@sema-agent/server 7.136.0 → 7.138.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (327) hide show
  1. package/MIGRATION.md +501 -139
  2. package/README.md +1 -0
  3. package/README.zh-CN.md +1 -0
  4. package/USAGE.md +149 -34
  5. package/deploy/sema-up/README.md +14 -0
  6. package/deploy/sema-up/chart/templates/sandbox-rbac.yaml +7 -1
  7. package/deploy/sema-up/stack/sema-stack-cluster.yaml +7 -1
  8. package/dist/approval-card.d.ts +21 -14
  9. package/dist/approval-card.js +1 -0
  10. package/dist/approval-content-kind.d.ts +6 -0
  11. package/dist/approval-content-kind.js +7 -0
  12. package/dist/approval-gate-currency.d.ts +48 -6
  13. package/dist/approval-gate-currency.js +16 -9
  14. package/dist/approval-hmac.d.ts +13 -1
  15. package/dist/approval-hmac.js +1 -1
  16. package/dist/approval.js +3 -3
  17. package/dist/audit.js +1 -0
  18. package/dist/auth-bridge.js +2 -2
  19. package/dist/background-agent-name.d.ts +5 -0
  20. package/dist/background-agent-name.js +5 -0
  21. package/dist/boot/budget-tracing.d.ts +1 -12
  22. package/dist/boot/deployment-mods.d.ts +46 -16
  23. package/dist/boot/deployment-mods.js +82 -6
  24. package/dist/boot/execution-env.d.ts +24 -1
  25. package/dist/boot/execution-env.js +69 -6
  26. package/dist/boot/governance-seams.d.ts +10 -17
  27. package/dist/boot/governance-seams.js +5 -17
  28. package/dist/boot/leader.d.ts +3 -0
  29. package/dist/boot/leader.js +1 -0
  30. package/dist/boot/org-delivery.js +15 -2
  31. package/dist/boot/reapers.d.ts +3 -0
  32. package/dist/boot/reapers.js +15 -1
  33. package/dist/boot/resolve-spec.d.ts +7 -0
  34. package/dist/boot/resolve-spec.js +36 -26
  35. package/dist/boot/retention-lane.d.ts +11 -5
  36. package/dist/boot/retention-lane.js +2 -2
  37. package/dist/boot/runner-deps.d.ts +7 -3
  38. package/dist/boot/runner-deps.js +1 -0
  39. package/dist/boot/stage-03-store-backend.d.ts +1 -1
  40. package/dist/boot/stage-04-stores.d.ts +2 -13
  41. package/dist/boot/stage-05-execution-env.d.ts +6 -13
  42. package/dist/boot/stage-05-execution-env.js +17 -5
  43. package/dist/boot/stage-06-runners.d.ts +6 -13
  44. package/dist/boot/stage-06-runners.js +10 -3
  45. package/dist/boot/stage-07-capability-layer.d.ts +7 -13
  46. package/dist/boot/stage-07-capability-layer.js +3 -3
  47. package/dist/boot/stage-08-reapers.d.ts +7 -13
  48. package/dist/boot/stage-08-reapers.js +2 -1
  49. package/dist/boot/stage-09-leader.d.ts +7 -13
  50. package/dist/boot/stage-09-leader.js +2 -2
  51. package/dist/boot/stage-10-http-server.d.ts +7 -13
  52. package/dist/boot/stage-10-http-server.js +6 -3
  53. package/dist/boot/stores.d.ts +1 -1
  54. package/dist/boot/web-admin.d.ts +5 -2
  55. package/dist/boot/web-admin.js +3 -3
  56. package/dist/brain.js +5 -5
  57. package/dist/broker/broker.d.ts +89 -0
  58. package/dist/broker/broker.js +287 -0
  59. package/dist/broker/constants.d.ts +39 -0
  60. package/dist/broker/constants.js +15 -0
  61. package/dist/broker/http1.d.ts +111 -0
  62. package/dist/broker/http1.js +256 -0
  63. package/dist/broker/lease-book.d.ts +87 -0
  64. package/dist/broker/lease-book.js +142 -0
  65. package/dist/broker/lease-file.d.ts +60 -0
  66. package/dist/broker/lease-file.js +127 -0
  67. package/dist/broker/main.d.ts +2 -0
  68. package/dist/broker/main.js +20 -0
  69. package/dist/budget.d.ts +17 -15
  70. package/dist/budget.js +2 -2
  71. package/dist/capabilities/composite-members.d.ts +2 -1
  72. package/dist/capabilities/composite-members.js +2 -1
  73. package/dist/capabilities/engine-capabilities.js +1 -0
  74. package/dist/capabilities/mcp-probe.d.ts +36 -11
  75. package/dist/capabilities/mcp-probe.js +44 -5
  76. package/dist/capabilities/scenarios.d.ts +23 -8
  77. package/dist/capabilities/scenarios.js +13 -8
  78. package/dist/capabilities/skills.d.ts +28 -5
  79. package/dist/capabilities/skills.js +8 -0
  80. package/dist/capability-facts.d.ts +6 -0
  81. package/dist/capability-facts.js +5 -0
  82. package/dist/center-credential-renewer.js +5 -1
  83. package/dist/checkpoint-ctx-seal-m28.d.ts +3 -10
  84. package/dist/checkpoint-ctx-seal-m28.js +1 -1
  85. package/dist/checkpoint-identity.d.ts +13 -6
  86. package/dist/config-catalog.js +16 -7
  87. package/dist/config-types.d.ts +24 -7
  88. package/dist/config.d.ts +1 -1
  89. package/dist/config.js +42 -13
  90. package/dist/deployment-governance.d.ts +2 -2
  91. package/dist/deployment-governance.js +7 -9
  92. package/dist/deployment-shape.d.ts +6 -6
  93. package/dist/device-ws-protocol.d.ts +1 -0
  94. package/dist/device-ws-protocol.js +2 -1
  95. package/dist/file-history-disclosure.d.ts +4 -2
  96. package/dist/file-history-disclosure.js +2 -0
  97. package/dist/gate-settlement.d.ts +71 -0
  98. package/dist/gate-settlement.js +40 -0
  99. package/dist/hooks/classic-stations.d.ts +12 -54
  100. package/dist/hooks/classic-stations.js +1 -0
  101. package/dist/hooks/command-spawn.d.ts +2 -2
  102. package/dist/hooks/hook-runner.js +14 -14
  103. package/dist/http/admission.js +14 -9
  104. package/dist/http/approval-sweeps.js +4 -3
  105. package/dist/http/caller-trust.d.ts +2 -1
  106. package/dist/http/caller-trust.js +1 -3
  107. package/dist/http/checkpoint-ctx.d.ts +48 -7
  108. package/dist/http/checkpoint-ctx.js +40 -0
  109. package/dist/http/dispatch.d.ts +4 -0
  110. package/dist/http/dispatch.js +18 -10
  111. package/dist/http/durable-run-leg.d.ts +5 -1
  112. package/dist/http/durable-run-leg.js +5 -3
  113. package/dist/http/health-self-report.d.ts +2 -2
  114. package/dist/http/memory-compliance-failure-reply.js +3 -0
  115. package/dist/http/principal-gate.d.ts +15 -10
  116. package/dist/http/principal-gate.js +48 -9
  117. package/dist/http/resume-legs.d.ts +7 -31
  118. package/dist/http/resume-legs.js +185 -126
  119. package/dist/http/route-ctx.d.ts +38 -53
  120. package/dist/http/route-ctx.js +2 -5
  121. package/dist/http/routes/a2a-serve.js +10 -4
  122. package/dist/http/routes/agents-roster.d.ts +1 -1
  123. package/dist/http/routes/agents-roster.js +5 -1
  124. package/dist/http/routes/approvals-assistant.js +24 -10
  125. package/dist/http/routes/capabilities.js +23 -11
  126. package/dist/http/routes/mcp-reconnect.d.ts +3 -2
  127. package/dist/http/routes/mcp-reconnect.js +7 -7
  128. package/dist/http/routes/memory-consolidation.d.ts +1 -1
  129. package/dist/http/routes/memory-origin.d.ts +1 -1
  130. package/dist/http/routes/rules.js +3 -3
  131. package/dist/http/routes/runs.js +13 -8
  132. package/dist/http/routes/session-sync.js +42 -6
  133. package/dist/http/routes/sessions.js +6 -3
  134. package/dist/http/routes/side-query.js +2 -3
  135. package/dist/http/routes/tasks.js +794 -780
  136. package/dist/http/server.d.ts +35 -25
  137. package/dist/http/stored-body-replay.d.ts +3 -3
  138. package/dist/http/stored-body-replay.js +6 -1
  139. package/dist/http/wire-types.d.ts +66 -33
  140. package/dist/identity-source.d.ts +65 -0
  141. package/dist/identity-source.js +45 -0
  142. package/dist/index.d.ts +2 -0
  143. package/dist/index.js +1 -0
  144. package/dist/leader/wire.d.ts +7 -0
  145. package/dist/leader/wire.js +5 -4
  146. package/dist/mcp-assertion-header.d.ts +51 -40
  147. package/dist/mcp-assertion-header.js +10 -11
  148. package/dist/mcp-authorization-face.d.ts +27 -0
  149. package/dist/mcp-authorization-face.js +15 -0
  150. package/dist/memory-operator-faces.d.ts +13 -4
  151. package/dist/memory-operator-faces.js +1 -17
  152. package/dist/memory-store-refusal.d.ts +3 -3
  153. package/dist/memory-sync-client.js +72 -57
  154. package/dist/memory-sync.d.ts +1 -1
  155. package/dist/model-entry-refusal.d.ts +2 -0
  156. package/dist/model-entry-refusal.js +11 -0
  157. package/dist/model-route-gap.d.ts +6 -22
  158. package/dist/model-route-gap.js +7 -5
  159. package/dist/model-select.d.ts +6 -17
  160. package/dist/model-select.js +0 -3
  161. package/dist/mods-declaration.d.ts +110 -0
  162. package/dist/mods-declaration.js +109 -0
  163. package/dist/namespaced-rule-name.d.ts +1 -1
  164. package/dist/observability/err-text.d.ts +5 -0
  165. package/dist/observability/err-text.js +9 -0
  166. package/dist/observability/fail-open.d.ts +17 -1
  167. package/dist/observability/fail-open.js +17 -1
  168. package/dist/observability/metrics.js +1 -1
  169. package/dist/observability/run-terminal.js +1 -0
  170. package/dist/observability/secret-env-scrub.d.ts +1 -1
  171. package/dist/observability/secret-env-scrub.js +1 -1
  172. package/dist/operator-ask.d.ts +2 -2
  173. package/dist/org-delivery-gate.js +1 -1
  174. package/dist/org-memory-admission.d.ts +2 -2
  175. package/dist/org-memory-admission.js +39 -2
  176. package/dist/parked-decide.d.ts +15 -2
  177. package/dist/parked-decide.js +17 -10
  178. package/dist/peer-directory.js +2 -0
  179. package/dist/peer-seat.d.ts +150 -0
  180. package/dist/peer-seat.js +239 -0
  181. package/dist/permission-rule-list.d.ts +2 -2
  182. package/dist/permission-rule-vocab.d.ts +7 -7
  183. package/dist/permission-rule-vocab.js +3 -3
  184. package/dist/plain-string-record.d.ts +38 -0
  185. package/dist/plain-string-record.js +38 -0
  186. package/dist/plugins/background-agent-store-sql.js +6 -3
  187. package/dist/plugins/caching-session-store.d.ts +5 -0
  188. package/dist/plugins/caching-session-store.js +6 -0
  189. package/dist/plugins/checkpoint-store-sql.d.ts +34 -29
  190. package/dist/plugins/checkpoint-store-sql.js +14 -14
  191. package/dist/plugins/file-history-store-sql.js +10 -16
  192. package/dist/plugins/file-run-store.js +8 -2
  193. package/dist/plugins/k8s-exec-protocol.d.ts +69 -13
  194. package/dist/plugins/k8s-exec-protocol.js +116 -28
  195. package/dist/plugins/k8s-pod-delete-failure.d.ts +25 -0
  196. package/dist/plugins/k8s-pod-delete-failure.js +17 -0
  197. package/dist/plugins/k8s-pod-reaper.d.ts +106 -0
  198. package/dist/plugins/k8s-pod-reaper.js +122 -0
  199. package/dist/plugins/local-checkpoint-store.d.ts +4 -17
  200. package/dist/plugins/local-checkpoint-store.js +3 -4
  201. package/dist/plugins/local-session-store.d.ts +66 -27
  202. package/dist/plugins/local-session-store.js +60 -28
  203. package/dist/plugins/mailbox-store-sql.d.ts +11 -3
  204. package/dist/plugins/mailbox-store-sql.js +103 -15
  205. package/dist/plugins/memory-run-store.js +2 -0
  206. package/dist/plugins/memory-sync-store-pg.d.ts +16 -5
  207. package/dist/plugins/memory-sync-store-tidb.d.ts +3 -3
  208. package/dist/plugins/one-time-migrations.d.ts +34 -12
  209. package/dist/plugins/one-time-migrations.js +51 -9
  210. package/dist/plugins/permission-rule-store-file.js +2 -2
  211. package/dist/plugins/permission-rule-store-sql.d.ts +17 -17
  212. package/dist/plugins/permission-rule-store-sql.js +37 -30
  213. package/dist/plugins/pg-pool.js +4 -0
  214. package/dist/plugins/pg-session-storage.d.ts +10 -2
  215. package/dist/plugins/pg-session-storage.js +20 -7
  216. package/dist/plugins/remote-env-adb.d.ts +6 -1
  217. package/dist/plugins/remote-env-adb.js +2 -1
  218. package/dist/plugins/remote-env-device.d.ts +6 -1
  219. package/dist/plugins/remote-env-device.js +5 -1
  220. package/dist/plugins/remote-env-e2b.d.ts +5 -0
  221. package/dist/plugins/remote-env-e2b.js +2 -1
  222. package/dist/plugins/remote-env-file-error.d.ts +8 -1
  223. package/dist/plugins/remote-env-file-error.js +7 -1
  224. package/dist/plugins/remote-env-host.d.ts +10 -2
  225. package/dist/plugins/remote-env-host.js +8 -2
  226. package/dist/plugins/remote-env-k8s.d.ts +140 -11
  227. package/dist/plugins/remote-env-k8s.js +277 -15
  228. package/dist/plugins/remote-env-local-docker.d.ts +5 -0
  229. package/dist/plugins/remote-env-local-docker.js +2 -1
  230. package/dist/plugins/remote-env-ssh.d.ts +6 -1
  231. package/dist/plugins/remote-env-ssh.js +2 -1
  232. package/dist/plugins/retention-store-sql.d.ts +14 -2
  233. package/dist/plugins/retention-store-sql.js +6 -0
  234. package/dist/plugins/run-store-sql.js +10 -4
  235. package/dist/plugins/session-fork.d.ts +10 -13
  236. package/dist/plugins/session-fork.js +5 -25
  237. package/dist/plugins/session-ownership.d.ts +24 -3
  238. package/dist/plugins/session-ownership.js +24 -5
  239. package/dist/plugins/session-workspace-cell.d.ts +17 -0
  240. package/dist/plugins/session-workspace-cell.js +38 -0
  241. package/dist/plugins/sql-errors.d.ts +23 -2
  242. package/dist/plugins/sql-errors.js +15 -0
  243. package/dist/plugins/store-backend.js +7 -7
  244. package/dist/plugins/store-contracts.d.ts +10 -1
  245. package/dist/plugins/store-fault.d.ts +2 -2
  246. package/dist/plugins/store-fault.js +4 -2
  247. package/dist/plugins/tidb-pool.js +13 -0
  248. package/dist/plugins/tidb-session-store.d.ts +17 -2
  249. package/dist/plugins/tidb-session-store.js +18 -7
  250. package/dist/plugins/tool-result-store-sql.d.ts +13 -6
  251. package/dist/plugins/tool-result-store-sql.js +8 -7
  252. package/dist/plugins/worktree-isolation.d.ts +3 -2
  253. package/dist/plugins/worktree-isolation.js +1 -7
  254. package/dist/project-identity.d.ts +1 -14
  255. package/dist/project-identity.js +0 -4
  256. package/dist/request-key-closure.js +1 -1
  257. package/dist/request-value-closure.d.ts +31 -2
  258. package/dist/request-value-closure.js +7 -1
  259. package/dist/rule-entry-list.d.ts +3 -2
  260. package/dist/rule-entry-list.js +2 -2
  261. package/dist/rules-consent.js +12 -7
  262. package/dist/run-local.d.ts +2 -2
  263. package/dist/run-local.js +12 -6
  264. package/dist/runs.d.ts +7 -1
  265. package/dist/runs.js +8 -2
  266. package/dist/runtime-governance.d.ts +5 -5
  267. package/dist/sandbox-git-lease.d.ts +49 -0
  268. package/dist/sandbox-git-lease.js +60 -0
  269. package/dist/sandbox-git-plane.d.ts +84 -0
  270. package/dist/sandbox-git-plane.js +105 -0
  271. package/dist/security.d.ts +16 -4
  272. package/dist/security.js +8 -3
  273. package/dist/server-secret-env.d.ts +12 -3
  274. package/dist/server-secret-env.js +18 -2
  275. package/dist/session-error-wire.d.ts +14 -6
  276. package/dist/session-error-wire.js +2 -1
  277. package/dist/session-incarnation.d.ts +4 -5
  278. package/dist/session-incarnation.js +2 -2
  279. package/dist/session-policy-wire.d.ts +1 -1
  280. package/dist/session-policy-wire.js +2 -2
  281. package/dist/session-sync.d.ts +1 -1
  282. package/dist/session-workspace.d.ts +130 -0
  283. package/dist/session-workspace.js +83 -0
  284. package/dist/spec-fields.d.ts +44 -14
  285. package/dist/spec-fields.js +33 -12
  286. package/dist/standing-answer-grant.d.ts +2 -13
  287. package/dist/standing-answer-grant.js +0 -7
  288. package/dist/stored-request-prompt-profile-m30.d.ts +49 -0
  289. package/dist/stored-request-prompt-profile-m30.js +25 -0
  290. package/dist/task-a2a.d.ts +44 -14
  291. package/dist/task-a2a.js +46 -20
  292. package/dist/task-mcp.d.ts +34 -21
  293. package/dist/task-mcp.js +46 -22
  294. package/dist/task-settings.d.ts +2 -2
  295. package/dist/tool-approval.d.ts +43 -9
  296. package/dist/tool-approval.js +57 -15
  297. package/dist/tool-rule-names.d.ts +5 -0
  298. package/dist/trace/core-keyset-guard.d.ts +34 -19
  299. package/dist/trace/engine-notice-wire.d.ts +1 -1
  300. package/dist/trace/engine-notice-wire.js +4 -0
  301. package/dist/trace/exit-seat.d.ts +20 -1
  302. package/dist/trace/exit-seat.js +5 -2
  303. package/dist/trace/extension-call-face.d.ts +33 -0
  304. package/dist/trace/extension-call-face.js +39 -0
  305. package/dist/trace/ledger-sink.d.ts +4 -5
  306. package/dist/trace/ledger-sink.js +3 -7
  307. package/dist/trace/project.d.ts +62 -10
  308. package/dist/trace/project.js +49 -9
  309. package/dist/trace/redact.d.ts +18 -6
  310. package/dist/trace/redact.js +154 -60
  311. package/dist/trace/self-minted-wire.d.ts +500 -7
  312. package/dist/trace/self-minted-wire.js +182 -1
  313. package/dist/trace/wire-projection-faces.d.ts +7 -5
  314. package/dist/trace/wire-projection-faces.js +9 -4
  315. package/dist/user-authored-text.d.ts +2 -2
  316. package/dist/user-authored-text.js +16 -1
  317. package/dist/web-admin-client/apply-effective.js +0 -1
  318. package/dist/web-admin-client/center-request.d.ts +23 -4
  319. package/dist/web-admin-client/center-request.js +42 -8
  320. package/dist/web-admin-client/http-client.js +6 -6
  321. package/dist/web-admin-client/skills-mcp.d.ts +8 -4
  322. package/dist/web-admin-client/skills-mcp.js +31 -18
  323. package/dist/web-admin-client/types.d.ts +10 -5
  324. package/docs/DEVICE-EXECUTOR-PROTOCOL.md +11 -5
  325. package/package.json +3 -3
  326. package/wire-changes/server@7.137.0.json +825 -0
  327. package/wire-changes/server@7.138.0.json +446 -0
@@ -105,6 +105,10 @@ export declare const SELF_MINTED_WIRE: {
105
105
  readonly attr: 400;
106
106
  readonly since: "7.52.0";
107
107
  };
108
+ readonly "config.memory_erasure_scope": {
109
+ readonly attr: 400;
110
+ readonly since: "7.138.0";
111
+ };
108
112
  readonly "memory.target_outside_store": {
109
113
  readonly attr: 409;
110
114
  readonly since: "7.101.0";
@@ -459,6 +463,72 @@ export declare const SELF_MINTED_WIRE: {
459
463
  };
460
464
  };
461
465
  };
466
+ /** 7.137.0:能力位 `credentialPlane.sandboxGit.state`(成员 git 凭据平面开 / 关;判官 `judgeSandboxGitPlane`)。 */
467
+ readonly credentialPlaneSandboxGitState: {
468
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.state";
469
+ readonly members: {
470
+ on: {
471
+ attr: string;
472
+ since: string;
473
+ };
474
+ off: {
475
+ attr: string;
476
+ since: string;
477
+ };
478
+ };
479
+ };
480
+ /** 7.137.0:`credentialPlane.sandboxGit.reason`(`state:"off"` 时,第一个不成立的前提;成员序 = 判序)。 */
481
+ readonly credentialPlaneSandboxGitOffReason: {
482
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.reason";
483
+ readonly members: {
484
+ single_user: {
485
+ attr: string;
486
+ since: string;
487
+ };
488
+ lane_without_boundary: {
489
+ attr: string;
490
+ since: string;
491
+ };
492
+ no_caller_credential: {
493
+ attr: string;
494
+ since: string;
495
+ };
496
+ center_not_https: {
497
+ attr: string;
498
+ since: string;
499
+ };
500
+ secret_seat_unverified: {
501
+ attr: string;
502
+ since: string;
503
+ };
504
+ secret_seat_denied: {
505
+ attr: string;
506
+ since: string;
507
+ };
508
+ pod_patch_reaches_broker: {
509
+ attr: string;
510
+ since: string;
511
+ };
512
+ broker_image_unset: {
513
+ attr: string;
514
+ since: string;
515
+ };
516
+ no_origins: {
517
+ attr: string;
518
+ since: string;
519
+ };
520
+ };
521
+ };
522
+ /** 7.137.0:`credentialPlane.sandboxGit.origins[].reason`(`state:"on"` 时 `delivers:false` 的那一臂)。 */
523
+ readonly credentialPlaneSandboxGitOriginReason: {
524
+ readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.origins[].reason";
525
+ readonly members: {
526
+ insecure_transport: {
527
+ attr: string;
528
+ since: string;
529
+ };
530
+ };
531
+ };
462
532
  /** 7.121.0:`GET /health` 自报位 `auth.kinds[]` 的成员(验过的身份来源闭集;这台部署的装配能回的那几个)。 */
463
533
  readonly healthAuthKind: {
464
534
  readonly at: "GET /health auth.kinds[]";
@@ -559,6 +629,106 @@ export declare const SELF_MINTED_WIRE: {
559
629
  };
560
630
  };
561
631
  };
632
+ /** `GET /health` 的 `mods` 段:运维声明的 mod 包起服装上了几只(present-iff 装上了;与能力位 `modsDeploymentPackages` 同读一只事实)。 */
633
+ readonly healthModsKey: {
634
+ readonly at: "GET /health mods";
635
+ readonly members: {
636
+ deploymentPackages: {
637
+ attr: string;
638
+ since: string;
639
+ };
640
+ };
641
+ };
642
+ /** `GET /v1/models` 的 `models[]` 行键(只登本版新出现的键;行的其余键不是本版新上 wire):`supportsThinkingOff` —— 「这只模型的推理能不能关」,恒在场的布尔,值 = 引擎唯一读法 `thinkingOffSpelled(条目)`。 */
643
+ readonly modelsRowKey: {
644
+ readonly at: "GET /v1/models models[] 行键(<键> → 在场律)";
645
+ readonly members: {
646
+ readonly supportsThinkingOff: {
647
+ readonly attr: "always";
648
+ readonly since: "7.138.0";
649
+ };
650
+ };
651
+ };
652
+ /** `tool_end` 帧 `gate.disposition`(denied 臂)上的键(<臂>#<键> → 在场律;回放面 `GET /v1/runs/:id/events` 同读):`extension` —— hook 层拒且拒者的扩展注册名已知时 = 那张注册的名字(过出口座)。 */
653
+ readonly toolEndGateDispositionKey: {
654
+ readonly at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)";
655
+ readonly members: {
656
+ readonly "denied#extension": {
657
+ readonly attr: "present-iff hook-layer denial by a named extension";
658
+ readonly since: "7.138.0";
659
+ };
660
+ };
661
+ };
662
+ /** `POST /v1/side-query` 200 体的键(只登本版新出现的键):`account` —— 本次侧查询的一行账(引擎定价、逐字过境;`costMicroUsd` 任何一笔未定价即缺席)。 */
663
+ readonly sideQueryBodyKey: {
664
+ readonly at: "POST /v1/side-query 200 体键(<键> → 在场律)";
665
+ readonly members: {
666
+ readonly account: {
667
+ readonly attr: "always";
668
+ readonly since: "7.138.0";
669
+ };
670
+ };
671
+ };
672
+ /**
673
+ * `POST /v1/side-query` 200 体在失败时的 `errorKind` 值里本版新出现的词(机读失败种类;缺席 = 引擎没给)。词是引擎铸的闭集,本服务逐字过境(`projectSideQueryResult`),词表属主 = 引擎的 `AssistantMessage.errorKind`:
674
+ * `satisfies Partial<Record<…>>` 把「登的是引擎的词」绑在引擎的型上。`image_unprocessable` —— 服务商处理不了请求里的图 —— 是本版新词;此前的三词(`input_too_long` / `length_empty` / `degenerate`,自 7.135.0 起在 wire 上)
675
+ * 不在本集 —— 同上面四个集的口径,只登本版新出现的。
676
+ */
677
+ readonly sideQueryErrorKind: {
678
+ readonly at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)";
679
+ readonly members: {
680
+ image_unprocessable: {
681
+ attr: string;
682
+ since: string;
683
+ };
684
+ };
685
+ };
686
+ /** MCP 授权记录 `authorization`(只投闭集词 `reason`,与 `errorCode:"unauthorized"` 同行)出现的三张面;投影只有 `mcp-authorization-face.ts` 的 `projectMcpAuthorization` 一只,三面同读。 */
687
+ readonly mcpAuthorizationKey: {
688
+ readonly at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)";
689
+ readonly members: {
690
+ readonly "wiring_manifest.mcp[]#authorization": {
691
+ readonly attr: "present-iff errorCode unauthorized";
692
+ readonly since: "7.138.0";
693
+ };
694
+ readonly "POST /v1/sessions/:id/mcp/reconnect#status.authorization": {
695
+ readonly attr: "present-iff errorCode unauthorized";
696
+ readonly since: "7.138.0";
697
+ };
698
+ readonly "GET /v1/sessions/:id/mcp#servers[].authorization": {
699
+ readonly attr: "present-iff server unauthorized (this face carries no errorCode)";
700
+ readonly since: "7.138.0";
701
+ };
702
+ };
703
+ };
704
+ /** `wiring_manifest.mods[].provenance`(每条腿的清单帧,每行 mod 注册一个出处标签):本服务自铸的注册带 `server`、运维声明的包带 `operator`;与同一行上 `seat` 的座词(`deployment` / `task`)互不相交。 */
705
+ readonly wiringModProvenance: {
706
+ readonly at: "wiring_manifest mods[].provenance";
707
+ readonly members: {
708
+ server: {
709
+ attr: string;
710
+ since: string;
711
+ };
712
+ operator: {
713
+ attr: string;
714
+ since: string;
715
+ };
716
+ };
717
+ };
718
+ /** 扩展经 `$.tool.call` 自己发起的调用是谁要的(core `AskRequest.requestedBy`)在审批开卡帧上的出现面:旧族 `tool_approval`、呈卡族 `approval_request` 顶层(卡外座)。 */
719
+ readonly extensionRequesterSeat: {
720
+ readonly at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)";
721
+ readonly members: {
722
+ "tool_approval#requestedBy": {
723
+ attr: string;
724
+ since: string;
725
+ };
726
+ "approval_request#requestedBy": {
727
+ attr: string;
728
+ since: string;
729
+ };
730
+ };
731
+ };
562
732
  /**
563
733
  * `request.field_conflict` 拒体的 `detail.kind`(字段之间互斥 / 互为前置的哪一类;`detail.fields` = 请求体坐标,不在本表 —— 它不是闭集)。
564
734
  * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_KINDS`:`satisfies Record<FieldConflictKind, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
@@ -684,6 +854,33 @@ export declare const SELF_MINTED_WIRE: {
684
854
  };
685
855
  };
686
856
  };
857
+ /**
858
+ * `inheritEnv` 的三只 400 `request.field_invalid`(值形 / 车道 / 无会话)拒体的 `reason`(体另带 `field: "inheritEnv"`;一种拒因一个词)。词表属主 = `request-value-closure.ts` 的
859
+ * `INHERIT_ENV_REFUSAL_REASONS`(唯一铸点 `inheritEnvFacts`;受理门与 resolveSpec 两腿只经它出机读位);`satisfies Record<InheritEnvRefusalReason, …>`。
860
+ * `unknown_word` = 是字符串但不在受理词表;`not_a_string` = 根本不是字符串;`lane_not_host` = `"all"` 落在非 host 车道;`no_authorizer_session` = `"all"` 而部署不接 authorizer。
861
+ * 422 `request.host_posture_refused` 不在这组(姿态拒,不带 `field` / `reason`)。行为钉:`test/inherit-env-request-key.test.ts`。
862
+ */
863
+ readonly inheritEnvRefusalReason: {
864
+ readonly at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")";
865
+ readonly members: {
866
+ unknown_word: {
867
+ attr: string;
868
+ since: string;
869
+ };
870
+ not_a_string: {
871
+ attr: string;
872
+ since: string;
873
+ };
874
+ lane_not_host: {
875
+ attr: string;
876
+ since: string;
877
+ };
878
+ no_authorizer_session: {
879
+ attr: string;
880
+ since: string;
881
+ };
882
+ };
883
+ };
687
884
  /**
688
885
  * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
689
886
  * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0)。
@@ -772,6 +969,27 @@ export declare const SELF_MINTED_WIRE: {
772
969
  };
773
970
  };
774
971
  };
972
+ /**
973
+ * run 级技能名册 `wiring_manifest.skills[].source` 的闭集 = 部署两处 ∪ `request`(属主 = `capabilities/skills.ts` 的 `RunSkillSource`;唯一写者 =
974
+ * `capabilities/scenarios.ts` 的 `buildRunSkills`)。条目形与场景卡技能清单同一张,来处多一个 `request`(本请求体自带、没被场景同名盖掉的)。
975
+ */
976
+ readonly wiringSkillSource: {
977
+ readonly at: "wiring_manifest skills[].source(run 级技能名册的来处;段只投根腿 / 续跑腿帧,零技能 = [])";
978
+ readonly members: {
979
+ factory: {
980
+ attr: string;
981
+ since: string;
982
+ };
983
+ center: {
984
+ attr: string;
985
+ since: string;
986
+ };
987
+ request: {
988
+ attr: string;
989
+ since: string;
990
+ };
991
+ };
992
+ };
775
993
  /**
776
994
  * [ref](7.133.0):`GET /v1/config/catalog` 行上**对 `effectiveValue` 的判词位**(闭集 `CatalogValueVerdict`,属主 `config-catalog.ts`;行接口经映射型声明,
777
995
  * 每一位只取 `true`)。属性 = 在场律 `present-iff`:只在为真时出键,恒不铸 `false`,缺席 = 没有这件事(老 server 上也缺席 —— 对消费方两者的下一步相同:按值原样渲染)。
@@ -866,6 +1084,20 @@ export declare const SELF_MINTED_WIRE: {
866
1084
  };
867
1085
  };
868
1086
  };
1087
+ /**
1088
+ * `409 resume.constraint_rejected` 拒体上本服务加的键(7.137.0,引擎 7.56.0):续跑的编辑复判只收改写后的那一形时,那一形的入参 `acceptableForm`
1089
+ * (引擎 `detail.editRewritten.acceptableForm`,经审批卡 `args` 同一只读法:脱敏 + 字节帽,超帽 ⇒ 缺席)。拒体没有可 `satisfies` 的全集型,行为由对应 CHANGELOG 条的钉证
1090
+ * (`test/durable-resume-http.test.ts`)。在场律 `present-iff`。
1091
+ */
1092
+ readonly constraintRejectedBodyKey: {
1093
+ readonly at: "409 resume.constraint_rejected 拒体(<键> → 在场律)";
1094
+ readonly members: {
1095
+ readonly acceptableForm: {
1096
+ readonly attr: "present-iff";
1097
+ readonly since: "7.137.0";
1098
+ };
1099
+ };
1100
+ };
869
1101
  /**
870
1102
  * 逐端点「应答面 → HTTP 状态」映射里**本版改了状态的面**(形照 `submitIdempotency`:`<端点>#<面>` → 状态;面是调用方能观察到的那一形,不是内部分支名)。
871
1103
  * `since` 记**这一面以这个状态答**的起始版本;每个成员的旧状态写在 CHANGELOG 对应条里(旧状态的那一形此前没有登记,清单里它们是「本版新上 wire」,不是 changed)。
@@ -890,6 +1122,30 @@ export declare const SELF_MINTED_WIRE: {
890
1122
  readonly attr: 503;
891
1123
  readonly since: "7.136.0";
892
1124
  };
1125
+ readonly "GET /v1/sessions/:id/sync/manifest#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB;\u4F53\u540C\u4E0A)": {
1126
+ readonly attr: 503;
1127
+ readonly since: "7.137.0";
1128
+ };
1129
+ readonly "GET /v1/sessions/:id/sync/entries#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB,\u5E94\u7B54\u5934\u53D1\u51FA\u4E4B\u524D;\u4F53\u540C\u4E0A)": {
1130
+ readonly attr: 503;
1131
+ readonly since: "7.137.0";
1132
+ };
1133
+ readonly "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault_session_gate(\u4F1A\u8BDD\u95E8\u90A3\u4E00\u8BFB;\u4F53\u540C\u4E0A)": {
1134
+ readonly attr: 503;
1135
+ readonly since: "7.137.0";
1136
+ };
1137
+ readonly "GET /v1/sessions/:id/sync/manifest#store_deployment_fault(\u7F3A\u8868 / \u6743\u9650\u62D2;\u95E8\u8BFB\u4E0E\u8BFB\u817F\u540C\u4E00\u5F62;\u4F53 state.file_history_unreadable + permanence: terminal)": {
1138
+ readonly attr: 503;
1139
+ readonly since: "7.137.0";
1140
+ };
1141
+ readonly "GET /v1/sessions/:id/sync/entries#store_deployment_fault(\u5E94\u7B54\u5934\u53D1\u51FA\u4E4B\u524D;\u4F53\u540C\u4E0A)": {
1142
+ readonly attr: 503;
1143
+ readonly since: "7.137.0";
1144
+ };
1145
+ readonly "GET /v1/sessions/:id/sync/history/blobs/:hash#store_deployment_fault(\u4F53\u540C\u4E0A)": {
1146
+ readonly attr: 503;
1147
+ readonly since: "7.137.0";
1148
+ };
893
1149
  readonly "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;\u5F00\u6D41\u4E4B\u524D;\u4F53 corrupt_session)": {
894
1150
  readonly attr: 500;
895
1151
  readonly since: "7.136.0";
@@ -898,6 +1154,10 @@ export declare const SELF_MINTED_WIRE: {
898
1154
  readonly attr: 500;
899
1155
  readonly since: "7.136.0";
900
1156
  };
1157
+ readonly "POST /v1/tasks#stored_log_invalid(\u540C\u6B65\u817F;\u6253\u5F00\u5DF2\u5B58\u65E5\u5FD7\u649E\u4E0A\u7ED3\u6784\u574F:\u60AC\u7A7A\u7236 / \u81EA\u6307 / \u6210\u73AF / \u53F6\u5B50\u7F3A\u5E2D;\u96F6\u5DE5\u4F5C\u7684\u62D2;\u4F53 invalid_session)": {
1158
+ readonly attr: 500;
1159
+ readonly since: "7.137.0";
1160
+ };
901
1161
  readonly "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(\u4F53 missing_blob)": {
902
1162
  readonly attr: 422;
903
1163
  readonly since: "7.136.0";
@@ -942,6 +1202,46 @@ export declare const SELF_MINTED_WIRE: {
942
1202
  readonly attr: 401;
943
1203
  readonly since: "7.136.0";
944
1204
  };
1205
+ readonly "ALL principal-reading routes#principal_not_a_name(\u4E3B\u4F53\u5934 / SSO \u4EE4\u724C\u7684 sub / \u76F4\u8FDE\u95E8 JWT \u7684 sub \u4E0D\u662F\u4E00\u4F4D\u4E3B\u4F53\u7684\u540D\u5B57:\u7A7A / \u7A7A\u767D / \u5E26\u63A7\u5236\u3001\u884C\u6BB5\u5206\u9694\u6216\u4E0D\u53EF\u89C1\u683C\u5F0F\u5B57\u7B26;\u4F53 principal_not_a_name)": {
1206
+ readonly attr: 400;
1207
+ readonly since: "7.137.0";
1208
+ };
1209
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(\u65B0\u63D0\u4EA4;\u4F53 request.body_shape + unknownKeys [promptProfile])": {
1210
+ readonly attr: 400;
1211
+ readonly since: "7.137.0";
1212
+ };
1213
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(\u65B0\u63D0\u4EA4;\u4F53 request.field_invalid)": {
1214
+ readonly attr: 400;
1215
+ readonly since: "7.137.0";
1216
+ };
1217
+ readonly "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny \u540D\u5185\u5E26 *(`*` / `mcp__git*` / `Bas*`)": {
1218
+ readonly attr: 200;
1219
+ readonly since: "7.137.0";
1220
+ };
1221
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(settings.permissions.deny|ask)": {
1222
+ readonly attr: 200;
1223
+ readonly since: "7.137.0";
1224
+ };
1225
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(excludeTools)": {
1226
+ readonly attr: 200;
1227
+ readonly since: "7.137.0";
1228
+ };
1229
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": {
1230
+ readonly attr: 200;
1231
+ readonly since: "7.137.0";
1232
+ };
1233
+ readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(agents[i].denyTools)": {
1234
+ readonly attr: 200;
1235
+ readonly since: "7.137.0";
1236
+ };
1237
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(\u4F53\u5E26\u7684\u95E8\u8EAB\u4EFD\u4E0D\u662F\u8BE5\u4F1A\u8BDD\u6B64\u523B\u5F85\u51B3\u7684 plan \u95E8;\u4F53 approval_stale + currentPending { checkpointId }?;\u4E0D\u843D\u51B3\u65AD\u3001\u96F6\u72B6\u6001\u6539\u52A8)": {
1238
+ readonly attr: 409;
1239
+ readonly since: "7.137.0";
1240
+ };
1241
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(\u4F53\u5E26\u5F53\u524D\u95E8\u7684\u8EAB\u4EFD;\u53D7\u7406\u5F62\u4E0E\u4E0D\u5E26\u952E\u540C)": {
1242
+ readonly attr: 200;
1243
+ readonly since: "7.137.0";
1244
+ };
945
1245
  };
946
1246
  };
947
1247
  /**
@@ -951,10 +1251,6 @@ export declare const SELF_MINTED_WIRE: {
951
1251
  readonly refusalSentenceForm: {
952
1252
  readonly at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)";
953
1253
  readonly members: {
954
- readonly "409 decide.row_unrevivable#no_agent_name": {
955
- readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
956
- readonly since: "7.136.0";
957
- };
958
1254
  readonly "409 decide.row_unrevivable#no_root_anchor": {
959
1255
  readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
960
1256
  readonly since: "7.136.0";
@@ -979,6 +1275,10 @@ export declare const SELF_MINTED_WIRE: {
979
1275
  readonly attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later";
980
1276
  readonly since: "7.136.0";
981
1277
  };
1278
+ readonly "503 state.file_history_unreadable#store_deployment_fault(\u4F1A\u8BDD\u540C\u6B65\u4E09\u6761\u62C9\u53D6\u53E3)": {
1279
+ readonly attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store";
1280
+ readonly since: "7.137.0";
1281
+ };
982
1282
  readonly "connect_failed(run \u5931\u8D25\u7EC8\u5C40)#snapshot_bucket_missing(k8s \u8F66\u9053\u8BFB latest \u5F97 404 NoSuchBucket;\u8FDE\u6C99\u7BB1\u5931\u8D25,\u4E00\u53EA pod \u90FD\u4E0D\u5EFA)": {
983
1283
  readonly attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …";
984
1284
  readonly since: "7.136.0";
@@ -1011,12 +1311,147 @@ export declare const SELF_MINTED_WIRE: {
1011
1311
  readonly attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey";
1012
1312
  readonly since: "7.136.0";
1013
1313
  };
1314
+ readonly "400 request.field_invalid#promptLean.not_boolean": {
1315
+ readonly attr: "promptLean must be a boolean";
1316
+ readonly since: "7.137.0";
1317
+ };
1318
+ readonly "409 checkpoint.unsupported_version#retired_request_key(\u7EED\u8DD1\u95EE\u70B9:\u5B58\u4F53\u4ECD\u5E26\u9000\u5F79\u8BF7\u6C42\u952E promptProfile)": {
1319
+ readonly attr: "this task was suspended by an earlier server version and its stored request still carries promptProfile, a request key this version no longer reads (…) … submit the work again as a new task with promptLean in place of promptProfile, …";
1320
+ readonly since: "7.137.0";
1321
+ };
1322
+ readonly "400 request.field_invalid#skills[i].mods(\u9876\u5C42\u6280\u80FD\u9879)": {
1323
+ readonly attr: "skill.mods is not a request key — skill registrations are code the deployment mounts, not request data (…)";
1324
+ readonly since: "7.137.0";
1325
+ };
1326
+ readonly "400 request.field_invalid#attachments.not_object": {
1327
+ readonly attr: "attachments must be an object { …, mcpInstructions?, mcpUnavailable? }";
1328
+ readonly since: "7.137.0";
1329
+ };
1330
+ readonly "400 request.field_invalid#attachments.mcpUnavailable.not_boolean": {
1331
+ readonly attr: "attachments.mcpUnavailable must be a boolean";
1332
+ readonly since: "7.137.0";
1333
+ };
1334
+ readonly "\u8BFB\u6210\u7A7A\u7684\u89C4\u5219\u6761\u76EE\u62D2\u53E5#wildcard_all(\u6388\u4E88\u4FA7)": {
1335
+ readonly attr: "`*` grants nothing on an allow list (the entries beside it still apply) — …; on a deny or ask list `*` is every tool";
1336
+ readonly since: "7.137.0";
1337
+ };
1338
+ readonly "\u8BFB\u6210\u7A7A\u7684\u89C4\u5219\u6761\u76EE\u62D2\u53E5#namespace_wildcard(\u6388\u4E88\u4FA7)": {
1339
+ readonly attr: "an allow list reads a `*` only in a protocol name's tool segment — …; on a deny or ask list a `*` in a name is a glob over the whole name (…)";
1340
+ readonly since: "7.137.0";
1341
+ };
1342
+ readonly "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": {
1343
+ readonly attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)";
1344
+ readonly since: "7.137.0";
1345
+ };
1346
+ readonly "400 request.field_invalid#plan_review.checkpointId.too_large": {
1347
+ readonly attr: "checkpointId too large (max <n> chars)";
1348
+ readonly since: "7.137.0";
1349
+ };
1350
+ readonly "400 request.body_shape#/decide.checkpointId(\u843D unsupportedKeys)": {
1351
+ readonly attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId";
1352
+ readonly since: "7.137.0";
1353
+ };
1354
+ };
1355
+ };
1356
+ /**
1357
+ * 回决门族的决断体**受理键**里本版新增的(`<端点>#<键>` → 读法)。受理集的属主是各门的 `*_BODY_DECLARED_KEYS`(双向编译期门咬着各自的体类型);本表只登「本版新上 wire 的那一键」,
1358
+ * 供清单对账。`attr` 写这一键的读法骨架(可选 / 值形 / 直连门上的处置)。
1359
+ */
1360
+ readonly decisionBodyKey: {
1361
+ readonly at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)";
1362
+ readonly members: {
1363
+ readonly "POST /v1/assistant/tasks/:id/plan_review#checkpointId": {
1364
+ readonly attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext";
1365
+ readonly since: "7.137.0";
1366
+ };
1367
+ };
1368
+ };
1369
+ /**
1370
+ * `409 approval_stale` 拒体上的键,按出现面登记(`<端点>#<键>` → 在场律)。`currentPending` 的值形是每道门一形(`wire-types.ts` 的 `ApprovalStaleCurrentPending`:
1371
+ * 这道门的决断体回显的那几位);本表只登本版新出现的面(`/decide` 那一形早于本表,不在这里)。
1372
+ */
1373
+ readonly approvalStaleBodyKey: {
1374
+ readonly at: "409 approval_stale 拒体(<端点>#<键> → 在场律)";
1375
+ readonly members: {
1376
+ readonly "POST /v1/assistant/tasks/:id/plan_review#currentPending.checkpointId": {
1377
+ readonly attr: "present-iff";
1378
+ readonly since: "7.137.0";
1379
+ };
1380
+ };
1381
+ };
1382
+ /**
1383
+ * park 账本行(`GET /v1/runs/:id/events` 的 `suspended` / `needs_review`)的 `data` 键集 —— `satisfies Record<keyof ParkEventData, …>`:键集属主 = `trace/project.ts` 的
1384
+ * `ParkEventData`,唯一构造器 `parkEventData`(后台腿 / detach 腿 / 续跑腿再停与重开臂同经它;加一键而本表没跟 ⇒ tsc 红)。在场律:`gate` 恒在场(无因由 ⇒ null),其余 present-iff。
1385
+ * 早于本版的三键只是登记(`gate` 早于本仓 org 树首 tag;`reopened` 自 1.231.0 的重开臂;`toolCallId` 自 7.41.0)。
1386
+ */
1387
+ readonly parkLedgerRowKey: {
1388
+ readonly at: "GET /v1/runs/:id/events 的 suspended / needs_review 账本行 data(<键> → 在场律)";
1389
+ readonly members: {
1390
+ checkpointId: {
1391
+ attr: string;
1392
+ since: string;
1393
+ };
1394
+ gate: {
1395
+ attr: string;
1396
+ since: string;
1397
+ };
1398
+ reopened: {
1399
+ attr: string;
1400
+ since: string;
1401
+ };
1402
+ toolCallId: {
1403
+ attr: string;
1404
+ since: string;
1405
+ };
1406
+ };
1407
+ };
1408
+ /**
1409
+ * 回决门族 200 体上的**结清证据**(`<键>` → 在场律):`/decide` 的受理体 / 终局体 / 幂等回放 / 停驻子代复活成功 / 不可复活子代的 deny 作废,
1410
+ * `/resume` 与 `/plan_review` 的受理体 / 终局体(经停驻赎回席的迟到回决体原样转出)。键集属主 = `gate-settlement.ts` 的 `GateSettlementEvidence`
1411
+ * (唯一铸点 `buildSettlementEvidence`,五个边界;`checkpointId` 只随位出现)。
1412
+ */
1413
+ readonly settlementEvidenceKey: {
1414
+ readonly at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)";
1415
+ readonly members: {
1416
+ checkpointId: {
1417
+ attr: string;
1418
+ since: string;
1419
+ };
1420
+ decisionCommitted: {
1421
+ attr: string;
1422
+ since: string;
1423
+ };
1014
1424
  };
1015
1425
  };
1016
1426
  /**
1017
- * 文件历史店的故障答里 `permanence`(店对这次故障的重试类判断,体键,店没判则缺席)的 `transient` 一词:本版起库断连等**连接类故障**店判 `transient`,
1018
- * 出现在 `422 adopt_failed` / `restore_failed` 等店答与 `503 state.file_history_unreadable` 体上(词表属主 = 引擎的 `GovernanceRetryClass` 两词,另一词 `terminal` 自 7.135.0 起由永久码带,不在本表)。
1019
- * 在场律 `present-iff`:店判了才带,没判缺席。
1427
+ * 直连门决断证明的 HMAC 信封**扩展键闭集**(第 6 位扩展对象的键;字典序 = JSON 键序;在场才追加,缺席 ⇒ 字节逐字不变)。`satisfies Record<ApprovalEnvelopeExtKey, …>`:
1428
+ * 闭集属主 = `approval-hmac.ts` 的 `APPROVAL_ENVELOPE_EXT_KEYS`(加一个词而本表没跟 ⇒ tsc 红)。跨仓签名器照这张闭集实现,所以它是 wire。`attr` = 用它的那道门。
1429
+ */
1430
+ readonly approvalEnvelopeExtKey: {
1431
+ readonly at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)";
1432
+ readonly members: {
1433
+ answer: {
1434
+ attr: string;
1435
+ since: string;
1436
+ };
1437
+ checkpointId: {
1438
+ attr: string;
1439
+ since: string;
1440
+ };
1441
+ permissionModeAfter: {
1442
+ attr: string;
1443
+ since: string;
1444
+ };
1445
+ };
1446
+ };
1447
+ /**
1448
+ * 文件历史店的故障答里 `permanence`(店对这次故障的重试类判断,体键,店没判则缺席;词表属主 = 引擎的 `GovernanceRetryClass` 两词),出现在 `422 adopt_failed` /
1449
+ * `restore_failed` 等店答与 `503 state.file_history_unreadable` 体上。成员 = 「哪一类故障让店带上哪个词」,每一类自它进 wire 的那一版起一行:
1450
+ * · `transient` —— 连接类故障(库断连等),7.136.0 起(成员名就是词本身,已发清单按它读,不改名);
1451
+ * · `terminal#deployment` —— 部署错配类(缺表 PG `42P01` / MySQL 协议 `1146`、权限拒 PG `42501` / MySQL 协议 `1142`;判官 `storeFaultClassOf` 的 `deployment` 词),7.137.0 起;
1452
+ * 此前这两形不判、体里没有 `permanence`。
1453
+ * 会话同步三条拉取口的 `503 state.file_history_unreadable` 对这一类同样带 `terminal`(那一面此前是 500,状态码登记在 `endpointFaceStatus` 的 `store_deployment_fault` 三行)。
1454
+ * 永久码带的 `terminal`(7.135.0 起,`blob_too_large_for_sql`)不在本表:它随那只码登记在附录 A。在场律 `present-iff`:店判了才带,没判缺席。
1020
1455
  */
1021
1456
  readonly storeFaultPermanence: {
1022
1457
  readonly at: "文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable)";
@@ -1025,6 +1460,10 @@ export declare const SELF_MINTED_WIRE: {
1025
1460
  readonly attr: "present-iff";
1026
1461
  readonly since: "7.136.0";
1027
1462
  };
1463
+ readonly "terminal#deployment": {
1464
+ readonly attr: "present-iff";
1465
+ readonly since: "7.137.0";
1466
+ };
1028
1467
  };
1029
1468
  };
1030
1469
  /**
@@ -1040,6 +1479,27 @@ export declare const SELF_MINTED_WIRE: {
1040
1479
  };
1041
1480
  };
1042
1481
  };
1482
+ /**
1483
+ * 设备 WS 协议的修订号(成员 = 修订号;能力位 `deviceExecutor.protocolVersion` 报最高那一只,challenge 帧同值)。`attr` = 那一修订号加进 executor → server 结局码闭集的词
1484
+ * (修订号 1 = 首版的基集 `base`,词集见随包 `docs/DEVICE-EXECUTOR-PROTOCOL.md` §2.1);executor 声明哪个修订号就只发到那一行为止的词。
1485
+ */
1486
+ readonly deviceProtocolRevision: {
1487
+ readonly at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)";
1488
+ readonly members: {
1489
+ 1: {
1490
+ attr: string;
1491
+ since: string;
1492
+ };
1493
+ 2: {
1494
+ attr: string;
1495
+ since: string;
1496
+ };
1497
+ 3: {
1498
+ attr: string;
1499
+ since: string;
1500
+ };
1501
+ };
1502
+ };
1043
1503
  /** 本仓在出口对 core 值做的变换(值变、键不变)。 */
1044
1504
  readonly wireValueRule: {
1045
1505
  readonly at: "出口值变换(<端点>#<键> → 变换)";
@@ -1164,6 +1624,39 @@ export declare const SELF_MINTED_WIRE: {
1164
1624
  readonly attr: "absent=>kata";
1165
1625
  readonly since: "7.136.0";
1166
1626
  };
1627
+ readonly "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": {
1628
+ readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot";
1629
+ readonly since: "7.137.0";
1630
+ };
1631
+ /**
1632
+ * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;
1633
+ * 引擎记号占了方案词位时头值余下的部分照抹;引擎放过的形照抹),界 200(切点不落进记号)。7.137.0 是按记号切开、逐段过 `redactSecrets` 的另一只读法
1634
+ * (头名与值分在两段 ⇒ 方案词位上的值原样)。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥ 与「引擎记号占了方案词位」三形。
1635
+ */
1636
+ readonly "GET /v1/sessions/:id/mcp#servers[].error": {
1637
+ readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
1638
+ readonly since: "7.138.0";
1639
+ };
1640
+ readonly "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": {
1641
+ readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
1642
+ readonly since: "7.138.0";
1643
+ };
1644
+ /**
1645
+ * 7.137.0:`GET /v1/config/catalog` 已有行的字面(`semantics` 说明句 / `derivedDefaultNote` 缺席说明;键与行集不变,写法同上一段 7.136.0 的行):提交面的带图预检退役后,
1646
+ * `MODEL_VISION` 的两句与 `MODEL_CHEAP_VISION` 的一句改指会话流的 `model.capability_downgraded`(引擎在替换图片的那一刻铸;此前写「提交时计数并告警 / 让预检出信号 / 让预检真拦」)。
1647
+ */
1648
+ readonly "GET /v1/config/catalog#rows[MODEL_VISION].semantics": {
1649
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1650
+ readonly since: "7.137.0";
1651
+ };
1652
+ readonly "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": {
1653
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1654
+ readonly since: "7.137.0";
1655
+ };
1656
+ readonly "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": {
1657
+ readonly attr: "names-engine-notice:model.capability_downgraded";
1658
+ readonly since: "7.137.0";
1659
+ };
1167
1660
  };
1168
1661
  };
1169
1662
  };