@sema-agent/server 7.147.0 → 7.149.0

package/dist/trace/self-minted-wire.js

@@ -33,8 +33,22 @@ export const SELF_MINTED_WIRE = {
             client_disconnected: { attr: "-", since: "7.112.0" },
             ask_park_grace_exhausted: { attr: "-", since: "7.112.0" },
             cancel_verb: { attr: "-", since: "7.112.0" },
+            stall_verdict: { attr: "-", since: "7.148.0" },
         },
     },
+    runResultSideKey: {
+        at: "run 结果顶层侧记键(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result;<键> → 在场律)",
+        members: {
+            readDenyFloor: { attr: "present-iff the run went ahead while its read-deny rules are not byte-enforced (rows, an execution environment that does not keep the floor, READ_DENY_FLOOR_REQUIRED unset); { code, message } equals that run's engine_notice frame", since: "7.149.0" },
+        },
+    },
+    runStallVerdictFace: {
+        at: "run 流死亡终帧键 · 会话占用冲突体键",
+        members: {
+            "GET /v1/runs/:id/events#failed.errorCode(死亡判决的终帧从行合成时恒在场 = 行上的码 run.stalled / run.orphaned;本连接已投账本终帧则不合成)": { attr: "verdict", since: "7.148.0" },
+        },
+        retired: {},
+    },
     sessionMemoryEraseStatus: {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
@@ -46,6 +60,7 @@ export const SELF_MINTED_WIRE = {
             "memory.erasure_selector_mismatch": { attr: 409, since: "7.108.0" },
             "memory.erasure_census_incomplete": { attr: 409, since: "7.108.0" },
             "internal.memory_control_plane_corrupt": { attr: 500, since: "7.108.0" },
+            "request.memory_layer": { attr: 400, since: "7.148.0" },
         },
     },
     askTerminalReason: {
@@ -262,6 +277,38 @@ export const SELF_MINTED_WIRE = {
             sessionResident: { attr: "always within inflightBreakdown", since: "7.146.0" },
         },
     },
+    healthSandboxCapacityKey: {
+        at: "GET /health sandboxCapacity",
+        members: {
+            lane: { attr: "always within sandboxCapacity", since: "7.148.0" },
+            limit: { attr: "always within sandboxCapacity", since: "7.148.0" },
+            inUse: { attr: "always within sandboxCapacity (null until a successful daemon reading)", since: "7.148.0" },
+            readAt: { attr: "always within sandboxCapacity (null until the first daemon reading)", since: "7.148.0" },
+            waiting: { attr: "always within sandboxCapacity", since: "7.148.0" },
+        },
+    },
+    healthStoreKey: {
+        at: "GET /health store",
+        members: {
+            durability: { attr: "always", since: "7.148.0" },
+        },
+    },
+    storeDurability: {
+        at: "GET /health store.durability · GET /v1/capabilities store.durability",
+        members: {
+            durable: { attr: "-", since: "7.148.0" },
+            ephemeral: { attr: "-", since: "7.148.0" },
+            unknown: { attr: "-", since: "7.148.0" },
+        },
+    },
+    healthAutoBackgroundOnTimeout: {
+        at: "GET /health autoBackgroundOnTimeout",
+        members: {
+            armed: { attr: "-", since: "7.148.0" },
+            off: { attr: "-", since: "7.148.0" },
+            unsupported: { attr: "-", since: "7.148.0" },
+        },
+    },
     healthEngineLeaseKey: {
         at: "GET /health engineLease",
         members: {
@@ -325,6 +372,15 @@ export const SELF_MINTED_WIRE = {
         members: {
             supportsThinkingOff: { attr: "always", since: "7.138.0" },
             thinkingLevelMap: { attr: "present-iff declared", since: "7.147.0" },
+            defaultThinking: { attr: "present-iff declared", since: "7.148.0" },
+            contextWindowSource: { attr: "present-iff contextWindow is present", since: "7.149.0" },
+        },
+    },
+    modelsContextWindowSource: {
+        at: "GET /v1/models models[].contextWindowSource(present-iff contextWindow)",
+        members: {
+            declared: { attr: "-", since: "7.149.0" },
+            assumed: { attr: "-", since: "7.149.0" },
         },
     },
     modelsRowAnthropicCompatKey: {
@@ -443,25 +499,37 @@ export const SELF_MINTED_WIRE = {
             "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
         },
     },
-    fieldConflictKind: {
-        at: "400 request.field_conflict detail.kind",
+    fieldConflictReason: {
+        at: "400 / 409 / 422 request.field_conflict reason",
+        members: {
+            cascade_verify: { attr: "-", since: "7.148.0" },
+            image_profile: { attr: "-", since: "7.148.0" },
+            resume_anchor: { attr: "-", since: "7.148.0" },
+            system_prompt_fold: { attr: "-", since: "7.148.0" },
+            file_history_restore: { attr: "-", since: "7.148.0" },
+            skills_disabled: { attr: "-", since: "7.148.0" },
+            existing_session: { attr: "-", since: "7.148.0" },
+            fork_target: { attr: "-", since: "7.148.0" },
+            scratchpad_root: { attr: "-", since: "7.148.0" },
+            ask_answer: { attr: "-", since: "7.148.0" },
+            policy_person_ask: { attr: "-", since: "7.148.0" },
+            plan_edit: { attr: "-", since: "7.148.0" },
+            plan_mode_after: { attr: "-", since: "7.148.0" },
+            bound_call_door: { attr: "-", since: "7.148.0" },
+            remember_decision: { attr: "-", since: "7.148.0" },
+            approval_feedback: { attr: "-", since: "7.148.0" },
+        },
+    },
+    hooksRefusalReason: {
+        at: "400 request.field_invalid reason(settings.hooks 面)",
         members: {
-            cascade_verify: { attr: "-", since: "7.133.0" },
-            image_profile: { attr: "-", since: "7.133.0" },
-            resume_anchor: { attr: "-", since: "7.133.0" },
-            system_prompt_fold: { attr: "-", since: "7.133.0" },
-            file_history_restore: { attr: "-", since: "7.133.0" },
-            skills_disabled: { attr: "-", since: "7.133.0" },
-            existing_session: { attr: "-", since: "7.133.0" },
-            fork_target: { attr: "-", since: "7.139.0" },
-            scratchpad_root: { attr: "-", since: "7.133.0" },
-            ask_answer: { attr: "-", since: "7.133.0" },
-            policy_person_ask: { attr: "-", since: "7.133.0" },
-            plan_edit: { attr: "-", since: "7.133.0" },
-            plan_mode_after: { attr: "-", since: "7.133.0" },
-            bound_call_door: { attr: "-", since: "7.133.0" },
-            remember_decision: { attr: "-", since: "7.133.0" },
-            approval_feedback: { attr: "-", since: "7.134.0" },
+            dead_alias: { attr: "-", since: "7.148.0" },
+            over_budget: { attr: "-", since: "7.148.0" },
+            budget_exceeded: { attr: "-", since: "7.148.0" },
+            invalid_regex: { attr: "-", since: "7.148.0" },
+            unsupported_entry_type: { attr: "-", since: "7.148.0" },
+            unnamed_refusal: { attr: "-", since: "7.148.0" },
+            wire_key_invalid: { attr: "-", since: "7.148.0" },
         },
     },
     limitRefusalReason: {
@@ -473,7 +541,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     entryProblemServerReason: {
-        at: "400/409/422 detail.problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)",
+        at: "400/409/422 problems[].reason · 受理应答 warnings[].reason(本仓自铸的词)",
         members: {
             not_in_roster: { attr: "-", since: "7.133.0" },
             home_unresolvable: { attr: "-", since: "7.133.0" },
@@ -487,9 +555,30 @@ export const SELF_MINTED_WIRE = {
         },
     },
     rateExceededReason: {
-        at: "429 limit.rate_exceeded reason(在飞 run 并发帽;其余产地不带 reason)",
+        at: "429 limit.rate_exceeded reason(在飞 run 并发帽 / 沙箱容量;其余产地不带 reason)",
         members: {
             run_concurrency_cap: { attr: "-", since: "7.146.0" },
+            sandbox_capacity: { attr: "-", since: "7.148.0" },
+        },
+    },
+    parkedRollbackWord: {
+        at: "409 decide.revive_rejected / 500 decide.revive_failed / 422 parked_resume.startup_failed / 409 decide.agent_definition_unavailable rollback(本次 decide 那一次补滚时认领的去向)",
+        members: {
+            rolled_back: { attr: "-", since: "1.267.0" },
+            failed: { attr: "-", since: "1.267.0" },
+            retry: { attr: "-", since: "1.267.0" },
+            lost: { attr: "-", since: "1.267.0" },
+        },
+    },
+    workflowParkDeliveryResult: {
+        at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 在本进程里跑):引擎答词 → 应答",
+        members: {
+            driving: { attr: "200 {taskId: <workflow runId>, status: resuming, decision}(无结清证据)", since: "7.148.0" },
+            already_taken: { attr: "同一决定 ⇒ 首张回执原样回放;另一个决定 ⇒ 409 decide.claim_lost", since: "7.148.0" },
+            settled: { attr: "409 decide.gate_moved", since: "7.148.0" },
+            not_parked_here: { attr: "409 decide.gate_moved", since: "7.148.0" },
+            unreadable: { attr: "503 decide.store_unreachable", since: "7.148.0" },
+            kept_parked: { attr: "400 decide.parked_restatement_unsupported(只在决断带续跑重述键时可达)", since: "7.148.0" },
         },
     },
     settingsEnvCredentialMatch: {
@@ -528,6 +617,19 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.run_exists": { attr: 409, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
             "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(同键重放的体 = 首答的信封 + replay: true:终局 = 引擎结果(result 是串),停驻 = 结果 + 回执三键,行还在跑 = 回执三键;流式腿放进 done.result)": { attr: 200, since: "7.142.0" },
+            "POST /v1/tasks|/v1/tasks/stream#replay_bit_one_rule(replay: true ⇔ 200 结局不是本次请求产出的:读行重放 + 在飞合流的跟随方,两腿同读;拒绝永不带位;流式终帧 done.replay = done.result.replay)": { attr: 200, since: "7.148.0" },
+        },
+    },
+    leaderStopFace: {
+        at: "leader 停止面(<端点>#<形> → 应答状态 / 键在场律)",
+        members: {
+            "POST /v1/leader/:id/cancel#running(翻耐久取消旗;驱动副本当场或下一个存活心跳拍中止;体 leaderRunId + status:cancelling + cancelRequested:true)": { attr: 202, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#terminal(幂等;过期这条 run 留下的待决 worker 停驻;体 leaderRunId + 终局 status + cancelRequested + note)": { attr: 202, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#not_visible(不存在 / 不是你的;与 GET 同一 not_found.leader_run)": { attr: 404, since: "7.148.0" },
+            "POST /v1/leader/:id/cancel#terminal_parks_settled_concurrently(终局臂过期 worker 停驻时 CAS 输给并发的决断 / 过期;conflict.approval_settled)": { attr: 409, since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#cancelRequested": { attr: "always (the durable cancel flag; flips only while running)", since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#errorCode": { attr: "present-iff the run stopped at an abort checkpoint by the cancel verb (value cancelled)", since: "7.148.0" },
+            "GET /v1/leader/:id|?idempotencyKey#result.stopped": { attr: "present-iff (true) the run stopped at an abort checkpoint", since: "7.148.0" },
         },
     },
     builtinScenario: {
@@ -568,6 +670,21 @@ export const SELF_MINTED_WIRE = {
             effectiveValueWithheld: { attr: "present-iff", since: "7.133.0" },
         },
     },
+    autoModeRefusedBy: {
+        at: "GET /v1/capabilities permissionModeAuto.refusedBy(仅 reason:org_denied 且中心亲口拒时在场)",
+        members: {
+            "center.autoMode": { attr: "-", since: "7.148.0" },
+            "center.allowAutoMode": { attr: "-", since: "7.148.0" },
+            both: { attr: "-", since: "7.148.0" },
+        },
+    },
+    configCatalogCredentialPolicy: {
+        at: "GET /v1/config/catalog rows[].credentialPolicy(url 型行恒在场)",
+        members: {
+            refuse: { attr: "-", since: "7.148.0" },
+            mask: { attr: "-", since: "7.148.0" },
+        },
+    },
     modelsResponseKey: {
         at: "GET /v1/models 应答体顶层键(<键> → 在场律)",
         members: {
@@ -700,6 +817,13 @@ export const SELF_MINTED_WIRE = {
             thrownName: { attr: "present-iff the engine named what its row judge saw thrown (non-empty string)", since: "7.144.0" },
         },
     },
+    rowRefusalWayOut: {
+        at: "409 决断类续跑拒体(/decide · /plan_review · /resume;判官判那张卡续不了)wayOut",
+        members: {
+            cancel_run: { attr: "-", since: "7.149.0" },
+            newer_worker: { attr: "-", since: "7.149.0" },
+        },
+    },
     permissionModeVerbBodyKey: {
         at: "POST /v1/runs/:id/permission-mode 200 体(<键> → 在场律)",
         members: {
@@ -822,7 +946,26 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
             "POST /v1/runs/:id/steer#stored_unread_members(run 已终态、铸唤醒卡之前;同一只判;不铸卡;体 resume_blocked_by_policy + blockedBy request.field_invalid + field,不带 retriable)": { attr: 409, since: "7.147.0" },
-        },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review|/v1/runs/:id/steer|/v1/runs/:id/permission-mode#resume_context_read_failed(读这条会话的续跑上下文失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;拒在任何状态改动之前,卡仍待决、终态 steer 不铸卡;体 state.resume_context_unreadable)": { attr: 503, since: "7.148.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(认领之前那一次执行席读、认领那一笔 —— markResuming / wake 现建行的 createRun —— 或认领之后提交执行放置那一次店往返失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;认领之后那一形续跑认领的停驻行回到认领之前的停驻词、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)": { attr: 503, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(停驻 run 上的取消:这张卡行体里自带的属主格与店的属主格不一致 —— 取消只读店的属主格,结算这张卡、驱 run 终局;体 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })": { attr: 202, revises: ["errorCode:conflict.approval_settled"], since: "7.149.0" },
+            "POST /v1/runs/:id/cancel#parked_card_body_unreadable(停驻 run 上的取消:这张卡的行体读不成检查点 —— 取消只读店的列,结算这张卡、驱 run 终局;体同上)": { attr: 202, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#parked_agent_definition_unavailable(停驻赎回;行上的代理类型不在赎回面委派工具的名册里:逐请求 `agents` 定义 / 停驻后被撤的部署定义 / 名叫 fork 的定义;approve 与 deny 同答;认领回滚、委派工具零调用、卡仍待决;体 decide.agent_definition_unavailable + taskId + rollback)": { attr: 409, since: "7.148.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(新提交:认领之前那一次执行席读,或认领这一段 —— 建行认领 createRun、执行放置、续跑输入的写、起跑之前的认领复核 —— 有一次店往返没答出来:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;本请求铸的行已删掉 —— 认领与幂等键随行去,同一个自带 taskId 重发即新提交 —— 什么都没起跑;认领之后的流式腿 = 流的终帧;已绑设备的会话上认领之后那一次执行席读同答;体 state.run_store_unavailable)": { attr: 503, revises: ["errorCode:internal.error", "errorCode:device.not_bound"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(续跑腿提交放行之后、交给引擎之前那一段 —— 排空 workflow 完成的序号基址现读与落账、通告口落账 —— 店往返没答出来;续跑认领的停驻行回到停驻、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)": { attr: 503, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow 决定在宿主会话上起的新一跑:建行认领 / 执行放置 / 续跑输入 / 决定落行 / 起跑之前的认领复核有一次店往返没答出来;决定落行那一笔在 wake 腿上同答;现建的行已删掉,子代的卡仍待决;体 state.resume_context_unreadable)": { attr: 503, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow 决定的投递那一跑在决定落行那一拍已不持宿主会话的认领 —— 心跳停满一窗被收割;决定没落、那一跑没起;与起跑之前认领复核答「没持有」同一只答复:认领在别的 run 上 ⇒ 409 conflict.session_active_run,宿主会话已删 ⇒ 404 resume.session_not_found,否则 409 conflict.claim_lost)": { attr: 409, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(停驻子代赎回:认领之前那一次执行席读,或认领之后那一次执行放置的店往返没答出来;认领没有或已回滚,子代仍停着、卡仍待决;体 decide.store_unreachable + taskId)": { attr: 503, revises: ["errorCode:internal.error"], since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(续跑家族、workflow 决定在宿主会话上起的新一跑、停驻子代赎回认领之后提交执行放置读出这条会话此刻不能在本处执行:已放在别的车道 / 写者在别处 / 设备拒;续跑认领的停驻行回到停驻、停驻赎回回滚,卡仍待决,wake 与宿主新一跑现建的行删掉;与认领之前同一只折法、同一只体;体 resume_blocked_by_policy + blockedBy 原码 + 原事实 forkPath / boundLane + retriable)": { attr: 409, revises: ["errorCode:execution_lane.tree_bound", "errorCode:conflict.session_mirror"], since: "7.149.0" },
+            "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)": { attr: 200, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)": { attr: 200, since: "7.149.0" },
+            "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, since: "7.148.0" },
+            "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)": { attr: 404, revises: ["selfMinted.toolApprovalReadState:pending"], since: "7.149.0" },
+            "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)": { attr: 404, revises: ["errorCode:conflict"], since: "7.149.0" },
+            "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)": { attr: 200, revises: ["errorCodeFamily:import_in_flight"], since: "7.149.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)": { attr: 400, since: "7.149.0" },
+        },
+        retired: {},
     },
     ruleImportReceiptKey: {
         at: "POST /v1/rules/cc-import/redeem 200 回执顶层键(<键> → 在场律;与 POST /v1/rules/local-import/redeem 同形)",
@@ -888,6 +1031,23 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#reason": { attr: "always;closed set sessionMemoryUnobservedReason, judged in read order (no settled run → the latest settled run's observation gives no read set: empty observation or memory not mounted → no leaf);the message is a function of reason", since: "7.143.0" },
         },
     },
+    ownerFaceAnswer: {
+        at: "属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变)",
+        members: {
+            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#others-owned-session": { attr: "404 resume.session_not_found (requireExistingSession: session does not exist (resume.session_not_found)), same body as a missing session; was 403 auth.forbidden (named caller) / 401 auth.unauthorized (no principal)", since: "7.148.0" },
+            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#ownerless-placed-session": { attr: "404 resume.session_not_found at the owner gate, same body as a missing session (assemblies without an execution seat too); not judged when the session's archive cannot be read", since: "7.148.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#direct-door-valid-proof-others-task": { attr: "401 principal_unverified (principal proof required), same body as a missing row; was 404 not_found.run (task not found)", since: "7.148.0" },
+            "GET|PUT /v1/sessions/:id/policy#ownerless-placed-session-non-fleet-non-operator": { attr: "404 not_found.session (session not found), same body as a missing session; was 409 conflict.session_ownerless", since: "7.148.0" },
+            "run / session read faces#deployment-service-credential-no-principal-users-rows": { attr: "200 on GET /v1/runs/:id · /v1/runs/:id/events · /v1/sessions/:id · /head · /events · /memory-status · /execution-placement (unless SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT=false); was 404, or 401 auth.principal_required where a principal is required", since: "7.148.0" },
+            "GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner": { attr: "404 not_found.run, same body as a missing run (a caller that names a principal is that principal on a deployment without an identity boundary too); was 200", since: "7.149.0" },
+            "session faces · list faces · /metrics family#dev-open-principal-header-not-owner": { attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)", revises: ["selfMinted.ownerFaceAnswer:GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner"], since: "7.149.0" },
+            "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", since: "7.148.0" },
+            "run faces#row-without-owner-cell-no-fleet-no-operator": { attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)", since: "7.148.0" },
+            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
+            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
+            "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", since: "7.148.0" },
+        },
+    },
     sessionRewindFilesWire: {
         at: "POST /v1/sessions/:id/rewind-files(<面>#<键> → 读法 / 在场律)",
         members: {
@@ -950,6 +1110,19 @@ export const SELF_MINTED_WIRE = {
             no_leaf: { attr: "-", since: "7.143.0" },
         },
     },
+    declarationRefusalBodyKey: {
+        at: "400 request.field_invalid 的声明列表拒体(<键> → 在场律;mcpServers · a2aPeers · images)",
+        members: {
+            field: { attr: "always on a list-level, entry-level, key-value or URL-credential refusal; the body coordinate the sentence names (mcpServers[i].<path> · a2aPeers[i] · images)", since: "7.148.0" },
+            index: { attr: "present-iff the refusal is entry-level (entry not an object · a key value · URL credential): the entry's position in the list; absent on list-level and over_cap refusals", since: "7.148.0" },
+        },
+    },
+    notBooleanRefusalBodyKey: {
+        at: "400 request.field_invalid 的「必须是布尔」一族拒体(<键> → 在场律)",
+        members: {
+            field: { attr: "always; the body coordinate the sentence names (e.g. promptLean · attachments.mcpUnavailable · settings.ultracode · resilience.allowDegrade)", since: "7.148.0" },
+        },
+    },
     decideRequiresBindingBodyKey: {
         at: "400 decide_requires_binding 拒体(<键> → 在场律)",
         members: {
@@ -961,6 +1134,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
             "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
+            "404 not_found.run#a*/wa* id(compact · detach · 子代动词口;各 run 口的非属主臂)": { attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)", since: "7.148.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -970,6 +1144,11 @@ export const SELF_MINTED_WIRE = {
             "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
+            "400 request.field_invalid#images.not_array": { attr: "head: images is <shape>, not an array of image entries", since: "7.148.0" },
+            "400 request.field_invalid#images[i].not_object": { attr: "head: images[i] is <shape>, not an image entry (an object)", since: "7.148.0" },
+            "400 request.field_invalid#images[i].<key>.unusable": { attr: "<field> is not a usable declaration — must be a string (…) — got <shape>. The request is refused rather than handing the engine an image it cannot read: … Fix the entry (an image is either { data, mimeType } or { url }).", since: "7.148.0" },
+            "400 request.body_shape#images[i].unknown_key": { attr: "body: unrecognized key(s) on an image entry — refused rather than dropped …; Accepted: <keys of the form>", since: "7.148.0" },
+            "400 request.field_invalid#settings.env.compose": { attr: "settings.env cannot be composed into a child process environment — <the engine's verdict, sanitized>. The request is refused rather than accepted into a task whose hooks and shell would fail to start: fix or remove the variable concerned", since: "7.148.0" },
             "400 request.field_invalid#settings.permissions.deny|ask.bad_entry": { attr: "<field>[<index>] is neither a non-empty rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.141.0" },
             "400 request.field_invalid#settings.permissions.allow.bad_entry": { attr: "<field>[<index>] is neither a rule string nor a { \"rule\", \"layer\" } entry (…) — every entry must be one. …", since: "7.143.0" },
             "400 request.field_invalid#a2aPeers.not_array": { attr: "head: a2aPeers is <shape>, not an array of A2A peer declarations", since: "7.136.0" },
@@ -1130,7 +1309,7 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[MCP_ELICITATION_TTL_MS].derivedDefaultNote": { attr: "default-window-source:server", since: "7.136.0" },
             "GET /v1/config/catalog#rows[ANTHROPIC_API_KEY].semantics": { attr: "x-api-key-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[ANTHROPIC_AUTH_TOKEN].semantics": { attr: "bearer-only;mutually-exclusive;both-set-refuses-boot", since: "7.136.0" },
-            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run", since: "7.136.0" },
+            "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_BUCKET].semantics": { attr: "boot-checks-bucket;runtime-latest-no-such-bucket-fails-run;default-name-shared-with-MINIO_BUCKET", since: "7.148.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].semantics": { attr: "multi-segment-prefix;bad-segment-refuses-boot", since: "7.136.0" },
             "GET /v1/config/catalog#rows[WORKSPACE_SNAPSHOT_PREFIX].derivedDefaultNote": { attr: "absent=>kata", since: "7.136.0" },
             "GET /v1/config/catalog#rows[K8S_SANDBOX_ENV].semantics": { attr: "values-only-in-the-pod-own-secret;role-needs-secrets-create;denied-refuses-boot;own-credential-name-refuses-boot", since: "7.139.0" },
@@ -1144,6 +1323,8 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].derivedDefaultNote": { attr: "no-default;absent-refuses-boot", since: "7.141.0" },
             "GET /v1/config/catalog#rows[DEVICE_RELAY_URL].enumValues": { attr: "none(echoed-verbatim)", since: "7.141.0" },
             "GET /v1/config/catalog#rows[MODEL_ROUTER_ID].derivedDefaultNote": { attr: "absent=>classifier-role-in-served-table", since: "7.143.0" },
+            "GET /v1/config/catalog#rows[MINIO_BUCKET].semantics": { attr: "leader-diff-out-bucket;independent-of-WORKSPACE_SNAPSHOT_BUCKET", since: "7.148.0" },
+            "GET /v1/config/catalog#rows[MINIO_BUCKET].derivedDefaultNote": { attr: "absent=>WORKSPACE_SNAPSHOT_BUCKET_DEFAULT(not-the-explicit-value)", since: "7.148.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
@@ -1151,8 +1332,8 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[MODEL_CHEAP_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
             "GET /v1/sessions/:id/memory-status#committedCount|foldedCount|lastCaptureAt|captureOptedOut|optOutSource(不带层座)": { attr: "engine-deployment-fold(memory.deployment_status.fold:sum|latest|any-record⇒true+record|all-false⇒false|else optOutSource:fault);store set = stores on disk;one-store⇒identity", since: "7.140.0" },
             "GET /v1/models#modelPlane.catalog(refused 的模型面那一半)": { attr: "latest-arrival", since: "7.143.0" },
-            "SSE text_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
-            "SSE reasoning_delta#delta": { attr: "live-hold:same-redactor-stream(pending-tail-from-arm-table);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "SSE text_delta#delta": { attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
+            "SSE reasoning_delta#delta": { attr: "live-hold:same-redactor-stream(open-judgment-frontier);concat=segment-end-content;remainder-frame-without-eventId", since: "7.143.0" },
             "GET /v1/runs/:id/subagents/:handle/stream#reasoning_end.content": { attr: "whole-segment-for-late-subscriber", since: "7.143.0" },
             "SSE text_delta#delta(文字段的状态跨文字块)": { attr: "segment-scoped-redactor-state;text_end=block-delivery-not-segment-close;block-end-as-ended-vs-whole-differs=live-as-ended+ledger-whole+hold-diverged+1", since: "7.144.0" },
             "SSE text_end#content(接在同段前缀之后判)": { attr: "engine-block-content;judged-after-segment-prefix", since: "7.144.0" },

package/dist/trace/wire-projection-faces.d.ts

@@ -92,13 +92,12 @@ export type DeclaredKey = ManifestShape & {
     readonly optional?: true;
 };
 /**
- * `TaskEvent` **信封**上的键 —— 这一族构造器一个都不管,所以在每一只 TaskEvent 面上统一扣除。
- *  · `type`：臂名由调用点自己拼在投影体外(`{ type: "tool_end", ...toolEndEventData(ev) }`),不是载荷键;
- *  · `sourceTaskId` / `bgAgentId`：live 腿的**四键身份**由 `liveIdentityFields` 单独挑(durable 两腿只挑两键),
- *    属主是那只函数而不是各面构造器 —— 所以对本族构造器它们恒不在投影体里。
+ * `TaskEvent` **信封**上的键 —— 这一族构造器一个都不管,所以在每一只 TaskEvent 面上统一扣除:只有 `type`(臂名由调用点自己拼在投影体外,
+ * `{ type: "tool_end", ...toolEndEventData(ev) }`,不是载荷键)。身份四键(`eventId` / `parentToolCallId` / `sourceTaskId` / `bgAgentId`)
+ * 是载荷键,每只构造器经同一只 `identityFields` 投 —— 不在这里扣。
  * 这是**一条统一规则**,不是十六个面各自的豁免名单:新臂进来自动适用。
  */
-export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
+export declare const FRAME_ENVELOPE_KEYS: readonly ["type"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
 export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "BrainStatus", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest", "SemaProvenance", "MailboxPeerMeta", "MailboxPeerNoticeMeta", "CrossSessionEnvelopeFields"];
 /**
@@ -213,7 +212,7 @@ export declare const WIRE_PROJECTION_FACES: {
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal", "runOrigin"];
+        readonly excluded: readonly ["principal"];
         readonly minted: readonly [];
     };
     readonly task_notification: {

package/dist/trace/wire-projection-faces.js

@@ -1,4 +1,4 @@
-export const FRAME_ENVELOPE_KEYS = ["type", "sourceTaskId", "bgAgentId"];
+export const FRAME_ENVELOPE_KEYS = ["type"];
 export const WIRE_PROJECTION_CORE_IMPORTS = [
     "TaskEvent",
     "BrainStatus",
@@ -45,7 +45,7 @@ export const WIRE_PROJECTION_FACES = {
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
     compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "runOrigin"], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,

package/dist/upstream-body.d.ts

@@ -0,0 +1,23 @@
+/**
+ * 🔴 **上游应答体的 JSON 读口(唯一)** —— 本服务对任何上游(配置中心 / 记忆同步对端 / fleet 协调器 / 搜索后端 / bake 队列 / hook 的模型端点 / 凭据签发方 …)
+ * 的应答体解 JSON,只经这里。
+ *
+ * 一条律:**上游应答体的字节不进本服务铸的报错句**(只说体长,{@link buildBodyWithheldNote})。V8 的 `JSON.parse` 报错句内嵌入参的片段
+ * (`Unexpected token 's', "sk-proj-ab"... is not valid JSON`)—— 那是在出口座**之前**就切好的半截:脱敏器认得整枚令牌,认不得它的前 10 个字,
+ * 于是之后任何经出口座的出口(运维日志接缝、trace 帧)都挡不住它(env 旋钮的坏 JSON 早就不转述 V8 句,同一条理由)。
+ * 这里解析失败只说形:`the response body is not JSON (<n> characters; the body is not echoed)`;类名照旧是 `SyntaxError` ——
+ * 调用方按类定成因的读法不变(中心拉取:`SyntaxError` ⇒ 候选被拒 `rejected`;hook 模型端点:按名判 `bad_response`)。
+ * 读体途中的传输错(连接被重置的 `TypeError`、超时的 `AbortError`)原样抛:那不是「答错了」,是没拿到完整应答。
+ *
+ * 门:`test/upstream-json-single-reader.test.ts` —— `src/` 里 `.json()` 调用在本模块之外恒为 0(语法树)。
+ * 纯叶(零 import)。
+ */
+/** 报错句的固定头(钉与读者按它认这一形;句子其余部分只有体长)。 */
+export declare const UPSTREAM_BODY_NOT_JSON = "the response body is not JSON";
+/** 一段应答体进报错句时的那一格(只有体长;本服务对上游应答体在报错句里只说这一句 —— 体不是 JSON 的句子与记忆同步对端的非 2xx 句同读)。 */
+export declare function buildBodyWithheldNote(text: string): string;
+/** 已读出的应答体文本 → JSON 值;不是 JSON ⇒ 抛 `SyntaxError`(句子只有体长,不带体的任何字节)。 */
+export declare function parseUpstreamJson(text: string): unknown;
+/** 读完应答体再解 JSON(`Response.json()` 的替身:同一份 UTF-8 解码);读体途中的传输错原样抛。 */
+export declare function readUpstreamJson(res: Response): Promise<unknown>;
+//# sourceMappingURL=upstream-body.d.ts.map

package/dist/upstream-body.js

@@ -0,0 +1,16 @@
+export const UPSTREAM_BODY_NOT_JSON = "the response body is not JSON";
+export function buildBodyWithheldNote(text) {
+    return `(${text.length} characters; the body is not echoed)`;
+}
+export function parseUpstreamJson(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new SyntaxError(`${UPSTREAM_BODY_NOT_JSON} ${buildBodyWithheldNote(text)}`);
+    }
+}
+export async function readUpstreamJson(res) {
+    return parseUpstreamJson(await res.text());
+}
+//# sourceMappingURL=upstream-body.js.map

package/dist/url-refusal.d.ts

@@ -31,10 +31,10 @@ export declare function buildRefusalShownUrl(raw: string): string;
 /**
  * **自由文本里每一条嵌着的 http(s) URL 换成它的展示形**({@link buildRefusalShownUrl}:`scheme://host[:port]`,origin 之后还有东西接 `/…`;读法不唯一 / 读不出的串给展示铸点的占位),
  * 句子其余部分逐字不动。用在宿主不控制句子的日志面 —— 引擎把「拨不通的 A2A 对端 / MCP 服务器」连同被拨的 URL 拼成一句交来(`onError`),宿主手里没有那条 URL 的结构化值,
- * 只能在文本上换。展示形的铸点仍只有 {@link buildRefusalShownUrl} 一只(userinfo / 路径 / query / fragment 一个字节不进,不赌形状律认得出的令牌形);本函数只负责「找到文本里的 URL」。
- * 非 http(s) 的 scheme 不在射程(这两座的 URL 读器只收 http(s))。纯函数。
+ * 只能在文本上换。展示形的铸点仍只有 {@link buildRefusalShownUrl} 一只(userinfo / 路径 / query / fragment 一个字节不进,不赌形状律认得出的令牌形);本函数只负责「找到文本里的 URL」,
+ * 找的界见 {@link EMBEDDED_HTTP_URL}(authority 文法)。非 http(s) 的 scheme 不在射程(这两座的 URL 读器只收 http(s))。纯函数。
  *
- * 已知的界(不是兜底):URL 串里含**裸空白**的(userinfo 里写了空格)在第一个空白处被截 —— 余下的尾巴留在句里。那一形是调用方在受理口就被拒的(userinfo 一律 400),
+ * 已知的界(文法之外,不是兜底):userinfo 里的**裸空白**不是 URL 文法的一部分 —— 串在第一个空白处结束,余下的尾巴留在句里。那一形是调用方在受理口就被拒的(userinfo 一律 400),
  * 到不了这里的只有存量停驻体 / 部署基线;引擎的警告句对该形也是把 URL 原样拼进去,没有结构化值可救。
  */
 export declare function buildShownUrlsInText(text: string): string;

package/dist/url-refusal.js

@@ -11,11 +11,18 @@ export function buildRefusalShownUrl(raw) {
     const origin = `${u.protocol}//${u.host}`;
     return `${buildDisplaySafeUrl(origin)}${u.href === `${origin}/` ? "" : "/…"}`;
 }
-const EMBEDDED_HTTP_URL = /https?:\/\/[^\s"'`<>()[\]{}]+/gi;
+const EMBEDDED_HTTP_URL = /(https?:\/\/)(?=\S)((?:[^\s/?#\\]*@)?(?:\[[^\s\]/?#\\]*\]|[^\s"'`<>()[\]{}/?#\\@:]*)(?::\d+)?)(\S*)/gi;
+const SENTENCE_TAIL_CHARS = ".,;:!?)]}>'\"`";
+function sentenceTailStart(rest) {
+    let at = rest.length;
+    while (at > 0 && SENTENCE_TAIL_CHARS.includes(rest.charAt(at - 1)))
+        at -= 1;
+    return at;
+}
 export function buildShownUrlsInText(text) {
-    return text.replace(EMBEDDED_HTTP_URL, (token) => {
-        const trail = /[.,;:!?]+$/.exec(token)?.[0] ?? "";
-        return buildRefusalShownUrl(trail === "" ? token : token.slice(0, -trail.length)) + trail;
+    return text.replace(EMBEDDED_HTTP_URL, (_token, scheme, authority, rest) => {
+        const at = sentenceTailStart(rest);
+        return buildRefusalShownUrl(`${scheme}${authority}${rest.slice(0, at)}`) + rest.slice(at);
     });
 }
 export function buildHttpUrlRefusal(subject, raw, flaws) {

package/dist/user-authored-text.d.ts

@@ -32,7 +32,7 @@ export declare function buildRunObjectivePreview(objective: string): string;
  * 这条消息是不是**附件帧**(core 7.50.0 请求层附件:目标声明的每只文件由引擎铸成一条自己的 user 消息,紧跟目标提交)。
  * 判据 = 引擎写在消息上的送达记录 `attachment` **在场**(core:那只记录是「这条消息是附件帧」的唯一来源,文本从不判)。坏形记录同样算在场 ——
  * 两个读者都往「不是人写的话」那一侧落(预览走下一条;会话视图按文件字节脱敏),那是安全的一侧。
- * 一个事实一个读法:会话视图的处置表(`audit.ts`)与本地会话列表的预览(`plugins/local-session-store.ts`)同调这一只。
+ * 一个事实一个读法:会话视图的处置表(`audit.ts`)调这一只(会话列表的预览读 run 行预览列,不读会话条目 —— 附件帧本不在其中)。
  */
 export declare function isAttachmentFrame(message: unknown): boolean;
 //# sourceMappingURL=user-authored-text.d.ts.map

package/dist/user-input-ledger.d.ts

@@ -13,9 +13,8 @@
  * 「本服务以回执向调用方承诺已交给引擎、而消费只发生在进程内存里的用户输入」,**且承载它的那只 `TaskStream` 活在本服务的一条 run 腿里**([ref])——
  * 后半句是收敛判词成立的前提:证据面是那条 run 行(下文「收敛判据」)。行的 `taskId` = 回执上的 run、`sessionId` = 那条 run 的会话(人看的那一只),
  * run 里是哪一只流(run 自己的 / 同步子代的)**不是**账本的事实:告知按 run 并帧(`steer` = 条数),读面行同形。今天只有 steer 一族(`kind:"steer"` =
- * 受理它的引擎动词 `TaskStream.steer`,三档 `now` / `next` / `later` 同一个动词同一族),三个入口同一个引擎动词:
- *  · `POST /v1/runs/:id/steer` 的 live 腿(200 applied);
- *  · `POST /v1/runs/:id/interrupt` 的带 text 形(202 queued-immediate,档位 now;设计稿把它划在病面外,车 SW 亲核它进的是同一只进程内队列 ⇒ 同类同修);
+ * 受理它的引擎动词 `TaskStream.steer`,三档 `now` / `next` / `later` 同一个动词同一族),两个入口同一个引擎动词:
+ *  · `POST /v1/runs/:id/steer` 的 live 腿(200 applied;档位只来自它的体 —— 「切断并说话」= `priority:"now"`,同一扇门);
  *  · `POST /v1/runs/:id/subagents/:target/steer`(200 applied,[ref])—— 投进**同步子代**自己的流(core `createSteerHandle` → `stream.steer`)。子代由父腿
  *    await,父腿收场时 core 撤掉在飞的复活(`subagentRetain.disposeAll`),所以它活在父 run 的腿里;腿 = 子代句柄,`handle.settled` 兑现 ⇒ 结清。
  * 规则的反面(不是例外表):workflow agent steer(`POST /v1/workflows/:id/agents/:label/steer`,200 applied)不在本账 —— workflow 是会话锚定的后台件
@@ -45,8 +44,8 @@
  *                   —— run 事件账与本账是两只店、没有共同事务,两害取「多说一遍」,不取「声称说过」。
  * 转移只有四条(open → settled | converged;converged → announced),两只孪生都按 CAS 守它们(File 单进程 = 内存判;SQL = `WHERE state=…`)。
  *  · `erased`    —— ([ref])**会话树删除**:该会话此前的每一次受理(不论状态)离开账本。行随会话走 —— 账本行的唯一归属键就是 `sessionId`,
- *                   所以两条删会话树的级联(在线删除协调器 `boot/session-faces.ts` 的 `purgeSession`、托管留存的事务化孪生
- *                   `plugins/retention-deployment.ts` 的 `deleteDeploymentSessionRows`)各有一臂删它,谓词同一只(`session_id` 单键,店动词 `deleteBySession`)。
+ *                   所以删净一只会话的唯一执行体(`session-erase.ts`)删它,谓词同一只(`session_id` 单键):local 执行体调店动词 `deleteBySession`,
+ *                   SQL 上在线删除与托管留存同一段会话树事务经 `plugins/retention-deployment.ts` 的 `deleteDeploymentSessionRows` 发同一只谓词。
  *                   File 孪生的盘上形 = 一行会话级墓碑 `{ kind:"erased", sessionId, at }`(与 workflow 完成信箱 `drain{sessionId}` 同形),
  *                   只擦它**之前**的同会话行 —— 会话 id 删后可被重新登记,之后的受理属于下一位住客;SQL 孪生 = 真删行。被删受理上迟到的转移全输
  *                   (行不在了,与「未知 acceptId」同一条守卫)。
@@ -105,7 +104,7 @@ export type UserInputKind = (typeof LEDGER_KIND_OF_LANE)[UserInputLane];
 /** 读盘词表(判定走 `Object.hasOwn`;派生自 {@link LEDGER_KIND_OF_LANE})。≤7.117.x 的读腿不认 `follow_up`(回滚须知在 MIGRATION)。 */
 export declare const USER_INPUT_KIND_WORDS: Readonly<Record<UserInputKind, true>>;
 /**
- * 一次受理的族词 —— 三个受理口(run steer 的 live 腿 / interrupt 带 text 形 / 子代 steer)同调这一只。车道是引擎的那一只读法
+ * 一次受理的族词 —— 两个受理口(run steer 的 live 腿 / 子代 steer)同调这一只。车道是引擎的那一只读法
  * `injectionLaneOf(steerPriorityOf(…))`(core 7.45.0 [ref]:缺席档 = `next`;`later` 走 follow-up 车道,`now` / `next` 走 steer 车道;
  * 档外值抛 `steering.invalid_content` —— 受理口在这之前已按 `isSystemInjectionPriority` 400 掉档外值,这一抛在本仓不可达)。
  */
@@ -263,8 +262,8 @@ export interface UserInputLedgerStore {
     listUnannounced(sessionId: string, limit: number): Promise<UserInputAcceptance[]>;
     /** [ref] —— **会话树删除**:删掉该会话**每一种状态**的受理,回删除条数(没有可删的 ⇒ 0、零写;幂等)。按 `session_id` 单键:行上没有属主列,
      *  会话所有权由调用方证过(在线删除 = 路由的 DELETE 门;留存 = 候选集本身出自本域加锁读的 `session_meta`),与 anchors / exemptions /
-     *  attachments 同律。调用方 = 在线删除协调器(`boot/session-faces.ts` `purgeSession` 的一腿);托管留存的事务化孪生不调店、在自己的事务里
-     *  发**同一只谓词**(`retention-deployment.ts` `deleteDeploymentSessionRows` ④)。写不进 ⇒ 抛(协调器据此不删会话本体,幂等重试收敛)。 */
+     *  attachments 同律。调用方 = local 删净执行体(`session-erase.ts` `createLocalSessionEraser` 的一腿);SQL 上的删净(在线与留存同一段事务体)不调店、
+     *  在自己的事务里发**同一只谓词**(`retention-deployment.ts` `deleteDeploymentSessionRows` ④)。写不进 ⇒ 抛(执行体据此不删会话本体,幂等重试收敛)。 */
     deleteBySession(sessionId: string): Promise<number>;
 }
 /** 收敛判词读的 run 店面(只读一只动词)。 */

package/dist/user-input-ledger.js

@@ -138,7 +138,7 @@ export function buildCrashedUndrainedNotice(input) {
     const face = USER_INPUT_UNDRAINED_FAMILIES[lane];
     return {
         code: face.code,
-        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.count} ${UNDRAINED_WHAT_OF_LANE[lane]} for run ${input.taskId} (each answered 200 applied or 202 queued-immediate), but the process running that run ended before the engine confirmed consuming them. They are NOT redelivered.`,
+        message: `Check the earlier run's transcript and results before re-sending any of these steers to a live run. The server accepted ${input.count} ${UNDRAINED_WHAT_OF_LANE[lane]} for run ${input.taskId}, but the process running that run ended before the engine confirmed consuming them. They are NOT redelivered.`,
         detail: { [face.countKey]: input.count, cause: CRASHED_CAUSE, taskId: input.taskId, sessionId: input.sessionId },
         sessionId: input.sessionId,
     };

package/dist/web-admin-client/apply-effective.d.ts

@@ -16,9 +16,12 @@ import { type ConfigCandidateRead } from "./candidate-gate.js";
 import type { CatalogSource } from "../env-model-table-gate.js";
 /** Apply center config OVER the env-derived config (mutates `config`). Empty domains keep env defaults. */
 /** Replace a record's contents IN PLACE (clear keys, copy source) so holders of the SAME reference see the
- *  change. This is what makes models/roles/pricing HOT-apply: core's Runner reads
- *  `this.deps.models/roles/pricing` LIVE per-task and `/v1/models` reads `config.models` — both share the
- *  reference captured at boot, so mutating it (vs reassigning) updates both with no split, no Runner rebuild. */
+ *  change. Who holds it: this service's own readers (`/v1/models`, resolveSpec, the quota / key maps) read
+ *  `config.models` / `config.roles` / `pricing` per request off the reference captured at boot; the engine reads
+ *  `deps.roles` (the role map stays the caller's object between operations) and `deps.pricing` live off the same
+ *  reference. NOT `models` / `tiers`: since core 7.60.0 the catalog door receives a whole generation at
+ *  `new Runner` / `swapDeps` and keeps a frozen snapshot, so a model-plane change reaches the Runner only through
+ *  `swapPlane` (applyEffective, before this commit) — the in-place write here is for this service's readers. */
 export declare function mutateInPlace<V>(target: Record<string, V>, source: Record<string, V>): void;
 /** 返回值=是否 COMMIT(false 两臂:[ref]③ 世代序 CAS 拒绝 / 7.10.0 swapPlane 换装拒绝——两臂都在
  *  commit 之前,活配置零触碰)。caller 收到 false 必须把**同一世代的旁路消费**(prompts 采用/pricing/