@sema-agent/server 7.135.0 → 7.137.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (342) hide show
  1. package/MIGRATION.md +237 -2
  2. package/USAGE.md +146 -41
  3. package/deploy/sema-up/README.md +15 -1
  4. package/deploy/sema-up/chart/templates/NOTES.txt +1 -1
  5. package/deploy/sema-up/chart/templates/sandbox-rbac.yaml +7 -1
  6. package/deploy/sema-up/chart/values.yaml +1 -1
  7. package/deploy/sema-up/stack/sema-stack-cluster.yaml +7 -1
  8. package/dist/approval-card.d.ts +60 -4
  9. package/dist/approval-card.js +18 -1
  10. package/dist/approval-content-kind.d.ts +7 -0
  11. package/dist/approval-content-kind.js +8 -1
  12. package/dist/approval-gate-currency.d.ts +48 -6
  13. package/dist/approval-gate-currency.js +16 -9
  14. package/dist/approval-hmac.d.ts +13 -1
  15. package/dist/approval-hmac.js +1 -1
  16. package/dist/approval.js +3 -3
  17. package/dist/auth-bridge.d.ts +34 -5
  18. package/dist/auth-bridge.js +22 -5
  19. package/dist/boot/budget-tracing.d.ts +1 -2
  20. package/dist/boot/budget-tracing.js +2 -2
  21. package/dist/boot/execution-env.d.ts +24 -1
  22. package/dist/boot/execution-env.js +69 -6
  23. package/dist/boot/org-memory.js +1 -1
  24. package/dist/boot/reapers.d.ts +3 -0
  25. package/dist/boot/reapers.js +15 -1
  26. package/dist/boot/resolve-spec.d.ts +4 -0
  27. package/dist/boot/resolve-spec.js +24 -22
  28. package/dist/boot/runner-deps.js +4 -2
  29. package/dist/boot/stage-03-store-backend.d.ts +1 -1
  30. package/dist/boot/stage-04-stores.d.ts +2 -2
  31. package/dist/boot/stage-05-execution-env.d.ts +4 -2
  32. package/dist/boot/stage-05-execution-env.js +11 -2
  33. package/dist/boot/stage-06-runners.d.ts +4 -2
  34. package/dist/boot/stage-06-runners.js +5 -1
  35. package/dist/boot/stage-07-capability-layer.d.ts +5 -2
  36. package/dist/boot/stage-07-capability-layer.js +1 -1
  37. package/dist/boot/stage-08-reapers.d.ts +5 -2
  38. package/dist/boot/stage-08-reapers.js +2 -1
  39. package/dist/boot/stage-09-leader.d.ts +5 -2
  40. package/dist/boot/stage-10-http-server.d.ts +5 -2
  41. package/dist/boot/stage-10-http-server.js +3 -2
  42. package/dist/boot/stores.d.ts +1 -1
  43. package/dist/boot/stores.js +2 -3
  44. package/dist/boot/web-admin.js +10 -17
  45. package/dist/brain.js +12 -3
  46. package/dist/broker/broker.d.ts +89 -0
  47. package/dist/broker/broker.js +287 -0
  48. package/dist/broker/constants.d.ts +39 -0
  49. package/dist/broker/constants.js +15 -0
  50. package/dist/broker/http1.d.ts +111 -0
  51. package/dist/broker/http1.js +256 -0
  52. package/dist/broker/lease-book.d.ts +87 -0
  53. package/dist/broker/lease-book.js +142 -0
  54. package/dist/broker/lease-file.d.ts +60 -0
  55. package/dist/broker/lease-file.js +127 -0
  56. package/dist/broker/main.d.ts +2 -0
  57. package/dist/broker/main.js +20 -0
  58. package/dist/budget.d.ts +3 -3
  59. package/dist/budget.js +4 -0
  60. package/dist/capabilities/composite-members.d.ts +2 -1
  61. package/dist/capabilities/composite-members.js +2 -1
  62. package/dist/capabilities/engine-capabilities.js +1 -0
  63. package/dist/capabilities/mcp-probe.d.ts +5 -4
  64. package/dist/capabilities/scenarios.d.ts +23 -8
  65. package/dist/capabilities/scenarios.js +13 -8
  66. package/dist/capabilities/skills.d.ts +28 -5
  67. package/dist/capabilities/skills.js +8 -0
  68. package/dist/capability-facts.d.ts +3 -7
  69. package/dist/capability-facts.js +3 -5
  70. package/dist/center-credential-renewer.js +5 -1
  71. package/dist/center-credential.d.ts +18 -4
  72. package/dist/center-credential.js +18 -3
  73. package/dist/checkpoint-ctx-seal-m28.d.ts +3 -10
  74. package/dist/checkpoint-ctx-seal-m28.js +1 -1
  75. package/dist/checkpoint-identity.d.ts +3 -3
  76. package/dist/config-catalog.js +21 -16
  77. package/dist/config-d-migration.js +1 -1
  78. package/dist/config-invariants.d.ts +1 -1
  79. package/dist/config-invariants.js +8 -0
  80. package/dist/config-lkg.d.ts +0 -38
  81. package/dist/config-lkg.js +1 -83
  82. package/dist/config-types.d.ts +21 -4
  83. package/dist/config.d.ts +1 -1
  84. package/dist/config.js +60 -16
  85. package/dist/deployment-governance.d.ts +2 -2
  86. package/dist/deployment-governance.js +7 -9
  87. package/dist/deployment-shape.d.ts +1 -1
  88. package/dist/device-ws-protocol.d.ts +1 -0
  89. package/dist/device-ws-protocol.js +2 -1
  90. package/dist/elicitation.d.ts +8 -7
  91. package/dist/elicitation.js +9 -8
  92. package/dist/file-history-disclosure.d.ts +8 -4
  93. package/dist/file-history-disclosure.js +24 -6
  94. package/dist/fleet-client.d.ts +32 -1
  95. package/dist/fleet-client.js +24 -4
  96. package/dist/fleet-lease.d.ts +7 -3
  97. package/dist/fleet-lease.js +31 -23
  98. package/dist/hooks/classic-stations.d.ts +11 -54
  99. package/dist/hooks/hook-llm.js +14 -8
  100. package/dist/hooks/hook-runner.d.ts +4 -4
  101. package/dist/hooks/hook-runner.js +2 -2
  102. package/dist/http/admission.js +10 -7
  103. package/dist/http/approval-sweeps.js +4 -3
  104. package/dist/http/caller-trust.d.ts +2 -1
  105. package/dist/http/caller-trust.js +1 -3
  106. package/dist/http/checkpoint-ctx.d.ts +76 -16
  107. package/dist/http/checkpoint-ctx.js +45 -1
  108. package/dist/http/dispatch.js +24 -19
  109. package/dist/http/durable-run-leg.d.ts +5 -1
  110. package/dist/http/durable-run-leg.js +1 -1
  111. package/dist/http/health-self-report.d.ts +2 -2
  112. package/dist/http/mcp-remote-text.d.ts +5 -0
  113. package/dist/http/mcp-remote-text.js +7 -0
  114. package/dist/http/principal-gate.d.ts +15 -10
  115. package/dist/http/principal-gate.js +48 -9
  116. package/dist/http/resume-ctx-read.d.ts +2 -16
  117. package/dist/http/resume-ctx-read.js +2 -3
  118. package/dist/http/resume-legs.d.ts +2 -20
  119. package/dist/http/resume-legs.js +52 -38
  120. package/dist/http/route-ctx.d.ts +8 -2
  121. package/dist/http/routes/approvals-assistant.d.ts +0 -2
  122. package/dist/http/routes/approvals-assistant.js +65 -16
  123. package/dist/http/routes/capabilities.js +11 -1
  124. package/dist/http/routes/mcp-reconnect.d.ts +1 -1
  125. package/dist/http/routes/mcp-reconnect.js +5 -7
  126. package/dist/http/routes/runs.js +4 -3
  127. package/dist/http/routes/session-sync.js +70 -12
  128. package/dist/http/routes/sessions.js +20 -15
  129. package/dist/http/routes/tasks.js +8 -6
  130. package/dist/http/server.d.ts +4 -0
  131. package/dist/http/stored-body-replay.d.ts +3 -3
  132. package/dist/http/stored-body-replay.js +6 -1
  133. package/dist/http/submit-ctx.js +1 -1
  134. package/dist/http/wire-types.d.ts +57 -30
  135. package/dist/identity-source.d.ts +65 -0
  136. package/dist/identity-source.js +45 -0
  137. package/dist/index.d.ts +1 -0
  138. package/dist/index.js +1 -0
  139. package/dist/memory-store-refusal.d.ts +3 -3
  140. package/dist/model-entry-refusal.d.ts +2 -0
  141. package/dist/model-entry-refusal.js +11 -0
  142. package/dist/model-route-gap.d.ts +49 -4
  143. package/dist/model-route-gap.js +34 -1
  144. package/dist/model-select.d.ts +6 -17
  145. package/dist/model-select.js +0 -3
  146. package/dist/namespaced-rule-name.d.ts +1 -1
  147. package/dist/object-store-buckets.d.ts +13 -0
  148. package/dist/object-store-buckets.js +3 -0
  149. package/dist/observability/fail-open.d.ts +19 -7
  150. package/dist/observability/fail-open.js +19 -7
  151. package/dist/observability/metrics.js +2 -2
  152. package/dist/observability/principal-context.d.ts +4 -1
  153. package/dist/observability/principal-context.js +6 -1
  154. package/dist/observability/run-terminal.js +1 -0
  155. package/dist/operator-ask.d.ts +2 -2
  156. package/dist/org-delivery-gate.js +1 -1
  157. package/dist/org-memory-admission.d.ts +2 -2
  158. package/dist/org-memory-admission.js +39 -2
  159. package/dist/parked-decide.d.ts +4 -3
  160. package/dist/parked-decide.js +29 -9
  161. package/dist/peer-directory.d.ts +2 -1
  162. package/dist/peer-directory.js +7 -5
  163. package/dist/permission-rule-list.d.ts +2 -2
  164. package/dist/plugins/approval-ask-store-sql.d.ts +8 -0
  165. package/dist/plugins/approval-ask-store-sql.js +3 -0
  166. package/dist/plugins/blob-backend.js +2 -1
  167. package/dist/plugins/checkpoint-index-columns.d.ts +50 -1
  168. package/dist/plugins/checkpoint-index-columns.js +28 -0
  169. package/dist/plugins/checkpoint-store-sql.d.ts +46 -12
  170. package/dist/plugins/checkpoint-store-sql.js +64 -35
  171. package/dist/plugins/file-history-store-sql.d.ts +6 -0
  172. package/dist/plugins/file-history-store-sql.js +37 -37
  173. package/dist/plugins/file-run-store.js +8 -2
  174. package/dist/plugins/k8s-exec-protocol.d.ts +69 -13
  175. package/dist/plugins/k8s-exec-protocol.js +116 -28
  176. package/dist/plugins/k8s-pod-delete-failure.d.ts +25 -0
  177. package/dist/plugins/k8s-pod-delete-failure.js +17 -0
  178. package/dist/plugins/k8s-pod-reaper.d.ts +112 -0
  179. package/dist/plugins/k8s-pod-reaper.js +122 -0
  180. package/dist/plugins/local-checkpoint-store.d.ts +3 -6
  181. package/dist/plugins/local-checkpoint-store.js +7 -6
  182. package/dist/plugins/memory-run-store.js +2 -0
  183. package/dist/plugins/one-time-migrations.d.ts +49 -37
  184. package/dist/plugins/one-time-migrations.js +87 -128
  185. package/dist/plugins/permission-rule-store-file.js +2 -2
  186. package/dist/plugins/permission-rule-store-sql.d.ts +17 -17
  187. package/dist/plugins/permission-rule-store-sql.js +16 -17
  188. package/dist/plugins/pg-pool.js +4 -0
  189. package/dist/plugins/pg-session-storage.js +2 -2
  190. package/dist/plugins/remote-env-adb.d.ts +3 -0
  191. package/dist/plugins/remote-env-adb.js +1 -0
  192. package/dist/plugins/remote-env-device.d.ts +3 -0
  193. package/dist/plugins/remote-env-device.js +4 -0
  194. package/dist/plugins/remote-env-e2b.d.ts +3 -0
  195. package/dist/plugins/remote-env-e2b.js +1 -0
  196. package/dist/plugins/remote-env-file-error.d.ts +8 -1
  197. package/dist/plugins/remote-env-file-error.js +7 -1
  198. package/dist/plugins/remote-env-host.d.ts +7 -1
  199. package/dist/plugins/remote-env-host.js +7 -1
  200. package/dist/plugins/remote-env-k8s.d.ts +154 -14
  201. package/dist/plugins/remote-env-k8s.js +300 -21
  202. package/dist/plugins/remote-env-local-docker.d.ts +3 -0
  203. package/dist/plugins/remote-env-local-docker.js +1 -0
  204. package/dist/plugins/remote-env-ssh.d.ts +3 -0
  205. package/dist/plugins/remote-env-ssh.js +1 -0
  206. package/dist/plugins/run-store-sql.js +10 -4
  207. package/dist/plugins/s3-answer.d.ts +15 -0
  208. package/dist/plugins/s3-answer.js +5 -0
  209. package/dist/plugins/session-ownership.d.ts +17 -3
  210. package/dist/plugins/session-ownership.js +19 -5
  211. package/dist/plugins/snapshot-bucket-presence.d.ts +39 -4
  212. package/dist/plugins/snapshot-bucket-presence.js +35 -7
  213. package/dist/plugins/sql-errors.d.ts +60 -0
  214. package/dist/plugins/sql-errors.js +64 -1
  215. package/dist/plugins/store-contracts.d.ts +10 -1
  216. package/dist/plugins/store-fault.d.ts +4 -0
  217. package/dist/plugins/store-fault.js +10 -0
  218. package/dist/plugins/tidb-pool.js +8 -1
  219. package/dist/plugins/tidb-session-store.js +2 -2
  220. package/dist/plugins/web-search.d.ts +1 -1
  221. package/dist/plugins/web-search.js +2 -2
  222. package/dist/request-declaration-refusal.d.ts +94 -0
  223. package/dist/request-declaration-refusal.js +78 -0
  224. package/dist/request-image-urls.d.ts +6 -0
  225. package/dist/request-image-urls.js +27 -0
  226. package/dist/request-key-closure.d.ts +5 -0
  227. package/dist/request-key-closure.js +5 -2
  228. package/dist/request-value-closure.d.ts +31 -2
  229. package/dist/request-value-closure.js +7 -1
  230. package/dist/rule-entry-list.d.ts +3 -2
  231. package/dist/rule-entry-list.js +2 -2
  232. package/dist/rules-consent.js +7 -4
  233. package/dist/run-local.d.ts +2 -2
  234. package/dist/runs.js +2 -1
  235. package/dist/runtime-caps-resolver.js +1 -1
  236. package/dist/runtime-governance.d.ts +5 -5
  237. package/dist/sandbox-git-lease.d.ts +49 -0
  238. package/dist/sandbox-git-lease.js +60 -0
  239. package/dist/sandbox-git-plane.d.ts +84 -0
  240. package/dist/sandbox-git-plane.js +105 -0
  241. package/dist/sandbox-pkg-source.d.ts +28 -1
  242. package/dist/sandbox-pkg-source.js +1 -2
  243. package/dist/sealed-key.d.ts +19 -0
  244. package/dist/sealed-key.js +47 -4
  245. package/dist/security.d.ts +16 -4
  246. package/dist/security.js +8 -3
  247. package/dist/server-secret-env.d.ts +6 -0
  248. package/dist/server-secret-env.js +14 -0
  249. package/dist/session-error-wire.d.ts +14 -6
  250. package/dist/session-error-wire.js +2 -1
  251. package/dist/session-incarnation.d.ts +16 -5
  252. package/dist/session-incarnation.js +7 -4
  253. package/dist/session-policy-wire.d.ts +1 -1
  254. package/dist/session-policy-wire.js +2 -2
  255. package/dist/session-row.d.ts +3 -17
  256. package/dist/session-row.js +4 -0
  257. package/dist/session-sync.d.ts +15 -3
  258. package/dist/session-sync.js +5 -2
  259. package/dist/spec-fields.d.ts +43 -13
  260. package/dist/spec-fields.js +33 -12
  261. package/dist/stored-request-prompt-profile-m30.d.ts +49 -0
  262. package/dist/stored-request-prompt-profile-m30.js +25 -0
  263. package/dist/task-a2a.d.ts +52 -81
  264. package/dist/task-a2a.js +219 -89
  265. package/dist/task-mcp.d.ts +7 -15
  266. package/dist/task-mcp.js +16 -51
  267. package/dist/task-settings.d.ts +2 -2
  268. package/dist/tool-approval.d.ts +35 -12
  269. package/dist/tool-approval.js +59 -39
  270. package/dist/tool-rule-names.d.ts +5 -0
  271. package/dist/trace/core-keyset-guard.d.ts +5 -5
  272. package/dist/trace/engine-notice-wire.d.ts +1 -1
  273. package/dist/trace/engine-notice-wire.js +2 -0
  274. package/dist/trace/exit-seat.js +37 -13
  275. package/dist/trace/ledger-sink.d.ts +4 -5
  276. package/dist/trace/ledger-sink.js +3 -7
  277. package/dist/trace/project.d.ts +37 -3
  278. package/dist/trace/project.js +20 -6
  279. package/dist/trace/redact.d.ts +40 -12
  280. package/dist/trace/redact.js +332 -128
  281. package/dist/trace/self-minted-wire.d.ts +641 -0
  282. package/dist/trace/self-minted-wire.js +201 -0
  283. package/dist/trace/wire-projection-faces.d.ts +5 -3
  284. package/dist/trace/wire-projection-faces.js +7 -3
  285. package/dist/url-credential-refusal.d.ts +52 -0
  286. package/dist/url-credential-refusal.js +14 -0
  287. package/dist/url-refusal.d.ts +13 -4
  288. package/dist/url-refusal.js +8 -2
  289. package/dist/web-admin-client/apply-effective.js +0 -1
  290. package/dist/web-admin-client/center-request.d.ts +20 -2
  291. package/dist/web-admin-client/center-request.js +40 -5
  292. package/dist/web-admin-client/http-client.js +6 -6
  293. package/dist/web-admin-client/types.d.ts +5 -5
  294. package/dist/workspace-space.d.ts +27 -0
  295. package/dist/workspace-space.js +26 -0
  296. package/docs/DEVICE-EXECUTOR-PROTOCOL.md +11 -5
  297. package/package.json +4 -3
  298. package/scripts/drain-check-local.mjs +2 -1
  299. package/scripts/drain-check.mysql.sql +3 -1
  300. package/scripts/drain-check.pg.sql +3 -1
  301. package/skills/schedule.md +1 -1
  302. package/wire-changes/server@7.104.0.json +134 -0
  303. package/wire-changes/server@7.105.0.json +53 -0
  304. package/wire-changes/server@7.106.0.json +475 -0
  305. package/wire-changes/server@7.107.0.json +64 -0
  306. package/wire-changes/server@7.108.0.json +153 -0
  307. package/wire-changes/server@7.109.0.json +46 -0
  308. package/wire-changes/server@7.110.0.json +90 -0
  309. package/wire-changes/server@7.111.0.json +86 -0
  310. package/wire-changes/server@7.112.0.json +60 -0
  311. package/wire-changes/server@7.113.0.json +26 -0
  312. package/wire-changes/server@7.114.0.json +26 -0
  313. package/wire-changes/server@7.115.0.json +97 -0
  314. package/wire-changes/server@7.116.0.json +218 -0
  315. package/wire-changes/server@7.116.1.json +26 -0
  316. package/wire-changes/server@7.117.0.json +65 -0
  317. package/wire-changes/server@7.118.0.json +129 -0
  318. package/wire-changes/server@7.119.0.json +65 -0
  319. package/wire-changes/server@7.120.0.json +89 -0
  320. package/wire-changes/server@7.121.0.json +219 -0
  321. package/wire-changes/server@7.122.0.json +54 -0
  322. package/wire-changes/server@7.123.0.json +26 -0
  323. package/wire-changes/server@7.124.0.json +336 -0
  324. package/wire-changes/server@7.124.1.json +26 -0
  325. package/wire-changes/server@7.125.0.json +111 -0
  326. package/wire-changes/server@7.126.0.json +285 -0
  327. package/wire-changes/server@7.127.0.json +77 -0
  328. package/wire-changes/server@7.127.1.json +26 -0
  329. package/wire-changes/server@7.127.2.json +53 -0
  330. package/wire-changes/server@7.128.0.json +26 -0
  331. package/wire-changes/server@7.129.0.json +106 -0
  332. package/wire-changes/server@7.129.1.json +26 -0
  333. package/wire-changes/server@7.130.0.json +26 -0
  334. package/wire-changes/server@7.131.0.json +118 -0
  335. package/wire-changes/server@7.132.0.json +226 -0
  336. package/wire-changes/server@7.133.0.json +1155 -0
  337. package/wire-changes/server@7.134.0.json +107 -0
  338. package/wire-changes/server@7.135.0.json +174 -0
  339. package/wire-changes/server@7.136.0.json +448 -0
  340. package/wire-changes/server@7.137.0.json +825 -0
  341. package/dist/url-credential.d.ts +0 -52
  342. package/dist/url-credential.js +0 -49
@@ -0,0 +1,106 @@
1
+ {
2
+ "repo": "server",
3
+ "version": "7.129.0",
4
+ "from": "v7.128.0",
5
+ "fromCommit": "b3eb99f5d97e68132ceb08be3bcdb68edbc03f0e",
6
+ "to": "v7.129.0",
7
+ "generator": "scripts/wire-changes-server.mjs",
8
+ "sources": [
9
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
10
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
11
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
12
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
13
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
14
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
15
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
16
+ "src/trace/wire-projection-faces.ts",
17
+ "src/trace/self-minted-wire.ts"
18
+ ],
19
+ "added": [
20
+ {
21
+ "id": "A1",
22
+ "source": "capability",
23
+ "member": "inherit_env.own_credentials_withheld",
24
+ "text": "附录 B.1 能力位新增 `inherit_env.own_credentials_withheld`(谓词类 config 依赖)"
25
+ },
26
+ {
27
+ "id": "A2",
28
+ "source": "engineNotice",
29
+ "member": "permission.entry_mode_clamped",
30
+ "text": "附录 D.3 engine_notice 码新增 `permission.entry_mode_clamped`(detail `{ requested, effective, ceiling, sessionId }` —— `requested` = 被折的那个词、`effective` = run 起步的词、`ceiling` = 折它的地板,三个都是 core 的六词模式闭集(`PERMISSION_MODES`),逐字透传。⚠️ **无 `runId`**(core 7.51.1 起码册同此):折叠发生在受理门,引擎的 run 身份要到 prepare 才铸,本服务不编造;归属看它落在哪条 run 的流 / 账本上)"
31
+ },
32
+ {
33
+ "id": "A3",
34
+ "source": "errorCode",
35
+ "member": "rules.inert_entry",
36
+ "text": "附录 A.1 / A.1b 错误码新增 `rules.inert_entry`(状态码 400)"
37
+ },
38
+ {
39
+ "id": "A4",
40
+ "source": "errorCode",
41
+ "member": "rules.invalid_shape",
42
+ "text": "附录 A.1 / A.1b 错误码新增 `rules.invalid_shape`(状态码 400)"
43
+ }
44
+ ],
45
+ "registered": [],
46
+ "removed": [
47
+ {
48
+ "id": "R1",
49
+ "source": "errorCode",
50
+ "member": "rules.legacy_tool_name",
51
+ "text": "附录 A.1 / A.1b 错误码删除 `rules.legacy_tool_name`(原状态码 400)"
52
+ }
53
+ ],
54
+ "changed": [
55
+ {
56
+ "id": "C1",
57
+ "source": "engineNotice",
58
+ "member": "config.permission_mode_unavailable",
59
+ "text": "附录 D.3 engine_notice 码 `config.permission_mode_unavailable` 的detail:`{ requested, effective, by, sessionId, runId, childSessionId? }` —— `requested` / `effective` 是 core 的六词模式闭集(`PERMISSION_MODES`),`by` 闭三词(`PERMISSION_MODE_FOLD_REASONS`),属主 core,逐字透传 → `{ requested, effective, by, sessionId, runId, childSessionId? }` —— `requested` = 被折的那个词(子腿什么都没请求时是它继承的词,句里写「(inherited)」;core 7.51.0 起),`requested` / `effective` 都是 core 的六词模式闭集(`PERMISSION_MODES`),`by` 闭三词(`PERMISSION_MODE_FOLD_REASONS`),属主 core,逐字透传"
60
+ }
61
+ ],
62
+ "narrowed": [],
63
+ "closedSetMembers": [
64
+ {
65
+ "set": "errorCode",
66
+ "at": [
67
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
68
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
69
+ ],
70
+ "added": [
71
+ "rules.inert_entry",
72
+ "rules.invalid_shape"
73
+ ],
74
+ "registered": [],
75
+ "removed": [
76
+ "rules.legacy_tool_name"
77
+ ],
78
+ "breaking": true
79
+ },
80
+ {
81
+ "set": "capability",
82
+ "at": [
83
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1"
84
+ ],
85
+ "added": [
86
+ "inherit_env.own_credentials_withheld"
87
+ ],
88
+ "registered": [],
89
+ "removed": [],
90
+ "breaking": false
91
+ },
92
+ {
93
+ "set": "engineNotice",
94
+ "at": [
95
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3"
96
+ ],
97
+ "added": [
98
+ "permission.entry_mode_clamped"
99
+ ],
100
+ "registered": [],
101
+ "removed": [],
102
+ "breaking": false
103
+ }
104
+ ],
105
+ "breaking": 1
106
+ }
@@ -0,0 +1,26 @@
1
+ {
2
+ "repo": "server",
3
+ "version": "7.129.1",
4
+ "from": "v7.129.0",
5
+ "fromCommit": "2e6c07acfdee420beb9e62401df90d92db79aeb5",
6
+ "to": "v7.129.1",
7
+ "generator": "scripts/wire-changes-server.mjs",
8
+ "sources": [
9
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
10
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
11
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
12
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
13
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
14
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
15
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
16
+ "src/trace/wire-projection-faces.ts",
17
+ "src/trace/self-minted-wire.ts"
18
+ ],
19
+ "added": [],
20
+ "registered": [],
21
+ "removed": [],
22
+ "changed": [],
23
+ "narrowed": [],
24
+ "closedSetMembers": [],
25
+ "breaking": 0
26
+ }
@@ -0,0 +1,26 @@
1
+ {
2
+ "repo": "server",
3
+ "version": "7.130.0",
4
+ "from": "v7.129.1",
5
+ "fromCommit": "f2d0f02c268909d9cdbc470901a641b191f99bc0",
6
+ "to": "v7.130.0",
7
+ "generator": "scripts/wire-changes-server.mjs",
8
+ "sources": [
9
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
10
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
11
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
12
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
13
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
14
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
15
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
16
+ "src/trace/wire-projection-faces.ts",
17
+ "src/trace/self-minted-wire.ts"
18
+ ],
19
+ "added": [],
20
+ "registered": [],
21
+ "removed": [],
22
+ "changed": [],
23
+ "narrowed": [],
24
+ "closedSetMembers": [],
25
+ "breaking": 0
26
+ }
@@ -0,0 +1,118 @@
1
+ {
2
+ "repo": "server",
3
+ "version": "7.131.0",
4
+ "from": "v7.130.0",
5
+ "fromCommit": "eb1aaae12f5fc9034c217d0ed6aff006ba892ebc",
6
+ "to": "v7.131.0",
7
+ "generator": "scripts/wire-changes-server.mjs",
8
+ "sources": [
9
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
10
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
11
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
12
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
13
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
14
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
15
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
16
+ "src/trace/wire-projection-faces.ts",
17
+ "src/trace/self-minted-wire.ts"
18
+ ],
19
+ "added": [
20
+ {
21
+ "id": "A1",
22
+ "source": "capability",
23
+ "member": "userAttachments",
24
+ "text": "附录 B.1 能力位新增 `userAttachments`(谓词类 恒真)"
25
+ },
26
+ {
27
+ "id": "A2",
28
+ "source": "capabilityMember",
29
+ "member": "userAttachments.entries",
30
+ "text": "附录 B.1a / B.2b 复合能力位成员新增 `userAttachments.entries`(在场律 / 谓词类 恒在场)"
31
+ },
32
+ {
33
+ "id": "A3",
34
+ "source": "capabilityMember",
35
+ "member": "userAttachments.kinds",
36
+ "text": "附录 B.1a / B.2b 复合能力位成员新增 `userAttachments.kinds`(在场律 / 谓词类 恒在场)"
37
+ },
38
+ {
39
+ "id": "A4",
40
+ "source": "capabilityMember",
41
+ "member": "userAttachments.limits",
42
+ "text": "附录 B.1a / B.2b 复合能力位成员新增 `userAttachments.limits`(在场律 / 谓词类 恒在场)"
43
+ },
44
+ {
45
+ "id": "A5",
46
+ "source": "capabilityMember",
47
+ "member": "userAttachments.supplies",
48
+ "text": "附录 B.1a / B.2b 复合能力位成员新增 `userAttachments.supplies`(在场律 / 谓词类 恒在场)"
49
+ },
50
+ {
51
+ "id": "A6",
52
+ "source": "errorCode",
53
+ "member": "config.agent.unknown_tool",
54
+ "text": "附录 A.1 / A.1b 错误码新增 `config.agent.unknown_tool`(状态码 400)"
55
+ },
56
+ {
57
+ "id": "A7",
58
+ "source": "errorCode",
59
+ "member": "config.user_attachment_invalid",
60
+ "text": "附录 A.1 / A.1b 错误码新增 `config.user_attachment_invalid`(状态码 400)"
61
+ },
62
+ {
63
+ "id": "A8",
64
+ "source": "wireFace.excluded",
65
+ "member": "human_input.attachments",
66
+ "text": "投影面 human_input 起投 core 键 attachments(从 excluded 撤出)"
67
+ }
68
+ ],
69
+ "registered": [],
70
+ "removed": [],
71
+ "changed": [],
72
+ "narrowed": [],
73
+ "closedSetMembers": [
74
+ {
75
+ "set": "errorCode",
76
+ "at": [
77
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
78
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
79
+ ],
80
+ "added": [
81
+ "config.agent.unknown_tool",
82
+ "config.user_attachment_invalid"
83
+ ],
84
+ "registered": [],
85
+ "removed": [],
86
+ "breaking": false
87
+ },
88
+ {
89
+ "set": "capability",
90
+ "at": [
91
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1"
92
+ ],
93
+ "added": [
94
+ "userAttachments"
95
+ ],
96
+ "registered": [],
97
+ "removed": [],
98
+ "breaking": false
99
+ },
100
+ {
101
+ "set": "capabilityMember",
102
+ "at": [
103
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
104
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b"
105
+ ],
106
+ "added": [
107
+ "userAttachments.entries",
108
+ "userAttachments.kinds",
109
+ "userAttachments.limits",
110
+ "userAttachments.supplies"
111
+ ],
112
+ "registered": [],
113
+ "removed": [],
114
+ "breaking": false
115
+ }
116
+ ],
117
+ "breaking": 0
118
+ }
@@ -0,0 +1,226 @@
1
+ {
2
+ "repo": "server",
3
+ "version": "7.132.0",
4
+ "from": "v7.131.0",
5
+ "fromCommit": "3f74460dec6404b1e811c38a2b66c51df13ce18c",
6
+ "to": "v7.132.0",
7
+ "generator": "scripts/wire-changes-server.mjs",
8
+ "sources": [
9
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
10
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
11
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
12
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
13
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
14
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
15
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
16
+ "src/trace/wire-projection-faces.ts",
17
+ "src/trace/self-minted-wire.ts"
18
+ ],
19
+ "added": [
20
+ {
21
+ "id": "A1",
22
+ "source": "capability",
23
+ "member": "inherit_env.own_credential_values_withheld",
24
+ "text": "附录 B.1 能力位新增 `inherit_env.own_credential_values_withheld`(谓词类 config 依赖)"
25
+ },
26
+ {
27
+ "id": "A2",
28
+ "source": "engineNotice",
29
+ "member": "config.session_rules_earlier_grammar",
30
+ "text": "附录 D.3 engine_notice 码新增 `config.session_rules_earlier_grammar`(detail `{ bucket, storedGrammar, entries: [{ entry, reader }], rewrite: { by, stampsGrammar }, rulesSessionId, sessionId }` —— 引擎交来的 `entries` 每一条都在(句子只点前五条),会话流行与其余码同经通告 `detail` 的通用界(列表至多前 32 条、无截断标记 —— 完整清单在运维日志行上,那一行的 `detail` 不截);`entry` 是规则文本的脱敏原值(与 `permission.allowed_tool_not_granted` 的 `entries[].entry` 同一只写法);`reader` ∈ `no_rule` / `named_no_tool`、`rewrite.by` = `operator_write_without_rev`(闭集词属主 core,server echo-only);`rulesSessionId` = 规则是谁的(委派子代上是祖先的),`sessionId` = 读它的那一跑)"
31
+ },
32
+ {
33
+ "id": "A3",
34
+ "source": "engineNotice",
35
+ "member": "mods.registration_refused",
36
+ "text": "附录 D.3 engine_notice 码新增 `mods.registration_refused`(detail `{ name, seat, tier, refusedBy, reason, sessionId }` —— `seat` / `tier` 闭集词属主 core(server echo-only);`reason` 是判拒的那张注册写的自由文本(UNTRUSTED-for-display))"
37
+ },
38
+ {
39
+ "id": "A4",
40
+ "source": "engineNotice",
41
+ "member": "route.credential_origin_mismatch",
42
+ "text": "附录 D.3 engine_notice 码新增 `route.credential_origin_mismatch`(detail `{ modelId, boundOrigin, requestOrigin, sessionId, runId }` —— 两个 origin 是显示拼写(scheme + host + port,无 userinfo / 路径),从不带凭据或它的摘要)"
43
+ },
44
+ {
45
+ "id": "A5",
46
+ "source": "errorCode",
47
+ "member": "blob_too_large_for_sql",
48
+ "text": "附录 A.1 / A.1b 错误码新增 `blob_too_large_for_sql`(状态码 413)"
49
+ },
50
+ {
51
+ "id": "A6",
52
+ "source": "errorCode",
53
+ "member": "capability.k8s_lane_required",
54
+ "text": "附录 A.1 / A.1b 错误码新增 `capability.k8s_lane_required`(状态码 501)"
55
+ },
56
+ {
57
+ "id": "A7",
58
+ "source": "errorCode",
59
+ "member": "config.legacy_tool_name",
60
+ "text": "附录 A.1 / A.1b 错误码新增 `config.legacy_tool_name`(状态码 400)"
61
+ },
62
+ {
63
+ "id": "A8",
64
+ "source": "errorCode",
65
+ "member": "prompt.assembled_role_refused",
66
+ "text": "附录 A.1 / A.1b 错误码新增 `prompt.assembled_role_refused`(状态码 400)"
67
+ },
68
+ {
69
+ "id": "A9",
70
+ "source": "wireFace",
71
+ "member": "compaction_started",
72
+ "text": "新投影面 compaction_started(projector compactionStartedEventData,coreType Extract<TaskEvent, { type: \"compaction_started\" }>)"
73
+ },
74
+ {
75
+ "id": "A10",
76
+ "source": "wireFace",
77
+ "member": "prompt_manifest",
78
+ "text": "新投影面 prompt_manifest(projector promptManifestRecordOf,coreType Extract<TraceEvent, { kind: \"prompt.assembled\" }>)"
79
+ },
80
+ {
81
+ "id": "A11",
82
+ "source": "wireFace",
83
+ "member": "prompt_manifest_block",
84
+ "text": "新投影面 prompt_manifest_block(projector promptManifestRecordOf,coreType Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"blocks\"][number])"
85
+ },
86
+ {
87
+ "id": "A12",
88
+ "source": "wireFace",
89
+ "member": "prompt_manifest_chain_link",
90
+ "text": "新投影面 prompt_manifest_chain_link(projector promptManifestRecordOf,coreType PromptChainLink)"
91
+ },
92
+ {
93
+ "id": "A13",
94
+ "source": "wireFace",
95
+ "member": "prompt_manifest_identity",
96
+ "text": "新投影面 prompt_manifest_identity(projector promptManifestRecordOf,coreType PromptManifestIdentity)"
97
+ },
98
+ {
99
+ "id": "A14",
100
+ "source": "wireFace",
101
+ "member": "prompt_manifest_identity_layers",
102
+ "text": "新投影面 prompt_manifest_identity_layers(projector promptManifestRecordOf,coreType PromptIdentityLayers)"
103
+ },
104
+ {
105
+ "id": "A15",
106
+ "source": "wireFace",
107
+ "member": "prompt_manifest_section",
108
+ "text": "新投影面 prompt_manifest_section(projector promptManifestRecordOf,coreType PromptManifestSection)"
109
+ },
110
+ {
111
+ "id": "A16",
112
+ "source": "wireFace",
113
+ "member": "prompt_manifest_section_renderer",
114
+ "text": "新投影面 prompt_manifest_section_renderer(projector promptManifestRecordOf,coreType NonNullable<PromptManifestSection[\"renderer\"]>)"
115
+ },
116
+ {
117
+ "id": "A17",
118
+ "source": "wireFace",
119
+ "member": "prompt_manifest_selectors",
120
+ "text": "新投影面 prompt_manifest_selectors(projector promptManifestRecordOf,coreType PromptManifestSelectors)"
121
+ },
122
+ {
123
+ "id": "A18",
124
+ "source": "wireFace",
125
+ "member": "prompt_manifest_selectors_host",
126
+ "text": "新投影面 prompt_manifest_selectors_host(projector promptManifestRecordOf,coreType PromptManifestSelectors[\"host\"])"
127
+ },
128
+ {
129
+ "id": "A19",
130
+ "source": "wireFace",
131
+ "member": "prompt_manifest_superseded",
132
+ "text": "新投影面 prompt_manifest_superseded(projector promptManifestRecordOf,coreType SupersededOverlay)"
133
+ },
134
+ {
135
+ "id": "A20",
136
+ "source": "wireFace",
137
+ "member": "prompt_manifest_tool",
138
+ "text": "新投影面 prompt_manifest_tool(projector promptManifestRecordOf,coreType NonNullable<Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"tools\"]>[number])"
139
+ },
140
+ {
141
+ "id": "A21",
142
+ "source": "wireFace",
143
+ "member": "prompt_manifest_tool_disclosure",
144
+ "text": "新投影面 prompt_manifest_tool_disclosure(projector promptManifestRecordOf,coreType ToolDisclosureManifest)"
145
+ }
146
+ ],
147
+ "registered": [],
148
+ "removed": [],
149
+ "changed": [
150
+ {
151
+ "id": "C1",
152
+ "source": "engineNotice",
153
+ "member": "permission.rule_row_dropped",
154
+ "text": "附录 D.3 engine_notice 码 `permission.rule_row_dropped` 的detail:`{ rows: [{ rule, scopeRoot }], count, sessionId, runId }` —— `rows` 前八行(引擎逐条限长、中和),`count` 全部;`rows[].rule` = 规则文本的脱敏原值(server 7.120.0:与 `allowed_tool_not_granted` 的 `entries[].entry` 同一只写法) → `{ rows: [{ rule, scopeRoot }], count, sessionId, runId }` —— `rows` 前八行,`count` 全部;`rows[].rule` = 规则文本的脱敏原值(server 7.120.0:与 `allowed_tool_not_granted` 的 `entries[].entry` 同一只写法;core 7.53.0 起引擎对两只码交的就是同一只读法的原串 —— 至多 1 024 码点,更长的截到 1 024 + 一枚截断记号,控制字符作数据随行、渲染端自己中和;此前这一位是引擎中和过的单行形、至多 201 码点,首尾空白的条目两只码不同);`scopeRoot` 仍是中和、限 200"
155
+ }
156
+ ],
157
+ "narrowed": [],
158
+ "closedSetMembers": [
159
+ {
160
+ "set": "errorCode",
161
+ "at": [
162
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
163
+ "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
164
+ ],
165
+ "added": [
166
+ "blob_too_large_for_sql",
167
+ "capability.k8s_lane_required",
168
+ "config.legacy_tool_name",
169
+ "prompt.assembled_role_refused"
170
+ ],
171
+ "registered": [],
172
+ "removed": [],
173
+ "breaking": false
174
+ },
175
+ {
176
+ "set": "capability",
177
+ "at": [
178
+ "docs/ASSISTANT-WIRE-CONTRACT.md#B.1"
179
+ ],
180
+ "added": [
181
+ "inherit_env.own_credential_values_withheld"
182
+ ],
183
+ "registered": [],
184
+ "removed": [],
185
+ "breaking": false
186
+ },
187
+ {
188
+ "set": "engineNotice",
189
+ "at": [
190
+ "docs/ASSISTANT-WIRE-CONTRACT.md#D.3"
191
+ ],
192
+ "added": [
193
+ "config.session_rules_earlier_grammar",
194
+ "mods.registration_refused",
195
+ "route.credential_origin_mismatch"
196
+ ],
197
+ "registered": [],
198
+ "removed": [],
199
+ "breaking": false
200
+ },
201
+ {
202
+ "set": "wireFace",
203
+ "at": [
204
+ "src/trace/wire-projection-faces.ts"
205
+ ],
206
+ "added": [
207
+ "compaction_started",
208
+ "prompt_manifest",
209
+ "prompt_manifest_block",
210
+ "prompt_manifest_chain_link",
211
+ "prompt_manifest_identity",
212
+ "prompt_manifest_identity_layers",
213
+ "prompt_manifest_section",
214
+ "prompt_manifest_section_renderer",
215
+ "prompt_manifest_selectors",
216
+ "prompt_manifest_selectors_host",
217
+ "prompt_manifest_superseded",
218
+ "prompt_manifest_tool",
219
+ "prompt_manifest_tool_disclosure"
220
+ ],
221
+ "removed": [],
222
+ "breaking": false
223
+ }
224
+ ],
225
+ "breaking": 0
226
+ }