@sema-agent/server 7.136.0 → 7.138.0

package/dist/trace/self-minted-wire.js

@@ -39,6 +39,7 @@ export const SELF_MINTED_WIRE = {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
             "config.memory_erasure_request": { attr: 400, since: "7.52.0" },
+            "config.memory_erasure_scope": { attr: 400, since: "7.138.0" },
             "memory.target_outside_store": { attr: 409, since: "7.101.0" },
             "memory.scope_home_not_directory": { attr: 409, since: "7.118.0" },
             "memory.erasure_evidence_unavailable": { attr: 409, since: "7.108.0" },
@@ -148,6 +149,33 @@ export const SELF_MINTED_WIRE = {
             title: { attr: "-", since: "7.133.0" },
         },
     },
+    credentialPlaneSandboxGitState: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.state",
+        members: {
+            on: { attr: "-", since: "7.137.0" },
+            off: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOffReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.reason",
+        members: {
+            single_user: { attr: "-", since: "7.137.0" },
+            lane_without_boundary: { attr: "-", since: "7.137.0" },
+            no_caller_credential: { attr: "-", since: "7.137.0" },
+            center_not_https: { attr: "-", since: "7.137.0" },
+            secret_seat_unverified: { attr: "-", since: "7.137.0" },
+            secret_seat_denied: { attr: "-", since: "7.137.0" },
+            pod_patch_reaches_broker: { attr: "-", since: "7.137.0" },
+            broker_image_unset: { attr: "-", since: "7.137.0" },
+            no_origins: { attr: "-", since: "7.137.0" },
+        },
+    },
+    credentialPlaneSandboxGitOriginReason: {
+        at: "GET /v1/capabilities credentialPlane.sandboxGit.origins[].reason",
+        members: {
+            insecure_transport: { attr: "-", since: "7.137.0" },
+        },
+    },
     healthAuthKind: {
         at: "GET /health auth.kinds[]",
         members: {
@@ -193,6 +221,58 @@ export const SELF_MINTED_WIRE = {
             unknown: { attr: "-", since: "7.121.0" },
         },
     },
+    healthModsKey: {
+        at: "GET /health mods",
+        members: {
+            deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
+        },
+    },
+    modelsRowKey: {
+        at: "GET /v1/models models[] 行键(<键> → 在场律)",
+        members: {
+            supportsThinkingOff: { attr: "always", since: "7.138.0" },
+        },
+    },
+    toolEndGateDispositionKey: {
+        at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)",
+        members: {
+            "denied#extension": { attr: "present-iff hook-layer denial by a named extension", since: "7.138.0" },
+        },
+    },
+    sideQueryBodyKey: {
+        at: "POST /v1/side-query 200 体键(<键> → 在场律)",
+        members: {
+            account: { attr: "always", since: "7.138.0" },
+        },
+    },
+    sideQueryErrorKind: {
+        at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)",
+        members: {
+            image_unprocessable: { attr: "-", since: "7.138.0" },
+        },
+    },
+    mcpAuthorizationKey: {
+        at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)",
+        members: {
+            "wiring_manifest.mcp[]#authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#status.authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "GET /v1/sessions/:id/mcp#servers[].authorization": { attr: "present-iff server unauthorized (this face carries no errorCode)", since: "7.138.0" },
+        },
+    },
+    wiringModProvenance: {
+        at: "wiring_manifest mods[].provenance",
+        members: {
+            server: { attr: "-", since: "7.138.0" },
+            operator: { attr: "-", since: "7.138.0" },
+        },
+    },
+    extensionRequesterSeat: {
+        at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)",
+        members: {
+            "tool_approval#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+            "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+        },
+    },
     fieldConflictKind: {
         at: "400 request.field_conflict detail.kind",
         members: {
@@ -235,6 +315,15 @@ export const SELF_MINTED_WIRE = {
             not_object: { attr: "-", since: "7.133.0" },
         },
     },
+    inheritEnvRefusalReason: {
+        at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")",
+        members: {
+            unknown_word: { attr: "-", since: "7.137.0" },
+            not_a_string: { attr: "-", since: "7.137.0" },
+            lane_not_host: { attr: "-", since: "7.137.0" },
+            no_authorizer_session: { attr: "-", since: "7.137.0" },
+        },
+    },
     submitIdempotency: {
         at: "提交幂等(<端点>#<面> → 应答状态)",
         members: {
@@ -268,6 +357,14 @@ export const SELF_MINTED_WIRE = {
             center: { attr: "-", since: "7.135.0" },
         },
     },
+    wiringSkillSource: {
+        at: "wiring_manifest skills[].source(run 级技能名册的来处;段只投根腿 / 续跑腿帧,零技能 = [])",
+        members: {
+            factory: { attr: "-", since: "7.137.0" },
+            center: { attr: "-", since: "7.137.0" },
+            request: { attr: "-", since: "7.137.0" },
+        },
+    },
     configCatalogValueVerdict: {
         at: "GET /v1/config/catalog rows[] 的判词位(<键> → 在场律)",
         members: {
@@ -301,6 +398,12 @@ export const SELF_MINTED_WIRE = {
             classifierNoRuling: { attr: "present-iff", since: "7.136.0" },
         },
     },
+    constraintRejectedBodyKey: {
+        at: "409 resume.constraint_rejected 拒体(<键> → 在场律)",
+        members: {
+            acceptableForm: { attr: "present-iff", since: "7.137.0" },
+        },
+    },
     endpointFaceStatus: {
         at: "逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面)",
         members: {
@@ -308,8 +411,15 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/sessions/:id/sync/manifest#store_connection_fault(体 state.file_history_unreadable + permanence: transient)": { attr: 503, since: "7.136.0" },
             "GET /v1/sessions/:id/sync/entries#store_connection_fault(应答头发出之前;体同上)": { attr: 503, since: "7.136.0" },
             "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault(体同上)": { attr: 503, since: "7.136.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_connection_fault_session_gate(会话门那一读,应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_connection_fault_session_gate(会话门那一读;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/manifest#store_deployment_fault(缺表 / 权限拒;门读与读腿同一形;体 state.file_history_unreadable + permanence: terminal)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/entries#store_deployment_fault(应答头发出之前;体同上)": { attr: 503, since: "7.137.0" },
+            "GET /v1/sessions/:id/sync/history/blobs/:hash#store_deployment_fault(体同上)": { attr: 503, since: "7.137.0" },
             "GET /v1/sessions/:id/events#corrupt_archive(DB_BACKEND=local;开流之前;体 corrupt_session)": { attr: 500, since: "7.136.0" },
             "PATCH /v1/sessions/:id#corrupt_archive(DB_BACKEND=local;体 corrupt_session)": { attr: 500, since: "7.136.0" },
+            "POST /v1/tasks#stored_log_invalid(同步腿;打开已存日志撞上结构坏:悬空父 / 自指 / 成环 / 叶子缺席;零工作的拒;体 invalid_session)": { attr: 500, since: "7.137.0" },
             "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)": { attr: 422, since: "7.136.0" },
             "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
@@ -321,18 +431,28 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))": { attr: 409, since: "7.136.0" },
             "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)": { attr: 401, since: "7.136.0" },
+            "ALL principal-reading routes#principal_not_a_name(主体头 / SSO 令牌的 sub / 直连门 JWT 的 sub 不是一位主体的名字:空 / 空白 / 带控制、行段分隔或不可见格式字符;体 principal_not_a_name)": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(新提交;体 request.body_shape + unknownKeys [promptProfile])": { attr: 400, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
+            "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny 名内带 *(`*` / `mcp__git*` / `Bas*`)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(settings.permissions.deny|ask)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(体带的门身份不是该会话此刻待决的 plan 门;体 approval_stale + currentPending { checkpointId }?;不落决断、零状态改动)": { attr: 409, since: "7.137.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
         },
     },
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
-            "409 decide.row_unrevivable#no_agent_name": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers[i].url|cardUrl.credential": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
             "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)": { attr: "title must contain at least one visible character", since: "7.136.0" },
             "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)": { attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", since: "7.136.0" },
+            "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
@@ -341,12 +461,59 @@ export const SELF_MINTED_WIRE = {
             "400 request.body_shape#a2aPeers[i].unknown_key": { attr: "body: unrecognized key(s) on an A2A peer declaration — refused rather than dropped …; Accepted per entry: <keys>", since: "7.136.0" },
             "409 conflict.checkpoint_ctx_unsealable#submit(提交面:本服务没有保管店)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
             "409 conflict.checkpoint_ctx_unsealable#resume(续跑上下文读口)": { attr: "slots: static request headers, the command lines and environment values given to MCP stdio servers and command hooks, settings.env, or settings.webSearch.apiKey", since: "7.136.0" },
+            "400 request.field_invalid#promptLean.not_boolean": { attr: "promptLean must be a boolean", since: "7.137.0" },
+            "409 checkpoint.unsupported_version#retired_request_key(续跑问点:存体仍带退役请求键 promptProfile)": { attr: "this task was suspended by an earlier server version and its stored request still carries promptProfile, a request key this version no longer reads (…) … submit the work again as a new task with promptLean in place of promptProfile, …", since: "7.137.0" },
+            "400 request.field_invalid#skills[i].mods(顶层技能项)": { attr: "skill.mods is not a request key — skill registrations are code the deployment mounts, not request data (…)", since: "7.137.0" },
+            "400 request.field_invalid#attachments.not_object": { attr: "attachments must be an object { …, mcpInstructions?, mcpUnavailable? }", since: "7.137.0" },
+            "400 request.field_invalid#attachments.mcpUnavailable.not_boolean": { attr: "attachments.mcpUnavailable must be a boolean", since: "7.137.0" },
+            "读成空的规则条目拒句#wildcard_all(授予侧)": { attr: "`*` grants nothing on an allow list (the entries beside it still apply) — …; on a deny or ask list `*` is every tool", since: "7.137.0" },
+            "读成空的规则条目拒句#namespace_wildcard(授予侧)": { attr: "an allow list reads a `*` only in a protocol name's tool segment — …; on a deny or ask list a `*` in a name is a glob over the whole name (…)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": { attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)", since: "7.137.0" },
+            "400 request.field_invalid#plan_review.checkpointId.too_large": { attr: "checkpointId too large (max <n> chars)", since: "7.137.0" },
+            "400 request.body_shape#/decide.checkpointId(落 unsupportedKeys)": { attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId", since: "7.137.0" },
+        },
+    },
+    decisionBodyKey: {
+        at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
+        },
+    },
+    approvalStaleBodyKey: {
+        at: "409 approval_stale 拒体(<端点>#<键> → 在场律)",
+        members: {
+            "POST /v1/assistant/tasks/:id/plan_review#currentPending.checkpointId": { attr: "present-iff", since: "7.137.0" },
+        },
+    },
+    parkLedgerRowKey: {
+        at: "GET /v1/runs/:id/events 的 suspended / needs_review 账本行 data(<键> → 在场律)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.137.0" },
+            gate: { attr: "always", since: "1.214.2" },
+            reopened: { attr: "present-iff", since: "1.231.0" },
+            toolCallId: { attr: "present-iff", since: "7.41.0" },
+        },
+    },
+    settlementEvidenceKey: {
+        at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.138.0" },
+            decisionCommitted: { attr: "present-iff", since: "7.138.0" },
+        },
+    },
+    approvalEnvelopeExtKey: {
+        at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)",
+        members: {
+            answer: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.87.0" },
+            checkpointId: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.137.0" },
+            permissionModeAfter: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.87.0" },
         },
     },
     storeFaultPermanence: {
         at: "文件历史店故障答的体键 permanence(422 adopt_failed · restore_failed 等 · 503 state.file_history_unreadable)",
         members: {
             transient: { attr: "present-iff", since: "7.136.0" },
+            "terminal#deployment": { attr: "present-iff", since: "7.137.0" },
         },
     },
     configCatalogRow: {
@@ -355,6 +522,14 @@ export const SELF_MINTED_WIRE = {
             SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
         },
     },
+    deviceProtocolRevision: {
+        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)",
+        members: {
+            1: { attr: "base", since: "7.51.0" },
+            2: { attr: "+liveness_no_output", since: "7.133.0" },
+            3: { attr: "+name_too_long", since: "7.137.0" },
+        },
+    },
     wireValueRule: {
         at: "出口值变换(<端点>#<键> → 变换)",
         members: {
@@ -377,6 +552,12 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
+            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
         },
     },
 };

package/dist/trace/wire-projection-faces.d.ts

@@ -100,7 +100,7 @@ export type DeclaredKey = ManifestShape & {
  */
 export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
-export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
+export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "BrainStatus", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
 /**
  * `wiring_manifest` 的 **operator 面多投的那几段**(`wiringManifestOperatorEventData` 在租户形之上加的段)。
  * operator 行的 `excluded` = 租户行减本常量(派生);四段各自的受众裁定在 `core-keyset-guard.ts` ⑥b。
@@ -171,12 +171,12 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly workspace_changed: {
         readonly projector: "workspaceChangedEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["root", "remote", "entered", "project"];
         readonly minted: readonly [];
     };
     readonly status: {
         readonly projector: "brainStatusEventData";
-        readonly coreType: string;
+        readonly coreType: `BrainStatus & ${string}`;
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
@@ -213,7 +213,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal"];
+        readonly excluded: readonly ["principal", "runOrigin"];
         readonly minted: readonly [];
     };
     readonly task_notification: {
@@ -226,9 +226,10 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly wiring_manifest_tenant: {
         readonly projector: "wiringManifestEventData";
         readonly coreType: `WiringManifest & ${string}`;
-        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"];
+        readonly excluded: readonly ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly ["instructions"];
+        readonly mintedConditional: readonly ["skills"];
     };
     readonly wiring_manifest_operator: {
         readonly projector: "wiringManifestOperatorEventData";
@@ -236,6 +237,7 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly string[];
         readonly unwrapped: readonly ["manifest"];
         readonly minted: readonly string[];
+        readonly mintedConditional: readonly string[];
     };
     readonly engine_notice: {
         readonly projector: "engineNoticeEventData";

package/dist/trace/wire-projection-faces.js

@@ -1,6 +1,7 @@
 export const FRAME_ENVELOPE_KEYS = ["type", "sourceTaskId", "bgAgentId"];
 export const WIRE_PROJECTION_CORE_IMPORTS = [
     "TaskEvent",
+    "BrainStatus",
     "TaskNotificationPayload",
     "WiringManifest",
     "EngineNotice",
@@ -33,14 +34,14 @@ export const WIRE_PROJECTION_FACES = {
     tool_roster_delta: { projector: "toolRosterDeltaEventData", coreType: arm("tool_roster_delta"), excluded: [], minted: [] },
     diagnostics: { projector: "diagnosticsEventData", coreType: arm("diagnostics"), excluded: [], minted: [] },
     steering_injected: { projector: "steeringInjectedEventData", coreType: arm("steering_injected"), excluded: [], minted: [] },
-    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: [], minted: [] },
-    status: { projector: "brainStatusEventData", coreType: arm("status"), excluded: [], minted: [] },
+    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: ["root", "remote", "entered", "project"], minted: [] },
+    status: { projector: "brainStatusEventData", coreType: `BrainStatus & ${arm("status")}`, excluded: [], minted: [] },
     compacted: { projector: "compactedEventData", coreType: arm("compacted"), excluded: [], minted: [] },
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
     compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "runOrigin"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,
@@ -51,9 +52,10 @@ export const WIRE_PROJECTION_FACES = {
     wiring_manifest_tenant: {
         projector: "wiringManifestEventData",
         coreType: `WiringManifest & ${arm("wiring_manifest")}`,
-        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor"],
+        excluded: ["governance", "configFingerprint", "autoConsolidation", "readDeny", "peerPresence", "advisor", "hostFloor"],
         unwrapped: ["manifest"],
         minted: ["instructions"],
+        mintedConditional: ["skills"],
     },
     wiring_manifest_operator: {
         projector: "wiringManifestOperatorEventData",
@@ -65,6 +67,9 @@ export const WIRE_PROJECTION_FACES = {
         get minted() {
             return WIRE_PROJECTION_FACES.wiring_manifest_tenant.minted;
         },
+        get mintedConditional() {
+            return WIRE_PROJECTION_FACES.wiring_manifest_tenant.mintedConditional;
+        },
     },
     engine_notice: { projector: "engineNoticeEventData", coreType: "EngineNotice", excluded: [], minted: ["ts"] },
     memory_import_report: { projector: "buildImportReportWire", coreType: "MemoryImportReport", excluded: [], minted: [] },

package/dist/user-authored-text.d.ts

@@ -1,5 +1,5 @@
-/** 非用户正文块的闭集标签(引擎 / 壳注入)。加一个标签 = 改这里一处:下面的正则由本表生成。 */
-export declare const INJECTED_BLOCK_TAGS: readonly ["system-reminder", "task-notification", "attachment"];
+/** 非用户正文块的闭集标签(引擎 / 壳注入)。加一个标签 = 改这里一处:下面的正则由本表生成(分支组的序 = 本表的序)。 */
+export declare const INJECTED_BLOCK_TAGS: readonly ["system-reminder", "task-notification", "attachment", "command-name", "command-message", "command-args", "local-command-stdout", "local-command-stderr", "local-command-caveat", "bash-input", "bash-stdout", "bash-stderr", "bash-exit-code", "user-memory-input"];
 /**
  * 注入块的唯一一只正则(由 {@link INJECTED_BLOCK_TAGS} 生成)。**只配 `String.prototype.replace` 使用**(带 `g`,
  * `lastIndex` 有状态,拿去 `.test` / `.exec` 会读到上一次的位置)。

package/dist/user-authored-text.js

@@ -1,5 +1,20 @@
 import { redactSecrets } from "./trace/redact.js";
-export const INJECTED_BLOCK_TAGS = ["system-reminder", "task-notification", "attachment"];
+export const INJECTED_BLOCK_TAGS = [
+    "system-reminder",
+    "task-notification",
+    "attachment",
+    "command-name",
+    "command-message",
+    "command-args",
+    "local-command-stdout",
+    "local-command-stderr",
+    "local-command-caveat",
+    "bash-input",
+    "bash-stdout",
+    "bash-stderr",
+    "bash-exit-code",
+    "user-memory-input",
+];
 export const INJECTED_BLOCK_RE = new RegExp(`<(${INJECTED_BLOCK_TAGS.join("|")})(?:\\s(?:[^<>"']|"[^"<]*"|'[^'<]*')*?)?(?:\\/>|>[\\s\\S]*?(?:<\\/\\1>|$))\\s*`, "g");
 export function stripInjectedBlocks(text) {
     return text.replace(INJECTED_BLOCK_RE, "");

package/dist/web-admin-client/apply-effective.js

@@ -52,7 +52,6 @@ function toModel(m, envDefaults = {}, logger) {
         ...(thinkingDefault ? { defaultThinking: thinkingDefault } : {}),
         ...(compat ? { compat } : {}),
         ...(m.extraBody ? { extraBody: m.extraBody } : {}),
-        ...(Array.isArray(m.promptGuidance) && m.promptGuidance.length > 0 ? { promptGuidance: m.promptGuidance.map(String) } : {}),
         ...buildModelHeadersKey(m.name, m.headers, m.api),
     };
     const explicitAct = m.autoCompactTokens;

package/dist/web-admin-client/center-request.d.ts

@@ -63,6 +63,14 @@ export declare function pullViewQuery(view: {
     readonly worker?: string | undefined;
     readonly principal?: string | undefined;
 }): string;
+/**
+ * 中心回了重定向(`egress-redirect.ts` 的判据:`opaqueredirect` 或任何 3xx;304 除外,见 {@link NOT_MODIFIED}):不跟、不重试,类型化拒。拒句是 `egress-redirect.ts` 既有 helper 的那一句(与 hook 直连腿 /
+ * 记忆 embedder 同一条律),前面冠上这条请求打的那一席;不回显 `Location`。`status` 是中心回的码(续签器据此落「被拒」终态)。
+ */
+export declare class CenterRedirectRefusedError extends Error {
+    readonly status: number;
+    constructor(status: number, message: string);
+}
 export interface CenterRequestInit {
     readonly method?: "GET" | "POST" | "DELETE";
     /** JSON 请求体(在场 ⇒ `content-type: application/json`)。 */
@@ -74,8 +82,9 @@ export interface CenterRequestInit {
 }
 /**
  * 「后面要拼路径的基址」的拒句 —— 中心基址三席(`SEMA_WEB_ADMIN_URL` / `SEMA_WEB_ADMIN_LIVE_URL` / `SEMA_WEB_ADMIN_WEB_URL`)与本实例的
- * 公告地址(`FLEET_ADVERTISE_ADDRESS`,中心往它后面拼 `/v1/...`)同读。判官是 settings-schema 的 `httpUrlFlaws`(层级式 http(s) URL;Node 的 fetch
- * 认 `file://` / `data:`,配错的地址不许变成读本地文件),本函数只声明这一席禁哪几件({@link PATH_BASE_FORBIDS})。起服时 `config.ts` 判
+ * 公告地址(`FLEET_ADVERTISE_ADDRESS`,中心往它后面拼 `/v1/...`)同读。判官是 settings-schema 的 `pathBaseUrlFlaws`(14.7.0 起:这一座位的禁用集
+ * userinfo / query / fragment 与判官都在契约包,= `httpUrlFlaws` 配那一集;层级式 http(s) URL,Node 的 fetch 认 `file://` / `data:`,配错的地址不许变成
+ * 读本地文件),本仓零禁用集副本,编排器渲染公告地址 env 的一方调的是同一只。起服时 `config.ts` 判
  * (拒启),请求期 {@link centerFetch} 对同一份基址再判一次(自拼 `ServiceConfig` 的嵌入方也吃同一条规则)。合格 ⇒ `undefined`;否则交回
  * `<subject> <规则词>; got "<展示面安全形>"` —— 拒句里没有从值里解析出来的任何记号(scheme / userinfo / 主机名),捕获点照原样落日志即可。
  */
@@ -84,13 +93,23 @@ export declare function pathBaseUrlRefusal(subject: string, raw: string): string
  * [ref] —— 凭证续签:`POST {issuer}/api/v1/auth/token/refresh`,form `refresh_token=…`(settings-schema `AUTH_V1_PATHS.tokenRefresh`)。
  *  · 以 `issuer` 为根(可带路径前缀;同源与否由续签器先判,本函数只装配);query / fragment 不带过去。
  *  · **不带 Authorization**:这条端点凭 refresh token 认人,手里的 access token 可能已经过期。
- *  · `redirect: "manual"`:3xx 不跟 —— POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效。
- *    3xx 原样交回,续签器按「被拒」处置。
+ *  · 经 {@link sendToCenter}(`redirect: "manual"`):POST 307/308 会把体(= refresh token)原样带去 `Location`,同源判据在重定向面前失效 ⇒
+ *    中心回重定向 ⇒ 抛 {@link CenterRedirectRefusedError}(不跟),续签器把它落成「被拒」终态(配置事故,重试无益)。
  */
 export declare function centerTokenRefresh(issuer: string, refreshToken: string, init: {
     readonly timeoutMs: number;
     readonly fetchImpl?: typeof fetch;
 }): Promise<Response>;
+/**
+ * 鉴权桥的 JWKS 拉取:`GET <jwksUrl>`,不带凭证(公钥集是公开的)。地址缺省 = 签发方(`SEMA_WEB_ADMIN_URL` / `AUTH_BRIDGE_ISSUER`)+ 契约包的
+ * `WEB_ADMIN_JWKS_PATH`,运维可用 `AUTH_BRIDGE_JWKS_URL` 改写 —— 打的是中心的公钥面,所以同经 {@link sendToCenter}:回重定向 ⇒ 同一只类型化拒、不跟
+ * (此前它自带 `redirect: "error"`,是中心面上的第二种重定向读法,拒句是传输层的 `fetch failed`、不点名出路)。体量帽 / 解析 / 缓存仍是调用方
+ * (`auth-bridge.ts`)的事;本函数只发这一次请求。
+ */
+export declare function centerJwksFetch(jwksUrl: string, init: {
+    readonly timeoutMs: number;
+    readonly fetchImpl?: typeof fetch | undefined;
+}): Promise<Response>;
 /**
  * 对中心发一条请求。返回响应与**这次请求所用凭证的身份**(调用方据此给拿回来的候选打分箱标记,
  * 见 `boot/web-admin.ts` 的 LKG / prompt 状态分箱)。

package/dist/web-admin-client/center-request.js

@@ -2,8 +2,9 @@ import settingsSchemaPackage from "@sema-agent/settings-schema/package.json" wit
 import { AUTH_V1_PATHS } from "@sema-agent/settings-schema/api/auth";
 import { FLEET_LIVE_PATHS, FLEET_PATHS } from "@sema-agent/settings-schema/fleet";
 import { CenterCredentialUnavailableError } from "../center-credential.js";
-import { WEB_ADMIN_ENV, httpUrlFlaws } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV, httpUrlFlaws, pathBaseUrlFlaws } from "@sema-agent/settings-schema";
 import { buildHttpUrlRefusal } from "../url-refusal.js";
+import { egressRedirectRefusal } from "../egress-redirect.js";
 export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
 export const CENTER_PULL_TIMEOUT_MS = 8000;
 export const SETTINGS_SCHEMA_MAJOR = (() => {
@@ -57,9 +58,32 @@ function routePath(route, kind) {
             return "/api/config/execution-keys";
     }
 }
-const PATH_BASE_FORBIDS = ["userinfo", "query", "fragment"];
+export class CenterRedirectRefusedError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+        this.name = "CenterRedirectRefusedError";
+    }
+}
+const NOT_MODIFIED = 304;
+async function sendToCenter(fix, url, wire) {
+    const res = await (wire.fetchImpl ?? fetch)(url, {
+        method: wire.method,
+        headers: wire.headers,
+        ...(wire.body !== undefined ? { body: wire.body } : {}),
+        redirect: "manual",
+        signal: AbortSignal.timeout(wire.timeoutMs),
+    });
+    if (res.status === NOT_MODIFIED)
+        return res;
+    const refusal = egressRedirectRefusal(res, fix);
+    if (refusal !== undefined)
+        throw new CenterRedirectRefusedError(res.status, `web-admin center request: ${refusal}`);
+    return res;
+}
 export function pathBaseUrlRefusal(subject, raw) {
-    const flaws = httpUrlFlaws(raw, PATH_BASE_FORBIDS);
+    const flaws = pathBaseUrlFlaws(raw);
     return flaws.length === 0 ? undefined : buildHttpUrlRefusal(subject, raw, flaws);
 }
 function assertPathBaseUrl(raw, what) {
@@ -75,12 +99,20 @@ export async function centerTokenRefresh(issuer, refreshToken, init) {
     url.pathname = `${url.pathname.replace(/\/+$/, "")}${AUTH_V1_PATHS.tokenRefresh}`;
     url.search = "";
     url.hash = "";
-    return (init.fetchImpl ?? fetch)(url, {
+    return sendToCenter(`the credential issuer must be the final center address — set ${WEB_ADMIN_ENV.url} to it and sign in again`, url, {
         method: "POST",
         headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR, "content-type": "application/x-www-form-urlencoded" },
         body: new URLSearchParams({ refresh_token: refreshToken }).toString(),
-        redirect: "manual",
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
+    });
+}
+export async function centerJwksFetch(jwksUrl, init) {
+    return sendToCenter(`declare the final JWKS address — AUTH_BRIDGE_JWKS_URL, or the issuer it derives from (${WEB_ADMIN_ENV.url} / AUTH_BRIDGE_ISSUER)`, jwksUrl, {
+        method: "GET",
+        headers: { [SCHEMA_MAJOR_HEADER]: SETTINGS_SCHEMA_MAJOR },
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
 }
 export async function centerFetch(center, route, init) {
@@ -99,12 +131,14 @@ export async function centerFetch(center, route, init) {
     const liveBase = FLEET_LIVE_PATHS.includes(path) ? center.liveBaseUrl : undefined;
     if (liveBase !== undefined)
         assertPathBaseUrl(liveBase, WEB_ADMIN_ENV.liveUrl);
+    const seat = liveBase !== undefined ? WEB_ADMIN_ENV.liveUrl : WEB_ADMIN_ENV.url;
     const url = `${(liveBase ?? center.baseUrl).replace(/\/+$/, "")}${path}`;
-    const res = await (init.fetchImpl ?? fetch)(url, {
+    const res = await sendToCenter(`declare the final address in ${seat}`, url, {
         method: init.method ?? "GET",
         headers,
         ...(init.json !== undefined ? { body: JSON.stringify(init.json) } : {}),
-        signal: AbortSignal.timeout(init.timeoutMs),
+        timeoutMs: init.timeoutMs,
+        fetchImpl: init.fetchImpl,
     });
     return { res, identity: cred.identity };
 }

package/dist/web-admin-client/http-client.js

@@ -3,7 +3,7 @@ import { readEffectiveWire, PrincipalCapsWire } from "@sema-agent/settings-schem
 import { separateRetiredDomains, splitFoldedReadWarnings, withDroppedCatalogEntries } from "./read-warnings.js";
 import { CENTER_PULL_TIMEOUT_MS, centerFetch } from "./center-request.js";
 import { answerStillCurrent } from "../center-credential.js";
-export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
+export async function fetchEffective(center, etag, fetchImpl, worker) {
     const { res, identity } = await centerFetch(center, { kind: "effective", worker }, { etag, timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (res.status === 304)
         return null;
@@ -25,7 +25,7 @@ export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
         ...(retiredDomains.length > 0 ? { retiredDomains: [...retiredDomains] } : {}),
     };
 }
-export async function fetchPrincipalCaps(center, principal, etag, fetchImpl = fetch, worker) {
+export async function fetchPrincipalCaps(center, principal, etag, fetchImpl, worker) {
     const raw = await requestPrincipalView(center, principal, etag, fetchImpl, worker);
     if (raw === null)
         return null;
@@ -99,7 +99,7 @@ async function requestPrincipalView(center, principal, etag, fetchImpl, worker)
     return { json, ...(responseEtag !== null ? { etag: responseEtag } : {}) };
 }
 const PrincipalOrgMemoryEnvelope = PrincipalCapsWire.pick({ principal: true, orgMemory: true });
-export async function fetchPrincipalOrgMemory(center, principal, fetchImpl = fetch, worker) {
+export async function fetchPrincipalOrgMemory(center, principal, fetchImpl, worker) {
     const raw = await requestPrincipalView(center, principal, undefined, fetchImpl, worker);
     if (raw === null)
         throw new Error("web-admin returned 304 to a non-conditional org-directory fetch");
@@ -118,7 +118,7 @@ export class WebAdminHttpError extends Error {
         this.name = "WebAdminHttpError";
     }
 }
-export async function fetchSkillContent(center, contentHash, fetchImpl = fetch) {
+export async function fetchSkillContent(center, contentHash, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "skill-content", contentHash }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`skill content HTTP ${res.status} for ${contentHash}`, res.status);
@@ -129,13 +129,13 @@ export async function fetchSkillContent(center, contentHash, fetchImpl = fetch)
         throw new Error(`skill content hash mismatch for ${contentHash}: computed sha256:${got}`);
     return content;
 }
-export async function fetchPromptArtifact(center, artifactDigest, fetchImpl = fetch) {
+export async function fetchPromptArtifact(center, artifactDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-artifact", digest: artifactDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`prompt artifact HTTP ${res.status} for ${artifactDigest}`, res.status);
     return await res.json();
 }
-export async function fetchPromptBlob(center, contentDigest, fetchImpl = fetch) {
+export async function fetchPromptBlob(center, contentDigest, fetchImpl) {
     const { res } = await centerFetch(center, { kind: "prompt-blob", digest: contentDigest }, { timeoutMs: CENTER_PULL_TIMEOUT_MS, fetchImpl });
     if (!res.ok)
         throw new WebAdminHttpError(`prompt blob HTTP ${res.status} for ${contentDigest}`, res.status);