@sema-agent/server 7.137.0 → 7.139.0

package/dist/trace/self-minted-wire.js

@@ -39,6 +39,7 @@ export const SELF_MINTED_WIRE = {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
             "config.memory_erasure_request": { attr: 400, since: "7.52.0" },
+            "config.memory_erasure_scope": { attr: 400, since: "7.138.0" },
             "memory.target_outside_store": { attr: 409, since: "7.101.0" },
             "memory.scope_home_not_directory": { attr: 409, since: "7.118.0" },
             "memory.erasure_evidence_unavailable": { attr: 409, since: "7.108.0" },
@@ -220,6 +221,70 @@ export const SELF_MINTED_WIRE = {
             unknown: { attr: "-", since: "7.121.0" },
         },
     },
+    healthModsKey: {
+        at: "GET /health mods",
+        members: {
+            deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
+        },
+    },
+    modelsRowKey: {
+        at: "GET /v1/models models[] 行键(<键> → 在场律)",
+        members: {
+            supportsThinkingOff: { attr: "always", since: "7.138.0" },
+        },
+    },
+    sessionBackgroundRowKey: {
+        at: "GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律)",
+        members: {
+            sessionId: { attr: "present-iff background agent row bound to a child session", since: "7.139.0" },
+        },
+    },
+    sessionsListRowKey: {
+        at: "GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律)",
+        members: {
+            rowTag: { attr: "present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation)", since: "7.139.0" },
+        },
+    },
+    toolEndGateDispositionKey: {
+        at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)",
+        members: {
+            "denied#extension": { attr: "present-iff hook-layer denial by a named extension", since: "7.138.0" },
+        },
+    },
+    sideQueryBodyKey: {
+        at: "POST /v1/side-query 200 体键(<键> → 在场律)",
+        members: {
+            account: { attr: "always", since: "7.138.0" },
+        },
+    },
+    sideQueryErrorKind: {
+        at: "POST /v1/side-query 200 体 errorKind 的值(失败时在场;引擎的词逐字过境)",
+        members: {
+            image_unprocessable: { attr: "-", since: "7.138.0" },
+        },
+    },
+    mcpAuthorizationKey: {
+        at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)",
+        members: {
+            "wiring_manifest.mcp[]#authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#status.authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "GET /v1/sessions/:id/mcp#servers[].authorization": { attr: "present-iff server unauthorized (this face carries no errorCode)", since: "7.138.0" },
+        },
+    },
+    wiringModProvenance: {
+        at: "wiring_manifest mods[].provenance",
+        members: {
+            server: { attr: "-", since: "7.138.0" },
+            operator: { attr: "-", since: "7.138.0" },
+        },
+    },
+    extensionRequesterSeat: {
+        at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)",
+        members: {
+            "tool_approval#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+            "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
+        },
+    },
     fieldConflictKind: {
         at: "400 request.field_conflict detail.kind",
         members: {
@@ -230,6 +295,7 @@ export const SELF_MINTED_WIRE = {
             file_history_restore: { attr: "-", since: "7.133.0" },
             skills_disabled: { attr: "-", since: "7.133.0" },
             existing_session: { attr: "-", since: "7.133.0" },
+            fork_target: { attr: "-", since: "7.139.0" },
             scratchpad_root: { attr: "-", since: "7.133.0" },
             ask_answer: { attr: "-", since: "7.133.0" },
             policy_person_ask: { attr: "-", since: "7.133.0" },
@@ -388,12 +454,17 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(体带的门身份不是该会话此刻待决的 plan 门;体 approval_stale + currentPending { checkpointId }?;不落决断、零状态改动)": { attr: 409, since: "7.137.0" },
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])": { attr: 400, since: "7.139.0" },
+            "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)": { attr: 500, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)": { attr: 409, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)": { attr: 404, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)": { attr: 409, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)": { attr: 200, since: "7.139.0" },
         },
     },
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
-            "409 decide.row_unrevivable#no_agent_name": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -419,6 +490,10 @@ export const SELF_MINTED_WIRE = {
             "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": { attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)", since: "7.137.0" },
             "400 request.field_invalid#plan_review.checkpointId.too_large": { attr: "checkpointId too large (max <n> chars)", since: "7.137.0" },
             "400 request.body_shape#/decide.checkpointId(落 unsupportedKeys)": { attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId", since: "7.137.0" },
+            "400 request.body_shape#PATCH /v1/sessions/:id": { attr: "the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else", since: "7.139.0" },
+            "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag": { attr: "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)", since: "7.139.0" },
+            "409 conflict.session_mirror#PATCH /v1/sessions/:id": { attr: "this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written", since: "7.139.0" },
+            "409 conflict.session_row_changed#PATCH /v1/sessions/:id": { attr: "the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag", since: "7.139.0" },
         },
     },
     decisionBodyKey: {
@@ -427,6 +502,14 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
         },
     },
+    sessionRowWriteKey: {
+        at: "PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的)",
+        members: {
+            "body#expectedRowTag": { attr: "optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed", since: "7.139.0" },
+            "409 conflict.session_row_changed#currentRow": { attr: "always", since: "7.139.0" },
+            "409 conflict.session_mirror#forkPath": { attr: "always", since: "7.139.0" },
+        },
+    },
     approvalStaleBodyKey: {
         at: "409 approval_stale 拒体(<端点>#<键> → 在场律)",
         members: {
@@ -442,6 +525,13 @@ export const SELF_MINTED_WIRE = {
             toolCallId: { attr: "present-iff", since: "7.41.0" },
         },
     },
+    settlementEvidenceKey: {
+        at: "回决门族 200 体的结清证据(<键> → 在场律;五个执行 / 回放边界由一只铸函数铸)",
+        members: {
+            checkpointId: { attr: "present-iff", since: "7.138.0" },
+            decisionCommitted: { attr: "present-iff", since: "7.138.0" },
+        },
+    },
     approvalEnvelopeExtKey: {
         at: "直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门)",
         members: {
@@ -493,9 +583,15 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
-            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
-            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
-            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "redactSecrets-outside-engine-marks+truncate:200", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics": { attr: "required-no-default;absent-or-blank-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics": { attr: "own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics": { attr: "own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics": { attr: "remote-without-center-url-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[RETENTION_MODE].semantics": { attr: "enforce-without-horizon-or-cadence-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics": { attr: "cadence-without-horizon-refuses-boot", since: "7.139.0" },
+            "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
+            "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].derivedDefaultNote": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },

package/dist/trace/wire-projection-faces.d.ts

@@ -100,7 +100,7 @@ export type DeclaredKey = ManifestShape & {
  */
 export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
-export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
+export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "BrainStatus", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
 /**
  * `wiring_manifest` 的 **operator 面多投的那几段**(`wiringManifestOperatorEventData` 在租户形之上加的段)。
  * operator 行的 `excluded` = 租户行减本常量(派生);四段各自的受众裁定在 `core-keyset-guard.ts` ⑥b。
@@ -129,13 +129,13 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly tool_start: {
         readonly projector: "toolStartEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["requestedBy"];
+        readonly excluded: readonly [];
         readonly minted: readonly [];
     };
     readonly tool_end: {
         readonly projector: "toolEndEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["requestedBy", "answeredBy"];
+        readonly excluded: readonly [];
         readonly minted: readonly [];
     };
     readonly tool_progress: {
@@ -171,12 +171,12 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly workspace_changed: {
         readonly projector: "workspaceChangedEventData";
         readonly coreType: string;
-        readonly excluded: readonly [];
+        readonly excluded: readonly ["root", "remote", "entered", "project"];
         readonly minted: readonly [];
     };
     readonly status: {
         readonly projector: "brainStatusEventData";
-        readonly coreType: string;
+        readonly coreType: `BrainStatus & ${string}`;
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
@@ -213,7 +213,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal"];
+        readonly excluded: readonly ["principal", "runOrigin"];
         readonly minted: readonly [];
     };
     readonly task_notification: {

package/dist/trace/wire-projection-faces.js

@@ -1,6 +1,7 @@
 export const FRAME_ENVELOPE_KEYS = ["type", "sourceTaskId", "bgAgentId"];
 export const WIRE_PROJECTION_CORE_IMPORTS = [
     "TaskEvent",
+    "BrainStatus",
     "TaskNotificationPayload",
     "WiringManifest",
     "EngineNotice",
@@ -26,21 +27,21 @@ function withoutSections(all, drop) {
 export const WIRE_PROJECTION_FACES = {
     task_progress: { projector: "taskProgressEventData", coreType: arm("task_progress"), excluded: [], minted: [] },
     task_started: { projector: "taskStartedEventData", coreType: arm("task_started"), excluded: [], minted: [] },
-    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: ["requestedBy"], minted: [] },
-    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: ["requestedBy", "answeredBy"], minted: [] },
+    tool_start: { projector: "toolStartEventData", coreType: arm("tool_start"), excluded: [], minted: [] },
+    tool_end: { projector: "toolEndEventData", coreType: arm("tool_end"), excluded: [], minted: [] },
     tool_progress: { projector: "toolProgressEventData", coreType: arm("tool_progress"), excluded: [], minted: [] },
     tool_disclosure: { projector: "toolDisclosureEventData", coreType: arm("tool_disclosure"), excluded: [], minted: [] },
     tool_roster_delta: { projector: "toolRosterDeltaEventData", coreType: arm("tool_roster_delta"), excluded: [], minted: [] },
     diagnostics: { projector: "diagnosticsEventData", coreType: arm("diagnostics"), excluded: [], minted: [] },
     steering_injected: { projector: "steeringInjectedEventData", coreType: arm("steering_injected"), excluded: [], minted: [] },
-    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: [], minted: [] },
-    status: { projector: "brainStatusEventData", coreType: arm("status"), excluded: [], minted: [] },
+    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: ["root", "remote", "entered", "project"], minted: [] },
+    status: { projector: "brainStatusEventData", coreType: `BrainStatus & ${arm("status")}`, excluded: [], minted: [] },
     compacted: { projector: "compactedEventData", coreType: arm("compacted"), excluded: [], minted: [] },
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
     compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "runOrigin"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,

package/dist/url-refusal.d.ts

@@ -12,7 +12,7 @@
  * 拒句从源头不含解析记号 —— 判官只给规则词,值只经本模块的展示律出现。
  *
  * ## 读者
- * 中心基址三席 + 公告地址 + 请求期 `centerFetch`(`web-admin-client/center-request.ts` `pathBaseUrlRefusal`:禁 userinfo / query / fragment)·
+ * 中心基址三席 + 公告地址 + 记忆同步中心基址 `MEMORY_SYNC_URL` + 请求期 `centerFetch`(`web-admin-client/center-request.ts` `pathBaseUrlRefusal`:禁 userinfo / query / fragment)·
  * 续签 issuer(只问形)· 模型路由三键(`model-route-url.ts`:禁 userinfo / fragment,query 照收)· `MEMORY_EMBEDDER_ENDPOINT` 与
  * `A2A_SERVE_URL`(禁 userinfo)· `SANDBOX_PKG_SOURCE=custom` 六只地址(形 + 带凭据,后者的判官是契约包根的 `findUrlCredential`,拒句经 {@link buildUrlCredentialRefusal})。
  * 「scheme 只有判官与展示铸点读」由 `test/config-url-display-safe.test.ts` 的读者普查门钉住。

package/dist/user-authored-text.d.ts

@@ -1,5 +1,5 @@
-/** 非用户正文块的闭集标签(引擎 / 壳注入)。加一个标签 = 改这里一处:下面的正则由本表生成。 */
-export declare const INJECTED_BLOCK_TAGS: readonly ["system-reminder", "task-notification", "attachment"];
+/** 非用户正文块的闭集标签(引擎 / 壳注入)。加一个标签 = 改这里一处:下面的正则由本表生成(分支组的序 = 本表的序)。 */
+export declare const INJECTED_BLOCK_TAGS: readonly ["system-reminder", "task-notification", "attachment", "command-name", "command-message", "command-args", "local-command-stdout", "local-command-stderr", "local-command-caveat", "bash-input", "bash-stdout", "bash-stderr", "bash-exit-code", "user-memory-input"];
 /**
  * 注入块的唯一一只正则(由 {@link INJECTED_BLOCK_TAGS} 生成)。**只配 `String.prototype.replace` 使用**(带 `g`,
  * `lastIndex` 有状态,拿去 `.test` / `.exec` 会读到上一次的位置)。

package/dist/user-authored-text.js

@@ -1,5 +1,20 @@
 import { redactSecrets } from "./trace/redact.js";
-export const INJECTED_BLOCK_TAGS = ["system-reminder", "task-notification", "attachment"];
+export const INJECTED_BLOCK_TAGS = [
+    "system-reminder",
+    "task-notification",
+    "attachment",
+    "command-name",
+    "command-message",
+    "command-args",
+    "local-command-stdout",
+    "local-command-stderr",
+    "local-command-caveat",
+    "bash-input",
+    "bash-stdout",
+    "bash-stderr",
+    "bash-exit-code",
+    "user-memory-input",
+];
 export const INJECTED_BLOCK_RE = new RegExp(`<(${INJECTED_BLOCK_TAGS.join("|")})(?:\\s(?:[^<>"']|"[^"<]*"|'[^'<]*')*?)?(?:\\/>|>[\\s\\S]*?(?:<\\/\\1>|$))\\s*`, "g");
 export function stripInjectedBlocks(text) {
     return text.replace(INJECTED_BLOCK_RE, "");

package/dist/web-admin-client/apply-effective.d.ts

@@ -94,9 +94,11 @@ export declare function withModelPlaneOf<E extends EffectiveConfig>(target: E, s
  */
 export declare function fullyLandedForLkg(read: ConfigCandidateRead, report: ApplyReport | undefined): boolean;
 /**
- * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**(组拒码闭集的属主是 settings-schema `MODEL_PLANE_REFUSAL_CODES`;那边加一个码
- * ⇒ 本表缺键 ⇒ 本仓 tsc 红)。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 —— 一个 id 两个码
- * (`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数。
+ * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**。组拒码闭集的属主是 settings-schema `MODEL_PLANE_REFUSAL_CODES`,每个码恰有**一个铸码方**,
+ * 分两本账(下面两个表 + 三道编译门;那边加一个码而这两本都没收 ⇒ 本仓 tsc 红):
+ *  · 本表 = **本仓模型面 stage 自己铸**的码 → 铸它的不变量。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 —— 一个 id 两个码
+ *    (`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数;
+ *  · {@link ENGINE_MINTED_PLANE_REFUSAL_CODES} = 契约包出码、执法者是本仓但**今天未执法**的码(名字里的 ENGINE 沿契约包的词义 = worker,即本仓),本仓 stage 现在不铸。
  */
 export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.default_model_missing": "default-model-resolvable";
@@ -104,6 +106,18 @@ export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.model_route_endpoint_missing": "model-route-endpoint";
     readonly "config.gateway_fallback_without_primary": "model-route-endpoint";
 };
+/**
+ * 契约包出码、执法者是本仓但今天**未执法**的两只组拒码:本地配置腿上「管模型面的目录会顶替已声明的 env 表、决定不是 `replaced`」那道闸,与「每个任务都要解的 summarize 落不到可服务条目」的不变量。
+ *
+ * 词义:settings-schema 发布说明里的「engine / 引擎一侧」指**本仓(worker)**,不是 `@sema-agent/core` —— 这两码要的全部输入(本地配置腿、env 表、模型面 stage 与组拒口)只在本仓,core 里没有读
+ * `MODEL_ID` / `config.d` 的地方、也没有组拒码。(契约包自己有几处把同一个词写成 core 7.58.0,那是它的叫法错。)所以本仓 stage 现在没有对应的不变量、不铸这两个码,不是因为「归引擎」,而是**还没做**,两码各自候什么:
+ *  · `CATALOG_REPLACES_ENV_MODELS_CODE`:执法是一整组跨仓件 —— 开机迁移 SS-M11(铸决定文档)· 本地腿每拍读决定(读数身份进候选的 etag)· 目录信任判官走根级文档 · 命令行 / 桌面 / 客户端核心三个写者先接契约包的计划助手;
+ *    候设计票。在那之前,候选目录管着模型面而 env 表也声明了时,仍照旧由目录服务(与升级前逐位同)。
+ *  · `SUMMARIZE_MODEL_MISSING_CODE`:码的前提是「summarize 落不到可服务条目 ⇒ 采纳后每个任务都被拒」,而本仓所钉 core 7.59.0 起非严格座位(summarize 在内)点名目录里没有的词时读作未设、沿自己的回落链走
+ *    (summarize 的链是 → default,即回落缺省模型)并通告 `model.role_defaulted`;链上没有可解的模型才拒 —— 前提与所钉 core 相抵,候上游(settings-schema / core)重定义或退役这个码;在那之前 summarize 角色绑到不可用条目时仍是角色绑定那一行 warn(`ROLE_BINDING_UNAVAILABLE_HINT`),不是组拒。
+ * 两码开始被铸之后,它们进 `/health.modelRefusals.plane` 的座位是**另案设计**(现在没有座:见 `model-plane-face.ts` 对「装配期被引擎整份拒收」的披露),不在这张表里偷铸一个不变量替它占位。
+ */
+export declare const ENGINE_MINTED_PLANE_REFUSAL_CODES: readonly ["config.catalog_replaces_env_models", "config.summarize_model_missing"];
 /**
  * [ref] —— **「无中心配置」档的候选**:中心凭证换人时,server 把在用的中心配置降到这一档({@link applyEffective} 吃它,和吃任何候选走同一条 stage → swap → commit)。
  * 它的意思是「**撤回**中心配置」—— 中心下发的每个热面回 env 底:

package/dist/web-admin-client/apply-effective.js

@@ -1,8 +1,8 @@
-import { expandTiers, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
-import { WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
+import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
+import { CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE, WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
 import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
-import { applyAutoCompactWindow, buildModelCostKey, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
+import { applyAutoCompactWindow, buildModelCostKey, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { NAME_TABLE_BEHAVIOR } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
@@ -118,7 +118,7 @@ export function applyEffective(config, eff, logger, opts) {
     }
     const mp = staged.modelPlaneGroup.stages.models;
     if (mp !== undefined) {
-        declareCandidateWithheldEnv(mp.modelApiKeyEnv, staged.version);
+        declareCandidateWithheldEnv(config, mp.modelApiKeyEnv, staged.version);
         if (opts.swapPlane !== undefined) {
             try {
                 opts.swapPlane({ models: mp.models, tiers: mp.activeTiers });
@@ -171,17 +171,25 @@ export function applyEffective(config, eff, logger, opts) {
         logger?.info("web_admin_projects", { projects: Object.keys(staged.projects) });
     return true;
 }
-function declareCandidateWithheldEnv(modelApiKeyEnv, version) {
+function declareCandidateWithheldEnv(seats, modelApiKeyEnv, version) {
+    const entries = Object.entries(modelApiKeyEnv)
+        .map(([model, envName]) => `${model}→${envName}`)
+        .join(", ");
     try {
         declareServerWithheldEnv(modelApiKeyEnv);
     }
     catch (err) {
-        const entries = Object.entries(modelApiKeyEnv)
-            .map(([model, envName]) => `${model}→${envName}`)
-            .join(", ");
         throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv names a variable the engine cannot withhold from model-driven shells — ` +
             `the candidate is refused whole and the current generation keeps serving; fix that entry's apiKeyEnv (entries: ${entries}). Engine: ${err instanceof Error ? err.message : String(err)}`);
     }
+    const handedOn = ownCredentialHitsInForce(seats);
+    if (handedOn.length === 0)
+        return;
+    withdrawServerWithheldEnv();
+    throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv names a variable a name-list env knob hands on — ` +
+        handedOn.map((h) => `env ${h.knob} hands on ${h.name}, which this candidate makes ${h.problem}`).join("; ") +
+        `; or point that entry's apiKeyEnv at a variable no name list hands on. The name lists are read at boot (changing one takes a restart); ` +
+        `the candidate is refused whole and the current generation keeps serving (entries: ${entries}).`);
 }
 function commitStaged(config, staged) {
     const mp = staged.modelPlaneGroup.stages.models;
@@ -240,13 +248,14 @@ export const PLANE_REFUSAL_INVARIANT_OF = {
     "config.model_route_endpoint_missing": "model-route-endpoint",
     "config.gateway_fallback_without_primary": "model-route-endpoint",
 };
+export const ENGINE_MINTED_PLANE_REFUSAL_CODES = [CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE];
 function modelPlaneGroupReport(group) {
     return {
         applied: MODEL_PLANE_DOMAINS.flatMap((d) => (group.stages[d] !== undefined ? MODEL_PLANE_SURFACES[d] : [])),
         ...(group.rejected !== undefined ? { rejected: { keys: group.rejected.keys, reason: group.rejected.reason } } : {}),
     };
 }
-const ROLE_BINDING_UNAVAILABLE_HINT = "tasks resolving this role fail: alias/tier expansion cannot mint this name; the engine refuses it loud — bind the role to a usable model, or make the entry usable (see the entry's own warn)";
+const ROLE_BINDING_UNAVAILABLE_HINT = "alias/tier expansion cannot mint this name, so the engine does not hold it: a strict seat (default, classifier) refuses the task loud; any other role reads as unset and falls back along its own chain with a model.role_defaulted notice (refused only when nothing on that chain resolves) — bind the role to a usable model, or make the entry usable (see the entry's own warn)";
 export const NO_CENTER_EFFECTIVE = deepFreeze({ version: 0, updatedAt: "", models: { models: [], roles: {} }, mcp: { servers: [] } });
 export const isNoCenterEffective = (eff) => eff === NO_CENTER_EFFECTIVE;
 function deepFreeze(v) {
@@ -636,7 +645,8 @@ function engineDefaultOfSelect(select, models, activeTiers) {
     catch (err) {
         return { unresolved: err instanceof Error ? err.message : String(err) };
     }
-    const name = Object.keys(models).find((n) => models[n] === picked);
+    const origin = modelOriginOf(picked);
+    const name = Object.keys(models).find((n) => models[n] === origin);
     return name !== undefined ? { name } : { unresolved: "the engine picked a model object that is not an entry of the usable catalog" };
 }
 export function logEffectiveDiff(config, eff, logger) {

package/dist/web-admin-client/center-request.d.ts

@@ -82,8 +82,9 @@ export interface CenterRequestInit {
 }
 /**
  * 「后面要拼路径的基址」的拒句 —— 中心基址三席(`SEMA_WEB_ADMIN_URL` / `SEMA_WEB_ADMIN_LIVE_URL` / `SEMA_WEB_ADMIN_WEB_URL`)与本实例的
- * 公告地址(`FLEET_ADVERTISE_ADDRESS`,中心往它后面拼 `/v1/...`)同读。判官是 settings-schema 的 `httpUrlFlaws`(层级式 http(s) URL;Node 的 fetch
- * 认 `file://` / `data:`,配错的地址不许变成读本地文件),本函数只声明这一席禁哪几件({@link PATH_BASE_FORBIDS})。起服时 `config.ts` 判
+ * 公告地址(`FLEET_ADVERTISE_ADDRESS`,中心往它后面拼 `/v1/...`)同读。判官是 settings-schema 的 `pathBaseUrlFlaws`(14.7.0 起:这一座位的禁用集
+ * userinfo / query / fragment 与判官都在契约包,= `httpUrlFlaws` 配那一集;层级式 http(s) URL,Node 的 fetch 认 `file://` / `data:`,配错的地址不许变成
+ * 读本地文件),本仓零禁用集副本,编排器渲染公告地址 env 的一方调的是同一只。起服时 `config.ts` 判
  * (拒启),请求期 {@link centerFetch} 对同一份基址再判一次(自拼 `ServiceConfig` 的嵌入方也吃同一条规则)。合格 ⇒ `undefined`;否则交回
  * `<subject> <规则词>; got "<展示面安全形>"` —— 拒句里没有从值里解析出来的任何记号(scheme / userinfo / 主机名),捕获点照原样落日志即可。
  */

package/dist/web-admin-client/center-request.js

@@ -2,7 +2,7 @@ import settingsSchemaPackage from "@sema-agent/settings-schema/package.json" wit
 import { AUTH_V1_PATHS } from "@sema-agent/settings-schema/api/auth";
 import { FLEET_LIVE_PATHS, FLEET_PATHS } from "@sema-agent/settings-schema/fleet";
 import { CenterCredentialUnavailableError } from "../center-credential.js";
-import { WEB_ADMIN_ENV, httpUrlFlaws } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV, httpUrlFlaws, pathBaseUrlFlaws } from "@sema-agent/settings-schema";
 import { buildHttpUrlRefusal } from "../url-refusal.js";
 import { egressRedirectRefusal } from "../egress-redirect.js";
 export const SCHEMA_MAJOR_HEADER = "x-sema-schema-major";
@@ -82,9 +82,8 @@ async function sendToCenter(fix, url, wire) {
         throw new CenterRedirectRefusedError(res.status, `web-admin center request: ${refusal}`);
     return res;
 }
-const PATH_BASE_FORBIDS = ["userinfo", "query", "fragment"];
 export function pathBaseUrlRefusal(subject, raw) {
-    const flaws = httpUrlFlaws(raw, PATH_BASE_FORBIDS);
+    const flaws = pathBaseUrlFlaws(raw);
     return flaws.length === 0 ? undefined : buildHttpUrlRefusal(subject, raw, flaws);
 }
 function assertPathBaseUrl(raw, what) {

package/dist/web-admin-client/skills-mcp.d.ts

@@ -1,6 +1,7 @@
 import { type A2aServerSpec, type McpServerSpec, type SkillSpec } from "@sema-agent/core";
 import type { CenterMcp, ScopedA2aPeer } from "../config-types.js";
 import type { Logger } from "../observability/logger.js";
+import { type PeerDesk, type PeerLease } from "../peer-seat.js";
 import type { LoadedSkill } from "../capabilities/skills.js";
 import type { ConfigProvider } from "../config-provider.js";
 import type { CenterA2aPeer, CenterMcpServer, CenterSkillManifest } from "./types.js";
@@ -53,14 +54,16 @@ export declare function applySkillsManifest(baseline: LoadedSkill[], manifest: {
 }, bodies: SkillBodySource, logger?: Logger): Promise<LoadedSkill[]>;
 /**
  * Resolve center MCP servers (`/effective.mcp`) into core `McpServerSpec`s + the scenarios each applies to.
- * env-NAME refs → real values from THIS service's env (secret boundary unchanged); a server with any missing
+ * env-NAME refs → real values from THIS service's env (secret boundary unchanged), registered on `desk` under `rosterLease`
+ * (the desk's one minting point `mintDeclaration`, called only for an entry that mounts — after every judge below has passed, so a skipped
+ * entry never holds a registration): the spec carries the minted reference, never the values. A server with any missing
  * ref is skipped (`resolveRefs` → null). `enabled:false` skipped. A server whose `toolFaces` / `toolAxes` declaration is
  * malformed is skipped whole (both are trust-root declarations — the engine's `readToolFaces` / `readMcpToolAxes` judge them). Restart-to-apply
  * (filtered per scenario in `resolveSpec` via `mcpForScenario`).
  */
 export declare function resolveMcpServers(mcp: {
     servers: CenterMcpServer[];
-}, logger?: Logger): CenterMcp;
+}, desk: Pick<PeerDesk, "declare">, rosterLease: PeerLease, logger?: Logger): CenterMcp;
 /** The MCP servers applicable to a scenario: tagged with it, or untagged (global). undefined when none.
  *  [ref]:alias 窗撤销,单键命中(同 `skillsForScenario`)。 */
 export declare function mcpForScenario(center: CenterMcp | undefined, scenario: string): McpServerSpec[] | undefined;
@@ -68,7 +71,8 @@ export declare function mcpForScenario(center: CenterMcp | undefined, scenario:
  * DESIGN-269 §2.1 —— resolve center A2A peers (`/effective.a2a`) into core `A2aServerSpec`s + the scenarios
  * each applies to. Exact sibling of {@link resolveMcpServers}, same three rules:
  *   · header-NAME refs → real values from THIS service's env (the secret boundary is unchanged — the center
- *     never holds the bearer). A peer with ANY missing ref is SKIPPED wholesale (`resolveRefs` → null):
+ *     never holds the bearer), registered on `desk` under `rosterLease` (`mintDeclaration`, only for a peer that mounts); the spec carries the minted
+ *     reference, never the values. A peer with ANY missing ref is SKIPPED wholesale (`resolveRefs` → null):
  *     dialing a remote AGENT with half the credentials is the wrong failure direction.
  *   · `enabled:false` skipped.
  *   · restart-to-apply (filtered per scenario in `resolveSpec` via {@link a2aForScenario}).
@@ -83,7 +87,7 @@ export declare function mcpForScenario(center: CenterMcp | undefined, scenario:
  */
 export declare function resolveA2aPeers(a2a: {
     peers: CenterA2aPeer[];
-}, logger?: Logger): ScopedA2aPeer[];
+}, desk: Pick<PeerDesk, "declare">, rosterLease: PeerLease, logger?: Logger): ScopedA2aPeer[];
 /** The A2A peers applicable to a scenario: tagged with it, or untagged (global). undefined when none.
  *  Twin of {@link mcpForScenario} — `undefined` (not `[]`) is load-bearing: an empty array would put an
  *  `a2a: []` key on the spec, i.e. "this deployment declares an empty peer set", where absence means

package/dist/web-admin-client/skills-mcp.js

@@ -1,8 +1,9 @@
 import { readMcpSourceLabel } from "../mcp-source-label.js";
 import { skillContentHash } from "@sema-agent/settings-schema";
-import { readMcpToolAxes, readToolFaces } from "@sema-agent/core";
+import { judgeSessionMetaKey, readMcpToolAxes, readToolFaces } from "@sema-agent/core";
 import { MCP_CONTENT_ORIGINS, describeBadContentOrigin, describeBadWireName, isContentOriginWord, isUsableWireName } from "@sema-agent/settings-schema";
-import { noteMcpAssertionHeaderNotSent, sentMcpAssertionHeaderMember, withholdsMcpAssertionHeader } from "../mcp-assertion-header.js";
+import { noteMcpAssertionHeaderNotSent, withholdsMcpAssertionHeader } from "../mcp-assertion-header.js";
+import { mintDeclaration, peerSentence } from "../peer-seat.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
 export function skillToolListsOf(source) {
     return {
@@ -115,7 +116,7 @@ function resolveRefs(refs, server, kind, logger, event = "web_admin_mcp_env_miss
     }
     return out;
 }
-export function resolveMcpServers(mcp, logger) {
+export function resolveMcpServers(mcp, desk, rosterLease, logger) {
     const out = [];
     const reservedNames = (mcp.servers ?? []).map((s) => s.name);
     for (const s of mcp.servers ?? []) {
@@ -147,7 +148,7 @@ export function resolveMcpServers(mcp, logger) {
         if (!facesRead.ok) {
             logger?.warn("web_admin_mcp_tool_faces_invalid", {
                 server: s.name,
-                problem: facesRead.problem,
+                problem: peerSentence(facesRead.problem),
                 note: "server SKIPPED — a toolFaces overlay is a NARROWING declaration (its pathTarget is what the sensitive-path / write fences read); mounting the server without it would silently drop the protection you declared. Fix the entry and republish.",
             });
             continue;
@@ -157,20 +158,32 @@ export function resolveMcpServers(mcp, logger) {
         if (!axesRead.ok) {
             logger?.warn("web_admin_mcp_tool_axes_invalid", {
                 server: s.name,
-                problem: axesRead.problem,
+                problem: peerSentence(axesRead.problem),
                 note: "server SKIPPED — a toolAxes declaration is a TRUST-ROOT declaration (it can lower an effect so a call skips the approval fence, or raise one); mounting the server without it, or with a half of it, would silently change what you declared. Fix the entry and republish.",
             });
             continue;
         }
         const toolAxes = axesRead.toolAxes === undefined ? {} : { toolAxes: axesRead.toolAxes };
+        const metaKey = judgeSessionMetaKey(s.sessionMetaKey);
+        if ("problem" in metaKey) {
+            logger?.warn("web_admin_mcp_session_meta_key_invalid", {
+                server: s.name,
+                problem: peerSentence(metaKey.problem),
+                note: "server SKIPPED — its sessionMetaKey cannot ride (the engine's judge refused it); mounting the server without the key would silently drop the session id it declared it needs. Fix the entry and republish.",
+            });
+            continue;
+        }
+        const sessionMetaKey = metaKey.key === undefined ? {} : { sessionMetaKey: metaKey.key };
+        const startupTimeout = s.startupTimeoutMs === undefined ? {} : { startupTimeoutMs: s.startupTimeoutMs };
         if (s.transport.kind === "stdio") {
             const env = resolveRefs(s.transport.envRefs, s.name, "env", logger);
             if (env === null)
                 continue;
-            out.push({
-                scenarios: s.scenarios ?? [],
-                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args, ...(Object.keys(env).length ? { env } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes },
-            });
+            const draft = {
+                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
+                pieces: env,
+            };
+            out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });
         }
         else {
             const headers = resolveRefs(s.transport.headerRefs, s.name, "header", logger);
@@ -178,10 +191,11 @@ export function resolveMcpServers(mcp, logger) {
                 continue;
             if (withholdsMcpAssertionHeader(s.transport.assertionHeader))
                 noteMcpAssertionHeaderNotSent(logger, s.name);
-            out.push({
-                scenarios: s.scenarios ?? [],
-                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(Object.keys(headers).length ? { headers } : {}), ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}), ...sentMcpAssertionHeaderMember(s.transport.assertionHeader) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes },
-            });
+            const draft = {
+                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
+                pieces: headers,
+            };
+            out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });
         }
     }
     if (out.length > 0)
@@ -195,7 +209,7 @@ export function mcpForScenario(center, scenario) {
     const hit = servers.filter((s) => s.scenarios.length === 0 || s.scenarios.includes(scenario)).map((s) => s.spec);
     return hit.length > 0 ? hit : undefined;
 }
-export function resolveA2aPeers(a2a, logger) {
+export function resolveA2aPeers(a2a, desk, rosterLease, logger) {
     const out = [];
     for (const p of a2a.peers ?? []) {
         if (p.enabled === false)
@@ -210,17 +224,17 @@ export function resolveA2aPeers(a2a, logger) {
         const headers = resolveRefs(p.headerRefs, p.name, "header", logger, "web_admin_a2a_env_missing", "skipping this A2A peer — referenced env var is unset in this service");
         if (headers === null)
             continue;
-        out.push({
-            scenarios: p.scenarios ?? [],
+        const draft = {
             spec: {
                 name: p.name,
                 url: p.url,
                 ...(p.cardUrl ? { cardUrl: p.cardUrl } : {}),
-                ...(Object.keys(headers).length ? { headers } : {}),
                 ...(p.principalHeader ? { principalHeader: p.principalHeader } : {}),
                 ...(p.allowSkills && p.allowSkills.length > 0 ? { allowSkills: p.allowSkills } : {}),
             },
-        });
+            pieces: headers,
+        };
+        out.push({ scenarios: p.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });
     }
     if (out.length > 0)
         logger?.info("web_admin_a2a", { peers: out.map((p) => p.spec.name) });