@sema-agent/server 7.114.0 → 7.116.0

package/dist/boot/shutdown.js

@@ -2,11 +2,18 @@ import { Runner } from "@sema-agent/core";
 import { writeCrashLast, clearCrashLast, readCrashLast } from "./crash-last.js";
 import { createSighupIdleHandler } from "../sighup-idle.js";
 import { createParentWatch } from "../parent-watch.js";
+import { setTimeout as delay } from "node:timers/promises";
+import { HOST_BG_KILL_GRACE_MS } from "../plugins/remote-env-host.js";
 import { installProcessExitBoundary } from "./exit-boundary.js";
 import { createEngineLeaseTracker } from "./engine-lease.js";
 import { writeExitLast, readExitLast, clearExitLast } from "./exit-last.js";
 import { isScriptRealmRejection, describeRejectionReason } from "../orchestration/hardened-vm-runner.js";
 const HARD_STOP_GRACE_MS = 10_000;
+export function backgroundGraceRemainingMs(a) {
+    if (a.softStopped <= 0)
+        return 0;
+    return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
+}
 export function installShutdownHandlers(ctx) {
     const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, configCenter, version, deviceHub, toolApproval, parkCommits, } = ctx;
     const dataRoot = config.localDataRoot;
@@ -102,7 +109,10 @@ export function installShutdownHandlers(ctx) {
         subRunner.sessions.dispose();
         void lspManager?.dispose?.();
         void workflowNotifyJournal?.close?.();
-        exitBoundary.reapChildProcessesEarly();
+        const backgroundSoftStopped = exitBoundary.reapChildProcessesEarly();
+        const softStoppedAt = Date.now();
+        const backgroundGraceMs = backgroundGraceRemainingMs({ softStopped: backgroundSoftStopped, softStoppedAt, now: softStoppedAt, graceMs: HOST_BG_KILL_GRACE_MS, deadlineMs: graceDeadlineMs });
+        const backgroundGrace = backgroundGraceMs > 0 ? delay(backgroundGraceMs) : Promise.resolve();
         const drained = approvalDrain
             .then(() => parkCommits?.quiesce(graceDeadlineMs))
             .then((q) => {
@@ -120,6 +130,7 @@ export function installShutdownHandlers(ctx) {
             void Promise.all([retentionTeardown, ledgerStopped])
                 .then(() => (backend ? backend.close() : Promise.resolve()))
                 .then(() => routingStopped)
+                .finally(() => backgroundGrace)
                 .finally(() => process.exit(0));
         });
         const finalExit = setTimeout(() => { logger.warn("hard_shutdown_final_deadline", { afterMs: 15_000 }); process.exit(0); }, 15_000);

package/dist/boot/stage-07-capability-layer.js

@@ -16,6 +16,7 @@ import { explicitOperatorOk } from "../http/server.js";
 import { selfOrchestrationDenial } from "../task-workflow.js";
 import { centerEntitlementSourceWired } from "../runtime-caps-resolver.js";
 import { reclaimOrphansAtBoot } from "../boot-reclaim.js";
+import { runBootCrashConvergence } from "../approval-crash-convergence.js";
 import { createUserInputLedgerAtBoot, writerGoneEvidenceFor } from "../user-input-ledger.js";
 import { createParkedReviveInheritedGate } from "./parked-revive-gate.js";
 import { createParkedReviveSurface } from "../parked-revive-surface.js";
@@ -23,8 +24,9 @@ import { createWebFetchSummarizeLane } from "./webfetch-summarize-lane.js";
 import { createRunnerDepsOnAsk } from "./runner-deps.js";
 import { bindRateLimiter, bindRunStore } from "./late-binds.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
+import * as facts from "../capability-facts.js";
 export async function runStage07(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -51,6 +53,7 @@ export async function runStage07(ctx) {
     if (gateRefusal !== undefined)
         throw new Error(gateRefusal);
     await reclaimOrphansAtBoot(runStore, checkpointStore, logger);
+    await runBootCrashConvergence({ backend, runStore, liveAudit: approvalAskAudit, localDataRoot: config.localDataRoot, logger });
     const userInputLedgerStore = backend && runStore ? backend.userInputLedger() : undefined;
     const userInputLedger = backend && runStore && userInputLedgerStore
         ? await (async () => {
@@ -79,14 +82,22 @@ export async function runStage07(ctx) {
     if (durableEnabled)
         logger.info("durable_approval_enabled", { toolApprovalGate: config.approvalRequire.length });
     if (config.a2aServe) {
-        logger.info("a2a_serve_enabled", {
-            card: "/.well-known/agent-card.json",
-            rpc: "/v1/a2a",
-            advertisedUrl: buildDisplaySafeUrl(config.a2aServe.url),
-            skills: config.a2aServe.skills.length,
-            blockingWaitMs: config.a2aServe.blockingWaitMs,
-            tasksUsable: runStore !== undefined,
-        });
+        const peer = facts.a2aServe({ config, runStore });
+        if (peer.available) {
+            logger.info("a2a_serve_enabled", {
+                card: "/.well-known/agent-card.json",
+                rpc: "/v1/a2a",
+                advertisedUrl: buildDisplaySafeUrl(config.a2aServe.url),
+                skills: config.a2aServe.skills.length,
+                blockingWaitMs: config.a2aServe.blockingWaitMs,
+            });
+        }
+        else {
+            logger.warn("a2a_serve_not_served", {
+                reason: peer.why,
+                detail: "A2A_SERVE_ENABLED is on but this worker has no durable run store, so the agent card and POST /v1/a2a answer 404 (message/send and tasks/get both need it) — set DB_BACKEND=mysql|pg|local, or turn A2A_SERVE_ENABLED off",
+            });
+        }
     }
     for (const w of buildNoResponderBootWarns({
         lane: executionLaneOf(config.remoteExec?.provider),
@@ -148,12 +159,7 @@ export async function runStage07(ctx) {
         ensureChildSessionDurable: ensureChildSessionDurable ? ensureChildSessionDurable : undefined,
         taskListStoreFor: taskListLane.storeFor,
         brandIdentity: config.configProvider === "local",
-        subagentExtraTools: sendUserFileToolSpec
-            ? subagentSendUserFileExtraTools({
-                spec: sendUserFileToolSpec,
-                approvalGate: () => ({ deny: config.approvalDeny, require: config.approvalRequire, neverAuto: config.approvalNeverAuto }),
-            })
-            : undefined,
+        subagentExtraTools: sendUserFileToolSpec ? subagentSendUserFileExtraTools({ spec: sendUserFileToolSpec }) : undefined,
     };
     const scenarios = buildScenarios(scenarioDeps);
     const builtinDefaultScenario = scenarios.default;

package/dist/boot/stores.js

@@ -1,5 +1,5 @@
 import { join } from "node:path";
-import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, FileUsageWindowStore, InMemoryUsageWindowStore, mailboxCrossProcessMountVerdict } from "@sema-agent/core";
+import { FileBackgroundAgentStore, FileMailboxStore, FileRosterStore, InMemoryUsageWindowStore, mailboxCrossProcessMountVerdict } from "@sema-agent/core";
 import { createCorruptReadFailOpenSeat } from "../observability/corrupt-read-seat.js";
 import { createMemorySyncRunner, createMemorySyncTransport } from "../memory-sync-client.js";
 import { memoryEmbedderFor } from "../plugins/memory-embedder.js";
@@ -333,13 +333,13 @@ export async function openStores(ctx) {
             await ensureTiDBUsageWindowSchema(mysqlPool);
             usageWindowStore = new TiDBUsageWindowStore(mysqlPool);
         }
-        else if (backend?.kind === "local") {
-            usageWindowStore = new FileUsageWindowStore(config.localDataRoot ?? localRoot);
+        else if (backend?.fileUsageWindowStore !== undefined) {
+            usageWindowStore = backend.fileUsageWindowStore();
         }
         else {
             usageWindowStore = new InMemoryUsageWindowStore();
         }
-        logger.info("usage_window_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : backend?.kind === "local" ? "file" : "memory", windows: config.usageWindows.length });
+        logger.info("usage_window_store_enabled", { backend: pgPool ? "pg" : mysqlPool ? "tidb" : backend?.fileUsageWindowStore !== undefined ? "file" : "memory", windows: config.usageWindows.length });
     }
     const memoryExportBackend = config.memoryEngineBackend !== "file" ? memoryEngine?.backend : undefined;
     const memoryLane = memoryEngineRemoteLanePosture(config);

package/dist/capabilities/composite-members.d.ts

@@ -46,6 +46,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly webSearch: readonly ["backend"];
     readonly background: readonly ["listFace", "exitFaces"];
     readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks"];
+    readonly settings: readonly ["permissions"];
     readonly permissionModeAuto: readonly ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"];
     readonly writeProtection: readonly ["armed", "rows", "replaced"];
     readonly executionLane: readonly ["provider", "toolsOnThisHost", "isolated"];

package/dist/capabilities/composite-members.js

@@ -7,6 +7,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     webSearch: ["backend"],
     background: ["listFace", "exitFaces"],
     taskSettings: ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks"],
+    settings: ["permissions"],
     permissionModeAuto: ["accepted", "classifierSeat", "entitlementSource", "armed", "reason", "model"],
     writeProtection: ["armed", "rows", "replaced"],
     executionLane: ["provider", "toolsOnThisHost", "isolated"],

package/dist/capabilities/hands-lane.d.ts

@@ -33,29 +33,6 @@ export interface HandsRunnerPair {
 }
 /** 按场景表态取 Runner。**穷举 switch**:`ScenarioHands` 加词而此处不改 = 编译错(无 default 臂)。 */
 export declare function pickHandsRunner(hands: ScenarioHands, pair: HandsRunnerPair): Runner;
-/**
- * core 手带 band 的工具名**全集** —— 「挂 executionEnvFactory 才出现、不挂就消失」的那一批。
- *
- * 两段来源,都不是拍脑袋:
- *  · `handBandEffects()`(core 7.8.0 B1 起的导出面;此前是手抄表常量 `HAND_TOOL_EFFECTS`)—— band 的
- *    effect 表,由**静态工具目录**按 `mountedBy.includes("hands")` 派生。名册单源之后这张表不再是一张
- *    手抄名表,加/退工具由目录一处说了算。
- *  · 下方锚定补集 —— `createHandsToolkit` / 手带块还会铸但**不在** effect 表里的 5 名(实测差集,见
- *    test/scenario-hands-lane.test.ts 的对表格:它用真 Runner 跑「有手 roster ∖ 无手 roster」,与本常量逐名对账,
- *    core 加/改 band 成员时红,防漂移)。
- *
- * ⚠️ 本全集是**观测口径**(用于防漂移对账),**不是** deny 名单 —— deny 用下面的
- * {@link HANDS_EXCLUSIVE_TOOL_NAMES},理由见那里。
- *
- * 🚨 [ref] P0(2026-08-09):派生时必须过滤 core 的 `RETIRED_TOOL_NAMES` —— core 5.21.0 的
- * `HAND_TOOL_EFFECTS` 里残留已退役的 `MultiEdit`,而 core `prepare-task` 的策略名审计见退役名
- * **无条件 throw**(`config.legacy_tool_name`);不过滤,deny 名单一进 `spec.toolPolicy`,
- * `hands: none` 三场景(scan/code-review/team)在**所有部署**上零 turn 全灭。core 5.21.1 已删
- * 那条死条目([ref]),这道 filter 是结构性防御:将来 core 再退役任何 band 名都不会重演
- * (test/scenario-hands-lane.test.ts 格7/格8 双钉:真 Runner 过审计 + 零交集门)。
- * filter 打在**整表**(effect 表 + 锚定补集)之后 —— caret floor 下装置会解析到更新的 core,
- * 补集名哪天被退役,只滤前半就是同一次故障换个名字(codex 复审 finding,2026-08-09)。
- */
 export declare const HANDS_BAND_TOOL_NAMES: readonly string[];
 /**
  * band 里**只有手才可能出现**的那批(= deny 名单)。

package/dist/capabilities/hands-lane.js

@@ -1,4 +1,4 @@
-import { handBandEffects, RETIRED_TOOL_NAMES, combinePolicies, createAllowDenyPolicy } from "@sema-agent/core";
+import { handBandEffects, judgeRuleToolName, combinePolicies, createAllowDenyPolicy } from "@sema-agent/core";
 export function withoutExecutionEnv(deps) {
     const { executionEnvFactory: _handsDropped, ...rest } = deps;
     return rest;
@@ -11,6 +11,7 @@ export function pickHandsRunner(hands, pair) {
             return pair.handsless;
     }
 }
+const NO_DECLARED_TOOL_NAMES = new Set();
 export const HANDS_BAND_TOOL_NAMES = Object.freeze([
     ...handBandEffects().keys(),
     "SendMessage",
@@ -19,7 +20,7 @@ export const HANDS_BAND_TOOL_NAMES = Object.freeze([
     "EnterWorktree",
     "ExitWorktree",
     "ListAgents",
-].filter((n, i, all) => !RETIRED_TOOL_NAMES.has(n) && all.indexOf(n) === i));
+].filter((n, i, all) => judgeRuleToolName(n, NO_DECLARED_TOOL_NAMES).kind === "current" && all.indexOf(n) === i));
 export const HANDS_DUAL_USE_TOOL_NAMES = Object.freeze(["TaskOutput", "TaskStop", "SendMessage", "AgentTranscript", "ListAgents"]);
 export const HANDS_EXCLUSIVE_TOOL_NAMES = Object.freeze(HANDS_BAND_TOOL_NAMES.filter((n) => !HANDS_DUAL_USE_TOOL_NAMES.includes(n)));
 export function handsDenyPolicy() {

package/dist/capabilities/send-user-file-tool.d.ts

@@ -44,32 +44,20 @@ export declare function sendUserFileTool(deps: {
 }): ToolSpec;
 export declare const SEND_USER_FILE_TOOL_NAME = "SendUserFile";
 /**
- * Build the `SubagentToolOptions.extraTools` factory that injects SendUserFile into delegated-child rosters —
- * WITH the two gates the bare `() => [spec]` wiring lacked:
+ * Build the `SubagentToolOptions.extraTools` factory that injects SendUserFile into delegated-child rosters.
  *
- * F1 (HIGH, codex): the subRunner carries NO tool policy and core's child spec does not inherit the parent's
- * `toolPolicy`, so an extraTools-injected SendUserFile BYPASSED the deployment approval gate (evidence: with
- * `APPROVAL_DENY=SendUserFile` the top-level call is denied but a delegated child could still call it). Until
- * core lands a child-policy propagation seam, the CONSERVATIVE server-side stopgap is a deployment-policy
- * PRE-CHECK: if the deployment's approval face gates SendUserFile at all (deny OR ask — approvalDeny /
- * approvalRequire / approvalNeverAuto, matched in canonical space exactly like src/approval.ts), the factory
- * injects NOTHING. deny obviously must not reach children; ask-gated is ALSO withheld because the child leg has
- * no policy to route the ask (injecting would silently auto-allow — the exact bypass). The gate is read LIVE per
- * spawn (a getter, not a boot snapshot) so center/env hot-applied governance is honored, mirroring how the
- * per-request approval baseline reads live config. A deployment with no gate intent is unchanged.
+ * F2 (MED, codex; a product judgment of this server, kept): read-only builtin agents (Explore/Plan) must NOT get
+ * SendUserFile — a read-only agent that can read sensitive files AND mint public links off them breaks the read-only
+ * posture (their denyTools sets predate this tool, so core's resolveToolSubset would let it through). `ctx.agentType`
+ * carries the spawned definition's name (core subagent.js); membership in core's builtin catalog ⇒ inject nothing.
  *
- * F2 (MED, codex): read-only builtin agents (Explore/Plan) must NOT get SendUserFile — a read-only agent that
- * can read sensitive files AND mint public links off them breaks the read-only posture (their denyTools sets
- * predate this tool, so core's resolveToolSubset would let it through). `ctx.agentType` carries the spawned
- * definition's name (core subagent.js); membership in core's builtin catalog ⇒ inject nothing for that spawn.
+ * 🔴 S-1058(7.116.0):修前这里还有一道 **F1 部署策略预判** —— 部署审批面(`APPROVAL_DENY` / `REQUIRE` / `NEVER_AUTO`)点名 SendUserFile 就一只都
+ * 不注入,前提是「subRunner 不带策略、core 的子代不继承父的 toolPolicy」(core 1.287 时的事实)。core 自 7.40.1 起顶层 run 解析后的调用方策略
+ * (`spec.toolPolicy ?? deps.toolPolicy`)与它冻结的审批席经继承链(`InheritedGate.parentConstraints`)判子代的注入工具:deny ⇒ 零执行;ask ⇒ 顶层
+ * 审批席被问一次;无审批席 ⇒ 拒(core 7.41.0 钉)。本仓在真实装配上亲跑十格(spec / deps 两槽 × deny / ask 允 / ask 拒 / 无审批席 / 耐久车道无活席,
+ * `test/subagent-extra-tools-ancestor-policy-s1058.test.ts`)全部成立 ⇒ 预判整段删:部署的判决在继承链上由策略本身做,本仓不再复刻一份「按名单猜」。
  */
 export declare function subagentSendUserFileExtraTools(deps: {
     spec: ToolSpec;
-    /** LIVE deployment approval face (config.approvalDeny/approvalRequire/approvalNeverAuto) — evaluated per spawn. */
-    approvalGate: () => {
-        deny?: string[];
-        require?: string[];
-        neverAuto?: string[];
-    };
 }): (ctx: SubagentSpawnContext) => ToolSpec[];
 //# sourceMappingURL=send-user-file-tool.d.ts.map

package/dist/capabilities/send-user-file-tool.js

@@ -94,13 +94,6 @@ export function sendUserFileTool(deps) {
 export const SEND_USER_FILE_TOOL_NAME = "SendUserFile";
 const READONLY_BUILTIN_AGENT_TYPES = new Set(builtinAgentDefinitions().map((d) => d.name));
 export function subagentSendUserFileExtraTools(deps) {
-    const canonical = SEND_USER_FILE_TOOL_NAME;
-    return (ctx) => {
-        if (ctx.agentType !== undefined && READONLY_BUILTIN_AGENT_TYPES.has(ctx.agentType))
-            return [];
-        const gate = deps.approvalGate();
-        const gated = [...(gate.deny ?? []), ...(gate.require ?? []), ...(gate.neverAuto ?? [])].some((t) => t === canonical);
-        return gated ? [] : [deps.spec];
-    };
+    return (ctx) => (ctx.agentType !== undefined && READONLY_BUILTIN_AGENT_TYPES.has(ctx.agentType) ? [] : [deps.spec]);
 }
 //# sourceMappingURL=send-user-file-tool.js.map

package/dist/capability-facts.d.ts

@@ -0,0 +1,296 @@
+/**
+ * 能力事实 —— 「这台部署上,这一面能不能用」的**唯一**判据家。
+ *
+ * 一条规则,三个读者:
+ *  · 每个事实 = 这里**一只**纯函数。入 = 服务 deps 的只读切片(签名里的 `Pick` 就是它读哪几格的完整清单);
+ *    出 = `{ available: true }` 或 `{ available: false; why }`。零 I/O、零 await、零副作用。
+ *  · `GET /v1/capabilities` 的位只**投影**事实(布尔位 = `.available`;对象位写明投影规则)。
+ *  · 回答「这台部署上不可用」的每一道门(HTTP 501;a2a 两条路由的 404)调**同一只**事实;拒句可以按端点各写,
+ *    谓词不再写第二遍。
+ * 于是「位说有而端点恒拒」在结构上不可能:两边读的是同一个值。
+ *
+ * `why` 是一张闭集表({@link CAPABILITY_FACT_WHY}):每只事实的 why 类型被约束在这张表的键里(用了表外词 = 编译红),
+ * 多 why 的事实在门里按 `switch (f.why)` 收口(给事实添一个 why 而门没跟 = 编译红)。
+ *
+ * **见证**:携设施的事实在 available 臂上另带被判在场的那只设施引用(结构上仍是 `{ available: true }` 的子型)。
+ * 门在拒臂之后从见证取店,不再读 `deps.X` 第二遍 —— 否则只剩两条路:非空断言,或者把谓词再写一遍。
+ * 能力位只读 `.available`,见证不上 wire。
+ *
+ * 复合事实(一个位管一族、族内要几只事实都在)也住这里:能力面只读一只事实的 `.available`,不写 `a && b`。
+ */
+import type { FlatServiceDeps } from "./http/server.js";
+import type { ServiceConfig } from "./config.js";
+import type { OwnerAwareSessionStore } from "./security.js";
+import type { ServiceFileHistoryStore } from "./plugins/store-backend.js";
+import { resolveStreamApprovalGate } from "./tool-approval.js";
+/** why 闭集:词 → 给运维看的一句义(诊断 / 测试读它;wire 上的拒句由各门自写)。 */
+export declare const CAPABILITY_FACT_WHY: {
+    readonly run_store_absent: "no durable run store is wired (DB_BACKEND=mysql|pg|local)";
+    readonly subagent_registry_absent: "the sub-agent steer registry is not wired";
+    readonly subagent_output_face_absent: "the background sub-agent output face is not wired";
+    readonly task_handle_faces_absent: "the background task-handle output/stop faces are not wired";
+    readonly session_owner_face_absent: "the session store has no ownership face (sessionStorage.ownerOf)";
+    readonly checkpoint_store_absent: "no durable checkpoint store is wired (DURABLE_APPROVAL)";
+    readonly session_audit_absent: "no session audit view is wired (needs a durable session store)";
+    readonly session_watch_absent: "the session watch registry is not wired";
+    readonly session_leaf_face_absent: "the session store has no leaf-read face (sessionStorage.getLeafId)";
+    readonly session_lister_absent: "no session enumerator is wired (session store or run store listSessions)";
+    readonly session_fork_face_absent: "the session store has no fork face";
+    readonly session_purge_absent: "no session purge coordinator is wired";
+    readonly session_policy_store_absent: "no session policy store is wired";
+    readonly store_backend_absent: "no store backend is wired (DB_BACKEND=memory, multi-tenant bare boot, or half-configured SQL)";
+    readonly file_history_store_absent: "no file-history store is wired";
+    readonly session_export_absent: "the session store has no entry export faces (exportEntries / exportEntriesStream)";
+    readonly session_import_staging_absent: "the session store has no staged-import face (beginImportStaging)";
+    readonly policy_purge_absent: "the session policy store has no deleteBySession purge verb";
+    readonly sync_blob_faces_absent: "the file-history store has no blob transfer faces (SQL backends only)";
+    readonly device_hub_absent: "the device lane hub is not wired";
+    readonly device_store_absent: "the device store is not wired";
+    readonly device_enrollment_absent: "device enrollment is not wired";
+    readonly fleet_bus_absent: "the fleet event bus is not wired";
+    readonly workspace_retired: "the workspace browse face was retired with the whole-tree snapshot epoch";
+    readonly leader_endpoint_absent: "the leader endpoint is not wired";
+    readonly image_index_absent: "no image index is wired (SQL backends only)";
+    readonly shared_memory_store_absent: "no shared memory store provider is wired";
+    readonly org_memory_directory_absent: "no org memory directory (membership fold) is wired";
+    readonly operator_principals_empty: "OPERATOR_PRINCIPALS is empty, so no caller can ever be an operator";
+    readonly adoption_store_absent: "no adoption log store is wired (SQL backends only)";
+    readonly memory_bundle_faces_absent: "the memory engine's governance bundle faces are not wired";
+    readonly memory_compliance_faces_absent: "the memory engine's provenance/erasure faces are not wired";
+    readonly memory_origin_faces_absent: "the memory engine's origin marking faces are not wired";
+    readonly consolidation_valve_closed: "the memory consolidation valve is closed (MEMORY_CONSOLIDATION_DRIVER)";
+    readonly memory_optout_grant_absent: "no memory-capture opt-out grant store is wired (SQL backends only)";
+    readonly outcome_ledger_unqueryable: "the outcome sink has no query face (File sink)";
+    readonly config_catalog_disabled: "the config catalog is switched off (CONFIG_CATALOG_ENABLED=false)";
+    readonly rule_store_absent: "no permission-rule store is wired";
+    readonly caller_principal_absent: "this request carries no verified principal";
+    readonly caller_mcp_injection_refused: "this deployment does not honor caller-supplied MCP servers";
+    readonly a2a_serve_off: "A2A_SERVE_ENABLED is off";
+    readonly elicitation_disabled: "inbound MCP elicitation is off (MCP_ELICITATION_ENABLED)";
+    readonly ask_question_disabled: "AskUserQuestion live HITL is off (ASK_QUESTION_ENABLED)";
+    readonly tool_approval_disabled: "live tool approval is off (TOOL_APPROVAL_ENABLED)";
+    readonly stream_approval_disabled: "the stream approval protocol is off (STREAM_APPROVAL_ENABLED)";
+    readonly background_agent_store_absent: "no background-agent store is wired";
+    readonly sendfile_ledger_absent: "no SendUserFile ledger is wired";
+    readonly workflow_engine_absent: "the workflow engine is not available on this worker";
+    readonly entitlement_resolver_absent: "self-orchestration is on for a multi-tenant worker with no per-principal entitlement source";
+    readonly workflow_run_store_absent: "no workflow run store is wired (SELF_ORCHESTRATION_ENABLED)";
+    readonly workflow_journal_store_absent: "no workflow journal store is wired (needs a store backend)";
+    readonly scheduler_disabled: "the self-wake scheduler is off (SCHEDULER_ENABLED)";
+    readonly multi_tenant_deployment: "this is a multi-tenant deployment (REQUIRE_PRINCIPAL=true)";
+    readonly not_host_lane: "the execution lane is not the single-user host lane (REMOTE_EXEC=host)";
+};
+export type CapabilityFactWhy = keyof typeof CAPABILITY_FACT_WHY;
+/** 不可用臂。 */
+export interface FactUnavailable<Why extends CapabilityFactWhy> {
+    readonly available: false;
+    readonly why: Why;
+}
+/** 一只事实的出形(`W` = available 臂上的见证;无见证的事实取默认空对象 = 只有 `available: true`)。 */
+export type Fact<Why extends CapabilityFactWhy, W extends object = {}> = ({
+    readonly available: true;
+} & Readonly<W>) | FactUnavailable<Why>;
+type Deps = FlatServiceDeps;
+type Store<K extends keyof Deps> = NonNullable<Deps[K]>;
+type WithMethods<T, K extends keyof T> = T & {
+    [P in K]-?: NonNullable<T[P]>;
+};
+/** 持久 run 账面在场 —— `/v1/runs/*` 族、trace / 用量统计、assistant 的 preempt / resume / plan-review、
+ *  会话 detach、设备换绑都站在这一只事实上。 */
+export declare function durableRuns(d: Pick<Deps, "runStore">): Fact<"run_store_absent", {
+    runStore: Store<"runStore">;
+}>;
+export declare function subagentSteer(d: Pick<Deps, "runStore" | "subagentSteerRegistry">): Fact<"run_store_absent" | "subagent_registry_absent", {
+    runStore: Store<"runStore">;
+    registry: Store<"subagentSteerRegistry">;
+}>;
+export declare function subagentOutput(d: Pick<Deps, "runStore" | "subagentTaskOutput">): Fact<"run_store_absent" | "subagent_output_face_absent", {
+    runStore: Store<"runStore">;
+    output: Store<"subagentTaskOutput">;
+}>;
+export declare function taskHandles(d: Pick<Deps, "runStore" | "taskHandleOutput" | "taskHandleStop">): Fact<"run_store_absent" | "task_handle_faces_absent", {
+    runStore: Store<"runStore">;
+    output: Store<"taskHandleOutput">;
+    stop: Store<"taskHandleStop">;
+}>;
+type OwnedSessionStore = WithMethods<OwnerAwareSessionStore, "ownerOf">;
+/** 会话属主面在场(入站 owner 门的地基;缺它,带会话的门一律 fail-closed)。 */
+export declare function sessionOwnership(d: Pick<Deps, "sessionStorage">): Fact<"session_owner_face_absent", {
+    sessionStorage: OwnedSessionStore;
+}>;
+export declare function mcpReconnect(d: Pick<Deps, "runStore" | "sessionStorage">): Fact<"run_store_absent" | "session_owner_face_absent", {
+    runStore: Store<"runStore">;
+    sessionStorage: OwnedSessionStore;
+}>;
+export declare function sessionAuditView(d: Pick<Deps, "sessionAudit">): Fact<"session_audit_absent", {
+    sessionAudit: Store<"sessionAudit">;
+}>;
+export declare function sessionEventStream(d: Pick<Deps, "sessionWatch" | "sessionStorage">): Fact<"session_watch_absent" | "session_leaf_face_absent" | "session_owner_face_absent", {
+    watch: Store<"sessionWatch">;
+    sessionStorage: WithMethods<OwnerAwareSessionStore, "ownerOf" | "getLeafId">;
+}>;
+type SessionLister = NonNullable<OwnerAwareSessionStore["listSessions"]>;
+/** 会话枚举面:session 店的 `listSessions`,否则老形 run 店聚合。见证 = 已绑好宿主的那一只。 */
+export declare function sessionList(d: Pick<Deps, "sessionStorage" | "runStore">): Fact<"session_lister_absent", {
+    lister: SessionLister;
+}>;
+export declare function sessionFork(d: Pick<Deps, "sessionStorage">): Fact<"session_fork_face_absent" | "session_owner_face_absent", {
+    sessionStorage: WithMethods<OwnerAwareSessionStore, "ownerOf" | "fork">;
+}>;
+export declare function sessionDelete(d: Pick<Deps, "purgeSession" | "sessionStorage">): Fact<"session_purge_absent" | "session_owner_face_absent", {
+    purge: Store<"purgeSession">;
+    sessionStorage: OwnedSessionStore;
+}>;
+export declare function sessionPolicy(d: Pick<Deps, "sessionPolicyStore" | "sessionStorage">): Fact<"session_policy_store_absent" | "session_owner_face_absent", {
+    policyStore: Store<"sessionPolicyStore">;
+    sessionStorage: OwnedSessionStore;
+}>;
+type SyncSessionStore = WithMethods<OwnerAwareSessionStore, "ownerOf" | "exportEntries" | "exportEntriesStream" | "beginImportStaging">;
+type SessionSyncWhy = "store_backend_absent" | "session_owner_face_absent" | "file_history_store_absent" | "session_export_absent" | "session_import_staging_absent" | "policy_purge_absent";
+/** 会话对等同步的**对话半族**(manifest / entries / plan / import 两相):后端 ∧ 属主面 ∧ 文件历史店 ∧ 导出两面 ∧
+ *  staged 导入面 ∧ policy 店能清(overwrite-dst 的 commit 要擦目的端旧 policy 行)。文件历史的 blob 搬运是另一只事实。 */
+export declare function sessionSync(d: Pick<Deps, "backend" | "sessionStorage" | "fileHistoryStore" | "sessionPolicyStore">): Fact<SessionSyncWhy, {
+    backend: Store<"backend">;
+    sessionStorage: SyncSessionStore;
+    historyStore: ServiceFileHistoryStore;
+}>;
+/** blob 两面齐备的文件历史店(marker 门,不做名字探测:local 的引擎文件店带一只同名私有助手)。 */
+export type SyncBlobHistoryStore = ServiceFileHistoryStore & {
+    readonly syncBlobFaces: true;
+} & {
+    [P in "putBlob" | "getBlob"]-?: NonNullable<ServiceFileHistoryStore[P]>;
+};
+/** 会话同步的**文件历史半族**:对话半族 ∧ 文件历史店有 blob 搬运面(只有 SQL 两只店有)。 */
+export declare function sessionSyncFileHistory(d: Pick<Deps, "backend" | "sessionStorage" | "fileHistoryStore" | "sessionPolicyStore">): Fact<SessionSyncWhy | "sync_blob_faces_absent", {
+    historyStore: SyncBlobHistoryStore;
+}>;
+/** 持久审批底座(checkpoint 店)在场 —— `/v1/approvals/*` 与 `/v1/assistant/*` 整条车道、会话 wake 都站在它上面。 */
+export declare function checkpointPark(d: Pick<Deps, "checkpointStore">): Fact<"checkpoint_store_absent", {
+    checkpointStore: Store<"checkpointStore">;
+}>;
+export declare function elicitation(d: Pick<Deps, "elicitation">): Fact<"elicitation_disabled", {
+    coordinator: Store<"elicitation">;
+}>;
+export declare function askUserQuestion(d: Pick<Deps, "question">): Fact<"ask_question_disabled", {
+    coordinator: Store<"question">;
+}>;
+export declare function toolApproval(d: Pick<Deps, "toolApproval">): Fact<"tool_approval_disabled", {
+    coordinator: Store<"toolApproval">;
+}>;
+type StreamApprovalWhy = "tool_approval_disabled" | "stream_approval_disabled" | "store_backend_absent" | "checkpoint_store_absent";
+type ActiveStreamApproval = Extract<ReturnType<typeof resolveStreamApprovalGate>, {
+    active: true;
+}>;
+/** 流内审批协议在场 —— 判据的属主仍是 `resolveStreamApprovalGate`(三条执行腿的装配也读它);本事实把它的拒因译进 why 闭集。 */
+export declare function streamApproval(d: Pick<Deps, "toolApproval" | "config" | "backend" | "checkpointStore">): Fact<StreamApprovalWhy, {
+    askStore: ActiveStreamApproval["askStore"];
+}>;
+export declare function deviceLane(d: Pick<Deps, "deviceHub">): Fact<"device_hub_absent", {
+    hub: Store<"deviceHub">;
+}>;
+/** 设备管理三动词(列 / 读 / 换绑):hub ∧ 设备店 ∧ 入网 ∧ 持久 run 账面(换绑的「无在飞 run」门要它)。 */
+export declare function deviceManagement(d: Pick<Deps, "deviceHub" | "deviceStore" | "deviceEnrollment" | "runStore">): Fact<"device_hub_absent" | "device_store_absent" | "device_enrollment_absent" | "run_store_absent", {
+    hub: Store<"deviceHub">;
+    store: Store<"deviceStore">;
+    enrollment: Store<"deviceEnrollment">;
+    runStore: Store<"runStore">;
+}>;
+export declare function fleetStream(d: Pick<Deps, "fleetBus">): Fact<"fleet_bus_absent", {
+    fleetBus: Store<"fleetBus">;
+}>;
+/** workspace 浏览面:随整树快照纪元退役,恒不可用(位恒 false、路由恒 501,两边读这同一句)。**结构上**没有可用臂(型 = `FactUnavailable`,
+ *  不是 `Fact`)—— 调用方不写「可用时」那一臂,端点只按 why 穷举作答。 */
+export declare function workspaceBrowse(): FactUnavailable<"workspace_retired">;
+export declare function leaderLane(d: Pick<Deps, "leaderEndpoint">): Fact<"leader_endpoint_absent", {
+    endpoint: Store<"leaderEndpoint">;
+}>;
+export declare function imagePool(d: Pick<Deps, "imageIndex">): Fact<"image_index_absent", {
+    imageIndex: Store<"imageIndex">;
+}>;
+export declare function agentRoster(d: Pick<Deps, "backgroundAgentStore">): Fact<"background_agent_store_absent", {
+    store: Store<"backgroundAgentStore">;
+}>;
+export declare function sendFileLedger(d: Pick<Deps, "sendFileLedger">): Fact<"sendfile_ledger_absent", {
+    ledger: Store<"sendFileLedger">;
+}>;
+/** org 共享记忆只读面:供给面 ∧ org 折叠面(没有成员性判据的共享读面比没有更糟)。 */
+export declare function sharedMemoryRead(d: Pick<Deps, "sharedMemoryStore" | "orgMemoryDirectory">): Fact<"shared_memory_store_absent" | "org_memory_directory_absent", {
+    provider: Store<"sharedMemoryStore">;
+    directory: Store<"orgMemoryDirectory">;
+}>;
+/** operator 名单非空。空名单下 `explicitOperatorOk` 对任何身份恒假 ⇒ 这一族的口对谁都打不通 = 部署不可用(不是鉴权拒)。
+ *
+ * operator 族的复合事实**先判名单、再判设施**:门序是「身份 → 名单空(501)→ 授权(403)→ 设施缺席(501)」——
+ * 名单空时没有人过得了授权,不先判它,这一形就永远答成 403;设施缺席则留在授权之后答(不对非 operator 透露部署形态)。 */
+export declare function operatorLane(d: {
+    readonly config: Pick<ServiceConfig, "operatorPrincipals">;
+}): Fact<"operator_principals_empty">;
+type AdoptionCapableBackend = Store<"backend"> & {
+    adoptionLog(): ReturnType<NonNullable<Store<"backend">["adoptionLog"]>>;
+};
+export declare function adoption(d: Pick<Deps, "config" | "backend">): Fact<"operator_principals_empty" | "adoption_store_absent", {
+    backend: AdoptionCapableBackend;
+}>;
+export declare function memoryBundle(d: Pick<Deps, "config" | "memoryBundleExport" | "memoryBundleImport">): Fact<"operator_principals_empty" | "memory_bundle_faces_absent", {
+    exportScopes: Store<"memoryBundleExport">;
+    importBundle: Store<"memoryBundleImport">;
+}>;
+export declare function memoryCompliance(d: Pick<Deps, "config" | "memoryCompliance">): Fact<"operator_principals_empty" | "memory_compliance_faces_absent", {
+    faces: Store<"memoryCompliance">;
+}>;
+export declare function memoryOrigin(d: Pick<Deps, "config" | "memoryOriginFace">): Fact<"operator_principals_empty" | "memory_origin_faces_absent", {
+    faces: Store<"memoryOriginFace">;
+}>;
+/** 记忆整理阀门的两口。阀门关是一句旋钮表态(不是授权问题),所以它**先于**名单判:关着就对谁都答「关着」。 */
+export declare function memoryConsolidation(d: Pick<Deps, "config" | "memoryConsolidation">): Fact<"consolidation_valve_closed" | "operator_principals_empty", {
+    valve: Store<"memoryConsolidation">;
+}>;
+export declare function memoryOptOutGrant(d: Pick<Deps, "config" | "memoryOptOutGrant">): Fact<"operator_principals_empty" | "memory_optout_grant_absent", {
+    store: Store<"memoryOptOutGrant">;
+}>;
+type QueryableOutcomeSink = WithMethods<Store<"outcomeSink">, "summary">;
+/** 可查询的 outcome 账面 ∧(单用户 ∨ operator 名单非空)—— 单用户形唯一的用户就是 operator,这一口不判名单。 */
+export declare function outcomeLedger(d: Pick<Deps, "config" | "outcomeSink">): Fact<"operator_principals_empty" | "outcome_ledger_unqueryable", {
+    sink: QueryableOutcomeSink;
+}>;
+/** 配置目录。旋钮关是一句表态(合规部署不想让部署事实上 wire),先于名单判。 */
+export declare function configCatalog(d: Pick<Deps, "config">): Fact<"config_catalog_disabled" | "operator_principals_empty">;
+export declare function ruleLane(d: Pick<Deps, "ruleConsent">): Fact<"rule_store_absent", {
+    lane: Store<"ruleConsent">;
+}>;
+/** 规则车道**对这个调用方**够不够得着:车道在场 ∧ 本请求有已验 principal(规则车道按 principal 寻址,
+ *  `routes/rules.ts` 的域头对无 principal 一律 401)。按调用方算 —— 同一台 worker 对不同请求答案不同。 */
+export declare function ruleLaneForCaller(d: Pick<Deps, "ruleConsent">, principal: string | undefined): Fact<"rule_store_absent" | "caller_principal_absent">;
+/** 调用方自带 MCP 规格兑不兑现 —— 判据属主仍是 `mcpInjectionHonored`(提交腿的字段门也读它)。 */
+export declare function mcpInjection(d: Pick<Deps, "config">): Fact<"caller_mcp_injection_refused">;
+/** server-as-peer:旋钮开 ∧ 持久 run 账面在场。两只 JSON-RPC 方法(`message/send` / `tasks/get`)都要 run 店 ——
+ *  没有它,这个 peer 什么都做不了,对外就不该存在(卡与 RPC 一起 404)。 */
+export declare function a2aServe(d: Pick<Deps, "config" | "runStore">): Fact<"a2a_serve_off" | "run_store_absent", {
+    serve: NonNullable<ServiceConfig["a2aServe"]>;
+    runStore: Store<"runStore">;
+}>;
+/** 引擎能不能自编排(core 单源 `workflowsCapability`,boot 算好经 `workflowsCapable` 递来;缺席回落行店代理)。 */
+export declare function selfOrchestrationEngine(d: Pick<Deps, "workflowsCapable" | "workflowRunStore">): Fact<"workflow_engine_absent">;
+/** 部署级准入:引擎在、而本部署对任何 principal 都授不出去(多租户 + 没接 entitlement 源)⇒ 不可用。
+ *  判据属主仍是 `selfOrchestrationDenial`(与提交面准入同一只)。 */
+export declare function selfOrchestrationAdmission(d: Pick<Deps, "config">): Fact<"entitlement_resolver_absent">;
+/** 「这台机器上真跑得起来」的自编排 = 引擎能 ∧ 准入不拒。 */
+export declare function selfOrchestration(d: Pick<Deps, "config" | "workflowsCapable" | "workflowRunStore">): Fact<"workflow_engine_absent" | "entitlement_resolver_absent">;
+/** workflow run 的持久列举三口(list / detail / stream)= 行店(能力位 `workflowsList` 投影这一只)。 */
+export declare function workflowRuns(d: Pick<Deps, "workflowRunStore">): Fact<"workflow_run_store_absent", {
+    store: Store<"workflowRunStore">;
+}>;
+export declare function workflowJournal(d: Pick<Deps, "workflowJournalStore">): Fact<"workflow_journal_store_absent", {
+    journal: Store<"workflowJournalStore">;
+}>;
+/** workflow run 的 **journal 口**(`GET /v1/workflows/:id/journal`;能力位 `workflowsJournal` 投影这一只)= 行店 ∧ journal 店 —— journal 口要先按行判属主。
+ *  与 `workflowRuns` 是**拆开**的两只(照 `sessionSync` / `sessionSyncFileHistory`):无后端 + 自编排的三形上行店在、journal 店不在,
+ *  三口真能用而 journal 口恒 501 —— 合成一位总有一半在说假话。 */
+export declare function workflowsJournal(d: Pick<Deps, "workflowRunStore" | "workflowJournalStore">): Fact<"workflow_run_store_absent" | "workflow_journal_store_absent", {
+    store: Store<"workflowRunStore">;
+    journal: Store<"workflowJournalStore">;
+}>;
+/** 自唤醒调度器挂在宿主 env 上:`SCHEDULER_ENABLED` ∧ 单用户 ∧ host 车道。装配(`boot/execution-env.ts`)与能力位同调。 */
+export declare function hostScheduler(c: Pick<ServiceConfig, "schedulerEnabled" | "requirePrincipal" | "remoteExec">): Fact<"scheduler_disabled" | "multi_tenant_deployment" | "not_host_lane">;
+export {};
+//# sourceMappingURL=capability-facts.d.ts.map