@sema-agent/server 7.138.0 → 7.139.0

package/dist/trace/self-minted-wire.js

@@ -233,6 +233,18 @@ export const SELF_MINTED_WIRE = {
             supportsThinkingOff: { attr: "always", since: "7.138.0" },
         },
     },
+    sessionBackgroundRowKey: {
+        at: "GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律)",
+        members: {
+            sessionId: { attr: "present-iff background agent row bound to a child session", since: "7.139.0" },
+        },
+    },
+    sessionsListRowKey: {
+        at: "GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律)",
+        members: {
+            rowTag: { attr: "present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation)", since: "7.139.0" },
+        },
+    },
     toolEndGateDispositionKey: {
         at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)",
         members: {
@@ -283,6 +295,7 @@ export const SELF_MINTED_WIRE = {
             file_history_restore: { attr: "-", since: "7.133.0" },
             skills_disabled: { attr: "-", since: "7.133.0" },
             existing_session: { attr: "-", since: "7.133.0" },
+            fork_target: { attr: "-", since: "7.139.0" },
             scratchpad_root: { attr: "-", since: "7.133.0" },
             ask_answer: { attr: "-", since: "7.133.0" },
             policy_person_ask: { attr: "-", since: "7.133.0" },
@@ -441,6 +454,12 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId_not_current(体带的门身份不是该会话此刻待决的 plan 门;体 approval_stale + currentPending { checkpointId }?;不落决断、零状态改动)": { attr: 409, since: "7.137.0" },
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])": { attr: 400, since: "7.139.0" },
+            "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)": { attr: 500, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)": { attr: 409, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)": { attr: 404, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)": { attr: 409, since: "7.139.0" },
+            "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)": { attr: 200, since: "7.139.0" },
         },
     },
     refusalSentenceForm: {
@@ -471,6 +490,10 @@ export const SELF_MINTED_WIRE = {
             "400 request.field_invalid#plan_review.checkpointId.not_non_empty_string": { attr: "checkpointId must be a non-empty string (the identity of the plan gate you decided on: …)", since: "7.137.0" },
             "400 request.field_invalid#plan_review.checkpointId.too_large": { attr: "checkpointId too large (max <n> chars)", since: "7.137.0" },
             "400 request.body_shape#/decide.checkpointId(落 unsupportedKeys)": { attr: "unsupported (a body field of POST /v1/assistant/tasks/:id/plan_review — send it there, this door never reads it): checkpointId", since: "7.137.0" },
+            "400 request.body_shape#PATCH /v1/sessions/:id": { attr: "the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else", since: "7.139.0" },
+            "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag": { attr: "expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`)", since: "7.139.0" },
+            "409 conflict.session_mirror#PATCH /v1/sessions/:id": { attr: "this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written", since: "7.139.0" },
+            "409 conflict.session_row_changed#PATCH /v1/sessions/:id": { attr: "the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag", since: "7.139.0" },
         },
     },
     decisionBodyKey: {
@@ -479,6 +502,14 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
         },
     },
+    sessionRowWriteKey: {
+        at: "PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的)",
+        members: {
+            "body#expectedRowTag": { attr: "optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed", since: "7.139.0" },
+            "409 conflict.session_row_changed#currentRow": { attr: "always", since: "7.139.0" },
+            "409 conflict.session_mirror#forkPath": { attr: "always", since: "7.139.0" },
+        },
+    },
     approvalStaleBodyKey: {
         at: "409 approval_stale 拒体(<端点>#<键> → 在场律)",
         members: {
@@ -552,7 +583,13 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
-            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot", since: "7.137.0" },
+            "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics": { attr: "required-no-default;absent-or-blank-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics": { attr: "own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics": { attr: "own-credential-name-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics": { attr: "remote-without-center-url-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[RETENTION_MODE].semantics": { attr: "enforce-without-horizon-or-cadence-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics": { attr: "cadence-without-horizon-refuses-boot", since: "7.139.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },

package/dist/url-refusal.d.ts

@@ -12,7 +12,7 @@
  * 拒句从源头不含解析记号 —— 判官只给规则词,值只经本模块的展示律出现。
  *
  * ## 读者
- * 中心基址三席 + 公告地址 + 请求期 `centerFetch`(`web-admin-client/center-request.ts` `pathBaseUrlRefusal`:禁 userinfo / query / fragment)·
+ * 中心基址三席 + 公告地址 + 记忆同步中心基址 `MEMORY_SYNC_URL` + 请求期 `centerFetch`(`web-admin-client/center-request.ts` `pathBaseUrlRefusal`:禁 userinfo / query / fragment)·
  * 续签 issuer(只问形)· 模型路由三键(`model-route-url.ts`:禁 userinfo / fragment,query 照收)· `MEMORY_EMBEDDER_ENDPOINT` 与
  * `A2A_SERVE_URL`(禁 userinfo)· `SANDBOX_PKG_SOURCE=custom` 六只地址(形 + 带凭据,后者的判官是契约包根的 `findUrlCredential`,拒句经 {@link buildUrlCredentialRefusal})。
  * 「scheme 只有判官与展示铸点读」由 `test/config-url-display-safe.test.ts` 的读者普查门钉住。

package/dist/web-admin-client/apply-effective.d.ts

@@ -94,9 +94,11 @@ export declare function withModelPlaneOf<E extends EffectiveConfig>(target: E, s
  */
 export declare function fullyLandedForLkg(read: ConfigCandidateRead, report: ApplyReport | undefined): boolean;
 /**
- * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**(组拒码闭集的属主是 settings-schema `MODEL_PLANE_REFUSAL_CODES`;那边加一个码
- * ⇒ 本表缺键 ⇒ 本仓 tsc 红)。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 —— 一个 id 两个码
- * (`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数。
+ * [ref]:组拒码 → 铸它的那条模型面不变量 —— **以码为键**。组拒码闭集的属主是 settings-schema `MODEL_PLANE_REFUSAL_CODES`,每个码恰有**一个铸码方**,
+ * 分两本账(下面两个表 + 三道编译门;那边加一个码而这两本都没收 ⇒ 本仓 tsc 红):
+ *  · 本表 = **本仓模型面 stage 自己铸**的码 → 铸它的不变量。模型面 stage 的组拒按**码**铸(码是判决那刻的数据),不变量 id 由本表派生 —— 一个 id 两个码
+ *    (`model-route-endpoint`)时码不可能从 id 反推,反过来查才是全函数;
+ *  · {@link ENGINE_MINTED_PLANE_REFUSAL_CODES} = 契约包出码、执法者是本仓但**今天未执法**的码(名字里的 ENGINE 沿契约包的词义 = worker,即本仓),本仓 stage 现在不铸。
  */
 export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.default_model_missing": "default-model-resolvable";
@@ -104,6 +106,18 @@ export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.model_route_endpoint_missing": "model-route-endpoint";
     readonly "config.gateway_fallback_without_primary": "model-route-endpoint";
 };
+/**
+ * 契约包出码、执法者是本仓但今天**未执法**的两只组拒码:本地配置腿上「管模型面的目录会顶替已声明的 env 表、决定不是 `replaced`」那道闸,与「每个任务都要解的 summarize 落不到可服务条目」的不变量。
+ *
+ * 词义:settings-schema 发布说明里的「engine / 引擎一侧」指**本仓(worker)**,不是 `@sema-agent/core` —— 这两码要的全部输入(本地配置腿、env 表、模型面 stage 与组拒口)只在本仓,core 里没有读
+ * `MODEL_ID` / `config.d` 的地方、也没有组拒码。(契约包自己有几处把同一个词写成 core 7.58.0,那是它的叫法错。)所以本仓 stage 现在没有对应的不变量、不铸这两个码,不是因为「归引擎」,而是**还没做**,两码各自候什么:
+ *  · `CATALOG_REPLACES_ENV_MODELS_CODE`:执法是一整组跨仓件 —— 开机迁移 SS-M11(铸决定文档)· 本地腿每拍读决定(读数身份进候选的 etag)· 目录信任判官走根级文档 · 命令行 / 桌面 / 客户端核心三个写者先接契约包的计划助手;
+ *    候设计票。在那之前,候选目录管着模型面而 env 表也声明了时,仍照旧由目录服务(与升级前逐位同)。
+ *  · `SUMMARIZE_MODEL_MISSING_CODE`:码的前提是「summarize 落不到可服务条目 ⇒ 采纳后每个任务都被拒」,而本仓所钉 core 7.59.0 起非严格座位(summarize 在内)点名目录里没有的词时读作未设、沿自己的回落链走
+ *    (summarize 的链是 → default,即回落缺省模型)并通告 `model.role_defaulted`;链上没有可解的模型才拒 —— 前提与所钉 core 相抵,候上游(settings-schema / core)重定义或退役这个码;在那之前 summarize 角色绑到不可用条目时仍是角色绑定那一行 warn(`ROLE_BINDING_UNAVAILABLE_HINT`),不是组拒。
+ * 两码开始被铸之后,它们进 `/health.modelRefusals.plane` 的座位是**另案设计**(现在没有座:见 `model-plane-face.ts` 对「装配期被引擎整份拒收」的披露),不在这张表里偷铸一个不变量替它占位。
+ */
+export declare const ENGINE_MINTED_PLANE_REFUSAL_CODES: readonly ["config.catalog_replaces_env_models", "config.summarize_model_missing"];
 /**
  * [ref] —— **「无中心配置」档的候选**:中心凭证换人时,server 把在用的中心配置降到这一档({@link applyEffective} 吃它,和吃任何候选走同一条 stage → swap → commit)。
  * 它的意思是「**撤回**中心配置」—— 中心下发的每个热面回 env 底:

package/dist/web-admin-client/apply-effective.js

@@ -1,8 +1,8 @@
-import { expandTiers, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
-import { WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
+import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
+import { CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE, WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
 import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
-import { applyAutoCompactWindow, buildModelCostKey, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
+import { applyAutoCompactWindow, buildModelCostKey, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { NAME_TABLE_BEHAVIOR } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
@@ -118,7 +118,7 @@ export function applyEffective(config, eff, logger, opts) {
     }
     const mp = staged.modelPlaneGroup.stages.models;
     if (mp !== undefined) {
-        declareCandidateWithheldEnv(mp.modelApiKeyEnv, staged.version);
+        declareCandidateWithheldEnv(config, mp.modelApiKeyEnv, staged.version);
         if (opts.swapPlane !== undefined) {
             try {
                 opts.swapPlane({ models: mp.models, tiers: mp.activeTiers });
@@ -171,17 +171,25 @@ export function applyEffective(config, eff, logger, opts) {
         logger?.info("web_admin_projects", { projects: Object.keys(staged.projects) });
     return true;
 }
-function declareCandidateWithheldEnv(modelApiKeyEnv, version) {
+function declareCandidateWithheldEnv(seats, modelApiKeyEnv, version) {
+    const entries = Object.entries(modelApiKeyEnv)
+        .map(([model, envName]) => `${model}→${envName}`)
+        .join(", ");
     try {
         declareServerWithheldEnv(modelApiKeyEnv);
     }
     catch (err) {
-        const entries = Object.entries(modelApiKeyEnv)
-            .map(([model, envName]) => `${model}→${envName}`)
-            .join(", ");
         throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv names a variable the engine cannot withhold from model-driven shells — ` +
             `the candidate is refused whole and the current generation keeps serving; fix that entry's apiKeyEnv (entries: ${entries}). Engine: ${err instanceof Error ? err.message : String(err)}`);
     }
+    const handedOn = ownCredentialHitsInForce(seats);
+    if (handedOn.length === 0)
+        return;
+    withdrawServerWithheldEnv();
+    throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv names a variable a name-list env knob hands on — ` +
+        handedOn.map((h) => `env ${h.knob} hands on ${h.name}, which this candidate makes ${h.problem}`).join("; ") +
+        `; or point that entry's apiKeyEnv at a variable no name list hands on. The name lists are read at boot (changing one takes a restart); ` +
+        `the candidate is refused whole and the current generation keeps serving (entries: ${entries}).`);
 }
 function commitStaged(config, staged) {
     const mp = staged.modelPlaneGroup.stages.models;
@@ -240,13 +248,14 @@ export const PLANE_REFUSAL_INVARIANT_OF = {
     "config.model_route_endpoint_missing": "model-route-endpoint",
     "config.gateway_fallback_without_primary": "model-route-endpoint",
 };
+export const ENGINE_MINTED_PLANE_REFUSAL_CODES = [CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE];
 function modelPlaneGroupReport(group) {
     return {
         applied: MODEL_PLANE_DOMAINS.flatMap((d) => (group.stages[d] !== undefined ? MODEL_PLANE_SURFACES[d] : [])),
         ...(group.rejected !== undefined ? { rejected: { keys: group.rejected.keys, reason: group.rejected.reason } } : {}),
     };
 }
-const ROLE_BINDING_UNAVAILABLE_HINT = "tasks resolving this role fail: alias/tier expansion cannot mint this name; the engine refuses it loud — bind the role to a usable model, or make the entry usable (see the entry's own warn)";
+const ROLE_BINDING_UNAVAILABLE_HINT = "alias/tier expansion cannot mint this name, so the engine does not hold it: a strict seat (default, classifier) refuses the task loud; any other role reads as unset and falls back along its own chain with a model.role_defaulted notice (refused only when nothing on that chain resolves) — bind the role to a usable model, or make the entry usable (see the entry's own warn)";
 export const NO_CENTER_EFFECTIVE = deepFreeze({ version: 0, updatedAt: "", models: { models: [], roles: {} }, mcp: { servers: [] } });
 export const isNoCenterEffective = (eff) => eff === NO_CENTER_EFFECTIVE;
 function deepFreeze(v) {
@@ -636,7 +645,8 @@ function engineDefaultOfSelect(select, models, activeTiers) {
     catch (err) {
         return { unresolved: err instanceof Error ? err.message : String(err) };
     }
-    const name = Object.keys(models).find((n) => models[n] === picked);
+    const origin = modelOriginOf(picked);
+    const name = Object.keys(models).find((n) => models[n] === origin);
     return name !== undefined ? { name } : { unresolved: "the engine picked a model object that is not an entry of the usable catalog" };
 }
 export function logEffectiveDiff(config, eff, logger) {

package/dist/web-admin-client/skills-mcp.js

@@ -174,12 +174,13 @@ export function resolveMcpServers(mcp, desk, rosterLease, logger) {
             continue;
         }
         const sessionMetaKey = metaKey.key === undefined ? {} : { sessionMetaKey: metaKey.key };
+        const startupTimeout = s.startupTimeoutMs === undefined ? {} : { startupTimeoutMs: s.startupTimeoutMs };
         if (s.transport.kind === "stdio") {
             const env = resolveRefs(s.transport.envRefs, s.name, "env", logger);
             if (env === null)
                 continue;
             const draft = {
-                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey },
+                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
                 pieces: env,
             };
             out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });
@@ -191,7 +192,7 @@ export function resolveMcpServers(mcp, desk, rosterLease, logger) {
             if (withholdsMcpAssertionHeader(s.transport.assertionHeader))
                 noteMcpAssertionHeaderNotSent(logger, s.name);
             const draft = {
-                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey },
+                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
                 pieces: headers,
             };
             out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });

package/dist/web-admin-client/types.d.ts

@@ -175,6 +175,12 @@ export interface CenterMcpServer {
      * 承载形 `unknown`(与 {@link CenterMcpServer.toolAxes} 同姿):判官只有引擎根导出的 `judgeSessionMetaKey`(`resolveMcpServers` 在铸 spec 那一刻问它;坏形整条 server 不进)。
      */
     sessionMetaKey?: unknown;
+    /**
+     * core 7.52.0 `McpServerSpec.startupTimeoutMs`(settings-schema 14.8.0 起解析透明)—— 这台服务器握手(连接 + initialize)与首次工具列举各带的启动界(整数毫秒),缺席读进程级缺省界;只界启动阶段,不动单次调用的超时。
+     * 承载形 `unknown`(与 {@link CenterMcpServer.sessionMetaKey} 同姿):是不是数、整数性、范围只有一只判官 —— 引擎根导出的 `mcpStartupTimeoutMs`,在**拨号时**判,
+     * 不合 ⇒ 拒这一台服务器的拨号(兄弟照挂)、点名 `config.mcp_startup_timeout_invalid`;本仓只承运,不判(判了就是第二只判官)。
+     */
+    startupTimeoutMs?: unknown;
     transport: {
         kind: "stdio";
         command: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.138.0",
+  "version": "7.139.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -69,8 +69,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.59.0",
-    "@sema-agent/settings-schema": "14.7.0",
+    "@sema-agent/core": "7.60.0",
+    "@sema-agent/settings-schema": "15.1.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",

package/wire-changes/server@7.139.0.json

@@ -0,0 +1,348 @@
+{
+  "repo": "server",
+  "version": "7.139.0",
+  "from": "v7.138.0",
+  "fromCommit": "8b41148fef6d0d0c316c0e963efec70714a24e98",
+  "to": "v7.139.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "errorCode",
+      "member": "conflict.fork_id_taken",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.fork_id_taken`(状态码 409)"
+    },
+    {
+      "id": "A2",
+      "source": "errorCode",
+      "member": "conflict.fork_in_progress",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.fork_in_progress`(状态码 409)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "conflict.session_mirror",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_mirror`(状态码 409)"
+    },
+    {
+      "id": "A4",
+      "source": "errorCode",
+      "member": "conflict.session_row_changed",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_row_changed`(状态码 409)"
+    },
+    {
+      "id": "A5",
+      "source": "errorCode",
+      "member": "conflict.session_writer",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_writer`(状态码 409)"
+    },
+    {
+      "id": "A6",
+      "source": "errorCode",
+      "member": "execution_lane.not_served",
+      "text": "附录 A.1 / A.1b 错误码新增 `execution_lane.not_served`(状态码 409)"
+    },
+    {
+      "id": "A7",
+      "source": "errorCode",
+      "member": "execution_lane.tree_bound",
+      "text": "附录 A.1 / A.1b 错误码新增 `execution_lane.tree_bound`(状态码 409)"
+    },
+    {
+      "id": "A8",
+      "source": "errorCode",
+      "member": "state.fork_target_unsettled",
+      "text": "附录 A.1 / A.1b 错误码新增 `state.fork_target_unsettled`(状态码 503)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)`(属性 200;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)`(属性 409;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)`(属性 409;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)`(属性 404;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)`(属性 500;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])`(属性 400;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A15",
+      "source": "selfMinted.fieldConflictKind",
+      "member": "fork_target",
+      "text": "自铸 400 request.field_conflict detail.kind 新增 `fork_target`(属性 -;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A16",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.body_shape#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.body_shape#PATCH /v1/sessions/:id`(属性 the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A17",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag`(属性 expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`);since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A18",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.session_mirror#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.session_mirror#PATCH /v1/sessions/:id`(属性 this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A19",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.session_row_changed#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.session_row_changed#PATCH /v1/sessions/:id`(属性 the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A20",
+      "source": "selfMinted.sessionBackgroundRowKey",
+      "member": "sessionId",
+      "text": "自铸 GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律) 新增 `sessionId`(属性 present-iff background agent row bound to a child session;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A21",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "409 conflict.session_mirror#forkPath",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `409 conflict.session_mirror#forkPath`(属性 always;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A22",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "409 conflict.session_row_changed#currentRow",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `409 conflict.session_row_changed#currentRow`(属性 always;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A23",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "body#expectedRowTag",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `body#expectedRowTag`(属性 optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A24",
+      "source": "selfMinted.sessionsListRowKey",
+      "member": "rowTag",
+      "text": "自铸 GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律) 新增 `rowTag`(属性 present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation);since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A25",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics`(属性 remote-without-center-url-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A26",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics`(属性 own-credential-name-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A27",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics`(属性 own-credential-name-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A28",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics`(属性 required-no-default;absent-or-blank-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A29",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[RETENTION_MODE].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[RETENTION_MODE].semantics`(属性 enforce-without-horizon-or-cadence-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A30",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics`(属性 cadence-without-horizon-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A31",
+      "source": "wireFace.coreKey",
+      "member": "status.seat",
+      "text": "投影面 status 新投 core 新键 seat(core 7.60.0 新增,面表没有把它登记进 excluded ⇒ 默认上 wire)"
+    }
+  ],
+  "registered": [],
+  "excluded": [],
+  "removed": [],
+  "changed": [
+    {
+      "id": "C1",
+      "source": "engineNotice",
+      "member": "delegation.ask_unresolvable",
+      "text": "附录 D.3 engine_notice 码 `delegation.ask_unresolvable` 的detail:`{ sessionId, toolName, toolCallId, cause, parkLaneExisted }` —— `sessionId` 在 core 侧是 **REQUIRED** typed 键(委派子代上是**子代**的 session,归属标按 `fromSubagent`/`sourceTaskId` 同路);🔴 **`cause`(7.74.0 / core 7.17.0 [ref]② 起;旧名 `settlementKind` 已随该版**退役**,读它恒 `undefined`,无别名无双读)闭三词** `approver_unavailable`(被咨询的席答了 unavailable,其后无 park 接住)/ `no_approver_wired`(这条腿压根没接审批席或问答面,含 headless 的 `\"deny\"` 姿态)/ `mandate_unreconstructible`(祖先绑的 durable mandate 在这条腿上没有 park 设施可兑现 ⇒ 委派子代折内拒),逐字透传不窄化(词表属主在 core);`toolCallId` 与 `tool_approval` 卡帧同值可 join。🔴 **`remedies`(core 7.56.0;server 7.137.0 起过境)= 出路的数据形**:闭集 `approver` / `permission_mode` 上的非空表,恰在 `remedy`(无人可问的那一句)在场时带 —— `{ kind: \"approver\" }`(句子已说的那条:接一个审批席 / 让接着的那个能答)与 `{ kind: \"permission_mode\", value: \"bypassPermissions\", disclosedOn: \"gate.disposition.released\" }`(只在两臂上:模式放行这一问,放行披露在那只调用的 `tool_end.gate.disposition.released`)。`detail.remedies` 由宿主按 `kind` 渲染(或不渲染;`permission_mode` 是宿主只在运维放开该模式时才可提的出路,旁边带上 `disclosedOn` 指的披露),**server 只透传、不改写、不补句**;闭集外的 `kind` 属于更新的引擎,忽略。用户读的 `message` / `remedy` 自 core 7.56.0 起**不再教** `bypassPermissions`(那条出路只在 `remedies` 里) → `{ sessionId, toolName, toolCallId, cause, parkLaneExisted }` —— `sessionId` 在 core 侧是 **REQUIRED** typed 键 = 被拒那只调用**所在腿**的会话(委派子代上是**子代自己的** session);本服务按这一个键投给该会话**当前登记的腿**,不经 `fromSubagent` / `sourceTaskId`(那两键属于审批卡帧,不在本码 `detail` 上)转投父会话 —— 同步委派子代的会话本服务不登记腿,于是子代上的这一条今天**不上任何会话流**,只落运维日志行;父会话可见要等引擎为本码另铸父会话副本(`detail.sessionId` = 父会话 + `childSessionId`,`task.user_steer_undrained` 的同形先例),届时本服务零改动承载;🔴 **`cause`(7.74.0 / core 7.17.0 [ref]② 起;旧名 `settlementKind` 已随该版**退役**,读它恒 `undefined`,无别名无双读)闭三词** `approver_unavailable`(被咨询的席答了 unavailable,其后无 park 接住)/ `no_approver_wired`(这条腿压根没接审批席或问答面,含 headless 的 `\"deny\"` 姿态)/ `mandate_unreconstructible`(祖先绑的 durable mandate 在这条腿上没有 park 设施可兑现 ⇒ 委派子代折内拒),逐字透传不窄化(词表属主在 core);`toolCallId` 与 `tool_approval` 卡帧同值可 join。🔴 **`remedies`(core 7.56.0;server 7.137.0 起过境)= 出路的数据形**:闭集 `approver` / `permission_mode` 上的非空表,恰在 `remedy`(无人可问的那一句)在场时带 —— `{ kind: \"approver\" }`(句子已说的那条:接一个审批席 / 让接着的那个能答)与 `{ kind: \"permission_mode\", value: \"bypassPermissions\", disclosedOn: \"gate.disposition.released\" }`(只在两臂上:模式放行这一问,放行披露在那只调用的 `tool_end.gate.disposition.released`)。`detail.remedies` 由宿主按 `kind` 渲染(或不渲染;`permission_mode` 是宿主只在运维放开该模式时才可提的出路,旁边带上 `disclosedOn` 指的披露),**server 只透传、不改写、不补句**;闭集外的 `kind` 属于更新的引擎,忽略。用户读的 `message` / `remedy` 自 core 7.56.0 起**不再教** `bypassPermissions`(那条出路只在 `remedies` 里)"
+    },
+    {
+      "id": "C2",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) `GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics` 的属性:values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot → values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot(since 7.139.0)"
+    }
+  ],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "conflict.fork_id_taken",
+        "conflict.fork_in_progress",
+        "conflict.session_mirror",
+        "conflict.session_row_changed",
+        "conflict.session_writer",
+        "execution_lane.not_served",
+        "execution_lane.tree_bound",
+        "state.fork_target_unsettled"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)",
+        "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)",
+        "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)",
+        "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)",
+        "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.fieldConflictKind",
+      "at": [
+        "src/trace/self-minted-wire.ts#fieldConflictKind"
+      ],
+      "added": [
+        "fork_target"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.refusalSentenceForm",
+      "at": [
+        "src/trace/self-minted-wire.ts#refusalSentenceForm"
+      ],
+      "added": [
+        "400 request.body_shape#PATCH /v1/sessions/:id",
+        "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag",
+        "409 conflict.session_mirror#PATCH /v1/sessions/:id",
+        "409 conflict.session_row_changed#PATCH /v1/sessions/:id"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionBackgroundRowKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionBackgroundRowKey"
+      ],
+      "added": [
+        "sessionId"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionRowWriteKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionRowWriteKey"
+      ],
+      "added": [
+        "409 conflict.session_mirror#forkPath",
+        "409 conflict.session_row_changed#currentRow",
+        "body#expectedRowTag"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionsListRowKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionsListRowKey"
+      ],
+      "added": [
+        "rowTag"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics",
+        "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics",
+        "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics",
+        "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics",
+        "GET /v1/config/catalog#rows[RETENTION_MODE].semantics",
+        "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}