@sema-agent/server 7.148.0 → 7.150.0

package/dist/trace/self-minted-wire.js

@@ -36,15 +36,18 @@ export const SELF_MINTED_WIRE = {
             stall_verdict: { attr: "-", since: "7.148.0" },
         },
     },
+    runResultSideKey: {
+        at: "run 结果顶层侧记键(GET /v1/runs/:id → result · done.result · POST /v1/tasks 200 体顶层 · 账本 done 行 result;<键> → 在场律)",
+        members: {
+            readDenyFloor: { attr: "present-iff the run went ahead while its read-deny rules are not byte-enforced (rows, an execution environment that does not keep the floor, READ_DENY_FLOOR_REQUIRED unset); { code, message } equals that run's engine_notice frame", since: "7.149.0" },
+        },
+    },
     runStallVerdictFace: {
         at: "run 流死亡终帧键 · 会话占用冲突体键",
         members: {
             "GET /v1/runs/:id/events#failed.errorCode(死亡判决的终帧从行合成时恒在场 = 行上的码 run.stalled / run.orphaned;本连接已投账本终帧则不合成)": { attr: "verdict", since: "7.148.0" },
         },
-        retired: {
-            "409 conflict.session_active_run#stale(只为 true 时在场)": { attr: "true-only", since: "7.37.0", until: "7.148.0" },
-            "POST /v1/tasks/stream done.result(conflict.session_active_run)#stale(只为 true 时在场)": { attr: "true-only", since: "7.37.0", until: "7.148.0" },
-        },
+        retired: {},
     },
     sessionMemoryEraseStatus: {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
@@ -57,7 +60,7 @@ export const SELF_MINTED_WIRE = {
             "memory.erasure_selector_mismatch": { attr: 409, since: "7.108.0" },
             "memory.erasure_census_incomplete": { attr: 409, since: "7.108.0" },
             "internal.memory_control_plane_corrupt": { attr: 500, since: "7.108.0" },
-            "request.memory_layer": { attr: 400, revises: ["errorCode:internal.error"], since: "7.148.0" },
+            "request.memory_layer": { attr: 400, since: "7.148.0" },
         },
     },
     askTerminalReason: {
@@ -284,6 +287,31 @@ export const SELF_MINTED_WIRE = {
             waiting: { attr: "always within sandboxCapacity", since: "7.148.0" },
         },
     },
+    listeningLineKey: {
+        at: "stdout 启动协议行 listening(<键> → 在场律)",
+        members: {
+            port: { attr: "always", since: "1.214.2" },
+            bindHost: { attr: "always", since: "1.306.0" },
+            bindHostNote: { attr: "present-iff BIND_HOST unset and the bind was narrowed to loopback (unauthenticated write face)", since: "3.15.0" },
+            boundAddress: { attr: "always", since: "7.150.0" },
+            model: { attr: "always", since: "1.214.2" },
+            brain: { attr: "always", since: "1.214.2" },
+            breakerState: { attr: "always", since: "1.214.2" },
+            session: { attr: "always", since: "1.214.2" },
+            memory: { attr: "always", since: "1.214.2" },
+            instanceId: { attr: "always", since: "1.214.2" },
+            rateLimitPerMin: { attr: "always", since: "1.214.2" },
+            rateLimit: { attr: "always", since: "1.214.2" },
+            maxPrincipalCostUsd: { attr: "always", since: "1.214.2" },
+            costQuota: { attr: "always", since: "1.214.2" },
+            toolResultStore: { attr: "always", since: "1.214.2" },
+            otel: { attr: "always", since: "1.214.2" },
+            perModelKeys: { attr: "always", since: "1.214.2" },
+            sealedModelKeys: { attr: "always", since: "1.214.2" },
+            sealedPoisonedModels: { attr: "always", since: "1.214.2" },
+            workflowRunStore: { attr: "always", since: "1.214.2" },
+        },
+    },
     healthStoreKey: {
         at: "GET /health store",
         members: {
@@ -370,6 +398,14 @@ export const SELF_MINTED_WIRE = {
             supportsThinkingOff: { attr: "always", since: "7.138.0" },
             thinkingLevelMap: { attr: "present-iff declared", since: "7.147.0" },
             defaultThinking: { attr: "present-iff declared", since: "7.148.0" },
+            contextWindowSource: { attr: "present-iff contextWindow is present", since: "7.149.0" },
+        },
+    },
+    modelsContextWindowSource: {
+        at: "GET /v1/models models[].contextWindowSource(present-iff contextWindow)",
+        members: {
+            declared: { attr: "-", since: "7.149.0" },
+            assumed: { attr: "-", since: "7.149.0" },
         },
     },
     modelsRowAnthropicCompatKey: {
@@ -410,6 +446,7 @@ export const SELF_MINTED_WIRE = {
             registeredBy: { attr: "always", since: "7.147.0" },
             registeredAt: { attr: "always", since: "7.147.0" },
             archivedAt: { attr: "present-iff archived", since: "7.147.0" },
+            contentAttestedAt: { attr: "present-iff the registration carries the configuration center's content attestation (settings-schema 25.1.0; the time the center's write path last admitted the project's goal / notes / contextItems under the publisher role)", since: "7.150.0" },
         },
     },
     projectsListBodyKey: {
@@ -470,8 +507,19 @@ export const SELF_MINTED_WIRE = {
         at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)",
         members: {
             "wiring_manifest.mcp[]#authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "GET /v1/sessions/:id/mcp#lastLegMcp.mcp[].authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "GET /v1/capabilities/mcp#servers[].authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
+            "POST /v1/capabilities/mcp/probe#servers[].authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#status.authorization": { attr: "present-iff errorCode unauthorized", since: "7.138.0" },
             "GET /v1/sessions/:id/mcp#servers[].authorization": { attr: "present-iff server unauthorized (this face carries no errorCode)", since: "7.138.0" },
+            "GET /v1/sessions/:id#messages[].details.authorization": { attr: "present-iff details.code unauthorized", since: "7.138.0" },
+            "SSE tool_end#structured.authorization": { attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason", since: "7.138.0" },
+            "GET /v1/runs/:id/events#tool_end.structured.authorization": { attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason", since: "7.138.0" },
+        },
+        retired: {
+            "GET /v1/sessions/:id#messages[].details.authorization.resourceMetadataUrl": { attr: "remote-claimed URL from the endpoint's challenge (deep-scrubbed text)", since: "7.138.0", until: "7.150.0" },
+            "SSE tool_end#structured.authorization(reason 以外的成员)": { attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)", since: "7.138.0", until: "7.150.0" },
+            "GET /v1/runs/:id/events#tool_end.structured.authorization(reason 以外的成员)": { attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)", since: "7.138.0", until: "7.150.0" },
         },
     },
     wiringModProvenance: {
@@ -491,22 +539,22 @@ export const SELF_MINTED_WIRE = {
     fieldConflictReason: {
         at: "400 / 409 / 422 request.field_conflict reason",
         members: {
-            cascade_verify: { attr: "-", revises: ["selfMinted.fieldConflictKind:cascade_verify"], since: "7.148.0" },
-            image_profile: { attr: "-", revises: ["selfMinted.fieldConflictKind:image_profile"], since: "7.148.0" },
-            resume_anchor: { attr: "-", revises: ["selfMinted.fieldConflictKind:resume_anchor"], since: "7.148.0" },
-            system_prompt_fold: { attr: "-", revises: ["selfMinted.fieldConflictKind:system_prompt_fold"], since: "7.148.0" },
-            file_history_restore: { attr: "-", revises: ["selfMinted.fieldConflictKind:file_history_restore"], since: "7.148.0" },
-            skills_disabled: { attr: "-", revises: ["selfMinted.fieldConflictKind:skills_disabled"], since: "7.148.0" },
-            existing_session: { attr: "-", revises: ["selfMinted.fieldConflictKind:existing_session"], since: "7.148.0" },
-            fork_target: { attr: "-", revises: ["selfMinted.fieldConflictKind:fork_target"], since: "7.148.0" },
-            scratchpad_root: { attr: "-", revises: ["selfMinted.fieldConflictKind:scratchpad_root"], since: "7.148.0" },
-            ask_answer: { attr: "-", revises: ["selfMinted.fieldConflictKind:ask_answer"], since: "7.148.0" },
-            policy_person_ask: { attr: "-", revises: ["selfMinted.fieldConflictKind:policy_person_ask"], since: "7.148.0" },
-            plan_edit: { attr: "-", revises: ["selfMinted.fieldConflictKind:plan_edit"], since: "7.148.0" },
-            plan_mode_after: { attr: "-", revises: ["selfMinted.fieldConflictKind:plan_mode_after"], since: "7.148.0" },
-            bound_call_door: { attr: "-", revises: ["selfMinted.fieldConflictKind:bound_call_door"], since: "7.148.0" },
-            remember_decision: { attr: "-", revises: ["selfMinted.fieldConflictKind:remember_decision"], since: "7.148.0" },
-            approval_feedback: { attr: "-", revises: ["selfMinted.fieldConflictKind:approval_feedback"], since: "7.148.0" },
+            cascade_verify: { attr: "-", since: "7.148.0" },
+            image_profile: { attr: "-", since: "7.148.0" },
+            resume_anchor: { attr: "-", since: "7.148.0" },
+            system_prompt_fold: { attr: "fields in fold order from appendSystemPrompt / projectId (the inherited project brief) / settings.outputStyle; count / cap", since: "7.150.0" },
+            file_history_restore: { attr: "-", since: "7.148.0" },
+            skills_disabled: { attr: "-", since: "7.148.0" },
+            existing_session: { attr: "-", since: "7.148.0" },
+            fork_target: { attr: "-", since: "7.148.0" },
+            scratchpad_root: { attr: "fields = cwd (sent) or projectId (inherited from the project), then scratchpadDir when the request's own covers it", since: "7.150.0" },
+            ask_answer: { attr: "-", since: "7.148.0" },
+            policy_person_ask: { attr: "-", since: "7.148.0" },
+            plan_edit: { attr: "-", since: "7.148.0" },
+            plan_mode_after: { attr: "-", since: "7.148.0" },
+            bound_call_door: { attr: "-", since: "7.148.0" },
+            remember_decision: { attr: "-", since: "7.148.0" },
+            approval_feedback: { attr: "-", since: "7.148.0" },
         },
     },
     hooksRefusalReason: {
@@ -606,7 +654,7 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.run_exists": { attr: 409, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
             "POST /v1/tasks|/v1/tasks/stream#replay_first_answer_envelope(同键重放的体 = 首答的信封 + replay: true:终局 = 引擎结果(result 是串),停驻 = 结果 + 回执三键,行还在跑 = 回执三键;流式腿放进 done.result)": { attr: 200, since: "7.142.0" },
-            "POST /v1/tasks|/v1/tasks/stream#replay_bit_one_rule(replay: true ⇔ 200 结局不是本次请求产出的:读行重放 + 在飞合流的跟随方,两腿同读;拒绝永不带位;流式终帧 done.replay = done.result.replay)": { attr: 200, revises: ["selfMinted.submitIdempotency:POST /v1/tasks#replay"], since: "7.148.0" },
+            "POST /v1/tasks|/v1/tasks/stream#replay_bit_one_rule(replay: true ⇔ 200 结局不是本次请求产出的:读行重放 + 在飞合流的跟随方,两腿同读;拒绝永不带位;流式终帧 done.replay = done.result.replay)": { attr: 200, since: "7.148.0" },
         },
     },
     leaderStopFace: {
@@ -806,6 +854,13 @@ export const SELF_MINTED_WIRE = {
             thrownName: { attr: "present-iff the engine named what its row judge saw thrown (non-empty string)", since: "7.144.0" },
         },
     },
+    rowRefusalWayOut: {
+        at: "409 决断类续跑拒体(/decide · /plan_review · /resume;判官判那张卡续不了)wayOut",
+        members: {
+            cancel_run: { attr: "-", since: "7.149.0" },
+            newer_worker: { attr: "-", since: "7.149.0" },
+        },
+    },
     permissionModeVerbBodyKey: {
         at: "POST /v1/runs/:id/permission-mode 200 体(<键> → 在场律)",
         members: {
@@ -928,13 +983,26 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
             "POST /v1/runs/:id/steer#stored_unread_members(run 已终态、铸唤醒卡之前;同一只判;不铸卡;体 resume_blocked_by_policy + blockedBy request.field_invalid + field,不带 retriable)": { attr: 409, since: "7.147.0" },
-            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review|/v1/runs/:id/steer|/v1/runs/:id/permission-mode#resume_context_read_failed(读这条会话的续跑上下文失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;拒在任何状态改动之前,卡仍待决、终态 steer 不铸卡;体 state.resume_context_unreadable)": { attr: 503, revises: ["errorCode:conflict.resume_context_unavailable"], since: "7.148.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review|/v1/runs/:id/steer|/v1/runs/:id/permission-mode#resume_context_read_failed(读这条会话的续跑上下文失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;拒在任何状态改动之前,卡仍待决、终态 steer 不铸卡;体 state.resume_context_unreadable)": { attr: 503, since: "7.148.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(认领之前那一次执行席读、认领那一笔 —— markResuming / wake 现建行的 createRun —— 或认领之后提交执行放置那一次店往返失败:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;认领之后那一形续跑认领的停驻行回到认领之前的停驻词、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)": { attr: 503, since: "7.149.0" },
+            "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(停驻 run 上的取消:这张卡行体里自带的属主格与店的属主格不一致 —— 取消只读店的属主格,结算这张卡、驱 run 终局;体 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })": { attr: 202, since: "7.149.0" },
+            "POST /v1/runs/:id/cancel#parked_card_body_unreadable(停驻 run 上的取消:这张卡的行体读不成检查点 —— 取消只读店的列,结算这张卡、驱 run 终局;体同上)": { attr: 202, since: "7.149.0" },
             "POST /v1/approvals/:sessionId/decide#parked_agent_definition_unavailable(停驻赎回;行上的代理类型不在赎回面委派工具的名册里:逐请求 `agents` 定义 / 停驻后被撤的部署定义 / 名叫 fork 的定义;approve 与 deny 同答;认领回滚、委派工具零调用、卡仍待决;体 decide.agent_definition_unavailable + taskId + rollback)": { attr: 409, since: "7.148.0" },
-            "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, revises: ["selfMinted.endpointFaceStatus:POST /v1/runs/:id/interrupt#text_live(带 text 的体打在本副本在飞的 run 上 = 引擎 steer 档位 now;202 体 { taskId, status, delivery: queued-immediate, messageId, note })"], since: "7.148.0" },
-        },
-        retired: {
-            "POST /v1/runs/:id/interrupt#text_live(带 text 的体打在本副本在飞的 run 上 = 引擎 steer 档位 now;202 体 { taskId, status, delivery: queued-immediate, messageId, note })": { attr: 202, since: "7.52.0", until: "7.148.0" },
-        },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(新提交:认领之前那一次执行席读,或认领这一段 —— 建行认领 createRun、执行放置、续跑输入的写、起跑之前的认领复核 —— 有一次店往返没答出来:库断连 / 拒连 / 超时、缺表 / 权限拒、认不出的库错;本请求铸的行已删掉 —— 认领与幂等键随行去,同一个自带 taskId 重发即新提交 —— 什么都没起跑;认领之后的流式腿 = 流的终帧;已绑设备的会话上认领之后那一次执行席读同答;体 state.run_store_unavailable)": { attr: 503, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(续跑腿提交放行之后、交给引擎之前那一段 —— 排空 workflow 完成的序号基址现读与落账、通告口落账 —— 店往返没答出来;续跑认领的停驻行回到停驻、认领留着,wake 现建的行删掉;卡仍待决;体 state.resume_context_unreadable)": { attr: 503, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow 决定在宿主会话上起的新一跑:建行认领 / 执行放置 / 续跑输入 / 决定落行 / 起跑之前的认领复核有一次店往返没答出来;决定落行那一笔在 wake 腿上同答;现建的行已删掉,子代的卡仍待决;体 state.resume_context_unreadable)": { attr: 503, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow 决定的投递那一跑在决定落行那一拍已不持宿主会话的认领 —— 心跳停满一窗被收割;决定没落、那一跑没起;与起跑之前认领复核答「没持有」同一只答复:认领在别的 run 上 ⇒ 409 conflict.session_active_run,宿主会话已删 ⇒ 404 resume.session_not_found,否则 409 conflict.claim_lost)": { attr: 409, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(停驻子代赎回:认领之前那一次执行席读,或认领之后那一次执行放置的店往返没答出来;认领没有或已回滚,子代仍停着、卡仍待决;体 decide.store_unreachable + taskId)": { attr: 503, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(续跑家族、workflow 决定在宿主会话上起的新一跑、停驻子代赎回认领之后提交执行放置读出这条会话此刻不能在本处执行:已放在别的车道 / 写者在别处 / 设备拒;续跑认领的停驻行回到停驻、停驻赎回回滚,卡仍待决,wake 与宿主新一跑现建的行删掉;与认领之前同一只折法、同一只体;体 resume_blocked_by_policy + blockedBy 原码 + 原事实 forkPath / boundLane + retriable)": { attr: 409, since: "7.149.0" },
+            "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)": { attr: 200, since: "7.149.0" },
+            "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)": { attr: 200, since: "7.149.0" },
+            "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, since: "7.148.0" },
+            "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)": { attr: 404, since: "7.149.0" },
+            "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)": { attr: 404, since: "7.149.0" },
+            "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)": { attr: 200, since: "7.149.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)": { attr: 400, since: "7.149.0" },
+        },
+        retired: {},
     },
     ruleImportReceiptKey: {
         at: "POST /v1/rules/cc-import/redeem 200 回执顶层键(<键> → 在场律;与 POST /v1/rules/local-import/redeem 同形)",
@@ -1003,17 +1071,18 @@ export const SELF_MINTED_WIRE = {
     ownerFaceAnswer: {
         at: "属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变)",
         members: {
-            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#others-owned-session": { attr: "404 resume.session_not_found (requireExistingSession: session does not exist (resume.session_not_found)), same body as a missing session; was 403 auth.forbidden (named caller) / 401 auth.unauthorized (no principal)", revises: ["errorCode:auth.forbidden", "errorCode:auth.unauthorized"], since: "7.148.0" },
+            "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#others-owned-session": { attr: "404 resume.session_not_found (requireExistingSession: session does not exist (resume.session_not_found)), same body as a missing session; was 403 auth.forbidden (named caller) / 401 auth.unauthorized (no principal)", since: "7.148.0" },
             "POST /v1/tasks · /v1/tasks/stream · /v1/runs (sessionId)#ownerless-placed-session": { attr: "404 resume.session_not_found at the owner gate, same body as a missing session (assemblies without an execution seat too); not judged when the session's archive cannot be read", since: "7.148.0" },
-            "POST /v1/assistant/tasks/:id/plan_review#direct-door-valid-proof-others-task": { attr: "401 principal_unverified (principal proof required), same body as a missing row; was 404 not_found.run (task not found)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
-            "GET|PUT /v1/sessions/:id/policy#ownerless-placed-session-non-fleet-non-operator": { attr: "404 not_found.session (session not found), same body as a missing session; was 409 conflict.session_ownerless", revises: ["errorCode:conflict.session_ownerless"], since: "7.148.0" },
-            "run / session read faces#deployment-service-credential-no-principal-users-rows": { attr: "200 on GET /v1/runs/:id · /v1/runs/:id/events · /v1/sessions/:id · /head · /events · /memory-status · /execution-placement (unless SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT=false); was 404, or 401 auth.principal_required where a principal is required", revises: ["errorCode:auth.principal_required", "errorCode:not_found.run", "errorCode:not_found.session"], since: "7.148.0" },
-            "GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner": { attr: "200 (the principal header is a label on a deployment without an identity boundary); was 404 not_found.run", revises: ["errorCode:not_found.run"], since: "7.148.0" },
-            "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", revises: ["errorCode:corrupt_session"], since: "7.148.0" },
+            "POST /v1/assistant/tasks/:id/plan_review#direct-door-valid-proof-others-task": { attr: "401 principal_unverified (principal proof required), same body as a missing row; was 404 not_found.run (task not found)", since: "7.148.0" },
+            "GET|PUT /v1/sessions/:id/policy#ownerless-placed-session-non-fleet-non-operator": { attr: "404 not_found.session (session not found), same body as a missing session; was 409 conflict.session_ownerless", since: "7.148.0" },
+            "run / session read faces#deployment-service-credential-no-principal-users-rows": { attr: "200 on GET /v1/runs/:id · /v1/runs/:id/events · /v1/sessions/:id · /head · /events · /memory-status · /execution-placement (unless SERVICE_TOKEN_ACTS_FOR_DEPLOYMENT=false); was 404, or 401 auth.principal_required where a principal is required", since: "7.148.0" },
+            "GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner": { attr: "404 not_found.run, same body as a missing run (a caller that names a principal is that principal on a deployment without an identity boundary too); was 200", since: "7.149.0" },
+            "session faces · list faces · /metrics family#dev-open-principal-header-not-owner": { attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)", since: "7.149.0" },
+            "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", since: "7.148.0" },
             "run faces#row-without-owner-cell-no-fleet-no-operator": { attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)", since: "7.148.0" },
-            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", revises: ["errorCode:tool_approval.not_pending", "selfMinted.notPendingCause:unknown_or_other_replica"], since: "7.148.0" },
-            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", revises: ["errorCode:tool_approval.not_pending", "selfMinted.notPendingCause:unknown_or_other_replica"], since: "7.148.0" },
-            "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
+            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
+            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
+            "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", since: "7.148.0" },
         },
     },
     sessionRewindFilesWire: {
@@ -1102,7 +1171,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
             "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
-            "404 not_found.run#a*/wa* id(compact · detach · 子代动词口;各 run 口的非属主臂)": { attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)", revises: ["errorCode:not_found.run"], since: "7.148.0" },
+            "404 not_found.run#a*/wa* id(compact · detach · 子代动词口;各 run 口的非属主臂)": { attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)", since: "7.148.0" },
             "409 decide.row_unrevivable#no_root_anchor": { attr: "ends: deny it to close the card (the agent then ends as failed)", since: "7.136.0" },
             "400 request.field_invalid#mcpServers.over_cap(受理口 · POST /v1/capabilities/mcp/probe 同句)": { attr: "head: <field> has <count> entries — at most <cap> are accepted", since: "7.136.0" },
             "400 request.field_invalid#a2aPeers.over_cap": { attr: "tail: 声明列表拒绝骨架的句尾(与 mcpServers 共用 request-declaration-refusal)", since: "7.136.0" },
@@ -1113,7 +1182,7 @@ export const SELF_MINTED_WIRE = {
             "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
             "400 request.field_invalid#images.not_array": { attr: "head: images is <shape>, not an array of image entries", since: "7.148.0" },
-            "400 request.field_invalid#images[i].not_object": { attr: "head: images[i] is <shape>, not an image entry (an object)", revises: ["errorCode:internal.error"], since: "7.148.0" },
+            "400 request.field_invalid#images[i].not_object": { attr: "head: images[i] is <shape>, not an image entry (an object)", since: "7.148.0" },
             "400 request.field_invalid#images[i].<key>.unusable": { attr: "<field> is not a usable declaration — must be a string (…) — got <shape>. The request is refused rather than handing the engine an image it cannot read: … Fix the entry (an image is either { data, mimeType } or { url }).", since: "7.148.0" },
             "400 request.body_shape#images[i].unknown_key": { attr: "body: unrecognized key(s) on an image entry — refused rather than dropped …; Accepted: <keys of the form>", since: "7.148.0" },
             "400 request.field_invalid#settings.env.compose": { attr: "settings.env cannot be composed into a child process environment — <the engine's verdict, sanitized>. The request is refused rather than accepted into a task whose hooks and shell would fail to start: fix or remove the variable concerned", since: "7.148.0" },
@@ -1220,12 +1289,13 @@ export const SELF_MINTED_WIRE = {
         },
     },
     deviceProtocolRevision: {
-        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)",
+        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词;零加词的语义修订 → 变更名)",
         members: {
             1: { attr: "base", since: "7.51.0" },
             2: { attr: "+liveness_no_output", since: "7.133.0" },
             3: { attr: "+name_too_long", since: "7.137.0" },
             4: { attr: "+symlink_loop", since: "7.143.0" },
+            5: { attr: "paths-unfolded", since: "7.150.0" },
         },
     },
     hookNonBlockingFailureReason: {

package/dist/trace/tool-card.d.ts

@@ -0,0 +1,3 @@
+/** 一张工具结构化卡出门(`redact` = 调用面的整值脱敏器,环 / 深度守卫在它里面)。 */
+export declare function projectToolCard(card: unknown, redact: (value: unknown) => unknown): unknown;
+//# sourceMappingURL=tool-card.d.ts.map

package/dist/trace/tool-card.js

@@ -0,0 +1,24 @@
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
+import { projectToolStructured } from "./tool-output-media.js";
+const TOOL_CARD_RECORDS = {
+    unauthorized: { member: "authorization", project: projectMcpAuthorization },
+};
+const isPlainRecord = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+function recordOf(card) {
+    const code = card.code;
+    if (typeof code !== "string")
+        return undefined;
+    const records = TOOL_CARD_RECORDS;
+    const record = Object.hasOwn(records, code) ? records[code] : undefined;
+    return record !== undefined && Object.hasOwn(card, record.member) ? record : undefined;
+}
+export function projectToolCard(card, redact) {
+    const record = isPlainRecord(card) ? recordOf(card) : undefined;
+    if (!isPlainRecord(card) || record === undefined)
+        return projectToolStructured(card, redact);
+    const face = record.project(card[record.member]);
+    const rest = projectToolStructured(Object.fromEntries(Object.entries(card).filter(([k]) => k !== record.member)), redact);
+    const kept = isPlainRecord(rest) ? rest : {};
+    return Object.fromEntries(Object.keys(card).flatMap((k) => (k === record.member ? (face === undefined ? [] : [[k, face]]) : Object.hasOwn(kept, k) ? [[k, kept[k]]] : [])));
+}
+//# sourceMappingURL=tool-card.js.map

package/dist/trace/tool-output-media.d.ts

@@ -7,7 +7,8 @@ export declare function projectToolOutput(output: unknown): unknown;
  * 媒体卡座位的**唯一一只遍历**(与 {@link projectToolOutput} 同律):媒体卡逐成员过 `redact`,`file` 里 `base64` 逐字、其余成员照脱;
  * 其它一切整只过 `redact`。保键序(逐键映射),不改入参。
  *
- * 形判与遍历只此一只,**脱敏器由调用面给**(「什么算该脱」是各面自己的事,「字节座位不过它」是这里的事):
+ * 形判与遍历只此一只,**脱敏器由调用面给**(「什么算该脱」是各面自己的事,「字节座位不过它」是这里的事)。调用它的只有工具卡的唯一读者
+ * `trace/tool-card.ts` 的 `projectToolCard`(卡上挂着的有处置表的记录先经记录的投影,其余部分交给本遍历),两面经它到这里:
  *  · `tool_end` 活面 / 持久面(`toolEndEventData` 经 `trace/project.ts`):凭据脱敏 `redactDeep`;
  *  · 会话存档读面(`audit.ts` 的 `toolResult.details` 叶):模型文本段脱敏的深扫(`redactDeepWith(v, redactModelText)`)。
  * `redact` 必须是整值→整值的纯函数(环 / 深度守卫在它里面,遍历不重做);非媒体卡原样交给它,所以非媒体卡的读数就是调用面自己的深扫。

package/dist/unattended-permission-mode.d.ts

@@ -17,7 +17,7 @@
  * ## 为什么是这一形(core §4.6e 推荐形逐条)
  *  · **读整体,不读 `askClass`**:一问可以同属几类(探针问与写保护并存、组织裁决与 hook 并存),`askClass` 只是表序第一个;集里任一类
  *    不答 ⇒ 整问不答。
- *  · **缺席 = 不答的类**:没盖 `origin` 的站(共享制品读确认,KL-1214-a)、部署自铸的请求、7.37.0 之前 park 的行续跑(KL-1214-b,续跑不补)
+ *  · **缺席 = 不答的类**:没盖 `origin` 的站(共享制品读确认,[ref])、部署自铸的请求、7.37.0 之前 park 的行续跑([ref],续跑不补)
  *    都不带类 ⇒ 不答。
  *  · **答集只 `ordinary`**:引擎可放行的类(core `releasableAskClassesFor(face)`,按问的面读 —— 哪些类、哪一面放得行以引擎的表为准,本注不抄名单)里除 `ordinary`
  *    之外的保护类与 `mode`(plan 的写问)留给人;可放行类之外的类(权威为人提的问)恒不答。function approver 的 yes 是「这一次调用的答」—— 它连 `requiresRealApproval`

package/dist/web-admin-client/apply-effective.d.ts

@@ -134,7 +134,7 @@ export declare const isNoCenterEffective: (eff: EffectiveConfig) => boolean;
  */
 export declare function collabTemplatesNotExecuted(eff: Pick<EffectiveConfig, "collab">): string[];
 /**
- * DESIGN-278 §5 S2([ref])—— center 这份 effective **当前在管**哪些 `ServiceConfig` 键(配置目录端点
+ * [ref] §5 S2([ref])—— center 这份 effective **当前在管**哪些 `ServiceConfig` 键(配置目录端点
  * `GET /v1/config/catalog` 判 `effectiveLane` 的 center 半场)。
  *
  * 判据与各消费腿**同源**,不自铸第二份:

package/dist/web-admin-client/apply-effective.js

@@ -5,7 +5,8 @@ import { DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys,
 import { applyAutoCompactWindow, buildModelCostKey, isRosterGateArmed, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { NAME_TABLE_BEHAVIOR, retiredLeftOutEntries } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
-import { ASSUMED_CONTEXT_WINDOW } from "../model-context-window.js";
+import { resolveContextWindow } from "../model-context-window.js";
+import { warnAssumedContextWindows } from "../context-window-notice.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
 import { validateCommandRules } from "../runtime-governance.js";
 import { stageLimits } from "./stage-limits.js";
@@ -27,7 +28,7 @@ function envDerivedModel(config) {
     }
     return m;
 }
-function toModel(m, envDefaults = {}, logger) {
+function toModel(m, window, envDefaults = {}, logger) {
     const thinkingDefault = envDefaults.defaultThinking;
     const declared = readModelCompat(m.api, m.compat);
     if (!declared.ok)
@@ -41,7 +42,7 @@ function toModel(m, envDefaults = {}, logger) {
         api: m.api,
         baseUrl: m.baseUrl ?? "",
         ...mintCapabilityKeys({ reasoning: m.reasoning, vision: m.vision }),
-        contextWindow: m.contextWindow ?? envDefaults.contextWindow ?? ASSUMED_CONTEXT_WINDOW,
+        contextWindow: window.window,
         maxTokens: m.maxTokens ?? envDefaults.maxTokens ?? 4096,
         ...(m.charsPerToken !== undefined || envDefaults.charsPerToken !== undefined ? { charsPerToken: m.charsPerToken ?? envDefaults.charsPerToken } : {}),
         ...buildModelCostKey(m.cost),
@@ -96,6 +97,7 @@ function envModelPlaneOf(config) {
     if (snap === undefined) {
         snap = {
             models: { ...config.models },
+            contextWindowSources: { ...config.contextWindowSources },
             model: config.envModel,
             modelApiKeyEnv: { ...config.modelApiKeyEnv },
             modelApiKeys: { ...config.modelApiKeys },
@@ -192,6 +194,8 @@ export function applyEffective(config, eff, logger, opts) {
     }
     if (mp !== undefined)
         warnDanglingEnvBindings(config, staged.modelPlaneGroup.envBindingsDangling ?? [], logger);
+    if (mp !== undefined)
+        warnAssumedContextWindows(config, logger, { envTableIsPlaceholder: isRosterGateArmed(config.webAdmin) });
     if (staged.approvalGate.next !== undefined)
         logger?.info("web_admin_runtime", { version: staged.version, approvalRequire: staged.approvalGate.next });
     if (Object.keys(staged.hot.infoLine).length > 0)
@@ -217,9 +221,9 @@ function declareCandidateWithheldEnv(seats, modelApiKeyEnv, version) {
     if (handedOn.length === 0)
         return;
     withdrawServerWithheldEnv();
-    throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv names a variable a name-list env knob hands on — ` +
+    throw new Error(`model catalog (effective v${version}): a model entry's apiKeyEnv makes a variable a name-list env knob hands on one of this deployment's own credentials (by its name, or by its value under another name) — ` +
         handedOn.map((h) => `env ${h.knob} hands on ${h.name}, which this candidate makes ${h.problem}`).join("; ") +
-        `; or point that entry's apiKeyEnv at a variable no name list hands on. The name lists are read at boot (changing one takes a restart); ` +
+        `; or point that entry's apiKeyEnv at a variable that no name list hands on and whose value no handed-on variable holds. The name lists are read at boot (changing one takes a restart); ` +
         `the candidate is refused whole and the current generation keeps serving (entries: ${entries}).`);
 }
 function commitStaged(config, staged) {
@@ -231,6 +235,7 @@ function commitStaged(config, staged) {
         config.droppedCatalogEntries = mp.droppedCatalogEntries;
         mutateInPlace(config.modelQuotaWeights, mp.quotaWeights);
         mutateInPlace(config.models, mp.models);
+        config.contextWindowSources = mp.contextWindowSources;
         config.model = mp.model;
         mutateInPlace(config.roles, mp.roles);
         mutateInPlace(config.tiers, mp.activeTiers);
@@ -254,7 +259,7 @@ function commitStaged(config, staged) {
 }
 export const MODEL_PLANE_DOMAINS = ["models"];
 const MODEL_PLANE_SURFACES = {
-    models: ["models", "model", "modelRefusals", "droppedCatalogEntries", "modelApiKeyEnv", "modelApiKeys", "modelQuotaWeights", "roles", "tiers", "atMention"],
+    models: ["models", "contextWindowSources", "model", "modelRefusals", "droppedCatalogEntries", "modelApiKeyEnv", "modelApiKeys", "modelQuotaWeights", "roles", "tiers", "atMention"],
 };
 const MODEL_PLANE_GROUP_KEYS = MODEL_PLANE_DOMAINS.flatMap((d) => MODEL_PLANE_SURFACES[d]);
 export function withModelPlaneOf(target, source) {
@@ -351,6 +356,7 @@ function stageEnvModelPlane(config) {
         stages: {
             models: {
                 ...snap,
+                contextWindowSources: { ...snap.contextWindowSources },
                 modelApiKeyEnv: { ...snap.modelApiKeyEnv },
                 modelApiKeys: { ...snap.modelApiKeys },
                 modelRefusals: { ...snap.modelRefusals },
@@ -392,14 +398,18 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
             return refuse(REFUSED_NAME_MINTED_CODE, malformedDroppedCarrierRefusal(verdict.malformed), { entries: [...verdict.malformed] });
         const usable = verdict.usable;
         const models = {};
+        const contextWindowSources = {};
         const modelApiKeyEnv = {};
         const modelApiKeys = {};
         const envModel = envDerivedModel(config);
-        const envDefaults = { maxTokens: envModel.maxTokens, contextWindow: envModel.contextWindow, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, api: envModel.api, compat: envModel.compat };
+        const envDefaults = { maxTokens: envModel.maxTokens, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, api: envModel.api, compat: envModel.compat };
+        const envWindow = { window: envModel.contextWindow, source: config.envModelContextWindowSource };
         for (const m of usable) {
             if (m.baseUrl)
                 logger?.warn("web_admin_model_base_url", { model: m.name, baseUrl: buildDisplaySafeUrl(m.baseUrl), hint: "registry-directed gateway override — this model's key authenticates AGAINST THIS URL" });
-            models[m.name] = toModel(m, envDefaults, logger);
+            const window = resolveContextWindow(m.contextWindow, envWindow);
+            models[m.name] = toModel(m, window, envDefaults, logger);
+            contextWindowSources[m.name] = window.source;
             if (m.sealedApiKey) {
                 const s = m.sealedApiKey;
                 if (!sealedKeys) {
@@ -482,8 +492,10 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
                     throw new Error(`catalog default: unknown kind ${JSON.stringify(unhandled)}`);
                 }
             }
-            if (picked !== undefined)
+            if (picked !== undefined) {
                 models.default = models[picked.name];
+                contextWindowSources.default = contextWindowSources[picked.name];
+            }
         }
         const nextView = { ...config, models, tiers: activeTiers, modelRefusals: verdict.refused };
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
@@ -507,6 +519,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         const envBindingsDangling = danglingEnvBindingsOf(envPlane.roles, centerRoles, envModelTableOf(config), expandTiers(models, activeTiers) ?? models);
         const plane = {
             models,
+            contextWindowSources,
             model: defaultModel,
             modelApiKeyEnv,
             modelApiKeys,

package/dist/web-admin-client/effective-keys.d.ts

@@ -8,7 +8,7 @@
  *  2. 三张登记表(非域白名单 / 不消费表 / 远端专属表)每行**必须带理由**;行的成立性由对账门**双向**钉——登记了
  *     却不成立(死账)与成立了却没登记(半接线)都红,理由失效之日格子自己翻红(墓碑),禁裸豁免。
  *  3. schema 侧的数据(`DOMAINS` / `PORTABLE_DOMAINS` / zod shape)一律由对账门**读 dist**,绝不抄进这里
- *     (平行副本病是 DESIGN-282 §0 的病理定性,本文件只登记 server 自己那一侧)。
+ *     (平行副本病是 [ref] §0 的病理定性,本文件只登记 server 自己那一侧)。
  */
 import type { EffectiveConfig } from "./types.js";
 /** EffectiveConfig 的全部顶层键(信封 + 域 + 非域白名单键),类型级绑定见上。 */

package/dist/web-admin-client/skills-mcp.d.ts

@@ -69,7 +69,7 @@ export declare function resolveMcpServers(mcp: {
  *  [ref]:alias 窗撤销,单键命中(同 `skillsForScenario`)。 */
 export declare function mcpForScenario(center: CenterMcp | undefined, scenario: string): McpServerSpec[] | undefined;
 /**
- * DESIGN-269 §2.1 —— resolve the deployment's A2A peers (the `a2a` domain: `config.d/a2a.json` on the local leg, `/effective.a2a` on the
+ * [ref] §2.1 —— resolve the deployment's A2A peers (the `a2a` domain: `config.d/a2a.json` on the local leg, `/effective.a2a` on the
  * center leg — one declaration seat, both legs read through the contract) into core `A2aServerSpec`s + the scenarios each applies to. Exact sibling of {@link resolveMcpServers}, same three rules:
  *   · header-NAME refs → real values from THIS service's env (the secret boundary is unchanged — the center
  *     never holds the bearer), registered on `desk` under `rosterLease` (`mintDeclaration`, only for a peer that mounts); the spec carries the minted