@sema-agent/server 4.3.0 → 5.0.0

package/dist/capabilities/scenarios.js

@@ -1,11 +1,10 @@
-import { CODE_AGENT_PROMPT, CODE_SYSTEM_PROMPT, DEFAULT_SYSTEM_PROMPT, assembleCodeTools, createGiteaIssueTool, defaultTaskRegistry } from "@sema-agent/core";
+import { CODE_AGENT_PROMPT, CODE_SYSTEM_PROMPT, DEFAULT_SYSTEM_PROMPT, assembleCodeTools, defaultTaskRegistry } from "@sema-agent/core";
 import { HttpError } from "../security.js";
 import { nowTool } from "./builtin-tools.js";
 import { GiteaClient, parseRepo, repoToolsFor } from "./repo-tools.js";
 import { createCouncilTool, clampRounds } from "./code-review-council.js";
 import { stablePrompt } from "./prompt.js";
 import { createTeamTool, teamCoordinatorPrompt, getTeam, teamNames } from "./team.js";
-import { oaTools, oaPrompt } from "./oa-tools.js";
 import { createWebSearchBackend, webSearchConfigFromSettings } from "../plugins/web-search.js";
 import { skillsForScenario } from "./skills.js";
 /**
@@ -205,23 +204,6 @@ export function buildScenarios(deps) {
                 skills: skillsForScenario(deps.skills, "scan"),
             };
         },
-        oa: (req, principal) => {
-            if (!deps.oaApiBaseUrl || !deps.oaServiceToken)
-                throw new HttpError(501, "oa scenario needs OA_API_BASEURL + OA_SERVICE_TOKEN configured");
-            // OA enforces the END USER's RBAC from the forwarded principal — without one, every OA call would
-            // run unattributed. Refuse rather than silently send a null principal.
-            if (!principal)
-                throw new HttpError(401, "oa scenario requires an authenticated principal (set REQUIRE_PRINCIPAL + x-agent-principal)");
-            // 写权限的"开 issue"工具仅当配置了 OA_ISSUE_* 时注入；token/repo 固定，模型只填 title/body。
-            const issueTool = deps.oaIssue
-                ? [createGiteaIssueTool({ ...deps.oaIssue, name: "open_gitea_issue", description: "把用户的 bug/需求开成 Gitea issue 报给老板。只填 title(简洁)/body(现象、影响、复现/建议)。仓库与标签由部署固定。" })]
-                : [];
-            return {
-                tools: [...oaTools({ baseUrl: deps.oaApiBaseUrl, token: deps.oaServiceToken, principal }), ...issueTool],
-                skills: skillsForScenario(deps.skills, "oa"),
-                promptProvider: oaPrompt,
-            };
-        },
         // Multi-agent team: pick a template, the consumer (OA) injects business context, we run it.
         // Templates resolve from the live registry (`getTeam`) = BUILTIN_TEAMS overridden/extended by the
         // sema registry at runtime (applyEffective → registerTeams), so a team is config-driven; built-ins
@@ -270,7 +252,6 @@ export function builtinScenarioDetails(scenarios, deps) {
             : "core 编码完全体提示词(= code 场景;finalVerification 固定开)"),
         "code-review": mk("code-review", "代码评审(clone-free 只读仓库工具;council=true 升多镜头评审团)", "repo-readonly", probe("code-review", { repo: "probe/probe" }, undefined, REPO_TOOLS), "评审员/评审团协调提示词(镜头分工+产出契约)"),
         scan: mk("scan", "中性只读仓库扫描(输出契约由 objective+skills 决定)", "repo-readonly", probe("scan", { repo: "probe/probe" }, undefined, REPO_TOOLS), "无场景附加提示词(objective+center skills 拥有输出契约)"),
-        oa: mk("oa", "OA 资产运营助手(以最终用户 principal 走 OA API,RBAC+审计在 OA 侧)", "oa-api", probe("oa", {}, "probe:meta", ["oa_schema", "oa_alerts", "oa_list", "oa_get", "oa_lookup", "oa_create", "oa_update", "oa_transition"]), "OA 运营助手提示词(先 schema 后操作、写走受控流转)"),
         team: mk("team", "多智能体团队圆桌(模板成员+synthesizer,模板可由 registry 配置)", "team", probe("team", {}, undefined, ["run_team"]), "团队协调者提示词(圆桌纪律+合成流程)"),
     };
 }

package/dist/capabilities/send-user-file-tool.js

@@ -24,7 +24,7 @@
  */
 import { AsyncLocalStorage } from "node:async_hooks";
 import { Type } from "typebox";
-import { builtinAgentDefinitions, canonicalToolName } from "@sema-agent/core";
+import { builtinAgentDefinitions } from "@sema-agent/core";
 /** Per-run ALS carrier (QuestionCoordinator pattern): run legs wrap their body via runWithContext; the tool
  *  recovers the ambient emit at execute time. No pending state, no respond face — emission is one-way. */
 export class SendUserFileEmitter {
@@ -155,7 +155,7 @@ const READONLY_BUILTIN_AGENT_TYPES = new Set(builtinAgentDefinitions().map((d) =
  * definition's name (core subagent.js); membership in core's builtin catalog ⇒ inject nothing for that spawn.
  */
 export function subagentSendUserFileExtraTools(deps) {
-    const canonical = canonicalToolName(SEND_USER_FILE_TOOL_NAME);
+    const canonical = SEND_USER_FILE_TOOL_NAME; // RAW(5.0.0):本名恒 canonical,折叠面退役
     return (ctx) => {
         // F2: read-only builtin child (Explore/Plan) — never inject.
         if (ctx.agentType !== undefined && READONLY_BUILTIN_AGENT_TYPES.has(ctx.agentType))
@@ -163,7 +163,7 @@ export function subagentSendUserFileExtraTools(deps) {
         // F1: deployment policy gates SendUserFile (deny/ask) — withhold from ALL children (fail-closed stopgap
         // until core propagates the parent toolPolicy into child specs). Canonical-space match (S8 discipline).
         const gate = deps.approvalGate();
-        const gated = [...(gate.deny ?? []), ...(gate.require ?? []), ...(gate.neverAuto ?? [])].some((t) => canonicalToolName(t) === canonical);
+        const gated = [...(gate.deny ?? []), ...(gate.require ?? []), ...(gate.neverAuto ?? [])].some((t) => t === canonical);
         return gated ? [] : [deps.spec];
     };
 }

package/dist/config-center/apply-effective.js

@@ -292,8 +292,8 @@ function stageEffective(config, eff, logger, opts) {
         // → undefined = INERT). Values are catalog NAME strings (open, not enum'd); dangling bindings were already
         // culled center-side. mutateInPlace keeps the reference RunnerDeps.tiers holds — the expansion itself happens
         // at Runner CONSTRUCTION (core 1.265 expandTiers), so a refresh-time change is restart-to-apply like models.
-        // NOTE: the wire face (this module's EffectiveConfig) carries the JSON body verbatim, so tierGroups ride
-        // eff.models even though CenterModel doesn't type them — resolveActiveTiers reads them structurally.
+        // [2373]B-6:EffectiveConfig.models 已声明 tierGroups/activeTierGroup(types.ts)——旧「CenterModel
+        // doesn't type them」注随宽铸一起退役;resolveActiveTiers 收 registry-core 形,窄化一步即可。
         const activeTiers = resolveActiveTiers(eff.models) ?? {};
         // [865]①(生产实锤:面板上选了 A 模型,实际跑的是目录里的另一个)显式默认解析——enabled[0] 会被任何改变 pool 顺序的写
         // 静默翻转,default 必须消费 wire 里已有的显式意图。解析单源 = resolveDefaultModelName(dry-run 的
@@ -360,13 +360,13 @@ function stageEffective(config, eff, logger, opts) {
     // 142-S4 projects 域(registry-core 0.10.0):center 项目登记簿 → config.projects(键=
     // projectId)。消费是 per-request 查表(memoryScope 派生 + defaultScopes 种子,security.ts/main.ts),
     // 所以 boot+refresh 双腿都 mutateInPlace 热应用(整表替换,非粘——center 停发即清空);env lane 恒空。
-    // 宽读:域包裹 `{projects:{...}}`(registry-core ProjectsConfig 真形状)与裸 Record 都认(projectId=UUID,
-    // 永不撞 "projects" 字面键);防御:非 object 条目跳过,字段逐个验型(wire verbatim,不信任形状)。
+    // [2373]B-8:裸 Record 臂删——registry-core 0.13.0 ProjectsConfig 只有包裹形 `{projects:{...}}`
+    // (types.d.ts:3599,且 :12231 钉进 EffectiveConfig),裸形无 producer(与 Q15 declared 双形容忍同族)。
+    // 防御保留:非 object 条目跳过,字段逐个验型(wire verbatim,不信任形状)。
     const projDomain = eff.projects;
-    const rawProjects = (projDomain && typeof projDomain === "object" && !Array.isArray(projDomain)
-        ? "projects" in projDomain && typeof projDomain.projects === "object"
-            ? (projDomain.projects ?? {})
-            : projDomain
+    const rawProjects = (projDomain && typeof projDomain === "object" && !Array.isArray(projDomain) &&
+        "projects" in projDomain && typeof projDomain.projects === "object"
+        ? (projDomain.projects ?? {})
         : {}) ?? {};
     const projects = {};
     for (const [pid, reg] of Object.entries(rawProjects)) {

package/dist/config-center/types.d.ts

@@ -126,10 +126,17 @@ export interface CenterMcpServer {
 export interface EffectiveConfig {
     version: number;
     updatedAt: string;
+    /** [2373]B-6:default/tierGroups/activeTierGroup 收进类型面(registry-core 0.13.0 已声明,
+     *  types.d.ts:641/679/724)——此前 wire 面靠「JSON verbatim + 消费方结构读」逃逸,投影/消费两侧
+     *  各自 as 宽铸。tierGroups 上游是 ZodDefault(合规 center 恒发),但本类型描述的是**到货 JSON**
+     *  (含非合规/旧存量 center),故仍标 optional——消费方 resolveActiveTiers 自身容缺。 */
     models: {
         models: CenterModel[];
         roles: Record<string, CenterRoleTarget>;
         atModelAllowlist?: string[];
+        default?: string;
+        tierGroups?: unknown;
+        activeTierGroup?: string;
     };
     /** OPTIONAL since registry-core 0.7 deleted the teams domain: a 0.7+ center /effective payload
      *  has NO teams key (collab is its successor). Absent/empty ⇒ registerTeams resets to BUILTIN_TEAMS (the
@@ -180,12 +187,12 @@ export interface EffectiveConfig {
     };
     /** 142-S4(registry-core 0.10.0 第 15 域):center 项目登记簿。wire 面 verbatim JSON —
      *  registry-core `ProjectsConfig` 的形状是 `{projects: Record<projectId, ProjectRegistration>}`(skills/mcp
-     *  同款域包裹),但本 interface 宽读两种形态(包裹/裸 Record——projectId 是 UUID,永远不会撞 "projects"
-     *  字面键,判包裹无歧义)。消费=applyEffective → config.projects(displayName/gitRemotes/defaultScopes
+     *  同款域包裹)。[2373]B-8:裸 Record 联合臂随 apply-effective 的宽读一起删(0.13.0 只有包裹形,
+     *  裸形无 producer)。消费=applyEffective → config.projects(displayName/gitRemotes/defaultScopes
      *  三个 runtime 字段;审计字段不进 ServiceConfig)。 */
     projects?: {
         projects?: Record<string, unknown>;
-    } | Record<string, unknown>;
+    };
     /** registry-core 0.6:治理三件(autonomy/commandPolicy/approvalRequire)拆新 governance 域=真值;
      *  过渡期 effective 在 runtime 位双写镜像。读取优先 governance 新位、runtime 旧位 fallback(顺序契约:
      *  消费端先切换、确认后 center 才撤双写,治理闸零 fail-open 窗口)。 */

package/dist/config-provider.js

@@ -210,16 +210,9 @@ export function mapToServiceEffective(eff, version) {
                 ...(m.contextWindow !== undefined ? { contextWindow: m.contextWindow } : {}),
                 ...(m.maxTokens !== undefined ? { maxTokens: m.maxTokens } : {}),
                 // codex F5 ([818]① 1M dual-window): an EXPLICIT `autoCompactTokens` must survive this CLOSED
-                // projection — the remote lane ships the roster JSON verbatim and toModel reads the field
-                // structurally, but the local lane funnels through this mapper, which silently ATE the explicit
-                // value (it then fell back to the contextWindow derivation). Structural read (registry-core's
-                // ModelEntry doesn't declare it — same passthrough posture as tierGroups below). NOTE (honest
-                // gap): registry-core's zod ModelEntry is "strip"-mode, so a value in a config.d/models.json read
-                // through FileConfigStore is ALSO dropped upstream of this mapper — that half needs a registry-core
-                // schema addition; this fix removes OUR projection's drop for any caller of this seam.
-                ...(typeof m.autoCompactTokens === "number"
-                    ? { autoCompactTokens: m.autoCompactTokens }
-                    : {}),
+                // projection. [2373]B-6d:registry-core 0.13.0 已把它收进 ModelEntry schema(types.d.ts:157/212)
+                // ——旧注的「strip-mode 会在上游丢值」的 honest gap 已随那次 schema addition 关闭,结构读改类型直读。
+                ...(typeof m.autoCompactTokens === "number" ? { autoCompactTokens: m.autoCompactTokens } : {}),
                 ...(m.cost !== undefined ? { cost: m.cost } : {}),
                 ...(m.extraBody !== undefined ? { extraBody: m.extraBody } : {}),
                 // registry-core 0.10.13 promptGuidance ([998]⑤c): the CLOSED projection must pass it through or
@@ -232,10 +225,12 @@ export function mapToServiceEffective(eff, version) {
             // 本 mapper 是 CLOSED 投影——不直通则本地 lane 静默丢键(autoCompactTokens 同类病),applyEffective 的
             // resolveDefaultModelName 第一优先级在本地 lane 永远点不亮。写面悬空 ref 由 registry-core superRefine
             // fail-loud;存量/未经 schema 的路径仍由消费方 warn 降级(config-center/facade.ts resolveDefaultModelName)。
-            ...(eff.models.default !== undefined ? { default: eff.models.default } : {}),
+            ...(eff.models.default !== undefined ? { default: eff.models.default } : {}), // [2373]B-6c:0.13.0 类型直读(types.d.ts:641)
             ...(eff.models.atModelAllowlist !== undefined ? { atModelAllowlist: eff.models.atModelAllowlist } : {}),
             // registry-core 0.9.0 档位组: verbatim passthrough — applyEffective's resolveActiveTiers reads
             // these structurally off eff.models (the remote lane ships them JSON-verbatim; the local lane must too).
+            // [2373]B-6b:0.13.0 类型直读(EffectiveConfig.models 面已声明四键,宽铸删)。本地 lane 的
+            // eff 来自 FileConfigStore 原始 JSON(非 zod 输出),tierGroups 的 ZodDefault 恒在场性不适用——门保留。
             ...(eff.models.tierGroups !== undefined ? { tierGroups: eff.models.tierGroups } : {}),
             ...(eff.models.activeTierGroup !== undefined ? { activeTierGroup: eff.models.activeTierGroup } : {}),
         },

package/dist/config-types.d.ts

@@ -299,13 +299,13 @@ export interface ServiceConfigFlat {
         database: string;
         connectionLimit?: number;
     };
-    /** Which SQL engine the durable stores run on (clay 2026-06-21 PG migration; 2026-07-06 wording: canonical
-     *  value is `mysql` = any MySQL-protocol server — MySQL, TiDB, MariaDB — over the same mysql2 pool; the env
-     *  value `tidb` is a back-compat alias normalized to `mysql` at parse). `mysql` reads the `tidb`-named
-     *  connection coords above (MYSQL_* env preferred, TIDB_* accepted); `pg` (PostgreSQL dialect) reads `pg`
-     *  below. A subsystem that selects a DB backend (sessionBackend === "tidb", read as "the SQL DB") then
-     *  runs on the engine `dbBackend` picks. TiDB is fully supported (any MySQL-protocol engine works —
-     *  memory no longer needs a VECTOR column since design/138 moved it onto the file engine). Env: DB_BACKEND. */
+    /** Which SQL engine the durable stores run on (clay 2026-06-21 PG migration). Canonical value is `mysql`
+     *  = any MySQL-protocol server — MySQL, TiDB, MariaDB — over the same mysql2 pool; `pg` (PostgreSQL
+     *  dialect) reads `pg` below. [2354]/[2373]B-3(5.0.0):the env value `tidb` and the TIDB_* coord names
+     *  are RETIRED — `tidb` is rejected by the enum and any TIDB_* env in place refuses to start with the
+     *  MYSQL_* replacement named (see RETIRED_ENVS in config.ts). `mysql` reads MYSQL_* coords only.
+     *  TiDB itself stays fully supported (any MySQL-protocol engine works — memory no longer needs a VECTOR
+     *  column since design/138 moved it onto the file engine). Env: DB_BACKEND. */
     dbBackend: "mysql" | "pg" | "local" | "memory";
     /** clay 拍(2026-07-27):operator 是否显式设了 DB_BACKEND。main.ts 的降级判据——**默认推导**的
      *  local(裸 boot)在 mkdir/ensure 失败时降级 memory + warn + gauge(auto-DB 不可达先例);
@@ -468,11 +468,10 @@ export interface ServiceConfigFlat {
     operatorPrincipals: string[];
     /** Tool names that are always denied. */
     approvalDeny: string[];
-    /** Poll interval (ms) for an approval decision. */
-    approvalPollMs: number;
     /** design/45 durable-checkpoint (core 1.67): when true (+ a TiDB pool), F4 uses durable **suspend/resume**
      *  instead of poll-blocking — a gated tool `ask` suspends the task (status:"suspended" + checkpoint), an
-     *  operator resumes it on any replica. Default OFF → unchanged poll-policy. `DURABLE_APPROVAL=true`. */
+     *  operator resumes it on any replica. Default OFF([2354] A-5:轮询车道已退役,OFF+门意图 ⇒ core UNGATED
+     *  告警,不再有回退门形). `DURABLE_APPROVAL=true`. */
     durableApproval: boolean;
     /** design/80 seam #2 (preemption) / design/74 ("失败≠没做完" third state): when true (+ durable mode), the
      *  /v1/runs durable path opts every task into core `resourceSuspend` — a budget/turns/walltime limit OR a
@@ -797,7 +796,7 @@ export interface ServiceConfigFlat {
         to: string;
         atCostFraction: number;
         reactive: boolean;
-        downgradeOn?: ("rate_limit" | "breaker_open")[];
+        downgradeOn?: import("@sema-agent/core").DegradeReason[];
         toSupportsImages: boolean;
     };
     /** Quality-gate cascade ladder (core 1.45 `runCascade`, opt-in via `cascade:true`): catalog model
@@ -847,19 +846,6 @@ export interface ServiceConfigFlat {
     defaultScenario: string;
     /** Directory of baked-in skill Markdown files, loaded once at startup. */
     skillsDir: string;
-    /** OA backend base URL for the `oa` scenario tools (read /api/v1, write /api/assets). */
-    oaApiBaseUrl?: string;
-    /** Shared trust token forwarded to OA (= OA AGENT_SERVICE_TOKEN); OA enforces per-principal RBAC. */
-    oaServiceToken?: string;
-    /** `oa` 场景的"开 Gitea issue"工具配置(OA AI 请求#5)；仅当 OA_ISSUE_TOKEN 配置时启用。token 来自 env，不入模型/日志。
-     *  上线建议：OA_ISSUE_TOKEN 用**最小权限**(仅 issue:write 的 scope)，别用全权 token。 */
-    oaIssue?: {
-        baseUrl: string;
-        owner: string;
-        repo: string;
-        token: string;
-        defaultLabels?: number[];
-    };
     /** Central sema registry (sema-registry). When set, the service pulls the effective config
      *  on boot (and refreshes) and applies it OVER the env defaults — env is the fallback. Logical config
      *  only (model roster/roles/teams); secrets/gateways stay in this service's env.
@@ -886,7 +872,7 @@ export type ServiceStoreConfig = Pick<ServiceConfigFlat, "sessionBackend" | "ses
 export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "cascadeLadder" | "degrade">;
 /** 组:approval(审批 / HITL 门)。`directDoorActive` 无 env 解析腿(装配层三域合取的产物),但语义上
  *  就是本组的门状态,故进组;`parseApprovalDomain` 的返回类型相应是 `Omit<…, "directDoorActive">`。 */
-export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalPollMs" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "askQuestionEnabled" | "toolApprovalEnabled" | "mcpElicitation" | "sensitiveWritePatterns" | "manualModeShellGate">;
+export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "askQuestionEnabled" | "toolApprovalEnabled" | "mcpElicitation" | "sensitiveWritePatterns" | "manualModeShellGate">;
 /** 组:memory(记忆面 + TOC 同步腿)。 */
 export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled" | "memoryEngineDir" | "memoryEngineRemoteLaneAllowed" | "memoryEngineBackend" | "memoryScope" | "memorySync" | "projectMemoryEnabled" | "syncImportLeaseStaleSec">;
 /** 组:auth(鉴权 / 身份 / 治理棒)。`commandPolicy` 只有 sema-registry 腿(无 env 标量形),故 env 解析
@@ -899,7 +885,7 @@ export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachme
 /** 组:observability(可观测)。 */
 export type ServiceObservabilityConfig = Pick<ServiceConfigFlat, "metricsToken" | "traceToken" | "toolTrace" | "traceThinking" | "logLevel" | "otel">;
 /** 组:integrations(外部集成)。`mcpServers` 由 sema-registry 适配器填(无 env 腿),归本组。 */
-export type ServiceIntegrationsConfig = Pick<ServiceConfigFlat, "pluginsAllowHosts" | "mcpServers" | "configBootFetchBudgetMs" | "gitApiBaseUrl" | "gitApiToken" | "defaultScenario" | "skillsDir" | "oaApiBaseUrl" | "oaServiceToken" | "oaIssue" | "configCenter" | "configProvider" | "configLocalDir">;
+export type ServiceIntegrationsConfig = Pick<ServiceConfigFlat, "pluginsAllowHosts" | "mcpServers" | "configBootFetchBudgetMs" | "gitApiBaseUrl" | "gitApiToken" | "defaultScenario" | "skillsDir" | "configCenter" | "configProvider" | "configLocalDir">;
 /** 九个组槽。每组恒在场(`loadConfig` / `attachConfigGroups` 装好才交出配置),故不可选——新代码写
  *  `config.modelPlane.model` 不需要 `?.`(可选组会把 `Model` 污染成 `Model | undefined`)。 */
 export interface ServiceConfigGroups {

package/dist/config.js

@@ -1,7 +1,7 @@
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, RECOMMENDED_SENSITIVE_PATTERNS } from "@sema-agent/core";
+import { CODE_AGENT_PROMPT, formatUserScope, isThinkingLevel, protocolOf, RECOMMENDED_SENSITIVE_PATTERNS, RETIRED_TOOL_NAMES } from "@sema-agent/core";
 import { ROSTER_PRIMARY_ROLES, ROSTER_CHEAP_ROLES } from "@sema-agent/registry-core";
 import { parseApprovalHmacKeys, parsePrincipalJwks } from "./auth-keys.js"; // design/158 A4: the parser leaf — NOT security.js (base config layer must not value-import the 55KiB auth module)
 import { DEFAULT_ELICITATION_THROTTLE } from "./elicitation.js";
@@ -60,16 +60,32 @@ function defaultSkillsDir() {
         return "skills"; // import.meta 不可用的兜底(不应发生在 ESM 构建里)
     }
 }
-/** Two-name env with the first set winning (MYSQL_* preferred over the TIDB_* back-compat alias); throws
- *  when neither is set and no fallback is given — same fail-loud contract as `env`. */
-function env2(primary, alias, fallback) {
-    const v = process.env[primary] || process.env[alias];
-    if (v === undefined || v === "") {
-        if (fallback !== undefined)
-            return fallback;
-        throw new Error(`missing required env: ${primary} (or ${alias})`);
+/** [2354] 兼容面全清:退役 env 名墓碑——老名**在场即拒启**带新名指引(boolEnvWithLegacyNegated 3.0.0
+ *  负名墓碑同形)。静默忽略=部署带着失效配置无感跑;双读=兼容层吸收下游冒烟。都不要。 */
+const RETIRED_ENVS = [
+    ["TIDB_HOST", "MYSQL_HOST"], ["TIDB_PORT", "MYSQL_PORT"], ["TIDB_USER", "MYSQL_USER"],
+    ["TIDB_PASSWORD", "MYSQL_PASSWORD"], ["TIDB_DATABASE", "MYSQL_DATABASE"], ["TIDB_POOL_SIZE", "MYSQL_POOL_SIZE"],
+    ["CONFIG_CENTER_URL", "SEMA_REGISTRY_URL"], ["CONFIG_CENTER_TOKEN", "SEMA_REGISTRY_TOKEN"],
+    ["CONFIG_CENTER_DRY_RUN", "SEMA_REGISTRY_DRY_RUN"], ["CONFIG_CENTER_WORKER", "SEMA_REGISTRY_WORKER"],
+    ["ANTHROPIC_BASEURL", "ANTHROPIC_BASE_URL"],
+    ["REGISTRY_ADMIN_TOKEN", "SEMA_REGISTRY_ADMIN_TOKEN"], // [2373]B-1:墓碑族唯一漏网的双读(config-center.ts 发射点)
+    // [2354] OA 场景整体退役(clay 令 2026-08-01):配置本身作废,无替代名。
+    ["OA_API_BASEURL", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_SERVICE_TOKEN", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_ISSUE_TOKEN", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_ISSUE_BASEURL", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_ISSUE_OWNER", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_ISSUE_REPO", "(retired — OA scenario removed in 5.0.0)"],
+    ["OA_ISSUE_LABELS", "(retired — OA scenario removed in 5.0.0)"],
+    ["APPROVAL_POLL_MS", "(retired — OA poll-approval lane removed in 5.0.0; durable checkpoint lane is the only gate)"],
+];
+function rejectRetiredEnvs() {
+    const hit = RETIRED_ENVS.filter(([o]) => process.env[o] !== undefined && process.env[o] !== "");
+    if (hit.length > 0) {
+        throw new Error(`retired env name(s) set ([2354] 兼容面全清,5.0.0 起拒启): ` +
+            hit.map(([o, n]) => `${o} → use ${n}`).join("; ") +
+            ` — rename the env key(s); the value semantics are unchanged.`);
     }
-    return v;
 }
 /** Numeric env with validation: a non-numeric value FAILS at startup instead of silently becoming `NaN`
  *  (which e.g. slips past the `runStaleSec` liveness guard and silently disables the reaper). */
@@ -387,11 +403,11 @@ function parseStoreDomain(ctx) {
     // 在场时,dbBackend 的旧默认 "mysql" 是**引擎选择器**(auto 探测/coords 构建都 key 它),默认切
     // local 会把这些既有形错切到文件店(回归钉在 config-coverage)。
     const sqlSignal = (!!process.env.SESSION_BACKEND && process.env.SESSION_BACKEND !== "memory") ||
-        !!(process.env.TIDB_HOST || process.env.MYSQL_HOST || process.env.PG_HOST);
+        !!(process.env.MYSQL_HOST || process.env.PG_HOST);
     const bareBoot = !dbBackendSet && !sqlSignal;
     const multiTenantBareBoot = bareBoot && requirePrincipal;
-    const dbBackendRaw = enumEnv("DB_BACKEND", bareBoot ? (multiTenantBareBoot ? "memory" : "local") : "mysql", ["mysql", "tidb", "pg", "local", "memory"]);
-    const dbBackend = dbBackendRaw === "tidb" ? "mysql" : dbBackendRaw;
+    // [2354]:公名枚举不再收 "tidb"(enumEnv 对越集值自带拒启);内部逻辑不变。
+    const dbBackend = enumEnv("DB_BACKEND", bareBoot ? (multiTenantBareBoot ? "memory" : "local") : "mysql", ["mysql", "pg", "local", "memory"]);
     if (multiTenantBareBoot) {
         CONFIG_NOTICES.push({
             event: "db_backend_default_memory_multi_tenant",
@@ -407,7 +423,7 @@ function parseStoreDomain(ctx) {
     // backend); an UNSET DB_BACKEND keeps the memory default (no surprise DB requirement on a bare boot).
     // `mysql` is accepted as an alias of the internal durable label `tidb` (see ServiceConfig.sessionBackend).
     const sqlEngineExplicit = !!process.env.DB_BACKEND && dbBackend !== "local" && dbBackend !== "memory";
-    const sessionBackendRaw = enumEnv("SESSION_BACKEND", sqlEngineExplicit ? "mysql" : "memory", ["memory", "mysql", "tidb", "auto"]);
+    const sessionBackendRaw = enumEnv("SESSION_BACKEND", sqlEngineExplicit ? "mysql" : "memory", ["memory", "mysql", "auto"]); // [2354]:公名 "tidb" 退役
     const sessionBackend = sessionBackendRaw === "mysql" ? "tidb" : sessionBackendRaw;
     // P0.5 variant-2: the file-backed `local` backend's data root. Same tail as main.ts's `localRoot` and
     // run-local.ts's `root` (CONFIG_LOCAL_DIR → AGENT_DATA_DIR → ~/.ai-agent), so the HTTP service + a run-local
@@ -421,7 +437,7 @@ function parseStoreDomain(ctx) {
     // `auto` builds the DB coords only when a host is actually configured — otherwise it stays memory with no
     // probe. (Explicit mysql always builds them so a missing host fails loudly.) `needsDb` is engine-agnostic;
     // the connection coords are built for whichever engine `dbBackend` selects (MYSQL_* preferred, TIDB_* alias).
-    const dbHostSet = dbBackend === "pg" ? !!process.env.PG_HOST : !!(process.env.MYSQL_HOST || process.env.TIDB_HOST);
+    const dbHostSet = dbBackend === "pg" ? !!process.env.PG_HOST : !!process.env.MYSQL_HOST;
     const needsTidb = sessionBackend === "tidb" || (sessionBackend === "auto" && dbHostSet);
     const needsDb = needsTidb;
     return {
@@ -433,14 +449,13 @@ function parseStoreDomain(ctx) {
         localDataRoot,
         tidb: needsDb && dbBackend === "mysql"
             ? {
-                host: env2("MYSQL_HOST", "TIDB_HOST"),
-                // default port follows the env family in use: MYSQL_HOST → 3306 (stock MySQL), TIDB_HOST → 4000 (TiDB)
-                port: Number(env2("MYSQL_PORT", "TIDB_PORT", process.env.MYSQL_HOST ? "3306" : "4000")),
-                user: env2("MYSQL_USER", "TIDB_USER"),
-                password: env2("MYSQL_PASSWORD", "TIDB_PASSWORD", ""),
-                database: env2("MYSQL_DATABASE", "TIDB_DATABASE"),
-                connectionLimit: process.env.MYSQL_POOL_SIZE || process.env.TIDB_POOL_SIZE
-                    ? Number(process.env.MYSQL_POOL_SIZE || process.env.TIDB_POOL_SIZE)
+                host: env("MYSQL_HOST"),
+                port: Number(env("MYSQL_PORT", "3306")),
+                user: env("MYSQL_USER"),
+                password: env("MYSQL_PASSWORD", ""),
+                database: env("MYSQL_DATABASE"),
+                connectionLimit: process.env.MYSQL_POOL_SIZE
+                    ? Number(process.env.MYSQL_POOL_SIZE)
                     : undefined,
             }
             : undefined,
@@ -528,7 +543,7 @@ function parseModelDomain() {
     // credential alone does NOT infer (a bare ANTHROPIC_API_KEY historically only assembles the cloud route for
     // registry-declared anthropic models); neither present ⇒ "gateway", byte-identical to before.
     const explicitProvider = process.env.MODEL_PROVIDER; // env() semantics: "" = unset
-    const inferredAnthropicBaseUrl = firstSetEnv("ANTHROPIC_BASEURL", "ANTHROPIC_BASE_URL");
+    const inferredAnthropicBaseUrl = firstSetEnv("ANTHROPIC_BASE_URL"); // [2354]:无下划线非标名退役(墓碑)
     const inferredAnthropicCred = firstSetEnv("ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN");
     const provider = (() => {
         if (explicitProvider !== undefined && explicitProvider !== "")
@@ -719,7 +734,7 @@ function parseModelDomain() {
             ? {
                 apiKey: firstSetEnv("ANTHROPIC_API_KEY"),
                 authToken: firstSetEnv("ANTHROPIC_AUTH_TOKEN"),
-                baseUrl: firstSetEnv("ANTHROPIC_BASEURL", "ANTHROPIC_BASE_URL"),
+                baseUrl: firstSetEnv("ANTHROPIC_BASE_URL"),
                 version: process.env.ANTHROPIC_VERSION,
                 cacheBreakpoints: (process.env.ANTHROPIC_CACHE_BREAKPOINTS ?? "true") === "true",
                 ...(process.env.ANTHROPIC_MAX_RETRIES ? { maxRetries: Number(env("ANTHROPIC_MAX_RETRIES", "2")) } : {}),
@@ -755,9 +770,9 @@ function parseModelDomain() {
                 to: env("MODEL_DEGRADE_TO"),
                 atCostFraction: Number(env("MODEL_DEGRADE_AT_COST_FRACTION", "0.7")),
                 reactive: boolEnv("MODEL_DEGRADE_REACTIVE", false),
-                downgradeOn: csv("MODEL_DEGRADE_ON").length
-                    ? csv("MODEL_DEGRADE_ON")
-                    : undefined,
+                // core 5.1.0([2390]②):词表=DegradeReason 全集;缺席时 core 默认含 server_error(默认门变宽),
+                // 本 env 是运维收窄/放宽的唯一旋钮。拼错词 boot 响亮拒——盲铸静默折无效成员是 TASK_TIMEOUT_SEC 同族病。
+                downgradeOn: parseDegradeOn(csv("MODEL_DEGRADE_ON")),
                 // vision precheck (adversarial-review finding): the degrade TARGET is an external gateway
                 // model NOT in config.models, so resolveSpec's precheck (which only sees the picked model) can't see its
                 // vision capability — a vision-capable main + text-only degrade target would let images reach the text-only
@@ -771,6 +786,18 @@ function parseModelDomain() {
 }
 /** 域:approval(审批/HITL 门)—— 审批名单与预算、durable 面、直连门开关与钥、敏感写门、elicitation。
  *  注:直连门的**激活**(directDoorActive)与 D-G §3 半开门不变量是跨域合取,留在装配层。 */
+/** MODEL_DEGRADE_ON 词表=core `DegradeReason` 全集(集合用该类型铸=锁步:core 删词此处 tsc 红,加词这里
+ *  补一个词即可)。非法词 boot 响亮拒——盲铸静默折无效成员与 TASK_TIMEOUT_SEC 非法值折「无超时」同族。 */
+const DEGRADE_ON_WORDS = new Set(["breaker_open", "rate_limit", "budget", "server_error", "last_resort"]);
+function parseDegradeOn(words) {
+    if (words.length === 0)
+        return undefined;
+    const bad = words.filter((w) => !DEGRADE_ON_WORDS.has(w));
+    if (bad.length > 0) {
+        throw new Error(`MODEL_DEGRADE_ON has unknown trigger word(s): ${bad.join(", ")} (valid: ${[...DEGRADE_ON_WORDS].join(", ")})`);
+    }
+    return words;
+}
 function parseApprovalDomain(ctx) {
     const { postureOn } = ctx; // 跨域入参②:posture 三态(single-user turnkey ⇒ HITL 面默认 ON)
     // design/80 D-G: the direct-connect approval door anchors (all must be present to ACTIVATE; fail-closed).
@@ -778,15 +805,34 @@ function parseApprovalDomain(ctx) {
     const dgHmacKeys = parseApprovalHmacKeys(process.env.APPROVAL_HMAC_KEYS);
     // DURABLE_APPROVAL 既是本域字段,也是直连门的硬前置 —— 那条前置的理由与断言在装配层的跨域不变量段。
     const durableApproval = boolEnv("DURABLE_APPROVAL", false);
+    // [2380] core 5.0.0 RB-476:approval 名单里的退役工具名**装配期拒启**(带现役名指引)。core 自己的
+    // prepare 门(config.legacy_tool_name)在提交期才响——boot 期先拒,部署带失效名单不启动而不是首任务炸。
+    // 名单 RAW 直传(canonicalToolName 折叠面已随 core 退役,见 approval.ts)。
+    const rejectRetiredToolNames = (envName, names) => {
+        const hit = names.filter((n) => RETIRED_TOOL_NAMES.has(n));
+        if (hit.length > 0) {
+            throw new Error(`${envName} names retired tool(s) (core 5.0.0 RB-476 — the alias fold is gone, these never match): ` +
+                hit.map((n) => `${n} → ${RETIRED_TOOL_NAMES.get(n)}`).join("; "));
+        }
+        // [2382]① core 5.1.0 判别式:pre-prefix 短名(figma__x 形)静态表拦不住,而这些名单是 server 侧
+        // ToolPolicy 原样比对——core 的 prepare 硬臂(G-3)只管 core 侧 rules,管不到这里;放过=deny 静默
+        // 永不匹配(失守方向)。名含 `__` 且协议前缀不认识 ⇒ boot 拒。部署自有工具真叫 `figma__x` 的极端形
+        // 会被误拒(boot 无 roster 可豁免)——与上面退役表墓碑同一个已接受权衡,失败响亮且指引明确。
+        const prePrefix = names.filter((n) => n.includes("__") && protocolOf(n) === undefined);
+        if (prePrefix.length > 0) {
+            throw new Error(`${envName} names look like pre-prefix MCP short forms (the v4 auto-prefix fold is gone — these never match a live tool): ` +
+                prePrefix.map((n) => `${n} → mcp__${n}`).join("; "));
+        }
+        return names;
+    };
     return {
-        approvalRequire: csv("APPROVAL_REQUIRE"),
-        approvalDeny: csv("APPROVAL_DENY"),
-        approvalPollMs: Number(env("APPROVAL_POLL_MS", "1500")),
+        approvalRequire: rejectRetiredToolNames("APPROVAL_REQUIRE", csv("APPROVAL_REQUIRE")),
+        approvalDeny: rejectRetiredToolNames("APPROVAL_DENY", csv("APPROVAL_DENY")),
         durableApproval,
         resourceSuspend: boolEnv("RESOURCE_SUSPEND", false),
         resourceSuspendTtlSec: Math.max(0, numEnv("RESOURCE_SUSPEND_TTL_SEC", "0")), // 0 ⇒ core default (30d)
         approvalAutoBudget: Math.min(10000, Math.max(0, numEnv("APPROVAL_AUTO_BUDGET", "0"))), // clamp [0,10000]; 0 = off
-        approvalNeverAuto: csv("APPROVAL_NEVER_AUTO"),
+        approvalNeverAuto: rejectRetiredToolNames("APPROVAL_NEVER_AUTO", csv("APPROVAL_NEVER_AUTO")),
         approvalHmacKeys: dgHmacKeys, // D-G: WIRED (see the field's JSDoc); empty ⇒ inactive, not unimplemented
         directApprovalDoor,
         // ③ sensitive-path write deny set: unset = core's recommended set; explicit value = full replacement
@@ -910,11 +956,10 @@ function parseAuthDomain(ctx) {
         .map((s) => [s.slice(0, s.indexOf("=")).trim(), s.slice(s.indexOf("=") + 1).trim()])
         .filter(([tok, sys]) => tok.length > 0 && sys.length > 0));
     return {
-        // 绑址([1934]):BIND_HOST 优先,HOST 兼容(cli/桌面传的就是它);空串=未设。
-        bindHost: process.env.BIND_HOST || process.env.HOST || undefined,
-        // [2062]③ 来源记账:HOST 是 zsh 会替用户设的名字(HOST=机器名),{...process.env} 起底的壳会把它
-        // 静默继承给引擎——bind 面被 shell 环境暗配而部署者不知情。main.ts 对 "HOST" 来源打一行启动告警。
-        bindHostSource: process.env.BIND_HOST ? "BIND_HOST" : process.env.HOST ? "HOST" : undefined,
+        // [2354]:HOST 读取臂已删(zsh 恒设 HOST=机器名,不可墓碑——静默不读;cli/桌面 [2053] 起已传
+        // BIND_HOST)。绑址唯一口=BIND_HOST;空串=未设。
+        bindHost: process.env.BIND_HOST || undefined,
+        bindHostSource: process.env.BIND_HOST ? "BIND_HOST" : undefined,
         authToken: process.env.SERVICE_AUTH_TOKEN,
         authTokens,
         allowUnauthedWrites: boolEnv("ALLOW_UNAUTHED_WRITES", false),
@@ -1210,35 +1255,16 @@ function parseIntegrationsDomain() {
         // 编码产品出厂态对标 CC 出厂态,通用域中性 persona 用 DEFAULT_SCENARIO=default 显式选回。
         defaultScenario: env("DEFAULT_SCENARIO", "code"),
         skillsDir: env("SKILLS_DIR", defaultSkillsDir()),
-        oaApiBaseUrl: process.env.OA_API_BASEURL,
-        oaServiceToken: process.env.OA_SERVICE_TOKEN,
-        // 开 issue 工具：默认开到 OA 系统仓(AI-Only/oa-asset-system)，写权限 token 走独立 env。
-        oaIssue: process.env.OA_ISSUE_TOKEN
-            ? {
-                // npm 卫生纪律:不再烤内网 git 主机缺省 — 开了 OA_ISSUE_TOKEN 就必须给 host(fail-loud)。
-                baseUrl: (() => {
-                    const u = process.env.OA_ISSUE_BASEURL ?? process.env.GIT_API_BASEURL;
-                    if (!u)
-                        throw new Error("OA_ISSUE_TOKEN is set but no OA_ISSUE_BASEURL / GIT_API_BASEURL — the issue tool needs a git host");
-                    return u;
-                })(),
-                owner: env("OA_ISSUE_OWNER", "AI-Only"),
-                repo: env("OA_ISSUE_REPO", "oa-asset-system"),
-                token: env("OA_ISSUE_TOKEN"),
-                defaultLabels: csv("OA_ISSUE_LABELS").map(Number).filter((n) => Number.isInteger(n)),
-            }
-            : undefined,
+        // [2354] clay 令:OA 场景整体退役(oa-tools/oa 场景/OA 轮询审批车道随 5.0.0 全清)——
+        // OA_* env 全族进 RETIRED_ENVS 墓碑(在场即拒启),此处零读取。
         // sema-registry (control plane) URL/token/worker. The orchestrator renamed the worker-injected env from
-        // CONFIG_CENTER_* → SEMA_REGISTRY_* (the control-plane host was renamed to match); it dual-injects
-        // both names at the SAME value during the transition, so we DUAL-READ here — new name preferred, old name
-        // fallback — and keep working after the orchestrator drops the legacy CONFIG_CENTER_* names. Pure config
-        // plumbing: no API/auth/task-logic change.
-        configCenter: (process.env.SEMA_REGISTRY_URL || process.env.CONFIG_CENTER_URL)
+        // [2354]:CONFIG_CENTER_* 双读已删(墓碑在 rejectRetiredEnvs);SEMA_REGISTRY_* 唯一。
+        configCenter: process.env.SEMA_REGISTRY_URL
             ? {
-                baseUrl: process.env.SEMA_REGISTRY_URL || env("CONFIG_CENTER_URL"),
-                token: process.env.SEMA_REGISTRY_TOKEN || process.env.CONFIG_CENTER_TOKEN || "",
-                dryRun: (process.env.SEMA_REGISTRY_DRY_RUN ?? process.env.CONFIG_CENTER_DRY_RUN) === "true",
-                worker: process.env.SEMA_REGISTRY_WORKER || process.env.CONFIG_CENTER_WORKER || undefined,
+                baseUrl: env("SEMA_REGISTRY_URL"),
+                token: process.env.SEMA_REGISTRY_TOKEN || "",
+                dryRun: process.env.SEMA_REGISTRY_DRY_RUN === "true",
+                worker: process.env.SEMA_REGISTRY_WORKER || undefined,
             }
             : undefined,
         configProvider: process.env.CONFIG_PROVIDER || undefined,
@@ -1254,7 +1280,7 @@ const MODEL_PLANE_GROUP_KEYS = [
     "modelApiKeyEnv", "modelApiKeys", "modelQuotaWeights", "tiers", "projects", "roles", "cascadeLadder", "degrade",
 ];
 const APPROVAL_GROUP_KEYS = [
-    "approvalRequire", "approvalDeny", "approvalPollMs", "approvalTimeoutSec", "approvalAutoBudget", "approvalNeverAuto",
+    "approvalRequire", "approvalDeny", "approvalTimeoutSec", "approvalAutoBudget", "approvalNeverAuto",
     "approvalHmacKeys", "durableApproval", "directApprovalDoor", "directDoorActive", "resourceSuspend",
     "resourceSuspendTtlSec", "askQuestionEnabled", "toolApprovalEnabled", "mcpElicitation", "sensitiveWritePatterns",
     "manualModeShellGate",
@@ -1286,7 +1312,7 @@ const LIMITS_HTTP_GROUP_KEYS = [
 const OBSERVABILITY_GROUP_KEYS = ["metricsToken", "traceToken", "toolTrace", "traceThinking", "logLevel", "otel"];
 const INTEGRATIONS_GROUP_KEYS = [
     "pluginsAllowHosts", "mcpServers", "configBootFetchBudgetMs", "gitApiBaseUrl", "gitApiToken", "defaultScenario",
-    "skillsDir", "oaApiBaseUrl", "oaServiceToken", "oaIssue", "configCenter", "configProvider", "configLocalDir",
+    "skillsDir", "configCenter", "configProvider", "configLocalDir",
 ];
 /** 组名 → 该组取景的平铺键(introspection 面:测试用它钉「每个平铺键恰好被一组取景」)。 */
 export const CONFIG_GROUP_KEYS = {
@@ -1339,6 +1365,7 @@ export function attachConfigGroups(flat) {
     return flat;
 }
 export function loadConfig() {
+    rejectRetiredEnvs(); // [2354] 退役 env 墓碑:在场即拒启带新名指引
     CONFIG_WARNINGS.length = 0; // repeated loadConfig() calls (test setup) must not accumulate stale warnings
     CONFIG_NOTICES.length = 0;
     CONFIG_KNOBS.clear(); // the polarity table describes THIS load, never a previous one's env
@@ -1379,8 +1406,8 @@ export function loadConfig() {
     const { principalJwtPubkeys, principalJwtIss, principalJwtAud, operatorPrincipals: dgOperators, authTokens } = auth;
     const { enabled: imageBakesEnabled, runnerPrincipal: bakeRunnerPrincipal } = orchestration.imageBakes;
     // 🔴 the direct-door crypto gate lives ONLY in the durable (checkpointStore) /decide branch — so DURABLE_APPROVAL
-    // is a HARD precondition. Without it, checkpointStore is undefined, that branch is skipped, and the LEGACY
-    // approvalStore /decide (trusted-header, NO crypto) becomes the live path = a full bypass (adversarial CRITICAL).
+    // is a HARD precondition. Without it, checkpointStore is undefined and there is NO decide path at all
+    // ([2354] A-5:legacy trusted-header /decide 车道已在 5.0.0 退役——本不变量从「防旁路」变成「防死门」,保留)。
     const directDoorActive = directApprovalDoor && dgDurable && dgHmacKeys.length > 0 && principalJwtPubkeys.length > 0 && !!principalJwtIss && !!principalJwtAud;
     // 🔴 boot invariant (D-G §3): a half-configured direct door is the WORST state (looks on, verifies nothing) — and
     // an empty OPERATOR_PRINCIPALS makes isOperator() true-for-all (= cross-tenant escalation). Refuse to start.