@sema-agent/server 7.116.1 → 7.118.0

package/dist/approval-card.d.ts

@@ -21,7 +21,7 @@
  * 没有方法、没有捕获的行为。
  */
 import { z } from "zod";
-import { READ_ROOT_CANDIDATE_DIR_MAX, type AskClass, type AskEvidenceAbsence, type AskRequest as CoreAskRequest, type PendingAction as CorePendingAction, type ReadRootGrantCandidate, type RuleOffer } from "@sema-agent/core";
+import { ALLOW_RULE_MEMBERS, READ_ROOT_CANDIDATE_DIR_MAX, type AskClass, type AskEvidenceAbsence, type AskRequest as CoreAskRequest, type PendingAction as CorePendingAction, type ReadRootGrantCandidate, type RuleOffer, type SteerReplayFacet } from "@sema-agent/core";
 import type { AskRow } from "./plugins/approval-ask-store-sql.js";
 /** 模型自由文本(`sourceAgentName` / `delegation.agentName`)的限长(设计稿 §6.2)。设计 §3.1 把
  *  「限长 + 脱敏」写成 **server 新增责任**(引擎无此层):spawning model 挑的名字是自由文本,
@@ -81,11 +81,13 @@ export declare const RuleOfferSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"single">;
     rule: z.ZodString;
     match: z.ZodEnum<{
+        name: "name";
         path: "path";
         exact: "exact";
         prefix: "prefix";
         wildcard: "wildcard";
         subpath: "subpath";
+        name_prefix: "name_prefix";
     }>;
     command: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
@@ -94,11 +96,13 @@ export declare const RuleOfferSchema: z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"command">;
         rule: z.ZodString;
         match: z.ZodEnum<{
+            name: "name";
             path: "path";
             exact: "exact";
             prefix: "prefix";
             wildcard: "wildcard";
             subpath: "subpath";
+            name_prefix: "name_prefix";
         }>;
         command: z.ZodString;
         segment: z.ZodString;
@@ -126,7 +130,7 @@ export declare const RuleOfferSchema: z.ZodUnion<readonly [z.ZodObject<{
  * `password=…` 换成更长的遮蔽标记)。拿带 `.max()` 的形去校验**脱敏前**的原文,再脱敏,产出的就可能是
  * 一条超限的文本;而任何**回读**路径若再跑一遍同一个函数,那一条会在第二次校验时被整条丢掉 —— 于是
  * 「落库时在、读回时不在」,并且**只发生在有回读的那条腿上**(SQL 有列回读、LOCAL 直接从 blob 投),
- * 两个后端对同一份素材给出不同的卡面。同族先例逐字在 `tool-approval.ts` 的 `persistedRuleShadowed`
+ * 两个后端对同一份素材给出不同的卡面。同族先例逐字在 `tool-approval.ts` 的 `allowRuleShadowed`(7.41.x 时代叫 `persistedRuleShadowed`)
  * 发帧点(「先脱敏再截,一次算定」)。
  *
  * ⇒ 正确顺序:**结构判(本 schema)→ 脱敏 → 截长 → 结果按 {@link RuleOfferSchema} 必然合形**。
@@ -158,11 +162,13 @@ export declare const RuleOfferRawSchema: z.ZodUnion<readonly [z.ZodObject<{
     kind: z.ZodLiteral<"single">;
     rule: z.ZodString;
     match: z.ZodEnum<{
+        name: "name";
         path: "path";
         exact: "exact";
         prefix: "prefix";
         wildcard: "wildcard";
         subpath: "subpath";
+        name_prefix: "name_prefix";
     }>;
     command: z.ZodString;
 }, z.core.$strip>, z.ZodObject<{
@@ -171,11 +177,13 @@ export declare const RuleOfferRawSchema: z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"command">;
         rule: z.ZodString;
         match: z.ZodEnum<{
+            name: "name";
             path: "path";
             exact: "exact";
             prefix: "prefix";
             wildcard: "wildcard";
             subpath: "subpath";
+            name_prefix: "name_prefix";
         }>;
         command: z.ZodString;
         segment: z.ZodString;
@@ -282,7 +290,7 @@ export declare function readProbeCause(req: unknown): ProbeCauseProjection | und
  *  · 长度:超过 {@link MAX_PROBE_REASON_CODEPOINTS} ⇒ **整只丢,不截**(判据与 `probeCause.code` 超限同形);
  *    先判长度再脱敏 ⇒ 喂给脱敏器的永远是个短串(脱敏器的 RangeError 面是超大输入)。
  *  · 内容族(部署自写的探针散文,人眼信任边界上的文本)⇒ `redactSecrets`。脱敏后**不再截**:耐久面同样不截,
- *    两面逐字节同值比「帧上短一截」重要(`persistedRuleShadowed` R2-[medium] 的反面:那里有卡面要对齐,这里没有)。
+ *    两面逐字节同值比「帧上短一截」重要(allow 层披露那一格 R2-[medium] 的反面:那里有卡面要对齐,这里没有)。
  *  · 缺席 ≠「没有原因」:只有 maybe 档收紧且探针真给了 reason 的 ask 才有它。
  */
 export declare function readProbeReason(req: unknown): string | undefined;
@@ -337,6 +345,23 @@ export declare const RuleEvidenceSchema: z.ZodObject<{
     personalRuleDotsAbsent: z.ZodOptional<z.ZodCustom<AskEvidenceAbsence, AskEvidenceAbsence>>;
 }, z.core.$strict>;
 export type RuleEvidenceProjection = z.infer<typeof RuleEvidenceSchema>;
+/** 一条披露记录列出的条目上限 —— 防御值(引擎自己的上限更小,超出部分它计进 `omitted`);本层超出同样计进 `omitted`,不丢、不截条目个数以外的东西。 */
+export declare const MAX_ALLOW_RULE_SHADOW_ENTRIES = 32;
+/** 一条 allow 层披露记录的投影形(core `AllowRuleShadow` 的值形,条目已脱敏截长)。 */
+export interface AllowRuleShadowProjection {
+    member: (typeof ALLOW_RULE_MEMBERS)[number];
+    entries: string[];
+    omitted?: number;
+}
+/**
+ * `AskRequest.allowRuleShadowed`(core 7.42.0 #1327)的**边界窄读** —— 活卡帧(`ToolApprovalFrame.allowRuleShadowed`)与 `card_json`
+ * (`buildApprovalCard`)的**唯一**铸造点,两面结构性同值(与 {@link readRuleEvidence} 同款分工)。姿势:
+ *  · 整只形不合(不是数组 / 某条成员不在 core 闭集 / 条目不是字符串表 / `omitted` 不是正整数)⇒ 按缺席处置(半解上卡比缺席更坏);空数组 = 缺席;
+ *  · 条目 = 内容族 ⇒ `redactSecrets` 后截 `MAX_RULE_TEXT_CHARS`,**先脱敏再截一次算定**(redact 会变长,两面各截会漂);超过
+ *    {@link MAX_ALLOW_RULE_SHADOW_ENTRIES} 的条目计进 `omitted`(与引擎的计数相加);
+ *  · 不包 try / catch:值来自引擎(已过引擎自己的 `readAllowRuleShadows` 判形),是纯数据;一只抛错的 getter 在这里抛 = 响亮失败,不是静默缺席。
+ */
+export declare function readAllowRuleShadowed(req: unknown): AllowRuleShadowProjection[] | undefined;
 /**
  * `AskRequest.ruleEvidence`(core 5.35.0 [ref] G-2)的**边界窄读**——活卡帧(`ToolApprovalFrame.
  * ruleEvidence`)与 `card_json`(`buildApprovalCard`)的**唯一**铸造点,两面结构性同值(与
@@ -345,7 +370,7 @@ export type RuleEvidenceProjection = z.infer<typeof RuleEvidenceSchema>;
  *  · **恰一不变量**:一对成员(值 / 缺席词)**双在场** ⇒ 整只丢——那是矛盾证据(引擎盖章的恰一,
  *    双在场只可能是第三方 producer 的坏行),半解上卡比缺席更坏。双缺席**容忍**(老 producer 行)。
  *  · `orgRule` 内容族(管理员写的规则文本)⇒ `redactSecrets` 后截 `MAX_RULE_TEXT_CHARS`,**先脱敏
- *    再截一次算定**(`persistedRuleShadowed` R2-[medium] 教训:redact 会变长,两面各截会漂);空串丢整只。
+ *    再截一次算定**(allow 层披露那一格 R2-[medium] 教训:redact 会变长,两面各截会漂);空串丢整只。
  *  · `dots.actor` 身份串 ⇒ `redactSecrets`(对正常 id 恒等);超限**整只丢**(见上限顶注,身份不可截)。
  *  · `orgRevision` / 缺席词 verbatim(数值 / 闭集词,非内容)。
  */
@@ -420,7 +445,7 @@ type ToolApprovalPark = Extract<CorePendingAction, {
     kind: "tool_approval";
 }>;
 /**
- * 🔴 **闭集词座的唯一窄读**(S-721 起 `mandate`;S-755 起 `origin`)—— 一座一只 core 成员筛,**名字是参数**(与
+ * 🔴 **闭集词座的唯一窄读**(S-721 起 `mandate`;S-755 起 `origin`;S-1170 起 `classifierNoRuling` / `differs`)—— 一座一只成员筛,**名字是参数**(与
  * {@link readParkRowTrueSeat} 同一条:一处解析,不是两只各写一遍的函数)。
  *  · `mandate`(core 7.32.0 #1092)—— 一问**站在哪一个 mandate 词上**(`mandated` 说「站在强制上」,本座说是 core
  *    `PERSISTED_RULE_MANDATES` 六词里的哪一个;core 只在强制位的**整因**是那一个词时铸 —— 治理 / hook / 祖先,或不止一个理由
@@ -429,6 +454,11 @@ type ToolApprovalPark = Extract<CorePendingAction, {
  *  · `origin`(core 7.5.0 [ref] 的 park 孪生座;S-755)—— **谁提的这一问**,core `ASK_ORIGINS` 闭集一词。读者:运维队列行读寄存行
  *    孪生座 `PendingAction.tool_approval.origin`({@link parkRowFacts})。活卡帧**不经**本函数:它读引擎在门上刚盖好的
  *    `AskRequest.origin`(盖章点即 core 的筛点),照旧只过「非空串」形门(`tool-approval.ts` 帧键 `origin` 顶注)。
+ *  · `classifierNoRuling`(core 7.43.0 #1353)—— 分类器没给判词的成因词,core `AUTO_MODE_FALLBACK_CAUSES` 闭集一词(筛 = `isAutoModeFallbackCause`)。
+ *    读者:活卡帧读 `AskRequest.classifierNoRuling`(`tool-approval.ts`);inbox 行读 core `CheckpointSummary` 已筛过的同名位、直投不经本函数。
+ *  · `differs`(core 7.44.0 #1374)—— **载体是引擎拒 steer 重放那只错的 `detail`**(不是 ask 的三个载体之一),值是 core `STEER_REPLAY_FACETS` 的**非空子集**
+ *    (core:「恒非空」;筛 = 本文件 {@link isSteerReplayDiffers},成员表取 core 常量)。读者:`runs.ts` 的 409 `steering.duplicate_input_id` 体(`detail.differs`)。
+ *    集外成员 / 空数组 / 非数组 ⇒ 按缺席(不铸 `detail`,码仍是契约)+ 计一次;detail 只报形名(`differs=<array>` —— 数组从不展开成员,见 {@link outOfSetDetail})。
  *
  * 什么时候经本函数 —— 一句话:**筛点在 core;server 只在「读的是持久层原字节、中间没有 core 投影」的地方亲手调 core 的那一只筛**。
  * inbox 行读 core `CheckpointSummary.{mandate,origin}`(core `summarizeCheckpoint` 已用同一只 `isPersistedRuleMandate` / `isAskOrigin`
@@ -442,10 +472,12 @@ type ToolApprovalPark = Extract<CorePendingAction, {
  * 只读值不调用值)。
  */
 export declare function readClosedWordSeat<S extends ClosedWordSeat>(carrier: object, seat: S): ClosedWordOf<S> | undefined;
-/** 闭集词座的名:三个 core 载体上**同名**(`AskRequest` / 寄存行 `tool_approval` 臂 / `CheckpointSummary`)—— 任一处改名 / 退役 ⇒ 下面的围栏编译红。 */
-type ClosedWordSeat = "mandate" | "origin";
-/** 一座的值型 = core 寄存行上那一座的型(去掉可选位的 `undefined`)。 */
-type ClosedWordOf<S extends ClosedWordSeat> = NonNullable<ToolApprovalPark[S]>;
+/** ask 载体上的闭集词座名:三个 core 载体上**同名**(`AskRequest` / 寄存行 `tool_approval` 臂 / `CheckpointSummary`)—— 任一处改名 / 退役 ⇒ 下面的围栏编译红。 */
+type AskClosedWordSeat = "mandate" | "origin" | "classifierNoRuling";
+/** 闭集词座的名 = ask 载体上的三座 + 引擎拒 steer 重放那只错的 `detail.differs`(载体不同、读法同一只)。 */
+type ClosedWordSeat = AskClosedWordSeat | "differs";
+/** 一座的值型:ask 三座 = core 寄存行上那一座的型(去掉可选位的 `undefined`);`differs` = core 闭集 `SteerReplayFacet` 的数组(core `detail.differs` 的型)。 */
+type ClosedWordOf<S extends ClosedWordSeat> = S extends AskClosedWordSeat ? NonNullable<ToolApprovalPark[S]> : readonly SteerReplayFacet[];
 /**
  * 🔴 **S-934 ②(core 7.37.0 #1214)—— ask 类对的唯一窄读**:`askClass`(一问的类 = `classes` 的首员)与 `classes`(这一问属于的全部类,core
  * `ASK_CLASSES` 序)。三个载体上同名:`AskRequest`(活卡帧 / 呈卡帧的卡读它)、寄存行 `PendingAction.tool_approval`(运维队列行经
@@ -568,16 +600,28 @@ export declare const ApprovalCardSchema: z.ZodObject<{
     governanceForced: z.ZodOptional<z.ZodLiteral<true>>;
     rememberRefused: z.ZodOptional<z.ZodLiteral<true>>;
     inputHasBidi: z.ZodOptional<z.ZodLiteral<true>>;
-    persistedRuleShadowed: z.ZodOptional<z.ZodString>;
+    allowRuleShadowed: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        member: z.ZodEnum<{
+            hook: "hook";
+            skill: "skill";
+            deployment: "deployment";
+            request: "request";
+            persisted: "persisted";
+        }>;
+        entries: z.ZodArray<z.ZodString>;
+        omitted: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>>;
     ruleOffers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         kind: z.ZodLiteral<"single">;
         rule: z.ZodString;
         match: z.ZodEnum<{
+            name: "name";
             path: "path";
             exact: "exact";
             prefix: "prefix";
             wildcard: "wildcard";
             subpath: "subpath";
+            name_prefix: "name_prefix";
         }>;
         command: z.ZodString;
     }, z.core.$strict>, z.ZodObject<{
@@ -586,11 +630,13 @@ export declare const ApprovalCardSchema: z.ZodObject<{
             kind: z.ZodLiteral<"command">;
             rule: z.ZodString;
             match: z.ZodEnum<{
+                name: "name";
                 path: "path";
                 exact: "exact";
                 prefix: "prefix";
                 wildcard: "wildcard";
                 subpath: "subpath";
+                name_prefix: "name_prefix";
             }>;
             command: z.ZodString;
             segment: z.ZodString;
@@ -649,8 +695,8 @@ export declare const ApprovalCardSchema: z.ZodObject<{
         }, z.core.$strict>>>;
         personalRuleDotsAbsent: z.ZodOptional<z.ZodCustom<AskEvidenceAbsence, AskEvidenceAbsence>>;
     }, z.core.$strict>>;
-    askClass: z.ZodOptional<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>;
-    classes: z.ZodOptional<z.ZodArray<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>>;
+    askClass: z.ZodOptional<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>;
+    classes: z.ZodOptional<z.ZodArray<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>>;
     fromSubagent: z.ZodOptional<z.ZodLiteral<true>>;
     sourceTaskId: z.ZodOptional<z.ZodString>;
     sourceAgentName: z.ZodOptional<z.ZodString>;
@@ -684,16 +730,28 @@ export declare const ApprovalCardEnvelopeSchema: z.ZodObject<{
         governanceForced: z.ZodOptional<z.ZodLiteral<true>>;
         rememberRefused: z.ZodOptional<z.ZodLiteral<true>>;
         inputHasBidi: z.ZodOptional<z.ZodLiteral<true>>;
-        persistedRuleShadowed: z.ZodOptional<z.ZodString>;
+        allowRuleShadowed: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            member: z.ZodEnum<{
+                hook: "hook";
+                skill: "skill";
+                deployment: "deployment";
+                request: "request";
+                persisted: "persisted";
+            }>;
+            entries: z.ZodArray<z.ZodString>;
+            omitted: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
         ruleOffers: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
             kind: z.ZodLiteral<"single">;
             rule: z.ZodString;
             match: z.ZodEnum<{
+                name: "name";
                 path: "path";
                 exact: "exact";
                 prefix: "prefix";
                 wildcard: "wildcard";
                 subpath: "subpath";
+                name_prefix: "name_prefix";
             }>;
             command: z.ZodString;
         }, z.core.$strict>, z.ZodObject<{
@@ -702,11 +760,13 @@ export declare const ApprovalCardEnvelopeSchema: z.ZodObject<{
                 kind: z.ZodLiteral<"command">;
                 rule: z.ZodString;
                 match: z.ZodEnum<{
+                    name: "name";
                     path: "path";
                     exact: "exact";
                     prefix: "prefix";
                     wildcard: "wildcard";
                     subpath: "subpath";
+                    name_prefix: "name_prefix";
                 }>;
                 command: z.ZodString;
                 segment: z.ZodString;
@@ -765,8 +825,8 @@ export declare const ApprovalCardEnvelopeSchema: z.ZodObject<{
             }, z.core.$strict>>>;
             personalRuleDotsAbsent: z.ZodOptional<z.ZodCustom<AskEvidenceAbsence, AskEvidenceAbsence>>;
         }, z.core.$strict>>;
-        askClass: z.ZodOptional<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>;
-        classes: z.ZodOptional<z.ZodArray<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>>;
+        askClass: z.ZodOptional<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>;
+        classes: z.ZodOptional<z.ZodArray<z.ZodCustom<"mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary", "mode" | "hook" | "org_rule" | "write_protection" | "write_protection_unresolved" | "content_question" | "ask_rule" | "denial_limit_fallback" | "ancestor" | "unverifiable_delete" | "transcript_write" | "governance_unavailable" | "rule_unreadable" | "classifier_no_ruling" | "requires_user_interaction" | "operator_forced" | "shell_floor" | "probe" | "tool_marks_mcp" | "tool_marks_a2a" | "policy_rra" | "artifact_shared_read" | "unstated" | "ordinary">>>;
         fromSubagent: z.ZodOptional<z.ZodLiteral<true>>;
         sourceTaskId: z.ZodOptional<z.ZodString>;
         sourceAgentName: z.ZodOptional<z.ZodString>;
@@ -807,9 +867,6 @@ export interface ApprovalCardSource {
     /** E-14:bidi 在场位 —— 与 wire 帧**同一份素材**(`ToolApprovalFrame` 结构上满足本接口)⇒ live 帧 /
      *  `approval_request` / `card_json` / 重放帧四面同源,不是四处各扫一遍。 */
     inputHasBidi?: true;
-    /** [ref](core 5.25.0):被越级的持久规则原文 —— **已 redactSecrets**(发帧点做,本模块只 clip)。
-     *  与 wire 帧**同一份素材**(`ToolApprovalFrame` 结构上满足本接口)⇒ live 帧 / `card_json` / 重放帧三面同源。 */
-    persistedRuleShadowed?: string;
     /** [ref](core 5.58.0):引擎铸的「不再询问」OFFER(**只在规则店装配时**由发帧点填;语义与在场性契约见
      *  `ApprovalCardSchema.ruleOffers`)。与 wire 帧**同一份素材** ⇒ live 帧 / `card_json` / 重放帧
      *  三面同源。 */
@@ -942,6 +999,13 @@ export declare function buildRevokeFrame(batchId: string, askIds: readonly strin
  *    竞争者;收敛是车2 的窗到期竞争者与车5 恢复扫描的职责)。
  */
 export declare function buildReplayFrame(row: AskRow, nowMs: number): ApprovalRequestFrame | undefined;
+/**
+ * S-1154 —— 持久行上那张卡**要不要人**:卡面 `risk.requiresRealApproval`(铸卡时取自引擎在 `AskRequest` 上盖的同一位,
+ * {@link buildApprovalCard} 第三参)。读者 = 耐久 ask 回决口在裁决之前判「策略的放行」(`host-decision.ts` 的 `policyCannotAllow`)。
+ * 🔴 读不出卡(`card_json` 形不合)⇒ **按要人读**(fail-closed):这一位只用来**拒**策略的放行,读坏的行上拒一次可以改成人答 / 策略拒
+ * 再来;反方向(读坏当不要人)会让一次引擎终将拒掉的放行先落成一条宣称 approve 的行。
+ */
+export declare function storedCardDemandsAPerson(cardJson: unknown): boolean;
 /** {@link buildApprovalPreamble} 的返回形——帧 + 两个**计数**(调用方按自己的 logger 记 warn;本模块
  *  保持纯函数,不吃 logger:那会让一个 `build*` 捕获行为)。 */
 export interface ApprovalPreamble {

package/dist/approval-card.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { ASK_EVIDENCE_ABSENCE_VALUES, MAX_RULE_TEXT_CHARS, READ_ROOT_CANDIDATE_DIR_MAX, isAskClass, isAskOrigin, isPersistedRuleMandate, screenAskClassMembers } from "@sema-agent/core";
+import { ALLOW_RULE_MEMBERS, ASK_EVIDENCE_ABSENCE_VALUES, MAX_RULE_TEXT_CHARS, READ_ROOT_CANDIDATE_DIR_MAX, STEER_REPLAY_FACETS, isAskClass, isAskOrigin, isAutoModeFallbackCause, isPersistedRuleMandate, screenAskClassMembers } from "@sema-agent/core";
 import { redactSecrets } from "./trace/redact.js";
 import { recordFailOpen } from "./observability/fail-open.js";
 import { PERSISTED_RULE_MATCHES, UNCOVERED_SEGMENT_REASONS } from "./permission-rule-vocab.js";
@@ -211,6 +211,28 @@ const RuleEvidenceEnvelopeSchema = z.object({
     })
         .optional(),
 });
+export const MAX_ALLOW_RULE_SHADOW_ENTRIES = 32;
+const ALLOW_RULE_MEMBER_SET = new Set(ALLOW_RULE_MEMBERS);
+export function readAllowRuleShadowed(req) {
+    const raw = req !== null && typeof req === "object" ? req.allowRuleShadowed : undefined;
+    if (!Array.isArray(raw) || raw.length === 0 || raw.length > ALLOW_RULE_MEMBERS.length)
+        return undefined;
+    const list = raw;
+    const out = [];
+    for (const r of list) {
+        if (r === null || typeof r !== "object")
+            return undefined;
+        const { member, entries, omitted } = r;
+        if (!ALLOW_RULE_MEMBER_SET.has(member) || !Array.isArray(entries) || !entries.every((e) => typeof e === "string"))
+            return undefined;
+        if (omitted !== undefined && !(typeof omitted === "number" && Number.isInteger(omitted) && omitted > 0))
+            return undefined;
+        const shown = entries.slice(0, MAX_ALLOW_RULE_SHADOW_ENTRIES).map((e) => redactSecrets(e).slice(0, MAX_RULE_TEXT_CHARS));
+        const extra = entries.length - shown.length + (omitted ?? 0);
+        out.push({ member: member, entries: shown, ...(extra > 0 ? { omitted: extra } : {}) });
+    }
+    return out;
+}
 export function readRuleEvidence(req) {
     const parsed = RuleEvidenceEnvelopeSchema.safeParse(req);
     const raw = parsed.success ? parsed.data.ruleEvidence : undefined;
@@ -292,9 +314,15 @@ export function readClosedWordSeat(carrier, seat) {
     recordFailOpen("server.approval-card.closed-word-out-of-set", `${seat}=${outOfSetDetail(raw)}`);
     return undefined;
 }
+function isSteerReplayDiffers(v) {
+    const facets = STEER_REPLAY_FACETS;
+    return Array.isArray(v) && v.length > 0 && v.every((f) => facets.includes(f));
+}
 const CLOSED_WORD_SEAT_GUARDS = {
     mandate: isPersistedRuleMandate,
     origin: isAskOrigin,
+    classifierNoRuling: isAutoModeFallbackCause,
+    differs: isSteerReplayDiffers,
 };
 export function readAskClassPair(carrier) {
     const askClass = "askClass" in carrier ? carrier.askClass : undefined;
@@ -356,7 +384,17 @@ export const ApprovalCardSchema = z
     governanceForced: z.literal(true).optional(),
     rememberRefused: z.literal(true).optional(),
     inputHasBidi: z.literal(true).optional(),
-    persistedRuleShadowed: z.string().max(MAX_RULE_TEXT_CHARS).optional(),
+    allowRuleShadowed: z
+        .array(z
+        .object({
+        member: z.enum(ALLOW_RULE_MEMBERS),
+        entries: z.array(z.string().max(MAX_RULE_TEXT_CHARS)).max(MAX_ALLOW_RULE_SHADOW_ENTRIES),
+        omitted: z.number().int().positive().optional(),
+    })
+        .strict())
+        .min(1)
+        .max(ALLOW_RULE_MEMBERS.length)
+        .optional(),
     ruleOffers: z.array(RuleOfferSchema).max(MAX_RULE_OFFERS).optional(),
     ruleOffersAbsence: RuleOffersAbsenceSchema.optional(),
     denialLimitFallback: DenialLimitFallbackSchema.optional(),
@@ -416,7 +454,7 @@ export function buildApprovalCard(source, req, requiresRealApproval) {
     const toolCallId = clip(source.toolCallId, MAX_IDENT);
     const sourceTaskId = clip(source.sourceTaskId, MAX_IDENT);
     const sourceAgentName = clip(source.sourceAgentName, MAX_AGENT_NAME);
-    const shadowedRule = clip(source.persistedRuleShadowed, MAX_RULE_TEXT_CHARS);
+    const allowRuleShadowed = readAllowRuleShadowed(req);
     return {
         toolName: clip(source.toolName, MAX_IDENT) ?? "",
         message: clip(source.message, MAX_MESSAGE) ?? "",
@@ -430,7 +468,7 @@ export function buildApprovalCard(source, req, requiresRealApproval) {
         ...(source.governanceForced === true ? { governanceForced: true } : {}),
         ...(source.rememberRefused === true ? { rememberRefused: true } : {}),
         ...(source.inputHasBidi === true ? { inputHasBidi: true } : {}),
-        ...(shadowedRule !== undefined && shadowedRule !== "" ? { persistedRuleShadowed: shadowedRule } : {}),
+        ...(allowRuleShadowed !== undefined ? { allowRuleShadowed } : {}),
         ...(probeCause !== undefined ? { probeCause } : {}),
         ...(ruleEvidence !== undefined ? { ruleEvidence } : {}),
         ...(source.ruleOffers !== undefined && source.ruleOffers.length > 0 ? { ruleOffers: source.ruleOffers.map(copyRuleOffer) } : {}),
@@ -488,6 +526,10 @@ export function buildReplayFrame(row, nowMs) {
         approvalId: parsed.data.approvalId,
     };
 }
+export function storedCardDemandsAPerson(cardJson) {
+    const parsed = ApprovalCardEnvelopeSchema.safeParse(cardJson);
+    return !parsed.success || parsed.data.card.risk.requiresRealApproval;
+}
 export function buildApprovalPreamble(rows, nowMs, replayMax) {
     const frames = [];
     let skipped = 0;

package/dist/approval.d.ts

@@ -52,7 +52,7 @@ export declare function singleUserAutoAcceptBaselineApplies(config: GateIntentVi
     readonly requirePrincipal: boolean;
 }): boolean;
 /**
- * 门意图**不可服务**的判据 —— 返回拒因(可服务 ⇒ `undefined`)。**全仓唯一一份**,两处调用、处置不同:
+ * 门意图**不可服务**的判据 —— 返回拒因(可服务 ⇒ `undefined`)。**全仓唯一一份**,三处调用、处置不同:
  *  · **boot**(`boot/stage-07-capability-layer.ts`):对装配完的整份 config 判,拒因 ⇒ **拒启**(全窗复审 D3-F1,
  *    HIGH;与 env 墓碑族同谱系)。v4.3.0 的轮询门形(APPROVAL_REQUIRE + DB backend + DURABLE_APPROVAL 未设)在
  *    5.0.0 只剩 core 每任务 warn——**原先拦、现在放**(方向反转)。「留 undefined 让 core warn」对新配置是
@@ -60,6 +60,9 @@ export declare function singleUserAutoAcceptBaselineApplies(config: GateIntentVi
  *  · **热路径**(S-668 波 2 ④,`config-center/apply-effective.ts` 的审批组 stage):对**候选视图**
  *    (活配置 + 候选名单)判,拒因 ⇒ 审批组**整组拒**、活配置零变化、世代账停旧代。进程在跑,拒启不是选项;
  *    而放行一份「没有 checkpoint 店可停车」的名单 = 单用户 auto-accept 基线仍在、名单静默不生效。
+ *  · **每个任务的装配**(S-1144,`boot/resolve-spec.ts` 的 `resolveSpec` 头一道):对**活配置**判,拒因 ⇒ 请求 501
+ *    `capability.checkpoint_store_required`。部署形到不了(boot 已拒启);可达的是嵌入方装配 / 直调 `resolveSpec`(自己递 ctx、没经 stage-07)。
+ *    修前这一形把审批基线静默铸成 `undefined`,请求的 allow 清「普通问」后任务零卡落盘 —— 同一条规则在起服层拒、在装配层静默 = 一事两读。
  * `checkpointStorePresent` 是**部署事实**(本进程建没建出 checkpoint 店),不在 `ServiceConfig` 里 ⇒ 调用方显式递。
  * 放这文件与 hasOperatorGateIntent/inv#2 同源(意图判据再漂要同时改两段)。
  */
@@ -134,17 +137,6 @@ export interface DurableAskOptions {
     deny?: string[];
     autoBudget?: number;
     neverAuto?: string[];
-    /** Per-session approval-exemption probe ("本会话不再询问"): consulted ONLY for require-listed
-     *  tools, AFTER deny/neverAuto (both always win) and BEFORE the budget path. Canonical-space toolName.
-     *  A rejected promise is treated as NOT exempt (fail-closed → ask) at the call site below.
-     *  🔴 S-877 候裁 16:会话授权**两个读位、一只店、按问句的作者分**(收车档 ⑩ 16):本探针兑现**本仓自己的问**(名单门)
-     *  —— 在它自己的层上「不问」,于是委派子代经父约束链继承到的同一问也不问;引擎自装的问(模式写门 / 形状层)由审批席
-     *  (`ToolApprovalCoordinator.standingGrantSettles`)兑现。本探针**不能**退役:子代的继承问到达祖先审批席时 core 盖
-     *  `mandated`(`ruleClearanceOf` 的 inheritedUnresolved / ancestorResolved 门),席的判据依约不退役它 —— 只有本层的
-     *  「不问」够得着继承链(钉 test/parked-decide-leg.test.ts「[候裁② 修]remember 全链行为」)。 */
-    exempt?: (canonicalToolName: string) => Promise<boolean>;
-    /** Audit hook — fired when an exemption short-circuits the ask (the `approval_exempted` log line). */
-    onExempted?: (canonicalToolName: string, rawToolName: string) => void;
 }
 export declare function createDurableAskPolicy(opts: DurableAskOptions): ToolPolicy;
 //# sourceMappingURL=approval.d.ts.map

package/dist/approval.js

@@ -4,7 +4,6 @@ import { ASK_USER_QUESTION_TOOL_NAME } from "./approval-content-kind.js";
 import { isExplicitPosture } from "./posture-source.js";
 import { handsOnWorkerFilePlane } from "./execution-lane-caps.js";
 import { heldRuleName } from "./tool-rule-names.js";
-import { answerGrantsBeyondCall } from "./standing-answer-grant.js";
 export function hasApprovalListIntent(config) {
     return (config.approvalRequire.length > 0 ||
         config.approvalDeny.length > 0 ||
@@ -93,33 +92,12 @@ export function createDurableAskPolicy(opts) {
             if (neverAutoHit !== undefined)
                 return operatorAlwaysHumanAsk(`APPROVAL_NEVER_AUTO(${neverAutoHit})`, `human approval required to run "${req.toolName}"`);
             const requireHit = heldRuleName(req, require);
-            if (requireHit !== undefined) {
-                const remEarly = req.budget?.resourceRemainingMicroUsd;
-                if (remEarly !== undefined && remEarly <= 0) {
-                    return operatorAlwaysHumanAsk("RESOURCE_SUSPEND budget exhausted", `durable resource budget exhausted — human approval required to run "${req.toolName}"`);
-                }
-                if (opts.exempt && heldRuleName(req, isQuestionTool) === undefined && !answerGrantsBeyondCall(req)) {
-                    return (async () => {
-                        let exempted = false;
-                        try {
-                            exempted = (await opts.exempt(req.toolName)) === true;
-                        }
-                        catch {
-                            exempted = false;
-                        }
-                        if (exempted) {
-                            opts.onExempted?.(req.toolName, req.toolName);
-                            return grantedByRule();
-                        }
-                        return decideRequired(req, requireHit);
-                    })();
-                }
-                return decideRequired(req, requireHit);
-            }
+            if (requireHit !== undefined)
+                return decideRequired(req, operatorAsk(`APPROVAL_REQUIRE(${requireHit})`, `approval required to run "${req.toolName}"`));
             return { action: "allow" };
         },
     };
-    function decideRequired(req, requireHit) {
+    function decideRequired(req, ask) {
         const rem = req.budget?.resourceRemainingMicroUsd;
         if (rem !== undefined && rem <= 0) {
             return operatorAlwaysHumanAsk("RESOURCE_SUSPEND budget exhausted", `durable resource budget exhausted — human approval required to run "${req.toolName}"`);
@@ -128,7 +106,7 @@ export function createDurableAskPolicy(opts) {
             autoApproved++;
             return grantedByRule();
         }
-        return operatorAsk(`APPROVAL_REQUIRE(${requireHit})`, `approval required to run "${req.toolName}"`);
+        return ask;
     }
 }
 //# sourceMappingURL=approval.js.map

package/dist/boot/budget-tracing.js

@@ -1,4 +1,4 @@
-import { createBrain, createDegradeRouteWatch } from "../brain.js";
+import { createBrainAssembly } from "../brain.js";
 import { ModelUsageTracker, PromptManifestTracker, buildPricing, createSideQueryAccountant, createTracer } from "../budget.js";
 import { FleetUsageAccumulator } from "../fleet-client.js";
 import { createFleetLeaseFromEnv } from "../fleet-lease.js";
@@ -8,8 +8,7 @@ import { buildQuotaBounds } from "./limit-sync.js";
 import { assembleFileHistory } from "../file-history-capture.js";
 export function createBudgetAndTracing(ctx) {
     const { config, logger, metrics, backend, breakerState } = ctx;
-    const brain = createBrain(config, { breakerState });
-    const degradeRouteWatch = createDegradeRouteWatch(config);
+    const { brain, degradeRoute: degradeRouteWatch } = createBrainAssembly(config, { breakerState });
     const pricing = buildPricing(config.models);
     const counterDegradeHook = (info) => {
         metrics.setGauge("counter_flush_fail_streak", info.streak, { table: info.table, kind: info.kind });

package/dist/boot/config-center.d.ts

@@ -63,8 +63,8 @@ export interface ConfigCenterRuntime {
      *  CLI 之后不再有刷新拍,它继续用纯判据判一次)。
      *  `consolidationSeat`(S-668 波 0,过渡)= 整理驱动席的两侧读数口,喂 `memory-consolidation` 重启片;
      *  缺席 = 阀门关着(没有 boot 烤死的席)。
-     *  `degradeRoute`(S-794,**必填**)= 反应式降级壳的两侧读数口(brain.ts `createDegradeRouteWatch`,与 createBrain 同一时刻
-     *  捕获),喂 `degrade-route` 重启片。必填而不是可选:车道没开 / 没焊壳由席自己答「两侧同为 null」,缺席没有合法含义 ——
+     *  `degradeRoute`(S-794,**必填**)= 反应式降级壳的两侧读数口(brain.ts `createBrainAssembly` 的产物 `degradeRoute`,`baked` 在焊壳处
+     *  算好随装配交出),喂 `degrade-route` 重启片。必填而不是可选:车道没开 / 没焊壳由席自己答「两侧同为 null」,缺席没有合法含义 ——
      *  可选就是一条「接线漏了 ⇒ 片永远不签」的静默路([ref])。
      *  `checkpointStorePresent`(S-668 波 2,**必填**)= 部署事实「本进程建没建出 checkpoint 店」(stage-06 的产物,
      *  不在 ServiceConfig 里)。审批名单转热之后,热腿要用它判 ④「门意图不可服务」(与 boot 拒启同一只判据);

package/dist/boot/config-center.js

@@ -19,7 +19,7 @@ import { centerManagedConfigKeys } from "../config-center/apply-effective.js";
 import { createConfigProvider, raceBootFetch, serviceConfigSourceKind, BOOT_FETCH_DEFERRED } from "../config-provider.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { buildSealedKeyPublicFace, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
-import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, bootSnapshotOf, fullyLandedForLkg, fetchPromptArtifact } from "../config-center/facade.js";
+import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, fetchPromptArtifact } from "../config-center/facade.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../config-center/mcp-revocation.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../config-center/apply-ledger.js";
@@ -422,7 +422,7 @@ export async function createConfigCenterRuntime(ctx) {
             const lkgPlane = modelPlaneCommitted(lkgReport);
             if (lkgPlane)
                 markRosterLanded(lkgR.effective);
-            effective = bootSnapshotOf(lkgR.effective, lkgPlane ? lkgR.effective : undefined);
+            effective = lkgR.effective;
             if (lkgPlane)
                 appliedPlaneEff = lkgR.effective;
             if (fullyLandedForLkg(lkgR, lkgReport)) {
@@ -504,7 +504,7 @@ export async function createConfigCenterRuntime(ctx) {
                     }
                     if (bootPlaneEff !== undefined)
                         markRosterLanded(bootPlaneEff);
-                    effective = bootSnapshotOf(r.effective, bootPlaneEff);
+                    effective = r.effective;
                     if (bootPlaneEff !== undefined)
                         appliedPlaneEff = bootPlaneEff;
                     if (bootClean)
@@ -858,8 +858,7 @@ export async function createConfigCenterRuntime(ctx) {
                                 await adoptCenterPrompts(r.effective, "refresh");
                                 if (tickPlane)
                                     markRosterLanded(r.effective);
-                                const fullyApplied = applyReport?.fullyApplied !== false;
-                                if (!fullyApplied) {
+                                if (!fullyLandedForLkg(r, applyReport)) {
                                     ccEtag = undefined;
                                     const refused = applyReport ? refusedGroups(applyReport) : [];
                                     logger.warn("config_candidate_partially_applied", {
@@ -972,8 +971,7 @@ export async function createConfigCenterRuntime(ctx) {
                     await adoptCenterPrompts(r.effective, "boot-deferred");
                     if (latePlane)
                         markRosterLanded(r.effective);
-                    const fullyAppliedLate = applyReportLate?.fullyApplied !== false;
-                    if (!fullyAppliedLate) {
+                    if (!fullyLandedForLkg(r, applyReportLate)) {
                         ccEtag = undefined;
                         const refusedLate = applyReportLate ? refusedGroups(applyReportLate) : [];
                         logger.warn("config_candidate_partially_applied", {

package/dist/boot/parked-revive-gate.d.ts

@@ -11,10 +11,6 @@ export interface ParkedReviveGateConfigView extends DeploymentGovernanceConfigVi
     /** host 腿裁决 env 的 cwd 占位根(见下方 `hostGateCwd`)。 */
     readonly localDataRoot?: ServiceConfig["localDataRoot"];
 }
-/** 会话豁免探针店的所需切面(canonical toolName 键空间;`StoreBackend.approvalExemption()` 结构满足)。 */
-export interface ApprovalExemptionProbe {
-    has(sessionId: string, toolName: string): Promise<boolean>;
-}
 export interface ParkedReviveGateDeps {
     /** ⚠️ **活引用**:热改字段(autonomy/commandPolicy/守卫集/审批四旋钮)每次赎回现读,见下方「禁 memoize」。 */
     readonly config: ParkedReviveGateConfigView;
@@ -47,7 +43,6 @@ export interface ParkedReviveGateDeps {
      *    headless auto-deny,比「再问人一次」严且哑。交了之后最坏也是 park,方向 fail-safe。
      */
     readonly approverSeat: RunnerDepsOnAsk | undefined;
-    readonly approvalExemptionStore: ApprovalExemptionProbe | undefined;
     /**
      * [ref] —— core `RunnerDeps.runtimeCapsResolver` 的**同一只**(main.ts 的 `runtimeCapsResolver`,
      * 单一属主同 `boot/runtime-caps.ts`)。重建条目的第三位决议链元数据 `autoModeArmed` 的唯一判据是
@@ -69,7 +64,6 @@ export interface ParkedReviveGateDeps {
      *  这一座可改读它 —— 接线不在本次提货单内,见 7.106.0 收车档「未闭环」。 */
     readonly parentAutoModeIntent?: ((row: BackgroundAgentRecord) => boolean) | undefined;
     readonly logger: {
-        info(event: string, fields?: Record<string, unknown>): void;
         warn(event: string, fields?: Record<string, unknown>): void;
     };
     /** host 腿 cwd 占位的落地根(main.ts 的 `localRoot`;`config.localDataRoot` 优先)。 */
@@ -96,7 +90,7 @@ export type RebuiltParentConstraint = NonNullable<RebuiltInheritedGate["parentCo
  * 赎回腿的父约束链重建([ref] 件二)。
  *
  * 语义:**同/跨副本一致地重建「部署 ⊇ 操作员」两层完整链**——审批基线(durable question 门 + F4 高危写
- * 审批门 + 会话豁免探针)作 base 的 `toolPolicy` 座,经**折叠属主** `applyRuntimeGovernance`
+ * 审批门)作 base 的 `toolPolicy` 座,经**折叠属主** `applyRuntimeGovernance`
  * (→ core `tightenTaskSpec`)叠上部署治理段(autonomy / commandPolicy / MANUAL_MODE_SHELL_GATE /
  * 守卫集),取其 `toolPolicy` 装进单层 `parentConstraints`。
  *