@sema-agent/server 7.123.0 → 7.124.1

package/dist/boot/leader.d.ts

@@ -37,7 +37,7 @@ export interface LeaderCtx {
     /** [ref]([ref],[ref]-T1)—— 治理窗**账本店**(与 `config.usageWindows` 声明成对;声明直接从
      *  本 ctx 的 config 取,leader 不另读)。缺席 = 未配治理窗的部署。必填键,理由同 `tracer`。 */
     usageWindowStore: RunnerDeps["usageWindowStore"];
-    /** [ref]([ref])—— center 发布的 prompt catalog(`configCenter.promptSource`,与主 runner/subRunner
+    /** [ref]([ref])—— center 发布的 prompt catalog(`webAdmin.promptSource`,与主 runner/subRunner
      *  同一只)。缺席 ⇒ leader 的四类顶层任务跑引擎内置提示词,而同部署其余三条腿跑运维发布的那一份,
      *  且 core 顶层新任务是**静默**落回(无 notice)。必填键,理由同 `tracer`。 */
     promptSource: RunnerDeps["promptSource"];

package/dist/boot/memory-consolidation.d.ts

@@ -1,4 +1,4 @@
-import type { RestartSliceCtx } from "../config-center/restart-signal.js";
+import type { RestartSliceCtx } from "../web-admin-client/restart-signal.js";
 import type { MemoryConsolidationDriverConfig, ServiceConfig } from "../config-types.js";
 import { type ConsolidationDriverRunRow, type ConsolidationRunReceipt, type MemoryBackend, type MemoryConsolidationDriverDeps, type RunMemoryConsolidationOptions, type SessionCaptureRecordStore } from "@sema-agent/core";
 /** D3 投影的座标签闭集。`role:<name>` 里的 name 只可能是 core 的 role 链两跳之一。 */
@@ -178,14 +178,14 @@ export declare function consolidationDriverUnwirable(input: ConsolidationWiringF
  * ({@link seatLabel} 注里同一条理由:抄一份就是第二真源,而 `ROLE_TIER_DEFAULTS` 的 flash 缺省会让手抄版答错)。
  *
  * 为什么不按 env `MODEL_CHEAP_ID` 的拼写判:它只是供座的一条路。env 角色表在它缺席时把 summarize 指回
- * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / 配置中心)的 roles / 档位同样能供
+ * `default`(`config.ts` 的 `cheapRef`),而目录(`config.d/models.json` / web-admin)的 roles / 档位同样能供
  * consolidate / summarize 两跳 —— 判「装配后的座落不落主模型」才与计费事实同形(整理跑按座的模型计费)。
  *
  * 主模型 = 本仓给每条 task 铸的 `DEFAULT_MODEL_REF` 解到的那只(`boot/resolve-spec.ts` 每条 spec 都盖 `spec.model`),
  * **不是** core 的 `default` 角色链 —— 与 `auto-mode-face.ts` 的 `classifierRouteFor` 同一口径(共用 `model-select.ts`
  * `resolveMainModel`);喂**展开**目录,与引擎构造期 `expandTiers` 之后再解逐字同源。比的是**目录条目身份**(对象引用),
  * **不比 `Model.id` 串**(车PI 修复轮 ⑤ / codex C-2:两条不同名的条目可以共享上游 id 却各带不同的 baseUrl / 凭据 / 价,那是两只
- * 模型;与 `model-select.ts` `isModelAllowlisted` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
+ * 模型;与 `model-select.ts` `isAtMentionable` 同一口径)。env 的「cheap id == 主 id」不会走到这里变成两只:`config.ts` 在铸造处
  * 就不铸那只影子条目(车PI 验修轮 B)。
  * 探针 brain 零请求:座解析只 `brainToRuntime` 它一次,真被调用 = 装配缺陷,响亮抛。
  * ⚠️ **爆炸半径**(车PI 验修轮 F10,如实登记):判决的每一臂 —— 包括未设 + 没配便宜模型的派生关(TOC 最常见的形)—— 都走
@@ -212,7 +212,7 @@ export declare function consolidationSeatBillingOf(plane: ConsolidationSeatPlane
  *    拒因说清「为什么没开」。在 `loadConfig` 判会把「未设 + scope + 便宜模型在场」这台本该派生成开的部署当场拒掉。
  *
  * ⚠️ **起服判一次**(restart-to-apply):判决落在 boot 第 4 段的装配点 {@link createConsolidationValve} —— 目录已应用
- * (`config.d/models.json` / 配置中心的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
+ * (`config.d/models.json` / web-admin 的 boot 采纳或 LKG)、记忆引擎已接线;座解析在第 6 段读这份判决。之后中心热改了 roles / 档位(或 boot 拉取超窗、目录迟到),**阀门不跟着翻**,
  * 但翻的**需要**由 `memory-consolidation` 重启片报出来({@link createConsolidationValveWatch}):开着的那台盯座位漂移;
  * 派生关的那台盯「此刻重判会不会开」(codex 车内复审 F2:修前派生关没有任何读数,热加一只便宜模型零信号、阀门永远关着)。
  */

package/dist/boot/org-memory.d.ts

@@ -3,7 +3,7 @@
  * 的两个 seam(`RunnerDeps.memoryScopeAdmission` / `RunnerDeps.deploymentMemoryScopes`)。
  *
  * 目录源三态(单选,授权面不做双源合并):
- *  · center 在场(configCenter 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
+ *  · center 在场(webAdmin 且非 dryRun)⇒ 远程腿:per-principal caps 响应的 `orgMemory` 段
  *    (走 `fetchPrincipalOrgMemory` —— 与 caps 腿同一条 HTTP 请求形与同一道 principal 回声核,但**只
  *    投影 org 段**读,治理面值漂移不连坐;段键缺席=旧 center 能力握手 ⇒ 目录记 section_absent 瞬时)。
  *    **独立 fetch,不复用 caps 缓存条目**(C3:org 授权段自带判别联合缓存,两张表的失败域互不干扰
@@ -17,7 +17,7 @@
  *
  * 能力探测(C12,fail-loud):多租户(requirePrincipal)部署 **且记忆面真点亮**(MEMORY_ENGINE 开 +
  * backend 非 file——见下方 `memoryPlaneLive` 注)的 projects 登记簿里挂了 org 键 ——这些键在多租户下
- * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 configCenter dryRun 形)⇒ 启动报错:
+ * 按 request-origin 盖章(N2 部署形态维)——而目录源缺席(含 webAdmin dryRun 形)⇒ 启动报错:
  * 该部署的每个 projectId 请求都会在 prepare 期被整拒,「audit 在跑但恒拒」不是可运行状态,响亮拒
  * 启动比静默全拒服务诚实(clay 三裁 [ref]:直接 BREAKING,不留兼容臂)。记忆面 dark 的部署里这些
  * 键根本到不了准入门,不在探测范围(复审 D-1)。
@@ -46,7 +46,7 @@ export interface OrgMemoryAdmissionWiring {
      *
      * 为什么这个消费点必须活取而上面那个可以不:共享记忆读面对 principal-less 请求**直接**把这组 scope
      * 当作全部授权事实交出去(没有第二道盖章腿能纠正它)⇒ 快照在新增方向让新登记的 org 库变成终局式
-     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 config-center
+     * 空集、在撤销方向让已下架的 scope 继续被放行(fail-open),而 `config.projects` 恰恰是 web-admin
      * 标注「🟢 热生效」的字段、且 env 腿恒空(只可能由 center 灌)。判据本体与快照同源(同一个
      * `collectDeploymentOrgScopes`),差别只有取值时机。
      */

package/dist/boot/org-memory.js

@@ -1,4 +1,4 @@
-import { fetchPrincipalOrgMemory } from "../config-center/http-client.js";
+import { fetchPrincipalOrgMemory } from "../web-admin-client/http-client.js";
 import { createIdentityBins } from "../center-credential.js";
 import { createMemoryScopeAdmission, createOrgMemoryDirectory, parseOrgDirectoryStatic } from "../org-memory-admission.js";
 const ORG_PREFIX = "org:";
@@ -18,11 +18,11 @@ function collectDeploymentOrgScopes(config) {
 export function createOrgMemoryAdmissionWiring(opts) {
     const { config, logger, metrics } = opts;
     const deploymentMemoryScopes = collectDeploymentOrgScopes(config);
-    const centerLeg = config.configCenter !== undefined && !config.configCenter.dryRun ? config.configCenter : undefined;
+    const centerLeg = config.webAdmin !== undefined && !config.webAdmin.dryRun ? config.webAdmin : undefined;
     const staticJson = config.memoryOrgDirectoryJson;
     if (centerLeg !== undefined && staticJson !== undefined) {
         logger.warn("org_memory_directory_env_ignored", {
-            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a config-center is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
+            reason: "MEMORY_ORG_DIRECTORY_JSON is set but a web-admin is wired — the center directory wins; the env table is IGNORED (authorization faces never merge two sources)",
         });
     }
     const directory = centerLeg !== undefined
@@ -48,8 +48,8 @@ export function createOrgMemoryAdmissionWiring(opts) {
             .map(([id]) => id);
         if (orgProjects.length > 0) {
             throw new Error(`multi-tenant deployment has org: keys in projects[${orgProjects.join(", ")}].defaultScopes but NO org-memory directory source ` +
-                `(config-center absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
-                `(memory.admission_required, fail-closed). Wire a config-center or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
+                `(web-admin absent/dry-run and MEMORY_ORG_DIRECTORY_JSON unset) — every request selecting these projects would be refused at prepare ` +
+                `(memory.admission_required, fail-closed). Wire a web-admin or set MEMORY_ORG_DIRECTORY_JSON, or remove the org keys.`);
         }
     }
     const memoryScopeAdmission = directory !== undefined

package/dist/boot/resolve-spec.js

@@ -17,7 +17,7 @@ import { composeHooks, createTaskHooks } from "../hooks/hook-runner.js";
 import { HOST_POSTURE_REFUSED_CODE, taskInheritEnvRefusal, taskWriteFaceRefusal } from "../hosted-posture.js";
 import { headerStr } from "../http/principal-gate.js";
 import { explicitOperatorOk } from "../http/server.js";
-import { isModelAllowlisted, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
+import { isAtMentionable, matchCatalogModel, modelSupportsImages, refusedCatalogEntry, resolveTaskModel, selectableCatalog, terminalCatalogName } from "../model-select.js";
 import { modelUnavailableMessage } from "../model-entry-refusal.js";
 import { PerTaskImageRegistry, resolveSandboxImageRef } from "../per-task-image.js";
 import { isRemoteScratchpadLane, remoteScratchpadDirFor } from "../plugins/remote-scratchpad.js";
@@ -30,7 +30,7 @@ import { applyRuntimeGovernance } from "../runtime-governance.js";
 import { HttpError, createCodedHttpError, encodeCheckpointScope } from "../security.js";
 import { memoryProjectKeyFor, memorySpecForRequest } from "../memory-scope.js";
 import { inheritEnvFieldIssue, singleMemberOffFieldIssue } from "../request-value-closure.js";
-import { a2aForScenario, mcpForScenario } from "../config-center/facade.js";
+import { a2aForScenario, mcpForScenario } from "../web-admin-client/facade.js";
 import { normalizeAttachments, normalizeResilience, normalizeResumeAtMode, normalizeSuggestNextPrompts, promptProfileFromBody, resolveTaskLimits, retainBackgroundProcessesFromBody, taskAgentsSpecFragment, toolMaterializeStrategyFromBody, toolNameListFromBody } from "../spec-fields.js";
 import { cwdHonored, deviceCwdHonored, effectiveHostWorkspace, inProcessSingleUserLane, isValidCwd, parseAdditionalDirectories, satisfiedByProcessCwd, shellEnvMismatchCount } from "../task-cwd.js";
 import { assertRequestA2aUnlocked, resolveRequestA2a } from "../task-a2a.js";
@@ -259,7 +259,7 @@ export function createResolveSpec(ctx) {
             logger.warn("task_additional_read_directories_ignored", { honored: false, sessionId: auth?.sessionId ?? null });
         }
         const wireCatalog = selectableCatalog(config.models, config.tiers, config.modelRefusals);
-        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atModelAllowlist, config.modelRefusals);
+        const picked = resolveTaskModel(body.model ?? parsedSettings.settings?.model, objective, wireCatalog, config.atMention, config.modelRefusals);
         if (picked.unavailable !== undefined) {
             const { requested, name, refusal, source } = picked.unavailable;
             if (opts?.leg === "fresh") {
@@ -271,7 +271,7 @@ export function createResolveSpec(ctx) {
         if (picked.notAllowed !== undefined) {
             const { requested, resolved, source } = picked.notAllowed;
             if (opts?.leg === "fresh") {
-                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${resolved}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                throw new HttpError(400, `model "${requested.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${resolved}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
             }
             metrics.inc("task_model_not_allowlisted_resume_total");
             logger.warn("task_model_not_allowlisted_resume", { requested: requested.slice(0, 120), resolved, source, sessionId: auth?.sessionId ?? null, note: "resumed leg keeps running the model it was started on — the allowlist gates fresh picks only" });
@@ -395,10 +395,10 @@ export function createResolveSpec(ctx) {
                     logger.warn("compaction_model_unknown_fallback", { requested: body.compactionModel.slice(0, 120), sessionId: auth?.sessionId ?? null });
                     return {};
                 }
-                if (!isModelAllowlisted(cm, wireCatalog, config.atModelAllowlist, config.modelRefusals)) {
+                if (!isAtMentionable(cm, wireCatalog, config.atMention, config.modelRefusals)) {
                     const terminal = terminalCatalogName(cm, wireCatalog, config.modelRefusals) ?? cm;
                     if (opts?.leg === "fresh") {
-                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not in this deployment's @-mention allowlist (it resolves to catalog model "${terminal}") — the allowlist is configured by the operator (config-center models.atModelAllowlist)`, { code: "request.model_not_allowed" });
+                        throw new HttpError(400, `compactionModel "${body.compactionModel.slice(0, 120)}" is not @-mentionable on this deployment (it resolves to catalog model "${terminal}") — which models can be @-mentioned is configured by the operator (models.atMention)`, { code: "request.model_not_allowed" });
                     }
                     metrics.inc("task_model_not_allowlisted_resume_total");
                     logger.warn("task_model_not_allowlisted_resume", { requested: body.compactionModel.slice(0, 120), resolved: terminal, source: "compaction", sessionId: auth?.sessionId ?? null, note: "resumed leg keeps the compaction model it was started with — the allowlist gates fresh picks only" });
@@ -622,7 +622,7 @@ export function createResolveSpec(ctx) {
                 throw new HttpError(400, "sandboxImageProfile is only supported on the k8s sandbox backend");
             }
             if (!imageIndex) {
-                throw new HttpError(400, "sandboxImageProfile requires the image index (config-center backend not configured)");
+                throw new HttpError(400, "sandboxImageProfile requires the image index (web-admin backend not configured)");
             }
             if (!auth?.sessionId) {
                 throw new HttpError(400, "sandboxImageProfile requires a resolved session");

package/dist/boot/runner-deps.d.ts

@@ -204,7 +204,7 @@ export interface RunnerDepsCtx {
     permissionRuleStore: RunnerDeps["permissionRuleStore"];
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账席 —— core 每次 MCP dispatch 前同步探
      *  `isRevoked(serverName)`,被撤服务器的调用结算为 coded 拒绝 `mcp.server_revoked`(known-not-executed)。
-     *  来源=configCenter.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
+     *  来源=webAdmin.takeMcpRevocations()(取走即声明接线,restart 豁免与承接绑同一动作)。
      *  缺席=undefined=pre-338 语义(纯 env 部署无中心撤销面)。 */
     mcpRevocations: RunnerDeps["mcpRevocations"];
     /**

package/dist/boot/runtime-caps.d.ts

@@ -23,7 +23,7 @@ export interface RuntimeCapsCtx {
  *
  * governed 的语义是「per-principal verdict **必答**」:core 对 verdict 缺席一律**拒跑**(fail-closed,部署显式
  * 选的方向)。verdict 源**两条**(析取,[ref] 起):①SQL 后端上的 `memory_optout_grant` 表(三层折叠后
- * 恒答显式 boolean),②非 dry-run 的 config center 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
+ * 恒答显式 boolean),②非 dry-run 的 web-admin 发 `EntitlementRuntimeCaps.allowMemoryOptOut`。
  * governed 而两源皆无 ⇒ 每一个 `capture:"off"` 声明都被 core 以
  * `memory.capture_optout_denied` 拒掉,而运维看到的只是一台「启动成功、opt-out 全拒」的机器 —— 正是
  * 「阀门开着而配不出来 ⇒ 悄悄读成别的」那一形。所以在**启动期**点名:接 SQL 后端(表随中央

package/dist/boot/runtime-caps.js

@@ -1,6 +1,6 @@
 import { applyGovernedVerdictAbsenceWarning, applyLocalAutoModeDeny, applyMemoryOptOutGrant, applyObserverEnvOptIn, centerEntitlementSourceWired, createPrincipalEntitlementsClient, } from "../runtime-caps-resolver.js";
 import { scopedTokenNeedsWorker } from "../center-credential.js";
-import { CENTER_CREDENTIAL_ENV } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export function assertMemoryCapturePolicyWirable(input) {
     if (input.policy !== "governed")
         return;
@@ -13,9 +13,9 @@ export function assertMemoryCapturePolicyWirable(input) {
         `own contract), so a governed worker without a source would refuse every \`memory.capture:"off"\` declaration and the ` +
         `refusal would read as an entitlement denial rather than the misconfiguration it is. This version has TWO verdict sources ` +
         `— wire either one: (1) the \`memory_optout_grant\` table on a SQL store backend (DB_BACKEND=mysql|pg; the table is ` +
-        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a config center that ` +
-        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (SEMA_REGISTRY_URL + ${CENTER_CREDENTIAL_ENV.token}, ` +
-        `SEMA_REGISTRY_DRY_RUN off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
+        `created by the central ensureSchema and administered through /v1/admin/memory-optout), or (2) a web-admin that ` +
+        `EMITS \`allowMemoryOptOut\` in each principal's entitlement caps (${WEB_ADMIN_ENV.url} + ${WEB_ADMIN_ENV.token}, ` +
+        `${WEB_ADMIN_ENV.dryRun} off — dry-run observes without applying, so it is not a source; and note the key is OPTIONAL in ` +
         `the entitlement schema: a center that never emits it leaves every verdict absent, i.e. every opt-out still refused). ` +
         `Or set MEMORY_CAPTURE_POLICY=open (opt-outs take effect; only an explicit per-principal false denies) or ` +
         `MEMORY_CAPTURE_POLICY=capture-required (every opt-out declaration refused, no source consulted).`);
@@ -35,18 +35,18 @@ export function createRuntimeCaps(ctx) {
     const governedCenterOnlySource = config.memoryCapturePolicy === "governed" && !grantSourceWired && centerEntitlementSourceWired(config);
     if (governedCenterOnlySource) {
         logger.warn("memory_capture_governed_center_only_source", {
-            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the config center, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
+            reason: "MEMORY_CAPTURE_POLICY=governed with NO local memory_optout_grant table: the only verdict source is the web-admin, and `allowMemoryOptOut` is an OPTIONAL entitlement key — for any principal whose caps omit it the verdict is ABSENT and core refuses that session's memory.capture:\"off\" (memory.capture_optout_denied, fail-closed). ANONYMOUS/system runs are worse off still: the center source is per-principal and is never consulted without an identity, so on this shape a principal-less run can never obtain a verdict at all. Verify the center emits allowMemoryOptOut for every principal, or wire a SQL backend (DB_BACKEND=mysql|pg) so the grant table answers (its deployment-default row also covers anonymous runs).",
         });
     }
-    if (centerEntitlementSourceWired(config) && config.configCenter && scopedTokenNeedsWorker(config.configCenter.credential.read(), config.configCenter.worker)) {
+    if (centerEntitlementSourceWired(config) && config.webAdmin && scopedTokenNeedsWorker(config.webAdmin.credential.read(), config.webAdmin.worker)) {
         logger.warn("runtime_caps_scoped_token_no_worker", {
-            reason: `${CENTER_CREDENTIAL_ENV.token} is a worker-scoped wpt_ token but SEMA_REGISTRY_WORKER is unset → center 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set SEMA_REGISTRY_WORKER (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
+            reason: `${WEB_ADMIN_ENV.token} is a worker-scoped wpt_ token but ${WEB_ADMIN_ENV.worker} is unset → web-admin 403s per-principal caps → ALL workflow self-orchestration will be fail-closed denied. Set ${WEB_ADMIN_ENV.worker} (the orchestrator normally injects it) or use the full SERVICE_PULL_TOKEN.`,
         });
     }
-    const principalCaps = centerEntitlementSourceWired(config) && config.configCenter
+    const principalCaps = centerEntitlementSourceWired(config) && config.webAdmin
         ? createPrincipalEntitlementsClient({
-            center: config.configCenter,
-            ...(config.configCenter.worker ? { worker: config.configCenter.worker } : {}),
+            center: config.webAdmin,
+            ...(config.webAdmin.worker ? { worker: config.webAdmin.worker } : {}),
             onError: (err, principal) => logger.warn("runtime_caps_resolve_failed", { principal, err: String(err) }),
         })
         : undefined;

package/dist/boot/shutdown.d.ts

@@ -79,9 +79,9 @@ export interface ShutdownCtx {
      * HTTP 层不能自作主张。所以 `drainState.draining` 翻真的那一刻,这里同步调 `beginDrain()`。
      */
     deviceHub: import("../device-ws-hub.js").DeviceWsHub | undefined;
-    /** [ref]-2:config 60s 刷新环(config-center startRefreshLoop)——不停的话停机中途还可能热应用
+    /** [ref]-2:config 60s 刷新环(web-admin startRefreshLoop)——不停的话停机中途还可能热应用
      *  一份新配置。缺席 = 纯 env 部署没起环。 */
-    configCenter: {
+    webAdmin: {
         stopRefreshLoop(): void;
     } | undefined;
     /** S-929:活体审批协调器(`TOOL_APPROVAL_ENABLED` 关 ⇒ 缺席)。hardShutdown 起点调它的 `drainForShutdown`:本进程握着的活卡

package/dist/boot/shutdown.js

@@ -17,7 +17,7 @@ export function backgroundGraceRemainingMs(a) {
     return Math.max(0, Math.min(a.softStoppedAt + a.graceMs, a.deadlineMs) - a.now);
 }
 export function installShutdownHandlers(ctx) {
-    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, configCenter, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
+    const { config, logger, server, reaper, fleetReconcile, retentionLane, releaseRetentionLease, otelExporter, breakerState, costQuota, rateLimiter, runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState, storeLiveProbe, webAdmin, version, deviceHub, toolApproval, parkCommits, servingLease, } = ctx;
     const dataRoot = config.localDataRoot;
     if (dataRoot) {
         const prior = readCrashLast(dataRoot);
@@ -107,7 +107,7 @@ export function installShutdownHandlers(ctx) {
         storeLiveProbe?.stop();
         servingLease?.stop();
         void deviceHub?.close().catch((err) => logger.warn("device_hub_close_failed", { err: String(err) }));
-        configCenter?.stopRefreshLoop();
+        webAdmin?.stopRefreshLoop();
         otelExporter?.stop();
         breakerState?.stop();
         runner.sessions.dispose();

package/dist/boot/side-query-lane.d.ts

@@ -69,9 +69,9 @@ export type SideQueryLane = (spec: SideQuerySpec) => Promise<SideQueryResult>;
 export interface SideQueryLaneCtx {
     /** 与 `RunnerDeps.brain` **同一只**实例([ref] 换装后本席不再包它 —— key 走 spec 座位)。 */
     brain: Brain;
-    /** 活配置引用:目录/角色表/网关地址被 config-center 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
+    /** 活配置引用:目录/角色表/网关地址被 web-admin 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
     config: ServiceConfig;
-    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/config-center.ts` 每次 apply 重铸)。 */
+    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/web-admin.ts` 每次 apply 重铸)。 */
     getKeyResolver: () => KeyResolver;
 }
 /**
@@ -119,7 +119,7 @@ export declare function createPerModelKeyBrain(brain: Brain, getKeyResolver: ()
  * ([ref] codex R1-F2:目录与密钥表零 await 窗成对换代):
  *  · `models` = `expandTiers(config.models, config.tiers)` —— 档位词 / CC 别名(`flash`/`opus`/…)在
  *    side-query 上照常可选路(core 的 `Runner` 构造时做同一件事),且 `Runner` 那次展开是**构造时快照**,
- *    而本路由的模型白名单门(`routes/side-query.ts` 的 `isModelAllowlisted`)按请求现算同一张增广目录 ——
+ *    而本路由的模型白名单门(`routes/side-query.ts` 的 `isAtMentionable`)按请求现算同一张增广目录 ——
  *    两边取同一份才不会出现「名单放行、选路说不认识」的分歧;
  *  · `getKeyResolver()` —— 热应用整个换 resolver 引用,活取才跟得上(装配时快照 = 旧 key 用到重启)。
  * (第三件 `config.gatewayBaseUrl` 曾是 off-route 记债判据的参照系,core 5.57.0 起判据整只上收 core 的

package/dist/boot/{stage-02-registry-pull.d.ts → stage-02-web-admin-pull.d.ts}

@@ -1,10 +1,10 @@
 import type { runStage01 } from "./stage-01-config.js";
 export declare function runStage02(ctx: Awaited<ReturnType<typeof runStage01>>): Promise<{
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;
     metrics: import("../index.js").Metrics;
 }>;
-//# sourceMappingURL=stage-02-registry-pull.d.ts.map
+//# sourceMappingURL=stage-02-web-admin-pull.d.ts.map

package/dist/boot/{stage-02-registry-pull.js → stage-02-web-admin-pull.js}

@@ -1,12 +1,12 @@
 import { createUnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
-import { createConfigCenterRuntime } from "./config-center.js";
+import { createWebAdminRuntime } from "./web-admin.js";
 import { composeExecutionLane, FILE_SOURCED_LANES } from "./execution-lane.js";
 import { serviceConfigSourceKind } from "../config-provider.js";
 import { defaultModelRefusal, refusedNameMintedRefusal } from "../model-entry-refusal.js";
 export async function runStage02(ctx) {
     const { config, localRoot, logger, metrics } = ctx;
     await composeExecutionLane(config, { configSource: serviceConfigSourceKind(config), localRoot, logger, drivesFromFile: FILE_SOURCED_LANES });
-    const configCenter = await createConfigCenterRuntime({ config, logger, metrics, localRoot });
+    const webAdmin = await createWebAdminRuntime({ config, logger, metrics, localRoot });
     const noDefaultModel = defaultModelRefusal(config, "env");
     if (noDefaultModel !== undefined) {
         throw new Error(noDefaultModel);
@@ -17,6 +17,6 @@ export async function runStage02(ctx) {
     }
     const ceilingVerdict = createUnpricedCeilingVerdict({ config, logger });
     ceilingVerdict.judge();
-    return { ...ctx, ceilingVerdict, configCenter };
+    return { ...ctx, ceilingVerdict, webAdmin };
 }
-//# sourceMappingURL=stage-02-registry-pull.js.map
+//# sourceMappingURL=stage-02-web-admin-pull.js.map

package/dist/boot/stage-03-store-backend.d.ts

@@ -1,4 +1,4 @@
-import type { runStage02 } from "./stage-02-registry-pull.js";
+import type { runStage02 } from "./stage-02-web-admin-pull.js";
 export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>): Promise<{
     backend: import("../index.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
@@ -24,7 +24,7 @@ export declare function runStage03(ctx: Awaited<ReturnType<typeof runStage02>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-04-stores.d.ts

@@ -65,7 +65,7 @@ export declare function runStage04(ctx: Awaited<ReturnType<typeof runStage03>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-05-execution-env.d.ts

@@ -81,7 +81,7 @@ export declare function runStage05(ctx: Awaited<ReturnType<typeof runStage04>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-06-runners.d.ts

@@ -24,7 +24,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -142,7 +142,7 @@ export declare function runStage06(ctx: Awaited<ReturnType<typeof runStage05>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-06-runners.js

@@ -21,7 +21,7 @@ import { createGovernanceSeams } from "./governance-seams.js";
 import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-authorizer.js";
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, sessionIncarnationOf, config, configCenter, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, sessionIncarnationOf, config, webAdmin, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -63,7 +63,7 @@ export function runStage06(ctx) {
             models: config.models,
             tiers: config.tiers,
             roles: config.roles,
-            getApiKeyAndHeaders: createPerModelAuthSeat(() => configCenter.getKeyResolver()),
+            getApiKeyAndHeaders: createPerModelAuthSeat(() => webAdmin.getKeyResolver()),
         })
         : undefined;
     const memoryConsolidationFaces = consolidationSeat && memoryEngine
@@ -104,14 +104,14 @@ export function runStage06(ctx) {
         ],
         retentionExecutorWired: config.retentionSweep.intervalSec > 0 && retentionExecutor !== undefined && retentionLaneStore !== undefined,
     });
-    const mcpRevocations = configCenter.takeMcpRevocations();
+    const mcpRevocations = webAdmin.takeMcpRevocations();
     const workflowModelAllowlistSnapshot = workflowModelAllowlistFor(config) ?? [];
     const runnerDeps = createRunnerDeps({
         consolidationSeat,
         hands: commitHands,
         mcpRevocations,
         sessionIncarnationOf,
-        config, logger, metrics, localRoot, promptSource: configCenter.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
+        config, logger, metrics, localRoot, promptSource: webAdmin.promptSource, rosterStore, backgroundAgentStore, mailboxStore, mailboxRecipientLifecycle, usageWindowStore, brain,
         pricing, tracer, outcomeSink, elicitation, question, toolApproval, sessionStore, memoryEngine,
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
@@ -124,7 +124,7 @@ export function runStage06(ctx) {
     });
     const runner = new Runner(runnerDeps);
     const handslessRunner = new Runner(withoutExecutionEnv(runnerDeps));
-    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => configCenter.getKeyResolver(), metrics });
+    const { hookModelFor, hookLlm } = createHookLlm({ config, getKeyResolver: () => webAdmin.getKeyResolver(), metrics });
     const hookAgentRunner = new Runner({ ...runnerDeps, sessionStore: new TtlSessionStore({ defaultTtlDays: 1 / 24 }) });
     const agentHookCall = async ({ prompt, model, timeoutMs, system }) => {
         const pick = hookModelFor(model);
@@ -182,7 +182,7 @@ export function runStage06(ctx) {
             brain,
             pricing,
             tracer,
-            promptSource: configCenter.promptSource,
+            promptSource: webAdmin.promptSource,
             executionEnvFactory,
             lspManager,
             backgroundAgentStore,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -39,7 +39,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -157,7 +157,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-07-capability-layer.js

@@ -25,8 +25,9 @@ import { createRunnerDepsOnAsk } from "./runner-deps.js";
 import { bindRateLimiter, bindRunStore } from "./late-binds.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 import * as facts from "../capability-facts.js";
+import { WEB_ADMIN_ENV } from "@sema-agent/settings-schema";
 export async function runStage07(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, counterDegradeHook, durableEnabled, handslessSubRunner, instanceId, localRoot, logger, memoryEngine, metrics, question, runner, runnerDeps, sendUserFileToolSpec, sessionEnvSelection, sessionStore, subRunner, subRunnerSessions, taskListLane, toolApproval } = ctx;
     const authorize = createAuthorizer(config, sessionStore);
     const runStore = backend ? backend.run() : undefined;
     bindRunStore(runStore);
@@ -116,7 +117,7 @@ export async function runStage07(ctx) {
     if (config.requirePrincipal && config.selfOrchestrationEnabled && !config.selfOrchestrationWorkerIsolation)
         logger.warn("self_orchestration_no_worker_isolation", { detail: "multi-tenant self-orchestration without SELF_ORCHESTRATION_WORKER_ISOLATION=true — a tenant workflow can starve the host event loop (availability risk). Set it to enable worker_thread resource isolation." });
     if (selfOrchestrationDenial(config, centerEntitlementSourceWired(config)) !== null)
-        logger.warn("self_orchestration_no_entitlement_source", { detail: "SELF_ORCHESTRATION_ENABLED is on and REQUIRE_PRINCIPAL is on, but no per-principal entitlement source is wired (no config center, or it is in dry-run). core's allowWorkflows is tighten-only — an absent resolver leaves it ungated — so this service fail-closes self-orchestration for EVERY principal: no task on this worker can ever get the workflow engine. /v1/capabilities now reports workflows:false (workflowsGate.denial=\"entitlement_resolver_absent\") and a submit carrying selfOrchestration/settings.ultracode is refused 501 instead of silently downgraded. Wire a config center (SEMA_REGISTRY_URL + token, not dry-run), or set SELF_ORCHESTRATION_ENABLED=false." });
+        logger.warn("self_orchestration_no_entitlement_source", { detail: `SELF_ORCHESTRATION_ENABLED is on and REQUIRE_PRINCIPAL is on, but no per-principal entitlement source is wired (no web-admin, or it is in dry-run). core's allowWorkflows is tighten-only — an absent resolver leaves it ungated — so this service fail-closes self-orchestration for EVERY principal: no task on this worker can ever get the workflow engine. /v1/capabilities now reports workflows:false (workflowsGate.denial="entitlement_resolver_absent") and a submit carrying selfOrchestration/settings.ultracode is refused 501 instead of silently downgraded. Wire a web-admin (${WEB_ADMIN_ENV.url} + token, not dry-run), or set SELF_ORCHESTRATION_ENABLED=false.` });
     {
         const inert = buildForceDurableGateInertNotice({
             entitlementSourceWired: centerEntitlementSourceWired(config),
@@ -133,7 +134,7 @@ export async function runStage07(ctx) {
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
     let skills = loadDeploymentSkills(config);
-    skills = await configCenter.applyCenterCapabilities(skills);
+    skills = await webAdmin.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
     const webSearch = webSearchCfg ? createWebSearchBackend(webSearchCfg) : undefined;
@@ -150,7 +151,7 @@ export async function runStage07(ctx) {
             .catch((e) => logger.warn("web_search_probe_failed", { provider: webSearchCfg.provider, error: e instanceof Error ? e.message : String(e) }));
     }
     const ensureChildSessionDurable = checkpointStore && config.sessionBackend === "tidb" ? (sessionId) => ensureChildSessionDurableWithPromotion(sessionStore, subRunnerSessions, sessionId) : undefined;
-    const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => configCenter.getKeyResolver(), logger });
+    const webFetchSummarize = createWebFetchSummarizeLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver(), logger });
     const scenarioDeps = {
         runner, subRunner, handslessSubRunner, model: DEFAULT_MODEL_REF, skills, repoClient, requirePrincipal: config.requirePrincipal,
         webSearch: webSearch ? webSearch : undefined, metrics, logger, webFetchSummarize,
@@ -176,7 +177,7 @@ export async function runStage07(ctx) {
         : undefined;
     const scenarioDetails = builtinScenarioDetails(scenarios, scenarioDeps);
     const builtinScenarioNames = Object.keys(scenarioDetails);
-    configCenter.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
+    webAdmin.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     const defaultScenarioRefusal = danglingScenarioRefusal(config.defaultScenario, "deployment", Object.keys(scenarios));
     if (defaultScenarioRefusal !== undefined)
         throw new Error(defaultScenarioRefusal);

package/dist/boot/stage-08-reapers.d.ts

@@ -1,7 +1,7 @@
 /**
  * 装配第 8 段 —— **后台 reaper**(§3-8)。
  * 维护 tick(startReapers)+ 托管留存 lane(独立定时器)+ OTLP 导出 + 限额座换代口 + 五只 boot Runner 的
- * 原子换代闭包 + config-center 刷新环与 key resolver 首建。
+ * 原子换代闭包 + web-admin 刷新环与 key resolver 首建。
  * ⚠️ 位置即契约:刷新环必须在 `new Runner` 之后(它要五只 boot Runner 的换代口 `swapRunnerDeps`);
  * key resolver 首建读的必须是 boot apply 之后的 config。
  * 🔴 `runDenySweep` 的 holder 住在 `late-binds.ts`(赋值点在第十段的 server 之后)。
@@ -52,7 +52,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -170,7 +170,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-08-reapers.js

@@ -5,7 +5,7 @@ import { startRetentionLane, RETENTION_LEASE_TTL_FACTOR } from "./retention-lane
 import { createLimitSync } from "./limit-sync.js";
 import { runDenySweep } from "./late-binds.js";
 export function runStage08(ctx) {
-    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, configCenter, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
+    const { approvalNonceStore, backend, backgroundAgentStore, ceilingVerdict, checkpointStore, parkCommits, config, webAdmin, consolidationSeatWatch, costQuota, degradeRouteWatch, fileHistoryErasure, handslessRunner, handslessSubRunner, hookAgentRunner, imageBakes, instanceId, localRoot, logger, mailboxStore, metrics, permissionRuleStores, pricing, rateLimiter, retentionExecutor, retentionLaneStore, rosterStore, runStore, runner, sqlWorkflowRunStore, subRunner, taskAttachmentStore, toolApproval, toolResultStore, userInputLedger, workflowJournalStore, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, worktreeReap } = ctx;
     const reaper = startReapers({
         config, logger, metrics, localRoot, backend, subRunner, runStore, checkpointStore, parkCommits,
         rateLimiter, costQuota, toolResultStore, fileHistoryErasure, taskAttachmentStore, imageBakes, worktreeReap,
@@ -71,8 +71,8 @@ export function runStage08(ctx) {
             }
         }
     };
-    configCenter.startRefreshLoop({ pricing, limitSync, swapRunnerDeps, ceilingVerdict, checkpointStorePresent: checkpointStore !== undefined, degradeRoute: degradeRouteWatch, ...(consolidationSeatWatch !== undefined ? { consolidationSeat: consolidationSeatWatch } : {}) });
-    configCenter.initKeyResolver();
+    webAdmin.startRefreshLoop({ pricing, limitSync, swapRunnerDeps, ceilingVerdict, checkpointStorePresent: checkpointStore !== undefined, degradeRoute: degradeRouteWatch, ...(consolidationSeatWatch !== undefined ? { consolidationSeat: consolidationSeatWatch } : {}) });
+    webAdmin.initKeyResolver();
     return { ...ctx, otelExporter, reaper, retentionLaneStarted };
 }
 //# sourceMappingURL=stage-08-reapers.js.map

package/dist/boot/stage-09-leader.d.ts

@@ -16,7 +16,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     } | {
         childrenAlive: readonly string[];
     }>) | undefined;
-    registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
+    webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
         owner: string | null;
         sessionId: string;
@@ -81,7 +81,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -199,7 +199,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;