@sema-agent/server 7.136.0 → 7.137.0

package/dist/trace/self-minted-wire.js

@@ -148,6 +148,33 @@ export const SELF_MINTED_WIRE = {
             title: { attr: "-", since: "7.133.0" },
         },
     },
+    credentialPlaneSandboxGitState: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.state",
+        members: {
+            on: { attr: "-", since: "7.137.0" },
+            off: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOffReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.reason",
+        members: {
+            single_user: { attr: "-", since: "7.137.0" },
+            lane_without_boundary: { attr: "-", since: "7.137.0" },
+            no_caller_credential: { attr: "-", since: "7.137.0" },
+            center_not_https: { attr: "-", since: "7.137.0" },
+            secret_seat_unverified: { attr: "-", since: "7.137.0" },
+            secret_seat_denied: { attr: "-", since: "7.137.0" },
+            pod_patch_reaches_broker: { attr: "-", since: "7.137.0" },
+            broker_image_unset: { attr: "-", since: "7.137.0" },
+            no_origins: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOriginReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.origins[].reason",
+        members: {
+            insecure_transport: { attr: "-", since: "7.137.0" },
+        },
+    },
     healthAuthKind: {
         at: "GET /health auth.kinds[]",
         members: {
@@ -235,6 +262,15 @@ export const SELF_MINTED_WIRE = {
             not_object: { attr: "-", since: "7.133.0" },
         },
     },
+    inheritEnvRefusalReason: {
+        at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")",
+        members: {
+            unknown_word: { attr: "-", since: "7.137.0" },
+            not_a_string: { attr: "-", since: "7.137.0" },
+            lane_not_host: { attr: "-", since: "7.137.0" },
+            no_authorizer_session: { attr: "-", since: "7.137.0" },
+        },
+    },
     submitIdempotency: {
         at: "提交幂等(<端点>#<面> → 应答状态)",
         members: {
@@ -268,6 +304,14 @@ export const SELF_MINTED_WIRE = {
             center: { attr: "-", since: "7.135.0" },
         },
     },
+    wiringSkillSource: {
+        at: "wiring_manifest skills[].source(run 级技能名册的来处;段只投根腿 / 续跑腿帧,零技能 = [])",
+        members: {
+            factory: { attr: "-", since: "7.137.0" },
+            center: { attr: "-", since: "7.137.0" },
+            request: { attr: "-", since: "7.137.0" },
+        },
+    },
     configCatalogValueVerdict: {
         at: "GET /v1/config/catalog rows[] 的判词位(<键> → 在场律)",
         members: {
@@ -301,6 +345,12 @@ export const SELF_MINTED_WIRE = {
             classifierNoRuling: { attr: "present-iff", since: "7.136.0" },
         },
     },
+    constraintRejectedBodyKey: {
+        at: "409 resume.constraint_rejected 拒体(<键> → 在场律)",
+        members: {
+            acceptableForm: { attr: "present-iff", since: "7.137.0" },
+        },
+    },
     endpointFaceStatus: {
         at: "逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面)",
         members: {
@@ -308,8 +358,15 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)": { attr: 503, since: "7.136.0" },
             "GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)": { attr: 503, since: "7.136.0" },
             "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)": { attr: 503, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_connection_fault_session_gate(会话门那一读,应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_deployment_fault(缺表 / 权限拒;门读与读腿同一形;体 state.file_history_unreadable + permanence: terminal)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_deployment_fault(应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_deployment_fault(体同上)": { attr: 503, since: "7.137.0" },
             "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)": { attr: 500, since: "7.136.0" },
             "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)": { attr: 500, since: "7.136.0" },
+            "POST /v1/tasks#stored_log_invalid(同步腿;打开已存日志撞上结构坏:悬空父 / 自指 / 成环 / 叶子缺席;零工作的拒;体 invalid_session)": { attr: 500, since: "7.137.0" },
             "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)": { attr: 422, since: "7.136.0" },
             "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
@@ -321,6 +378,16 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))": { attr: 409, since: "7.136.0" },
             "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)": { attr: 401, since: "7.136.0" },
+            "ALL principal-reading routes#principal_not_a_name(主体头 / SSO 令牌的 sub / 直连门 JWT 的 sub 不是一位主体的名字:空 / 空白 / 带控制、行段分隔或不可见格式字符;体 principal_not_a_name)": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(新提交;体 request.body_shape + unknownKeys [promptProfile])": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
+            "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny 名内带 *(`*` / `mcp__git*` / `Bas*`)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(settings.permissions.deny|ask)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(体带的门身份不是该会话此刻待决的 plan 门;体 approval_stale + currentPending { checkpointId }?;不落决断、零状态改动)": { attr: 409, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
         },
     },
     refusalSentenceForm: {
@@ -333,6 +400,7 @@ export const SELF_MINTED_WIRE = {
             "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
             "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)": { attr: "title must contain at least one visible character", since: "7.136.0" },
             "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)": { attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", since: "7.136.0" },
+            "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
@@ -341,12 +409,52 @@ export const SELF_MINTED_WIRE = {
             "400 request.body_shape#a2aPeers[i].unknown_key": { attr: "body: unrecognized key(s) on an A2A peer declaration — refused rather than dropped …; Accepted per entry: <keys>", since: "7.136.0" },
             "409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
             "409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
+            "400 request.field_invalid#promptLean.not_boolean": { attr: "promptLean must be a boolean", since: "7.137.0" },
+            "409 checkpoint.unsupported_version#retired_request_key(续跑问点:存体仍带退役请求键 promptProfile)": { attr: "this task was suspended by an earlier server version and its stored request still carries promptProfile, a request key this version no longer reads (…) … submit the work again as a new task with promptLean in place of promptProfile, …", since: "7.137.0" },
+            "400 request.field_invalid#skills[i].mods(顶层技能项)": { attr: "skill.mods is not a request key — skill registrations are code the deployment mounts, not request data (…)", since: "7.137.0" },
+            "400 request.field_invalid#attachments.not_object": { attr: "attachments must be an object { …, mcpInstructions?, mcpUnavailable? }", since: "7.137.0" },
+            "400 request.field_invalid#attachments.mcpUnavailable.not_boolean": { attr: "attachments.mcpUnavailable must be a boolean", since: "7.137.0" },
+            "读成空的规则条目拒句#wildcard_all(授予侧)": { attr: "`*` grants nothing on an allow list (the entries beside it still apply) — …; on a deny or ask list `*` is every tool", since: "7.137.0" },
+            "读成空的规则条目拒句#namespace_wildcard(授予侧)": { attr: "an allow list reads a `*` only in a protocol name's tool segment — …; on a deny or ask list a `*` in a name is a glob over the whole name (…)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": { attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.too_large": { attr: "checkpointId too large (max <n> chars)", since: "7.137.0" },
+            "400 request.body_shape#/decide.checkpointId(落 unsupportedKeys)": { attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId", since: "7.137.0" },
+        },
+    },
+    decisionBodyKey: {
+        at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
+        },
+    },
+    approvalStaleBodyKey: {
+        at: "409 approval_stale 拒体(<端点>#<键> → 在场律)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#currentPending.checkpointId": { attr: "present-iff", since: "7.137.0" },
+        },
+    },
+    parkLedgerRowKey: {
+        at: "GET /v1/runs/:id/events 的 suspended / needs_review 账本行 data(<键> → 在场律)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.137.0" },
+            gate: { attr: "always", since: "1.214.2" },
+            reopened: { attr: "present-iff", since: "1.231.0" },
+            toolCallId: { attr: "present-iff", since: "7.41.0" },
+        },
+    },
+    approvalEnvelopeExtKey: {
+        at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)",
+        members: {
+            answer: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.87.0" },
+            checkpointId: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.137.0" },
+            permissionModeAfter: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.87.0" },
         },
     },
     storeFaultPermanence: {
         at: "文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable)",
         members: {
             transient: { attr: "present-iff", since: "7.136.0" },
+            "terminal#deployment": { attr: "present-iff", since: "7.137.0" },
         },
     },
     configCatalogRow: {
@@ -355,6 +463,14 @@ export const SELF_MINTED_WIRE = {
             SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
         },
     },
+    deviceProtocolRevision: {
+        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)",
+        members: {
+            1: { attr: "base", since: "7.51.0" },
+            2: { attr: "+liveness_no_output", since: "7.133.0" },
+            3: { attr: "+name_too_long", since: "7.137.0" },
+        },
+    },
     wireValueRule: {
         at: "出口值变换(<端点>#<键> → 变换)",
         members: {
@@ -377,6 +493,12 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
+            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
         },
     },
 };

package/dist/trace/wire-projection-faces.d.ts

@@ -129,13 +129,13 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly tool_start: {
         readonly projector: "toolStartEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["requestedBy"];
         readonly minted: readonly [];
     };
     readonly tool_end: {
         readonly projector: "toolEndEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["requestedBy", "answeredBy"];
         readonly minted: readonly [];
     };
     readonly tool_progress: {
@@ -226,9 +226,10 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly wiring_manifest_tenant: {
         readonly projector: "wiringManifestEventData";
         readonly coreType: `WiringManifest & ${string}`;
-        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"];
+        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly ["instructions"];
+        readonly mintedConditional: readonly ["skills"];
     };
     readonly wiring_manifest_operator: {
         readonly projector: "wiringManifestOperatorEventData";
@@ -236,6 +237,7 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly string[];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly string[];
+        readonly mintedConditional: readonly string[];
     };
     readonly engine_notice: {
         readonly projector: "engineNoticeEventData";

package/dist/trace/wire-projection-faces.js

@@ -26,8 +26,8 @@ function withoutSections(all, drop) {
 export const WIRE_PROJECTION_FACES = {
     task_progress: { projector: "taskProgressEventData", coreType: arm("task_progress"), excluded: [], minted: [] },
     task_started: { projector: "taskStartedEventData", coreType: arm("task_started"), excluded: [], minted: [] },
-    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: [], minted: [] },
-    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: [], minted: [] },
+    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: ["requestedBy"], minted: [] },
+    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: ["requestedBy", "answeredBy"], minted: [] },
     tool_progress: { projector: "toolProgressEventData", coreType: arm("tool_progress"), excluded: [], minted: [] },
     tool_disclosure: { projector: "toolDisclosureEventData", coreType: arm("tool_disclosure"), excluded: [], minted: [] },
     tool_roster_delta: { projector: "toolRosterDeltaEventData", coreType: arm("tool_roster_delta"), excluded: [], minted: [] },
@@ -51,9 +51,10 @@ export const WIRE_PROJECTION_FACES = {
     wiring_manifest_tenant: {
         projector: "wiringManifestEventData",
         coreType: `WiringManifest & ${arm("wiring_manifest")}`,
-        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"],
+        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"],
         unwrapped: ["manifest"],
         minted: ["instructions"],
+        mintedConditional: ["skills"],
     },
     wiring_manifest_operator: {
         projector: "wiringManifestOperatorEventData",
@@ -65,6 +66,9 @@ export const WIRE_PROJECTION_FACES = {
         get minted() {
             return WIRE_PROJECTION_FACES.wiring_manifest_tenant.minted;
         },
+        get mintedConditional() {
+            return WIRE_PROJECTION_FACES.wiring_manifest_tenant.mintedConditional;
+        },
     },
     engine_notice: { projector: "engineNoticeEventData", coreType: "EngineNotice", excluded: [], minted: ["ts"] },
     memory_import_report: { projector: "buildImportReportWire", coreType: "MemoryImportReport", excluded: [], minted: [] },

package/dist/web-admin-client/apply-effective.js

@@ -52,7 +52,6 @@ function toModel(m, envDefaults = {}, logger) {
         ...(thinkingDefault ? { defaultThinking: thinkingDefault } : {}),
         ...(compat ? { compat } : {}),
         ...(m.extraBody ? { extraBody: m.extraBody } : {}),
-        ...(Array.isArray(m.promptGuidance) && m.promptGuidance.length > 0 ? { promptGuidance: m.promptGuidance.map(String) } : {}),
         ...buildModelHeadersKey(m.name, m.headers, m.api),
     };
     const explicitAct = m.autoCompactTokens;

package/dist/web-admin-client/center-request.d.ts

@@ -63,6 +63,14 @@ export declare function pullViewQuery(view: {
     readonly worker?: string | undefined;
     readonly principal?: string | undefined;
 }): string;
+/**
+ * 中心回了重定向(`egress-redirect.ts` 的判据:`opaqueredirect` 或任何 3xx;304 除外,见 {@link NOT_MODIFIED}):不跟、不重试,类型化拒。拒句是 `egress-redirect.ts` 既有 helper 的那一句(与 hook 直连腿 /
+ * 记忆 embedder 同一条律),前面冠上这条请求打的那一席;不回显 `Location`。`status` 是中心回的码(续签器据此落「被拒」终态)。
+ */
+export declare class CenterRedirectRefusedError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
 export interface CenterRequestInit {
     readonly method?: "GET" | "POST" | "DELETE";
     /** JSON 请求体(在场 ⇒ `content-type: application/json`)。 */
@@ -84,13 +92,23 @@ export declare function pathBaseUrlRefusal(subject: string, raw: string): string
  * [ref] —— 凭证续签:`POST {issuer}/api/v1/auth/token/refresh`,form `refresh_token=…`(settings-schema `AUTH_V1_PATHS.tokenRefresh`)。
  *  · 以 `issuer` 为根(可带路径前缀;同源与否由续签器先判,本函数只装配);query / fragment 不带过去。
  *  · **不带 Authorization**:这条端点凭 refresh token 认人,手里的 access token 可能已经过期。
- *  · `redirect: "manual"`:3xx 不跟 —— POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效。
- *    3xx 原样交回,续签器按「被拒」处置。
+ *  · 经 {@link sendToCenter}(`redirect: "manual"`):POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效 ⇒
+ *    中心回重定向 ⇒ 抛 {@link CenterRedirectRefusedError}(不跟),续签器把它落成「被拒」终态(配置事故,重试无益)。
  */
 export declare function centerTokenRefresh(issuer: string, refreshToken: string, init: {
     readonly timeoutMs: number;
     readonly fetchImpl?: typeof fetch;
 }): Promise<Response>;
+/**
+ * 鉴权桥的 JWKS 拉取:`GET <jwksUrl>`,不带凭证(公钥集是公开的)。地址缺省 = 签发方(`SEMA_WEB_ADMIN_URL` / `AUTH_BRIDGE_ISSUER`)+ 契约包的
+ * `WEB_ADMIN_JWKS_PATH`,运维可用 `AUTH_BRIDGE_JWKS_URL` 改写 —— 打的是中心的公钥面,所以同经 {@link sendToCenter}:回重定向 ⇒ 同一只类型化拒、不跟
+ * (此前它自带 `redirect: "error"`,是中心面上的第二种重定向读法,拒句是传输层的 `fetch failed`、不点名出路)。体量帽 / 解析 / 缓存仍是调用方
+ * (`auth-bridge.ts`)的事;本函数只发这一次请求。
+ */
+export declare function centerJwksFetch(jwksUrl: string, init: {
+    readonly timeoutMs: number;
+    readonly fetchImpl?: typeof fetch | undefined;
+}): Promise<Response>;
 /**
  * 对中心发一条请求。返回响应与**这次请求所用凭证的身份**(调用方据此给拿回来的候选打分箱标记,
  * 见 `boot/web-admin.ts` 的 LKG / prompt 状态分箱)。

package/dist/web-admin-client/center-request.js

@@ -4,6 +4,7 @@ import { FLEET_LIVE_PATHS, FLEET_PATHS } from "@sema-agent/settings-schema/fleet
 import { CenterCredentialUnavailableError } from "../center-credential.js";
 import { WEB_ADMIN_ENV, httpUrlFlaws } from "@sema-agent/settings-schema";
 import { buildHttpUrlRefusal } from "../url-refusal.js";
+import { egressRedirectRefusal } from "../egress-redirect.js";
 export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
 export const CENTER_PULL_TIMEOUT_MS = 8000;
 export const SETTINGS_SCHEMA_MAJOR = (() => {
@@ -57,6 +58,30 @@ function routePath(route, kind) {
             return "/api/config/execution-keys";
     }
 }
+export class CenterRedirectRefusedError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "CenterRedirectRefusedError";
+    }
+}
+const NOT_MODIFIED = 304;
+async function sendToCenter(fix, url, wire) {
+    const res = await (wire.fetchImpl ?? fetch)(url, {
+        method: wire.method,
+        headers: wire.headers,
+        ...(wire.body !== undefined ? { body: wire.body } : {}),
+        redirect: "manual",
+        signal: AbortSignal.timeout(wire.timeoutMs),
+    });
+    if (res.status === NOT_MODIFIED)
+        return res;
+    const refusal = egressRedirectRefusal(res, fix);
+    if (refusal !== undefined)
+        throw new CenterRedirectRefusedError(res.status, `web-admin center request: ${refusal}`);
+    return res;
+}
 const PATH_BASE_FORBIDS = ["userinfo", "query", "fragment"];
 export function pathBaseUrlRefusal(subject, raw) {
     const flaws = httpUrlFlaws(raw, PATH_BASE_FORBIDS);
@@ -75,12 +100,20 @@ export async function centerTokenRefresh(issuer, refreshToken, init) {
     url.pathname = `${url.pathname.replace(/\/+$/, "")}${AUTH_V1_PATHS.tokenRefresh}`;
     url.search = "";
     url.hash = "";
-    return (init.fetchImpl ?? fetch)(url, {
+    return sendToCenter(`the credential issuer must be the final center address — set ${WEB_ADMIN_ENV.url} to it and sign in again`, url, {
         method: "POST",
         headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR, "content-type": "application/x-www-form-urlencoded" },
         body: new URLSearchParams({ refresh_token: refreshToken }).toString(),
-        redirect: "manual",
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
+    });
+}
+export async function centerJwksFetch(jwksUrl, init) {
+    return sendToCenter(`declare the final JWKS address — AUTH_BRIDGE_JWKS_URL, or the issuer it derives from (${WEB_ADMIN_ENV.url} / AUTH_BRIDGE_ISSUER)`, jwksUrl, {
+        method: "GET",
+        headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR },
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
 }
 export async function centerFetch(center, route, init) {
@@ -99,12 +132,14 @@ export async function centerFetch(center, route, init) {
     const liveBase = FLEET_LIVE_PATHS.includes(path) ? center.liveBaseUrl : undefined;
     if (liveBase !== undefined)
         assertPathBaseUrl(liveBase, WEB_ADMIN_ENV.liveUrl);
+    const seat = liveBase !== undefined ? WEB_ADMIN_ENV.liveUrl : WEB_ADMIN_ENV.url;
     const url = `${(liveBase ?? center.baseUrl).replace(/\/+$/, "")}${path}`;
-    const res = await (init.fetchImpl ?? fetch)(url, {
+    const res = await sendToCenter(`declare the final address in ${seat}`, url, {
         method: init.method ?? "GET",
         headers,
         ...(init.json !== undefined ? { body: JSON.stringify(init.json) } : {}),
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
     return { res, identity: cred.identity };
 }

package/dist/web-admin-client/http-client.js

@@ -3,7 +3,7 @@ import { readEffectiveWire, PrincipalCapsWire } from "@sema-agent/settings-schem
 import { separateRetiredDomains, splitFoldedReadWarnings, withDroppedCatalogEntries } from "./read-warnings.js";
 import { CENTER_PULL_TIMEOUT_MS, centerFetch } from "./center-request.js";
 import { answerStillCurrent } from "../center-credential.js";
-export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
+export async function fetchEffective(center, etag, fetchImpl, worker) {
     const { res, identity } = await centerFetch(center, { kind: "effective", worker }, { etag, timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (res.status === 304)
         return null;
@@ -25,7 +25,7 @@ export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
         ...(retiredDomains.length > 0 ? { retiredDomains: [...retiredDomains] } : {}),
     };
 }
-export async function fetchPrincipalCaps(center, principal, etag, fetchImpl = fetch, worker) {
+export async function fetchPrincipalCaps(center, principal, etag, fetchImpl, worker) {
     const raw = await requestPrincipalView(center, principal, etag, fetchImpl, worker);
     if (raw === null)
         return null;
@@ -99,7 +99,7 @@ async function requestPrincipalView(center, principal, etag, fetchImpl, worker)
     return { json, ...(responseEtag !== null ? { etag: responseEtag } : {}) };
 }
 const PrincipalOrgMemoryEnvelope = PrincipalCapsWire.pick({ principal: true, orgMemory: true });
-export async function fetchPrincipalOrgMemory(center, principal, fetchImpl = fetch, worker) {
+export async function fetchPrincipalOrgMemory(center, principal, fetchImpl, worker) {
     const raw = await requestPrincipalView(center, principal, undefined, fetchImpl, worker);
     if (raw === null)
         throw new Error("web-admin returned 304 to a non-conditional org-directory fetch");
@@ -118,7 +118,7 @@ export class WebAdminHttpError extends Error {
         this.name = "WebAdminHttpError";
     }
 }
-export async function fetchSkillContent(center, contentHash, fetchImpl = fetch) {
+export async function fetchSkillContent(center, contentHash, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "skill-content", contentHash }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`skill content HTTP ${res.status} for ${contentHash}`, res.status);
@@ -129,13 +129,13 @@ export async function fetchSkillContent(center, contentHash, fetchImpl = fetch)
         throw new Error(`skill content hash mismatch for ${contentHash}: computed sha256:${got}`);
     return content;
 }
-export async function fetchPromptArtifact(center, artifactDigest, fetchImpl = fetch) {
+export async function fetchPromptArtifact(center, artifactDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-artifact", digest: artifactDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`prompt artifact HTTP ${res.status} for ${artifactDigest}`, res.status);
     return await res.json();
 }
-export async function fetchPromptBlob(center, contentDigest, fetchImpl = fetch) {
+export async function fetchPromptBlob(center, contentDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-blob", digest: contentDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`prompt blob HTTP ${res.status} for ${contentDigest}`, res.status);

package/dist/web-admin-client/types.d.ts

@@ -75,11 +75,11 @@ export interface CenterModel {
      *  the ONLY way to keep per-model tuning that lived in env (`MODEL_FREQUENCY_PENALTY` etc.) — see the
      *  review-gw heterogeneous-roster migration. MUST be static per published version (prompt-cache prefix). */
     extraBody?: Record<string, unknown>;
-    /** registry-core 0.10.13 ([ref]/[ref]⑤c): per-model behavior-slot mitigation sentences, mirrors core
-     *  `Model.promptGuidance` (core 1.303+ assembles them into the volatile tail's per-model position).
-     *  Same category as `extraBody`: logical model metadata, carried verbatim — without this projection the
-     *  configured sentences parse fine in registry-core but never reach the assembly face ([ref]① 排雷:
-     *  the missing leg made every promptGuidance pilot a false control). */
+    /** registry-core 0.10.13 ([ref]/[ref]⑤c): per-model behavior-slot sentences. core 7.56.0 ([ref]) retired the engine seat
+     *  (`Model.promptGuidance`; per-model guidance is now a prompt overlay keyed on the model's declared traits), while the
+     *  settings-schema `ModelEntry` still accepts the key. It is carried here ONLY so the [ref] judge (`judgeCatalogEntry`)
+     *  can see it: a non-empty list refuses the entry (`config.model_entry_invalid`, field `promptGuidance`) instead of the
+     *  sentences being silently dropped; `toModel` never mints it onto a core `Model`. */
     promptGuidance?: string[];
     /**
      * [ref](7.108.0)—— 这条条目发给供应商的**附加请求头**(部署 ↔ 供应商的契约;今天只有 `anthropic-beta`),上 core 的 per-model

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -18,8 +18,11 @@ dials the device, so the device needs no inbound port, no public address and no
 
 **Discovery before you connect**: `GET /v1/capabilities` carries a `deviceExecutor` key — either `false`
 (this deployment has no device lane) or an object `{ enabled: true, protocolVersion, maxInflightPerDevice,
-wsPath, management }`. Read `wsPath` from there rather than hardcoding it: the path is part of the wire
-contract and reading it means a future path change is not a cross-repo break. `protocolVersion` tells you
+wsPath, management, relayUrl? }`. Read `wsPath` from there rather than hardcoding it: the path is part of the wire
+contract and reading it means a future path change is not a cross-repo break. `relayUrl` (server 7.137.0+) is present
+only when the operator declared one (`DEVICE_RELAY_URL`): the engine sits behind a relay or gateway and the device
+must dial that absolute `ws://` / `wss://` URL verbatim instead of the engine's own address — do not rebuild it from
+the engine address and `wsPath`. Absent ⇒ dial the engine's own address at `wsPath`, as before. `protocolVersion` tells you
 which protocol **revision** the server speaks before you spend a handshake finding out (§2.1: the revision decides
 which `errorCode` words the server accepts from you).
 
@@ -136,7 +139,8 @@ Ask for a new enrollment token and try again."* Do not retry the same token afte
 
 ### 1.2 Connecting
 
-Open a WebSocket to `wsPath` (`GET`, standard upgrade). The server refuses the upgrade with `404` for any
+Open a WebSocket to `relayUrl` when the capability carries one, otherwise to `wsPath` on the engine's own
+address (`GET`, standard upgrade). The server refuses the upgrade with `404` for any
 other path, and with `503` while the replica is draining or when its pre-auth connection caps are full.
 There is no authentication in the upgrade headers — the handshake happens **inside** the protocol.
 
@@ -336,7 +340,7 @@ base64 inside JSON fields.
 | Constant | Value | Meaning |
 |---|---|---|
 | `DEVICE_WS_PATH` | `/v1/device/ws` | the upgrade path (prefer the `wsPath` from `/v1/capabilities`) |
-| `DEVICE_PROTOCOL_VERSION` | `2` | the protocol revision this server speaks (the highest it accepts) |
+| `DEVICE_PROTOCOL_VERSION` | `3` | the protocol revision this server speaks (the highest it accepts) |
 | `DEVICE_MIN_PROTOCOL_VERSION` | `1` | the lowest revision it accepts; below it (or above the highest), a loud `helloReject` — never a silent downgrade |
 | `DEVICE_HELLO_DOMAIN_TAG` | `sema.device.hello.v1` | the handshake signature domain tag (§1.3) |
 
@@ -365,6 +369,7 @@ the union of the rows up to *N*, and the full set at the current revision is the
 |---|---|
 | `1` | `aborted`, `already_exists`, `auth_failed`, `callback_error`, `invalid`, `is_directory`, `not_directory`, `not_found`, `not_supported`, `outcome_unknown`, `permission_denied`, `precondition_failed`, `shell_unavailable`, `spawn_error`, `suspended`, `target_unavailable`, `timeout`, `transport_lost`, `unknown` |
 | `2` | `liveness_no_output` |
+| `3` | `name_too_long` |
 
 Rules: adding a frame or a field is additive and does not raise the revision; adding a word to a closed set the
 server *accepts from you* (today: the `errorCode` set) raises `DEVICE_PROTOCOL_VERSION` and adds a row here; a
@@ -560,7 +565,7 @@ a moment ago. If you omit `created`, the consumer reports the weaker of the two
 
 `message` is required on the failure arm and is shown to the model — make it specific.
 
-This is the full set at the current revision (`2`); the revision table in §2.1 says which revision each word arrived
+This is the full set at the current revision (`3`); the revision table in §2.1 says which revision each word arrived
 with, and an executor sends only the words of the revision it declared (§1.2).
 
 <!-- closed-set: DEVICE_OUTCOME_ERROR_CODES -->
@@ -574,6 +579,7 @@ with, and an executor sends only the words of the revision it declared (§1.2).
 | `invalid` | the arguments do not make sense for this target (e.g. `readLink` on a non-symlink) |
 | `is_directory` | a file operation hit a directory |
 | `liveness_no_output` | **you** killed the command because it produced no output for your own silence window (a hung command); the wall-clock budget `timeoutMs` running out stays `timeout`. The frame has no field for the window length — do not invent one |
+| `name_too_long` | a component of the path is longer than the filesystem's name limit (`NAME_MAX`, 255 bytes; POSIX `ENAMETOOLONG` for such a component) — no directory can hold that name, so it is read upstream as an absence, like `not_found`. A path that is only too long as a whole while every component is short stays `unknown` (such a file may exist, reached from a directory below it). On an exec instruction it is a protocol violation (use `spawn_error` when the process could not be started) and the server reads it as `unknown` |
 | `not_directory` | a directory operation hit a non-directory |
 | `not_found` | the path does not exist |
 | `not_supported` | you do not implement this face (prefer simply not declaring it) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.136.0",
+  "version": "7.137.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -69,7 +69,7 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.55.0",
+    "@sema-agent/core": "7.56.0",
     "@sema-agent/settings-schema": "14.5.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",