@sema-agent/server 7.132.0 → 7.134.0

package/dist/boot/stores.js

@@ -34,7 +34,6 @@ import { assertApprovalAskRuleMaterialSchema } from "../plugins/approval-ask-sto
 import { assertSchemaMatchesCode } from "../plugins/schema-consistency.js";
 import { assertCheckpointColumnSchema } from "../plugins/checkpoint-store-sql.js";
 import { assertFileHistorySchema } from "../plugins/file-history-store-sql.js";
-import { resolveStreamApprovalGate } from "../tool-approval.js";
 import { buildMemoryBoundaryLaneFacts, buildMemoryWriteBoundaryAudit, effectiveMemoryPersistenceCapable } from "./memory-boundary.js";
 import { buildMemoryPosture } from "../memory-posture.js";
 import { establishSqlEnginePosture, sqlPoolsOf } from "../sql-engine-posture.js";
@@ -45,6 +44,14 @@ const DARK_REASON_PROSE = {
     multi_tenant_file_backend: () => "multi-tenant on the FILE backend (no tenant isolation; set MEMORY_ENGINE_BACKEND=pg|tidb to light up)",
     remote_lane_split: (lane) => `remote exec lane "${lane}" (worker/sandbox file planes split; MEMORY_ENGINE_REMOTE_LANE=allow overrides)`,
 };
+export async function assertApprovalAskRuleMaterialOnBackend(backend) {
+    const mysqlPool = backend?.mysqlPool?.();
+    const pgPool = backend?.pgPool?.();
+    if (pgPool)
+        await assertApprovalAskRuleMaterialSchema(async (sql) => ({ rows: (await pgPool.query(sql)).rows }), "pg");
+    else if (mysqlPool)
+        await assertApprovalAskRuleMaterialSchema(async (sql) => ({ rows: (await mysqlPool.query(sql))[0] }), "tidb");
+}
 export async function openStores(ctx) {
     const { config, logger, metrics, localRoot } = ctx;
     let backend;
@@ -83,17 +90,6 @@ export async function openStores(ctx) {
             else if (mysqlPool)
                 await assertPermissionRuleTicketSchema(async (sql) => ({ rows: (await mysqlPool.query(sql))[0] }), "tidb");
         }
-        if (resolveStreamApprovalGate({
-            toolApprovalEnabled: config.toolApprovalEnabled === true,
-            streamApprovalEnabled: config.streamApproval.enabled,
-            backend,
-            parkFacility: backend?.checkpoint !== undefined && config.durableApproval === true,
-        }).active) {
-            if (pgPool)
-                await assertApprovalAskRuleMaterialSchema(async (sql) => ({ rows: (await pgPool.query(sql)).rows }), "pg");
-            else if (mysqlPool)
-                await assertApprovalAskRuleMaterialSchema(async (sql) => ({ rows: (await mysqlPool.query(sql))[0] }), "tidb");
-        }
         if (pgPool)
             await assertFileHistorySchema(async (sql) => ({ rows: (await pgPool.query(sql)).rows }), "pg");
         else if (mysqlPool)
@@ -377,7 +373,7 @@ export async function openStores(ctx) {
                 ...(config.memorySync.maxPushEntries !== undefined ? { maxPushEntries: config.memorySync.maxPushEntries } : {}),
                 ...(config.memorySync.maxPullEntries !== undefined ? { maxPullEntries: config.memorySync.maxPullEntries } : {}),
             });
-            logger.info("memory_sync_enabled", { url: buildDisplaySafeUrl(config.memorySync.url), scope: config.memorySync.scope, cursorPath: memorySyncRunner.cursorPath });
+            logger.info("memory_sync_enabled", { url: buildDisplaySafeUrl(config.memorySync.url), scope: config.memorySync.scope, cursorPath: memorySyncRunner.cursorPathFor(config.memorySync.scope) });
             memorySyncRunner.trigger("boot");
         }
         else {
@@ -436,7 +432,7 @@ export async function openStores(ctx) {
     const breakerState = backend?.breaker && config.resilience.circuitBreaker
         ? backend
             .breaker((streak) => {
-            metrics.setGauge("counter_flush_fail_streak", streak, { table: "circuit_breaker", kind: "write_through" });
+            metrics.setGauge("counter_flush_fail_streak", streak, { table: "breaker_state", kind: "write_through" });
             if (streak > 0)
                 metrics.inc("breaker_writethrough_failed_total", { backend: backend.kind });
             if (streak === 3)

package/dist/boot/web-admin.d.ts

@@ -4,11 +4,13 @@ import { buildPricing } from "../budget.js";
 import { type Scenario, type ScenarioDeps, type ScenarioDetail } from "../capabilities/scenarios.js";
 import type { LoadedSkill } from "../capabilities/skills.js";
 import { type ServiceConfig } from "../config.js";
+import { type CenterIdentityNotice } from "../center-config-tier.js";
 import { type CenterCredentialHealthView } from "../center-credential-renewer.js";
 import { type ModelKeyRef } from "../key-resolver.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type SealedKeyPublicFace } from "../sealed-key.js";
+import type { CheckpointCtxSealing } from "../http/checkpoint-ctx.js";
 import type { UnpricedCeilingVerdict } from "./unpriced-ceiling-verdict.js";
 import type { ConsolidationSeatWatch } from "./memory-consolidation.js";
 import type { DegradeRouteWatch } from "../brain.js";
@@ -44,6 +46,11 @@ export interface WebAdminRuntime {
      *  三形都建),失败 ⇒ `undefined`(`sealed_key_store_unavailable` 那一行已响亮告警)。店只在 boot 建一次、进程内不换钥匙,
      *  所以这是一个值,不是 getter。唯一读者 = `GET /v1/capabilities` 的 `sealedKey` 段(stage-10 经 deps 交过去)。 */
     readonly sealedKeyPublic: SealedKeyPublicFace | undefined;
+    /** S-1907:**停驻行凭据封签器**(`sealed-key.ts` `ensureCheckpointCtxSealing`:这一域自己的保管店 `<数据根>/sealed-key/checkpoint-ctx-keys/` —— 一个域一对钥匙,
+     *  与模型钥匙那只店不共用;封 = 最新公钥;开 = 按封签上的 id 精确选私钥、只认绑着本行会话的停驻行信封)。present-iff 这一域建店并自检成功(与模型钥匙店各自成败)。
+     *  读者:HTTP 面(`ServiceDeps.checkpointCtxSealing`,stage-10)、leader worker 的续跑上下文(stage-09)与一次性迁移 M28(stage-06);起服第 6 段对
+     *  「checkpoint 店在、它不在」拒启。私钥、保管目录、持有 id 列表照旧够不着(S-737 的结构性那一半不变)。 */
+    readonly checkpointCtxSealing: CheckpointCtxSealing | undefined;
     /** core `CenterPromptSource`(RunnerDeps / subRunner 必须同实例)。 */
     readonly promptSource: CenterPromptSource;
     /** center skills overlay → plugins 消费 → boot LKG 落盘/skill-stale 判定 → mcp 解析。返回新的 skills 表。 */
@@ -83,6 +90,9 @@ export interface WebAdminRuntime {
     stopRefreshLoop(): void;
     /** S-698:`/health.centerCredential` 的取值口 —— 凭证来源的健康态 + 续签器状态;都健康 / 没有中心 ⇒ `undefined`(键缺席)。 */
     centerCredentialState(): CenterCredentialHealthView | undefined;
+    /** S-667:`/health.centerIdentityNotice` 的取值口 —— 中心凭证换人后的**最近一条**通告(`center_identity_demoted` 已降到无中心配置档 / `center_identity_landed`
+     *  新身份的配置已换上;码、冻结句与状态机见 `center-config-tier.ts`)。从未换过人 / 没有中心 ⇒ `undefined`(键缺席)。值形就是 wire 形 `{ code, message, at }`。 */
+    centerIdentityNoticeState(): CenterIdentityNotice | undefined;
     /** [ref](core 5.50 [ref]):mid-turn MCP 撤销台账读口,喂 `RunnerDeps.mcpRevocations` 席。
      *  **取走即声明接线**——调用本方法后,restart 信号的 mcp 片对纯删除向豁免(台账即时承接);
      *  不取 ⇒ 旧 restart 语义逐字保留(fail-closed)。 */

package/dist/boot/web-admin.js

@@ -11,14 +11,17 @@ import { applyCenterPlugins } from "../capabilities/center-plugins.js";
 import { applyCenterArtifact, centerSourceOnError, withPromptArtifactBackfill } from "../capabilities/center-prompts.js";
 import { centerScenarios, centerScenarioDetails } from "../capabilities/scenarios.js";
 import { isRosterGateArmed } from "../config.js";
+import { toolsRunOnThisHost } from "../task-cwd.js";
 import { defaultLkgPath, defaultSkillCacheDir, saveLkg, loadLkg, legacyV1LkgPath, migrateV1Lkg } from "../config-lkg.js";
 import { answerStillCurrent, centerStateBin, credentialIdentityNow, judgeCenterCredentialAtBoot } from "../center-credential.js";
+import { createCenterConfigTier } from "../center-config-tier.js";
 import { buildCenterCredentialHealthView, createCenterCredentialRenewer } from "../center-credential-renewer.js";
 import { centerManagedConfigKeys } from "../web-admin-client/apply-effective.js";
 import { createConfigProvider, raceBootFetch, serviceConfigSourceKind, BOOT_FETCH_DEFERRED } from "../config-provider.js";
+import { ConfigDirUntrustedError } from "../config-dir-trust.js";
 import { createKeyResolver } from "../key-resolver.js";
-import { buildSealedKeyPublicFace, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
-import { applyEffective, applyCenterReadFace, buildReadFaceBaseline, buildReadFaceSwapCandidate, restoreReadFaceBaseline, mutateInPlace, logEffectiveDiff, applySkillsManifest, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, fetchPromptArtifact } from "../web-admin-client/facade.js";
+import { buildSealedKeyPublicFace, ensureCheckpointCtxSealing, ensureSealedKeyStore, reportExecutionPublicKey } from "../sealed-key.js";
+import { applyEffective, applyCenterReadFace, buildReadFaceBaseline, buildReadFaceSwapCandidate, restoreReadFaceBaseline, mutateInPlace, logEffectiveDiff, applySkillsManifest, resolveMcpServers, resolveA2aPeers, restartReasons, modelPlaneChanged, withModelPlaneOf, fullyLandedForLkg, NO_CENTER_EFFECTIVE, isNoCenterEffective, fetchPromptArtifact } from "../web-admin-client/facade.js";
 import { buildConfigHandoff, buildRestartSignal, configHandoffMissing } from "../fleet/engine-signal.js";
 import { createMcpRevocationLedger, enabledMcpEntries } from "../web-admin-client/mcp-revocation.js";
 import { buildUnreadConfigFileFields, buildUnreadConfigKeyFields } from "../web-admin-client/read-warnings.js";
@@ -26,6 +29,7 @@ import { CONFIG_DOMAIN_INVALID_NOTE, buildCandidateRejectedFields, candidateReje
 import { SHA256_HEX_RE } from "../digest-form.js";
 import { BOOT_REJUDGE_OF_REFUSED_GROUP, createConfigApplyLedger, modelPlaneCommitted, refusedGroups } from "../web-admin-client/apply-ledger.js";
 import { announceReadDenyRows, buildDeploymentPostureSeats } from "./runner-deps.js";
+import { echoCallerText } from "../caller-text-echo.js";
 function lkgReadNote(scope) {
     switch (scope) {
         case "whole":
@@ -86,6 +90,21 @@ export async function createWebAdminRuntime(ctx) {
         ? createCenterCredentialRenewer({ source: cc.credential, centerUrl: cc.baseUrl, leadMs: config.centerCredentialRenewLeadMs, logger })
         : undefined;
     const currentIdentity = () => (cc === undefined ? undefined : credentialIdentityNow(cc.credential));
+    const tier = createCenterConfigTier();
+    const announceTier = (n) => {
+        switch (n.code) {
+            case "center_identity_demoted":
+                logger.warn(n.code, { at: n.at, message: n.message, ...(n.retained !== undefined ? { retained: n.retained } : {}), note: "the credential identity changed: the previous account's center configuration is dropped (every center-supplied hot face is back on its env base, the center prompt layer is withdrawn, the Runners run the env model table) and a pull for the new identity is under way; skills / MCP / A2A / scenarios are baked at boot and stay the previous account's until a restart (see /health.restart)" });
+                return;
+            case "center_identity_landed":
+                logger.info(n.code, { at: n.at, message: n.message });
+                return;
+            default: {
+                const unknownCode = n.code;
+                throw new Error(`announceTier: unknown notice code ${JSON.stringify(unknownCode)}`);
+            }
+        }
+    };
     const candidateIdentity = new WeakMap();
     const candidateIdentityOf = (eff) => candidateIdentity.get(eff);
     const validatorIdentity = new Map();
@@ -114,9 +133,10 @@ export async function createWebAdminRuntime(ctx) {
         }
         return r;
     };
+    const sealedKeyDir = join(config.localDataRoot ?? localRoot, "sealed-key");
     let sealedKeys;
     try {
-        sealedKeys = await ensureSealedKeyStore(join(config.localDataRoot ?? localRoot, "sealed-key"), logger);
+        sealedKeys = await ensureSealedKeyStore(sealedKeyDir, logger);
         void reportExecutionPublicKey({
             baseUrl: cc?.baseUrl,
             adminToken: process.env[WEB_ADMIN_ENV.adminToken],
@@ -128,11 +148,19 @@ export async function createWebAdminRuntime(ctx) {
     catch (err) {
         logger.warn("sealed_key_store_unavailable", { err: String(err), note: "sealed api keys cannot be unsealed on this host — models carrying sealedApiKey will fail loud per-model" });
     }
+    let checkpointCtxSealing;
+    try {
+        checkpointCtxSealing = await ensureCheckpointCtxSealing(sealedKeyDir, logger);
+    }
+    catch (err) {
+        logger.warn("checkpoint_ctx_sealing_unavailable", { err: err instanceof Error ? err.message : String(err), note: "suspended tasks' request credentials cannot be sealed on this host; with durable approvals on the boot refuses — make <data root>/sealed-key/checkpoint-ctx-keys/ creatable and chmod-able by the service, or repair / remove a key file there whose public and private halves do not belong together" });
+    }
     const configProvider = serviceConfigSourceKind(config) !== undefined
         ? createConfigProvider({
             ...(config.configProvider ? { provider: config.configProvider } : {}),
             ...(cc ? { webAdmin: { baseUrl: cc.baseUrl, credential: cc.credential, worker: cc.worker, dryRun: cc.dryRun } } : {}),
             localDir: localRoot,
+            localOwnerUid: config.configLocalOwnerUid,
             ...(config.configLkgEnabled ? { skillBodyCacheDir: defaultSkillCacheDir(config) } : {}),
         })
         : undefined;
@@ -301,6 +329,10 @@ export async function createWebAdminRuntime(ctx) {
     if (configProvider && !cc?.dryRun)
         await rebasePromptState(promptStateIdentity, "boot");
     const adoptCenterPrompts = async (eff, prompts, phase) => {
+        if (isNoCenterEffective(eff)) {
+            await rebasePromptState(undefined, phase);
+            return;
+        }
         const adoptedIdentity = candidateIdentityOf(eff);
         if (adoptedIdentity !== undefined && adoptedIdentity !== promptStateIdentity) {
             await rebasePromptState(adoptedIdentity, phase);
@@ -348,14 +380,20 @@ export async function createWebAdminRuntime(ctx) {
         return ledger;
     };
     const noteHandoff = (next) => {
-        const applied = next.applied ?? handoff.applied;
+        const applied = next.noneApplied === true ? undefined : (next.applied ?? handoff.applied);
         const durable = next.durable ?? handoff.durable;
         handoff = { ...(applied !== undefined ? { applied } : {}), ...(durable !== undefined ? { durable } : {}) };
         latchHandoff();
     };
-    const markApplied = (gen, version) => {
-        applyLedger.applied(gen, version);
-        noteHandoff({ applied: version });
+    const markApplied = (gen, eff) => {
+        applyLedger.applied(gen, eff.version);
+        if (isNoCenterEffective(eff))
+            noteHandoff({ noneApplied: true });
+        else
+            noteHandoff({ applied: eff.version });
+        const landed = tier.committed(candidateIdentityOf(eff));
+        if (landed !== undefined)
+            announceTier(landed);
     };
     let lkgBooted = false;
     let bootLkgCandidate;
@@ -480,7 +518,7 @@ export async function createWebAdminRuntime(ctx) {
             const lkgIdentity = candidateIdentityOf(lkgR.effective);
             if (lkgSurvivesRestart && lkgIdentity !== undefined)
                 noteHandoff({ durable: { version: lkgR.effective.version, identity: lkgIdentity } });
-            markApplied(lkgGen, lkgR.effective.version);
+            markApplied(lkgGen, lkgR.effective);
             await adoptCenterPrompts(lkgR.effective, lkgR.prompts, "boot-lkg");
             const lkgPlane = modelPlaneCommitted(lkgReport);
             if (lkgPlane)
@@ -585,7 +623,7 @@ export async function createWebAdminRuntime(ctx) {
                                 recordApply(rep);
                             },
                         });
-                        markApplied(bootGen, r.effective.version);
+                        markApplied(bootGen, r.effective);
                         const bootClean = fullyLandedForLkg(r, bootReport);
                         if (bootClean)
                             ccEtag = r.etag;
@@ -622,11 +660,13 @@ export async function createWebAdminRuntime(ctx) {
             }
         }
         catch (err) {
+            if (err instanceof ConfigDirUntrustedError)
+                throw err;
             if (bootApplyPhase)
                 logger.warn("config_apply_refused", { source: configProvider.kind, err: String(err), note: "the pulled candidate failed to apply at boot — falling back to the LKG / env; this is not a reachability failure" });
             else
                 logger.warn("config_source_unreachable_using_env", { source: configProvider.kind, err: String(err) });
-            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${String(err).slice(0, 120)}`);
+            await bootFallBackWhole(`${bootApplyPhase ? "boot apply refused" : "boot fetch failed"}: ${echoCallerText(String(err), { maxChars: 120 })}`);
         }
         if (!dryRun && cc !== undefined && currentIdentity() !== promptStateIdentity)
             await rebasePromptState(currentIdentity(), "boot-end");
@@ -669,9 +709,11 @@ export async function createWebAdminRuntime(ctx) {
             announceReadDenyRows(config, logger);
     };
     let ccTimer;
+    let unwatchCredential;
     return {
         providerKind: configProvider?.kind,
         sealedKeyPublic: sealedKeys === undefined ? undefined : buildSealedKeyPublicFace(sealedKeys),
+        checkpointCtxSealing,
         promptSource,
         takeMcpRevocations: () => {
             mcpRevocationWired = true;
@@ -707,6 +749,7 @@ export async function createWebAdminRuntime(ctx) {
                 const pluginOut = await applyCenterPlugins(skills, effective, {
                     cacheRoot: join(config.localDataRoot ?? join(homedir(), ".ai-agent"), "plugin-cache"),
                     allowHosts: config.pluginsAllowHosts,
+                    toolsShareThisFilesystem: toolsRunOnThisHost(config),
                     logger,
                 }).catch((err) => {
                     logger.warn("center_plugins_apply_failed", { error: err instanceof Error ? err.message : String(err) });
@@ -839,6 +882,69 @@ export async function createWebAdminRuntime(ctx) {
             if (configProvider) {
                 const ccRef = config.webAdmin;
                 let refreshInFlight = false;
+                let followUp = false;
+                let ownRead = false;
+                const commitHot = async (c) => {
+                    const { eff, prompts, gen, phase } = c;
+                    const noCenter = isNoCenterEffective(eff);
+                    const planeChanged = noCenter || modelPlaneChanged(appliedPlaneEff, eff);
+                    let report;
+                    const committed = applyEffective(config, eff, logger, {
+                        leg: "hot",
+                        checkpointStorePresent,
+                        sealedKeys,
+                        generation: gen,
+                        report: (rep) => {
+                            report = rep;
+                            recordApply(rep);
+                        },
+                        ...(planeChanged ? { swapPlane: swapRunnerDeps } : {}),
+                    });
+                    if (!committed)
+                        return { committed: false, report, planeCommitted: false };
+                    mutateInPlace(pricing, buildPricing(config.models));
+                    keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
+                    limitSync?.sync();
+                    ceilingVerdict?.judge();
+                    if (phase !== "boot-deferred")
+                        mcpRevocations.applyEnabledEntries(enabledMcpEntries(eff.mcp));
+                    applyLiveReadFace(eff, swapRunnerDeps, phase);
+                    markApplied(gen, eff);
+                    const planeCommitted = modelPlaneCommitted(report);
+                    if (planeCommitted)
+                        appliedPlaneEff = noCenter ? undefined : eff;
+                    planeDeferredNoHandoff = undefined;
+                    await adoptCenterPrompts(eff, prompts, phase);
+                    if (planeCommitted)
+                        markRosterLanded(eff);
+                    if (tier.drifted(currentIdentity()))
+                        requestTick();
+                    return { committed: true, report, planeCommitted };
+                };
+                const demoteToNoCenter = async (awaiting) => {
+                    const gen = reserveArrivalGeneration();
+                    applyLedger.seenTarget(gen, NO_CENTER_EFFECTIVE.version);
+                    const hot = await commitHot({ eff: NO_CENTER_EFFECTIVE, prompts: undefined, gen, phase: "no-center" });
+                    if (!hot.committed) {
+                        throw new Error("the no-center tier was refused (the Runners did not accept the env model table) — the previous account's center configuration is still in force; retried next tick");
+                    }
+                    if (hot.report !== undefined && !hot.report.fullyApplied) {
+                        logger.warn("center_identity_demotion_partial", { groups: refusedGroups(hot.report).map((g) => g.group), note: "a group of the no-center tier was refused — that group keeps its previous values (loud; the env base for that group could not be applied)" });
+                    }
+                    noteCandidateVerdict(gen, undefined);
+                    latestEffective = undefined;
+                    ccEtag = undefined;
+                    announceTier(tier.demote(awaiting, hot.report !== undefined ? refusedGroups(hot.report).map((g) => g.group) : []));
+                };
+                const reconcileCenterIdentity = async (identity) => {
+                    if (identity === undefined || !tier.drifted(identity))
+                        return;
+                    if (tier.isDemoted()) {
+                        tier.retarget(identity);
+                        return;
+                    }
+                    await demoteToNoCenter(identity);
+                };
                 const refreshTick = async (arrival) => {
                     if (refreshInFlight)
                         return "ok";
@@ -850,6 +956,15 @@ export async function createWebAdminRuntime(ctx) {
                 const refreshTickRan = async (arrival) => {
                     refreshInFlight = true;
                     try {
+                        let ownIdentity;
+                        ownRead = true;
+                        try {
+                            ownIdentity = currentIdentity();
+                        }
+                        finally {
+                            ownRead = false;
+                        }
+                        await reconcileCenterIdentity(ownIdentity);
                         await retryPendingCatalog("refresh-retry");
                         if (planeDeferredNoHandoff) {
                             metrics.inc("models_tiers_plane_deferred_stuck_total");
@@ -875,6 +990,7 @@ export async function createWebAdminRuntime(ctx) {
                             }
                         }
                         if (r) {
+                            await reconcileCenterIdentity(candidateIdentityOf(r.effective));
                             const tickGen = arrival !== undefined ? useArrivalGeneration(r.effective.version, arrival.ordinal) : generationOf(r.effective.version);
                             applyLedger.seenTarget(tickGen, r.effective.version);
                             const verdict = judgeConfigCandidate(r);
@@ -889,35 +1005,10 @@ export async function createWebAdminRuntime(ctx) {
                                 ccEtag = r.etag;
                             }
                             else {
-                                const planeChanged = modelPlaneChanged(appliedPlaneEff, r.effective);
-                                let applyReport;
-                                const committed = applyEffective(config, r.effective, logger, {
-                                    leg: "hot",
-                                    checkpointStorePresent,
-                                    sealedKeys,
-                                    generation: tickGen,
-                                    report: (rep) => {
-                                        applyReport = rep;
-                                        recordApply(rep);
-                                    },
-                                    ...(planeChanged ? { swapPlane: swapRunnerDeps } : {}),
-                                });
-                                if (!committed)
+                                const hot = await commitHot({ eff: r.effective, prompts: verdict.prompts, gen: tickGen, phase: "refresh" });
+                                if (!hot.committed)
                                     return "ok";
-                                mutateInPlace(pricing, buildPricing(config.models));
-                                keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-                                limitSync?.sync();
-                                ceilingVerdict?.judge();
-                                mcpRevocations.applyEnabledEntries(enabledMcpEntries(r.effective.mcp));
-                                applyLiveReadFace(r.effective, swapRunnerDeps, "refresh");
-                                markApplied(tickGen, r.effective.version);
-                                const tickPlane = modelPlaneCommitted(applyReport);
-                                if (tickPlane)
-                                    appliedPlaneEff = r.effective;
-                                planeDeferredNoHandoff = undefined;
-                                await adoptCenterPrompts(r.effective, verdict.prompts, "refresh");
-                                if (tickPlane)
-                                    markRosterLanded(r.effective);
+                                const applyReport = hot.report;
                                 if (!fullyLandedForLkg(r, applyReport)) {
                                     ccEtag = undefined;
                                     const refused = applyReport ? refusedGroups(applyReport) : [];
@@ -962,13 +1053,39 @@ export async function createWebAdminRuntime(ctx) {
                         return inFlight;
                     const p = refreshTick(arrival).finally(() => {
                         inFlight = undefined;
+                        afterLane();
                     });
                     inFlight = p;
                     return p;
                 };
+                const requestTick = () => {
+                    if (ccTimer === undefined || ownRead)
+                        return;
+                    if (inFlight !== undefined || refreshInFlight) {
+                        followUp = true;
+                        return;
+                    }
+                    queueMicrotask(() => void runTick());
+                };
+                const afterLane = () => {
+                    if (!followUp)
+                        return;
+                    followUp = false;
+                    if (tier.drifted(currentIdentity()))
+                        requestTick();
+                };
+                unwatchCredential =
+                    ccRef !== undefined && !ccRef.dryRun && configProvider.kind === "remote"
+                        ? ccRef.credential.onRead((read) => {
+                            if (tier.drifted(read.identity))
+                                requestTick();
+                        })
+                        : undefined;
                 manualRefresh = runTick;
                 ccTimer = setInterval(() => void runTick(), 60_000);
                 ccTimer.unref?.();
+                if (tier.drifted(currentIdentity()))
+                    requestTick();
                 const deferredBootApply = async (r, arrivalGen) => {
                     if (!r)
                         return;
@@ -985,6 +1102,7 @@ export async function createWebAdminRuntime(ctx) {
                     }
                     finally {
                         refreshInFlight = false;
+                        afterLane();
                     }
                 };
                 const deferredBootApplyInner = async (r, lateGen) => {
@@ -1001,34 +1119,10 @@ export async function createWebAdminRuntime(ctx) {
                         ccEtag = r.etag;
                         return;
                     }
-                    const planeChangedLate = modelPlaneChanged(appliedPlaneEff, r.effective);
-                    let applyReportLate;
-                    const committedLate = applyEffective(config, r.effective, logger, {
-                        leg: "hot",
-                        checkpointStorePresent,
-                        sealedKeys,
-                        generation: lateGen,
-                        report: (rep) => {
-                            applyReportLate = rep;
-                            recordApply(rep);
-                        },
-                        ...(planeChangedLate ? { swapPlane: swapRunnerDeps } : {}),
-                    });
-                    if (!committedLate)
+                    const hotLate = await commitHot({ eff: r.effective, prompts: lateVerdict.prompts, gen: lateGen, phase: "boot-deferred" });
+                    if (!hotLate.committed)
                         return;
-                    mutateInPlace(pricing, buildPricing(config.models));
-                    keyResolver = createKeyResolver(config.modelApiKeyEnv, process.env, config.modelApiKeys);
-                    limitSync?.sync();
-                    ceilingVerdict?.judge();
-                    applyLiveReadFace(r.effective, swapRunnerDeps, "boot-deferred");
-                    markApplied(lateGen, r.effective.version);
-                    const latePlane = modelPlaneCommitted(applyReportLate);
-                    if (latePlane)
-                        appliedPlaneEff = r.effective;
-                    planeDeferredNoHandoff = undefined;
-                    await adoptCenterPrompts(r.effective, lateVerdict.prompts, "boot-deferred");
-                    if (latePlane)
-                        markRosterLanded(r.effective);
+                    const applyReportLate = hotLate.report;
                     if (!fullyLandedForLkg(r, applyReportLate)) {
                         ccEtag = undefined;
                         const refusedLate = applyReportLate ? refusedGroups(applyReportLate) : [];
@@ -1069,10 +1163,13 @@ export async function createWebAdminRuntime(ctx) {
                 ccTimer = undefined;
             }
             credentialRenewer?.stop();
+            unwatchCredential?.();
+            unwatchCredential = undefined;
         },
         centerCredentialState() {
             return cc === undefined ? undefined : buildCenterCredentialHealthView(cc.credential.health(), credentialRenewer);
         },
+        centerIdentityNoticeState: () => tier.notice(),
     };
 }
 //# sourceMappingURL=web-admin.js.map

package/dist/boot/workflow-orchestration.d.ts

@@ -15,6 +15,7 @@ import { type WorkflowRun, type WorkflowRunStore } from "@sema-agent/core";
 import type { ServiceConfig } from "../config.js";
 import { FleetEventBus } from "../fleet/fleet-bus.js";
 import { type WorkflowAgentSessionIndex } from "../orchestration/workflow-agent-session-index.js";
+import type { WorkflowParkDecisionStore } from "../orchestration/workflow-park-decision.js";
 import type { Logger } from "../observability/logger.js";
 import type { Metrics } from "../observability/metrics.js";
 import { type WorkflowCompletionInbox } from "../orchestration/workflow-completion-inbox.js";
@@ -49,5 +50,6 @@ export declare function createWorkflowOrchestration(ctx: WorkflowOrchestrationCt
         publishTerminalFleetRow?: (id: string, run: WorkflowRun) => void;
     };
     workflowAgentSessionIndex: WorkflowAgentSessionIndex | undefined;
+    workflowParkDecisions: WorkflowParkDecisionStore | undefined;
 };
 //# sourceMappingURL=workflow-orchestration.d.ts.map

package/dist/boot/workflow-orchestration.js

@@ -66,6 +66,7 @@ export function createWorkflowOrchestration(ctx) {
                 ? backend.workflowAgentSessionIndex()
                 : new LocalWorkflowAgentSessionIndex(join(config.localDataRoot ?? localRoot, "workflows"), undefined))
         : undefined;
+    const workflowParkDecisions = config.selfOrchestrationEnabled && backend !== undefined && (sqlWorkflowRunStore !== undefined || backend.kind === "local") ? backend.workflowParkDecisions?.() : undefined;
     const workflowRunStore = baseWorkflowRunStore
         ? new JournalingWorkflowRunStore(baseWorkflowRunStore, workflowNotifyGate, fleetBus, workflowAgentSessionIndex)
         : undefined;
@@ -82,7 +83,7 @@ export function createWorkflowOrchestration(ctx) {
     return {
         sqlWorkflowRunStore, workflowNotifyJournal, workflowCompletionInbox, deliverWorkflowCompletion,
         workflowNotifyGate, fleetBus, workflowRunStore, workflowJournalStore, outcomeSink,
-        workflowAgentRegistry, subagentSteerRegistry, workflowRecoverOpts, workflowAgentSessionIndex,
+        workflowAgentRegistry, subagentSteerRegistry, workflowRecoverOpts, workflowAgentSessionIndex, workflowParkDecisions,
     };
 }
 //# sourceMappingURL=workflow-orchestration.js.map

package/dist/brain.js

@@ -9,6 +9,7 @@ import { openaiRouteBaseUrl } from "./model-route-endpoint.js";
 import { catalogEntryFingerprint } from "./web-admin-client/restart-signal.js";
 import { buildDisplaySafeRefusal, buildDisplaySafeUrl } from "./trace/redact.js";
 import { createModelReachBrain } from "./model-unreachable-notice.js";
+import { breakerKeyOf, routeDigestOf } from "./breaker-key.js";
 function isOffDeploymentRoot(baseUrl, config) {
     if (!baseUrl)
         return false;
@@ -20,6 +21,9 @@ function isOffDeploymentRoot(baseUrl, config) {
 function deploymentGatewayRoots(config) {
     return config.gatewayBaseUrl !== undefined ? [config.gatewayBaseUrl, ...config.gatewayFallbackUrls] : [];
 }
+function breakerRoutesOf(config, r) {
+    return r.circuitBreaker ? deploymentGatewayRoots(config).slice(0, -1) : [];
+}
 function deploymentGatewayKey(config) {
     return config.gatewayBaseUrl !== undefined ? config.gatewayApiKey : undefined;
 }
@@ -53,6 +57,7 @@ export function createBrainAssembly(config, deps = {}) {
             ? { maxRetries: FAST_FAIL_MAX_RETRIES }
             : {};
     const routes = deploymentGatewayRoots(config);
+    const breakerRoutes = breakerRoutesOf(config, r);
     const openaiBrains = routes.map((baseUrl, i) => {
         const gatewayKey = deploymentGatewayKey(config);
         const brain = constructRouteBrain(i === 0 ? "gateway route" : `gateway fallback route[${i - 1}]`, [baseUrl], () => createOpenAIBrain({
@@ -62,13 +67,12 @@ export function createBrainAssembly(config, deps = {}) {
             fetchImpl,
             ...timeouts,
         }));
-        const isLast = i === routes.length - 1;
-        return r.circuitBreaker && !isLast
+        return i < breakerRoutes.length
             ? createCircuitBreakerBrain(brain, {
                 failureThreshold: r.failureThreshold,
                 cooldownMs: r.cooldownMs,
                 state: breakerState,
-                key: (m) => `${m.provider ?? "openai"}:${m.id}@${baseUrl}`,
+                key: (m) => breakerKeyOf(m, baseUrl),
             })
             : brain;
     });
@@ -206,6 +210,7 @@ export function brainSummary(config) {
         idleTimeoutMs: r.idleTimeoutMs,
         circuitBreaker: breakerActive,
         circuitBreakerRequested: r.circuitBreaker,
+        circuitBreakerRoutes: breakerRoutesOf(config, r).map((u) => ({ route: buildDisplaySafeUrl(u), digest: routeDigestOf(u) })),
         gatewayRetryCap: config.gatewayMaxRetries !== undefined
             ? `env:${config.gatewayMaxRetries}`
             : hasFailover || r.circuitBreaker || config.degrade?.reactive

package/dist/breaker-key.d.ts

@@ -0,0 +1,6 @@
+import { type Model } from "@sema-agent/core";
+/** 一条路由的身份摘要(键的路由段;启动日志把它与该路由的展示串并排印出,运维据此把错误文本 / 表行对回路由)。 */
+export declare function routeDigestOf(baseUrl: string): string;
+/** 断路器键:`<头段>@<路由摘要>`,头段 = `<provider>:<model id>`(放不下列宽预算时见 {@link boundedHead})。provider 缺席按 `openai`(与 core 默认键同一个前半)。恒 ≤ 190 字节。 */
+export declare function breakerKeyOf(model: Pick<Model, "provider" | "id">, baseUrl: string): string;
+//# sourceMappingURL=breaker-key.d.ts.map

package/dist/breaker-key.js

@@ -0,0 +1,29 @@
+import { createHash } from "node:crypto";
+import { routeKeyOf } from "@sema-agent/core";
+const ROUTE_DIGEST_HEX = 24;
+const BREAKER_KEY_MAX_BYTES = 190;
+const HEAD_MAX_BYTES = BREAKER_KEY_MAX_BYTES - 1 - ROUTE_DIGEST_HEX;
+const HEAD_DIGEST_HEX = 16;
+const sha256Hex = (text) => createHash("sha256").update(text, "utf8").digest("hex");
+export function routeDigestOf(baseUrl) {
+    return sha256Hex(routeKeyOf(baseUrl)).slice(0, ROUTE_DIGEST_HEX);
+}
+export function breakerKeyOf(model, baseUrl) {
+    return `${boundedHead(`${model.provider ?? "openai"}:${model.id}`)}@${routeDigestOf(baseUrl)}`;
+}
+function boundedHead(head) {
+    if (Buffer.byteLength(head, "utf8") <= HEAD_MAX_BYTES)
+        return head;
+    const tail = `~${sha256Hex(head).slice(0, HEAD_DIGEST_HEX)}`;
+    let prefix = "";
+    let used = 0;
+    for (const ch of head) {
+        const n = Buffer.byteLength(ch, "utf8");
+        if (used + n > HEAD_MAX_BYTES - tail.length)
+            break;
+        prefix += ch;
+        used += n;
+    }
+    return `${prefix}${tail}`;
+}
+//# sourceMappingURL=breaker-key.js.map

package/dist/budget.js

@@ -2,6 +2,7 @@ import { isModelPriced, modelCostToPricing } from "@sema-agent/core";
 import { currentPrincipal } from "./observability/principal-context.js";
 import { isPermissionRuleEventKind, permissionRuleEventWordOf } from "./observability/permission-rule-events.js";
 import { promptManifestRecordOf, configAssembledRecordOf } from "./observability/prompt-manifest.js";
+import { crossBoundaryTaintEventData } from "./trace/project.js";
 export function buildPricing(models) {
     const pricing = {};
     for (const m of Object.values(models))
@@ -114,7 +115,10 @@ export function createTracer(metrics, costQuota, modelUsage, fleetUsage, fleetLe
         else if (e.kind === "config.assembled") {
             const rec = configAssembledRecordOf(e);
             if (rec)
-                promptManifests?.recordConfig(e.taskId, rec);
+                promptManifests?.recordCompanion(e.taskId, "config_assembled", rec);
+        }
+        else if (e.kind === "permission.cross_boundary_taint") {
+            promptManifests?.recordCompanion(e.taskId, "cross_boundary_taint", crossBoundaryTaintEventData(e));
         }
         else if (e.kind === "compaction.phase_timings") {
             const d = e.durationMs;