@sema-agent/server 3.23.0 → 3.24.0

package/dist/boot/config-center.js

@@ -780,7 +780,11 @@ export async function createConfigCenterRuntime(ctx) {
                                 // expanded admission gate while core throws "Unknown model ref" until restart. Hot-apply is safe
                                 // only when BOTH generations are tier-less.
                                 const planeDeferred = (runnerTierFrozen || planeHasActiveTiers(r.effective)) && modelPlaneChanged(appliedPlaneEff, r.effective);
-                                applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferred ? { deferModelPlane: true } : {}) });
+                                const committed = applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferred ? { deferModelPlane: true } : {}) });
+                                // [2283]③:CAS 拒绝(更旧世代)⇒ 本拍整体跳过——prompts 采用/pricing/keyResolver/restart
+                                // 对账/etag 推进/LKG 落盘都不得从旁路半应用同一个被拒世代(拒绝 warn 已在 applyEffective 留痕)。
+                                if (!committed)
+                                    return;
                                 if (planeDeferred) {
                                     logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner: the changed model plane (models/roles/tiers/default) is NOT hot-applied — admission stays on the Runner's generation; restart applies the new plane (models-tiers restart signal rides /health)" });
                                 }
@@ -954,7 +958,10 @@ export async function createConfigCenterRuntime(ctx) {
                     // this late arrival — if it froze a tier-expanded copy, the arriving center plane must not hot-apply
                     // (admission/Runner split). Tier-less env boot (the common deferred-boot shape) keeps true hot-apply.
                     const planeDeferredLate = (runnerTierFrozen || planeHasActiveTiers(r.effective)) && modelPlaneChanged(appliedPlaneEff, r.effective);
-                    applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferredLate ? { deferModelPlane: true } : {}) });
+                    const committedLate = applyEffective(config, r.effective, logger, { teamsOnly: true, sealedKeys, ...(planeDeferredLate ? { deferModelPlane: true } : {}) });
+                    // [2283]③(refresh 腿同款):CAS 拒绝 ⇒ 迟到 boot 拍整体跳过,旁路消费与 etag/LKG 都不动。
+                    if (!committedLate)
+                        return;
                     if (planeDeferredLate)
                         logger.warn("models_tiers_plane_deferred", { version: r.effective.version, note: "tier-frozen Runner (env tiers): the late-boot center model plane is NOT hot-applied — restart applies it" });
                     else {

package/dist/config-center/apply-effective.d.ts

@@ -8,11 +8,14 @@ import type { EffectiveConfig } from "./types.js";
  *  `this.deps.models/roles/pricing` LIVE per-task and `/v1/models` reads `config.models` — both share the
  *  reference captured at boot, so mutating it (vs reassigning) updates both with no split, no Runner rebuild. */
 export declare function mutateInPlace<V>(target: Record<string, V>, source: Record<string, V>): void;
+/** 返回值=是否 COMMIT(false 仅在 [2283]③ 世代序 CAS 拒绝时)。caller 收到 false 必须把**同一世代的
+ *  旁路消费**(prompts 采用/pricing/keyResolver/etag 推进/LKG 落盘)一并跳过——否则 applyEffective 拒了
+ *  主面、旁路却半应用同一个被拒世代,混合世代从侧门回来。首次 apply(live 未登记)恒 true。 */
 export declare function applyEffective(config: ServiceConfig, eff: EffectiveConfig, logger?: Logger, opts?: {
     teamsOnly?: boolean;
     sealedKeys?: SealedKeyOpener;
     deferModelPlane?: boolean;
-}): void;
+}): boolean;
 /**
  * Apply the center `runtime` governance/limit gates OVER the env-derived config (mutates `config`).
  *
@@ -42,23 +45,6 @@ export type RuntimeGateKey = (typeof RUNTIME_GATE_KEYS)[number];
  *  divides by it; center's `.positive()` already enforces, belt-and-suspenders here). */
 export declare function runtimeGatePresent(rt: NonNullable<EffectiveConfig["runtime"]>, key: RuntimeGateKey): boolean;
 export declare function applyRuntimeGates(config: ServiceConfig, rt: EffectiveConfig["runtime"], logger?: Logger): void;
-/**
- * Apply the runtime governance "second baton" (center §10): `autonomy` + `commandPolicy`. UNLIKE the 6 gates in
- * {@link applyRuntimeGates}, these are per-request HOT (read live in main.ts `resolveSpec` via
- * `applyRuntimeGovernance`), so they apply on BOTH boot and refresh (NOT via RUNTIME_GATE_KEYS / restart-to-apply).
- *
- * 🔴 NON-STICKY (differs from the restart-to-apply gates on purpose — adversarial-review HIGH): a hot field that
- * center STOPS publishing must REVERT to the env baseline, not keep the last center value. The restart-to-apply
- * gates can be sticky because a refresh never touches them (the running middleware holds boot values until a
- * restart re-reads env+center); a HOT field has no such reset, so "absent ⇒ keep" would silently freeze a stale
- * center override (e.g. center published `auto`, then un-published it — the gate would stay OFF forever). So we
- * recompute every call as `present ? center : envBaseline`. The env baseline = `AUTONOMY` (re-derived, env is
- * immutable at runtime) for autonomy; `undefined` (no env scalar source) for commandPolicy.
- *
- * 🔴 commandPolicy is VALIDATED here (adversarial-review HIGH): an invalid command (glob/path/operator — which
- * core's EXACT-name matcher would silently never match → a hole) is rejected FAIL-LOUD and the prior good policy
- * is KEPT (a broken publish never half-applies a silently-weakened gate).
- */
 export declare function applyRuntimeHot(config: ServiceConfig, rt: EffectiveConfig["runtime"], logger?: Logger): void;
 /**
  * [865]① 显式默认解析——applyEffective 与 dry-run(logEffectiveDiff.wouldDefaultModel)共用的单源。优先级

package/dist/config-center/apply-effective.js

@@ -78,7 +78,74 @@ export function mutateInPlace(target, source) {
         delete target[k];
     Object.assign(target, source);
 }
+/** 每个 config 对象上一次 COMMIT 的世代号([2283]③ CAS 的 live 端)。WeakMap——config 回收即回收;
+ *  version 0(未发布/本地一次性 lane)不参与登记。 */
+const appliedGeneration = new WeakMap();
+/** 返回值=是否 COMMIT(false 仅在 [2283]③ 世代序 CAS 拒绝时)。caller 收到 false 必须把**同一世代的
+ *  旁路消费**(prompts 采用/pricing/keyResolver/etag 推进/LKG 落盘)一并跳过——否则 applyEffective 拒了
+ *  主面、旁路却半应用同一个被拒世代,混合世代从侧门回来。首次 apply(live 未登记)恒 true。 */
 export function applyEffective(config, eff, logger, opts = {}) {
+    const staged = stageEffective(config, eff, logger, opts);
+    const live = appliedGeneration.get(config);
+    if (staged.version > 0 && live !== undefined && staged.version < live) {
+        // [2283]③:两次拉取的 staging 并发/乱序完成时,慢的旧世代不得整体覆盖快的新世代——每次都是
+        // 「整世代」,但方向反了。拒绝必须留痕(C6);caller 的 etag 纪律本就只在 apply 成功后推进,
+        // 下一拍拉到的自然是更新的世代。等版本重放(etag 未推进的幂等重放)照常放行。
+        logger?.warn("sema_registry_stale_generation_refused", { staged: staged.version, live, note: "an older staged generation must not overwrite a newer committed one — refused whole; next poll replays" });
+        return false;
+    }
+    commitStaged(config, staged);
+    // ── post-commit notifications(全部世代描述性通知在最后一笔赋值之后,[2283]②)──
+    if (staged.modelPlane)
+        logger?.info("sema_registry_models", staged.modelPlane.infoLine);
+    if (staged.gatesInfo)
+        logger?.info("sema_registry_runtime", staged.gatesInfo);
+    if (Object.keys(staged.hot.infoLine).length > 0)
+        logger?.info("sema_registry_runtime_hot", staged.hot.infoLine);
+    for (const n of staged.teamsPlane?.notices ?? []) {
+        if (n.level === "warn")
+            logger?.warn(n.msg, n.fields);
+        else
+            logger?.info(n.msg, n.fields);
+    }
+    if (Object.keys(staged.projects).length > 0)
+        logger?.info("sema_registry_projects", { projects: Object.keys(staged.projects) });
+    return true;
+}
+/** COMMIT 段:纯赋值,零 await/零回调/零发射(源码钉守着——[2283]①②)。mutateInPlace/整对象重赋值/
+ *  registry 表整体换装(registerTeams/registerCollabWorkflows 皆为过滤+swap 的赋值形,无回调面)。 */
+function commitStaged(config, staged) {
+    const mp = staged.modelPlane;
+    if (mp) {
+        config.modelApiKeyEnv = mp.modelApiKeyEnv; // reassign ok — keyResolver is rebuilt from it on refresh (main.ts)
+        config.modelApiKeys = mp.modelApiKeys; // plaintext values — memory-only; poison markers ride the same map
+        mutateInPlace(config.modelQuotaWeights, mp.quotaWeights);
+        mutateInPlace(config.models, mp.models); // IN PLACE: keep the ref the Runner + /v1/models share (hot-apply)
+        config.model = config.models.default;
+        if (Object.keys(mp.roles).length > 0)
+            mutateInPlace(config.roles, mp.roles); // IN PLACE: Runner reads this.deps.roles live
+        mutateInPlace(config.tiers, mp.activeTiers);
+    }
+    if (staged.gateAssignments) {
+        for (const [k, v] of staged.gateAssignments)
+            config[k] = v;
+    }
+    if (staged.hot.setAutonomy)
+        config.autonomy = staged.hot.autonomyNext;
+    if (staged.hot.setCommandPolicy)
+        config.commandPolicy = staged.hot.commandPolicyNext;
+    const tp = staged.teamsPlane;
+    if (tp) {
+        registerTeams(tp.teams);
+        registerCollabWorkflows(tp.workflows);
+    }
+    mutateInPlace(config.projects, staged.projects); // IN PLACE: keep the ref per-request consumers captured at boot
+    if (staged.version > 0)
+        appliedGeneration.set(config, staged.version);
+}
+/** STAGE 段:一切计算/校验/解封/投影(可抛;抛=候选整体拒绝,活配置零触碰)。内容判定性 warn/error
+ *  (描述 eff 真伪,与是否 commit 无关)在此发;世代描述性 info 只装载荷,post-commit 发。 */
+function stageEffective(config, eff, logger, opts) {
     // version 0 / empty effective = the config-center has nothing for us yet — typically CONFIG_PUBLISH_MODE
     // is ON but nothing has been published. We do NOT wipe: models/roles fall back to env (the enabled>0
     // guard below), teams to BUILTIN_TEAMS (registerTeams resets to built-ins). Warn once at boot so the
@@ -96,6 +163,7 @@ export function applyEffective(config, eff, logger, opts = {}) {
     // split, no Runner rebuild, no core change. Caller (main.ts refresh) additionally refreshes `pricing` (same
     // ref) + rebuilds `keyResolver`. (Was startup-only when reassignment split the Runner's ref from config.)
     const enabled = (eff.models?.models ?? []).filter((m) => m.enabled !== false);
+    let modelPlane;
     // codex R10: `deferModelPlane` skips the WHOLE model plane (models/roles/tiers + per-model keys) — main.ts
     // sets it when the Runner is tier-frozen (private expanded copy) and the plane changed: hot-applying would
     // split admission (/v1/models, catalog gates) from the Runner's frozen generation, letting a same-key retarget
@@ -189,11 +257,6 @@ export function applyEffective(config, eff, logger, opts = {}) {
                 logger?.warn("sema_registry_model_no_brain", { model: m.name, provider: m.provider, hint: "set ANTHROPIC_API_KEY in this service's env, else it mis-routes to the gateway brain" });
             }
         }
-        config.modelApiKeyEnv = modelApiKeyEnv; // reassign ok — keyResolver is rebuilt from it on refresh (main.ts)
-        // same rebuild contract; plaintext values — memory-only, never logged. Poison markers ride the same
-        // map (they ARE per-model key state: "configured but broken"); the cast bridges config.ts's
-        // plaintext-only field type until it is widened to Record<string, string | SealedKeyPoison>.
-        config.modelApiKeys = modelApiKeys; // 类型已放真(string | SealedKeyPoison),桥接 cast 退役
         // weight-at-burn 源:quotaWeight 按 name+id 双键索引(tracer 的 brain.call e.model=模型 id,
         // 目录键=name——双键免猜);非法值(≤0/NaN)按缺省 1 丢弃。IN PLACE 与 models 同批 hot-apply。
         const quotaWeights = {};
@@ -205,7 +268,6 @@ export function applyEffective(config, eff, logger, opts = {}) {
                     quotaWeights[m.id] = qw;
             }
         }
-        mutateInPlace(config.modelQuotaWeights, quotaWeights);
         const roles = {};
         for (const [role, tgt] of Object.entries(eff.models.roles ?? {})) {
             if ("model" in tgt)
@@ -225,15 +287,16 @@ export function applyEffective(config, eff, logger, opts = {}) {
         // 静默翻转,default 必须消费 wire 里已有的显式意图。解析单源 = resolveDefaultModelName(dry-run 的
         // wouldDefaultModel 共用同一只,报数与真 apply 永不撕裂——codex M2)。
         const picked = resolveDefaultModelName(eff, (n) => models[n] !== undefined, enabled[0].name, (source, name) => logger?.warn("sema_registry_default_dangling", { source, name, hint: "explicit default names a model that is not in the enabled catalog — falling to the next source" }));
-        const defaultName = picked.name;
-        const defaultSource = picked.source;
-        models.default = models[defaultName];
-        mutateInPlace(config.models, models); // IN PLACE: keep the ref the Runner + /v1/models share (hot-apply)
-        config.model = config.models.default;
-        if (Object.keys(roles).length > 0)
-            mutateInPlace(config.roles, roles); // IN PLACE: Runner reads this.deps.roles live
-        mutateInPlace(config.tiers, activeTiers);
-        logger?.info("sema_registry_models", { count: enabled.length, default: config.model.id, defaultSource, roles: Object.keys(roles), tiers: Object.keys(config.tiers), sealedKeys: Object.values(modelApiKeys).filter((v) => typeof v === "string").length, sealedPoisoned: Object.values(modelApiKeys).filter((v) => typeof v !== "string").length });
+        models.default = models[picked.name];
+        modelPlane = {
+            models,
+            modelApiKeyEnv,
+            modelApiKeys,
+            quotaWeights,
+            roles,
+            activeTiers,
+            infoLine: { count: enabled.length, default: models.default.id, defaultSource: picked.source, roles: Object.keys(roles), tiers: Object.keys(activeTiers), sealedKeys: Object.values(modelApiKeys).filter((v) => typeof v === "string").length, sealedPoisoned: Object.values(modelApiKeys).filter((v) => typeof v !== "string").length },
+        };
     }
     // Runtime governance/limit gates (phase-2): STARTUP only (restart-to-apply) — the live RateLimiter / CostQuota
     // / approval gate are built from `config` AFTER this in main.ts, so mutating it here before they're constructed
@@ -241,18 +304,18 @@ export function applyEffective(config, eff, logger, opts = {}) {
     // governance 切新位:治理三件优先读 governance 域(真值),runtime 旧位(双写镜像)fallback——
     // 双写期两处逐键相等语义不变;center 撤双写后 governance 即唯一来源。限额残余(rateLimit/cost 五件)仍在 runtime。
     const gatesView = eff.governance ? { ...eff.runtime, ...eff.governance } : eff.runtime;
-    if (!opts.teamsOnly)
-        applyRuntimeGates(config, gatesView, logger);
+    const gates = opts.teamsOnly ? undefined : stageRuntimeGates(gatesView);
     // Runtime governance "second baton" (center §10): autonomy + commandPolicy are per-request HOT (read live in
     // resolveSpec), NOT baked into boot middleware → apply on BOTH boot and refresh (outside the teamsOnly guard) so
     // they hot-reload. No restart-to-apply signal (they take effect on the next task without a restart).
-    applyRuntimeHot(config, gatesView, logger);
+    const hot = stageRuntimeHot(config, gatesView, logger);
     // Teams → registry (hot-reloadable; center overrides/extends the built-ins).
     // codex R11: teams + collab workflows carry MODEL REFERENCES (member.model / workflow model args) — when the
     // model plane is deferred (tier-frozen Runner, see the deferModelPlane guard above) these faces must defer
     // WITH it, or a candidate that atomically adds/retargets a model AND updates a team/workflow to reference it
     // publishes a mixed generation: the new template goes live while config.models/the Runner stay old (a new ref
     // fails as unknown; a same-name retarget silently executes stale). One catalog generation = one visibility.
+    let teamsPlane;
     if (opts.deferModelPlane !== true) {
         const teams = {};
         for (const t of (eff.teams?.teams ?? []).filter((t) => t.enabled !== false)) {
@@ -265,22 +328,22 @@ export function applyEffective(config, eff, logger, opts = {}) {
                 synthesizer: t.synthesizer ? { role: t.synthesizer.role, modelRole: t.synthesizer.modelRole, systemPrompt: t.synthesizer.systemPrompt } : undefined,
             };
         }
-        registerTeams(teams);
-        if (Object.keys(teams).length > 0)
-            logger?.info("sema_registry_teams", { teams: Object.keys(teams) });
         // collab → named-workflow projection(切片 1.5,design/140 统一解;切片① 的
         // TeamTemplate 投影已整体替换——纪律「别留双路径降级」)。可投影子集翻译成命名 workflow 注册条目
         // (执行体=core 内置 team-discussion 脚本,center 模板=defaultArgs 合并链第二级;键=collab id,shell
         // `/team`/LLM 经 Workflow({name}) 调用);子集外整条跳过+结构化上报,绝不静默降级。HOT:boot+refresh
-        // 双腿整表替换(非粘——center 停发即空表,内置 workflow 不受影响)。
+        // 双腿整表替换(非粘——center 停发即空表,内置 workflow 不受影响)。register* 在 commit 段成对换装。
         const projected = projectCollabToWorkflows(eff.collab?.templates);
-        registerCollabWorkflows(projected.workflows);
+        const notices = [];
+        if (Object.keys(teams).length > 0)
+            notices.push({ level: "info", msg: "sema_registry_teams", fields: { teams: Object.keys(teams) } });
         if (Object.keys(projected.workflows).length > 0)
-            logger?.info("sema_registry_collab_workflows", { workflows: Object.keys(projected.workflows) });
+            notices.push({ level: "info", msg: "sema_registry_collab_workflows", fields: { workflows: Object.keys(projected.workflows) } });
         if (projected.skipped.length > 0)
-            logger?.warn("sema_registry_collab_skipped", { skipped: projected.skipped });
+            notices.push({ level: "warn", msg: "sema_registry_collab_skipped", fields: { skipped: projected.skipped } });
         if (projected.notes.length > 0)
-            logger?.info("sema_registry_collab_notes", { notes: projected.notes });
+            notices.push({ level: "info", msg: "sema_registry_collab_notes", fields: { notes: projected.notes } });
+        teamsPlane = { teams, workflows: projected.workflows, notices };
     }
     // 142-S4 projects 域(registry-core 0.10.0):center 项目登记簿 → config.projects(键=
     // projectId)。消费是 per-request 查表(memoryScope 派生 + defaultScopes 种子,security.ts/main.ts),
@@ -304,9 +367,14 @@ export function applyEffective(config, eff, logger, opts = {}) {
             ...(Array.isArray(r.defaultScopes) ? { defaultScopes: r.defaultScopes.filter((x) => typeof x === "string") } : {}),
         };
     }
-    mutateInPlace(config.projects, projects); // IN PLACE: keep the ref per-request consumers captured at boot
-    if (Object.keys(projects).length > 0)
-        logger?.info("sema_registry_projects", { projects: Object.keys(projects) });
+    return {
+        version: typeof eff.version === "number" && Number.isFinite(eff.version) ? eff.version : 0,
+        ...(modelPlane !== undefined ? { modelPlane } : {}),
+        ...(gates !== undefined ? { gateAssignments: gates.assignments, ...(gates.info !== undefined ? { gatesInfo: gates.info } : {}) } : {}),
+        hot,
+        ...(teamsPlane !== undefined ? { teamsPlane } : {}),
+        projects,
+    };
 }
 /**
  * Apply the center `runtime` governance/limit gates OVER the env-derived config (mutates `config`).
@@ -342,18 +410,28 @@ export function runtimeGatePresent(rt, key) {
         return typeof v === "number" && v > 0;
     return typeof v === "number";
 }
-export function applyRuntimeGates(config, rt, logger) {
+/** [2283] stage 半场:六闸的赋值清单(纯计算,零变异)。commit 段照单赋值,通知载荷 post-commit 发。 */
+function stageRuntimeGates(rt) {
     if (!rt)
-        return;
+        return { assignments: [] };
+    const assignments = [];
     const applied = {};
     for (const key of RUNTIME_GATE_KEYS) {
         if (!runtimeGatePresent(rt, key))
             continue; // undefined / sentinel → keep env
-        config[key] = rt[key]; // present (incl. explicit 0/[]) → override
+        assignments.push([key, rt[key]]); // present (incl. explicit 0/[]) → override
         applied[key] = rt[key];
     }
-    if (Object.keys(applied).length > 0)
-        logger?.info("sema_registry_runtime", applied);
+    return { assignments, ...(Object.keys(applied).length > 0 ? { info: applied } : {}) };
+}
+export function applyRuntimeGates(config, rt, logger) {
+    // 独立调用面的兼容壳(测试/外部):stage → 就地赋值 → 通知。applyEffective 不走这里——它把
+    // assignments 并进自己的 commit 段以保住整世代原子性([2283]②)。
+    const s = stageRuntimeGates(rt);
+    for (const [k, v] of s.assignments)
+        config[k] = v;
+    if (s.info)
+        logger?.info("sema_registry_runtime", s.info);
 }
 /**
  * Apply the runtime governance "second baton" (center §10): `autonomy` + `commandPolicy`. UNLIKE the 6 gates in
@@ -372,34 +450,49 @@ export function applyRuntimeGates(config, rt, logger) {
  * core's EXACT-name matcher would silently never match → a hole) is rejected FAIL-LOUD and the prior good policy
  * is KEPT (a broken publish never half-applies a silently-weakened gate).
  */
-export function applyRuntimeHot(config, rt, logger) {
-    const applied = {};
+/** [2283] stage 半场:hot 二件的赋值决定(计算+校验;`sema_registry_commandpolicy_invalid` 是内容判定,
+ *  stage 期发——它描述 eff 的真伪,与是否 commit 无关)。对比基准=stage 时刻的 config 现值:stage 与
+ *  commit 同一同步 tick,期间无人能改 config(单线程),对比不失效。 */
+function stageRuntimeHot(config, rt, logger) {
+    const infoLine = {};
     // autonomy: present ⇒ center value; absent ⇒ revert to the env baseline (never a stale center override).
     const envAutonomy = parseAutonomy(process.env.AUTONOMY);
-    const nextAutonomy = rt?.autonomy !== undefined ? rt.autonomy : envAutonomy;
-    if (config.autonomy !== nextAutonomy) {
-        config.autonomy = nextAutonomy;
-        applied.autonomy = nextAutonomy ?? "(env-baseline)";
-    }
+    const autonomyNext = rt?.autonomy !== undefined ? rt.autonomy : envAutonomy;
+    const setAutonomy = config.autonomy !== autonomyNext;
+    if (setAutonomy)
+        infoLine.autonomy = autonomyNext ?? "(env-baseline)";
     // commandPolicy: present+valid ⇒ apply; present+invalid ⇒ fail-loud + keep prior; absent ⇒ revert to baseline
     // (undefined — no env scalar source for structured command rules). Only re-set + log on an ACTUAL change
     // (deep-equal compare) — refresh runs every ~60s and the policy is usually unchanged; logging every tick = noise.
+    let setCommandPolicy = false;
+    let commandPolicyNext;
     if (rt?.commandPolicy !== undefined) {
         const errors = validateCommandRules(rt.commandPolicy);
         if (errors.length > 0) {
             logger?.error("sema_registry_commandpolicy_invalid", { errors, kept: config.commandPolicy?.length ?? 0 });
         }
         else if (JSON.stringify(config.commandPolicy) !== JSON.stringify(rt.commandPolicy)) {
-            config.commandPolicy = rt.commandPolicy;
-            applied.commandPolicy = rt.commandPolicy.length; // log the COUNT, not the rules (avoid leaking on every refresh)
+            setCommandPolicy = true;
+            commandPolicyNext = rt.commandPolicy;
+            infoLine.commandPolicy = rt.commandPolicy.length; // log the COUNT, not the rules (avoid leaking on every refresh)
         }
     }
     else if (config.commandPolicy !== undefined) {
-        config.commandPolicy = undefined; // center stopped managing → revert to baseline (no env source)
-        applied.commandPolicy = "(env-baseline)";
+        setCommandPolicy = true;
+        commandPolicyNext = undefined; // center stopped managing → revert to baseline (no env source)
+        infoLine.commandPolicy = "(env-baseline)";
     }
-    if (Object.keys(applied).length > 0)
-        logger?.info("sema_registry_runtime_hot", applied);
+    return { setAutonomy, autonomyNext, setCommandPolicy, commandPolicyNext, infoLine };
+}
+export function applyRuntimeHot(config, rt, logger) {
+    // 独立调用面的兼容壳(测试/外部)——applyEffective 不走这里(同 applyRuntimeGates 的注)。
+    const s = stageRuntimeHot(config, rt, logger);
+    if (s.setAutonomy)
+        config.autonomy = s.autonomyNext;
+    if (s.setCommandPolicy)
+        config.commandPolicy = s.commandPolicyNext;
+    if (Object.keys(s.infoLine).length > 0)
+        logger?.info("sema_registry_runtime_hot", s.infoLine);
 }
 /** [865]①/H3:activeTierGroup 档绑定当默认时的档梯,与 core 单一语义源逐字对齐(core roles.js:
  *  `ROLE_TIER_DEFAULTS.default = "pro"` + `resolveTier` 从本档位置**只向低档**扫 DEFAULT_TIER_ORDER

package/dist/config-center/http-client.d.ts

@@ -1,10 +1,17 @@
-import type { EntitlementRuntimeCaps } from "@sema-agent/registry-core";
+import { type EntitlementRuntimeCaps } from "@sema-agent/registry-core";
 import type { ScenarioRuling } from "../capabilities/scenarios.js";
 import type { EffectiveConfig, ExecutionRuling } from "./types.js";
-/** GET the effective config (Bearer + ETag). null = 304 (unchanged). Throws on transport/HTTP error. */
+/** GET the effective config (Bearer + ETag). null = 304 (unchanged). Throws on transport/HTTP error, and on a
+ *  payload that is not an effective config at all(非对象 / version 非有限数 / gate 域坏形——[2281] 裁B)。
+ *  `domainErrors`:坏 catalog 域(schema default 已落)逐域单列——与本地腿 `FetchEffectiveResult` 同键同义,
+ *  boot/refresh 的候选门直接消费。 */
 export declare function fetchEffective(baseUrl: string, token: string, etag: string | undefined, fetchImpl?: typeof fetch, worker?: string): Promise<{
     effective: EffectiveConfig;
     etag?: string;
+    domainErrors?: Array<{
+        domain: string;
+        error: string;
+    }>;
 } | null>;
 /**
  * design/99 §K (core 1.157 `RunnerDeps.runtimeCapsResolver`) — GET the PER-PRINCIPAL runtime

package/dist/config-center/http-client.js

@@ -5,7 +5,11 @@
  * facade re-exports every symbol below unchanged).
  */
 import { createHash } from "node:crypto";
-/** GET the effective config (Bearer + ETag). null = 304 (unchanged). Throws on transport/HTTP error. */
+import { readEffectiveWire } from "@sema-agent/registry-core";
+/** GET the effective config (Bearer + ETag). null = 304 (unchanged). Throws on transport/HTTP error, and on a
+ *  payload that is not an effective config at all(非对象 / version 非有限数 / gate 域坏形——[2281] 裁B)。
+ *  `domainErrors`:坏 catalog 域(schema default 已落)逐域单列——与本地腿 `FetchEffectiveResult` 同键同义,
+ *  boot/refresh 的候选门直接消费。 */
 export async function fetchEffective(baseUrl, token, etag, fetchImpl = fetch, worker) {
     // Defensive scheme guard: Node's fetch supports file:// — a mis-set
     // SEMA_REGISTRY_URL must not turn into a local-file read. Reject anything but http(s).
@@ -23,7 +27,21 @@ export async function fetchEffective(baseUrl, token, etag, fetchImpl = fetch, wo
         return null;
     if (!res.ok)
         throw new Error(`config-center HTTP ${res.status}`);
-    return { effective: (await res.json()), etag: res.headers.get("etag") ?? undefined };
+    // [2281] 裁B(§M1):wire 载荷在**这个消费端边界**过 registry-core `readEffectiveWire`(0.12.0)真校验,
+    // 不再裸断言——「两个契约共用一个拼写不是一个被检查的契约」。判据与本地腿同源(parseDomain +
+    // DOMAIN_READ_FALLBACK):catalog 域坏形 → 该域 schema default + 下面折进 domainErrors(候选门在
+    // refresh 拒候选、boot 逐域 warn);gate 域坏形/垃圾载荷 → throw(caller 整包 catch 回落 env/LKG)。
+    // 未知顶层键 verbatim 透传(open-world:新 center 新域、legacy teams 键都不丢)。grandfather 类
+    // 警告(值已被收编接受)不算 error,不进 domainErrors——与本地店同口径。
+    const warnings = [];
+    const wire = readEffectiveWire(await res.json(), (w) => warnings.push(w));
+    const domainErrors = warnings
+        .filter((w) => w.kind === "domain-defaulted")
+        .map((w) => ({ domain: w.domain, error: (w.error instanceof Error ? w.error.message : String(w.error)).slice(0, 600) }));
+    // 经真校验后的 wire 值到 service 拼写副本的换装:两型同一契约面(EffectiveWire 是 service 型的同源超集,
+    // service 型只声明自己消费的域且全 optional)——此断言的前提正是上面那次校验,不再是裸信任。
+    const effective = wire;
+    return { effective, etag: res.headers.get("etag") ?? undefined, ...(domainErrors.length > 0 ? { domainErrors } : {}) };
 }
 /**
  * design/99 §K (core 1.157 `RunnerDeps.runtimeCapsResolver`) — GET the PER-PRINCIPAL runtime

package/dist/config-provider.js

@@ -91,10 +91,16 @@ export class RemoteConfigProvider {
         this.cc = cc;
         this.deps = deps;
     }
-    fetchEffective(etag) {
+    async fetchEffective(etag) {
         const fn = this.deps.fetchEffective ?? remoteFetchEffective;
         // 5th arg = worker scope; transport (fetchImpl) stays the config-center's default.
-        return fn(this.cc.baseUrl, this.cc.token, etag, undefined, this.cc.worker);
+        const r = await fn(this.cc.baseUrl, this.cc.token, etag, undefined, this.cc.worker);
+        if (r === null || r.domainErrors === undefined)
+            return r;
+        // [2281] 裁B:远程腿从此也产 domainErrors(http-client 消费端校验)。与本地腿同一条产出边界纪律:
+        // error 文本先过 redactConfigError(zod 错误会回声违规值——operand 指纹化,防受控值经
+        // config_candidate_rejected/config_domain_invalid 进结构化日志流)。
+        return { ...r, domainErrors: r.domainErrors.map((de) => ({ domain: de.domain, error: redactConfigError(de.error) })) };
     }
     async fetchSkillContent(contentHash) {
         const fn = this.deps.fetchSkillContent ?? remoteFetchSkillContent;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sema-agent/server",
-  "version": "3.23.0",
+  "version": "3.24.0",
   "description": "Sema Server — the server/API implementation layer for Sema, wiring core, registry, model providers, and cloud agent execution. Built on @sema-agent/core.",
   "type": "module",
   "license": "BUSL-1.1",
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "@sema-agent/core": "^2.13.0",
-    "@sema-agent/registry-core": "^0.11.0",
+    "@sema-agent/registry-core": "^0.12.0",
     "e2b": "^2.28.0",
     "libsodium-wrappers": "^0.8.4",
     "mysql2": "^3.22.4",