@sema-agent/server 7.151.0 → 7.152.0

package/dist/trace/self-minted-wire.js

@@ -49,6 +49,20 @@ export const SELF_MINTED_WIRE = {
         },
         retired: {},
     },
+    fleetFlatEngineState: {
+        at: "fleet 心跳 POST <中心>/api/fleet/instances 体顶层 · GET /health 体顶层(8.0 平铺引擎态方言;引擎态改读 engineSignal)",
+        members: {},
+        retired: {
+            "POST /api/fleet/instances#ready": { attr: "boolean, always present (the readiness verdict; now engineSignal.ready)", since: "1.189.0", until: "7.152.0" },
+            "POST /api/fleet/instances#draining": { attr: "boolean, always present (true iff the drain fact is present; now engineSignal.draining present)", since: "1.189.0", until: "7.152.0" },
+            "POST /api/fleet/instances#restart": { attr: "present-iff a restart signal ({ reasons, version, since, withheld? }; now engineSignal.restart)", since: "7.102.0", until: "7.152.0" },
+            "POST /api/fleet/instances#generation": { attr: "present-iff fleet member (FLEET_GENERATION echo; now engineSignal.generation)", since: "7.121.0", until: "7.152.0" },
+            "POST /api/fleet/instances#leaseState": { attr: "present-iff fleet member (LeaseState word; now engineSignal.leaseState)", since: "7.121.0", until: "7.152.0" },
+            "POST /api/fleet/instances#leaseUntil": { attr: "present-iff leaseState granted (epoch ms; now engineSignal.leaseUntil)", since: "7.121.0", until: "7.152.0" },
+            "GET /health#draining": { attr: "true, present-iff draining (now engineSignal.draining present)", since: "1.189.0", until: "7.152.0" },
+            "GET /health#drainingSince": { attr: "epoch ms, present-iff draining (now engineSignal.draining.since)", since: "1.189.0", until: "7.152.0" },
+        },
+    },
     sessionMemoryEraseStatus: {
         at: "POST /v1/sessions/:id/memory/erase(已分类拒 errorCode → HTTP 状态)",
         members: {
@@ -79,23 +93,13 @@ export const SELF_MINTED_WIRE = {
         },
     },
     notPendingCause: {
-        at: "POST /v1/tool-approvals/:id/respond · GET /v1/tool-approvals/:id 404 tool_approval.not_pending cause",
-        members: {
-            routing_failure_fail_closed: { attr: "-", since: "7.124.0" },
-            run_cancelled: { attr: "-", since: "7.124.0" },
-            run_exited: { attr: "-", since: "7.124.0" },
-            batch_aborted: { attr: "-", since: "7.124.0" },
-            batch_sibling_withdrawn: { attr: "-", since: "7.124.0" },
-            batch_bound_elsewhere: { attr: "-", since: "7.124.0" },
-            adhoc_leg_no_durable_domain: { attr: "-", since: "7.124.0" },
-            orphan_ttl_exceeded: { attr: "-", since: "7.124.0" },
-            crashed_before_park: { attr: "-", since: "7.124.0" },
-            shutdown_before_park: { attr: "-", since: "7.124.0" },
+        at: "GET /v1/tasks/:taskId/asks/:askId 404 tool_approval.not_pending cause",
+        members: {
             unknown_or_other_replica: { attr: "-", since: "7.40.0" },
         },
     },
     toolApprovalReadState: {
-        at: "GET /v1/tool-approvals/:id 200 state",
+        at: "GET /v1/tasks/:taskId/asks/:askId 200 state",
         members: {
             pending: { attr: "-", since: "7.133.0" },
             decided: { attr: "-", since: "7.133.0" },
@@ -104,7 +108,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     toolApprovalReadVoidCause: {
-        at: "GET /v1/tool-approvals/:id 200 state:void cause",
+        at: "GET /v1/tasks/:taskId/asks/:askId 200 state:void cause",
         members: {
             routing_failure_fail_closed: { attr: "-", since: "7.133.0" },
             run_cancelled: { attr: "-", since: "7.133.0" },
@@ -118,25 +122,6 @@ export const SELF_MINTED_WIRE = {
             shutdown_before_park: { attr: "-", since: "7.133.0" },
         },
     },
-    toolApprovalCompleteCause: {
-        at: "tool_approval_complete frame cause",
-        members: {
-            ttl_expired: { attr: "key:cause", since: "7.124.0" },
-            broadcast_lost: { attr: "key:cause", since: "7.124.0" },
-            stream_disconnected: { attr: "key:cause", since: "7.124.0" },
-            undeliverable: { attr: "key:cause", since: "7.124.0" },
-            run_cancelled: { attr: "key:cause", since: "7.124.0" },
-            run_exited: { attr: "key:cause", since: "7.124.0" },
-            batch_aborted: { attr: "key:cause", since: "7.124.0" },
-            batch_sibling_withdrawn: { attr: "key:cause", since: "7.124.0" },
-            batch_bound_elsewhere: { attr: "key:cause", since: "7.124.0" },
-            routing_failure_fail_closed: { attr: "key:cause", since: "7.124.0" },
-            crashed_before_park: { attr: "key:cause", since: "7.124.0" },
-            shutdown_before_park: { attr: "key:cause", since: "7.124.0" },
-            orphan_ttl_exceeded: { attr: "key:cause", since: "7.124.0" },
-            adhoc_leg_no_durable_domain: { attr: "key:cause", since: "7.124.0" },
-        },
-    },
     approvalCompleteCause: {
         at: "approval_complete frame cause",
         members: {
@@ -326,6 +311,28 @@ export const SELF_MINTED_WIRE = {
             sealedModelKeys: { attr: "always", since: "1.214.2" },
             sealedPoisonedModels: { attr: "always", since: "1.214.2" },
             workflowRunStore: { attr: "always", since: "1.214.2" },
+            controlSocket: { attr: "present-iff the local control socket is listening (absolute path; exactly one of controlSocket / controlSocketUnavailable)", since: "7.152.0" },
+            controlSocketUnavailable: { attr: "present-iff the local control socket is not listening (reason word; exactly one of controlSocket / controlSocketUnavailable)", since: "7.152.0" },
+        },
+    },
+    controlSocketUnavailableReason: {
+        at: "stdout 启动协议行 listening controlSocketUnavailable",
+        members: {
+            unsupported_platform: { attr: "-", since: "7.152.0" },
+            data_root_not_exclusive: { attr: "-", since: "7.152.0" },
+            path_too_long: { attr: "-", since: "7.152.0" },
+            dir_not_private: { attr: "-", since: "7.152.0" },
+            path_occupied: { attr: "-", since: "7.152.0" },
+            bind_failed: { attr: "-", since: "7.152.0" },
+        },
+    },
+    healthAnonymousKey: {
+        at: "GET /health(匿名读者:配了服务凭据而未出示凭据、不经控制 socket)",
+        members: {
+            status: { attr: "always", since: "7.148.0" },
+            auth: { attr: "always", since: "7.148.0" },
+            operator: { attr: "always", since: "7.148.0" },
+            center: { attr: "always", since: "7.148.0" },
         },
     },
     healthStoreKey: {
@@ -552,7 +559,6 @@ export const SELF_MINTED_WIRE = {
     extensionRequesterSeat: {
         at: "审批开卡帧上的 requestedBy(<帧>#requestedBy → 在场律)",
         members: {
-            "tool_approval#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
             "approval_request#requestedBy": { attr: "present-iff extension-initiated call", since: "7.138.0" },
         },
     },
@@ -602,6 +608,7 @@ export const SELF_MINTED_WIRE = {
         members: {
             not_in_roster: { attr: "-", since: "7.133.0" },
             home_unresolvable: { attr: "-", since: "7.133.0" },
+            cc_rule_form: { attr: "-", since: "7.133.0" },
         },
     },
     invalidJsonReason: {
@@ -714,6 +721,14 @@ export const SELF_MINTED_WIRE = {
             repo: { attr: "-", since: "1.214.2" },
         },
     },
+    scenarioSource: {
+        at: "GET /v1/capabilities/scenario#source · 503 state.scenario_assignment_unknown 体根 source",
+        members: {
+            request: { attr: "-", since: "7.152.0" },
+            ruling: { attr: "-", since: "7.119.0" },
+            deployment: { attr: "-", since: "7.119.0" },
+        },
+    },
     scenarioSkillSource: {
         at: "GET /v1/capabilities/scenarios/:name#skills[].source",
         members: {
@@ -797,7 +812,7 @@ export const SELF_MINTED_WIRE = {
         },
     },
     livePendingAdoptedRowKey: {
-        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tool-approvals/:id pending 体(起服接管行)",
+        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(起服接管行)",
         members: {
             mandated: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
             mandate: { attr: "present-iff recorded on the ask row (adopted rows; same value as row.frame)", since: "7.143.0" },
@@ -805,6 +820,15 @@ export const SELF_MINTED_WIRE = {
             liveFactsUnknown: { attr: "present-iff row.frame.liveFactsUnknown (adopted rows only)", since: "7.143.0" },
         },
     },
+    livePendingRowSourceKey: {
+        at: "GET /v1/approvals livePending[] 行顶层 · /v1/approvals/stream live_pending 帧 · GET /v1/tasks/:taskId/asks/:askId pending 体(委派子代的行)",
+        members: {
+            sourceSessionId: { attr: "present-iff fromSubagent (the delegated child's session id; same value as the key on row.frame.card)", since: "7.152.0" },
+        },
+        retired: {
+            originTaskId: { attr: "present-iff fromSubagent (the delegated child's session id; the same value now under sourceSessionId)", since: "7.52.0", until: "7.152.0" },
+        },
+    },
     approvalQueuePendingKey: {
         at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻技能卡的批准绑定三位;与助手收件箱行同一只投影)",
         members: {
@@ -816,7 +840,7 @@ export const SELF_MINTED_WIRE = {
     approvalQueueRowVerdict: {
         at: "GET /v1/approvals pending[] 行 · GET /v1/approvals/stream pending 帧(停驻门族)的 rowVerdict",
         members: {
-            rowVerdict: { attr: "present-iff the row's stored bytes were judged on this listing", since: "7.144.0" },
+            rowVerdict: { attr: "always (every listed row is judged on this listing; 7.144.0–7.151.x: SQL rows could omit it)", since: "7.144.0" },
         },
     },
     approvalQueueRowAgent: {
@@ -946,13 +970,14 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#images_url_credential(新提交;体 request.field_invalid + field images[i].url + reason url_userinfo|url_credential_param)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_malformed(新提交;列表不是数组 / 条目不是对象 / 键值判不出形;体 request.field_invalid)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_unknown_key(新提交;词表外的键;体 request.body_shape + unknownKeys)": { attr: 400, since: "7.136.0" },
-            "POST /v1/tool-approvals/:id/respond#new_owner_after_adoption(收编之后的新属主;本副本上仍有引擎腿在等的活卡,决议交给那条腿)": { attr: 200, since: "7.136.0" },
-            "GET /v1/tool-approvals/:id#previous_owner_after_adoption(收编之后的前属主;按问读口)": { attr: 404, since: "7.136.0" },
-            "POST /v1/tool-approvals/:id/respond#edited_rule_text_refused_after_adoption(匿名活卡收编给具名主体后新属主交坏规则文本;体 request.body_shape;契约成文的判据,今天经 /v1/adoption 到不了)": { attr: 400, since: "7.136.0" },
             "POST /v1/tasks|/v1/runs#command_line_slots_without_sealed_key_store(stdio MCP 的 command / args 与 command hook 的 command / args;体 conflict.checkpoint_ctx_unsealable + field + reason no_key_store;POST /v1/tasks/stream 在终局帧上带本码;本服务自己的装配下不可达(装配期已对「店在而封签器缺席」拒启,见 submit-ctx.ts 自述))": { attr: 409, since: "7.136.0" },
             "ALL authenticated routes#bearer_token_without_scope_claim(鉴权桥验证腿;配了 service 凭据或多租 REQUIRE_PRINCIPAL 的部署;体通用 auth.unauthorized)": { attr: 401, since: "7.136.0" },
             "ALL routes after the auth-bridge pre-authentication (not GET /health)#sso_token_foreign_scope(fleet 成员 FLEET_GENERATION 在场;验过签的登记中心登录令牌 scope ≠ FLEET_SCOPE〔缺席 = 缺省 scope〕;同一枚 Bearer 是本部署 service 凭据的不在此列;体 auth.scope_mismatch)": { attr: 403, since: "7.151.0" },
-            "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tool-approvals/:id/respond 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)": { attr: "该口自己的受理(POST /v1/runs 202 · POST /v1/tasks 同步 200 …)", revises: ["errorCode:auth.service_token_required"], since: "7.151.0" },
+            "ALL routes after the auth-bridge pre-authentication except POST /v1/admin/drain (not GET /health, /readyz, /metrics*)#drain_principal_confined(验过的人在 OPERATOR_DRAIN_PRINCIPALS;三来源同判:登记中心登录令牌 / 直连门 principal 令牌 / 受信主体头;先于门前读路、凭据门、写门与就绪 503、门后段与 405 / 404;体 auth.principal_confined)": { attr: 403, since: "7.152.0" },
+            "POST /v1/approvals/:sessionId/decide|POST /v1/assistant/tasks/:id/plan_review|peer_inbound 决断臂#direct_door_decider_confined(直连门:决定证明推出的决定者在 OPERATOR_DRAIN_PRINCIPALS;证明验过之后、任何归属读之前;零状态变化;体 auth.principal_confined)": { attr: 403, since: "7.152.0" },
+            "POST /v1/admin/drain#drain_principal(验过的人在 OPERATOR_DRAIN_PRINCIPALS;身份四元相符)": { attr: 200, since: "7.152.0" },
+            "GET /health#drain_principal_credential(配了 service 凭据;请求只带排空档主体的身份、没出示 service / trace 凭据 ⇒ 匿名四键形)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks|/v1/tasks/stream|/v1/runs|其余 fail-closed 写口(计费提交 · bake · 改写门 · 破坏性会话写)与 POST /v1/tasks/:taskId/asks/:askId/decision 的停驻赎回臂#verified_sign_in_token_without_service_credential(部署只接了鉴权桥 —— AUTH_BRIDGE_ISSUER 或接了中心的回退 issuer —— 没配 SERVICE_AUTH_TOKEN(S)、没开 ALLOW_UNAUTHED_WRITES;请求出示鉴权桥验过的登记中心登录令牌;没带过门凭据的请求仍 503)": { attr: "该口自己的受理(POST /v1/runs 202 · POST /v1/tasks 同步 200 …)", since: "7.151.0" },
             "ALL principal-reading routes#principal_not_a_name(主体头 / SSO 令牌的 sub / 直连门 JWT 的 sub 不是一位主体的名字:空 / 空白 / 带控制、行段分隔或不可见格式字符;体 principal_not_a_name)": { attr: 400, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#promptProfile(新提交;体 request.body_shape + unknownKeys [promptProfile])": { attr: 400, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#skills[i].mods|agents[i].skills[j].mods(新提交;体 request.field_invalid)": { attr: 400, since: "7.137.0" },
@@ -962,6 +987,10 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.141.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.permissions.allow 带层条目 { rule, layer }(新提交;layer = 设置来源词)": { attr: 200, since: "7.143.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#allow 桶里 user 层 / 形路径规则而执行环境的配置根读不出(沙箱车道没转 SEMA_CONFIG_DIR 且 home 未知;体 request.unprocessable + field settings.permissions.allow + problems[].reason home_unresolvable;续跑 409 同句)": { attr: 422, since: "7.143.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#remember(本会话放行;只配 approve;体带 rememberApplied)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#persistRule(不再询问;首决体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)": { attr: 200, since: "7.152.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#readRootGrant(添加读目录;只随不带 remember 的 approve,只在单用户 host 车道受理)": { attr: 200, since: "7.152.0" },
+            "POST /v1/approvals/:sessionId/decide#persistRule(停驻工具审批卡的首决;体带回执规则位 rulePersisted / ruleRefusal / persistedRule / persistedRules / persistedRuleAnchors)": { attr: 200, since: "7.152.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(excludeTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(skills[i].disallowedTools|agents[i].skills[j].disallowedTools)": { attr: 200, since: "7.137.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#限制侧名内带 *(agents[i].denyTools)": { attr: 200, since: "7.137.0" },
@@ -1010,6 +1039,9 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#根会话 id 是本进程删过的会话 id、行上的住客不是删前属主(续跑家族 / 停驻赎回 / 工作流决断后的宿主新轮;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy conflict.session_id_retired + retriable)": { attr: 409, since: "7.146.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#scenario_assignment_unavailable(新提交;部署接了配置中心、请求带主体,而中心答不出这位主体的场景裁定:不可达 / 超时 / 答复读不出 / 指派两键形不对或只发一键;点名与不点名同拒;零 run;体 state.scenario_assignment_unavailable + permanence: transient,无 detail)": { attr: 503, since: "7.147.0" },
             "GET /v1/capabilities/mcp|/v1/sessions/:id/a2a#scenario_assignment_unavailable(与提交腿同一只场景门;缺席与点名的场景名同拒;整面;体同上)": { attr: 503, since: "7.147.0" },
+            "GET /v1/capabilities/scenario#scenario_unknown|scenario_not_allowed|scenario_conflict(门拒原样:点名不在册 / 白名单外 / 场景头与 ?scenario= 不同;体与同一请求形的提交拒体逐字同)": { attr: 400, since: "7.152.0" },
+            "GET /v1/capabilities/scenario#scenario_assignment_unknown|scenario_assignment_unavailable(门拒原样:指派悬空 / 中心答不出;体同提交腿;答不出不回落任何缺省)": { attr: 503, since: "7.152.0" },
+            "GET /v1/capabilities/mcp#scenario_conflict(场景头 x-agent-scenario 与 ?scenario= 不同;与提交腿同一只点名读法)": { attr: 400, since: "7.152.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#scenario_assignment_unavailable(续跑家族经装配的那几条;认领之前,卡仍待决;不折 resume_blocked_by_policy;体 state.scenario_assignment_unavailable + permanence: transient + retriable)": { attr: 503, since: "7.147.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#settings.env 有成员不是帽内的串(新提交;只在采纳 env 的车道上:单用户 host / device,或采纳请求体 hooks 且请求带着 hooks;零 run;体 request.field_invalid + field settings.env,句子点名坐标、不回显值)": { attr: 400, since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#stored_unread_members(续跑将要跑的那一份体 —— 存量体,重述键在场时盖过重述之后 —— 里有本版读者读不出、而本部署本会采纳的成员:settings.hooks / settings.env / 其余 settings 延后键 / mcpServers[i].transport / a2aPeers[i].headers;认领之前,卡仍待决;体 resume_blocked_by_policy + blockedBy request.field_invalid + field + retriable)": { attr: 409, since: "7.147.0" },
@@ -1028,15 +1060,14 @@ export const SELF_MINTED_WIRE = {
             "POST /v1/tasks#park_commit_ended(同步腿停在要批的门上,而停驻提交答出这条 run 没有停住、已收场 —— 停驻写之前已按下取消 / 被失联收割 / 别处终结;卡已作废;体 = 收场那一行的信封,与同键重放同一只:终局行的结果,取消那一形 terminal.code cancelled;行上无结果 ⇒ 回执三键)": { attr: 200, since: "7.149.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/sessions/:id/wake|/v1/assistant/tasks/:id/resume|/v1/assistant/tasks/:id/plan_review#resume_park_ended(续跑腿再停 / 重开时停驻提交答出这条 run 已收场;卡已作废;体 status / errorCode = 收场那一行的,不带 retriable)": { attr: 200, since: "7.149.0" },
             "POST /v1/runs/:id/interrupt#body_with_fields(体带任何顶层键 —— 含早先版本受理的 text;非对象体同答;判在查 run 之前:任何 run 状态、属主、存在与否同一只体;体 request.body_shape + unknownKeys(键全在此)+ unsupportedKeys(恒空))": { attr: 400, since: "7.148.0" },
-            "GET /v1/tool-approvals/:id#row_unreadable(有行的问,按 id 读行那一拍店抛 / 超时;本副本自己铸的活卡与起服接管的登记同答;体 not_found.ask,与查无 / 不是你的逐字节同)": { attr: 404, since: "7.149.0" },
             "POST /v1/sessions/:id/sync/plan|POST /v1/sessions/:id/sync/import|PUT /v1/sessions/:id/sync/blobs/:hash#foreign_session_deleting(推送三口的门:id 上是别的主体正在删除的会话 —— 删除围栏已立、尚未删净;「被占着」读活行 ∪ 在删行,与对别人的活行同答;本人 / fleet 对自己在删的会话不变,拉取口仍只认活行;体 not_found.session,与对不存在 id 的拉取答复逐字节同)": { attr: 404, since: "7.149.0" },
             "POST /v1/sessions/:id/sync/import#idle_id_other_principal_in_flight(第一阶段:id 上还没有会话行,而另一个主体在这只 id 上的第一阶段正在飞;导入租约键 = 落点属主格 + 会话 id,空闲 id 上各占各的;体 = 第一阶段的暂存回执 stagingId;先提交者得,输的那一份在提交前复判答 404 not_found.session,与赢家的提交撞在同一刻时由店的属主 CAS 拒 409 conflict)": { attr: 200, since: "7.149.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#a2aPeers_headers_reserved_member(新提交;a2aPeers[i].headers 的成员名是 constructor / prototype —— 与 mcpServers[i].transport.headers / .env 同一张保留成员名表、同一只读法,大小写敏感;体 request.field_invalid + field 成员级路径 a2aPeers[i].headers.<名>;存盘续跑体里同形 ⇒ 续跑家族既有一面 #stored_unread_members 409)": { attr: 400, since: "7.149.0" },
             "POST /v1/tasks|/v1/runs#rewindFilesTo_with_cascade(新提交;提交体同带非空串 `rewindFilesTo` 与 `cascade: true` —— 梯级每一级在引擎现铸的会话里跑、不取根,文件回退无处落地;拒在任何副作用之前、梯子一级都不起;体 request.field_conflict + reason cascade_verify + fields [rewindFilesTo, cascade];`/v1/tasks/stream` 上带 `cascade` 的提交本来就 400(同码),不入此面)": { attr: 400, since: "7.151.0" },
-            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redeemed(问已转停驻、门仍开着,部署接了停驻赎回 —— 非直连门;交与 live 应答口停驻臂同一只赎回;体 = 本口基本键 + accepted parked_redeemed + 赎回受理体;受理之后决定记在问行上)": { attr: 200, revises: ["errorCode:gone.ask_parked"], since: "7.151.0" },
-            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_same_key(问已转停驻、门上已站着一次决定,本次请求的 idempotencyKey 就是问行上记录的那一把;体 = 首决回放,与 DECIDED 行的回放同一只渲染)": { attr: 200, revises: ["errorCode:gone.ask_parked"], since: "7.151.0" },
-            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_conflict(问已转停驻、门上已站着一次决定,本次请求不是记录上那一把键 / 没带键;体 conflict.ask_decided 回显首决;首决取问行上答的就是门上这一次的那份记录,否则取停驻门)": { attr: 409, revises: ["errorCode:gone.ask_parked"], since: "7.151.0" },
-            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redemption_refused(问已转停驻、门仍开着,停驻赎回没生效且门此刻仍没决;体 = 赎回的拒原样:429 成本配额 + Retry-After / 503 服务凭据或就绪 / 409 approval_stale 或 conflict.not_resumable / 400 decide_requires_binding / 500;赎回的 404 改答本口的 not_found.ask)": { attr: "as the shared parked redemption answers (429 / 503 / 409 / 400 / 500; its 404 ⇒ 404 not_found.ask)", revises: ["errorCode:gone.ask_parked"], since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redeemed(问已转停驻、门仍开着,部署接了停驻赎回 —— 非直连门;交与 live 应答口停驻臂同一只赎回;体 = 本口基本键 + accepted parked_redeemed + 赎回受理体;受理之后决定记在问行上)": { attr: 200, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_same_key(问已转停驻、门上已站着一次决定,本次请求的 idempotencyKey 就是问行上记录的那一把;体 = 首决回放,与 DECIDED 行的回放同一只渲染)": { attr: 200, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_standing_conflict(问已转停驻、门上已站着一次决定,本次请求不是记录上那一把键 / 没带键;体 conflict.ask_decided 回显首决;首决取问行上答的就是门上这一次的那份记录,否则取停驻门)": { attr: 409, since: "7.151.0" },
+            "POST /v1/tasks/:taskId/asks/:askId/decision#parked_redemption_refused(问已转停驻、门仍开着,停驻赎回没生效且门此刻仍没决;体 = 赎回的拒原样:429 成本配额 + Retry-After / 503 服务凭据或就绪 / 409 approval_stale 或 conflict.not_resumable / 400 decide_requires_binding / 500;赎回的 404 改答本口的 not_found.ask)": { attr: "as the shared parked redemption answers (429 / 503 / 409 / 400 / 500; its 404 ⇒ 404 not_found.ask)", since: "7.151.0" },
             "POST /v1/tasks|/v1/tasks/stream|/v1/runs#userAttachments 的 path 条目在 e2b / k8s / local-docker / adb 车道上(目标给得出那一次观测:Linux、挂着 /proc、有 timeout / readlink / stat / head / base64)与 device 车道上(执行器声明修订号 ≥ 6 且在 hello.supports 声明了 openBound)—— human_input.attachments[].outcome": { attr: "attached", since: "7.151.0" },
             "GET /v1/device/ws#instruction kind openBound(server → executor;协议修订号 6 的 kind,只派发给声明修订号 ≥ 6 且 hello.supports 声明了它的执行器;args { path, op: open|size|readBytes|list, identity?, kind?, max? })": { attr: "dispatched-iff-declared", since: "7.151.0" },
             "GET /v1/device/ws#result outcome stat.identity(openBound 开答的 <device>:<inode>;可选串,不是串 ⇒ bad_shape)": { attr: "accepted", since: "7.151.0" },
@@ -1160,8 +1191,6 @@ export const SELF_MINTED_WIRE = {
             "session faces · list faces · /metrics family#dev-open-principal-header-not-owner": { attr: "each face's missing-row answer, same body as a missing row (404 not_found.session on GET /v1/sessions/:id · /head · /events · /memory-status · /execution-placement · PATCH /v1/sessions/:id · fork · sync reads (manifest · entries · history blob) · memory/erase · background · background/stop · mcp/reconnect · policy · notify; approval exemptions 404 not_found.session (not found); DELETE /v1/sessions/:id 200 {deleted:false}; sync push family (plan · import · blob put) 404 on another owner's session, its existing create answer on a missing id); GET /v1/sessions · /v1/fleet/stream · /v1/agents/roster · /v1/tasks (trace list) · /v1/usage/* · /v1/sendfile-links pinned to the named caller; /metrics* and GET /v1/tasks/source-summary 401 auth.unauthorized (operator sentence; METRICS_TOKEN, when configured, still opens /metrics* and is judged first); a Bearer this deployment cannot verify does not count as naming no principal (no fleet); a caller naming no principal and presenting no unverifiable credential unchanged (fleet); was 200 / fleet-wide (the principal header read as a label)", since: "7.149.0" },
             "owner-only session ports#unreadable-archive-ownerless-session-fleet-or-operator": { attr: "answered as on a readable archive: background · background/stop · notify · mcp/reconnect · execution-placement · approval exemptions list / revoke (the gate skips the placement read only when both hypotheses admit the caller); was 500 corrupt_session", since: "7.148.0" },
             "run faces#row-without-owner-cell-no-fleet-no-operator": { attr: "the face's missing-row answer for every caller without a fleet or operator qualification on that face; was: a caller without a principal passed on some faces (absent equals absent)", since: "7.148.0" },
-            "POST /v1/tool-approvals/:id/respond#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask (no such approval ask (never existed, no longer kept, or not yours)), one body for every form, no state facts — the durable decision door's word; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
-            "GET /v1/tool-approvals/:id#ask-not-visible-to-caller(查无 / 不是调用方的 / 行读不出 / 本 worker 没有问账)": { attr: "404 not_found.ask, the same body as the respond door; was 404 tool_approval.not_pending with cause unknown_or_other_replica (no cause on a worker without an ask ledger)", since: "7.148.0" },
             "GET /v1/workflows/:id · /journal · /stream · POST /v1/workflows/:id/agents/:label/steer#session-assertion-mismatch": { attr: "404 not_found.workflow (workflow not found), same body as a missing workflow; was 404 not_found.run (workflow not found)", since: "7.148.0" },
         },
     },
@@ -1177,6 +1206,17 @@ export const SELF_MINTED_WIRE = {
             "409 conflict.session_active_run#activeTaskId": { attr: "always on this face;the run holding the session's durable claim (the message names it too)", since: "7.147.0" },
         },
     },
+    sessionOccupantWire: {
+        at: "session occupancy keys activeTaskId / activeTaskStatus (<face>#<key> → reading / presence)",
+        members: {
+            "GET /v1/sessions/:id/head 200#activeTaskId": { attr: "present-iff a durable run store is wired (DB_BACKEND=mysql|pg|local);the run holding the session's claim, null once released;same projection as the 409 conflict.session_active_run body;re-read of the head after a non-null holder, occupant changed ⇒ 404 like a missing session", since: "7.152.0" },
+            "GET /v1/sessions/:id/head 200#activeTaskStatus": { attr: "present-iff activeTaskId names a run whose stored row is running | suspended | needs_review;same projection as the 409 body", since: "7.152.0" },
+            "GET /v1/sessions/:id/head#ETag": { attr: "the sha256 base64url of the 200 body bytes (leaf and occupancy are both version);was the quoted leafId", since: "7.152.0" },
+            "DELETE /v1/sessions/:id 409 conflict.session_active_run#activeTaskStatus": { attr: "present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe", since: "7.152.0" },
+            "POST /v1/sessions/:id/rewind-files 409 conflict.session_active_run#activeTaskStatus": { attr: "present-iff the holder's stored row is running | suspended | needs_review;same projection as the head probe", since: "7.152.0" },
+            "submit and resume faces 409 conflict.session_active_run#activeTaskId": { attr: "null when the claim was released between the write's collision and its observation;was the empty string", since: "7.152.0" },
+        },
+    },
     adoptionImportOutcome: {
         at: "POST /v1/adoption/:id/sessions 200 results[].outcome",
         members: {
@@ -1301,13 +1341,13 @@ export const SELF_MINTED_WIRE = {
             "413 request.payload_too_large#store_row_too_large(POST /v1/tasks|/v1/tasks/stream|/v1/runs;续跑输入一行装不下,row / statement / value 三墙)": { attr: "the database refused to store this task: it is larger than the database keeps in one row|accepts in one statement|PostgreSQL holds in one value — nothing was run; <出路>", since: "7.151.0" },
             "adopt_failed|track_failed|snapshot_failed|restore_failed#store_fault(文件历史店的失败句:会话同步推送与 blob 交换的拒体 · rewind / restore 的逐文件失败句)": { attr: "<动作> failed: <类别句> [original code: <原码>]", since: "7.151.0" },
             "子代失败句#store_fault(tool_end 子代卡 structured.errorMessage · 后台子代通告的 summary · GET /v1/runs/:id/subagents/:handle/output 的 content / output · 父模型读到的子代报告行)": { attr: "<类别句> [original code: <原码>](与 run 终局 terminal.failed.message 同一句)", since: "7.151.0" },
+            "501 feature.approval_ask_disabled#POST /v1/tasks/:taskId/asks/:askId/decision · GET /v1/tasks/:taskId/asks/:askId": { attr: "the durable stream-approval ask ledger is not enabled on this worker (needs a store backend (DB_BACKEND) and DURABLE_APPROVAL)", since: "7.152.0" },
         },
     },
     decisionBodyKey: {
         at: "回决门族决断体的受理键(<端点>#<键> → 读法;只登本版新增的键)",
         members: {
             "POST /v1/assistant/tasks/:id/plan_review#checkpointId": { attr: "optional;non-empty-string≤128;not-current⇒409 approval_stale;direct-door:signed-envelope-ext", since: "7.137.0" },
-            "POST /v1/tool-approvals/:id/respond#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid (this door: request.body_shape)", since: "7.143.0" },
             "POST /v1/tasks/:taskId/asks/:askId/decision#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid", since: "7.143.0" },
             "POST /v1/approvals/:sessionId/decide#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
             "POST /v1/assistant/tasks/:id/plan_review#decidedVia": { attr: "optional;DECIDED_VIA word beside decidedBy \"policy\" only;else⇒400 request.field_invalid;direct-door:never accepted", since: "7.143.0" },
@@ -1356,6 +1396,7 @@ export const SELF_MINTED_WIRE = {
             answer: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.87.0" },
             checkpointId: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.137.0" },
             permissionModeAfter: { attr: "POST /v1/assistant/tasks/:id/plan_review", since: "7.87.0" },
+            persistRule: { attr: "POST /v1/approvals/:sessionId/decide", since: "7.152.0" },
         },
     },
     storeFaultPermanence: {
@@ -1466,6 +1507,10 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/runs/:id/events#text.text(段文本含只有 text_end 的块)": { attr: "segment-text=block-texts-concat;end-only-block=text_end.content", since: "7.144.0" },
             "POST /v1/approvals/:sessionId/decide|/v1/assistant/tasks/:id/plan_review|/v1/assistant/tasks/:id/resume|/v1/sessions/:id/wake#errorCode(引擎拒 checkpoint.invalid_outcome)": { attr: "decision-cause⇒cause-code;row-own(reason)|no-cause⇒checkpoint.invalid_outcome", since: "7.147.0" },
             "POST /v1/approvals/:sessionId/decide#errorCode(这一行自己的拒:读行臂 / 门型守卫之前)": { attr: "rowVerdict.code+reason+retriable:true(engine-judge;before-gate)", since: "7.147.0" },
+            "GET /v1/approvals#pending[].input": { attr: "question|plan-whole;other-fold>32768-utf8-bytes;marker.bytes=utf8-bytes", since: "7.152.0" },
+            "GET /v1/approvals#pending[](动作事实)": { attr: "one-whole-row-decode(the bytes resume executes);sql≡local;undecodable⇒null|absent+rowVerdict≠ok", since: "7.152.0" },
+            "SSE question#questions": { attr: "redacted-whole;no-size-cap;unserializable⇒no-frame", since: "7.152.0" },
+            "SSE tool_approval#args(approval_request card.args · card_json · acceptableForm 同读)": { attr: "question|plan-whole;other-omitted>32768-utf8-bytes", since: "7.152.0" },
         },
     },
 };

package/dist/web-admin-client/apply-effective.js

@@ -1,7 +1,7 @@
 import { expandTiers, modelOriginOf, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { CATALOG_REPLACES_ENV_MODELS_CODE, SandboxGitConfig, WEB_ADMIN_ENV, envModelsDecisionTag, formatConfigPath, narrowAtMention, parseDomainSalvaged, resolveActiveTiers, resolveCatalogDefaultModel, sanitizeZodError } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
-import { DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
+import { CATALOG_REFUSAL_LEG, DEFAULT_MODEL_REF, buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, isRosterGateArmed, ownCredentialHitsInForce, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { NAME_TABLE_BEHAVIOR, retiredLeftOutEntries } from "../namespaced-rule-name.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
@@ -501,7 +501,7 @@ function stageModelPlane(config, eff, source, logger, sealedKeys) {
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
         if (noDefault !== undefined)
             return refuse(DEFAULT_MODEL_MISSING_CODE, noDefault);
-        const endpoint = judgeModelRouteEndpoint(nextView, "catalog");
+        const endpoint = judgeModelRouteEndpoint(nextView, CATALOG_REFUSAL_LEG);
         if (endpoint !== undefined)
             return refuse(endpoint.code, endpoint.reason);
         const minted = crossInvariant("refused-names-not-minted").check({ live: config, next: nextView });

package/dist/web-admin-client/read-warnings.d.ts

@@ -28,8 +28,8 @@ import { z } from "zod";
 import { type ConfigDocumentRefusal, type DroppedEntryIdentity, type DroppedEntryReasonCode, type EffectiveReadWarning } from "@sema-agent/settings-schema";
 /**
  * 远端读腿在过契约读腿(`readEffectiveWire`)**之前**把退役域键分出去:wire 体上每个退役域键过契约的同一只墓碑(`refuseRetiredDomain`)——
- * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` / `migration` 取
- * `RetiredDomainError` 的同名字段)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
+ * 带事实 ⇒ 一份被拒文档(契约的类型 `ConfigDocumentRefusal` 的墓碑臂:`document` = 退役域名,`reason: "retired_domain"`,`error` 取
+ * `RetiredDomainError` 的拒句)、这一键从体上拿掉(其余域照读、版本照读,判官整拒这份候选);缺席 / `{}` ⇒ 不理会(契约读腿自己丢 `{}`)。
  * 体不是对象 ⇒ 原样交回、不判(载荷形错,契约读腿抛)。墓碑判据只在契约包,这里只分键。
  * 被拒文档是两条读腿同形的发现(判决只在候选判官 `candidate-gate.ts` 的 `judgeConfigCandidate`,成因词 = 发现自带的 `reason`):本地腿的被拒文档是契约单读口
  * `FileConfigStore.read()` 那一读的拒单原样(`config-provider.ts`),wire 上没有文件层,只有这一种墓碑。`error` 本模块不脱敏(与折叠产物同律):各腿在自己的产出边界上过

package/dist/web-admin-client/read-warnings.js

@@ -12,7 +12,7 @@ export function separateRetiredDomains(body) {
         catch (e) {
             if (!(e instanceof RetiredDomainError))
                 throw e;
-            refused.push({ document: e.domain, reason: "retired_domain", error: e.message, migration: e.migration });
+            refused.push({ document: e.domain, reason: "retired_domain", error: e.message });
             delete rest[domain];
         }
     }

package/dist/web-admin-client/types.d.ts

@@ -343,7 +343,7 @@ export interface EffectiveConfig {
      * [ref] 批1 —— **limitsHttp 组的热更新发布域**([ref] §6 批1)。
      *
      * 限额五闸(rateLimitPerMin / maxTaskCostUsd / maxTaskTokens / maxPrincipalCostUsd / costQuotaWindowSec)与其余限额键的**唯一**发布位:
-     * settings-schema 11 退役了 `runtime` 域(它曾承载前五键;存量由一次性迁移 SS-M1 搬进本域,读腿对带事实的 `runtime` 整份拒),
+     * settings-schema 11 退役了 `runtime` 域(它曾承载前五键;读腿对带事实的 `runtime` 整份拒 —— 搬它进本域的那一步一次性迁移随契约 26.0.0 删了,存量手写到本域),
      * 本仓的旧位读法随之删 —— 一个键一个发布位,没有「两处同现谁赢」的优先级规则。两条腿都读它(本地腿:`config.d/limits.json`,
      * `limits` 在 PORTABLE_DOMAINS 里)。
      */

package/dist/workspace-space.d.ts

@@ -1,7 +1,7 @@
 /**
  * Workspace persistence by **space** (k8s lane) — the closed word set, the defaults, the retention domain and
- * the policy shape (pure leaf: no value imports from this repo — only a node builtin — so `config.ts`, the capability fact and the adapter
- * in `plugins/` can all import it without a load cycle). The effective policy has ONE reading: the capability fact `workspaceSpace`
+ * the policy shape (pure leaf: its only value imports are a node builtin and the object-store name leaf `object-store-buckets.ts`, itself
+ * import-free — so `config.ts`, the capability fact, the boot bucket check and the adapter in `plugins/` can all import it without a load cycle). The effective policy has ONE reading: the capability fact `workspaceSpace`
  * (`src/capability-facts.ts`).
  *
  * The law (one fact, one seat): a k8s pod's `/workspace` is durable across runs as an object-store "space" owned by the
@@ -63,8 +63,14 @@ export interface WorkspaceSpacePolicy {
 export interface WorkspaceSyncCapability extends WorkspaceSpacePolicy {
     timeoutMs: number;
 }
-/** `WORKSPACE_SNAPSHOT_PREFIX` unset ⇒ this prefix (the first segment of every snapshot object key of both lanes). */
-export declare const WORKSPACE_SNAPSHOT_PREFIX_DEFAULT = "kata";
+/**
+ * The key prefix of a k8s snapshot store — the ONE reading of `WORKSPACE_SNAPSHOT_PREFIX` (unset ⇒ `WORKSPACE_SNAPSHOT_PREFIX_DEFAULT`): the adapter
+ * signs every snapshot key under it, and the boot bucket check lists under it (`<prefix>/`), so the check asks for the same prefix the adapter writes —
+ * a credential whose listing is granted by prefix answers the check exactly as it answers the adapter. Its form is judged by {@link snapshotKeyPrefixProblem}.
+ */
+export declare function workspaceSnapshotPrefixOf(store: {
+    readonly keyPrefix?: string;
+} | undefined): string;
 /**
  * The ONE form of a snapshot-key segment — the partition (incarnation / session id), the snapshot id, the object name and each segment of
  * the key prefix all pass it before a key is signed: it starts with a letter or digit, then letters, digits, `.`, `_`, `-`. No `/`, no `..`,

package/dist/workspace-space.js

@@ -1,4 +1,5 @@
 import { createHash } from "node:crypto";
+import { WORKSPACE_SNAPSHOT_PREFIX_DEFAULT } from "./object-store-buckets.js";
 export const K8S_WORKSPACE_MOUNT_DEFAULT = "/workspace";
 export const WORKSPACE_PERSIST_WORDS = ["space", "off"];
 export const WORKSPACE_PERSIST_DEFAULT = "space";
@@ -9,7 +10,9 @@ export const WORKSPACE_SNAPSHOT_TIMEOUT_MS_RANGE = { min: 30_000, max: 3_600_000
 export function workspaceSnapshotTimeoutOf(lane) {
     return lane.workspaceSnapshotTimeoutMs ?? WORKSPACE_SNAPSHOT_TIMEOUT_MS_DEFAULT;
 }
-export const WORKSPACE_SNAPSHOT_PREFIX_DEFAULT = "kata";
+export function workspaceSnapshotPrefixOf(store) {
+    return store?.keyPrefix ?? WORKSPACE_SNAPSHOT_PREFIX_DEFAULT;
+}
 export const SNAPSHOT_KEY_SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 export const WORKSPACE_SNAPSHOT_PREFIX_INVALID = "config.workspace_snapshot_prefix_invalid";
 export function snapshotKeyPrefixProblem(prefix) {

package/docs/DEVICE-EXECUTOR-PROTOCOL.md

@@ -250,7 +250,7 @@ sign exactly these bytes with the device's Ed25519 private key.
 
 | Code | Meaning | What the executor should do |
 |---|---|---|
-| `auth_failed` | deliberately ambiguous: unknown device id, malformed id, malformed epoch, bad signature, or the server's device registry was unreachable | do **not** hammer: back off exponentially. If it never clears, the enrollment is gone — re-enroll. The server will not tell you which of these it was (anti-enumeration) |
+| `auth_failed` | deliberately ambiguous: unknown device id, malformed id, malformed epoch, bad signature, the server's device registry was unreachable, or — on a deployment that confines service principals — the device's owner is currently named in the operator roster's drain-only tier (a tier whose identity counts only on the drain endpoint, so it may not use the device lane; the device registration and the key stay valid) | do **not** hammer: back off exponentially, and never delete the key on `auth_failed` alone. If it never clears, the enrollment may be gone — re-enroll — unless the owner is confined as described: registering again under that identity is refused with `403 auth.principal_confined`, and the cure is on the operator's side. The server will not tell you which of these it was (anti-enumeration); the confinement cause is judged after the signature verifies, so only the holder of the device key can ever meet it. It is not terminal: when the owner is back in the ordinary tier (the deployment's roster is read at process start), the next reconnect succeeds, and the code set and the revision are unchanged |
 | `revoked` | this device has been revoked. Terminal | stop reconnecting, delete the private key, ask the user to re-enroll (it yields a new `deviceId`) |
 | `protocol_version_unsupported` | your `protocolVersion` is outside the range this server accepts; the frame carries `minProtocolVersion` and a one-line `message` that names your revision, the range and — below the floor — the change at the floor revision (§2.1) | upgrade the executor (`message` is fit to show as is). Never retry-with-a-different-version in a loop |
 | `draining` | this replica is shutting down or upgrading and takes no new connections | reconnect with backoff; a replacement replica will accept you |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "7.151.0",
+  "version": "7.152.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -25,6 +25,10 @@
       "types": "./dist/model-route-env.d.ts",
       "default": "./dist/model-route-env.js"
     },
+    "./object-store-buckets": {
+      "types": "./dist/object-store-buckets.d.ts",
+      "default": "./dist/object-store-buckets.js"
+    },
     "./package.json": "./package.json",
     "./deploy/sema-up/lanes.json": "./deploy/sema-up/lib/lanes.json",
     "./deploy/facts/CHANGES.json": "./deploy/facts/CHANGES.json",
@@ -84,7 +88,7 @@
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
     "@sema-agent/core": "7.66.1",
-    "@sema-agent/settings-schema": "25.1.0",
+    "@sema-agent/settings-schema": "26.0.0",
     "e2b": "2.36.0",
     "libsodium-wrappers": "0.8.4",
     "mysql2": "3.22.6",

package/scripts/embed-minimal.mjs

@@ -10,7 +10,7 @@
 //                                                  and a clean-up that did not happen is `failed step=cleanup` — neither is ever reported as a refusal of the omitted seat.
 //
 // The assembly order is the README "Library embedding" chain: `declareServerWithheldEnv()` → `loadConfig()` → `composeExecutionLane(config, ctx)` →
-// `judgeServedModelRoute(config, { envTableIsPlaceholder })` (the route judge, once after the config-source apply; `loadConfig()` does not judge routes) →
+// `judgeServedModelRoute(config, { envTableIsPlaceholder, webAdminIsConfigSource })` (the route judge, once after the config-source apply; `loadConfig()` does not judge routes) →
 // the nine required `createHttpServer` seats (the type `ServiceCoreDeps`) → `createHttpServer(deps)`. It imports the package root `@sema-agent/server` and the
 // engine package `@sema-agent/core` (the server's pinned dependency, owner of the `Runner` class), never a path inside `dist/`.
 // The service it assembles runs on the host lane against a throwaway local data root and listens on a kernel-assigned loopback port; it takes no task,
@@ -84,8 +84,8 @@ try {
   const logger = createLogger("error");
   const config = await composeExecutionLane(loadConfig(), { configSource: undefined, localRoot: dataRoot, logger, entry: HTTP_SERVICE_LANE_ENTRY });
   // The route judge runs after the config-source apply, never inside `loadConfig()`: a model row with no endpoint would otherwise travel to the first model call.
-  // No center here ⇒ the env table is the served table, not a placeholder awaiting a catalog.
-  const routeGap = judgeServedModelRoute(config, { envTableIsPlaceholder: false });
+  // No center here ⇒ the env table is the served table, not a placeholder awaiting a catalog; and no web-admin config source either (`configSource: undefined` above).
+  const routeGap = judgeServedModelRoute(config, { envTableIsPlaceholder: false, webAdminIsConfigSource: false });
   if (routeGap !== undefined) throw new Error(routeGap.reason);
 
   // ── seats: peerDesk, deploymentMods (package root: createPeerDesk; `[]` = no mods) ────────────────────────────────────────────────────────