@sema-agent/server 7.137.0 → 7.139.0

package/dist/trace/project.d.ts

@@ -29,6 +29,7 @@ import type { ModelUsageDelta, ModelUsageTracker, PromptManifestRecord } from ".
 import type { RunCompanionRecord } from "../observability/prompt-manifest.js";
 import { type SafeText } from "./exit-seat.js";
 import { type SemaProvenanceInput } from "./sema-provenance.js";
+import { type ExtensionRequesterFace, type ToolInputRewriteFace } from "./extension-call-face.js";
 import type { LedgerEventType } from "./ledger-events.js";
 import type { InstructionsSegment } from "../instruction-selection.js";
 import type { RunSkillEntry } from "../capabilities/skills.js";
@@ -101,6 +102,8 @@ export type TraceBlock = {
     name: string;
     label?: string;
     input: unknown;
+    recovered?: true;
+    requestedBy?: ExtensionRequesterFace;
     eventId?: string;
     parentToolCallId?: string;
 } | {
@@ -119,6 +122,11 @@ export type TraceBlock = {
     delivered?: McpDelivered;
     gate?: GateOutcome;
     gatedCallId?: string;
+    wireName?: string;
+    notExecuted?: true;
+    answeredBy?: string;
+    requestedBy?: ExtensionRequesterFace;
+    rewrite?: ToolInputRewriteFace;
     eventId?: string;
     parentToolCallId?: string;
 } | {
@@ -157,6 +165,7 @@ export declare function toolStartEventData(ev: {
     label?: string;
     args: unknown;
     recovered?: true;
+    requestedBy?: unknown;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -295,6 +304,9 @@ export declare function toolEndEventData(ev: {
     gatedCallId?: string;
     wireName?: string;
     notExecuted?: true;
+    answeredBy?: unknown;
+    requestedBy?: unknown;
+    rewrite?: unknown;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -628,11 +640,11 @@ export declare function compactionStartedEventData(ev: {
     parentToolCallId?: unknown;
 }): Record<string, unknown>;
 /** The `workspace_changed` payload([ref]二 core 裁定:[ref] §E13 旧臂,L1 门本车首次撞见——非新增,
- *  是本门扩 TaskEvent 臂集时第一次显式处置。语义 = bash `cd`/EnterWorktree 移动任务逻辑 cwd 后,在移动
- *  它的工具结算后发一帧,给 shell/宿主 UI 一个路径提示行。cwd 与已展示的工具 args 同信任级[UNTRUSTED,
- *  RAW 逻辑路径,symlink 不解析]→ `redactSecrets` + 长度 bound[300,与 brainStatusEventData.detail 同
- *  惯例]。core 只在真变化时才发(不播初始 cwd);渲染面（cli）不得当持久态——跨 suspend/resume 重置为
- *  根，这是消费端纪律，服务端只如实转发单帧不做状态缓存。 */
+ *  是本门扩 TaskEvent 臂集时第一次显式处置)。core 7.58.0 起这一帧是腿的**整份快照**:每条经 `prepareExecutionEnv` 装配的腿起点一帧(`cwd` 可与上一帧相同;verify / cascade 的组合入口不经该装配、按契约没有这一帧)、
+ *  其后每变一帧(bash `cd` / EnterWorktree / ExitWorktree)。wire 上只投 `cwd`(其余四成员的处置在 `wire-projection-faces.ts` 那一行);
+ *  cwd 与已展示的工具 args 同信任级[UNTRUSTED,RAW 逻辑路径,symlink 不解析]→ 出口座的有界位[300,与 brainStatusEventData.detail 同
+ *  惯例]。消费端按快照读:与已持有的 `cwd` 相同的一帧不渲染成「目录变了」。服务端只如实转发单帧;会话行上的那份最后一帧另由
+ *  `session-workspace.ts` 的记录座存(不是本投影)。 */
 export declare function workspaceChangedEventData(ev: {
     cwd: string;
     eventId?: string;
@@ -1002,6 +1014,9 @@ export declare function brainStatusEventData(ev: {
     timeoutMs?: number;
     providerCondition?: string;
     providerConditionSource?: string;
+    waitSegment?: string;
+    sleptMs?: number;
+    seat?: string;
     eventId?: string;
     parentToolCallId?: string;
 }): FrameData<{
@@ -1171,8 +1186,12 @@ export declare function toContractTokens(usage: unknown, usageMissing?: unknown)
  *  (trace SSE 面)对同一账本行的字段选择逐字同构,此前两处独立手写,structured/totalChars/label
  *  三次扩字段各改两遍(见两处对偶注)。收一份:两面各自包装键名皮(id/name/input vs 同名),
  *  字段集合从此单点演进。 */
-export declare function toolCallFieldsOf(d: Record<string, unknown>): Record<string, unknown>;
-export declare function toolResultFieldsOf(d: Record<string, unknown>): Record<string, unknown>;
+export declare function toolCallFieldsOf(d: Record<string, unknown>): Omit<Extract<TraceBlock, {
+    type: "tool-call";
+}>, "type">;
+export declare function toolResultFieldsOf(d: Record<string, unknown>): Omit<Extract<TraceBlock, {
+    type: "tool-result";
+}>, "type" | "output" | "isError">;
 export interface ProjectOpts {
     /** Prepend the user turn (the objective is not in the event log; the endpoint supplies it). */
     objective?: string;

package/dist/trace/project.js

@@ -10,8 +10,10 @@ import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
 import { resupplyFields, terminalFrameFacetFields } from "./task-notification-facets.js";
 import { dropProjectedFace } from "./projection-drop.js";
+import { extensionAnswererOf, extensionRequesterOf, toolInputRewriteOf } from "./extension-call-face.js";
 import { projectByTable } from "./projection-table.js";
 import { durableRowIdentity } from "../checkpoint-identity.js";
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
 export async function appendModelUsageDelta(append, modelUsage, taskId) {
     const delta = modelUsage?.drain(taskId);
     if (delta) {
@@ -95,13 +97,18 @@ function identityKey(v) {
 export function modelTextEventData(ev) {
     return { text: ev.text, ...(ev.eventId ? { eventId: ev.eventId } : {}) };
 }
+function toolArgsOnWire(args) {
+    return redactDeep(args);
+}
 export function toolStartEventData(ev) {
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_start");
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
         ...(ev.label !== undefined ? { label: ev.label } : {}),
-        args: redactDeep(ev.args),
+        args: toolArgsOnWire(ev.args),
         ...(ev.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(ev),
     };
 }
@@ -166,6 +173,7 @@ function screenedGateOrThrow(v) {
                 ...(d.mode === undefined ? {} : { mode: d.mode }),
                 ...(d.askClass === undefined ? {} : { askClass: d.askClass }),
                 ...(d.classes === undefined ? {} : { classes: [...d.classes] }),
+                ...(d.extension === undefined ? {} : { extension: seatText("trace-frame-text", d.extension) }),
             }
             : { kind: "allowed", ...(classifier === undefined ? {} : { classifier }), ...(released === undefined ? {} : { released }), ...(clearedBy === undefined ? {} : { clearedBy }) },
         ...(settlement === undefined ? {} : { settlement }),
@@ -225,6 +233,9 @@ export function reasoningEndEventData(ev) {
 }
 export function toolEndEventData(ev) {
     const gate = ev.gate === undefined ? undefined : screenedGate(ev.gate);
+    const answeredBy = extensionAnswererOf(ev.answeredBy, "tool_end");
+    const requestedBy = extensionRequesterOf(ev.requestedBy, "tool_end");
+    const rewrite = toolInputRewriteOf(ev.rewrite, "tool_end", toolArgsOnWire);
     return {
         toolCallId: ev.toolCallId,
         toolName: ev.toolName,
@@ -240,6 +251,9 @@ export function toolEndEventData(ev) {
         ...(typeof ev.gatedCallId === "string" && ev.gatedCallId !== "" ? { gatedCallId: ev.gatedCallId } : {}),
         ...(typeof ev.wireName === "string" && ev.wireName !== "" ? { wireName: ev.wireName } : {}),
         ...(ev.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(ev),
     };
 }
@@ -456,6 +470,7 @@ export function projectWiringManifestMcpRows(mcpIn) {
             ...(str(e.errorCode) !== undefined ? { errorCode: e.errorCode } : {}),
             ...(typeof e.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(e.delivered) ? { delivered: e.delivered } : {}),
             ...(num(e.httpStatus) !== undefined ? { httpStatus: e.httpStatus } : {}),
+            ...((a) => (a !== undefined ? { authorization: a } : {}))(projectMcpAuthorization(e.authorization)),
             ...(liveness !== undefined ? { liveness } : {}),
         });
     }
@@ -570,10 +585,11 @@ export function wiringManifestEventData(ev, minted) {
                 dropProjectedFace("wiring_manifest.mods[] row is missing name/seat/tier");
                 continue;
             }
+            const provenance = e.provenance === undefined ? undefined : (registrantText(e.provenance) ?? dropProjectedFace("wiring_manifest.mods[].provenance is not a string"));
             const refusedBy = registrantText(e.refusedBy);
             const reason = registrantText(e.reason);
             if (refusedBy !== undefined && reason !== undefined) {
-                rows.push({ name, seat, tier, refusedBy, reason });
+                rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), refusedBy, reason });
                 continue;
             }
             const events = strList(e.events);
@@ -597,7 +613,7 @@ export function wiringManifestEventData(ev, minted) {
                         return [{ registration, cause, reason: why }];
                     })
                     : dropProjectedFace("wiring_manifest.mods[].skipped is not an array");
-            rows.push({ name, seat, tier, events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
+            rows.push({ name, seat, tier, ...(provenance !== undefined ? { provenance } : {}), events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
         }
         return rows.length > 0 ? rows : undefined;
     })();
@@ -804,6 +820,9 @@ export function brainStatusEventData(ev) {
         ...(num(ev.retryAtMs) ? { retryAtMs: ev.retryAtMs } : {}),
         ...(num(ev.elapsedMs) ? { elapsedMs: ev.elapsedMs } : {}),
         ...(num(ev.timeoutMs) ? { timeoutMs: ev.timeoutMs } : {}),
+        ...(typeof ev.waitSegment === "string" && ev.waitSegment.length > 0 ? { waitSegment: ev.waitSegment } : {}),
+        ...(num(ev.sleptMs) ? { sleptMs: ev.sleptMs } : {}),
+        ...(typeof ev.seat === "string" && ev.seat.length > 0 ? { seat: ev.seat } : {}),
         ...(num(ev.errorStatus) ? { errorStatus: ev.errorStatus } : {}),
         ...(typeof ev.errClass === "string" && ev.errClass.length > 0 ? { errClass: ev.errClass } : {}),
         ...(typeof ev.providerCondition === "string" && ev.providerCondition.length > 0 ? { providerCondition: ev.providerCondition } : {}),
@@ -929,17 +948,22 @@ export function toContractTokens(usage, usageMissing) {
     };
 }
 export function toolCallFieldsOf(d) {
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_start row");
     return {
         id: String(d.toolCallId ?? ""),
         name: String(d.toolName ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
         input: d.args,
         ...(d.recovered === true ? { recovered: true } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
         ...identityFields(d),
     };
 }
 export function toolResultFieldsOf(d) {
     const gate = d.gate === undefined ? undefined : screenedGate(d.gate);
+    const answeredBy = extensionAnswererOf(d.answeredBy, "tool_end row");
+    const requestedBy = extensionRequesterOf(d.requestedBy, "tool_end row");
+    const rewrite = toolInputRewriteOf(d.rewrite, "tool_end row", toolArgsOnWire);
     return {
         callId: String(d.toolCallId ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
@@ -952,6 +976,9 @@ export function toolResultFieldsOf(d) {
         ...(typeof d.gatedCallId === "string" && d.gatedCallId !== "" ? { gatedCallId: d.gatedCallId } : {}),
         ...(typeof d.wireName === "string" && d.wireName !== "" ? { wireName: d.wireName } : {}),
         ...(d.notExecuted === true ? { notExecuted: true } : {}),
+        ...(answeredBy !== undefined ? { answeredBy } : {}),
+        ...(requestedBy !== undefined ? { requestedBy } : {}),
+        ...(rewrite !== undefined ? { rewrite } : {}),
         ...identityFields(d),
     };
 }

package/dist/trace/redact.js

@@ -1,4 +1,4 @@
-import { displayUrlOf, stripFormatCharacters } from "@sema-agent/core";
+import { REDACTION_MARK, displayUrlOf, stripFormatCharacters } from "@sema-agent/core";
 import { CONTROL_AND_BIDI_CHARS, CREDENTIAL_PARAM_NAMES, isHierarchicalUrl } from "@sema-agent/settings-schema";
 import { recordFailOpen } from "../observability/fail-open.js";
 const normalizeForRedaction = stripFormatCharacters;
@@ -903,8 +903,9 @@ const PPK_CONTAINER_TOKEN = "«redacted:private-key»";
 const PEM_FRAGMENT_TOKEN = "«redacted:private-key:partial»";
 const HEADLESS_PPK_TOKEN = "«redacted:private-key:partial»";
 const ANCHORED_VALUE_TOKEN = "«redacted»";
+const BEARER_VALUE_MIN = 20;
 const KEYWORD_SECRET_PATTERNS = [
-    [keywordArm("[Bb]earer", "[A-Za-z0-9._~+/-]", 20, "=*", SCHEME_SEPARATOR_CLASS), "Bearer «redacted»"],
+    [keywordArm("[Bb]earer", "[A-Za-z0-9._~+/-]", BEARER_VALUE_MIN, "=*", SCHEME_SEPARATOR_CLASS), "Bearer «redacted»"],
     [keywordArm("Basic", "[A-Za-z0-9+/]", 16, "={0,2}", SCHEME_SEPARATOR_CLASS), "Basic «redacted»"],
     [keywordArm("[Tt]oken", "[A-Za-z0-9._~+/-]", 20), "token «redacted»"],
 ];
@@ -2031,6 +2032,15 @@ function collectJsonSecretFieldSpans(text, span, isHead) {
     }
 }
 const STRONG_AUTH_SCHEMES = new Set(["basic", "bearer"]);
+function isEngineMarkedCandidate(text, start, end, repl) {
+    const open = repl.indexOf("«");
+    const close = repl.lastIndexOf("»");
+    if (open <= 0 || close < open || close === repl.length - 1)
+        return false;
+    const lead = repl.slice(0, open);
+    const trail = repl.slice(close + 1);
+    return end - start === lead.length + REDACTION_MARK.length + trail.length && text.startsWith(lead, start) && text.startsWith(REDACTION_MARK, start + lead.length) && text.startsWith(trail, end - trail.length);
+}
 const STRONG_AUTH_SCHEME_MAX = Math.max(...[...STRONG_AUTH_SCHEMES].map((w) => w.length));
 const ABSENT_OR_BOOLEAN_WORDS = new Set(["null", "nil", "none", "undefined", "true", "false", "yes", "no"]);
 const ABSENT_OR_BOOLEAN_MAX = Math.max(...[...ABSENT_OR_BOOLEAN_WORDS].map((w) => w.length));
@@ -2287,11 +2297,18 @@ function schemeValueAt(text, s, json) {
     if (isQuoteUnit(unitChOf(opening)) || unitChOf(opening) === JSON_STRING_END)
         i += unitLenOf(opening);
     const w = i;
-    while (i < n && i - w <= STRONG_AUTH_SCHEME_MAX && (isIdentStartCode(text.charCodeAt(i))))
-        i += 1;
-    anchoredScanUnits += i - w;
-    if (i - w > STRONG_AUTH_SCHEME_MAX || !STRONG_AUTH_SCHEMES.has(text.slice(w, i).toLowerCase()))
-        return undefined;
+    const engineMarked = text.startsWith(REDACTION_MARK, i);
+    if (engineMarked) {
+        i += REDACTION_MARK.length;
+        anchoredScanUnits += REDACTION_MARK.length;
+    }
+    else {
+        while (i < n && i - w <= STRONG_AUTH_SCHEME_MAX && (isIdentStartCode(text.charCodeAt(i))))
+            i += 1;
+        anchoredScanUnits += i - w;
+        if (i - w > STRONG_AUTH_SCHEME_MAX || !STRONG_AUTH_SCHEMES.has(text.slice(w, i).toLowerCase()))
+            return undefined;
+    }
     let separated = false;
     while (i < n) {
         const unit = readAnchorUnit(text, i, json);
@@ -2304,6 +2321,17 @@ function schemeValueAt(text, s, json) {
     if (!separated)
         return undefined;
     const vs = i;
+    if (engineMarked) {
+        let k = i;
+        while (k < n && isToken68Code(text.charCodeAt(k)))
+            k += 1;
+        while (k < n && text.charCodeAt(k) === CH_EQ)
+            k += 1;
+        if (k - vs >= BEARER_VALUE_MIN) {
+            anchoredScanUnits += k - vs;
+            return { start: vs, end: k, quoted: false };
+        }
+    }
     if (i >= n || !isAsciiAlnumCode(text.charCodeAt(i)))
         return undefined;
     while (i < n && isToken68Code(text.charCodeAt(i)))
@@ -2625,7 +2653,7 @@ const armPool = (() => {
     const headFirstUnit = unionMembers(retryMembers.map((m) => m.headFirst)) ?? new Uint32Array(0x10000 >>> 5).fill(0xffffffff);
     poolArmCount = members.length;
     poolBoundaryArmCount = retryMembers.length;
-    return (text, wantCount, json, eat, scope, reach) => {
+    return (text, wantCount, json, eat, scope, reach, engineMarked) => {
         readings += 1;
         const isHead = reach !== undefined;
         const lane = LANES[scope];
@@ -2695,8 +2723,8 @@ const armPool = (() => {
             }
         }
         poolSpanCount += spans.length;
-        const survives = (sp) => sp.undecided !== true || reach === undefined || reach(sp.start);
-        const kept = resolveSpanOverlaps(reach === undefined ? spans : spans.filter(survives));
+        const survives = (sp) => !engineMarked(sp.start, sp.end, sp.repl) && (sp.undecided !== true || reach === undefined || reach(sp.start));
+        const kept = resolveSpanOverlaps(spans.filter(survives));
         if (!wantCount || kept.length === 0)
             return { hits: NO_HITS, kept };
         const tokenOf = (sp) => members[sp.order].token;
@@ -2727,8 +2755,8 @@ let onRedaction;
 export function setRedactionObserver(fn) {
     onRedaction = fn;
 }
-function applyRules(text, wantCount, json, eat, scope, reach) {
-    return armPool(text, wantCount, json, eat, scope, reach);
+function applyRules(text, wantCount, json, eat, scope, reach, engineMarked) {
+    return armPool(text, wantCount, json, eat, scope, reach, engineMarked);
 }
 function reportHits(hits) {
     if (onRedaction === undefined)
@@ -2856,7 +2884,8 @@ function runRedaction(text, observe, json, wantHits, scope, layout, extent) {
     const read = (layers, view) => {
         const toOriginal = createViewToOriginal(layers);
         const reach = extent.kind === "head" ? (viewStart) => toOriginal.start(viewStart) < extent.emitEnd : undefined;
-        const r = applyRules(view, wantCount, json, eat, scope, reach);
+        const engineMarked = (viewStart, viewEnd, repl) => isEngineMarkedCandidate(text, toOriginal.start(viewStart), toOriginal.start(viewEnd - 1) + 1, repl);
+        const r = applyRules(view, wantCount, json, eat, scope, reach, engineMarked);
         forgetEscapedSeparatorTails();
         readsSoFar += 1;
         if (readsSoFar === 1) {

package/dist/trace/self-minted-wire.d.ts

@@ -105,6 +105,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 400;
                 readonly since: "7.52.0";
             };
+            readonly "config.memory_erasure_scope": {
+                readonly attr: 400;
+                readonly since: "7.138.0";
+            };
             readonly "memory.target_outside_store": {
                 readonly attr: 409;
                 readonly since: "7.101.0";
@@ -625,6 +629,126 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /** `GET /health` 的 `mods` 段:运维声明的 mod 包起服装上了几只(present-iff 装上了;与能力位 `modsDeploymentPackages` 同读一只事实)。 */
+    readonly healthModsKey: {
+        readonly at: "GET /health mods";
+        readonly members: {
+            deploymentPackages: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `GET /v1/models` 的 `models[]` 行键(只登本版新出现的键;行的其余键不是本版新上 wire):`supportsThinkingOff` —— 「这只模型的推理能不能关」,恒在场的布尔,值 = 引擎唯一读法 `thinkingOffSpelled(条目)`。 */
+    readonly modelsRowKey: {
+        readonly at: "GET /v1/models models[] 行键(<键> → 在场律)";
+        readonly members: {
+            readonly supportsThinkingOff: {
+                readonly attr: "always";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `GET /v1/sessions/:id/background` 的 `rows[]` 上本版新出现的键:`sessionId` —— 后台 agent 行的子会话 id(引擎绑定之后才在,别的行型恒缺席;只是 id,不授读权)。 */
+    readonly sessionBackgroundRowKey: {
+        readonly at: "GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律)";
+        readonly members: {
+            sessionId: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 会话列表行(`GET /v1/sessions` 的 `sessions[]`;同一只投影 = `PATCH /v1/sessions/:id` 的 200 体与 409 `conflict.session_row_changed` 的 `currentRow`)上本版新出现的键:`rowTag` —— 行标签(条件写的前置条件值;读时派生、零存储)。 */
+    readonly sessionsListRowKey: {
+        readonly at: "GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律)";
+        readonly members: {
+            rowTag: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `tool_end` 帧 `gate.disposition`(denied 臂)上的键(<臂>#<键> → 在场律;回放面 `GET /v1/runs/:id/events` 同读):`extension` —— hook 层拒且拒者的扩展注册名已知时 = 那张注册的名字(过出口座)。 */
+    readonly toolEndGateDispositionKey: {
+        readonly at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)";
+        readonly members: {
+            readonly "denied#extension": {
+                readonly attr: "present-iff hook-layer denial by a named extension";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `POST /v1/side-query` 200 体的键(只登本版新出现的键):`account` —— 本次侧查询的一行账(引擎定价、逐字过境;`costMicroUsd` 任何一笔未定价即缺席)。 */
+    readonly sideQueryBodyKey: {
+        readonly at: "POST /v1/side-query 200 体键(<键> → 在场律)";
+        readonly members: {
+            readonly account: {
+                readonly attr: "always";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /**
+     * `POST /v1/side-query` 200 体在失败时的 `errorKind` 值里本版新出现的词(机读失败种类;缺席 = 引擎没给)。词是引擎铸的闭集,本服务逐字过境(`projectSideQueryResult`),词表属主 = 引擎的 `AssistantMessage.errorKind`:
+     * `satisfies Partial<Record<…>>` 把「登的是引擎的词」绑在引擎的型上。`image_unprocessable` —— 服务商处理不了请求里的图 —— 是本版新词;此前的三词(`input_too_long` / `length_empty` / `degenerate`,自 7.135.0 起在 wire 上)
+     * 不在本集 —— 同上面四个集的口径,只登本版新出现的。
+     */
+    readonly sideQueryErrorKind: {
+        readonly at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)";
+        readonly members: {
+            image_unprocessable: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** MCP 授权记录 `authorization`(只投闭集词 `reason`,与 `errorCode:"unauthorized"` 同行)出现的三张面;投影只有 `mcp-authorization-face.ts` 的 `projectMcpAuthorization` 一只,三面同读。 */
+    readonly mcpAuthorizationKey: {
+        readonly at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)";
+        readonly members: {
+            readonly "wiring_manifest.mcp[]#authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "POST /v1/sessions/:id/mcp/reconnect#status.authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "GET /v1/sessions/:id/mcp#servers[].authorization": {
+                readonly attr: "present-iff server unauthorized (this face carries no errorCode)";
+                readonly since: "7.138.0";
+            };
+        };
+    };
+    /** `wiring_manifest.mods[].provenance`(每条腿的清单帧,每行 mod 注册一个出处标签):本服务自铸的注册带 `server`、运维声明的包带 `operator`;与同一行上 `seat` 的座词(`deployment` / `task`)互不相交。 */
+    readonly wiringModProvenance: {
+        readonly at: "wiring_manifest mods[].provenance";
+        readonly members: {
+            server: {
+                attr: string;
+                since: string;
+            };
+            operator: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 扩展经 `$.tool.call` 自己发起的调用是谁要的(core `AskRequest.requestedBy`)在审批开卡帧上的出现面:旧族 `tool_approval`、呈卡族 `approval_request` 顶层(卡外座)。 */
+    readonly extensionRequesterSeat: {
+        readonly at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)";
+        readonly members: {
+            "tool_approval#requestedBy": {
+                attr: string;
+                since: string;
+            };
+            "approval_request#requestedBy": {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `request.field_conflict` 拒体的 `detail.kind`(字段之间互斥 / 互为前置的哪一类;`detail.fields` = 请求体坐标,不在本表 —— 它不是闭集)。
      * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_KINDS`:`satisfies Record<FieldConflictKind, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
@@ -661,6 +785,10 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            fork_target: {
+                attr: string;
+                since: string;
+            };
             scratchpad_root: {
                 attr: string;
                 since: string;
@@ -1138,6 +1266,30 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 200;
                 readonly since: "7.137.0";
             };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(\u65B0\u63D0\u4EA4;\u4F53 request.body_shape + unknownKeys [rewindFiles])": {
+                readonly attr: 400;
+                readonly since: "7.139.0";
+            };
+            readonly "POST /v1/side-query#uncoded_error_with_preflight_prefix(\u6CA1\u6709\u5F15\u64CE\u7801\u3001\u82F1\u6587\u5F00\u5934\u4E0E\u524D\u7F00\u8868\u540C\u5F62\u7684\u9519\u8BEF;\u4F53 internal.error)": {
+                readonly attr: 500;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#mirror_row(\u53EA\u8BFB\u955C\u50CF\u884C\u4E0A\u7684\u5199,\u5E26\u4E0D\u5E26 expectedRowTag;\u4F53 conflict.session_mirror + forkPath)": {
+                readonly attr: 409;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#owner_changed_after_gate(\u95E8\u90A3\u4E00\u8BFB\u4E4B\u540E\u540C\u4E00\u4F1A\u8BDD\u7684\u5C5E\u4E3B\u88AB\u6539;\u4F53 not_found.session)": {
+                readonly attr: 404;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#expectedRowTag_stale(\u884C\u5DF2\u4E0D\u5728\u90A3\u53EA\u6807\u7B7E\u4E0A;\u4F53 conflict.session_row_changed + currentRow)": {
+                readonly attr: 409;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#expectedRowTag_current(\u884C\u4ECD\u5728\u90A3\u53EA\u6807\u7B7E\u4E0A;\u4F53 = \u5217\u8868\u884C)": {
+                readonly attr: 200;
+                readonly since: "7.139.0";
+            };
         };
     };
     /**
@@ -1147,10 +1299,6 @@ export declare const SELF_MINTED_WIRE: {
     readonly refusalSentenceForm: {
         readonly at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)";
         readonly members: {
-            readonly "409 decide.row_unrevivable#no_agent_name": {
-                readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
-                readonly since: "7.136.0";
-            };
             readonly "409 decide.row_unrevivable#no_root_anchor": {
                 readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
                 readonly since: "7.136.0";
@@ -1251,6 +1399,22 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId";
                 readonly since: "7.137.0";
             };
+            readonly "400 request.body_shape#PATCH /v1/sessions/:id": {
+                readonly attr: "the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else";
+                readonly since: "7.139.0";
+            };
+            readonly "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag": {
+                readonly attr: "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_mirror#PATCH /v1/sessions/:id": {
+                readonly attr: "this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_row_changed#PATCH /v1/sessions/:id": {
+                readonly attr: "the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag";
+                readonly since: "7.139.0";
+            };
         };
     };
     /**
@@ -1266,6 +1430,27 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 会话行写口 `PATCH /v1/sessions/:id`:体受理键里本版新增的一键与它两只 409 拒体上的键(`<面>#<键>` → 读法 / 在场律)。受理闭集属主 = `session-row.ts` 的体读者 `readSessionRowPatch`;
+     * `conflict.session_mirror#forkPath` 是执行面同码同键,本版新出现的面是 PATCH。
+     */
+    readonly sessionRowWriteKey: {
+        readonly at: "PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的)";
+        readonly members: {
+            readonly "body#expectedRowTag": {
+                readonly attr: "optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_row_changed#currentRow": {
+                readonly attr: "always";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_mirror#forkPath": {
+                readonly attr: "always";
+                readonly since: "7.139.0";
+            };
+        };
+    };
     /**
      * `409 approval_stale` 拒体上的键,按出现面登记(`<端点>#<键>` → 在场律)。`currentPending` 的值形是每道门一形(`wire-types.ts` 的 `ApprovalStaleCurrentPending`:
      * 这道门的决断体回显的那几位);本表只登本版新出现的面(`/decide` 那一形早于本表,不在这里)。
@@ -1305,6 +1490,24 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 回决门族 200 体上的**结清证据**(`<键>` → 在场律):`/decide` 的受理体 / 终局体 / 幂等回放 / 停驻子代复活成功 / 不可复活子代的 deny 作废,
+     * `/resume` 与 `/plan_review` 的受理体 / 终局体(经停驻赎回席的迟到回决体原样转出)。键集属主 = `gate-settlement.ts` 的 `GateSettlementEvidence`
+     * (唯一铸点 `buildSettlementEvidence`,五个边界;`checkpointId` 只随位出现)。
+     */
+    readonly settlementEvidenceKey: {
+        readonly at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)";
+        readonly members: {
+            checkpointId: {
+                attr: string;
+                since: string;
+            };
+            decisionCommitted: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 直连门决断证明的 HMAC 信封**扩展键闭集**(第 6 位扩展对象的键;字典序 = JSON 键序;在场才追加,缺席 ⇒ 字节逐字不变)。`satisfies Record<ApprovalEnvelopeExtKey, …>`:
      * 闭集属主 = `approval-hmac.ts` 的 `APPROVAL_ENVELOPE_EXT_KEYS`(加一个词而本表没跟 ⇒ tsc 红)。跨仓签名器照这张闭集实现,所以它是 wire。`attr` = 用它的那道门。
@@ -1507,20 +1710,45 @@ export declare const SELF_MINTED_WIRE: {
                 readonly since: "7.136.0";
             };
             readonly "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": {
-                readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot";
-                readonly since: "7.137.0";
+                readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics": {
+                readonly attr: "required-no-default;absent-or-blank-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics": {
+                readonly attr: "own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics": {
+                readonly attr: "own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics": {
+                readonly attr: "remote-without-center-url-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[RETENTION_MODE].semantics": {
+                readonly attr: "enforce-without-horizon-or-cadence-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics": {
+                readonly attr: "cadence-without-horizon-refuses-boot";
+                readonly since: "7.139.0";
             };
             /**
-             * 7.137.0:MCP 远端失败句在面板与重拨回执上的出口读法(`http/mcp-remote-text.ts` 一只):按引擎铸点的记号 `[redacted]` 切开、只把引擎没抹的段过本仓 `redactSecrets`、截 200;
-             * 此前整句过一遍 —— 引擎回显体里凭据名字段上的 `[redacted]` 被改写成 `«redacted»`。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥。
+             * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;
+             * 引擎记号占了方案词位时头值余下的部分照抹;引擎放过的形照抹),界 200(切点不落进记号)。7.137.0 是按记号切开、逐段过 `redactSecrets` 的另一只读法
+             * (头名与值分在两段 ⇒ 方案词位上的值原样)。钉 test/mcp-remote-text-redaction.test.ts、test/mcp-reconnect-http.test.ts ⑥ 与「引擎记号占了方案词位」三形。
              */
             readonly "GET /v1/sessions/:id/mcp#servers[].error": {
-                readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
-                readonly since: "7.137.0";
+                readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
+                readonly since: "7.138.0";
             };
             readonly "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": {
-                readonly attr: "redactSecrets-outside-engine-marks+truncate:200";
-                readonly since: "7.137.0";
+                readonly attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200";
+                readonly since: "7.138.0";
             };
             /**
              * 7.137.0:`GET /v1/config/catalog` 已有行的字面(`semantics` 说明句 / `derivedDefaultNote` 缺席说明;键与行集不变,写法同上一段 7.136.0 的行):提交面的带图预检退役后,