@sema-agent/server 7.137.0 → 7.138.0

package/dist/trace/project.d.ts

@@ -29,6 +29,7 @@ import type { ModelUsageDelta, ModelUsageTracker, PromptManifestRecord } from ".
 import type { RunCompanionRecord } from "../observability/prompt-manifest.js";
 import { type SafeText } from "./exit-seat.js";
 import { type SemaProvenanceInput } from "./sema-provenance.js";
+import { type ExtensionRequesterFace, type ToolInputRewriteFace } from "./extension-call-face.js";
 import type { LedgerEventType } from "./ledger-events.js";
 import type { InstructionsSegment } from "../instruction-selection.js";
 import type { RunSkillEntry } from "../capabilities/skills.js";
@@ -101,6 +102,8 @@ export type TraceBlock = {
     name: string;
     label?: string;
     input: unknown;
+    recovered?: true;
+    requestedBy?: ExtensionRequesterFace;
     eventId?: string;
     parentToolCallId?: string;
 } | {
@@ -119,6 +122,11 @@ export type TraceBlock = {
     delivered?: McpDelivered;
     gate?: GateOutcome;
     gatedCallId?: string;
+    wireName?: string;
+    notExecuted?: true;
+    answeredBy?: string;
+    requestedBy?: ExtensionRequesterFace;
+    rewrite?: ToolInputRewriteFace;
     eventId?: string;
     parentToolCallId?: string;
 } | {
@@ -157,6 +165,7 @@ export declare function toolStartEventData(ev: {
     label?: string;
     args: unknown;
     recovered?: true;
+    requestedBy?: unknown;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -295,6 +304,9 @@ export declare function toolEndEventData(ev: {
     gatedCallId?: string;
     wireName?: string;
     notExecuted?: true;
+    answeredBy?: unknown;
+    requestedBy?: unknown;
+    rewrite?: unknown;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -628,11 +640,11 @@ export declare function compactionStartedEventData(ev: {
     parentToolCallId?: unknown;
 }): Record<string, unknown>;
 /** The `workspace_changed` payload([ref]二 core 裁定:[ref] §E13 旧臂,L1 门本车首次撞见——非新增,
- *  是本门扩 TaskEvent 臂集时第一次显式处置。语义 = bash `cd`/EnterWorktree 移动任务逻辑 cwd 后,在移动
- *  它的工具结算后发一帧,给 shell/宿主 UI 一个路径提示行。cwd 与已展示的工具 args 同信任级[UNTRUSTED,
- *  RAW 逻辑路径,symlink 不解析]→ `redactSecrets` + 长度 bound[300,与 brainStatusEventData.detail 同
- *  惯例]。core 只在真变化时才发(不播初始 cwd);渲染面（cli）不得当持久态——跨 suspend/resume 重置为
- *  根，这是消费端纪律，服务端只如实转发单帧不做状态缓存。 */
+ *  是本门扩 TaskEvent 臂集时第一次显式处置)。core 7.58.0 起这一帧是腿的**整份快照**:每条经 `prepareExecutionEnv` 装配的腿起点一帧(`cwd` 可与上一帧相同;verify / cascade 的组合入口不经该装配、按契约没有这一帧)、
+ *  其后每变一帧(bash `cd` / EnterWorktree / ExitWorktree)。wire 上只投 `cwd`(其余四成员的处置在 `wire-projection-faces.ts` 那一行);
+ *  cwd 与已展示的工具 args 同信任级[UNTRUSTED,RAW 逻辑路径,symlink 不解析]→ 出口座的有界位[300,与 brainStatusEventData.detail 同
+ *  惯例]。消费端按快照读:与已持有的 `cwd` 相同的一帧不渲染成「目录变了」。服务端只如实转发单帧;会话行上的那份最后一帧另由
+ *  `session-workspace.ts` 的记录座存(不是本投影)。 */
 export declare function workspaceChangedEventData(ev: {
     cwd: string;
     eventId?: string;
@@ -1002,6 +1014,8 @@ export declare function brainStatusEventData(ev: {
     timeoutMs?: number;
     providerCondition?: string;
     providerConditionSource?: string;
+    waitSegment?: string;
+    sleptMs?: number;
     eventId?: string;
     parentToolCallId?: string;
 }): FrameData<{
@@ -1171,8 +1185,12 @@ export declare function toContractTokens(usage: unknown, usageMissing?: unknown)
  *  (trace SSE 面)对同一账本行的字段选择逐字同构,此前两处独立手写,structured/totalChars/label
  *  三次扩字段各改两遍(见两处对偶注)。收一份:两面各自包装键名皮(id/name/input vs 同名),
  *  字段集合从此单点演进。 */
-export declare function toolCallFieldsOf(d: Record<string, unknown>): Record<string, unknown>;
-export declare function toolResultFieldsOf(d: Record<string, unknown>): Record<string, unknown>;
+export declare function toolCallFieldsOf(d: Record<string, unknown>): Omit<Extract<TraceBlock, {
+    type: "tool-call";
+}>, "type">;
+export declare function toolResultFieldsOf(d: Record<string, unknown>): Omit<Extract<TraceBlock, {
+    type: "tool-result";
+}>, "type" | "output" | "isError">;
 export interface ProjectOpts {
     /** Prepend the user turn (the objective is not in the event log; the endpoint supplies it). */
     objective?: string;

package/dist/trace/project.js

@@ -10,8 +10,10 @@ import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
 import { resupplyFields, terminalFrameFacetFields } from "./task-notification-facets.js";
 import { dropProjectedFace } from "./projection-drop.js";
+import { extensionAnswererOf, extensionRequesterOf, toolInputRewriteOf } from "./extension-call-face.js";
 import { projectByTable } from "./projection-table.js";
 import { durableRowIdentity } from "../checkpoint-identity.js";
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
 export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
@@ -95,13 +97,18 @@ function identityKey(v) {
 export function modelTextEventData(ev) {
     return { text: ev.text, ...(ev.eventId ? { eventId: ev.eventId } : {}) };
 }
+function toolArgsOnWire(args) {
+    return redactDeep(args);
+}
 export function toolStartEventData(ev) {
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_start");
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
         ...(ev.label !== undefined ? { label: ev.label } : {}),
-        args: redactDeep(ev.args),
+        args: toolArgsOnWire(ev.args),
         ...(ev.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(ev),
     };
 }
@@ -166,6 +173,7 @@ function screenedGateOrThrow(v) {
                 ...(d.mode === undefined ? {} : { mode: d.mode }),
                 ...(d.askClass === undefined ? {} : { askClass: d.askClass }),
                 ...(d.classes === undefined ? {} : { classes: [...d.classes] }),
+                ...(d.extension === undefined ? {} : { extension: seatText("trace-frame-text", d.extension) }),
             }
             : { kind: "allowed", ...(classifier === undefined ? {} : { classifier }), ...(released === undefined ? {} : { released }), ...(clearedBy === undefined ? {} : { clearedBy }) },
         ...(settlement === undefined ? {} : { settlement }),
@@ -225,6 +233,9 @@ export function reasoningEndEventData(ev) {
 }
 export function toolEndEventData(ev) {
     const gate = ev.gate === undefined ? undefined : screenedGate(ev.gate);
+    const answeredBy = extensionAnswererOf(ev.answeredBy, "tool_end");
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_end");
+    const rewrite = toolInputRewriteOf(ev.rewrite, "tool_end", toolArgsOnWire);
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
@@ -240,6 +251,9 @@ export function toolEndEventData(ev) {
         ...(typeof ev.gatedCallId === "string" && ev.gatedCallId !== "" ? { gatedCallId: ev.gatedCallId } : {}),
         ...(typeof ev.wireName === "string" && ev.wireName !== "" ? { wireName: ev.wireName } : {}),
         ...(ev.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(ev),
     };
 }
@@ -456,6 +470,7 @@ export function projectWiringManifestMcpRows(mcpIn) {
             ...(str(e.errorCode) !== undefined ? { errorCode: e.errorCode } : {}),
             ...(typeof e.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(e.delivered) ? { delivered: e.delivered } : {}),
             ...(num(e.httpStatus) !== undefined ? { httpStatus: e.httpStatus } : {}),
+            ...((a) => (a !== undefined ? { authorization: a } : {}))(projectMcpAuthorization(e.authorization)),
             ...(liveness !== undefined ? { liveness } : {}),
         });
     }
@@ -570,10 +585,11 @@ export function wiringManifestEventData(ev, minted) {
                 dropProjectedFace("wiring_manifest.mods[] row is missing name/seat/tier");
                 continue;
             }
+            const provenance = e.provenance === undefined ? undefined : (registrantText(e.provenance) ?? dropProjectedFace("wiring_manifest.mods[].provenance is not a string"));
             const refusedBy = registrantText(e.refusedBy);
             const reason = registrantText(e.reason);
             if (refusedBy !== undefined && reason !== undefined) {
-                rows.push({ name, seat, tier, refusedBy, reason });
+                rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), refusedBy, reason });
                 continue;
             }
             const events = strList(e.events);
@@ -597,7 +613,7 @@ export function wiringManifestEventData(ev, minted) {
                         return [{ registration, cause, reason: why }];
                     })
                     : dropProjectedFace("wiring_manifest.mods[].skipped is not an array");
-            rows.push({ name, seat, tier, events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
+            rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
         }
         return rows.length > 0 ? rows : undefined;
     })();
@@ -804,6 +820,8 @@ export function brainStatusEventData(ev) {
         ...(num(ev.retryAtMs) ? { retryAtMs: ev.retryAtMs } : {}),
         ...(num(ev.elapsedMs) ? { elapsedMs: ev.elapsedMs } : {}),
         ...(num(ev.timeoutMs) ? { timeoutMs: ev.timeoutMs } : {}),
+        ...(typeof ev.waitSegment === "string" && ev.waitSegment.length > 0 ? { waitSegment: ev.waitSegment } : {}),
+        ...(num(ev.sleptMs) ? { sleptMs: ev.sleptMs } : {}),
         ...(num(ev.errorStatus) ? { errorStatus: ev.errorStatus } : {}),
         ...(typeof ev.errClass === "string" && ev.errClass.length > 0 ? { errClass: ev.errClass } : {}),
         ...(typeof ev.providerCondition === "string" && ev.providerCondition.length > 0 ? { providerCondition: ev.providerCondition } : {}),
@@ -929,17 +947,22 @@ export function toContractTokens(usage, usageMissing) {
     };
 }
 export function toolCallFieldsOf(d) {
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_start row");
     return {
         id: String(d.toolCallId ?? ""),
         name: String(d.toolName ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
         input: d.args,
         ...(d.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(d),
     };
 }
 export function toolResultFieldsOf(d) {
     const gate = d.gate === undefined ? undefined : screenedGate(d.gate);
+    const answeredBy = extensionAnswererOf(d.answeredBy, "tool_end row");
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_end row");
+    const rewrite = toolInputRewriteOf(d.rewrite, "tool_end row", toolArgsOnWire);
     return {
         callId: String(d.toolCallId ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
@@ -952,6 +975,9 @@ export function toolResultFieldsOf(d) {
         ...(typeof d.gatedCallId === "string" && d.gatedCallId !== "" ? { gatedCallId: d.gatedCallId } : {}),
         ...(typeof d.wireName === "string" && d.wireName !== "" ? { wireName: d.wireName } : {}),
         ...(d.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(d),
     };
 }

package/dist/trace/redact.js

@@ -1,4 +1,4 @@
-import { displayUrlOf, stripFormatCharacters } from "@sema-agent/core";
+import { REDACTION_MARK, displayUrlOf, stripFormatCharacters } from "@sema-agent/core";
 import { CONTROL_AND_BIDI_CHARS, CREDENTIAL_PARAM_NAMES, isHierarchicalUrl } from "@sema-agent/settings-schema";
 import { recordFailOpen } from "../observability/fail-open.js";
 const normalizeForRedaction = stripFormatCharacters;
@@ -903,8 +903,9 @@ const PPK_CONTAINER_TOKEN = "«redacted:private-key»";
 const PEM_FRAGMENT_TOKEN = "«redacted:private-key:partial»";
 const HEADLESS_PPK_TOKEN = "«redacted:private-key:partial»";
 const ANCHORED_VALUE_TOKEN = "«redacted»";
+const BEARER_VALUE_MIN = 20;
 const KEYWORD_SECRET_PATTERNS = [
-    [keywordArm("[Bb]earer", "[A-Za-z0-9._~+/-]", 20, "=*", SCHEME_SEPARATOR_CLASS), "Bearer «redacted»"],
+    [keywordArm("[Bb]earer", "[A-Za-z0-9._~+/-]", BEARER_VALUE_MIN, "=*", SCHEME_SEPARATOR_CLASS), "Bearer «redacted»"],
     [keywordArm("Basic", "[A-Za-z0-9+/]", 16, "={0,2}", SCHEME_SEPARATOR_CLASS), "Basic «redacted»"],
     [keywordArm("[Tt]oken", "[A-Za-z0-9._~+/-]", 20), "token «redacted»"],
 ];
@@ -2031,6 +2032,15 @@ function collectJsonSecretFieldSpans(text, span, isHead) {
     }
 }
 const STRONG_AUTH_SCHEMES = new Set(["basic", "bearer"]);
+function isEngineMarkedCandidate(text, start, end, repl) {
+    const open = repl.indexOf("«");
+    const close = repl.lastIndexOf("»");
+    if (open <= 0 || close < open || close === repl.length - 1)
+        return false;
+    const lead = repl.slice(0, open);
+    const trail = repl.slice(close + 1);
+    return end - start === lead.length + REDACTION_MARK.length + trail.length && text.startsWith(lead, start) && text.startsWith(REDACTION_MARK, start + lead.length) && text.startsWith(trail, end - trail.length);
+}
 const STRONG_AUTH_SCHEME_MAX = Math.max(...[...STRONG_AUTH_SCHEMES].map((w) => w.length));
 const ABSENT_OR_BOOLEAN_WORDS = new Set(["null", "nil", "none", "undefined", "true", "false", "yes", "no"]);
 const ABSENT_OR_BOOLEAN_MAX = Math.max(...[...ABSENT_OR_BOOLEAN_WORDS].map((w) => w.length));
@@ -2287,11 +2297,18 @@ function schemeValueAt(text, s, json) {
     if (isQuoteUnit(unitChOf(opening)) || unitChOf(opening) === JSON_STRING_END)
         i += unitLenOf(opening);
     const w = i;
-    while (i < n && i - w <= STRONG_AUTH_SCHEME_MAX && (isIdentStartCode(text.charCodeAt(i))))
-        i += 1;
-    anchoredScanUnits += i - w;
-    if (i - w > STRONG_AUTH_SCHEME_MAX || !STRONG_AUTH_SCHEMES.has(text.slice(w, i).toLowerCase()))
-        return undefined;
+    const engineMarked = text.startsWith(REDACTION_MARK, i);
+    if (engineMarked) {
+        i += REDACTION_MARK.length;
+        anchoredScanUnits += REDACTION_MARK.length;
+    }
+    else {
+        while (i < n && i - w <= STRONG_AUTH_SCHEME_MAX && (isIdentStartCode(text.charCodeAt(i))))
+            i += 1;
+        anchoredScanUnits += i - w;
+        if (i - w > STRONG_AUTH_SCHEME_MAX || !STRONG_AUTH_SCHEMES.has(text.slice(w, i).toLowerCase()))
+            return undefined;
+    }
     let separated = false;
     while (i < n) {
         const unit = readAnchorUnit(text, i, json);
@@ -2304,6 +2321,17 @@ function schemeValueAt(text, s, json) {
     if (!separated)
         return undefined;
     const vs = i;
+    if (engineMarked) {
+        let k = i;
+        while (k < n && isToken68Code(text.charCodeAt(k)))
+            k += 1;
+        while (k < n && text.charCodeAt(k) === CH_EQ)
+            k += 1;
+        if (k - vs >= BEARER_VALUE_MIN) {
+            anchoredScanUnits += k - vs;
+            return { start: vs, end: k, quoted: false };
+        }
+    }
     if (i >= n || !isAsciiAlnumCode(text.charCodeAt(i)))
         return undefined;
     while (i < n && isToken68Code(text.charCodeAt(i)))
@@ -2625,7 +2653,7 @@ const armPool = (() => {
     const headFirstUnit = unionMembers(retryMembers.map((m) => m.headFirst)) ?? new Uint32Array(0x10000 >>> 5).fill(0xffffffff);
     poolArmCount = members.length;
     poolBoundaryArmCount = retryMembers.length;
-    return (text, wantCount, json, eat, scope, reach) => {
+    return (text, wantCount, json, eat, scope, reach, engineMarked) => {
         readings += 1;
         const isHead = reach !== undefined;
         const lane = LANES[scope];
@@ -2695,8 +2723,8 @@ const armPool = (() => {
             }
         }
         poolSpanCount += spans.length;
-        const survives = (sp) => sp.undecided !== true || reach === undefined || reach(sp.start);
-        const kept = resolveSpanOverlaps(reach === undefined ? spans : spans.filter(survives));
+        const survives = (sp) => !engineMarked(sp.start, sp.end, sp.repl) && (sp.undecided !== true || reach === undefined || reach(sp.start));
+        const kept = resolveSpanOverlaps(spans.filter(survives));
         if (!wantCount || kept.length === 0)
             return { hits: NO_HITS, kept };
         const tokenOf = (sp) => members[sp.order].token;
@@ -2727,8 +2755,8 @@ let onRedaction;
 export function setRedactionObserver(fn) {
     onRedaction = fn;
 }
-function applyRules(text, wantCount, json, eat, scope, reach) {
-    return armPool(text, wantCount, json, eat, scope, reach);
+function applyRules(text, wantCount, json, eat, scope, reach, engineMarked) {
+    return armPool(text, wantCount, json, eat, scope, reach, engineMarked);
 }
 function reportHits(hits) {
     if (onRedaction === undefined)
@@ -2856,7 +2884,8 @@ function runRedaction(text, observe, json, wantHits, scope, layout, extent) {
     const read = (layers, view) => {
         const toOriginal = createViewToOriginal(layers);
         const reach = extent.kind === "head" ? (viewStart) => toOriginal.start(viewStart) < extent.emitEnd : undefined;
-        const r = applyRules(view, wantCount, json, eat, scope, reach);
+        const engineMarked = (viewStart, viewEnd, repl) => isEngineMarkedCandidate(text, toOriginal.start(viewStart), toOriginal.start(viewEnd - 1) + 1, repl);
+        const r = applyRules(view, wantCount, json, eat, scope, reach, engineMarked);
         forgetEscapedSeparatorTails();
         readsSoFar += 1;
         if (readsSoFar === 1) {

package/dist/trace/self-minted-wire.d.ts

@@ -105,6 +105,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 400;
                 readonly since: "7.52.0";
             };
+            readonly "config.memory_erasure_scope": {
+                readonly attr: 400;
+                readonly since: "7.138.0";
+            };
             readonly "memory.target_outside_store": {
                 readonly attr: 409;
                 readonly since: "7.101.0";
@@ -625,6 +629,106 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /** `GET /health` 的 `mods` 段:运维声明的 mod 包起服装上了几只(present-iff 装上了;与能力位 `modsDeploymentPackages` 同读一只事实)。 */
+    readonly healthModsKey: {
+        readonly at: "GET /health mods";
+        readonly members: {
+            deploymentPackages: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `GET /v1/models` 的 `models[]` 行键(只登本版新出现的键;行的其余键不是本版新上 wire):`supportsThinkingOff` —— 「这只模型的推理能不能关」,恒在场的布尔,值 = 引擎唯一读法 `thinkingOffSpelled(条目)`。 */
+    readonly modelsRowKey: {
+        readonly at: "GET /v1/models models[] 行键(<键> → 在场律)";
+        readonly members: {
+            readonly supportsThinkingOff: {
+                readonly attr: "always";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `tool_end` 帧 `gate.disposition`(denied 臂)上的键(<臂>#<键> → 在场律;回放面 `GET /v1/runs/:id/events` 同读):`extension` —— hook 层拒且拒者的扩展注册名已知时 = 那张注册的名字(过出口座)。 */
+    readonly toolEndGateDispositionKey: {
+        readonly at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)";
+        readonly members: {
+            readonly "denied#extension": {
+                readonly attr: "present-iff hook-layer denial by a named extension";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `POST /v1/side-query` 200 体的键(只登本版新出现的键):`account` —— 本次侧查询的一行账(引擎定价、逐字过境;`costMicroUsd` 任何一笔未定价即缺席)。 */
+    readonly sideQueryBodyKey: {
+        readonly at: "POST /v1/side-query 200 体键(<键> → 在场律)";
+        readonly members: {
+            readonly account: {
+                readonly attr: "always";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /**
+     * `POST /v1/side-query` 200 体在失败时的 `errorKind` 值里本版新出现的词(机读失败种类;缺席 = 引擎没给)。词是引擎铸的闭集,本服务逐字过境(`projectSideQueryResult`),词表属主 = 引擎的 `AssistantMessage.errorKind`:
+     * `satisfies Partial<Record<…>>` 把「登的是引擎的词」绑在引擎的型上。`image_unprocessable` —— 服务商处理不了请求里的图 —— 是本版新词;此前的三词(`input_too_long` / `length_empty` / `degenerate`,自 7.135.0 起在 wire 上)
+     * 不在本集 —— 同上面四个集的口径,只登本版新出现的。
+     */
+    readonly sideQueryErrorKind: {
+        readonly at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)";
+        readonly members: {
+            image_unprocessable: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** MCP 授权记录 `authorization`(只投闭集词 `reason`,与 `errorCode:"unauthorized"` 同行)出现的三张面;投影只有 `mcp-authorization-face.ts` 的 `projectMcpAuthorization` 一只,三面同读。 */
+    readonly mcpAuthorizationKey: {
+        readonly at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)";
+        readonly members: {
+            readonly "wiring_manifest.mcp[]#authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "POST /v1/sessions/:id/mcp/reconnect#status.authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "GET /v1/sessions/:id/mcp#servers[].authorization": {
+                readonly attr: "present-iff server unauthorized (this face carries no errorCode)";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `wiring_manifest.mods[].provenance`(每条腿的清单帧,每行 mod 注册一个出处标签):本服务自铸的注册带 `server`、运维声明的包带 `operator`;与同一行上 `seat` 的座词(`deployment` / `task`)互不相交。 */
+    readonly wiringModProvenance: {
+        readonly at: "wiring_manifest mods[].provenance";
+        readonly members: {
+            server: {
+                attr: string;
+                since: string;
+            };
+            operator: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 扩展经 `$.tool.call` 自己发起的调用是谁要的(core `AskRequest.requestedBy`)在审批开卡帧上的出现面:旧族 `tool_approval`、呈卡族 `approval_request` 顶层(卡外座)。 */
+    readonly extensionRequesterSeat: {
+        readonly at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)";
+        readonly members: {
+            "tool_approval#requestedBy": {
+                attr: string;
+                since: string;
+            };
+            "approval_request#requestedBy": {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `request.field_conflict` 拒体的 `detail.kind`(字段之间互斥 / 互为前置的哪一类;`detail.fields` = 请求体坐标,不在本表 —— 它不是闭集)。
      * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_KINDS`:`satisfies Record<FieldConflictKind, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
@@ -1147,10 +1251,6 @@ export declare const SELF_MINTED_WIRE: {
     readonly refusalSentenceForm: {
         readonly at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)";
         readonly members: {
-            readonly "409 decide.row_unrevivable#no_agent_name": {
-                readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
-                readonly since: "7.136.0";
-            };
             readonly "409 decide.row_unrevivable#no_root_anchor": {
                 readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
                 readonly since: "7.136.0";
@@ -1305,6 +1405,24 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 回决门族 200 体上的**结清证据**(`<键>` → 在场律):`/decide` 的受理体 / 终局体 / 幂等回放 / 停驻子代复活成功 / 不可复活子代的 deny 作废,
+     * `/resume` 与 `/plan_review` 的受理体 / 终局体(经停驻赎回席的迟到回决体原样转出)。键集属主 = `gate-settlement.ts` 的 `GateSettlementEvidence`
+     * (唯一铸点 `buildSettlementEvidence`,五个边界;`checkpointId` 只随位出现)。
+     */
+    readonly settlementEvidenceKey: {
+        readonly at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)";
+        readonly members: {
+            checkpointId: {
+                attr: string;
+                since: string;
+            };
+            decisionCommitted: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 直连门决断证明的 HMAC 信封**扩展键闭集**(第 6 位扩展对象的键;字典序 = JSON 键序;在场才追加,缺席 ⇒ 字节逐字不变)。`satisfies Record<ApprovalEnvelopeExtKey, …>`:
      * 闭集属主 = `approval-hmac.ts` 的 `APPROVAL_ENVELOPE_EXT_KEYS`(加一个词而本表没跟 ⇒ tsc 红)。跨仓签名器照这张闭集实现,所以它是 wire。`attr` = 用它的那道门。
@@ -1511,16 +1629,17 @@ export declare const SELF_MINTED_WIRE: {
                 readonly since: "7.137.0";
             };
             /**
-             * 7.137.0:MCP 远端失败句在面板与重拨回执上的出口读法(`http/mcp-remote-text.ts` 一只):按引擎铸点的记号 `[redacted]` 切开、只把引擎没抹的段过本仓 `redactSecrets`、截 200;
-             * 此前整句过一遍 —— 引擎回显体里凭据名字段上的 `[redacted]` 被改写成 `«redacted»`。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥。
+             * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;
+             * 引擎记号占了方案词位时头值余下的部分照抹;引擎放过的形照抹),界 200(切点不落进记号)。7.137.0 是按记号切开、逐段过 `redactSecrets` 的另一只读法
+             * (头名与值分在两段 ⇒ 方案词位上的值原样)。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥ 与「引擎记号占了方案词位」三形。
              */
             readonly "GET /v1/sessions/:id/mcp#servers[].error": {
-                readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
-                readonly since: "7.137.0";
+                readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
+                readonly since: "7.138.0";
             };
             readonly "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": {
-                readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
-                readonly since: "7.137.0";
+                readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
+                readonly since: "7.138.0";
             };
             /**
              * 7.137.0:`GET /v1/config/catalog` 已有行的字面(`semantics` 说明句 / `derivedDefaultNote` 缺席说明;键与行集不变,写法同上一段 7.136.0 的行):提交面的带图预检退役后,

package/dist/trace/self-minted-wire.js

@@ -39,6 +39,7 @@ export const SELF_MINTED_WIRE = {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
             "config.memory_erasure_request": { attr: 400, since: "7.52.0" },
+            "config.memory_erasure_scope": { attr: 400, since: "7.138.0" },
             "memory.target_outside_store": { attr: 409, since: "7.101.0" },
             "memory.scope_home_not_directory": { attr: 409, since: "7.118.0" },
             "memory.erasure_evidence_unavailable": { attr: 409, since: "7.108.0" },
@@ -220,6 +221,58 @@ export const SELF_MINTED_WIRE = {
             unknown: { attr: "-", since: "7.121.0" },
         },
     },
+    healthModsKey: {
+        at: "GET /health mods",
+        members: {
+            deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
+        },
+    },
+    modelsRowKey: {
+        at: "GET /v1/models models[] 行键(<键> → 在场律)",
+        members: {
+            supportsThinkingOff: { attr: "always", since: "7.138.0" },
+        },
+    },
+    toolEndGateDispositionKey: {
+        at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)",
+        members: {
+            "denied#extension": { attr: "present-iff hook-layer denial by a named extension", since: "7.138.0" },
+        },
+    },
+    sideQueryBodyKey: {
+        at: "POST /v1/side-query 200 体键(<键> → 在场律)",
+        members: {
+            account: { attr: "always", since: "7.138.0" },
+        },
+    },
+    sideQueryErrorKind: {
+        at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)",
+        members: {
+            image_unprocessable: { attr: "-", since: "7.138.0" },
+        },
+    },
+    mcpAuthorizationKey: {
+        at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)",
+        members: {
+            "wiring_manifest.mcp[]#authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#status.authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "GET /v1/sessions/:id/mcp#servers[].authorization": { attr: "present-iff server unauthorized (this face carries no errorCode)", since: "7.138.0" },
+        },
+    },
+    wiringModProvenance: {
+        at: "wiring_manifest mods[].provenance",
+        members: {
+            server: { attr: "-", since: "7.138.0" },
+            operator: { attr: "-", since: "7.138.0" },
+        },
+    },
+    extensionRequesterSeat: {
+        at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)",
+        members: {
+            "tool_approval#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+            "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+        },
+    },
     fieldConflictKind: {
         at: "400 request.field_conflict detail.kind",
         members: {
@@ -393,7 +446,6 @@ export const SELF_MINTED_WIRE = {
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
-            "409 decide.row_unrevivable#no_agent_name": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -442,6 +494,13 @@ export const SELF_MINTED_WIRE = {
             toolCallId: { attr: "present-iff", since: "7.41.0" },
         },
     },
+    settlementEvidenceKey: {
+        at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.138.0" },
+            decisionCommitted: { attr: "present-iff", since: "7.138.0" },
+        },
+    },
     approvalEnvelopeExtKey: {
         at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)",
         members: {
@@ -494,8 +553,8 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
             "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
-            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
-            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },