@sema-agent/server 7.140.0 → 7.141.0

package/dist/trace/self-minted-wire.d.ts

@@ -467,6 +467,20 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /** 7.141.0:能力位 `mcpTransportKinds[]` 的成员(请求面读器与引擎今天能拨的 MCP 传输种类,书写序;恒在场、不随部署形变)。 */
+    readonly mcpTransportKind: {
+        readonly at: "GET /v1/capabilities mcpTransportKinds[]";
+        readonly members: {
+            stdio: {
+                attr: string;
+                since: string;
+            };
+            http: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /** 7.137.0:能力位 `credentialPlane.sandboxGit.state`(成员 git 凭据平面开 / 关;判官 `judgeSandboxGitPlane`)。 */
     readonly credentialPlaneSandboxGitState: {
         readonly at: "GET /v1/capabilities credentialPlane.sandboxGit.state";
@@ -643,6 +657,23 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `GET /health` 的 `engineLease` 段(7.141.0):引擎附着租约窗 —— `lingerMs` = 自退腿会执行的**最短**静默窗(父活着的窗与孤儿窗取小),`tickMs` = 自退检查采样拍。
+     * present-iff 本进程装了租约腿(`ENGINE_AUTO_EXIT` 开或 `SEMA_PARENT_PID` 在场)∧ 腿还在观察 ∧ 窗会到期;键集属主 = `EngineLeaseFacts`(加一键而本表没跟 ⇒ tsc 红)。
+     */
+    readonly healthEngineLeaseKey: {
+        readonly at: "GET /health engineLease";
+        readonly members: {
+            lingerMs: {
+                attr: string;
+                since: string;
+            };
+            tickMs: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /** `GET /v1/models` 的 `models[]` 行键(只登本版新出现的键;行的其余键不是本版新上 wire):`supportsThinkingOff` —— 「这只模型的推理能不能关」,恒在场的布尔,值 = 引擎唯一读法 `thinkingOffSpelled(条目)`。 */
     readonly modelsRowKey: {
         readonly at: "GET /v1/models models[] 行键(<键> → 在场律)";
@@ -1092,8 +1123,9 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * 停驻技能卡的「批它放行了什么」三位,本版起在运维队列行与订阅流 `pending` 帧上也带(此前只有助手收件箱行与活卡帧带)。三位由一只投影 `skillCardFacts` 投,
-     * `satisfies Record<keyof SkillCardFacts, …>`:投影加 / 删一位而本表没跟 ⇒ tsc 红。在场律 `present-iff`:只在这一行有该位时才带键(普通卡三位三面都缺席,缺席不是断言)。
+     * 停驻技能卡的「批它放行了什么」三位,7.136.0 起在运维队列行与订阅流 `pending` 帧上也带(此前只有助手收件箱行与活卡帧带)。清单与成因词由一只投影 `skillCardFacts` 投,
+     * 摘要随授予绑定那一臂由 `parkRowFacts` 投(读自停驻行;7.141.0 起与 `boundGrantAbsence` 恰带其一 —— `boundGrantAbsence` 自 7.129.0 起就在本面,不是本表登记的新键);
+     * `satisfies Record<keyof SkillCardFacts | 摘要, …>`:投影加 / 删一位而本表没跟 ⇒ tsc 红。在场律 `present-iff`:只在这一行有该位时才带键(普通卡三位三面都缺席,缺席不是断言)。
      */
     readonly approvalQueuePendingKey: {
         readonly at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)";
@@ -1126,6 +1158,76 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 在飞 run 的权限模式切档口 `POST /v1/runs/:id/permission-mode`(本版新端点)200 体的键集(<键> → 在场律)。
+     * `satisfies Record<keyof PermissionModeVerbReply, …>`(体形属主 = `http/routes/run-permission-mode.ts`,路由按这只型铸体;键加一个而本表没跟 ⇒ tsc 红)。
+     * `permissionMode` 的值是引擎回执原样(引擎的词表,不在本表)。
+     */
+    readonly permissionModeVerbBodyKey: {
+        readonly at: "POST /v1/runs/:id/permission-mode 200 体(<键> → 在场律)";
+        readonly members: {
+            taskId: {
+                attr: string;
+                since: string;
+            };
+            sessionId: {
+                attr: string;
+                since: string;
+            };
+            status: {
+                attr: string;
+                since: string;
+            };
+            permissionMode: {
+                attr: string;
+                since: string;
+            };
+            admission: {
+                attr: string;
+                since: string;
+            };
+            persisted: {
+                attr: string;
+                since: string;
+            };
+            persistMiss: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 同一口 200 体 `admission.foldedBy`:受理判官改词的站。`satisfies Record<PermissionModeAdmissionFold, …>`(词表属主 = `permission-mode-admission.ts` 的 `PERMISSION_MODE_ADMISSION_FOLDS`)。 */
+    readonly permissionModeAdmissionFold: {
+        readonly at: "POST /v1/runs/:id/permission-mode 200 体 admission.foldedBy";
+        readonly members: {
+            entry_floor: {
+                attr: string;
+                since: string;
+            };
+            disable_auto_mode: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 同一口 200 体 `persistMiss`:回写没落定的成因。`satisfies Record<PermissionModePersistMiss, …>`(词表属主 = `http/routes/run-permission-mode.ts` 的 `PERMISSION_MODE_PERSIST_MISSES`)。 */
+    readonly permissionModePersistMiss: {
+        readonly at: "POST /v1/runs/:id/permission-mode 200 体 persistMiss(persisted:false 时)";
+        readonly members: {
+            claim_released: {
+                attr: string;
+                since: string;
+            };
+            context_absent: {
+                attr: string;
+                since: string;
+            };
+            store_failed: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 逐端点「应答面 → HTTP 状态」映射里**本版改了状态的面**(形照 `submitIdempotency`:`<端点>#<面>` → 状态;面是调用方能观察到的那一形,不是内部分支名)。
      * `since` 记**这一面以这个状态答**的起始版本;每个成员的旧状态写在 CHANGELOG 对应条里(旧状态的那一形此前没有登记,清单里它们是「本版新上 wire」,不是 changed)。
@@ -1198,6 +1300,18 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 400;
                 readonly since: "7.136.0";
             };
+            readonly "POST /v1/sessions/:id/sync/import#anchor_outside_declared_entries(Phase A \u4F53\u7684 anchors[i]:entryId \u4E0D\u5728 entryIds \u91CC / \u5143\u7D20\u4E0D\u662F\u5E26\u4E32\u578B eventId \u4E0E entryId \u7684\u5BF9\u8C61;\u4F53 request.field_invalid)": {
+                readonly attr: 400;
+                readonly since: "7.141.0";
+            };
+            readonly "POST /v1/sessions/:id/fork#stamped_archive(DB_BACKEND=local;\u6E90\u5B58\u6863\u4ECD\u5E26\u66F4\u65E9\u7248\u672C\u5199\u4E0B\u7684\u5C5E\u4E3B\u6233;\u96F6\u5199;\u4F53 conflict + \u5E26\u6233\u5B58\u6863\u7684\u56FA\u5B9A\u53E5)": {
+                readonly attr: 409;
+                readonly since: "7.141.0";
+            };
+            readonly "POST /v1/sessions/:id/sync/import/:stagingId/entries#stamped_archive(DB_BACKEND=local;\u63D0\u4EA4\u843D\u5728\u4ECD\u5E26\u5C5E\u4E3B\u6233\u7684\u5B58\u6863\u4E0A;\u884C\u51C0\u96F6\u5199;\u4F53 conflict + \u5E26\u6233\u5B58\u6863\u7684\u56FA\u5B9A\u53E5)": {
+                readonly attr: 409;
+                readonly since: "7.141.0";
+            };
             readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(\u65B0\u63D0\u4EA4;\u4F53 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": {
                 readonly attr: 400;
                 readonly since: "7.136.0";
@@ -1250,6 +1364,14 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 200;
                 readonly since: "7.137.0";
             };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.deny|ask \u5E26\u5C42\u6761\u76EE { rule, layer }(\u65B0\u63D0\u4EA4;layer = \u8BBE\u7F6E\u6765\u6E90\u8BCD)": {
+                readonly attr: 200;
+                readonly since: "7.141.0";
+            };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#user \u5C42 / \u5F62\u8DEF\u5F84\u89C4\u5219\u800C\u6267\u884C\u73AF\u5883\u7684\u914D\u7F6E\u6839\u8BFB\u4E0D\u51FA(\u6C99\u7BB1\u8F66\u9053\u6CA1\u8F6C SEMA_CONFIG_DIR \u4E14 home \u672A\u77E5;\u4F53 request.unprocessable + problems[].reason home_unresolvable;\u7EED\u8DD1 409 \u540C\u53E5)": {
+                readonly attr: 422;
+                readonly since: "7.141.0";
+            };
             readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#\u9650\u5236\u4FA7\u540D\u5185\u5E26 *(excludeTools)": {
                 readonly attr: 200;
                 readonly since: "7.137.0";
@@ -1341,6 +1463,29 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `GET /v1/sessions/:id/memory-status` 200 体上本版新出现的顶层键:`memorySync` —— 本部署记忆同步腿的停驻事实(部署事实,不随会话、不随层座 `?scope=`;
+     * 唯一读口 = 同步执行器的 `parked()`)。形 `{ parked: Array<{ scope, wayOut }> }`,`parked: []` = 在同步、没有层停驻;游标盘路径不上 wire。
+     */
+    readonly sessionMemoryStatusKey: {
+        readonly at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)";
+        readonly members: {
+            readonly memorySync: {
+                readonly attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)";
+                readonly since: "7.141.0";
+            };
+        };
+    };
+    /** 停驻层出路 `memorySync.parked[].wayOut` 的闭集(同一只词也在运维行 `memory_sync_layer_parked` 的 `wayOut` 上)。`delete_cursor` = 删掉这一层的同步游标文件,下一轮从空基线重收敛(不推删除)。 */
+    readonly memorySyncWayOut: {
+        readonly at: "GET /v1/sessions/:id/memory-status memorySync.parked[].wayOut";
+        readonly members: {
+            delete_cursor: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 拒体 / 应答体**句子的形**里本版换了或新增的(`<码>#<座>` → 句型)。句子是展示文本,机读分支按 `errorCode` / `field` / `reason`;本表登记的是「句型换了」,
      * 给按字面匹配句子的消费方对账(码、状态、体键在这些成员上都没变,变的只有 `message`)。`attr` 写句型的骨架(`<…>` 是占位),旧句型写在 CHANGELOG 对应条里。
@@ -1384,6 +1529,14 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential";
                 readonly since: "7.136.0";
             };
+            readonly "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": {
+                readonly attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …";
+                readonly since: "7.141.0";
+            };
+            readonly "400 request.field_invalid#settings.permissions.allow.bad_entry": {
+                readonly attr: "<field>[<index>] is not a string — every entry must be a permission-rule string (a settings layer's { \"rule\", \"layer\" } entry is read in deny / ask only). …";
+                readonly since: "7.141.0";
+            };
             readonly "400 request.field_invalid#a2aPeers.not_array": {
                 readonly attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations";
                 readonly since: "7.136.0";
@@ -1786,6 +1939,19 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "cadence-without-horizon-refuses-boot";
                 readonly since: "7.139.0";
             };
+            /** device 车道设备入口必填:`DEVICE_RELAY_URL` 行改述两种合法值(ws(s) URL / 字面 none)与缺席拒起;缺席说明由「缺席 ⇒ 设备按引擎地址拨」改为「无缺省」;行上新带可写词 none(url 行上的可写词原样回显)。 */
+            readonly "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].semantics": {
+                readonly attr: "required-on-device-lane;ws-url-or-literal-none;none-with-bindings-warns";
+                readonly since: "7.141.0";
+            };
+            readonly "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].derivedDefaultNote": {
+                readonly attr: "no-default;absent-refuses-boot";
+                readonly since: "7.141.0";
+            };
+            readonly "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].enumValues": {
+                readonly attr: "none(echoed-verbatim)";
+                readonly since: "7.141.0";
+            };
             /**
              * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;
              * 引擎记号占了方案词位时头值余下的部分照抹;引擎放过的形照抹),界 200(切点不落进记号)。7.137.0 是按记号切开、逐段过 `redactSecrets` 的另一只读法

package/dist/trace/self-minted-wire.js

@@ -150,6 +150,13 @@ export const SELF_MINTED_WIRE = {
             title: { attr: "-", since: "7.133.0" },
         },
     },
+    mcpTransportKind: {
+        at: "GET /v1/capabilities mcpTransportKinds[]",
+        members: {
+            stdio: { attr: "-", since: "7.141.0" },
+            http: { attr: "-", since: "7.141.0" },
+        },
+    },
     credentialPlaneSandboxGitState: {
         at: "GET /v1/capabilities credentialPlane.sandboxGit.state",
         members: {
@@ -228,6 +235,13 @@ export const SELF_MINTED_WIRE = {
             deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
         },
     },
+    healthEngineLeaseKey: {
+        at: "GET /health engineLease",
+        members: {
+            lingerMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
+            tickMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
+        },
+    },
     modelsRowKey: {
         at: "GET /v1/models models[] 行键(<键> → 在场律)",
         members: {
@@ -418,6 +432,33 @@ export const SELF_MINTED_WIRE = {
             acceptableForm: { attr: "present-iff", since: "7.137.0" },
         },
     },
+    permissionModeVerbBodyKey: {
+        at: "POST /v1/runs/:id/permission-mode 200 体(<键> → 在场律)",
+        members: {
+            taskId: { attr: "always", since: "7.141.0" },
+            sessionId: { attr: "always", since: "7.141.0" },
+            status: { attr: "always;running", since: "7.141.0" },
+            permissionMode: { attr: "always;engine receipt verbatim { requested?, effective, foldedBy? }", since: "7.141.0" },
+            admission: { attr: "present-iff the admission judge changed the word;{ requested, admitted, foldedBy }", since: "7.141.0" },
+            persisted: { attr: "always", since: "7.141.0" },
+            persistMiss: { attr: "present-iff persisted:false", since: "7.141.0" },
+        },
+    },
+    permissionModeAdmissionFold: {
+        at: "POST /v1/runs/:id/permission-mode 200 体 admission.foldedBy",
+        members: {
+            entry_floor: { attr: "-", since: "7.141.0" },
+            disable_auto_mode: { attr: "-", since: "7.141.0" },
+        },
+    },
+    permissionModePersistMiss: {
+        at: "POST /v1/runs/:id/permission-mode 200 体 persistMiss(persisted:false 时)",
+        members: {
+            claim_released: { attr: "-", since: "7.141.0" },
+            context_absent: { attr: "-", since: "7.141.0" },
+            store_failed: { attr: "-", since: "7.141.0" },
+        },
+    },
     endpointFaceStatus: {
         at: "逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面)",
         members: {
@@ -437,6 +478,9 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/sessions/:id/sync/import#identical_repush_blob_missing(体 missing_blob)": { attr: 422, since: "7.136.0" },
             "PATCH /v1/sessions/:id#title_no_visible_character(体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/sessions/:id/sync/import#title_no_visible_character(Phase A 体的 title;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
+            "POST /v1/sessions/:id/sync/import#anchor_outside_declared_entries(Phase A 体的 anchors[i]:entryId 不在 entryIds 里 / 元素不是带串型 eventId 与 entryId 的对象;体 request.field_invalid)": { attr: 400, since: "7.141.0" },
+            "POST /v1/sessions/:id/fork#stamped_archive(DB_BACKEND=local;源存档仍带更早版本写下的属主戳;零写;体 conflict + 带戳存档的固定句)": { attr: 409, since: "7.141.0" },
+            "POST /v1/sessions/:id/sync/import/:stagingId/entries#stamped_archive(DB_BACKEND=local;提交落在仍带属主戳的存档上;行净零写;体 conflict + 带戳存档的固定句)": { attr: 409, since: "7.141.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)": { attr: 400, since: "7.136.0" },
@@ -450,6 +494,8 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
             "PUT /v1/sessions/:id/policy|POST /v1/sessions/:id/sync/import#toolDeny 名内带 *(`*` / `mcp__git*` / `Bas*`)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(settings.permissions.deny|ask)": { attr: 200, since: "7.137.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.deny|ask 带层条目 { rule, layer }(新提交;layer = 设置来源词)": { attr: 200, since: "7.141.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.141.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
@@ -477,6 +523,18 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/sessions/:id/memory/erase#body.scope": { attr: "optional;non-empty-string else 400 request.field_invalid;names the layer whose store answers;absent ⇒ the deployment's store;selector still minted from the path", since: "7.140.0" },
         },
     },
+    sessionMemoryStatusKey: {
+        at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)",
+        members: {
+            memorySync: { attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)", since: "7.141.0" },
+        },
+    },
+    memorySyncWayOut: {
+        at: "GET /v1/sessions/:id/memory-status memorySync.parked[].wayOut",
+        members: {
+            delete_cursor: { attr: "-", since: "7.141.0" },
+        },
+    },
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
@@ -489,6 +547,8 @@ export const SELF_MINTED_WIRE = {
             "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
+            "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": { attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.141.0" },
+            "400 request.field_invalid#settings.permissions.allow.bad_entry": { attr: "<field>[<index>] is not a string — every entry must be a permission-rule string (a settings layer's { \"rule\", \"layer\" } entry is read in deny / ask only). …", since: "7.141.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers[i].not_object": { attr: "head: a2aPeers[i] is <shape>, not an A2A peer declaration (an object)", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers[i].<key>.unusable(url / cardUrl 凭据拒之外的键值坏形)": { attr: "<field> (peer <name>) is not a usable declaration — <rule> …", since: "7.136.0" },
@@ -605,6 +665,9 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[CONFIG_PROVIDER].semantics": { attr: "remote-without-center-url-refuses-boot", since: "7.139.0" },
             "GET /v1/config/catalog#rows[RETENTION_MODE].semantics": { attr: "enforce-without-horizon-or-cadence-refuses-boot", since: "7.139.0" },
             "GET /v1/config/catalog#rows[RETENTION_SWEEP_INTERVAL_SEC].semantics": { attr: "cadence-without-horizon-refuses-boot", since: "7.139.0" },
+            "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].semantics": { attr: "required-on-device-lane;ws-url-or-literal-none;none-with-bindings-warns", since: "7.141.0" },
+            "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].derivedDefaultNote": { attr: "no-default;absent-refuses-boot", since: "7.141.0" },
+            "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].enumValues": { attr: "none(echoed-verbatim)", since: "7.141.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },

package/dist/verifier-pause-card.d.ts

@@ -0,0 +1,8 @@
+import { type CardVoidPort } from "./card-void.js";
+/**
+ * 结果上若有验证器自己的停驻(带凭据)⇒ 作废它那张 pending 卡;否则零 I/O。**必须在出口封口之前调**(封口摘掉的正是这里要用的凭据)。
+ * 不抛:作废失败只让卡回到修前的形(由兜底收割),响亮留痕({@link VOID_FAILED});结算照常往下走。
+ * 卡已不 pending / 已不在 ⇒ 什么都不做(CAS 输给了收割,结局相同)。卡的会话与停驻报的验证器会话不一致 ⇒ 不动它(只作废**这一张**)。
+ */
+export declare function voidVerifierPauseCard(result: unknown, cards: CardVoidPort | undefined): Promise<void>;
+//# sourceMappingURL=verifier-pause-card.d.ts.map

package/dist/verifier-pause-card.js

@@ -0,0 +1,19 @@
+import { voidPendingCard } from "./card-void.js";
+const VOID_FAILED = "server.verifier-pause.card-void-failed";
+export async function voidVerifierPauseCard(result, cards) {
+    const pause = verifierPauseCardOf(result);
+    if (pause !== undefined)
+        await voidPendingCard(pause, cards, VOID_FAILED);
+}
+function verifierPauseCardOf(result) {
+    if (result === null || typeof result !== "object")
+        return undefined;
+    const pause = result.verification?.verifierPause;
+    if (pause === null || typeof pause !== "object")
+        return undefined;
+    const { checkpointToken, sessionId } = pause;
+    return typeof checkpointToken === "string" && checkpointToken !== "" && typeof sessionId === "string"
+        ? { token: checkpointToken, sessionId }
+        : undefined;
+}
+//# sourceMappingURL=verifier-pause-card.js.map

package/dist/web-admin-client/apply-effective.d.ts

@@ -107,17 +107,15 @@ export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.gateway_fallback_without_primary": "model-route-endpoint";
 };
 /**
- * 契约包出码、执法者是本仓但今天**未执法**的两只组拒码:本地配置腿上「管模型面的目录会顶替已声明的 env 表、决定不是 `replaced`」那道闸,与「每个任务都要解的 summarize 落不到可服务条目」的不变量。
+ * 契约包出码、执法者是本仓但今天**未执法**的组拒码:本地配置腿上「管模型面的目录会顶替已声明的 env 表、决定不是 `replaced`」那道闸。
  *
- * 词义:settings-schema 发布说明里的「engine / 引擎一侧」指**本仓(worker)**,不是 `@sema-agent/core` —— 这两码要的全部输入(本地配置腿、env 表、模型面 stage 与组拒口)只在本仓,core 里没有读
- * `MODEL_ID` / `config.d` 的地方、也没有组拒码。(契约包自己有几处把同一个词写成 core 7.58.0,那是它的叫法错。)所以本仓 stage 现在没有对应的不变量、不铸这两个码,不是因为「归引擎」,而是**还没做**,两码各自候什么:
+ * 词义:settings-schema 发布说明里的「engine / 引擎一侧」指**本仓(worker)**,不是 `@sema-agent/core` —— 这个码要的全部输入(本地配置腿、env 表、模型面 stage 与组拒口)只在本仓,core 里没有读
+ * `MODEL_ID` / `config.d` 的地方、也没有组拒码。所以本仓 stage 现在没有对应的不变量、不铸这个码,不是因为「归引擎」,而是**还没做**:
  *  · `CATALOG_REPLACES_ENV_MODELS_CODE`:执法是一整组跨仓件 —— 开机迁移 SS-M11(铸决定文档)· 本地腿每拍读决定(读数身份进候选的 etag)· 目录信任判官走根级文档 · 命令行 / 桌面 / 客户端核心三个写者先接契约包的计划助手;
  *    候设计票。在那之前,候选目录管着模型面而 env 表也声明了时,仍照旧由目录服务(与升级前逐位同)。
- *  · `SUMMARIZE_MODEL_MISSING_CODE`:码的前提是「summarize 落不到可服务条目 ⇒ 采纳后每个任务都被拒」,而本仓所钉 core 7.59.0 起非严格座位(summarize 在内)点名目录里没有的词时读作未设、沿自己的回落链走
- *    (summarize 的链是 → default,即回落缺省模型)并通告 `model.role_defaulted`;链上没有可解的模型才拒 —— 前提与所钉 core 相抵,候上游(settings-schema / core)重定义或退役这个码;在那之前 summarize 角色绑到不可用条目时仍是角色绑定那一行 warn(`ROLE_BINDING_UNAVAILABLE_HINT`),不是组拒。
- * 两码开始被铸之后,它们进 `/health.modelRefusals.plane` 的座位是**另案设计**(现在没有座:见 `model-plane-face.ts` 对「装配期被引擎整份拒收」的披露),不在这张表里偷铸一个不变量替它占位。
+ * 这个码开始被铸之后,它进 `/health.modelRefusals.plane` 的座位是**另案设计**(现在没有座:见 `model-plane-face.ts` 对「装配期被引擎整份拒收」的披露),不在这张表里偷铸一个不变量替它占位。
  */
-export declare const ENGINE_MINTED_PLANE_REFUSAL_CODES: readonly ["config.catalog_replaces_env_models", "config.summarize_model_missing"];
+export declare const ENGINE_MINTED_PLANE_REFUSAL_CODES: readonly ["config.catalog_replaces_env_models"];
 /**
  * [ref] —— **「无中心配置」档的候选**:中心凭证换人时,server 把在用的中心配置降到这一档({@link applyEffective} 吃它,和吃任何候选走同一条 stage → swap → commit)。
  * 它的意思是「**撤回**中心配置」—— 中心下发的每个热面回 env 底:

package/dist/web-admin-client/apply-effective.js

@@ -1,5 +1,5 @@
 import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
-import { CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE, WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
+import { CATALOG_REPLACES_ENV_MODELS_CODE, WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
 import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
@@ -248,7 +248,7 @@ export const PLANE_REFUSAL_INVARIANT_OF = {
     "config.model_route_endpoint_missing": "model-route-endpoint",
     "config.gateway_fallback_without_primary": "model-route-endpoint",
 };
-export const ENGINE_MINTED_PLANE_REFUSAL_CODES = [CATALOG_REPLACES_ENV_MODELS_CODE, SUMMARIZE_MODEL_MISSING_CODE];
+export const ENGINE_MINTED_PLANE_REFUSAL_CODES = [CATALOG_REPLACES_ENV_MODELS_CODE];
 function modelPlaneGroupReport(group) {
     return {
         applied: MODEL_PLANE_DOMAINS.flatMap((d) => (group.stages[d] !== undefined ? MODEL_PLANE_SURFACES[d] : [])),

package/dist/web-admin-client/candidate-gate.d.ts

@@ -37,7 +37,7 @@ export interface CandidateDomainError {
     readonly error: string;
 }
 /** 判官拒一份候选的成因(闭集):某个域判形失败(含 prompts 面)`domain_invalid` ∪ 被拒文档自带的词(契约闭集 `CONFIG_DOCUMENT_REFUSAL_REASONS`:
- *  `empty` / `invalid_json` / `not_object` / `io` 文件层,`retired_domain` 墓碑)—— 被拒文档的词表只在契约一处定义,这里派生(契约加词 ⇒ 按词穷举的读者编译红)。 */
+ *  `empty` / `invalid_json` / `not_object` / `io` / `too_deep` 文件层,`retired_domain` 墓碑)—— 被拒文档的词表只在契约一处定义,这里派生(契约加词 ⇒ 按词穷举的读者编译红)。 */
 export type CandidateRejectReason = "domain_invalid" | ConfigDocumentRefusalReason;
 /** 拒判里的一条:哪一域、为什么(读腿 / 契约包的原句)、成因词。`config_candidate_rejected` 行的 `errors` 就是这一列。 */
 export interface CandidateDomainRejection extends CandidateDomainError {

package/dist/web-admin-client/read-warnings.d.ts

@@ -31,8 +31,8 @@ import { type ConfigDocumentRefusal, type DroppedEntryIdentity, type DroppedEntr
  * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` / `migration` 取
  * `RetiredDomainError` 的同名字段)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
  * 体不是对象 ⇒ 原样交回、不判(载荷形错,契约读腿抛)。墓碑判据只在契约包,这里只分键。
- * 被拒文档是两条读腿同形的发现(判决只在候选判官 `candidate-gate.ts` 的 `judgeConfigCandidate`,成因词 = 发现自带的 `reason`):本地腿的被拒文档是契约整目录拒单
- * `inspectBundle` 的原样(`config-provider.ts`),wire 上没有文件层,只有这一种墓碑。`error` 本模块不脱敏(与折叠产物同律):各腿在自己的产出边界上过
+ * 被拒文档是两条读腿同形的发现(判决只在候选判官 `candidate-gate.ts` 的 `judgeConfigCandidate`,成因词 = 发现自带的 `reason`):本地腿的被拒文档是契约单读口
+ * `FileConfigStore.read()` 那一读的拒单原样(`config-provider.ts`),wire 上没有文件层,只有这一种墓碑。`error` 本模块不脱敏(与折叠产物同律):各腿在自己的产出边界上过
  * `redactSecrets` 兜底、不过 `redactConfigError`(句子不含配置值;引号段读法会把句中点名的域名换成指纹)。
  */
 export declare function separateRetiredDomains(body: unknown): {

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -20,9 +20,10 @@ dials the device, so the device needs no inbound port, no public address and no
 (this deployment has no device lane) or an object `{ enabled: true, protocolVersion, maxInflightPerDevice,
 wsPath, management, relayUrl? }`. Read `wsPath` from there rather than hardcoding it: the path is part of the wire
 contract and reading it means a future path change is not a cross-repo break. `relayUrl` (server 7.137.0+) is present
-only when the operator declared one (`DEVICE_RELAY_URL`): the engine sits behind a relay or gateway and the device
+only when the operator declared a relay URL (`DEVICE_RELAY_URL`): the engine sits behind a relay or gateway and the device
 must dial that absolute `ws://` / `wss://` URL verbatim instead of the engine's own address — do not rebuild it from
-the engine address and `wsPath`. Absent ⇒ dial the engine's own address at `wsPath`, as before. `protocolVersion` tells you
+the engine address and `wsPath`. Absent ⇒ dial the engine's own address at `wsPath`, as before (the operator declared
+`DEVICE_RELAY_URL=none`; a device-lane server does not start without one of the two declarations). `protocolVersion` tells you
 which protocol **revision** the server speaks before you spend a handshake finding out (§2.1: the revision decides
 which `errorCode` words the server accepts from you).
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.140.0",
+  "version": "7.141.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -70,7 +70,7 @@
   },
   "dependencies": {
     "@sema-agent/core": "7.60.0",
-    "@sema-agent/settings-schema": "15.2.0",
+    "@sema-agent/settings-schema": "16.0.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",