@sema-agent/server 7.138.0 → 7.139.0

package/dist/session-row.d.ts

@@ -1,10 +1,114 @@
+import { type SessionLogMark, type SessionRowExpectation } from "@sema-agent/core";
 /** `title` 列的宽度(字符)= 用户标题的上界。两方言 DDL 内插它。 */
 export declare const SESSION_TITLE_MAX_CHARS = 120;
-/** 会话行的可写位(体闭集;两键至少一键)。会话店唯一写口 `patchSessionMeta` 的形参。`title: null` = 清回自动标题(列写 NULL)。 */
+/** 会话行的可写位(体闭集;两键至少一键)。会话店唯一行格写口 `writeSessionRowCells` 的格参。`title: null` = 清回自动标题(列写 NULL)。 */
 export interface SessionRowPatch {
     readonly title?: string | null;
     readonly pinned?: boolean;
 }
+/** 一行可写格的整组当前值(每格必在;没被写过的格 = 它的缺省值)。 */
+export type SessionRowCells = {
+    readonly [K in keyof SessionRowPatch]-?: Exclude<SessionRowPatch[K], undefined>;
+};
+/**
+ * 可写格的闭集与每格缺省值 —— **一只记录**(头注「格的闭集与缺省值是一只记录」):PATCH 体闭集的键表与 {@link sessionRowTagOf} 的取格都读它;
+ * 映射型把它与 {@link SessionRowPatch} 双向绑住(漏一键 / 多一键 = 编译红)。
+ */
+export declare const SESSION_ROW_CELL_DEFAULTS: SessionRowCells;
+/** 行标签的形:SHA-256 的 base64url(无填充)= 43 个 `[A-Za-z0-9_-]` 字符。体读者对 `expectedRowTag` 判的就是它。 */
+export declare const SESSION_ROW_TAG_SHAPE: RegExp;
+/** 算一只行标签要的四样:会话 id、属主、这一位住客的化身(非空)、可写格的整组当前值。 */
+export interface SessionRowTagInput {
+    readonly sessionId: string;
+    readonly owner: string | null;
+    readonly incarnation: string;
+    readonly cells: SessionRowCells;
+}
+/**
+ * 行标签 —— 唯一一只(头注「行标签」):纯函数、无进程密钥,多副本对同一行算出同一个串。格按 {@link SESSION_ROW_CELL_DEFAULTS} 的键取、
+ * 值等于缺省的不入、按键名升序成 `[[键, 值], …]`。化身只以这只单向摘要的形式出进程(`session-incarnation.ts` 头注)。
+ */
+export declare function sessionRowTagOf(row: SessionRowTagInput): string;
+/**
+ * 列表行上的 `rowTag` 键(present-iff 这一行可被条件写 = 店有行写口 ∧ 行上有化身):三只店的列表行映射都经它,化身那一格由调用方经
+ * `incarnationFromCell(…, "absent")` 解码好交进来(`undefined` = 行上没有令牌 ⇒ 键缺席,不铸)。
+ */
+export declare function sessionRowTagKey(row: {
+    readonly sessionId: string;
+    readonly owner: string | null;
+    readonly incarnation: string | undefined;
+    readonly cells: SessionRowCells;
+}): {
+    readonly rowTag?: string;
+};
+/** 客户端写(PATCH):行期望 + 可选的行标签(只有 PATCH 入口给)。 */
+export interface ClientSessionRowWrite {
+    readonly writer: "client";
+    readonly row: SessionRowExpectation;
+    readonly rowTag?: string;
+}
+/** 行重放(2c 导入落定后的那一笔):只有行期望 —— 它是镜像行的名写者,不判镜像、不带标签。 */
+export interface ReplaySessionRowWrite {
+    readonly writer: "replay";
+    readonly row: SessionRowExpectation;
+}
+/** 写原语的写法(写者身份闭集两员)。 */
+export type SessionRowWrite = ClientSessionRowWrite | ReplaySessionRowWrite;
+/**
+ * 写原语的结局(闭集四员):`written` / `changed` 带提交(回滚)之后另读的那一行(列表行投影,含新 `rowTag`);`mirror`(客户端写在只读镜像上)/
+ * `absent`(行期望不中 / 没有行 / 委派分区行 / 应答行已不是判过的那一位住客)一个字节没写。
+ */
+export type SessionRowWriteOutcome<Row> = {
+    readonly kind: "written";
+    readonly row: Row;
+} | {
+    readonly kind: "changed";
+    readonly row: Row;
+} | {
+    readonly kind: "mirror";
+} | {
+    readonly kind: "absent";
+};
+/** 行重放的结局:`changed` / `mirror` 对它不可达(判官对 `replay` 不判标签、不判镜像)。 */
+export type ReplaySessionRowWriteOutcome<Row> = Extract<SessionRowWriteOutcome<Row>, {
+    readonly kind: "written" | "absent";
+}>;
+/** 写原语在锁下读到的那一行 —— 三店各自读成这一形,交同一只判官 {@link judgeSessionRowWrite}。 */
+export interface LockedSessionRow {
+    readonly owner: string | null;
+    /** 化身那一格(`incarnationFromCell(…, "absent")` 解码:空 / 非串 ⇒ `undefined` = 住客未知,与 core 同读)。 */
+    readonly incarnation: string | undefined;
+    /** 委派分区行(SQL `placement_kind` 非空;local 没有)—— 不在列表面上,不写。 */
+    readonly placed: boolean;
+    /** 执行格是 `mirror`(写者在别处,本处只读)。 */
+    readonly mirror: boolean;
+    readonly cells: SessionRowCells;
+}
+/** 判官的四答(`write` = 可以写;其余三答 = 一个字节不写)。 */
+export type SessionRowVerdict = "write" | "changed" | "mirror" | "absent";
+/**
+ * 写原语的**唯一判官**(头注「写原语」):三店在各自的锁下读出那一行、交这一只,判序因此逐字同形 ——
+ *  ① **行期望**:core 的 `sessionRowMatches(how.row, 锁住的行, logNow)`;不中、没有行(`undefined`)、委派分区行 ⇒ `absent`;
+ *  ② **写者身份**:`client` ∧ 执行格为 `mirror` ⇒ `mirror`(镜像在本处只读;`replay` 是镜像的名写者,照写);
+ *  ③ **标签**:`client` 带 `rowTag` ∧ 锁住的行算出的标签({@link sessionRowTagOf})≠ 它 ⇒ `changed`(行上没有化身 ⇒ 算不出标签 ⇒ 任何标签都不中);
+ *  ④ `write`。
+ * 没有「已生效 ⇒ 写」的豁免:标签不中一律 `changed` —— 整体摘要分不出「住客换了」还是「格变了」,豁免会让恰好已有目标值的新住客拿到写。
+ * `logNow` 只在行期望带 `log` 时被调(调用方在同一把锁下先读好那只 mark)。
+ */
+export declare function judgeSessionRowWrite(sessionId: string, how: SessionRowWrite, locked: LockedSessionRow | undefined, logNow: () => SessionLogMark): SessionRowVerdict;
+/** 应答行:提交 / 回滚之后另读的那一行 + 读到它时行上的住客(属主 + 化身那一格)。 */
+export interface SessionRowAnswer<Row> {
+    readonly row: Row;
+    readonly occupant: {
+        readonly owner: string | null;
+        readonly incarnation: string | undefined;
+    };
+}
+/**
+ * 判官答 `write` / `changed` 之后的结局 —— 三店同一只:应答行(提交 / 回滚之后另读)仍是判过的那一位住客(同一只 core 判官 `sessionRowMatches`,只比行期望的住客半,
+ * 不比日志 mark —— 那一维判的是写之前)⇒ `written` / `changed` 带它;读不到、或已换了住客 / 属主 ⇒ `absent`(不把另一位住客的行答给这位调用方)。
+ */
+export declare function settleSessionRowWrite<Row>(how: SessionRowWrite, verdict: "write" | "changed", answer: SessionRowAnswer<Row> | undefined): SessionRowWriteOutcome<Row>;
 /** 一条已分类的拒:码 + 不回显输入的句子。 */
 export interface SessionRowProblem {
     readonly code: "request.body_shape" | "request.field_invalid";
@@ -27,13 +131,18 @@ export declare function readSessionPinned(v: unknown): {
 } | {
     readonly problem: SessionRowProblem;
 };
+/** PATCH 体读出来的东西:要写的格 + 可选的前置条件(客户端读到的行标签)。 */
+export interface SessionRowPatchRequest {
+    readonly patch: SessionRowPatch;
+    /** 在场 = 「这一行仍是我读到的那一份才写」(写原语在锁住的那一行上比 {@link sessionRowTagOf});缺席 = 无条件写。 */
+    readonly expectedRowTag?: string;
+}
 /**
- * `PATCH /v1/sessions/:id` 体的**唯一**读者。形不对(非对象 / 空 / 表外键)⇒ `request.body_shape`;两键各走自己那一格的读者。
+ * `PATCH /v1/sessions/:id` 体的**唯一**读者。形不对(非对象 / 表外键 / 一格可写位都没有 —— 只带 `expectedRowTag` 也算)⇒ `request.body_shape`;
+ * 各格走自己那一格的读者;`expectedRowTag` 不是 {@link SESSION_ROW_TAG_SHAPE} ⇒ `request.field_invalid`。先形后值,值的判序:`title` → `pinned` → `expectedRowTag`。
  * 拒句不回显调用方的键名或值。
  */
-export declare function readSessionRowPatch(body: unknown): {
-    readonly patch: SessionRowPatch;
-} | {
+export declare function readSessionRowPatch(body: unknown): SessionRowPatchRequest | {
     readonly problem: SessionRowProblem;
 };
 //# sourceMappingURL=session-row.d.ts.map

package/dist/session-row.js

@@ -1,7 +1,50 @@
-import { normalizePeerName } from "@sema-agent/core";
+import { createHash } from "node:crypto";
+import { normalizePeerName, sessionRowMatches } from "@sema-agent/core";
 export const SESSION_TITLE_MAX_CHARS = 120;
-const SESSION_ROW_PATCH_KEYS = { title: true, pinned: true };
-const BODY_SHAPE_MESSAGE = "the body must be a JSON object carrying at least one of `title` and `pinned`, and nothing else";
+export const SESSION_ROW_CELL_DEFAULTS = { title: null, pinned: false };
+const SESSION_ROW_TAG_DOMAIN = "sema.session-row-tag/1";
+export const SESSION_ROW_TAG_SHAPE = /^[A-Za-z0-9_-]{43}$/;
+export function sessionRowTagOf(row) {
+    const keys = Object.keys(SESSION_ROW_CELL_DEFAULTS).sort();
+    const cells = keys.filter((k) => row.cells[k] !== SESSION_ROW_CELL_DEFAULTS[k]).map((k) => [k, row.cells[k]]);
+    return createHash("sha256").update(JSON.stringify([SESSION_ROW_TAG_DOMAIN, row.sessionId, row.owner, row.incarnation, cells]), "utf8").digest("base64url");
+}
+export function sessionRowTagKey(row) {
+    return row.incarnation === undefined ? {} : { rowTag: sessionRowTagOf({ sessionId: row.sessionId, owner: row.owner, incarnation: row.incarnation, cells: row.cells }) };
+}
+export function judgeSessionRowWrite(sessionId, how, locked, logNow) {
+    if (locked === undefined || !sessionRowMatches(how.row, { owner: locked.owner, incarnation: locked.incarnation }, logNow) || locked.placed)
+        return "absent";
+    switch (how.writer) {
+        case "replay":
+            return "write";
+        case "client": {
+            if (locked.mirror)
+                return "mirror";
+            if (how.rowTag === undefined)
+                return "write";
+            const current = locked.incarnation === undefined ? undefined : sessionRowTagOf({ sessionId, owner: locked.owner, incarnation: locked.incarnation, cells: locked.cells });
+            return current === how.rowTag ? "write" : "changed";
+        }
+        default: {
+            const unknownWriter = how;
+            throw new Error(`judgeSessionRowWrite: no writer ${JSON.stringify(unknownWriter)}`);
+        }
+    }
+}
+export function settleSessionRowWrite(how, verdict, answer) {
+    const judged = how.row.row;
+    if (judged === null || answer === undefined)
+        return { kind: "absent" };
+    if (!sessionRowMatches({ row: judged }, answer.occupant, unreachableLogMark))
+        return { kind: "absent" };
+    return verdict === "write" ? { kind: "written", row: answer.row } : { kind: "changed", row: answer.row };
+}
+function unreachableLogMark() {
+    throw new Error("settleSessionRowWrite: the answer row's occupant check carries no log mark, yet the judge asked for one");
+}
+const BODY_SHAPE_MESSAGE = "the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else";
+const ROW_TAG_INVALID_MESSAGE = "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)";
 const EMPTY_TITLE_MESSAGE = "title must not be the empty string — send `null` to clear it back to the automatic title";
 const INVISIBLE_TITLE_MESSAGE = "title must contain at least one visible character";
 const C0_CONTROL = /[\u0000-\u001f]/u;
@@ -25,11 +68,13 @@ export function readSessionTitle(v) {
 export function readSessionPinned(v) {
     return typeof v === "boolean" ? { pinned: v } : { problem: { code: "request.field_invalid", message: "pinned must be a boolean" } };
 }
+const EXPECTED_ROW_TAG_KEY = "expectedRowTag";
 export function readSessionRowPatch(body) {
     if (body === null || typeof body !== "object" || Array.isArray(body))
         return { problem: { code: "request.body_shape", message: BODY_SHAPE_MESSAGE } };
     const keys = Object.keys(body);
-    if (keys.length === 0 || keys.some((k) => !Object.hasOwn(SESSION_ROW_PATCH_KEYS, k))) {
+    const isCell = (k) => Object.hasOwn(SESSION_ROW_CELL_DEFAULTS, k);
+    if (!keys.some(isCell) || keys.some((k) => !isCell(k) && k !== EXPECTED_ROW_TAG_KEY)) {
         return { problem: { code: "request.body_shape", message: BODY_SHAPE_MESSAGE } };
     }
     const b = body;
@@ -46,6 +91,11 @@ export function readSessionRowPatch(body) {
             return read;
         patch = { ...patch, pinned: read.pinned };
     }
-    return { patch };
+    if (!(EXPECTED_ROW_TAG_KEY in b))
+        return { patch };
+    const tag = b.expectedRowTag;
+    if (typeof tag !== "string" || !SESSION_ROW_TAG_SHAPE.test(tag))
+        return { problem: { code: "request.field_invalid", message: ROW_TAG_INVALID_MESSAGE } };
+    return { patch, expectedRowTag: tag };
 }
 //# sourceMappingURL=session-row.js.map

package/dist/session-titler.d.ts

@@ -5,8 +5,8 @@
  * submission's acceptance seat (`run-acceptance.ts`: the objective entered the conversation, or a result-only verify /
  * cascade leg came back having done work). A run the engine refuses before acceptance never reaches the titler (no
  * model call for a refused input). No need to wait for the run to finish, and the web Recents gets the title sooner. Fills a NULL title only (`setTitleIfNull`,
- * store-side `WHERE title IS NULL`) — the user writes the SAME column unconditionally (`PATCH /v1/sessions/:id` →
- * `patchSessionMeta`): a user-set title is never overwritten (the probe below reads "titled" and skips the model
+ * store-side `WHERE title IS NULL`) — the user writes the SAME column (`PATCH /v1/sessions/:id` → the session row's write
+ * primitive `writeSessionRowCells`, unconditional unless the request carries `expectedRowTag`): a user-set title is never overwritten (the probe below reads "titled" and skips the model
  * call), and a title the user cleared (`title: null` ⇒ NULL) is filled again at the next submit (law: `session-row.ts`).
  * "Has it a title?" is read from the column on every submit (one point read) — the process keeps NO "already titled"
  * memo, because such a memo would be a second answer to that question that a clear turns stale. Generation = one

package/dist/task-a2a.d.ts

@@ -57,7 +57,7 @@ export declare const A2A_PEER_DISPOSITION: {
     readonly toolAxes: "engine";
 };
 /** 请求体 `a2aPeers[i]` 的键闭集 = 处置表的键(书写序即判序)。 */
-export declare const A2A_PEER_ENTRY_KEYS: readonly ("name" | "toolAxes" | "url" | "principalHeader" | "cardUrl" | "allowSkills" | "headers")[];
+export declare const A2A_PEER_ENTRY_KEYS: readonly ("name" | "headers" | "principalHeader" | "toolAxes" | "url" | "cardUrl" | "allowSkills")[];
 /**
  * **请求入口的一次读**(`boot/resolve-spec.ts` 在腿首铸一份,受理门与读器——续跑重放腿只有读器——都吃这一份):`body.a2aPeers` 若是数组,返回同形数组
  * (每个对象条目换成它的 {@link PeerSnapshot};非对象条目原样;长度保真 —— 界外的条数仍是受理门撞帽拒与读器丢弃留声的依据,只快照界内的条目);不是数组(缺席 / `null` / 别的形)原样返回。

package/dist/task-cwd.d.ts

@@ -87,8 +87,13 @@ export declare function parseAdditionalDirectories(raw: unknown): string[] | und
  *      per-session choice always wins;
  *   2. the TRUSTED `ctx.parentCwd` (core threads the PARENT task's working root via `RunInternals` when this
  *      task is a delegated child — never a TaskSpec field), UNLESS the child asked for `isolation:"worktree"`
- *      (core contract: worktree wins — an isolated fan-out child must not share the parent's mutable dir);
+ *      (an isolated fan-out child must not share the parent's mutable dir) — then `undefined`;
  *   3. undefined → the factory's ephemeral per-task dir (top-level task with no registered cwd).
+ * The `isolation:"worktree"` ⇒ `undefined` rule is this function's own and holds by itself (the child never inherits the
+ * parent's dir). It is NOT what answers a worktree ask on the host lane: `boot/execution-env.ts` never reaches here with one —
+ * the worktree wrapper (one layer out) mints the tree and does not call the base factory, and without the wrapper the base
+ * factory REFUSES (`isolation.unavailable`) instead of minting the empty ephemeral dir rule 3 would give. That refusal arm is
+ * revoked when engine 7.61.0 refuses by itself; this function's rule then goes on keeping the child off the parent's dir.
  * CC parity: a Task sub-agent inherits the main session's cwd. Trust: `parentCwd` comes from core's trusted
  * run-internals channel (same posture as `isolation`), so no tenancy gate is needed here — but the HOST lane
  * itself is single-user by deployment shape, and container lanes (k8s/e2b/local-docker) never consult this.

package/dist/task-mcp.d.ts

@@ -69,9 +69,9 @@ export declare const MAX_REQUEST_MCP_DROP_NAMES = 32;
  */
 export declare const MCP_SERVER_ENTRY_KEYS: readonly ["allowTools", "contentOrigin", "elicitation", "name", "sessionMetaKey", "source", "startupTimeoutMs", "toolAxes", "toolFaces", "transport"];
 /** `transport.kind:"stdio"` 的键闭集 = stdio 臂处置表的键(`env` 是件,其余进声明)。 */
-export declare const STDIO_MCP_TRANSPORT_KEYS: readonly ("kind" | "command" | "args" | "env")[];
+export declare const STDIO_MCP_TRANSPORT_KEYS: readonly ("env" | "kind" | "args" | "command")[];
 /** `transport.kind:"http"` 的键闭集 = http 臂处置表的键(`headers` 是件,`assertionHeader` 承载不发送,其余进声明)。 */
-export declare const HTTP_MCP_TRANSPORT_KEYS: readonly ("kind" | "url" | "principalHeader" | "headers" | "assertionHeader")[];
+export declare const HTTP_MCP_TRANSPORT_KEYS: readonly ("headers" | "kind" | "principalHeader" | "url" | "assertionHeader")[];
 /**
  * Does THIS deployment honor caller-supplied per-request MCP servers? TRUE for a SINGLE-USER deployment
  * (deployment-shape row `multiTenant` does not hold) — the requester is the super-admin of their own worker, so their `.mcp.json` is
@@ -188,7 +188,7 @@ export declare function assertRequestMcpEntries(bodyMcp: unknown): void;
 /**
  * `principalHeader` 的**名**有没有别的属主:判官是引擎包根的 `headerOwnershipCollision`(拨号时判同一条的那一只;这里只问身份头这一个名,件头名由引擎在发送时判)——
  * 名(任何大小写)是这一协议的传输自己写的头(MCP:`mcp-session-id` · `mcp-protocol-version` · `content-type` · `accept` · `last-event-id`;A2A 没有),或是引擎的断言头
- * (`connector-assertion`)⇒ 这一台拨号时必被拒,新提交在门上按名拒。原因句只点名**属主的拼写**(引擎 / 协议的词),不回显调用方写的串。
+ * (`connector-assertion`)⇒ 这一台拨号时必被拒,新提交在门上按名拒。原因句只点名**属主的拼写**(引擎固定表里的规范化小写头名),不回显调用方写的原串 / 大小写形(调用方写的恰是小写时,句里的名与所写相同)。
  * 新提交腿上按名 400(MCP 门表的 `transport`、A2A 判官表的 `principalHeader`)。续跑重放腿不 4xx:MCP 的读器不问它 —— 存量体里这一形照挂,由引擎在拨号时拒那一台、兄弟照挂;
  * A2A 的读器问同一张判官表 —— 这一条对端整条不进、`a2a_injection_dropped` 点名原因(引擎物化时同样拒那一台;结局同,原因说在本仓这一行)。
  */

package/dist/tool-approval.d.ts

@@ -1,3 +1,4 @@
+import type { ExecutionLane } from "./execution-lane-caps.js";
 import { type ApprovalDecidedBy, type HostSettledBy, type RetiredDecisionKeyFacts } from "./host-decision.js";
 import type { IncomingMessage } from "node:http";
 import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundGrantAbsence, type BoundSkillGrants, type ToolApprovalCard, type ReopenReason } from "@sema-agent/core";
@@ -872,6 +873,8 @@ interface ToolApprovalRunContextBase {
     taskId: string;
     sessionId?: string;
     owner: string | null;
+    /** 这条腿的执行车道 —— 装配点写所在边界执行上下文的 `ctx.lane`(`http/execution-context.ts`)。出处带车道:这只席造的问在铸行时记下它。 */
+    executionLane: ExecutionLane;
     abortSignal?: AbortSignal;
     /** [ref]([ref] §3.1 askId 派生的腿轴;车3 刀 3a 换轴:原 `leg?: number` → `legKey?: string`)。
      *  = `sha256(resume checkpoint token)` 的 hex,**首腿缺席折空串**(空串是首腿的真值,不是「未知」)。
@@ -1770,6 +1773,7 @@ export declare class ToolApprovalCoordinator {
         owner: string | null;
         taskId: string;
         sessionId?: string;
+        executionLane: ExecutionLane;
     }, why: LegUnattended) => ((req: AskRequest) => Promise<AskOutcome>);
     /**
      * 🔴 session grant 短路前的**持久出处复核**([ref] 的 codex R1-[high] 补丁;[ref] 换判据;[ref] / SN-C1 换读口)。
@@ -1968,6 +1972,8 @@ export declare class ToolApprovalCoordinator {
         /** [ref] 车3 刀 3b(§7.3):本腿的 walltime deadline —— 与 `legKey` 同源同理由,随**出处**走
          *  (子代经继承链拿到的是宿主腿的闭包,窗必须按宿主腿的剩余 walltime 算)。 */
         legDeadlineMonotonic?: number;
+        /** 宿主腿的执行车道(装配点写执行上下文的 `ctx.lane`);子代经继承链冻同一闭包 ⇒ 子代的问记宿主腿的车道。 */
+        executionLane: ExecutionLane;
     }) => ((req: AskRequest, signal?: AbortSignal) => Promise<AskOutcome>);
     /** 广播版裁决路径——`ask()`(ALS,恒单元素数组)与 `boundAsk`([ref]四多活集合,可能多元素)共用。
      *  全体 `ctxs` 保证同一 (owner, sessionId)(streamKey 分组不变式;单元素数组平凡成立)。

package/dist/tool-approval.js

@@ -1015,7 +1015,7 @@ export class ToolApprovalCoordinator {
     }
     boundUnattendedAsk = (identity, why) => {
         return async (req) => {
-            const origin = { owner: identity.owner, taskId: identity.taskId, ...(identity.sessionId !== undefined ? { sessionId: identity.sessionId } : {}), legKey: "" };
+            const origin = { owner: identity.owner, taskId: identity.taskId, ...(identity.sessionId !== undefined ? { sessionId: identity.sessionId } : {}), legKey: "", executionLane: identity.executionLane };
             if (await this.standingGrantSettles(origin, req, this.governanceForcedOf(origin, req)))
                 return true;
             return this.unattendedAskOutcome({ ...why, taskId: identity.taskId, owner: identity.owner, toolName: req.toolName });
@@ -1267,6 +1267,7 @@ export class ToolApprovalCoordinator {
             owner: ctx.owner,
             ...(ctx.sessionId !== undefined ? { sessionId: ctx.sessionId } : {}),
             legKey: ctx.legKey ?? "",
+            executionLane: ctx.executionLane,
             ...(ctx.legDeadlineMonotonic !== undefined ? { legDeadlineMonotonic: ctx.legDeadlineMonotonic } : {}),
         }, [ctx], req, signal);
     };
@@ -1279,6 +1280,7 @@ export class ToolApprovalCoordinator {
                 owner: identity.owner,
                 ...(identity.sessionId !== undefined ? { sessionId: identity.sessionId } : {}),
                 legKey: identity.legKey ?? "",
+                executionLane: identity.executionLane,
                 ...(identity.legDeadlineMonotonic !== undefined ? { legDeadlineMonotonic: identity.legDeadlineMonotonic } : {}),
             }, live, req, signal);
         };
@@ -1383,6 +1385,7 @@ export class ToolApprovalCoordinator {
         const card = this.askStore ? buildApprovalCard(frame, req, req.requiresRealApproval === true) : undefined;
         let cardForFrame = card;
         let persistedExpiresAtMs = expiresAtMs;
+        let entryExecutionLane = origin.executionLane;
         let lateEnsuredRow;
         let lateTerminalRow;
         let abandonedAs;
@@ -1422,6 +1425,7 @@ export class ToolApprovalCoordinator {
                     sourceTaskId,
                     sessionId: origin.sessionId ?? origin.taskId,
                     owner: origin.owner,
+                    executionLane: origin.executionLane,
                     batchId,
                     toolCallId: req.toolCallId,
                     legKey,
@@ -1458,6 +1462,7 @@ export class ToolApprovalCoordinator {
                     return existingOrCreated.inserted ? this.landUnattendedOutcome(unattended, existingOrCreated.row) : unattended;
                 }
                 persistedExpiresAtMs = existingOrCreated.row.expiresAtMs;
+                entryExecutionLane = existingOrCreated.row.executionLane;
                 cardForFrame = persistedEnvelope.card;
                 if (cardForFrame.governanceForced === true)
                     frame.governanceForced = true;
@@ -1936,6 +1941,7 @@ export class ToolApprovalCoordinator {
             ...(entryDeploymentListQuestion ? { deploymentListQuestion: true } : {}),
             registeredAtMs: Date.now(),
             expiresAtMs: persistedExpiresAtMs,
+            executionLane: entryExecutionLane,
             ...(ruleLaneMaterial !== undefined ? { ruleLane: ruleLaneMaterial } : {}),
             ...(effectiveGovernanceForced ? { governanceForced: true } : {}),
             ...(req.requiresRealApproval === true ? { requiresRealApproval: true } : {}),
@@ -2899,6 +2905,7 @@ export class ToolApprovalCoordinator {
             forceParkNow: release,
             settleParkRoute: (cause) => leave({ outcome: SETTLE_OUTCOME.EXPIRED, cause, parked: this.unattendedRoutesToPark }),
             owner: row.owner,
+            executionLane: row.executionLane,
             ...(row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {}),
             ...(card.fromSubagent === true ? { originTaskId: row.sourceTaskId } : {}),
             toolName: card.toolName,

package/dist/trace/project.d.ts

@@ -1016,6 +1016,7 @@ export declare function brainStatusEventData(ev: {
     providerConditionSource?: string;
     waitSegment?: string;
     sleptMs?: number;
+    seat?: string;
     eventId?: string;
     parentToolCallId?: string;
 }): FrameData<{

package/dist/trace/project.js

@@ -822,6 +822,7 @@ export function brainStatusEventData(ev) {
         ...(num(ev.timeoutMs) ? { timeoutMs: ev.timeoutMs } : {}),
         ...(typeof ev.waitSegment === "string" && ev.waitSegment.length > 0 ? { waitSegment: ev.waitSegment } : {}),
         ...(num(ev.sleptMs) ? { sleptMs: ev.sleptMs } : {}),
+        ...(typeof ev.seat === "string" && ev.seat.length > 0 ? { seat: ev.seat } : {}),
         ...(num(ev.errorStatus) ? { errorStatus: ev.errorStatus } : {}),
         ...(typeof ev.errClass === "string" && ev.errClass.length > 0 ? { errClass: ev.errClass } : {}),
         ...(typeof ev.providerCondition === "string" && ev.providerCondition.length > 0 ? { providerCondition: ev.providerCondition } : {}),

package/dist/trace/self-minted-wire.d.ts

@@ -649,6 +649,26 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /** `GET /v1/sessions/:id/background` 的 `rows[]` 上本版新出现的键:`sessionId` —— 后台 agent 行的子会话 id(引擎绑定之后才在,别的行型恒缺席;只是 id,不授读权)。 */
+    readonly sessionBackgroundRowKey: {
+        readonly at: "GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律)";
+        readonly members: {
+            sessionId: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 会话列表行(`GET /v1/sessions` 的 `sessions[]`;同一只投影 = `PATCH /v1/sessions/:id` 的 200 体与 409 `conflict.session_row_changed` 的 `currentRow`)上本版新出现的键:`rowTag` —— 行标签(条件写的前置条件值;读时派生、零存储)。 */
+    readonly sessionsListRowKey: {
+        readonly at: "GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律)";
+        readonly members: {
+            rowTag: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /** `tool_end` 帧 `gate.disposition`(denied 臂)上的键(<臂>#<键> → 在场律;回放面 `GET /v1/runs/:id/events` 同读):`extension` —— hook 层拒且拒者的扩展注册名已知时 = 那张注册的名字(过出口座)。 */
     readonly toolEndGateDispositionKey: {
         readonly at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)";
@@ -765,6 +785,10 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            fork_target: {
+                attr: string;
+                since: string;
+            };
             scratchpad_root: {
                 attr: string;
                 since: string;
@@ -1242,6 +1266,30 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 200;
                 readonly since: "7.137.0";
             };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(\u65B0\u63D0\u4EA4;\u4F53 request.body_shape + unknownKeys [rewindFiles])": {
+                readonly attr: 400;
+                readonly since: "7.139.0";
+            };
+            readonly "POST /v1/side-query#uncoded_error_with_preflight_prefix(\u6CA1\u6709\u5F15\u64CE\u7801\u3001\u82F1\u6587\u5F00\u5934\u4E0E\u524D\u7F00\u8868\u540C\u5F62\u7684\u9519\u8BEF;\u4F53 internal.error)": {
+                readonly attr: 500;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#mirror_row(\u53EA\u8BFB\u955C\u50CF\u884C\u4E0A\u7684\u5199,\u5E26\u4E0D\u5E26 expectedRowTag;\u4F53 conflict.session_mirror + forkPath)": {
+                readonly attr: 409;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#owner_changed_after_gate(\u95E8\u90A3\u4E00\u8BFB\u4E4B\u540E\u540C\u4E00\u4F1A\u8BDD\u7684\u5C5E\u4E3B\u88AB\u6539;\u4F53 not_found.session)": {
+                readonly attr: 404;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#expectedRowTag_stale(\u884C\u5DF2\u4E0D\u5728\u90A3\u53EA\u6807\u7B7E\u4E0A;\u4F53 conflict.session_row_changed + currentRow)": {
+                readonly attr: 409;
+                readonly since: "7.139.0";
+            };
+            readonly "PATCH /v1/sessions/:id#expectedRowTag_current(\u884C\u4ECD\u5728\u90A3\u53EA\u6807\u7B7E\u4E0A;\u4F53 = \u5217\u8868\u884C)": {
+                readonly attr: 200;
+                readonly since: "7.139.0";
+            };
         };
     };
     /**
@@ -1351,6 +1399,22 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId";
                 readonly since: "7.137.0";
             };
+            readonly "400 request.body_shape#PATCH /v1/sessions/:id": {
+                readonly attr: "the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else";
+                readonly since: "7.139.0";
+            };
+            readonly "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag": {
+                readonly attr: "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_mirror#PATCH /v1/sessions/:id": {
+                readonly attr: "this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_row_changed#PATCH /v1/sessions/:id": {
+                readonly attr: "the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag";
+                readonly since: "7.139.0";
+            };
         };
     };
     /**
@@ -1366,6 +1430,27 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 会话行写口 `PATCH /v1/sessions/:id`:体受理键里本版新增的一键与它两只 409 拒体上的键(`<面>#<键>` → 读法 / 在场律)。受理闭集属主 = `session-row.ts` 的体读者 `readSessionRowPatch`;
+     * `conflict.session_mirror#forkPath` 是执行面同码同键,本版新出现的面是 PATCH。
+     */
+    readonly sessionRowWriteKey: {
+        readonly at: "PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的)";
+        readonly members: {
+            readonly "body#expectedRowTag": {
+                readonly attr: "optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_row_changed#currentRow": {
+                readonly attr: "always";
+                readonly since: "7.139.0";
+            };
+            readonly "409 conflict.session_mirror#forkPath": {
+                readonly attr: "always";
+                readonly since: "7.139.0";
+            };
+        };
+    };
     /**
      * `409 approval_stale` 拒体上的键,按出现面登记(`<端点>#<键>` → 在场律)。`currentPending` 的值形是每道门一形(`wire-types.ts` 的 `ApprovalStaleCurrentPending`:
      * 这道门的决断体回显的那几位);本表只登本版新出现的面(`/decide` 那一形早于本表,不在这里)。
@@ -1625,8 +1710,32 @@ export declare const SELF_MINTED_WIRE: {
                 readonly since: "7.136.0";
             };
             readonly "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": {
-                readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot";
-                readonly since: "7.137.0";
+                readonly attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics": {
+                readonly attr: "required-no-default;absent-or-blank-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics": {
+                readonly attr: "own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics": {
+                readonly attr: "own-credential-name-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics": {
+                readonly attr: "remote-without-center-url-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[RETENTION_MODE].semantics": {
+                readonly attr: "enforce-without-horizon-or-cadence-refuses-boot";
+                readonly since: "7.139.0";
+            };
+            readonly "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics": {
+                readonly attr: "cadence-without-horizon-refuses-boot";
+                readonly since: "7.139.0";
             };
             /**
              * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;