@sema-agent/server 7.122.0 → 7.124.0

package/dist/http/routes/runs.js

@@ -18,6 +18,7 @@ import { buildApprovalPreamble, buildApprovalPreambleSseFrames, readClosedWordSe
 import { heldAskOf, liveSettledBy, readDecidedBy, retiredDecisionKeyFacts, DECIDED_BY_NOT_IN_PROOF, DECIDED_BY_OUTSIDE_CLOSED_SET, POLICY_CANNOT_ALLOW_PERSON_ASK } from "../../host-decision.js";
 import { ASK_DECISION_CONSUMER_ABSENT, outcomeOfDecidedRow, resolveStreamApprovalGate } from "../../tool-approval.js";
 import { MAX_DECISION_NOTE_CHARS } from "../../approval-ask-machine.js";
+import { causeOfAskRow } from "../../approval-deny-reasons.js";
 import { normalizeRunEventType, screenedStoredEventData } from "../../trace/project.js";
 import { sendJson, sendError, httpErrorCode, sseHeaders } from "../send.js";
 import { readTurnActivityMs } from "../../turn-activity.js";
@@ -34,6 +35,7 @@ import { RUN_NOT_FOUND_MESSAGE, runNotFoundMessage } from "../route-ctx.js";
 import { withPrincipal } from "../../observability/principal-context.js";
 import { readResumeCtx } from "../resume-ctx-read.js";
 import { storedBodyReplayAnswer, storedBodyReplayLogFields } from "../checkpoint-ctx.js";
+import { serviceVersion } from "../../service-version.js";
 import { storedBodyReplayRefusal } from "../stored-body-replay.js";
 const STEER_PRIORITY_WORDS = INJECTION_TIERS.map((tier) => `'${tier}'`);
 const STEER_PRIORITY_UNION = STEER_PRIORITY_WORDS.join(" | ");
@@ -709,7 +711,7 @@ export async function handleRuns(req, res, match, ctx) {
             }
             if (mintResult.unservable !== undefined) {
                 deps.logger?.warn?.("steer_wake_park_refused_stored_body", { taskId, sessionId: run.sessionId, ...storedBodyReplayLogFields(mintResult.unservable) });
-                const { status, body: { error, errorCode, ...rest } } = storedBodyReplayAnswer(mintResult.unservable);
+                const { status, body: { error, errorCode, ...rest } } = storedBodyReplayAnswer(mintResult.unservable, serviceVersion());
                 sendError(res, status, errorCode, error, rest);
                 return;
             }
@@ -1485,12 +1487,14 @@ export async function handleRunVerbs(req, res, match, ctx) {
                     });
                     return;
                 case "DENIED":
-                case "VOID":
-                    sendError(res, 410, "gone.ask", "this ask reached a terminal state without a human decision (deniedReason says why: a routing failure, a cancellation or batch abort, or the process that held it ended) and can no longer be decided", {
+                case "VOID": {
+                    const rowCause = causeOfAskRow(row);
+                    sendError(res, 410, "gone.ask", "this ask reached a terminal state without a human decision (cause says why: a routing failure, a cancellation or batch withdrawal or abort, or the process that held it ended) and can no longer be decided", {
                         state: row.state,
-                        ...(row.deniedReason !== null ? { deniedReason: row.deniedReason } : {}),
+                        ...(rowCause?.kind === "ending" ? { cause: rowCause.cause } : {}),
                     });
                     return;
+                }
                 case "PARKING":
                     res.setHeader("retry-after", String(ASK_PARKING_RETRY_AFTER_SEC));
                     sendError(res, 425, "parking.ask_retry", "this ask is mid-park — retrying tells you where it finally landed; a retry does NOT queue this decision for acceptance", {

package/dist/http/routes/sessions-list.js

@@ -127,7 +127,8 @@ async function handleSessionList(res, lister, query, forceOwner, includeUnowned
     const nextCursor = hasMore && last ? encodeSessionCursor({ lastActivityAt: last.lastActivityAt, sessionId: last.sessionId }, f) : undefined;
     const sessions = page.map((r) => {
         const tempo = sessionTempoOfRunStatus(r.lastStatus);
-        return tempo === undefined ? r : { ...r, tempo };
+        const row = r.objectivePreview === "" ? { ...r, objectivePreview: null } : r;
+        return tempo === undefined ? row : { ...row, tempo };
     });
     sendJson(res, 200, { sessions, ...(nextCursor ? { nextCursor } : {}) });
 }

package/dist/http/routes/sessions.js

@@ -1,5 +1,5 @@
 import { SessionError, materializeA2aTools, materializeMcpTools, sanitizePathComponent } from "@sema-agent/core";
-import { a2aForScenario, mcpForScenario } from "../../config-center/facade.js";
+import { a2aForScenario, mcpForScenario } from "../../web-admin-client/facade.js";
 import { isUuidV7, isUuidShape, legacyUnownedSessionOk } from "../../security.js";
 import { windowMessages, truncateMessageBlobs, redactSessionViewForRead } from "../../audit.js";
 import { redactSecrets } from "../../trace/redact.js";
@@ -794,15 +794,12 @@ export async function handleSessions(req, res, match, ctx) {
                     case "not-an-object":
                         sendError(res, 400, "request.body_shape", describeSessionPermissionRulesProblem(read.problem));
                         return;
-                    case "field-not-string-array":
+                    case "field-not-rule-list":
                         sendError(res, 400, "request.field_invalid", describeSessionPermissionRulesProblem(read.problem));
                         return;
                     case "legacy-tool-name":
                         sendError(res, 400, "rules.legacy_tool_name", describeSessionPermissionRulesProblem(read.problem), { ...read.problem.refusal });
                         return;
-                    case "unreachable-tool-name":
-                        sendError(res, 400, "request.field_invalid", describeSessionPermissionRulesProblem(read.problem));
-                        return;
                     default: {
                         const unhandled = read.problem;
                         throw new Error(`unhandled SessionPermissionRules problem: ${JSON.stringify(unhandled)}`);

package/dist/http/routes/side-query.js

@@ -1,6 +1,6 @@
 import { expandTiers, isThinkingLevel } from "@sema-agent/core";
 import { HttpError } from "../../security.js";
-import { isModelAllowlisted, matchCatalogModel, refusedCatalogEntry, selectableCatalog } from "../../model-select.js";
+import { isAtMentionable, matchCatalogModel, refusedCatalogEntry, selectableCatalog } from "../../model-select.js";
 import { modelUnavailableMessage } from "../../model-entry-refusal.js";
 import { redactSecrets } from "../../trace/redact.js";
 import { admitProviderEcho, redactErrorMessage } from "../../observability/run-terminal.js";
@@ -88,8 +88,8 @@ export async function handleSideQuery(req, res, match, ctx) {
                         sendError(res, 400, "request.model_unavailable", message);
                         return;
                     }
-                    if (!isModelAllowlisted(body.model, catalog, deps.config.atModelAllowlist, deps.config.modelRefusals)) {
-                        sendError(res, 400, "request.model_not_allowed", `model is not in this deployment's @-mention allowlist: "${body.model.slice(0, 120)}" — the allowlist is configured by the operator (config-center models.atModelAllowlist)`);
+                    if (!isAtMentionable(body.model, catalog, deps.config.atMention, deps.config.modelRefusals)) {
+                        sendError(res, 400, "request.model_not_allowed", `model is not @-mentionable on this deployment: "${body.model.slice(0, 120)}" — which models can be @-mentioned is configured by the operator (models.atMention)`);
                         return;
                     }
                 }

package/dist/http/routes/tasks.js

@@ -29,6 +29,7 @@ import { buildSyncSubmitBody } from "../sync-submit-body.js";
 import { assertNever } from "../route-ctx.js";
 import * as facts from "../../capability-facts.js";
 import { buildCheckpointCtx } from "../checkpoint-ctx.js";
+import { serviceVersion } from "../../service-version.js";
 import { withModelReachScope } from "../../model-reach-scope.js";
 import { createInstructionSelectionLeg } from "../../instruction-selection.js";
 const DISCONNECT_PARK_GRACE_MS = 10_000;
@@ -254,7 +255,7 @@ export async function handleTasks(req, res, match, ctx) {
                 let ledgerSink;
                 let ledgerTerminal = false;
                 if (deps.checkpointStore && prepared.spec.sessionId) {
-                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope }));
+                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() }));
                 }
                 if (durableTaskId && deps.runStore) {
                     const rs = deps.runStore;
@@ -806,7 +807,7 @@ export async function handleTasks(req, res, match, ctx) {
                 }
                 commitSessionInheritEnv(deps, prepared.spec.sessionId, prepared.body);
                 if (deps.checkpointStore && prepared.spec.sessionId) {
-                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope }));
+                    await deps.checkpointStore.putCtx(prepared.spec.sessionId, buildCheckpointCtx({ body: prepared.body, memoryScope: prepared.auth?.memoryScope, writerVersion: serviceVersion() }));
                 }
                 const syncCancelCtrl = createRunAbort();
                 if (prepared.spec.sessionId)

package/dist/http/run-meta.d.ts

@@ -14,7 +14,7 @@ export declare function runMeta(prepared: {
 }, source: string | null): {
     jobId: string | null;
     source: string | null;
-    objectivePreview: string | null;
+    objectivePreview: string;
 };
 /** Build the cascade config from the operator ladder. Default gate = `status==="completed"` (escalate
  *  on a cheap-rung failure); cost-ceiling from the task's budget bounds the cold-rerun tax. */

package/dist/http/run-meta.js

@@ -1,10 +1,10 @@
-import { redactSecrets } from "../trace/redact.js";
+import { buildRunObjectivePreview } from "../user-authored-text.js";
 export function runMeta(prepared, source) {
     const obj = prepared.spec.objective ?? "";
     return {
         jobId: prepared.jobId ?? null,
         source,
-        objectivePreview: obj ? redactSecrets(obj).slice(0, 120) : null,
+        objectivePreview: buildRunObjectivePreview(obj),
     };
 }
 export function cascadeConfig(ladder, maxCostUsd) {

package/dist/http/server.d.ts

@@ -3,7 +3,7 @@ import type { IncomingMessage } from "node:http";
 import { type Runner, type TaskSpec, type TaskResult, type WorkflowRunStore, type MemoryEntry, type MemoryExportBundle, type MemoryImportReport, type EntryProvenanceAccount, type MemoryErasureAttestation, type MemoryEntryOrigin, type OriginClearanceRow, type SessionMemoryStatus, type ConsolidationRunReceipt, type ConsolidationDriverRunRow, type SideQuerySpec, type SideQueryResult, type Brain, type EngineNotice } from "@sema-agent/core";
 import type { TaskRequestBody } from "./wire-types.js";
 import type { ServiceConfig } from "../config-types.js";
-import { type SessionMirrorRuling } from "../config-center/facade.js";
+import { type SessionMirrorRuling } from "../web-admin-client/facade.js";
 import type { RestartSignal } from "@sema-agent/settings-schema/fleet";
 import { type OwnerAwareSessionStore } from "../security.js";
 import type { RunStore, ImageIndex, ImageBake, CheckpointStoreFull, ResumeAnchorStore, ApprovalExemptionStore, ApprovalNonceStore, ServiceSessionPolicyStore, ServiceFileHistoryStore, ToolResultStoreFull, StoreBackend } from "../plugins/store-backend.js";
@@ -628,7 +628,7 @@ export interface ServiceGovernanceDeps {
     }) => Promise<RequestAuth>;
     /** 鉴权桥(registry-core api/auth-bridge):registry 用户 JWT → principal。缺席=分支不存在
      *  (bearer 只认 SERVICE_AUTH_TOKEN(S),现状不变)。 */
-    registryJwtVerifier?: {
+    webAdminJwtVerifier?: {
         verify: (bearer: string) => Promise<import("../auth-bridge.js").VerifyOutcome>;
     };
     /** Per-principal rate limiter for task/run endpoints. In-memory (single replica) or TiDB-backed
@@ -694,7 +694,7 @@ export interface ServiceDeploymentDeps {
     servingLease?: () => import("../fleet/engine-signal.js").ServingLeaseView;
     /** boot ready 门(b):false = 布防(`CONFIG_REQUIRE_ROSTER=true`)且首次 effective pull 尚未落 roster
      *  (worker 只有占位模型)。就绪原因 `model_roster_pending`(`http/readiness.ts`):计费提交 503 + `/readyz` 503 +
-     *  /health 加性 `ready:false`。absent = 恒 ready(未布防 / 非 registry 部署),现有部署零影响。config-center 的
+     *  /health 加性 `ready:false`。absent = 恒 ready(未布防 / 非 registry 部署),现有部署零影响。web-admin 的
      *  markRosterLanded 在落模型后翻 true(one-way latch)。 */
     modelReady?: () => boolean;
     /** Sema-registry restart signal: the refresh loop sets this when a pull carries restart-to-apply
@@ -709,7 +709,7 @@ export interface ServiceDeploymentDeps {
      *  (configTargetVersion / configAppliedVersion / configApplyStaleMs),`GET /v1/diagnostics/wiring` 取整份
      *  (按组的 appliedVersion / deferredKeys+铸因 / lastRejected 消毒形)。缺席 = 这个进程没有配置管道
      *  (纯 env 部署 / 测试夹具)⇒ 两个面的形状逐字不变(additive)。 */
-    configApplyState?: () => import("../config-center/apply-ledger.js").ConfigApplyLedgerView | undefined;
+    configApplyState?: () => import("../web-admin-client/apply-ledger.js").ConfigApplyLedgerView | undefined;
     /** S-698:中心凭证健康位(`/health.centerCredential`)—— 凭证来源的健康态 + 续签器状态(`center-credential-renewer.ts`
      *  `buildCenterCredentialHealthView` 铸形,只有闭集词 / 时刻 / 计数,不带路径与令牌)。缺席 / 返回 undefined = 健康或没有中心
      *  ⇒ `/health` 形状逐字不变(additive)。 */
@@ -718,7 +718,7 @@ export interface ServiceDeploymentDeps {
      *  (`boot/stage-10-http-server.ts` → `modelRefusals: () => deployment.modelRefusalsState?.()`)—— 一处铸、两出口。缺席 / 返回 undefined =
      *  没有可报的拒或没有配置管道 ⇒ `/health` 形状逐字不变(additive)。 */
     modelRefusalsState?: () => import("@sema-agent/settings-schema").ModelRefusalsSignal | undefined;
-    /** `/health.configHandoff`(只上 `/health`):在场 ⇔ 部署声明了耐久接力 ∧ 应用着的那一代没被确认(config-center 接力账的 `configHandoffState()`;合成律
+    /** `/health.configHandoff`(只上 `/health`):在场 ⇔ 部署声明了耐久接力 ∧ 应用着的那一代没被确认(web-admin 接力账的 `configHandoffState()`;合成律
      *  `fleet/engine-signal.ts` 的 `buildConfigHandoff`)。缺席 / 返回 undefined = 有接力、没有中心或本地腿 ⇒ 键缺席。 */
     configHandoffState?: () => import("../fleet/engine-signal.js").ConfigHandoff | undefined;
     /** [ref] 追加件:`POST /v1/admin/config/refresh` 的实现面 —— 触发**一次既有**的 refresh 拍(在飞则 join)。
@@ -727,7 +727,7 @@ export interface ServiceDeploymentDeps {
     /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog`
      *  判 `effectiveLane`(env 占位/center 在管/默认)的 center 半场。缺席或返回 undefined = 本部署
      *  没有配置管道(纯 env worker / 测试夹具)⇒ 目录把每条 center 腿如实标「不在管」(additive)。 */
-    configCenterManagedKeys?: () => ReadonlySet<string> | undefined;
+    webAdminManagedKeys?: () => ReadonlySet<string> | undefined;
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账读口 —— GET /v1/sessions/:id/mcp 的展示面与
      *  引擎执行面同一权威(被撤服务器的工具不再进面板)。缺席 = 无中心撤销面(pre-338 展示语义)。 */
     mcpRevocations?: {
@@ -783,7 +783,7 @@ export interface ServiceDeploymentDeps {
      *  (它在场景装配里每请求现算),所以本位不会随调用方漂。 */
     webSearchProvider?: import("../plugins/web-search.js").WebSearchProvider;
     /** S-737:本进程模型钥匙保管店的**公钥面** —— `GET /v1/capabilities` 的 `sealedKey` 段唯一席位。值**逐字**取自
-     *  config-center 运行时(`boot/config-center.ts` 的 `sealedKeyPublic`,boot 期建的那一只店),路由里不再建店、不读全局。
+     *  web-admin 运行时(`boot/web-admin.ts` 的 `sealedKeyPublic`,boot 期建的那一只店),路由里不再建店、不读全局。
      *  类型只有最新那把公钥(`sealed-key.ts` `SealedKeyPublicFace`):私钥、保管路径、持有的旧 id 列表从这一层结构上够不着。
      *  缺席 = 本进程没有保管店(boot 建店失败,或不是由 composition root 装起来的测试夹具形)⇒ caps 的 `sealedKey` 键缺席。 */
     sealedKeyPublic?: import("../sealed-key.js").SealedKeyPublicFace;

package/dist/http/server.js

@@ -2,7 +2,7 @@ import http from "node:http";
 import { outwardPlane } from "../terminal.js";
 import { redactHead } from "../observability/run-terminal.js";
 import { validatePendingSteer } from "@sema-agent/core";
-import {} from "../config-center/facade.js";
+import {} from "../web-admin-client/facade.js";
 import { HttpError } from "../security.js";
 import {} from "../memory-sync.js";
 import { evictIfConflict } from "../runs.js";

package/dist/http/stored-body-replay.d.ts

@@ -7,13 +7,14 @@
  * **入口地板**(`runtime-governance.ts` `autonomyModeFloor`)—— 这两只属主带着配置层的包外依赖;`checkpoint-ctx.ts` 被随包的本地排空脚本经编译产物 import,
  * 它的闭包只许 node 内建 / 引擎包根(`test/drain-check-local.test.ts` 的闭包门)。判据只有这一只,前两问的谓词照旧住在各自属主里。
  */
-import { type PermissionMode } from "@sema-agent/core";
+import type { PermissionMode } from "@sema-agent/core";
 import { type Autonomy } from "../runtime-governance.js";
 import { type StoredBodyReplayRefusal } from "./checkpoint-ctx.js";
 import type { CheckpointCtx } from "./route-ctx.js";
 /**
- * 第三问:本行体里的模式词能否按当前读法重放。不能 ⇔ 本部署此刻有入口地板 ∧ 行上没有当前的模式词读法记号 ∧ 体的生效词被地板钳会变
- * (core `clampPermissionMode`,与提交入口的盖章同一只钳)⇒ 返回拒因的两个事实(体的词、地板);能 ⇒ `undefined`。
+ * 第三问:本行体里的模式词能否按当前读法重放。不能 ⇔ 本部署此刻有入口地板 ∧ 行上没有当前的模式词读法记号 ∧ 体的生效词进这块地板会变
+ * (`runtime-governance.ts` `entryPermissionMode`,与提交入口的盖章同一只函数;判的是「词变不变」而不是 `clamped` —— 体无词的旧行进地板取地板本身,
+ * 那也是变)⇒ 返回拒因的两个事实(体的词、地板);能 ⇒ `undefined`。
  */
 export declare function permissionModeReadingUnstated(ctx: CheckpointCtx, floor: PermissionMode | undefined): {
     stored: PermissionMode | undefined;

package/dist/http/stored-body-replay.js

@@ -1,23 +1,23 @@
-import { clampPermissionMode } from "@sema-agent/core";
 import { storedBodyPermissionMode } from "../task-settings.js";
-import { autonomyModeFloor } from "../runtime-governance.js";
+import { autonomyModeFloor, entryPermissionMode } from "../runtime-governance.js";
 import { skillDenyInertEntryOf } from "../rule-entry-list.js";
 import { allowListReadingEraOf, allowListReadingUnstated, permissionModeReadingStated } from "./checkpoint-ctx.js";
 export function permissionModeReadingUnstated(ctx, floor) {
     if (floor === undefined || permissionModeReadingStated(ctx))
         return undefined;
     const stored = storedBodyPermissionMode(ctx.body);
-    return clampPermissionMode(stored, floor).effective === stored ? undefined : { stored, floor };
+    return entryPermissionMode(stored, floor).effective === stored ? undefined : { stored, floor };
 }
 export function storedBodyReplayRefusal(ctx, autonomy) {
+    const writer = ctx.writerVersion !== undefined ? { writerVersion: ctx.writerVersion } : {};
     if (allowListReadingUnstated(ctx))
-        return { kind: "allow_list_reading", era: allowListReadingEraOf(ctx) };
+        return { kind: "allow_list_reading", era: allowListReadingEraOf(ctx), ...writer };
     const entry = skillDenyInertEntryOf(ctx.body);
     if (entry !== undefined)
         return { kind: "skill_deny_inert", entry };
     const mode = permissionModeReadingUnstated(ctx, autonomyModeFloor(autonomy));
     if (mode !== undefined)
-        return { kind: "permission_mode_reading", ...mode };
+        return { kind: "permission_mode_reading", ...mode, ...writer };
     return undefined;
 }
 //# sourceMappingURL=stored-body-replay.js.map

package/dist/index.d.ts

@@ -27,7 +27,8 @@ export { createHttpServer, type ServiceDeps, type RequestAuth, type FlatServiceD
 export { createSideQueryLane, createPerModelKeyBrain, type KeyResolver, type SideQueryLane, type SideQueryLaneCtx } from "./boot/side-query-lane.js";
 export { createKeyResolver, resolveModelApiKey, type ModelKeyRef } from "./key-resolver.js";
 export { isModelKeyPoison, ModelKeyPoisonedError, type ModelKeyPoison, type ModelKeyPoisonReason } from "./key-resolver.js";
-export { RETIRED_ENVS, type RetiredEnv, type RetiredEnvKind, type RetiredEnvWire } from "./config.js";
 export { CATALOG_ENTRY_HEADER_LANES, CATALOG_ENTRY_HEADER_NAMES, type CatalogEntryHeaderName } from "./model-entry-headers.js";
+export { judgeModelRouteGap, type ModelRouteGapReading, type ModelRouteGapOptions } from "./model-route-gap.js";
+export type { ModelRouteGap } from "./model-route-endpoint.js";
 export type { UserInputLedgerStore, UserInputAcceptance, NewUserInputAcceptance, OpenScanCursor, OpenScanPage, SettleHow, WriterGoneEvidence } from "./user-input-ledger.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -24,6 +24,6 @@ export { createHttpServer, } from "./http/server.js";
 export { createSideQueryLane, createPerModelKeyBrain } from "./boot/side-query-lane.js";
 export { createKeyResolver, resolveModelApiKey } from "./key-resolver.js";
 export { isModelKeyPoison, ModelKeyPoisonedError } from "./key-resolver.js";
-export { RETIRED_ENVS } from "./config.js";
 export { CATALOG_ENTRY_HEADER_LANES, CATALOG_ENTRY_HEADER_NAMES } from "./model-entry-headers.js";
+export { judgeModelRouteGap } from "./model-route-gap.js";
 //# sourceMappingURL=index.js.map

package/dist/key-resolver.d.ts

@@ -56,7 +56,7 @@ export declare class ModelKeyPoisonedError extends Error {
 }
 /**
  * Build a per-model API-key resolver for `TaskSpec.getApiKeyAndHeaders` from the catalog's
- * name → env-var-NAME map (sema-registry `apiKeyEnv`). core threads this per brain call — and per cascade
+ * name → env-var-NAME map (web-admin `apiKeyEnv`). core threads this per brain call — and per cascade
  * rung — so each model/rung authenticates with its OWN upstream account/key.
  *
  * A model absent from BOTH maps returns `undefined`, so core falls back to the brain's construction-time

package/dist/leader/leader.d.ts

@@ -66,8 +66,8 @@ export interface ProvisionedWorker {
     verifierTools?: ToolSpec[];
 }
 /**
- * 一条 leader run 的**入口体**(提交体去掉 objective 的那一半)—— 运维 `AUTONOMY` 的模式词地板在这条 run 出生的那一拍读一次、经受理门同一只盖章
- * 盖出来的结果(`run-entry.ts` `leaderRunEntry`);地板缺席 ⇒ `{}`。leader 请求不带调用方的模式词,所以入口词就是地板本身(与 run-local 同)。
+ * 一条 leader run 的**入口体**(提交体去掉 objective 的那一半)—— 运维 `AUTONOMY` 的模式词地板在这条 run 出生的那一拍读一次、经受理门同一只函数
+ * (`runtime-governance.ts` `entryPermissionMode`)得出的入口词(`run-entry.ts` `leaderRunEntry`);地板缺席 ⇒ `{}`。leader 请求不带调用方的模式词,所以入口词就是地板本身(与 run-local 同)。
  * 本 run 铸的每一条 spec 经 {@link withLeaderLeg} 从这一份取词;worker 的续跑体由它展开(`{ ...entry, objective }`)⇒ 首跑、续跑、修复腿同一个词。
  * 入口词是 `plan` 的 run 进不了这条车道(`run-entry.ts` `leaderEntryRefusal`:worker 会话没有计划审阅通道)—— 受理口与出生处同判,到不了 worker。
  * 热改 `AUTONOMY` 只影响之后起的 leader run:在飞的 run 保持它出生时盖下的这一份。
@@ -76,10 +76,11 @@ export interface LeaderRunEntry {
     readonly permissionMode?: PermissionMode;
 }
 /**
- * leader 车道铸 spec 的**唯一**合并口:入口体的词写进 spec,再交给无人值守腿的合并口(`withUnattendedLeg` 的 `default` 钳在入口词之下)。
- * 入口体无词 ⇒ spec 原物交给 `withUnattendedLeg`,与不经本口逐字同。本车道的 spec 自己不带模式词(子任务体只有 objective,其余并进的键是预算 / 审批 / 身份),
- * 所以这里是「写」而不是「钳」。五个出生点(worker 首跑的工厂 / 静态两条车道、集成修复、模块门修复、单代理修复环)都调它、不直调 `withUnattendedLeg`
- * (`test/leader-entry-floor.test.ts` 按语法树数调用点):「这条腿的词从哪来」只有入口体一个答案。
+ * leader 车道铸 spec 的**唯一**合并口:spec 的词钳在入口体的词之下(`runtime-governance.ts` `entryPermissionMode(spec 的词, 入口词)` —— 与受理门同一只函数;
+ * 写进 spec 的值就是它的 `effective`),再交给无人值守腿的合并口(`withUnattendedLeg` 的 `default` 钳在那个词之下)。入口体无词 ⇒ spec 原物交给
+ * `withUnattendedLeg`,与不经本口逐字同。本车道的 spec 今天自己不带模式词(子任务体只有 objective,其余并进的键是预算 / 审批 / 身份)⇒ 入口词在场时写下的就是它;
+ * 将来带了词,比入口词松的折回入口词、比它紧的留着 —— 与一条提交体过受理门同一个答案,不另写「写」的规则。五个出生点(worker 首跑的工厂 / 静态两条车道、
+ * 集成修复、模块门修复、单代理修复环)都调它、不直调 `withUnattendedLeg`(`test/leader-entry-floor.test.ts` 按语法树数调用点):「这条腿的词从哪来」只有入口体一个答案。
  */
 export declare function withLeaderLeg<S extends Partial<TaskSpec>>(spec: S, entry: LeaderRunEntry): S & UnattendedLegSpec;
 export interface LeaderDeps {

package/dist/leader/leader.js

@@ -4,6 +4,7 @@ import { pullDiff } from "./diffout.js";
 import { mergeBranches } from "./merge.js";
 import { Runner, runWithVerification, resumeWithVerification } from "@sema-agent/core";
 import { pausedCauseOf, outwardPlane } from "../terminal.js";
+import { entryPermissionMode } from "../runtime-governance.js";
 import { withUnattendedLeg } from "../unattended-permission-mode.js";
 const MAX_RESUME_SLICES = 200;
 export async function autoResumeOnResource(initial, signal, resume, maxSlices = MAX_RESUME_SLICES) {
@@ -17,7 +18,8 @@ export async function autoResumeOnResource(initial, signal, resume, maxSlices =
     return vr;
 }
 export function withLeaderLeg(spec, entry) {
-    return withUnattendedLeg(entry.permissionMode === undefined ? spec : { ...spec, permissionMode: entry.permissionMode });
+    const word = entryPermissionMode(spec.permissionMode, entry.permissionMode).effective;
+    return withUnattendedLeg(word === undefined ? spec : { ...spec, permissionMode: word });
 }
 export async function runLeaderTask(task, durableBaseSha, deps) {
     let subs;

package/dist/leader/run-entry.d.ts

@@ -2,7 +2,7 @@
  * 一条 leader run 的**入口体**与「它进不进得了 leader 车道」的唯一判据。
  *
  * 规则(与受理门、run-local 同一条):运维 `AUTONOMY=plan` 是提交入口的模式词地板,盖在每一个 spec 出生点。leader 请求不带调用方的模式词,
- * 所以入口体是一份空体盖上地板(受理门同一只盖章 `task-settings.ts` `stampEntryPermissionMode`;地板的唯一属主 `runtime-governance.ts`
+ * 所以入口词 = `runtime-governance.ts` `entryPermissionMode(undefined, 地板).effective`(与受理门、run-local 同一只函数;地板的唯一属主
  * `autonomyModeFloor`)。
  *
  * `plan` 是**生命周期词**:它靠人审通道(`plan_review`)出口 —— 一个人批准计划,run 才离开 plan。leader 的 worker 会话**没有**那条通道
@@ -14,7 +14,7 @@
  */
 import { type Autonomy } from "../runtime-governance.js";
 import type { LeaderRunEntry } from "./leader.js";
-/** 一条 leader run 的入口体:地板读一次、受理门同一只盖章(地板缺席 ⇒ `{}`)。调用方读**活** config(热改只影响之后起的 run)。 */
+/** 一条 leader run 的入口体:地板读一次、入口词经受理门同一只函数(地板缺席 ⇒ `{}`)。调用方读**活** config(热改只影响之后起的 run)。 */
 export declare function leaderRunEntry(autonomy: Autonomy | undefined): LeaderRunEntry;
 /** 拒句:原因(运维的 plan 地板 × 这条车道没有计划审阅通道)+ 两条出路(改走有计划审阅的 run 车道 / 运维换档)。不含任何配置值之外的回显。
  *  受理口(HTTP 422 的 `error`)与 run 出生处(run 的 `error`)读的是这一份;字节由 `test/api-error-text-freeze.test.ts` 的常量锚格冻。 */

package/dist/leader/run-entry.js

@@ -1,7 +1,7 @@
-import { autonomyModeFloor } from "../runtime-governance.js";
-import { stampEntryPermissionMode } from "../task-settings.js";
+import { autonomyModeFloor, entryPermissionMode } from "../runtime-governance.js";
 export function leaderRunEntry(autonomy) {
-    return stampEntryPermissionMode({}, autonomyModeFloor(autonomy));
+    const word = entryPermissionMode(undefined, autonomyModeFloor(autonomy)).effective;
+    return word === undefined ? {} : { permissionMode: word };
 }
 export const LEADER_PLAN_ENTRY_REFUSAL = "this deployment runs with AUTONOMY=plan, which starts every task in plan mode and lets it out of plan mode only when a person approves its plan through plan review; " +
     "a leader task's workers have no plan review channel, so they could neither write nor hand their plan to anyone who can approve it. Nothing was started. " +

package/dist/leader/wire.d.ts

@@ -65,11 +65,11 @@ export interface LeaderWireConfig {
      * 保留它准备时的那一份(core 的自然快照语义,两条腿同律)。 */
     deploymentPosture?: () => DeploymentPostureSeats;
     /**
-     * 运维 `AUTONOMY`(活 config 的那一位)—— 本车道每条 leader run **出生那一拍**读一次,经 `run-entry.ts` 的 `leaderRunEntry`(入口地板 + 受理门同一只盖章)
-     * 盖成这条 run 的入口体(`LeaderDeps.entry`);本 run 铸的每一条 spec 与 worker 的续跑体都从它取词。入口词是 `plan` 的 run 进不了这条车道
+     * 运维 `AUTONOMY`(活 config 的那一位)—— 本车道每条 leader run **出生那一拍**读一次,经 `run-entry.ts` 的 `leaderRunEntry`(入口地板 + 受理门同一只入口函数 `entryPermissionMode`)
+     * 得出这条 run 的入口体(`LeaderDeps.entry`);本 run 铸的每一条 spec 与 worker 的续跑体都从它取词。入口词是 `plan` 的 run 进不了这条车道
      * (`leaderEntryRefusal`:worker 会话没有计划审阅通道)⇒ 出生处即以拒句收场;HTTP 受理口用同一只判据先答 422。
      *
-     * 🔴 **函数席**(与 `deploymentPosture` / `durable` 同一条先例):`config.autonomy` 被 config-center 原地热改,boot 期取一次值会把这条腿钉在起服那一刻。
+     * 🔴 **函数席**(与 `deploymentPosture` / `durable` 同一条先例):`config.autonomy` 被 web-admin 原地热改,boot 期取一次值会把这条腿钉在起服那一刻。
      * **必填**:没有 AUTONOMY 的装配递 `() => undefined` —— 缺席不是「没有地板」的合法拼法(权限轴上不许静默放宽)。
      */
     autonomy: () => Autonomy | undefined;
@@ -101,7 +101,7 @@ export interface LeaderWireConfig {
     usageWindowStore?: RunnerDeps["usageWindowStore"];
     /**
      * [ref]([ref])—— **center 发布的 prompt catalog** 席,原样递给本车道的每一只 Runner。唯一属主 =
-     * `boot/config-center.ts` 的 `configCenter.promptSource`(主 runner / subRunner 同一只;run-local 有自己
+     * `boot/web-admin.ts` 的 `webAdmin.promptSource`(主 runner / subRunner 同一只;run-local 有自己
      * 的等价腿)。缺席 ⇒ leader 的 planner/worker/repair/conflict 四类**顶层**任务跑引擎内置提示词,而同一
      * 部署的 `/v1/tasks`、`/v1/runs` 跑运维发布的那一份 —— 且 core 顶层新任务走的是**静默**臂(pinned /
      * parentCenterArtifactDigest 两支才 `prompt.snapshot_unavailable` fail-loud),运维面零信号。

package/dist/leader/wire.js

@@ -7,6 +7,7 @@ import { tmpdir } from "node:os";
 import { Runner, combinePolicies, createDurableQuestionPolicy, QUESTION_AWAITS_RESUME, delimitUntrusted, hasDestroy, } from "@sema-agent/core";
 import { leaderEntryRefusal, leaderRunEntry } from "./run-entry.js";
 import { buildCheckpointCtx } from "../http/checkpoint-ctx.js";
+import { serviceVersion } from "../service-version.js";
 import { RemoteContainerExecutionEnv } from "../plugins/remote-env-e2b.js";
 import { E2B_SANDBOX_HOME } from "../execution-lane-caps.js";
 import { createDurableAskPolicy } from "../approval.js";
@@ -272,7 +273,7 @@ export function createLeaderRunner(cfg) {
         const provisionWorker = async (sub) => {
             const sessionId = `leader-${sub.workerId}-${Date.now()}`;
             const durable = cfg.durable?.();
-            const resumeCtx = buildCheckpointCtx({ body: { ...entry, objective: sub.spec.objective }, unattendedLeg: true });
+            const resumeCtx = buildCheckpointCtx({ body: { ...entry, objective: sub.spec.objective }, unattendedLeg: true, writerVersion: serviceVersion() });
             let durableSpec = {};
             if (durable) {
                 const d = durable;

package/dist/main.js

@@ -1,6 +1,6 @@
 import { fatalExit } from "./boot/fatal-exit.js";
 import { runStage01 } from "./boot/stage-01-config.js";
-import { runStage02 } from "./boot/stage-02-registry-pull.js";
+import { runStage02 } from "./boot/stage-02-web-admin-pull.js";
 import { runStage03 } from "./boot/stage-03-store-backend.js";
 import { runStage04 } from "./boot/stage-04-stores.js";
 import { runStage05 } from "./boot/stage-05-execution-env.js";

package/dist/mcp-tool-faces.d.ts

@@ -1,7 +1,7 @@
 /**
  * `McpServerSpec.toolFaces` —— MCP 工具的**面覆盖层**(core 7.8.0 [ref] §1.1/§2.7;声明面
  * settings-schema 1.9.0)。一条规则、三条腿共用(请求腿 `task-mcp.ts normalizeServer` / center 腿
- * `config-center/skills-mcp.ts resolveMcpServers` / 本地 config.d 腿 `config-provider.ts` 只做承载),
+ * `web-admin-client/skills-mcp.ts resolveMcpServers` / 本地 config.d 腿 `config-provider.ts` 只做承载),
  * 与 {@link import("./mcp-source-label.js").readMcpSourceLabel} 同一个「判据单点、三腿一致」的形。
  *
  * ## 分工(为什么本层**不**复述 core 的那张表)
@@ -35,7 +35,7 @@
  *     该条、兄弟 server 照挂)。代价是真的(少一套工具),但它**响亮且立刻**;反方向的代价是一条
  *     **静默失效的安全声明**,而后者按 [ref] 不许存在于安全轴上;
  *  ③ 拿什么补偿 —— 报出来的名字本身:请求腿 `mcp_injection_dropped{dropped:[name]}`、center 腿
- *     `sema_registry_mcp_tool_faces_invalid{server,problem,note}` 一条点名 warn(`problem` 里带工具名与哪一段不合;运维照着改那一行即可)。
+ *     `web_admin_mcp_tool_faces_invalid{server,problem,note}` 一条点名 warn(`problem` 里带工具名与哪一段不合;运维照着改那一行即可)。
  * 每只工具的面是**整只**判(core 明写 "applied whole or not at all");而**任一只**判不出形 ⇒ 整条 server
  * 不进 —— 「留下好的那几只」同样是让坏的那一只无面挂载,与整张丢没有区别。
  */

package/dist/model-entry-refusal.d.ts

@@ -1,4 +1,5 @@
 import { type ModelEntryRefusalCode, type ModelPlaneRefusalCode, type ModelRefusalsSignal } from "@sema-agent/settings-schema";
+import { type DroppedCatalogEntry } from "./web-admin-client/read-warnings.js";
 /**
  * 条目拒因码 → 本仓铸它的成因 —— **以码为键**(S-768):码闭集的属主是 settings-schema(`MODEL_ENTRY_REFUSAL_CODES`,6.2.0 起;此前本仓
  * 自持一份同名码表,撞名已消灭、零别名)。那边加一个条目码 ⇒ 本表缺键 ⇒ 本仓 tsc 红(只拿 `satisfies` 约束码值证明的是「子集」,
@@ -58,23 +59,31 @@ export interface CatalogEntryLike {
  * 坐标,不取它的输出(输出会补缺省、剥扩展键,那是读腿的事)。
  */
 export declare function judgeCatalogEntry(m: CatalogEntryLike, ctx: CatalogEntryVerdictCtx): ModelEntryRefusal | undefined;
-/** 一批已启用条目的判决:可用的(保序)、不可用的(按 catalog name)、以及形不对的被丢身份载体行(坐标)。 */
+/** 一批已启用条目的判决:可用的(保序)、不可用的(按 catalog name)、被丢目录条目的载体行(形对的,保序),以及形不对的载体行(坐标)。 */
 export interface CatalogEntriesVerdict<M extends CatalogEntryLike> {
     readonly usable: readonly M[];
     /** 键 = catalog name(**每一个**名,含秘密形 / 空串 / `__proto__`:引擎自己的判决保持完整 —— S-712 不变量与选择面的「让出」都读它;
      *  名筛只在出口,见 {@link buildModelRefusalsSignal})。键以自有数据属性写入(`__proto__` 不走原型 setter)。 */
     readonly refused: Readonly<Record<string, ModelEntryRefusal>>;
-    /** S-712:被丢身份**载体形不对**的行坐标(`models.3`;载体不是列表时是一个固定标记)。读腿只为有名的被丢条目铸载体行
-     *  (`read-warnings.ts` `DroppedModelIdentity`,`name` 必在),所以这一形只来自绕过读腿的输入被改过(盘上 LKG 被手改 / 手写
-     *  effective)。非空 ⇒ 读不出的名字无从证明它不被增广铸出 ⇒ 不变量 `refused-names-not-minted` 不成立 ⇒ 模型面组拒(fail-closed)。 */
+    /** S-712:被丢目录条目**载体形不对**的行坐标(`models.3`;读不出下标时是 `(unknown coordinate)`;载体不是列表时是一个固定标记)。读腿铸的每一行
+     *  都合 `read-warnings.ts` {@link DroppedCatalogEntryRow} 的形,所以这一形只来自绕过读腿的输入被改过(盘上 LKG 被手改 / 手写 effective)。
+     *  非空 ⇒ 改过的行原本代表谁说不清,无从证明它的名字不被增广铸出 ⇒ 不变量 `refused-names-not-minted` 不成立 ⇒ 模型面组拒(fail-closed)。 */
     readonly malformed: readonly string[];
+    /** S-1295:载体里形对的行(保序)—— 模型面 stage 把它与 `models` 同 commit 进 `config.droppedCatalogEntries`(`GET /v1/models.droppedEntries`
+     *  的源):载体只在这里被判形、被读一次,墓碑与 wire 读的是同一批行。 */
+    readonly dropped: readonly DroppedCatalogEntry[];
 }
 /**
  * 批量形(模型面 stage 与 dry-run 共用这一只 —— 报数与真 apply 永不撕裂)。
- * S-712:`dropped` = 读腿交出的被丢条目身份(`EffectiveConfig.models.droppedIdentities`)—— 它们与逐条判据判出的 `entry_invalid`
- * 是**同一件事**(条目不合 `ModelEntry` 形),只是在第一道边界就被丢了;每一行铸一块墓碑(拒因 provider 词空:告警身份不带它)。
- * 入参按 `unknown` 判形:载体可能来自盘上 LKG(本仓写的,但文件可被改)。**规则一条**:载体要么缺席,要么是一列带字符串 `name`
- * 的行;其余一律「载体形不对」进 `malformed`(fail-closed)—— 读腿自己从不铸这种形。
+ * S-712:`dropped` = 读腿交出的被丢目录条目载体(`EffectiveConfig.models.droppedCatalogEntries`,每一条被丢的目录条目一行)。入参按 `unknown`
+ * 判形:载体可能来自盘上 LKG(本仓写的,但文件可被改)。载体要么缺席,要么是一列合 {@link DroppedCatalogEntryRow} 形的行;其余一律「载体形不对」
+ * 进 `malformed`(fail-closed)—— 读腿自己从不铸这种形。
+ * **墓碑判据(一条,S-712 原样)**:行的 `identity.name` 在 ∧ `identity.enabled !== false` ⇒ 铸一块墓碑(它与逐条判据判出的 `entry_invalid`
+ * 是同一件事 —— 条目不合 `ModelEntry` 形,只是在第一道边界就被丢了;拒因 provider 词空:告警身份不带它)。其余行不是墓碑:
+ *  · 停用 ⇒ 不在目录(与 7.100.0 同义);
+ *  · 没有名 —— 原文 `name` 不是字符串,或是字符串但不能原样出门(settings-schema `isDisclosableIdentity` 说不,身份里不带)⇒ **无名可留**,
+ *    与停用同处置。后者对本判据同样安全:档位增广只铸闭集词(`ultra` / `max` / `pro` / `flash` / `lite`、CC 别名、`best`),没有一个是
+ *    秘密形或非标识符,被扣下的名字无从被铸出;代价只是显式点它的请求拿到「未知模型」而不是 `request.model_unavailable`。
  * 与一条可用 / 已判不可用条目同名时不覆盖(可用条目仍可用;同名撞车由不变量 `refused-names-not-minted` 响亮拒)。
  */
 export declare function judgeCatalogEntries<M extends CatalogEntryLike>(enabled: readonly M[], ctx: CatalogEntryVerdictCtx, dropped?: unknown): CatalogEntriesVerdict<M>;
@@ -100,10 +109,10 @@ export declare function buildModelRefusalsSignal(v: ModelRefusalVerdict | undefi
  * 不各写一份 `isReportableRefusalName` 判断。
  */
 export declare function refusedNameLogField(key: string, name: string): Record<string, unknown>;
-/** 一串被拒条目名的日志字段(`sema_registry_models` 行的 `unavailable`):只列可披露的名,被扣下的名**只数个数**(`<key>NamesWithheld`,0 个时键缺席)。 */
+/** 一串被拒条目名的日志字段(`web_admin_models` 行的 `unavailable`):只列可披露的名,被扣下的名**只数个数**(`<key>NamesWithheld`,0 个时键缺席)。 */
 export declare function refusedNamesLogFields(key: string, names: readonly string[]): Record<string, unknown>;
 /** 成因 → 它那一条 warn 的事件名(**穷举**)。两个名字是票面点名的既有/新事件,运维的告警规则按名挂。 */
-export declare function refusalEventOf(reason: ModelEntryRefusalReason): "sema_registry_model_no_brain" | "sema_registry_model_entry_invalid";
+export declare function refusalEventOf(reason: ModelEntryRefusalReason): "web_admin_model_no_brain" | "web_admin_model_entry_invalid";
 /** warn 字段(不含值):`field` = 第一处坏字段(告警规则最常按它分组),`fields` = 全部。S-805:`model` 只在名可披露时写。 */
 export declare function refusalWarnFields(name: string, r: ModelEntryRefusal): Record<string, unknown>;
 /**
@@ -163,6 +172,6 @@ export interface RefusedNameView {
 export declare function mintedRefusedNames(view: RefusedNameView): MintedRefusedName[];
 /** 不变量 `refused-names-not-minted` 的拒因句(`undefined` = 成立)。warn 与世代账 / 拒因同一句;逐对明细另走 {@link mintedRefusedNames}。 */
 export declare function refusedNameMintedRefusal(view: RefusedNameView): string | undefined;
-/** 被丢身份载体形不对的拒因句(同一不变量同一个码:读不出的名字无从证明它不被增广铸出)。 */
+/** 被丢目录条目载体形不对的拒因句(同一不变量同一个码:改过的行原本代表谁说不清,无从证明它的名字不被增广铸出)。 */
 export declare function malformedDroppedCarrierRefusal(entries: readonly string[]): string;
 //# sourceMappingURL=model-entry-refusal.d.ts.map