@sema-agent/server 7.150.0 → 7.152.0

package/wire-changes/server@7.152.0.json

@@ -0,0 +1,900 @@
+{
+  "repo": "server",
+  "version": "7.152.0",
+  "from": "v7.151.0",
+  "fromCommit": "e0fab778ce94fcd81c8905290fffac49b2efc7f5",
+  "to": "v7.152.0",
+  "generator": "scripts/wire-changes-server.mjs",
+  "sources": [
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1h",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#A.1g",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.1a",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2b",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#B.2",
+    "docs/ASSISTANT-WIRE-CONTRACT.md#D.3",
+    "src/trace/wire-projection-faces.ts",
+    "src/trace/self-minted-wire.ts",
+    "node_modules/@sema-agent/core/wire-changes",
+    "src/trace/core-vocab-wire.ts"
+  ],
+  "added": [
+    {
+      "id": "A1",
+      "source": "capability",
+      "member": "approvalDecideRuleSlot",
+      "text": "附录 B.1 能力位新增 `approvalDecideRuleSlot`(谓词类 恒真)"
+    },
+    {
+      "id": "A2",
+      "source": "capability",
+      "member": "effectiveScenario",
+      "text": "附录 B.1 能力位新增 `effectiveScenario`(谓词类 恒真)"
+    },
+    {
+      "id": "A3",
+      "source": "errorCode",
+      "member": "auth.principal_confined",
+      "text": "附录 A.1 / A.1b 错误码新增 `auth.principal_confined`(状态码 403)"
+    },
+    {
+      "id": "A4",
+      "source": "errorCodeFamily",
+      "member": "auth.principal_confined",
+      "text": "附录 A.1 / A.1b / A.1h 错误码的码族新增 `auth.principal_confined`(码族 deterministic)"
+    },
+    {
+      "id": "A5",
+      "source": "selfMinted.approvalEnvelopeExtKey",
+      "member": "persistRule",
+      "text": "自铸 直连门证明 HMAC 信封第 6 位扩展对象的键(<键> → 用它的门) 新增 `persistRule`(属性 POST /v1/approvals/:sessionId/decide;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A6",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "bind_failed",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `bind_failed`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A7",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "data_root_not_exclusive",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `data_root_not_exclusive`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A8",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "dir_not_private",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `dir_not_private`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A9",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "path_occupied",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `path_occupied`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A10",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "path_too_long",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `path_too_long`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A11",
+      "source": "selfMinted.controlSocketUnavailableReason",
+      "member": "unsupported_platform",
+      "text": "自铸 stdout 启动协议行 listening controlSocketUnavailable 新增 `unsupported_platform`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A12",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "ALL routes after the auth-bridge pre-authentication except POST /v1/admin/drain (not GET /health, /readyz, /metrics*)#drain_principal_confined(验过的人在 OPERATOR_DRAIN_PRINCIPALS;三来源同判:登记中心登录令牌 / 直连门 principal 令牌 / 受信主体头;先于门前读路、凭据门、写门与就绪 503、门后段与 405 / 404;体 auth.principal_confined)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `ALL routes after the auth-bridge pre-authentication except POST /v1/admin/drain (not GET /health, /readyz, /metrics*)#drain_principal_confined(验过的人在 OPERATOR_DRAIN_PRINCIPALS;三来源同判:登记中心登录令牌 / 直连门 principal 令牌 / 受信主体头;先于门前读路、凭据门、写门与就绪 503、门后段与 405 / 404;体 auth.principal_confined)`(属性 403;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A13",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /health#drain_principal_credential(配了 service 凭据;请求只带排空档主体的身份、没出示 service / trace 凭据 ⇒ 匿名四键形)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /health#drain_principal_credential(配了 service 凭据;请求只带排空档主体的身份、没出示 service / trace 凭据 ⇒ 匿名四键形)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A14",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/capabilities/mcp#scenario_conflict(场景头 x-agent-scenario 与 ?scenario= 不同;与提交腿同一只点名读法)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/capabilities/mcp#scenario_conflict(场景头 x-agent-scenario 与 ?scenario= 不同;与提交腿同一只点名读法)`(属性 400;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A15",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/capabilities/scenario#scenario_assignment_unknown|scenario_assignment_unavailable(门拒原样:指派悬空 / 中心答不出;体同提交腿;答不出不回落任何缺省)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/capabilities/scenario#scenario_assignment_unknown|scenario_assignment_unavailable(门拒原样:指派悬空 / 中心答不出;体同提交腿;答不出不回落任何缺省)`(属性 503;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A16",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/capabilities/scenario#scenario_unknown|scenario_not_allowed|scenario_conflict(门拒原样:点名不在册 / 白名单外 / 场景头与 ?scenario= 不同;体与同一请求形的提交拒体逐字同)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `GET /v1/capabilities/scenario#scenario_unknown|scenario_not_allowed|scenario_conflict(门拒原样:点名不在册 / 白名单外 / 场景头与 ?scenario= 不同;体与同一请求形的提交拒体逐字同)`(属性 400;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A17",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/admin/drain#drain_principal(验过的人在 OPERATOR_DRAIN_PRINCIPALS;身份四元相符)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/admin/drain#drain_principal(验过的人在 OPERATOR_DRAIN_PRINCIPALS;身份四元相符)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A18",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide#persistRule(停驻工具审批卡的首决;体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/approvals/:sessionId/decide#persistRule(停驻工具审批卡的首决;体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A19",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/approvals/:sessionId/decide|POST /v1/assistant/tasks/:id/plan_review|peer_inbound 决断臂#direct_door_decider_confined(直连门:决定证明推出的决定者在 OPERATOR_DRAIN_PRINCIPALS;证明验过之后、任何归属读之前;零状态变化;体 auth.principal_confined)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/approvals/:sessionId/decide|POST /v1/assistant/tasks/:id/plan_review|peer_inbound 决断臂#direct_door_decider_confined(直连门:决定证明推出的决定者在 OPERATOR_DRAIN_PRINCIPALS;证明验过之后、任何归属读之前;零状态变化;体 auth.principal_confined)`(属性 403;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A20",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks/:taskId/asks/:askId/decision#persistRule(不再询问;首决体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks/:taskId/asks/:askId/decision#persistRule(不再询问;首决体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A21",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks/:taskId/asks/:askId/decision#readRootGrant(添加读目录;只随不带 remember 的 approve,只在单用户 host 车道受理)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks/:taskId/asks/:askId/decision#readRootGrant(添加读目录;只随不带 remember 的 approve,只在单用户 host 车道受理)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A22",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks/:taskId/asks/:askId/decision#remember(本会话放行;只配 approve;体带 rememberApplied)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 新增 `POST /v1/tasks/:taskId/asks/:askId/decision#remember(本会话放行;只配 approve;体带 rememberApplied)`(属性 200;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A23",
+      "source": "selfMinted.listeningLineKey",
+      "member": "controlSocket",
+      "text": "自铸 stdout 启动协议行 listening(<键> → 在场律) 新增 `controlSocket`(属性 present-iff the local control socket is listening (absolute path; exactly one of controlSocket / controlSocketUnavailable);since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A24",
+      "source": "selfMinted.listeningLineKey",
+      "member": "controlSocketUnavailable",
+      "text": "自铸 stdout 启动协议行 listening(<键> → 在场律) 新增 `controlSocketUnavailable`(属性 present-iff the local control socket is not listening (reason word; exactly one of controlSocket / controlSocketUnavailable);since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A25",
+      "source": "selfMinted.livePendingRowSourceKey",
+      "member": "sourceSessionId",
+      "text": "自铸 GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(委派子代的行) 新增 `sourceSessionId`(属性 present-iff fromSubagent (the delegated child's session id; same value as the key on row.frame.card);since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A26",
+      "source": "selfMinted.refusalSentenceForm",
+      "member": "501 feature.approval_ask_disabled#POST /v1/tasks/:taskId/asks/:askId/decision · GET /v1/tasks/:taskId/asks/:askId",
+      "text": "自铸 拒体 message 的句型(<码>#<座> → 句型骨架;码 / 状态 / 机读位不变) 新增 `501 feature.approval_ask_disabled#POST /v1/tasks/:taskId/asks/:askId/decision · GET /v1/tasks/:taskId/asks/:askId`(属性 the durable stream-approval ask ledger is not enabled on this worker (needs a store backend (DB_BACKEND) and DURABLE_APPROVAL);since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A27",
+      "source": "selfMinted.scenarioSource",
+      "member": "request",
+      "text": "自铸 GET /v1/capabilities/scenario#source · 503 state.scenario_assignment_unknown 体根 source 新增 `request`(属性 -;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A28",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "DELETE /v1/sessions/:id 409 conflict.session_active_run#activeTaskStatus",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `DELETE /v1/sessions/:id 409 conflict.session_active_run#activeTaskStatus`(属性 present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A29",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "GET /v1/sessions/:id/head 200#activeTaskId",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `GET /v1/sessions/:id/head 200#activeTaskId`(属性 present-iff a durable run store is wired (DB_BACKEND=mysql|pg|local);the run holding the session's claim, null once released;same projection as the 409 conflict.session_active_run body;re-read of the head after a non-null holder, occupant changed ⇒ 404 like a missing session;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A30",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "GET /v1/sessions/:id/head 200#activeTaskStatus",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `GET /v1/sessions/:id/head 200#activeTaskStatus`(属性 present-iff activeTaskId names a run whose stored row is running | suspended | needs_review;same projection as the 409 body;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A31",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "GET /v1/sessions/:id/head#ETag",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `GET /v1/sessions/:id/head#ETag`(属性 the sha256 base64url of the 200 body bytes (leaf and occupancy are both version);was the quoted leafId;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A32",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "POST /v1/sessions/:id/rewind-files 409 conflict.session_active_run#activeTaskStatus",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `POST /v1/sessions/:id/rewind-files 409 conflict.session_active_run#activeTaskStatus`(属性 present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A33",
+      "source": "selfMinted.sessionOccupantWire",
+      "member": "submit and resume faces 409 conflict.session_active_run#activeTaskId",
+      "text": "自铸 session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence) 新增 `submit and resume faces 409 conflict.session_active_run#activeTaskId`(属性 null when the claim was released between the write's collision and its observation;was the empty string;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A34",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/approvals#pending[](动作事实)",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/approvals#pending[](动作事实)`(属性 one-whole-row-decode(the bytes resume executes);sql≡local;undecodable⇒null|absent+rowVerdict≠ok;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A35",
+      "source": "selfMinted.wireValueRule",
+      "member": "GET /v1/approvals#pending[].input",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `GET /v1/approvals#pending[].input`(属性 question|plan-whole;other-fold>32768-utf8-bytes;marker.bytes=utf8-bytes;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A36",
+      "source": "selfMinted.wireValueRule",
+      "member": "SSE question#questions",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `SSE question#questions`(属性 redacted-whole;no-size-cap;unserializable⇒no-frame;since 7.152.0 = 本版新上 wire)"
+    },
+    {
+      "id": "A37",
+      "source": "selfMinted.wireValueRule",
+      "member": "SSE tool_approval#args(approval_request card.args · card_json · acceptableForm 同读)",
+      "text": "自铸 出口值变换(<端点>#<键> → 变换) 新增 `SSE tool_approval#args(approval_request card.args · card_json · acceptableForm 同读)`(属性 question|plan-whole;other-omitted>32768-utf8-bytes;since 7.152.0 = 本版新上 wire)"
+    }
+  ],
+  "registered": [
+    {
+      "id": "L1",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tasks/:taskId/asks/:askId/decision 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 登记 `POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tasks/:taskId/asks/:askId/decision 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)`(属性 该口自己的受理(POST /v1/runs 202 · POST /v1/tasks 同步 200 …);since 7.151.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L2",
+      "source": "selfMinted.entryProblemServerReason",
+      "member": "cc_rule_form",
+      "text": "自铸 400/409/422 problems[].reason · 受理应答 warnings[].reason(本仓自铸的词) 登记 `cc_rule_form`(属性 -;since 7.133.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L3",
+      "source": "selfMinted.healthAnonymousKey",
+      "member": "auth",
+      "text": "自铸 GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket) 登记 `auth`(属性 always;since 7.148.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L4",
+      "source": "selfMinted.healthAnonymousKey",
+      "member": "center",
+      "text": "自铸 GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket) 登记 `center`(属性 always;since 7.148.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L5",
+      "source": "selfMinted.healthAnonymousKey",
+      "member": "operator",
+      "text": "自铸 GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket) 登记 `operator`(属性 always;since 7.148.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L6",
+      "source": "selfMinted.healthAnonymousKey",
+      "member": "status",
+      "text": "自铸 GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket) 登记 `status`(属性 always;since 7.148.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L7",
+      "source": "selfMinted.scenarioSource",
+      "member": "deployment",
+      "text": "自铸 GET /v1/capabilities/scenario#source · 503 state.scenario_assignment_unknown 体根 source 登记 `deployment`(属性 -;since 7.119.0 —— 早于本版,只是登记)"
+    },
+    {
+      "id": "L8",
+      "source": "selfMinted.scenarioSource",
+      "member": "ruling",
+      "text": "自铸 GET /v1/capabilities/scenario#source · 503 state.scenario_assignment_unknown 体根 source 登记 `ruling`(属性 -;since 7.119.0 —— 早于本版,只是登记)"
+    }
+  ],
+  "excluded": [],
+  "removed": [
+    {
+      "id": "R1",
+      "source": "errorCode",
+      "member": "feature.tool_approval_disabled",
+      "text": "附录 A.1 / A.1b 错误码删除 `feature.tool_approval_disabled`(原状态码 501)"
+    },
+    {
+      "id": "R2",
+      "source": "errorCodeFamily",
+      "member": "feature.tool_approval_disabled",
+      "text": "附录 A.1 / A.1b / A.1h 错误码的码族删除 `feature.tool_approval_disabled`(原码族 deterministic)"
+    },
+    {
+      "id": "R3",
+      "source": "selfMinted.decisionBodyKey",
+      "member": "POST /v1/tool-approvals/:id/respond#decidedVia",
+      "text": "自铸 回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键) 删除 `POST /v1/tool-approvals/:id/respond#decidedVia`(原属性 optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid (this door: request.body_shape))"
+    },
+    {
+      "id": "R4",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 删除 `GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)`(原属性 404)"
+    },
+    {
+      "id": "R5",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 删除 `GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)`(原属性 404)"
+    },
+    {
+      "id": "R6",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tool-approvals/:id/respond 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 删除 `POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tool-approvals/:id/respond 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)`(原属性 该口自己的受理(POST /v1/runs 202 · POST /v1/tasks 同步 200 …))"
+    },
+    {
+      "id": "R7",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 删除 `POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)`(原属性 400)"
+    },
+    {
+      "id": "R8",
+      "source": "selfMinted.endpointFaceStatus",
+      "member": "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)",
+      "text": "自铸 逐端点应答面 → 状态(<端点>#<面> → 状态;只登记本版改了状态的面) 删除 `POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)`(原属性 200)"
+    },
+    {
+      "id": "R9",
+      "source": "selfMinted.extensionRequesterSeat",
+      "member": "tool_approval#requestedBy",
+      "text": "自铸 审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律) 删除 `tool_approval#requestedBy`(原属性 present-iff extension-initiated call)"
+    },
+    {
+      "id": "R10",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "GET /health#draining",
+      "text": "自铸 - 于本版退役 `GET /health#draining`(原属性 true, present-iff draining (now engineSignal.draining present);自 1.189.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R11",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "GET /health#drainingSince",
+      "text": "自铸 - 于本版退役 `GET /health#drainingSince`(原属性 epoch ms, present-iff draining (now engineSignal.draining.since);自 1.189.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R12",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#draining",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#draining`(原属性 boolean, always present (true iff the drain fact is present; now engineSignal.draining present);自 1.189.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R13",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#generation",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#generation`(原属性 present-iff fleet member (FLEET_GENERATION echo; now engineSignal.generation);自 7.121.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R14",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#leaseState",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#leaseState`(原属性 present-iff fleet member (LeaseState word; now engineSignal.leaseState);自 7.121.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R15",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#leaseUntil",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#leaseUntil`(原属性 present-iff leaseState granted (epoch ms; now engineSignal.leaseUntil);自 7.121.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R16",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#ready",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#ready`(原属性 boolean, always present (the readiness verdict; now engineSignal.ready);自 1.189.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R17",
+      "source": "selfMinted.fleetFlatEngineState",
+      "member": "POST /api/fleet/instances#restart",
+      "text": "自铸 - 于本版退役 `POST /api/fleet/instances#restart`(原属性 present-iff a restart signal ({ reasons, version, since, withheld? }; now engineSignal.restart);自 7.102.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R18",
+      "source": "selfMinted.livePendingRowSourceKey",
+      "member": "originTaskId",
+      "text": "自铸 GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(委派子代的行) 于本版退役 `originTaskId`(原属性 present-iff fromSubagent (the delegated child's session id; the same value now under sourceSessionId);自 7.52.0 起在 wire 上,until 7.152.0 = 本版)"
+    },
+    {
+      "id": "R19",
+      "source": "selfMinted.notPendingCause",
+      "member": "adhoc_leg_no_durable_domain",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `adhoc_leg_no_durable_domain`(原属性 -)"
+    },
+    {
+      "id": "R20",
+      "source": "selfMinted.notPendingCause",
+      "member": "batch_aborted",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `batch_aborted`(原属性 -)"
+    },
+    {
+      "id": "R21",
+      "source": "selfMinted.notPendingCause",
+      "member": "batch_bound_elsewhere",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `batch_bound_elsewhere`(原属性 -)"
+    },
+    {
+      "id": "R22",
+      "source": "selfMinted.notPendingCause",
+      "member": "batch_sibling_withdrawn",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `batch_sibling_withdrawn`(原属性 -)"
+    },
+    {
+      "id": "R23",
+      "source": "selfMinted.notPendingCause",
+      "member": "crashed_before_park",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `crashed_before_park`(原属性 -)"
+    },
+    {
+      "id": "R24",
+      "source": "selfMinted.notPendingCause",
+      "member": "orphan_ttl_exceeded",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `orphan_ttl_exceeded`(原属性 -)"
+    },
+    {
+      "id": "R25",
+      "source": "selfMinted.notPendingCause",
+      "member": "routing_failure_fail_closed",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `routing_failure_fail_closed`(原属性 -)"
+    },
+    {
+      "id": "R26",
+      "source": "selfMinted.notPendingCause",
+      "member": "run_cancelled",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `run_cancelled`(原属性 -)"
+    },
+    {
+      "id": "R27",
+      "source": "selfMinted.notPendingCause",
+      "member": "run_exited",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `run_exited`(原属性 -)"
+    },
+    {
+      "id": "R28",
+      "source": "selfMinted.notPendingCause",
+      "member": "shutdown_before_park",
+      "text": "自铸 GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause 删除 `shutdown_before_park`(原属性 -)"
+    },
+    {
+      "id": "R29",
+      "source": "selfMinted.ownerFaceAnswer",
+      "member": "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)",
+      "text": "自铸 属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变) 删除 `GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)`(原属性 404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger))"
+    },
+    {
+      "id": "R30",
+      "source": "selfMinted.ownerFaceAnswer",
+      "member": "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)",
+      "text": "自铸 属主门的逐口答复(<口>#<调用方 × 行> → 状态 errorCode;其余各口的码与句逐字不变) 删除 `POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)`(原属性 404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger))"
+    },
+    {
+      "id": "R31",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "adhoc_leg_no_durable_domain",
+      "text": "自铸 tool_approval_complete frame cause 删除 `adhoc_leg_no_durable_domain`(原属性 key:cause)"
+    },
+    {
+      "id": "R32",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "batch_aborted",
+      "text": "自铸 tool_approval_complete frame cause 删除 `batch_aborted`(原属性 key:cause)"
+    },
+    {
+      "id": "R33",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "batch_bound_elsewhere",
+      "text": "自铸 tool_approval_complete frame cause 删除 `batch_bound_elsewhere`(原属性 key:cause)"
+    },
+    {
+      "id": "R34",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "batch_sibling_withdrawn",
+      "text": "自铸 tool_approval_complete frame cause 删除 `batch_sibling_withdrawn`(原属性 key:cause)"
+    },
+    {
+      "id": "R35",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "broadcast_lost",
+      "text": "自铸 tool_approval_complete frame cause 删除 `broadcast_lost`(原属性 key:cause)"
+    },
+    {
+      "id": "R36",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "crashed_before_park",
+      "text": "自铸 tool_approval_complete frame cause 删除 `crashed_before_park`(原属性 key:cause)"
+    },
+    {
+      "id": "R37",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "orphan_ttl_exceeded",
+      "text": "自铸 tool_approval_complete frame cause 删除 `orphan_ttl_exceeded`(原属性 key:cause)"
+    },
+    {
+      "id": "R38",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "routing_failure_fail_closed",
+      "text": "自铸 tool_approval_complete frame cause 删除 `routing_failure_fail_closed`(原属性 key:cause)"
+    },
+    {
+      "id": "R39",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "run_cancelled",
+      "text": "自铸 tool_approval_complete frame cause 删除 `run_cancelled`(原属性 key:cause)"
+    },
+    {
+      "id": "R40",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "run_exited",
+      "text": "自铸 tool_approval_complete frame cause 删除 `run_exited`(原属性 key:cause)"
+    },
+    {
+      "id": "R41",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "shutdown_before_park",
+      "text": "自铸 tool_approval_complete frame cause 删除 `shutdown_before_park`(原属性 key:cause)"
+    },
+    {
+      "id": "R42",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "stream_disconnected",
+      "text": "自铸 tool_approval_complete frame cause 删除 `stream_disconnected`(原属性 key:cause)"
+    },
+    {
+      "id": "R43",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "ttl_expired",
+      "text": "自铸 tool_approval_complete frame cause 删除 `ttl_expired`(原属性 key:cause)"
+    },
+    {
+      "id": "R44",
+      "source": "selfMinted.toolApprovalCompleteCause",
+      "member": "undeliverable",
+      "text": "自铸 tool_approval_complete frame cause 删除 `undeliverable`(原属性 key:cause)"
+    }
+  ],
+  "changed": [
+    {
+      "id": "C1",
+      "source": "engineNotice",
+      "member": "server.model_unreachable",
+      "text": "附录 D.3 engine_notice 码 `server.model_unreachable` 的detail:`{ code, targetHost, proxyInUse?, remedy, sessionId, taskId? }` —— `code` 是上面那只闭集码;`targetHost` = 模型端点的 `host:port`(对 user 受众是**新披露的部署事实**:部署自己声明的模型端点,可以上;代理地址不上 —— 代理形下(`HTTP(S)_PROXY`)终局句只带码与 `via outbound proxy (from <变量>)` —— 整句无任何主机地址:代理那一跳的失败原因里没有代理的 host:port、没有 userinfo,原句只在运维日志 `outbound_connect_failed.proxyHop`;辅助调用形下 run 可 completed,租户面本无主机句,所以不是「终局句里本就有」);`proxyInUse` **只在这一跳走了代理时在场**,且只是**变量名**(`HTTP_PROXY` / `HTTPS_PROXY`)—— 代理地址不上本帧;`remedy` 固定句 `check VPN / proxy; restart if the proxy changed since boot`(机读消费方可原样渲染);`taskId`(**server 7.121.0+**)= 这条腿的 **run 资源 id**,与本腿交给引擎的 `spec.taskId` 同值、与引擎在 run 域码上发的 `detail.taskId` 同一枚(流式腿 = `X-Task-Id` / `meta` 首帧 `taskId`,后台腿 = 提交回执的 `taskId`,续跑腿 = 被续的那条 run 行 id),壳据它把这一帧与同一条 run 的终态配成同一件事;**腿没有 run 资源**(没有 run 店的部署上的流式腿)⇒ 键缺席。⚠️ **无 `runId`**(引擎每次 prepare 铸的那一枚 run 身份在模型调用这一层读不到;同一条 run 的续跑腿与原腿 `taskId` 同值 —— 按「每腿」去重的消费方在续跑腿上会把两腿读成同一 run) → `{ code, targetHost, proxyInUse?, remedy, sessionId, taskId? }` —— `code` 是上面那只闭集码;`targetHost` = 模型端点的 `host:port`(对 user 受众是**新披露的部署事实**:部署自己声明的模型端点,可以上;代理地址不上 —— 代理形下(`HTTP(S)_PROXY`)终局句只带码与 `via outbound proxy (from <变量>)` —— 整句无任何主机地址:代理那一跳的失败原因里没有代理的 host:port、没有 userinfo,原句只在运维日志 `outbound_connect_failed.proxyHop`;辅助调用形下 run 可 completed,租户面本无主机句,所以不是「终局句里本就有」);`proxyInUse` **只在这一跳走了代理时在场**,且只是**变量名**(`HTTP_PROXY` / `HTTPS_PROXY`)—— 代理地址不上本帧;`remedy` **按失败类取自一张闭表**(**7.152.0** 起;7.151.x 及以前对所有失败类是同一句固定句 `check VPN / proxy; restart if the proxy changed since boot`)—— 键、键形不变,仍是自由文本位(机读消费方可原样渲染;**按通告码与 `detail.code` / `detail.proxyInUse` 判,不要匹配建议句**)。正文末句与 `remedy` 是表里**同一行的两句**,不各说各的;失败类取自出网建连失败码闭集上每个码的类(`OUTBOUND_CONNECT_FAILURE_CODES` 的 `failureClass`)。选句三条、先到先得:① 这一跳走了代理(`proxyInUse` 在场)⇒ 通用句(拒连 / 解析不了可能是代理那一头的事);② 否则按 `code` 的失败类 —— **拒连**(`ECONNREFUSED`)⇒ `remedy` = `check that a service is listening at the model endpoint address; check the model gateway address configuration`,正文末句 `Check that a service is listening at that address and that the model gateway address is configured correctly.`(不提 VPN);**解析不了**(`ENOTFOUND` / `EAI_AGAIN`)⇒ `remedy` = `check the model gateway address configuration; check DNS / VPN`,正文末句 `Check that the model gateway address is written correctly in the configuration and that DNS (and the VPN, if one is in use) can resolve it.`;**建连超时 / 无路由 / 网络不可达**(`UND_ERR_CONNECT_TIMEOUT` / `EHOSTUNREACH` / `ENETUNREACH`)⇒ 通用句 `remedy` = `check VPN / proxy; restart if the proxy changed since boot`,正文末句 `Check the VPN / proxy; if the proxy changed since the server started, restart it (proxy settings are read once at startup).`(逐字不变);③ 码不在闭集里(类型上到不了)⇒ 通用句(声明的未分类臂)。建议句(正文末句与 `remedy`)里没有任何配置值、代理地址、凭据(模型端点的 `host:port` 只在正文前半句与 `targetHost`,与 7.151.x 同;代理只以变量名在 `proxyInUse`);`taskId`(**server 7.121.0+**)= 这条腿的 **run 资源 id**,与本腿交给引擎的 `spec.taskId` 同值、与引擎在 run 域码上发的 `detail.taskId` 同一枚(流式腿 = `X-Task-Id` / `meta` 首帧 `taskId`,后台腿 = 提交回执的 `taskId`,续跑腿 = 被续的那条 run 行 id),壳据它把这一帧与同一条 run 的终态配成同一件事;**腿没有 run 资源**(没有 run 店的部署上的流式腿)⇒ 键缺席。⚠️ **无 `runId`**(引擎每次 prepare 铸的那一枚 run 身份在模型调用这一层读不到;同一条 run 的续跑腿与原腿 `taskId` 同值 —— 按「每腿」去重的消费方在续跑腿上会把两腿读成同一 run)"
+    },
+    {
+      "id": "C2",
+      "source": "selfMinted.approvalQueueRowVerdict",
+      "member": "rowVerdict",
+      "text": "自铸 GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻门族)的 rowVerdict `rowVerdict` 的属性:present-iff the row's stored bytes were judged on this listing → always (every listed row is judged on this listing; 7.144.0–7.151.x: SQL rows could omit it)(since 7.144.0)"
+    }
+  ],
+  "narrowed": [],
+  "closedSetMembers": [
+    {
+      "set": "errorCode",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b"
+      ],
+      "added": [
+        "auth.principal_confined"
+      ],
+      "registered": [],
+      "removed": [
+        "feature.tool_approval_disabled"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "errorCodeFamily",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1b",
+        "docs/ASSISTANT-WIRE-CONTRACT.md#A.1h"
+      ],
+      "added": [
+        "auth.principal_confined"
+      ],
+      "registered": [],
+      "removed": [
+        "feature.tool_approval_disabled"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "capability",
+      "at": [
+        "docs/ASSISTANT-WIRE-CONTRACT.md#B.1"
+      ],
+      "added": [
+        "approvalDecideRuleSlot",
+        "effectiveScenario"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.approvalEnvelopeExtKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#approvalEnvelopeExtKey"
+      ],
+      "added": [
+        "persistRule"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.controlSocketUnavailableReason",
+      "at": [
+        "src/trace/self-minted-wire.ts#controlSocketUnavailableReason"
+      ],
+      "added": [
+        "bind_failed",
+        "data_root_not_exclusive",
+        "dir_not_private",
+        "path_occupied",
+        "path_too_long",
+        "unsupported_platform"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.decisionBodyKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#decisionBodyKey"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "POST /v1/tool-approvals/:id/respond#decidedVia"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.endpointFaceStatus",
+      "at": [
+        "src/trace/self-minted-wire.ts#endpointFaceStatus"
+      ],
+      "added": [
+        "ALL routes after the auth-bridge pre-authentication except POST /v1/admin/drain (not GET /health, /readyz, /metrics*)#drain_principal_confined(验过的人在 OPERATOR_DRAIN_PRINCIPALS;三来源同判:登记中心登录令牌 / 直连门 principal 令牌 / 受信主体头;先于门前读路、凭据门、写门与就绪 503、门后段与 405 / 404;体 auth.principal_confined)",
+        "GET /health#drain_principal_credential(配了 service 凭据;请求只带排空档主体的身份、没出示 service / trace 凭据 ⇒ 匿名四键形)",
+        "GET /v1/capabilities/mcp#scenario_conflict(场景头 x-agent-scenario 与 ?scenario= 不同;与提交腿同一只点名读法)",
+        "GET /v1/capabilities/scenario#scenario_assignment_unknown|scenario_assignment_unavailable(门拒原样:指派悬空 / 中心答不出;体同提交腿;答不出不回落任何缺省)",
+        "GET /v1/capabilities/scenario#scenario_unknown|scenario_not_allowed|scenario_conflict(门拒原样:点名不在册 / 白名单外 / 场景头与 ?scenario= 不同;体与同一请求形的提交拒体逐字同)",
+        "POST /v1/admin/drain#drain_principal(验过的人在 OPERATOR_DRAIN_PRINCIPALS;身份四元相符)",
+        "POST /v1/approvals/:sessionId/decide#persistRule(停驻工具审批卡的首决;体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)",
+        "POST /v1/approvals/:sessionId/decide|POST /v1/assistant/tasks/:id/plan_review|peer_inbound 决断臂#direct_door_decider_confined(直连门:决定证明推出的决定者在 OPERATOR_DRAIN_PRINCIPALS;证明验过之后、任何归属读之前;零状态变化;体 auth.principal_confined)",
+        "POST /v1/tasks/:taskId/asks/:askId/decision#persistRule(不再询问;首决体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)",
+        "POST /v1/tasks/:taskId/asks/:askId/decision#readRootGrant(添加读目录;只随不带 remember 的 approve,只在单用户 host 车道受理)",
+        "POST /v1/tasks/:taskId/asks/:askId/decision#remember(本会话放行;只配 approve;体带 rememberApplied)"
+      ],
+      "registered": [
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tasks/:taskId/asks/:askId/decision 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)"
+      ],
+      "removed": [
+        "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)",
+        "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)",
+        "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tool-approvals/:id/respond 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)",
+        "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)",
+        "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.entryProblemServerReason",
+      "at": [
+        "src/trace/self-minted-wire.ts#entryProblemServerReason"
+      ],
+      "added": [],
+      "registered": [
+        "cc_rule_form"
+      ],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.extensionRequesterSeat",
+      "at": [
+        "src/trace/self-minted-wire.ts#extensionRequesterSeat"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "tool_approval#requestedBy"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.fleetFlatEngineState",
+      "at": [
+        "src/trace/self-minted-wire.ts#fleetFlatEngineState"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "GET /health#draining",
+        "GET /health#drainingSince",
+        "POST /api/fleet/instances#draining",
+        "POST /api/fleet/instances#generation",
+        "POST /api/fleet/instances#leaseState",
+        "POST /api/fleet/instances#leaseUntil",
+        "POST /api/fleet/instances#ready",
+        "POST /api/fleet/instances#restart"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.healthAnonymousKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#healthAnonymousKey"
+      ],
+      "added": [],
+      "registered": [
+        "auth",
+        "center",
+        "operator",
+        "status"
+      ],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.listeningLineKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#listeningLineKey"
+      ],
+      "added": [
+        "controlSocket",
+        "controlSocketUnavailable"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.livePendingRowSourceKey",
+      "at": [
+        "src/trace/self-minted-wire.ts#livePendingRowSourceKey"
+      ],
+      "added": [
+        "sourceSessionId"
+      ],
+      "registered": [],
+      "removed": [
+        "originTaskId"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.notPendingCause",
+      "at": [
+        "src/trace/self-minted-wire.ts#notPendingCause"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "adhoc_leg_no_durable_domain",
+        "batch_aborted",
+        "batch_bound_elsewhere",
+        "batch_sibling_withdrawn",
+        "crashed_before_park",
+        "orphan_ttl_exceeded",
+        "routing_failure_fail_closed",
+        "run_cancelled",
+        "run_exited",
+        "shutdown_before_park"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.ownerFaceAnswer",
+      "at": [
+        "src/trace/self-minted-wire.ts#ownerFaceAnswer"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)",
+        "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.refusalSentenceForm",
+      "at": [
+        "src/trace/self-minted-wire.ts#refusalSentenceForm"
+      ],
+      "added": [
+        "501 feature.approval_ask_disabled#POST /v1/tasks/:taskId/asks/:askId/decision · GET /v1/tasks/:taskId/asks/:askId"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.scenarioSource",
+      "at": [
+        "src/trace/self-minted-wire.ts#scenarioSource"
+      ],
+      "added": [
+        "request"
+      ],
+      "registered": [
+        "deployment",
+        "ruling"
+      ],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.sessionOccupantWire",
+      "at": [
+        "src/trace/self-minted-wire.ts#sessionOccupantWire"
+      ],
+      "added": [
+        "DELETE /v1/sessions/:id 409 conflict.session_active_run#activeTaskStatus",
+        "GET /v1/sessions/:id/head 200#activeTaskId",
+        "GET /v1/sessions/:id/head 200#activeTaskStatus",
+        "GET /v1/sessions/:id/head#ETag",
+        "POST /v1/sessions/:id/rewind-files 409 conflict.session_active_run#activeTaskStatus",
+        "submit and resume faces 409 conflict.session_active_run#activeTaskId"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    },
+    {
+      "set": "selfMinted.toolApprovalCompleteCause",
+      "at": [
+        "src/trace/self-minted-wire.ts#toolApprovalCompleteCause"
+      ],
+      "added": [],
+      "registered": [],
+      "removed": [
+        "adhoc_leg_no_durable_domain",
+        "batch_aborted",
+        "batch_bound_elsewhere",
+        "batch_sibling_withdrawn",
+        "broadcast_lost",
+        "crashed_before_park",
+        "orphan_ttl_exceeded",
+        "routing_failure_fail_closed",
+        "run_cancelled",
+        "run_exited",
+        "shutdown_before_park",
+        "stream_disconnected",
+        "ttl_expired",
+        "undeliverable"
+      ],
+      "breaking": true
+    },
+    {
+      "set": "selfMinted.wireValueRule",
+      "at": [
+        "src/trace/self-minted-wire.ts#wireValueRule"
+      ],
+      "added": [
+        "GET /v1/approvals#pending[](动作事实)",
+        "GET /v1/approvals#pending[].input",
+        "SSE question#questions",
+        "SSE tool_approval#args(approval_request card.args · card_json · acceptableForm 同读)"
+      ],
+      "registered": [],
+      "removed": [],
+      "breaking": false
+    }
+  ],
+  "breaking": 44
+}