@sema-agent/server 7.103.2 → 7.105.0

package/dist/boot/stage-09-leader.d.ts

@@ -20,6 +20,8 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
         deleted: boolean;
     } | {
         active: string;
+    } | {
+        childrenAlive: readonly string[];
     }>) | undefined;
     registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
@@ -74,7 +76,6 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
-    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -128,14 +129,18 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-09-leader.js

@@ -6,13 +6,14 @@ import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
         config, logger, metrics, localRoot, backend, sessionStore, runStore, checkpointStore, toolResultStore,
         resumeAnchorStore, approvalExemptionStore, sessionPolicyStore, taskAttachmentStore, fileHistoryErasure,
         workflowCompletionInbox, taskListLane, mailboxStore, mailboxRecipientLifecycle,
+        backgroundAgentStore,
     });
     const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };

package/dist/boot/stage-10-http-server.d.ts

@@ -20,6 +20,8 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
         deleted: boolean;
     } | {
         active: string;
+    } | {
+        childrenAlive: readonly string[];
     }>) | undefined;
     registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
@@ -74,7 +76,6 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     approvalAskAudit: import("../approval-ask-audit-store.js").FileApprovalAskAuditStore | undefined;
     centerRuntimeCapsResolver: ((principal: string | undefined) => Promise<import("@sema-agent/core").RuntimeCaps | undefined>) | undefined;
     checkpointStore: import("../plugins/store-backend.js").CheckpointStoreFull | undefined;
-    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
     durableEnabled: boolean;
     elicitation: import("../elicitation.js").ElicitationCoordinator | undefined;
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
@@ -128,14 +129,18 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
+    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
+    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
     worktreeReap: (() => Promise<void>) | undefined;
     brain: import("@sema-agent/core").Brain;
+    consolidationSeatWatch: import("./memory-consolidation.js").ConsolidationSeatWatch | undefined;
+    consolidationValve: import("./memory-consolidation.js").ConsolidationValve;
     costQuota: import("../observability/cost-quota.js").CostQuota | import("../plugins/pg-cost-quota.js").PgCostQuota | import("../plugins/tidb-cost-quota.js").TiDBCostQuota;
     degradeRouteWatch: import("../brain.js").DegradeRouteWatch;
     counterDegradeHook: (info: {

package/dist/boot/stage-10-http-server.js

@@ -24,7 +24,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, config, configCenter, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionShellGateRegistry, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storeBackendDegraded, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -87,6 +87,7 @@ export async function runStage10(ctx) {
         memoryOriginFace: memoryOriginFaces,
         sessionMemoryStatus: sessionMemoryStatusFace,
         memoryAutoConsolidationArmed: autoRunOnRecommendationEffective(runnerDeps),
+        memoryConsolidationValve: consolidationValve,
         memoryConsolidation: memoryConsolidationFaces,
         memoryOptOutGrant: memoryOptOutGrantStore,
         orgMemoryDirectory: orgMemoryAdmission.directory,
@@ -139,6 +140,7 @@ export async function runStage10(ctx) {
         sqlEngineFacts,
         writeProtection: buildWriteProtectionPosture(config),
         webSearchProvider,
+        sealedKeyPublic: configCenter.sealedKeyPublic,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -171,6 +173,7 @@ export async function runStage10(ctx) {
         getCenterPrompts: () => configCenter.getCenterPrompts(),
         getKeyResolver: () => configCenter.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
+        noteSessionIncarnation,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
         noteSessionShellGate: sessionShellGateRegistry.note,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore,

package/dist/brain.d.ts

@@ -69,7 +69,7 @@ export interface DegradeRouteWatch {
 /**
  * `create*`:返回带捕获状态(组壳那一刻的指纹)的活对象。**须在 {@link createBrain} 的同一时刻、同一份 config 上调**
  * (生产:boot/budget-tracing.ts 紧随 createBrain)—— 否则 `baked` 就不是壳真焊进去的那一只。与 boot/memory-consolidation.ts
- * `createConsolidationSeatWatch` 同形。
+ * `createConsolidationValveWatch` 同形(`{ read(): { baked, current } }`)。
  */
 export declare function createDegradeRouteWatch(config: DegradeRoutePlane): DegradeRouteWatch;
 /**

package/dist/config-catalog.d.ts

@@ -74,7 +74,7 @@ export interface ConfigCatalogSpec {
      * env 现算,如 WebSearch 后端),而目录的纪律是「回显属主算出来的值」—— 只能把同一条实算腿的入参放宽,
      * 不能在目录里再抄一遍属主的读法(S-100 / codex r1 F3 的成案:抄一遍就是第二个写者,当场分歧)。
      */
-    readonly resolve?: (config: ServiceConfig, env: NodeJS.ProcessEnv) => CatalogValue | undefined;
+    readonly resolve?: (config: ServiceConfig, env: NodeJS.ProcessEnv, boot: CatalogBootFacts) => CatalogValue | undefined;
     readonly center?: CatalogCenterSeatSpec;
     /** 缺省 "deploy";retired/零消费键标 "inert"(设计稿 ⚪ 的 env 腿投影)。 */
     readonly envTiming?: "inert";
@@ -123,9 +123,24 @@ export interface ConfigCatalogRow {
     readonly scope?: "bootstrap-only";
     readonly enumValues?: readonly string[];
 }
+/**
+ * 只有 **boot 装配**才知道、`ServiceConfig` 上没有的**生效事实** —— 目录实算腿的第三参(车PI 修复轮 ④)。
+ * 本面的契约是「本进程实际生效值」:一根旋钮的生效值若在装配期才定(出厂缺省按装配结果派生),实算腿就得读装配的判决,
+ * 而不是回表态原词、未设回 `null`。入参对象本身**必填**(每个调用点都得表态这次有哪些装配事实)。
+ */
+export interface CatalogBootFacts {
+    /** 记忆整理阀门的生效值(boot 第 4 段 `createConsolidationValve` 的判决:显式词,或 S-824 / [ref] 的出厂缺省派生)。
+     *  缺席 = 这次装配没有这件事实(只有不经真装配的桩服务:`ServiceDeps` 平铺视图里组字段是可选的;真装配的分组形里它必填)
+     *  ⇒ 实算腿答「不知道」(落 env 原文 / null),不猜。 */
+    readonly memoryConsolidationValve?: {
+        readonly enabled: boolean;
+    };
+}
 export interface ConfigCatalogInputs {
     readonly config: ServiceConfig;
     readonly env: NodeJS.ProcessEnv;
+    /** boot 装配的生效事实({@link CatalogBootFacts})。 */
+    readonly boot: CatalogBootFacts;
     readonly knobs: readonly ConfigKnobRecord[];
     /** settings-schema 现行 DOMAINS(调用方传入 —— 本模块保持纯数据层,零包依赖)。 */
     readonly centerDomains: readonly string[];

package/dist/config-catalog.js

@@ -2,7 +2,7 @@ import { CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES } fr
 import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
 import { CENTER_CREDENTIAL_RENEW_LEAD_DEFAULT_MS, CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS, CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS } from "./center-credential-renewer.js";
 import { THINKING_FORMATS } from "./model-compat.js";
-import { AUTO_MODE_CLASSIFIER_TIMEOUT_BOUNDS, DRAIN_SECOND_SIGNAL_MIN_GAP_BOUNDS, DRAIN_SECOND_SIGNAL_MIN_GAP_DEFAULT_MS, FIRST_BYTE_TIMEOUT_BOUNDS, RESILIENCE_DEFAULTS, TASK_WRITE_FACE_ESCALATIONS } from "./config-types.js";
+import { AUTO_MODE_CLASSIFIER_TIMEOUT_BOUNDS, CONFIG_PROVIDER_WORDS, DRAIN_SECOND_SIGNAL_MIN_GAP_BOUNDS, DRAIN_SECOND_SIGNAL_MIN_GAP_DEFAULT_MS, FIRST_BYTE_TIMEOUT_BOUNDS, RESILIENCE_DEFAULTS, TASK_WRITE_FACE_ESCALATIONS } from "./config-types.js";
 import { webSearchProviderFromEnv, WEB_SEARCH_PROVIDERS } from "./plugins/web-search.js";
 import { AUTONOMY_MODES } from "./runtime-governance.js";
 import { REMOTE_EXEC_PROVIDER_WORDS } from "./execution-lane-caps.js";
@@ -102,7 +102,7 @@ export const CONFIG_CATALOG = [
     r("CONFIG_LKG_ENABLED", "integrations", "boolean", "last-known-good 配置盘缓存读写开关(仅远程 provider 有意义)", { staticDefault: "true" }),
     r("CONFIG_LKG_PATH", "integrations", "path", "LKG 落盘路径", { derivedDefaultNote: "缺席 ⇒ SEMA_CONFIG_DIR(~/.sema)下按 worker 名派生" }),
     r("CONFIG_LOCAL_DIR", "integrations", "path", "本地配置源根(config.d/<domain>.json);兼作数据根回落链一环", { configKey: "configLocalDir", danger: DATA }),
-    r("CONFIG_PROVIDER", "integrations", "enum", "配置源双模选择", { enumValues: ["remote", "local"], derivedDefaultNote: "缺席:SEMA_REGISTRY_URL 在场 ⇒ remote,否则纯 env(无管道)", configKey: "configProvider" }),
+    r("CONFIG_PROVIDER", "integrations", "enum", "配置源双模选择(闭集,逐字比较;认不出的词 ⇒ 拒启,S-841)", { enumValues: CONFIG_PROVIDER_WORDS, derivedDefaultNote: "缺席:SEMA_REGISTRY_URL 在场 ⇒ remote,否则纯 env(无管道)", configKey: "configProvider" }),
     r("CONFIG_REQUIRE_ROSTER", "integrations", "boolean", "远程 registry 非 dryRun 时布防 ready 门:roster 未落地 ⇒ 计费提交 503 + /health ready:false(严格 'true')", { staticDefault: "false" }),
     r("CORS_ORIGIN", "auth", "csv", "CORS 白名单(单值 v1 兼容回显;多值按请求 Origin 匹配 + Vary;未设=无 CORS 面)", { danger: SEC, configKey: "corsOrigins" }),
     r("COST_QUOTA_WINDOW_SEC", "limitsHttp", "number", "per-principal 成本配额窗长(秒);SQL 腿窗长进桶主键 ⇒ center 腿显式 deferred(重启生效)", { staticDefault: "86400", danger: BILL, configKey: "costQuotaWindowSec", center: cLimits("costQuotaWindowSec", { timing: "restart", restartReason: "cost-quota-window" }) }),
@@ -151,7 +151,7 @@ export const CONFIG_CATALOG = [
     r("ENGINE_LINGER_MS", "limitsHttp", "number", "父还活着时自退前三合取须持续成立的静默窗(ms;[1000,24h] 拒启带界)", { staticDefault: "60000", configKey: "engineLingerMs" }),
     r("ENGINE_ORPHAN_LINGER_MS", "limitsHttp", "number", "父进程已不在(孤儿)时的静默窗(ms;[1000,24h] 拒启带界;SEMA_PARENT_PID 缺席则不生效)", { staticDefault: "2000", configKey: "engineOrphanLingerMs" }),
     r("EXPERIMENTAL_OBSERVER_AGENTS", "orchestration", "boolean", "observer 开闸线(实验面 ship-dark;多租户只认 center caps,env 被忽略)", { staticDefault: "false", configKey: "experimentalObserverAgents" }),
-    r("FILE_HISTORY_CAPTURE", "store", "boolean", "文件历史**捕获**总开关(三条车道同义)。交换:关 = 不再捕获任何改动文件的首次快照,同时没有 rewind / restoreFiles / rewindFilesTo / 2c session-sync(对应能力位与 `fileHistoryCapture` 同源翻 off)。关掉 ≠ 删掉:已捕获的历史不被批量删除、也不再被读用,仍按会话删除与留存规则清理 —— 要清存量走 DELETE 会话或留存旋钮", { staticDefault: "true", danger: DATA, configKey: "fileHistoryCapture" }),
+    r("FILE_HISTORY_CAPTURE", "store", "boolean", "文件历史**捕获**总开关(三条车道同义)。关 = 不再捕获任何改动文件的首次快照(落 core 的部署捕获位 `RunnerDeps.fileHistoryCapture: \"off\"`,能力词 `fileHistoryCapture` 翻 off);S-724(7.104.0)起**只关捕获**:历史店照接,已存历史照常 restoreFiles / rewindFilesTo / 2c session-sync。关掉 ≠ 删掉:已捕获的历史不被批量删除,仍按会话删除与留存规则清理 —— 要清存量走 DELETE 会话或留存旋钮;没有「整库历史不可用」的旋钮", { staticDefault: "true", danger: DATA, configKey: "fileHistoryCapture" }),
     r("FILE_HISTORY_RETENTION_KEEP", "store", "number", "per-file rewind 历史的保留上限(与 core FileStorageBackend 同域键形,三条车道一套语义)", { danger: DATA, derivedDefaultNote: "缺席 ⇒ core 缺省 100" }),
     r("FLEET_ADVERTISE_ADDRESS", "integrations", "url", "fleet 面向 center 公告的本 worker 可达地址(与 center 腿同在 ⇒ 启 fleet client;坏形拒启)"),
     r("FORK_ENABLED", "orchestration", "boolean", "CC /fork(core Fork 工具)装配开关", { derivedDefaultNote: "posture 三态:缺席 = 单用户 ⇒ on / 多租户 ⇒ off(per-principal entitlement 另判)", configKey: "forkEnabled" }),
@@ -228,9 +228,9 @@ export const CONFIG_CATALOG = [
     r("MCP_ELICITATION_MAX_TOTAL", "approval", "number", "elicitation 每 run 总量帽", { derivedDefaultNote: "缺席 ⇒ core 出厂窗" }),
     r("MCP_ELICITATION_MIN_INTERVAL_MS", "approval", "number", "elicitation per-server 最小间隔(ms)", { derivedDefaultNote: "缺席 ⇒ core 出厂窗" }),
     r("MCP_ELICITATION_TTL_MS", "approval", "number", "elicitation 无人应答释放窗(ms)", { derivedDefaultNote: "缺席 ⇒ core 出厂窗" }),
-    r("MEMORY_AUTO_CONSOLIDATION", "memory", "enum", "记忆自动整理部署席(on=每个建议任务后整库整理跑,记忆内容自动外流到整理模型;off=显式关,胜过引擎缺省;未设=读引擎具名缺省)", { enumValues: ["on", "off"], derivedDefaultNote: "缺席 ⇒ 引擎具名缺省(**本版装的引擎是开**)——不配不等于关;前置=MEMORY_CONSOLIDATION_DRIVER=on", danger: SEC, resolve: (c) => c.memoryConsolidationDriver.autoRunOnRecommendation, booleanEnum: { true: "on", false: "off" } }),
+    r("MEMORY_AUTO_CONSOLIDATION", "memory", "enum", "记忆自动整理部署席(on=每个建议任务后整库整理跑,记忆内容自动外流到整理模型;off=显式关,胜过引擎缺省;未设=读引擎具名缺省)", { enumValues: ["on", "off"], derivedDefaultNote: "缺席 ⇒ 引擎具名缺省(**本版装的引擎是开**)——不配不等于关;前置=整理阀门开着(MEMORY_CONSOLIDATION_DRIVER=on,或未设而出厂缺省派生成开)", danger: SEC, resolve: (c) => c.memoryConsolidationDriver.autoRunOnRecommendation, booleanEnum: { true: "on", false: "off" } }),
     r("MEMORY_CAPTURE_POLICY", "memory", "enum", "记忆 capture 姿态(open=声明按面值;governed=按 per-principal verdict;capture-required=恒采)", { enumValues: ["open", "governed", "capture-required"], staticDefault: "open", danger: SEC, configKey: "memoryCapturePolicy" }),
-    r("MEMORY_CONSOLIDATION_DRIVER", "memory", "enum", "记忆折叠阀门(off=零装配零探针,两 admin 口 404 族)", { enumValues: ["on", "off"], staticDefault: "off", danger: BILL, resolve: (c) => c.memoryConsolidationDriver.enabled, booleanEnum: { true: "on", false: "off" } }),
+    r("MEMORY_CONSOLIDATION_DRIVER", "memory", "enum", "记忆折叠阀门(off=零装配零探针,两 admin 口 404 族;on=座解析 + 两 admin 口 + 引擎面整理两席)", { enumValues: ["on", "off"], derivedDefaultNote: "缺席 ⇒ 起服时派生:整理座不落主模型(MODEL_CHEAP_ID 在场且异于 MODEL_ID,或目录给 consolidate / summarize / flash 档位绑了别的模型)⇒ on;落主模型 ⇒ off + 起服 warn memory_consolidation_default_off_no_cheap_model;结构上跑不起来(无记忆引擎 / pg·tidb 记忆后端 / MEMORY_PROVENANCE=off)⇒ 恒 off 零提示。显式 on 而落主模型 ⇒ 照开 + warn memory_consolidation_on_main_model(按主模型计费)", danger: BILL, resolve: (_c, _env, boot) => (boot.memoryConsolidationValve === undefined ? undefined : boot.memoryConsolidationValve.enabled ? "on" : "off") }),
     r("MEMORY_CONSOLIDATION_INTERVAL_SEC", "memory", "number", "折叠周期腿节律(秒;本 build 任何正值拒启 —— 周期腿未落地,恒 0)", { staticDefault: "0" }),
     r("MEMORY_CONSOLIDATION_SCOPES", "memory", "csv", "折叠阀门 scope 表(恰一条时=admin 口缺省;不是授权边界)"),
     r("MEMORY_DELEGATION_EVIDENCE", "memory", "enum", "委派臂污染标记的证据标准", { enumValues: ["static-face", "attested-only"], staticDefault: "static-face", danger: SEC, configKey: "memoryDelegationEvidence" }),
@@ -274,7 +274,7 @@ export const CONFIG_CATALOG = [
     r("MODEL_CHEAP_COST_CACHE_WRITE", "modelPlane", "number", "cheap 槽 cache-write 单价", { danger: BILL, derivedDefaultNote: "缺席 ⇒ 继承主模型", center: cModels("models[].cost.cacheWrite") }),
     r("MODEL_CHEAP_COST_INPUT", "modelPlane", "number", "cheap 槽 input 单价", { danger: BILL, derivedDefaultNote: "缺席 ⇒ 继承主模型", center: cModels("models[].cost.input") }),
     r("MODEL_CHEAP_COST_OUTPUT", "modelPlane", "number", "cheap 槽 output 单价", { danger: BILL, derivedDefaultNote: "缺席 ⇒ 继承主模型", center: cModels("models[].cost.output") }),
-    r("MODEL_CHEAP_ID", "modelPlane", "string", "cheap 槽模型 id(subagent/summarize 两 role 走它;未设=全落主模型)", { danger: BILL, center: cModels("models[].id") }),
+    r("MODEL_CHEAP_ID", "modelPlane", "string", "cheap 槽模型 id(subagent/summarize 两 role 走它;未设或与 MODEL_ID 同 id=全落主模型,同 id 不铸 cheap 槽)", { danger: BILL, center: cModels("models[].id") }),
     r("MODEL_CHEAP_MAX_TOKENS", "modelPlane", "number", "cheap 槽输出上限", { derivedDefaultNote: "缺席 ⇒ 继承主模型", center: cModels("models[].maxTokens") }),
     r("MODEL_CHEAP_REASONING", "modelPlane", "boolean", "cheap 槽 reasoning 声明(三态:缺席继承主模型)", { derivedDefaultNote: "缺席 ⇒ 继承主模型" }),
     r("MODEL_CHEAP_VISION", "modelPlane", "boolean", "cheap 槽 vision 声明(三态:缺席继承主模型;text-only cheap 必设 false 让预检真拦)", { derivedDefaultNote: "缺席 ⇒ 继承主模型" }),
@@ -384,7 +384,7 @@ export const CONFIG_CATALOG = [
     r("S3_PUBLIC_BUCKET", "store", "string", "SendUserFile 公链桶", { derivedDefaultNote: "缺席 ⇒ sema-public" }),
     r("S3_PUBLIC_ENDPOINT", "store", "url", "SendUserFile 公网面 endpoint(跨仓契约名,禁改)"),
     r("SANDBOX_BASE_REF", "orchestration", "string", "bake 缺省 base ref(缺席回落 index 最新 sandbox-base)"),
-    r("SANDBOX_ENV_FACTS", "orchestration", "boolean", "沙箱 envFacts 注入(# Environment 块)", { staticDefault: "true", configKey: "envFactsEnabled" }),
+    r("SANDBOX_ENV_FACTS", "orchestration", "boolean", "沙箱事实注入(# Environment 块的 profile/capabilities/pkgSource/egress/resume 事实);会话 scratchpad 的宣告不归本键管(S-842:它是写面的宣告,关事实不关 scratchpad)", { staticDefault: "true", configKey: "envFactsEnabled" }),
     r("SANDBOX_PKG_SOURCE", "orchestration", "enum", "沙箱包源选择(cn/global/custom;none=完全不注入)", { enumValues: ["global", "cn", "custom", "none"], staticDefault: "global" }),
     r("SCHEDULER_ENABLED", "orchestration", "boolean", "自唤醒 scheduler(host 车道单用户形)", { derivedDefaultNote: "posture 三态:缺席 = 单用户 ⇒ on / 多租户 ⇒ off(调度归 center)", configKey: "schedulerEnabled" }),
     r("SCHEDULER_SESSION_LIFETIME", "orchestration", "boolean", "session-lifetime 记录 host-signal(headless 壳注 false ⇒ CronCreate 前门拒)", { staticDefault: "true", configKey: "schedulerSessionLifetime" }),
@@ -535,7 +535,7 @@ function valueClassOf(type) {
     return "plain";
 }
 export function buildConfigCatalog(inputs) {
-    const { config, env, knobs, centerDomains, centerManagedKeys } = inputs;
+    const { config, env, boot, knobs, centerDomains, centerManagedKeys } = inputs;
     const knobByName = new Map(knobs.map((k) => [k.name, k]));
     const rows = [...CONFIG_CATALOG]
         .sort((a, b) => (a.name < b.name ? -1 : 1))
@@ -560,7 +560,7 @@ export function buildConfigCatalog(inputs) {
             effectiveValue = envHeld ? { present: true, length: raw.length } : { present: false };
         }
         else {
-            const resolved = spec.resolve !== undefined ? spec.resolve(config, env) : spec.configKey !== undefined ? primitiveConfigValue(config, spec.configKey) : undefined;
+            const resolved = spec.resolve !== undefined ? spec.resolve(config, env, boot) : spec.configKey !== undefined ? primitiveConfigValue(config, spec.configKey) : undefined;
             const picked = resolved !== undefined ? resolved : knob !== undefined ? knob.value : envHeld ? raw : spec.staticDefault ?? null;
             const sanitized = sanitizeValue(spec, picked);
             effectiveValue = sanitized.value;

package/dist/config-center/restart-signal.d.ts

@@ -24,10 +24,10 @@ export interface RestartSliceCtx {
      *  新增/改址/域整体出现或消失仍签(新 mount / 改址只能 restart 才生效)。缺席/false = 旧语义照签
      *  (fail-closed:没接席的部署里删除向没人承接,restart 是它唯一的生效路径)。 */
     mcpRevocationLive?: boolean;
-    /** S-668 波 0(过渡;**波 1 转热后删**):记忆整理驱动席的两侧读数 —— `baked` = boot 期 core 解析器选中的
-     *  那只 Model 的指纹,`current` = 同一只解析器对本拍活配置再解一次的指纹(读法见
-     *  boot/memory-consolidation.ts `createConsolidationSeatWatch`)。缺席 = 阀门关着(`MEMORY_CONSOLIDATION_DRIVER`
-     *  不是 on,或记忆引擎没接线)⇒ 没有 boot 烤死的席 ⇒ `memory-consolidation` 片恒不签。 */
+    /** S-668 波 0(过渡;**波 1 转热后删**)+ 车PI 修复轮 ⑥:记忆整理**阀门判决**的两侧读数(一只 watch,读法见
+     *  boot/memory-consolidation.ts `createConsolidationValveWatch`)—— `baked` = boot 判决的投影,`current` = 拿本拍活配置
+     *  重判一次的投影;投影 = 开着 ⇒ `{ valve: "on", seat: 整理座指纹 }`、关着 ⇒ `{ valve: "off" }`。判决翻了(派生开 ↔ 关)或
+     *  开着而座漂了 ⇒ 两侧不等 ⇒ 签。缺席 = 判决不随目录变(显式 off,或结构上跑不起来的派生关)⇒ 恒不签。 */
     consolidationSeat?: {
         readonly baked: unknown;
         readonly current: unknown;

package/dist/config-invariants.d.ts

@@ -12,6 +12,12 @@
  *    双向对表 —— 新增一条拒启却不登记 = 门红。boot 的判据文本与拒启行为**逐字不变**(本批不改拒启),
  *    表在这一侧承担的是「不许有表外不变量」的登记职责。
  *
+ * 🔴 **报文次序**(车PI 验修轮 F7,如实登记):boot 期一次只报一条。条目按 `bootAnchor` 分住几个区 —— `config.ts` 的 loadConfig 区与
+ * `boot/stage-01-config.ts`(第 1 段)、`boot/execution-lane.ts`(第 2 段开头的车道合成步)、`boot/stage-02-registry-pull.ts`(第 2 段
+ * 目录应用之后)。**跨区次序 = 段序,区内次序 = 表序**:同时撞上两个区的两条,先到的区先报,与表序无关(例:`LEADER_ENABLED` + host
+ * + 无 SQL 先报 loadConfig 区的 `leader-durable-store`,改完再在合成步撞 `leader-host-lane`)。锚点按「读什么键、那个键在哪一段定形」定,
+ * 不为报文次序挪区 —— 多一次往返,没有安全后果。
+ *
  * 🔴 判据形状:每条不变量收 `{live, next}` 两个视图。有些条目判的是**状态**(next 自身是否自洽),有些
  * 判的是**转换**(宽→窄、门姿态翻转)。boot 期没有「上一代」,调用方传 `live === next`,于是转换型条目
  * 在 boot 天然惰性 —— 这正确:boot 不存在「热切」这回事。
@@ -28,7 +34,7 @@ import type { ServiceConfigFlat } from "./config-types.js";
  */
 export declare const LIVENESS_HEARTBEAT_MS = 30000;
 /** 闭集:新增一条不变量必须在这里加词(拼错 = 编译红,而不是运行期悄悄不判)。 */
-export type CrossInvariantId = "run-stale-heartbeat" | "bind-posture" | "bake-runner-credential" | "direct-door-anchors" | "operator-principals-required" | "bake-operator-principals" | "sensitive-write-patterns" | "leader-host-lane" | "leader-durable-store" | "device-durable-store" | "device-durable-approval" | "model-provider-word" | "gateway-url-userinfo" | "model-route-endpoint" | "default-model-resolvable" | "refused-names-not-minted" | "require-execution-lane";
+export type CrossInvariantId = "run-stale-heartbeat" | "bind-posture" | "bake-runner-credential" | "direct-door-anchors" | "operator-principals-required" | "bake-operator-principals" | "sensitive-write-patterns" | "leader-host-lane" | "multi-tenant-shared-lane" | "leader-durable-store" | "device-durable-store" | "device-durable-approval" | "model-provider-word" | "gateway-url-userinfo" | "model-route-endpoint" | "default-model-resolvable" | "refused-names-not-minted" | "require-execution-lane";
 /** 表读的键集(取自平铺配置型 ⇒ 键名/类型永不与真配置漂)。 */
 export type CrossInvariantView = Readonly<Pick<ServiceConfigFlat, "runStaleSec" | "authToken" | "authTokens" | "allowUnauthedWrites" | "imageBakes" | "directApprovalDoor" | "durableApproval" | "approvalHmacKeys" | "principalJwtPubkeys" | "principalJwtIss" | "principalJwtAud" | "requirePrincipal" | "operatorPrincipals" | "sensitiveWritePatterns" | "leaderEnabled" | "remoteExec" | "requireExecutionLane" | "dbBackend" | "tidb" | "pg" | "envModel" | "gatewayBaseUrl" | "gatewayFallbackUrls" | "anthropic" | "models" | "modelRefusals" | "tiers">>;
 export interface CrossInvariantInput {

package/dist/config-invariants.js

@@ -3,10 +3,19 @@ import { modelProviderRefusal } from "./model-provider.js";
 import { modelRouteUrlRefusal } from "./model-route-url.js";
 import { modelRouteEndpointRefusal } from "./model-route-endpoint.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "./model-entry-refusal.js";
+import { executionLaneCaps, executionLaneOf, laneCapabilityHolds, REMOTE_EXEC_PROVIDER_WORDS } from "./execution-lane-caps.js";
 export const LIVENESS_HEARTBEAT_MS = 30_000;
 const anyServiceAuth = (v) => Boolean(v.authToken) || Object.keys(v.authTokens ?? {}).length > 0;
 const mustNarrowBind = (v) => Boolean(v.allowUnauthedWrites) && !anyServiceAuth(v);
 const directDoorConjuncts = (v) => Boolean(v.directApprovalDoor) && Boolean(v.durableApproval) && v.approvalHmacKeys.length > 0 && v.principalJwtPubkeys.length > 0 && Boolean(v.principalJwtIss) && Boolean(v.principalJwtAud);
+function multiTenantSharedLaneRefusal(v) {
+    const lane = executionLaneOf(v.remoteExec?.provider);
+    if (laneCapabilityHolds(executionLaneCaps(lane).tenantSeparation, v))
+        return undefined;
+    const outlets = REMOTE_EXEC_PROVIDER_WORDS.filter((w) => executionLaneCaps(w).tenantSeparation === "supported");
+    return (`REQUIRE_PRINCIPAL=true (multi-tenant posture) with the "${lane}" execution lane runs every tenant's Bash on one shared target — ` +
+        `this lane does not separate tenants; set REMOTE_EXEC to ${outlets.join(" / ")}, or unset REQUIRE_PRINCIPAL for a single-user box`);
+}
 export const CONFIG_CROSS_INVARIANTS = [
     {
         id: "run-stale-heartbeat",
@@ -110,11 +119,24 @@ export const CONFIG_CROSS_INVARIANTS = [
         id: "leader-host-lane",
         keys: ["leaderEnabled", "remoteExec"],
         restartReason: "leader-lane",
-        bootAnchor: { file: "src/config.ts", marker: "CROSS-INVARIANT:leader-host-lane" },
+        bootAnchor: { file: "src/boot/execution-lane.ts", marker: "CROSS-INVARIANT:leader-host-lane" },
         check: ({ next }) => next.leaderEnabled && next.remoteExec?.provider === "host"
-            ? "LEADER_ENABLED with REMOTE_EXEC=host shares ONE absolute workspace across concurrent sub-workers (silent git-state corruption)"
+            ? "LEADER_ENABLED=true on the host execution lane (REMOTE_EXEC=host, CONFIG_PROVIDER=local with REMOTE_EXEC unset, or a " +
+                "config.d/remote-exec.json host override) is refused: the leader wire pins ONE absolute workspace path " +
+                "(LEADER_WORKSPACE / the /home/user default) for every sub-worker, while the host adapter gives each env a " +
+                "DIFFERENT random directory — so N concurrent host workers would share one physical git worktree and " +
+                "corrupt each other's state SILENTLY (per-worker workspace is not wired on this lane yet). Run the leader " +
+                "on an isolated lane (REMOTE_EXEC=e2b or k8s), or turn the leader off (unset LEADER_ENABLED) " +
+                "(#193 车4 件2 / staleness ledger P1-10 boot invariant)"
             : undefined,
     },
+    {
+        id: "multi-tenant-shared-lane",
+        keys: ["requirePrincipal", "remoteExec"],
+        restartReason: "execution-lane",
+        bootAnchor: { file: "src/boot/execution-lane.ts", marker: "CROSS-INVARIANT:multi-tenant-shared-lane" },
+        check: ({ next }) => multiTenantSharedLaneRefusal(next),
+    },
     {
         id: "leader-durable-store",
         keys: ["leaderEnabled", "dbBackend"],
@@ -128,18 +150,27 @@ export const CONFIG_CROSS_INVARIANTS = [
         id: "device-durable-store",
         keys: ["remoteExec", "dbBackend", "tidb", "pg"],
         restartReason: "device-lane",
-        bootAnchor: { file: "src/config.ts", marker: "CROSS-INVARIANT:device-durable-store" },
+        bootAnchor: { file: "src/boot/execution-lane.ts", marker: "CROSS-INVARIANT:device-durable-store" },
         check: ({ next }) => next.remoteExec?.provider === "device" && !((next.dbBackend === "mysql" && next.tidb !== undefined) || (next.dbBackend === "pg" && next.pg !== undefined))
-            ? `REMOTE_EXEC=device with DB_BACKEND=${next.dbBackend} and no SQL connection coordinates leaves the device registry/binding/audit in a per-process map — a restart forgets which device a parked run must resume onto (DB_BACKEND alone is only an engine selector)`
+            ? `REMOTE_EXEC=device with DB_BACKEND=${next.dbBackend} and no SQL connection coordinates built is refused ` +
+                "[device-durable-store]: the device registry, the session↔device binding and the device audit trail are all " +
+                "SQL-backed — without a real SQL store the binding lives in this process only, so a restart forgets WHICH device " +
+                "a parked run must resume onto and a second replica cannot see it at all. Note DB_BACKEND alone is not enough: " +
+                "SESSION_BACKEND=memory (or auto with no MYSQL_HOST/PG_HOST) builds no coordinates at all. Configure a durable " +
+                "store (DB_BACKEND=mysql|pg + its *_HOST/*_USER/*_DATABASE), or unset REMOTE_EXEC " +
+                "(device-executor-lane-v2 §4.7 boot invariant)"
             : undefined,
     },
     {
         id: "device-durable-approval",
         keys: ["remoteExec", "durableApproval"],
         restartReason: "device-lane",
-        bootAnchor: { file: "src/config.ts", marker: "CROSS-INVARIANT:device-durable-approval" },
+        bootAnchor: { file: "src/boot/execution-lane.ts", marker: "CROSS-INVARIANT:device-durable-approval" },
         check: ({ next }) => next.remoteExec?.provider === "device" && !next.durableApproval
-            ? "REMOTE_EXEC=device without DURABLE_APPROVAL=true has no park exit for an approval that outlives the device's offline window"
+            ? "REMOTE_EXEC=device without DURABLE_APPROVAL=true is refused [device-durable-approval]: a personal device goes " +
+                "offline (lid closed, network drop) at arbitrary points, so an in-flight approval that outlives the window MUST " +
+                "have a park exit — without the durable approval store there is none and the run is stuck with nowhere to persist. " +
+                "Set DURABLE_APPROVAL=true, or unset REMOTE_EXEC (device-executor-lane-v2 §4.7 boot invariant)"
             : undefined,
     },
     {

package/dist/config-provider.d.ts

@@ -3,6 +3,7 @@ import { FileConfigStore } from "@sema-agent/settings-schema/node";
 import { type EffectiveConfig as AgentConfigEffective, type EffectiveReadWarning } from "@sema-agent/settings-schema";
 import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, type EffectiveConfig } from "./config-center/facade.js";
 import type { CenterEndpoint } from "./config-center/center-request.js";
+import type { ConfigProviderWord } from "./config-types.js";
 /** Result of a `fetchEffective` — EXACTLY the config-center's return: the effective config + its etag, or
  *  `null` for "unchanged" (remote 304; local: the version matched the caller's prior etag).
  *  `domainErrors`([ref] registry-core 0.10.12 tolerant seam,local lane only):catalog 域坏文件不再
@@ -79,14 +80,15 @@ export interface ConfigProviderInput {
         worker?: string;
         dryRun?: boolean;
     };
-    /** `CONFIG_PROVIDER` env — a CLOSED enum `local` | `remote` | undefined. `local` forces the local
-     *  backend; `remote` selects the center (falls through to local if no URL); any OTHER value is treated as
-     *  a misconfiguration and defaults to local (safe, non-network) with a warn. Normalize/trim the raw env
-     *  string at parse time in config.ts when this knob is actually wired. */
-    provider?: string;
-    /** `CONFIG_LOCAL_DIR` env — root holding `config.d/<domain>.json` for the local backend. Defaults to
-     *  `./config.d`'s parent convention (the FileConfigStore takes the ROOT, and reads `<root>/config.d`). */
-    localDir?: string;
+    /** `CONFIG_PROVIDER` —— 闭集 `local` | `remote` | 缺席(S-841:词表属主 `CONFIG_PROVIDER_WORDS`,认不出的词在
+     *  `loadConfig` 就拒启,本层**不可能**再收到第三个词 —— 修前那条「认不出 ⇒ 当 local + warn」的臂随之删除)。
+     *  `local` forces the local backend; `remote` selects the center (falls through to local if no URL). */
+    provider?: ConfigProviderWord;
+    /** 本地配置源的根(持有 `config.d/<domain>.json`;FileConfigStore 吃根、读 `<root>/config.d`)。🔴 S-841:**必填**,
+     *  值恒来自 {@link configLocalRoot}(入口算一次,工厂与执行车道合成步读同一个)—— 修前是可选、缺席回落
+     *  `process.cwd()`,而工厂只在 `CONFIG_PROVIDER === "local"` 字面上递它 ⇒ 另一条走到 local 的路上配置源读 cwd、
+     *  合成步读 localRoot,两个根分家。一个远程源也收它:`remote` 而无中心 URL 的形照样落回 local。 */
+    localDir: string;
 }
 /**
  * RemoteConfigProvider — DELEGATES to the exported config-center HTTP functions. No HTTP is reimplemented;
@@ -142,8 +144,38 @@ export declare function mapToServiceEffective(eff: AgentConfigEffective, version
  * `CONFIG_PROVIDER=remote` with no URL is a misconfiguration — we fall through to local rather than
  * constructing a remote provider with no endpoint (the caller would have skipped the remote pull entirely
  * under the old code path; local-with-empty-config.d degrades to env the same way). An UNRECOGNIZED value
- * (typo / wrong case) is NOT treated as remote: it defaults to local (non-network) with a warn, so a
- * fat-fingered knob can never silently source config from an unintended/stale network endpoint.
+ * never reaches this function: `loadConfig` refuses to boot on it (S-841), so a fat-fingered knob can
+ * neither source config from an unintended network endpoint nor be read as "local" here while the
+ * execution-lane default reads it as "not local".
  */
 export declare function createConfigProvider(input: ConfigProviderInput): ConfigProvider;
+/**
+ * S-841 —— **本地配置根的唯一来源**:`CONFIG_LOCAL_DIR` → `AGENT_DATA_DIR` → `~/.ai-agent`。两个入口(HTTP 服务的第 1 段、
+ * run-local)各调一次,算出来的那一个值同时交给 config-center 工厂(`createConfigProvider` 的 `localDir`)与执行车道合成步
+ * (`composeExecutionLane` 的 `localRoot`)—— 修前两个入口各写一份这条链(run-local 还多一个与之等价的三元),工厂又在
+ * 字面 `"local"` 之外回落 `process.cwd()`。
+ *
+ * ⚠️ 与**数据根**(`config.localDataRoot`,多一节 `LOCAL_DATA_ROOT`)不是同一条链:两根分家的那一形由第 1 段的
+ * `local_roots_split` 告警说出来(`splitLocalRoots`),合一旋钮 = `CONFIG_LOCAL_DIR`。
+ */
+export declare function configLocalRoot(config: {
+    readonly configLocalDir?: string | undefined;
+}): string;
+/**
+ * {@link createConfigProvider} 会造出**哪一种**配置源 —— 判据的唯一属主(构造器与执行车道合成步读同一只:
+ * local 形 `config.d/remote-exec.json` 的 file-wins 覆写只在配置源是 local 时生效,车PI 修复轮 ①)。
+ * `local` 或没配中心 ⇒ local;其余 ⇒ remote。(S-841 起入参是闭集:「认不出的词 ⇒ local」那一臂随拒启删除。)
+ */
+export declare function configProviderKind(input: {
+    readonly provider?: ConfigProviderWord | undefined;
+    readonly configCenter?: unknown;
+}): "local" | "remote";
+/**
+ * HTTP 服务这一侧的配置源:config-center 工厂**建不建** provider(`CONFIG_PROVIDER=local` 或配了中心才建)、建出来是哪一种。
+ * `undefined` = 纯 env 部署(没有配置源)。工厂与执行车道合成步读这同一只(车PI 修复轮 ①:合成步排在工厂之前)。
+ */
+export declare function serviceConfigSourceKind(config: {
+    readonly configProvider?: ConfigProviderWord | undefined;
+    readonly configCenter?: unknown;
+}): "local" | "remote" | undefined;
 //# sourceMappingURL=config-provider.d.ts.map

package/dist/config-provider.js

@@ -5,8 +5,8 @@ import { FileConfigStore } from "@sema-agent/settings-schema/node";
 import { findSkillContent, skillContentHash, refIntegrityIssues, createSiblingResolver, formatConfigPath, REF_CHECKED_DOMAINS, } from "@sema-agent/settings-schema";
 import { redactSecrets } from "./trace/redact.js";
 import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetchSkillContent, ConfigCenterHttpError, } from "./config-center/facade.js";
-import { createLogger } from "./observability/logger.js";
-const logger = createLogger();
+import { homedir } from "node:os";
+import { join } from "node:path";
 const OPERAND_FINGERPRINT_KEY = randomBytes(16);
 function redactConfigError(text) {
     return redactSecrets(text).replace(/"[^"]*"|'[^']*'/g, (m) => `"#${createHmac("sha256", OPERAND_FINGERPRINT_KEY).update(m.slice(1, -1)).digest("hex").slice(0, 8)}"`);
@@ -205,19 +205,21 @@ export function mapToServiceEffective(eff, version) {
     };
 }
 export function createConfigProvider(input) {
-    const p = input.provider;
-    if (p !== undefined && p !== "local" && p !== "remote") {
-        logger.warn("config_provider_unrecognized", {
-            provider: p,
-            action: "defaulting to local (safe, non-network)",
-        });
-        return new LocalConfigProvider(input.localDir ?? process.cwd());
-    }
-    const forceLocal = p === "local";
-    if (forceLocal || !input.configCenter) {
-        const root = input.localDir ?? process.cwd();
-        return new LocalConfigProvider(root);
-    }
-    return new RemoteConfigProvider(input.configCenter);
+    return configProviderKind(input) === "remote" && input.configCenter !== undefined
+        ? new RemoteConfigProvider(input.configCenter)
+        : new LocalConfigProvider(input.localDir);
+}
+export function configLocalRoot(config) {
+    return config.configLocalDir ?? process.env.AGENT_DATA_DIR ?? join(homedir(), ".ai-agent");
+}
+export function configProviderKind(input) {
+    if (input.provider === "local" || input.configCenter === undefined)
+        return "local";
+    return "remote";
+}
+export function serviceConfigSourceKind(config) {
+    if (config.configCenter === undefined && config.configProvider !== "local")
+        return undefined;
+    return configProviderKind({ provider: config.configProvider, configCenter: config.configCenter });
 }
 //# sourceMappingURL=config-provider.js.map