@sema-agent/server 7.150.0 → 7.152.0

package/dist/trace/self-minted-wire.js

@@ -49,6 +49,20 @@ export const SELF_MINTED_WIRE = {
         },
         retired: {},
     },
+    fleetFlatEngineState: {
+        at: "fleet 心跳 POST <中心>/api/fleet/instances 体顶层 · GET /health 体顶层(8.0 平铺引擎态方言;引擎态改读 engineSignal)",
+        members: {},
+        retired: {
+            "POST /api/fleet/instances#ready": { attr: "boolean, always present (the readiness verdict; now engineSignal.ready)", since: "1.189.0", until: "7.152.0" },
+            "POST /api/fleet/instances#draining": { attr: "boolean, always present (true iff the drain fact is present; now engineSignal.draining present)", since: "1.189.0", until: "7.152.0" },
+            "POST /api/fleet/instances#restart": { attr: "present-iff a restart signal ({ reasons, version, since, withheld? }; now engineSignal.restart)", since: "7.102.0", until: "7.152.0" },
+            "POST /api/fleet/instances#generation": { attr: "present-iff fleet member (FLEET_GENERATION echo; now engineSignal.generation)", since: "7.121.0", until: "7.152.0" },
+            "POST /api/fleet/instances#leaseState": { attr: "present-iff fleet member (LeaseState word; now engineSignal.leaseState)", since: "7.121.0", until: "7.152.0" },
+            "POST /api/fleet/instances#leaseUntil": { attr: "present-iff leaseState granted (epoch ms; now engineSignal.leaseUntil)", since: "7.121.0", until: "7.152.0" },
+            "GET /health#draining": { attr: "true, present-iff draining (now engineSignal.draining present)", since: "1.189.0", until: "7.152.0" },
+            "GET /health#drainingSince": { attr: "epoch ms, present-iff draining (now engineSignal.draining.since)", since: "1.189.0", until: "7.152.0" },
+        },
+    },
     sessionMemoryEraseStatus: {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
@@ -79,23 +93,13 @@ export const SELF_MINTED_WIRE = {
         },
     },
     notPendingCause: {
-        at: "POST /v1/tool-approvals/:id/respond · GET /v1/tool-approvals/:id 404 tool_approval.not_pending cause",
-        members: {
-            routing_failure_fail_closed: { attr: "-", since: "7.124.0" },
-            run_cancelled: { attr: "-", since: "7.124.0" },
-            run_exited: { attr: "-", since: "7.124.0" },
-            batch_aborted: { attr: "-", since: "7.124.0" },
-            batch_sibling_withdrawn: { attr: "-", since: "7.124.0" },
-            batch_bound_elsewhere: { attr: "-", since: "7.124.0" },
-            adhoc_leg_no_durable_domain: { attr: "-", since: "7.124.0" },
-            orphan_ttl_exceeded: { attr: "-", since: "7.124.0" },
-            crashed_before_park: { attr: "-", since: "7.124.0" },
-            shutdown_before_park: { attr: "-", since: "7.124.0" },
+        at: "GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause",
+        members: {
             unknown_or_other_replica: { attr: "-", since: "7.40.0" },
         },
     },
     toolApprovalReadState: {
-        at: "GET /v1/tool-approvals/:id 200 state",
+        at: "GET /v1/tasks/:taskId/asks/:askId 200 state",
         members: {
             pending: { attr: "-", since: "7.133.0" },
             decided: { attr: "-", since: "7.133.0" },
@@ -104,7 +108,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     toolApprovalReadVoidCause: {
-        at: "GET /v1/tool-approvals/:id 200 state:void cause",
+        at: "GET /v1/tasks/:taskId/asks/:askId 200 state:void cause",
         members: {
             routing_failure_fail_closed: { attr: "-", since: "7.133.0" },
             run_cancelled: { attr: "-", since: "7.133.0" },
@@ -118,25 +122,6 @@ export const SELF_MINTED_WIRE = {
             shutdown_before_park: { attr: "-", since: "7.133.0" },
         },
     },
-    toolApprovalCompleteCause: {
-        at: "tool_approval_complete frame cause",
-        members: {
-            ttl_expired: { attr: "key:cause", since: "7.124.0" },
-            broadcast_lost: { attr: "key:cause", since: "7.124.0" },
-            stream_disconnected: { attr: "key:cause", since: "7.124.0" },
-            undeliverable: { attr: "key:cause", since: "7.124.0" },
-            run_cancelled: { attr: "key:cause", since: "7.124.0" },
-            run_exited: { attr: "key:cause", since: "7.124.0" },
-            batch_aborted: { attr: "key:cause", since: "7.124.0" },
-            batch_sibling_withdrawn: { attr: "key:cause", since: "7.124.0" },
-            batch_bound_elsewhere: { attr: "key:cause", since: "7.124.0" },
-            routing_failure_fail_closed: { attr: "key:cause", since: "7.124.0" },
-            crashed_before_park: { attr: "key:cause", since: "7.124.0" },
-            shutdown_before_park: { attr: "key:cause", since: "7.124.0" },
-            orphan_ttl_exceeded: { attr: "key:cause", since: "7.124.0" },
-            adhoc_leg_no_durable_domain: { attr: "key:cause", since: "7.124.0" },
-        },
-    },
     approvalCompleteCause: {
         at: "approval_complete frame cause",
         members: {
@@ -254,6 +239,22 @@ export const SELF_MINTED_WIRE = {
             absent: { attr: "-", since: "7.121.0" },
         },
     },
+    healthCenterKey: {
+        at: "GET /health center",
+        members: {
+            issuer: { attr: "present-iff auth bridge configured", since: "7.121.0" },
+            webBaseUrl: { attr: "present-iff the center web console base is configured", since: "7.121.0" },
+            sessionsVisible: { attr: "always", since: "7.121.0" },
+            assertionToken: { attr: "present-iff center configured", since: "7.151.0" },
+        },
+    },
+    healthAssertionToken: {
+        at: "GET /health center.assertionToken",
+        members: {
+            declared: { attr: "-", since: "7.151.0" },
+            absent: { attr: "-", since: "7.151.0" },
+        },
+    },
     healthSessionsVisible: {
         at: "GET /health center.sessionsVisible",
         members: {
@@ -310,6 +311,28 @@ export const SELF_MINTED_WIRE = {
             sealedModelKeys: { attr: "always", since: "1.214.2" },
             sealedPoisonedModels: { attr: "always", since: "1.214.2" },
             workflowRunStore: { attr: "always", since: "1.214.2" },
+            controlSocket: { attr: "present-iff the local control socket is listening (absolute path; exactly one of controlSocket / controlSocketUnavailable)", since: "7.152.0" },
+            controlSocketUnavailable: { attr: "present-iff the local control socket is not listening (reason word; exactly one of controlSocket / controlSocketUnavailable)", since: "7.152.0" },
+        },
+    },
+    controlSocketUnavailableReason: {
+        at: "stdout 启动协议行 listening controlSocketUnavailable",
+        members: {
+            unsupported_platform: { attr: "-", since: "7.152.0" },
+            data_root_not_exclusive: { attr: "-", since: "7.152.0" },
+            path_too_long: { attr: "-", since: "7.152.0" },
+            dir_not_private: { attr: "-", since: "7.152.0" },
+            path_occupied: { attr: "-", since: "7.152.0" },
+            bind_failed: { attr: "-", since: "7.152.0" },
+        },
+    },
+    healthAnonymousKey: {
+        at: "GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket)",
+        members: {
+            status: { attr: "always", since: "7.148.0" },
+            auth: { attr: "always", since: "7.148.0" },
+            operator: { attr: "always", since: "7.148.0" },
+            center: { attr: "always", since: "7.148.0" },
         },
     },
     healthStoreKey: {
@@ -341,6 +364,7 @@ export const SELF_MINTED_WIRE = {
             tickMs: { attr: "present-iff engine lease leg armed and observing", since: "7.141.0" },
             firstAttach: { attr: "present-iff engineLease present and the owned window is finite", since: "7.146.0" },
             lane: { attr: "always within engineLease", since: "7.146.0" },
+            attached: { attr: "always within engineLease (open SSE attach stream count on this replica; 0 is legal for a polling-only shell)", since: "7.151.0" },
             handover: { attr: "present-iff lane is handover", since: "7.146.0" },
         },
     },
@@ -429,6 +453,13 @@ export const SELF_MINTED_WIRE = {
         members: {
             rowTag: { attr: "present-iff the row can be written conditionally (the store has the row write primitive and the row carries an incarnation)", since: "7.139.0" },
             unreadable: { attr: "present-iff the session head's leaf cannot be read (the file backend: the archive header is corrupt / truncated, or the archive cannot be read); the SQL backends never carry it; PATCH answers 500 for such a session before writing, so its 200 / 409 rows never carry it", since: "7.142.0" },
+            sessionKind: { attr: "present-iff the session was created by a submission that declared sessionKind (the default view lists only sessions without one)", since: "7.151.0" },
+        },
+    },
+    sessionKind: {
+        at: "POST /v1/tasks · /v1/tasks/stream · /v1/runs 体 sessionKind = GET /v1/sessions?sessionKind= = sessions[].sessionKind = GET /v1/sessions/:id sessionKind = GET /v1/capabilities sessionKinds[](<词> → -)",
+        members: {
+            sidechain: { attr: "-", since: "7.151.0" },
         },
     },
     projectRowKey: {
@@ -459,6 +490,7 @@ export const SELF_MINTED_WIRE = {
         at: "GET /v1/sessions/:id 体顶层键(本版新出现;<键> → 在场律)",
         members: {
             projectId: { attr: "present-iff the session row's last own workspace_changed frame carried a project", since: "7.147.0" },
+            sessionKind: { attr: "present-iff the session was created by a submission that declared sessionKind", since: "7.151.0" },
         },
     },
     sessionsListRowUnreadableKey: {
@@ -516,11 +548,6 @@ export const SELF_MINTED_WIRE = {
             "SSE tool_end#structured.authorization": { attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason", since: "7.138.0" },
             "GET /v1/runs/:id/events#tool_end.structured.authorization": { attr: "present-iff structured.code unauthorized and reason in the closed set; members = reason", since: "7.138.0" },
         },
-        retired: {
-            "GET /v1/sessions/:id#messages[].details.authorization.resourceMetadataUrl": { attr: "remote-claimed URL from the endpoint's challenge (deep-scrubbed text)", since: "7.138.0", until: "7.150.0" },
-            "SSE tool_end#structured.authorization(reason 以外的成员)": { attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)", since: "7.138.0", until: "7.150.0" },
-            "GET /v1/runs/:id/events#tool_end.structured.authorization(reason 以外的成员)": { attr: "card members passed through the text redactor (resourceMetadataUrl, a custom card's own members)", since: "7.138.0", until: "7.150.0" },
-        },
     },
     wiringModProvenance: {
         at: "wiring_manifest mods[].provenance",
@@ -532,7 +559,6 @@ export const SELF_MINTED_WIRE = {
     extensionRequesterSeat: {
         at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)",
         members: {
-            "tool_approval#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
             "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
         },
     },
@@ -582,6 +608,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             not_in_roster: { attr: "-", since: "7.133.0" },
             home_unresolvable: { attr: "-", since: "7.133.0" },
+            cc_rule_form: { attr: "-", since: "7.133.0" },
         },
     },
     invalidJsonReason: {
@@ -608,14 +635,23 @@ export const SELF_MINTED_WIRE = {
         },
     },
     workflowParkDeliveryResult: {
-        at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 在本进程里跑):引擎答词 → 应答",
+        at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 读作 running、决定行已在记录栅栏里立住):引擎答词 → 应答",
         members: {
             driving: { attr: "200 {taskId: <workflow runId>, status: resuming, decision}(无结清证据)", since: "7.148.0" },
-            already_taken: { attr: "同一决定 ⇒ 首张回执原样回放;另一个决定 ⇒ 409 decide.claim_lost", since: "7.148.0" },
+            already_taken: { attr: "200 同一张回执(单一仲裁之下 run 收下过的只可能是这同一个决定)", since: "7.151.0" },
             settled: { attr: "409 decide.gate_moved", since: "7.148.0" },
-            not_parked_here: { attr: "409 decide.gate_moved", since: "7.148.0" },
-            unreadable: { attr: "503 decide.store_unreachable", since: "7.148.0" },
-            kept_parked: { attr: "400 decide.parked_restatement_unsupported(只在决断带续跑重述键时可达)", since: "7.148.0" },
+            not_parked_here: { attr: "200 同一张回执(决定已立住;run 收场后由收场送达交给宿主会话的下一跑)", since: "7.151.0" },
+            unreadable: { attr: "200 同一张回执(决定已立住;持有进程在下一个维护拍再交)", since: "7.151.0" },
+            kept_parked: { attr: "不可达(恒送决定;重述键在记录栅栏里判 ⇒ 400 decide.parked_restatement_unsupported)", since: "7.151.0" },
+        },
+    },
+    workflowParkDeliveryKind: {
+        at: "POST /v1/approvals/:id/decide · 应答口(workflow 子代停驻卡,持有它的 run 读作 running、决定行已在记录栅栏里立住):引擎答形 → 应答",
+        members: {
+            live: { attr: "按 results[0] 答(集 workflowParkDeliveryResult)", since: "7.148.0" },
+            suspending: { attr: "200 {taskId: <workflow runId>, status: resuming, decision}(决定已立住;run 收场后由收场送达交给宿主会话的下一跑)", since: "7.151.0" },
+            not_active: { attr: "200 {taskId: <workflow runId>, status: resuming, decision}(决定已立住;持有进程在下一个维护拍交,或 run 收场后由收场送达交)", since: "7.151.0" },
+            not_armed: { attr: "500(引擎不变量破:没有 checkpoint 座的 run 停驻不出这张卡)", since: "7.148.0" },
         },
     },
     settingsEnvCredentialMatch: {
@@ -685,6 +721,14 @@ export const SELF_MINTED_WIRE = {
             repo: { attr: "-", since: "1.214.2" },
         },
     },
+    scenarioSource: {
+        at: "GET /v1/capabilities/scenario#source · 503 state.scenario_assignment_unknown 体根 source",
+        members: {
+            request: { attr: "-", since: "7.152.0" },
+            ruling: { attr: "-", since: "7.119.0" },
+            deployment: { attr: "-", since: "7.119.0" },
+        },
+    },
     scenarioSkillSource: {
         at: "GET /v1/capabilities/scenarios/:name#skills[].source",
         members: {
@@ -768,7 +812,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     livePendingAdoptedRowKey: {
-        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tool-approvals/:id pending 体(起服接管行)",
+        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(起服接管行)",
         members: {
             mandated: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
             mandate: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
@@ -776,6 +820,15 @@ export const SELF_MINTED_WIRE = {
             liveFactsUnknown: { attr: "present-iff row.frame.liveFactsUnknown (adopted rows only)", since: "7.143.0" },
         },
     },
+    livePendingRowSourceKey: {
+        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(委派子代的行)",
+        members: {
+            sourceSessionId: { attr: "present-iff fromSubagent (the delegated child's session id; same value as the key on row.frame.card)", since: "7.152.0" },
+        },
+        retired: {
+            originTaskId: { attr: "present-iff fromSubagent (the delegated child's session id; the same value now under sourceSessionId)", since: "7.52.0", until: "7.152.0" },
+        },
+    },
     approvalQueuePendingKey: {
         at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)",
         members: {
@@ -787,7 +840,7 @@ export const SELF_MINTED_WIRE = {
     approvalQueueRowVerdict: {
         at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻门族)的 rowVerdict",
         members: {
-            rowVerdict: { attr: "present-iff the row's stored bytes were judged on this listing", since: "7.144.0" },
+            rowVerdict: { attr: "always (every listed row is judged on this listing; 7.144.0–7.151.x: SQL rows could omit it)", since: "7.144.0" },
         },
     },
     approvalQueueRowAgent: {
@@ -917,11 +970,14 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)": { attr: 400, since: "7.136.0" },
-            "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)": { attr: 200, since: "7.136.0" },
-            "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)": { attr: 404, since: "7.136.0" },
-            "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))": { attr: 409, since: "7.136.0" },
             "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)": { attr: 401, since: "7.136.0" },
+            "ALL routes after the auth-bridge pre-authentication (not GET /health)#sso_token_foreign_scope(fleet 成员 FLEET_GENERATION 在场;验过签的登记中心登录令牌 scope ≠ FLEET_SCOPE〔缺席 = 缺省 scope〕;同一枚 Bearer 是本部署 service 凭据的不在此列;体 auth.scope_mismatch)": { attr: 403, since: "7.151.0" },
+            "ALL routes after the auth-bridge pre-authentication except POST /v1/admin/drain (not GET /health, /readyz, /metrics*)#drain_principal_confined(验过的人在 OPERATOR_DRAIN_PRINCIPALS;三来源同判:登记中心登录令牌 / 直连门 principal 令牌 / 受信主体头;先于门前读路、凭据门、写门与就绪 503、门后段与 405 / 404;体 auth.principal_confined)": { attr: 403, since: "7.152.0" },
+            "POST /v1/approvals/:sessionId/decide|POST /v1/assistant/tasks/:id/plan_review|peer_inbound 决断臂#direct_door_decider_confined(直连门:决定证明推出的决定者在 OPERATOR_DRAIN_PRINCIPALS;证明验过之后、任何归属读之前;零状态变化;体 auth.principal_confined)": { attr: 403, since: "7.152.0" },
+            "POST /v1/admin/drain#drain_principal(验过的人在 OPERATOR_DRAIN_PRINCIPALS;身份四元相符)": { attr: 200, since: "7.152.0" },
+            "GET /health#drain_principal_credential(配了 service 凭据;请求只带排空档主体的身份、没出示 service / trace 凭据 ⇒ 匿名四键形)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tasks/:taskId/asks/:askId/decision 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)": { attr: "该口自己的受理(POST /v1/runs 202 · POST /v1/tasks 同步 200 …)", since: "7.151.0" },
             "ALL principal-reading routes#principal_not_a_name(主体头 / SSO 令牌的 sub / 直连门 JWT 的 sub 不是一位主体的名字:空 / 空白 / 带控制、行段分隔或不可见格式字符;体 principal_not_a_name)": { attr: 400, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(新提交;体 request.body_shape + unknownKeys [promptProfile])": { attr: 400, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
@@ -931,6 +987,10 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.141.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.allow 带层条目 { rule, layer }(新提交;layer = 设置来源词)": { attr: 200, since: "7.143.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#allow 桶里 user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + field settings.permissions.allow + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.143.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#remember(本会话放行;只配 approve;体带 rememberApplied)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#persistRule(不再询问;首决体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#readRootGrant(添加读目录;只随不带 remember 的 approve,只在单用户 host 车道受理)": { attr: 200, since: "7.152.0" },
+            "POST /v1/approvals/:sessionId/decide#persistRule(停驻工具审批卡的首决;体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)": { attr: 200, since: "7.152.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
@@ -979,6 +1039,9 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#根会话 id 是本进程删过的会话 id、行上的住客不是删前属主(续跑家族 / 停驻赎回 / 工作流决断后的宿主新轮;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy conflict.session_id_retired + retriable)": { attr: 409, since: "7.146.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#scenario_assignment_unavailable(新提交;部署接了配置中心、请求带主体,而中心答不出这位主体的场景裁定:不可达 / 超时 / 答复读不出 / 指派两键形不对或只发一键;点名与不点名同拒;零 run;体 state.scenario_assignment_unavailable + permanence: transient,无 detail)": { attr: 503, since: "7.147.0" },
             "GET /v1/capabilities/mcp|/v1/sessions/:id/a2a#scenario_assignment_unavailable(与提交腿同一只场景门;缺席与点名的场景名同拒;整面;体同上)": { attr: 503, since: "7.147.0" },
+            "GET /v1/capabilities/scenario#scenario_unknown|scenario_not_allowed|scenario_conflict(门拒原样:点名不在册 / 白名单外 / 场景头与 ?scenario= 不同;体与同一请求形的提交拒体逐字同)": { attr: 400, since: "7.152.0" },
+            "GET /v1/capabilities/scenario#scenario_assignment_unknown|scenario_assignment_unavailable(门拒原样:指派悬空 / 中心答不出;体同提交腿;答不出不回落任何缺省)": { attr: 503, since: "7.152.0" },
+            "GET /v1/capabilities/mcp#scenario_conflict(场景头 x-agent-scenario 与 ?scenario= 不同;与提交腿同一只点名读法)": { attr: 400, since: "7.152.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#scenario_assignment_unavailable(续跑家族经装配的那几条;认领之前,卡仍待决;不折 resume_blocked_by_policy;体 state.scenario_assignment_unavailable + permanence: transient + retriable)": { attr: 503, since: "7.147.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
@@ -997,10 +1060,25 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)": { attr: 200, since: "7.149.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)": { attr: 200, since: "7.149.0" },
             "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, since: "7.148.0" },
-            "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)": { attr: 404, since: "7.149.0" },
             "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)": { attr: 404, since: "7.149.0" },
             "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)": { attr: 200, since: "7.149.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)": { attr: 400, since: "7.149.0" },
+            "POST /v1/tasks|/v1/runs#rewindFilesTo_with_cascade(新提交;提交体同带非空串 `rewindFilesTo` 与 `cascade: true` —— 梯级每一级在引擎现铸的会话里跑、不取根,文件回退无处落地;拒在任何副作用之前、梯子一级都不起;体 request.field_conflict + reason cascade_verify + fields [rewindFilesTo, cascade];`/v1/tasks/stream` 上带 `cascade` 的提交本来就 400(同码),不入此面)": { attr: 400, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redeemed(问已转停驻、门仍开着,部署接了停驻赎回 —— 非直连门;交与 live 应答口停驻臂同一只赎回;体 = 本口基本键 + accepted parked_redeemed + 赎回受理体;受理之后决定记在问行上)": { attr: 200, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_same_key(问已转停驻、门上已站着一次决定,本次请求的 idempotencyKey 就是问行上记录的那一把;体 = 首决回放,与 DECIDED 行的回放同一只渲染)": { attr: 200, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_conflict(问已转停驻、门上已站着一次决定,本次请求不是记录上那一把键 / 没带键;体 conflict.ask_decided 回显首决;首决取问行上答的就是门上这一次的那份记录,否则取停驻门)": { attr: 409, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redemption_refused(问已转停驻、门仍开着,停驻赎回没生效且门此刻仍没决;体 = 赎回的拒原样:429 成本配额 + Retry-After / 503 服务凭据或就绪 / 409 approval_stale 或 conflict.not_resumable / 400 decide_requires_binding / 500;赎回的 404 改答本口的 not_found.ask)": { attr: "as the shared parked redemption answers (429 / 503 / 409 / 400 / 500; its 404 ⇒ 404 not_found.ask)", since: "7.151.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs#userAttachments 的 path 条目在 e2b / k8s / local-docker / adb 车道上(目标给得出那一次观测:Linux、挂着 /proc、有 timeout / readlink / stat / head / base64)与 device 车道上(执行器声明修订号 ≥ 6 且在 hello.supports 声明了 openBound)—— human_input.attachments[].outcome": { attr: "attached", since: "7.151.0" },
+            "GET /v1/device/ws#instruction kind openBound(server → executor;协议修订号 6 的 kind,只派发给声明修订号 ≥ 6 且 hello.supports 声明了它的执行器;args { path, op: open|size|readBytes|list, identity?, kind?, max? })": { attr: "dispatched-iff-declared", since: "7.151.0" },
+            "GET /v1/device/ws#result outcome stat.identity(openBound 开答的 <device>:<inode>;可选串,不是串 ⇒ bad_shape)": { attr: "accepted", since: "7.151.0" },
+            "POST /v1/sessions/:id/sync/import/:stagingId/entries|POST /v1/sessions/:id/sync/import#landed_occupant_gone(条目已提交 / identical 短路之后,写文件历史 · 会话规则 · 回退锚 · 行两位的落定段段首锁会话根行,读出落定的那一位住客已不在:会话被删、或同 id 被重建 —— 含同一属主;段体零字节写;体 conflict + sync conflict,不带 relation;运维 warn session_sync_landed_occupant_gone)": { attr: 409, since: "7.151.0" },
+            "POST /v1/sessions/:id/sync/import/:stagingId/entries#staged_commit_occupant_changed(暂存提交时这只 id 上的会话已不是第一阶段门判过的那一位住客:属主或化身不同 —— 含同一属主删建;提交事务回滚;体 conflict + 暂存导入住客已变的固定句)": { attr: 409, since: "7.151.0" },
+            "GET /v1/sessions/:id/sync/manifest|/v1/sessions/:id/sync/entries|/v1/sessions/:id/sync/history/blobs/:hash#occupant_changed_after_gate(门读到住客之后、答复发出之前复判:这只 id 上已不是门承认的那一位 —— 删了 / 同 id 重建;含否定答复 404 not_found.blob;entries 在应答头发出之前;体 not_found.session,与门后被删同体)": { attr: 404, since: "7.151.0" },
+            "GET /v1/sessions/:id/sync/entries#occupant_changed_mid_stream(应答头已发;每页交出之前复判不中 ⇒ 流结束、不写尾行 = 截断;运维 info session_sync_pull_occupant_changed)": { attr: 200, since: "7.151.0" },
+            "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import#occupant_changed_after_gate(门读到住客之后、非故障出口发出之前复判占位头:已不是那一位;含关系体、422 缺块、409 写者 / 活跃拒;体 conflict + sync conflict,不带 relation)": { attr: 409, since: "7.151.0" },
+            "POST /v1/sessions/:id/sync/import/:stagingId/entries#pre_commit_activity_occupant_changed(提交前的活性复查:门读到住客、读到一份活 run / 活子代之后,复判这只 id 上已不是那一位 —— 那份活性是别一代的;暂存放掉;体 conflict + sync conflict,不带 activeTaskId / children)": { attr: 409, since: "7.151.0" },
+            "PATCH /v1/sessions/:id#session_deleting(门那一读之后会话进了在删:删除围栏已立、尚未删净;行格判官把在删读作行不在;零写;体 not_found.session)": { attr: 404, since: "7.151.0" },
+            "PUT /v1/sessions/:id/policy#occupant_changed_after_gate(门读到的那一位住客在写规则的落定段段首已不在:删了 / 同 id 重建;零写;体 not_found.session,与门同体)": { attr: 404, since: "7.151.0" },
         },
         retired: {},
     },
@@ -1032,11 +1110,44 @@ export const SELF_MINTED_WIRE = {
     sessionMemoryStatusKey: {
         at: "GET /v1/sessions/:id/memory-status 200 体顶层键(<键> → 在场律)",
         members: {
-            memorySync: { attr: "present-iff this deployment runs a memory sync leg;{parked:[{scope,wayOut}]} in sync order;parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)", since: "7.141.0" },
+            memorySync: { attr: "present-iff this deployment runs a memory sync leg;{parked:[entry]} in sync order (entry keys: memorySyncParkedKey);parked:[] ⇔ no layer parked;deployment fact (same for every session, ?scope= not applied)", since: "7.151.0" },
             writeHome: { attr: "present-iff the engine answered it ∧ the single-user host lane (the capability bit projectContext's range predicate: hosted / sandbox / device / no-hands lanes ⇒ absent);the engine's absolute directory, byte for byte;with ?scope= that store's engine answer;without ?scope= the session-level home the engine chose across the stores (the newest store's own home;absent while any store's reading is unreadable, on a same-instant tie, or when no store names one)", since: "7.146.0" },
             planes: { attr: "present-iff no ?scope= ∧ the single-user host lane (same predicate as writeHome);[{plane:\"project\"|\"personal\", writeHome?}] one row per store in the engine's store order, each row the engine's own answer for that store (writeHome verbatim, absent when that store names none);the rows' other keys are not on the wire", since: "7.146.0" },
         },
     },
+    memorySyncParkedKey: {
+        at: "GET /v1/sessions/:id/memory-status memorySync.parked[] 条目键(<键> → 在场律)",
+        members: {
+            scope: { attr: "always;the layer's key (the sync layer first, then the owner's project layers by key)", since: "7.141.0" },
+            wayOut: { attr: "always;closed set memorySyncWayOut", since: "7.141.0" },
+            cause: { attr: "always;closed set memorySyncParkCause;why the layer is parked (not the trigger of the round that hit it)", since: "7.151.0" },
+            axis: { attr: "present-iff cause is cursor_refused ∧ the engine's reading is inside both closed sets (axis in memorySyncCursorAxis ∧ found in memorySyncCursorFound;an unknown word in either ⇒ both keys absent);the axis the engine refused the cursor on", since: "7.151.0" },
+            found: { attr: "present-iff axis is present (the two keys come as a pair);closed set memorySyncCursorFound;whether the cursor has no binding on that axis (absent) or is bound to another value (other)", since: "7.151.0" },
+        },
+    },
+    memorySyncParkCause: {
+        at: "GET /v1/sessions/:id/memory-status memorySync.parked[].cause",
+        members: {
+            cursor_refused: { attr: "-", since: "7.151.0" },
+            cursor_unusable: { attr: "-", since: "7.151.0" },
+        },
+    },
+    memorySyncCursorAxis: {
+        at: "GET /v1/sessions/:id/memory-status memorySync.parked[].axis",
+        members: {
+            scope: { attr: "-", since: "7.151.0" },
+            peer: { attr: "-", since: "7.151.0" },
+            store: { attr: "-", since: "7.151.0" },
+            incarnation: { attr: "-", since: "7.151.0" },
+        },
+    },
+    memorySyncCursorFound: {
+        at: "GET /v1/sessions/:id/memory-status memorySync.parked[].found",
+        members: {
+            absent: { attr: "-", since: "7.151.0" },
+            other: { attr: "-", since: "7.151.0" },
+        },
+    },
     memorySyncWayOut: {
         at: "GET /v1/sessions/:id/memory-status memorySync.parked[].wayOut",
         members: {
@@ -1080,8 +1191,6 @@ export const SELF_MINTED_WIRE = {
             "session faces · list faces · /metrics family#dev-open-principal-header-not-owner": { attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)", since: "7.149.0" },
             "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", since: "7.148.0" },
             "run faces#row-without-owner-cell-no-fleet-no-operator": { attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)", since: "7.148.0" },
-            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
-            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
             "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", since: "7.148.0" },
         },
     },
@@ -1097,6 +1206,17 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_active_run#activeTaskId": { attr: "always on this face;the run holding the session's durable claim (the message names it too)", since: "7.147.0" },
         },
     },
+    sessionOccupantWire: {
+        at: "session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence)",
+        members: {
+            "GET /v1/sessions/:id/head 200#activeTaskId": { attr: "present-iff a durable run store is wired (DB_BACKEND=mysql|pg|local);the run holding the session's claim, null once released;same projection as the 409 conflict.session_active_run body;re-read of the head after a non-null holder, occupant changed ⇒ 404 like a missing session", since: "7.152.0" },
+            "GET /v1/sessions/:id/head 200#activeTaskStatus": { attr: "present-iff activeTaskId names a run whose stored row is running | suspended | needs_review;same projection as the 409 body", since: "7.152.0" },
+            "GET /v1/sessions/:id/head#ETag": { attr: "the sha256 base64url of the 200 body bytes (leaf and occupancy are both version);was the quoted leafId", since: "7.152.0" },
+            "DELETE /v1/sessions/:id 409 conflict.session_active_run#activeTaskStatus": { attr: "present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe", since: "7.152.0" },
+            "POST /v1/sessions/:id/rewind-files 409 conflict.session_active_run#activeTaskStatus": { attr: "present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe", since: "7.152.0" },
+            "submit and resume faces 409 conflict.session_active_run#activeTaskId": { attr: "null when the claim was released between the write's collision and its observation;was the empty string", since: "7.152.0" },
+        },
+    },
     adoptionImportOutcome: {
         at: "POST /v1/adoption/:id/sessions 200 results[].outcome",
         members: {
@@ -1169,6 +1289,7 @@ export const SELF_MINTED_WIRE = {
     refusalSentenceForm: {
         at: "拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变)",
         members: {
+            "409 conflict#staged_import_commit(会话同步推送第二阶段的提交:暂存提交的住客 CAS 没过)": { attr: "session changed hands while the import streamed (deleted, re-created or re-owned); nothing was imported — start the sync again", since: "7.151.0" },
             "401 auth.unauthorized#operator(/metrics* · GET /v1/tasks/source-summary)": { attr: "… send the deployment's service token … without a principal header where this deployment lets its service token act for the deployment itself (GET /health reports it as auth.serviceTokenActsForDeployment; …), or a read-only token this endpoint accepts (…)", since: "7.146.0" },
             "422 invalid_entries#row_contract(会话同步推送第二阶段;收编批量导入同句进逐元素 detail)": { attr: "malformed entry (id and parentId must be strings of 1-64 characters, type a string of 1-32 characters)", since: "7.146.0" },
             "404 not_found.run#a*/wa* id(compact · detach · 子代动词口;各 run 口的非属主臂)": { attr: "run not found — \"<id>\" looks like an agent handle (a*/wa* domain) … (the handle hint, same sentence as the missing-row arm)", since: "7.148.0" },
@@ -1179,7 +1300,7 @@ export const SELF_MINTED_WIRE = {
             "400 request.field_invalid#title.no_visible_character(PATCH /v1/sessions/:id · 会话同步 2c 导入的 title)": { attr: "title must contain at least one visible character", since: "7.136.0" },
             "503 state.file_history_unreadable#store_connection_fault(会话同步三条拉取读腿)": { attr: "this session's stored state could not be read right now (the store connection failed), so nothing was exported — retry later", since: "7.136.0" },
             "503 state.file_history_unreadable#store_deployment_fault(会话同步三条拉取口)": { attr: "this session's stored state cannot be read: the store does not match what this deployment requires (a table is missing or the database account lacks a privilege), so nothing was exported — retrying will not help until an operator repairs the store", since: "7.137.0" },
-            "connect_failed(run 失败终局)#snapshot_bucket_missing(k8s 车道读 latest 得 404 NoSuchBucket;连沙箱失败,一只 pod 都不建)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.136.0" },
+            "env.snapshot_bucket_missing#snapshot_bucket_missing(k8s 车道读 latest / 取快照归档得 404 NoSuchBucket;建连的立定拒 —— 不留 pod〔读 latest 不建,取归档建的那只释放〕,执行环境记住它直到销毁)": { attr: "workspace space pointer read failed (snapshot_bucket_missing): the workspace snapshot bucket <name> (WORKSPACE_SNAPSHOT_BUCKET; default workspaces) does not exist in the object store — refusing to start this run … Ways out: create the bucket, or set WORKSPACE_SNAPSHOT_BUCKET to one that exists, or set WORKSPACE_PERSIST=off …", since: "7.151.0" },
             "400 request.field_invalid#images[i].url.credential": { attr: "<field> <规则句> — the URL is kept as written (a parked task's resume context, logs), while images[i] can carry the image bytes inline: send { data, mimeType } instead of a URL that holds the credential", since: "7.136.0" },
             "400 request.field_invalid#images.not_array": { attr: "head: images is <shape>, not an array of image entries", since: "7.148.0" },
             "400 request.field_invalid#images[i].not_object": { attr: "head: images[i] is <shape>, not an image entry (an object)", since: "7.148.0" },
@@ -1215,13 +1336,18 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_memory_unobserved#no_leaf": { attr: "this session has no transcript yet, so there is no revision to sync from — run a task in it (…), then sync", since: "7.143.0" },
             "400 request.field_invalid#unread_request_members(新提交:settings.env 有成员不是帽内的串;嵌入方直调装配时四座同句)": { attr: "this request carries a member|members this server version's readers cannot take as written, on a deployment that would apply it|them: <坐标,至多 8 处>[ (and <n> more)] — running it would silently leave that member|those members out (a hook that guards a tool, an MCP server's credentials); submit it again with this member|these members in the current form", since: "7.147.0" },
             "409 resume_blocked_by_policy#unread_members(续跑四门 · steer 铸唤醒卡之前)": { attr: "resume blocked by an admission policy change: <同上一句>", since: "7.147.0" },
+            "503 auth.service_token_required#task_submissions(计费提交 · bake · 改写门;停驻赎回席同句)": { attr: "this worker requires a service auth token (set SERVICE_AUTH_TOKEN) or a verified registry sign-in token before accepting task submissions", since: "7.151.0" },
+            "503 auth.service_token_required#destructive_session_writes": { attr: "this worker requires a service auth token (set SERVICE_AUTH_TOKEN) or a verified registry sign-in token before accepting destructive session writes (policy / sync-import / fork / delete)", since: "7.151.0" },
+            "413 request.payload_too_large#store_row_too_large(POST /v1/tasks|/v1/tasks/stream|/v1/runs;续跑输入一行装不下,row / statement / value 三墙)": { attr: "the database refused to store this task: it is larger than the database keeps in one row|accepts in one statement|PostgreSQL holds in one value — nothing was run; <出路>", since: "7.151.0" },
+            "adopt_failed|track_failed|snapshot_failed|restore_failed#store_fault(文件历史店的失败句:会话同步推送与 blob 交换的拒体 · rewind / restore 的逐文件失败句)": { attr: "<动作> failed: <类别句> [original code: <原码>]", since: "7.151.0" },
+            "子代失败句#store_fault(tool_end 子代卡 structured.errorMessage · 后台子代通告的 summary · GET /v1/runs/:id/subagents/:handle/output 的 content / output · 父模型读到的子代报告行)": { attr: "<类别句> [original code: <原码>](与 run 终局 terminal.failed.message 同一句)", since: "7.151.0" },
+            "501 feature.approval_ask_disabled#POST /v1/tasks/:taskId/asks/:askId/decision · GET /v1/tasks/:taskId/asks/:askId": { attr: "the durable stream-approval ask ledger is not enabled on this worker (needs a store backend (DB_BACKEND) and DURABLE_APPROVAL)", since: "7.152.0" },
         },
     },
     decisionBodyKey: {
         at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
         members: {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
-            "POST /v1/tool-approvals/:id/respond#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid (this door: request.body_shape)", since: "7.143.0" },
             "POST /v1/tasks/:taskId/asks/:askId/decision#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid", since: "7.143.0" },
             "POST /v1/approvals/:sessionId/decide#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
             "POST /v1/assistant/tasks/:id/plan_review#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
@@ -1270,6 +1396,7 @@ export const SELF_MINTED_WIRE = {
             answer: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.87.0" },
             checkpointId: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.137.0" },
             permissionModeAfter: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.87.0" },
+            persistRule: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.152.0" },
         },
     },
     storeFaultPermanence: {
@@ -1289,13 +1416,14 @@ export const SELF_MINTED_WIRE = {
         },
     },
     deviceProtocolRevision: {
-        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加进结局码闭集的词;零加词的语义修订 → 变更名)",
+        at: "GET /v1/capabilities deviceExecutor.protocolVersion 与 device WS challenge 帧的修订号(<修订号> → 它加的词:结局码 `+词`、下发指令 kind `+kind:词`;两张表都零加词的语义修订 → 变更名)",
         members: {
             1: { attr: "base", since: "7.51.0" },
             2: { attr: "+liveness_no_output", since: "7.133.0" },
             3: { attr: "+name_too_long", since: "7.137.0" },
             4: { attr: "+symlink_loop", since: "7.143.0" },
             5: { attr: "paths-unfolded", since: "7.150.0" },
+            6: { attr: "+kind:openBound", since: "7.151.0" },
         },
     },
     hookNonBlockingFailureReason: {
@@ -1363,6 +1491,7 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/config/catalog#rows[MODEL_ROUTER_ID].derivedDefaultNote": { attr: "absent=>classifier-role-in-served-table", since: "7.143.0" },
             "GET /v1/config/catalog#rows[MINIO_BUCKET].semantics": { attr: "leader-diff-out-bucket;independent-of-WORKSPACE_SNAPSHOT_BUCKET", since: "7.148.0" },
             "GET /v1/config/catalog#rows[MINIO_BUCKET].derivedDefaultNote": { attr: "absent=>WORKSPACE_SNAPSHOT_BUCKET_DEFAULT(not-the-explicit-value)", since: "7.148.0" },
+            "GET /v1/config/catalog#rows[ALLOW_UNAUTHED_WRITES].semantics": { attr: "write-gate-admits-requests-without-a-gate-credential(service-token|verified-sign-in-token);submissions+rewrites+destructive-session-writes", since: "7.151.0" },
             "GET /v1/sessions/:id/mcp#servers[].error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "POST /v1/sessions/:id/mcp/reconnect#reason|status.error|listingIncomplete.error": { attr: "exit-seat:mcp-remote-text(engine-mark=masked-value)+truncate:200", since: "7.138.0" },
             "GET /v1/config/catalog#rows[MODEL_VISION].semantics": { attr: "names-engine-notice:model.capability_downgraded", since: "7.137.0" },
@@ -1378,6 +1507,10 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/runs/:id/events#text.text(段文本含只有 text_end 的块)": { attr: "segment-text=block-texts-concat;end-only-block=text_end.content", since: "7.144.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/assistant/tasks/:id/plan_review|/v1/assistant/tasks/:id/resume|/v1/sessions/:id/wake#errorCode(引擎拒 checkpoint.invalid_outcome)": { attr: "decision-cause⇒cause-code;row-own(reason)|no-cause⇒checkpoint.invalid_outcome", since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide#errorCode(这一行自己的拒:读行臂 / 门型守卫之前)": { attr: "rowVerdict.code+reason+retriable:true(engine-judge;before-gate)", since: "7.147.0" },
+            "GET /v1/approvals#pending[].input": { attr: "question|plan-whole;other-fold>32768-utf8-bytes;marker.bytes=utf8-bytes", since: "7.152.0" },
+            "GET /v1/approvals#pending[](动作事实)": { attr: "one-whole-row-decode(the bytes resume executes);sql≡local;undecodable⇒null|absent+rowVerdict≠ok", since: "7.152.0" },
+            "SSE question#questions": { attr: "redacted-whole;no-size-cap;unserializable⇒no-frame", since: "7.152.0" },
+            "SSE tool_approval#args(approval_request card.args · card_json · acceptableForm 同读)": { attr: "question|plan-whole;other-omitted>32768-utf8-bytes", since: "7.152.0" },
         },
     },
 };

package/dist/web-admin-client/apply-effective.js

@@ -1,7 +1,7 @@
 import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { CATALOG_REPLACES_ENV_MODELS_CODE, SandboxGitConfig, WEB_ADMIN_ENV, envModelsDecisionTag, formatConfigPath, narrowAtMention, parseDomainSalvaged, resolveActiveTiers, resolveCatalogDefaultModel, sanitizeZodError } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
-import { DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
+import { CATALOG_REFUSAL_LEG, DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, isRosterGateArmed, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { NAME_TABLE_BEHAVIOR, retiredLeftOutEntries } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
@@ -501,7 +501,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
         if (noDefault !== undefined)
             return refuse(DEFAULT_MODEL_MISSING_CODE, noDefault);
-        const endpoint = judgeModelRouteEndpoint(nextView, "catalog");
+        const endpoint = judgeModelRouteEndpoint(nextView, CATALOG_REFUSAL_LEG);
         if (endpoint !== undefined)
             return refuse(endpoint.code, endpoint.reason);
         const minted = crossInvariant("refused-names-not-minted").check({ live: config, next: nextView });

package/dist/web-admin-client/read-warnings.d.ts

@@ -28,8 +28,8 @@ import { z } from "zod";
 import { type ConfigDocumentRefusal, type DroppedEntryIdentity, type DroppedEntryReasonCode, type EffectiveReadWarning } from "@sema-agent/settings-schema";
 /**
  * 远端读腿在过契约读腿(`readEffectiveWire`)**之前**把退役域键分出去:wire 体上每个退役域键过契约的同一只墓碑(`refuseRetiredDomain`)——
- * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` / `migration` 取
- * `RetiredDomainError` 的同名字段)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
+ * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` 取
+ * `RetiredDomainError` 的拒句)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
  * 体不是对象 ⇒ 原样交回、不判(载荷形错,契约读腿抛)。墓碑判据只在契约包,这里只分键。
  * 被拒文档是两条读腿同形的发现(判决只在候选判官 `candidate-gate.ts` 的 `judgeConfigCandidate`,成因词 = 发现自带的 `reason`):本地腿的被拒文档是契约单读口
  * `FileConfigStore.read()` 那一读的拒单原样(`config-provider.ts`),wire 上没有文件层,只有这一种墓碑。`error` 本模块不脱敏(与折叠产物同律):各腿在自己的产出边界上过

package/dist/web-admin-client/read-warnings.js

@@ -12,7 +12,7 @@ export function separateRetiredDomains(body) {
         catch (e) {
             if (!(e instanceof RetiredDomainError))
                 throw e;
-            refused.push({ document: e.domain, reason: "retired_domain", error: e.message, migration: e.migration });
+            refused.push({ document: e.domain, reason: "retired_domain", error: e.message });
             delete rest[domain];
         }
     }

package/dist/web-admin-client/types.d.ts

@@ -343,7 +343,7 @@ export interface EffectiveConfig {
      * [ref] 批1 —— **limitsHttp 组的热更新发布域**([ref] §6 批1)。
      *
      * 限额五闸(rateLimitPerMin / maxTaskCostUsd / maxTaskTokens / maxPrincipalCostUsd / costQuotaWindowSec)与其余限额键的**唯一**发布位:
-     * settings-schema 11 退役了 `runtime` 域(它曾承载前五键;存量由一次性迁移 SS-M1 搬进本域,读腿对带事实的 `runtime` 整份拒),
+     * settings-schema 11 退役了 `runtime` 域(它曾承载前五键;读腿对带事实的 `runtime` 整份拒 —— 搬它进本域的那一步一次性迁移随契约 26.0.0 删了,存量手写到本域),
      * 本仓的旧位读法随之删 —— 一个键一个发布位,没有「两处同现谁赢」的优先级规则。两条腿都读它(本地腿:`config.d/limits.json`,
      * `limits` 在 PORTABLE_DOMAINS 里)。
      */