@sema-agent/server 7.147.0 → 7.149.0

package/dist/trace/self-minted-wire.d.ts

@@ -1,10 +1,13 @@
-/** 一个自铸 wire 值成员的登记。 */
+/** 一个自铸 wire 值成员的登记(`revises` 见文件头注:本版修订的行点名它修订的上一 tag 那几项)。 */
 export interface SelfMintedWireMember {
     readonly attr: string | number;
+    readonly revises?: readonly string[];
     readonly since: string;
 }
-/** 一个**退役**成员的登记:同 {@link SelfMintedWireMember},多一格 `until`(它退出 wire 的那一版;见文件头注 `retired`)。 */
-export interface SelfMintedRetiredMember extends SelfMintedWireMember {
+/** 一个**退役**成员的登记:`attr` / `since` 同 {@link SelfMintedWireMember},多一格 `until`(它退出 wire 的那一版;见文件头注 `retired`);退役成员不带 `revises`。 */
+export interface SelfMintedRetiredMember {
+    readonly attr: string | number;
+    readonly since: string;
     readonly until: string;
 }
 export declare const SELF_MINTED_WIRE: {
@@ -92,7 +95,39 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            stall_verdict: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * run 结果上本仓的侧记键(`store-contracts.ts` 的 `PersistedResultSideKeys`;<键> → 在场律)。本表只登记新出现的那一枚:`readDenyFloor`(照跑的 run,读拒规则不按字节守;
+     * 形 `{ code, message }`,与同一条 run 的 `engine_notice` 帧同码同句,说法属主 `read-deny-floor-notice.ts`,挂点 = 出口封口)。
+     */
+    readonly runResultSideKey: {
+        readonly at: "run 结果顶层侧记键(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result;<键> → 在场律)";
+        readonly members: {
+            readDenyFloor: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * run 存活判决单源(7.148.0)在 wire 上的两处变化:run 流的死亡终帧(从行合成,`routes/runs.ts` 的 run 流 provider `closingFrameOf`)多带行上的码;
+     * 会话占用冲突的两张脸(409 体 / 流式提交的冲突终帧,键集属主 `http/active-run-conflict.ts` 的 `ActiveRunConflictBody` / `ActiveRunConflictDoneResult`)删 `stale`
+     * —— 心跳过期的持有者在认领冲突处已被判死、认领已放,409 只点名活着的持有者。
+     */
+    readonly runStallVerdictFace: {
+        readonly at: "run 流死亡终帧键 · 会话占用冲突体键";
+        readonly members: {
+            readonly "GET /v1/runs/:id/events#failed.errorCode(\u6B7B\u4EA1\u5224\u51B3\u7684\u7EC8\u5E27\u4ECE\u884C\u5408\u6210\u65F6\u6052\u5728\u573A = \u884C\u4E0A\u7684\u7801 run.stalled / run.orphaned;\u672C\u8FDE\u63A5\u5DF2\u6295\u8D26\u672C\u7EC8\u5E27\u5219\u4E0D\u5408\u6210)": {
+                readonly attr: "verdict";
+                readonly since: "7.148.0";
+            };
         };
+        readonly retired: {};
     };
     /**
      * 会话所有者自助抹除面的**已分类拒** → HTTP 状态([ref] 起与 operator 面 `POST /v1/memory/erase` 同一只映射;`since` 记的是**本面**
@@ -133,6 +168,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 500;
                 readonly since: "7.108.0";
             };
+            readonly "request.memory_layer": {
+                readonly attr: 400;
+                readonly since: "7.148.0";
+            };
         };
     };
     /**
@@ -188,7 +227,8 @@ export declare const SELF_MINTED_WIRE: {
     };
     /**
      * 晚答 `POST /v1/tool-approvals/:id/respond` 的 `404 tool_approval.not_pending` 体的 `cause`:行 `VOID` / `DENIED` ⇒ 行上那个成因词(同决断口 410,同一列);
-     * 另有一个 404 专属词 `unknown_or_other_replica`(7.40.0 起,换副本 / 换端点重试才有意义)。7.124.0 起旧词 `voided` / `denied` 退役(被具体成因词取代,零别名)。
+     * 另有一个 404 专属词 `unknown_or_other_replica`(7.40.0 起,换副本 / 换端点重试才有意义;7.148.0 起只对属主出:行仍待决而本副本没有在等它的登记 ——
+     * 看不见这只问的调用方拿 `404 not_found.ask`,见 `ownerFaceAnswer`)。7.124.0 起旧词 `voided` / `denied` 退役(被具体成因词取代,零别名)。
      */
     readonly notPendingCause: {
         readonly at: "POST /v1/tool-approvals/:id/respond · GET /v1/tool-approvals/:id 404 tool_approval.not_pending cause";
@@ -731,6 +771,84 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `GET /health` 的 `store` 段(7.148.0):店活不活得过容器 / Pod 替换 —— 数据根 · 封签钥匙目录 · 接线时的 file 记忆根三根取最弱;与 caps `store.durability` 同一只装配值、同一拍铸。
+     * 恒在场(没有装配值的宿主取诚实下限 `ephemeral`);键集属主 = `HealthStoreSection`(加一键而本表没跟 ⇒ tsc 红)。修前的顶层布尔 `durable`(降级时才带)同版删 —— 顶层键不在本表,删的读法写在 MIGRATION。
+     */
+    /**
+     * `GET /health` 的 `sandboxCapacity` 格(7.148.0):local-docker 车道容器帽 —— present-iff `DOCKER_MAX_CONTAINERS` > 0(闸在场);
+     * 闸自己铸(`plugins/local-docker-capacity.ts`),键集属主 = `HealthSandboxCapacitySection`(加一键而本表没跟 ⇒ tsc 红)。`inUse` / `readAt` 是闸最近一次读 daemon 的投影。
+     */
+    readonly healthSandboxCapacityKey: {
+        readonly at: "GET /health sandboxCapacity";
+        readonly members: {
+            lane: {
+                attr: string;
+                since: string;
+            };
+            limit: {
+                attr: string;
+                since: string;
+            };
+            inUse: {
+                attr: string;
+                since: string;
+            };
+            readAt: {
+                attr: string;
+                since: string;
+            };
+            waiting: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    readonly healthStoreKey: {
+        readonly at: "GET /health store";
+        readonly members: {
+            durability: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 店的持久性三态(`/health.store.durability`、caps `store.durability`、诊断 `storeDurability.durability` / `roots[].verdict` 同一闭集;属主 = `store-posture.ts` 的 `STORE_DURABILITIES`)。 */
+    readonly storeDurability: {
+        readonly at: "GET /health store.durability · GET /v1/capabilities store.durability";
+        readonly members: {
+            durable: {
+                attr: string;
+                since: string;
+            };
+            ephemeral: {
+                attr: string;
+                since: string;
+            };
+            unknown: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /** 前台命令超时转后台在本车道上生不生效的三词(`/health.autoBackgroundOnTimeout`,恒在场;属主 = `capability-facts.ts` 的 `AUTO_BACKGROUND_ON_TIMEOUT_WORDS`,唯一铸点 `autoBackgroundOnTimeoutWord`)。 */
+    readonly healthAutoBackgroundOnTimeout: {
+        readonly at: "GET /health autoBackgroundOnTimeout";
+        readonly members: {
+            armed: {
+                attr: string;
+                since: string;
+            };
+            off: {
+                attr: string;
+                since: string;
+            };
+            unsupported: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `GET /health` 的 `engineLease` 段(7.141.0):引擎附着租约窗 —— `lingerMs` = 自退腿会执行的**最短**静默窗(父活着的窗与孤儿窗取小),`tickMs` = 自退检查采样拍。
      * present-iff 本进程装了租约腿(`ENGINE_AUTO_EXIT` 开或 `SEMA_PARENT_PID` 在场)∧ 腿还在观察 ∧ 窗会到期;键集属主 = `EngineLeaseFacts`(加一键而本表没跟 ⇒ tsc 红)。
@@ -883,6 +1001,28 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "present-iff declared";
                 readonly since: "7.147.0";
             };
+            readonly defaultThinking: {
+                readonly attr: "present-iff declared";
+                readonly since: "7.148.0";
+            };
+            readonly contextWindowSource: {
+                readonly attr: "present-iff contextWindow is present";
+                readonly since: "7.149.0";
+            };
+        };
+    };
+    /** `GET /v1/models` 行的 `contextWindowSource`:同一行 `contextWindow` 那个数是谁写的 —— `declared`(目录条目 / `MODEL_CONTEXT_WINDOW` / `MODEL_CHEAP_CONTEXT_WINDOW` 沿继承链有人写了)/ `assumed`(没人写、本服务落假定值)。 */
+    readonly modelsContextWindowSource: {
+        readonly at: "GET /v1/models models[].contextWindowSource(present-iff contextWindow)";
+        readonly members: {
+            declared: {
+                attr: string;
+                since: string;
+            };
+            assumed: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /** `GET /v1/models` 的 anthropic-messages 行上 `compat` 的键(本版起这条线路的声明生效、上 wire —— 此前 anthropic 条目的 compat 一律被丢;键集 = core `AnthropicMessagesCompat`)。 */
@@ -1150,12 +1290,13 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * `request.field_conflict` 拒体的 `detail.kind`(字段之间互斥 / 互为前置的哪一类;`detail.fields` = 请求体坐标,不在本表 —— 它不是闭集)。
-     * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_KINDS`:`satisfies Record<FieldConflictKind, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
-     * 契约附录 A 的 `request.field_conflict` 行逐个列这些词(`test/field-conflict-detail.test.ts` 钉)。
+     * `request.field_conflict` 拒体根上的 `reason`(字段之间互斥 / 互为前置的哪一类;`fields` = 请求体坐标,不在本表 —— 它不是闭集)。
+     * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_REASONS`:`satisfies Record<FieldConflictReason, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
+     * 契约附录 A 的 `request.field_conflict` 行逐个列这些词(`test/field-conflict-detail.test.ts` 钉)。同一组词 7.133.0–7.147.0 在 `detail.kind`(集名 `fieldConflictKind`,
+     * 随拒体版式律退役);`since` 记的是它们出现在根上 `reason` 的那一版。
      */
-    readonly fieldConflictKind: {
-        readonly at: "400 request.field_conflict detail.kind";
+    readonly fieldConflictReason: {
+        readonly at: "400 / 409 / 422 request.field_conflict reason";
         readonly members: {
             cascade_verify: {
                 attr: string;
@@ -1223,6 +1364,44 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * `settings.hooks` 拒体根上的 `reason` 里**本仓自铸**的词(死别名 / 单次求值超预算 / 受理总额度用尽 / 正则编不过 / 本仓不执行的条目类型 / 分类器说拒却没点名 / 本仓 wire 键形错)。
+     * 词表属主 = `hooks/hook-runner.ts` 的判决型(`HooksServerRefusalReason`);其余 `reason` 是契约包分类器的码原样(属主在契约包)与帽的量纲词(`limitRefusalReason`)。
+     * 7.147.0 及以前同一组词在 `detail.reason`、未登记;`since` 记的是它们出现在根上 `reason` 的那一版。
+     */
+    readonly hooksRefusalReason: {
+        readonly at: "400 request.field_invalid reason(settings.hooks 面)";
+        readonly members: {
+            dead_alias: {
+                attr: string;
+                since: string;
+            };
+            over_budget: {
+                attr: string;
+                since: string;
+            };
+            budget_exceeded: {
+                attr: string;
+                since: string;
+            };
+            invalid_regex: {
+                attr: string;
+                since: string;
+            };
+            unsupported_entry_type: {
+                attr: string;
+                since: string;
+            };
+            unnamed_refusal: {
+                attr: string;
+                since: string;
+            };
+            wire_key_invalid: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 撞帽拒体的 `reason`(量纲:条数 / 字符数 / 字节数)。词表属主 = `limit-refusal.ts` 的 `LIMIT_REASONS`(量纲 → 词);`satisfies Record<LimitReason, …>`。
      * `over_cap` 自 7.106.0 起在 `settings.permissions.*` 三桶上;`too_long` 自 7.132.0;`too_large`(字节数,只在 413 上)自 7.133.0。坏条目的 `bad_entry` 是另一形(不是帽),不在本集。
@@ -1245,11 +1424,11 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * 条目问题机读位(拒体 `detail.problems[]` · 受理应答 `warnings[]`)的 `reason` 里**本仓自铸**的词;词表属主 = `entry-problems.ts` 的 `SERVER_ENTRY_PROBLEM_REASONS`,`satisfies Record<ServerEntryProblemReason, …>`。
+     * 条目问题机读位(拒体根上的 `problems[]` · 受理应答 `warnings[]`)的 `reason` 里**本仓自铸**的词;词表属主 = `entry-problems.ts` 的 `SERVER_ENTRY_PROBLEM_REASONS`,`satisfies Record<ServerEntryProblemReason, …>`。
      * 其余 `reason` 是引擎的词原样(条目读法的原因词、名字判官的判词、规则文法的码),词表属主在 core,不进本表。
      */
     readonly entryProblemServerReason: {
-        readonly at: "400/409/422 detail.problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)";
+        readonly at: "400/409/422 problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)";
         readonly members: {
             not_in_roster: {
                 attr: string;
@@ -1280,16 +1459,81 @@ export declare const SELF_MINTED_WIRE: {
     };
     /**
      * 429 `limit.rate_exceeded` 拒体的机读 `reason`(7.146.0 起;码是旧的、`reason` 键是新的 —— 其余 `limit.rate_exceeded` 的产地不带它)。词表属主 = `http/run-concurrency-cap.ts` 的
-     * `RATE_EXCEEDED_REASONS`(唯一铸点 `runConcurrencyRefusalOf`);`satisfies Record<RateExceededReason, …>`。`run_concurrency_cap` = 本副本在飞 run 已到并发帽
-     * (`RUN_MAX_CONCURRENT` / `RUN_MAX_CONCURRENT_PER_PRINCIPAL`;新提交的四个口,幂等重放之后),体另带 `retryAfterSec: 5`。
+     * `RATE_EXCEEDED_REASONS`(唯一铸点 `rateExceededRefusalOf`);`satisfies Record<RateExceededReason, …>`。`run_concurrency_cap` = 本副本在飞 run 已到并发帽
+     * (`RUN_MAX_CONCURRENT` / `RUN_MAX_CONCURRENT_PER_PRINCIPAL`;新提交的四个口,幂等重放之后);`sandbox_capacity`(7.148.0)= local-docker 车道容器帽前已有起动在等空位
+     * (`DOCKER_MAX_CONTAINERS`;同四个口、同位);体都另带 `retryAfterSec: 5`。
      */
     readonly rateExceededReason: {
-        readonly at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)";
+        readonly at: "429 limit.rate_exceeded reason(在飞 run 并发帽 / 沙箱容量;其余产地不带 reason)";
         readonly members: {
             run_concurrency_cap: {
                 attr: string;
                 since: string;
             };
+            sandbox_capacity: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * 停驻赎回腿四只拒体(`409 decide.revive_rejected` / `500 decide.revive_failed` / `422 parked_resume.startup_failed` / `409 decide.agent_definition_unavailable`)上的 `rollback`:本次 decide 那一次补滚时,认领的去向。
+     * 词 = 引擎回滚口的处置词原样(型属主 = `parked-decide.ts` 的 `ParkedClaimRollbackDisposition`,从 core 推导);`satisfies Record<ParkedClaimRollbackDisposition, …>`。
+     * 自这只键上 wire 起就是这四词(7.148.0 补登记,值零变化);每词的读法在契约 parked 赎回段。行为钉:`test/parked-decide-leg.test.ts` [ref] 组。
+     */
+    readonly parkedRollbackWord: {
+        readonly at: "409 decide.revive_rejected / 500 decide.revive_failed / 422 parked_resume.startup_failed / 409 decide.agent_definition_unavailable rollback(本次 decide 那一次补滚时认领的去向)";
+        readonly members: {
+            rolled_back: {
+                attr: string;
+                since: string;
+            };
+            failed: {
+                attr: string;
+                since: string;
+            };
+            retry: {
+                attr: string;
+                since: string;
+            };
+            lost: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * `/decide` 与应答口在 workflow 子代停驻卡上的应答,**持有这张卡的 run 还在本进程里跑**时:引擎 `redeemWorkflowParks` 对这条决定的答词 → wire 结局。
+     * 词表属主 = core `WorkflowParkDeliveryResult`;唯一铸点 = `parked-decide.ts` 的 `answerOfParkDelivery`(`switch` 穷尽);`satisfies Record<WorkflowParkDeliveryResult, …>`(引擎加词而本表没跟 ⇒ tsc 红)。
+     * run 已不能收(引擎答 `not_active` / 挂起收场)⇒ 不在本集:那是既有续跑车道的应答。码全是既有码,本集登记的是「这个词落哪个码」。行为钉:`test/workflow-park-live-redeem.test.ts`。
+     */
+    readonly workflowParkDeliveryResult: {
+        readonly at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 在本进程里跑):引擎答词 → 应答";
+        readonly members: {
+            driving: {
+                attr: string;
+                since: string;
+            };
+            already_taken: {
+                attr: string;
+                since: string;
+            };
+            settled: {
+                attr: string;
+                since: string;
+            };
+            not_parked_here: {
+                attr: string;
+                since: string;
+            };
+            unreadable: {
+                attr: string;
+                since: string;
+            };
+            kept_parked: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /**
@@ -1375,6 +1619,7 @@ export declare const SELF_MINTED_WIRE: {
      * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
      * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0);
      * 同键重放体的信封(7.142.0 起 = 首答的信封;此前 = run 行读面,退役成员记在 `retired`)。
+     * `replay` 位的在场律(7.148.0 起一条:200 结局不是本次请求产出的 —— 读行重放与在飞合流的跟随方;拒绝永不带)。
      * 行为由 `test/submit-idempotency-one-ledger.test.ts` 钉。
      */
     readonly submitIdempotency: {
@@ -1404,6 +1649,48 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 200;
                 readonly since: "7.142.0";
             };
+            readonly "POST /v1/tasks|/v1/tasks/stream#replay_bit_one_rule(replay: true \u21D4 200 \u7ED3\u5C40\u4E0D\u662F\u672C\u6B21\u8BF7\u6C42\u4EA7\u51FA\u7684:\u8BFB\u884C\u91CD\u653E + \u5728\u98DE\u5408\u6D41\u7684\u8DDF\u968F\u65B9,\u4E24\u817F\u540C\u8BFB;\u62D2\u7EDD\u6C38\u4E0D\u5E26\u4F4D;\u6D41\u5F0F\u7EC8\u5E27 done.replay = done.result.replay)": {
+                readonly attr: 200;
+                readonly since: "7.148.0";
+            };
+        };
+    };
+    /**
+     * leader run 的停止面(与 run / 镜像构建同一条停止律):取消口 `POST /v1/leader/:id/cancel` 的逐形答,与 leader 读面(`GET /v1/leader/:id` /
+     * `GET /v1/leader?idempotencyKey=`)多出的两键、终局结果多出的一键。唯一铸点 = `leader/endpoint.ts` 的 `cancel` / `getBody` 与 `leader/leader.ts` 的
+     * `stoppedResult`。行为由 `test/leader-stop-surface.test.ts` 钉。
+     */
+    readonly leaderStopFace: {
+        readonly at: "leader 停止面(<端点>#<形> → 应答状态 / 键在场律)";
+        readonly members: {
+            readonly "POST /v1/leader/:id/cancel#running(\u7FFB\u8010\u4E45\u53D6\u6D88\u65D7;\u9A71\u52A8\u526F\u672C\u5F53\u573A\u6216\u4E0B\u4E00\u4E2A\u5B58\u6D3B\u5FC3\u8DF3\u62CD\u4E2D\u6B62;\u4F53 leaderRunId + status:cancelling + cancelRequested:true)": {
+                readonly attr: 202;
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/leader/:id/cancel#terminal(\u5E42\u7B49;\u8FC7\u671F\u8FD9\u6761 run \u7559\u4E0B\u7684\u5F85\u51B3 worker \u505C\u9A7B;\u4F53 leaderRunId + \u7EC8\u5C40 status + cancelRequested + note)": {
+                readonly attr: 202;
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/leader/:id/cancel#not_visible(\u4E0D\u5B58\u5728 / \u4E0D\u662F\u4F60\u7684;\u4E0E GET \u540C\u4E00 not_found.leader_run)": {
+                readonly attr: 404;
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/leader/:id/cancel#terminal_parks_settled_concurrently(\u7EC8\u5C40\u81C2\u8FC7\u671F worker \u505C\u9A7B\u65F6 CAS \u8F93\u7ED9\u5E76\u53D1\u7684\u51B3\u65AD / \u8FC7\u671F;conflict.approval_settled)": {
+                readonly attr: 409;
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/leader/:id|?idempotencyKey#cancelRequested": {
+                readonly attr: "always (the durable cancel flag; flips only while running)";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/leader/:id|?idempotencyKey#errorCode": {
+                readonly attr: "present-iff the run stopped at an abort checkpoint by the cancel verb (value cancelled)";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/leader/:id|?idempotencyKey#result.stopped": {
+                readonly attr: "present-iff (true) the run stopped at an abort checkpoint";
+                readonly since: "7.148.0";
+            };
         };
     };
     /**
@@ -1504,6 +1791,45 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 7.148.0:`GET /v1/capabilities` 的 `permissionModeAuto.refusedBy` —— 中心拒 auto 的是哪一键(闭集 `AutoModeRefusedBy`,属主 `runtime-caps-resolver.ts`,唯一判 `autoModeRefusedByOf`;
+     * 引擎拒位读同一只判)。只在 `reason: "org_denied"` 且中心亲口拒了时出键(中心硬失败的 fail-closed 拒、本地 deny 都不带)。`satisfies Record<AutoModeRefusedBy, …>`:词表加一员而本表没跟 ⇒ 编译红。
+     */
+    readonly autoModeRefusedBy: {
+        readonly at: "GET /v1/capabilities permissionModeAuto.refusedBy(仅 reason:org_denied 且中心亲口拒时在场)";
+        readonly members: {
+            "center.autoMode": {
+                attr: string;
+                since: string;
+            };
+            "center.allowAutoMode": {
+                attr: string;
+                since: string;
+            };
+            both: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
+    /**
+     * 7.148.0:`GET /v1/config/catalog` url 型行的凭据处置披露 `rows[].credentialPolicy`(闭集 `UrlCredentialPolicy`,属主 `config-catalog.ts`)—— url 行恒在场、其余行恒缺席。
+     * `refuse` = 本部署读这根键时带凭据起服拒;`mask` = 配置层照收、回显过 display-safe 尺。列是披露,判在各座位;两者由 `test/config-catalog-credential-policy.test.ts` 逐行锁住。
+     * `satisfies Record<UrlCredentialPolicy, …>`:词表加一员而本表没跟 ⇒ 编译红。
+     */
+    readonly configCatalogCredentialPolicy: {
+        readonly at: "GET /v1/config/catalog rows[].credentialPolicy(url 型行恒在场)";
+        readonly members: {
+            refuse: {
+                attr: string;
+                since: string;
+            };
+            mask: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * `GET /v1/models` 应答体的顶层键(闭集;`src/http/routes/capabilities.ts` 的 `sendJson(res, 200, {…})` 字面量)。属性 = 在场律:`always` 恒在场(零条也出键),`present-iff` 条件成立才出键
      * (缺席不下「无」的结论——也可能是更早的 server)。`since` = 该键上 wire 的起始版本(`models` / `default` / `defaultModel` 在本仓首个 tag 就有)。
@@ -1875,6 +2201,25 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 决断类续跑拒体(`POST /v1/approvals/:id/decide` 这一行自己的拒 · `POST /v1/assistant/tasks/:id/plan_review` / `…/resume` 上引擎对这张卡的拒 · 读行臂)上的出路词 `wayOut`(7.149.0):
+     * 判官判这张卡本引擎续不了时它怎么出去 —— 只看判决与这张卡本身,不看门或决定词:`cancel_run`(判决 `damaged` 且取消动词会结算这张卡 —— 有耐久 run 店、它归属的 run 会话上持认领的 run 停着、取消动词找到的恰是它,只读店的列:`POST /v1/runs/:id/cancel` 结卡并终止 run)·
+     * `newer_worker`(判决 `lacking`:不低于停驻它那一版的 worker 续得了它)。唯一铸法 `http/resume-legs.ts` 的 `rowWayOutOf`;在场律:判非 ok、拒留卡 pending、且说得出一个落得下的出路
+     * (判 `damaged` 而取消动词不会结算这张卡 ⇒ 缺席);决定体那一格 / 部署事实 / `/wake` 的拒缺席。
+     */
+    readonly rowRefusalWayOut: {
+        readonly at: "409 决断类续跑拒体(/decide · /plan_review · /resume;判官判那张卡续不了)wayOut";
+        readonly members: {
+            cancel_run: {
+                attr: string;
+                since: string;
+            };
+            newer_worker: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     /**
      * 在飞 run 的权限模式切档口 `POST /v1/runs/:id/permission-mode`(本版新端点)200 体的键集(<键> → 在场律)。
      * `satisfies Record<keyof PermissionModeVerbReply, …>`(体形属主 = `http/routes/run-permission-mode.ts`,路由按这只型铸体;键加一个而本表没跟 ⇒ tsc 红)。
@@ -1947,7 +2292,7 @@ export declare const SELF_MINTED_WIRE: {
     };
     /**
      * 逐端点「应答面 → HTTP 状态」映射里**本版改了状态的面**(形照 `submitIdempotency`:`<端点>#<面>` → 状态;面是调用方能观察到的那一形,不是内部分支名)。
-     * `since` 记**这一面以这个状态答**的起始版本;每个成员的旧状态写在 CHANGELOG 对应条里(旧状态的那一形此前没有登记,清单里它们是「本版新上 wire」,不是 changed)。
+     * `since` 记**这一面以这个状态答**的起始版本;每个成员的旧状态写在 CHANGELOG 对应条里。面本身此前不在本表里;它旧的那一答若在上一 tag 上有清单地址(那一答的错误码 `errorCode:<码>` / `errorCodeFamily:<码>`、自铸登记表的成员 …),行带 `revises` 点名它 ⇒ 清单 `changed`(带 `from`,见文件头注 `revises`);旧的那一答没有地址(如 200 / 204 受理、没有码)⇒ 清单记「本版新上 wire」(added)。
      * 同一端点上状态没变的面(如 `/decide` 对同一张卡的 approve 仍 409)不入表。
      */
     readonly endpointFaceStatus: {
@@ -2321,7 +2666,92 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 409;
                 readonly since: "7.147.0";
             };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review|/v1/runs/:id/steer|/v1/runs/:id/permission-mode#resume_context_read_failed(\u8BFB\u8FD9\u6761\u4F1A\u8BDD\u7684\u7EED\u8DD1\u4E0A\u4E0B\u6587\u5931\u8D25:\u5E93\u65AD\u8FDE / \u62D2\u8FDE / \u8D85\u65F6\u3001\u7F3A\u8868 / \u6743\u9650\u62D2\u3001\u8BA4\u4E0D\u51FA\u7684\u5E93\u9519;\u62D2\u5728\u4EFB\u4F55\u72B6\u6001\u6539\u52A8\u4E4B\u524D,\u5361\u4ECD\u5F85\u51B3\u3001\u7EC8\u6001 steer \u4E0D\u94F8\u5361;\u4F53 state.resume_context_unreadable)": {
+                readonly attr: 503;
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB\u3001\u8BA4\u9886\u90A3\u4E00\u7B14 \u2014\u2014 markResuming / wake \u73B0\u5EFA\u884C\u7684 createRun \u2014\u2014 \u6216\u8BA4\u9886\u4E4B\u540E\u63D0\u4EA4\u6267\u884C\u653E\u7F6E\u90A3\u4E00\u6B21\u5E97\u5F80\u8FD4\u5931\u8D25:\u5E93\u65AD\u8FDE / \u62D2\u8FDE / \u8D85\u65F6\u3001\u7F3A\u8868 / \u6743\u9650\u62D2\u3001\u8BA4\u4E0D\u51FA\u7684\u5E93\u9519;\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u5F62\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u8BA4\u9886\u4E4B\u524D\u7684\u505C\u9A7B\u8BCD\u3001\u8BA4\u9886\u7559\u7740,wake \u73B0\u5EFA\u7684\u884C\u5220\u6389;\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
+                readonly attr: 503;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(\u505C\u9A7B run \u4E0A\u7684\u53D6\u6D88:\u8FD9\u5F20\u5361\u884C\u4F53\u91CC\u81EA\u5E26\u7684\u5C5E\u4E3B\u683C\u4E0E\u5E97\u7684\u5C5E\u4E3B\u683C\u4E0D\u4E00\u81F4 \u2014\u2014 \u53D6\u6D88\u53EA\u8BFB\u5E97\u7684\u5C5E\u4E3B\u683C,\u7ED3\u7B97\u8FD9\u5F20\u5361\u3001\u9A71 run \u7EC8\u5C40;\u4F53 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })": {
+                readonly attr: 202;
+                readonly revises: readonly ["errorCode:conflict.approval_settled"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/runs/:id/cancel#parked_card_body_unreadable(\u505C\u9A7B run \u4E0A\u7684\u53D6\u6D88:\u8FD9\u5F20\u5361\u7684\u884C\u4F53\u8BFB\u4E0D\u6210\u68C0\u67E5\u70B9 \u2014\u2014 \u53D6\u6D88\u53EA\u8BFB\u5E97\u7684\u5217,\u7ED3\u7B97\u8FD9\u5F20\u5361\u3001\u9A71 run \u7EC8\u5C40;\u4F53\u540C\u4E0A)": {
+                readonly attr: 202;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide#parked_agent_definition_unavailable(\u505C\u9A7B\u8D4E\u56DE;\u884C\u4E0A\u7684\u4EE3\u7406\u7C7B\u578B\u4E0D\u5728\u8D4E\u56DE\u9762\u59D4\u6D3E\u5DE5\u5177\u7684\u540D\u518C\u91CC:\u9010\u8BF7\u6C42 `agents` \u5B9A\u4E49 / \u505C\u9A7B\u540E\u88AB\u64A4\u7684\u90E8\u7F72\u5B9A\u4E49 / \u540D\u53EB fork \u7684\u5B9A\u4E49;approve \u4E0E deny \u540C\u7B54;\u8BA4\u9886\u56DE\u6EDA\u3001\u59D4\u6D3E\u5DE5\u5177\u96F6\u8C03\u7528\u3001\u5361\u4ECD\u5F85\u51B3;\u4F53 decide.agent_definition_unavailable + taskId + rollback)": {
+                readonly attr: 409;
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(\u65B0\u63D0\u4EA4:\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB,\u6216\u8BA4\u9886\u8FD9\u4E00\u6BB5 \u2014\u2014 \u5EFA\u884C\u8BA4\u9886 createRun\u3001\u6267\u884C\u653E\u7F6E\u3001\u7EED\u8DD1\u8F93\u5165\u7684\u5199\u3001\u8D77\u8DD1\u4E4B\u524D\u7684\u8BA4\u9886\u590D\u6838 \u2014\u2014 \u6709\u4E00\u6B21\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765:\u5E93\u65AD\u8FDE / \u62D2\u8FDE / \u8D85\u65F6\u3001\u7F3A\u8868 / \u6743\u9650\u62D2\u3001\u8BA4\u4E0D\u51FA\u7684\u5E93\u9519;\u672C\u8BF7\u6C42\u94F8\u7684\u884C\u5DF2\u5220\u6389 \u2014\u2014 \u8BA4\u9886\u4E0E\u5E42\u7B49\u952E\u968F\u884C\u53BB,\u540C\u4E00\u4E2A\u81EA\u5E26 taskId \u91CD\u53D1\u5373\u65B0\u63D0\u4EA4 \u2014\u2014 \u4EC0\u4E48\u90FD\u6CA1\u8D77\u8DD1;\u8BA4\u9886\u4E4B\u540E\u7684\u6D41\u5F0F\u817F = \u6D41\u7684\u7EC8\u5E27;\u5DF2\u7ED1\u8BBE\u5907\u7684\u4F1A\u8BDD\u4E0A\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB\u540C\u7B54;\u4F53 state.run_store_unavailable)": {
+                readonly attr: 503;
+                readonly revises: readonly ["errorCode:internal.error", "errorCode:device.not_bound"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(\u7EED\u8DD1\u817F\u63D0\u4EA4\u653E\u884C\u4E4B\u540E\u3001\u4EA4\u7ED9\u5F15\u64CE\u4E4B\u524D\u90A3\u4E00\u6BB5 \u2014\u2014 \u6392\u7A7A workflow \u5B8C\u6210\u7684\u5E8F\u53F7\u57FA\u5740\u73B0\u8BFB\u4E0E\u843D\u8D26\u3001\u901A\u544A\u53E3\u843D\u8D26 \u2014\u2014 \u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u505C\u9A7B\u3001\u8BA4\u9886\u7559\u7740,wake \u73B0\u5EFA\u7684\u884C\u5220\u6389;\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
+                readonly attr: 503;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow \u51B3\u5B9A\u5728\u5BBF\u4E3B\u4F1A\u8BDD\u4E0A\u8D77\u7684\u65B0\u4E00\u8DD1:\u5EFA\u884C\u8BA4\u9886 / \u6267\u884C\u653E\u7F6E / \u7EED\u8DD1\u8F93\u5165 / \u51B3\u5B9A\u843D\u884C / \u8D77\u8DD1\u4E4B\u524D\u7684\u8BA4\u9886\u590D\u6838\u6709\u4E00\u6B21\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u51B3\u5B9A\u843D\u884C\u90A3\u4E00\u7B14\u5728 wake \u817F\u4E0A\u540C\u7B54;\u73B0\u5EFA\u7684\u884C\u5DF2\u5220\u6389,\u5B50\u4EE3\u7684\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
+                readonly attr: 503;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow \u51B3\u5B9A\u7684\u6295\u9012\u90A3\u4E00\u8DD1\u5728\u51B3\u5B9A\u843D\u884C\u90A3\u4E00\u62CD\u5DF2\u4E0D\u6301\u5BBF\u4E3B\u4F1A\u8BDD\u7684\u8BA4\u9886 \u2014\u2014 \u5FC3\u8DF3\u505C\u6EE1\u4E00\u7A97\u88AB\u6536\u5272;\u51B3\u5B9A\u6CA1\u843D\u3001\u90A3\u4E00\u8DD1\u6CA1\u8D77;\u4E0E\u8D77\u8DD1\u4E4B\u524D\u8BA4\u9886\u590D\u6838\u7B54\u300C\u6CA1\u6301\u6709\u300D\u540C\u4E00\u53EA\u7B54\u590D:\u8BA4\u9886\u5728\u522B\u7684 run \u4E0A \u21D2 409 conflict.session_active_run,\u5BBF\u4E3B\u4F1A\u8BDD\u5DF2\u5220 \u21D2 404 resume.session_not_found,\u5426\u5219 409 conflict.claim_lost)": {
+                readonly attr: 409;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(\u505C\u9A7B\u5B50\u4EE3\u8D4E\u56DE:\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB,\u6216\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u6B21\u6267\u884C\u653E\u7F6E\u7684\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u8BA4\u9886\u6CA1\u6709\u6216\u5DF2\u56DE\u6EDA,\u5B50\u4EE3\u4ECD\u505C\u7740\u3001\u5361\u4ECD\u5F85\u51B3;\u4F53 decide.store_unreachable + taskId)": {
+                readonly attr: 503;
+                readonly revises: readonly ["errorCode:internal.error"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(\u7EED\u8DD1\u5BB6\u65CF\u3001workflow \u51B3\u5B9A\u5728\u5BBF\u4E3B\u4F1A\u8BDD\u4E0A\u8D77\u7684\u65B0\u4E00\u8DD1\u3001\u505C\u9A7B\u5B50\u4EE3\u8D4E\u56DE\u8BA4\u9886\u4E4B\u540E\u63D0\u4EA4\u6267\u884C\u653E\u7F6E\u8BFB\u51FA\u8FD9\u6761\u4F1A\u8BDD\u6B64\u523B\u4E0D\u80FD\u5728\u672C\u5904\u6267\u884C:\u5DF2\u653E\u5728\u522B\u7684\u8F66\u9053 / \u5199\u8005\u5728\u522B\u5904 / \u8BBE\u5907\u62D2;\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u505C\u9A7B\u3001\u505C\u9A7B\u8D4E\u56DE\u56DE\u6EDA,\u5361\u4ECD\u5F85\u51B3,wake \u4E0E\u5BBF\u4E3B\u65B0\u4E00\u8DD1\u73B0\u5EFA\u7684\u884C\u5220\u6389;\u4E0E\u8BA4\u9886\u4E4B\u524D\u540C\u4E00\u53EA\u6298\u6CD5\u3001\u540C\u4E00\u53EA\u4F53;\u4F53 resume_blocked_by_policy + blockedBy \u539F\u7801 + \u539F\u4E8B\u5B9E forkPath / boundLane + retriable)": {
+                readonly attr: 409;
+                readonly revises: readonly ["errorCode:execution_lane.tree_bound", "errorCode:conflict.session_mirror"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/tasks#park_commit_ended(\u540C\u6B65\u817F\u505C\u5728\u8981\u6279\u7684\u95E8\u4E0A,\u800C\u505C\u9A7B\u63D0\u4EA4\u7B54\u51FA\u8FD9\u6761 run \u6CA1\u6709\u505C\u4F4F\u3001\u5DF2\u6536\u573A \u2014\u2014 \u505C\u9A7B\u5199\u4E4B\u524D\u5DF2\u6309\u4E0B\u53D6\u6D88 / \u88AB\u5931\u8054\u6536\u5272 / \u522B\u5904\u7EC8\u7ED3;\u5361\u5DF2\u4F5C\u5E9F;\u4F53 = \u6536\u573A\u90A3\u4E00\u884C\u7684\u4FE1\u5C01,\u4E0E\u540C\u952E\u91CD\u653E\u540C\u4E00\u53EA:\u7EC8\u5C40\u884C\u7684\u7ED3\u679C,\u53D6\u6D88\u90A3\u4E00\u5F62 terminal.code cancelled;\u884C\u4E0A\u65E0\u7ED3\u679C \u21D2 \u56DE\u6267\u4E09\u952E)": {
+                readonly attr: 200;
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(\u7EED\u8DD1\u817F\u518D\u505C / \u91CD\u5F00\u65F6\u505C\u9A7B\u63D0\u4EA4\u7B54\u51FA\u8FD9\u6761 run \u5DF2\u6536\u573A;\u5361\u5DF2\u4F5C\u5E9F;\u4F53 status / errorCode = \u6536\u573A\u90A3\u4E00\u884C\u7684,\u4E0D\u5E26 retriable)": {
+                readonly attr: 200;
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/runs/:id/interrupt#body_with_fields(\u4F53\u5E26\u4EFB\u4F55\u9876\u5C42\u952E \u2014\u2014 \u542B\u65E9\u5148\u7248\u672C\u53D7\u7406\u7684 text;\u975E\u5BF9\u8C61\u4F53\u540C\u7B54;\u5224\u5728\u67E5 run \u4E4B\u524D:\u4EFB\u4F55 run \u72B6\u6001\u3001\u5C5E\u4E3B\u3001\u5B58\u5728\u4E0E\u5426\u540C\u4E00\u53EA\u4F53;\u4F53 request.body_shape + unknownKeys(\u952E\u5168\u5728\u6B64)+ unsupportedKeys(\u6052\u7A7A))": {
+                readonly attr: 400;
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/tool-approvals/:id#row_unreadable(\u6709\u884C\u7684\u95EE,\u6309 id \u8BFB\u884C\u90A3\u4E00\u62CD\u5E97\u629B / \u8D85\u65F6;\u672C\u526F\u672C\u81EA\u5DF1\u94F8\u7684\u6D3B\u5361\u4E0E\u8D77\u670D\u63A5\u7BA1\u7684\u767B\u8BB0\u540C\u7B54;\u4F53 not_found.ask,\u4E0E\u67E5\u65E0 / \u4E0D\u662F\u4F60\u7684\u9010\u5B57\u8282\u540C)": {
+                readonly attr: 404;
+                readonly revises: readonly ["selfMinted.toolApprovalReadState:pending"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(\u63A8\u9001\u4E09\u53E3\u7684\u95E8:id \u4E0A\u662F\u522B\u7684\u4E3B\u4F53\u6B63\u5728\u5220\u9664\u7684\u4F1A\u8BDD \u2014\u2014 \u5220\u9664\u56F4\u680F\u5DF2\u7ACB\u3001\u5C1A\u672A\u5220\u51C0;\u300C\u88AB\u5360\u7740\u300D\u8BFB\u6D3B\u884C \u222A \u5728\u5220\u884C,\u4E0E\u5BF9\u522B\u4EBA\u7684\u6D3B\u884C\u540C\u7B54;\u672C\u4EBA / fleet \u5BF9\u81EA\u5DF1\u5728\u5220\u7684\u4F1A\u8BDD\u4E0D\u53D8,\u62C9\u53D6\u53E3\u4ECD\u53EA\u8BA4\u6D3B\u884C;\u4F53 not_found.session,\u4E0E\u5BF9\u4E0D\u5B58\u5728 id \u7684\u62C9\u53D6\u7B54\u590D\u9010\u5B57\u8282\u540C)": {
+                readonly attr: 404;
+                readonly revises: readonly ["errorCode:conflict"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(\u7B2C\u4E00\u9636\u6BB5:id \u4E0A\u8FD8\u6CA1\u6709\u4F1A\u8BDD\u884C,\u800C\u53E6\u4E00\u4E2A\u4E3B\u4F53\u5728\u8FD9\u53EA id \u4E0A\u7684\u7B2C\u4E00\u9636\u6BB5\u6B63\u5728\u98DE;\u5BFC\u5165\u79DF\u7EA6\u952E = \u843D\u70B9\u5C5E\u4E3B\u683C + \u4F1A\u8BDD id,\u7A7A\u95F2 id \u4E0A\u5404\u5360\u5404\u7684;\u4F53 = \u7B2C\u4E00\u9636\u6BB5\u7684\u6682\u5B58\u56DE\u6267 stagingId;\u5148\u63D0\u4EA4\u8005\u5F97,\u8F93\u7684\u90A3\u4E00\u4EFD\u5728\u63D0\u4EA4\u524D\u590D\u5224\u7B54 404 not_found.session,\u4E0E\u8D62\u5BB6\u7684\u63D0\u4EA4\u649E\u5728\u540C\u4E00\u523B\u65F6\u7531\u5E97\u7684\u5C5E\u4E3B CAS \u62D2 409 conflict)": {
+                readonly attr: 200;
+                readonly revises: readonly ["errorCodeFamily:import_in_flight"];
+                readonly since: "7.149.0";
+            };
+            readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(\u65B0\u63D0\u4EA4;a2aPeers[i].headers \u7684\u6210\u5458\u540D\u662F constructor / prototype \u2014\u2014 \u4E0E mcpServers[i].transport.headers / .env \u540C\u4E00\u5F20\u4FDD\u7559\u6210\u5458\u540D\u8868\u3001\u540C\u4E00\u53EA\u8BFB\u6CD5,\u5927\u5C0F\u5199\u654F\u611F;\u4F53 request.field_invalid + field \u6210\u5458\u7EA7\u8DEF\u5F84 a2aPeers[i].headers.<\u540D>;\u5B58\u76D8\u7EED\u8DD1\u4F53\u91CC\u540C\u5F62 \u21D2 \u7EED\u8DD1\u5BB6\u65CF\u65E2\u6709\u4E00\u9762 #stored_unread_members 409)": {
+                readonly attr: 400;
+                readonly since: "7.149.0";
+            };
         };
+        readonly retired: {};
     };
     /**
      * `POST /v1/rules/cc-import/redeem` 200 回执的顶层键(<键> → 在场律)。规则导入两只 redeem 口同一张回执、同一个铸点(`http/routes/rules.ts` 的 `sendImportReceipt`),
@@ -2366,7 +2796,7 @@ export declare const SELF_MINTED_WIRE: {
     };
     /**
      * 记忆动词的**层座**(`<端点>#<查询串 | 体>.scope` → 读法):不点名层的动词(条目 id / 会话 id / 店级账本)多一个可选的 `scope`,只用来定店;唯一读法 =
-     * `http/memory-layer-reply.ts` 的 `readLayerSeat`(在场而不是非空串 ⇒ 400、面不调)。只登本版新增的座。
+     * `http/memory-face-fault-reply.ts` 的 `readLayerSeat`(在场而不是非空串 ⇒ 400、面不调)。只登本版新增的座。
      */
     readonly memoryLayerSeatKey: {
         readonly at: "记忆动词的层座(<端点>#<query | body>.scope → 读法;只登本版新增的)";
@@ -2497,6 +2927,60 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /** run 外只恢复代码口的 wire 面(`<面>#<键>` → 读法 / 在场律)。200 体 = 引擎 `Runner.rewindFiles` 的结果原样(键属主在引擎);本仓只脱敏文本叶,不加汇总键。 */
+    readonly ownerFaceAnswer: {
+        readonly at: "属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变)";
+        readonly members: {
+            readonly "POST /v1/tasks \u00B7 /v1/tasks/stream \u00B7 /v1/runs (sessionId)#others-owned-session": {
+                readonly attr: "404 resume.session_not_found (requireExistingSession: session does not exist (resume.session_not_found)), same body as a missing session; was 403 auth.forbidden (named caller) / 401 auth.unauthorized (no principal)";
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/tasks \u00B7 /v1/tasks/stream \u00B7 /v1/runs (sessionId)#ownerless-placed-session": {
+                readonly attr: "404 resume.session_not_found at the owner gate, same body as a missing session (assemblies without an execution seat too); not judged when the session's archive cannot be read";
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/assistant/tasks/:id/plan_review#direct-door-valid-proof-others-task": {
+                readonly attr: "401 principal_unverified (principal proof required), same body as a missing row; was 404 not_found.run (task not found)";
+                readonly since: "7.148.0";
+            };
+            readonly "GET|PUT /v1/sessions/:id/policy#ownerless-placed-session-non-fleet-non-operator": {
+                readonly attr: "404 not_found.session (session not found), same body as a missing session; was 409 conflict.session_ownerless";
+                readonly since: "7.148.0";
+            };
+            readonly "run / session read faces#deployment-service-credential-no-principal-users-rows": {
+                readonly attr: "200 on GET /v1/runs/:id · /v1/runs/:id/events · /v1/sessions/:id · /head · /events · /memory-status · /execution-placement (unless SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT=false); was 404, or 401 auth.principal_required where a principal is required";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/runs/:id \u00B7 /v1/runs/:id/events#dev-open-principal-header-not-owner": {
+                readonly attr: "404 not_found.run, same body as a missing run (a caller that names a principal is that principal on a deployment without an identity boundary too); was 200";
+                readonly since: "7.149.0";
+            };
+            readonly "session faces \u00B7 list faces \u00B7 /metrics family#dev-open-principal-header-not-owner": {
+                readonly attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)";
+                readonly revises: readonly ["selfMinted.ownerFaceAnswer:GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner"];
+                readonly since: "7.149.0";
+            };
+            readonly "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": {
+                readonly attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session";
+                readonly since: "7.148.0";
+            };
+            readonly "run faces#row-without-owner-cell-no-fleet-no-operator": {
+                readonly attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)";
+                readonly since: "7.148.0";
+            };
+            readonly "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(\u67E5\u65E0 / \u4E0D\u662F\u8C03\u7528\u65B9\u7684 / \u884C\u8BFB\u4E0D\u51FA / \u672C worker \u6CA1\u6709\u95EE\u8D26)": {
+                readonly attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(\u67E5\u65E0 / \u4E0D\u662F\u8C03\u7528\u65B9\u7684 / \u884C\u8BFB\u4E0D\u51FA / \u672C worker \u6CA1\u6709\u95EE\u8D26)": {
+                readonly attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/workflows/:id \u00B7 /journal \u00B7 /stream \u00B7 POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": {
+                readonly attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)";
+                readonly since: "7.148.0";
+            };
+        };
+    };
     readonly sessionRewindFilesWire: {
         readonly at: "POST /v1/sessions/:id/rewind-files(<面>#<键> → 读法 / 在场律)";
         readonly members: {
@@ -2666,6 +3150,36 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * 声明列表三座(`mcpServers` · `a2aPeers` · `images`)的 `request.field_invalid` 拒体上本版新增的键(`<键>` → 在场律)。唯一铸点 = 拒绝骨架 `request-declaration-refusal.ts`
+     * (`field` 由判官原因的键路径铸、`index` 由骨架的循环铸;拒体没有可 `satisfies` 的全集型,行为由对应 CHANGELOG 条的钉证)。`reason`(URL 带凭据 / 撞帽两形)与 `count` / `cap`(撞帽)早于本表、不在这里。
+     */
+    readonly declarationRefusalBodyKey: {
+        readonly at: "400 request.field_invalid 的声明列表拒体(<键> → 在场律;mcpServers · a2aPeers · images)";
+        readonly members: {
+            readonly field: {
+                readonly attr: "always on a list-level, entry-level, key-value or URL-credential refusal; the body coordinate the sentence names (mcpServers[i].<path> · a2aPeers[i] · images)";
+                readonly since: "7.148.0";
+            };
+            readonly index: {
+                readonly attr: "present-iff the refusal is entry-level (entry not an object · a key value · URL credential): the entry's position in the list; absent on list-level and over_cap refusals";
+                readonly since: "7.148.0";
+            };
+        };
+    };
+    /**
+     * 受理门「`<坐标> must be a boolean`」一族的 `400 request.field_invalid` 拒体上本版新增的键(`<键>` → 在场律)。唯一铸点 = `http/admission.ts` 的 `refuseNotBoolean`
+     * (句子与机读位一处铸;拒体没有可 `satisfies` 的全集型,行为由对应 CHANGELOG 条的钉证 —— 铸点是源码普查钉住的唯一一处)。
+     */
+    readonly notBooleanRefusalBodyKey: {
+        readonly at: "400 request.field_invalid 的「必须是布尔」一族拒体(<键> → 在场律)";
+        readonly members: {
+            readonly field: {
+                readonly attr: "always; the body coordinate the sentence names (e.g. promptLean · attachments.mcpUnavailable · settings.ultracode · resilience.allowDegrade)";
+                readonly since: "7.148.0";
+            };
+        };
+    };
     /**
      * `400 decide_requires_binding` 拒体上的键里本版新增的(`<键>` → 在场律)。唯一铸点 = 续跑腿的决断绑定判官 `decidedActionOf`(`http/resume-legs.ts`)判不过的那一臂;
      * `bindingEnforced` 早于本表、不在这里。
@@ -2694,6 +3208,10 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)";
                 readonly since: "7.146.0";
             };
+            readonly "404 not_found.run#a*/wa* id(compact \u00B7 detach \u00B7 \u5B50\u4EE3\u52A8\u8BCD\u53E3;\u5404 run \u53E3\u7684\u975E\u5C5E\u4E3B\u81C2)": {
+                readonly attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)";
+                readonly since: "7.148.0";
+            };
             readonly "409 decide.row_unrevivable#no_root_anchor": {
                 readonly attr: "ends: deny it to close the card (the agent then ends as failed)";
                 readonly since: "7.136.0";
@@ -2730,6 +3248,26 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential";
                 readonly since: "7.136.0";
             };
+            readonly "400 request.field_invalid#images.not_array": {
+                readonly attr: "head: images is <shape>, not an array of image entries";
+                readonly since: "7.148.0";
+            };
+            readonly "400 request.field_invalid#images[i].not_object": {
+                readonly attr: "head: images[i] is <shape>, not an image entry (an object)";
+                readonly since: "7.148.0";
+            };
+            readonly "400 request.field_invalid#images[i].<key>.unusable": {
+                readonly attr: "<field> is not a usable declaration — must be a string (…) — got <shape>. The request is refused rather than handing the engine an image it cannot read: … Fix the entry (an image is either { data, mimeType } or { url }).";
+                readonly since: "7.148.0";
+            };
+            readonly "400 request.body_shape#images[i].unknown_key": {
+                readonly attr: "body: unrecognized key(s) on an image entry — refused rather than dropped …; Accepted: <keys of the form>";
+                readonly since: "7.148.0";
+            };
+            readonly "400 request.field_invalid#settings.env.compose": {
+                readonly attr: "settings.env cannot be composed into a child process environment — <the engine's verdict, sanitized>. The request is refused rather than accepted into a task whose hooks and shell would fail to start: fix or remove the variable concerned";
+                readonly since: "7.148.0";
+            };
             readonly "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": {
                 readonly attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …";
                 readonly since: "7.141.0";
@@ -3273,8 +3811,8 @@ export declare const SELF_MINTED_WIRE: {
                 readonly since: "7.136.0";
             };
             readonly "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": {
-                readonly attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run";
-                readonly since: "7.136.0";
+                readonly attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run;default-name-shared-with-MINIO_BUCKET";
+                readonly since: "7.148.0";
             };
             readonly "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": {
                 readonly attr: "multi-segment-prefix;bad-segment-refuses-boot";
@@ -3330,6 +3868,15 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "absent=>classifier-role-in-served-table";
                 readonly since: "7.143.0";
             };
+            /** 7.148.0:两只桶行改述关系 —— `MINIO_BUCKET` = leader diff-out 桶(此前误写「leader 工作区快照桶」),缺席 = 工作区快照桶的缺省名常量、不跟随 `WORKSPACE_SNAPSHOT_BUCKET` 的显式值;工作区快照桶行补「缺省名与 leader 桶共用」(那一行在上面 7.136.0 段里,原地改 attr)。 */
+            readonly "GET /v1/config/catalog#rows[MINIO_BUCKET].semantics": {
+                readonly attr: "leader-diff-out-bucket;independent-of-WORKSPACE_SNAPSHOT_BUCKET";
+                readonly since: "7.148.0";
+            };
+            readonly "GET /v1/config/catalog#rows[MINIO_BUCKET].derivedDefaultNote": {
+                readonly attr: "absent=>WORKSPACE_SNAPSHOT_BUCKET_DEFAULT(not-the-explicit-value)";
+                readonly since: "7.148.0";
+            };
             /**
              * MCP 远端失败句在面板与重拨回执上的出口读法:出口座的 `mcp-remote-text` 行(`trace/exit-seat.ts`)—— 与 trace / 通告同一个脱敏器(引擎记号 `[redacted]` = 已抹的值,原样;
              * 引擎记号占了方案词位时头值余下的部分照抹;引擎放过的形照抹),界 200(切点不落进记号)。7.137.0 是按记号切开、逐段过 `redactSecrets` 的另一只读法
@@ -3385,11 +3932,11 @@ export declare const SELF_MINTED_WIRE: {
              * 钉 test/live-model-text-redact.test.ts、test/live-model-text-hold-law.test.ts。
              */
             readonly "SSE text_delta#delta": {
-                readonly attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId";
+                readonly attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId";
                 readonly since: "7.143.0";
             };
             readonly "SSE reasoning_delta#delta": {
-                readonly attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId";
+                readonly attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId";
                 readonly since: "7.143.0";
             };
             /** 7.143.0:子代 tail 面的 `reasoning_end.content` = 整段(登记册随开着的段活着,没人听时也攒原文);此前只覆盖订阅者开始听之后的那一截。钉 test/live-model-text-redact.test.ts tail 组。 */