@sema-agent/server 7.125.0 → 7.126.0

package/dist/tool-approval.d.ts

@@ -1,6 +1,64 @@
+/**
+ * [ref]/[ref]② tool-approval bridge — the SERVICE side of core's `RunnerDeps.onAsk` seam (core `tool-policy.ts`
+ * `resolveAsk`, 1.290's sync-ask leg). The SIBLING of {@link import("./question.js").QuestionCoordinator}: onQuestion
+ * routes the agent's AskUserQuestion tool to a live human; THIS routes a policy `ask` DECISION (e.g. the
+ * `createFsWriteGatePolicy` fs-write gate, an ask-list rule, or a non-durable safety ask) to the live human as a
+ * CC-parity three-choice card (Yes / Yes-allow-all-session / No).
+ *
+ * Wire shape (mirrors question end to end): core adjudicates a tool call `ask` → `resolveAsk(req, onAsk)` calls this
+ * coordinator's `ask` → we mint a pending entry + emit a `tool_approval` SSE frame on the run's live stream → the
+ * shell renders the three-choice card → `POST /v1/tool-approvals/:id/respond` settles the parked promise →
+ * `resolveAsk` maps our boolean to allow/deny. RESPOND BODY selection rationale: the question precedent's body is
+ * core's own QuestionAnswer (a structured multi-answer object) because core FENCES its semantics; an approval has no
+ * core-side answer object — `OnAsk` resolves to a BARE boolean — so the wire body is a minimal closed enum
+ * `{decision: "allow" | "allow_session" | "deny"}` mapping 1:1 onto the CC card's three choices (no free text = no
+ * fence needed; "allow_session" carries the Yes-allow-all intent that a boolean cannot).
+ *
+ * Session state ([ref]② "桥内会话态"): `allow_session` remembers a per-CAPABILITY grant keyed by
+ * `[owner, sessionId, category]` — a LATER ask in that (owner, session) whose tool maps to the SAME category
+ * auto-allows WITHOUT a card (CC 207: "Yes, allow all edits during this session") only through the FOUR-WAY
+ * conjunction at the short-circuit (see `ask`): {@link standingAnswerHome} over the ask's three facts
+ * (NOT governance-forced [ref] 件7/[ref], NOT `requiresRealApproval` [ref], NOT `mandated` S-660 — the SAME
+ * predicate decides whether an `allow_session` answer may MINT a grant, see `finishRespond`) ∧ a truthy sessionId ∧
+ * the grant itself ∧ `sessionGrantUncontestedByRow` (the durable row must not contradict the local peek). The category collapses the
+ * fs-WRITE tool family (Write/Edit/NotebookEdit, canonical space) into ONE bucket `"fs-write"`; any OTHER tool is
+ * its OWN bucket `"tool:<canonical>"`. 🔴 A `allow_session` on a NON-fs-write ask (an irreversible-Bash safety ask,
+ * an ask-list rule on another tool) therefore unlocks ONLY that same tool for the session — it must NEVER unlock the
+ * fs-write family (the "approve a cheap ask once → all future Write/Edit auto-allowed" scope widening, 三路复审 A 组 修2).
+ * The key is scoped to the VERIFIED owner too, so a session id shared across principals cannot inherit another's
+ * grant. This is the cheapest mid-task implementation; a mode SWITCH (default → acceptEdits) still goes through the
+ * shell's intent on the next task ([ref] table).
+ *
+ * 🔒 FAIL-CLOSED everywhere (the inverse of the question lane — an unanswered QUESTION never blocks the run: since
+ * [ref] the coordinator reports `unavailable` and CORE decides the landing, which depends on WHEN the human became
+ * unreachable — at policy time the durable gate says `ask` and the leg parks; once the tool is already running core is
+ * past `suspendAsk`, so it continues on `declined_unavailable`; an unanswered APPROVAL must NOT let the write
+ * proceed): TTL expiry and client disconnect ([ref] `parkOpenAsksForTask` → `forceParkNow`) land on the ONE
+ * unattended-outcome former ({@link ToolApprovalCoordinator.unattendedOutcome}, [ref] R-13) — park route
+ * ("unavailable" ⇒ core durable-parks) by default, a DEPLOYMENT-POLICY refusal (`{allow:false, settledBy:"policy",
+ * reason}` ⇒ core settles `policy_refused`; S-689 — never a bare `false`, which core reads as a PERSON's refusal)
+ * ONLY where the deployment declared `UNATTENDED_APPROVAL_POLICY=deny`; a run ABORT (task cancel → `runCancel`)
+ * still resolves `false` — the row goes VOID, there is nothing left to redeem. Since [ref] G1 (core 1.295
+ * OnAsk 三值化) the "no reachable human" class returns
+ * "unavailable" instead of false — no ALS context AND no bound-closure broker hit(1.258 起 bg/嵌套子代经
+ * spec.onAsk 的 bound 闭包 + streams broker 直达宿主活流,「无 ctx」只剩 durable-submit/headless resume
+ * 残余腿)and emit failure
+ * (card never delivered, and only when this catch is the first settler — a human verdict that raced in during the
+ * await keeps its boolean) ⇒ "unavailable" → core durable-parks (or fail-closed denies without a checkpoint). core's
+ * `resolveAsk` maps false to a deny WITH the ask message, so the model can re-route (deny + continue turn, [ref]⑤).
+ * Owner gate on respond = the VERIFIED principal (gatedPrincipal at the HTTP layer), 404 without an existence oracle
+ * — same posture as question/elicit. The frame's model-authored surfaces (message + args) are secret-REDACTED
+ * before they are streamed; the SIZE bound is per-surface: args ride a byte cap (`MAX_APPROVAL_ARGS_BYTES`,
+ * over-cap ⇒ `argsOmitted`), while the legacy frame's `message` is redacted but NOT length-capped — the char
+ * cap (`MAX_MESSAGE`, approval-card.ts `clip`) lives on the card/`approval_request` projection only (same
+ * redact-at-write contract as question; the args are shown to a human,
+ * never re-fed to a model). No throttle (unlike question): an approval breach-default would be a DENY (task failure),
+ * and asks are turn-blocking by construction — the TTL bounds the human-side exposure instead.
+ */
+import { type ParkedGateFace } from "./approval-content-kind.js";
 import { type ApprovalDecidedBy, type HostSettledBy, type RetiredDecisionKeyFacts } from "./host-decision.js";
 import type { IncomingMessage } from "node:http";
-import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundSkillGrants } from "@sema-agent/core";
+import { type AskClass, type AskRequest, type AskOutcome, type PermissionResult, type CheckpointGate, type PendingAction, type PersistedRuleMandate, type ReadRootGrantCandidate, type RuleOffer, type AutoModeFallbackCause, type BoundSkillGrants, type ToolApprovalCard } from "@sema-agent/core";
 import { type CardRulePersisted, type RuleConsentLane } from "./rules-consent.js";
 import { type AllowRuleShadowProjection, type DenialLimitFallback, type RuleOffersAbsence, type ApprovalRequestFrame, type ApprovalRevokeFrame, type RuleEvidenceProjection } from "./approval-card.js";
 import { type ApprovalAskStore, type AskRow } from "./plugins/approval-ask-store-sql.js";
@@ -18,6 +76,11 @@ import { type ApprovalExemptionStore } from "./plugins/approval-exemption-store.
 export declare const APPROVAL_GATE_KINDS: readonly ["human", "irreversible_ask"];
 export type ApprovalGateKind = (typeof APPROVAL_GATE_KINDS)[number];
 export declare function isApprovalGateKind(k: string | undefined): k is ApprovalGateKind;
+/**
+ * 停驻行的到期归 SLA 拒扫腿(deny)而不是作废(expire)?—— **一只谓词**:审批门型 ∧ core `facetOf(gate)` 读作 `A`(问答卡 ⇒ `B`,到期作废;
+ * 无门型 / 非审批门 ⇒ 不归拒扫)。两只店的拒扫选行与作废腿的补集都读这一只(SQL 腿的 `gate_kind IN …` 只是它的粗筛前置,判官仍是 core)。
+ */
+export declare function denySweepOwns(gate: ParkedGateFace | undefined): boolean;
 /** 两方言同形的 SQL IN 片段(值为闭集常量字面,无注入面)。 */
 export declare const APPROVAL_GATE_KINDS_SQL_IN: string;
 /**
@@ -345,7 +408,7 @@ export interface ToolApprovalFrame {
     /**
      * **S-721(core 7.32.0 #1092;ADDITIVE,`"tool_approval"` only)** —— 强制位**站在哪一个词上**:core `PERSISTED_RULE_MANDATES`
      * 六词之一(`operator_always` / `tool_marks` / `probe_mandate` / `probe_unanswered` / `write_protection` /
-     * `write_protection_unresolved`,词义属主在 core)。只在 `mandated: true` 的**整因**是那一个词时在场;另一扇门(治理 / hook /
+     * `target_unresolved`,词义属主在 core)。只在 `mandated: true` 的**整因**是那一个词时在场;另一扇门(治理 / hook /
      * 祖先)或不止一个理由 ⇒ 缺席 —— **缺席从不命名一个词**,也不等于「不强制」(读 `mandated`)。值经 `approval-card.ts` 的
      * `readClosedWordSeat(req, "mandate")` 窄读(闭集筛 = core `isPersistedRuleMandate`,本仓不抄词表;集外词读作缺席 + 计一次)。echo-only:
      * 本仓不按词分支。耐久面同一个词:运维队列行(`parkRowFacts`,park 行孪生座)与 inbox 行(core `CheckpointSummary.mandate`)。
@@ -407,6 +470,15 @@ export interface ToolApprovalFrame {
     /** core 7.43.0 #1353:分类器没给判词的成因词(`error` / `timeout` / `parse_error`;只在类 `classifier_no_ruling` 的卡上)。闭集经 core 的
      *  `readClosedWordSeat(req, "classifierNoRuling")` 窄读(筛 = core `isAutoModeFallbackCause`),集外 ⇒ 缺席 + 计一次。display:本仓不按它裁决。 */
     classifierNoRuling?: AutoModeFallbackCause;
+    /**
+     * **core 7.49.0 #1414(ADDITIVE,`"tool_approval"` only)—— 这一问渲在哪张卡上**:引擎在闸站铸的那一个词(闭集 core `TOOL_APPROVAL_CARDS`:
+     * `file-edit` / `file-write` / `notebook-edit` / `shell` / `fetch` / `plan` / `question` / `generic`),`AskRequest.approvalCard` 逐字过境,经
+     * `approval-content-kind.ts` 的 `readApprovalCard` 闭集窄读(集外 ⇒ 缺席 + 计一次 closed-word-out-of-set)。`question` = 问用户的问题(引擎保留的
+     * 问答工具),不是副作用工具。**本仓不从工具名回推卡**(工具名只作展示):此前按名字铸的 `livePending` 行 / 队列行 `contentKind` 随本键删。
+     * 停驻孪生 = 门的 `gate.approvalCard`(运维队列行顶层同名键,两只店读同一只 `parkedApprovalCard`)。display:本仓不按它裁决。
+     * 🔴 缺席即缺席(宿主自建的 ask / 老引擎),不编 `generic`。⚠️ `card_json` 卡面不带本键(`ApprovalCardSchema` `.strict()`,与 `mandated` 同)。
+     */
+    approvalCard?: ToolApprovalCard;
     /**
      * **[ref]**(core 7.19.0;**ADDITIVE**,`"tool_approval"` only)—— 这只**根外读** ask 的**清障目录**:
      * 把 `dir` 加进本会话的读目录(壳侧既有的 `/add-dir` 口),同一条调用就不会再问。
@@ -675,10 +747,10 @@ export interface LivePendingRow {
      *  子代 ask)上恒等成立。缺席 = 顶层 ask。`fromSubagent` 保留不动(byte-compat:先于本键的消费方仍按
      *  它判别)。 */
     originTaskId?: string;
-    /** [ref]([ref]②):内容问句分型 —— `"content_ask"` 当 `toolName` 为 AskUserQuestion(词属主
-     *  `approval-content-kind.ts`,与 durable 两读面 / core summarize 面同词,OMIT 契约同族)。
-     *  缺席 = 普通工具 ask。展示/分诊分型用,永不参与决议路由。 */
-    contentKind?: "content_ask";
+    /** core 7.49.0 #1414:这一问的卡词 —— 与 {@link frame} 上的 `approvalCard` **同一个值**(行读帧上那一格,不另读一遍),与 durable
+     *  队列行顶层的同名键同层同形(那一面读门的 `gate.approvalCard`)。缺席 = 引擎没给(宿主自建 ask / 老引擎)。展示/分诊用,永不参与决议路由。
+     *  (此前此处是按工具名铸的 `contentKind`,随 #1414 删:卡只有引擎铸的这一个词。) */
+    approvalCard?: ToolApprovalCard;
     /**
      * 🔴 S-454(P1;cli L-397 / 板 [ref]):这只 ask **本来会 emit 的那只活卡帧**。
      *

package/dist/tool-approval.js

@@ -1,4 +1,4 @@
-import { contentKindOf } from "./approval-content-kind.js";
+import { parkedFacetOf, readApprovalCard } from "./approval-content-kind.js";
 import { heldAskOf, liveSettledBy, readDecidedBy, retiredDecisionKeyFacts, DECIDED_BY_OUTSIDE_CLOSED_SET, POLICY_CANNOT_ALLOW_PERSON_ASK } from "./host-decision.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { uuidv7, classifyAsk, foldArbitrationRow, policyCannotAnswer, screenAskClassMembers, MAX_RULE_TEXT_CHARS, READ_ROOT_CANDIDATE_DIR_MAX, parseRuleText, pathConfinableWriteToolNames } from "@sema-agent/core";
@@ -23,6 +23,9 @@ export const APPROVAL_GATE_KINDS = ["human", "irreversible_ask"];
 export function isApprovalGateKind(k) {
     return k !== undefined && APPROVAL_GATE_KINDS.includes(k);
 }
+export function denySweepOwns(gate) {
+    return isApprovalGateKind(typeof gate?.kind === "string" ? gate.kind : undefined) && parkedFacetOf(gate) === "A";
+}
 export const APPROVAL_GATE_KINDS_SQL_IN = `(${APPROVAL_GATE_KINDS.map((k) => `'${k}'`).join(",")})`;
 const MAX_APPROVAL_ARGS_BYTES = 16384;
 const DEFAULT_APPROVAL_TTL_MS = 5 * 60_000;
@@ -1151,6 +1154,7 @@ export class ToolApprovalCoordinator {
         let ruleLaneMaterial = this.buildRuleLaneMaterial(req, origin.owner, governanceForced, origin.sessionId);
         const mandateWord = readClosedWordSeat(req, "mandate");
         const noRulingCause = readClosedWordSeat(req, "classifierNoRuling");
+        const cardWord = readApprovalCard(req.approvalCard);
         const originWord = typeof req.origin === "string" && req.origin.length > 0 ? req.origin : undefined;
         const askClassPair = readAskClassPair(req);
         const frame = {
@@ -1181,6 +1185,7 @@ export class ToolApprovalCoordinator {
             ...(standingAnswerHome(askStandingAnswerFacts(req, governanceForced, deploymentListAsks)) === "none" ? { rememberRefused: true } : {}),
             ...(typeof req.boundGrantDigest === "string" ? { boundGrantDigest: req.boundGrantDigest, ...(req.boundGrants !== undefined ? { boundGrants: req.boundGrants } : {}) } : {}),
             ...(noRulingCause !== undefined ? { classifierNoRuling: noRulingCause } : {}),
+            ...(cardWord !== undefined ? { approvalCard: cardWord } : {}),
             ...(mandateWord !== undefined ? { mandate: mandateWord } : {}),
             ...(originWord !== undefined ? { origin: originWord } : {}),
             ...(askClassPair ?? {}),
@@ -2434,7 +2439,6 @@ export class ToolApprovalCoordinator {
         for (const [id, e] of this.pending) {
             if (scope !== undefined && e.owner !== scope)
                 continue;
-            const contentKind = contentKindOf(e.toolName);
             rows.push({
                 approvalId: id,
                 toolName: e.toolName,
@@ -2448,7 +2452,7 @@ export class ToolApprovalCoordinator {
                 ...(e.mandate !== undefined ? { mandate: e.mandate } : {}),
                 ...(e.origin !== undefined ? { origin: e.origin } : {}),
                 ...(e.originTaskId !== undefined ? { fromSubagent: true, originTaskId: e.originTaskId } : {}),
-                ...(contentKind !== undefined ? { contentKind } : {}),
+                ...(e.frame.approvalCard !== undefined ? { approvalCard: e.frame.approvalCard } : {}),
                 frame: e.frame.approvalId === id ? e.frame : { ...e.frame, approvalId: id },
             });
         }

package/dist/trace/core-keyset-guard.d.ts

@@ -43,7 +43,7 @@ type _GuardBgNotifReverse = AssertAllKeysHandled<Exclude<BgNotifProjected | BgNo
 type RosterProjected = "name" | "agentId" | "sessionId" | "toolUseId" | "owner" | "scope" | "sessionScoped" | "rootSessionId" | "model" | "modelFallback" | "createdAt";
 type _GuardRoster = AssertAllKeysHandled<Exclude<keyof RosterEntry, RosterProjected>>;
 type _GuardRosterReverse = AssertAllKeysHandled<Exclude<RosterProjected, keyof RosterEntry>>;
-type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "allowRuleShadowed" | "probeCause" | "probeReason" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling";
+type AskProjected = "toolName" | "toolCallId" | "args" | "message" | "sourceTaskId" | "fromSubagent" | "sourceAgentName" | "delegation" | "ruleOffers" | "ruleOffersAbsence" | "allowRuleShadowed" | "probeCause" | "probeReason" | "ruleEvidence" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "readRootCandidate" | "mandated" | "mandate" | "askClass" | "classes" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling" | "approvalCard";
 type AskExcluded = "preview" | "principal" | "riskAxes" | "boundInputHash" | "isDelegatedChild" | "hasBidiControls" | "previewWithheld" | "execCwd" | "authoredBy";
 type _GuardAsk = AssertAllKeysHandled<Exclude<keyof AskRequest, AskProjected | AskExcluded>>;
 type _GuardAskReverse = AssertAllKeysHandled<Exclude<AskProjected | AskExcluded, keyof AskRequest>>;
@@ -137,7 +137,7 @@ type _GuardPermissionTraceReverse = AssertAllKeysHandled<Exclude<PermissionTrace
 type AssertNonEmpty<T> = [T] extends [never] ? "EMPTY" : never;
 type _GuardPermissionTraceNonEmpty = AssertAllKeysHandled<AssertNonEmpty<PermissionTraceKind>>;
 type SummaryProjected = "sessionId" | "scope" | "createdAt" | "gateKind" | "severity" | "spentMicroUsd" | "deadline" | "hasBidiControls" | "requiresRealApproval" | "denialLimitFallback" | "origin" | "mandated" | "mandate" | "boundGrantDigest" | "boundGrants" | "classifierNoRuling";
-type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "contentKind" | "restoreMode" | "checkpointId" | "previewWithheld" | "authoredBy";
+type SummaryExcluded = "token" | "toolInput" | "toolName" | "toolCallId" | "preview" | "principal" | "sourceTaskId" | "approvalCard" | "restoreMode" | "checkpointId" | "previewWithheld" | "authoredBy";
 type _GuardInboxSummary = AssertAllKeysHandled<Exclude<keyof CheckpointSummary, SummaryProjected | SummaryExcluded>>;
 type _GuardInboxSummaryReverse = AssertAllKeysHandled<Exclude<SummaryProjected | SummaryExcluded, keyof CheckpointSummary>>;
 type ParkArmKeys = keyof Extract<PendingAction, {
@@ -148,8 +148,8 @@ type ParkArmQueueExcluded = "kind" | "args" | "batchToolCallIds" | "completedCal
 type _GuardParkArmQueue = AssertAllKeysHandled<Exclude<ParkArmKeys, ParkArmQueueProjected | ParkArmQueueExcluded>>;
 type _GuardParkArmQueueReverse = AssertAllKeysHandled<Exclude<ParkArmQueueProjected | ParkArmQueueExcluded, ParkArmKeys>>;
 type _NoDoubleBookParkArmQueue = AssertAllKeysHandled<Extract<ParkArmQueueProjected, ParkArmQueueExcluded>>;
-type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "approvalReach" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "permissionMode" | "taskId" | "signal" | "preemptSignal" | "modelRole" | "enableBlockedReport" | "maxSuspends" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools" | "fileHistory" | "userInvokedSkills" | "outputStyle" | "allowedTools";
-type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence";
+type TaskSpecWired = "objective" | "principal" | "images" | "sessionId" | "requireExistingSession" | "oneShot" | "clientContext" | "resumeAt" | "resumeAtMode" | "model" | "compactionModel" | "thinking" | "systemPrompt" | "appendSystemPrompt" | "promptProvider" | "memory" | "suggestNextPrompts" | "restoreFiles" | "acceptPartialRestore" | "rewindFilesTo" | "tools" | "excludeTools" | "deferTools" | "toolMaterializeStrategy" | "promptProfile" | "toolPolicy" | "onAsk" | "onQuestion" | "hooks" | "durableApproval" | "resourceSuspend" | "resilience" | "finalVerification" | "checkpointStore" | "handsReadOnly" | "memoryPersistenceCapable" | "additionalDirectories" | "additionalReadDirectories" | "enablePlanMode" | "interactiveTools" | "enableFork" | "shellGate" | "approvalReach" | "writeFace" | "mcp" | "a2a" | "skills" | "backgroundScope" | "envFacts" | "limits" | "configOverrides" | "forwardSubagentEvents" | "retainSubagentSessions" | "retainBackgroundProcesses" | "outputSchema" | "outputRetries" | "compaction" | "attachments" | "selfOrchestration" | "getApiKeyAndHeaders" | "interactionPosture" | "agents" | "permissionMode" | "taskId" | "signal" | "preemptSignal" | "maxSuspends" | "skillListingBudgetFraction" | "skillListingMaxDescChars" | "excludeAllTools" | "fileHistory" | "userInvokedSkills" | "outputStyle" | "allowedTools" | "allowTools";
+type TaskSpecUnwired = "actor" | "roles" | "lspManager" | "tracer" | "readFace" | "readDenyPatterns" | "interactiveQuestionFallback" | "alwaysLoadTools" | "restoreGatedTools" | "deferSelfResolve" | "basePolicyForResumeEdit" | "lspDiagnostics" | "streamingToolExecution" | "toolResultThresholdChars" | "peerPresence" | "writeProtectedAdditions" | "complianceAdditionalDenies" | "modelRole" | "enableBlockedReport";
 type _GuardTaskSpec = AssertAllKeysHandled<Exclude<keyof TaskSpec, TaskSpecWired | TaskSpecUnwired>>;
 type _GuardTaskSpecReverse = AssertAllKeysHandled<Exclude<TaskSpecWired | TaskSpecUnwired, keyof TaskSpec>>;
 type TaskResultForwarded = "taskId" | "runId" | "sessionId" | "terminal" | "model" | "effectiveReasoning" | "result" | "salvagedOutput" | "remoteEnvFailures" | "apiFailure" | "retryAfterMs" | "degraded" | "structuredOutput" | "rewindNotes" | "haltedOnUserRejection" | "haltedByUser" | "strandedHumanAnswers" | "pendingApproval" | "approvalWaitedMs" | "effectiveReadFace" | "effectiveReadDenyPatterns" | "effectiveWriteFace" | "effectiveMemoryScopes" | "stats" | "editedFiles" | "responseModel" | "compaction";

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;
@@ -62,6 +62,31 @@ export interface EngineNoticeWireRow {
  *  · 其余(function / symbol / bigint / undefined)⇒ 丢键(JSON 不可承载或语义不明)。
  */
 export declare function sanitizeNoticeDetail(detail: Record<string, unknown> | undefined): Record<string, unknown>;
+/**
+ * `engine_notice` 载荷构造器(三条终点腿同源:live SSE / durable 账本 / 未来的任何第四条腿)。
+ *
+ * 与 `trace/project.ts` 的 `*EventData` 族同纪律(白名单挑键、禁 `{...notice}`),但**不住在那个文件里**:
+ * 那一族的入参全是 core `TaskEvent` 的臂(有 `wire-whitelist-exhaustiveness` 的臂集编译门看着),
+ * 而 `EngineNotice` 不是 `TaskEvent` —— 混进去会让那道门的语义变成"两个不同来源的联合",判别力反而降。
+ */
+/**
+ * 通告 `detail` 里**规则文本**的坐标:码 → `{ 数组键, 元素上的文本键 }`。新码的 detail 带规则文本时在这里登记(一张表,不在各处写分支)。
+ * 规则文本是人或模型写下的条目原串,最可能夹着凭据;这张表管的只有一件事 —— 它离开进程的每一条路都先过 {@link redactListEntry}。
+ * 导出是给钉用的:`test/notice-entry-presentation.test.ts` 的「日志行 = 会话流行」一组逐码迭代这张表,新登记的码自动入组。
+ */
+export declare const RULE_TEXT_DETAIL_FIELDS: Readonly<Record<string, {
+    readonly array: string;
+    readonly field: string;
+}>>;
+/**
+ * 通告 `message`(引擎铸的人读句)的脱敏 —— **唯一一只**:会话流行(经 {@link engineNoticeEventData},之后截到 {@link NOTICE_TEXT_MAX})与运维日志行
+ * (`boot/runner-deps.ts` 的转发席,不截)同调它 ⇒ 同一条通告的 `message` 在两条出路上逐字节同(会话流行另有 {@link NOTICE_TEXT_MAX} 字上限,
+ * 超长的那一截只在日志行上)。对**全部**通告码一视同仁,不按码分支:带规则文本的码(本表 {@link RULE_TEXT_DETAIL_FIELDS} 的登记码)的 `message` 里
+ * 条目以引擎的转义形出现,和别的自由文本一样只在这一只上被认凭据;认出凭据形才改字节,没有凭据形的句子逐字节原样。
+ * ⚠️ 已知边界(既有,两条出路同,见 CHANGELOG 7.120.0「条目」条):引擎把条目里的零宽字符写成 `\uXXXX` 转义,夹零宽字符的凭据在转义后的句子里认不出;
+ * 句子归引擎,本仓不改写 —— 机读位 `detail` 里的规则文本是在原串上认的({@link redactNoticeRuleText}),不受此限。
+ */
+export declare function redactNoticeMessage(message: unknown): string;
 /**
  * 通告 `detail` 里的**规则文本**换成条目的脱敏原值({@link redactListEntry}:凭据换记号,不加引号、不转义 —— 机读位不是显示面,显示形只属于人读句)。
  * 会话流行(经 {@link engineNoticeEventData},之后照常过 {@link sanitizeNoticeDetail})与运维日志行(`boot/runner-deps.ts` 的转发席,其余字段逐字)

package/dist/trace/engine-notice-wire.js

@@ -37,6 +37,8 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "permission.rule_row_dropped",
     "permission.allowed_tool_not_granted",
     "task.tool_turn_incomplete",
+    "route.finish_reason_unknown",
+    "route.stream_end_ignored",
 ];
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 export function isEngineNoticeWireCode(code) {
@@ -93,10 +95,13 @@ function sanitizeValue(v, depth) {
     }
     return undefined;
 }
-const RULE_TEXT_DETAIL_FIELDS = {
+export const RULE_TEXT_DETAIL_FIELDS = {
     "permission.allowed_tool_not_granted": { array: "entries", field: "entry" },
     "permission.rule_row_dropped": { array: "rows", field: "rule" },
 };
+export function redactNoticeMessage(message) {
+    return redactSecrets(String(message));
+}
 export function redactNoticeRuleText(code, detail) {
     const at = Object.hasOwn(RULE_TEXT_DETAIL_FIELDS, code) ? RULE_TEXT_DETAIL_FIELDS[code] : undefined;
     if (at === undefined || detail === undefined)
@@ -113,7 +118,7 @@ export function redactNoticeRuleText(code, detail) {
 export function engineNoticeEventData(notice, sessionId, nowMs) {
     return {
         code: notice.code,
-        message: redactSecrets(String(notice.message)).slice(0, NOTICE_TEXT_MAX),
+        message: redactNoticeMessage(notice.message).slice(0, NOTICE_TEXT_MAX),
         detail: sanitizeNoticeDetail(redactNoticeRuleText(notice.code, notice.detail)),
         sessionId,
         ts: nowMs,

package/dist/trace/project.d.ts

@@ -150,6 +150,7 @@ export declare function toolStartEventData(ev: {
     toolName: string;
     label?: string;
     args: unknown;
+    recovered?: true;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -190,8 +191,8 @@ export declare function screenedGate(v: unknown): GateOutcome | undefined;
  * ## 读腿与写腿现在是**同一只**筛(7.74.0 起,零双读)
  * 7.72.0–7.73.0 期间读腿多一步「认本服务上一版写下的退役词旧拼法」(`unresolvable` → `ancestor_marked`),
  * 那是一条**长期双读臂**:同一份字节在写腿与读腿上有两种理解,而且没有到期日。7.74.0 把它换成**一次性
- * 迁移**(启动期把存量字节原地改名,`plugins/one-time-migrations.ts` 的 M3;窗口见 `plugins/one-time-migrations.ts` 登记表)⇒ 读腿退回写腿那只
- * 严格筛子,集外词一律整条 withhold + 计数,不再有第二种读法。
+ * 迁移**(启动期把存量字节原地改名;窗关后已删码)⇒ 读腿退回写腿那只严格筛子,集外词一律整条 withhold + 计数,
+ * 不再有第二种读法 —— 残留旧拼法的字节(local 车道引擎 File 店里不可改写的已决行)同走这一只筛,响亮不静默。
  *
  * ## 与写腿脱敏汇点的关系(别再走回头路)
  * 写腿的对偶是 `redactLedgerEventData`(三孪生 store 的 `appendEvent` 落库前),它管的是脱敏、不是判形;
@@ -281,6 +282,8 @@ export declare function toolEndEventData(ev: {
     delivered?: McpDelivered;
     gate?: GateOutcome;
     gatedCallId?: string;
+    wireName?: string;
+    notExecuted?: true;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -837,6 +840,8 @@ export declare function brainStatusEventData(ev: {
     errorStatus?: number;
     elapsedMs?: number;
     timeoutMs?: number;
+    providerCondition?: string;
+    providerConditionSource?: string;
     eventId?: string;
     parentToolCallId?: string;
 }): Record<string, unknown>;
@@ -891,7 +896,7 @@ export interface TraceTurn {
      *  🔴 **S-213⑥:五个子键**全部按同族 OMIT 契约走 —— 引擎那一侧报了才铸,没报就**缺席**,恒不折 `0`。
      *  `in`/`out` 此前是必填座、缺一键时写 `?? 0`:读端拿到的 `in:0` 与「这一轮真的零输入」逐字节同形,
      *  于是一次 usage 半缺(某些 provider 只回 output 侧)在面板上显示成一个可核对的真数字。
-     *  0 是一个数,未知不是 —— 两者同形正是本仓 `boundCallId`/`gateKind`/`contentKind` 一族一直在防的事。
+     *  0 是一个数,未知不是 —— 两者同形正是本仓 `boundCallId`/`gateKind`/`approvalCard` 一族一直在防的事。
      *  ⚠️ wire 面(`GET /v1/tasks/:id/turns` 与 trace SSE 的 `turn` 事件)因此可能给出**只有一侧**的
      *  `tokens`;做算术的消费端要按「键可能缺席」读(`tokens` 整只可缺席早就是契约的一部分)。
      *  🔴 **7.74.0 / core 7.17.0([ref])**:引擎自陈 `usageMissing` 的一轮(usage 是六个 0 的占位)⇒ 整只缺席 ——

package/dist/trace/project.js

@@ -91,7 +91,14 @@ export function modelTextEventData(ev) {
     return { text: ev.text, ...(ev.eventId ? { eventId: ev.eventId } : {}) };
 }
 export function toolStartEventData(ev) {
-    return { toolCallId: ev.toolCallId, toolName: ev.toolName, ...(ev.label !== undefined ? { label: ev.label } : {}), args: redactDeep(ev.args), ...identityFields(ev) };
+    return {
+        toolCallId: ev.toolCallId,
+        toolName: ev.toolName,
+        ...(ev.label !== undefined ? { label: ev.label } : {}),
+        args: redactDeep(ev.args),
+        ...(ev.recovered === true ? { recovered: true } : {}),
+        ...identityFields(ev),
+    };
 }
 const SETTLEMENT_NOTE_MAX = 500;
 export function screenedGate(v) {
@@ -274,6 +281,8 @@ export function toolEndEventData(ev) {
         ...(typeof ev.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(ev.delivered) ? { delivered: ev.delivered } : {}),
         ...(gate !== undefined ? { gate } : {}),
         ...(typeof ev.gatedCallId === "string" && ev.gatedCallId !== "" ? { gatedCallId: ev.gatedCallId } : {}),
+        ...(typeof ev.wireName === "string" && ev.wireName !== "" ? { wireName: ev.wireName } : {}),
+        ...(ev.notExecuted === true ? { notExecuted: true } : {}),
         ...identityFields(ev),
     };
 }
@@ -724,6 +733,8 @@ export function brainStatusEventData(ev) {
         ...(num(ev.timeoutMs) ? { timeoutMs: ev.timeoutMs } : {}),
         ...(num(ev.errorStatus) ? { errorStatus: ev.errorStatus } : {}),
         ...(typeof ev.errClass === "string" && ev.errClass.length > 0 ? { errClass: ev.errClass } : {}),
+        ...(typeof ev.providerCondition === "string" && ev.providerCondition.length > 0 ? { providerCondition: ev.providerCondition } : {}),
+        ...(typeof ev.providerConditionSource === "string" && ev.providerConditionSource.length > 0 ? { providerConditionSource: ev.providerConditionSource } : {}),
         ...identityFields(ev),
     };
 }
@@ -839,6 +850,7 @@ export function toolCallFieldsOf(d) {
         name: String(d.toolName ?? ""),
         ...(typeof d.label === "string" ? { label: d.label } : {}),
         input: d.args,
+        ...(d.recovered === true ? { recovered: true } : {}),
         ...identityFields(d),
     };
 }
@@ -854,6 +866,8 @@ export function toolResultFieldsOf(d) {
         ...(typeof d.delivered === "string" && MCP_DELIVERY_VERDICTS.includes(d.delivered) ? { delivered: d.delivered } : {}),
         ...(gate !== undefined ? { gate } : {}),
         ...(typeof d.gatedCallId === "string" && d.gatedCallId !== "" ? { gatedCallId: d.gatedCallId } : {}),
+        ...(typeof d.wireName === "string" && d.wireName !== "" ? { wireName: d.wireName } : {}),
+        ...(d.notExecuted === true ? { notExecuted: true } : {}),
         ...identityFields(d),
     };
 }

package/dist/trace/self-minted-wire.d.ts

@@ -365,8 +365,9 @@ export declare const SELF_MINTED_WIRE: {
         };
     };
     /**
-     * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)本版新上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
-     * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409。行为由 `test/submit-idempotency-one-ledger.test.ts` 钉。
+     * 提交幂等(契约 §0.7:幂等 = 资源行上的唯一键)上 wire 的面:同步腿读行重放体的 `replay` 键、两只按键读的读口、
+     * `Idempotency-Key` 命中一条读不到 / 不是这次 taskId 所指的行时的 409(7.125.0);同键异体(绑定那一行的请求体与这次不同)的 409(7.126.0)。
+     * 行为由 `test/submit-idempotency-one-ledger.test.ts` 钉。
      */
     readonly submitIdempotency: {
         readonly at: "提交幂等(<端点>#<面> → 应答状态)";
@@ -387,6 +388,107 @@ export declare const SELF_MINTED_WIRE: {
                 readonly attr: 409;
                 readonly since: "7.125.0";
             };
+            readonly "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": {
+                readonly attr: 409;
+                readonly since: "7.126.0";
+            };
+        };
+    };
+    /**
+     * 内建场景名(`GET /v1/capabilities.scenarios` 的内建成员,`GET /v1/capabilities/scenarios/:name` 的内建详情)。7.126.0 `discuss` 退出 wire
+     * (core 7.49.0 删团队讨论运行时;请求体再传它 = 400 `scenario_unknown`)。钉 test/team-orchestration-retired.test.ts。
+     */
+    readonly builtinScenario: {
+        readonly at: "GET /v1/capabilities#scenarios[] 内建成员";
+        readonly members: {
+            code: {
+                attr: string;
+                since: string;
+            };
+            default: {
+                attr: string;
+                since: string;
+            };
+            "code-review": {
+                attr: string;
+                since: string;
+            };
+            scan: {
+                attr: string;
+                since: string;
+            };
+        };
+        readonly retired: {
+            readonly discuss: {
+                readonly attr: "-";
+                readonly since: "7.28.0";
+                readonly until: "7.126.0";
+            };
+        };
+    };
+    /**
+     * 提交体的场景透传键(受理门放行;`ScenarioRequest` 索引签名读)。7.126.0 只喂 discuss 场景与 code-review council 腿的四键退出 wire
+     * (受理门对它们答未知键 400;同批退出的具名键 `council` / `debate` 住在 `TaskRequestBody` 上,不在本集 —— 具名提交面键本清单今天看不见)。
+     */
+    readonly scenarioBodyKey: {
+        readonly at: "POST /v1/tasks|/v1/tasks/stream|/v1/runs 体的场景透传键";
+        readonly members: {
+            repo: {
+                attr: string;
+                since: string;
+            };
+        };
+        readonly retired: {
+            readonly businessContext: {
+                readonly attr: "-";
+                readonly since: "1.214.2";
+                readonly until: "7.126.0";
+            };
+            readonly lenses: {
+                readonly attr: "-";
+                readonly since: "1.214.2";
+                readonly until: "7.126.0";
+            };
+            readonly rounds: {
+                readonly attr: "-";
+                readonly since: "1.214.2";
+                readonly until: "7.126.0";
+            };
+            readonly team: {
+                readonly attr: "-";
+                readonly since: "1.214.2";
+                readonly until: "7.126.0";
+            };
+        };
+    };
+    /**
+     * `GET /v1/models` 应答体的顶层键(闭集;`src/http/routes/capabilities.ts` 的 `sendJson(res, 200, {…})` 字面量)。属性 = 在场律:`always` 恒在场(零条也出键),`present-iff` 条件成立才出键
+     * (缺席不下「无」的结论——也可能是更早的 server)。`since` = 该键上 wire 的起始版本(`models` / `default` / `defaultModel` 在本仓首个 tag 就有)。
+     * 7.126.0:`candidateRejected`(S-1457,present-iff:当前生效的配置是因判官整拒了最近一份候选而回落的那一份;契约 §A.1d)。
+     */
+    readonly modelsResponseKey: {
+        readonly at: "GET /v1/models 应答体顶层键(<键> → 在场律)";
+        readonly members: {
+            readonly models: {
+                readonly attr: "always";
+                readonly since: "1.214.2";
+            };
+            readonly default: {
+                readonly attr: "always";
+                readonly since: "1.214.2";
+            };
+            readonly defaultModel: {
+                readonly attr: "always";
+                readonly since: "1.214.2";
+            };
+            readonly droppedEntries: {
+                readonly attr: "always";
+                readonly since: "7.123.0";
+            };
+            readonly candidateRejected: {
+                readonly attr: "present-iff";
+                readonly since: "7.126.0";
+            };
         };
     };
     /** 本仓在出口对 core 值做的变换(值变、键不变)。 */

package/dist/trace/self-minted-wire.js

@@ -134,6 +134,41 @@ export const SELF_MINTED_WIRE = {
             "GET /v1/runs?idempotencyKey": { attr: 200, since: "7.125.0" },
             "GET /v1/leader?idempotencyKey": { attr: 200, since: "7.125.0" },
             "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.run_exists": { attr: 409, since: "7.125.0" },
+            "POST /v1/runs|/v1/tasks Idempotency-Key#conflict.idempotency_payload_mismatch": { attr: 409, since: "7.126.0" },
+        },
+    },
+    builtinScenario: {
+        at: "GET /v1/capabilities#scenarios[] 内建成员",
+        members: {
+            code: { attr: "-", since: "1.214.2" },
+            default: { attr: "-", since: "1.214.2" },
+            "code-review": { attr: "-", since: "1.214.2" },
+            scan: { attr: "-", since: "1.214.2" },
+        },
+        retired: {
+            discuss: { attr: "-", since: "7.28.0", until: "7.126.0" },
+        },
+    },
+    scenarioBodyKey: {
+        at: "POST /v1/tasks|/v1/tasks/stream|/v1/runs 体的场景透传键",
+        members: {
+            repo: { attr: "-", since: "1.214.2" },
+        },
+        retired: {
+            businessContext: { attr: "-", since: "1.214.2", until: "7.126.0" },
+            lenses: { attr: "-", since: "1.214.2", until: "7.126.0" },
+            rounds: { attr: "-", since: "1.214.2", until: "7.126.0" },
+            team: { attr: "-", since: "1.214.2", until: "7.126.0" },
+        },
+    },
+    modelsResponseKey: {
+        at: "GET /v1/models 应答体顶层键(<键> → 在场律)",
+        members: {
+            models: { attr: "always", since: "1.214.2" },
+            default: { attr: "always", since: "1.214.2" },
+            defaultModel: { attr: "always", since: "1.214.2" },
+            droppedEntries: { attr: "always", since: "7.123.0" },
+            candidateRejected: { attr: "present-iff", since: "7.126.0" },
         },
     },
     wireValueRule: {

package/dist/web-admin-client/apply-effective.d.ts

@@ -62,9 +62,9 @@ export declare function applyEffective(config: ServiceConfig, eff: EffectiveConf
 /**
  * 🔴 **模型面组由哪些 effective 域组成 —— 唯一定义**(7.101.0 验修轮 V1 / codex V-1;OA 验修轮 V2 的以点改面)。
  *
- * collab 在组里:模板带模型引用,新模板配旧目录(或旧模板配新目录)就是一次混代发布。此前「模型面」散在三处各写一份 ——
- * 世代账的键表只列 models 域的落点、stage 的 collab 闸按「模型面没被拒」ad hoc 门住、boot 按组回落 LKG 的合成只换
- * `models` 域 —— 最后那份漏了 collab,于是 boot 回落时 LKG 的目录配上了被拒候选的模板(与 refresh 腿同态不同答)。
+ * 组里今天只有 `models` 一个域(collab 域曾因模板带模型引用而同组;7.49.0 起本仓不执行 collab 模板,它出组 —— 见
+ * {@link collabTemplatesNotExecuted})。此前「模型面」散在三处各写一份(世代账键表 / stage 闸 / boot 按组回落 LKG 的合成),
+ * 收成本表一处定义;再有域入组只改这一行,下面的映射型逼着补落点。
  * 读者一律从这里派生,禁手抄:
  *  · stage:{@link stageModelPlane} 产出组内**每个**域的产物({@link ModelPlaneStages} 按本表映射),组被拒 ⇒ 一个域都没有;
  *  · 世代账:整组拒的 `keys` 与落地的 `applied` 都由 {@link MODEL_PLANE_SURFACES} 按本表派生({@link modelPlaneGroupReport});
@@ -72,14 +72,14 @@ export declare function applyEffective(config: ServiceConfig, eff: EffectiveConf
  * (与 `config.ts` 的配置组视图 `MODEL_PLANE_GROUP_KEYS` 不是一回事:那是 `ServiceConfig` 的分节视图;这里是「中心热应用的
  * 模型面这一组包含哪些 effective 域」。)
  */
-export declare const MODEL_PLANE_DOMAINS: readonly ["models", "collab"];
+export declare const MODEL_PLANE_DOMAINS: readonly ["models"];
 export type ModelPlaneDomain = (typeof MODEL_PLANE_DOMAINS)[number];
-/** 模型面组在 effective 上的那一切片(组内各域;`models` 必在、`collab` 可缺席 —— 与 `EffectiveConfig` 同形)。 */
+/** 模型面组在 effective 上的那一切片(组内各域,与 `EffectiveConfig` 同形)。 */
 export type ModelPlaneOf = Pick<EffectiveConfig, ModelPlaneDomain>;
 /**
  * `target` 换上 `source` 的**整个模型面**(组内每个域都取 `source` 的;`source` 缺席的域在结果里同样缺席,不留 `target` 的),
  * 其余域原样是 `target` 的。boot 按组回落 LKG 的合成文档(回落 apply 的入参)走这一只 —— 禁在调用点
- * 手写 `{ ...x, models, collab }`(漏一个域正是 V1 的病形)。纯数据:不改两个入参。
+ * 手写 `{ ...x, models }`(组再加域时漏一个正是 V1 的病形)。纯数据:不改两个入参。
  */
 export declare function withModelPlaneOf<E extends EffectiveConfig>(target: E, source: ModelPlaneOf): E;
 /**
@@ -104,6 +104,12 @@ export declare const PLANE_REFUSAL_INVARIANT_OF: {
     readonly "config.model_route_endpoint_missing": "model-route-endpoint";
     readonly "config.gateway_fallback_without_primary": "model-route-endpoint";
 };
+/**
+ * collab 域 = 中心的多成员讨论模板。**本仓不执行它们**:唯一的执行体是引擎的团队讨论脚本,core 7.49.0 已删(本仓不留第二份
+ * 团队编排)。这一只是本仓对该域的**唯一读法**:已发布且启用的模板 id(`enabled === false` 是运营态关闭,不算发布)——
+ * 真 apply 的 `web_admin_collab_not_executed` warn 与 dry-run 行的 `collab.notExecuted` 都读它。
+ */
+export declare function collabTemplatesNotExecuted(eff: Pick<EffectiveConfig, "collab">): string[];
 /**
  * DESIGN-278 §5 S2([ref])—— center 这份 effective **当前在管**哪些 `ServiceConfig` 键(配置目录端点
  * `GET /v1/config/catalog` 判 `effectiveLane` 的 center 半场)。
@@ -127,7 +133,7 @@ export declare function applyRuntimeHot(config: ServiceConfig, gov: EffectiveCon
 /**
  * Read-only comparison (`WEB_ADMIN_ENV.dryRun`): log what the web-admin config WOULD change vs the current
  * (env-derived) config, WITHOUT applying it. The safe-rollout step the web-admin recommends — verify
- * the center's models/roles/collab match (or intentionally differ from) the env baseline before going live.
+ * the center's models/roles match (or intentionally differ from) the env baseline before going live.
  */
 export declare function logEffectiveDiff(config: ServiceConfig, eff: EffectiveConfig, logger?: Logger): void;
 //# sourceMappingURL=apply-effective.d.ts.map