@sema-agent/server 7.130.0 → 7.132.0

package/dist/trace/ledger-sink.js

@@ -1,7 +1,7 @@
 import {} from "@sema-agent/core";
 import { outwardPlane } from "../terminal.js";
 import { recordFailOpen } from "../observability/fail-open.js";
-import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
+import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, compactionStartedEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKeyOf } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
 import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
@@ -17,6 +17,17 @@ export function createSerialLedgerAppend(appendEvent, startSeq) {
 export function createForwardAppendFailedNote(type) {
     return (err) => recordFailOpen("server.ledger.forward-append-failed", `type=${type} err=${err instanceof Error ? err.message : String(err)}`);
 }
+export function createLedgerTwinEmit(opts) {
+    return async (frame) => {
+        if (opts.sink !== undefined) {
+            const { type, ...data } = frame;
+            await opts.sink.append(type, data);
+            if (!opts.liveReachable())
+                return;
+        }
+        opts.writeLive(frame);
+    };
+}
 export function createLedgerSink(opts) {
     const keys = opts.notifiedKeys ?? new NotifiedKeys();
     let seq = 0;
@@ -97,6 +108,9 @@ export function createLedgerSink(opts) {
             case "compaction_outcome":
                 await append("compaction_outcome", compactionOutcomeEventData(ev));
                 break;
+            case "compaction_started":
+                await append("compaction_started", compactionStartedEventData(ev));
+                break;
             case "workspace_changed":
                 await append("workspace_changed", workspaceChangedEventData(ev));
                 break;

package/dist/trace/model-segment.js

@@ -2,7 +2,7 @@ import { reasoningEndEventData } from "./project.js";
 const BOUNDARY = new Set([
     "tool_start", "tool_end", "status", "context_usage", "compacted", "diagnostics",
     "steering_injected", "compaction_outcome", "workspace_changed", "wiring_manifest",
-    "tool_roster_delta", "human_input", "task_notification", "turn_end", "tool_disclosure",
+    "tool_roster_delta", "human_input", "task_notification", "turn_end", "tool_disclosure", "compaction_started",
 ]);
 export function isModelSegmentBoundary(type) {
     return BOUNDARY.has(type);

package/dist/trace/project.d.ts

@@ -113,11 +113,7 @@ export type TraceBlock = {
     parentToolCallId?: string;
 } | {
     type: "prompt-assembled";
-    constitution: string;
-    totalChars: number;
-    blocks: unknown;
-    sections?: unknown;
-    tools?: unknown;
+    readonly [member: string]: unknown;
 };
 /**
  * 🔴 **模型自由文本账本行(`text` / `reasoning`)的唯一载荷铸点**(B-106 / S-268,7.75.1)。
@@ -543,6 +539,21 @@ export declare function compactionOutcomeEventData(ev: {
     outcome?: unknown;
     trigger?: unknown;
     reason?: unknown;
+    pass?: unknown;
+    eventId?: unknown;
+    parentToolCallId?: unknown;
+}): Record<string, unknown>;
+/**
+ * `compaction_started`(S-1732,core 7.53.0 #2008)—— 一次压缩 pass 在提交点(触发闸过了、切点在、`preCompact` 没拦)宣告开始,先于摘要调用:
+ * 一次在供应方重试表里等很久的摘要(core 实测 503 × 11、173 s)从此在流上不是静默的。**原样投影**:`{ trigger, pass, startedAt }` + 身份两键,
+ * 不自铸相位、不铸 run / session id(那是流的,不是帧的键)。三键都是引擎铸的闭形值:`trigger` 闭集词(`auto` / `manual` / `forced`,与结束帧同一张词表)、
+ * `pass` 不透明 id(结束这次 pass 的那一帧 —— `compacted` 或 `compaction_outcome` —— 带同一个 `pass`)、`startedAt` 引擎时钟 epoch 毫秒 ⇒ 不脱敏、逐字;
+ * 形不合即缺席(与 {@link compactionOutcomeEventData} 同款守卫,不编值)。三条消费腿(live 帧、两条 durable 腿)共用这一只。
+ */
+export declare function compactionStartedEventData(ev: {
+    trigger?: unknown;
+    pass?: unknown;
+    startedAt?: unknown;
     eventId?: unknown;
     parentToolCallId?: unknown;
 }): Record<string, unknown>;
@@ -806,7 +817,7 @@ export declare function wiringManifestEventData(ev: {
  * `core-keyset-guard.ts` ⑥b `WiringSectionExcluded`)。**present-iff 武装**:
  *  · 整段缺席 ⇒ **未武装**,不铸键、不计数(正面事实,不是「未知」,更不是 `{onRecommendation:false}`);
  *  · 在场且 `onRecommendation === true` ⇒ 逐字铸出(core 的在场形只有这一个,构造期门已拒掉「武装但跑不起来」);
- *  · 在场但读不出那个形 ⇒ `dropProjectedFace` 留痕并整段缺席(与 `writeProtection` / `lsp` / `hooks` 同一条
+ *  · 在场但读不出那个形 ⇒ `dropProjectedFace` 留痕并整段缺席(与 `writeProtection` / `lsp` / `mods` 同一条
  *    族规:「在场但读不出 ⇒ 计一次并丢弃」;**不**自造第三态,词表/形的属主在 core)。
  *    🔴 代价如实登记,与 `writeProtection` 那一格逐字同源:wire 上「读不出」与「真未武装」是**同一个形**,
  *    分得开它们的只有 `server.trace.projection-input-malformed` 这只计数 —— 而这一格比那一格更该说清楚,
@@ -851,6 +862,11 @@ export declare function wiringManifestFaceEventData(ev: {
  *    `[from …]` 渲染就是靠它决定加不加 `(unverified)`),剥掉它比剥掉 id 更坏:剩下一个看不出真假的名字。
  *  · `principal` —— **刻意不投影**(与 ToolApprovalFrame 的 `principal` 同裁):帧本就经 owner-scoped 流
  *    投递,租户身份不必再由帧自述。要它请先提消费需求,别顺手加。
+ *  · `attachments[]`(core 7.50.0,只在声明了附件的目标那一帧 `applied` 上)—— 逐成员挑四键:`ordinal`(引擎铸的序号)/
+ *    `kind`(引擎认出的种类,闭集词;读不出种类时缺席)/ `outcome`(引擎的结局词,闭集)⇒ verbatim;`label` = 调用方**自己声明的**
+ *    路径或名字(引擎原样回声,不是解析后的落点 —— 多租户沙箱车道上它是这次 run 自己工作区里的相对 / 绝对路径串,帧上不出现任何别的租户
+ *    或宿主盘的信息),与已展示的工具实参 / `workspace_changed.cwd` 同一信任级(UNTRUSTED 的路径串)⇒ 过 `redactSecrets`。长度界由引擎定
+ *    (`USER_ATTACHMENT_LABEL_MAX`),本仓不另截。非对象的成员丢、集外的成员键不投(同 `actor` 的白名单理由)。
  *
  * `actor` 逐键挑(禁 spread):core 已声明 `ActorAssertion` 是冻结三键形,但白名单的意义正是「core 加第
  * 四键时由人处置」——身份对象上多出来的键裸上线是本文件反复登记的病族。
@@ -866,6 +882,7 @@ export declare function humanInputEventData(ev: {
     actor?: unknown;
     principal?: unknown;
     entryId?: unknown;
+    attachments?: unknown;
     eventId?: unknown;
     parentToolCallId?: unknown;
 }): Record<string, unknown>;
@@ -926,6 +943,8 @@ export declare function compactedEventData(ev: {
         persistMs?: number;
         ptlRetries?: number;
     };
+    /** S-1732(core 7.53.0 #2008):这次落地的压缩 pass 的 id —— 与它的 `compaction_started` 帧同一个值(引擎在每次落地上都设;型上可选)。逐字。 */
+    pass?: string;
 }): Record<string, unknown>;
 export interface TraceTurn {
     /** per-task seq = the turn's terminating event seq (so history-up-to-H splices with stream seq>H). */

package/dist/trace/project.js

@@ -3,6 +3,7 @@ import { MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROL
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
+import { sanitizeWireText } from "./engine-notice-wire.js";
 import { projectToolOutput, projectToolStructured } from "./tool-output-media.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
@@ -380,6 +381,16 @@ export function compactionOutcomeEventData(ev) {
         ...(s(ev.outcome) !== undefined ? { outcome: s(ev.outcome) } : {}),
         ...(s(ev.trigger) !== undefined ? { trigger: s(ev.trigger) } : {}),
         ...(ev.reason !== undefined ? { reason: redactSecrets(String(ev.reason)) } : {}),
+        ...(s(ev.pass) !== undefined ? { pass: s(ev.pass) } : {}),
+        ...identityFields(ev),
+    };
+}
+export function compactionStartedEventData(ev) {
+    const s = (v) => (typeof v === "string" ? v : undefined);
+    return {
+        ...(s(ev.trigger) !== undefined ? { trigger: s(ev.trigger) } : {}),
+        ...(s(ev.pass) !== undefined ? { pass: s(ev.pass) } : {}),
+        ...(typeof ev.startedAt === "number" && Number.isFinite(ev.startedAt) ? { startedAt: ev.startedAt } : {}),
         ...identityFields(ev),
     };
 }
@@ -513,26 +524,55 @@ export function wiringManifestEventData(ev, instructions) {
     })();
     const toolsIn = m.tools;
     const tools = toolsIn === undefined ? undefined : Value.Check(ToolRoster, toolsIn) ? toolsIn : (recordFailOpen("server.trace.tool-roster-malformed", "wiring_manifest.tools did not fit core ToolRoster"), undefined);
-    const hooksIn = m.hooks;
-    const hooks = (() => {
-        if (hooksIn === undefined)
+    const strList = (v) => (Array.isArray(v) && v.every((x) => typeof x === "string") ? [...v] : undefined);
+    const registrantText = (v) => {
+        const t = str(v);
+        return t === undefined ? undefined : sanitizeWireText(t);
+    };
+    const modsIn = m.mods;
+    const mods = (() => {
+        if (modsIn === undefined)
             return undefined;
-        if (!Array.isArray(hooksIn))
-            return dropProjectedFace("wiring_manifest.hooks is not an array");
+        if (!Array.isArray(modsIn))
+            return dropProjectedFace("wiring_manifest.mods is not an array");
         const rows = [];
-        for (const raw of hooksIn) {
+        for (const raw of modsIn) {
             const e = sec(raw);
-            if (e === undefined) {
-                dropProjectedFace("wiring_manifest.hooks[] row is not an object");
+            const name = registrantText(e?.name);
+            const seat = str(e?.seat);
+            const tier = str(e?.tier);
+            if (e === undefined || name === undefined || seat === undefined || tier === undefined) {
+                dropProjectedFace("wiring_manifest.mods[] row is missing name/seat/tier");
+                continue;
+            }
+            const refusedBy = registrantText(e.refusedBy);
+            const reason = registrantText(e.reason);
+            if (refusedBy !== undefined && reason !== undefined) {
+                rows.push({ name, seat, tier, refusedBy, reason });
                 continue;
             }
-            const family = str(e.family);
-            const owner = str(e.owner);
-            if (family === undefined || owner === undefined) {
-                dropProjectedFace("wiring_manifest.hooks[] row is missing family/owner");
+            const events = strList(e.events);
+            if (events === undefined) {
+                dropProjectedFace("wiring_manifest.mods[] row is neither a mounted nor a refused record");
                 continue;
             }
-            rows.push({ family, owner, ...(e.observational === true ? { observational: true } : {}) });
+            const observe = e.observe === undefined ? undefined : (strList(e.observe) ?? dropProjectedFace("wiring_manifest.mods[].observe is not a list of strings"));
+            const skipped = e.skipped === undefined
+                ? undefined
+                : Array.isArray(e.skipped)
+                    ? e.skipped.flatMap((x) => {
+                        const k = sec(x);
+                        const registration = registrantText(k?.registration);
+                        const cause = registrantText(k?.cause);
+                        const why = registrantText(k?.reason);
+                        if (registration === undefined || cause === undefined || why === undefined) {
+                            dropProjectedFace("wiring_manifest.mods[].skipped[] element is missing registration/cause/reason");
+                            return [];
+                        }
+                        return [{ registration, cause, reason: why }];
+                    })
+                    : dropProjectedFace("wiring_manifest.mods[].skipped is not an array");
+            rows.push({ name, seat, tier, events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
         }
         return rows.length > 0 ? rows : undefined;
     })();
@@ -606,7 +646,7 @@ export function wiringManifestEventData(ev, instructions) {
         ...(autoMode !== undefined ? { autoMode } : {}),
         ...(tools !== undefined ? { tools } : {}),
         ...(mcp !== undefined ? { mcp } : {}),
-        ...(hooks !== undefined ? { hooks } : {}),
+        ...(mods !== undefined ? { mods } : {}),
         ...(lsp !== undefined ? { lsp } : {}),
         ...(hands !== undefined ? { hands } : {}),
         ...(writeProtection !== undefined ? { writeProtection } : {}),
@@ -665,6 +705,16 @@ export function wiringManifestFaceEventData(ev, operatorFace, instructions) {
 export function humanInputEventData(ev) {
     const str = (v) => (typeof v === "string" && v.length > 0 ? v : undefined);
     const a = typeof ev.actor === "object" && ev.actor !== null && !Array.isArray(ev.actor) ? { ...ev.actor } : {};
+    const attachments = Array.isArray(ev.attachments)
+        ? ev.attachments
+            .filter((m) => typeof m === "object" && m !== null && !Array.isArray(m))
+            .map((m) => ({
+            ...(typeof m.ordinal === "number" && Number.isFinite(m.ordinal) ? { ordinal: m.ordinal } : {}),
+            ...(str(m.kind) !== undefined ? { kind: m.kind } : {}),
+            ...(str(m.outcome) !== undefined ? { outcome: m.outcome } : {}),
+            ...(str(m.label) !== undefined ? { label: redactSecrets(String(m.label)) } : {}),
+        }))
+        : undefined;
     const actor = {
         ...(str(a.id) !== undefined ? { id: redactSecrets(String(a.id)) } : {}),
         ...(typeof a.hostAsserted === "boolean" ? { hostAsserted: a.hostAsserted } : {}),
@@ -679,6 +729,7 @@ export function humanInputEventData(ev) {
         ...(str(ev.issuer) !== undefined ? { issuer: redactSecrets(String(ev.issuer)) } : {}),
         ...(Object.keys(actor).length > 0 ? { actor } : {}),
         ...(str(ev.entryId) !== undefined ? { entryId: ev.entryId } : {}),
+        ...(attachments !== undefined ? { attachments } : {}),
         ...identityFields(ev),
     };
 }
@@ -747,6 +798,7 @@ export function compactedEventData(ev) {
         })(),
         ...(num(ev.durationMs) !== undefined ? { durationMs: num(ev.durationMs) } : {}),
         ...(phaseDurations !== undefined ? { phaseDurations } : {}),
+        ...(typeof ev.pass === "string" ? { pass: ev.pass } : {}),
     };
 }
 export function contextUsageEventData(ev) {
@@ -869,14 +921,7 @@ export function projectEvents(events, opts = {}) {
             }
             case "prompt_assembled":
                 firstTs ??= ev.ts;
-                blocks.push({
-                    type: "prompt-assembled",
-                    constitution: String(d.constitution ?? ""),
-                    totalChars: Number(d.totalChars ?? 0),
-                    blocks: d.blocks,
-                    ...(d.sections !== undefined ? { sections: d.sections } : {}),
-                    ...(d.tools !== undefined ? { tools: d.tools } : {}),
-                });
+                blocks.push({ ...d, type: "prompt-assembled" });
                 break;
             case "turn_end":
                 flushTurn(ev.seq, ev.ts, toContractTokens(d.usage, d.usageMissing));
@@ -955,6 +1000,7 @@ function mapTraceEventInner(type, seq, data) {
             return { event: "error", data: { type: "error", errorCode: "WORKER_DOWN", message: redactErrorMessage(String(data.errorMessage ?? "run failed")) ?? "run failed" } };
         case "context_usage":
         case "compaction_outcome":
+        case "compaction_started":
         case "wiring_manifest":
         case "human_input":
         case "tool_roster_delta":

package/dist/trace/wire-projection-faces.d.ts

@@ -54,7 +54,7 @@ export interface WireProjectionFace {
  */
 export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
-export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin"];
+export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
 /**
  * `wiring_manifest` 的 **operator 面多投的那几段**(`wiringManifestOperatorEventData` 在租户形之上加的段)。
  * operator 行的 `excluded` = 租户行减本常量(派生);四段各自的受众裁定在 `core-keyset-guard.ts` ⑥b。
@@ -158,10 +158,16 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
+    readonly compaction_started: {
+        readonly projector: "compactionStartedEventData";
+        readonly coreType: string;
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
-        readonly excluded: readonly ["principal", "attachments"];
+        readonly excluded: readonly ["principal"];
         readonly minted: readonly [];
     };
     readonly task_notification: {
@@ -216,6 +222,78 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
+    readonly prompt_manifest: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "Extract<TraceEvent, { kind: \"prompt.assembled\" }>";
+        readonly excluded: readonly ["kind", "version", "taskId", "snapshot", "lowering", "ts"];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_identity: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestIdentity";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_identity_layers: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptIdentityLayers";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_selectors: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSelectors";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_selectors_host: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSelectors[\"host\"]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_block: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"blocks\"][number]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_section: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSection";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_section_renderer: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "NonNullable<PromptManifestSection[\"renderer\"]>";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_chain_link: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptChainLink";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_superseded: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "SupersededOverlay";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_tool: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "NonNullable<Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"tools\"]>[number]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_tool_disclosure: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "ToolDisclosureManifest";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
 };
 /** 面名。 */
 export type WireProjectionFaceName = keyof typeof WIRE_PROJECTION_FACES;

package/dist/trace/wire-projection-faces.js

@@ -8,8 +8,17 @@ export const WIRE_PROJECTION_CORE_IMPORTS = [
     "OriginClearanceRow",
     "OriginClearanceEvent",
     "MemoryEntryOrigin",
+    "TraceEvent",
+    "PromptManifestIdentity",
+    "PromptIdentityLayers",
+    "PromptManifestSelectors",
+    "PromptManifestSection",
+    "PromptChainLink",
+    "SupersededOverlay",
+    "ToolDisclosureManifest",
 ];
 const arm = (name) => `Extract<TaskEvent, { type: "${name}" }>`;
+const MANIFEST_FRAME = `Extract<TraceEvent, { kind: "prompt.assembled" }>`;
 export const WIRING_MANIFEST_OPERATOR_ONLY_SECTIONS = ["governance", "configFingerprint", "autoConsolidation", "readDeny"];
 function withoutSections(all, drop) {
     return all.filter((k) => !drop.includes(k));
@@ -30,7 +39,8 @@ export const WIRE_PROJECTION_FACES = {
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
-    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal", "attachments"], minted: [] },
+    compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
+    human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
         coreType: `TaskNotificationPayload & ${arm("task_notification")}`,
@@ -67,5 +77,17 @@ export const WIRE_PROJECTION_FACES = {
     },
     origin_clearance_origin: { projector: "buildClearanceRowWire", coreType: "MemoryEntryOrigin", excluded: [], minted: [] },
     origin_clearance_event: { projector: "buildClearanceRowWire", coreType: "OriginClearanceEvent", excluded: [], minted: [] },
+    prompt_manifest: { projector: "promptManifestRecordOf", coreType: MANIFEST_FRAME, excluded: ["kind", "version", "taskId", "snapshot", "lowering", "ts"], minted: [] },
+    prompt_manifest_identity: { projector: "promptManifestRecordOf", coreType: "PromptManifestIdentity", excluded: [], minted: [] },
+    prompt_manifest_identity_layers: { projector: "promptManifestRecordOf", coreType: "PromptIdentityLayers", excluded: [], minted: [] },
+    prompt_manifest_selectors: { projector: "promptManifestRecordOf", coreType: "PromptManifestSelectors", excluded: [], minted: [] },
+    prompt_manifest_selectors_host: { projector: "promptManifestRecordOf", coreType: `PromptManifestSelectors["host"]`, excluded: [], minted: [] },
+    prompt_manifest_block: { projector: "promptManifestRecordOf", coreType: `${MANIFEST_FRAME}["blocks"][number]`, excluded: [], minted: [] },
+    prompt_manifest_section: { projector: "promptManifestRecordOf", coreType: "PromptManifestSection", excluded: [], minted: [] },
+    prompt_manifest_section_renderer: { projector: "promptManifestRecordOf", coreType: `NonNullable<PromptManifestSection["renderer"]>`, excluded: [], minted: [] },
+    prompt_manifest_chain_link: { projector: "promptManifestRecordOf", coreType: "PromptChainLink", excluded: [], minted: [] },
+    prompt_manifest_superseded: { projector: "promptManifestRecordOf", coreType: "SupersededOverlay", excluded: [], minted: [] },
+    prompt_manifest_tool: { projector: "promptManifestRecordOf", coreType: `NonNullable<${MANIFEST_FRAME}["tools"]>[number]`, excluded: [], minted: [] },
+    prompt_manifest_tool_disclosure: { projector: "promptManifestRecordOf", coreType: "ToolDisclosureManifest", excluded: [], minted: [] },
 };
 //# sourceMappingURL=wire-projection-faces.js.map

package/dist/user-authored-text.d.ts

@@ -28,4 +28,11 @@ export declare function buildObjectivePreview(text: string, chars: number): stri
 export declare const RUN_OBJECTIVE_PREVIEW_CHARS = 120;
 /** run 行的预览:用户写的那段 → 脱敏 → 截 {@link RUN_OBJECTIVE_PREVIEW_CHARS};没有用户正文 ⇒ `""`(列写空串 = 有记录、剥空)。 */
 export declare function buildRunObjectivePreview(objective: string): string;
+/**
+ * 这条消息是不是**附件帧**(core 7.50.0 请求层附件:目标声明的每只文件由引擎铸成一条自己的 user 消息,紧跟目标提交)。
+ * 判据 = 引擎写在消息上的送达记录 `attachment` **在场**(core:那只记录是「这条消息是附件帧」的唯一来源,文本从不判)。坏形记录同样算在场 ——
+ * 两个读者都往「不是人写的话」那一侧落(预览走下一条;会话视图按文件字节脱敏),那是安全的一侧。
+ * 一个事实一个读法:会话视图的处置表(`audit.ts`)与本地会话列表的预览(`plugins/local-session-store.ts`)同调这一只。
+ */
+export declare function isAttachmentFrame(message: unknown): boolean;
 //# sourceMappingURL=user-authored-text.d.ts.map

package/dist/user-authored-text.js

@@ -15,4 +15,7 @@ export const RUN_OBJECTIVE_PREVIEW_CHARS = 120;
 export function buildRunObjectivePreview(objective) {
     return buildObjectivePreview(objective, RUN_OBJECTIVE_PREVIEW_CHARS);
 }
+export function isAttachmentFrame(message) {
+    return typeof message === "object" && message !== null && Object.hasOwn(message, "attachment");
+}
 //# sourceMappingURL=user-authored-text.js.map

package/dist/web-admin-client/apply-effective.js

@@ -1,7 +1,7 @@
 import { expandTiers, resolveTaskModel as coreResolveTaskModel } from "@sema-agent/core";
 import { WEB_ADMIN_ENV, narrowAtMention, resolveActiveTiers, resolveCatalogDefaultModel } from "@sema-agent/settings-schema";
 import { modelKeyPoison } from "../key-resolver.js";
-import { readAtMention } from "../model-select.js";
+import { buildEnvModelIdNotServedNotice, mintCapabilityKeys, readAtMention, servedModelTableLeg } from "../model-select.js";
 import { applyAutoCompactWindow, buildModelCostKey, parseAutonomy, unmatchableToolNamesRefusal } from "../config.js";
 import { buildModelCompat, readModelCompat } from "../model-compat.js";
 import { buildModelHeadersKey } from "../model-entry-headers.js";
@@ -40,8 +40,7 @@ function toModel(m, envDefaults = {}, logger) {
         provider: m.provider,
         api: m.api,
         baseUrl: m.baseUrl ?? "",
-        reasoning: m.reasoning !== undefined ? Boolean(m.reasoning) : (envDefaults.reasoning ?? true),
-        input: m.vision ? ["text", "image"] : ["text"],
+        ...mintCapabilityKeys({ reasoning: m.reasoning, vision: m.vision }),
         contextWindow: m.contextWindow ?? envDefaults.contextWindow ?? 262144,
         maxTokens: m.maxTokens ?? envDefaults.maxTokens ?? 4096,
         ...(charsPerTokenOf(m.charsPerToken) !== undefined || envDefaults.charsPerToken !== undefined
@@ -115,6 +114,7 @@ export function applyEffective(config, eff, logger, opts) {
             }
         }
     }
+    const servedBefore = servedModelTableLeg(config);
     commitStaged(config, staged);
     if (ordered)
         appliedGeneration.set(config, gen);
@@ -138,6 +138,11 @@ export function applyEffective(config, eff, logger, opts) {
         logger?.info("web_admin_limits", { version: staged.version, keys: staged.limits.changed });
     if (mp)
         logger?.info("web_admin_models", mp.infoLine);
+    if (servedBefore === "env") {
+        const notServed = buildEnvModelIdNotServedNotice(config);
+        if (notServed !== undefined)
+            logger?.warn(notServed.event, notServed.fields);
+    }
     if (staged.approvalGate.next !== undefined)
         logger?.info("web_admin_runtime", { version: staged.version, approvalRequire: staged.approvalGate.next });
     if (Object.keys(staged.hot.infoLine).length > 0)
@@ -248,7 +253,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
         const modelApiKeyEnv = {};
         const modelApiKeys = {};
         const envModel = envDerivedModel(config);
-        const envDefaults = { maxTokens: envModel.maxTokens, contextWindow: envModel.contextWindow, reasoning: envModel.reasoning, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, compat: envModel.compat };
+        const envDefaults = { maxTokens: envModel.maxTokens, contextWindow: envModel.contextWindow, charsPerToken: envModel.charsPerToken, defaultThinking: envModel.defaultThinking, compat: envModel.compat };
         for (const m of usable) {
             if (m.baseUrl)
                 logger?.warn("web_admin_model_base_url", { model: m.name, baseUrl: buildDisplaySafeUrl(m.baseUrl), hint: "registry-directed gateway override — this model's key authenticates AGAINST THIS URL" });
@@ -343,7 +348,7 @@ function stageModelPlane(config, eff, logger, sealedKeys) {
         const noDefault = crossInvariant("default-model-resolvable").check({ live: config, next: nextView });
         if (noDefault !== undefined)
             return refuse(DEFAULT_MODEL_MISSING_CODE, noDefault);
-        const endpoint = judgeModelRouteEndpoint(nextView);
+        const endpoint = judgeModelRouteEndpoint(nextView, "catalog");
         if (endpoint !== undefined)
             return refuse(endpoint.code, endpoint.reason);
         const minted = crossInvariant("refused-names-not-minted").check({ live: config, next: nextView });

package/dist/web-admin-client/candidate-gate.d.ts

@@ -2,7 +2,7 @@
  * 配置候选的**唯一判官**:一份候选(中心有效视图,或本地 `config.d` 读出的那份)能不能收 —— 只有这一种判法。
  *
  * 判据(三件,任一即拒;每条拒因带成因词,闭集 {@link CandidateRejectReason}):读腿交出的 `domainErrors`(某个域读不懂 / 拼错键 / 坏文件:那个域已落
- * schema 缺省)与 prompts 面的判形(`validatePromptsDomain`;坏形的 pack 会让 core 在每个任务的装配期抛)—— 成因 `domain_invalid`;读腿交出的
+ * schema 缺省)与 prompts 面的判官(`judgePromptsWire`:契约包的 wire 形再交引擎 verify —— 中心层只有一种形)—— 成因 `domain_invalid`;读腿交出的
  * `retiredDomains`(带事实的退役域文档,契约包的墓碑;拒句点名退役版本与一次性迁移)—— 成因 `retired_domain`。任一 ⇒ `rejected`:
  * **整份候选不收**,一个域都不应用。退役域此前在读腿整包抛、走「源不可达」那条臂(版本读不到、没有拒判行、刷新拍算失败);现在读腿只交数据,
  * 坏候选只有本判官一种判法。
@@ -22,11 +22,11 @@
  * `domains` 排序去重:收集器的顺序没有承诺,它是拒行去重键的一部分(同一份候选、同一组坏域只响一次)。`errors` 原样逐条
  * (读腿的诊断在前、prompts 在后)—— 那是可操作的诊断,不是键。纯函数:不改入参,不读环境。
  *
- * **判官交值**:`clean` 判决带着 prompts 面的已判形值(`prompts`;候选不带 prompts 键 ⇒ `undefined`)。采纳 prompts 的各处(起服 / 刷新 /
- * 迟到起服 / LKG 起服 / `run-local`)直接用这一份值,不再自己判第二遍 —— `validatePromptsDomain` 在 src 里只有本判官一个调用点
+ * **判官交值**:`clean` 判决带着 prompts 面的判官结论(`prompts` = 引擎 verify 过的发布形 artifact;候选不带 prompts 键 ⇒ `undefined`)。采纳 prompts 的各处
+ * (起服 / 刷新 / 迟到起服 / LKG 起服 / `run-local`)直接用这一份值,不再自己判第二遍 —— `judgePromptsWire` 在 src 里只有本判官一个调用点
  * (盘上 LKG 的读回复判也经本判官,`config-lkg.ts`)。
  */
-import { type PromptsDomainFaces } from "../prompts-domain-validate.js";
+import type { PublishedPromptArtifact } from "@sema-agent/core";
 import type { EffectiveConfig } from "./types.js";
 /** 读腿交出的一条域级诊断(与 `FetchEffectiveResult.domainErrors` 同形;error 文案已在产出边界脱敏)。 */
 export interface CandidateDomainError {
@@ -46,10 +46,10 @@ export interface ConfigCandidateRead {
     readonly retiredDomains?: readonly CandidateDomainError[];
 }
 export type ConfigCandidateVerdict = 
-/** `prompts` = 候选 prompts 面的已判形值(候选不带 prompts 键 ⇒ `undefined` = 撤回中心包、内置提示词服务)。 */
+/** `prompts` = 候选的中心层(引擎 verify 过的发布形 artifact;候选不带 prompts 键 ⇒ `undefined` = 撤下中心层、内置提示词服务)。 */
 {
     readonly verdict: "clean";
-    readonly prompts: PromptsDomainFaces | undefined;
+    readonly prompts: PublishedPromptArtifact | undefined;
 } | {
     readonly verdict: "rejected";
     readonly domains: readonly string[];

package/dist/web-admin-client/candidate-gate.js

@@ -1,14 +1,14 @@
-import { validatePromptsDomain } from "../prompts-domain-validate.js";
+import { judgePromptsWire } from "../prompts-domain-validate.js";
 export function judgeConfigCandidate(r) {
     const prompts = r.effective.prompts;
-    const promptsGate = prompts === undefined ? undefined : validatePromptsDomain(prompts);
+    const promptsGate = prompts === undefined ? undefined : judgePromptsWire(prompts);
     const errors = [
         ...(r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error, reason: "domain_invalid" })),
         ...(promptsGate !== undefined && !promptsGate.ok ? [{ domain: "prompts", error: promptsGate.error, reason: "domain_invalid" }] : []),
         ...(r.retiredDomains ?? []).map((rd) => ({ domain: rd.domain, error: rd.error, reason: "retired_domain" })),
     ];
     if (errors.length === 0)
-        return { verdict: "clean", prompts: promptsGate?.ok ? promptsGate.value : undefined };
+        return { verdict: "clean", prompts: promptsGate?.ok ? promptsGate.artifact : undefined };
     return { verdict: "rejected", domains: [...new Set(errors.map((e) => e.domain))].sort(), errors };
 }
 export function buildCandidateRejectedFields(r, verdict, leg, ctx) {

package/dist/web-admin-client/http-client.js

@@ -1,6 +1,5 @@
 import { createHash } from "node:crypto";
 import { readEffectiveWire, PrincipalCapsWire } from "@sema-agent/settings-schema";
-import { centerPromptsFromEffective } from "../prompts-domain-validate.js";
 import { separateRetiredDomains, splitFoldedReadWarnings, withDroppedCatalogEntries } from "./read-warnings.js";
 import { CENTER_PULL_TIMEOUT_MS, centerFetch } from "./center-request.js";
 import { answerStillCurrent } from "../center-credential.js";
@@ -13,11 +12,6 @@ export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
     const warnings = [];
     const { body, retiredDomains } = separateRetiredDomains(await res.json());
     const wire = readEffectiveWire(body, (w) => warnings.push(w));
-    const centerPrompts = centerPromptsFromEffective(wire);
-    if (centerPrompts === undefined)
-        delete wire.prompts;
-    else
-        wire.prompts = centerPrompts;
     const { domainErrors, droppedEntries, droppedCatalogEntries, unreadFiles } = splitFoldedReadWarnings(warnings, "center");
     const effective = withDroppedCatalogEntries(wire, droppedCatalogEntries);
     return {

package/dist/web-admin-client/read-warnings.d.ts

@@ -70,6 +70,19 @@ export type UnreadConfigFile = {
     readonly why: "not-a-domain" | "non-portable-domain";
     readonly domain?: string;
 };
+/**
+ * `config.d` 里一份**被读**的文件中、本地读腿结构上**不读**的一键(本服务铸,不是契约告警):今天只有 `prompts.json` 的 `workers` —— 本地腿没有
+ * worker 身份,中心层的唯一选择读法(`promptArtifactFor`)对它恒以 `null` 读,只交 `artifact`。写了不生效要响:调用方在采纳路径上一键一行 `config_unread_key`
+ * (与 `config_unread_file` 同频:起服与之后每次采纳一份变了的候选),不判拒。
+ */
+export type UnreadConfigKey = {
+    readonly file: string;
+    readonly domain: string;
+    readonly key: string;
+    readonly names: readonly string[];
+};
+/** `config_unread_key` 一行的体(纯数据;起服 / 刷新 / 迟到起服与 `run-local` 同一体):`dir` = 本地读腿的配置根。 */
+export declare function buildUnreadConfigKeyFields(k: UnreadConfigKey, dir: string | undefined): Record<string, unknown>;
 /** `config_unread_file` 一行的体(纯数据;起服 / 刷新 / 迟到起服与 `run-local` 同一体):`dir` = 本地读腿的配置根。 */
 export declare function buildUnreadConfigFileFields(f: UnreadConfigFile, dir: string | undefined): Record<string, unknown>;
 /** 逐条丢弃面的一行(两条读腿的 `droppedEntries` 同形,`config_entry_dropped` 日志行读它):`entry` = 被丢那条的出门形坐标(`models.1`),

package/dist/web-admin-client/read-warnings.js

@@ -22,6 +22,16 @@ export function separateRetiredDomains(body) {
     }
     return findings.length === 0 ? { body, retiredDomains: [] } : { body: rest, retiredDomains: findings };
 }
+export function buildUnreadConfigKeyFields(k, dir) {
+    return {
+        ...(dir !== undefined ? { dir } : {}),
+        file: k.file,
+        domain: k.domain,
+        key: k.key,
+        names: k.names,
+        note: "the local config read has no worker identity, so this key is never read — prompts.json `workers` entries are not delivered, only `artifact` is; put the artifact this engine should run under `artifact` (or remove the key if it is meant for the center)",
+    };
+}
 export function buildUnreadConfigFileFields(f, dir) {
     return {
         ...(dir !== undefined ? { dir } : {}),