  340. package/wire-changes/server@7.137.0.json +825 -0
  341. package/dist/url-credential.d.ts +0 -52
  342. package/dist/url-credential.js +0 -49
@@ -459,6 +459,72 @@ export declare const SELF_MINTED_WIRE: {
459
459
  };
460
460
  };
461
461
  };
462
+ /** 7.137.0:能力位 `credentialPlane.sandboxGit.state`(成员 git 凭据平面开 / 关;判官 `judgeSandboxGitPlane`)。 */
463
+ readonly credentialPlaneSandboxGitState: {
464
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.state";
465
+ readonly members: {
466
+ on: {
467
+ attr: string;
468
+ since: string;
469
+ };
470
+ off: {
471
+ attr: string;
472
+ since: string;
473
+ };
474
+ };
475
+ };
476
+ /** 7.137.0:`credentialPlane.sandboxGit.reason`(`state:"off"` 时,第一个不成立的前提;成员序 = 判序)。 */
477
+ readonly credentialPlaneSandboxGitOffReason: {
478
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.reason";
479
+ readonly members: {
480
+ single_user: {
481
+ attr: string;
482
+ since: string;
483
+ };
484
+ lane_without_boundary: {
485
+ attr: string;
486
+ since: string;
487
+ };
488
+ no_caller_credential: {
489
+ attr: string;
490
+ since: string;
491
+ };
492
+ center_not_https: {
493
+ attr: string;
494
+ since: string;
495
+ };
496
+ secret_seat_unverified: {
497
+ attr: string;
498
+ since: string;
499
+ };
500
+ secret_seat_denied: {
501
+ attr: string;
502
+ since: string;
503
+ };
504
+ pod_patch_reaches_broker: {
505
+ attr: string;
506
+ since: string;
507
+ };
508
+ broker_image_unset: {
509
+ attr: string;
510
+ since: string;
511
+ };
512
+ no_origins: {
513
+ attr: string;
514
+ since: string;
515
+ };
516
+ };
517
+ };
518
+ /** 7.137.0:`credentialPlane.sandboxGit.origins[].reason`(`state:"on"` 时 `delivers:false` 的那一臂)。 */
519
+ readonly credentialPlaneSandboxGitOriginReason: {
520
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.origins[].reason";
521
+ readonly members: {
522
+ insecure_transport: {
523
+ attr: string;
524
+ since: string;
525
+ };
526
+ };
527
+ };
462
528
  /** 7.121.0:`GET /health` 自报位 `auth.kinds[]` 的成员(验过的身份来源闭集;这台部署的装配能回的那几个)。 */
463
529
  readonly healthAuthKind: {
464
530
  readonly at: "GET /health auth.kinds[]";
@@ -684,6 +750,33 @@ export declare const SELF_MINTED_WIRE: {
684
750
  };
685
751
  };
686
752
  };
753
+ /**
754
+ * `inheritEnv` 的三只 400 `request.field_invalid`(值形 / 车道 / 无会话)拒体的 `reason`(体另带 `field: "inheritEnv"`;一种拒因一个词)。词表属主 = `request-value-closure.ts` 的
755
+ * `INHERIT_ENV_REFUSAL_REASONS`(唯一铸点 `inheritEnvFacts`;受理门与 resolveSpec 两腿只经它出机读位);`satisfies Record<InheritEnvRefusalReason, …>`。
756
+ * `unknown_word` = 是字符串但不在受理词表;`not_a_string` = 根本不是字符串;`lane_not_host` = `"all"` 落在非 host 车道;`no_authorizer_session` = `"all"` 而部署不接 authorizer。
757
+ * 422 `request.host_posture_refused` 不在这组(姿态拒,不带 `field` / `reason`)。行为钉:`test/inherit-env-request-key.test.ts`。
758
+ */
759
+ readonly inheritEnvRefusalReason: {
760
+ readonly at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")";
761
+ readonly members: {
762
+ unknown_word: {
763
+ attr: string;
764
+ since: string;
765
+ };
766
+ not_a_string: {
767
+ attr: string;
768
+ since: string;
769
+ };
770
+ lane_not_host: {
771
+ attr: string;
772
+ since: string;
773
+ };
774
+ no_authorizer_session: {
775
+ attr: string;
776
+ since: string;
777
+ };
778
+ };
779
+ };
687
780
  /**
688
781
  * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
689
782
  * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0)。
@@ -772,6 +865,27 @@ export declare const SELF_MINTED_WIRE: {
772
865
  };
773
866
  };
774
867
  };
868
+ /**
869
+ * run 级技能名册 `wiring_manifest.skills[].source` 的闭集 = 部署两处 ∪ `request`(属主 = `capabilities/skills.ts` 的 `RunSkillSource`;唯一写者 =
870
+ * `capabilities/scenarios.ts` 的 `buildRunSkills`)。条目形与场景卡技能清单同一张,来处多一个 `request`(本请求体自带、没被场景同名盖掉的)。
871
+ */
872
+ readonly wiringSkillSource: {
873
+ readonly at: "wiring_manifest skills[].source(run 级技能名册的来处;段只投根腿 / 续跑腿帧,零技能 = [])";
874
+ readonly members: {
875
+ factory: {
876
+ attr: string;
877
+ since: string;
878
+ };
879
+ center: {
880
+ attr: string;
881
+ since: string;
882
+ };
883
+ request: {
884
+ attr: string;
885
+ since: string;
886
+ };
887
+ };
888
+ };
775
889
  /**
776
890
  * [ref](7.133.0):`GET /v1/config/catalog` 行上**对 `effectiveValue` 的判词位**(闭集 `CatalogValueVerdict`,属主 `config-catalog.ts`;行接口经映射型声明,
777
891
  * 每一位只取 `true`)。属性 = 在场律 `present-iff`:只在为真时出键,恒不铸 `false`,缺席 = 没有这件事(老 server 上也缺席 —— 对消费方两者的下一步相同:按值原样渲染)。
@@ -831,6 +945,443 @@ export declare const SELF_MINTED_WIRE: {
831
945
  };
832
946
  };
833
947
  };
948
+ /**
949
+ * 呈卡帧 `approval_request` 的 `card`(= `card_json` 的耐久卡信封)上本版新铸的键:引擎卡词 `approvalCard`。活铸帧的 `card`、落库的卡信封、断连重放帧的 `card` 三面同源同词
950
+ * (帧顶层那一份照旧在,同值)。在场律 `present-iff`:引擎铸了卡词且过了闭集窄读才有,引擎没铸 ⇒ 缺席(不编 `generic`);本版之前落下的行卡上没有 ⇒ 重放照旧不带。
951
+ * 卡信封的其余键不在本表(它们不是本版新上 wire)。
952
+ */
953
+ readonly approvalRequestCardKey: {
954
+ readonly at: "approval_request 帧 card.<键>(活铸帧的 card · 落库的卡信封 card_json · 断连重放帧的 card)";
955
+ readonly members: {
956
+ readonly approvalCard: {
957
+ readonly attr: "present-iff";
958
+ readonly since: "7.136.0";
959
+ };
960
+ };
961
+ };
962
+ /**
963
+ * 停驻技能卡的「批它放行了什么」三位,本版起在运维队列行与订阅流 `pending` 帧上也带(此前只有助手收件箱行与活卡帧带)。三位由一只投影 `skillCardFacts` 投,
964
+ * `satisfies Record<keyof SkillCardFacts, …>`:投影加 / 删一位而本表没跟 ⇒ tsc 红。在场律 `present-iff`:只在这一行有该位时才带键(普通卡三位三面都缺席,缺席不是断言)。
965
+ */
966
+ readonly approvalQueuePendingKey: {
967
+ readonly at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)";
968
+ readonly members: {
969
+ boundGrantDigest: {
970
+ attr: string;
971
+ since: string;
972
+ };
973
+ boundGrants: {
974
+ attr: string;
975
+ since: string;
976
+ };
977
+ classifierNoRuling: {
978
+ attr: string;
979
+ since: string;
980
+ };
981
+ };
982
+ };
983
+ /**
984
+ * `409 resume.constraint_rejected` 拒体上本服务加的键(7.137.0,引擎 7.56.0):续跑的编辑复判只收改写后的那一形时,那一形的入参 `acceptableForm`
985
+ * (引擎 `detail.editRewritten.acceptableForm`,经审批卡 `args` 同一只读法:脱敏 + 字节帽,超帽 ⇒ 缺席)。拒体没有可 `satisfies` 的全集型,行为由对应 CHANGELOG 条的钉证
986
+ * (`test/durable-resume-http.test.ts`)。在场律 `present-iff`。
987
+ */
988
+ readonly constraintRejectedBodyKey: {
989
+ readonly at: "409 resume.constraint_rejected 拒体(<键> → 在场律)";
990
+ readonly members: {
991
+ readonly acceptableForm: {
992
+ readonly attr: "present-iff";
993
+ readonly since: "7.137.0";
994
+ };
995
+ };
996
+ };
997
+ /**
998
+ * 逐端点「应答面 → HTTP 状态」映射里**本版改了状态的面**(形照 `submitIdempotency`:`<端点>#<面>` → 状态;面是调用方能观察到的那一形,不是内部分支名)。
999
+ * `since` 记**这一面以这个状态答**的起始版本;每个成员的旧状态写在 CHANGELOG 对应条里(旧状态的那一形此前没有登记,清单里它们是「本版新上 wire」,不是 changed)。
1000
+ * 同一端点上状态没变的面(如 `/decide` 对同一张卡的 approve 仍 409)不入表。
1001
+ */
1002
+ readonly endpointFaceStatus: {
1003
+ readonly at: "逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面)";
1004
+ readonly members: {
1005
+ readonly "POST /v1/approvals/:sessionId/decide#deny(\u590D\u6D3B\u4E0D\u4E86\u7684\u505C\u9A7B\u884C:\u65E0 agent \u540D / \u65E0\u6839\u4F1A\u8BDD\u951A;\u4F53 { taskId, status: failed, decision: deny })": {
1006
+ readonly attr: 200;
1007
+ readonly since: "7.136.0";
1008
+ };
1009
+ readonly "GET /v1/sessions/:id/sync/manifest#store_connection_fault(\u4F53 state.file_history_unreadable + permanence: transient)": {
1010
+ readonly attr: 503;
1011
+ readonly since: "7.136.0";
1012
+ };
1013
+ readonly "GET /v1/sessions/:id/sync/entries#store_connection_fault(\u5E94\u7B54\u5934\u53D1\u51FA\u4E4B\u524D;\u4F53\u540C\u4E0A)": {
1014
+ readonly attr: 503;
1015
+ readonly since: "7.136.0";
1016
+ };
1017
+ readonly "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(\u4F53\u540C\u4E0A)": {
1018
+ readonly attr: 503;
1019
+ readonly since: "7.136.0";
1020
+ };
1021
+ readonly "GET /v1/sessions/:id/sync/manifest#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB;\u4F53\u540C\u4E0A)": {
1022
+ readonly attr: 503;
1023
+ readonly since: "7.137.0";
1024
+ };
1025
+ readonly "GET /v1/sessions/:id/sync/entries#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB,\u5E94\u7B54\u5934\u53D1\u51FA\u4E4B\u524D;\u4F53\u540C\u4E0A)": {
1026
+ readonly attr: 503;
1027
+ readonly since: "7.137.0";
1028
+ };
1029
+ readonly "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB;\u4F53\u540C\u4E0A)": {
1030
+ readonly attr: 503;
1031
+ readonly since: "7.137.0";
1032
+ };
1033
+ readonly "GET /v1/sessions/:id/sync/manifest#store_deployment_fault(\u7F3A\u8868 / \u6743\u9650\u62D2;\u95E8\u8BFB\u4E0E\u8BFB\u817F\u540C\u4E00\u5F62;\u4F53 state.file_history_unreadable + permanence: terminal)": {
1034
+ readonly attr: 503;
1035
+ readonly since: "7.137.0";
1036
+ };
1037
+ readonly "GET /v1/sessions/:id/sync/entries#store_deployment_fault(\u5E94\u7B54\u5934\u53D1\u51FA\u4E4B\u524D;\u4F53\u540C\u4E0A)": {
1038
+ readonly attr: 503;
1039
+ readonly since: "7.137.0";
1040
+ };
1041
+ readonly "GET /v1/sessions/:id/sync/history/blobs/:hash#store_deployment_fault(\u4F53\u540C\u4E0A)": {
1042
+ readonly attr: 503;
1043
+ readonly since: "7.137.0";
1044
+ };
1045
+ readonly "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;\u5F00\u6D41\u4E4B\u524D;\u4F53 corrupt_session)": {
1046
+ readonly attr: 500;
1047
+ readonly since: "7.136.0";
1048
+ };
1049
+ readonly "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;\u4F53 corrupt_session)": {
1050
+ readonly attr: 500;
1051
+ readonly since: "7.136.0";
1052
+ };
1053
+ readonly "POST /v1/tasks#stored_log_invalid(\u540C\u6B65\u817F;\u6253\u5F00\u5DF2\u5B58\u65E5\u5FD7\u649E\u4E0A\u7ED3\u6784\u574F:\u60AC\u7A7A\u7236 / \u81EA\u6307 / \u6210\u73AF / \u53F6\u5B50\u7F3A\u5E2D;\u96F6\u5DE5\u4F5C\u7684\u62D2;\u4F53 invalid_session)": {
1054
+ readonly attr: 500;
1055
+ readonly since: "7.137.0";
1056
+ };
1057
+ readonly "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(\u4F53 missing_blob)": {
1058
+ readonly attr: 422;
1059
+ readonly since: "7.136.0";
1060
+ };
1061
+ readonly "PATCH /v1/sessions/:id#title_no_visible_character(\u4F53 request.field_invalid)": {
1062
+ readonly attr: 400;
1063
+ readonly since: "7.136.0";
1064
+ };
1065
+ readonly "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A \u4F53\u7684 title;\u4F53 request.field_invalid)": {
1066
+ readonly attr: 400;
1067
+ readonly since: "7.136.0";
1068
+ };
1069
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(\u65B0\u63D0\u4EA4;\u4F53 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": {
1070
+ readonly attr: 400;
1071
+ readonly since: "7.136.0";
1072
+ };
1073
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(\u65B0\u63D0\u4EA4;\u5217\u8868\u4E0D\u662F\u6570\u7EC4 / \u6761\u76EE\u4E0D\u662F\u5BF9\u8C61 / \u952E\u503C\u5224\u4E0D\u51FA\u5F62;\u4F53 request.field_invalid)": {
1074
+ readonly attr: 400;
1075
+ readonly since: "7.136.0";
1076
+ };
1077
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(\u65B0\u63D0\u4EA4;\u8BCD\u8868\u5916\u7684\u952E;\u4F53 request.body_shape + unknownKeys)": {
1078
+ readonly attr: 400;
1079
+ readonly since: "7.136.0";
1080
+ };
1081
+ readonly "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(\u6536\u7F16\u4E4B\u540E\u7684\u65B0\u5C5E\u4E3B;\u672C\u526F\u672C\u4E0A\u4ECD\u6709\u5F15\u64CE\u817F\u5728\u7B49\u7684\u6D3B\u5361,\u51B3\u8BAE\u4EA4\u7ED9\u90A3\u6761\u817F)": {
1082
+ readonly attr: 200;
1083
+ readonly since: "7.136.0";
1084
+ };
1085
+ readonly "GET /v1/tool-approvals/:id#previous_owner_after_adoption(\u6536\u7F16\u4E4B\u540E\u7684\u524D\u5C5E\u4E3B;\u6309\u95EE\u8BFB\u53E3)": {
1086
+ readonly attr: 404;
1087
+ readonly since: "7.136.0";
1088
+ };
1089
+ readonly "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(\u533F\u540D\u6D3B\u5361\u6536\u7F16\u7ED9\u5177\u540D\u4E3B\u4F53\u540E\u65B0\u5C5E\u4E3B\u4EA4\u574F\u89C4\u5219\u6587\u672C;\u4F53 request.body_shape;\u5951\u7EA6\u6210\u6587\u7684\u5224\u636E,\u4ECA\u5929\u7ECF /v1/adoption \u5230\u4E0D\u4E86)": {
1090
+ readonly attr: 400;
1091
+ readonly since: "7.136.0";
1092
+ };
1093
+ readonly "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP \u7684 command / args \u4E0E command hook \u7684 command / args;\u4F53 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream \u5728\u7EC8\u5C40\u5E27\u4E0A\u5E26\u672C\u7801;\u672C\u670D\u52A1\u81EA\u5DF1\u7684\u88C5\u914D\u4E0B\u4E0D\u53EF\u8FBE(\u88C5\u914D\u671F\u5DF2\u5BF9\u300C\u5E97\u5728\u800C\u5C01\u7B7E\u5668\u7F3A\u5E2D\u300D\u62D2\u542F,\u89C1 submit-ctx.ts \u81EA\u8FF0))": {
1094
+ readonly attr: 409;
1095
+ readonly since: "7.136.0";
1096
+ };
1097
+ readonly "ALL authenticated routes#bearer_token_without_scope_claim(\u9274\u6743\u6865\u9A8C\u8BC1\u817F;\u914D\u4E86 service \u51ED\u636E\u6216\u591A\u79DF REQUIRE_PRINCIPAL \u7684\u90E8\u7F72;\u4F53\u901A\u7528 auth.unauthorized)": {
1098
+ readonly attr: 401;
1099
+ readonly since: "7.136.0";
1100
+ };
1101
+ readonly "ALL principal-reading routes#principal_not_a_name(\u4E3B\u4F53\u5934 / SSO \u4EE4\u724C\u7684 sub / \u76F4\u8FDE\u95E8 JWT \u7684 sub \u4E0D\u662F\u4E00\u4F4D\u4E3B\u4F53\u7684\u540D\u5B57:\u7A7A / \u7A7A\u767D / \u5E26\u63A7\u5236\u3001\u884C\u6BB5\u5206\u9694\u6216\u4E0D\u53EF\u89C1\u683C\u5F0F\u5B57\u7B26;\u4F53 principal_not_a_name)": {
1102
+ readonly attr: 400;
1103
+ readonly since: "7.137.0";
1104
+ };
1105
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(\u65B0\u63D0\u4EA4;\u4F53 request.body_shape + unknownKeys [promptProfile])": {
1106
+ readonly attr: 400;
1107
+ readonly since: "7.137.0";
1108
+ };
1109
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(\u65B0\u63D0\u4EA4;\u4F53 request.field_invalid)": {
1110
+ readonly attr: 400;
1111
+ readonly since: "7.137.0";
1112
+ };
1113
+ readonly "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny \u540D\u5185\u5E26 *(`*` / `mcp__git*` / `Bas*`)": {
1114
+ readonly attr: 200;
1115
+ readonly since: "7.137.0";
1116
+ };
1117
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(settings.permissions.deny|ask)": {
1118
+ readonly attr: 200;
1119
+ readonly since: "7.137.0";
1120
+ };
1121
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(excludeTools)": {
1122
+ readonly attr: 200;
1123
+ readonly since: "7.137.0";
1124
+ };
1125
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": {
1126
+ readonly attr: 200;
1127
+ readonly since: "7.137.0";
1128
+ };
1129
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(agents[i].denyTools)": {
1130
+ readonly attr: 200;
1131
+ readonly since: "7.137.0";
1132
+ };
1133
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(\u4F53\u5E26\u7684\u95E8\u8EAB\u4EFD\u4E0D\u662F\u8BE5\u4F1A\u8BDD\u6B64\u523B\u5F85\u51B3\u7684 plan \u95E8;\u4F53 approval_stale + currentPending { checkpointId }?;\u4E0D\u843D\u51B3\u65AD\u3001\u96F6\u72B6\u6001\u6539\u52A8)": {
1134
+ readonly attr: 409;
1135
+ readonly since: "7.137.0";
1136
+ };
1137
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(\u4F53\u5E26\u5F53\u524D\u95E8\u7684\u8EAB\u4EFD;\u53D7\u7406\u5F62\u4E0E\u4E0D\u5E26\u952E\u540C)": {
1138
+ readonly attr: 200;
1139
+ readonly since: "7.137.0";
1140
+ };
1141
+ };
1142
+ };
1143
+ /**
1144
+ * 拒体 / 应答体**句子的形**里本版换了或新增的(`<码>#<座>` → 句型)。句子是展示文本,机读分支按 `errorCode` / `field` / `reason`;本表登记的是「句型换了」,
1145
+ * 给按字面匹配句子的消费方对账(码、状态、体键在这些成员上都没变,变的只有 `message`)。`attr` 写句型的骨架(`<…>` 是占位),旧句型写在 CHANGELOG 对应条里。
1146
+ */
1147
+ readonly refusalSentenceForm: {
1148
+ readonly at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)";
1149
+ readonly members: {
1150
+ readonly "409 decide.row_unrevivable#no_agent_name": {
1151
+ readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
1152
+ readonly since: "7.136.0";
1153
+ };
1154
+ readonly "409 decide.row_unrevivable#no_root_anchor": {
1155
+ readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
1156
+ readonly since: "7.136.0";
1157
+ };
1158
+ readonly "400 request.field_invalid#mcpServers.over_cap(\u53D7\u7406\u53E3 \u00B7 POST /v1/capabilities/mcp/probe \u540C\u53E5)": {
1159
+ readonly attr: "head: <field> has <count> entries — at most <cap> are accepted";
1160
+ readonly since: "7.136.0";
1161
+ };
1162
+ readonly "400 request.field_invalid#a2aPeers.over_cap": {
1163
+ readonly attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)";
1164
+ readonly since: "7.136.0";
1165
+ };
1166
+ readonly "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential": {
1167
+ readonly attr: "<field> (peer <name>) is not a usable declaration — <rule> …";
1168
+ readonly since: "7.136.0";
1169
+ };
1170
+ readonly "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id \u00B7 \u4F1A\u8BDD\u540C\u6B65 2c \u5BFC\u5165\u7684 title)": {
1171
+ readonly attr: "title must contain at least one visible character";
1172
+ readonly since: "7.136.0";
1173
+ };
1174
+ readonly "503 state.file_history_unreadable#store_connection_fault(\u4F1A\u8BDD\u540C\u6B65\u4E09\u6761\u62C9\u53D6\u8BFB\u817F)": {
1175
+ readonly attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later";
1176
+ readonly since: "7.136.0";
1177
+ };
1178
+ readonly "503 state.file_history_unreadable#store_deployment_fault(\u4F1A\u8BDD\u540C\u6B65\u4E09\u6761\u62C9\u53D6\u53E3)": {
1179
+ readonly attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store";
1180
+ readonly since: "7.137.0";
1181
+ };
1182
+ readonly "connect_failed(run \u5931\u8D25\u7EC8\u5C40)#snapshot_bucket_missing(k8s \u8F66\u9053\u8BFB latest \u5F97 404 NoSuchBucket;\u8FDE\u6C99\u7BB1\u5931\u8D25,\u4E00\u53EA pod \u90FD\u4E0D\u5EFA)": {
1183
+ readonly attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …";
1184
+ readonly since: "7.136.0";
1185
+ };
1186
+ readonly "400 request.field_invalid#images[i].url.credential": {
1187
+ readonly attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential";
1188
+ readonly since: "7.136.0";
1189
+ };
1190
+ readonly "400 request.field_invalid#a2aPeers.not_array": {
1191
+ readonly attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations";
1192
+ readonly since: "7.136.0";
1193
+ };
1194
+ readonly "400 request.field_invalid#a2aPeers[i].not_object": {
1195
+ readonly attr: "head: a2aPeers[i] is <shape>, not an A2A peer declaration (an object)";
1196
+ readonly since: "7.136.0";
1197
+ };
1198
+ readonly "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl \u51ED\u636E\u62D2\u4E4B\u5916\u7684\u952E\u503C\u574F\u5F62)": {
1199
+ readonly attr: "<field> (peer <name>) is not a usable declaration — <rule> …";
1200
+ readonly since: "7.136.0";
1201
+ };
1202
+ readonly "400 request.body_shape#a2aPeers[i].unknown_key": {
1203
+ readonly attr: "body: unrecognized key(s) on an A2A peer declaration — refused rather than dropped …; Accepted per entry: <keys>";
1204
+ readonly since: "7.136.0";
1205
+ };
1206
+ readonly "409 conflict.checkpoint_ctx_unsealable#submit(\u63D0\u4EA4\u9762:\u672C\u670D\u52A1\u6CA1\u6709\u4FDD\u7BA1\u5E97)": {
1207
+ readonly attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey";
1208
+ readonly since: "7.136.0";
1209
+ };
1210
+ readonly "409 conflict.checkpoint_ctx_unsealable#resume(\u7EED\u8DD1\u4E0A\u4E0B\u6587\u8BFB\u53E3)": {
1211
+ readonly attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey";
1212
+ readonly since: "7.136.0";
1213
+ };
1214
+ readonly "400 request.field_invalid#promptLean.not_boolean": {
1215
+ readonly attr: "promptLean must be a boolean";
1216
+ readonly since: "7.137.0";
1217
+ };
1218
+ readonly "409 checkpoint.unsupported_version#retired_request_key(\u7EED\u8DD1\u95EE\u70B9:\u5B58\u4F53\u4ECD\u5E26\u9000\u5F79\u8BF7\u6C42\u952E promptProfile)": {
1219
+ readonly attr: "this task was suspended by an earlier server version and its stored request still carries promptProfile, a request key this version no longer reads (…) … submit the work again as a new task with promptLean in place of promptProfile, …";
1220
+ readonly since: "7.137.0";
1221
+ };
1222
+ readonly "400 request.field_invalid#skills[i].mods(\u9876\u5C42\u6280\u80FD\u9879)": {
1223
+ readonly attr: "skill.mods is not a request key — skill registrations are code the deployment mounts, not request data (…)";
1224
+ readonly since: "7.137.0";
1225
+ };
1226
+ readonly "400 request.field_invalid#attachments.not_object": {
1227
+ readonly attr: "attachments must be an object { …, mcpInstructions?, mcpUnavailable? }";
1228
+ readonly since: "7.137.0";
1229
+ };
1230
+ readonly "400 request.field_invalid#attachments.mcpUnavailable.not_boolean": {
1231
+ readonly attr: "attachments.mcpUnavailable must be a boolean";
1232
+ readonly since: "7.137.0";
1233
+ };
1234
+ readonly "\u8BFB\u6210\u7A7A\u7684\u89C4\u5219\u6761\u76EE\u62D2\u53E5#wildcard_all(\u6388\u4E88\u4FA7)": {
1235
+ readonly attr: "`*` grants nothing on an allow list (the entries beside it still apply) — …; on a deny or ask list `*` is every tool";
1236
+ readonly since: "7.137.0";
1237
+ };
1238
+ readonly "\u8BFB\u6210\u7A7A\u7684\u89C4\u5219\u6761\u76EE\u62D2\u53E5#namespace_wildcard(\u6388\u4E88\u4FA7)": {
1239
+ readonly attr: "an allow list reads a `*` only in a protocol name's tool segment — …; on a deny or ask list a `*` in a name is a glob over the whole name (…)";
1240
+ readonly since: "7.137.0";
1241
+ };
1242
+ readonly "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": {
1243
+ readonly attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)";
1244
+ readonly since: "7.137.0";
1245
+ };
1246
+ readonly "400 request.field_invalid#plan_review.checkpointId.too_large": {
1247
+ readonly attr: "checkpointId too large (max <n> chars)";
1248
+ readonly since: "7.137.0";
1249
+ };
1250
+ readonly "400 request.body_shape#/decide.checkpointId(\u843D unsupportedKeys)": {
1251
+ readonly attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId";
1252
+ readonly since: "7.137.0";
1253
+ };
1254
+ };
1255
+ };
1256
+ /**
1257
+ * 回决门族的决断体**受理键**里本版新增的(`<端点>#<键>` → 读法)。受理集的属主是各门的 `*_BODY_DECLARED_KEYS`(双向编译期门咬着各自的体类型);本表只登「本版新上 wire 的那一键」,
1258
+ * 供清单对账。`attr` 写这一键的读法骨架(可选 / 值形 / 直连门上的处置)。
1259
+ */
1260
+ readonly decisionBodyKey: {
1261
+ readonly at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)";
1262
+ readonly members: {
1263
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId": {
1264
+ readonly attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext";
1265
+ readonly since: "7.137.0";
1266
+ };
1267
+ };
1268
+ };
1269
+ /**
1270
+ * `409 approval_stale` 拒体上的键,按出现面登记(`<端点>#<键>` → 在场律)。`currentPending` 的值形是每道门一形(`wire-types.ts` 的 `ApprovalStaleCurrentPending`:
1271
+ * 这道门的决断体回显的那几位);本表只登本版新出现的面(`/decide` 那一形早于本表,不在这里)。
1272
+ */
1273
+ readonly approvalStaleBodyKey: {
1274
+ readonly at: "409 approval_stale 拒体(<端点>#<键> → 在场律)";
1275
+ readonly members: {
1276
+ readonly "POST /v1/assistant/tasks/:id/plan_review#currentPending.checkpointId": {
1277
+ readonly attr: "present-iff";
1278
+ readonly since: "7.137.0";
1279
+ };
1280
+ };
1281
+ };
1282
+ /**
1283
+ * park 账本行(`GET /v1/runs/:id/events` 的 `suspended` / `needs_review`)的 `data` 键集 —— `satisfies Record<keyof ParkEventData, …>`:键集属主 = `trace/project.ts` 的
1284
+ * `ParkEventData`,唯一构造器 `parkEventData`(后台腿 / detach 腿 / 续跑腿再停与重开臂同经它;加一键而本表没跟 ⇒ tsc 红)。在场律:`gate` 恒在场(无因由 ⇒ null),其余 present-iff。
1285
+ * 早于本版的三键只是登记(`gate` 早于本仓 org 树首 tag;`reopened` 自 1.231.0 的重开臂;`toolCallId` 自 7.41.0)。
1286
+ */
1287
+ readonly parkLedgerRowKey: {
1288
+ readonly at: "GET /v1/runs/:id/events 的 suspended / needs_review 账本行 data(<键> → 在场律)";
1289
+ readonly members: {
1290
+ checkpointId: {
1291
+ attr: string;
1292
+ since: string;
1293
+ };
1294
+ gate: {
1295
+ attr: string;
1296
+ since: string;
1297
+ };
1298
+ reopened: {
1299
+ attr: string;
1300
+ since: string;
1301
+ };
1302
+ toolCallId: {
1303
+ attr: string;
1304
+ since: string;
1305
+ };
1306
+ };
1307
+ };
1308
+ /**
1309
+ * 直连门决断证明的 HMAC 信封**扩展键闭集**(第 6 位扩展对象的键;字典序 = JSON 键序;在场才追加,缺席 ⇒ 字节逐字不变)。`satisfies Record<ApprovalEnvelopeExtKey, …>`:
1310
+ * 闭集属主 = `approval-hmac.ts` 的 `APPROVAL_ENVELOPE_EXT_KEYS`(加一个词而本表没跟 ⇒ tsc 红)。跨仓签名器照这张闭集实现,所以它是 wire。`attr` = 用它的那道门。
1311
+ */
1312
+ readonly approvalEnvelopeExtKey: {
1313
+ readonly at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)";
1314
+ readonly members: {
1315
+ answer: {
1316
+ attr: string;
1317
+ since: string;
1318
+ };
1319
+ checkpointId: {
1320
+ attr: string;
1321
+ since: string;
1322
+ };
1323
+ permissionModeAfter: {
1324
+ attr: string;
1325
+ since: string;
1326
+ };
1327
+ };
1328
+ };
1329
+ /**
1330
+ * 文件历史店的故障答里 `permanence`(店对这次故障的重试类判断,体键,店没判则缺席;词表属主 = 引擎的 `GovernanceRetryClass` 两词),出现在 `422 adopt_failed` /
1331
+ * `restore_failed` 等店答与 `503 state.file_history_unreadable` 体上。成员 = 「哪一类故障让店带上哪个词」,每一类自它进 wire 的那一版起一行:
1332
+ * · `transient` —— 连接类故障(库断连等),7.136.0 起(成员名就是词本身,已发清单按它读,不改名);
1333
+ * · `terminal#deployment` —— 部署错配类(缺表 PG `42P01` / MySQL 协议 `1146`、权限拒 PG `42501` / MySQL 协议 `1142`;判官 `storeFaultClassOf` 的 `deployment` 词),7.137.0 起;
1334
+ * 此前这两形不判、体里没有 `permanence`。
1335
+ * 会话同步三条拉取口的 `503 state.file_history_unreadable` 对这一类同样带 `terminal`(那一面此前是 500,状态码登记在 `endpointFaceStatus` 的 `store_deployment_fault` 三行)。
1336
+ * 永久码带的 `terminal`(7.135.0 起,`blob_too_large_for_sql`)不在本表:它随那只码登记在附录 A。在场律 `present-iff`:店判了才带,没判缺席。
1337
+ */
1338
+ readonly storeFaultPermanence: {
1339
+ readonly at: "文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable)";
1340
+ readonly members: {
1341
+ readonly transient: {
1342
+ readonly attr: "present-iff";
1343
+ readonly since: "7.136.0";
1344
+ };
1345
+ readonly "terminal#deployment": {
1346
+ readonly attr: "present-iff";
1347
+ readonly since: "7.137.0";
1348
+ };
1349
+ };
1350
+ };
1351
+ /**
1352
+ * `GET /v1/config/catalog` 的 `rows[]` 里**本版新增的行**(成员 = 行名,属性 = 行的域)。目录行集本身是 `config-catalog.ts` 的 `CONFIG_CATALOG`,不在本表整份登记 ——
1353
+ * 本表只登「这一版新上 wire 的行」;已有行的字面(`semantics` / `derivedDefaultNote`)改动登在 `wireValueRule`。钉 `test/wire-changes-server.test.ts` ⑥:成员必须是目录里的行、域一致。
1354
+ */
1355
+ readonly configCatalogRow: {
1356
+ readonly at: "GET /v1/config/catalog rows[](<行名> → 域;只登本版新增的行)";
1357
+ readonly members: {
1358
+ readonly SEALED_KEY_DIR: {
1359
+ readonly attr: "store";
1360
+ readonly since: "7.136.0";
1361
+ };
1362
+ };
1363
+ };
1364
+ /**
1365
+ * 设备 WS 协议的修订号(成员 = 修订号;能力位 `deviceExecutor.protocolVersion` 报最高那一只,challenge 帧同值)。`attr` = 那一修订号加进 executor → server 结局码闭集的词
1366
+ * (修订号 1 = 首版的基集 `base`,词集见随包 `docs/DEVICE-EXECUTOR-PROTOCOL.md` §2.1);executor 声明哪个修订号就只发到那一行为止的词。
1367
+ */
1368
+ readonly deviceProtocolRevision: {
1369
+ readonly at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)";
1370
+ readonly members: {
1371
+ 1: {
1372
+ attr: string;
1373
+ since: string;
1374
+ };
1375
+ 2: {
1376
+ attr: string;
1377
+ since: string;
1378
+ };
1379
+ 3: {
1380
+ attr: string;
1381
+ since: string;
1382
+ };
1383
+ };
1384
+ };
834
1385
  /** 本仓在出口对 core 值做的变换(值变、键不变)。 */
835
1386
  readonly wireValueRule: {
836
1387
  readonly at: "出口值变换(<端点>#<键> → 变换)";
@@ -897,6 +1448,96 @@ export declare const SELF_MINTED_WIRE: {
897
1448
  readonly attr: "durableMediaCardKeyDropped";
898
1449
  readonly since: "7.127.2";
899
1450
  };
1451
+ /**
1452
+ * 7.136.0:助手收件箱行的 `objective` 值语义换了(键名与可空性不变):此前 = 停驻上下文里的目标原文(不截断、不脱敏),本版起 = 这道门所属 run 的目标预览
1453
+ * (run 行的 `objectivePreview` 列,写入时已脱敏、约 120 字符;与 tasks 视图读同一列)。
1454
+ */
1455
+ readonly "GET /v1/assistant/inbox#objective": {
1456
+ readonly attr: "runRowObjectivePreview";
1457
+ readonly since: "7.136.0";
1458
+ };
1459
+ /**
1460
+ * 7.136.0:`elicitation_complete.action` 的取词律 —— 没人应答的释放(答题窗到期 · run 中止 · 腿退出时仍挂着)一律放 `cancel`,`decline` 只留给「拒」;
1461
+ * 此前答题窗到期那一帧放 `decline`。词表(accept / decline / cancel)与帧形不变,变的是到期那一帧的值。
1462
+ */
1463
+ readonly "SSE elicitation_complete#action(\u6CA1\u4EBA\u5E94\u7B54\u7684\u91CA\u653E)": {
1464
+ readonly attr: "cancel-not-decline";
1465
+ readonly since: "7.136.0";
1466
+ };
1467
+ /**
1468
+ * 7.136.0:`GET /v1/config/catalog` 已有行的字面(`semantics` 说明句 / `derivedDefaultNote` 缺席说明;键与行集不变,只是字面换了或新增):
1469
+ * `MCP_ELICITATION_*` 四行的缺席出厂窗来源词由「core 出厂窗」改成「本服务出厂窗(DEFAULT_ELICITATION_THROTTLE)」;两条 `ANTHROPIC_*` 凭据行改述「只发某一种头、互斥、同设拒启」;
1470
+ * `WORKSPACE_SNAPSHOT_BUCKET` 补上起服核桶与运行期读 `latest` 的处置;`WORKSPACE_SNAPSHOT_PREFIX` 改述多段路径与拒启条件并新增缺席说明。
1471
+ * 成员写成 `GET /v1/config/catalog#rows[<行名>].<semantics|derivedDefaultNote>`,行名与字段由 `test/wire-changes-server.test.ts` ⑥ 对着 `CONFIG_CATALOG` 核。
1472
+ */
1473
+ readonly "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_CONCURRENT].derivedDefaultNote": {
1474
+ readonly attr: "default-window-source:server";
1475
+ readonly since: "7.136.0";
1476
+ };
1477
+ readonly "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_TOTAL].derivedDefaultNote": {
1478
+ readonly attr: "default-window-source:server";
1479
+ readonly since: "7.136.0";
1480
+ };
1481
+ readonly "GET /v1/config/catalog#rows[MCP_ELICITATION_MIN_INTERVAL_MS].derivedDefaultNote": {
1482
+ readonly attr: "default-window-source:server";
1483
+ readonly since: "7.136.0";
1484
+ };
1485
+ readonly "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote": {
1486
+ readonly attr: "default-window-source:server";
1487
+ readonly since: "7.136.0";
1488
+ };
1489
+ readonly "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics": {
1490
+ readonly attr: "x-api-key-only;mutually-exclusive;both-set-refuses-boot";
1491
+ readonly since: "7.136.0";
1492
+ };
1493
+ readonly "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics": {
1494
+ readonly attr: "bearer-only;mutually-exclusive;both-set-refuses-boot";
1495
+ readonly since: "7.136.0";
1496
+ };
1497
+ readonly "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": {
1498
+ readonly attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run";
1499
+ readonly since: "7.136.0";
1500
+ };
1501
+ readonly "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": {
1502
+ readonly attr: "multi-segment-prefix;bad-segment-refuses-boot";
1503
+ readonly since: "7.136.0";
1504
+ };
1505
+ readonly "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": {
1506
+ readonly attr: "absent=>kata";
1507
+ readonly since: "7.136.0";
1508
+ };
1509
+ readonly "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": {
1510
+ readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot";
1511
+ readonly since: "7.137.0";
1512
+ };
1513
+ /**
1514
+ * 7.137.0:MCP 远端失败句在面板与重拨回执上的出口读法(`http/mcp-remote-text.ts` 一只):按引擎铸点的记号 `[redacted]` 切开、只把引擎没抹的段过本仓 `redactSecrets`、截 200;
1515
+ * 此前整句过一遍 —— 引擎回显体里凭据名字段上的 `[redacted]` 被改写成 `«redacted»`。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥。
1516
+ */
1517
+ readonly "GET /v1/sessions/:id/mcp#servers[].error": {
1518
+ readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
1519
+ readonly since: "7.137.0";
1520
+ };
1521
+ readonly "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": {
1522
+ readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
1523
+ readonly since: "7.137.0";
1524
+ };
1525
+ /**
1526
+ * 7.137.0:`GET /v1/config/catalog` 已有行的字面(`semantics` 说明句 / `derivedDefaultNote` 缺席说明;键与行集不变,写法同上一段 7.136.0 的行):提交面的带图预检退役后,
1527
+ * `MODEL_VISION` 的两句与 `MODEL_CHEAP_VISION` 的一句改指会话流的 `model.capability_downgraded`(引擎在替换图片的那一刻铸;此前写「提交时计数并告警 / 让预检出信号 / 让预检真拦」)。
1528
+ */
1529
+ readonly "GET /v1/config/catalog#rows[MODEL_VISION].semantics": {
1530
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1531
+ readonly since: "7.137.0";
1532
+ };
1533
+ readonly "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": {
1534
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1535
+ readonly since: "7.137.0";
1536
+ };
1537
+ readonly "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": {
1538
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1539
+ readonly since: "7.137.0";
1540
+ };
900
1541
  };
901
1542
  };
902
1543
  };