@sema-agent/server 7.131.0 → 7.132.0

package/dist/trace/engine-notice-wire.d.ts

@@ -16,7 +16,7 @@
  * 同文件 G1 e2e 的全码扇出夹具、以及契约文档附录 D.3 那张表(含**小节标题里的码数** —— 那道门本批
  * 刚立,立完就在下一次加码时自己咬住了)。
  */
-export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "permission.entry_mode_clamped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored"];
+export declare const ENGINE_NOTICE_WIRE_CODES: readonly ["memory.session_polluted", "memory.harvest_quarantined", "memory.delegation_static_mark_waived", "memory.hold_opened", "memory.hold_released", "memory.hold_disposed", "task.turn_interrupted", "steering.parked_input_blocked", "task.user_steer_undrained", "task.user_followup_undrained", "memory.capture_opted_out", "memory.capture_optout_unpersisted", "task.halt_unconsumed", "task.late_approval", "config.durable_gate_unavailable", "peer.inbound_disposition", "peer.held_settled", "peer.idle_subscription", "classifier.denial_limit", "mcp.injection_dropped", "delegation.ask_unresolvable", "task.interrupt_unconsumed", "approval.read_root_granted", "approval.read_root_grant_rejected", "instructions.source_changed", "session.records_skipped", "server.model_unreachable", "permission.entry_mode_clamped", "classifier.unavailable", "config.permission_mode_unavailable", "permission.ask_released_by_mode", "permission.read_deny_unapplied", "permission.rule_store_unavailable", "permission.rule_row_dropped", "permission.allowed_tool_not_granted", "task.tool_turn_incomplete", "route.finish_reason_unknown", "route.stream_end_ignored", "route.credential_origin_mismatch", "mods.registration_refused", "config.session_rules_earlier_grammar"];
 export type EngineNoticeWireCode = (typeof ENGINE_NOTICE_WIRE_CODES)[number];
 /** 白名单谓词(单点):路由与门都读这一个,不许第二处手抄码串。 */
 export declare function isEngineNoticeWireCode(code: string): code is EngineNoticeWireCode;
@@ -47,6 +47,13 @@ export interface EngineNoticeWireRow {
     /** **服务端观察时刻**(ms epoch)——`EngineNotice` 自身不带时间戳,这是本仓收到它的那一拍,不是 core 铸它的那一拍。 */
     ts: number;
 }
+/**
+ * 上 wire 的**注册方写的自由文本**的唯一出口纪律:`redactSecrets` + 截到 {@link NOTICE_TEXT_MAX}。
+ * 同一个事实(一张扩展注册被判拒、一个判官被跳过)有两个出口 —— 通告 `mods.registration_refused` 的 `detail`(经 {@link sanitizeNoticeDetail})与
+ * `wiring_manifest.mods[]` 的行(`trace/project.ts`)—— 两个出口的每一个串都过这一只,所以同一个串在两边逐字节相等;
+ * 规则只在这里写一次,`mods[]` 行不另造第二份脱敏 / 截长。
+ */
+export declare function sanitizeWireText(text: string): string;
 /**
  * `detail` 消毒(设计稿 ②:`redactSecrets` + 尺寸 bound;`workspaceChangedEventData` 先例)。
  *
@@ -54,7 +61,7 @@ export interface EngineNoticeWireRow {
  * ——§E1 的既有姿态:上 wire 的自由文本一律经本仓的脱敏器,不因为上游说过一次就免检。
  *
  * 契约(逐条,门在 `test/engine-notice-wire.test.ts`):
- *  · 串 ⇒ `redactSecrets` + 截到 {@link NOTICE_TEXT_MAX};
+ *  · 串 ⇒ {@link sanitizeWireText}(`redactSecrets` + 截到 {@link NOTICE_TEXT_MAX});
  *  · 有限 number / boolean / null ⇒ 逐字(harvest 的 count/moved/escalated 是判据数字,不许变形);
  *  · 非有限 number(NaN/Infinity)⇒ **丢键**(JSON 里它们会变成 `null`,一个看起来合法的假读数);
  *  · 数组 ⇒ 逐项消毒,超 {@link DETAIL_MAX_ITEMS} 截断;对象 ⇒ 逐键消毒,超 {@link DETAIL_MAX_KEYS} 丢尾键;
@@ -91,7 +98,8 @@ export declare function redactNoticeMessage(message: unknown): string;
  * 通告 `detail` 里的**规则文本**换成条目的脱敏原值({@link redactListEntry}:凭据换记号,不加引号、不转义 —— 机读位不是显示面,显示形只属于人读句)。
  * 会话流行(经 {@link engineNoticeEventData},之后照常过 {@link sanitizeNoticeDetail})与运维日志行(`boot/runner-deps.ts` 的转发席,其余字段逐字)
  * 同调这一只 ⇒ 两条出路上同一条规则文本逐字节同(会话流行另有 detail 串的 {@link NOTICE_TEXT_MAX} 字上限,超长的那一截只在日志行上),两只码里同一条
- * 规则文本也同(引擎交来的两形本身一致时 —— `rule_row_dropped` 交的是引擎中和过的形,空白 / 超长的条目两只码今天不同,上游缝)。其余字段、其余码原样。
+ * 规则文本也同 —— core 7.53.0(#1884)起引擎交来的两形就是同一只读法的产物(原串,长于 1 024 码点的截到 1 024 + 一枚截断记号;修前 `rule_row_dropped`
+ * 交中和形,空白 / 超长的条目两只码不同)。其余字段、其余码原样。
  */
 export declare function redactNoticeRuleText(code: string, detail: Record<string, unknown> | undefined): Record<string, unknown> | undefined;
 export declare function engineNoticeEventData(notice: {

package/dist/trace/engine-notice-wire.js

@@ -40,6 +40,9 @@ export const ENGINE_NOTICE_WIRE_CODES = [
     "task.tool_turn_incomplete",
     "route.finish_reason_unknown",
     "route.stream_end_ignored",
+    "route.credential_origin_mismatch",
+    "mods.registration_refused",
+    "config.session_rules_earlier_grammar",
 ];
 const WIRE_CODES = new Set(ENGINE_NOTICE_WIRE_CODES);
 export function isEngineNoticeWireCode(code) {
@@ -53,6 +56,9 @@ export function engineNoticeSessionId(notice) {
     return typeof fromDetail === "string" && fromDetail.length > 0 ? fromDetail : undefined;
 }
 const NOTICE_TEXT_MAX = 1000;
+export function sanitizeWireText(text) {
+    return redactSecrets(text).slice(0, NOTICE_TEXT_MAX);
+}
 const DETAIL_MAX_DEPTH = 4;
 const DETAIL_MAX_KEYS = 32;
 const DETAIL_MAX_ITEMS = 32;
@@ -64,7 +70,7 @@ function sanitizeValue(v, depth) {
     if (v === null)
         return null;
     if (typeof v === "string")
-        return redactSecrets(v).slice(0, NOTICE_TEXT_MAX);
+        return sanitizeWireText(v);
     if (typeof v === "number")
         return Number.isFinite(v) ? v : undefined;
     if (typeof v === "boolean")
@@ -99,6 +105,7 @@ function sanitizeValue(v, depth) {
 export const RULE_TEXT_DETAIL_FIELDS = {
     "permission.allowed_tool_not_granted": { array: "entries", field: "entry" },
     "permission.rule_row_dropped": { array: "rows", field: "rule" },
+    "config.session_rules_earlier_grammar": { array: "entries", field: "entry" },
 };
 export function redactNoticeMessage(message) {
     return redactSecrets(String(message));

package/dist/trace/ledger-events.d.ts

@@ -31,7 +31,9 @@
  *    的 `switch (ev.type)` 白名单臂(差集门 `test/durable-append-arm-parity.test.ts` 看守两腿一致);
  *  · **腿自己的带外行**:park/终局/失败/建议/用量/装配自证(不来自流事件)。
  */
-export type LedgerEventType = "reasoning" | "text" | "tool_start" | "tool_end" | "status" | "context_usage" | "compacted" | "diagnostics" | "steering_injected" | "compaction_outcome" | "workspace_changed" | "wiring_manifest"
+export type LedgerEventType = "reasoning" | "text" | "tool_start" | "tool_end" | "status" | "context_usage" | "compacted" | "diagnostics" | "steering_injected" | "compaction_outcome"
+/** S-1732(core 7.53.0 #2008):压缩 pass 的开始帧(`{ trigger, pass, startedAt }`;结束帧带同一个 `pass`)。原样落账,两条 durable 腿同源。 */
+ | "compaction_started" | "workspace_changed" | "wiring_manifest"
 /** S-212(7.71.0):运行期名册变更(core 7.8.0 [ref] ⑪)。**快照语义**——`delta.roster` 是整只
  *  变更后名册,消费端收到即整只替换,所以回放不需要任何合并;它的耐久面因此不是 `wiring_manifest.tools`
  *  的重复,而是那份开腿快照**之后**的每一次改动(修前两条 durable 腿零 case ⇒ 回放只见开头一版)。 */

package/dist/trace/ledger-sink.js

@@ -1,7 +1,7 @@
 import {} from "@sema-agent/core";
 import { outwardPlane } from "../terminal.js";
 import { recordFailOpen } from "../observability/fail-open.js";
-import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
+import { modelTextEventData, toolStartEventData, toolEndEventData, taskProgressEventData, taskStartedEventData, taskNotificationEventData, compactedEventData, diagnosticsEventData, brainStatusEventData, steeringInjectedEventData, compactionOutcomeEventData, compactionStartedEventData, workspaceChangedEventData, wiringManifestEventData, toolRosterDeltaEventData, toolDisclosureEventData, humanInputEventData, turnEndEventData, contextUsageEventData } from "./project.js";
 import { NotifiedKeys, taskNotificationStreamKeyOf } from "../orchestration/workflow-completion-inbox.js";
 import { isParkLedgerEventType } from "./ledger-events.js";
 import { isModelSegmentBoundary, reasoningDeltaBytes, reasoningSegmentEventId } from "./model-segment.js";
@@ -108,6 +108,9 @@ export function createLedgerSink(opts) {
             case "compaction_outcome":
                 await append("compaction_outcome", compactionOutcomeEventData(ev));
                 break;
+            case "compaction_started":
+                await append("compaction_started", compactionStartedEventData(ev));
+                break;
             case "workspace_changed":
                 await append("workspace_changed", workspaceChangedEventData(ev));
                 break;

package/dist/trace/model-segment.js

@@ -2,7 +2,7 @@ import { reasoningEndEventData } from "./project.js";
 const BOUNDARY = new Set([
     "tool_start", "tool_end", "status", "context_usage", "compacted", "diagnostics",
     "steering_injected", "compaction_outcome", "workspace_changed", "wiring_manifest",
-    "tool_roster_delta", "human_input", "task_notification", "turn_end", "tool_disclosure",
+    "tool_roster_delta", "human_input", "task_notification", "turn_end", "tool_disclosure", "compaction_started",
 ]);
 export function isModelSegmentBoundary(type) {
     return BOUNDARY.has(type);

package/dist/trace/project.d.ts

@@ -113,11 +113,7 @@ export type TraceBlock = {
     parentToolCallId?: string;
 } | {
     type: "prompt-assembled";
-    constitution: string;
-    totalChars: number;
-    blocks: unknown;
-    sections?: unknown;
-    tools?: unknown;
+    readonly [member: string]: unknown;
 };
 /**
  * 🔴 **模型自由文本账本行(`text` / `reasoning`)的唯一载荷铸点**(B-106 / S-268,7.75.1)。
@@ -543,6 +539,21 @@ export declare function compactionOutcomeEventData(ev: {
     outcome?: unknown;
     trigger?: unknown;
     reason?: unknown;
+    pass?: unknown;
+    eventId?: unknown;
+    parentToolCallId?: unknown;
+}): Record<string, unknown>;
+/**
+ * `compaction_started`(S-1732,core 7.53.0 #2008)—— 一次压缩 pass 在提交点(触发闸过了、切点在、`preCompact` 没拦)宣告开始,先于摘要调用:
+ * 一次在供应方重试表里等很久的摘要(core 实测 503 × 11、173 s)从此在流上不是静默的。**原样投影**:`{ trigger, pass, startedAt }` + 身份两键,
+ * 不自铸相位、不铸 run / session id(那是流的,不是帧的键)。三键都是引擎铸的闭形值:`trigger` 闭集词(`auto` / `manual` / `forced`,与结束帧同一张词表)、
+ * `pass` 不透明 id(结束这次 pass 的那一帧 —— `compacted` 或 `compaction_outcome` —— 带同一个 `pass`)、`startedAt` 引擎时钟 epoch 毫秒 ⇒ 不脱敏、逐字;
+ * 形不合即缺席(与 {@link compactionOutcomeEventData} 同款守卫,不编值)。三条消费腿(live 帧、两条 durable 腿)共用这一只。
+ */
+export declare function compactionStartedEventData(ev: {
+    trigger?: unknown;
+    pass?: unknown;
+    startedAt?: unknown;
     eventId?: unknown;
     parentToolCallId?: unknown;
 }): Record<string, unknown>;
@@ -806,7 +817,7 @@ export declare function wiringManifestEventData(ev: {
  * `core-keyset-guard.ts` ⑥b `WiringSectionExcluded`)。**present-iff 武装**:
  *  · 整段缺席 ⇒ **未武装**,不铸键、不计数(正面事实,不是「未知」,更不是 `{onRecommendation:false}`);
  *  · 在场且 `onRecommendation === true` ⇒ 逐字铸出(core 的在场形只有这一个,构造期门已拒掉「武装但跑不起来」);
- *  · 在场但读不出那个形 ⇒ `dropProjectedFace` 留痕并整段缺席(与 `writeProtection` / `lsp` / `hooks` 同一条
+ *  · 在场但读不出那个形 ⇒ `dropProjectedFace` 留痕并整段缺席(与 `writeProtection` / `lsp` / `mods` 同一条
  *    族规:「在场但读不出 ⇒ 计一次并丢弃」;**不**自造第三态,词表/形的属主在 core)。
  *    🔴 代价如实登记,与 `writeProtection` 那一格逐字同源:wire 上「读不出」与「真未武装」是**同一个形**,
  *    分得开它们的只有 `server.trace.projection-input-malformed` 这只计数 —— 而这一格比那一格更该说清楚,
@@ -932,6 +943,8 @@ export declare function compactedEventData(ev: {
         persistMs?: number;
         ptlRetries?: number;
     };
+    /** S-1732(core 7.53.0 #2008):这次落地的压缩 pass 的 id —— 与它的 `compaction_started` 帧同一个值(引擎在每次落地上都设;型上可选)。逐字。 */
+    pass?: string;
 }): Record<string, unknown>;
 export interface TraceTurn {
     /** per-task seq = the turn's terminating event seq (so history-up-to-H splices with stream seq>H). */

package/dist/trace/project.js

@@ -3,6 +3,7 @@ import { MCP_DELIVERY_VERDICTS, MCP_LIVENESS_STATES, screenGateOutcome, TEAM_ROL
 import { Value } from "typebox/value";
 import { recordFailOpen } from "../observability/fail-open.js";
 import { redactSecrets, redactDeep } from "./redact.js";
+import { sanitizeWireText } from "./engine-notice-wire.js";
 import { projectToolOutput, projectToolStructured } from "./tool-output-media.js";
 import { injectionTierOrAbsent } from "./injection-tier.js";
 import { semaProvenanceOrAbsent } from "./sema-provenance.js";
@@ -380,6 +381,16 @@ export function compactionOutcomeEventData(ev) {
         ...(s(ev.outcome) !== undefined ? { outcome: s(ev.outcome) } : {}),
         ...(s(ev.trigger) !== undefined ? { trigger: s(ev.trigger) } : {}),
         ...(ev.reason !== undefined ? { reason: redactSecrets(String(ev.reason)) } : {}),
+        ...(s(ev.pass) !== undefined ? { pass: s(ev.pass) } : {}),
+        ...identityFields(ev),
+    };
+}
+export function compactionStartedEventData(ev) {
+    const s = (v) => (typeof v === "string" ? v : undefined);
+    return {
+        ...(s(ev.trigger) !== undefined ? { trigger: s(ev.trigger) } : {}),
+        ...(s(ev.pass) !== undefined ? { pass: s(ev.pass) } : {}),
+        ...(typeof ev.startedAt === "number" && Number.isFinite(ev.startedAt) ? { startedAt: ev.startedAt } : {}),
         ...identityFields(ev),
     };
 }
@@ -513,26 +524,55 @@ export function wiringManifestEventData(ev, instructions) {
     })();
     const toolsIn = m.tools;
     const tools = toolsIn === undefined ? undefined : Value.Check(ToolRoster, toolsIn) ? toolsIn : (recordFailOpen("server.trace.tool-roster-malformed", "wiring_manifest.tools did not fit core ToolRoster"), undefined);
-    const hooksIn = m.hooks;
-    const hooks = (() => {
-        if (hooksIn === undefined)
+    const strList = (v) => (Array.isArray(v) && v.every((x) => typeof x === "string") ? [...v] : undefined);
+    const registrantText = (v) => {
+        const t = str(v);
+        return t === undefined ? undefined : sanitizeWireText(t);
+    };
+    const modsIn = m.mods;
+    const mods = (() => {
+        if (modsIn === undefined)
             return undefined;
-        if (!Array.isArray(hooksIn))
-            return dropProjectedFace("wiring_manifest.hooks is not an array");
+        if (!Array.isArray(modsIn))
+            return dropProjectedFace("wiring_manifest.mods is not an array");
         const rows = [];
-        for (const raw of hooksIn) {
+        for (const raw of modsIn) {
             const e = sec(raw);
-            if (e === undefined) {
-                dropProjectedFace("wiring_manifest.hooks[] row is not an object");
+            const name = registrantText(e?.name);
+            const seat = str(e?.seat);
+            const tier = str(e?.tier);
+            if (e === undefined || name === undefined || seat === undefined || tier === undefined) {
+                dropProjectedFace("wiring_manifest.mods[] row is missing name/seat/tier");
+                continue;
+            }
+            const refusedBy = registrantText(e.refusedBy);
+            const reason = registrantText(e.reason);
+            if (refusedBy !== undefined && reason !== undefined) {
+                rows.push({ name, seat, tier, refusedBy, reason });
                 continue;
             }
-            const family = str(e.family);
-            const owner = str(e.owner);
-            if (family === undefined || owner === undefined) {
-                dropProjectedFace("wiring_manifest.hooks[] row is missing family/owner");
+            const events = strList(e.events);
+            if (events === undefined) {
+                dropProjectedFace("wiring_manifest.mods[] row is neither a mounted nor a refused record");
                 continue;
             }
-            rows.push({ family, owner, ...(e.observational === true ? { observational: true } : {}) });
+            const observe = e.observe === undefined ? undefined : (strList(e.observe) ?? dropProjectedFace("wiring_manifest.mods[].observe is not a list of strings"));
+            const skipped = e.skipped === undefined
+                ? undefined
+                : Array.isArray(e.skipped)
+                    ? e.skipped.flatMap((x) => {
+                        const k = sec(x);
+                        const registration = registrantText(k?.registration);
+                        const cause = registrantText(k?.cause);
+                        const why = registrantText(k?.reason);
+                        if (registration === undefined || cause === undefined || why === undefined) {
+                            dropProjectedFace("wiring_manifest.mods[].skipped[] element is missing registration/cause/reason");
+                            return [];
+                        }
+                        return [{ registration, cause, reason: why }];
+                    })
+                    : dropProjectedFace("wiring_manifest.mods[].skipped is not an array");
+            rows.push({ name, seat, tier, events, ...(observe !== undefined ? { observe } : {}), ...(skipped !== undefined && skipped.length > 0 ? { skipped } : {}) });
         }
         return rows.length > 0 ? rows : undefined;
     })();
@@ -606,7 +646,7 @@ export function wiringManifestEventData(ev, instructions) {
         ...(autoMode !== undefined ? { autoMode } : {}),
         ...(tools !== undefined ? { tools } : {}),
         ...(mcp !== undefined ? { mcp } : {}),
-        ...(hooks !== undefined ? { hooks } : {}),
+        ...(mods !== undefined ? { mods } : {}),
         ...(lsp !== undefined ? { lsp } : {}),
         ...(hands !== undefined ? { hands } : {}),
         ...(writeProtection !== undefined ? { writeProtection } : {}),
@@ -758,6 +798,7 @@ export function compactedEventData(ev) {
         })(),
         ...(num(ev.durationMs) !== undefined ? { durationMs: num(ev.durationMs) } : {}),
         ...(phaseDurations !== undefined ? { phaseDurations } : {}),
+        ...(typeof ev.pass === "string" ? { pass: ev.pass } : {}),
     };
 }
 export function contextUsageEventData(ev) {
@@ -880,14 +921,7 @@ export function projectEvents(events, opts = {}) {
             }
             case "prompt_assembled":
                 firstTs ??= ev.ts;
-                blocks.push({
-                    type: "prompt-assembled",
-                    constitution: String(d.constitution ?? ""),
-                    totalChars: Number(d.totalChars ?? 0),
-                    blocks: d.blocks,
-                    ...(d.sections !== undefined ? { sections: d.sections } : {}),
-                    ...(d.tools !== undefined ? { tools: d.tools } : {}),
-                });
+                blocks.push({ ...d, type: "prompt-assembled" });
                 break;
             case "turn_end":
                 flushTurn(ev.seq, ev.ts, toContractTokens(d.usage, d.usageMissing));
@@ -966,6 +1000,7 @@ function mapTraceEventInner(type, seq, data) {
             return { event: "error", data: { type: "error", errorCode: "WORKER_DOWN", message: redactErrorMessage(String(data.errorMessage ?? "run failed")) ?? "run failed" } };
         case "context_usage":
         case "compaction_outcome":
+        case "compaction_started":
         case "wiring_manifest":
         case "human_input":
         case "tool_roster_delta":

package/dist/trace/wire-projection-faces.d.ts

@@ -54,7 +54,7 @@ export interface WireProjectionFace {
  */
 export declare const FRAME_ENVELOPE_KEYS: readonly ["type", "sourceTaskId", "bgAgentId"];
 /** 探针文件要从 `@sema-agent/core` 具名导入的类型(`coreType` 表达式里用到的全部名字)。 */
-export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin"];
+export declare const WIRE_PROJECTION_CORE_IMPORTS: readonly ["TaskEvent", "TaskNotificationPayload", "WiringManifest", "EngineNotice", "MemoryImportReport", "OriginClearanceRow", "OriginClearanceEvent", "MemoryEntryOrigin", "TraceEvent", "PromptManifestIdentity", "PromptIdentityLayers", "PromptManifestSelectors", "PromptManifestSection", "PromptChainLink", "SupersededOverlay", "ToolDisclosureManifest"];
 /**
  * `wiring_manifest` 的 **operator 面多投的那几段**(`wiringManifestOperatorEventData` 在租户形之上加的段)。
  * operator 行的 `excluded` = 租户行减本常量(派生);四段各自的受众裁定在 `core-keyset-guard.ts` ⑥b。
@@ -158,6 +158,12 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
+    readonly compaction_started: {
+        readonly projector: "compactionStartedEventData";
+        readonly coreType: string;
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
     readonly human_input: {
         readonly projector: "humanInputEventData";
         readonly coreType: string;
@@ -216,6 +222,78 @@ export declare const WIRE_PROJECTION_FACES: {
         readonly excluded: readonly [];
         readonly minted: readonly [];
     };
+    readonly prompt_manifest: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "Extract<TraceEvent, { kind: \"prompt.assembled\" }>";
+        readonly excluded: readonly ["kind", "version", "taskId", "snapshot", "lowering", "ts"];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_identity: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestIdentity";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_identity_layers: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptIdentityLayers";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_selectors: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSelectors";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_selectors_host: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSelectors[\"host\"]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_block: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"blocks\"][number]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_section: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptManifestSection";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_section_renderer: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "NonNullable<PromptManifestSection[\"renderer\"]>";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_chain_link: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "PromptChainLink";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_superseded: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "SupersededOverlay";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_tool: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "NonNullable<Extract<TraceEvent, { kind: \"prompt.assembled\" }>[\"tools\"]>[number]";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
+    readonly prompt_manifest_tool_disclosure: {
+        readonly projector: "promptManifestRecordOf";
+        readonly coreType: "ToolDisclosureManifest";
+        readonly excluded: readonly [];
+        readonly minted: readonly [];
+    };
 };
 /** 面名。 */
 export type WireProjectionFaceName = keyof typeof WIRE_PROJECTION_FACES;

package/dist/trace/wire-projection-faces.js

@@ -8,8 +8,17 @@ export const WIRE_PROJECTION_CORE_IMPORTS = [
     "OriginClearanceRow",
     "OriginClearanceEvent",
     "MemoryEntryOrigin",
+    "TraceEvent",
+    "PromptManifestIdentity",
+    "PromptIdentityLayers",
+    "PromptManifestSelectors",
+    "PromptManifestSection",
+    "PromptChainLink",
+    "SupersededOverlay",
+    "ToolDisclosureManifest",
 ];
 const arm = (name) => `Extract<TaskEvent, { type: "${name}" }>`;
+const MANIFEST_FRAME = `Extract<TraceEvent, { kind: "prompt.assembled" }>`;
 export const WIRING_MANIFEST_OPERATOR_ONLY_SECTIONS = ["governance", "configFingerprint", "autoConsolidation", "readDeny"];
 function withoutSections(all, drop) {
     return all.filter((k) => !drop.includes(k));
@@ -30,6 +39,7 @@ export const WIRE_PROJECTION_FACES = {
     context_usage: { projector: "contextUsageEventData", coreType: arm("context_usage"), excluded: [], minted: [] },
     turn_end: { projector: "turnEndEventData", coreType: arm("turn_end"), excluded: [], minted: [] },
     compaction_outcome: { projector: "compactionOutcomeEventData", coreType: arm("compaction_outcome"), excluded: [], minted: [] },
+    compaction_started: { projector: "compactionStartedEventData", coreType: arm("compaction_started"), excluded: [], minted: [] },
     human_input: { projector: "humanInputEventData", coreType: arm("human_input"), excluded: ["principal"], minted: [] },
     task_notification: {
         projector: "taskNotificationEventData",
@@ -67,5 +77,17 @@ export const WIRE_PROJECTION_FACES = {
     },
     origin_clearance_origin: { projector: "buildClearanceRowWire", coreType: "MemoryEntryOrigin", excluded: [], minted: [] },
     origin_clearance_event: { projector: "buildClearanceRowWire", coreType: "OriginClearanceEvent", excluded: [], minted: [] },
+    prompt_manifest: { projector: "promptManifestRecordOf", coreType: MANIFEST_FRAME, excluded: ["kind", "version", "taskId", "snapshot", "lowering", "ts"], minted: [] },
+    prompt_manifest_identity: { projector: "promptManifestRecordOf", coreType: "PromptManifestIdentity", excluded: [], minted: [] },
+    prompt_manifest_identity_layers: { projector: "promptManifestRecordOf", coreType: "PromptIdentityLayers", excluded: [], minted: [] },
+    prompt_manifest_selectors: { projector: "promptManifestRecordOf", coreType: "PromptManifestSelectors", excluded: [], minted: [] },
+    prompt_manifest_selectors_host: { projector: "promptManifestRecordOf", coreType: `PromptManifestSelectors["host"]`, excluded: [], minted: [] },
+    prompt_manifest_block: { projector: "promptManifestRecordOf", coreType: `${MANIFEST_FRAME}["blocks"][number]`, excluded: [], minted: [] },
+    prompt_manifest_section: { projector: "promptManifestRecordOf", coreType: "PromptManifestSection", excluded: [], minted: [] },
+    prompt_manifest_section_renderer: { projector: "promptManifestRecordOf", coreType: `NonNullable<PromptManifestSection["renderer"]>`, excluded: [], minted: [] },
+    prompt_manifest_chain_link: { projector: "promptManifestRecordOf", coreType: "PromptChainLink", excluded: [], minted: [] },
+    prompt_manifest_superseded: { projector: "promptManifestRecordOf", coreType: "SupersededOverlay", excluded: [], minted: [] },
+    prompt_manifest_tool: { projector: "promptManifestRecordOf", coreType: `NonNullable<${MANIFEST_FRAME}["tools"]>[number]`, excluded: [], minted: [] },
+    prompt_manifest_tool_disclosure: { projector: "promptManifestRecordOf", coreType: "ToolDisclosureManifest", excluded: [], minted: [] },
 };
 //# sourceMappingURL=wire-projection-faces.js.map

package/dist/web-admin-client/candidate-gate.d.ts

@@ -2,7 +2,7 @@
  * 配置候选的**唯一判官**:一份候选(中心有效视图,或本地 `config.d` 读出的那份)能不能收 —— 只有这一种判法。
  *
  * 判据(三件,任一即拒;每条拒因带成因词,闭集 {@link CandidateRejectReason}):读腿交出的 `domainErrors`(某个域读不懂 / 拼错键 / 坏文件:那个域已落
- * schema 缺省)与 prompts 面的判形(`validatePromptsDomain`;坏形的 pack 会让 core 在每个任务的装配期抛)—— 成因 `domain_invalid`;读腿交出的
+ * schema 缺省)与 prompts 面的判官(`judgePromptsWire`:契约包的 wire 形再交引擎 verify —— 中心层只有一种形)—— 成因 `domain_invalid`;读腿交出的
  * `retiredDomains`(带事实的退役域文档,契约包的墓碑;拒句点名退役版本与一次性迁移)—— 成因 `retired_domain`。任一 ⇒ `rejected`:
  * **整份候选不收**,一个域都不应用。退役域此前在读腿整包抛、走「源不可达」那条臂(版本读不到、没有拒判行、刷新拍算失败);现在读腿只交数据,
  * 坏候选只有本判官一种判法。
@@ -22,11 +22,11 @@
  * `domains` 排序去重:收集器的顺序没有承诺,它是拒行去重键的一部分(同一份候选、同一组坏域只响一次)。`errors` 原样逐条
  * (读腿的诊断在前、prompts 在后)—— 那是可操作的诊断,不是键。纯函数:不改入参,不读环境。
  *
- * **判官交值**:`clean` 判决带着 prompts 面的已判形值(`prompts`;候选不带 prompts 键 ⇒ `undefined`)。采纳 prompts 的各处(起服 / 刷新 /
- * 迟到起服 / LKG 起服 / `run-local`)直接用这一份值,不再自己判第二遍 —— `validatePromptsDomain` 在 src 里只有本判官一个调用点
+ * **判官交值**:`clean` 判决带着 prompts 面的判官结论(`prompts` = 引擎 verify 过的发布形 artifact;候选不带 prompts 键 ⇒ `undefined`)。采纳 prompts 的各处
+ * (起服 / 刷新 / 迟到起服 / LKG 起服 / `run-local`)直接用这一份值,不再自己判第二遍 —— `judgePromptsWire` 在 src 里只有本判官一个调用点
  * (盘上 LKG 的读回复判也经本判官,`config-lkg.ts`)。
  */
-import { type PromptsDomainFaces } from "../prompts-domain-validate.js";
+import type { PublishedPromptArtifact } from "@sema-agent/core";
 import type { EffectiveConfig } from "./types.js";
 /** 读腿交出的一条域级诊断(与 `FetchEffectiveResult.domainErrors` 同形;error 文案已在产出边界脱敏)。 */
 export interface CandidateDomainError {
@@ -46,10 +46,10 @@ export interface ConfigCandidateRead {
     readonly retiredDomains?: readonly CandidateDomainError[];
 }
 export type ConfigCandidateVerdict = 
-/** `prompts` = 候选 prompts 面的已判形值(候选不带 prompts 键 ⇒ `undefined` = 撤回中心包、内置提示词服务)。 */
+/** `prompts` = 候选的中心层(引擎 verify 过的发布形 artifact;候选不带 prompts 键 ⇒ `undefined` = 撤下中心层、内置提示词服务)。 */
 {
     readonly verdict: "clean";
-    readonly prompts: PromptsDomainFaces | undefined;
+    readonly prompts: PublishedPromptArtifact | undefined;
 } | {
     readonly verdict: "rejected";
     readonly domains: readonly string[];

package/dist/web-admin-client/candidate-gate.js

@@ -1,14 +1,14 @@
-import { validatePromptsDomain } from "../prompts-domain-validate.js";
+import { judgePromptsWire } from "../prompts-domain-validate.js";
 export function judgeConfigCandidate(r) {
     const prompts = r.effective.prompts;
-    const promptsGate = prompts === undefined ? undefined : validatePromptsDomain(prompts);
+    const promptsGate = prompts === undefined ? undefined : judgePromptsWire(prompts);
     const errors = [
         ...(r.domainErrors ?? []).map((de) => ({ domain: de.domain, error: de.error, reason: "domain_invalid" })),
         ...(promptsGate !== undefined && !promptsGate.ok ? [{ domain: "prompts", error: promptsGate.error, reason: "domain_invalid" }] : []),
         ...(r.retiredDomains ?? []).map((rd) => ({ domain: rd.domain, error: rd.error, reason: "retired_domain" })),
     ];
     if (errors.length === 0)
-        return { verdict: "clean", prompts: promptsGate?.ok ? promptsGate.value : undefined };
+        return { verdict: "clean", prompts: promptsGate?.ok ? promptsGate.artifact : undefined };
     return { verdict: "rejected", domains: [...new Set(errors.map((e) => e.domain))].sort(), errors };
 }
 export function buildCandidateRejectedFields(r, verdict, leg, ctx) {

package/dist/web-admin-client/http-client.js

@@ -1,6 +1,5 @@
 import { createHash } from "node:crypto";
 import { readEffectiveWire, PrincipalCapsWire } from "@sema-agent/settings-schema";
-import { centerPromptsFromEffective } from "../prompts-domain-validate.js";
 import { separateRetiredDomains, splitFoldedReadWarnings, withDroppedCatalogEntries } from "./read-warnings.js";
 import { CENTER_PULL_TIMEOUT_MS, centerFetch } from "./center-request.js";
 import { answerStillCurrent } from "../center-credential.js";
@@ -13,11 +12,6 @@ export async function fetchEffective(center, etag, fetchImpl = fetch, worker) {
     const warnings = [];
     const { body, retiredDomains } = separateRetiredDomains(await res.json());
     const wire = readEffectiveWire(body, (w) => warnings.push(w));
-    const centerPrompts = centerPromptsFromEffective(wire);
-    if (centerPrompts === undefined)
-        delete wire.prompts;
-    else
-        wire.prompts = centerPrompts;
     const { domainErrors, droppedEntries, droppedCatalogEntries, unreadFiles } = splitFoldedReadWarnings(warnings, "center");
     const effective = withDroppedCatalogEntries(wire, droppedCatalogEntries);
     return {

package/dist/web-admin-client/read-warnings.d.ts

@@ -70,6 +70,19 @@ export type UnreadConfigFile = {
     readonly why: "not-a-domain" | "non-portable-domain";
     readonly domain?: string;
 };
+/**
+ * `config.d` 里一份**被读**的文件中、本地读腿结构上**不读**的一键(本服务铸,不是契约告警):今天只有 `prompts.json` 的 `workers` —— 本地腿没有
+ * worker 身份,中心层的唯一选择读法(`promptArtifactFor`)对它恒以 `null` 读,只交 `artifact`。写了不生效要响:调用方在采纳路径上一键一行 `config_unread_key`
+ * (与 `config_unread_file` 同频:起服与之后每次采纳一份变了的候选),不判拒。
+ */
+export type UnreadConfigKey = {
+    readonly file: string;
+    readonly domain: string;
+    readonly key: string;
+    readonly names: readonly string[];
+};
+/** `config_unread_key` 一行的体(纯数据;起服 / 刷新 / 迟到起服与 `run-local` 同一体):`dir` = 本地读腿的配置根。 */
+export declare function buildUnreadConfigKeyFields(k: UnreadConfigKey, dir: string | undefined): Record<string, unknown>;
 /** `config_unread_file` 一行的体(纯数据;起服 / 刷新 / 迟到起服与 `run-local` 同一体):`dir` = 本地读腿的配置根。 */
 export declare function buildUnreadConfigFileFields(f: UnreadConfigFile, dir: string | undefined): Record<string, unknown>;
 /** 逐条丢弃面的一行(两条读腿的 `droppedEntries` 同形,`config_entry_dropped` 日志行读它):`entry` = 被丢那条的出门形坐标(`models.1`),

package/dist/web-admin-client/read-warnings.js

@@ -22,6 +22,16 @@ export function separateRetiredDomains(body) {
     }
     return findings.length === 0 ? { body, retiredDomains: [] } : { body: rest, retiredDomains: findings };
 }
+export function buildUnreadConfigKeyFields(k, dir) {
+    return {
+        ...(dir !== undefined ? { dir } : {}),
+        file: k.file,
+        domain: k.domain,
+        key: k.key,
+        names: k.names,
+        note: "the local config read has no worker identity, so this key is never read — prompts.json `workers` entries are not delivered, only `artifact` is; put the artifact this engine should run under `artifact` (or remove the key if it is meant for the center)",
+    };
+}
 export function buildUnreadConfigFileFields(f, dir) {
     return {
         ...(dir !== undefined ? { dir } : {}),

package/dist/web-admin-client/skills-mcp.d.ts

@@ -18,6 +18,9 @@ export type SkillBodySource = Pick<ConfigProvider, "fetchSkillContent" | "skillB
  * hash, deduped in memory (same hash read once). A skill whose body is absent at the source or fails to read (incl. the
  * remote transport's hash check) is NOT installed — exactly one `web_admin_skill_failed` warn names it (`reason`:
  * `body_absent` | `read_failed`), the baseline of that name (if any) stays, and boot is never blocked.
+ * 🔴 **「正文在场」只有一条判据:非空串**({@link skillBodyPresent})。配置源答 `undefined`(没有这个 hash)与答 `""`(空正文)同为缺席 ⇒ `body_absent`:
+ * 一条空正文的技能是**惰性无提示**(名册里有它、模型调用回空、零行日志),不是「装了个什么都不说的技能」。本地腿尤其:settings-schema 把缺省的 `content`
+ * 补成 `""`,本地配置源因此**永远答得出**(空串)—— 没有这一条,`body_absent` 臂只在中心形上可达。本地 / 中心 / 盘缓存三个来源同过这一只判据。
  * Restart-to-apply: this runs at boot, before `buildScenarios` bakes skills into scenarios.
  */
 export declare function applySkillsManifest(baseline: LoadedSkill[], manifest: {