@sema-agent/server 1.323.0 → 2.0.1

package/dist/main.js

@@ -1,111 +1,54 @@
-import { readFileSync, existsSync, realpathSync } from "node:fs";
-import { setLeafAdvanceListener } from "./session-leaf-bus.js";
-import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { loadRemoteExec } from "@sema-agent/registry-core/node";
-import { skillContentHash } from "@sema-agent/registry-core";
-import { Runner, TtlSessionStore, uuidv7, FileRosterStore, FileBackgroundAgentStore, FileMailboxStore, defaultTaskRegistry, combinePolicies, createDurableQuestionPolicy, createAllowDenyPolicy, tightenTaskSpec, isThinkingLevel, QUESTION_AWAITS_RESUME, FileWorkflowRunStore, InMemoryWorkflowRunStore, workflowsCapability, NodeLspManager, createFileWorkflowScriptStore, expandTiers, NodeExecutionEnv, CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, verifyPromptArtifact, createWebFetchSummarizer, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
-import { PgMemoryEngineBackend, ensurePgMemoryEngineSchema } from "./plugins/memory-engine-pg.js";
-import { TiDBMemoryEngineBackend, ensureTiDBMemoryEngineSchema } from "./plugins/memory-engine-tidb.js";
-import { PgMemoryHistoryStore, ensurePgMemoryHistorySchema, PgMemorySyncStore, ensurePgMemorySyncSchema } from "./plugins/memory-sync-store-pg.js";
-import { TiDBMemoryHistoryStore, ensureTiDBMemoryHistorySchema, TiDBMemorySyncStore, ensureTiDBMemorySyncSchema } from "./plugins/memory-sync-store-tidb.js";
-import { resolveTaskModel, modelSupportsImages, matchCatalogModel } from "./model-select.js";
-import { derivePkgSourceEnv, customPkgSourceFromEnv } from "./sandbox-pkg-source.js";
+import { Runner, TtlSessionStore, uuidv7, defaultTaskRegistry, combinePolicies, createDurableQuestionPolicy, createAllowDenyPolicy, workflowsCapability, createWebFetchSummarizer, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { createSessionTitler } from "./session-titler.js";
-import { SessionWatchRegistry, posIntEnv } from "./session-watch.js";
-import { selectEnvironmentTool, SessionEnvironmentSelection } from "./capabilities/select-environment-tool.js";
-import { sendUserFileTool, SendUserFileEmitter, SEND_USER_FILE_MAX_BYTES, subagentSendUserFileExtraTools } from "./capabilities/send-user-file-tool.js";
-import { TaskEnvRegistry, createSandboxFileSend, sandboxSendLaneEnabled } from "./capabilities/sandbox-file-send.js";
-import { createSendUserFileIssuer } from "./plugins/send-user-file.js";
-import { withLedgerRecording } from "./plugins/send-file-ledger.js";
-import { basename, resolve } from "node:path";
-import { stat as fsStat, readFile as fsReadFile } from "node:fs/promises";
-import { acceptShellScratchpadDir, buildEnvFacts, egressForRemoteExec, ensureScratchpadDir, purgeScratchpadDir, sweepStaleScratchpads, resumeFactsForLane } from "./env-facts.js";
-import { normalizeSuggestNextPrompts, normalizeResilience, normalizeAttachments, normalizeResumeAtMode, resolveTaskLimits, taskAgentsSpecFragment, retainBackgroundProcessesFromBody, toolNameListFromBody, promptProfileFromBody } from "./spec-fields.js";
-import { createBrain, brainSummary } from "./brain.js";
-import { configLkgEnabled, loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
+import { posIntEnv } from "./session-watch.js";
+import { selectEnvironmentTool } from "./capabilities/select-environment-tool.js";
+import { subagentSendUserFileExtraTools } from "./capabilities/send-user-file-tool.js";
+import { resolve } from "node:path";
+import { brainSummary } from "./brain.js";
+import { loadConfig, logConfigDiagnostics, resolveBindHost } from "./config.js";
 import { drainNumEnvWarnings } from "./plugins/remote-shell.js";
-import { resourceSuspendOptIn } from "./resource-suspend.js";
-import { createSessionStore, ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
+import { ensureChildSessionDurableWithPromotion } from "./plugins/session-store.js";
 import { ForkRoutingSessionStore } from "./plugins/fork-routing-session-store.js";
-import { createStoreBackend, openStoreBackendWithFallback, assertCloudSnapshotBlobPosture } from "./plugins/store-backend.js";
-import { e2bExecutionEnvFactory } from "./plugins/remote-env-e2b.js";
-import { k8sExecutionEnvFactory } from "./plugins/remote-env-k8s.js";
-import { sshExecutionEnvFactory } from "./plugins/remote-env-ssh.js";
-import { adbExecutionEnvFactory } from "./plugins/remote-env-adb.js";
-import { hostExecutionEnvFactory, RemoteHostExecutionEnv } from "./plugins/remote-env-host.js";
 import { webSearchConfigFromEnv, createWebSearchBackend, setWebSearchBadPayloadObserver } from "./plugins/web-search.js";
-import { FileSchedulerBackend, defaultSchedulerStorePath } from "./plugins/scheduler-support.js";
-import { localDockerExecutionEnvFactory } from "./plugins/remote-env-local-docker.js";
-import { withWorktreeIsolation, reapOrphanWorktrees } from "./plugins/worktree-isolation.js";
-import { isRemoteScratchpadLane, remoteScratchpadDirFor, withRemoteScratchpad } from "./plugins/remote-scratchpad.js";
-import { createE2bLspManager } from "./lsp/e2b-manager.js";
-import { createAuthorizer, memoryEngineBackendFor, memoryEngineRemoteLanePosture, memorySpecForRequest, HttpError } from "./security.js";
-import { createOaApprovalPolicy, createDurableAskPolicy } from "./approval.js";
-import { buildSessionAuditPg, buildSessionAuditLocal, buildSessionAudit } from "./audit.js";
-import { makeDegenerateInstrument } from "./degenerate-instrument.js";
-import { PlanCacheProbe } from "./plan-cache-probe.js";
+import { createAuthorizer } from "./security.js";
+import { createDurableAskPolicy } from "./approval.js";
 import { loadSkills } from "./capabilities/skills.js";
-import { applyCenterPlugins } from "./capabilities/center-plugins.js";
 import { GiteaClient } from "./capabilities/repo-tools.js";
-import { buildScenarios, selectScenario, centerScenarios, mergeUserSkills, builtinScenarioDetails, centerScenarioDetails, gateScenarioRequest } from "./capabilities/scenarios.js";
-import { applyLongtailDefer } from "./capabilities/tool-defer.js";
-import { resolveCollabWorkflow, listCollabWorkflows } from "./capabilities/collab-workflows.js";
+import { buildScenarios, builtinScenarioDetails } from "./capabilities/scenarios.js";
 import { createLogger } from "./observability/logger.js";
-import { createSighupIdleHandler } from "./sighup-idle.js";
 import { createToolTracer, createPermissionDeniedMeter } from "./observability/tool-trace.js";
 import { createRegistryJwtVerifier } from "./auth-bridge.js";
 import { createMetrics } from "./observability/metrics.js";
 import { setRedactionObserver, redactSecrets } from "./trace/redact.js";
 import { RateLimiter } from "./observability/rate-limit.js";
-import { createHttpServer, explicitOperator, } from "./http/server.js";
+import { createHttpServer, explicitOperator } from "./http/server.js";
 import { exportMemoryScope } from "./memory-export.js";
 import { performMemorySync } from "./memory-sync.js";
-import { createMemorySyncRunner, createMemorySyncTransport } from "./memory-sync-client.js";
-import { createLeaderEndpoint } from "./leader/endpoint.js";
-import { createLeaderRunner } from "./leader/wire.js";
-import { WorkflowNotifyGate, JournalingWorkflowRunStore, FileWorkflowNotifyJournalStore, } from "./orchestration/workflow-notify-journal.js";
-import { FileWorkflowCompletionInbox, InMemoryWorkflowCompletionInbox, resolveCompletionRoute, resolveServedSession, } from "./orchestration/workflow-completion-inbox.js";
-import { buildPricing, createTracer, createSideQueryAccountant, cappedCeiling, ModelUsageTracker, PromptManifestTracker } from "./budget.js";
-import { CostQuota } from "./observability/cost-quota.js";
 import { startOtlpExporter } from "./observability/otel-exporter.js";
 import { HEARTBEAT_MS, backgroundAgentOutput, taskHandleOutput, taskHandleStop } from "./runs.js";
-import { ElicitationCoordinator } from "./elicitation.js";
-import { QuestionCoordinator } from "./question.js";
-import { ToolApprovalCoordinator } from "./tool-approval.js";
-import { applyEffective, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, mcpForScenario, restartReasons, modelPlaneChanged, planeHasActiveTiers, fetchPromptArtifact } from "./sema-registry.js";
-import { ensureSealedKeyStore, reportExecutionPublicKey } from "./sealed-key.js";
-import { createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "./config-provider.js";
-import { validatePromptsDomain, centerPromptProvider, centerIdentityAssembled, applyCatalogToSource, CORE_ENGINE_VERSION, withPromptArtifactBackfill } from "./capabilities/center-prompts.js";
-import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg } from "./config-lkg.js";
-import { TiDBRosterStore, PgRosterStore, ensureTiDBRosterSchema, ensurePgRosterSchema } from "./plugins/roster-store-sql.js";
-import { TiDBTaskAttachmentStore, PgTaskAttachmentStore, ensureTiDBTaskAttachmentSchema, ensurePgTaskAttachmentSchema, bindAttachmentsForTask, materializeAttachmentsInto } from "./plugins/task-attachment-store.js";
-import { LocalTaskAttachmentStore } from "./plugins/local-task-attachment-store.js";
-import { MinioBlobBackend, SQL_BLOB_DEFAULT_MAX_BYTES } from "./plugins/blob-backend.js";
-import { TiDBBackgroundAgentStore, PgBackgroundAgentStore, ensureTiDBBackgroundAgentSchema, ensurePgBackgroundAgentSchema } from "./plugins/background-agent-store-sql.js";
-import { TiDBMailboxStore, PgMailboxStore, ensureTiDBMailboxSchema, ensurePgMailboxSchema } from "./plugins/mailbox-store-sql.js";
-import { createPrincipalEntitlementsClient, gateExecutionLane, scopedTokenNeedsWorker, applyObserverEnvOptIn } from "./runtime-caps-resolver.js";
-import { applyRuntimeGovernance, stripDelegationTools } from "./runtime-governance.js";
-import { parseTaskSettings, applyTaskSettings, coercePermissionMode, withPermissionMode, effectiveThinking, acceptAppendSystemPrompt, hasConstitutionAnchors, providerDropsAppend, MAX_SETTINGS_OUTPUT_STYLE_CHARS } from "./task-settings.js";
-import { createTaskHooks, composeHooks } from "./hooks/hook-runner.js";
+import { SQL_BLOB_DEFAULT_MAX_BYTES } from "./plugins/blob-backend.js";
+import { composeHooks } from "./hooks/hook-runner.js";
 import { createHookLlm } from "./hooks/hook-llm.js";
-import { selfOrchestrationFromBody, enableForkFromBody, workflowModelAllowlistFor, normalizeRetainSubagentSessions } from "./task-workflow.js";
-import { FleetUsageAccumulator, startFleetClientFromEnv } from "./fleet-client.js";
-import { createFleetLeaseFromEnv } from "./fleet-lease.js";
+import { startFleetClientFromEnv } from "./fleet-client.js";
 import { reclaimOrphansAtBoot } from "./boot-reclaim.js";
-import { evictLspOnDestroy } from "./lsp-evict.js";
-import { makeLoadProjectMemory, makeProbeInstructionSources } from "./project-memory.js";
-import { cwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, isValidCwd, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "./task-cwd.js";
-import { resolveRequestMcp, mcpInjectionHonored } from "./task-mcp.js";
-import { PerTaskImageRegistry, resolveSandboxImageRef } from "./per-task-image.js";
-import { routeServiceTask, isIsolatedExecEnv, supPostureOverrides } from "./router/route-orchestration.js";
-import { createHardenedVmRunner } from "./orchestration/hardened-vm-runner.js";
-import { createWorkerHardenedVmRunner } from "./orchestration/hardened-vm-worker-runner.js";
-import { WorkflowAgentRegistry } from "./orchestration/workflow-agent-steer.js";
-import { SubagentSteerRegistry } from "./orchestration/subagent-steer.js";
-import { FleetEventBus, fleetBackgroundChildPublisher } from "./fleet/fleet-bus.js";
-import { createKeyResolver } from "./key-resolver.js";
+import { createConfigCenterRuntime } from "./boot/config-center.js";
+import { createResolveSpec } from "./boot/resolve-spec.js";
+import { startReapers } from "./boot/reapers.js";
+import { openStores } from "./boot/stores.js";
+import { createBudgetAndTracing } from "./boot/budget-tracing.js";
+import { createExecutionEnv } from "./boot/execution-env.js";
+import { createWorkflowOrchestration } from "./boot/workflow-orchestration.js";
+import { createLiveCoordinators } from "./boot/coordinators.js";
+import { createRuntimeCaps } from "./boot/runtime-caps.js";
+import { createRunnerDeps, createSharedRunnerDeps } from "./boot/runner-deps.js";
+import { createSessionFaces } from "./boot/session-faces.js";
+import { createLeaderFace } from "./boot/leader.js";
+import { installShutdownHandlers } from "./boot/shutdown.js";
+/** Service version for GET /v1/capabilities — read from the package.json shipped next to src/ in the
+ *  image (Dockerfile COPYs it). Best-effort: an unreadable file reports "unknown", never crashes boot. */
 function serviceVersion() {
     try {
         const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
@@ -115,1033 +58,146 @@ function serviceVersion() {
         return "unknown";
     }
 }
+/**
+ * Service entrypoint. **装配次序表**(design/158 A10)。
+ *
+ * 各 boot 段已按内聚下沉到 `src/boot/*.ts` 叶子(纯搬运,逐字);本函数保留的是**顺序本身**——
+ * 谁先谁后是行为(env 读取时序、诊断排空点、信号注册时点、工厂装饰顺序),每个叶子的文件头
+ * 都写明了它那条「位置即契约」。当前次序:
+ *
+ *   loadConfig → logger/metrics → 诊断排空(logConfigDiagnostics + drainNumEnvWarnings)
+ *     → boot/config-center(sealed-key/provider/prompt-epoch 店/effective 拉取/LKG 兜底/tolerant apply)
+ *     → boot/config-center.applyLocalRemoteExec(local 形 config.d/remote-exec.json 覆写)
+ *     → boot/stores(StoreBackend + memory + 四个 durable 店 + sessionStore + 拒启断言)
+ *     → boot/budget-tracing(brain/pricing/quota/tracer)
+ *     → boot/execution-env(remote-exec 工厂链 + LSP)
+ *     → toolTracer/deploymentHooks
+ *     → boot/workflow-orchestration → boot/coordinators → boot/runtime-caps
+ *     → boot/runner-deps → new Runner → hook LLM/agent → subRunner
+ *     → runStore/anchors/approval 面 → skills → boot/config-center.applyCenterCapabilities
+ *       (center skills/plugins/boot-LKG/mcp)→ buildScenarios → .applyCenterScenarios
+ *     → boot/reapers → OTLP → boot/config-center.startRefreshLoop → .initKeyResolver
+ *     → boot/session-faces → boot/leader → ServiceDeps 七组 → boot/resolve-spec
+ *     → createHttpServer → listen → fleet client → boot/shutdown(必须最后:信号注册时点即契约)
+ *
+ * A10 尾刀(config-center):`ccEtag/effective/latestEffective/appliedPlaneEff/planeDeferredNoHandoff/
+ * pendingRestart/bootSkillStale/keyResolver/centerPrompts/…` 这组跨段可变状态,已整体搬进
+ * `boot/config-center.ts` 那只工厂的**闭包**(仍是 `let`,每一处读写的文本与次序逐字未改 ——
+ * codex R10–R38 的重启风暴判据全部按原样保留);main 只经窄口读:`getKeyResolver/getCenterPrompts/
+ * modelReady/restartState/planeDeferredState/promptSource`,与本目录既有的晚绑 getter 惯例同款。
+ *
+ * Wires the three planes:
+ *   Brain   = external LLM gateway (createBrain)
+ *   Session = pluggable store (TiDB durable event-log center, or in-memory)
+ *   Hands   = tools/MCP injected per request in resolveSpec (deployment-owned)
+ * Persistence (L1 sessions + L2 memory) lives in the external TiDB center; this container is stateless.
+ */
 async function main() {
     const config = loadConfig();
+    // Liveness invariant: the running instance refreshes updated_at every HEARTBEAT_MS; the reaper fails
+    // a run whose updated_at is older than runStaleSec. If the stale window were ≤ the heartbeat, the
+    // reaper would race a perfectly alive run. Fail fast on a misconfiguration instead of reaping live work.
     if (config.runStaleSec * 1000 <= HEARTBEAT_MS) {
         throw new Error(`REAP_RUN_STALE_SEC (${config.runStaleSec}s) must exceed the ${HEARTBEAT_MS / 1000}s liveness heartbeat`);
     }
     const logger = createLogger(config.logLevel);
     const metrics = createMetrics();
+    // S20 (SILENT-FALLBACK P1) + [792]④ boot notices: config parsing runs before the logger exists — drain both
+    // pre-logger collectors via the shared helper (F10: run-local uses the same one, so entrypoints can't drift).
     logConfigDiagnostics(logger);
+    // design/158 B4 交接小件:plugins 数值旋钮(HOST_BG_*/K8S_BG_*/E2B_*,模块级 import 时读)的非法
+    // 字面量告警——通道在 remote-shell.ts 自带(不造 plugins→config 依赖边),与上面同一 boot 诊断点排空。
     for (const w of drainNumEnvWarnings())
         logger.warn("config_env_invalid_using_default", { env: w.env, raw: w.raw });
+    // M1(接入审计 2026-07-08):core verify 契约=verifier 必须异于 implementer(去相关性是 🔴 部署契约)。
+    // verifier 角色落 "default" 时对抗验证者=实现者自评自批——比无验证更糟(假安全感)。曝光而非静默:
+    // 单模型部署配 MODEL_VERIFIER 指异构模型即消警(typo/不在 catalog 同样落到这里)。
     if ((config.roles?.verifier ?? "default") === "default") {
         logger.warn("verify_decorrelation_unavailable", {
             hint: "verifier role = default (= implementer) — adversarial verification grades its own work; set MODEL_VERIFIER=<catalog model id> to a heterogeneous model",
             ...(process.env.MODEL_VERIFIER ? { rejected: process.env.MODEL_VERIFIER, reason: "not in catalog" } : {}),
         });
     }
+    // S24: redaction rewrites by pattern; LOW: web-search non-array payloads by provider.
     setRedactionObserver((pattern, n) => metrics.inc("redactions_applied_total", { pattern }, n));
     setWebSearchBadPayloadObserver((provider) => {
         metrics.inc("web_search_bad_payload_total", { provider });
         logger.warn("web_search_non_array_payload", { provider });
     });
-    let ccEtag;
-    let effective;
-    let latestEffective;
-    let lastRejectedCandidate;
-    let appliedPlaneEff;
-    let planeDeferredNoHandoff;
-    let bootSkillStale = false;
-    let pendingRestart;
-    const cc = config.configCenter;
+    // 🔴 ONE local root for BOTH the config provider (models/skills/mcp) AND the remoteExec loader (avoids a
+    // split-brain — createConfigProvider defaulted to process.cwd() while loadRemoteExec used
+    // AGENT_DATA_DIR, so config.d and remote-exec.json could resolve to DIFFERENT directories). run-local already
+    // computes this once; main.ts now does too. Shared with the config-center runtime and every boot leaf below.
     const localRoot = config.configLocalDir ?? process.env.AGENT_DATA_DIR ?? join(homedir(), ".ai-agent");
-    let sealedKeys;
-    try {
-        sealedKeys = await ensureSealedKeyStore(join(config.localDataRoot ?? localRoot, "sealed-key"), logger);
-        void reportExecutionPublicKey({
-            baseUrl: cc?.baseUrl,
-            adminToken: process.env.SEMA_REGISTRY_ADMIN_TOKEN || process.env.REGISTRY_ADMIN_TOKEN,
-            key: sealedKeys.latest,
-            ...(cc?.worker ? { notes: `worker ${cc.worker}` } : {}),
-            logger,
-        });
-    }
-    catch (err) {
-        logger.warn("sealed_key_store_unavailable", { err: String(err), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
-    }
-    const configProvider = cc || config.configProvider === "local"
-        ? createConfigProvider({
-            ...(config.configProvider ? { provider: config.configProvider } : {}),
-            ...(cc ? { configCenter: { baseUrl: cc.baseUrl, token: cc.token, worker: cc.worker, dryRun: cc.dryRun } } : {}),
-            ...(config.configProvider === "local" ? { localDir: localRoot } : {}),
-        })
-        : undefined;
-    const modelReadyState = { ready: !(cc && !cc.dryRun) || Boolean(process.env.MODEL_ID) };
-    const markRosterLanded = (eff) => {
-        if (!modelReadyState.ready && (eff.models?.models ?? []).some((m) => m.enabled !== false)) {
-            modelReadyState.ready = true;
-            logger.info("model_roster_landed", { note: "ready gate open — billable submissions accepted" });
-        }
-    };
-    let centerPrompts;
-    let pendingCatalogFaces;
-    const retryPendingCatalog = async (phase) => {
-        if (!pendingCatalogFaces)
-            return;
-        const { target } = pendingCatalogFaces;
-        if (await applyCatalogToSource(promptSource, target, centerPrompts, logger, phase)) {
-            centerPrompts = target;
-            pendingCatalogFaces = undefined;
-        }
-    };
-    const promptEpochDir = join(config.localDataRoot ?? localRoot, "prompt-epoch");
-    const promptStateDir = join(promptEpochDir, "state", cc?.worker === undefined ? "global" : `worker-${createHash("sha256").update(cc.worker).digest("hex").slice(0, 16)}`);
-    const withByDigestBackfill = (inner) => cc?.baseUrl ? withPromptArtifactBackfill(inner, (d) => fetchPromptArtifact(cc.baseUrl, cc.token, d), logger) : inner;
-    const promptSource = (() => {
-        try {
-            return new CenterPromptSource({
-                store: withByDigestBackfill(new FilePromptArtifactStore(promptEpochDir)),
-                stateStore: new FilePromptSourceStateStore(promptStateDir),
-                engineVersion: CORE_ENGINE_VERSION,
-            });
-        }
-        catch (e) {
-            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: String(e), note: "file-backed prompt-epoch store unavailable — memory fallback (catalog candidate not restart-durable); built-ins/declaration axis unaffected" });
-            return new CenterPromptSource({ store: withByDigestBackfill(new MemoryPromptArtifactStore()), stateStore: new MemoryPromptSourceStateStore(), engineVersion: CORE_ENGINE_VERSION });
-        }
-    })();
-    if (configProvider && !cc?.dryRun) {
-        try {
-            await promptSource.restore();
-        }
-        catch (e) {
-            logger.warn("center_prompts_catalog_restore_failed", { err: String(e), note: "disk LKG unavailable — catalog candidate absent until the next adopt; declaration axis and built-ins unaffected" });
-        }
-    }
-    const adoptCenterPrompts = async (eff, phase) => {
-        const raw = eff?.prompts;
-        if (raw === undefined) {
-            if (centerPrompts)
-                logger.info("center_prompts_cleared", { phase, note: "effective carries no prompts key (publish gate off) — built-in providers resume" });
-            const cleared = await applyCatalogToSource(promptSource, undefined, centerPrompts, logger, phase);
-            if (cleared) {
-                centerPrompts = undefined;
-                pendingCatalogFaces = undefined;
-            }
-            else {
-                pendingCatalogFaces = { target: undefined };
-            }
-            return;
-        }
-        const v = validatePromptsDomain(raw);
-        if (!v.ok) {
-            logger.warn("center_prompts_invalid", { phase, error: v.error, kept: centerPrompts?.declarations?.packId ?? (centerPrompts?.catalog ? "(catalog)" : "(builtin)"), note: "malformed prompts face rejected (core assemble would THROW per task) — keeping the previous pack/built-ins; fix the center payload" });
-            return;
-        }
-        if (centerPrompts?.identity !== v.value.identity) {
-            logger.info("center_prompts_adopted", {
-                phase,
-                axes: v.value.axes,
-                ...(v.value.declarations
-                    ? { packId: v.value.declarations.packId, contentDigest: v.value.declarations.contentDigest, sections: v.value.declarations.sections.length, scenarioOverrides: Object.keys(v.value.declarations.scenarioOverrides ?? {}).length }
-                    : {}),
-                ...(v.value.catalog ? { artifactDigest: v.value.catalog.artifact.artifactDigest, catalogDigest: v.value.catalog.artifact.payload.catalogDigest, sourceRevision: v.value.catalog.sourceRevision } : {}),
-                note: "new tasks assemble the new pack (epoch re-pins at the next task boundary); in-flight sessions stay pinned",
-            });
-        }
-        const transitioned = await applyCatalogToSource(promptSource, v.value, centerPrompts, logger, phase);
-        if (transitioned) {
-            centerPrompts = v.value;
-            pendingCatalogFaces = undefined;
-        }
-        else {
-            pendingCatalogFaces = { target: v.value };
-        }
-    };
-    let bootConfigPending;
-    const lkgEnabled = configProvider?.kind === "remote" && configLkgEnabled();
-    const lkgPath = process.env.CONFIG_LKG_PATH ?? defaultLkgPath(cc?.worker);
-    const lkgSurvivesRestart = lkgEnabled && process.env.CONFIG_LKG_DURABLE === "true";
-    let lkgBooted = false;
-    let bootLkgCandidate;
-    let lastPrewarmBodiesVerified = false;
-    const persistLkgDurable = async (effectiveObj, etag) => {
-        lastPrewarmBodiesVerified = false;
-        if (configProvider?.kind === "local")
-            return true;
-        if (!lkgEnabled)
-            return false;
-        try {
-            if (effectiveObj.skills && config.configCenter) {
-                await applyCenterSkills([], effectiveObj.skills, config.configCenter.baseUrl, config.configCenter.token, logger, undefined, defaultSkillCacheDir());
-            }
-            const enabledSkills = (effectiveObj.skills?.skills ?? []).filter((m) => m.enabled !== false);
-            const cacheDir = defaultSkillCacheDir();
-            for (const m of enabledSkills) {
-                const hex = m.contentHash.replace(/^sha256:/, "").toLowerCase();
-                if (!/^[0-9a-f]{64}$/.test(hex))
-                    return false;
-                try {
-                    const text = await fsReadFile(join(cacheDir, hex), "utf8");
-                    if (`sha256:${createHash("sha256").update(text, "utf8").digest("hex")}` !== `sha256:${hex}`) {
-                        logger.warn("config_lkg_skill_cache_incomplete", { skill: m.name, hash: m.contentHash, note: "cached body fails its hash — LKG NOT replaced, handoff NOT confirmed (the previous good LKG keeps serving offline boots)" });
-                        return false;
-                    }
-                }
-                catch {
-                    logger.warn("config_lkg_skill_cache_incomplete", { skill: m.name, hash: m.contentHash, note: "enabled skill body not in the cache — LKG NOT replaced, handoff NOT confirmed" });
-                    return false;
-                }
-            }
-            lastPrewarmBodiesVerified = true;
-            await saveLkg(lkgPath, cc?.worker, effectiveObj, etag);
-            return lkgSurvivesRestart;
-        }
-        catch (err) {
-            logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "durable persist failed — restart signal proceeds anyway (a dead disk + dead center double-fault can re-loop; fix the disk)" });
-            return false;
-        }
-    };
-    if (configProvider) {
-        const dryRun = cc?.dryRun ?? false;
-        const bootFromLkg = async (why) => {
-            if (!lkgEnabled || dryRun)
-                return null;
-            const read = await loadLkg(lkgPath, cc?.worker);
-            if (!read.lkg) {
-                if (read.reason !== "absent")
-                    logger.warn("config_lkg_unusable", { path: lkgPath, reason: read.reason, note: "ignoring the on-disk LKG — env fallback serves; the cache rewrites on the next clean candidate" });
-                return null;
-            }
-            logger.info("config_loaded_lkg", { path: lkgPath, savedAt: read.lkg.savedAt, why, note: "booting from the persisted last-known-good (all restart-to-apply faces included) — the live pull continues in the background and reconciles on arrival" });
-            return { effective: read.lkg.effective, ...(read.lkg.etag !== undefined ? { etag: read.lkg.etag } : {}) };
-        };
-        const bootApplyLkgInline = async (lkgR) => {
-            applyEffective(config, lkgR.effective, logger, { sealedKeys });
-            await adoptCenterPrompts(lkgR.effective, "boot-lkg");
-            markRosterLanded(lkgR.effective);
-            effective = lkgR.effective;
-            appliedPlaneEff = lkgR.effective;
-            latestEffective = lkgR.effective;
-            if (lkgR.etag !== undefined)
-                ccEtag = lkgR.etag;
-            const cfgModels = (lkgR.effective.models?.models ?? []).filter((m) => m.enabled !== false).length;
-            logger.info("config_loaded", { source: "lkg", version: lkgR.effective.version, worker: cc?.worker ?? "(global)", models: cfgModels });
-        };
-        try {
-            const bootFetch = configProvider.fetchEffective(undefined);
-            const raced = await raceBootFetch(bootFetch, config.configBootFetchBudgetMs);
-            let lkgFallback = null;
-            if (raced === BOOT_FETCH_DEFERRED) {
-                bootConfigPending = bootFetch;
-                bootFetch.catch(() => { });
-                lkgFallback = await bootFromLkg("boot fetch deferred (budget exceeded)");
-                lkgBooted = lkgFallback !== null;
-                logger.warn("config_boot_fetch_deferred", {
-                    source: configProvider.kind,
-                    budgetMs: config.configBootFetchBudgetMs,
-                    lkg: lkgBooted,
-                    note: lkgBooted
-                        ? "center slow — booting from the persisted LKG; the pull continues in the background and reconciles via the refresh path on arrival"
-                        : "center slow/unreachable and no usable LKG — serving on the env fallback; the pull continues in the background (late-boot adoption on arrival). Raise CONFIG_BOOT_FETCH_BUDGET_MS to block boot instead.",
-                });
-            }
-            if (raced === BOOT_FETCH_DEFERRED && lkgFallback) {
-                try {
-                    await bootApplyLkgInline(lkgFallback);
-                }
-                catch (applyErr) {
-                    lkgBooted = false;
-                    logger.warn("config_lkg_apply_failed", { err: String(applyErr), note: "persisted LKG failed to apply — env fallback serves; the cache rewrites on the next clean candidate" });
-                }
-            }
-            const r = raced === BOOT_FETCH_DEFERRED ? null : raced;
-            if (r) {
-                const bootPromptsRaw = r.effective.prompts;
-                const bootPromptsOk = bootPromptsRaw === undefined || validatePromptsDomain(bootPromptsRaw).ok;
-                const bootClean = (r.domainErrors ?? []).length === 0 && bootPromptsOk;
-                if (bootClean)
-                    ccEtag = r.etag;
-                for (const de of r.domainErrors ?? [])
-                    logger.warn("config_domain_invalid", { domain: de.domain, error: de.error, note: "tolerated at BOOT (corrupt file → schema defaults; dangling ref → reported as-is); the refresh path rejects such a candidate whole and keeps the LKG (§9.5-5)" });
-                if (dryRun) {
-                    logEffectiveDiff(config, r.effective, logger);
-                }
-                else {
-                    applyEffective(config, r.effective, logger, { sealedKeys });
-                    await adoptCenterPrompts(r.effective, "boot");
-                    markRosterLanded(r.effective);
-                    effective = r.effective;
-                    appliedPlaneEff = r.effective;
-                    if (bootClean)
-                        latestEffective = r.effective;
-                    if (bootClean && !lkgBooted)
-                        bootLkgCandidate = { effective: r.effective, etag: r.etag };
-                    const cfgModels = (r.effective.models?.models ?? []).filter((m) => m.enabled !== false).length;
-                    const cfgDir = configProvider.kind === "local" ? { dir: configProvider.root } : {};
-                    logger.info("config_loaded", { source: configProvider.kind, version: r.effective.version, worker: cc?.worker ?? "(global)", models: cfgModels, ...cfgDir });
-                    if (configProvider.kind === "local" && cfgModels === 0)
-                        logger.warn("config_local_no_models", { ...cfgDir, hint: "config.d/models.json 空或 CONFIG_LOCAL_DIR 指错目录(选目录旋钮是 CONFIG_LOCAL_DIR,不是 LOCAL_DATA_ROOT)— 模型继续走 env 兜底" });
-                }
-            }
-        }
-        catch (err) {
-            logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
-            const lkgFallback = await bootFromLkg(`boot fetch failed: ${String(err).slice(0, 120)}`);
-            if (lkgFallback) {
-                lkgBooted = true;
-                try {
-                    await bootApplyLkgInline(lkgFallback);
-                }
-                catch (applyErr) {
-                    lkgBooted = false;
-                    logger.warn("config_lkg_apply_failed", { err: String(applyErr), note: "persisted LKG failed to apply — env fallback serves" });
-                }
-            }
-        }
-    }
-    if (!modelReadyState.ready)
-        logger.warn("model_roster_pending", { note: "registry deployment without an env model and no roster yet — billable submissions 503 until the first effective pull lands models" });
-    if (configProvider?.kind === "local") {
-        try {
-            const fileRx = await loadRemoteExec(localRoot);
-            if (fileRx) {
-                if (fileRx.provider === "host") {
-                    config.remoteExec = {
-                        provider: "host",
-                        ...(fileRx.workdir ? { workspaceBase: fileRx.workdir } : {}),
-                        ...(fileRx.commandTimeoutMs != null ? { commandTimeoutMs: fileRx.commandTimeoutMs } : {}),
-                    };
-                    logger.info("remote_exec_from_file", { provider: "host", root: localRoot });
-                }
-                else if (fileRx.provider === "local-docker") {
-                    config.remoteExec = {
-                        provider: "local-docker",
-                        image: fileRx.image,
-                        ...(fileRx.mountPath ? { mountPath: fileRx.mountPath } : fileRx.workdir ? { mountPath: fileRx.workdir } : {}),
-                        ...(fileRx.memory ? { memory: fileRx.memory } : {}),
-                        ...(fileRx.cpus != null ? { cpus: fileRx.cpus } : {}),
-                        ...(fileRx.network ? { network: fileRx.network } : {}),
-                    };
-                    logger.info("remote_exec_from_file", { provider: "local-docker", root: localRoot, image: fileRx.image });
-                }
-                else {
-                    logger.warn("remote_exec_file_isolated_lane_unwired", { provider: fileRx.provider, note: "e2b/k8s/ssh/adb are sourced from REMOTE_EXEC env until file-source NAME→value resolution lands (center field map)" });
-                }
-            }
-        }
-        catch (err) {
-            logger.error("remote_exec_file_invalid", { root: localRoot, err: String(err) });
-            throw err;
-        }
-    }
-    let backend;
-    let storeBackendDegraded = false;
-    const wantDb = config.sessionBackend === "tidb" ||
-        config.dbBackend === "local" ||
-        (config.sessionBackend === "auto" && !!(config.tidb || config.pg));
-    if (wantDb) {
-        const opened = await openStoreBackendWithFallback(config, logger);
-        backend = opened.backend;
-        storeBackendDegraded = opened.degraded;
-    }
-    metrics.setGauge("store_backend_degraded", storeBackendDegraded ? 1 : 0);
-    {
-        const minioReq = ["MINIO_ENDPOINT", "MINIO_ACCESS_KEY", "MINIO_SECRET_KEY"];
-        const present = minioReq.filter((v) => (process.env[v] ?? "") !== "");
-        if (present.length > 0 && !config.snapshotBlobStore) {
-            logger.warn("snapshot_blob_store_partial_config_fallback_sql", { present, missing: minioReq.filter((v) => !present.includes(v)) });
-        }
-        metrics.setGauge("snapshot_blob_backend", 1, { backend: config.snapshotBlobStore ? "minio" : "sql" });
-    }
-    if (config.sessionBackend === "auto")
-        config.sessionBackend = backend ? "tidb" : "memory";
-    if (config.dbBackend === "local" && backend)
-        config.sessionBackend = "tidb";
-    let memoryEngine;
-    let memorySyncCursors;
-    if (config.memoryEngineBackend !== "file" && config.memoryEngineEnabled) {
-        const dialect = config.memoryEngineBackend;
-        const countedHistorySink = (store) => ({
-            appendHistory: async (rows) => {
-                try {
-                    await store.appendHistory(rows);
-                }
-                catch (err) {
-                    metrics.inc("memory_history_append_failed_total", { backend: dialect }, rows.length);
-                    throw err;
-                }
-            },
-        });
-        if (dialect === "pg") {
-            const pool = backend?.pgPool();
-            if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=pg requires DB_BACKEND=pg (the memory engine binds the same PG pool) — refusing to start half-configured");
-            const q = async (text, params) => { const r = await pool.query(text, params); return { rows: r.rows }; };
-            await ensurePgMemoryEngineSchema(q);
-            await ensurePgMemoryHistorySchema(q);
-            await ensurePgMemorySyncSchema(q);
-            memorySyncCursors = new PgMemorySyncStore(q);
-            const pgMem = new PgMemoryEngineBackend(q, { history: countedHistorySink(new PgMemoryHistoryStore(q)) });
-            memoryEngine = { backend: pgMem, root: join(config.localDataRoot ?? localRoot, "memory-work") };
-        }
-        else {
-            const pool = backend?.mysqlPool();
-            if (!pool)
-                throw new Error("MEMORY_ENGINE_BACKEND=tidb requires DB_BACKEND=mysql/tidb — refusing to start half-configured");
-            await ensureTiDBMemoryEngineSchema(pool);
-            await ensureTiDBMemoryHistorySchema(pool);
-            await ensureTiDBMemorySyncSchema(pool);
-            memorySyncCursors = new TiDBMemorySyncStore(pool);
-            memoryEngine = { backend: new TiDBMemoryEngineBackend(pool, { history: countedHistorySink(new TiDBMemoryHistoryStore(pool)) }), root: join(config.localDataRoot ?? localRoot, "memory-work") };
-        }
-        logger.info("memory_engine_enabled", { enabled: true, backend: dialect, multiTenant: config.requirePrincipal === true, workRoot: memoryEngine.root });
-    }
-    else {
-        memoryEngine = memoryEngineBackendFor(config);
-        if (memoryEngine && process.env.LOCAL_DATA_ROOT && !config.memoryEngineDir) {
-            logger.warn("memory_engine_dir_defaulted", {
-                root: memoryEngine.root,
-                hint: "LOCAL_DATA_ROOT is set but MEMORY_ENGINE_DIR is not — the memory engine is sharing the machine-wide default; set MEMORY_ENGINE_DIR to isolate it under your data root",
-            });
-        }
-    }
-    let rosterStore;
-    {
-        const mysqlPool = backend?.mysqlPool?.();
-        const pgPool = backend?.pgPool?.();
-        if (pgPool) {
-            const q = async (text, params) => { const r = await pgPool.query(text, params); return { rows: r.rows }; };
-            await ensurePgRosterSchema(q);
-            rosterStore = new PgRosterStore(q);
-        }
-        else if (mysqlPool) {
-            await ensureTiDBRosterSchema(mysqlPool);
-            rosterStore = new TiDBRosterStore(mysqlPool);
-        }
-        else if (backend?.kind === "local") {
-            rosterStore = new FileRosterStore(join(config.localDataRoot ?? localRoot, "roster.json"));
-        }
-        if (rosterStore)
-            logger.info("roster_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });
-    }
-    let backgroundAgentStore;
-    {
-        const mysqlPool = backend?.mysqlPool?.();
-        const pgPool = backend?.pgPool?.();
-        if (pgPool) {
-            const q = async (text, params) => { const r = await pgPool.query(text, params); return { rows: r.rows }; };
-            await ensurePgBackgroundAgentSchema(q);
-            backgroundAgentStore = new PgBackgroundAgentStore(q);
-        }
-        else if (mysqlPool) {
-            await ensureTiDBBackgroundAgentSchema(mysqlPool);
-            backgroundAgentStore = new TiDBBackgroundAgentStore(mysqlPool);
-        }
-        else if (backend?.kind === "local") {
-            backgroundAgentStore = new FileBackgroundAgentStore(config.localDataRoot ?? localRoot);
-        }
-        if (backgroundAgentStore)
-            logger.info("background_agent_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });
-    }
-    let taskAttachmentStore;
-    {
-        const mysqlPool = backend?.mysqlPool?.();
-        const pgPool = backend?.pgPool?.();
-        if (pgPool || mysqlPool) {
-            const minio = config.snapshotBlobStore;
-            if (!minio) {
-                logger.error("attachments_disabled_object_store_required", {
-                    hint: "cloud deployments must configure object storage (MINIO_ENDPOINT/MINIO_ACCESS_KEY/MINIO_SECRET_KEY) — attachment routes will 501 until it is set",
-                });
-            }
-            else {
-                const bytes = new MinioBlobBackend({ ...minio, keyPrefix: `${minio.keyPrefix ?? ""}attachments/` });
-                if (pgPool) {
-                    const q = async (text, params) => { const r = await pgPool.query(text, params); return { rows: r.rows }; };
-                    await ensurePgTaskAttachmentSchema(q);
-                    taskAttachmentStore = new PgTaskAttachmentStore(q, bytes);
-                }
-                else {
-                    await ensureTiDBTaskAttachmentSchema(mysqlPool);
-                    taskAttachmentStore = new TiDBTaskAttachmentStore(mysqlPool, bytes);
-                }
-            }
-        }
-        else if (backend?.kind === "local") {
-            taskAttachmentStore = new LocalTaskAttachmentStore(config.localDataRoot ?? localRoot);
-        }
-        if (taskAttachmentStore)
-            logger.info("task_attachment_store_enabled", { backend: pgPool ? "pg+minio" : mysqlPool ? "tidb+minio" : "file", maxBytes: config.attachmentMaxBytes });
-    }
-    let mailboxStore;
-    {
-        const mysqlPool = backend?.mysqlPool?.();
-        const pgPool = backend?.pgPool?.();
-        if (pgPool) {
-            await ensurePgMailboxSchema(async (text, params) => pgPool.query(text, params));
-            mailboxStore = new PgMailboxStore(pgPool);
-        }
-        else if (mysqlPool) {
-            await ensureTiDBMailboxSchema(mysqlPool);
-            mailboxStore = new TiDBMailboxStore(mysqlPool);
-        }
-        else if (backend?.kind === "local") {
-            mailboxStore = new FileMailboxStore(config.localDataRoot ?? localRoot);
-        }
-        if (mailboxStore)
-            logger.info("mailbox_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : "file" });
-    }
-    const memoryExportBackend = config.memoryEngineBackend !== "file" ? memoryEngine?.backend : undefined;
-    const memoryLane = memoryEngineRemoteLanePosture(config);
-    if (config.memoryEngineBackend === "file" || !config.memoryEngineEnabled) {
-        logger.info("memory_engine_enabled", memoryEngine
-            ? { enabled: true, backend: "file", dir: memoryEngine.root }
-            : {
-                enabled: false,
-                reason: config.requirePrincipal === true ? "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|tidb to light up)"
-                    : !config.memoryEngineEnabled ? "MEMORY_ENGINE=off"
-                        : `remote exec lane "${memoryLane?.lane}" (worker/sandbox file planes split; MEMORY_ENGINE_REMOTE_LANE=allow overrides)`,
-            });
-    }
-    if (memoryLane && config.memoryEngineEnabled && config.requirePrincipal !== true) {
-        logger.warn("memory_engine_remote_lane", memoryLane.posture === "dark"
-            ? { lane: memoryLane.lane, effect: "memory dark (fail-closed): the file engine works the worker's local fs while this lane routes model file tools to the sandbox fs — sandbox writes are never harvested. Set MEMORY_ENGINE_REMOTE_LANE=allow ONLY if both are one fs." }
-            : { lane: memoryLane.lane, effect: "MEMORY_ENGINE_REMOTE_LANE=allow: memory engine ON over a remote lane — harvest only sees files landing on the WORKER fs; verify the lane really shares it." });
-    }
-    let memorySyncRunner;
-    if (config.memorySync) {
-        if (memoryEngine) {
-            memorySyncRunner = createMemorySyncRunner({
-                backend: memoryEngine.backend,
-                scope: config.memorySync.scope,
-                memoryRoot: memoryEngine.root,
-                transport: createMemorySyncTransport({ url: config.memorySync.url, token: config.memorySync.token }),
-                log: logger,
-                ...(config.memorySync.maxPushEntries !== undefined ? { maxPushEntries: config.memorySync.maxPushEntries } : {}),
-                ...(config.memorySync.maxPullEntries !== undefined ? { maxPullEntries: config.memorySync.maxPullEntries } : {}),
-            });
-            logger.info("memory_sync_enabled", { url: config.memorySync.url, scope: config.memorySync.scope, cursorPath: memorySyncRunner.cursorPath });
-            memorySyncRunner.trigger("boot");
-        }
-        else {
-            logger.warn("memory_sync_configured_but_memory_dark", { note: "MEMORY_SYNC_URL is set but the file memory engine is dark (multi-tenant / MEMORY_ENGINE=off / remote exec lane) — no sync rounds will run" });
-        }
-    }
-    const sessionStore = createSessionStore(config, backend, metrics);
-    if (config.requirePrincipal && !sessionStore.ownerOf) {
-        throw new Error("REQUIRE_PRINCIPAL=true needs an owner-aware session store (SESSION_BACKEND=tidb); " +
-            "the in-memory store cannot enforce session ownership.");
-    }
-    if (config.requirePrincipal && backend?.kind === "local") {
-        throw new Error("REQUIRE_PRINCIPAL=true is not supported on the local file backend (DB_BACKEND=local): session/run CONTENT is " +
-            "durable there, but OWNER attribution is process-local and lost on restart (store-backend.ts §0.5 — durable " +
-            "owners = P1), so it cannot durably enforce multi-tenant session ownership. Use a SQL backend " +
-            "(DB_BACKEND=mysql|pg) for multi-tenant, or run local single-user with REQUIRE_PRINCIPAL=false (a BFF may " +
-            "still inject x-agent-principal per request for memory scoping and audit attribution).");
-    }
-    if (backend)
-        assertCloudSnapshotBlobPosture(backend.kind, config);
-    if (!config.requirePrincipal && sessionStore.ownerOf) {
-        logger.warn("principal_optional", {
-            note: "owner-aware session store with REQUIRE_PRINCIPAL=false — owned sessions are protected, but headerless callers can create/share anonymous sessions; set REQUIRE_PRINCIPAL=true for multi-tenant",
-        });
-    }
-    metrics.dynamicGauge("sessions_warm", "Sessions held in the warm cache", () => sessionStore.size);
-    const breakerState = backend?.breaker && config.resilience.circuitBreaker
-        ? backend
-            .breaker((streak) => {
-            metrics.setGauge("counter_flush_fail_streak", streak, { table: "circuit_breaker", kind: "write_through" });
-            if (streak > 0)
-                metrics.inc("breaker_writethrough_failed_total", { backend: backend.kind });
-            if (streak === 3)
-                logger.warn("breaker_writethrough_degraded", { streak });
-            else if (streak === 0)
-                logger.info("breaker_writethrough_recovered", {});
-        })
-            .startRefresh()
-        : undefined;
-    const brain = createBrain(config, { breakerState });
-    const pricing = buildPricing(config.models);
-    const counterDegradeHook = (info) => {
-        metrics.setGauge("counter_flush_fail_streak", info.streak, { table: info.table, kind: info.kind });
-        if (info.streak > 0)
-            metrics.inc("counter_flush_failed_total", { table: info.table, kind: info.kind });
-        if (info.streak === 3)
-            logger.warn("counter_flush_degraded", { table: info.table, kind: info.kind, streak: info.streak, ...(info.error ? { error: info.error } : {}) });
-        else if (info.streak === 0 && info.prevStreak >= 3)
-            logger.info("counter_flush_recovered", { table: info.table, kind: info.kind, prevStreak: info.prevStreak });
-    };
-    const costQuota = config.maxPrincipalCostUsd > 0
-        ? backend?.costQuota
-            ? backend.costQuota(Math.round(config.maxPrincipalCostUsd * 1e6), config.costQuotaWindowSec * 1000, counterDegradeHook).startRefresh()
-            : new CostQuota(Math.round(config.maxPrincipalCostUsd * 1e6), config.costQuotaWindowSec * 1000)
-        : undefined;
-    const modelUsageTracker = new ModelUsageTracker();
-    const promptManifestTracker = new PromptManifestTracker();
-    const fleetUsage = config.configCenter && process.env.FLEET_ADVERTISE_ADDRESS ? new FleetUsageAccumulator() : undefined;
-    const fleetLease = createFleetLeaseFromEnv(config, { logger, metrics });
-    const tracer = createTracer(metrics, costQuota, modelUsageTracker, fleetUsage, fleetLease, (m) => config.modelQuotaWeights[m] ?? 1, promptManifestTracker);
-    const sideQueryAccounting = createSideQueryAccountant(metrics, costQuota, fleetUsage, fleetLease, (m) => config.modelQuotaWeights[m] ?? 1);
-    const toolResultStore = backend?.toolResult ? backend.toolResult() : undefined;
-    const sessionPolicyStore = backend ? backend.sessionPolicy() : undefined;
-    const fileSnapshotStore = backend ? backend.fileSnapshot() : undefined;
-    if (fileSnapshotStore && "onSkippedVanished" in fileSnapshotStore) {
-        fileSnapshotStore.onSkippedVanished = (count) => metrics.inc("snapshot_skipped_vanished_total", {}, count);
-    }
-    const perTaskImage = new PerTaskImageRegistry();
-    const sessionEnvSelection = new SessionEnvironmentSelection();
-    const MAX_CWD_SESSIONS = 4096;
-    const perSessionCwd = new Map();
-    const setSessionCwd = (sid, cwd) => {
-        perSessionCwd.delete(sid);
-        perSessionCwd.set(sid, cwd);
-        if (perSessionCwd.size > MAX_CWD_SESSIONS)
-            perSessionCwd.delete(perSessionCwd.keys().next().value);
-    };
-    const perSessionShellEnv = new Map();
-    const setSessionShellEnv = (sid, env) => {
-        perSessionShellEnv.delete(sid);
-        perSessionShellEnv.set(sid, env);
-        if (perSessionShellEnv.size > MAX_CWD_SESSIONS)
-            perSessionShellEnv.delete(perSessionShellEnv.keys().next().value);
-    };
-    let executionEnvFactory;
-    let worktreeReap;
-    if (config.remoteExec?.provider === "e2b") {
-        executionEnvFactory = e2bExecutionEnvFactory({
-            apiKey: config.remoteExec.apiKey,
-            ...(config.remoteExec.template ? { template: config.remoteExec.template } : {}),
-            ...(config.remoteExec.timeoutMs != null ? { timeoutMs: config.remoteExec.timeoutMs } : {}),
-            ...(config.remoteExec.livenessMs != null ? { livenessMs: config.remoteExec.livenessMs } : {}),
-            ...(config.remoteExec.allowInternetAccess != null ? { allowInternetAccess: config.remoteExec.allowInternetAccess } : {}),
-            ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-            ...(() => {
-                const merged = { ...derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv()), ...(config.remoteExec.sandboxEnv ?? {}) };
-                return Object.keys(merged).length > 0 ? { sandboxEnv: merged } : {};
-            })(),
-            logger,
-            metrics,
-        });
-    }
-    else if (config.remoteExec?.provider === "k8s") {
-        const k8sCfg = {
-            image: config.remoteExec.image,
-            ...(config.remoteExec.apiUrl ? { apiUrl: config.remoteExec.apiUrl } : {}),
-            ...(config.remoteExec.token ? { token: config.remoteExec.token } : {}),
-            ...(config.remoteExec.caCert ? { caCert: config.remoteExec.caCert } : {}),
-            ...(config.remoteExec.insecureTls ? { insecureTls: true } : {}),
-            ...(config.remoteExec.namespace ? { namespace: config.remoteExec.namespace } : {}),
-            ...(config.remoteExec.runtimeClass != null ? { runtimeClass: config.remoteExec.runtimeClass } : {}),
-            ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-            ...(config.remoteExec.timeoutMs != null ? { timeoutMs: config.remoteExec.timeoutMs } : {}),
-            ...(config.remoteExec.memory ? { memory: config.remoteExec.memory } : {}),
-            ...(config.remoteExec.cpu ? { cpu: config.remoteExec.cpu } : {}),
-            ...(config.remoteExec.s3Snapshot ? { s3Snapshot: config.remoteExec.s3Snapshot } : {}),
-            ...(() => {
-                const derived = derivePkgSourceEnv(config.sandboxPkgSource, customPkgSourceFromEnv());
-                return Object.keys(derived).length > 0 ? { podEnv: derived } : {};
-            })(),
-        };
-        executionEnvFactory = (ctx) => k8sExecutionEnvFactory({ ...k8sCfg, image: perTaskImage.get(ctx.sessionId) ?? k8sCfg.image })(ctx);
-    }
-    else if (config.remoteExec?.provider === "ssh") {
-        executionEnvFactory = sshExecutionEnvFactory({
-            host: config.remoteExec.host,
-            username: config.remoteExec.username,
-            privateKey: config.remoteExec.privateKey,
-            ...(config.remoteExec.port != null ? { port: config.remoteExec.port } : {}),
-            ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-        });
-    }
-    else if (config.remoteExec?.provider === "adb") {
-        executionEnvFactory = adbExecutionEnvFactory({
-            serial: config.remoteExec.serial,
-            ...(config.remoteExec.adbPath ? { adbPath: config.remoteExec.adbPath } : {}),
-            ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-        });
-    }
-    else if (config.remoteExec?.provider === "host") {
-        {
-            const hostScheduler = config.schedulerEnabled && config.requirePrincipal !== true
-                ? new FileSchedulerBackend({
-                    ...(config.schedulerStorePath ? { storePath: config.schedulerStorePath } : {}),
-                    ...(config.schedulerSessionWakeup === false ? { caps: { supportsSessionWakeup: false } } : {}),
-                })
-                : undefined;
-            if (hostScheduler)
-                logger.info(`R7: self-wake scheduler enabled (host lane), store=${config.schedulerStorePath ?? defaultSchedulerStorePath()}`);
-            const hostCfg = {
-                ...(config.remoteExec.workspaceBase ? { workspaceBase: config.remoteExec.workspaceBase } : {}),
-                ...(config.remoteExec.commandTimeoutMs != null ? { commandTimeoutMs: config.remoteExec.commandTimeoutMs } : {}),
-                ...(hostScheduler ? { scheduler: hostScheduler } : {}),
-                backgroundShell: config.requirePrincipal !== true,
-            };
-            executionEnvFactory = (ctx) => {
-                const cwd = effectiveHostWorkspace(perSessionCwd.get(ctx.sessionId), ctx);
-                const shellEnv = perSessionShellEnv.get(ctx.sessionId);
-                const env = hostExecutionEnvFactory({
-                    ...hostCfg,
-                    ...(cwd ? { workspaceDir: cwd } : {}),
-                    ...(shellEnv ? { env: shellEnv } : {}),
-                })(ctx);
-                return lspManager && !cwd ? evictLspOnDestroy(env, lspManager) : env;
-            };
-        }
-    }
-    else if (config.remoteExec?.provider === "local-docker") {
-        executionEnvFactory = localDockerExecutionEnvFactory({
-            image: config.remoteExec.image,
-            ...(config.remoteExec.mountPath ? { mountPath: config.remoteExec.mountPath } : {}),
-            ...(config.remoteExec.dockerPath ? { dockerPath: config.remoteExec.dockerPath } : {}),
-            ...(config.remoteExec.dockerHost ? { dockerHost: config.remoteExec.dockerHost } : {}),
-            ...(config.remoteExec.memory ? { memory: config.remoteExec.memory } : {}),
-            ...(config.remoteExec.cpus != null ? { cpus: config.remoteExec.cpus } : {}),
-            ...(config.remoteExec.network ? { network: config.remoteExec.network } : {}),
-            ...(config.remoteExec.commandTimeoutMs != null ? { commandTimeoutMs: config.remoteExec.commandTimeoutMs } : {}),
-            ...(config.remoteExec.env ? { env: config.remoteExec.env } : {}),
-        });
-    }
-    if (executionEnvFactory && isRemoteScratchpadLane(config.remoteExec?.provider)) {
-        executionEnvFactory = withRemoteScratchpad(executionEnvFactory, logger);
-    }
-    if (config.worktreeIsolation && executionEnvFactory) {
-        const wtRoot = config.worktreeIsolation.repoRoot;
-        const wtValid = existsSync(wtRoot) && existsSync(join(wtRoot, ".git"));
-        if (config.remoteExec?.provider === "host" && !wtValid) {
-            logger.error("worktree_isolation_disabled_bad_repo_root", {
-                repoRoot: wtRoot,
-                reason: existsSync(wtRoot) ? "not a git repository (no .git)" : "path does not exist",
-                note: "WORKTREE_ISOLATION_ENABLED is set but WORKTREE_REPO_ROOT is not a usable git repo — isolation left OFF; isolation:'worktree' agents run on the shared base env. Fix the path or unset the flag.",
-            });
-        }
-        else if (config.remoteExec?.provider === "host") {
-            const gitBaseEnv = new RemoteHostExecutionEnv({ workspaceDir: config.worktreeIsolation.repoRoot, inheritEnv: "all", backgroundShell: config.requirePrincipal !== true });
-            executionEnvFactory = withWorktreeIsolation(executionEnvFactory, {
-                repoRoot: config.worktreeIsolation.repoRoot,
-                ...(config.worktreeIsolation.allowedRoots ? { allowedRoots: config.worktreeIsolation.allowedRoots } : {}),
-                ...(config.worktreeIsolation.commit ? { commit: config.worktreeIsolation.commit } : {}),
-                baseEnvForGit: gitBaseEnv,
-                rootEnvAt: (dir) => {
-                    const env = new RemoteHostExecutionEnv({ workspaceDir: dir, backgroundShell: config.requirePrincipal !== true });
-                    return lspManager ? evictLspOnDestroy(env, lspManager) : env;
-                },
-                logger,
-            });
-            worktreeReap = () => reapOrphanWorktrees(gitBaseEnv, config.worktreeIsolation.repoRoot, logger);
-            logger.info("worktree_isolation_enabled", { provider: "host", repoRoot: config.worktreeIsolation.repoRoot });
-            void worktreeReap();
-        }
-        else {
-            logger.warn("worktree_isolation_unsupported_lane", {
-                provider: config.remoteExec?.provider,
-                note: "git-worktree isolation v1 covers only the 'host' lane — isolation:'worktree' is a no-op here (the base env is used). Worktree-rooted remote envs are a follow-on.",
-            });
-        }
-    }
-    const sendUserFileTaskEnvs = (() => {
-        const provider = config.remoteExec?.provider;
-        if (!config.sendUserFile || !executionEnvFactory || !sandboxSendLaneEnabled(provider, config.requirePrincipal))
-            return undefined;
-        const registry = new TaskEnvRegistry();
-        executionEnvFactory = registry.wrapFactory(executionEnvFactory);
-        return registry;
-    })();
-    if (taskAttachmentStore && executionEnvFactory) {
-        const inner = executionEnvFactory;
-        const attStore = taskAttachmentStore;
-        executionEnvFactory = async (ctx) => {
-            const env = await inner(ctx);
-            const n = await materializeAttachmentsInto(env, attStore, ctx.sessionId);
-            if (n > 0)
-                logger.info("attachments_materialized", { sessionId: ctx.sessionId, count: n });
-            return env;
-        };
-    }
-    if (executionEnvFactory) {
-        const isolated = config.remoteExec.provider === "e2b" ||
-            config.remoteExec.provider === "k8s" ||
-            config.remoteExec.provider === "local-docker";
-        const suspendable = config.remoteExec.provider === "e2b" ||
-            (config.remoteExec.provider === "k8s" && !!config.remoteExec.s3Snapshot);
-        const sandboxEnvKeys = config.remoteExec.provider === "e2b" ? Object.keys(config.remoteExec.sandboxEnv ?? {}) : [];
-        logger.info("remote_exec_enabled", { provider: config.remoteExec.provider, isolated, suspendable, ...(sandboxEnvKeys.length > 0 ? { sandboxEnvKeys } : {}) });
-        if (!isolated)
-            logger.warn("remote_exec_real_system", { provider: config.remoteExec.provider, note: "non-isolated target — actions are permanent; rely on the policy gate + HITL (design/61 §5)" });
-    }
-    const lspProvider = config.remoteExec?.provider;
-    const lspManager = (lspProvider === "e2b" || lspProvider === "k8s") && config.lspEnabled
-        ? createE2bLspManager({ log: (event, fields) => logger.info(event, fields), scheme: lspProvider === "k8s" ? "ws" : "wss" })
-        :
-            lspProvider === "host" && config.lspHostEnabled && config.requirePrincipal !== true
-                ? new NodeLspManager({ log: (event, fields) => logger.info(event, fields) })
-                : undefined;
-    if (lspManager)
-        logger.info("lsp_enabled", { provider: lspProvider });
+    // design/158 A10 尾刀:config-center 的 boot 半场(sealed-key 托管 → provider → prompt-epoch 店 →
+    // effective 拉取 / LKG 兜底 / tolerant apply)搬到 src/boot/config-center.ts。该段与 refresh 循环共享的
+    // 12 个跨段可变 `let` 现在是那只工厂的闭包私有字段(每一处读写的文本与次序逐字保留,见该文件头注);
+    // main 只经窄口读:getKeyResolver/getCenterPrompts/modelReady/restartState/planeDeferredState/promptSource。
+    // ⚠️ 位置即契约:必须在 openStores 之前 —— models/roles/teams 要在 Runner/持久层建起来之前应用进 config。
+    const configCenter = await createConfigCenterRuntime({ config, logger, metrics, localRoot });
+    // design/158 A10 尾刀:local 形的 config.d/remote-exec.json 覆写搬到 boot/config-center.ts(逐字)。
+    // ⚠️ 位置即契约:就地改写 config.remoteExec,必须早于 createExecutionEnv 这个消费点。
+    await configCenter.applyLocalRemoteExec();
+    // design/158 A10:持久层装配搬到 src/boot/stores.ts(逐字)。⚠️ 该段就地归一 `config.sessionBackend`
+    // 且承载三条 fail-loud 拒启断言 —— 位置即契约,理由见该文件头注。
+    const { backend, storeBackendDegraded, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState, } = await openStores({ config, logger, metrics, localRoot });
+    // design/158 A10:计费/追踪/预算装配搬到 src/boot/budget-tracing.ts(逐字;tracer 与 side-query 同 sink 实例的
+    // 「同段构造」契约见该文件头注)。
+    const { brain, pricing, counterDegradeHook, costQuota, modelUsageTracker, promptManifestTracker, fleetUsage, fleetLease, tracer, sideQueryAccounting, toolResultStore, sessionPolicyStore, fileSnapshotStore, } = createBudgetAndTracing({ config, logger, metrics, backend, breakerState });
+    // design/158 A10:执行环境装配搬到 src/boot/execution-env.ts(逐字)。
+    // ⚠️ 工厂装饰顺序=行为(scratchpad → worktree → SendUserFile 登记 → 附件物化最外层),见该文件头注。
+    const { perTaskImage, sessionEnvSelection, perSessionCwd, setSessionCwd, setSessionShellEnv, executionEnvFactory, worktreeReap, sendUserFileTaskEnvs, lspManager, } = createExecutionEnv({ config, logger, metrics, taskAttachmentStore });
+    // prove-before-scale stopgap: a no-op tool tracer (logs every tool call incl. resumed legs that
+    // /events hides) so we can diagnose single-agent coding behaviour. Off unless TOOL_TRACE=true.
     const toolTracer = config.toolTrace ? createToolTracer(logger) : undefined;
     if (toolTracer)
         logger.info("tool_trace_enabled", {});
+    // Goal B4 (2026-07-08): the ALWAYS-ON gate-deny meter (`permission_denied_total{source}`) — an
+    // operational/security signal that must not sit behind the TOOL_TRACE diagnostic switch. Composed
+    // UNDER the tracer (deployment slot order: meter first, tracer second — composeHooks double-runs the
+    // void permissionDenied slot); this composite is what every hooks site below uses as the deployment
+    // baseline, so a task-hooks fold (resolveSpec) shadows neither.
     const deploymentHooks = toolTracer ? composeHooks(createPermissionDeniedMeter(metrics), toolTracer) : createPermissionDeniedMeter(metrics);
-    const sqlWorkflowRunStore = config.workflowRunStoreBackend === "auto" ? backend?.workflowRun?.() : undefined;
-    const baseWorkflowRunStore = config.selfOrchestrationEnabled
-        ? config.workflowRunStoreBackend === "memory"
-            ? new InMemoryWorkflowRunStore()
-            : (sqlWorkflowRunStore ?? new FileWorkflowRunStore(join(config.localDataRoot ?? localRoot, "workflows")))
-        : undefined;
-    const workflowNotifyJournal = config.selfOrchestrationEnabled && config.workflowRunStoreBackend !== "memory"
-        ? (sqlWorkflowRunStore ? backend.notifyJournal() : new FileWorkflowNotifyJournalStore(join(config.localDataRoot ?? localRoot, "workflows")))
-        : undefined;
-    const workflowCompletionInbox = config.selfOrchestrationEnabled
-        ? config.workflowRunStoreBackend === "memory"
-            ? new InMemoryWorkflowCompletionInbox((msg, meta) => logger.warn(msg, meta))
-            : (sqlWorkflowRunStore ? backend.completionInbox((msg, meta) => logger.warn(msg, meta)) : new FileWorkflowCompletionInbox(join(config.localDataRoot ?? localRoot, "workflows"), (msg, meta) => logger.warn(msg, meta)))
-        : undefined;
-    const deliverWorkflowCompletion = async (p) => {
-        logger.info("workflow_completed", {
-            runId: p.runId,
-            status: p.status,
-            ...(p.sourceTaskId ? { sourceTaskId: p.sourceTaskId } : {}),
-        });
-        metrics.inc("workflow_runs_total", { status: p.status });
-        if (!workflowCompletionInbox)
-            return;
-        try {
-            const route = await resolveCompletionRoute(p, runStore ? (id) => runStore.getRun(id) : undefined, config.requirePrincipal === true);
-            if (!route)
-                return;
-            await workflowCompletionInbox.enqueue({
-                sessionId: route.sessionId,
-                owner: route.owner,
-                runId: p.runId,
-                status: p.status,
-                summary: p.summary,
-                enqueuedAt: Date.now(),
-            });
-        }
-        catch (err) {
-            logger.warn("workflow_completion_enqueue_failed", { runId: p.runId, err: String(err) });
-        }
-    };
-    const workflowNotifyGate = baseWorkflowRunStore && workflowNotifyJournal
-        ? new WorkflowNotifyGate(workflowNotifyJournal, baseWorkflowRunStore, deliverWorkflowCompletion, {
-            onError: (stage, runId, err) => logger.warn("workflow_notify_failed", { stage, runId, err: String(err) }),
-        })
-        : undefined;
-    const fleetBus = new FleetEventBus();
-    const workflowRunStore = baseWorkflowRunStore
-        ? new JournalingWorkflowRunStore(baseWorkflowRunStore, workflowNotifyGate, fleetBus)
-        : undefined;
-    const workflowJournalStore = config.selfOrchestrationEnabled && backend ? backend.workflowJournal() : undefined;
-    const outcomeSink = backend?.outcomeSink();
-    const workflowAgentRegistry = config.selfOrchestrationEnabled ? new WorkflowAgentRegistry() : undefined;
-    const subagentSteerRegistry = new SubagentSteerRegistry();
-    const elicitation = config.mcpElicitation.enabled ? new ElicitationCoordinator(config.mcpElicitation.throttle) : undefined;
-    const question = config.askQuestionEnabled ? new QuestionCoordinator() : undefined;
-    const toolApproval = config.toolApprovalEnabled ? new ToolApprovalCoordinator() : undefined;
-    const durableEnabled = backend?.checkpoint !== undefined && config.durableApproval === true;
-    const sendUserFileEmitter = (() => {
-        if (!config.sendUserFile)
-            return undefined;
-        if (sendUserFileTaskEnvs)
-            return new SendUserFileEmitter();
-        const provider = config.remoteExec?.provider ?? "host";
-        if (provider === "host" && config.requirePrincipal !== true)
-            return new SendUserFileEmitter();
-        return undefined;
-    })();
-    const sendFileLedger = config.sendUserFile && backend ? backend.sendFileLedger() : undefined;
-    const sendUserFileToolSpec = (() => {
-        if (!sendUserFileEmitter || !config.sendUserFile)
-            return undefined;
-        const issuer = createSendUserFileIssuer(config.sendUserFile);
-        const rawSend = sendUserFileTaskEnvs
-            ? createSandboxFileSend({
-                registry: sendUserFileTaskEnvs,
-                prepare: (filename, scope) => issuer.prepareDirectUpload(filename, undefined, scope),
-                maxBytes: SEND_USER_FILE_MAX_BYTES,
-            })
-            : async (p, sendCtx) => {
-                const resolved = resolve(p);
-                const st = await fsStat(resolved).catch(() => undefined);
-                if (!st || !st.isFile())
-                    throw new Error(`file not found (or not a regular file): ${p} — ls first; absolute paths are safest`);
-                if (st.size > SEND_USER_FILE_MAX_BYTES)
-                    throw new Error(`file exceeds the ${Math.floor(SEND_USER_FILE_MAX_BYTES / (1024 * 1024))} MiB per-file cap (${st.size} bytes)`);
-                const bytes = await fsReadFile(resolved);
-                if (bytes.byteLength > SEND_USER_FILE_MAX_BYTES)
-                    throw new Error(`file exceeds the ${Math.floor(SEND_USER_FILE_MAX_BYTES / (1024 * 1024))} MiB per-file cap (${bytes.byteLength} bytes)`);
-                return issuer.issue(bytes, basename(resolved), undefined, sendCtx.principal);
-            };
-        const send = sendFileLedger
-            ? withLedgerRecording(rawSend, {
-                ledger: sendFileLedger,
-                deleteObject: (bucket, key) => issuer.deleteObject(bucket, key),
-                warn: (msg, meta) => logger.warn(msg, meta),
-            })
-            : rawSend;
-        return sendUserFileTool({ send, emitter: sendUserFileEmitter });
-    })();
-    if (config.configCenter && !config.configCenter.dryRun && scopedTokenNeedsWorker(config.configCenter.token, config.configCenter.worker)) {
-        logger.warn("runtime_caps_scoped_token_no_worker", {
-            reason: "SEMA_REGISTRY_TOKEN is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.",
-        });
-    }
-    const principalCaps = config.configCenter && !config.configCenter.dryRun
-        ? createPrincipalEntitlementsClient({
-            baseUrl: config.configCenter.baseUrl,
-            token: config.configCenter.token,
-            ...(config.configCenter.worker ? { worker: config.configCenter.worker } : {}),
-            onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }),
-        })
-        : undefined;
-    const centerRuntimeCapsResolver = principalCaps?.resolveRuntimeCaps;
-    const runtimeCapsResolver = applyObserverEnvOptIn(centerRuntimeCapsResolver, {
-        experimentalObserverAgents: config.experimentalObserverAgents,
-        requirePrincipal: config.requirePrincipal,
-        warn: (msg, fields) => logger.warn(msg, fields),
+    // design/158 A10:workflow 编排面搬到 src/boot/workflow-orchestration.ts(逐字;构造次序契约见该文件头注)。
+    const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowAgentRegistry, subagentSteerRegistry, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
+    // design/158 A10:活体协调器 + SendUserFile 工具面搬到 src/boot/coordinators.ts(逐字;durableEnabled 的
+    // 「必须早于 runnerDeps 求值」次序契约见该文件头注)。
+    const { elicitation, question, toolApproval, durableEnabled, sendUserFileEmitter, sendFileLedger, sendUserFileToolSpec } = createLiveCoordinators({ config, logger, backend, sendUserFileTaskEnvs });
+    // design/158 A10:per-principal caps 段搬到 src/boot/runtime-caps.ts(逐字)。
+    const { principalCaps, centerRuntimeCapsResolver, runtimeCapsResolver } = createRuntimeCaps({ config, logger });
+    // design/158 A10:RunnerDeps 装配段搬到 src/boot/runner-deps.ts(逐字;runStore 晚绑改取值,见该文件头注)。
+    const runnerDeps = createRunnerDeps({
+        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, brain,
+        pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
+        memorySyncRunner, toolResultStore, sessionPolicyStore, runtimeCapsResolver, fileSnapshotStore,
+        executionEnvFactory, lspManager, fleetBus, deploymentHooks, workflowRunStore, workflowJournalStore,
+        workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion,
+        getRunStore: () => runStore,
     });
-    const workflowModelAllowlist = workflowModelAllowlistFor(config);
-    const selfOrchestrationDeps = config.selfOrchestrationEnabled
-        ? {
-            workflowScriptRunner: config.selfOrchestrationWorkerIsolation
-                ? createWorkerHardenedVmRunner()
-                : createHardenedVmRunner(),
-            workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
-            workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,
-            workflowScriptStore: (() => {
-                const fileStore = createFileWorkflowScriptStore(join(config.localDataRoot ?? localRoot, "workflow-scripts"));
-                return {
-                    scopePartitioned: true,
-                    persist: fileStore.persist.bind(fileStore),
-                    load: fileStore.load.bind(fileStore),
-                    resolveName: (name) => resolveCollabWorkflow(name) ?? fileStore.resolveName?.(name),
-                    list: () => listCollabWorkflows(),
-                };
-            })(),
-            onWorkflowAgentSpawn: workflowAgentRegistry
-                ? (handle) => {
-                    const unregister = workflowAgentRegistry.register(handle);
-                    void Promise.resolve(handle.result()).then(unregister, unregister);
-                }
-                : undefined,
-            workflowLimits: config.workflowSizeGuideline ? { sizeGuideline: config.workflowSizeGuideline } : undefined,
-            workflowGovernanceBaseline: {
-                base: config.workflowAgentsReadOnly ? { handsReadOnly: true } : {},
-                worktreeBase: config.workflowAgentsReadOnly ? { handsReadOnly: false } : undefined,
-                workflowModelAllowlist: workflowModelAllowlist ? workflowModelAllowlist : undefined,
-            },
-            workflowCompletionNotifier: {
-                ...(workflowNotifyGate
-                    ? workflowNotifyGate.buildNotifier()
-                    : { notify: (input) => deliverWorkflowCompletion(input) }),
-                ackServed: async (input) => {
-                    if (!workflowCompletionInbox)
-                        return;
-                    try {
-                        const sid = await resolveServedSession(input, runStore ? (id) => runStore.getRun(id) : undefined);
-                        if (sid) {
-                            await workflowCompletionInbox.markTerminalServed(sid, input.runId);
-                            logger.info("workflow_complete_ack_served", { route: "poll-served", sessionId: sid, runId: input.runId });
-                        }
-                    }
-                    catch (err) {
-                        logger.warn("workflow_ack_served_failed", { runId: input.runId, err: String(err) });
-                    }
-                },
-            },
-        }
-        : {};
-    const runnerDeps = {
-        promptSource,
-        rosterStore: rosterStore ? rosterStore : undefined,
-        backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
-        mailboxStore: mailboxStore ? mailboxStore : undefined,
-        brain,
-        models: config.models,
-        roles: config.roles,
-        tiers: config.tiers,
-        pricing,
-        tracer,
-        hands: config.configProvider === "local" ? { commitCoAuthor: "Sema <noreply@vivi-ai.com>" } : undefined,
-        onTaskOutcome: outcomeSink
-            ? (o) => {
-                metrics.inc("task_outcomes_total", { status: o.status, green: String(o.oracle?.green ?? "unknown") });
-                void outcomeSink.recordCore(o).catch((err) => logger.warn("task_outcome_record_failed", { runId: o.runId, err: String(err) }));
-            }
-            : undefined,
-        onElicit: elicitation ? elicitation.elicit : undefined,
-        onQuestion: question ? question.question : undefined,
-        onAsk: toolApproval
-            ? (req, signal) => toolApproval.ask(req, signal)
-            : undefined,
-        autoMode: {
-            onBreakerOpen: (info) => {
-                metrics.inc("auto_mode_breaker_open_total");
-                logger.warn("auto_mode_breaker_open", { consecutiveFailures: info.consecutiveFailures, lastCause: info.lastCause });
-            },
-        },
-        sessionStore,
-        memoryBackend: memoryEngine ? memoryEngine.backend : undefined,
-        memoryEngineDir: memoryEngine ? memoryEngine.root : undefined,
-        onMemoryHarvestReport: memoryEngine
-            ? (report, info) => {
-                metrics.inc("memory_harvest_total", { ok: String(report.ok), phase: info.phase, incident: report.incident?.kind ?? "none" });
-                if (report.patches)
-                    metrics.inc("memory_harvest_patches_total", { phase: info.phase }, (report.patches.add ?? 0) + (report.patches.update ?? 0));
-                if (report.incident)
-                    logger.warn("memory_harvest_incident", { kind: report.incident.kind, phase: info.phase });
-                if (memorySyncRunner && report.ok && (report.patches?.add ?? 0) + (report.patches?.update ?? 0) > 0)
-                    memorySyncRunner.trigger("harvest");
-            }
-            : undefined,
-        toolResultStore,
-        sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined,
-        runtimeCapsResolver: runtimeCapsResolver ? runtimeCapsResolver : undefined,
-        fileSnapshotStore: fileSnapshotStore ? fileSnapshotStore : undefined,
-        executionEnvFactory: executionEnvFactory ? executionEnvFactory : undefined,
-        lspManager: lspManager ? lspManager : undefined,
-        onBackgroundChildEvent: fleetBackgroundChildPublisher(fleetBus, (msg, fields) => logger.info(msg, fields)),
-        loadProjectMemory: config.requirePrincipal !== true && config.projectMemoryEnabled ? makeLoadProjectMemory({ logger }) : undefined,
-        probeInstructionSources: config.remoteExec?.provider === "host" && config.requirePrincipal !== true && config.projectMemoryEnabled
-            ? makeProbeInstructionSources()
-            : undefined,
-        hooks: deploymentHooks,
-        ...selfOrchestrationDeps,
-        onError: (err, ctx) => {
-            if (ctx.phase === "degraded") {
-                logger.warn("task_degraded", { sessionId: ctx.sessionId, info: String(err) });
-                return;
-            }
-            if (ctx.phase === "prompt-constitution") {
-                logger.warn("prompt_provider_needs_upgrade", { sessionId: ctx.sessionId, info: String(err) });
-                return;
-            }
-            if (ctx.phase === "rewind") {
-                const code = /\((\w+)\)/.exec(String(err))?.[1] ?? "unknown";
-                logger.warn("rewind_snapshot_failed", { sessionId: ctx.sessionId, code, info: String(err) });
-                metrics.inc("rewind_snapshot_failed_total", { code });
-                return;
-            }
-            if (ctx.phase === "memory") {
-                logger.warn("memory_consolidation_failed", { sessionId: ctx.sessionId, info: String(err) });
-                return;
-            }
-            if (ctx.phase === "mcp") {
-                logger.warn("mcp_server_unavailable", { sessionId: ctx.sessionId, info: String(err) });
-                metrics.inc("mcp_server_unavailable_total");
-                return;
-            }
-            if (ctx.phase === "prompt-cache") {
-                metrics.inc("prompt_cache_low_hit_total");
-                const fields = { sessionId: ctx.sessionId, ...(ctx.classification ? { classification: ctx.classification } : {}), err: String(err) };
-                if (ctx.classification === "server-or-ttl")
-                    logger.warn("prompt_cache_break", fields);
-                else
-                    logger.error("prompt_cache_break", fields);
-                return;
-            }
-            if (ctx.phase === "config") {
-                logger.warn("runner_config_advisory", { sessionId: ctx.sessionId, info: String(err) });
-                metrics.inc("runner_config_advisory_total");
-                return;
-            }
-            logger.error("runner_error", { phase: ctx.phase, sessionId: ctx.sessionId, err: String(err) });
-        },
-    };
     const runner = new Runner(runnerDeps);
+    // codex R10: TRUE ⇒ the Runner just froze a PRIVATE tier-expanded catalog copy (core runtask.js constructor,
+    // dist-read) — in-place model-plane mutation no longer reaches it, so refresh-time plane changes must be
+    // DEFERRED to restart (see appliedPlaneEff / applyEffective deferModelPlane). Captured HERE, at the same
+    // config generation the constructor read.
     const runnerTierFrozen = Object.keys(config.tiers).length > 0;
-    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => keyResolver, metrics });
+    // hooks 阶段三b(design/HOOKS-PHASE3B-PROMPT-AGENT.md):prompt/agent 条目的模型调用载体。
+    //  - hookLlm(prompt 条目)= 直连网关一次非流式 completion——一次判定调用不起 core task(重炮打蚊子
+    //    且引入可重入面);无系统注入(hook 作者的 prompt 即全部)。默认模型=summarize 角色(cheap tier,
+    //    council/压缩同款;缺角色→主模型);entry.model 覆盖须命中部署 catalog(单用户=自家目录全开,与
+    //    workflow 模型 allowlist 同纪律),未命中=该条目 fail(非阻断记账)。费用不折 task budget(hook=
+    //    部署策略面开销;hook_llm_calls_total/hook_llm_cost 由 metrics 记)。
+    //  - hookAgent(agent 条目)= runner.runTask 读-only 子代理:handsReadOnly + enableFork:false +
+    //    不装 hooks(🔴 可重入禁——结构性:这个 spec 永不携带 TaskSpec.hooks)+ maxTurns 10 + maxCostUsd
+    //    0.05 独立小预算,影响范围受限。final result 文本即输出(与 prompt 同一 SyncHookOutput 决策面)。
+    // hookModelFor/hookLlm 抽到 src/hooks/hook-llm.ts(可注入 fetch/keyResolver ⇒ 可单测):api 形分派
+    // (openai /chat/completions 与 anthropic /v1/messages 双腿)、缺省 baseUrl 按 api 分家、per-model key
+    // 恒胜 + foreign-no-key 连 prompt 都不发的 fail-closed 纪律,全在该模块内(注释含 audit 原文)。
+    // getKeyResolver 取函数:keyResolver 住在 config-center 运行时的闭包里,registry 热应用会整个换引用,
+    // 这里必须每次现取。
+    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => configCenter.getKeyResolver(), metrics });
+    // hook agent 的 session 绝不进 durable store——每次 runTask 会写 session_meta 且无人
+    // 清理(reaper 只扫 staging orphan),cap=4/事件 × 长会话=无主行堆积。专用 Runner 覆盖 sessionStore 为
+    // 进程内 TTL 店(1h 短 TTL,hook 子代理无 resume 语义,行随进程/TTL 消失);其余 deps 原样共享。
     const hookAgentRunner = new Runner({ ...runnerDeps, sessionStore: new TtlSessionStore({ defaultTtlDays: 1 / 24 }) });
     const hookAgent = async ({ prompt, model, timeoutMs }) => {
         const pick = hookModelFor(model);
@@ -1156,7 +212,11 @@ async function main() {
                 enableFork: false,
                 maxCostUsd: 0.05,
                 limits: { maxTurns: 10, timeoutSec: Math.max(30, Math.ceil(timeoutMs / 1000)) },
+                // spec 无 toolPolicy → core `hasEffectAwareGate` 为假 → 每次 agent hook 触发一条
+                // error 级 UNGATED 警告(非致命但纯噪声)。挂已裁决的 auto-accept 基线(与 singleUserAutoAcceptBaseline
+                // 同构;hook 子代理本就 handsReadOnly + 单用户信任面,auto-accept 是既定姿态,只是让闸机制在场)。
                 toolPolicy: createAllowDenyPolicy({}),
+                // 🔴 可重入禁:此 spec 不带 hooks 字段(deps.hooks 是部署观测 tracer,void 观察者,无决策面)。
             });
             metrics.inc("hook_llm_calls_total", { type: "agent" });
             if (result.status !== "completed")
@@ -1168,12 +228,15 @@ async function main() {
         }
     };
     const clipHookErr = (s) => (s ?? "").slice(0, 300);
+    // Auto session titles — fire-and-forget at first
+    // submit, one cheap hookLlm call (summarize role → MODEL_CHEAP_ID when configured), write-once via the session
+    // store's setTitleIfNull (SQL twins + local sidecar carry it; the memory dev store doesn't → titler dark, honest).
     const titleCapable = sessionStore;
     const sessionTitler = config.sessionAutoTitle && titleCapable.setTitleIfNull && titleCapable.probeTitle
         ? createSessionTitler({
             setTitleIfNull: titleCapable.setTitleIfNull.bind(sessionStore),
             probeTitle: titleCapable.probeTitle.bind(sessionStore),
-            redact: redactSecrets,
+            redact: redactSecrets, // audit 2026-07-13: scrub a model-echoed secret before persist/list/log
             llm: (o) => hookLlm({ prompt: o.prompt, timeoutMs: o.timeoutMs }),
             logger,
             metrics,
@@ -1181,38 +244,112 @@ async function main() {
         : undefined;
     if (sessionTitler)
         logger.info("session_auto_title_enabled", {});
+    // ① workflowsCapability SINGLE-SOURCE (core 1.155 `workflowsCapability(deps)`; ruling = SPLIT two caps):
+    // `capabilities.workflows` = core's own truth (`workflowScriptRunner.safeForUntrustedScripts` ∧ governance), boot-
+    // computed from the SAME RunnerDeps the engine uses = the ENGINE-CAN axis ("can the engine self-orchestrate /
+    // ultracode"), ORTHOGONAL to the durable-LIST axis (`Boolean(workflowRunStore)`, surfaced as `workflowsList`).
+    // ⚠️ Today these COINCIDE — `workflowRunStore` is built iff self-orch (InMemory/File, ~L527), the same gate that
+    // wires the safe runner — so this is core's FORWARD-LOOKING contract, not a live-divergence fix (the earlier
+    // "memory backend diverges" premise was wrong; double-review caught it — see the cap site in http/server.ts).
+    // Static per deployment (deps are boot-fixed).
     const workflowsCapable = workflowsCapability(runnerDeps);
+    // Sub-task runner (code-review council lenses/arbiter, subagent/team children). [1364]①/[1367]①(core
+    // 1.350 fork 终修的部署要求):fork 子任务带 `requireExistingSession:true` 在这里执行而源会话在 HOST 店
+    // ——拆店=响亮 `resume.session_not_found`(cli fork 案的 server 半场)。但整店共享被 codex 判两 high
+    // (普通子任务铸 committed durable 会话:无 reaper 覆盖=无界增长+污染 /v1/sessions 枚举),故走
+    // ForkRoutingSessionStore:fork/resume 形(requireExisting)→ host 店优先,普通子任务 → 私有 TTL 店
+    // (throwaway 姿势保留)。hookAgentRunner 仍保独立 TtlSessionStore(1h)——纯瞬态 hook 车道,与 fork 无关。
+    // CC-parity (CRITICAL — 子代理 hands, root cause is the service spawn path): the subagent delegation
+    // tool runs child tasks on THIS subRunner. Without executionEnvFactory the child's `handsEnabled` (= ownedEnv ||
+    // deps.executionEnv, prepare-task) is FALSE → the child gets NO hands (Bash/Read/Edit) and can't run `pwd` — the
+    // "subagent couldn't run pwd" defect hit in real TUI use. core's createSubagentTool gives hands when the env is
+    // wired (gate3: opts.tools:[] still yields Bash), so the fix is to give the subRunner the SAME executionEnvFactory +
+    // lspManager as the main runner. Deliberately NOT inherited: selfOrchestration (no recursive workflow spawn),
+    // scheduler, memory, fileSnapshot, runtimeCaps — a delegated child is a short focused task, not a full session.
+    // codex-2 F1:promptSource 必须随子代——core 1.341 把父的 centerArtifactDigest 传给委派子任务并在子
+    // runner 上按 digest 解析;缺席=每个 catalog 任务的 Agent 子代 fail-loud prompt_snapshot_unavailable。
+    // backgroundAgentStore(1.248 复审 F2):core prepare-task 给每个 task 的 TaskOutput/TaskStop/
+    // AgentTranscript 装 durable 臂用的是所在 runner 的 deps——子代任务跑在 subRunner 上,缺席=子代读
+    // 工具无 durable 回落(第三消费点,与 RunnerDeps/scenarioDeps 同一实例)。
+    // [1543]§三族A(core 穿透审查,历史欠账键批——主 runner 挂了、subRunner 漏挂 = 子代 lane 静默降级;
+    // 全部直引 runnerDeps 同一实例,双点永不漂移):
+    //  - tiers(H):模型目录双 runner 分叉——tier 词 AgentDefinition 在子代 lane 抛 unknown_model、Agent
+    //    model 参数("opus")静默 modelNote 降级、S3c revive 臂 row.model 记 tier 词时复活换模型。
+    //  - rosterStore(M):具名 spawn 不落 durable 名册 → tier-3 按名复活从子代不可达。
+    //  - onBackgroundChildEvent(M):子代触发的 revive/孙代对 fleet 流全盲(同一 publisher 实例=单管道)。
+    //  - loadProjectMemory/probeInstructionSources(M):委派子代 project-blind(core types 已为子代 ctx
+    //    设计 isSubagent/agentName;门禁条件随 runnerDeps 条件键自动一致)。
+    //  - hooks/onError/toolResultStore/sessionPolicyStore(L):子代进 tracer/计量;best-effort 故障不静默;
+    //    fork 子代跨 wake 保 offload 引用;fork 形(有 sessionId)会话规则可达。
+    // 1877 注释的「Deliberately NOT inherited」清单(selfOrchestration/scheduler/memory/fileSnapshot/
+    // runtimeCaps)不变——本批只补漏配,不动裁定。
+    // checkpointStore 构造(从 runStore 区上移,只依赖 backend/config——顺序安全;DURABLE_APPROVAL 仍是
+    // 唯一门,ALL three backends carry checkpoint(),local = core FileCheckpointStore + service half)。
+    // 三个消费点同一实例:主 runner 的 per-task spec 面(resolveSpec durableEnabled 分支)、scenarioDeps
+    // (subagent spawn 面 forwardDurableApproval)、subRunner deps(子代执行面 suspendAsk——[1584] 接线,
+    // 裁定见下方 subRunner 构造内注)。
     const checkpointStore = backend?.checkpoint && config.durableApproval ? backend.checkpoint(logger) : undefined;
+    // [1593] 提名成变量:parked 子代的 ensureChildSessionDurable 晋升半场要拿它做 promoteToHost
+    // (子会话住私有 TTL 店,park 前整树拷进 host durable 店——只查不迁的 1.263 形在拆店生产形下恒
+    // 否决 park,cli 真机 14ms~2s expired 即此)。
     const subRunnerSessions = new ForkRoutingSessionStore(sessionStore, new TtlSessionStore({ defaultTtlDays: 1 / 24 }));
     const subRunner = new Runner({
-        brain,
-        models: config.models,
-        roles: config.roles,
-        tiers: config.tiers,
-        pricing,
-        tracer,
-        promptSource,
-        sessionStore: subRunnerSessions,
-        executionEnvFactory: executionEnvFactory ? executionEnvFactory : undefined,
-        lspManager: lspManager ? lspManager : undefined,
-        backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
-        mailboxStore: mailboxStore ? mailboxStore : undefined,
-        rosterStore: rosterStore ? rosterStore : undefined,
+        // [1543]§三族A 结构性根治(design/158 冲刺尾件):与主 runnerDeps 重复的 ~15 键统一走
+        // createSharedRunnerDeps 展开——「双点挂载」从人工纪律变结构性保证(新共享键漏配其一=不可能,
+        // 基座只有一份)。差异键在展开后显式列出,每个都有为何不同的理由(见 boot/runner-deps.ts 头注)。
+        ...createSharedRunnerDeps({
+            config,
+            brain,
+            pricing,
+            tracer,
+            promptSource: configCenter.promptSource,
+            executionEnvFactory,
+            lspManager,
+            backgroundAgentStore,
+            mailboxStore,
+            rosterStore,
+            deploymentHooks,
+            toolResultStore,
+            sessionPolicyStore,
+        }),
+        // ── 以下为 subRunner 差异键(不在共享基座;逐个有因)──────────────────────────────────────
+        sessionStore: subRunnerSessions, // 子代转录=私有短 TTL fork 路由店,生命周期异于宿主 durable 店
         onBackgroundChildEvent: runnerDeps.onBackgroundChildEvent ? runnerDeps.onBackgroundChildEvent : undefined,
         loadProjectMemory: runnerDeps.loadProjectMemory ? runnerDeps.loadProjectMemory : undefined,
         probeInstructionSources: runnerDeps.probeInstructionSources ? runnerDeps.probeInstructionSources : undefined,
-        hooks: deploymentHooks,
         onError: runnerDeps.onError ? runnerDeps.onError : undefined,
-        toolResultStore,
-        sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined,
+        // checkpointStore = 子代**执行面**的 park 设施([1582] cli TiDB 真验撞获缺口,[1584] core 定谳
+        // 接线步):core prepare-task `spec.checkpointStore ?? deps.checkpointStore` 里 spec 侧永不被
+        // subagent 设置,子代 suspendAsk 全靠这里——缺席 = 具名 bg 子代的 gated ask 只能 deny+continue,
+        // checkpoint 表零行(cli T2 复现原话「denied by an approval constraint」)。必须与 scenarioDeps
+        // (spawn 面 forwardDurableApproval 判定)**同一实例**:claim/expire/consumeParkedFlip 都作用于
+        // 同一行。旧 [1546] HIGH-2 撤载(「core 不转发 durableApproval + SAFETY ask 会 park 出搁浅
+        // checkpoint」)的前提被 core 1.388 件4(转发臂)消除,搁浅顾虑由件1-4+1.389 逐项闭合:watcher
+        // park 翻行 + reap 豁免 + reconciliation 兜孤儿;unattended SAFETY park 恒带缺省 deadline;
+        // TaskStop on parked 走 expire CAS 仲裁(1.389 F-1);/decide 可赎回。行为钉 =
+        // test/subagent-park-wiring.test.ts(SOURCE PIN + park 全链 + 旧形反向控制)。
         checkpointStore: checkpointStore ? checkpointStore : undefined,
     });
+    // S6: resolve identity + owned session from the authenticated channel (never the body).
     const authorize = createAuthorizer(config, sessionStore);
+    // S1/S2: durable async run registry + replayable event log (TiDB-backed).
     const runStore = backend ? backend.run() : undefined;
+    // E18 resume-at: the eventId→entryId anchor map. REQUIRED on every backend (works local — needs only the session
+    // tree + this map, no cloud-only checkpoint), so the only undefined case is the env-only/no-backend deploy (which
+    // also has no async runs — consistent). The shell sends body.resumeAt=eventId; resolveSpec resolves it here.
     const resumeAnchorStore = backend ? backend.resumeAnchor() : undefined;
+    // Per-session approval exemption ("本会话不再询问") — REQUIRED on every backend like the anchor
+    // map; undefined only on the env-only/no-backend deploy (which has no durable approvals either — consistent).
     const approvalExemptionStore = backend ? backend.approvalExemption() : undefined;
     const instanceId = uuidv7();
+    // Per-task wall-clock override (seconds). 0/absent = keep the built-in 600 (1500 council/debate/team) —
+    // the override only ever RAISES (Math.max at the use site), so a misconfigured low value cannot shrink
+    // the council budget.
     const taskTimeoutSec = Math.max(0, Math.floor(Number(process.env.TASK_TIMEOUT_SEC ?? "0")) || 0);
+    // [854]④ per-request 配速的运营方上限旋钮(可选;缺省不设=不封顶):body.limits 每键各自被对应旋钮
+    // Math.min 封顶(normalizeLimits)。多租部署想约束 caller 自报配速时才设;单用户 turnkey 通常留空。
+    // ⚠️ 语义=只钳「显式请求值」,不是全队默认限额:body 缺席(或重放体里的非法值被 defensive DROP)⇒ 该键
+    // 不设限,与升级前行为同形——要给所有任务强加限额是另一个旋钮(未建),别指望这三个(交叉评审 F1 判读)。
     const capEnv = (name) => {
         const n = Math.floor(Number(process.env[name] ?? "0"));
         return Number.isFinite(n) && n > 0 ? n : undefined;
@@ -1222,12 +359,32 @@ async function main() {
         maxOutputTokens: capEnv("TASK_MAX_OUTPUT_TOKENS_MAX"),
         maxTurns: capEnv("TASK_MAX_TURNS_MAX"),
     };
-    const approvalStore = backend?.approval ? backend.approval() : undefined;
+    // F4: human-in-the-loop approval gate (pending state durable so any instance can decide).
+    const approvalStore = backend?.approval ? backend.approval() : undefined; // local omits approval() → legacy poll-gate off (durable HITL needs checkpoint anyway)
     const approvalEnabled = approvalStore && config.approvalRequire.length > 0;
+    // Finding #2 (edge case): the single-user auto-accept tool-policy BASELINE applies ONLY when the operator
+    // expressed NO gate intent. If they SET approval flags (APPROVAL_REQUIRE/APPROVAL_DENY/DURABLE_APPROVAL) but no
+    // backing store is wired (e.g. DB_BACKEND=local → no approvalStore/checkpointStore ⇒ approvalEnabled/durableEnabled
+    // false), that is a MISCONFIG — do NOT mask it with allow-all; leave toolPolicy undefined so core's UNGATED warning
+    // still surfaces it. So the baseline needs single-user turnkey ∧ zero expressed gate intent.
     const operatorGateIntent = config.approvalRequire.length > 0 || config.approvalDeny.length > 0 || config.durableApproval;
     const singleUserAutoAcceptBaseline = config.requirePrincipal !== true && !operatorGateIntent;
+    // design/45 durable-checkpoint (core 1.67): opt-in (DURABLE_APPROVAL + a pool). When on, F4 uses durable
+    // suspend/resume instead of the poll gate — a gated `ask` suspends the task (status:"suspended" + checkpoint)
+    // and an operator resumes it on any replica. Default off → unchanged poll-policy.
+    // checkpointStore 构造已上移到 subRunner 之前([1535] server 半场:子代 park 设施);本行原位注释保留。
+    // TOC integration ask③ (INTEGRATION-DESIGN §11): reclaim runs orphaned by a previous host-lane engine
+    // process (orphaned `running` → failed + release its EEXIST-blocking claim; exclude resume-in-progress rows). The
+    // logic + its null-safety (runStore undefined on the env-only/no-backend lane) live in the unit-tested
+    // `reclaimOrphansAtBoot` helper — extracted after a workflow re-review caught a boot crash there (HIGH, 1.49.0).
     await reclaimOrphansAtBoot(runStore, checkpointStore, logger);
-    const imageIndex = backend?.imageIndex ? backend.imageIndex() : undefined;
+    // Sandbox-image-pool index (IMAGE-API-DESIGN.md §2): enables /v1/images* query + select. TiDB-backed projection
+    // of the bake manifests + publish lifecycle. Present whenever a pool is — read-only catalog until P2/P3 bakes.
+    const imageIndex = backend?.imageIndex ? backend.imageIndex() : undefined; // local omits imageIndex() → sandbox-image-pool is cloud/fleet-only
+    // RFC A2 (A 切片先行): the model-facing SelectEnvironment tool — mounted via spec.tools
+    // (RFC 判定②(a)) whenever the per-task image chain is actually usable (k8s backend + image catalog), opt-out
+    // via SELECT_ENVIRONMENT_TOOL=false. Viewer scope is rebuilt per-execute from the Runner-threaded read-only
+    // ctx.principal (auth-channel-derived — a tool argument can never widen visibility).
     const selectEnvTool = config.selectEnvironmentTool && config.remoteExec?.provider === "k8s" && imageIndex
         ? selectEnvironmentTool({
             catalog: imageIndex,
@@ -1235,90 +392,123 @@ async function main() {
             viewerFor: (principal) => ({ operator: explicitOperator(principal, config.operatorPrincipals), tenantId: principal ?? null }),
         })
         : undefined;
-    const imageBakes = backend?.imageBake && config.imageBakes.enabled ? backend.imageBake() : undefined;
+    // Sandbox-image-pool BAKE control plane (IMAGE-API-DESIGN.md §P2): enables /v1/images/bakes* when a pool exists
+    // AND IMAGE_BAKES_ENABLED. The config boot-invariant already fail-fasts an empty OPERATOR_PRINCIPALS (a
+    // world-writable build-host-RCE door). image-api stays the UNPRIVILEGED controller; the privileged build runs
+    // on the sema-registry-managed bake-runner worker on build-host (it claims + ingests over the internal routes).
+    const imageBakes = backend?.imageBake && config.imageBakes.enabled ? backend.imageBake() : undefined; // local omits imageBake() → cloud/fleet-only
     if (imageBakes)
         logger.info("image_bakes_enabled", { operators: config.operatorPrincipals.length, runner: config.imageBakes.runnerPrincipal });
+    // Durable HITL surface = checkpointStore ALONE (DURABLE_APPROVAL=true). It mounts AskUserQuestion-suspend (the
+    // agent asks the human + the portal approval center) AND the resumable checkpoint. The F4 TOOL-APPROVAL
+    // gate is an ADDITIVE layer driven by APPROVAL_REQUIRE — empty = no tool is gated, but AskUserQuestion HITL
+    // still works. (Decoupled 2026-06-13: previously these were coupled, forcing a placeholder APPROVAL_REQUIRE
+    // to get HITL — clay: OA writes don't gate (OA-backend RBAC is the authority), but portal HITL must work.)
+    // durableEnabled 已在 runnerDeps 前按同一条件求值([1.294 G1] 前置声明处)——checkpointStore 构造条件与其
+    // 同源,恒有 durableEnabled === !!checkpointStore。
     if (durableEnabled)
         logger.info("durable_approval_enabled", { toolApprovalGate: config.approvalRequire.length });
+    // 修4(三路复审 W3):the fs-write ask gate (resolveSpec, applyTaskSettings wiring below) mounts purely off the
+    // host-semantics lane — DELIBERATELY decoupled from any approval face, so no assembly path is ever gateless:
+    // with no live coordinator and no durable park, a permissionMode default/auto Write/Edit ask fail-closed
+    // auto-denies via core resolveAsk (onAsk absent ⇒ headless auto-deny, loud in-transcript). What that posture
+    // must NOT be is silent at boot: an operator who explicitly set TOOL_APPROVAL_ENABLED=false (or a multi-tenant
+    // default) would otherwise read the resulting hand-tool denials as an outage. Warn once, at boot.
     if ((config.remoteExec === undefined || config.remoteExec.provider === "host") && !toolApproval && !durableEnabled) {
         logger.warn("fs_write_gate_no_responder", {
             hint: "host-semantics lane with no approval face: permissionMode default/auto Write/Edit asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
         });
     }
+    // [1245]/[1248]② the workflow ask leg attaches on EVERY lane (not fs-dependent — see createWorkflowAskPolicy),
+    // so a sandbox-lane deployment running self-orchestration with no approval face hits the same fail-closed
+    // auto-deny class. Same loud-at-boot posture; host lanes are already covered by the broader warn above.
     if (config.selfOrchestrationEnabled && config.remoteExec !== undefined && config.remoteExec.provider !== "host" && !toolApproval && !durableEnabled) {
         logger.warn("workflow_gate_no_responder", {
             hint: "self-orchestration with no approval face: permissionMode default/auto/acceptEdits run_workflow asks will auto-deny (fail-closed); wire TOOL_APPROVAL_ENABLED=true or DURABLE_APPROVAL=true to answer them",
         });
     }
+    // Finding #2: a single-user turnkey worker with no explicit approval/durable/commandPolicy gets an
+    // ADJUDICATED auto-accept tool-policy BASELINE (createAllowDenyPolicy — a PRESENT effect-aware policy, so core's
+    // write-capable hand tools are never UNGATED / unadjudicated). Log the posture so the auto-accept is OBSERVABLE,
+    // not silent; tighten irreversible ops via APPROVAL_REQUIRE / AUTONOMY / commandPolicy (layered tighten-only).
     if (singleUserAutoAcceptBaseline) {
+        // Blanket auto-accept over ALL write/hand/MCP tool surfaces (core's per-surface UNGATED enumeration — hand band /
+        // destructive-MCP / first-party-write — is suppressed for single-user turnkey by design). Log it so the posture is
+        // observable; tighten (which also re-surfaces per-surface gating) via APPROVAL_REQUIRE / AUTONOMY / commandPolicy.
         logger.info("tool_policy_single_user_default", {
             posture: "adjudicated auto-accept — ALL write/hand/MCP tool surfaces auto-allowed (core per-surface UNGATED enumeration suppressed for single-user turnkey)",
             tighten: "APPROVAL_REQUIRE / AUTONOMY / commandPolicy (re-surfaces + gates specific surfaces)",
         });
     }
+    // D-G: a boot-time signal that this worker is in crypto-bound direct-door mode (trusted-header path disabled).
+    // Pairs with the /health directDoorActive field for the DG-M2 go-live runbook (a positive go signal, not just
+    // a behavioral 401). The boot invariant in config.ts already fail-fasts a half-configured direct door.
     if (config.directDoorActive)
         logger.info("direct_door_active", { iss: config.principalJwtIss, aud: config.principalJwtAud, operators: config.operatorPrincipals.length });
+    // CC-parity (adversarial-review finding): a MULTI-TENANT deployment running self-orchestration WITHOUT worker
+    // isolation is an availability risk — the in-process hardened VM is ESCAPE-isolated but NOT RESOURCE-isolated, so an
+    // entitled tenant's workflow script can starve the host event loop (microtask loop / OOM), affecting every tenant
+    // (src/orchestration/hardened-vm-runner.ts documents this). Loud boot warning so the operator sets
+    // SELF_ORCHESTRATION_WORKER_ISOLATION=true. (Single-user is unaffected — the one principal owns its own worker.)
     if (config.requirePrincipal && config.selfOrchestrationEnabled && !config.selfOrchestrationWorkerIsolation)
         logger.warn("self_orchestration_no_worker_isolation", { detail: "multi-tenant self-orchestration without SELF_ORCHESTRATION_WORKER_ISOLATION=true — a tenant workflow can starve the host event loop (availability risk). Set it to enable worker_thread resource isolation." });
+    // 🔒 (systematic-audit HIGH fix, defense-in-depth): a multi-tenant deployment (requirePrincipal) with NO service/trace
+    // token now correctly fails CLOSED — fleet/trace/session-list are owner-gated, never fleet-wide (isFleetWide, server.ts).
+    // Warn the operator: without SERVICE_AUTH_TOKEN/authTokens/TRACE_TOKEN those endpoints only ever return the caller's own
+    // rows (safe, but may surprise an operator expecting cross-tenant ops visibility — set a token for ops-relay).
     if (config.requirePrincipal && !config.authToken && Object.keys(config.authTokens ?? {}).length === 0 && !config.traceToken)
         logger.warn("multi_tenant_no_service_token", { detail: "REQUIRE_PRINCIPAL is on but no SERVICE_AUTH_TOKEN/authTokens/TRACE_TOKEN — fleet/trace/session-list are owner-gated only (never fleet-wide, tenant-isolation safe). Set a token for cross-tenant ops visibility." });
+    // Rate limiter: TiDB-backed (cross-replica SOFT limit, same write-behind counter as the cost quota)
+    // when a pool exists, else in-memory per-replica. Both satisfy RateGate. (design/30 P0-2)
     const rateLimiter = config.rateLimitPerMin > 0
-        ? backend?.rateLimiter
+        ? backend?.rateLimiter // local omits rateLimiter() → in-memory per-process RateLimiter (single-replica)
             ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()
             : new RateLimiter(config.rateLimitPerMin)
         : undefined;
+    // Capability layer: scenario → {tools (+ subagent roster), prompt, skills}. Heavy bits (skills,
+    // git client) are built ONCE here; per request we only select a scenario and bind coordinates.
     let skills = loadSkills(config.skillsDir);
-    if (effective?.skills && config.configCenter) {
-        skills = await applyCenterSkills(skills, effective.skills, config.configCenter.baseUrl, config.configCenter.token, logger, undefined, configLkgEnabled() ? defaultSkillCacheDir() : undefined);
-    }
-    if (effective?.plugins && config.configCenter) {
-        const pluginOut = await applyCenterPlugins(skills, effective, {
-            cacheRoot: join(config.localDataRoot ?? join(homedir(), ".ai-agent"), "plugin-cache"),
-            allowHosts: config.pluginsAllowHosts,
-            logger,
-        }).catch((err) => {
-            logger.warn("center_plugins_apply_failed", { error: err instanceof Error ? err.message : String(err) });
-            return undefined;
-        });
-        if (pluginOut) {
-            skills = pluginOut.skills;
-            if (pluginOut.failures.length + pluginOut.letGo.length + pluginOut.lkgUsed.length > 0) {
-                logger.info("center_plugins_applied", { failures: pluginOut.failures, letGo: pluginOut.letGo, lkgUsed: pluginOut.lkgUsed });
-            }
-        }
-    }
-    if (bootLkgCandidate && lkgEnabled) {
-        const bootPublished = await persistLkgDurable(bootLkgCandidate.effective, bootLkgCandidate.etag).catch((err) => {
-            logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "boot LKG persist failed — retained for the per-tick retry" });
-            return false;
-        });
-        {
-            const enabledManifest = (bootLkgCandidate.effective.skills?.skills ?? []).filter((m) => m.enabled !== false);
-            const canonScenarios = (a) => [...(a ?? [])].sort().join("\u0000");
-            const liveSkillMiss = enabledManifest.some((m) => !skills.some((sk) => sk.spec.name === m.name &&
-                skillContentHash(sk.spec.content) === m.contentHash &&
-                sk.spec.description === m.description &&
-                canonScenarios(sk.scenarios) === canonScenarios(m.scenarios)));
-            if (liveSkillMiss)
-                bootSkillStale = true;
-            if (liveSkillMiss && (bootPublished || (!lkgSurvivesRestart && lastPrewarmBodiesVerified))) {
-                pendingRestart = { restartRequired: true, reasons: ["skills"], version: bootLkgCandidate.effective.version, since: Date.now() };
-                logger.warn("config_boot_skill_stale_restart", { version: bootLkgCandidate.effective.version, durableHandoff: bootPublished, note: bootPublished ? "live skill application incomplete but the durable LKG carries the full candidate — skills restart published (the next boot reads the complete LKG)" : "live skill application incomplete on a non-durable deployment but every enabled body is verified in the cache — skills restart published (transient failure proven repaired; the restarted process re-pulls live)" });
-            }
-            else if (liveSkillMiss || (!bootPublished && lkgSurvivesRestart)) {
-                planeDeferredNoHandoff = { version: bootLkgCandidate.effective.version, since: Date.now(), blocked: liveSkillMiss ? ["skills"] : [], candidate: bootLkgCandidate.effective, ...(bootLkgCandidate.etag !== undefined ? { candidateEtag: bootLkgCandidate.etag } : {}) };
-                logger.warn("config_lkg_boot_publication_retained", { version: bootLkgCandidate.effective.version, liveSkillMiss, durableDeclared: lkgSurvivesRestart, note: (lkgSurvivesRestart ? "boot LKG publication incomplete on a durable-declared deployment — candidate retained; the refresh loop retries after each confirming 304" : "live skill application incomplete on a non-durable deployment and the body cache could not be verified — skills debt retained WITHOUT a restart signal (codex R37: signaling now could restart-storm; each confirming 304 re-verifies and publishes once the bodies prove fetchable)") + (liveSkillMiss && lkgSurvivesRestart ? "; this process runs skill-stale, promotion will publish a skills restart" : "") });
-            }
-        }
-    }
-    if (effective?.mcp)
-        config.mcpServers = resolveMcpServers(effective.mcp, logger);
+    // design/158 A10 尾刀:center skills overlay + plugins 消费 + boot LKG 落盘/skill-stale 判定 + mcp
+    // 解析搬到 boot/config-center.ts(逐字)。⚠️ 位置即契约:loadSkills 之后、buildScenarios 之前 ——
+    // LKG 落盘点必须晚于 skill 正文装载(F7/codex R26),plugins 让位判据要求 plugins 晚于 center 直发 skills。
+    skills = await configCenter.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? new GiteaClient(config.gitApiBaseUrl, config.gitApiToken) : undefined;
+    // CC-parity: deployment-injected WebSearch backend (the leg core leaves open). Absent WEB_SEARCH_PROVIDER →
+    // undefined → the default scenario doesn't assemble the WebSearch tool. The API key stays in the backend closure.
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;
     if (webSearch)
         logger.info(`WebSearch enabled (provider=${webSearchCfg.provider}, maxResults=${webSearch.maxResults})`);
+    // core 1.382([1561] 提货单①②,design/153 parked 状态机)「同车必接」的 ensureChildSessionDurable 挂点:
+    // 只在 checkpointStore 真在场时构造(与 core parkEligible 门「两者全在场才成立」的判据同源——checkpoint
+    // 不在场时构造这个闭包毫无意义,连带把「local/无 durable backend 部署不该跑这条 acquire/release」的
+    // 边界直接编码进构造条件,不用额外判断)。实现体拆到 `ensureSessionDurable`(session-store.ts,可独立
+    // 测试;双复审②抓的 F-7 同族空壳缺口——host 店可能存在 `register()` 留下的零内容 session_meta 行——
+    // 的校验也在那边)。
+    // 🔴 [1575] F3 修(cli 复查,红先行确认真红):`checkpointStore` 在场 ⇏ `sessionStore` 就是 TiDB 真店
+    // ——这是两个独立 config 轴(DB_BACKEND 供 checkpoint/runs 等用途 vs SESSION_BACKEND 单独控 session
+    // 落哪),`SESSION_BACKEND` 显式留在默认值时 `sessionStore` 是纯内存 `TtlSessionStore`(无 repo 构造,
+    // core `release()` 语义在该形态下是**整删会话**,不是"归还租约")——探针的 finally release 会销毁它
+    // 刚证明存在的会话。追加门 `config.sessionBackend === "tidb"`(此刻已被前面装配区从 "auto" 归一,
+    // 恒是 "tidb"|"memory" 二选一,时序安全):唯一保留可达的店形正是 release() 真安全的那种
+    // (TiDBSessionStore.release 逐字注释「Durable history is retained; just drop any in-flight cache
+    // entry」)。非 tidb 场景下 undefined = 子代按 pre-153 settle failed,零回归(与 checkpointStore 缺席
+    // 同一处置)。
+    // [1593] 只查不迁 → 主动晋升(cli TiDB 真机撞获:bg 子会话住 subRunner 私有 TTL 店、从不在 host 店,
+    // 旧形恒 veto → core 当场 expire checkpoint(14ms~2s)+ settle failed,赎回窗口不存在)。晋升链=
+    // 快查 host → promoteToHost(整树拷贝+私店 forget+路由记 host)→ 同一严检复验(leaf 非空);任何
+    // 一步失败仍如实 veto(pre-153 行为,不放大)。tidb 门与 F3 裁定不变。
     const ensureChildSessionDurable = checkpointStore && config.sessionBackend === "tidb" ? (sessionId) => ensureChildSessionDurableWithPromotion(sessionStore, subRunnerSessions, sessionId) : undefined;
+    // [1900]/[1904] WebFetch 摘要器:core 工厂 + summarize 角色模型(cheap tier;resolveTaskModel 自带
+    // 默认回落——与压缩线同族档位,不新造)。构造一次全场景共享;多租户形 WebFetch 整体被 filter,
+    // 本注入无效化由 scenarios 现行为保证。
+    // 🔴 复审 E-MED-2/E-MED-3 两修:
+    //  ① **惰性解析**:模型每次调用现取——`config.models`/`config.roles` 会被 center 的 effective
+    //     热应用 mutateInPlace 整表替换,boot 期急求值会把摘要器永久 pin 在占位/旧模型上(故障形态是
+    //     静默退回上下文放大 + 每次一发无效 LLM 调用)。
+    //  ② **fail-soft**:core resolveTaskModel 在无可解析角色时 throw,这是全仓唯一 boot 期裸调用;
+    //     center 发一张既无 summarize 又无 default 的 roles 表就会拒启。解析失败 ⇒ 本次不摘要
+    //     (core 的 summarize 抛错是 fail-open:回退原文+note),绝不崩 boot。
     const webFetchSummarize = async (content, prompt, signal) => {
         const model = (() => {
             try {
@@ -1333,14 +523,29 @@ async function main() {
             throw new Error("summarize model unresolved for this deployment");
         return createWebFetchSummarizer(brain, model)(content, prompt, signal);
     };
+    // design/158 S4:标注 `: ScenarioDeps` —— 无标注的字面量连自己的键名都不校验(打错/多写一个键
+    // 只是多一个没人读的属性,编译期无声),这是 1.304 落错家那一族的另一半土壤。
     const scenarioDeps = {
         runner, subRunner, model: "default", skills, repoClient, requirePrincipal: config.requirePrincipal,
         webSearch: webSearch ? webSearch : undefined, metrics, logger, webFetchSummarize,
+        // core 1.364 写半场:与 RunnerDeps.backgroundAgentStore 同实例(组装区注释;半接=静默死特性)。
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
+        // core 1.382 parked 状态机「同车必接」一对——checkpointStore 与 main runner 的 checkpointStore(subRunner
+        // 构造区上方 const)同实例;ensureChildSessionDurable 见上方构造闭包注释。
         checkpointStore: checkpointStore ? checkpointStore : undefined,
         ensureChildSessionDurable: ensureChildSessionDurable ? ensureChildSessionDurable : undefined,
         oaApiBaseUrl: config.oaApiBaseUrl, oaServiceToken: config.oaServiceToken, oaIssue: config.oaIssue,
         brandIdentity: config.configProvider === "local",
+        // core 1.287 extraTools seam ([802]③ server half): SendUserFile reaches the delegated-child roster. SAME
+        // existence gate as the top-level mount (the one sendUserFileToolSpec built above — lane/tenancy/config
+        // posture already encoded in its presence). The spec is execute-time late-bound (ctx.taskId →
+        // TaskEnvRegistry lookup; emit via ALS to the top-level frame tail), so returning the SAME instance per
+        // spawn is correct — per-spawn state lives in the registry, not the spec ([797] confirmed with core).
+        // codex F1/F2 gates (subagentSendUserFileExtraTools): (F1) the subRunner carries no toolPolicy and core
+        // does not propagate the parent's policy into child specs, so an APPROVAL_DENY/ask-gated SendUserFile was
+        // reachable from delegated children — the factory now pre-checks the LIVE deployment approval face
+        // (deny/require/neverAuto, canonical-space) and injects nothing when gated (conservative stopgap until a
+        // core child-policy seam lands); (F2) read-only builtin agents (Explore/Plan) never receive the tool.
         subagentExtraTools: sendUserFileToolSpec
             ? subagentSendUserFileExtraTools({
                 spec: sendUserFileToolSpec,
@@ -1349,7 +554,16 @@ async function main() {
             : undefined,
     };
     const scenarios = buildScenarios(scenarioDeps);
+    // design/153 件3d:/decide parked 赎回腿的裸 Agent 工具——boot 期从**内建 default** 场景工厂取一份
+    // (必须在 center overlay 盖名之前取:赎回腿要的是与 spawn 同源的生产装配,subRunner/bg opts/
+    // checkpointStore 同实例天然成立;per-request 项如 webSearch 对 revive 无关——objective 在 core
+    // driveParkedResume 里被丢弃)。checkpointStore/agentStore 任一缺席 = park 本就不可达,分支不接线。
     const parkedReviveTool = checkpointStore && backgroundAgentStore ? scenarios.default?.({})?.tools.find((t) => t.name === "Agent") : undefined;
+    // [1596]/[1597] 跨进程父约束重供席工厂:host 任务的 toolPolicy 解析槽按部署配置**同参重建**
+    // (resolveSpec durableEnabled 分支的同款折叠:durableQuestion + durableAsk 四旋钮),单层链
+    // count=1,durableMandate=true(host 有 durableApproval 且 durable 车道无 live onAsk 的恒形)。
+    // exempt 探针锚 = row.rootSessionId——与 parked decide 的 remember grant 锚同键([1591] 候裁②),
+    // 重建链上的豁免语义与原链一致。重建不出(无 root 锚)= 不供席 = core pre-CAS 门诚实拒(现状)。
     const parkedReviveInheritedGate = parkedReviveTool && config.durableApproval
         ? (row) => ({
             parentConstraints: [{
@@ -1366,464 +580,55 @@ async function main() {
                 }],
         })
         : undefined;
+    // 场景详情:内建 details 必须在 overlay 合并【前】构建(探针要打纯内建工厂,不是被 center 顶掉的);
+    // center details 随 overlay 同判定源盖同名——source 语义与 selectScenario 实际取用永一致(约定①)。
     const scenarioDetails = builtinScenarioDetails(scenarios, scenarioDeps);
-    const builtinScenarioNames = Object.keys(scenarioDetails);
-    if (effective?.scenarios) {
-        const { overlay, shadows } = centerScenarios(scenarioDeps, effective.scenarios.scenarios, Object.keys(scenarios), logger);
-        Object.assign(scenarios, overlay);
-        Object.assign(scenarioDetails, centerScenarioDetails(effective.scenarios.scenarios, builtinScenarioNames));
-        if (Object.keys(overlay).length > 0)
-            logger.info("sema_registry_scenarios", { scenarios: Object.keys(overlay), ...(shadows.length > 0 ? { shadowsBuiltin: shadows } : {}) });
-    }
+    const builtinScenarioNames = Object.keys(scenarioDetails); // overlay 前捕获(六内建名)
+    // design/158 A10 尾刀:center 声明场景 overlay 搬到 boot/config-center.ts(逐字)。⚠️ 位置即契约:
+    // 必须在内建 details + 六内建名捕获之后 —— 探针要打纯内建工厂,不是被 center 顶掉的。
+    configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     logger.info("capabilities", { skills: skills.length, scenarios: Object.keys(scenarios), repoTools: Boolean(repoClient) });
+    // Background reapers: recover runs whose instance died, expire never-answered approvals, sweep
+    // rate windows. Unref'd so they never hold the process open.
+    // design/80 D-D (SLA-timer): the deny-sweep reuses the server's resumeCheckpoint, so it is wired in AFTER
+    // createHttpServer returns it (below) via this holder — the reaper is defined before the server.
     let runDenySweep;
-    const reapCount = (metric, labels) => (n) => {
-        if (typeof n === "number" && n > 0) {
-            metrics.inc(metric, labels, n);
-            logger.info("reaper_swept", { metric, ...labels, count: n });
-        }
-    };
-    let wfRunReapInFlight = false;
-    let attachmentSweepInFlight = false;
-    let bgAgentReapInFlight = false;
-    const reapBgAgents = backgroundAgentStore
-        ? async () => {
-            const store = backgroundAgentStore;
-            const scopes = await (store.listScopes?.() ?? Promise.resolve(["default"]));
-            let rows = 0, sessions = 0, skipped = 0, failedScopes = 0;
-            for (const scope of scopes) {
-                try {
-                    if (checkpointStore) {
-                        const pr = await defaultTaskRegistry.reconcileParkedAgents({ agentStore: store, checkpointStore }, scope, Date.now(), { staleClaimMaxAgeMs: config.backgroundAgentParkClaimStaleMs });
-                        if (pr.failed > 0 || pr.rolledBack > 0) {
-                            metrics.inc("bg_agents_park_reconciled_failed_total", {}, pr.failed);
-                            metrics.inc("bg_agents_park_reconciled_rolledback_total", {}, pr.rolledBack);
-                            logger.info("reaper_swept", { metric: "bg_agents_park_reconciled", scope, failed: pr.failed, rolledBack: pr.rolledBack });
-                        }
-                    }
-                    const r = await defaultTaskRegistry.reapDurableAgents(scope, { store, sessions: subRunner.sessions, ...(mailboxStore ? { mailbox: mailboxStore } : {}) }, {
-                        maxAgeMs: config.backgroundAgentRetentionMs,
-                        staleRunningMaxAgeMs: config.backgroundAgentStaleRunningMs,
-                    });
-                    rows += r.rowsReaped;
-                    sessions += r.sessionsReleased;
-                    skipped += r.skippedNoSessions;
-                }
-                catch (err) {
-                    failedScopes++;
-                    logger.warn("bg_agent_reap_scope_failed", { scope, err: err instanceof Error ? err.message : String(err) });
-                }
-            }
-            if (failedScopes > 0)
-                metrics.inc("bg_agent_reap_scope_failures_total", {}, failedScopes);
-            if (rows > 0 || sessions > 0) {
-                metrics.inc("bg_agents_reaped_total", {}, rows);
-                logger.info("reaper_swept", { metric: "bg_agents_reaped_total", count: rows, sessionsReleased: sessions, skippedNoSessions: skipped });
-            }
-        }
-        : undefined;
-    const probeClockSkew = async () => {
-        try {
-            const dbMs = await backend?.dbNowMs?.();
-            if (typeof dbMs === "number" && Number.isFinite(dbMs)) {
-                metrics.setGauge("fleet_counter_bucket_skew_ms", dbMs - Date.now());
-                metrics.setGauge("fleet_clock_probe_ok", 1);
-            }
-        }
-        catch {
-            metrics.setGauge("fleet_clock_probe_ok", 0);
-        }
-    };
-    const reaper = setInterval(() => {
-        void probeClockSkew().catch(() => undefined);
-        void runStore?.reapStale(config.runStaleSec * 1000).then(reapCount("runs_reaped_total", { kind: "stale" })).catch(() => undefined);
-        if (checkpointStore) {
-            void checkpointStore.reapExpired(Date.now()).then(reapCount("checkpoints_reaped_total", {})).catch(() => undefined);
-            void runStore?.failSuspendedWithExpiredCheckpoint().then(reapCount("runs_reaped_total", { kind: "expired_checkpoint" })).catch(() => undefined);
-            void runDenySweep?.(Date.now()).catch(() => undefined);
-        }
-        if (config.approvalTimeoutSec > 0) {
-            void approvalStore?.expireStale(config.approvalTimeoutSec * 1000).catch(() => undefined);
-            void runStore?.reapSuspended(config.approvalTimeoutSec * 1000).then(reapCount("runs_reaped_total", { kind: "suspended" })).catch(() => undefined);
-        }
-        void checkpointStore?.reapCtx(Date.now() - config.runStaleSec * 1000).catch(() => undefined);
-        rateLimiter?.sweep();
-        if (costQuota instanceof CostQuota)
-            costQuota.reap();
-        void toolResultStore?.reapOlderThan?.(Date.now() - config.toolResultTtlSec * 1000)?.catch(() => undefined);
-        void fileSnapshotStore?.sweepOrphanBlobs?.().catch(() => undefined);
-        void taskAttachmentStore?.reapUnbound(Date.now() - config.attachmentUnboundTtlMs).then(reapCount("attachments_reaped_total", {})).catch(() => undefined);
-        if (config.attachmentOrphanGraceMs > 0 && !attachmentSweepInFlight && taskAttachmentStore?.sweepOrphanObjects) {
-            attachmentSweepInFlight = true;
-            void taskAttachmentStore
-                .sweepOrphanObjects(config.attachmentOrphanGraceMs)
-                .then((n) => { if (n > 0) {
-                metrics.inc("attachment_orphan_objects_swept_total", {}, n);
-                logger.info("attachment_orphan_objects_swept", { removed: n });
-            } })
-                .catch((err) => logger.warn("attachment_orphan_sweep_failed", { err: String(err) }))
-                .finally(() => { attachmentSweepInFlight = false; });
-        }
-        void backend?.session()?.sweepStagingSessions?.().catch(() => undefined);
-        void imageBakes?.reapStaleBakes(config.imageBakes.staleMs).then(reapCount("bakes_reaped_total", {})).catch(() => undefined);
-        void worktreeReap?.();
-        void workflowNotifyGate?.recover({ orphanGraceMs: config.workflowOrphanGraceMs }).catch(() => undefined);
-        void workflowJournalStore?.reapExpired?.(Date.now(), config.workflowJournalRetentionMs).catch(() => undefined);
-        if (!wfRunReapInFlight) {
-            const sweep = sqlWorkflowRunStore?.reapAllScopes?.(Date.now(), { maxAgeMs: config.workflowRunRetentionMs });
-            if (sweep) {
-                wfRunReapInFlight = true;
-                void sweep.catch(() => undefined).finally(() => (wfRunReapInFlight = false));
-            }
-            void workflowNotifyJournal
-                ?.reapAcked?.(Date.now() - config.workflowRunRetentionMs)
-                .catch(() => undefined);
-        }
-        if (reapBgAgents && !bgAgentReapInFlight) {
-            bgAgentReapInFlight = true;
-            void reapBgAgents().catch(() => undefined).finally(() => (bgAgentReapInFlight = false));
-        }
-        void rosterStore
-            ?.reapOlderThan?.(Date.now() - config.rosterRetentionMs)
-            .then(reapCount("roster_rows_reaped_total", {}))
-            .catch(() => undefined);
-        if (config.scratchpadSweepTtlMs > 0) {
-            void sweepStaleScratchpads(config.localDataRoot ?? localRoot, { olderThanMs: config.scratchpadSweepTtlMs })
-                .then((removed) => {
-                if (removed > 0)
-                    logger.info("scratchpads_swept", { removed });
-            })
-                .catch(() => undefined);
-        }
-    }, config.reapIntervalSec * 1000);
-    reaper.unref?.();
+    // design/158 A10:reaper 段搬到 src/boot/reapers.ts(逐字;deny-sweep 晚绑改取值,见该文件头注)。
+    const reaper = startReapers({
+        config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, approvalStore,
+        rateLimiter, costQuota, toolResultStore, fileSnapshotStore, taskAttachmentStore, imageBakes, worktreeReap,
+        workflowNotifyGate, workflowJournalStore, sqlWorkflowRunStore, workflowNotifyJournal, rosterStore,
+        backgroundAgentStore, mailboxStore,
+        getRunDenySweep: () => runDenySweep,
+    });
+    // Optional OTLP/HTTP metrics export (1.37). Periodically pushes the registry to an OTel collector;
+    // best-effort (a collector outage is logged, never affects serving). /metrics stays available too.
     const otelExporter = config.otel
         ? startOtlpExporter(metrics, {
             ...config.otel,
             onError: (err) => logger.warn("otel_export_failed", { err: String(err) }),
         })
         : undefined;
-    if (configProvider) {
-        const ccRef = config.configCenter;
-        let refreshInFlight = false;
-        const refreshTick = async (prefetched) => {
-            if (refreshInFlight)
-                return;
-            refreshInFlight = true;
-            try {
-                await retryPendingCatalog("refresh-retry");
-                if (planeDeferredNoHandoff) {
-                    metrics.inc("models_tiers_plane_deferred_stuck_total");
-                    logger.warn("models_tiers_deferred_no_handoff", { version: planeDeferredNoHandoff.version, since: planeDeferredNoHandoff.since, note: "candidate still retained without a next-boot handoff — mount restart-surviving LKG storage + CONFIG_LKG_DURABLE=true, or restart manually after ensuring the candidate is re-pulled at boot" });
-                }
-                const r = prefetched !== undefined ? prefetched : await configProvider.fetchEffective(ccEtag);
-                if (r === null && planeDeferredNoHandoff) {
-                    const skillsDebt = (planeDeferredNoHandoff.blocked ?? []).includes("skills");
-                    const promoted = lkgSurvivesRestart || skillsDebt ? await persistLkgDurable(planeDeferredNoHandoff.candidate, planeDeferredNoHandoff.candidateEtag) : false;
-                    const skillsProofPromotion = !promoted && !lkgSurvivesRestart && skillsDebt && lastPrewarmBodiesVerified && planeDeferredNoHandoff.planeDeferred !== true;
-                    if (skillsProofPromotion) {
-                        pendingRestart = { restartRequired: true, reasons: ["skills"], version: planeDeferredNoHandoff.version, since: Date.now() };
-                        logger.info("config_boot_skill_debt_promoted", { version: planeDeferredNoHandoff.version, note: "skill bodies verified on a source-confirmed-current candidate — the withheld skills restart is now published (non-durable lane, repair proven)" });
-                        planeDeferredNoHandoff = undefined;
-                    }
-                    else if (promoted) {
-                        const promotedReasons = [...new Set([...(planeDeferredNoHandoff.blocked ?? []), ...(planeDeferredNoHandoff.planeDeferred ? ["models-tiers"] : [])])];
-                        if (promotedReasons.length > 0) {
-                            pendingRestart = { restartRequired: true, reasons: promotedReasons, version: planeDeferredNoHandoff.version, since: Date.now() };
-                        }
-                        logger.info("models_tiers_deferred_promoted", { version: planeDeferredNoHandoff.version, reasons: promotedReasons, note: promotedReasons.length > 0 ? "handoff persistence recovered on a source-confirmed-current candidate — the withheld restart signal is now published" : "boot publication retry completed — LKG now durable, no restart needed (nothing was withheld)" });
-                        planeDeferredNoHandoff = undefined;
-                    }
-                }
-                if (r) {
-                    const promptsRaw = r.effective.prompts;
-                    const promptsGate = promptsRaw !== undefined ? validatePromptsDomain(promptsRaw) : { ok: true };
-                    const badDomains = [
-                        ...new Set([...(r.domainErrors ?? []).map((de) => de.domain), ...(promptsGate.ok ? [] : ["prompts"])]),
-                    ]
-                        .sort()
-                        .join(",");
-                    if (badDomains) {
-                        if (lastRejectedCandidate?.version !== r.effective.version || lastRejectedCandidate.domains !== badDomains) {
-                            lastRejectedCandidate = { version: r.effective.version, domains: badDomains, at: Date.now() };
-                            logger.warn("config_candidate_rejected", {
-                                version: r.effective.version,
-                                domains: badDomains,
-                                errors: [
-                                    ...(r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error })),
-                                    ...(promptsGate.ok ? [] : [{ domain: "prompts", error: promptsGate.error }]),
-                                ],
-                                lkgVersion: latestEffective?.version ?? "(env)",
-                                note: "candidate rejected whole (§9.5-5) — live config keeps the last-known-good; fix the named files to unblock",
-                            });
-                        }
-                        return;
-                    }
-                    lastRejectedCandidate = undefined;
-                    if (ccRef?.dryRun) {
-                        logEffectiveDiff(config, r.effective, logger);
-                        ccEtag = r.etag;
-                    }
-                    else {
-                        const planeDeferred = (runnerTierFrozen || planeHasActiveTiers(r.effective)) && modelPlaneChanged(appliedPlaneEff, r.effective);
-                        applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferred ? { deferModelPlane: true } : {}) });
-                        if (planeDeferred) {
-                            logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner: the changed model plane (models/roles/tiers/default) is NOT hot-applied — admission stays on the Runner's generation; restart applies the new plane (models-tiers restart signal rides /health)" });
-                        }
-                        else {
-                            appliedPlaneEff = r.effective;
-                            planeDeferredNoHandoff = undefined;
-                        }
-                        await adoptCenterPrompts(r.effective, "refresh");
-                        if (!planeDeferred)
-                            markRosterLanded(r.effective);
-                        mutateInPlace(pricing, buildPricing(config.models));
-                        keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-                        const lkgPersisted = await persistLkgDurable(r.effective, r.etag);
-                        const reasons = restartReasons(effective, r.effective);
-                        const skillsChangeDetected = reasons.includes("skills");
-                        if (bootSkillStale && !skillsChangeDetected)
-                            reasons.push("skills");
-                        if (planeDeferred) {
-                            if (lkgPersisted) {
-                                if (!reasons.includes("models-tiers"))
-                                    reasons.push("models-tiers");
-                                planeDeferredNoHandoff = undefined;
-                            }
-                            else {
-                                const blocked = reasons.splice(0, reasons.length);
-                                planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), ...(blocked.length > 0 ? { blocked } : {}), planeDeferred: true, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                                logger.warn("models_tiers_deferred_no_handoff", { version: r.effective.version, blockedReasons: blocked, note: "plane deferred but no NEXT-BOOT handoff (LKG disabled/unwritable, or storage not declared restart-surviving — set CONFIG_LKG_DURABLE=true) — the WHOLE restart signal is withheld (it would loop); the old generation keeps serving" });
-                            }
-                        }
-                        else if (lkgSurvivesRestart && !lkgPersisted) {
-                            const blocked = reasons.splice(0, reasons.length);
-                            planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                            logger.warn("restart_candidate_publication_incomplete", { version: r.effective.version, blockedReasons: blocked, note: "durable LKG declared but the candidate's publication is incomplete (skill bodies unverified) — restart signal withheld; retried every tick until the cache completes" });
-                        }
-                        else if (!planeDeferred && !lkgSurvivesRestart && bootSkillStale && !skillsChangeDetected && !lastPrewarmBodiesVerified) {
-                            const i = reasons.indexOf("skills");
-                            if (i >= 0) {
-                                reasons.splice(i, 1);
-                                planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked: ["skills"], candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                                logger.warn("config_boot_skill_debt_withheld", { version: r.effective.version, note: "boot skill debt still unproven on a non-durable deployment (body cache does not verify) — skills restart withheld this tick; re-verified each tick and published once the bodies prove fetchable" });
-                            }
-                        }
-                        if (reasons.length === 0) {
-                            pendingRestart = undefined;
-                        }
-                        else if (!pendingRestart || pendingRestart.reasons.join(",") !== reasons.join(",")) {
-                            pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
-                        }
-                        else {
-                            pendingRestart = { ...pendingRestart, version: r.effective.version };
-                        }
-                        logger.info("sema_registry_refreshed", {
-                            version: r.effective.version,
-                            note: "teams + runtime governance + models/roles/roster hot-applied; skills/mcp/runtime-gates/scenarios are restart-to-apply",
-                            ...(pendingRestart ? { restartRequired: true, restartReasons: pendingRestart.reasons } : {}),
-                        });
-                        latestEffective = r.effective;
-                        ccEtag = r.etag;
-                    }
-                }
-            }
-            catch (err) {
-                logger.warn("sema_registry_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
-            }
-            finally {
-                refreshInFlight = false;
-            }
-        };
-        const ccTimer = setInterval(() => void refreshTick(), 60_000);
-        ccTimer.unref?.();
-        const deferredBootApply = async (r) => {
-            if (!r)
-                return;
-            if (refreshInFlight)
-                return;
-            refreshInFlight = true;
-            try {
-                await deferredBootApplyInner(r);
-            }
-            finally {
-                refreshInFlight = false;
-            }
-        };
-        const deferredBootApplyInner = async (r) => {
-            const promptsRaw = r.effective.prompts;
-            const promptsGate = promptsRaw !== undefined ? validatePromptsDomain(promptsRaw) : { ok: true };
-            if ((r.domainErrors ?? []).length > 0 || !promptsGate.ok) {
-                logger.warn("config_boot_deferred_candidate_rejected", {
-                    version: r.effective.version,
-                    errors: [...(r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error })), ...(promptsGate.ok ? [] : [{ domain: "prompts", error: promptsGate.error }])],
-                    note: "late boot pull carried an invalid candidate — env fallback keeps serving; the refresh cadence re-judges the same tree (etag not advanced)",
-                });
-                return;
-            }
-            if (ccRef?.dryRun) {
-                logEffectiveDiff(config, r.effective, logger);
-                ccEtag = r.etag;
-                return;
-            }
-            const planeDeferredLate = (runnerTierFrozen || planeHasActiveTiers(r.effective)) && modelPlaneChanged(appliedPlaneEff, r.effective);
-            applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferredLate ? { deferModelPlane: true } : {}) });
-            if (planeDeferredLate)
-                logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner (env tiers): the late-boot center model plane is NOT hot-applied — restart applies it" });
-            else {
-                appliedPlaneEff = r.effective;
-                planeDeferredNoHandoff = undefined;
-            }
-            await adoptCenterPrompts(r.effective, "boot-deferred");
-            if (!planeDeferredLate)
-                markRosterLanded(r.effective);
-            mutateInPlace(pricing, buildPricing(config.models));
-            keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-            effective = r.effective;
-            latestEffective = r.effective;
-            ccEtag = r.etag;
-            const lkgPersistedLate = await persistLkgDurable(r.effective, r.etag);
-            const reasons = restartReasons(undefined, r.effective);
-            if (planeDeferredLate) {
-                if (lkgPersistedLate) {
-                    if (!reasons.includes("models-tiers"))
-                        reasons.push("models-tiers");
-                    planeDeferredNoHandoff = undefined;
-                }
-                else {
-                    const blocked = reasons.splice(0, reasons.length);
-                    planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), ...(blocked.length > 0 ? { blocked } : {}), planeDeferred: true, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                    logger.warn("models_tiers_deferred_no_handoff", { version: r.effective.version, blockedReasons: blocked, note: "late-boot plane deferred but no NEXT-BOOT handoff (see CONFIG_LKG_DURABLE) — the WHOLE restart signal is withheld (it would loop); old generation keeps serving" });
-                }
-            }
-            else if (planeDeferredLate === false && lkgSurvivesRestart && !lkgPersistedLate) {
-                const blocked = reasons.splice(0, reasons.length);
-                planeDeferredNoHandoff = { version: r.effective.version, since: planeDeferredNoHandoff?.since ?? Date.now(), blocked, candidate: r.effective, ...(r.etag !== undefined ? { candidateEtag: r.etag } : {}) };
-                logger.warn("restart_candidate_publication_incomplete", { version: r.effective.version, blockedReasons: blocked, note: "late-boot candidate publication incomplete on a durable-declared deployment — restart signal withheld; retried every tick" });
-            }
-            if (reasons.length > 0)
-                pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
-            logger.info("config_loaded_deferred", { source: configProvider.kind, version: r.effective.version, models: (r.effective.models?.models ?? []).filter((m) => m.enabled !== false).length, ...(reasons.length > 0 ? { restartRequired: true, restartReasons: reasons } : {}) });
-        };
-        if (bootConfigPending)
-            void bootConfigPending.then((r) => (lkgBooted ? refreshTick(r) : deferredBootApply(r)), () => { });
-    }
-    let keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-    if (process.env.ANTHROPIC_AUTH_TOKEN && !process.env.ANTHROPIC_API_KEY && (Object.keys(config.modelApiKeys).length > 0 || Object.keys(config.modelApiKeyEnv).length > 0)) {
-        logger.warn("per_model_key_bearer_gateway_combo", {
-            perModelKeys: Object.keys(config.modelApiKeys).length + Object.keys(config.modelApiKeyEnv).length,
-            note: "ANTHROPIC_AUTH_TOKEN (Bearer) deployment with per-model keys: core's per-call auth REPLACES the Authorization header with x-api-key for those models — a Bearer-only gateway will 401 them. Remove the per-model key for such models, or use a gateway accepting x-api-key.",
-        });
-    }
-    const mysqlPool = backend?.mysqlPool();
-    const auditPgPool = backend?.pgPool();
-    const auditLocalRoot = backend?.kind === "local" ? (config.localDataRoot ?? localRoot) : undefined;
-    const ownerAware = sessionStore;
-    const sessionAudit = mysqlPool || auditPgPool || auditLocalRoot
-        ? async (sessionId) => {
-            const audit = mysqlPool
-                ? await buildSessionAudit(mysqlPool, sessionId)
-                : auditPgPool
-                    ? await buildSessionAuditPg(auditPgPool, sessionId)
-                    : await buildSessionAuditLocal(auditLocalRoot, sessionId);
-            if (!audit)
-                return undefined;
-            return { ...audit, owner: (await ownerAware.ownerOf?.(sessionId)) ?? null };
-        }
-        : undefined;
-    const sessionWatchRegistry = ownerAware.getHead && ownerAware.ownerOf
-        ? new SessionWatchRegistry(async (sid) => (await ownerAware.getHead(sid)) ?? { owner: undefined, leafId: null }, {
-            hotMs: posIntEnv(process.env.SESSION_EVENTS_HOT_MS, 200),
-            warmMs: posIntEnv(process.env.SESSION_EVENTS_WARM_MS, 2000),
-            maxWatchedSessions: posIntEnv(process.env.SESSION_EVENTS_MAX_PROBES, 512, 100_000),
-        })
-        : undefined;
-    setLeafAdvanceListener(sessionWatchRegistry ? (sid, leaf, owner, seq) => sessionWatchRegistry.notifyLocal(sid, leaf, owner, seq) : undefined);
-    const purgeSession = ownerAware.deleteSession
-        ? async (sessionId, owner) => {
-            const runs = runStore ? await runStore.deleteBySession(sessionId, owner) : { removed: 0 };
-            if ("active" in runs)
-                return { active: runs.active };
-            if (checkpointStore)
-                await checkpointStore.deleteBySession(sessionId, owner);
-            if (toolResultStore)
-                await toolResultStore.deleteBySession?.(sessionId);
-            if (resumeAnchorStore)
-                await resumeAnchorStore.deleteBySession(sessionId);
-            if (approvalExemptionStore)
-                await approvalExemptionStore.deleteBySession(sessionId);
-            if (sessionPolicyStore?.deleteBySession)
-                await sessionPolicyStore.deleteBySession(sessionId);
-            if (taskAttachmentStore)
-                await taskAttachmentStore.deleteBySession(sessionId);
-            if (fileSnapshotStore?.deleteBySession)
-                await fileSnapshotStore.deleteBySession(sessionId);
-            if (workflowCompletionInbox)
-                await workflowCompletionInbox.purge(sessionId, owner ?? null).catch((err) => logger.warn("workflow_completion_inbox_purge_failed", { sessionId, err: String(err) }));
-            await purgeScratchpadDir(config.localDataRoot ?? localRoot, sessionId);
-            try {
-                const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, owner ?? "default");
-                if (reaped > 0)
-                    logger.info("session_background_reaped", { sessionId, reaped });
-            }
-            catch (err) {
-                logger.warn("session_background_reap_failed", { sessionId, err: String(err) });
-            }
-            const historyDeleted = await ownerAware.deleteSession(sessionId, owner);
-            sessionWatchRegistry?.dropSession(sessionId);
-            return { deleted: historyDeleted || runs.removed > 0 };
-        }
-        : undefined;
-    const instrumentDegenerate = mysqlPool ? makeDegenerateInstrument(mysqlPool, metrics, logger) : undefined;
-    const planCacheProbe = new PlanCacheProbe(metrics, logger);
-    const leaderMinio = process.env.MINIO_ENDPOINT && process.env.MINIO_ACCESS_KEY && process.env.MINIO_SECRET_KEY
-        ? {
-            s3: {
-                endpoint: process.env.MINIO_ENDPOINT,
-                bucket: process.env.MINIO_BUCKET ?? "workspaces",
-                accessKey: process.env.MINIO_ACCESS_KEY,
-                secretKey: process.env.MINIO_SECRET_KEY,
-                ...(process.env.MINIO_REGION ? { region: process.env.MINIO_REGION } : {}),
-            },
-        }
-        : {};
-    const leaderProvider = config.remoteExec?.provider;
-    const leaderEndpoint = config.leaderEnabled &&
-        (leaderProvider === "e2b" ||
-            (leaderProvider === "k8s" && "s3" in leaderMinio && executionEnvFactory) ||
-            (leaderProvider === "host" && executionEnvFactory))
-        ? createLeaderEndpoint(createLeaderRunner({
-            brain, models: config.models, roles: config.roles, pricing, logger,
-            fanoutEnabled: config.leaderFanoutEnabled,
-            ...((process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID)
-                ? { routerModel: (process.env.MODEL_ROUTER_ID || process.env.MODEL_CHEAP_ID) }
-                : {}),
-            ...(leaderProvider === "e2b" ? { e2bApiKey: config.remoteExec.apiKey } : {}),
-            ...(executionEnvFactory ? { envFactory: executionEnvFactory } : {}),
-            ...leaderMinio,
-            ...(toolResultStore ? { toolResultStore } : {}),
-            ...(leaderProvider === "k8s" ? { workspace: "/workspace" } : {}),
-            sessionStore,
-            ...(checkpointStore && config.approvalRequire.length > 0
-                ? {
-                    durable: {
-                        checkpointStore,
-                        requireApproval: config.approvalRequire,
-                        deny: config.approvalDeny,
-                        autoBudget: config.approvalAutoBudget,
-                        neverAuto: config.approvalNeverAuto,
-                        ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
-                    },
-                }
-                : {}),
-        }), {
-            logger,
-            requiredFields: ["objective", "durableRemote", "testCmd", "seedCmd", "baseSha"],
-        })
-        : undefined;
-    if (leaderEndpoint)
-        logger.info("leader_endpoint_enabled", { provider: leaderProvider, mode: "s3" in leaderMinio ? "factory" : "static" });
+    // design/158 A10 尾刀:60s refresh 循环 + boot-deferred 到货续接搬到 boot/config-center.ts(逐字)。
+    // ⚠️ 位置即契约:必须在 new Runner 之后 —— runnerTierFrozen 与构造函数读的是同一 config 代际。
+    configCenter.startRefreshLoop({ runnerTierFrozen, pricing });
+    // design/158 A10 尾刀:per-model key resolver 首建(+ Bearer 网关组合告警)搬到 boot/config-center.ts。
+    // ⚠️ 位置即契约:首建读的必须是 boot apply **之后**的 config.modelApiKeyEnv/modelApiKeys。
+    configCenter.initKeyResolver();
+    // design/158 A10:session 只读/删除面搬到 src/boot/session-faces.ts(逐字;watch→purge 次序即契约,见该文件头注)。
+    const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
+        config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
+        resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileSnapshotStore,
+        workflowCompletionInbox,
+    });
+    // design/158 A10:leader 段搬到 src/boot/leader.ts(逐字)。
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore });
+    // Graceful drain: shared mutable state — SIGTERM flips `draining` (shutdown below), createHttpServer
+    // assigns `inflight` (live leg count on this instance), /health + the submit 503 gate read it.
     const drainState = { draining: false };
+    // 鉴权桥(registry-core api/auth-bridge):SEMA_REGISTRY_URL 在位即点亮(零新配置——worker 已信
+    // registry 的 effective config,同一信任根延伸到其 JWKS);split 部署用 AUTH_BRIDGE_ISSUER/JWKS_URL/AUDIENCE
+    // 显式覆盖。缺 registry(纯 env 部署)=分支不存在,bearer 行为与今天字节一致。
     const authBridgeIssuer = process.env.AUTH_BRIDGE_ISSUER || config.configCenter?.baseUrl;
     const registryJwtVerifier = authBridgeIssuer
         ? createRegistryJwtVerifier({
@@ -1836,520 +641,170 @@ async function main() {
         : undefined;
     if (registryJwtVerifier)
         logger.info("auth_bridge_enabled", { issuer: authBridgeIssuer });
+    // asyncRewake wake 管道 holder:server 启动时装 deliver(session→本副本活流 steer);createTaskHooks 的
+    // ctx.wake 闭包经它投递(main 建壳/server 填实,双向不循环依赖)。
     const hookWakeBus = {};
+    // ═══════════ design/158 A8:ServiceDeps 分组装配(七组窄接口)═══════════
+    // 每组一个**带类型标注**的中间 const —— 标注位触发 TS 多余属性检查,键放错组当场编译红。
+    // (平铺形做不到:69 键的全可选面里任何键名都「属于」它,于是键落错家/从未接线只能靠源码钉
+    // 逐个盯 —— 1.300/1.301/1.304/1.307/1.310 五起真缺陷都是这个病族。)组形状门见
+    // test/deps-literal-shape-gate.test.ts;消费点仍读平铺 `deps.x`(createHttpServer 入口摊平)。
+    /** durable 持久面(键 present ⇔ 路由/能力位在场;absent ⇒ 501 诚实缺席) */
     const stores = {
         runStore,
-        resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
+        resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined, // E18 resume-at eventId→entryId map (tidb/pg/local)
         approvalStore,
-        approvalExemptionStore: approvalExemptionStore ? approvalExemptionStore : undefined,
+        approvalExemptionStore: approvalExemptionStore ? approvalExemptionStore : undefined, // decide remember="session" + list/revoke
         checkpointStore,
-        sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined,
+        sessionPolicyStore: sessionPolicyStore ? sessionPolicyStore : undefined, // E6 operator session-rule store (PUT/GET /v1/sessions/:id/policy)
+        // E19 cap: core's gate-split (1.134.0) REMOVED the isRemoteExecutionEnv skip — core now snapshots each
+        // completed turn + restores on resumeAt for ANY ExecutionEnv when fileSnapshotStore is wired (captureManifest/
+        // applyManifest run over any env's FileSystem ops; a 30s timeout bounds a slow remote walk). So rewind works for
+        // host/e2b/k8s/ssh/adb/local-docker AND the in-process worker → advertise `rewindFiles` whenever the store is wired.
         fileSnapshotStore: fileSnapshotStore ? fileSnapshotStore : undefined,
-        taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined,
+        taskAttachmentStore: taskAttachmentStore ? taskAttachmentStore : undefined, // D-1 上传/取回/删除三动词面
+        // design/153 件3d(/decide parked 赎回腿):durable bg 行店 + boot 裸 Agent 工具,与 RunnerDeps/
+        // scenarioDeps 同实例(claim/expire/consumeParkedFlip 作用于同一行)。任一缺席=分支不存在。
         backgroundAgentStore: backgroundAgentStore ? backgroundAgentStore : undefined,
+        // §0.5 session-ownership: the durable session abstraction (SessionRepo-style list/fork/delete) + the delete
+        // coordinator. `ownerAware` is the (possibly cache-wrapped) session store; both delegate to the DB-backed
+        // TiDB/PG store. Undefined-safe: on an in-memory dev store these carry no SessionRepo ops → the routes 501.
         sessionStorage: ownerAware,
         workflowRunStore: workflowRunStore ? workflowRunStore : undefined,
-        workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined,
+        workflowJournalStore: workflowJournalStore ? workflowJournalStore : undefined, // [1402] journal 读面(GET /v1/workflows/:id/journal 数据源,与 runner 同实例)
         imageIndex,
         imageBakes,
-        outcomeSink: outcomeSink ? outcomeSink : undefined,
-        sendFileLedger: sendFileLedger ? sendFileLedger : undefined,
+        outcomeSink: outcomeSink ? outcomeSink : undefined, // P2: GET /v1/outcomes 读面(design/73 §7.2 仪表盘底料)
+        sendFileLedger: sendFileLedger ? sendFileLedger : undefined, // SendUserFile 账本读面:GET /v1/sendfile-links(owner-scope 镜像 sessions list)
+        // 2c session-sync (P1d): the WHOLE backend so the /v1/sessions/:id/sync/* routes can call exportSession/
+        // importSession (they fan out across session entries + fileSnapshot + sessionPolicy + resumeAnchor, which must
+        // come from ONE backend in the §8 atomic order). Undefined-safe: the env-only/no-backend worker 501s the routes.
         backend: backend ? backend : undefined,
     };
+    /** 进程内活体协调面(本副本 only,重启即空:HITL 协调器/可 steer 句柄注册表/总线/收件箱) */
     const coordinators = {
-        elicitation: elicitation ? elicitation : undefined,
-        question: question ? question : undefined,
-        toolApproval: toolApproval ? toolApproval : undefined,
-        workflowAgentRegistry: workflowAgentRegistry ? workflowAgentRegistry : undefined,
-        subagentSteerRegistry,
-        workflowCompletionInbox: workflowCompletionInbox ? workflowCompletionInbox : undefined,
+        elicitation: elicitation ? elicitation : undefined, // E23: live-only inbound-elicitation coordinator (respond route + ALS wraps)
+        question: question ? question : undefined, // §4④: AskUserQuestion live coordinator (respond route + ALS wraps on streaming legs)
+        toolApproval: toolApproval ? toolApproval : undefined, // [816]/[820]②: live tool-approval coordinator (respond route + ALS wrap on the sync streaming leg)
+        workflowAgentRegistry: workflowAgentRegistry ? workflowAgentRegistry : undefined, // SVC-5: steerable workflow-agent handle registry
+        subagentSteerRegistry, // C2 (core 1.219): steerable Task-subagent handle registry (POST /v1/runs/:id/subagents/:target/steer)
+        workflowCompletionInbox: workflowCompletionInbox ? workflowCompletionInbox : undefined, // P1 ①②: drain → workflow_complete frame on stream-open
         fleetBus,
-        sessionWatch: sessionWatchRegistry ? sessionWatchRegistry : undefined,
+        // [1196] session 级 SSE 订阅:watch registry(N 订阅共享一条探针,自适应拍距,无订阅即停)。谓词与
+        // /head 探针同门(getLeafId+ownerOf);缺 store 面不建=路由 501+capabilities.sessionEvents=false。
+        sessionWatch: sessionWatchRegistry ? sessionWatchRegistry : undefined, // [1196] 建于 purgeSession 之前(delete 即 dropSession 的同副本围栏)
         hookWakeBus,
-        sendUserFile: sendUserFileEmitter ? sendUserFileEmitter : undefined,
+        sendUserFile: sendUserFileEmitter ? sendUserFileEmitter : undefined, // SendUserFile 切片2:file_link 帧 ALS(bg/sync 腿 wrap)
         leaderEndpoint,
-        sessionTitler: sessionTitler ? sessionTitler : undefined,
+        sessionTitler: sessionTitler ? sessionTitler : undefined, // fire-and-forget auto-title at first submit
     };
+    /** 函数/构件缝(main 把跨子系统的动作编译成一个可调用面交给路由) */
     const seams = {
         sessionAudit,
         purgeSession: purgeSession ? purgeSession : undefined,
+        // [1488]③(b): bg agent-handle read face — GET /v1/runs/:id/subagents/:handle/output → the same registry
+        // face the TaskOutput tool reads (defaultTaskRegistry is the process singleton every run leg registers
+        // its background children into). Access tuple is derived from the run row in server.ts, never the caller.
+        // codex R2: kind-gated BEFORE the poll (backgroundAgentOutput) — generic pollTask has side effects on
+        // other kinds (workflow onServedTerminal ack, bash output-cursor advance).
         subagentTaskOutput: (handle, access) => backgroundAgentOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
+        // [1499] CC TaskOutput/TaskStop 人侧对位 — the GENERIC task-handle verbs over the same registry singleton
+        // (kind gate at the seam: bash/monitor/agent pass, workflow refused — journal face owns it).
         taskHandleOutput: (handle, access) => taskHandleOutput(defaultTaskRegistry, handle, access, backgroundAgentStore),
         taskHandleStop: (handle, access) => taskHandleStop(defaultTaskRegistry, handle, access, backgroundAgentStore),
+        // 142-S5 §1.4: GET /v1/memory/export 数据源(DB memory plane only;file 形态 route 501)。
         memoryExport: memoryExportBackend ? (scope) => exportMemoryScope(memoryExportBackend, scope) : undefined,
+        // 142-S2.5: POST /v1/memory/sync/:scope 执行位(同一 DB entry plane + sync_cursors 游标面;
+        // plan 随数据走——core 纯函数在 performMemorySync 内直调,file 形态 route 501)。
         memorySync: memoryExportBackend && memorySyncCursors
             ? (scope, syncReq) => performMemorySync(memoryExportBackend, memorySyncCursors, scope, syncReq)
             : undefined,
+        // sessionMirror 观测面(server 非执法端,论证在 ServiceDeps.sessionMirrorRuling):
+        // 与 executionRuling 同车同缓存(零额外 center RTT);无 center/dry-run ⇒ 不接线,观测面暗、零行为差。
         sessionMirrorRuling: principalCaps
             ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
             : undefined,
         instrumentDegenerate,
-        sideQueryAccounting,
+        sideQueryAccounting, // [1469] side-query 四路 sink 记账(与 tracer 同源装配)
         parkedReviveTool: parkedReviveTool ? parkedReviveTool : undefined,
+        // design/158 S2(F-1)修:工厂在 :2308 造好、server.ts 消费分支在等,但从未进本实参段——HIGH-1
+        // 同族第二例(条件 spread 的键从不接线,编译期无声)。缺席后果=带 requiresParentConstraint 的
+        // parked checkpoint 重启后恒被 core pre-CAS 门拒,**不可赎回**。接线钉:test/parked-revive-gate-wiring.test.ts。
         parkedReviveInheritedGate: parkedReviveInheritedGate ? parkedReviveInheritedGate : undefined,
     };
+    /** 可观测面(全体 fail-open,观测失败绝不改业务面行为) */
     const observability = {
         logger,
         metrics,
-        modelUsage: modelUsageTracker,
-        promptManifests: promptManifestTracker,
+        modelUsage: modelUsageTracker, // E8: shared with createTracer above → runs drain it into the modelUsage echo
+        promptManifests: promptManifestTracker, // [998]②: shared with createTracer → the durable legs drain prompt_assembled events
         planCacheProbe,
     };
+    /** 准入/治理面(每件都是拒绝的权力;缺席 = 该道门不存在,不是「默认放行的门」) */
     const governance = {
         authorize,
         registryJwtVerifier: registryJwtVerifier ? registryJwtVerifier : undefined,
         rateLimiter,
         costQuota,
-        fleetLease: fleetLease ? fleetLease : undefined,
+        fleetLease: fleetLease ? fleetLease : undefined, // lease admission 门(提交面,镜像 quotaExceeded)
     };
+    /** 部署自述面(/health + /v1/capabilities + 提交前置门读的部署事实;多为 live getter) */
     const deployment = {
+        // 海外 pilot 实机发现:/health 曾 verbatim 回显 sessionBackend 枚举——auto/DB_BACKEND 收编把它
+        // coerce 成 LABEL "tidb"(泛指 durable),pg 部署上误读成 SQL-TiDB 带偏排障。回显有效 store(与 listening
+        // 日志 session 标签同款诚实修)。
         sessionStoreLabel: config.sessionBackend === "tidb" && backend ? `durable(${backend.kind})` : config.sessionBackend,
-        modelReady: () => modelReadyState.ready,
-        scenarioDetails,
-        workflowsCapable,
+        modelReady: () => configCenter.modelReady(), // boot ready 门:roster 未落地=计费提交 503+health ready:false
+        scenarioDetails, // 场景详情只读面(内建+center 同判定源)
+        workflowsCapable, // ① core split: capabilities.workflows = engine-can (workflowsCapability); workflowsList = store (below)
         instanceId,
+        // Capability discovery: the deployment facts only main knows. Store-derived booleans
+        // (asyncRuns/artifacts/approvals/leader) are computed inside the server from the deps themselves.
+        // pricingConfigured disambiguates costMicroUsd=0 ("free run" vs "MODEL_COST_* not configured") —
+        // it is worker-level config, so one flag here beats decorating every result's stats.
         capabilities: {
             version: serviceVersion(),
             scenarios: Object.keys(scenarios),
             pricingConfigured: Object.values(pricing).some((p) => Object.values(p).some((v) => typeof v === "number" && v > 0)),
         },
-        restartState: () => pendingRestart,
-        planeDeferredState: () => planeDeferredNoHandoff,
+        // center: orchestrator polls GET /health for this — set by the sema-registry refresh loop when a
+        // pull's restart-to-apply slices differ from boot. A live getter (not a snapshot) so /health always reads current.
+        restartState: () => configCenter.restartState(),
+        planeDeferredState: () => configCenter.planeDeferredState(), // codex R18: /health.modelPlaneDeferred (stuck-deferred plane, no handoff)
+        // shared drain state — SIGTERM flips `draining`, createServer assigns `inflight`, /health mirrors it.
         drainState,
-        storeDegraded: storeBackendDegraded,
+        storeDegraded: storeBackendDegraded, // S5: /health twin of the store_backend_degraded gauge
     };
+    /** 数值旋钮(缺省写在消费点,此处只承载覆写) */
     const knobs = {
+        // (a) SQL 默认店的 per-blob 帽 → PUT /sync/blobs 前置 413(与 SqlBlobBackend 方言默认同源:
+        // 显式 env > tidb 的 6MiB entry-限默认;pg 默认无帽=不前置)。
+        // 🔴 复审 2026-07-28(E-HIGH-1)修:此键是 **ServiceDeps** 字段,原先被 spread 进 `runnerDeps`
+        // (core 的 RunnerDeps 无此字段,条件 spread 绕过 TS 多余属性检查 ⇒ 编译期无声)⇒ HTTP 面恒
+        // undefined、413 前置是死枝、超帽仍走 502。落错家的死键病族(verify-cost 先例)——接线钉见
+        // test/review-2026-07-28-batch1.test.ts。
         snapshotBlobSqlCapBytes: backend && backend.kind !== "local" && !config.snapshotBlobStore
             ? (config.snapshotBlobSqlMaxBytes ?? (backend.kind === "mysql" ? SQL_BLOB_DEFAULT_MAX_BYTES : undefined))
             : undefined,
+        // 帽只在 watch 面在场时才有意义(缺席时路由 501,读不到它)——保持与原条件段同门,不单独接线。
         sessionEventsMaxConnections: sessionWatchRegistry ? posIntEnv(process.env.SESSION_EVENTS_MAX_CONNS, 256, 100_000) : undefined,
     };
-    const resolveSpec = async (body, _req, auth, opts) => {
-        const requested = gateScenarioRequest(await principalCaps?.scenarioRuling(auth?.principal), body.scenario, config.defaultScenario);
-        gateExecutionLane(await principalCaps?.executionRuling(auth?.principal), config.remoteExec?.provider ?? "in-process");
-        const scenarioName = scenarios[requested] ? requested : "default";
-        if (scenarioName === "autonomous")
-            logger.warn("scenario_autonomous_deprecated", { alias: "code", note: "renamed by [891]; alias keeps finalVerification pinned — pass scenario:'code' (+ explicit finalVerification if wanted)" });
-        const cap = selectScenario(scenarios, scenarioName)(body, auth?.principal);
-        const centerDecls = centerPrompts?.declarations;
-        const appendLessPack = centerDecls
-            ? centerIdentityAssembled(centerDecls, scenarioName, hasConstitutionAnchors)
-            : providerDropsAppend(cap.promptProvider, typeof body.systemPrompt === "string" ? body.systemPrompt : undefined);
-        const acceptedAppend = acceptAppendSystemPrompt(body.appendSystemPrompt, (detail) => logger.warn("append_system_prompt_dropped", { detail, sessionId: auth?.sessionId ?? null }), appendLessPack);
-        const objective = typeof body.objective === "string" ? body.objective : "";
-        const parsedSettings = parseTaskSettings(body.settings);
-        if (opts?.leg === "fresh" && appendLessPack) {
-            const riderPresent = typeof body.appendSystemPrompt === "string" && body.appendSystemPrompt.length > 0;
-            if (riderPresent || parsedSettings.settings?.outputStyle) {
-                throw new HttpError(400, `${riderPresent ? "appendSystemPrompt" : "settings.outputStyle"} is not supported when the effective prompt is already assembled (constitution anchors in systemPrompt, or a center assembled-identity pack for this scenario): the assembler's pass-through path cannot mount the append slot — fold it into the assembled prompt instead`);
-            }
-        }
-        if (parsedSettings.deferred.length > 0) {
-            logger.warn("task_settings_deferred", { fields: parsedSettings.deferred, sessionId: auth?.sessionId ?? null });
-        }
-        let attachmentNotice;
-        {
-            const reqAtt = body.attachmentIds;
-            if (reqAtt !== undefined) {
-                if (!Array.isArray(reqAtt) || !reqAtt.every((x) => typeof x === "string" && x.length > 0 && x.length <= 64)) {
-                    throw new HttpError(400, "`attachmentIds` must be an array of attachment ids (strings)");
-                }
-                if (reqAtt.length > 16)
-                    throw new HttpError(400, "`attachmentIds` exceeds the per-task limit (16)");
-                if (reqAtt.length > 0) {
-                    if (!taskAttachmentStore)
-                        throw new HttpError(501, "attachmentIds require a store backend (DB_BACKEND=tidb|pg|local)");
-                    if (!auth?.sessionId)
-                        throw new HttpError(400, "`attachmentIds` requires a session-resolving deployment (no authorizer session)");
-                    const sid = auth.sessionId;
-                    const r = await bindAttachmentsForTask({
-                        store: taskAttachmentStore,
-                        owner: auth?.principal ?? "default",
-                        ids: reqAtt,
-                        sessionId: sid,
-                        leg: opts?.leg === "fresh" ? "fresh" : "resume",
-                        nowMs: Date.now(),
-                        onMissing: (id) => {
-                            if (opts?.leg === "fresh")
-                                throw new HttpError(400, `attachment not found: ${id}`);
-                            logger.warn("attachment_missing_on_resume", { sessionId: sid, id });
-                        },
-                    });
-                    attachmentNotice = r.notice;
-                }
-            }
-        }
-        const execLane = config.remoteExec?.provider ?? "in-process";
-        if (typeof body.cwd === "string" && body.cwd.length > 0 && auth?.sessionId) {
-            if (cwdHonored(config) && isValidCwd(body.cwd))
-                setSessionCwd(auth.sessionId, body.cwd);
-            else if (inProcessSingleUserLane(config) && isValidCwd(body.cwd) && satisfiedByProcessCwd(body.cwd, realpathSync))
-                logger.debug("task_cwd_inherited", { lane: execLane, sessionId: auth.sessionId });
-            else
-                logger.warn("task_cwd_ignored", { honored: cwdHonored(config), lane: execLane, sessionId: auth.sessionId });
-        }
-        if (parsedSettings.settings?.shellEnv && auth?.sessionId) {
-            if (cwdHonored(config))
-                setSessionShellEnv(auth.sessionId, parsedSettings.settings.shellEnv);
-            else if (inProcessSingleUserLane(config)) {
-                const requested = parsedSettings.settings.shellEnv;
-                const mismatched = shellEnvMismatchCount(requested, process.env);
-                if (mismatched === 0)
-                    logger.debug("task_shell_env_inherited", { lane: execLane, keys: Object.keys(requested).length, sessionId: auth.sessionId });
-                else
-                    logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, mismatchedKeys: mismatched, sessionId: auth.sessionId });
-            }
-            else
-                logger.warn("task_shell_env_ignored", { honored: false, lane: execLane, sessionId: auth.sessionId });
-        }
-        const taskHooks = (() => {
-            const hc = parsedSettings.settings?.hooks;
-            if (!hc)
-                return undefined;
-            if (config.requirePrincipal === true) {
-                logger.warn("task_hooks_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
-                return undefined;
-            }
-            const effMode = coercePermissionMode(body.permissionMode) ?? parsedSettings.settings?.permissions?.defaultMode;
-            return createTaskHooks(hc, {
-                logger,
-                sessionId: auth?.sessionId ?? "",
-                cwd: (auth?.sessionId ? perSessionCwd.get(auth.sessionId) : undefined) ?? process.cwd(),
-                ...(effMode ? { permissionMode: effMode } : {}),
-                ...(parsedSettings.settings?.shellEnv ? { shellEnv: parsedSettings.settings.shellEnv } : {}),
-                hookLlm,
-                hookAgent,
-                onHookNotice: (n) => fleetBus.publishHookNotice({
-                    ...n,
-                    ...(auth?.principal ? { ownerScope: auth.principal } : {}),
-                    ...(auth?.sessionId ? { ownerSessionId: auth.sessionId } : {}),
-                }),
-                ...(auth?.sessionId
-                    ? {
-                        wake: async (text) => hookWakeBus.deliver
-                            ?
-                                hookWakeBus.deliver(auth.sessionId, `[hook asyncRewake] ${redactSecrets(text)}`)
-                            : false,
-                    }
-                    : {}),
-            });
-        })();
-        const rawAddDirs = body.additionalDirectories;
-        const additionalDirectories = cwdHonored(config) ? parseAdditionalDirectories(rawAddDirs) : undefined;
-        if (rawAddDirs !== undefined && !cwdHonored(config)) {
-            logger.warn("task_additional_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
-        }
-        const wireCatalog = expandTiers(config.models, config.tiers) ?? config.models;
-        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog);
-        if (picked.unknownExplicit !== undefined) {
-            metrics.inc("task_model_unknown_fallback_total");
-            logger.warn("task_model_unknown_fallback", { requested: picked.unknownExplicit.slice(0, 120), fallback: picked.model, sessionId: auth?.sessionId ?? null });
-        }
-        if (Array.isArray(body.images) && body.images.length > 0 && !modelSupportsImages(wireCatalog[picked.model])) {
-            metrics.inc("images_omitted_total", { model: picked.model });
-            logger.warn("images_omitted_no_vision_model", { model: picked.model, count: body.images.length });
-        }
-        let resumeAtEntryId;
-        if (typeof body.resumeAt === "string" && body.resumeAt.length > 0) {
-            if (!auth?.sessionId)
-                throw new HttpError(422, "resumeAt requires a session to branch (resume_at.no_session)");
-            if (!resumeAnchorStore || !ownerAware.getLeafId)
-                throw new HttpError(501, "resume-at is not available on this worker (no session-store backend for the anchor map)");
-            resumeAtEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.resumeAt, auth.principal ?? null);
-            if (resumeAtEntryId === undefined)
-                throw new HttpError(404, "resumeAt: no such message in this session (resume_at.unknown_event)");
-        }
-        let rewindFilesToEntryId;
-        if (resumeAtEntryId === undefined && typeof body.rewindFilesTo === "string" && body.rewindFilesTo.length > 0) {
-            if (!auth?.sessionId)
-                throw new HttpError(422, "rewindFilesTo requires a session (rewind_files_to.no_session)");
-            if (!resumeAnchorStore || !ownerAware.getLeafId)
-                throw new HttpError(501, "rewind-files-to is not available on this worker (no session-store backend for the anchor map)");
-            rewindFilesToEntryId = await resumeAnchorStore.resolve(auth.sessionId, body.rewindFilesTo, auth.principal ?? null);
-            if (rewindFilesToEntryId === undefined)
-                throw new HttpError(404, "rewindFilesTo: no such message in this session (rewind_files_to.unknown_event)");
-        }
-        const s4ProjectId = auth?.resolvedProjectId ?? (typeof body.projectId === "string" && body.projectId ? body.projectId : undefined);
-        const s4DefaultScopes = s4ProjectId ? config.projects[s4ProjectId]?.defaultScopes : undefined;
-        const spec = {
-            objective: attachmentNotice ? `${picked.cleanedObjective}\n\n${attachmentNotice}` : picked.cleanedObjective,
-            systemPrompt: typeof body.systemPrompt === "string" ? body.systemPrompt : undefined,
-            appendSystemPrompt: acceptedAppend,
-            sessionId: auth?.sessionId,
-            principal: auth?.principal,
-            images: body.images,
-            ...(body.clientContext ? { clientContext: { timeZone: body.clientContext.timeZone, userEmail: body.clientContext.userEmail } } : {}),
-            ...(() => {
-                const ct = body.compaction?.clampTolerance;
-                return typeof ct === "number" && Number.isFinite(ct) && ct >= 0 && ct <= 1 ? { compaction: { clampTolerance: ct } } : {};
-            })(),
-            outputSchema: body.outputSchema,
-            ...(typeof body.outputRetries === "number" && Number.isFinite(body.outputRetries) && body.outputRetries >= 1
-                ? { outputRetries: Math.min(10, Math.floor(body.outputRetries)) }
-                : {}),
-            resumeAt: resumeAtEntryId,
-            resumeAtMode: normalizeResumeAtMode(body.resumeAtMode, resumeAtEntryId !== undefined),
-            requireExistingSession: body.requireExistingSession === true ? true : undefined,
-            enableFork: enableForkFromBody(body, config, Boolean(centerRuntimeCapsResolver)),
-            suggestNextPrompts: normalizeSuggestNextPrompts(body.suggestNextPrompts),
-            rewindFiles: body.rewindFiles === true ? true : undefined,
-            rewindFilesTo: rewindFilesToEntryId,
-            additionalDirectories,
-            enablePlanMode: config.planModeEnabled ? true : undefined,
-            selfOrchestration: selfOrchestrationFromBody({ selfOrchestration: body.selfOrchestration === true || parsedSettings.settings?.ultracode === true }, config, Boolean(centerRuntimeCapsResolver)),
-            forwardSubagentEvents: body.forwardSubagentEvents === true ? true : undefined,
-            retainSubagentSessions: normalizeRetainSubagentSessions(body.retainSubagentSessions),
-            ...taskAgentsSpecFragment(body.agents, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })),
-            ...(retainBackgroundProcessesFromBody(body.retainBackgroundProcesses, config.requirePrincipal, (event, fields) => logger.warn(event, { ...fields, sessionId: auth?.sessionId ?? null })) === true
-                ? { retainBackgroundProcesses: true }
-                : {}),
-            ...(() => { const v = toolNameListFromBody(body.excludeTools); return v ? { excludeTools: v } : {}; })(),
-            ...(() => { const v = toolNameListFromBody(body.deferTools); return v ? { deferTools: v } : {}; })(),
-            ...(() => { const v = promptProfileFromBody(body.promptProfile); return v ? { promptProfile: v } : {}; })(),
-            ...(typeof body.interactiveTools === "boolean"
-                ? { interactiveTools: body.interactiveTools }
-                : {}),
-            resilience: normalizeResilience(body.resilience, explicitOperator(auth?.principal, config.operatorPrincipals)),
-            finalVerification: cap.finalVerification === true || body.finalVerification === true ? true : undefined,
-            attachments: normalizeAttachments(body.attachments),
-            ...(taskHooks ? { hooks: composeHooks(deploymentHooks, taskHooks) } : {}),
-            model: picked.model,
-            ...((() => {
-                if (typeof body.compactionModel !== "string" || body.compactionModel.length === 0)
-                    return {};
-                const cm = matchCatalogModel(body.compactionModel, wireCatalog);
-                if (cm === undefined) {
-                    if (opts?.leg === "fresh") {
-                        throw new HttpError(400, `unknown compactionModel "${body.compactionModel.slice(0, 120)}" — not in the configured catalog (name, tier word, or id; a catalog refresh may have removed it mid-request)`);
-                    }
-                    metrics.inc("task_model_unknown_fallback_total");
-                    logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
-                    return {};
-                }
-                return { compactionModel: cm };
-            })()),
-            thinking: effectiveThinking(body.reasoningEffort, parsedSettings.settings?.ultracode === true),
-            getApiKeyAndHeaders: keyResolver,
-            ...(() => {
-                const limits = resolveTaskLimits(body.limits, taskLimitCaps, taskTimeoutSec, config.requirePrincipal, body.council === true || body.debate === true || scenarioName === "team");
-                const declarations = [];
-                if (taskLimitCaps.timeoutSec !== undefined)
-                    declarations.push({ key: "server.limits.timeoutSecCap", value: String(taskLimitCaps.timeoutSec), reason: "env TASK_TIMEOUT_MAX_SEC (operator ceiling on caller limits.timeoutSec)" });
-                if (taskLimitCaps.maxOutputTokens !== undefined)
-                    declarations.push({ key: "server.limits.maxOutputTokensCap", value: String(taskLimitCaps.maxOutputTokens), reason: "env TASK_MAX_OUTPUT_TOKENS_MAX (operator ceiling)" });
-                if (taskLimitCaps.maxTurns !== undefined)
-                    declarations.push({ key: "server.limits.maxTurnsCap", value: String(taskLimitCaps.maxTurns), reason: "env TASK_MAX_TURNS_MAX (operator ceiling)" });
-                if (config.maxTaskCostUsd > 0)
-                    declarations.push({ key: "server.budget.maxCostUsdCap", value: String(config.maxTaskCostUsd), reason: "env MAX_TASK_COST_USD (operator ceiling; becomes the effective value when the caller sends none)" });
-                if (config.maxTaskTokens > 0)
-                    declarations.push({ key: "server.budget.maxTokensCap", value: String(config.maxTaskTokens), reason: "env MAX_TASK_TOKENS_MAX (operator ceiling; becomes the effective value when the caller sends none)" });
-                if (config.requirePrincipal === true)
-                    declarations.push({ key: "server.limits.wallClockBaseSec", value: "2400/3600", reason: "tenancy wall-clock base (multi-tenant; big tasks 3600) — TASK_TIMEOUT_SEC raises, never shrinks" });
-                return { ...(limits !== undefined ? { limits } : {}), ...(declarations.length > 0 ? { configOverrides: declarations } : {}) };
-            })(),
-            ...(config.requirePrincipal !== true ? { backgroundScope: "session" } : {}),
-            maxCostUsd: cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd),
-            maxTokens: cappedCeiling(body.maxTokens, config.maxTaskTokens),
-            degrade: (() => {
-                if (!config.degrade || cappedCeiling(body.maxCostUsd, config.maxTaskCostUsd) === undefined)
-                    return undefined;
-                if (Array.isArray(body.images) && body.images.length > 0 && !config.degrade.toSupportsImages) {
-                    metrics.inc("degrade_dropped_total", { reason: "vision_target" });
-                    logger.warn("degrade_dropped", { reason: "vision_target", model: picked.model, images: body.images.length });
-                    return undefined;
-                }
-                return { to: config.degrade.to, atCostFraction: config.degrade.atCostFraction };
-            })(),
-            memory: memoryEngine ? memorySpecForRequest(auth?.memoryScope, body.memoryWrite, s4DefaultScopes) : undefined,
-            tools: ((base) => {
-                const extra = [...(selectEnvTool ? [selectEnvTool] : []), ...(sendUserFileToolSpec ? [sendUserFileToolSpec] : [])];
-                const merged = extra.length > 0 ? [...(base ?? []), ...extra] : base;
-                return merged && config.toolDeferLongtail ? applyLongtailDefer(merged, true) : merged;
-            })(cap.tools),
-            skills: mergeUserSkills(cap.skills, body.skills, logger),
-            mcp: resolveRequestMcp(mcpForScenario(config.mcpServers, scenarioName), body.mcpServers, config, logger),
-            promptProvider: centerDecls ? centerPromptProvider(centerDecls, scenarioName) : cap.promptProvider,
-            toolPolicy: durableEnabled
-                ? combinePolicies(createDurableQuestionPolicy(), createDurableAskPolicy({
-                    requireApproval: config.approvalRequire, deny: config.approvalDeny, autoBudget: config.approvalAutoBudget, neverAuto: config.approvalNeverAuto,
-                    ...(approvalExemptionStore && auth?.sessionId
-                        ? {
-                            exempt: (toolName) => approvalExemptionStore.has(auth.sessionId, toolName),
-                            onExempted: (toolName, rawToolName) => logger.info("approval_exempted", { sessionId: auth.sessionId, toolName, rawToolName }),
-                        }
-                        : {}),
-                }))
-                : approvalEnabled && approvalStore
-                    ? createOaApprovalPolicy({
-                        store: approvalStore,
-                        requireApproval: config.approvalRequire,
-                        deny: config.approvalDeny,
-                        pollMs: config.approvalPollMs,
-                        context: () => ({ sessionId: auth?.sessionId ?? null, owner: auth?.principal ?? null }),
-                        neverAuto: config.approvalNeverAuto,
-                        ...(approvalExemptionStore
-                            ? {
-                                exempt: (sessionId, toolName) => approvalExemptionStore.has(sessionId, toolName),
-                                onExempted: (sessionId, toolName) => logger.info("approval_exempted", { sessionId, toolName }),
-                            }
-                            : {}),
-                    })
-                    : singleUserAutoAcceptBaseline
-                        ? createAllowDenyPolicy({})
-                        : undefined,
-            ...(durableEnabled
-                ? {
-                    checkpointStore,
-                    durableApproval: {
-                        scope: auth?.principal ?? "_",
-                        ...(config.approvalTimeoutSec > 0 ? { ttlMs: config.approvalTimeoutSec * 1000 } : {}),
-                    },
-                    ...((rs) => (rs ? { resourceSuspend: rs } : {}))(resourceSuspendOptIn({
-                        enabled: config.resourceSuspend,
-                        ttlSec: config.resourceSuspendTtlSec,
-                        isVerify: body.verify === true,
-                        isCascade: body.cascade === true,
-                        scope: auth?.principal ?? "_",
-                    })),
-                    onQuestion: QUESTION_AWAITS_RESUME,
-                }
-                : {}),
-        };
-        const governedBase = applyRuntimeGovernance(spec, { autonomy: config.autonomy, commandPolicy: config.commandPolicy });
-        let governed = governedBase;
-        const bodyMode = coercePermissionMode(body.permissionMode);
-        let effectiveSettings = bodyMode ? withPermissionMode(parsedSettings.settings, bodyMode) : parsedSettings.settings;
-        if (appendLessPack && effectiveSettings?.outputStyle) {
-            logger.warn("output_style_dropped", { detail: "the effective prompt pack cannot mount the append slot (already-assembled systemPrompt or center assembled-identity declaration)", sessionId: auth?.sessionId ?? null });
-            const { outputStyle: _dropped, ...rest } = effectiveSettings;
-            effectiveSettings = Object.keys(rest).length > 0 ? rest : undefined;
-        }
-        if (effectiveSettings?.outputStyle && acceptedAppend && acceptedAppend.length + 2 + effectiveSettings.outputStyle.length > MAX_SETTINGS_OUTPUT_STYLE_CHARS) {
-            logger.warn("output_style_dropped", { detail: `combined append carriers exceed the ${MAX_SETTINGS_OUTPUT_STYLE_CHARS} cap (rider ${acceptedAppend.length} + style ${effectiveSettings.outputStyle.length}) — style dropped (pre-cap stored body on a resume leg?)`, sessionId: auth?.sessionId ?? null });
-            const { outputStyle: _dropped2, ...rest2 } = effectiveSettings;
-            effectiveSettings = Object.keys(rest2).length > 0 ? rest2 : undefined;
-        }
-        const hostSemanticsLane = config.remoteExec === undefined || config.remoteExec.provider === "host";
-        const shellScratchpad = await acceptShellScratchpadDir(body.scratchpadDir, {
-            requirePrincipal: config.requirePrincipal,
-            hostSemanticsLane,
-            warn: (msg, meta) => logger.warn(msg, { ...(meta ?? {}), sessionId: auth?.sessionId ?? null }),
-        });
-        const scratchpadDir = shellScratchpad ??
-            (hostSemanticsLane && auth?.sessionId ? await ensureScratchpadDir(config.localDataRoot ?? localRoot, auth.sessionId) : undefined);
-        if (effectiveSettings) {
-            const fsWriteGate = hostSemanticsLane
-                ? (() => {
-                    const sessionCwd = auth?.sessionId ? effectiveHostWorkspace(perSessionCwd.get(auth.sessionId), {}) : undefined;
-                    const gateCwd = sessionCwd ??
-                        (config.remoteExec === undefined
-                            ? process.cwd()
-                            : join(config.localDataRoot ?? localRoot, "fs-write-gate-unrooted"));
-                    return {
-                        env: new NodeExecutionEnv({ cwd: gateCwd }),
-                        cwd: gateCwd,
-                        ...(scratchpadDir ? { scratchpadDir } : {}),
-                        ...(config.sensitiveWritePatterns.length > 0 ? { sensitivePatterns: config.sensitiveWritePatterns } : {}),
-                        ...(config.manualModeShellGate ? { shellGate: config.manualModeShellGate } : {}),
-                        ...(approvalExemptionStore && auth?.sessionId
-                            ? {
-                                isExempt: async (toolName) => {
-                                    const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
-                                    if (hit)
-                                        logger.info("fs_write_gate_exempted", { toolName, sessionId: auth.sessionId });
-                                    return hit;
-                                },
-                            }
-                            : {}),
-                    };
-                })()
-                : undefined;
-            const workflowGate = approvalExemptionStore && auth?.sessionId
-                ? {
-                    isExempt: async (toolName) => {
-                        const hit = await approvalExemptionStore.has(auth.sessionId, toolName);
-                        if (hit)
-                            logger.info("workflow_gate_exempted", { toolName, sessionId: auth.sessionId });
-                        return hit;
-                    },
-                }
-                : undefined;
-            try {
-                governed = applyTaskSettings(governedBase, effectiveSettings, fsWriteGate, workflowGate);
-            }
-            catch (e) {
-                throw new HttpError(422, `settings are tighten-only and cannot loosen the deployment policy: ${e.message}`);
-            }
-        }
-        if (governed.handsReadOnly === true && Array.isArray(governed.tools)) {
-            governed = { ...governed, tools: stripDelegationTools(governed.tools) };
-        }
-        const bodyProfile = typeof body.sandboxImageProfile === "string" && body.sandboxImageProfile.length > 0 ? body.sandboxImageProfile : undefined;
-        const taskImageProfile = bodyProfile ?? (body.cascade === true || body.verify === true ? undefined : sessionEnvSelection.get(auth?.sessionId));
-        let resolvedImageCaps;
-        if (taskImageProfile !== undefined) {
-            if (config.remoteExec?.provider !== "k8s") {
-                throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
-            }
-            if (!imageIndex) {
-                throw new HttpError(400, "sandboxImageProfile requires the image index (sema-registry backend not configured)");
-            }
-            if (!auth?.sessionId) {
-                throw new HttpError(400, "sandboxImageProfile requires a resolved session");
-            }
-            const capsNeeded = Array.isArray(body.capabilitiesNeeded)
-                ? body.capabilitiesNeeded.filter((c) => typeof c === "string")
-                : undefined;
-            const resolved = await resolveSandboxImageRef({
-                profile: taskImageProfile,
-                ...(capsNeeded && capsNeeded.length > 0 ? { capabilitiesNeeded: capsNeeded } : {}),
-                viewer: { operator: explicitOperator(auth.principal, config.operatorPrincipals), tenantId: auth.principal ?? null },
-                index: imageIndex,
-            });
-            if (!resolved.ok)
-                throw new HttpError(resolved.status, resolved.message);
-            perTaskImage.set(auth.sessionId, resolved.ref);
-            resolvedImageCaps = resolved.capabilities;
-        }
-        if (config.envFactsEnabled) {
-            const pkgSourceLane = config.remoteExec?.provider === "e2b" || config.remoteExec?.provider === "k8s";
-            const remoteScratchpadDir = !hostSemanticsLane && isRemoteScratchpadLane(config.remoteExec?.provider)
-                ? remoteScratchpadDirFor(auth?.sessionId)
-                : undefined;
-            const factScratchpadDir = scratchpadDir ?? remoteScratchpadDir;
-            const facts = buildEnvFacts({
-                profile: taskImageProfile,
-                capabilities: resolvedImageCaps,
-                ...(pkgSourceLane ? { pkgSource: config.sandboxPkgSource } : {}),
-                egress: egressForRemoteExec(config.remoteExec),
-                ...(factScratchpadDir ? { scratchpadDir: factScratchpadDir } : {}),
-                resumeFacts: resumeFactsForLane(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? { k8sSnapshot: Boolean(config.remoteExec.s3Snapshot) } : undefined),
-            });
-            if (facts)
-                governed = { ...governed, envFacts: facts };
-        }
-        if (scratchpadDir !== undefined) {
-            const dirs = governed.additionalDirectories ?? [];
-            if (!dirs.includes(scratchpadDir))
-                governed = { ...governed, additionalDirectories: [...dirs, scratchpadDir] };
-        }
-        if (config.routerEnabled) {
-            const isolatedExecEnv = isIsolatedExecEnv(config.remoteExec?.provider, config.remoteExec?.provider === "k8s" ? config.remoteExec.runtimeClass : undefined);
-            const decision = routeServiceTask({
-                isolatedExecEnv,
-                hasExecutionEnv: config.remoteExec != null,
-                ...(config.autonomy ? { autonomy: config.autonomy } : {}),
-                explicitTeam: body.council === true || body.debate === true || scenarioName === "team",
-            });
-            logger.info("orchestration_routed", { mode: decision.mode, reason: decision.reason, sessionId: auth?.sessionId ?? null });
-            if (decision.mode === "supervisor") {
-                return tightenTaskSpec(governed, supPostureOverrides());
-            }
-        }
-        return governed;
-    };
+    // design/158 A10:resolveSpec 段搬到 src/boot/resolve-spec.ts(逐字;两处活引用改取值,见该文件头注)。
+    const resolveSpec = createResolveSpec({
+        config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
+        getCenterPrompts: () => configCenter.getCenterPrompts(),
+        getKeyResolver: () => configCenter.getKeyResolver(),
+        taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv,
+        hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
+        selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore, approvalEnabled,
+        approvalStore, singleUserAutoAcceptBaseline, checkpointStore, deploymentHooks, imageIndex, perTaskImage,
+        sessionEnvSelection,
+    });
     const server = createHttpServer({ runner, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
+    // D-D SLA-timer: wire the server's deny-sweep into the reaper holder declared above (the reaper is defined
+    // before the server, so it calls through this late-bound reference).
     runDenySweep = server.denyExpiredApprovals;
+    // [1934]:绑址旋钮 + 无鉴权自收窄(理由见 resolveBindHost 顶注)。undefined = Node 默认全接口。
     const bindHost = resolveBindHost(config);
     await new Promise((resolve) => (bindHost ? server.listen(config.port, bindHost, resolve) : server.listen(config.port, resolve)));
     logger.info("listening", {
@@ -2359,6 +814,9 @@ async function main() {
             ? { note: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }
             : {}),
     });
+    // fleet worker 接线(announce/heartbeat + usage 批报;lease 消费后一拍):boot 完成后
+    // 注册(=首次心跳)。门 = center lane 配置 ∧ FLEET_ADVERTISE_ADDRESS 显式声明(不自猜可达地址);任一缺 → undefined
+    // = 非 fleet 部署零行为。draining 翻转的即刻 announce 在 drainThenShutdown;退出 DELETE 在 hardShutdown。
     const fleetClient = startFleetClientFromEnv(config, {
         instanceId,
         version: serviceVersion(),
@@ -2372,108 +830,51 @@ async function main() {
         port: config.port,
         model: config.model.id,
         brain: brainSummary(config),
-        breakerState: config.resilience.circuitBreaker ? (breakerState ? `shared(${backend.kind})` : "in-process") : "off",
+        // shared = cross-replica TiDB breaker state; in-process = core's per-replica Map; off = breaker disabled
+        breakerState: config.resilience.circuitBreaker ? (breakerState ? `shared(${backend.kind})` : "in-process") : "off", // 1.108: was hard-coded "shared(tidb)" — lied under DB_BACKEND=pg
+        // On DB_BACKEND=local the wiring coerces sessionBackend to the LABEL "tidb" (meaning "the
+        // backend's durable store, generically") — printing it verbatim read as a SQL deployment on a file-everything
+        // box. Print the effective store instead (same honesty fix as breakerState above).
         session: config.sessionBackend === "tidb" && backend ? `durable(${backend.kind})` : config.sessionBackend,
+        // design/138 S1: the file-based memory engine (single-user only); "off" = MEMORY_ENGINE=off or multi-tenant.
         memory: memoryEngine ? `engine(${memoryEngine.root})` : "off",
         instanceId,
         rateLimitPerMin: config.rateLimitPerMin,
         rateLimit: config.rateLimitPerMin > 0 ? (backend ? `shared()` : "in-process") : "off",
         maxPrincipalCostUsd: config.maxPrincipalCostUsd || null,
         costQuota: config.maxPrincipalCostUsd > 0 ? (backend ? `shared()` : "in-process") : "off",
+        // durable offload store for large tool results (cross-replica wake); else core's in-process default
         toolResultStore: toolResultStore ? (backend?.kind === "local" ? "file(local)" : "shared(sql)") : "in-process",
         otel: config.otel ? config.otel.endpoint : null,
-        perModelKeys: Object.keys(config.modelApiKeyEnv).length,
+        perModelKeys: Object.keys(config.modelApiKeyEnv).length, // models with their own upstream key (else gateway)
         sealedModelKeys: Object.values(config.modelApiKeys).filter((v) => typeof v === "string").length,
-        sealedPoisonedModels: Object.values(config.modelApiKeys).filter((v) => typeof v !== "string").length,
+        sealedPoisonedModels: Object.values(config.modelApiKeys).filter((v) => typeof v !== "string").length, // sealed-box custody keys unsealed (count only — values never log)
+        // SVC-1: durable workflow record + at-least-once notify backend (file = crash-safe ledger; memory = ephemeral)
         workflowRunStore: config.selfOrchestrationEnabled
             ? config.workflowRunStoreBackend === "memory"
                 ? "in-process"
                 : sqlWorkflowRunStore
-                    ? `db(${backend.kind})`
+                    ? `db(${backend.kind})` // P1: cross-replica twin active
                     : "file"
             : "off",
     });
+    // SVC-1 at-least-once notify — CRASH-RECOVERY sweep: once at boot, re-derive every un-acked (started-but-not-
+    // delivered) workflow's terminal state from the durable run store and re-deliver the completion notify that a
+    // prior replica crash dropped (idempotent on the receiver). Fire-and-forget AFTER listen so startup isn't
+    // blocked on it (recovery only re-fires completion notifications — independent of serving new requests). A
+    // sweep throw is logged, never fatal.
     if (workflowNotifyGate) {
         void workflowNotifyGate
             .recover({ orphanGraceMs: config.workflowOrphanGraceMs })
             .then((tally) => logger.info("workflow_notify_recovered", tally))
             .catch((err) => logger.warn("workflow_notify_recover_failed", { err: String(err) }));
     }
-    let closing = false;
-    const hardShutdown = () => {
-        if (closing)
-            return;
-        closing = true;
-        clearInterval(reaper);
-        otelExporter?.stop();
-        breakerState?.stop();
-        if (costQuota && "stop" in costQuota)
-            costQuota.stop();
-        if (rateLimiter && "stop" in rateLimiter)
-            rateLimiter.stop();
-        runner.sessions.dispose();
-        subRunner.sessions.dispose();
-        void lspManager?.dispose?.();
-        void workflowNotifyJournal?.close?.();
-        try {
-            const reaped = defaultTaskRegistry.reapAllSessionBackground();
-            if (reaped > 0)
-                logger.info("shutdown_background_reaped", { reaped });
-        }
-        catch (err) {
-            logger.warn("shutdown_background_reap_failed", { err: String(err) });
-        }
-        void fleetClient?.stop();
-        server.close(() => {
-            void (backend ? backend.close() : Promise.resolve()).finally(() => process.exit(0));
-        });
-        const finalExit = setTimeout(() => { logger.warn("hard_shutdown_final_deadline", { afterMs: 15_000 }); process.exit(0); }, 15_000);
-        finalExit.unref?.();
-        server.closeIdleConnections?.();
-        const forceClose = setTimeout(() => server.closeAllConnections?.(), 10_000);
-        forceClose.unref?.();
-    };
-    let draining = false;
-    const drainThenShutdown = () => {
-        if (closing)
-            return;
-        if (draining) {
-            logger.info("drain_second_signal_hard_stop", {});
-            hardShutdown();
-            return;
-        }
-        draining = true;
-        drainState.draining = true;
-        drainState.since = Date.now();
-        void fleetClient?.announceNow();
-        const inflight = drainState.inflight?.() ?? 0;
-        logger.info("draining_started", { inflight, graceMs: config.drainGraceMs });
-        if (inflight === 0) {
-            hardShutdown();
-            return;
-        }
-        const t0 = performance.now();
-        const tick = setInterval(() => {
-            const n = drainState.inflight?.() ?? 0;
-            const elapsed = Math.round(performance.now() - t0);
-            if (n === 0 || elapsed >= config.drainGraceMs) {
-                clearInterval(tick);
-                logger.info("drain_complete", { inflight: n, elapsedMs: elapsed, timedOut: n > 0 });
-                hardShutdown();
-            }
-        }, 1_000);
-    };
-    process.on("SIGTERM", drainThenShutdown);
-    process.on("SIGINT", hardShutdown);
-    process.on("SIGHUP", createSighupIdleHandler({
-        inflight: () => drainState.inflight?.() ?? 0,
-        lastActivityAt: () => drainState.lastActivityAt?.() ?? 0,
-        isStopped: () => closing || draining,
-        escalate: drainThenShutdown,
-        shutdown: hardShutdown,
-        idleGraceMs: config.sighupIdleGraceMs,
-        log: (event, fields) => logger.info(event, fields),
-    }));
+    // design/158 A10:收尾段搬到 src/boot/shutdown.ts(逐字)。⚠️ 调用点必须留在 listen 之后 —— 位置即契约,
+    // 理由(信号注册时点/三信号相对次序/clearInterval 先于 server.close)见该文件头注。
+    installShutdownHandlers({
+        config, logger, server, reaper, otelExporter, breakerState, costQuota, rateLimiter,
+        runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState,
+    });
 }
 void main().catch((err) => {
     createLogger().error("fatal", { err: String(err) });