层级配置项写入(org/team = owner/admin,user = 本人):整值替换,locked/enforcement 缺席保持现值(新建缺省 false/shadow 灰度纪律);写被上级 enforce 锁键恒 409 policy_locked(shadow 锁放行 + 审计 wouldDeny);locked=true 令该层锁定集超 64 恒 400 limit_exceeded;写恒 config.revision 审计 + bundle 失效(纪元自增,心跳 configVersion 翻转)
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Header Parameters
Section titled “Header Parameters”Org 作用域声明(org 公开 id);服务端校验成员资格与角色,非成员恒 404、角色不够 403
Query Parameters
Section titled “Query Parameters”Scope=team 时必带
Request Bodyrequired
Section titled “Request Bodyrequired”Responses
Section titled “Responses”已写({entry})
object
object
点分键路径([A-Za-z0-9_-] 段,总长 ≤200)
键级锁(X2-2 §1.3):上级锁定后下级写面 409 policy_locked、合成期压制(enforce 态)
行内修订号(每次写面提交 +1)
末次写入者(公开 id / admin-key:
Example
{ "entry": { "enforcement": "shadow" }}Bad_request(keyPath 形制/scope)/ validation_failed(value 超长)/ limit_exceeded(锁定集 64)/ section_not_deliverable(十王修案 FX-A-23:keyPath 落在端侧不可下发段 permissions / hooks / mcpServers / policy / workspaceTrust / memory——vendored cli-settings-paths.json excludedSections,detail.reason excluded_section;或不在端侧可下发叶白名单 deliverable ∪ site.* ∪ mode.localProviders——未知叶 / 拼写漂移,detail.reason unknown_leaf(W5 收紧);detail 携 keyPath / section / reason / excludedSections / platformOnly / generatedFrom)
object
object
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Forbidden(org 角色不够 / PAT 缺 control scope)
object
object
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Policy_locked(上级 enforce 锁定键;detail.scope/keyPath 携锁源)
object
object
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}本文是否有帮助?
感谢反馈,我们会持续改进这篇文章。