@sema-agent/server 7.135.0 → 7.137.0

package/dist/trace/self-minted-wire.js

@@ -148,6 +148,33 @@ export const SELF_MINTED_WIRE = {
             title: { attr: "-", since: "7.133.0" },
         },
     },
+    credentialPlaneSandboxGitState: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.state",
+        members: {
+            on: { attr: "-", since: "7.137.0" },
+            off: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOffReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.reason",
+        members: {
+            single_user: { attr: "-", since: "7.137.0" },
+            lane_without_boundary: { attr: "-", since: "7.137.0" },
+            no_caller_credential: { attr: "-", since: "7.137.0" },
+            center_not_https: { attr: "-", since: "7.137.0" },
+            secret_seat_unverified: { attr: "-", since: "7.137.0" },
+            secret_seat_denied: { attr: "-", since: "7.137.0" },
+            pod_patch_reaches_broker: { attr: "-", since: "7.137.0" },
+            broker_image_unset: { attr: "-", since: "7.137.0" },
+            no_origins: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOriginReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.origins[].reason",
+        members: {
+            insecure_transport: { attr: "-", since: "7.137.0" },
+        },
+    },
     healthAuthKind: {
         at: "GET /health auth.kinds[]",
         members: {
@@ -235,6 +262,15 @@ export const SELF_MINTED_WIRE = {
             not_object: { attr: "-", since: "7.133.0" },
         },
     },
+    inheritEnvRefusalReason: {
+        at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")",
+        members: {
+            unknown_word: { attr: "-", since: "7.137.0" },
+            not_a_string: { attr: "-", since: "7.137.0" },
+            lane_not_host: { attr: "-", since: "7.137.0" },
+            no_authorizer_session: { attr: "-", since: "7.137.0" },
+        },
+    },
     submitIdempotency: {
         at: "提交幂等(<端点>#<面> → 应答状态)",
         members: {
@@ -268,6 +304,14 @@ export const SELF_MINTED_WIRE = {
             center: { attr: "-", since: "7.135.0" },
         },
     },
+    wiringSkillSource: {
+        at: "wiring_manifest skills[].source(run 级技能名册的来处;段只投根腿 / 续跑腿帧,零技能 = [])",
+        members: {
+            factory: { attr: "-", since: "7.137.0" },
+            center: { attr: "-", since: "7.137.0" },
+            request: { attr: "-", since: "7.137.0" },
+        },
+    },
     configCatalogValueVerdict: {
         at: "GET /v1/config/catalog rows[] 的判词位(<键> → 在场律)",
         members: {
@@ -287,6 +331,146 @@ export const SELF_MINTED_WIRE = {
             aliases: { attr: "always", since: "7.135.0" },
         },
     },
+    approvalRequestCardKey: {
+        at: "approval_request 帧 card.<键>(活铸帧的 card · 落库的卡信封 card_json · 断连重放帧的 card)",
+        members: {
+            approvalCard: { attr: "present-iff", since: "7.136.0" },
+        },
+    },
+    approvalQueuePendingKey: {
+        at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)",
+        members: {
+            boundGrantDigest: { attr: "present-iff", since: "7.136.0" },
+            boundGrants: { attr: "present-iff", since: "7.136.0" },
+            classifierNoRuling: { attr: "present-iff", since: "7.136.0" },
+        },
+    },
+    constraintRejectedBodyKey: {
+        at: "409 resume.constraint_rejected 拒体(<键> → 在场律)",
+        members: {
+            acceptableForm: { attr: "present-iff", since: "7.137.0" },
+        },
+    },
+    endpointFaceStatus: {
+        at: "逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面)",
+        members: {
+            "POST /v1/approvals/:sessionId/decide#deny(复活不了的停驻行:无 agent 名 / 无根会话锚;体 { taskId, status: failed, decision: deny })": { attr: 200, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)": { attr: 503, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)": { attr: 503, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)": { attr: 503, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_connection_fault_session_gate(会话门那一读,应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_deployment_fault(缺表 / 权限拒;门读与读腿同一形;体 state.file_history_unreadable + permanence: terminal)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_deployment_fault(应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_deployment_fault(体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)": { attr: 500, since: "7.136.0" },
+            "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)": { attr: 500, since: "7.136.0" },
+            "POST /v1/tasks#stored_log_invalid(同步腿;打开已存日志撞上结构坏:悬空父 / 自指 / 成环 / 叶子缺席;零工作的拒;体 invalid_session)": { attr: 500, since: "7.137.0" },
+            "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)": { attr: 422, since: "7.136.0" },
+            "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)": { attr: 400, since: "7.136.0" },
+            "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": { attr: 400, since: "7.136.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)": { attr: 400, since: "7.136.0" },
+            "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)": { attr: 200, since: "7.136.0" },
+            "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)": { attr: 404, since: "7.136.0" },
+            "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)": { attr: 400, since: "7.136.0" },
+            "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))": { attr: 409, since: "7.136.0" },
+            "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)": { attr: 401, since: "7.136.0" },
+            "ALL principal-reading routes#principal_not_a_name(主体头 / SSO 令牌的 sub / 直连门 JWT 的 sub 不是一位主体的名字:空 / 空白 / 带控制、行段分隔或不可见格式字符;体 principal_not_a_name)": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(新提交;体 request.body_shape + unknownKeys [promptProfile])": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
+            "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny 名内带 *(`*` / `mcp__git*` / `Bas*`)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(settings.permissions.deny|ask)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(体带的门身份不是该会话此刻待决的 plan 门;体 approval_stale + currentPending { checkpointId }?;不落决断、零状态改动)": { attr: 409, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
+        },
+    },
+    refusalSentenceForm: {
+        at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
+        members: {
+            "409 decide.row_unrevivable#no_agent_name": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
+            "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
+            "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
+            "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
+            "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
+            "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)": { attr: "title must contain at least one visible character", since: "7.136.0" },
+            "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)": { attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", since: "7.136.0" },
+            "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
+            "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
+            "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
+            "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
+            "400 request.field_invalid#a2aPeers[i].not_object": { attr: "head: a2aPeers[i] is <shape>, not an A2A peer declaration (an object)", since: "7.136.0" },
+            "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
+            "400 request.body_shape#a2aPeers[i].unknown_key": { attr: "body: unrecognized key(s) on an A2A peer declaration — refused rather than dropped …; Accepted per entry: <keys>", since: "7.136.0" },
+            "409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
+            "409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
+            "400 request.field_invalid#promptLean.not_boolean": { attr: "promptLean must be a boolean", since: "7.137.0" },
+            "409 checkpoint.unsupported_version#retired_request_key(续跑问点:存体仍带退役请求键 promptProfile)": { attr: "this task was suspended by an earlier server version and its stored request still carries promptProfile, a request key this version no longer reads (…) … submit the work again as a new task with promptLean in place of promptProfile, …", since: "7.137.0" },
+            "400 request.field_invalid#skills[i].mods(顶层技能项)": { attr: "skill.mods is not a request key — skill registrations are code the deployment mounts, not request data (…)", since: "7.137.0" },
+            "400 request.field_invalid#attachments.not_object": { attr: "attachments must be an object { …, mcpInstructions?, mcpUnavailable? }", since: "7.137.0" },
+            "400 request.field_invalid#attachments.mcpUnavailable.not_boolean": { attr: "attachments.mcpUnavailable must be a boolean", since: "7.137.0" },
+            "读成空的规则条目拒句#wildcard_all(授予侧)": { attr: "`*` grants nothing on an allow list (the entries beside it still apply) — …; on a deny or ask list `*` is every tool", since: "7.137.0" },
+            "读成空的规则条目拒句#namespace_wildcard(授予侧)": { attr: "an allow list reads a `*` only in a protocol name's tool segment — …; on a deny or ask list a `*` in a name is a glob over the whole name (…)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": { attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.too_large": { attr: "checkpointId too large (max <n> chars)", since: "7.137.0" },
+            "400 request.body_shape#/decide.checkpointId(落 unsupportedKeys)": { attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId", since: "7.137.0" },
+        },
+    },
+    decisionBodyKey: {
+        at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
+        },
+    },
+    approvalStaleBodyKey: {
+        at: "409 approval_stale 拒体(<端点>#<键> → 在场律)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#currentPending.checkpointId": { attr: "present-iff", since: "7.137.0" },
+        },
+    },
+    parkLedgerRowKey: {
+        at: "GET /v1/runs/:id/events 的 suspended / needs_review 账本行 data(<键> → 在场律)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.137.0" },
+            gate: { attr: "always", since: "1.214.2" },
+            reopened: { attr: "present-iff", since: "1.231.0" },
+            toolCallId: { attr: "present-iff", since: "7.41.0" },
+        },
+    },
+    approvalEnvelopeExtKey: {
+        at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)",
+        members: {
+            answer: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.87.0" },
+            checkpointId: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.137.0" },
+            permissionModeAfter: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.87.0" },
+        },
+    },
+    storeFaultPermanence: {
+        at: "文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable)",
+        members: {
+            transient: { attr: "present-iff", since: "7.136.0" },
+            "terminal#deployment": { attr: "present-iff", since: "7.137.0" },
+        },
+    },
+    configCatalogRow: {
+        at: "GET /v1/config/catalog rows[](<行名> → 域;只登本版新增的行)",
+        members: {
+            SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
+        },
+    },
+    deviceProtocolRevision: {
+        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)",
+        members: {
+            1: { attr: "base", since: "7.51.0" },
+            2: { attr: "+liveness_no_output", since: "7.133.0" },
+            3: { attr: "+name_too_long", since: "7.137.0" },
+        },
+    },
     wireValueRule: {
         at: "出口值变换(<端点>#<键> → 变换)",
         members: {
@@ -298,6 +482,23 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/runs/:id/events#tool_end.output[](媒体块)": { attr: "durableMediaDescriptor+totalChars", since: "7.127.0" },
             "SSE tool_end#structured.file.base64(媒体卡)": { attr: "verbatim-bytes;backlog>64MiB⇒key-dropped", since: "7.127.2" },
             "GET /v1/runs/:id/events#tool_end.structured.file.base64(媒体卡)": { attr: "durableMediaCardKeyDropped", since: "7.127.2" },
+            "GET /v1/assistant/inbox#objective": { attr: "runRowObjectivePreview", since: "7.136.0" },
+            "SSE elicitation_complete#action(没人应答的释放)": { attr: "cancel-not-decline", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_CONCURRENT].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[MCP_ELICITATION_MAX_TOTAL].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[MCP_ELICITATION_MIN_INTERVAL_MS].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics": { attr: "x-api-key-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics": { attr: "bearer-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
+            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
         },
     },
 };

package/dist/trace/wire-projection-faces.d.ts

@@ -129,13 +129,13 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly tool_start: {
         readonly projector: "toolStartEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["requestedBy"];
         readonly minted: readonly [];
     };
     readonly tool_end: {
         readonly projector: "toolEndEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["requestedBy", "answeredBy"];
         readonly minted: readonly [];
     };
     readonly tool_progress: {
@@ -226,9 +226,10 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly wiring_manifest_tenant: {
         readonly projector: "wiringManifestEventData";
         readonly coreType: `WiringManifest & ${string}`;
-        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"];
+        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly ["instructions"];
+        readonly mintedConditional: readonly ["skills"];
     };
     readonly wiring_manifest_operator: {
         readonly projector: "wiringManifestOperatorEventData";
@@ -236,6 +237,7 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly string[];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly string[];
+        readonly mintedConditional: readonly string[];
     };
     readonly engine_notice: {
         readonly projector: "engineNoticeEventData";

package/dist/trace/wire-projection-faces.js

@@ -26,8 +26,8 @@ function withoutSections(all, drop) {
 export const WIRE_PROJECTION_FACES = {
     task_progress: { projector: "taskProgressEventData", coreType: arm("task_progress"), excluded: [], minted: [] },
     task_started: { projector: "taskStartedEventData", coreType: arm("task_started"), excluded: [], minted: [] },
-    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: [], minted: [] },
-    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: [], minted: [] },
+    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: ["requestedBy"], minted: [] },
+    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: ["requestedBy", "answeredBy"], minted: [] },
     tool_progress: { projector: "toolProgressEventData", coreType: arm("tool_progress"), excluded: [], minted: [] },
     tool_disclosure: { projector: "toolDisclosureEventData", coreType: arm("tool_disclosure"), excluded: [], minted: [] },
     tool_roster_delta: { projector: "toolRosterDeltaEventData", coreType: arm("tool_roster_delta"), excluded: [], minted: [] },
@@ -51,9 +51,10 @@ export const WIRE_PROJECTION_FACES = {
     wiring_manifest_tenant: {
         projector: "wiringManifestEventData",
         coreType: `WiringManifest & ${arm("wiring_manifest")}`,
-        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"],
+        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"],
         unwrapped: ["manifest"],
         minted: ["instructions"],
+        mintedConditional: ["skills"],
     },
     wiring_manifest_operator: {
         projector: "wiringManifestOperatorEventData",
@@ -65,6 +66,9 @@ export const WIRE_PROJECTION_FACES = {
         get minted() {
             return WIRE_PROJECTION_FACES.wiring_manifest_tenant.minted;
         },
+        get mintedConditional() {
+            return WIRE_PROJECTION_FACES.wiring_manifest_tenant.mintedConditional;
+        },
     },
     engine_notice: { projector: "engineNoticeEventData", coreType: "EngineNotice", excluded: [], minted: ["ts"] },
     memory_import_report: { projector: "buildImportReportWire", coreType: "MemoryImportReport", excluded: [], minted: [] },

package/dist/url-credential-refusal.d.ts

@@ -0,0 +1,52 @@
+/**
+ * **请求面「URL 里带凭据」座位的拒体铸点**([ref] / [ref];判官本身在契约包)。
+ *
+ * ## 谁判、谁铸
+ * 「这个 URL 里带着凭据吗」的**判官**(`findUrlCredential` / `findUrlUserinfo` / 规则句 `urlCredentialRule` / 拒因词 `URL_CREDENTIAL_REASONS` / 凭据名表 `CREDENTIAL_PARAM_NAMES`)
+ * 住 `@sema-agent/settings-schema` 包根(14.5.0 起;规则、拒因词与规则句由本仓上移时逐字搬走,本仓零副本)。规则一条:URL 里的凭据 = 日志脱敏器已经在用的那个定义 ——
+ * userinfo(只有用户名也算),或 query / fragment 里名字整名在凭据名表上的参数(名字按收方的读法读:`URLSearchParams` 解一次码,ASCII 大小写不敏感);答首个命中,值从不进答案。
+ * 契约包只判「有没有」:**拒体的形**(HTTP 码、字段坐标、出路句)是座位自己的铸点 —— 本模块就是这一处,下面的导出之外没有第二处。
+ *
+ * ## 座位(同读包根的判官;座位只决定读哪个值、坐标怎么写、凭据改走哪个已封签的位)
+ *  · 请求面 MCP `transport.url`(`task-mcp.ts` 条目判官表):读器只判 `http(s)://` 前缀,解析不了的 url 由拨号期失败答(fetch 对带 userinfo 的 URL 本就构造即抛);
+ *  · 请求面 A2A 对端 `url` / `cardUrl`(`task-a2a.ts` 的条目判官表 `assertRequestA2aEntries`,fresh 腿):`url` / `cardUrl` 先判是 http(s) 串、再问判官;超过 32 条的列表整份 400(判官看过每一条,或这份体不收);
+ *  · 请求面图片 `images[i].url`(`request-image-urls.ts` 的 `assertRequestImageUrls`,fresh 腿):`{ url }` 臂的串值;没有封签的头位,出路是图片字节走内联 `{ data, mimeType }`;
+ *  · 请求面 http 钩子 `url`(`hooks/hook-runner.ts` 的 `hooksUrlCredentialIssue`,`admission.ts` 的 settings 子树门):按配置序扫读者交回的配置;
+ *  · 请求面搜索后端 `endpoint`(`plugins/web-search.ts` 的 `judgeFreshRequestWebSearch`,fresh 提交门):载体之间有差 —— 部署 env 与续跑重放读法只因 userinfo 拒(`findUrlUserinfo`),凭据名参数只在 fresh 门拒;
+ *  · `SANDBOX_PKG_SOURCE=custom` 的六只地址(`sandbox-pkg-source.ts` 唯一读口):不是层级式 http(s) / 含反斜杠 ⇒ 起服拒(读者是包管理器,不是 WHATWG);拒句走 `url-refusal.ts` 的另一只铸点(值只回显 origin)。
+ * 请求面五类座位的拒是同一个形:`400 request.field_invalid` + 体顶层 `field`(体内全坐标)/ `reason`(判官的拒因闭集两词),机读位、原因句骨架与整句只在本模块的铸点
+ * ({@link urlCredentialFacts} / {@link urlCredentialRefusalReason} / {@link buildRequestUrlCredentialRefusal})。
+ *
+ * ## 为什么拒、而不是封或剥
+ * 条目有凭据座位的地方(MCP 的 `transport.headers` 是停驻封签位之一),凭据只走那个座:URL 照原样进停驻上下文、日志与读面,封签闭集刻意不收 URL 一类自由文本。
+ * 剥掉 / 改写 = 交引擎的不是申报的那一份;半封一只 URL = 封签规则多一种半值封法。受理口拒,拒句点名座位。
+ */
+import { type UrlCredential, type UrlCredentialReason } from "@sema-agent/settings-schema";
+/** 拒体上的机读位(加性键:直接当 `request.field_invalid` 的附加键用)。 */
+export type UrlCredentialFacts = {
+    readonly field: string;
+    readonly reason: UrlCredentialReason;
+};
+/** 机读位的唯一铸点:`field` 是座位给的体内全坐标,`reason` 是判官的拒因词(不另造)。 */
+export declare function urlCredentialFacts(field: string, credential: UrlCredential): UrlCredentialFacts;
+/**
+ * 出路句(停驻封签的位是请求头):凭据改写进这一条的 `headers`(停驻任务的续跑上下文里只以封签存在)。MCP `transport.headers` · A2A 对端 `headers` ·
+ * http 钩子条目 `headers` 三座同一句骨架,`place` 是那一条的 `headers` 在请求体里的坐标。
+ */
+export declare function urlCredentialHeaderExit(place: string): string;
+/**
+ * 原因句骨架(各座同一句,值不回显):规则句 + 「URL 原样存」的事实 + 出路。`exit` 是座位给的出路句(`urlCredentialHeaderExit` 或座位自己的)。
+ * 为什么说「原样存」:封签闭集刻意不收 URL 一类自由文本,所以 URL 照原样进停驻上下文、日志与读面 —— 凭据只许走为它设的座。
+ */
+export declare function urlCredentialRefusalReason(credential: UrlCredential, exit: string): string;
+/** 一处请求面拒的整句 + 机读位({@link buildRequestUrlCredentialRefusal} 的产物)。 */
+export interface UrlCredentialRefusal {
+    readonly message: string;
+    readonly facts: UrlCredentialFacts;
+}
+/**
+ * 请求面 URL 座位的拒(整句 + 机读位),`<field>[ (<subject>)] <原因句>`。`subject` 是座位给的条目指认(MCP 的 server 名 / A2A 的 peer 名;坐标本身唯一的座位不带)。
+ * MCP 与 A2A 两座的整句要接条目判官表的统一句尾(`request-declaration-refusal.ts`),所以它们取 {@link urlCredentialRefusalReason} + {@link urlCredentialFacts},另几座(http 钩子 / 搜索后端 / 图片)走这一只。
+ */
+export declare function buildRequestUrlCredentialRefusal(field: string, credential: UrlCredential, exit: string, subject?: string): UrlCredentialRefusal;
+//# sourceMappingURL=url-credential-refusal.d.ts.map

package/dist/url-credential-refusal.js

@@ -0,0 +1,14 @@
+import { urlCredentialRule } from "@sema-agent/settings-schema";
+export function urlCredentialFacts(field, credential) {
+    return { field, reason: credential.reason };
+}
+export function urlCredentialHeaderExit(place) {
+    return `${place} is stored sealed: send the credential as a header in ${place} (for example "Authorization": "Bearer …")`;
+}
+export function urlCredentialRefusalReason(credential, exit) {
+    return `${urlCredentialRule(credential)} — the URL is kept as written (a parked task's resume context, logs), while ${exit}`;
+}
+export function buildRequestUrlCredentialRefusal(field, credential, exit, subject) {
+    return { message: `${field}${subject === undefined ? "" : ` (${subject})`} ${urlCredentialRefusalReason(credential, exit)}`, facts: urlCredentialFacts(field, credential) };
+}
+//# sourceMappingURL=url-credential-refusal.js.map

package/dist/url-refusal.d.ts

@@ -14,11 +14,10 @@
  * ## 读者
  * 中心基址三席 + 公告地址 + 请求期 `centerFetch`(`web-admin-client/center-request.ts` `pathBaseUrlRefusal`:禁 userinfo / query / fragment)·
  * 续签 issuer(只问形)· 模型路由三键(`model-route-url.ts`:禁 userinfo / fragment,query 照收)· `MEMORY_EMBEDDER_ENDPOINT` 与
- * `A2A_SERVE_URL`(禁 userinfo)· `SANDBOX_PKG_SOURCE=custom` 六只地址(形 + 带凭据,后者的判官是 `url-credential.ts`,拒句经 {@link buildUrlCredentialRefusal})。
+ * `A2A_SERVE_URL`(禁 userinfo)· `SANDBOX_PKG_SOURCE=custom` 六只地址(形 + 带凭据,后者的判官是契约包根的 `findUrlCredential`,拒句经 {@link buildUrlCredentialRefusal})。
  * 「scheme 只有判官与展示铸点读」由 `test/config-url-display-safe.test.ts` 的读者普查门钉住。
  */
-import { type HttpUrlFlaw } from "@sema-agent/settings-schema";
-import { type UrlCredential } from "./url-credential.js";
+import { type HttpUrlFlaw, type UrlCredential } from "@sema-agent/settings-schema";
 /**
  * 拒句里值的样子(纯函数):合格的 http(s) 形 ⇒ 只到 origin(`scheme://host[:port]`,过展示铸点),origin 之后还有东西(userinfo /
  * 路径 / query / fragment)⇒ 接一枚 `/…`;其余(不透明 / 不可解析 / 层级式非 http(s))⇒ 展示铸点的占位 `«redacted:url»` ——
@@ -29,11 +28,21 @@ import { type UrlCredential } from "./url-credential.js";
  * 这几处不赌形状律的覆盖面:座位名 + 规则词已经说清了哪一席错在哪,值只需要认得出是哪一台主机。
  */
 export declare function buildRefusalShownUrl(raw: string): string;
+/**
+ * **自由文本里每一条嵌着的 http(s) URL 换成它的展示形**({@link buildRefusalShownUrl}:`scheme://host[:port]`,origin 之后还有东西接 `/…`;读法不唯一 / 读不出的串给展示铸点的占位),
+ * 句子其余部分逐字不动。用在宿主不控制句子的日志面 —— 引擎把「拨不通的 A2A 对端 / MCP 服务器」连同被拨的 URL 拼成一句交来(`onError`),宿主手里没有那条 URL 的结构化值,
+ * 只能在文本上换。展示形的铸点仍只有 {@link buildRefusalShownUrl} 一只(userinfo / 路径 / query / fragment 一个字节不进,不赌形状律认得出的令牌形);本函数只负责「找到文本里的 URL」。
+ * 非 http(s) 的 scheme 不在射程(这两座的 URL 读器只收 http(s))。纯函数。
+ *
+ * 已知的界(不是兜底):URL 串里含**裸空白**的(userinfo 里写了空格)在第一个空白处被截 —— 余下的尾巴留在句里。那一形是调用方在受理口就被拒的(userinfo 一律 400),
+ * 到不了这里的只有存量停驻体 / 部署基线;引擎的警告句对该形也是把 URL 原样拼进去,没有结构化值可救。
+ */
+export declare function buildShownUrlsInText(text: string): string;
 /**
  * 拒句的**唯一**铸点:`<subject> <规则句>[; <规则句>…]; got "<值的样子>"`(`build*` = 纯数据)。
  * 值只经 {@link buildRefusalShownUrl} 出现;`flaws` 来自 settings-schema 的 `httpUrlFlaws`(调用方按首个拒因选自己的码与出路句)。
  */
 export declare function buildHttpUrlRefusal(subject: string, raw: string, flaws: readonly HttpUrlFlaw[]): string;
-/** 「带凭据」那一形的拒句([ref];判官 `url-credential.ts` 的 `findUrlCredential`):同一只铸点形,规则句换成凭据判官的那一句。 */
+/** 「带凭据」那一形的拒句([ref];判官 = 契约包根的 `findUrlCredential`):同一只铸点形,规则句换成凭据判官的那一句。 */
 export declare function buildUrlCredentialRefusal(subject: string, raw: string, credential: UrlCredential): string;
 //# sourceMappingURL=url-refusal.d.ts.map

package/dist/url-refusal.js

@@ -1,6 +1,5 @@
-import { httpUrlRule, isHierarchicalUrl } from "@sema-agent/settings-schema";
+import { httpUrlRule, isHierarchicalUrl, urlCredentialRule } from "@sema-agent/settings-schema";
 import { DISPLAY_SAFE_URL_TOKEN, buildDisplaySafeUrl } from "./trace/redact.js";
-import { urlCredentialRule } from "./url-credential.js";
 export function buildRefusalShownUrl(raw) {
     if (!isHierarchicalUrl(raw))
         return DISPLAY_SAFE_URL_TOKEN;
@@ -12,6 +11,13 @@ export function buildRefusalShownUrl(raw) {
     const origin = `${u.protocol}//${u.host}`;
     return `${buildDisplaySafeUrl(origin)}${u.href === `${origin}/` ? "" : "/…"}`;
 }
+const EMBEDDED_HTTP_URL = /https?:\/\/[^\s"'`<>()[\]{}]+/gi;
+export function buildShownUrlsInText(text) {
+    return text.replace(EMBEDDED_HTTP_URL, (token) => {
+        const trail = /[.,;:!?]+$/.exec(token)?.[0] ?? "";
+        return buildRefusalShownUrl(trail === "" ? token : token.slice(0, -trail.length)) + trail;
+    });
+}
 export function buildHttpUrlRefusal(subject, raw, flaws) {
     return composeUrlRefusal(subject, raw, flaws.map(httpUrlRule));
 }

package/dist/web-admin-client/apply-effective.js

@@ -52,7 +52,6 @@ function toModel(m, envDefaults = {}, logger) {
         ...(thinkingDefault ? { defaultThinking: thinkingDefault } : {}),
         ...(compat ? { compat } : {}),
         ...(m.extraBody ? { extraBody: m.extraBody } : {}),
-        ...(Array.isArray(m.promptGuidance) && m.promptGuidance.length > 0 ? { promptGuidance: m.promptGuidance.map(String) } : {}),
         ...buildModelHeadersKey(m.name, m.headers, m.api),
     };
     const explicitAct = m.autoCompactTokens;

package/dist/web-admin-client/center-request.d.ts

@@ -63,6 +63,14 @@ export declare function pullViewQuery(view: {
     readonly worker?: string | undefined;
     readonly principal?: string | undefined;
 }): string;
+/**
+ * 中心回了重定向(`egress-redirect.ts` 的判据:`opaqueredirect` 或任何 3xx;304 除外,见 {@link NOT_MODIFIED}):不跟、不重试,类型化拒。拒句是 `egress-redirect.ts` 既有 helper 的那一句(与 hook 直连腿 /
+ * 记忆 embedder 同一条律),前面冠上这条请求打的那一席;不回显 `Location`。`status` 是中心回的码(续签器据此落「被拒」终态)。
+ */
+export declare class CenterRedirectRefusedError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
 export interface CenterRequestInit {
     readonly method?: "GET" | "POST" | "DELETE";
     /** JSON 请求体(在场 ⇒ `content-type: application/json`)。 */
@@ -84,13 +92,23 @@ export declare function pathBaseUrlRefusal(subject: string, raw: string): string
  * [ref] —— 凭证续签:`POST {issuer}/api/v1/auth/token/refresh`,form `refresh_token=…`(settings-schema `AUTH_V1_PATHS.tokenRefresh`)。
  *  · 以 `issuer` 为根(可带路径前缀;同源与否由续签器先判,本函数只装配);query / fragment 不带过去。
  *  · **不带 Authorization**:这条端点凭 refresh token 认人,手里的 access token 可能已经过期。
- *  · `redirect: "manual"`:3xx 不跟 —— POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效。
- *    3xx 原样交回,续签器按「被拒」处置。
+ *  · 经 {@link sendToCenter}(`redirect: "manual"`):POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效 ⇒
+ *    中心回重定向 ⇒ 抛 {@link CenterRedirectRefusedError}(不跟),续签器把它落成「被拒」终态(配置事故,重试无益)。
  */
 export declare function centerTokenRefresh(issuer: string, refreshToken: string, init: {
     readonly timeoutMs: number;
     readonly fetchImpl?: typeof fetch;
 }): Promise<Response>;
+/**
+ * 鉴权桥的 JWKS 拉取:`GET <jwksUrl>`,不带凭证(公钥集是公开的)。地址缺省 = 签发方(`SEMA_WEB_ADMIN_URL` / `AUTH_BRIDGE_ISSUER`)+ 契约包的
+ * `WEB_ADMIN_JWKS_PATH`,运维可用 `AUTH_BRIDGE_JWKS_URL` 改写 —— 打的是中心的公钥面,所以同经 {@link sendToCenter}:回重定向 ⇒ 同一只类型化拒、不跟
+ * (此前它自带 `redirect: "error"`,是中心面上的第二种重定向读法,拒句是传输层的 `fetch failed`、不点名出路)。体量帽 / 解析 / 缓存仍是调用方
+ * (`auth-bridge.ts`)的事;本函数只发这一次请求。
+ */
+export declare function centerJwksFetch(jwksUrl: string, init: {
+    readonly timeoutMs: number;
+    readonly fetchImpl?: typeof fetch | undefined;
+}): Promise<Response>;
 /**
  * 对中心发一条请求。返回响应与**这次请求所用凭证的身份**(调用方据此给拿回来的候选打分箱标记,
  * 见 `boot/web-admin.ts` 的 LKG / prompt 状态分箱)。

package/dist/web-admin-client/center-request.js

@@ -4,6 +4,7 @@ import { FLEET_LIVE_PATHS, FLEET_PATHS } from "@sema-agent/settings-schema/fleet
 import { CenterCredentialUnavailableError } from "../center-credential.js";
 import { WEB_ADMIN_ENV, httpUrlFlaws } from "@sema-agent/settings-schema";
 import { buildHttpUrlRefusal } from "../url-refusal.js";
+import { egressRedirectRefusal } from "../egress-redirect.js";
 export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
 export const CENTER_PULL_TIMEOUT_MS = 8000;
 export const SETTINGS_SCHEMA_MAJOR = (() => {
@@ -57,6 +58,30 @@ function routePath(route, kind) {
             return "/api/config/execution-keys";
     }
 }
+export class CenterRedirectRefusedError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "CenterRedirectRefusedError";
+    }
+}
+const NOT_MODIFIED = 304;
+async function sendToCenter(fix, url, wire) {
+    const res = await (wire.fetchImpl ?? fetch)(url, {
+        method: wire.method,
+        headers: wire.headers,
+        ...(wire.body !== undefined ? { body: wire.body } : {}),
+        redirect: "manual",
+        signal: AbortSignal.timeout(wire.timeoutMs),
+    });
+    if (res.status === NOT_MODIFIED)
+        return res;
+    const refusal = egressRedirectRefusal(res, fix);
+    if (refusal !== undefined)
+        throw new CenterRedirectRefusedError(res.status, `web-admin center request: ${refusal}`);
+    return res;
+}
 const PATH_BASE_FORBIDS = ["userinfo", "query", "fragment"];
 export function pathBaseUrlRefusal(subject, raw) {
     const flaws = httpUrlFlaws(raw, PATH_BASE_FORBIDS);
@@ -75,12 +100,20 @@ export async function centerTokenRefresh(issuer, refreshToken, init) {
     url.pathname = `${url.pathname.replace(/\/+$/, "")}${AUTH_V1_PATHS.tokenRefresh}`;
     url.search = "";
     url.hash = "";
-    return (init.fetchImpl ?? fetch)(url, {
+    return sendToCenter(`the credential issuer must be the final center address — set ${WEB_ADMIN_ENV.url} to it and sign in again`, url, {
         method: "POST",
         headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR, "content-type": "application/x-www-form-urlencoded" },
         body: new URLSearchParams({ refresh_token: refreshToken }).toString(),
-        redirect: "manual",
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
+    });
+}
+export async function centerJwksFetch(jwksUrl, init) {
+    return sendToCenter(`declare the final JWKS address — AUTH_BRIDGE_JWKS_URL, or the issuer it derives from (${WEB_ADMIN_ENV.url} / AUTH_BRIDGE_ISSUER)`, jwksUrl, {
+        method: "GET",
+        headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR },
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
 }
 export async function centerFetch(center, route, init) {
@@ -99,12 +132,14 @@ export async function centerFetch(center, route, init) {
     const liveBase = FLEET_LIVE_PATHS.includes(path) ? center.liveBaseUrl : undefined;
     if (liveBase !== undefined)
         assertPathBaseUrl(liveBase, WEB_ADMIN_ENV.liveUrl);
+    const seat = liveBase !== undefined ? WEB_ADMIN_ENV.liveUrl : WEB_ADMIN_ENV.url;
     const url = `${(liveBase ?? center.baseUrl).replace(/\/+$/, "")}${path}`;
-    const res = await (init.fetchImpl ?? fetch)(url, {
+    const res = await sendToCenter(`declare the final address in ${seat}`, url, {
         method: init.method ?? "GET",
         headers,
         ...(init.json !== undefined ? { body: JSON.stringify(init.json) } : {}),
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
     return { res, identity: cred.identity };
 }