@sema-agent/server 7.145.0 → 7.146.0

package/dist/trace/self-minted-wire.d.ts

@@ -561,6 +561,31 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `GET /health` 的 `auth` 段的键集(恒在场,`auth` 本身恒在)。7.121.0 的三键是补登记;`serviceTokenActsForDeployment` = 出示 service 凭据、不报主体的调用方
+     * 在这台部署上代不代部署本人(配了 service 凭据 ∧ 声明位 `SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT`;门 `actsForDeployment` 读同一格)。
+     */
+    readonly healthAuthKey: {
+        readonly at: "GET /health auth";
+        readonly members: {
+            required: {
+                attr: string;
+                since: string;
+            };
+            kinds: {
+                attr: string;
+                since: string;
+            };
+            identityAttach: {
+                attr: string;
+                since: string;
+            };
+            serviceTokenActsForDeployment: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /** 7.121.0:`GET /health` 自报位 `auth.identityAttach`。 */
     readonly healthIdentityAttach: {
         readonly at: "GET /health auth.identityAttach";
@@ -653,6 +678,28 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `GET /health` 的 `inflightBreakdown` 段(7.146.0):`inflight` 的分项 —— `http` = 本副本 HTTP 腿(在飞 run 集 + 没有登记身份的同步计费腿 + admission 期的非探针请求),`leader` = leader 口的后台 run,
+     * `sessionResident` = 会话驻留的后台 shell / monitor(活过起它的那一条腿;不含 retain 行)。`inflight`(总数)恒等于三项之和(同一次读、`inflightTotal` 一处求和);判停读的阻断集 = `http + leader`(不上 wire),驻留项只报不阻断。
+     * present-iff `inflight` 在场(`drainState` 装了的部署);键集属主 = `InflightBreakdown`(加一键而本表没跟 ⇒ tsc 红)。
+     */
+    readonly healthInflightBreakdownKey: {
+        readonly at: "GET /health inflightBreakdown";
+        readonly members: {
+            http: {
+                attr: string;
+                since: string;
+            };
+            leader: {
+                attr: string;
+                since: string;
+            };
+            sessionResident: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `GET /health` 的 `engineLease` 段(7.141.0):引擎附着租约窗 —— `lingerMs` = 自退腿会执行的**最短**静默窗(父活着的窗与孤儿窗取小),`tickMs` = 自退检查采样拍。
      * present-iff 本进程装了租约腿(`ENGINE_AUTO_EXIT` 开或 `SEMA_PARENT_PID` 在场)∧ 腿还在观察 ∧ 窗会到期;键集属主 = `EngineLeaseFacts`(加一键而本表没跟 ⇒ tsc 红)。
@@ -668,6 +715,129 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            firstAttach: {
+                attr: string;
+                since: string;
+            };
+            lane: {
+                attr: string;
+                since: string;
+            };
+            handover: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * `GET /health` 的 `engineLease.firstAttach` 格(7.146.0):首次附着前的宽限窗 —— `windowMs` = 生效的候首触窗 `max(owned 窗, ENGINE_FIRST_ATTACH_MS)`,
+     * `since` = 窗开始(装配那一拍,epoch ms),`attachedAt` = 首个非探针请求的时刻(epoch ms;`null` = 还没有过)。键集属主 = `EngineLeaseFirstAttachFacts`(加一键而本表没跟 ⇒ tsc 红)。
+     */
+    readonly healthEngineLeaseFirstAttachKey: {
+        readonly at: "GET /health engineLease.firstAttach";
+        readonly members: {
+            windowMs: {
+                attr: string;
+                since: string;
+            };
+            since: {
+                attr: string;
+                since: string;
+            };
+            attachedAt: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `GET /health` 的 `engineLease.handover` 格:交接车道的事实 —— 进入时刻(epoch ms)、缘由、交接窗、退出边界此刻会硬收的后台 shell 数。只在 handover 车道在场;键集属主 = `EngineHandoverFacts`。 */
+    readonly healthEngineLeaseHandoverKey: {
+        readonly at: "GET /health engineLease.handover";
+        readonly members: {
+            since: {
+                attr: string;
+                since: string;
+            };
+            reason: {
+                attr: string;
+                since: string;
+            };
+            lingerMs: {
+                attr: string;
+                since: string;
+            };
+            backgroundShells: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 附着租约的车道词(`/health.engineLease.lane`、`POST /v1/engine/handover` · `POST /v1/engine/attach` 200 体的 `lane`、`exit-last.json` 的 `lane`)。 */
+    readonly engineLane: {
+        readonly at: "engine lease lane(/health engineLease.lane · POST /v1/engine/handover|attach lane · exit-last.json lane)";
+        readonly members: {
+            handover: {
+                attr: string;
+                since: string;
+            };
+            orphan: {
+                attr: string;
+                since: string;
+            };
+            awaitingFirstAttach: {
+                attr: string;
+                since: string;
+            };
+            owned: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 交接缘由闭集(交接口体的 `reason`、`/health.engineLease.handover.reason`)。 */
+    readonly engineHandoverReason: {
+        readonly at: "POST /v1/engine/handover reason · /health engineLease.handover.reason";
+        readonly members: {
+            background_exit: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `POST /v1/engine/handover` 200 体的键集(唯一铸点 = 租约腿交接门的 `enter`)。 */
+    readonly engineHandoverReplyKey: {
+        readonly at: "POST /v1/engine/handover 200 体键(<键> → 在场律)";
+        readonly members: {
+            lane: {
+                attr: string;
+                since: string;
+            };
+            since: {
+                attr: string;
+                since: string;
+            };
+            lingerMs: {
+                attr: string;
+                since: string;
+            };
+            backgroundShells: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** `POST /v1/engine/attach` 200 体的键集(唯一铸点 = 租约腿交接门的 `attach`)。 */
+    readonly engineAttachReplyKey: {
+        readonly at: "POST /v1/engine/attach 200 体键(<键> → 在场律)";
+        readonly members: {
+            lane: {
+                attr: string;
+                since: string;
+            };
+            handedOverForMs: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /** `GET /v1/models` 的 `models[]` 行键(只登本版新出现的键;行的其余键不是本版新上 wire):`supportsThinkingOff` —— 「这只模型的推理能不能关」,恒在场的布尔,值 = 引擎唯一读法 `thinkingOffSpelled(条目)`。 */
@@ -939,6 +1109,39 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 429 `limit.rate_exceeded` 拒体的机读 `reason`(7.146.0 起;码是旧的、`reason` 键是新的 —— 其余 `limit.rate_exceeded` 的产地不带它)。词表属主 = `http/run-concurrency-cap.ts` 的
+     * `RATE_EXCEEDED_REASONS`(唯一铸点 `runConcurrencyRefusalOf`);`satisfies Record<RateExceededReason, …>`。`run_concurrency_cap` = 本副本在飞 run 已到并发帽
+     * (`RUN_MAX_CONCURRENT` / `RUN_MAX_CONCURRENT_PER_PRINCIPAL`;新提交的四个口,幂等重放之后),体另带 `retryAfterSec: 5`。
+     */
+    readonly rateExceededReason: {
+        readonly at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)";
+        readonly members: {
+            run_concurrency_cap: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * 400 `request.env_credential_refused`(7.146.0 起;请求 `settings.env` 里有凭据)拒体 `entries[]` 每一条的 `match`:这一条为什么被判成凭据(体另带 `field: "settings.env"`、`entries[].key`;值从不进体)。
+     * 词表属主 = `task-settings.ts` 的 `SETTINGS_ENV_CREDENTIAL_MATCHES`(唯一铸点 `settingsEnvCredentialIssue`;受理门 / `resolveSpec` 两腿 / 存体续跑预判同调);`satisfies Record<SettingsEnvCredentialMatch, …>`。
+     * `name` = 名字是本引擎的凭据变量(配置目录 `secret` 行 ∪ 模型条目 `apiKeyEnv`,比名不分大小写);`value_shape` = 值是秘密形;两者都中报 `name`。续跑口 409 `resume_blocked_by_policy`(`blockedBy` = 本码)随体同一组机读位。
+     * 行为钉:`test/settings-env-credential.test.ts`。
+     */
+    readonly settingsEnvCredentialMatch: {
+        readonly at: "400 request.env_credential_refused entries[].match(settings.env 里被判成凭据的条目;续跑口 409 resume_blocked_by_policy 同一组机读位)";
+        readonly members: {
+            name: {
+                attr: string;
+                since: string;
+            };
+            value_shape: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `inheritEnv` 的三只 400 `request.field_invalid`(值形 / 车道 / 无会话)拒体的 `reason`(体另带 `field: "inheritEnv"`;一种拒因一个词)。词表属主 = `request-value-closure.ts` 的
      * `INHERIT_ENV_REFUSAL_REASONS`(唯一铸点 `inheritEnvFacts`;受理门与 resolveSpec 两腿只经它出机读位);`satisfies Record<InheritEnvRefusalReason, …>`。
@@ -1901,10 +2104,26 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 503;
                 readonly since: "7.143.0";
             };
-            readonly "POST /v1/rules/cc-import/redeem#member_refused(\u5151\u4ED8\u8D70\u5B8C\u3001\u5F15\u64CE\u7684\u5B8C\u6574\u6210\u5458\u8868\u91CC\u6709\u88AB\u62D2\u7684\u6210\u5458;\u4F53 = \u56DE\u6267 { members, rev },\u90A3\u51E0\u884C outcome indeterminate + reason store_refused + detail \u5F15\u64CE\u539F\u8BDD;\u7968\u7528\u6389,\u540C\u7968\u518D\u5151 404)": {
+            readonly "POST /v1/rules/cc-import/redeem#member_refused(\u5151\u4ED8\u8D70\u5B8C\u3001\u5F15\u64CE\u7684\u5B8C\u6574\u6210\u5458\u8868\u91CC\u6709\u88AB\u62D2\u7684\u6210\u5458;\u4F53 = \u56DE\u6267 { members, rev },\u90A3\u51E0\u884C outcome refused(\u5F15\u64CE\u7B54 committed no;7.145.0 \u4E3A indeterminate + store_refused)+ reason = \u5F15\u64CE\u62D2\u56E0\u7801(RuleRefusalCode)+ detail \u5F15\u64CE\u539F\u8BDD;\u7968\u7528\u6389,\u540C\u7968\u518D\u5151 404)": {
                 readonly attr: 200;
                 readonly since: "7.145.0";
             };
+            readonly "POST /v1/rules/cc-import/redeem|POST /v1/rules/local-import/redeem#member_outcome_unknown(\u5151\u4ED8\u8D70\u5B8C\u3001\u5F15\u64CE\u7684\u5B8C\u6574\u6210\u5458\u8868\u91CC\u6709\u4E00\u5458\u7B54 committed unknown:\u5199\u629B / \u8BFB\u56DE\u8BFB\u4E0D\u51FA / \u8BB0 dot \u7684 CAS \u6216 dot \u5206\u914D\u5931\u8D25;\u4E0D\u843D\u5B9A,\u8BA4\u9886\u653E\u56DE;\u4F53 state.rule_import_retry + retryAfterSec;\u540C\u7968\u91CD\u6765\u5373\u91CD\u8D70)": {
+                readonly attr: 503;
+                readonly since: "7.146.0";
+            };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env \u5E26\u51ED\u636E\u6761\u76EE(\u540D\u5B57\u662F\u672C\u5F15\u64CE\u7684\u51ED\u636E\u53D8\u91CF / \u503C\u662F\u79D8\u5BC6\u5F62;\u65B0\u63D0\u4EA4;\u4F53 request.env_credential_refused + field settings.env + entries[{ key, match }],\u503C\u4E0D\u56DE\u663E)": {
+                readonly attr: 400;
+                readonly since: "7.146.0";
+            };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#sessionId \u662F\u672C\u8FDB\u7A0B\u5220\u8FC7\u7684\u4F1A\u8BDD id\u3001\u6839\u4F1A\u8BDD\u884C\u4E0A\u7684\u4F4F\u5BA2\u4E0D\u662F\u5220\u524D\u5C5E\u4E3B(\u65B0\u63D0\u4EA4;\u6388\u6743\u53E3\u767B\u8BB0\u4E4B\u540E\u3001\u6267\u884C\u4E0A\u4E0B\u6587\u89E3\u6790\u5668\u6B65 \u2460;\u4F53 conflict.session_id_retired,\u4E0D\u56DE\u663E id / \u5C5E\u4E3B)": {
+                readonly attr: 409;
+                readonly since: "7.146.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#\u6839\u4F1A\u8BDD id \u662F\u672C\u8FDB\u7A0B\u5220\u8FC7\u7684\u4F1A\u8BDD id\u3001\u884C\u4E0A\u7684\u4F4F\u5BA2\u4E0D\u662F\u5220\u524D\u5C5E\u4E3B(\u7EED\u8DD1\u5BB6\u65CF / \u505C\u9A7B\u8D4E\u56DE / \u5DE5\u4F5C\u6D41\u51B3\u65AD\u540E\u7684\u5BBF\u4E3B\u65B0\u8F6E;\u8BA4\u9886\u4E4B\u524D,\u5361\u4ECD\u5F85\u51B3;\u4F53 resume_blocked_by_policy + blockedBy conflict.session_id_retired + retriable)": {
+                readonly attr: 409;
+                readonly since: "7.146.0";
+            };
         };
     };
     /**
@@ -1925,13 +2144,6 @@ export declare const SELF_MINTED_WIRE: {
                 since: string;
             };
         };
-        readonly retired: {
-            readonly "result(\u22647.144.0 \u7684 cc-import \u56DE\u6267:{ members: <\u5F15\u64CE RedeemedBatchMember \u539F\u5F62\u884C:candidateIndex / behavior / rule / scope \u5BF9\u8C61 / status / alreadyRedeemed / dot>, rev })": {
-                readonly attr: "always";
-                readonly since: "7.46.0";
-                readonly until: "7.145.0";
-            };
-        };
     };
     /** 同上回执 `members[]` 一行的键(<键> → 在场律)。键集属主 = `ImportOutcomeMember`(`satisfies` 穷举),唯一投影 = `rules-consent.ts` 的 `buildImportOutcomeMembers`(两口同调)。 */
     readonly ruleImportReceiptMemberKey: {
@@ -1983,6 +2195,7 @@ export declare const SELF_MINTED_WIRE: {
     /**
      * `GET /v1/sessions/:id/memory-status` 200 体上本版新出现的顶层键:`memorySync` —— 本部署记忆同步腿的停驻事实(部署事实,不随会话、不随层座 `?scope=`;
      * 唯一读口 = 同步执行器的 `parked()`)。形 `{ parked: Array<{ scope, wayOut }> }`,`parked: []` = 在同步、没有层停驻;游标盘路径不上 wire。
+     * `writeHome` / `planes`(7.146.0)—— 会话的记忆写家:引擎给的 canonical 绝对目录(worker 文件系统路径),字节原样;`writeHome` 是店绑定的键(带层座 = 那只店的引擎答案,顶层原样;不带层座 = 引擎在店之间择好的会话级一值,顶层原样;逐店明细 `planes[]` 原样透出每行的 `writeHome`);在场律 = 引擎答了 ∧ 部署形表行 `callerOwnsWorkerDisk`(与能力位 `projectContext` 同一行)。
      */
     readonly sessionMemoryStatusKey: {
         readonly at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)";
@@ -1991,6 +2204,14 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)";
                 readonly since: "7.141.0";
             };
+            readonly writeHome: {
+                readonly attr: "present-iff the engine answered it ∧ the single-user host lane (the capability bit projectContext's range predicate: hosted / sandbox / device / no-hands lanes ⇒ absent);the engine's absolute directory, byte for byte;with ?scope= that store's engine answer;without ?scope= the session-level home the engine chose across the stores (the newest store's own home;absent while any store's reading is unreadable, on a same-instant tie, or when no store names one)";
+                readonly since: "7.146.0";
+            };
+            readonly planes: {
+                readonly attr: "present-iff no ?scope= ∧ the single-user host lane (same predicate as writeHome);[{plane:\"project\"|\"personal\", writeHome?}] one row per store in the engine's store order, each row the engine's own answer for that store (writeHome verbatim, absent when that store names none);the rows' other keys are not on the wire";
+                readonly since: "7.146.0";
+            };
         };
     };
     /** 停驻层出路 `memorySync.parked[].wayOut` 的闭集(同一只词也在运维行 `memory_sync_layer_parked` 的 `wayOut` 上)。`delete_cursor` = 删掉这一层的同步游标文件,下一轮从空基线重收敛(不推删除)。 */
@@ -2078,6 +2299,87 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 收编批量导入 `POST /v1/adoption/:id/sessions` 逐元素结局的 `outcome`(三词闭集;属主 = `adoption/wire.ts` 的 `AdoptionImportResult` 判别联合 ——
+     * 联合加一臂而本表没跟 / 多一个词 ⇒ tsc 红)。
+     */
+    readonly adoptionImportOutcome: {
+        readonly at: "POST /v1/adoption/:id/sessions 200 results[].outcome";
+        readonly members: {
+            imported: {
+                attr: string;
+                since: string;
+            };
+            already_imported: {
+                attr: string;
+                since: string;
+            };
+            rejected: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 同口 `outcome: "rejected"` 的 `code`(三词闭集;属主 = `adoption/wire.ts` 的 `ADOPTION_IMPORT_REJECT_CODES`,与结局联合的拒臂两向编译钉)。属性 = 这一臂多带的键。 */
+    readonly adoptionImportRejectCode: {
+        readonly at: "POST /v1/adoption/:id/sessions 200 results[].code(present-iff outcome rejected)";
+        readonly members: {
+            too_large: {
+                attr: string;
+                since: string;
+            };
+            invalid_envelope: {
+                attr: string;
+                since: string;
+            };
+            duplicate_client_session_id: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 同口的体与结局键(`<面>#<键>` → 读法 / 在场律)。 */
+    readonly adoptionImportWire: {
+        readonly at: "POST /v1/adoption/:id/sessions(<面>#<键> → 读法 / 在场律)";
+        readonly members: {
+            readonly "body#sessions": {
+                readonly attr: "required;the only key;array of envelopes;length > adoptionImport.maxSessions ⇒ 400 request.field_invalid (field sessions, reason over_cap)";
+                readonly since: "7.146.0";
+            };
+            readonly "body.sessions[]#clientSessionId": {
+                readonly attr: "required;string 1-255 chars;idempotency key with the adoption id";
+                readonly since: "7.146.0";
+            };
+            readonly "body.sessions[]#entries": {
+                readonly attr: "required;array of session entries oldest first;the only other key (any extra key ⇒ that element invalid_envelope)";
+                readonly since: "7.146.0";
+            };
+            readonly "200#results": {
+                readonly attr: "always;one per element, same order";
+                readonly since: "7.146.0";
+            };
+            readonly "200.results[]#clientSessionId": {
+                readonly attr: "always except invalid_envelope on an unreadable envelope";
+                readonly since: "7.146.0";
+            };
+            readonly "200.results[]#sessionId": {
+                readonly attr: "present-iff imported | already_imported;the cloud session id derived from (adoptionId, clientSessionId)";
+                readonly since: "7.146.0";
+            };
+            readonly "200.results[]#count": {
+                readonly attr: "present-iff code too_large";
+                readonly since: "7.146.0";
+            };
+            readonly "200.results[]#cap": {
+                readonly attr: "present-iff code too_large";
+                readonly since: "7.146.0";
+            };
+            readonly "200.results[]#detail": {
+                readonly attr: "present-iff code invalid_envelope";
+                readonly since: "7.146.0";
+            };
+        };
+    };
     /** 中心侧同步口(`<面>#<键>` → 读法 / 在场律)。只登本版新出现的(路径版本段、主张、答复游标的化身、化身拒答两键)。 */
     readonly centralMemorySyncWire: {
         readonly at: "POST /v2/memory/sync/:scope(<面>#<键> → 读法 / 在场律)";
@@ -2153,6 +2455,14 @@ export declare const SELF_MINTED_WIRE: {
     readonly refusalSentenceForm: {
         readonly at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)";
         readonly members: {
+            readonly "401 auth.unauthorized#operator(/metrics* \u00B7 GET /v1/tasks/source-summary)": {
+                readonly attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)";
+                readonly since: "7.146.0";
+            };
+            readonly "422 invalid_entries#row_contract(\u4F1A\u8BDD\u540C\u6B65\u63A8\u9001\u7B2C\u4E8C\u9636\u6BB5;\u6536\u7F16\u6279\u91CF\u5BFC\u5165\u540C\u53E5\u8FDB\u9010\u5143\u7D20 detail)": {
+                readonly attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)";
+                readonly since: "7.146.0";
+            };
             readonly "409 decide.row_unrevivable#no_root_anchor": {
                 readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
                 readonly since: "7.136.0";
@@ -2481,6 +2791,14 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "memory";
                 readonly since: "7.142.0";
             };
+            readonly DEVICE_TRUSTED_PROXY_CIDRS: {
+                readonly attr: "orchestration";
+                readonly since: "7.146.0";
+            };
+            readonly SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT: {
+                readonly attr: "auth";
+                readonly since: "7.146.0";
+            };
         };
     };
     /**

package/dist/trace/self-minted-wire.js

@@ -191,6 +191,15 @@ export const SELF_MINTED_WIRE = {
             direct_door_jwt: { attr: "-", since: "7.121.0" },
         },
     },
+    healthAuthKey: {
+        at: "GET /health auth",
+        members: {
+            required: { attr: "always", since: "7.121.0" },
+            kinds: { attr: "always", since: "7.121.0" },
+            identityAttach: { attr: "always", since: "7.121.0" },
+            serviceTokenActsForDeployment: { attr: "always (boolean: service credential configured ∧ SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT)", since: "7.146.0" },
+        },
+    },
     healthIdentityAttach: {
         at: "GET /health auth.identityAttach",
         members: {
@@ -234,11 +243,70 @@ export const SELF_MINTED_WIRE = {
             deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
         },
     },
+    healthInflightBreakdownKey: {
+        at: "GET /health inflightBreakdown",
+        members: {
+            http: { attr: "always within inflightBreakdown", since: "7.146.0" },
+            leader: { attr: "always within inflightBreakdown", since: "7.146.0" },
+            sessionResident: { attr: "always within inflightBreakdown", since: "7.146.0" },
+        },
+    },
     healthEngineLeaseKey: {
         at: "GET /health engineLease",
         members: {
             lingerMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
             tickMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
+            firstAttach: { attr: "present-iff engineLease present and the owned window is finite", since: "7.146.0" },
+            lane: { attr: "always within engineLease", since: "7.146.0" },
+            handover: { attr: "present-iff lane is handover", since: "7.146.0" },
+        },
+    },
+    healthEngineLeaseFirstAttachKey: {
+        at: "GET /health engineLease.firstAttach",
+        members: {
+            windowMs: { attr: "always within firstAttach", since: "7.146.0" },
+            since: { attr: "always within firstAttach (epoch ms)", since: "7.146.0" },
+            attachedAt: { attr: "epoch ms, null until the first non-probe request", since: "7.146.0" },
+        },
+    },
+    healthEngineLeaseHandoverKey: {
+        at: "GET /health engineLease.handover",
+        members: {
+            since: { attr: "always within handover (epoch ms)", since: "7.146.0" },
+            reason: { attr: "always within handover", since: "7.146.0" },
+            lingerMs: { attr: "always within handover", since: "7.146.0" },
+            backgroundShells: { attr: "always within handover (running shell rows the exit boundary would hard-kill now)", since: "7.146.0" },
+        },
+    },
+    engineLane: {
+        at: "engine lease lane(/health engineLease.lane · POST /v1/engine/handover|attach lane · exit-last.json lane)",
+        members: {
+            handover: { attr: "-", since: "7.146.0" },
+            orphan: { attr: "-", since: "7.146.0" },
+            awaitingFirstAttach: { attr: "-", since: "7.146.0" },
+            owned: { attr: "-", since: "7.146.0" },
+        },
+    },
+    engineHandoverReason: {
+        at: "POST /v1/engine/handover reason · /health engineLease.handover.reason",
+        members: {
+            background_exit: { attr: "-", since: "7.146.0" },
+        },
+    },
+    engineHandoverReplyKey: {
+        at: "POST /v1/engine/handover 200 体键(<键> → 在场律)",
+        members: {
+            lane: { attr: "always (handover)", since: "7.146.0" },
+            since: { attr: "always (epoch ms; the same value on a repeated handover)", since: "7.146.0" },
+            lingerMs: { attr: "always", since: "7.146.0" },
+            backgroundShells: { attr: "always", since: "7.146.0" },
+        },
+    },
+    engineAttachReplyKey: {
+        at: "POST /v1/engine/attach 200 体键(<键> → 在场律)",
+        members: {
+            lane: { attr: "always", since: "7.146.0" },
+            handedOverForMs: { attr: "present-iff this attach cleared a handover", since: "7.146.0" },
         },
     },
     modelsRowKey: {
@@ -353,6 +421,19 @@ export const SELF_MINTED_WIRE = {
             not_object: { attr: "-", since: "7.133.0" },
         },
     },
+    rateExceededReason: {
+        at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)",
+        members: {
+            run_concurrency_cap: { attr: "-", since: "7.146.0" },
+        },
+    },
+    settingsEnvCredentialMatch: {
+        at: "400 request.env_credential_refused entries[].match(settings.env 里被判成凭据的条目;续跑口 409 resume_blocked_by_policy 同一组机读位)",
+        members: {
+            name: { attr: "-", since: "7.146.0" },
+            value_shape: { attr: "-", since: "7.146.0" },
+        },
+    },
     inheritEnvRefusalReason: {
         at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")",
         members: {
@@ -664,7 +745,11 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/capabilities/mcp#engine_name_collision(中心声明两台归一后同挂一个工具命名空间前缀,引擎在任何传输被触碰之前整集拒;体 config.mcp_server_name_collision + 引擎原句;与同步提交腿同一张码 → 状态表)": { attr: 409, since: "7.143.0" },
             "POST /v1/tasks#engine_name_collision(同步腿;同一份声明集被引擎整集拒;零工作的拒;体 config.mcp_server_name_collision)": { attr: 409, since: "7.143.0" },
             "POST /v1/rules/local-import/prepare#tightening_write_failed(一条收下的 deny / ask 写不进店;这一批的放行扣下、没有票;体 state.rule_write_failed + committed,同 POST /v1/rules)": { attr: 503, since: "7.143.0" },
-            "POST /v1/rules/cc-import/redeem#member_refused(兑付走完、引擎的完整成员表里有被拒的成员;体 = 回执 { members, rev },那几行 outcome indeterminate + reason store_refused + detail 引擎原话;票用掉,同票再兑 404)": { attr: 200, since: "7.145.0" },
+            "POST /v1/rules/cc-import/redeem#member_refused(兑付走完、引擎的完整成员表里有被拒的成员;体 = 回执 { members, rev },那几行 outcome refused(引擎答 committed no;7.145.0 为 indeterminate + store_refused)+ reason = 引擎拒因码(RuleRefusalCode)+ detail 引擎原话;票用掉,同票再兑 404)": { attr: 200, since: "7.145.0" },
+            "POST /v1/rules/cc-import/redeem|POST /v1/rules/local-import/redeem#member_outcome_unknown(兑付走完、引擎的完整成员表里有一员答 committed unknown:写抛 / 读回读不出 / 记 dot 的 CAS 或 dot 分配失败;不落定,认领放回;体 state.rule_import_retry + retryAfterSec;同票重来即重走)": { attr: 503, since: "7.146.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 带凭据条目(名字是本引擎的凭据变量 / 值是秘密形;新提交;体 request.env_credential_refused + field settings.env + entries[{ key, match }],值不回显)": { attr: 400, since: "7.146.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#sessionId 是本进程删过的会话 id、根会话行上的住客不是删前属主(新提交;授权口登记之后、执行上下文解析器步 ①;体 conflict.session_id_retired,不回显 id / 属主)": { attr: 409, since: "7.146.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#根会话 id 是本进程删过的会话 id、行上的住客不是删前属主(续跑家族 / 停驻赎回 / 工作流决断后的宿主新轮;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy conflict.session_id_retired + retriable)": { attr: 409, since: "7.146.0" },
         },
     },
     ruleImportReceiptKey: {
@@ -673,17 +758,14 @@ export const SELF_MINTED_WIRE = {
             members: { attr: "always", since: "7.145.0" },
             rev: { attr: "always", since: "7.145.0" },
         },
-        retired: {
-            "result(≤7.144.0 的 cc-import 回执:{ members: <引擎 RedeemedBatchMember 原形行:candidateIndex / behavior / rule / scope 对象 / status / alreadyRedeemed / dot>, rev })": { attr: "always", since: "7.46.0", until: "7.145.0" },
-        },
     },
     ruleImportReceiptMemberKey: {
         at: "POST /v1/rules/cc-import/redeem 200 回执 members[] 行键(<键> → 在场律;与 POST /v1/rules/local-import/redeem 同形)",
         members: {
             key: { attr: "always; { behavior, rule, scope } — scope is the GET /v1/rules discriminated string (global | project:<root>)", since: "7.145.0" },
-            outcome: { attr: "always; persisted | no-op | indeterminate (refused reserved for a typed engine verdict bit, not minted)", since: "7.145.0" },
-            reason: { attr: "present-iff outcome indeterminate; store_refused", since: "7.145.0" },
-            detail: { attr: "present-iff outcome indeterminate; the engine's refusal sentence verbatim", since: "7.145.0" },
+            outcome: { attr: "always; persisted | no-op | refused (engine refusal, committed no) | indeterminate (engine refusal, committed unknown; 7.145.0 minted every engine refusal as indeterminate)", since: "7.145.0" },
+            reason: { attr: "present-iff outcome refused | indeterminate; the engine's RuleRefusalCode verbatim (7.145.0: the one word store_refused)", since: "7.145.0" },
+            detail: { attr: "present-iff outcome refused | indeterminate; the engine's refusal sentence verbatim", since: "7.145.0" },
         },
     },
     memoryLayerSeatKey: {
@@ -699,6 +781,8 @@ export const SELF_MINTED_WIRE = {
         at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)",
         members: {
             memorySync: { attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)", since: "7.141.0" },
+            writeHome: { attr: "present-iff the engine answered it ∧ the single-user host lane (the capability bit projectContext's range predicate: hosted / sandbox / device / no-hands lanes ⇒ absent);the engine's absolute directory, byte for byte;with ?scope= that store's engine answer;without ?scope= the session-level home the engine chose across the stores (the newest store's own home;absent while any store's reading is unreadable, on a same-instant tie, or when no store names one)", since: "7.146.0" },
+            planes: { attr: "present-iff no ?scope= ∧ the single-user host lane (same predicate as writeHome);[{plane:\"project\"|\"personal\", writeHome?}] one row per store in the engine's store order, each row the engine's own answer for that store (writeHome verbatim, absent when that store names none);the rows' other keys are not on the wire", since: "7.146.0" },
         },
     },
     memorySyncWayOut: {
@@ -732,6 +816,36 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#reason": { attr: "always;closed set sessionMemoryUnobservedReason, judged in read order (no settled run → the latest settled run's observation gives no read set: empty observation or memory not mounted → no leaf);the message is a function of reason", since: "7.143.0" },
         },
     },
+    adoptionImportOutcome: {
+        at: "POST /v1/adoption/:id/sessions 200 results[].outcome",
+        members: {
+            imported: { attr: "-", since: "7.146.0" },
+            already_imported: { attr: "-", since: "7.146.0" },
+            rejected: { attr: "-", since: "7.146.0" },
+        },
+    },
+    adoptionImportRejectCode: {
+        at: "POST /v1/adoption/:id/sessions 200 results[].code(present-iff outcome rejected)",
+        members: {
+            too_large: { attr: "count = the envelope's JSON byte length;cap = maxSessionBytes at the time", since: "7.146.0" },
+            invalid_envelope: { attr: "detail = a fixed sentence (envelope shape, or which import invariant failed);clientSessionId present-iff readable", since: "7.146.0" },
+            duplicate_client_session_id: { attr: "an earlier element of the same batch used this clientSessionId (whatever its own outcome)", since: "7.146.0" },
+        },
+    },
+    adoptionImportWire: {
+        at: "POST /v1/adoption/:id/sessions(<面>#<键> → 读法 / 在场律)",
+        members: {
+            "body#sessions": { attr: "required;the only key;array of envelopes;length > adoptionImport.maxSessions ⇒ 400 request.field_invalid (field sessions, reason over_cap)", since: "7.146.0" },
+            "body.sessions[]#clientSessionId": { attr: "required;string 1-255 chars;idempotency key with the adoption id", since: "7.146.0" },
+            "body.sessions[]#entries": { attr: "required;array of session entries oldest first;the only other key (any extra key ⇒ that element invalid_envelope)", since: "7.146.0" },
+            "200#results": { attr: "always;one per element, same order", since: "7.146.0" },
+            "200.results[]#clientSessionId": { attr: "always except invalid_envelope on an unreadable envelope", since: "7.146.0" },
+            "200.results[]#sessionId": { attr: "present-iff imported | already_imported;the cloud session id derived from (adoptionId, clientSessionId)", since: "7.146.0" },
+            "200.results[]#count": { attr: "present-iff code too_large", since: "7.146.0" },
+            "200.results[]#cap": { attr: "present-iff code too_large", since: "7.146.0" },
+            "200.results[]#detail": { attr: "present-iff code invalid_envelope", since: "7.146.0" },
+        },
+    },
     centralMemorySyncWire: {
         at: "POST /v2/memory/sync/:scope(<面>#<键> → 读法 / 在场律)",
         members: {
@@ -761,6 +875,8 @@ export const SELF_MINTED_WIRE = {
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
+            "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
+            "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -866,6 +982,8 @@ export const SELF_MINTED_WIRE = {
         members: {
             SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
             MEMORY_SYNC_SERVE_IDENTITY: { attr: "memory", since: "7.142.0" },
+            DEVICE_TRUSTED_PROXY_CIDRS: { attr: "orchestration", since: "7.146.0" },
+            SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT: { attr: "auth", since: "7.146.0" },
         },
     },
     deviceProtocolRevision: {

package/dist/trace/wire-projection-faces.d.ts

@@ -171,7 +171,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly workspace_changed: {
         readonly projector: "workspaceChangedEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["root", "remote", "entered", "project"];
+        readonly excluded: readonly ["root", "remote", "entered", "project", "session"];
         readonly minted: readonly [];
     };
     readonly status: {

package/dist/trace/wire-projection-faces.js

@@ -34,7 +34,7 @@ export const WIRE_PROJECTION_FACES = {
     tool_roster_delta: { projector: "toolRosterDeltaEventData", coreType: arm("tool_roster_delta"), excluded: [], minted: [] },
     diagnostics: { projector: "diagnosticsEventData", coreType: arm("diagnostics"), excluded: [], minted: [] },
     steering_injected: { projector: "steeringInjectedEventData", coreType: arm("steering_injected"), excluded: [], minted: [] },
-    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: ["root", "remote", "entered", "project"], minted: [] },
+    workspace_changed: { projector: "workspaceChangedEventData", coreType: arm("workspace_changed"), excluded: ["root", "remote", "entered", "project", "session"], minted: [] },
     status: { projector: "brainStatusEventData", coreType: `BrainStatus & ${arm("status")}`, excluded: [], minted: [] },
     compacted: { projector: "compactedEventData", coreType: arm("compacted"), excluded: [], minted: [] },
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },

package/dist/usage-analytics.d.ts

@@ -16,6 +16,10 @@
  *    第二种口径不完整:**有 echo 行但缺数值键**(该键按 0 计入 ⇒ 总量偏低)——两臂同义:别把总数当精确值;
  *  - 行内数值键一律走 {@link numOf} 守卫:数据源是 DB 里的 JSON,裸算术遇缺席/非数会 NaN 毒掉整窗(#59);
  *  - 扫窗有行数上限(store 侧 LIMIT)——触顶时结果携带 `truncated:true`(诚实截断,绝不静默)。
+ *
+ * 窗契约(三个后端同一条,`usageScan(fromMs, toMs)`):窗是**半开 `[fromMs, toMs)`** —— 创建毫秒 `t` 满足 `fromMs <= t < toMs` 的行才计
+ * (内存 / 文件腿 `t < fromMs || t >= toMs` 跳过;SQL 腿 `created_at >= ? AND created_at < ?`,列是毫秒精度)。上界**不含**。
+ * 路由 `/v1/usage/*` 的**缺省** `to` 取 `now + 1`(「到此刻为止,含此刻」是缺省值的定义,店不为它开特例);请求显式给的 `to` 原义不变(不含)。
  */
 /** store 侧 usageScan 的行投影(所有后端同形状;createdAtMs=epoch ms)。 */
 export interface UsageRow {