@sema-agent/server 7.123.0 → 7.124.1

package/dist/boot/stage-09-leader.js

@@ -1,12 +1,12 @@
 import { describeStaticWiring } from "@sema-agent/core";
 import { encodeCheckpointScope } from "../security.js";
-import { authBridgeIssuerOf, createRegistryJwtVerifier } from "../auth-bridge.js";
+import { authBridgeIssuerOf, createWebAdminJwtVerifier } from "../auth-bridge.js";
 import { createSessionFaces } from "./session-faces.js";
 import { createLeaderFace } from "./leader.js";
 import { assertStaticWiringConsistent } from "../http/routes/diagnostics.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export function runStage09(ctx) {
-    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, configCenter, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
+    const { approvalExemptionStore, backend, backgroundAgentStore, brain, checkpointStore, config, webAdmin, deviceLane, dropSessionScoped, durableEnabled, executionEnvFactory, fileHistoryErasure, governanceSeams, localRoot, logger, mailboxRecipientLifecycle, mailboxStore, metrics, pricing, resumeAnchorStore, runStore, runnerDeps, sessionPolicyStore, sessionStore, streamApprovalGate, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore, userInputLedgerStore, workflowCompletionInbox } = ctx;
     const { ownerAware, sessionAudit, sessionWatchRegistry, purgeSession, instrumentDegenerate, planCacheProbe } = createSessionFaces({
         deviceStore: deviceLane?.store,
         dropSessionScoped,
@@ -16,11 +16,11 @@ export function runStage09(ctx) {
         backgroundAgentStore,
         userInputLedgerStore,
     });
-    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: configCenter.promptSource, onError: runnerDeps.onError });
+    const leaderEndpoint = createLeaderFace({ config, logger, brain, pricing, executionEnvFactory, toolResultStore, sessionStore, checkpointStore, governanceSeams, backend, tracer, usageWindowStore, promptSource: webAdmin.promptSource, onError: runnerDeps.onError });
     const drainState = { draining: false };
     const authBridgeIssuer = authBridgeIssuerOf(config)?.issuer;
-    const registryJwtVerifier = authBridgeIssuer
-        ? createRegistryJwtVerifier({
+    const webAdminJwtVerifier = authBridgeIssuer
+        ? createWebAdminJwtVerifier({
             issuer: authBridgeIssuer,
             ...(process.env.AUTH_BRIDGE_JWKS_URL ? { jwksUrl: process.env.AUTH_BRIDGE_JWKS_URL } : {}),
             ...(process.env.AUTH_BRIDGE_AUDIENCE ? { audience: process.env.AUTH_BRIDGE_AUDIENCE } : {}),
@@ -28,7 +28,7 @@ export function runStage09(ctx) {
             metrics,
         })
         : undefined;
-    if (registryJwtVerifier)
+    if (webAdminJwtVerifier)
         logger.info("auth_bridge_enabled", { issuer: buildDisplaySafeUrl(authBridgeIssuer ?? "") });
     const hookWakeBus = {};
     const wiringSpecTemplate = durableEnabled
@@ -45,6 +45,6 @@ export function runStage09(ctx) {
         subagentTranscripts: staticWiring.fleet.subagentTranscripts,
         subagentTranscriptRetentionMs: config.backgroundAgentRetentionMs,
     });
-    return { ...ctx, drainState, hookWakeBus, instrumentDegenerate, leaderEndpoint, ownerAware, planCacheProbe, purgeSession, registryJwtVerifier, sessionAudit, sessionWatchRegistry, staticWiring };
+    return { ...ctx, drainState, hookWakeBus, instrumentDegenerate, leaderEndpoint, ownerAware, planCacheProbe, purgeSession, webAdminJwtVerifier, sessionAudit, sessionWatchRegistry, staticWiring };
 }
 //# sourceMappingURL=stage-09-leader.js.map

package/dist/boot/stage-10-http-server.d.ts

@@ -15,7 +15,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     } | {
         childrenAlive: readonly string[];
     }>) | undefined;
-    registryJwtVerifier: import("../auth-bridge.js").RegistryJwtVerifier | undefined;
+    webAdminJwtVerifier: import("../auth-bridge.js").WebAdminJwtVerifier | undefined;
     sessionAudit: ((sessionId: string) => Promise<{
         owner: string | null;
         sessionId: string;
@@ -80,7 +80,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
-    mcpRevocations: import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    mcpRevocations: import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     memoryConsolidationFaces: import("./memory-consolidation.js").MemoryConsolidationFaces | undefined;
     memoryOptOutGrantStore: import("../plugins/memory-optout-grant-store-sql.js").MemoryOptOutGrantStore | undefined;
     orgMemoryAdmission: import("./org-memory.js").OrgMemoryAdmissionWiring;
@@ -198,7 +198,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     taskListLane: import("./task-list-lane.js").TaskListLane;
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     ceilingVerdict: import("./unpriced-ceiling-verdict.js").UnpricedCeilingVerdict;
-    configCenter: import("./config-center.js").ConfigCenterRuntime;
+    webAdmin: import("./web-admin.js").WebAdminRuntime;
     config: import("../config-types.js").ServiceConfig;
     localRoot: string;
     logger: import("../index.js").Logger;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, configCenter, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, registryJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -116,7 +116,7 @@ export async function runStage10(ctx) {
     };
     const governance = {
         authorize,
-        registryJwtVerifier: registryJwtVerifier ? registryJwtVerifier : undefined,
+        webAdminJwtVerifier: webAdminJwtVerifier ? webAdminJwtVerifier : undefined,
         rateLimiter,
         costQuota,
         fleetLease: fleetLease ? fleetLease : undefined,
@@ -155,7 +155,7 @@ export async function runStage10(ctx) {
         : undefined;
     const deployment = {
         sessionStoreLabel: sessionStoreLabelOf(config.sessionBackend, backend?.kind),
-        modelReady: () => configCenter.modelReady(),
+        modelReady: () => webAdmin.modelReady(),
         scenarioDetails,
         workflowsCapable,
         workflowModelAllowlist: workflowModelAllowlistSnapshot,
@@ -164,7 +164,7 @@ export async function runStage10(ctx) {
         sqlEngineFacts,
         writeProtection: buildWriteProtectionPosture(config),
         webSearchProvider,
-        sealedKeyPublic: configCenter.sealedKeyPublic,
+        sealedKeyPublic: webAdmin.sealedKeyPublic,
         instanceId,
         capabilities: {
             version: serviceVersion(),
@@ -173,19 +173,19 @@ export async function runStage10(ctx) {
                 return isPricingConfigured(pricing);
             },
         },
-        restartState: () => configCenter.restartState(),
-        configApplyState: () => configCenter.configApplyState(),
-        centerCredentialState: () => configCenter.centerCredentialState(),
-        modelRefusalsState: () => configCenter.modelRefusalsState(),
-        configHandoffState: () => configCenter.configHandoffState(),
+        restartState: () => webAdmin.restartState(),
+        configApplyState: () => webAdmin.configApplyState(),
+        centerCredentialState: () => webAdmin.centerCredentialState(),
+        modelRefusalsState: () => webAdmin.modelRefusalsState(),
+        configHandoffState: () => webAdmin.configHandoffState(),
         mcpRevocations,
-        mcpRevocationState: () => configCenter.mcpRevocationState(),
-        configRefreshNow: () => configCenter.refreshNow(),
-        configCenterManagedKeys: () => configCenter.centerManagedKeys(),
+        mcpRevocationState: () => webAdmin.mcpRevocationState(),
+        configRefreshNow: () => webAdmin.refreshNow(),
+        webAdminManagedKeys: () => webAdmin.centerManagedKeys(),
         drainState,
         servingLease: servingLease ? () => servingLease.view() : undefined,
         storePosture,
-        centerWiring: createCenterWiringReader({ config, pullState: () => configCenter.centerPullState(), fleetLease, usageReport: fleetUsage !== undefined }),
+        centerWiring: createCenterWiringReader({ config, pullState: () => webAdmin.centerPullState(), fleetLease, usageReport: fleetUsage !== undefined }),
         storeLiveState: storeLiveProbe ? () => storeLiveProbe.state() : undefined,
     };
     const knobs = {
@@ -196,8 +196,8 @@ export async function runStage10(ctx) {
     };
     const resolveSpec = createResolveSpec({
         config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
-        getCenterPrompts: () => configCenter.getCenterPrompts(),
-        getKeyResolver: () => configCenter.getKeyResolver(),
+        getCenterPrompts: () => webAdmin.getCenterPrompts(),
+        getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         noteSessionIncarnation,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
@@ -209,7 +209,7 @@ export async function runStage10(ctx) {
         approverSeat: createRunnerDepsOnAsk(toolApproval),
     });
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
-    const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => configCenter.getKeyResolver() });
+    const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
     const server = createHttpServer({ runner, runnerFor, sideQuery, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
@@ -274,10 +274,10 @@ export async function runStage10(ctx) {
         ...(fleetUsage ? { usage: fleetUsage } : {}),
         logger: { info: (m, d) => logger.info(m, d ?? {}), warn: (m, d) => logger.warn(m, d ?? {}) },
     });
-    configCenter.onSelfReportChange(() => void fleetClient?.announceNow());
+    webAdmin.onSelfReportChange(() => void fleetClient?.announceNow());
     if (fleetClient) {
         const advertised = config.fleetAdvertiseAddress;
-        logger.info("fleet_client_started", { worker: config.configCenter?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
+        logger.info("fleet_client_started", { worker: config.webAdmin?.worker, usageReport: fleetUsage !== undefined, announce: advertised !== undefined, ...(advertised !== undefined ? { address: buildDisplaySafeUrl(advertised) } : {}) });
     }
     const failoverFirstByte = buildFailoverFirstByteNotice(config);
     if (failoverFirstByte)
@@ -325,7 +325,7 @@ export async function runStage10(ctx) {
         config, logger, server, reaper, fleetReconcile, otelExporter, breakerState, costQuota, rateLimiter,
         version: serviceVersion(),
         runner, subRunner, lspManager, workflowNotifyJournal, fleetClient, backend, drainState,
-        storeLiveProbe, configCenter,
+        storeLiveProbe, webAdmin,
         toolApproval,
         parkCommits,
         deviceHub: deviceLane?.hub,

package/dist/boot/unpriced-ceiling-verdict.d.ts

@@ -1,7 +1,7 @@
 import type { ServiceConfig } from "../config-types.js";
 import type { Logger } from "../observability/logger.js";
 export interface UnpricedCeilingVerdictCtx {
-    /** 活配置(config-center 热应用就地改写的**同一个**对象——所以每次 `judge()` 读到的是当代值)。 */
+    /** 活配置(web-admin 热应用就地改写的**同一个**对象——所以每次 `judge()` 读到的是当代值)。 */
     readonly config: Pick<ServiceConfig, "models" | "maxTaskCostUsd" | "maxPrincipalCostUsd">;
     readonly logger?: Logger;
 }

package/dist/boot/{config-center.d.ts → web-admin.d.ts}

@@ -13,12 +13,12 @@ import { type SealedKeyPublicFace } from "../sealed-key.js";
 import type { UnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import type { ConsolidationSeatWatch } from "./memory-consolidation.js";
 import type { DegradeRouteWatch } from "../brain.js";
-import { type EngineRestartSignal } from "../config-center/facade.js";
+import { type EngineRestartSignal } from "../web-admin-client/facade.js";
 import { type ConfigHandoff } from "../fleet/engine-signal.js";
-import { type ConfigApplyLedgerView } from "../config-center/apply-ledger.js";
-import type { CenterPullView } from "../config-center/pull-state.js";
+import { type ConfigApplyLedgerView } from "../web-admin-client/apply-ledger.js";
+import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { LimitSync } from "./limit-sync.js";
-export interface ConfigCenterRuntimeCtx {
+export interface WebAdminRuntimeCtx {
     config: ServiceConfig;
     logger: Logger;
     metrics: Metrics;
@@ -33,10 +33,10 @@ export interface CenterScenarioOverlayTargets {
     /** overlay 前捕获的六内建名(centerScenarioDetails 的 shadow 判据)。 */
     builtinScenarioNames: string[];
 }
-/** S-740 / S-741 / S-768:config-center 持有的三样自报状态(fleet 心跳读它们)—— 闭集:加一样 = 写口与订阅方一起表态。 */
+/** S-740 / S-741 / S-768:web-admin 持有的三样自报状态(fleet 心跳读它们)—— 闭集:加一样 = 写口与订阅方一起表态。 */
 export type SelfReportChange = "roster_landed" | "restart_signal" | "model_refusals";
 /** 跨段可变状态的**唯一**对外读口 + 三个原位动作。字段语义见各方法上的注释。 */
-export interface ConfigCenterRuntime {
+export interface WebAdminRuntime {
     /** 配置源形态;`undefined` = 纯 env 部署(本运行时的所有分支不存在)。 */
     readonly providerKind: "remote" | "local" | undefined;
     /** S-737:本进程模型钥匙保管店的**公钥面**(只有最新那把公钥;私钥 / 持有 id 列表 / 开箱口结构上够不着,见
@@ -86,7 +86,7 @@ export interface ConfigCenterRuntime {
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账读口,喂 `RunnerDeps.mcpRevocations` 席。
      *  **取走即声明接线**——调用本方法后,restart 信号的 mcp 片对纯删除向豁免(台账即时承接);
      *  不取 ⇒ 旧 restart 语义逐字保留(fail-closed)。 */
-    takeMcpRevocations(): import("../config-center/mcp-revocation.js").McpRevocationLedger;
+    takeMcpRevocations(): import("../web-admin-client/mcp-revocation.js").McpRevocationLedger;
     /** [ref] 诊断投影:当前被撤销的 MCP 服务器名单;纯 env 部署(无配置管道)= undefined(additive 纪律)。 */
     mcpRevocationState(): {
         revoked: string[];
@@ -100,7 +100,7 @@ export interface ConfigCenterRuntime {
     /** boot ready 门:布防(`CONFIG_REQUIRE_ROSTER=true`,远程 registry 非 dryRun)且 roster 未落地 =
      *  计费提交 503 + /health ready:false。缺省未布防 ⇒ 恒 true。 */
     modelReady(): boolean;
-    /** S-740 / S-741:本副本**自报状态**里由 config-center 持有的那两样 —— roster 落地(`modelReady` 翻真,one-way latch)与
+    /** S-740 / S-741:本副本**自报状态**里由 web-admin 持有的那两样 —— roster 落地(`modelReady` 翻真,one-way latch)与
      *  restart 信号(`restartState()` 出现 / 消失 / 变)—— 任一翻转的那一拍通知订阅者。装配层接 fleet 心跳的 `announceNow`,
      *  让中心在翻转当刻就知道本副本可路由 / 要重启(不等下一拍心跳;draining 那一样由收尾链直调 `announceNow`,同一个触发)。
      *  在状态**写定之后**调用,同步、逐个,入参 = 这一次翻的是哪一样(闭集 {@link SelfReportChange});不回放(订阅方在订阅前已读过
@@ -121,7 +121,7 @@ export interface ConfigCenterRuntime {
      *  `undefined` = 本部署没有配置管道(纯 env worker)⇒ 两个读面的形状**逐字不变**(additive 纪律)。 */
     configApplyState(): ConfigApplyLedgerView | undefined;
     /** S-866 ②:caps `centerWiring.effectivePull` / `effectiveRevision` 的取值口 —— `lastPull`(新状态,只此一枚:boot 实拉 / 迟到 boot 到货 /
-     *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `config-center/pull-state.ts`。 */
+     *  refresh 拍收尾写)+ 与 `configApplyState()` **同一只** ledger 视图的已应用修订号。形与词表见 `web-admin-client/pull-state.ts`。 */
     centerPullState(): CenterPullView;
     /** DESIGN-278 §5 S2([ref]):center **当前在管**的 ServiceConfig 键集 —— `GET /v1/config/catalog` 判
      *  `effectiveLane` 的 center 半场。投影自最近一次成功应用的候选(`latestEffective`,LKG/refresh 同一
@@ -142,5 +142,5 @@ export interface ConfigCenterRuntime {
      */
     refreshNow(): Promise<"triggered" | "not-wired" | "failed">;
 }
-export declare function createConfigCenterRuntime(ctx: ConfigCenterRuntimeCtx): Promise<ConfigCenterRuntime>;
-//# sourceMappingURL=config-center.d.ts.map
+export declare function createWebAdminRuntime(ctx: WebAdminRuntimeCtx): Promise<WebAdminRuntime>;
+//# sourceMappingURL=web-admin.d.ts.map

package/dist/boot/{config-center.js → web-admin.js}

@@ -2,7 +2,7 @@ import { createHash } from "node:crypto";
 import { readFile as fsReadFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { CENTER_CREDENTIAL_ENV, skillContentHash } from "@sema-agent/settings-schema";
+import { WEB_ADMIN_ENV, formatConfigPath, skillContentHash } from "@sema-agent/settings-schema";
 import { stableStringify } from "@sema-agent/settings-schema/hash";
 import { buildModelRefusalsSignal } from "../model-entry-refusal.js";
 import { CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, } from "@sema-agent/core";
@@ -15,15 +15,16 @@ import { isRosterGateArmed } from "../config.js";
 import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, legacyV1LkgPath, migrateV1Lkg } from "../config-lkg.js";
 import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
-import { centerManagedConfigKeys } from "../config-center/apply-effective.js";
+import { centerManagedConfigKeys } from "../web-admin-client/apply-effective.js";
+import { logConfigDirMigration, migrateLocalConfigDirectory } from "../config-d-migration.js";
 import { createConfigProvider, raceBootFetch, serviceConfigSourceKind, BOOT_FETCH_DEFERRED } from "../config-provider.js";
 import { createKeyResolver } from "../key-resolver.js";
 import { buildSealedKeyPublicFace, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
-import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, fetchPromptArtifact } from "../config-center/facade.js";
+import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, applyCenterSkills, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, fetchPromptArtifact } from "../web-admin-client/facade.js";
 import { buildConfigHandoff, buildRestartSignal, configHandoffMissing } from "../fleet/engine-signal.js";
-import { createMcpRevocationLedger, enabledMcpEntries } from "../config-center/mcp-revocation.js";
+import { createMcpRevocationLedger, enabledMcpEntries } from "../web-admin-client/mcp-revocation.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
-import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../config-center/apply-ledger.js";
+import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
 function lkgReadNote(scope) {
     switch (scope) {
         case "whole":
@@ -32,7 +33,7 @@ function lkgReadNote(scope) {
             return "the live candidate's model plane was refused at boot — the persisted last-known-good supplies the model plane only (catalog and the collab templates that reference it); every other group and every restart-to-apply face stays the live candidate's";
     }
 }
-export async function createConfigCenterRuntime(ctx) {
+export async function createWebAdminRuntime(ctx) {
     const { config, logger, metrics, localRoot } = ctx;
     let ccEtag;
     let effective;
@@ -65,13 +66,13 @@ export async function createConfigCenterRuntime(ctx) {
     let bootSkillStale = false;
     let pendingRestart;
     let modelRefusals;
-    const cc = config.configCenter;
+    const cc = config.webAdmin;
     const bootCredential = cc?.credential.read();
     const bootVerdict = bootCredential === undefined ? undefined : judgeCenterCredentialAtBoot(bootCredential);
     if (bootVerdict?.verdict === "refuse")
         throw new Error(bootVerdict.sentence);
     if (bootVerdict?.verdict === "loud") {
-        logger.error("center_credential_unreadable", { key: CENTER_CREDENTIAL_ENV.tokenFile, failure: bootVerdict.failure, reason: bootVerdict.reason, effect: bootVerdict.effect });
+        logger.error("center_credential_unreadable", { key: WEB_ADMIN_ENV.tokenFile, failure: bootVerdict.failure, reason: bootVerdict.reason, effect: bootVerdict.effect });
     }
     const credentialRenewer = cc !== undefined && cc.credential.origin.from === "file"
         ? createCenterCredentialRenewer({ source: cc.credential, centerUrl: cc.baseUrl, leadMs: config.centerCredentialRenewLeadMs, logger })
@@ -110,7 +111,7 @@ export async function createConfigCenterRuntime(ctx) {
         sealedKeys = await ensureSealedKeyStore(join(config.localDataRoot ?? localRoot, "sealed-key"), logger);
         void reportExecutionPublicKey({
             baseUrl: cc?.baseUrl,
-            adminToken: process.env.SEMA_REGISTRY_ADMIN_TOKEN,
+            adminToken: process.env[WEB_ADMIN_ENV.adminToken],
             key: sealedKeys.latest,
             ...(cc?.worker ? { notes: `worker ${cc.worker}` } : {}),
             logger,
@@ -122,10 +123,12 @@ export async function createConfigCenterRuntime(ctx) {
     const configProvider = serviceConfigSourceKind(config) !== undefined
         ? createConfigProvider({
             ...(config.configProvider ? { provider: config.configProvider } : {}),
-            ...(cc ? { configCenter: { baseUrl: cc.baseUrl, credential: cc.credential, worker: cc.worker, dryRun: cc.dryRun } } : {}),
+            ...(cc ? { webAdmin: { baseUrl: cc.baseUrl, credential: cc.credential, worker: cc.worker, dryRun: cc.dryRun } } : {}),
             localDir: localRoot,
         })
         : undefined;
+    if (configProvider?.kind === "local")
+        logConfigDirMigration(logger, await migrateLocalConfigDirectory(localRoot));
     const rosterGateArmed = isRosterGateArmed(cc);
     const modelReadyState = { ready: !rosterGateArmed };
     const warnDroppedEntries = (r, phase) => {
@@ -354,8 +357,8 @@ export async function createConfigCenterRuntime(ctx) {
         }
         const lkgPath = lkgPathFor(identity);
         try {
-            if (effectiveObj.skills && config.configCenter) {
-                await applyCenterSkills([], effectiveObj.skills, config.configCenter, logger, undefined, defaultSkillCacheDir(config));
+            if (effectiveObj.skills && config.webAdmin) {
+                await applyCenterSkills([], effectiveObj.skills, config.webAdmin, logger, undefined, defaultSkillCacheDir(config));
             }
             const enabledSkills = (effectiveObj.skills?.skills ?? []).filter((m) => m.enabled !== false);
             const cacheDir = defaultSkillCacheDir(config);
@@ -420,8 +423,21 @@ export async function createConfigCenterRuntime(ctx) {
                 logger.warn("config_lkg_unusable", { path: lkgPath, reason: "center credential identity changed while the LKG was being read — not used", note: "env fallback serves; the current identity's next pull re-establishes its own LKG" });
                 return null;
             }
-            if (read.migrated !== undefined)
-                logger.info("config_lkg_migrated", { to: lkgPath, note: read.migrated });
+            if (read.migrated !== undefined) {
+                const m = read.migrated;
+                logger.info("config_lkg_migrated", {
+                    to: lkgPath,
+                    fromFormat: m.fromFormat,
+                    ...(m.note !== undefined ? { note: m.note } : {}),
+                    receipts: m.receipts.map((r) => ({ migration: r.migration, document: r.document, path: formatConfigPath(r.path), appliedAs: r.appliedAs })),
+                });
+                try {
+                    await saveLkg(lkgPath, cc?.worker, identity, read.lkg.effective, read.lkg.etag);
+                }
+                catch (err) {
+                    logger.warn("config_lkg_save_failed", { path: lkgPath, err: String(err), note: "the migrated LKG is used from memory this boot; the on-disk copy is migrated again on the next read-back and replaced by the next clean candidate" });
+                }
+            }
             logger.info("config_loaded_lkg", { path: lkgPath, savedAt: read.lkg.savedAt, why, scope, note: lkgReadNote(scope) });
             const lkgEffective = read.lkg.effective;
             candidateIdentity.set(lkgEffective, identity);
@@ -648,8 +664,8 @@ export async function createConfigCenterRuntime(ctx) {
             return (await manualRefresh()) === "failed" ? "failed" : "triggered";
         },
         async applyCenterCapabilities(skills) {
-            if (effective?.skills && config.configCenter) {
-                skills = await applyCenterSkills(skills, effective.skills, config.configCenter, logger, undefined, config.configLkgEnabled ? defaultSkillCacheDir(config) : undefined);
+            if (effective?.skills && config.webAdmin) {
+                skills = await applyCenterSkills(skills, effective.skills, config.webAdmin, logger, undefined, config.configLkgEnabled ? defaultSkillCacheDir(config) : undefined);
             }
             if (effective?.plugins !== undefined) {
                 const pluginOut = await applyCenterPlugins(skills, effective, {
@@ -705,7 +721,7 @@ export async function createConfigCenterRuntime(ctx) {
                 Object.assign(scenarios, overlay);
                 Object.assign(scenarioDetails, centerScenarioDetails(effective.scenarios.scenarios, builtinScenarioNames, scenarioDeps));
                 if (Object.keys(overlay).length > 0)
-                    logger.info("sema_registry_scenarios", { scenarios: Object.keys(overlay), ...(shadows.length > 0 ? { shadowsBuiltin: shadows } : {}) });
+                    logger.info("web_admin_scenarios", { scenarios: Object.keys(overlay), ...(shadows.length > 0 ? { shadowsBuiltin: shadows } : {}) });
             }
         },
         initKeyResolver() {
@@ -785,7 +801,7 @@ export async function createConfigCenterRuntime(ctx) {
             };
             const restartLogFields = (signal) => signal ? { restartRequired: true, restartReasons: signal.reasons } : {};
             if (configProvider) {
-                const ccRef = config.configCenter;
+                const ccRef = config.webAdmin;
                 let refreshInFlight = false;
                 const refreshTick = async (arrival) => {
                     if (refreshInFlight)
@@ -895,7 +911,7 @@ export async function createConfigCenterRuntime(ctx) {
                                         note: "a group of this candidate was refused — the live config keeps serving the prior values for it; the LKG and the ETag stay on the last FULLY applied generation (this tree is re-judged next tick)",
                                     });
                                     const partialSignal = signalRestart({ applied: "partial", effective: r.effective, baseline: effective, refused: refused.map((g) => g.group) });
-                                    logger.info("sema_registry_refreshed", {
+                                    logger.info("web_admin_refreshed", {
                                         version: r.effective.version,
                                         note: "partially applied — the refused group(s) keep their prior values (see config_candidate_partially_applied); the other groups hot-applied; restart fields as on a complete tick",
                                         ...restartLogFields(partialSignal),
@@ -904,7 +920,7 @@ export async function createConfigCenterRuntime(ctx) {
                                 }
                                 const lkgPersisted = await persistLkgDurable(r.effective, r.etag);
                                 const signal = signalRestart({ applied: "complete", effective: r.effective, ...(r.etag !== undefined ? { etag: r.etag } : {}), baseline: effective, lkgPersisted });
-                                logger.info("sema_registry_refreshed", {
+                                logger.info("web_admin_refreshed", {
                                     version: r.effective.version,
                                     note: "collab + runtime governance (incl. approvalRequire) + limits + models/roles/roster hot-applied; skills/mcp/a2a/scenarios are restart-to-apply",
                                     ...restartLogFields(signal),
@@ -915,7 +931,7 @@ export async function createConfigCenterRuntime(ctx) {
                         }
                     }
                     catch (err) {
-                        logger.warn("sema_registry_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
+                        logger.warn("web_admin_refresh_failed", { err: String(err), note: "etag NOT advanced — the same candidate is re-fetched and re-applied next poll" });
                         return "failed";
                     }
                     finally {
@@ -1044,4 +1060,4 @@ export async function createConfigCenterRuntime(ctx) {
         },
     };
 }
-//# sourceMappingURL=config-center.js.map
+//# sourceMappingURL=web-admin.js.map

package/dist/boot/webfetch-summarize-lane.d.ts

@@ -51,9 +51,9 @@ export type WebFetchSummarizeLane = NonNullable<NonNullable<WebFetchConfig["summ
 export interface WebFetchSummarizeLaneCtx {
     /** 与 `RunnerDeps.brain` **同一只**实例(wrapper 在外面包,不改这只)。 */
     brain: Brain;
-    /** 活配置引用:目录/角色表被 config-center 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
+    /** 活配置引用:目录/角色表被 web-admin 就地热应用(`mutateInPlace`),按调用取值才跟得上。 */
     config: ServiceConfig;
-    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/config-center.ts` 每次 apply 重铸)。 */
+    /** 活引用取值 —— registry 热应用整个换 resolver 引用(`boot/web-admin.ts` 每次 apply 重铸)。 */
     getKeyResolver: () => KeyResolver;
     logger: Logger;
 }

package/dist/brain.d.ts

@@ -1,7 +1,7 @@
 import { type Brain, type BreakerState, type Model } from "@sema-agent/core";
 import type { ServiceConfig } from "./config-types.js";
 import { type SealedCustodyPoison } from "./key-resolver.js";
-import { type RestartSliceCtx } from "./config-center/restart-signal.js";
+import { type RestartSliceCtx } from "./web-admin-client/restart-signal.js";
 /**
  * 配了快切层(failover ≥2 路 / 断路器)时,**每路**的重试上限。
  *

package/dist/brain.js

@@ -6,7 +6,7 @@ import { createHash } from "node:crypto";
 import { isModelKeyPoison, modelKeyPoisonIdentity } from "./key-resolver.js";
 import { dispatchBrainLane } from "./model-provider.js";
 import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
-import { catalogEntryFingerprint } from "./config-center/restart-signal.js";
+import { catalogEntryFingerprint } from "./web-admin-client/restart-signal.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 import { createModelReachBrain } from "./model-unreachable-notice.js";
 function isOffDeploymentRoot(baseUrl, config) {

package/dist/budget.d.ts

@@ -23,13 +23,13 @@ import { type PromptManifestTracker } from "./observability/prompt-manifest.js";
 export declare function buildPricing(models: Record<string, Model>): Record<string, ModelPricing>;
 /**
  * 缝合审 M3:`capabilities.pricingConfigured` 的判据 —— 提成函数放在 pricing 自己的文件里,因为
- * **这个表是热变的**(`boot/config-center.ts` 的 `mutateInPlace(pricing, buildPricing(config.models))`,
+ * **这个表是热变的**(`boot/web-admin.ts` 的 `mutateInPlace(pricing, buildPricing(config.models))`,
  * 那行注释自己写着 `hot: cost/model changes`)。旧码在 `main.ts` 的 capabilities 字面量里把它算成一个
- * **boot 时的布尔快照**,于是运维在 config center 里加上/撤掉价目表之后,`/v1/capabilities` 还报旧值 ——
+ * **boot 时的布尔快照**,于是运维在 web-admin 里加上/撤掉价目表之后,`/v1/capabilities` 还报旧值 ——
  * 而这个键的**全部用途**就是给消费端消歧「costMicroUsd=0 是免费跑,还是根本没配价目表」,报错了就是
  * 把消歧信号变成误导信号。main.ts 侧改用 getter(读时求值)。
  *
- * 同一条论证在同一个字面量里**已经执行过一次**:紧邻的 `restartState: () => configCenter.restartState()`
+ * 同一条论证在同一个字面量里**已经执行过一次**:紧邻的 `restartState: () => webAdmin.restartState()`
  * 带着注释「A live getter (not a snapshot) so /health always reads current」—— 兄弟键漏了。本仓第 7 例同形。
  *
  * 🔴 B-089(判据本身,同一条「0 不是缺席」的病):此前判的是「**有没有一项正价**」

package/dist/canonical-json.d.ts

@@ -4,7 +4,7 @@
  *
  * ## 为什么只能有一个
  * 合并前本仓有 **5 处**手写复刻(memory-origin-fence / permission-rule-store-sql / bench-l8 artifact /
- * config-center restart-signal / mcp-revocation),每处一份「排 key、递归、拼串」——同一个算法五份实现,
+ * web-admin restart-signal / mcp-revocation),每处一份「排 key、递归、拼串」——同一个算法五份实现,
  * 语义在边缘(undefined 值键、函数成员、非有限数)各自漂了一点。指纹型代码的病灶恰恰在边缘:同一份内容算出
  * 两个指纹 = 落库 checksum 失配 / 误签 restart / 包完整性自校验对不上。
  *
@@ -29,7 +29,7 @@
  *  · `bigint`:`JSON.stringify` 抛 TypeError,原样上抛。
  *
  * ## 不在本文件里的第二形(如实登记)
- * `src/config-center/restart-signal.ts#stableStringify`(mcp-revocation 同源改调)是**另一个语义**:undefined 值键
+ * `src/web-admin-client/restart-signal.ts#stableStringify`(mcp-revocation 同源改调)是**另一个语义**:undefined 值键
  * **保留为 `"k":null`**。两族在 JSON 形输入上逐字节相同(golden 交叉读数已证),分歧只在进程内构造的
  * `{k: undefined}` 形——restart 指纹的输入正是进程内切片对象,该形原则上可达,而 `{k:undefined}` 与 `{}` 是否
  * 同指纹是 restart-signal 轴上的**行为**(多签/少签一次 fleet 滚动重启),不是序列化器的私事 ⇒ 本批不并

package/dist/capabilities/center-plugins.d.ts

@@ -85,7 +85,7 @@ export interface ApplyPluginsResult {
 }
 /**
  * 装载器**会物化**的插件(按声明序)—— 每条声明过**同一只**判定 {@link validatePluginDecl},只留 `ok` 的
- * `{name, url, sha?}`。restart 指纹(`config-center/restart-signal.ts` 的 skills 片,S-668 波 0)读的就是它:
+ * `{name, url, sha?}`。restart 指纹(`web-admin-client/restart-signal.ts` 的 skills 片,S-668 波 0)读的就是它:
  * 装载器不读的字段(notes / version)、整条跳过的声明(`enabled:false` / marketplace 源 / 白名单外 host / 坏形)
  * 在这里一并消失,于是「重启之后什么都不会变」的发布不签重启(codex 对抗复审 r1 [medium]);顺序保留 ——
  * 撞名让位按声明序,对调两条是真变化。`allowHosts` 与装载时同一份(部署事实 `PLUGINS_ALLOW_HOSTS`)。

package/dist/capabilities/center-wiring.d.ts

@@ -5,16 +5,20 @@
  * 与运维面板都读不出「额度现在没人在判」。本键把它们收成一个读面(调用方面;运维面仍是 `/health` 与 `GET /v1/diagnostics/wiring`)。
  *
  * ## 形与 present-iff
- * 整个键只在接了中心(`config.configCenter` 在场)时出现;`lease:"absent"`(中心三件不齐 ⇒ 没装租约管理器)时 `leaseHealth` /
+ * 整个键只在接了中心(`config.webAdmin` 在场)时出现;`lease:"absent"`(中心三件不齐 ⇒ 没装租约管理器)时 `leaseHealth` /
  * `failMode` / `caller` 三键缺席。「键缺席」于是两义:老 worker / 没接中心 —— 同一体的 `version` 能分。
  *  · `effectivePull` = 最近一次实拉成功(`lastPull === "ok"`;LKG 起服 / 从未成功 / 最近一拍失败 = false);
- *  · `effectiveRevision` = 与 `/health.configAppliedVersion` 同一只 ledger 视图(`config-center/pull-state.ts`);
+ *  · `effectiveRevision` = 与 `/health.configAppliedVersion` 同一只 ledger 视图(`web-admin-client/pull-state.ts`);
  *  · `lease` / `leaseHealth` / `failMode` / `caller` = 租约管理器的 `snapshot()` 与生效姿态(与执行的那一只同源);
  *  · `usageReport` = 用量环装没装(装配事实:累加器与环同一只谓词 `centerLaneConfigured`);
- *  · `issuer` = 鉴权桥 issuer 显式 / 回退(`authBridgeIssuerOf`;接了中心 ⇒ 桥恒装 ⇒ 没有 `none` 这一词)。
+ *  · `issuer` = 鉴权桥 issuer 显式 / 回退(`authBridgeIssuerOf`;接了中心 ⇒ 桥恒装 ⇒ 没有 `none` 这一词);
+ *  · `worker` = 引擎向中心登记用的 worker 名(取值口 = `config.webAdmin.worker`,排空口身份四元读的同一只)。**present-iff 配了名且名可披露**:
+ *    没配 ⇒ 缺席(不拼不猜);配了但不是标识符形 / 是秘密形(契约 `isDisclosableIdentity`,「引擎要不要把一个名字写出去」问的那一只)⇒ 按无名处置,
+ *    键缺席,不打码。它住在这张**有鉴权**的能力面、不住无鉴权 `/health`(`http/health-self-report.ts` 头注:worker 名刻意不上无鉴权面)——
+ *    壳附着后用它拼网页会话链接(`<webBaseUrl>/chat?agent=<worker>&session=<id>`)。
  * caps 路由自己**不 admit**(不打中心):读的是最近一次谈判留下的状态。
  */
-import type { CenterPullView } from "../config-center/pull-state.js";
+import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { CallerLease, FleetLeaseManager, LeaseFailMode, LeaseHealth, LeaseSnapshot } from "../fleet-lease.js";
 import type { ServiceConfig } from "../config.js";
 /** `issuer` 的词表(两词:接了中心 ⇒ 桥恒装,`none` 结构上到不了,闭集里不留死词)。 */
@@ -32,6 +36,7 @@ export interface CenterWiring {
     readonly failMode?: LeaseFailMode;
     readonly usageReport: boolean;
     readonly issuer: CenterIssuer;
+    readonly worker?: string;
     readonly caller?: {
         readonly lease: CallerLease;
         readonly retryAfterSec?: number;
@@ -47,6 +52,8 @@ export interface CenterWiringFacts {
     } | undefined;
     readonly usageReport: boolean;
     readonly issuer: CenterIssuer;
+    /** 配置里的 worker 名(`config.webAdmin.worker`;缺席 = 没配)。可披露性在投影里判,不在取值处判。 */
+    readonly worker: string | undefined;
 }
 /** 输入 → caps 投影(纯函数,`build*` = 纯数据)。 */
 export declare function buildCenterWiring(f: CenterWiringFacts): CenterWiring;
@@ -55,7 +62,7 @@ export declare function buildCenterWiring(f: CenterWiringFacts): CenterWiring;
  * 没接中心 ⇒ `undefined`(键整个缺席)。`now` 注入只给测试(与租约管理器同钟才判得出过期);生产缺省 `Date.now`。
  */
 export declare function createCenterWiringReader(a: {
-    readonly config: Pick<ServiceConfig, "configCenter" | "authBridgeIssuer">;
+    readonly config: Pick<ServiceConfig, "webAdmin" | "authBridgeIssuer">;
     readonly pullState: () => CenterPullView;
     readonly fleetLease: Pick<FleetLeaseManager, "snapshot" | "failMode"> | undefined;
     readonly usageReport: boolean;

package/dist/capabilities/center-wiring.js

@@ -1,13 +1,21 @@
 import { authBridgeIssuerOf } from "../auth-bridge.js";
+import { isDisclosableIdentity } from "@sema-agent/settings-schema";
 export const CENTER_ISSUER_WORDS = ["explicit", "fallback"];
 export function buildCenterWiring(f) {
-    const base = { effectivePull: f.pull.lastPull === "ok", effectiveRevision: f.pull.effectiveRevision, usageReport: f.usageReport, issuer: f.issuer };
+    const base = {
+        effectivePull: f.pull.lastPull === "ok",
+        effectiveRevision: f.pull.effectiveRevision,
+        usageReport: f.usageReport,
+        issuer: f.issuer,
+        ...(f.worker !== undefined && isDisclosableIdentity(f.worker) ? { worker: f.worker } : {}),
+    };
     if (f.lease === undefined)
         return { ...base, lease: "absent" };
     return { ...base, lease: "configured", leaseHealth: f.lease.snapshot.leaseHealth, failMode: f.lease.failMode, caller: f.lease.snapshot.caller };
 }
 export function createCenterWiringReader(a) {
-    if (a.config.configCenter === undefined)
+    const webAdmin = a.config.webAdmin;
+    if (webAdmin === undefined)
         return undefined;
     const issuer = authBridgeIssuerOf(a.config);
     if (issuer === undefined)
@@ -19,6 +27,7 @@ export function createCenterWiringReader(a) {
         lease: lease === undefined ? undefined : { failMode: lease.failMode, snapshot: lease.snapshot(principal, now()) },
         usageReport: a.usageReport,
         issuer: issuer.source,
+        worker: webAdmin.worker,
     });
 }
 //# sourceMappingURL=center-wiring.js.map

package/dist/capabilities/composite-members.d.ts

@@ -42,7 +42,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly fleet: readonly ["stream", "sessionScope", "observe", "resume", "bgNotifyFailClosed", "steerPriority", "hookFailureNotice", "leaseClient", "generationEcho"];
     readonly memoryEngine: readonly ["backend", "vectorMode"];
     readonly store: readonly ["declared", "backend", "durable", "degradedReason", "sql"];
-    readonly centerWiring: readonly ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "caller"];
+    readonly centerWiring: readonly ["effectivePull", "effectiveRevision", "lease", "leaseHealth", "failMode", "usageReport", "issuer", "worker", "caller"];
     readonly webSearch: readonly ["backend"];
     readonly background: readonly ["listFace", "exitFaces"];
     readonly taskSettings: readonly ["permissions", "permissionMode", "model", "outputStyle", "env", "hooks"];