@sema-agent/server 7.101.0 → 7.102.0

package/dist/boot/config-center.js

@@ -3,7 +3,7 @@ import { readFile as fsReadFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { loadRemoteExec } from "@sema-agent/settings-schema/node";
-import { skillContentHash } from "@sema-agent/settings-schema";
+import { CENTER_CREDENTIAL_ENV, skillContentHash } from "@sema-agent/settings-schema";
 import { CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, } from "@sema-agent/core";
 import { buildPricing } from "../budget.js";
 import { applyCenterPlugins } from "../capabilities/center-plugins.js";
@@ -12,7 +12,8 @@ import { validatePromptsDomain, CORE_ENGINE_VERSION } from "../prompts-domain-va
 import { centerScenarios, centerScenarioDetails } from "../capabilities/scenarios.js";
 import { configLkgEnabled, isRosterGateArmed } from "../config.js";
 import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, legacyV1LkgPath, migrateV1Lkg } from "../config-lkg.js";
-import { answerStillCurrent, centerStateBin, credentialIdentityNow } from "../center-credential.js";
+import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
+import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
 import { centerManagedConfigKeys } from "../config-center/apply-effective.js";
 import { createConfigProvider, raceBootFetch, BOOT_FETCH_DEFERRED } from "../config-provider.js";
 import { executionLaneCaps, executionLaneOf } from "../execution-lane-caps.js";
@@ -63,13 +64,15 @@ export async function createConfigCenterRuntime(ctx) {
     let pendingRestart;
     const cc = config.configCenter;
     const bootCredential = cc?.credential.read();
-    if (cc !== undefined && bootCredential !== undefined && !bootCredential.ok) {
-        logger.error("center_credential_unreadable", {
-            key: "SEMA_REGISTRY_TOKEN_FILE",
-            reason: bootCredential.reason,
-            effect: "every center request fails its own failure arm until the file is readable (config pull keeps env/LKG-less boot, caps fail-closed, lease takes the loud auth-error arm); no on-disk LKG / prompt state is read back (credential identity unknown)",
-        });
+    const bootVerdict = bootCredential === undefined ? undefined : judgeCenterCredentialAtBoot(bootCredential);
+    if (bootVerdict?.verdict === "refuse")
+        throw new Error(bootVerdict.sentence);
+    if (bootVerdict?.verdict === "loud") {
+        logger.error("center_credential_unreadable", { key: CENTER_CREDENTIAL_ENV.tokenFile, failure: bootVerdict.failure, reason: bootVerdict.reason, effect: bootVerdict.effect });
     }
+    const credentialRenewer = cc !== undefined && cc.credential.origin.from === "file"
+        ? createCenterCredentialRenewer({ source: cc.credential, centerUrl: cc.baseUrl, leadMs: config.centerCredentialRenewLeadMs, logger })
+        : undefined;
     const currentIdentity = () => (cc === undefined ? undefined : credentialIdentityNow(cc.credential));
     const candidateIdentity = new WeakMap();
     const candidateIdentityOf = (eff) => candidateIdentity.get(eff);
@@ -134,12 +137,31 @@ export async function createConfigCenterRuntime(ctx) {
             });
         }
     };
+    const selfReportListeners = [];
+    const notifySelfReport = (changed) => {
+        for (const listener of selfReportListeners) {
+            try {
+                listener(changed);
+            }
+            catch (err) {
+                logger.warn("self_report_listener_failed", { changed, error: err instanceof Error ? err.message : String(err), note: "a self-report subscriber threw; the state change stands regardless and the next fleet heartbeat carries it" });
+            }
+        }
+    };
     const markRosterLanded = (eff) => {
         if (!modelReadyState.ready && (eff.models?.models ?? []).some((m) => m.enabled !== false)) {
             modelReadyState.ready = true;
             logger.info("model_roster_landed", { note: "ready gate open — billable submissions accepted" });
+            notifySelfReport("roster_landed");
         }
     };
+    const publishRestart = (next) => {
+        const prev = pendingRestart;
+        pendingRestart = next;
+        const same = prev === undefined || next === undefined ? prev === next : prev.version === next.version && prev.since === next.since && prev.reasons.length === next.reasons.length && prev.reasons.every((r, i) => r === next.reasons[i]);
+        if (!same)
+            notifySelfReport("restart_signal");
+    };
     let centerPrompts;
     let pendingCatalogFaces;
     const retryPendingCatalog = async (phase) => {
@@ -566,6 +588,9 @@ export async function createConfigCenterRuntime(ctx) {
         getKeyResolver: () => keyResolver,
         getCenterPrompts: () => centerPrompts,
         modelReady: () => modelReadyState.ready,
+        onSelfReportChange: (listener) => {
+            selfReportListeners.push(listener);
+        },
         restartState: () => pendingRestart,
         planeDeferredState: () => planeDeferredNoHandoff,
         configApplyState: () => (configProvider ? applyLedger.view() : undefined),
@@ -663,7 +688,7 @@ export async function createConfigCenterRuntime(ctx) {
                     if (liveSkillMiss)
                         bootSkillStale = true;
                     if (liveSkillMiss && (bootPublished || (!lkgSurvivesRestart && lastPrewarmBodiesVerified))) {
-                        pendingRestart = { restartRequired: true, reasons: ["skills"], version: bootLkgCandidate.effective.version, since: Date.now() };
+                        publishRestart({ reasons: ["skills"], version: bootLkgCandidate.effective.version, since: Date.now() });
                         logger.warn("config_boot_skill_stale_restart", { version: bootLkgCandidate.effective.version, durableHandoff: bootPublished, note: bootPublished ? "live skill application incomplete but the durable LKG carries the full candidate — skills restart published (the next boot reads the complete LKG)" : "live skill application incomplete on a non-durable deployment but every enabled body is verified in the cache — skills restart published (transient failure proven repaired; the restarted process re-pulls live)" });
                     }
                     else if (liveSkillMiss || (!bootPublished && lkgSurvivesRestart)) {
@@ -719,14 +744,14 @@ export async function createConfigCenterRuntime(ctx) {
                             const promoted = lkgSurvivesRestart || skillsDebt ? await persistLkgDurable(planeDeferredNoHandoff.candidate, planeDeferredNoHandoff.candidateEtag) : false;
                             const skillsProofPromotion = !promoted && !lkgSurvivesRestart && skillsDebt && lastPrewarmBodiesVerified;
                             if (skillsProofPromotion) {
-                                pendingRestart = { restartRequired: true, reasons: ["skills"], version: planeDeferredNoHandoff.version, since: Date.now() };
+                                publishRestart({ reasons: ["skills"], version: planeDeferredNoHandoff.version, since: Date.now() });
                                 logger.info("config_boot_skill_debt_promoted", { version: planeDeferredNoHandoff.version, note: "skill bodies verified on a source-confirmed-current candidate — the withheld skills restart is now published (non-durable lane, repair proven)" });
                                 planeDeferredNoHandoff = undefined;
                             }
                             else if (promoted) {
                                 const promotedReasons = [...new Set(planeDeferredNoHandoff.blocked ?? [])];
                                 if (promotedReasons.length > 0) {
-                                    pendingRestart = { restartRequired: true, reasons: promotedReasons, version: planeDeferredNoHandoff.version, since: Date.now() };
+                                    publishRestart({ reasons: promotedReasons, version: planeDeferredNoHandoff.version, since: Date.now() });
                                 }
                                 logger.info("models_tiers_deferred_promoted", { version: planeDeferredNoHandoff.version, reasons: promotedReasons, note: promotedReasons.length > 0 ? "handoff persistence recovered on a source-confirmed-current candidate — the withheld restart signal is now published" : "boot publication retry completed — LKG now durable, no restart needed (nothing was withheld)" });
                                 planeDeferredNoHandoff = undefined;
@@ -826,13 +851,13 @@ export async function createConfigCenterRuntime(ctx) {
                                     }
                                 }
                                 if (reasons.length === 0) {
-                                    pendingRestart = undefined;
+                                    publishRestart(undefined);
                                 }
                                 else if (!pendingRestart || pendingRestart.reasons.join(",") !== reasons.join(",")) {
-                                    pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
+                                    publishRestart({ reasons, version: r.effective.version, since: Date.now() });
                                 }
                                 else {
-                                    pendingRestart = { ...pendingRestart, version: r.effective.version };
+                                    publishRestart({ ...pendingRestart, version: r.effective.version });
                                 }
                                 logger.info("sema_registry_refreshed", {
                                     version: r.effective.version,
@@ -949,7 +974,7 @@ export async function createConfigCenterRuntime(ctx) {
                         logger.warn("restart_candidate_publication_incomplete", { version: r.effective.version, blockedReasons: blocked, note: "late-boot candidate publication incomplete on a durable-declared deployment — restart signal withheld; retried every tick" });
                     }
                     if (reasons.length > 0)
-                        pendingRestart = { restartRequired: true, reasons, version: r.effective.version, since: Date.now() };
+                        publishRestart({ reasons, version: r.effective.version, since: Date.now() });
                     logger.info("config_loaded_deferred", { source: configProvider.kind, version: r.effective.version, models: (r.effective.models?.models ?? []).filter((m) => m.enabled !== false).length, ...(reasons.length > 0 ? { restartRequired: true, restartReasons: reasons } : {}) });
                 };
                 if (bootConfigPending) {
@@ -971,6 +996,10 @@ export async function createConfigCenterRuntime(ctx) {
                 clearInterval(ccTimer);
                 ccTimer = undefined;
             }
+            credentialRenewer?.stop();
+        },
+        centerCredentialState() {
+            return cc === undefined ? undefined : buildCenterCredentialHealthView(cc.credential.health(), credentialRenewer);
         },
     };
 }

package/dist/boot/exit-boundary.js

@@ -1,6 +1,8 @@
 import { defaultTaskRegistry } from "@sema-agent/core";
+import { reportHardKillReceipts } from "../background-session-reap.js";
 import { liveHostForegroundChildCount, reapHostForegroundChildren } from "../plugins/host-platform.js";
 import { liveEphemeralHostWorkspaceCount, reapEphemeralHostWorkspaces } from "../plugins/host-workspace-registry.js";
+const PROCESS_EXIT_INCLUDES_RETAINED = false;
 export function installProcessExitBoundary({ logger }) {
     const reapOwnChildProcesses = () => {
         try {
@@ -22,6 +24,15 @@ export function installProcessExitBoundary({ logger }) {
             logger.warn("shutdown_foreground_reap_failed", { err: String(err) });
         }
     };
+    const reapBackgroundHard = () => {
+        try {
+            const receipts = defaultTaskRegistry.killAllBackgroundShellsNow({ includeRetained: PROCESS_EXIT_INCLUDES_RETAINED, reason: "process_exit" });
+            reportHardKillReceipts(logger, receipts, "process_exit");
+        }
+        catch (err) {
+            logger.warn("shutdown_background_hard_kill_failed", { err: String(err) });
+        }
+    };
     const reapOwnHostWorkspaces = () => {
         try {
             const { removed, failed } = reapEphemeralHostWorkspaces();
@@ -42,6 +53,12 @@ export function installProcessExitBoundary({ logger }) {
         catch (err) {
             console.error("shutdown_exit_boundary_child_reap_threw", err);
         }
+        try {
+            reapBackgroundHard();
+        }
+        catch (err) {
+            console.error("shutdown_exit_boundary_background_hard_kill_threw", err);
+        }
         try {
             reapOwnHostWorkspaces();
         }

package/dist/boot/runner-deps.js

@@ -180,6 +180,7 @@ export function createRunnerDeps(ctx) {
         onAsk: createRunnerDepsOnAsk(toolApproval),
         autoMode: {
             ...(config.autoModeClassifierFallback !== undefined ? { classifierFallback: config.autoModeClassifierFallback } : {}),
+            ...(config.autoModeClassifierTimeoutMs !== undefined ? { timeoutMs: config.autoModeClassifierTimeoutMs } : {}),
         },
         sessionStore,
         memoryBackend: memoryEngine ? memoryEngine.backend : undefined,

package/dist/boot/runtime-caps.js

@@ -1,5 +1,6 @@
 import { applyGovernedVerdictAbsenceWarning, applyLocalAutoModeDeny, applyMemoryOptOutGrant, applyObserverEnvOptIn, centerEntitlementSourceWired, createPrincipalEntitlementsClient, } from "../runtime-caps-resolver.js";
 import { scopedTokenNeedsWorker } from "../center-credential.js";
+import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
 export function assertMemoryCapturePolicyWirable(input) {
     if (input.policy !== "governed")
         return;
@@ -13,7 +14,7 @@ export function assertMemoryCapturePolicyWirable(input) {
         `refusal would read as an entitlement denial rather than the misconfiguration it is. This version has TWO verdict sources ` +
         `— wire either one: (1) the \`memory_optout_grant\` table on a SQL store backend (DB_BACKEND=mysql|pg; the table is ` +
         `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a config center that ` +
-        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (SEMA_REGISTRY_URL + SEMA_REGISTRY_TOKEN, ` +
+        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (SEMA_REGISTRY_URL + ${CENTER_CREDENTIAL_ENV.token}, ` +
         `SEMA_REGISTRY_DRY_RUN off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
         `the entitlement schema: a center that never emits it leaves every verdict absent, i.e. every opt-out still refused). ` +
         `Or set MEMORY_CAPTURE_POLICY=open (opt-outs take effect; only an explicit per-principal false denies) or ` +
@@ -39,7 +40,7 @@ export function createRuntimeCaps(ctx) {
     }
     if (centerEntitlementSourceWired(config) && config.configCenter && scopedTokenNeedsWorker(config.configCenter.credential.read(), config.configCenter.worker)) {
         logger.warn("runtime_caps_scoped_token_no_worker", {
-            reason: "SEMA_REGISTRY_TOKEN is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.",
+            reason: `${CENTER_CREDENTIAL_ENV.token} is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
         });
     }
     const principalCaps = centerEntitlementSourceWired(config) && config.configCenter

package/dist/boot/session-faces.js

@@ -4,7 +4,8 @@ import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
-import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
+import { peerSessionBoxHandle } from "@sema-agent/core";
+import { reapSessionBackgroundHard } from "../background-session-reap.js";
 export function createSessionFaces(ctx) {
     const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
@@ -87,9 +88,7 @@ export function createSessionFaces(ctx) {
             }
             await purgeScratchpadDir(config.localDataRoot ?? localRoot, sessionId);
             try {
-                const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, owner ?? "default");
-                if (reaped > 0)
-                    logger.info("session_background_reaped", { sessionId, reaped });
+                await reapSessionBackgroundHard(sessionId, owner ?? "default", { includeRetained: false, reason: "session_deleted" }, logger);
             }
             catch (err) {
                 logger.warn("session_background_reap_failed", { sessionId, err: String(err) });

package/dist/boot/shutdown.d.ts

@@ -9,7 +9,8 @@
  *     时点即"从此刻起信号可被优雅处理";提前注册会让一个尚未 listen 的进程走 drain 分支。
  *  2. 三个 `process.on` 的**相对次序**保持 SIGTERM → SIGINT → SIGHUP(与原文件逐字一致);
  *     它们互不覆盖,但 handler 之间共享 `closing`/`draining` 两个 latch,次序变化会改变
- *     "第二个信号"的语义读数。
+ *     "第二个信号"的语义读数。S-752 起「排空期的第二发」只有**一条**判据({@link installShutdownHandlers}
+ *     内 `onStopSignalWhileDraining`:与排空起点相隔 ≥ `drainSecondSignalMinGapMs` 才硬停),SIGTERM / SIGINT 共用。
  *  3. `clearInterval(reaper)` 必须是 hardShutdown 的第一件事(在 `server.close()` 之前),否则
  *     收尾期还会有 reaper tick 打向正在关闭的池。
  *  4. **进程级监听一律成对**([ref] 二轮件4):本函数装的六只(三信号 + [ref]① 双钩 + S-557 退出边界钩

package/dist/boot/shutdown.js

@@ -106,16 +106,13 @@ export function installShutdownHandlers(ctx) {
         forceClose.unref?.();
     };
     let draining = false;
+    let drainStartedAt = 0;
     let drainTick;
     const drainThenShutdown = () => {
-        if (closing)
-            return;
-        if (draining) {
-            logger.info("drain_second_signal_hard_stop", {});
-            hardShutdown();
+        if (closing || draining)
             return;
-        }
         draining = true;
+        drainStartedAt = performance.now();
         drainState.draining = true;
         deviceHub?.beginDrain({ graceMs: () => config.drainGraceMs });
         drainState.since = Date.now();
@@ -126,10 +123,9 @@ export function installShutdownHandlers(ctx) {
             hardShutdown();
             return;
         }
-        const t0 = performance.now();
         const tick = setInterval(() => {
             const n = drainState.inflight?.() ?? 0;
-            const elapsed = Math.round(performance.now() - t0);
+            const elapsed = Math.round(performance.now() - drainStartedAt);
             if (n === 0 || elapsed >= config.drainGraceMs) {
                 clearInterval(tick);
                 drainTick = undefined;
@@ -139,8 +135,33 @@ export function installShutdownHandlers(ctx) {
         }, 1_000);
         drainTick = tick;
     };
-    process.on("SIGTERM", drainThenShutdown);
-    process.on("SIGINT", hardShutdown);
+    const onStopSignalWhileDraining = (signal) => {
+        const sinceFirst = performance.now() - drainStartedAt;
+        const minGapMs = config.drainSecondSignalMinGapMs;
+        if (sinceFirst < minGapMs) {
+            logger.info("drain_duplicate_signal_ignored", { signal, sinceFirstMs: Math.floor(sinceFirst), minGapMs });
+            return;
+        }
+        logger.info("drain_second_signal_hard_stop", { signal, sinceFirstMs: Math.floor(sinceFirst) });
+        hardShutdown();
+    };
+    const firstStopSignal = {
+        SIGTERM: drainThenShutdown,
+        SIGINT: hardShutdown,
+    };
+    const onStopSignal = (signal) => {
+        if (closing)
+            return;
+        if (draining) {
+            onStopSignalWhileDraining(signal);
+            return;
+        }
+        firstStopSignal[signal]();
+    };
+    const onSigterm = () => onStopSignal("SIGTERM");
+    const onSigint = () => onStopSignal("SIGINT");
+    process.on("SIGTERM", onSigterm);
+    process.on("SIGINT", onSigint);
     const onSighup = createSighupIdleHandler({
         inflight: () => drainState.inflight?.() ?? 0,
         lastActivityAt: () => drainState.lastActivityAt?.() ?? 0,
@@ -194,8 +215,8 @@ export function installShutdownHandlers(ctx) {
             exitBoundary.dispose();
             process.removeListener("uncaughtException", onUncaughtException);
             process.removeListener("unhandledRejection", onUnhandledRejection);
-            process.removeListener("SIGTERM", drainThenShutdown);
-            process.removeListener("SIGINT", hardShutdown);
+            process.removeListener("SIGTERM", onSigterm);
+            process.removeListener("SIGINT", onSigint);
             process.removeListener("SIGHUP", onSighup);
             onSighup.stop();
             if (drainTick !== undefined) {

package/dist/boot/stage-07-capability-layer.d.ts

@@ -10,7 +10,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -1,5 +1,5 @@
 import { DEFAULT_MODEL_REF } from "../model-select.js";
-import { probeSearchBackend, DEFAULT_SUBAGENT_TOOL_NAME } from "@sema-agent/core";
+import { probeSearchBackend } from "@sema-agent/core";
 import { selectEnvironmentTool } from "../capabilities/select-environment-tool.js";
 import { subagentSendUserFileExtraTools } from "../capabilities/send-user-file-tool.js";
 import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
@@ -17,6 +17,7 @@ import { selfOrchestrationDenial } from "../task-workflow.js";
 import { centerEntitlementSourceWired } from "../runtime-caps-resolver.js";
 import { reclaimOrphansAtBoot } from "../boot-reclaim.js";
 import { createParkedReviveInheritedGate } from "./parked-revive-gate.js";
+import { createParkedReviveSurface } from "../parked-revive-surface.js";
 import { createWebFetchSummarizeLane } from "./webfetch-summarize-lane.js";
 import { createRunnerDepsOnAsk } from "./runner-deps.js";
 import { bindRateLimiter, bindRunStore } from "./late-binds.js";
@@ -141,8 +142,9 @@ export async function runStage07(ctx) {
             : undefined,
     };
     const scenarios = buildScenarios(scenarioDeps);
-    const parkedReviveTool = checkpointStore && backgroundAgentStore ? scenarios.default?.({})?.tools.find((t) => t.name === DEFAULT_SUBAGENT_TOOL_NAME) : undefined;
-    const parkedReviveInheritedGate = parkedReviveTool && config.durableApproval
+    const builtinDefaultScenario = scenarios.default;
+    const parkedReviveSurface = checkpointStore && backgroundAgentStore && builtinDefaultScenario ? createParkedReviveSurface(builtinDefaultScenario) : undefined;
+    const parkedReviveInheritedGate = parkedReviveSurface && config.durableApproval
         ? createParkedReviveInheritedGate({
             config, question, approvalExemptionStore, logger, localRoot,
             memoryEngineRoot: memoryEngine?.root,
@@ -155,6 +157,6 @@ export async function runStage07(ctx) {
     const builtinScenarioNames = Object.keys(scenarioDetails);
     configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     logger.info("capabilities", { skills: skills.length, scenarios: Object.keys(scenarios), repoTools: Boolean(repoClient) });
-    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveTool, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, webSearchProvider: webSearchCfg?.provider };
+    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, webSearchProvider: webSearchCfg?.provider };
 }
 //# sourceMappingURL=stage-07-capability-layer.js.map

package/dist/boot/stage-08-reapers.d.ts

@@ -23,7 +23,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -57,7 +57,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -57,7 +57,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-10-http-server.js

@@ -13,6 +13,7 @@ import { SQL_BLOB_DEFAULT_MAX_BYTES } from "../plugins/blob-backend.js";
 import { createStoreLiveProbe } from "../store-live-probe.js";
 import { counterStoreLabel } from "../plugins/store-backend.js";
 import { startFleetClientFromEnv } from "../fleet-client.js";
+import { readinessOf } from "../http/readiness.js";
 import { createResolveSpec } from "./resolve-spec.js";
 import { startFleetReconciler } from "../fleet/fleet-reconciler.js";
 import { createSideQueryLane } from "./side-query-lane.js";
@@ -23,7 +24,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveTool, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -95,7 +96,7 @@ export async function runStage10(ctx) {
             : undefined,
         instrumentDegenerate,
         sideQueryAccounting,
-        parkedReviveTool: parkedReviveTool ? parkedReviveTool : undefined,
+        parkedReviveSurface: parkedReviveSurface ? parkedReviveSurface : undefined,
         parkedReviveInheritedGate: parkedReviveInheritedGate ? parkedReviveInheritedGate : undefined,
     };
     const observability = {
@@ -149,6 +150,7 @@ export async function runStage10(ctx) {
         restartState: () => configCenter.restartState(),
         planeDeferredState: () => configCenter.planeDeferredState(),
         configApplyState: () => configCenter.configApplyState(),
+        centerCredentialState: () => configCenter.centerCredentialState(),
         mcpRevocations,
         mcpRevocationState: () => configCenter.mcpRevocationState(),
         configRefreshNow: () => configCenter.refreshNow(),
@@ -186,6 +188,8 @@ export async function runStage10(ctx) {
         isLiveOnThisReplica: server.isRunLiveOnThisReplica,
         ...(runStore ? { runs: runStore } : {}),
         ...(workflowRunStore ? { workflows: workflowRunStore } : {}),
+        agents: backgroundAgentStore,
+        hasPendingAsk: toolApproval ? (originTaskId) => toolApproval.hasLivePendingFrom(originTaskId) : undefined,
         instanceId,
         logger,
         metrics,
@@ -235,10 +239,12 @@ export async function runStage10(ctx) {
     const fleetClient = startFleetClientFromEnv(config, {
         instanceId,
         version: serviceVersion(),
-        isDraining: () => drainState.draining,
+        readiness: () => readinessOf(deployment),
+        restart: () => deployment.restartState?.(),
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
+    configCenter.onSelfReportChange(() => void fleetClient?.announceNow());
     if (fleetClient)
         logger.info("fleet_client_started", { worker: config.configCenter?.worker, address: buildDisplaySafeUrl(process.env.FLEET_ADVERTISE_ADDRESS ?? "") });
     logger.info("listening", {

package/dist/capabilities/builtin-tools.d.ts

@@ -1,6 +1,19 @@
-import type { ToolSpec } from "@sema-agent/core";
+import type { SubagentSpawnContext, ToolSpec } from "@sema-agent/core";
 /** Current time — the model has no clock; OA/most tasks need it. No side effects. CC-parity tool name `Now`
  *  (PascalCase, core 1.176 first-party rename wrap-up — the SERVICE owns this one; `nowTool` is not a core tool).
  *  effect:"read" so it never suspends → no durable-resume rename strand (no pending-tool checkpoint to canonicalize). */
 export declare function nowTool(): ToolSpec;
+/**
+ * #1110(core 7.32.0)—— 委派子代的**逐次注入**工厂(`SubagentToolOptions.extraTools`):`Now` + 部署的 extra tools(今天 = SendUserFile)。
+ *
+ * 为什么 `Now` 走这条通道:core 7.32.0 起子代按**身份**继承场景层 bundle 的工具(`assembleCodeTools` 交给 Agent 的
+ * `inheritedTools` ∩ 父 run 真挂载),而 `Now` 是本仓在 bundle **旁边**组的宿主工具(scenarios.ts),宿主工具**从不**被继承
+ * (core:继承整张 `spec.tools` 会把宿主工具带过宿主自己的逐次门)—— 逐次注入是它到达子代的唯一通道。一个工厂、两个产地:
+ * 部署工厂的门(SendUserFile 的审批面预判 / 只读内建排除)原样在它自己那只函数里,这里只做合成。
+ * ⚠️ 工厂恒在场 ⇒ core 不再给 Agent 工具铸静态 `agentToolPool`(core:工厂可在 spawn 时注入身份未知的工具 ⇒ 池不可静态知 ⇒
+ * 记忆内容来源读者按「外部」读,fail-closed)。本仓 default bundle 的继承面本来就含 WebFetch(外部),这一翻面只在
+ * 「子代面恰好不含任何外部工具」的窄形上把委派结果多判一次外部,方向是收紧。
+ * 工厂**不抛**:`nowTool()` 是纯构造;部署工厂的抛由 core 收成「这一 spawn 什么都不继承 + 模型面披露句」(onExtraToolsError 记 warn)。
+ */
+export declare function createSubagentExtraTools(deployment?: (ctx: SubagentSpawnContext) => ToolSpec[]): (ctx: SubagentSpawnContext) => ToolSpec[];
 //# sourceMappingURL=builtin-tools.d.ts.map

package/dist/capabilities/builtin-tools.js

@@ -8,4 +8,7 @@ export function nowTool() {
         execute: () => new Date().toISOString(),
     };
 }
+export function createSubagentExtraTools(deployment) {
+    return (ctx) => [nowTool(), ...(deployment?.(ctx) ?? [])];
+}
 //# sourceMappingURL=builtin-tools.js.map

package/dist/capabilities/scenarios.d.ts

@@ -43,7 +43,7 @@ export interface ScenarioContext {
      * 等于让一个租户读另一个租户的清单(同 spec 组装处那条「sessionId comes from `auth`, NEVER the
      * body」的逐字纪律)。
      *
-     * 缺席 = 这条调用形本来就没有会话(`main.ts` 的 parkedReviveTool 只取裸 Agent 工具、
+     * 缺席 = 这条调用形本来就没有会话(`parked-revive-surface.ts` 对深于一层的行只取 boot 期那只裸 Agent 工具、
      * `builtinScenarioDetails` 的工具名探针)。此时会话级设施退化为 per-call 实例 —— 不为它发明
      * 一个假 session。
      */

package/dist/capabilities/scenarios.js

@@ -1,6 +1,6 @@
 import { CODE_AGENT_PROMPT, CODE_SYSTEM_PROMPT, DEFAULT_SYSTEM_PROMPT, WEB_FETCH_TOOL_NAME, assembleCodeTools, defaultTaskRegistry } from "@sema-agent/core";
 import { HttpError } from "../security.js";
-import { nowTool } from "./builtin-tools.js";
+import { createSubagentExtraTools, nowTool } from "./builtin-tools.js";
 import { parseRepo, repoToolsFor } from "./repo-tools.js";
 import { createCouncilTool, clampRounds } from "./code-review-council.js";
 import { stablePrompt } from "./prompt.js";
@@ -70,8 +70,8 @@ export function buildScenarios(deps) {
                             ...(deps.checkpointStore ? { checkpointStore: deps.checkpointStore } : {}),
                             ...(deps.ensureChildSessionDurable ? { ensureChildSessionDurable: deps.ensureChildSessionDurable } : {}),
                         },
-                        ...(deps.subagentExtraTools ? { extraTools: deps.subagentExtraTools } : {}),
-                        ...(deps.subagentExtraTools && deps.logger
+                        extraTools: createSubagentExtraTools(deps.subagentExtraTools),
+                        ...(deps.logger
                             ? { onExtraToolsError: (err, info) => deps.logger?.warn?.("subagent_extra_tools_error", { ...info, err: err instanceof Error ? err.message : String(err) }) }
                             : {}),
                     },

package/dist/center-credential-renewer.d.ts

@@ -0,0 +1,76 @@
+import type { CenterCredentialFailure, CenterCredentialHealth, CenterCredentialSource } from "./center-credential.js";
+import type { Logger } from "./observability/logger.js";
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_KEY = "CENTER_CREDENTIAL_RENEW_LEAD_MS";
+/** 缺省提前量:5 min(设计 §0)。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_DEFAULT_MS: number;
+/** 下界 = 一次续签请求的传输上界:更短的提前量连一次尝试都装不下,令牌注定先过期(配了 ≈ 没配)。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS = 8000;
+/** 上界 = 契约访问令牌寿命(`ACCESS_TOKEN_TTL_SECONDS`)之半:提前量 ≥ 寿命 ⇒ 每只刚铸出来的令牌都已「该续签」,续签环空转。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS: number;
+/**
+ * `CENTER_CREDENTIAL_RENEW_LEAD_MS` 的唯一解析口([ref] A 档:坏值拒启,不夹取、不回默认 —— 凭证轴上一根被静默改掉的旋钮 =
+ * 部署以为续签开着 / 关着)。收 **raw 值**(调用点写字面 `process.env.<键>`,目录门按字面对账)。
+ *  · 缺席 / 空串 ⇒ 缺省 300000;`0` ⇒ 关续签(只读信封);
+ *  · 其余必须是整数毫秒且落在 [{@link CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS}, {@link CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS}]。
+ */
+export declare function parseCenterCredentialRenewLeadMs(raw: string | undefined): number;
+/** 续签失败的成因闭集。两形会自己重试(`pending`):`center_unavailable`(中心不可用)与 `write_failed`(续签已成交、改写没落地 ——
+ *  新令牌留在内存里重写,绝不拿已消费的 refresh token 再续一次);其余四形是终态(`failed`),等文件内容变化(壳重新登录 / 手工修)。 */
+export type CenterCredentialRenewalFailure = "invalid_grant" | "issuer_mismatch" | "rejected" | "malformed_grant" | "write_failed" | "center_unavailable";
+type RetryingFailure = Extract<CenterCredentialRenewalFailure, "center_unavailable" | "write_failed">;
+type TerminalFailure = Exclude<CenterCredentialRenewalFailure, RetryingFailure>;
+/** 续签器的状态(`/health.centerCredential.renewal` 的来源;`idle` 不上 wire)。非 `idle` 的状态恒**关于**文件里某一只 refresh
+ *  token —— 文件换了一只(壳轮换 / 重新登录 / 登出 / 换成裸行),下一次取值即清回 `idle`(codex F3)。 */
+export type CenterCredentialRenewal = {
+    readonly state: "idle";
+} | {
+    readonly state: "pending";
+    readonly reason: RetryingFailure;
+    readonly since: number;
+    readonly attempts: number;
+    readonly retryAt: number;
+} | {
+    readonly state: "failed";
+    readonly reason: TerminalFailure;
+    readonly since: number;
+};
+export interface CenterCredentialRenewer {
+    renewal(): CenterCredentialRenewal;
+    /** 最近一次读到的信封的访问令牌到期时刻(epoch ms;最近一次取值不是信封 ⇒ undefined)。 */
+    sessionExpiresAt(): number | undefined;
+    /** 退订 + 停定时器(幂等;在飞的那一次照常落地 —— 它的结果对壳同样有用)。 */
+    stop(): void;
+}
+/** `/health.centerCredential` 的 wire 形(免鉴权面:只有闭集词、时刻与计数 —— 不带路径、不带 reason 原句、不带令牌)。 */
+export interface CenterCredentialHealthView {
+    readonly state: "ok" | "unreadable";
+    readonly failure?: CenterCredentialFailure;
+    readonly since?: number;
+    readonly failures?: number;
+    readonly renewal?: {
+        readonly state: "pending" | "failed";
+        readonly reason: CenterCredentialRenewalFailure;
+        readonly since: number;
+        readonly expiresAt?: string;
+    };
+}
+/** 健康态 + 续签态 → `/health` 那一格;都健康 ⇒ `undefined`(键缺席,正常形状不变)。 */
+export declare function buildCenterCredentialHealthView(health: CenterCredentialHealth, renewer: CenterCredentialRenewer | undefined): CenterCredentialHealthView | undefined;
+export interface CenterCredentialRenewerDeps {
+    /** 文件形凭证来源(续签器只从它的取值被触发;文件路径取自它的 `origin`)。 */
+    readonly source: CenterCredentialSource;
+    /** `configCenter.url` —— 续签只向与它同源的 `issuer` 发。 */
+    readonly centerUrl: string;
+    /** `CENTER_CREDENTIAL_RENEW_LEAD_MS`(已过 {@link parseCenterCredentialRenewLeadMs});0 = 关续签。 */
+    readonly leadMs: number;
+    readonly logger: Logger;
+    readonly now?: () => number;
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * 续签器工厂(活对象:订阅来源的取值、持一只定时器、持单飞与退避状态)。只对文件形来源有意义 —— env / absent 形调用即抛
+ * (装配点只在文件形时装它;装错 = 编程错误,响亮)。
+ */
+export declare function createCenterCredentialRenewer(deps: CenterCredentialRenewerDeps): CenterCredentialRenewer;
+export {};
+//# sourceMappingURL=center-credential-renewer.d.ts.map