@sema-agent/server 7.122.0 → 7.124.0

package/dist/audit.js

@@ -4,6 +4,7 @@ import { PgSessionStorage } from "./plugins/pg-session-storage.js";
 import { createLocalSessionRepo } from "./plugins/local-session-store.js";
 import { redactModelText } from "./observability/run-terminal.js";
 import { redactDeepWith } from "./trace/redact.js";
+import { INJECTED_BLOCK_RE } from "./user-authored-text.js";
 export async function buildSessionAudit(pool, sessionId) {
     return auditFromStorage(await TiDBSessionStorage.wake(pool, sessionId), sessionId);
 }
@@ -45,48 +46,78 @@ async function auditFromStorage(storage, sessionId) {
 }
 const deepScrub = (v) => redactDeepWith(v, redactModelText);
 const textSlot = (v) => (typeof v === "string" ? redactModelText(v) : deepScrub(v));
-function scrubSlot(p, key, scan) {
-    const v = p[key];
-    if (v === undefined)
-        return p;
-    const next = scan(v);
-    return next === v ? p : { ...p, [key]: next };
+function readLeaf(treatment, v) {
+    switch (treatment) {
+        case "text": return textSlot(v);
+        case "structure": return deepScrub(v);
+        case "parts": return readParts(v);
+        case "verbatim": return v;
+        default: {
+            const unhandled = treatment;
+            throw new Error(`unhandled leaf treatment: ${String(unhandled)}`);
+        }
+    }
+}
+const isPlainRecord = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+function readByTable(node, table) {
+    let changed = false;
+    const entries = Object.entries(node).map(([key, v]) => {
+        const next = readLeaf(Object.hasOwn(table, key) ? table[key] : "structure", v);
+        if (next !== v)
+            changed = true;
+        return [key, next];
+    });
+    return changed ? Object.fromEntries(entries) : node;
 }
 const PART_READ_TREATMENT = {
-    text: (p) => scrubSlot(p, "text", textSlot),
-    thinking: (p) => scrubSlot(p, "thinking", textSlot),
-    toolCall: (p) => scrubSlot(p, "arguments", deepScrub),
-    image: (p) => p,
-    document: (p) => p,
+    text: { type: "verbatim", text: "text" },
+    thinking: { type: "verbatim", thinking: "text", thinkingSignature: "verbatim", redacted: "verbatim" },
+    toolCall: { type: "verbatim", id: "verbatim", wireId: "verbatim", name: "verbatim", arguments: "structure", executionMode: "verbatim" },
+    image: { type: "verbatim", data: "verbatim", mimeType: "verbatim" },
+    document: { type: "verbatim", data: "verbatim", mimeType: "verbatim" },
 };
 function readParts(content) {
     if (!Array.isArray(content))
         return textSlot(content);
     const next = content.map((part) => {
-        if (part !== null && typeof part === "object" && !Array.isArray(part)) {
+        if (isPlainRecord(part)) {
             const type = part.type;
             if (typeof type === "string" && Object.hasOwn(PART_READ_TREATMENT, type)) {
-                return PART_READ_TREATMENT[type](part);
+                return readByTable(part, PART_READ_TREATMENT[type]);
             }
         }
         return deepScrub(part);
     });
     return next.every((x, i) => x === content[i]) ? content : next;
 }
-const readContent = (m) => scrubSlot(m, "content", readParts);
 const MESSAGE_READ_TREATMENT = {
-    user: (m) => m,
-    custom: (m) => m,
-    assistant: (m) => readContent(m),
-    toolResult: (m) => scrubSlot(readContent(m), "details", deepScrub),
-    bashExecution: (m) => scrubSlot(scrubSlot(m, "command", textSlot), "output", textSlot),
-    compactionSummary: (m) => scrubSlot(m, "summary", textSlot),
+    user: {
+        role: "verbatim", content: "verbatim", timestamp: "verbatim", enginePrefixChars: "verbatim", engineSegments: "verbatim",
+        engineMinted: "verbatim", engineNoteKey: "verbatim", provenance: "verbatim", actor: "verbatim",
+    },
+    custom: { role: "verbatim", customType: "verbatim", content: "verbatim", display: "verbatim", details: "verbatim", provenance: "verbatim", timestamp: "verbatim" },
+    assistant: {
+        role: "verbatim", content: "parts", errorMessage: "text", diagnostics: "structure", repetition: "structure",
+        api: "verbatim", provider: "verbatim", model: "verbatim", responseModel: "verbatim", responseId: "verbatim", requestId: "verbatim",
+        isApiErrorMessage: "verbatim", apiErrorStatus: "verbatim", apiErrorCode: "verbatim", usage: "verbatim", usageMissing: "verbatim",
+        stopReason: "verbatim", errorKind: "verbatim", inputTooLongRuledOut: "verbatim", partialFinalized: "verbatim",
+        staticReasoningCut: "verbatim", timestamp: "verbatim",
+    },
+    toolResult: { role: "verbatim", toolCallId: "verbatim", toolName: "verbatim", content: "parts", details: "structure", isError: "verbatim", timestamp: "verbatim" },
+    bashExecution: {
+        role: "verbatim", command: "text", output: "text", exitCode: "verbatim", cancelled: "verbatim", truncated: "verbatim",
+        fullOutputPath: "verbatim", timestamp: "verbatim", excludeFromContext: "verbatim",
+    },
+    compactionSummary: {
+        role: "verbatim", summary: "text", details: "structure", tokensBefore: "verbatim", timestamp: "verbatim", elidedMessages: "verbatim",
+        unsummarizedMessages: "verbatim", tokensAfter: "verbatim", firstKeptEntryId: "verbatim",
+    },
 };
 function readMessage(m) {
-    if (m !== null && typeof m === "object" && !Array.isArray(m)) {
+    if (isPlainRecord(m)) {
         const role = m.role;
         if (typeof role === "string" && Object.hasOwn(MESSAGE_READ_TREATMENT, role)) {
-            return MESSAGE_READ_TREATMENT[role](m);
+            return readByTable(m, MESSAGE_READ_TREATMENT[role]);
         }
     }
     return deepScrub(m);
@@ -112,7 +143,6 @@ export function windowMessages(messages, opts) {
     const offset = Math.max(0, total - tail);
     return { messages: messages.slice(offset), window: { offset, total } };
 }
-const INJECTED_BLOCK_RE = /<(system-reminder|task-notification)(?:\s[^>]*)?>[\s\S]*?<\/\1>\s*/g;
 function capWithInjectionAwareness(s, capBytes) {
     const total = Buffer.byteLength(s, "utf8");
     if (total <= capBytes)

package/dist/auth-bridge.d.ts

@@ -4,22 +4,22 @@ import type { Metrics } from "./observability/metrics.js";
 export type { VerifiedIdentity } from "@sema-agent/settings-schema/api/auth-bridge";
 /**
  * S-866 ② —— 鉴权桥 issuer 的**唯一**取值(装配 `boot/stage-09-leader.ts` 与 caps `centerWiring.issuer` 同读,不各写一份回退):
- * 显式 `AUTH_BRIDGE_ISSUER`(`config.authBridgeIssuer`)恒赢 ⇒ `source:"explicit"`;缺席则回退中心基址 `configCenter.baseUrl`
+ * 显式 `AUTH_BRIDGE_ISSUER`(`config.authBridgeIssuer`)恒赢 ⇒ `source:"explicit"`;缺席则回退中心基址 `webAdmin.baseUrl`
  * (配了中心即默认开桥)⇒ `source:"fallback"`;两者都没有 ⇒ `undefined`(桥不装)。
  */
 export declare function authBridgeIssuerOf(config: {
     readonly authBridgeIssuer?: string | undefined;
-    readonly configCenter?: {
+    readonly webAdmin?: {
         readonly baseUrl: string;
     } | undefined;
 }): {
     readonly issuer: string;
     readonly source: "explicit" | "fallback";
 } | undefined;
-export interface RegistryJwtVerifierOptions {
-    /** R4 — 期望 iss(registry 的 SSO_ISSUER;默认=SEMA_REGISTRY_URL,双侧去尾斜杠比较)。 */
+export interface WebAdminJwtVerifierOptions {
+    /** R4 — 期望 iss(registry 的 SSO_ISSUER;默认=SEMA_WEB_ADMIN_URL,双侧去尾斜杠比较)。 */
     issuer: string;
-    /** R2 — JWKS 绝对 URL(默认=issuer + REGISTRY_JWKS_PATH)。 */
+    /** R2 — JWKS 绝对 URL(默认=issuer + WEB_ADMIN_JWKS_PATH)。 */
     jwksUrl?: string;
     /** R7 — 设了则 aud 必须包含它;不设=忽略 aud。 */
     audience?: string;
@@ -41,13 +41,13 @@ export type VerifyOutcome = {
     ok: false;
     error: AuthBridgeErrorCode;
 };
-/** The live object `createRegistryJwtVerifier` produces — a single `verify` entry point over the process-level JWKS cache. */
-export interface RegistryJwtVerifier {
+/** The live object `createWebAdminJwtVerifier` produces — a single `verify` entry point over the process-level JWKS cache. */
+export interface WebAdminJwtVerifier {
     verify: (bearer: string) => Promise<VerifyOutcome>;
 }
 /**
  * registry-JWT verifier(单例,进程级 JWKS 缓存)。`verify(bearer)` 全程不 throw——一切异常折为
  * AUTH_BRIDGE_ERROR_CODES(HTTP 面由调用方恒答 generic 401,码只进日志/metrics,R9)。
  */
-export declare function createRegistryJwtVerifier(opts: RegistryJwtVerifierOptions): RegistryJwtVerifier;
+export declare function createWebAdminJwtVerifier(opts: WebAdminJwtVerifierOptions): WebAdminJwtVerifier;
 //# sourceMappingURL=auth-bridge.d.ts.map

package/dist/auth-bridge.js

@@ -1,11 +1,11 @@
 import { createPublicKey, verify as cryptoVerify } from "node:crypto";
-import { AUTH_BRIDGE_ALGS, DEFAULT_CLOCK_SKEW_SEC, DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC, DEFAULT_OFFLINE_GRACE_SEC, REGISTRY_JWKS_PATH, RegistryJwks, classifyTimeClaims, jwksWithinOfflineGrace, shouldForceJwksRefresh, toVerifiedIdentity, } from "@sema-agent/settings-schema/api/auth-bridge";
+import { AUTH_BRIDGE_ALGS, DEFAULT_CLOCK_SKEW_SEC, DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC, DEFAULT_OFFLINE_GRACE_SEC, WEB_ADMIN_JWKS_PATH, WebAdminJwks, classifyTimeClaims, jwksWithinOfflineGrace, shouldForceJwksRefresh, toVerifiedIdentity, } from "@sema-agent/settings-schema/api/auth-bridge";
 import { buildDisplaySafeUrl } from "./trace/redact.js";
 export function authBridgeIssuerOf(config) {
     if (config.authBridgeIssuer !== undefined)
         return { issuer: config.authBridgeIssuer, source: "explicit" };
-    if (config.configCenter !== undefined)
-        return { issuer: config.configCenter.baseUrl, source: "fallback" };
+    if (config.webAdmin !== undefined)
+        return { issuer: config.webAdmin.baseUrl, source: "fallback" };
     return undefined;
 }
 const DEFAULT_JWKS_TTL_SEC = 15 * 60;
@@ -25,10 +25,10 @@ function b64urlJson(seg) {
     }
 }
 const stripSlash = (s) => s.replace(/\/+$/, "");
-export function createRegistryJwtVerifier(opts) {
+export function createWebAdminJwtVerifier(opts) {
     const issuer = stripSlash(opts.issuer);
     const displayIssuer = buildDisplaySafeUrl(issuer);
-    const jwksUrl = opts.jwksUrl ?? `${issuer}${REGISTRY_JWKS_PATH}`;
+    const jwksUrl = opts.jwksUrl ?? `${issuer}${WEB_ADMIN_JWKS_PATH}`;
     const clockSkewSec = opts.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
     const refreshMin = opts.jwksRefreshMinIntervalSec ?? DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC;
     const offlineGraceSec = opts.offlineGraceSec ?? DEFAULT_OFFLINE_GRACE_SEC;
@@ -59,7 +59,7 @@ export function createRegistryJwtVerifier(opts) {
                 const buf = Buffer.from(await res.arrayBuffer());
                 if (buf.byteLength > MAX_JWKS_BYTES)
                     throw new Error("jwks body too large");
-                const doc = RegistryJwks.parse(JSON.parse(buf.toString("utf8")));
+                const doc = WebAdminJwks.parse(JSON.parse(buf.toString("utf8")));
                 const next = new Map();
                 for (const k of doc.keys) {
                     try {

package/dist/auth-keys.d.ts

@@ -8,7 +8,7 @@
  * (verifyApprovalHmac / verifyPrincipalJwt) stay in ./approval-hmac.ts and ./principal-jwt.ts; consumers import these four names from HERE ([ref] 兼容面全清).
  */
 /** One key in the rotating HMAC key-set. `kid` lets the verifier pick the signing key (or fall back to trying the
- *  whole set); `status` lets sema-registry rotate without breaking in-flight approvals: `active` = sign + verify,
+ *  whole set); `status` lets web-admin rotate without breaking in-flight approvals: `active` = sign + verify,
  *  `retiring` = verify-only (kept for the overlap window so a MAC signed with the old key still verifies). */
 export interface ApprovalHmacKey {
     kid: string;
@@ -36,7 +36,7 @@ export interface KeySetRejection {
  * 门数的 SHAPE B;这两条钥又都在凭据轴上,所以由**类型**逼每个调用点当场表态,而不是靠人记得去接。
  */
 export type OnKeySetRejection = (rejection: KeySetRejection) => void;
-/** Parse APPROVAL_HMAC_KEYS — a sema-registry-managed, rotating key-SET, as a JSON array of {kid,key,status}.
+/** Parse APPROVAL_HMAC_KEYS — a web-admin-managed, rotating key-SET, as a JSON array of {kid,key,status}.
  *  Empty / unset / unparseable ⇒ `[]` ⇒ HMAC verification is OFF (D-G inactive; back-compat, BFF-only door).
  *  fail-closed 语义与改前**逐字相同**;新增的只有 `onReject`([ref]:每一条被丢弃的条目都要说出来)。 */
 export declare function parseApprovalHmacKeys(raw: string | undefined, onReject: OnKeySetRejection): ApprovalHmacKey[];

package/dist/auto-mode-face.d.ts

@@ -15,8 +15,9 @@
  *
  * 本模块按**server 侧可知的同三项**算一份「若此刻提交会不会武装」的裁决,供壳(cli `sema doctor permissions`)
  * 与人自查。三项分别对应三个未武装原因(判序 = 谓词的合取序,先判到的先报):
- *  · `mode_not_auto`        —— 本次意图不是 auto(`?permissionMode=` 查询串给的;缺席 = 按 auto 意图答),或意图经本部署的运维入口地板
- *                              (`AUTONOMY=plan`)钳过之后不是 auto —— 与受理门同一只钳,提交时那个词到不了引擎;
+ *  · `mode_not_auto`        —— 本次意图不是 auto(`?permissionMode=` 查询串给的;缺席 = 按 auto 意图答),且原样到得了引擎(本部署的入口地板没改它);
+ *  · `operator_floor`       —— 本部署的运维入口地板(`AUTONOMY=plan`)把本次意图改成了别的词、那个词不是 auto(`runtime-governance.ts`
+ *                              `entryPermissionMode` 的 `clamped`,与受理门同一只函数)—— 到得了引擎的词由运维定,出路在运维换档,不在请求的词;
  *  · `deployment_incapable` —— 装配面没挂 `RunnerDeps.autoMode` 分类器席位(生产装配恒挂;桩/一次性 CLI 不挂);
  *  · `org_denied`           —— per-principal caps 的 `autoMode === false` 且本地 deny 未设(center 显式 deny、center
  *                              硬失败的 fail-closed 拒项);
@@ -35,7 +36,8 @@
  * 规则集少一整支;**不再读任何 dist 文本**。
  *
  * ## 闭集纪律([ref])
- * 六词是 core [ref] seam ⑤ + [ref] PM 裁定的闭集;`AUTO_MODE_UNARMED_REASON_SEMANTICS` 是 `Record<Reason, string>` 锁步表——
+ * 七词:core [ref] seam ⑤ + [ref] PM 裁定的六词 + `operator_floor`(意图被运维入口地板改词;与 `local_denied` / `org_denied` 同理按「指路不同」拆出);
+ * `AUTO_MODE_UNARMED_REASON_SEMANTICS` 是 `Record<Reason, string>` 锁步表——
  * 词表加员而语义表不加、或反之,都是编译红。本面**不**给壳发 prose(机器码上 wire,人话归壳),语义表只
  * 服务于文档/测试对拍。
  *
@@ -76,12 +78,13 @@ export type ClassifierRoute = {
     readonly id: undefined;
     readonly fault: string;
 };
-/** core [ref] seam ⑤ 的未武装原因闭集(六词,[ref] 加 settings_denied;顺序 = 判序)。 */
-export declare const AUTO_MODE_UNARMED_REASONS: readonly ["mode_not_auto", "deployment_incapable", "org_denied", "local_denied", "settings_denied", "resolver_fault"];
+/** 未武装原因闭集(七词:core [ref] seam ⑤ + [ref] settings_denied + 入口地板改词 operator_floor;顺序 = 判序)。 */
+export declare const AUTO_MODE_UNARMED_REASONS: readonly ["mode_not_auto", "operator_floor", "deployment_incapable", "org_denied", "local_denied", "settings_denied", "resolver_fault"];
 export type AutoModeUnarmedReason = (typeof AUTO_MODE_UNARMED_REASONS)[number];
 /** 锁步表:词表与语义一一对应(加员/删员任一侧不同步 = tsc 红)。语义只供文档/测试,不上 wire。 */
 export declare const AUTO_MODE_UNARMED_REASON_SEMANTICS: {
-    readonly mode_not_auto: "本次意图不是 auto(壳发的 permissionMode 不是 \"auto\"),或意图经本部署的运维入口地板(AUTONOMY=plan)钳过之后不是 auto —— 与受理门同一只钳,提交时那个词到不了引擎";
+    readonly mode_not_auto: "本次意图不是 auto(壳发的 permissionMode 不是 \"auto\"),且原样到得了引擎(本部署的运维入口地板没改它)—— 出路是请求 auto";
+    readonly operator_floor: "本部署的运维入口地板(AUTONOMY=plan)把本次意图改成了别的词、那个词不是 auto —— 与受理门同一只函数,提交时到得了引擎的词由运维定;出路是找运维换档,改请求的词到不了 auto";
     readonly deployment_incapable: "装配面没挂 RunnerDeps.autoMode 分类器席位(本部署/本进程形不具备分类器)";
     readonly org_denied: "per-principal caps.autoMode === false 且本地 deny 未设:center 显式 deny / center 硬失败 fail-closed 拒项";
     readonly local_denied: "本地 catalog 键 PERMISSIONS_DISABLE_AUTO_MODE=true(center/settings 键名 permissions.disableAutoMode)把 caps.autoMode 折成 false";
@@ -101,7 +104,7 @@ export interface AutoModeFaceDeps {
     /** 分类器**配置**的模型路由(server 侧按 core 的 role 回落序 `classifier → summarize → default` 从
      *  `config.roles` 读到的 catalog 名)。这是「配置了什么」,不是「这次真用了什么」——core 的
      *  `derivedRouteFallsBack` 可能在运行期回落到主模型;真值候 core 状态座。
-     *  🔴 codex r3 [medium]:是 **getter** 不是快照——config-center 会原地热更新 `config.roles`(Runner 每任务从活引用
+     *  🔴 codex r3 [medium]:是 **getter** 不是快照——web-admin 会原地热更新 `config.roles`(Runner 每任务从活引用
      *  重解),boot 期铸的字符串会在热切换后永久陈旧;生产装配递的 getter 调 `classifierRouteFor({ models: config.models, roles: config.roles })` 并把 fault 记 debug。 */
     readonly classifierModel?: (() => string | undefined) | undefined;
 }
@@ -120,8 +123,9 @@ export type AutoModeVerdict = {
  * 调用方经门验证的身份(匿名 ⇒ undefined ⇒ center 客户端答 undefined,本地 deny 层照样罩)。
  *
  * 意图那一项判的是**提交之后到得了引擎的那个词**:本次意图先过本部署的运维入口地板(`floor`,调用方传 `runtime-governance.ts`
- * `autonomyModeFloor(<活 config 的 AUTONOMY>)` —— 与受理门盖章读同一只属主),钳法 = core `clampPermissionMode`(受理门 `stampEntryPermissionMode`
- * 用的同一只钳;地板缺席 ⇒ 原样)。`AUTONOMY=plan` 部署上任何意图都被钳成 `plan` ⇒ `mode_not_auto`(闭集词复用,不另铸)。
+ * `autonomyModeFloor(<活 config 的 AUTONOMY>)` —— 与受理门盖章读同一只属主),经 `entryPermissionMode`(受理门盖章调的同一只函数)。
+ * 到得了引擎的词不是 auto ⇒ 未武装,原因按「谁定了那个词」分:地板改了词(`clamped`)⇒ `operator_floor`;词原样 ⇒ `mode_not_auto`。
+ * `AUTONOMY=plan` 部署上意图缺席 / auto / 任何比 plan 松的词 ⇒ `operator_floor`;意图本身是 `plan` ⇒ `mode_not_auto`。
  *
  * 🔴 resolver 抛错**不吞**:合成腿的每一层都自带 fail-closed/缺席臂(center 客户端 catch-all、grant 腿 onFault),
  * 走到这里还在抛 = 装配缺陷,读面 500 比一句编出来的 reason 诚实。

package/dist/auto-mode-face.js

@@ -1,5 +1,6 @@
-import { clampPermissionMode, classifierSeatModel } from "@sema-agent/core";
+import { classifierSeatModel } from "@sema-agent/core";
 import { resolveMainModel } from "./model-select.js";
+import { entryPermissionMode } from "./runtime-governance.js";
 export function classifierRouteFor(deps) {
     try {
         const main = resolveMainModel(deps);
@@ -9,9 +10,10 @@ export function classifierRouteFor(deps) {
         return { id: undefined, fault: err instanceof Error ? err.message : String(err) };
     }
 }
-export const AUTO_MODE_UNARMED_REASONS = ["mode_not_auto", "deployment_incapable", "org_denied", "local_denied", "settings_denied", "resolver_fault"];
+export const AUTO_MODE_UNARMED_REASONS = ["mode_not_auto", "operator_floor", "deployment_incapable", "org_denied", "local_denied", "settings_denied", "resolver_fault"];
 export const AUTO_MODE_UNARMED_REASON_SEMANTICS = {
-    mode_not_auto: "本次意图不是 auto(壳发的 permissionMode 不是 \"auto\"),或意图经本部署的运维入口地板(AUTONOMY=plan)钳过之后不是 auto —— 与受理门同一只钳,提交时那个词到不了引擎",
+    mode_not_auto: "本次意图不是 auto(壳发的 permissionMode 不是 \"auto\"),且原样到得了引擎(本部署的运维入口地板没改它)—— 出路是请求 auto",
+    operator_floor: "本部署的运维入口地板(AUTONOMY=plan)把本次意图改成了别的词、那个词不是 auto —— 与受理门同一只函数,提交时到得了引擎的词由运维定;出路是找运维换档,改请求的词到不了 auto",
     deployment_incapable: "装配面没挂 RunnerDeps.autoMode 分类器席位(本部署/本进程形不具备分类器)",
     org_denied: "per-principal caps.autoMode === false 且本地 deny 未设:center 显式 deny / center 硬失败 fail-closed 拒项",
     local_denied: "本地 catalog 键 PERMISSIONS_DISABLE_AUTO_MODE=true(center/settings 键名 permissions.disableAutoMode)把 caps.autoMode 折成 false",
@@ -21,10 +23,9 @@ export const AUTO_MODE_UNARMED_REASON_SEMANTICS = {
 export async function judgeAutoModeArming(face, input) {
     const route = face?.seatMounted ? face.classifierModel?.() : undefined;
     const model = route !== undefined ? { model: route } : {};
-    const intent = input.requestedMode ?? "auto";
-    const entry = input.floor === undefined ? intent : clampPermissionMode(intent, input.floor).effective;
-    if (entry !== "auto")
-        return { armed: false, reason: "mode_not_auto", ...model };
+    const entry = entryPermissionMode(input.requestedMode ?? "auto", input.floor);
+    if (entry.effective !== "auto")
+        return { armed: false, reason: entry.clamped ? "operator_floor" : "mode_not_auto", ...model };
     if (face === undefined || !face.seatMounted)
         return { armed: false, reason: "deployment_incapable" };
     let caps;

package/dist/boot/budget-tracing.js

@@ -2,7 +2,7 @@ import { createBrainAssembly } from "../brain.js";
 import { ModelUsageTracker, PromptManifestTracker, buildPricing, createSideQueryAccountant, createTracer } from "../budget.js";
 import { FleetUsageAccumulator } from "../fleet-client.js";
 import { createFleetLeaseFromEnv } from "../fleet-lease.js";
-import { centerLaneConfigured } from "../config-center/center-request.js";
+import { centerLaneConfigured } from "../web-admin-client/center-request.js";
 import { CostQuota } from "../observability/cost-quota.js";
 import { buildQuotaBounds } from "./limit-sync.js";
 import { assembleFileHistory } from "../file-history-capture.js";

package/dist/boot/execution-env.js

@@ -209,6 +209,7 @@ export function createExecutionEnv(ctx) {
             const hostScheduler = facts.hostScheduler(config).available
                 ? new FileSchedulerBackend({
                     storePath: schedulerStorePath,
+                    log: logger,
                     ...(config.schedulerSessionWakeup === false || config.schedulerSessionLifetime === false
                         ? {
                             caps: {

package/dist/boot/leader.d.ts

@@ -37,7 +37,7 @@ export interface LeaderCtx {
     /** [ref]([ref],[ref]-T1)—— 治理窗**账本店**(与 `config.usageWindows` 声明成对;声明直接从
      *  本 ctx 的 config 取,leader 不另读)。缺席 = 未配治理窗的部署。必填键,理由同 `tracer`。 */
     usageWindowStore: RunnerDeps["usageWindowStore"];
-    /** [ref]([ref])—— center 发布的 prompt catalog(`configCenter.promptSource`,与主 runner/subRunner
+    /** [ref]([ref])—— center 发布的 prompt catalog(`webAdmin.promptSource`,与主 runner/subRunner
      *  同一只)。缺席 ⇒ leader 的四类顶层任务跑引擎内置提示词,而同部署其余三条腿跑运维发布的那一份,
      *  且 core 顶层新任务是**静默**落回(无 notice)。必填键,理由同 `tracer`。 */
     promptSource: RunnerDeps["promptSource"];

package/dist/boot/memory-consolidation.d.ts

@@ -1,4 +1,4 @@
-import type { RestartSliceCtx } from "../config-center/restart-signal.js";
+import type { RestartSliceCtx } from "../web-admin-client/restart-signal.js";
 import type { MemoryConsolidationDriverConfig, ServiceConfig } from "../config-types.js";
 import { type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type RunMemoryConsolidationOptions, type SessionCaptureRecordStore } from "@sema-agent/core";
 /** D3 投影的座标签闭集。`role:<name>` 里的 name 只可能是 core 的 role 链两跳之一。 */
@@ -178,14 +178,14 @@ export declare function consolidationDriverUnwirable(input: ConsolidationWiringF
  * ({@link seatLabel} 注里同一条理由:抄一份就是第二真源,而 `ROLE_TIER_DEFAULTS` 的 flash 缺省会让手抄版答错)。
  *
  * 为什么不按 env `MODEL_CHEAP_ID` 的拼写判:它只是供座的一条路。env 角色表在它缺席时把 summarize 指回
- * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / 配置中心)的 roles / 档位同样能供
+ * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / web-admin)的 roles / 档位同样能供
  * consolidate / summarize 两跳 —— 判「装配后的座落不落主模型」才与计费事实同形(整理跑按座的模型计费)。
  *
  * 主模型 = 本仓给每条 task 铸的 `DEFAULT_MODEL_REF` 解到的那只(`boot/resolve-spec.ts` 每条 spec 都盖 `spec.model`),
  * **不是** core 的 `default` 角色链 —— 与 `auto-mode-face.ts` 的 `classifierRouteFor` 同一口径(共用 `model-select.ts`
  * `resolveMainModel`);喂**展开**目录,与引擎构造期 `expandTiers` 之后再解逐字同源。比的是**目录条目身份**(对象引用),
  * **不比 `Model.id` 串**(车PI 修复轮 ⑤ / codex C-2:两条不同名的条目可以共享上游 id 却各带不同的 baseUrl / 凭据 / 价,那是两只
- * 模型;与 `model-select.ts` `isModelAllowlisted` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
+ * 模型;与 `model-select.ts` `isAtMentionable` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
  * 就不铸那只影子条目(车PI 验修轮 B)。
  * 探针 brain 零请求:座解析只 `brainToRuntime` 它一次,真被调用 = 装配缺陷,响亮抛。
  * ⚠️ **爆炸半径**(车PI 验修轮 F10,如实登记):判决的每一臂 —— 包括未设 + 没配便宜模型的派生关(TOC 最常见的形)—— 都走
@@ -212,7 +212,7 @@ export declare function consolidationSeatBillingOf(plane: ConsolidationSeatPlane
  *    拒因说清「为什么没开」。在 `loadConfig` 判会把「未设 + scope + 便宜模型在场」这台本该派生成开的部署当场拒掉。
  *
  * ⚠️ **起服判一次**(restart-to-apply):判决落在 boot 第 4 段的装配点 {@link createConsolidationValve} —— 目录已应用
- * (`config.d/models.json` / 配置中心的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
+ * (`config.d/models.json` / web-admin 的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
  * 但翻的**需要**由 `memory-consolidation` 重启片报出来({@link createConsolidationValveWatch}):开着的那台盯座位漂移;
  * 派生关的那台盯「此刻重判会不会开」(codex 车内复审 F2:修前派生关没有任何读数,热加一只便宜模型零信号、阀门永远关着)。
  */

package/dist/boot/org-memory.d.ts

@@ -3,7 +3,7 @@
  * 的两个 seam(`RunnerDeps.memoryScopeAdmission` / `RunnerDeps.deploymentMemoryScopes`)。
  *
  * 目录源三态(单选,授权面不做双源合并):
- *  · center 在场(configCenter 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
+ *  · center 在场(webAdmin 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
  *    (走 `fetchPrincipalOrgMemory` —— 与 caps 腿同一条 HTTP 请求形与同一道 principal 回声核,但**只
  *    投影 org 段**读,治理面值漂移不连坐;段键缺席=旧 center 能力握手 ⇒ 目录记 section_absent 瞬时)。
  *    **独立 fetch,不复用 caps 缓存条目**(C3:org 授权段自带判别联合缓存,两张表的失败域互不干扰
@@ -17,7 +17,7 @@
  *
  * 能力探测(C12,fail-loud):多租户(requirePrincipal)部署 **且记忆面真点亮**(MEMORY_ENGINE 开 +
  * backend 非 file——见下方 `memoryPlaneLive` 注)的 projects 登记簿里挂了 org 键 ——这些键在多租户下
- * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 configCenter dryRun 形)⇒ 启动报错:
+ * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 webAdmin dryRun 形)⇒ 启动报错:
  * 该部署的每个 projectId 请求都会在 prepare 期被整拒,「audit 在跑但恒拒」不是可运行状态,响亮拒
  * 启动比静默全拒服务诚实(clay 三裁 [ref]:直接 BREAKING,不留兼容臂)。记忆面 dark 的部署里这些
  * 键根本到不了准入门,不在探测范围(复审 D-1)。
@@ -46,7 +46,7 @@ export interface OrgMemoryAdmissionWiring {
      *
      * 为什么这个消费点必须活取而上面那个可以不:共享记忆读面对 principal-less 请求**直接**把这组 scope
      * 当作全部授权事实交出去(没有第二道盖章腿能纠正它)⇒ 快照在新增方向让新登记的 org 库变成终局式
-     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 config-center
+     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 web-admin
      * 标注「🟢 热生效」的字段、且 env 腿恒空(只可能由 center 灌)。判据本体与快照同源(同一个
      * `collectDeploymentOrgScopes`),差别只有取值时机。
      */

package/dist/boot/org-memory.js

@@ -1,4 +1,4 @@
-import { fetchPrincipalOrgMemory } from "../config-center/http-client.js";
+import { fetchPrincipalOrgMemory } from "../web-admin-client/http-client.js";
 import { createIdentityBins } from "../center-credential.js";
 import { createMemoryScopeAdmission, createOrgMemoryDirectory, parseOrgDirectoryStatic } from "../org-memory-admission.js";
 const ORG_PREFIX = "org:";
@@ -18,11 +18,11 @@ function collectDeploymentOrgScopes(config) {
 export function createOrgMemoryAdmissionWiring(opts) {
     const { config, logger, metrics } = opts;
     const deploymentMemoryScopes = collectDeploymentOrgScopes(config);
-    const centerLeg = config.configCenter !== undefined && !config.configCenter.dryRun ? config.configCenter : undefined;
+    const centerLeg = config.webAdmin !== undefined && !config.webAdmin.dryRun ? config.webAdmin : undefined;
     const staticJson = config.memoryOrgDirectoryJson;
     if (centerLeg !== undefined && staticJson !== undefined) {
         logger.warn("org_memory_directory_env_ignored", {
-            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a config-center is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
+            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a web-admin is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
         });
     }
     const directory = centerLeg !== undefined
@@ -48,8 +48,8 @@ export function createOrgMemoryAdmissionWiring(opts) {
             .map(([id]) => id);
         if (orgProjects.length > 0) {
             throw new Error(`multi-tenant deployment has org: keys in projects[${orgProjects.join(", ")}].defaultScopes but NO org-memory directory source ` +
-                `(config-center absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
-                `(memory.admission_required, fail-closed). Wire a config-center or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
+                `(web-admin absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
+                `(memory.admission_required, fail-closed). Wire a web-admin or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
         }
     }
     const memoryScopeAdmission = directory !== undefined

package/dist/boot/resolve-spec.js

@@ -17,7 +17,7 @@ import { composeHooks, createTaskHooks } from "../hooks/hook-runner.js";
 import { HOST_POSTURE_REFUSED_CODE, taskInheritEnvRefusal, taskWriteFaceRefusal } from "../hosted-posture.js";
 import { headerStr } from "../http/principal-gate.js";
 import { explicitOperatorOk } from "../http/server.js";
-import { isModelAllowlisted, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
+import { isAtMentionable, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
 import { modelUnavailableMessage } from "../model-entry-refusal.js";
 import { PerTaskImageRegistry, resolveSandboxImageRef } from "../per-task-image.js";
 import { isRemoteScratchpadLane, remoteScratchpadDirFor } from "../plugins/remote-scratchpad.js";
@@ -30,7 +30,7 @@ import { applyRuntimeGovernance } from "../runtime-governance.js";
 import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../security.js";
 import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
-import { a2aForScenario, mcpForScenario } from "../config-center/facade.js";
+import { a2aForScenario, mcpForScenario } from "../web-admin-client/facade.js";
 import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
 import { cwdHonored, deviceCwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, isValidCwd, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "../task-cwd.js";
 import { assertRequestA2aUnlocked, resolveRequestA2a } from "../task-a2a.js";
@@ -259,7 +259,7 @@ export function createResolveSpec(ctx) {
             logger.warn("task_additional_read_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
         }
         const wireCatalog = selectableCatalog(config.models, config.tiers, config.modelRefusals);
-        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atModelAllowlist, config.modelRefusals);
+        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atMention, config.modelRefusals);
         if (picked.unavailable !== undefined) {
             const { requested, name, refusal, source } = picked.unavailable;
             if (opts?.leg === "fresh") {
@@ -271,7 +271,7 @@ export function createResolveSpec(ctx) {
         if (picked.notAllowed !== undefined) {
             const { requested, resolved, source } = picked.notAllowed;
             if (opts?.leg === "fresh") {
-                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${resolved}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${resolved}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
             }
             metrics.inc("task_model_not_allowlisted_resume_total");
             logger.warn("task_model_not_allowlisted_resume", { requested: requested.slice(0, 120), resolved, source, sessionId: auth?.sessionId ?? null, note: "resumed leg keeps running the model it was started on — the allowlist gates fresh picks only" });
@@ -395,10 +395,10 @@ export function createResolveSpec(ctx) {
                     logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
                     return {};
                 }
-                if (!isModelAllowlisted(cm, wireCatalog, config.atModelAllowlist, config.modelRefusals)) {
+                if (!isAtMentionable(cm, wireCatalog, config.atMention, config.modelRefusals)) {
                     const terminal = terminalCatalogName(cm, wireCatalog, config.modelRefusals) ?? cm;
                     if (opts?.leg === "fresh") {
-                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${terminal}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${terminal}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
                     }
                     metrics.inc("task_model_not_allowlisted_resume_total");
                     logger.warn("task_model_not_allowlisted_resume", { requested: body.compactionModel.slice(0, 120), resolved: terminal, source: "compaction", sessionId: auth?.sessionId ?? null, note: "resumed leg keeps the compaction model it was started with — the allowlist gates fresh picks only" });
@@ -622,7 +622,7 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
             }
             if (!imageIndex) {
-                throw new HttpError(400, "sandboxImageProfile requires the image index (config-center backend not configured)");
+                throw new HttpError(400, "sandboxImageProfile requires the image index (web-admin backend not configured)");
             }
             if (!auth?.sessionId) {
                 throw new HttpError(400, "sandboxImageProfile requires a resolved session");

package/dist/boot/runner-deps.d.ts

@@ -204,7 +204,7 @@ export interface RunnerDepsCtx {
     permissionRuleStore: RunnerDeps["permissionRuleStore"];
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账席 —— core 每次 MCP dispatch 前同步探
      *  `isRevoked(serverName)`,被撤服务器的调用结算为 coded 拒绝 `mcp.server_revoked`(known-not-executed)。
-     *  来源=configCenter.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
+     *  来源=webAdmin.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
      *  缺席=undefined=pre-338 语义(纯 env 部署无中心撤销面)。 */
     mcpRevocations: RunnerDeps["mcpRevocations"];
     /**

package/dist/boot/runtime-caps.d.ts

@@ -23,7 +23,7 @@ export interface RuntimeCapsCtx {
  *
  * governed 的语义是「per-principal verdict **必答**」:core 对 verdict 缺席一律**拒跑**(fail-closed,部署显式
  * 选的方向)。verdict 源**两条**(析取,[ref] 起):①SQL 后端上的 `memory_optout_grant` 表(三层折叠后
- * 恒答显式 boolean),②非 dry-run 的 config center 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
+ * 恒答显式 boolean),②非 dry-run 的 web-admin 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
  * governed 而两源皆无 ⇒ 每一个 `capture:"off"` 声明都被 core 以
  * `memory.capture_optout_denied` 拒掉,而运维看到的只是一台「启动成功、opt-out 全拒」的机器 —— 正是
  * 「阀门开着而配不出来 ⇒ 悄悄读成别的」那一形。所以在**启动期**点名:接 SQL 后端(表随中央

package/dist/boot/runtime-caps.js

@@ -1,6 +1,6 @@
 import { applyGovernedVerdictAbsenceWarning, applyLocalAutoModeDeny, applyMemoryOptOutGrant, applyObserverEnvOptIn, centerEntitlementSourceWired, createPrincipalEntitlementsClient, } from "../runtime-caps-resolver.js";
 import { scopedTokenNeedsWorker } from "../center-credential.js";
-import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export function assertMemoryCapturePolicyWirable(input) {
     if (input.policy !== "governed")
         return;
@@ -13,9 +13,9 @@ export function assertMemoryCapturePolicyWirable(input) {
         `own contract), so a governed worker without a source would refuse every \`memory.capture:"off"\` declaration and the ` +
         `refusal would read as an entitlement denial rather than the misconfiguration it is. This version has TWO verdict sources ` +
         `— wire either one: (1) the \`memory_optout_grant\` table on a SQL store backend (DB_BACKEND=mysql|pg; the table is ` +
-        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a config center that ` +
-        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (SEMA_REGISTRY_URL + ${CENTER_CREDENTIAL_ENV.token}, ` +
-        `SEMA_REGISTRY_DRY_RUN off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
+        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a web-admin that ` +
+        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (${WEB_ADMIN_ENV.url} + ${WEB_ADMIN_ENV.token}, ` +
+        `${WEB_ADMIN_ENV.dryRun} off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
         `the entitlement schema: a center that never emits it leaves every verdict absent, i.e. every opt-out still refused). ` +
         `Or set MEMORY_CAPTURE_POLICY=open (opt-outs take effect; only an explicit per-principal false denies) or ` +
         `MEMORY_CAPTURE_POLICY=capture-required (every opt-out declaration refused, no source consulted).`);
@@ -35,18 +35,18 @@ export function createRuntimeCaps(ctx) {
     const governedCenterOnlySource = config.memoryCapturePolicy === "governed" && !grantSourceWired && centerEntitlementSourceWired(config);
     if (governedCenterOnlySource) {
         logger.warn("memory_capture_governed_center_only_source", {
-            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the config center, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
+            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the web-admin, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
         });
     }
-    if (centerEntitlementSourceWired(config) && config.configCenter && scopedTokenNeedsWorker(config.configCenter.credential.read(), config.configCenter.worker)) {
+    if (centerEntitlementSourceWired(config) && config.webAdmin && scopedTokenNeedsWorker(config.webAdmin.credential.read(), config.webAdmin.worker)) {
         logger.warn("runtime_caps_scoped_token_no_worker", {
-            reason: `${CENTER_CREDENTIAL_ENV.token} is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
+            reason: `${WEB_ADMIN_ENV.token} is a worker-scoped wpt_ token but ${WEB_ADMIN_ENV.worker} is unset → web-admin 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set ${WEB_ADMIN_ENV.worker} (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
         });
     }
-    const principalCaps = centerEntitlementSourceWired(config) && config.configCenter
+    const principalCaps = centerEntitlementSourceWired(config) && config.webAdmin
         ? createPrincipalEntitlementsClient({
-            center: config.configCenter,
-            ...(config.configCenter.worker ? { worker: config.configCenter.worker } : {}),
+            center: config.webAdmin,
+            ...(config.webAdmin.worker ? { worker: config.webAdmin.worker } : {}),
             onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }),
         })
         : undefined;

package/dist/boot/shutdown.d.ts

@@ -79,9 +79,9 @@ export interface ShutdownCtx {
      * HTTP 层不能自作主张。所以 `drainState.draining` 翻真的那一刻,这里同步调 `beginDrain()`。
      */
     deviceHub: import("../device-ws-hub.js").DeviceWsHub | undefined;
-    /** [ref]-2:config 60s 刷新环(config-center startRefreshLoop)——不停的话停机中途还可能热应用
+    /** [ref]-2:config 60s 刷新环(web-admin startRefreshLoop)——不停的话停机中途还可能热应用
      *  一份新配置。缺席 = 纯 env 部署没起环。 */
-    configCenter: {
+    webAdmin: {
         stopRefreshLoop(): void;
     } | undefined;
     /** S-929:活体审批协调器(`TOOL_APPROVAL_ENABLED` 关 ⇒ 缺席)。hardShutdown 起点调它的 `drainForShutdown`:本进程握着的活卡

package/dist/boot/shutdown.js

@@ -17,7 +17,7 @@ export function backgroundGraceRemainingMs(a) {
     return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
 }
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, configCenter, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
+    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
     const dataRoot = config.localDataRoot;
     if (dataRoot) {
         const prior = readCrashLast(dataRoot);
@@ -107,7 +107,7 @@ export function installShutdownHandlers(ctx) {
         storeLiveProbe?.stop();
         servingLease?.stop();
         void deviceHub?.close().catch((err) => logger.warn("device_hub_close_failed", { err: String(err) }));
-        configCenter?.stopRefreshLoop();
+        webAdmin?.stopRefreshLoop();
         otelExporter?.stop();
         breakerState?.stop();
         runner.sessions.dispose();