@sema-agent/server 7.123.0 → 7.124.0

package/dist/boot/stage-06-runners.d.ts

@@ -24,7 +24,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -142,7 +142,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-06-runners.js

@@ -21,7 +21,7 @@ import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, sessionIncarnationOf, config, configCenter, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, sessionIncarnationOf, config, webAdmin, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -63,7 +63,7 @@ export function runStage06(ctx) {
             models: config.models,
             tiers: config.tiers,
             roles: config.roles,
-            getApiKeyAndHeaders: createPerModelAuthSeat(() => configCenter.getKeyResolver()),
+            getApiKeyAndHeaders: createPerModelAuthSeat(() => webAdmin.getKeyResolver()),
         })
         : undefined;
     const memoryConsolidationFaces = consolidationSeat && memoryEngine
@@ -104,14 +104,14 @@ export function runStage06(ctx) {
         ],
         retentionExecutorWired: config.retentionSweep.intervalSec > 0 && retentionExecutor !== undefined && retentionLaneStore !== undefined,
     });
-    const mcpRevocations = configCenter.takeMcpRevocations();
+    const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
     const runnerDeps = createRunnerDeps({
         consolidationSeat,
         hands: commitHands,
         mcpRevocations,
         sessionIncarnationOf,
-        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
+        config, logger, metrics, localRoot, promptSource: webAdmin.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
@@ -124,7 +124,7 @@ export function runStage06(ctx) {
     });
     const runner = new Runner(runnerDeps);
     const handslessRunner = new Runner(withoutExecutionEnv(runnerDeps));
-    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => configCenter.getKeyResolver(), metrics });
+    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => webAdmin.getKeyResolver(), metrics });
     const hookAgentRunner = new Runner({ ...runnerDeps, sessionStore: new TtlSessionStore({ defaultTtlDays: 1 / 24 }) });
     const agentHookCall = async ({ prompt, model, timeoutMs, system }) => {
         const pick = hookModelFor(model);
@@ -182,7 +182,7 @@ export function runStage06(ctx) {
             brain,
             pricing,
             tracer,
-            promptSource: configCenter.promptSource,
+            promptSource: webAdmin.promptSource,
             executionEnvFactory,
             lspManager,
             backgroundAgentStore,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -39,7 +39,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -157,7 +157,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-07-capability-layer.js

@@ -25,8 +25,9 @@ import { createRunnerDepsOnAsk } from "./runner-deps.js";
 import { bindRateLimiter, bindRunStore } from "./late-binds.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
+import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -116,7 +117,7 @@ export async function runStage07(ctx) {
     if (config.requirePrincipal && config.selfOrchestrationEnabled && !config.selfOrchestrationWorkerIsolation)
         logger.warn("self_orchestration_no_worker_isolation", { detail: "multi-tenant self-orchestration without SELF_ORCHESTRATION_WORKER_ISOLATION=true — a tenant workflow can starve the host event loop (availability risk). Set it to enable worker_thread resource isolation." });
     if (selfOrchestrationDenial(config, centerEntitlementSourceWired(config)) !== null)
-        logger.warn("self_orchestration_no_entitlement_source", { detail: "SELF_ORCHESTRATION_ENABLED is on and REQUIRE_PRINCIPAL is on, but no per-principal entitlement source is wired (no config center, or it is in dry-run). core's allowWorkflows is tighten-only — an absent resolver leaves it ungated — so this service fail-closes self-orchestration for EVERY principal: no task on this worker can ever get the workflow engine. /v1/capabilities now reports workflows:false (workflowsGate.denial=\"entitlement_resolver_absent\") and a submit carrying selfOrchestration/settings.ultracode is refused 501 instead of silently downgraded. Wire a config center (SEMA_REGISTRY_URL + token, not dry-run), or set SELF_ORCHESTRATION_ENABLED=false." });
+        logger.warn("self_orchestration_no_entitlement_source", { detail: `SELF_ORCHESTRATION_ENABLED is on and REQUIRE_PRINCIPAL is on, but no per-principal entitlement source is wired (no web-admin, or it is in dry-run). core's allowWorkflows is tighten-only — an absent resolver leaves it ungated — so this service fail-closes self-orchestration for EVERY principal: no task on this worker can ever get the workflow engine. /v1/capabilities now reports workflows:false (workflowsGate.denial="entitlement_resolver_absent") and a submit carrying selfOrchestration/settings.ultracode is refused 501 instead of silently downgraded. Wire a web-admin (${WEB_ADMIN_ENV.url} + token, not dry-run), or set SELF_ORCHESTRATION_ENABLED=false.` });
     {
         const inert = buildForceDurableGateInertNotice({
             entitlementSourceWired: centerEntitlementSourceWired(config),
@@ -133,7 +134,7 @@ export async function runStage07(ctx) {
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
     let skills = loadDeploymentSkills(config);
-    skills = await configCenter.applyCenterCapabilities(skills);
+    skills = await webAdmin.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;
@@ -150,7 +151,7 @@ export async function runStage07(ctx) {
             .catch((e) => logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: e instanceof Error ? e.message : String(e) }));
     }
     const ensureChildSessionDurable = checkpointStore && config.sessionBackend === "tidb" ? (sessionId) => ensureChildSessionDurableWithPromotion(sessionStore, subRunnerSessions, sessionId) : undefined;
-    const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => configCenter.getKeyResolver(), logger });
+    const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver(), logger });
     const scenarioDeps = {
         runner, subRunner, handslessSubRunner, model: DEFAULT_MODEL_REF, skills, repoClient, requirePrincipal: config.requirePrincipal,
         webSearch: webSearch ? webSearch : undefined, metrics, logger, webFetchSummarize,
@@ -176,7 +177,7 @@ export async function runStage07(ctx) {
         : undefined;
     const scenarioDetails = builtinScenarioDetails(scenarios, scenarioDeps);
     const builtinScenarioNames = Object.keys(scenarioDetails);
-    configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
+    webAdmin.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     const defaultScenarioRefusal = danglingScenarioRefusal(config.defaultScenario, "deployment", Object.keys(scenarios));
     if (defaultScenarioRefusal !== undefined)
         throw new Error(defaultScenarioRefusal);

package/dist/boot/stage-08-reapers.d.ts

@@ -1,7 +1,7 @@
 /**
  * 装配第 8 段 —— **后台 reaper**(§3-8)。
  * 维护 tick(startReapers)+ 托管留存 lane(独立定时器)+ OTLP 导出 + 限额座换代口 + 五只 boot Runner 的
- * 原子换代闭包 + config-center 刷新环与 key resolver 首建。
+ * 原子换代闭包 + web-admin 刷新环与 key resolver 首建。
  * ⚠️ 位置即契约:刷新环必须在 `new Runner` 之后(它要五只 boot Runner 的换代口 `swapRunnerDeps`);
  * key resolver 首建读的必须是 boot apply 之后的 config。
  * 🔴 `runDenySweep` 的 holder 住在 `late-binds.ts`(赋值点在第十段的 server 之后)。
@@ -52,7 +52,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -170,7 +170,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-08-reapers.js

@@ -5,7 +5,7 @@ import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
 export function runStage08(ctx) {
-    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, configCenter, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, parkCommits,
         rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
@@ -71,8 +71,8 @@ export function runStage08(ctx) {
             }
         }
     };
-    configCenter.startRefreshLoop({ pricing, limitSync, swapRunnerDeps, ceilingVerdict, checkpointStorePresent: checkpointStore !== undefined, degradeRoute: degradeRouteWatch, ...(consolidationSeatWatch !== undefined ? { consolidationSeat: consolidationSeatWatch } : {}) });
-    configCenter.initKeyResolver();
+    webAdmin.startRefreshLoop({ pricing, limitSync, swapRunnerDeps, ceilingVerdict, checkpointStorePresent: checkpointStore !== undefined, degradeRoute: degradeRouteWatch, ...(consolidationSeatWatch !== undefined ? { consolidationSeat: consolidationSeatWatch } : {}) });
+    webAdmin.initKeyResolver();
     return { ...ctx, otelExporter, reaper, retentionLaneStarted };
 }
 //# sourceMappingURL=stage-08-reapers.js.map

package/dist/boot/stage-09-leader.d.ts

@@ -16,7 +16,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     } | {
         childrenAlive: readonly string[];
     }>) | undefined;
-    registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
+    webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
         owner: string | null;
         sessionId: string;
@@ -81,7 +81,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -199,7 +199,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-09-leader.js

@@ -1,12 +1,12 @@
 import { describeStaticWiring } from "@sema-agent/core";
 import { encodeCheckpointScope } from "../security.js";
-import { authBridgeIssuerOf, createRegistryJwtVerifier } from "../auth-bridge.js";
+import { authBridgeIssuerOf, createWebAdminJwtVerifier } from "../auth-bridge.js";
 import { createSessionFaces } from "./session-faces.js";
 import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
@@ -16,11 +16,11 @@ export function runStage09(ctx) {
         backgroundAgentStore,
         userInputLedgerStore,
     });
-    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
-    const registryJwtVerifier = authBridgeIssuer
-        ? createRegistryJwtVerifier({
+    const webAdminJwtVerifier = authBridgeIssuer
+        ? createWebAdminJwtVerifier({
             issuer: authBridgeIssuer,
             ...(process.env.AUTH_BRIDGE_JWKS_URL ? { jwksUrl: process.env.AUTH_BRIDGE_JWKS_URL } : {}),
             ...(process.env.AUTH_BRIDGE_AUDIENCE ? { audience: process.env.AUTH_BRIDGE_AUDIENCE } : {}),
@@ -28,7 +28,7 @@ export function runStage09(ctx) {
             metrics,
         })
         : undefined;
-    if (registryJwtVerifier)
+    if (webAdminJwtVerifier)
         logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? "") });
     const hookWakeBus = {};
     const wiringSpecTemplate = durableEnabled
@@ -45,6 +45,6 @@ export function runStage09(ctx) {
         subagentTranscripts: staticWiring.fleet.subagentTranscripts,
         subagentTranscriptRetentionMs: config.backgroundAgentRetentionMs,
     });
-    return { ...ctx, drainState, hookWakeBus, instrumentDegenerate, leaderEndpoint, ownerAware, planCacheProbe, purgeSession, registryJwtVerifier, sessionAudit, sessionWatchRegistry, staticWiring };
+    return { ...ctx, drainState, hookWakeBus, instrumentDegenerate, leaderEndpoint, ownerAware, planCacheProbe, purgeSession, webAdminJwtVerifier, sessionAudit, sessionWatchRegistry, staticWiring };
 }
 //# sourceMappingURL=stage-09-leader.js.map

package/dist/boot/stage-10-http-server.d.ts

@@ -15,7 +15,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     } | {
         childrenAlive: readonly string[];
     }>) | undefined;
-    registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
+    webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
         owner: string | null;
         sessionId: string;
@@ -80,7 +80,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -198,7 +198,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, configCenter, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -116,7 +116,7 @@ export async function runStage10(ctx) {
     };
     const governance = {
         authorize,
-        registryJwtVerifier: registryJwtVerifier ? registryJwtVerifier : undefined,
+        webAdminJwtVerifier: webAdminJwtVerifier ? webAdminJwtVerifier : undefined,
         rateLimiter,
         costQuota,
         fleetLease: fleetLease ? fleetLease : undefined,
@@ -155,7 +155,7 @@ export async function runStage10(ctx) {
         : undefined;
     const deployment = {
         sessionStoreLabel: sessionStoreLabelOf(config.sessionBackend, backend?.kind),
-        modelReady: () => configCenter.modelReady(),
+        modelReady: () => webAdmin.modelReady(),
         scenarioDetails,
         workflowsCapable,
         workflowModelAllowlist: workflowModelAllowlistSnapshot,
@@ -164,7 +164,7 @@ export async function runStage10(ctx) {
         sqlEngineFacts,
         writeProtection: buildWriteProtectionPosture(config),
         webSearchProvider,
-        sealedKeyPublic: configCenter.sealedKeyPublic,
+        sealedKeyPublic: webAdmin.sealedKeyPublic,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -173,19 +173,19 @@ export async function runStage10(ctx) {
                 return isPricingConfigured(pricing);
             },
         },
-        restartState: () => configCenter.restartState(),
-        configApplyState: () => configCenter.configApplyState(),
-        centerCredentialState: () => configCenter.centerCredentialState(),
-        modelRefusalsState: () => configCenter.modelRefusalsState(),
-        configHandoffState: () => configCenter.configHandoffState(),
+        restartState: () => webAdmin.restartState(),
+        configApplyState: () => webAdmin.configApplyState(),
+        centerCredentialState: () => webAdmin.centerCredentialState(),
+        modelRefusalsState: () => webAdmin.modelRefusalsState(),
+        configHandoffState: () => webAdmin.configHandoffState(),
         mcpRevocations,
-        mcpRevocationState: () => configCenter.mcpRevocationState(),
-        configRefreshNow: () => configCenter.refreshNow(),
-        configCenterManagedKeys: () => configCenter.centerManagedKeys(),
+        mcpRevocationState: () => webAdmin.mcpRevocationState(),
+        configRefreshNow: () => webAdmin.refreshNow(),
+        webAdminManagedKeys: () => webAdmin.centerManagedKeys(),
         drainState,
         servingLease: servingLease ? () => servingLease.view() : undefined,
         storePosture,
-        centerWiring: createCenterWiringReader({ config, pullState: () => configCenter.centerPullState(), fleetLease, usageReport: fleetUsage !== undefined }),
+        centerWiring: createCenterWiringReader({ config, pullState: () => webAdmin.centerPullState(), fleetLease, usageReport: fleetUsage !== undefined }),
         storeLiveState: storeLiveProbe ? () => storeLiveProbe.state() : undefined,
     };
     const knobs = {
@@ -196,8 +196,8 @@ export async function runStage10(ctx) {
     };
     const resolveSpec = createResolveSpec({
         config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
-        getCenterPrompts: () => configCenter.getCenterPrompts(),
-        getKeyResolver: () => configCenter.getKeyResolver(),
+        getCenterPrompts: () => webAdmin.getCenterPrompts(),
+        getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         noteSessionIncarnation,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
@@ -209,7 +209,7 @@ export async function runStage10(ctx) {
         approverSeat: createRunnerDepsOnAsk(toolApproval),
     });
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
-    const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => configCenter.getKeyResolver() });
+    const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
     const server = createHttpServer({ runner, runnerFor, sideQuery, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
@@ -274,10 +274,10 @@ export async function runStage10(ctx) {
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
-    configCenter.onSelfReportChange(() => void fleetClient?.announceNow());
+    webAdmin.onSelfReportChange(() => void fleetClient?.announceNow());
     if (fleetClient) {
         const advertised = config.fleetAdvertiseAddress;
-        logger.info("fleet_client_started", { worker: config.configCenter?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
+        logger.info("fleet_client_started", { worker: config.webAdmin?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
     }
     const failoverFirstByte = buildFailoverFirstByteNotice(config);
     if (failoverFirstByte)
@@ -325,7 +325,7 @@ export async function runStage10(ctx) {
         config, logger, server, reaper, fleetReconcile, otelExporter, breakerState, costQuota, rateLimiter,
         version: serviceVersion(),
         runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState,
-        storeLiveProbe, configCenter,
+        storeLiveProbe, webAdmin,
         toolApproval,
         parkCommits,
         deviceHub: deviceLane?.hub,

package/dist/boot/unpriced-ceiling-verdict.d.ts

@@ -1,7 +1,7 @@
 import type { ServiceConfig } from "../config-types.js";
 import type { Logger } from "../observability/logger.js";
 export interface UnpricedCeilingVerdictCtx {
-    /** 活配置(config-center 热应用就地改写的**同一个**对象——所以每次 `judge()` 读到的是当代值)。 */
+    /** 活配置(web-admin 热应用就地改写的**同一个**对象——所以每次 `judge()` 读到的是当代值)。 */
     readonly config: Pick<ServiceConfig, "models" | "maxTaskCostUsd" | "maxPrincipalCostUsd">;
     readonly logger?: Logger;
 }

package/dist/boot/{config-center.d.ts → web-admin.d.ts}

@@ -13,12 +13,12 @@ import { type SealedKeyPublicFace } from "../sealed-key.js";
 import type { UnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import type { ConsolidationSeatWatch } from "./memory-consolidation.js";
 import type { DegradeRouteWatch } from "../brain.js";
-import { type EngineRestartSignal } from "../config-center/facade.js";
+import { type EngineRestartSignal } from "../web-admin-client/facade.js";
 import { type ConfigHandoff } from "../fleet/engine-signal.js";
-import { type ConfigApplyLedgerView } from "../config-center/apply-ledger.js";
-import type { CenterPullView } from "../config-center/pull-state.js";
+import { type ConfigApplyLedgerView } from "../web-admin-client/apply-ledger.js";
+import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { LimitSync } from "./limit-sync.js";
-export interface ConfigCenterRuntimeCtx {
+export interface WebAdminRuntimeCtx {
     config: ServiceConfig;
     logger: Logger;
     metrics: Metrics;
@@ -33,10 +33,10 @@ export interface CenterScenarioOverlayTargets {
     /** overlay 前捕获的六内建名(centerScenarioDetails 的 shadow 判据)。 */
     builtinScenarioNames: string[];
 }
-/** S-740 / S-741 / S-768:config-center 持有的三样自报状态(fleet 心跳读它们)—— 闭集:加一样 = 写口与订阅方一起表态。 */
+/** S-740 / S-741 / S-768:web-admin 持有的三样自报状态(fleet 心跳读它们)—— 闭集:加一样 = 写口与订阅方一起表态。 */
 export type SelfReportChange = "roster_landed" | "restart_signal" | "model_refusals";
 /** 跨段可变状态的**唯一**对外读口 + 三个原位动作。字段语义见各方法上的注释。 */
-export interface ConfigCenterRuntime {
+export interface WebAdminRuntime {
     /** 配置源形态;`undefined` = 纯 env 部署(本运行时的所有分支不存在)。 */
     readonly providerKind: "remote" | "local" | undefined;
     /** S-737:本进程模型钥匙保管店的**公钥面**(只有最新那把公钥;私钥 / 持有 id 列表 / 开箱口结构上够不着,见
@@ -86,7 +86,7 @@ export interface ConfigCenterRuntime {
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账读口,喂 `RunnerDeps.mcpRevocations` 席。
      *  **取走即声明接线**——调用本方法后,restart 信号的 mcp 片对纯删除向豁免(台账即时承接);
      *  不取 ⇒ 旧 restart 语义逐字保留(fail-closed)。 */
-    takeMcpRevocations(): import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    takeMcpRevocations(): import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     /** [ref] 诊断投影:当前被撤销的 MCP 服务器名单;纯 env 部署(无配置管道)= undefined(additive 纪律)。 */
     mcpRevocationState(): {
         revoked: string[];
@@ -100,7 +100,7 @@ export interface ConfigCenterRuntime {
     /** boot ready 门:布防(`CONFIG_REQUIRE_ROSTER=true`,远程 registry 非 dryRun)且 roster 未落地 =
      *  计费提交 503 + /health ready:false。缺省未布防 ⇒ 恒 true。 */
     modelReady(): boolean;
-    /** S-740 / S-741:本副本**自报状态**里由 config-center 持有的那两样 —— roster 落地(`modelReady` 翻真,one-way latch)与
+    /** S-740 / S-741:本副本**自报状态**里由 web-admin 持有的那两样 —— roster 落地(`modelReady` 翻真,one-way latch)与
      *  restart 信号(`restartState()` 出现 / 消失 / 变)—— 任一翻转的那一拍通知订阅者。装配层接 fleet 心跳的 `announceNow`,
      *  让中心在翻转当刻就知道本副本可路由 / 要重启(不等下一拍心跳;draining 那一样由收尾链直调 `announceNow`,同一个触发)。
      *  在状态**写定之后**调用,同步、逐个,入参 = 这一次翻的是哪一样(闭集 {@link SelfReportChange});不回放(订阅方在订阅前已读过
@@ -121,7 +121,7 @@ export interface ConfigCenterRuntime {
      *  `undefined` = 本部署没有配置管道(纯 env worker)⇒ 两个读面的形状**逐字不变**(additive 纪律)。 */
     configApplyState(): ConfigApplyLedgerView | undefined;
     /** S-866 ②:caps `centerWiring.effectivePull` / `effectiveRevision` 的取值口 —— `lastPull`(新状态,只此一枚:boot 实拉 / 迟到 boot 到货 /
-     *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `config-center/pull-state.ts`。 */
+     *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `web-admin-client/pull-state.ts`。 */
     centerPullState(): CenterPullView;
     /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
      *  `effectiveLane` 的 center 半场。投影自最近一次成功应用的候选(`latestEffective`,LKG/refresh 同一
@@ -142,5 +142,5 @@ export interface ConfigCenterRuntime {
      */
     refreshNow(): Promise<"triggered" | "not-wired" | "failed">;
 }
-export declare function createConfigCenterRuntime(ctx: ConfigCenterRuntimeCtx): Promise<ConfigCenterRuntime>;
-//# sourceMappingURL=config-center.d.ts.map
+export declare function createWebAdminRuntime(ctx: WebAdminRuntimeCtx): Promise<WebAdminRuntime>;
+//# sourceMappingURL=web-admin.d.ts.map