@sema-agent/server 7.130.0 → 7.132.0

package/dist/boot/stage-06-runners.js

@@ -4,6 +4,7 @@ import { createSessionTitler } from "../session-titler.js";
 import { cardRuleScopeRoot } from "../task-cwd.js";
 import { ForkRoutingSessionStore } from "../plugins/fork-routing-session-store.js";
 import { withoutHands } from "../capabilities/hands-lane.js";
+import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { redactSecrets } from "../trace/redact.js";
 import { hasServiceAuth } from "../http/server.js";
 import { workflowModelAllowlistFor } from "../task-workflow.js";
@@ -23,7 +24,7 @@ import { createSharedMemoryScopeAuthorizer } from "../shared-memory-scope-author
 import { parkedAskRedeem, runStore } from "./late-binds.js";
 import { withInternalRunEnvs } from "../internal-run-env.js";
 export function runStage06(ctx) {
-    const { backend, backgroundAgentStore, brain, engineDataRoot, config, webAdmin, consolidationValve, deploymentHooks, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
+    const { backend, backgroundAgentStore, brain, engineDataRoot, config, webAdmin, consolidationValve, deploymentMods, executionEnvFactory, fileHistoryStore, localRoot, logger, lspManager, mailboxRecipientLifecycle, mailboxStore, memoryEngine, memorySyncRunner, metrics, perSessionCwd, permissionRuleProvider, pricing, rosterStore, ruleConsent, sendUserFileTaskEnvs, sessionCaptureRecordStore, sessionCaptureRecords, sessionPolicyStore, sessionStore, taskAttachmentStore, taskListLane, toolResultStore, tracer, usageWindowStore } = ctx;
     const { sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion, workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink, workflowRecoverOpts, workflowAgentRegistry, subagentSteerRegistry, workflowAgentSessionIndex, } = createWorkflowOrchestration({ config, logger, metrics, localRoot, backend, getRunStore: () => runStore });
     const parkCommitted = backend?.checkpoint && config.durableApproval ? createParkCommitWatch(backend.checkpoint(logger)) : undefined;
     const checkpointStore = parkCommitted?.store;
@@ -45,7 +46,7 @@ export function runStage06(ctx) {
     if (sharedMemoryStore)
         logger.info("shared_memory_stores_enabled", { backend: backend?.kind });
     const runnerOffloadStore = toolResultStore ?? new InMemoryToolResultStore({ maxTotalChars: 64_000_000 });
-    const commitHands = config.configProvider === "local" ? { commitCoAuthor: "Sema <noreply@vivi-ai.com>" } : undefined;
+    const commitHands = isBrandedDeployment(config) ? { commitCoAuthor: "Sema <noreply@vivi-ai.com>" } : undefined;
     const retentionExecutor = backend?.retention?.({ taskAttachmentTable: taskAttachmentStore !== undefined, taskListTables: taskListLane.backend !== "memory", logger });
     const retentionLaneStore = backend?.retentionLane?.();
     assertRetentionLaneWirable({
@@ -120,7 +121,7 @@ export function runStage06(ctx) {
         sessionCaptureRecords,
         memorySyncRunner, toolResultStore: runnerOffloadStore, checkpointStore, sessionPolicyStore, runtimeCapsResolver, fileHistoryStore,
         permissionRuleStore: permissionRuleProvider,
-        executionEnvFactory, lspManager, fleetBus, deploymentHooks, workflowRunStore, workflowJournalStore,
+        executionEnvFactory, lspManager, fleetBus, deploymentMods, workflowRunStore, workflowJournalStore,
         workflowAgentRegistry, workflowNotifyGate, workflowCompletionInbox, deliverWorkflowCompletion, orgMemoryAdmission,
         governanceSeams,
         sharedMemoryStores: sharedMemoryStore ? sharedMemoryStore : undefined,
@@ -192,7 +193,7 @@ export function runStage06(ctx) {
             backgroundAgentStore,
             mailboxStore,
             rosterStore,
-            deploymentHooks,
+            deploymentMods,
             toolResultStore: runnerOffloadStore,
             checkpointStore,
             sessionPolicyStore,

package/dist/boot/stage-07-capability-layer.d.ts

@@ -75,7 +75,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    deploymentHooks: import("@sema-agent/core").Hooks;
+    deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
@@ -150,7 +150,7 @@ export declare function runStage07(ctx: Awaited<ReturnType<typeof runStage06>>):
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore;
-    sqlEngineFacts: (() => import("../plugins/sql-driver.js").SqlEngineFacts | null) | undefined;
+    sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;

package/dist/boot/stage-07-capability-layer.js

@@ -11,6 +11,7 @@ import { executionLaneOf } from "../execution-lane-caps.js";
 import { loadDeploymentSkills } from "../capabilities/skills.js";
 import { createRepoClient } from "../capabilities/repo-tools.js";
 import { buildScenarios, builtinScenarioDetails, danglingScenarioRefusal } from "../capabilities/scenarios.js";
+import { isBrandedDeployment } from "../capabilities/brand-identity.js";
 import { RateLimiter } from "../observability/rate-limit.js";
 import { explicitOperatorOk } from "../http/server.js";
 import { selfOrchestrationDenial } from "../task-workflow.js";
@@ -133,7 +134,7 @@ export async function runStage07(ctx) {
         ? backend.rateLimiter(config.rateLimitPerMin, counterDegradeHook).startRefresh()
         : new RateLimiter(config.rateLimitPerMin);
     bindRateLimiter(rateLimiter);
-    let skills = loadDeploymentSkills(config);
+    let skills = loadDeploymentSkills(config, logger);
     skills = await webAdmin.applyCenterCapabilities(skills);
     const repoClient = config.gitApiBaseUrl ? createRepoClient(config.gitApiKind, config.gitApiBaseUrl, config.gitApiToken) : undefined;
     const webSearchCfg = webSearchConfigFromEnv();
@@ -159,7 +160,6 @@ export async function runStage07(ctx) {
         checkpointStore: checkpointStore ? checkpointStore : undefined,
         ensureChildSessionDurable: ensureChildSessionDurable ? ensureChildSessionDurable : undefined,
         taskListStoreFor: taskListLane.storeFor,
-        brandIdentity: config.configProvider === "local",
         subagentExtraTools: sendUserFileToolSpec ? subagentSendUserFileExtraTools({ spec: sendUserFileToolSpec }) : undefined,
     };
     const scenarios = buildScenarios(scenarioDeps);
@@ -174,7 +174,7 @@ export async function runStage07(ctx) {
             autoModeSeatMounted: runnerDeps.autoMode !== undefined,
         })
         : undefined;
-    const scenarioDetails = builtinScenarioDetails(scenarios, scenarioDeps);
+    const scenarioDetails = builtinScenarioDetails(scenarios, scenarioDeps, isBrandedDeployment(config));
     const builtinScenarioNames = Object.keys(scenarioDetails);
     webAdmin.applyCenterScenarios({ scenarioDeps, scenarios, scenarioDetails, builtinScenarioNames });
     const defaultScenarioRefusal = danglingScenarioRefusal(config.defaultScenario, "deployment", Object.keys(scenarios));

package/dist/boot/stage-08-reapers.d.ts

@@ -88,7 +88,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    deploymentHooks: import("@sema-agent/core").Hooks;
+    deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
@@ -163,7 +163,7 @@ export declare function runStage08(ctx: Awaited<ReturnType<typeof runStage07>>):
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore;
-    sqlEngineFacts: (() => import("../plugins/sql-driver.js").SqlEngineFacts | null) | undefined;
+    sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;

package/dist/boot/stage-09-leader.d.ts

@@ -28,13 +28,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
             modelId: string;
         } | null;
         messages: unknown[];
-        promptEpoch?: {
-            epoch: number;
-            artifactDigest: string;
-            packId: string;
-            assemblyApi: number;
-            activatedBy: "session_start" | "compaction" | "legacy_migration";
-        };
+        promptEpoch?: import("@sema-agent/core").StoredPromptEpoch;
     } | undefined>) | undefined;
     sessionWatchRegistry: import("../session-watch.js").SessionWatchRegistry | undefined;
     staticWiring: import("@sema-agent/core").WiringManifest;
@@ -117,7 +111,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    deploymentHooks: import("@sema-agent/core").Hooks;
+    deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
@@ -192,7 +186,7 @@ export declare function runStage09(ctx: Awaited<ReturnType<typeof runStage08>>):
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../index.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore;
-    sqlEngineFacts: (() => import("../plugins/sql-driver.js").SqlEngineFacts | null) | undefined;
+    sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;

package/dist/boot/stage-10-http-server.d.ts

@@ -27,13 +27,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
             modelId: string;
         } | null;
         messages: unknown[];
-        promptEpoch?: {
-            epoch: number;
-            artifactDigest: string;
-            packId: string;
-            assemblyApi: number;
-            activatedBy: "session_start" | "compaction" | "legacy_migration";
-        };
+        promptEpoch?: import("@sema-agent/core").StoredPromptEpoch;
     } | undefined>) | undefined;
     sessionWatchRegistry: import("../session-watch.js").SessionWatchRegistry | undefined;
     staticWiring: import("@sema-agent/core").WiringManifest;
@@ -116,7 +110,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     };
     workflowRunStore: import("../orchestration/workflow-notify-journal.js").JournalingWorkflowRunStore | undefined;
     workflowsCapable: boolean;
-    deploymentHooks: import("@sema-agent/core").Hooks;
+    deploymentMods: readonly import("@sema-agent/core").ModRegistration<import("@sema-agent/core").EngineDollar>[];
     deviceLane: import("./device-lane.js").DeviceLane | undefined;
     dropSessionScoped: (sid: string) => void;
     executionEnvFactory: import("@sema-agent/core").ExecutionEnvFactory | undefined;
@@ -191,7 +185,7 @@ export declare function runStage10(ctx: Awaited<ReturnType<typeof runStage09>>):
     sessionCaptureRecordStore: import("@sema-agent/core").SessionCaptureRecordStore | undefined;
     sessionCaptureRecords: import("../plugins/store-backend.js").SessionCaptureRecordSource | undefined;
     sessionStore: import("@sema-agent/core").SessionStore;
-    sqlEngineFacts: (() => import("../plugins/sql-driver.js").SqlEngineFacts | null) | undefined;
+    sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
     storePosture: import("../store-posture.js").StorePosture;
     taskAttachmentStore: import("../plugins/task-attachment-store.js").TaskAttachmentStore | undefined;
     taskListLane: import("./task-list-lane.js").TaskListLane;

package/dist/boot/stage-10-http-server.js

@@ -9,7 +9,7 @@ import { createHttpServer } from "../http/server.js";
 import { exportMemoryScope } from "../memory-export.js";
 import { performMemorySync } from "../memory-sync.js";
 import { backgroundAgentOutput, taskHandleOutput, taskHandleStop } from "../runs.js";
-import { SQL_BLOB_DEFAULT_MAX_BYTES } from "../plugins/blob-backend.js";
+import { sqlBlobCapOf } from "../plugins/blob-backend.js";
 import { createStoreLiveProbe } from "../store-live-probe.js";
 import { counterStoreLabel } from "../plugins/store-backend.js";
 import { sessionStoreLabelOf } from "../store-posture.js";
@@ -30,7 +30,7 @@ import { bindServerLateSeats } from "./late-binds.js";
 import { serviceVersion } from "../service-version.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 export async function runStage10(ctx) {
-    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deploymentHooks, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngineFacts, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
+    const { approvalAskAudit, approvalExemptionStore, approvalNonceStore, authorize, backend, backgroundAgentStore, brain, breakerState, centerRuntimeCapsResolver, checkpointStore, parkCommits, config, webAdmin, consolidationValve, costQuota, deviceLane, drainState, durableEnabled, elicitation, fenceSessionOwner, fileHistoryStore, fleetBus, fleetLease, fleetUsage, governanceSeams, handslessRunner, hookAgent, hookLlm, hookWakeBus, imageBakes, imageIndex, instanceId, instrumentDegenerate, leaderEndpoint, localRoot, logger, lspManager, mcpRevocations, memoryBundleFaces, memoryComplianceFaces, memoryConsolidationFaces, memoryEngine, memoryExportBackend, memoryOptOutGrantStore, memoryOriginFaces, memoryPosture, memorySyncCursors, metrics, modelUsageTracker, orgMemoryAdmission, otelExporter, outcomeSink, ownerAware, parkedReviveInheritedGate, parkedReviveSurface, perSessionCwd, perTaskImage, planCacheProbe, pricing, principalCaps, promptManifestTracker, purgeSession, question, rateLimiter, reaper, webAdminJwtVerifier, resumeAnchorStore, retentionLaneStarted, retentionLaneStore, ruleConsent, runStore, runner, runnerDeps, runtimeCapsPeekResolver, scenarioDetails, scenarios, selectEnvTool, sendFileLedger, sendUserFileEmitter, sendUserFileToolSpec, sessionAudit, sessionEnvSelection, sessionMemoryStatusFace, sessionPolicyStore, sessionTitler, sessionWatchRegistry, setSessionCwd, setSessionInheritEnv, setSessionShellEnv, sharedMemoryStore, sideQueryAccounting, sqlEngine, sqlWorkflowRunStore, staticWiring, storePosture, subRunner, subagentSteerRegistry, taskAttachmentStore, taskLimitCaps, taskTimeoutSec, toolApproval, toolResultStore, usageWindowStore, userInputLedger, webSearchProvider, workflowAgentRegistry, workflowAgentSessionIndex, workflowCompletionInbox, workflowJournalStore, workflowModelAllowlistSnapshot, workflowNotifyGate, workflowNotifyJournal, workflowRecoverOpts, workflowRunStore, workflowsCapable } = ctx;
     const stores = {
         runStore,
         resumeAnchorStore: resumeAnchorStore ? resumeAnchorStore : undefined,
@@ -103,7 +103,6 @@ export async function runStage10(ctx) {
         sessionMirrorRuling: principalCaps
             ? async (p) => (await principalCaps.executionRuling(p))?.sessionMirror
             : undefined,
-        scenarioGate: createScenarioGate({ config, scenarios, principalCaps, logger }, "peek"),
         instrumentDegenerate,
         sideQueryAccounting,
         parkedReviveSurface: parkedReviveSurface ? parkedReviveSurface : undefined,
@@ -163,7 +162,7 @@ export async function runStage10(ctx) {
         workflowModelAllowlist: workflowModelAllowlistSnapshot,
         staticWiring,
         memoryPosture,
-        sqlEngineFacts,
+        sqlEngine,
         writeProtection: buildWriteProtectionPosture(config),
         webSearchProvider,
         sealedKeyPublic: webAdmin.sealedKeyPublic,
@@ -192,19 +191,18 @@ export async function runStage10(ctx) {
         storeLiveState: storeLiveProbe ? () => storeLiveProbe.state() : undefined,
     };
     const knobs = {
-        snapshotBlobSqlCapBytes: backend && backend.kind !== "local" && !config.snapshotBlobStore
-            ? (config.snapshotBlobSqlMaxBytes ?? (backend.kind === "mysql" ? SQL_BLOB_DEFAULT_MAX_BYTES : undefined))
+        snapshotBlobSqlCap: sqlEngine !== undefined && !config.snapshotBlobStore
+            ? () => sqlBlobCapOf(config.snapshotBlobSqlMaxBytes, sqlEngine)
             : undefined,
         sessionEventsMaxConnections: sessionWatchRegistry ? posIntEnv(process.env.SESSION_EVENTS_MAX_CONNS, 256, 100_000) : undefined,
     };
     const resolveSpec = createResolveSpec({
         config, logger, metrics, localRoot, scenarios, principalCaps, centerRuntimeCapsResolver,
-        getCenterPrompts: () => webAdmin.getCenterPrompts(),
         getKeyResolver: () => webAdmin.getKeyResolver(),
         taskAttachmentStore, perSessionCwd, setSessionCwd, setSessionShellEnv, fenceSessionOwner,
         hookLlm, hookAgent, fleetBus, hookWakeBus, resumeAnchorStore, ownerAware, taskLimitCaps, taskTimeoutSec,
         selectEnvTool, sendUserFileToolSpec, memoryEngine, durableEnabled, approvalExemptionStore,
-        checkpointStore, deploymentHooks, imageIndex, perTaskImage,
+        checkpointStore, imageIndex, perTaskImage,
         sessionEnvSelection,
         lockedKeys: governanceSeams.lockedKeys,
         liveQuestionFace: question,
@@ -212,7 +210,8 @@ export async function runStage10(ctx) {
     });
     const runnerFor = createHandsRunnerSelector({ full: runner, handsless: handslessRunner });
     const sideQuery = createSideQueryLane({ brain, config, getKeyResolver: () => webAdmin.getKeyResolver() });
-    const server = createHttpServer({ runner, runnerFor, sideQuery, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
+    const scenarioGate = createScenarioGate({ config, scenarios, principalCaps, logger }, "peek");
+    const server = createHttpServer({ runner, runnerFor, sideQuery, scenarioGate, config, resolveSpec, stores, coordinators, seams, observability, governance, deployment, knobs });
     bindServerLateSeats({ config, logger, server });
     const fleetReconcile = startFleetReconciler({
         bus: fleetBus,
@@ -284,8 +283,11 @@ export async function runStage10(ctx) {
     const failoverFirstByte = buildFailoverFirstByteNotice(config);
     if (failoverFirstByte)
         logger.warn("failover_first_byte_lane", failoverFirstByte);
+    const bound = server.address();
+    if (bound === null || typeof bound === "string")
+        throw new Error(`http server listening without a TCP address (server.address() = ${JSON.stringify(bound)})`);
     logger.info("listening", {
-        port: config.port,
+        port: bound.port,
         bindHost: bindHost ?? "0.0.0.0/::(all interfaces)",
         ...(bindHost === "127.0.0.1" && !config.bindHost
             ? { bindHostNote: "auto-narrowed to loopback: write face is unauthenticated (ALLOW_UNAUTHED_WRITES with no service token). Set BIND_HOST explicitly to override." }

package/dist/boot/stores.d.ts

@@ -34,6 +34,6 @@ export declare function openStores(ctx: OpenStoresCtx): Promise<{
     usageWindowStore: import("@sema-agent/core").UsageWindowStore | undefined;
     memoryPosture: import("../memory-posture.js").MemoryPosture;
     taskListLane: import("./task-list-lane.js").TaskListLane;
-    sqlEngineFacts: (() => import("../plugins/sql-driver.js").SqlEngineFacts | null) | undefined;
+    sqlEngine: import("../plugins/sql-driver.js").SqlEngineReading | undefined;
 }>;
 //# sourceMappingURL=stores.d.ts.map

package/dist/boot/stores.js

@@ -37,7 +37,7 @@ import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
 import { resolveStreamApprovalGate } from "../tool-approval.js";
 import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit, effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
-import { establishSqlEnginePosture } from "../sql-engine-posture.js";
+import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js";
 import { buildStorePosture } from "../store-posture.js";
 import { buildDisplaySafeUrl } from "../trace/redact.js";
 const DARK_REASON_PROSE = {
@@ -393,11 +393,10 @@ export async function openStores(ctx) {
             await ensureTiDBTaskListSchema(mysqlPool);
         return createTaskListLane({ mysqlPool, pgPool, logger });
     })();
-    let sqlEngineFacts;
+    let sqlEngine;
     {
-        const mysqlPool = backend?.mysqlPool?.();
-        const pgPool = backend?.pgPool?.();
-        sqlEngineFacts = await establishSqlEnginePosture({ mysqlPool, pgPool });
+        const { mysqlPool, pgPool } = sqlPoolsOf(backend);
+        sqlEngine = await establishSqlEnginePosture({ mysqlPool, pgPool });
         if (pgPool)
             await ensurePgDeviceSchema(async (text, params) => pgPool.query(text, params));
         if (mysqlPool)
@@ -450,7 +449,7 @@ export async function openStores(ctx) {
     return {
         backend, storePosture, memoryEngine, engineDataRoot, memorySyncCursors, rosterStore, backgroundAgentStore, mailboxRecipientLifecycle,
         taskAttachmentStore, mailboxStore, memoryExportBackend, memorySyncRunner, sessionStore, breakerState,
-        usageWindowStore, memoryPosture, taskListLane, sqlEngineFacts,
+        usageWindowStore, memoryPosture, taskListLane, sqlEngine,
     };
 }
 //# sourceMappingURL=stores.js.map

package/dist/boot/web-admin.d.ts

@@ -1,7 +1,6 @@
 import { type ModelRefusalsSignal } from "@sema-agent/settings-schema";
 import { CenterPromptSource, type SwappableDeps } from "@sema-agent/core";
 import { buildPricing } from "../budget.js";
-import { type PromptsDomainFaces } from "../prompts-domain-validate.js";
 import { type Scenario, type ScenarioDeps, type ScenarioDetail } from "../capabilities/scenarios.js";
 import type { LoadedSkill } from "../capabilities/skills.js";
 import { type ServiceConfig } from "../config.js";
@@ -96,8 +95,6 @@ export interface WebAdminRuntime {
     getKeyResolver(): ((model: ModelKeyRef) => Promise<{
         apiKey: string;
     } | undefined>) | undefined;
-    /** 晚绑取值:center 提示词面(热采用,新任务边界生效)。 */
-    getCenterPrompts(): PromptsDomainFaces | undefined;
     /** boot ready 门:布防(`CONFIG_REQUIRE_ROSTER=true`,远程 registry 非 dryRun)且 roster 未落地 =
      *  计费提交 503 + /health ready:false。缺省未布防 ⇒ 恒 true。 */
     modelReady(): boolean;

package/dist/boot/web-admin.js

@@ -8,8 +8,7 @@ import { buildModelRefusalsSignal } from "../model-entry-refusal.js";
 import { CenterPromptSource, FilePromptArtifactStore, FilePromptSourceStateStore, MemoryPromptArtifactStore, MemoryPromptSourceStateStore, } from "@sema-agent/core";
 import { buildPricing } from "../budget.js";
 import { applyCenterPlugins } from "../capabilities/center-plugins.js";
-import { applyCatalogToSource, withPromptArtifactBackfill } from "../capabilities/center-prompts.js";
-import { CORE_ENGINE_VERSION } from "../prompts-domain-validate.js";
+import { applyCenterArtifact, centerSourceOnError, withPromptArtifactBackfill } from "../capabilities/center-prompts.js";
 import { centerScenarios, centerScenarioDetails } from "../capabilities/scenarios.js";
 import { isRosterGateArmed } from "../config.js";
 import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, legacyV1LkgPath, migrateV1Lkg } from "../config-lkg.js";
@@ -22,11 +21,11 @@ import { buildSealedKeyPublicFace, ensureSealedKeyStore, reportExecutionPublicKe
 import { applyEffective, applyCenterReadFace, buildReadFaceBaseline, buildReadFaceSwapCandidate, restoreReadFaceBaseline, mutateInPlace, logEffectiveDiff, applySkillsManifest, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, fetchPromptArtifact } from "../web-admin-client/facade.js";
 import { buildConfigHandoff, buildRestartSignal, configHandoffMissing } from "../fleet/engine-signal.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../web-admin-client/mcp-revocation.js";
-import { buildUnreadConfigFileFields } from "../web-admin-client/read-warnings.js";
+import { buildUnreadConfigFileFields, buildUnreadConfigKeyFields } from "../web-admin-client/read-warnings.js";
 import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, candidateRejectionOf, judgeConfigCandidate } from "../web-admin-client/candidate-gate.js";
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
-import { buildDeploymentPostureSeats } from "./runner-deps.js";
+import { announceReadDenyRows, buildDeploymentPostureSeats } from "./runner-deps.js";
 function lkgReadNote(scope) {
     switch (scope) {
         case "whole":
@@ -143,6 +142,8 @@ export async function createWebAdminRuntime(ctx) {
     const warnReadNotices = (r, phase) => {
         for (const f of r.unreadFiles ?? [])
             logger.warn("config_unread_file", buildUnreadConfigFileFields(f, localDirField.dir));
+        for (const k of r.unreadKeys ?? [])
+            logger.warn("config_unread_key", buildUnreadConfigKeyFields(k, localDirField.dir));
         for (const d of r.droppedEntries ?? []) {
             logger.warn("config_entry_dropped", {
                 domain: d.domain,
@@ -202,15 +203,15 @@ export async function createWebAdminRuntime(ctx) {
         applyLedger.recordApply(rep);
         publishModelRefusals(buildModelRefusalsSignal(rep.modelRefusals));
     };
-    let centerPrompts;
-    let pendingCatalogFaces;
+    let adoptedArtifact;
+    let pendingCenterTarget;
     const retryPendingCatalog = async (phase) => {
-        if (!pendingCatalogFaces)
+        if (!pendingCenterTarget)
             return;
-        const { target } = pendingCatalogFaces;
-        if (await applyCatalogToSource(catalogSource, target, centerPrompts, logger, phase)) {
-            centerPrompts = target;
-            pendingCatalogFaces = undefined;
+        const { target } = pendingCenterTarget;
+        if (await applyCenterArtifact(catalogSource, target, adoptedArtifact, logger, phase)) {
+            adoptedArtifact = target;
+            pendingCenterTarget = undefined;
         }
     };
     const promptEpochDir = join(config.localDataRoot ?? localRoot, "prompt-epoch");
@@ -253,6 +254,7 @@ export async function createWebAdminRuntime(ctx) {
         },
     });
     const withByDigestBackfill = (inner) => cc?.baseUrl ? withPromptArtifactBackfill(inner, (d) => fetchPromptArtifact(cc, d), logger) : inner;
+    const sourceOnError = centerSourceOnError(logger);
     const promptSource = (() => {
         try {
             const bootBin = promptStateBin();
@@ -261,15 +263,15 @@ export async function createWebAdminRuntime(ctx) {
             return new CenterPromptSource({
                 store: withByDigestBackfill(new FilePromptArtifactStore(promptEpochDir)),
                 stateStore: recordingStateStore(binnedPromptStateStore(fileStateStoreFor)),
-                engineVersion: CORE_ENGINE_VERSION,
+                onError: sourceOnError,
             });
         }
         catch (e) {
-            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: String(e), note: "file-backed prompt-epoch store unavailable — memory fallback (catalog candidate not restart-durable); built-ins/declaration axis unaffected" });
+            logger.warn("center_prompts_store_unwritable", { dir: promptEpochDir, err: String(e), note: "file-backed prompt-epoch store unavailable — memory fallback (the center candidate is not restart-durable); built-ins unaffected" });
             return new CenterPromptSource({
                 store: withByDigestBackfill(new MemoryPromptArtifactStore()),
                 stateStore: recordingStateStore(binnedPromptStateStore(storePerBin(() => new MemoryPromptSourceStateStore()))),
-                engineVersion: CORE_ENGINE_VERSION,
+                onError: sourceOnError,
             });
         }
     })();
@@ -281,14 +283,14 @@ export async function createWebAdminRuntime(ctx) {
     };
     const rebasePromptState = async (identity, phase) => {
         promptStateIdentity = identity;
-        centerPrompts = undefined;
-        pendingCatalogFaces = undefined;
+        adoptedArtifact = undefined;
+        pendingCenterTarget = undefined;
         promptPersisted = undefined;
         try {
             await promptSource.restore();
         }
         catch (e) {
-            logger.warn("center_prompts_catalog_restore_failed", { phase, err: String(e), note: "the persisted catalog state for this credential identity could not be loaded — catalog candidate absent until the next adopt; declaration axis and built-ins unaffected" });
+            logger.warn("center_prompts_catalog_restore_failed", { phase, err: String(e), note: "the persisted center-layer state for this credential identity could not be loaded — the center candidate is absent until the next adopt; built-ins unaffected" });
         }
         if (cc !== undefined && identity !== undefined && currentIdentity() !== identity) {
             promptStateIdentity = undefined;
@@ -304,36 +306,33 @@ export async function createWebAdminRuntime(ctx) {
             await rebasePromptState(adoptedIdentity, phase);
         }
         if (prompts === undefined) {
-            if (centerPrompts)
-                logger.info("center_prompts_cleared", { phase, note: "effective carries no prompts key (publish gate off) — built-in providers resume" });
-            const cleared = await applyCatalogToSource(catalogSource, undefined, centerPrompts, logger, phase);
+            if (adoptedArtifact)
+                logger.info("center_prompts_cleared", { phase, note: "effective carries no prompts key (publish gate off / nothing published) — the built-in prompt serves new tasks" });
+            const cleared = await applyCenterArtifact(catalogSource, undefined, adoptedArtifact, logger, phase);
             if (cleared) {
-                centerPrompts = undefined;
-                pendingCatalogFaces = undefined;
+                adoptedArtifact = undefined;
+                pendingCenterTarget = undefined;
             }
             else {
-                pendingCatalogFaces = { target: undefined };
+                pendingCenterTarget = { target: undefined };
             }
             return;
         }
-        if (centerPrompts?.identity !== prompts.identity) {
+        if (adoptedArtifact?.artifactDigest !== prompts.artifactDigest) {
             logger.info("center_prompts_adopted", {
                 phase,
-                axes: prompts.axes,
-                ...(prompts.declarations
-                    ? { packId: prompts.declarations.packId, contentDigest: prompts.declarations.contentDigest, sections: prompts.declarations.sections.length, scenarioOverrides: Object.keys(prompts.declarations.scenarioOverrides ?? {}).length }
-                    : {}),
-                ...(prompts.catalog ? { artifactDigest: prompts.catalog.artifact.artifactDigest, catalogDigest: prompts.catalog.artifact.payload.catalogDigest, sourceRevision: prompts.catalog.sourceRevision } : {}),
-                note: "new tasks assemble the new pack (epoch re-pins at the next task boundary); in-flight sessions stay pinned",
+                artifactDigest: prompts.artifactDigest,
+                sourceRevision: prompts.sourceRevision,
+                note: "new sessions adopt this center layer (a session pins it at its first run); in-flight sessions stay pinned",
             });
         }
-        const transitioned = await applyCatalogToSource(catalogSource, prompts, centerPrompts, logger, phase);
+        const transitioned = await applyCenterArtifact(catalogSource, prompts, adoptedArtifact, logger, phase);
         if (transitioned) {
-            centerPrompts = prompts;
-            pendingCatalogFaces = undefined;
+            adoptedArtifact = prompts;
+            pendingCenterTarget = undefined;
         }
         else {
-            pendingCatalogFaces = { target: prompts };
+            pendingCenterTarget = { target: prompts };
         }
     };
     let bootConfigPending;
@@ -666,6 +665,8 @@ export async function createWebAdminRuntime(ctx) {
             restoreReadFaceBaseline(config, before);
             throw err;
         }
+        if (changedSeats.includes("readDenyPatterns"))
+            announceReadDenyRows(config, logger);
     };
     let ccTimer;
     return {
@@ -678,7 +679,6 @@ export async function createWebAdminRuntime(ctx) {
         },
         mcpRevocationState: () => (configProvider ? mcpRevocations.view() : undefined),
         getKeyResolver: () => keyResolver,
-        getCenterPrompts: () => centerPrompts,
         modelReady: () => modelReadyState.ready,
         onSelfReportChange: (listener) => {
             selfReportListeners.push(listener);

package/dist/brain.js

@@ -4,7 +4,7 @@ import { buildDefaultResilience } from "./config-types.js";
 import { resolveModelApiKey } from "./key-resolver.js";
 import { createHash } from "node:crypto";
 import { isModelKeyPoison, modelKeyPoisonIdentity } from "./key-resolver.js";
-import { dispatchBrainLane } from "./model-provider.js";
+import { anthropicRouteRoot, brainLaneFor, mountRoutes, routeTableOf } from "./model-provider.js";
 import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
 import { catalogEntryFingerprint } from "./web-admin-client/restart-signal.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
@@ -77,23 +77,18 @@ export function createBrainAssembly(config, deps = {}) {
         : openaiBrains.length > 1
             ? createFailoverBrain(openaiBrains)
             : openaiBrains[0];
-    const anthropicCfg = config.anthropic;
-    const anthropicBrain = anthropicCfg
-        ? constructRouteBrain("anthropic route", [anthropicCfg.baseUrl], () => createAnthropicBrain({
-            ...(anthropicCfg.authToken
-                ? { headers: { Authorization: `Bearer ${anthropicCfg.authToken}` } }
-                : { apiKey: anthropicCfg.apiKey }),
-            baseUrl: anthropicCfg.baseUrl ?? "https://api.anthropic.com",
-            version: anthropicCfg.version,
-            cacheBreakpoints: anthropicCfg.cacheBreakpoints,
-            ...(anthropicCfg.maxRetries !== undefined ? { maxRetries: anthropicCfg.maxRetries } : {}),
-            fetchImpl,
-            ...timeouts,
-        }))
-        : undefined;
-    let brain = anthropicBrain
-        ? createRoutingBrain({ anthropic: anthropicBrain }, { fallback: gatewayBrain })
-        : gatewayBrain;
+    const brainRoutes = mountRoutes(config, (anthropicCfg) => constructRouteBrain("anthropic route", [anthropicCfg.baseUrl], () => createAnthropicBrain({
+        ...(anthropicCfg.authToken
+            ? { headers: { Authorization: `Bearer ${anthropicCfg.authToken}` } }
+            : { apiKey: anthropicCfg.apiKey }),
+        baseUrl: anthropicRouteRoot(anthropicCfg),
+        version: anthropicCfg.version,
+        cacheBreakpoints: anthropicCfg.cacheBreakpoints,
+        ...(anthropicCfg.maxRetries !== undefined ? { maxRetries: anthropicCfg.maxRetries } : {}),
+        fetchImpl,
+        ...timeouts,
+    })));
+    let brain = Object.keys(brainRoutes).length > 0 ? createRoutingBrain(brainRoutes, { fallback: gatewayBrain }) : gatewayBrain;
     let degradeBaked = null;
     if (config.degrade?.reactive) {
         const degradeTo = config.degrade.to;
@@ -104,12 +99,12 @@ export function createBrainAssembly(config, deps = {}) {
             const ownEnvRef = credential.apiKeyEnv !== undefined ? { [fallbackModel.name]: credential.apiKeyEnv } : {};
             const ownSealed = credential.sealed !== undefined ? { [fallbackModel.name]: credential.sealed } : {};
             const fbOwnApiKey = () => resolveModelApiKey(fallbackModel.name, ownEnvRef, process.env, ownSealed);
-            const anthropicLaneHop = dispatchBrainLane(fallbackModel.provider, anthropicBrain !== undefined) === "anthropic";
+            const anthropicLaneHop = brainLaneFor(fallbackModel.provider, brainRoutes) === "anthropic";
             const fbDeclaredRoot = degradeDeclaredRoot(fallbackModel.baseUrl, config);
             const fbDeploymentKey = deploymentGatewayKey(config);
-            const fallback = anthropicLaneHop && anthropicBrain
+            const fallback = anthropicLaneHop
                 ?
-                    anthropicBrain
+                    brainRoutes.anthropic
                 : constructRouteBrain(`degrade target "${degradeTo}"`, [fallbackModel.baseUrl, config.gatewayBaseUrl], () => createOpenAIBrain({
                     ...(fbDeclaredRoot !== undefined ? { baseUrl: fbDeclaredRoot } : {}),
                     ...(fbDeploymentKey ? { apiKey: fbDeploymentKey } : {}),
@@ -223,7 +218,7 @@ export function brainSummary(config) {
             const target = degradeTarget;
             if (!target)
                 return { reactiveDegradeRoutePairing: null, reactiveDegradeRouteRefusal: null };
-            if (dispatchBrainLane(target.provider, config.anthropic !== undefined) === "anthropic") {
+            if (brainLaneFor(target.provider, routeTableOf(config)) === "anthropic") {
                 return { reactiveDegradeRoutePairing: "anthropic-lane", reactiveDegradeRouteRefusal: null };
             }
             const credential = degradeCredentialIdentityOf(config, target);

package/dist/budget.js

@@ -93,9 +93,11 @@ export function createTracer(metrics, costQuota, modelUsage, fleetUsage, fleetLe
             const weightedTokens = Math.round((e.totalInputTokens + e.completionTokens) * qw);
             fleetUsage?.record(currentPrincipal(), e.model, e.taskId, { inputTokens: e.totalInputTokens, outputTokens: e.completionTokens, ...(e.costMicroUsd !== undefined ? { costMicroUsd: e.costMicroUsd } : {}), weightedTokens, quotaWeightAtUse: qw });
             fleetLease?.recordSpend(currentPrincipal(), { weightedTokens, ...(e.costMicroUsd !== undefined ? { costMicroUsd: e.costMicroUsd } : {}) });
-            if (e.firstTokenMs !== undefined)
-                metrics.observe("brain_first_token_ms", e.firstTokenMs);
-            metrics.observe("brain_call_latency_ms", e.latencyMs);
+            if (e.turn !== undefined) {
+                if (e.firstTokenMs !== undefined)
+                    metrics.observe("brain_first_token_ms", e.firstTokenMs);
+                metrics.observe("brain_call_latency_ms", e.latencyMs);
+            }
         }
         else if (e.kind === "tool.call") {
             metrics.inc("tool_calls_total", { name: toolName(e.name), ok: String(e.ok) });
@@ -107,7 +109,6 @@ export function createTracer(metrics, costQuota, modelUsage, fleetUsage, fleetLe
             metrics.inc("degraded_total", { reason: e.reason });
         }
         else if (e.kind === "prompt.assembled") {
-            metrics.inc("prompt_constitution_total", { mode: e.constitution });
             promptManifests?.record(e.taskId, promptManifestRecordOf(e));
         }
         else if (e.kind === "config.assembled") {

package/dist/caller-text-echo.d.ts

@@ -0,0 +1,20 @@
+/** 回显的字符上限(剥完控制与双向字符之后数)。 */
+export declare const CALLER_TEXT_ECHO_MAX_CHARS = 64;
+/** 站点给的回显选项。 */
+export interface EchoCallerTextOptions {
+    /** 回显的字符上限(剥完控制与双向字符之后数);不给 = {@link CALLER_TEXT_ECHO_MAX_CHARS}。必须是正整数,否则抛 `RangeError`(编程错误,不静默落成某个长度)。 */
+    readonly maxChars?: number;
+}
+/** 调用方写的串的回显形(不带引号):剥控制与双向字符 → 截到 `maxChars`(缺省 {@link CALLER_TEXT_ECHO_MAX_CHARS})字 + 「…」。 */
+export declare function echoCallerText(text: string, opts?: EchoCallerTextOptions): string;
+/** 句子里点名一个值的写法:{@link echoCallerText} 外加一对双引号。 */
+export declare function quotedCallerText(text: string): string;
+/**
+ * 一个**判不过**的申报名(MCP server / A2A 对端的 `name`)在拒句 / 告警元数据里的回显:非串只说种类、空串说 `empty`,否则按本口径的引号形
+ * 外加送来的原长度(运维要的是「我那个名字长了多少」,不是一屏乱码)。判据本身不在这里:「能不能用」只有契约包的 `isUsableWireName` 一只
+ * (请求腿 / 声明腿同读),本函数只管回显 —— 回显清洗是消费方按自己的腿定的(契约包的判官模块头注同此分工)。
+ */
+export declare function describeBadWireName(v: unknown): string;
+/** 一个词表外的 `contentOrigin` 值在拒句 / 告警元数据里的回显:串 ⇒ 本口径的引号形;非串 ⇒ 只说种类。判据是契约包的 `isContentOriginWord`(不在这里)。 */
+export declare function describeBadContentOrigin(v: unknown): string;
+//# sourceMappingURL=caller-text-echo.d.ts.map