chore(spec): 随 main 重新渲染生成物(strictness-ledger counts / docs / authorable-surface)

#5861 被合并队列踢出,签名是 `strictness-ledger-doc.test.ts > is checked in current`。
归因:#5849 / #5857 在入队前合入 main(#5857 给 `api/` 新增了一个 z.object 站点),
本分支的 counts.md 是在旧树上渲染的,合并树上不再等于现渲染 —— 单体生成物的串行税
(#5837 正在治的病),不是实现回归。

在合并树上重跑 os-regen:`api/` 站点数 395 → 396(main 的 +1 与本单 `projectionApplied`
嵌套对象的 +1),docs 与 authorable-surface 一并重渲。相对 origin/main 的净增量仍只有
本单四个键。`authorable-surface.base.json` 本轮无重锚漂移(已核对与 main 一致)。

Co-Authored-By: Claude <noreply@anthropic.com>

Author: claude

content/docs/references/api/protocol.mdx

@@ -652,7 +652,7 @@ Enable package response
 | **routes** | `{ data: string; metadata: string; discovery?: string; ui?: string; … }` | optional |  |
 | **locale** | `{ default: string; supported: string[]; timezone: string }` | optional |  |
 | **services** | `Record<string, { enabled: boolean; status: Enum<'available' \| 'registered' \| 'unavailable' \| 'degraded' \| 'stub'>; handlerReady?: boolean; route?: string; … }>` | optional | Per-service availability map keyed by CoreServiceName |
-| **capabilities** | `Record<string, { enabled: boolean; features?: Record<string, boolean>; description?: string }>` | optional | Hierarchical capability descriptors for frontend intelligent adaptation |
+| **capabilities** | `{ comments: object; automation: object; cron: object; search: object; … }` | optional | Hierarchical capability descriptors — the full WellKnownCapabilities vocabulary, every key present |
 | **schemaDiscovery** | `{ openapi?: string; jsonSchema?: string }` | optional | Schema discovery endpoints for API toolchain integration |
 | **scoping** | `{ enabled: boolean; resolution: Enum<'required' \| 'optional' \| 'auto'>; scoped: boolean; environmentId?: string }` | optional | Environment-scoping posture, added by the REST discovery endpoint |
 | **metadata** | `Record<string, any>` | optional | Custom metadata key-value pairs for extensibility |

docs/audits/2026-07-unknown-key-strictness-ledger.counts.md

@@ -262,7 +262,7 @@ directory rather than per file.
 | Dir | Sites |
 |---|---|
 | `ai/` | 77 |
-| `api/` | 395 |
+| `api/` | 396 |
 | `cloud/` | 82 |
 | `identity/` | 33 |
 | `integration/` | 10 |

packages/spec/authorable-surface.json

@@ -672,6 +672,9 @@
     "api/CacheInvalidationResponse:invalidated",
     "api/CacheInvalidationResponse:success",
     "api/CacheInvalidationResponse:targets",
+    "api/CapabilityDescriptor:description",
+    "api/CapabilityDescriptor:enabled",
+    "api/CapabilityDescriptor:features",
     "api/CheckPermissionRequest:action",
     "api/CheckPermissionRequest:field",
     "api/CheckPermissionRequest:object",
@@ -2044,13 +2047,19 @@
     "api/WebSocketServerConfig:path",
     "api/WebSocketServerConfig:presence",
     "api/WebSocketServerConfig:reconnectAttempts",
+    "api/WellKnownCapabilities:ai",
+    "api/WellKnownCapabilities:analytics",
     "api/WellKnownCapabilities:automation",
     "api/WellKnownCapabilities:chunkedUpload",
     "api/WellKnownCapabilities:comments",
     "api/WellKnownCapabilities:cron",
     "api/WellKnownCapabilities:export",
+    "api/WellKnownCapabilities:files",
+    "api/WellKnownCapabilities:i18n",
+    "api/WellKnownCapabilities:notifications",
     "api/WellKnownCapabilities:search",
     "api/WellKnownCapabilities:transactionalBatch",
+    "api/WellKnownCapabilities:websockets",
     "automation/ActionDescriptor:aliasOf",
     "automation/ActionDescriptor:category",
     "automation/ActionDescriptor:configSchema",
@@ -3441,8 +3450,8 @@
     "data/ImportFieldMapping:transform",
     "data/Index:fields",
     "data/Index:name",
-    "data/Index:partial",
-    "data/Index:type",
+    "data/Index:partial [RETIRED]",
+    "data/Index:type [RETIRED]",
     "data/Index:unique",
     "data/JSONValidation:_lock",
     "data/JSONValidation:_lockDocsUrl",
@@ -6931,6 +6940,7 @@
     "ui/ActionParam:type",
     "ui/ActionParam:visible",
     "ui/ActionSession:organizationId",
+    "ui/ActionSession:positions",
     "ui/ActionSession:roles",
     "ui/ActionSession:userId",
     "ui/AddRecordConfig:enabled",