@sema-agent/server 7.114.0 → 7.116.0

package/dist/capability-facts.js

@@ -0,0 +1,354 @@
+import { mcpInjectionHonored } from "./task-mcp.js";
+import { resolveStreamApprovalGate } from "./tool-approval.js";
+import { selfOrchestrationDenial } from "./task-workflow.js";
+import { centerEntitlementSourceWired } from "./runtime-caps-resolver.js";
+import { overwriteWipeIncapable } from "./session-sync.js";
+export const CAPABILITY_FACT_WHY = {
+    run_store_absent: "no durable run store is wired (DB_BACKEND=mysql|pg|local)",
+    subagent_registry_absent: "the sub-agent steer registry is not wired",
+    subagent_output_face_absent: "the background sub-agent output face is not wired",
+    task_handle_faces_absent: "the background task-handle output/stop faces are not wired",
+    session_owner_face_absent: "the session store has no ownership face (sessionStorage.ownerOf)",
+    checkpoint_store_absent: "no durable checkpoint store is wired (DURABLE_APPROVAL)",
+    session_audit_absent: "no session audit view is wired (needs a durable session store)",
+    session_watch_absent: "the session watch registry is not wired",
+    session_leaf_face_absent: "the session store has no leaf-read face (sessionStorage.getLeafId)",
+    session_lister_absent: "no session enumerator is wired (session store or run store listSessions)",
+    session_fork_face_absent: "the session store has no fork face",
+    session_purge_absent: "no session purge coordinator is wired",
+    session_policy_store_absent: "no session policy store is wired",
+    store_backend_absent: "no store backend is wired (DB_BACKEND=memory, multi-tenant bare boot, or half-configured SQL)",
+    file_history_store_absent: "no file-history store is wired",
+    session_export_absent: "the session store has no entry export faces (exportEntries / exportEntriesStream)",
+    session_import_staging_absent: "the session store has no staged-import face (beginImportStaging)",
+    policy_purge_absent: "the session policy store has no deleteBySession purge verb",
+    sync_blob_faces_absent: "the file-history store has no blob transfer faces (SQL backends only)",
+    device_hub_absent: "the device lane hub is not wired",
+    device_store_absent: "the device store is not wired",
+    device_enrollment_absent: "device enrollment is not wired",
+    fleet_bus_absent: "the fleet event bus is not wired",
+    workspace_retired: "the workspace browse face was retired with the whole-tree snapshot epoch",
+    leader_endpoint_absent: "the leader endpoint is not wired",
+    image_index_absent: "no image index is wired (SQL backends only)",
+    shared_memory_store_absent: "no shared memory store provider is wired",
+    org_memory_directory_absent: "no org memory directory (membership fold) is wired",
+    operator_principals_empty: "OPERATOR_PRINCIPALS is empty, so no caller can ever be an operator",
+    adoption_store_absent: "no adoption log store is wired (SQL backends only)",
+    memory_bundle_faces_absent: "the memory engine's governance bundle faces are not wired",
+    memory_compliance_faces_absent: "the memory engine's provenance/erasure faces are not wired",
+    memory_origin_faces_absent: "the memory engine's origin marking faces are not wired",
+    consolidation_valve_closed: "the memory consolidation valve is closed (MEMORY_CONSOLIDATION_DRIVER)",
+    memory_optout_grant_absent: "no memory-capture opt-out grant store is wired (SQL backends only)",
+    outcome_ledger_unqueryable: "the outcome sink has no query face (File sink)",
+    config_catalog_disabled: "the config catalog is switched off (CONFIG_CATALOG_ENABLED=false)",
+    rule_store_absent: "no permission-rule store is wired",
+    caller_principal_absent: "this request carries no verified principal",
+    caller_mcp_injection_refused: "this deployment does not honor caller-supplied MCP servers",
+    a2a_serve_off: "A2A_SERVE_ENABLED is off",
+    elicitation_disabled: "inbound MCP elicitation is off (MCP_ELICITATION_ENABLED)",
+    ask_question_disabled: "AskUserQuestion live HITL is off (ASK_QUESTION_ENABLED)",
+    tool_approval_disabled: "live tool approval is off (TOOL_APPROVAL_ENABLED)",
+    stream_approval_disabled: "the stream approval protocol is off (STREAM_APPROVAL_ENABLED)",
+    background_agent_store_absent: "no background-agent store is wired",
+    sendfile_ledger_absent: "no SendUserFile ledger is wired",
+    workflow_engine_absent: "the workflow engine is not available on this worker",
+    entitlement_resolver_absent: "self-orchestration is on for a multi-tenant worker with no per-principal entitlement source",
+    workflow_run_store_absent: "no workflow run store is wired (SELF_ORCHESTRATION_ENABLED)",
+    workflow_journal_store_absent: "no workflow journal store is wired (needs a store backend)",
+    scheduler_disabled: "the self-wake scheduler is off (SCHEDULER_ENABLED)",
+    multi_tenant_deployment: "this is a multi-tenant deployment (REQUIRE_PRINCIPAL=true)",
+    not_host_lane: "the execution lane is not the single-user host lane (REMOTE_EXEC=host)",
+};
+const no = (why) => ({ available: false, why });
+const yes = (w) => ({ available: true, ...w });
+const YES = yes({});
+export function durableRuns(d) {
+    return d.runStore !== undefined ? yes({ runStore: d.runStore }) : no("run_store_absent");
+}
+export function subagentSteer(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    return d.subagentSteerRegistry !== undefined ? yes({ runStore: runs.runStore, registry: d.subagentSteerRegistry }) : no("subagent_registry_absent");
+}
+export function subagentOutput(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    return d.subagentTaskOutput !== undefined ? yes({ runStore: runs.runStore, output: d.subagentTaskOutput }) : no("subagent_output_face_absent");
+}
+export function taskHandles(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    return d.taskHandleOutput !== undefined && d.taskHandleStop !== undefined
+        ? yes({ runStore: runs.runStore, output: d.taskHandleOutput, stop: d.taskHandleStop })
+        : no("task_handle_faces_absent");
+}
+export function sessionOwnership(d) {
+    const s = d.sessionStorage;
+    return s?.ownerOf !== undefined ? yes({ sessionStorage: s }) : no("session_owner_face_absent");
+}
+export function mcpReconnect(d) {
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    const owned = sessionOwnership(d);
+    if (!owned.available)
+        return owned;
+    return yes({ runStore: runs.runStore, sessionStorage: owned.sessionStorage });
+}
+export function sessionAuditView(d) {
+    return d.sessionAudit !== undefined ? yes({ sessionAudit: d.sessionAudit }) : no("session_audit_absent");
+}
+export function sessionEventStream(d) {
+    if (d.sessionWatch === undefined)
+        return no("session_watch_absent");
+    const s = d.sessionStorage;
+    if (s?.getLeafId === undefined)
+        return no("session_leaf_face_absent");
+    if (s.ownerOf === undefined)
+        return no("session_owner_face_absent");
+    return yes({ watch: d.sessionWatch, sessionStorage: s });
+}
+export function sessionList(d) {
+    const lister = d.sessionStorage?.listSessions?.bind(d.sessionStorage) ?? d.runStore?.listSessions?.bind(d.runStore);
+    return lister !== undefined ? yes({ lister }) : no("session_lister_absent");
+}
+export function sessionFork(d) {
+    const s = d.sessionStorage;
+    if (s?.fork === undefined)
+        return no("session_fork_face_absent");
+    if (s.ownerOf === undefined)
+        return no("session_owner_face_absent");
+    return yes({ sessionStorage: s });
+}
+export function sessionDelete(d) {
+    if (d.purgeSession === undefined)
+        return no("session_purge_absent");
+    const owned = sessionOwnership(d);
+    if (!owned.available)
+        return owned;
+    return yes({ purge: d.purgeSession, sessionStorage: owned.sessionStorage });
+}
+export function sessionPolicy(d) {
+    if (d.sessionPolicyStore === undefined)
+        return no("session_policy_store_absent");
+    const owned = sessionOwnership(d);
+    if (!owned.available)
+        return owned;
+    return yes({ policyStore: d.sessionPolicyStore, sessionStorage: owned.sessionStorage });
+}
+export function sessionSync(d) {
+    if (d.backend === undefined)
+        return no("store_backend_absent");
+    const s = d.sessionStorage;
+    if (s?.ownerOf === undefined)
+        return no("session_owner_face_absent");
+    if (d.fileHistoryStore === undefined)
+        return no("file_history_store_absent");
+    if (s.exportEntries === undefined || s.exportEntriesStream === undefined)
+        return no("session_export_absent");
+    if (s.beginImportStaging === undefined)
+        return no("session_import_staging_absent");
+    if (overwriteWipeIncapable(d.sessionPolicyStore))
+        return no("policy_purge_absent");
+    return yes({ backend: d.backend, sessionStorage: s, historyStore: d.fileHistoryStore });
+}
+export function sessionSyncFileHistory(d) {
+    const sync = sessionSync(d);
+    if (!sync.available)
+        return sync;
+    const fs = sync.historyStore;
+    return fs.syncBlobFaces === true && typeof fs.putBlob === "function" && typeof fs.getBlob === "function"
+        ? yes({ historyStore: fs })
+        : no("sync_blob_faces_absent");
+}
+export function checkpointPark(d) {
+    return d.checkpointStore !== undefined ? yes({ checkpointStore: d.checkpointStore }) : no("checkpoint_store_absent");
+}
+export function elicitation(d) {
+    return d.elicitation !== undefined ? yes({ coordinator: d.elicitation }) : no("elicitation_disabled");
+}
+export function askUserQuestion(d) {
+    return d.question !== undefined ? yes({ coordinator: d.question }) : no("ask_question_disabled");
+}
+export function toolApproval(d) {
+    return d.toolApproval !== undefined ? yes({ coordinator: d.toolApproval }) : no("tool_approval_disabled");
+}
+export function streamApproval(d) {
+    const gate = resolveStreamApprovalGate({
+        toolApprovalEnabled: d.toolApproval !== undefined,
+        streamApprovalEnabled: d.config.streamApproval?.enabled === true,
+        backend: d.backend,
+        parkFacility: d.checkpointStore !== undefined,
+    });
+    if (gate.active)
+        return yes({ askStore: gate.askStore });
+    switch (gate.reason) {
+        case "no_tool_approval":
+            return no("tool_approval_disabled");
+        case "protocol_disabled":
+            return no("stream_approval_disabled");
+        case "no_backend":
+            return no("store_backend_absent");
+        case "no_park_facility":
+            return no("checkpoint_store_absent");
+        default: {
+            const unhandled = gate.reason;
+            throw new Error(`unhandled stream-approval gate reason: ${JSON.stringify(unhandled)}`);
+        }
+    }
+}
+export function deviceLane(d) {
+    return d.deviceHub !== undefined ? yes({ hub: d.deviceHub }) : no("device_hub_absent");
+}
+export function deviceManagement(d) {
+    const lane = deviceLane(d);
+    if (!lane.available)
+        return lane;
+    if (d.deviceStore === undefined)
+        return no("device_store_absent");
+    if (d.deviceEnrollment === undefined)
+        return no("device_enrollment_absent");
+    const runs = durableRuns(d);
+    if (!runs.available)
+        return runs;
+    return yes({ hub: lane.hub, store: d.deviceStore, enrollment: d.deviceEnrollment, runStore: runs.runStore });
+}
+export function fleetStream(d) {
+    return d.fleetBus !== undefined ? yes({ fleetBus: d.fleetBus }) : no("fleet_bus_absent");
+}
+export function workspaceBrowse() {
+    return no("workspace_retired");
+}
+export function leaderLane(d) {
+    return d.leaderEndpoint !== undefined ? yes({ endpoint: d.leaderEndpoint }) : no("leader_endpoint_absent");
+}
+export function imagePool(d) {
+    return d.imageIndex !== undefined ? yes({ imageIndex: d.imageIndex }) : no("image_index_absent");
+}
+export function agentRoster(d) {
+    return d.backgroundAgentStore !== undefined ? yes({ store: d.backgroundAgentStore }) : no("background_agent_store_absent");
+}
+export function sendFileLedger(d) {
+    return d.sendFileLedger !== undefined ? yes({ ledger: d.sendFileLedger }) : no("sendfile_ledger_absent");
+}
+export function sharedMemoryRead(d) {
+    if (d.sharedMemoryStore === undefined)
+        return no("shared_memory_store_absent");
+    if (d.orgMemoryDirectory === undefined)
+        return no("org_memory_directory_absent");
+    return yes({ provider: d.sharedMemoryStore, directory: d.orgMemoryDirectory });
+}
+export function operatorLane(d) {
+    return d.config.operatorPrincipals.length > 0 ? YES : no("operator_principals_empty");
+}
+export function adoption(d) {
+    const lane = operatorLane(d);
+    if (!lane.available)
+        return lane;
+    const b = d.backend;
+    return b !== undefined && typeof b.adoptionLog === "function" ? yes({ backend: b }) : no("adoption_store_absent");
+}
+export function memoryBundle(d) {
+    const lane = operatorLane(d);
+    if (!lane.available)
+        return lane;
+    return d.memoryBundleExport !== undefined && d.memoryBundleImport !== undefined
+        ? yes({ exportScopes: d.memoryBundleExport, importBundle: d.memoryBundleImport })
+        : no("memory_bundle_faces_absent");
+}
+export function memoryCompliance(d) {
+    const lane = operatorLane(d);
+    if (!lane.available)
+        return lane;
+    return d.memoryCompliance !== undefined ? yes({ faces: d.memoryCompliance }) : no("memory_compliance_faces_absent");
+}
+export function memoryOrigin(d) {
+    const lane = operatorLane(d);
+    if (!lane.available)
+        return lane;
+    return d.memoryOriginFace !== undefined ? yes({ faces: d.memoryOriginFace }) : no("memory_origin_faces_absent");
+}
+export function memoryConsolidation(d) {
+    if (d.memoryConsolidation === undefined)
+        return no("consolidation_valve_closed");
+    const lane = operatorLane(d);
+    return lane.available ? yes({ valve: d.memoryConsolidation }) : lane;
+}
+export function memoryOptOutGrant(d) {
+    const lane = operatorLane(d);
+    if (!lane.available)
+        return lane;
+    return d.memoryOptOutGrant !== undefined ? yes({ store: d.memoryOptOutGrant }) : no("memory_optout_grant_absent");
+}
+export function outcomeLedger(d) {
+    if (d.config.requirePrincipal === true) {
+        const lane = operatorLane(d);
+        if (!lane.available)
+            return lane;
+    }
+    const sink = d.outcomeSink;
+    return sink?.summary !== undefined ? yes({ sink: sink }) : no("outcome_ledger_unqueryable");
+}
+export function configCatalog(d) {
+    if (d.config.configCatalogEnabled !== true)
+        return no("config_catalog_disabled");
+    return operatorLane(d);
+}
+export function ruleLane(d) {
+    return d.ruleConsent !== undefined ? yes({ lane: d.ruleConsent }) : no("rule_store_absent");
+}
+export function ruleLaneForCaller(d, principal) {
+    const lane = ruleLane(d);
+    if (!lane.available)
+        return lane;
+    return principal !== undefined ? YES : no("caller_principal_absent");
+}
+export function mcpInjection(d) {
+    return mcpInjectionHonored(d.config) ? YES : no("caller_mcp_injection_refused");
+}
+export function a2aServe(d) {
+    const serve = d.config.a2aServe;
+    if (serve === undefined)
+        return no("a2a_serve_off");
+    const runs = durableRuns(d);
+    return runs.available ? yes({ serve, runStore: runs.runStore }) : runs;
+}
+export function selfOrchestrationEngine(d) {
+    return (d.workflowsCapable ?? d.workflowRunStore !== undefined) ? YES : no("workflow_engine_absent");
+}
+export function selfOrchestrationAdmission(d) {
+    const denial = selfOrchestrationDenial({ selfOrchestrationEnabled: d.config.selfOrchestrationEnabled, requirePrincipal: d.config.requirePrincipal }, centerEntitlementSourceWired(d.config));
+    return denial === null ? YES : no(denial);
+}
+export function selfOrchestration(d) {
+    const engine = selfOrchestrationEngine(d);
+    if (!engine.available)
+        return engine;
+    return selfOrchestrationAdmission(d);
+}
+export function workflowRuns(d) {
+    return d.workflowRunStore !== undefined ? yes({ store: d.workflowRunStore }) : no("workflow_run_store_absent");
+}
+export function workflowJournal(d) {
+    return d.workflowJournalStore !== undefined ? yes({ journal: d.workflowJournalStore }) : no("workflow_journal_store_absent");
+}
+export function workflowsJournal(d) {
+    const runs = workflowRuns(d);
+    if (!runs.available)
+        return runs;
+    const journal = workflowJournal(d);
+    return journal.available ? yes({ store: runs.store, journal: journal.journal }) : journal;
+}
+export function hostScheduler(c) {
+    if (c.schedulerEnabled !== true)
+        return no("scheduler_disabled");
+    if (c.requirePrincipal === true)
+        return no("multi_tenant_deployment");
+    if (c.remoteExec?.provider !== "host")
+        return no("not_host_lane");
+    return YES;
+}
+//# sourceMappingURL=capability-facts.js.map

package/dist/config-catalog.js

@@ -58,6 +58,7 @@ export const CONFIG_CATALOG = [
     r("ANTHROPIC_VERSION", "modelPlane", "string", "Anthropic API version 头(缺省由 SDK 定)"),
     r("APPROVAL_AUTO_BUDGET", "approval", "number", "每 run-leg 自动放行的普通门控工具调用数上限(0=关;防审批循环的熔断,不是安全 ask 的帽)", { staticDefault: "0", danger: SEC, configKey: "approvalAutoBudget" }),
     r("APPROVAL_DENY", "approval", "csv", "始终拒绝的工具名单(装配期拒不可匹配名)", { danger: SEC, configKey: "approvalDeny" }),
+    r("APPROVAL_GRANT", "approval", "csv", "运维的 allow 规则(工具名规则:精确名 / mcp__<server>__* / a2a__<peer>__*;命中 = 带理由放行,不再为这些调用出「没人表态」卡(不放掉任何一层自己的问);HTTP 提交 / durable 续跑 / 停驻后台 agent 赎回 / run-local 四腿同装(leader worker 首跑与修复腿到不了);不越过任何一层的 deny / ask;不是白名单;坏值拒启)", { danger: SEC, configKey: "approvalGrant", derivedDefaultNote: "缺席 = 空表(本层不表态,折叠与未设逐字同)" }),
     r("APPROVAL_HMAC_KEYS", "approval", "secret", "直连门(D-G)HMAC 完整性密钥集(空=直连门不激活)", { danger: SEC }),
     r("APPROVAL_NEVER_AUTO", "approval", "csv", "永不被 AUTO_BUDGET 自动放行的工具集(不可逆动作恒要人)", { danger: SEC, configKey: "approvalNeverAuto" }),
     r("APPROVAL_REQUIRE", "approval", "csv", "必须人审的工具名单(F4 门;center 腿热:refresh 拍整表换代,无 checkpoint 店的部署发非空名单 ⇒ 审批组整组拒)", { danger: SEC, configKey: "approvalRequire", center: cGov("approvalRequire") }),
@@ -156,7 +157,7 @@ export const CONFIG_CATALOG = [
     r("HOST_BG_DEFAULT_TIMEOUT_SEC", "orchestration", "number", "host 后台 shell 缺省超时(秒)", { staticDefault: "300" }),
     r("HOST_BG_ENABLED", "orchestration", "boolean", "host 车道后台 shell 开关", { staticDefault: "true" }),
     r("HOST_BG_FILE_CAP", "orchestration", "number", "host 后台 shell 磁盘护栏(字节;失控输出被 reap)", { staticDefault: String(64 * 1024 * 1024) }),
-    r("HOST_BG_KILL_GRACE_MS", "orchestration", "number", "host 后台 shell SIGTERM→SIGKILL 宽限(ms);会话删除 / 会话停止口在软停与硬收之间等同一只", { staticDefault: "1000" }),
+    r("HOST_BG_KILL_GRACE_MS", "orchestration", "number", "host 后台 shell SIGTERM→SIGKILL 宽限(ms);会话删除 / 会话停止口在软停与硬收之间等同一只,受控退出(SIGTERM / SIGINT)在软停之后、退出之前也等一次(封顶在停机宽限窗内)", { staticDefault: "1000" }),
     r("HOST_BG_MAX_CONCURRENT", "orchestration", "number", "host 后台 shell 并发帽", { staticDefault: "8" }),
     r("HOST_BG_MAX_TIMEOUT_SEC", "orchestration", "number", "host 后台 shell 超时上限(秒)", { staticDefault: "1800" }),
     r("HOST_BG_MEM_CAP", "orchestration", "number", "host 后台 shell 内存流护栏(字节)", { staticDefault: String(8 * 1024 * 1024) }),

package/dist/config-center/apply-effective.js

@@ -1,6 +1,6 @@
 import { resolveActiveTiers } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
-import { applyAutoCompactWindow, buildModelCostKey, findUnmatchableToolNames, formatUnmatchableToolNames, parseAutonomy } from "../config.js";
+import { applyAutoCompactWindow, buildModelCostKey, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
 import { validateCommandRules } from "../runtime-governance.js";
@@ -9,7 +9,7 @@ import { stageLimits } from "./stage-limits.js";
 import { APPROVAL_GROUP_KEYS, BATCH1_LIMIT_KEYS } from "./hot-keys-registry.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import { crossInvariant } from "../config-invariants.js";
-import { DEFAULT_MODEL_MISSING_CODE, REFUSED_NAME_MINTED_CODE, judgeCatalogEntries, mintedRefusedNames, refusalEventOf, refusalWarnFields, malformedDroppedCarrierRefusal } from "../model-entry-refusal.js";
+import { DEFAULT_MODEL_MISSING_CODE, REFUSED_NAME_MINTED_CODE, judgeCatalogEntries, mintedRefusedNames, refusalEventOf, refusalWarnFields, refusedNameLogField, refusedNamesLogFields, malformedDroppedCarrierRefusal } from "../model-entry-refusal.js";
 import { judgeModelRouteEndpoint } from "../model-route-endpoint.js";
 import { gateIntentUnserviceableReason } from "../approval.js";
 import { refusedGroups } from "./apply-ledger.js";
@@ -314,7 +314,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
         if (usable.length > 0) {
             picked = resolveDefaultModelName(eff, (n) => models[n] !== undefined, usable[0].name, (source, name) => logger?.warn("sema_registry_default_dangling", {
                 source,
-                name,
+                ...(Object.hasOwn(verdict.refused, name) ? refusedNameLogField("name", name) : { name }),
                 ...(Object.hasOwn(verdict.refused, name) ? { unavailable: verdict.refused[name].code } : {}),
                 hint: "explicit default names a model that is not in the usable catalog (not enabled, or unavailable on this host — see `unavailable`) — falling to the next source",
             }));
@@ -327,7 +327,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
                 continue;
             }
             const refusal = Object.hasOwn(verdict.refused, target) ? verdict.refused[target] : undefined;
-            logger?.warn("sema_registry_tier_binding_unavailable", { tier, model: target, ...(refusal !== undefined ? { code: refusal.code } : {}), hint: "this tier binding names a model that is not in this generation's usable catalog — the binding is dropped (the tier word falls to the next lower bound tier, core's ladder); fix the entry or rebind the tier" });
+            logger?.warn("sema_registry_tier_binding_unavailable", { tier, ...(refusal !== undefined ? refusedNameLogField("model", target) : { model: target }), ...(refusal !== undefined ? { code: refusal.code } : {}), hint: "this tier binding names a model that is not in this generation's usable catalog — the binding is dropped (the tier word falls to the next lower bound tier, core's ladder); fix the entry or rebind the tier" });
         }
         const nextView = { ...config, models, tiers: activeTiers, modelRefusals: verdict.refused };
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
@@ -343,7 +343,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
             const target = typeof spec === "string" ? spec : spec !== null && typeof spec === "object" && "model" in spec && typeof spec.model === "string" ? spec.model : undefined;
             const refusal = target !== undefined && Object.hasOwn(verdict.refused, target) ? verdict.refused[target] : undefined;
             if (refusal !== undefined) {
-                logger?.warn("sema_registry_role_binding_unavailable", { role, model: target, code: refusal.code, hint: ROLE_BINDING_UNAVAILABLE_HINT });
+                logger?.warn("sema_registry_role_binding_unavailable", { role, ...refusedNameLogField("model", target), code: refusal.code, hint: ROLE_BINDING_UNAVAILABLE_HINT });
             }
         }
         const atModelAllowlist = stageAtModelAllowlist(eff.models?.atModelAllowlist, models, logger);
@@ -357,7 +357,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
             roles,
             activeTiers,
             atModelAllowlist,
-            infoLine: { count: usable.length, ...(Object.keys(verdict.refused).length > 0 ? { unavailable: Object.keys(verdict.refused) } : {}), default: defaultModel.id, defaultSource: picked.source, roles: Object.keys(roles), tiers: Object.keys(activeTiers), atModelAllowlist: atModelAllowlist.length, sealedKeys: Object.values(modelApiKeys).filter((v) => typeof v === "string").length, sealedPoisoned: Object.values(modelApiKeys).filter((v) => typeof v !== "string").length },
+            infoLine: { count: usable.length, ...(Object.keys(verdict.refused).length > 0 ? refusedNamesLogFields("unavailable", Object.keys(verdict.refused)) : {}), default: defaultModel.id, defaultSource: picked.source, roles: Object.keys(roles), tiers: Object.keys(activeTiers), atModelAllowlist: atModelAllowlist.length, sealedKeys: Object.values(modelApiKeys).filter((v) => typeof v === "string").length, sealedPoisoned: Object.values(modelApiKeys).filter((v) => typeof v !== "string").length },
         };
         return { stages: { models: plane, collab: stageCollabDomain(eff) }, defaultName: picked.name, refused: verdict.refused };
     }
@@ -476,13 +476,13 @@ function stageApprovalRequire(raw) {
         return { ok: false, detail, reason: detail, names: nonString.map((e) => `[${e.i}]`), kept: KEPT_WOULD_REMOVE_GATE };
     }
     const names = raw.filter((n) => typeof n === "string").map((n) => n.trim()).filter((n) => n.length > 0);
-    const bad = findUnmatchableToolNames(names, { consumer: "tool-name-table", behavior: "deny" });
-    if (bad.length > 0) {
+    const unmatchable = unmatchableToolNamesRefusal("published governance.approvalRequire", names, { consumer: "tool-name-table", behavior: "deny" });
+    if (unmatchable !== undefined) {
         return {
             ok: false,
-            detail: formatUnmatchableToolNames("published governance.approvalRequire", bad),
-            reason: `published governance.approvalRequire has ${bad.length} entr${bad.length === 1 ? "y" : "ies"} that match no live tool (retired name / incomplete MCP name / CC-form rule) — the offending entries are named in the sema_registry_approval_require_invalid log line`,
-            names: bad.map((b) => b.name),
+            detail: unmatchable.message,
+            reason: `published governance.approvalRequire has ${unmatchable.names.length} entr${unmatchable.names.length === 1 ? "y" : "ies"} that match no live tool (retired name / incomplete protocol name / server segment the engine never mints / CC-form rule) — the offending entries are named in the sema_registry_approval_require_invalid log line`,
+            names: unmatchable.names,
             kept: KEPT_WOULD_MATCH_NOTHING,
         };
     }

package/dist/config-provider.d.ts

@@ -35,6 +35,22 @@ export type FetchEffectiveResult = {
     readWarnings: readonly EffectiveReadWarning[];
     credentialIdentity?: string;
 } | null;
+/**
+ * 引号段 = **一条规则**:先过 `redactSecrets`;文本里没有引号字符(`"` / `'`)⇒ 原样返回;有 ⇒ 从**第一个**引号到**最后一个**引号(含两端,
+ * 两种引号不分种类)整段换成**一个**指纹;`"` 的个数是奇数、或 `'` 的个数是奇数(落单 / 句子被截断)⇒ 从第一个引号遮到**文末**。
+ * 本函数不辨认任何一个引号是「开头」「收尾」「转义」还是「撇号」—— 生产方原文插值的值自己带引号时,句子里没有信号能把「值里的引号」与「值的边界」
+ * 分开,逐个辨认边界的读法每补一条豁免就多一种漏形。
+ *
+ * 为什么是超集:
+ *  · 配对读法(`/"[^"]*"|'[^']*'/g`)遮住的每一段都夹在两个引号之间,因此落在「第一个引号 … 最后一个引号」之内;
+ *  · 生产方放进引号里的值(不论值里带几个引号、怎么转义、撇号在哪)也都落在这一段之内 —— 值左边至少有一个引号、右边至少有一个引号;
+ *  · 引号个数不成对时遮到文末,只会更宽。
+ * 代价:两个操作数之间的固定词与第一个操作数之后的句子不再可读(例:`roster "#…" (not in the models catalog)`,原句里 `references unknown model`
+ * 一并进了指纹);首个引号之前的部分(引用完整性腿拼在前面的坐标 `rosters.0.models.0: `、固定句头)与末个引号之后的句尾仍是明文。
+ * 仍不覆盖:生产方**不加引号**直接插值的值(本函数看不见值在哪);句子被截断、而两种引号的个数恰好都是偶数的形。真收法在消息生产方给出结构化操作数、
+ * 不回声值(上游 settings-schema)。
+ */
+export declare function redactConfigError(text: string): string;
 /** Sentinel returned by {@link raceBootFetch} when the boot pull outlived its budget — the caller
  *  starts serving on the env fallback and the SAME promise settles in the background (never cancelled). */
 export declare const BOOT_FETCH_DEFERRED: unique symbol;

package/dist/config-provider.js

@@ -8,8 +8,17 @@ import { fetchEffective as remoteFetchEffective, fetchSkillContent as remoteFetc
 import { homedir } from "node:os";
 import { join } from "node:path";
 const OPERAND_FINGERPRINT_KEY = randomBytes(16);
-function redactConfigError(text) {
-    return redactSecrets(text).replace(/"[^"]*"|'[^']*'/g, (m) => `"#${createHmac("sha256", OPERAND_FINGERPRINT_KEY).update(m.slice(1, -1)).digest("hex").slice(0, 8)}"`);
+export function redactConfigError(text) {
+    const s = redactSecrets(text);
+    const first = s.search(/["']/);
+    if (first === -1)
+        return s;
+    const count = (q) => s.split(q).length - 1;
+    const fingerprint = (operand) => `"#${createHmac("sha256", OPERAND_FINGERPRINT_KEY).update(operand).digest("hex").slice(0, 8)}"`;
+    if (count('"') % 2 === 1 || count("'") % 2 === 1)
+        return `${s.slice(0, first)}${fingerprint(s.slice(first + 1))}`;
+    const last = Math.max(s.lastIndexOf('"'), s.lastIndexOf("'"));
+    return `${s.slice(0, first)}${fingerprint(s.slice(first + 1, last))}${s.slice(last + 1)}`;
 }
 export const BOOT_FETCH_DEFERRED = Symbol("boot-fetch-deferred");
 export function raceBootFetch(fetch, budgetMs) {

package/dist/config-types.d.ts

@@ -1324,6 +1324,25 @@ export interface ServiceConfigFlat {
      *  「只配 APPROVAL_NEVER_AUTO」这一形被判成"零门意图" ⇒ 落进单用户 allow-all 基线 ⇒ 那张表
      *  从未进入任何 policy。判定现在单源在 `hasOperatorGateIntent()`(与 inv#2 同文件)。 */
     approvalNeverAuto: string[];
+    /**
+     * 7.115.0 —— **运维的 allow 规则**(`APPROVAL_GRANT`,逗号分隔的工具名规则:精确名 / `mcp__<server>__*` / `a2a__<peer>__*`)。命中 = 带理由的
+     * 放行(core `decisionReason: "rule"`,运维替这些调用表了态 —— 回答没人表态的服务器工具 / A2A 技能调用;内置工具上引擎的写门、shell 检查照问);未命中 = 不表态。与请求腿的 `settings.permissions.allow` 是**同一种东西**:
+     * 同一只编译口(`permission-rule-list.ts` `createRuleListPolicy`)、同一只校验(`config.ts` `approvalGrantRefusal` → `unmatchableToolNamesRefusal`,
+     * 坏值拒启)。施加点 = 部署治理链的单一构造口(`deployment-governance.ts` → `runtime-governance.ts` `applyRuntimeGovernance` 的一片叶),
+     * 所以 HTTP 提交 / durable 续跑(含 leader worker 停驻后经 `/decide` 续跑的那一段)/ 停驻后台 agent 的跨副本赎回 / run-local 四条腿同装(leader worker 首跑与修复腿到不了),每次现取(不 memoize)。**不越过**任何一层的 deny / ask(折叠 deny > ask > allow)。
+     *
+     * ⚠️ 不是白名单:名字不叫 `…_ALLOW`,与会话规则的 `toolAllow`(「只许这些」)刻意分开 —— 本键只给出表态,不收窄任何东西。
+     *
+     * 三问:谁需要 = 在没有请求体的腿上接了 MCP 服务器的运维 —— `run-local`,以及 durable 续跑(每一次从持久化体重建,含 leader worker 停驻后经 `/decide`
+     * 续跑的那一段;A2A 不在射程:运维声明的对端恒带外发标记,那一问本键不放) —— core 7.40.0 起没人表态的服务器工具调用要问,无席 ⇒ 拒、有 durable 席 ⇒ 每次停驻等人,
+     * 这里是运维为自己接的服务器表态的唯一位置。**到不了**:leader worker 的首跑与修复腿(工具策略在 leader 编排里自己折出来 —— `leader/wire.ts` 的
+     * `combinePolicies(createDurableQuestionPolicy(), createDurableAskPolicy(…))` —— 不经上面那只构造口);这两条腿今天不挂 MCP / A2A,本键在那里没有对象。谁受伤 = 缺省空表,无人受伤 —— 设了宽规则
+     * (`mcp__<server>__*`,含那台服务器将来新增的工具)= 对**每一个租户、每一条腿**的那些调用都不再因「没人表态」而问人,风险随规则的宽度走
+     * (射程只到这一问:任何一层自己的问照旧压过它 —— 内置工具的精确名写进来,引擎的写门 / 形状层照问);补偿 = 本键就是
+     * core 7.40.0 那条收紧的补偿,deny / ask(`APPROVAL_DENY` / `APPROVAL_REQUIRE` / 请求 settings / 会话规则)照旧压过它。
+     * v1 只有 env 一个写入通道(无 config-center 座位,不进 settings-schema)。空表 = 本层不铸叶,折叠逐字与修前同。
+     */
+    approvalGrant: string[];
     /** [ref] D-G (HMAC = integrity, not identity; ✅ WIRED — the "SCAFFOLD, not yet wired" note here was STALE,
      *  corrected 2026-07-25: consumed by `verifyDirectDoorProof` → `verifyApprovalHmac`, reached from the live decide
      *  routes — the two `verifyDirectDoorProof(` call sites in `http/routes/approvals-assistant.ts`): the
@@ -2101,7 +2120,7 @@ export type ServiceStoreConfig = Pick<ServiceConfigFlat, "sessionBackend" | "ses
 export type ServiceModelPlaneConfig = Pick<ServiceConfigFlat, "gatewayBaseUrl" | "gatewayApiKey" | "gatewayFallbackUrls" | "gatewayMaxRetries" | "anthropic" | "resilience" | "model" | "envModel" | "models" | "modelApiKeyEnv" | "modelApiKeys" | "modelRefusals" | "modelQuotaWeights" | "tiers" | "projects" | "roles" | "atModelAllowlist" | "cascadeLadder" | "degrade">;
 /** 组:approval(审批 / HITL 门)。`directDoorActive` 无 env 解析腿(装配层三域合取的产物),但语义上
  *  就是本组的门状态,故进组;`parseApprovalDomain` 的返回类型相应是 `Omit<…, "directDoorActive">`。 */
-export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalHmacKeys" | "durableApproval" | "durableApprovalSource" | "streamAskWindowMsSource" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "writeProtectedPaths" | "manualModeShellGate" | "permissionsDisableAutoMode" | "autoModeClassifierFallback" | "autoModeClassifierTimeoutMs" | "crossSessionInbound" | "crossSessionDialogExpiry">;
+export type ServiceApprovalConfig = Pick<ServiceConfigFlat, "approvalRequire" | "approvalDeny" | "approvalTimeoutSec" | "approvalAutoBudget" | "approvalNeverAuto" | "approvalGrant" | "approvalHmacKeys" | "durableApproval" | "durableApprovalSource" | "streamAskWindowMsSource" | "directApprovalDoor" | "directDoorActive" | "resourceSuspend" | "resourceSuspendTtlSec" | "resourceSuspendTotalTokens" | "resourceSuspendTotalBudgetUsd" | "resourceSuspendMaxSlices" | "askQuestionEnabled" | "questionThrottle" | "toolApprovalEnabled" | "permissionRulesEnabled" | "permissionRulesEnabledExplicit" | "streamAskWindowMarginMs" | "streamApproval" | "unattendedApprovalPolicy" | "mcpElicitation" | "sensitiveWritePatterns" | "writeProtectedPaths" | "manualModeShellGate" | "permissionsDisableAutoMode" | "autoModeClassifierFallback" | "autoModeClassifierTimeoutMs" | "crossSessionInbound" | "crossSessionDialogExpiry">;
 /** 组:memory(记忆面 + TOC 同步腿)。 */
 export type ServiceMemoryConfig = Pick<ServiceConfigFlat, "memoryEngineEnabled" | "memoryEngineDir" | "memoryEngineRemoteLaneAllowed" | "memoryEngineBackend" | "memoryScope" | "memoryPersistenceCapable" | "memorySync" | "memoryEmbedder" | "memoryOrgAdmissionMode" | "memoryDelegationEvidence" | "memoryProvenance" | "memoryCapturePolicy" | "memoryConsolidationDriver" | "memoryOrgDirectoryJson" | "memoryOrgGrantTtlMs" | "memoryOrgUnavailableBackoffMs" | "projectMemoryEnabled" | "syncImportLeaseStaleSec">;
 /** 组:auth(鉴权 / 身份 / 治理棒)。`commandPolicy` 只有 sema-registry 腿(无 env 标量形),故 env 解析