@sema-agent/server 7.123.0 → 7.124.0

package/dist/approval-reconciler.js

@@ -1,7 +1,7 @@
 import { CANCELLED_CODE } from "./run-cancel-context.js";
 import { settleByPolicy } from "./approval-policy-settlement.js";
 import { isTerminalRunStatus } from "./plugins/store-contracts.js";
-import { DENY_REASONS, VOID_REASONS } from "./approval-deny-reasons.js";
+import { APPROVAL_ENDING_CAUSES } from "./approval-deny-reasons.js";
 import { buildRevokeFrame } from "./approval-card.js";
 import { encodeCheckpointScope } from "./security.js";
 const RECONCILE_STORE_TIMEOUT_MS = 10_000;
@@ -61,21 +61,21 @@ export function decideReconcileAction(input) {
         }
     }
     if (batchState === "ABORTED")
-        return { kind: "void", reason: VOID_REASONS.BATCH_ABORTED };
+        return { kind: "void", reason: APPROVAL_ENDING_CAUSES.BATCH_ABORTED };
     if (batchState === "ROUTING_BOUND" && input.batchBoundAskId != null && input.batchBoundAskId !== ask.askId) {
-        return { kind: "void", reason: VOID_REASONS.BATCH_BOUND_ELSEWHERE };
+        return { kind: "void", reason: APPROVAL_ENDING_CAUSES.BATCH_BOUND_ELSEWHERE };
     }
     if (run !== null && isTerminalRunStatus(run.status)) {
         if (run.status === "failed" && run.errorCode === CANCELLED_CODE) {
-            return { kind: "void", reason: VOID_REASONS.RUN_CANCELLED };
+            return { kind: "void", reason: APPROVAL_ENDING_CAUSES.RUN_CANCELLED };
         }
-        return { kind: "deny", reason: DENY_REASONS.ROUTING_FAILURE };
+        return { kind: "deny", reason: APPROVAL_ENDING_CAUSES.ROUTING_FAILURE };
     }
     if (run === null && ask.sessionId === ask.taskId && nowMs > ask.expiresAtMs + adhocGraceMs) {
-        return { kind: "void", reason: VOID_REASONS.ADHOC_LEG_NO_DURABLE_DOMAIN };
+        return { kind: "void", reason: APPROVAL_ENDING_CAUSES.ADHOC_LEG_NO_DURABLE_DOMAIN };
     }
     if (nowMs - ask.createdAtMs >= orphanTtlMs)
-        return { kind: "void", reason: VOID_REASONS.ORPHAN_TTL_EXCEEDED };
+        return { kind: "void", reason: APPROVAL_ENDING_CAUSES.ORPHAN_TTL_EXCEEDED };
     void candidates;
     return { kind: "hold" };
 }
@@ -157,10 +157,10 @@ export function createApprovalReconciler(deps) {
                 const won = await withDeadline(askStore.transitionAsk(ask.askId, "PARKING", "VOID", { deniedReason: action.reason, updatedAtMs: nowMs }), "transitionAsk(VOID)");
                 if (!won)
                     return { outcome: "held", match: gateMatch };
-                if (action.reason === VOID_REASONS.ORPHAN_TTL_EXCEEDED) {
+                if (action.reason === APPROVAL_ENDING_CAUSES.ORPHAN_TTL_EXCEEDED) {
                     warn("approval_ask_orphan_voided", { askId: ask.askId, taskId: ask.taskId, ageMs: nowMs - ask.createdAtMs, ttlMs: orphanTtlMs });
                 }
-                revoke(ask, [ask.askId], action.reason === VOID_REASONS.BATCH_BOUND_ELSEWHERE ? "superseded_by_park" : "aborted", nowMs);
+                revoke(ask, [ask.askId], action.reason === APPROVAL_ENDING_CAUSES.BATCH_BOUND_ELSEWHERE ? "superseded_by_park" : "aborted", nowMs);
                 return { outcome: "voided", match: gateMatch };
             }
             case "hold": {
@@ -274,7 +274,7 @@ export function createApprovalReconciler(deps) {
                 if (row.expiresAtMs + pendingGraceMs >= nowMs)
                     continue;
                 try {
-                    const res = await withDeadline(settleByPolicy(askStore, row, unattendedPolicy), "claimTerminal(orphan)");
+                    const res = await withDeadline(settleByPolicy(askStore, row, unattendedPolicy, APPROVAL_ENDING_CAUSES.TTL_EXPIRED), "claimTerminal(orphan)");
                     if (!res.claimed)
                         continue;
                     stats.orphansExpired += 1;

package/dist/approval.d.ts

@@ -58,7 +58,7 @@ export declare function singleUserAutoAcceptBaselineApplies(config: GateIntentVi
  *    HIGH;与 env 墓碑族同谱系)。v4.3.0 的轮询门形(APPROVAL_REQUIRE + DB backend + DURABLE_APPROVAL 未设)在
  *    5.0.0 只剩 core 每任务 warn——**原先拦、现在放**(方向反转)。「留 undefined 让 core warn」对新配置是
  *    曝露误配,对升级存量是门静默消失,后者必须响亮。
- *  · **热路径**(S-668 波 2 ④,`config-center/apply-effective.ts` 的审批组 stage):对**候选视图**
+ *  · **热路径**(S-668 波 2 ④,`web-admin-client/apply-effective.ts` 的审批组 stage):对**候选视图**
  *    (活配置 + 候选名单)判,拒因 ⇒ 审批组**整组拒**、活配置零变化、世代账停旧代。进程在跑,拒启不是选项;
  *    而放行一份「没有 checkpoint 店可停车」的名单 = 单用户 auto-accept 基线仍在、名单静默不生效。
  *  · **每个任务的装配**(S-1144,`boot/resolve-spec.ts` 的 `resolveSpec` 头一道):对**活配置**判,拒因 ⇒ 请求 501

package/dist/approval.js

@@ -58,7 +58,7 @@ export function buildForceDurableGateInertNotice(input) {
         event: "center_force_durable_gate_inert",
         fields: {
             durableApproval: input.durableApproval,
-            note: "this deployment resolves per-principal entitlements from config-center, but it has NO checkpoint store " +
+            note: "this deployment resolves per-principal entitlements from web-admin, but it has NO checkpoint store " +
                 (input.durableApproval
                     ? "(DURABLE_APPROVAL=true, yet the configured backend exposes no checkpoint face)"
                     : "(DURABLE_APPROVAL is off)") +

package/dist/audit.js

@@ -4,6 +4,7 @@ import { PgSessionStorage } from "./plugins/pg-session-storage.js";
 import { createLocalSessionRepo } from "./plugins/local-session-store.js";
 import { redactModelText } from "./observability/run-terminal.js";
 import { redactDeepWith } from "./trace/redact.js";
+import { INJECTED_BLOCK_RE } from "./user-authored-text.js";
 export async function buildSessionAudit(pool, sessionId) {
     return auditFromStorage(await TiDBSessionStorage.wake(pool, sessionId), sessionId);
 }
@@ -142,7 +143,6 @@ export function windowMessages(messages, opts) {
     const offset = Math.max(0, total - tail);
     return { messages: messages.slice(offset), window: { offset, total } };
 }
-const INJECTED_BLOCK_RE = /<(system-reminder|task-notification)(?:\s[^>]*)?>[\s\S]*?<\/\1>\s*/g;
 function capWithInjectionAwareness(s, capBytes) {
     const total = Buffer.byteLength(s, "utf8");
     if (total <= capBytes)

package/dist/auth-bridge.d.ts

@@ -4,22 +4,22 @@ import type { Metrics } from "./observability/metrics.js";
 export type { VerifiedIdentity } from "@sema-agent/settings-schema/api/auth-bridge";
 /**
  * S-866 ② —— 鉴权桥 issuer 的**唯一**取值(装配 `boot/stage-09-leader.ts` 与 caps `centerWiring.issuer` 同读,不各写一份回退):
- * 显式 `AUTH_BRIDGE_ISSUER`(`config.authBridgeIssuer`)恒赢 ⇒ `source:"explicit"`;缺席则回退中心基址 `configCenter.baseUrl`
+ * 显式 `AUTH_BRIDGE_ISSUER`(`config.authBridgeIssuer`)恒赢 ⇒ `source:"explicit"`;缺席则回退中心基址 `webAdmin.baseUrl`
  * (配了中心即默认开桥)⇒ `source:"fallback"`;两者都没有 ⇒ `undefined`(桥不装)。
  */
 export declare function authBridgeIssuerOf(config: {
     readonly authBridgeIssuer?: string | undefined;
-    readonly configCenter?: {
+    readonly webAdmin?: {
         readonly baseUrl: string;
     } | undefined;
 }): {
     readonly issuer: string;
     readonly source: "explicit" | "fallback";
 } | undefined;
-export interface RegistryJwtVerifierOptions {
-    /** R4 — 期望 iss(registry 的 SSO_ISSUER;默认=SEMA_REGISTRY_URL,双侧去尾斜杠比较)。 */
+export interface WebAdminJwtVerifierOptions {
+    /** R4 — 期望 iss(registry 的 SSO_ISSUER;默认=SEMA_WEB_ADMIN_URL,双侧去尾斜杠比较)。 */
     issuer: string;
-    /** R2 — JWKS 绝对 URL(默认=issuer + REGISTRY_JWKS_PATH)。 */
+    /** R2 — JWKS 绝对 URL(默认=issuer + WEB_ADMIN_JWKS_PATH)。 */
     jwksUrl?: string;
     /** R7 — 设了则 aud 必须包含它;不设=忽略 aud。 */
     audience?: string;
@@ -41,13 +41,13 @@ export type VerifyOutcome = {
     ok: false;
     error: AuthBridgeErrorCode;
 };
-/** The live object `createRegistryJwtVerifier` produces — a single `verify` entry point over the process-level JWKS cache. */
-export interface RegistryJwtVerifier {
+/** The live object `createWebAdminJwtVerifier` produces — a single `verify` entry point over the process-level JWKS cache. */
+export interface WebAdminJwtVerifier {
     verify: (bearer: string) => Promise<VerifyOutcome>;
 }
 /**
  * registry-JWT verifier(单例,进程级 JWKS 缓存)。`verify(bearer)` 全程不 throw——一切异常折为
  * AUTH_BRIDGE_ERROR_CODES(HTTP 面由调用方恒答 generic 401,码只进日志/metrics,R9)。
  */
-export declare function createRegistryJwtVerifier(opts: RegistryJwtVerifierOptions): RegistryJwtVerifier;
+export declare function createWebAdminJwtVerifier(opts: WebAdminJwtVerifierOptions): WebAdminJwtVerifier;
 //# sourceMappingURL=auth-bridge.d.ts.map

package/dist/auth-bridge.js

@@ -1,11 +1,11 @@
 import { createPublicKey, verify as cryptoVerify } from "node:crypto";
-import { AUTH_BRIDGE_ALGS, DEFAULT_CLOCK_SKEW_SEC, DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC, DEFAULT_OFFLINE_GRACE_SEC, REGISTRY_JWKS_PATH, RegistryJwks, classifyTimeClaims, jwksWithinOfflineGrace, shouldForceJwksRefresh, toVerifiedIdentity, } from "@sema-agent/settings-schema/api/auth-bridge";
+import { AUTH_BRIDGE_ALGS, DEFAULT_CLOCK_SKEW_SEC, DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC, DEFAULT_OFFLINE_GRACE_SEC, WEB_ADMIN_JWKS_PATH, WebAdminJwks, classifyTimeClaims, jwksWithinOfflineGrace, shouldForceJwksRefresh, toVerifiedIdentity, } from "@sema-agent/settings-schema/api/auth-bridge";
 import { buildDisplaySafeUrl } from "./trace/redact.js";
 export function authBridgeIssuerOf(config) {
     if (config.authBridgeIssuer !== undefined)
         return { issuer: config.authBridgeIssuer, source: "explicit" };
-    if (config.configCenter !== undefined)
-        return { issuer: config.configCenter.baseUrl, source: "fallback" };
+    if (config.webAdmin !== undefined)
+        return { issuer: config.webAdmin.baseUrl, source: "fallback" };
     return undefined;
 }
 const DEFAULT_JWKS_TTL_SEC = 15 * 60;
@@ -25,10 +25,10 @@ function b64urlJson(seg) {
     }
 }
 const stripSlash = (s) => s.replace(/\/+$/, "");
-export function createRegistryJwtVerifier(opts) {
+export function createWebAdminJwtVerifier(opts) {
     const issuer = stripSlash(opts.issuer);
     const displayIssuer = buildDisplaySafeUrl(issuer);
-    const jwksUrl = opts.jwksUrl ?? `${issuer}${REGISTRY_JWKS_PATH}`;
+    const jwksUrl = opts.jwksUrl ?? `${issuer}${WEB_ADMIN_JWKS_PATH}`;
     const clockSkewSec = opts.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
     const refreshMin = opts.jwksRefreshMinIntervalSec ?? DEFAULT_JWKS_REFRESH_MIN_INTERVAL_SEC;
     const offlineGraceSec = opts.offlineGraceSec ?? DEFAULT_OFFLINE_GRACE_SEC;
@@ -59,7 +59,7 @@ export function createRegistryJwtVerifier(opts) {
                 const buf = Buffer.from(await res.arrayBuffer());
                 if (buf.byteLength > MAX_JWKS_BYTES)
                     throw new Error("jwks body too large");
-                const doc = RegistryJwks.parse(JSON.parse(buf.toString("utf8")));
+                const doc = WebAdminJwks.parse(JSON.parse(buf.toString("utf8")));
                 const next = new Map();
                 for (const k of doc.keys) {
                     try {

package/dist/auth-keys.d.ts

@@ -8,7 +8,7 @@
  * (verifyApprovalHmac / verifyPrincipalJwt) stay in ./approval-hmac.ts and ./principal-jwt.ts; consumers import these four names from HERE ([ref] 兼容面全清).
  */
 /** One key in the rotating HMAC key-set. `kid` lets the verifier pick the signing key (or fall back to trying the
- *  whole set); `status` lets sema-registry rotate without breaking in-flight approvals: `active` = sign + verify,
+ *  whole set); `status` lets web-admin rotate without breaking in-flight approvals: `active` = sign + verify,
  *  `retiring` = verify-only (kept for the overlap window so a MAC signed with the old key still verifies). */
 export interface ApprovalHmacKey {
     kid: string;
@@ -36,7 +36,7 @@ export interface KeySetRejection {
  * 门数的 SHAPE B;这两条钥又都在凭据轴上,所以由**类型**逼每个调用点当场表态,而不是靠人记得去接。
  */
 export type OnKeySetRejection = (rejection: KeySetRejection) => void;
-/** Parse APPROVAL_HMAC_KEYS — a sema-registry-managed, rotating key-SET, as a JSON array of {kid,key,status}.
+/** Parse APPROVAL_HMAC_KEYS — a web-admin-managed, rotating key-SET, as a JSON array of {kid,key,status}.
  *  Empty / unset / unparseable ⇒ `[]` ⇒ HMAC verification is OFF (D-G inactive; back-compat, BFF-only door).
  *  fail-closed 语义与改前**逐字相同**;新增的只有 `onReject`([ref]:每一条被丢弃的条目都要说出来)。 */
 export declare function parseApprovalHmacKeys(raw: string | undefined, onReject: OnKeySetRejection): ApprovalHmacKey[];

package/dist/auto-mode-face.d.ts

@@ -104,7 +104,7 @@ export interface AutoModeFaceDeps {
     /** 分类器**配置**的模型路由(server 侧按 core 的 role 回落序 `classifier → summarize → default` 从
      *  `config.roles` 读到的 catalog 名)。这是「配置了什么」,不是「这次真用了什么」——core 的
      *  `derivedRouteFallsBack` 可能在运行期回落到主模型;真值候 core 状态座。
-     *  🔴 codex r3 [medium]:是 **getter** 不是快照——config-center 会原地热更新 `config.roles`(Runner 每任务从活引用
+     *  🔴 codex r3 [medium]:是 **getter** 不是快照——web-admin 会原地热更新 `config.roles`(Runner 每任务从活引用
      *  重解),boot 期铸的字符串会在热切换后永久陈旧;生产装配递的 getter 调 `classifierRouteFor({ models: config.models, roles: config.roles })` 并把 fault 记 debug。 */
     readonly classifierModel?: (() => string | undefined) | undefined;
 }

package/dist/boot/budget-tracing.js

@@ -2,7 +2,7 @@ import { createBrainAssembly } from "../brain.js";
 import { ModelUsageTracker, PromptManifestTracker, buildPricing, createSideQueryAccountant, createTracer } from "../budget.js";
 import { FleetUsageAccumulator } from "../fleet-client.js";
 import { createFleetLeaseFromEnv } from "../fleet-lease.js";
-import { centerLaneConfigured } from "../config-center/center-request.js";
+import { centerLaneConfigured } from "../web-admin-client/center-request.js";
 import { CostQuota } from "../observability/cost-quota.js";
 import { buildQuotaBounds } from "./limit-sync.js";
 import { assembleFileHistory } from "../file-history-capture.js";

package/dist/boot/execution-env.js

@@ -209,6 +209,7 @@ export function createExecutionEnv(ctx) {
             const hostScheduler = facts.hostScheduler(config).available
                 ? new FileSchedulerBackend({
                     storePath: schedulerStorePath,
+                    log: logger,
                     ...(config.schedulerSessionWakeup === false || config.schedulerSessionLifetime === false
                         ? {
                             caps: {

package/dist/boot/leader.d.ts

@@ -37,7 +37,7 @@ export interface LeaderCtx {
     /** [ref]([ref],[ref]-T1)—— 治理窗**账本店**(与 `config.usageWindows` 声明成对;声明直接从
      *  本 ctx 的 config 取,leader 不另读)。缺席 = 未配治理窗的部署。必填键,理由同 `tracer`。 */
     usageWindowStore: RunnerDeps["usageWindowStore"];
-    /** [ref]([ref])—— center 发布的 prompt catalog(`configCenter.promptSource`,与主 runner/subRunner
+    /** [ref]([ref])—— center 发布的 prompt catalog(`webAdmin.promptSource`,与主 runner/subRunner
      *  同一只)。缺席 ⇒ leader 的四类顶层任务跑引擎内置提示词,而同部署其余三条腿跑运维发布的那一份,
      *  且 core 顶层新任务是**静默**落回(无 notice)。必填键,理由同 `tracer`。 */
     promptSource: RunnerDeps["promptSource"];

package/dist/boot/memory-consolidation.d.ts

@@ -1,4 +1,4 @@
-import type { RestartSliceCtx } from "../config-center/restart-signal.js";
+import type { RestartSliceCtx } from "../web-admin-client/restart-signal.js";
 import type { MemoryConsolidationDriverConfig, ServiceConfig } from "../config-types.js";
 import { type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type RunMemoryConsolidationOptions, type SessionCaptureRecordStore } from "@sema-agent/core";
 /** D3 投影的座标签闭集。`role:<name>` 里的 name 只可能是 core 的 role 链两跳之一。 */
@@ -178,14 +178,14 @@ export declare function consolidationDriverUnwirable(input: ConsolidationWiringF
  * ({@link seatLabel} 注里同一条理由:抄一份就是第二真源,而 `ROLE_TIER_DEFAULTS` 的 flash 缺省会让手抄版答错)。
  *
  * 为什么不按 env `MODEL_CHEAP_ID` 的拼写判:它只是供座的一条路。env 角色表在它缺席时把 summarize 指回
- * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / 配置中心)的 roles / 档位同样能供
+ * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / web-admin)的 roles / 档位同样能供
  * consolidate / summarize 两跳 —— 判「装配后的座落不落主模型」才与计费事实同形(整理跑按座的模型计费)。
  *
  * 主模型 = 本仓给每条 task 铸的 `DEFAULT_MODEL_REF` 解到的那只(`boot/resolve-spec.ts` 每条 spec 都盖 `spec.model`),
  * **不是** core 的 `default` 角色链 —— 与 `auto-mode-face.ts` 的 `classifierRouteFor` 同一口径(共用 `model-select.ts`
  * `resolveMainModel`);喂**展开**目录,与引擎构造期 `expandTiers` 之后再解逐字同源。比的是**目录条目身份**(对象引用),
  * **不比 `Model.id` 串**(车PI 修复轮 ⑤ / codex C-2:两条不同名的条目可以共享上游 id 却各带不同的 baseUrl / 凭据 / 价,那是两只
- * 模型;与 `model-select.ts` `isModelAllowlisted` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
+ * 模型;与 `model-select.ts` `isAtMentionable` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
  * 就不铸那只影子条目(车PI 验修轮 B)。
  * 探针 brain 零请求:座解析只 `brainToRuntime` 它一次,真被调用 = 装配缺陷,响亮抛。
  * ⚠️ **爆炸半径**(车PI 验修轮 F10,如实登记):判决的每一臂 —— 包括未设 + 没配便宜模型的派生关(TOC 最常见的形)—— 都走
@@ -212,7 +212,7 @@ export declare function consolidationSeatBillingOf(plane: ConsolidationSeatPlane
  *    拒因说清「为什么没开」。在 `loadConfig` 判会把「未设 + scope + 便宜模型在场」这台本该派生成开的部署当场拒掉。
  *
  * ⚠️ **起服判一次**(restart-to-apply):判决落在 boot 第 4 段的装配点 {@link createConsolidationValve} —— 目录已应用
- * (`config.d/models.json` / 配置中心的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
+ * (`config.d/models.json` / web-admin 的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
  * 但翻的**需要**由 `memory-consolidation` 重启片报出来({@link createConsolidationValveWatch}):开着的那台盯座位漂移;
  * 派生关的那台盯「此刻重判会不会开」(codex 车内复审 F2:修前派生关没有任何读数,热加一只便宜模型零信号、阀门永远关着)。
  */

package/dist/boot/org-memory.d.ts

@@ -3,7 +3,7 @@
  * 的两个 seam(`RunnerDeps.memoryScopeAdmission` / `RunnerDeps.deploymentMemoryScopes`)。
  *
  * 目录源三态(单选,授权面不做双源合并):
- *  · center 在场(configCenter 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
+ *  · center 在场(webAdmin 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
  *    (走 `fetchPrincipalOrgMemory` —— 与 caps 腿同一条 HTTP 请求形与同一道 principal 回声核,但**只
  *    投影 org 段**读,治理面值漂移不连坐;段键缺席=旧 center 能力握手 ⇒ 目录记 section_absent 瞬时)。
  *    **独立 fetch,不复用 caps 缓存条目**(C3:org 授权段自带判别联合缓存,两张表的失败域互不干扰
@@ -17,7 +17,7 @@
  *
  * 能力探测(C12,fail-loud):多租户(requirePrincipal)部署 **且记忆面真点亮**(MEMORY_ENGINE 开 +
  * backend 非 file——见下方 `memoryPlaneLive` 注)的 projects 登记簿里挂了 org 键 ——这些键在多租户下
- * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 configCenter dryRun 形)⇒ 启动报错:
+ * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 webAdmin dryRun 形)⇒ 启动报错:
  * 该部署的每个 projectId 请求都会在 prepare 期被整拒,「audit 在跑但恒拒」不是可运行状态,响亮拒
  * 启动比静默全拒服务诚实(clay 三裁 [ref]:直接 BREAKING,不留兼容臂)。记忆面 dark 的部署里这些
  * 键根本到不了准入门,不在探测范围(复审 D-1)。
@@ -46,7 +46,7 @@ export interface OrgMemoryAdmissionWiring {
      *
      * 为什么这个消费点必须活取而上面那个可以不:共享记忆读面对 principal-less 请求**直接**把这组 scope
      * 当作全部授权事实交出去(没有第二道盖章腿能纠正它)⇒ 快照在新增方向让新登记的 org 库变成终局式
-     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 config-center
+     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 web-admin
      * 标注「🟢 热生效」的字段、且 env 腿恒空(只可能由 center 灌)。判据本体与快照同源(同一个
      * `collectDeploymentOrgScopes`),差别只有取值时机。
      */

package/dist/boot/org-memory.js

@@ -1,4 +1,4 @@
-import { fetchPrincipalOrgMemory } from "../config-center/http-client.js";
+import { fetchPrincipalOrgMemory } from "../web-admin-client/http-client.js";
 import { createIdentityBins } from "../center-credential.js";
 import { createMemoryScopeAdmission, createOrgMemoryDirectory, parseOrgDirectoryStatic } from "../org-memory-admission.js";
 const ORG_PREFIX = "org:";
@@ -18,11 +18,11 @@ function collectDeploymentOrgScopes(config) {
 export function createOrgMemoryAdmissionWiring(opts) {
     const { config, logger, metrics } = opts;
     const deploymentMemoryScopes = collectDeploymentOrgScopes(config);
-    const centerLeg = config.configCenter !== undefined && !config.configCenter.dryRun ? config.configCenter : undefined;
+    const centerLeg = config.webAdmin !== undefined && !config.webAdmin.dryRun ? config.webAdmin : undefined;
     const staticJson = config.memoryOrgDirectoryJson;
     if (centerLeg !== undefined && staticJson !== undefined) {
         logger.warn("org_memory_directory_env_ignored", {
-            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a config-center is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
+            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a web-admin is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
         });
     }
     const directory = centerLeg !== undefined
@@ -48,8 +48,8 @@ export function createOrgMemoryAdmissionWiring(opts) {
             .map(([id]) => id);
         if (orgProjects.length > 0) {
             throw new Error(`multi-tenant deployment has org: keys in projects[${orgProjects.join(", ")}].defaultScopes but NO org-memory directory source ` +
-                `(config-center absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
-                `(memory.admission_required, fail-closed). Wire a config-center or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
+                `(web-admin absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
+                `(memory.admission_required, fail-closed). Wire a web-admin or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
         }
     }
     const memoryScopeAdmission = directory !== undefined

package/dist/boot/resolve-spec.js

@@ -17,7 +17,7 @@ import { composeHooks, createTaskHooks } from "../hooks/hook-runner.js";
 import { HOST_POSTURE_REFUSED_CODE, taskInheritEnvRefusal, taskWriteFaceRefusal } from "../hosted-posture.js";
 import { headerStr } from "../http/principal-gate.js";
 import { explicitOperatorOk } from "../http/server.js";
-import { isModelAllowlisted, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
+import { isAtMentionable, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
 import { modelUnavailableMessage } from "../model-entry-refusal.js";
 import { PerTaskImageRegistry, resolveSandboxImageRef } from "../per-task-image.js";
 import { isRemoteScratchpadLane, remoteScratchpadDirFor } from "../plugins/remote-scratchpad.js";
@@ -30,7 +30,7 @@ import { applyRuntimeGovernance } from "../runtime-governance.js";
 import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../security.js";
 import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
-import { a2aForScenario, mcpForScenario } from "../config-center/facade.js";
+import { a2aForScenario, mcpForScenario } from "../web-admin-client/facade.js";
 import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
 import { cwdHonored, deviceCwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, isValidCwd, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "../task-cwd.js";
 import { assertRequestA2aUnlocked, resolveRequestA2a } from "../task-a2a.js";
@@ -259,7 +259,7 @@ export function createResolveSpec(ctx) {
             logger.warn("task_additional_read_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
         }
         const wireCatalog = selectableCatalog(config.models, config.tiers, config.modelRefusals);
-        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atModelAllowlist, config.modelRefusals);
+        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atMention, config.modelRefusals);
         if (picked.unavailable !== undefined) {
             const { requested, name, refusal, source } = picked.unavailable;
             if (opts?.leg === "fresh") {
@@ -271,7 +271,7 @@ export function createResolveSpec(ctx) {
         if (picked.notAllowed !== undefined) {
             const { requested, resolved, source } = picked.notAllowed;
             if (opts?.leg === "fresh") {
-                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${resolved}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${resolved}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
             }
             metrics.inc("task_model_not_allowlisted_resume_total");
             logger.warn("task_model_not_allowlisted_resume", { requested: requested.slice(0, 120), resolved, source, sessionId: auth?.sessionId ?? null, note: "resumed leg keeps running the model it was started on — the allowlist gates fresh picks only" });
@@ -395,10 +395,10 @@ export function createResolveSpec(ctx) {
                     logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
                     return {};
                 }
-                if (!isModelAllowlisted(cm, wireCatalog, config.atModelAllowlist, config.modelRefusals)) {
+                if (!isAtMentionable(cm, wireCatalog, config.atMention, config.modelRefusals)) {
                     const terminal = terminalCatalogName(cm, wireCatalog, config.modelRefusals) ?? cm;
                     if (opts?.leg === "fresh") {
-                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${terminal}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${terminal}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
                     }
                     metrics.inc("task_model_not_allowlisted_resume_total");
                     logger.warn("task_model_not_allowlisted_resume", { requested: body.compactionModel.slice(0, 120), resolved: terminal, source: "compaction", sessionId: auth?.sessionId ?? null, note: "resumed leg keeps the compaction model it was started with — the allowlist gates fresh picks only" });
@@ -622,7 +622,7 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
             }
             if (!imageIndex) {
-                throw new HttpError(400, "sandboxImageProfile requires the image index (config-center backend not configured)");
+                throw new HttpError(400, "sandboxImageProfile requires the image index (web-admin backend not configured)");
             }
             if (!auth?.sessionId) {
                 throw new HttpError(400, "sandboxImageProfile requires a resolved session");

package/dist/boot/runner-deps.d.ts

@@ -204,7 +204,7 @@ export interface RunnerDepsCtx {
     permissionRuleStore: RunnerDeps["permissionRuleStore"];
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账席 —— core 每次 MCP dispatch 前同步探
      *  `isRevoked(serverName)`,被撤服务器的调用结算为 coded 拒绝 `mcp.server_revoked`(known-not-executed)。
-     *  来源=configCenter.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
+     *  来源=webAdmin.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
      *  缺席=undefined=pre-338 语义(纯 env 部署无中心撤销面)。 */
     mcpRevocations: RunnerDeps["mcpRevocations"];
     /**

package/dist/boot/runtime-caps.d.ts

@@ -23,7 +23,7 @@ export interface RuntimeCapsCtx {
  *
  * governed 的语义是「per-principal verdict **必答**」:core 对 verdict 缺席一律**拒跑**(fail-closed,部署显式
  * 选的方向)。verdict 源**两条**(析取,[ref] 起):①SQL 后端上的 `memory_optout_grant` 表(三层折叠后
- * 恒答显式 boolean),②非 dry-run 的 config center 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
+ * 恒答显式 boolean),②非 dry-run 的 web-admin 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
  * governed 而两源皆无 ⇒ 每一个 `capture:"off"` 声明都被 core 以
  * `memory.capture_optout_denied` 拒掉,而运维看到的只是一台「启动成功、opt-out 全拒」的机器 —— 正是
  * 「阀门开着而配不出来 ⇒ 悄悄读成别的」那一形。所以在**启动期**点名:接 SQL 后端(表随中央

package/dist/boot/runtime-caps.js

@@ -1,6 +1,6 @@
 import { applyGovernedVerdictAbsenceWarning, applyLocalAutoModeDeny, applyMemoryOptOutGrant, applyObserverEnvOptIn, centerEntitlementSourceWired, createPrincipalEntitlementsClient, } from "../runtime-caps-resolver.js";
 import { scopedTokenNeedsWorker } from "../center-credential.js";
-import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export function assertMemoryCapturePolicyWirable(input) {
     if (input.policy !== "governed")
         return;
@@ -13,9 +13,9 @@ export function assertMemoryCapturePolicyWirable(input) {
         `own contract), so a governed worker without a source would refuse every \`memory.capture:"off"\` declaration and the ` +
         `refusal would read as an entitlement denial rather than the misconfiguration it is. This version has TWO verdict sources ` +
         `— wire either one: (1) the \`memory_optout_grant\` table on a SQL store backend (DB_BACKEND=mysql|pg; the table is ` +
-        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a config center that ` +
-        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (SEMA_REGISTRY_URL + ${CENTER_CREDENTIAL_ENV.token}, ` +
-        `SEMA_REGISTRY_DRY_RUN off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
+        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a web-admin that ` +
+        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (${WEB_ADMIN_ENV.url} + ${WEB_ADMIN_ENV.token}, ` +
+        `${WEB_ADMIN_ENV.dryRun} off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
         `the entitlement schema: a center that never emits it leaves every verdict absent, i.e. every opt-out still refused). ` +
         `Or set MEMORY_CAPTURE_POLICY=open (opt-outs take effect; only an explicit per-principal false denies) or ` +
         `MEMORY_CAPTURE_POLICY=capture-required (every opt-out declaration refused, no source consulted).`);
@@ -35,18 +35,18 @@ export function createRuntimeCaps(ctx) {
     const governedCenterOnlySource = config.memoryCapturePolicy === "governed" && !grantSourceWired && centerEntitlementSourceWired(config);
     if (governedCenterOnlySource) {
         logger.warn("memory_capture_governed_center_only_source", {
-            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the config center, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
+            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the web-admin, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
         });
     }
-    if (centerEntitlementSourceWired(config) && config.configCenter && scopedTokenNeedsWorker(config.configCenter.credential.read(), config.configCenter.worker)) {
+    if (centerEntitlementSourceWired(config) && config.webAdmin && scopedTokenNeedsWorker(config.webAdmin.credential.read(), config.webAdmin.worker)) {
         logger.warn("runtime_caps_scoped_token_no_worker", {
-            reason: `${CENTER_CREDENTIAL_ENV.token} is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
+            reason: `${WEB_ADMIN_ENV.token} is a worker-scoped wpt_ token but ${WEB_ADMIN_ENV.worker} is unset → web-admin 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set ${WEB_ADMIN_ENV.worker} (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
         });
     }
-    const principalCaps = centerEntitlementSourceWired(config) && config.configCenter
+    const principalCaps = centerEntitlementSourceWired(config) && config.webAdmin
         ? createPrincipalEntitlementsClient({
-            center: config.configCenter,
-            ...(config.configCenter.worker ? { worker: config.configCenter.worker } : {}),
+            center: config.webAdmin,
+            ...(config.webAdmin.worker ? { worker: config.webAdmin.worker } : {}),
             onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }),
         })
         : undefined;

package/dist/boot/shutdown.d.ts

@@ -79,9 +79,9 @@ export interface ShutdownCtx {
      * HTTP 层不能自作主张。所以 `drainState.draining` 翻真的那一刻,这里同步调 `beginDrain()`。
      */
     deviceHub: import("../device-ws-hub.js").DeviceWsHub | undefined;
-    /** [ref]-2:config 60s 刷新环(config-center startRefreshLoop)——不停的话停机中途还可能热应用
+    /** [ref]-2:config 60s 刷新环(web-admin startRefreshLoop)——不停的话停机中途还可能热应用
      *  一份新配置。缺席 = 纯 env 部署没起环。 */
-    configCenter: {
+    webAdmin: {
         stopRefreshLoop(): void;
     } | undefined;
     /** S-929:活体审批协调器(`TOOL_APPROVAL_ENABLED` 关 ⇒ 缺席)。hardShutdown 起点调它的 `drainForShutdown`:本进程握着的活卡

package/dist/boot/shutdown.js

@@ -17,7 +17,7 @@ export function backgroundGraceRemainingMs(a) {
     return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
 }
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, configCenter, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
+    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
     const dataRoot = config.localDataRoot;
     if (dataRoot) {
         const prior = readCrashLast(dataRoot);
@@ -107,7 +107,7 @@ export function installShutdownHandlers(ctx) {
         storeLiveProbe?.stop();
         servingLease?.stop();
         void deviceHub?.close().catch((err) => logger.warn("device_hub_close_failed", { err: String(err) }));
-        configCenter?.stopRefreshLoop();
+        webAdmin?.stopRefreshLoop();
         otelExporter?.stop();
         breakerState?.stop();
         runner.sessions.dispose();

package/dist/boot/side-query-lane.d.ts

@@ -69,9 +69,9 @@ export type SideQueryLane = (spec: SideQuerySpec) => Promise<SideQueryResult>;
 export interface SideQueryLaneCtx {
     /** 与 `RunnerDeps.brain` **同一只**实例([ref] 换装后本席不再包它 —— key 走 spec 座位)。 */
     brain: Brain;
-    /** 活配置引用:目录/角色表/网关地址被 config-center 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
+    /** 活配置引用:目录/角色表/网关地址被 web-admin 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
     config: ServiceConfig;
-    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/config-center.ts` 每次 apply 重铸)。 */
+    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/web-admin.ts` 每次 apply 重铸)。 */
     getKeyResolver: () => KeyResolver;
 }
 /**
@@ -119,7 +119,7 @@ export declare function createPerModelKeyBrain(brain: Brain, getKeyResolver: ()
  * ([ref] codex R1-F2:目录与密钥表零 await 窗成对换代):
  *  · `models` = `expandTiers(config.models, config.tiers)` —— 档位词 / CC 别名(`flash`/`opus`/…)在
  *    side-query 上照常可选路(core 的 `Runner` 构造时做同一件事),且 `Runner` 那次展开是**构造时快照**,
- *    而本路由的模型白名单门(`routes/side-query.ts` 的 `isModelAllowlisted`)按请求现算同一张增广目录 ——
+ *    而本路由的模型白名单门(`routes/side-query.ts` 的 `isAtMentionable`)按请求现算同一张增广目录 ——
  *    两边取同一份才不会出现「名单放行、选路说不认识」的分歧;
  *  · `getKeyResolver()` —— 热应用整个换 resolver 引用,活取才跟得上(装配时快照 = 旧 key 用到重启)。
  * (第三件 `config.gatewayBaseUrl` 曾是 off-route 记债判据的参照系,core 5.57.0 起判据整只上收 core 的

package/dist/boot/{stage-02-registry-pull.d.ts → stage-02-web-admin-pull.d.ts}

@@ -1,10 +1,10 @@
 import type { runStage01 } from "./stage-01-config.js";
 export declare function runStage02(ctx: Awaited<ReturnType<typeof runStage01>>): Promise<{
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;
 }>;
-//# sourceMappingURL=stage-02-registry-pull.d.ts.map
+//# sourceMappingURL=stage-02-web-admin-pull.d.ts.map

package/dist/boot/{stage-02-registry-pull.js → stage-02-web-admin-pull.js}

@@ -1,12 +1,12 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
-import { createConfigCenterRuntime } from "./config-center.js";
+import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
 import { serviceConfigSourceKind } from "../config-provider.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
     await composeExecutionLane(config, { configSource: serviceConfigSourceKind(config), localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });
-    const configCenter = await createConfigCenterRuntime({ config, logger, metrics, localRoot });
+    const webAdmin = await createWebAdminRuntime({ config, logger, metrics, localRoot });
     const noDefaultModel = defaultModelRefusal(config, "env");
     if (noDefaultModel !== undefined) {
         throw new Error(noDefaultModel);
@@ -17,6 +17,6 @@ export async function runStage02(ctx) {
     }
     const ceilingVerdict = createUnpricedCeilingVerdict({ config, logger });
     ceilingVerdict.judge();
-    return { ...ctx, ceilingVerdict, configCenter };
+    return { ...ctx, ceilingVerdict, webAdmin };
 }
-//# sourceMappingURL=stage-02-registry-pull.js.map
+//# sourceMappingURL=stage-02-web-admin-pull.js.map

package/dist/boot/stage-03-store-backend.d.ts

@@ -1,4 +1,4 @@
-import type { runStage02 } from "./stage-02-registry-pull.js";
+import type { runStage02 } from "./stage-02-web-admin-pull.js";
 export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>): Promise<{
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
@@ -24,7 +24,7 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-04-stores.d.ts

@@ -65,7 +65,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-05-execution-env.d.ts

@@ -81,7 +81,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;