@sema-agent/server 7.145.0 → 7.147.0

package/dist/trace/self-minted-wire.js

@@ -156,6 +156,16 @@ export const SELF_MINTED_WIRE = {
             http: { attr: "-", since: "7.141.0" },
         },
     },
+    settingsContractHookEntryType: {
+        at: "GET /v1/capabilities settingsContract.hookEntryFields",
+        members: {
+            command: { attr: "-", since: "7.147.0" },
+            prompt: { attr: "-", since: "7.147.0" },
+            agent: { attr: "-", since: "7.147.0" },
+            http: { attr: "-", since: "7.147.0" },
+            mcp_tool: { attr: "-", since: "7.147.0" },
+        },
+    },
     credentialPlaneSandboxGitState: {
         at: "GET /v1/capabilities credentialPlane.sandboxGit.state",
         members: {
@@ -191,6 +201,15 @@ export const SELF_MINTED_WIRE = {
             direct_door_jwt: { attr: "-", since: "7.121.0" },
         },
     },
+    healthAuthKey: {
+        at: "GET /health auth",
+        members: {
+            required: { attr: "always", since: "7.121.0" },
+            kinds: { attr: "always", since: "7.121.0" },
+            identityAttach: { attr: "always", since: "7.121.0" },
+            serviceTokenActsForDeployment: { attr: "always (boolean: service credential configured ∧ SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT)", since: "7.146.0" },
+        },
+    },
     healthIdentityAttach: {
         at: "GET /health auth.identityAttach",
         members: {
@@ -234,17 +253,88 @@ export const SELF_MINTED_WIRE = {
             deploymentPackages: { attr: "present-iff deployment mod packages loaded at boot", since: "7.138.0" },
         },
     },
+    healthInflightBreakdownKey: {
+        at: "GET /health inflightBreakdown",
+        members: {
+            http: { attr: "always within inflightBreakdown", since: "7.146.0" },
+            leader: { attr: "always within inflightBreakdown", since: "7.146.0" },
+            backgroundAgents: { attr: "always within inflightBreakdown", since: "7.147.0" },
+            sessionResident: { attr: "always within inflightBreakdown", since: "7.146.0" },
+        },
+    },
     healthEngineLeaseKey: {
         at: "GET /health engineLease",
         members: {
             lingerMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
             tickMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
+            firstAttach: { attr: "present-iff engineLease present and the owned window is finite", since: "7.146.0" },
+            lane: { attr: "always within engineLease", since: "7.146.0" },
+            handover: { attr: "present-iff lane is handover", since: "7.146.0" },
+        },
+    },
+    healthEngineLeaseFirstAttachKey: {
+        at: "GET /health engineLease.firstAttach",
+        members: {
+            windowMs: { attr: "always within firstAttach", since: "7.146.0" },
+            since: { attr: "always within firstAttach (epoch ms)", since: "7.146.0" },
+            attachedAt: { attr: "epoch ms, null until the first non-probe request", since: "7.146.0" },
+        },
+    },
+    healthEngineLeaseHandoverKey: {
+        at: "GET /health engineLease.handover",
+        members: {
+            since: { attr: "always within handover (epoch ms)", since: "7.146.0" },
+            reason: { attr: "always within handover", since: "7.146.0" },
+            lingerMs: { attr: "always within handover", since: "7.146.0" },
+            backgroundShells: { attr: "always within handover (running shell rows the exit boundary would hard-kill now)", since: "7.146.0" },
+        },
+    },
+    engineLane: {
+        at: "engine lease lane(/health engineLease.lane · POST /v1/engine/handover|attach lane · exit-last.json lane)",
+        members: {
+            handover: { attr: "-", since: "7.146.0" },
+            orphan: { attr: "-", since: "7.146.0" },
+            awaitingFirstAttach: { attr: "-", since: "7.146.0" },
+            owned: { attr: "-", since: "7.146.0" },
+        },
+    },
+    engineHandoverReason: {
+        at: "POST /v1/engine/handover reason · /health engineLease.handover.reason",
+        members: {
+            background_exit: { attr: "-", since: "7.146.0" },
+        },
+    },
+    engineHandoverReplyKey: {
+        at: "POST /v1/engine/handover 200 体键(<键> → 在场律)",
+        members: {
+            lane: { attr: "always (handover)", since: "7.146.0" },
+            since: { attr: "always (epoch ms; the same value on a repeated handover)", since: "7.146.0" },
+            lingerMs: { attr: "always", since: "7.146.0" },
+            backgroundShells: { attr: "always", since: "7.146.0" },
+        },
+    },
+    engineAttachReplyKey: {
+        at: "POST /v1/engine/attach 200 体键(<键> → 在场律)",
+        members: {
+            lane: { attr: "always", since: "7.146.0" },
+            handedOverForMs: { attr: "present-iff this attach cleared a handover", since: "7.146.0" },
         },
     },
     modelsRowKey: {
         at: "GET /v1/models models[] 行键(<键> → 在场律)",
         members: {
             supportsThinkingOff: { attr: "always", since: "7.138.0" },
+            thinkingLevelMap: { attr: "present-iff declared", since: "7.147.0" },
+        },
+    },
+    modelsRowAnthropicCompatKey: {
+        at: "GET /v1/models models[].compat 键(anthropic-messages 行;<键> → 在场律)",
+        members: {
+            thinkingMode: { attr: "present-iff declared", since: "7.147.0" },
+            effortLevels: { attr: "present-iff declared non-empty", since: "7.147.0" },
+            supportsTemperature: { attr: "present-iff declared", since: "7.147.0" },
+            contextManagement: { attr: "present-iff declared", since: "7.147.0" },
+            interleavedThinking: { attr: "present-iff declared", since: "7.147.0" },
         },
     },
     sessionBackgroundRowKey: {
@@ -260,12 +350,55 @@ export const SELF_MINTED_WIRE = {
             unreadable: { attr: "present-iff the session head's leaf cannot be read (the file backend: the archive header is corrupt / truncated, or the archive cannot be read); the SQL backends never carry it; PATCH answers 500 for such a session before writing, so its 200 / 409 rows never carry it", since: "7.142.0" },
         },
     },
+    projectRowKey: {
+        at: "GET /v1/projects projects[] 行键 = GET /v1/projects/:id 200 体(<键> → 在场律)",
+        members: {
+            id: { attr: "always", since: "7.147.0" },
+            displayName: { attr: "always", since: "7.147.0" },
+            goal: { attr: "present-iff registered", since: "7.147.0" },
+            contextItems: { attr: "present-iff registered", since: "7.147.0" },
+            gitRemotes: { attr: "always", since: "7.147.0" },
+            defaultScopes: { attr: "always", since: "7.147.0" },
+            notes: { attr: "present-iff registered", since: "7.147.0" },
+            icon: { attr: "present-iff registered", since: "7.147.0" },
+            color: { attr: "present-iff registered", since: "7.147.0" },
+            registeredBy: { attr: "always", since: "7.147.0" },
+            registeredAt: { attr: "always", since: "7.147.0" },
+            archivedAt: { attr: "present-iff archived", since: "7.147.0" },
+        },
+    },
+    projectsListBodyKey: {
+        at: "GET /v1/projects 200 体顶层键(<键> → 在场律)",
+        members: {
+            projects: { attr: "always", since: "7.147.0" },
+        },
+    },
+    sessionViewKey: {
+        at: "GET /v1/sessions/:id 体顶层键(本版新出现;<键> → 在场律)",
+        members: {
+            projectId: { attr: "present-iff the session row's last own workspace_changed frame carried a project", since: "7.147.0" },
+        },
+    },
     sessionsListRowUnreadableKey: {
         at: "GET /v1/sessions sessions[].unreadable 键(<键> → 在场律)",
         members: {
             errorCode: { attr: "always; the errorCode GET /v1/sessions/:id answers for the same session (corrupt_session | internal.error today)", since: "7.142.0" },
         },
     },
+    inboxPayloadTruncatedFrame: {
+        at: "停驻补投帧(下一次开流 drain)键(<帧>#<键> → 在场律)",
+        members: {
+            "task_notification#payloadTruncated": { attr: "present-iff the parked entry's payload exceeded the inbox byte budget (minimal form)", since: "7.147.0" },
+            "workflow_complete#payloadTruncated": { attr: "present-iff the parked entry's payload exceeded the inbox byte budget (minimal form)", since: "7.147.0" },
+        },
+    },
+    inboxPayloadTruncatedKey: {
+        at: "停驻补投帧 payloadTruncated 的键",
+        members: {
+            droppedKeys: { attr: "always", since: "7.147.0" },
+            bytes: { attr: "always", since: "7.147.0" },
+        },
+    },
     toolEndGateDispositionKey: {
         at: "tool_end gate.disposition 键(<臂>#<键> → 在场律)",
         members: {
@@ -353,13 +486,25 @@ export const SELF_MINTED_WIRE = {
             not_object: { attr: "-", since: "7.133.0" },
         },
     },
+    rateExceededReason: {
+        at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)",
+        members: {
+            run_concurrency_cap: { attr: "-", since: "7.146.0" },
+        },
+    },
+    settingsEnvCredentialMatch: {
+        at: "400 request.env_credential_refused entries[].match(settings.env 里被判成凭据的条目;续跑口 409 resume_blocked_by_policy 同一组机读位)",
+        members: {
+            name: { attr: "-", since: "7.146.0" },
+            value_shape: { attr: "-", since: "7.146.0" },
+        },
+    },
     inheritEnvRefusalReason: {
-        at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道 / 无会话三只拒;另带 field: \"inheritEnv\")",
+        at: "400 request.field_invalid reason(inheritEnv 的值形 / 车道两类拒;另带 field: \"inheritEnv\")",
         members: {
             unknown_word: { attr: "-", since: "7.137.0" },
             not_a_string: { attr: "-", since: "7.137.0" },
             lane_not_host: { attr: "-", since: "7.137.0" },
-            no_authorizer_session: { attr: "-", since: "7.137.0" },
         },
     },
     projectBundleInvalidReason: {
@@ -607,6 +752,7 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/sessions/:id/fork#stamped_archive(DB_BACKEND=local;源存档仍带更早版本写下的属主戳;零写;体 conflict.session_archive_stamped + 带戳存档的固定句)": { attr: 409, since: "7.144.0" },
             "POST /v1/sessions/:id/sync/import/:stagingId/entries#stamped_archive(DB_BACKEND=local;提交落在仍带属主戳的存档上,改日志的各形推送同答;行净零写;体 conflict.session_archive_stamped + 带戳存档的固定句)": { attr: 409, since: "7.144.0" },
             "POST /v1/sessions/:id/sync/import#stamped_archive(DB_BACKEND=local;第一阶段按 id 分类出 fork / stale 且没带同意,目的端存档仍带属主戳;不开暂存、不拿租约、不写存档;体 conflict.session_archive_stamped + 带戳存档的固定句,不带 relation)": { attr: 409, since: "7.145.0" },
+            "POST /v1/sessions/:id/sync/plan#stamped_archive(DB_BACKEND=local;干跑按 id 分类出 fork / stale,目的端存档仍带属主戳;此刻读,不开暂存、不拿租约、不写存档;体 conflict.session_archive_stamped + 带戳存档的固定句,不带 relation)": { attr: 409, since: "7.147.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)": { attr: 400, since: "7.136.0" },
@@ -664,7 +810,18 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/capabilities/mcp#engine_name_collision(中心声明两台归一后同挂一个工具命名空间前缀,引擎在任何传输被触碰之前整集拒;体 config.mcp_server_name_collision + 引擎原句;与同步提交腿同一张码 → 状态表)": { attr: 409, since: "7.143.0" },
             "POST /v1/tasks#engine_name_collision(同步腿;同一份声明集被引擎整集拒;零工作的拒;体 config.mcp_server_name_collision)": { attr: 409, since: "7.143.0" },
             "POST /v1/rules/local-import/prepare#tightening_write_failed(一条收下的 deny / ask 写不进店;这一批的放行扣下、没有票;体 state.rule_write_failed + committed,同 POST /v1/rules)": { attr: 503, since: "7.143.0" },
-            "POST /v1/rules/cc-import/redeem#member_refused(兑付走完、引擎的完整成员表里有被拒的成员;体 = 回执 { members, rev },那几行 outcome indeterminate + reason store_refused + detail 引擎原话;票用掉,同票再兑 404)": { attr: 200, since: "7.145.0" },
+            "POST /v1/rules/cc-import/prepare|POST /v1/rules/local-import/prepare#record_store_refused(审批记录店建这次导入的记录失败,引擎答店拒臂;没有票、没有放行落店 —— local-import 这一批收下的 deny / ask 可能已当场落店;体 state.rule_write_failed + committed;重发同一请求即重铸)": { attr: 503, since: "7.147.0" },
+            "POST /v1/rules/cc-import/redeem#member_refused(兑付走完、引擎的完整成员表里有被拒的成员;体 = 回执 { members, rev },那几行 outcome refused(引擎答 committed no;7.145.0 为 indeterminate + store_refused)+ reason = 引擎拒因码(RuleRefusalCode)+ detail 引擎原话;票用掉,同票再兑 404)": { attr: 200, since: "7.145.0" },
+            "POST /v1/rules/cc-import/redeem|POST /v1/rules/local-import/redeem#member_outcome_unknown(兑付走完、引擎的完整成员表里有一员答 committed unknown:写抛 / 读回读不出 / 记 dot 的 CAS 或 dot 分配失败;不落定,认领放回;体 state.rule_import_retry + retryAfterSec;同票重来即重走)": { attr: 503, since: "7.146.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 带凭据条目(名字是本引擎的凭据变量 / 值是秘密形;新提交;体 request.env_credential_refused + field settings.env + entries[{ key, match }],值不回显)": { attr: 400, since: "7.146.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#sessionId 是本进程删过的会话 id、根会话行上的住客不是删前属主(新提交;授权口登记之后、执行上下文解析器步 ①;体 conflict.session_id_retired,不回显 id / 属主)": { attr: 409, since: "7.146.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#根会话 id 是本进程删过的会话 id、行上的住客不是删前属主(续跑家族 / 停驻赎回 / 工作流决断后的宿主新轮;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy conflict.session_id_retired + retriable)": { attr: 409, since: "7.146.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#scenario_assignment_unavailable(新提交;部署接了配置中心、请求带主体,而中心答不出这位主体的场景裁定:不可达 / 超时 / 答复读不出 / 指派两键形不对或只发一键;点名与不点名同拒;零 run;体 state.scenario_assignment_unavailable + permanence: transient,无 detail)": { attr: 503, since: "7.147.0" },
+            "GET /v1/capabilities/mcp|/v1/sessions/:id/a2a#scenario_assignment_unavailable(与提交腿同一只场景门;缺席与点名的场景名同拒;整面;体同上)": { attr: 503, since: "7.147.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#scenario_assignment_unavailable(续跑家族经装配的那几条;认领之前,卡仍待决;不折 resume_blocked_by_policy;体 state.scenario_assignment_unavailable + permanence: transient + retriable)": { attr: 503, since: "7.147.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
+            "POST /v1/runs/:id/steer#stored_unread_members(run 已终态、铸唤醒卡之前;同一只判;不铸卡;体 resume_blocked_by_policy + blockedBy request.field_invalid + field,不带 retriable)": { attr: 409, since: "7.147.0" },
         },
     },
     ruleImportReceiptKey: {
@@ -673,17 +830,14 @@ export const SELF_MINTED_WIRE = {
             members: { attr: "always", since: "7.145.0" },
             rev: { attr: "always", since: "7.145.0" },
         },
-        retired: {
-            "result(≤7.144.0 的 cc-import 回执:{ members: <引擎 RedeemedBatchMember 原形行:candidateIndex / behavior / rule / scope 对象 / status / alreadyRedeemed / dot>, rev })": { attr: "always", since: "7.46.0", until: "7.145.0" },
-        },
     },
     ruleImportReceiptMemberKey: {
         at: "POST /v1/rules/cc-import/redeem 200 回执 members[] 行键(<键> → 在场律;与 POST /v1/rules/local-import/redeem 同形)",
         members: {
             key: { attr: "always; { behavior, rule, scope } — scope is the GET /v1/rules discriminated string (global | project:<root>)", since: "7.145.0" },
-            outcome: { attr: "always; persisted | no-op | indeterminate (refused reserved for a typed engine verdict bit, not minted)", since: "7.145.0" },
-            reason: { attr: "present-iff outcome indeterminate; store_refused", since: "7.145.0" },
-            detail: { attr: "present-iff outcome indeterminate; the engine's refusal sentence verbatim", since: "7.145.0" },
+            outcome: { attr: "always; persisted | no-op | refused (engine refusal, committed no) | indeterminate (engine refusal, committed unknown; 7.145.0 minted every engine refusal as indeterminate)", since: "7.145.0" },
+            reason: { attr: "present-iff outcome refused | indeterminate; the engine's RuleRefusalCode verbatim (7.145.0: the one word store_refused)", since: "7.145.0" },
+            detail: { attr: "present-iff outcome refused | indeterminate; the engine's refusal sentence verbatim", since: "7.145.0" },
         },
     },
     memoryLayerSeatKey: {
@@ -699,6 +853,8 @@ export const SELF_MINTED_WIRE = {
         at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)",
         members: {
             memorySync: { attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)", since: "7.141.0" },
+            writeHome: { attr: "present-iff the engine answered it ∧ the single-user host lane (the capability bit projectContext's range predicate: hosted / sandbox / device / no-hands lanes ⇒ absent);the engine's absolute directory, byte for byte;with ?scope= that store's engine answer;without ?scope= the session-level home the engine chose across the stores (the newest store's own home;absent while any store's reading is unreadable, on a same-instant tie, or when no store names one)", since: "7.146.0" },
+            planes: { attr: "present-iff no ?scope= ∧ the single-user host lane (same predicate as writeHome);[{plane:\"project\"|\"personal\", writeHome?}] one row per store in the engine's store order, each row the engine's own answer for that store (writeHome verbatim, absent when that store names none);the rows' other keys are not on the wire", since: "7.146.0" },
         },
     },
     memorySyncWayOut: {
@@ -732,6 +888,48 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#reason": { attr: "always;closed set sessionMemoryUnobservedReason, judged in read order (no settled run → the latest settled run's observation gives no read set: empty observation or memory not mounted → no leaf);the message is a function of reason", since: "7.143.0" },
         },
     },
+    sessionRewindFilesWire: {
+        at: "POST /v1/sessions/:id/rewind-files(<面>#<键> → 读法 / 在场律)",
+        members: {
+            "body#to": { attr: "required;a rewind handle this server minted (a prompt's taskId or a message's eventId), 1..255 chars;translated by the same anchor reader as the submit body's rewindFilesTo;unknown ⇒ 404 rewind_files_to.unknown_event", since: "7.147.0" },
+            "body#dryRun": { attr: "optional boolean;true ⇒ preview only, no file written;any other key ⇒ 400 request.body_shape", since: "7.147.0" },
+            "body#acceptPartialRestore": { attr: "not accepted ⇒ 400 request.body_shape (the engine's out-of-run rewind has no partial-restore policy; a partial restore answers 200 with restore.outcome partial)", since: "7.147.0" },
+            "200#dryRun": { attr: "always;the engine RewindFilesResult discriminant verbatim", since: "7.147.0" },
+            "200#preview": { attr: "present-iff dryRun true;engine FileHistoryDiffStats verbatim, or null when the store gives no stats (null is not zero stats)", since: "7.147.0" },
+            "200#restore": { attr: "present-iff dryRun false;engine restore ledger (outcome complete | partial, filesChanged, identicalSkipped, refused[], failed[], modeNotPreserved?, error?), path and reason leaves redacted;error = { errorCode, message, permanence? } (the engine member code is spelled errorCode on the wire)", since: "7.147.0" },
+            "409 conflict.session_active_run#activeTaskId": { attr: "always on this face;the run holding the session's durable claim (the message names it too)", since: "7.147.0" },
+        },
+    },
+    adoptionImportOutcome: {
+        at: "POST /v1/adoption/:id/sessions 200 results[].outcome",
+        members: {
+            imported: { attr: "-", since: "7.146.0" },
+            already_imported: { attr: "-", since: "7.146.0" },
+            rejected: { attr: "-", since: "7.146.0" },
+        },
+    },
+    adoptionImportRejectCode: {
+        at: "POST /v1/adoption/:id/sessions 200 results[].code(present-iff outcome rejected)",
+        members: {
+            too_large: { attr: "count = the envelope's JSON byte length;cap = maxSessionBytes at the time", since: "7.146.0" },
+            invalid_envelope: { attr: "detail = a fixed sentence (envelope shape, or which import invariant failed);clientSessionId present-iff readable", since: "7.146.0" },
+            duplicate_client_session_id: { attr: "an earlier element of the same batch used this clientSessionId (whatever its own outcome)", since: "7.146.0" },
+        },
+    },
+    adoptionImportWire: {
+        at: "POST /v1/adoption/:id/sessions(<面>#<键> → 读法 / 在场律)",
+        members: {
+            "body#sessions": { attr: "required;the only key;array of envelopes;length > adoptionImport.maxSessions ⇒ 400 request.field_invalid (field sessions, reason over_cap)", since: "7.146.0" },
+            "body.sessions[]#clientSessionId": { attr: "required;string 1-255 chars;idempotency key with the adoption id", since: "7.146.0" },
+            "body.sessions[]#entries": { attr: "required;array of session entries oldest first;the only other key (any extra key ⇒ that element invalid_envelope)", since: "7.146.0" },
+            "200#results": { attr: "always;one per element, same order", since: "7.146.0" },
+            "200.results[]#clientSessionId": { attr: "always except invalid_envelope on an unreadable envelope", since: "7.146.0" },
+            "200.results[]#sessionId": { attr: "present-iff imported | already_imported;the cloud session id derived from (adoptionId, clientSessionId)", since: "7.146.0" },
+            "200.results[]#count": { attr: "present-iff code too_large", since: "7.146.0" },
+            "200.results[]#cap": { attr: "present-iff code too_large", since: "7.146.0" },
+            "200.results[]#detail": { attr: "present-iff code invalid_envelope", since: "7.146.0" },
+        },
+    },
     centralMemorySyncWire: {
         at: "POST /v2/memory/sync/:scope(<面>#<键> → 读法 / 在场律)",
         members: {
@@ -761,6 +959,8 @@ export const SELF_MINTED_WIRE = {
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
+            "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
+            "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -797,6 +997,8 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#run_result_missing|run_result_unobserved": { attr: "the latest settled run in this session has no memory observation on record, and an earlier run is never read in its place — run another task in this session (…), then sync", since: "7.143.0" },
             "409 conflict.session_memory_unobserved#memory_not_mounted": { attr: "memory was configured for the latest settled run in this session but did not mount, so which memory this session reads is unknown, and an earlier run is never read in its place — run another task in this session (…), then sync", since: "7.143.0" },
             "409 conflict.session_memory_unobserved#no_leaf": { attr: "this session has no transcript yet, so there is no revision to sync from — run a task in it (…), then sync", since: "7.143.0" },
+            "400 request.field_invalid#unread_request_members(新提交:settings.env 有成员不是帽内的串;嵌入方直调装配时四座同句)": { attr: "this request carries a member|members this server version's readers cannot take as written, on a deployment that would apply it|them: <坐标,至多 8 处>[ (and <n> more)] — running it would silently leave that member|those members out (a hook that guards a tool, an MCP server's credentials); submit it again with this member|these members in the current form", since: "7.147.0" },
+            "409 resume_blocked_by_policy#unread_members(续跑四门 · steer 铸唤醒卡之前)": { attr: "resume blocked by an admission policy change: <同上一句>", since: "7.147.0" },
         },
     },
     decisionBodyKey: {
@@ -866,6 +1068,8 @@ export const SELF_MINTED_WIRE = {
         members: {
             SEALED_KEY_DIR: { attr: "store", since: "7.136.0" },
             MEMORY_SYNC_SERVE_IDENTITY: { attr: "memory", since: "7.142.0" },
+            DEVICE_TRUSTED_PROXY_CIDRS: { attr: "orchestration", since: "7.146.0" },
+            SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT: { attr: "auth", since: "7.146.0" },
         },
     },
     deviceProtocolRevision: {
@@ -953,6 +1157,8 @@ export const SELF_MINTED_WIRE = {
             "SSE text_delta#delta(文字段的状态跨文字块)": { attr: "segment-scoped-redactor-state;text_end=block-delivery-not-segment-close;block-end-as-ended-vs-whole-differs=live-as-ended+ledger-whole+hold-diverged+1", since: "7.144.0" },
             "SSE text_end#content(接在同段前缀之后判)": { attr: "engine-block-content;judged-after-segment-prefix", since: "7.144.0" },
             "GET /v1/runs/:id/events#text.text(段文本含只有 text_end 的块)": { attr: "segment-text=block-texts-concat;end-only-block=text_end.content", since: "7.144.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/assistant/tasks/:id/plan_review|/v1/assistant/tasks/:id/resume|/v1/sessions/:id/wake#errorCode(引擎拒 checkpoint.invalid_outcome)": { attr: "decision-cause⇒cause-code;row-own(reason)|no-cause⇒checkpoint.invalid_outcome", since: "7.147.0" },
+            "POST /v1/approvals/:sessionId/decide#errorCode(这一行自己的拒:读行臂 / 门型守卫之前)": { attr: "rowVerdict.code+reason+retriable:true(engine-judge;before-gate)", since: "7.147.0" },
         },
     },
 };

package/dist/trace/sema-provenance.d.ts

@@ -1,45 +1,49 @@
 /**
- * [ref](a)(core 7.2.0 / [ref] 片6 d1):`task_notification` 帧上 `_sema_provenance` typed 归因侧记的
- * **单点**投影判据——live 三腿(`trace/project.ts` 的 `taskNotificationEventData`)与 park 半场
- * (`orchestration/workflow-completion-inbox.ts` 的 `taskNotificationInboxEntry`)共用,两腿字节同判。
+ * [ref](a)(core 7.2.0 / [ref] 片6 d1)· [ref](会话箱车道三 lane 同批翻):`task_notification` 帧上 `_sema_provenance` typed 归因侧记的
+ * **单点**投影判据 —— live 三腿(`trace/project.ts` 的 `taskNotificationEventData`)与 park 半场
+ * (`orchestration/workflow-completion-inbox.ts` 的 `taskNotificationInboxEntry`)共用,两腿同判(park 腿的 drain 直接 spread extras 成帧、
+ * 不再经 project.ts,判据必须在入库前做,而且只能有一份)。一只 wire 键一个判据文件:同帧三只会话箱载体在 `task-notification-facets.ts`。
  *
- * `kind` 是**闭集**——wire 上只许出现 core 词表里的 lane 词。两向锚([ref]/[ref] 同纪律,与
- * routes/notify-wake.ts 的 `NOTIFY_STATUSES` 同形):`satisfies` 保「表内无词表外的词」(core 删/改词 ⇒ 编译红),
- * 穷举断言保「词表无表外的词」(core 加 lane ⇒ 编译红,新词必须由人处置——它是 cli 渲染判别键,静默透传一个
- * 未知 lane 等于替 core 声明一种渲染形)。运行期闭集外的值(上游漂了 / 载荷被改过)⇒ **丢整键**,与 `priority`
- * 的闭集守卫(`trace/injection-tier.ts`)同判:消费端退回老形卡,不按未知 lane 猜;`agentMessage` 不受牵连
- * (它是渲染判别,不是 lane 词)。
+ * 规则与那三只载体同一条:逐成员挑(绝不 spread)、在场才带、**在场却读不出 ⇒ 整键丢并计一次**(`dropProjectedFace`,NP-5)、缺席不计;
+ * 身份 / 地址 / 闭集词 / 计数 / 时刻逐字,展示 / 自由文本成员经出口座(座由腿给:{@link FrameTextSeat})。
+ *  · `kind` —— **闭集**:wire 上只许出现 core 词表里的 lane 词。两向锚([ref]/[ref] 同纪律):`satisfies` 保「表内无词表外的词」(core 删 / 改词
+ *    ⇒ 编译红),穷举断言保「词表无表外的词」(core 加 lane ⇒ 编译红 —— 新词必须由人处置:它是渲染判别键,静默透传一个未知 lane 等于替 core 声明一种
+ *    渲染形)。运行期词表外的值(上游漂了 / 载荷被改过)⇒ 整键丢并计一次,消费端退回老形卡;同帧载体不受牵连(它们是渲染判别,不是 lane 词)。
+ *  · `from` / `taskId` / `seq` 必需,`agentType` 可选(本 mount 的 agent_message lane 恒缺席,在场即逐字)。
+ *  · `peerMeta` —— 两种箱记录 lane 上 store 记录的 typed peer 元数据(core:「the store record's typed peer metadata, verbatim (authority; a notice
+ *    frame's `peerMeta.notice` is the typed notice, its carrier holds only the rendered line)」)。逐成员:`fromSession` / `fromRoot` / `fromScope`
+ *    身份 / 寻址串逐字;`fromMode` / `kind` 闭集取 core 导出的 `MAILBOX_PEER_FROM_MODES` / `MAILBOX_PEER_RECORD_KINDS`(不手抄,[ref]);`urgent` 布尔;
+ *    `notice` 见下。**`senderKey` / `gateReceiptId` / `occupant` / `fromOccupant` 不读不投**(登记在 `wire-projection-faces.ts` 的
+ *    `task_notification_peer_meta` 行,一条律:凭据 / 身份令牌类 —— 准入闸的发信方键、跨主体投递闸的回执号、收发两方会话的化身令牌;
+ *    与顶层 `peer.senderKey` 同律,安全轴 fail-closed)。
+ *  · `peerMeta.notice` —— 回执 / idle 通告的 typed 正体:`state` 必需、**开集串逐字**(core 型 `string`;新词原样过境,kind↔state 的配对是 drain 的判,
+ *    本服务不复判);`refSeq` / `finishedAt` 非负有限数(与 core 存储校验同界);`recipient` / `target`(展示标签)、`detail`(目标会话的那一行)、
+ *    `dropReason` 是别处来的文本 ⇒ 经座。
+ * 不跨成员判(哪个 lane 带 `peerMeta`、哪个 lane 配哪只载体):那是产生者的律,core 在铸点守;本服务只判每个成员自己的形。
  */
-import type { SemaProvenance } from "@sema-agent/core";
-/** wire 放行的 lane 词(PROJECTED)。 */
-export declare const SEMA_PROVENANCE_KINDS: readonly ["agent_message"];
-/**
- * 有意**不**放行的 lane 词(EXCLUDED,逐词记账;运行期落到「丢整键」臂 —— 与闭集外的未知词同臂,但这里的词是
- * core 词表**内**的、经人裁定不上 wire 的):
- *  · `cross_session_message` —— core fc52b4d4 [ref] §4.1(session-box drain 铸;`from` 是对端**地址**、`peerMeta`
- *    携 typed peer 记录)。🔴 **7.91.0 订正**:`RunnerDeps.peerDirectory` 座已接线([ref])⇒ 「本仓不可达」那半句作废,
- *    有席的部署上这个 lane 词真的会被铸出来;仍不放行的理由只剩**注入帧渲染形候 [ref] @server③ 表态**。
- *    与 core-keyset-guard.ts ① 的 `crossSessionMessage` / ①-nested 的 `peerMeta` 同批同判,表态之后三处同翻。
- *  · `cross_session_notice` —— core 7.4.0 [ref] §4.4/§5.2(片4;本闭集 2026-09-05 真红出它)。**同一条车道的
- *    第二个载体**,不是新判据:同一个 session-box drain 铸(`agents/peer-session-drain.js` 的 notice 臂),同一个
- *    `RunnerDeps.peerDirectory` 座前提(同样自 7.91.0 起在场);渲染形与它的载体 `crossSessionNotice`
- *    (core-keyset-guard.ts ① 的同名排除键)一同候 [ref] 表态。放进 EXCLUDED 而不是 PROJECTED,是**沿用**上一行的
- *    裁定而不是新增特判:表态未出前放行一个 lane 词,等于替它预先声明一种 cli 渲染形。表态落定那天三处(本簿、
- *    载体键、①-nested 的 `peerMeta`)同批翻。
- *  · `inbox_notice` —— core 7.30.0 [ref]([ref] 提货;本闭集当拍真红出它)。**同一条车道的第三个载体**(收件箱通告,
- *    `crossSessionMessage` / `crossSessionNotice` 之后),同一个 session-box drain 铸;载体键 `inboxNotice` 在
- *    core-keyset-guard.ts ① 同批进 EXCLUDED。沿用上两行的裁定,不是新判据:[ref] 表态落定那天四处同批翻。
- */
-export declare const SEMA_PROVENANCE_KINDS_EXCLUDED: readonly ["cross_session_message", "cross_session_notice", "inbox_notice"];
-/** 本仓两条腿入参的**形**(不是 core 类型:入参是运行期载荷,`kind` 先当 string 收、经闭集才成 typed)。 */
-export interface SemaProvenanceInput {
-    kind: string;
-    from: string;
-    taskId: string;
-    seq: number;
-    agentType?: string;
-}
-/** 逐成员挑取(绝不 spread —— core 给侧记加成员时必须经 keyset 门处置,见 `trace/core-keyset-guard.ts` ①);
- *  返回 undefined = 闭集外 / 形不合 ⇒ 调用方丢整键。`agentType` 缺席不编(本 mount 恒缺席,在场即透传)。 */
-export declare function semaProvenanceOrAbsent(p: SemaProvenanceInput): SemaProvenance | undefined;
+import { type MailboxPeerMeta, type MailboxPeerNoticeMeta, type SemaProvenance } from "@sema-agent/core";
+import { type SafeText } from "./exit-seat.js";
+import { type FaceExcluded, type FrameTextSeat } from "./task-notification-facets.js";
+/** wire 放行的 lane 词 = core 词表全员(会话箱车道三词自 [ref] 起与 `agent_message` 同簿;不再有「有意不放行」的第二簿)。 */
+export declare const SEMA_PROVENANCE_KINDS: readonly ["agent_message", "cross_session_message", "cross_session_notice", "inbox_notice"];
+type NoticeText = "recipient" | "dropReason" | "detail" | "target";
+/** `peerMeta.notice` 的 wire 形:core 型减登记表排除;展示 / 自由文本成员是出口座铸的 {@link SafeText}。 */
+export type PeerNoticeWire = Omit<MailboxPeerNoticeMeta, NoticeText | FaceExcluded<"task_notification_peer_notice">> & {
+    [K in Exclude<NoticeText, FaceExcluded<"task_notification_peer_notice">>]?: SafeText;
+};
+/** `peerMeta` 的 wire 形:core 型减登记表排除(`senderKey` / `gateReceiptId` / `occupant` / `fromOccupant`)。 */
+export type PeerMetaWire = Omit<MailboxPeerMeta, "notice" | FaceExcluded<"task_notification_peer_meta">> & {
+    notice?: PeerNoticeWire;
+};
+/** 侧记的 wire 形:core 型减登记表排除(今天零排除)。 */
+export type SemaProvenanceWire = Omit<SemaProvenance, "peerMeta" | FaceExcluded<"task_notification_provenance">> & {
+    peerMeta?: PeerMetaWire;
+};
+/** `_sema_provenance` 这一只键(在场才铸;读不出 ⇒ 整键丢并计一次)。两腿入参的形不是 core 类型:运行期载荷先当 `unknown` 收、判过形才成 typed。 */
+export declare function semaProvenanceFields(n: {
+    _sema_provenance?: unknown;
+}, seat: FrameTextSeat): {
+    _sema_provenance?: SemaProvenanceWire;
+};
+export {};
 //# sourceMappingURL=sema-provenance.d.ts.map

package/dist/trace/sema-provenance.js

@@ -1,14 +1,85 @@
-export const SEMA_PROVENANCE_KINDS = ["agent_message"];
-export const SEMA_PROVENANCE_KINDS_EXCLUDED = ["cross_session_message", "cross_session_notice", "inbox_notice"];
+import { MAILBOX_PEER_FROM_MODES, MAILBOX_PEER_RECORD_KINDS } from "@sema-agent/core";
+import { seatText } from "./exit-seat.js";
+import { dropProjectedFace } from "./projection-drop.js";
+import { isPlainObject, isString, memberOf, optional, settle } from "./task-notification-facets.js";
+export const SEMA_PROVENANCE_KINDS = ["agent_message", "cross_session_message", "cross_session_notice", "inbox_notice"];
 const _semaProvenanceExhaustive = true;
 void _semaProvenanceExhaustive;
-const _semaProvenanceNoDoubleBook = true;
-void _semaProvenanceNoDoubleBook;
-export function semaProvenanceOrAbsent(p) {
-    if (!SEMA_PROVENANCE_KINDS.includes(p.kind))
-        return undefined;
-    if (typeof p.from !== "string" || typeof p.taskId !== "string" || typeof p.seq !== "number")
-        return undefined;
-    return { kind: p.kind, from: p.from, taskId: p.taskId, seq: p.seq, ...(typeof p.agentType === "string" ? { agentType: p.agentType } : {}) };
+const isKind = memberOf(SEMA_PROVENANCE_KINDS);
+const optString = optional(isString);
+const optFromMode = optional(memberOf(MAILBOX_PEER_FROM_MODES));
+const optRecordKind = optional(memberOf(MAILBOX_PEER_RECORD_KINDS));
+const optBoolean = optional((v) => typeof v === "boolean");
+const optInstant = optional((v) => typeof v === "number" && Number.isFinite(v) && v >= 0);
+export function semaProvenanceFields(n, seat) {
+    if (n._sema_provenance === undefined)
+        return {};
+    const p = settle(provenanceOf(n._sema_provenance, seat), (why) => dropProjectedFace("task_notification._sema_provenance " + why));
+    return p !== undefined ? { _sema_provenance: p } : {};
+}
+function provenanceOf(raw, seat) {
+    if (!isPlainObject(raw))
+        return { why: "is not a plain-data record" };
+    const { kind, from, taskId, seq, agentType, peerMeta } = raw;
+    if (!isKind(kind))
+        return { why: "kind is outside the core lane vocabulary" };
+    if (!isString(from) || !isString(taskId) || typeof seq !== "number")
+        return { why: "is missing a string from / taskId or a number seq" };
+    if (!optString(agentType))
+        return { why: "agentType is present but not a string" };
+    const meta = peerMeta === undefined ? undefined : peerMetaOf(peerMeta, seat);
+    if (meta !== undefined && "why" in meta)
+        return { why: `peerMeta ${meta.why}` };
+    return { wire: { kind, from, taskId, seq, ...(agentType !== undefined ? { agentType } : {}), ...(meta !== undefined ? { peerMeta: meta.wire } : {}) } };
+}
+function peerMetaOf(raw, seat) {
+    if (!isPlainObject(raw))
+        return { why: "is not a plain-data record" };
+    const { fromSession, fromRoot, fromMode, kind, fromScope, notice, urgent } = raw;
+    if (!optString(fromSession) || !optString(fromRoot) || !optString(fromScope)) {
+        return { why: "has a present fromSession / fromRoot / fromScope that is not a string" };
+    }
+    if (!optFromMode(fromMode))
+        return { why: "fromMode is outside core MAILBOX_PEER_FROM_MODES" };
+    if (!optRecordKind(kind))
+        return { why: "kind is outside core MAILBOX_PEER_RECORD_KINDS" };
+    if (!optBoolean(urgent))
+        return { why: "urgent is present but not a boolean" };
+    const typed = notice === undefined ? undefined : noticeOf(notice, seat);
+    if (typed !== undefined && "why" in typed)
+        return { why: `notice ${typed.why}` };
+    return {
+        wire: {
+            ...(fromSession !== undefined ? { fromSession } : {}),
+            ...(fromRoot !== undefined ? { fromRoot } : {}),
+            ...(fromMode !== undefined ? { fromMode } : {}),
+            ...(kind !== undefined ? { kind } : {}),
+            ...(fromScope !== undefined ? { fromScope } : {}),
+            ...(typed !== undefined ? { notice: typed.wire } : {}),
+            ...(urgent !== undefined ? { urgent } : {}),
+        },
+    };
+}
+function noticeOf(raw, seat) {
+    if (!isPlainObject(raw))
+        return { why: "is not a plain-data record" };
+    const { state, refSeq, recipient, dropReason, finishedAt, detail, target } = raw;
+    if (!isString(state))
+        return { why: "is missing a string state" };
+    if (!optInstant(refSeq) || !optInstant(finishedAt))
+        return { why: "has a present refSeq / finishedAt that is not a non-negative finite number" };
+    if (!optString(recipient) || !optString(dropReason) || !optString(detail) || !optString(target))
+        return { why: "has a present recipient / dropReason / detail / target that is not a string" };
+    return {
+        wire: {
+            state,
+            ...(refSeq !== undefined ? { refSeq } : {}),
+            ...(recipient !== undefined ? { recipient: seatText(seat, recipient) } : {}),
+            ...(dropReason !== undefined ? { dropReason: seatText(seat, dropReason) } : {}),
+            ...(finishedAt !== undefined ? { finishedAt } : {}),
+            ...(detail !== undefined ? { detail: seatText(seat, detail) } : {}),
+            ...(target !== undefined ? { target: seatText(seat, target) } : {}),
+        },
+    };
 }
 //# sourceMappingURL=sema-provenance.js.map