@sema-agent/server 7.149.0 → 7.150.0

package/dist/tool-approval.js

@@ -115,10 +115,28 @@ const FS_WRITE_TOOLS = pathConfinableWriteToolNames();
 function sessionAllowCategory(toolName) {
     return FS_WRITE_TOOLS.has(toolName) ? "fs-write" : `tool:${toolName}`;
 }
-function sessionAllowKey(owner, sessionId, incarnation, category, binding) {
-    if (!sessionId || !incarnation)
-        return undefined;
-    return JSON.stringify([owner, sessionId, incarnation, category, binding.kind === "bound" ? binding.digest : null]);
+function sessionAllowKey(owner, seat, category, binding) {
+    return JSON.stringify([owner, seat.sessionId, seat.incarnation, category, binding.kind === "bound" ? binding.digest : null]);
+}
+function sessionAllowSeatOf(leg) {
+    return leg.sessionId && leg.incarnation ? { sessionId: leg.sessionId, incarnation: leg.incarnation } : undefined;
+}
+function liveSessionAnswer(facts, leg) {
+    const home = standingAnswerHome(facts);
+    switch (home) {
+        case "none":
+            return { home: "none", occupantUnreadable: false };
+        case "seat": {
+            const seat = sessionAllowSeatOf(leg);
+            return seat !== undefined ? { home: "seat", seat } : { home: "none", occupantUnreadable: Boolean(leg.sessionId) };
+        }
+        case "server_store":
+            return leg.sessionId ? { home: "server_store", sessionId: leg.sessionId } : { home: "none", occupantUnreadable: false };
+        default: {
+            const unhandled = home;
+            throw new Error(`unhandled standing-answer home: ${String(unhandled)}`);
+        }
+    }
 }
 function askStandingAnswerFacts(req, governanceForced, deploymentListAsks) {
     const classes = screenAskClassMembers(req.askClass, req.classes)?.classes;
@@ -196,8 +214,8 @@ function pendingEntryStandingAnswerFacts(entry) {
         deploymentListQuestion: entry.deploymentListQuestion === true,
     };
 }
-function projectDecisionFacts(facts, frame, card) {
-    const rememberRefused = standingAnswerHome(facts) === "none";
+function projectDecisionFacts(facts, leg, frame, card) {
+    const rememberRefused = liveSessionAnswer(facts, leg).home === "none";
     if (frame !== undefined) {
         if (facts.requiresRealApproval)
             frame.requiresRealApproval = true;
@@ -256,7 +274,7 @@ function livePendingRowOf(e) {
         ...(e.requiresRealApproval ? { requiresRealApproval: true } : {}),
         ...(e.governanceForced ? { governanceForced: true } : {}),
         ...(listFrame.mandated === true ? { mandated: true } : {}),
-        ...(standingAnswerHome(pendingEntryStandingAnswerFacts(e)) === "none" ? { rememberRefused: true } : {}),
+        ...(liveSessionAnswer(pendingEntryStandingAnswerFacts(e), e).home === "none" ? { rememberRefused: true } : {}),
         ...(listFrame.mandate !== undefined ? { mandate: listFrame.mandate } : {}),
         ...(listFrame.origin !== undefined ? { origin: listFrame.origin } : {}),
         ...(listFrame.type === "approval_request" && listFrame.liveFactsUnknown === true ? { liveFactsUnknown: true } : {}),
@@ -959,8 +977,8 @@ export class ToolApprovalCoordinator {
         const sessionId = origin.sessionId;
         if (!sessionId)
             return false;
-        const liveKey = sessionAllowKey(origin.owner, sessionId, origin.incarnation, sessionAllowCategory(req.toolName), facts.grantBinding);
-        const live = liveKey !== undefined && this.allowAllSessions.has(liveKey);
+        const seat = sessionAllowSeatOf(origin);
+        const live = seat !== undefined && this.allowAllSessions.has(sessionAllowKey(origin.owner, seat, sessionAllowCategory(req.toolName), facts.grantBinding));
         const durable = !live && facts.grantBinding.kind === "none" && (await this.durableGrantHas(sessionId, req.toolName));
         if (!live && !durable)
             return false;
@@ -1330,7 +1348,7 @@ export class ToolApprovalCoordinator {
             ...(askReasonsOfReq !== undefined ? { askReasons: askReasonsOfReq } : {}),
             ...(governanceForced ? { governanceForced: true } : {}),
             ...(req.mandated === true ? { mandated: true } : {}),
-            ...(standingAnswerHome(askStandingAnswerFacts(req, governanceForced, deploymentListAsks)) === "none" ? { rememberRefused: true } : {}),
+            ...(liveSessionAnswer(askStandingAnswerFacts(req, governanceForced, deploymentListAsks), origin).home === "none" ? { rememberRefused: true } : {}),
             ...(typeof req.boundGrantDigest === "string" ? { boundGrantDigest: req.boundGrantDigest, ...(req.boundGrants !== undefined ? { boundGrants: req.boundGrants } : {}) } : {}),
             ...(noRulingCause !== undefined ? { classifierNoRuling: noRulingCause } : {}),
             ...(grantAbsence !== undefined ? { boundGrantAbsence: grantAbsence } : {}),
@@ -1897,7 +1915,7 @@ export class ToolApprovalCoordinator {
             grantBinding: entryGrantBinding,
             classes: entryClasses,
             ...(entryDeploymentListQuestion ? { deploymentListQuestion: true } : {}),
-        }), frame, cardForFrame);
+        }), origin, frame, cardForFrame);
         const cardFrame = askId !== undefined && cardForFrame !== undefined
             ? buildApprovalRequestFrame({ askId, taskId: origin.taskId, approvalId: wireApprovalId, card: cardForFrame, expiresAtMs: persistedExpiresAtMs, nowMs: Date.now(), live: frame })
             : undefined;
@@ -1944,7 +1962,7 @@ export class ToolApprovalCoordinator {
                     if (s.requiresRealApproval === true)
                         continue;
                     s.requiresRealApproval = true;
-                    const card = projectDecisionFacts(pendingEntryStandingAnswerFacts(s), s.frame, s.cardFrame?.card);
+                    const card = projectDecisionFacts(pendingEntryStandingAnswerFacts(s), s, s.frame, s.cardFrame?.card);
                     if (s.cardFrame !== undefined && card !== undefined && card !== s.cardFrame.card)
                         s.cardFrame = { ...s.cardFrame, card };
                 }
@@ -2097,11 +2115,10 @@ export class ToolApprovalCoordinator {
     }
     recordDeploymentListAnswer(decided, entry, judgedOwner, parsed, principal, eligibility) {
         const store = this.sessionGrants;
-        const sessionId = entry.sessionId;
-        if (parsed.value !== "allow_session" || !sessionId || store === undefined)
-            return decided;
-        if (standingAnswerHome(pendingEntryStandingAnswerFacts(entry)) !== "server_store")
+        const answer = liveSessionAnswer(pendingEntryStandingAnswerFacts(entry), entry);
+        if (parsed.value !== "allow_session" || answer.home !== "server_store" || store === undefined)
             return decided;
+        const sessionId = answer.sessionId;
         return (async () => {
             const result = await decided;
             if (result.status !== 200)
@@ -2781,25 +2798,11 @@ export class ToolApprovalCoordinator {
     }
     finishRespond(entry, judgedOwner, parsed, opts) {
         let rememberApplied;
-        const home = standingAnswerHome(pendingEntryStandingAnswerFacts(entry));
-        let grantable;
-        switch (home) {
-            case "seat":
-                grantable = true;
-                break;
-            case "none":
-            case "server_store":
-                grantable = false;
-                break;
-            default: {
-                const unhandled = home;
-                throw new Error(`unhandled standing-answer home: ${String(unhandled)}`);
-            }
-        }
         if (parsed.value === "allow_session") {
-            const grantKey = grantable ? sessionAllowKey(judgedOwner, entry.sessionId, entry.incarnation, sessionAllowCategory(entry.toolName), entry.grantBinding) : undefined;
-            rememberApplied = grantKey !== undefined;
-            if (grantKey !== undefined) {
+            const answer = liveSessionAnswer(pendingEntryStandingAnswerFacts(entry), entry);
+            rememberApplied = answer.home === "seat";
+            if (answer.home === "seat") {
+                const grantKey = sessionAllowKey(judgedOwner, answer.seat, sessionAllowCategory(entry.toolName), entry.grantBinding);
                 if (this.allowAllSessions.size >= MAX_ALLOW_SESSIONS) {
                     const oldest = this.allowAllSessions.values().next().value;
                     if (oldest !== undefined)
@@ -2807,7 +2810,7 @@ export class ToolApprovalCoordinator {
                 }
                 this.allowAllSessions.add(grantKey);
             }
-            else if (grantable && entry.sessionId) {
+            else if (answer.home === "none" && answer.occupantUnreadable) {
                 defaultLogger.warn("session_grant_refused_occupant_unreadable", { sessionId: entry.sessionId, toolName: entry.toolName });
             }
         }
@@ -2880,7 +2883,8 @@ export class ToolApprovalCoordinator {
             grantBinding: { kind: "unreadable" },
             ...(card.classes !== undefined ? { classes: card.classes } : {}),
         };
-        const rememberRefused = standingAnswerHome(pendingEntryStandingAnswerFacts(facts)) === "none";
+        const leg = row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {};
+        const rememberRefused = liveSessionAnswer(pendingEntryStandingAnswerFacts(facts), leg).home === "none";
         const cardFrame = (card.rememberRefused === true) === rememberRefused
             ? replayFrame
             : { ...replayFrame, card: rememberRefused ? { ...card, rememberRefused: true } : (({ rememberRefused: _stale, ...rest }) => rest)(card) };
@@ -2911,7 +2915,7 @@ export class ToolApprovalCoordinator {
             owner: row.owner,
             ownerReadSeq: this.rowReadSeq,
             executionLane: row.executionLane,
-            ...(row.sessionId !== row.taskId ? { sessionId: row.sessionId } : {}),
+            ...leg,
             ...(card.fromSubagent === true ? { originTaskId: row.sourceSessionId } : {}),
             toolName: card.toolName,
             ...facts,

package/dist/trace/engine-notice-wire.d.ts

@@ -1,3 +1,4 @@
+import { projectMcpAuthorization } from "../mcp-authorization-face.js";
 /**
  * 上 wire 的通告码 —— **显式闭集常量表**(设计稿 ①,起步三码;今天的码数以本常量自身为准——
  * 在散文里抄数字必陈腐,codex 5.65 增量批 R1-[low] 实逮:上一句曾写「今天九码」而表里是十条。
@@ -108,6 +109,19 @@ export declare function redactNoticeMessage(message: unknown): string;
  * 交中和形,空白 / 超长的条目两只码不同)。其余字段、其余码原样。
  */
 export declare function redactNoticeRuleText(code: string, detail: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
+/**
+ * 通告 `detail` 里**平铺着一条有处置表的记录**的码:码 → 那条记录的成员名与出门投影(一张表,不在 {@link engineNoticeEventData} 里写分支)。
+ * 记录成员只经那只投影出门(结构位:不过 {@link sanitizeWireText} 的脱敏与截断 —— 结构位的形与长由记录的属主判);detail 的其余成员照旧经
+ * {@link sanitizeNoticeDetail},合并按引擎 detail 的原键序。投影答 `undefined`(`reason` 出闭集 / 缺席)⇒ 记录成员整组缺席(在场而读不出由表的丢弃口计一次),
+ * 与状态面「整格缺席」同一失败方向。
+ * 运维日志腿(`boot/runner-deps.ts` 的转发席)不读这张登记:日志答「发生了什么」(给运维,整行过日志行的出口座),wire 答「用户拿到什么」—— 两个问题,两个读者。
+ */
+export declare const NOTICE_DETAIL_RECORDS: {
+    readonly "mcp.authorization_required": {
+        readonly members: readonly string[];
+        readonly project: typeof projectMcpAuthorization;
+    };
+};
 export declare function engineNoticeEventData(notice: {
     code: string;
     message: string;

package/dist/trace/engine-notice-wire.js

@@ -2,6 +2,7 @@ import { uuidv7 } from "@sema-agent/core";
 import { redactSecrets } from "./redact.js";
 import { redactListEntry } from "../list-entry-display.js";
 import { recordFailOpen } from "../observability/fail-open.js";
+import { MCP_AUTHORIZATION_MEMBERS, projectMcpAuthorization } from "../mcp-authorization-face.js";
 export const ENGINE_NOTICE_WIRE_CODES = [
     "memory.session_polluted",
     "memory.harvest_quarantined",
@@ -136,11 +137,27 @@ export function redactNoticeRuleText(code, detail) {
     });
     return { ...detail, [at.array]: redacted };
 }
+export const NOTICE_DETAIL_RECORDS = {
+    "mcp.authorization_required": { members: MCP_AUTHORIZATION_MEMBERS, project: projectMcpAuthorization },
+};
+function noticeDetailOf(code, detail) {
+    const records = NOTICE_DETAIL_RECORDS;
+    const record = Object.hasOwn(records, code) ? records[code] : undefined;
+    if (record === undefined || detail === undefined)
+        return sanitizeNoticeDetail(redactNoticeRuleText(code, detail));
+    const own = (key) => record.members.includes(key);
+    const face = { ...record.project(Object.fromEntries(Object.entries(detail).filter(([k]) => own(k)))) };
+    const rest = sanitizeNoticeDetail(redactNoticeRuleText(code, Object.fromEntries(Object.entries(detail).filter(([k]) => !own(k)))));
+    return Object.fromEntries(Object.keys(detail).flatMap((k) => {
+        const from = own(k) ? face : rest;
+        return Object.hasOwn(from, k) ? [[k, from[k]]] : [];
+    }));
+}
 export function engineNoticeEventData(notice, sessionId, nowMs, eventId) {
     return {
         code: notice.code,
         message: redactNoticeMessage(notice.message).slice(0, NOTICE_TEXT_MAX),
-        detail: sanitizeNoticeDetail(redactNoticeRuleText(notice.code, notice.detail)),
+        detail: noticeDetailOf(notice.code, notice.detail),
         sessionId,
         ts: nowMs,
         eventId,

package/dist/trace/project.d.ts

@@ -217,7 +217,7 @@ export declare function toolStartEventData(ev: {
  * `done` 永远到不了、重连恒复现同一处),而 `gate-outcome-defective` 那一格还不涨。
  *
  * ⇒ 兑现方式从「枚举」换成**结构**:任何逃出投影的异常同走既有的那一口 report + withhold。规则因此变少
- * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」)。core 7.51.0 起筛本身对任意 JSON 形不抛(KL-1731-a:只覆盖 JSON ——
+ * (不是「守住已知的 N 种坏形」而是「坏字节一律 withhold」)。core 7.51.0 起筛本身对任意 JSON 形不抛([ref]:只覆盖 JSON ——
  * 访问器 / Proxy 这类非 JSON 值仍可能抛),本仓此前叠在筛前的具名形门与成员门(第二读法)随之退役,诊断串就是筛给的缺陷句。
  * ⛔ **刻意不动**「先脱敏后截断」的次序:截断在前会把跨界的密钥切成半截明文留在输出里,而且它只治
  * `note` 一条叶(`approver` 同病)—— 那是给一个类打两个特判,正是本仓要消掉的形。
@@ -294,7 +294,8 @@ export declare function reasoningEndEventData(ev: Record<string, unknown>): Segm
  *  can never appear here) — SAME UNTRUSTED RAW contract as `output` (a card carries `originalFile`/stdout bodies),
  *  so it gets the same deep redaction before it is persisted or echoed — except a media card's `file.base64` (image / document
  *  cards: the second encoding of the same bytes the `output` block carries), which, like the block's `data`, is an encoding of
- *  bytes and not text ({@link projectToolStructured}; the durable face drops it in the ledger confluence). `label`(core 展示名,同 tool_start 的
+ *  bytes and not text; a card that carries a record with a disposition table (an MCP authorization failure card's `authorization`) has that member
+ *  projected by the record's table ({@link projectToolCard}, the one reader of a tool card — session history reads `toolResult.details` with it too; the durable face drops the media bytes in the ledger confluence). `label`(core 展示名,同 tool_start 的
  *  label 待遇 verbatim)白名单排查(2026-07-24)补齐进函数本体——此前外包给调用点各自手动拼接,7 处只有
  *  3 处记得拼,resume leg + ledger-sink 落盘两处漏了,持久化记录本身缺 label 一写盘就永久追不回来。 */
 export declare function toolEndEventData(ev: {
@@ -333,7 +334,7 @@ export declare function toolEndEventData(ev: {
  *  · `toolCallId` / `toolName` —— 调用 id(🔴 [ref] 订正:出身是**服务商**在 tool_use / tool_calls 里给的,引擎缺席时自铸兜底、越界时折叠 ——
  *    此前写「引擎铸」不实)与名册里的工具名(与 `tool_start` 逐字同源)⇒ verbatim。调用 id 这一族的形状在**全部面的共同入口**一次施加 ——
  *    core 7.36.0([ref])brain 建调用那一行的准入(在形原样 / 越界单射折叠,原字节只在转录 `ToolCall.wireId`),一方 brain 新铸的调用在逐帧面上
- *    恒是在形的引擎 id(残余两条 [ref]:≤7.106.0 写下的存量行 resume 出来的帧是服务商原串逐字;宿主 Brain 不准入 KL-1207-a —— 详见
+ *    恒是在形的引擎 id(残余两条 [ref]:≤7.106.0 写下的存量行 resume 出来的帧是服务商原串逐字;宿主 Brain 不准入 [ref] —— 详见
  *    run-terminal `admitProviderEcho` 顶注);
  *    本仓不设第二道闸(见 run-terminal `admitProviderEcho` 顶注;[ref] 关)。
  *  · `elapsedTimeSeconds` —— 引擎铸的整秒,单调、一 call 一个原点 ⇒ 有限数才铸键。

package/dist/trace/project.js

@@ -6,7 +6,8 @@ import { errorText } from "../observability/err-text.js";
 import { redactSecrets, redactDeep } from "./redact.js";
 import { seatText } from "./exit-seat.js";
 import { sanitizeWireText } from "./engine-notice-wire.js";
-import { projectToolOutput, projectToolStructured } from "./tool-output-media.js";
+import { projectToolOutput } from "./tool-output-media.js";
+import { projectToolCard } from "./tool-card.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceFields } from "./sema-provenance.js";
 import { resupplyFields, sessionBoxCarrierFields, terminalFrameFacetFields } from "./task-notification-facets.js";
@@ -255,7 +256,7 @@ export function toolEndEventData(ev) {
         ...(ev.output !== undefined ? { output: projectToolOutput(ev.output) } : {}),
         ...(ev.truncated ? { truncated: true } : {}),
         ...(Number.isFinite(ev.totalChars) ? { totalChars: ev.totalChars } : {}),
-        ...(ev.structured !== undefined ? { structured: projectToolStructured(ev.structured, redactDeep) } : {}),
+        ...(ev.structured !== undefined ? { structured: projectToolCard(ev.structured, redactDeep) } : {}),
         ...(typeof ev.errorCode === "string" && ev.errorCode.length <= 128 ? { errorCode: ev.errorCode } : {}),
         ...(typeof ev.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(ev.delivered) ? { delivered: ev.delivered } : {}),
         ...(gate !== undefined ? { gate } : {}),

package/dist/trace/projection-table.d.ts

@@ -15,6 +15,7 @@
  * `nested` 不收各臂键不同的联合(`keyof` 只给交集,某一臂独有的键会悄悄没有处置),core 写成 `unknown` / `any` 的值只能 `strip`;
  * **一格只许一词** —— 类型上把其余词的键写成 `never`(展开也混不进第二个词),运行期再核一次,两词同在 ⇒ 响亮抛。
  * 投影函数是表的解释器 {@link projectByTable};`core-keyset-guard.ts` 读表({@link TableCoreKeys})—— 门与投影只有一个写者。
+ * 解释器的产物型也是表的函数({@link FaceOf}):表翻一格,出门型随之变,出口不另写产物型、不解构挑键。
  *
  * ## 三条读法(所有表同一条)
  *  · **缺席即缺席**:源值 `undefined` ⇒ 键缺席(不补 `[]` / `false` / 默认值);
@@ -91,10 +92,40 @@ export type TableCoreKeys<Tbl> = {
         readonly mint: unknown;
     } ? never : K;
 }[keyof Tbl];
+/** 表的一格在 core 型上的源值型(铸键不在 core 型上 ⇒ 没有源值)。 */
+type SourceOf<T, K> = K extends keyof T ? T[K] : never;
+/** 列表位的元素型。 */
+type RowOf<V> = NonNullable<V> extends readonly (infer E)[] ? E : never;
+/** 一格出门后的型 —— 与解释器 {@link projectNode} 逐臂同读(谓词臂在布尔读法臂之前:谓词也是布尔读法,它多说了值认成什么型)。 */
+type CellFace<V, E> = E extends "forward" ? Exclude<V, undefined> : E extends {
+    readonly mint: (...args: never[]) => infer X;
+} ? Exclude<X, undefined> : E extends {
+    readonly forward: (raw: unknown) => raw is infer G;
+} ? G : E extends {
+    readonly forward: unknown;
+} ? Exclude<V, undefined> : E extends {
+    readonly redact: unknown;
+} ? string : E extends {
+    readonly nested: infer Sub;
+    readonly rows: unknown;
+} ? FaceOf<RowOf<V>, Sub>[] : E extends {
+    readonly nested: infer Sub;
+} ? FaceOf<NonNullable<V>, Sub> : never;
+/**
+ * 一张表的**出门型** = 解释器 {@link projectByTable} 的产物型,逐格由处置词推出(表是唯一写者,型随表走):
+ *  · `"strip"` ⇒ 键不在型里;
+ *  · `"forward"` / `{ forward: 布尔读法 }` ⇒ 源值型去 `undefined`(解释器只把 `undefined` 读作缺席,`null` 原样出门);
+ *  · `{ forward: (raw) => raw is G }` ⇒ `G`(读法认的就是出门的型);
+ *  · `{ redact }` ⇒ `string`;`{ nested }` ⇒ 子表的出门型(写了 `rows` ⇒ 它的数组);`{ mint }` ⇒ 铸函数返回型去 `undefined`。
+ * 每个键都可选(缺席即缺席 / 在场却读不出 ⇒ 丢);不带表字面量的 `readonly`(产物是解释器新建的对象)。
+ */
+export type FaceOf<T, Tbl> = {
+    -readonly [K in keyof Tbl as Tbl[K] extends "strip" ? never : K]?: CellFace<SourceOf<T, K>, Tbl[K]>;
+};
 /**
  * 按表投影一个值。`face` = 计数 / 报错里的面名(`<面>.<键路径>`);`root` = 铸键与 `rows` 读到的根(面的顶层值)。
- * 纯数据进、纯数据出;不改入参。
+ * 纯数据进、纯数据出;不改入参。产物型 = {@link FaceOf}(本函数是表的唯一解释器,型的唯一断言在这里)。
  */
-export declare function projectByTable<T extends object, R>(face: string, table: CoreTable<T, R>, value: T, root: R): Record<string, unknown>;
+export declare function projectByTable<T extends object, R, Tbl extends CoreTable<T, R>>(face: string, table: Tbl, value: T, root: R): FaceOf<T, Tbl>;
 export {};
 //# sourceMappingURL=projection-table.d.ts.map

package/dist/trace/self-minted-wire.d.ts

@@ -804,6 +804,96 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
+    /**
+     * stdout 启动协议行 `listening`(`msg:"listening"` 的那一行 JSON;不随 `LOG_LEVEL`,见 `observability/logger.ts` 的 `STARTUP_PROTOCOL_EVENTS`)的顶层键 → 在场律。
+     * 起本进程的壳 / 嵌入宿主 / 夹具从这一行取口(`port`)与实绑地址(`boundAddress`),再用 `/health` 的 `pid` / `dataRoot` 验身份。本集 7.150.0 才登记;
+     * `1.214.2` = 本仓 org 树首个 tag(那一批键在它之前就在这一行上),`bindHost` / `bindHostNote` 按各自首次出现的 tag。值的读法(词表、显示形)不在本集。
+     */
+    readonly listeningLineKey: {
+        readonly at: "stdout 启动协议行 listening(<键> → 在场律)";
+        readonly members: {
+            port: {
+                attr: string;
+                since: string;
+            };
+            bindHost: {
+                attr: string;
+                since: string;
+            };
+            bindHostNote: {
+                attr: string;
+                since: string;
+            };
+            boundAddress: {
+                attr: string;
+                since: string;
+            };
+            model: {
+                attr: string;
+                since: string;
+            };
+            brain: {
+                attr: string;
+                since: string;
+            };
+            breakerState: {
+                attr: string;
+                since: string;
+            };
+            session: {
+                attr: string;
+                since: string;
+            };
+            memory: {
+                attr: string;
+                since: string;
+            };
+            instanceId: {
+                attr: string;
+                since: string;
+            };
+            rateLimitPerMin: {
+                attr: string;
+                since: string;
+            };
+            rateLimit: {
+                attr: string;
+                since: string;
+            };
+            maxPrincipalCostUsd: {
+                attr: string;
+                since: string;
+            };
+            costQuota: {
+                attr: string;
+                since: string;
+            };
+            toolResultStore: {
+                attr: string;
+                since: string;
+            };
+            otel: {
+                attr: string;
+                since: string;
+            };
+            perModelKeys: {
+                attr: string;
+                since: string;
+            };
+            sealedModelKeys: {
+                attr: string;
+                since: string;
+            };
+            sealedPoisonedModels: {
+                attr: string;
+                since: string;
+            };
+            workflowRunStore: {
+                attr: string;
+                since: string;
+            };
+        };
+    };
     readonly healthStoreKey: {
         readonly at: "GET /health store";
         readonly members: {
@@ -1130,6 +1220,10 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            contentAttestedAt: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /** `GET /v1/projects` 200 体的顶层键(闭集;体是路由里的内联字面量 —— 行的键集在 `projectRowKey`)。 */
@@ -1243,7 +1337,13 @@ export declare const SELF_MINTED_WIRE: {
             };
         };
     };
-    /** MCP 授权记录 `authorization`(只投闭集词 `reason`,与 `errorCode:"unauthorized"` 同行)出现的三张面;投影只有 `mcp-authorization-face.ts` 的 `projectMcpAuthorization` 一只,三面同读。 */
+    /**
+     * MCP 授权记录 `authorization` 在 wire 上的**全部投影载体**(与 `errorCode:"unauthorized"` 同在)。出门只经一张处置表(`mcp-authorization-face.ts` 的
+     * `MCP_AUTHORIZATION_DISPOSITIONS`,投影 `projectMcpAuthorization` 一只;今天只放行闭集词 `reason`)。账本帧、面板的 `lastLegMcp.mcp[]`、能力面两口载的是状态行投影
+     * (`wiring_manifest.mcp[]` 行)写入 / 应答那一刻的产物;会话历史与 `tool_end.structured`(活面 SSE、持久面账本行与 `GET /v1/runs/:id/events` 等回放)是工具卡的投影
+     * (一只读者 `projectToolCard`,登记 `TOOL_CARD_RECORDS`,`trace/tool-card.ts`;活面只载带已准入 `type` 的卡,即自注册工具在 `code: "unauthorized"` 卡上放的 `authorization`)。通告 `mcp.authorization_required` 的 `detail`
+     * 里平铺的记录成员经同一只投影(登记 `NOTICE_DETAIL_RECORDS`),它的键由附录 D.3 登记,不在本集。会话同步拉取口(`/sync/entries`)是存档的逐字复制、不是投影,不在本集。
+     */
     readonly mcpAuthorizationKey: {
         readonly at: "MCP 授权记录 authorization 的出现面(<面>#<键> → 在场律)";
         readonly members: {
@@ -1251,6 +1351,18 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "present-iff errorCode unauthorized";
                 readonly since: "7.138.0";
             };
+            readonly "GET /v1/sessions/:id/mcp#lastLegMcp.mcp[].authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "GET /v1/capabilities/mcp#servers[].authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "POST /v1/capabilities/mcp/probe#servers[].authorization": {
+                readonly attr: "present-iff errorCode unauthorized";
+                readonly since: "7.138.0";
+            };
             readonly "POST /v1/sessions/:id/mcp/reconnect#status.authorization": {
                 readonly attr: "present-iff errorCode unauthorized";
                 readonly since: "7.138.0";
@@ -1259,6 +1371,35 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: "present-iff server unauthorized (this face carries no errorCode)";
                 readonly since: "7.138.0";
             };
+            readonly "GET /v1/sessions/:id#messages[].details.authorization": {
+                readonly attr: "present-iff details.code unauthorized";
+                readonly since: "7.138.0";
+            };
+            readonly "SSE tool_end#structured.authorization": {
+                readonly attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason";
+                readonly since: "7.138.0";
+            };
+            readonly "GET /v1/runs/:id/events#tool_end.structured.authorization": {
+                readonly attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason";
+                readonly since: "7.138.0";
+            };
+        };
+        readonly retired: {
+            readonly "GET /v1/sessions/:id#messages[].details.authorization.resourceMetadataUrl": {
+                readonly attr: "remote-claimed URL from the endpoint's challenge (deep-scrubbed text)";
+                readonly since: "7.138.0";
+                readonly until: "7.150.0";
+            };
+            readonly "SSE tool_end#structured.authorization(reason \u4EE5\u5916\u7684\u6210\u5458)": {
+                readonly attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)";
+                readonly since: "7.138.0";
+                readonly until: "7.150.0";
+            };
+            readonly "GET /v1/runs/:id/events#tool_end.structured.authorization(reason \u4EE5\u5916\u7684\u6210\u5458)": {
+                readonly attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)";
+                readonly since: "7.138.0";
+                readonly until: "7.150.0";
+            };
         };
     };
     /** `wiring_manifest.mods[].provenance`(每条腿的清单帧,每行 mod 注册一个出处标签):本服务自铸的注册带 `server`、运维声明的包带 `operator`;与同一行上 `seat` 的座词(`deployment` / `task`)互不相交。 */
@@ -1290,7 +1431,7 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * `request.field_conflict` 拒体根上的 `reason`(字段之间互斥 / 互为前置的哪一类;`fields` = 请求体坐标,不在本表 —— 它不是闭集)。
+     * `request.field_conflict` 拒体根上的 `reason`(字段之间互斥 / 互为前置的哪一类;`fields` = 请求体坐标,不在本表 —— 它不是闭集;某一类的坐标并集变了,记在那一词的 `attr` 上)。
      * 词表属主 = `field-conflict.ts` 的 `FIELD_CONFLICT_REASONS`:`satisfies Record<FieldConflictReason, …>`,加词而本行没跟 / 多一个词 ⇒ tsc 红。
      * 契约附录 A 的 `request.field_conflict` 行逐个列这些词(`test/field-conflict-detail.test.ts` 钉)。同一组词 7.133.0–7.147.0 在 `detail.kind`(集名 `fieldConflictKind`,
      * 随拒体版式律退役);`since` 记的是它们出现在根上 `reason` 的那一版。
@@ -2036,7 +2177,7 @@ export declare const SELF_MINTED_WIRE: {
     };
     /**
      * 运维队列停驻行(`kind: "checkpoint"`)与订阅流 `pending` 帧上的 `agent` —— 行的会话(`sessionId`)在委派树里的位置 `{ id?, parentSessionId?, rootSessionId? }`,
-     * 与 `GET /v1/sessions/:sessionId` 体顶层的同名键同一只读口(`session-agent.ts` 的 `readSessionAgent`)、同一只投影,逐值同答。
+     * 与 `GET /v1/sessions/:sessionId` 体顶层的同名键同一只读口(`http/owner-access.ts` 的 `readSessionAgent`)、同一只投影,逐值同答。
      * 在场律 `present-iff`:这一次列表读到行的会话是一只 placed 委派子代(会话行上存着引擎写下的委派元组);宿主会话、同步委派的子代、`fork` 型后台子代、
      * 不存元组的店、那一读没读成(F 类 `server.approvals.queue-row-agent-unreadable`)⇒ 缺席 —— 缺席读作「这台 server 没有说」。`satisfies` 绑行形:删键 / 改名而本表没跟 ⇒ tsc 红。
      */
@@ -2672,17 +2813,14 @@ export declare const SELF_MINTED_WIRE: {
             };
             readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_claim_store_fault(\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB\u3001\u8BA4\u9886\u90A3\u4E00\u7B14 \u2014\u2014 markResuming / wake \u73B0\u5EFA\u884C\u7684 createRun \u2014\u2014 \u6216\u8BA4\u9886\u4E4B\u540E\u63D0\u4EA4\u6267\u884C\u653E\u7F6E\u90A3\u4E00\u6B21\u5E97\u5F80\u8FD4\u5931\u8D25:\u5E93\u65AD\u8FDE / \u62D2\u8FDE / \u8D85\u65F6\u3001\u7F3A\u8868 / \u6743\u9650\u62D2\u3001\u8BA4\u4E0D\u51FA\u7684\u5E93\u9519;\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u5F62\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u8BA4\u9886\u4E4B\u524D\u7684\u505C\u9A7B\u8BCD\u3001\u8BA4\u9886\u7559\u7740,wake \u73B0\u5EFA\u7684\u884C\u5220\u6389;\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
                 readonly attr: 503;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/runs/:id/cancel#parked_card_body_scope_differs(\u505C\u9A7B run \u4E0A\u7684\u53D6\u6D88:\u8FD9\u5F20\u5361\u884C\u4F53\u91CC\u81EA\u5E26\u7684\u5C5E\u4E3B\u683C\u4E0E\u5E97\u7684\u5C5E\u4E3B\u683C\u4E0D\u4E00\u81F4 \u2014\u2014 \u53D6\u6D88\u53EA\u8BFB\u5E97\u7684\u5C5E\u4E3B\u683C,\u7ED3\u7B97\u8FD9\u5F20\u5361\u3001\u9A71 run \u7EC8\u5C40;\u4F53 { taskId, status: failed, errorCode: cancelled, cancelRequested: false, note })": {
                 readonly attr: 202;
-                readonly revises: readonly ["errorCode:conflict.approval_settled"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/runs/:id/cancel#parked_card_body_unreadable(\u505C\u9A7B run \u4E0A\u7684\u53D6\u6D88:\u8FD9\u5F20\u5361\u7684\u884C\u4F53\u8BFB\u4E0D\u6210\u68C0\u67E5\u70B9 \u2014\u2014 \u53D6\u6D88\u53EA\u8BFB\u5E97\u7684\u5217,\u7ED3\u7B97\u8FD9\u5F20\u5361\u3001\u9A71 run \u7EC8\u5C40;\u4F53\u540C\u4E0A)": {
                 readonly attr: 202;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide#parked_agent_definition_unavailable(\u505C\u9A7B\u8D4E\u56DE;\u884C\u4E0A\u7684\u4EE3\u7406\u7C7B\u578B\u4E0D\u5728\u8D4E\u56DE\u9762\u59D4\u6D3E\u5DE5\u5177\u7684\u540D\u518C\u91CC:\u9010\u8BF7\u6C42 `agents` \u5B9A\u4E49 / \u505C\u9A7B\u540E\u88AB\u64A4\u7684\u90E8\u7F72\u5B9A\u4E49 / \u540D\u53EB fork \u7684\u5B9A\u4E49;approve \u4E0E deny \u540C\u7B54;\u8BA4\u9886\u56DE\u6EDA\u3001\u59D4\u6D3E\u5DE5\u5177\u96F6\u8C03\u7528\u3001\u5361\u4ECD\u5F85\u51B3;\u4F53 decide.agent_definition_unavailable + taskId + rollback)": {
@@ -2691,32 +2829,26 @@ export declare const SELF_MINTED_WIRE: {
             };
             readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#run_claim_store_fault(\u65B0\u63D0\u4EA4:\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB,\u6216\u8BA4\u9886\u8FD9\u4E00\u6BB5 \u2014\u2014 \u5EFA\u884C\u8BA4\u9886 createRun\u3001\u6267\u884C\u653E\u7F6E\u3001\u7EED\u8DD1\u8F93\u5165\u7684\u5199\u3001\u8D77\u8DD1\u4E4B\u524D\u7684\u8BA4\u9886\u590D\u6838 \u2014\u2014 \u6709\u4E00\u6B21\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765:\u5E93\u65AD\u8FDE / \u62D2\u8FDE / \u8D85\u65F6\u3001\u7F3A\u8868 / \u6743\u9650\u62D2\u3001\u8BA4\u4E0D\u51FA\u7684\u5E93\u9519;\u672C\u8BF7\u6C42\u94F8\u7684\u884C\u5DF2\u5220\u6389 \u2014\u2014 \u8BA4\u9886\u4E0E\u5E42\u7B49\u952E\u968F\u884C\u53BB,\u540C\u4E00\u4E2A\u81EA\u5E26 taskId \u91CD\u53D1\u5373\u65B0\u63D0\u4EA4 \u2014\u2014 \u4EC0\u4E48\u90FD\u6CA1\u8D77\u8DD1;\u8BA4\u9886\u4E4B\u540E\u7684\u6D41\u5F0F\u817F = \u6D41\u7684\u7EC8\u5E27;\u5DF2\u7ED1\u8BBE\u5907\u7684\u4F1A\u8BDD\u4E0A\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB\u540C\u7B54;\u4F53 state.run_store_unavailable)": {
                 readonly attr: 503;
-                readonly revises: readonly ["errorCode:internal.error", "errorCode:device.not_bound"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_pre_engine_store_fault(\u7EED\u8DD1\u817F\u63D0\u4EA4\u653E\u884C\u4E4B\u540E\u3001\u4EA4\u7ED9\u5F15\u64CE\u4E4B\u524D\u90A3\u4E00\u6BB5 \u2014\u2014 \u6392\u7A7A workflow \u5B8C\u6210\u7684\u5E8F\u53F7\u57FA\u5740\u73B0\u8BFB\u4E0E\u843D\u8D26\u3001\u901A\u544A\u53E3\u843D\u8D26 \u2014\u2014 \u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u505C\u9A7B\u3001\u8BA4\u9886\u7559\u7740,wake \u73B0\u5EFA\u7684\u884C\u5220\u6389;\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
                 readonly attr: 503;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide#workflow_host_turn_claim_store_fault(workflow \u51B3\u5B9A\u5728\u5BBF\u4E3B\u4F1A\u8BDD\u4E0A\u8D77\u7684\u65B0\u4E00\u8DD1:\u5EFA\u884C\u8BA4\u9886 / \u6267\u884C\u653E\u7F6E / \u7EED\u8DD1\u8F93\u5165 / \u51B3\u5B9A\u843D\u884C / \u8D77\u8DD1\u4E4B\u524D\u7684\u8BA4\u9886\u590D\u6838\u6709\u4E00\u6B21\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u51B3\u5B9A\u843D\u884C\u90A3\u4E00\u7B14\u5728 wake \u817F\u4E0A\u540C\u7B54;\u73B0\u5EFA\u7684\u884C\u5DF2\u5220\u6389,\u5B50\u4EE3\u7684\u5361\u4ECD\u5F85\u51B3;\u4F53 state.resume_context_unreadable)": {
                 readonly attr: 503;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide#workflow_decision_not_recorded(workflow \u51B3\u5B9A\u7684\u6295\u9012\u90A3\u4E00\u8DD1\u5728\u51B3\u5B9A\u843D\u884C\u90A3\u4E00\u62CD\u5DF2\u4E0D\u6301\u5BBF\u4E3B\u4F1A\u8BDD\u7684\u8BA4\u9886 \u2014\u2014 \u5FC3\u8DF3\u505C\u6EE1\u4E00\u7A97\u88AB\u6536\u5272;\u51B3\u5B9A\u6CA1\u843D\u3001\u90A3\u4E00\u8DD1\u6CA1\u8D77;\u4E0E\u8D77\u8DD1\u4E4B\u524D\u8BA4\u9886\u590D\u6838\u7B54\u300C\u6CA1\u6301\u6709\u300D\u540C\u4E00\u53EA\u7B54\u590D:\u8BA4\u9886\u5728\u522B\u7684 run \u4E0A \u21D2 409 conflict.session_active_run,\u5BBF\u4E3B\u4F1A\u8BDD\u5DF2\u5220 \u21D2 404 resume.session_not_found,\u5426\u5219 409 conflict.claim_lost)": {
                 readonly attr: 409;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide#parked_redeem_placement_store_fault(\u505C\u9A7B\u5B50\u4EE3\u8D4E\u56DE:\u8BA4\u9886\u4E4B\u524D\u90A3\u4E00\u6B21\u6267\u884C\u5E2D\u8BFB,\u6216\u8BA4\u9886\u4E4B\u540E\u90A3\u4E00\u6B21\u6267\u884C\u653E\u7F6E\u7684\u5E97\u5F80\u8FD4\u6CA1\u7B54\u51FA\u6765;\u8BA4\u9886\u6CA1\u6709\u6216\u5DF2\u56DE\u6EDA,\u5B50\u4EE3\u4ECD\u505C\u7740\u3001\u5361\u4ECD\u5F85\u51B3;\u4F53 decide.store_unreachable + taskId)": {
                 readonly attr: 503;
-                readonly revises: readonly ["errorCode:internal.error"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#placement_refused_after_claim(\u7EED\u8DD1\u5BB6\u65CF\u3001workflow \u51B3\u5B9A\u5728\u5BBF\u4E3B\u4F1A\u8BDD\u4E0A\u8D77\u7684\u65B0\u4E00\u8DD1\u3001\u505C\u9A7B\u5B50\u4EE3\u8D4E\u56DE\u8BA4\u9886\u4E4B\u540E\u63D0\u4EA4\u6267\u884C\u653E\u7F6E\u8BFB\u51FA\u8FD9\u6761\u4F1A\u8BDD\u6B64\u523B\u4E0D\u80FD\u5728\u672C\u5904\u6267\u884C:\u5DF2\u653E\u5728\u522B\u7684\u8F66\u9053 / \u5199\u8005\u5728\u522B\u5904 / \u8BBE\u5907\u62D2;\u7EED\u8DD1\u8BA4\u9886\u7684\u505C\u9A7B\u884C\u56DE\u5230\u505C\u9A7B\u3001\u505C\u9A7B\u8D4E\u56DE\u56DE\u6EDA,\u5361\u4ECD\u5F85\u51B3,wake \u4E0E\u5BBF\u4E3B\u65B0\u4E00\u8DD1\u73B0\u5EFA\u7684\u884C\u5220\u6389;\u4E0E\u8BA4\u9886\u4E4B\u524D\u540C\u4E00\u53EA\u6298\u6CD5\u3001\u540C\u4E00\u53EA\u4F53;\u4F53 resume_blocked_by_policy + blockedBy \u539F\u7801 + \u539F\u4E8B\u5B9E forkPath / boundLane + retriable)": {
                 readonly attr: 409;
-                readonly revises: readonly ["errorCode:execution_lane.tree_bound", "errorCode:conflict.session_mirror"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/tasks#park_commit_ended(\u540C\u6B65\u817F\u505C\u5728\u8981\u6279\u7684\u95E8\u4E0A,\u800C\u505C\u9A7B\u63D0\u4EA4\u7B54\u51FA\u8FD9\u6761 run \u6CA1\u6709\u505C\u4F4F\u3001\u5DF2\u6536\u573A \u2014\u2014 \u505C\u9A7B\u5199\u4E4B\u524D\u5DF2\u6309\u4E0B\u53D6\u6D88 / \u88AB\u5931\u8054\u6536\u5272 / \u522B\u5904\u7EC8\u7ED3;\u5361\u5DF2\u4F5C\u5E9F;\u4F53 = \u6536\u573A\u90A3\u4E00\u884C\u7684\u4FE1\u5C01,\u4E0E\u540C\u952E\u91CD\u653E\u540C\u4E00\u53EA:\u7EC8\u5C40\u884C\u7684\u7ED3\u679C,\u53D6\u6D88\u90A3\u4E00\u5F62 terminal.code cancelled;\u884C\u4E0A\u65E0\u7ED3\u679C \u21D2 \u56DE\u6267\u4E09\u952E)": {
@@ -2733,17 +2865,14 @@ export declare const SELF_MINTED_WIRE: {
             };
             readonly "GET /v1/tool-approvals/:id#row_unreadable(\u6709\u884C\u7684\u95EE,\u6309 id \u8BFB\u884C\u90A3\u4E00\u62CD\u5E97\u629B / \u8D85\u65F6;\u672C\u526F\u672C\u81EA\u5DF1\u94F8\u7684\u6D3B\u5361\u4E0E\u8D77\u670D\u63A5\u7BA1\u7684\u767B\u8BB0\u540C\u7B54;\u4F53 not_found.ask,\u4E0E\u67E5\u65E0 / \u4E0D\u662F\u4F60\u7684\u9010\u5B57\u8282\u540C)": {
                 readonly attr: 404;
-                readonly revises: readonly ["selfMinted.toolApprovalReadState:pending"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(\u63A8\u9001\u4E09\u53E3\u7684\u95E8:id \u4E0A\u662F\u522B\u7684\u4E3B\u4F53\u6B63\u5728\u5220\u9664\u7684\u4F1A\u8BDD \u2014\u2014 \u5220\u9664\u56F4\u680F\u5DF2\u7ACB\u3001\u5C1A\u672A\u5220\u51C0;\u300C\u88AB\u5360\u7740\u300D\u8BFB\u6D3B\u884C \u222A \u5728\u5220\u884C,\u4E0E\u5BF9\u522B\u4EBA\u7684\u6D3B\u884C\u540C\u7B54;\u672C\u4EBA / fleet \u5BF9\u81EA\u5DF1\u5728\u5220\u7684\u4F1A\u8BDD\u4E0D\u53D8,\u62C9\u53D6\u53E3\u4ECD\u53EA\u8BA4\u6D3B\u884C;\u4F53 not_found.session,\u4E0E\u5BF9\u4E0D\u5B58\u5728 id \u7684\u62C9\u53D6\u7B54\u590D\u9010\u5B57\u8282\u540C)": {
                 readonly attr: 404;
-                readonly revises: readonly ["errorCode:conflict"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(\u7B2C\u4E00\u9636\u6BB5:id \u4E0A\u8FD8\u6CA1\u6709\u4F1A\u8BDD\u884C,\u800C\u53E6\u4E00\u4E2A\u4E3B\u4F53\u5728\u8FD9\u53EA id \u4E0A\u7684\u7B2C\u4E00\u9636\u6BB5\u6B63\u5728\u98DE;\u5BFC\u5165\u79DF\u7EA6\u952E = \u843D\u70B9\u5C5E\u4E3B\u683C + \u4F1A\u8BDD id,\u7A7A\u95F2 id \u4E0A\u5404\u5360\u5404\u7684;\u4F53 = \u7B2C\u4E00\u9636\u6BB5\u7684\u6682\u5B58\u56DE\u6267 stagingId;\u5148\u63D0\u4EA4\u8005\u5F97,\u8F93\u7684\u90A3\u4E00\u4EFD\u5728\u63D0\u4EA4\u524D\u590D\u5224\u7B54 404 not_found.session,\u4E0E\u8D62\u5BB6\u7684\u63D0\u4EA4\u649E\u5728\u540C\u4E00\u523B\u65F6\u7531\u5E97\u7684\u5C5E\u4E3B CAS \u62D2 409 conflict)": {
                 readonly attr: 200;
-                readonly revises: readonly ["errorCodeFamily:import_in_flight"];
                 readonly since: "7.149.0";
             };
             readonly "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(\u65B0\u63D0\u4EA4;a2aPeers[i].headers \u7684\u6210\u5458\u540D\u662F constructor / prototype \u2014\u2014 \u4E0E mcpServers[i].transport.headers / .env \u540C\u4E00\u5F20\u4FDD\u7559\u6210\u5458\u540D\u8868\u3001\u540C\u4E00\u53EA\u8BFB\u6CD5,\u5927\u5C0F\u5199\u654F\u611F;\u4F53 request.field_invalid + field \u6210\u5458\u7EA7\u8DEF\u5F84 a2aPeers[i].headers.<\u540D>;\u5B58\u76D8\u7EED\u8DD1\u4F53\u91CC\u540C\u5F62 \u21D2 \u7EED\u8DD1\u5BB6\u65CF\u65E2\u6709\u4E00\u9762 #stored_unread_members 409)": {
@@ -2956,7 +3085,6 @@ export declare const SELF_MINTED_WIRE: {
             };
             readonly "session faces \u00B7 list faces \u00B7 /metrics family#dev-open-principal-header-not-owner": {
                 readonly attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)";
-                readonly revises: readonly ["selfMinted.ownerFaceAnswer:GET /v1/runs/:id · /v1/runs/:id/events#dev-open-principal-header-not-owner"];
                 readonly since: "7.149.0";
             };
             readonly "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": {
@@ -3581,9 +3709,10 @@ export declare const SELF_MINTED_WIRE: {
     /**
      * 设备 WS 协议的修订号(成员 = 修订号;能力位 `deviceExecutor.protocolVersion` 报最高那一只,challenge 帧同值)。`attr` = 那一修订号加进 executor → server 结局码闭集的词
      * (修订号 1 = 首版的基集 `base`,词集见随包 `docs/DEVICE-EXECUTOR-PROTOCOL.md` §2.1);executor 声明哪个修订号就只发到那一行为止的词。
+     * 零加词的语义修订(server 发来的帧意思变了)attr = 变更名;协议文档同一行第三栏写变更全文。
      */
     readonly deviceProtocolRevision: {
-        readonly at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词)";
+        readonly at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词;零加词的语义修订 → 变更名)";
         readonly members: {
             1: {
                 attr: string;
@@ -3601,6 +3730,10 @@ export declare const SELF_MINTED_WIRE: {
                 attr: string;
                 since: string;
             };
+            5: {
+                attr: string;
+                since: string;
+            };
         };
     };
     /**