@sema-agent/server 7.101.1 → 7.103.0

package/dist/boot/session-faces.js

@@ -4,7 +4,8 @@ import { PlanCacheProbe } from "../plan-cache-probe.js";
 import { purgeScratchpadDir } from "../env-facts.js";
 import { setLeafAdvanceListener } from "../session-leaf-bus.js";
 import { SessionWatchRegistry, posIntEnv } from "../session-watch.js";
-import { defaultTaskRegistry, peerSessionBoxHandle } from "@sema-agent/core";
+import { peerSessionBoxHandle } from "@sema-agent/core";
+import { reapSessionBackgroundHard } from "../background-session-reap.js";
 export function createSessionFaces(ctx) {
     const { config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore, resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure, workflowCompletionInbox, taskListLane, deviceStore, dropSessionScoped, mailboxStore, mailboxRecipientLifecycle, } = ctx;
     const mysqlPool = backend?.mysqlPool();
@@ -87,9 +88,7 @@ export function createSessionFaces(ctx) {
             }
             await purgeScratchpadDir(config.localDataRoot ?? localRoot, sessionId);
             try {
-                const reaped = defaultTaskRegistry.reapSessionBackground(sessionId, owner ?? "default");
-                if (reaped > 0)
-                    logger.info("session_background_reaped", { sessionId, reaped });
+                await reapSessionBackgroundHard(sessionId, owner ?? "default", { includeRetained: false, reason: "session_deleted" }, logger);
             }
             catch (err) {
                 logger.warn("session_background_reap_failed", { sessionId, err: String(err) });

package/dist/boot/shutdown.d.ts

@@ -9,7 +9,8 @@
  *     时点即"从此刻起信号可被优雅处理";提前注册会让一个尚未 listen 的进程走 drain 分支。
  *  2. 三个 `process.on` 的**相对次序**保持 SIGTERM → SIGINT → SIGHUP(与原文件逐字一致);
  *     它们互不覆盖,但 handler 之间共享 `closing`/`draining` 两个 latch,次序变化会改变
- *     "第二个信号"的语义读数。
+ *     "第二个信号"的语义读数。S-752 起「排空期的第二发」只有**一条**判据({@link installShutdownHandlers}
+ *     内 `onStopSignalWhileDraining`:与排空起点相隔 ≥ `drainSecondSignalMinGapMs` 才硬停),SIGTERM / SIGINT 共用。
  *  3. `clearInterval(reaper)` 必须是 hardShutdown 的第一件事(在 `server.close()` 之前),否则
  *     收尾期还会有 reaper tick 打向正在关闭的池。
  *  4. **进程级监听一律成对**([ref] 二轮件4):本函数装的六只(三信号 + [ref]① 双钩 + S-557 退出边界钩

package/dist/boot/shutdown.js

@@ -106,16 +106,13 @@ export function installShutdownHandlers(ctx) {
         forceClose.unref?.();
     };
     let draining = false;
+    let drainStartedAt = 0;
     let drainTick;
     const drainThenShutdown = () => {
-        if (closing)
-            return;
-        if (draining) {
-            logger.info("drain_second_signal_hard_stop", {});
-            hardShutdown();
+        if (closing || draining)
             return;
-        }
         draining = true;
+        drainStartedAt = performance.now();
         drainState.draining = true;
         deviceHub?.beginDrain({ graceMs: () => config.drainGraceMs });
         drainState.since = Date.now();
@@ -126,10 +123,9 @@ export function installShutdownHandlers(ctx) {
             hardShutdown();
             return;
         }
-        const t0 = performance.now();
         const tick = setInterval(() => {
             const n = drainState.inflight?.() ?? 0;
-            const elapsed = Math.round(performance.now() - t0);
+            const elapsed = Math.round(performance.now() - drainStartedAt);
             if (n === 0 || elapsed >= config.drainGraceMs) {
                 clearInterval(tick);
                 drainTick = undefined;
@@ -139,8 +135,33 @@ export function installShutdownHandlers(ctx) {
         }, 1_000);
         drainTick = tick;
     };
-    process.on("SIGTERM", drainThenShutdown);
-    process.on("SIGINT", hardShutdown);
+    const onStopSignalWhileDraining = (signal) => {
+        const sinceFirst = performance.now() - drainStartedAt;
+        const minGapMs = config.drainSecondSignalMinGapMs;
+        if (sinceFirst < minGapMs) {
+            logger.info("drain_duplicate_signal_ignored", { signal, sinceFirstMs: Math.floor(sinceFirst), minGapMs });
+            return;
+        }
+        logger.info("drain_second_signal_hard_stop", { signal, sinceFirstMs: Math.floor(sinceFirst) });
+        hardShutdown();
+    };
+    const firstStopSignal = {
+        SIGTERM: drainThenShutdown,
+        SIGINT: hardShutdown,
+    };
+    const onStopSignal = (signal) => {
+        if (closing)
+            return;
+        if (draining) {
+            onStopSignalWhileDraining(signal);
+            return;
+        }
+        firstStopSignal[signal]();
+    };
+    const onSigterm = () => onStopSignal("SIGTERM");
+    const onSigint = () => onStopSignal("SIGINT");
+    process.on("SIGTERM", onSigterm);
+    process.on("SIGINT", onSigint);
     const onSighup = createSighupIdleHandler({
         inflight: () => drainState.inflight?.() ?? 0,
         lastActivityAt: () => drainState.lastActivityAt?.() ?? 0,
@@ -194,8 +215,8 @@ export function installShutdownHandlers(ctx) {
             exitBoundary.dispose();
             process.removeListener("uncaughtException", onUncaughtException);
             process.removeListener("unhandledRejection", onUnhandledRejection);
-            process.removeListener("SIGTERM", drainThenShutdown);
-            process.removeListener("SIGINT", hardShutdown);
+            process.removeListener("SIGTERM", onSigterm);
+            process.removeListener("SIGINT", onSigint);
             process.removeListener("SIGHUP", onSighup);
             onSighup.stop();
             if (drainTick !== undefined) {

package/dist/boot/stage-01-config.js

@@ -12,6 +12,7 @@ import { installFileHistoryFailureRecorder } from "../file-history-disclosure.js
 import { installSecretEnvScrubRecorder } from "../observability/secret-env-scrub.js";
 import { setRunTerminalLogObserver } from "../observability/run-terminal.js";
 import { setRedactionObserver } from "../trace/redact.js";
+import { installOutboundDispatcher } from "../outbound-dispatcher.js";
 export function runStage01() {
     const config = loadConfig();
     const runStaleFailure = crossInvariant("run-stale-heartbeat").check({ live: config, next: config });
@@ -56,6 +57,7 @@ export function runStage01() {
             note: "LOCAL_DATA_ROOT moved the local backend's DATA root, but config.d / remote-exec.json are still read from the config root (LOCAL_DATA_ROOT is not consulted there). If you meant to move both, set CONFIG_LOCAL_DIR to the same directory.",
         });
     }
+    installOutboundDispatcher(logger);
     return { config, localRoot, logger, metrics };
 }
 //# sourceMappingURL=stage-01-config.js.map

package/dist/boot/stage-07-capability-layer.d.ts

@@ -10,7 +10,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-07-capability-layer.js

@@ -1,5 +1,5 @@
 import { DEFAULT_MODEL_REF } from "../model-select.js";
-import { probeSearchBackend, DEFAULT_SUBAGENT_TOOL_NAME } from "@sema-agent/core";
+import { probeSearchBackend } from "@sema-agent/core";
 import { selectEnvironmentTool } from "../capabilities/select-environment-tool.js";
 import { subagentSendUserFileExtraTools } from "../capabilities/send-user-file-tool.js";
 import { parseCapEnv, parseNumOrFailNonNegative } from "../config.js";
@@ -17,6 +17,7 @@ import { selfOrchestrationDenial } from "../task-workflow.js";
 import { centerEntitlementSourceWired } from "../runtime-caps-resolver.js";
 import { reclaimOrphansAtBoot } from "../boot-reclaim.js";
 import { createParkedReviveInheritedGate } from "./parked-revive-gate.js";
+import { createParkedReviveSurface } from "../parked-revive-surface.js";
 import { createWebFetchSummarizeLane } from "./webfetch-summarize-lane.js";
 import { createRunnerDepsOnAsk } from "./runner-deps.js";
 import { bindRateLimiter, bindRunStore } from "./late-binds.js";
@@ -141,8 +142,9 @@ export async function runStage07(ctx) {
             : undefined,
     };
     const scenarios = buildScenarios(scenarioDeps);
-    const parkedReviveTool = checkpointStore && backgroundAgentStore ? scenarios.default?.({})?.tools.find((t) => t.name === DEFAULT_SUBAGENT_TOOL_NAME) : undefined;
-    const parkedReviveInheritedGate = parkedReviveTool && config.durableApproval
+    const builtinDefaultScenario = scenarios.default;
+    const parkedReviveSurface = checkpointStore && backgroundAgentStore && builtinDefaultScenario ? createParkedReviveSurface(builtinDefaultScenario) : undefined;
+    const parkedReviveInheritedGate = parkedReviveSurface && config.durableApproval
         ? createParkedReviveInheritedGate({
             config, question, approvalExemptionStore, logger, localRoot,
             memoryEngineRoot: memoryEngine?.root,
@@ -155,6 +157,6 @@ export async function runStage07(ctx) {
     const builtinScenarioNames = Object.keys(scenarioDetails);
     configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     logger.info("capabilities", { skills: skills.length, scenarios: Object.keys(scenarios), repoTools: Boolean(repoClient) });
-    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveTool, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, webSearchProvider: webSearchCfg?.provider };
+    return { ...ctx, approvalExemptionStore, approvalNonceStore, authorize, imageBakes, imageIndex, parkedReviveInheritedGate, parkedReviveSurface, rateLimiter, resumeAnchorStore, runStore, scenarioDetails, scenarios, selectEnvTool, taskLimitCaps, taskTimeoutSec, webSearchProvider: webSearchCfg?.provider };
 }
 //# sourceMappingURL=stage-07-capability-layer.js.map

package/dist/boot/stage-08-reapers.d.ts

@@ -23,7 +23,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-09-leader.d.ts

@@ -57,7 +57,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-10-http-server.d.ts

@@ -57,7 +57,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     imageBakes: import("../plugins/store-backend.js").ImageBake | undefined;
     imageIndex: import("../plugins/store-backend.js").ImageIndex | undefined;
     parkedReviveInheritedGate: ((row: import("@sema-agent/core").BackgroundAgentRecord, identity: import("./parked-revive-gate.js").ParkedReviveIdentity) => Promise<import("./parked-revive-gate.js").RebuiltInheritedGate>) | undefined;
-    parkedReviveTool: import("@sema-agent/core").ToolSpec<import("@sema-agent/core").TSchema> | undefined;
+    parkedReviveSurface: import("../parked-revive-surface.js").ParkedReviveSurfaceFactory | undefined;
     rateLimiter: import("../index.js").RateLimiter | import("../plugins/pg-rate-limiter.js").PgRateLimiter | import("../plugins/tidb-rate-limiter.js").TiDBRateLimiter;
     resumeAnchorStore: import("../plugins/store-backend.js").ResumeAnchorStore | undefined;
     runStore: import("../plugins/store-backend.js").RunStore | undefined;

package/dist/boot/stage-10-http-server.js

@@ -1,6 +1,6 @@
 import { autoRunOnRecommendationEffective, defaultTaskRegistry } from "@sema-agent/core";
 import { posIntEnv } from "../session-watch.js";
-import { brainSummary } from "../brain.js";
+import { brainSummary, buildFailoverFirstByteNotice } from "../brain.js";
 import { resolveBindHost } from "../config.js";
 import { buildWriteProtectionPosture } from "../write-protection.js";
 import { isPricingConfigured } from "../budget.js";
@@ -13,6 +13,7 @@ import { SQL_BLOB_DEFAULT_MAX_BYTES } from "../plugins/blob-backend.js";
 import { createStoreLiveProbe } from "../store-live-probe.js";
 import { counterStoreLabel } from "../plugins/store-backend.js";
 import { startFleetClientFromEnv } from "../fleet-client.js";
+import { readinessOf } from "../http/readiness.js";
 import { createResolveSpec } from "./resolve-spec.js";
 import { startFleetReconciler } from "../fleet/fleet-reconciler.js";
 import { createSideQueryLane } from "./side-query-lane.js";
@@ -23,7 +24,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveTool, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -95,7 +96,7 @@ export async function runStage10(ctx) {
             : undefined,
         instrumentDegenerate,
         sideQueryAccounting,
-        parkedReviveTool: parkedReviveTool ? parkedReviveTool : undefined,
+        parkedReviveSurface: parkedReviveSurface ? parkedReviveSurface : undefined,
         parkedReviveInheritedGate: parkedReviveInheritedGate ? parkedReviveInheritedGate : undefined,
     };
     const observability = {
@@ -149,6 +150,8 @@ export async function runStage10(ctx) {
         restartState: () => configCenter.restartState(),
         planeDeferredState: () => configCenter.planeDeferredState(),
         configApplyState: () => configCenter.configApplyState(),
+        centerCredentialState: () => configCenter.centerCredentialState(),
+        modelRefusalsState: () => configCenter.modelRefusalsState(),
         mcpRevocations,
         mcpRevocationState: () => configCenter.mcpRevocationState(),
         configRefreshNow: () => configCenter.refreshNow(),
@@ -237,12 +240,18 @@ export async function runStage10(ctx) {
     const fleetClient = startFleetClientFromEnv(config, {
         instanceId,
         version: serviceVersion(),
-        isDraining: () => drainState.draining,
+        readiness: () => readinessOf(deployment),
+        restart: () => deployment.restartState?.(),
+        modelRefusals: () => deployment.modelRefusalsState?.(),
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
+    configCenter.onSelfReportChange(() => void fleetClient?.announceNow());
     if (fleetClient)
         logger.info("fleet_client_started", { worker: config.configCenter?.worker, address: buildDisplaySafeUrl(process.env.FLEET_ADVERTISE_ADDRESS ?? "") });
+    const failoverFirstByte = buildFailoverFirstByteNotice(config);
+    if (failoverFirstByte)
+        logger.warn("failover_first_byte_lane", failoverFirstByte);
     logger.info("listening", {
         port: config.port,
         bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",

package/dist/brain.d.ts

@@ -12,12 +12,14 @@ export declare const FAST_FAIL_MAX_RETRIES = 2;
  * Build the external "Brain" (LLM) from config.
  *
  * Composition (A1 + the 1.38 resilience stack, ordered timeout-innermost → breaker → failover-outermost):
- *   - **Tiered timeouts** (1.38, `connectTimeoutMs`/`firstTokenTimeoutMs`) are passed into each
- *     openai-compatible brain at creation — they bound "gateway never accepts the connection" and
- *     "stream opened but hangs without a token" as retryable `[network]` failures. Default ON
- *     (connect 30s per the fleet-audit recommendation; first-token 600s since S-202 — a self-hosted backend's long
- *     prefill legitimately takes minutes to the first byte, and 120s turned that into a retry handing the
- *     same prompt back to the same queue. env =0 disables; env =120000 restores the old posture).
+ *   - **Tiered timeouts** (1.38; re-cut by core 7.33.0 along the segments of a call) are passed into each
+ *     brain at creation: `firstByteTimeoutMs` (fetch() → response headers; S-753: **passed only when the
+ *     operator set `MODEL_FIRST_BYTE_TIMEOUT_MS`** — absent = no key, core's own default, which carries an
+ *     upload allowance and one widened retry of its own), `firstTokenTimeoutMs` (headers → first delta,
+ *     600s since S-202 — a self-hosted backend's long prefill legitimately takes minutes, and 120s turned that
+ *     into a retry handing the same prompt back to the same queue) and `idleTimeoutMs`. The TCP + TLS connect
+ *     is the transport's own clock (core 7.33.0), not a knob here. env =0 = no engine clock on that segment
+ *     and the transport's header / body clocks off too (the connect keeps the transport's own clock).
  *   - **Circuit breaker** (`createCircuitBreakerBrain`) wraps the *primary* gateway route(s) when
  *     `MODEL_CIRCUIT_BREAKER=true`: after N transient failures it opens and fast-fails, so failover
  *     switches to the bare backup immediately instead of waiting out each timeout. The last gateway
@@ -30,14 +32,32 @@ export declare const FAST_FAIL_MAX_RETRIES = 2;
  *     ↔ vLLM is a *routing* choice, not failover.)
  *
  * When no fallback URL, no Anthropic key, and no resilience thresholds are configured, this returns the
- * bare openai brain (carrying the default-on watchdog timeouts — set the three env knobs to 0 for the
- * pre-[ref] fully-bare shape). The Model itself (id / contextWindow / maxTokens / provider) flows
+ * bare openai brain (carrying the watchdogs: core's own first-byte default unless `MODEL_FIRST_BYTE_TIMEOUT_MS`
+ * is set, plus the server's first-token / idle defaults; a knob at 0 = no engine clock on that segment and the
+ * transport's header / body clocks off too). The Model itself (id / contextWindow / maxTokens / provider) flows
  * per-request through `Runner({ models })`.
  */
 export declare function createBrain(config: ServiceConfig, deps?: {
     fetchImpl?: typeof fetch;
     breakerState?: BreakerState;
 }): Brain;
+/**
+ * S-753 复审(opus F2 + codex C1)—— **failover 拓扑 × 首字节段没有部署窗**的启动期披露(纯数据,`build*`;告警由 boot 出)。
+ *
+ * 缺省下首字节段不铸键(core 自缺省当家,[ref])、`0` = 该段不设引擎钟;而切备只发生在一次调用**失败之后**。于是主网关接了连接
+ * 却不回响应头时:缺省 ⇒ 要等 core 的首字节 lane 走完(缺省首窗 + 一次加宽重试;本仓不铸 `firstByteRetries`,S-753 车PA)才切备,
+ * 时间预算短于那一段的调用在备网关被尝试之前就被取消 —— 以 core 7.33.x 缺省计 lane ≈ 15 min,code-review council 每个镜头的 180 s 与 team
+ * discuss 的 600 s 都在其内(车PA codex r1:600 s 在主网关的加宽重试窗里到点,不是「只剩余量」);
+ * `0` ⇒ 首字节 lane 永不切备。启动日志里同行的 `gatewayRetryCap:"fast-fail:…"` 只管共享重试梯子,读起来却像「会快切」—— 这条披露把它补齐。
+ * 显式设了正数窗 ⇒ `undefined`(部署已表态);单路由 ⇒ `undefined`(没有备可切)。**不替运维铸窗**:出路是旋钮,不是本仓的数。
+ */
+export declare function buildFailoverFirstByteNotice(config: ServiceConfig): {
+    readonly knob: "MODEL_FIRST_BYTE_TIMEOUT_MS";
+    readonly fallbacks: number;
+    readonly firstByteTimeoutMs: number | null;
+    readonly effect: string;
+    readonly fix: string;
+} | undefined;
 /** One-line summary of the active brain composition, for the startup log. */
 export declare function brainSummary(config: ServiceConfig): Record<string, unknown>;
 //# sourceMappingURL=brain.d.ts.map

package/dist/brain.js

@@ -38,7 +38,7 @@ export function createBrain(config, deps = {}) {
     const { fetchImpl, breakerState } = deps;
     const r = config.resilience ?? DEFAULT_RESILIENCE;
     const timeouts = {
-        connectTimeoutMs: r.connectTimeoutMs,
+        ...(r.firstByteTimeoutMs !== undefined ? { firstByteTimeoutMs: r.firstByteTimeoutMs } : {}),
         firstTokenTimeoutMs: r.firstTokenTimeoutMs,
         idleTimeoutMs: r.idleTimeoutMs,
     };
@@ -135,6 +135,22 @@ export function createBrain(config, deps = {}) {
     }
     return brain;
 }
+export function buildFailoverFirstByteNotice(config) {
+    const r = config.resilience ?? DEFAULT_RESILIENCE;
+    const fallbacks = config.gatewayFallbackUrls.length;
+    if (fallbacks === 0 || (r.firstByteTimeoutMs !== undefined && r.firstByteTimeoutMs > 0))
+        return undefined;
+    const zero = r.firstByteTimeoutMs === 0;
+    return {
+        knob: "MODEL_FIRST_BYTE_TIMEOUT_MS",
+        fallbacks,
+        firstByteTimeoutMs: r.firstByteTimeoutMs ?? null,
+        effect: zero
+            ? "the first-byte lane never fails over a primary that accepts the connection but sends no response headers (0 = no engine clock on that segment); only a run-level limit ends that wait"
+            : "a primary that accepts the connection but sends no response headers is failed over only after core's default first-byte lane runs out (the first window, then one widened retry); a call with a time budget shorter than that — the code-review council's 180 s lenses and team discuss's 600 s, with core 7.33.x defaults — is cancelled before the backup is ever tried",
+        fix: "set MODEL_FIRST_BYTE_TIMEOUT_MS to the longest response-header wait a healthy primary needs (queue + prefill), so a hung primary is cut over after that window and its one widened retry",
+    };
+}
 export function brainSummary(config) {
     const r = config.resilience ?? DEFAULT_RESILIENCE;
     const hasFailover = config.gatewayFallbackUrls.length > 0;
@@ -147,9 +163,9 @@ export function brainSummary(config) {
         failover: hasFailover,
         anthropicRoute: Boolean(config.anthropic),
         anthropicCacheBreakpoints: config.anthropic?.cacheBreakpoints ?? null,
-        connectTimeoutMs: r.connectTimeoutMs || null,
-        firstTokenTimeoutMs: r.firstTokenTimeoutMs || null,
-        idleTimeoutMs: r.idleTimeoutMs || null,
+        firstByteTimeoutMs: r.firstByteTimeoutMs ?? null,
+        firstTokenTimeoutMs: r.firstTokenTimeoutMs,
+        idleTimeoutMs: r.idleTimeoutMs,
         circuitBreaker: breakerActive,
         circuitBreakerRequested: r.circuitBreaker,
         gatewayRetryCap: config.gatewayMaxRetries !== undefined

package/dist/capabilities/builtin-tools.d.ts

@@ -1,6 +1,19 @@
-import type { ToolSpec } from "@sema-agent/core";
+import type { SubagentSpawnContext, ToolSpec } from "@sema-agent/core";
 /** Current time — the model has no clock; OA/most tasks need it. No side effects. CC-parity tool name `Now`
  *  (PascalCase, core 1.176 first-party rename wrap-up — the SERVICE owns this one; `nowTool` is not a core tool).
  *  effect:"read" so it never suspends → no durable-resume rename strand (no pending-tool checkpoint to canonicalize). */
 export declare function nowTool(): ToolSpec;
+/**
+ * #1110(core 7.32.0)—— 委派子代的**逐次注入**工厂(`SubagentToolOptions.extraTools`):`Now` + 部署的 extra tools(今天 = SendUserFile)。
+ *
+ * 为什么 `Now` 走这条通道:core 7.32.0 起子代按**身份**继承场景层 bundle 的工具(`assembleCodeTools` 交给 Agent 的
+ * `inheritedTools` ∩ 父 run 真挂载),而 `Now` 是本仓在 bundle **旁边**组的宿主工具(scenarios.ts),宿主工具**从不**被继承
+ * (core:继承整张 `spec.tools` 会把宿主工具带过宿主自己的逐次门)—— 逐次注入是它到达子代的唯一通道。一个工厂、两个产地:
+ * 部署工厂的门(SendUserFile 的审批面预判 / 只读内建排除)原样在它自己那只函数里,这里只做合成。
+ * ⚠️ 工厂恒在场 ⇒ core 不再给 Agent 工具铸静态 `agentToolPool`(core:工厂可在 spawn 时注入身份未知的工具 ⇒ 池不可静态知 ⇒
+ * 记忆内容来源读者按「外部」读,fail-closed)。本仓 default bundle 的继承面本来就含 WebFetch(外部),这一翻面只在
+ * 「子代面恰好不含任何外部工具」的窄形上把委派结果多判一次外部,方向是收紧。
+ * 工厂**不抛**:`nowTool()` 是纯构造;部署工厂的抛由 core 收成「这一 spawn 什么都不继承 + 模型面披露句」(onExtraToolsError 记 warn)。
+ */
+export declare function createSubagentExtraTools(deployment?: (ctx: SubagentSpawnContext) => ToolSpec[]): (ctx: SubagentSpawnContext) => ToolSpec[];
 //# sourceMappingURL=builtin-tools.d.ts.map

package/dist/capabilities/builtin-tools.js

@@ -8,4 +8,7 @@ export function nowTool() {
         execute: () => new Date().toISOString(),
     };
 }
+export function createSubagentExtraTools(deployment) {
+    return (ctx) => [nowTool(), ...(deployment?.(ctx) ?? [])];
+}
 //# sourceMappingURL=builtin-tools.js.map

package/dist/capabilities/center-plugins.d.ts

@@ -39,14 +39,19 @@ export type PluginValidation = {
 };
 /** 条款 1/2/4:https-only、host 全等白名单、sha 40hex。纯函数,worker 侧纵深复验(不信任 wire 已验过)。 */
 export declare function validatePluginDecl(decl: PluginDeclWire, allowHosts: readonly string[]): PluginValidation;
-/** 条款 3/5:clone 计划(argv 序列 + 隔离 env)。纯数据,让"姿势"可被锚定。 */
+/**
+ * 条款 3:clone 计划(argv 序列)。纯数据,让"步骤"可被锚定。
+ *
+ * 7.103.0(S-684 残余):计划**只**产 argv。隔离 env(收紧③:GIT_CONFIG_GLOBAL/SYSTEM=/dev/null、GIT_TERMINAL_PROMPT=0)的唯一属主是
+ * `gitSubprocessEnv({ isolateConfig: true })` —— 修前这三键写在这里、由 `runGit` 叠在 `{ ...process.env }` 上,一件姿势两个写者,
+ * 而剥密恰好落在两者之外。锚点随之移到真 spawn 的 env 上(`test/secret-env-scrub-host-legs.test.ts` R2:假 git 读到的整份 env)。
+ */
 export declare function gitClonePlan(o: {
     url: string;
     dest: string;
     sha?: string;
 }): {
     steps: string[][];
-    env: Record<string, string>;
 };
 /** manifest 本体尺寸上限(#97 redesign⑥ V2-⑦:**新的本地输入上限**,非既有格式事实——manifest 只被
  *  消费一个 `skillsPath` 字段,几行 JSON;超界视为畸形输入整条拒装)。 */
@@ -101,6 +106,7 @@ export declare function applyCenterPlugins(baseline: LoadedSkill[], eff: {
     /** 测试口:跳过 validate(materialize 只接受已验声明;真 git 腿用本地 bare repo,validate 层的
      *  https-only 单独测——两层分开,谁也不掩护谁)。生产恒 false/缺席。 */
     skipValidate?: boolean;
-    runGit?: (args: string[], env: Record<string, string>) => Promise<void>;
+    /** 测试口:替换真 git(生产恒缺席)。env 不在这一格上 —— 缺省腿自己经唯一构造取(替身腿本来就不起 git)。 */
+    runGit?: (args: string[]) => Promise<void>;
 }): Promise<ApplyPluginsResult>;
 //# sourceMappingURL=center-plugins.d.ts.map

package/dist/capabilities/center-plugins.js

@@ -4,6 +4,7 @@ import { promises as fsp, realpathSync, existsSync, readFileSync, lstatSync, sta
 import { join, resolve, isAbsolute, sep } from "node:path";
 import { assertConfined, loadSkills } from "./skills.js";
 import { buildDisplaySafeUrl, redactSecrets } from "../trace/redact.js";
+import { gitSubprocessEnv } from "../server-secret-env.js";
 const execFileP = promisify(execFile);
 export const MAX_PLUGIN_SOURCE_URL_CHARS = 2048;
 export const DEFAULT_PLUGIN_ALLOW_HOSTS = ["github.com"];
@@ -53,13 +54,8 @@ export function validatePluginDecl(decl, allowHosts) {
     return { ok: true, name, url };
 }
 export function gitClonePlan(o) {
-    const env = {
-        GIT_CONFIG_GLOBAL: "/dev/null",
-        GIT_CONFIG_SYSTEM: "/dev/null",
-        GIT_TERMINAL_PROMPT: "0",
-    };
     if (o.sha === undefined) {
-        return { steps: [["clone", "--depth", "1", "--quiet", o.url, o.dest]], env };
+        return { steps: [["clone", "--depth", "1", "--quiet", o.url, o.dest]] };
     }
     return {
         steps: [
@@ -67,7 +63,6 @@ export function gitClonePlan(o) {
             ["-C", o.dest, "fetch", "--depth", "1", "--quiet", o.url, o.sha],
             ["-C", o.dest, "checkout", "--quiet", o.sha],
         ],
-        env,
     };
 }
 export const PLUGIN_MANIFEST_MAX_BYTES = 64 * 1024;
@@ -130,8 +125,8 @@ export async function applyCenterPlugins(baseline, eff, opts) {
     const out = { skills: [...baseline], failures: [], letGo: [], lkgUsed: [] };
     if (declared.length === 0)
         return out;
-    const runGit = opts.runGit ?? (async (args, env) => {
-        await execFileP("git", args, { env: { ...process.env, ...env }, timeout: 120_000, maxBuffer: 4 * 1024 * 1024 });
+    const runGit = opts.runGit ?? (async (args) => {
+        await execFileP("git", args, { env: gitSubprocessEnv({ site: "server.center-plugins.git-clone", isolateConfig: true }), timeout: 120_000, maxBuffer: 4 * 1024 * 1024 });
     });
     const taken = new Set(baseline.map((s) => s.spec.name));
     for (const decl of declared) {
@@ -155,7 +150,7 @@ export async function applyCenterPlugins(baseline, eff, opts) {
             await fsp.mkdir(staging, { recursive: true });
             const plan = gitClonePlan({ url: v.url, dest: staging, sha: v.sha });
             for (const step of plan.steps)
-                await runGit(step, plan.env);
+                await runGit(step);
             await fsp.rm(liveDir, { recursive: true, force: true });
             await fsp.mkdir(join(opts.cacheRoot, v.name), { recursive: true });
             await fsp.rename(staging, liveDir);

package/dist/capabilities/scenarios.d.ts

@@ -43,7 +43,7 @@ export interface ScenarioContext {
      * 等于让一个租户读另一个租户的清单(同 spec 组装处那条「sessionId comes from `auth`, NEVER the
      * body」的逐字纪律)。
      *
-     * 缺席 = 这条调用形本来就没有会话(`main.ts` 的 parkedReviveTool 只取裸 Agent 工具、
+     * 缺席 = 这条调用形本来就没有会话(`parked-revive-surface.ts` 对深于一层的行只取 boot 期那只裸 Agent 工具、
      * `builtinScenarioDetails` 的工具名探针)。此时会话级设施退化为 per-call 实例 —— 不为它发明
      * 一个假 session。
      */

package/dist/capabilities/scenarios.js

@@ -1,6 +1,6 @@
 import { CODE_AGENT_PROMPT, CODE_SYSTEM_PROMPT, DEFAULT_SYSTEM_PROMPT, WEB_FETCH_TOOL_NAME, assembleCodeTools, defaultTaskRegistry } from "@sema-agent/core";
 import { HttpError } from "../security.js";
-import { nowTool } from "./builtin-tools.js";
+import { createSubagentExtraTools, nowTool } from "./builtin-tools.js";
 import { parseRepo, repoToolsFor } from "./repo-tools.js";
 import { createCouncilTool, clampRounds } from "./code-review-council.js";
 import { stablePrompt } from "./prompt.js";
@@ -70,8 +70,8 @@ export function buildScenarios(deps) {
                             ...(deps.checkpointStore ? { checkpointStore: deps.checkpointStore } : {}),
                             ...(deps.ensureChildSessionDurable ? { ensureChildSessionDurable: deps.ensureChildSessionDurable } : {}),
                         },
-                        ...(deps.subagentExtraTools ? { extraTools: deps.subagentExtraTools } : {}),
-                        ...(deps.subagentExtraTools && deps.logger
+                        extraTools: createSubagentExtraTools(deps.subagentExtraTools),
+                        ...(deps.logger
                             ? { onExtraToolsError: (err, info) => deps.logger?.warn?.("subagent_extra_tools_error", { ...info, err: err instanceof Error ? err.message : String(err) }) }
                             : {}),
                     },

package/dist/center-credential-renewer.d.ts

@@ -0,0 +1,76 @@
+import type { CenterCredentialFailure, CenterCredentialHealth, CenterCredentialSource } from "./center-credential.js";
+import type { Logger } from "./observability/logger.js";
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_KEY = "CENTER_CREDENTIAL_RENEW_LEAD_MS";
+/** 缺省提前量:5 min(设计 §0)。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_DEFAULT_MS: number;
+/** 下界 = 一次续签请求的传输上界:更短的提前量连一次尝试都装不下,令牌注定先过期(配了 ≈ 没配)。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS = 8000;
+/** 上界 = 契约访问令牌寿命(`ACCESS_TOKEN_TTL_SECONDS`)之半:提前量 ≥ 寿命 ⇒ 每只刚铸出来的令牌都已「该续签」,续签环空转。 */
+export declare const CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS: number;
+/**
+ * `CENTER_CREDENTIAL_RENEW_LEAD_MS` 的唯一解析口([ref] A 档:坏值拒启,不夹取、不回默认 —— 凭证轴上一根被静默改掉的旋钮 =
+ * 部署以为续签开着 / 关着)。收 **raw 值**(调用点写字面 `process.env.<键>`,目录门按字面对账)。
+ *  · 缺席 / 空串 ⇒ 缺省 300000;`0` ⇒ 关续签(只读信封);
+ *  · 其余必须是整数毫秒且落在 [{@link CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS}, {@link CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS}]。
+ */
+export declare function parseCenterCredentialRenewLeadMs(raw: string | undefined): number;
+/** 续签失败的成因闭集。两形会自己重试(`pending`):`center_unavailable`(中心不可用)与 `write_failed`(续签已成交、改写没落地 ——
+ *  新令牌留在内存里重写,绝不拿已消费的 refresh token 再续一次);其余四形是终态(`failed`),等文件内容变化(壳重新登录 / 手工修)。 */
+export type CenterCredentialRenewalFailure = "invalid_grant" | "issuer_mismatch" | "rejected" | "malformed_grant" | "write_failed" | "center_unavailable";
+type RetryingFailure = Extract<CenterCredentialRenewalFailure, "center_unavailable" | "write_failed">;
+type TerminalFailure = Exclude<CenterCredentialRenewalFailure, RetryingFailure>;
+/** 续签器的状态(`/health.centerCredential.renewal` 的来源;`idle` 不上 wire)。非 `idle` 的状态恒**关于**文件里某一只 refresh
+ *  token —— 文件换了一只(壳轮换 / 重新登录 / 登出 / 换成裸行),下一次取值即清回 `idle`(codex F3)。 */
+export type CenterCredentialRenewal = {
+    readonly state: "idle";
+} | {
+    readonly state: "pending";
+    readonly reason: RetryingFailure;
+    readonly since: number;
+    readonly attempts: number;
+    readonly retryAt: number;
+} | {
+    readonly state: "failed";
+    readonly reason: TerminalFailure;
+    readonly since: number;
+};
+export interface CenterCredentialRenewer {
+    renewal(): CenterCredentialRenewal;
+    /** 最近一次读到的信封的访问令牌到期时刻(epoch ms;最近一次取值不是信封 ⇒ undefined)。 */
+    sessionExpiresAt(): number | undefined;
+    /** 退订 + 停定时器(幂等;在飞的那一次照常落地 —— 它的结果对壳同样有用)。 */
+    stop(): void;
+}
+/** `/health.centerCredential` 的 wire 形(免鉴权面:只有闭集词、时刻与计数 —— 不带路径、不带 reason 原句、不带令牌)。 */
+export interface CenterCredentialHealthView {
+    readonly state: "ok" | "unreadable";
+    readonly failure?: CenterCredentialFailure;
+    readonly since?: number;
+    readonly failures?: number;
+    readonly renewal?: {
+        readonly state: "pending" | "failed";
+        readonly reason: CenterCredentialRenewalFailure;
+        readonly since: number;
+        readonly expiresAt?: string;
+    };
+}
+/** 健康态 + 续签态 → `/health` 那一格;都健康 ⇒ `undefined`(键缺席,正常形状不变)。 */
+export declare function buildCenterCredentialHealthView(health: CenterCredentialHealth, renewer: CenterCredentialRenewer | undefined): CenterCredentialHealthView | undefined;
+export interface CenterCredentialRenewerDeps {
+    /** 文件形凭证来源(续签器只从它的取值被触发;文件路径取自它的 `origin`)。 */
+    readonly source: CenterCredentialSource;
+    /** `configCenter.url` —— 续签只向与它同源的 `issuer` 发。 */
+    readonly centerUrl: string;
+    /** `CENTER_CREDENTIAL_RENEW_LEAD_MS`(已过 {@link parseCenterCredentialRenewLeadMs});0 = 关续签。 */
+    readonly leadMs: number;
+    readonly logger: Logger;
+    readonly now?: () => number;
+    readonly fetchImpl?: typeof fetch;
+}
+/**
+ * 续签器工厂(活对象:订阅来源的取值、持一只定时器、持单飞与退避状态)。只对文件形来源有意义 —— env / absent 形调用即抛
+ * (装配点只在文件形时装它;装错 = 编程错误,响亮)。
+ */
+export declare function createCenterCredentialRenewer(deps: CenterCredentialRenewerDeps): CenterCredentialRenewer;
+export {};
+//# sourceMappingURL=center-credential-renewer.d.ts.map