@sema-agent/server 7.141.0 → 7.142.0

package/dist/trace/self-minted-wire.d.ts

@@ -140,7 +140,7 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * 审批问的**无人决终态归因**:`POST /v1/tasks/:taskId/asks/:askId/decision` 410 `gone.ask` 体的 `cause`(问账行 `denied_reason` 列原值)。
+     * 审批问的**无人决终态归因**:`POST /v1/tasks/:taskId/asks/:askId/decision` 410 `gone.ask` 体的 `cause`(问账行 `ending_cause` 列经终态成因读口读出的词;7.142.0 列由 `denied_reason` 按意义改名、触发成因另起 `park_trigger` 一列 —— wire 键与值域不变)。
      * 词表属主 = `approval-deny-reasons.ts` 的 `APPROVAL_ENDING_CAUSES`(落这一列的那一子集 `AskRowEndingCause`;`satisfies Record<AskRowEndingCause, …>`:表加词而本行没跟 ⇒ tsc 红)。
      * 7.124.0:键名 `deniedReason` → `cause`(硬破坏,零别名;值域不变 + `run_exited` / `batch_sibling_withdrawn` 两个新词)—— 老成员的属性格因此从 `-` 变成 `key:cause`(清单记 `changed`)。
      * 7.116.0 +2:启动收敛(承载它的进程没了)的两个词 —— 与 `crashConvergedCause` 同词(同一问在两个读面上一个成因)。
@@ -702,6 +702,20 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            unreadable: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 会话列表行 `unreadable` 标记的整个键闭集:`errorCode` —— 读口打开这只会话时答的码(open 面那一张码表,与全局兜底同读)。 */
+    readonly sessionsListRowUnreadableKey: {
+        readonly at: "GET /v1/sessions sessions[].unreadable 键(<键> → 在场律)";
+        readonly members: {
+            errorCode: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /** `tool_end` 帧 `gate.disposition`(denied 臂)上的键(<臂>#<键> → 在场律;回放面 `GET /v1/runs/:id/events` 同读):`extension` —— hook 层拒且拒者的扩展注册名已知时 = 那张注册的名字(过出口座)。 */
@@ -940,9 +954,47 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `POST /v1/attachments` 上传项目包 mime(`application/vnd.sema.project-bundle`)而体过不了项目包的读者 ⇒ 400 `attachment.bundle_invalid`,拒体的 `reason`(一种拒因一个词;另带 `path` = 被拒条目的落点,读得出才在)。
+     * 词表属主 = `project-bundle.ts` 的 `PROJECT_BUNDLE_INVALID_REASONS`(唯一铸点 `readProjectBundle`,上传与播种同一只读者);`satisfies Record<ProjectBundleInvalidReason, …>`。行为钉:`test/project-bundle.test.ts`。
+     */
+    readonly projectBundleInvalidReason: {
+        readonly at: "400 attachment.bundle_invalid reason(上传项目包 mime 的体过不了项目包的读者;另带 path?)";
+        readonly members: {
+            not_archive: {
+                attr: string;
+                since: string;
+            };
+            unsafe_path: {
+                attr: string;
+                since: string;
+            };
+            entry_type: {
+                attr: string;
+                since: string;
+            };
+            reserved_path: {
+                attr: string;
+                since: string;
+            };
+            duplicate_path: {
+                attr: string;
+                since: string;
+            };
+            expanded_too_large: {
+                attr: string;
+                since: string;
+            };
+            too_many_entries: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
-     * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0)。
+     * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0);
+     * 同键重放体的信封(7.142.0 起 = 首答的信封;此前 = run 行读面,退役成员记在 `retired`)。
      * 行为由 `test/submit-idempotency-one-ledger.test.ts` 钉。
      */
     readonly submitIdempotency: {
@@ -968,6 +1020,17 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 409;
                 readonly since: "7.126.0";
             };
+            readonly "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(\u540C\u952E\u91CD\u653E\u7684\u4F53 = \u9996\u7B54\u7684\u4FE1\u5C01 + replay: true:\u7EC8\u5C40 = \u5F15\u64CE\u7ED3\u679C(result \u662F\u4E32),\u505C\u9A7B = \u7ED3\u679C + \u56DE\u6267\u4E09\u952E,\u884C\u8FD8\u5728\u8DD1 = \u56DE\u6267\u4E09\u952E;\u6D41\u5F0F\u817F\u653E\u8FDB done.result)": {
+                readonly attr: 200;
+                readonly since: "7.142.0";
+            };
+        };
+        readonly retired: {
+            readonly "POST /v1/tasks|/v1/tasks/stream#replay_run_read_face(\u540C\u952E\u91CD\u653E\u7684\u4F53 = GET /v1/runs/:id \u7684\u8BFB\u9762 + replay: true:result \u662F\u5BF9\u8C61,\u5916\u52A0 status / errorCode / heldBy \u7B49\u8BFB\u9762\u952E)": {
+                readonly attr: 200;
+                readonly since: "7.125.0";
+                readonly until: "7.142.0";
+            };
         };
     };
     /**
@@ -1400,6 +1463,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 500;
                 readonly since: "7.139.0";
             };
+            readonly "POST /v1/approvals/:sessionId/decide#parked_principal_lane_not_permitted(\u505C\u9A7B\u8D4E\u56DE;\u5361\u7684\u4E3B\u4F53\u6B64\u523B\u4E0D\u88AB\u8BB8\u53EF\u672C\u90E8\u7F72\u7684\u6267\u884C\u8F66\u9053;approve \u4E0E deny \u540C\u7B54;\u8BA4\u9886\u4E4B\u524D,\u505C\u9A7B\u884C\u4E0D\u52A8\u3001\u5361\u4ECD\u5F85\u51B3;\u4F53 resume_blocked_by_policy + blockedBy execution_lane_not_allowed + allowedLanes + lane + retriable)": {
+                readonly attr: 409;
+                readonly since: "7.139.0";
+            };
             readonly "PATCH /v1/sessions/:id#mirror_row(\u53EA\u8BFB\u955C\u50CF\u884C\u4E0A\u7684\u5199,\u5E26\u4E0D\u5E26 expectedRowTag;\u4F53 conflict.session_mirror + forkPath)": {
                 readonly attr: 409;
                 readonly since: "7.139.0";
@@ -1432,6 +1499,18 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 400;
                 readonly since: "7.140.0";
             };
+            readonly "POST /v1/memory/sync/:scope#identity_undeclared(DB \u8BB0\u5FC6\u5E73\u9762\u6CA1\u58F0\u660E MEMORY_SYNC_SERVE_IDENTITY;\u9274\u6743\u4E4B\u540E;\u4F53 feature.memory_sync_serve_disabled)": {
+                readonly attr: 501;
+                readonly since: "7.142.0";
+            };
+            readonly "POST /v1/memory/sync/:scope#peer_not_declared_identity(peer \u4E0D\u662F\u540C\u6B65\u8EAB\u4EFD\u7684\u89C4\u8303\u5F62 / \u5E26\u51ED\u636E / \u975E http(s) / \u8D85\u5BBD / \u7A7A\u4E32;\u4F53 request.field_invalid + field peer + reason)": {
+                readonly attr: 400;
+                readonly since: "7.142.0";
+            };
+            readonly "POST /v1/memory/sync/:scope#peer_not_this_center(peer \u662F\u89C4\u8303\u5F62\u4F46\u4E0D\u7B49\u4E8E\u672C\u4E2D\u5FC3\u58F0\u660E\u7684\u8EAB\u4EFD;\u96F6\u8BFB\u96F6\u5199;\u4F53 config.memory_sync_target_mismatch)": {
+                readonly attr: 409;
+                readonly since: "7.142.0";
+            };
         };
     };
     /**
@@ -1486,6 +1565,77 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 同步身份「声明的身份」座位的拒因词(判序):形的四词逐字是契约包 URL 判官的词;`credential` = 规范化之后带凭据;`too-long` = 规范化之后装不进中心 `peer` 列(190);
+     * `not-canonical` = 值本身没缺陷、但不是它自己的规范形。两张拒体同一张词表:会话记忆同步触发口的 `target`、中心侧同步口的 `peer`。
+     */
+    readonly memorySyncIdentityFlaw: {
+        readonly at: "400 request.field_invalid reason(POST /v1/sessions/:id/memory/sync 的 target · POST /v1/memory/sync/:scope 的 peer;另带 field)";
+        readonly members: {
+            "not-http-url": {
+                attr: string;
+                since: string;
+            };
+            userinfo: {
+                attr: string;
+                since: string;
+            };
+            query: {
+                attr: string;
+                since: string;
+            };
+            fragment: {
+                attr: string;
+                since: string;
+            };
+            credential: {
+                attr: string;
+                since: string;
+            };
+            "too-long": {
+                attr: string;
+                since: string;
+            };
+            "not-canonical": {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 会话记忆同步触发口的 wire 面(`<面>#<键>` → 读法 / 在场律)。200 体 = 引擎 `memorySyncReportOf` 的产物原样(键属主在引擎);本仓不加汇总键。 */
+    readonly sessionMemorySyncWire: {
+        readonly at: "POST /v1/sessions/:id/memory/sync(<面>#<键> → 读法 / 在场律)";
+        readonly members: {
+            readonly "body#target": {
+                readonly attr: "required;the only key;the target engine's GET /v1/capabilities memorySyncServe.identity verbatim;not a declared sync identity ⇒ 400 request.field_invalid";
+                readonly since: "7.142.0";
+            };
+            readonly "200#target": {
+                readonly attr: "always;engine report verbatim";
+                readonly since: "7.142.0";
+            };
+            readonly "200#sourceRevision": {
+                readonly attr: "always;the session leafId read in the same head read as the owner gate";
+                readonly since: "7.142.0";
+            };
+            readonly "200#scopes": {
+                readonly attr: "always;the read set: latest settled run's effectiveMemoryScopes (mounted ⇒ scope keys in serving order; memoryless / none ⇒ [])";
+                readonly since: "7.142.0";
+            };
+            readonly "200#layers": {
+                readonly attr: "present-iff no whole-round refusal;one entry per read-set layer the round ran (engine outcome synced | incomplete | refused | failed)";
+                readonly since: "7.142.0";
+            };
+            readonly "200#refused": {
+                readonly attr: "present-iff whole-round refusal;{code: config.memory_sync_target_mismatch | session_active, message}";
+                readonly since: "7.142.0";
+            };
+            readonly "409 conflict.session_memory_unobserved#activeTaskId": {
+                readonly attr: "present-iff the session has a run in flight";
+                readonly since: "7.142.0";
+            };
+        };
+    };
     /**
      * 拒体 / 应答体**句子的形**里本版换了或新增的(`<码>#<座>` → 句型)。句子是展示文本,机读分支按 `errorCode` / `field` / `reason`;本表登记的是「句型换了」,
      * 给按字面匹配句子的消费方对账(码、状态、体键在这些成员上都没变,变的只有 `message`)。`attr` 写句型的骨架(`<…>` 是占位),旧句型写在 CHANGELOG 对应条里。
@@ -1764,6 +1914,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "store";
                 readonly since: "7.136.0";
             };
+            readonly MEMORY_SYNC_SERVE_IDENTITY: {
+                readonly attr: "memory";
+                readonly since: "7.142.0";
+            };
         };
     };
     /**
@@ -1787,6 +1941,101 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * fleet 流 `hook_notice` / `hook_non_blocking_failure` 的 `reason`(附录 E.2)。前四词随这一族上 wire(7.48.0),`matcher_over_budget` 7.133.0;
+     * `url_not_allowed`(7.142.0)= http 条目被 http hook 名单拦下、一个字节都没发(`hooks/hook-runner.ts` 的 http 腿,契约包判官答拦)。
+     */
+    readonly hookNonBlockingFailureReason: {
+        readonly at: "fleet stream hook_notice kind:hook_non_blocking_failure reason";
+        readonly members: {
+            exit_nonzero: {
+                attr: string;
+                since: string;
+            };
+            timeout: {
+                attr: string;
+                since: string;
+            };
+            spawn_failed: {
+                attr: string;
+                since: string;
+            };
+            bad_json: {
+                attr: string;
+                since: string;
+            };
+            matcher_over_budget: {
+                attr: string;
+                since: string;
+            };
+            url_not_allowed: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** fleet 流 `hook_notice` / `hook_managed_unrun` 的 `reason`(附录 E.2-bis;这一族 7.133.0 上 wire)。`url_not_allowed`(7.142.0)同上一集:托管组的 http 条目被名单拦下 ⇒ 未跑成(失效关闭)。 */
+    readonly hookManagedUnrunReason: {
+        readonly at: "fleet stream hook_notice kind:hook_managed_unrun reason";
+        readonly members: {
+            matcher_invalid: {
+                attr: string;
+                since: string;
+            };
+            llm_carrier_unavailable: {
+                attr: string;
+                since: string;
+            };
+            llm_cap: {
+                attr: string;
+                since: string;
+            };
+            powershell_unsupported: {
+                attr: string;
+                since: string;
+            };
+            if_unevaluable: {
+                attr: string;
+                since: string;
+            };
+            budget_exhausted: {
+                attr: string;
+                since: string;
+            };
+            spawn_failed: {
+                attr: string;
+                since: string;
+            };
+            timeout: {
+                attr: string;
+                since: string;
+            };
+            exit_nonzero: {
+                attr: string;
+                since: string;
+            };
+            bad_json: {
+                attr: string;
+                since: string;
+            };
+            decision_out_of_set: {
+                attr: string;
+                since: string;
+            };
+            evidence_unavailable: {
+                attr: string;
+                since: string;
+            };
+            rewrite_unsettled: {
+                attr: string;
+                since: string;
+            };
+            url_not_allowed: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /** 本仓在出口对 core 值做的变换(值变、键不变)。 */
     readonly wireValueRule: {
         readonly at: "出口值变换(<端点>#<键> → 变换)";

package/dist/trace/self-minted-wire.js

@@ -258,6 +258,13 @@ export const SELF_MINTED_WIRE = {
         at: "GET /v1/sessions sessions[] 行键 = PATCH /v1/sessions/:id 200 体 = 409 conflict.session_row_changed currentRow(<键> → 在场律)",
         members: {
             rowTag: { attr: "present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation)", since: "7.139.0" },
+            unreadable: { attr: "present-iff the session head's leaf cannot be read (the file backend: the archive header is corrupt / truncated, or the archive cannot be read); the SQL backends never carry it; PATCH answers 500 for such a session before writing, so its 200 / 409 rows never carry it", since: "7.142.0" },
+        },
+    },
+    sessionsListRowUnreadableKey: {
+        at: "GET /v1/sessions sessions[].unreadable 键(<键> → 在场律)",
+        members: {
+            errorCode: { attr: "always; the errorCode GET /v1/sessions/:id answers for the same session (corrupt_session | internal.error today)", since: "7.142.0" },
         },
     },
     toolEndGateDispositionKey: {
@@ -352,6 +359,18 @@ export const SELF_MINTED_WIRE = {
             no_authorizer_session: { attr: "-", since: "7.137.0" },
         },
     },
+    projectBundleInvalidReason: {
+        at: "400 attachment.bundle_invalid reason(上传项目包 mime 的体过不了项目包的读者;另带 path?)",
+        members: {
+            not_archive: { attr: "-", since: "7.142.0" },
+            unsafe_path: { attr: "-", since: "7.142.0" },
+            entry_type: { attr: "-", since: "7.142.0" },
+            reserved_path: { attr: "-", since: "7.142.0" },
+            duplicate_path: { attr: "-", since: "7.142.0" },
+            expanded_too_large: { attr: "-", since: "7.142.0" },
+            too_many_entries: { attr: "-", since: "7.142.0" },
+        },
+    },
     submitIdempotency: {
         at: "提交幂等(<端点>#<面> → 应答状态)",
         members: {
@@ -360,6 +379,10 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/leader?idempotencyKey": { attr: 200, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.run_exists": { attr: 409, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
+            "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(同键重放的体 = 首答的信封 + replay: true:终局 = 引擎结果(result 是串),停驻 = 结果 + 回执三键,行还在跑 = 回执三键;流式腿放进 done.result)": { attr: 200, since: "7.142.0" },
+        },
+        retired: {
+            "POST /v1/tasks|/v1/tasks/stream#replay_run_read_face(同键重放的体 = GET /v1/runs/:id 的读面 + replay: true:result 是对象,外加 status / errorCode / heldBy 等读面键)": { attr: 200, since: "7.125.0", until: "7.142.0" },
         },
     },
     builtinScenario: {
@@ -503,6 +526,7 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId_current(体带当前门的身份;受理形与不带键同)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#rewindFiles(新提交;体 request.body_shape + unknownKeys [rewindFiles])": { attr: 400, since: "7.139.0" },
             "POST /v1/side-query#uncoded_error_with_preflight_prefix(没有引擎码、英文开头与前缀表同形的错误;体 internal.error)": { attr: 500, since: "7.139.0" },
+            "POST /v1/approvals/:sessionId/decide#parked_principal_lane_not_permitted(停驻赎回;卡的主体此刻不被许可本部署的执行车道;approve 与 deny 同答;认领之前,停驻行不动、卡仍待决;体 resume_blocked_by_policy + blockedBy execution_lane_not_allowed + allowedLanes + lane + retriable)": { attr: 409, since: "7.139.0" },
             "PATCH /v1/sessions/:id#mirror_row(只读镜像行上的写,带不带 expectedRowTag;体 conflict.session_mirror + forkPath)": { attr: 409, since: "7.139.0" },
             "PATCH /v1/sessions/:id#owner_changed_after_gate(门那一读之后同一会话的属主被改;体 not_found.session)": { attr: 404, since: "7.139.0" },
             "PATCH /v1/sessions/:id#expectedRowTag_stale(行已不在那只标签上;体 conflict.session_row_changed + currentRow)": { attr: 409, since: "7.139.0" },
@@ -511,6 +535,9 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/memory/erase|POST /v1/sessions/:id/memory/erase#erasure_store_unjudged(抹除落到部署的店之外的那只店:点名的层住在个人挂载上,或按会话抹除而这只会话在另一只店有贡献 / 那只店的账读不出;体 memory.erasure_store_unjudged,什么都没删)": { attr: 409, since: "7.140.0" },
             "POST /v1/memory/export|POST /v1/memory/import|GET /v1/memory/origin/external|POST /v1/memory/erase#layers_span_two_stores(请求点名的层分住两只店;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
             "记忆诸口 + POST /v1/admin/memory/consolidation/run|GET /v1/admin/memory/consolidation|GET /v1/memory/export|POST /v1/memory/sync/:scope#layer_unreadable(请求点名的层引擎读不出;体 request.memory_layer)": { attr: 400, since: "7.140.0" },
+            "POST /v1/memory/sync/:scope#identity_undeclared(DB 记忆平面没声明 MEMORY_SYNC_SERVE_IDENTITY;鉴权之后;体 feature.memory_sync_serve_disabled)": { attr: 501, since: "7.142.0" },
+            "POST /v1/memory/sync/:scope#peer_not_declared_identity(peer 不是同步身份的规范形 / 带凭据 / 非 http(s) / 超宽 / 空串;体 request.field_invalid + field peer + reason)": { attr: 400, since: "7.142.0" },
+            "POST /v1/memory/sync/:scope#peer_not_this_center(peer 是规范形但不等于本中心声明的身份;零读零写;体 config.memory_sync_target_mismatch)": { attr: 409, since: "7.142.0" },
         },
     },
     memoryLayerSeatKey: {
@@ -535,6 +562,30 @@ export const SELF_MINTED_WIRE = {
             delete_cursor: { attr: "-", since: "7.141.0" },
         },
     },
+    memorySyncIdentityFlaw: {
+        at: "400 request.field_invalid reason(POST /v1/sessions/:id/memory/sync 的 target · POST /v1/memory/sync/:scope 的 peer;另带 field)",
+        members: {
+            "not-http-url": { attr: "-", since: "7.142.0" },
+            userinfo: { attr: "-", since: "7.142.0" },
+            query: { attr: "-", since: "7.142.0" },
+            fragment: { attr: "-", since: "7.142.0" },
+            credential: { attr: "-", since: "7.142.0" },
+            "too-long": { attr: "-", since: "7.142.0" },
+            "not-canonical": { attr: "-", since: "7.142.0" },
+        },
+    },
+    sessionMemorySyncWire: {
+        at: "POST /v1/sessions/:id/memory/sync(<面>#<键> → 读法 / 在场律)",
+        members: {
+            "body#target": { attr: "required;the only key;the target engine's GET /v1/capabilities memorySyncServe.identity verbatim;not a declared sync identity ⇒ 400 request.field_invalid", since: "7.142.0" },
+            "200#target": { attr: "always;engine report verbatim", since: "7.142.0" },
+            "200#sourceRevision": { attr: "always;the session leafId read in the same head read as the owner gate", since: "7.142.0" },
+            "200#scopes": { attr: "always;the read set: latest settled run's effectiveMemoryScopes (mounted ⇒ scope keys in serving order; memoryless / none ⇒ [])", since: "7.142.0" },
+            "200#layers": { attr: "present-iff no whole-round refusal;one entry per read-set layer the round ran (engine outcome synced | incomplete | refused | failed)", since: "7.142.0" },
+            "200#refused": { attr: "present-iff whole-round refusal;{code: config.memory_sync_target_mismatch | session_active, message}", since: "7.142.0" },
+            "409 conflict.session_memory_unobserved#activeTaskId": { attr: "present-iff the session has a run in flight", since: "7.142.0" },
+        },
+    },
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
@@ -626,6 +677,7 @@ export const SELF_MINTED_WIRE = {
         at: "GET /v1/config/catalog rows[](<行名> → 域;只登本版新增的行)",
         members: {
             SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
+            MEMORY_SYNC_SERVE_IDENTITY: { attr: "memory", since: "7.142.0" },
         },
     },
     deviceProtocolRevision: {
@@ -636,6 +688,36 @@ export const SELF_MINTED_WIRE = {
             3: { attr: "+name_too_long", since: "7.137.0" },
         },
     },
+    hookNonBlockingFailureReason: {
+        at: "fleet stream hook_notice kind:hook_non_blocking_failure reason",
+        members: {
+            exit_nonzero: { attr: "-", since: "7.48.0" },
+            timeout: { attr: "-", since: "7.48.0" },
+            spawn_failed: { attr: "-", since: "7.48.0" },
+            bad_json: { attr: "-", since: "7.48.0" },
+            matcher_over_budget: { attr: "-", since: "7.133.0" },
+            url_not_allowed: { attr: "-", since: "7.142.0" },
+        },
+    },
+    hookManagedUnrunReason: {
+        at: "fleet stream hook_notice kind:hook_managed_unrun reason",
+        members: {
+            matcher_invalid: { attr: "-", since: "7.133.0" },
+            llm_carrier_unavailable: { attr: "-", since: "7.133.0" },
+            llm_cap: { attr: "-", since: "7.133.0" },
+            powershell_unsupported: { attr: "-", since: "7.133.0" },
+            if_unevaluable: { attr: "-", since: "7.133.0" },
+            budget_exhausted: { attr: "-", since: "7.133.0" },
+            spawn_failed: { attr: "-", since: "7.133.0" },
+            timeout: { attr: "-", since: "7.133.0" },
+            exit_nonzero: { attr: "-", since: "7.133.0" },
+            bad_json: { attr: "-", since: "7.133.0" },
+            decision_out_of_set: { attr: "-", since: "7.133.0" },
+            evidence_unavailable: { attr: "-", since: "7.133.0" },
+            rewrite_unsettled: { attr: "-", since: "7.133.0" },
+            url_not_allowed: { attr: "-", since: "7.142.0" },
+        },
+    },
     wireValueRule: {
         at: "出口值变换(<端点>#<键> → 变换)",
         members: {

package/dist/trace/wire-projection-faces.d.ts

@@ -243,7 +243,7 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly projector: "engineNoticeEventData";
         readonly coreType: "EngineNotice";
         readonly excluded: readonly [];
-        readonly minted: readonly ["ts"];
+        readonly minted: readonly ["ts", "eventId"];
     };
     readonly memory_import_report: {
         readonly projector: "buildImportReportWire";

package/dist/trace/wire-projection-faces.js

@@ -71,7 +71,7 @@ export const WIRE_PROJECTION_FACES = {
             return WIRE_PROJECTION_FACES.wiring_manifest_tenant.mintedConditional;
         },
     },
-    engine_notice: { projector: "engineNoticeEventData", coreType: "EngineNotice", excluded: [], minted: ["ts"] },
+    engine_notice: { projector: "engineNoticeEventData", coreType: "EngineNotice", excluded: [], minted: ["ts", "eventId"] },
     memory_import_report: { projector: "buildImportReportWire", coreType: "MemoryImportReport", excluded: [], minted: [] },
     origin_clearance_row: {
         projector: "buildClearanceRowWire",

package/dist/web-admin-client/apply-effective.js

@@ -1,5 +1,5 @@
 import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
-import { CATALOG_REPLACES_ENV_MODELS_CODE, WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
+import { CATALOG_REPLACES_ENV_MODELS_CODE, SandboxGitConfig, WEB_ADMIN_ENV, formatConfigPath, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel, sanitizeZodError } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
 import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
@@ -135,6 +135,7 @@ export function applyEffective(config, eff, logger, opts) {
         }
     }
     const servedBefore = servedModelTableLeg(config);
+    const sandboxGitBefore = config.sandboxGit;
     commitStaged(config, staged);
     if (ordered)
         appliedGeneration.set(config, gen);
@@ -169,6 +170,8 @@ export function applyEffective(config, eff, logger, opts) {
         logger?.info("web_admin_runtime_hot", staged.hot.infoLine);
     if (Object.keys(staged.projects).length > 0)
         logger?.info("web_admin_projects", { projects: Object.keys(staged.projects) });
+    if (JSON.stringify(sandboxGitBefore) !== JSON.stringify(staged.sandboxGit))
+        logger?.info("web_admin_sandbox_git", { version: staged.version, origins: staged.sandboxGit?.origins.map((e) => e.origin) ?? null });
     return true;
 }
 function declareCandidateWithheldEnv(seats, modelApiKeyEnv, version) {
@@ -216,6 +219,10 @@ function commitStaged(config, staged) {
     if (staged.hot.setCommandPolicy)
         config.commandPolicy = staged.hot.commandPolicyNext;
     mutateInPlace(config.projects, staged.projects);
+    if (staged.sandboxGit !== undefined)
+        config.sandboxGit = staged.sandboxGit;
+    else
+        delete config.sandboxGit;
 }
 export const MODEL_PLANE_DOMAINS = ["models"];
 const MODEL_PLANE_SURFACES = {
@@ -472,6 +479,7 @@ function stageEffective(config, eff, logger, opts) {
             ...(Array.isArray(r.defaultScopes) ? { defaultScopes: r.defaultScopes.filter((x) => typeof x === "string") } : {}),
         };
     }
+    const sandboxGit = stageSandboxGit(eff, logger);
     return {
         version: typeof eff.version === "number" && Number.isFinite(eff.version) ? eff.version : 0,
         modelPlaneGroup,
@@ -479,8 +487,20 @@ function stageEffective(config, eff, logger, opts) {
         limits,
         hot,
         projects,
+        sandboxGit,
     };
 }
+const SANDBOX_GIT_REFUSED_EFFECT = "the block is read as routing no git origins (the sandbox git plane reads no_origins; no new sandbox pod carries the credential broker) — the rest of this candidate applies; fix the block at the console (it is judged by the contract's SandboxGitConfig)";
+function stageSandboxGit(eff, logger) {
+    if (eff.sandboxGit === undefined)
+        return undefined;
+    const judged = SandboxGitConfig.safeParse(eff.sandboxGit);
+    if (judged.success)
+        return judged.data;
+    const issues = sanitizeZodError(judged.error).issues.map((i) => `${i.path.length === 0 ? "sandboxGit" : `sandboxGit.${formatConfigPath(i.path.map((seg) => (typeof seg === "number" ? seg : String(seg))))}`}: ${i.message}`);
+    logger?.warn("web_admin_sandbox_git_refused", { version: typeof eff.version === "number" ? eff.version : 0, issues, effect: SANDBOX_GIT_REFUSED_EFFECT });
+    return undefined;
+}
 export function centerManagedConfigKeys(eff) {
     const out = new Set();
     if (!eff)

package/dist/web-admin-client/effective-keys.js

@@ -13,6 +13,7 @@ const EFFECTIVE_CONFIG_KEY_TABLE = {
     plugins: true,
     readFace: true,
     prompts: true,
+    sandboxGit: true,
 };
 export const EFFECTIVE_CONFIG_KEYS = Object.keys(EFFECTIVE_CONFIG_KEY_TABLE);
 export const EFFECTIVE_ENVELOPE_KEYS = ["version", "updatedAt"];
@@ -25,6 +26,7 @@ export const GOVERNANCE_DOMAIN_KEYS = Object.keys(GOVERNANCE_DOMAIN_KEY_TABLE);
 export const NON_DOMAIN_EFFECTIVE_KEYS = {
     a2a: "R-15 裁开域([4384]),但 settings-schema 至 1.3.0 未开(DOMAINS 无 a2a)——S-31 件2 BLOCKED on schema:远端腿靠 readEffectiveWire 的 open-world verbatim 透传(DESIGN-269),本地腿不可达(FileConfigStore 只读 PORTABLE_DOMAINS)。schema 开域之日按墓碑流程收线。",
     readFace: "R-15 裁**暂不开域**([4384]:env 逐键恒赢语义下收益薄,⚪ 呈现制过渡)——#A4 的远端腿同靠 open-world 透传;本地腿四键由 env / 引擎默认独占。若来日改裁开域,同上墓碑机制。",
+    sandboxGit: "契约的 wire-only 键(settings-schema 14.7.0 `EffectiveWire.sandboxGit`):web-admin 按部署登记册投影,不是存储域 —— `buildEffective` 从不产它、`readEffectiveWire` 逐字承运;判它的唯一座位 `SandboxGitConfig` 在 stageEffective 调一次。本地腿不可达(`config.d` 只读便携域)⇒ 本地配置源恒缺席(沙箱 git 平面读 `no_origins`)。",
 };
 export const DOMAINS_NOT_CONSUMED_BY_SERVER = {
     rosters: "center 写面域:center 端 resolveEffectiveForWorker 把 roster 解析进 per-worker /effective 的 models 视图——server 消费的是解析产物,不读原始域。",

package/dist/web-admin-client/types.d.ts

@@ -392,6 +392,10 @@ export interface EffectiveConfig {
     /** prompts 域(中心层;wire 形只有一种 = 契约包 `EffectivePromptsWire` `{ schemaVersion: 2, artifact }`)—— 判法只在候选判官一处
      *  (`prompts-domain-validate.ts` 的 `judgePromptsWire`,经 `judgeConfigCandidate`),本 interface 只声明键位存在(unknown:判官是唯一解释者,这里不复刻形)。 */
     prompts?: unknown;
+    /** 沙箱 git 平面的有效配置块(契约 `EffectiveWire.sandboxGit`:wire-only 的非域顶层键,web-admin 按部署登记册投影,读腿逐字承运、不判)——
+     *  可选、无默认:缺席 = 这个部署没有投影这一块。本 interface 只声明键位(unknown:与 `prompts` 同形);判它的唯一座位是契约 `SandboxGitConfig`,
+     *  在 `stageEffective` 里调一次(判过 ⇒ `config.sandboxGit`;判不过 ⇒ 当作没有任何 origin + 一行 `web_admin_sandbox_git_refused`,契约 §12.8)。 */
+    sandboxGit?: unknown;
 }
 /** (stage7 P5,registry-core 0.8 `execution` 域): the center-resolved per-principal execution
  *  ruling riding the caps view. `required=false` / ruling absent = no enforcement (legacy). `allowedLanes` is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.141.0",
+  "version": "7.142.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",