@sema-agent/server 7.125.1 → 7.127.0

package/dist/boot/stage-10-http-server.d.ts

@@ -76,7 +76,6 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     fleetBus: import("../fleet/fleet-bus.js").FleetEventBus;
     governanceSeams: import("./governance-seams.js").GovernanceSeams;
     handslessRunner: import("@sema-agent/core").Runner;
-    handslessSubRunner: import("@sema-agent/core").Runner;
     hookAgent: import("../hooks/hook-runner.js").HookLlmCall;
     hookAgentRunner: import("@sema-agent/core").Runner;
     hookLlm: import("../hooks/hook-runner.js").HookLlmCall;
@@ -123,12 +122,11 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
     fenceSessionOwner: (sid: string, owner: string | null) => void;
     lspManager: import("@sema-agent/core").NodeLspManager | import("../lsp/manager.js").E2bLspManager | undefined;
-    noteSessionIncarnation: (sid: string, incarnation: string | undefined) => void;
+    spaceReclaimer: import("../workspace-space.js").SpaceReclaimer | undefined;
     perSessionCwd: Map<string, string>;
     perTaskImage: import("../per-task-image.js").PerTaskImageRegistry;
     sendUserFileTaskEnvs: import("../capabilities/sandbox-file-send.js").TaskEnvRegistry | undefined;
     sessionEnvSelection: import("../capabilities/select-environment-tool.js").SessionEnvironmentSelection;
-    sessionIncarnationOf: (sid: string) => string | undefined;
     setSessionCwd: (sid: string, cwd: string) => void;
     setSessionInheritEnv: (sid: string, policy: import("../request-value-closure.js").TaskInheritEnv | undefined) => void;
     setSessionShellEnv: (sid: string, env: Record<string, string>) => void;
@@ -177,6 +175,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     backend: import("../plugins/store-backend.js").StoreBackend | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;
     breakerState: import("../plugins/breaker-state-sql.js").TiDBBreakerState | import("../plugins/breaker-state-sql.js").PgBreakerState | undefined;
+    engineDataRoot: string;
     instanceId: string;
     mailboxRecipientLifecycle: import("../plugins/mailbox-recipient-lifecycle.js").MailboxRecipientLifecycle | undefined;
     mailboxStore: import("@sema-agent/core").MailboxStore | undefined;

package/dist/boot/stage-10-http-server.js

@@ -29,7 +29,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, noteSessionIncarnation, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -177,6 +177,7 @@ export async function runStage10(ctx) {
         configApplyState: () => webAdmin.configApplyState(),
         centerCredentialState: () => webAdmin.centerCredentialState(),
         modelRefusalsState: () => webAdmin.modelRefusalsState(),
+        candidateRejectionState: () => webAdmin.candidateRejectionState(),
         configHandoffState: () => webAdmin.configHandoffState(),
         mcpRevocations,
         mcpRevocationState: () => webAdmin.mcpRevocationState(),
@@ -199,7 +200,6 @@ export async function runStage10(ctx) {
         getCenterPrompts: () => webAdmin.getCenterPrompts(),
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
-        noteSessionIncarnation,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore,
         checkpointStore, deploymentHooks, imageIndex, perTaskImage,

package/dist/boot/stores.d.ts

@@ -20,6 +20,7 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
         backend: MemoryBackend;
         root: string;
     } | undefined;
+    engineDataRoot: string;
     memorySyncCursors: MemorySyncStore | undefined;
     rosterStore: import("@sema-agent/core").RosterStore | undefined;
     backgroundAgentStore: import("@sema-agent/core").BackgroundAgentStore | undefined;

package/dist/boot/stores.js

@@ -119,6 +119,7 @@ export async function openStores(ctx) {
     if (config.dbBackend === "local" && backend)
         config.sessionBackend = "tidb";
     let memoryEngine;
+    const engineDataRoot = memoryEngineRootFor(config, localRoot);
     let memorySyncCursors;
     let vectorMode;
     if (config.memoryEngineBackend !== "file" && config.memoryEngineEnabled) {
@@ -169,7 +170,7 @@ export async function openStores(ctx) {
                 ...(embedder !== undefined ? { embedder } : {}),
             });
             vectorMode = pgMem.vectorMode;
-            memoryEngine = { backend: pgMem, root: memoryEngineRootFor(config, localRoot) };
+            memoryEngine = { backend: pgMem, root: engineDataRoot };
         }
         else {
             const pool = backend?.mysqlPool();
@@ -181,7 +182,7 @@ export async function openStores(ctx) {
             memorySyncCursors = new TiDBMemorySyncStore(pool);
             const tidbMem = new TiDBMemoryEngineBackend(pool, { history: countedHistorySink(new TiDBMemoryHistoryStore(pool)) });
             vectorMode = tidbMem.vectorMode;
-            memoryEngine = { backend: tidbMem, root: memoryEngineRootFor(config, localRoot) };
+            memoryEngine = { backend: tidbMem, root: engineDataRoot };
         }
         logger.info("memory_engine_enabled", {
             enabled: true,
@@ -447,7 +448,7 @@ export async function openStores(ctx) {
             .startRefresh()
         : undefined;
     return {
-        backend, storePosture, memoryEngine, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
+        backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
         taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState,
         usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts,
     };

package/dist/boot/web-admin.d.ts

@@ -15,6 +15,7 @@ import type { ConsolidationSeatWatch } from "./memory-consolidation.js";
 import type { DegradeRouteWatch } from "../brain.js";
 import { type EngineRestartSignal } from "../web-admin-client/facade.js";
 import { type ConfigHandoff } from "../fleet/engine-signal.js";
+import { type CandidateRejection } from "../web-admin-client/candidate-gate.js";
 import { type ConfigApplyLedgerView } from "../web-admin-client/apply-ledger.js";
 import type { CenterPullView } from "../web-admin-client/pull-state.js";
 import type { LimitSync } from "./limit-sync.js";
@@ -117,6 +118,10 @@ export interface WebAdminRuntime {
      *  名 → 码 + 组拒码)。描述**最近一次被判的那份中心候选目录**(每次候选 apply 的报告 `ApplyReport.modelRefusals` 投影;组拒时就是被拒
      *  的那份 —— 引擎自己的拒因表不换代)。没有可报的拒 / 没有配置管道 / 还没判过候选 ⇒ `undefined`(键缺席)。值变了 ⇒ 通知自报订阅者。 */
     modelRefusalsState(): ModelRefusalsSignal | undefined;
+    /** S-1457:`GET /v1/models.candidateRejected` 的取值口 —— 最近一次候选被判官整拒的结论(`candidateRejection` 座;域集就是判官交出的 `rejected.domains`)。
+     *  present-iff 当前生效的配置是因判官整拒了最近一份候选而回落的那一份:后来的候选被判 clean 即撤下;还没判过候选 / 没有配置管道 ⇒ `undefined`(键缺席)。
+     *  dry-run 姿势(`webAdmin.dryRun`,compare-only)恒 `undefined`:候选从不被应用,生效配置恒是 env,拒判是预演读数(日志行照响),不是配置没换的原因。 */
+    candidateRejectionState(): CandidateRejection | undefined;
     /** [ref] 世代账:/health 的 target/applied/失败持续时长三键 + 诊断端点的 configApply 段(同一份读数)。
      *  `undefined` = 本部署没有配置管道(纯 env worker)⇒ 两个读面的形状**逐字不变**(additive 纪律)。 */
     configApplyState(): ConfigApplyLedgerView | undefined;

package/dist/boot/web-admin.js

@@ -23,7 +23,7 @@ import { applyEffective, applyCenterReadFace, mutateInPlace, logEffectiveDiff, a
 import { buildConfigHandoff, buildRestartSignal, configHandoffMissing } from "../fleet/engine-signal.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../web-admin-client/mcp-revocation.js";
 import { buildUnreadConfigFileFields } from "../web-admin-client/read-warnings.js";
-import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, judgeConfigCandidate } from "../web-admin-client/candidate-gate.js";
+import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, candidateRejectionOf, judgeConfigCandidate } from "../web-admin-client/candidate-gate.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
 function lkgReadNote(scope) {
@@ -31,7 +31,7 @@ function lkgReadNote(scope) {
         case "whole":
             return "booting from the persisted last-known-good (all restart-to-apply faces included) — the live pull continues in the background and reconciles on arrival";
         case "model-plane":
-            return "the live candidate's model plane was refused at boot — the persisted last-known-good supplies the model plane only (catalog and the collab templates that reference it); every other group and every restart-to-apply face stays the live candidate's";
+            return "the live candidate's model plane was refused at boot — the persisted last-known-good supplies the model plane only (the catalog and what rides with it); every other group and every restart-to-apply face stays the live candidate's";
     }
 }
 export async function createWebAdminRuntime(ctx) {
@@ -39,7 +39,14 @@ export async function createWebAdminRuntime(ctx) {
     let ccEtag;
     let effective;
     let latestEffective;
-    let lastRejectedCandidate;
+    let candidateRejection;
+    let judgedOrdinal = 0;
+    const noteCandidateVerdict = (ordinal, rejection) => {
+        if (ordinal < judgedOrdinal)
+            return;
+        judgedOrdinal = ordinal;
+        candidateRejection = rejection;
+    };
     const applyLedger = createConfigApplyLedger();
     let lastPull = "none";
     let generationOrdinal = 0;
@@ -146,11 +153,16 @@ export async function createWebAdminRuntime(ctx) {
             });
         }
     };
-    const announceCandidateRejected = (r, verdict, leg) => {
+    const rejectionSource = () => {
+        if (configProvider === undefined)
+            throw new Error("config candidate judged without a config provider (no pipeline ⇒ nothing was pulled)");
+        return configProvider.kind;
+    };
+    const announceCandidateRejected = (r, verdict, leg, ordinal) => {
         const domains = verdict.domains.join(",");
-        if (lastRejectedCandidate?.version === r.effective.version && lastRejectedCandidate.domains === domains)
+        if (candidateRejection?.version === r.effective.version && candidateRejection.domains.join(",") === domains)
             return;
-        lastRejectedCandidate = { version: r.effective.version, domains, at: Date.now() };
+        noteCandidateVerdict(ordinal, candidateRejectionOf(r, verdict, rejectionSource(), Date.now()));
         logger.warn("config_candidate_rejected", buildCandidateRejectedFields(r, verdict, leg, { lkgVersion: latestEffective?.version ?? "(env)", ...localDirField }));
     };
     const selfReportListeners = [];
@@ -503,7 +515,7 @@ export async function createWebAdminRuntime(ctx) {
                 hint: rejected && modelsDomainErr
                     ? "config.d/models.json 在场但 models 域判形失败,整份本地候选被拒(真因见本行 domainError)— 模型继续走 env 兜底"
                     : rejected
-                        ? "config.d 里别的域判形失败,整份本地候选被拒(坏域与真因见 config_candidate_rejected)— config.d/models.json 的模型不用,继续走 env 兜底"
+                        ? "config.d 里别的域让整份本地候选被拒(判形失败,或带事实的退役域文档;坏域与真因见 config_candidate_rejected)— config.d/models.json 的模型不用,继续走 env 兜底"
                         : modelsDropped.length > 0 && totalModels === 0
                             ? "config.d/models.json 的条目全部被逐条丢弃(逐条真因见 config_entry_dropped)— 模型继续走 env 兜底"
                             : totalModels > 0
@@ -536,7 +548,7 @@ export async function createWebAdminRuntime(ctx) {
                 if (dryRun) {
                     const dryVerdict = judgeConfigCandidate(r);
                     if (dryVerdict.verdict === "rejected") {
-                        announceCandidateRejected(r, dryVerdict, "boot");
+                        announceCandidateRejected(r, dryVerdict, "boot", generationOrdinal);
                     }
                     else {
                         warnReadNotices(r, "boot");
@@ -550,7 +562,7 @@ export async function createWebAdminRuntime(ctx) {
                         await bootFallBackWhole(`boot candidate rejected: ${bootVerdict.domains.join(",")}`);
                         const rejectedGen = generationOf(r.effective.version);
                         applyLedger.seenTarget(rejectedGen, r.effective.version);
-                        announceCandidateRejected(r, bootVerdict, "boot");
+                        announceCandidateRejected(r, bootVerdict, "boot", rejectedGen);
                         if (configProvider.kind === "local")
                             warnLocalNoModels(r, true);
                     }
@@ -581,7 +593,7 @@ export async function createWebAdminRuntime(ctx) {
                                 applyEffective(config, withModelPlaneOf(r.effective, lkgPlane.effective), logger, { leg: "boot", sealedKeys, generation: bootGen, report: (rep) => (planeReport = rep) });
                                 if (modelPlaneCommitted(planeReport)) {
                                     bootPlaneEff = lkgPlane.effective;
-                                    logger.warn("config_model_plane_from_lkg", { version: r.effective.version, lkgVersion: lkgPlane.effective.version, note: "the live candidate's model plane was refused at boot — serving the LKG's model plane (catalog and the collab templates that reference it) with the live candidate's other groups; the refresh cadence re-judges the candidate" });
+                                    logger.warn("config_model_plane_from_lkg", { version: r.effective.version, lkgVersion: lkgPlane.effective.version, note: "the live candidate's model plane was refused at boot — serving the LKG's model plane (the catalog and what rides with it) with the live candidate's other groups; the refresh cadence re-judges the candidate" });
                                 }
                             }
                         }
@@ -665,6 +677,7 @@ export async function createWebAdminRuntime(ctx) {
         restartState: () => buildRestartSignal(pendingRestart, planeDeferredNoHandoff),
         configHandoffState: () => (configProvider === undefined || configProvider.kind === "local" || !lkgSurvivesRestart ? undefined : buildConfigHandoff(latchHandoff(), handoffMissingSince)),
         modelRefusalsState: () => modelRefusals,
+        candidateRejectionState: () => (cc?.dryRun ? undefined : candidateRejection),
         configApplyState: () => (configProvider ? applyLedger.view() : undefined),
         centerPullState: () => {
             const view = applyLedger.view();
@@ -858,10 +871,10 @@ export async function createWebAdminRuntime(ctx) {
                             applyLedger.seenTarget(tickGen, r.effective.version);
                             const verdict = judgeConfigCandidate(r);
                             if (verdict.verdict === "rejected") {
-                                announceCandidateRejected(r, verdict, arrival !== undefined ? "late-boot" : "refresh");
+                                announceCandidateRejected(r, verdict, arrival !== undefined ? "late-boot" : "refresh", tickGen);
                                 return "ok";
                             }
-                            lastRejectedCandidate = undefined;
+                            noteCandidateVerdict(tickGen, undefined);
                             warnReadNotices(r, "refresh");
                             if (ccRef?.dryRun) {
                                 logEffectiveDiff(config, r.effective, logger);
@@ -918,7 +931,7 @@ export async function createWebAdminRuntime(ctx) {
                                 const signal = signalRestart({ applied: "complete", effective: r.effective, ...(r.etag !== undefined ? { etag: r.etag } : {}), baseline: effective, lkgPersisted });
                                 logger.info("web_admin_refreshed", {
                                     version: r.effective.version,
-                                    note: "collab + runtime governance (incl. approvalRequire) + limits + models/roles/roster hot-applied; skills/mcp/a2a/scenarios are restart-to-apply",
+                                    note: "runtime governance (incl. approvalRequire) + limits + models/roles/roster hot-applied; skills/mcp/a2a/scenarios are restart-to-apply",
                                     ...restartLogFields(signal),
                                 });
                                 latestEffective = r.effective;
@@ -967,9 +980,10 @@ export async function createWebAdminRuntime(ctx) {
                     applyLedger.seenTarget(lateGen, r.effective.version);
                     const lateVerdict = judgeConfigCandidate(r);
                     if (lateVerdict.verdict === "rejected") {
-                        announceCandidateRejected(r, lateVerdict, "late-boot");
+                        announceCandidateRejected(r, lateVerdict, "late-boot", lateGen);
                         return;
                     }
+                    noteCandidateVerdict(lateGen, undefined);
                     warnReadNotices(r, "boot-deferred");
                     if (ccRef?.dryRun) {
                         logEffectiveDiff(config, r.effective, logger);

package/dist/brain.d.ts

@@ -108,8 +108,8 @@ export interface DegradeRouteWatch {
  *
  * 缺省下首字节段不铸键(core 自缺省当家,[ref])、`0` = 该段不设引擎钟;而切备只发生在一次调用**失败之后**。于是主网关接了连接
  * 却不回响应头时:缺省 ⇒ 要等 core 的首字节 lane 走完(缺省首窗 + 一次加宽重试;本仓不铸 `firstByteRetries`,S-753 车PA)才切备,
- * 时间预算短于那一段的调用在备网关被尝试之前就被取消 —— 以 core 7.33.x 缺省计 lane ≈ 15 min,code-review council 每个镜头的 180 s 与 team
- * discuss 的 600 s 都在其内(车PA codex r1:600 s 在主网关的加宽重试窗里到点,不是「只剩余量」);
+ * 时间预算短于那一段的调用在备网关被尝试之前就被取消 —— 以 core 7.33.x 缺省计 lane ≈ 15 min,一次带短时间预算的调用
+ * (分钟级的工具 / 子任务预算)在主网关的加宽重试窗里就到点,不是「只剩余量」;
  * `0` ⇒ 首字节 lane 永不切备。启动日志里同行的 `gatewayRetryCap:"fast-fail:…"` 只管共享重试梯子,读起来却像「会快切」—— 这条披露把它补齐。
  * 显式设了正数窗 ⇒ `undefined`(部署已表态);单路由 ⇒ `undefined`(没有备可切)。**不替运维铸窗**:出路是旋钮,不是本仓的数。
  */

package/dist/brain.js

@@ -193,7 +193,7 @@ export function buildFailoverFirstByteNotice(config) {
         firstByteTimeoutMs: r.firstByteTimeoutMs ?? null,
         effect: zero
             ? "the first-byte lane never fails over a primary that accepts the connection but sends no response headers (0 = no engine clock on that segment); only a run-level limit ends that wait"
-            : "a primary that accepts the connection but sends no response headers is failed over only after core's default first-byte lane runs out (the first window, then one widened retry); a call with a time budget shorter than that — the code-review council's 180 s lenses and team discuss's 600 s, with core 7.33.x defaults — is cancelled before the backup is ever tried",
+            : "a primary that accepts the connection but sends no response headers is failed over only after core's default first-byte lane runs out (the first window, then one widened retry); a call with a time budget shorter than that (minutes, with core 7.33.x defaults) is cancelled before the backup is ever tried",
         fix: "set MODEL_FIRST_BYTE_TIMEOUT_MS to the longest response-header wait a healthy primary needs (queue + prefill), so a hung primary is cut over after that window and its one widened retry",
     };
 }

package/dist/capabilities/builtin-tools.d.ts

@@ -27,7 +27,8 @@ export interface SubagentExtraToolOptions {
  *
  * core 7.46.0 #1432 —— **工厂与名册一个来源**:返回委派工具的两键,`extraTools`(每次 spawn 交出 `forSpawn` 选中的那几只)与
  * `extraToolNames`(全部可能交出的那几只的名字 / 别名 / 内容来源,从同一批 `ToolSpec` 读出)。名册在场 ⇒ 引擎重新能列出子代的工具池:
- * 定义级 / 工具级 / `TaskSpec.agents` 清单里的退役拼法与大小写孪生回到开跑前拒(`config.agent.unknown_tool`),记忆内容来源读者按声明读这几只。
+ * 定义级 / 工具级 / `TaskSpec.agents` 清单里没有任何工具答应的名字(core 7.49.0 #1623 起含无人挂的名;退役拼法与大小写孪生 7.46.0 起)开跑前拒
+ * (`config.agent.unknown_tool`),记忆内容来源读者按声明读这几只。
  * 修前(core 7.32.0–7.45.x)工厂恒在场 ⇒ 池不可静态知 ⇒ 那一族拼法只告不拒、委派结果一律按「外部」读。
  * 工厂**不抛**:各组的 `tools` 是装配期就建好的对象;部署 `forSpawn` 的抛由 core 收成「这一 spawn 什么都不继承 + 模型面披露句」(onExtraToolsError 记 warn)。
  * 一种拼法出现在两只工具上(部署工具与 `Now` 撞名 / 别名撞)⇒ core 在建委派工具处抛 `config.extra_tool_names`(`shape`),不静默取其一。

package/dist/capabilities/composite-members.d.ts

@@ -53,7 +53,7 @@ export declare const COMPOSITE_CAPABILITY_MEMBERS: {
     readonly retention: readonly ["mode", "maxAgeDays"];
     readonly workflowsGate: readonly ["engineCan", "denial"];
     readonly sealedKey: readonly ["alg", "publicKeyId", "publicKey"];
-    readonly workspaceSync: readonly ["persist", "keep"];
+    readonly workspaceSync: readonly ["persist", "keep", "timeoutMs", "cache"];
 };
 type CompositeTable = typeof COMPOSITE_CAPABILITY_MEMBERS;
 /** 值的**具名成员对象臂**(标量 / 字面词 / `false` / `null` / `undefined` / 数组 / 函数臂剥掉)。 */

package/dist/capabilities/composite-members.js

@@ -14,7 +14,7 @@ export const COMPOSITE_CAPABILITY_MEMBERS = {
     retention: ["mode", "maxAgeDays"],
     workflowsGate: ["engineCan", "denial"],
     sealedKey: ["alg", "publicKeyId", "publicKey"],
-    workspaceSync: ["persist", "keep"],
+    workspaceSync: ["persist", "keep", "timeoutMs", "cache"],
 };
 export function gateCompositeMembers(body) {
     return body;

package/dist/capabilities/hands-lane.d.ts

@@ -4,8 +4,8 @@
  * 根本问题(设计小票 §1,案源 [ref]/[ref]/[ref]):core 的手带工具面是 **per-Runner 表态**
  * (`prepare-task`:`handsEnabled = ownedEnv || deps.executionEnv`,ownedEnv 只要挂了
  * `executionEnvFactory` 就每任务必铸)。server 此前全场景共享一只 runner + 一只 subRunner,
- * 于是任何 REMOTE_EXEC 部署里,声明 clone-free 的 `scan`、只有 `run_council` 的评审团、
- * 零工具人格的 team 成员,最终 roster 都被并集进全量可写手带(Bash/Edit/Write/…)。
+ * 于是任何 REMOTE_EXEC 部署里,声明 clone-free 的 `scan` / `code-review`(当年还有评审团与讨论成员两种零工具人格),
+ * 最终 roster 都被并集进全量可写手带(Bash/Edit/Write/…)。
  *
  * 本模块提供三件:
  *  ① {@link ScenarioHands} 判别位 + {@link pickHandsRunner} 的**穷举** switch —— 新场景不表态 = 编译红,
@@ -19,14 +19,17 @@ import { type Runner, type TaskSpec, type ToolPolicy } from "@sema-agent/core";
 /** 场景对手带工具面的表态(闭集)。`full` = core 手带 band 照常 mount;`none` = 不挂 executionEnvFactory 的 Runner。 */
 export type ScenarioHands = "full" | "none";
 /**
- * 无手孪生 Runner 的 deps 构造:把 `executionEnvFactory` **摘键**(不是置 undefined)。
+ * 无手孪生 Runner 的 deps 构造:把 `executionEnvFactory` **与 `lspManager`** 一起**摘键**(不是置 undefined)。
  * 摘键让「这只 Runner 没有手」在 deps 字面量上自证;置 undefined 留下一个值为 undefined 的键,
  * 与 core 现在的 `deps.executionEnvFactory ||` 判读结果相同,但把正确性寄托在真值判断上。
+ * **无手就无 LSP**:LSP 管理器是手的附属(宿主车道的 `NodeLspManager` 经 `defaultLspReadText` 直读本地盘,
+ * 没有读面围栏;沙箱车道推断降级为 unavailable)—— 只摘手不摘它,无手 Runner 会在 StubExecutionEnv 上挂 LSP。
  */
-export declare function withoutExecutionEnv<T extends {
+export declare function withoutHands<T extends {
     executionEnvFactory?: unknown;
-}>(deps: T): Omit<T, "executionEnvFactory">;
-/** 一对 Runner:同 deps,唯一差别是 `handsless` 不挂 `executionEnvFactory`。 */
+    lspManager?: unknown;
+}>(deps: T): Omit<T, "executionEnvFactory" | "lspManager">;
+/** 一对 Runner:同 deps,唯一差别是 `handsless` 不挂 `executionEnvFactory` 与 `lspManager`。 */
 export interface HandsRunnerPair {
     full: Runner;
     handsless: Runner;

package/dist/capabilities/hands-lane.js

@@ -1,7 +1,7 @@
 import { handBandEffects, judgeRuleToolName, combinePolicies, createAllowDenyPolicy } from "@sema-agent/core";
 import { NO_DECLARED_TOOL_NAMES } from "../namespaced-rule-name.js";
-export function withoutExecutionEnv(deps) {
-    const { executionEnvFactory: _handsDropped, ...rest } = deps;
+export function withoutHands(deps) {
+    const { executionEnvFactory: _handsDropped, lspManager: _lspDropped, ...rest } = deps;
     return rest;
 }
 export function pickHandsRunner(hands, pair) {

package/dist/capabilities/memory-notice.d.ts

@@ -13,10 +13,11 @@
  * ⚠️ 两条边界,越界即双重注入/假话:
  *  · **engine 在场就不是我们的座位**。哪怕 `memoryWrite:false`(writeScope null)——那恰恰是引擎自己
  *    挂只读披露的状态,server 再叠一句口径不同的「你没有持久记忆」= 同一件事两种说法同框。
- *  · **推断到「有落盘路」就闭嘴**。判别式与 core 的 `rosterCanPersist` 同口径(已知落盘路 = 挂载且未
- *    排除的文件写工具 / 可写 shell)。⚠️ 名单确实要读(codex 复审 [medium] 之后加的 `excludeTools` 一位:
- *    roster 把落盘路**整批**卸掉时,手带在场也等于没有写通道),但负控仍然成立:必须**全部**已知落盘路
- *    都不在才算断链 —— `excludeTools:["Write"]` 不算(Bash/Edit 还在),请求面摘一个工具名改不动结论。
+ *  · **推断到「有落盘路」就闭嘴**。判别式与 core 的 `rosterCanPersist` 同口径(已知落盘路 = 这一 run 名册上
+ *    真挂着的文件写工具 / 可写 shell)。「名册上还剩什么」**只读引擎的答案**:core 7.49.0(#1623)起一 run 的可用工具是
+ *    引擎一只选择器(`allowTools` ∩ … − `excludeTools`,别名 / `Tool(content)` / `mcp__srv…` 都由它读)在 prepare 算出的,
+ *    本模块不再读请求的任何一张工具名表 —— 名册臂在装配时刻读 provider 拿到的 `ctx.tools`(选择器之后的名册)。
+ *    负控仍然成立:必须**全部**已知落盘路都不在名册上才算断链(摘掉 `Write`,Bash / Edit 还在)。
  */
 import { type PromptProvider, type ToolCatalogEntry } from "@sema-agent/core";
 import type { ScenarioHands } from "./hands-lane.js";
@@ -25,8 +26,8 @@ import { type ExecutionLane } from "../execution-lane-caps.js";
  * 「已知落盘路」的判据,作用在 core **静态工具目录**的一行上(S-503 / [ref])—— 与 core 自己的
  * `rosterCanPersist` 推断逐条同形,取的是同一批目录属性,不是它结论的抄件:
  *  · `mountedBy` 落在 core 的 `HANDS_BAND_TAGS` 里 —— 手带 band 之外的定义(记忆面工具、调度族)
- *    不在本判别式说得着的面上:本判别式的输入全是**手带事实**(`hands` / `handsReadOnly` /
- *    `excludeTools`),把一只 band 外的写工具算进来,就是拿一条根本没挂的通道去撤回披露(fail-open);
+ *    不在本判别式说得着的面上:本判别式的输入全是**手带事实**(`hands` / `handsReadOnly` / 名册上的手带名),
+ *    把一只 band 外的写工具算进来,就是拿一条根本没挂的通道去撤回披露(fail-open);
  *  · `face.effect !== "read"`(缺席读 `write`,与 core 同缺省)—— 只读 shell 壳在这里出局,它与全壳
  *    共用 `Bash` 这个 wire 名,靠的正是这一位分开;
  *  · `face.pathTarget.access !== "read"`(文件写工具)**或** `face.family === "shell"`(可写 shell)。
@@ -44,8 +45,8 @@ export declare function persistencePathToolNamesOf(entries: readonly ToolCatalog
  * 「已知落盘路」的工具名闭集 —— **由 core 的静态工具目录派生**,本仓不再存第二份名表
  * (S-503 / [ref];改前是手抄的四名表 Write / Edit / NotebookEdit / Bash,没有任何差集门)。
  *
- * 为什么手抄在这一位上特别危险:core 改名/加一只写工具,手抄表静默失配成「没有一个写工具被排除」
- * (fail-open 方向)—— `excludeTools` 把真正的落盘路全排掉了,而我们对着一张旧名单答「还剩」。
+ * 为什么手抄在这一位上特别危险:core 改名/加一只写工具,手抄表静默失配(fail-open 方向)—— 名册上真正的
+ * 落盘路已经全不在了,而我们对着一张旧名单答「还剩」。
  * 判据的属主现在是 {@link persistencePathToolNamesOf},值的属主是 core 的目录行。
  */
 export declare const KNOWN_PERSISTENCE_TOOL_NAMES: readonly string[];
@@ -69,15 +70,6 @@ export interface MemoryFaceFacts {
     hands: ScenarioHands;
     /** 折完 governance+settings 后的最终 `handsReadOnly`(`AUTONOMY=read-only` 收窄;plan 模式不点亮它 —— plan 的手带照挂、调用时由引擎问)。手带只剩读腿。 */
     handsReadOnly: boolean;
-    /** 折完之后的最终 `TaskSpec.excludeAllTools`(S-493;core 7.8.0 [ref])。`true` = **整只**工具面卸空
-     *  (core `prepareDeferClassify` 对它直接 `roster.unmountWhere(() => true)`)⇒ 手带在场也一条落盘路都不剩。
-     *  🔴 它与下面那张名单是**同一个语义面**(「哪些工具不在 roster 上」)的两种声明,判据合成一只
-     *  {@link isUnmounted} —— 上游同版的姊妹谓词 `fullShellReachable` 也正是把 `spec.excludeAllTools !== true`
-     *  当一个合取项(`prepare-inherited-gate.js` 亲读),本仓与它同口径。 */
-    excludeAllTools: boolean;
-    /** 折完之后的最终 `TaskSpec.excludeTools`(roster 真卸载,不是延迟披露)。**全部**已知落盘路都被排掉
-     *  ⇒ 手带在场也等于没有写通道 —— core 的 `rosterCanPersist` 也是按排除后的 roster 算的,这里跟上。 */
-    excludeTools: readonly string[] | undefined;
     /**
      * 本部署的手带**挂没挂**(= core 拿没拿到执行环境;能力表 `coreRemoteExecutionEnv` 位,经
      * {@link buildNoticeLaneFacts} 取)。`false` = `in-process`:core 落 `StubExecutionEnv`,手带整族不 mount
@@ -103,18 +95,31 @@ export interface MemoryFaceFacts {
  * 不在调用点手写 `config.remoteExec !== undefined`(门 D R4)。
  */
 export declare function buildNoticeLaneFacts(lane: ExecutionLane): Pick<MemoryFaceFacts, "handsWired" | "filePlaneRemote">;
+/**
+ * 披露的三种结局。`"roster"` = 部署事实答不完,剩下的问题(「名册上还剩不剩已知落盘路」)只有引擎在 prepare
+ * 之后知道 —— 由 {@link withNoPersistentMemoryNotice} 在装配时刻读 provider 拿到的名册作答,不在 resolveSpec 期猜。
+ */
+export type NoPersistentMemoryNotice = "disclose" | "silent" | "roster";
 /**
  * 该不该把 `NO_PERSISTENT_MEMORY_NOTICE` 组进本次任务的 system prompt。
  *
  * 优先序(每一条都有独立理由,不是同一条判据的三种写法):
- *  ① engine 在场 ⇒ **否**(引擎的座位,见文件头注);
- *  ② 部署显式声明(或 host 腿装配层自动声明)⇒ 声明说了算(`true` 撤回 / `false` 强制)—— operator 的部署
+ *  ① engine 在场 ⇒ `silent`(引擎的座位,见文件头注);
+ *  ② 部署显式声明(或 host 腿装配层自动声明)⇒ 声明说了算(`true` ⇒ `silent` / `false` ⇒ `disclose`)—— operator 的部署
  *     事实压过我们的推断,与 core 对 `memoryPersistenceCapable` 的处置同向;
- *  ③ 否则推断:有已知落盘路(手带挂上、场景不摘手、不是只读、文件平面在本机、且没被卸载决定卸光)⇒ 否;没有 ⇒ 是。
+ *  ③ 否则推断:手带没挂 / 场景摘手 / 只读 / 文件平面不在本机 ⇒ `disclose`;都不是 ⇒ `roster`(名册上还剩不剩已知落盘路,
+ *     读引擎选择器之后的名册 —— 本模块不读请求的任何工具名表,core 7.49.0 #1623 起那是引擎一只运算的输入)。
  * 🔴 S-602 只改臂③ 里「车道」那一段(`handsWired` / `filePlaneRemote`),①② 的优先序一字不动 —— 「in-process ⇒
  * 披露」只在这两臂**之后**成立(挂了记忆面、或声明了 capable 的 in-process 部署照旧不披露)。
  */
-export declare function shouldDiscloseNoPersistentMemory(facts: MemoryFaceFacts): boolean;
+export declare function noPersistentMemoryNotice(facts: MemoryFaceFacts): NoPersistentMemoryNotice;
+/**
+ * 名册臂:引擎选择器之后的名册上还剩不剩已知落盘路(`KNOWN_PERSISTENCE_TOOL_NAMES` 任一名在册)。⚠️ 负控:摘掉**一个**
+ * `Write` 不算断链(Bash / Edit 还在)—— 必须**全部**已知落盘路都不在名册上。名册为空(`excludeAllTools`)⇒ 一条都不剩。
+ */
+export declare function rosterLeavesPersistencePath(tools: readonly {
+    readonly name: string;
+}[]): boolean;
 /**
  * 把披露段组进一个 prompt provider,**按 provider 自己的钩子形分腿**(换形会改段身份与 append 座位):
  *  · typed(`stableBlocks`)⇒ {@link mountNotice}(普通形追加 behavior 声明;已组装 identity 形接在其文本后)。
@@ -129,5 +134,5 @@ export declare function shouldDiscloseNoPersistentMemory(facts: MemoryFaceFacts)
  * 走 typed 声明腿就没有这条耦合:role 层仍由 core 按 `userSystemPrompt ?? DEFAULT_SYSTEM_PROMPT` 自己铸,
  * 我方只贡献一条 behavior 段,`providerDropsAppend` 的判决包装前后逐格相同。
  */
-export declare function withNoPersistentMemoryNotice(provider: PromptProvider | undefined): PromptProvider;
+export declare function withNoPersistentMemoryNotice(provider: PromptProvider | undefined, when: Exclude<NoPersistentMemoryNotice, "silent">): PromptProvider;
 //# sourceMappingURL=memory-notice.d.ts.map

package/dist/capabilities/memory-notice.js

@@ -26,24 +26,21 @@ export function buildNoticeLaneFacts(lane) {
     const caps = executionLaneCaps(lane);
     return { handsWired: caps.coreRemoteExecutionEnv === "supported", filePlaneRemote: caps.hostFilePlane !== "supported" };
 }
-function isUnmounted(facts, name) {
-    return facts.excludeAllTools || (facts.excludeTools?.includes(name) ?? false);
-}
-function anyPersistenceToolSurvives(facts) {
-    return KNOWN_PERSISTENCE_TOOL_NAMES.some((name) => !isUnmounted(facts, name));
-}
-export function shouldDiscloseNoPersistentMemory(facts) {
+export function noPersistentMemoryNotice(facts) {
     if (facts.memoryFaceMounted)
-        return false;
+        return "silent";
     if (facts.declaredCapable !== undefined)
-        return !facts.declaredCapable;
+        return facts.declaredCapable ? "silent" : "disclose";
     if (facts.hands === "none" || facts.handsReadOnly)
-        return true;
+        return "disclose";
     if (!facts.handsWired)
-        return true;
+        return "disclose";
     if (facts.filePlaneRemote)
-        return true;
-    return !anyPersistenceToolSurvives(facts);
+        return "disclose";
+    return "roster";
+}
+export function rosterLeavesPersistencePath(tools) {
+    return tools.some((t) => KNOWN_PERSISTENCE_TOOL_NAMES.includes(t.name));
 }
 const NOTICE_BLOCK = { id: NO_PERSISTENT_MEMORY_SECTION_ID, slot: "behavior", text: NO_PERSISTENT_MEMORY_NOTICE };
 function mountNotice(decls) {
@@ -52,15 +49,16 @@ function mountNotice(decls) {
         return [...decls, NOTICE_BLOCK];
     return decls.map((d) => (d === assembledIdentity ? { id: d.id, slot: d.slot, text: `${d.text}\n\n${NO_PERSISTENT_MEMORY_NOTICE}` } : d));
 }
-export function withNoPersistentMemoryNotice(provider) {
+export function withNoPersistentMemoryNotice(provider, when) {
+    const due = (ctx) => when === "disclose" || !rosterLeavesPersistencePath(ctx.tools);
     if (provider?.stableBlocks) {
         const blocks = provider.stableBlocks.bind(provider);
-        return { ...provider, stableBlocks: (ctx) => mountNotice(blocks(ctx)) };
+        return { ...provider, stableBlocks: (ctx) => (due(ctx) ? mountNotice(blocks(ctx)) : blocks(ctx)) };
     }
     if (provider?.stableSystem) {
         const stable = provider.stableSystem.bind(provider);
-        return { ...provider, stableSystem: (ctx) => `${stable(ctx)}\n\n${NO_PERSISTENT_MEMORY_NOTICE}` };
+        return { ...provider, stableSystem: (ctx) => (due(ctx) ? `${stable(ctx)}\n\n${NO_PERSISTENT_MEMORY_NOTICE}` : stable(ctx)) };
     }
-    return { stableBlocks: () => [NOTICE_BLOCK] };
+    return { stableBlocks: (ctx) => (due(ctx) ? [NOTICE_BLOCK] : []) };
 }
 //# sourceMappingURL=memory-notice.js.map

package/dist/capabilities/scenarios.d.ts

@@ -1,10 +1,9 @@
 import { type WebFetchConfig, type BackgroundAgentStore, type CheckpointStore, type PromptProvider, type Runner, type SkillSpec, type TaskListStore, type ToolSpec, type WebSearchConfig } from "@sema-agent/core";
-import type { Metrics } from "../observability/metrics.js";
 import type { Logger } from "../observability/logger.js";
 import { type SubagentExtraToolSet } from "./builtin-tools.js";
 import { type RepoReadClient } from "./repo-tools.js";
 import { type LoadedSkill } from "./skills.js";
-import { type ScenarioHands } from "./hands-lane.js";
+import type { ScenarioHands } from "./hands-lane.js";
 /**
  * Scenario routing — a deployment serves many scenarios from one image. Each request's `scenario`
  * selects a pre-wired capability bundle: tools (incl. subagent roster) + a whole-harness prompt +
@@ -53,15 +52,8 @@ export interface ScenarioContext {
 export type Scenario = (req: ScenarioRequest, principal?: string, ctx?: ScenarioContext) => ScenarioBundle;
 export interface ScenarioDeps {
     runner: Runner;
-    /** In-memory runner for ephemeral sub-tasks (council lenses/arbiter) — keeps them out of TiDB. */
+    /** The runner a delegated (Agent-tool) child runs on — same deps as `runner`, hands included (CC parity). */
     subRunner: Runner;
-    /**
-     * [ref]:`subRunner` 的无手孪生 —— 同 deps,唯独不挂 `executionEnvFactory`。hands=none 的场景把它交给
-     * 自己造的子任务工具(council 的 lens/arbiter、discuss 的成员/synthesizer):那些子任务只该读仓库/讨论,
-     * 拿全量可写手是 [ref] 病灶里最意外的一支(零工具人格照拿 Bash)。取用一律走 {@link pickHandsRunner},
-     * 不在场景体内手挑 —— 判别位是唯一开关。
-     */
-    handslessSubRunner: Runner;
     model: string;
     skills: LoadedSkill[];
     repoClient?: RepoReadClient;
@@ -77,12 +69,11 @@ export interface ScenarioDeps {
      *  模型摘要而非整页灌上下文([ref] L1 的 ~660× 放大就是这缝);缺席 ⇒ `webFetch` 键不铸(修前
      *  字节形,core 落「summarization unavailable」诚实兜底)。 */
     webFetchSummarize?: NonNullable<NonNullable<WebFetchConfig["summarize"]>>;
-    metrics?: Metrics;
     logger?: Logger;
     /**
      * When true, the `default` scenario carries the Sema product identity (see {@link semaIdentityProvider}).
      * Set by the local/TOC deployment (CONFIG_PROVIDER=local / run-local) so the local engine answers "who
-     * are you" as Sema instead of the model's hallucinated identity. Business scenarios (discuss/code-review)
+     * are you" as Sema instead of the model's hallucinated identity. Business scenarios (code-review)
      * keep their own prompts; cloud (CONFIG_PROVIDER≠local) leaves the default scenario neutral unless turned
      * on, so integrators that inject their own persona are unaffected.
      */
@@ -205,9 +196,13 @@ export interface ScenarioDetail {
     /** 机读原因键;仅 `available:false` 时在场(缺席=没有理由)。消费方按键分支,禁匹配英文文案。 */
     unavailableReason?: ScenarioUnavailableReason;
 }
-/** 内建五场景详情。default/code/discuss 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
+/** 内建四场景详情。default/code 工厂对良性请求无副作用可真调(拿真实工具名单);code-review/scan 是
  *  fail-loud 语义(缺 GIT_API 配置/principal 即 throw)→ 探针失败落静态表兜底(表↔工厂一致性由测试锁:
  *  测试喂 fake deps 真调工厂对账工具名)。enabled 对内建恒 true(约定②)。 */
+/** 内建场景名的闭集(`GET /v1/capabilities.scenarios` 与场景详情口的内建成员)。{@link builtinScenarioDetails} 的返回型按它键控 ⇒ 加 / 删一个内建场景而
+ *  这里没跟 = 编译红;wire 变更清单的自铸登记表(`trace/self-minted-wire.ts` 的 `builtinScenario`)同按它 `satisfies`。 */
+export declare const BUILTIN_SCENARIO_NAMES: readonly ["code", "default", "code-review", "scan"];
+export type BuiltinScenarioName = (typeof BUILTIN_SCENARIO_NAMES)[number];
 export declare function builtinScenarioDetails(scenarios: Record<string, Scenario>, deps: Pick<ScenarioDeps, "brandIdentity" | "repoClient">): Record<string, ScenarioDetail>;
 /** center 条目详情(有效性判定与 centerScenarios 完全同款:无效条目既不进 overlay 也不进详情——
  *  保证约定①「详情显示的来源=运行实际用的定义」永不错位)。 */
@@ -236,7 +231,7 @@ export type ScenarioAvailability = {
  *
  * 判据键 = **toolset**:内建详情与 center 条目都带这个字段,故两条产线天然共用同一份判据。
  * `requiresRepo` 的 toolset 需要部署配好 git 后端(`GIT_API_BASEURL` ⇒ `deps.repoClient`)。
- * 词表外的 toolset(内建的 `full-body`/`discuss`)不依赖后端 ⇒ 恒可用。
+ * 词表外的 toolset(内建的 `full-body`)不依赖后端 ⇒ 恒可用。
  */
 export declare function scenarioAvailability(deps: Pick<ScenarioDeps, "repoClient">, toolset: string): ScenarioAvailability;
 /** 拒绝文案的唯一属主:闭集穷举 switch(新增原因词不在这里表态即编译红)。 */