@sema-agent/server 7.104.0 → 7.106.0

package/dist/config-catalog.js

@@ -1,12 +1,12 @@
-import { CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES } from "@sema-agent/core";
-import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
+import { CROSS_SESSION_INBOUND_SETTINGS, CROSS_SESSION_DIALOG_EXPIRY_VALUES, PERMISSION_MODES } from "@sema-agent/core";
+import { CENTER_CREDENTIAL_ENV, DOMAIN_SCHEMAS } from "@sema-agent/settings-schema";
 import { CENTER_CREDENTIAL_RENEW_LEAD_DEFAULT_MS, CENTER_CREDENTIAL_RENEW_LEAD_MAX_MS, CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS } from "./center-credential-renewer.js";
 import { THINKING_FORMATS } from "./model-compat.js";
-import { AUTO_MODE_CLASSIFIER_TIMEOUT_BOUNDS, CONFIG_PROVIDER_WORDS, DRAIN_SECOND_SIGNAL_MIN_GAP_BOUNDS, DRAIN_SECOND_SIGNAL_MIN_GAP_DEFAULT_MS, FIRST_BYTE_TIMEOUT_BOUNDS, RESILIENCE_DEFAULTS, TASK_WRITE_FACE_ESCALATIONS } from "./config-types.js";
+import { AUTO_MODE_CLASSIFIER_TIMEOUT_BOUNDS, CONFIG_PROVIDER_WORDS, DB_BACKEND_WORDS, DRAIN_SECOND_SIGNAL_MIN_GAP_BOUNDS, DRAIN_SECOND_SIGNAL_MIN_GAP_DEFAULT_MS, FIRST_BYTE_TIMEOUT_BOUNDS, RESILIENCE_DEFAULTS, TASK_WRITE_FACE_ESCALATIONS } from "./config-types.js";
 import { webSearchProviderFromEnv, WEB_SEARCH_PROVIDERS } from "./plugins/web-search.js";
+import { UNATTENDED_PERMISSION_MODE_DEFAULT } from "./unattended-permission-mode.js";
 import { AUTONOMY_MODES } from "./runtime-governance.js";
 import { REMOTE_EXEC_PROVIDER_WORDS } from "./execution-lane-caps.js";
-import { CENTER_READ_FACE_LIVE_KEYS } from "./config-center/read-face.js";
 import { MODEL_PROVIDER_WORDS } from "./model-provider.js";
 import { buildDisplaySafeUrl } from "./trace/redact.js";
 import { describeAllowlistPostures } from "./env-name-allowlist-knobs.js";
@@ -35,14 +35,6 @@ const cLimits = (path, over = {}) => ({
 });
 const cGov = (path, over = {}) => ({ domain: "governance", path, centerKey: path, precedence: "center-wins", timing: "hot", ...over });
 const cModels = (path) => ({ domain: "models", path, centerKey: "models", precedence: "center-wins", timing: "hot" });
-const cRead = (path, centerKey, over = {}) => ({
-    domain: "readFace",
-    path,
-    centerKey,
-    precedence: "env-wins",
-    ...(CENTER_READ_FACE_LIVE_KEYS.has(path) ? { timing: "hot" } : { timing: "restart", restartSlice: "read-face" }),
-    ...over,
-});
 const SEC = ["security"];
 const BILL = ["billing"];
 const DATA = ["data"];
@@ -108,7 +100,7 @@ export const CONFIG_CATALOG = [
     r("COST_QUOTA_WINDOW_SEC", "limitsHttp", "number", "per-principal 成本配额窗长(秒);SQL 腿窗长进桶主键 ⇒ center 腿显式 deferred(重启生效)", { staticDefault: "86400", danger: BILL, configKey: "costQuotaWindowSec", center: cLimits("costQuotaWindowSec", { timing: "restart", restartReason: "cost-quota-window" }) }),
     r("CROSS_SESSION_DIALOG_EXPIRY", "approval", "enum", "held 跨会话消息等待人审的期限(CC settings 键名 dialogExpiry;未设=不铸键,引擎自落缺省 5m;词表外拒启)", { danger: SEC, enumValues: [...CROSS_SESSION_DIALOG_EXPIRY_VALUES], configKey: "crossSessionDialogExpiry", derivedDefaultNote: "缺席 ⇒ 不铸键,core 自缺省 5m", resolve: (c) => c.crossSessionDialogExpiry ?? null }),
     r("CROSS_SESSION_INBOUND", "approval", "enum", "入站跨会话消息的部署/组织层治理(CC settings 键名 crossSessionInbound 的 managed 层;未设=本层不表态≠ next-turn;词表外拒启)", { danger: SEC, enumValues: [...CROSS_SESSION_INBOUND_SETTINGS], configKey: "crossSessionInbound", derivedDefaultNote: "缺席 ⇒ managed 层不设,由其余层与 mode-parity 决定", resolve: (c) => c.crossSessionInbound ?? null }),
-    r("DB_BACKEND", "store", "enum", "store 后端引擎选择(mysql 兼容/pg/本机文件店/纯内存)", { enumValues: ["mysql", "pg", "local", "memory"], danger: DATA, derivedDefaultNote: "裸 boot ⇒ local(多租户裸 boot ⇒ memory + notice);有 SQL 信号 ⇒ mysql", configKey: "dbBackend", resolve: (c) => c.dbBackend }),
+    r("DB_BACKEND", "store", "enum", "store 后端引擎选择(mysql 兼容/pg/本机文件店/纯内存)", { enumValues: DB_BACKEND_WORDS, danger: DATA, derivedDefaultNote: "裸 boot ⇒ local(多租户裸 boot ⇒ memory + notice);有 SQL 信号 ⇒ mysql", configKey: "dbBackend", resolve: (c) => c.dbBackend }),
     r("DB_QUERY_TIMEOUT_MS", "store", "number", "per-query DB 超时(ms;坏值回默认姿态+warn,绝不 NaN 进 driver)", { derivedDefaultNote: "缺席 ⇒ 池级不设/计数族 30s(按引擎)", configKey: "dbQueryTimeoutMs" }),
     r("DEFAULT_SCENARIO", "integrations", "string", "出厂缺省场景(编码产品出厂态;通用中性 persona 用 default 显式选回)", { staticDefault: "code", configKey: "defaultScenario" }),
     r("DELEGATION_MAX_CONCURRENT", "orchestration", "number", "委派入口并发帽", { derivedDefaultNote: "缺席 ⇒ 不铸键,core 自缺省(CC parity 20)" }),
@@ -153,7 +145,8 @@ export const CONFIG_CATALOG = [
     r("EXPERIMENTAL_OBSERVER_AGENTS", "orchestration", "boolean", "observer 开闸线(实验面 ship-dark;多租户只认 center caps,env 被忽略)", { staticDefault: "false", configKey: "experimentalObserverAgents" }),
     r("FILE_HISTORY_CAPTURE", "store", "boolean", "文件历史**捕获**总开关(三条车道同义)。关 = 不再捕获任何改动文件的首次快照(落 core 的部署捕获位 `RunnerDeps.fileHistoryCapture: \"off\"`,能力词 `fileHistoryCapture` 翻 off);S-724(7.104.0)起**只关捕获**:历史店照接,已存历史照常 restoreFiles / rewindFilesTo / 2c session-sync。关掉 ≠ 删掉:已捕获的历史不被批量删除,仍按会话删除与留存规则清理 —— 要清存量走 DELETE 会话或留存旋钮;没有「整库历史不可用」的旋钮", { staticDefault: "true", danger: DATA, configKey: "fileHistoryCapture" }),
     r("FILE_HISTORY_RETENTION_KEEP", "store", "number", "per-file rewind 历史的保留上限(与 core FileStorageBackend 同域键形,三条车道一套语义)", { danger: DATA, derivedDefaultNote: "缺席 ⇒ core 缺省 100" }),
-    r("FLEET_ADVERTISE_ADDRESS", "integrations", "url", "fleet 面向 center 公告的本 worker 可达地址(与 center 腿同在 ⇒ 启 fleet client;坏形拒启)"),
+    r("FLEET_ADVERTISE_ADDRESS", "integrations", "url", "fleet 面向 center 公告的本 worker 可达地址(中心车道配齐 + 本键 ⇒ 公告环;坏形拒启。用量环不看本键,S-866 ④)"),
+    r("FLEET_LEASE_FAIL_CLOSED", "integrations", "boolean", "租约连接级失败(中心鉴权拒 / 凭证不可读 / 不可达 / 5xx / 超时 / 坏体)时计费入口拒 503 fleet.lease_unavailable(true)还是放行(false);409 not-lease 与耗尽 429 不受它管;词表外拒启", { danger: SEC, derivedDefaultNote: "缺席 ⇒ 按部署姿态派生:REQUIRE_PRINCIPAL=true ⇒ true(多租:额度是安全轴);单用户 ⇒ false(AP 姿态)。显式值压过派生。生效值见 caps centerWiring.failMode", configKey: "fleetLeaseFailClosed" }),
     r("FORK_ENABLED", "orchestration", "boolean", "CC /fork(core Fork 工具)装配开关", { derivedDefaultNote: "posture 三态:缺席 = 单用户 ⇒ on / 多租户 ⇒ off(per-principal entitlement 另判)", configKey: "forkEnabled" }),
     r("GATEWAY_MAX_RETRIES", "modelPlane", "number", "openai 兼容腿每次调用重试上限", { derivedDefaultNote: "缺席 ⇒ 不传引擎,引擎默认当家" }),
     r("GIT_API_BASEURL", "integrations", "url", "repo 工具的 Git host API base", { configKey: "gitApiBaseUrl" }),
@@ -219,7 +212,7 @@ export const CONFIG_CATALOG = [
     r("LSP_ENABLED", "orchestration", "boolean", "LSP 沙箱腿 opt-in(需烤好的 LSP 模板;host 腿另有 LSP_HOST_ENABLED)", { staticDefault: "false", configKey: "lspEnabled" }),
     r("LSP_ENV_ALLOW", "orchestration", "secret", `host 腿语言服务器子进程 env 的点名放行名单(点到的键从服务 env 原样放回、部署方显式承担;没点到的照剥;与 host shell inheritEnv:[names] 同一只谓词;形错 / 点名任一只名单型旋钮(含自己)拒启且不回显值;本进程环境里没有的名按序号 warn、不放行、不回显;多租户姿态(忽略时起服 warn 一次):${describeAllowlistPostures()};原文按凭据类对待:只回在场位、不进任何子进程,生效名单见起服披露行 allowed)`, { danger: SEC, derivedDefaultNote: "缺席 / 空串 ⇒ 空名单 = 全剥(7.100.0 行为)" }),
     r("LSP_HOST_ENABLED", "orchestration", "boolean", "LSP host 腿开关(本机 language server,优雅降级)", { staticDefault: "true", configKey: "lspHostEnabled" }),
-    r("MANUAL_MODE_SHELL_GATE", "approval", "enum", "手动模式 shell 门收紧腿(off=no-op 非放松 —— 本键只有收紧半场;拼错拒启)", { danger: SEC, enumValues: ["always", "classify", "off"], echoWords: ["always", "classify"], resolve: (c) => c.manualModeShellGate ?? null, derivedDefaultNote: "off/未设 ⇒ 本键不贡献任何东西(归一成键缺席)⇒ 回显 null;真姿态只有 always/classify 两个" }),
+    r("MANUAL_MODE_SHELL_GATE", "approval", "enum", "手动模式 shell 门收紧腿(off=no-op 非放松 —— 本键只有收紧半场;拼错拒启;S-877 起 classify 退役 = 拒启指路)", { danger: SEC, enumValues: ["always", "off"], echoWords: ["always"], resolve: (c) => c.manualModeShellGate ?? null, derivedDefaultNote: "off/未设 ⇒ 本键不贡献任何东西(归一成键缺席)⇒ 回显 null;真姿态只有 always 一个(core 7.34.0 起形状档在每一种模式下都装,classify 不再是运维选的档)" }),
     r("MAX_PRINCIPAL_COST_USD", "limitsHttp", "number", "per-principal 窗内成本天花板(0=关)", { staticDefault: "0", danger: BILL, configKey: "maxPrincipalCostUsd", center: cLimits("maxPrincipalCostUsd") }),
     r("MAX_TASK_COST_USD", "limitsHttp", "number", "单任务成本天花板(0=关)", { staticDefault: "0", danger: BILL, configKey: "maxTaskCostUsd", center: cLimits("maxTaskCostUsd") }),
     r("MAX_TASK_TOKENS", "limitsHttp", "number", "单任务 token 天花板(per-slice 窗;0=关)", { staticDefault: "0", danger: BILL, configKey: "maxTaskTokens", center: cLimits("maxTaskTokens") }),
@@ -287,8 +280,8 @@ export const CONFIG_CATALOG = [
     r("MODEL_COST_OUTPUT", "modelPlane", "number", "主模型 output 单价", { derivedDefaultNote: "四键全缺席 ⇒ 未定价(不铸 cost 键,成本读面缺席);任一设 ⇒ 四键在场,未设的按 0 显式", danger: BILL, resolve: (c) => c.model.cost?.output ?? null, center: cModels("models[].cost.output") }),
     r("MODEL_DEFAULT_THINKING", "modelPlane", "enum", "主模型默认思考档(llm-core ThinkingLevel;off=不设模型级默认;未知词拒启)", { enumValues: ["minimal", "low", "medium", "high", "xhigh", "max", "off"], echoWords: ["minimal", "low", "medium", "high", "xhigh", "max"], derivedDefaultNote: "缺席/off ⇒ 不铸 defaultThinking(逐任务档由 spec>role 决定)", resolve: (c) => c.model.defaultThinking ?? null }),
     r("MODEL_DEGRADE_AT_COST_FRACTION", "modelPlane", "number", "预算降级触发比(spent/budget;>1=实际别降级)", { staticDefault: "0.7", danger: BILL }),
-    r("MODEL_DEGRADE_ON", "modelPlane", "csv", "反应式降级触发词表(core DegradeReason 全集;拼错拒启)", { center: { domain: "models", path: "degrade", centerKey: "models", precedence: "center-wins", timing: "restart", restartSlice: "degrade-route" } }),
-    r("MODEL_DEGRADE_REACTIVE", "modelPlane", "boolean", "反应式降级开关(degrade-route 重启片只在它开时活)", { staticDefault: "false", center: { domain: "models", path: "degrade", centerKey: "models", precedence: "center-wins", timing: "restart", restartSlice: "degrade-route" } }),
+    r("MODEL_DEGRADE_ON", "modelPlane", "csv", "反应式降级触发词表(core DegradeReason 全集;拼错拒启)。中心 models 域没有 degrade 成员,降级词表由 env 持有"),
+    r("MODEL_DEGRADE_REACTIVE", "modelPlane", "boolean", "反应式降级开关(degrade-route 重启片只在它开时活)。中心 models 域没有 degrade 成员,开关由 env 持有", { staticDefault: "false" }),
     r("MODEL_DEGRADE_TO", "modelPlane", "string", "降级目标模型(设了=开降级;外部网关名不必在目录)", { danger: BILL }),
     r("MODEL_DEGRADE_TO_VISION", "modelPlane", "boolean", "降级目标的 vision 声明(false ⇒ 带图任务丢降级不丢图)", { staticDefault: "false" }),
     r("MODEL_EXTRA_BODY", "modelPlane", "opaque", "生成参数直通 JSON(top_k/logit_bias 等;必须静态 —— 前缀缓存键序)", { danger: SEC }),
@@ -337,7 +330,7 @@ export const CONFIG_CATALOG = [
     r("OTEL_EXPORTER_OTLP_HEADERS", "observability", "secret", "OTLP 出口头(k=v CSV;常载鉴权头 ⇒ 按凭据处置)", { danger: SEC }),
     r("OTEL_EXPORT_INTERVAL_MS", "observability", "number", "OTLP 批报周期(ms)", { staticDefault: "15000" }),
     r("OTEL_SERVICE_NAME", "observability", "string", "OTLP service.name", { staticDefault: "sema-server" }),
-    r("PERMISSIONS_DISABLE_AUTO_MODE", "approval", "boolean", "auto 模式本地 org deny(CC/center/settings 键名 permissions.disableAutoMode 的 env 腿;tighten-only:每 principal caps.autoMode 折 false,center 授予翻不回;未设=不动 caps;词表外拒启)", { staticDefault: "false", danger: SEC, configKey: "permissionsDisableAutoMode", center: { domain: "permissions", path: "disableAutoMode", centerKey: "permissions.disableAutoMode", precedence: "env-wins", timing: "inert" } }),
+    r("PERMISSIONS_DISABLE_AUTO_MODE", "approval", "boolean", "auto 模式本地 org deny(CC/center/settings 键名 permissions.disableAutoMode 的 env 腿;tighten-only:每 principal caps.autoMode 折 false,center 授予翻不回;未设=不动 caps;词表外拒启)", { staticDefault: "false", danger: SEC, configKey: "permissionsDisableAutoMode" }),
     r("PERMISSION_RULES_ENABLED", "approval", "boolean", "持久化权限规则车道总开关(撤销面已建 ⇒ 默认 ON)", { staticDefault: "true", danger: SEC, configKey: "permissionRulesEnabled" }),
     r("PG_DATABASE", "store", "string", "PostgreSQL 库名", { danger: DATA }),
     r("PG_HOST", "store", "string", "PostgreSQL 主机(在场即算 SQL 信号)", { danger: DATA }),
@@ -358,10 +351,10 @@ export const CONFIG_CATALOG = [
     r("QUESTION_MAX_TOTAL_PER_RUN", "approval", "number", "AskUserQuestion 每 run 总量帽", { derivedDefaultNote: "缺席 ⇒ 出厂窗 20" }),
     r("QUESTION_TTL_MS", "approval", "number", "AskUserQuestion 无人应答释放窗(ms)", { derivedDefaultNote: "缺席 ⇒ 出厂窗 300000" }),
     r("RATE_LIMIT_RPM", "limitsHttp", "number", "计费提交每分钟限流(0=关)", { staticDefault: "0", danger: BILL, configKey: "rateLimitPerMin", center: cLimits("rateLimitPerMin") }),
-    r("READ_DENY_BUILTIN_EXCLUDE", "orchestration", "csv", "按行名删内建 deny 条目(档位之后生效;绝不削任务显式 deny)", { danger: SEC, configKey: "readDenyBuiltinExclude", center: cRead("denyBuiltinExclude", "readDenyBuiltinExclude") }),
-    r("READ_DENY_BUILTIN_TIERS", "orchestration", "csv", "内建 deny 表档位选择(闭集五档 credentials/shell-history/browser/wallet/agent-config;none=显式空姿态)", { danger: SEC, derivedDefaultNote: "🔴 缺席 ⇒ **OFF**(core 7.22.0 / C-R60 起内建表出厂全关:根内凭据名可读、整个递归读族零卡)。要 7.21.x 姿态就显式写 credentials,browser,wallet,agent-config;空值拒启(手滑与显式意图不许同形)", configKey: "readDenyBuiltinTiers", center: cRead("denyBuiltinTiers", "readDenyBuiltinTiers") }),
-    r("READ_DENY_PATTERNS", "orchestration", "csv", "READ 面额外 deny pattern 表", { danger: SEC, configKey: "readDenyPatterns", center: cRead("denyPatterns", "readDenyPatterns") }),
-    r("READ_FACE", "orchestration", "enum", "READ 容纳面档位(env 逐键恒赢 center —— 部署主权表达)", { enumValues: ["open", "roots"], danger: SEC, derivedDefaultNote: "缺席 ⇒ 按 posture 派生(S-167):单用户 turnkey(REQUIRE_PRINCIPAL 未设)铸 open;多租户不铸键、core 默认 roots。生效来源见 GET /v1/diagnostics/wiring 的 readFace.source 四词", configKey: "readFace", center: cRead("face", "readFace") }),
+    r("READ_DENY_BUILTIN_EXCLUDE", "orchestration", "csv", "按行名删内建 deny 条目(档位之后生效;绝不削任务显式 deny)", { danger: SEC, configKey: "readDenyBuiltinExclude" }),
+    r("READ_DENY_BUILTIN_TIERS", "orchestration", "csv", "内建 deny 表档位选择(闭集五档 credentials/shell-history/browser/wallet/agent-config;none=显式空姿态)", { danger: SEC, derivedDefaultNote: "缺席 ⇒ 出厂两档在岗 **credentials,agent-config**(core 7.34.0 R-2 起;7.22.0–7.33.x 曾为 OFF)。要全关显式写 none;要全五档显式写 credentials,shell-history,browser,wallet,agent-config;空值拒启(手滑与显式意图不许同形)", configKey: "readDenyBuiltinTiers" }),
+    r("READ_DENY_PATTERNS", "orchestration", "csv", "READ 面额外 deny pattern 表", { danger: SEC, configKey: "readDenyPatterns" }),
+    r("READ_FACE", "orchestration", "enum", "READ 容纳面档位(env 逐键恒赢 center —— 部署主权表达)", { enumValues: ["open", "roots"], danger: SEC, derivedDefaultNote: "缺席 ⇒ 按 posture 派生(S-167):单用户 turnkey(REQUIRE_PRINCIPAL 未设)铸 open;多租户不铸键、core 默认 roots。生效来源见 GET /v1/diagnostics/wiring 的 readFace.source 四词", configKey: "readFace" }),
     r("REAP_INTERVAL_SEC", "limitsHttp", "number", "reaper 周期(秒)", { staticDefault: "60", configKey: "reapIntervalSec" }),
     r("REAP_RUN_STALE_SEC", "limitsHttp", "number", "run 活性判陈旧阈(秒)", { staticDefault: "120", configKey: "runStaleSec", center: cLimits("runStaleSec") }),
     r("REMOTE_EXEC", "orchestration", "enum", "执行车道选择(点名而配不齐/认不出 ⇒ 拒启,绝不静默降级到 host/stub)", { enumValues: REMOTE_EXEC_PROVIDER_WORDS, danger: SEC, derivedDefaultNote: "缺席:CONFIG_PROVIDER=local ⇒ host;其余 ⇒ 进程内 stub(手带整族不挂;残余名册看活体 wiring_manifest 里 mountedBy=hands 的条目数,不按工具名点。想让这一形拒启见 REQUIRE_EXECUTION_LANE)", configKey: "remoteExec", resolve: (c) => c.remoteExec?.provider ?? null }),
@@ -461,6 +454,7 @@ export const CONFIG_CATALOG = [
     r("TRACE_THINKING", "observability", "boolean", "思考轨迹入 durable 事件日志(敏感部署可关;落盘前脱敏)", { staticDefault: "true", danger: DATA, configKey: "traceThinking" }),
     r("TRACE_TOKEN", "observability", "secret", "Task Trace API 只读令牌(fleet 拉轨迹,不授任务/配置权)", { danger: SEC }),
     r("UNATTENDED_APPROVAL_POLICY", "approval", "enum", "无人能答的治理 ask 终局(park=durable 等人;deny=当场拒 —— 自声明无人值守)", { enumValues: ["park", "deny"], staticDefault: "park", danger: SEC, configKey: "unattendedApprovalPolicy" }),
+    r("UNATTENDED_PERMISSION_MODE", "approval", "enum", "无人值守腿(leader worker / leader 修复腿 / run-local:本仓自铸 spec、无调用方可表态、无审批席)的权限模式;写面恒 roots(不随 bypassPermissions 开放);词表外拒启", { enumValues: [...PERMISSION_MODES], staticDefault: UNATTENDED_PERMISSION_MODE_DEFAULT, danger: SEC, configKey: "unattendedPermissionMode" }),
     r("UNREACHED_ASK_TTL_MS", "approval", "number", "零活流铸造的 ask 悬挂窗(ms;[60s,24h] 拒启带界)", { staticDefault: "3600000" }),
     r("USAGE_WINDOWS", "orchestration", "opaque", "部署级治理窗(JSON 数组;滑动窗内跨任务 token/$ 预算,key=principal)", { danger: BILL }),
     r("WEB_SEARCH_API_KEY", "orchestration", "secret", "web search 后端 API 凭据(brave/tavily)", { danger: [...SEC, ...BILL] }),
@@ -488,6 +482,62 @@ export const CONFIG_CATALOG = [
     r("WRITE_PROTECTED_EXTRA", "approval", "csv", "写保护名表的**加法**(逗号裸名或 JSON [{name,kind}];组合 [...core 缺省表, …];空值拒启)", { danger: SEC, derivedDefaultNote: "缺席 ⇒ 不铸座,core 缺省表(51 行)在岗" }),
     r("WRITE_PROTECTED_TABLE_REPLACE", "approval", "json", "写保护名表的**整表替换**(JSON 数组;[]=显式无表;boot 期 loud 列出被丢的缺省行)", { danger: SEC, derivedDefaultNote: "缺席 ⇒ 不铸座,core 缺省表在岗;与 WRITE_PROTECTED_EXTRA 同写 ⇒ 拒启" }),
 ];
+export function assertCenterSeatsResolvable(specs) {
+    const bad = [];
+    for (const spec of specs) {
+        const seat = spec.center;
+        if (seat === undefined)
+            continue;
+        const schema = Object.hasOwn(DOMAIN_SCHEMAS, seat.domain) ? Reflect.get(DOMAIN_SCHEMAS, seat.domain) : undefined;
+        if (schema === undefined)
+            bad.push(`${spec.name}: center domain "${seat.domain}" is not a settings-schema domain`);
+        else if (!zodPathResolves(schema, seat.path))
+            bad.push(`${spec.name}: the settings-schema "${seat.domain}" domain has no member at path "${seat.path}"`);
+    }
+    if (bad.length > 0) {
+        throw new Error(`config catalog claims center seats the settings-schema contract does not have — the center cannot publish them, so the catalog must not advertise a center write lane for them (delete the seat, or add the member to the contract first): ${bad.join("; ")}`);
+    }
+}
+function zodMember(node, key) {
+    return typeof node === "object" && node !== null && key in node ? Reflect.get(node, key) : undefined;
+}
+function unwrapZodNode(node) {
+    let cur = node;
+    for (let depth = 0; depth < 32; depth++) {
+        const def = zodMember(cur, "_def");
+        const inner = zodMember(def, "innerType") ?? zodMember(def, "schema");
+        if (inner !== undefined) {
+            cur = inner;
+            continue;
+        }
+        const getter = zodMember(def, "getter");
+        if (typeof getter === "function") {
+            cur = Reflect.apply(getter, def, []);
+            continue;
+        }
+        return cur;
+    }
+    return cur;
+}
+function zodPathResolves(schema, path) {
+    let cur = unwrapZodNode(schema);
+    for (const segment of path.split(".")) {
+        const intoArray = segment.endsWith("[]");
+        const name = intoArray ? segment.slice(0, -2) : segment;
+        const shape = zodMember(cur, "shape");
+        if (typeof shape !== "object" || shape === null || !Object.hasOwn(shape, name))
+            return false;
+        cur = unwrapZodNode(Reflect.get(shape, name));
+        if (intoArray) {
+            const def = zodMember(cur, "_def");
+            if (zodMember(def, "typeName") !== "ZodArray")
+                return false;
+            cur = unwrapZodNode(zodMember(def, "type"));
+        }
+    }
+    return true;
+}
+assertCenterSeatsResolvable(CONFIG_CATALOG);
 function primitiveConfigValue(config, key) {
     const v = Reflect.get(config, key);
     if (typeof v === "string" || typeof v === "number" || typeof v === "boolean")
@@ -535,7 +585,7 @@ function valueClassOf(type) {
     return "plain";
 }
 export function buildConfigCatalog(inputs) {
-    const { config, env, boot, knobs, centerDomains, centerManagedKeys } = inputs;
+    const { config, env, boot, knobs, centerDomains, centerManagedKeys, retired } = inputs;
     const knobByName = new Map(knobs.map((k) => [k.name, k]));
     const rows = [...CONFIG_CATALOG]
         .sort((a, b) => (a.name < b.name ? -1 : 1))
@@ -545,7 +595,6 @@ export function buildConfigCatalog(inputs) {
         const valueClass = valueClassOf(spec.type);
         const knob = valueClass === "plain" ? knobByName.get(spec.name) : undefined;
         const seat = spec.center;
-        const domainExists = seat !== undefined && centerDomains.includes(seat.domain);
         const managedNow = seat !== undefined && (centerManagedKeys?.has(seat.centerKey) ?? false);
         const centerTiming = seat?.timing;
         const centerRestartSlice = seat?.restartSlice;
@@ -571,7 +620,7 @@ export function buildConfigCatalog(inputs) {
             domain: spec.domain,
             type: spec.type,
             semantics: spec.semantics,
-            writeLanes: seat !== undefined && domainExists ? ["env", "center"] : ["env"],
+            writeLanes: seat !== undefined ? ["env", "center"] : ["env"],
             effectiveLane,
             envHeld,
             envTiming: spec.envTiming ?? "deploy",
@@ -590,7 +639,6 @@ export function buildConfigCatalog(inputs) {
                         timing: centerTiming,
                         ...(centerRestartSlice !== undefined ? { restartSlice: centerRestartSlice } : {}),
                         ...(seat.restartReason !== undefined ? { restartReason: seat.restartReason } : {}),
-                        domainExists,
                         managedNow,
                         effectiveNow: centerEffective,
                     },
@@ -614,6 +662,7 @@ export function buildConfigCatalog(inputs) {
             centerManaged: rows.filter((x) => x.center?.managedNow === true).length,
         },
         rows,
+        retired,
     };
 }
 //# sourceMappingURL=config-catalog.js.map

package/dist/config-center/apply-effective.d.ts

@@ -7,7 +7,7 @@
  */
 import type { Model } from "@sema-agent/core";
 import type { ServiceConfig } from "../config-types.js";
-import { type SealedKeyOpener } from "../sealed-key.js";
+import type { SealedKeyOpener } from "../sealed-key.js";
 import type { Logger } from "../observability/logger.js";
 import type { EffectiveConfig } from "./types.js";
 import { type ModelRefusalVerdict } from "../model-entry-refusal.js";

package/dist/config-center/apply-effective.js

@@ -1,5 +1,5 @@
 import { resolveActiveTiers } from "@sema-agent/settings-schema";
-import { sealedKeyPoison } from "../sealed-key.js";
+import { modelKeyPoison } from "../key-resolver.js";
 import { applyAutoCompactWindow, buildModelCostKey, findUnmatchableToolNames, formatUnmatchableToolNames, parseAutonomy } from "../config.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { validateCommandRules } from "../runtime-governance.js";
@@ -267,11 +267,11 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
                 const s = m.sealedApiKey;
                 if (!sealedKeys) {
                     logger?.warn("sema_registry_model_sealed_key_no_store", { model: m.name, publicKeyId: s.publicKeyId, hint: "no sealed-key store on this host (boot custody init failed or lane unwired) — key POISONED: tasks on this model fail loud (no apiKeyEnv fallback, no gateway fallback)" });
-                    modelApiKeys[m.name] = sealedKeyPoison(s.publicKeyId, "no_key_store");
+                    modelApiKeys[m.name] = modelKeyPoison({ source: "sealed", reason: "no_key_store", publicKeyId: s.publicKeyId });
                 }
                 else if (!sealedKeys.has(s.publicKeyId)) {
                     logger?.warn("sema_registry_model_sealed_key_no_private_key", { model: m.name, publicKeyId: s.publicKeyId, held: sealedKeys.ids(), hint: "ciphertext targets a private key this host doesn't hold (rotated away / other host) — key POISONED: tasks on this model fail loud until the operator re-pastes the key in the web UI (it seals against the newest registered public key)" });
-                    modelApiKeys[m.name] = sealedKeyPoison(s.publicKeyId, "stale_ciphertext");
+                    modelApiKeys[m.name] = modelKeyPoison({ source: "sealed", reason: "stale_ciphertext", publicKeyId: s.publicKeyId });
                 }
                 else {
                     try {
@@ -279,15 +279,14 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
                     }
                     catch (err) {
                         logger?.warn("sema_registry_model_sealed_key_open_failed", { model: m.name, publicKeyId: s.publicKeyId, err: String(err), hint: "corrupt/foreign ciphertext — key POISONED: tasks on this model fail loud (no apiKeyEnv fallback, no gateway fallback)" });
-                        modelApiKeys[m.name] = sealedKeyPoison(s.publicKeyId, "sealed_decrypt_failed", err instanceof Error ? err.name : "unknown");
+                        modelApiKeys[m.name] = modelKeyPoison({ source: "sealed", reason: "sealed_decrypt_failed", publicKeyId: s.publicKeyId, errKind: err instanceof Error ? err.name : "unknown" });
                     }
                 }
             }
             else if (m.apiKeyEnv) {
-                if (process.env[m.apiKeyEnv])
-                    modelApiKeyEnv[m.name] = m.apiKeyEnv;
-                else
-                    logger?.warn("sema_registry_model_key_env_missing", { model: m.name, apiKeyEnv: m.apiKeyEnv, hint: "env var not set in this service — model falls back to the gateway key" });
+                modelApiKeyEnv[m.name] = m.apiKeyEnv;
+                if (!process.env[m.apiKeyEnv])
+                    logger?.warn("sema_registry_model_key_env_missing", { model: m.name, apiKeyEnv: m.apiKeyEnv, hint: `env var ${m.apiKeyEnv} not set (or empty) in this service — key POISONED: tasks on this model fail loud naming ${m.apiKeyEnv} (no gateway fallback) until it is set; or drop apiKeyEnv from the entry to use the gateway key on purpose` });
             }
         }
         const quotaWeights = {};

package/dist/config-center/apply-ledger.d.ts

@@ -33,6 +33,23 @@
  */
 export declare const CONFIG_APPLY_GROUPS: readonly ["limitsHttp", "approvalGate", "modelPlane"];
 export type ConfigApplyGroup = (typeof CONFIG_APPLY_GROUPS)[number];
+/**
+ * S-810(车QU codex r1 [high] F1,验真后修)—— 一组在**热腿**被整组拒之后,新进程在 **boot 腿**上对同一候选重判会怎样。每组一格的闭集
+ * (`satisfies Record<ConfigApplyGroup, …>`:加一组 ⇒ 这里编译红,不许静默落进某一格)。部分应用的拍据此决定能不能发重启信号
+ * (`boot/config-center.ts` 的 `signalRestart`):
+ *  · `"refuses-group"` —— boot 腿同一判据、同样整组拒,其余组照落 ⇒ 重启收敛(新进程的 boot 快照就是这份候选,同一差异不再签)。
+ *    `limitsHttp`:`stageLimits` 不分腿。
+ *  · `"may-refuse-boot"` —— boot 腿的结局取决于那一刻的部署事实,可能整个进程起不来 ⇒ 照信号重启不保证收敛(可能把一台还在服务的
+ *    实例重启成起不来),信号扣下(= 7.105.0 部分应用拍的姿态),差异照写一条 warn。
+ *    `approvalGate`:boot 腿**不判**「门意图可服务」(店还没建,`apply-effective.ts` `unserviceableOnLeg`),装配完由 stage-07 对整份
+ *    config 判同一只 `gateIntentUnserviceableReason` ⇒ 拒启;坏形那一臂 boot 腿同样整组拒(会收敛),但组拒记账不带成因码 —— 按组保守。
+ *    `modelPlane`:boot 腿组拒后回落 LKG / env 的模型面,两者都没有缺省模型的部署在 stage-02 `default-model-resolvable` 拒启。
+ */
+export declare const BOOT_REJUDGE_OF_REFUSED_GROUP: {
+    readonly limitsHttp: "refuses-group";
+    readonly approvalGate: "may-refuse-boot";
+    readonly modelPlane: "may-refuse-boot";
+};
 /** 一组的收敛状态(读面形对所有组相同)。 */
 export interface ConfigApplyGroupState {
     /** 本组最后一次**真的落地**的源版本(身份标)。 */

package/dist/config-center/apply-ledger.js

@@ -1,4 +1,9 @@
 export const CONFIG_APPLY_GROUPS = ["limitsHttp", "approvalGate", "modelPlane"];
+export const BOOT_REJUDGE_OF_REFUSED_GROUP = {
+    limitsHttp: "refuses-group",
+    approvalGate: "may-refuse-boot",
+    modelPlane: "may-refuse-boot",
+};
 export function refusedGroups(report) {
     return CONFIG_APPLY_GROUPS.flatMap((group) => {
         const r = report.groups[group].rejected;

package/dist/config-center/center-request.d.ts

@@ -10,6 +10,23 @@ export interface CenterEndpoint {
     readonly baseUrl: string;
     readonly credential: CenterCredentialSource;
 }
+/**
+ * S-866 ④ —— 「中心车道配齐」的**唯一**谓词:基址 ∧ **声明了**凭证(S-651:按声明,不按此刻读不读得出)∧ worker。
+ *
+ * 三处同调、不许各抄一份门:租约管理器(`fleet-lease.ts` `createFleetLeaseFromEnv`)、fleet 客户端的用量环
+ * (`fleet-client.ts` `startFleetClientFromEnv`)、用量累加器(`boot/budget-tracing.ts`)。公告环另要一件可达性声明
+ * `FLEET_ADVERTISE_ADDRESS` —— 那是公告环自己的第四件,不在本谓词里:用量是出站上报,与「中心能不能打到我」无关
+ * (7.105.0 及以前累加器与用量环都挂在公告地址上,不公告的引擎于是从不报用量,租约的已耗量只剩中心自己的估计)。
+ */
+export declare function centerLaneConfigured<C extends {
+    readonly configCenter?: (CenterEndpoint & {
+        readonly worker?: string | undefined;
+    }) | undefined;
+}>(cfg: C): cfg is C & {
+    readonly configCenter: NonNullable<C["configCenter"]> & {
+        readonly worker: string;
+    };
+};
 /** 中心路由闭集。 */
 export type CenterRoute = {
     readonly kind: "effective";

package/dist/config-center/center-request.js

@@ -10,6 +10,10 @@ export const SETTINGS_SCHEMA_MAJOR = (() => {
         throw new Error(`cannot derive ${SCHEMA_MAJOR_HEADER}: @sema-agent/settings-schema package.json has version ${JSON.stringify(version)}`);
     return m[1];
 })();
+export function centerLaneConfigured(cfg) {
+    const cc = cfg.configCenter;
+    return cc !== undefined && cc.baseUrl !== "" && cc.credential.declared && cc.worker !== undefined && cc.worker !== "";
+}
 export function pullViewQuery(view) {
     const parts = [];
     if (view.principal !== undefined)

package/dist/config-center/pull-state.d.ts

@@ -0,0 +1,29 @@
+/**
+ * S-866 ②(设计稿 v1.1 §2②)—— 「这台引擎**此刻**是不是真的接着中心」的两件读数:最近一次实拉的结局(`lastPull`)与生效修订号
+ * (`effectiveRevision`)。属主 = config-center 运行时(`boot/config-center.ts` 的 `centerPullState()`);读者 = caps `centerWiring`。
+ *
+ * 纯叶(零值 import):词表与读面形住这里,运行时与读面两侧都从这里取型,不各写一份。
+ */
+/**
+ * 最近一次**实拉**的结局 —— 新状态,运行时只此一枚。闭集:
+ *  · `none` —— 本进程还没有一次中心实拉落地(LKG 起服 / env 兜底起服 / 拉取还在飞 / 配置源是本地目录 `CONFIG_PROVIDER=local`);
+ *  · `ok` —— 最近一拍拉取 + 处理完成(boot 实拉、迟到 boot 到货、refresh 拍任一;304 与被候选门整拒的拍也算:中心答了);
+ *  · `failed` —— 最近一个 refresh 拍抛了(中心超时 / 不可达 / 读不了 / 应用抛错 —— 与 `POST /v1/admin/config/refresh` 的 `"failed"` 同一判)。
+ */
+export declare const CENTER_PULL_STATES: readonly ["none", "ok", "failed"];
+export type CenterPullState = (typeof CENTER_PULL_STATES)[number];
+/** `centerPullState()` 的产物(纯数据)。 */
+export interface CenterPullView {
+    readonly lastPull: CenterPullState;
+    /**
+     * 生效修订号 —— 与 `/health.configAppliedVersion` **同一只** ledger 视图取值(同一事实的第三个面:`/health` 与
+     * `GET /v1/diagnostics/wiring` 是运维面,caps 是调用方面);`updatedAt` 取最近一份整套落地的候选(`latestEffective`)的
+     * `updatedAt`。`null` = 还没有一代真落地,或 ledger 的已应用代与整套落地的那一代对不上(部分应用窗 / boot 带域错的候选)——
+     * 给不出一对同代的 `{version, updatedAt}` 就不拼一对(拼出来的是两代各取一半)。
+     */
+    readonly effectiveRevision: {
+        readonly version: number;
+        readonly updatedAt: string;
+    } | null;
+}
+//# sourceMappingURL=pull-state.d.ts.map

package/dist/config-center/pull-state.js

@@ -0,0 +1,2 @@
+export const CENTER_PULL_STATES = ["none", "ok", "failed"];
+//# sourceMappingURL=pull-state.js.map

package/dist/config-types.d.ts

@@ -7,9 +7,9 @@
  *  see test/module-cycle-gate.test.ts header on verbatimModuleSyntax). */
 import type { ReadFaceSource } from "./read-face-posture.js";
 import type { PostureSource } from "./posture-source.js";
-import type { SealedKeyPoison } from "./sealed-key.js";
+import type { SealedCustodyPoison } from "./key-resolver.js";
 import type { ModelEntryRefusal } from "./model-entry-refusal.js";
-import type { A2aServerSpec, CompliancePosture, CrossSessionDialogExpiry, CrossSessionInboundSetting, FileHistoryRetentionPolicy, LockedKey, McpServerSpec, Model, ModelRoles, RetentionPolicy, WriteProtectedEntry } from "@sema-agent/core";
+import type { PermissionMode, A2aServerSpec, CompliancePosture, CrossSessionDialogExpiry, CrossSessionInboundSetting, FileHistoryRetentionPolicy, LockedKey, McpServerSpec, Model, ModelRoles, RetentionPolicy, ShellGateDoctrine, WriteProtectedEntry } from "@sema-agent/core";
 import type { ApprovalHmacKey, PrincipalJwtKey } from "./auth-keys.js";
 import type { ElicitationThrottle } from "./elicitation.js";
 import type { QuestionThrottle } from "./question.js";
@@ -54,6 +54,13 @@ export type RetentionMode = (typeof RETENTION_MODES)[number];
  */
 export declare const CONFIG_PROVIDER_WORDS: readonly ["local", "remote"];
 export type ConfigProviderWord = (typeof CONFIG_PROVIDER_WORDS)[number];
+/**
+ * S-866 ① —— `DB_BACKEND` 的闭集词表(**一处**:`config.ts` 的枚举解析、配置目录的 enum 行、caps `store.declared` / `store.backend`
+ * 三处共读;S-2 设计稿 v1 写的契约包 `STORE_ENGINES` 不存在,搬进契约包是 [ref] A-5 的另票)。`mysql` = 任一 MySQL 协议服务器
+ * (MySQL / TiDB / MariaDB);`local` = 本机文件店;`memory` = 纯内存(显式 opt-out,或多租裸 boot 的缺省)。
+ */
+export declare const DB_BACKEND_WORDS: readonly ["mysql", "pg", "local", "memory"];
+export type DbBackendWord = (typeof DB_BACKEND_WORDS)[number];
 /** [ref] §3/§4 —— sweep lane 的节律与灰度档(语义与三问见 {@link ServiceConfigFlat.retentionSweep})。 */
 export interface RetentionSweepConfig {
     /** `audit-only` = 照跑照判、只记 `audit_only` 行,**不调任何破坏性方法**;`enforce` = 真删。默认前者。 */
@@ -548,8 +555,9 @@ export interface ServiceConfigFlat {
      *  🔴 只活在内存 —— 绝不落日志/盘/任何序列化面。互斥语义(registry-core 契约):模型带 sealedApiKey
      *  ⇒ 它的 apiKeyEnv 引用不采(sealed 压过 env-NAME,解封失败也不回落——fail-loud 见 applyEffective)。
      *  Env path: empty;populated ONLY by applyEffective(重赋值;keyResolver 随 boot/refresh 重建)。 */
-    /** 值=解封明文 或 SealedKeyPoison 毒丸(解封失败标记;key-resolver 对其任务级 throw,恒不落 gateway key 兜底)。 */
-    modelApiKeys: Record<string, string | SealedKeyPoison>;
+    /** 值=解封明文 或托管来源的毒丸(`SealedCustodyPoison`,解封失败标记;key-resolver 对其任务级 throw,恒不落 gateway key 兜底)。
+     *  env 来源的毒丸(S-896 `env_missing`)不进这张表:key 链在取值时按 `modelApiKeyEnv` 现判。 */
+    modelApiKeys: Record<string, string | SealedCustodyPoison>;
     /**
      * S-704 —— **已发布但本部署不可用**的目录条目:catalog NAME → 拒因(`model-entry-refusal.ts` 的闭集码
      * `config.model_no_brain` / `config.model_entry_invalid` + 上游 id + 一句出路,不含任何值)。
@@ -842,9 +850,10 @@ export interface ServiceConfigFlat {
      * 今天「能用」。缺省翻面留到下一个 major,翻之前生态有一版时间适配。托管清单推荐开
      * (`docs/DEPLOY-PREREQS.md`)。
      * 运维读面(2026-09-22 主会话验收订正:车原写「`GET /v1/diagnostics/wiring` 的 `executionLane.requireExecutionLane`」,
-     * 而该端点今天**没有** `executionLane` 段、`src/` 零投影 —— 一句没兑现的承诺,按 [ref] 不信 JSDoc 只信实现行的纪律改写):
+     * 而该端点当时**没有** `executionLane` 段、`src/` 零投影 —— 一句没兑现的承诺,按 [ref] 不信 JSDoc 只信实现行的纪律改写):
      * boot 期 `exec_lane_selected` 一行(`config.ts` 装配尾,带 `lane` / `source`)+ `GET /v1/config/catalog` 的目录行。
      * 本键的**有效值今天没有运行期读面**;要出就随 S-602 的执行座三态在一处铸,不在这里单独长一位。
+     * (S-281 起诊断面**有了** `executionLane` 段,但它就是能力面那一只投影 `{provider, toolsOnThisHost, isolated?}`,**不带**本键。)
      */
     requireExecutionLane: boolean;
     remoteExec?: {
@@ -904,6 +913,7 @@ export interface ServiceConfigFlat {
         provider: "host";
         workspaceBase?: string;
         commandTimeoutMs?: number;
+        singleMachineDefault?: true;
     } | {
         provider: "device";
         /** `DEVICE_DELIVERY_TIMEOUT_MS`(默认 10s)= 等在途槽的上限;到期 = `device.busy`(§5.5)。 */
@@ -992,7 +1002,7 @@ export interface ServiceConfigFlat {
      *  MYSQL_* replacement named (see RETIRED_ENVS in config.ts). `mysql` reads MYSQL_* coords only.
      *  TiDB itself stays fully supported (any MySQL-protocol engine works — memory no longer needs a VECTOR
      *  column since [ref] moved it onto the file engine). Env: DB_BACKEND. */
-    dbBackend: "mysql" | "pg" | "local" | "memory";
+    dbBackend: DbBackendWord;
     /** clay 拍(2026-07-27):operator 是否显式设了 DB_BACKEND。main.ts 的降级判据——**默认推导**的
      *  local(裸 boot)在 mkdir/ensure 失败时降级 memory + warn + gauge(auto-DB 不可达先例);
      *  **显式** DB_BACKEND=local 失败仍 fail-loud(operator 要了 durable,静默丢=丢数据)。 */
@@ -1623,8 +1633,12 @@ export interface ServiceConfigFlat {
      *  Absent/unset = `undefined` = **zero behavior change** (this is a tighten-ONLY opt-in, never a
      *  default — a deployment must explicitly choose it); `"always"` = CC-strict parity (every Bash asks). Any
      *  other value (incl. `"off"`) is treated as unset — this knob has no "off" value to opt BACK OUT with once a
-     *  session's baseline already tightened elsewhere (tightenTaskSpec would reject that as a loosen anyway). */
-    manualModeShellGate?: "always" | "classify";
+     *  session's baseline already tightened elsewhere (tightenTaskSpec would reject that as a loosen anyway).
+     *  🔴 **S-877(core 7.34.0 [ref])起值域 = core `ShellGateDoctrine` 本尊(只剩 `"always"`)**:`"classify"` 退役 ——
+     *  引擎把形状档装在**每一种模式**的全权 shell 上(不再是一个运维选的档),它当年**额外**买到的那一半(bypass 请求下
+     *  shell 照问)没有忠实的继任值(引擎按模式放行 bypass 下的普通 ask)⇒ 配 `classify` 的部署 **boot 拒启**并指路
+     *  (`config.ts` 的解析臂),不静默当成 no-op(那是安全轴上的静默放松)。上面几段关于 `"classify"` 的语义是历史记录。 */
+    manualModeShellGate?: ShellGateDoctrine;
     /** [ref] ③(黑板 [ref]/[ref],core [ref] 合修)—— CC `permissions.disableAutoMode` 的本地镜像
      *  (`PERMISSIONS_DISABLE_AUTO_MODE`,布尔词表旋钮,opt-in 缺省 false):本部署对**每个** principal 把
      *  `RuntimeCaps.autoMode` 折成 `false` = org deny 位(core [ref] 三态谓词 `runtimeCaps?.autoMode !== false`
@@ -1906,6 +1920,13 @@ export interface ServiceConfigFlat {
      *    把批关掉(同腿后续的卡人批不动)、把兄弟连坐成 VOID(裸 `false` = 人拒)。
      */
     unattendedApprovalPolicy: UnattendedApprovalPolicy;
+    /**
+     * S-877 候裁 15 → B(`UNATTENDED_PERMISSION_MODE`)—— 本仓**自铸** spec、无调用方可表态、无审批席的腿(leader worker / leader 修复腿 /
+     * run-local)的 `TaskSpec.permissionMode`。闭集 = core `PERMISSION_MODES`,缺省 `bypassPermissions`(写门 / 形状层 = 7.105.0;写保护经 `createUnattendedWriteProtectionPolicy` 从问改拒;其余六类释放 = 宽化,候裁 18 D),坏值拒启。
+     * 规则 / 三问 / 写面 / 射程外**一处成文** = `src/unattended-permission-mode.ts` 模块头注;唯一读函数 `unattendedPermissionMode(config)`。
+     * 纯部署级:不读任何客户端表态、不参与托管姿态(这些腿不是请求)。
+     */
+    unattendedPermissionMode: PermissionMode;
     /** [ref]① (clay A 案 = workflow 权限全面 CC parity): workflow 子 agent 的默认权限基线与主 LLM 同权(base `{}`)。
      *  安全论证:主 LLM 与子 agent 同 root 同信任域,主 LLM 本就能写这棵树([ref] ask 门照管),单独钳子 agent 的
      *  安全增益≈0(只防绕路不防直路的门不是边界);实测产品代价=[ref]A 死锁。`WORKFLOW_AGENTS_READONLY=true` =
@@ -1959,10 +1980,10 @@ export interface ServiceConfigFlat {
      *  行名的是**文件**不是配置**目录**(`.sema`/`.claude` 底下还住着 agents/skills/hooks 与记忆库 —— 模型
      *  当作日常材料读写的东西);同族工具的 token **存储**(`.credentials.json`/`.codex/auth.json` …)归
      *  `credentials` 档,不归本档 ⇒ 为排查 agent 配置而关掉本档的部署,凭证行照样拦着。
-     *  🔴 **缺席 = 不铸 ⇒ OFF**(core 7.22.0 / [ref] 翻面;7.21.x 及以前是「除 shell-history 外全开」)。
-     *  未配置的部署从内建表里**什么都不拒**,而且 shell 读边界的 deny 判官席 present-iff 编译集有条目 ⇒
-     *  递归读降级臂也随之不接线(`grep -r` 一族零卡)。要老姿态**必须显式写下**
-     *  `credentials,browser,wallet,agent-config`。本仓**不复制上游缺省**:这里只记「不铸」,解析归引擎。
+     *  🔴 **缺席 = 不铸 ⇒ core 的出厂缺省 `READ_DENY_DEFAULT_TIERS` = `credentials` + 家目录锚定的 `agent-config`**
+     *  (core 7.34.0 R-2 起在岗;7.22.0–7.33.x 是空选择 = OFF,7.21.x 及以前是「除 shell-history 外全开」—— 7.106.0 合并复审 X10-L2
+     *  把这句陈旧的「缺席 = OFF」改真)。显式 `none` = 空姿态(什么都不拒);要更多档**显式写下**(例 `credentials,browser,wallet,agent-config`)。
+     *  本仓**不复制上游缺省**:这里只记「不铸」,解析归引擎。
      *  **仅 deployment 席**:TaskSpec 上没有同名键,
      *  任务/受治脚本无法据此放宽自己的部署(core 侧的设计,与本仓「部署级旋钮无条件施加」同向)。 */
     readDenyBuiltinTiers?: readonly string[];
@@ -2066,6 +2087,12 @@ export interface ServiceConfigFlat {
         dryRun: boolean;
         worker?: string;
     };
+    /** S-866 ③(E-2):租约**连接级**失败(中心 401 / 403 / 400、凭证文件不可读;不可达 / 5xx / 超时 / 坏体)时的姿态 ——
+     *  `true` ⇒ 计费入口答 503 `fleet.lease_unavailable`(`Retry-After` 5s);`false` ⇒ 照旧放行(AP 姿态,warn + 计数)。
+     *  `FLEET_LEASE_FAIL_CLOSED`(布尔词表,词表外拒启);**缺席随部署姿态派生**:`REQUIRE_PRINCIPAL=true` ⇒ `true`,单用户 ⇒ `false`;
+     *  显式值压过派生(部署级旋钮无条件,与 `READ_FACE` 缺省按 posture 派生 S-167 同形)。只在装了租约管理器的部署上有意义
+     *  (`lease:"absent"` 的部署不参与);生效值上 caps `centerWiring.failMode`。 */
+    fleetLeaseFailClosed: boolean;
     /** S-698(design-325 §2):中心凭证**续签提前量**(ms)—— `SEMA_REGISTRY_TOKEN_FILE` 指向人的登录会话信封
      *  (`kind:"user-session"`)时,访问令牌离到期 ≤ 本值即由引擎续签并原子改写同一文件(`center-credential-renewer.ts`)。
      *  缺省 5 min;`0` = 关续签、只读信封(壳负责续);其余必须是整数毫秒且落在 `CENTER_CREDENTIAL_RENEW_LEAD_MIN_MS`(一次续签请求的
@@ -2086,7 +2113,7 @@ export type ServiceStoreConfig = Pick<ServiceConfigFlat, "sessionBackend" | "ses
 export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "envModel" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelRefusals" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "atModelAllowlist" | "cascadeLadder" | "degrade">;
 /** 组:approval(审批 / HITL 门)。`directDoorActive` 无 env 解析腿(装配层三域合取的产物),但语义上
  *  就是本组的门状态,故进组;`parseApprovalDomain` 的返回类型相应是 `Omit<…, "directDoorActive">`。 */
-export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "durableApprovalSource" | "streamAskWindowMsSource" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "writeProtectedPaths" | "manualModeShellGate" | "permissionsDisableAutoMode" | "autoModeClassifierFallback" | "autoModeClassifierTimeoutMs" | "crossSessionInbound" | "crossSessionDialogExpiry">;
+export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "durableApprovalSource" | "streamAskWindowMsSource" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "unattendedPermissionMode" | "mcpElicitation" | "sensitiveWritePatterns" | "writeProtectedPaths" | "manualModeShellGate" | "permissionsDisableAutoMode" | "autoModeClassifierFallback" | "autoModeClassifierTimeoutMs" | "crossSessionInbound" | "crossSessionDialogExpiry">;
 /** 组:memory(记忆面 + TOC 同步腿)。 */
 export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled" | "memoryEngineDir" | "memoryEngineRemoteLaneAllowed" | "memoryEngineBackend" | "memoryScope" | "memoryPersistenceCapable" | "memorySync" | "memoryEmbedder" | "memoryOrgAdmissionMode" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "memoryConsolidationDriver" | "memoryOrgDirectoryJson" | "memoryOrgGrantTtlMs" | "memoryOrgUnavailableBackoffMs" | "projectMemoryEnabled" | "syncImportLeaseStaleSec">;
 /** 组:auth(鉴权 / 身份 / 治理棒)。`commandPolicy` 只有 sema-registry 腿(无 env 标量形),故 env 解析
@@ -2103,7 +2130,7 @@ export type ServiceLimitsHttpConfig = Pick<ServiceConfigFlat, "port" | "attachme
 /** 组:observability(可观测)。 */
 export type ServiceObservabilityConfig = Pick<ServiceConfigFlat, "metricsToken" | "traceToken" | "toolTrace" | "traceThinking" | "logLevel" | "otel">;
 /** 组:integrations(外部集成)。`mcpServers` / `a2aPeers` 由 sema-registry 适配器填(无 env 腿),归本组。 */
-export type ServiceIntegrationsConfig = Pick<ServiceConfigFlat, "pluginsAllowHosts" | "mcpServers" | "a2aPeers" | "a2aServe" | "configBootFetchBudgetMs" | "gitApiBaseUrl" | "gitApiToken" | "gitApiKind" | "defaultScenario" | "skillsDir" | "centerCredentialRenewLeadMs" | "configCenter" | "configProvider" | "configLocalDir">;
+export type ServiceIntegrationsConfig = Pick<ServiceConfigFlat, "pluginsAllowHosts" | "mcpServers" | "a2aPeers" | "a2aServe" | "configBootFetchBudgetMs" | "gitApiBaseUrl" | "gitApiToken" | "gitApiKind" | "defaultScenario" | "skillsDir" | "centerCredentialRenewLeadMs" | "configCenter" | "fleetLeaseFailClosed" | "configProvider" | "configLocalDir">;
 /** 九个组槽。每组恒在场(`loadConfig` / `attachConfigGroups` 装好才交出配置),故不可选——新代码写
  *  `config.modelPlane.model` 不需要 `?.`(可选组会把 `Model` 污染成 `Model | undefined`)。 */
 export interface ServiceConfigGroups {

package/dist/config-types.js

@@ -2,6 +2,7 @@ import { DRAIN_GRACE_FLOOR_MS } from "@sema-agent/settings-schema/fleet";
 export const TASK_WRITE_FACE_ESCALATIONS = ["allow", "refuse"];
 export const RETENTION_MODES = ["audit-only", "enforce"];
 export const CONFIG_PROVIDER_WORDS = ["local", "remote"];
+export const DB_BACKEND_WORDS = ["mysql", "pg", "local", "memory"];
 export const MEMORY_CONSOLIDATION_MIN_INTERVAL_SEC = 300;
 export const MAX_TIMER_DELAY_MS = 2_147_483_647;
 export const AUTO_MODE_CLASSIFIER_TIMEOUT_BOUNDS = { minMs: 1_000, maxMs: MAX_TIMER_DELAY_MS };