@sema-agent/server 7.147.0 → 7.148.0

package/dist/trace/self-minted-wire.js

@@ -33,6 +33,17 @@ export const SELF_MINTED_WIRE = {
             client_disconnected: { attr: "-", since: "7.112.0" },
             ask_park_grace_exhausted: { attr: "-", since: "7.112.0" },
             cancel_verb: { attr: "-", since: "7.112.0" },
+            stall_verdict: { attr: "-", since: "7.148.0" },
+        },
+    },
+    runStallVerdictFace: {
+        at: "run 流死亡终帧键 · 会话占用冲突体键",
+        members: {
+            "GET /v1/runs/:id/events#failed.errorCode(死亡判决的终帧从行合成时恒在场 = 行上的码 run.stalled / run.orphaned;本连接已投账本终帧则不合成)": { attr: "verdict", since: "7.148.0" },
+        },
+        retired: {
+            "409 conflict.session_active_run#stale(只为 true 时在场)": { attr: "true-only", since: "7.37.0", until: "7.148.0" },
+            "POST /v1/tasks/stream done.result(conflict.session_active_run)#stale(只为 true 时在场)": { attr: "true-only", since: "7.37.0", until: "7.148.0" },
         },
     },
     sessionMemoryEraseStatus: {
@@ -46,6 +57,7 @@ export const SELF_MINTED_WIRE = {
             "memory.erasure_selector_mismatch": { attr: 409, since: "7.108.0" },
             "memory.erasure_census_incomplete": { attr: 409, since: "7.108.0" },
             "internal.memory_control_plane_corrupt": { attr: 500, since: "7.108.0" },
+            "request.memory_layer": { attr: 400, revises: ["errorCode:internal.error"], since: "7.148.0" },
         },
     },
     askTerminalReason: {
@@ -262,6 +274,38 @@ export const SELF_MINTED_WIRE = {
             sessionResident: { attr: "always within inflightBreakdown", since: "7.146.0" },
         },
     },
+    healthSandboxCapacityKey: {
+        at: "GET /health sandboxCapacity",
+        members: {
+            lane: { attr: "always within sandboxCapacity", since: "7.148.0" },
+            limit: { attr: "always within sandboxCapacity", since: "7.148.0" },
+            inUse: { attr: "always within sandboxCapacity (null until a successful daemon reading)", since: "7.148.0" },
+            readAt: { attr: "always within sandboxCapacity (null until the first daemon reading)", since: "7.148.0" },
+            waiting: { attr: "always within sandboxCapacity", since: "7.148.0" },
+        },
+    },
+    healthStoreKey: {
+        at: "GET /health store",
+        members: {
+            durability: { attr: "always", since: "7.148.0" },
+        },
+    },
+    storeDurability: {
+        at: "GET /health store.durability · GET /v1/capabilities store.durability",
+        members: {
+            durable: { attr: "-", since: "7.148.0" },
+            ephemeral: { attr: "-", since: "7.148.0" },
+            unknown: { attr: "-", since: "7.148.0" },
+        },
+    },
+    healthAutoBackgroundOnTimeout: {
+        at: "GET /health autoBackgroundOnTimeout",
+        members: {
+            armed: { attr: "-", since: "7.148.0" },
+            off: { attr: "-", since: "7.148.0" },
+            unsupported: { attr: "-", since: "7.148.0" },
+        },
+    },
     healthEngineLeaseKey: {
         at: "GET /health engineLease",
         members: {
@@ -325,6 +369,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             supportsThinkingOff: { attr: "always", since: "7.138.0" },
             thinkingLevelMap: { attr: "present-iff declared", since: "7.147.0" },
+            defaultThinking: { attr: "present-iff declared", since: "7.148.0" },
         },
     },
     modelsRowAnthropicCompatKey: {
@@ -443,25 +488,37 @@ export const SELF_MINTED_WIRE = {
             "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
         },
     },
-    fieldConflictKind: {
-        at: "400 request.field_conflict detail.kind",
+    fieldConflictReason: {
+        at: "400 / 409 / 422 request.field_conflict reason",
         members: {
-            cascade_verify: { attr: "-", since: "7.133.0" },
-            image_profile: { attr: "-", since: "7.133.0" },
-            resume_anchor: { attr: "-", since: "7.133.0" },
-            system_prompt_fold: { attr: "-", since: "7.133.0" },
-            file_history_restore: { attr: "-", since: "7.133.0" },
-            skills_disabled: { attr: "-", since: "7.133.0" },
-            existing_session: { attr: "-", since: "7.133.0" },
-            fork_target: { attr: "-", since: "7.139.0" },
-            scratchpad_root: { attr: "-", since: "7.133.0" },
-            ask_answer: { attr: "-", since: "7.133.0" },
-            policy_person_ask: { attr: "-", since: "7.133.0" },
-            plan_edit: { attr: "-", since: "7.133.0" },
-            plan_mode_after: { attr: "-", since: "7.133.0" },
-            bound_call_door: { attr: "-", since: "7.133.0" },
-            remember_decision: { attr: "-", since: "7.133.0" },
-            approval_feedback: { attr: "-", since: "7.134.0" },
+            cascade_verify: { attr: "-", revises: ["selfMinted.fieldConflictKind:cascade_verify"], since: "7.148.0" },
+            image_profile: { attr: "-", revises: ["selfMinted.fieldConflictKind:image_profile"], since: "7.148.0" },
+            resume_anchor: { attr: "-", revises: ["selfMinted.fieldConflictKind:resume_anchor"], since: "7.148.0" },
+            system_prompt_fold: { attr: "-", revises: ["selfMinted.fieldConflictKind:system_prompt_fold"], since: "7.148.0" },
+            file_history_restore: { attr: "-", revises: ["selfMinted.fieldConflictKind:file_history_restore"], since: "7.148.0" },
+            skills_disabled: { attr: "-", revises: ["selfMinted.fieldConflictKind:skills_disabled"], since: "7.148.0" },
+            existing_session: { attr: "-", revises: ["selfMinted.fieldConflictKind:existing_session"], since: "7.148.0" },
+            fork_target: { attr: "-", revises: ["selfMinted.fieldConflictKind:fork_target"], since: "7.148.0" },
+            scratchpad_root: { attr: "-", revises: ["selfMinted.fieldConflictKind:scratchpad_root"], since: "7.148.0" },
+            ask_answer: { attr: "-", revises: ["selfMinted.fieldConflictKind:ask_answer"], since: "7.148.0" },
+            policy_person_ask: { attr: "-", revises: ["selfMinted.fieldConflictKind:policy_person_ask"], since: "7.148.0" },
+            plan_edit: { attr: "-", revises: ["selfMinted.fieldConflictKind:plan_edit"], since: "7.148.0" },
+            plan_mode_after: { attr: "-", revises: ["selfMinted.fieldConflictKind:plan_mode_after"], since: "7.148.0" },
+            bound_call_door: { attr: "-", revises: ["selfMinted.fieldConflictKind:bound_call_door"], since: "7.148.0" },
+            remember_decision: { attr: "-", revises: ["selfMinted.fieldConflictKind:remember_decision"], since: "7.148.0" },
+            approval_feedback: { attr: "-", revises: ["selfMinted.fieldConflictKind:approval_feedback"], since: "7.148.0" },
+        },
+    },
+    hooksRefusalReason: {
+        at: "400 request.field_invalid reason(settings.hooks 面)",
+        members: {
+            dead_alias: { attr: "-", since: "7.148.0" },
+            over_budget: { attr: "-", since: "7.148.0" },
+            budget_exceeded: { attr: "-", since: "7.148.0" },
+            invalid_regex: { attr: "-", since: "7.148.0" },
+            unsupported_entry_type: { attr: "-", since: "7.148.0" },
+            unnamed_refusal: { attr: "-", since: "7.148.0" },
+            wire_key_invalid: { attr: "-", since: "7.148.0" },
         },
     },
     limitRefusalReason: {
@@ -473,7 +530,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     entryProblemServerReason: {
-        at: "400/409/422 detail.problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)",
+        at: "400/409/422 problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)",
         members: {
             not_in_roster: { attr: "-", since: "7.133.0" },
             home_unresolvable: { attr: "-", since: "7.133.0" },
@@ -487,9 +544,30 @@ export const SELF_MINTED_WIRE = {
         },
     },
     rateExceededReason: {
-        at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)",
+        at: "429 limit.rate_exceeded reason(在飞 run 并发帽 / 沙箱容量;其余产地不带 reason)",
         members: {
             run_concurrency_cap: { attr: "-", since: "7.146.0" },
+            sandbox_capacity: { attr: "-", since: "7.148.0" },
+        },
+    },
+    parkedRollbackWord: {
+        at: "409 decide.revive_rejected / 500 decide.revive_failed / 422 parked_resume.startup_failed / 409 decide.agent_definition_unavailable rollback(本次 decide 那一次补滚时认领的去向)",
+        members: {
+            rolled_back: { attr: "-", since: "1.267.0" },
+            failed: { attr: "-", since: "1.267.0" },
+            retry: { attr: "-", since: "1.267.0" },
+            lost: { attr: "-", since: "1.267.0" },
+        },
+    },
+    workflowParkDeliveryResult: {
+        at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 在本进程里跑):引擎答词 → 应答",
+        members: {
+            driving: { attr: "200 {taskId: <workflow runId>, status: resuming, decision}(无结清证据)", since: "7.148.0" },
+            already_taken: { attr: "同一决定 ⇒ 首张回执原样回放;另一个决定 ⇒ 409 decide.claim_lost", since: "7.148.0" },
+            settled: { attr: "409 decide.gate_moved", since: "7.148.0" },
+            not_parked_here: { attr: "409 decide.gate_moved", since: "7.148.0" },
+            unreadable: { attr: "503 decide.store_unreachable", since: "7.148.0" },
+            kept_parked: { attr: "400 decide.parked_restatement_unsupported(只在决断带续跑重述键时可达)", since: "7.148.0" },
         },
     },
     settingsEnvCredentialMatch: {
@@ -528,6 +606,19 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.run_exists": { attr: 409, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
             "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(同键重放的体 = 首答的信封 + replay: true:终局 = 引擎结果(result 是串),停驻 = 结果 + 回执三键,行还在跑 = 回执三键;流式腿放进 done.result)": { attr: 200, since: "7.142.0" },
+            "POST /v1/tasks|/v1/tasks/stream#replay_bit_one_rule(replay: true ⇔ 200 结局不是本次请求产出的:读行重放 + 在飞合流的跟随方,两腿同读;拒绝永不带位;流式终帧 done.replay = done.result.replay)": { attr: 200, revises: ["selfMinted.submitIdempotency:POST /v1/tasks#replay"], since: "7.148.0" },
+        },
+    },
+    leaderStopFace: {
+        at: "leader 停止面(<端点>#<形> → 应答状态 / 键在场律)",
+        members: {
+            "POST /v1/leader/:id/cancel#running(翻耐久取消旗;驱动副本当场或下一个存活心跳拍中止;体 leaderRunId + status:cancelling + cancelRequested:true)": { attr: 202, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#terminal(幂等;过期这条 run 留下的待决 worker 停驻;体 leaderRunId + 终局 status + cancelRequested + note)": { attr: 202, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#not_visible(不存在 / 不是你的;与 GET 同一 not_found.leader_run)": { attr: 404, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#terminal_parks_settled_concurrently(终局臂过期 worker 停驻时 CAS 输给并发的决断 / 过期;conflict.approval_settled)": { attr: 409, since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#cancelRequested": { attr: "always (the durable cancel flag; flips only while running)", since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#errorCode": { attr: "present-iff the run stopped at an abort checkpoint by the cancel verb (value cancelled)", since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#result.stopped": { attr: "present-iff (true) the run stopped at an abort checkpoint", since: "7.148.0" },
         },
     },
     builtinScenario: {
@@ -568,6 +659,21 @@ export const SELF_MINTED_WIRE = {
             effectiveValueWithheld: { attr: "present-iff", since: "7.133.0" },
         },
     },
+    autoModeRefusedBy: {
+        at: "GET /v1/capabilities permissionModeAuto.refusedBy(仅 reason:org_denied 且中心亲口拒时在场)",
+        members: {
+            "center.autoMode": { attr: "-", since: "7.148.0" },
+            "center.allowAutoMode": { attr: "-", since: "7.148.0" },
+            both: { attr: "-", since: "7.148.0" },
+        },
+    },
+    configCatalogCredentialPolicy: {
+        at: "GET /v1/config/catalog rows[].credentialPolicy(url 型行恒在场)",
+        members: {
+            refuse: { attr: "-", since: "7.148.0" },
+            mask: { attr: "-", since: "7.148.0" },
+        },
+    },
     modelsResponseKey: {
         at: "GET /v1/models 应答体顶层键(<键> → 在场律)",
         members: {
@@ -822,6 +928,12 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
             "POST /v1/runs/:id/steer#stored_unread_members(run 已终态、铸唤醒卡之前;同一只判;不铸卡;体 resume_blocked_by_policy + blockedBy request.field_invalid + field,不带 retriable)": { attr: 409, since: "7.147.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review|/v1/runs/:id/steer|/v1/runs/:id/permission-mode#resume_context_read_failed(读这条会话的续跑上下文失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;拒在任何状态改动之前,卡仍待决、终态 steer 不铸卡;体 state.resume_context_unreadable)": { attr: 503, revises: ["errorCode:conflict.resume_context_unavailable"], since: "7.148.0" },
+            "POST /v1/approvals/:sessionId/decide#parked_agent_definition_unavailable(停驻赎回;行上的代理类型不在赎回面委派工具的名册里:逐请求 `agents` 定义 / 停驻后被撤的部署定义 / 名叫 fork 的定义;approve 与 deny 同答;认领回滚、委派工具零调用、卡仍待决;体 decide.agent_definition_unavailable + taskId + rollback)": { attr: 409, since: "7.148.0" },
+            "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, revises: ["selfMinted.endpointFaceStatus:POST /v1/runs/:id/interrupt#text_live(带 text 的体打在本副本在飞的 run 上 = 引擎 steer 档位 now;202 体 { taskId, status, delivery: queued-immediate, messageId, note })"], since: "7.148.0" },
+        },
+        retired: {
+            "POST /v1/runs/:id/interrupt#text_live(带 text 的体打在本副本在飞的 run 上 = 引擎 steer 档位 now;202 体 { taskId, status, delivery: queued-immediate, messageId, note })": { attr: 202, since: "7.52.0", until: "7.148.0" },
         },
     },
     ruleImportReceiptKey: {
@@ -888,6 +1000,22 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#reason": { attr: "always;closed set sessionMemoryUnobservedReason, judged in read order (no settled run → the latest settled run's observation gives no read set: empty observation or memory not mounted → no leaf);the message is a function of reason", since: "7.143.0" },
         },
     },
+    ownerFaceAnswer: {
+        at: "属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变)",
+        members: {
+            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#others-owned-session": { attr: "404 resume.session_not_found (requireExistingSession: session does not exist (resume.session_not_found)), same body as a missing session; was 403 auth.forbidden (named caller) / 401 auth.unauthorized (no principal)", revises: ["errorCode:auth.forbidden", "errorCode:auth.unauthorized"], since: "7.148.0" },
+            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#ownerless-placed-session": { attr: "404 resume.session_not_found at the owner gate, same body as a missing session (assemblies without an execution seat too); not judged when the session's archive cannot be read", since: "7.148.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#direct-door-valid-proof-others-task": { attr: "401 principal_unverified (principal proof required), same body as a missing row; was 404 not_found.run (task not found)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
+            "GET|PUT /v1/sessions/:id/policy#ownerless-placed-session-non-fleet-non-operator": { attr: "404 not_found.session (session not found), same body as a missing session; was 409 conflict.session_ownerless", revises: ["errorCode:conflict.session_ownerless"], since: "7.148.0" },
+            "run / session read faces#deployment-service-credential-no-principal-users-rows": { attr: "200 on GET /v1/runs/:id · /v1/runs/:id/events · /v1/sessions/:id · /head · /events · /memory-status · /execution-placement (unless SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT=false); was 404, or 401 auth.principal_required where a principal is required", revises: ["errorCode:auth.principal_required", "errorCode:not_found.run", "errorCode:not_found.session"], since: "7.148.0" },
+            "GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner": { attr: "200 (the principal header is a label on a deployment without an identity boundary); was 404 not_found.run", revises: ["errorCode:not_found.run"], since: "7.148.0" },
+            "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", revises: ["errorCode:corrupt_session"], since: "7.148.0" },
+            "run faces#row-without-owner-cell-no-fleet-no-operator": { attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)", since: "7.148.0" },
+            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", revises: ["errorCode:tool_approval.not_pending", "selfMinted.notPendingCause:unknown_or_other_replica"], since: "7.148.0" },
+            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", revises: ["errorCode:tool_approval.not_pending", "selfMinted.notPendingCause:unknown_or_other_replica"], since: "7.148.0" },
+            "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
+        },
+    },
     sessionRewindFilesWire: {
         at: "POST /v1/sessions/:id/rewind-files(<面>#<键> → 读法 / 在场律)",
         members: {
@@ -950,6 +1078,19 @@ export const SELF_MINTED_WIRE = {
             no_leaf: { attr: "-", since: "7.143.0" },
         },
     },
+    declarationRefusalBodyKey: {
+        at: "400 request.field_invalid 的声明列表拒体(<键> → 在场律;mcpServers · a2aPeers · images)",
+        members: {
+            field: { attr: "always on a list-level, entry-level, key-value or URL-credential refusal; the body coordinate the sentence names (mcpServers[i].<path> · a2aPeers[i] · images)", since: "7.148.0" },
+            index: { attr: "present-iff the refusal is entry-level (entry not an object · a key value · URL credential): the entry's position in the list; absent on list-level and over_cap refusals", since: "7.148.0" },
+        },
+    },
+    notBooleanRefusalBodyKey: {
+        at: "400 request.field_invalid 的「必须是布尔」一族拒体(<键> → 在场律)",
+        members: {
+            field: { attr: "always; the body coordinate the sentence names (e.g. promptLean · attachments.mcpUnavailable · settings.ultracode · resilience.allowDegrade)", since: "7.148.0" },
+        },
+    },
     decideRequiresBindingBodyKey: {
         at: "400 decide_requires_binding 拒体(<键> → 在场律)",
         members: {
@@ -961,6 +1102,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
             "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
+            "404 not_found.run#a*/wa* id(compact · detach · 子代动词口;各 run 口的非属主臂)": { attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -970,6 +1112,11 @@ export const SELF_MINTED_WIRE = {
             "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
+            "400 request.field_invalid#images.not_array": { attr: "head: images is <shape>, not an array of image entries", since: "7.148.0" },
+            "400 request.field_invalid#images[i].not_object": { attr: "head: images[i] is <shape>, not an image entry (an object)", revises: ["errorCode:internal.error"], since: "7.148.0" },
+            "400 request.field_invalid#images[i].<key>.unusable": { attr: "<field> is not a usable declaration — must be a string (…) — got <shape>. The request is refused rather than handing the engine an image it cannot read: … Fix the entry (an image is either { data, mimeType } or { url }).", since: "7.148.0" },
+            "400 request.body_shape#images[i].unknown_key": { attr: "body: unrecognized key(s) on an image entry — refused rather than dropped …; Accepted: <keys of the form>", since: "7.148.0" },
+            "400 request.field_invalid#settings.env.compose": { attr: "settings.env cannot be composed into a child process environment — <the engine's verdict, sanitized>. The request is refused rather than accepted into a task whose hooks and shell would fail to start: fix or remove the variable concerned", since: "7.148.0" },
             "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": { attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.141.0" },
             "400 request.field_invalid#settings.permissions.allow.bad_entry": { attr: "<field>[<index>] is neither a rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.143.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
@@ -1130,7 +1277,7 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
             "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics": { attr: "x-api-key-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics": { attr: "bearer-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
-            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run;default-name-shared-with-MINIO_BUCKET", since: "7.148.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
             "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot", since: "7.139.0" },
@@ -1144,6 +1291,8 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].derivedDefaultNote": { attr: "no-default;absent-refuses-boot", since: "7.141.0" },
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].enumValues": { attr: "none(echoed-verbatim)", since: "7.141.0" },
             "GET /v1/config/catalog#rows[MODEL_ROUTER_ID].derivedDefaultNote": { attr: "absent=>classifier-role-in-served-table", since: "7.143.0" },
+            "GET /v1/config/catalog#rows[MINIO_BUCKET].semantics": { attr: "leader-diff-out-bucket;independent-of-WORKSPACE_SNAPSHOT_BUCKET", since: "7.148.0" },
+            "GET /v1/config/catalog#rows[MINIO_BUCKET].derivedDefaultNote": { attr: "absent=>WORKSPACE_SNAPSHOT_BUCKET_DEFAULT(not-the-explicit-value)", since: "7.148.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
@@ -1151,8 +1300,8 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)": { attr: "engine-deployment-fold(memory.deployment_status.fold:sum|latest|any-record⇒true+record|all-false⇒false|else optOutSource:fault);store set = stores on disk;one-store⇒identity", since: "7.140.0" },
             "GET /v1/models#modelPlane.catalog(refused 的模型面那一半)": { attr: "latest-arrival", since: "7.143.0" },
-            "SSE text_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
-            "SSE reasoning_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "SSE text_delta#delta": { attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "SSE reasoning_delta#delta": { attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
             "GET /v1/runs/:id/subagents/:handle/stream#reasoning_end.content": { attr: "whole-segment-for-late-subscriber", since: "7.143.0" },
             "SSE text_delta#delta(文字段的状态跨文字块)": { attr: "segment-scoped-redactor-state;text_end=block-delivery-not-segment-close;block-end-as-ended-vs-whole-differs=live-as-ended+ledger-whole+hold-diverged+1", since: "7.144.0" },
             "SSE text_end#content(接在同段前缀之后判)": { attr: "engine-block-content;judged-after-segment-prefix", since: "7.144.0" },

package/dist/trace/wire-projection-faces.d.ts

@@ -92,13 +92,12 @@ export type DeclaredKey = ManifestShape & {
     readonly optional?: true;
 };
 /**
- * `TaskEvent` **信封**上的键 —— 这一族构造器一个都不管,所以在每一只 TaskEvent 面上统一扣除。
- *  · `type`：臂名由调用点自己拼在投影体外(`{ type: "tool_end", ...toolEndEventData(ev) }`),不是载荷键;
- *  · `sourceTaskId` / `bgAgentId`：live 腿的**四键身份**由 `liveIdentityFields` 单独挑(durable 两腿只挑两键),
- *    属主是那只函数而不是各面构造器 —— 所以对本族构造器它们恒不在投影体里。
+ * `TaskEvent` **信封**上的键 —— 这一族构造器一个都不管,所以在每一只 TaskEvent 面上统一扣除:只有 `type`(臂名由调用点自己拼在投影体外,
+ * `{ type: "tool_end", ...toolEndEventData(ev) }`,不是载荷键)。身份四键(`eventId` / `parentToolCallId` / `sourceTaskId` / `bgAgentId`)
+ * 是载荷键,每只构造器经同一只 `identityFields` 投 —— 不在这里扣。
  * 这是**一条统一规则**,不是十六个面各自的豁免名单:新臂进来自动适用。
  */
-export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
+export declare const FRAME_ENVELOPE_KEYS: readonly ["type"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
 export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "BrainStatus", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest", "SemaProvenance", "MailboxPeerMeta", "MailboxPeerNoticeMeta", "CrossSessionEnvelopeFields"];
 /**
@@ -213,7 +212,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal", "runOrigin"];
+        readonly excluded: readonly ["principal"];
         readonly minted: readonly [];
     };
     readonly task_notification: {

package/dist/trace/wire-projection-faces.js

@@ -1,4 +1,4 @@
-export const FRAME_ENVELOPE_KEYS = ["type", "sourceTaskId", "bgAgentId"];
+export const FRAME_ENVELOPE_KEYS = ["type"];
 export const WIRE_PROJECTION_CORE_IMPORTS = [
     "TaskEvent",
     "BrainStatus",
@@ -45,7 +45,7 @@ export const WIRE_PROJECTION_FACES = {
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
     compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "runOrigin"], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,

package/dist/upstream-body.d.ts

@@ -0,0 +1,23 @@
+/**
+ * 🔴 **上游应答体的 JSON 读口(唯一)** —— 本服务对任何上游(配置中心 / 记忆同步对端 / fleet 协调器 / 搜索后端 / bake 队列 / hook 的模型端点 / 凭据签发方 …)
+ * 的应答体解 JSON,只经这里。
+ *
+ * 一条律:**上游应答体的字节不进本服务铸的报错句**(只说体长,{@link buildBodyWithheldNote})。V8 的 `JSON.parse` 报错句内嵌入参的片段
+ * (`Unexpected token 's', "sk-proj-ab"... is not valid JSON`)—— 那是在出口座**之前**就切好的半截:脱敏器认得整枚令牌,认不得它的前 10 个字,
+ * 于是之后任何经出口座的出口(运维日志接缝、trace 帧)都挡不住它(env 旋钮的坏 JSON 早就不转述 V8 句,同一条理由)。
+ * 这里解析失败只说形:`the response body is not JSON (<n> characters; the body is not echoed)`;类名照旧是 `SyntaxError` ——
+ * 调用方按类定成因的读法不变(中心拉取:`SyntaxError` ⇒ 候选被拒 `rejected`;hook 模型端点:按名判 `bad_response`)。
+ * 读体途中的传输错(连接被重置的 `TypeError`、超时的 `AbortError`)原样抛:那不是「答错了」,是没拿到完整应答。
+ *
+ * 门:`test/upstream-json-single-reader.test.ts` —— `src/` 里 `.json()` 调用在本模块之外恒为 0(语法树)。
+ * 纯叶(零 import)。
+ */
+/** 报错句的固定头(钉与读者按它认这一形;句子其余部分只有体长)。 */
+export declare const UPSTREAM_BODY_NOT_JSON = "the response body is not JSON";
+/** 一段应答体进报错句时的那一格(只有体长;本服务对上游应答体在报错句里只说这一句 —— 体不是 JSON 的句子与记忆同步对端的非 2xx 句同读)。 */
+export declare function buildBodyWithheldNote(text: string): string;
+/** 已读出的应答体文本 → JSON 值;不是 JSON ⇒ 抛 `SyntaxError`(句子只有体长,不带体的任何字节)。 */
+export declare function parseUpstreamJson(text: string): unknown;
+/** 读完应答体再解 JSON(`Response.json()` 的替身:同一份 UTF-8 解码);读体途中的传输错原样抛。 */
+export declare function readUpstreamJson(res: Response): Promise<unknown>;
+//# sourceMappingURL=upstream-body.d.ts.map

package/dist/upstream-body.js

@@ -0,0 +1,16 @@
+export const UPSTREAM_BODY_NOT_JSON = "the response body is not JSON";
+export function buildBodyWithheldNote(text) {
+    return `(${text.length} characters; the body is not echoed)`;
+}
+export function parseUpstreamJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new SyntaxError(`${UPSTREAM_BODY_NOT_JSON} ${buildBodyWithheldNote(text)}`);
+    }
+}
+export async function readUpstreamJson(res) {
+    return parseUpstreamJson(await res.text());
+}
+//# sourceMappingURL=upstream-body.js.map

package/dist/url-refusal.d.ts

@@ -31,10 +31,10 @@ export declare function buildRefusalShownUrl(raw: string): string;
 /**
  * **自由文本里每一条嵌着的 http(s) URL 换成它的展示形**({@link buildRefusalShownUrl}:`scheme://host[:port]`,origin 之后还有东西接 `/…`;读法不唯一 / 读不出的串给展示铸点的占位),
  * 句子其余部分逐字不动。用在宿主不控制句子的日志面 —— 引擎把「拨不通的 A2A 对端 / MCP 服务器」连同被拨的 URL 拼成一句交来(`onError`),宿主手里没有那条 URL 的结构化值,
- * 只能在文本上换。展示形的铸点仍只有 {@link buildRefusalShownUrl} 一只(userinfo / 路径 / query / fragment 一个字节不进,不赌形状律认得出的令牌形);本函数只负责「找到文本里的 URL」。
- * 非 http(s) 的 scheme 不在射程(这两座的 URL 读器只收 http(s))。纯函数。
+ * 只能在文本上换。展示形的铸点仍只有 {@link buildRefusalShownUrl} 一只(userinfo / 路径 / query / fragment 一个字节不进,不赌形状律认得出的令牌形);本函数只负责「找到文本里的 URL」,
+ * 找的界见 {@link EMBEDDED_HTTP_URL}(authority 文法)。非 http(s) 的 scheme 不在射程(这两座的 URL 读器只收 http(s))。纯函数。
  *
- * 已知的界(不是兜底):URL 串里含**裸空白**的(userinfo 里写了空格)在第一个空白处被截 —— 余下的尾巴留在句里。那一形是调用方在受理口就被拒的(userinfo 一律 400),
+ * 已知的界(文法之外,不是兜底):userinfo 里的**裸空白**不是 URL 文法的一部分 —— 串在第一个空白处结束,余下的尾巴留在句里。那一形是调用方在受理口就被拒的(userinfo 一律 400),
  * 到不了这里的只有存量停驻体 / 部署基线;引擎的警告句对该形也是把 URL 原样拼进去,没有结构化值可救。
  */
 export declare function buildShownUrlsInText(text: string): string;

package/dist/url-refusal.js

@@ -11,11 +11,18 @@ export function buildRefusalShownUrl(raw) {
     const origin = `${u.protocol}//${u.host}`;
     return `${buildDisplaySafeUrl(origin)}${u.href === `${origin}/` ? "" : "/…"}`;
 }
-const EMBEDDED_HTTP_URL = /https?:\/\/[^\s"'`<>()[\]{}]+/gi;
+const EMBEDDED_HTTP_URL = /(https?:\/\/)(?=\S)((?:[^\s/?#\\]*@)?(?:\[[^\s\]/?#\\]*\]|[^\s"'`<>()[\]{}/?#\\@:]*)(?::\d+)?)(\S*)/gi;
+const SENTENCE_TAIL_CHARS = ".,;:!?)]}>'\"`";
+function sentenceTailStart(rest) {
+    let at = rest.length;
+    while (at > 0 && SENTENCE_TAIL_CHARS.includes(rest.charAt(at - 1)))
+        at -= 1;
+    return at;
+}
 export function buildShownUrlsInText(text) {
-    return text.replace(EMBEDDED_HTTP_URL, (token) => {
-        const trail = /[.,;:!?]+$/.exec(token)?.[0] ?? "";
-        return buildRefusalShownUrl(trail === "" ? token : token.slice(0, -trail.length)) + trail;
+    return text.replace(EMBEDDED_HTTP_URL, (_token, scheme, authority, rest) => {
+        const at = sentenceTailStart(rest);
+        return buildRefusalShownUrl(`${scheme}${authority}${rest.slice(0, at)}`) + rest.slice(at);
     });
 }
 export function buildHttpUrlRefusal(subject, raw, flaws) {

package/dist/user-authored-text.d.ts

@@ -32,7 +32,7 @@ export declare function buildRunObjectivePreview(objective: string): string;
  * 这条消息是不是**附件帧**(core 7.50.0 请求层附件:目标声明的每只文件由引擎铸成一条自己的 user 消息,紧跟目标提交)。
  * 判据 = 引擎写在消息上的送达记录 `attachment` **在场**(core:那只记录是「这条消息是附件帧」的唯一来源,文本从不判)。坏形记录同样算在场 ——
  * 两个读者都往「不是人写的话」那一侧落(预览走下一条;会话视图按文件字节脱敏),那是安全的一侧。
- * 一个事实一个读法:会话视图的处置表(`audit.ts`)与本地会话列表的预览(`plugins/local-session-store.ts`)同调这一只。
+ * 一个事实一个读法:会话视图的处置表(`audit.ts`)调这一只(会话列表的预览读 run 行预览列,不读会话条目 —— 附件帧本不在其中)。
  */
 export declare function isAttachmentFrame(message: unknown): boolean;
 //# sourceMappingURL=user-authored-text.d.ts.map

package/dist/user-input-ledger.d.ts

@@ -13,9 +13,8 @@
  * 「本服务以回执向调用方承诺已交给引擎、而消费只发生在进程内存里的用户输入」,**且承载它的那只 `TaskStream` 活在本服务的一条 run 腿里**([ref])——
  * 后半句是收敛判词成立的前提:证据面是那条 run 行(下文「收敛判据」)。行的 `taskId` = 回执上的 run、`sessionId` = 那条 run 的会话(人看的那一只),
  * run 里是哪一只流(run 自己的 / 同步子代的)**不是**账本的事实:告知按 run 并帧(`steer` = 条数),读面行同形。今天只有 steer 一族(`kind:"steer"` =
- * 受理它的引擎动词 `TaskStream.steer`,三档 `now` / `next` / `later` 同一个动词同一族),三个入口同一个引擎动词:
- *  · `POST /v1/runs/:id/steer` 的 live 腿(200 applied);
- *  · `POST /v1/runs/:id/interrupt` 的带 text 形(202 queued-immediate,档位 now;设计稿把它划在病面外,车 SW 亲核它进的是同一只进程内队列 ⇒ 同类同修);
+ * 受理它的引擎动词 `TaskStream.steer`,三档 `now` / `next` / `later` 同一个动词同一族),两个入口同一个引擎动词:
+ *  · `POST /v1/runs/:id/steer` 的 live 腿(200 applied;档位只来自它的体 —— 「切断并说话」= `priority:"now"`,同一扇门);
  *  · `POST /v1/runs/:id/subagents/:target/steer`(200 applied,[ref])—— 投进**同步子代**自己的流(core `createSteerHandle` → `stream.steer`)。子代由父腿
  *    await,父腿收场时 core 撤掉在飞的复活(`subagentRetain.disposeAll`),所以它活在父 run 的腿里;腿 = 子代句柄,`handle.settled` 兑现 ⇒ 结清。
  * 规则的反面(不是例外表):workflow agent steer(`POST /v1/workflows/:id/agents/:label/steer`,200 applied)不在本账 —— workflow 是会话锚定的后台件
@@ -45,8 +44,8 @@
  *                   —— run 事件账与本账是两只店、没有共同事务,两害取「多说一遍」,不取「声称说过」。
  * 转移只有四条(open → settled | converged;converged → announced),两只孪生都按 CAS 守它们(File 单进程 = 内存判;SQL = `WHERE state=…`)。
  *  · `erased`    —— ([ref])**会话树删除**:该会话此前的每一次受理(不论状态)离开账本。行随会话走 —— 账本行的唯一归属键就是 `sessionId`,
- *                   所以两条删会话树的级联(在线删除协调器 `boot/session-faces.ts` 的 `purgeSession`、托管留存的事务化孪生
- *                   `plugins/retention-deployment.ts` 的 `deleteDeploymentSessionRows`)各有一臂删它,谓词同一只(`session_id` 单键,店动词 `deleteBySession`)。
+ *                   所以删净一只会话的唯一执行体(`session-erase.ts`)删它,谓词同一只(`session_id` 单键):local 执行体调店动词 `deleteBySession`,
+ *                   SQL 上在线删除与托管留存同一段会话树事务经 `plugins/retention-deployment.ts` 的 `deleteDeploymentSessionRows` 发同一只谓词。
  *                   File 孪生的盘上形 = 一行会话级墓碑 `{ kind:"erased", sessionId, at }`(与 workflow 完成信箱 `drain{sessionId}` 同形),
  *                   只擦它**之前**的同会话行 —— 会话 id 删后可被重新登记,之后的受理属于下一位住客;SQL 孪生 = 真删行。被删受理上迟到的转移全输
  *                   (行不在了,与「未知 acceptId」同一条守卫)。
@@ -105,7 +104,7 @@ export type UserInputKind = (typeof LEDGER_KIND_OF_LANE)[UserInputLane];
 /** 读盘词表(判定走 `Object.hasOwn`;派生自 {@link LEDGER_KIND_OF_LANE})。≤7.117.x 的读腿不认 `follow_up`(回滚须知在 MIGRATION)。 */
 export declare const USER_INPUT_KIND_WORDS: Readonly<Record<UserInputKind, true>>;
 /**
- * 一次受理的族词 —— 三个受理口(run steer 的 live 腿 / interrupt 带 text 形 / 子代 steer)同调这一只。车道是引擎的那一只读法
+ * 一次受理的族词 —— 两个受理口(run steer 的 live 腿 / 子代 steer)同调这一只。车道是引擎的那一只读法
  * `injectionLaneOf(steerPriorityOf(…))`(core 7.45.0 [ref]:缺席档 = `next`;`later` 走 follow-up 车道,`now` / `next` 走 steer 车道;
  * 档外值抛 `steering.invalid_content` —— 受理口在这之前已按 `isSystemInjectionPriority` 400 掉档外值,这一抛在本仓不可达)。
  */
@@ -263,8 +262,8 @@ export interface UserInputLedgerStore {
     listUnannounced(sessionId: string, limit: number): Promise<UserInputAcceptance[]>;
     /** [ref] —— **会话树删除**:删掉该会话**每一种状态**的受理,回删除条数(没有可删的 ⇒ 0、零写;幂等)。按 `session_id` 单键:行上没有属主列,
      *  会话所有权由调用方证过(在线删除 = 路由的 DELETE 门;留存 = 候选集本身出自本域加锁读的 `session_meta`),与 anchors / exemptions /
-     *  attachments 同律。调用方 = 在线删除协调器(`boot/session-faces.ts` `purgeSession` 的一腿);托管留存的事务化孪生不调店、在自己的事务里
-     *  发**同一只谓词**(`retention-deployment.ts` `deleteDeploymentSessionRows` ④)。写不进 ⇒ 抛(协调器据此不删会话本体,幂等重试收敛)。 */
+     *  attachments 同律。调用方 = local 删净执行体(`session-erase.ts` `createLocalSessionEraser` 的一腿);SQL 上的删净(在线与留存同一段事务体)不调店、
+     *  在自己的事务里发**同一只谓词**(`retention-deployment.ts` `deleteDeploymentSessionRows` ④)。写不进 ⇒ 抛(执行体据此不删会话本体,幂等重试收敛)。 */
     deleteBySession(sessionId: string): Promise<number>;
 }
 /** 收敛判词读的 run 店面(只读一只动词)。 */

package/dist/user-input-ledger.js

@@ -138,7 +138,7 @@ export function buildCrashedUndrainedNotice(input) {
     const face = USER_INPUT_UNDRAINED_FAMILIES[lane];
     return {
         code: face.code,
-        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.count} ${UNDRAINED_WHAT_OF_LANE[lane]} for run ${input.taskId} (each answered 200 applied or 202 queued-immediate), but the process running that run ended before the engine confirmed consuming them. They are NOT redelivered.`,
+        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.count} ${UNDRAINED_WHAT_OF_LANE[lane]} for run ${input.taskId}, but the process running that run ended before the engine confirmed consuming them. They are NOT redelivered.`,
         detail: { [face.countKey]: input.count, cause: CRASHED_CAUSE, taskId: input.taskId, sessionId: input.sessionId },
         sessionId: input.sessionId,
     };

package/dist/web-admin-client/apply-effective.d.ts

@@ -16,9 +16,12 @@ import { type ConfigCandidateRead } from "./candidate-gate.js";
 import type { CatalogSource } from "../env-model-table-gate.js";
 /** Apply center config OVER the env-derived config (mutates `config`). Empty domains keep env defaults. */
 /** Replace a record's contents IN PLACE (clear keys, copy source) so holders of the SAME reference see the
- *  change. This is what makes models/roles/pricing HOT-apply: core's Runner reads
- *  `this.deps.models/roles/pricing` LIVE per-task and `/v1/models` reads `config.models` — both share the
- *  reference captured at boot, so mutating it (vs reassigning) updates both with no split, no Runner rebuild. */
+ *  change. Who holds it: this service's own readers (`/v1/models`, resolveSpec, the quota / key maps) read
+ *  `config.models` / `config.roles` / `pricing` per request off the reference captured at boot; the engine reads
+ *  `deps.roles` (the role map stays the caller's object between operations) and `deps.pricing` live off the same
+ *  reference. NOT `models` / `tiers`: since core 7.60.0 the catalog door receives a whole generation at
+ *  `new Runner` / `swapDeps` and keeps a frozen snapshot, so a model-plane change reaches the Runner only through
+ *  `swapPlane` (applyEffective, before this commit) — the in-place write here is for this service's readers. */
 export declare function mutateInPlace<V>(target: Record<string, V>, source: Record<string, V>): void;
 /** 返回值=是否 COMMIT(false 两臂:[ref]③ 世代序 CAS 拒绝 / 7.10.0 swapPlane 换装拒绝——两臂都在
  *  commit 之前,活配置零触碰)。caller 收到 false 必须把**同一世代的旁路消费**(prompts 采用/pricing/