@sema-agent/server 7.138.0 → 7.140.0

package/dist/web-admin-client/read-warnings.js

@@ -1,26 +1,22 @@
 import { z } from "zod";
 import { DROPPED_ENTRY_REASON_CODES, ModelRole, RETIRED_DOMAINS, RetiredDomainError, formatConfigPath, isDisclosableIdentity, isRetiredDomainName, refuseRetiredDomain, renderQuotedSentence, } from "@sema-agent/settings-schema";
-export function retiredDomainFindingOf(e) {
-    return e instanceof RetiredDomainError ? { domain: e.domain, error: e.message, migration: e.migration } : undefined;
-}
 export function separateRetiredDomains(body) {
     if (body === null || typeof body !== "object" || Array.isArray(body))
-        return { body, retiredDomains: [] };
-    const findings = [];
+        return { body, refusedDocuments: [] };
+    const refused = [];
     const rest = { ...body };
     for (const domain of Object.keys(RETIRED_DOMAINS).filter(isRetiredDomainName)) {
         try {
             refuseRetiredDomain(domain, rest[domain]);
         }
         catch (e) {
-            const finding = retiredDomainFindingOf(e);
-            if (finding === undefined)
+            if (!(e instanceof RetiredDomainError))
                 throw e;
-            findings.push(finding);
+            refused.push({ document: e.domain, reason: "retired_domain", error: e.message, migration: e.migration });
             delete rest[domain];
         }
     }
-    return findings.length === 0 ? { body, retiredDomains: [] } : { body: rest, retiredDomains: findings };
+    return refused.length === 0 ? { body, refusedDocuments: [] } : { body: rest, refusedDocuments: refused };
 }
 export function buildUnreadConfigKeyFields(k, dir) {
     return {

package/dist/web-admin-client/skills-mcp.js

@@ -174,12 +174,13 @@ export function resolveMcpServers(mcp, desk, rosterLease, logger) {
             continue;
         }
         const sessionMetaKey = metaKey.key === undefined ? {} : { sessionMetaKey: metaKey.key };
+        const startupTimeout = s.startupTimeoutMs === undefined ? {} : { startupTimeoutMs: s.startupTimeoutMs };
         if (s.transport.kind === "stdio") {
             const env = resolveRefs(s.transport.envRefs, s.name, "env", logger);
             if (env === null)
                 continue;
             const draft = {
-                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey },
+                spec: { name: s.name, transport: { kind: "stdio", command: s.transport.command, args: s.transport.args }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
                 pieces: env,
             };
             out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });
@@ -191,7 +192,7 @@ export function resolveMcpServers(mcp, desk, rosterLease, logger) {
             if (withholdsMcpAssertionHeader(s.transport.assertionHeader))
                 noteMcpAssertionHeaderNotSent(logger, s.name);
             const draft = {
-                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey },
+                spec: { name: s.name, transport: { kind: "http", url: s.transport.url, ...(s.transport.principalHeader ? { principalHeader: s.transport.principalHeader } : {}) }, ...allow, ...elicit, ...contentOrigin, ...source, ...toolFaces, ...toolAxes, ...sessionMetaKey, ...startupTimeout },
                 pieces: headers,
             };
             out.push({ scenarios: s.scenarios ?? [], spec: mintDeclaration(desk, draft, rosterLease) });

package/dist/web-admin-client/types.d.ts

@@ -175,6 +175,12 @@ export interface CenterMcpServer {
      * 承载形 `unknown`(与 {@link CenterMcpServer.toolAxes} 同姿):判官只有引擎根导出的 `judgeSessionMetaKey`(`resolveMcpServers` 在铸 spec 那一刻问它;坏形整条 server 不进)。
      */
     sessionMetaKey?: unknown;
+    /**
+     * core 7.52.0 `McpServerSpec.startupTimeoutMs`(settings-schema 14.8.0 起解析透明)—— 这台服务器握手(连接 + initialize)与首次工具列举各带的启动界(整数毫秒),缺席读进程级缺省界;只界启动阶段,不动单次调用的超时。
+     * 承载形 `unknown`(与 {@link CenterMcpServer.sessionMetaKey} 同姿):是不是数、整数性、范围只有一只判官 —— 引擎根导出的 `mcpStartupTimeoutMs`,在**拨号时**判,
+     * 不合 ⇒ 拒这一台服务器的拨号(兄弟照挂)、点名 `config.mcp_startup_timeout_invalid`;本仓只承运,不判(判了就是第二只判官)。
+     */
+    startupTimeoutMs?: unknown;
     transport: {
         kind: "stdio";
         command: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.138.0",
+  "version": "7.140.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -69,8 +69,8 @@
     "build:binary:run-local:darwin-arm64": "bun build --compile --target=bun-darwin-arm64 src/run-local.ts --outfile dist/run-local-darwin-arm64"
   },
   "dependencies": {
-    "@sema-agent/core": "7.59.0",
-    "@sema-agent/settings-schema": "14.7.0",
+    "@sema-agent/core": "7.60.0",
+    "@sema-agent/settings-schema": "15.2.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",

package/wire-changes/server@7.139.0.json

@@ -0,0 +1,348 @@
+{
+  "repo": "server",
+  "version": "7.139.0",
+  "from": "v7.138.0",
+  "fromCommit": "8b41148fef6d0d0c316c0e963efec70714a24e98",
+  "to": "v7.139.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "errorCode",
+      "member": "conflict.fork_id_taken",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.fork_id_taken`(状态码 409)"
+    },
+    {
+      "id": "A2",
+      "source": "errorCode",
+      "member": "conflict.fork_in_progress",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.fork_in_progress`(状态码 409)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "conflict.session_mirror",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_mirror`(状态码 409)"
+    },
+    {
+      "id": "A4",
+      "source": "errorCode",
+      "member": "conflict.session_row_changed",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_row_changed`(状态码 409)"
+    },
+    {
+      "id": "A5",
+      "source": "errorCode",
+      "member": "conflict.session_writer",
+      "text": "附录 A.1 / A.1b 错误码新增 `conflict.session_writer`(状态码 409)"
+    },
+    {
+      "id": "A6",
+      "source": "errorCode",
+      "member": "execution_lane.not_served",
+      "text": "附录 A.1 / A.1b 错误码新增 `execution_lane.not_served`(状态码 409)"
+    },
+    {
+      "id": "A7",
+      "source": "errorCode",
+      "member": "execution_lane.tree_bound",
+      "text": "附录 A.1 / A.1b 错误码新增 `execution_lane.tree_bound`(状态码 409)"
+    },
+    {
+      "id": "A8",
+      "source": "errorCode",
+      "member": "state.fork_target_unsettled",
+      "text": "附录 A.1 / A.1b 错误码新增 `state.fork_target_unsettled`(状态码 503)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)`(属性 200;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)`(属性 409;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)`(属性 409;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)`(属性 404;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)`(属性 500;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])`(属性 400;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A15",
+      "source": "selfMinted.fieldConflictKind",
+      "member": "fork_target",
+      "text": "自铸 400 request.field_conflict detail.kind 新增 `fork_target`(属性 -;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A16",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.body_shape#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.body_shape#PATCH /v1/sessions/:id`(属性 the body must be a JSON object carrying at least one of `title` and `pinned` (and, optionally, `expectedRowTag`), and nothing else;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A17",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag`(属性 expectedRowTag must be the `rowTag` string a session list row carries (43 characters: letters, digits, `-` and `_`);since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A18",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.session_mirror#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.session_mirror#PATCH /v1/sessions/:id`(属性 this session is a read-only mirror of a session whose writer is elsewhere — it cannot be renamed or pinned here; fork it (forkPath) to continue here; nothing was written;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A19",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "409 conflict.session_row_changed#PATCH /v1/sessions/:id",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `409 conflict.session_row_changed#PATCH /v1/sessions/:id`(属性 the session row changed since the rowTag you sent was read — nothing was written; currentRow is the row as it stands now: decide again, then send its rowTag;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A20",
+      "source": "selfMinted.sessionBackgroundRowKey",
+      "member": "sessionId",
+      "text": "自铸 GET /v1/sessions/:id/background rows[] 行键(<键> → 在场律) 新增 `sessionId`(属性 present-iff background agent row bound to a child session;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A21",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "409 conflict.session_mirror#forkPath",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `409 conflict.session_mirror#forkPath`(属性 always;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A22",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "409 conflict.session_row_changed#currentRow",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `409 conflict.session_row_changed#currentRow`(属性 always;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A23",
+      "source": "selfMinted.sessionRowWriteKey",
+      "member": "body#expectedRowTag",
+      "text": "自铸 PATCH /v1/sessions/:id 体受理键与 409 拒体键(<面>#<键> → 读法 / 在场律;只登本版新增的) 新增 `body#expectedRowTag`(属性 optional;43×[A-Za-z0-9_-] else 400 request.field_invalid;alone 400 request.body_shape;stale⇒409 conflict.session_row_changed;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A24",
+      "source": "selfMinted.sessionsListRowKey",
+      "member": "rowTag",
+      "text": "自铸 GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律) 新增 `rowTag`(属性 present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation);since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A25",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics`(属性 remote-without-center-url-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A26",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics`(属性 own-credential-name-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A27",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics`(属性 own-credential-name-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A28",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics`(属性 required-no-default;absent-or-blank-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A29",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[RETENTION_MODE].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[RETENTION_MODE].semantics`(属性 enforce-without-horizon-or-cadence-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A30",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics`(属性 cadence-without-horizon-refuses-boot;since 7.139.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A31",
+      "source": "wireFace.coreKey",
+      "member": "status.seat",
+      "text": "投影面 status 新投 core 新键 seat(core 7.60.0 新增,面表没有把它登记进 excluded ⇒ 默认上 wire)"
+    }
+  ],
+  "registered": [],
+  "excluded": [],
+  "removed": [],
+  "changed": [
+    {
+      "id": "C1",
+      "source": "engineNotice",
+      "member": "delegation.ask_unresolvable",
+      "text": "附录 D.3 engine_notice 码 `delegation.ask_unresolvable` 的detail:`{ sessionId, toolName, toolCallId, cause, parkLaneExisted }` —— `sessionId` 在 core 侧是 **REQUIRED** typed 键(委派子代上是**子代**的 session,归属标按 `fromSubagent`/`sourceTaskId` 同路);🔴 **`cause`(7.74.0 / core 7.17.0 [ref]② 起;旧名 `settlementKind` 已随该版**退役**,读它恒 `undefined`,无别名无双读)闭三词** `approver_unavailable`(被咨询的席答了 unavailable,其后无 park 接住)/ `no_approver_wired`(这条腿压根没接审批席或问答面,含 headless 的 `\"deny\"` 姿态)/ `mandate_unreconstructible`(祖先绑的 durable mandate 在这条腿上没有 park 设施可兑现 ⇒ 委派子代折内拒),逐字透传不窄化(词表属主在 core);`toolCallId` 与 `tool_approval` 卡帧同值可 join。🔴 **`remedies`(core 7.56.0;server 7.137.0 起过境)= 出路的数据形**:闭集 `approver` / `permission_mode` 上的非空表,恰在 `remedy`(无人可问的那一句)在场时带 —— `{ kind: \"approver\" }`(句子已说的那条:接一个审批席 / 让接着的那个能答)与 `{ kind: \"permission_mode\", value: \"bypassPermissions\", disclosedOn: \"gate.disposition.released\" }`(只在两臂上:模式放行这一问,放行披露在那只调用的 `tool_end.gate.disposition.released`)。`detail.remedies` 由宿主按 `kind` 渲染(或不渲染;`permission_mode` 是宿主只在运维放开该模式时才可提的出路,旁边带上 `disclosedOn` 指的披露),**server 只透传、不改写、不补句**;闭集外的 `kind` 属于更新的引擎,忽略。用户读的 `message` / `remedy` 自 core 7.56.0 起**不再教** `bypassPermissions`(那条出路只在 `remedies` 里) → `{ sessionId, toolName, toolCallId, cause, parkLaneExisted }` —— `sessionId` 在 core 侧是 **REQUIRED** typed 键 = 被拒那只调用**所在腿**的会话(委派子代上是**子代自己的** session);本服务按这一个键投给该会话**当前登记的腿**,不经 `fromSubagent` / `sourceTaskId`(那两键属于审批卡帧,不在本码 `detail` 上)转投父会话 —— 同步委派子代的会话本服务不登记腿,于是子代上的这一条今天**不上任何会话流**,只落运维日志行;父会话可见要等引擎为本码另铸父会话副本(`detail.sessionId` = 父会话 + `childSessionId`,`task.user_steer_undrained` 的同形先例),届时本服务零改动承载;🔴 **`cause`(7.74.0 / core 7.17.0 [ref]② 起;旧名 `settlementKind` 已随该版**退役**,读它恒 `undefined`,无别名无双读)闭三词** `approver_unavailable`(被咨询的席答了 unavailable,其后无 park 接住)/ `no_approver_wired`(这条腿压根没接审批席或问答面,含 headless 的 `\"deny\"` 姿态)/ `mandate_unreconstructible`(祖先绑的 durable mandate 在这条腿上没有 park 设施可兑现 ⇒ 委派子代折内拒),逐字透传不窄化(词表属主在 core);`toolCallId` 与 `tool_approval` 卡帧同值可 join。🔴 **`remedies`(core 7.56.0;server 7.137.0 起过境)= 出路的数据形**:闭集 `approver` / `permission_mode` 上的非空表,恰在 `remedy`(无人可问的那一句)在场时带 —— `{ kind: \"approver\" }`(句子已说的那条:接一个审批席 / 让接着的那个能答)与 `{ kind: \"permission_mode\", value: \"bypassPermissions\", disclosedOn: \"gate.disposition.released\" }`(只在两臂上:模式放行这一问,放行披露在那只调用的 `tool_end.gate.disposition.released`)。`detail.remedies` 由宿主按 `kind` 渲染(或不渲染;`permission_mode` 是宿主只在运维放开该模式时才可提的出路,旁边带上 `disclosedOn` 指的披露),**server 只透传、不改写、不补句**;闭集外的 `kind` 属于更新的引擎,忽略。用户读的 `message` / `remedy` 自 core 7.56.0 起**不再教** `bypassPermissions`(那条出路只在 `remedies` 里)"
+    },
+    {
+      "id": "C2",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) `GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics` 的属性:values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot → values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot(since 7.139.0)"
+    }
+  ],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "conflict.fork_id_taken",
+        "conflict.fork_in_progress",
+        "conflict.session_mirror",
+        "conflict.session_row_changed",
+        "conflict.session_writer",
+        "execution_lane.not_served",
+        "execution_lane.tree_bound",
+        "state.fork_target_unsettled"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "PATCH /v1/sessions/:id#expectedRowTag_current(行仍在那只标签上;体 = 列表行)",
+        "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)",
+        "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)",
+        "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)",
+        "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.fieldConflictKind",
+      "at": [
+        "src/trace/self-minted-wire.ts#fieldConflictKind"
+      ],
+      "added": [
+        "fork_target"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.refusalSentenceForm",
+      "at": [
+        "src/trace/self-minted-wire.ts#refusalSentenceForm"
+      ],
+      "added": [
+        "400 request.body_shape#PATCH /v1/sessions/:id",
+        "400 request.field_invalid#PATCH /v1/sessions/:id.expectedRowTag",
+        "409 conflict.session_mirror#PATCH /v1/sessions/:id",
+        "409 conflict.session_row_changed#PATCH /v1/sessions/:id"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionBackgroundRowKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionBackgroundRowKey"
+      ],
+      "added": [
+        "sessionId"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionRowWriteKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionRowWriteKey"
+      ],
+      "added": [
+        "409 conflict.session_mirror#forkPath",
+        "409 conflict.session_row_changed#currentRow",
+        "body#expectedRowTag"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionsListRowKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionsListRowKey"
+      ],
+      "added": [
+        "rowTag"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics",
+        "GET /v1/config/catalog#rows[DOCKER_SANDBOX_ENV].semantics",
+        "GET /v1/config/catalog#rows[E2B_SANDBOX_ENV].semantics",
+        "GET /v1/config/catalog#rows[K8S_NAMESPACE].semantics",
+        "GET /v1/config/catalog#rows[RETENTION_MODE].semantics",
+        "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}

package/wire-changes/server@7.140.0.json

@@ -0,0 +1,184 @@
+{
+  "repo": "server",
+  "version": "7.140.0",
+  "from": "v7.139.0",
+  "fromCommit": "c00fd6fb591f29cbd4435b9d0af52b4a952dfb95",
+  "to": "v7.140.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "errorCode",
+      "member": "config.read_deny_floor_unkept",
+      "text": "附录 A.1 / A.1b 错误码新增 `config.read_deny_floor_unkept`(状态码 409)"
+    },
+    {
+      "id": "A2",
+      "source": "errorCode",
+      "member": "memory.erasure_store_unjudged",
+      "text": "附录 A.1 / A.1b 错误码新增 `memory.erasure_store_unjudged`(状态码 409)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "request.memory_layer",
+      "text": "附录 A.1 / A.1b 错误码新增 `request.memory_layer`(状态码 400)"
+    },
+    {
+      "id": "A4",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A5",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)`(属性 409;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)`(属性 400;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A8",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/memory/entries/:entryId/provenance#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/memory/entries/:entryId/provenance#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/memory/origin/clearances#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/memory/origin/clearances#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "GET /v1/sessions/:id/memory-status#query.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `GET /v1/sessions/:id/memory-status#query.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ every store of this deployment, folded;cache keyed by (session, store control plane);since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "POST /v1/memory/origin/entries/:entryId/clear#body.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `POST /v1/memory/origin/entries/:entryId/clear#body.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;not passed to the engine;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.memoryLayerSeatKey",
+      "member": "POST /v1/sessions/:id/memory/erase#body.scope",
+      "text": "自铸 记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的) 新增 `POST /v1/sessions/:id/memory/erase#body.scope`(属性 optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ the deployment's store;selector still minted from the path;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.sessionMemoryEraseStatus",
+      "member": "memory.erasure_store_unjudged",
+      "text": "自铸 POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态) 新增 `memory.erasure_store_unjudged`(属性 409;since 7.140.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)`(属性 fold-across-deployment-stores(sum|max|any-record|absent-if-any-unreadable);one-store⇒identity;since 7.140.0 = 本版新上 wire)"
+    }
+  ],
+  "registered": [],
+  "excluded": [],
+  "removed": [],
+  "changed": [],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "config.read_deny_floor_unkept",
+        "memory.erasure_store_unjudged",
+        "request.memory_layer"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "GET /v1/memory/entries/:entryId/provenance|POST /v1/memory/erase|GET /v1/memory/origin/clearances|POST /v1/memory/origin/entries/:entryId/clear#layer_unaddressed_two_stores(不点名层的条目 id / 店级账本请求,本部署点名的层分住两只店;体 request.memory_layer)",
+        "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)",
+        "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)",
+        "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.memoryLayerSeatKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#memoryLayerSeatKey"
+      ],
+      "added": [
+        "GET /v1/memory/entries/:entryId/provenance#query.scope",
+        "GET /v1/memory/origin/clearances#query.scope",
+        "GET /v1/sessions/:id/memory-status#query.scope",
+        "POST /v1/memory/origin/entries/:entryId/clear#body.scope",
+        "POST /v1/sessions/:id/memory/erase#body.scope"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionMemoryEraseStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionMemoryEraseStatus"
+      ],
+      "added": [
+        "memory.erasure_store_unjudged"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}