@sema-agent/server 7.148.0 → 7.149.0

package/wire-changes/server@7.149.0.json

@@ -0,0 +1,372 @@
+{
+  "repo": "server",
+  "version": "7.149.0",
+  "from": "v7.148.0",
+  "fromCommit": "4a87488ca6f51d4994e8323e06f5e0bc70757088",
+  "to": "v7.149.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1h",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1g",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes",
+    "src/trace/core-vocab-wire.ts"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "engineNotice",
+      "member": "config.read_deny_floor_unkept",
+      "text": "附录 D.3 engine_notice 码新增 `config.read_deny_floor_unkept`(detail `{ rowCount, sessionId, runId }` —— 引擎的,逐字(`rowCount` = 读拒表的行数;`sessionId` / `runId` = 说的那一条 run,级 / 验证器 / 子代是它们自己的))"
+    },
+    {
+      "id": "A2",
+      "source": "errorCode",
+      "member": "internal.org_delivery_quota_unreadable",
+      "text": "附录 A.1 / A.1b 错误码新增 `internal.org_delivery_quota_unreadable`(状态码 500)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "state.run_store_unavailable",
+      "text": "附录 A.1 / A.1b 错误码新增 `state.run_store_unavailable`(状态码 503)"
+    },
+    {
+      "id": "A4",
+      "source": "errorCodeFamily",
+      "member": "internal.org_delivery_quota_unreadable",
+      "text": "附录 A.1 / A.1b / A.1h 错误码的码族新增 `internal.org_delivery_quota_unreadable`(码族 deterministic)"
+    },
+    {
+      "id": "A5",
+      "source": "errorCodeFamily",
+      "member": "state.run_store_unavailable",
+      "text": "附录 A.1 / A.1b / A.1h 错误码的码族新增 `state.run_store_unavailable`(码族 transient)"
+    },
+    {
+      "id": "A6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)`(属性 200;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)`(属性 200;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A8",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)`(属性 400;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.modelsContextWindowSource",
+      "member": "assumed",
+      "text": "自铸 GET /v1/models models[].contextWindowSource(present-iff contextWindow) 新增 `assumed`(属性 -;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.modelsContextWindowSource",
+      "member": "declared",
+      "text": "自铸 GET /v1/models models[].contextWindowSource(present-iff contextWindow) 新增 `declared`(属性 -;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.modelsRowKey",
+      "member": "contextWindowSource",
+      "text": "自铸 GET /v1/models models[] 行键(<键> → 在场律) 新增 `contextWindowSource`(属性 present-iff contextWindow is present;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.rowRefusalWayOut",
+      "member": "cancel_run",
+      "text": "自铸 409 决断类续跑拒体(/decide · /plan_review · /resume;判官判那张卡续不了)wayOut 新增 `cancel_run`(属性 -;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.rowRefusalWayOut",
+      "member": "newer_worker",
+      "text": "自铸 409 决断类续跑拒体(/decide · /plan_review · /resume;判官判那张卡续不了)wayOut 新增 `newer_worker`(属性 -;since 7.149.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.runResultSideKey",
+      "member": "readDenyFloor",
+      "text": "自铸 run 结果顶层侧记键(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result;<键> → 在场律) 新增 `readDenyFloor`(属性 present-iff the run went ahead while its read-deny rules are not byte-enforced (rows, an execution environment that does not keep the floor, READ_DENY_FLOOR_REQUIRED unset); { code, message } equals that run's engine_notice frame;since 7.149.0 = 本版新上 wire)"
+    }
+  ],
+  "registered": [],
+  "excluded": [],
+  "removed": [],
+  "changed": [
+    {
+      "id": "C1",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)",
+      "from": [
+        "selfMinted.toolApprovalReadState:pending"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)`(属性 404;since 7.149.0 = 本版;修订上一 tag 的 selfMinted.toolApprovalReadState:pending)"
+    },
+    {
+      "id": "C2",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(停驻子代赎回:认领之前那一次执行席读,或认领之后那一次执行放置的店往返没答出来;认领没有或已回滚,子代仍停着、卡仍待决;体 decide.store_unreachable + taskId)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(停驻子代赎回:认领之前那一次执行席读,或认领之后那一次执行放置的店往返没答出来;认领没有或已回滚,子代仍停着、卡仍待决;体 decide.store_unreachable + taskId)`(属性 503;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C3",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow 决定的投递那一跑在决定落行那一拍已不持宿主会话的认领 —— 心跳停满一窗被收割;决定没落、那一跑没起;与起跑之前认领复核答「没持有」同一只答复:认领在别的 run 上 ⇒ 409 conflict.session_active_run,宿主会话已删 ⇒ 404 resume.session_not_found,否则 409 conflict.claim_lost)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow 决定的投递那一跑在决定落行那一拍已不持宿主会话的认领 —— 心跳停满一窗被收割;决定没落、那一跑没起;与起跑之前认领复核答「没持有」同一只答复:认领在别的 run 上 ⇒ 409 conflict.session_active_run,宿主会话已删 ⇒ 404 resume.session_not_found,否则 409 conflict.claim_lost)`(属性 409;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C4",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow 决定在宿主会话上起的新一跑:建行认领 / 执行放置 / 续跑输入 / 决定落行 / 起跑之前的认领复核有一次店往返没答出来;决定落行那一笔在 wake 腿上同答;现建的行已删掉,子代的卡仍待决;体 state.resume_context_unreadable)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow 决定在宿主会话上起的新一跑:建行认领 / 执行放置 / 续跑输入 / 决定落行 / 起跑之前的认领复核有一次店往返没答出来;决定落行那一笔在 wake 腿上同答;现建的行已删掉,子代的卡仍待决;体 state.resume_context_unreadable)`(属性 503;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C5",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(续跑家族、workflow 决定在宿主会话上起的新一跑、停驻子代赎回认领之后提交执行放置读出这条会话此刻不能在本处执行:已放在别的车道 / 写者在别处 / 设备拒;续跑认领的停驻行回到停驻、停驻赎回回滚,卡仍待决,wake 与宿主新一跑现建的行删掉;与认领之前同一只折法、同一只体;体 resume_blocked_by_policy + blockedBy 原码 + 原事实 forkPath / boundLane + retriable)",
+      "from": [
+        "errorCode:execution_lane.tree_bound",
+        "errorCode:conflict.session_mirror"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(续跑家族、workflow 决定在宿主会话上起的新一跑、停驻子代赎回认领之后提交执行放置读出这条会话此刻不能在本处执行:已放在别的车道 / 写者在别处 / 设备拒;续跑认领的停驻行回到停驻、停驻赎回回滚,卡仍待决,wake 与宿主新一跑现建的行删掉;与认领之前同一只折法、同一只体;体 resume_blocked_by_policy + blockedBy 原码 + 原事实 forkPath / boundLane + retriable)`(属性 409;since 7.149.0 = 本版;修订上一 tag 的 errorCode:execution_lane.tree_bound / errorCode:conflict.session_mirror)"
+    },
+    {
+      "id": "C6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(认领之前那一次执行席读、认领那一笔 —— markResuming / wake 现建行的 createRun —— 或认领之后提交执行放置那一次店往返失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;认领之后那一形续跑认领的停驻行回到认领之前的停驻词、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(认领之前那一次执行席读、认领那一笔 —— markResuming / wake 现建行的 createRun —— 或认领之后提交执行放置那一次店往返失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;认领之后那一形续跑认领的停驻行回到认领之前的停驻词、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)`(属性 503;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(续跑腿提交放行之后、交给引擎之前那一段 —— 排空 workflow 完成的序号基址现读与落账、通告口落账 —— 店往返没答出来;续跑认领的停驻行回到停驻、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(续跑腿提交放行之后、交给引擎之前那一段 —— 排空 workflow 完成的序号基址现读与落账、通告口落账 —— 店往返没答出来;续跑认领的停驻行回到停驻、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)`(属性 503;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C8",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(停驻 run 上的取消:这张卡行体里自带的属主格与店的属主格不一致 —— 取消只读店的属主格,结算这张卡、驱 run 终局;体 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })",
+      "from": [
+        "errorCode:conflict.approval_settled"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/runs/:id/cancel#parked_card_body_scope_differs(停驻 run 上的取消:这张卡行体里自带的属主格与店的属主格不一致 —— 取消只读店的属主格,结算这张卡、驱 run 终局;体 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })`(属性 202;since 7.149.0 = 本版;修订上一 tag 的 errorCode:conflict.approval_settled)"
+    },
+    {
+      "id": "C9",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/runs/:id/cancel#parked_card_body_unreadable(停驻 run 上的取消:这张卡的行体读不成检查点 —— 取消只读店的列,结算这张卡、驱 run 终局;体同上)",
+      "from": [
+        "errorCode:internal.error"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/runs/:id/cancel#parked_card_body_unreadable(停驻 run 上的取消:这张卡的行体读不成检查点 —— 取消只读店的列,结算这张卡、驱 run 终局;体同上)`(属性 202;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error)"
+    },
+    {
+      "id": "C10",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)",
+      "from": [
+        "errorCodeFamily:import_in_flight"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)`(属性 200;since 7.149.0 = 本版;修订上一 tag 的 errorCodeFamily:import_in_flight)"
+    },
+    {
+      "id": "C11",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)",
+      "from": [
+        "errorCode:conflict"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)`(属性 404;since 7.149.0 = 本版;修订上一 tag 的 errorCode:conflict)"
+    },
+    {
+      "id": "C12",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(新提交:认领之前那一次执行席读,或认领这一段 —— 建行认领 createRun、执行放置、续跑输入的写、起跑之前的认领复核 —— 有一次店往返没答出来:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;本请求铸的行已删掉 —— 认领与幂等键随行去,同一个自带 taskId 重发即新提交 —— 什么都没起跑;认领之后的流式腿 = 流的终帧;已绑设备的会话上认领之后那一次执行席读同答;体 state.run_store_unavailable)",
+      "from": [
+        "errorCode:internal.error",
+        "errorCode:device.not_bound"
+      ],
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 修订 `POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(新提交:认领之前那一次执行席读,或认领这一段 —— 建行认领 createRun、执行放置、续跑输入的写、起跑之前的认领复核 —— 有一次店往返没答出来:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;本请求铸的行已删掉 —— 认领与幂等键随行去,同一个自带 taskId 重发即新提交 —— 什么都没起跑;认领之后的流式腿 = 流的终帧;已绑设备的会话上认领之后那一次执行席读同答;体 state.run_store_unavailable)`(属性 503;since 7.149.0 = 本版;修订上一 tag 的 errorCode:internal.error / errorCode:device.not_bound)"
+    },
+    {
+      "id": "C13",
+      "source": "selfMinted.ownerFaceAnswer",
+      "member": "GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner",
+      "text": "自铸 属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变) `GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner` 的属性:200 (the principal header is a label on a deployment without an identity boundary); was 404 not_found.run → 404 not_found.run, same body as a missing run (a caller that names a principal is that principal on a deployment without an identity boundary too); was 200(since 7.149.0)"
+    },
+    {
+      "id": "C14",
+      "source": "selfMinted.ownerFaceAnswer",
+      "member": "session faces · list faces · /metrics family#dev-open-principal-header-not-owner",
+      "from": [
+        "selfMinted.ownerFaceAnswer:GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner"
+      ],
+      "text": "自铸 属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变) 修订 `session faces · list faces · /metrics family#dev-open-principal-header-not-owner`(属性 each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label);since 7.149.0 = 本版;修订上一 tag 的 selfMinted.ownerFaceAnswer:GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner)"
+    }
+  ],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "internal.org_delivery_quota_unreadable",
+        "state.run_store_unavailable"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "errorCodeFamily",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1h"
+      ],
+      "added": [
+        "internal.org_delivery_quota_unreadable",
+        "state.run_store_unavailable"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "engineNotice",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#D.3"
+      ],
+      "added": [
+        "config.read_deny_floor_unkept"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)",
+        "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(停驻子代赎回:认领之前那一次执行席读,或认领之后那一次执行放置的店往返没答出来;认领没有或已回滚,子代仍停着、卡仍待决;体 decide.store_unreachable + taskId)",
+        "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow 决定的投递那一跑在决定落行那一拍已不持宿主会话的认领 —— 心跳停满一窗被收割;决定没落、那一跑没起;与起跑之前认领复核答「没持有」同一只答复:认领在别的 run 上 ⇒ 409 conflict.session_active_run,宿主会话已删 ⇒ 404 resume.session_not_found,否则 409 conflict.claim_lost)",
+        "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow 决定在宿主会话上起的新一跑:建行认领 / 执行放置 / 续跑输入 / 决定落行 / 起跑之前的认领复核有一次店往返没答出来;决定落行那一笔在 wake 腿上同答;现建的行已删掉,子代的卡仍待决;体 state.resume_context_unreadable)",
+        "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(续跑家族、workflow 决定在宿主会话上起的新一跑、停驻子代赎回认领之后提交执行放置读出这条会话此刻不能在本处执行:已放在别的车道 / 写者在别处 / 设备拒;续跑认领的停驻行回到停驻、停驻赎回回滚,卡仍待决,wake 与宿主新一跑现建的行删掉;与认领之前同一只折法、同一只体;体 resume_blocked_by_policy + blockedBy 原码 + 原事实 forkPath / boundLane + retriable)",
+        "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(认领之前那一次执行席读、认领那一笔 —— markResuming / wake 现建行的 createRun —— 或认领之后提交执行放置那一次店往返失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;认领之后那一形续跑认领的停驻行回到认领之前的停驻词、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)",
+        "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)",
+        "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(续跑腿提交放行之后、交给引擎之前那一段 —— 排空 workflow 完成的序号基址现读与落账、通告口落账 —— 店往返没答出来;续跑认领的停驻行回到停驻、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)",
+        "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(停驻 run 上的取消:这张卡行体里自带的属主格与店的属主格不一致 —— 取消只读店的属主格,结算这张卡、驱 run 终局;体 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })",
+        "POST /v1/runs/:id/cancel#parked_card_body_unreadable(停驻 run 上的取消:这张卡的行体读不成检查点 —— 取消只读店的列,结算这张卡、驱 run 终局;体同上)",
+        "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)",
+        "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)",
+        "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(新提交:认领之前那一次执行席读,或认领这一段 —— 建行认领 createRun、执行放置、续跑输入的写、起跑之前的认领复核 —— 有一次店往返没答出来:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;本请求铸的行已删掉 —— 认领与幂等键随行去,同一个自带 taskId 重发即新提交 —— 什么都没起跑;认领之后的流式腿 = 流的终帧;已绑设备的会话上认领之后那一次执行席读同答;体 state.run_store_unavailable)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.modelsContextWindowSource",
+      "at": [
+        "src/trace/self-minted-wire.ts#modelsContextWindowSource"
+      ],
+      "added": [
+        "assumed",
+        "declared"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.modelsRowKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#modelsRowKey"
+      ],
+      "added": [
+        "contextWindowSource"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.ownerFaceAnswer",
+      "at": [
+        "src/trace/self-minted-wire.ts#ownerFaceAnswer"
+      ],
+      "added": [
+        "session faces · list faces · /metrics family#dev-open-principal-header-not-owner"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.rowRefusalWayOut",
+      "at": [
+        "src/trace/self-minted-wire.ts#rowRefusalWayOut"
+      ],
+      "added": [
+        "cancel_run",
+        "newer_worker"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.runResultSideKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#runResultSideKey"
+      ],
+      "added": [
+        "readDenyFloor"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 0
+}

package/dist/plain-string-record.js

@@ -1,70 +0,0 @@
-import { describeValueShape } from "@sema-agent/settings-schema";
-const PROTO_MEMBER_FAULT = 'no member of a declaration may be named "__proto__"';
-export function readPlainStringRecord(v) {
-    if (v === null || typeof v !== "object" || Array.isArray(v))
-        return { ok: false, fault: v === null ? "got null" : Array.isArray(v) ? "got an array" : `got a ${typeof v}` };
-    const proto = Object.getPrototypeOf(v);
-    if (proto !== Object.prototype && proto !== null)
-        return { ok: false, fault: "got an object that is not plain data (a class instance, a Map, process.env, or a record built on a prototype; copy it into a plain object)" };
-    const record = {};
-    const stripped = [];
-    for (const name of Object.getOwnPropertyNames(v)) {
-        const d = Object.getOwnPropertyDescriptor(v, name);
-        let value;
-        let unreadable = false;
-        try {
-            value = d === undefined ? undefined : Object.hasOwn(d, "value") ? d.value : d.get === undefined ? undefined : Reflect.apply(d.get, v, []);
-        }
-        catch {
-            unreadable = true;
-        }
-        if (unreadable || typeof value !== "string") {
-            const valueFault = unreadable ? "could not be read (its getter threw)" : `must be a string — got ${describeValueShape(value)}`;
-            return { ok: false, fault: name === "__proto__" ? `is not allowed (${PROTO_MEMBER_FAULT}) and its value ${valueFault}` : valueFault, member: name };
-        }
-        if (name === "__proto__")
-            stripped.push({ name, fault: PROTO_MEMBER_FAULT });
-        else
-            record[name] = value;
-    }
-    return { ok: true, record, stripped };
-}
-export function declarationKeys(table) {
-    return Object.freeze(Object.keys(table));
-}
-export function splitDeclaration(declaration, table) {
-    const dispositions = table;
-    const engine = {};
-    let pieces;
-    let seatSeen = false;
-    for (const [key, value] of Object.entries(declaration)) {
-        if (value === undefined)
-            continue;
-        const disposition = Object.hasOwn(dispositions, key) ? dispositions[key] : undefined;
-        switch (disposition) {
-            case "engine":
-                engine[key] = value;
-                break;
-            case "seat": {
-                if (seatSeen)
-                    throw new Error("request declaration: two members are marked as pieces in one disposition table");
-                seatSeen = true;
-                const record = value;
-                if (Object.keys(record).length > 0)
-                    pieces = record;
-                break;
-            }
-            case "withheld":
-                break;
-            case undefined:
-                throw new Error(`request declaration: a member the disposition table does not classify (${JSON.stringify(key.slice(0, 40))})`);
-            default: {
-                const unknownDisposition = disposition;
-                void unknownDisposition;
-                throw new Error("request declaration: a disposition outside the closed set");
-            }
-        }
-    }
-    return { engine: engine, ...(pieces === undefined ? {} : { pieces }) };
-}
-//# sourceMappingURL=plain-string-record.js.map