From 979e078b2eabc6ecc2ea68e4d487a3d6a047a899 Mon Sep 17 00:00:00 2001
From: ysyneu <ysyneu@gmail.com>
Date: Wed, 8 Jul 2026 20:31:22 -0700
Subject: [PATCH] docs: clarify Safari API visibility

---
 api-reference/openapi.en.json        | 36 ++++++++++++++--------------
 api-reference/openapi.zh.json        | 36 ++++++++++++++--------------
 api-reference/safari.openapi.en.json | 36 ++++++++++++++--------------
 api-reference/safari.openapi.zh.json | 36 ++++++++++++++--------------
 4 files changed, 72 insertions(+), 72 deletions(-)

diff --git a/api-reference/openapi.en.json b/api-reference/openapi.en.json
index 07e54aa..c7c0c0b 100644
--- a/api-reference/openapi.en.json
+++ b/api-reference/openapi.en.json
@@ -22825,7 +22825,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Pagination uses `p`/`limit` (max 100); `scope` defaults to `all` (own + member-of-team rows).\n- `is_running` reflects the live run-set; `has_unread` is computed per calling user.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Pagination uses `p`/`limit` (max 100); `scope` defaults to `all`.\n- `all` returns your personal sessions plus team sessions you can access; account admins see all team sessions, but not other users' personal sessions.\n- `team_ids` narrows the visible set and never expands access.\n- `is_running` reflects the live run-set; `has_unread` is computed per calling user.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-list",
           "metadata": {
             "sidebarTitle": "List sessions"
@@ -22934,7 +22934,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Page older history with `search_after_ctx` from the previous response.\n- `limit` (or legacy `num_recent_events`) caps the event page; default 100, max 1000.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions are readable only by their creator; team sessions can be read by same-account callers with the `session_id`.\n- Page older history with `search_after_ctx` from the previous response.\n- `limit` (or legacy `num_recent_events`) caps the event page; default 100, max 1000.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-info",
           "metadata": {
             "sidebarTitle": "Get session detail"
@@ -23067,7 +23067,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- The response is `application/x-ndjson` — parse line-by-line and write to a file; do not buffer the whole body in memory.\n- The first line is always a `session_meta` envelope; `include_subagents=true` inlines each child session's stream after its dispatch line.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions are exportable only by their creator; team sessions can be exported by same-account callers with the `session_id`.\n- The response is `application/x-ndjson` — parse line-by-line and write to a file; do not buffer the whole body in memory.\n- The first line is always a `session_meta` envelope; `include_subagents=true` inlines each child session's stream after its dispatch line.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-export",
           "metadata": {
             "sidebarTitle": "Export session transcript"
@@ -23128,7 +23128,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Requires manage rights on the session (creator, account admin, or owning-team member).\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions can be deleted only by their creator; team sessions can be deleted by the creator, an account admin, or a member of the owning team.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-write-delete",
           "metadata": {
             "sidebarTitle": "Delete session"
@@ -24963,7 +24963,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-create",
           "metadata": {
             "sidebarTitle": "Create Automation rule"
@@ -25086,7 +25086,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n\n## Usage\n\n- `all` returns your personal rules plus team rules you can access.\n- Account admins see all team rules in list results, but not other users' personal rules.\n- `team_ids` narrows the visible set and never expands access.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-read-list",
           "metadata": {
             "sidebarTitle": "List Automation rules"
@@ -25200,7 +25200,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; caller must manage the target rule |\n\n## Usage\n\n- Manage rights mean the personal rule owner; for team rules, an account admin or a member of the rule's team.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-read-get",
           "metadata": {
             "sidebarTitle": "Get Automation rule"
@@ -25308,7 +25308,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-update",
           "metadata": {
             "sidebarTitle": "Update Automation rule"
@@ -25428,7 +25428,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-delete",
           "metadata": {
             "sidebarTitle": "Delete Automation rule"
@@ -25595,7 +25595,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; caller must manage the target rule |\n\n## Usage\n\n- Run history is visible only when the caller can manage the rule: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-run-read-list",
           "metadata": {
             "sidebarTitle": "List Automation runs"
@@ -44174,7 +44174,7 @@
       },
       "SessionListRequest": {
         "type": "object",
-        "description": "Filters for listing agent sessions. Reads are scoped to the resolved account and the caller's visible teams.",
+        "description": "Filters for listing agent sessions. `all` visibility means the caller's own personal sessions plus accessible team sessions; account admins do not see other users' personal sessions.",
         "properties": {
           "app_name": {
             "type": "string",
@@ -44225,7 +44225,7 @@
           },
           "scope": {
             "type": "string",
-            "description": "Visibility scope: all (own + member-of-team rows, default), personal, or team.",
+            "description": "Visibility scope: `all` (own personal + accessible team sessions), `personal`, or `team`; default `all`.",
             "enum": [
               "all",
               "personal",
@@ -44238,7 +44238,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "Optional explicit team filter; intersects with `scope`."
+            "description": "Optional explicit team filter; intersects with `scope` and never expands access."
           },
           "entry_kinds": {
             "type": "array",
@@ -44395,7 +44395,7 @@
           },
           "can_manage": {
             "type": "boolean",
-            "description": "True when the caller may rename/archive/delete the session."
+            "description": "True when the caller may rename/archive/delete the session; personal sessions are creator-only, team sessions allow the creator, account admin, or team member."
           },
           "status": {
             "type": "string",
@@ -45560,7 +45560,7 @@
       },
       "AutomationRuleListRequest": {
         "type": "object",
-        "description": "List Automation rules visible to the caller.",
+        "description": "List Automation rules visible to the caller. `all` includes the caller's personal rules plus accessible team rules; account admins do not see other users' personal rules in list results.",
         "properties": {
           "p": {
             "type": "integer",
@@ -45580,7 +45580,7 @@
               "personal",
               "team"
             ],
-            "description": "Scope filter. Defaults to all."
+            "description": "Scope filter: `all` (own personal + accessible team rules), `personal`, or `team`; default `all`."
           },
           "team_ids": {
             "type": "array",
@@ -45588,7 +45588,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "Filter to these team IDs; this filters results and does not expand access."
+            "description": "Filter to these team IDs; this narrows results and does not expand access."
           },
           "include_person": {
             "type": [
@@ -45746,7 +45746,7 @@
           },
           "can_edit": {
             "type": "boolean",
-            "description": "Whether the caller can manage this rule."
+            "description": "True when the caller can manage this rule: the personal rule owner; for team rules, an account admin or a member of the rule's team."
           },
           "created_at": {
             "type": "integer",
diff --git a/api-reference/openapi.zh.json b/api-reference/openapi.zh.json
index e4e26af..7a76f2e 100644
--- a/api-reference/openapi.zh.json
+++ b/api-reference/openapi.zh.json
@@ -22817,7 +22817,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 分页使用 `p`/`limit`（最大 100）；`scope` 默认 `all`（本人 + 所属团队）。\n- `is_running` 反映实时运行集合；`has_unread` 按调用者各自计算。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 分页使用 `p`/`limit`（最大 100）；`scope` 默认 `all`。\n- `all` 返回调用者自己的个人会话，以及调用者可访问团队的团队会话；账户管理员可见所有团队会话，但不可见他人的个人会话。\n- `team_ids` 只会收窄可见集合，不会扩大访问范围。\n- `is_running` 反映实时运行集合；`has_unread` 按调用者各自计算。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-list",
           "metadata": {
             "sidebarTitle": "查询会话列表"
@@ -22926,7 +22926,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 使用上一次响应的 `search_after_ctx` 翻阅更早的历史。\n- `limit`（或旧版 `num_recent_events`）限制事件页大小；默认 100，最大 1000。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可读；团队会话允许同一账户内持有 `session_id` 的调用者读取。\n- 使用上一次响应的 `search_after_ctx` 翻阅更早的历史。\n- `limit`（或旧版 `num_recent_events`）限制事件页大小；默认 100，最大 1000。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-info",
           "metadata": {
             "sidebarTitle": "查看会话详情"
@@ -23059,7 +23059,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 响应为 `application/x-ndjson`——请逐行解析并写入文件，切勿将整段记录读入内存。\n- 第一行始终为 `session_meta` 信封；`include_subagents=true` 会在派发行后内联各子会话的事件流。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可导出；团队会话允许同一账户内持有 `session_id` 的调用者导出。\n- 响应为 `application/x-ndjson`——请逐行解析并写入文件，切勿将整段记录读入内存。\n- 第一行始终为 `session_meta` 信封；`include_subagents=true` 会在派发行后内联各子会话的事件流。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-export",
           "metadata": {
             "sidebarTitle": "导出会话记录"
@@ -23120,7 +23120,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 需要对该会话拥有管理权限（创建者、账户管理员或所属团队成员）。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可删除；团队会话可由创建者、账户管理员或所属团队成员删除。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-write-delete",
           "metadata": {
             "sidebarTitle": "删除会话"
@@ -24955,7 +24955,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-create",
           "metadata": {
             "sidebarTitle": "创建自动化规则"
@@ -25078,7 +25078,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n\n## 使用说明\n\n- `all` 返回调用者自己的个人规则，以及调用者可访问团队的团队规则。\n- 账户管理员在列表中可见所有团队规则，但不可见他人的个人规则。\n- `team_ids` 只会收窄可见集合，不会扩大访问范围。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-read-list",
           "metadata": {
             "sidebarTitle": "列出自动化规则"
@@ -25192,7 +25192,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；调用者必须可管理目标规则 |\n\n## 使用说明\n\n- 管理权限指：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-read-get",
           "metadata": {
             "sidebarTitle": "查看自动化规则"
@@ -25300,7 +25300,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-update",
           "metadata": {
             "sidebarTitle": "更新自动化规则"
@@ -25420,7 +25420,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-delete",
           "metadata": {
             "sidebarTitle": "删除自动化规则"
@@ -25587,7 +25587,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；调用者必须可管理目标规则 |\n\n## 使用说明\n\n- 仅当调用者可管理规则时才可查看运行历史：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-run-read-list",
           "metadata": {
             "sidebarTitle": "列出自动化运行历史"
@@ -44165,7 +44165,7 @@
       },
       "SessionListRequest": {
         "type": "object",
-        "description": "查询智能体会话列表的过滤条件。读取范围限定为解析出的账户及调用者可见的团队。",
+        "description": "查询智能体会话列表的过滤条件。`all` 表示调用者自己的个人会话和可访问团队的团队会话；账户管理员不可见他人的个人会话。",
         "properties": {
           "app_name": {
             "type": "string",
@@ -44216,7 +44216,7 @@
           },
           "scope": {
             "type": "string",
-            "description": "可见范围：all（本人 + 所属团队，默认）、personal 或 team。",
+            "description": "可见范围：`all`（自己的个人会话 + 可访问团队会话）、`personal` 或 `team`；默认 `all`。",
             "enum": [
               "all",
               "personal",
@@ -44229,7 +44229,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "可选的团队过滤；与 `scope` 取交集。"
+            "description": "可选的团队过滤；与 `scope` 取交集，且不会扩大访问范围。"
           },
           "entry_kinds": {
             "type": "array",
@@ -44386,7 +44386,7 @@
           },
           "can_manage": {
             "type": "boolean",
-            "description": "当调用者可重命名/归档/删除该会话时为 true。"
+            "description": "当调用者可重命名/归档/删除该会话时为 true；个人会话仅创建者可管理，团队会话允许创建者、账户管理员或团队成员管理。"
           },
           "status": {
             "type": "string",
@@ -45551,7 +45551,7 @@
       },
       "AutomationRuleListRequest": {
         "type": "object",
-        "description": "列出当前调用者可见的自动化规则。",
+        "description": "列出当前调用者可见的自动化规则。`all` 包含调用者自己的个人规则和可访问团队的团队规则；账户管理员在列表中不可见他人的个人规则。",
         "properties": {
           "p": {
             "type": "integer",
@@ -45571,7 +45571,7 @@
               "personal",
               "team"
             ],
-            "description": "作用域过滤。默认 all。"
+            "description": "作用域过滤：`all`（自己的个人规则 + 可访问团队规则）、`personal` 或 `team`；默认 `all`。"
           },
           "team_ids": {
             "type": "array",
@@ -45579,7 +45579,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "额外过滤到这些团队 ID；这是过滤器，不是扩权。"
+            "description": "过滤到这些团队 ID；该字段只会收窄结果，不会扩大访问范围。"
           },
           "include_person": {
             "type": [
@@ -45737,7 +45737,7 @@
           },
           "can_edit": {
             "type": "boolean",
-            "description": "当前调用者是否可管理该规则。"
+            "description": "当调用者可管理该规则时为 true：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。"
           },
           "created_at": {
             "type": "integer",
diff --git a/api-reference/safari.openapi.en.json b/api-reference/safari.openapi.en.json
index b1da626..4e9ed11 100644
--- a/api-reference/safari.openapi.en.json
+++ b/api-reference/safari.openapi.en.json
@@ -1959,7 +1959,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Pagination uses `p`/`limit` (max 100); `scope` defaults to `all` (own + member-of-team rows).\n- `is_running` reflects the live run-set; `has_unread` is computed per calling user.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Pagination uses `p`/`limit` (max 100); `scope` defaults to `all`.\n- `all` returns your personal sessions plus team sessions you can access; account admins see all team sessions, but not other users' personal sessions.\n- `team_ids` narrows the visible set and never expands access.\n- `is_running` reflects the live run-set; `has_unread` is computed per calling user.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-list",
           "metadata": {
             "sidebarTitle": "List sessions"
@@ -2068,7 +2068,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Page older history with `search_after_ctx` from the previous response.\n- `limit` (or legacy `num_recent_events`) caps the event page; default 100, max 1000.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions are readable only by their creator; team sessions can be read by same-account callers with the `session_id`.\n- Page older history with `search_after_ctx` from the previous response.\n- `limit` (or legacy `num_recent_events`) caps the event page; default 100, max 1000.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-info",
           "metadata": {
             "sidebarTitle": "Get session detail"
@@ -2201,7 +2201,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- The response is `application/x-ndjson` — parse line-by-line and write to a file; do not buffer the whole body in memory.\n- The first line is always a `session_meta` envelope; `include_subagents=true` inlines each child session's stream after its dispatch line.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions are exportable only by their creator; team sessions can be exported by same-account callers with the `session_id`.\n- The response is `application/x-ndjson` — parse line-by-line and write to a file; do not buffer the whole body in memory.\n- The first line is always a `session_meta` envelope; `include_subagents=true` inlines each child session's stream after its dispatch line.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-read-export",
           "metadata": {
             "sidebarTitle": "Export session transcript"
@@ -2262,7 +2262,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Requires manage rights on the session (creator, account admin, or owning-team member).\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | None — any valid `app_key` can call this operation |\n\n## Usage\n\n- Personal sessions can be deleted only by their creator; team sessions can be deleted by the creator, an account admin, or a member of the owning team.\n",
           "href": "/en/api-reference/ai-sre/sessions/session-write-delete",
           "metadata": {
             "sidebarTitle": "Delete session"
@@ -2338,7 +2338,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-create",
           "metadata": {
             "sidebarTitle": "Create Automation rule"
@@ -2461,7 +2461,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n\n## Usage\n\n- `all` returns your personal rules plus team rules you can access.\n- Account admins see all team rules in list results, but not other users' personal rules.\n- `team_ids` narrows the visible set and never expands access.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-read-list",
           "metadata": {
             "sidebarTitle": "List Automation rules"
@@ -2575,7 +2575,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; caller must manage the target rule |\n\n## Usage\n\n- Manage rights mean the personal rule owner; for team rules, an account admin or a member of the rule's team.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-read-get",
           "metadata": {
             "sidebarTitle": "Get Automation rule"
@@ -2683,7 +2683,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n- To trigger from On-call incidents, send `oncall_incident_trigger_enabled`, `oncall_incident_channel_ids`, and `oncall_incident_severities`; matching events run with `trigger_kind=oncall_incident`.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-update",
           "metadata": {
             "sidebarTitle": "Update Automation rule"
@@ -2803,7 +2803,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- A caller may create personal rules and rules for any team in the current account; `team_id` is immutable after creation.\n- List visibility follows session-list visibility: owners/admins see all rules; ordinary members see rules they created and rules for their teams.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; management operations require the caller to manage the target rule |\n\n## Usage\n\n- Get, update, delete, and run history access require manage rights: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n- Rule lists include your personal rules plus accessible team rules; account admins see all team rules, but not other users' personal rules.\n- `http_post_token` is returned only when creating or rotating the token. Save it immediately.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-rule-write-delete",
           "metadata": {
             "sidebarTitle": "Delete Automation rule"
@@ -2970,7 +2970,7 @@
           }
         ],
         "x-mint": {
-          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; results are filtered to the caller's visible scope |\n",
+          "content": "## Restrictions\n\n| Aspect | Value |\n| ------ | ----- |\n| Rate limits | **1,000 requests/minute**; **50 requests/second** per account |\n| Permissions | Valid `app_key`; caller must manage the target rule |\n\n## Usage\n\n- Run history is visible only when the caller can manage the rule: the personal rule owner; for team rules, an account admin or a member of the rule's team.\n",
           "href": "/en/api-reference/ai-sre/automations/automation-run-read-list",
           "metadata": {
             "sidebarTitle": "List Automation runs"
@@ -4384,7 +4384,7 @@
       },
       "SessionListRequest": {
         "type": "object",
-        "description": "Filters for listing agent sessions. Reads are scoped to the resolved account and the caller's visible teams.",
+        "description": "Filters for listing agent sessions. `all` visibility means the caller's own personal sessions plus accessible team sessions; account admins do not see other users' personal sessions.",
         "properties": {
           "app_name": {
             "type": "string",
@@ -4435,7 +4435,7 @@
           },
           "scope": {
             "type": "string",
-            "description": "Visibility scope: all (own + member-of-team rows, default), personal, or team.",
+            "description": "Visibility scope: `all` (own personal + accessible team sessions), `personal`, or `team`; default `all`.",
             "enum": [
               "all",
               "personal",
@@ -4448,7 +4448,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "Optional explicit team filter; intersects with `scope`."
+            "description": "Optional explicit team filter; intersects with `scope` and never expands access."
           },
           "entry_kinds": {
             "type": "array",
@@ -4558,7 +4558,7 @@
           },
           "can_manage": {
             "type": "boolean",
-            "description": "True when the caller may rename/archive/delete the session."
+            "description": "True when the caller may rename/archive/delete the session; personal sessions are creator-only, team sessions allow the creator, account admin, or team member."
           },
           "status": {
             "type": "string",
@@ -5012,7 +5012,7 @@
       },
       "AutomationRuleListRequest": {
         "type": "object",
-        "description": "List Automation rules visible to the caller.",
+        "description": "List Automation rules visible to the caller. `all` includes the caller's personal rules plus accessible team rules; account admins do not see other users' personal rules in list results.",
         "properties": {
           "p": {
             "type": "integer",
@@ -5032,7 +5032,7 @@
               "personal",
               "team"
             ],
-            "description": "Scope filter. Defaults to all."
+            "description": "Scope filter: `all` (own personal + accessible team rules), `personal`, or `team`; default `all`."
           },
           "team_ids": {
             "type": "array",
@@ -5040,7 +5040,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "Filter to these team IDs; this filters results and does not expand access."
+            "description": "Filter to these team IDs; this narrows results and does not expand access."
           },
           "include_person": {
             "type": [
@@ -5198,7 +5198,7 @@
           },
           "can_edit": {
             "type": "boolean",
-            "description": "Whether the caller can manage this rule."
+            "description": "True when the caller can manage this rule: the personal rule owner; for team rules, an account admin or a member of the rule's team."
           },
           "created_at": {
             "type": "integer",
diff --git a/api-reference/safari.openapi.zh.json b/api-reference/safari.openapi.zh.json
index ace26da..4d9850f 100644
--- a/api-reference/safari.openapi.zh.json
+++ b/api-reference/safari.openapi.zh.json
@@ -1959,7 +1959,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 分页使用 `p`/`limit`（最大 100）；`scope` 默认 `all`（本人 + 所属团队）。\n- `is_running` 反映实时运行集合；`has_unread` 按调用者各自计算。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 分页使用 `p`/`limit`（最大 100）；`scope` 默认 `all`。\n- `all` 返回调用者自己的个人会话，以及调用者可访问团队的团队会话；账户管理员可见所有团队会话，但不可见他人的个人会话。\n- `team_ids` 只会收窄可见集合，不会扩大访问范围。\n- `is_running` 反映实时运行集合；`has_unread` 按调用者各自计算。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-list",
           "metadata": {
             "sidebarTitle": "查询会话列表"
@@ -2068,7 +2068,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 使用上一次响应的 `search_after_ctx` 翻阅更早的历史。\n- `limit`（或旧版 `num_recent_events`）限制事件页大小；默认 100，最大 1000。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可读；团队会话允许同一账户内持有 `session_id` 的调用者读取。\n- 使用上一次响应的 `search_after_ctx` 翻阅更早的历史。\n- `limit`（或旧版 `num_recent_events`）限制事件页大小；默认 100，最大 1000。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-info",
           "metadata": {
             "sidebarTitle": "查看会话详情"
@@ -2201,7 +2201,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 响应为 `application/x-ndjson`——请逐行解析并写入文件，切勿将整段记录读入内存。\n- 第一行始终为 `session_meta` 信封；`include_subagents=true` 会在派发行后内联各子会话的事件流。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可导出；团队会话允许同一账户内持有 `session_id` 的调用者导出。\n- 响应为 `application/x-ndjson`——请逐行解析并写入文件，切勿将整段记录读入内存。\n- 第一行始终为 `session_meta` 信封；`include_subagents=true` 会在派发行后内联各子会话的事件流。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-read-export",
           "metadata": {
             "sidebarTitle": "导出会话记录"
@@ -2262,7 +2262,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 需要对该会话拥有管理权限（创建者、账户管理员或所属团队成员）。\n",
+          "content": "## 限制说明\n\n| 项目 | 说明 |\n| ---- | ---- |\n| 速率限制 | 每个 `app_key` **1,000 次/分钟**；**50 次/秒** |\n| 权限要求 | 无 —— 持有有效的 `app_key` 即可调用 |\n\n## 使用说明\n\n- 个人会话仅创建者可删除；团队会话可由创建者、账户管理员或所属团队成员删除。\n",
           "href": "/zh/api-reference/ai-sre/sessions/session-write-delete",
           "metadata": {
             "sidebarTitle": "删除会话"
@@ -2338,7 +2338,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-create",
           "metadata": {
             "sidebarTitle": "创建自动化规则"
@@ -2461,7 +2461,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n\n## 使用说明\n\n- `all` 返回调用者自己的个人规则，以及调用者可访问团队的团队规则。\n- 账户管理员在列表中可见所有团队规则，但不可见他人的个人规则。\n- `team_ids` 只会收窄可见集合，不会扩大访问范围。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-read-list",
           "metadata": {
             "sidebarTitle": "列出自动化规则"
@@ -2575,7 +2575,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；调用者必须可管理目标规则 |\n\n## 使用说明\n\n- 管理权限指：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-read-get",
           "metadata": {
             "sidebarTitle": "查看自动化规则"
@@ -2683,7 +2683,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n- 如需由 On-call 故障触发，传入 `oncall_incident_trigger_enabled`、`oncall_incident_channel_ids` 与 `oncall_incident_severities`；匹配事件会以 `oncall_incident` 运行。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-update",
           "metadata": {
             "sidebarTitle": "更新自动化规则"
@@ -2803,7 +2803,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 可以创建个人规则，也可以创建当前 account 下任意团队规则；`team_id` 创建后不可修改。\n- 列表可见性与 Session 列表对齐：Owner / 管理员可见全部；普通成员可见自己创建的规则和自己团队的规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；管理操作要求调用者可管理目标规则 |\n\n## 使用说明\n\n- 查看、更新、删除和查看运行历史需要管理权限：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n- 规则列表包含调用者自己的个人规则和可访问团队的团队规则；账户管理员可见所有团队规则，但不可见他人的个人规则。\n- `http_post_token` 只在创建或轮换 token 的响应中返回，请立即保存。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-rule-write-delete",
           "metadata": {
             "sidebarTitle": "删除自动化规则"
@@ -2970,7 +2970,7 @@
           }
         ],
         "x-mint": {
-          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；结果按调用者可见范围过滤 |\n",
+          "content": "## 调用限制\n\n| 项 | 值 |\n| ------ | ----- |\n| 速率限制 | **1,000 次/分钟**；**50 次/秒** 每账户 |\n| 权限 | 有效 `app_key`；调用者必须可管理目标规则 |\n\n## 使用说明\n\n- 仅当调用者可管理规则时才可查看运行历史：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。\n",
           "href": "/zh/api-reference/ai-sre/automations/automation-run-read-list",
           "metadata": {
             "sidebarTitle": "列出自动化运行历史"
@@ -4384,7 +4384,7 @@
       },
       "SessionListRequest": {
         "type": "object",
-        "description": "查询智能体会话列表的过滤条件。读取范围限定为解析出的账户及调用者可见的团队。",
+        "description": "查询智能体会话列表的过滤条件。`all` 表示调用者自己的个人会话和可访问团队的团队会话；账户管理员不可见他人的个人会话。",
         "properties": {
           "app_name": {
             "type": "string",
@@ -4435,7 +4435,7 @@
           },
           "scope": {
             "type": "string",
-            "description": "可见范围：all（本人 + 所属团队，默认）、personal 或 team。",
+            "description": "可见范围：`all`（自己的个人会话 + 可访问团队会话）、`personal` 或 `team`；默认 `all`。",
             "enum": [
               "all",
               "personal",
@@ -4448,7 +4448,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "可选的团队过滤；与 `scope` 取交集。"
+            "description": "可选的团队过滤；与 `scope` 取交集，且不会扩大访问范围。"
           },
           "entry_kinds": {
             "type": "array",
@@ -4558,7 +4558,7 @@
           },
           "can_manage": {
             "type": "boolean",
-            "description": "当调用者可重命名/归档/删除该会话时为 true。"
+            "description": "当调用者可重命名/归档/删除该会话时为 true；个人会话仅创建者可管理，团队会话允许创建者、账户管理员或团队成员管理。"
           },
           "status": {
             "type": "string",
@@ -5012,7 +5012,7 @@
       },
       "AutomationRuleListRequest": {
         "type": "object",
-        "description": "列出当前调用者可见的自动化规则。",
+        "description": "列出当前调用者可见的自动化规则。`all` 包含调用者自己的个人规则和可访问团队的团队规则；账户管理员在列表中不可见他人的个人规则。",
         "properties": {
           "p": {
             "type": "integer",
@@ -5032,7 +5032,7 @@
               "personal",
               "team"
             ],
-            "description": "作用域过滤。默认 all。"
+            "description": "作用域过滤：`all`（自己的个人规则 + 可访问团队规则）、`personal` 或 `team`；默认 `all`。"
           },
           "team_ids": {
             "type": "array",
@@ -5040,7 +5040,7 @@
               "type": "integer",
               "format": "int64"
             },
-            "description": "额外过滤到这些团队 ID；这是过滤器，不是扩权。"
+            "description": "过滤到这些团队 ID；该字段只会收窄结果，不会扩大访问范围。"
           },
           "include_person": {
             "type": [
@@ -5198,7 +5198,7 @@
           },
           "can_edit": {
             "type": "boolean",
-            "description": "当前调用者是否可管理该规则。"
+            "description": "当调用者可管理该规则时为 true：个人规则仅限创建者；团队规则限账户管理员或规则所属团队成员。"
           },
           "created_at": {
             "type": "integer",